Function at 0x10027420
Capabilities:
Compare security identifiers

Disassembly:
sub esp, 0x28
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetVersion]
push edi
xor edi, edi
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], edi
call esi
movzx bx, ah
call esi
xor ecx, ecx
mov ch, al
or ecx, ebx
cmp cx, 0x602
jae 0x10027454
pop edi
pop esi
xor eax, eax
pop ebx
add esp, 0x28
ret
push str.Firewallapi.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, eax
cmp esi, edi
je 0x1002744b
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push ebp
push str.NetworkIsolationEnumAppContainers
push esi
call ebx
push str.NetworkIsolationFreeAppContainers
push esi
mov ebp, eax
call ebx
push str.NetworkIsolationGetAppContainerConfig
push esi
mov dword [esp + 0x38], eax
call ebx
push str.NetworkIsolationSetAppContainerConfig
push esi
mov dword [esp + 0x28], eax
call ebx
xor ebx, ebx
cmp ebp, ebx
mov dword [esp + 0x34], eax
je 0x100276ca
cmp dword [esp + 0x30], ebx
je 0x100276ca
cmp dword [esp + 0x20], ebx
je 0x100276ca
cmp eax, ebx
je 0x100276ca
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x1c]
push eax
push ebx
call ebp
test eax, eax
jne 0x100276c0
cmp dword [esp + 0x18], ebx
mov dword [esp + 0x28], ebx
jbe 0x100276b7
mov ebp, dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [esp + 0x2c], ebx
lea ecx, [ecx]
mov ecx, dword [esp + 0x1c]
xor esi, esi
add ebx, ecx
cmp word [str.microsoft.microsoftedge_8wekyb3d8bbwe], si
mov dword [esp + 0x24], esi
je 0x10027697
mov eax, str.microsoft.microsoftedge_8wekyb3d8bbwe
mov edi, edi
mov edx, dword [ebx + 8]
push eax
push edx
call fcn.1011fcf3
add esp, 8
test eax, eax
jne 0x10027676
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x14]
push ecx
mov dword [esp + 0x18], esi
mov dword [esp + 0x1c], esi
call dword [esp + 0x28]
test eax, eax
jne 0x10027676
mov eax, dword [esp + 0x10]
test eax, eax
jbe 0x10027574
jmp 0x10027550
mov edx, dword [ebx]
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + esi*8]
push edx
push ecx
call dword [sym.imp.ADVAPI32.dll_EqualSid]
test eax, eax
jne 0x10027640
mov eax, dword [esp + 0x10]
add esi, 1
cmp esi, eax
jb 0x10027550
lea edx, [eax*8 + 8]
push edx
push 0
call ebp
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov esi, eax
test esi, esi
je 0x10027640
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
lea ecx, [eax*8]
push ecx
push edx
push esi
call fcn.1011e560
mov eax, dword [esp + 0x1c]
xor edi, edi
mov dword [esi + eax*8 + 4], edi
mov ecx, dword [ebx]
mov edx, dword [esp + 0x1c]
mov dword [esi + edx*8], ecx
mov eax, dword [esp + 0x1c]
add esp, 0xc
cmp eax, edi
jbe 0x100275d9
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esp + 0x10]
add edi, 1
cmp edi, eax
jb 0x100275c6
push esi
add eax, 1
push eax
call dword [esp + 0x3c]
mov ecx, dword [ebx + 8]
mov edi, eax
mov eax, dword [ebx + 0xc]
push eax
push ecx
push str._NetworkIsolation__Set_App:__ws____ws__Loopback_Exempt
push 0x68a
push str.SetAppLoopbackExempt
neg edi
sbb edi, edi
push str..IsaNetwork.c
push 3
add edi, 1
call fcn.1014edc0
mov edx, dword [ebx + 0xc]
mov eax, dword [ebx + 8]
push edx
push eax
push str._NetworkIsolation__Set_App:__ws____ws__Loopback_Exempt
push 0x68a
push str.SetAppLoopbackExempt
push str..IsaNetwork.c
push 3
call fcn.1014f750
add esp, 0x38
push esi
push 0
call ebp
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
xor esi, esi
cmp dword [esp + 0x10], esi
jbe 0x10027664
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + esi*8]
push edx
push 0
call ebp
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
add esi, 1
cmp esi, dword [esp + 0x10]
jb 0x10027648
mov eax, dword [esp + 0x14]
push eax
push 0
call ebp
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
xor esi, esi
mov eax, dword [esp + 0x24]
add eax, 1
mov dword [esp + 0x24], eax
shl eax, 8
cmp word [eax + str.microsoft.microsoftedge_8wekyb3d8bbwe], si
lea eax, [eax + str.microsoft.microsoftedge_8wekyb3d8bbwe]
jne 0x10027510
mov eax, dword [esp + 0x28]
mov ebx, dword [esp + 0x2c]
add eax, 1
add ebx, 0x2c
cmp eax, dword [esp + 0x18]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ebx
jb 0x100274f0
mov ecx, dword [esp + 0x1c]
push ecx
call dword [esp + 0x34]
pop ebp
mov eax, edi
pop edi
pop esi
pop ebx
add esp, 0x28
ret
pop ebp
pop edi
pop esi
xor eax, eax
pop ebx
add esp, 0x28
ret