Function at 0x140084c90
Capabilities:
Get user security identifier

Disassembly:
push rbp
push rbx
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x2f]
sub rsp, 0x98
mov rax, qword [0x1409963c0]
xor rax, rsp
mov qword [rbp + 0x1f], rax
xor edi, edi
mov qword [rbp - 0x19], rcx
cmp qword [rdx + 0x18], 0xf
mov rbx, rdx
mov r14, rcx
mov dword [rbp - 0x1d], edi
mov dword [rbp - 0x21], edi
jbe 0x140084cd0
mov rdx, qword [rdx]
lea rax, [rbp + 0x17]
xor r8d, r8d
mov qword [rsp + 0x30], rax
lea r9, [rbp - 0x1d]
lea rax, [rbp - 0x21]
xor ecx, ecx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
call qword [sym.imp.ADVAPI32.dll_LookupAccountNameA]
mov ecx, dword [rbp - 0x1d]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ecx, dword [rbp - 0x21]
mov r15, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
cmp qword [rbx + 0x18], 0xf
mov r12, rax
jbe 0x140084d18
mov rbx, qword [rbx]
lea rax, [rbp + 0x17]
mov qword [rsp + 0xe0], rsi
mov qword [rsp + 0x30], rax
lea r9, [rbp - 0x1d]
lea rax, [rbp - 0x21]
mov r8, r15
mov qword [rsp + 0x28], rax
mov rdx, rbx
xor ecx, ecx
mov qword [rsp + 0x20], r12
call qword [sym.imp.ADVAPI32.dll_LookupAccountNameA]
test eax, eax
je 0x140084dbe
lea rdx, [rbp - 0x19]
mov qword [rbp - 0x19], rdi
mov rcx, r15
call sub.ADVAPI32.dll_ConvertSidToStringSidA
mov rdx, qword [rbp - 0x19]
xorps xmm0, xmm0
xorps xmm1, xmm1
mov rsi, 0xffffffffffffffff
movups xmmword [rbp - 9], xmm0
movdqu xmmword [rbp + 7], xmm1
inc rsi
cmp byte [rdx + rsi], dil
jne 0x140084d77
mov r8, rsi
lea rcx, [rbp - 9]
call fcn.14002ed40
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rbp - 0x19]
call qword [sym.imp.KERNEL32.dll_LocalFree]
movups xmm0, xmmword [rbp - 9]
movups xmm1, xmmword [rbp + 7]
movups xmmword [r14], xmm0
movups xmmword [r14 + 0x10], xmm1
jmp 0x140085747
movzx edi, byte [rbp - 0x29]
xor eax, eax
xorps xmm0, xmm0
mov qword [rsp + 0x90], r13
mov r13, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov dword [rbp - 9], 0x60645b09
lea rsi, [rax - 1]
mov dword [rbp - 5], 0xf7d62f66
movups xmmword [rbp - 1], xmm0
mov qword [rbp + 0xf], rax
call fcn.140068228
mov rbx, qword [rax]
call fcn.140068230
mov r8, qword [rax]
xor r11d, r11d
cmp r11, 0x20
jae 0x1400856da
movzx r10d, byte [rbp + r11 - 9]
mov edx, r10d
cmp rbx, r11
ja 0x1400856d1
lea rax, [r8 + 1]
cmp rbx, rax
jae 0x140084e49
movabs rax, 0xa4956ecc2da7cd9e
movzx edi, r10b
add rax, r11
and dl, al
add dl, dl
sub dil, dl
sub dil, 0x52
add dil, al
jmp 0x140084e76
je 0x140085652
lea rax, [r8 + 3]
cmp rbx, rax
je 0x140085620
lea rax, [r8 + 4]
cmp rbx, rax
je 0x1400855e2
lea rax, [r8 + 2]
cmp rbx, rax
je 0x1400855be
cmp r8, r11
ja 0x1400856c8
lea rax, [r8 + 0x5a]
cmp rbx, rax
jae 0x140084ea5
lea ecx, [r11 - 0xa]
mov edi, 0x23
movzx eax, cl
and al, r10b
sub dil, al
add dil, dil
add dil, cl
add dil, r10b
jmp 0x140084ee0
lea rax, [r8 + 1]
cmp rbx, rax
je 0x14008557b
lea rax, [r8 + 3]
cmp rbx, rax
je 0x140085556
lea rax, [r8 + 4]
cmp rbx, rax
je 0x140085548
lea rax, [r8 + 5]
cmp rbx, rax
je 0x140085519
nop dword [rax]
lea rdx, [r8 + rbx]
cmp rdx, r11
jbe 0x1400851bd
nop dword [rax]
lea rax, [r8 + 0x42]
cmp rbx, rax
je 0x14008519e
lea rax, [r8 + 0x7a]
cmp rbx, rax
je 0x140085176
lea rax, [r8 + 5]
cmp rbx, rax
je 0x140085151
lea rax, [r8 + 0x40]
cmp rbx, rax
je 0x140085132
lea rax, [r8 + 0x61]
cmp rbx, rax
je 0x140085113
lea rax, [r8 + 4]
cmp rbx, rax
je 0x140084ef0
lea rbx, [r8 + 0x2a]
lea r8, [rbx + 0x28]
lea rax, [r8 + 9]
cmp rbx, rax
jb 0x1400856a8
lea rax, [r8 + 0x80]
cmp rbx, rax
jb 0x140085688
lea rax, [r8 + 0x5a]
cmp rbx, rax
jb 0x140084fe6
lea rax, [r8 + 8]
cmp rbx, rax
jb 0x1400850d6
lea rax, [r8 + 0x64]
cmp rbx, rax
jb 0x1400850b3
lea rbx, [r8 + 0x400]
lea r8, [rbx + 0x64]
lea rax, [r8 + 0x20]
cmp rbx, rax
ja 0x140085097
lea rax, [r8 + 0x400]
cmp rbx, rax
ja 0x14008507c
lea rax, [r8 + 2]
cmp rbx, rax
ja 0x140085059
lea rax, [r8 + 0x10]
cmp rbx, rax
ja 0x14008502a
lea rax, [r8 + 0x3e8]
cmp rbx, rax
ja 0x140085005
lea rax, [r8 + 1]
cmp rbx, rax
ja 0x140084ef0
lea rbx, [r8 + 0x7a]
lea r8, [rbx + 0xa]
jmp 0x140084ef0
lea edx, [r11 - 0x36]
mov ecx, 0x3d
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
jmp 0x140084ee0
lea edx, [r11 + 0x38]
mov ecx, 0x3c
movzx eax, dl
dec r11
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
inc r11
jmp 0x140084e03
lea edx, [r11 - 0x7c]
mov ecx, 0x32
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
mov rcx, rsi
add dil, dl
add dil, r10b
movzx eax, dil
sub rcx, rax
add r11, rcx
inc r11
jmp 0x140084e03
lea edx, [r11 + 0x48]
mov ecx, 4
movzx eax, dl
movzx r9d, r11b
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
jmp 0x1400854b2
lea ecx, [r11 + 0xc]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x54
jmp 0x1400854dc
lea edx, [r11 - 0x30]
mov ecx, 0x28
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
jmp 0x140085671
lea ecx, [r11 - 0x46]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x16
mov byte [rbp + r11 - 9], dil
inc r11
jmp 0x140084e03
lea ecx, [r11 + 0x7e]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x72
cmp r8, 0x42
jb 0x1400850c9
movzx edx, r11b
lea ecx, [rdx - 0xc]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
add cl, r10b
lea edi, [rcx*2 - 0x58]
jmp 0x140085594
movzx r9d, r11b
lea ecx, [r9 + 0x4c]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x14
jmp 0x1400854b2
lea ecx, [r11 - 0x68]
movzx r9d, r11b
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x28
jmp 0x1400855fc
lea edx, [r11 + 0x5c]
mov ecx, 0x3e
movzx eax, dl
dec r11
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
inc r11
jmp 0x140084e03
lea edx, [r11 + 0x20]
mov ecx, reloc.WS2_32.dll_recv
movzx eax, dl
inc r8
and al, r10b
dec r11
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
inc r11
jmp 0x140084e03
lea ecx, [r11 - 0x1c]
movzx edx, r11b
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x3c
jmp 0x140085594
lea rax, [r8 + 6]
cmp rbx, rax
jae 0x14008524c
lea ecx, [r11 - 0x62]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x52
cmp rdx, 0x200
je 0x140085497
lea rax, [r8 + 0x40]
cmp rbx, rax
jbe 0x1400852d9
lea edx, [r11 - 0x5a]
mov ecx, 0x3b
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
cmp rbx, 0x1000
jae 0x14008546f
lea rax, [r8 + 0x80]
cmp rbx, rax
jbe 0x1400853a1
lea ecx, [r11 - 0x64]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x44
jmp 0x1400850ec
lea rax, [r8 + 1]
cmp rbx, rax
jne 0x14008527f
lea ecx, [r11 - 0x14]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
movzx eax, byte [rbp + r11 - 9]
add rax, r8
add r11, rax
lea edi, [r10 + rcx]
sub dil, 0x74
inc r11
jmp 0x140084e03
lea rax, [r8 + 2]
cmp rbx, rax
jne 0x1400852ab
mov ecx, 0x22
movzx r9d, r11b
lea edx, [r9 + 0x64]
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
jmp 0x1400854b2
lea rax, [r8 + 7]
cmp rbx, rax
jne 0x1400851e0
lea ecx, [r11 + 0x54]
dec r11
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x4c
inc r11
jmp 0x140084e03
lea rax, [r8 + 1]
cmp rbx, rax
jne 0x140085300
movzx edx, r11b
lea ecx, [rdx - 0x1e]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x2e
jmp 0x140085594
lea rax, [r8 + 2]
cmp rbx, rax
jne 0x14008532a
lea ecx, [r11 + 0x5a]
dec r11
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x76
inc r11
jmp 0x140084e03
lea rax, [r8 + 3]
cmp rbx, rax
jne 0x140085341
lea edx, [r11 - 0x2e]
mov ecx, 0x21
jmp 0x140085629
lea rax, [r8 + 5]
cmp rbx, rax
jne 0x140085375
lea ecx, [r11 + 0xe]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
mov rcx, rsi
sub dil, 0x62
movzx eax, dil
sub rcx, rax
add r11, rcx
inc r11
jmp 0x140084e03
lea rax, [r8 + 6]
cmp rbx, rax
jne 0x140085214
movzx r9d, r11b
lea ecx, [r9 + 0x4a]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 6
jmp 0x1400854b2
lea rax, [r8 + 1]
cmp rbx, rax
jne 0x1400853c6
lea edx, [r11 - 0x28]
mov ecx, ntohs
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
jmp 0x140085671
lea rax, [r8 + 2]
cmp rbx, rax
jne 0x1400853ee
movzx r9d, r11b
lea ecx, [r9 + 0x50]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x30
jmp 0x1400854b2
lea rax, [r8 + 6]
cmp rbx, rax
jne 0x140085416
movzx r9d, r11b
lea ecx, [r9 + 4]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x1c
jmp 0x1400855fc
lea rax, [r8 + 3]
cmp rbx, rax
jne 0x140085444
lea edx, [r11 + 0x40]
mov ecx, 0x20
movzx eax, dl
dec r11
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
inc r11
jmp 0x140084e03
lea rax, [r8 + 7]
cmp rbx, rax
jne 0x1400850ec
movzx edx, r11b
lea ecx, [rdx - 0x48]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 8
jmp 0x140085594
movzx edi, byte [rbp + r11 - 9]
movzx r9d, r11b
lea edx, [r9 + 0x30]
movzx eax, dl
and al, r10b
add al, al
sub dil, al
sub dil, 0x50
add dil, dl
add dil, r10b
jmp 0x1400855fc
mov ecx, 6
movzx r9d, r11b
lea edx, [r9 + 0x6c]
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add r9b, 0xa
movzx eax, r10b
and al, r9b
inc r8
add al, al
movzx ecx, r10b
sub cl, al
sub cl, 0x46
add cl, r9b
movzx eax, cl
mov byte [rbp + r11 - 9], al
add rax, r8
sub r11, rax
lea edx, [r11 - 0x58]
movzx eax, r10b
and al, dl
inc rbx
mov ecx, 0x34
sub cl, al
mov rax, rsi
sub rax, rbx
add cl, cl
add cl, r10b
add cl, dl
mov byte [rbp + r11 - 9], cl
add r11, rax
movzx eax, byte [rbp + r11 - 9]
add rax, r8
add r11, rax
inc r11
jmp 0x140084e03
lea edx, [r11 + 0x5e]
mov ecx, 0x37
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
mov rcx, rsi
add dil, dl
add dil, r10b
movzx eax, dil
sub rcx, rax
add r11, rcx
inc r11
jmp 0x140084e03
lea edx, [r11 + 0x22]
mov ecx, 9
jmp 0x140085629
lea edx, [r11 - 0x56]
mov ecx, 0x2d
movzx eax, dl
dec r11
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
inc r11
jmp 0x140084e03
movzx edx, r11b
lea ecx, [rdx + 0x32]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x5e
sub dl, 0x6e
mov ecx, 1
movzx eax, dl
inc r8
and al, r10b
sub cl, al
add cl, cl
add cl, dl
add cl, r10b
mov byte [rbp + r11 - 9], cl
dec r11
inc r11
jmp 0x140084e03
lea ecx, [r11 + 0x7e]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x72
inc r8
dec r11
inc r11
jmp 0x140084e03
movzx r9d, r11b
lea ecx, [r9 + 6]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x2a
sub r9b, 0x32
mov ecx, 0x2f
movzx eax, r9b
and al, r10b
sub cl, al
add cl, cl
add cl, r9b
add cl, r10b
add cl, dil
mov byte [rbp + r11 - 9], cl
jmp 0x14008563a
lea edx, [r11 - 0x36]
mov ecx, 0x3d
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
add rbx, r8
movzx eax, dil
mov rcx, rsi
sub rcx, rax
add r11, rcx
inc r11
jmp 0x140084e03
movabs rcx, 0xedc04c6488f768da
add rcx, r11
movzx eax, cl
and al, dl
mov edx, 5
sub dl, al
lea edi, [rdx + rdx]
add dil, cl
add dil, r10b
movzx eax, byte [rbp + r11 - 9]
add rax, r8
add r11, rax
inc r11
jmp 0x140084e03
add r11b, 0x16
mov ecx, 0x33
movzx eax, r11b
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, r11b
add dil, r10b
jmp 0x140084e00
sub r11b, 0x26
mov ecx, 5
movzx eax, r11b
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, r11b
add dil, r10b
jmp 0x140084df0
lea rdx, [rbp + 0x17e261f]
jmp 0x1400856de
lea rdx, [rbp + 0x125f3bd]
jmp 0x1400856de
lea rdx, [rbp - 9]
mov rcx, r13
call fcn.140068640
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x14006baf0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor eax, eax
lea rdx, [0x1400f4974]
xorps xmm0, xmm0
xor r8d, r8d
movups xmmword [r14], xmm0
mov rcx, r14
mov qword [r14 + 0x10], rax
mov qword [r14 + 0x18], rax
call fcn.14002ed40
mov r13, qword [rsp + 0x90]
mov rsi, qword [rsp + 0xe0]
mov rax, r14
mov rcx, qword [rbp + 0x1f]
xor rcx, rsp
call fcn.14008bd80
add rsp, 0x98
pop r15
pop r14
pop r12
pop rdi
pop rbx
pop rbp
ret