Function at 0x1000a750
Capabilities:
Get user security identifier

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push edi
push 0x1001ba24
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov edi, eax
test edi, edi
jne 0x1000a770
lea eax, [edi - 8]
pop edi
mov esp, ebp
pop ebp
ret
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1001ba40
push edi
call esi
push 0x1001ba5c
push edi
mov ebx, eax
call esi
mov esi, eax
test ebx, ebx
je 0x1000a94b
test esi, esi
je 0x1000a94b
lea eax, [ebp - 0x14]
mov dword [ebp - 4], 0
push eax
lea eax, [ebp - 4]
mov dword [ebp - 0x14], 0
push eax
push 5
push 0xffffffffffffffff
push 0
call ebx
test eax, eax
jne 0x1000a7ca
pop esi
pop ebx
mov eax, 0xfffffff6
pop edi
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x18]
mov dword [ebp - 8], 0
push eax
lea eax, [ebp - 8]
mov dword [ebp - 0x18], 0
push eax
push 7
push 0xffffffffffffffff
push 0
call ebx
test eax, eax
jne 0x1000a7fd
push dword [ebp - 4]
call esi
pop esi
pop ebx
mov eax, 0xfffffff5
pop edi
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x14]
lea eax, [eax*2 + 2]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov ebx, eax
test ebx, ebx
jne 0x1000a823
pop esi
lea eax, [ebx - 0xc]
pop ebx
pop edi
mov esp, ebp
pop ebp
ret
push 0x1001df1c
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatW]
test eax, eax
je 0x1000a849
push dword [ebp - 8]
push ebx
call edi
push 0x1001ba6c
push ebx
call edi
push dword [ebp - 4]
push ebx
call edi
push dword [ebp - 4]
call esi
push dword [ebp - 8]
call esi
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x10], 0
push eax
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0
push eax
push 0
lea eax, [ebp - 0x10]
push eax
push 0
push ebx
push 0
call dword [sym.imp.ADVAPI32.dll_LookupAccountNameW]
test eax, eax
jne 0x1000a89b
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
je 0x1000a89b
pop esi
pop ebx
mov eax, 0xfffffff3
pop edi
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0xc]
mov esi, dword [sym.imp.KERNEL32.dll_GlobalAlloc]
add eax, eax
push eax
push 0x40
call esi
mov edi, eax
test edi, edi
jne 0x1000a8c2
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
pop esi
pop ebx
lea eax, [edi - 0xe]
pop edi
mov esp, ebp
pop ebp
ret
push dword [ebp - 0x10]
push 0x40
call esi
mov esi, eax
mov dword [ebp - 0x20], esi
test esi, esi
jne 0x1000a8ea
mov esi, dword [sym.imp.KERNEL32.dll_GlobalFree]
push edi
call esi
push ebx
call esi
pop esi
pop ebx
mov eax, 0xfffffff1
pop edi
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0xc]
push eax
push edi
lea eax, [ebp - 0x10]
push eax
push esi
push ebx
push 0
call dword [sym.imp.ADVAPI32.dll_LookupAccountNameW]
test eax, eax
jne 0x1000a920
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GlobalFree]
call esi
push edi
call esi
push ebx
call esi
pop esi
pop ebx
mov eax, 0xfffffff0
pop edi
mov esp, ebp
pop ebp
ret
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
call edi
push ebx
call edi
push dword [ebp + 0xc]
push dword [ebp + 8]
push esi
call fcn.1000aad0
add esp, 0xc
mov esi, eax
push dword [ebp - 0x20]
call edi
mov eax, esi
pop esi
pop ebx
pop edi
mov esp, ebp
pop ebp
ret
pop esi
pop ebx
mov eax, 0xfffffff7
pop edi
mov esp, ebp
pop ebp
ret