Function at 0x10011d3a
Capabilities:
Compare security identifiers

Disassembly:
mov eax, 0x1008a676
call fcn.1008a030
sub esp, 0x78
push ebx
push esi
push edi
mov dword [ebp - 0x48], ecx
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x20], 0xfffffffe
mov dword [ebp - 0x30], 1
push 2
call fcn.10018477
xor ebx, ebx
lea eax, [ebp - 0x74]
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0x5c]
push dword [ebp - 0x48]
movdqa xmm0, xmmword [0x10007e80]
push eax
lea eax, [ebp - 0x84]
mov dword [ebp - 0x40], 0x13236c21
push eax
push ebx
movdqu xmmword [ebp - 0x84], xmm0
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], ebx
call fcn.10019a06
mov byte [ebp - 4], 1
mov dword [ebp - 0x14], ebx
jmp 0x10011db6
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x68]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10011daa
mov dword [ebp - 0x20], 5
jmp 0x10012096
mov dword [ebp - 0x1c], 0x39beb064
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x40], 1
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x14], ebx
jmp 0x10011dfa
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x50], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10011dec
mov dword [ebp - 0x1c], 0xb
jmp 0x1001206b
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0x6b13122e
mov dword [ebp - 0x18], ebx
jmp 0x10011f6d
mov dword [ebp - 0x2c], 0xb3921ded
mov dword [ebp - 0x28], 0x71dbcabe
mov dword [ebp - 0x38], 0x9031ea06
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], 0xfffffff2
jne 0x10011f6a
mov esi, dword [ebp - 0x68]
lea eax, [ebp - 0x24]
mov dword [ebp - 0x34], 0xf5452fa8
push eax
lea eax, [ebp - 0x34]
mov dword [ebp - 0x14], 0x653ddb20
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x20]
push eax
push 0x2730
push ebx
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x38]
push eax
push 0x2637
call fcn.10016374
mov eax, dword [ebp - 0x24]
add esp, 0x2c
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x24]
sub edx, eax
mov eax, dword [ebp - 0x1c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
mov eax, dword [ebp - 0x30]
setge cl
xor edi, edi
add eax, ecx
inc edi
mov dword [esi + 4], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], edi
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x24]
sub ecx, eax
mov dword [ebp - 0x28], ecx
jne 0x10011ee1
mov edx, ebx
cmp dword [ebp - 0x28], ebx
je 0x10011ee3
mov edx, edi
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x14]
cmp eax, edx
setne cl
imul ecx, dword [ebp - 0x34]
test ecx, ecx
jne 0x10011f02
mov eax, ebx
cmp dword [ebp - 0x18], ebx
je 0x10011f04
mov eax, edi
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push 0xfffffffffffffff8
pop ecx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
setge dl
xor ecx, ecx
sub edx, 0xa37e
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
cmp eax, 0xffffffff
setge cl
add ecx, 0x5444fe37
jne 0x10011f42
cmp dword [ebp - 0x38], ebx
jne 0x10011f42
mov ecx, ebx
jmp 0x10011f45
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x5c]
mov dword [eax], ecx
test ecx, ecx
je 0x10011f58
cmp dword [ebp - 0x14], ebx
je 0x10011f58
xor eax, eax
inc eax
jmp 0x10011f5a
mov eax, ebx
mov dword [ebp - 0x40], eax
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xfffffff2
je 0x10011e43
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffe6
jl 0x10011e1e
mov dword [ebp - 0x14], 3
cmp dword [ebp - 0x14], ebx
jl 0x10012068
mov edi, dword [ebp - 0x68]
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x14]
cmp eax, 1
mov eax, dword [ebp - 0x14]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setge dl
xor ecx, ecx
cmp edx, eax
setg cl
xor edx, edx
sub ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
add ecx, 2
cmp ecx, eax
mov ecx, dword [ebp - 0x1c]
setle dl
xor eax, eax
cmp edx, dword [edi + 4]
setg al
sub ecx, eax
mov eax, dword [ebp - 0x24]
neg ecx
sbb ecx, ecx
inc ecx
add eax, ecx
mov ecx, dword [ebp - 0x14]
imul ecx, eax
test ecx, ecx
jne 0x10011ff2
cmp dword [ebp - 0x4c], ebx
jne 0x10011ff2
mov esi, ebx
jmp 0x10011ff5
xor esi, esi
inc esi
mov ecx, dword [ebp - 0x14]
xor edx, edx
sub esi, dword [edi + 4]
mov eax, dword [ebp - 0x5c]
push 0x2421
push ebx
cmp dword [eax + ecx*4], esi
mov eax, dword [ebp - 0x40]
setne dl
xor ecx, ecx
inc edx
cmp edx, dword [edi + 4]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x44]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, 0xf76caf44
setl cl
cmp eax, ecx
sbb eax, eax
add eax, 0x63a2f86f
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0xdee2
mov eax, dword [ebp - 0x5c]
setge cl
mov dword [eax], ecx
lea eax, [ebp - 0xd]
push eax
mov byte [ebp - 0xd], bl
push 0x24dc
call fcn.10015eda
add esp, 0x10
dec dword [ebp - 0x14]
jns 0x10011f8a
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x1a
jg 0x10011e0c
mov byte [ebp - 0xe], bl
cmp byte [ebp - 0xe], 0
je 0x10012093
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x1d
jg 0x10011dc8
mov byte [ebp - 0xe], bl
cmp byte [ebp - 0xe], 0
je 0x100120b1
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_EqualSid]
lea ecx, [ebp - 0x5c]
call fcn.100184f9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x68]
call fcn.100184f9
lea eax, [ebp - 0x74]
push eax
call fcn.100090c9
mov esi, eax
lea edi, [ebp - 0x68]
pop ecx
mov ecx, dword [ebp - 0x48]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.10011d2b
mov ecx, eax
mov eax, dword [ebp - 0x60]
pop edi
pop esi
pop ebx
mov eax, dword [eax + ecx*8 + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret