Function at 0x140038ad0
Capabilities:
Authenticate hmac

Disassembly:
push rbx
sub rsp, 0x20
mov edx, dword [rcx + 0xc]
mov rbx, rcx
cmp edx, 0x32
jg 0x140038b41
je 0x140038b2f
sub edx, 1
je 0x140038b2f
sub edx, 1
je 0x140038b2f
sub edx, 1
je 0x140038b2f
sub edx, 1
je 0x140038b25
sub edx, 4
je 0x140038b1e
sub edx, 8
je 0x140038b14
cmp edx, 1
jne 0x140038b96
add rsp, 0x20
pop rbx
jmp 0x14003c320
add rsp, 0x20
pop rbx
jmp 0x140038d30
call fcn.14003ab78
jmp 0x140038b34
add rsp, 0x20
pop rbx
jmp 0x14003a358
call fcn.140039608
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp fcn.1400391a0
sub edx, 0x33
je 0x140038b91
sub edx, 1
je 0x140038b87
sub edx, 1
je 0x140038b7d
sub edx, 1
je 0x140038b73
sub edx, 1
je 0x140038b69
cmp edx, 1
jne 0x140038b96
add rsp, 0x20
pop rbx
jmp 0x14003de04
add rsp, 0x20
pop rbx
jmp 0x14003dc64
add rsp, 0x20
pop rbx
jmp 0x14003da48
add rsp, 0x20
pop rbx
jmp 0x14003d85c
add rsp, 0x20
pop rbx
jmp 0x14003d660
call fcn.14003d464
add rsp, 0x20
pop rbx
ret
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x260]
sub rsp, 0x360
mov rax, qword [0x1400b7a38]
xor rax, rsp
mov qword [rbp + 0x250], rax
lea rbx, [rcx + 0x2680]
mov rdx, rbx
lea rcx, [rbp + 0x30]
call fcn.14002bd1c
nop
lea rdx, [0x14009a640]
lea rcx, [rbp + 0x30]
call fcn.14002c1b4
lea rdx, str.Zoom.exe
lea rcx, [rbp + 0x30]
call fcn.14002c1b4
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.14002bd1c
nop
lea rdx, [0x14009a640]
lea rcx, [rsp + 0x20]
call fcn.14002c1b4
lea rdx, str.airhost.exe
lea rcx, [rsp + 0x20]
call fcn.14002c1b4
lea r8, [rsp + 0x20]
lea rdx, [rbp + 0x30]
call fcn.140038b9c
movsxd rdi, eax
mov edx, 0x65
lea rcx, [rbp + 0x140]
call fcn.140033844
nop
mov rcx, rax
call fcn.14002be50
mov rdx, rax
lea rcx, str.zoom.us_Installer_Engine
call qword [sym.imp.USER32.dll_FindWindowW]
mov rbx, rax
lea rcx, [rbp + 0x140]
call fcn.14002bdc0
test rbx, rbx
je 0x140038e22
mov r8, rdi
xor r9d, r9d
mov edx, 0x7f2
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
mov dword [0x1400baaf4], 1
lea rcx, [rsp + 0x20]
call fcn.14002bdc0
nop
lea rcx, [rbp + 0x30]
call fcn.14002bdc0
mov rcx, qword [rbp + 0x250]
xor rcx, rsp
call fcn.1400775a0
lea r11, [rsp + 0x360]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0xbc0]
sub rsp, 0xcc0
mov rax, qword [0x1400b7a38]
xor rax, rsp
mov qword [rbp + 0xbb0], rax
mov rbx, rcx
xor r12d, r12d
cmp dword [0x1400bb9dc], r12d
jne 0x14003ab23
mov dword [0x1400bb9dc], 1
mov ecx, dword [rcx + 8]
mov eax, 0x3e9
cmp ecx, eax
jg 0x14003aaa3
je 0x14003aac7
test ecx, ecx
je 0x14003aa9a
sub ecx, 0x32
je 0x14003a6d8
sub ecx, 1
je 0x14003a6bf
sub ecx, 1
je 0x14003a488
sub ecx, 1
je 0x14003a44d
sub ecx, 1
je 0x14003a3fb
cmp ecx, 0x3b2
je 0x14003aac7
jmp 0x14003ab1c
mov r9d, 0x541
lea r8, str.c:jenkinsworkspaceClientClientWindows_releaseclient_srcinstallwindowsNoMSIInstallerInstallerManager.cpp
mov edx, 2
lea rcx, [rsp + 0x20]
call fcn.14000e788
nop
lea rdx, str._CInstallerManager::ProcessUnInstallCommand__State_is:_INSTALLSTATE_UNINSTALLED
lea rcx, [0x1400ba0c0]
call fcn.140007bbc
nop
lea rcx, [rsp + 0x20]
call fcn.14000e9b4
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
mov dword [0x1400baaf4], 1
jmp 0x14003ab1c
inc dword [rbx + 0x32c0]
mov eax, 0x66666667
imul dword [rbx + 0x32c0]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 0x5a
cmp edx, eax
cmovge edx, eax
mov r9d, edx
lea edx, [rax - 0x55]
lea r8d, [rax + 0xa]
mov rcx, rbx
call fcn.14003bb8c
jmp 0x14003ab1c
mov rax, qword [rbx + 0x32a8]
cmp qword [rbx + 0x32a0], rax
je 0x14003a592
call fcn.140038060
test al, al
je 0x14003a592
cmp byte [rbx + 0x28a3], r12b
je 0x14003a4bf
call fcn.14003cdf8
test eax, eax
jne 0x14003a592
mov rcx, qword [rbx + 0x32a0]
add rcx, 8
call fcn.14001585c
mov rsi, rax
test rax, rax
je 0x14003a592
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xba0], xmm0
lea rdi, [rsp + 0x70]
xor eax, eax
mov edx, 0x410
mov ecx, edx
rep stosb byte [rdi], al
lea rdi, [rbp + 0x380]
mov ecx, edx
rep stosb byte [rdi], al
lea rdi, [rbp + 0x790]
mov ecx, edx
rep stosb byte [rdi], al
mov rdx, rsi
lea rcx, [rsp + 0x70]
call fcn.140037d68
nop
cmp qword [rbp + 0xba0], r12
je 0x14003a561
mov rcx, qword [rbp + 0xba8]
test rcx, rcx
je 0x14003a561
mov qword [rsp + 0x20], r12
mov rax, qword [rcx]
lea rdx, [rsp + 0x20]
mov rax, qword [rax + 0x28]
call qword [case.0x14002de11.0]
test eax, eax
jne 0x14003a561
mov rcx, qword [rsp + 0x20]
test rcx, rcx
je 0x14003a561
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
call qword [case.0x14002de11.0]
mov rcx, rsi
call fcn.14002a8f0
nop
mov rcx, qword [rbp + 0xba0]
test rcx, rcx
je 0x14003a57c
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
lea rdx, [rsp + 0x70]
call fcn.140037f7c
lea rdx, [rbp + 0x790]
call fcn.140037f7c
mov rcx, qword [rbx + 0x32a0]
cmp rcx, qword [rbx + 0x32a8]
je 0x14003a6a4
add rcx, 8
call fcn.14001585c
mov r14, rax
test rax, rax
je 0x14003a6a4
call fcn.140009848
test al, al
je 0x14003a69c
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x38], r12
mov edi, 7
mov qword [rsp + 0x40], rdi
mov word [rsp + 0x28], r12w
mov rdx, r14
lea rcx, [rsp + 0x28]
call fcn.1400089b4
nop
lea rdx, [rsp + 0x28]
call fcn.1400096d8
nop
mov esi, 0x1000
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x14003a63e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, rsi
jb 0x14003a639
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003ab54
call fcn.14002a8f0
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x40], rdi
mov word [rsp + 0x28], r12w
lea rdx, [rsp + 0x28]
call fcn.140009bfc
nop
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x14003a69c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, rsi
jb 0x14003a697
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003ab5a
call fcn.14002a8f0
mov rcx, r14
call fcn.14002a8f0
mov dword [rbx + 0x32c0], r12d
mov rcx, rbx
call fcn.14003b6d4
mov dword [rbx + 8], 0x35
jmp 0x14003ab1c
call fcn.140054028
test al, al
je 0x14003ab1c
mov dword [rbx + 8], 0x34
jmp 0x14003ab1c
lea r14, [rbx + 0x32a0]
mov rax, qword [r14]
mov qword [r14 + 8], rax
lea r15, [rbx + 0x28f0]
mov r8d, r12d
cmp byte [rbx + 0x28a3], r12b
setne r8b
mov rdx, r14
mov rcx, r15
call fcn.140045b34
mov rdi, qword [r14]
mov rax, qword [rbx + 0x32a8]
cmp rdi, rax
je 0x14003a81b
mov esi, 0x80
mov rcx, rdi
lea rdx, [rsp + 0x70]
mov eax, 2
movups xmm0, xmmword [rcx]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x60], xmm0
add rdx, rsi
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx - 0x10], xmm1
add rcx, rsi
sub rax, 1
jne 0x14003a72b
movups xmm0, xmmword [rcx]
movups xmmword [rdx], xmm0
mov rax, qword [rcx + 0x10]
mov qword [rdx + 0x10], rax
mov eax, dword [rcx + 0x18]
mov dword [rdx + 0x18], eax
mov r9d, 0x4d5
lea r8, str.c:jenkinsworkspaceClientClientWindows_releaseclient_srcinstallwindowsNoMSIInstallerInstallerManager.cpp
xor edx, edx
lea rcx, [rsp + 0x20]
call fcn.14000e788
nop
lea rdx, str._Found_product
lea rcx, [0x1400ba0c0]
call fcn.140007bbc
mov rcx, rax
mov edx, dword [rsp + 0x70]
call fcn.140005aec
mov rcx, rax
lea rdx, str._state:
call fcn.140007bbc
mov rcx, rax
mov edx, dword [rsp + 0x74]
call fcn.140005aec
mov rcx, rax
lea rdx, str._at:
call fcn.140007bbc
mov rcx, rax
lea rdx, [rsp + 0x78]
call fcn.140007bbc
nop
lea rcx, [rsp + 0x20]
call fcn.14000e9b4
add rdi, 0x11c
mov rax, qword [rbx + 0x32a8]
cmp rdi, rax
jne 0x14003a71e
mov edi, 7
mov esi, 0x1000
cmp qword [r14], rax
jne 0x14003a994
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x40], rdi
mov word [rsp + 0x28], r12w
lea rcx, [rsp + 0x28]
call fcn.14001b568
nop
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x14003a88c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, rsi
jb 0x14003a887
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003ab60
call fcn.14002a8f0
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x40], rdi
mov word [rsp + 0x28], r12w
lea rdx, [rsp + 0x28]
call fcn.14005299c
nop
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x14003a8ea
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, rsi
jb 0x14003a8e5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003ab66
call fcn.14002a8f0
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x40], rdi
mov word [rsp + 0x28], r12w
xor r8d, r8d
lea rdx, [rsp + 0x28]
call fcn.14001e170
nop
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x14003a94b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, rsi
jb 0x14003a946
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003ab6c
call fcn.14002a8f0
lea rax, str.Zoom_5.0.lnk
lea rdx, str.Zoom.lnk
cmp byte [rbx + 0x28a3], r12b
cmovne rdx, rax
or r8d, 0xffffffff
lea rcx, [rsp + 0x70]
call fcn.14002bcc4
nop
lea rdx, [rsp + 0x70]
mov rcx, r15
call fcn.140047600
nop
lea rcx, [rsp + 0x70]
call fcn.14002bdc0
mov dword [rbx + 8], 0x36
jmp 0x14003a9b5
call fcn.140053fd0
mov dword [rbx + 8], 0x33
mov r8d, 0x64
mov r9d, r8d
lea edx, [r8 - 0x63]
mov rcx, rbx
call fcn.14003bb8c
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x40], rdi
mov word [rsp + 0x28], r12w
lea rdx, [rbx + 0x2a10]
lea rcx, [rsp + 0x48]
call fcn.1400527b4
nop
lea r8, [rsp + 0x28]
mov rcx, rax
call fcn.14002139c
nop
lea rcx, [rsp + 0x48]
call fcn.140008a38
nop
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x14003aa33
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, rsi
jb 0x14003aa2e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003ab72
call fcn.14002a8f0
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x40], rdi
mov word [rsp + 0x28], r12w
lea r8, [rsp + 0x28]
call fcn.14001e540
nop
mov rdx, qword [rsp + 0x40]
cmp rdx, 8
jb 0x14003ab1c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, rsi
jb 0x14003aa90
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003ab4e
call fcn.14002a8f0
jmp 0x14003ab1c
mov dword [rbx + 8], 0x32
jmp 0x14003ab1c
sub ecx, 0x3ea
je 0x14003aac7
sub ecx, 1
je 0x14003aac7
sub ecx, 1
je 0x14003aac7
sub ecx, 1
je 0x14003aac7
sub ecx, 1
je 0x14003aac7
cmp ecx, 0x7ca
jne 0x14003ab1c
mov r9d, 0x550
lea r8, str.c:jenkinsworkspaceClientClientWindows_releaseclient_srcinstallwindowsNoMSIInstallerInstallerManager.cpp
mov edx, 2
lea rcx, [rsp + 0x20]
call fcn.14000e788
nop
lea rdx, str._CInstallerManager::ProcessUnInstallCommand__Error__install_state_is:
lea rcx, [0x1400ba0c0]
call fcn.140007bbc
mov rcx, rax
mov edx, dword [rbx + 8]
call fcn.140005aec
nop
lea rcx, [rsp + 0x20]
call fcn.14000e9b4
mov rcx, rbx
call fcn.14003b368
mov dword [rbx + 8], 0x7d1
mov dword [0x1400bb9dc], r12d
mov rcx, qword [rbp + 0xbb0]
xor rcx, rsp
call fcn.1400775a0
lea r11, [rsp + 0xcc0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.140058698
int3
call fcn.140058698
int3
call fcn.140058698
int3
call fcn.140058698
int3
call fcn.140058698
int3
call fcn.140058698
int3
call fcn.140058698
int3
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
lea rbp, [rsp - 0xc90]
sub rsp, 0xd90
mov rax, qword [0x1400b7a38]
xor rax, rsp
mov qword [rbp + 0xc80], rax
add rcx, 0x2680
call fcn.14002be50
mov rdx, rax
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xc70], xmm0
lea rdi, [rbp + 0x40]
xor eax, eax
mov r8d, 0x410
mov ecx, r8d
rep stosb byte [rdi], al
lea rdi, [rbp + 0x450]
mov ecx, r8d
rep stosb byte [rdi], al
lea rdi, [rbp + 0x860]
mov ecx, r8d
rep stosb byte [rdi], al
lea rcx, [rbp + 0x40]
call fcn.140037d68
nop
xor ebx, ebx
cmp qword [rbp + 0xc70], rbx
je 0x14003c3f6
mov rcx, qword [rbp + 0xc78]
test rcx, rcx
je 0x14003c3f6
and qword [rsp + 0x20], rbx
mov rax, qword [rcx]
lea rdx, [rsp + 0x20]
mov rax, qword [rax + 0x28]
call qword [case.0x14002de11.0]
mov ebx, eax
test eax, eax
jne 0x14003c3ef
mov rcx, qword [rsp + 0x20]
test rcx, rcx
je 0x14003c3ef
mov rax, qword [rcx]
mov rax, qword [rax + 0x18]
call qword [case.0x14002de11.0]
mov ebx, eax
xor edi, edi
test eax, eax
setne dil
jmp 0x14003c3fb
mov edi, 1
jmp 0x14003c3fb
mov edi, 2
mov r9d, 0x850
lea r8, str.c:jenkinsworkspaceClientClientWindows_releaseclient_srcinstallwindowsNoMSIInstallerInstallerManager.cpp
xor edx, edx
lea rcx, [rsp + 0x20]
call fcn.14000e788
nop
lea rdx, str._CInstallerManager::ProcessInstallZoomService__Error:
lea rcx, [0x1400ba0c0]
call fcn.140007bbc
mov rcx, rax
mov edx, edi
call fcn.140005aec
mov rcx, rax
lea rdx, str._Ret:
call fcn.140007bbc
mov rcx, rax
mov edx, ebx
call fcn.140005aec
nop
lea rcx, [rsp + 0x20]
call fcn.14000e9b4
mov edx, 0x65
lea rcx, [rsp + 0x30]
call fcn.140033844
nop
mov rcx, rax
call fcn.14002be50
mov rdx, rax
lea rcx, str.zoom.us_Installer_Engine
call qword [sym.imp.USER32.dll_FindWindowW]
mov rbx, rax
lea rcx, [rsp + 0x30]
call fcn.14002bdc0
test rbx, rbx
je 0x14003c4aa
xor r8d, r8d
test edi, edi
sete r8b
xor r9d, r9d
mov edx, 0x7fc
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
mov dword [0x1400baaf4], 1
mov rcx, qword [rbp + 0xc70]
test rcx, rcx
je 0x14003c4ce
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
lea rdx, [rbp + 0x40]
call fcn.140037f7c
lea rdx, [rbp + 0x860]
call fcn.140037f7c
mov rcx, qword [rbp + 0xc80]
xor rcx, rsp
call fcn.1400775a0
lea r11, [rsp + 0xd90]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
lea rbp, [rax - 0x98]
sub rsp, 0x190
mov rax, qword [0x1400b7a38]
xor rax, rsp
mov qword [rbp + 0x80], rax
add rcx, 0x128
call fcn.14003714c
cmp eax, 0x34
jne 0x14003d81f
lea rcx, [rsp + 0x70]
call fcn.14002bc74
nop
lea rcx, [rsp + 0x70]
call fcn.14002c810
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.1400527b4
nop
mov esi, 7
mov rax, qword [rsp + 0x40]
xor edi, edi
test rax, rax
je 0x14003d74e
lea r9, [rax - 1]
cmp rax, r9
jbe 0x14003d84d
lea rax, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae rax, qword [rsp + 0x30]
lea ecx, [rsi + 0x55]
cmp cx, word [rax + r9*2]
jne 0x14003d74e
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.14003e7f0
mov rbx, rax
lea rax, [rsp + 0x30]
cmp rax, rbx
je 0x14003d744
lea rcx, [rsp + 0x30]
call fcn.140008a38
lea r8d, [rsi + 0x19]
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.14007c4e0
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rsi
mov word [rbx], di
lea rcx, [rsp + 0x50]
call fcn.140008a38
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rsi
mov word [rsp + 0x50], di
mov byte [rsp + 0x20], dil
lea r8, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.14001e6e4
nop
mov ebx, 0x1000
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14003d7ba
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, rbx
jb 0x14003d7b5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003d853
call fcn.14002a8f0
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
mov dword [0x1400baaf4], 1
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x14003d806
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, rbx
jb 0x14003d801
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003d847
call fcn.14002a8f0
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], rsi
mov word [rsp + 0x30], di
lea rcx, [rsp + 0x70]
call fcn.14002bdc0
mov rcx, qword [rbp + 0x80]
xor rcx, rsp
call fcn.1400775a0
lea r11, [rsp + 0x190]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
call fcn.140058698
nop
call fcn.140007a90
int3
call fcn.140058698
int3
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x1400b7a38]
xor rax, rsp
mov qword [rbp + 0x70], rax
add rcx, 0x128
call fcn.14003714c
cmp eax, 0x35
jne 0x14003da11
lea rcx, [rsp + 0x60]
call fcn.14002bc74
nop
lea rcx, [rsp + 0x60]
call fcn.14002c810
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x20]
call fcn.1400527b4
nop
mov esi, 7
mov rax, qword [rsp + 0x30]
xor edi, edi
test rax, rax
je 0x14003d945
lea r9, [rax - 1]
cmp rax, r9
jbe 0x14003da3c
lea rax, [rsp + 0x20]
cmp qword [rsp + 0x38], 8
cmovae rax, qword [rsp + 0x20]
lea ecx, [rsi + 0x55]
cmp cx, word [rax + r9*2]
jne 0x14003d945
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.14003e7f0
mov rbx, rax
lea rax, [rsp + 0x20]
cmp rax, rbx
je 0x14003d93b
lea rcx, [rsp + 0x20]
call fcn.140008a38
lea r8d, [rsi + 0x19]
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.14007c4e0
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rsi
mov word [rbx], di
lea rcx, [rsp + 0x40]
call fcn.140008a38
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rsi
mov word [rsp + 0x40], di
lea r8, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.14001fda8
nop
mov ebx, 0x1000
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x14003d9ac
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, rbx
jb 0x14003d9a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003da42
call fcn.14002a8f0
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
mov dword [0x1400baaf4], 1
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x14003d9f8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x14003d9f3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003da36
call fcn.14002a8f0
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], rsi
mov word [rsp + 0x20], di
lea rcx, [rsp + 0x60]
call fcn.14002bdc0
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.1400775a0
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
call fcn.140058698
nop
call fcn.140007a90
int3
call fcn.140058698
int3
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
lea rbp, [rax - 0x288]
sub rsp, 0x380
mov rax, qword [0x1400b7a38]
xor rax, rsp
mov qword [rbp + 0x270], rax
mov rbx, rcx
xor edi, edi
cmp dword [0x1400bb9d8], edi
jne 0x14003dc34
lea esi, [rdi + 1]
mov dword [0x1400bb9d8], esi
mov eax, dword [rcx + 8]
test eax, eax
je 0x14003dafa
cmp eax, 0x37
je 0x14003dab9
cmp eax, 0x39
jne 0x14003dc2e
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
mov dword [0x1400baaf4], esi
jmp 0x14003dc34
mov dword [rcx + 8], 0x38
lea rcx, [rsp + 0x40]
call fcn.14002bc74
nop
lea rdx, str._regvdiau_as_admin
lea rcx, [rsp + 0x40]
call fcn.14002c04c
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.14003e1e8
mov dword [rbx + 8], 0x39
lea rcx, [rsp + 0x40]
jmp 0x14003dc29
mov edx, 0xd5
lea rcx, [rbp + 0x160]
call fcn.140033844
nop
mov edx, 0xd6
lea rcx, [rbp + 0x50]
call fcn.140033844
nop
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], 7
mov word [rsp + 0x20], di
lea rcx, [rsp + 0x20]
call fcn.1400194c8
lea rcx, [rsp + 0x40]
call fcn.14002bc74
nop
lea r8, [rsp + 0x20]
cmp qword [rsp + 0x38], 8
cmovae r8, qword [rsp + 0x20]
lea rcx, [rbp + 0x50]
call fcn.14002be50
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.14002c624
lea rcx, [rsp + 0x40]
call fcn.14002be50
mov r9, rax
lea rcx, [rbp + 0x160]
call fcn.14002be50
mov r8, rax
mov edx, 0x84e
mov rcx, qword [rbx + 0x120]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9, rsi
mov r8, rsi
mov edx, 0x851
mov rcx, qword [rbx + 0x120]
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rbx + 8], 0x7d1
lea rcx, [rsp + 0x40]
call fcn.14002bdc0
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x14003dc05
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003dc00
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003dc5c
call fcn.14002a8f0
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], 7
mov word [rsp + 0x20], di
lea rcx, [rbp + 0x50]
call fcn.14002bdc0
nop
lea rcx, [rbp + 0x160]
call fcn.14002bdc0
mov dword [0x1400bb9d8], edi
mov rcx, qword [rbp + 0x270]
xor rcx, rsp
call fcn.1400775a0
lea r11, [rsp + 0x380]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret
call fcn.140058698
nop
int3
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x1400b7a38]
xor rax, rsp
mov qword [rbp + 0x70], rax
xor edi, edi
cmp dword [0x1400bb9e0], edi
jne 0x14003ddd5
mov dword [0x1400bb9e0], 1
add rcx, 0x128
call fcn.14003714c
cmp eax, 0x37
jne 0x14003ddc3
lea rcx, [rsp + 0x60]
call fcn.14002bc74
nop
lea rcx, [rsp + 0x60]
call fcn.14002c810
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x20]
call fcn.1400527b4
nop
mov rax, qword [rsp + 0x30]
test rax, rax
je 0x14003dd5d
lea r9, [rax - 1]
cmp rax, r9
jbe 0x14003ddfc
lea rax, [rsp + 0x20]
cmp qword [rsp + 0x38], 8
cmovae rax, qword [rsp + 0x20]
lea ecx, [rdi + 0x5c]
cmp cx, word [rax + r9*2]
jne 0x14003dd5d
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.14003e7f0
mov rbx, rax
lea rax, [rsp + 0x20]
cmp rax, rbx
je 0x14003dd53
lea rcx, [rsp + 0x20]
call fcn.140008a38
lea r8d, [rdi + 0x20]
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.14007c4e0
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
lea rcx, [rsp + 0x40]
call fcn.140008a38
lea rcx, [rsp + 0x20]
call fcn.140019564
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x14003dda6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003dda1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003ddf6
call fcn.14002a8f0
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], 7
mov word [rsp + 0x20], di
lea rcx, [rsp + 0x60]
call fcn.14002bdc0
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
mov dword [0x1400baaf4], 1
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.1400775a0
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret
call fcn.140058698
nop
call fcn.140007a90
int3
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x1400b7a38]
xor rax, rsp
mov qword [rbp + 0x70], rax
add rcx, 0x128
call fcn.14003714c
cmp eax, 0x38
jne 0x14003dfb9
lea rcx, [rsp + 0x60]
call fcn.14002bc74
nop
lea rcx, [rsp + 0x60]
call fcn.14002c810
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x20]
call fcn.1400527b4
nop
mov esi, 7
mov rax, qword [rsp + 0x30]
xor edi, edi
test rax, rax
je 0x14003deed
lea r9, [rax - 1]
cmp rax, r9
jbe 0x14003dfe4
lea rax, [rsp + 0x20]
cmp qword [rsp + 0x38], 8
cmovae rax, qword [rsp + 0x20]
lea ecx, [rsi + 0x55]
cmp cx, word [rax + r9*2]
jne 0x14003deed
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.14003e7f0
mov rbx, rax
lea rax, [rsp + 0x20]
cmp rax, rbx
je 0x14003dee3
lea rcx, [rsp + 0x20]
call fcn.140008a38
lea r8d, [rsi + 0x19]
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.14007c4e0
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rsi
mov word [rbx], di
lea rcx, [rsp + 0x40]
call fcn.140008a38
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rsi
mov word [rsp + 0x40], di
lea r8, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.140020794
nop
mov ebx, 0x1000
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x14003df54
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, rbx
jb 0x14003df4f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003dfea
call fcn.14002a8f0
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
mov dword [0x1400baaf4], 1
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x14003dfa0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x14003df9b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003dfde
call fcn.14002a8f0
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], rsi
mov word [rsp + 0x20], di
lea rcx, [rsp + 0x60]
call fcn.14002bdc0
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.1400775a0
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
call fcn.140058698
nop
call fcn.140007a90
int3
call fcn.140058698
int3