Function at 0x140002470
Capabilities:
Acquire debug privileges

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov edx, 0xfa0
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x1400024a1
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, str.SeUnsolicitedInputPrivilege
call fcn.140001f30
jmp 0x1400024b6
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, str.SeUnsolicitedInputPrivilege
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfa1
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x1400024e1
mov rcx, qword [0x14001e000]
mov edx, 2
mov r8d, 1
call fcn.140001fe0
jmp 0x1400024f5
mov rcx, qword [0x14001e000]
xor edx, edx
mov r8d, 1
call fcn.140001fe0
mov rcx, rbx
mov edx, 0xfa2
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x140002521
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, [0x1400159c8]
call fcn.140001f30
jmp 0x140002536
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, [0x1400159c8]
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfa3
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x140002562
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, [0x14001598c]
call fcn.140001f30
jmp 0x140002577
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, [0x14001598c]
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfa4
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x1400025a3
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, str.SeLockMemoryPrivilege
call fcn.140001f30
jmp 0x1400025b8
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, str.SeLockMemoryPrivilege
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfa5
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x1400025e4
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, [0x14001592e]
call fcn.140001f30
jmp 0x1400025f9
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, [0x14001592e]
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfa6
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x140002625
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, str.SeMachineAccountPrivilege
call fcn.140001f30
jmp 0x14000263a
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, str.SeMachineAccountPrivilege
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfa7
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x140002666
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, [0x1400158dc]
call fcn.140001f30
jmp 0x14000267b
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, [0x1400158dc]
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfa8
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x1400026a7
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, str.SeSecurityPrivilege
call fcn.140001f30
jmp 0x1400026bc
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, str.SeSecurityPrivilege
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfa9
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x1400026e8
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, str.SeTakeOwnershipPrivilege
call fcn.140001f30
jmp 0x1400026fd
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, str.SeTakeOwnershipPrivilege
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfaa
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x140002729
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, str.SeLoadDriverPrivilege
call fcn.140001f30
jmp 0x14000273e
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, str.SeLoadDriverPrivilege
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfab
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x14000276a
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, str.SeSystemProfilePrivilege
call fcn.140001f30
jmp 0x14000277f
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, str.SeSystemProfilePrivilege
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfac
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x1400027ab
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, str.SeSystemtimePrivilege
call fcn.140001f30
jmp 0x1400027c0
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, str.SeSystemtimePrivilege
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfad
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x1400027ec
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, str.SeProfileSingleProcessPrivilege
call fcn.140001f30
jmp 0x140002801
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, str.SeProfileSingleProcessPrivilege
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfae
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x14000282d
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, str.SeIncreaseBasePriorityPrivilege
call fcn.140001f30
jmp 0x140002842
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, str.SeIncreaseBasePriorityPrivilege
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfaf
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x14000286e
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, str.SeCreatePagefilePrivilege
call fcn.140001f30
jmp 0x140002883
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, str.SeCreatePagefilePrivilege
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfb0
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x1400028af
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, str.SeCreatePermanentPrivilege
call fcn.140001f30
jmp 0x1400028c4
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, str.SeCreatePermanentPrivilege
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfb1
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x1400028f0
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, str.SeBackupPrivilege
call fcn.140001f30
jmp 0x140002905
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, str.SeBackupPrivilege
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfb2
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x140002931
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, str.SeRestorePrivilege
call fcn.140001f30
jmp 0x140002946
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, str.SeRestorePrivilege
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfb3
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x140002972
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, str.SeShutdownPrivilege
call fcn.140001f30
jmp 0x140002987
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, str.SeShutdownPrivilege
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfb4
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x1400029b3
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, [0x14001567a]
call fcn.140001f30
jmp 0x1400029c8
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, [0x14001567a]
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfb5
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x1400029f4
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, str.SeAuditPrivilege
call fcn.140001f30
jmp 0x140002a09
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, str.SeAuditPrivilege
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfb6
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x140002a35
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, str.SeSystemEnvironmentPrivilege
call fcn.140001f30
jmp 0x140002a4a
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, str.SeSystemEnvironmentPrivilege
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfb7
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x140002a76
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, str.SeChangeNotifyPrivilege
call fcn.140001f30
jmp 0x140002a8b
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, str.SeChangeNotifyPrivilege
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfb8
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x140002ab7
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, str.SeRemoteShutdownPrivilege
call fcn.140001f30
jmp 0x140002acc
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, str.SeRemoteShutdownPrivilege
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfb9
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x140002af8
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, str.SeUndockPrivilege
call fcn.140001f30
jmp 0x140002b0d
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, str.SeUndockPrivilege
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfba
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x140002b39
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, str.SeSyncAgentPrivilege
call fcn.140001f30
jmp 0x140002b4e
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, str.SeSyncAgentPrivilege
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfbb
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x140002b7a
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, str.SeEnableDelegationPrivilege
call fcn.140001f30
jmp 0x140002b8f
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, str.SeEnableDelegationPrivilege
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfbc
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x140002bbb
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, str.SeManageVolumePrivilege
call fcn.140001f30
jmp 0x140002bd0
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, str.SeManageVolumePrivilege
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfbd
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x140002bfc
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, str.SeImpersonatePrivilege
call fcn.140001f30
jmp 0x140002c11
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, str.SeImpersonatePrivilege
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfbe
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x140002c3d
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, str.SeCreateGlobalPrivilege
call fcn.140001f30
jmp 0x140002c52
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, str.SeCreateGlobalPrivilege
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfbf
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x140002c7e
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, str.SeTrustedCredManAccessPrivilege
call fcn.140001f30
jmp 0x140002c93
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, str.SeTrustedCredManAccessPrivilege
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfc0
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x140002cbf
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, str.SeRelabelPrivilege
call fcn.140001f30
jmp 0x140002cd4
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, str.SeRelabelPrivilege
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfc1
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x140002d00
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, str.SeIncreaseWorkingSetPrivilege
call fcn.140001f30
jmp 0x140002d15
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, str.SeIncreaseWorkingSetPrivilege
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfc2
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x140002d41
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, str.SeTimeZonePrivilege
call fcn.140001f30
jmp 0x140002d56
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, str.SeTimeZonePrivilege
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfc3
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x140002d82
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, str.SeCreateSymbolicLinkPrivilege
call fcn.140001f30
jmp 0x140002d97
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, str.SeCreateSymbolicLinkPrivilege
call fcn.140001f30
mov rcx, rbx
mov edx, 0xfc4
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je 0x140002dc3
mov rcx, qword [0x14001e000]
mov edx, 2
lea r8, str.SeDelegateSessionUserImpersonatePrivilege
call fcn.140001f30
jmp 0x140002dd8
mov rcx, qword [0x14001e000]
xor edx, edx
lea r8, str.SeDelegateSessionUserImpersonatePrivilege
call fcn.140001f30
add rsp, 0x20
pop rbx
ret