Function at 0x180037548
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x68]
sub rsp, 0x168
mov rax, qword [0x18008ab58]
xor rax, rsp
mov qword [rbp + 0x50], rax
lea rax, str.MinimumPasswordAge
mov qword [rsp + 0x40], r9
mov qword [rsp + 0x60], rax
mov rsi, r8
lea rax, str.MaximumPasswordAge
mov qword [rsp + 0x50], r8
mov qword [rsp + 0x70], rax
mov r13, rdx
lea rax, str.MinimumPasswordLength
mov dword [rsp + 0x68], 4
mov qword [rbp - 0x80], rax
mov r15, rcx
lea rax, str.PasswordComplexity
mov byte [rsp + 0x6c], 0x44
mov qword [rbp - 0x70], rax
lea rax, str.PasswordHistorySize
mov qword [rbp - 0x60], rax
lea rax, str.LockoutBadCount
mov qword [rbp - 0x50], rax
lea rax, str.ResetLockoutCount
mov qword [rbp - 0x40], rax
lea rax, str.LockoutDuration
mov qword [rbp - 0x30], rax
lea rax, str.AllowAdministratorLockout
mov qword [rbp - 0x20], rax
lea rax, str.RequireLogonToChangePassword
mov qword [rbp - 0x10], rax
lea rax, str.ForceLogoffWhenHourExpire
mov qword [rbp], rax
lea rax, str.ClearTextPassword
mov qword [rbp + 0x10], rax
lea rax, str.LSAAnonymousNameLookup
mov qword [rbp + 0x20], rax
lea rax, str.EnableAdminAccount
mov qword [rbp + 0x30], rax
lea rax, str.EnableGuestAccount
mov qword [rbp + 0x40], rax
xor eax, eax
mov dword [rsp + 0x78], 8
mov r12d, eax
mov byte [rsp + 0x7c], 0x44
mov edi, eax
mov dword [rbp - 0x78], 0xc
mov byte [rbp - 0x74], 0x44
mov dword [rbp - 0x68], 0x10
mov byte [rbp - 0x64], 0x44
mov dword [rbp - 0x58], 0x14
mov byte [rbp - 0x54], 0x44
mov dword [rbp - 0x48], 0x18
mov byte [rbp - 0x44], 0x44
mov dword [rbp - 0x38], 0x1c
mov byte [rbp - 0x34], 0x44
mov dword [rbp - 0x28], 0x20
mov byte [rbp - 0x24], 0x44
mov dword [rbp - 0x18], 0x24
mov byte [rbp - 0x14], 0x44
mov dword [rbp - 8], 0x28
mov byte [rbp - 4], 0x44
mov dword [rbp + 8], 0x2c
mov byte [rbp + 0xc], 0x44
mov dword [rbp + 0x18], 0x44
mov byte [rbp + 0x1c], 0x44
mov dword [rbp + 0x28], 0x48
mov byte [rbp + 0x2c], 0x44
mov dword [rbp + 0x38], 0xf8
mov byte [rbp + 0x3c], 0x44
mov dword [rbp + 0x48], 0xfc
mov byte [rbp + 0x4c], 0x44
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x58], rax
test rcx, rcx
je 0x1800379eb
test rdx, rdx
je 0x1800379eb
mov r14d, dword [rbp + 0xd0]
test r14b, 1
je 0x1800377ff
lea r9, [rsp + 0x30]
mov qword [rsp + 0x30], rax
lea r8, [0x18007d6b8]
mov edx, 0x132
call fcn.180043b58
mov ebx, eax
test eax, eax
jne 0x1800377c0
and r14d, 2
jne 0x180037744
mov rcx, qword [rsp + 0x30]
lea r9d, [rdi + 4]
xor r8d, r8d
xor edx, edx
call fcn.18004d934
lea rdi, [rsp + 0x60]
mov esi, 0xfffffffe
cmp byte [rdi + 0xc], 0x44
jne 0x1800377a4
mov eax, dword [rdi + 8]
mov ecx, dword [rax + r13]
cmp ecx, esi
je 0x1800377a4
test r14d, r14d
je 0x180037781
cmp ecx, 0xfffffffc
jne 0x180037781
mov rdx, qword [rdi]
mov r9d, 1
mov rcx, qword [rsp + 0x30]
xor r8d, r8d
call fcn.18004d934
jmp 0x180037798
mov rdx, qword [rdi]
mov r9d, esi
mov dword [rsp + 0x20], ecx
xor r8d, r8d
mov rcx, qword [rsp + 0x30]
call fcn.180043d38
xor ebx, ebx
cmp eax, 2
cmovne ebx, eax
test ebx, ebx
jne 0x1800377b1
inc r12d
add rdi, 0x10
cmp r12d, 0xf
jb 0x18003774e
mov edx, 1
lea rcx, [rsp + 0x30]
call fcn.18004cd24
test ebx, ebx
jne 0x1800379e7
mov r8, qword [r13 + 0x30]
lea rdx, str.newadministratorname
mov rcx, r15
call fcn.1800368fc
mov ebx, eax
test eax, eax
jne 0x1800379e7
mov r8, qword [r13 + 0x38]
lea rdx, str.newguestname
mov rcx, r15
call fcn.1800368fc
mov ebx, eax
jmp 0x1800379e7
test r8, r8
je 0x1800379eb
mov r14, r9
test r9, r9
je 0x1800379eb
lea r9, [rsp + 0x30]
mov qword [rsp + 0x30], rax
lea r8, [0x18007d6b8]
mov qword [rsp + 0x38], rax
mov edx, 0x132
call fcn.180043b58
mov ebx, eax
test eax, eax
jne 0x18003796e
lea r9, [rsp + 0x38]
mov edx, 0x12f
lea r8, [0x18007d6b8]
mov rcx, r15
call fcn.180043b58
mov r12, qword [rsp + 0x30]
mov ebx, eax
test eax, eax
jne 0x180037969
mov r15, qword [rsp + 0x38]
lea rdi, [rsp + 0x60]
xor r8d, r8d
mov qword [rsp + 0x48], r15
mov dword [rsp + 0x30], r8d
mov esi, 0xfffffffe
cmp byte [rdi + 0xc], 0x44
jne 0x18003793f
mov eax, dword [rdi + 8]
mov rcx, qword [rsp + 0x50]
mov edx, dword [rax + rcx]
mov ecx, dword [rax + r14]
mov r14d, dword [rax + r13]
mov dword [rsp + 0x38], edx
cmp ecx, 0xfffffff9
jb 0x1800378db
cmp ecx, 0xfffffffa
jbe 0x1800378fa
cmp ecx, esi
jne 0x1800378db
cmp r14d, edx
je 0x18003793a
cmp edx, esi
mov eax, 0xfffffffa
mov r9d, esi
mov rcx, r15
cmovne eax, edx
mov rdx, qword [rdi]
xor r8d, r8d
mov dword [rsp + 0x20], eax
call fcn.180043d38
jmp 0x1800378f4
cmp r14d, ecx
jne 0x1800378fa
mov rdx, qword [rdi]
mov r9d, 1
xor r8d, r8d
mov rcx, r15
call fcn.18004d934
mov edx, dword [rsp + 0x38]
mov ebx, eax
cmp r14d, edx
je 0x180037927
mov rdx, qword [rdi]
xor r8d, r8d
mov rcx, r12
cmp r14d, esi
jne 0x180037918
lea r9d, [r8 + 1]
call fcn.18004d934
jmp 0x180037925
mov r9d, esi
mov dword [rsp + 0x20], r14d
call fcn.180043d38
mov ebx, eax
mov eax, ebx
xor ebx, ebx
cmp eax, 2
cmovne ebx, eax
test ebx, ebx
jne 0x180037955
mov r8d, dword [rsp + 0x30]
mov r14, qword [rsp + 0x40]
inc r8d
add rdi, 0x10
mov dword [rsp + 0x30], r8d
cmp r8d, 0xf
jb 0x180037882
mov rdi, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
mov r14, qword [rsp + 0x40]
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x48], r12
test ebx, ebx
jne 0x1800379e7
mov rax, qword [r14 + 0x30]
lea r8, str.newadministratorname
mov r9, qword [r13 + 0x30]
mov rdx, rdi
mov qword [rsp + 0x28], rax
mov rcx, r12
mov rax, qword [rsi + 0x30]
mov qword [rsp + 0x20], rax
call fcn.1800355ec
mov ebx, eax
test eax, eax
jne 0x1800379ca
mov rax, qword [r14 + 0x38]
lea r8, str.newguestname
mov r9, qword [r13 + 0x38]
mov rdx, rdi
mov qword [rsp + 0x28], rax
mov rcx, r12
mov rax, qword [rsi + 0x38]
mov qword [rsp + 0x20], rax
call fcn.1800355ec
mov ebx, eax
mov edi, 1
lea rcx, [rsp + 0x58]
mov edx, edi
call fcn.18004cd24
mov edx, edi
lea rcx, [rsp + 0x48]
call fcn.18004cd24
mov eax, ebx
jmp 0x1800379f0
mov eax, 1
mov rcx, qword [rbp + 0x50]
xor rcx, rsp
call fcn.180002a90
add rsp, 0x168
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret