Function at 0x42d940
Capabilities:
Acquire debug privileges

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov eax, dword [0x4cd070]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
lea eax, [ebp - 0xc]
push edi
push eax
push str.SeCreateGlobalPrivilege
push 0
mov edi, ecx
call esi
mov ebx, dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
test eax, eax
je 0x42d99b
mov eax, dword [ebp - 0xc]
push 0
push 0
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push 0x10
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x1c]
push eax
push 0
push edi
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x10], 4
call ebx
lea eax, [ebp - 0xc]
push eax
push str.SeBackupPrivilege
push 0
call esi
test eax, eax
je 0x42d9d5
mov eax, dword [ebp - 0xc]
push 0
push 0
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push 0x10
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x1c]
push eax
push 0
push edi
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x10], 4
call ebx
lea eax, [ebp - 0xc]
push eax
push str.SeCreatePagefilePrivilege
push 0
call esi
test eax, eax
je 0x42da0f
mov eax, dword [ebp - 0xc]
push 0
push 0
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push 0x10
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x1c]
push eax
push 0
push edi
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x10], 4
call ebx
lea eax, [ebp - 0xc]
push eax
push str.SeCreateSymbolicLinkPrivilege
push 0
call esi
test eax, eax
je 0x42da49
mov eax, dword [ebp - 0xc]
push 0
push 0
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push 0x10
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x1c]
push eax
push 0
push edi
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x10], 4
call ebx
lea eax, [ebp - 0xc]
push eax
push str.SeDebugPrivilege
push 0
call esi
test eax, eax
je 0x42da83
mov eax, dword [ebp - 0xc]
push 0
push 0
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push 0x10
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x1c]
push eax
push 0
push edi
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x10], 4
call ebx
lea eax, [ebp - 0xc]
push eax
push str.SeImpersonatePrivilege
push 0
call esi
test eax, eax
je 0x42dabd
mov eax, dword [ebp - 0xc]
push 0
push 0
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push 0x10
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x1c]
push eax
push 0
push edi
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x10], 4
call ebx
lea eax, [ebp - 0xc]
push eax
push str.SeIncreaseBasePriorityPrivilege
push 0
call esi
test eax, eax
je 0x42daf7
mov eax, dword [ebp - 0xc]
push 0
push 0
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push 0x10
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x1c]
push eax
push 0
push edi
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x10], 4
call ebx
lea eax, [ebp - 0xc]
push eax
push str.SeIncreaseQuotaPrivilege
push 0
call esi
test eax, eax
je 0x42db31
mov eax, dword [ebp - 0xc]
push 0
push 0
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push 0x10
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x1c]
push eax
push 0
push edi
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x10], 4
call ebx
lea eax, [ebp - 0xc]
push eax
push str.SeLoadDriverPrivilege
push 0
call esi
test eax, eax
je 0x42db6b
mov eax, dword [ebp - 0xc]
push 0
push 0
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push 0x10
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x1c]
push eax
push 0
push edi
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x10], 4
call ebx
lea eax, [ebp - 0xc]
push eax
push str.SeManageVolumePrivilege
push 0
call esi
test eax, eax
je 0x42dba5
mov eax, dword [ebp - 0xc]
push 0
push 0
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push 0x10
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x1c]
push eax
push 0
push edi
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x10], 4
call ebx
lea eax, [ebp - 0xc]
push eax
push str.SeProfileSingleProcessPrivilege
push 0
call esi
test eax, eax
je 0x42dbdf
mov eax, dword [ebp - 0xc]
push 0
push 0
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push 0x10
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x1c]
push eax
push 0
push edi
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x10], 4
call ebx
lea eax, [ebp - 0xc]
push eax
push str.SeRemoteShutdownPrivilege
push 0
call esi
test eax, eax
je 0x42dc19
mov eax, dword [ebp - 0xc]
push 0
push 0
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push 0x10
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x1c]
push eax
push 0
push edi
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x10], 4
call ebx
lea eax, [ebp - 0xc]
push eax
push str.SeRestorePrivilege
push 0
call esi
test eax, eax
je 0x42dc53
mov eax, dword [ebp - 0xc]
push 0
push 0
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push 0x10
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x1c]
push eax
push 0
push edi
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x10], 4
call ebx
lea eax, [ebp - 0xc]
push eax
push str.SeSecurityPrivilege
push 0
call esi
test eax, eax
je 0x42dc8d
mov eax, dword [ebp - 0xc]
push 0
push 0
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push 0x10
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x1c]
push eax
push 0
push edi
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x10], 4
call ebx
lea eax, [ebp - 0xc]
push eax
push str.SeSystemEnvironmentPrivilege
push 0
call esi
test eax, eax
je 0x42dcc7
mov eax, dword [ebp - 0xc]
push 0
push 0
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push 0x10
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x1c]
push eax
push 0
push edi
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x10], 4
call ebx
lea eax, [ebp - 0xc]
push eax
push str.SeSystemProfilePrivilege
push 0
call esi
test eax, eax
je 0x42dd01
mov eax, dword [ebp - 0xc]
push 0
push 0
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push 0x10
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x1c]
push eax
push 0
push edi
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x10], 4
call ebx
lea eax, [ebp - 0xc]
push eax
push str.SeSystemtimePrivilege
push 0
call esi
test eax, eax
je 0x42dd3b
mov eax, dword [ebp - 0xc]
push 0
push 0
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push 0x10
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x1c]
push eax
push 0
push edi
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x10], 4
call ebx
lea eax, [ebp - 0xc]
push eax
push str.SeTakeOwnershipPrivilege
push 0
call esi
test eax, eax
je 0x42dd75
mov eax, dword [ebp - 0xc]
push 0
push 0
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
push 0x10
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x1c]
push eax
push 0
push edi
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x10], 4
call ebx
mov ecx, dword [ebp - 4]
mov eax, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00464f19
mov esp, ebp
pop ebp
ret