Function at 0x404d40
Capabilities:
Acquire debug privileges

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4707ce
mov eax, dword fs:[0]
push eax
sub esp, 0xcc
mov eax, dword [0x491d58]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, 7
xor ebx, ebx
xor eax, eax
xor ecx, ecx
mov edi, 1
mov dword [ebp - 0x78], vtable.LogItem.0
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x64], ebx
mov word [ebp - 0x74], ax
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x48], ebx
mov word [ebp - 0x58], cx
mov dword [ebp - 0x3c], edi
push str.InitializeSecurity...
mov dword [ebp - 4], ebx
push str._INF___N_A_
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x38], 2
call fcn.00403090
mov ecx, eax
call fcn.00403090
lea ecx, [ebp - 0x78]
mov dword [ebp - 4], 0xffffffff
call fcn.00402d10
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 4], edi
push 0x1b
xor edx, edx
push str.SeUnsolicitedInputPrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], dx
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 2
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x404e26
mov eax, dword [ebp - 0x2c]
push eax
call fcn.0044d9f1
add esp, 4
xor ecx, ecx
push 0x11
mov word [ebp - 0x2c], cx
push str.SeUndockPrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 3
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x404e69
mov edx, dword [ebp - 0x2c]
push edx
call fcn.0044d9f1
add esp, 4
push 0x1f
xor eax, eax
push str.SeTrustedCredManAccessPrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 4
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x404eac
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.0044d9f1
add esp, 4
push 0x13
xor edx, edx
push str.SeTimeZonePrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], dx
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 5
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x404eef
mov eax, dword [ebp - 0x2c]
push eax
call fcn.0044d9f1
add esp, 4
xor ecx, ecx
push 0xe
mov word [ebp - 0x2c], cx
push str.SeTcbPrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 6
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x404f32
mov edx, dword [ebp - 0x2c]
push edx
call fcn.0044d9f1
add esp, 4
push 0x18
xor eax, eax
push str.SeTakeOwnershipPrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 7
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x404f75
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.0044d9f1
add esp, 4
push 0x15
xor edx, edx
push str.SeSystemtimePrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], dx
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 8
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x404fb8
mov eax, dword [ebp - 0x2c]
push eax
call fcn.0044d9f1
add esp, 4
xor ecx, ecx
push 0x18
mov word [ebp - 0x2c], cx
push str.SeSystemProfilePrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 9
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x404ffb
mov edx, dword [ebp - 0x2c]
push edx
call fcn.0044d9f1
add esp, 4
push 0x1c
xor eax, eax
push str.SeSystemEnvironmentPrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 0xa
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x40503e
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.0044d9f1
add esp, 4
push 0x14
xor edx, edx
push str.SeSyncAgentPrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], dx
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 0xb
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x405081
mov eax, dword [ebp - 0x2c]
push eax
call fcn.0044d9f1
add esp, 4
xor ecx, ecx
push 0x13
mov word [ebp - 0x2c], cx
push str.SeShutdownPrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 0xc
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x4050c4
mov edx, dword [ebp - 0x2c]
push edx
call fcn.0044d9f1
add esp, 4
push 0x13
xor eax, eax
push str.SeSecurityPrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 0xd
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x405107
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.0044d9f1
add esp, 4
push 0x12
xor edx, edx
push str.SeRestorePrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], dx
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 0xe
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x40514a
mov eax, dword [ebp - 0x2c]
push eax
call fcn.0044d9f1
add esp, 4
xor ecx, ecx
push 0x19
mov word [ebp - 0x2c], cx
push str.SeRemoteShutdownPrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 0xf
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x40518d
mov edx, dword [ebp - 0x2c]
push edx
call fcn.0044d9f1
add esp, 4
push 0x12
xor eax, eax
push str.SeRelabelPrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 0x10
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x4051d0
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.0044d9f1
add esp, 4
push 0x1f
xor edx, edx
push str.SeProfileSingleProcessPrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], dx
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 0x11
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x405213
mov eax, dword [ebp - 0x2c]
push eax
call fcn.0044d9f1
add esp, 4
xor ecx, ecx
push 0x17
mov word [ebp - 0x2c], cx
push str.SeManageVolumePrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 0x12
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x405256
mov edx, dword [ebp - 0x2c]
push edx
call fcn.0044d9f1
add esp, 4
push 0x19
xor eax, eax
push str.SeMachineAccountPrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 0x13
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x405299
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.0044d9f1
add esp, 4
push 0x15
xor edx, edx
push str.SeLockMemoryPrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], dx
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 0x14
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x4052dc
mov eax, dword [ebp - 0x2c]
push eax
call fcn.0044d9f1
add esp, 4
xor ecx, ecx
push 0x15
mov word [ebp - 0x2c], cx
push str.SeLoadDriverPrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 0x15
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x40531f
mov edx, dword [ebp - 0x2c]
push edx
call fcn.0044d9f1
add esp, 4
push 0x1d
xor eax, eax
push str.SeIncreaseWorkingSetPrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 0x16
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x405362
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.0044d9f1
add esp, 4
push 0x18
xor edx, edx
push str.SeIncreaseQuotaPrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], dx
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 0x17
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x4053a5
mov eax, dword [ebp - 0x2c]
push eax
call fcn.0044d9f1
add esp, 4
xor ecx, ecx
push 0x1f
mov word [ebp - 0x2c], cx
push str.SeIncreaseBasePriorityPrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 0x18
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x4053e8
mov edx, dword [ebp - 0x2c]
push edx
call fcn.0044d9f1
add esp, 4
push 0x16
xor eax, eax
push str.SeImpersonatePrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 0x19
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x40542b
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.0044d9f1
add esp, 4
push 0x1b
xor edx, edx
push str.SeEnableDelegationPrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], dx
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 0x1a
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x40546e
mov eax, dword [ebp - 0x2c]
push eax
call fcn.0044d9f1
add esp, 4
xor ecx, ecx
push 0x10
mov word [ebp - 0x2c], cx
push str.SeDebugPrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 0x1b
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x4054b1
mov edx, dword [ebp - 0x2c]
push edx
call fcn.0044d9f1
add esp, 4
push 0x16
xor eax, eax
push str.SeCreateTokenPrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 0x1c
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x4054f4
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.0044d9f1
add esp, 4
push 0x1d
xor edx, edx
push str.SeCreateSymbolicLinkPrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], dx
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 0x1d
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x405537
mov eax, dword [ebp - 0x2c]
push eax
call fcn.0044d9f1
add esp, 4
xor ecx, ecx
push 0x1a
mov word [ebp - 0x2c], cx
push str.SeCreatePermanentPrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 0x1e
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x40557a
mov edx, dword [ebp - 0x2c]
push edx
call fcn.0044d9f1
add esp, 4
push 0x19
xor eax, eax
push str.SeCreatePagefilePrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 0x1f
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x4055bd
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.0044d9f1
add esp, 4
push 0x17
xor edx, edx
push str.SeCreateGlobalPrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], dx
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 0x20
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x405600
mov eax, dword [ebp - 0x2c]
push eax
call fcn.0044d9f1
add esp, 4
xor ecx, ecx
push 0x17
mov word [ebp - 0x2c], cx
push str.SeChangeNotifyPrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 0x21
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x405643
mov edx, dword [ebp - 0x2c]
push edx
call fcn.0044d9f1
add esp, 4
push 0x11
xor eax, eax
push str.SeBackupPrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 0x22
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x405686
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.0044d9f1
add esp, 4
push 0x10
xor edx, edx
push str.SeAuditPrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], dx
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 0x23
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x4056c9
mov eax, dword [ebp - 0x2c]
push eax
call fcn.0044d9f1
add esp, 4
xor ecx, ecx
push 0x1d
mov word [ebp - 0x2c], cx
push str.SeAssignPrimaryTokenPrivilege
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
call fcn.004098e0
lea ecx, [ebp - 0x2c]
lea edi, [ebp - 0xd0]
mov byte [ebp - 4], 0x24
call fcn.00408a70
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 8
jb 0x40570c
mov edx, dword [ebp - 0x2c]
push edx
call fcn.0044d9f1
add esp, 4
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0xd4], esp
push eax
lea ecx, [ebp - 0xd0]
call fcn.00408960
call fcn.00404280
add esp, 0x10
xor ecx, ecx
cmp al, bl
jne 0x40577e
xor edx, edx
mov dword [ebp - 0x78], vtable.LogItem.0
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x64], ebx
mov word [ebp - 0x74], cx
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x48], ebx
mov word [ebp - 0x58], dx
mov dword [ebp - 0x3c], 1
push str.Dropping_Privileges:_Failure
mov byte [ebp - 4], 0x25
push str._ERR___N_A_
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x38], 3
call fcn.00403090
mov ecx, eax
call fcn.00403090
lea ecx, [ebp - 0x78]
jmp 0x4057e7
xor eax, eax
mov dword [ebp - 0xc0], vtable.LogItem.0
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0xac], ebx
mov word [ebp - 0xbc], ax
mov dword [ebp - 0x8c], esi
mov dword [ebp - 0x90], ebx
mov word [ebp - 0xa0], cx
mov dword [ebp - 0x84], 1
push str.Dropping_Privileges:_Success
mov byte [ebp - 4], 0x26
push str._INF___N_A_
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x80], 2
call fcn.00403090
mov ecx, eax
call fcn.00403090
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 1
call fcn.00402d10
mov esi, dword [ebp - 0xd0]
cmp esi, ebx
je 0x405810
mov edi, dword [ebp - 0xcc]
mov eax, esi
call fcn.0040b480
push esi
call fcn.0044d9f1
add esp, 4
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0044ce4c
mov esp, ebp
pop ebp
ret