Function at 0x1400350a0
Capabilities:
Check if file exists
Copy file
Get common file path
Get file attributes
Move file
Query or enumerate registry value
Set file attributes
Set registry value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x1260
call fcn.140070d90
sub rsp, rax
mov rax, qword [0x1400e00c0]
xor rax, rsp
mov qword [rsp + 0x1250], rax
mov r13, rcx
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x88], rcx
xor r15d, r15d
mov r12d, r15d
mov dword [rsp + 0x48], r15d
call fcn.1400021b0
mov rcx, rax
test rax, rax
je 0x14003873a
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x80], rax
call fcn.1400021b0
mov rcx, rax
test rax, rax
je 0x140038745
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
lea rdx, str.This_process_will_remove_AMD_drivers_and_applications_such_as_graphics_drivers__audio_drivers__and_AMD_Software._This_process_will_not_remove_or_modify_AMD_chipset_drivers.
lea rcx, [rsp + 0x80]
call fcn.140041c90
lea rdx, [0x1400bebc0]
lea rcx, [rsp + 0x78]
call fcn.140041c90
mov qword [rsp + 0x440], r15
mov qword [rsp + 0x450], r15
mov qword [rsp + 0x458], 7
mov word [rsp + 0x440], r15w
mov qword [rsp + 0x420], r15
mov qword [rsp + 0x430], r15
mov qword [rsp + 0x438], 7
mov word [rsp + 0x420], r15w
lea rcx, [0x1400e0e10]
cmp qword [0x1400e0e28], 8
cmovae rcx, qword [0x1400e0e10]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1400354d7
lea r8, [rsp + 0x440]
mov edx, 0x7d
lea rcx, [rsp + 0x4e0]
call fcn.14002e550
mov rbx, rax
lea rax, [rsp + 0x440]
cmp rax, rbx
je 0x14003525d
mov rdx, qword [rsp + 0x458]
cmp rdx, 8
jb 0x140035236
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x440]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035231
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140038750
call fcn.140070654
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0x440], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rsp + 0x450], xmm1
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 7
mov word [rbx], r15w
mov rdx, qword [rsp + 0x4f8]
cmp rdx, 8
jb 0x1400352a5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x4e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400352a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140038750
call fcn.140070654
lea r8, [rsp + 0x420]
mov edx, 0x7e
lea rcx, [rsp + 0x480]
call fcn.14002e550
mov rbx, rax
lea rax, [rsp + 0x420]
cmp rax, rbx
je 0x14003533e
mov rdx, qword [rsp + 0x438]
cmp rdx, 8
jb 0x140035317
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x420]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035312
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140038756
call fcn.140070654
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0x420], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rsp + 0x430], xmm1
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 7
mov word [rbx], r15w
mov rdx, qword [rsp + 0x498]
cmp rdx, 8
jb 0x140035387
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x480]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035381
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140038756
call fcn.140070654
nop
mov rax, qword [rsp + 0x80]
lea rdx, [rax - 0x18]
mov rbx, qword [rdx]
cmp dword [rdx + 8], 0
je 0x1400353b8
mov ecx, dword [rdx + 0x10]
shr ecx, 0x1f
test cl, cl
je 0x1400353e4
cmp dword [rdx + 0xc], 0
jl 0x14003875c
mov dword [rdx + 8], r15d
mov word [rax], r15w
mov rdi, 0xffffffffffffffff
lea rdx, [rsp + 0x440]
cmp qword [rsp + 0x458], 8
jb 0x140035417
mov rdx, qword [rsp + 0x440]
test rdx, rdx
jne 0x140035417
mov eax, r15d
jmp 0x14003542a
mov rdi, 0xffffffffffffffff
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140035400
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x80], rax
jmp 0x1400353bf
mov rax, rdi
nop word [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x140035420
mov r8d, eax
lea rcx, [rsp + 0x80]
call fcn.1400417f0
nop
mov rax, qword [rsp + 0x78]
lea rdx, [rax - 0x18]
mov rbx, qword [rdx]
cmp dword [rdx + 8], 0
je 0x140035492
mov ecx, dword [rdx + 0x10]
shr ecx, 0x1f
test cl, cl
je 0x14003546b
cmp dword [rdx + 0xc], 0
jl 0x140038767
mov dword [rdx + 8], r15d
mov word [rax], r15w
jmp 0x140035492
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140035480
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
lea rdx, [rsp + 0x420]
cmp qword [rsp + 0x438], 8
jb 0x1400354b7
mov rdx, qword [rsp + 0x420]
test rdx, rdx
jne 0x1400354b7
mov eax, r15d
jmp 0x1400354ca
mov rax, rdi
nop word [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x1400354c0
mov r8d, eax
lea rcx, [rsp + 0x78]
call fcn.1400417f0
mov qword [rsp + 0x110], r15
cmp byte [r13 + 0x452], 0
jne 0x14003553a
mov r9d, MsiGetPropertyW
mov r8, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x80]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 1
jne 0x14003555b
lea ecx, [rax + 0x27]
call fcn.1400703c8
mov qword [rsp + 0x40], rax
mov r8, r13
mov edx, 0xa1
mov rcx, rax
call fcn.14003bb60
nop
mov r12d, 1
mov dword [rsp + 0x48], r12d
mov qword [rsp + 0x110], rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
jns 0x14003556a
mov edx, eax
lea rcx, str.Unexpected_error:_CoInitializeEx___failed_with_0x_08x_n
call fcn.140002ac0
jmp 0x1400356de
mov dword [0x1400e50c8], 1
jmp 0x1400386cb
call fcn.14002e1a0
test eax, eax
jne 0x140035584
lea rcx, str.Unexpected_error:_failed_to_initialize_COM_security_n
call fcn.140002ac0
jmp 0x1400356de
mov qword [rsp + 0x760], 0x64
mov qword [rsp + 0x768], r15
mov edx, 0x100
lea rcx, [rsp + 0x770]
lea r8, str.AMDCleanupUtility_Restore_Point
lea rax, [rsp + 0x770]
sub r8, rax
nop word [rax + rax]
lea rax, [rdx + 0x7ffffefe]
test rax, rax
je 0x1400355ee
movzx eax, word [r8 + rcx]
test ax, ax
je 0x1400355e5
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x1400355c0
jmp 0x1400355ea
test rdx, rdx
jne 0x1400355ee
sub rcx, 2
mov word [rcx], r15w
lea rcx, str.srclient.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rdi, rax
test rax, rax
jne 0x140035618
lea rcx, str.System_Restore_is_not_present._n
call fcn.140002ac0
jmp 0x1400356de
lea rdx, str.SRSetRestorePointW
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
jne 0x140035641
lea rcx, str.Failed_to_find_SRSetRestorePointW._n
call fcn.140002ac0
jmp 0x1400356d5
lea rdx, [rsp + 0x390]
lea rcx, [rsp + 0x760]
call rbx
test eax, eax
jne 0x14003567d
mov edx, dword [rsp + 0x390]
cmp edx, 0x422
jne 0x140035674
lea rcx, str.System_Restore_is_turned_off._n
call fcn.140002ac0
jmp 0x1400356d5
lea rcx, str.Failure_to_create_the_restore_point__error_u._n
jmp 0x1400356d0
mov rdx, qword [rsp + 0x394]
lea rcx, str.Restore_point_created__number_I64d._n
call fcn.140002ac0
mov dword [rsp + 0x760], 0x65
mov rax, qword [rsp + 0x394]
mov qword [rsp + 0x768], rax
lea rdx, [rsp + 0x390]
lea rcx, [rsp + 0x760]
call rbx
test eax, eax
jne 0x1400356d5
mov edx, dword [rsp + 0x390]
lea rcx, str.Failure_to_end_the_restore_point__error_u._n
call fcn.140002ac0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
call qword [sym.imp.ole32.dll_CoUninitialize]
cmp byte [r13 + 0x450], 0
je 0x1400386cb
lea rcx, str.___________Applications_Eligible_to_Unistall_____________
call fcn.1400262b0
mov r9d, r15d
mov dword [rsp + 0x58], r15d
movabs r14, 0x67b23a5440cf6475
mov rdi, qword [r13 + 0x2e0]
mov r8, qword [rdi + 0x168]
mov rcx, qword [rdi + 0x170]
sub rcx, r8
mov rax, r14
imul rcx
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
movsxd rsi, r9d
mov qword [rsp + 0x40], rsi
cmp rsi, rdx
jae 0x1400368d4
imul rbx, rsi, 0x278
add rbx, r8
mov rax, qword [rdi + 0x128]
mov r11, qword [rdi + 0x120]
cmp r11, rax
je 0x1400357e4
mov rsi, qword [rbx + 0x18]
mov r14, qword [rbx + 0x10]
mov rcx, rbx
cmp rsi, 8
jb 0x14003577e
mov rcx, qword [rbx]
mov rdx, qword [r11 + 0x10]
mov r10, r11
cmp qword [r11 + 0x18], 8
jb 0x14003578f
mov r10, qword [r11]
cmp rdx, r14
jne 0x1400357cc
test rdx, rdx
je 0x1400357d5
movzx r8d, word [r10]
movzx r9d, word [rcx]
cmp r8w, r9w
jb 0x1400357cc
sub r10, rcx
cmp r8w, r9w
ja 0x1400357cc
cmp rdx, 1
je 0x1400357d5
dec rdx
add rcx, 2
movzx r8d, word [r10 + rcx]
movzx r9d, word [rcx]
cmp r8w, r9w
jae 0x1400357ae
add r11, 0x20
cmp r11, rax
jne 0x140035772
mov rsi, qword [rsp + 0x40]
movabs r14, 0x67b23a5440cf6475
mov qword [r13 + 0x398], r11
mov r8, qword [rdi + 0x168]
mov rcx, qword [rdi + 0x170]
mov rax, r14
sub rcx, r8
imul rcx
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r11, qword [rdi + 0x128]
je 0x14003669b
cmp rdx, rsi
jbe 0x140038979
imul rax, rsi, 0x278
cmp byte [rax + r8 + 0x1f8], 0
je 0x1400365ee
mov dword [rsp + 0xc0], r15d
mov dword [rsp + 0x370], r15d
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SoftwareAUEP
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov edx, eax
test eax, eax
jne 0x140038772
mov rbx, qword [rsp + 0xc8]
mov qword [rsp + 0x390], rbx
or r12d, 2
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x68], 4
lea rax, [rsp + 0x68]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
mov r9d, 0x10
lea r8, str.RM_AUEPStatus
lea rdx, [0x1400bc2c0]
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
mov edx, eax
test eax, eax
jne 0x1400387a3
mov edi, dword [rsp + 0x70]
mov dword [rsp + 0x370], edi
mov dword [rsp + 0x68], 4
lea rax, [rsp + 0x68]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
mov r9d, 0x10
lea r8, str.RSX_AUEPStatus
lea rdx, [0x1400bc2c0]
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
mov edx, eax
test eax, eax
jne 0x1400387d3
mov r14d, dword [rsp + 0x60]
mov dword [rsp + 0xc0], r14d
test rbx, rbx
je 0x140035950
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
jmp 0x140035976
mov rbx, 0xffffffffffffffff
cmp edi, 1
jne 0x1400365c8
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
lea rdx, str.SoftwareATI_TechnologiesInstallPPC
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov edx, eax
test eax, eax
jne 0x140038804
mov rsi, qword [rsp + 0xd0]
mov qword [rsp + 0x390], rsi
or r12d, 4
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x68], 0x104
lea rax, [rsp + 0x68]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0xc20]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
mov r9d, 2
lea r8, str.OriginalDB
lea rdx, [0x1400bc2c0]
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
mov edx, eax
test eax, eax
jne 0x140038835
mov qword [rsp + 0x3a0], r15
mov qword [rsp + 0x3b0], r15
mov qword [rsp + 0x3b8], 7
mov word [rsp + 0x3a0], r15w
lea rax, [rsp + 0xc20]
mov r8, rbx
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x140035a50
lea rdx, [rsp + 0xc20]
lea rcx, [rsp + 0x3a0]
call fcn.1400027d0
or r12d, 8
mov dword [rsp + 0x48], r12d
lea rcx, [rsp + 0x3a0]
mov rbx, qword [rsp + 0x3a0]
mov rdi, qword [rsp + 0x3b8]
cmp rdi, 8
cmovae rcx, rbx
mov qword [rsp + 0x20], 5
lea r9, str.CNext
xor r8d, r8d
mov rdx, qword [rsp + 0x3b0]
call fcn.1400176b0
cmp rax, 0xffffffffffffffff
je 0x140036479
mov dword [rsp + 0x370], 0x104
lea rax, [rsp + 0x370]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x760]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
mov r9d, 2
lea r8, str.InstallDir
lea rdx, [0x1400bc2c0]
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
mov edx, eax
test eax, eax
jne 0x140038866
mov qword [rsp + 0x400], r15
mov qword [rsp + 0x410], r15
mov qword [rsp + 0x418], 7
mov word [rsp + 0x400], r15w
lea rax, [rsp + 0x760]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140035b50
lea rdx, [rsp + 0x760]
lea rcx, [rsp + 0x400]
call fcn.1400027d0
or r12d, 0x10
mov dword [rsp + 0x48], r12d
lea r8, [rsp + 0x400]
cmp qword [rsp + 0x418], 8
cmovae r8, qword [rsp + 0x400]
lea rdx, [rsp + 0x3a0]
cmp qword [rsp + 0x3b8], 8
cmovae rdx, qword [rsp + 0x3a0]
lea rcx, str.Athena_MSI_is_present_in_CNEXT_location____s__need_to_copy_to_Athena_location____s
call fcn.1400262b0
mov r8d, 0xb
lea rdx, str.AUEP64.msi
lea rcx, [rsp + 0x400]
call fcn.140014b80
lea rdx, [rsp + 0x400]
cmp qword [rsp + 0x418], 8
cmovae rdx, qword [rsp + 0x400]
mov qword [rsp + 0x3c0], r15
mov qword [rsp + 0x3d0], r15
mov qword [rsp + 0x3d8], 7
mov word [rsp + 0x3c0], r15w
mov r8, qword [rsp + 0x410]
lea rcx, [rsp + 0x3c0]
call fcn.1400027d0
or r12d, 0x60
mov dword [rsp + 0x48], r12d
lea rdx, [rsp + 0x3c0]
lea rcx, [rsp + 0x1b8]
call fcn.140007c10
movsd xmm0, qword [rax]
movsd qword [rsp + 0x178], xmm0
mov eax, dword [rax + 8]
mov dword [rsp + 0x120], eax
lea rdx, [0x1400e0bf0]
mov qword [rsp + 0x128], rdx
movaps xmm0, xmmword [rsp + 0x120]
movdqa xmmword [rsp + 0x370], xmm0
mov ecx, dword [rsp + 0x178]
test ecx, ecx
je 0x140035ca1
mov eax, r15d
mov dword [rsp + 0x370], eax
mov qword [rsp + 0x378], rdx
cmp ecx, 1
setne cl
jmp 0x140035caa
xor cl, cl
mov eax, dword [rsp + 0x370]
test eax, eax
jne 0x140038897
test cl, cl
je 0x140035ce2
lea rcx, [rsp + 0x3c0]
cmp qword [rsp + 0x3d8], 8
cmovae rcx, qword [rsp + 0x3c0]
xor r8d, r8d
mov dl, 1
call fcn.14006cc9c
test eax, eax
jne 0x1400388b3
lea r8, [rsp + 0x3c0]
cmp qword [rsp + 0x3d8], 8
cmovae r8, qword [rsp + 0x3c0]
lea rdx, [rsp + 0x3a0]
cmp qword [rsp + 0x3b8], 8
cmovae rdx, qword [rsp + 0x3a0]
lea rcx, str.Copying_Athena_MSI_is_from__s_to__s
call fcn.1400262b0
lea rdx, [rsp + 0x3c0]
lea rcx, [rsp + 0x3e0]
call fcn.1400025c0
bts r12d, 7
mov dword [rsp + 0x48], r12d
lea rdx, [rsp + 0x3e0]
cmp qword [rsp + 0x3f8], 8
cmovae rdx, qword [rsp + 0x3e0]
lea rcx, [rsp + 0x3a0]
cmp qword [rsp + 0x3b8], 8
cmovae rcx, qword [rsp + 0x3a0]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
mov ebx, eax
mov rdx, qword [rsp + 0x3f8]
cmp rdx, 8
jb 0x140035dc8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035dc3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400388c9
call fcn.140070654
test ebx, ebx
jne 0x140035f0b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov qword [rsp + 0x370], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
lea rax, [rsp + 0x370]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, ebx
xor edx, edx
mov ecx, 0x13ff
call qword [sym.imp.KERNEL32.dll_FormatMessageW]
mov r8d, eax
mov qword [rsp + 0x3e0], r15
mov qword [rsp + 0x3f0], r15
mov qword [rsp + 0x3f8], 7
mov word [rsp + 0x3e0], r15w
mov rdx, qword [rsp + 0x370]
lea rcx, [rsp + 0x3e0]
call fcn.1400027d0
bts r12d, 8
mov dword [rsp + 0x48], r12d
mov rcx, qword [rsp + 0x370]
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop
lea rax, [rsp + 0x3e0]
cmp qword [rsp + 0x3f8], 8
cmovae rax, qword [rsp + 0x3e0]
lea r8, [rsp + 0x3c0]
cmp qword [rsp + 0x3d8], 8
cmovae r8, qword [rsp + 0x3c0]
lea rdx, [rsp + 0x3a0]
cmp qword [rsp + 0x3b8], 8
cmovae rdx, qword [rsp + 0x3a0]
mov qword [rsp + 0x20], rax
mov r9d, ebx
lea rcx, str.Unable_to_copy_file_from__s_to__s._Error_code:__d__s
call fcn.140026280
nop
mov rdx, qword [rsp + 0x3f8]
cmp rdx, 8
jb 0x140035f0b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035f06
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400388cf
call fcn.140070654
lea rdx, [rsp + 0x3c0]
lea rcx, [rsp + 0x3e0]
call fcn.1400025c0
bts r12d, 9
mov dword [rsp + 0x48], r12d
mov qword [rsp + 0x370], r15
mov qword [rsp + 0x380], r15
mov qword [rsp + 0x388], 7
mov word [rsp + 0x370], r15w
mov r8d, 0xa
lea rdx, str.OriginalDB
lea rcx, [rsp + 0x370]
call fcn.1400027d0
nop
mov eax, dword [rsp + 0x3f0]
lea eax, [rax*2 + 2]
lea rcx, [rsp + 0x3e0]
cmp qword [rsp + 0x3f8], 8
cmovae rcx, qword [rsp + 0x3e0]
lea rdx, [rsp + 0x370]
cmp qword [rsp + 0x388], 8
cmovae rdx, qword [rsp + 0x370]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov r9d, 1
xor r8d, r8d
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov ebx, eax
test eax, eax
jne 0x1400388d5
mov rdx, qword [rsp + 0x388]
cmp rdx, 8
jb 0x140036019
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x370]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036014
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140038931
call fcn.140070654
mov qword [rsp + 0x380], r15
mov qword [rsp + 0x388], 7
mov word [rsp + 0x370], r15w
mov rdx, qword [rsp + 0x3f8]
cmp rdx, 8
jb 0x14003607e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036079
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140038937
call fcn.140070654
mov rcx, qword [r13 + 0x2e0]
movsxd rbx, dword [rsp + 0x58]
mov r8, qword [rcx + 0x168]
mov rcx, qword [rcx + 0x170]
sub rcx, r8
movabs rdi, 0x67b23a5440cf6475
mov rax, rdi
imul rcx
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, rbx
jbe 0x14003893d
imul rdx, rbx, 0x278
add rdx, r8
cmp qword [rdx + 0x18], 8
jb 0x1400360d6
mov rdx, qword [rdx]
lea rcx, str.Excluding:_t_s
call fcn.1400262b0
mov rcx, qword [r13 + 0x2e0]
mov r10, qword [rcx + 0x168]
mov rcx, qword [rcx + 0x170]
sub rcx, r10
mov rax, rdi
imul rcx
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, rbx
jbe 0x140038942
imul r9, rbx, 0x278
imul r8, rbx, 0x278
mov r9, qword [r9 + r10 + 0x220]
mov r8, qword [r8 + r10 + 0x218]
mov rdx, qword [r13 + 0x218]
lea rcx, [r13 + 0x210]
call fcn.140044510
mov rcx, qword [r13 + 0x2e0]
lea r11, [rcx + 0x210]
mov r10, qword [rcx + 0x168]
mov rcx, qword [rcx + 0x170]
sub rcx, r10
mov rax, rdi
imul rcx
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, rbx
jbe 0x140038947
imul r9, rbx, 0x278
imul r8, rbx, 0x278
mov r9, qword [r9 + r10 + 0x268]
mov r8, qword [r8 + r10 + 0x260]
mov rdx, qword [r11 + 8]
mov rcx, r11
call fcn.140044510
mov rcx, qword [r13 + 0x2e0]
mov r10, qword [rcx + 0x168]
mov rcx, qword [rcx + 0x170]
sub rcx, r10
mov rax, rdi
imul rcx
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, rbx
jbe 0x14003894c
imul r9, rbx, 0x278
imul r8, rbx, 0x278
mov r9, qword [r9 + r10 + 0x238]
mov r8, qword [r8 + r10 + 0x230]
mov rdx, qword [r13 + 0x230]
lea rcx, [r13 + 0x228]
call fcn.140044510
mov rcx, qword [r13 + 0x2e0]
lea r11, [rcx + 0x1b0]
mov r10, qword [rcx + 0x168]
mov rcx, qword [rcx + 0x170]
sub rcx, r10
mov rax, rdi
imul rcx
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, rbx
jbe 0x140038951
imul r9, rbx, 0x278
imul r8, rbx, 0x278
mov r9, qword [r9 + r10 + 0x208]
mov r8, qword [r8 + r10 + 0x200]
mov rdx, qword [r11 + 8]
mov rcx, r11
call fcn.140044510
mov rcx, qword [r13 + 0x2e0]
mov r10, qword [rcx + 0x168]
mov rcx, qword [rcx + 0x170]
sub rcx, r10
mov rax, rdi
imul rcx
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, rbx
jbe 0x140038956
imul r9, rbx, 0x278
imul r8, rbx, 0x278
mov r9, qword [r9 + r10 + 0x250]
mov r8, qword [r8 + r10 + 0x248]
mov rdx, qword [r13 + 0x2a8]
lea rcx, [r13 + 0x2a0]
call fcn.140044510
mov qword [rsp + 0x370], r15
mov qword [rsp + 0x380], r15
mov qword [rsp + 0x388], 7
mov word [rsp + 0x370], r15w
mov r8d, 9
lea rdx, str.StartAUEP
lea rcx, [rsp + 0x370]
call fcn.1400027d0
nop
mov rdx, qword [r13 + 0x278]
cmp rdx, qword [r13 + 0x280]
je 0x14003635f
movups xmm0, xmmword [rsp + 0x370]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rsp + 0x380]
movups xmmword [rdx + 0x10], xmm1
mov edx, 7
mov word [rsp + 0x370], r15w
add qword [r13 + 0x278], 0x20
jmp 0x14003637b
lea r8, [rsp + 0x370]
lea rcx, [r13 + 0x270]
call fcn.140016fd0
mov rdx, qword [rsp + 0x388]
cmp rdx, 8
jb 0x1400363bc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x370]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400363b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003895b
call fcn.140070654
nop
mov rdx, qword [rsp + 0x3d8]
cmp rdx, 8
jb 0x140036404
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400363ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140038961
call fcn.140070654
mov qword [rsp + 0x3d0], r15
mov qword [rsp + 0x3d8], 7
mov word [rsp + 0x3c0], r15w
mov rdx, qword [rsp + 0x418]
cmp rdx, 8
jb 0x140036469
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x400]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036464
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140038967
call fcn.140070654
mov rbx, qword [rsp + 0x3a0]
mov rdi, qword [rsp + 0x3b8]
cmp r14d, 1
je 0x140036561
mov rcx, qword [r13 + 0x2e0]
movsxd r8, dword [rsp + 0x58]
mov r9, qword [rcx + 0x168]
mov rcx, qword [rcx + 0x170]
sub rcx, r9
movabs r14, 0x67b23a5440cf6475
mov rax, r14
imul rcx
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, r8
jbe 0x14003896d
imul rdx, r8, 0x278
add rdx, r9
cmp qword [rdx + 0x18], 8
jb 0x1400364db
mov rdx, qword [rdx]
lea rcx, str.RSX_not_opted_to_:_t_s
call fcn.1400262b0
nop
mov rdx, qword [rsp + 0x3b8]
cmp rdx, 8
jb 0x140036530
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003652b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140038973
call fcn.140070654
mov qword [rsp + 0x3b0], r15
mov qword [rsp + 0x3b8], 7
mov word [rsp + 0x3a0], r15w
test rsi, rsi
je 0x14003655c
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
jmp 0x1400368c2
cmp rdi, 8
jb 0x14003659c
lea rdx, [rdi*2 + 2]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140036594
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140038973
mov rcx, rbx
call fcn.140070654
mov qword [rsp + 0x3b0], r15
mov qword [rsp + 0x3b8], 7
mov word [rsp + 0x3a0], r15w
test rsi, rsi
je 0x1400365c8
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
jmp 0x1400365df
mov rsi, qword [rsp + 0x40]
movabs r14, 0x67b23a5440cf6475
mov rcx, qword [r13 + 0x2e0]
mov r8, qword [rcx + 0x168]
mov rcx, qword [rcx + 0x170]
sub rcx, r8
mov rax, r14
imul rcx
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, rsi
jbe 0x140038979
imul rbx, rsi, 0x278
lea rdx, [rbx + r8]
cmp qword [rdx + 0x18], 8
jb 0x140036638
mov rdx, qword [rdx]
lea rcx, [0x1400bd338]
call fcn.1400262b0
mov rcx, qword [r13 + 0x2e0]
mov r8, qword [rcx + 0x168]
mov rcx, qword [rcx + 0x170]
sub rcx, r8
mov rax, r14
imul rcx
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, rsi
jbe 0x140038979
lea rdx, [rbx + r8]
lea rcx, [r13 + 0x3c0]
call fcn.14003e310
mov r9d, dword [rsp + 0x58]
inc r9d
mov dword [rsp + 0x58], r9d
jmp 0x140035710
cmp rdx, rsi
jbe 0x140038979
imul rdx, rsi, 0x278
add rdx, r8
cmp qword [rdx + 0x18], 8
jb 0x1400366b8
mov rdx, qword [rdx]
lea rcx, str.Excluding:_t_s
call fcn.1400262b0
mov rcx, qword [r13 + 0x2e0]
mov r10, qword [rcx + 0x168]
mov rcx, qword [rcx + 0x170]
sub rcx, r10
mov rax, r14
imul rcx
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, rsi
jbe 0x140038979
imul r9, rsi, 0x278
imul r8, rsi, 0x278
lea rcx, [r13 + 0x210]
mov r9, qword [r9 + r10 + 0x220]
mov r8, qword [r8 + r10 + 0x218]
mov rdx, qword [r13 + 0x218]
call fcn.140044510
mov r10, qword [r13 + 0x2e0]
mov r11, qword [r10 + 0x168]
mov rcx, qword [r10 + 0x170]
sub rcx, r11
mov rax, r14
imul rcx
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, rsi
jbe 0x140038979
imul r9, rsi, 0x278
imul r8, rsi, 0x278
mov r9, qword [r9 + r11 + 0x268]
mov r8, qword [r8 + r11 + 0x260]
mov rdx, qword [r10 + 0x218]
lea rcx, [r10 + 0x210]
call fcn.140044510
mov rcx, qword [r13 + 0x2e0]
mov r10, qword [rcx + 0x168]
mov rcx, qword [rcx + 0x170]
sub rcx, r10
mov rax, r14
imul rcx
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, rsi
jbe 0x140038979
imul r9, rsi, 0x278
imul r8, rsi, 0x278
lea rcx, [r13 + 0x228]
mov r9, qword [r9 + r10 + 0x238]
mov r8, qword [r8 + r10 + 0x230]
mov rdx, qword [r13 + 0x230]
call fcn.140044510
mov r10, qword [r13 + 0x2e0]
mov r11, qword [r10 + 0x168]
mov rcx, qword [r10 + 0x170]
sub rcx, r11
mov rax, r14
imul rcx
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, rsi
jbe 0x140038979
imul r9, rsi, 0x278
imul r8, rsi, 0x278
mov r9, qword [r9 + r11 + 0x208]
mov r8, qword [r8 + r11 + 0x200]
mov rdx, qword [r10 + 0x1b8]
lea rcx, [r10 + 0x1b0]
call fcn.140044510
mov rcx, qword [r13 + 0x2e0]
mov r10, qword [rcx + 0x168]
mov rcx, qword [rcx + 0x170]
sub rcx, r10
mov rax, r14
imul rcx
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, rsi
jbe 0x140038979
imul r9, rsi, 0x278
imul r8, rsi, 0x278
lea rcx, [r13 + 0x2a0]
mov r9, qword [r9 + r10 + 0x250]
mov r8, qword [r8 + r10 + 0x248]
mov rdx, qword [r13 + 0x2a8]
call fcn.140044510
mov r9d, dword [rsp + 0x58]
inc r9d
mov dword [rsp + 0x58], r9d
jmp 0x140035710
lea rcx, str.___________Drivers_Eligible_to_Unistall_____________
call fcn.1400262b0
mov r12d, r15d
mov dword [rsp + 0x370], r15d
mov rbx, qword [r13 + 0x2e0]
mov rcx, qword [rbx + 0x158]
sub rcx, qword [rbx + 0x150]
movabs rdi, 0x6bca1af286bca1b
mov rax, rdi
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x140036c55
mov r14, r15
mov rsi, r15
nop word [rax + rax]
mov r8, qword [rbx + 0x150]
mov rcx, qword [rbx + 0x158]
sub rcx, r8
mov rax, rdi
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, r14
jbe 0x140038985
lea rdi, [r8 + rsi]
mov rax, qword [rbx + 0x110]
mov r11, qword [rbx + 0x108]
cmp r11, rax
je 0x1400369f0
mov r12, qword [rdi + 0x18]
mov r13, qword [rdi + 0x10]
nop dword [rax]
mov rcx, rdi
cmp r12, 8
jb 0x14003698c
mov rcx, qword [rdi]
mov rdx, qword [r11 + 0x10]
mov r10, r11
cmp qword [r11 + 0x18], 8
jb 0x14003699d
mov r10, qword [r11]
cmp rdx, r13
jne 0x1400369da
test rdx, rdx
je 0x1400369e3
movzx r8d, word [r10]
movzx r9d, word [rcx]
cmp r8w, r9w
jb 0x1400369da
sub r10, rcx
cmp r8w, r9w
ja 0x1400369da
cmp rdx, 1
je 0x1400369e3
dec rdx
add rcx, 2
movzx r8d, word [r10 + rcx]
movzx r9d, word [rcx]
cmp r8w, r9w
jae 0x1400369bc
add r11, 0x20
cmp r11, rax
jne 0x140036980
mov r13, qword [rsp + 0x50]
mov r12d, dword [rsp + 0x370]
mov qword [r13 + 0x3a0], r11
mov r8, qword [rbx + 0x150]
mov rcx, qword [rbx + 0x158]
movabs rdi, 0x6bca1af286bca1b
sub rcx, r8
mov rax, rdi
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r11, qword [rbx + 0x110]
je 0x140036ad7
cmp rdx, r14
jbe 0x140038985
lea rdx, [r8 + rsi]
cmp qword [rdx + 0x18], 8
jb 0x140036a4a
mov rdx, qword [rdx]
lea rcx, [0x1400bd338]
call fcn.1400262b0
mov rcx, qword [r13 + 0x2e0]
movsxd r8, r12d
mov r9, qword [rcx + 0x150]
mov rcx, qword [rcx + 0x158]
sub rcx, r9
mov rax, rdi
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, r8
jbe 0x140038985
imul r8, r8, 0x260
add r8, r9
mov rax, qword [r13 + 0x3b0]
cmp rax, qword [r13 + 0x3b8]
je 0x140036ac3
mov rdx, r8
mov rcx, rax
call fcn.1400304b0
add qword [r13 + 0x3b0], 0x260
jmp 0x140036c0b
mov rdx, rax
lea rcx, [r13 + 0x3a8]
call fcn.1400427c0
jmp 0x140036c0b
cmp rdx, r14
jbe 0x140038985
mov r9, qword [r8 + rsi + 0x208]
mov r8, qword [r8 + rsi + 0x200]
mov rdx, qword [r13 + 0x218]
lea rcx, [r13 + 0x210]
call fcn.140044510
mov rcx, qword [r13 + 0x2e0]
lea r10, [rcx + 0x210]
mov r8, qword [rcx + 0x150]
mov rcx, qword [rcx + 0x158]
sub rcx, r8
mov rax, rdi
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, r14
jbe 0x140038985
mov r9, qword [r8 + rsi + 0x250]
mov r8, qword [r8 + rsi + 0x248]
mov rdx, qword [r10 + 8]
mov rcx, r10
call fcn.140044510
mov rcx, qword [r13 + 0x2e0]
mov r8, qword [rcx + 0x150]
mov rcx, qword [rcx + 0x158]
sub rcx, r8
mov rax, rdi
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, r14
jbe 0x140038985
mov r9, qword [r8 + rsi + 0x220]
mov r8, qword [r8 + rsi + 0x218]
mov rdx, qword [r13 + 0x230]
lea rcx, [r13 + 0x228]
call fcn.140044510
mov rcx, qword [r13 + 0x2e0]
mov r8, qword [rcx + 0x150]
mov rcx, qword [rcx + 0x158]
sub rcx, r8
mov rax, rdi
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, r14
jbe 0x140038985
mov r9, qword [r8 + rsi + 0x238]
mov r8, qword [r8 + rsi + 0x230]
mov rdx, qword [r13 + 0x260]
lea rcx, [r13 + 0x258]
call fcn.140044510
inc r12d
mov dword [rsp + 0x370], r12d
inc r14
add rsi, 0x260
mov rbx, qword [r13 + 0x2e0]
mov rcx, qword [rbx + 0x158]
sub rcx, qword [rbx + 0x150]
mov rax, rdi
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
movsxd rax, r12d
cmp rax, rdx
jb 0x140036930
lea rcx, str.___________Deletion_of_Preuninstall_Registries_Values_Started_____________
call fcn.1400262b0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x160], xmm0
mov qword [rsp + 0x170], r15
mov qword [rsp + 0x4a0], r15
mov qword [rsp + 0x4b0], r15
mov qword [rsp + 0x4b8], 7
mov word [rsp + 0x4a0], r15w
mov r8d, 0x38
lea rdx, str.HKEY_LOCAL_MACHINESOFTWAREAIXUmaCarveoutModePreserved
lea rcx, [rsp + 0x4a0]
call fcn.1400027d0
nop
lea r8, [rsp + 0x4a0]
xor edx, edx
lea rcx, [rsp + 0x160]
call fcn.140016fd0
nop
mov rdx, qword [rsp + 0x4b8]
cmp rdx, 8
jb 0x140036d15
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x4a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036d10
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003897f
call fcn.140070654
lea r8, [r13 + 0x138]
mov qword [rsp + 0x68], r8
lea rdx, [rsp + 0x160]
mov ecx, 6
call fcn.14000f400
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xe0], xmm0
mov qword [rsp + 0xf0], r15
movdqu xmmword [rsp + 0x148], xmm0
mov qword [rsp + 0x158], r15
mov qword [rsp + 0x460], r15
mov qword [rsp + 0x470], r15
mov qword [rsp + 0x478], 7
mov word [rsp + 0x460], r15w
mov r8d, 0x1f
lea rdx, str.HKEY_LOCAL_MACHINESOFTWAREAIX
lea rcx, [rsp + 0x460]
call fcn.1400027d0
nop
mov rdx, qword [rsp + 0xe8]
cmp rdx, qword [rsp + 0xf0]
je 0x140036dda
movups xmm0, xmmword [rsp + 0x460]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rsp + 0x470]
movups xmmword [rdx + 0x10], xmm1
mov edx, 7
mov word [rsp + 0x460], r15w
add qword [rsp + 0xe8], 0x20
jmp 0x140036df7
lea r8, [rsp + 0x460]
lea rcx, [rsp + 0xe0]
call fcn.140016fd0
mov rdx, qword [rsp + 0x478]
cmp rdx, 8
jb 0x140036e37
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x460]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036e32
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003898b
call fcn.140070654
lea r8, [rsp + 0x148]
lea rdx, [rsp + 0xe0]
mov rcx, r13
call fcn.140032d70
mov rax, qword [rsp + 0xe8]
sub rax, qword [rsp + 0xe0]
sar rax, 5
cmp rax, 1
jne 0x140036e94
mov rax, qword [rsp + 0x150]
cmp qword [rsp + 0x148], rax
jne 0x140036e94
lea r8, [r13 + 0x150]
lea rdx, [rsp + 0xe0]
mov ecx, 4
call fcn.14000f400
lea rcx, str.___________Deletion_of_Preuninstall_Registries_Values_Ended_____________
call fcn.1400262b0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xa8], xmm0
mov qword [rsp + 0xb8], r15
mov esi, r15d
mov dword [rsp + 0x58], r15d
lea r14, [r13 + 0x3c0]
mov qword [rsp + 0xc8], r14
mov r8, qword [r14 + 8]
mov r9, qword [r14]
mov rcx, r8
sub rcx, r9
movabs r13, 0x67b23a5440cf6475
mov rax, r13
imul rcx
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x14003743b
mov r11, r15
mov qword [rsp + 0x40], r15
mov r10, r15
mov qword [rsp + 0x60], r15
nop dword [rax]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0xbd0], xmm0
movups xmmword [rsp + 0xbe0], xmm0
movups xmmword [rsp + 0xbf0], xmm0
movups xmmword [rsp + 0xc00], xmm0
mov qword [rsp + 0xc10], rax
mov dword [rsp + 0xc18], eax
mov word [rsp + 0xc1c], ax
sub r8, r9
mov rax, r13
imul r8
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, r11
jbe 0x1400389af
lea rcx, [r10 + 0x98]
add rcx, r9
cmp qword [rcx + 0x18], 8
jb 0x140036f80
mov rcx, qword [rcx]
lea r9, [rsp + 0xbd0]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.msi.dll_MsiSourceListClearAllW]
cmp eax, 0x103
je 0x1400373ea
mov rbx, qword [rsp + 0xb0]
mov rcx, rbx
mov r12, qword [rsp + 0xa8]
sub rcx, r12
mov rax, r13
imul rcx
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x140037303
mov dil, 1
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x90], xmm0
mov qword [rsp + 0xa0], r15
cmp r12, rbx
je 0x14003709e
movabs rax, 0x67b23a5440cf64
cmp rdx, rax
ja 0x140038997
imul rsi, rdx, 0x278
cmp rsi, 0x1000
jb 0x14003703a
lea rcx, [rsi + 0x27]
cmp rcx, rsi
jbe 0x140038991
call fcn.1400703c8
test rax, rax
je 0x14003899d
lea r8, [rax + 0x27]
and r8, 0xffffffffffffffe0
mov qword [r8 - 8], rax
jmp 0x14003704f
test rsi, rsi
je 0x14003704c
mov rcx, rsi
call fcn.1400703c8
mov r8, rax
jmp 0x14003704f
mov r8, r15
mov qword [rsp + 0x90], r8
mov qword [rsp + 0x98], r8
lea rax, [r8 + rsi]
mov qword [rsp + 0xa0], rax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x390], rax
lea r9, [rsp + 0x90]
mov rdx, rbx
mov rcx, r12
call fcn.140044f00
mov qword [rsp + 0x98], rax
mov rbx, qword [rsp + 0xb0]
mov r12d, r15d
mov rsi, r15
mov rcx, qword [rsp + 0x98]
mov r13, qword [rsp + 0x90]
sub rcx, r13
movabs rax, 0x67b23a5440cf6475
imul rcx
mov r11, rdx
sar r11, 8
mov rax, r11
shr rax, 0x3f
add r11, rax
je 0x140037183
lea r9, [r13 + 0x98]
cmp r11, rsi
jbe 0x1400389a3
mov r8, r9
cmp qword [r9 + 0x18], 8
jb 0x1400370f8
mov r8, qword [r9]
mov r10, qword [r14]
mov rcx, qword [r14 + 8]
sub rcx, r10
movabs rax, 0x67b23a5440cf6475
imul rcx
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, qword [rsp + 0x40]
jbe 0x1400389a3
mov rax, qword [rsp + 0x60]
add rax, 0x98
add rax, r10
cmp qword [rax + 0x18], 8
jb 0x140037140
mov rax, qword [rax]
sub r8, rax
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x140037157
add rax, 2
test ecx, ecx
jne 0x140037143
movzx edi, dil
test edx, edx
cmove edi, r15d
inc r12d
inc rsi
add r9, 0x278
movsxd rax, r12d
cmp rax, r11
jb 0x1400370e2
test dil, dil
je 0x14003727c
movsxd rsi, dword [rsp + 0x58]
mov r8, rsi
mov r9, qword [r14]
mov rcx, qword [r14 + 8]
sub rcx, r9
movabs rax, 0x67b23a5440cf6475
imul rcx
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, rsi
jbe 0x1400389a3
imul rdi, r8, 0x278
add rdi, r9
cmp rbx, qword [rsp + 0xb8]
je 0x14003725f
mov qword [rsp + 0x390], rbx
mov rdx, rdi
mov rcx, rbx
call fcn.14002f9a0
nop
lea rcx, [rbx + 0x200]
lea rdx, [rdi + 0x200]
call fcn.140002430
nop
lea rcx, [rbx + 0x218]
lea rdx, [rdi + 0x218]
call fcn.140002430
nop
lea rcx, [rbx + 0x230]
lea rdx, [rdi + 0x230]
call fcn.140002430
nop
lea rcx, [rbx + 0x248]
lea rdx, [rdi + 0x248]
call fcn.140002430
nop
lea rcx, [rbx + 0x260]
lea rdx, [rdi + 0x260]
call fcn.140002430
nop
add qword [rsp + 0xb0], 0x278
mov r13, qword [rsp + 0x90]
jmp 0x140037280
mov r8, rdi
mov rdx, rbx
lea rcx, [rsp + 0xa8]
call fcn.140042490
mov r13, qword [rsp + 0x90]
jmp 0x140037280
mov esi, dword [rsp + 0x58]
test r13, r13
je 0x1400373e0
mov rdx, qword [rsp + 0x98]
mov rcx, r13
call fcn.140042e30
mov rcx, qword [rsp + 0xa0]
mov r8, qword [rsp + 0x90]
sub rcx, r8
movabs r13, 0x67b23a5440cf6475
mov rax, r13
imul rcx
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rdx, rdx, 0x278
mov rax, r8
cmp rdx, 0x1000
jb 0x1400372f6
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003899d
mov rcx, r8
call fcn.140070654
jmp 0x1400373ea
movsxd r8, esi
mov r9, qword [r14]
mov rcx, qword [r14 + 8]
sub rcx, r9
mov rax, r13
imul rcx
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, r8
jbe 0x1400389a9
imul rdi, r8, 0x278
add rdi, r9
cmp rbx, qword [rsp + 0xb8]
je 0x1400373cb
mov qword [rsp + 0x390], rbx
mov rdx, rdi
mov rcx, rbx
call fcn.14002f9a0
nop
lea rcx, [rbx + 0x200]
lea rdx, [rdi + 0x200]
call fcn.140002430
nop
lea rcx, [rbx + 0x218]
lea rdx, [rdi + 0x218]
call fcn.140002430
nop
lea rcx, [rbx + 0x230]
lea rdx, [rdi + 0x230]
call fcn.140002430
nop
lea rcx, [rbx + 0x248]
lea rdx, [rdi + 0x248]
call fcn.140002430
nop
lea rcx, [rbx + 0x260]
lea rdx, [rdi + 0x260]
call fcn.140002430
nop
add qword [rsp + 0xb0], 0x278
jmp 0x1400373ea
mov r8, rdi
mov rdx, rbx
lea rcx, [rsp + 0xa8]
call fcn.140042490
jmp 0x1400373ea
movabs r13, 0x67b23a5440cf6475
inc esi
mov dword [rsp + 0x58], esi
mov r11, qword [rsp + 0x40]
inc r11
mov qword [rsp + 0x40], r11
mov r10, qword [rsp + 0x60]
add r10, 0x278
mov qword [rsp + 0x60], r10
mov r8, qword [r14 + 8]
mov r9, qword [r14]
mov rcx, r8
sub rcx, r9
mov rax, r13
imul rcx
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
movsxd rax, esi
cmp rax, rdx
jb 0x140036f10
lea rdx, [rsp + 0xa8]
mov rcx, r14
call fcn.14003e2e0
lea rax, [rsp + 0x108]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SoftwareAMDCN
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14003759a
mov word [rsp + 0xe30], r15w
mov dword [rsp + 0x70], r15d
mov dword [rsp + 0x60], 0x208
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xe30]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x70]
xor r8d, r8d
lea rdx, str.CNVersion
mov rcx, qword [rsp + 0x108]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140037580
lea rdx, [rsp + 0xe30]
lea rcx, [rsp + 0x4e0]
call fcn.140002560
nop
mov r9d, 2
xor r8d, r8d
lea rdx, [rsp + 0x6e0]
lea rcx, [rsp + 0x4e0]
call fcn.1400147d0
mov rcx, rax
call fcn.1400024e0
mov rcx, rax
call fcn.140086e4c
mov r12d, eax
lea rcx, [rsp + 0x6e0]
call fcn.1400024f0
mov r9d, 5
lea r8d, [r9 - 2]
lea rdx, [rsp + 0x680]
lea rcx, [rsp + 0x4e0]
call fcn.1400147d0
mov rcx, rax
call fcn.1400024e0
mov rcx, rax
call fcn.140086e4c
mov r13d, eax
lea rcx, [rsp + 0x680]
call fcn.1400024f0
nop
lea rcx, [rsp + 0x4e0]
call fcn.1400024f0
mov rcx, qword [rsp + 0x108]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x1400375a4
mov r12d, dword [rsp + 0x60]
mov r13d, dword [rsp + 0x60]
mov rcx, qword [rsp + 0x108]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x1400375a4
mov r12d, dword [rsp + 0x60]
mov r13d, dword [rsp + 0x60]
lea rcx, str.Application_List_to_Uninstall:_____________
call fcn.1400262b0
mov esi, r15d
mov rcx, r14
call fcn.14003e060
test rax, rax
je 0x1400376b9
mov rdi, r15
mov r15, qword [rsp + 0x50]
nop dword [rax]
mov rdx, rdi
mov rcx, r14
call fcn.14003e010
lea rcx, [rax + 0x98]
call fcn.1400024e0
mov rbx, rax
mov rdx, rdi
mov rcx, r14
call fcn.14003e010
mov rcx, rax
call fcn.1400024e0
mov r8, rbx
mov rdx, rax
lea rcx, str._s____s
call fcn.1400262b0
mov rdx, rdi
mov rcx, r14
call fcn.14003e010
mov rcx, rax
lea rdx, str.CNBranding64
call fcn.140016dd0
test al, al
je 0x1400376a0
cmp r12d, 0x15
jne 0x1400376a0
cmp r13d, 0x28
jne 0x1400376a0
mov rdx, rdi
mov rcx, r14
call fcn.14003e010
lea rdx, [rax + 0x98]
lea rcx, [r15 + 0x2e8]
call fcn.14004c8e0
mov ebx, eax
mov rdx, rdi
mov rcx, r14
call fcn.14003e010
mov dword [rax + 0x1e0], ebx
mov rdx, rdi
mov rcx, r14
call fcn.14003e010
mov ebx, dword [rax + 0x1e0]
mov rdx, rdi
mov rcx, r14
call fcn.14003e010
mov rcx, rax
call fcn.1400024e0
mov r8d, ebx
mov rdx, rax
lea rcx, str.Wiped_CNBranding_application_t:_t_s_t:_t_d
call fcn.1400262b0
inc esi
movsxd rdi, esi
mov rcx, r14
call fcn.14003e060
cmp rdi, rax
jb 0x1400375d0
xor r15d, r15d
lea rcx, str.UWP_Apps_to_Uninstall:_____________
call fcn.1400262b0
mov ebx, r15d
mov r13, qword [rsp + 0x50]
mov rax, qword [r13 + 0x2e0]
mov rcx, qword [rax + 0x140]
sub rcx, qword [rax + 0x138]
sar rcx, 5
test rcx, rcx
je 0x140037740
mov rax, r15
nop
mov rcx, qword [r13 + 0x2e0]
add rcx, 0x138
mov rdx, rax
call fcn.140014390
mov rcx, rax
call fcn.1400024e0
mov rdx, rax
lea rcx, [0x1400bd338]
call fcn.1400262b0
inc ebx
mov rax, qword [r13 + 0x2e0]
mov rcx, qword [rax + 0x140]
sub rcx, qword [rax + 0x138]
sar rcx, 5
movsxd rax, ebx
cmp rax, rcx
jb 0x1400376f0
lea rcx, str.___________Execution_of_Commands_Started_____________
call fcn.1400262b0
mov rcx, r13
call fcn.14002f630
lea rdx, [r13 + 0xf0]
lea rcx, [rsp + 0x1c8]
call fcn.14003e8b0
mov rcx, rax
call fcn.14000ef50
lea rcx, str.___________Execution_of_Commands_Ended_____________
call fcn.1400262b0
lea rcx, str.___________Termination_of_Processes_Started_____________
call fcn.1400262b0
mov rcx, r13
call fcn.14002f680
lea r8, [r13 + 0x1e0]
lea rdx, [r13 + 0xc0]
mov ecx, 2
call fcn.14000f400
lea rcx, str.___________Termination_of_Processes_Ended_____________
call fcn.1400262b0
lea rcx, str.___________Stopping_of_Services_Started_____________
call fcn.1400262b0
mov rcx, r13
call fcn.1400301d0
call fcn.140034420
lea r8, [r13 + 0x180]
lea rdx, [r13 + 0x78]
mov ecx, 1
call fcn.14000f400
lea rcx, str.___________Stopping_of_Services_Ended_____________
call fcn.1400262b0
lea rcx, str.___________Deleting_cached_Windows_Update_Drivers_____________
call fcn.1400262b0
call fcn.14002abe0
lea rcx, str.___________Deleting_cached_Windows_Update_Drivers_Ended_____________
call fcn.1400262b0
lea rcx, str.___________Deletion_of_Shortcuts_Started_____________
call fcn.1400262b0
mov rcx, r13
call fcn.140030190
lea r8, [r13 + 0x1f8]
lea rdx, [r13 + 0xd8]
mov ecx, 0xa
call fcn.14000f400
lea rcx, str.___________Deletion_of_Shortcuts_Ended_____________
call fcn.1400262b0
lea rcx, str.___________Uninstalling_Applications_Started_____________
call fcn.1400262b0
call fcn.140033ac0
call fcn.140033de0
call fcn.140034100
lea rax, [r13 + 0x380]
mov qword [rsp + 0x88], rax
lea r8, [r13 + 0x368]
mov r9, rax
mov rdx, r14
call fcn.14004cb60
mov ebx, r15d
mov rax, qword [r13 + 0x2e0]
mov rcx, qword [rax + 0x140]
sub rcx, qword [rax + 0x138]
sar rcx, 5
test rcx, rcx
je 0x1400378f1
mov rax, r15
nop dword [rax]
nop word [rax + rax]
mov rcx, qword [r13 + 0x2e0]
add rcx, 0x138
mov rdx, rax
call fcn.140014390
mov rdx, rax
call fcn.14004d0c0
inc ebx
mov rax, qword [r13 + 0x2e0]
mov rcx, qword [rax + 0x140]
sub rcx, qword [rax + 0x138]
sar rcx, 5
movsxd rax, ebx
cmp rax, rcx
jb 0x1400378b0
lea rcx, str.___________Uninstalling_Applications_Ended_____________
call fcn.1400262b0
lea rcx, str.___________Uninstalling_Drivers_Started_____________
call fcn.1400262b0
cmp byte [r13 + 0x480], 0
je 0x140037998
lea rcx, str.___________Excluding_GPUs_____________
call fcn.1400262b0
mov rsi, qword [r13 + 0x470]
mov rbx, qword [rsi]
cmp rbx, rsi
je 0x14003798c
lea rdx, [rbx + 0x10]
lea rcx, [rsp + 0x700]
call fcn.140038bb0
nop
lea rcx, [rsp + 0x700]
call fcn.1400024e0
mov rdi, rax
lea rcx, [rsp + 0x720]
call fcn.1400024e0
mov r8, rdi
mov rdx, rax
lea rcx, str._s__s
call fcn.1400262b0
nop
lea rcx, [rsp + 0x700]
call fcn.140028700
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
jne 0x140037932
lea rcx, [r13 + 0x210]
call fcn.1400389c0
lea rdi, [r13 + 0x2f0]
movzx ebx, byte [r13 + 0x468]
lea rdx, [r13 + 0x470]
lea rcx, [rsp + 0x1e0]
call fcn.140038bf0
lea rsi, [r13 + 0x350]
lea r12, [r13 + 0x338]
add r13, 0x3a8
mov byte [rsp + 0x28], bl
mov qword [rsp + 0x20], rax
mov r9, rsi
mov r8, r12
mov rdx, r13
mov rcx, rdi
call fcn.14004db80
mov rdx, rsi
mov rcx, r13
call fcn.14003e560
mov rax, qword [r12 + 8]
mov qword [rsp + 0x20], rax
mov r9, qword [r12]
mov r8, qword [r13 + 8]
lea rdx, [rsp + 0xd8]
mov rcx, r13
call fcn.1400420d0
lea rcx, str.___________Deletion_of_Services_Started_____________
call fcn.1400262b0
mov rdi, qword [rsp + 0x50]
lea rdx, [rdi + 0x78]
lea rcx, [rsp + 0x1f8]
call fcn.140002430
mov rcx, rax
call fcn.1400222c0
lea rcx, str.___________Deletion_of_Services_Ended_____________
call fcn.1400262b0
lea rcx, str.___________Uninstalling_Drivers_Ended_____________
call fcn.1400262b0
cmp byte [rdi + 0x453], 0
jne 0x140037ace
mov qword [rsp + 0x4c0], r15
mov qword [rsp + 0x4d0], r15
mov qword [rsp + 0x4d8], 7
mov word [rsp + 0x4c0], r15w
lea rcx, [rsp + 0x4c0]
call fcn.140010680
test al, al
jne 0x140037aac
lea rdx, str.C:Program_FilesAMDCIM
lea rcx, [rsp + 0x4c0]
call fcn.140014c00
lea rcx, [rdi + 0x240]
lea rdx, [rsp + 0x4c0]
call fcn.1400143c0
nop
lea rcx, [rsp + 0x4c0]
call fcn.1400024f0
mov rcx, rdi
call fcn.140031680
mov rcx, rdi
call fcn.140030580
mov rcx, rdi
call fcn.140030100
call fcn.14004d420
lea rcx, str.___________Deletions_of_Scheduled_Tasks_Started_____________
call fcn.1400262b0
lea r8, [rdi + 0x198]
lea rdx, [rdi + 0x90]
xor ecx, ecx
call fcn.14000f400
lea rcx, str.___________Deletions_of_Scheduled_Tasks_Ended_____________
call fcn.1400262b0
lea rcx, str.___________Deletion_of_Files_Started_____________
call fcn.1400262b0
lea rcx, [rdi + 0xa8]
call fcn.140012fe0
lea r8, [rdi + 0x1b0]
lea rdx, [rdi + 0xa8]
mov ecx, 3
call fcn.14000f400
mov rcx, rdi
call fcn.14002b810
lea rcx, str.___________Deletion_of_Files_Ended_____________
call fcn.1400262b0
lea rcx, str.___________Deletion_of_Driver_Files_Started_____________
call fcn.1400262b0
lea rcx, [0x1400e54f0]
call fcn.140012fe0
lea r8, [rdi + 0x1c8]
lea rdx, [0x1400e54f0]
mov ecx, 3
call fcn.14000f400
mov rcx, rdi
call fcn.14002b810
lea rcx, str.___________Deletion_of_Driver_Files_Ended_____________
call fcn.1400262b0
lea rcx, str.___________Deletion_of_Directories_Started_____________
call fcn.1400262b0
lea rcx, [rdi + 0x48]
call fcn.140012fe0
lea rcx, [rdi + 0x60]
call fcn.140012fe0
mov r8, qword [rsp + 0x50]
add r8, 0x168
lea rdx, [rdi + 0x48]
mov ecx, 7
call fcn.14000f400
mov rbx, qword [rsp + 0x50]
lea r8, [rbx + 0x168]
lea rdx, [rdi + 0x60]
mov ecx, 7
call fcn.14000f400
lea rcx, str.___________Deletion_of_Directories_Ended_____________
call fcn.1400262b0
mov rcx, rbx
call fcn.140030c00
lea rcx, str.___________Deletion_of_Registries_Values_Started_____________
call fcn.1400262b0
lea rcx, [rbx + 0x30]
call fcn.140012fe0
lea r8, [rbx + 0x120]
lea rdx, [rbx + 0x30]
mov ecx, 6
call fcn.14000f400
lea rcx, str.___________Deletion_of_Registries_Values_Ended_____________
call fcn.1400262b0
lea rcx, str.___________Deletion_of_Registries_Keys_Started_____________
call fcn.1400262b0
mov rcx, rbx
call fcn.140012fe0
lea r8, [rbx + 0x108]
mov rdx, rbx
mov ecx, 4
call fcn.14000f400
mov qword [rsp + 0xd0], rbx
lea rcx, [rbx + 0x18]
call fcn.140012fe0
lea rcx, [rsp + 0xd0]
call fcn.140038a20
lea r8, [rbx + 0x108]
lea rdx, [rbx + 0x18]
mov ecx, 5
call fcn.14000f400
lea rcx, str.___________Deletion_of_Registries_Keys_Ended_____________
call fcn.1400262b0
lea rcx, str.___________Deletion_of_Previous_Versions_of_Installer_Started________
call fcn.1400262b0
call fcn.14000b740
lea rcx, str.___________Deletion_of_Previous_Versions_of_Installer_Ended__________
call fcn.1400262b0
lea rcx, str.___________Failed_Deletion_of_Driver_Files________________
call fcn.1400262b0
mov rbx, qword [rdi + 0x1c8]
mov rdi, qword [rdi + 0x1d0]
cmp rbx, rdi
je 0x140037d24
nop
mov rdx, rbx
lea rcx, [rsp + 0x600]
call fcn.1400025c0
nop
lea rcx, [rsp + 0x600]
call fcn.1400024e0
mov rdx, rax
lea rcx, [0x1400bd338]
call fcn.1400262b0
nop
lea rcx, [rsp + 0x600]
call fcn.1400024f0
add rbx, 0x20
cmp rbx, rdi
jne 0x140037ce0
mov rsi, qword [rsp + 0x50]
mov rax, qword [rsi + 0x188]
sub rax, qword [rsi + 0x180]
cmp rax, 0x20
jb 0x140037da4
lea rcx, str.___________Failed_Stopping_Services_______________
call fcn.1400262b0
mov rbx, qword [rsi + 0x180]
mov rdi, qword [rsi + 0x188]
cmp rbx, rdi
je 0x140037da4
nop dword [rax]
mov rdx, rbx
lea rcx, [rsp + 0x620]
call fcn.1400025c0
nop
lea rcx, [rsp + 0x620]
call fcn.1400024e0
mov rdx, rax
lea rcx, [0x1400bd338]
call fcn.1400262b0
nop
lea rcx, [rsp + 0x620]
call fcn.1400024f0
add rbx, 0x20
cmp rbx, rdi
jne 0x140037d60
mov rax, qword [rsi + 0x1e8]
sub rax, qword [rsi + 0x1e0]
cmp rax, 0x20
jb 0x140037e24
lea rcx, str.___________Failed_Termination_of_Processes_______________
call fcn.1400262b0
mov rbx, qword [rsi + 0x1e0]
mov rdi, qword [rsi + 0x1e8]
cmp rbx, rdi
je 0x140037e24
nop word [rax + rax]
mov rdx, rbx
lea rcx, [rsp + 0x640]
call fcn.1400025c0
nop
lea rcx, [rsp + 0x640]
call fcn.1400024e0
mov rdx, rax
lea rcx, [0x1400bd338]
call fcn.1400262b0
nop
lea rcx, [rsp + 0x640]
call fcn.1400024f0
add rbx, 0x20
cmp rbx, rdi
jne 0x140037de0
mov rax, qword [rsi + 0x1a0]
sub rax, qword [rsi + 0x198]
cmp rax, 0x20
jb 0x140037ea4
lea rcx, str.___________Failed_Deletions_of_Scheduled_Tasks_______________
call fcn.1400262b0
mov rbx, qword [rsi + 0x198]
mov rdi, qword [rsi + 0x1a0]
cmp rbx, rdi
je 0x140037ea4
nop word [rax + rax]
mov rdx, rbx
lea rcx, [rsp + 0x660]
call fcn.1400025c0
nop
lea rcx, [rsp + 0x660]
call fcn.1400024e0
mov rdx, rax
lea rcx, [0x1400bd338]
call fcn.1400262b0
nop
lea rcx, [rsp + 0x660]
call fcn.1400024f0
add rbx, 0x20
cmp rbx, rdi
jne 0x140037e60
mov rbx, qword [rsp + 0x50]
lea rsi, [rbx + 0x368]
mov rcx, rsi
call fcn.14003e060
test rax, rax
je 0x140037f50
lea rcx, str.___________Retry_of_Failed_of_Applications_______________
call fcn.1400262b0
lea rcx, [rbx + 0x2e8]
mov rdx, rsi
call fcn.14004cd60
mov rbx, qword [rsi]
mov qword [rsp + 0x40], rbx
cmp rbx, qword [rsi + 8]
je 0x140037f50
mov r14, qword [rsp + 0x88]
cmp dword [rbx + 0x1e0], 0
jne 0x140037f2b
mov rdx, rbx
mov rcx, r14
call fcn.14003e310
mov r8, rbx
lea rdx, [rsp + 0x130]
mov rcx, rsi
call fcn.14003e090
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0x40]
call fcn.14003c9a0
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0x40]
call fcn.14003c9c0
mov rbx, qword [rsp + 0x40]
cmp rbx, qword [rsi + 8]
jne 0x140037ef2
mov r14, qword [rsp + 0xc8]
mov rcx, r12
call fcn.14003e470
test rax, rax
je 0x140037fc7
lea rcx, str.___________Failed_Deletions_of_Drivers_______________
call fcn.1400262b0
mov rbx, qword [r12]
mov rdi, qword [r12 + 8]
cmp rbx, rdi
je 0x140037fc7
nop word [rax + rax]
mov rdx, rbx
lea rcx, [rsp + 0x970]
call fcn.1400304b0
nop
lea rcx, [rsp + 0x970]
call fcn.1400024e0
mov rdx, rax
lea rcx, [0x1400bd338]
call fcn.1400262b0
nop
lea rcx, [rsp + 0x970]
call fcn.140030530
add rbx, 0x260
cmp rbx, rdi
jne 0x140037f80
mov rdi, qword [rsp + 0x50]
mov rax, qword [rdi + 0x1b8]
sub rax, qword [rdi + 0x1b0]
cmp rax, 0x20
jb 0x140038044
lea rcx, str.___________Failed_Deletion_of_Files_______________
call fcn.1400262b0
mov rbx, qword [rdi + 0x1b0]
mov rdi, qword [rdi + 0x1b8]
cmp rbx, rdi
je 0x140038044
nop
mov rdx, rbx
lea rcx, [rsp + 0x500]
call fcn.1400025c0
nop
lea rcx, [rsp + 0x500]
call fcn.1400024e0
mov rdx, rax
lea rcx, [0x1400bd338]
call fcn.1400262b0
nop
lea rcx, [rsp + 0x500]
call fcn.1400024f0
add rbx, 0x20
cmp rbx, rdi
jne 0x140038000
mov rdi, qword [rsp + 0x50]
mov rax, qword [rdi + 0x170]
sub rax, qword [rdi + 0x168]
cmp rax, 0x20
jb 0x1400380c4
lea rcx, str.___________Failed_Deletion_of_Directories_______________
call fcn.1400262b0
mov rbx, qword [rdi + 0x168]
mov rdi, qword [rdi + 0x170]
cmp rbx, rdi
je 0x1400380c4
nop dword [rax]
mov rdx, rbx
lea rcx, [rsp + 0x520]
call fcn.1400025c0
nop
lea rcx, [rsp + 0x520]
call fcn.1400024e0
mov rdx, rax
lea rcx, [0x1400bd338]
call fcn.1400262b0
nop
lea rcx, [rsp + 0x520]
call fcn.1400024f0
add rbx, 0x20
cmp rbx, rdi
jne 0x140038080
mov rdi, qword [rsp + 0x50]
mov rax, qword [rdi + 0x110]
sub rax, qword [rdi + 0x108]
cmp rax, 0x20
jb 0x140038144
lea rcx, str.___________Failed_Deletion_of_Registry_Keys_______________
call fcn.1400262b0
mov rbx, qword [rdi + 0x108]
mov rdi, qword [rdi + 0x110]
cmp rbx, rdi
je 0x140038144
nop dword [rax]
mov rdx, rbx
lea rcx, [rsp + 0x540]
call fcn.1400025c0
nop
lea rcx, [rsp + 0x540]
call fcn.1400024e0
mov rdx, rax
lea rcx, [0x1400bd338]
call fcn.1400262b0
nop
lea rcx, [rsp + 0x540]
call fcn.1400024f0
add rbx, 0x20
cmp rbx, rdi
jne 0x140038100
mov rdi, qword [rsp + 0x50]
mov rax, qword [rdi + 0x128]
sub rax, qword [rdi + 0x120]
cmp rax, 0x20
jb 0x1400381c4
lea rcx, str.___________Failed_Deletion_of_Registry_Values_______________
call fcn.1400262b0
mov rbx, qword [rdi + 0x120]
mov rdi, qword [rdi + 0x128]
cmp rbx, rdi
je 0x1400381c4
nop dword [rax]
mov rdx, rbx
lea rcx, [rsp + 0x560]
call fcn.1400025c0
nop
lea rcx, [rsp + 0x560]
call fcn.1400024e0
mov rdx, rax
lea rcx, [0x1400bd338]
call fcn.1400262b0
nop
lea rcx, [rsp + 0x560]
call fcn.1400024f0
add rbx, 0x20
cmp rbx, rdi
jne 0x140038180
mov rdi, qword [rsp + 0x68]
mov rax, qword [rdi + 8]
sub rax, qword [rdi]
cmp rax, 0x20
jb 0x140038234
lea rcx, str.___________Failed_Deletion_of_PreUninstall_Registry_Values_______________
call fcn.1400262b0
mov rbx, qword [rdi]
mov rdi, qword [rdi + 8]
cmp rbx, rdi
je 0x140038234
nop
mov rdx, rbx
lea rcx, [rsp + 0x580]
call fcn.1400025c0
nop
lea rcx, [rsp + 0x580]
call fcn.1400024e0
mov rdx, rax
lea rcx, [0x1400bd338]
call fcn.1400262b0
nop
lea rcx, [rsp + 0x580]
call fcn.1400024f0
add rbx, 0x20
cmp rbx, rdi
jne 0x1400381f0
mov rdi, qword [rsp + 0x50]
mov rax, qword [rdi + 0x158]
sub rax, qword [rdi + 0x150]
cmp rax, 0x20
jb 0x1400382b4
lea rcx, str.___________Failed_Deletion_of_PreUninstall_Registry_Values_______________
call fcn.1400262b0
mov rbx, qword [rdi + 0x150]
mov rdi, qword [rdi + 0x158]
cmp rbx, rdi
je 0x1400382b4
nop dword [rax]
mov rdx, rbx
lea rcx, [rsp + 0x5a0]
call fcn.1400025c0
nop
lea rcx, [rsp + 0x5a0]
call fcn.1400024e0
mov rdx, rax
lea rcx, [0x1400bd338]
call fcn.1400262b0
nop
lea rcx, [rsp + 0x5a0]
call fcn.1400024f0
add rbx, 0x20
cmp rbx, rdi
jne 0x140038270
mov dword [0x1400e50cc], 1
mov rcx, rsi
call fcn.14003e060
mov r8d, 1
test rax, rax
cmovne r8d, r15d
mov dword [0x1400e50cc], r8d
mov rcx, r12
call fcn.14003e470
test rax, rax
mov rax, 0xffffffffffffffff
cmovne r8d, eax
mov dword [0x1400e50cc], r8d
lea rdx, [rsp + 0x1040]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
je 0x14003865a
lea r8, [0x1400e0df0]
lea rdx, [rsp + 0x1040]
lea rcx, [rsp + 0x6c0]
call fcn.140016900
nop
lea r8, [0x1400bc204]
mov rdx, rax
lea rcx, [rsp + 0x6a0]
call fcn.1400169e0
nop
lea r8, [0x1400e0db0]
mov rdx, rax
lea rcx, [rsp + 0x480]
call fcn.140016f70
nop
lea rcx, [rsp + 0x6a0]
call fcn.1400024f0
nop
lea rcx, [rsp + 0x6c0]
call fcn.1400024f0
lea rdx, [rsp + 0x480]
lea rcx, [rsp + 0x5c0]
call fcn.140015ca0
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x5c0]
call fcn.140007bd0
movzx ebx, al
lea rcx, [rsp + 0x5c0]
call fcn.1400024f0
test bl, bl
jne 0x14003844d
lea rcx, [rsp + 0x480]
call fcn.1400024e0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov ebx, eax
and ebx, 0xfffffffe
lea rcx, [rsp + 0x480]
call fcn.1400024e0
mov edx, ebx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
je 0x14003844d
lea rdx, [rsp + 0x480]
lea rcx, [rsp + 0x5e0]
call fcn.140015ca0
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x5e0]
call fcn.140007bd0
movzx ebx, al
lea rcx, [rsp + 0x5e0]
call fcn.1400024f0
test bl, bl
jne 0x14003844d
lea rcx, [rsp + 0x480]
call fcn.1400024e0
mov rcx, rax
xor edx, edx
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
lea rcx, [rsp + 0xf8]
call fcn.140013500
nop
mov rbx, qword [r13]
mov qword [rsp + 0x40], rbx
cmp rbx, qword [r13 + 8]
je 0x1400384cc
nop word [rax + rax]
mov r8, rbx
lea rdx, [rsp + 0x188]
lea rcx, [rsp + 0xf8]
call fcn.140042140
cmp byte [rsp + 0x190], 0
jne 0x1400384af
mov r8, rbx
lea rdx, [rsp + 0x140]
mov rcx, r13
call fcn.14003e4a0
mov rbx, qword [rax]
mov qword [rsp + 0x40], rbx
jmp 0x1400384c6
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x40]
call fcn.14003c9e0
mov rbx, qword [rsp + 0x40]
cmp rbx, qword [r13 + 8]
jne 0x140038470
lea rcx, [rsp + 0xf8]
call fcn.14003c960
mov rdi, qword [rsp + 0x50]
add rdi, 0x350
mov rbx, qword [rdi]
mov qword [rsp + 0x40], rbx
cmp rbx, qword [rdi + 8]
je 0x14003854f
mov r8, rbx
lea rdx, [rsp + 0x198]
lea rcx, [rsp + 0xf8]
call fcn.140042140
cmp byte [rsp + 0x1a0], 0
jne 0x140038532
mov r8, rbx
lea rdx, [rsp + 0x118]
mov rcx, rdi
call fcn.14003e4a0
mov rbx, qword [rax]
mov qword [rsp + 0x40], rbx
jmp 0x140038549
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x40]
call fcn.14003c9e0
mov rbx, qword [rsp + 0x40]
cmp rbx, qword [rdi + 8]
jne 0x1400384f3
lea rcx, [rsp + 0xf8]
call fcn.14003c960
mov rbx, qword [r12]
mov qword [rsp + 0x40], rbx
cmp rbx, qword [r12 + 8]
je 0x1400385cd
nop dword [rax]
mov r8, rbx
lea rdx, [rsp + 0x1a8]
lea rcx, [rsp + 0xf8]
call fcn.140042140
cmp byte [rsp + 0x1b0], 0
jne 0x1400385af
mov r8, rbx
lea rdx, [rsp + 0x138]
mov rcx, r12
call fcn.14003e4a0
mov rbx, qword [rax]
mov qword [rsp + 0x40], rbx
jmp 0x1400385c6
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0x40]
call fcn.14003c9e0
mov rbx, qword [rsp + 0x40]
cmp rbx, qword [r12 + 8]
jne 0x140038570
lea rax, [rsp + 0x230]
mov qword [rsp + 0x138], rax
lea rdx, str.uninst
lea rcx, [rsp + 0x230]
call fcn.140002560
mov rbx, rax
lea r8, [0x1400e0df0]
lea rdx, [rsp + 0x1040]
lea rcx, [rsp + 0x210]
call fcn.140016900
nop
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rdi
mov rcx, qword [rsp + 0x88]
mov qword [rsp + 0x20], rcx
mov r9, r13
mov r8, r14
mov rdx, rbx
mov rcx, rax
call fcn.1400525c0
nop
lea rcx, [rsp + 0xf8]
call fcn.14000dea0
nop
lea rcx, [rsp + 0x480]
call fcn.1400024f0
mov rbx, qword [rsp + 0x50]
mov rcx, rbx
call fcn.140039380
cmp byte [rbx + 0x452], 0
je 0x14003868a
mov dword [0x1400e50c8], 1
cmp byte [0x1400e50b8], 0
je 0x140038693
call fcn.140039d70
jmp 0x140038693
mov rcx, rbx
call fcn.14002bac0
nop
lea rcx, [rsp + 0xa8]
call fcn.14003e3e0
nop
lea rcx, [rsp + 0x148]
call fcn.1400026d0
nop
lea rcx, [rsp + 0xe0]
call fcn.1400026d0
nop
lea rcx, [rsp + 0x160]
call fcn.1400026d0
nop
lea rcx, [rsp + 0x110]
call fcn.14003ca00
nop
lea rcx, [rsp + 0x420]
call fcn.1400024f0
nop
lea rcx, [rsp + 0x440]
call fcn.1400024f0
nop
lea rcx, [rsp + 0x78]
call fcn.14003e980
nop
lea rcx, [rsp + 0x80]
call fcn.14003e980
mov rcx, qword [rsp + 0x1250]
xor rcx, rsp
call fcn.140070140
lea r11, [rsp + 0x1260]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov ecx, 0x80004005
call fcn.1400277b0
nop
mov ecx, 0x80004005
call fcn.1400277b0
nop
call fcn.14007d0fc
int3
call fcn.14007d0fc
nop
mov ecx, 0x80070057
call fcn.1400277b0
nop
mov ecx, 0x80070057
call fcn.1400277b0
nop
call fcn.1400033d0
mov r8, rax
lea r9, str.Unable_to_open_registry_key
lea rcx, [rsp + 0x2a0]
call fcn.140009370
lea rdx, [0x1400dc6c0]
lea rcx, [rsp + 0x2a0]
call fcn.140071fb4
nop
call fcn.1400033d0
mov r8, rax
lea r9, str.Unable_to_get_registry_value
lea rcx, [rsp + 0x2c8]
call fcn.140009370
lea rdx, [0x1400dc6c0]
lea rcx, [rsp + 0x2c8]
call fcn.140071fb4
call fcn.1400033d0
mov r8, rax
lea r9, str.Unable_to_get_registry_value
lea rcx, [rsp + 0x2f0]
call fcn.140009370
lea rdx, [0x1400dc6c0]
lea rcx, [rsp + 0x2f0]
call fcn.140071fb4
nop
call fcn.1400033d0
mov r8, rax
lea r9, str.Unable_to_open_registry_key
lea rcx, [rsp + 0x250]
call fcn.140009370
lea rdx, [0x1400dc6c0]
lea rcx, [rsp + 0x250]
call fcn.140071fb4
nop
call fcn.1400033d0
mov r8, rax
lea r9, str.Unable_to_get_registry_value
lea rcx, [rsp + 0x318]
call fcn.140009370
lea rdx, [0x1400dc6c0]
lea rcx, [rsp + 0x318]
call fcn.140071fb4
nop
call fcn.1400033d0
mov r8, rax
lea r9, str.Unable_to_get_registry_value
lea rcx, [rsp + 0x340]
call fcn.140009370
lea rdx, [0x1400dc6c0]
lea rcx, [rsp + 0x340]
call fcn.140071fb4
nop
lea r8, [rsp + 0x3c0]
lea rdx, [rsp + 0x370]
lea rcx, str.exists
call fcn.140006ab0
lea r8, [rsp + 0x3c0]
mov edx, eax
lea rcx, str.permissions
call fcn.1400069c0
call fcn.14007d0fc
int3
call fcn.14007d0fc
nop
lea r8, [rsp + 0x3e0]
lea rdx, [rsp + 0x370]
lea rcx, [rsp + 0x90]
call fcn.1400332c0
lea rdx, [rsp + 0x740]
mov rcx, rax
call fcn.140033200
mov r9, rax
call fcn.1400033d0
mov r8, rax
mov edx, ebx
lea rcx, [rsp + 0x278]
call fcn.1400332d0
lea rdx, [0x1400dc6c0]
lea rcx, [rsp + 0x278]
call fcn.140071fb4
nop
call fcn.14007d0fc
nop
call fcn.14007d0fc
int3
call fcn.140015430
call fcn.140015430
call fcn.140015430
call fcn.140015430
call fcn.140015430
call fcn.140015430
call fcn.14007d0fc
nop
call fcn.14007d0fc
nop
call fcn.14007d0fc
int3
call fcn.140015430
nop
call fcn.14007d0fc
nop
call fcn.140015430
nop
call fcn.14007d0fc
nop
call fcn.140015430
nop
call fcn.14007d0fc
nop
call fcn.140002000
int3
call fcn.140002000
int3
call fcn.14007d0fc
nop
call fcn.140015430
nop
call fcn.140015430
int3
call fcn.140015430
int3