Function at 0x1000ac3e
Capabilities:
Compare security identifiers

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x50
xor edi, edi
mov ecx, 0x42533932
cmp ecx, 0xef329719
jle 0x1000acab
cmp ecx, 0x2ba01a3e
jle 0x1000ad6c
cmp ecx, 0x47f96cd9
jle 0x1000ae1a
cmp ecx, 0x5f227598
jle 0x1000afd2
cmp ecx, 0x6fbaf91e
jle 0x1000b381
cmp ecx, 0x76e07572
jg 0x1000b871
cmp ecx, 0x6fbaf91f
je 0x1000b90e
cmp ecx, 0x71128959
jne 0x1000ac4c
mov ecx, 0x5f227599
jmp 0x1000ac4c
cmp ecx, 0xbdaca501
jle 0x1000adc8
cmp ecx, 0xd95554b6
jle 0x1000aeac
cmp ecx, 0xe1747767
jle 0x1000b087
cmp ecx, 0xe6c64e13
jg 0x1000b3b3
cmp ecx, 0xe6c21c68
jle 0x1000b8f8
cmp ecx, 0xe6c21c69
je 0x1000b97d
cmp ecx, 0xe6c57b9f
jne 0x1000ac4c
mov eax, dword [0x10098dec]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xd286e8ae
mov edx, eax
and edx, 0x2d791751
or edx, ecx
xor edx, 0x2d791750
and eax, 0xfffffffe
or eax, edx
xor eax, 0xa390a1ed
cmp eax, 0x5c6f5e12
setne cl
cmp dword [0x10098df0], 0xa
setge ah
setl al
xor al, cl
or ah, cl
mov edx, eax
xor dl, ah
mov ebx, 0x71128959
mov ebp, 0x5f227599
mov ecx, 0x71128959
test ah, ah
jne 0x1000c20d
mov ecx, 0x5f227599
jmp 0x1000c20d
cmp ecx, 0x8380a06
jg 0x1000af3e
cmp ecx, 0x239177d
jg 0x1000b138
cmp ecx, 0xfb0c722f
jg 0x1000b40a
cmp ecx, 0xef32971a
je 0x1000b991
cmp ecx, 0xfa9b3099
je 0x1000b9ab
cmp ecx, 0xfad7a58a
jne 0x1000ac4c
mov eax, dword [esp + 0x44]
push dword [esp + 0x40]
push dword [eax]
call sub.ADVAPI32.dll_ConvertSidToStringSidW
jmp 0x1000b5e3
cmp ecx, 0x9b7e65a5
jg 0x1000af84
cmp ecx, 0x896cdc6b
jg 0x1000b178
cmp ecx, 0x87f6f4ee
jg 0x1000b482
cmp ecx, 0x83adb841
je 0x1000b9c5
cmp ecx, 0x8483f175
je 0x1000b9de
cmp ecx, 0x86898b2c
jne 0x1000ac4c
mov ecx, 0x9b7e65a6
jmp 0x1000ac4c
cmp ecx, 0x3a14ecc9
jg 0x1000b1ba
cmp ecx, 0x37b28c24
jg 0x1000b513
cmp ecx, 0x2ba01a3f
je 0x1000b9e8
cmp ecx, 0x34031ec5
je 0x1000b9fe
cmp ecx, 0x354c42a8
jne 0x1000ac4c
mov eax, dword [0x10098dec]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
xor eax, ecx
test eax, ecx
sete cl
setne ah
cmp dword [0x10098df0], 0xa
setl dl
setge al
and cl, al
or al, ah
and dl, ah
or dl, cl
mov ecx, eax
xor cl, dl
mov ebx, 0xe8d02e3
mov ecx, 0x83adb841
jne 0x1000c643
mov ebx, 0x83adb841
jmp 0x1000c643
cmp ecx, 0xc60d0466
jg 0x1000b261
cmp ecx, 0xc455c21a
jg 0x1000b582
cmp ecx, 0xbdaca502
je 0x1000ba63
cmp ecx, 0xc113846a
je 0x1000bac2
cmp ecx, 0xc142235a
jne 0x1000ac4c
mov eax, dword [0x10098dec]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
xor eax, ecx
test eax, ecx
sete cl
setne ah
cmp dword [0x10098df0], 0xa
setl dl
setge al
and cl, al
or al, ah
and dl, ah
or dl, cl
mov ecx, eax
xor cl, dl
mov ebx, 0x22e6479e
mov ecx, 0x22947fd0
jne 0x1000c643
mov ebx, 0x22947fd0
jmp 0x1000c643
cmp ecx, 0x1d159dcb
jg 0x1000b29b
cmp ecx, 0x15772cfb
jg 0x1000b5bf
cmp ecx, 0x8380a07
je 0x1000bacc
cmp ecx, 0x9d739ca
je 0x1000bada
cmp ecx, 0xe8d02e3
jne 0x1000ac4c
mov ecx, 0x354c42a8
jmp 0x1000ac4c
cmp ecx, 0xa6a4ee21
jg 0x1000b2d5
cmp ecx, 0xa302b5a1
jg 0x1000b5ed
cmp ecx, 0x9b7e65a6
je 0x1000baea
cmp ecx, 0xa0681f62
je 0x1000b9d4
cmp ecx, 0xa11c386c
jne 0x1000ac4c
mov eax, dword [esp + 0x10]
mov dword [esp + 0x4c], eax
mov ecx, 0xe1dff21c
jmp 0x1000ac4c
cmp ecx, 0x55598625
jg 0x1000b688
cmp ecx, 0x47f96cda
je 0x1000bb32
cmp ecx, 0x4a704774
je 0x1000bb59
cmp ecx, 0x4be9671f
jne 0x1000ac4c
mov eax, dword [esp + 0x28]
push dword [esp + 0x24]
push dword [eax]
call dword [sym.imp.ADVAPI32.dll_EqualSid]
mov dword [esp + 0x2c], eax
mov eax, dword [0x10098dec]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xd7ad05e3
mov edx, eax
and edx, 0x2852fa1c
or edx, ecx
xor edx, 0x2852fa1d
and eax, 0xfffffffe
or eax, edx
xor eax, 0xffffffff
sete cl
setne dl
cmp dword [0x10098df0], 0xa
setge ah
setl dh
mov al, dh
xor al, dl
and al, dh
and ah, cl
and dh, dl
or dh, ah
mov dl, al
xor dl, dh
mov ebp, 0xe8d2768f
mov ecx, 0xfa9b3099
mov ebx, 0xe8d2768f
test dh, dh
jne 0x1000c20d
mov ebx, 0xfa9b3099
jmp 0x1000c20d
cmp ecx, 0xdc434c9d
jg 0x1000b6c6
cmp ecx, 0xd95554b7
je 0x1000bb63
cmp ecx, 0xda816485
je 0x1000bbbb
cmp ecx, 0xdc18f5a3
jne 0x1000ac4c
mov eax, dword [0x10098dec]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xb030c5cc
mov edx, eax
and edx, 0x4fcf3a33
or edx, ecx
xor edx, 0x4fcf3a32
and eax, 0xfffffffe
or eax, edx
xor eax, 0xca7927ba
cmp eax, 0x3586d845
sete dl
cmp dword [0x10098df0], 0xa
setl al
xor dl, al
mov ecx, 0x8483f175
mov ebx, 0x8483f175
jne 0x1000b10b
mov ebx, 0xc600f782
mov ah, dl
not ah
mov ebp, 0x8483f175
test ah, al
jne 0x1000b11a
mov ebp, ebx
test dl, dl
cmove ecx, ebp
test ah, al
mov word [esp + 0x1c], 0x500
mov dword [esp + 0x18], 0
cmove ecx, ebp
jmp 0x1000ac4c
cmp ecx, 0x45e13bf
jg 0x1000b6ff
cmp ecx, 0x239177e
je 0x1000bbc5
cmp ecx, 0x2906b84
je 0x1000bc2b
cmp ecx, 0x3bae465
jne 0x1000ac4c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 0xd95554b7
jmp 0x1000ac4c
cmp ecx, 0x91e0750f
jg 0x1000b737
cmp ecx, 0x896cdc6c
je 0x1000bc96
cmp ecx, 0x8b5b1b2e
je 0x1000bcef
cmp ecx, 0x8dae84d5
jne 0x1000ac4c
mov eax, dword [esp + 0xc]
mov dword [esp + 0x48], eax
mov ecx, 0x91e07510
jmp 0x1000ac4c
cmp ecx, 0x3fabf79f
jg 0x1000b765
cmp ecx, 0x3a14ecca
je 0x1000bd00
cmp ecx, 0x3e7dfeaa
je 0x1000bd29
cmp ecx, 0x3f6abce8
jne 0x1000ac4c
mov eax, dword [0x10098dec]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xb75e217b
mov edx, eax
and edx, 0x48a1de84
or edx, ecx
xor edx, 0x48a1de85
and eax, 0xfffffffe
or eax, edx
xor eax, 0x485efbb4
cmp eax, 0xb7a1044b
sete cl
cmp dword [0x10098df0], 0xa
setl dl
setge al
xor al, cl
mov ah, dl
xor ah, cl
or dl, cl
xor dl, 1
or dl, ah
mov ah, al
xor ah, dl
mov ebx, 0x4a704774
mov ebp, 0x1c4125c4
mov ecx, 0x4a704774
test dl, dl
jne 0x1000b257
mov ecx, 0x1c4125c4
test al, al
cmovne ecx, ebx
jmp 0x1000b67e
cmp ecx, 0xd2ec0a23
jg 0x1000b793
cmp ecx, 0xc60d0467
je 0x1000bd5f
cmp ecx, 0xca2d63f3
je 0x1000bd69
cmp ecx, 0xcc9b32d0
jne 0x1000ac4c
mov ecx, 0xebd641e0
jmp 0x1000ac4c
cmp ecx, 0x1f23488d
jg 0x1000b7c1
cmp ecx, 0x1d159dcc
je 0x1000bd73
cmp ecx, 0x1d32506a
je 0x1000bde8
cmp ecx, 0x1e5b344a
jne 0x1000ac4c
mov ecx, 0x95e502c2
jmp 0x1000ac4c
cmp ecx, 0xb2f86f99
jg 0x1000b7f3
cmp ecx, 0xa6a4ee22
je 0x1000bdf2
cmp ecx, 0xa8ab8821
je 0x1000bdfc
cmp ecx, 0xb2e178cb
jne 0x1000ac4c
mov eax, dword [0x10098dec]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x7c213016
mov edx, eax
and edx, 0x83decfe9
or edx, ecx
xor edx, 0x83decfe8
and eax, 0xfffffffe
or eax, edx
xor eax, 0xe8fea1e4
cmp eax, 0x17015e1b
sete bl
cmp dword [0x10098df0], 0xa
setl al
xor bl, al
mov edx, 0xc142235a
mov ecx, 0xc142235a
jne 0x1000b359
mov ecx, 0xc455c21b
mov ah, bl
not ah
test ah, al
jne 0x1000b366
mov ecx, 0xc455c21b
test bl, bl
cmovne ecx, edx
test ah, al
mov eax, dword [esp + 0x14]
cmovne ecx, edx
cmp eax, 0x7a
sete byte [esp + 1]
jmp 0x1000ac4c
cmp ecx, 0x5f227599
je 0x1000be61
cmp ecx, 0x6cdb039c
je 0x1000beb3
cmp ecx, 0x6e35ffea
jne 0x1000ac4c
mov eax, dword [esp + 0x2c]
mov ecx, 0x2906b84
jmp 0x1000ac4c
cmp ecx, 0xe6c64e14
je 0x1000bf12
cmp ecx, 0xe8d2768f
je 0x1000bf1c
cmp ecx, 0xebd641e0
jne 0x1000ac4c
mov dword [esp + 0xc], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea ecx, [esp + 0xc]
push ecx
push 8
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
mov ecx, 0xa11c386c
test eax, eax
je 0x1000ac4c
mov ecx, 0x2995e4
jmp 0x1000ac4c
cmp ecx, 0xfb0c7230
je 0x1000bf26
cmp ecx, 0xbdfa7
je 0x1000bf3c
cmp ecx, 0x2995e4
jne 0x1000ac4c
mov ecx, dword [0x10098dec]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xe38871
and eax, 0xff1c778e
or eax, edx
xor eax, 0xe38870
or eax, ecx
cmp eax, 0xffffffff
setne cl
cmp dword [0x10098df0], 0xa
setge ah
mov al, ah
or al, cl
xor ah, cl
mov edx, eax
xor dl, ah
mov ecx, 0x5a7e9dbf
mov ebp, 0x45e13c0
mov ebx, 0x5a7e9dbf
jmp 0x1000c390
cmp ecx, 0x87f6f4ef
je 0x1000bf9a
cmp ecx, 0x880dfeb4
je 0x1000bfac
cmp ecx, 0x8962377b
jne 0x1000ac4c
mov eax, dword [0x10098dec]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xdd7dc9ce
mov edx, eax
and edx, 0x22823631
or edx, ecx
xor edx, 0x22823630
and eax, 0xfffffffe
or eax, edx
xor eax, 0xffffffff
sete al
setne cl
cmp dword [0x10098df0], 0xa
setge ah
setl dl
and dl, cl
and al, ah
or al, dl
or ah, cl
mov dl, ah
xor dl, al
mov ebp, 0xca2d63f3
mov ecx, 0xb2f86f9a
mov ebx, 0xca2d63f3
test ah, ah
jne 0x1000c19e
mov ebx, 0xb2f86f9a
jmp 0x1000c19e
cmp ecx, 0x37b28c25
je 0x1000c00c
cmp ecx, 0x39190c5d
je 0x1000c081
cmp ecx, 0x391abc7e
jne 0x1000ac4c
mov eax, dword [0x10098dec]
lea ecx, [eax + 1]
imul ecx, eax
test cl, 1
sete dl
cmp dword [0x10098df0], 0xa
setl ah
setge al
and dl, al
or al, cl
and ah, cl
or ah, dl
mov edx, eax
xor dl, ah
mov ecx, 0x239177e
mov ebp, 0xe6c21c69
mov ebx, 0x239177e
test ah, ah
jne 0x1000c25e
mov ebx, 0xe6c21c69
jmp 0x1000c25e
cmp ecx, 0xc455c21b
je 0x1000c0d3
cmp ecx, 0xc4d9ab53
je 0x1000c0e1
cmp ecx, 0xc600f782
jne 0x1000ac4c
mov word [esp + 0x1c], 0x500
mov dword [esp + 0x18], 0
mov ecx, 0xdc18f5a3
jmp 0x1000ac4c
cmp ecx, 0x15772cfc
je 0x1000c13a
cmp ecx, 0x1c05541f
je 0x1000c1a5
cmp ecx, 0x1c4125c4
jne 0x1000ac4c
mov ecx, 0xe1747768
jmp 0x1000ac4c
cmp ecx, 0xa302b5a2
je 0x1000c21c
cmp ecx, 0xa34eab59
je 0x1000c26e
cmp ecx, 0xa3771f5a
jne 0x1000ac4c
mov ecx, dword [0x10098dec]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x8c892b37
and eax, 0x7376d4c8
or eax, edx
xor eax, 0x7376d4c9
xor ecx, eax
test ecx, eax
setne al
sete cl
cmp dword [0x10098df0], 0xa
setl dl
setge ah
and ah, cl
and al, dl
or al, ah
mov ah, dl
xor ah, cl
or dl, cl
xor dl, 1
or dl, ah
mov ah, dl
xor ah, al
mov ebp, 0xca2d63f3
mov ecx, 0x8962377b
mov ebx, 0xca2d63f3
test dl, dl
jne 0x1000b679
mov ebx, 0x8962377b
test al, al
cmovne ebp, ebx
test ah, ah
cmovne ecx, ebp
jmp 0x1000ac4c
cmp ecx, 0x55598626
je 0x1000c2cb
cmp ecx, 0x5a7e9dbf
je 0x1000c33d
cmp ecx, 0x5d8c9cb5
jne 0x1000ac4c
cmp byte [esp + 3], 0
mov ecx, 0x8b5b1b2e
jne 0x1000ac4c
mov ecx, 0x2ba01a3f
jmp 0x1000ac4c
cmp ecx, 0xdc434c9e
je 0x1000c39f
cmp ecx, 0xdca8b11c
je 0x1000c3c6
cmp ecx, 0xe132f9cf
jne 0x1000ac4c
cmp byte [esp + 1], 0
mov ecx, 0x34031ec5
jne 0x1000ac4c
jmp 0x1000b9d4
cmp ecx, 0x45e13c0
je 0x1000c42d
cmp ecx, 0x49be164
je 0x1000c437
cmp ecx, 0x7b9d3cc
jne 0x1000ac4c
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [esp + 0x34], eax
mov ecx, 0x3a14ecca
jmp 0x1000ac4c
cmp ecx, 0x91e07510
je 0x1000c441
cmp ecx, 0x95e502c2
je 0x1000c455
cmp ecx, 0x978d84d2
jne 0x1000ac4c
mov ecx, 0x6fbaf91f
jmp 0x1000ac4c
cmp ecx, 0x3fabf7a0
je 0x1000b9a1
cmp ecx, 0x42533932
je 0x1000c49a
cmp ecx, 0x45142f0b
jne 0x1000ac4c
mov ecx, 0xe132f9cf
jmp 0x1000ac4c
cmp ecx, 0xd2ec0a24
je 0x1000c4f7
cmp ecx, 0xd496910f
je 0x1000c511
cmp ecx, 0xd4f67f63
jne 0x1000ac4c
mov ecx, 0x55598626
jmp 0x1000ac4c
cmp ecx, 0x1f23488e
je 0x1000c570
cmp ecx, 0x22947fd0
je 0x1000c57a
cmp ecx, 0x22e6479e
jne 0x1000ac4c
mov eax, dword [esp + 0x14]
mov ecx, 0xa34eab59
jmp 0x1000ac4c
cmp ecx, 0xb2f86f9a
je 0x1000c5e2
cmp ecx, 0xbcb301a2
je 0x1000c5ec
cmp ecx, 0xbd45e49d
jne 0x1000ac4c
mov ecx, dword [0x10098dec]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
not eax
or eax, ecx
cmp eax, 0xffffffff
setne cl
cmp dword [0x10098df0], 0xa
setge ah
setl al
xor al, cl
or ah, cl
mov edx, eax
xor dl, ah
mov ebx, 0x86898b2c
mov ebp, 0x9b7e65a6
mov ecx, 0x86898b2c
test ah, ah
jne 0x1000c20d
mov ecx, 0x9b7e65a6
jmp 0x1000c20d
cmp ecx, 0x76e07573
je 0x1000c5f6
cmp ecx, 0x7bf17ed3
jne 0x1000ac4c
mov ecx, dword [0x10098dec]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x603960b6
and eax, 0x9fc69f49
or eax, edx
xor eax, 0x9fc69f48
xor ecx, eax
test ecx, eax
setne cl
sete ah
cmp dword [0x10098df0], 0xa
setl al
setge dl
and ah, dl
and al, cl
or al, ah
or dl, cl
mov ecx, edx
xor cl, al
mov ebx, 0x87f6f4ef
mov ecx, 0xcc9b32d0
jne 0x1000b8e1
mov ebx, 0xcc9b32d0
test dl, dl
cmovne ecx, ebx
test al, al
cmove ecx, ebx
mov dword [esp + 0x10], 0
jmp 0x1000ac4c
cmp ecx, 0xe1747768
jne 0x1000c652
mov ecx, 0x391abc7e
jmp 0x1000ac4c
mov eax, dword [0x10098dec]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x33d1f705
mov edx, eax
and edx, 0xcc2e08fa
or edx, ecx
xor edx, 0xcc2e08fb
and eax, 0xfffffffe
or eax, edx
xor eax, 0xffffffff
sete cl
setne ah
cmp dword [0x10098df0], 0xa
setge ch
setl dl
mov al, ch
xor ch, ah
and ah, dl
and al, cl
or al, ah
or dl, cl
xor dl, 1
or dl, ch
mov ecx, edx
xor cl, al
mov ebx, 0x978d84d2
mov ecx, 0x45142f0b
jne 0x1000c5d3
mov ebx, 0x45142f0b
jmp 0x1000c5d3
push dword [esp + 4]
call dword [sym.imp.ADVAPI32.dll_FreeSid]
mov ecx, 0x239177e
jmp 0x1000ac4c
cmp byte [esp + 2], 0
mov ecx, 0xbdaca502
jne 0x1000ac4c
mov ecx, 0xd2ec0a24
jmp 0x1000ac4c
mov eax, dword [esp + 0x28]
push dword [esp + 0x24]
push dword [eax]
call dword [sym.imp.ADVAPI32.dll_EqualSid]
mov ecx, 0x4be9671f
jmp 0x1000ac4c
cmp byte [esp], 0
mov ecx, 0x39190c5d
jne 0x1000ac4c
mov ecx, 0x8dae84d5
jmp 0x1000ac4c
mov ecx, 0x3e7dfeaa
jmp 0x1000ac4c
mov eax, dword [esp + 0x64]
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], esi
mov ecx, 0xfad7a58a
jmp 0x1000ac4c
mov ecx, dword [0x10098dec]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xf558446a
and eax, 0xaa7bb95
or eax, edx
xor eax, 0xf558446b
or eax, ecx
cmp eax, 0xffffffff
sete cl
cmp dword [0x10098df0], 0xa
setl dl
setge al
xor al, cl
mov ah, dl
xor ah, cl
or dl, cl
xor dl, 1
or dl, ah
mov ecx, eax
xor cl, dl
mov ecx, 0x1d159dcc
mov ebx, 0x1d159dcc
jne 0x1000ba59
mov ebx, 0xa3771f5a
test dl, dl
cmovne ecx, ebx
jmp 0x1000c648
mov ecx, dword [0x10098dec]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x54f3c3d8
and eax, 0xab0c3c27
or eax, edx
xor eax, 0x54f3c3d9
or eax, ecx
cmp eax, 0xffffffff
sete dl
cmp dword [0x10098df0], 0xa
setl ah
xor dl, ah
mov ebp, 0x55598626
mov ecx, 0xd4f67f63
mov ebx, 0x55598626
jne 0x1000bab1
mov ebx, 0xd4f67f63
mov al, dl
not al
test al, ah
cmovne ecx, ebx
cmovne ecx, ebp
jmp 0x1000c212
mov ecx, 0x7b9d3cc
jmp 0x1000ac4c
mov eax, dword [esp + 0x20]
mov ecx, 0x880dfeb4
jmp 0x1000ac4c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 0xdca8b11c
jmp 0x1000ac4c
mov eax, dword [0x10098dec]
lea ecx, [eax + 1]
imul ecx, eax
test cl, 1
sete ah
cmp dword [0x10098df0], 0xa
setge dh
setl dl
mov al, dl
xor al, cl
and al, dl
and dh, ah
and dl, cl
or dl, dh
mov ecx, eax
xor cl, dl
mov ecx, 0x3fabf7a0
mov ebx, 0x3fabf7a0
jne 0x1000bc21
mov ebx, 0x86898b2c
jmp 0x1000bc21
mov dword [esp + 8], edi
lea eax, [esp + 8]
push eax
push edi
push edi
push 1
push dword [esp + 0x1c]
call dword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
sete byte [esp]
mov ecx, 0x6cdb039c
jmp 0x1000ac4c
mov ecx, 0x3f6abce8
jmp 0x1000ac4c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 0x14], eax
mov eax, dword [0x10098dec]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
xor eax, ecx
test eax, ecx
setne cl
cmp dword [0x10098df0], 0xa
setge dl
mov eax, ecx
xor al, dl
or dl, cl
mov ecx, edx
xor cl, al
mov ebx, 0x3bae465
mov ecx, 0xc4d9ab53
jne 0x1000c5d3
mov ebx, 0xc4d9ab53
jmp 0x1000c5d3
mov ecx, 0xbdfa7
jmp 0x1000ac4c
push dword [esp + 4]
call dword [sym.imp.ADVAPI32.dll_FreeSid]
mov ecx, dword [0x10098dec]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xd2d8de80
and eax, 0x2d27217f
or eax, edx
xor eax, 0xd2d8de81
or eax, ecx
cmp eax, 0xffffffff
sete dl
cmp dword [0x10098df0], 0xa
setl al
xor dl, al
mov ecx, edx
xor cl, 1
and al, cl
xor cl, al
mov ebx, 0xe6c21c69
mov ecx, 0xc60d0467
jne 0x1000bc21
mov ebx, 0xc60d0467
test dl, dl
cmove ecx, ebx
jmp 0x1000c5d8
cmp dword [esp + 0x2c], 0
setne byte [esp + 3]
mov ecx, dword [0x10098dec]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
not eax
or eax, ecx
xor eax, 0xffffffff
sete cl
setne dl
cmp dword [0x10098df0], 0xa
setl ah
setge al
and cl, al
or al, dl
and ah, dl
or ah, cl
mov edx, eax
xor dl, ah
mov ecx, 0x5d8c9cb5
mov ebp, 0x6e35ffea
mov ebx, 0x5d8c9cb5
test ah, ah
jne 0x1000c41e
mov ebx, 0x6e35ffea
jmp 0x1000c41e
mov ecx, dword [0x10098dec]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
not eax
or eax, ecx
cmp eax, 0xffffffff
setne cl
cmp dword [0x10098df0], 0xa
setge ah
mov al, ah
or al, cl
xor ah, cl
mov edx, eax
xor dl, ah
mov ecx, 0x880dfeb4
mov ebp, 0x8380a07
mov ebx, 0x880dfeb4
test ah, ah
jne 0x1000c41e
mov ebx, 0x8380a07
jmp 0x1000c41e
mov ecx, 0xa302b5a2
xor eax, eax
inc eax
mov dword [esp + 0x10], eax
jmp 0x1000ac4c
push dword [esp + 0x30]
push 8
push dword [esp + 0x3c]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov esi, eax
mov ecx, 0xa6a4ee22
test eax, eax
je 0x1000ac4c
mov ecx, 0xfb0c7230
jmp 0x1000ac4c
mov dword [esp + 4], edi
lea eax, [esp + 4]
push eax
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push 0x12
push 1
lea eax, [esp + 0x40]
push eax
call dword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
mov ecx, 0x391abc7e
test eax, eax
je 0x1000ac4c
mov ecx, 0x76e07573
jmp 0x1000ac4c
mov ecx, 0xbd45e49d
jmp 0x1000ac4c
mov ecx, 0x8962377b
jmp 0x1000ac4c
mov eax, dword [esp + 8]
mov dword [esp + 0x30], eax
mov eax, dword [0x10098dec]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xf021b65d
mov edx, eax
and edx, 0xfde49a2
or edx, ecx
xor edx, 0xfde49a3
and eax, 0xfffffffe
or eax, edx
xor eax, 0x93802d2d
xor eax, 0x6c7fd2d2
sete al
setne cl
cmp dword [0x10098df0], 0xa
setge dl
setl ah
and ah, cl
and al, dl
or al, ah
or dl, cl
mov ecx, edx
xor cl, al
mov ebx, 0xa3771f5a
mov ecx, 0xe6c57b9f
jne 0x1000c5d3
mov ebx, 0xe6c57b9f
jmp 0x1000c5d3
mov ecx, 0x47f96cda
jmp 0x1000ac4c
mov ecx, 0xa0681f62
jmp 0x1000ac4c
mov eax, dword [0x10098dec]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xa4dc380e
mov edx, eax
and edx, 0x5b23c7f1
or edx, ecx
xor edx, 0x5b23c7f0
and eax, 0xfffffffe
or eax, edx
xor eax, 0x5d15e2c
cmp eax, 0xfa2ea1d3
setne cl
cmp dword [0x10098df0], 0xa
setge dl
mov eax, edx
xor al, cl
or dl, cl
mov ecx, edx
xor cl, al
mov ebx, 0xc600f782
mov ecx, 0xdc18f5a3
jne 0x1000c5d3
mov ebx, 0xdc18f5a3
jmp 0x1000c5d3
mov ecx, dword [0x10098dec]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
not eax
or eax, ecx
cmp eax, 0xffffffff
setne cl
cmp dword [0x10098df0], 0xa
setge dl
mov eax, edx
or al, cl
xor dl, cl
mov ecx, eax
xor cl, dl
mov ebx, 0x71128959
mov ecx, 0xc113846a
jne 0x1000c643
mov ebx, 0xc113846a
jmp 0x1000c643
mov eax, dword [0x10098dec]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
xor eax, ecx
test eax, ecx
sete cl
setne ah
cmp dword [0x10098df0], 0xa
setge al
setl dl
and ah, dl
and al, cl
or al, ah
mov ah, dl
xor ah, cl
or dl, cl
xor dl, 1
or dl, ah
mov ecx, edx
xor cl, al
mov ebx, 0xe8d02e3
mov ecx, 0x354c42a8
jne 0x1000c5d3
mov ebx, 0x354c42a8
jmp 0x1000c5d3
mov ecx, 0xd496910f
jmp 0x1000ac4c
mov ecx, 0x1c05541f
jmp 0x1000ac4c
mov eax, dword [esp + 8]
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], esi
mov ecx, 0xdc434c9e
jmp 0x1000ac4c
mov ecx, dword [0x10098dec]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x23821fce
and eax, 0xdc7de031
or eax, edx
xor eax, 0x23821fcf
or eax, ecx
xor eax, 0xffffffff
sete cl
setne ah
cmp dword [0x10098df0], 0xa
setl dl
setge al
or al, ah
xor dl, cl
mov ecx, eax
xor cl, dl
mov ebx, 0x22e6479e
mov ecx, 0xa34eab59
jne 0x1000c643
mov ebx, 0xa34eab59
jmp 0x1000c643
mov ecx, 0x7bf17ed3
mov dword [esp + 0x10], 0
jmp 0x1000ac4c
cmp dword [esp + 0x20], 0
setne byte [esp + 2]
mov eax, dword [0x10098dec]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
xor eax, ecx
test eax, ecx
sete cl
setne ah
cmp dword [0x10098df0], 0xa
setl dl
setge al
and cl, al
or al, ah
and dl, ah
or dl, cl
mov ecx, eax
xor cl, dl
mov ebx, 0x8380a07
mov ecx, 0xef32971a
jne 0x1000c643
mov ebx, 0xef32971a
jmp 0x1000c643
mov eax, dword [esp + 4]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], esi
mov ecx, dword [0x10098dec]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x4267a216
and eax, 0xbd985de9
or eax, edx
xor eax, 0xbd985de8
xor ecx, eax
test ecx, eax
sete al
setne cl
cmp dword [0x10098df0], 0xa
setge ah
mov dl, ah
inc dl
and dl, cl
and al, ah
or al, dl
or ah, cl
mov dl, ah
xor dl, al
mov ebp, 0xbcb301a2
mov ecx, 0xe6c64e14
mov ebx, 0xbcb301a2
test ah, ah
jne 0x1000c19e
mov ebx, 0xe6c64e14
jmp 0x1000c19e
mov eax, dword [0x10098dec]
lea ecx, [eax - 0x131cefcf]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x10098df0], 0xa
setge dl
mov ah, dl
inc ah
and ah, cl
and al, dl
or al, ah
or dl, cl
mov ah, dl
xor ah, al
mov ebx, 0x9d739ca
mov ecx, 0xdca8b11c
test ah, 1
jne 0x1000c0c3
mov ebx, 0xdca8b11c
test dl, 1
cmovne ecx, ebx
test al, 1
cmove ecx, ebx
jmp 0x1000ac4c
mov eax, dword [esp + 0x14]
mov ecx, 0xb2e178cb
jmp 0x1000ac4c
mov eax, dword [0x10098dec]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
xor eax, ecx
test eax, ecx
sete cl
setne dl
cmp dword [0x10098df0], 0xa
setl ah
setge al
or al, dl
xor ah, cl
mov edx, eax
xor dl, ah
mov ecx, 0xda816485
mov ebp, 0x9d739ca
mov ebx, 0xda816485
test ah, ah
jne 0x1000c41e
mov ebx, 0x9d739ca
jmp 0x1000c41e
mov eax, dword [0x10098dec]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x291a12d2
mov edx, eax
and edx, 0xd6e5ed2d
or edx, ecx
xor edx, 0xd6e5ed2c
and eax, 0xfffffffe
or eax, edx
xor eax, 0xffffffff
setne cl
sete dl
cmp dword [0x10098df0], 0xa
setl al
setge ah
and dl, ah
and al, cl
or al, dl
or ah, cl
mov dl, ah
xor dl, al
mov ebp, 0xfa9b3099
mov ecx, 0x4be9671f
mov ebx, 0xfa9b3099
test ah, ah
jne 0x1000c19e
mov ebx, 0x4be9671f
test al, al
cmovne ebp, ebx
jmp 0x1000c212
mov eax, dword [0x10098dec]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x13e8b3b2
mov edx, eax
and edx, 0xec174c4d
or edx, ecx
xor edx, 0xec174c4c
and eax, 0xfffffffe
or eax, edx
xor eax, 0xffffffff
sete cl
setne dl
cmp dword [0x10098df0], 0xa
setge ah
setl dh
mov al, dh
xor al, dl
and al, dh
and ah, cl
and dh, dl
or dh, ah
mov dl, dh
xor dl, al
mov ebp, 0x2906b84
mov ecx, 0x6e35ffea
mov ebx, 0x2906b84
test dh, dh
jne 0x1000c20d
mov ebx, 0x6e35ffea
test al, al
cmovne ecx, ebx
test dl, dl
cmovne ecx, ebp
jmp 0x1000ac4c
mov eax, dword [0x10098dec]
lea ecx, [eax + 1]
imul ecx, eax
test cl, 1
sete dl
cmp dword [0x10098df0], 0xa
setl ah
setge al
and dl, al
or al, cl
and ah, cl
or ah, dl
mov edx, eax
xor dl, ah
mov ecx, 0x3f6abce8
mov ebp, 0x4a704774
mov ebx, 0x3f6abce8
test ah, ah
jne 0x1000c25e
mov ebx, 0x4a704774
test al, 1
cmovne ebx, ebp
test dl, 1
cmovne ecx, ebx
jmp 0x1000ac4c
mov eax, dword [0x10098dec]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
xor eax, ecx
test eax, ecx
sete cl
setne dl
cmp dword [0x10098df0], 0xa
setl ah
setge al
and cl, al
or al, dl
and ah, dl
or ah, cl
mov edx, eax
xor dl, ah
mov ecx, 0xb2e178cb
mov ebp, 0xc455c21b
mov ebx, 0xb2e178cb
test ah, ah
jne 0x1000c41e
mov ebx, 0xc455c21b
jmp 0x1000c41e
mov eax, dword [0x10098dec]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x1473f82
mov edx, eax
and edx, 0xfeb8c07d
or edx, ecx
xor edx, 0xfeb8c07c
and eax, 0xfffffffe
or eax, edx
xor eax, 0xaf0f32d4
cmp eax, 0x50f0cd2b
sete dl
cmp dword [0x10098df0], 0xa
setl al
xor dl, al
mov ecx, 0x1f23488e
mov ebx, 0x1f23488e
jne 0x1000c31f
mov ebx, 0xd4f67f63
mov ah, dl
not ah
mov ebp, 0x1f23488e
test ah, al
jne 0x1000c32e
mov ebp, ebx
test dl, dl
cmove ecx, ebp
test ah, al
cmove ecx, ebp
jmp 0x1000ac4c
mov ecx, dword [0x10098dec]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xa866830b
and eax, 0x57997cf4
or eax, edx
xor eax, 0xa866830a
or eax, ecx
xor eax, 0xffffffff
sete cl
setne dl
cmp dword [0x10098df0], 0xa
setl ah
setge al
or al, dl
xor ah, cl
mov dl, ah
xor dl, al
mov ecx, 0x1d32506a
mov ebp, 0x45e13c0
mov ebx, 0x1d32506a
test ah, ah
jne 0x1000c41e
mov ebx, 0x45e13c0
jmp 0x1000c41e
lea eax, [esp + 8]
push eax
push dword [esp + 0x3c]
push dword [esp + 0x44]
push 1
push dword [esp + 0x1c]
call dword [sym.imp.ADVAPI32.dll_GetTokenInformation]
mov dword [esp + 0x20], eax
mov ecx, 0x896cdc6c
jmp 0x1000ac4c
mov ecx, dword [0x10098dec]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
not eax
or eax, ecx
xor eax, 0xffffffff
sete cl
setne dl
cmp dword [0x10098df0], 0xa
setl ah
setge al
and cl, al
or al, dl
and ah, dl
or ah, cl
mov edx, eax
xor dl, ah
mov ecx, 0xd95554b7
mov ebp, 0x3bae465
mov ebx, 0xd95554b7
test ah, ah
jne 0x1000c41e
mov ebx, 0x3bae465
test al, al
cmovne ebx, ebp
test dl, dl
cmovne ecx, ebx
jmp 0x1000ac4c
mov ecx, 0x5a7e9dbf
jmp 0x1000ac4c
mov ecx, 0xa6a4ee22
jmp 0x1000ac4c
push dword [esp + 0x48]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0xa11c386c
jmp 0x1000ac4c
mov eax, dword [0x10098dec]
mov ecx, eax
not ecx
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
setne cl
cmp dword [0x10098df0], 0xa
setge dl
mov eax, edx
or al, cl
xor dl, cl
mov ecx, eax
xor cl, dl
mov ebx, 0x1e5b344a
mov ecx, 0x15772cfc
jne 0x1000c643
mov ebx, 0x15772cfc
jmp 0x1000c643
mov ecx, dword [0x10098dec]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x53eea5ae
and eax, 0xac115a51
or eax, edx
xor eax, 0xac115a50
xor ecx, eax
test ecx, eax
sete cl
setne ah
cmp dword [0x10098df0], 0xa
setl dl
setge al
or al, ah
xor dl, cl
mov ecx, eax
xor cl, dl
mov ebx, 0x87f6f4ef
mov ecx, 0x7bf17ed3
jne 0x1000c643
mov ebx, 0x7bf17ed3
jmp 0x1000c643
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push esi
push 0
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov ecx, 0x49be164
jmp 0x1000ac4c
mov eax, dword [0x10098dec]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xf686ca62
mov edx, eax
and edx, 0x979359d
or edx, ecx
xor edx, 0x979359c
and eax, 0xfffffffe
or eax, edx
xor eax, 0xffffffff
sete al
setne cl
cmp dword [0x10098df0], 0xa
setge dl
setl ah
and ah, cl
and al, dl
or al, ah
or dl, cl
mov ecx, edx
xor cl, al
mov ebx, 0x1e5b344a
mov ecx, 0x95e502c2
jne 0x1000c5d3
mov ebx, 0x95e502c2
jmp 0x1000c5d3
mov ecx, 0xa8ab8821
jmp 0x1000ac4c
mov ecx, dword [0x10098dec]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x9ee07a24
and eax, 0x611f85db
or eax, edx
xor eax, 0x9ee07a25
or eax, ecx
xor eax, 0xffffffff
sete al
setne cl
cmp dword [0x10098df0], 0xa
setge dl
setl ah
and ah, cl
and al, dl
or al, ah
or dl, cl
mov ecx, edx
xor cl, al
mov ebx, 0x978d84d2
mov ecx, 0x6fbaf91f
jne 0x1000c5d3
mov ebx, 0x6fbaf91f
test dl, dl
cmovne ecx, ebx
test al, al
cmove ecx, ebx
jmp 0x1000ac4c
mov ecx, 0x1d159dcc
jmp 0x1000ac4c
mov ecx, 0x37b28c25
jmp 0x1000ac4c
mov eax, dword [0x10098dec]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
xor eax, ecx
test eax, ecx
sete cl
setne ah
cmp dword [0x10098df0], 0xa
setl dl
setge al
and cl, al
or al, ah
and dl, ah
or dl, cl
mov ecx, eax
xor cl, dl
mov ebx, 0xbcb301a2
mov ecx, 0x37b28c25
jne 0x1000c643
mov ebx, 0x37b28c25
test dl, dl
cmove ecx, ebx
test al, al
cmovne ecx, ebx
jmp 0x1000ac4c
cmp ecx, 0xe1dff21c
jne 0x1000ac4c
mov eax, dword [esp + 0x4c]
add esp, 0x50
pop esi
pop edi
pop ebx
pop ebp
ret