Function at 0x411030
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x42bb10
push 0x4179a0
mov eax, dword fs:[0]
push eax
sub esp, 0x28
push ebx
push esi
push edi
mov eax, dword [section..data]
xor dword [ebp - 8], eax
xor eax, ebp
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x28], 0
mov dword [ebp - 4], 0
mov dword [ebp - 4], 1
mov dword [0x434888], 0
push 0xf003f
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
test eax, eax
je 0x4111d1
push eax
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ebx, [eax + 0x1e]
mov dword [ebp - 0x24], 0
push 0x1000a
call fcn.00412ac8
mov edi, eax
push 0x2000a
call fcn.00412ac8
add esp, 8
mov esi, eax
test edi, edi
je 0x41116e
test esi, esi
je 0x41116e
push str.SCM___Admin
push 0xffff
push esi
call fcn.00412a58
add esp, 0xc
test eax, eax
jle 0x411159
xor eax, eax
mov word [esi + 0x1fffe], ax
push 0xffffffffffffffff
push esi
mov ecx, esi
call fcn.004052b0
inc eax
push eax
push edi
lea eax, [ebp - 0x24]
push eax
call fcn.00413618
add esp, 0x14
test eax, eax
je 0x41113c
push ebx
push esi
push str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.00412f3c
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push ebx
push edi
push str.IsAdminRunning
push 4
mov edx, 0x2da
mov ecx, str...MainGui.cpp
call fcn.00401280
add esp, 0x10
jmp 0x411186
push ebx
push str.Error__d_in_swprintf_s_n
call fcn.00412f3c
add esp, 8
push str.Error_in_swprintf_s_n
jmp 0x411180
push str.Memory_allocation_error_in_log_file_n
call fcn.00412f3c
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test edi, edi
je 0x411193
push edi
call fcn.00412a90
add esp, 4
test esi, esi
je 0x4111a0
push esi
call fcn.00412a90
add esp, 4
mov dword [0x434888], 2
push 0xfffffffffffffffe
lea eax, [ebp - 0x10]
push eax
push section..data
call fcn.0041dd90
add esp, 0xc
xor eax, eax
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x20]
push eax
push 8
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
jne 0x4112ac
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov ebx, eax
call esi
lea edi, [eax + 0x1e]
push 0x1000a
call fcn.00412ac8
add esp, 4
mov esi, eax
test esi, esi
jne 0x411228
push str.Memory_allocation_error_in_log_file_n
call fcn.00412f3c
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x411284
push 0x4283c8
push 0xffff
push esi
call fcn.00412a74
add esp, 0xc
push edi
test eax, eax
jle 0x411263
mov byte [esi + 0xffff], 0
push esi
push str.IsAdminRunning
push 1
mov edx, 0x2e1
mov ecx, str...MainGui.cpp
call fcn.00401280
add esp, 0x10
jmp 0x41127b
push str.Error__d_in_swprintf_s_n
call fcn.00412f3c
add esp, 8
push str.Error_in_swprintf_s_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push esi
call fcn.00412a90
add esp, 4
push 0xfffffffffffffffe
lea eax, [ebp - 0x10]
push eax
push section..data
call fcn.0041dd90
add esp, 0xc
lea eax, [ebx + 0x1e]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x28]
push eax
push 4
lea eax, [ebp - 0x1c]
push eax
push 0x12
push dword [ebp - 0x20]
call dword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
jne 0x41132d
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov ebx, eax
call esi
lea edi, [eax + 0x1e]
push 0x1000a
call fcn.00412ac8
add esp, 4
mov esi, eax
test esi, esi
je 0x41120e
push 0x4283c8
push 0xffff
push esi
call fcn.00412a74
add esp, 0xc
push edi
test eax, eax
jle 0x411263
mov byte [esi + 0xffff], 0
push esi
push str.IsAdminRunning
push 1
mov edx, 0x2e4
mov ecx, str...MainGui.cpp
call fcn.00401280
add esp, 0x10
jmp 0x41127b
mov eax, dword [ebp - 0x1c]
dec eax
je 0x411645
dec eax
je 0x411544
dec eax
je 0x411443
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edi, [eax + 0x1e]
mov dword [ebp - 0x2c], 0
push 0x1000a
call fcn.00412ac8
mov ebx, eax
push 0x2000a
call fcn.00412ac8
add esp, 8
mov esi, eax
test ebx, ebx
je 0x411408
test esi, esi
je 0x411408
push dword [ebp - 0x1c]
push str.Type:__d___User
push 0xffff
push esi
call fcn.00412a58
add esp, 0x10
test eax, eax
jle 0x4113f3
xor eax, eax
mov word [esi + 0x1fffe], ax
push 0xffffffffffffffff
push esi
mov ecx, esi
call fcn.004052b0
inc eax
push eax
push ebx
lea eax, [ebp - 0x2c]
push eax
call fcn.00413618
add esp, 0x14
test eax, eax
je 0x4113d6
push edi
push esi
push str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.00412f3c
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push edi
push ebx
push str.IsAdminRunning
push 4
mov edx, 0x2f6
mov ecx, str...MainGui.cpp
call fcn.00401280
add esp, 0x10
jmp 0x411420
push edi
push str.Error__d_in_swprintf_s_n
call fcn.00412f3c
add esp, 8
push str.Error_in_swprintf_s_n
jmp 0x41141a
push str.Memory_allocation_error_in_log_file_n
call fcn.00412f3c
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test ebx, ebx
je 0x41142d
push ebx
call fcn.00412a90
add esp, 4
test esi, esi
je 0x411741
push esi
call fcn.00412a90
add esp, 4
jmp 0x411741
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edi, [eax + 0x1e]
mov dword [ebp - 0x30], 0
push 0x1000a
call fcn.00412ac8
mov ebx, eax
push 0x2000a
call fcn.00412ac8
add esp, 8
mov esi, eax
test ebx, ebx
je 0x411503
test esi, esi
je 0x411503
push str.Admin_Limited
push 0xffff
push esi
call fcn.00412a58
add esp, 0xc
test eax, eax
jle 0x4114ee
xor eax, eax
mov word [esi + 0x1fffe], ax
push 0xffffffffffffffff
push esi
mov ecx, esi
call fcn.004052b0
inc eax
push eax
push ebx
lea eax, [ebp - 0x30]
push eax
call fcn.00413618
add esp, 0x14
test eax, eax
je 0x4114d1
push edi
push esi
push str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.00412f3c
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push edi
push ebx
push str.IsAdminRunning
push 4
mov edx, 0x2ed
mov ecx, str...MainGui.cpp
call fcn.00401280
add esp, 0x10
jmp 0x41151b
push edi
push str.Error__d_in_swprintf_s_n
call fcn.00412f3c
add esp, 8
push str.Error_in_swprintf_s_n
jmp 0x411515
push str.Memory_allocation_error_in_log_file_n
call fcn.00412f3c
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test ebx, ebx
je 0x411528
push ebx
call fcn.00412a90
add esp, 4
test esi, esi
je 0x411535
push esi
call fcn.00412a90
add esp, 4
mov dword [0x434888], 1
jmp 0x411741
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edi, [eax + 0x1e]
mov dword [ebp - 0x34], 0
push 0x1000a
call fcn.00412ac8
mov ebx, eax
push 0x2000a
call fcn.00412ac8
add esp, 8
mov esi, eax
test ebx, ebx
je 0x411604
test esi, esi
je 0x411604
push str.Admin
push 0xffff
push esi
call fcn.00412a58
add esp, 0xc
test eax, eax
jle 0x4115ef
xor eax, eax
mov word [esi + 0x1fffe], ax
push 0xffffffffffffffff
push esi
mov ecx, esi
call fcn.004052b0
inc eax
push eax
push ebx
lea eax, [ebp - 0x34]
push eax
call fcn.00413618
add esp, 0x14
test eax, eax
je 0x4115d2
push edi
push esi
push str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.00412f3c
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push edi
push ebx
push str.IsAdminRunning
push 4
mov edx, 0x2f1
mov ecx, str...MainGui.cpp
call fcn.00401280
add esp, 0x10
jmp 0x41161c
push edi
push str.Error__d_in_swprintf_s_n
call fcn.00412f3c
add esp, 8
push str.Error_in_swprintf_s_n
jmp 0x411616
push str.Memory_allocation_error_in_log_file_n
call fcn.00412f3c
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test ebx, ebx
je 0x411629
push ebx
call fcn.00412a90
add esp, 4
test esi, esi
je 0x411636
push esi
call fcn.00412a90
add esp, 4
mov dword [0x434888], 2
jmp 0x411741
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edi, [eax + 0x1e]
mov dword [ebp - 0x38], 0
push 0x1000a
call fcn.00412ac8
mov ebx, eax
push 0x2000a
call fcn.00412ac8
add esp, 8
mov esi, eax
test ebx, ebx
je 0x411705
test esi, esi
je 0x411705
push str.User
push 0xffff
push esi
call fcn.00412a58
add esp, 0xc
test eax, eax
jle 0x4116f0
xor eax, eax
mov word [esi + 0x1fffe], ax
push 0xffffffffffffffff
push esi
mov ecx, esi
call fcn.004052b0
inc eax
push eax
push ebx
lea eax, [ebp - 0x38]
push eax
call fcn.00413618
add esp, 0x14
test eax, eax
je 0x4116d3
push edi
push esi
push str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.00412f3c
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push edi
push ebx
push str.IsAdminRunning
push 4
mov edx, 0x2e9
mov ecx, str...MainGui.cpp
call fcn.00401280
add esp, 0x10
jmp 0x41171d
push edi
push str.Error__d_in_swprintf_s_n
call fcn.00412f3c
add esp, 8
push str.Error_in_swprintf_s_n
jmp 0x411717
push str.Memory_allocation_error_in_log_file_n
call fcn.00412f3c
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test ebx, ebx
je 0x41172a
push ebx
call fcn.00412a90
add esp, 4
test esi, esi
je 0x411737
push esi
call fcn.00412a90
add esp, 4
mov dword [0x434888], 0
mov dword [ebp - 4], 0
call fcn.0041175b
mov dword [ebp - 4], 0xfffffffe
xor eax, eax
jmp 0x41180c
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret