Function at 0x42bc15
Capabilities:
Compare security identifiers

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c0
movzx eax, byte [ebp + 0x24]
test eax, eax
je 0x42c8c4
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp + 0x3c]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x178], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x14c], eax
lea eax, [ebp + 0x28]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp + 0x38]
mov dword [ebp - 0x164], eax
lea eax, [ebp + 0x14]
mov dword [ebp - 0xe0], eax
lea eax, [ebp + 0x2c]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0xe8]
movzx eax, byte [eax]
test eax, eax
je 0x42c7e4
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0xf0]
movzx eax, byte [eax]
test eax, eax
je 0x42c7c9
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x20], eax
push 1
push 1
push 0x44cf
push 0x33ab
push 0x5a34
push 1
push 1
call fcn.0042a86f
add esp, 0x1c
push 0x14
push 0
push 0x679
push 0x5e9
call fcn.004072ea
pop ecx
pop ecx
call eax
push eax
push 0x679
push 0x4c9
call fcn.004072ea
pop ecx
pop ecx
call eax
mov ecx, dword [ebp - 0x20]
mov dword [ecx], eax
push 0x7e44
push 1
push 0x199d
push 0x1c79
push 1
push 0x4a30
push 0x3bf3
push 1
push 0x7a38
push 1
push 0x3599
push 0x32f9
push 0x7702
call fcn.0042abbd
add esp, 0x34
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ecx]
mov dword [eax + 4], ecx
mov dword [ebp - 0x194], 8
push 1
push 1
push 1
push 0x364
push 0x33d
push 1
push 0x125f
push 0x4b4e
push 0x58da
call fcn.00428ad0
add esp, 0x24
push 0x6526
push 1
push 0x442
push 1
push 1
call fcn.00428dff
add esp, 0x14
push 0x11f7
push 1
push 0x2517
push 1
push 0x73b6
push 1
push 1
push 0x5718
push 0x6466
push 0x6fdc
lea eax, [ebp - 0x20]
push eax
call fcn.00424c4e
add esp, 0x2c
mov dword [ebp - 0xc8], 0xfffffffe
push 2
lea ecx, [ebp - 0x190]
call fcn.0042f3cf
mov dword [ebp - 0x108], 0xffffffff
push 0x3bf0
push 1
push 1
push 0x337c
push 0x5ca9
push 0xcfe
push 0x6954
lea eax, [ebp - 0x1a8]
push eax
push 0x5e87
push 0x6193
lea eax, [ebp - 0x190]
push eax
push 0x1aa0
push 1
push 1
push 0x586c
push 0x3ee1
call fcn.0042b0a9
add esp, 0x40
push 0x1f9
push 1
push 1
push 1
lea eax, [ebp - 0xc8]
push eax
push 0x529d
push 0xf8d
call fcn.00424f96
add esp, 0x1c
lea eax, [ebp - 0xc8]
push eax
push 0xbdc
push 0x1dd9
push 1
push 1
push 0x380d
lea eax, [ebp - 0x190]
push eax
push 0x3370
push 0x50d4
push 0x4079
push 0x1f04
lea eax, [ebp - 0x108]
push eax
push 1
push 0x6f6e
call fcn.00425486
add esp, 0x38
lea ecx, [ebp - 0x190]
call fcn.0042f4a1
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
and dword [eax + 8], 0
mov dword [ebp - 8], 0xce125d16
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x2c], 0
jmp 0x42bf4c
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x42bf5f
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x1c], 0
jmp 0x42bf45
mov dword [ebp - 8], 0
jmp 0x42bf6f
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jg 0x42c252
mov dword [ebp - 0xc], 0x891f782a
mov dword [ebp - 0x10], 0xd7540573
mov dword [ebp - 0x9c], 0x15ee56e3
mov dword [ebp - 0x50], 0
mov dword [ebp - 0xc], 0
jmp 0x42bfa8
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jg 0x42c24d
mov dword [ebp - 0x118], 0x3e5f8859
mov eax, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0x1c], 0
je 0x42c040
mov eax, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0x1c], 4
jb 0x42bfd9
mov dword [ebp - 0x60], 1
jmp 0x42bfdd
and dword [ebp - 0x60], 0
cmp dword [ebp - 0x60], 1
ja 0x42bfef
mov dword [ebp - 0x17c], 1
jmp 0x42bff6
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x1c]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x1c]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0xc]
add eax, dword [ebp + ecx*4 - 0x1c]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
mov eax, dword [ebp - 0x50]
add eax, 0x2e124949
je 0x42c040
mov dword [ebp - 0x58], 1
jmp 0x42c044
and dword [ebp - 0x58], 0
mov dword [ebp - 0x10], 0x62b0
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xc]
mov edx, 0xbc99
sub edx, dword [ebp + ecx*4 - 0x1c]
imul edx, dword [ebp - 0x58]
lea eax, [eax + edx - 0x4981]
cmp eax, dword [ebp - 0x50]
jge 0x42c073
mov dword [ebp - 0x68], 1
jmp 0x42c077
and dword [ebp - 0x68], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x68], eax
je 0x42c08b
mov dword [ebp - 0xb4], 1
jmp 0x42c092
and dword [ebp - 0xb4], 0
cmp dword [ebp - 0xb4], 0x41b6ba00
jne 0x42c0a7
mov dword [ebp - 0x7c], 1
jmp 0x42c0ab
and dword [ebp - 0x7c], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x7c], eax
je 0x42c0bf
mov dword [ebp - 0xa4], 1
jmp 0x42c0c6
and dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0xa4]
sub eax, dword [ebp - 8]
add eax, 0x7f1bd53d
je 0x42c10e
mov byte [ebp - 0x21], 0
movzx eax, byte [ebp - 0x21]
test eax, eax
je 0x42c109
push 0x7434
push 0x6e9c
push 1
push 1
push 0x24fb
push 1
push 0x1400
push 0x3cb9
call fcn.004290c8
add esp, 0x20
jmp 0x42c248
mov dword [ebp - 0x1c0], 1
mov dword [ebp - 0x19c], 0x4bf7a832
mov dword [ebp - 0x10], 0
jmp 0x42c132
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jg 0x42c248
mov dword [ebp - 0x13c], 8
mov dword [ebp - 0x18], 0
jmp 0x42c156
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x42c20a
mov dword [ebp - 0x1bc], 0xfffffff8
mov dword [ebp - 0x1a4], 0x3b017290
mov dword [ebp - 0x30], 0
jmp 0x42c184
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x42c19a
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x110], 0x9459
jmp 0x42c17d
mov eax, dword [ebp - 0xc]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x110]
cmp dword [ebp + eax*4 - 0x1c], ecx
jne 0x42c1db
lea eax, [ebp - 0x13c]
push eax
push 1
push 0x5961
push 1
push 0x995
push 0x4e08
push 0x37d8
push 1
call fcn.00429388
add esp, 0x20
jmp 0x42c205
push 0x7892
push 0x1c01
push 1
push 0x50b4
push 1
push 1
push 1
push 1
push 1
push 1
push 0x184f
call fcn.00425871
add esp, 0x2c
jmp 0x42c14f
lea eax, [ebp - 0x118]
push eax
push 0x66c3
push 1
lea eax, [ebp - 0x10]
push eax
push 1
push 1
push 0xc39
push 0x3a16
push 1
push 0xd7e
push 0x4e54
push 0x61e2
call fcn.004296f7
add esp, 0x30
jmp 0x42c12b
jmp 0x42bfa1
jmp 0x42bf68
push 0x971
push 0xdf6
push 0x5430
push 0x5547
push 0x2fa3
push 1
push 1
push 0x7de2
push 0x6582
push 1
push 0x5469
push 0x7e6c
push 0x6c1
push 0x6162
push 1
push 0x2ffe
push 0x70ff
lea eax, [ebp - 0x18]
push eax
push 0x2041
push 0x5f5
push 0xb56
push 0x1c3
lea eax, [ebp - 8]
push eax
call fcn.004268f6
add esp, 0x5c
lea eax, [ebp - 0x20]
push eax
push 1
push 0x15da
push 0x1556
push 1
push 1
push 0x662c
push 1
push 0x518f
push 0x531d
call fcn.0042a2b8
add esp, 0x28
push 4
push 0x1000
mov eax, dword [ebp - 0x40]
push dword [eax + 0x50]
mov eax, dword [ebp - 0x34]
push dword [eax]
push 0x679
push 0x559
call fcn.004072ea
pop ecx
pop ecx
call eax
push 4
push 0x1000
mov eax, dword [ebp - 0x40]
push dword [eax + 0x54]
mov eax, dword [ebp - 0x34]
push dword [eax]
push 0x679
push 0x559
call fcn.004072ea
pop ecx
pop ecx
call eax
mov ecx, dword [ebp - 0x4c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 0x3c]
mov ecx, dword [ebp - 0x40]
add eax, dword [ecx + 0x54]
push eax
push dword [ebp - 0x54]
mov eax, dword [ebp - 0x4c]
push dword [eax]
call fcn.004077c9
add esp, 0xc
mov dword [ebp - 0x5c], 0xd44c039e
push 3
lea ecx, [ebp - 0xd4]
call fcn.0042f3cf
mov dword [ebp - 0xb0], 0xffff
mov dword [ebp - 0x38], 0x604491d0
mov dword [ebp - 0x44], 0x15b01d9
mov dword [ebp - 0x48], 0xffff
mov dword [ebp - 0x94], 0x25e42506
mov dword [ebp - 0xbc], 0xbc6a687e
mov dword [ebp - 0x88], 7
mov dword [ebp - 0x150], 0x127b1aa4
mov dword [ebp - 0x128], 0x5024d8f3
mov dword [ebp - 0x158], 4
mov dword [ebp - 4], 0
jmp 0x42c3d7
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 3
jge 0x42c3ea
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x74], 0xbf90edca
jmp 0x42c3d0
push 0x2dd2
push 0x5c80
lea eax, [ebp - 0xd4]
push eax
push 1
push 1
lea eax, [ebp - 4]
push eax
push 0xa0d
push 0x7a08
push 0x7176
push 0x6eab
push 0x45a4
push 0x31c3
push 1
call fcn.0042720f
add esp, 0x34
mov dword [ebp - 4], 0
jmp 0x42c43b
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jge 0x42c451
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x184], 0x31364f2c
jmp 0x42c434
push 1
lea ecx, [ebp - 0xd4]
call fcn.0042f4bd
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x74], 0
ja 0x42c476
mov dword [ebp - 0x148], 1
jmp 0x42c47d
and dword [ebp - 0x148], 0
push 1
lea ecx, [ebp - 0xd4]
call fcn.0042f4bd
cmp dword [eax], 0xf738
jne 0x42c49e
mov dword [ebp - 0x84], 1
jmp 0x42c4a5
and dword [ebp - 0x84], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x74]
cmp dword [ebp - 0x84], eax
jle 0x42c4c3
mov dword [ebp - 0xc4], 1
jmp 0x42c4ca
and dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0xc4], eax
jne 0x42c4e4
mov dword [ebp - 0x8c], 1
jmp 0x42c4eb
and dword [ebp - 0x8c], 0
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x48]
imul eax, dword [ebp - 0x48]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x74]
jle 0x42c528
mov dword [ebp - 0xac], 1
jmp 0x42c52f
and dword [ebp - 0xac], 0
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jne 0x42c550
mov dword [ebp - 0x120], 1
jmp 0x42c557
and dword [ebp - 0x120], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x74]
mov dword [ebp - 0x198], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x74]
mov dword [ebp - 0x5c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x74]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x5c], eax
jne 0x42c597
mov dword [ebp - 0x64], 1
jmp 0x42c59b
and dword [ebp - 0x64], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x64], eax
je 0x42c5af
mov dword [ebp - 0x78], 1
jmp 0x42c5b3
and dword [ebp - 0x78], 0
cmp dword [ebp - 0x78], 0xb9cb
jle 0x42c5c5
mov dword [ebp - 0x80], 1
jmp 0x42c5c9
and dword [ebp - 0x80], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x88]
add eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x44]
jge 0x42c5ec
mov dword [ebp - 0x90], 1
jmp 0x42c5f3
and dword [ebp - 0x90], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x74]
cmp eax, dword [ebp - 0x90]
jg 0x42c611
mov dword [ebp - 0x98], 1
jmp 0x42c618
and dword [ebp - 0x98], 0
push 1
lea ecx, [ebp - 0xd4]
call fcn.0042f4bd
mov ecx, dword [ebp - 0x98]
cmp ecx, dword [eax]
jle 0x42c63b
mov dword [ebp - 0xa0], 1
jmp 0x42c642
and dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0xa0], eax
jge 0x42c659
mov dword [ebp - 0x3c], 1
jmp 0x42c65d
and dword [ebp - 0x3c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c]
mov dword [ebp + eax - 0x74], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3c]
mov dword [ebp + eax - 0x184], ecx
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x1a0], eax
push 0
lea ecx, [ebp - 0xd4]
call fcn.0042f4bd
cmp dword [eax], 0x6ce2
jle 0x42c6a4
mov dword [ebp - 0xa8], 1
jmp 0x42c6ab
and dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x158], eax
push 0xfffffffffffffff8
pop eax
test eax, eax
je 0x42c6d3
cmp dword [ebp - 0xb0], 0
je 0x42c6d3
mov dword [ebp - 0xb8], 1
jmp 0x42c6da
and dword [ebp - 0xb8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xb8]
mov dword [ebp + eax - 0x184], ecx
lea ecx, [ebp - 0xd4]
call fcn.0042f4a1
push 0x7a6a
push 0xaa6
push 0x1b80
push 1
push 1
lea eax, [ebp - 0x4c]
push eax
push 1
push 1
push 0x22b1
push 0x5c29
push 0x5ca8
lea eax, [ebp - 0x20]
push eax
push 0x1996
lea eax, [ebp - 0x54]
push eax
call fcn.0042745b
add esp, 0x38
mov dword [ebp - 0x160], 0x9b3198a8
mov dword [ebp - 0x130], 0x5cbcef05
mov dword [ebp - 0x168], 0xc0233fd5
mov dword [ebp - 0x138], 0x5ffff323
push 0x255c
push 1
push 0x688a
push 0x2e01
push 0x5be6
push 0x3ffd
push 0x7ace
push 0x36b
push 1
lea eax, [ebp - 0x130]
push eax
push 0x37db
push 1
push 0x2ff3
lea eax, [ebp - 0x160]
push eax
push 1
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x168]
push eax
call fcn.0042b63b
add esp, 0x44
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ecx]
mov dword [eax + 0x34], ecx
jmp 0x42c7df
mov byte [ebp - 0x11], 0
movzx eax, byte [ebp - 0x11]
test eax, eax
je 0x42c7df
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_EqualSid]
jmp 0x42c8c2
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0xe4]
movzx eax, byte [eax]
test eax, eax
je 0x42c886
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x28]
mov dword [eax], 0
jmp 0x42c864
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x28]
mov dword [ecx], eax
mov eax, dword [ebp - 0x28]
cmp dword [eax], 4
jge 0x42c884
mov eax, dword [ebp - 0x28]
push dword [eax]
mov ecx, dword [ebp - 0x10c]
call fcn.0042f4bd
mov dword [eax], 1
jmp 0x42c859
jmp 0x42c8c2
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x124], eax
push 0
mov ecx, dword [ebp - 0x124]
call fcn.0042f4bd
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xc0]
mov dword [ecx], eax
jmp 0x42c8fd
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x12c], eax
push 0x59eb
push 0x4385
push dword [ebp - 0x12c]
push 0
push 1
push 0x6a05
push dword [ebp - 0x134]
call fcn.00415d70
add esp, 0x1c
mov esp, ebp
pop ebp
ret