Function at 0x140020490
Capabilities:
Acquire debug privileges

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xc0
mov rax, qword [0x140099038]
xor rax, rsp
mov qword [rbp + 0x47], rax
lea rax, vtable.LogItem.0
mov qword [rbp - 9], rax
xor esi, esi
mov qword [rbp + 0xf], rsi
mov qword [rbp + 0x17], 7
mov word [rbp - 1], si
mov qword [rbp + 0x2f], rsi
mov qword [rbp + 0x37], 7
mov word [rbp + 0x1f], si
mov dword [rbp + 0x3f], 1
mov dword [rbp + 0x43], 1
mov qword [rbp - 0x19], rsi
mov qword [rbp - 0x11], 0xf
mov byte [rbp - 0x29], sil
lea r8d, [rsi + 0x15]
lea rdx, str.InitializeSecurity...
lea rcx, [rbp - 0x29]
call fcn.14001d610
nop
lea rdx, [rbp - 0x29]
lea rcx, [rbp - 9]
call fcn.14001ec90
nop
mov rdx, qword [rbp - 0x11]
cmp rdx, 0x10
jb 0x140020567
inc rdx
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020561
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140020561
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400505d0
nop
lea rcx, [rbp - 9]
call fcn.14001e5f0
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x49], xmm0
mov qword [rbp - 0x39], rsi
mov qword [rbp - 0x19], rsi
mov qword [rbp - 0x11], 7
mov word [rbp - 0x29], si
mov r8d, 0x1b
lea rdx, str.SeUnsolicitedInputPrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d430
nop
lea r8, [rbp - 0x29]
xor edx, edx
lea rcx, [rbp - 0x49]
call fcn.140024e30
nop
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x1400205f3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400205ee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400210f8
call fcn.1400505d0
mov qword [rbp - 0x19], rsi
mov qword [rbp - 0x11], 7
mov word [rbp - 0x29], si
mov r8d, 0x11
lea rdx, str.SeUndockPrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d430
nop
mov rbx, qword [rbp - 0x41]
mov rdi, qword [rbp - 0x39]
cmp rbx, rdi
je 0x140020649
movups xmm0, xmmword [rbp - 0x29]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rbp - 0x19]
movups xmmword [rbx + 0x10], xmm1
mov edx, 7
mov word [rbp - 0x29], si
add rbx, 0x20
mov qword [rbp - 0x41], rbx
jmp 0x140020665
lea r8, [rbp - 0x29]
mov rdx, rbx
lea rcx, [rbp - 0x49]
call fcn.140024e30
mov rdi, qword [rbp - 0x39]
mov rbx, qword [rbp - 0x41]
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x1400206a1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002069c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400210f8
call fcn.1400505d0
mov qword [rbp - 0x19], rsi
mov qword [rbp - 0x11], 7
mov word [rbp - 0x29], si
mov r8d, 0x1f
lea rdx, str.SeTrustedCredManAccessPrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d430
nop
cmp rbx, rdi
je 0x1400206ef
movups xmm0, xmmword [rbp - 0x29]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rbp - 0x19]
movups xmmword [rbx + 0x10], xmm1
mov edx, 7
mov word [rbp - 0x29], si
add rbx, 0x20
mov qword [rbp - 0x41], rbx
jmp 0x14002070b
lea r8, [rbp - 0x29]
mov rdx, rbx
lea rcx, [rbp - 0x49]
call fcn.140024e30
mov rdi, qword [rbp - 0x39]
mov rbx, qword [rbp - 0x41]
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x140020747
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020742
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400210f8
call fcn.1400505d0
mov qword [rbp - 0x19], rsi
mov qword [rbp - 0x11], 7
mov word [rbp - 0x29], si
mov r8d, 0x13
lea rdx, str.SeTimeZonePrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d430
nop
cmp rbx, rdi
je 0x140020795
movups xmm0, xmmword [rbp - 0x29]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rbp - 0x19]
movups xmmword [rbx + 0x10], xmm1
mov edx, 7
mov word [rbp - 0x29], si
add rbx, 0x20
mov qword [rbp - 0x41], rbx
jmp 0x1400207b1
lea r8, [rbp - 0x29]
mov rdx, rbx
lea rcx, [rbp - 0x49]
call fcn.140024e30
mov rdi, qword [rbp - 0x39]
mov rbx, qword [rbp - 0x41]
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x1400207ed
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400207e8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400210f8
call fcn.1400505d0
mov qword [rbp - 0x19], rsi
mov qword [rbp - 0x11], 7
mov word [rbp - 0x29], si
mov r8d, 0xe
lea rdx, str.SeTcbPrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d430
nop
cmp rbx, rdi
je 0x14002083b
movups xmm0, xmmword [rbp - 0x29]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rbp - 0x19]
movups xmmword [rbx + 0x10], xmm1
mov edx, 7
mov word [rbp - 0x29], si
add rbx, 0x20
mov qword [rbp - 0x41], rbx
jmp 0x140020857
lea r8, [rbp - 0x29]
mov rdx, rbx
lea rcx, [rbp - 0x49]
call fcn.140024e30
mov rdi, qword [rbp - 0x39]
mov rbx, qword [rbp - 0x41]
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x140020893
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002088e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400210f8
call fcn.1400505d0
mov qword [rbp - 0x19], rsi
mov qword [rbp - 0x11], 7
mov word [rbp - 0x29], si
mov r8d, 0x18
lea rdx, str.SeTakeOwnershipPrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d430
nop
cmp rbx, rdi
je 0x1400208e1
movups xmm0, xmmword [rbp - 0x29]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rbp - 0x19]
movups xmmword [rbx + 0x10], xmm1
mov edx, 7
mov word [rbp - 0x29], si
add rbx, 0x20
mov qword [rbp - 0x41], rbx
jmp 0x1400208fd
lea r8, [rbp - 0x29]
mov rdx, rbx
lea rcx, [rbp - 0x49]
call fcn.140024e30
mov rdi, qword [rbp - 0x39]
mov rbx, qword [rbp - 0x41]
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x140020939
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020934
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400210f8
call fcn.1400505d0
mov qword [rbp - 0x19], rsi
mov qword [rbp - 0x11], 7
mov word [rbp - 0x29], si
mov r8d, 0x15
lea rdx, str.SeSystemtimePrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d430
nop
cmp rbx, rdi
je 0x140020987
movups xmm0, xmmword [rbp - 0x29]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rbp - 0x19]
movups xmmword [rbx + 0x10], xmm1
mov edx, 7
mov word [rbp - 0x29], si
add rbx, 0x20
mov qword [rbp - 0x41], rbx
jmp 0x1400209a3
lea r8, [rbp - 0x29]
mov rdx, rbx
lea rcx, [rbp - 0x49]
call fcn.140024e30
mov rdi, qword [rbp - 0x39]
mov rbx, qword [rbp - 0x41]
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x1400209df
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400209da
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400210f8
call fcn.1400505d0
mov qword [rbp - 0x19], rsi
mov qword [rbp - 0x11], 7
mov word [rbp - 0x29], si
mov r8d, 0x18
lea rdx, str.SeSystemProfilePrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d430
nop
cmp rbx, rdi
je 0x140020a2d
movups xmm0, xmmword [rbp - 0x29]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rbp - 0x19]
movups xmmword [rbx + 0x10], xmm1
mov edx, 7
mov word [rbp - 0x29], si
add rbx, 0x20
mov qword [rbp - 0x41], rbx
jmp 0x140020a49
lea r8, [rbp - 0x29]
mov rdx, rbx
lea rcx, [rbp - 0x49]
call fcn.140024e30
mov rdi, qword [rbp - 0x39]
mov rbx, qword [rbp - 0x41]
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x140020a85
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020a80
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400210f8
call fcn.1400505d0
mov qword [rbp - 0x19], rsi
mov qword [rbp - 0x11], 7
mov word [rbp - 0x29], si
mov r8d, 0x1c
lea rdx, str.SeSystemEnvironmentPrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d430
nop
cmp rbx, rdi
je 0x140020ad3
movups xmm0, xmmword [rbp - 0x29]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rbp - 0x19]
movups xmmword [rbx + 0x10], xmm1
mov edx, 7
mov word [rbp - 0x29], si
add rbx, 0x20
mov qword [rbp - 0x41], rbx
jmp 0x140020aef
lea r8, [rbp - 0x29]
mov rdx, rbx
lea rcx, [rbp - 0x49]
call fcn.140024e30
mov rdi, qword [rbp - 0x39]
mov rbx, qword [rbp - 0x41]
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x140020b2b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020b26
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400210f8
call fcn.1400505d0
mov qword [rbp - 0x19], rsi
mov qword [rbp - 0x11], 7
mov word [rbp - 0x29], si
mov r8d, 0x14
lea rdx, str.SeSyncAgentPrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d430
nop
cmp rbx, rdi
je 0x140020b79
movups xmm0, xmmword [rbp - 0x29]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rbp - 0x19]
movups xmmword [rbx + 0x10], xmm1
mov edx, 7
mov word [rbp - 0x29], si
add rbx, 0x20
mov qword [rbp - 0x41], rbx
jmp 0x140020b95
lea r8, [rbp - 0x29]
mov rdx, rbx
lea rcx, [rbp - 0x49]
call fcn.140024e30
mov rdi, qword [rbp - 0x39]
mov rbx, qword [rbp - 0x41]
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x140020bd1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020bcc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400210f8
call fcn.1400505d0
mov qword [rbp - 0x19], rsi
mov qword [rbp - 0x11], 7
mov word [rbp - 0x29], si
mov r8d, 0x13
lea rdx, str.SeShutdownPrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d430
nop
cmp rbx, rdi
je 0x140020c1f
movups xmm0, xmmword [rbp - 0x29]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rbp - 0x19]
movups xmmword [rbx + 0x10], xmm1
mov edx, 7
mov word [rbp - 0x29], si
add rbx, 0x20
mov qword [rbp - 0x41], rbx
jmp 0x140020c3b
lea r8, [rbp - 0x29]
mov rdx, rbx
lea rcx, [rbp - 0x49]
call fcn.140024e30
mov rdi, qword [rbp - 0x39]
mov rbx, qword [rbp - 0x41]
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x140020c77
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020c72
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400210f8
call fcn.1400505d0
mov qword [rbp - 0x19], rsi
mov qword [rbp - 0x11], 7
mov word [rbp - 0x29], si
mov r8d, 0x13
lea rdx, str.SeSecurityPrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d430
nop
cmp rbx, rdi
je 0x140020cc5
movups xmm0, xmmword [rbp - 0x29]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rbp - 0x19]
movups xmmword [rbx + 0x10], xmm1
mov edx, 7
mov word [rbp - 0x29], si
add rbx, 0x20
mov qword [rbp - 0x41], rbx
jmp 0x140020ce1
lea r8, [rbp - 0x29]
mov rdx, rbx
lea rcx, [rbp - 0x49]
call fcn.140024e30
mov rdi, qword [rbp - 0x39]
mov rbx, qword [rbp - 0x41]
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x140020d1d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020d18
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400210f8
call fcn.1400505d0
mov qword [rbp - 0x19], rsi
mov qword [rbp - 0x11], 7
mov word [rbp - 0x29], si
mov r8d, 0x12
lea rdx, str.SeRestorePrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d430
nop
cmp rbx, rdi
je 0x140020d6b
movups xmm0, xmmword [rbp - 0x29]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rbp - 0x19]
movups xmmword [rbx + 0x10], xmm1
mov edx, 7
mov word [rbp - 0x29], si
add rbx, 0x20
mov qword [rbp - 0x41], rbx
jmp 0x140020d87
lea r8, [rbp - 0x29]
mov rdx, rbx
lea rcx, [rbp - 0x49]
call fcn.140024e30
mov rdi, qword [rbp - 0x39]
mov rbx, qword [rbp - 0x41]
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x140020dc3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020dbe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400210f8
call fcn.1400505d0
mov qword [rbp - 0x19], rsi
mov qword [rbp - 0x11], 7
mov word [rbp - 0x29], si
mov r8d, 0x19
lea rdx, str.SeRemoteShutdownPrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d430
nop
cmp rbx, rdi
je 0x140020e11
movups xmm0, xmmword [rbp - 0x29]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rbp - 0x19]
movups xmmword [rbx + 0x10], xmm1
mov edx, 7
mov word [rbp - 0x29], si
add rbx, 0x20
mov qword [rbp - 0x41], rbx
jmp 0x140020e2d
lea r8, [rbp - 0x29]
mov rdx, rbx
lea rcx, [rbp - 0x49]
call fcn.140024e30
mov rdi, qword [rbp - 0x39]
mov rbx, qword [rbp - 0x41]
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x140020e69
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020e64
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400210f8
call fcn.1400505d0
mov qword [rbp - 0x19], rsi
mov qword [rbp - 0x11], 7
mov word [rbp - 0x29], si
mov r8d, 0x12
lea rdx, str.SeRelabelPrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d430
nop
cmp rbx, rdi
je 0x140020eb7
movups xmm0, xmmword [rbp - 0x29]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rbp - 0x19]
movups xmmword [rbx + 0x10], xmm1
mov edx, 7
mov word [rbp - 0x29], si
add rbx, 0x20
mov qword [rbp - 0x41], rbx
jmp 0x140020ed3
lea r8, [rbp - 0x29]
mov rdx, rbx
lea rcx, [rbp - 0x49]
call fcn.140024e30
mov rdi, qword [rbp - 0x39]
mov rbx, qword [rbp - 0x41]
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x140020f0f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020f0a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400210f8
call fcn.1400505d0
mov qword [rbp - 0x19], rsi
mov qword [rbp - 0x11], 7
mov word [rbp - 0x29], si
mov r8d, 0x1f
lea rdx, str.SeProfileSingleProcessPrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d430
nop
cmp rbx, rdi
je 0x140020f5d
movups xmm0, xmmword [rbp - 0x29]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rbp - 0x19]
movups xmmword [rbx + 0x10], xmm1
mov edx, 7
mov word [rbp - 0x29], si
add rbx, 0x20
mov qword [rbp - 0x41], rbx
jmp 0x140020f79
lea r8, [rbp - 0x29]
mov rdx, rbx
lea rcx, [rbp - 0x49]
call fcn.140024e30
mov rdi, qword [rbp - 0x39]
mov rbx, qword [rbp - 0x41]
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x140020fb5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020fb0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400210f8
call fcn.1400505d0
mov qword [rbp - 0x19], rsi
mov qword [rbp - 0x11], 7
mov word [rbp - 0x29], si
mov r8d, 0x17
lea rdx, str.SeManageVolumePrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d430
nop
cmp rbx, rdi
je 0x140021003
movups xmm0, xmmword [rbp - 0x29]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rbp - 0x19]
movups xmmword [rbx + 0x10], xmm1
mov edx, 7
mov word [rbp - 0x29], si
add rbx, 0x20
mov qword [rbp - 0x41], rbx
jmp 0x14002101f
lea r8, [rbp - 0x29]
mov rdx, rbx
lea rcx, [rbp - 0x49]
call fcn.140024e30
mov rdi, qword [rbp - 0x39]
mov rbx, qword [rbp - 0x41]
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x14002105b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140021056
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400210f8
call fcn.1400505d0
mov qword [rbp - 0x19], rsi
mov qword [rbp - 0x11], 7
mov word [rbp - 0x29], si
mov r8d, 0x19
lea rdx, str.SeMachineAccountPrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d430
nop
cmp rbx, rdi
je 0x1400210a9
movups xmm0, xmmword [rbp - 0x29]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rbp - 0x19]
movups xmmword [rbx + 0x10], xmm1
mov edx, 7
mov word [rbp - 0x29], si
add rbx, 0x20
mov qword [rbp - 0x41], rbx
jmp 0x1400210c5
lea r8, [rbp - 0x29]
mov rdx, rbx
lea rcx, [rbp - 0x49]
call fcn.140024e30
mov rdi, qword [rbp - 0x39]
mov rbx, qword [rbp - 0x41]
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x140021104
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400210ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400210ff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400505d0
mov qword [rbp - 0x19], rsi
mov qword [rbp - 0x11], 7
mov word [rbp - 0x29], si
mov r8d, 0x15
lea rdx, str.SeLockMemoryPrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d430
nop
cmp rbx, rdi
je 0x140021159
movups xmm0, xmmword [rbp - 0x29]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rbp - 0x19]
movups xmmword [rbx + 0x10], xmm1
mov qword [rbp - 0x19], rsi
mov qword [rbp - 0x11], 7
mov word [rbp - 0x29], si
add rbx, 0x20
mov qword [rbp - 0x41], rbx
jmp 0x14002116a
lea r8, [rbp - 0x29]
mov rdx, rbx
lea rcx, [rbp - 0x49]
call fcn.140024e30
nop
lea rcx, [rbp - 0x29]
call fcn.14001d2e0
lea rdx, str.SeLoadDriverPrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d350
nop
lea rdx, [rbp - 0x29]
lea rcx, [rbp - 0x49]
call fcn.140022d10
nop
lea rcx, [rbp - 0x29]
call fcn.14001d2e0
lea rdx, str.SeIncreaseWorkingSetPrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d350
nop
lea rdx, [rbp - 0x29]
lea rcx, [rbp - 0x49]
call fcn.140022d10
nop
lea rcx, [rbp - 0x29]
call fcn.14001d2e0
lea rdx, str.SeIncreaseQuotaPrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d350
nop
lea rdx, [rbp - 0x29]
lea rcx, [rbp - 0x49]
call fcn.140022d10
nop
lea rcx, [rbp - 0x29]
call fcn.14001d2e0
lea rdx, str.SeIncreaseBasePriorityPrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d350
nop
lea rdx, [rbp - 0x29]
lea rcx, [rbp - 0x49]
call fcn.140022d10
nop
lea rcx, [rbp - 0x29]
call fcn.14001d2e0
lea rdx, str.SeImpersonatePrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d350
nop
lea rdx, [rbp - 0x29]
lea rcx, [rbp - 0x49]
call fcn.140022d10
nop
lea rcx, [rbp - 0x29]
call fcn.14001d2e0
lea rdx, str.SeEnableDelegationPrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d350
nop
lea rdx, [rbp - 0x29]
lea rcx, [rbp - 0x49]
call fcn.140022d10
nop
lea rcx, [rbp - 0x29]
call fcn.14001d2e0
lea rdx, str.SeDebugPrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d350
nop
lea rdx, [rbp - 0x29]
lea rcx, [rbp - 0x49]
call fcn.140022d10
nop
lea rcx, [rbp - 0x29]
call fcn.14001d2e0
lea rdx, str.SeCreateTokenPrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d350
nop
lea rdx, [rbp - 0x29]
lea rcx, [rbp - 0x49]
call fcn.140022d10
nop
lea rcx, [rbp - 0x29]
call fcn.14001d2e0
lea rdx, str.SeCreateSymbolicLinkPrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d350
nop
lea rdx, [rbp - 0x29]
lea rcx, [rbp - 0x49]
call fcn.140022d10
nop
lea rcx, [rbp - 0x29]
call fcn.14001d2e0
lea rdx, str.SeCreatePermanentPrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d350
nop
lea rdx, [rbp - 0x29]
lea rcx, [rbp - 0x49]
call fcn.140022d10
nop
lea rcx, [rbp - 0x29]
call fcn.14001d2e0
lea rdx, str.SeCreatePagefilePrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d350
nop
lea rdx, [rbp - 0x29]
lea rcx, [rbp - 0x49]
call fcn.140022d10
nop
lea rcx, [rbp - 0x29]
call fcn.14001d2e0
lea rdx, str.SeCreateGlobalPrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d350
nop
lea rdx, [rbp - 0x29]
lea rcx, [rbp - 0x49]
call fcn.140022d10
nop
lea rcx, [rbp - 0x29]
call fcn.14001d2e0
lea rdx, str.SeBackupPrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d350
nop
lea rdx, [rbp - 0x29]
lea rcx, [rbp - 0x49]
call fcn.140022d10
nop
lea rcx, [rbp - 0x29]
call fcn.14001d2e0
lea rdx, str.SeAuditPrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d350
nop
lea rdx, [rbp - 0x29]
lea rcx, [rbp - 0x49]
call fcn.140022d10
nop
lea rcx, [rbp - 0x29]
call fcn.14001d2e0
lea rdx, str.SeAssignPrimaryTokenPrivilege
lea rcx, [rbp - 0x29]
call fcn.14001d350
nop
lea rdx, [rbp - 0x29]
lea rcx, [rbp - 0x49]
call fcn.140022d10
nop
lea rcx, [rbp - 0x29]
call fcn.14001d2e0
lea rdx, [rbp - 0x49]
lea rcx, [rbp - 0x29]
call fcn.140022d70
mov rcx, rax
call fcn.14001fea0
lea rcx, [rbp - 9]
test al, al
jne 0x140021407
call fcn.14001e440
nop
mov dword [rax + 0x4c], 3
lea rdx, str.Dropping_Privileges:_Failure
mov rcx, rax
call fcn.14001eaa0
nop
jmp 0x140021424
call fcn.14001e440
nop
mov dword [rax + 0x4c], 1
lea rdx, str.Dropping_Privileges:_Success
mov rcx, rax
call fcn.14001eaa0
nop
lea rcx, [rbp - 9]
call fcn.14001e5f0
nop
lea rcx, [rbp - 0x49]
call fcn.140023e60
xor eax, eax
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.140050320
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret