Function at 0x140062010
Capabilities:
Check for software breakpoints

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbx
sub rsp, 0x130
mov rax, qword [0x1400945f8]
xor rax, rsp
mov qword [rsp + 0x128], rax
mov dword [rsp + 0x38], 0
mov rcx, qword [rsp + 0x140]
call fcn.140061f70
mov rdx, qword [rsp + 0x148]
mov rcx, qword [rsp + 0x140]
call fcn.140061e60
mov rax, qword [rsp + 0x140]
cmp dword [rax + 0xc0], 0
jl 0x14006208e
cmp qword [rsp + 0x148], 0
je 0x14006208e
mov rax, qword [rsp + 0x148]
movsx eax, byte [rax]
test eax, eax
jne 0x140062093
jmp 0x140062309
mov dword [rsp + 0x120], 0
jmp 0x1400620b1
mov eax, dword [rsp + 0x120]
add eax, 1
mov dword [rsp + 0x120], eax
mov ebx, dword [rsp + 0x120]
mov rcx, qword [rsp + 0x140]
call fcn.140001650
cmp rbx, rax
jae 0x140062114
mov edx, dword [rsp + 0x120]
mov rcx, qword [rsp + 0x140]
call fcn.140001680
mov rdx, rax
add rdx, 4
mov rcx, qword [rsp + 0x148]
call fcn.140025aac
test eax, eax
jne 0x140062112
mov edx, dword [rsp + 0x120]
mov rcx, qword [rsp + 0x140]
call fcn.140001680
mov eax, dword [rax]
mov dword [rsp + 0x38], eax
jmp 0x140062114
jmp 0x1400620a0
cmp dword [rsp + 0x38], 0
jne 0x140062195
mov r9, qword [rsp + 0x148]
lea r8, str.SAMDomainsAccountUsersNames_s_
mov edx, 0xb4
lea rcx, [rsp + 0x50]
call fcn.1400260f4
mov r11, qword [rsp + 0x140]
movsxd rax, dword [r11 + 0xc0]
mov r9d, 0x181
lea r8, [rsp + 0x50]
xor edx, edx
mov rcx, qword [rsp + 0x140]
mov rcx, qword [rcx + rax*8 + 0x60]
call fcn.14004e090
mov dword [rsp + 0x38], eax
cmp dword [rsp + 0x38], 0xffffffff
jne 0x140062195
lea r9, [rsp + 0x50]
mov r8d, 0x79f
lea rdx, [0x140082eb0]
lea rcx, [0x1400a5fd0]
call fcn.140048c60
jmp 0x140062309
mov r9d, dword [rsp + 0x38]
lea r8, str.SAMDomainsAccountUsers_08XV
mov edx, 0xb4
lea rcx, [rsp + 0x50]
call fcn.1400260f4
mov r11, qword [rsp + 0x140]
movsxd rax, dword [r11 + 0xc0]
mov dword [rsp + 0x28], 0x81
mov dword [rsp + 0x20], 3
lea r9, [rsp + 0x50]
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x140]
mov rcx, qword [rcx + rax*8 + 0x60]
call fcn.14004d710
mov qword [rsp + 0x30], rax
cmp qword [rsp + 0x30], 0
jne 0x14006221b
lea r9, [rsp + 0x50]
mov r8d, 0x7a9
lea rdx, str._line:_d__Cannot_find_value___s__n
lea rcx, [0x1400a5fd0]
call fcn.140048c60
jmp 0x140062309
mov rax, qword [rsp + 0x30]
cmp dword [rax], 0xcc
jge 0x14006224b
lea r9, [rsp + 0x50]
mov r8d, 0x7af
lea rdx, str._line:_d__Value___s__is_too_short__only_bytes__to_be_a_SAM_user_V_struct__n
lea rcx, [0x1400a5fd0]
call fcn.140048c60
jmp 0x1400622ee
mov rdx, qword [rsp + 0x30]
add rdx, 4
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 2
mov rax, qword [rsp + 0x30]
mov r9d, dword [rax]
mov r8d, dword [rsp + 0x38]
mov rcx, qword [rsp + 0x140]
call fcn.1400614c0
mov rax, qword [rsp + 0x140]
movsxd rax, dword [rax + 0xc0]
mov dword [rsp + 0x28], 0x81
mov dword [rsp + 0x20], 3
lea r9, [rsp + 0x50]
xor r8d, r8d
mov rdx, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x140]
mov rcx, qword [rcx + rax*8 + 0x60]
call fcn.140050af0
test eax, eax
jne 0x1400622dd
lea r8, [rsp + 0x50]
lea rdx, str.Failed_to_write_updated___s__to_registry__Password_change_not_completed__n
lea rcx, [0x1400a5fd0]
call fcn.140048c60
mov edx, dword [rsp + 0x38]
mov rcx, qword [rsp + 0x140]
call fcn.1400602e0
cmp qword [rsp + 0x30], 0
je 0x140062309
mov rcx, qword [rsp + 0x30]
call fcn.140025614
mov qword [rsp + 0x30], 0
mov rcx, qword [rsp + 0x128]
xor rcx, rsp
call fcn.1400252b0
add rsp, 0x130
pop rbx
ret