Function at 0x447d60
Capabilities:
Get user security identifier

Disassembly:
push 0xffffffffffffffff
push 0x4e8af8
mov eax, dword fs:[0]
push eax
mov eax, 0x1424
call fcn.004c3aa0
mov eax, dword [0x670f1c]
xor eax, esp
mov dword [esp + 0x1420], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x670f1c]
xor eax, esp
push eax
lea eax, [esp + 0x1438]
mov dword fs:[0], eax
mov eax, dword [esp + 0x1448]
mov esi, ecx
push eax
mov dword [esp + 0x34], esi
call fcn.00418770
mov al, byte [esp + 0x144c]
xor ebx, ebx
lea edi, [esi + 0x1ee]
mov dword [esi], vtable.Clunet::CCluPipeThread.0
mov byte [esi + 0x1ec], al
mov ebp, 7
mov dword [edi + 0x18], ebp
mov dword [edi + 0x14], ebx
mov dword [esp + 0x1440], ebx
mov word [edi + 4], bx
lea ecx, [esi + 0x222]
push ebx
mov byte [esp + 0x1444], 1
call fcn.00411700
mov dword [esi + 0x100254], ebp
mov dword [esi + 0x100250], ebx
mov word [esi + 0x100240], bx
mov byte [esi + 0x100258], bl
mov byte [esi + 0x10025a], 1
mov word [esi + 0x10025c], bx
mov dword [esi + 0x10025e], ebx
mov word [esi + 0x100262], bx
mov dword [esi + 0x100264], ebx
mov byte [esi + 0x100268], bl
mov byte [esi + 0x100269], bl
mov word [esi + 0x10026a], bx
mov word [esi + 0x10026c], bx
mov byte [esi + 0x10026e], bl
lea ebp, [esi + 0x100272]
mov byte [esi + 0x100270], 1
mov dword [ebp + 0x18], 7
mov dword [ebp + 0x14], ebx
mov word [ebp + 4], bx
push 0x100000
mov byte [esp + 0x1444], 3
mov dword [esi + 0x10028e], ebx
mov byte [esi + 0x100292], bl
mov word [esi + 0x100294], bx
mov word [esi + 0x100296], bx
mov dword [esi + 0x100298], ebx
mov dword [esi + 0x10029c], ebx
mov dword [esi + 0x1002a0], ebx
mov dword [esi + 0x1002a4], ebx
mov dword [esi + 0x1002a8], ebx
mov dword [esi + 0x1002ac], ebx
mov dword [esi + 0x1002b0], ebx
mov dword [esi + 0x1002b4], ebx
mov dword [esi + 0x1002b8], ebx
mov dword [esi + 0x1002bc], ebx
mov dword [esi + 0x1002c8], ebx
mov dword [esi + 0x1002cc], ebx
mov dword [esi + 0x1002d0], ebx
mov dword [esi + 0x1002d4], ebx
mov dword [esi + 0x1002d8], ebx
mov byte [esi + 0x1002ec], bl
mov word [esi + 0x1002ee], bx
mov byte [esi + 0x1002f0], bl
mov dword [esi + 0xc], 9
call fcn.004aef3e
add esp, 4
cmp byte [esi + 0x1ec], bl
mov dword [esi + 0x10022c], eax
mov eax, 5
mov word [esi + 0x10026a], ax
mov word [esi + 0x10026c], ax
push 6
mov ecx, edi
je 0x447f3b
push 0x4fd120
jmp 0x447f40
push 0x4fd130
call fcn.00401930
cmp dword [esi + 0x90], 8
jb 0x447f53
mov eax, dword [esi + 0x7c]
jmp 0x447f56
lea eax, [esi + 0x7c]
push eax
lea ecx, [esp + 0x1c]
call fcn.00406e40
mov ecx, dword [esp + 0x18]
push 0x5c
push ecx
mov byte [esp + 0x1448], 4
call fcn.004c67c5
add esp, 8
cmp eax, ebx
je 0x447fcf
sub eax, dword [esp + 0x18]
sar eax, 1
js 0x447fcf
add eax, 1
push eax
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0x20]
call fcn.00406390
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x1444], 5
call fcn.00407450
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x1440], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x447fcf
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp dword [0x66e38c], 8
mov eax, dword [0x66e378]
jae 0x447fe2
mov eax, 0x66e378
push eax
lea ecx, [esp + 0x1c]
push 0x4fd140
push ecx
call fcn.00423e70
mov edx, dword [esp + 0x24]
add esp, 0xc
cmp dword [edx - 4], 1
jle 0x448010
mov edx, dword [edx - 0xc]
push edx
lea ecx, [esp + 0x1c]
call fcn.00406b50
mov edx, dword [esp + 0x18]
mov eax, edx
lea ecx, [eax + 2]
mov dword [esp + 0x14], ecx
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x448020
sub eax, dword [esp + 0x14]
mov ecx, ebp
sar eax, 1
push eax
push edx
call fcn.00401930
cmp byte [esi + 0x1ec], bl
je 0x448279
mov ebp, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x6733cc
call ebp
mov dx, word [0x6733c0]
push 0x6733cc
mov word [esp + 0x18], dx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
movzx eax, word [esp + 0x14]
sub eax, 3
je 0x448143
sub eax, 1
jne 0x4482b2
push 0xffffffffffffffff
push ebx
push 0x66e438
lea ecx, [esi + 0x10023c]
call fcn.00401640
push 0x80000002
lea ecx, [esp + 0x20]
mov word [esi + 0x10025c], 1
call fcn.00454730
lea eax, [esp + 0x14]
push eax
push 0x4fd1a4
push 0x4fd1b4
lea ecx, [esp + 0x28]
mov byte [esp + 0x144c], 7
mov dword [esp + 0x20], ebx
call fcn.00455440
test eax, eax
je 0x448108
mov cx, word [esp + 0x14]
push 0x6733cc
mov word [esi + 0x10025c], cx
call ebp
push 0x6733cc
mov byte [0x6733c2], 1
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
movzx edx, word [esi + 0x10025c]
push edx
call fcn.0043f8f0
add esp, 4
mov byte [esi + 0x100270], bl
cmp dword [edi + 0x18], 8
jb 0x448119
mov edi, dword [edi + 4]
jmp 0x44811c
add edi, 4
push edi
push 0x4fd1e4
push 3
push esi
call fcn.00418e80
add esp, 0x10
lea ecx, [esp + 0x1c]
mov byte [esp + 0x1440], 4
call fcn.00454780
jmp 0x4482b2
call fcn.004b978a
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x44815d
push 0x80004005
call fcn.004069a0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x14], eax
push 0x6733cc
mov byte [esp + 0x1444], 6
call ebp
mov ecx, dword [0x6733c8]
push 0x6733cc
mov dword [esp + 0x20], ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [0x66e46c], 8
mov eax, dword [str.Exe_d]
jae 0x4481a4
mov eax, str.Exe_d
mov edx, dword [esp + 0x1c]
push edx
push eax
lea eax, [esp + 0x1c]
push eax
call fcn.00406da0
mov edx, dword [esp + 0x20]
add esp, 0xc
cmp dword [edx - 4], 1
jle 0x4481d2
mov ecx, dword [edx - 0xc]
push ecx
lea ecx, [esp + 0x18]
call fcn.00406b50
mov edx, dword [esp + 0x14]
mov eax, edx
lea ecx, [eax + 2]
mov dword [esp + 0x1c], ecx
jmp 0x4481e0
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4481e0
sub eax, dword [esp + 0x1c]
lea ecx, [esi + 0x10023c]
sar eax, 1
push eax
push edx
call fcn.00401930
push 0x6733cc
call ebp
push 0x6733cc
mov byte [0x6733c2], 1
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x6733cc
call ebp
mov ebp, dword [0x6733c8]
push 0x6733cc
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [edi + 0x18], 8
jb 0x44823a
mov edi, dword [edi + 4]
jmp 0x44823d
add edi, 4
push ebp
push edi
push 0x4fd148
push 3
push esi
call fcn.00418e80
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
add esp, 0x14
mov byte [esp + 0x1440], 4
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4482b2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x4482b2
push 0xffffffffffffffff
push ebx
push 0x66e438
lea ecx, [esi + 0x10023c]
call fcn.00401640
cmp dword [edi + 0x18], 8
jb 0x448297
mov edi, dword [edi + 4]
jmp 0x44829a
add edi, 4
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push edi
push 0x4fd228
push 3
push esi
call fcn.00418e80
add esp, 0x14
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x2c]
push edx
lea eax, [esp + 0xc3c]
push eax
lea ecx, [esp + 0x30]
push ecx
lea edx, [esp + 0x44]
push edx
push 0x4fd214
lea edi, [esi + 0x100234]
push ebx
mov dword [edi], ebx
mov dword [esi + 0x100238], ebx
mov dword [esp + 0x40], 0x400
mov dword [esp + 0x44], 0x800
call dword [sym.imp.ADVAPI32.dll_LookupAccountNameW]
cmp eax, ebx
je 0x4483a9
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x38]
push ecx
call sub.ADVAPI32.dll_ConvertSidToStringSidW
cmp eax, ebx
je 0x44839b
mov edx, dword [esp + 0x14]
push edx
push 0x4fd278
lea eax, [esp + 0x43c]
push 0x400
push eax
call fcn.004c678a
lea ecx, [esp + 0x444]
push ecx
push 0x4fd2b4
push 3
push esi
call fcn.00418e40
mov edx, dword [esp + 0x34]
add esp, 0x20
push edx
call dword [sym.imp.KERNEL32.dll_LocalFree]
push ebx
push edi
push 1
lea eax, [esp + 0x440]
push eax
call sub.ADVAPI32.dll_ConvertStringSecurityDescriptorToSecurityDescriptorW
cmp eax, ebx
je 0x44838d
push 0x4fd2d8
push 3
push esi
mov dword [esi + 0x100230], 0xc
mov dword [esi + 0x100238], ebx
call fcn.00418e40
add esp, 0xc
jmp 0x4483c0
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x4fd330
jmp 0x4483b5
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x4fd3c0
jmp 0x4483b5
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x4fd410
push 3
push esi
call fcn.00418e40
add esp, 0x10
mov dword [esi + 0x216], ebx
mov dword [esi + 0x21a], ebx
mov dword [esi + 0x20e], ebx
mov dword [esi + 0x212], ebx
mov dword [esi + 0x21e], ebx
mov dword [esi + 0x20a], ebx
mov dword [esi + 0x1002dc], ebx
lea ecx, [esi + 0x1002c0]
mov dword [esi + 0x1002e0], ebx
push ecx
mov dword [esi + 0x1002e4], ebx
lea ecx, [esi + 0x222]
mov dword [esi + 0x1002e8], ebx
call fcn.004113f0
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov byte [esp + 0x1440], 3
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x448436
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, esi
mov ecx, dword [esp + 0x1438]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x1420]
xor ecx, esp
call fcn.004bfdfd
add esp, 0x1430
ret 8