Function at 0x140001010
Capabilities:
Impersonate user

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x368
movaps xmmword [rsp + 0x350], xmm6
mov rax, qword [0x140024108]
xor rax, rsp
mov qword [rsp + 0x348], rax
lea r13, [rdx + 0x18]
mov qword [rsp + 0xf8], rdx
lea rax, [rdx + 0x10]
mov qword [rsp + 0xf0], rax
cmp ecx, 4
mov eax, 0x59626e65
mov ecx, 0x868ca30c
cmove ecx, eax
mov dword [rsp + 0xac], ecx
mov ecx, 0x7e830d76
lea r15, [rsp + 0x110]
xorps xmm6, xmm6
lea rdi, [rsp + 0x108]
mov r14d, 0xe9e35597
lea r12, [0x1400240a6]
jmp 0x1400010e0
mov eax, dword [0x140024bb0]
mov edx, dword [0x140024bb4]
lea ecx, [rax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
cmp edx, 0xa
setl bl
xor bl, al
mov eax, 0x79f5b554
mov ebp, 0x1ebf34b6
cmovne eax, ebp
cmp ecx, 0xffffffff
mov ecx, eax
cmove ecx, ebp
cmp edx, 0xa
cmovge ecx, eax
nop word cs:[rax + rax]
nop dword [rax]
cmp ecx, 0x4c8b522
jle 0x140001160
cmp ecx, 0x3dde9147
jg 0x1400011c0
cmp ecx, 0x20eeb447
jg 0x1400012ad
cmp ecx, 0x1728c574
jle 0x140001416
cmp ecx, 0x1ebf34b5
jg 0x140001604
cmp ecx, 0x1728c575
je 0x1400017b9
cmp ecx, 0x1c957b86
jne 0x1400010e0
mov eax, dword [0x140024bb0]
mov edx, dword [0x140024bb4]
lea ecx, [rax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
cmp edx, 0xa
setl bl
xor bl, al
mov eax, 0xab660d2f
mov ebp, 0xb9956f07
jmp 0x1400010c2
cmp ecx, 0xb9956f06
jg 0x140001230
cmp ecx, 0x9b2ce9b6
jg 0x140001301
cmp ecx, 0x8d88694e
jle 0x140001464
cmp ecx, 0x90f0942e
jg 0x140001636
cmp ecx, 0x8d88694f
je 0x1400018e8
cmp ecx, 0x9093a74a
jne 0x1400010e0
lea rcx, [0x140024050]
jmp 0x1400018ef
cmp ecx, 0x5e4b1dbf
jg 0x14000133b
cmp ecx, 0x4e97afa2
jle 0x14000149e
cmp ecx, 0x59626e64
jg 0x140001665
cmp ecx, 0x4e97afa3
je 0x1400018fe
cmp ecx, 0x5693ea0b
jne 0x1400010e0
mov eax, dword [0x140024bb0]
mov edx, dword [0x140024bb4]
lea ecx, [rax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
cmp edx, 0xa
setl bl
xor bl, al
mov eax, 0xe24e3957
mov ebp, 0xe979cae7
jmp 0x1400010c2
cmp ecx, 0xe0ee6299
jle 0x140001382
cmp ecx, 0xe4f2beec
jle 0x1400014dd
cmp ecx, 0xe9e35596
jg 0x1400016a8
cmp ecx, 0xe4f2beed
je 0x140001932
cmp ecx, 0xe979cae7
jne 0x1400010e0
mov rdx, qword [rsp + 0x48]
mov rcx, r12
call fcn.1400021e0
mov eax, dword [0x140024bb0]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete al
mov ecx, 0xe24e3957
mov ebp, 0xc3d0f35
cmove ecx, ebp
cmp dword [0x140024bb4], 0xa
mov edx, 0xe24e3957
jmp 0x140001fd9
cmp ecx, 0x2f6967d1
jle 0x14000150b
cmp ecx, 0x369d5ae9
jg 0x1400016cc
cmp ecx, 0x2f6967d2
je 0x140001965
cmp ecx, 0x33fd9e38
jne 0x1400010e0
mov rax, qword [rsp + 0x88]
movzx ecx, byte [rax]
call fcn.140007860
test eax, eax
mov ecx, 0x4069cacd
mov eax, 0x369d5aea
cmove ecx, eax
jmp 0x1400010e0
cmp ecx, 0xa84d4822
jle 0x14000154a
cmp ecx, 0xad71c024
jg 0x140001724
cmp ecx, 0xa84d4823
je 0x14000197c
cmp ecx, 0xab660d2f
jne 0x1400010e0
mov ecx, 0x1c957b86
jmp 0x1400010e0
cmp ecx, 0x6f6dab30
jle 0x140001578
cmp ecx, 0x79f5b553
jg 0x140001770
cmp ecx, 0x6f6dab31
je 0x140001d9b
cmp ecx, 0x761db6d8
jne 0x1400010e0
cmp dword [rsp + 0x50], 0
mov ecx, 0xa0a80bb5
mov eax, 0xee371a1d
cmove ecx, eax
jmp 0x1400010e0
cmp ecx, 0xc6fd1020
jle 0x1400015ca
cmp ecx, 0xd3864e31
jle 0x140001794
cmp ecx, 0xd3864e32
je 0x140001dae
cmp ecx, 0xdaff4479
jne 0x1400010e0
mov qword [rsp + 0xd0], r13
mov rax, qword [rsp + 0xd0]
mov rcx, qword [rax]
call fcn.140002260
mov ecx, dword [0x140024bb0]
mov edx, dword [0x140024bb4]
lea ebp, [rcx - 1]
imul ebp, ecx
not ebp
or ebp, 0xfffffffe
cmp ebp, 0xffffffff
sete cl
cmp edx, 0xa
setl bl
xor bl, cl
mov ebx, 0x6f6dab31
mov esi, 0x91c1859d
cmovne ebx, esi
cmp ebp, 0xffffffff
mov ecx, ebx
cmove ecx, esi
cmp edx, 0xa
cmovge ecx, ebx
test eax, eax
setne byte [rsp + 0x45]
jmp 0x1400010e0
cmp ecx, 0x4c8b523
je 0x140001db8
cmp ecx, 0xc3d0f35
je 0x140001dcf
cmp ecx, 0xf2dc8e0
jne 0x1400010e0
mov edx, dword [rsp + 0x80]
mov r8, qword [rsp + 0x48]
lea rcx, [0x1400240c0]
call fcn.1400021e0
mov ecx, 0x5e4b1dc0
mov dword [rsp + 0x58], 4
jmp 0x140001629
cmp ecx, 0x861e576c
je 0x140001de9
cmp ecx, 0x868ca30c
je 0x140001093
cmp ecx, 0x89c525c4
jne 0x1400010e0
lea rcx, str._6F__rw_tku_zrw
call fcn.1400021e0
mov ecx, 0xbef384a6
jmp 0x1400010e0
cmp ecx, 0x3dde9148
je 0x140001e3b
cmp ecx, 0x4069cacd
je 0x140001e6f
cmp ecx, 0x4e620b2a
jne 0x1400010e0
mov rax, qword [rsp + 0x48]
add rax, 1
mov qword [rsp + 0xc0], rax
mov ecx, 0x6c3b7312
jmp 0x1400010e0
cmp ecx, 0xe0ee629a
je 0x140001e8d
cmp ecx, 0xe24e3957
je 0x140001ec1
cmp ecx, 0xe31d5976
jne 0x1400010e0
mov ecx, 0xad71c025
jmp 0x1400010e0
cmp ecx, 0x20eeb448
je 0x140001ed8
cmp ecx, 0x25020bbc
je 0x140001eef
cmp ecx, 0x2b1ef0bd
jne 0x1400010e0
mov rcx, qword [rsp + 0x48]
call fcn.140007920
mov rcx, qword [rsp + 0x48]
add rax, rcx
add rax, 0xffffffffffffffff
jmp 0x140001e7b
cmp ecx, 0x9b2ce9b7
je 0x140001f08
cmp ecx, 0xa0a80bb5
je 0x140001f1f
cmp ecx, 0xa2ad1598
jne 0x1400010e0
mov ecx, 0xad71c025
jmp 0x1400010e0
cmp ecx, 0x5e4b1dc0
je 0x140001f29
cmp ecx, 0x6a4dd31f
je 0x140001f57
cmp ecx, 0x6c3b7312
jne 0x1400010e0
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
movzx ecx, byte [rax]
call fcn.140007860
test eax, eax
mov ecx, 0x4e620b2a
mov eax, 0x2b1ef0bd
cmove ecx, eax
jmp 0x1400010e0
cmp ecx, 0xb9956f07
je 0x140001f6d
cmp ecx, 0xbef384a6
je 0x140001f87
cmp ecx, 0xbf8bce80
jne 0x1400010e0
lea rcx, [0x1400240e3]
call fcn.1400021e0
mov ecx, 0x4c8b523
jmp 0x1400010e0
cmp ecx, 0x1ebf34b6
je 0x140001fa9
cmp ecx, 0x20b7efda
jne 0x1400010e0
mov ecx, 0x5e4b1dc0
mov dword [rsp + 0x58], 0
mov eax, dword [rsp + 0x60]
mov dword [rsp + 0x54], eax
jmp 0x1400010e0
cmp ecx, 0x90f0942f
je 0x140001fe9
cmp ecx, 0x91c1859d
jne 0x1400010e0
cmp byte [rsp + 0x45], 0
mov ecx, 0x8d88694f
mov eax, 0x1728c575
cmovne ecx, eax
jmp 0x1400010e0
cmp ecx, 0x59626e65
je 0x14000201b
cmp ecx, 0x5a26b155
jne 0x1400010e0
mov eax, dword [rsp + 0xb0]
add eax, 1
mov dword [rsp + 0x80], eax
mov ecx, 0x6c3b7312
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0xc0], rax
jmp 0x1400010e0
cmp ecx, 0xe9e35597
je 0x14000208e
cmp ecx, 0xee371a1d
jne 0x1400010e0
lea rcx, [0x140024010]
jmp 0x1400018ef
cmp ecx, 0x369d5aea
je 0x14000209c
cmp ecx, 0x3b99969d
jne 0x1400010e0
lea rcx, [0x140024030]
call fcn.1400021e0
mov eax, dword [0x140024bb0]
mov edx, dword [0x140024bb4]
lea ecx, [rax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
cmp edx, 0xa
setl bl
xor bl, al
mov eax, 0x6a4dd31f
mov ebp, 0xe31d5976
jmp 0x1400010c2
cmp ecx, 0xad71c025
je 0x140002168
cmp ecx, 0xb5ecfb8f
jne 0x1400010e0
mov eax, dword [0x140024bb0]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete al
mov ecx, 0x6a4dd31f
mov ebp, 0x3b99969d
cmove ecx, ebp
cmp dword [0x140024bb4], 0xa
mov edx, 0x6a4dd31f
jmp 0x140001fd9
cmp ecx, 0x79f5b554
je 0x14000217a
cmp ecx, 0x7e830d76
jne 0x1400010e0
mov ecx, dword [rsp + 0xac]
jmp 0x1400010e0
cmp ecx, 0xc6fd1021
jne 0x1400021a4
mov eax, dword [rsp + 0x50]
cmp eax, 2
mov ecx, 0xa0a80bb5
mov eax, 0x9093a74a
cmove ecx, eax
jmp 0x1400010e0
lea rsi, [rsp + 0x210]
mov qword [rsp + 0x98], rsi
mov rax, qword [rsp + 0x98]
mov rcx, qword [rsp + 0x98]
mov r8d, 0x104
xor edx, edx
call fcn.140003af0
mov qword [rsp + 0xd8], rsi
mov rax, qword [rsp + 0xc8]
mov r8, qword [rax]
mov rax, qword [rsp + 0xd8]
movups xmmword [rsp + 0x30], xmm6
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0x103
xor ecx, ecx
xor edx, edx
mov r9d, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea rcx, [rsp + 0x100]
mov qword [rsp + 0xe0], rcx
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x100], 0
mov qword [rsp + 0xa0], r15
mov rax, qword [rsp + 0xa0]
mov rax, qword [rsp + 0xa0]
movaps xmmword [rax + 0x10], xmm6
movaps xmmword [rax + 0x20], xmm6
movaps xmmword [rax + 0x30], xmm6
movaps xmmword [rax + 0x40], xmm6
movaps xmmword [rax + 0x50], xmm6
movaps xmmword [rax + 0x60], xmm6
movaps xmmword [rax + 0x70], xmm6
movaps xmmword [rax + 0x80], xmm6
movaps xmmword [rax + 0x90], xmm6
movaps xmmword [rax + 0xa0], xmm6
movaps xmmword [rax + 0xb0], xmm6
movaps xmmword [rax + 0xc0], xmm6
movaps xmmword [rax + 0xd0], xmm6
movaps xmmword [rax + 0xe0], xmm6
movaps xmmword [rax + 0xf0], xmm6
movaps xmmword [rax], xmm6
mov rax, qword [rsp + 0xd0]
mov rdx, qword [rax]
lea r8, [0x14001ee8e]
call fcn.1400074a0
cmp qword [rsp + 0x100], 0
mov ecx, 0x4e97afa3
mov eax, 0x89c525c4
cmove ecx, eax
jmp 0x1400010e0
lea rcx, [0x140024070]
call fcn.1400021e0
mov ecx, 0xad71c025
jmp 0x1400010e0
mov eax, dword [0x140024bb0]
mov edx, dword [0x140024bb4]
lea ecx, [rax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
cmp edx, 0xa
setl bl
xor bl, al
mov eax, 0xab660d2f
mov ebp, 0x1c957b86
jmp 0x1400010c2
mov eax, dword [rsp + 0x5c]
cmp eax, 0x775
sete byte [rsp + 0x46]
mov eax, dword [0x140024bb0]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete al
mov ecx, 0xe9e35597
mov ebp, 0x9b2ce9b7
jmp 0x140001eae
cmp dword [rsp + 0x74], 0
mov ecx, 0x4c8b523
mov eax, 0xbf8bce80
cmove ecx, eax
jmp 0x1400010e0
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0xc8], rax
mov rax, qword [rsp + 0xc8]
mov rdx, qword [rax]
mov qword [rsp + 0x68], rdi
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x108], 0
xor ecx, ecx
mov r8d, 1
mov rsi, rdi
mov r9, rdi
call sub.NETAPI32.dll_NetUserGetInfo
mov dword [rsp + 0xb4], eax
mov eax, 0x4fcd0b1f
jmp 0x1400019e0
cmp ecx, 0xa
cmovl eax, ebp
setl cl
xor bl, cl
cmovne eax, edx
nop dword [rax]
cmp eax, 0xe431cf4d
jg 0x140001a60
cmp eax, 0xbaa33d10
jle 0x140001ad0
cmp eax, 0xceb97011
jle 0x140001b42
cmp eax, 0xceb97012
je 0x140001c42
cmp eax, 0xd6ef8599
je 0x140001c7f
cmp eax, 0xdaee2324
jne 0x1400019e0
mov eax, dword [0x140024bb8]
mov ecx, dword [0x140024bbc]
lea ebx, [rax - 1]
imul ebx, eax
not ebx
or ebx, 0xfffffffe
mov edx, 0xbaa33d11
mov eax, 0xfad46cf1
mov ebp, 0xbaa33d11
cmp ebx, 0xffffffff
sete bl
je 0x1400019ce
mov ebp, 0xfad46cf1
jmp 0x1400019ce
cmp eax, 0x2bbf9ec
jle 0x140001b10
cmp eax, 0x4eb4a92c
jg 0x140001b94
cmp eax, 0x2bbf9ed
je 0x140001c99
cmp eax, 0x2fbcb41d
jne 0x140001d6c
mov dword [rsp + 0x64], r14d
mov eax, dword [0x140024bb8]
mov ecx, dword [0x140024bbc]
lea ebx, [rax - 1]
imul ebx, eax
not ebx
or ebx, 0xfffffffe
mov edx, 0xdaee2324
mov eax, 0xfad46cf1
mov ebp, 0xdaee2324
cmp ebx, 0xffffffff
sete bl
je 0x140001c0f
mov ebp, 0xfad46cf1
jmp 0x140001c0f
cmp eax, 0x9f3694e3
jg 0x140001bc7
cmp eax, 0x8082544d
je 0x140001cde
cmp eax, 0x904b0596
jne 0x1400019e0
mov eax, 0x2fbcb41d
mov r14d, 1
jmp 0x1400019e0
cmp eax, 0xf063d677
jg 0x140001c22
cmp eax, 0xe431cf4e
je 0x140001d26
cmp eax, 0xeb77fae8
jne 0x1400019e0
mov eax, dword [rsp + 0x84]
mov eax, 0x8082544d
jmp 0x1400019e0
cmp eax, 0xbaa33d11
je 0x140001d30
cmp eax, 0xc625a25d
jne 0x1400019e0
mov eax, dword [0x140024bb8]
mov ecx, dword [0x140024bbc]
lea ebx, [rax - 1]
imul ebx, eax
not ebx
or ebx, 0xfffffffe
mov edx, 0x2bbf9ed
mov eax, 0xe431cf4e
mov ebp, 0x2bbf9ed
cmp ebx, 0xffffffff
sete bl
je 0x1400019ce
mov ebp, 0xe431cf4e
jmp 0x1400019ce
cmp eax, 0x4eb4a92d
je 0x140001d3f
cmp eax, 0x4fcd0b1f
jne 0x1400019e0
cmp dword [rsp + 0xb4], 0
mov eax, 0xceb97012
je 0x1400019e0
mov eax, 0x4eb4a92d
jmp 0x1400019e0
cmp eax, 0x9f3694e4
je 0x140001d4c
cmp eax, 0xa0ecc784
jne 0x1400019e0
mov eax, dword [0x140024bb8]
mov ecx, dword [0x140024bbc]
lea ebx, [rax - 1]
imul ebx, eax
mov edi, ebx
xor edi, 0xfffffffe
mov edx, 0x8082544d
mov eax, 0xeb77fae8
mov ebp, 0x8082544d
test edi, ebx
sete bl
je 0x140001c0f
mov ebp, 0xeb77fae8
cmp ecx, 0xa
cmovl eax, ebp
setl cl
xor cl, bl
cmovne eax, edx
jmp 0x1400019e0
cmp eax, 0xf063d678
je 0x140001d5c
cmp eax, 0xfad46cf1
jne 0x1400019e0
mov eax, 0xdaee2324
jmp 0x1400019e0
mov rcx, qword [rsp + 0x108]
mov eax, dword [rcx + 0x28]
mov edx, eax
xor edx, 0xffffffef
and edx, eax
mov edi, eax
not edi
or edi, 0xfffffffd
mov dword [rsp + 0x84], edx
call sub.NETAPI32.dll_NetApiBufferFree
mov eax, 0xa0ecc784
cmp edi, 0xffffffff
je 0x1400019e0
mov eax, 0x904b0596
jmp 0x1400019e0
cmp byte [rsp + 0x47], 0
mov eax, 0xc625a25d
jne 0x1400019e0
mov eax, 0xf063d678
jmp 0x1400019e0
mov eax, dword [0x140024bb8]
mov ecx, dword [0x140024bbc]
lea edx, [rax - 1]
imul edx, eax
mov ebp, edx
xor ebp, 0xfffffffe
test ebp, edx
sete al
cmp ecx, 0xa
setl bl
xor bl, al
mov eax, 0x9f3694e4
mov edi, 0x9f3694e4
jne 0x140001cce
mov edi, 0xe431cf4e
test ebp, edx
cmovne eax, edi
cmp ecx, 0xa
cmovge eax, edi
jmp 0x1400019e0
cmp dword [rsp + 0x84], 0
setne byte [rsp + 0x47]
mov eax, dword [0x140024bb8]
mov ecx, dword [0x140024bbc]
lea ebx, [rax - 1]
imul ebx, eax
mov edi, ebx
xor edi, 0xfffffffe
mov edx, 0xd6ef8599
mov eax, 0xeb77fae8
mov ebp, 0xd6ef8599
test edi, ebx
sete bl
je 0x1400019ce
mov ebp, 0xeb77fae8
jmp 0x1400019ce
mov eax, 0x2bbf9ed
jmp 0x1400019e0
mov eax, 0x2d563beb
mov r12d, dword [rsp + 0x64]
jmp 0x1400019e0
mov eax, 0x2d563beb
xor r12d, r12d
jmp 0x1400019e0
mov eax, 0x2fbcb41d
mov r14d, 2
jmp 0x1400019e0
mov eax, 0x2fbcb41d
mov r14d, 3
jmp 0x1400019e0
cmp eax, 0x2d563beb
jne 0x1400019e0
mov rax, qword [rsp + 0x68]
mov dword [rsp + 0x50], r12d
mov ecx, 0x20eeb448
mov rdi, rsi
mov r14d, 0xe9e35597
lea r12, [0x1400240a6]
jmp 0x1400010e0
mov rcx, qword [r13]
call fcn.140002260
mov ecx, 0xdaff4479
jmp 0x1400010e0
mov ecx, 0xd193630f
jmp 0x1400010e0
mov rcx, qword [rsp + 0x100]
call fcn.1400075c4
mov ecx, 0xbef384a6
jmp 0x1400010e0
mov ecx, 0x5e4b1dc0
mov dword [rsp + 0x58], 4
mov dword [rsp + 0x54], 1
jmp 0x1400010e0
mov eax, dword [rsp + 0x7c]
mov dword [rsp + 0x60], eax
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0xb0], eax
mov r8, qword [rsp + 0x100]
mov qword [rsp + 0xe8], r15
mov rcx, qword [rsp + 0xe8]
mov edx, 0x100
call fcn.140007780
test rax, rax
mov ecx, 0x5a26b155
mov eax, 0x2f6967d2
cmove ecx, eax
mov eax, dword [rsp + 0x60]
mov dword [rsp + 0x74], eax
jmp 0x1400010e0
mov eax, dword [0x140024bb0]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete al
mov ecx, 0x6f6dab31
mov ebp, 0xdaff4479
cmove ecx, ebp
cmp dword [0x140024bb4], 0xa
mov edx, 0x6f6dab31
jmp 0x140001fd9
mov rax, qword [rsp + 0x88]
add rax, 0xffffffffffffffff
mov qword [rsp + 0xb8], rax
mov ecx, 0x90f0942f
jmp 0x1400010e0
mov eax, dword [0x140024bb0]
lea ecx, [rax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
mov ecx, 0xe9e35597
mov ebp, 0xe4f2beed
cmove ecx, ebp
cmp dword [0x140024bb4], 0xa
cmovge ecx, r14d
jmp 0x140001fdc
mov rdx, qword [rsp + 0x48]
mov rcx, r12
call fcn.1400021e0
mov ecx, 0xe979cae7
jmp 0x1400010e0
cmp dword [rsp + 0x50], 0
mov ecx, 0x25020bbc
mov eax, 0x761db6d8
cmovle ecx, eax
jmp 0x1400010e0
mov eax, dword [rsp + 0x50]
cmp eax, 2
mov ecx, 0xc6fd1021
mov eax, 0xb5ecfb8f
cmovl ecx, eax
jmp 0x1400010e0
cmp byte [rsp + 0x46], 0
mov ecx, 0x20b7efda
mov eax, 0xf2dc8e0
cmovne ecx, eax
jmp 0x1400010e0
mov ecx, 0x3dde9148
jmp 0x1400010e0
cmp dword [rsp + 0x58], 0
mov ecx, 0x2f6967d2
mov eax, 0x861e576c
cmove ecx, eax
mov eax, dword [rsp + 0x80]
mov dword [rsp + 0x78], eax
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x74], eax
mov dword [rsp + 0x7c], eax
jmp 0x1400010e0
lea rcx, [0x140024030]
call fcn.1400021e0
mov ecx, 0x3b99969d
jmp 0x1400010e0
mov ecx, 0x861e576c
mov dword [rsp + 0x7c], 0
mov dword [rsp + 0x78], 0
jmp 0x1400010e0
mov rax, qword [rsp + 0xa0]
mov rax, qword [rsp + 0xe0]
mov rax, qword [rsp + 0x98]
mov ecx, 0xad71c025
jmp 0x1400010e0
mov eax, dword [0x140024bb0]
lea ecx, [rax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
mov ecx, 0x79f5b554
mov ebp, 0xd3864e32
cmove ecx, ebp
cmp dword [0x140024bb4], 0xa
mov edx, 0x79f5b554
cmovge ecx, edx
setl dl
xor dl, al
cmovne ecx, ebp
jmp 0x1400010e0
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x88]
cmp rcx, rax
mov ecx, 0x369d5aea
mov eax, 0x33fd9e38
cmova ecx, eax
jmp 0x1400010e0
lea rsi, [rsp + 0x320]
mov qword [rsp + 0x90], rsi
mov rax, qword [rsp + 0x90]
mov rax, qword [rsp + 0x90]
movaps xmmword [rax + 0x10], xmm6
movaps xmmword [rax], xmm6
mov qword [rsp + 0x20], rsi
mov dword [rsp + 0x28], 0xf
xor ecx, ecx
xor edx, edx
lea r8, section..data
mov r9d, 0xffffffff
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov rax, qword [rsp + 0xf8]
mov rdx, qword [rax + 8]
mov rcx, rsi
call fcn.1400079f4
test eax, eax
mov ecx, 0xa2ad1598
mov eax, 0xa84d4823
cmove ecx, eax
jmp 0x1400010e0
mov eax, dword [rsp + 0x5c]
mov ecx, 0xe4f2beed
jmp 0x1400010e0
mov rax, qword [rsp + 0x88]
mov byte [rax + 1], 0
mov rcx, qword [rsp + 0xd8]
mov r8, qword [rsp + 0x48]
mov qword [rsp + 0x68], rdi
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x108], 0
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0
lea rdx, [0x1400240ef]
mov r9d, 2
call qword [sym.imp.ADVAPI32.dll_LogonUserA]
mov dword [rsp + 0x64], eax
mov ebx, 0x7c3ec7a
nop word cs:[rax + rax]
nop
cmp ebx, 0x651ed1c9
jle 0x140002120
cmp ebx, 0x651ed1ca
je 0x140002144
cmp ebx, 0x77b09844
jne 0x140002100
jmp 0x140002184
cmp ebx, 0xd3525692
je 0x14000215b
cmp ebx, 0x7c3ec7a
jne 0x140002100
cmp dword [rsp + 0x64], 0
mov ebx, 0x651ed1ca
mov ecx, 0xd3525692
cmove ebx, ecx
jmp 0x140002100
mov rcx, qword [rsp + 0x108]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, 0x77b09844
xor eax, eax
jmp 0x140002100
mov ebx, 0x77b09844
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x140002100
mov rax, qword [rsp + 0x90]
mov ecx, 0xd193630f
jmp 0x1400010e0
mov ecx, 0x1ebf34b6
jmp 0x1400010e0
mov rcx, qword [rsp + 0x68]
mov dword [rsp + 0x5c], eax
cmp dword [rsp + 0x5c], 0
mov ecx, 0xe0ee629a
mov eax, 0x5693ea0b
cmove ecx, eax
jmp 0x1400010e0
cmp ecx, 0xd193630f
jne 0x1400010e0
mov rcx, qword [rsp + 0x348]
xor rcx, rsp
call fcn.140002b10
xor eax, eax
movaps xmm6, xmmword [rsp + 0x350]
add rsp, 0x368
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret