Function at 0x140086bb0
Capabilities:
Acquire debug privileges

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xb0
mov rax, qword [0x14016b010]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov edi, r8d
mov rbx, rcx
mov qword [rbp + 0xf], rcx
mov dword [rcx], edx
mov qword [rcx + 8], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x17], xmm0
mov rax, qword gs:[0x58]
mov rsi, qword [rax]
mov ecx, 0x18
mov eax, dword [rcx + rsi]
mov r15d, 0x10
test al, 1
jne 0x140086c24
or eax, 1
mov dword [rcx + rsi], eax
xor eax, eax
mov qword [rsi + r15], rax
call fcn.1400ad5c0
mov qword [rsi + r15], rax
lea r9, [0x14012d73b]
lea r8, [0x140139a20]
mov rdx, qword [rsi + r15]
lea rcx, [rbp + 0x17]
call fcn.140057520
nop
mov edx, dword [rbx]
test edx, edx
je 0x140086c84
cmp edx, 1
jne 0x140086dc9
lea ecx, [rdx + 1]
call qword [sym.imp.ADVAPI32.dll_ImpersonateSelf]
test eax, eax
je 0x140086e04
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
lea r9, [rbx + 8]
xor r8d, r8d
lea edx, [r8 + 0x28]
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_OpenThreadToken]
test eax, eax
je 0x140086d86
jmp 0x140086ca4
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rbx + 8]
mov edx, 0x28
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x140086e47
mov ecx, edi
test edi, edi
je 0x140086cca
sub ecx, 1
je 0x140086cc1
cmp ecx, 1
jne 0x140086e8a
lea rdx, str.SeSecurityPrivilege
jmp 0x140086cd1
lea rdx, str.SeDebugPrivilege
jmp 0x140086cd1
lea rdx, str.SeBackupPrivilege
lea r8, [rbx + 0x20]
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
test eax, eax
je 0x140086d42
mov rax, qword [rbx + 0x20]
mov qword [rbp - 1], rax
mov dword [rbp - 0x59], 1
movsd xmm0, qword [rbp - 1]
movsd qword [rbp - 0x55], xmm0
mov dword [rbp - 0x4d], 2
movups xmm0, xmmword [rbp - 0x59]
movups xmmword [rbx + 0x10], xmm0
mov rcx, rbx
call fcn.1400870b0
nop
lea rcx, [rbp + 0x17]
call fcn.140016f70
nop
mov rax, rbx
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.1400d45d0
mov rbx, qword [rsp + 0xe8]
add rsp, 0xb0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop
mov edx, eax
lea rcx, [rbp - 0x21]
call fcn.1400155b0
nop
mov r8, rax
lea rdx, str.LookupPrivilegeValueW_failed_with_error
lea rcx, [rbp - 0x41]
call fcn.140016540
nop
mov rdx, rax
lea rcx, [rbp - 0x59]
call fcn.140086b80
lea rdx, [0x140168710]
lea rcx, [rbp - 0x59]
call fcn.1400d9ba0
nop
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [rbp - 0x21]
call fcn.1400155b0
nop
mov r8, rax
lea rdx, str.OpenThreadToken_failed_with_error:
lea rcx, [rbp - 0x41]
call fcn.140016540
nop
mov rdx, rax
lea rcx, [rbp - 0x59]
call fcn.140086b80
lea rdx, [0x140168710]
lea rcx, [rbp - 0x59]
call fcn.1400d9ba0
nop
lea rcx, [rbp - 0x41]
call fcn.14001d150
nop
mov r8, rax
lea rdx, str.Unexpected_mode_provided
lea rcx, [rbp - 0x21]
call fcn.140016540
nop
mov rdx, rax
lea rcx, [rbp - 0x59]
call fcn.1400685d0
lea rdx, [0x1401681f8]
lea rcx, [rbp - 0x59]
call fcn.1400d9ba0
nop
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [rbp - 0x21]
call fcn.1400155b0
nop
mov r8, rax
lea rdx, str.ImpersonateSelf_failed_with_error:
lea rcx, [rbp - 0x41]
call fcn.140016540
nop
mov rdx, rax
lea rcx, [rbp - 0x59]
call fcn.140086b80
lea rdx, [0x140168710]
lea rcx, [rbp - 0x59]
call fcn.1400d9ba0
nop
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [rbp - 0x21]
call fcn.1400155b0
nop
mov r8, rax
lea rdx, str.OpenProcessToken_failed_with_error
lea rcx, [rbp - 0x41]
call fcn.140016540
nop
mov rdx, rax
lea rcx, [rbp - 0x59]
call fcn.140086b80
lea rdx, [0x140168710]
lea rcx, [rbp - 0x59]
call fcn.1400d9ba0
nop
mov edx, edi
lea rcx, [rbp - 0x21]
call fcn.14001d150
nop
mov r8, rax
lea rdx, str.Unrecognised_privilege:
lea rcx, [rbp - 0x41]
call fcn.140016540
nop
mov rdx, rax
lea rcx, [rbp - 0x59]
call fcn.1400685d0
lea rdx, [0x1401681f8]
lea rcx, [rbp - 0x59]
call fcn.1400d9ba0
int3