Function at 0x41c4b8
Capabilities:
Compare security identifiers

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
mov dword [esp + 8], 9
mov dword [esp + 4], 0x463040
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym._strncmp
test eax, eax
je 0x41c4fb
mov dword [esp + 8], 0x16
mov dword [esp + 4], str.E:GitcnPuTTY_TEMP1windows_named_pipe_client.c
mov dword [esp], 0x463080
mov eax, dword [sym.imp.ucrtbase.dll__assert]
call eax
mov eax, dword [ebp + 8]
add eax, 9
mov dword [esp + 4], 0x5c
mov dword [esp], eax
call sym._strchr
test eax, eax
je 0x41c533
mov dword [esp + 8], 0x17
mov dword [esp + 4], str.E:GitcnPuTTY_TEMP1windows_named_pipe_client.c
mov dword [esp], 0x4630ac
mov eax, dword [sym.imp.ucrtbase.dll__assert]
call eax
nop
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x40000000
mov dword [esp + 0x10], 3
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xc0000000
mov eax, dword [ebp + 8]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_CreateFileA]
call eax
sub esp, 0x1c
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0xffffffff
jne 0x41c619
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
cmp eax, 0xe7
je 0x41c5c4
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov dword [esp], eax
call sym._win_strerror
mov dword [esp + 8], eax
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
mov dword [esp], str.Unable_to_open_named_pipe__s:__s
call sym._dupprintf
mov edx, dword [ebp + 0xc]
mov dword [edx], eax
mov eax, 0xffffffff
jmp 0x41c758
mov dword [esp + 4], 0
mov eax, dword [ebp + 8]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
call eax
sub esp, 8
test eax, eax
jne 0x41c534
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov dword [esp], eax
call sym._win_strerror
mov dword [esp + 8], eax
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
mov dword [esp], str.Error_waiting_for_named_pipe__s:__s
call sym._dupprintf
mov edx, dword [ebp + 0xc]
mov dword [edx], eax
mov eax, 0xffffffff
jmp 0x41c758
nop
call sym._get_user_sid
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x41c666
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov dword [esp], eax
call sym._win_strerror
mov dword [esp + 4], eax
mov dword [esp], str.Unable_to_get_user_SID:__s
call sym._dupprintf
mov edx, dword [ebp + 0xc]
mov dword [edx], eax
mov eax, 0xffffffff
jmp 0x41c758
mov eax, dword [0x47daf8]
lea edx, [ebp - 0x18]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
lea edx, [ebp - 0x14]
mov dword [esp + 0xc], edx
mov dword [esp + 8], 1
mov dword [esp + 4], 6
mov edx, dword [ebp - 0xc]
mov dword [esp], edx
call eax
sub esp, 0x20
test eax, eax
je 0x41c6eb
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov dword [esp], eax
call sym._win_strerror
mov dword [esp + 4], eax
mov dword [esp], str.Unable_to_get_named_pipe_security_information:__s
call sym._dupprintf
mov edx, dword [ebp + 0xc]
mov dword [edx], eax
mov eax, 0xffffffff
jmp 0x41c758
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov dword [esp + 4], edx
mov dword [esp], eax
mov eax, dword [sym.imp.ADVAPI32.dll_EqualSid]
call eax
sub esp, 8
test eax, eax
jne 0x41c745
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov eax, dword [ebp - 0x18]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_LocalFree]
call eax
sub esp, 4
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
mov dword [esp], str.Owner_of_named_pipe__s_is_not_us
call sym._dupprintf
mov edx, dword [ebp + 0xc]
mov dword [edx], eax
mov eax, 0xffffffff
jmp 0x41c758
mov eax, dword [ebp - 0x18]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_LocalFree]
call eax
sub esp, 4
mov eax, dword [ebp - 0xc]
leave
ret