Function at 0x1400056c5
Capabilities:
Acquire debug privileges

Disassembly:
push rbp
push rbx
sub rsp, 0x128
lea rbp, [rsp + 0x80]
lea rax, str.ADVAPI32
mov rcx, rax
call dbg.fnLoadLibraryA(char const*)
mov qword [rbp + 0x98], rax
lea rax, [rbp - 1]
mov qword [rbp + 0x60], rax
nop
nop
lea rdx, [rbp - 1]
lea rax, [rbp - 0x30]
mov r8, rdx
lea rdx, str.OpenProcessToken
mov rcx, rax
call dbg.std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::basic_string<std::allocator<char> >(char const*, std::allocator<char> const&)
lea rdx, [rbp - 0x30]
mov rax, qword [rbp + 0x98]
mov rcx, rax
call dbg.GetProcAddressInt(void*, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&)
mov qword [rbp + 0x90], rax
lea rax, [rbp - 0x30]
mov rcx, rax
call dbg.std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::~basic_string()
nop
lea rax, [rbp + 0x2f]
mov qword [rbp + 0x68], rax
nop
nop
lea rdx, [rbp + 0x2f]
mov rax, rbp
mov r8, rdx
lea rdx, str.LookupPrivilegeValueA
mov rcx, rax
call dbg.std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::basic_string<std::allocator<char> >(char const*, std::allocator<char> const&)
mov rdx, rbp
mov rax, qword [rbp + 0x98]
mov rcx, rax
call dbg.GetProcAddressInt(void*, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&)
mov qword [rbp + 0x88], rax
mov rax, rbp
mov rcx, rax
call dbg.std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::~basic_string()
nop
lea rax, [rbp + 0x5f]
mov qword [rbp + 0x70], rax
nop
nop
lea rdx, [rbp + 0x5f]
lea rax, [rbp + 0x30]
mov r8, rdx
lea rdx, str.AdjustTokenPrivileges
mov rcx, rax
call dbg.std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::basic_string<std::allocator<char> >(char const*, std::allocator<char> const&)
lea rdx, [rbp + 0x30]
mov rax, qword [rbp + 0x98]
mov rcx, rax
call dbg.GetProcAddressInt(void*, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&)
mov qword [rbp + 0x80], rax
lea rax, [rbp + 0x30]
mov rcx, rax
call dbg.std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::~basic_string()
nop
mov qword [rbp - 0x38], 0
pxor xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov rbx, qword [rbp + 0x90]
call dbg.fnGetCurrentProcess()
lea rdx, [rbp - 0x38]
mov r8, rdx
mov edx, 0x28
mov rcx, rax
call rbx
test eax, eax
sete al
test al, al
je 0x14000580a
mov eax, 0
jmp 0x1400058ce
mov dword [rbp - 0x50], 1
mov dword [rbp - 0x44], 2
lea rax, str.SeDebugPrivilege
mov qword [rbp + 0x78], rax
mov r9, qword [rbp + 0x88]
lea rax, [rbp - 0x50]
lea rdx, [rax + 4]
mov rax, qword [rbp + 0x78]
mov r8, rdx
mov rdx, rax
mov ecx, 0
call r9
test eax, eax
sete al
test al, al
je 0x140005864
mov rax, qword [rbp - 0x38]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
mov eax, 0
jmp 0x1400058ce
mov r10, qword [rbp + 0x80]
mov rax, qword [rbp - 0x38]
lea rdx, [rbp - 0x50]
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9d, 0x10
mov r8, rdx
mov edx, 0
mov rcx, rax
call r10
test eax, eax
sete al
test al, al
je 0x1400058b9
mov rax, qword [rbp - 0x38]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
mov eax, 0
jmp 0x1400058ce
mov rax, qword [rbp - 0x38]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
mov eax, 1
add rsp, 0x128
pop rbx
pop rbp
ret