Function at 0x424560
Capabilities:
Acquire debug privileges

Disassembly:
push 0xffffffffffffffff
push 0x42feaf
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
mov eax, dword [0x4b3774]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 8], esi
lea ecx, [esi + 0x20c]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_void_]
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x28], esp
push str.SeDebugPrivilege
mov dword [esp + 0x38], 0
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_unsigned_short_int_const__]
mov ecx, esi
call fcn.00423ef0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x28], esp
push str.SeAuditPrivilege
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_unsigned_short_int_const__]
mov ecx, esi
call fcn.00423ef0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x28], esp
push str.SeSecurityPrivilege
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_unsigned_short_int_const__]
mov ecx, esi
call fcn.00423ef0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x28], esp
push str.SeTakeOwnershipPrivilege
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_unsigned_short_int_const__]
mov ecx, esi
call fcn.00423ef0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x28], esp
push str.SeManageVolumePrivilege
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_unsigned_short_int_const__]
mov ecx, esi
call fcn.00423ef0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x28], esp
push str.SeRestorePrivilege
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_unsigned_short_int_const__]
mov ecx, esi
call fcn.00423ef0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x28], esp
push str.SeBackupPrivilege
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_unsigned_short_int_const__]
mov ecx, esi
call fcn.00423ef0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x28], esp
push str.SeLoadDriverPrivilege
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::constructor_unsigned_short_int_const__]
mov ecx, esi
call fcn.00423ef0
mov eax, esi
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x14
ret