Function at 0x55e550
Capabilities:
Compare security identifiers

Disassembly:
push rbp
push rbx
sub rsp, 0xf8
mov rbp, rsp
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x70], 0
mov qword [rbp + 0xa8], 0
mov qword [rbp + 0x78], rbp
nop
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0xa0]
mov ecx, dword [rbp + 0x9c]
add ecx, dword [rbp + 0x98]
cmp eax, ecx
jge 0x55e5c5
lea rcx, [rbp + 0xa0]
lea rdx, [rbp + 0x9c]
lea r8, [rbp + 0x98]
lea r9, [rbp + 0x94]
lea rax, [rbp + 0x90]
mov qword [rsp + 0x20], rax
call fcn.005366c0
mov dword [rbp + 0x9c], 0
mov eax, dword [rbp + 0x90]
add eax, dword [rbp + 0x88]
cmp eax, dword [rbp + 0x84]
jle 0x55e5f5
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x1dd
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0x9c]
sub eax, dword [rbp + 0x98]
mov ecx, dword [rbp + 0x94]
sub ecx, dword [rbp + 0x90]
cmp eax, ecx
jle 0x55e623
mov eax, dword [rbp + 0x94]
add eax, 0xa4
mov dword [rbp + 0x98], eax
mov eax, dword [rbp + 0x94]
mov dword [rbp + 0xa0], eax
mov eax, dword [rbp + 0xa0]
imul eax, dword [rbp + 0x98]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
add dword [rbp + 0xa4], eax
add dword [rbp + 0x9c], 1
cmp dword [rbp + 0x9c], 3
jne 0x55e5cf
nop
mov eax, 0x56
sub eax, dword [rbp + 0x9c]
cmp eax, 0xfb
jge 0x55e698
lea rcx, [rbp + 0x84]
lea rdx, [rbp + 0xa4]
lea r8, [rbp + 0xa0]
lea r9, [rbp + 0x9c]
call fcn.005568f0
mov dword [rbp + 0xec], 0
mov eax, dword [rbp + 0xa0]
add dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
add dword [rbp + 0xa4], eax
lea rcx, [rbp + 0xa8]
call fcn.0040e5d0
mov eax, dword [rbp + 0x9c]
sub eax, dword [rbp + 0x98]
mov ecx, dword [rbp + 0x94]
sub ecx, dword [rbp + 0x90]
cmp eax, ecx
jle 0x55e6f5
mov eax, dword [rbp + 0x9c]
imul eax, dword [rbp + 0x98]
mov dword [rbp + 0xa0], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x005d1ce8]
call fcn.0040fe40
mov eax, dword [rbp + 0xa4]
cmp eax, dword [rbp + 0xa0]
jle 0x55e728
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov dword [rbp + 0xa4], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x005d1cf8]
call fcn.0040fe40
mov eax, dword [rbp + 0xa0]
add dword [rbp + 0xa4], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x005d1d48]
call fcn.0040fe40
mov eax, dword [rbp + 0xa0]
add dword [rbp + 0xa4], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x005d1ce8]
call fcn.0040fe40
mov eax, dword [rbp + 0xa4]
imul eax, eax, 0x2e1
mov dword [rbp + 0x84], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x005d1ce0]
call fcn.0040fe40
mov eax, dword [rbp + 0x84]
sub eax, 0x2a5
mov dword [rbp + 0x88], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x005d1cd0]
call fcn.0040fe40
mov eax, dword [rbp + 0x84]
sub eax, 0x269
mov dword [rbp + 0x88], eax
lea rcx, [rbp + 0x70]
mov edx, 3
call fcn.0042be80
lea rcx, [rbp + 0xa8]
mov rdx, qword [rbp + 0x70]
call fcn.0040fe40
mov eax, dword [rbp + 0x88]
add eax, 0x20d
mov dword [rbp + 0x8c], eax
lea rcx, [rbp + 0x68]
mov edx, 2
call fcn.0042be80
lea rcx, [rbp + 0xa8]
mov rdx, qword [rbp + 0x68]
call fcn.0040fe40
mov eax, dword [rbp + 0x88]
add eax, 0x232
mov dword [rbp + 0x8c], eax
lea rcx, [rbp + 0xa8]
lea rdx, [0x0055f7ac]
call fcn.0040fe40
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x1d6
mov dword [rbp + 0x90], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x005d1cf8]
call fcn.0040fe40
mov eax, 0x179
sub eax, dword [rbp + 0x90]
mov dword [rbp + 0x94], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x005d1d28]
call fcn.0040fe40
mov eax, dword [rbp + 0x94]
add eax, 0x11d
mov dword [rbp + 0x98], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x005d1d28]
call fcn.0040fe40
mov eax, dword [rbp + 0xa4]
cmp eax, dword [rbp + 0xa0]
jle 0x55e8e1
lea rcx, [rbp + 0xa4]
lea rdx, [rbp + 0xa0]
lea r8, [rbp + 0x9c]
call fcn.0055b9c0
mov eax, 0x55
sub eax, dword [rbp + 0xa0]
cmp eax, 0xe4
jge 0x55e8fa
call fcn.005573e0
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x1ac
mov dword [rbp + 0x90], eax
nop
mov eax, 0x189
sub eax, dword [rbp + 0x90]
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x1ce
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0x88]
add eax, 0x1f2
mov dword [rbp + 0x8c], eax
mov eax, dword [rbp + 0x88]
add eax, 0x237
mov dword [rbp + 0x8c], eax
mov eax, dword [rbp + 0x84]
sub eax, 0x25b
mov dword [rbp + 0x88], eax
mov eax, 0x173
sub eax, dword [rbp + 0x90]
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x1b8
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0x88]
add eax, 0x1fc
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0x88]
add eax, 0x221
mov dword [rbp + 0x8c], eax
lea rcx, [rbp + 0xa8]
call fcn.0040e5d0
mov eax, 0x59
sub eax, dword [rbp + 0x9c]
cmp eax, 0x104
jge 0x55e9db
mov eax, dword [rbp + 0x9c]
sub dword [rbp + 0xa4], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x005d1d58]
call fcn.0040fe40
mov eax, 0x56
sub eax, dword [rbp + 0xa0]
cmp eax, 0xf8
jge 0x55ea0e
mov eax, dword [rbp + 0xa0]
add dword [rbp + 0xa4], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x005d1cb8]
call fcn.0040fe40
mov eax, dword [rbp + 0xa0]
add dword [rbp + 0xa4], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x005d1cf8]
call fcn.0040fe40
mov eax, dword [rbp + 0xa0]
add dword [rbp + 0xa4], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x005d1d28]
call fcn.0040fe40
mov eax, dword [rbp + 0xa4]
add eax, dword [rbp + 0xa4]
mov dword [rbp + 0x84], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x005d1d28]
call fcn.0040fe40
mov eax, dword [rbp + 0xa4]
imul eax, eax, 0x2e3
mov dword [rbp + 0x84], eax
lea rcx, [rbp + 0xa8]
lea rdx, [0x0055f7ac]
call fcn.0040fe40
mov eax, dword [rbp + 0xa4]
imul eax, eax, 0x2c7
mov dword [rbp + 0x84], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x005d1cf8]
call fcn.0040fe40
mov eax, dword [rbp + 0xa4]
imul eax, eax, 0x2cc
mov dword [rbp + 0x84], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x005d1d28]
call fcn.0040fe40
mov eax, dword [rbp + 0x84]
sub eax, 0x290
mov dword [rbp + 0x88], eax
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x005d1d28]
call fcn.0040fe40
mov eax, dword [rbp + 0x84]
sub eax, 0x2b1
mov dword [rbp + 0x88], eax
mov eax, dword [rbp + 0xa4]
imul eax, eax, 0x327
mov dword [rbp + 0x84], eax
call sub.kernel32.dll_GetCurrentThread
mov rcx, rax
mov edx, 8
or r8d, 0xffffffff
lea r9, [rbp + 0xe0]
call sub.advapi32.dll_OpenThreadToken
mov dword [rbp + 0xc0], eax
call sub.kernel32.dll_GetLastError_2
mov dword [rbp + 0xbc], eax
cmp dword [rbp + 0xc0], 0
jne 0x55efbc
mov dword [rbp + 0x9c], 0
mov eax, dword [rbp + 0x84]
imul eax, eax, 0x2b4
mov dword [rbp + 0x88], eax
mov eax, dword [rbp + 0x90]
add eax, dword [rbp + 0x88]
cmp eax, dword [rbp + 0x84]
jle 0x55ebba
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x1bc
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0x9c]
sub eax, dword [rbp + 0x98]
mov ecx, dword [rbp + 0x94]
sub ecx, dword [rbp + 0x90]
cmp eax, ecx
jle 0x55ebe8
mov eax, dword [rbp + 0x94]
add eax, 0xc3
mov dword [rbp + 0x98], eax
mov eax, dword [rbp + 0x98]
mov dword [rbp + 0xa0], eax
mov eax, dword [rbp + 0xa0]
imul eax, dword [rbp + 0x98]
mov dword [rbp + 0xa4], eax
add dword [rbp + 0x9c], 1
cmp dword [rbp + 0x9c], 3
jne 0x55eb82
nop
mov dword [rbp + 0xa0], 0
mov eax, dword [rbp + 0x90]
add eax, dword [rbp + 0x88]
cmp eax, dword [rbp + 0x84]
jle 0x55ec4c
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x1b5
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0x9c]
sub eax, dword [rbp + 0x98]
mov ecx, dword [rbp + 0x94]
sub ecx, dword [rbp + 0x90]
cmp eax, ecx
jle 0x55ec74
mov eax, dword [rbp + 0x98]
mov dword [rbp + 0x9c], eax
mov eax, dword [rbp + 0x9c]
imul eax, dword [rbp + 0x98]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x9c]
sub dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa4]
imul eax, eax, 0x308
mov dword [rbp + 0x84], eax
add dword [rbp + 0xa0], 1
cmp dword [rbp + 0xa0], 2
jne 0x55ec26
nop
lea rcx, [rbp + 0xa4]
lea rdx, [rbp + 0xa0]
lea r8, [rbp + 0x9c]
lea r9, [rbp + 0x98]
lea rax, [rbp + 0x94]
mov qword [rsp + 0x20], rax
lea rax, [rbp + 0x8c]
mov qword [rsp + 0x28], rax
call fcn.00559470
mov dword [rbp + 0x9c], 0
mov eax, dword [rbp + 0x8c]
sub eax, dword [rbp + 0x88]
cmp eax, dword [rbp + 0x84]
jge 0x55ed23
mov eax, dword [rbp + 0x8c]
add eax, 0x1f7
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0x90]
add eax, dword [rbp + 0x8c]
cmp dword [rbp + 0x98], eax
jne 0x55ed49
mov eax, dword [rbp + 0x94]
add eax, 0xbf
mov dword [rbp + 0x98], eax
mov eax, dword [rbp + 0x98]
mov dword [rbp + 0xa0], eax
mov eax, dword [rbp + 0xa0]
imul eax, dword [rbp + 0x98]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
add dword [rbp + 0xa4], eax
add dword [rbp + 0x9c], 1
cmp dword [rbp + 0x9c], 3
jne 0x55ecfd
nop
cmp dword [rbp + 0xbc], 0x3f0
jne 0x55efbc
lea rcx, [rbp + 0xa4]
lea rdx, [rbp + 0xa0]
lea r8, [rbp + 0x98]
call fcn.0055b9c0
lea rcx, [rbp + 0xa4]
lea rdx, [rbp + 0xa4]
lea r8, [rbp + 0xa0]
lea r9, [rbp + 0x9c]
lea rax, [rbp + 0x98]
mov qword [rsp + 0x20], rax
lea rax, [rbp + 0x90]
mov qword [rsp + 0x28], rax
call fcn.00559470
mov eax, dword [rbp + 0xa4]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x55ee35
lea rcx, [rbp + 0xa0]
lea rdx, [rbp + 0x98]
lea r8, [rbp + 0x94]
lea r9, [rbp + 0x90]
lea rax, [rbp + 0x8c]
mov qword [rsp + 0x20], rax
call fcn.00539320
mov dword [rbp + 0x9c], 0
mov eax, dword [rbp + 0x84]
imul eax, eax, 0x2d3
mov dword [rbp + 0x88], eax
mov eax, dword [rbp + 0x90]
add eax, dword [rbp + 0x88]
cmp eax, dword [rbp + 0x84]
jle 0x55ee77
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x1ba
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0x9c]
sub eax, dword [rbp + 0x98]
mov ecx, dword [rbp + 0x94]
sub ecx, dword [rbp + 0x90]
cmp eax, ecx
jle 0x55eea5
mov eax, dword [rbp + 0x94]
add eax, 0xa2
mov dword [rbp + 0x98], eax
mov eax, dword [rbp + 0x98]
mov dword [rbp + 0xa0], eax
mov eax, dword [rbp + 0xa0]
mov dword [rbp + 0xa4], eax
add dword [rbp + 0x9c], 1
cmp dword [rbp + 0x9c], 3
jne 0x55ee3f
nop
mov dword [rbp + 0xa0], 0
mov eax, dword [rbp + 0x90]
add eax, dword [rbp + 0x88]
cmp eax, dword [rbp + 0x84]
jle 0x55ef02
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x1d4
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0x9c]
sub eax, dword [rbp + 0x98]
mov ecx, dword [rbp + 0x94]
sub ecx, dword [rbp + 0x90]
cmp eax, ecx
jle 0x55ef2a
mov eax, dword [rbp + 0x98]
mov dword [rbp + 0x9c], eax
mov eax, dword [rbp + 0x9c]
imul eax, dword [rbp + 0x98]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa4]
add dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x84]
sub eax, 0x265
mov dword [rbp + 0x88], eax
add dword [rbp + 0xa0], 1
cmp dword [rbp + 0xa0], 3
jne 0x55eedc
nop
call sub.kernel32.dll_GetCurrentProcess
mov rcx, rax
mov edx, 8
lea r8, [rbp + 0xe0]
call sub.advapi32.dll_OpenProcessToken
mov dword [rbp + 0xc0], eax
lea rcx, [rbp + 0x84]
lea rdx, [rbp + 0xa4]
lea r8, [rbp + 0xa0]
call fcn.00557700
mov eax, dword [rbp + 0xa4]
imul eax, eax, 0x2d3
mov dword [rbp + 0x88], eax
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x55eff2
lea rcx, [rbp + 0xa0]
lea rdx, [rbp + 0x9c]
lea r8, [rbp + 0x98]
call fcn.0053a380
mov eax, dword [rbp + 0xa4]
cmp eax, dword [rbp + 0xa0]
jle 0x55f013
lea rcx, [rbp + 0xa4]
lea rdx, [rbp + 0xa4]
call fcn.00559d90
mov eax, dword [rbp + 0xa4]
imul eax, eax, 0x2fb
mov dword [rbp + 0x84], eax
cmp dword [rbp + 0xc0], 0
je 0x55f66d
mov ecx, 0x400
call fcn.00409020
mov qword [rbp + 0xd8], rax
mov dword [rbp + 0x9c], 0
mov eax, dword [rbp + 0x84]
sub eax, 0x287
mov dword [rbp + 0x88], eax
mov eax, dword [rbp + 0x8c]
sub eax, dword [rbp + 0x88]
cmp dword [rbp + 0x94], eax
jne 0x55f086
mov eax, 0x14e
sub eax, dword [rbp + 0x90]
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x55f0ae
mov eax, dword [rbp + 0x98]
mov dword [rbp + 0xa0], eax
mov eax, dword [rbp + 0xa0]
imul eax, dword [rbp + 0x98]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
add dword [rbp + 0xa4], eax
add dword [rbp + 0x9c], 1
cmp dword [rbp + 0x9c], 3
jne 0x55f04e
nop
mov eax, 0x54
sub eax, dword [rbp + 0xa0]
cmp eax, 0xf2
jge 0x55f110
lea rcx, [rbp + 0x84]
lea rdx, [rbp + 0xa4]
lea r8, [rbp + 0xa4]
call fcn.005562a0
mov eax, dword [rbp + 0xa4]
imul eax, eax, 0x32a
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0xa0]
add dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x88]
add eax, 0x224
mov dword [rbp + 0x8c], eax
mov rcx, qword [rbp + 0xe0]
mov edx, 2
mov r8, qword [rbp + 0xd8]
mov r9d, 0x400
lea rax, [rbp + 0xd4]
mov qword [rsp + 0x20], rax
call sub.advapi32.dll_GetTokenInformation
mov dword [rbp + 0xc0], eax
mov eax, dword [rbp + 0x84]
imul eax, eax, 0x2aa
mov dword [rbp + 0x88], eax
mov rcx, qword [rbp + 0xe0]
call sub.kernel32.dll_CloseHandle_1
cmp dword [rbp + 0xc0], 0
je 0x55f645
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x1a6
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0x88]
add eax, 0x1fe
mov dword [rbp + 0x90], eax
lea rcx, [0x005c24dd]
mov dl, 2
mov r8d, 0x20
mov r9d, 0x220
mov dword [rsp + 0x20], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x40], 0
mov dword [rsp + 0x48], 0
lea rax, [rbp + 0xc8]
mov qword [rsp + 0x50], rax
call sub.advapi32.dll_AllocateAndInitializeSid
mov rax, qword [rbp + 0xd8]
lea rax, [rax + 8]
mov qword [rbp + 0xb0], rax
mov eax, dword [rbp + 0xa0]
add dword [rbp + 0xa4], eax
lea rcx, [rbp + 0xa4]
lea rdx, [rbp + 0xa0]
lea r8, [rbp + 0x98]
call fcn.0055ca80
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x55f28e
lea rcx, [rbp + 0xa0]
lea rdx, [rbp + 0x9c]
lea r8, [rbp + 0x98]
lea r9, [rbp + 0x94]
call fcn.00539c60
mov dword [rbp + 0xa0], 0
cmp dword [rbp + 0xa0], 1
jge 0x55f32c
add dword [rbp + 0xa0], 1
mov eax, dword [rbp + 0x90]
add eax, dword [rbp + 0x88]
cmp eax, dword [rbp + 0x84]
jle 0x55f2d2
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x1ab
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0x9c]
sub eax, dword [rbp + 0x98]
mov ecx, dword [rbp + 0x94]
sub ecx, dword [rbp + 0x8c]
cmp eax, ecx
jle 0x55f300
mov eax, dword [rbp + 0x98]
add eax, 0xb3
mov dword [rbp + 0x9c], eax
mov eax, dword [rbp + 0x98]
mov dword [rbp + 0x9c], eax
mov eax, dword [rbp + 0x9c]
imul eax, dword [rbp + 0x98]
mov dword [rbp + 0xa4], eax
cmp dword [rbp + 0xa0], 1
jl 0x55f2a5
nop
mov dword [rbp + 0xa0], 0
cmp dword [rbp + 0xa0], 1
jge 0x55f3bd
add dword [rbp + 0xa0], 1
mov eax, dword [rbp + 0x90]
add eax, dword [rbp + 0x88]
cmp eax, dword [rbp + 0x84]
jle 0x55f36d
mov eax, dword [rbp + 0x90]
imul eax, eax, 0x185
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x94]
add ecx, dword [rbp + 0x90]
cmp eax, ecx
jge 0x55f395
mov eax, dword [rbp + 0x98]
mov dword [rbp + 0x9c], eax
mov eax, dword [rbp + 0x9c]
imul eax, dword [rbp + 0x98]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0x9c]
add dword [rbp + 0xa4], eax
cmp dword [rbp + 0xa0], 1
jl 0x55f340
nop
xor eax, eax
mov rcx, qword [rbp + 0xd8]
mov ebx, dword [rcx]
sub ebx, 1
mov dword [rbp + 0xc4], eax
cmp dword [rbp + 0xc4], ebx
jg 0x55f572
sub ebx, eax
add ebx, 1
mov rcx, qword [rbp + 0xc8]
mov rax, qword [rbp + 0xb0]
mov rdx, qword [rax]
call sub.advapi32.dll_EqualSid
test eax, eax
je 0x55f558
lea rcx, [rbp + 0xa4]
lea rdx, [rbp + 0xa0]
lea r8, [rbp + 0x9c]
lea r9, [rbp + 0x98]
call fcn.0055ad30
mov eax, 0x55
sub eax, dword [rbp + 0xa0]
cmp eax, 0xf5
jge 0x55f457
lea rcx, [rbp + 0xa4]
lea rdx, [rbp + 0xa4]
lea r8, [rbp + 0xa0]
lea r9, [rbp + 0x9c]
call fcn.00558740
mov dword [rbp + 0xec], 1
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x55f4aa
lea rcx, [rbp + 0xa0]
lea rdx, [rbp + 0x9c]
lea r8, [rbp + 0x98]
lea r9, [rbp + 0x94]
lea rax, [rbp + 0x90]
mov qword [rsp + 0x20], rax
call fcn.00537a80
mov dword [rbp + 0x9c], 0
mov eax, dword [rbp + 0x84]
sub eax, 0x2b0
mov dword [rbp + 0x88], eax
cmp dword [rbp + 0x94], 0
jne 0x55f4e1
mov eax, 0x177
sub eax, dword [rbp + 0x90]
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0xa0]
add eax, dword [rbp + 0x9c]
mov ecx, dword [rbp + 0x98]
add ecx, dword [rbp + 0x94]
cmp eax, ecx
jge 0x55f509
mov eax, dword [rbp + 0x98]
mov dword [rbp + 0xa0], eax
mov eax, dword [rbp + 0xa0]
imul eax, dword [rbp + 0x98]
mov dword [rbp + 0xa4], eax
mov eax, dword [rbp + 0xa0]
add dword [rbp + 0xa4], eax
add dword [rbp + 0x9c], 1
cmp dword [rbp + 0x9c], 3
jne 0x55f4b4
nop
mov eax, 0x55
sub eax, dword [rbp + 0xa0]
cmp eax, 0xf6
jge 0x55f572
call fcn.005573e0
jmp 0x55f572
add qword [rbp + 0xb0], 0x10
add dword [rbp + 0xc4], 1
sub ebx, 1
test ebx, ebx
jne 0x55f3e3
nop
mov eax, dword [rbp + 0x90]
imul eax, eax, 0x187
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x1cc
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0x88]
add eax, 0x210
mov dword [rbp + 0x8c], eax
mov eax, dword [rbp + 0x88]
add eax, 0x235
mov dword [rbp + 0x8c], eax
mov eax, dword [rbp + 0x84]
sub eax, 0x279
mov dword [rbp + 0x88], eax
mov eax, dword [rbp + 0x84]
sub eax, 0x262
mov dword [rbp + 0x88], eax
mov rcx, qword [rbp + 0xc8]
call sub.advapi32.dll_FreeSid
mov eax, 0x158
sub eax, dword [rbp + 0x90]
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x19c
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0x8c]
add eax, 0x1e1
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0x88]
add eax, 0x205
mov dword [rbp + 0x8c], eax
mov eax, dword [rbp + 0x88]
add eax, 0x22a
mov dword [rbp + 0x8c], eax
mov rcx, qword [rbp + 0xd8]
call fcn.00409050
mov eax, dword [rbp + 0xa4]
imul eax, eax, 0x2f3
mov dword [rbp + 0x84], eax
jmp 0x55f66d
lea rcx, [rbp + 0xa4]
lea rdx, [rbp + 0xa0]
lea r8, [rbp + 0x9c]
lea r9, [rbp + 0x98]
lea rax, [rbp + 0x94]
mov qword [rsp + 0x20], rax
call fcn.0055b6f0
mov dword [rbp + 0xa0], 0
cmp dword [rbp + 0xa0], 1
jge 0x55f729
add dword [rbp + 0xa0], 1
mov eax, dword [rbp + 0x90]
add eax, dword [rbp + 0x88]
cmp eax, dword [rbp + 0x84]
jle 0x55f6da
mov eax, dword [rbp + 0x8c]
imul eax, eax, 0x1be
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0x9c]
sub eax, dword [rbp + 0x98]
mov ecx, dword [rbp + 0x94]
sub ecx, dword [rbp + 0x90]
cmp eax, ecx
jle 0x55f708
mov eax, dword [rbp + 0x94]
add eax, 0xc5
mov dword [rbp + 0x9c], eax
mov eax, dword [rbp + 0x98]
mov dword [rbp + 0x9c], eax
mov eax, dword [rbp + 0x9c]
mov dword [rbp + 0xa4], eax
cmp dword [rbp + 0xa0], 1
jl 0x55f6ad
nop
nop
lea rcx, [rbp + 0x68]
mov edx, 2
call fcn.0040e6b0
lea rcx, [rbp + 0xa8]
call fcn.0040e5d0
mov eax, dword [rbp + 0xec]
lea rsp, [rbp + 0xf8]
pop rbx
pop rbp
ret