Function at 0x140003610
Capabilities:
Acquire debug privileges

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
lea rbp, [rsp - 0x230]
sub rsp, 0x330
mov rax, qword [0x14000a040]
xor rax, rsp
mov qword [rbp + 0x220], rax
xor edi, edi
mov word [rbp - 0x18], 0x500
lea rax, [rbp - 0x10]
mov dword [rbp - 0x20], edi
mov qword [rsp + 0x50], rax
lea rcx, [rbp - 0x1c]
mov dword [rsp + 0x48], edi
mov r9d, 0x220
mov dword [rsp + 0x40], edi
mov r8d, 0x20
mov dword [rsp + 0x38], edi
mov dl, 2
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
mov qword [rbp - 0x10], rdi
mov dword [rbp - 0x1c], edi
push rsi
call fcn.14001ba3b
test eax, eax
je 0x140003914
mov rdx, qword [rbp - 0x10]
lea r8, [rbp - 0x20]
xor ecx, ecx
call fcn.14001eb10
cdq
test eax, eax
jne 0x1400036a5
mov dword [rbp - 0x20], edi
mov rcx, qword [rbp - 0x10]
push rbx
call fcn.140013081
cmp dword [rbp - 0x20], edi
je 0x140003914
mov edx, 1
lea rcx, [0x1400028e0]
push rcx
call fcn.14001cc8a
test eax, eax
jne 0x1400036fb
mov rcx, qword [0x140007200]
lea rdx, str.Failed_to_set_control_handler.
call fcn.140003e70
mov rcx, rax
lea rdx, [0x140004050]
call fcn.14001b103
add edi, dword [rax + 1]
jmp 0x1400038bb
call fcn.140019962
pop rbp
lea r8, [rsp + 0x60]
mov edx, 0x28
mov rcx, rax
push rsi
call fcn.14001d5c6
test eax, eax
jne 0x140003740
call fcn.14001ee7a
mov esi, 0xdb0d8b48
cmp al, byte [rax]
add byte [rax - 0x73], cl
adc eax, 0x4614
mov ebx, eax
call fcn.140003e70
mov rcx, rax
mov edx, ebx
call fcn.140014dfe
push 0xffffffffffffffeb
movabs eax, dword [0x458d4c60245c8b48]
invalid
mov rbx, qword [rsp + 0x60]
lea r8, [rbp - 0x10]
lea rdx, str.SeDebugPrivilege
xor ecx, ecx
push rbx
call fcn.14001700a
test eax, eax
je 0x1400038df
mov rax, qword [rbp - 0x10]
lea r8, [rbp - 8]
mov qword [rsp + 0x28], rdi
mov r9d, 0x10
xor edx, edx
mov qword [rbp - 4], rax
mov rcx, rbx
mov dword [rbp - 8], 1
mov dword [rbp + 4], 2
mov qword [rsp + 0x20], rdi
push rax
call fcn.140013422
test eax, eax
je 0x1400038df
call fcn.140018c83
sar byte [0x140003cbd], 0xf
test byte [rcx], dh
add dword [rax], eax
add byte [rax - 0x75], cl
and al, 0x60
call fcn.140012225
nop qword [rax]
mov rcx, qword [0x140007220]
lea rdx, str._n_StealthVGC_Reborn__n
call fcn.140003e70
mov rcx, qword [0x140007220]
lea rdx, str._1__Vanguard_Bypass__1pc__n
call fcn.140003e70
mov rcx, qword [0x140007220]
lea rdx, str._2__Vanguard_Bypass__2pc__n
call fcn.140003e70
mov rcx, qword [0x140007220]
lea rdx, str.Enter_your_choice:
call fcn.140003e70
mov rcx, qword [0x140007210]
lea rdx, [rbp - 0x20]
call fcn.140022375
mov cs, word [rbx - 0x167c1fb3]
add dword [rsi + rsi - 0x7d], esi
jmp 0xc32aac2c
xor eax, eax
mov rcx, qword [rbp + 0x220]
xor rcx, rsp
call fcn.1400050f0
lea r11, [rsp + 0x330]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret
mov rcx, qword [0x140007200]
lea rdx, str.Failed_to_set_privilege.
call fcn.140003e70
mov rcx, rax
lea rdx, [0x140004050]
push rdi
call fcn.140019471
mov rcx, qword [rsp + 0x60]
call fcn.140012379
invalid
mov rcx, qword [0x140007220]
lea rdx, str.This_program_requires_administrative_privileges._Restarting_as_administrator...
call fcn.140003e70
mov rcx, rax
lea rdx, [0x140004050]
push rax
call fcn.1400157a2
mov r8d, 0x104
lea rdx, [rbp + 0x10]
xor ecx, ecx
push rsi
call fcn.140016dd4
test eax, eax
je 0x1400038b9
xorps xmm0, xmm0
mov dword [rsp + 0x70], 0x70
xor eax, eax
lea rcx, [rsp + 0x70]
mov qword [rbp - 0x2c], rax
mov dword [rbp - 0x24], eax
lea rax, str.runas
movups xmmword [rsp + 0x74], xmm0
mov qword [rsp + 0x78], rdi
movups xmmword [rbp - 0x7c], xmm0
mov qword [rbp - 0x80], rax
lea rax, [rbp + 0x10]
movups xmmword [rbp - 0x6c], xmm0
mov qword [rbp - 0x78], rax
movups xmmword [rbp - 0x5c], xmm0
mov dword [rbp - 0x60], 1
movups xmmword [rbp - 0x4c], xmm0
movups xmmword [rbp - 0x3c], xmm0
push rax
call fcn.14001d779
test eax, eax
jne 0x1400038b9
call fcn.14001f351
xchg dword [rax - 0x75], ecx
or eax, 0x3843
mov ebx, eax
cmp eax, 0x4c7
jne 0x1400039d4
lea rdx, str.User_declined_to_elevate_privileges.
call fcn.140003e70
jmp 0x1400039eb
lea rdx, str.Error_elevating_privileges:
call fcn.140003e70
mov rcx, rax
mov edx, ebx
push rcx
call fcn.140017c19
lea rdx, [0x140004050]
mov rcx, rax
push rbp
call fcn.1400176d7
mov ecx, 1
push rax
call fcn.140020004
int3