Function at 0x14000eb20
Capabilities:
Compare security identifiers

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x158
movaps xmmword [rsp + 0x140], xmm7
movaps xmmword [rsp + 0x130], xmm6
mov rbx, r8
mov r12, rdx
mov rdi, rcx
mov rax, qword [0x1402cb038]
xor rax, rsp
mov qword [rsp + 0x128], rax
movaps xmm6, xmmword [0x14029ca60]
movaps xmmword [rsp + 0x100], xmm6
xor esi, esi
mov byte [rsp + 0x100], sil
mov byte [rsp + 0x108], sil
lea rdx, [rcx + 0x18]
movabs r13, 0xaaaaaaaaaaaaaaaa
lea rcx, [rsp + 0xe0]
mov qword [rcx + 0x10], r13
movaps xmmword [rcx], xmm6
call fcn.14000e320
cmp byte [rdi + 0x80], sil
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], rdi
je 0x14000ecad
lea r15, [rsp + 0x70]
mov rcx, rbx
mov rdx, r15
call fcn.140028350
mov r14, qword [r15]
mov rsi, qword [r15 + 8]
mov r15, rsi
xorps xmm0, xmm0
movaps xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], 0
sub r15, r14
je 0x14000ec26
js 0x14001035a
mov rcx, r15
call fcn.1401cbbc4
mov qword [rsp + 0x110], rax
lea rdi, [rax + r15]
mov qword [rsp + 0x120], rdi
mov rcx, rax
mov rdx, r14
mov r8, r15
call fcn.1401d0030
mov qword [rsp + 0x118], rdi
test r14, r14
je 0x14000ec44
dec rsi
cmp r15, rsi
ja 0x14001040b
mov qword [rsp + 0x78], r14
mov rcx, r14
call fcn.1401cbbbc
mov rax, qword [rsp + 0xe8]
cmp rax, qword [rsp + 0xf0]
jb 0x14001046a
lea r14, [rsp + 0xe0]
lea r15, [rsp + 0x110]
mov rcx, r14
mov rdx, r15
call fcn.14000e950
mov rcx, qword [r15]
mov qword [r14 + 8], rax
test rcx, rcx
je 0x14000eca8
mov rax, qword [rsp + 0x118]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x14001040e
mov qword [rsp + 0x118], rcx
call fcn.1401cbbbc
mov rdi, qword [rsp + 0x38]
cmp byte [rdi + 0x63], 0
je 0x14000eec2
mov rdx, qword [rbx]
lea r14, [rsp + 0x70]
mov rcx, r14
mov r8d, 2
call fcn.14003e130
mov rbp, qword [r14]
mov rsi, qword [r14 + 8]
cmp rbp, rsi
je 0x14000ee53
mov qword [rsp + 0x48], rbx
xorps xmm7, xmm7
lea r14, [rsp + 0xe0]
lea r15, [rsp + 0x110]
mov rbx, qword [sym.imp.ADVAPI32.dll_EqualSid]
jmp 0x14000ee0c
mov rcx, r14
mov rdx, r15
call fcn.14000e950
mov rcx, qword [rsp + 0x110]
mov qword [rsp + 0xe8], rax
test rcx, rcx
je 0x14000ee03
mov rax, qword [rsp + 0x118]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x1400103ac
mov qword [rsp + 0x118], rcx
call fcn.1401cbbbc
jmp 0x14000ee03
mov r12, qword [rbp]
mov r13, qword [rbp + 8]
movaps xmmword [rsp + 0x110], xmm7
mov qword [rsp + 0x120], 0
sub r13, r12
je 0x14000edaa
js 0x14001035a
mov rcx, r13
call fcn.1401cbbc4
mov qword [rsp + 0x110], rax
lea rdi, [rax + r13]
mov qword [rsp + 0x120], rdi
mov rcx, rax
mov rdx, r12
mov r8, r13
call fcn.1401d0030
mov qword [rsp + 0x118], rdi
mov rax, qword [rsp + 0xe8]
cmp rax, qword [rsp + 0xf0]
jae 0x14000ed01
test rax, rax
je 0x140010387
movups xmmword [rax], xmm7
mov qword [rax + 0x10], 0
mov rcx, qword [rsp + 0x110]
mov qword [rax], rcx
mov rcx, qword [rsp + 0x118]
mov qword [rax + 8], rcx
mov rcx, qword [rsp + 0x120]
mov qword [rax + 0x10], rcx
add rax, 0x18
mov qword [rsp + 0xe8], rax
add rbp, 0x20
cmp rbp, rsi
je 0x14000ee44
mov eax, dword [rbp + 0x18]
cmp eax, 0xbfffffff
ja 0x14000ee03
and eax, 0x20
jne 0x14000ee03
mov rax, qword [rsp + 0x38]
mov rdi, qword [rax + 0x68]
mov r12, qword [rax + 0x70]
cmp rdi, r12
je 0x14000ed51
mov rdx, qword [rbp]
mov rcx, qword [rdi]
call rbx
test eax, eax
jne 0x14000ee03
add rdi, 0x18
jmp 0x14000ee28
mov rbp, qword [rsp + 0x70]
mov r12, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x48]
test rbp, rbp
je 0x14000eeb8
mov rsi, qword [rsp + 0x78]
mov rcx, rbp
cmp rsi, rbp
je 0x14000eeae
add rsi, 0xffffffffffffffe0
jmp 0x14000ee96
mov rax, qword [rsi + 8]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x14001038a
mov qword [rsi + 8], rcx
call fcn.1401cbbbc
lea rax, [rsi - 0x20]
cmp rsi, rbp
mov rsi, rax
je 0x14000eea9
test rsi, rsi
je 0x140010367
mov rcx, qword [rsi]
test rcx, rcx
je 0x14000ee8a
jmp 0x14000ee6b
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x78], rbp
call fcn.1401cbbbc
movabs r13, 0xaaaaaaaaaaaaaaaa
lea r14, [rsp + 0xc0]
mov qword [r14 + 0x10], r13
movaps xmmword [r14], xmm6
mov rcx, r14
mov rsi, qword [rsp + 0x38]
mov rdx, rsi
call fcn.14000e320
cmp byte [rsi + 0x82], 0
je 0x14000efe7
lea r12, [rsp + 0x70]
mov rcx, rbx
mov rdx, r12
call fcn.140028350
mov r15, qword [r12]
mov rsi, qword [r12 + 8]
mov r12, rsi
xorps xmm0, xmm0
movaps xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], 0
sub r12, r15
je 0x14000ef5f
js 0x14001035a
mov rcx, r12
call fcn.1401cbbc4
mov qword [rsp + 0x110], rax
lea rdi, [rax + r12]
mov qword [rsp + 0x120], rdi
mov rcx, rax
mov rdx, r15
mov r8, r12
call fcn.1401d0030
mov qword [rsp + 0x118], rdi
test r15, r15
je 0x14000ef7d
dec rsi
cmp r12, rsi
ja 0x1400103db
mov qword [rsp + 0x78], r15
mov rcx, r15
call fcn.1401cbbbc
mov rax, qword [rsp + 0xc8]
cmp rax, qword [rsp + 0xd0]
jb 0x140010417
lea r15, [rsp + 0xc0]
lea r12, [rsp + 0x110]
mov rcx, r15
mov rdx, r12
call fcn.14000e950
mov rcx, qword [r12]
mov qword [r15 + 8], rax
test rcx, rcx
mov r12, qword [rsp + 0x40]
je 0x14000efe7
mov rax, qword [rsp + 0x118]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x1400103de
mov qword [rsp + 0x118], rcx
call fcn.1401cbbbc
mov rax, qword [rsp + 0x38]
cmp byte [rax + 0x83], 0
je 0x14000f257
mov r14, rbx
mov rdx, qword [rbx]
lea r15, [rsp + 0x70]
mov rcx, r15
mov r8d, 2
call fcn.14003e130
mov rsi, qword [r15]
mov rbx, qword [r15 + 8]
cmp rsi, rbx
je 0x14000f155
xorps xmm7, xmm7
lea r15, [rsp + 0xc0]
lea r12, [rsp + 0x110]
jmp 0x14000f087
test rax, rax
je 0x140010384
movups xmmword [rax], xmm7
mov qword [rax + 0x10], 0
mov rcx, qword [rsp + 0x110]
mov qword [rax], rcx
mov rcx, qword [rsp + 0x118]
mov qword [rax + 8], rcx
mov rcx, qword [rsp + 0x120]
mov qword [rax + 0x10], rcx
add rax, 0x18
mov qword [rsp + 0xc8], rax
add rsi, 0x20
cmp rsi, rbx
je 0x14000f14b
test byte [rsi + 0x18], 0x20
jne 0x14000f07a
mov r13, qword [rsi]
mov rbp, qword [rsi + 8]
movaps xmmword [rsp + 0x110], xmm7
mov qword [rsp + 0x120], 0
sub rbp, r13
je 0x14000f0e5
js 0x14001035a
mov rcx, rbp
call fcn.1401cbbc4
mov qword [rsp + 0x110], rax
lea rdi, [rax + rbp]
mov qword [rsp + 0x120], rdi
mov rcx, rax
mov rdx, r13
mov r8, rbp
call fcn.1401d0030
mov qword [rsp + 0x118], rdi
mov rax, qword [rsp + 0xc8]
cmp rax, qword [rsp + 0xd0]
jb 0x14000f037
mov rcx, r15
mov rdx, r12
call fcn.14000e950
mov rcx, qword [rsp + 0x110]
mov qword [rsp + 0xc8], rax
test rcx, rcx
je 0x14000f07a
mov rax, qword [rsp + 0x118]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x1400103af
mov qword [rsp + 0x118], rcx
call fcn.1401cbbbc
jmp 0x14000f07a
mov rsi, qword [rsp + 0x70]
mov r12, qword [rsp + 0x40]
test rsi, rsi
mov rbx, r14
lea r14, [rsp + 0xc0]
je 0x14000f257
mov rdi, qword [rsp + 0x78]
mov rcx, rsi
cmp rdi, rsi
je 0x14000f24d
add rdi, 0xffffffffffffffe0
jmp 0x14000f199
mov qword [rdi + 8], rcx
call fcn.1401cbbbc
lea rax, [rdi - 0x20]
cmp rdi, rsi
mov rdi, rax
je 0x14000f248
test rdi, rdi
je 0x14001036a
mov rcx, qword [rdi]
test rcx, rcx
je 0x14000f189
mov rax, qword [rdi + 8]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
jbe 0x14000f180
jmp 0x14001038d
mov rax, qword [rsp + 0xc0]
cmp rax, qword [rsp + 0xc8]
jne 0x14000f27f
mov rax, qword [rsp + 0x38]
cmp byte [rax + 0x61], 0
jne 0x14000f27f
lea r14, [rsp + 0x70]
mov rcx, rbx
mov rdx, r14
mov r8d, 0xf01ff
call fcn.140243a40
mov al, byte [rsp + 0x108]
cmp al, byte [r14 + 8]
je 0x140010219
lea rbx, [rsp + 0x100]
test al, al
jne 0x1400104f8
lea rdx, [rsp + 0x70]
mov rcx, rbx
call fcn.14000ae90
mov byte [rbx + 8], 1
cmp byte [rsp + 0x78], 0
je 0x14000f383
lea rcx, [rsp + 0x70]
call fcn.14000e210
jmp 0x14000f383
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x78], rsi
call fcn.1401cbbbc
mov rax, qword [rsp + 0x38]
cmp byte [rax + 0x81], 0
jne 0x14001012a
mov rax, qword [rsp + 0xe0]
cmp rax, qword [rsp + 0xe8]
je 0x14000f1c1
xorps xmm0, xmm0
lea rax, [rsp + 0x70]
movaps xmmword [rax], xmm0
mov qword [rax + 0x10], 0
xor r8d, r8d
mov rcx, qword [rsp + 0x38]
cmp byte [rcx + 0x61], 1
adc r8d, 1
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x30], 0xf01ff
lea r14, [rsp + 0x110]
lea r9, [rsp + 0xe0]
mov rcx, rbx
mov rdx, r14
call fcn.14004bd80
mov al, byte [rsp + 0x108]
cmp al, byte [r14 + 8]
je 0x14000f334
lea rbx, [rsp + 0x100]
test al, al
jne 0x1400103ca
lea rdx, [rsp + 0x110]
mov rcx, rbx
call fcn.14000ae90
mov byte [rbx + 8], 1
cmp byte [rsp + 0x118], 0
je 0x14000f317
lea rcx, [rsp + 0x110]
call fcn.14000e210
mov rsi, qword [rsp + 0x70]
test rsi, rsi
je 0x14000f383
mov rdi, qword [rsp + 0x78]
mov rcx, rsi
cmp rdi, rsi
je 0x14000f379
add rdi, 0xffffffffffffffe8
jmp 0x14000f363
test al, al
je 0x14000f317
lea rcx, [rsp + 0x100]
lea rdx, [rsp + 0x110]
call fcn.1400393d0
jmp 0x14000f300
mov rcx, qword [rdi]
call fcn.1401cbbbc
lea rax, [rdi - 0x18]
cmp rdi, rsi
mov rdi, rax
je 0x14000f374
test rdi, rdi
je 0x140010377
cmp byte [rdi + 0x17], 0
jns 0x14000f357
jmp 0x14000f34f
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x78], rsi
call fcn.1401cbbbc
cmp byte [rsp + 0x108], 0
je 0x14000fe6c
mov rax, qword [rsp + 0x38]
cmp byte [rax + 0x61], 0
je 0x14000f3a6
cmp byte [rax + 0x62], 0
jne 0x140010053
xorps xmm0, xmm0
movaps xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], 0
movaps xmmword [rsp + 0xb0], xmm6
lea rcx, [rsp + 0x100]
lea rbx, [rsp + 0xb0]
mov rdx, rbx
call fcn.140066210
cmp byte [rbx + 8], 0
je 0x14000fd7c
movabs r13, 0x666666666666666
mov rax, qword [rsp + 0x38]
cmp byte [rax + 0x60], 0
je 0x14000f638
movaps xmmword [rsp + 0x80], xmm6
movaps xmmword [rsp + 0x70], xmm6
cmp byte [rsp + 0x108], 0
je 0x1400103e1
lea rcx, [rsp + 0x100]
lea rbx, [rsp + 0x70]
mov rdx, rbx
call fcn.14003dfc0
cmp byte [rbx + 0x18], 0
je 0x1400101bb
mov rbx, qword [rsp + 0x118]
mov rax, qword [rsp + 0x120]
cmp rbx, rax
jb 0x14000f581
mov rbp, qword [rsp + 0x110]
mov r15, rbx
sub r15, rbp
sar r15, 3
movabs rcx, 0xcccccccccccccccd
imul r15, rcx
lea rdi, [r15 + 1]
cmp rdi, r13
ja 0x1400104bd
sub rax, rbp
sar rax, 3
imul rax, rcx
lea rcx, [rax + rax]
cmp rcx, rdi
cmova rdi, rcx
movabs rcx, 0x333333333333333
cmp rax, rcx
cmovae rdi, r13
test rdi, rdi
je 0x1400104c0
cmp rdi, r13
ja 0x1400104c8
lea rax, [rdi*8]
lea rcx, [rax + rax*4]
call fcn.1401cbbc4
mov r14, rax
lea rax, [r15 + r15*4]
mov qword [rsp + 0x48], rax
lea r15, [rax*8]
add r15, r14
je 0x1400104cb
mov r12, qword [rsp + 0x70]
mov r13, qword [rsp + 0x78]
xorps xmm0, xmm0
movups xmmword [r15], xmm0
mov qword [r15 + 0x10], 0
sub r13, r12
je 0x14000f530
js 0x1400104ce
mov rcx, r13
call fcn.1401cbbc4
mov qword [r15], rax
lea rsi, [rax + r13]
mov qword [r15 + 0x10], rsi
mov rcx, rax
mov rdx, r12
mov r8, r13
call fcn.1401d0030
mov qword [r15 + 8], rsi
lea rax, [rdi + rdi*4]
lea rax, [r14 + rax*8]
mov qword [r15 + 0x18], 3
mov dword [r15 + 0x20], 0
lea r12, [r15 + 0x28]
cmp rbx, rbp
jne 0x140010238
mov qword [rsp + 0x110], r15
mov qword [rsp + 0x118], r12
mov qword [rsp + 0x120], rax
movabs r13, 0x666666666666666
test rbx, rbx
je 0x14000f5e8
jmp 0x1400104e8
test rbx, rbx
je 0x1400104ba
mov r14, qword [rsp + 0x70]
mov r15, qword [rsp + 0x78]
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
sub r15, r14
je 0x14000f5d2
js 0x1400103b5
mov rcx, r15
call fcn.1401cbbc4
mov qword [rbx], rax
lea rsi, [rax + r15]
mov qword [rbx + 0x10], rsi
mov rcx, rax
mov rdx, r14
mov r8, r15
call fcn.1401d0030
mov qword [rbx + 8], rsi
mov qword [rbx + 0x18], 3
mov dword [rbx + 0x20], 0
add rbx, 0x28
mov r12, rbx
mov qword [rsp + 0x118], r12
mov cl, byte [rsp + 0x88]
test cl, cl
mov r12, qword [rsp + 0x38]
je 0x14000f713
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x14000f713
mov rax, qword [rsp + 0x78]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x1400104e2
mov qword [rsp + 0x78], rcx
call fcn.1401cbbbc
jmp 0x14000f713
xor eax, eax
mov dword [rsp + 0x50], eax
mov dword [rsp + 0xac], 0x10000000
mov dword [rsp + 0xa8], eax
mov dword [rsp + 0xa4], 0xa
mov rbx, qword [rsp + 0x118]
cmp rbx, qword [rsp + 0x120]
jae 0x14001031e
test rbx, rbx
mov r12, qword [rsp + 0x38]
je 0x140010467
lea r15, [rsp + 0x70]
mov rcx, r15
mov edx, 0xa
call fcn.14003ccd0
mov r14, qword [r15]
mov rsi, qword [r15 + 8]
mov r15, rsi
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
sub r15, r14
je 0x14000f6d9
js 0x1400103b5
mov rcx, r15
call fcn.1401cbbc4
mov qword [rbx], rax
lea rdi, [rax + r15]
mov qword [rbx + 0x10], rdi
mov rcx, rax
mov rdx, r14
mov r8, r15
call fcn.1401d0030
mov qword [rbx + 8], rdi
movabs rax, 0x1000000000000000
mov qword [rbx + 0x18], rax
mov dword [rbx + 0x20], 0
test r14, r14
je 0x14000f707
dec rsi
cmp r15, rsi
ja 0x1400104d9
mov rcx, r14
call fcn.1401cbbbc
add rbx, 0x28
mov qword [rsp + 0x118], rbx
mov rax, r12
mov r12, qword [r12 + 0x30]
mov rax, qword [rax + 0x38]
mov qword [rsp + 0x48], rax
cmp r12, rax
je 0x14000fa25
xorps xmm6, xmm6
jmp 0x14000f791
test rsi, rsi
movabs r13, 0x666666666666666
je 0x140010397
mov qword [rsi], r14
mov qword [rsi + 8], rdi
mov qword [rsi + 0x10], rdi
movaps xmmword [rsp + 0x70], xmm6
mov qword [rsp + 0x80], 0
lea rcx, [rsp + 0x88]
mov eax, dword [rcx + 8]
mov dword [rsi + 0x20], eax
mov rax, qword [rcx]
mov qword [rsi + 0x18], rax
add rsi, 0x28
mov qword [rsp + 0x118], rsi
add r12, 0x28
cmp r12, qword [rsp + 0x48]
je 0x14000fa25
mov esi, dword [r12 + 0x18]
mov ebp, dword [r12 + 0x1c]
mov r13d, dword [r12 + 0x20]
mov rbx, qword [r12]
mov r15, qword [r12 + 8]
movaps xmmword [rsp + 0x70], xmm6
mov qword [rsp + 0x80], 0
sub r15, rbx
je 0x14001037a
js 0x14001036d
mov rcx, r15
call fcn.1401cbbc4
mov r14, rax
lea rdi, [rax + r15]
mov rcx, rax
mov rdx, rbx
mov r8, r15
call fcn.1401d0030
mov dword [rsp + 0x88], esi
mov dword [rsp + 0x8c], ebp
mov dword [rsp + 0x90], r13d
mov rsi, qword [rsp + 0x118]
mov rax, qword [rsp + 0x120]
cmp rsi, rax
movabs rcx, 0xcccccccccccccccd
jb 0x14000f732
mov r15, qword [rsp + 0x110]
mov rbx, rsi
sub rbx, r15
sar rbx, 3
imul rbx, rcx
lea rbp, [rbx + 1]
movabs r13, 0x666666666666666
cmp rbp, r13
ja 0x14001039a
sub rax, r15
sar rax, 3
imul rax, rcx
lea rcx, [rax + rax]
cmp rcx, rbp
cmova rbp, rcx
movabs rcx, 0x333333333333333
cmp rax, rcx
cmovae rbp, r13
test rbp, rbp
je 0x140010390
cmp rbp, r13
ja 0x14001039d
lea rax, [rbp*8]
lea rcx, [rax + rax*4]
call fcn.1401cbbc4
lea rdx, [rbx + rbx*4]
lea r8, [rdx*8]
add r8, rax
je 0x1400103a0
lea rcx, [rbp*4]
add rcx, rbp
lea rcx, [rax + rcx*8]
mov qword [r8], r14
mov qword [r8 + 8], rdi
mov qword [r8 + 0x10], rdi
movaps xmmword [rsp + 0x70], xmm6
mov qword [rsp + 0x80], 0
lea r10, [rsp + 0x88]
mov r9d, dword [r10 + 8]
mov dword [r8 + 0x20], r9d
mov r9, qword [r10]
mov qword [r8 + 0x18], r9
lea r14, [r8 + 0x28]
cmp rsi, r15
jne 0x14000f952
mov qword [rsp + 0x110], r8
mov qword [rsp + 0x118], r14
mov qword [rsp + 0x120], rcx
test rsi, rsi
je 0x14000f91b
mov rcx, rsi
call fcn.1401cbbbc
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x118], r14
test rcx, rcx
je 0x14000f782
mov rax, qword [rsp + 0x78]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x1400103a3
call fcn.1401cbbbc
jmp 0x14000f782
lea rax, [rax + rdx*8]
add rax, 0xffffffffffffffd8
test rax, rax
je 0x1400103b2
movups xmmword [rax], xmm6
xor r8d, r8d
mov qword [rax + 0x10], r8
mov rdx, qword [rsi - 0x28]
mov qword [rax], rdx
mov rdx, qword [rsi - 0x20]
mov qword [rax + 8], rdx
mov rdx, qword [rsi - 0x18]
mov qword [rax + 0x10], rdx
mov qword [rsi - 0x18], r8
movups xmmword [rsi - 0x28], xmm6
mov edx, dword [rsi - 8]
mov dword [rax + 0x20], edx
mov rdx, qword [rsi - 0x10]
lea r8, [rsi - 0x28]
mov qword [rax + 0x18], rdx
add rax, 0xffffffffffffffd8
mov rsi, r8
cmp r8, r15
jne 0x14000f95a
mov rsi, qword [rsp + 0x110]
mov rdi, qword [rsp + 0x118]
add rax, 0x28
mov qword [rsp + 0x110], rax
mov qword [rsp + 0x118], r14
mov qword [rsp + 0x120], rcx
cmp rdi, rsi
je 0x14000f90e
add rdi, 0xffffffffffffffd8
test rdi, rdi
je 0x1400103a6
mov rcx, qword [rdi]
test rcx, rcx
je 0x14000fa13
mov rax, qword [rdi + 8]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x1400103a9
mov qword [rdi + 8], rcx
call fcn.1401cbbbc
lea rax, [rdi - 0x28]
cmp rdi, rsi
mov rdi, rax
je 0x14000f90e
jmp 0x14000f9e3
cmp byte [rsp + 0x108], 0
je 0x1400103bd
lea rcx, [rsp + 0x100]
lea r14, [rsp + 0x70]
mov rdx, r14
call fcn.140028350
mov rbx, qword [r14]
mov rsi, qword [r14 + 8]
mov r12, rsi
xorps xmm0, xmm0
movaps xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], 0
sub r12, rbx
je 0x1400103e4
js 0x1400103c0
mov rcx, r12
call fcn.1401cbbc4
mov r14, rax
mov qword [rsp + 0x50], rax
lea r15, [rax + r12]
mov qword [rsp + 0x60], r15
mov rcx, rax
mov rdx, rbx
mov r8, r12
call fcn.1401d0030
mov qword [rsp + 0x58], r15
test rbx, rbx
je 0x14000fabc
dec rsi
cmp r12, rsi
ja 0x140010411
mov qword [rsp + 0x78], rbx
mov rcx, rbx
call fcn.1401cbbbc
mov rbx, qword [rsp + 0x118]
mov rax, qword [rsp + 0x120]
cmp rbx, rax
jb 0x14000fc0b
mov rbp, qword [rsp + 0x110]
mov rdx, r13
mov r13, rbx
sub r13, rbp
sar r13, 3
movabs rcx, 0xcccccccccccccccd
imul r13, rcx
lea rdi, [r13 + 1]
cmp rdi, rdx
ja 0x1400103f2
sub rax, rbp
sar rax, 3
imul rax, rcx
lea rcx, [rax + rax]
cmp rcx, rdi
cmova rdi, rcx
movabs rcx, 0x333333333333333
cmp rax, rcx
cmovae rdi, rdx
test rdi, rdi
je 0x1400103f5
cmp rdi, rdx
ja 0x1400103fd
lea rax, [rdi*8]
lea rcx, [rax + rax*4]
call fcn.1401cbbc4
mov r12, rax
lea rax, [r13*4]
add rax, r13
lea r13, [rax*8]
add r13, r12
je 0x140010400
mov qword [rsp + 0x48], rax
xorps xmm0, xmm0
movups xmmword [r13], xmm0
mov qword [r13 + 0x10], 0
sub r15, r14
je 0x14000fbb4
js 0x140010403
mov rcx, r15
call fcn.1401cbbc4
mov qword [r13], rax
lea rsi, [rax + r15]
mov qword [r13 + 0x10], rsi
mov rcx, rax
mov rdx, r14
mov r8, r15
call fcn.1401d0030
mov qword [r13 + 8], rsi
lea rax, [rdi + rdi*4]
lea rax, [r12 + rax*8]
movabs rcx, 0x1000000000000000
mov qword [r13 + 0x18], rcx
mov dword [r13 + 0x20], 0
lea r14, [r13 + 0x28]
cmp rbx, rbp
jne 0x14000ff72
mov qword [rsp + 0x110], r13
mov qword [rsp + 0x118], r14
mov qword [rsp + 0x120], rax
mov r12, qword [rsp + 0x40]
test rbx, rbx
je 0x14000fc73
mov rcx, rbx
call fcn.1401cbbbc
jmp 0x14000fc73
test rbx, rbx
mov r12, qword [rsp + 0x40]
je 0x1400103ef
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
sub r15, r14
je 0x14000fc57
js 0x1400103b5
mov rcx, r15
call fcn.1401cbbc4
mov qword [rbx], rax
lea rsi, [rax + r15]
mov qword [rbx + 0x10], rsi
mov rcx, rax
mov rdx, r14
mov r8, r15
call fcn.1401d0030
mov qword [rbx + 8], rsi
movabs rax, 0x1000000000000000
mov qword [rbx + 0x18], rax
mov dword [rbx + 0x20], 0
add rbx, 0x28
mov r14, rbx
mov qword [rsp + 0x118], r14
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14000fca1
mov rax, qword [rsp + 0x58]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x140010414
call fcn.1401cbbbc
cmp byte [rsp + 0xb8], 0
je 0x1400100d6
lea rcx, [rsp + 0xb0]
lea rdx, [rsp + 0x110]
call fcn.140036730
test al, al
je 0x14000fd7c
cmp byte [rsp + 0x108], 0
je 0x1400100df
cmp byte [rsp + 0xb8], 0
je 0x1400100dc
mov rax, qword [rsp + 0xb0]
lea r8, [rsp + 0x70]
mov qword [r8], rax
mov rcx, qword [rsp + 0x100]
mov edx, 6
mov r9d, 8
call qword [sym.imp.ADVAPI32.dll_SetTokenInformation]
test eax, eax
je 0x14000fd7c
mov rax, qword [rsp + 0x38]
cmp byte [rax + 0x5c], 0
je 0x14000fd47
cmp byte [rsp + 0x108], 0
je 0x1400100e2
mov rax, qword [rsp + 0x38]
mov edx, dword [rax + 0x58]
lea rcx, [rsp + 0x100]
call fcn.14003aa00
test al, al
je 0x14000fd7c
xor eax, eax
mov byte [r12], al
mov byte [r12 + 8], al
cmp byte [rsp + 0x108], al
je 0x14000fd87
test r12, r12
je 0x1400104d6
lea rdx, [rsp + 0x100]
mov rcx, r12
call fcn.14000ae90
mov byte [r12 + 8], 1
jmp 0x14000fd87
xor eax, eax
mov byte [r12], al
mov byte [r12 + 8], al
cmp byte [rsp + 0xb8], 0
je 0x14000fdaf
mov rcx, qword [rsp + 0xb0]
mov qword [rsp + 0xb0], 0
test rcx, rcx
je 0x14000fdaf
call fcn.1401cbf84
mov rsi, qword [rsp + 0x110]
test rsi, rsi
je 0x14000fe77
mov rdi, qword [rsp + 0x118]
mov rcx, rsi
cmp rdi, rsi
je 0x14000fe5d
add rdi, 0xffffffffffffffd8
jmp 0x14000fdef
mov qword [rdi + 8], rcx
call fcn.1401cbbbc
lea rax, [rdi - 0x28]
cmp rdi, rsi
mov rdi, rax
je 0x14000fe55
test rdi, rdi
je 0x1400100ca
mov rcx, qword [rdi]
test rcx, rcx
je 0x14000fde3
mov rax, qword [rdi + 8]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
jbe 0x14000fdda
jmp 0x1400100d0
mov rax, qword [rdi + 8]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x1400100cd
mov qword [rdi + 8], rcx
call fcn.1401cbbbc
lea rax, [rdi - 0x18]
cmp rdi, rsi
mov rdi, rax
je 0x14000fe9a
test rdi, rdi
je 0x1400100c4
mov rcx, qword [rdi]
test rcx, rcx
je 0x14000fe36
jmp 0x14000fe17
mov rcx, qword [rsp + 0x110]
mov qword [rsp + 0x118], rsi
call fcn.1401cbbbc
jmp 0x14000fe77
xor eax, eax
mov byte [r12], al
mov byte [r12 + 8], al
mov rsi, qword [rsp + 0xc0]
test rsi, rsi
je 0x14000feaf
mov rdi, qword [rsp + 0xc8]
mov rcx, rsi
cmp rdi, rsi
je 0x14000fea2
add rdi, 0xffffffffffffffe8
jmp 0x14000fe42
mov rcx, qword [rsp + 0xc0]
mov qword [rsp + 0xc8], rsi
call fcn.1401cbbbc
mov rsi, qword [rsp + 0xe0]
test rsi, rsi
je 0x14000ff24
mov rdi, qword [rsp + 0xe8]
mov rcx, rsi
cmp rdi, rsi
je 0x14000ff17
add rdi, 0xffffffffffffffe8
jmp 0x14000fee7
mov qword [rdi + 8], rcx
call fcn.1401cbbbc
lea rax, [rdi - 0x18]
cmp rdi, rsi
mov rdi, rax
je 0x14000ff0f
test rdi, rdi
je 0x1400100c1
mov rcx, qword [rdi]
test rcx, rcx
je 0x14000fedb
mov rax, qword [rdi + 8]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
jbe 0x14000fed2
jmp 0x1400100c7
mov rcx, qword [rsp + 0xe0]
mov qword [rsp + 0xe8], rsi
call fcn.1401cbbbc
cmp byte [rsp + 0x108], 0
je 0x14000ff3b
lea rcx, [rsp + 0x100]
call fcn.14000e210
mov rcx, qword [rsp + 0x128]
xor rcx, rsp
call fcn.1401ce5b0
mov rax, r12
movaps xmm6, xmmword [rsp + 0x130]
movaps xmm7, xmmword [rsp + 0x140]
add rsp, 0x158
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, qword [rsp + 0x48]
lea rcx, [r12 + rcx*8]
add rcx, 0xffffffffffffffd8
xorps xmm0, xmm0
xor edx, edx
test rcx, rcx
je 0x1400104dc
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], rdx
mov r8, qword [rbx - 0x28]
mov qword [rcx], r8
mov r8, qword [rbx - 0x20]
mov qword [rcx + 8], r8
mov r8, qword [rbx - 0x18]
mov qword [rcx + 0x10], r8
mov qword [rbx - 0x18], rdx
movups xmmword [rbx - 0x28], xmm0
mov r8d, dword [rbx - 8]
mov dword [rcx + 0x20], r8d
mov r8, qword [rbx - 0x10]
lea r9, [rbx - 0x28]
mov qword [rcx + 0x18], r8
add rcx, 0xffffffffffffffd8
mov rbx, r9
cmp r9, rbp
jne 0x14000ff84
mov rbx, qword [rsp + 0x110]
mov rsi, qword [rsp + 0x118]
add rcx, 0x28
mov qword [rsp + 0x110], rcx
mov qword [rsp + 0x118], r14
mov qword [rsp + 0x120], rax
cmp rsi, rbx
je 0x14000fbf7
add rsi, 0xffffffffffffffd8
mov r12, qword [rsp + 0x40]
test rsi, rsi
je 0x1400104df
mov rcx, qword [rsi]
test rcx, rcx
je 0x140010041
mov rax, qword [rsi + 8]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x1400100d3
mov qword [rsi + 8], rcx
call fcn.1401cbbbc
lea rax, [rsi - 0x28]
cmp rsi, rbx
mov rsi, rax
je 0x14000fbfc
jmp 0x140010011
lea rdx, str.SeChangeNotifyPrivilege
lea r14, [rsp + 0x70]
mov rcx, r14
call fcn.140207340
lea rcx, [rsp + 0x100]
mov rdx, r14
call fcn.140066300
mov ebx, eax
cmp byte [r14 + 0x17], 0
jns 0x14001008a
mov rcx, qword [rsp + 0x70]
call fcn.1401cbbbc
test bl, bl
je 0x14000fe6c
cmp byte [rsp + 0x108], 0
xorps xmm0, xmm0
movaps xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], 0
movaps xmmword [rsp + 0xb0], xmm6
jne 0x14000f3c5
jmp 0x1400100d9
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
test rax, rax
je 0x1400104e5
xorps xmm0, xmm0
movups xmmword [rax], xmm0
xor ecx, ecx
mov qword [rax + 0x10], rcx
mov rdx, qword [rsp + 0x70]
mov qword [rax], rdx
mov rdx, qword [rsp + 0x78]
mov qword [rax + 8], rdx
mov rdx, qword [rsp + 0x80]
mov qword [rax + 0x10], rdx
mov qword [rsp + 0x80], rcx
movaps xmmword [rsp + 0x70], xmm0
add rax, 0x18
jmp 0x140010172
lea r15, [rsp + 0x70]
movaps xmmword [r15 + 0x10], xmm6
movaps xmmword [r15], xmm6
mov rcx, rbx
mov rdx, r15
call fcn.14003dfc0
cmp byte [r15 + 0x18], 0
je 0x14000f269
mov rax, qword [rsp + 0xc8]
cmp rax, qword [rsp + 0xd0]
jb 0x1400100e5
lea rcx, [rsp + 0xc0]
lea rdx, [rsp + 0x70]
call fcn.14000e950
mov qword [rsp + 0xc8], rax
cmp byte [rsp + 0x88], 0
je 0x14000f269
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x14000f269
mov rax, qword [rsp + 0x78]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x1400101b8
mov qword [rsp + 0x78], rcx
call fcn.1401cbbbc
jmp 0x14000f269
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov cl, byte [rsp + 0x88]
cmp eax, 0x490
je 0x14000f5f7
xor eax, eax
mov byte [r12], al
mov byte [r12 + 8], al
test cl, cl
je 0x14000fd87
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x14000fd87
mov rax, qword [rsp + 0x78]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x140010216
mov qword [rsp + 0x78], rcx
call fcn.1401cbbbc
jmp 0x14000fd87
int3
test al, al
je 0x14000f383
lea rcx, [rsp + 0x100]
lea rdx, [rsp + 0x70]
call fcn.1400393d0
jmp 0x14000f22e
mov rcx, qword [rsp + 0x48]
lea rcx, [r14 + rcx*8]
add rcx, 0xffffffffffffffd8
xorps xmm0, xmm0
xor edx, edx
test rcx, rcx
je 0x1400104f5
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], rdx
mov r8, qword [rbx - 0x28]
mov qword [rcx], r8
mov r8, qword [rbx - 0x20]
mov qword [rcx + 8], r8
mov r8, qword [rbx - 0x18]
mov qword [rcx + 0x10], r8
mov qword [rbx - 0x18], rdx
movups xmmword [rbx - 0x28], xmm0
mov r8d, dword [rbx - 8]
mov dword [rcx + 0x20], r8d
mov r8, qword [rbx - 0x10]
lea r9, [rbx - 0x28]
mov qword [rcx + 0x18], r8
add rcx, 0xffffffffffffffd8
mov rbx, r9
cmp r9, rbp
jne 0x14001024a
mov rbx, qword [rsp + 0x110]
mov rsi, qword [rsp + 0x118]
add rcx, 0x28
mov qword [rsp + 0x110], rcx
mov qword [rsp + 0x118], r12
mov qword [rsp + 0x120], rax
cmp rsi, rbx
movabs r13, 0x666666666666666
je 0x14000f577
add rsi, 0xffffffffffffffd8
test rsi, rsi
je 0x14001050f
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001030c
mov rax, qword [rsi + 8]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x140010512
mov qword [rsi + 8], rcx
call fcn.1401cbbbc
lea rax, [rsi - 0x28]
cmp rsi, rbx
mov rsi, rax
je 0x14000f56d
jmp 0x1400102dc
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x110]
lea rdx, [rsp + 0xa4]
lea r8, [rsp + 0xa8]
lea r9, [rsp + 0xac]
call fcn.14027b470
mov rbx, rax
mov r12, qword [rsp + 0x38]
jmp 0x14000f70b
lea rcx, [rsp + 0x110]
call fcn.140207060
int3
int3
lea rcx, [rsp + 0x70]
call fcn.140207060
int3
xor edi, edi
xor r14d, r14d
jmp 0x14000f7e6
int3
int3
int3
int3
xor eax, eax
jmp 0x14000f896
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
mov rcx, rbx
call fcn.140207060
int3
lea rcx, [rsp + 0x50]
call fcn.140207060
mov rcx, rbx
call fcn.14000e210
mov byte [rbx + 8], 0
jmp 0x14000f300
int3
int3
int3
xor r14d, r14d
xor r15d, r15d
jmp 0x14000fa9e
int3
int3
xor r12d, r12d
jmp 0x14000fb52
int3
int3
mov rcx, r13
call fcn.140207060
int3
int3
int3
int3
test rax, rax
je 0x140010509
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
mov rcx, qword [rsp + 0x110]
mov qword [rax], rcx
mov rcx, qword [rsp + 0x118]
mov qword [rax + 8], rcx
mov rcx, qword [rsp + 0x120]
mov qword [rax + 0x10], rcx
add rax, 0x18
mov qword [rsp + 0xc8], rax
mov r12, qword [rsp + 0x40]
jmp 0x14000efe7
int3
test rax, rax
je 0x14001050c
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
mov rcx, qword [rsp + 0x110]
mov qword [rax], rcx
mov rcx, qword [rsp + 0x118]
mov qword [rax + 8], rcx
mov rcx, qword [rsp + 0x120]
mov qword [rax + 0x10], rcx
add rax, 0x18
mov qword [rsp + 0xe8], rax
mov r12, qword [rsp + 0x40]
jmp 0x14000eca8
int3
int3
xor r14d, r14d
jmp 0x14000f4cd
int3
int3
mov rcx, r15
call fcn.140207060
int3
int3
int3
int3
int3
int3
mov rcx, rbx
call fcn.1401cbbbc
jmp 0x14000f5e8
int3
mov rcx, rbx
call fcn.14000e210
mov byte [rbx + 8], 0
jmp 0x14000f22e
int3
int3
int3
int3