Function at 0x140036360
Capabilities:
Authenticate hmac

Disassembly:
push rbx
sub rsp, 0x20
mov edx, dword [rcx + 0xc]
mov rbx, rcx
cmp edx, 0x32
jg 0x1400363d1
je 0x1400363bf
sub edx, 1
je 0x1400363bf
sub edx, 1
je 0x1400363bf
sub edx, 1
je 0x1400363bf
sub edx, 1
je 0x1400363b5
sub edx, 4
je 0x1400363ae
sub edx, 8
je 0x1400363a4
cmp edx, 1
jne 0x140036426
add rsp, 0x20
pop rbx
jmp 0x140039de0
add rsp, 0x20
pop rbx
jmp 0x1400365c0
call fcn.140038538
jmp 0x1400363c4
add rsp, 0x20
pop rbx
jmp 0x140037d10
call fcn.140036eac
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp fcn.140036a30
sub edx, 0x33
je 0x140036421
sub edx, 1
je 0x140036417
sub edx, 1
je 0x14003640d
sub edx, 1
je 0x140036403
sub edx, 1
je 0x1400363f9
cmp edx, 1
jne 0x140036426
add rsp, 0x20
pop rbx
jmp 0x14003b900
add rsp, 0x20
pop rbx
jmp 0x14003b760
add rsp, 0x20
pop rbx
jmp 0x14003b544
add rsp, 0x20
pop rbx
jmp 0x14003b358
add rsp, 0x20
pop rbx
jmp 0x14003b15c
call fcn.14003af60
add rsp, 0x20
pop rbx
ret
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x260]
sub rsp, 0x360
mov rax, qword [0x1400bba20]
xor rax, rsp
mov qword [rbp + 0x250], rax
lea rbx, [rcx + 0x2680]
mov rdx, rbx
lea rcx, [rbp + 0x30]
call fcn.14002943c
nop
lea rdx, [0x14009e290]
lea rcx, [rbp + 0x30]
call fcn.1400298c4
lea rdx, str.Zoom.exe
lea rcx, [rbp + 0x30]
call fcn.1400298c4
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.14002943c
nop
lea rdx, [0x14009e290]
lea rcx, [rsp + 0x20]
call fcn.1400298c4
lea rdx, str.airhost.exe
lea rcx, [rsp + 0x20]
call fcn.1400298c4
lea r8, [rsp + 0x20]
lea rdx, [rbp + 0x30]
call fcn.14003642c
movsxd rdi, eax
mov edx, 0x65
lea rcx, [rbp + 0x140]
call fcn.140030f44
mov rcx, rax
call fcn.140029560
mov rdx, rax
lea rcx, str.zoom.us_Installer_Engine
call qword [sym.imp.USER32.dll_FindWindowW]
mov rbx, rax
lea rcx, [rbp + 0x140]
call fcn.1400294e0
test rbx, rbx
je 0x1400366b1
mov r8, rdi
xor r9d, r9d
mov edx, 0x7f2
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
mov dword [0x1400beb24], 1
lea rcx, [rsp + 0x20]
call fcn.1400294e0
nop
lea rcx, [rbp + 0x30]
call fcn.1400294e0
mov rcx, qword [rbp + 0x250]
xor rcx, rsp
call fcn.140079240
lea r11, [rsp + 0x360]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0xbd0]
sub rsp, 0xcd0
mov rax, qword [0x1400bba20]
xor rax, rsp
mov qword [rbp + 0xbc0], rax
mov rbx, rcx
xor r12d, r12d
cmp dword [0x1400bfa0c], r12d
jne 0x1400384e2
mov dword [0x1400bfa0c], 1
mov ecx, dword [rcx + 8]
mov eax, 0x3e9
cmp ecx, eax
jg 0x140038462
je 0x140038486
test ecx, ecx
je 0x140038459
sub ecx, 0x32
je 0x140038097
sub ecx, 1
je 0x14003807e
sub ecx, 1
je 0x140037e40
sub ecx, 1
je 0x140037e05
sub ecx, 1
je 0x140037db3
cmp ecx, 0x3b2
je 0x140038486
jmp 0x1400384db
mov r9d, 0x545
lea r8, str.c:jenkinsworkspaceClientClientWindows_releasewin_common_srcinstallerNoMSIInstallerInstallerManager.cpp
mov edx, 2
lea rcx, [rsp + 0x20]
call fcn.14000b3b8
nop
lea rdx, str._CInstallerManager::ProcessUnInstallCommand__State_is:_INSTALLSTATE_UNINSTALLED
lea rcx, [0x1400be0f0]
call fcn.14000475c
nop
lea rcx, [rsp + 0x20]
call fcn.14000b5e4
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
mov dword [0x1400beb24], 1
jmp 0x1400384db
inc dword [rbx + 0x32e0]
mov eax, 0x66666667
imul dword [rbx + 0x32e0]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 0x5a
cmp edx, eax
cmovge edx, eax
mov r9d, edx
lea edx, [rax - 0x55]
lea r8d, [rax + 0xa]
mov rcx, rbx
call fcn.1400395b0
jmp 0x1400384db
mov rax, qword [rbx + 0x32c8]
cmp qword [rbx + 0x32c0], rax
je 0x140037f51
call fcn.1400358ec
test al, al
je 0x140037f51
cmp byte [rbx + 0x28a3], r12b
je 0x140037e77
call fcn.14003a8e0
test eax, eax
jne 0x140037f51
mov rcx, qword [rbx + 0x32c0]
add rcx, 8
call fcn.14001256c
mov rsi, rax
test rax, rax
je 0x140037f51
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xba0], xmm0
mov dword [rbp + 0xbb0], r12d
lea rdi, [rsp + 0x70]
xor eax, eax
mov edx, 0x410
mov ecx, edx
rep stosb byte [rdi], al
lea rdi, [rbp + 0x380]
mov ecx, edx
rep stosb byte [rdi], al
lea rdi, [rbp + 0x790]
mov ecx, edx
rep stosb byte [rdi], al
mov rdx, rsi
lea rcx, [rsp + 0x70]
call fcn.140035594
nop
cmp qword [rbp + 0xba0], r12
je 0x140037f20
mov rcx, qword [rbp + 0xba8]
test rcx, rcx
je 0x140037f20
mov qword [rsp + 0x20], r12
mov rax, qword [rcx]
lea rdx, [rsp + 0x20]
mov rax, qword [rax + 0x28]
call qword [case.0x14002b511.0]
test eax, eax
jne 0x140037f20
mov rcx, qword [rsp + 0x20]
test rcx, rcx
je 0x140037f20
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
call qword [case.0x14002b511.0]
mov rcx, rsi
call fcn.140028010
nop
mov rcx, qword [rbp + 0xba0]
test rcx, rcx
je 0x140037f3b
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
lea rdx, [rsp + 0x70]
call fcn.140035808
lea rdx, [rbp + 0x790]
call fcn.140035808
mov rcx, qword [rbx + 0x32c0]
cmp rcx, qword [rbx + 0x32c8]
je 0x140038063
add rcx, 8
call fcn.14001256c
mov r14, rax
test rax, rax
je 0x140038063
call fcn.140006448
test al, al
je 0x14003805b
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x38], r12
mov edi, 7
mov qword [rsp + 0x40], rdi
mov word [rsp + 0x28], r12w
mov rdx, r14
lea rcx, [rsp + 0x28]
call fcn.1400055a4
nop
lea rdx, [rsp + 0x28]
call fcn.1400062d8
nop
mov esi, 0x1000
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x140037ffd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, rsi
jb 0x140037ff8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140038513
call fcn.140028010
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x40], rdi
mov word [rsp + 0x28], r12w
lea rdx, [rsp + 0x28]
call fcn.1400067fc
nop
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x14003805b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, rsi
jb 0x140038056
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140038519
call fcn.140028010
mov rcx, r14
call fcn.140028010
mov dword [rbx + 0x32e0], r12d
mov rcx, rbx
call fcn.14003912c
mov dword [rbx + 8], 0x35
jmp 0x1400384db
call fcn.140051a08
test al, al
je 0x1400384db
mov dword [rbx + 8], 0x34
jmp 0x1400384db
lea r14, [rbx + 0x32c0]
mov rax, qword [r14]
mov qword [r14 + 8], rax
lea r15, [rbx + 0x28f0]
mov r8d, r12d
cmp byte [rbx + 0x28a3], r12b
setne r8b
mov rdx, r14
mov rcx, r15
call fcn.1400436c4
mov rdi, qword [r14]
mov rax, qword [rbx + 0x32c8]
cmp rdi, rax
je 0x1400381da
mov esi, 0x80
mov rcx, rdi
lea rdx, [rsp + 0x70]
mov eax, 2
movups xmm0, xmmword [rcx]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x60], xmm0
add rdx, rsi
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx - 0x10], xmm1
add rcx, rsi
sub rax, 1
jne 0x1400380ea
movups xmm0, xmmword [rcx]
movups xmmword [rdx], xmm0
mov rax, qword [rcx + 0x10]
mov qword [rdx + 0x10], rax
mov eax, dword [rcx + 0x18]
mov dword [rdx + 0x18], eax
mov r9d, 0x4d9
lea r8, str.c:jenkinsworkspaceClientClientWindows_releasewin_common_srcinstallerNoMSIInstallerInstallerManager.cpp
xor edx, edx
lea rcx, [rsp + 0x20]
call fcn.14000b3b8
nop
lea rdx, str._Found_product
lea rcx, [0x1400be0f0]
call fcn.14000475c
mov rcx, rax
mov edx, dword [rsp + 0x70]
call fcn.14000268c
mov rcx, rax
lea rdx, str._state:
call fcn.14000475c
mov rcx, rax
mov edx, dword [rsp + 0x74]
call fcn.14000268c
mov rcx, rax
lea rdx, str._at:
call fcn.14000475c
mov rcx, rax
lea rdx, [rsp + 0x78]
call fcn.14000475c
nop
lea rcx, [rsp + 0x20]
call fcn.14000b5e4
add rdi, 0x11c
mov rax, qword [rbx + 0x32c8]
cmp rdi, rax
jne 0x1400380dd
mov edi, 7
mov esi, 0x1000
cmp qword [r14], rax
jne 0x140038353
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x40], rdi
mov word [rsp + 0x28], r12w
lea rcx, [rsp + 0x28]
call fcn.140018844
nop
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x14003824b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, rsi
jb 0x140038246
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003851f
call fcn.140028010
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x40], rdi
mov word [rsp + 0x28], r12w
lea rdx, [rsp + 0x28]
call fcn.14005037c
nop
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x1400382a9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, rsi
jb 0x1400382a4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140038525
call fcn.140028010
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x40], rdi
mov word [rsp + 0x28], r12w
xor r8d, r8d
lea rdx, [rsp + 0x28]
call fcn.14001b44c
nop
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x14003830a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, rsi
jb 0x140038305
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003852b
call fcn.140028010
lea rax, str.Zoom_5.0.lnk
lea rdx, str.Zoom.lnk
cmp byte [rbx + 0x28a3], r12b
cmovne rdx, rax
or r8d, 0xffffffff
lea rcx, [rsp + 0x70]
call fcn.1400293e4
nop
lea rdx, [rsp + 0x70]
mov rcx, r15
call fcn.1400451a0
nop
lea rcx, [rsp + 0x70]
call fcn.1400294e0
mov dword [rbx + 8], 0x36
jmp 0x140038374
call fcn.1400519b0
mov dword [rbx + 8], 0x33
mov r8d, 0x64
mov r9d, r8d
lea edx, [r8 - 0x63]
mov rcx, rbx
call fcn.1400395b0
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x40], rdi
mov word [rsp + 0x28], r12w
lea rdx, [rbx + 0x2a10]
lea rcx, [rsp + 0x48]
call fcn.140050194
nop
lea r8, [rsp + 0x28]
mov rcx, rax
call fcn.14001ead0
nop
lea rcx, [rsp + 0x48]
call fcn.140005628
nop
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x1400383f2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, rsi
jb 0x1400383ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140038531
call fcn.140028010
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x40], rdi
mov word [rsp + 0x28], r12w
lea r8, [rsp + 0x28]
call fcn.14001b824
nop
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x1400384db
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, rsi
jb 0x14003844f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003850d
call fcn.140028010
jmp 0x1400384db
mov dword [rbx + 8], 0x32
jmp 0x1400384db
sub ecx, 0x3ea
je 0x140038486
sub ecx, 1
je 0x140038486
sub ecx, 1
je 0x140038486
sub ecx, 1
je 0x140038486
sub ecx, 1
je 0x140038486
cmp ecx, 0x7ca
jne 0x1400384db
mov r9d, 0x554
lea r8, str.c:jenkinsworkspaceClientClientWindows_releasewin_common_srcinstallerNoMSIInstallerInstallerManager.cpp
mov edx, 2
lea rcx, [rsp + 0x20]
call fcn.14000b3b8
nop
lea rdx, str._CInstallerManager::ProcessUnInstallCommand__Error__install_state_is:
lea rcx, [0x1400be0f0]
call fcn.14000475c
mov rcx, rax
mov edx, dword [rbx + 8]
call fcn.14000268c
nop
lea rcx, [rsp + 0x20]
call fcn.14000b5e4
mov rcx, rbx
call fcn.140038e54
mov dword [rbx + 8], 0x7d1
mov dword [0x1400bfa0c], r12d
mov rcx, qword [rbp + 0xbc0]
xor rcx, rsp
call fcn.140079240
lea r11, [rsp + 0xcd0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.14005e4cc
int3
call fcn.14005e4cc
int3
call fcn.14005e4cc
int3
call fcn.14005e4cc
int3
call fcn.14005e4cc
int3
call fcn.14005e4cc
int3
call fcn.14005e4cc
int3
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
lea rbp, [rsp - 0xca0]
sub rsp, 0xda0
mov rax, qword [0x1400bba20]
xor rax, rsp
mov qword [rbp + 0xc90], rax
add rcx, 0x2680
call fcn.140029560
mov rdx, rax
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xc70], xmm0
and dword [rbp + 0xc80], 0
lea rdi, [rbp + 0x40]
xor eax, eax
mov r8d, 0x410
mov ecx, r8d
rep stosb byte [rdi], al
lea rdi, [rbp + 0x450]
mov ecx, r8d
rep stosb byte [rdi], al
lea rdi, [rbp + 0x860]
mov ecx, r8d
rep stosb byte [rdi], al
lea rcx, [rbp + 0x40]
call fcn.140035594
nop
xor ebx, ebx
cmp qword [rbp + 0xc70], rbx
je 0x140039eca
mov rcx, qword [rbp + 0xc78]
test rcx, rcx
je 0x140039eca
cmp dword [rbp + 0xc80], ebx
jne 0x140039e83
lea edi, [rbx + 8]
jmp 0x140039ecf
and qword [rsp + 0x20], rbx
mov rax, qword [rcx]
lea rdx, [rsp + 0x20]
mov rax, qword [rax + 0x28]
call qword [case.0x14002b511.0]
mov ebx, eax
test eax, eax
jne 0x140039ec3
mov rcx, qword [rsp + 0x20]
test rcx, rcx
je 0x140039ec3
mov rax, qword [rcx]
mov rax, qword [rax + 0x18]
call qword [case.0x14002b511.0]
mov ebx, eax
xor edi, edi
test eax, eax
setne dil
jmp 0x140039ecf
mov edi, 1
jmp 0x140039ecf
mov edi, 2
mov r9d, 0x858
lea r8, str.c:jenkinsworkspaceClientClientWindows_releasewin_common_srcinstallerNoMSIInstallerInstallerManager.cpp
xor edx, edx
lea rcx, [rsp + 0x20]
call fcn.14000b3b8
nop
lea rdx, str._CInstallerManager::ProcessInstallZoomService__Error:
lea rcx, [0x1400be0f0]
call fcn.14000475c
mov rcx, rax
mov edx, edi
call fcn.14000268c
mov rcx, rax
lea rdx, str._Ret:
call fcn.14000475c
mov rcx, rax
mov edx, ebx
call fcn.14000268c
nop
lea rcx, [rsp + 0x20]
call fcn.14000b5e4
mov edx, 0x65
lea rcx, [rsp + 0x30]
call fcn.140030f44
mov rcx, rax
call fcn.140029560
mov rdx, rax
lea rcx, str.zoom.us_Installer_Engine
call qword [sym.imp.USER32.dll_FindWindowW]
mov rbx, rax
lea rcx, [rsp + 0x30]
call fcn.1400294e0
test rbx, rbx
je 0x140039f7d
xor r8d, r8d
test edi, edi
sete r8b
xor r9d, r9d
mov edx, 0x7fc
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
mov dword [0x1400beb24], 1
mov rcx, qword [rbp + 0xc70]
test rcx, rcx
je 0x140039fa1
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
lea rdx, [rbp + 0x40]
call fcn.140035808
lea rdx, [rbp + 0x860]
call fcn.140035808
mov rcx, qword [rbp + 0xc90]
xor rcx, rsp
call fcn.140079240
lea r11, [rsp + 0xda0]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
lea rbp, [rax - 0x98]
sub rsp, 0x190
mov rax, qword [0x1400bba20]
xor rax, rsp
mov qword [rbp + 0x80], rax
add rcx, 0x128
call fcn.14003484c
cmp eax, 0x34
jne 0x14003b31b
lea rcx, [rsp + 0x70]
call fcn.140029394
nop
lea rcx, [rsp + 0x70]
call fcn.140029f10
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140050194
nop
mov esi, 7
mov rax, qword [rsp + 0x40]
xor edi, edi
test rax, rax
je 0x14003b24a
lea r9, [rax - 1]
cmp rax, r9
jbe 0x14003b349
lea rax, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae rax, qword [rsp + 0x30]
lea ecx, [rsi + 0x55]
cmp cx, word [rax + r9*2]
jne 0x14003b24a
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.14003c2f0
mov rbx, rax
lea rax, [rsp + 0x30]
cmp rax, rbx
je 0x14003b240
lea rcx, [rsp + 0x30]
call fcn.140005628
lea r8d, [rsi + 0x19]
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.14007de40
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rsi
mov word [rbx], di
lea rcx, [rsp + 0x50]
call fcn.140005628
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rsi
mov word [rsp + 0x50], di
mov byte [rsp + 0x20], dil
lea r8, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.14001b9c8
nop
mov ebx, 0x1000
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14003b2b6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, rbx
jb 0x14003b2b1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b34f
call fcn.140028010
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
mov dword [0x1400beb24], 1
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x14003b302
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, rbx
jb 0x14003b2fd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b343
call fcn.140028010
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], rsi
mov word [rsp + 0x30], di
lea rcx, [rsp + 0x70]
call fcn.1400294e0
mov rcx, qword [rbp + 0x80]
xor rcx, rsp
call fcn.140079240
lea r11, [rsp + 0x190]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
call fcn.14005e4cc
nop
call fcn.140004630
int3
call fcn.14005e4cc
int3
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x1400bba20]
xor rax, rsp
mov qword [rbp + 0x70], rax
add rcx, 0x128
call fcn.14003484c
cmp eax, 0x35
jne 0x14003b50d
lea rcx, [rsp + 0x60]
call fcn.140029394
nop
lea rcx, [rsp + 0x60]
call fcn.140029f10
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x20]
call fcn.140050194
nop
mov esi, 7
mov rax, qword [rsp + 0x30]
xor edi, edi
test rax, rax
je 0x14003b441
lea r9, [rax - 1]
cmp rax, r9
jbe 0x14003b538
lea rax, [rsp + 0x20]
cmp qword [rsp + 0x38], 8
cmovae rax, qword [rsp + 0x20]
lea ecx, [rsi + 0x55]
cmp cx, word [rax + r9*2]
jne 0x14003b441
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.14003c2f0
mov rbx, rax
lea rax, [rsp + 0x20]
cmp rax, rbx
je 0x14003b437
lea rcx, [rsp + 0x20]
call fcn.140005628
lea r8d, [rsi + 0x19]
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.14007de40
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rsi
mov word [rbx], di
lea rcx, [rsp + 0x40]
call fcn.140005628
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rsi
mov word [rsp + 0x40], di
lea r8, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.14001d08c
nop
mov ebx, 0x1000
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x14003b4a8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, rbx
jb 0x14003b4a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b53e
call fcn.140028010
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
mov dword [0x1400beb24], 1
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x14003b4f4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x14003b4ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b532
call fcn.140028010
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], rsi
mov word [rsp + 0x20], di
lea rcx, [rsp + 0x60]
call fcn.1400294e0
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.140079240
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
call fcn.14005e4cc
nop
call fcn.140004630
int3
call fcn.14005e4cc
int3
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
lea rbp, [rax - 0x288]
sub rsp, 0x380
mov rax, qword [0x1400bba20]
xor rax, rsp
mov qword [rbp + 0x270], rax
mov rbx, rcx
xor edi, edi
cmp dword [0x1400bfa08], edi
jne 0x14003b72f
lea esi, [rdi + 1]
mov dword [0x1400bfa08], esi
mov eax, dword [rcx + 8]
test eax, eax
je 0x14003b5f6
cmp eax, 0x37
je 0x14003b5b5
cmp eax, 0x39
jne 0x14003b729
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
mov dword [0x1400beb24], esi
jmp 0x14003b72f
mov dword [rcx + 8], 0x38
lea rcx, [rsp + 0x40]
call fcn.140029394
nop
lea rdx, str._regvdiau_as_admin
lea rcx, [rsp + 0x40]
call fcn.14002975c
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.14003bce8
mov dword [rbx + 8], 0x39
lea rcx, [rsp + 0x40]
jmp 0x14003b724
mov edx, 0xd5
lea rcx, [rbp + 0x160]
call fcn.140030f44
nop
mov edx, 0xd6
lea rcx, [rbp + 0x50]
call fcn.140030f44
nop
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], 7
mov word [rsp + 0x20], di
lea rcx, [rsp + 0x20]
call fcn.140016790
lea rcx, [rsp + 0x40]
call fcn.140029394
lea r8, [rsp + 0x20]
cmp qword [rsp + 0x38], 8
cmovae r8, qword [rsp + 0x20]
lea rcx, [rbp + 0x50]
call fcn.140029560
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.140029d30
lea rcx, [rsp + 0x40]
call fcn.140029560
mov r9, rax
lea rcx, [rbp + 0x160]
call fcn.140029560
mov r8, rax
mov edx, 0x84e
mov rcx, qword [rbx + 0x120]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9, rsi
mov r8, rsi
mov edx, 0x851
mov rcx, qword [rbx + 0x120]
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rbx + 8], 0x7d1
lea rcx, [rsp + 0x40]
call fcn.1400294e0
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x14003b700
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003b6fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b757
call fcn.140028010
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], 7
mov word [rsp + 0x20], di
lea rcx, [rbp + 0x50]
call fcn.1400294e0
nop
lea rcx, [rbp + 0x160]
call fcn.1400294e0
mov dword [0x1400bfa08], edi
mov rcx, qword [rbp + 0x270]
xor rcx, rsp
call fcn.140079240
lea r11, [rsp + 0x380]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret
call fcn.14005e4cc
nop
int3
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x1400bba20]
xor rax, rsp
mov qword [rbp + 0x70], rax
xor edi, edi
cmp dword [0x1400bfa10], edi
jne 0x14003b8d1
mov dword [0x1400bfa10], 1
add rcx, 0x128
call fcn.14003484c
cmp eax, 0x37
jne 0x14003b8bf
lea rcx, [rsp + 0x60]
call fcn.140029394
nop
lea rcx, [rsp + 0x60]
call fcn.140029f10
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x20]
call fcn.140050194
nop
mov rax, qword [rsp + 0x30]
test rax, rax
je 0x14003b859
lea r9, [rax - 1]
cmp rax, r9
jbe 0x14003b8f8
lea rax, [rsp + 0x20]
cmp qword [rsp + 0x38], 8
cmovae rax, qword [rsp + 0x20]
lea ecx, [rdi + 0x5c]
cmp cx, word [rax + r9*2]
jne 0x14003b859
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.14003c2f0
mov rbx, rax
lea rax, [rsp + 0x20]
cmp rax, rbx
je 0x14003b84f
lea rcx, [rsp + 0x20]
call fcn.140005628
lea r8d, [rdi + 0x20]
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.14007de40
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
lea rcx, [rsp + 0x40]
call fcn.140005628
lea rcx, [rsp + 0x20]
call fcn.14001682c
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x14003b8a2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003b89d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b8f2
call fcn.140028010
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], 7
mov word [rsp + 0x20], di
lea rcx, [rsp + 0x60]
call fcn.1400294e0
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
mov dword [0x1400beb24], 1
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.140079240
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret
call fcn.14005e4cc
nop
call fcn.140004630
int3
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x1400bba20]
xor rax, rsp
mov qword [rbp + 0x70], rax
add rcx, 0x128
call fcn.14003484c
cmp eax, 0x38
jne 0x14003bab8
lea rcx, [rsp + 0x60]
call fcn.140029394
nop
lea rcx, [rsp + 0x60]
call fcn.140029f10
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x20]
call fcn.140050194
nop
mov esi, 7
mov rax, qword [rsp + 0x30]
xor edi, edi
test rax, rax
je 0x14003b9e9
lea r9, [rax - 1]
cmp rax, r9
jbe 0x14003bae3
lea rax, [rsp + 0x20]
cmp qword [rsp + 0x38], 8
cmovae rax, qword [rsp + 0x20]
lea ecx, [rsi + 0x55]
cmp cx, word [rax + r9*2]
jne 0x14003b9e9
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.14003c2f0
mov rbx, rax
lea rax, [rsp + 0x20]
cmp rax, rbx
je 0x14003b9df
lea rcx, [rsp + 0x20]
call fcn.140005628
lea r8d, [rsi + 0x19]
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.14007de40
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rsi
mov word [rbx], di
lea rcx, [rsp + 0x40]
call fcn.140005628
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rsi
mov word [rsp + 0x40], di
mov r9b, 1
lea r8, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.14001da78
nop
mov ebx, 0x1000
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x14003ba53
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, rbx
jb 0x14003ba4e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003bae9
call fcn.140028010
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
mov dword [0x1400beb24], 1
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x14003ba9f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x14003ba9a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003badd
call fcn.140028010
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], rsi
mov word [rsp + 0x20], di
lea rcx, [rsp + 0x60]
call fcn.1400294e0
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.140079240
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
call fcn.14005e4cc
nop
call fcn.140004630
int3
call fcn.14005e4cc
int3