Function at 0x75b7d540
Capabilities:
Get user security identifier

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x290
mov eax, dword [0x75bc8d18]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
push ebx
push esi
mov dword [ebp - 0x288], ecx
push edi
mov edi, dword [ebp + 0x10]
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x27c], ecx
xor ebx, ebx
push eax
lea ecx, [ebp - 0x274]
mov dword [ebp - 0x28c], eax
mov dword [ebp - 0x284], 0x104
mov dword [ebp - 0x290], 8
mov dword [edi], 0x50
mov dword [ebp - 0x280], ebx
call fcn.759c6e99
mov eax, dword [ebp - 0x274]
push 0x75a10618
push 1
mov byte [ebp - 0x270], bl
mov byte [ebp - 0x26f], bl
mov byte [ebp - 0x26e], bl
mov byte [ebp - 0x26d], bl
mov byte [ebp - 0x26c], bl
mov byte [ebp - 0x26b], 5
mov ecx, dword [eax]
push eax
call dword [ecx + 0x5c]
mov esi, 0x759c2dec
test eax, eax
je 0x75b7d658
cmp dword [0x75bc8ca8], ebx
je 0x75b7d606
push ebx
push ebx
push esi
push esi
push esi
push esi
push esi
push esi
push 0x75b7d930
push ebx
push ebx
push 9
call fcn.759de326
add esp, 0x30
lea ecx, [ebp - 0x27c]
push ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
xor eax, eax
inc eax
push 0x12
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x278], eax
push eax
lea eax, [ebp - 0x270]
push eax
call dword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
test eax, eax
jne 0x75b7d7cc
mov eax, dword [ebp - 0x274]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.759b1748
leave
ret
mov eax, dword [ebp - 0x274]
mov ecx, dword [eax]
push 0x75b7d910
push 1
push eax
call dword [ecx + 0x5c]
test eax, eax
je 0x75b7d6ba
cmp dword [0x75bc8ca8], ebx
je 0x75b7d690
push ebx
push ebx
push esi
push esi
push esi
push esi
push esi
push esi
push 0x75b7d8e8
push ebx
push ebx
push 9
call fcn.759de326
add esp, 0x30
xor eax, eax
inc eax
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x278], eax
lea eax, [ebp - 0x27c]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x220
push 0x20
push 2
jmp 0x75b7d626
mov eax, dword [ebp - 0x274]
mov ecx, dword [eax]
push 0x75b7d8d4
push 1
push eax
call dword [ecx + 0x5c]
test eax, eax
je 0x75b7d740
cmp dword [0x75bc8ca8], ebx
je 0x75b7d6f2
push ebx
push ebx
push esi
push esi
push esi
push esi
push esi
push esi
push 0x75b7d8b0
push ebx
push ebx
push 9
call fcn.759de326
add esp, 0x30
lea ecx, [ebp - 0x27c]
push ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
xor eax, eax
inc eax
push ebx
push ebx
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x278], eax
mov byte [ebp - 0x263], al
push eax
mov byte [ebp - 0x268], bl
mov byte [ebp - 0x267], bl
mov byte [ebp - 0x266], bl
mov byte [ebp - 0x265], bl
mov byte [ebp - 0x264], bl
lea eax, [ebp - 0x268]
jmp 0x75b7d62c
call fcn.759d82c4
lea eax, [ebp - 0x290]
push eax
lea eax, [ebp - 0x284]
push eax
lea eax, [ebp - 0x260]
push eax
push edi
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x28c]
push ebx
call dword [sym.imp.ADVAPI32.dll_LookupAccountNameW]
mov dword [ebp - 0x278], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 1
mov dword [ebp - 0x268], eax
call fcn.759d07de
pop ecx
cmp dword [ebp - 0x278], ebx
je 0x75b7d7a4
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.ADVAPI32.dll_GetSidSubAuthorityCount]
movzx eax, byte [eax]
push eax
call dword [sym.imp.ADVAPI32.dll_GetSidLengthRequired]
jmp 0x75b7d7d8
cmp dword [ebp - 0x268], 0x7a
je 0x75b7d7da
push dword [ebp - 0x268]
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [ebp - 0x274]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, ebx
jmp 0x75b7d649
push dword [ebp - 0x27c]
call dword [sym.imp.ADVAPI32.dll_GetLengthSid]
mov dword [edi], eax
push dword [edi]
call fcn.759c6f57
pop ecx
mov ecx, dword [ebp - 0x288]
mov dword [ecx], eax
mov dword [ebp - 0x284], 0x104
cmp dword [ebp - 0x278], ebx
je 0x75b7d80d
push dword [ebp - 0x27c]
push eax
push dword [edi]
call dword [sym.imp.ADVAPI32.dll_CopySid]
jmp 0x75b7d84b
call fcn.759d82c4
lea eax, [ebp - 0x290]
push eax
lea eax, [ebp - 0x284]
push eax
lea eax, [ebp - 0x260]
push eax
mov eax, dword [ebp - 0x288]
push edi
push dword [eax]
push dword [ebp - 0x28c]
push ebx
call dword [sym.imp.ADVAPI32.dll_LookupAccountNameW]
push 1
mov dword [ebp - 0x278], eax
call fcn.759d07de
pop ecx
cmp dword [ebp - 0x280], ebx
je 0x75b7d85f
push dword [ebp - 0x27c]
call dword [sym.imp.ADVAPI32.dll_FreeSid]
cmp dword [0x75bc8ca8], ebx
je 0x75b7d880
push ebx
push ebx
push esi
push esi
push esi
push esi
push esi
push esi
push 0x75b7d88c
push ebx
push ebx
push 9
call fcn.759de326
add esp, 0x30
mov ebx, dword [ebp - 0x278]
jmp 0x75b7d7b9