Function at 0x1400bd950
Capabilities:
Delete file
Delete registry value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1510]
mov eax, 0x1610
call fcn.1401e33b0
sub rsp, rax
mov rax, qword [0x1402a76c0]
xor rax, rsp
mov qword [rbp + 0x1500], rax
mov rbx, rcx
xor r15d, r15d
lea rdx, str.UninstallerInstall::DeleteOldUnInst
lea rcx, [rbp + 0x90]
call fcn.14001abe0
nop
lea r14, [0x1402a8360]
lea r13, [0x1402bbdb0]
mov rcx, qword [0x1402a8360]
cmp rcx, r14
je 0x1400bd9ef
test byte [rcx + 0x1c], 1
je 0x1400bd9ef
mov r9, r13
cmp qword [0x1402bbdc8], 8
cmovae r9, qword [0x1402bbdb0]
lea edx, [r15 + 0x1e]
lea r8, [0x14025b960]
mov rcx, qword [rcx + 0x10]
call fcn.140001ad0
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0xe0]
call fcn.1401e7e40
xor edx, edx
mov r8d, 0x800
lea rcx, [rbp + 0x500]
call fcn.1401e7e40
lea rcx, [0x140253e18]
call fcn.1400d5250
test eax, eax
je 0x1400bda37
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax + 0x10]
call qword [case.0x1400136d6.0]
mov rcx, qword [0x1402bbf50]
mov rax, qword [rcx]
mov rax, qword [rax + 0x48]
call qword [case.0x1400136d6.0]
mov r9, rax
mov rcx, qword [rax]
mov rax, qword [rcx + 0x18]
lea r8, [rbp + 0x500]
lea rdx, str.UninstallerRegKeyName
mov rcx, r9
call qword [case.0x1400136d6.0]
lea r12, vtable.CMap_class_ATL::CStringT_unsigned_short_int__class_StrTraitMFC_unsigned_short_int__class_ATL::ChTraitsCRT_unsigned_short_int_____unsigned_short_int_const____ptr64__unsigned_char____ptr64__unsigned_char____ptr64_.0
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], r15
mov dword [rsp + 0x58], reloc.COMCTL32.dll_InitCommonControls
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmm1, xmmword [0x14026f400]
movdqa xmmword [rsp + 0x70], xmm1
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], r15
lfence
mov ecx, 0x48
call fcn.1401baa78
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x40], r15
mov rcx, qword [rsp + 0x60]
mov rax, rcx
neg rax
sbb rsi, rsi
mov rdi, 0xffffffffffffffff
test rcx, rcx
je 0x1400bdc40
nop dword [rax]
call fcn.1401bb0c4
mov rcx, rax
test rax, rax
je 0x1400be917
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x1400136d6.0]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x30], rbx
mov r9, qword [rsp + 0x50]
test r9, r9
je 0x1400be911
mov r14, rsi
test rsi, rsi
je 0x1400be911
mov r8d, dword [rsp + 0x58]
cmp rsi, 0xffffffffffffffff
jne 0x1400bdb5f
mov ecx, r15d
test r8d, r8d
je 0x1400bdb5f
mov eax, ecx
mov r14, qword [r9 + rax*8]
test r14, r14
jne 0x1400bdb5f
inc ecx
cmp ecx, r8d
jb 0x1400bdb44
test r14, r14
je 0x1400be911
mov rsi, qword [r14 + 0x10]
test rsi, rsi
jne 0x1400bdb90
xor edx, edx
mov eax, dword [r14 + 0x18]
div r8d
inc edx
cmp edx, r8d
jae 0x1400bdb90
nop dword [rax + rax]
mov rsi, qword [r9 + rdx*8]
test rsi, rsi
jne 0x1400bdb90
inc edx
cmp edx, r8d
jb 0x1400bdb80
mov rdx, qword [r14]
lea rcx, [rdx - 0x18]
lea r15, [rbx - 0x18]
cmp rcx, r15
je 0x1400bdbf8
cmp dword [r15 + 0x10], 0
jl 0x1400bdbe5
mov rax, qword [r15]
cmp qword [rcx], rax
jne 0x1400bdbe5
call fcn.140004d00
mov rbx, rax
mov ecx, edi
lock xadd dword [r15 + 0x10], ecx
sub ecx, 1
jg 0x1400bdbda
lfence
mov rcx, qword [r15]
mov r8, qword [rcx]
mov rdx, r15
mov rax, qword [r8 + 8]
call qword [case.0x1400136d6.0]
add rbx, 0x18
mov qword [rsp + 0x30], rbx
jmp 0x1400bdbf8
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x30]
call fcn.140004e60
mov rbx, qword [rsp + 0x30]
mov rcx, qword [r14 + 8]
test rcx, rcx
je 0x1400bdc07
call fcn.1400079c0
nop
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400bdc2a
lfence
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x1400136d6.0]
test rsi, rsi
mov r15d, 0
jne 0x1400bdaf0
lea r14, [0x1402a8360]
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x1400bdca8
mov esi, r15d
mov edx, dword [rsp + 0x58]
test edx, edx
je 0x1400bdc9e
mov eax, esi
mov rbx, qword [rcx + rax*8]
test rbx, rbx
je 0x1400bdc98
mov rdx, qword [rbx]
sub rdx, 0x18
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400bdc86
lfence
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x1400136d6.0]
mov rbx, qword [rbx + 0x10]
test rbx, rbx
jne 0x1400bdc60
mov edx, dword [rsp + 0x58]
mov rcx, qword [rsp + 0x50]
inc esi
cmp esi, edx
jb 0x1400bdc55
call fcn.1400079c0
mov qword [rsp + 0x50], r15
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov rcx, qword [rsp + 0x70]
call fcn.1401bc020
mov qword [rsp + 0x70], r15
mov rbx, qword [rbp - 0x80]
mov r8, qword [rbx + 8]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x80]
call fcn.140008f00
mov qword [rbx + 8], rbx
mov qword [rbx], rbx
mov qword [rbx + 0x10], rbx
mov qword [rbp - 0x78], r15
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
lea rdx, str.SOFTWARECanonPrnUninst
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x1400bdd56
mov rcx, qword [0x1402a8360]
cmp rcx, r14
je 0x1400be4f8
test byte [rcx + 0x1c], 4
je 0x1400be4f8
mov r9, r13
cmp qword [0x1402bbdc8], 8
cmovae r9, qword [0x1402bbdb0]
mov edx, 0x1f
lea r8, [0x14025b960]
mov rcx, qword [rcx + 0x10]
call fcn.140001ad0
jmp 0x1400be4f8
mov qword [rbp], r15
xor r9d, r9d
lea r8, [rbp]
lea rdx, [rbp + 0x500]
lea rcx, [rsp + 0x40]
call fcn.140007cf0
test eax, eax
jne 0x1400bdd8b
mov r8, qword [rbp]
mov edx, 0x104
lea rcx, [rbp + 0xe0]
call fcn.1401ebfa8
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1400bdda2
lea rdx, [rbp + 0x500]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov qword [rbp - 0x68], r12
mov qword [rbp - 0x60], r15
mov dword [rbp - 0x58], reloc.COMCTL32.dll_InitCommonControls
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x14026f400]
movdqa xmmword [rbp - 0x40], xmm1
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], r15
lfence
mov ecx, 0x48
call fcn.1401baa78
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x70], r15
mov r12, qword [rsp + 0x40]
test r12, r12
je 0x1400be4b4
mov rcx, qword [rbp - 0x50]
mov rax, rcx
neg rax
sbb rsi, rsi
test rcx, rcx
je 0x1400bdf5a
call fcn.1401bb0c4
mov rcx, rax
test rax, rax
je 0x1400be934
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x1400136d6.0]
lea rbx, [rax + 0x18]
mov qword [rbp - 0x20], rbx
mov r9, qword [rbp - 0x60]
test r9, r9
je 0x1400be922
mov r14, rsi
test rsi, rsi
je 0x1400be922
mov r8d, dword [rbp - 0x58]
cmp rsi, 0xffffffffffffffff
jne 0x1400bde8b
mov ecx, r15d
test r8d, r8d
je 0x1400bde8b
nop dword [rax]
mov eax, ecx
mov r14, qword [r9 + rax*8]
test r14, r14
jne 0x1400bde8b
inc ecx
cmp ecx, r8d
jb 0x1400bde70
test r14, r14
je 0x1400be922
mov rsi, qword [r14 + 0x10]
test rsi, rsi
jne 0x1400bdeb4
xor edx, edx
mov eax, dword [r14 + 0x18]
div r8d
inc edx
cmp edx, r8d
jae 0x1400bdeb4
mov rsi, qword [r9 + rdx*8]
test rsi, rsi
jne 0x1400bdeb4
inc edx
cmp edx, r8d
jb 0x1400bdea4
mov rdx, qword [r14]
lea rcx, [rdx - 0x18]
lea r15, [rbx - 0x18]
cmp rcx, r15
je 0x1400bdf19
cmp dword [r15 + 0x10], 0
jl 0x1400bdf08
mov rax, qword [r15]
cmp qword [rcx], rax
jne 0x1400bdf08
call fcn.140004d00
mov rbx, rax
mov ecx, edi
lock xadd dword [r15 + 0x10], ecx
sub ecx, 1
jg 0x1400bdefe
lfence
mov rcx, qword [r15]
mov r8, qword [rcx]
mov rdx, r15
mov rax, qword [r8 + 8]
call qword [case.0x1400136d6.0]
add rbx, 0x18
mov qword [rbp - 0x20], rbx
jmp 0x1400bdf19
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x20]
call fcn.140004e60
mov rbx, qword [rbp - 0x20]
mov rcx, qword [r14 + 8]
test rcx, rcx
je 0x1400bdf28
call fcn.1400079c0
nop
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400bdf4b
lfence
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x1400136d6.0]
test rsi, rsi
mov r15d, 0
jne 0x1400bde18
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x1400bdfc5
mov esi, r15d
mov edx, dword [rbp - 0x58]
test edx, edx
je 0x1400bdfbc
nop dword [rax]
mov eax, esi
mov rbx, qword [rcx + rax*8]
test rbx, rbx
je 0x1400bdfb6
nop dword [rax + rax]
mov rdx, qword [rbx]
sub rdx, 0x18
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400bdfa6
lfence
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x1400136d6.0]
mov rbx, qword [rbx + 0x10]
test rbx, rbx
jne 0x1400bdf80
mov edx, dword [rbp - 0x58]
mov rcx, qword [rbp - 0x60]
inc esi
cmp esi, edx
jb 0x1400bdf70
call fcn.1400079c0
mov qword [rbp - 0x60], r15
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x50], xmm0
mov rcx, qword [rbp - 0x40]
call fcn.1401bc020
mov qword [rbp - 0x40], r15
mov rbx, qword [rbp - 0x30]
mov r8, qword [rbx + 8]
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x30]
call fcn.140008f00
mov qword [rbx + 8], rbx
mov qword [rbx], rbx
mov qword [rbx + 0x10], rbx
mov qword [rbp - 0x28], r15
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
lea rdx, [rbp + 0x500]
mov rcx, r12
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1400be4ad
mov qword [rbp - 8], r15
xor r9d, r9d
lea r8, [rbp - 8]
lea rdx, str.exePath
lea rcx, [rbp - 0x70]
call fcn.140007cf0
test eax, eax
jne 0x1400be05c
mov r8, qword [rbp - 8]
mov edx, 0x104
lea rcx, [rbp + 0xe0]
call fcn.1401ebfa8
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x1400be079
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rbp - 0x70]
test eax, eax
cmove rcx, r15
mov qword [rbp - 0x70], rcx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
neg rax
sbb rsi, rsi
test rcx, rcx
je 0x1400be1cb
nop
call fcn.1401bb0c4
mov rcx, rax
test rax, rax
je 0x1400be934
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x1400136d6.0]
lea rbx, [rax + 0x18]
mov qword [rbp - 0x18], rbx
mov r9, qword [rbp - 0x60]
test r9, r9
je 0x1400be928
mov r14, rsi
test rsi, rsi
je 0x1400be928
mov r8d, dword [rbp - 0x58]
cmp rsi, 0xffffffffffffffff
jne 0x1400be0fc
mov ecx, r15d
test r8d, r8d
je 0x1400be0fc
mov eax, ecx
mov r14, qword [r9 + rax*8]
test r14, r14
jne 0x1400be0fc
inc ecx
cmp ecx, r8d
jb 0x1400be0e1
test r14, r14
je 0x1400be928
mov rsi, qword [r14 + 0x10]
test rsi, rsi
jne 0x1400be125
xor edx, edx
mov eax, dword [r14 + 0x18]
div r8d
inc edx
cmp edx, r8d
jae 0x1400be125
mov rsi, qword [r9 + rdx*8]
test rsi, rsi
jne 0x1400be125
inc edx
cmp edx, r8d
jb 0x1400be115
mov rdx, qword [r14]
lea rcx, [rdx - 0x18]
lea r15, [rbx - 0x18]
cmp rcx, r15
je 0x1400be18a
cmp dword [r15 + 0x10], 0
jl 0x1400be179
mov rax, qword [r15]
cmp qword [rcx], rax
jne 0x1400be179
call fcn.140004d00
mov rbx, rax
mov ecx, edi
lock xadd dword [r15 + 0x10], ecx
sub ecx, 1
jg 0x1400be16f
lfence
mov rcx, qword [r15]
mov r8, qword [rcx]
mov rdx, r15
mov rax, qword [r8 + 8]
call qword [case.0x1400136d6.0]
add rbx, 0x18
mov qword [rbp - 0x18], rbx
jmp 0x1400be18a
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x18]
call fcn.140004e60
mov rbx, qword [rbp - 0x18]
mov rcx, qword [r14 + 8]
test rcx, rcx
je 0x1400be199
call fcn.1400079c0
nop
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400be1bc
lfence
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x1400136d6.0]
test rsi, rsi
mov r15d, 0
jne 0x1400be090
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x1400be235
mov esi, r15d
mov edx, dword [rbp - 0x58]
test edx, edx
je 0x1400be22c
nop
mov eax, esi
mov rbx, qword [rcx + rax*8]
test rbx, rbx
je 0x1400be226
nop dword [rax + rax]
mov rdx, qword [rbx]
sub rdx, 0x18
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400be216
lfence
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x1400136d6.0]
mov rbx, qword [rbx + 0x10]
test rbx, rbx
jne 0x1400be1f0
mov edx, dword [rbp - 0x58]
mov rcx, qword [rbp - 0x60]
inc esi
cmp esi, edx
jb 0x1400be1e0
call fcn.1400079c0
mov qword [rbp - 0x60], r15
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x50], xmm0
mov rcx, qword [rbp - 0x40]
call fcn.1401bc020
mov qword [rbp - 0x40], r15
mov rbx, qword [rbp - 0x30]
mov r8, qword [rbx + 8]
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x30]
call fcn.140008f00
mov qword [rbx + 8], rbx
mov qword [rbx], rbx
mov qword [rbx + 0x10], rbx
mov qword [rbp - 0x28], r15
lea r8, [rbp + 0x500]
mov rdx, qword [rsp + 0x40]
call fcn.140019000
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1400be29f
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [rsp + 0x40]
test eax, eax
cmove rcx, r15
mov qword [rsp + 0x40], rcx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
neg rax
sbb rsi, rsi
test rcx, rcx
je 0x1400be3fa
call fcn.1401bb0c4
mov rcx, rax
test rax, rax
je 0x1400be934
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x1400136d6.0]
lea rbx, [rax + 0x18]
mov qword [rbp - 0x10], rbx
mov r9, qword [rsp + 0x50]
test r9, r9
je 0x1400be92e
mov r14, rsi
test rsi, rsi
je 0x1400be92e
mov r8d, dword [rsp + 0x58]
cmp rsi, 0xffffffffffffffff
jne 0x1400be32b
mov ecx, r15d
test r8d, r8d
je 0x1400be32b
nop dword [rax]
mov eax, ecx
mov r14, qword [r9 + rax*8]
test r14, r14
jne 0x1400be32b
inc ecx
cmp ecx, r8d
jb 0x1400be310
test r14, r14
je 0x1400be92e
mov rsi, qword [r14 + 0x10]
test rsi, rsi
jne 0x1400be354
xor edx, edx
mov eax, dword [r14 + 0x18]
div r8d
inc edx
cmp edx, r8d
jae 0x1400be354
mov rsi, qword [r9 + rdx*8]
test rsi, rsi
jne 0x1400be354
inc edx
cmp edx, r8d
jb 0x1400be344
mov rdx, qword [r14]
lea rcx, [rdx - 0x18]
lea r15, [rbx - 0x18]
cmp rcx, r15
je 0x1400be3b9
cmp dword [r15 + 0x10], 0
jl 0x1400be3a8
mov rax, qword [r15]
cmp qword [rcx], rax
jne 0x1400be3a8
call fcn.140004d00
mov rbx, rax
mov ecx, edi
lock xadd dword [r15 + 0x10], ecx
sub ecx, 1
jg 0x1400be39e
lfence
mov rcx, qword [r15]
mov r8, qword [rcx]
mov rdx, r15
mov rax, qword [r8 + 8]
call qword [case.0x1400136d6.0]
add rbx, 0x18
mov qword [rbp - 0x10], rbx
jmp 0x1400be3b9
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x10]
call fcn.140004e60
mov rbx, qword [rbp - 0x10]
mov rcx, qword [r14 + 8]
test rcx, rcx
je 0x1400be3c8
call fcn.1400079c0
nop
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400be3eb
lfence
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x1400136d6.0]
test rsi, rsi
mov r15d, 0
jne 0x1400be2b6
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x1400be468
mov esi, r15d
mov edx, dword [rsp + 0x58]
test edx, edx
je 0x1400be45e
nop
mov eax, esi
mov rbx, qword [rcx + rax*8]
test rbx, rbx
je 0x1400be458
nop dword [rax + rax]
mov rdx, qword [rbx]
sub rdx, 0x18
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400be446
lfence
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x1400136d6.0]
mov rbx, qword [rbx + 0x10]
test rbx, rbx
jne 0x1400be420
mov edx, dword [rsp + 0x58]
mov rcx, qword [rsp + 0x50]
inc esi
cmp esi, edx
jb 0x1400be410
call fcn.1400079c0
mov qword [rsp + 0x50], r15
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov rcx, qword [rsp + 0x70]
call fcn.1401bc020
mov qword [rsp + 0x70], r15
mov rbx, qword [rbp - 0x80]
mov r8, qword [rbx + 8]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x80]
call fcn.140008f00
mov qword [rbx + 8], rbx
mov qword [rbx], rbx
mov qword [rbx + 0x10], rbx
mov qword [rbp - 0x78], r15
lea r14, [0x1402a8360]
jmp 0x1400be4ef
lea r14, [0x1402a8360]
mov rcx, qword [0x1402a8360]
cmp rcx, r14
je 0x1400be4ef
test byte [rcx + 0x1c], 4
je 0x1400be4ef
mov r9, r13
cmp qword [0x1402bbdc8], 8
cmovae r9, qword [0x1402bbdb0]
mov edx, 0x20
lea r8, [0x14025b960]
mov rcx, qword [rcx + 0x10]
call fcn.140001ad0
nop
lea rcx, [rbp - 0x70]
call fcn.140007a90
xor edx, edx
mov r8d, 0x800
lea rcx, [rbp + 0xd00]
call fcn.1401e7e40
lea rsi, str..LNK
mov qword [rsp + 0x20], rsi
lea r9, str.Uninstaller
lea r8, [rbp + 0x500]
lea rdx, str._s__s_s
lea rcx, [rbp + 0xd00]
call qword [sym.imp.USER32.dll_wsprintfW]
lea r8, [rbp + 0xd00]
xor edx, edx
call fcn.140019490
call fcn.1400bfe20
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x2f0]
call fcn.1401e7e40
mov rcx, qword [0x1402bbf58]
mov rax, qword [rcx]
mov rax, qword [rax + 0x18]
call qword [case.0x1400136d6.0]
mov r9, rax
mov rcx, qword [rax]
mov rax, qword [rcx + 0x100]
lea r8, [rbp + 0x2f0]
mov edx, 1
mov rcx, r9
call qword [case.0x1400136d6.0]
mov ebx, eax
mov edx, eax
call fcn.140019da0
mov rcx, rax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [0x1402bbf50]
mov rdx, qword [rcx]
mov rax, qword [rdx + 0x48]
call qword [case.0x1400136d6.0]
mov r10, rax
mov rcx, qword [rax]
mov rax, qword [rcx + 0x18]
lea r8, [rbp + 0xd00]
lea rdx, str.UNINST_PDL_MENU
mov rcx, r10
call qword [case.0x1400136d6.0]
mov r9, rsi
lea r8, [rbp + 0xd00]
lea rdx, [0x1402528f8]
lea rcx, [rbp + 0xd00]
call qword [sym.imp.USER32.dll_wsprintfW]
lea r8, [rbp + 0xd00]
mov edx, ebx
call fcn.140019490
lea rdx, [rbp + 0xe0]
call fcn.1400c0230
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x60], xmm1
mov r8d, 0xa
lea rdx, str.InsCmn.dll
lea rcx, [rbp + 0x50]
call fcn.140005520
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x20], xmm1
mov r8d, 1
lea rdx, [0x140251df8]
lea rcx, [rbp + 0x10]
call fcn.140005520
nop
lea rax, [rbp + 0xe0]
nop dword [rax]
inc rdi
cmp word [rax + rdi*2], 0
jne 0x1400be670
mov r9, rdi
lea r8, [rbp + 0xe0]
lea rcx, [rbp + 0x10]
call fcn.1400c25b0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x80], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
lea r9, [rbp + 0x50]
lea r8, [rbp + 0x70]
lea rcx, [rbp + 0x30]
call fcn.14003ca20
nop
mov rdx, qword [rbp + 0x88]
cmp rdx, 8
jb 0x1400be705
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400be6ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400be93f
call fcn.1400079c0
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x1400be745
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400be740
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400be945
call fcn.1400079c0
movdqa xmm0, xmmword [0x14026f3f0]
movdqu xmmword [rbp + 0x20], xmm0
mov word [rbp + 0x10], r15w
mov rdx, qword [rbp + 0x68]
cmp rdx, 8
jb 0x1400be797
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400be792
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400be94b
call fcn.1400079c0
lea rcx, [rbp + 0x30]
cmp qword [rbp + 0x48], 8
cmovae rcx, qword [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
call fcn.1400c0460
mov byte [rbp + 0x98], 1
mov rcx, qword [0x1402a8360]
cmp rcx, r14
je 0x1400be7f7
test byte [rcx + 0x1c], 1
je 0x1400be7f7
mov r9, r13
cmp qword [0x1402bbdc8], 8
cmovae r9, qword [0x1402bbdb0]
mov edx, 0x21
mov dword [rsp + 0x20], r15d
lea r8, [0x14025b960]
mov rcx, qword [rcx + 0x10]
call fcn.140001b40
nop
mov rdx, qword [rbp + 0x48]
cmp rdx, 8
jb 0x1400be837
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400be832
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400be90b
call fcn.1400079c0
movdqa xmm0, xmmword [0x14026f3f0]
movdqu xmmword [rbp + 0x40], xmm0
mov word [rbp + 0x30], r15w
lea rcx, [rsp + 0x40]
call fcn.140007a90
nop
lea rax, vtable.WppTrace.0
mov qword [rbp + 0x90], rax
cmp byte [rbp + 0x98], 0
jne 0x1400be8c1
mov rcx, qword [0x1402a8360]
cmp rcx, r14
je 0x1400be8c1
test byte [rcx + 0x1c], 1
je 0x1400be8c1
lea rax, [rbp + 0xa0]
cmp qword [rbp + 0xb8], 8
cmovae rax, qword [rbp + 0xa0]
cmp qword [0x1402bbdc8], 8
cmovae r13, qword [0x1402bbdb0]
mov edx, 0xa
mov qword [rsp + 0x20], rax
mov r9, r13
lea r8, [0x140252818]
mov rcx, qword [rcx + 0x10]
call fcn.140006c90
lea rcx, [rbp + 0xc0]
call fcn.1400048a0
lea rcx, [rbp + 0xa0]
call fcn.1400048a0
xor eax, eax
mov rcx, qword [rbp + 0x1500]
xor rcx, rsp
call fcn.1401e2900
lea r11, [rsp + 0x1610]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1401ec41c
nop
call fcn.1401bb848
nop
mov ecx, 0x80004005
call fcn.140001470
nop
call fcn.1401bb848
nop
call fcn.1401bb848
nop
call fcn.1401bb848
nop
mov ecx, 0x80004005
call fcn.140001470
nop
call fcn.1401ec41c
nop
call fcn.1401ec41c
nop
call fcn.1401ec41c
int3