Function at 0x1003f602
Capabilities:
Compare security identifiers

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10068497
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0xfc
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
and dword [ebp - 0x58], 0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x34], 0
jmp 0x1003f642
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x1003f655
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x3c], 5
jmp 0x1003f63b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x3c], 0
jmp 0x1003f67a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3c], 0xffffffe3
jne 0x1003f6b1
mov dword [ebp - 0x44], 1
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x5c], eax
jne 0x1003f6a5
mov dword [ebp - 0x54], 1
jmp 0x1003f6a9
and dword [ebp - 0x54], 0
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x44], eax
jmp 0x1003f665
lea ecx, [ebp - 0xec]
call fcn.100406eb
and dword [ebp - 4], 0
push dword [ebp + 0xc]
lea ecx, [ebp - 0xec]
call fcn.10016706
and dword [ebp - 0x24], 0
jmp 0x1003f6db
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp + 0xc]
jae 0x1003f799
push 2
lea ecx, [ebp - 0xb8]
call fcn.10013363
mov byte [ebp - 4], 1
mov dword [ebp - 0x74], 0xf2f4a8b1
mov dword [ebp - 0x6c], 0x79c63c40
mov dword [ebp - 0xd0], 1
mov dword [ebp - 0x88], 0x8ed4a55f
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.1000f2a2
pop ecx
pop ecx
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.1003f292
add esp, 0x10
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xb8]
call fcn.100133e5
mov eax, dword [ebp + 0x10]
add eax, dword [ebp - 0x24]
xor edx, edx
div dword [0x1006f874]
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 4]
movzx edx, byte [eax + edx]
mov eax, dword [ebp + 0x10]
add eax, dword [ebp - 0x24]
mov ecx, dword [ebp + 0x14]
mov ecx, dword [ecx]
movzx ecx, byte [ecx + eax]
call fcn.1003c3a7
push eax
lea ecx, [ebp - 0xec]
call fcn.10040773
jmp 0x1003f6d4
mov dword [ebp - 0x28], 0xffffffff
push 3
lea ecx, [ebp - 0x98]
call fcn.10013363
mov byte [ebp - 4], 2
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.1003f410
pop ecx
pop ecx
mov dword [ebp - 0x4c], 0x4fdd
mov dword [ebp - 0x8c], 0x1000b3c8
cmp dword [ebp - 0x4c], 0x52b8
jle 0x1003f8a7
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_EqualSid]
and dword [ebp - 0x2c], 0
jmp 0x1003f7fb
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x1aa0
jge 0x1003f8a7
and dword [ebp - 0x30], 0
jmp 0x1003f815
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x3727
jge 0x1003f8a2
and dword [ebp - 0x38], 0
jmp 0x1003f82f
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x7932
jge 0x1003f89d
and dword [ebp - 0x40], 0
jmp 0x1003f845
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x5c9c
jge 0x1003f89b
mov eax, dword [ebp - 0x2c]
cdq
idiv dword [ebp - 0x30]
mov ecx, edx
mov eax, dword [ebp - 0x38]
cdq
idiv dword [ebp - 0x40]
or ecx, edx
mov eax, ecx
cdq
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], edx
push dword [ebp - 0x7c]
push dword [ebp - 0x80]
lea ecx, [ebp - 0x10c]
call fcn.1000de7e
pop ecx
pop ecx
mov dword [ebp - 0x78], eax
mov ecx, dword [ebp - 0x78]
call fcn.10013118
push eax
call fcn.100520df
pop ecx
lea ecx, [ebp - 0x10c]
call fcn.1001310e
jmp 0x1003f83e
jmp 0x1003f828
jmp 0x1003f80e
jmp 0x1003f7f4
mov byte [ebp - 4], 3
cmp dword [ebp - 0x4c], 0x4d40
jge 0x1003f8c0
push dword [ebp - 0x8c]
call fcn.100520df
pop ecx
jmp 0x1003f8dc
mov dword [ebp - 4], 2
jmp 0x1003f8ec
mov dword [ebp - 0x28], 0
jmp 0x1003f8fc
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xb
jl 0x1003faac
mov dword [ebp - 0x20], 0xfffffffb
mov dword [ebp - 0x70], 1
mov dword [ebp - 0x20], 0xffffffe6
jmp 0x1003f924
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffee
je 0x1003faa7
push 4
lea ecx, [ebp - 0x68]
call fcn.10013363
mov byte [ebp - 4], 5
mov dword [ebp - 0xac], 0x9b88
mov dword [ebp - 0xa8], 0x9b88
mov dword [ebp - 0xa4], 0x9b88
mov dword [ebp - 0xa0], 0x9b88
lea ecx, [ebp - 0x45]
call fcn.10013410
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0xf4]
call fcn.10013413
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xc8]
call fcn.100133bf
mov byte [ebp - 4], 6
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0xbc]
push eax
call fcn.1003f458
pop ecx
pop ecx
push 3
lea ecx, [ebp - 0x68]
call fcn.10013401
mov dword [eax], 0x1b
jmp 0x1003f9d6
push 3
lea ecx, [ebp - 0x68]
call fcn.10013401
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x50]
mov dword [ecx], eax
push 3
lea ecx, [ebp - 0x68]
call fcn.10013401
cmp dword [eax], 0xffffffeb
jle 0x1003fa87
mov dword [ebp - 0x1c], 0x1bca9d69
mov dword [ebp - 0x84], 0xfffd
mov dword [ebp - 0x1c], 0xd
jmp 0x1003fa0a
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x10
jge 0x1003fa51
mov dword [ebp - 0x18], 5
mov byte [ebp - 0x11], 0
lea eax, [ebp - 0x11]
push eax
call fcn.1003f4a0
pop ecx
mov dword [ebp - 0x18], 0
jmp 0x1003fa35
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1003fa4f
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x98]
push eax
call fcn.1000f27a
pop ecx
pop ecx
jmp 0x1003fa2e
jmp 0x1003fa03
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.1003f4c9
add esp, 0x20
jmp 0x1003f9be
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xc8]
call fcn.100133e5
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x68]
call fcn.100133e5
jmp 0x1003f91d
jmp 0x1003f8f5
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x98]
call fcn.100133e5
lea eax, [ebp - 0xec]
push eax
mov ecx, dword [ebp + 8]
call fcn.100406fc
mov eax, dword [ebp - 0x58]
or eax, 1
mov dword [ebp - 0x58], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xec]
call fcn.10013310
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret