Function at 0x41026d
Capabilities:
Acquire debug privileges

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x78
push ebx
push esi
push edi
push 5
pop ebx
mov dword [ebp - 0x3c], str.SeTakeOwnershipPrivilege
mov dword [ebp - 0x38], str.SeDebugPrivilege
mov dword [ebp - 0x34], str.SeTcbPrivilege
mov dword [ebp - 0x30], str.SeSecurityPrivilege
mov dword [ebp - 0x2c], str.SeImpersonatePrivilege
lea esi, [ebp - 0x78]
mov edi, ebx
mov ecx, esi
call fcn.00405c2b
add esi, 0xc
dec edi
jne 0x4102a1
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x78]
push ebx
push eax
call fcn.0044ecda
add esp, 0xc
call fcn.0044ec00
mov edi, eax
mov eax, dword [0x4a9450]
test edi, edi
jne 0x410366
mov esi, str.CAppObjects::Get_App_Privelegies_ToolTip:_CANNOT_OpenProcessToken
mov dword [ebp - 4], eax
mov eax, esi
test eax, eax
je 0x4102e8
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push esi
push eax
lea ecx, [ebp - 4]
call fcn.00406586
push dword [ebp - 4]
call fcn.0043d497
pop ecx
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x10]
push str.ERROR:
push eax
call fcn.0040673f
push eax
lea ecx, [ebp - 4]
call fcn.004065e8
lea ecx, [ebp - 0x10]
call fcn.00401085
mov ecx, dword [ebp - 4]
mov edi, dword [ebp + 8]
cmp dword [ecx - 0xc], 0
lea eax, [ecx - 0xc]
jl 0x410338
push eax
mov dword [edi], ecx
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x410347
mov eax, dword [0x4a9450]
push ecx
mov ecx, edi
mov dword [edi], eax
call fcn.00406638
lea ecx, [ebp - 4]
call fcn.00401085
lea esi, [ebp - 0x3c]
sub esi, 0xc
mov ecx, esi
call fcn.0043ea0b
dec ebx
jne 0x410352
mov eax, edi
jmp 0x410538
mov esi, str.CAppObjects::Set_App_Privelegies:_succesfully_OpenProcessToken
mov dword [ebp - 4], eax
mov eax, esi
test eax, eax
je 0x41037b
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push esi
push eax
lea ecx, [ebp - 4]
call fcn.00406586
push dword [ebp - 4]
call fcn.0043d98d
pop ecx
lea ecx, [ebp - 4]
call fcn.00401085
lea eax, [ebp - 0x78]
push ebx
push eax
mov dword [ebp - 0x10], edi
call fcn.0044ecac
pop ecx
pop ecx
lea ecx, [ebp - 0x10]
call fcn.00410955
mov eax, dword [0x4a9450]
push 0x4a9724
mov dword [ebp - 8], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00450863
pop ecx
push eax
lea eax, [ebp - 4]
push 3
push eax
call fcn.00450277
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.0040665f
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004066f3
lea ecx, [ebp - 0x10]
call fcn.00401085
lea ecx, [ebp - 4]
call fcn.00401085
lea ecx, [ebp - 0x1c]
call fcn.00401085
mov eax, dword [ebp - 0xc]
mov esi, dword [eax - 8]
lea eax, [ebp - 0x18]
push eax
call fcn.0040d2d6
lea eax, [ebp - 0x14]
push eax
call fcn.0040d2ee
pop ecx
lea edi, [esi + 4]
mov dword [ebp - 0x10], ebx
pop ecx
lea esi, [ebp - 0x74]
mov ebx, 0x4aa044
mov eax, dword [0x4a9450]
mov dword [ebp - 4], eax
lea eax, [esi - 4]
push eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0040665f
mov eax, dword [eax]
lea ecx, [ebp - 4]
push eax
push dword [eax - 8]
call fcn.0040678b
lea ecx, [ebp - 0x1c]
call fcn.00401085
push 0x4a9db4
lea ecx, [ebp - 4]
call fcn.00406807
cmp dword [esi + 4], 0
lea eax, [ebp - 0x18]
jne 0x41046e
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 4]
call fcn.0040682e
push ebx
lea ecx, [ebp - 4]
call fcn.00406807
push dword [esi]
lea eax, [ebp - 0x28]
push eax
call fcn.00450531
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x24]
push edi
push eax
call fcn.00450277
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0040665f
push eax
lea ecx, [ebp - 4]
call fcn.0040682e
lea ecx, [ebp - 0x20]
call fcn.00401085
lea ecx, [ebp - 0x24]
call fcn.00401085
lea ecx, [ebp - 0x28]
call fcn.00401085
mov eax, dword [ebp - 8]
cmp dword [eax - 8], 0
je 0x4104d7
push ebx
lea ecx, [ebp - 8]
call fcn.00406807
lea eax, [ebp - 4]
lea ecx, [ebp - 8]
push eax
call fcn.0040682e
lea ecx, [ebp - 4]
call fcn.00401085
add esi, 0xc
dec dword [ebp - 0x10]
jne 0x410426
mov ecx, dword [ebp + 8]
lea eax, [ebp - 8]
push eax
call fcn.00406383
lea ecx, [ebp - 0x14]
call fcn.00401085
lea ecx, [ebp - 0x18]
call fcn.00401085
lea ecx, [ebp - 0xc]
call fcn.00401085
lea ecx, [ebp - 8]
call fcn.00401085
push fcn.0043ea0b
push 5
lea eax, [ebp - 0x78]
push 0xc
push eax
call fcn.00406359
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
leave
ret