Function at 0x140024d30
Capabilities:
Compare security identifiers

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x158
movaps xmmword [rsp + 0x140], xmm7
movaps xmmword [rsp + 0x130], xmm6
mov rbx, r8
mov r12, rdx
mov rdi, rcx
mov rax, qword [0x14013b028]
xor rax, rsp
mov qword [rsp + 0x128], rax
movaps xmm6, xmmword [0x14011bb10]
movaps xmmword [rsp + 0x100], xmm6
xor esi, esi
mov byte [rsp + 0x100], sil
mov byte [rsp + 0x108], sil
lea rdx, [rcx + 0x18]
movabs r13, 0xaaaaaaaaaaaaaaaa
lea rcx, [rsp + 0xe0]
mov qword [rcx + 0x10], r13
movaps xmmword [rcx], xmm6
call fcn.140024120
cmp byte [rdi + 0x80], sil
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], rdi
je 0x140024ebd
lea r15, [rsp + 0x70]
mov rcx, rbx
mov rdx, r15
call fcn.1400198a0
mov r14, qword [r15]
mov rsi, qword [r15 + 8]
mov r15, rsi
xorps xmm0, xmm0
movaps xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], 0
sub r15, r14
je 0x140024e36
js 0x140026540
mov rcx, r15
call fcn.14009fd48
mov qword [rsp + 0x110], rax
lea rdi, [rax + r15]
mov qword [rsp + 0x120], rdi
mov rcx, rax
mov rdx, r14
mov r8, r15
call fcn.1400a3a80
mov qword [rsp + 0x118], rdi
test r14, r14
je 0x140024e54
dec rsi
cmp r15, rsi
ja 0x1400265e4
mov qword [rsp + 0x78], r14
mov rcx, r14
call fcn.14009fde8
mov rax, qword [rsp + 0xe8]
cmp rax, qword [rsp + 0xf0]
jb 0x140026665
lea r14, [rsp + 0xe0]
lea r15, [rsp + 0x110]
mov rcx, r14
mov rdx, r15
call fcn.1400249c0
mov rcx, qword [r15]
mov qword [r14 + 8], rax
test rcx, rcx
je 0x140024eb8
mov rax, qword [rsp + 0x118]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x1400265e7
mov qword [rsp + 0x118], rcx
call fcn.14009fde8
mov rdi, qword [rsp + 0x38]
cmp byte [rdi + 0x63], 0
je 0x1400250d2
mov rdx, qword [rbx]
lea r14, [rsp + 0x70]
mov rcx, r14
mov r8d, 2
call fcn.14002b270
mov rbp, qword [r14]
mov rsi, qword [r14 + 8]
cmp rbp, rsi
je 0x140025064
mov qword [rsp + 0x48], rbx
xorps xmm7, xmm7
lea r14, [rsp + 0xe0]
lea r15, [rsp + 0x110]
mov rbx, qword [sym.imp.ADVAPI32.dll_EqualSid]
jmp 0x140024f71
mov rdx, qword [rbp]
mov rcx, qword [rdi]
call rbx
test eax, eax
jne 0x140024f64
add rdi, 0x18
jmp 0x140024f8d
test rax, rax
je 0x14002657f
movups xmmword [rax], xmm7
mov qword [rax + 0x10], 0
mov rcx, qword [rsp + 0x110]
mov qword [rax], rcx
mov rcx, qword [rsp + 0x118]
mov qword [rax + 8], rcx
mov rcx, qword [rsp + 0x120]
mov qword [rax + 0x10], rcx
add rax, 0x18
mov qword [rsp + 0xe8], rax
add rbp, 0x20
cmp rbp, rsi
je 0x140025055
mov eax, dword [rbp + 0x18]
cmp eax, 0xbfffffff
ja 0x140024f64
and eax, 0x20
jne 0x140024f64
mov rax, qword [rsp + 0x38]
mov rdi, qword [rax + 0x68]
mov r12, qword [rax + 0x70]
cmp rdi, r12
jne 0x140024f0e
mov r12, qword [rbp]
mov r13, qword [rbp + 8]
movaps xmmword [rsp + 0x110], xmm7
mov qword [rsp + 0x120], 0
sub r13, r12
je 0x140024fef
js 0x140026540
mov rcx, r13
call fcn.14009fd48
mov qword [rsp + 0x110], rax
lea rdi, [rax + r13]
mov qword [rsp + 0x120], rdi
mov rcx, rax
mov rdx, r12
mov r8, r13
call fcn.1400a3a80
mov qword [rsp + 0x118], rdi
mov rax, qword [rsp + 0xe8]
cmp rax, qword [rsp + 0xf0]
jb 0x140024f21
mov rcx, r14
mov rdx, r15
call fcn.1400249c0
mov rcx, qword [rsp + 0x110]
mov qword [rsp + 0xe8], rax
test rcx, rcx
je 0x140024f64
mov rax, qword [rsp + 0x118]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x14002659e
mov qword [rsp + 0x118], rcx
call fcn.14009fde8
jmp 0x140024f64
mov rbp, qword [rsp + 0x70]
mov r12, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x48]
test rbp, rbp
je 0x1400250c8
mov rsi, qword [rsp + 0x78]
mov rcx, rbp
cmp rsi, rbp
je 0x1400250be
add rsi, 0xffffffffffffffe0
jmp 0x140025091
mov qword [rsi + 8], rcx
call fcn.14009fde8
lea rax, [rsi - 0x20]
cmp rsi, rbp
mov rsi, rax
je 0x1400250b9
test rsi, rsi
je 0x140026553
mov rcx, qword [rsi]
test rcx, rcx
je 0x140025085
mov rax, qword [rsi + 8]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
jbe 0x14002507c
jmp 0x140026579
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x78], rbp
call fcn.14009fde8
movabs r13, 0xaaaaaaaaaaaaaaaa
lea r14, [rsp + 0xc0]
mov qword [r14 + 0x10], r13
movaps xmmword [r14], xmm6
mov rcx, r14
mov rsi, qword [rsp + 0x38]
mov rdx, rsi
call fcn.140024120
cmp byte [rsi + 0x82], 0
je 0x1400251f7
lea r12, [rsp + 0x70]
mov rcx, rbx
mov rdx, r12
call fcn.1400198a0
mov r15, qword [r12]
mov rsi, qword [r12 + 8]
mov r12, rsi
xorps xmm0, xmm0
movaps xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], 0
sub r12, r15
je 0x14002516f
js 0x140026540
mov rcx, r12
call fcn.14009fd48
mov qword [rsp + 0x110], rax
lea rdi, [rax + r12]
mov qword [rsp + 0x120], rdi
mov rcx, rax
mov rdx, r15
mov r8, r12
call fcn.1400a3a80
mov qword [rsp + 0x118], rdi
test r15, r15
je 0x14002518d
dec rsi
cmp r12, rsi
ja 0x1400265d0
mov qword [rsp + 0x78], r15
mov rcx, r15
call fcn.14009fde8
mov rax, qword [rsp + 0xc8]
cmp rax, qword [rsp + 0xd0]
jb 0x140026612
lea r15, [rsp + 0xc0]
lea r12, [rsp + 0x110]
mov rcx, r15
mov rdx, r12
call fcn.1400249c0
mov rcx, qword [r12]
mov qword [r15 + 8], rax
test rcx, rcx
mov r12, qword [rsp + 0x40]
je 0x1400251f7
mov rax, qword [rsp + 0x118]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x1400265d3
mov qword [rsp + 0x118], rcx
call fcn.14009fde8
mov rax, qword [rsp + 0x38]
cmp byte [rax + 0x83], 0
je 0x140025467
mov r14, rbx
mov rdx, qword [rbx]
lea r15, [rsp + 0x70]
mov rcx, r15
mov r8d, 2
call fcn.14002b270
mov rsi, qword [r15]
mov rbx, qword [r15 + 8]
cmp rsi, rbx
je 0x140025365
xorps xmm7, xmm7
lea r15, [rsp + 0xc0]
lea r12, [rsp + 0x110]
jmp 0x140025297
test rax, rax
je 0x140026573
movups xmmword [rax], xmm7
mov qword [rax + 0x10], 0
mov rcx, qword [rsp + 0x110]
mov qword [rax], rcx
mov rcx, qword [rsp + 0x118]
mov qword [rax + 8], rcx
mov rcx, qword [rsp + 0x120]
mov qword [rax + 0x10], rcx
add rax, 0x18
mov qword [rsp + 0xc8], rax
add rsi, 0x20
cmp rsi, rbx
je 0x14002535b
test byte [rsi + 0x18], 0x20
jne 0x14002528a
mov r13, qword [rsi]
mov rbp, qword [rsi + 8]
movaps xmmword [rsp + 0x110], xmm7
mov qword [rsp + 0x120], 0
sub rbp, r13
je 0x1400252f5
js 0x140026540
mov rcx, rbp
call fcn.14009fd48
mov qword [rsp + 0x110], rax
lea rdi, [rax + rbp]
mov qword [rsp + 0x120], rdi
mov rcx, rax
mov rdx, r13
mov r8, rbp
call fcn.1400a3a80
mov qword [rsp + 0x118], rdi
mov rax, qword [rsp + 0xc8]
cmp rax, qword [rsp + 0xd0]
jb 0x140025247
mov rcx, r15
mov rdx, r12
call fcn.1400249c0
mov rcx, qword [rsp + 0x110]
mov qword [rsp + 0xc8], rax
test rcx, rcx
je 0x14002528a
mov rax, qword [rsp + 0x118]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x1400265a1
mov qword [rsp + 0x118], rcx
call fcn.14009fde8
jmp 0x14002528a
mov rsi, qword [rsp + 0x70]
mov r12, qword [rsp + 0x40]
test rsi, rsi
mov rbx, r14
lea r14, [rsp + 0xc0]
je 0x140025467
mov rdi, qword [rsp + 0x78]
mov rcx, rsi
cmp rdi, rsi
je 0x14002545d
add rdi, 0xffffffffffffffe0
jmp 0x1400253a9
mov qword [rdi + 8], rcx
call fcn.14009fde8
lea rax, [rdi - 0x20]
cmp rdi, rsi
mov rdi, rax
je 0x140025458
test rdi, rdi
je 0x140026556
mov rcx, qword [rdi]
test rcx, rcx
je 0x140025399
mov rax, qword [rdi + 8]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
jbe 0x140025390
jmp 0x14002657c
mov rax, qword [rsp + 0xc0]
cmp rax, qword [rsp + 0xc8]
jne 0x14002548f
mov rax, qword [rsp + 0x38]
cmp byte [rax + 0x61], 0
jne 0x14002548f
lea r14, [rsp + 0x70]
mov rcx, rbx
mov rdx, r14
mov r8d, 0xf01ff
call fcn.1400ff670
mov al, byte [rsp + 0x108]
cmp al, byte [r14 + 8]
je 0x14002638a
lea rbx, [rsp + 0x100]
test al, al
jne 0x1400266f9
lea rdx, [rsp + 0x70]
mov rcx, rbx
call fcn.140020ca0
mov byte [rbx + 8], 1
cmp byte [rsp + 0x78], 0
je 0x14002558d
lea rcx, [rsp + 0x70]
call fcn.140024010
jmp 0x14002558d
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x78], rsi
call fcn.14009fde8
mov rax, qword [rsp + 0x38]
cmp byte [rax + 0x81], 0
jne 0x140026299
mov rax, qword [rsp + 0xe0]
cmp rax, qword [rsp + 0xe8]
je 0x1400253d1
xorps xmm0, xmm0
lea rax, [rsp + 0x70]
movaps xmmword [rax], xmm0
mov qword [rax + 0x10], 0
mov rcx, qword [rsp + 0x38]
movzx r8d, byte [rcx + 0x61]
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x30], 0xf01ff
lea r14, [rsp + 0x110]
lea r9, [rsp + 0xe0]
mov rcx, rbx
mov rdx, r14
call fcn.140030c50
mov al, byte [rsp + 0x108]
cmp al, byte [r14 + 8]
je 0x14002553e
lea rbx, [rsp + 0x100]
test al, al
jne 0x1400265bf
lea rdx, [rsp + 0x110]
mov rcx, rbx
call fcn.140020ca0
mov byte [rbx + 8], 1
cmp byte [rsp + 0x118], 0
je 0x140025521
lea rcx, [rsp + 0x110]
call fcn.140024010
mov rsi, qword [rsp + 0x70]
test rsi, rsi
je 0x14002558d
mov rdi, qword [rsp + 0x78]
mov rcx, rsi
cmp rdi, rsi
je 0x140025583
add rdi, 0xffffffffffffffe8
jmp 0x14002556d
test al, al
je 0x140025521
lea rcx, [rsp + 0x100]
lea rdx, [rsp + 0x110]
call fcn.14002a120
jmp 0x14002550a
mov rcx, qword [rdi]
call fcn.14009fde8
lea rax, [rdi - 0x18]
cmp rdi, rsi
mov rdi, rax
je 0x14002557e
test rdi, rdi
je 0x14002654d
cmp byte [rdi + 0x17], 0
jns 0x140025561
jmp 0x140025559
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x78], rsi
call fcn.14009fde8
cmp byte [rsp + 0x108], 0
je 0x140026030
mov rax, qword [rsp + 0x38]
cmp byte [rax + 0x61], 0
je 0x1400255b0
cmp byte [rax + 0x62], 0
jne 0x1400263a9
xorps xmm0, xmm0
movaps xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], 0
movaps xmmword [rsp + 0xb0], xmm6
lea rcx, [rsp + 0x100]
lea rbx, [rsp + 0xb0]
mov rdx, rbx
call fcn.14003ab60
cmp byte [rbx + 8], 0
je 0x140025f86
movabs r13, 0x666666666666666
mov rax, qword [rsp + 0x38]
cmp byte [rax + 0x60], 0
je 0x140025842
movaps xmmword [rsp + 0x80], xmm6
movaps xmmword [rsp + 0x70], xmm6
cmp byte [rsp + 0x108], 0
je 0x1400265d6
lea rcx, [rsp + 0x100]
lea rbx, [rsp + 0x70]
mov rdx, rbx
call fcn.14002b100
cmp byte [rbx + 0x18], 0
je 0x14002632b
mov rbx, qword [rsp + 0x118]
mov rax, qword [rsp + 0x120]
cmp rbx, rax
jb 0x14002578b
mov rbp, qword [rsp + 0x110]
mov r15, rbx
sub r15, rbp
sar r15, 3
movabs rcx, 0xcccccccccccccccd
imul r15, rcx
lea rdi, [r15 + 1]
cmp rdi, r13
ja 0x1400266b8
sub rax, rbp
sar rax, 3
imul rax, rcx
lea rcx, [rax + rax]
cmp rcx, rdi
cmova rdi, rcx
movabs rcx, 0x333333333333333
cmp rax, rcx
cmovae rdi, r13
test rdi, rdi
je 0x1400266bb
cmp rdi, r13
ja 0x1400266c3
lea rax, [rdi*8]
lea rcx, [rax + rax*4]
call fcn.14009fd48
mov r14, rax
lea rax, [r15 + r15*4]
mov qword [rsp + 0x48], rax
lea r15, [rax*8]
add r15, r14
je 0x1400266c6
mov r12, qword [rsp + 0x70]
mov r13, qword [rsp + 0x78]
xorps xmm0, xmm0
movups xmmword [r15], xmm0
mov qword [r15 + 0x10], 0
sub r13, r12
je 0x14002573a
js 0x1400266c9
mov rcx, r13
call fcn.14009fd48
mov qword [r15], rax
lea rsi, [rax + r13]
mov qword [r15 + 0x10], rsi
mov rcx, rax
mov rdx, r12
mov r8, r13
call fcn.1400a3a80
mov qword [r15 + 8], rsi
lea rax, [rdi + rdi*4]
lea rax, [r14 + rax*8]
mov qword [r15 + 0x18], 3
mov dword [r15 + 0x20], 0
lea r12, [r15 + 0x28]
cmp rbx, rbp
jne 0x140026418
mov qword [rsp + 0x110], r15
mov qword [rsp + 0x118], r12
mov qword [rsp + 0x120], rax
movabs r13, 0x666666666666666
test rbx, rbx
je 0x1400257f2
jmp 0x1400266e9
test rbx, rbx
je 0x1400266b5
mov r14, qword [rsp + 0x70]
mov r15, qword [rsp + 0x78]
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
sub r15, r14
je 0x1400257dc
js 0x1400265a7
mov rcx, r15
call fcn.14009fd48
mov qword [rbx], rax
lea rsi, [rax + r15]
mov qword [rbx + 0x10], rsi
mov rcx, rax
mov rdx, r14
mov r8, r15
call fcn.1400a3a80
mov qword [rbx + 8], rsi
mov qword [rbx + 0x18], 3
mov dword [rbx + 0x20], 0
add rbx, 0x28
mov r12, rbx
mov qword [rsp + 0x118], r12
mov cl, byte [rsp + 0x88]
test cl, cl
mov r12, qword [rsp + 0x38]
je 0x14002591d
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x14002591d
mov rax, qword [rsp + 0x78]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x1400266da
mov qword [rsp + 0x78], rcx
call fcn.14009fde8
jmp 0x14002591d
xor eax, eax
mov dword [rsp + 0x50], eax
mov dword [rsp + 0xac], 0x10000000
mov dword [rsp + 0xa8], eax
mov dword [rsp + 0xa4], 0xa
mov rbx, qword [rsp + 0x118]
cmp rbx, qword [rsp + 0x120]
jae 0x1400264fe
test rbx, rbx
mov r12, qword [rsp + 0x38]
je 0x140026662
lea r15, [rsp + 0x70]
mov rcx, r15
mov edx, 0xa
call fcn.14002d870
mov r14, qword [r15]
mov rsi, qword [r15 + 8]
mov r15, rsi
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
sub r15, r14
je 0x1400258e3
js 0x1400265a7
mov rcx, r15
call fcn.14009fd48
mov qword [rbx], rax
lea rdi, [rax + r15]
mov qword [rbx + 0x10], rdi
mov rcx, rax
mov rdx, r14
mov r8, r15
call fcn.1400a3a80
mov qword [rbx + 8], rdi
movabs rax, 0x1000000000000000
mov qword [rbx + 0x18], rax
mov dword [rbx + 0x20], 0
test r14, r14
je 0x140025911
dec rsi
cmp r15, rsi
ja 0x1400266d4
mov rcx, r14
call fcn.14009fde8
add rbx, 0x28
mov qword [rsp + 0x118], rbx
mov rax, r12
mov r12, qword [r12 + 0x30]
mov rax, qword [rax + 0x38]
mov qword [rsp + 0x48], rax
cmp r12, rax
je 0x140025c2f
xorps xmm6, xmm6
jmp 0x14002599b
test rsi, rsi
movabs r13, 0x666666666666666
je 0x140026589
mov qword [rsi], r14
mov qword [rsi + 8], rdi
mov qword [rsi + 0x10], rdi
movaps xmmword [rsp + 0x70], xmm6
mov qword [rsp + 0x80], 0
lea rcx, [rsp + 0x88]
mov eax, dword [rcx + 8]
mov dword [rsi + 0x20], eax
mov rax, qword [rcx]
mov qword [rsi + 0x18], rax
add rsi, 0x28
mov qword [rsp + 0x118], rsi
add r12, 0x28
cmp r12, qword [rsp + 0x48]
je 0x140025c2f
mov esi, dword [r12 + 0x18]
mov ebp, dword [r12 + 0x1c]
mov r13d, dword [r12 + 0x20]
mov rbx, qword [r12]
mov r15, qword [r12 + 8]
movaps xmmword [rsp + 0x70], xmm6
mov qword [rsp + 0x80], 0
sub r15, rbx
je 0x140026569
js 0x140026559
mov rcx, r15
call fcn.14009fd48
mov r14, rax
lea rdi, [rax + r15]
mov rcx, rax
mov rdx, rbx
mov r8, r15
call fcn.1400a3a80
mov dword [rsp + 0x88], esi
mov dword [rsp + 0x8c], ebp
mov dword [rsp + 0x90], r13d
mov rsi, qword [rsp + 0x118]
mov rax, qword [rsp + 0x120]
cmp rsi, rax
movabs rcx, 0xcccccccccccccccd
jb 0x14002593c
mov r15, qword [rsp + 0x110]
mov rbx, rsi
sub rbx, r15
sar rbx, 3
imul rbx, rcx
lea rbp, [rbx + 1]
movabs r13, 0x666666666666666
cmp rbp, r13
ja 0x14002658c
sub rax, r15
sar rax, 3
imul rax, rcx
lea rcx, [rax + rax]
cmp rcx, rbp
cmova rbp, rcx
movabs rcx, 0x333333333333333
cmp rax, rcx
cmovae rbp, r13
test rbp, rbp
je 0x140026582
cmp rbp, r13
ja 0x14002658f
lea rax, [rbp*8]
lea rcx, [rax + rax*4]
call fcn.14009fd48
lea rdx, [rbx + rbx*4]
lea r8, [rdx*8]
add r8, rax
je 0x140026592
lea rcx, [rbp*4]
add rcx, rbp
lea rcx, [rax + rcx*8]
mov qword [r8], r14
mov qword [r8 + 8], rdi
mov qword [r8 + 0x10], rdi
movaps xmmword [rsp + 0x70], xmm6
mov qword [rsp + 0x80], 0
lea r10, [rsp + 0x88]
mov r9d, dword [r10 + 8]
mov dword [r8 + 0x20], r9d
mov r9, qword [r10]
mov qword [r8 + 0x18], r9
lea r14, [r8 + 0x28]
cmp rsi, r15
jne 0x140025b5c
mov qword [rsp + 0x110], r8
mov qword [rsp + 0x118], r14
mov qword [rsp + 0x120], rcx
test rsi, rsi
je 0x140025b25
mov rcx, rsi
call fcn.14009fde8
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x118], r14
test rcx, rcx
je 0x14002598c
mov rax, qword [rsp + 0x78]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x140026595
call fcn.14009fde8
jmp 0x14002598c
lea rax, [rax + rdx*8]
add rax, 0xffffffffffffffd8
test rax, rax
je 0x1400265a4
movups xmmword [rax], xmm6
xor r8d, r8d
mov qword [rax + 0x10], r8
mov rdx, qword [rsi - 0x28]
mov qword [rax], rdx
mov rdx, qword [rsi - 0x20]
mov qword [rax + 8], rdx
mov rdx, qword [rsi - 0x18]
mov qword [rax + 0x10], rdx
mov qword [rsi - 0x18], r8
movups xmmword [rsi - 0x28], xmm6
mov edx, dword [rsi - 8]
mov dword [rax + 0x20], edx
mov rdx, qword [rsi - 0x10]
lea r8, [rsi - 0x28]
mov qword [rax + 0x18], rdx
add rax, 0xffffffffffffffd8
mov rsi, r8
cmp r8, r15
jne 0x140025b64
mov rsi, qword [rsp + 0x110]
mov rdi, qword [rsp + 0x118]
add rax, 0x28
mov qword [rsp + 0x110], rax
mov qword [rsp + 0x118], r14
mov qword [rsp + 0x120], rcx
cmp rdi, rsi
je 0x140025b18
add rdi, 0xffffffffffffffd8
test rdi, rdi
je 0x140026598
mov rcx, qword [rdi]
test rcx, rcx
je 0x140025c1d
mov rax, qword [rdi + 8]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x14002659b
mov qword [rdi + 8], rcx
call fcn.14009fde8
lea rax, [rdi - 0x28]
cmp rdi, rsi
mov rdi, rax
je 0x140025b18
jmp 0x140025bed
cmp byte [rsp + 0x108], 0
je 0x1400265af
lea rcx, [rsp + 0x100]
lea r14, [rsp + 0x70]
mov rdx, r14
call fcn.1400198a0
mov rbx, qword [r14]
mov rsi, qword [r14 + 8]
mov r12, rsi
xorps xmm0, xmm0
movaps xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], 0
sub r12, rbx
je 0x1400265d9
js 0x1400265b2
mov rcx, r12
call fcn.14009fd48
mov r14, rax
mov qword [rsp + 0x50], rax
lea r15, [rax + r12]
mov qword [rsp + 0x60], r15
mov rcx, rax
mov rdx, rbx
mov r8, r12
call fcn.1400a3a80
mov qword [rsp + 0x58], r15
test rbx, rbx
je 0x140025cc6
dec rsi
cmp r12, rsi
ja 0x1400265ea
mov qword [rsp + 0x78], rbx
mov rcx, rbx
call fcn.14009fde8
mov rbx, qword [rsp + 0x118]
mov rax, qword [rsp + 0x120]
cmp rbx, rax
jb 0x140025e15
mov rbp, qword [rsp + 0x110]
mov rdx, r13
mov r13, rbx
sub r13, rbp
sar r13, 3
movabs rcx, 0xcccccccccccccccd
imul r13, rcx
lea rdi, [r13 + 1]
cmp rdi, rdx
ja 0x1400265f3
sub rax, rbp
sar rax, 3
imul rax, rcx
lea rcx, [rax + rax]
cmp rcx, rdi
cmova rdi, rcx
movabs rcx, 0x333333333333333
cmp rax, rcx
cmovae rdi, rdx
test rdi, rdi
je 0x1400265f6
cmp rdi, rdx
ja 0x1400265fe
lea rax, [rdi*8]
lea rcx, [rax + rax*4]
call fcn.14009fd48
mov r12, rax
lea rax, [r13*4]
add rax, r13
lea r13, [rax*8]
add r13, r12
je 0x140026601
mov qword [rsp + 0x48], rax
xorps xmm0, xmm0
movups xmmword [r13], xmm0
mov qword [r13 + 0x10], 0
sub r15, r14
je 0x140025dbe
js 0x140026604
mov rcx, r15
call fcn.14009fd48
mov qword [r13], rax
lea rsi, [rax + r15]
mov qword [r13 + 0x10], rsi
mov rcx, rax
mov rdx, r14
mov r8, r15
call fcn.1400a3a80
mov qword [r13 + 8], rsi
lea rax, [rdi + rdi*4]
lea rax, [r12 + rax*8]
movabs rcx, 0x1000000000000000
mov qword [r13 + 0x18], rcx
mov dword [r13 + 0x20], 0
lea r14, [r13 + 0x28]
cmp rbx, rbp
jne 0x140026173
mov qword [rsp + 0x110], r13
mov qword [rsp + 0x118], r14
mov qword [rsp + 0x120], rax
mov r12, qword [rsp + 0x40]
test rbx, rbx
je 0x140025e7d
mov rcx, rbx
call fcn.14009fde8
jmp 0x140025e7d
test rbx, rbx
mov r12, qword [rsp + 0x40]
je 0x1400265f0
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
sub r15, r14
je 0x140025e61
js 0x1400265a7
mov rcx, r15
call fcn.14009fd48
mov qword [rbx], rax
lea rsi, [rax + r15]
mov qword [rbx + 0x10], rsi
mov rcx, rax
mov rdx, r14
mov r8, r15
call fcn.1400a3a80
mov qword [rbx + 8], rsi
movabs rax, 0x1000000000000000
mov qword [rbx + 0x18], rax
mov dword [rbx + 0x20], 0
add rbx, 0x28
mov r14, rbx
mov qword [rsp + 0x118], r14
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x140025eab
mov rax, qword [rsp + 0x58]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x1400265ed
call fcn.14009fde8
cmp byte [rsp + 0xb8], 0
je 0x1400265bc
lea rcx, [rsp + 0xb0]
lea rdx, [rsp + 0x110]
call fcn.14001d1a0
test al, al
je 0x140025f86
cmp byte [rsp + 0x108], 0
je 0x14002660c
cmp byte [rsp + 0xb8], 0
je 0x14002660f
mov rax, qword [rsp + 0xb0]
lea r8, [rsp + 0x70]
mov qword [r8], rax
mov rcx, qword [rsp + 0x100]
mov edx, 6
mov r9d, 8
call qword [sym.imp.ADVAPI32.dll_SetTokenInformation]
test eax, eax
je 0x140025f86
mov rax, qword [rsp + 0x38]
cmp byte [rax + 0x5c], 0
je 0x140025f51
cmp byte [rsp + 0x108], 0
je 0x1400266d7
mov rax, qword [rsp + 0x38]
mov edx, dword [rax + 0x58]
lea rcx, [rsp + 0x100]
call fcn.14001f180
test al, al
je 0x140025f86
xor eax, eax
mov byte [r12], al
mov byte [r12 + 8], al
cmp byte [rsp + 0x108], al
je 0x140025f91
test r12, r12
je 0x1400266d1
lea rdx, [rsp + 0x100]
mov rcx, r12
call fcn.140020ca0
mov byte [r12 + 8], 1
jmp 0x140025f91
xor eax, eax
mov byte [r12], al
mov byte [r12 + 8], al
cmp byte [rsp + 0xb8], 0
je 0x140025fb9
mov rcx, qword [rsp + 0xb0]
mov qword [rsp + 0xb0], 0
test rcx, rcx
je 0x140025fb9
call fcn.14009ff78
mov rsi, qword [rsp + 0x110]
test rsi, rsi
je 0x14002603b
mov rdi, qword [rsp + 0x118]
mov rcx, rsi
cmp rdi, rsi
je 0x140026021
add rdi, 0xffffffffffffffd8
jmp 0x140025ff1
mov qword [rdi + 8], rcx
call fcn.14009fde8
lea rax, [rdi - 0x28]
cmp rdi, rsi
mov rdi, rax
je 0x140026019
test rdi, rdi
je 0x140026550
mov rcx, qword [rdi]
test rcx, rcx
je 0x140025fe5
mov rax, qword [rdi + 8]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
jbe 0x140025fdc
jmp 0x140026576
mov rcx, qword [rsp + 0x110]
mov qword [rsp + 0x118], rsi
call fcn.14009fde8
jmp 0x14002603b
xor eax, eax
mov byte [r12], al
mov byte [r12 + 8], al
mov rsi, qword [rsp + 0xc0]
test rsi, rsi
je 0x1400260b0
mov rdi, qword [rsp + 0xc8]
mov rcx, rsi
cmp rdi, rsi
je 0x1400260a3
add rdi, 0xffffffffffffffe8
jmp 0x140026073
mov qword [rdi + 8], rcx
call fcn.14009fde8
lea rax, [rdi - 0x18]
cmp rdi, rsi
mov rdi, rax
je 0x14002609b
test rdi, rdi
je 0x14002653a
mov rcx, qword [rdi]
test rcx, rcx
je 0x140026067
mov rax, qword [rdi + 8]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
jbe 0x14002605e
jmp 0x140026563
mov rcx, qword [rsp + 0xc0]
mov qword [rsp + 0xc8], rsi
call fcn.14009fde8
mov rsi, qword [rsp + 0xe0]
test rsi, rsi
je 0x140026125
mov rdi, qword [rsp + 0xe8]
mov rcx, rsi
cmp rdi, rsi
je 0x140026118
add rdi, 0xffffffffffffffe8
jmp 0x1400260e8
mov qword [rdi + 8], rcx
call fcn.14009fde8
lea rax, [rdi - 0x18]
cmp rdi, rsi
mov rdi, rax
je 0x140026110
test rdi, rdi
je 0x14002653d
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400260dc
mov rax, qword [rdi + 8]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
jbe 0x1400260d3
jmp 0x140026566
mov rcx, qword [rsp + 0xe0]
mov qword [rsp + 0xe8], rsi
call fcn.14009fde8
cmp byte [rsp + 0x108], 0
je 0x14002613c
lea rcx, [rsp + 0x100]
call fcn.140024010
mov rcx, qword [rsp + 0x128]
xor rcx, rsp
call fcn.1400a1ff0
mov rax, r12
movaps xmm6, xmmword [rsp + 0x130]
movaps xmm7, xmmword [rsp + 0x140]
add rsp, 0x158
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, qword [rsp + 0x48]
lea rcx, [r12 + rcx*8]
add rcx, 0xffffffffffffffd8
xorps xmm0, xmm0
xor edx, edx
test rcx, rcx
je 0x1400266dd
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], rdx
mov r8, qword [rbx - 0x28]
mov qword [rcx], r8
mov r8, qword [rbx - 0x20]
mov qword [rcx + 8], r8
mov r8, qword [rbx - 0x18]
mov qword [rcx + 0x10], r8
mov qword [rbx - 0x18], rdx
movups xmmword [rbx - 0x28], xmm0
mov r8d, dword [rbx - 8]
mov dword [rcx + 0x20], r8d
mov r8, qword [rbx - 0x10]
lea r9, [rbx - 0x28]
mov qword [rcx + 0x18], r8
add rcx, 0xffffffffffffffd8
mov rbx, r9
cmp r9, rbp
jne 0x140026185
mov rbx, qword [rsp + 0x110]
mov rsi, qword [rsp + 0x118]
add rcx, 0x28
mov qword [rsp + 0x110], rcx
mov qword [rsp + 0x118], r14
mov qword [rsp + 0x120], rax
cmp rsi, rbx
je 0x140025e01
add rsi, 0xffffffffffffffd8
mov r12, qword [rsp + 0x40]
test rsi, rsi
je 0x1400266e0
mov rcx, qword [rsi]
test rcx, rcx
je 0x140026242
mov rax, qword [rsi + 8]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x1400266e3
mov qword [rsi + 8], rcx
call fcn.14009fde8
lea rax, [rsi - 0x28]
cmp rsi, rbx
mov rsi, rax
je 0x140025e06
jmp 0x140026212
test rax, rax
je 0x14002670a
xorps xmm0, xmm0
movups xmmword [rax], xmm0
xor ecx, ecx
mov qword [rax + 0x10], rcx
mov rdx, qword [rsp + 0x70]
mov qword [rax], rdx
mov rdx, qword [rsp + 0x78]
mov qword [rax + 8], rdx
mov rdx, qword [rsp + 0x80]
mov qword [rax + 0x10], rdx
mov qword [rsp + 0x80], rcx
movaps xmmword [rsp + 0x70], xmm0
add rax, 0x18
jmp 0x1400262e1
lea r15, [rsp + 0x70]
movaps xmmword [r15 + 0x10], xmm6
movaps xmmword [r15], xmm6
mov rcx, rbx
mov rdx, r15
call fcn.14002b100
cmp byte [r15 + 0x18], 0
je 0x140025479
mov rax, qword [rsp + 0xc8]
cmp rax, qword [rsp + 0xd0]
jb 0x140026254
lea rcx, [rsp + 0xc0]
lea rdx, [rsp + 0x70]
call fcn.1400249c0
mov qword [rsp + 0xc8], rax
cmp byte [rsp + 0x88], 0
je 0x140025479
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x140025479
mov rax, qword [rsp + 0x78]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x1400266e6
mov qword [rsp + 0x78], rcx
call fcn.14009fde8
jmp 0x140025479
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov cl, byte [rsp + 0x88]
cmp eax, 0x490
je 0x140025801
xor eax, eax
mov byte [r12], al
mov byte [r12 + 8], al
test cl, cl
je 0x140025f91
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x140025f91
mov rax, qword [rsp + 0x78]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x14002670d
mov qword [rsp + 0x78], rcx
call fcn.14009fde8
jmp 0x140025f91
test al, al
je 0x14002558d
lea rcx, [rsp + 0x100]
lea rdx, [rsp + 0x70]
call fcn.14002a120
jmp 0x14002543e
lea rdx, str.SeChangeNotifyPrivilege
lea r14, [rsp + 0x70]
mov rcx, r14
call fcn.1400d3e00
lea rcx, [rsp + 0x100]
mov rdx, r14
call fcn.14003ac50
mov ebx, eax
cmp byte [r14 + 0x17], 0
jns 0x1400263e0
mov rcx, qword [rsp + 0x70]
call fcn.14009fde8
test bl, bl
je 0x140026030
cmp byte [rsp + 0x108], 0
xorps xmm0, xmm0
movaps xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], 0
movaps xmmword [rsp + 0xb0], xmm6
jne 0x1400255cf
int3
mov rcx, qword [rsp + 0x48]
lea rcx, [r14 + rcx*8]
add rcx, 0xffffffffffffffd8
xorps xmm0, xmm0
xor edx, edx
test rcx, rcx
je 0x1400266f6
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], rdx
mov r8, qword [rbx - 0x28]
mov qword [rcx], r8
mov r8, qword [rbx - 0x20]
mov qword [rcx + 8], r8
mov r8, qword [rbx - 0x18]
mov qword [rcx + 0x10], r8
mov qword [rbx - 0x18], rdx
movups xmmword [rbx - 0x28], xmm0
mov r8d, dword [rbx - 8]
mov dword [rcx + 0x20], r8d
mov r8, qword [rbx - 0x10]
lea r9, [rbx - 0x28]
mov qword [rcx + 0x18], r8
add rcx, 0xffffffffffffffd8
mov rbx, r9
cmp r9, rbp
jne 0x14002642a
mov rbx, qword [rsp + 0x110]
mov rsi, qword [rsp + 0x118]
add rcx, 0x28
mov qword [rsp + 0x110], rcx
mov qword [rsp + 0x118], r12
mov qword [rsp + 0x120], rax
cmp rsi, rbx
movabs r13, 0x666666666666666
je 0x140025781
add rsi, 0xffffffffffffffd8
test rsi, rsi
je 0x140026716
mov rcx, qword [rsi]
test rcx, rcx
je 0x1400264ec
mov rax, qword [rsi + 8]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x140026719
mov qword [rsi + 8], rcx
call fcn.14009fde8
lea rax, [rsi - 0x28]
cmp rsi, rbx
mov rsi, rax
je 0x140025777
jmp 0x1400264bc
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x110]
lea rdx, [rsp + 0xa4]
lea r8, [rsp + 0xa8]
lea r9, [rsp + 0xac]
call fcn.1400d55b0
mov rbx, rax
mov r12, qword [rsp + 0x38]
jmp 0x140025915
int3
int3
lea rcx, [rsp + 0x110]
call fcn.1400d6560
int3
int3
int3
int3
lea rcx, [rsp + 0x70]
call fcn.1400d6560
int3
int3
xor edi, edi
xor r14d, r14d
jmp 0x1400259f0
int3
int3
int3
int3
int3
xor eax, eax
jmp 0x140025aa0
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
mov rcx, rbx
call fcn.1400d6560
int3
lea rcx, [rsp + 0x50]
call fcn.1400d6560
int3
mov rcx, rbx
call fcn.140024010
mov byte [rbx + 8], 0
jmp 0x14002550a
int3
int3
int3
xor r14d, r14d
xor r15d, r15d
jmp 0x140025ca8
int3
int3
int3
int3
int3
int3
xor r12d, r12d
jmp 0x140025d5c
int3
int3
mov rcx, r13
call fcn.1400d6560
int3
int3
test rax, rax
je 0x140026710
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
mov rcx, qword [rsp + 0x110]
mov qword [rax], rcx
mov rcx, qword [rsp + 0x118]
mov qword [rax + 8], rcx
mov rcx, qword [rsp + 0x120]
mov qword [rax + 0x10], rcx
add rax, 0x18
mov qword [rsp + 0xc8], rax
mov r12, qword [rsp + 0x40]
jmp 0x1400251f7
int3
test rax, rax
je 0x140026713
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
mov rcx, qword [rsp + 0x110]
mov qword [rax], rcx
mov rcx, qword [rsp + 0x118]
mov qword [rax + 8], rcx
mov rcx, qword [rsp + 0x120]
mov qword [rax + 0x10], rcx
add rax, 0x18
mov qword [rsp + 0xe8], rax
mov r12, qword [rsp + 0x40]
jmp 0x140024eb8
int3
int3
xor r14d, r14d
jmp 0x1400256d7
int3
int3
mov rcx, r15
call fcn.1400d6560
int3
int3
int3
int3
int3
int3
int3
int3
mov rcx, rbx
call fcn.14009fde8
jmp 0x1400257f2
int3
mov rcx, rbx
call fcn.140024010
mov byte [rbx + 8], 0
jmp 0x14002543e
int3
int3
int3
int3
int3
int3