Function at 0x465cd8
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x90
mov eax, dword [0x582e50]
mov bl, byte [ebp + 0x18]
mov edi, dword [ebp + 8]
lea esi, [ebp - 0x84]
mov ecx, esi
xor eax, ebp
mov dword [ebp - 0x10], eax
call fcn.00487604
mov ecx, esi
push edi
call fcn.0048765c
test bl, bl
je 0x465d18
lea ecx, [ebp - 0x84]
call fcn.004880da
xor eax, eax
mov esi, 0xa0
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x94], eax
mov eax, dword [ebp + 0xc]
cmp eax, 6
ja case.default.0x465d4f
jmp dword [eax*4 + 0x53a3d4]
lea esi, [ebp - 0x84]
mov ecx, esi
call fcn.00487c74
lea edi, [ebp - 0x54]
mov ecx, edi
push 0
call fcn.0048810e
mov ecx, esi
push edi
jmp 0x465dc4
lea esi, [ebp - 0x54]
mov ecx, esi
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
mov word [esi], 0
push 0x17
push str.SeChangeNotifyPrivilege
call fcn.004016dc
lea ecx, [ebp - 0x90]
push esi
call fcn.00465c80
mov ecx, esi
call fcn.00401874
lea edi, [ebp - 0x84]
mov ecx, edi
call fcn.00487c74
mov ecx, esi
push 0x12
call fcn.0048810e
mov ecx, edi
push esi
call fcn.00487e7c
jmp 0x466236
lea esi, [ebp - 0x54]
mov ecx, esi
push 0x1b
call fcn.0048810e
mov edi, dword [ebp - 0x98]
mov eax, dword [ebp - 0x94]
cmp eax, edi
je 0x465e98
mov eax, 0x44
push eax
push esi
push edi
call fcn.0050b3c0
add esp, 0xc
add edi, 0x44
mov dword [ebp - 0x98], edi
jmp 0x465ea5
lea esi, [ebp - 0x54]
mov ecx, esi
push 0x1b
call fcn.0048810e
mov edi, dword [ebp - 0x98]
mov eax, dword [ebp - 0x94]
cmp eax, edi
je 0x465ee3
mov eax, 0x44
push eax
push esi
push edi
call fcn.0050b3c0
add esp, 0xc
add edi, 0x44
mov dword [ebp - 0x98], edi
jmp 0x465ef0
lea esi, [ebp - 0x54]
mov ecx, esi
push 0x1b
call fcn.0048810e
mov edi, dword [ebp - 0x98]
mov eax, dword [ebp - 0x94]
cmp eax, edi
je 0x465f2e
mov eax, 0x44
push eax
push esi
push edi
call fcn.0050b3c0
add esp, 0xc
add edi, 0x44
mov dword [ebp - 0x98], edi
jmp 0x465f3b
lea ecx, [ebp - 0x84]
call fcn.0048802e
jmp 0x466260
lea ecx, [ebp - 0x9c]
push esi
push eax
call fcn.00466a4a
lea esi, [ebp - 0x54]
mov ecx, esi
push 1
call fcn.0048810e
mov edi, dword [ebp - 0x98]
mov eax, dword [ebp - 0x94]
cmp eax, edi
je 0x465f79
mov eax, 0x44
push eax
push esi
push edi
call fcn.0050b3c0
add esp, 0xc
add edi, 0x44
mov dword [ebp - 0x98], edi
jmp 0x465f86
lea ecx, [ebp - 0x9c]
push esi
push eax
call fcn.00466a4a
lea esi, [ebp - 0x54]
mov ecx, esi
push 1
call fcn.0048810e
mov edi, dword [ebp - 0x98]
mov eax, dword [ebp - 0x94]
cmp eax, edi
je 0x465fc4
mov eax, 0x44
push eax
push esi
push edi
call fcn.0050b3c0
add esp, 0xc
add edi, 0x44
mov dword [ebp - 0x98], edi
jmp 0x465fd1
lea ecx, [ebp - 0x9c]
push esi
push eax
call fcn.00466a4a
lea esi, [ebp - 0x54]
mov ecx, esi
push 1
call fcn.0048810e
mov edi, dword [ebp - 0x98]
mov eax, dword [ebp - 0x94]
cmp eax, edi
je 0x46600f
mov eax, 0x44
push eax
push esi
push edi
call fcn.0050b3c0
add esp, 0xc
add edi, 0x44
mov dword [ebp - 0x98], edi
jmp 0x46601c
lea ecx, [ebp - 0x9c]
push esi
push eax
call fcn.00466a4a
lea esi, [ebp - 0x54]
mov ecx, esi
push 0xb
call fcn.0048810e
mov edi, dword [ebp - 0x98]
mov eax, dword [ebp - 0x94]
cmp eax, edi
je 0x46605a
mov eax, 0x44
push eax
push esi
push edi
call fcn.0050b3c0
add esp, 0xc
add edi, 0x44
mov dword [ebp - 0x98], edi
jmp 0x466067
lea ecx, [ebp - 0x9c]
push esi
push eax
call fcn.00466a4a
lea esi, [ebp - 0x54]
mov ecx, esi
push 0xb
call fcn.0048810e
mov edi, dword [ebp - 0x98]
mov eax, dword [ebp - 0x94]
cmp eax, edi
je 0x4660da
mov eax, 0x44
push eax
push esi
push edi
call fcn.0050b3c0
add esp, 0xc
add edi, 0x44
mov dword [ebp - 0x98], edi
jmp 0x4660e7
lea ecx, [ebp - 0x9c]
push esi
push eax
call fcn.00466a4a
lea esi, [ebp - 0x54]
mov ecx, esi
push 0xb
call fcn.0048810e
mov edi, dword [ebp - 0x98]
mov eax, dword [ebp - 0x94]
cmp eax, edi
je 0x46611e
mov eax, 0x44
push eax
push esi
push edi
call fcn.0050b3c0
add esp, 0xc
add edi, 0x44
mov dword [ebp - 0x98], edi
jmp 0x46612b
lea ecx, [ebp - 0x9c]
push esi
push eax
call fcn.00466a4a
mov dword [ebp - 0x40], 7
mov dword [ebp - 0x44], 0
mov word [ebp - 0x54], 0
mov ecx, esi
push 0x17
push str.SeChangeNotifyPrivilege
call fcn.004016dc
lea ecx, [ebp - 0x90]
push esi
call fcn.00465c80
mov ecx, esi
call fcn.00401874
mov ecx, esi
push 0x1b
call fcn.0048810e
lea edi, [ebp - 0x84]
mov ecx, edi
push esi
call fcn.00487e7c
mov ecx, esi
push 1
call fcn.0048810e
mov ecx, edi
push esi
call fcn.00487e7c
mov ecx, esi
push 0x12
call fcn.0048810e
mov ecx, edi
push esi
call fcn.00487e7c
jmp 0x4661eb
lea ecx, [ebp - 0x9c]
push esi
push eax
call fcn.00466a4a
lea esi, [ebp - 0x54]
mov ecx, esi
push 0x11
call fcn.0048810e
mov edi, dword [ebp - 0x98]
mov eax, dword [ebp - 0x94]
cmp eax, edi
je 0x466169
mov eax, 0x44
push eax
push esi
push edi
call fcn.0050b3c0
add esp, 0xc
add edi, 0x44
mov dword [ebp - 0x98], edi
jmp 0x466176
lea ecx, [ebp - 0x9c]
push esi
push eax
call fcn.00466a4a
lea esi, [ebp - 0x54]
mov ecx, esi
push 0x11
call fcn.0048810e
mov edi, dword [ebp - 0x98]
mov eax, dword [ebp - 0x94]
cmp eax, edi
je 0x4661f4
mov eax, 0x44
push eax
push esi
push edi
call fcn.0050b3c0
add esp, 0xc
add edi, 0x44
mov dword [ebp - 0x98], edi
jmp 0x466201
lea ecx, [ebp - 0x9c]
push esi
push eax
call fcn.00466a4a
mov dword [ebp - 0x40], 7
mov dword [ebp - 0x44], 0
mov word [ebp - 0x54], 0
mov ecx, esi
push 0x17
push str.SeChangeNotifyPrivilege
call fcn.004016dc
lea ecx, [ebp - 0x90]
push esi
call fcn.00465c80
mov ecx, esi
call fcn.00401874
mov ecx, esi
push 0x1b
call fcn.0048810e
lea edi, [ebp - 0x84]
mov ecx, edi
push esi
call fcn.00487e7c
mov ecx, esi
push 1
call fcn.0048810e
mov ecx, edi
push esi
call fcn.00487e7c
mov ecx, esi
push 0x12
call fcn.0048810e
mov ecx, edi
push esi
call fcn.00487e7c
mov ecx, edi
call fcn.00487f80
mov ecx, edi
call fcn.00487ec4
jmp 0x466236
lea ecx, [ebp - 0x9c]
push esi
push eax
call fcn.00466a4a
mov dword [ebp - 0x40], 7
mov dword [ebp - 0x44], 0
mov word [ebp - 0x54], 0
mov ecx, esi
push 0x17
push str.SeChangeNotifyPrivilege
call fcn.004016dc
lea ecx, [ebp - 0x90]
push esi
call fcn.00465c80
mov ecx, esi
call fcn.00401874
lea eax, [ebp - 0x9c]
lea ecx, [ebp - 0x84]
push eax
call fcn.00487a9e
mov esi, eax
test eax, eax
jne case.default.0x465d4f
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x84]
push eax
call fcn.00487d22
mov esi, eax
test eax, eax
jne case.default.0x465d4f
mov edi, dword [ebp + 0x1c]
mov esi, dword [ebp + 0x14]
lea ecx, [ebp - 0x84]
push dword [ebp + 0x10]
call fcn.004880ce
test esi, esi
je 0x466296
cmp esi, 1
mov esi, 0xa0
jne case.default.0x465d4f
lea ecx, [ebp - 0x84]
push edi
call fcn.004876ec
jmp 0x4662a2
lea ecx, [ebp - 0x84]
push edi
call fcn.004879d6
mov esi, eax
lea ecx, [ebp - 0x9c]
call fcn.004669dc
lea ecx, [ebp - 0x90]
call fcn.00401a56
lea ecx, [ebp - 0x84]
call fcn.00487634
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004ed5a1
mov eax, esi
add esp, 0x90
pop esi
pop edi
pop ebx
pop ebp
ret