Function at 0x441fce
Capabilities:
Acquire debug privileges
Create thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x20
mov eax, dword [0x606c40]
xor eax, esp
mov dword [esp + 0x1c], eax
push esi
push edi
lea eax, [esp + 0xc]
push eax
xor esi, esi
push 0x28
mov dword [esp + 0x14], esi
call dword [0x5b1418]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
mov edi, dword [0x5b13a0]
test eax, eax
je 0x442042
lea eax, [esp + 0x18]
push eax
push str.SeDebugPrivilege
push esi
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
push esi
push esi
push esi
lea eax, [esp + 0x20]
push eax
push esi
push dword [esp + 0x20]
mov dword [esp + 0x2c], 1
mov dword [esp + 0x38], 2
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
push dword [esp + 0xc]
call edi
push esi
push esi
push 1
push esi
call dword [0x5b1374]
mov dword [0x624454], eax
cmp eax, esi
je 0x44207b
lea eax, [esp + 0x10]
push eax
push esi
push 0x624450
push 0x4031dd
push esi
push esi
mov dword [esp + 0x28], esi
call fcn.0057e701
add esp, 0x18
cmp eax, esi
je 0x44207b
push eax
call edi
mov ecx, ebx
call fcn.0044192c
call fcn.004d9f5c
cmp dword [0x69c4a4], esi
je 0x4420ab
lea ecx, [eax + 0xc]
push ecx
push esi
push eax
push 0x4d9f98
push esi
push esi
call fcn.0057e701
add esp, 0x18
cmp eax, esi
je 0x4420ab
push eax
call edi
call fcn.004bcaa5
cmp dword [0x69c4f8], esi
je 0x4420f4
cmp dword [0x622ccc], esi
jne 0x4420d8
cmp dword [0x622cd0], esi
jne 0x4420d8
cmp dword [0x622cd4], esi
jne 0x4420d8
cmp dword [0x622cd8], esi
je 0x4420f4
lea ecx, [eax + 0x64]
push ecx
push esi
push eax
push 0x4bcb3f
push esi
push esi
call fcn.0057e701
add esp, 0x18
cmp eax, esi
je 0x4420f4
push eax
call edi
call fcn.0043e97a
cmp dword [eax + 0x2b4], esi
jne 0x442120
lea ecx, [eax + 0x2b8]
push ecx
push esi
push eax
push 0x44004e
push esi
push esi
call fcn.0057e701
add esp, 0x18
cmp eax, esi
je 0x442120
push eax
call edi
call fcn.004bf620
lea ecx, [eax + 0xc]
push ecx
push esi
push eax
push 0x4bf680
push esi
push esi
call fcn.0057e701
add esp, 0x18
cmp eax, esi
je 0x442141
push eax
call edi
call fcn.0045e016
lea ecx, [eax + 8]
push ecx
push esi
push eax
push 0x45e052
push esi
push esi
call fcn.0057e701
add esp, 0x18
cmp eax, esi
je 0x442162
push eax
call edi
call fcn.004def36
lea ecx, [eax + 0xc]
push ecx
push esi
push eax
push 0x4defc9
push esi
push esi
call fcn.0057e701
add esp, 0x18
cmp eax, esi
je 0x442183
push eax
call edi
call fcn.004fbe6b
cmp dword [eax + 0x60], esi
jne 0x4421a6
push esi
push esi
push eax
push 0x4fdd9c
push esi
push esi
call fcn.0057e701
add esp, 0x18
cmp eax, esi
je 0x4421a6
push eax
call edi
cmp dword [0x6280b4], esi
jne 0x4421c2
mov dword [0x6280b4], 1
call fcn.0046082a
call fcn.0046085f
call fcn.00417033
call fcn.00441d71
call fcn.00441eed
call fcn.004419f9
cmp dword [0x69c52c], esi
jne 0x442204
call fcn.0042536d
test eax, eax
je 0x442204
call fcn.004253dd
test eax, eax
je 0x442204
mov edx, 0x69c52c
mov dword [0x69c52c], 1
call fcn.0045a31c
call fcn.0042d2eb
push eax
call dword [0x5b14d8]
test eax, eax
je 0x442219
call fcn.0042de4f
call fcn.0044239c
call fcn.0040914b
call fcn.0040914b
push eax
call fcn.00409176
call fcn.0040914b
mov ecx, dword [esp + 0x24]
pop edi
pop esi
xor ecx, esp
call fcn.0057d6ce
mov esp, ebp
pop ebp
ret