Function at 0x1007e290
Capabilities:
Acquire debug privileges
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x10182e60
push 0x10132540
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1e50
call fcn.10140530
mov eax, dword [0x10189710]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov edi, ecx
mov dword [ebp - 0xe4c], edi
mov esi, edx
mov dword [ebp - 0xe54], esi
xor ebx, ebx
mov dword [ebp - 0xe48], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0xe58], ebx
mov byte [ebp - 0x430], bl
push 0x207
push ebx
lea eax, [ebp - 0x42f]
push eax
call fcn.1012e060
add esp, 0xc
mov byte [ebp - 0x228], bl
push 0x207
push ebx
lea ecx, [ebp - 0x227]
push ecx
call fcn.1012e060
add esp, 0xc
mov dword [ebp - 0xe40], ebx
cmp esi, ebx
je 0x1007e333
mov dword [esi], ebx
cmp edi, ebx
je 0x1007e8e9
cmp byte [edi], bl
je 0x1007e8e9
push 0x5c
push edi
call fcn.10128490
add esp, 8
test eax, eax
je 0x1007e35c
mov dword [ebp - 0xe58], 1
mov eax, dword [0x101cb87c]
cmp eax, ebx
jne 0x1007e37c
mov ecx, str.PSAPI.DLL
call fcn.1005a380
mov dword [0x101cb87c], eax
cmp eax, ebx
je 0x1007e8e9
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp dword [0x101cb868], ebx
jne 0x1007e39c
push str.EnumProcesses
push eax
call esi
mov dword [0x101cb868], eax
mov eax, dword [0x101cb87c]
cmp dword [0x101cb86c], ebx
jne 0x1007e3b6
push str.EnumProcessModules
push eax
call esi
mov dword [0x101cb86c], eax
mov eax, dword [0x101cb87c]
cmp dword [0x101cb870], ebx
jne 0x1007e3d0
push str.GetModuleBaseNameA
push eax
call esi
mov dword [0x101cb870], eax
mov eax, dword [0x101cb87c]
cmp dword [0x101cb874], ebx
jne 0x1007e3ea
push str.GetModuleFileNameExA
push eax
call esi
mov dword [0x101cb874], eax
mov eax, dword [0x101cb87c]
cmp dword [0x101cb878], ebx
jne 0x1007e404
push str.GetProcessImageFileNameA
push eax
call esi
mov dword [0x101cb878], eax
mov eax, dword [0x101cb87c]
cmp dword [0x101cb868], ebx
je 0x1007e8c4
cmp dword [0x101cb870], ebx
je 0x1007e8c4
cmp dword [0x101cb86c], ebx
je 0x1007e8c4
cmp dword [0x101cb874], ebx
je 0x1007e8c4
mov ecx, str.SeDebugPrivilege
call fcn.10064c60
lea edx, [ebp - 0xe60]
push edx
push 0x1000
lea eax, [ebp - 0x1e68]
push eax
call dword [0x101cb868]
mov ecx, dword [ebp - 0xe60]
shr ecx, 2
mov dword [ebp - 0xe64], ecx
jmp 0x1007e470
mov eax, dword [ebp - 0xe40]
cmp eax, ecx
jge 0x1007e90c
mov byte [ebp - 0x228], bl
mov byte [ebp - 0x430], bl
mov ecx, dword [ebp + eax*4 - 0x1e68]
push ecx
push 0x20410
call fcn.1007c830
add esp, 8
mov dword [ebp - 0xe3c], eax
cmp eax, ebx
je 0x1007e8b3
lea edx, [ebp - 0xe68]
push edx
push 4
lea eax, [ebp - 0xe5c]
push eax
mov esi, dword [ebp - 0xe3c]
push esi
call dword [0x101cb86c]
test eax, eax
je 0x1007e5c6
push 0x208
lea ecx, [ebp - 0x430]
push ecx
mov edx, dword [ebp - 0xe5c]
push edx
push esi
call dword [0x101cb870]
push 0x208
lea eax, [ebp - 0x228]
push eax
mov ecx, dword [ebp - 0xe5c]
push ecx
push esi
call dword [0x101cb874]
cmp byte [ebp - 0x228], bl
je 0x1007e681
push 4
push 0x101691e0
lea edx, [ebp - 0x228]
push edx
call fcn.1013661b
add esp, 0xc
test eax, eax
jne 0x1007e540
lea eax, [ebp - 0x224]
push eax
lea ecx, [ebp - 0x228]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 1
lea edx, [ebp - 0x228]
push edx
call fcn.100796e0
push 0x7e
lea eax, [ebp - 0x228]
push eax
call fcn.10128490
add esp, 8
test eax, eax
je 0x1007e681
mov byte [ebp - 0xe38], bl
push 0x3ff
push ebx
lea ecx, [ebp - 0xe37]
push ecx
call fcn.1012e060
add esp, 0xc
mov byte [ebp - 0xe38], bl
push 0x400
lea edx, [ebp - 0xe38]
push edx
lea eax, [ebp - 0x228]
push eax
call dword [0x10193b6c]
dec eax
cmp eax, 0x102
ja 0x1007e681
lea ecx, [ebp - 0xe38]
push ecx
lea edx, [ebp - 0x228]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp 0x1007e681
mov eax, dword [0x101cb878]
cmp eax, ebx
je 0x1007e681
push 0x208
lea ecx, [ebp - 0x228]
push ecx
push esi
call eax
cmp byte [ebp - 0x228], bl
je 0x1007e681
lea ecx, [ebp - 0x228]
call fcn.100741d0
push 0x7e
lea edx, [ebp - 0x228]
push edx
call fcn.10128490
add esp, 8
test eax, eax
je 0x1007e664
mov byte [ebp - 0xa38], bl
push 0x3ff
push ebx
lea eax, [ebp - 0xa37]
push eax
call fcn.1012e060
add esp, 0xc
mov byte [ebp - 0xa38], bl
push 0x400
lea ecx, [ebp - 0xa38]
push ecx
lea edx, [ebp - 0x228]
push edx
call dword [0x10193b6c]
dec eax
cmp eax, 0x206
ja 0x1007e664
lea eax, [ebp - 0xa38]
push eax
lea ecx, [ebp - 0x228]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp byte [ebp - 0x228], bl
je 0x1007e681
lea edx, [ebp - 0x430]
push edx
lea ecx, [ebp - 0x228]
call fcn.100620f0
add esp, 4
cmp dword [ebp - 0xe58], ebx
jne 0x1007e754
cmp byte [ebp - 0x430], bl
je 0x1007e899
xor eax, eax
lea ecx, [ebp - 0x430]
cmp eax, ebx
mov eax, dword [ebp - 0xe4c]
jne 0x1007e71b
call fcn.1005a090
mov edi, eax
mov dword [ebp - 0xe44], edi
cmp edi, ebx
jne 0x1007e899
xor eax, eax
cmp eax, ebx
je 0x1007e840
push 0x8000
call fcn.10128320
add esp, 4
mov esi, eax
cmp esi, ebx
je 0x1007e840
mov byte [esi], bl
mov edx, dword [ebp - 0xe40]
mov eax, dword [ebp + edx*4 - 0x1e68]
push eax
mov ecx, esi
call fcn.1007ce30
cmp byte [esi], bl
je 0x1007e744
push ebx
xor eax, eax
push eax
push esi
call fcn.10063340
add esp, 0xc
cmp eax, 0xffffffff
je 0x1007e744
xor edi, edi
mov dword [ebp - 0xe44], edi
jmp 0x1007e837
push ebx
push eax
push ecx
call fcn.10063340
add esp, 0xc
cmp eax, 0xffffffff
je 0x1007e735
xor edi, edi
mov dword [ebp - 0xe44], edi
jmp 0x1007e6c0
mov dword [ebp - 0xe44], 1
jmp 0x1007e899
mov edi, 1
mov dword [ebp - 0xe44], edi
jmp 0x1007e837
cmp byte [ebp - 0x228], bl
je 0x1007e899
mov dword [ebp - 0xe50], 1
mov byte [ebp - 0x638], bl
push 0x207
push ebx
lea ecx, [ebp - 0x637]
push ecx
call fcn.1012e060
add esp, 0xc
lea edx, [ebp - 0x228]
push edx
lea eax, [ebp - 0x638]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea ecx, [ebp - 0x638]
push ecx
call fcn.1005f590
add esp, 4
push ebx
mov esi, dword [ebp - 0xe4c]
push esi
lea edx, [ebp - 0x228]
push edx
call fcn.10063340
add esp, 0xc
cmp eax, 0xffffffff
jne 0x1007e7de
push ebx
push esi
lea eax, [ebp - 0x638]
push eax
call fcn.10063340
add esp, 0xc
cmp eax, 0xffffffff
je 0x1007e899
xor edi, edi
mov dword [ebp - 0xe50], edi
xor eax, eax
cmp eax, ebx
je 0x1007e840
push 0x8000
call fcn.10128320
add esp, 4
mov esi, eax
cmp esi, ebx
je 0x1007e840
mov byte [esi], bl
mov ecx, dword [ebp - 0xe40]
mov edx, dword [ebp + ecx*4 - 0x1e68]
push edx
mov ecx, esi
call fcn.1007ce30
cmp byte [esi], bl
je 0x1007e82c
push ebx
xor eax, eax
push eax
push esi
call fcn.10063340
add esp, 0xc
cmp eax, 0xffffffff
jne 0x1007e831
mov edi, 1
mov dword [ebp - 0xe50], edi
push esi
call fcn.10128243
add esp, 4
cmp edi, ebx
jne 0x1007e899
mov eax, dword [ebp - 0xe54]
cmp eax, ebx
je 0x1007e85d
mov ecx, dword [ebp - 0xe40]
mov edx, dword [ebp + ecx*4 - 0x1e68]
mov dword [eax], edx
xor ecx, ecx
cmp ecx, ebx
je 0x1007e875
xor eax, eax
cmp eax, ebx
je 0x1007e875
push eax
mov edx, dword [ebp - 0xe3c]
call fcn.1007deb0
lea eax, [ebp - 0xe3c]
push eax
call fcn.10082e10
xor eax, eax
mov dword [ebp - 0xe3c], ebx
cmp eax, ebx
mov dword [ebp - 0xe48], 1
je 0x1007e90c
inc dword [eax]
cmp dword [ebp - 0xe3c], ebx
je 0x1007e8b3
lea ecx, [ebp - 0xe3c]
push ecx
call fcn.10082e10
mov dword [ebp - 0xe3c], ebx
inc dword [ebp - 0xe40]
mov ecx, dword [ebp - 0xe64]
jmp 0x1007e470
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [0x101cb87c], ebx
mov dword [0x101cb868], ebx
mov dword [0x101cb870], ebx
mov dword [0x101cb86c], ebx
mov dword [0x101cb874], ebx
mov dword [ebp - 4], 0xfffffffe
xor eax, eax
jmp 0x1007e919
mov dword [ebp - 4], 0xfffffffe
mov eax, dword [ebp - 0xe48]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.10127db1
mov esp, ebp
pop ebp
ret