Function at 0x431eb0
Capabilities:
Acquire debug privileges

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x254
mov eax, dword [0x4714d0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
push edi
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x24c], eax
call fcn.00431430
test al, al
jne 0x4321bf
lea eax, [ebp - 0x18]
push eax
push 0x20
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x431f39
lea eax, [ebp - 0x10]
mov dword [ebp - 0x14], 1
push eax
push str.SeDebugPrivilege
push 0
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
push 0
push 0
push 0x10
lea eax, [ebp - 0x14]
mov dword [ebp - 8], 2
push eax
push 0
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.004409b0
mov ebx, dword [ebp + 8]
add esp, 4
xor esi, esi
push ebx
call fcn.00436a90
cmp eax, 0x20
jne 0x4321bf
cmp byte [ebp + 0x14], 1
jne 0x432039
push edi
call fcn.0043a02c
add esp, 4
mov esi, eax
test edi, edi
jle 0x431f90
mov ebx, dword [ebp - 0x24c]
mov ecx, esi
sub ebx, esi
mov edx, edi
mov al, byte [ebx + ecx]
lea ecx, [ecx + 1]
mov byte [ecx - 1], al
dec edx
jne 0x431f81
mov ebx, dword [ebp + 8]
cmp edi, 5
jle 0x431fa1
mov cl, byte [esi + 4]
mov al, byte [esi + 1]
mov byte [esi + 4], al
mov byte [esi + 1], cl
cmp edi, 0x11
jle 0x431fb2
mov cl, byte [esi + 0x10]
mov al, byte [esi + 7]
mov byte [esi + 0x10], al
mov byte [esi + 7], cl
cmp edi, 0x21
jle 0x431fc3
mov cl, byte [esi + 0x20]
mov al, byte [esi + 0x17]
mov byte [esi + 0x20], al
mov byte [esi + 0x17], cl
xor ecx, ecx
test edi, edi
jle 0x432028
cmp edi, 0x20
jb 0x432016
mov eax, edi
and eax, 0x8000001f
jns 0x431fdc
dec eax
or eax, 0xffffffe0
inc eax
movdqu xmm1, xmmword [0x46a4c0]
mov edx, edi
sub edx, eax
lea eax, [esi + 0x10]
jmp 0x431ff0
movdqu xmm0, xmmword [eax - 0x10]
add ecx, 0x20
lea eax, [eax + 0x20]
pandn xmm0, xmm1
movdqu xmmword [eax - 0x30], xmm0
movdqu xmm0, xmmword [eax - 0x20]
pandn xmm0, xmm1
movdqu xmmword [eax - 0x20], xmm0
cmp ecx, edx
jl 0x431ff0
cmp ecx, edi
jge 0x432028
lea ebx, [ebx]
not byte [ecx + esi]
inc ecx
cmp ecx, edi
jl 0x432020
sub esp, 8
mov edx, edi
mov ecx, esi
call fcn.00436770
add esp, 8
mov esi, eax
xor eax, eax
mov dword [ebp - 0x250], eax
test esi, esi
je 0x4321d4
xor ecx, ecx
mov dword [ebp - 0x24c], eax
cmp dword [esi], 1
mov dword [ebp - 0x248], 0
mov word [ebp - 0x244], cx
mov dword [ebp - 0x1c], ecx
jne 0x4320de
lea ecx, [ebp - 0x248]
push ecx
mov ecx, dword [esi + 4]
push eax
call fcn.00435f60
mov dword [0x476adc], eax
test eax, eax
jne 0x4320e8
mov edi, dword [ebp - 0x1c]
push edi
call fcn.0043a02c
add esp, 4
mov ebx, eax
cmp dword [esi], 1
jne 0x4320de
push ecx
mov ecx, dword [esi + 4]
push edi
push ebx
push dword [ebp - 0x24c]
call fcn.004365f0
mov dword [0x476adc], eax
test eax, eax
jne 0x4320e8
test edi, edi
jle 0x4320c9
push ecx
push dword [ebp + 8]
push edi
push ebx
call fcn.00436d70
test al, al
je 0x4320c9
inc dword [ebp - 0x250]
push ebx
call fcn.0043e1fc
mov eax, dword [ebp - 0x24c]
add esp, 4
inc eax
jmp 0x432049
mov dword [0x476adc], 0x80000
cmp dword [esi], 1
je 0x4320fc
mov dword [0x476adc], 0x80000
jmp 0x4321b5
mov edi, dword [esi + 4]
cmp dword [edi + 4], 0xffffffff
je 0x43210c
mov ecx, dword [edi]
call fcn.00435da0
mov ebx, dword [edi]
mov dword [edi + 4], 0xffffffff
test ebx, ebx
je 0x432159
cmp dword [ebx + 0x7c], 0
je 0x432126
mov ecx, ebx
call fcn.00435da0
mov eax, dword [ebx]
mov dword [ebp - 0x24c], eax
test eax, eax
je 0x432150
cmp byte [eax + 0x10], 0
je 0x432147
push dword [eax + 4]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x24c]
push eax
call fcn.0043e223
add esp, 4
push ebx
call fcn.0043e084
add esp, 4
mov dword [edi], 0
mov eax, dword [edi + 0x23c]
mov dword [0x476adc], 0
test eax, eax
je 0x43217c
push eax
call fcn.0043e223
add esp, 4
mov eax, dword [edi + 0x240]
mov dword [edi + 0x23c], 0
test eax, eax
je 0x432199
push eax
call fcn.0043e223
add esp, 4
push edi
mov dword [edi + 0x240], 0
call fcn.0043e223
add esp, 4
push esi
call fcn.0043e223
add esp, 4
mov eax, dword [ebp - 0x250]
test eax, eax
jg 0x4321e6
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0043d8bb
mov esp, ebp
pop ebp
ret 0x10
push ecx
push ebx
push edi
push dword [ebp - 0x24c]
call fcn.00436d70
test al, al
je 0x4321bf
mov ecx, dword [ebp - 4]
mov al, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0043d8bb
mov esp, ebp
pop ebp
ret 0x10