Function at 0x7ff74b0db20
Capabilities:
Compare security identifiers

Disassembly:
mov rcx, qword [0x7ff74b584e0]
xor edx, edx
lea r8d, [rdx + 0x20]
call qword [0x7ff74b58358]
lea rbp, [0x7ff74b58350]
mov rdi, rax
cmp rax, rbx
je 0x7ff74b15017
mov qword [rax], rbx
mov qword [rax + 8], rbx
cmp dword [0x7ff74b582c8], ebx
je 0x7ff74b0b8eb
mov rcx, qword [0x7ff74b58350]
cmp rcx, rbp
je 0x7ff74b0b8eb
test byte [rcx + 0x1c], 0x20
jne 0x7ff74b14ff9
mov esi, ebx
mov dword [rdi + 0x10], ebx
mov qword [rdi + 0x18], rbx
cmp r12, rbx
je 0x7ff74b0b939
mov rcx, r12
mov esi, r14d
call qword [sym.imp.API_MS_Win_Security_Base_L1_1_0.dll_GetLengthSid]
mov rcx, qword [0x7ff74b584e0]
xor edx, edx
mov r8d, eax
mov r14d, eax
call qword [0x7ff74b58358]
mov qword [rdi + 0x18], rax
cmp rax, rbx
je 0x7ff74b0b939
mov r8, r12
mov rdx, rax
mov ecx, r14d
call qword [sym.imp.API_MS_Win_Security_Base_L1_1_0.dll_CopySid]
cmp eax, ebx
cmovne esi, ebx
jmp 0x7ff74b0b939
cmp rdi, rbx
je 0x7ff74b0dc0d
cmp esi, ebx
jne 0x7ff74b1501f
lock add dword [rdi + 0x10], 1
mov rdx, rdi
mov rcx, r13
call fcn.7ff74ae38f0
jmp 0x7ff74b0dc0d
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r12
push r13
push r14
sub rsp, 0x20
mov r13, qword [0x7ff74b58380]
mov r14d, 0xe
mov ebp, r8d
mov rcx, qword [r13 + 0x10]
mov r12, rdx
mov esi, r14d
call fcn.7ff74ae3010
mov rdi, qword [r13]
xor ebx, ebx
cmp rdi, rbx
je 0x7ff74b0b8a0
cmp r12, rbx
je 0x7ff74b14fb2
mov rdx, qword [rdi + 0x18]
cmp rdx, rbx
je 0x7ff74b14fb2
mov rcx, r12
call qword [sym.imp.API_MS_Win_Security_Base_L1_1_0.dll_EqualSid]
jmp 0x7ff74b0db8c
cmp eax, ebx
je 0x7ff74b14fc0
cmp rdi, rbx
je 0x7ff74b0b8a0
cmp ebp, ebx
jne 0x7ff74b14fd1
lock add dword [rdi + 0x10], 0xffffffff
cmp dword [rdi + 0x10], ebx
jne 0x7ff74b0dc09
mov rdx, rdi
mov rcx, r13
call fcn.7ff74ae30dc
mov r8, qword [rdi + 0x18]
cmp r8, rbx
je 0x7ff74b0dbd2
mov rcx, qword [0x7ff74b584e0]
xor edx, edx
call qword [case.0x7ff74b3e5fd.0]
cmp dword [0x7ff74b582c8], ebx
je 0x7ff74b0dbf7
mov rcx, qword [0x7ff74b58350]
lea rbp, [0x7ff74b58350]
cmp rcx, rbp
je 0x7ff74b0dbf7
test byte [rcx + 0x1c], 0x20
jne 0x7ff74b14fdb
mov rcx, qword [0x7ff74b584e0]
mov r8, rdi
xor edx, edx
call qword [case.0x7ff74b3e5fd.0]
mov esi, ebx
jmp 0x7ff74b0dc0d
mov rcx, qword [r13 + 0x10]
lock add dword [rcx + 0x3c], 0xffffffff
mov dword [rcx + 0x40], ebx
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rbp, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x58]
cmp esi, ebx
mov rsi, qword [rsp + 0x50]
sete bl
mov eax, ebx
mov rbx, qword [rsp + 0x40]
add rsp, 0x20
pop r14
pop r13
pop r12
ret
cmp r12, qword [rdi + 0x18]
mov eax, ebx
sete al
jmp 0x7ff74b0db8c
mov rdi, qword [rdi]
cmp rdi, rbx
je 0x7ff74b0db94
jmp 0x7ff74b0db6b
lock add dword [rdi + 0x10], 1
jmp 0x7ff74b0dc09
mov rcx, qword [rcx + 0x10]
lea r8, [0x7ff74b51c30]
mov edx, 0xb
mov r9, rdi
call fcn.7ff74b263d0
nop
jmp 0x7ff74b0dbf7
mov rcx, qword [rcx + 0x10]
lea r8, [0x7ff74b51c10]
mov edx, 0xa
mov r9, rax
call fcn.7ff74b263d0
nop
jmp 0x7ff74b0b8eb
mov rdi, rbx
jmp 0x7ff74b0b939
mov r8, qword [rdi + 0x18]
cmp r8, rbx
je 0x7ff74b15037
mov rcx, qword [0x7ff74b584e0]
xor edx, edx
call qword [case.0x7ff74b3e5fd.0]
cmp dword [0x7ff74b582c8], ebx
je 0x7ff74b15069
mov rcx, qword [0x7ff74b58350]
cmp rcx, rbp
je 0x7ff74b15069
test byte [rcx + 0x1c], 0x20
je 0x7ff74b15069
mov rcx, qword [rcx + 0x10]
lea r8, [0x7ff74b51c30]
mov edx, 0xb
mov r9, rdi
call fcn.7ff74b263d0
mov rcx, qword [0x7ff74b584e0]
mov r8, rdi
xor edx, edx
call qword [case.0x7ff74b3e5fd.0]
nop
jmp 0x7ff74b0dc0d