Function at 0x1005c730
Capabilities:
Acquire debug privileges

Disassembly:
push ebp
mov ebp, esp
push ecx
mov dword [ebp - 4], 0
push 3
push str.SeAssignPrimaryTokenPrivilege
mov eax, dword [ebp + 8]
push eax
call fcn.1005ca50
add esp, 0xc
movzx ecx, al
add ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
push 0x15
push str.SeAuditPrivilege
mov edx, dword [ebp + 8]
push edx
call fcn.1005ca50
add esp, 0xc
movzx eax, al
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
push 0x11
push str.SeBackupPrivilege
mov ecx, dword [ebp + 8]
push ecx
call fcn.1005ca50
add esp, 0xc
movzx edx, al
add edx, dword [ebp - 4]
mov dword [ebp - 4], edx
push 0x17
push str.SeChangeNotifyPrivilege
mov eax, dword [ebp + 8]
push eax
call fcn.1005ca50
add esp, 0xc
movzx ecx, al
add ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
push 0xf
push str.SeCreatePagefilePrivilege
mov edx, dword [ebp + 8]
push edx
call fcn.1005ca50
add esp, 0xc
movzx eax, al
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
push 0x10
push str.SeCreatePermanentPrivilege
mov ecx, dword [ebp + 8]
push ecx
call fcn.1005ca50
add esp, 0xc
movzx edx, al
add edx, dword [ebp - 4]
mov dword [ebp - 4], edx
push 2
push str.SeCreateTokenPrivilege
mov eax, dword [ebp + 8]
push eax
call fcn.1005ca50
add esp, 0xc
movzx ecx, al
add ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
push 0xe
push str.SeIncreaseBasePriorityPrivilege
mov edx, dword [ebp + 8]
push edx
call fcn.1005ca50
add esp, 0xc
movzx eax, al
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
push 5
push str.SeIncreaseQuotaPrivilege
mov ecx, dword [ebp + 8]
push ecx
call fcn.1005ca50
add esp, 0xc
movzx edx, al
add edx, dword [ebp - 4]
mov dword [ebp - 4], edx
push 8
push str.SeSecurityPrivilege
mov eax, dword [ebp + 8]
push eax
call fcn.1005ca50
add esp, 0xc
movzx ecx, al
add ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
push 6
push str.SeMachineAccountPrivilege
mov edx, dword [ebp + 8]
push edx
call fcn.1005ca50
add esp, 0xc
movzx eax, al
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
push 7
push str.SeTcbPrivilege
mov ecx, dword [ebp + 8]
push ecx
call fcn.1005ca50
add esp, 0xc
movzx edx, al
add edx, dword [ebp - 4]
mov dword [ebp - 4], edx
push 0xa
push 0x100fa938
mov eax, dword [ebp + 8]
push eax
call fcn.1005ca50
add esp, 0xc
movzx ecx, al
add ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
push 0x14
push 0x100fa964
mov edx, dword [ebp + 8]
push edx
call fcn.1005ca50
add esp, 0xc
movzx eax, al
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
push 9
push str.SeTakeOwnershipPrivilege
mov ecx, dword [ebp + 8]
push ecx
call fcn.1005ca50
add esp, 0xc
movzx edx, al
add edx, dword [ebp - 4]
mov dword [ebp - 4], edx
push 0x18
push str.SeRemoteShutdownPrivilege
mov eax, dword [ebp + 8]
push eax
call fcn.1005ca50
add esp, 0xc
movzx ecx, al
add ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
push 0xd
push str.SeProfileSingleProcessPrivilege
mov edx, dword [ebp + 8]
push edx
call fcn.1005ca50
add esp, 0xc
movzx eax, al
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
push 0x13
push str.SeShutdownPrivilege
mov ecx, dword [ebp + 8]
push ecx
call fcn.1005ca50
add esp, 0xc
movzx edx, al
add edx, dword [ebp - 4]
mov dword [ebp - 4], edx
push 0x16
push str.SeSystemEnvironmentPrivilege
mov eax, dword [ebp + 8]
push eax
call fcn.1005ca50
add esp, 0xc
movzx ecx, al
add ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
push 0xb
push str.SeSystemProfilePrivilege
mov edx, dword [ebp + 8]
push edx
call fcn.1005ca50
add esp, 0xc
movzx eax, al
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
push 0xc
push str.SeSystemtimePrivilege
mov ecx, dword [ebp + 8]
push ecx
call fcn.1005ca50
add esp, 0xc
movzx edx, al
add edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
mov esp, ebp
pop ebp
ret