Function at 0x577820
Capabilities:
Compare security identifiers

Disassembly:
push rbp
push rbx
sub rsp, 0xf8
mov rbp, rsp
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x70], 0
mov qword [rbp + 0xa8], 0
mov qword [rbp + 0x78], rbp
nop
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x221
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x90]
cmp eax, ecx
jge 0x577886
lea rcx, [rbp + 0x94]
call fcn.0054f920
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x211
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0xa4]
cmp eax, dword [rbp + 0xa0]
jle 0x5778c7
lea rcx, [rbp + 0x9c]
lea rdx, [rbp + 0x98]
lea r8, [rbp + 0x94]
lea r9, [rbp + 0x8c]
call fcn.0053dae0
mov eax, dword [rbp + 0xa4]
sub eax, dword [rbp + 0xa0]
mov dword [rbp + 0x8c], eax
mov dword [rbp + 0x9c], 0
cmp dword [rbp + 0x9c], 2
jge 0x577998
add dword [rbp + 0x9c], 1
mov eax, dword [rbp + 0xa0]
add eax, 0x36c
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
sub eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x94]
sub ecx, dword [rbp + 0x90]
cmp eax, ecx
jle 0x577937
mov eax, dword [rbp + 0x90]
sub eax, 0x1b7
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0x90]
sub eax, dword [rbp + 0xa4]
cmp eax, dword [rbp + 0xa4]
jge 0x57795d
mov eax, dword [rbp + 0xa0]
add eax, 0x382
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x90]
cmp eax, ecx
jge 0x57798b
mov eax, dword [rbp + 0x90]
sub eax, 0x1ac
mov dword [rbp + 0x94], eax
cmp dword [rbp + 0x9c], 2
jl 0x5778f0
nop
mov eax, dword [rbp + 0xa4]
cmp eax, dword [rbp + 0xa0]
jle 0x5779e0
lea rcx, [rbp + 0x9c]
lea rdx, [rbp + 0x98]
lea r8, [rbp + 0x90]
lea r9, [rbp + 0x8c]
lea rax, [rbp + 0xa4]
mov qword [rsp + 0x20], rax
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x28], rax
call fcn.0053e6e0
mov eax, dword [rbp + 0xa4]
cmp eax, dword [rbp + 0xa0]
jle 0x577a0f
lea rcx, [rbp + 0x9c]
lea rdx, [rbp + 0x98]
lea r8, [rbp + 0x90]
lea r9, [rbp + 0x8c]
call fcn.0053d350
mov eax, dword [rbp + 0xa4]
add eax, dword [rbp + 0xa4]
mov dword [rbp + 0x8c], eax
mov eax, dword [rbp + 0xa4]
add eax, dword [rbp + 0xa0]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x577a5e
lea rcx, [rbp + 0x9c]
lea rdx, [rbp + 0x94]
lea r8, [rbp + 0x90]
lea r9, [rbp + 0x8c]
call fcn.00540aa0
mov dword [rbp + 0xec], 0
mov eax, dword [rbp + 0x90]
add eax, 0x163
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0xa0]
imul eax, dword [rbp + 0x9c]
mov dword [rbp + 0xa4], eax
mov dword [rbp + 0x9c], 0
mov eax, 0x392
sub eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
sub eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
sub ecx, dword [rbp + 0x90]
cmp eax, ecx
jle 0x577ad7
mov eax, dword [rbp + 0x90]
sub eax, 0x1bd
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0x94]
add eax, dword [rbp + 0xa4]
cmp eax, dword [rbp + 0xa4]
jle 0x577af7
mov eax, dword [rbp + 0xa4]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x9c]
sub eax, dword [rbp + 0x98]
mov ecx, dword [rbp + 0x94]
sub ecx, dword [rbp + 0x90]
cmp eax, ecx
jle 0x577b25
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x1f2
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0x90]
sub eax, dword [rbp + 0xa4]
cmp eax, dword [rbp + 0xa4]
jge 0x577b4b
mov eax, dword [rbp + 0xa0]
add eax, 0x35c
mov dword [rbp + 0xa4], eax
add dword [rbp + 0x9c], 1
cmp dword [rbp + 0x9c], 4
jne 0x577a97
nop
mov eax, dword [rbp + 0xa4]
add eax, dword [rbp + 0xa4]
mov dword [rbp + 0x8c], eax
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x577ba1
lea rcx, [rbp + 0x98]
lea rdx, [rbp + 0x94]
call fcn.00541b10
mov eax, dword [rbp + 0x90]
sub eax, 0x1b4
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x90]
add eax, 0x161
mov dword [rbp + 0x98], eax
mov eax, dword [rbp + 0xa4]
imul eax, dword [rbp + 0x9c]
mov dword [rbp + 0xa4], eax
lea rcx, [rbp + 0xa8]
call fcn.0040e5d0
mov eax, dword [rbp + 0xa4]
cmp eax, dword [rbp + 0xa0]
jle 0x577c10
mov eax, dword [rbp + 0x94]
imul eax, eax, 0xf5
mov dword [rbp + 0x98], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x0060ecd0]
call fcn.0040fe40
mov eax, dword [rbp + 0xa0]
sub dword [rbp + 0xa4], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x0060ece0]
call fcn.0040fe40
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x577c70
mov eax, dword [rbp + 0x90]
sub eax, 0x187
mov dword [rbp + 0x94], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x0060ed30]
call fcn.0040fe40
mov eax, dword [rbp + 0xa4]
imul eax, dword [rbp + 0x9c]
mov dword [rbp + 0xa4], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x0060ecd0]
call fcn.0040fe40
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x577cd7
mov eax, dword [rbp + 0x94]
add eax, 0x158
mov dword [rbp + 0x98], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x0060ecc8]
call fcn.0040fe40
mov eax, dword [rbp + 0xa4]
imul eax, dword [rbp + 0x9c]
mov dword [rbp + 0xa4], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x0060ecb8]
call fcn.0040fe40
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x577d3e
mov eax, dword [rbp + 0x94]
add eax, 0x149
mov dword [rbp + 0x98], eax
lea rcx, [rbp + 0x70]
mov edx, 3
call fcn.0042c720
lea rcx, [rbp + 0xa8]
mov rdx, qword [rbp + 0x70]
call fcn.0040fe40
mov eax, dword [rbp + 0xa0]
imul eax, dword [rbp + 0x9c]
mov dword [rbp + 0xa4], eax
lea rcx, [rbp + 0x68]
mov edx, 2
call fcn.0042c720
lea rcx, [rbp + 0xa8]
mov rdx, qword [rbp + 0x68]
call fcn.0040fe40
mov eax, dword [rbp + 0xa0]
sub eax, dword [rbp + 0x98]
mov ecx, dword [rbp + 0x94]
sub ecx, dword [rbp + 0x90]
cmp eax, ecx
jle 0x577dbd
mov eax, dword [rbp + 0x90]
sub eax, 0x1da
mov dword [rbp + 0x94], eax
lea rcx, [rbp + 0xa8]
lea rdx, [0x0057a06c]
call fcn.0040fe40
mov eax, dword [rbp + 0xa4]
imul eax, dword [rbp + 0x9c]
mov dword [rbp + 0xa4], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x0060ece0]
call fcn.0040fe40
mov eax, dword [rbp + 0x94]
add eax, 0x146
mov dword [rbp + 0x98], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x0060ed10]
call fcn.0040fe40
mov eax, dword [rbp + 0xa4]
add eax, dword [rbp + 0xa4]
mov dword [rbp + 0x8c], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x0060ed10]
call fcn.0040fe40
mov eax, dword [rbp + 0x8c]
add eax, dword [rbp + 0xa4]
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0xa0]
sub eax, dword [rbp + 0x98]
mov ecx, dword [rbp + 0x94]
sub ecx, dword [rbp + 0x90]
cmp eax, ecx
jle 0x577ea7
lea rcx, [rbp + 0x90]
lea rdx, [rbp + 0x8c]
lea r8, [rbp + 0xa4]
lea r9, [rbp + 0xa0]
lea rax, [rbp + 0x9c]
mov qword [rsp + 0x20], rax
lea rax, [rbp + 0x94]
mov qword [rsp + 0x28], rax
call fcn.0055a580
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x20c
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0xa4]
cmp eax, dword [rbp + 0xa0]
jle 0x577ed3
lea rcx, [rbp + 0x9c]
call fcn.0053d840
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x577f10
lea rcx, [rbp + 0x98]
lea rdx, [rbp + 0x94]
lea r8, [rbp + 0x8c]
lea r9, [rbp + 0xa4]
call fcn.00543a90
mov eax, dword [rbp + 0xa0]
sub dword [rbp + 0xa4], eax
mov dword [rbp + 0x9c], 0
mov eax, dword [rbp + 0xa0]
add eax, 0x370
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x577f66
mov eax, dword [rbp + 0x90]
add eax, 0x17a
mov dword [rbp + 0x98], eax
mov eax, dword [rbp + 0x94]
add eax, dword [rbp + 0x8c]
cmp eax, dword [rbp + 0xa4]
jle 0x577f8d
mov eax, dword [rbp + 0xa4]
imul eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x98]
add eax, 0x4e
mov dword [rbp + 0xa0], eax
add dword [rbp + 0x9c], 1
cmp dword [rbp + 0x9c], 3
jne 0x577f26
nop
mov eax, dword [rbp + 0xa0]
sub dword [rbp + 0xa4], eax
mov dword [rbp + 0xa0], 0
cmp dword [rbp + 0xa0], 1
jge 0x57806d
add dword [rbp + 0xa0], 1
mov eax, dword [rbp + 0x9c]
add eax, 0x33e
mov dword [rbp + 0xa4], eax
mov eax, 0x64
sub eax, dword [rbp + 0x98]
mov dword [rbp + 0x9c], eax
mov eax, dword [rbp + 0x9c]
sub eax, dword [rbp + 0x98]
mov ecx, dword [rbp + 0x94]
sub ecx, dword [rbp + 0x90]
cmp eax, ecx
jle 0x578039
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x1ee
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0x90]
sub eax, dword [rbp + 0xa4]
cmp eax, dword [rbp + 0xa4]
jge 0x578060
mov eax, dword [rbp + 0xa4]
imul eax, dword [rbp + 0x9c]
mov dword [rbp + 0xa4], eax
cmp dword [rbp + 0xa0], 1
jl 0x577fe0
nop
nop
mov eax, dword [rbp + 0x90]
sub eax, 0x19e
mov dword [rbp + 0x94], eax
lea rcx, [rbp + 0xa0]
call fcn.005390e0
mov eax, dword [rbp + 0xa4]
cmp eax, dword [rbp + 0xa0]
jle 0x5780d4
lea rcx, [rbp + 0x9c]
lea rdx, [rbp + 0x98]
lea r8, [rbp + 0x90]
lea r9, [rbp + 0x8c]
lea rax, [rbp + 0xa4]
mov qword [rsp + 0x20], rax
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x28], rax
call fcn.0053ec40
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x578129
lea rcx, [rbp + 0x98]
lea rdx, [rbp + 0x94]
lea r8, [rbp + 0x90]
lea r9, [rbp + 0xa4]
lea rax, [rbp + 0xa4]
mov qword [rsp + 0x20], rax
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x28], rax
call fcn.005438f0
mov dword [rbp + 0xa0], 0
cmp dword [rbp + 0xa0], 1
jge 0x5781a0
add dword [rbp + 0xa0], 1
mov eax, dword [rbp + 0xa4]
imul eax, dword [rbp + 0x9c]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x98]
imul eax, eax, 0x2b
mov dword [rbp + 0x9c], eax
mov eax, dword [rbp + 0x90]
add eax, dword [rbp + 0x8c]
cmp dword [rbp + 0x98], eax
jne 0x57818b
mov eax, dword [rbp + 0xa4]
add eax, dword [rbp + 0xa4]
mov dword [rbp + 0x8c], eax
mov eax, dword [rbp + 0xa4]
mov dword [rbp + 0xa4], eax
cmp dword [rbp + 0xa0], 1
jl 0x57813c
nop
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x242
mov dword [rbp + 0x90], eax
lea rcx, [rbp + 0xa4]
call fcn.00536080
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x94]
add ecx, dword [rbp + 0x90]
cmp eax, ecx
jge 0x5781fc
lea rcx, [rbp + 0x94]
lea rdx, [rbp + 0x8c]
lea r8, [rbp + 0xa4]
lea r9, [rbp + 0xa0]
call fcn.0055e2c0
mov eax, dword [rbp + 0xa4]
cmp eax, dword [rbp + 0xa0]
jle 0x57821d
lea rcx, [rbp + 0x9c]
lea rdx, [rbp + 0x98]
call fcn.0053fbe0
mov eax, dword [rbp + 0x90]
sub eax, 0x19e
mov dword [rbp + 0x94], eax
call fcn.0056dc40
lea rcx, [rbp + 0xa8]
call fcn.0040e5d0
mov eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x0060ed40]
call fcn.0040fe40
mov eax, dword [rbp + 0x90]
add eax, 0x166
mov dword [rbp + 0x98], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x0060eca0]
call fcn.0040fe40
mov eax, dword [rbp + 0xa0]
sub dword [rbp + 0xa4], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x0060ece0]
call fcn.0040fe40
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x5782d1
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x1d7
mov dword [rbp + 0x94], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x0060ed10]
call fcn.0040fe40
mov eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x0060ed10]
call fcn.0040fe40
mov eax, dword [rbp + 0x9c]
sub eax, dword [rbp + 0x98]
mov ecx, dword [rbp + 0x94]
sub ecx, dword [rbp + 0x90]
cmp eax, ecx
jle 0x578331
mov eax, dword [rbp + 0x8c]
sub eax, 0x1e8
mov dword [rbp + 0x90], eax
lea rcx, [rbp + 0xa8]
lea rdx, [0x0057a06c]
call fcn.0040fe40
mov eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x0060ece0]
call fcn.0040fe40
mov eax, dword [rbp + 0xa0]
sub eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x94]
sub ecx, dword [rbp + 0x90]
cmp eax, ecx
jle 0x578391
mov eax, dword [rbp + 0x90]
sub eax, 0x1b9
mov dword [rbp + 0x94], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x0060ed10]
call fcn.0040fe40
mov eax, dword [rbp + 0xa0]
imul eax, dword [rbp + 0x9c]
mov dword [rbp + 0xa4], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x0060ed10]
call fcn.0040fe40
mov eax, dword [rbp + 0xa4]
add eax, dword [rbp + 0xa4]
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x94]
add ecx, dword [rbp + 0x90]
cmp eax, ecx
jge 0x5783fd
call fcn.00546c80
mov dword [rbp + 0x9c], 0
mov eax, dword [rbp + 0xa0]
add eax, 0x349
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x578447
mov eax, dword [rbp + 0x90]
sub eax, 0x174
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0x94]
add eax, dword [rbp + 0x8c]
cmp eax, dword [rbp + 0xa4]
jle 0x57846e
mov eax, dword [rbp + 0xa4]
imul eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
add dword [rbp + 0x9c], 1
cmp dword [rbp + 0x9c], 3
jne 0x578407
nop
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x20a
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0xa4]
cmp eax, dword [rbp + 0xa0]
jle 0x5784bb
lea rcx, [rbp + 0xa0]
call fcn.0053d840
mov eax, dword [rbp + 0xa4]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x5784ea
lea rcx, [rbp + 0x9c]
lea rdx, [rbp + 0x94]
call fcn.00540ba0
mov eax, dword [rbp + 0x90]
add eax, 0x183
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0xa0]
imul eax, dword [rbp + 0x9c]
mov dword [rbp + 0xa4], eax
mov dword [rbp + 0x9c], 0
mov eax, dword [rbp + 0xa4]
imul eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
mov eax, 0x3b6
sub eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
sub eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
sub ecx, dword [rbp + 0x94]
cmp eax, ecx
jle 0x57856c
mov eax, dword [rbp + 0x90]
sub eax, 0x1c1
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0x94]
add eax, dword [rbp + 0x8c]
cmp eax, dword [rbp + 0xa4]
jle 0x578593
mov eax, dword [rbp + 0xa4]
imul eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
add dword [rbp + 0x9c], 1
cmp dword [rbp + 0x9c], 3
jne 0x578519
nop
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x212
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0xa0]
imul eax, dword [rbp + 0x9c]
mov dword [rbp + 0xa4], eax
call sub.kernel32.dll_GetCurrentThread
mov rcx, rax
mov edx, 8
or r8d, 0xffffffff
lea r9, [rbp + 0xe0]
call sub.advapi32.dll_OpenThreadToken
mov dword [rbp + 0xc0], eax
call sub.kernel32.dll_GetLastError_2
mov dword [rbp + 0xbc], eax
cmp dword [rbp + 0xc0], 0
jne 0x5789dd
mov eax, dword [rbp + 0xa4]
sub eax, dword [rbp + 0xa0]
mov dword [rbp + 0x8c], eax
mov dword [rbp + 0x9c], 0
mov eax, dword [rbp + 0xa0]
add eax, 0x382
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x9c]
sub eax, dword [rbp + 0x98]
mov ecx, dword [rbp + 0x94]
sub ecx, dword [rbp + 0x90]
cmp eax, ecx
jle 0x578665
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x22d
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0xa0]
sub dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
add eax, 0x397
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x5786b1
mov eax, dword [rbp + 0x90]
sub eax, 0x1c2
mov dword [rbp + 0x94], eax
add dword [rbp + 0x9c], 1
cmp dword [rbp + 0x9c], 3
jne 0x578625
nop
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x5786f5
lea rcx, [rbp + 0x98]
lea rdx, [rbp + 0x90]
call fcn.00541950
mov eax, dword [rbp + 0x8c]
add eax, dword [rbp + 0xa4]
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0xa4]
cmp eax, dword [rbp + 0xa0]
jle 0x578736
lea rcx, [rbp + 0x9c]
lea rdx, [rbp + 0x98]
lea r8, [rbp + 0x94]
lea r9, [rbp + 0x8c]
call fcn.0053dae0
mov eax, dword [rbp + 0xa4]
add eax, dword [rbp + 0xa4]
mov dword [rbp + 0x8c], eax
mov eax, dword [rbp + 0xa4]
cmp eax, dword [rbp + 0xa0]
jle 0x578783
lea rcx, [rbp + 0x9c]
lea rdx, [rbp + 0x98]
lea r8, [rbp + 0x94]
lea r9, [rbp + 0x8c]
lea rax, [rbp + 0xa4]
mov qword [rsp + 0x20], rax
call fcn.0053d670
mov eax, dword [rbp + 0xa0]
imul eax, dword [rbp + 0x9c]
mov dword [rbp + 0xa4], eax
mov dword [rbp + 0x9c], 0
mov eax, dword [rbp + 0xa0]
add eax, 0x33f
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x94]
add eax, 0x85
mov dword [rbp + 0x98], eax
mov eax, dword [rbp + 0x90]
sub eax, dword [rbp + 0x8c]
cmp dword [rbp + 0x98], eax
jne 0x5787ea
mov eax, dword [rbp + 0xa4]
add eax, dword [rbp + 0xa4]
mov dword [rbp + 0x8c], eax
add dword [rbp + 0xa4], 0x334
mov eax, dword [rbp + 0x94]
add eax, 0x7a
mov dword [rbp + 0x98], eax
add dword [rbp + 0x9c], 1
cmp dword [rbp + 0x9c], 4
jne 0x5787a0
nop
mov eax, dword [rbp + 0xa0]
imul eax, dword [rbp + 0x9c]
mov dword [rbp + 0xa4], eax
mov dword [rbp + 0x9c], 0
mov eax, dword [rbp + 0xa4]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x94]
add eax, 0x8f
mov dword [rbp + 0x98], eax
mov eax, dword [rbp + 0x90]
sub eax, dword [rbp + 0x8c]
cmp dword [rbp + 0x98], eax
jne 0x578875
mov eax, dword [rbp + 0xa4]
add eax, dword [rbp + 0xa4]
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0xa4]
imul eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
add eax, 0x3a3
mov dword [rbp + 0xa4], eax
add dword [rbp + 0x9c], 1
cmp dword [rbp + 0x9c], 3
jne 0x578831
nop
cmp dword [rbp + 0xbc], 0x3f0
jne 0x5789dd
lea rcx, [rbp + 0xa0]
call fcn.00536080
lea rcx, [rbp + 0xa4]
call fcn.00536080
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x5788fb
lea rcx, [rbp + 0x94]
call fcn.00548a50
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x1fb
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x578956
lea rcx, [rbp + 0x9c]
lea rdx, [rbp + 0x94]
lea r8, [rbp + 0x90]
lea r9, [rbp + 0x8c]
lea rax, [rbp + 0xa4]
mov qword [rsp + 0x20], rax
call fcn.00540330
call sub.kernel32.dll_GetCurrentProcess
mov rcx, rax
mov edx, 8
lea r8, [rbp + 0xe0]
call sub.advapi32.dll_OpenProcessToken
mov dword [rbp + 0xc0], eax
lea rcx, [rbp + 0xa4]
lea rdx, [rbp + 0xa0]
lea r8, [rbp + 0x98]
lea r9, [rbp + 0x94]
call fcn.00571990
mov eax, dword [rbp + 0x90]
sub eax, 0x19d
mov dword [rbp + 0x94], eax
lea rcx, [rbp + 0xa4]
lea rdx, [rbp + 0xa0]
call fcn.0056c8e0
lea rcx, [rbp + 0xa4]
lea rdx, [rbp + 0xa0]
lea r8, [rbp + 0x9c]
lea r9, [rbp + 0x98]
call fcn.0056ded0
mov eax, dword [rbp + 0xa4]
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0xa4]
imul eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
mov dword [rbp + 0x90], 0
mov dword [rbp + 0x9c], 0
mov eax, dword [rbp + 0x98]
imul eax, eax, 0x3d5
mov dword [rbp + 0xa0], eax
mov eax, dword [rbp + 0x8c]
add eax, 0x180
cmp eax, dword [rbp + 0x98]
jge 0x578a48
mov eax, dword [rbp + 0xa4]
add eax, dword [rbp + 0xa4]
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0x94]
imul eax, eax, 0x3ca
mov dword [rbp + 0xa0], eax
mov eax, dword [rbp + 0x90]
add eax, dword [rbp + 0x8c]
cmp dword [rbp + 0x98], eax
jne 0x578a80
mov eax, dword [rbp + 0xa4]
add eax, dword [rbp + 0xa4]
mov dword [rbp + 0x90], eax
add dword [rbp + 0x9c], 1
cmp dword [rbp + 0x9c], 3
jne 0x578a10
nop
mov dword [rbp + 0xa0], 0
cmp dword [rbp + 0xa0], 1
jge 0x578b1a
add dword [rbp + 0xa0], 1
mov eax, dword [rbp + 0xa4]
imul eax, dword [rbp + 0x9c]
mov dword [rbp + 0xa4], eax
mov eax, 4
sub eax, dword [rbp + 0x98]
mov dword [rbp + 0x9c], eax
mov eax, dword [rbp + 0x9c]
sub eax, dword [rbp + 0x98]
mov ecx, dword [rbp + 0x94]
sub ecx, dword [rbp + 0x90]
cmp eax, ecx
jle 0x578afe
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x20f
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0xa4]
imul eax, dword [rbp + 0x9c]
mov dword [rbp + 0x8c], eax
cmp dword [rbp + 0xa0], 1
jl 0x578aa4
nop
cmp dword [rbp + 0xc0], 0
je 0x579e89
mov ecx, 0x400
call fcn.00409020
mov qword [rbp + 0xd8], rax
mov eax, dword [rbp + 0xa4]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x578b77
lea rcx, [rbp + 0x98]
lea rdx, [rbp + 0x94]
lea r8, [rbp + 0x8c]
lea r9, [rbp + 0xa4]
call fcn.00540440
mov eax, dword [rbp + 0xa4]
imul eax, dword [rbp + 0x9c]
mov dword [rbp + 0xa4], eax
mov dword [rbp + 0x9c], 0
mov eax, dword [rbp + 0xa0]
add eax, 0x37b
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x578bd4
mov eax, dword [rbp + 0x90]
sub eax, 0x185
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0x94]
add eax, dword [rbp + 0x8c]
cmp eax, dword [rbp + 0xa4]
jle 0x578bf4
mov eax, dword [rbp + 0xa0]
sub dword [rbp + 0xa4], eax
mov eax, 0x394
sub eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x9c]
sub eax, dword [rbp + 0x98]
mov ecx, dword [rbp + 0x94]
sub ecx, dword [rbp + 0x90]
cmp eax, ecx
jle 0x578c34
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x1df
mov dword [rbp + 0x90], eax
add dword [rbp + 0x9c], 1
cmp dword [rbp + 0x9c], 4
jne 0x578b94
nop
mov eax, dword [rbp + 0xa4]
cmp eax, dword [rbp + 0xa0]
jle 0x578c5c
call fcn.0053dc80
lea rcx, [rbp + 0xa4]
call fcn.00570de0
mov dword [rbp + 0x9c], 0
mov eax, dword [rbp + 0xa0]
add eax, 0x37f
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x94]
add eax, dword [rbp + 0x8c]
cmp dword [rbp + 0x9c], eax
jne 0x578caa
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x22b
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0xa0]
sub dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
add eax, 0x395
mov dword [rbp + 0xa4], eax
add dword [rbp + 0x9c], 1
cmp dword [rbp + 0x9c], 3
jne 0x578c72
nop
mov eax, dword [rbp + 0xa4]
add eax, dword [rbp + 0xa4]
mov dword [rbp + 0x90], eax
mov dword [rbp + 0xa0], 0
cmp dword [rbp + 0xa0], 1
jge 0x578d66
add dword [rbp + 0xa0], 1
mov eax, dword [rbp + 0xa4]
mov dword [rbp + 0xa4], eax
mov eax, 0x8b
sub eax, dword [rbp + 0x98]
mov dword [rbp + 0x9c], eax
mov eax, dword [rbp + 0x9c]
sub eax, dword [rbp + 0x98]
mov ecx, dword [rbp + 0x94]
sub ecx, dword [rbp + 0x90]
cmp eax, ecx
jle 0x578d51
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x235
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0xa4]
mov dword [rbp + 0xa4], eax
cmp dword [rbp + 0xa0], 1
jl 0x578cfe
nop
mov eax, dword [rbp + 0x90]
sub eax, 0x181
mov dword [rbp + 0x94], eax
lea rcx, [rbp + 0xa0]
lea rdx, [rbp + 0x9c]
lea r8, [rbp + 0x98]
lea r9, [rbp + 0x90]
lea rax, [rbp + 0x8c]
mov qword [rsp + 0x20], rax
lea rax, [rbp + 0xa4]
mov qword [rsp + 0x28], rax
call fcn.005740d0
mov rcx, qword [rbp + 0xe0]
mov edx, 2
mov r8, qword [rbp + 0xd8]
mov r9d, 0x400
lea rax, [rbp + 0xd4]
mov qword [rsp + 0x20], rax
call sub.advapi32.dll_GetTokenInformation
mov dword [rbp + 0xc0], eax
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x1f8
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x90]
cmp eax, ecx
jge 0x578e1e
lea rcx, [rbp + 0x94]
call fcn.0054f920
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x209
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0xa4]
cmp eax, dword [rbp + 0xa0]
jle 0x578e77
lea rcx, [rbp + 0xa0]
lea rdx, [rbp + 0x98]
lea r8, [rbp + 0x94]
lea r9, [rbp + 0x90]
lea rax, [rbp + 0xa4]
mov qword [rsp + 0x20], rax
lea rax, [rbp + 0xa4]
mov qword [rsp + 0x28], rax
call fcn.0053ce00
mov eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x8c]
sub eax, 0x1e2
mov dword [rbp + 0x90], eax
lea rcx, [rbp + 0xa4]
lea rdx, [rbp + 0xa0]
lea r8, [rbp + 0x9c]
lea r9, [rbp + 0x98]
call fcn.0056ded0
mov dword [rbp + 0x9c], 0
mov eax, dword [rbp + 0xa0]
add eax, 0x351
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x94]
add eax, 0x96
mov dword [rbp + 0x98], eax
mov eax, dword [rbp + 0x90]
sub eax, dword [rbp + 0x8c]
cmp dword [rbp + 0x98], eax
jne 0x578f0a
mov eax, dword [rbp + 0xa4]
add eax, dword [rbp + 0xa4]
mov dword [rbp + 0x8c], eax
mov eax, dword [rbp + 0xa0]
sub dword [rbp + 0xa4], eax
add dword [rbp + 0x9c], 1
cmp dword [rbp + 0x9c], 3
jne 0x578ec0
nop
mov rcx, qword [rbp + 0xe0]
call sub.kernel32.dll_CloseHandle_1
cmp dword [rbp + 0xc0], 0
je 0x579d1d
mov eax, dword [rbp + 0xa4]
add eax, dword [rbp + 0xa4]
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0xa0]
sub eax, dword [rbp + 0x98]
mov ecx, dword [rbp + 0x94]
sub ecx, dword [rbp + 0x90]
cmp eax, ecx
jle 0x578fa7
lea rcx, [rbp + 0x94]
lea rdx, [rbp + 0x8c]
lea r8, [rbp + 0xa4]
lea r9, [rbp + 0xa4]
lea rax, [rbp + 0x9c]
mov qword [rsp + 0x20], rax
lea rax, [rbp + 0x98]
mov qword [rsp + 0x28], rax
call fcn.00555270
mov eax, dword [rbp + 0x90]
sub eax, 0x199
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x90]
sub eax, 0x1a5
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0xa0]
imul eax, dword [rbp + 0x9c]
mov dword [rbp + 0xa4], eax
mov dword [rbp + 0x9c], 0
mov eax, dword [rbp + 0xa0]
add eax, 0x354
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x579034
mov eax, dword [rbp + 0x90]
sub eax, 0x17f
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0x94]
add eax, dword [rbp + 0x8c]
cmp eax, dword [rbp + 0xa4]
jle 0x579054
mov eax, dword [rbp + 0xa0]
sub dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
add eax, 0x38d
mov dword [rbp + 0xa4], eax
add dword [rbp + 0x9c], 1
cmp dword [rbp + 0x9c], 3
jne 0x578ff4
nop
mov eax, dword [rbp + 0xa4]
sub eax, dword [rbp + 0xa0]
mov dword [rbp + 0x8c], eax
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x5790bc
lea rcx, [rbp + 0x98]
lea rdx, [rbp + 0x94]
call fcn.00540ba0
mov eax, dword [rbp + 0x90]
sub eax, 0x185
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x1e6
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x57911d
lea rcx, [rbp + 0x98]
lea rdx, [rbp + 0x90]
lea r8, [rbp + 0x8c]
lea r9, [rbp + 0xa4]
call fcn.005444f0
lea rcx, [rbp + 0xa4]
lea rdx, [rbp + 0xa0]
lea r8, [rbp + 0x9c]
call fcn.0056e6f0
mov dword [rbp + 0xa0], 0
cmp dword [rbp + 0xa0], 2
jge 0x5791dd
add dword [rbp + 0xa0], 1
mov eax, dword [rbp + 0x9c]
add eax, 0x341
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x579195
mov eax, dword [rbp + 0x90]
sub eax, 0x18c
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0x94]
add eax, dword [rbp + 0x8c]
cmp eax, dword [rbp + 0xa4]
jle 0x5791bc
mov eax, dword [rbp + 0xa4]
imul eax, dword [rbp + 0x9c]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x98]
lea rax, [rax + rax*2]
lea rax, [rax + rax*8]
mov dword [rbp + 0x9c], eax
cmp dword [rbp + 0xa0], 2
jl 0x57914e
nop
mov eax, dword [rbp + 0xa4]
imul eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
mov dword [rbp + 0xa0], 0
cmp dword [rbp + 0xa0], 1
jge 0x579265
add dword [rbp + 0xa0], 1
mov eax, dword [rbp + 0xa4]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x94]
shl eax, 4
lea rax, [rax + rax*2]
mov dword [rbp + 0x9c], eax
mov eax, dword [rbp + 0x90]
add eax, dword [rbp + 0x8c]
cmp dword [rbp + 0x9c], eax
jne 0x579250
mov eax, dword [rbp + 0x8c]
add eax, dword [rbp + 0xa4]
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0xa4]
mov dword [rbp + 0xa4], eax
cmp dword [rbp + 0xa0], 1
jl 0x579204
nop
mov eax, dword [rbp + 0x8c]
sub eax, 0x1e7
mov dword [rbp + 0x94], eax
lea rcx, [rbp + 0xa4]
lea rdx, [rbp + 0xa0]
lea r8, [rbp + 0x9c]
lea r9, [rbp + 0x98]
call fcn.0056ded0
lea rcx, [0x005ff491]
mov dl, 2
mov r8d, 0x20
mov r9d, 0x220
mov dword [rsp + 0x20], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x40], 0
mov dword [rsp + 0x48], 0
lea rax, [rbp + 0xc8]
mov qword [rsp + 0x50], rax
call sub.advapi32.dll_AllocateAndInitializeSid
mov rax, qword [rbp + 0xd8]
lea rax, [rax + 8]
mov qword [rbp + 0xb0], rax
mov dword [rbp + 0xa0], 0
cmp dword [rbp + 0xa0], 2
jge 0x579381
add dword [rbp + 0xa0], 1
mov eax, dword [rbp + 0x9c]
add eax, 0x359
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x9c]
sub eax, dword [rbp + 0x98]
mov ecx, dword [rbp + 0x94]
sub ecx, dword [rbp + 0x90]
cmp eax, ecx
jle 0x57935d
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x245
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0xa4]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x94]
imul eax, eax, 0x2f
mov dword [rbp + 0x9c], eax
cmp dword [rbp + 0xa0], 2
jl 0x579316
nop
mov eax, dword [rbp + 0xa4]
imul eax, dword [rbp + 0x9c]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x90]
add eax, 0x17d
mov dword [rbp + 0x98], eax
mov eax, dword [rbp + 0xa0]
imul eax, dword [rbp + 0x9c]
mov dword [rbp + 0xa4], eax
mov dword [rbp + 0x9c], 0
mov eax, dword [rbp + 0xa0]
add eax, 0x36c
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x579404
mov eax, dword [rbp + 0x90]
sub eax, 0x197
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0x94]
add eax, dword [rbp + 0x8c]
cmp eax, dword [rbp + 0xa4]
jle 0x57942b
mov eax, dword [rbp + 0xa4]
imul eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
mov eax, 0x3c6
sub eax, dword [rbp + 0x98]
mov dword [rbp + 0xa4], eax
add dword [rbp + 0x9c], 1
cmp dword [rbp + 0x9c], 3
jne 0x5793c4
nop
mov eax, dword [rbp + 0xa4]
sub eax, dword [rbp + 0xa0]
mov dword [rbp + 0x8c], eax
mov dword [rbp + 0x9c], 0
mov eax, 0x392
sub eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x94]
add eax, dword [rbp + 0x90]
cmp dword [rbp + 0x9c], eax
jne 0x5794a6
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x23d
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0xa0]
sub dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
add eax, 0x3a7
mov dword [rbp + 0xa4], eax
add dword [rbp + 0x9c], 1
cmp dword [rbp + 0x9c], 3
jne 0x57946e
nop
mov eax, dword [rbp + 0xa4]
add eax, dword [rbp + 0xa4]
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x57953c
lea rcx, [rbp + 0x98]
lea rdx, [rbp + 0x90]
lea r8, [rbp + 0x8c]
lea r9, [rbp + 0xa4]
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x20], rax
lea rax, [rbp + 0x98]
mov qword [rsp + 0x28], rax
call fcn.005438f0
mov dword [rbp + 0x9c], 0
mov eax, dword [rbp + 0xa0]
sub dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
add eax, 0x3a9
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
sub eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
sub ecx, dword [rbp + 0x94]
cmp eax, ecx
jle 0x579592
mov eax, dword [rbp + 0x90]
sub eax, 0x193
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0x94]
add eax, dword [rbp + 0x8c]
cmp eax, dword [rbp + 0xa4]
jle 0x5795b9
mov eax, dword [rbp + 0xa4]
imul eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
add dword [rbp + 0x9c], 1
cmp dword [rbp + 0x9c], 3
jne 0x579546
nop
mov eax, dword [rbp + 0x90]
sub eax, 0x1a4
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
xor eax, eax
mov rcx, qword [rbp + 0xd8]
mov ebx, dword [rcx]
sub ebx, 1
mov dword [rbp + 0xc4], eax
cmp dword [rbp + 0xc4], ebx
jg 0x579a0b
sub ebx, eax
add ebx, 1
mov rcx, qword [rbp + 0xc8]
mov rax, qword [rbp + 0xb0]
mov rdx, qword [rax]
call sub.advapi32.dll_EqualSid
test eax, eax
je 0x5799f1
mov dword [rbp + 0xa0], 0
cmp dword [rbp + 0xa0], 2
jge 0x5796d3
add dword [rbp + 0xa0], 1
mov eax, 0x374
sub eax, dword [rbp + 0x9c]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x90]
add eax, dword [rbp + 0x8c]
cmp dword [rbp + 0x9c], eax
jne 0x579686
mov eax, dword [rbp + 0xa4]
imul eax, dword [rbp + 0x9c]
mov dword [rbp + 0x8c], eax
mov eax, 0x66
sub eax, dword [rbp + 0x98]
mov dword [rbp + 0x9c], eax
mov eax, dword [rbp + 0x9c]
sub eax, dword [rbp + 0x98]
mov ecx, dword [rbp + 0x94]
sub ecx, dword [rbp + 0x90]
cmp eax, ecx
jle 0x5796c6
mov eax, dword [rbp + 0xa4]
add eax, dword [rbp + 0xa4]
mov dword [rbp + 0x8c], eax
cmp dword [rbp + 0xa0], 2
jl 0x579646
nop
mov dword [rbp + 0xa0], 0
cmp dword [rbp + 0xa0], 2
jge 0x57974d
add dword [rbp + 0xa0], 1
add dword [rbp + 0xa4], 0x31a
mov eax, 0x7f
sub eax, dword [rbp + 0x98]
mov dword [rbp + 0x9c], eax
mov eax, dword [rbp + 0x9c]
sub eax, dword [rbp + 0x98]
mov ecx, dword [rbp + 0x94]
sub ecx, dword [rbp + 0x90]
cmp eax, ecx
jle 0x579738
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x22a
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0xa4]
mov dword [rbp + 0x8c], eax
cmp dword [rbp + 0xa0], 2
jl 0x5796e7
nop
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x1d6
mov dword [rbp + 0x94], eax
lea rcx, [rbp + 0xa0]
lea rdx, [rbp + 0x9c]
lea r8, [rbp + 0x94]
lea r9, [rbp + 0x90]
call fcn.00536aa0
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x223
mov dword [rbp + 0x90], eax
mov dword [rbp + 0xec], 1
mov eax, dword [rbp + 0x8c]
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0x90]
add eax, 0x180
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0xa0]
imul eax, dword [rbp + 0x9c]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x90]
sub eax, 0x1ad
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
mov dword [rbp + 0x9c], 0
add dword [rbp + 0xa4], 0x33b
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x57982e
mov eax, dword [rbp + 0x90]
sub eax, 0x186
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0x94]
add eax, dword [rbp + 0x8c]
cmp eax, dword [rbp + 0xa4]
jle 0x57984e
mov eax, dword [rbp + 0xa0]
sub dword [rbp + 0xa4], eax
mov eax, 0x395
sub eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
sub eax, dword [rbp + 0x98]
mov ecx, dword [rbp + 0x94]
sub ecx, dword [rbp + 0x90]
cmp eax, ecx
jle 0x57988e
mov eax, dword [rbp + 0x8c]
sub eax, 0x1e0
mov dword [rbp + 0x94], eax
add dword [rbp + 0x9c], 1
cmp dword [rbp + 0x9c], 4
jne 0x5797f6
nop
mov eax, dword [rbp + 0xa4]
cmp eax, dword [rbp + 0xa0]
jle 0x5798de
lea rcx, [rbp + 0x9c]
lea rdx, [rbp + 0x98]
lea r8, [rbp + 0x94]
lea r9, [rbp + 0x8c]
lea rax, [rbp + 0xa4]
mov qword [rsp + 0x20], rax
call fcn.0053d670
mov eax, dword [rbp + 0xa0]
imul eax, dword [rbp + 0x9c]
mov dword [rbp + 0xa4], eax
mov dword [rbp + 0x9c], 0
mov eax, dword [rbp + 0xa4]
imul eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x94]
add eax, eax
add eax, eax
lea rax, [rax + rax*8]
mov dword [rbp + 0xa0], eax
mov eax, dword [rbp + 0x90]
add eax, dword [rbp + 0x8c]
cmp dword [rbp + 0x9c], eax
jne 0x579954
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x22f
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0xa4]
sub eax, dword [rbp + 0xa0]
mov dword [rbp + 0x8c], eax
add dword [rbp + 0x9c], 1
cmp dword [rbp + 0x9c], 3
jne 0x5798fb
nop
mov dword [rbp + 0xa0], 0
cmp dword [rbp + 0xa0], 2
jge 0x5799ee
add dword [rbp + 0xa0], 1
mov eax, dword [rbp + 0xa4]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x94]
imul eax, eax, 0x42
mov dword [rbp + 0x9c], eax
mov eax, dword [rbp + 0x94]
add eax, dword [rbp + 0x8c]
cmp dword [rbp + 0x9c], eax
jne 0x5799d2
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x20c
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0xa4]
imul eax, dword [rbp + 0x9c]
mov dword [rbp + 0x8c], eax
cmp dword [rbp + 0xa0], 2
jl 0x57998a
nop
jmp 0x579a0b
add qword [rbp + 0xb0], 0x10
add dword [rbp + 0xc4], 1
sub ebx, 1
test ebx, ebx
jne 0x579611
nop
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x579a34
lea rcx, [rbp + 0x94]
call fcn.00548a50
mov eax, dword [rbp + 0x8c]
add eax, dword [rbp + 0xa4]
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x579a75
lea rcx, [rbp + 0x9c]
lea rdx, [rbp + 0x94]
call fcn.00541950
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x579aca
lea rcx, [rbp + 0x94]
lea rdx, [rbp + 0x8c]
lea r8, [rbp + 0xa4]
lea r9, [rbp + 0xa4]
lea rax, [rbp + 0x9c]
mov qword [rsp + 0x20], rax
lea rax, [rbp + 0x98]
mov qword [rsp + 0x28], rax
call fcn.00555270
mov dword [rbp + 0x9c], 0
mov eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x579b0e
mov eax, dword [rbp + 0x90]
sub eax, 0x167
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0x94]
add eax, dword [rbp + 0x8c]
cmp eax, dword [rbp + 0xa4]
jle 0x579b35
mov eax, dword [rbp + 0xa4]
imul eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x94]
add eax, 0x7c
mov dword [rbp + 0x98], eax
add dword [rbp + 0x9c], 1
cmp dword [rbp + 0x9c], 4
jne 0x579ad4
nop
call fcn.0056dc40
mov rcx, qword [rbp + 0xc8]
call sub.advapi32.dll_FreeSid
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x22e
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0xa4]
cmp eax, dword [rbp + 0xa0]
jle 0x579ba9
lea rcx, [rbp + 0x9c]
lea rdx, [rbp + 0x98]
call fcn.0053fbe0
mov eax, dword [rbp + 0x90]
sub eax, 0x1bf
mov dword [rbp + 0x94], eax
lea rcx, [rbp + 0xa4]
lea rdx, [rbp + 0xa0]
call fcn.00570be0
lea rcx, [rbp + 0xa4]
call fcn.00570de0
mov eax, dword [rbp + 0xa0]
imul eax, dword [rbp + 0x9c]
mov dword [rbp + 0xa4], eax
mov dword [rbp + 0x9c], 0
add dword [rbp + 0xa4], 0x336
mov eax, dword [rbp + 0x94]
add eax, 0x7b
mov dword [rbp + 0x98], eax
mov eax, dword [rbp + 0x90]
sub eax, dword [rbp + 0x8c]
cmp dword [rbp + 0x98], eax
jne 0x579c36
mov eax, dword [rbp + 0xa4]
add eax, dword [rbp + 0xa4]
mov dword [rbp + 0x8c], eax
mov eax, dword [rbp + 0xa0]
add eax, 0x36b
mov dword [rbp + 0xa4], eax
add dword [rbp + 0x9c], 1
cmp dword [rbp + 0x9c], 3
jne 0x579bf7
nop
mov eax, dword [rbp + 0x8c]
add eax, dword [rbp + 0xa4]
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0xa4]
cmp eax, dword [rbp + 0xa0]
jle 0x579c8c
lea rcx, [rbp + 0xa0]
lea rdx, [rbp + 0x98]
call fcn.0053d210
mov dword [rbp + 0x9c], 0
mov eax, dword [rbp + 0xa0]
add eax, 0x344
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x94]
add eax, 0x8a
mov dword [rbp + 0x98], eax
mov eax, dword [rbp + 0x90]
sub eax, dword [rbp + 0x8c]
cmp dword [rbp + 0x98], eax
jne 0x579ce0
mov eax, dword [rbp + 0xa4]
add eax, dword [rbp + 0xa4]
mov dword [rbp + 0x8c], eax
add dword [rbp + 0xa4], 0x33a
mov eax, dword [rbp + 0x94]
add eax, 0x7f
mov dword [rbp + 0x98], eax
add dword [rbp + 0x9c], 1
cmp dword [rbp + 0x9c], 4
jne 0x579c96
nop
mov eax, dword [rbp + 0xa4]
imul eax, dword [rbp + 0x9c]
mov dword [rbp + 0xa4], eax
mov rcx, qword [rbp + 0xd8]
call fcn.00409050
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x1ea
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x579d63
lea rcx, [rbp + 0x94]
call fcn.00548a50
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x1fb
mov dword [rbp + 0x90], eax
lea rcx, [rbp + 0xa4]
call fcn.00536080
mov eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
mov dword [rbp + 0x9c], 0
mov eax, dword [rbp + 0xa0]
add eax, 0x38e
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x579dd7
mov eax, dword [rbp + 0x90]
add eax, 0x178
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0x94]
add eax, dword [rbp + 0x8c]
cmp eax, dword [rbp + 0xa4]
jle 0x579df7
mov eax, dword [rbp + 0xa0]
sub dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
add eax, 0x3a7
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
sub eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x94]
sub ecx, dword [rbp + 0x90]
cmp eax, ecx
jle 0x579e37
mov eax, dword [rbp + 0x90]
sub eax, 0x1b2
mov dword [rbp + 0x94], eax
add dword [rbp + 0x9c], 1
cmp dword [rbp + 0x9c], 3
jne 0x579d97
nop
lea rcx, [rbp + 0xa4]
lea rdx, [rbp + 0xa0]
lea r8, [rbp + 0x9c]
lea r9, [rbp + 0x94]
call fcn.00571990
mov eax, dword [rbp + 0x8c]
sub eax, 0x1df
mov dword [rbp + 0x94], eax
jmp 0x579e89
mov eax, dword [rbp + 0x90]
sub eax, 0x1d8
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x90]
sub eax, 0x185
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0xa0]
imul eax, dword [rbp + 0x9c]
mov dword [rbp + 0xa4], eax
mov dword [rbp + 0x9c], 0
mov eax, dword [rbp + 0xa0]
add eax, 0x353
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x94]
add eax, 0x79
mov dword [rbp + 0x98], eax
mov eax, dword [rbp + 0x90]
sub eax, dword [rbp + 0x8c]
cmp dword [rbp + 0x98], eax
jne 0x579f1d
mov eax, dword [rbp + 0xa4]
add eax, dword [rbp + 0xa4]
mov dword [rbp + 0x8c], eax
mov eax, dword [rbp + 0xa0]
sub dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
add eax, 0x38d
mov dword [rbp + 0xa4], eax
add dword [rbp + 0x9c], 1
cmp dword [rbp + 0x9c], 3
jne 0x579ed6
nop
mov eax, dword [rbp + 0x8c]
add eax, dword [rbp + 0xa4]
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0xa4]
cmp eax, dword [rbp + 0xa0]
jle 0x579f8d
lea rcx, [rbp + 0xa0]
lea rdx, [rbp + 0x98]
lea r8, [rbp + 0x94]
lea r9, [rbp + 0x90]
call fcn.0053d350
mov eax, dword [rbp + 0xa4]
sub eax, dword [rbp + 0xa0]
mov dword [rbp + 0x8c], eax
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x579fdc
lea rcx, [rbp + 0x9c]
lea rdx, [rbp + 0x94]
lea r8, [rbp + 0x90]
lea r9, [rbp + 0x8c]
call fcn.00540440
mov eax, dword [rbp + 0xa4]
sub eax, dword [rbp + 0xa0]
mov dword [rbp + 0x8c], eax
nop
lea rcx, [rbp + 0x68]
mov edx, 2
call fcn.0040e6b0
lea rcx, [rbp + 0xa8]
call fcn.0040e5d0
mov eax, dword [rbp + 0xec]
lea rsp, [rbp + 0xf8]
pop rbx
pop rbp
ret