Function at 0x42002c
Capabilities:
Compare security identifiers

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xe4
movzx eax, byte [ebp + 0x28]
test eax, eax
je 0x42005e
lea eax, [ebp + 0xc]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
movzx eax, byte [eax]
push eax
push 1
push 0x493b
call fcn.004204b0
add esp, 0xc
jmp 0x4204ac
lea eax, [ebp + 0x20]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x7c], eax
lea eax, [ebp + 0x14]
mov dword [ebp - 0x88], eax
lea eax, [ebp + 0x18]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x80]
movzx eax, byte [eax]
test eax, eax
je 0x420125
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
movzx eax, byte [eax]
test eax, eax
je 0x4200fc
mov byte [ebp - 2], 0
push 0x7125
push 0xe2b
push 0x4f1a
push 0x3517
lea eax, [ebp - 2]
push eax
push 0x38a0
push 0
push 0x3303
push 0x2da8
push 0x447d
push 0x394a
call fcn.004173f5
add esp, 0x2c
jmp 0x420120
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx]
mov ecx, dword [ecx]
mov eax, dword [eax]
add eax, dword [ecx + 4]
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx]
mov dword [ecx], eax
jmp 0x4204ac
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x8c]
movzx eax, byte [eax]
test eax, eax
je 0x42016b
mov byte [ebp - 1], 0
movzx eax, byte [ebp - 1]
test eax, eax
je 0x420166
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_EqualSid]
jmp 0x4204ac
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x14], eax
push 0
call fcn.00422564
pop ecx
push 0
lea eax, [ebp - 0x14]
push eax
push 1
lea eax, [ebp - 0x1c]
push eax
push 1
call fcn.004098e0
add esp, 0x14
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x70], 0xe60f951
mov dword [ebp - 0x94], 0x729cf308
mov dword [ebp - 0xc0], 0x735b263d
mov dword [ebp - 0x9c], 0x3e76e5b1
mov dword [ebp - 0x78], 0xffff
mov dword [ebp - 0x10], 0
jmp 0x4201de
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x4201f4
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xe4], 0x942a1e94
jmp 0x4201d7
push 0x75a8
push 0x6c7f
push 0x6aab
push 1
push 0
push 0x7b92
push 0x7d2b
lea eax, [ebp - 0x68]
push eax
push 0
push 0x2a31
push 0x2e0a
push 0x3d19
lea eax, [ebp - 0x70]
push eax
push 0x2b37
push 1
call fcn.0040b1b3
add esp, 0x3c
lea eax, [ebp - 0x78]
push eax
push 0xc30
push 1
push 0
push 1
call fcn.0040d98d
add esp, 0x14
mov eax, dword [ebp - 0x14]
cmp dword [eax], 0
jne 0x4204ac
push 0
push 0x7f94
push 0
push 0x7b2
push 0x7a19
call fcn.00409589
add esp, 0x14
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x24]
and eax, 0x40
je 0x420362
mov dword [ebp - 0xc4], 0x61f9c28a
mov dword [ebp - 0xa4], 0x9be1d925
mov dword [ebp - 0xbc], 0xdf37d45d
mov dword [ebp - 0xac], 0x4f2887cf
mov dword [ebp - 0xd4], 0xffffffff
mov dword [ebp - 0xb4], 0x4fc2285f
push 2
lea ecx, [ebp - 0xd0]
call fcn.0042e201
mov dword [ebp - 0x98], 0x30c4e2bf
mov dword [ebp - 0x40], 0xb752
push 0x769c
lea eax, [ebp - 0xa0]
push eax
push 0
lea eax, [ebp - 0xd0]
push eax
call fcn.0041aaea
add esp, 0x10
mov byte [ebp - 3], 0
push 0x3d17
lea eax, [ebp - 3]
push eax
push 0
call fcn.0041275e
add esp, 0xc
push 0
push 0x1ed
push 0x7d37
lea eax, [ebp - 0x40]
push eax
call fcn.004215e9
add esp, 0x10
lea ecx, [ebp - 0xd0]
call fcn.0042e2d3
push 0
lea eax, [ebp - 0x38]
push eax
push 0x4bc0
lea eax, [ebp - 0x14]
push eax
push 0x3327
push 0x3f68
push 0x6436
call fcn.0041552e
add esp, 0x1c
jmp 0x4204ac
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x24]
and eax, 0x80
je 0x4204ac
mov dword [ebp - 8], 0x1928c176
mov dword [ebp - 0x2c], 0x515466b
mov dword [ebp - 0xc], 0
jmp 0x420391
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 2
jge 0x4203a4
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x54], 0xffffffff
jmp 0x42038a
push 1
lea eax, [ebp - 8]
push eax
push 0x79c8
push 1
push 0x6d0a
push 0x781e
push 0x1f5a
push 0x768b
push 0x7357
push 0x4911
push 0
call fcn.00424db2
add esp, 0x2c
mov eax, dword [ebp - 8]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 8]
cmp dword [ebp - 8], eax
jg 0x42042f
mov dword [ebp - 0x2c], 0xe124dc41
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xb0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x54]
mov dword [ebp - 0xb8], eax
push 0xfffffffffffffff6
pop eax
cmp eax, 0xfffffff6
jbe 0x42041b
mov dword [ebp - 0x34], 1
jmp 0x42041f
and dword [ebp - 0x34], 0
cmp dword [ebp - 0x34], 0
je 0x42042f
xor eax, eax
jne 0x42042f
and dword [ebp - 0x20], 0
jmp 0x420436
mov dword [ebp - 0x20], 1
cmp dword [ebp - 0x20], 0xfffffffe
jl 0x420445
mov dword [ebp - 0x24], 1
jmp 0x420449
and dword [ebp - 0x24], 0
cmp dword [ebp - 0x24], 1
jbe 0x420458
mov dword [ebp - 0x28], 1
jmp 0x42045c
and dword [ebp - 0x28], 0
mov eax, dword [ebp - 0x28]
sub eax, 0x38d06721
cmp dword [ebp - 8], eax
jne 0x420472
mov dword [ebp - 0x30], 1
jmp 0x420476
and dword [ebp - 0x30], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x54]
cmp dword [ebp - 0x30], eax
jg 0x42048e
mov dword [ebp - 0x44], 1
jmp 0x420492
and dword [ebp - 0x44], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x54]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [eax + 0x24]
mov dword [ecx], eax
mov esp, ebp
pop ebp
ret