Function at 0x140039050
Capabilities:
Authenticate hmac

Disassembly:
push rbx
sub rsp, 0x20
mov edx, dword [rcx + 0xc]
mov rbx, rcx
cmp edx, 0x32
jg 0x1400390c1
je 0x1400390af
sub edx, 1
je 0x1400390af
sub edx, 1
je 0x1400390af
sub edx, 1
je 0x1400390af
sub edx, 1
je 0x1400390a5
sub edx, 4
je 0x14003909e
sub edx, 8
je 0x140039094
cmp edx, 1
jne 0x140039116
add rsp, 0x20
pop rbx
jmp 0x14003c8a0
add rsp, 0x20
pop rbx
jmp 0x1400392b0
call fcn.14003b0f8
jmp 0x1400390b4
add rsp, 0x20
pop rbx
jmp 0x14003a8d8
call fcn.140039b88
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp fcn.140039720
sub edx, 0x33
je 0x140039111
sub edx, 1
je 0x140039107
sub edx, 1
je 0x1400390fd
sub edx, 1
je 0x1400390f3
sub edx, 1
je 0x1400390e9
cmp edx, 1
jne 0x140039116
add rsp, 0x20
pop rbx
jmp 0x14003e384
add rsp, 0x20
pop rbx
jmp 0x14003e1e4
add rsp, 0x20
pop rbx
jmp 0x14003dfc8
add rsp, 0x20
pop rbx
jmp 0x14003dddc
add rsp, 0x20
pop rbx
jmp 0x14003dbe0
call fcn.14003d9e4
add rsp, 0x20
pop rbx
ret
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x260]
sub rsp, 0x360
mov rax, qword [0x1400b7a38]
xor rax, rsp
mov qword [rbp + 0x250], rax
lea rbx, [rcx + 0x2680]
mov rdx, rbx
lea rcx, [rbp + 0x30]
call fcn.14002c29c
nop
lea rdx, [0x14009a660]
lea rcx, [rbp + 0x30]
call fcn.14002c734
lea rdx, str.Zoom.exe
lea rcx, [rbp + 0x30]
call fcn.14002c734
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.14002c29c
nop
lea rdx, [0x14009a660]
lea rcx, [rsp + 0x20]
call fcn.14002c734
lea rdx, str.airhost.exe
lea rcx, [rsp + 0x20]
call fcn.14002c734
lea r8, [rsp + 0x20]
lea rdx, [rbp + 0x30]
call fcn.14003911c
movsxd rdi, eax
mov edx, 0x65
lea rcx, [rbp + 0x140]
call fcn.140033dc4
nop
mov rcx, rax
call fcn.14002c3d0
mov rdx, rax
lea rcx, str.zoom.us_Installer_Engine
call qword [sym.imp.USER32.dll_FindWindowW]
mov rbx, rax
lea rcx, [rbp + 0x140]
call fcn.14002c340
test rbx, rbx
je 0x1400393a2
mov r8, rdi
xor r9d, r9d
mov edx, 0x7f2
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
mov dword [0x1400baaf4], 1
lea rcx, [rsp + 0x20]
call fcn.14002c340
nop
lea rcx, [rbp + 0x30]
call fcn.14002c340
mov rcx, qword [rbp + 0x250]
xor rcx, rsp
call fcn.140077b20
lea r11, [rsp + 0x360]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0xbc0]
sub rsp, 0xcc0
mov rax, qword [0x1400b7a38]
xor rax, rsp
mov qword [rbp + 0xbb0], rax
mov rbx, rcx
xor r12d, r12d
cmp dword [0x1400bb9dc], r12d
jne 0x14003b0a3
mov dword [0x1400bb9dc], 1
mov ecx, dword [rcx + 8]
mov eax, 0x3e9
cmp ecx, eax
jg 0x14003b023
je 0x14003b047
test ecx, ecx
je 0x14003b01a
sub ecx, 0x32
je 0x14003ac58
sub ecx, 1
je 0x14003ac3f
sub ecx, 1
je 0x14003aa08
sub ecx, 1
je 0x14003a9cd
sub ecx, 1
je 0x14003a97b
cmp ecx, 0x3b2
je 0x14003b047
jmp 0x14003b09c
mov r9d, 0x541
lea r8, str.c:jenkinsworkspaceClientClientWindows_releaseclient_srcinstallwindowsNoMSIInstallerInstallerManager.cpp
mov edx, 2
lea rcx, [rsp + 0x20]
call fcn.14000e798
nop
lea rdx, str._CInstallerManager::ProcessUnInstallCommand__State_is:_INSTALLSTATE_UNINSTALLED
lea rcx, [0x1400ba0c0]
call fcn.140007bcc
nop
lea rcx, [rsp + 0x20]
call fcn.14000e9c4
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
mov dword [0x1400baaf4], 1
jmp 0x14003b09c
inc dword [rbx + 0x32c0]
mov eax, 0x66666667
imul dword [rbx + 0x32c0]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 0x5a
cmp edx, eax
cmovge edx, eax
mov r9d, edx
lea edx, [rax - 0x55]
lea r8d, [rax + 0xa]
mov rcx, rbx
call fcn.14003c10c
jmp 0x14003b09c
mov rax, qword [rbx + 0x32a8]
cmp qword [rbx + 0x32a0], rax
je 0x14003ab12
call fcn.1400385e0
test al, al
je 0x14003ab12
cmp byte [rbx + 0x28a3], r12b
je 0x14003aa3f
call fcn.14003d378
test eax, eax
jne 0x14003ab12
mov rcx, qword [rbx + 0x32a0]
add rcx, 8
call fcn.14001586c
mov rsi, rax
test rax, rax
je 0x14003ab12
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xba0], xmm0
lea rdi, [rsp + 0x70]
xor eax, eax
mov edx, 0x410
mov ecx, edx
rep stosb byte [rdi], al
lea rdi, [rbp + 0x380]
mov ecx, edx
rep stosb byte [rdi], al
lea rdi, [rbp + 0x790]
mov ecx, edx
rep stosb byte [rdi], al
mov rdx, rsi
lea rcx, [rsp + 0x70]
call fcn.1400382e8
nop
cmp qword [rbp + 0xba0], r12
je 0x14003aae1
mov rcx, qword [rbp + 0xba8]
test rcx, rcx
je 0x14003aae1
mov qword [rsp + 0x20], r12
mov rax, qword [rcx]
lea rdx, [rsp + 0x20]
mov rax, qword [rax + 0x28]
call qword [case.0x14002e391.0]
test eax, eax
jne 0x14003aae1
mov rcx, qword [rsp + 0x20]
test rcx, rcx
je 0x14003aae1
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
call qword [case.0x14002e391.0]
mov rcx, rsi
call fcn.14002ae70
nop
mov rcx, qword [rbp + 0xba0]
test rcx, rcx
je 0x14003aafc
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
lea rdx, [rsp + 0x70]
call fcn.1400384fc
lea rdx, [rbp + 0x790]
call fcn.1400384fc
mov rcx, qword [rbx + 0x32a0]
cmp rcx, qword [rbx + 0x32a8]
je 0x14003ac24
add rcx, 8
call fcn.14001586c
mov r14, rax
test rax, rax
je 0x14003ac24
call fcn.140009858
test al, al
je 0x14003ac1c
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x38], r12
mov edi, 7
mov qword [rsp + 0x40], rdi
mov word [rsp + 0x28], r12w
mov rdx, r14
lea rcx, [rsp + 0x28]
call fcn.1400089c4
nop
lea rdx, [rsp + 0x28]
call fcn.1400096e8
nop
mov esi, 0x1000
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x14003abbe
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, rsi
jb 0x14003abb9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b0d4
call fcn.14002ae70
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x40], rdi
mov word [rsp + 0x28], r12w
lea rdx, [rsp + 0x28]
call fcn.140009c0c
nop
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x14003ac1c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, rsi
jb 0x14003ac17
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b0da
call fcn.14002ae70
mov rcx, r14
call fcn.14002ae70
mov dword [rbx + 0x32c0], r12d
mov rcx, rbx
call fcn.14003bc54
mov dword [rbx + 8], 0x35
jmp 0x14003b09c
call fcn.1400545a8
test al, al
je 0x14003b09c
mov dword [rbx + 8], 0x34
jmp 0x14003b09c
lea r14, [rbx + 0x32a0]
mov rax, qword [r14]
mov qword [r14 + 8], rax
lea r15, [rbx + 0x28f0]
mov r8d, r12d
cmp byte [rbx + 0x28a3], r12b
setne r8b
mov rdx, r14
mov rcx, r15
call fcn.1400460b4
mov rdi, qword [r14]
mov rax, qword [rbx + 0x32a8]
cmp rdi, rax
je 0x14003ad9b
mov esi, 0x80
mov rcx, rdi
lea rdx, [rsp + 0x70]
mov eax, 2
movups xmm0, xmmword [rcx]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x60], xmm0
add rdx, rsi
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx - 0x10], xmm1
add rcx, rsi
sub rax, 1
jne 0x14003acab
movups xmm0, xmmword [rcx]
movups xmmword [rdx], xmm0
mov rax, qword [rcx + 0x10]
mov qword [rdx + 0x10], rax
mov eax, dword [rcx + 0x18]
mov dword [rdx + 0x18], eax
mov r9d, 0x4d5
lea r8, str.c:jenkinsworkspaceClientClientWindows_releaseclient_srcinstallwindowsNoMSIInstallerInstallerManager.cpp
xor edx, edx
lea rcx, [rsp + 0x20]
call fcn.14000e798
nop
lea rdx, str._Found_product
lea rcx, [0x1400ba0c0]
call fcn.140007bcc
mov rcx, rax
mov edx, dword [rsp + 0x70]
call fcn.140005afc
mov rcx, rax
lea rdx, str._state:
call fcn.140007bcc
mov rcx, rax
mov edx, dword [rsp + 0x74]
call fcn.140005afc
mov rcx, rax
lea rdx, str._at:
call fcn.140007bcc
mov rcx, rax
lea rdx, [rsp + 0x78]
call fcn.140007bcc
nop
lea rcx, [rsp + 0x20]
call fcn.14000e9c4
add rdi, 0x11c
mov rax, qword [rbx + 0x32a8]
cmp rdi, rax
jne 0x14003ac9e
mov edi, 7
mov esi, 0x1000
cmp qword [r14], rax
jne 0x14003af14
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x40], rdi
mov word [rsp + 0x28], r12w
lea rcx, [rsp + 0x28]
call fcn.14001bae8
nop
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x14003ae0c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, rsi
jb 0x14003ae07
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b0e0
call fcn.14002ae70
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x40], rdi
mov word [rsp + 0x28], r12w
lea rdx, [rsp + 0x28]
call fcn.140052f1c
nop
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x14003ae6a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, rsi
jb 0x14003ae65
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b0e6
call fcn.14002ae70
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x40], rdi
mov word [rsp + 0x28], r12w
xor r8d, r8d
lea rdx, [rsp + 0x28]
call fcn.14001e6f0
nop
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x14003aecb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, rsi
jb 0x14003aec6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b0ec
call fcn.14002ae70
lea rax, str.Zoom_5.0.lnk
lea rdx, str.Zoom.lnk
cmp byte [rbx + 0x28a3], r12b
cmovne rdx, rax
or r8d, 0xffffffff
lea rcx, [rsp + 0x70]
call fcn.14002c244
nop
lea rdx, [rsp + 0x70]
mov rcx, r15
call fcn.140047b80
nop
lea rcx, [rsp + 0x70]
call fcn.14002c340
mov dword [rbx + 8], 0x36
jmp 0x14003af35
call fcn.140054550
mov dword [rbx + 8], 0x33
mov r8d, 0x64
mov r9d, r8d
lea edx, [r8 - 0x63]
mov rcx, rbx
call fcn.14003c10c
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x40], rdi
mov word [rsp + 0x28], r12w
lea rdx, [rbx + 0x2a10]
lea rcx, [rsp + 0x48]
call fcn.140052d34
nop
lea r8, [rsp + 0x28]
mov rcx, rax
call fcn.14002191c
nop
lea rcx, [rsp + 0x48]
call fcn.140008a48
nop
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x14003afb3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, rsi
jb 0x14003afae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b0f2
call fcn.14002ae70
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x40], rdi
mov word [rsp + 0x28], r12w
lea r8, [rsp + 0x28]
call fcn.14001eac0
nop
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x14003b09c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, rsi
jb 0x14003b010
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b0ce
call fcn.14002ae70
jmp 0x14003b09c
mov dword [rbx + 8], 0x32
jmp 0x14003b09c
sub ecx, 0x3ea
je 0x14003b047
sub ecx, 1
je 0x14003b047
sub ecx, 1
je 0x14003b047
sub ecx, 1
je 0x14003b047
sub ecx, 1
je 0x14003b047
cmp ecx, 0x7ca
jne 0x14003b09c
mov r9d, 0x550
lea r8, str.c:jenkinsworkspaceClientClientWindows_releaseclient_srcinstallwindowsNoMSIInstallerInstallerManager.cpp
mov edx, 2
lea rcx, [rsp + 0x20]
call fcn.14000e798
nop
lea rdx, str._CInstallerManager::ProcessUnInstallCommand__Error__install_state_is:
lea rcx, [0x1400ba0c0]
call fcn.140007bcc
mov rcx, rax
mov edx, dword [rbx + 8]
call fcn.140005afc
nop
lea rcx, [rsp + 0x20]
call fcn.14000e9c4
mov rcx, rbx
call fcn.14003b8e8
mov dword [rbx + 8], 0x7d1
mov dword [0x1400bb9dc], r12d
mov rcx, qword [rbp + 0xbb0]
xor rcx, rsp
call fcn.140077b20
lea r11, [rsp + 0xcc0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.140058c18
int3
call fcn.140058c18
int3
call fcn.140058c18
int3
call fcn.140058c18
int3
call fcn.140058c18
int3
call fcn.140058c18
int3
call fcn.140058c18
int3
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
lea rbp, [rsp - 0xc90]
sub rsp, 0xd90
mov rax, qword [0x1400b7a38]
xor rax, rsp
mov qword [rbp + 0xc80], rax
add rcx, 0x2680
call fcn.14002c3d0
mov rdx, rax
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xc70], xmm0
lea rdi, [rbp + 0x40]
xor eax, eax
mov r8d, 0x410
mov ecx, r8d
rep stosb byte [rdi], al
lea rdi, [rbp + 0x450]
mov ecx, r8d
rep stosb byte [rdi], al
lea rdi, [rbp + 0x860]
mov ecx, r8d
rep stosb byte [rdi], al
lea rcx, [rbp + 0x40]
call fcn.1400382e8
nop
xor ebx, ebx
cmp qword [rbp + 0xc70], rbx
je 0x14003c976
mov rcx, qword [rbp + 0xc78]
test rcx, rcx
je 0x14003c976
and qword [rsp + 0x20], rbx
mov rax, qword [rcx]
lea rdx, [rsp + 0x20]
mov rax, qword [rax + 0x28]
call qword [case.0x14002e391.0]
mov ebx, eax
test eax, eax
jne 0x14003c96f
mov rcx, qword [rsp + 0x20]
test rcx, rcx
je 0x14003c96f
mov rax, qword [rcx]
mov rax, qword [rax + 0x18]
call qword [case.0x14002e391.0]
mov ebx, eax
xor edi, edi
test eax, eax
setne dil
jmp 0x14003c97b
mov edi, 1
jmp 0x14003c97b
mov edi, 2
mov r9d, 0x850
lea r8, str.c:jenkinsworkspaceClientClientWindows_releaseclient_srcinstallwindowsNoMSIInstallerInstallerManager.cpp
xor edx, edx
lea rcx, [rsp + 0x20]
call fcn.14000e798
nop
lea rdx, str._CInstallerManager::ProcessInstallZoomService__Error:
lea rcx, [0x1400ba0c0]
call fcn.140007bcc
mov rcx, rax
mov edx, edi
call fcn.140005afc
mov rcx, rax
lea rdx, str._Ret:
call fcn.140007bcc
mov rcx, rax
mov edx, ebx
call fcn.140005afc
nop
lea rcx, [rsp + 0x20]
call fcn.14000e9c4
mov edx, 0x65
lea rcx, [rsp + 0x30]
call fcn.140033dc4
nop
mov rcx, rax
call fcn.14002c3d0
mov rdx, rax
lea rcx, str.zoom.us_Installer_Engine
call qword [sym.imp.USER32.dll_FindWindowW]
mov rbx, rax
lea rcx, [rsp + 0x30]
call fcn.14002c340
test rbx, rbx
je 0x14003ca2a
xor r8d, r8d
test edi, edi
sete r8b
xor r9d, r9d
mov edx, 0x7fc
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
mov dword [0x1400baaf4], 1
mov rcx, qword [rbp + 0xc70]
test rcx, rcx
je 0x14003ca4e
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
lea rdx, [rbp + 0x40]
call fcn.1400384fc
lea rdx, [rbp + 0x860]
call fcn.1400384fc
mov rcx, qword [rbp + 0xc80]
xor rcx, rsp
call fcn.140077b20
lea r11, [rsp + 0xd90]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
lea rbp, [rax - 0x98]
sub rsp, 0x190
mov rax, qword [0x1400b7a38]
xor rax, rsp
mov qword [rbp + 0x80], rax
add rcx, 0x128
call fcn.1400376cc
cmp eax, 0x34
jne 0x14003dd9f
lea rcx, [rsp + 0x70]
call fcn.14002c1f4
nop
lea rcx, [rsp + 0x70]
call fcn.14002cd90
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140052d34
nop
mov esi, 7
mov rax, qword [rsp + 0x40]
xor edi, edi
test rax, rax
je 0x14003dcce
lea r9, [rax - 1]
cmp rax, r9
jbe 0x14003ddcd
lea rax, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae rax, qword [rsp + 0x30]
lea ecx, [rsi + 0x55]
cmp cx, word [rax + r9*2]
jne 0x14003dcce
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.14003ed70
mov rbx, rax
lea rax, [rsp + 0x30]
cmp rax, rbx
je 0x14003dcc4
lea rcx, [rsp + 0x30]
call fcn.140008a48
lea r8d, [rsi + 0x19]
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.14007ca60
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rsi
mov word [rbx], di
lea rcx, [rsp + 0x50]
call fcn.140008a48
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rsi
mov word [rsp + 0x50], di
mov byte [rsp + 0x20], dil
lea r8, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.14001ec64
nop
mov ebx, 0x1000
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14003dd3a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, rbx
jb 0x14003dd35
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003ddd3
call fcn.14002ae70
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
mov dword [0x1400baaf4], 1
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x14003dd86
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, rbx
jb 0x14003dd81
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003ddc7
call fcn.14002ae70
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], rsi
mov word [rsp + 0x30], di
lea rcx, [rsp + 0x70]
call fcn.14002c340
mov rcx, qword [rbp + 0x80]
xor rcx, rsp
call fcn.140077b20
lea r11, [rsp + 0x190]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
call fcn.140058c18
nop
call fcn.140007aa0
int3
call fcn.140058c18
int3
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x1400b7a38]
xor rax, rsp
mov qword [rbp + 0x70], rax
add rcx, 0x128
call fcn.1400376cc
cmp eax, 0x35
jne 0x14003df91
lea rcx, [rsp + 0x60]
call fcn.14002c1f4
nop
lea rcx, [rsp + 0x60]
call fcn.14002cd90
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x20]
call fcn.140052d34
nop
mov esi, 7
mov rax, qword [rsp + 0x30]
xor edi, edi
test rax, rax
je 0x14003dec5
lea r9, [rax - 1]
cmp rax, r9
jbe 0x14003dfbc
lea rax, [rsp + 0x20]
cmp qword [rsp + 0x38], 8
cmovae rax, qword [rsp + 0x20]
lea ecx, [rsi + 0x55]
cmp cx, word [rax + r9*2]
jne 0x14003dec5
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.14003ed70
mov rbx, rax
lea rax, [rsp + 0x20]
cmp rax, rbx
je 0x14003debb
lea rcx, [rsp + 0x20]
call fcn.140008a48
lea r8d, [rsi + 0x19]
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.14007ca60
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rsi
mov word [rbx], di
lea rcx, [rsp + 0x40]
call fcn.140008a48
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rsi
mov word [rsp + 0x40], di
lea r8, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.140020328
nop
mov ebx, 0x1000
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x14003df2c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, rbx
jb 0x14003df27
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003dfc2
call fcn.14002ae70
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
mov dword [0x1400baaf4], 1
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x14003df78
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x14003df73
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003dfb6
call fcn.14002ae70
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], rsi
mov word [rsp + 0x20], di
lea rcx, [rsp + 0x60]
call fcn.14002c340
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.140077b20
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
call fcn.140058c18
nop
call fcn.140007aa0
int3
call fcn.140058c18
int3
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
lea rbp, [rax - 0x288]
sub rsp, 0x380
mov rax, qword [0x1400b7a38]
xor rax, rsp
mov qword [rbp + 0x270], rax
mov rbx, rcx
xor edi, edi
cmp dword [0x1400bb9d8], edi
jne 0x14003e1b4
lea esi, [rdi + 1]
mov dword [0x1400bb9d8], esi
mov eax, dword [rcx + 8]
test eax, eax
je 0x14003e07a
cmp eax, 0x37
je 0x14003e039
cmp eax, 0x39
jne 0x14003e1ae
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
mov dword [0x1400baaf4], esi
jmp 0x14003e1b4
mov dword [rcx + 8], 0x38
lea rcx, [rsp + 0x40]
call fcn.14002c1f4
nop
lea rdx, str._regvdiau_as_admin
lea rcx, [rsp + 0x40]
call fcn.14002c5cc
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.14003e768
mov dword [rbx + 8], 0x39
lea rcx, [rsp + 0x40]
jmp 0x14003e1a9
mov edx, 0xd5
lea rcx, [rbp + 0x160]
call fcn.140033dc4
nop
mov edx, 0xd6
lea rcx, [rbp + 0x50]
call fcn.140033dc4
nop
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], 7
mov word [rsp + 0x20], di
lea rcx, [rsp + 0x20]
call fcn.140019a48
lea rcx, [rsp + 0x40]
call fcn.14002c1f4
nop
lea r8, [rsp + 0x20]
cmp qword [rsp + 0x38], 8
cmovae r8, qword [rsp + 0x20]
lea rcx, [rbp + 0x50]
call fcn.14002c3d0
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.14002cba4
lea rcx, [rsp + 0x40]
call fcn.14002c3d0
mov r9, rax
lea rcx, [rbp + 0x160]
call fcn.14002c3d0
mov r8, rax
mov edx, 0x84e
mov rcx, qword [rbx + 0x120]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9, rsi
mov r8, rsi
mov edx, 0x851
mov rcx, qword [rbx + 0x120]
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rbx + 8], 0x7d1
lea rcx, [rsp + 0x40]
call fcn.14002c340
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x14003e185
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003e180
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003e1dc
call fcn.14002ae70
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], 7
mov word [rsp + 0x20], di
lea rcx, [rbp + 0x50]
call fcn.14002c340
nop
lea rcx, [rbp + 0x160]
call fcn.14002c340
mov dword [0x1400bb9d8], edi
mov rcx, qword [rbp + 0x270]
xor rcx, rsp
call fcn.140077b20
lea r11, [rsp + 0x380]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret
call fcn.140058c18
nop
int3
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x1400b7a38]
xor rax, rsp
mov qword [rbp + 0x70], rax
xor edi, edi
cmp dword [0x1400bb9e0], edi
jne 0x14003e355
mov dword [0x1400bb9e0], 1
add rcx, 0x128
call fcn.1400376cc
cmp eax, 0x37
jne 0x14003e343
lea rcx, [rsp + 0x60]
call fcn.14002c1f4
nop
lea rcx, [rsp + 0x60]
call fcn.14002cd90
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x20]
call fcn.140052d34
nop
mov rax, qword [rsp + 0x30]
test rax, rax
je 0x14003e2dd
lea r9, [rax - 1]
cmp rax, r9
jbe 0x14003e37c
lea rax, [rsp + 0x20]
cmp qword [rsp + 0x38], 8
cmovae rax, qword [rsp + 0x20]
lea ecx, [rdi + 0x5c]
cmp cx, word [rax + r9*2]
jne 0x14003e2dd
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.14003ed70
mov rbx, rax
lea rax, [rsp + 0x20]
cmp rax, rbx
je 0x14003e2d3
lea rcx, [rsp + 0x20]
call fcn.140008a48
lea r8d, [rdi + 0x20]
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.14007ca60
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
lea rcx, [rsp + 0x40]
call fcn.140008a48
lea rcx, [rsp + 0x20]
call fcn.140019ae4
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x14003e326
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003e321
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003e376
call fcn.14002ae70
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], 7
mov word [rsp + 0x20], di
lea rcx, [rsp + 0x60]
call fcn.14002c340
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
mov dword [0x1400baaf4], 1
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.140077b20
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret
call fcn.140058c18
nop
call fcn.140007aa0
int3
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x1400b7a38]
xor rax, rsp
mov qword [rbp + 0x70], rax
add rcx, 0x128
call fcn.1400376cc
cmp eax, 0x38
jne 0x14003e539
lea rcx, [rsp + 0x60]
call fcn.14002c1f4
nop
lea rcx, [rsp + 0x60]
call fcn.14002cd90
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x20]
call fcn.140052d34
nop
mov esi, 7
mov rax, qword [rsp + 0x30]
xor edi, edi
test rax, rax
je 0x14003e46d
lea r9, [rax - 1]
cmp rax, r9
jbe 0x14003e564
lea rax, [rsp + 0x20]
cmp qword [rsp + 0x38], 8
cmovae rax, qword [rsp + 0x20]
lea ecx, [rsi + 0x55]
cmp cx, word [rax + r9*2]
jne 0x14003e46d
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.14003ed70
mov rbx, rax
lea rax, [rsp + 0x20]
cmp rax, rbx
je 0x14003e463
lea rcx, [rsp + 0x20]
call fcn.140008a48
lea r8d, [rsi + 0x19]
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.14007ca60
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rsi
mov word [rbx], di
lea rcx, [rsp + 0x40]
call fcn.140008a48
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rsi
mov word [rsp + 0x40], di
lea r8, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.140020d14
nop
mov ebx, 0x1000
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x14003e4d4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, rbx
jb 0x14003e4cf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003e56a
call fcn.14002ae70
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
mov dword [0x1400baaf4], 1
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x14003e520
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x14003e51b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003e55e
call fcn.14002ae70
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], rsi
mov word [rsp + 0x20], di
lea rcx, [rsp + 0x60]
call fcn.14002c340
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.140077b20
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
call fcn.140058c18
nop
call fcn.140007aa0
int3
call fcn.140058c18
int3