Function at 0x471864
Capabilities:
Get session integrity level

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
push edi
test dl, dl
je 0x471880
add esp, 0xfffffff0
call fcn.00405534
mov ebx, edx
mov dword [ebp - 4], eax
lea edi, [ebp - 4]
xor eax, eax
push ebp
push 0x471ab5
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.004770bc
call fcn.0044c478
lea eax, [ebp - 8]
push eax
xor ecx, ecx
mov edx, 0x9c6
mov eax, 0x471ae8
call fcn.0046b4c4
mov edx, dword [ebp - 8]
mov eax, dword [0x4bca3c]
mov eax, dword [eax]
call fcn.0044d7e4
test al, al
je 0x471900
lea eax, [ebp - 0x10]
push eax
xor ecx, ecx
mov edx, 0x9c7
mov eax, 0x471b04
call fcn.0046b4c4
mov edx, dword [ebp - 0x10]
lea ecx, [ebp - 0xc]
mov eax, dword [0x4bca3c]
mov eax, dword [eax]
call fcn.0044d4f8
mov edx, dword [ebp - 0xc]
mov eax, dword [edi]
add eax, 0x94
call fcn.004070a0
jmp 0x471911
mov eax, dword [edi]
add eax, 0x94
mov edx, 0x471b20
call fcn.004070a0
lea eax, [ebp - 0x14]
push eax
xor ecx, ecx
mov edx, 0x9ca
mov eax, 0x471b3c
call fcn.0046b4c4
mov edx, dword [ebp - 0x14]
mov eax, dword [0x4bca3c]
mov eax, dword [eax]
call fcn.0044d7e4
test al, al
je 0x47196d
lea eax, [ebp - 0x1c]
push eax
xor ecx, ecx
mov edx, 0x9cb
mov eax, 0x471b58
call fcn.0046b4c4
mov edx, dword [ebp - 0x1c]
lea ecx, [ebp - 0x18]
mov eax, dword [0x4bca3c]
mov eax, dword [eax]
call fcn.0044d4f8
mov edx, dword [ebp - 0x18]
mov eax, dword [0x4bc7d8]
call fcn.004070a0
mov eax, dword [edi]
mov dword [eax + 0x74], 0x60
lea eax, [ebp - 0x20]
push eax
xor ecx, ecx
mov edx, 0x9cd
mov eax, 0x471b74
call fcn.0046b4c4
mov edx, dword [ebp - 0x20]
mov eax, dword [edi]
add eax, 0x50
call fcn.004070a0
push ebp
call fcn.0047172c
pop ecx
cmp byte [0x4c26c1], 0
jne 0x4719b2
call fcn.0044c6fc
mov byte [0x4c26c0], al
push ebp
call fcn.00471560
pop ecx
mov eax, dword [0x4bc850]
mov edx, dword [edi]
mov edx, dword [edx + 0x5c]
mov ecx, 0
call fcn.004072dc
push 0
push 0xffffffffffffffff
push 0
call fcn.0040aed8
mov edx, dword [edi]
mov dword [edx + 0x14], eax
mov eax, dword [edi]
mov dword [eax + 0xac], 1
mov eax, dword [edi]
mov dword [eax + 0xb0], 2
mov eax, dword [edi]
mov dword [eax + 0xb4], 1
mov dl, 1
mov eax, dword [0x46ab48]
call fcn.00404ff0
mov esi, eax
mov eax, dword [edi]
mov dword [eax + 0x40], esi
mov eax, dword [edi]
mov dword [esi + 4], eax
xor ecx, ecx
mov dl, 1
mov eax, dword [0x4509fc]
call fcn.00452e38
mov edx, dword [edi]
mov dword [edx + 0x44], eax
push 0
push 0
push 0
push 0
call sub.kernel32.dll_CreateEventW
mov edx, dword [edi]
mov dword [edx + 0x34], eax
push 0
call sub.ole32.dll_CoInitialize
mov eax, dword [edi]
mov eax, dword [eax + 0x14]
push eax
call sub.kernel32.dll_ReleaseMutex
mov eax, dword [edi]
call fcn.0046b85c
mov eax, dword [edi]
mov dword [eax + 0x2c], 0x64
mov eax, dword [edi]
mov dword [0x4c2698], eax
mov eax, dword [edi]
mov eax, dword [eax + 0x34]
push eax
mov ecx, dword [edi]
mov dl, 1
mov eax, dword [0x46a10c]
call fcn.0046df84
mov esi, eax
mov eax, dword [edi]
mov dword [eax + 0x38], esi
mov eax, esi
call fcn.0043b4dc
mov dl, 1
mov eax, dword [0x46a2d4]
call fcn.0046e1a4
mov edx, dword [edi]
mov dword [edx + 0x3c], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x471abc
lea eax, [ebp - 0x20]
mov edx, 7
call fcn.00407098
ret