Function at 0x5831fd
Capabilities:
Acquire debug privileges

Disassembly:
push 0xc8
mov eax, 0x6d57f5
call fcn.0063c0bf
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0xa4], edi
xor ebx, ebx
mov dword [edi], ebx
mov dword [ebp - 0x80], ebx
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x80]
push eax
push 0x20400
push dword [ebp + 8]
call fcn.00583192
mov esi, eax
test esi, esi
jns 0x583252
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x80], ebx
je 0x58324b
push dword [ebp - 0x80]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x80], ebx
mov eax, esi
jmp 0x5836f8
lea eax, [ebp - 0x94]
push eax
push dword [ebp + 0xc]
mov esi, dword [ebp - 0x80]
push esi
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x58328b
mov eax, dword [ebp - 0x94]
mov dword [edi], eax
or dword [ebp - 4], 0xffffffff
test esi, esi
je 0x583284
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x80], ebx
xor eax, eax
jmp 0x5836f8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp edi, 5
je 0x5832be
test edi, edi
jle 0x5832a5
movzx edi, di
or edi, 0x80070000
or dword [ebp - 4], 0xffffffff
test esi, esi
je 0x5832b7
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x80], ebx
mov eax, edi
jmp 0x5836f8
push 1
push 0x437f98
call fcn.00583a3e
push 1
push 0x583700
call fcn.00583a3e
mov dword [ebp - 0xa8], eax
push 1
push 0x583734
call fcn.00583a3e
mov dword [ebp - 0xac], eax
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0xa0], ebx
mov dword [ebp - 0x9c], ebx
mov dword [ebp - 0x88], ebx
mov byte [ebp - 4], 1
mov dword [ebp - 0x84], ebx
mov byte [ebp - 4], 2
mov dword [ebp - 0x78], ebx
mov byte [ebp - 4], 3
lea eax, [ebp - 0x78]
push eax
push 0x20000
push esi
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
lea eax, [ebp - 0x98]
push eax
push ebx
je 0x583394
lea eax, [ebp - 0x8c]
push eax
push ebx
lea eax, [ebp - 0x90]
push eax
push 5
push 6
push dword [ebp - 0x78]
call dword [sym.imp.ADVAPI32.dll_GetSecurityInfo]
test eax, eax
je 0x5833a4
push eax
call fcn.00435aec
mov edi, eax
mov dword [ebp - 0x7c], edi
test edi, edi
jns 0x5833a4
mov byte [ebp - 4], 2
cmp dword [ebp - 0x78], 0
je 0x583663
push dword [ebp - 0x78]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x7c], edi
jmp 0x583663
push ebx
push ebx
lea eax, [ebp - 0x90]
push eax
push 1
push 6
push esi
jmp 0x583359
mov byte [ebp - 4], 2
cmp dword [ebp - 0x78], 0
je 0x5833ba
push dword [ebp - 0x78]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x78], ebx
lea eax, [ebp - 0x9c]
push eax
call fcn.0060ff78
mov dword [ebp - 0x7c], eax
test eax, eax
js 0x583663
lea eax, [ebp - 0x88]
push eax
push 0x80000
push esi
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
push eax
call fcn.004050cb
mov dword [ebp - 0x7c], eax
test eax, eax
js 0x583663
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax]
mov dword [ebp - 0x78], eax
push ebx
push ebx
push ebx
push eax
push 1
push 6
push dword [ebp - 0x88]
call dword [sym.imp.ADVAPI32.dll_SetSecurityInfo]
test eax, eax
je 0x583429
push eax
call fcn.00435aec
mov dword [ebp - 0x7c], eax
test eax, eax
js 0x583663
lea eax, [ebp - 0x84]
push eax
push 0xe0000
push esi
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
push eax
call fcn.004050cb
mov edi, eax
mov dword [ebp - 0x7c], edi
test edi, edi
js 0x58364a
cmp dword [ebp - 0x8c], 0
jne 0x583490
lea eax, [ebp - 0xa0]
push eax
push ebx
lea eax, [ebp - 0x8c]
push eax
push ebx
push ebx
push 4
push 6
push dword [ebp - 0x84]
call dword [sym.imp.ADVAPI32.dll_GetSecurityInfo]
test eax, eax
je 0x583490
push eax
call fcn.00435aec
mov edi, eax
mov dword [ebp - 0x7c], edi
test edi, edi
js 0x58364a
lea ecx, [ebp - 0xd4]
call fcn.0048e91d
mov byte [ebp - 4], 4
mov byte [ebp - 4], 5
push ebx
push dword [ebp - 0x78]
lea ecx, [ebp - 0x74]
call fcn.0048ec0a
mov byte [ebp - 4], 6
push ebx
push dword [ebp + 0xc]
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0xd4]
call fcn.0048e1b5
test al, al
jne 0x583538
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x74]
call fcn.0048e967
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xd4]
call fcn.0048e278
mov byte [ebp - 4], 1
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x84], 0
je 0x583506
push dword [ebp - 0x84]
call edi
mov dword [ebp - 0x84], ebx
mov byte [ebp - 4], bl
cmp dword [ebp - 0x88], 0
je 0x583520
push dword [ebp - 0x88]
call edi
mov dword [ebp - 0x88], ebx
or dword [ebp - 4], 0xffffffff
test esi, esi
je 0x58352e
push esi
call edi
mov dword [ebp - 0x80], ebx
mov eax, 0x80070539
jmp 0x5836f8
lea ecx, [ebp - 0xd4]
call fcn.0048d992
mov edi, eax
mov dword [ebp - 0xb0], edi
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x74]
call fcn.0048e967
mov dword [ebp - 4], 4
push ebx
push edi
push ebx
push ebx
push 4
push 6
push dword [ebp - 0x84]
call dword [sym.imp.ADVAPI32.dll_SetSecurityInfo]
test eax, eax
je 0x583599
push eax
call fcn.00435aec
mov edi, eax
mov dword [ebp - 0x7c], edi
test edi, edi
jns 0x583599
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xd4]
call fcn.0048e278
jmp 0x58364a
lea eax, [ebp - 0x94]
push eax
push dword [ebp + 0xc]
push esi
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
push eax
call fcn.004050cb
mov edi, eax
mov dword [ebp - 0x7c], edi
test edi, edi
js 0x5835ca
mov dword [ebp - 0x7c], ebx
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0xa4]
mov dword [ecx], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xd4]
call fcn.0048e278
push ebx
push dword [ebp - 0x8c]
push ebx
push dword [ebp - 0x90]
push 5
push 6
push dword [ebp - 0x84]
jmp 0x58365d
push ebx
push ebx
push ebx
push dword [ebp - 0x90]
push 1
push 6
push dword [ebp - 0x88]
call dword [sym.imp.ADVAPI32.dll_SetSecurityInfo]
push dword [ebp - 0x98]
mov edi, dword [sym.imp.KERNEL32.dll_LocalFree]
call edi
push dword [ebp - 0xa0]
call edi
push dword [ebp - 0x9c]
call fcn.00439b57
cmp dword [ebp - 0xa8], 0
je 0x583698
push ebx
push 0x583700
call fcn.00583a3e
cmp dword [ebp - 0xac], 0
je 0x5836ac
push ebx
push 0x583734
call fcn.00583a3e
mov byte [ebp - 4], 1
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x84], 0
je 0x5836cd
push dword [ebp - 0x84]
call edi
mov dword [ebp - 0x84], ebx
mov byte [ebp - 4], bl
cmp dword [ebp - 0x88], 0
je 0x5836e7
push dword [ebp - 0x88]
call edi
mov dword [ebp - 0x88], ebx
or dword [ebp - 4], 0xffffffff
test esi, esi
je 0x5836f5
push esi
call edi
mov dword [ebp - 0x80], ebx
mov eax, dword [ebp - 0x7c]
call fcn.0063c0af
ret 0xc