Function at 0xb908c
Capabilities:
Compare security identifiers

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffd4
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x24], eax
xor eax, eax
push ebp
push 0xb9326
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 1], 0
xor eax, eax
mov dword [ebp - 0x14], eax
xor eax, eax
push ebp
push 0xb9309
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0xb92d9
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x14]
push eax
push 0xffffffffffffffff
push 8
call sub.kernel32.dll_GetCurrentThread
push eax
call sub.advapi32.dll_OpenThreadToken
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0xb90f2
cmp dword [ebp - 0x14], 0
jne 0xb911a
cmp dword [ebp - 0x14], 0
je 0xb9101
mov eax, dword [ebp - 0x14]
push eax
call sub.kernel32.dll_CloseHandle_1
xor eax, eax
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
push 8
call sub.kernel32.dll_GetCurrentProcess
push eax
call sub.advapi32.dll_OpenProcessToken
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0xb9288
mov dword [ebp - 0xc], 0xa
xor eax, eax
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 0xc]
call fcn.000763a0
xor eax, eax
push ebp
push 0xb9281
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x10]
push eax
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 0x18]
push eax
push 2
mov eax, dword [ebp - 0x14]
push eax
call fcn.000b8f70
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0xb91b3
cmp dword [ebp - 0x10], 1
jbe 0xb91b3
cmp dword [ebp - 0x10], 0x9c4000
ja 0xb91b3
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 0xc]
call fcn.000763dc
mov eax, dword [ebp - 0x10]
add eax, 0x400
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 0xc]
call fcn.000763a0
lea eax, [ebp - 0x10]
push eax
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 0x18]
push eax
push 2
mov eax, dword [ebp - 0x14]
push eax
call fcn.000b8f70
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0xb9268
xor eax, eax
mov dword [ebp - 8], eax
xor eax, eax
push ebp
push 0xb9261
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 8]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0x220
push 0x20
push 2
push 0xf84c0
call sub.advapi32.dll_AllocateAndInitializeSid
xor eax, eax
mov dword [ebp - 0x1c], eax
xor eax, eax
mov dword [ebp - 0x20], eax
jmp 0xb9219
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x20]
mov eax, dword [eax + edx*8 + 4]
push eax
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_EqualSid
mov dword [ebp - 0x1c], eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x1c], 0
jne 0xb923f
mov eax, dword [ebp - 0x20]
cdq
push edx
push eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
xor edx, edx
cmp edx, dword [esp + 4]
jne 0xb923b
cmp eax, dword [esp]
pop edx
pop eax
ja 0xb91ff
jmp 0xb923f
pop edx
pop eax
jg 0xb91ff
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0xb9268
cmp dword [ebp - 8], 0
je 0xb925b
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_FreeSid
xor eax, eax
mov dword [ebp - 8], eax
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0xb9288
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 0xc]
call fcn.000763dc
ret
cmp dword [ebp - 0x1c], 0
je 0xb92c3
mov eax, dword [0xfb404]
cmp dword [eax], 6
jb 0xb92c3
xor eax, eax
mov dword [0xf84f4], eax
call fcn.000b8ff0
cmp dword [0xf84f4], 1
je 0xb92ba
cmp dword [0xf84f4], 2
je 0xb92ba
xor eax, eax
jmp 0xb92bc
mov al, 1
neg al
sbb eax, eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
neg eax
mov byte [ebp - 1], al
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0xb92e7
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0xb9310
cmp dword [ebp - 0x14], 0
je 0xb9303
mov eax, dword [ebp - 0x14]
push eax
call sub.kernel32.dll_CloseHandle_1
xor eax, eax
mov dword [ebp - 0x14], eax
ret