Function at 0x14009053b
Capabilities:
Get token membership

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x2c0
mov rax, qword [0x140267e38]
xor rax, rsp
mov qword [rsp + 0x2b8], rax
call fcn.1400870d8
test al, al
je 0x140090761
call fcn.140087753
test al, al
je 0x140090761
call fcn.1400909b8
test al, al
je 0x140090761
call fcn.140090a46
test al, al
je 0x1400906a1
lea r9, [rsp + 0xa8]
mov dword [r9], 0x44
xorps xmm0, xmm0
lea r8, [rsp + 0x200]
movaps xmmword [r8 + 0x30], xmm0
movaps xmmword [r8 + 0x20], xmm0
movaps xmmword [r8 + 0x10], xmm0
movaps xmmword [r8], xmm0
mov dword [r8 + 0x40], 0
mov ecx, 0xb
xor edx, edx
call qword [sym.imp.ADVAPI32.dll_CreateWellKnownSid]
test eax, eax
je 0x140090707
lea r8, [rsp + 0x90]
mov dword [r8], 0
lea rdx, [rsp + 0x200]
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_CheckTokenMembership]
test eax, eax
je 0x1400906ab
cmp dword [rsp + 0x90], 0
je 0x140090707
lea rsi, [rsp + 0xa8]
mov rcx, rsi
call fcn.14003d8a0
mov ecx, 1
mov rdx, rsi
call fcn.140090422
test al, al
je 0x14009069a
lea rcx, [rsp + 0xa8]
call fcn.14007ab40
test al, al
je 0x140090780
lea rcx, str..._.._chrome_installer_util_shell_util.cc
mov edx, 0x2a
call fcn.140060b70
test eax, eax
jle 0x14009069a
lea rdx, str..._.._chrome_installer_util_shell_util.cc
lea rsi, [rsp + 0xc0]
mov rcx, rsi
mov r8d, 0x7ea
mov r9d, 0xffffffff
call fcn.140060c10
lea rcx, [rsp + 0xc8]
lea rdx, str.Edge_UWP_Shortcut_already_exists.
mov r8d, 0x21
call fcn.140007184
mov rcx, rsi
call fcn.140061070
xor esi, esi
jmp 0x1400909a5
call fcn.1400902dc
jmp 0x140090761
mov ecx, 2
call fcn.140060b40
test al, al
je 0x140090707
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str..._.._chrome_installer_util_shell_util.cc
lea rsi, [rsp + 0xc0]
mov rcx, rsi
mov r8d, 0x7aa
mov r9d, 2
call fcn.1400618b0
lea rcx, [rsp + 0xd0]
lea rdx, str.Failed_to_check_token_membership_for_WinInteractiveSid.
mov r8d, 0x37
call fcn.140007184
mov rcx, rsi
call fcn.140061980
lea rcx, str..._.._chrome_installer_util_shell_util.cc
mov edx, 0x2a
call fcn.140060b70
test eax, eax
jle 0x140090761
lea rdx, str..._.._chrome_installer_util_shell_util.cc
lea rsi, [rsp + 0xc0]
mov rcx, rsi
mov r8d, 0x7e2
mov r9d, 0xffffffff
call fcn.140060c10
lea rcx, [rsp + 0xc8]
lea rdx, str.Not_running_as_interactive_user__skipping_Edge_UWP_shortcut_creation.
mov r8d, 0x45
call fcn.140007184
mov rcx, rsi
call fcn.140061070
xor esi, esi
mov rcx, qword [rsp + 0x2b8]
xor rcx, rsp
call fcn.1401ca2e0
mov eax, esi
add rsp, 0x2c0
pop rbx
pop rdi
pop rsi
ret
lea rcx, [rsp + 0x200]
call fcn.1400b24a0
lea rdx, str.Microsoft.MicrosoftEdge_8wekyb3d8bbwe_MicrosoftEdge
lea rsi, [rsp + 0xc0]
mov rcx, rsi
call fcn.140006b00
lea rdi, [rsp + 0x280]
mov rcx, rdi
mov rdx, rsi
call fcn.14003b99c
or byte [rdi + 0x2c], 0x20
cmp byte [rsi + 0x17], 0
jns 0x1400907ce
mov rcx, qword [rsp + 0xc0]
call fcn.1401c9f6c
lea rax, str.shell:AppsFolderMicrosoft.MicrosoftEdge_8wekyb3d8bbwe_MicrosoftEdge
lea rdx, [rsp + 0x80]
mov qword [rdx], rax
mov qword [rdx + 8], 0x44
lea rsi, [rsp + 0x90]
mov rcx, rsi
call fcn.14005ba50
lea rdi, [rsp + 0x200]
mov rcx, rdi
mov rdx, rsi
call fcn.14005bab0
or byte [rdi + 0xac], 1
lea rax, str._windir_SystemAppsMicrosoft.MicrosoftEdge_8wekyb3d8bbweMicrosoftEdge.exe
lea rdx, [rsp + 0x58]
mov qword [rdx], rax
mov qword [rdx + 8], 0x4b
lea rsi, [rsp + 0x68]
mov rcx, rsi
call fcn.14005ba50
lea rdi, [rsp + 0x260]
mov rcx, rdi
mov rdx, rsi
call fcn.14005bab0
mov dword [rdi + 0x18], 0
or dword [rdi + 0x4c], 0x110
lea rcx, str..._.._chrome_installer_util_shell_util.cc
mov edx, 0x2a
call fcn.140060b70
test eax, eax
jle 0x140090906
lea rdx, str..._.._chrome_installer_util_shell_util.cc
lea rcx, [rsp + 0xc0]
mov r8d, 0x7f9
mov r9d, 0xffffffff
call fcn.140060c10
lea rcx, [rsp + 0xc8]
lea rdx, str.Adding_Edge_UWP_Shortcut_to
mov r8d, 0x1c
call fcn.140007184
mov rsi, rax
lea rbx, [rsp + 0x28]
lea rdx, [rsp + 0xa8]
mov rcx, rbx
call fcn.14003b7ee
lea rdi, [rsp + 0x40]
mov rcx, rdi
mov rdx, rbx
call fcn.14008d710
xor ebx, ebx
cmp byte [rdi + 0x17], bl
jns 0x1400908de
mov rdi, qword [rsp + 0x40]
mov rcx, rsi
mov rdx, rdi
call fcn.140061a30
cmp byte [rsp + 0x57], bl
jns 0x1400908f9
mov rcx, qword [rsp + 0x40]
call fcn.1401c9f6c
lea rcx, [rsp + 0xc0]
call fcn.140061070
lea rcx, [rsp + 0xa8]
lea rdx, [rsp + 0x200]
xor r8d, r8d
xor r9d, r9d
call fcn.1400b2570
mov esi, eax
test al, al
jne 0x140090981
lea rcx, str..._.._chrome_installer_util_shell_util.cc
mov edx, 0x2a
call fcn.140060b70
test eax, eax
jle 0x140090981
lea rdx, str..._.._chrome_installer_util_shell_util.cc
lea rdi, [rsp + 0xc0]
mov rcx, rdi
mov r8d, 0x7ff
mov r9d, 0xffffffff
call fcn.140060c10
lea rcx, [rsp + 0xc8]
lea rdx, str.Failed_to_create_Edge_UWP_Shortcut.
mov r8d, 0x23
call fcn.140007184
mov rcx, rdi
call fcn.140061070
lea rcx, [rsp + 0x68]
call fcn.14005baa0
lea rcx, [rsp + 0x90]
call fcn.14005baa0
lea rcx, [rsp + 0x200]
call fcn.1400b2500
lea rcx, [rsp + 0xa8]
call fcn.14005baa0
jmp 0x140090763