Function at 0x46d9f4
Capabilities:
Get session integrity level

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x10
push 0
push 0
dec ecx
jne 0x46d9fc
push ecx
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x46df2d
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 0xc], eax
xor ebx, ebx
call fcn.004032b0
test eax, eax
jle 0x46dadb
call fcn.004032b0
mov edi, eax
test edi, edi
jle 0x46da64
mov esi, 1
push dword [0x478ed8]
lea edx, [ebp - 0x14]
mov eax, esi
call fcn.00403310
push dword [ebp - 0x14]
push 0x46df44
mov eax, 0x478ed8
mov edx, 3
call fcn.004058c4
inc esi
dec edi
jne 0x46da39
lea edx, [ebp - 0x1c]
mov eax, 1
call fcn.00403310
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408ad4
mov eax, dword [ebp - 0x18]
mov edx, 0x46df50
call fcn.00405958
jne 0x46dab2
mov eax, dword [0x473700]
mov byte [eax], 1
mov byte [0x478edc], 1
cmp byte [0x478edc], 0
je 0x46dab2
mov eax, 0x478cd0
mov edx, 0x46df64
call fcn.004057fc
lea edx, [ebp - 0x24]
mov eax, 1
call fcn.00403310
mov eax, dword [ebp - 0x24]
lea edx, [ebp - 0x20]
call fcn.00408ad4
mov eax, dword [ebp - 0x20]
mov edx, 0x46df78
call fcn.00405958
jne 0x46dadb
mov bl, 1
test bl, bl
jne 0x46de8d
mov eax, dword [0x473700]
cmp byte [eax], 0
jne 0x46de8d
mov edx, 0x478ff8
mov eax, dword [0x473804]
call fcn.0041ed2c
mov dword [0x478ff4], eax
cmp dword [0x478ff4], 0x3c
jl 0x46de8d
push 0x46df8c
call fcn.0041d088
lea edx, [ebp - 0x2c]
call fcn.00409090
push dword [ebp - 0x2c]
push 0x46df44
push 0x46dfa4
call fcn.0041d150
lea edx, [ebp - 0x30]
call fcn.00409090
push dword [ebp - 0x30]
push 0x46df44
push 0x46dfb8
call fcn.0041d210
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x34]
call fcn.0040917c
push dword [ebp - 0x34]
lea eax, [ebp - 0x28]
mov edx, 8
call fcn.004058c4
mov eax, dword [ebp - 0x28]
call fcn.0043fdf4
lea eax, [ebp - 4]
mov edx, 0x46dfd4
call fcn.004055ac
call fcn.0041d29c
test al, al
je 0x46db99
lea eax, [ebp - 4]
mov edx, 0x46dfe8
call fcn.004055ac
jmp 0x46dba6
lea eax, [ebp - 4]
mov edx, 0x46dff8
call fcn.004055ac
mov eax, dword [ebp - 4]
call fcn.0043fdf4
call fcn.004032b0
dec eax
jle 0x46dc0d
lea edx, [ebp - 0x3c]
mov eax, 2
call fcn.00403310
mov eax, dword [ebp - 0x3c]
lea edx, [ebp - 0x38]
call fcn.00408ad4
mov eax, dword [ebp - 0x38]
mov edx, 0x46e008
call fcn.00405958
jne 0x46dc0d
mov byte [0x478ede], 1
push 0
mov eax, dword [0x478cd0]
call fcn.004059c0
push eax
call sub.user32.dll_FindWindowA
mov esi, eax
test esi, esi
je 0x46dc08
push 0
push 0
push 0x10
push esi
call sub.user32.dll_PostMessageA
call fcn.0044c830
cmp byte [0x478ede], 0
jne 0x46de8d
call sub.shell32.dll_IsUserAnAdmin
test eax, eax
jne 0x46de8d
lea eax, [ebp - 0x40]
call fcn.0044879c
mov eax, dword [ebp - 0x40]
mov edx, 0x46e01c
call fcn.00405958
jne 0x46de8d
lea edx, [ebp - 0x48]
xor eax, eax
call fcn.00403310
lea eax, [ebp - 0x48]
mov edx, 0x46e028
call fcn.004057fc
mov eax, dword [ebp - 0x48]
lea edx, [ebp - 0x44]
call fcn.004098d0
mov eax, dword [ebp - 0x44]
call fcn.0040968c
test al, al
je 0x46de8d
lea eax, [ebp - 0x4c]
call fcn.0041cd00
mov edx, dword [ebp - 0x4c]
mov eax, dword [0x4739f0]
call fcn.00405568
call fcn.0041d088
dec eax
jle 0x46de8d
push 0x46e040
call fcn.0041d088
lea edx, [ebp - 0x54]
call fcn.00409090
push dword [ebp - 0x54]
push 0x46e080
lea eax, [ebp - 0x50]
mov edx, 3
call fcn.004058c4
mov eax, dword [ebp - 0x50]
call fcn.0043f95c
call fcn.0044c600
call fcn.00448908
test al, al
je 0x46dddc
mov eax, 0x46e08c
call fcn.0043f95c
call fcn.004032b0
test eax, eax
jle 0x46dd05
lea edx, [ebp - 0x58]
mov eax, 1
call fcn.00403310
mov edx, dword [ebp - 0x58]
mov eax, 0x46e0bc
call fcn.00445320
jmp 0x46dd11
xor edx, edx
mov eax, 0x46e0bc
call fcn.00445320
lea eax, [ebp - 0x60]
call fcn.0041cd00
mov eax, dword [ebp - 0x60]
lea edx, [ebp - 0x5c]
call fcn.00408ad4
mov ecx, dword [ebp - 0x5c]
lea eax, [ebp - 8]
mov edx, 0x46e0d0
call fcn.00405848
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push 0
lea eax, [ebp - 0xc]
push eax
push 0x46e0e0
push dword [ebp - 8]
push 0x46e0f4
lea eax, [ebp - 0x64]
mov edx, 3
call fcn.004058c4
mov edx, dword [ebp - 0x64]
mov ecx, 0x46e100
mov eax, 0x46e10c
call fcn.0044d720
xor esi, esi
mov eax, 0x46e120
call fcn.00440f04
test al, al
jne 0x46dd83
mov esi, 0x15
inc esi
cmp esi, 0x15
jge 0x46dd98
mov edx, 0x46e134
mov eax, 0x1f4
call fcn.0044caa0
cmp esi, 0x14
jle 0x46dd70
mov eax, 0x46e14c
call fcn.00440f04
test al, al
je 0x46ddb5
mov eax, 0x46e14c
call fcn.00440d20
mov eax, 0x46e120
call fcn.00440f04
test al, al
jne 0x46ddc8
call fcn.0040534c
mov eax, 0x46e120
call fcn.00440d20
mov eax, 0x46e164
call fcn.0043f95c
call fcn.004032b0
test eax, eax
jle 0x46de46
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push 0
lea eax, [ebp - 0xc]
push eax
lea edx, [ebp - 0x6c]
mov eax, 1
call fcn.00403310
mov ecx, dword [ebp - 0x6c]
lea eax, [ebp - 0x68]
mov edx, 0x46e1ac
call fcn.00405848
mov eax, dword [ebp - 0x68]
push eax
lea edx, [ebp - 0x74]
xor eax, eax
call fcn.00403310
mov eax, dword [ebp - 0x74]
lea edx, [ebp - 0x70]
call fcn.004098d0
lea eax, [ebp - 0x70]
mov edx, 0x46e028
call fcn.004057fc
mov eax, dword [ebp - 0x70]
mov ecx, 0x46e100
pop edx
call fcn.0044d720
jmp 0x46de88
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push 0
lea eax, [ebp - 0xc]
push eax
lea edx, [ebp - 0x7c]
xor eax, eax
call fcn.00403310
mov eax, dword [ebp - 0x7c]
lea edx, [ebp - 0x78]
call fcn.004098d0
lea eax, [ebp - 0x78]
mov edx, 0x46e028
call fcn.004057fc
mov eax, dword [ebp - 0x78]
mov ecx, 0x46e100
mov edx, 0x46e0bc
call fcn.0044d720
call fcn.0040534c
push 0
mov eax, dword [0x478cd0]
call fcn.004059c0
push eax
call sub.user32.dll_FindWindowA
mov esi, eax
test esi, esi
je 0x46df02
test bl, bl
jne 0x46df02
push 0
push 0
push 0x402
push esi
call sub.user32.dll_PostMessageA
call fcn.004032b0
test eax, eax
jle 0x46defd
lea edx, [ebp - 0x84]
mov eax, 1
call fcn.00403310
mov eax, dword [ebp - 0x84]
lea edx, [ebp - 0x80]
call fcn.00408ad4
mov eax, dword [ebp - 0x80]
mov edx, 0x46e1c0
call fcn.00405958
jne 0x46defd
push 0
push 0
push 0x465
push esi
call sub.user32.dll_PostMessageA
call fcn.0040534c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x46df34
lea eax, [ebp - 0x84]
mov edx, 0x1d
call fcn.00405538
lea eax, [ebp - 8]
mov edx, 2
call fcn.00405538
ret