Function at 0x140008020
Capabilities:
Get token membership

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xd70
mov rax, qword [0x140162010]
xor rax, rsp
mov qword [rsp + 0xd60], rax
mov rbx, rdx
mov edi, ecx
mov dword [rsp + 0xa8], ecx
xor r14d, r14d
mov qword [rsp + 0xb0], r14
lea rcx, [rsp + 0xb0]
call fcn.140010140
xor edx, edx
lea rcx, [rsp + 0x1e0]
call fcn.14008bdc0
nop
lea rdx, [rsp + 0x8f0]
lea rcx, [rsp + 0x1e0]
call fcn.140039e90
nop
lea rcx, [rsp + 0x1e0]
call fcn.14000b7d0
nop
lea rax, str.sduconfig.xml
mov qword [rsp + 0xe0], rax
mov qword [rsp + 0xe8], 0xd
movaps xmm0, xmmword [rsp + 0xe0]
movdqa xmmword [rsp + 0x180], xmm0
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0x158]
call fcn.140013020
nop
lea rdx, [rsp + 0x8f0]
lea rcx, [rsp + 0x1c0]
call fcn.14000a300
nop
lea rdx, [rsp + 0x158]
lea rcx, [rsp + 0x1c0]
call fcn.140012190
mov rdx, rax
lea rcx, [rsp + 0x858]
call fcn.14000a300
nop
lea rcx, [rsp + 0x1c0]
call fcn.14000b7d0
nop
lea rcx, [rsp + 0x158]
call fcn.14000b7d0
nop
lea rcx, [rsp + 0x8f0]
call fcn.14000b7d0
nop
mov byte [rsp + 0x774], 1
mov qword [rsp + 0x778], r14
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x780], xmm0
mov word [rsp + 0x790], 0x101
mov byte [rsp + 0x792], r14b
mov qword [rsp + 0x798], r14
mov qword [rsp + 0x7a0], r14
mov qword [rsp + 0x7a8], r14
mov qword [rsp + 0x7b8], r14
mov qword [rsp + 0x7c0], 7
mov word [rsp + 0x7a8], r14w
mov qword [rsp + 0x7c8], r14
mov qword [rsp + 0x7d8], r14
mov qword [rsp + 0x7e0], 7
mov word [rsp + 0x7c8], r14w
mov byte [rsp + 0x7e8], r14b
mov qword [rsp + 0x7f0], r14
mov qword [rsp + 0x800], r14
mov qword [rsp + 0x808], 0xf
mov byte [rsp + 0x7f0], r14b
xor r12b, r12b
mov dword [rsp + 0x770], 4
mov dword [rsp + 0x64], 1
cmp edi, 1
jle 0x140008bd5
lea r13, [rbx + 8]
movzx ebx, byte [rsp + 0x60]
movzx edi, byte [rsp + 0x60]
mov ecx, 0xfffd
mov r15, qword [r13]
movzx eax, word [r15]
sub ax, 0x2d
test cx, ax
je 0x140008258
mov rdx, r15
mov ecx, 0x65
call fcn.140007d40
mov r12b, 1
jmp 0x140008b61
add r15, 2
lea rdx, str.sysinfo
mov rcx, r15
call fcn.14000ddc0
mov rcx, r15
test al, al
je 0x14000828d
lea rdx, str.sysinfo
call fcn.1400df30c
test eax, eax
sete byte [rsp + 0x790]
jmp 0x140008b61
lea rdx, str.sophos
call fcn.1400df30c
test eax, eax
je 0x140008b48
mov qword [rsp + 0x88], r14
mov qword [rsp + 0x98], r14
mov qword [rsp + 0xa0], 7
mov word [rsp + 0x88], r14w
mov r8d, 3
lea rdx, [0x140120b38]
lea rcx, [rsp + 0x88]
call fcn.14000b840
nop
mov rcx, qword [rsp + 0x98]
mov rdx, qword [rsp + 0xa0]
mov rax, rdx
sub rax, rcx
cmp rax, 6
jb 0x140008348
lea r14, [rcx + 6]
mov qword [rsp + 0x98], r14
lea rsi, [rsp + 0x88]
cmp rdx, 8
cmovae rsi, qword [rsp + 0x88]
lea rcx, [rsi + rcx*2]
mov r8d, 0xc
lea rdx, str.sophos
call fcn.1400d44b0
xor eax, eax
mov word [rsi + r14*2], ax
lea rax, [rsp + 0x88]
xor r14d, r14d
jmp 0x140008371
lfence
mov qword [rsp + 0x20], 6
lea r9, str.sophos
movzx r8d, bl
mov edx, 6
lea rcx, [rsp + 0x88]
call fcn.14000e1e0
mov qword [rsp + 0x838], r14
mov qword [rsp + 0x848], r14
mov qword [rsp + 0x850], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x838], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x848], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
mov rdx, qword [rsp + 0xa0]
cmp rdx, 8
jb 0x1400083f8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400083f3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400093f9
call fcn.1400ada10
mov qword [rsp + 0x98], r14
mov qword [rsp + 0xa0], 7
mov word [rsp + 0x88], r14w
lea rdx, [rsp + 0x838]
cmp qword [rsp + 0x850], 8
cmovae rdx, qword [rsp + 0x838]
mov rcx, r15
call fcn.1400df30c
test eax, eax
sete sil
mov rdx, qword [rsp + 0x850]
cmp rdx, 8
jb 0x140008485
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x838]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008480
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400093f9
call fcn.1400ada10
mov word [rsp + 0x838], r14w
test sil, sil
jne 0x140008b48
lea rdx, str.malware
mov rcx, r15
call fcn.14000ddc0
test al, al
jne 0x140008b61
lea rdx, str.forensics
mov rcx, r15
call fcn.1400df30c
test eax, eax
je 0x140008b2d
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x78], r14
mov qword [rsp + 0x80], 7
mov word [rsp + 0x68], r14w
mov r8d, 3
lea rdx, [0x140120b38]
lea rcx, [rsp + 0x68]
call fcn.14000b840
nop
mov rcx, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x80]
mov rax, rdx
sub rax, rcx
cmp rax, 9
jb 0x140008551
lea r14, [rcx + 9]
mov qword [rsp + 0x78], r14
lea rsi, [rsp + 0x68]
cmp rdx, 8
cmovae rsi, qword [rsp + 0x68]
lea rcx, [rsi + rcx*2]
mov r8d, 0x12
lea rdx, str.forensics
call fcn.1400d44b0
xor eax, eax
mov word [rsi + r14*2], ax
lea rax, [rsp + 0x68]
xor r14d, r14d
jmp 0x140008577
lfence
mov qword [rsp + 0x20], 9
lea r9, str.forensics
movzx r8d, dil
mov edx, 9
lea rcx, [rsp + 0x68]
call fcn.14000e1e0
mov qword [rsp + 0x818], r14
mov qword [rsp + 0x828], r14
mov qword [rsp + 0x830], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x818], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x828], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
mov r8, qword [rsp + 0x80]
cmp r8, 8
jb 0x1400085d6
inc r8
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x68]
call fcn.14000d010
mov qword [rsp + 0x78], r14
mov qword [rsp + 0x80], 7
mov word [rsp + 0x68], r14w
lea rdx, [rsp + 0x818]
cmp qword [rsp + 0x830], 8
cmovae rdx, qword [rsp + 0x818]
mov rcx, r15
call fcn.1400df30c
test eax, eax
sete sil
mov r8, qword [rsp + 0x830]
cmp r8, 8
jb 0x14000863b
inc r8
mov rdx, qword [rsp + 0x818]
lea rcx, [rsp + 0x818]
call fcn.14000d010
mov word [rsp + 0x818], r14w
test sil, sil
jne 0x140008b2d
lea rdx, str.encrypt
mov rcx, r15
call fcn.14000ddc0
mov rcx, r15
test al, al
je 0x1400086b0
lea rdx, str.encrypt
call fcn.1400df30c
test eax, eax
sete byte [rsp + 0x7e8]
test eax, eax
jne 0x140008b61
lea rcx, [rsp + 0x300]
call fcn.1400144c0
mov rdx, rax
lea rcx, [rsp + 0x7f0]
call fcn.14000d300
lea rcx, [rsp + 0x300]
call fcn.14000ba30
jmp 0x140008b61
mov r8d, 8
lea rdx, str.threads
call fcn.1400e3d4c
test eax, eax
jne 0x14000871e
lea rcx, [r15 + 0x10]
call fcn.1400e0698
test eax, eax
jle 0x1400086df
mov dword [rsp + 0x770], eax
jmp 0x140008b61
lea rdx, str.Invalid__threads_option:_should_be_a_positive_number_of_threads
lea rcx, [0x14016b450]
call fcn.14000d9d0
mov rsi, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14000f400
movzx edx, al
mov rcx, rsi
call fcn.14000f240
mov rcx, rsi
call fcn.14000ce40
jmp 0x140008b61
mov r8d, 4
lea rdx, str.age
mov rcx, r15
call fcn.1400e3d4c
test eax, eax
jne 0x140008750
lea rcx, [r15 + 8]
call fcn.1400e0698
movsxd rcx, eax
mov qword [rsp + 0x798], rcx
jmp 0x140008b61
mov r8d, 5
lea rdx, str.date
mov rcx, r15
call fcn.1400e3d4c
test eax, eax
jne 0x140008926
add r15, 0xa
lea rcx, [rsp + 0x878]
call fcn.1400e3b80
lea rax, [rsp + 0x75c]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x758]
lea r8, [rsp + 0x760]
lea rdx, str._4d__2d__2d
mov rcx, r15
call fcn.140006880
cmp eax, 3
je 0x140008859
mov qword [rsp + 0x110], r15
mov rax, 0xffffffffffffffff
inc rax
cmp word [r15 + rax*2], 0
jne 0x1400087c2
mov qword [rsp + 0x118], rax
movaps xmm0, xmmword [rsp + 0x110]
movdqa xmmword [rsp + 0x190], xmm0
lea rdx, [rsp + 0x190]
lea rcx, [rsp + 0x2e0]
call fcn.14008c040
mov rsi, rax
lea rdx, str.Invalid_age_
lea rcx, [0x14016b450]
call fcn.14000d9d0
mov r8, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 0x10
jb 0x14000881f
mov rsi, qword [rsi]
mov rdx, rsi
mov rcx, rax
call fcn.14000f660
mov rcx, rax
lea rdx, [0x14012097c]
call fcn.14000d9d0
nop
lea rcx, [rsp + 0x2e0]
call fcn.14000ba30
mov eax, 0x1e13380
mov qword [rsp + 0x798], rax
jmp 0x140008b61
mov ecx, dword [rsp + 0x760]
cmp ecx, 0x7b2
jge 0x14000889c
lea rdx, str.Default_age_set._Cannot_set_date_before_Jan_1__1970.
lea rcx, [0x14016b450]
call fcn.14000d9d0
mov rcx, rax
lea rdx, [0x140120990]
call fcn.14000d9d0
mov eax, 0x1e13380
mov qword [rsp + 0x798], rax
jmp 0x140008b61
mov qword [rsp + 0x898], r14
mov dword [rsp + 0x8a0], r14d
mov qword [rsp + 0x8b0], r14
mov dword [rsp + 0x8b8], r14d
mov eax, dword [rsp + 0x75c]
mov dword [rsp + 0x8a4], eax
mov eax, dword [rsp + 0x758]
dec eax
mov dword [rsp + 0x8a8], eax
lea eax, [rcx - 0x76c]
mov dword [rsp + 0x8ac], eax
lea rcx, [rsp + 0x898]
call fcn.1400e0cd0
mov rcx, rax
mov rax, qword [rsp + 0x878]
cmp rcx, rax
jle 0x140008916
mov eax, 0x1e13380
mov qword [rsp + 0x798], rax
jmp 0x140008b61
sub rax, rcx
mov qword [rsp + 0x798], rax
jmp 0x140008b61
mov r8d, 9
lea rdx, str.truncate
mov rcx, r15
call fcn.1400e3d4c
test eax, eax
jne 0x14000897f
lea rcx, [r15 + 0x12]
call fcn.1400e0698
test eax, eax
jle 0x14000895f
cdqe
shl rax, 0x14
mov qword [rsp + 0x7a0], rax
jmp 0x140008b61
lea rdx, str.Invalid__truncate_option:_should_be_a_positive_number_of_megabytes
lea rcx, [0x14016b450]
call fcn.14000d9d0
mov rcx, rax
call fcn.14000dd80
jmp 0x140008b61
mov r8d, 7
lea rdx, str.logdir
mov rcx, r15
call fcn.1400e3d4c
test eax, eax
jne 0x1400089be
lea rax, [r15 + 0xe]
mov qword [rsp + 0xc0], rax
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x7a8]
call fcn.14000df50
jmp 0x140008b61
mov r8d, 7
lea rdx, str.config
mov rcx, r15
call fcn.1400e3d4c
test eax, eax
jne 0x1400089fd
lea rax, [r15 + 0xe]
mov qword [rsp + 0xc8], rax
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x858]
call fcn.14000df50
jmp 0x140008b61
mov r8d, 8
lea rdx, str.archive
mov rcx, r15
call fcn.1400e3d4c
test eax, eax
jne 0x140008a3c
lea rax, [r15 + 0x10]
mov qword [rsp + 0xd0], rax
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x7c8]
call fcn.14000df50
jmp 0x140008b61
lea rdx, str.help
mov rcx, r15
call fcn.1400df30c
test eax, eax
je 0x140008250
mov qword [rsp + 0xf0], r14
mov qword [rsp + 0x100], r14
mov qword [rsp + 0x108], 7
mov word [rsp + 0xf0], r14w
mov r8d, 3
lea rdx, [0x140120b38]
lea rcx, [rsp + 0xf0]
call fcn.14000b840
nop
mov r8d, 4
lea rdx, str.help
lea rcx, [rsp + 0xf0]
call fcn.14000a220
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x8c0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x8d0], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
lea rcx, [rsp + 0xf0]
call fcn.14000b7d0
lea rdx, [rsp + 0x8c0]
cmp qword [rsp + 0x8d8], 8
cmovae rdx, qword [rsp + 0x8c0]
mov rcx, r15
call fcn.1400df30c
mov esi, eax
lea rcx, [rsp + 0x8c0]
call fcn.14000b7d0
test esi, esi
je 0x140008250
mov rdx, qword [r13]
mov ecx, 0x65
call fcn.140007d40
mov r12b, 1
jmp 0x140008b61
lea rdx, str.forensics
mov rcx, r15
call fcn.1400df30c
test eax, eax
sete byte [rsp + 0x792]
jmp 0x140008b61
lea rdx, str.sophos
mov rcx, r15
call fcn.1400df30c
test eax, eax
sete byte [rsp + 0x791]
mov ecx, dword [rsp + 0x64]
inc ecx
mov dword [rsp + 0x64], ecx
add r13, 8
cmp ecx, dword [rsp + 0xa8]
jl 0x14000822d
test r12b, r12b
je 0x140008bd5
xor edx, edx
lea ecx, [rdx + 0x66]
call fcn.140007d40
nop
lea rcx, [rsp + 0x7f0]
call fcn.14000ba30
lea rcx, [rsp + 0x7c8]
call fcn.14000b7d0
lea rcx, [rsp + 0x7a8]
call fcn.14000b7d0
lea rcx, [rsp + 0x778]
call fcn.14000b720
nop
lea rcx, [rsp + 0x858]
call fcn.14000b7d0
xor eax, eax
jmp 0x1400093cc
mov rdi, 0xffffffffffffffff
xor edx, edx
mov r8d, 0xf0
lea rcx, [rsp + 0x930]
call fcn.1400d41f0
mov qword [rsp + 0x930], r14
mov qword [rsp + 0x940], r14
mov qword [rsp + 0x948], 7
mov word [rsp + 0x930], r14w
lea rcx, [rsp + 0x950]
call fcn.140050260
nop
lea rdx, [rsp + 0x858]
lea rcx, [rsp + 0x430]
call fcn.14000a300
nop
lea rdx, [rsp + 0x858]
lea rcx, [rsp + 0x450]
call fcn.1400123b0
nop
lea rdx, [rsp + 0x450]
lea rcx, [rsp + 0x950]
call fcn.140012af0
lea rdx, [rsp + 0x430]
lea rcx, [rsp + 0x930]
call fcn.140012c60
nop
lea rcx, [rsp + 0x450]
call fcn.1400503c0
nop
lea rcx, [rsp + 0x430]
call fcn.14000b7d0
nop
lea rdx, [rsp + 0x2a0]
lea rcx, [rsp + 0x930]
call fcn.140012650
mov rbx, rax
lea rcx, [rsp + 0x2c0]
call fcn.140086eb0
nop
cmp qword [rax + 0x18], 0x10
jb 0x140008cc7
mov rax, qword [rax]
lea rcx, [rsp + 0x528]
mov qword [rsp + 0x520], rcx
mov r8d, 3
mov rdx, rax
lea rcx, [rsp + 0x520]
call fcn.14000b4c0
nop
mov rdx, qword [rsp + 0x520]
mov ecx, 0x75
call fcn.140007d40
nop
lea rax, [rsp + 0x528]
mov rcx, qword [rsp + 0x520]
cmp rcx, rax
je 0x140008d1c
call fcn.1400e3bf4
nop
lea rcx, [rsp + 0x2c0]
call fcn.14000ba30
cmp qword [rbx + 0x10], 0
je 0x140008d47
cmp qword [rbx + 0x18], 8
jb 0x140008d3a
mov rbx, qword [rbx]
mov rdx, rbx
mov ecx, 0x74
call fcn.140007d40
xor edx, edx
lea ecx, [rdx + 0x76]
call fcn.140007d40
nop
lea rcx, [rsp + 0x2a0]
call fcn.14000b7d0
nop
call fcn.140007a80
mov rcx, rax
test rax, rax
je 0x1400093ff
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x140032886.0]
add rax, 0x18
mov qword [rsp + 0x810], rax
mov edx, 0x79
lea rcx, [rsp + 0x810]
call fcn.140009780
mov rbx, qword [rsp + 0x810]
mov rdx, rbx
mov ecx, 0x78
call fcn.140007d40
nop
lea rdx, [rbx - 0x18]
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x140008dd3
lfence
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140032886.0]
xor edx, edx
lea ecx, [rdx + 0x68]
call fcn.140007d40
cmp byte [rsp + 0x790], 0
je 0x140008df1
xor edx, edx
lea ecx, [rdx + 0x69]
call fcn.140007d40
cmp byte [rsp + 0x791], 0
je 0x140008e05
xor edx, edx
lea ecx, [rdx + 0x6a]
call fcn.140007d40
cmp byte [rsp + 0x792], 0
je 0x140008e19
xor edx, edx
lea ecx, [rdx + 0x6b]
call fcn.140007d40
lea rdx, [rsp + 0x7f0]
lea rcx, [rsp + 0x1a0]
call fcn.14000a4e0
cmp qword [rsp + 0x1b0], 0
setne bl
lea rcx, [rsp + 0x1a0]
call fcn.14000ba30
test bl, bl
je 0x140008e56
xor edx, edx
lea ecx, [rdx + 0x7a]
call fcn.140007d40
nop
mov dword [rsp + 0x740], 0
mov word [rsp + 0x744], 0x500
mov qword [rsp + 0x750], r14
lea rax, [rsp + 0x750]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x48], r14d
mov dword [rsp + 0x40], r14d
mov dword [rsp + 0x38], r14d
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], r14d
mov r9d, 0x220
mov r8d, 0x20
mov dl, 2
lea rcx, [rsp + 0x740]
call qword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
test eax, eax
je 0x14000940a
mov dword [rsp + 0x748], r14d
lea r8, [rsp + 0x748]
mov rdx, qword [rsp + 0x750]
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_CheckTokenMembership]
test eax, eax
je 0x14000942d
cmp dword [rsp + 0x748], 0
setne bl
lea rcx, [rsp + 0x750]
call fcn.140086df0
test bl, bl
je 0x140009450
lea rcx, [rsp + 0xa20]
call fcn.140072dd0
nop
xor edx, edx
mov r8d, 0x220
lea rcx, [rsp + 0xb40]
call fcn.1400d41f0
lea rcx, [rsp + 0x360]
call fcn.140074d00
nop
mov rdx, rax
lea rcx, [rsp + 0x630]
call fcn.1400675f0
nop
mov r9, rax
lea r8, [rsp + 0xa20]
lea rcx, [rsp + 0xb40]
call fcn.1400681d0
nop
lea rcx, [rsp + 0x630]
call fcn.140009650
nop
lea rcx, [rsp + 0x408]
call fcn.14000b7d0
lea rcx, [rsp + 0x3e0]
call fcn.14000b7d0
lea rcx, [rsp + 0x3c0]
call fcn.14000b7d0
lea rcx, [rsp + 0x3a0]
call fcn.14000b7d0
lea rcx, [rsp + 0x380]
call fcn.14000b7d0
lea rax, vtable.Environment.0
mov qword [rsp + 0xb40], rax
lea rax, vtable.ProgressEmitter.0
mov qword [rsp + 0x8e0], rax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rsp + 0x8e8], rax
lea rcx, [rsp + 0xb8]
call fcn.140006960
lea r15, [rsp + 0x200]
mov qword [rsp + 0xa8], r15
mov eax, dword [rsp + 0x770]
mov dword [rsp + 0x200], eax
movzx eax, byte [rsp + 0x774]
mov byte [rsp + 0x204], al
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x208], xmm0
mov qword [rsp + 0x218], r14
mov rax, qword [rsp + 0x778]
mov rdi, qword [rsp + 0x780]
cmp rax, rdi
je 0x14000910a
sub rdi, rax
sar rdi, 5
movabs rax, 0x7ffffffffffffff
cmp rdi, rax
ja 0x140009465
lfence
shl rdi, 5
mov rcx, rdi
call fcn.14000e8a0
mov rbx, rax
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x210], rax
lea rcx, [rax + rdi]
mov qword [rsp + 0x218], rcx
lea rax, [rsp + 0x208]
mov qword [rsp + 0x140], rax
mov rdi, qword [rsp + 0x778]
mov rsi, qword [rsp + 0x780]
xorps xmm0, xmm0
movups xmmword [rsp + 0x880], xmm0
mov qword [rsp + 0x880], rbx
mov qword [rsp + 0x888], rbx
lea rax, [rsp + 0x208]
mov qword [rsp + 0x890], rax
nop
cmp rdi, rsi
je 0x140009102
mov rdx, rdi
mov rcx, rbx
call fcn.14000a300
add rbx, 0x20
mov qword [rsp + 0x888], rbx
add rdi, 0x20
jmp 0x1400090e0
mov qword [rsp + 0x210], rbx
movzx eax, byte [rsp + 0x790]
mov byte [r15 + 0x20], al
movzx eax, byte [rsp + 0x791]
mov byte [r15 + 0x21], al
movzx eax, byte [rsp + 0x792]
mov byte [r15 + 0x22], al
mov rax, qword [rsp + 0x798]
mov qword [r15 + 0x28], rax
mov rax, qword [rsp + 0x7a0]
mov qword [r15 + 0x30], rax
lea rcx, [r15 + 0x38]
lea rdx, [rsp + 0x7a8]
call fcn.14000a300
nop
lea rcx, [r15 + 0x58]
lea rdx, [rsp + 0x7c8]
call fcn.14000a300
nop
movzx eax, byte [rsp + 0x7e8]
mov byte [r15 + 0x78], al
lea rcx, [r15 + 0x80]
lea rdx, [rsp + 0x7f0]
call fcn.14000a4e0
nop
lea rax, [rsp + 0x8e0]
mov qword [rsp + 0x20], rax
mov r9, r15
lea r8, [rsp + 0x930]
lea rdx, [rsp + 0xb40]
lea rcx, [rsp + 0x910]
call fcn.140015580
nop
xor edx, edx
lea ecx, [rdx + 0x70]
call fcn.140007d40
lea rcx, [rsp + 0xe0]
call fcn.140006960
mov r8, qword [rax]
sub r8, qword [rsp + 0xb8]
mov rax, r8
cqo
movabs rcx, 0xdf8475800
idiv rcx
mov rdi, rax
movsxd rcx, eax
imul r9, rcx, 0x3c
movabs rax, 0x112e0be826d694b3
imul r8
mov rbx, rdx
sar rbx, 0x1a
mov rdx, rbx
shr rdx, 0x3f
add rbx, rdx
sub rbx, r9
lea rdx, str.Elapsed_time:
lea rcx, [0x14016b450]
call fcn.14000d9d0
mov edx, edi
mov rcx, rax
call fcn.140009fb0
lea rdx, [0x140120af8]
mov rcx, rax
call fcn.14000d9d0
mov rdx, rbx
mov rcx, rax
call fcn.140009b70
lea rdx, [0x140120af4]
mov rcx, rax
call fcn.14000d9d0
mov rcx, rax
call fcn.14000dd80
lea rdx, [rsp + 0x910]
lea rcx, [rsp + 0x120]
call fcn.14000a300
nop
lea rdx, [rsp + 0x120]
cmp qword [rsp + 0x138], 8
cmovae rdx, qword [rsp + 0x120]
mov ecx, 0x6e
call fcn.140007d40
nop
lea rcx, [rsp + 0x120]
call fcn.14000b7d0
nop
lea rcx, [rsp + 0x910]
call fcn.14000b7d0
nop
lea rcx, [rsp + 0xb40]
call fcn.140009540
nop
lea rcx, [rsp + 0xa20]
call fcn.1400094d0
nop
lea rcx, [rsp + 0x950]
call fcn.1400503c0
nop
lea rcx, [rsp + 0x930]
call fcn.14000b7d0
nop
lea rcx, [rsp + 0x7f0]
call fcn.14000ba30
lea rcx, [rsp + 0x7c8]
call fcn.14000b7d0
lea rcx, [rsp + 0x7a8]
call fcn.14000b7d0
lea rcx, [rsp + 0x778]
call fcn.14000b720
nop
lea rcx, [rsp + 0x858]
call fcn.14000b7d0
xor eax, eax
jmp 0x1400093cc
mov rcx, qword [rsp + 0xd60]
xor rcx, rsp
call fcn.1400ad9f0
lea r11, [rsp + 0xd70]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.1400e39e0
nop
mov ecx, 0x80004005
call fcn.1400078b0
nop
lea rdx, str.AllocateAndInitializeSid___failed
lea rcx, [rsp + 0x320]
call fcn.14000a4a0
nop
lea rcx, [rsp + 0x320]
call fcn.140010760
nop
lea rdx, str.CheckTokenMembership___failed
lea rcx, [rsp + 0x340]
call fcn.14000a4a0
nop
lea rcx, [rsp + 0x340]
call fcn.140010760
nop
xor edx, edx
lea ecx, [rdx + 0x6d]
call fcn.140007d40
mov ecx, 1
call fcn.1400d86f0
nop
call fcn.1400067c0
int3