Function at 0x471e81
Capabilities:
Compare security identifiers

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x50
and dword [ebp - 0x14], 0
push ebx
push esi
xor esi, esi
mov ebx, ecx
push edi
inc esi
mov dword [ebp - 0x18], ebx
push esi
lea ecx, [ebp - 0x2c]
call fcn.00438263
mov dword [ebp - 8], 0x2971c1ec
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x14], 0x1b8d
push 3
call fcn.00438263
xor edx, edx
mov dword [ebp - 0x14], 0x96a450c1
mov dword [ebp - 8], edx
jmp 0x471edc
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x2c]
mov dword [eax + ecx*4], 8
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x471ecc
mov dword [ebp - 8], edx
jmp 0x471ef6
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x38]
mov dword [eax + ecx*4], 9
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jl 0x471ee6
mov byte [ebp - 1], dl
cmp byte [ebp - 1], dl
je 0x471f0d
push edx
call dword [sym.imp.GDI32.dll_CreateBrushIndirect]
xor edx, edx
mov dword [ebp - 8], edx
cmp dword [ebp - 8], edx
jl 0x471fd0
mov edi, dword [ebp - 0x38]
mov dword [ebp - 0x14], 0xae857b1a
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x14], 0xf1563cfe
mov byte [ebp - 1], dl
cmp byte [ebp - 1], 0
je 0x471f40
push edx
push edx
call dword [sym.imp.ADVAPI32.dll_EqualSid]
xor edx, edx
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov dword [ebp - 0x14], esi
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x10], edx
jne 0x471f69
mov eax, dword [ebp - 0x2c]
cmp dword [eax], edx
jne 0x471f69
mov esi, edx
mov eax, dword [ebp - 8]
xor edx, edx
mov ecx, dword [ebp - 0x2c]
cmp esi, dword [ecx + eax*4]
setg dl
sub edx, dword [ecx]
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x14]
sub edx, dword [edi + 8]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 8]
sub edx, dword [eax]
mov eax, dword [ebp - 0x2c]
neg edx
sbb edx, edx
neg edx
mov eax, dword [eax + ecx*4]
add eax, edx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
imul eax, dword [ebp - 0xc], 0xfffa
test eax, eax
je 0x471fb4
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
push 0
pop edx
mov dword [ebp - 0x14], 0xef7d5944
dec dword [ebp - 8]
push 1
pop esi
jns 0x471f1c
lea ecx, [ebp - 0x38]
call fcn.00438335
lea ecx, [ebp - 0x2c]
call fcn.00438335
push 0x5124
push 0x3b45
push esi
push 0x5aad
push esi
push 0x7410
push esi
push 0x3bc6
push ebx
push 0x429c
push esi
call fcn.00465935
add esp, 0x2c
mov dword [ebp - 8], 0x2cb13638
xor ecx, ecx
mov dword [ebp - 8], ecx
jmp 0x472027
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x20], 0x3342eb9
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x472019
mov ebx, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 8], esi
cmp dword [ebp - 8], ecx
jl 0x472070
mov byte [ebp - 1], cl
cmp byte [ebp - 1], 0
je 0x472061
push ecx
push 0x1933
push 0xca6
call ebx
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetSystemPaletteEntries]
xor ecx, ecx
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x20]
mov dword [ebp - 0x20], eax
dec dword [ebp - 8]
jns 0x47203b
mov dword [ebp - 8], ecx
jmp 0x47212e
push 2
lea ecx, [ebp - 0x50]
call fcn.00438263
mov dword [ebp - 0xc], 0
jmp 0x472098
push dword [ebp - 0xc]
call fcn.00438351
mov dword [eax], esi
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 2
lea ecx, [ebp - 0x50]
jl 0x47208b
push esi
call fcn.00438351
mov esi, eax
mov dword [esi], 1
push 2
lea ecx, [ebp - 0x44]
call fcn.00438263
mov dword [ebp - 0xc], 0
jmp 0x4720d3
push dword [ebp - 0xc]
call fcn.00438351
mov dword [eax], 1
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 2
lea ecx, [ebp - 0x44]
jl 0x4720c2
push 0
call fcn.00438351
mov edi, eax
mov dword [edi], 1
xor eax, eax
mov byte [ebp - 1], al
cmp byte [ebp - 1], al
je 0x472104
push eax
push eax
call ebx
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_CreateDialogParamA]
mov eax, dword [esi]
mov ecx, dword [ebp + eax*4 - 0x20]
mov eax, dword [edi]
dec dword [edi]
mov dword [ebp + eax*4 - 0x20], ecx
jns 0x4720eb
lea ecx, [ebp - 0x44]
call fcn.00438335
dec dword [esi]
jns 0x4720af
lea ecx, [ebp - 0x50]
call fcn.00438335
inc dword [ebp - 8]
xor esi, esi
inc esi
cmp dword [ebp - 8], esi
jle 0x472078
push dword [ebp - 0x18]
call fcn.00433f89
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret