Function at 0x516ebc
Capabilities:
Compare security identifiers

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x74
mov ebx, ecx
mov edi, dword [ebp + 0xc]
mov eax, dword [0x597010]
xor eax, ebp
mov dword [ebp - 0x10], eax
xor edx, edx
dec edx
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x2c], edx
mov byte [ebp - 0x30], 0
lea eax, [ecx + 0xc]
lea ecx, [ebp - 0x60]
mov dword [ecx + 8], edx
mov dword [ecx + 4], edx
mov dword [ecx], edx
push eax
push ecx
call fcn.004938c0
add esp, 8
cmp byte [ebx + 0x4c], 0
je 0x516f38
lea esi, [ebp - 0x54]
mov ecx, edi
push esi
call fcn.0048c250
lea ecx, [ebp - 0x60]
push esi
call fcn.004e8792
mov eax, dword [esi]
test eax, eax
je 0x516f38
mov ecx, dword [ebp - 0x50]
mov edx, ecx
sub edx, eax
dec ecx
cmp edx, ecx
ja 0x51786c
mov dword [ebp - 0x50], eax
push eax
call fcn.00528424
add esp, 4
cmp byte [ebx + 0x3f], 0
mov dword [ebp - 0x7c], ebx
je 0x516fe7
mov edx, dword [edi]
lea esi, [ebp - 0x54]
mov ecx, esi
push 2
call fcn.0048c600
add esp, 4
mov edi, dword [esi]
mov eax, dword [esi + 4]
mov dword [ebp - 0x80], eax
cmp edi, eax
je 0x516fd4
mov eax, dword [edi + 0xc]
cmp eax, 0xbfffffff
ja 0x516fcc
and eax, 0x20
jne 0x516fcc
mov eax, dword [ebp - 0x7c]
mov esi, dword [eax + 0x40]
mov ebx, dword [eax + 0x44]
cmp esi, ebx
je 0x516f95
push dword [edi]
push dword [esi]
call dword [sym.imp.ADVAPI32.dll_EqualSid]
test eax, eax
jne 0x516f91
add esi, 0xc
jmp 0x516f7a
cmp esi, ebx
jne 0x516fcc
mov ecx, edi
lea esi, [ebp - 0x24]
push esi
call fcn.00492cf0
lea ecx, [ebp - 0x60]
push esi
call fcn.004e8792
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x516fcc
mov ecx, dword [ebp - 0x20]
mov edx, ecx
sub edx, eax
dec ecx
cmp edx, ecx
ja 0x517860
mov dword [ebp - 0x20], eax
push eax
call fcn.00528424
add esp, 4
add edi, 0x10
cmp edi, dword [ebp - 0x80]
jne 0x516f62
lea ecx, [ebp - 0x24]
lea eax, [ebp - 0x54]
mov dword [ecx], eax
call fcn.00517ed6
mov ebx, dword [ebp - 0x7c]
mov edi, dword [ebp + 0xc]
lea eax, [ebp - 0x6c]
xor ecx, ecx
dec ecx
mov dword [eax + 8], ecx
mov dword [eax + 4], ecx
mov dword [eax], ecx
push ebx
push eax
call fcn.004938c0
add esp, 8
cmp byte [ebx + 0x4e], 0
je 0x51703b
lea esi, [ebp - 0x54]
mov ecx, edi
push esi
call fcn.0048c250
lea ecx, [ebp - 0x6c]
push esi
call fcn.004e8792
mov eax, dword [esi]
test eax, eax
je 0x51703b
mov ecx, dword [ebp - 0x50]
mov edx, ecx
sub edx, eax
dec ecx
cmp edx, ecx
ja 0x51786f
mov dword [ebp - 0x50], eax
push eax
call fcn.00528424
add esp, 4
cmp byte [ebx + 0x4f], 0
je 0x5170b2
mov edx, dword [edi]
lea esi, [ebp - 0x54]
mov ecx, esi
push 2
call fcn.0048c600
add esp, 4
mov ebx, dword [esi]
mov esi, dword [esi + 4]
cmp ebx, esi
je 0x51709f
lea edi, [ebp - 0x24]
test byte [ebx + 0xc], 0x20
jne 0x517098
mov ecx, ebx
push edi
call fcn.00492cf0
lea ecx, [ebp - 0x6c]
push edi
call fcn.004e8792
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x517098
mov ecx, dword [ebp - 0x20]
mov edx, ecx
sub edx, eax
dec ecx
cmp edx, ecx
ja 0x51785d
mov dword [ebp - 0x20], eax
push eax
call fcn.00528424
add esp, 4
add ebx, 0x10
cmp ebx, esi
jne 0x51705e
lea ecx, [ebp - 0x24]
lea eax, [ebp - 0x54]
mov dword [ecx], eax
call fcn.00517ed6
mov ebx, dword [ebp - 0x7c]
mov edi, dword [ebp + 0xc]
cmp byte [ebx + 0x4d], 0
je 0x51710c
pcmpeqd xmm0, xmm0
lea esi, [ebp - 0x54]
movdqu xmmword [esi], xmm0
mov dword [esi + 0x10], 0xffffffff
mov ecx, edi
push esi
call fcn.0048c4f0
cmp byte [esi], 0
je 0x51710c
lea esi, [ebp - 0x50]
lea ecx, [ebp - 0x6c]
push esi
call fcn.004e8792
cmp byte [esi - 4], 0
je 0x51710c
mov eax, dword [ebp - 0x50]
test eax, eax
je 0x51710c
mov ecx, dword [ebp - 0x4c]
mov edx, ecx
sub edx, eax
dec ecx
cmp edx, ecx
ja 0x517878
mov dword [ebp - 0x4c], eax
push eax
call fcn.00528424
add esp, 4
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x5c]
jne 0x517126
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x68]
jne 0x517126
cmp byte [ebx + 0x3d], 0
je 0x5173c0
xor eax, eax
lea esi, [ebp - 0x24]
mov dword [esi], eax
mov dword [esi + 4], eax
mov dword [esi + 8], eax
movzx eax, byte [ebx + 0x3d]
mov ecx, edi
lea edi, [ebp - 0x54]
push 0xf01ff
lea edx, [ebp - 0x6c]
push edx
push esi
lea edx, [ebp - 0x60]
push edx
push eax
push edi
call fcn.0048cf50
lea ecx, [ebp - 0x30]
push edi
call fcn.004e6f12
cmp byte [edi], 0
je 0x51716d
lea edi, [ebp - 0x50]
mov ecx, edi
call fcn.0042e300
mov byte [edi - 4], 0
lea ecx, [ebp - 0x78]
mov dword [ecx], esi
call fcn.0042d640
mov edi, dword [ebp + 8]
cmp byte [ebp - 0x30], 0
je 0x517289
cmp byte [ebx + 0x3d], 0
je 0x5171ec
cmp byte [ebx + 0x3e], 0
je 0x5171ec
lea ebx, [ebp - 0x2c]
lea edi, [ebp - 0x54]
mov ecx, edi
push str.SeChangeNotifyPrivilege
call fcn.0042d4b2
mov ecx, ebx
push edi
call fcn.0048d6d0
mov ebx, eax
cmp byte [edi + 0xb], 0
jns 0x5171bd
push dword [ebp - 0x54]
call fcn.00528424
add esp, 4
test bl, bl
je 0x517286
xor eax, eax
cmp byte [ebp - 0x30], 0
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], eax
mov eax, 0xffffffff
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x7c]
jne 0x517203
jmp 0x517856
xor eax, eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], eax
xor eax, eax
dec eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x3c], eax
lea ecx, [ebp - 0x2c]
lea esi, [ebp - 0x3c]
push esi
call fcn.0048c9d0
cmp byte [esi], 0
je 0x51727b
cmp byte [ebx + 0x3c], 0
je 0x517291
pcmpeqd xmm0, xmm0
movdqu xmmword [ebp - 0x24], xmm0
mov dword [ebp - 0x14], 0xffffffff
cmp byte [ebp - 0x30], 0
je 0x517856
lea esi, [ebp - 0x24]
lea ecx, [ebp - 0x2c]
push esi
call fcn.0048c4f0
cmp byte [esi], 0
je 0x5172c9
lea esi, [ebp - 0x20]
mov edi, dword [ebp - 0x74]
mov eax, dword [ebp - 0x70]
cmp edi, eax
jae 0x517316
test edi, edi
je 0x517887
xor eax, eax
mov ecx, edi
push eax
push eax
push 3
push esi
call fcn.004bae40
add edi, 0x18
mov dword [ebp - 0x74], edi
jmp 0x517440
mov edi, dword [ebp + 8]
mov byte [edi], 0
jmp 0x517809
mov edi, dword [ebp + 8]
mov byte [edi], 0
jmp 0x517816
mov edi, dword [ebp - 0x74]
mov eax, dword [ebp - 0x70]
cmp edi, eax
jae 0x51736b
test edi, edi
je 0x517890
sub esp, 0x10
movdqa xmm0, xmmword [0x58f020]
movdqu xmmword [esp], xmm0
mov ecx, edi
call fcn.004baec0
add edi, 0x18
mov dword [ebp - 0x74], edi
jmp 0x5174d6
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x490
je 0x517449
mov edi, dword [ebp + 8]
mov byte [edi], 0
cmp byte [ebp - 0x24], 0
je 0x5177ec
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x5177ec
mov ecx, dword [ebp - 0x1c]
mov edx, ecx
sub edx, eax
dec ecx
cmp edx, ecx
ja 0x517896
mov dword [ebp - 0x1c], eax
push eax
call fcn.00528424
add esp, 4
jmp 0x5177ec
mov ecx, dword [ebp - 0x78]
sub edi, ecx
sar edi, 3
imul edi, edi, 0xaaaaaaab
lea edx, [edi + 1]
cmp edx, 0xaaaaaab
jae 0x517858
sub eax, ecx
sar eax, 3
imul eax, eax, 0xaaaaaaab
lea ecx, [eax + eax]
cmp ecx, edx
cmova edx, ecx
lea ebx, [ebp - 0x6c]
cmp eax, 0x5555555
mov ecx, 0xaaaaaaa
cmovb ecx, edx
mov dword [ebp - 0x44], ebx
test ecx, ecx
je 0x5173ef
call fcn.00517eab
jmp 0x5173f3
mov ecx, dword [ebp - 0x78]
sub edi, ecx
sar edi, 3
imul esi, edi, 0xaaaaaaab
lea edx, [esi + 1]
cmp edx, 0xaaaaaab
jae 0x517858
sub eax, ecx
sar eax, 3
imul eax, eax, 0xaaaaaaab
lea ecx, [eax + eax]
cmp ecx, edx
cmova edx, ecx
lea edi, [ebp - 0x6c]
cmp eax, 0x5555555
mov ecx, 0xaaaaaaa
cmovb ecx, edx
mov dword [ebp - 0x44], edi
test ecx, ecx
je 0x51747c
call fcn.00517eab
jmp 0x517480
lea esi, [ebp - 0x54]
mov ecx, edi
push 0xf01ff
push esi
call fcn.0048cdf0
lea ecx, [ebp - 0x30]
push esi
call fcn.004e6f12
cmp byte [esi], 0
je 0x517177
lea ecx, [ebp - 0x50]
call fcn.0042e300
jmp 0x517177
xor eax, eax
xor edx, edx
mov dword [ebp - 0x54], eax
lea edi, [edi + edi*2]
shl edi, 3
add edi, eax
mov dword [ebp - 0x50], edi
lea ecx, [edx + edx*2]
lea eax, [eax + ecx*8]
mov dword [ebp - 0x48], eax
je 0x51788a
xor eax, eax
mov ecx, edi
push eax
push eax
push 3
push esi
call fcn.004bae40
add edi, 0x18
lea ebx, [ebp - 0x54]
mov dword [ebx + 8], edi
lea edi, [ebp - 0x78]
mov ecx, edi
mov edx, ebx
call fcn.00517dd8
mov ecx, ebx
call fcn.00517e72
mov edi, dword [edi + 4]
mov ebx, dword [ebp - 0x7c]
cmp dword [ebp - 0x78], edi
je 0x517881
cmp byte [ebp - 0x24], 0
je 0x5174df
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x5174df
mov ecx, dword [ebp - 0x1c]
mov edx, ecx
sub edx, eax
dec ecx
cmp edx, ecx
ja 0x51788d
mov dword [ebp - 0x1c], eax
push eax
call fcn.00528424
add esp, 4
jmp 0x5174df
xor eax, eax
xor edx, edx
mov dword [ebp - 0x54], eax
lea edi, [esi + esi*2]
shl edi, 3
add edi, eax
mov dword [ebp - 0x50], edi
lea ecx, [edx + edx*2]
lea eax, [eax + ecx*8]
mov dword [ebp - 0x48], eax
je 0x517893
sub esp, 0x10
movdqa xmm0, xmmword [0x58f020]
movdqu xmmword [esp], xmm0
mov ecx, edi
call fcn.004baec0
add edi, 0x18
lea ebx, [ebp - 0x54]
mov dword [ebx + 8], edi
lea edi, [ebp - 0x78]
mov ecx, edi
mov edx, ebx
call fcn.00517dd8
mov ecx, ebx
call fcn.00517e72
mov edi, dword [edi + 4]
mov ebx, dword [ebp - 0x7c]
cmp dword [ebp - 0x78], edi
je 0x517884
mov eax, ebx
mov ebx, dword [ebx + 0x18]
mov esi, dword [eax + 0x1c]
cmp ebx, esi
je 0x517649
lea edi, [ebp - 0x54]
mov dword [ebp - 0x80], esi
mov ecx, ebx
push edi
call fcn.004badb0
mov eax, dword [ebp - 0x74]
mov edx, dword [ebp - 0x70]
cmp eax, edx
jae 0x517550
test eax, eax
je 0x517863
xor edx, edx
mov dword [eax], edx
mov dword [eax + 4], edx
mov dword [eax + 8], edx
mov ecx, dword [ebp - 0x54]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x50]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x4c]
mov dword [eax + 8], ecx
mov dword [ebp - 0x4c], edx
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x54], edx
lea edx, [ebp - 0x48]
mov ecx, dword [edx + 8]
mov dword [eax + 0x14], ecx
movq xmm0, qword [edx]
movq qword [eax + 0xc], xmm0
add eax, 0x18
mov dword [ebp - 0x74], eax
jmp 0x51763e
mov esi, dword [ebp - 0x78]
sub eax, esi
sar eax, 3
imul edi, eax, 0xaaaaaaab
lea ecx, [edi + 1]
cmp ecx, 0xaaaaaab
jae 0x517858
sub edx, esi
sar edx, 3
imul eax, edx, 0xaaaaaaab
lea edx, [eax + eax]
cmp edx, ecx
cmova ecx, edx
cmp eax, 0x5555555
mov eax, 0xaaaaaaa
cmovae ecx, eax
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x14], eax
test ecx, ecx
je 0x51759e
call fcn.00517eab
jmp 0x5175a2
xor eax, eax
xor edx, edx
mov dword [ebp - 0x24], eax
lea edi, [edi + edi*2]
lea ecx, [edi*8]
add ecx, eax
mov dword [ebp - 0x20], ecx
lea edx, [edx + edx*2]
lea edx, [eax + edx*8]
mov dword [ebp - 0x18], edx
je 0x517866
xor esi, esi
mov dword [ecx], esi
mov dword [ecx + 4], esi
mov dword [ecx + 8], esi
mov edx, dword [ebp - 0x54]
mov dword [ecx], edx
mov edx, dword [ebp - 0x50]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0x4c]
mov dword [ecx + 8], edx
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x54], esi
lea esi, [ebp - 0x48]
mov edx, dword [esi + 8]
mov dword [eax + edi*8 + 0x14], edx
movq xmm0, qword [esi]
movq qword [eax + edi*8 + 0xc], xmm0
add ecx, 0x18
mov dword [ebp - 0x1c], ecx
lea ecx, [ebp - 0x78]
lea esi, [ebp - 0x24]
mov edx, esi
call fcn.00517dd8
mov ecx, esi
call fcn.00517e72
mov eax, dword [ebp - 0x54]
test eax, eax
mov esi, dword [ebp - 0x80]
lea edi, [ebp - 0x54]
je 0x51763e
mov ecx, dword [ebp - 0x50]
mov edx, ecx
sub edx, eax
dec ecx
cmp edx, ecx
ja 0x517869
mov dword [ebp - 0x50], eax
push eax
call fcn.00528424
add esp, 4
add ebx, 0x18
cmp ebx, esi
jne 0x5174f5
cmp byte [ebp - 0x30], 0
je 0x517856
lea esi, [ebp - 0x24]
lea ecx, [ebp - 0x2c]
push esi
call fcn.0048c250
mov edi, dword [ebp - 0x74]
mov eax, dword [ebp - 0x70]
cmp edi, eax
jae 0x517690
test edi, edi
mov ebx, dword [ebp - 0x7c]
je 0x51787b
xor eax, eax
mov ecx, edi
push eax
push 0x10000000
push eax
push esi
call fcn.004bae40
add edi, 0x18
mov dword [ebp - 0x74], edi
jmp 0x517732
mov ecx, dword [ebp - 0x78]
sub edi, ecx
sar edi, 3
imul edi, edi, 0xaaaaaaab
lea edx, [edi + 1]
cmp edx, 0xaaaaaab
jae 0x517858
sub eax, ecx
sar eax, 3
imul eax, eax, 0xaaaaaaab
lea ecx, [eax + eax]
cmp ecx, edx
cmova edx, ecx
lea ebx, [ebp - 0x6c]
cmp eax, 0x5555555
mov ecx, 0xaaaaaaa
cmovb ecx, edx
mov dword [ebp - 0x44], ebx
test ecx, ecx
je 0x5176de
call fcn.00517eab
jmp 0x5176e2
xor eax, eax
xor edx, edx
mov dword [ebp - 0x54], eax
lea edi, [edi + edi*2]
shl edi, 3
add edi, eax
mov dword [ebp - 0x50], edi
lea ecx, [edx + edx*2]
lea eax, [eax + ecx*8]
mov dword [ebp - 0x48], eax
je 0x51787e
xor eax, eax
mov ecx, edi
push eax
push 0x10000000
push eax
push esi
call fcn.004bae40
add edi, 0x18
lea ebx, [ebp - 0x54]
mov dword [ebx + 8], edi
lea edi, [ebp - 0x78]
mov ecx, edi
mov edx, ebx
call fcn.00517dd8
mov ecx, ebx
call fcn.00517e72
mov edi, dword [edi + 4]
mov ebx, dword [ebp - 0x7c]
cmp dword [ebp - 0x78], edi
je 0x517872
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x51775e
mov ecx, dword [ebp - 0x20]
mov edx, ecx
sub edx, eax
dec ecx
cmp edx, ecx
ja 0x517875
mov dword [ebp - 0x20], eax
push eax
call fcn.00528424
add esp, 4
cmp byte [ebp - 0x3c], 0
je 0x517856
lea ecx, [ebp - 0x38]
lea eax, [ebp - 0x78]
push eax
call fcn.004bb060
test al, al
je 0x5177e6
cmp byte [ebp - 0x30], 0
je 0x517856
cmp byte [ebp - 0x3c], 0
je 0x517856
mov eax, dword [ebp - 0x38]
lea ecx, [ebp - 0x54]
mov dword [ecx], eax
push 4
push ecx
push 6
push dword [ebp - 0x2c]
call dword [sym.imp.ADVAPI32.dll_SetTokenInformation]
test eax, eax
je 0x5177e6
cmp byte [ebx + 0x30], 0
je 0x5177c5
cmp byte [ebp - 0x30], 0
je 0x517856
lea ecx, [ebp - 0x2c]
push dword [ebx + 0x34]
call fcn.0048c950
test al, al
je 0x5177e6
xor eax, eax
mov edi, dword [ebp + 8]
mov dword [edi + 4], eax
mov dword [edi], eax
cmp byte [ebp - 0x30], 0
je 0x5177ec
lea ecx, [edi + 4]
lea eax, [ebp - 0x2c]
push eax
call fcn.0048c220
mov byte [edi], 1
jmp 0x5177ec
mov edi, dword [ebp + 8]
mov byte [edi], 0
cmp byte [ebp - 0x3c], 0
je 0x517809
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x38], 0
test eax, eax
je 0x517809
push eax
call fcn.0052845c
add esp, 4
lea eax, [ebp - 0x78]
lea ecx, [ebp - 0x54]
mov dword [ecx], eax
call fcn.00517cfe
lea esi, [ebp - 0x54]
lea eax, [ebp - 0x6c]
mov dword [esi], eax
mov ecx, esi
call fcn.004e942c
lea eax, [ebp - 0x60]
mov dword [esi], eax
lea ecx, [ebp - 0x54]
call fcn.004e942c
cmp byte [ebp - 0x30], 0
je 0x517840
lea ecx, [ebp - 0x2c]
call fcn.0042e300
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00528e13
mov eax, edi
add esp, 0x74
pop esi
pop edi
pop ebx
pop ebp
ret 8
ud2
call fcn.0053bf0b
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3