Function at 0x140004240
Capabilities:
Compare security identifiers

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x448]
sub rsp, 0x548
mov rax, qword [0x140056fb0]
xor rax, rsp
mov qword [rbp + 0x430], rax
mov rax, qword [rbp + 0x4b0]
xor esi, esi
mov rdi, r8
mov r13, r9
mov qword [rbp - 0x78], r8
mov qword [rbp - 0x68], rdx
mov r15, rcx
mov qword [rbp - 0x28], rcx
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x58]
lea rdx, [rbp - 0x30]
mov rcx, rdi
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x60], rsi
mov dword [rbp - 0x60], esi
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x68], rsi
mov qword [rbp - 0x80], rsi
mov qword [rbp - 0x48], rsi
mov r12d, esi
mov r14d, esi
mov ebx, esi
call qword [sym.imp.ADVAPI32.dll_GetSecurityDescriptorDacl]
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x140004402
mov edi, esi
cmp si, word [rcx + 4]
jae 0x1400043fe
nop word [rax + rax]
lea r8, [rsp + 0x50]
mov edx, edi
call qword [sym.imp.ADVAPI32.dll_GetAce]
mov rdx, qword [rsp + 0x50]
movzx eax, byte [rdx]
cmp eax, 0xc
ja case.0x14000431c.2
lea r8, [0x140000000]
mov ecx, dword [r8 + rax*4 + 0x4e9c]
add rcx, r8
jmp rcx
movzx ebx, byte [rdx + 1]
and ebx, 0x10
or ebx, 8
shr ebx, 3
jmp case.0x14000431c.2
movzx ebx, byte [rdx + 1]
shr ebx, 3
and ebx, 2
cmp ebx, r14d
jl 0x140004353
mov rcx, qword [rsp + 0x58]
inc edi
mov r14d, ebx
movzx eax, word [rcx + 4]
cmp edi, eax
jl 0x1400042f0
jmp 0x1400043fe
cmp byte [0x140058b13], sil
jne 0x1400043f9
lea rcx, str.Error:__s_has_a_non_canonical_DACL:_n
mov rdx, r15
call fcn.14000adf8
test ebx, ebx
je 0x14000439a
dec ebx
je 0x140004391
dec ebx
je 0x140004388
dec ebx
jne 0x1400043a6
lea rcx, str.Inherited_Allow
jmp 0x1400043a1
lea rcx, str.Inherited_Deny
jmp 0x1400043a1
lea rcx, str.Explicit_Allow
jmp 0x1400043a1
lea rcx, str.Explicit_Deny
call fcn.14000adf8
lea rcx, str._after
call fcn.14000adf8
test r14d, r14d
je 0x1400043e1
dec r14d
je 0x1400043d8
dec r14d
je 0x1400043cf
dec r14d
jne 0x1400043ed
lea rcx, str.Inherited_Allow
jmp 0x1400043e8
lea rcx, str.Inherited_Deny
jmp 0x1400043e8
lea rcx, str.Explicit_Allow
jmp 0x1400043e8
lea rcx, str.Explicit_Deny
call fcn.14000adf8
lea rcx, [0x140026700]
call fcn.14000adf8
mov rcx, qword [rsp + 0x58]
mov rdi, qword [rbp - 0x78]
mov rdx, qword [0x140058b30]
test rdx, rdx
je 0x1400045d1
mov r8, qword [0x140058b08]
test r8, r8
je 0x14000455b
mov rbx, qword [rbp - 0x48]
lea rax, [rbp - 0x38]
xor r9d, r9d
mov qword [rsp + 0x30], rax
xor ecx, ecx
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rbx
call qword [0x140058ab0]
test eax, eax
jne 0x14000447e
mov r8, qword [0x140058b08]
mov rdx, qword [0x140058b30]
xor r9d, r9d
lea rax, [rbp - 0x38]
lea ecx, [r9 + 2]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rbx
call qword [0x140058ab0]
test eax, eax
je 0x140004b6e
mov rax, qword [0x140058b30]
mov rdx, qword [rbp - 0x38]
mov qword [rsp + 0x40], rsi
mov qword [rbp - 0x10], rax
lea rax, [rbp - 0x60]
lea r8, [rbp - 0x18]
mov qword [rbp + 0x18], rax
lea rax, [rbp - 0x70]
mov r14d, 1
mov qword [rbp + 0x28], rax
lea rax, [rbp + 0x10]
xor r9d, r9d
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], esi
xor ecx, ecx
mov qword [rsp + 0x28], rsi
mov dword [rbp - 0x18], 0x2000000
mov qword [rbp - 8], rsi
mov qword [rsp + 0x20], rdi
mov dword [rbp], esi
mov qword [rbp + 8], rsi
mov dword [rbp + 0x10], r14d
call qword [0x140058aa8]
test eax, eax
je 0x140004527
mov eax, dword [rbp - 0x60]
mov r9, qword [rbp - 0x68]
mov r8, qword [rsp + 0x78]
mov dword [rsp + 0x30], eax
mov rax, qword [0x140058b30]
lea rcx, [0x1400265f0]
mov qword [rsp + 0x28], rax
mov rdx, r15
mov qword [rsp + 0x20], rdi
call fcn.140005200
mov rcx, qword [rbp - 0x38]
call qword [0x140058ab8]
jmp 0x140004b6e
cmp byte [0x140058b13], sil
jne 0x14000454c
lea rcx, str._s_n___Error_getting_security:_n
mov rdx, r15
call fcn.14000adf8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.140005190
mov rcx, qword [rbp - 0x38]
call qword [0x140058ab8]
jmp 0x140004b6e
lea r8, [rbp - 0x60]
lea rdx, [0x140058ad0]
call qword [sym.imp.ADVAPI32.dll_GetEffectiveRightsFromAclW]
mov dword [rbp - 0x70], eax
test eax, eax
je 0x14000459c
cmp byte [0x140058b13], sil
jne 0x140004b6e
lea rcx, str._s_n___Error_getting_effective_access_for:_n
mov rdx, r15
call fcn.14000adf8
mov ecx, dword [rbp - 0x70]
call fcn.140005190
jmp 0x140004b6e
mov eax, dword [rbp - 0x60]
mov r9, qword [rbp - 0x68]
mov r8, qword [rsp + 0x78]
mov dword [rsp + 0x30], eax
mov rax, qword [0x140058b30]
lea rcx, [0x1400265f0]
mov qword [rsp + 0x28], rax
mov rdx, r15
mov qword [rsp + 0x20], rdi
call fcn.140005200
jmp 0x140004b6e
cmp byte [0x140058b10], sil
mov r14d, 1
jne 0x1400045f3
cmp byte [0x140058b2b], sil
jne 0x1400045f3
mov rbx, qword [rsp + 0x68]
jmp 0x1400046a3
lea r9, [rbp - 0x40]
lea r8, [rsp + 0x68]
lea rdx, [rbp - 0x30]
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_GetSecurityDescriptorSacl]
cmp byte [0x140058af2], sil
mov rbx, qword [rsp + 0x68]
sete r15b
mov dword [rbp - 0x48], 0x100
mov r12d, r14d
mov rcx, rsi
lea rdx, [0x140000000]
nop dword [rax]
movzx eax, word [rcx + rdx + 0x26000]
lea rcx, [rcx + 2]
mov word [rbp + rcx + 0x2e], ax
test ax, ax
jne 0x140004630
test rbx, rbx
je 0x140004691
mov edi, esi
cmp si, word [rbx + 4]
jae 0x140004691
nop dword [rax]
nop word [rax + rax]
lea r8, [rbp - 0x58]
mov edx, edi
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_GetAce]
mov rcx, qword [rbp - 0x58]
cmp byte [rcx], 0x11
jne 0x140004682
test byte [rcx + 1], 8
je 0x14000473c
movzx eax, word [rbx + 4]
inc edi
cmp edi, eax
jl 0x140004660
mov rbx, qword [rsp + 0x68]
test r15b, r15b
je 0x140004b6e
mov r15, qword [rbp - 0x28]
mov rcx, qword [rsp + 0x58]
cmp byte [0x140058af3], sil
je 0x140004763
test rbx, rbx
je 0x1400046f3
mov edi, esi
cmp si, word [rbx + 4]
jae 0x1400046f3
nop dword [rax]
lea r8, [rsp + 0x50]
mov edx, edi
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_GetAce]
mov rax, qword [rsp + 0x50]
test byte [rax + 1], 0x10
je 0x140004763
mov rbx, qword [rsp + 0x68]
inc edi
movzx eax, word [rbx + 4]
cmp edi, eax
jl 0x1400046c0
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x140004b6e
mov ebx, esi
cmp si, word [rcx + 4]
jae 0x140004b6e
nop dword [rax + rax]
lea r8, [rsp + 0x50]
mov edx, ebx
call qword [sym.imp.ADVAPI32.dll_GetAce]
mov rax, qword [rsp + 0x50]
test byte [rax + 1], 0x10
je 0x140004763
mov rcx, qword [rsp + 0x58]
inc ebx
movzx eax, word [rcx + 4]
cmp ebx, eax
jl 0x140004710
jmp 0x140004b6e
lea r8, [rbp - 0x48]
lea rdx, [rbp + 0x30]
add rcx, 8
call fcn.140002fd0
mov rax, qword [rbp - 0x58]
mov rbx, qword [rsp + 0x68]
mov r12d, dword [rax + 4]
and r12d, 7
jmp 0x14000469a
mov rdi, qword [rbp - 0x78]
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x80]
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_GetSecurityDescriptorOwner]
lea rcx, [0x140026770]
mov rdx, r15
call fcn.14000adf8
mov rbx, qword [rsp + 0x78]
test rbx, rbx
je 0x1400047a0
lea rcx, str.__Type:__s_n
mov rdx, rbx
call fcn.14000adf8
cmp byte [0x140058b10], sil
je 0x140004836
cmp byte [0x140058b29], sil
jne 0x140004836
lea rdx, [rbp + 0x30]
lea rcx, str.___s
call fcn.14000adf8
test r12d, r12d
je 0x1400047f1
lea rdx, [rbp + 0x230]
mov ecx, r12d
call fcn.1400031a0
lea rdx, [rbp + 0x230]
lea rcx, [0x140025e30]
call fcn.14000adf8
test r13, r13
je 0x14000482a
lea r9, [rbp + 0x30]
mov rax, r13
sub r9, r13
movzx r8d, word [rax]
movzx ecx, word [rax + r9]
sub r8d, ecx
jne 0x140004816
add rax, 2
test ecx, ecx
jne 0x140004800
test r8d, r8d
je 0x14000482a
lea rcx, str.__Running_at__s_
mov rdx, r13
call fcn.14000adf8
lea rcx, [0x140026700]
call fcn.14000adf8
mov rcx, qword [rsp + 0x58]
test rcx, rcx
jne 0x1400048a4
cmp byte [0x140035190], sil
jne 0x140004856
cmp byte [0x140035191], sil
je 0x140004b6e
cmp qword [0x140058b30], rsi
je 0x14000486b
mov rdx, r15
lea rcx, str.RW__s_n
jmp 0x140004879
lea rdx, str.Everyone
lea rcx, str.__RW__s_n
call fcn.14000adf8
inc dword [0x140058b14]
cmp byte [0x140058b28], sil
je 0x140004b6e
mov rax, qword [rbp - 0x68]
mov rcx, rax
mov edx, dword [rax]
call fcn.140005450
jmp 0x140004b6e
cmp byte [0x140058b29], sil
je 0x140004b91
cmp byte [0x140058ac9], sil
je 0x14000493f
mov rax, qword [rsp + 0x68]
inc dword [0x140058b14]
lea r9, [rbp - 0x58]
neg rax
mov edx, r14d
mov rcx, rdi
sbb r8d, r8d
mov qword [rsp + 0x20], rsi
and r8d, 8
or r8d, 0x95
call sub.ADVAPI32.dll_ConvertSecurityDescriptorToStringSecurityDescriptorW
test eax, eax
je 0x140004911
mov rdx, qword [rbp - 0x58]
lea rcx, str.___s_n
call fcn.14000adf8
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x140004b6e
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.__Error_resolving_SDDL_for__s:_n
xor edx, edx
mov dword [rbp - 0x70], eax
call fcn.14000adf8
mov ecx, dword [rbp - 0x70]
call fcn.140005190
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x140004b6e
lea rcx, str.__DESCRIPTOR_FLAGS:_n
call fcn.14000adf8
lea r8, [rbp - 0x1c]
lea rdx, [rbp - 0x5c]
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_GetSecurityDescriptorControl]
test eax, eax
je 0x140004970
movzx edx, word [rbp - 0x5c]
lea rcx, [0x1400265e0]
call fcn.140005120
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x14000499c
lea rdx, [rsp + 0x70]
xor r8d, r8d
call fcn.140002ba0
mov r12, qword [rsp + 0x70]
lea rcx, str.__OWNER:__s_n
mov rdx, r12
call fcn.14000adf8
jmp 0x1400049a1
mov r12, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x140004aa7
mov ebx, esi
cmp si, word [rcx + 4]
jae 0x140004aa7
nop dword [rax + rax]
lea r8, [rsp + 0x50]
mov edx, ebx
call qword [sym.imp.ADVAPI32.dll_GetAce]
mov rcx, qword [rsp + 0x50]
cmp byte [rcx], 0x11
je 0x1400049eb
mov rcx, qword [rsp + 0x68]
inc ebx
movzx eax, word [rcx + 4]
cmp ebx, eax
jl 0x1400049c0
jmp 0x140004aa7
lea r8, [rbp - 0x3c]
lea rdx, [rbp + 0x30]
add rcx, 8
mov dword [rbp - 0x3c], 0x100
call fcn.140002fd0
mov rax, qword [rsp + 0x50]
mov edi, dword [rax + 4]
lea rdx, [rbp + 0x30]
lea rcx, str.__LABEL:__s_n
and edi, 7
call fcn.14000adf8
mov rax, qword [rsp + 0x50]
movzx ecx, byte [rax + 1]
test cl, cl
je 0x140004a68
mov ebx, esi
movzx r15d, cl
lea r13, str.OBJECT_INHERIT_ACE
test r14d, r15d
je 0x140004a5a
mov r8d, ebx
lea rdx, [0x1400265c8]
lea rcx, str._s__s__n
shl r8, 6
add r8, r13
call fcn.14000adf8
rol r14d, 1
inc ebx
cmp ebx, 8
jb 0x140004a38
mov r15, qword [rbp - 0x28]
test dil, 1
je 0x140004a7a
lea rcx, str.________SYSTEM_MANDATORY_LABEL_NO_WRITE_UP_n
call fcn.14000adf8
test dil, 2
je 0x140004a8c
lea rcx, str.________SYSTEM_MANDATORY_LABEL_NO_READ_UP_n
call fcn.14000adf8
test dil, 4
je 0x140004a9e
lea rcx, str.________SYSTEM_MANDATORY_LABEL_NO_EXECUTE_UP_n
call fcn.14000adf8
mov rdi, qword [rbp - 0x78]
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x58]
mov r14, qword [rbp - 0x68]
mov ebx, esi
cmp si, word [rdx + 4]
jae 0x140004ae9
nop dword [rax + rax]
mov r9, rdx
mov r8, rdi
mov rcx, r15
mov rdx, r14
mov dword [rsp + 0x20], ebx
call fcn.140004ed0
mov rdx, qword [rsp + 0x58]
inc ebx
movzx eax, word [rdx + 4]
cmp ebx, eax
jl 0x140004ac0
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x140004b4f
movzx eax, word [rcx + 4]
test ax, ax
je 0x140004b4f
xor bl, bl
cmp si, ax
jae 0x140004b4f
nop
lea r8, [rsp + 0x50]
mov edx, esi
call qword [sym.imp.ADVAPI32.dll_GetAce]
mov rax, qword [rsp + 0x50]
cmp byte [rax], 0x11
je 0x140004b40
test bl, bl
jne 0x140004b29
lea rcx, str.__SACL:_n
call fcn.14000adf8
mov bl, 1
mov r9, qword [rsp + 0x68]
mov r8, rdi
mov rdx, r14
mov rcx, r15
mov dword [rsp + 0x20], esi
call fcn.140004ed0
mov rcx, qword [rsp + 0x68]
inc esi
movzx eax, word [rcx + 4]
cmp esi, eax
jl 0x140004b00
mov r13, qword [rsp + 0x60]
test r12, r12
je 0x140004b61
mov rcx, r12
call fcn.14000ac3c
test r13, r13
je 0x140004b6e
mov rcx, r13
call fcn.14000ac3c
mov rcx, qword [rbp + 0x430]
xor rcx, rsp
call fcn.14000b260
add rsp, 0x548
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
cmp qword [0x140058b08], rsi
mov r14, qword [rbp - 0x78]
mov edi, esi
je 0x140004d0c
mov r12, qword [rsp + 0x70]
mov r13, qword [rsp + 0x60]
cmp si, word [rcx + 4]
jae 0x140004cb3
nop dword [rax + rax]
lea r8, [rsp + 0x50]
mov edx, edi
call qword [sym.imp.ADVAPI32.dll_GetAce]
mov ebx, esi
test edi, edi
jle 0x140004c1a
mov rcx, qword [rsp + 0x58]
lea r8, [rbp - 0x50]
mov edx, ebx
call qword [sym.imp.ADVAPI32.dll_GetAce]
mov rdx, qword [rbp - 0x50]
cmp byte [rdx], sil
jne 0x140004c14
test byte [rdx + 1], 8
jne 0x140004c14
mov rcx, qword [rsp + 0x50]
add rdx, 8
add rcx, 8
call qword [sym.imp.ADVAPI32.dll_EqualSid]
test eax, eax
je 0x140004c14
mov rax, qword [rbp - 0x50]
test byte [rax + 1], 8
je 0x140004c1a
inc ebx
cmp ebx, edi
jl 0x140004bd3
cmp edi, ebx
jne 0x140004c9b
mov rax, qword [rsp + 0x50]
cmp byte [rax], sil
jne 0x140004c9b
test byte [rax + 1], 8
jne 0x140004c9b
mov rdx, qword [rbp - 0x80]
lea rbx, [rax + 8]
test rdx, rdx
je 0x140004c52
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_EqualSid]
mov rcx, qword [rbp - 0x80]
test eax, eax
cmovne rcx, rsi
mov qword [rbp - 0x80], rcx
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x70]
mov rcx, rbx
call fcn.140002ba0
mov r13, qword [rsp + 0x60]
mov r12, qword [rsp + 0x70]
mov rdx, r13
mov rcx, r12
call fcn.140003c30
test al, al
jne 0x140004c9b
mov r8, qword [rbp - 0x68]
mov qword [rsp + 0x20], rbx
mov rbx, qword [rsp + 0x78]
mov rdx, rbx
mov r9, r14
mov rcx, r15
call fcn.140002670
jmp 0x140004ca0
mov rbx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x58]
inc edi
movzx eax, word [rcx + 4]
cmp edi, eax
jl 0x140004bc0
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x140004b54
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x70]
call fcn.140002ba0
mov r13, qword [rsp + 0x60]
mov r12, qword [rsp + 0x70]
mov rdx, r13
mov rcx, r12
call fcn.140003c30
test al, al
jne 0x140004b54
mov rax, qword [rbp - 0x80]
mov r8, qword [rbp - 0x68]
mov r9, r14
mov rdx, rbx
mov rcx, r15
mov qword [rsp + 0x20], rax
call fcn.140002670
jmp 0x140004b54
cmp si, word [rcx + 4]
jae 0x140004e37
nop word [rax + rax]
lea r8, [rsp + 0x50]
mov edx, edi
call qword [sym.imp.ADVAPI32.dll_GetAce]
mov ebx, esi
test edi, edi
jle 0x140004d7a
mov rcx, qword [rsp + 0x58]
lea r8, [rbp - 0x50]
mov edx, ebx
call qword [sym.imp.ADVAPI32.dll_GetAce]
mov rdx, qword [rbp - 0x50]
cmp byte [rdx], sil
jne 0x140004d74
test byte [rdx + 1], 8
jne 0x140004d74
mov rcx, qword [rsp + 0x50]
add rdx, 8
add rcx, 8
call qword [sym.imp.ADVAPI32.dll_EqualSid]
test eax, eax
je 0x140004d74
mov rax, qword [rbp - 0x50]
test byte [rax + 1], 8
je 0x140004d7a
inc ebx
cmp ebx, edi
jl 0x140004d33
cmp edi, ebx
jne 0x140004e1f
mov rax, qword [rsp + 0x50]
lea rbx, [rax + 8]
cmp byte [rax], sil
jne 0x140004d96
test byte [rax + 1], 8
je 0x140004da8
mov edx, 0x16
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_IsWellKnownSid]
test eax, eax
je 0x140004e1f
mov rdx, qword [rbp - 0x80]
test rdx, rdx
je 0x140004dc8
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_EqualSid]
mov rcx, qword [rbp - 0x80]
test eax, eax
cmovne rcx, rsi
mov qword [rbp - 0x80], rcx
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x70]
mov rcx, rbx
call fcn.140002ba0
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x70]
call fcn.140003c30
test al, al
jne 0x140004e1f
mov rax, qword [rsp + 0x50]
mov r8, qword [rbp - 0x68]
mov qword [rsp + 0x30], rbx
mov rbx, qword [rsp + 0x78]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x58]
mov r9, r14
mov rdx, rbx
mov rcx, r15
mov qword [rsp + 0x20], rax
call fcn.140002920
jmp 0x140004e24
mov rbx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x58]
inc edi
movzx eax, word [rcx + 4]
cmp edi, eax
jl 0x140004d20
mov rcx, qword [rbp - 0x80]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x70]
call fcn.140002ba0
mov r13, qword [rsp + 0x60]
mov r12, qword [rsp + 0x70]
mov rdx, r13
mov rcx, r12
call fcn.140003c30
test al, al
jne 0x140004b54
mov rax, qword [rbp - 0x80]
mov r8, qword [rbp - 0x68]
mov r9, r14
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x50]
mov rdx, rbx
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x58]
mov rcx, r15
mov qword [rsp + 0x20], rax
call fcn.140002920
jmp 0x140004b54