Function at 0x14001dcf0
Capabilities:
Compare security identifiers

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x158
movaps xmmword [rsp + 0x140], xmm7
movaps xmmword [rsp + 0x130], xmm6
mov rdi, r8
mov r12, rdx
mov r13, rcx
mov rax, qword [0x14013a028]
xor rax, rsp
mov qword [rsp + 0x128], rax
movaps xmm6, xmmword [0x140119af0]
movaps xmmword [rsp + 0x100], xmm6
xor esi, esi
mov byte [rsp + 0x100], sil
mov byte [rsp + 0x108], sil
lea rdx, [rcx + 0x18]
movabs rbx, 0xaaaaaaaaaaaaaaaa
lea rcx, [rsp + 0xe0]
mov qword [rcx + 0x10], rbx
movaps xmmword [rcx], xmm6
call fcn.14001d810
cmp byte [r13 + 0x80], sil
mov qword [rsp + 0x40], rdi
je 0x14001debc
lea r15, [rsp + 0x70]
mov rcx, rdi
mov rdx, r15
call fcn.1400169c0
mov r14, qword [r15]
mov rsi, qword [r15 + 8]
mov r15, rsi
xorps xmm0, xmm0
movaps xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], 0
sub r15, r14
je 0x14001ddf6
js 0x14001f410
mov rcx, r15
call fcn.1400a5638
mov qword [rsp + 0x110], rax
lea rdi, [rax + r15]
mov qword [rsp + 0x120], rdi
mov rcx, rax
mov rdx, r14
mov r8, r15
call fcn.1400a9230
mov qword [rsp + 0x118], rdi
mov rdi, qword [rsp + 0x40]
test r14, r14
je 0x14001de14
dec rsi
cmp r15, rsi
ja 0x14001f47b
mov qword [rsp + 0x78], r14
mov rcx, r14
call fcn.1400a5630
mov rax, qword [rsp + 0xe8]
cmp rax, qword [rsp + 0xf0]
jb 0x14001de76
lea r14, [rsp + 0xe0]
lea r15, [rsp + 0x110]
mov rcx, r14
mov rdx, r15
call fcn.14009c4b0
mov rcx, qword [r15]
mov qword [r14 + 8], rax
test rcx, rcx
je 0x14001debc
mov rax, qword [rsp + 0x118]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x14001f47e
mov qword [rsp + 0x118], rcx
call fcn.1400a5630
jmp 0x14001debc
test rax, rax
je 0x14001f475
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
mov rcx, qword [rsp + 0x110]
mov qword [rax], rcx
mov rcx, qword [rsp + 0x118]
mov qword [rax + 8], rcx
mov rcx, qword [rsp + 0x120]
mov qword [rax + 0x10], rcx
add rax, 0x18
mov qword [rsp + 0xe8], rax
cmp byte [r13 + 0x63], 0
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x48], r13
je 0x14001e0ab
mov rdx, qword [rdi]
lea r14, [rsp + 0x70]
mov rcx, r14
mov r8d, 2
call fcn.140026890
mov rsi, qword [r14]
mov rbp, qword [r14 + 8]
cmp rsi, rbp
je 0x14001e069
xorps xmm7, xmm7
lea r14, [rsp + 0xe0]
lea r15, [rsp + 0x110]
mov rdi, qword [sym.imp.ADVAPI32.dll_EqualSid]
jmp 0x14001df63
test rax, rax
je 0x14001f45e
movups xmmword [rax], xmm7
mov qword [rax + 0x10], 0
mov rcx, qword [rsp + 0x110]
mov qword [rax], rcx
mov rcx, qword [rsp + 0x118]
mov qword [rax + 8], rcx
mov rcx, qword [rsp + 0x120]
mov qword [rax + 0x10], rcx
add rax, 0x18
mov qword [rsp + 0xe8], rax
add rsi, 0x20
cmp rsi, rbp
je 0x14001e055
mov eax, dword [rsi + 0x18]
cmp eax, 0xbfffffff
ja 0x14001df56
and eax, 0x20
jne 0x14001df56
mov rax, qword [rsp + 0x48]
mov r12, qword [rax + 0x68]
mov r13, qword [rax + 0x70]
cmp r12, r13
je 0x14001df97
mov rdx, qword [rsi]
mov rcx, qword [r12]
call rdi
test eax, eax
jne 0x14001df56
add r12, 0x18
jmp 0x14001df7f
mov r12, qword [rsi]
mov r13, qword [rsi + 8]
movaps xmmword [rsp + 0x110], xmm7
mov qword [rsp + 0x120], 0
sub r13, r12
je 0x14001dfef
js 0x14001f410
mov rcx, r13
call fcn.1400a5638
mov qword [rsp + 0x110], rax
lea rbx, [rax + r13]
mov qword [rsp + 0x120], rbx
mov rcx, rax
mov rdx, r12
mov r8, r13
call fcn.1400a9230
mov qword [rsp + 0x118], rbx
mov rax, qword [rsp + 0xe8]
cmp rax, qword [rsp + 0xf0]
jb 0x14001df13
mov rcx, r14
mov rdx, r15
call fcn.14009c4b0
mov rcx, qword [rsp + 0x110]
mov qword [rsp + 0xe8], rax
test rcx, rcx
je 0x14001df56
mov rax, qword [rsp + 0x118]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x14001f461
mov qword [rsp + 0x118], rcx
call fcn.1400a5630
jmp 0x14001df56
mov rsi, qword [rsp + 0x70]
mov r12, qword [rsp + 0x38]
mov r13, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x40]
test rsi, rsi
movabs rbx, 0xaaaaaaaaaaaaaaaa
je 0x14001e0ab
mov r14, qword [rsp + 0x78]
mov rcx, rsi
cmp r14, rsi
je 0x14001e0a1
add r14, 0xffffffffffffffe0
je 0x14001f41d
mov rcx, r14
call fcn.14009c480
cmp r14, rsi
jne 0x14001e085
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x78], rsi
call fcn.1400a5630
lea r14, [rsp + 0xc0]
mov qword [r14 + 0x10], rbx
movaps xmmword [r14], xmm6
mov rcx, r14
mov rdx, r13
call fcn.14001d810
cmp byte [r13 + 0x82], 0
je 0x14001e21a
lea r12, [rsp + 0x70]
mov rcx, rdi
mov rdx, r12
call fcn.1400169c0
mov r15, qword [r12]
mov rsi, qword [r12 + 8]
mov r12, rsi
xorps xmm0, xmm0
movaps xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], 0
sub r12, r15
je 0x14001e149
js 0x14001f410
mov rcx, r12
call fcn.1400a5638
mov qword [rsp + 0x110], rax
lea rdi, [rax + r12]
mov qword [rsp + 0x120], rdi
mov rcx, rax
mov rdx, r15
mov r8, r12
call fcn.1400a9230
mov qword [rsp + 0x118], rdi
mov rdi, qword [rsp + 0x40]
test r15, r15
je 0x14001e167
dec rsi
cmp r12, rsi
ja 0x14001f481
mov qword [rsp + 0x78], r15
mov rcx, r15
call fcn.1400a5630
mov rax, qword [rsp + 0xc8]
cmp rax, qword [rsp + 0xd0]
jb 0x14001e1cf
lea r15, [rsp + 0xc0]
lea r12, [rsp + 0x110]
mov rcx, r15
mov rdx, r12
call fcn.14009c4b0
mov rcx, qword [r12]
mov qword [r15 + 8], rax
test rcx, rcx
mov r12, qword [rsp + 0x38]
je 0x14001e21a
mov rax, qword [rsp + 0x118]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x14001f484
mov qword [rsp + 0x118], rcx
call fcn.1400a5630
jmp 0x14001e21a
test rax, rax
je 0x14001f478
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
mov rcx, qword [rsp + 0x110]
mov qword [rax], rcx
mov rcx, qword [rsp + 0x118]
mov qword [rax + 8], rcx
mov rcx, qword [rsp + 0x120]
mov qword [rax + 0x10], rcx
add rax, 0x18
mov qword [rsp + 0xc8], rax
mov r12, qword [rsp + 0x38]
cmp byte [r13 + 0x83], 0
je 0x14001e3c8
mov rdx, qword [rdi]
lea r15, [rsp + 0x70]
mov rcx, r15
mov r8d, 2
call fcn.140026890
mov rsi, qword [r15]
mov rdi, qword [r15 + 8]
cmp rsi, rdi
je 0x14001e38b
xorps xmm7, xmm7
lea r15, [rsp + 0xc0]
lea r12, [rsp + 0x110]
jmp 0x14001e2b8
test rax, rax
mov r13, qword [rsp + 0x48]
je 0x14001f43c
movups xmmword [rax], xmm7
mov qword [rax + 0x10], 0
mov rcx, qword [rsp + 0x110]
mov qword [rax], rcx
mov rcx, qword [rsp + 0x118]
mov qword [rax + 8], rcx
mov rcx, qword [rsp + 0x120]
mov qword [rax + 0x10], rcx
add rax, 0x18
mov qword [rsp + 0xc8], rax
add rsi, 0x20
cmp rsi, rdi
je 0x14001e381
test byte [rsi + 0x18], 0x20
jne 0x14001e2ab
mov r13, qword [rsi]
mov rbp, qword [rsi + 8]
movaps xmmword [rsp + 0x110], xmm7
mov qword [rsp + 0x120], 0
sub rbp, r13
je 0x14001e316
js 0x14001f410
mov rcx, rbp
call fcn.1400a5638
mov qword [rsp + 0x110], rax
lea rbx, [rax + rbp]
mov qword [rsp + 0x120], rbx
mov rcx, rax
mov rdx, r13
mov r8, rbp
call fcn.1400a9230
mov qword [rsp + 0x118], rbx
mov rax, qword [rsp + 0xc8]
cmp rax, qword [rsp + 0xd0]
jb 0x14001e263
mov rcx, r15
mov rdx, r12
call fcn.14009c4b0
mov rcx, qword [rsp + 0x110]
mov qword [rsp + 0xc8], rax
test rcx, rcx
mov r13, qword [rsp + 0x48]
je 0x14001e2ab
mov rax, qword [rsp + 0x118]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x14001f43f
mov qword [rsp + 0x118], rcx
call fcn.1400a5630
jmp 0x14001e2ab
mov rsi, qword [rsp + 0x70]
mov r12, qword [rsp + 0x38]
test rsi, rsi
mov rdi, qword [rsp + 0x40]
je 0x14001e3c8
mov r15, qword [rsp + 0x78]
mov rcx, rsi
cmp r15, rsi
je 0x14001e3be
add r15, 0xffffffffffffffe0
je 0x14001f420
mov rcx, r15
call fcn.14009c480
cmp r15, rsi
jne 0x14001e3a2
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x78], rsi
call fcn.1400a5630
cmp byte [r13 + 0x81], 0
je 0x14001e54c
lea r15, [rsp + 0x70]
movaps xmmword [r15 + 0x10], xmm6
movaps xmmword [r15], xmm6
mov rcx, rdi
mov rdx, r15
call fcn.140026720
cmp byte [r15 + 0x18], 0
je 0x14001e54c
mov rax, qword [rsp + 0xc8]
cmp rax, qword [rsp + 0xd0]
jae 0x14001e4fd
test rax, rax
je 0x14001f4b3
xorps xmm0, xmm0
movups xmmword [rax], xmm0
xor ecx, ecx
mov qword [rax + 0x10], rcx
mov rdx, qword [rsp + 0x70]
mov qword [rax], rdx
mov rdx, qword [rsp + 0x78]
mov qword [rax + 8], rdx
mov rdx, qword [rsp + 0x80]
mov qword [rax + 0x10], rdx
mov qword [rsp + 0x80], rcx
movaps xmmword [rsp + 0x70], xmm0
add rax, 0x18
jmp 0x14001e50f
mov rax, qword [rsp + 0xc0]
cmp rax, qword [rsp + 0xc8]
jne 0x14001e562
cmp byte [r13 + 0x61], 0
jne 0x14001e562
lea r14, [rsp + 0x70]
mov rcx, rdi
mov rdx, r14
mov r8d, 0xf01ff
call fcn.1400ff3e0
mov al, byte [rsp + 0x108]
cmp al, byte [r14 + 8]
je 0x14001f393
test al, al
jne 0x14001f517
xor eax, eax
mov qword [rsp + 0x100], rax
mov rbx, qword [rsp + 0x70]
mov qword [rsp + 0x70], rax
lea rax, [rbx + 1]
cmp rax, 2
jb 0x14001e4cb
call fcn.14007a8b0
lea r14, [rsp + 0x100]
mov rcx, r14
mov rdx, rbx
call fcn.14000c380
mov byte [r14 + 8], 1
cmp byte [rsp + 0x78], 0
je 0x14001e6a6
lea rcx, [rsp + 0x70]
call fcn.140006110
jmp 0x14001e6a6
lea rcx, [rsp + 0xc0]
lea rdx, [rsp + 0x70]
call fcn.14009c4b0
mov qword [rsp + 0xc8], rax
cmp byte [rsp + 0x88], 0
je 0x14001e54c
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x14001e54c
mov rax, qword [rsp + 0x78]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x14001f4e4
mov qword [rsp + 0x78], rcx
call fcn.1400a5630
mov rax, qword [rsp + 0xe0]
cmp rax, qword [rsp + 0xe8]
je 0x14001e458
xorps xmm0, xmm0
lea rax, [rsp + 0x70]
movaps xmmword [rax], xmm0
mov qword [rax + 0x10], 0
movzx r8d, byte [r13 + 0x61]
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x30], 0xf01ff
lea r14, [rsp + 0x110]
lea r9, [rsp + 0xe0]
mov rcx, rdi
mov rdx, r14
call fcn.14002d5a0
mov al, byte [rsp + 0x108]
cmp al, byte [r14 + 8]
je 0x14001e639
test al, al
jne 0x14001f497
xor eax, eax
mov qword [rsp + 0x100], rax
mov rbx, qword [rsp + 0x110]
mov qword [rsp + 0x110], rax
lea rax, [rbx + 1]
cmp rax, 2
jb 0x14001e5e9
call fcn.14007a8b0
lea r14, [rsp + 0x100]
mov rcx, r14
mov rdx, rbx
call fcn.14000c380
mov byte [r14 + 8], 1
cmp byte [rsp + 0x118], 0
je 0x14001e618
lea rcx, [rsp + 0x110]
call fcn.140006110
mov rsi, qword [rsp + 0x70]
test rsi, rsi
je 0x14001e6a6
mov rdi, qword [rsp + 0x78]
mov rcx, rsi
cmp rdi, rsi
je 0x14001e69c
add rdi, 0xffffffffffffffe8
jmp 0x14001e686
test al, al
je 0x14001e618
mov rbx, qword [rsp + 0x110]
mov qword [rsp + 0x110], 0
lea rax, [rbx + 1]
cmp rax, 2
jb 0x14001e660
call fcn.14007a8b0
lea rcx, [rsp + 0x100]
mov rdx, rbx
call fcn.14000c380
jmp 0x14001e601
mov rcx, qword [rdi]
call fcn.1400a5630
lea rax, [rdi - 0x18]
cmp rdi, rsi
mov rdi, rax
je 0x14001e697
test rdi, rdi
je 0x14001f430
cmp byte [rdi + 0x17], 0
js 0x14001e672
jmp 0x14001e67a
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x78], rsi
call fcn.1400a5630
cmp byte [rsp + 0x108], 0
je 0x14001e709
cmp byte [r13 + 0x61], 0
je 0x14001e7f4
cmp byte [r13 + 0x62], 0
je 0x14001e7f4
lea rcx, [rsp + 0x100]
call fcn.140035fd0
test al, al
je 0x14001e709
cmp byte [rsp + 0x108], 0
xorps xmm0, xmm0
movaps xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], 0
movaps xmmword [rsp + 0xb0], xmm6
jne 0x14001e813
jmp 0x14001f4e1
xor eax, eax
mov byte [r12], al
mov byte [r12 + 8], al
mov rsi, qword [rsp + 0xc0]
test rsi, rsi
je 0x14001e75d
mov rdi, qword [rsp + 0xc8]
mov rcx, rsi
cmp rdi, rsi
je 0x14001e750
add rdi, 0xffffffffffffffe8
je 0x14001f40a
mov rcx, rdi
call fcn.14009c480
cmp rdi, rsi
jne 0x14001e731
mov rcx, qword [rsp + 0xc0]
mov qword [rsp + 0xc8], rsi
call fcn.1400a5630
mov rsi, qword [rsp + 0xe0]
test rsi, rsi
je 0x14001e7a6
mov rdi, qword [rsp + 0xe8]
mov rcx, rsi
cmp rdi, rsi
je 0x14001e799
add rdi, 0xffffffffffffffe8
je 0x14001f40d
mov rcx, rdi
call fcn.14009c480
cmp rdi, rsi
jne 0x14001e77a
mov rcx, qword [rsp + 0xe0]
mov qword [rsp + 0xe8], rsi
call fcn.1400a5630
cmp byte [rsp + 0x108], 0
je 0x14001e7bd
lea rcx, [rsp + 0x100]
call fcn.140006110
mov rcx, qword [rsp + 0x128]
xor rcx, rsp
call fcn.1400a77a0
mov rax, r12
movaps xmm6, xmmword [rsp + 0x130]
movaps xmm7, xmmword [rsp + 0x140]
add rsp, 0x158
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xorps xmm0, xmm0
movaps xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], 0
movaps xmmword [rsp + 0xb0], xmm6
lea rcx, [rsp + 0x100]
lea rbx, [rsp + 0xb0]
mov rdx, rbx
call fcn.140035ee0
cmp byte [rbx + 8], 0
je 0x14001f2b1
cmp byte [r13 + 0x60], 0
je 0x14001eb14
movaps xmmword [rsp + 0x80], xmm6
movaps xmmword [rsp + 0x70], xmm6
cmp byte [rsp + 0x108], 0
je 0x14001f4b0
lea rcx, [rsp + 0x100]
lea rbx, [rsp + 0x70]
mov rdx, rbx
call fcn.140026720
cmp byte [rbx + 0x18], 0
je 0x14001f336
mov rbx, qword [rsp + 0x118]
mov rax, qword [rsp + 0x120]
cmp rbx, rax
jb 0x14001ea66
mov rcx, qword [rsp + 0x110]
sub rbx, rcx
sar rbx, 3
movabs rdx, 0xcccccccccccccccd
imul rbx, rdx
lea rsi, [rbx + 1]
movabs r8, 0x666666666666666
cmp rsi, r8
ja 0x14001f4ed
sub rax, rcx
sar rax, 3
imul rax, rdx
lea rcx, [rax + rax]
cmp rcx, rsi
cmova rsi, rcx
movabs rcx, 0x333333333333333
cmp rax, rcx
cmovae rsi, r8
test rsi, rsi
je 0x14001f4f0
cmp rsi, r8
ja 0x14001f4f8
lea rax, [rsi*8]
lea rcx, [rax + rax*4]
call fcn.1400a5638
mov r14, rax
lea rbx, [rbx + rbx*4]
shl rbx, 3
add rbx, r14
je 0x14001f4fb
mov r15, qword [rsp + 0x70]
mov r12, qword [rsp + 0x78]
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
sub r12, r15
je 0x14001e96d
js 0x14001f46d
mov rcx, r12
call fcn.1400a5638
mov qword [rbx], rax
lea rdi, [rax + r12]
mov qword [rbx + 0x10], rdi
mov rcx, rax
mov rdx, r15
mov r8, r12
call fcn.1400a9230
mov qword [rbx + 8], rdi
mov qword [rbx + 0x18], 3
mov dword [rbx + 0x20], 0
mov r12, qword [rsp + 0x110]
mov r15, qword [rsp + 0x118]
mov rax, r12
sub rax, r15
lea rdi, [rbx + rax]
je 0x14001ea38
xorps xmm0, xmm0
xor eax, eax
mov rcx, r12
mov rdx, rdi
test rdx, rdx
je 0x14001f464
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], rax
mov r8, qword [rcx]
mov qword [rdx], r8
mov r8, qword [rcx + 8]
mov qword [rdx + 8], r8
mov r8, qword [rcx + 0x10]
mov qword [rdx + 0x10], r8
mov qword [rcx + 0x10], rax
movups xmmword [rcx], xmm0
mov r8d, dword [rcx + 0x20]
mov dword [rdx + 0x20], r8d
mov r8, qword [rcx + 0x18]
mov qword [rdx + 0x18], r8
add rcx, 0x28
add rdx, 0x28
cmp rcx, r15
jne 0x14001e9a7
jmp 0x14001ea06
mov qword [r12 + 8], rcx
call fcn.1400a5630
add r12, 0x28
cmp r12, r15
je 0x14001ea30
test r12, r12
je 0x14001f467
mov rcx, qword [r12]
test rcx, rcx
je 0x14001e9fd
mov rax, qword [r12 + 8]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
jbe 0x14001e9f3
jmp 0x14001f46a
mov r15, qword [rsp + 0x110]
lea rax, [rsi + rsi*4]
lea rax, [r14 + rax*8]
add rbx, 0x28
mov qword [rsp + 0x110], rdi
mov qword [rsp + 0x118], rbx
mov qword [rsp + 0x120], rax
test r15, r15
je 0x14001eaca
jmp 0x14001f50a
test rbx, rbx
je 0x14001f4ea
mov r14, qword [rsp + 0x70]
mov r15, qword [rsp + 0x78]
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
sub r15, r14
je 0x14001eab7
js 0x14001f46d
mov rcx, r15
call fcn.1400a5638
mov qword [rbx], rax
lea rsi, [rax + r15]
mov qword [rbx + 0x10], rsi
mov rcx, rax
mov rdx, r14
mov r8, r15
call fcn.1400a9230
mov qword [rbx + 8], rsi
mov qword [rbx + 0x18], 3
mov dword [rbx + 0x20], 0
add rbx, 0x28
mov qword [rsp + 0x118], rbx
cmp byte [rsp + 0x88], 0
je 0x14001ebea
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x14001ebea
mov rax, qword [rsp + 0x78]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x14001f507
mov qword [rsp + 0x78], rcx
call fcn.1400a5630
jmp 0x14001ebea
xor eax, eax
mov dword [rsp + 0x50], eax
mov dword [rsp + 0xac], 0x10000000
mov dword [rsp + 0xa8], eax
mov dword [rsp + 0xa4], 0xa
mov rbx, qword [rsp + 0x118]
cmp rbx, qword [rsp + 0x120]
jae 0x14001f3cd
test rbx, rbx
je 0x14001f4e7
lea r15, [rsp + 0x70]
mov rcx, r15
mov edx, 0xa
call fcn.1400274b0
mov r14, qword [r15]
mov rsi, qword [r15 + 8]
mov r15, rsi
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
sub r15, r14
je 0x14001ebb0
js 0x14001f46d
mov rcx, r15
call fcn.1400a5638
mov qword [rbx], rax
lea rdi, [rax + r15]
mov qword [rbx + 0x10], rdi
mov rcx, rax
mov rdx, r14
mov r8, r15
call fcn.1400a9230
mov qword [rbx + 8], rdi
movabs rax, 0x1000000000000000
mov qword [rbx + 0x18], rax
mov dword [rbx + 0x20], 0
test r14, r14
je 0x14001ebde
dec rsi
cmp r15, rsi
ja 0x14001f501
mov rcx, r14
call fcn.1400a5630
add rbx, 0x28
mov qword [rsp + 0x118], rbx
mov r12, qword [r13 + 0x30]
mov rax, qword [r13 + 0x38]
mov qword [rsp + 0x40], rax
cmp r12, rax
je 0x14001eec6
xorps xmm6, xmm6
jmp 0x14001ec5b
test r14, r14
je 0x14001f449
mov qword [r14], rbx
mov qword [r14 + 8], rsi
mov qword [r14 + 0x10], rsi
movaps xmmword [rsp + 0x70], xmm6
mov qword [rsp + 0x80], 0
lea rcx, [rsp + 0x88]
mov eax, dword [rcx + 8]
mov dword [r14 + 0x20], eax
mov rax, qword [rcx]
mov qword [r14 + 0x18], rax
add r14, 0x28
mov qword [rsp + 0x118], r14
add r12, 0x28
cmp r12, qword [rsp + 0x40]
je 0x14001eec6
mov edi, dword [r12 + 0x18]
mov ebp, dword [r12 + 0x1c]
mov r13d, dword [r12 + 0x20]
mov r14, qword [r12]
mov r15, qword [r12 + 8]
movaps xmmword [rsp + 0x70], xmm6
mov qword [rsp + 0x80], 0
sub r15, r14
je 0x14001f433
js 0x14001f426
mov rcx, r15
call fcn.1400a5638
mov rbx, rax
mov qword [rsp + 0x70], rax
lea rsi, [rax + r15]
mov qword [rsp + 0x80], rsi
mov rcx, rax
mov rdx, r14
mov r8, r15
call fcn.1400a9230
mov qword [rsp + 0x78], rsi
mov dword [rsp + 0x88], edi
mov dword [rsp + 0x8c], ebp
mov dword [rsp + 0x90], r13d
mov r14, qword [rsp + 0x118]
mov rax, qword [rsp + 0x120]
cmp r14, rax
jb 0x14001ec05
mov rcx, qword [rsp + 0x110]
sub r14, rcx
sar r14, 3
movabs r8, 0xcccccccccccccccd
imul r14, r8
lea rdi, [r14 + 1]
movabs rdx, 0x666666666666666
cmp rdi, rdx
mov r13d, 0
ja 0x14001f44c
sub rax, rcx
sar rax, 3
imul rax, r8
lea rcx, [rax + rax]
cmp rcx, rdi
cmova rdi, rcx
movabs rcx, 0x333333333333333
cmp rax, rcx
cmovae rdi, rdx
test rdi, rdi
je 0x14001f442
cmp rdi, rdx
ja 0x14001f44f
lea rax, [rdi*8]
lea rcx, [rax + rax*4]
call fcn.1400a5638
mov rbx, rax
lea rbp, [r14 + r14*4]
shl rbp, 3
add rbp, rbx
je 0x14001f452
movups xmmword [rbp], xmm6
mov qword [rbp + 0x10], r13
mov rax, qword [rsp + 0x70]
mov qword [rbp], rax
mov rax, qword [rsp + 0x78]
mov qword [rbp + 8], rax
mov rax, qword [rsp + 0x80]
mov qword [rbp + 0x10], rax
mov qword [rsp + 0x80], r13
movaps xmmword [rsp + 0x70], xmm6
lea rcx, [rsp + 0x88]
mov eax, dword [rcx + 8]
mov dword [rbp + 0x20], eax
mov rax, qword [rcx]
mov qword [rbp + 0x18], rax
mov r15, qword [rsp + 0x110]
mov r14, qword [rsp + 0x118]
mov rax, r15
sub rax, r14
lea rsi, [rbp + rax]
je 0x14001ee5e
mov rax, r15
mov rcx, rsi
test rcx, rcx
je 0x14001f407
movups xmmword [rcx], xmm6
mov qword [rcx + 0x10], r13
mov rdx, qword [rax]
mov qword [rcx], rdx
mov rdx, qword [rax + 8]
mov qword [rcx + 8], rdx
mov rdx, qword [rax + 0x10]
mov qword [rcx + 0x10], rdx
mov qword [rax + 0x10], r13
movups xmmword [rax], xmm6
mov edx, dword [rax + 0x20]
mov dword [rcx + 0x20], edx
mov rdx, qword [rax + 0x18]
mov qword [rcx + 0x18], rdx
add rax, 0x28
add rcx, 0x28
cmp rax, r14
jne 0x14001edf4
test r15, r15
je 0x14001f404
mov rcx, r15
call fcn.14001a050
add r15, 0x28
cmp r15, r14
jne 0x14001ee3c
mov r14, qword [rsp + 0x110]
lea rax, [rdi + rdi*4]
lea rax, [rbx + rax*8]
add rbp, 0x28
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0x118], rbp
mov qword [rsp + 0x120], rax
test r14, r14
je 0x14001ee8f
mov rcx, r14
call fcn.1400a5630
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x118], rbp
test rcx, rcx
je 0x14001ec4c
mov rax, qword [rsp + 0x78]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x14001f455
call fcn.1400a5630
jmp 0x14001ec4c
cmp byte [rsp + 0x108], 0
je 0x14001f487
lea rcx, [rsp + 0x100]
lea r14, [rsp + 0x70]
mov rdx, r14
call fcn.1400169c0
mov rbx, qword [r14]
mov rsi, qword [r14 + 8]
mov r12, rsi
xorps xmm0, xmm0
movaps xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], 0
sub r12, rbx
je 0x14001f4b6
js 0x14001f48a
mov rcx, r12
call fcn.1400a5638
mov r14, rax
mov qword [rsp + 0x50], rax
lea r15, [rax + r12]
mov qword [rsp + 0x60], r15
mov rcx, rax
mov rdx, rbx
mov r8, r12
call fcn.1400a9230
mov qword [rsp + 0x58], r15
mov r13, qword [rsp + 0x48]
test rbx, rbx
je 0x14001ef62
dec rsi
cmp r12, rsi
ja 0x14001f4db
mov qword [rsp + 0x78], rbx
mov rcx, rbx
call fcn.1400a5630
mov rbx, qword [rsp + 0x118]
mov rax, qword [rsp + 0x120]
cmp rbx, rax
jb 0x14001f12b
mov rcx, qword [rsp + 0x110]
sub rbx, rcx
sar rbx, 3
movabs rdx, 0xcccccccccccccccd
imul rbx, rdx
lea rsi, [rbx + 1]
movabs r8, 0x666666666666666
cmp rsi, r8
ja 0x14001f4c4
sub rax, rcx
sar rax, 3
imul rax, rdx
lea rcx, [rax + rax]
cmp rcx, rsi
cmova rsi, rcx
movabs rcx, 0x333333333333333
cmp rax, rcx
cmovae rsi, r8
test rsi, rsi
je 0x14001f4c7
cmp rsi, r8
ja 0x14001f4cf
lea rax, [rsi*8]
lea rcx, [rax + rax*4]
call fcn.1400a5638
mov r12, rax
lea rbx, [rbx + rbx*4]
shl rbx, 3
add rbx, r12
je 0x14001f4d2
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
sub r15, r14
je 0x14001f04b
js 0x14001f46d
mov rcx, r15
call fcn.1400a5638
mov qword [rbx], rax
lea rdi, [rax + r15]
mov qword [rbx + 0x10], rdi
mov rcx, rax
mov rdx, r14
mov r8, r15
call fcn.1400a9230
mov qword [rbx + 8], rdi
movabs rax, 0x1000000000000000
mov qword [rbx + 0x18], rax
mov dword [rbx + 0x20], 0
mov r15, qword [rsp + 0x110]
mov r14, qword [rsp + 0x118]
mov rax, r15
sub rax, r14
lea rdi, [rbx + rax]
je 0x14001f0f3
xorps xmm0, xmm0
xor eax, eax
mov rcx, r15
mov rdx, rdi
test rdx, rdx
je 0x14001f458
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], rax
mov r8, qword [rcx]
mov qword [rdx], r8
mov r8, qword [rcx + 8]
mov qword [rdx + 8], r8
mov r8, qword [rcx + 0x10]
mov qword [rdx + 0x10], r8
mov qword [rcx + 0x10], rax
movups xmmword [rcx], xmm0
mov r8d, dword [rcx + 0x20]
mov dword [rdx + 0x20], r8d
mov r8, qword [rcx + 0x18]
mov qword [rdx + 0x18], r8
add rcx, 0x28
add rdx, 0x28
cmp rcx, r14
jne 0x14001f087
test r15, r15
je 0x14001f45b
mov rcx, r15
call fcn.14001a050
add r15, 0x28
cmp r15, r14
jne 0x14001f0d1
mov r14, qword [rsp + 0x110]
lea rax, [rsi + rsi*4]
lea rax, [r12 + rax*8]
add rbx, 0x28
mov qword [rsp + 0x110], rdi
mov qword [rsp + 0x118], rbx
mov qword [rsp + 0x120], rax
test r14, r14
je 0x14001f124
mov rcx, r14
call fcn.1400a5630
mov r12, qword [rsp + 0x38]
jmp 0x14001f190
test rbx, rbx
mov r12, qword [rsp + 0x38]
je 0x14001f4c1
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
sub r15, r14
je 0x14001f177
js 0x14001f46d
mov rcx, r15
call fcn.1400a5638
mov qword [rbx], rax
lea rsi, [rax + r15]
mov qword [rbx + 0x10], rsi
mov rcx, rax
mov rdx, r14
mov r8, r15
call fcn.1400a9230
mov qword [rbx + 8], rsi
movabs rax, 0x1000000000000000
mov qword [rbx + 0x18], rax
mov dword [rbx + 0x20], 0
add rbx, 0x28
mov qword [rsp + 0x118], rbx
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14001f1be
mov rax, qword [rsp + 0x58]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x14001f4de
call fcn.1400a5630
cmp byte [rsp + 0xb8], 0
je 0x14001f494
lea rcx, [rsp + 0xb0]
lea rdx, [rsp + 0x110]
call fcn.140024500
test al, al
je 0x14001f2b1
cmp byte [rsp + 0x108], 0
je 0x14001f4d5
cmp byte [rsp + 0xb8], 0
je 0x14001f4d8
mov rax, qword [rsp + 0xb0]
lea r8, [rsp + 0x70]
mov qword [r8], rax
mov rcx, qword [rsp + 0x100]
mov edx, 6
mov r9d, 8
call qword [sym.imp.ADVAPI32.dll_SetTokenInformation]
test eax, eax
je 0x14001f2b1
cmp byte [r13 + 0x5c], 0
je 0x14001f25c
cmp byte [rsp + 0x108], 0
je 0x14001f504
mov edx, dword [r13 + 0x58]
lea rcx, [rsp + 0x100]
call fcn.1400257a0
test al, al
je 0x14001f2b1
xor eax, eax
mov byte [r12], al
mov byte [r12 + 8], al
cmp byte [rsp + 0x108], al
je 0x14001f2bc
test r12, r12
je 0x14001f4fe
xor eax, eax
mov qword [r12], rax
mov rdi, qword [rsp + 0x100]
mov qword [rsp + 0x100], rax
lea rax, [rdi + 1]
cmp rax, 2
jb 0x14001f29e
call fcn.14007a8b0
mov rcx, r12
mov rdx, rdi
call fcn.14000c380
mov byte [r12 + 8], 1
jmp 0x14001f2bc
xor eax, eax
mov byte [r12], al
mov byte [r12 + 8], al
cmp byte [rsp + 0xb8], 0
je 0x14001f2e4
mov rcx, qword [rsp + 0xb0]
mov qword [rsp + 0xb0], 0
test rcx, rcx
je 0x14001f2e4
call fcn.1400a5934
mov rsi, qword [rsp + 0x110]
test rsi, rsi
je 0x14001e714
mov rdi, qword [rsp + 0x118]
mov rcx, rsi
cmp rdi, rsi
je 0x14001f324
add rdi, 0xffffffffffffffd8
je 0x14001f423
mov rcx, rdi
call fcn.14001a050
cmp rdi, rsi
jne 0x14001f305
mov rcx, qword [rsp + 0x110]
mov qword [rsp + 0x118], rsi
call fcn.1400a5630
jmp 0x14001e714
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x490
je 0x14001ead2
xor eax, eax
mov byte [r12], al
mov byte [r12 + 8], al
cmp byte [rsp + 0x88], al
je 0x14001f2bc
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x14001f2bc
mov rax, qword [rsp + 0x78]
mov rdx, rax
sub rdx, rcx
dec rax
cmp rdx, rax
ja 0x14001f530
mov qword [rsp + 0x78], rcx
call fcn.1400a5630
jmp 0x14001f2bc
test al, al
je 0x14001e6a6
mov rbx, qword [rsp + 0x70]
mov qword [rsp + 0x70], 0
lea rax, [rbx + 1]
cmp rax, 2
jb 0x14001f3b8
call fcn.14007a8b0
lea rcx, [rsp + 0x100]
mov rdx, rbx
call fcn.14000c380
jmp 0x14001e4e3
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x110]
lea rdx, [rsp + 0xa4]
lea r8, [rsp + 0xa8]
lea r9, [rsp + 0xac]
call fcn.140107ee0
mov rbx, rax
jmp 0x14001ebe2
int3
int3
int3
int3
lea rcx, [rsp + 0x110]
call fcn.1400da0b0
int3
int3
int3
lea rcx, [rsp + 0x70]
call fcn.1400da0b0
int3
xor esi, esi
xor ebx, ebx
jmp 0x14001ecc2
int3
int3
xor ebx, ebx
jmp 0x14001ed78
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
mov rcx, rbx
call fcn.1400da0b0
int3
int3
int3
int3
int3
int3
int3
lea rcx, [rsp + 0x50]
call fcn.1400da0b0
int3
lea rbx, [rsp + 0x100]
mov rcx, rbx
call fcn.140006110
mov byte [rbx + 8], 0
jmp 0x14001e601
int3
int3
xor r14d, r14d
xor r15d, r15d
jmp 0x14001ef3f
int3
int3
xor r12d, r12d
jmp 0x14001effc
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
xor r14d, r14d
jmp 0x14001e914
int3
int3
int3
int3
int3
int3
mov rcx, r15
call fcn.1400a5630
jmp 0x14001eaca
lea rbx, [rsp + 0x100]
mov rcx, rbx
call fcn.140006110
mov byte [rbx + 8], 0
jmp 0x14001e4e3
int3