Function at 0x1071c4d
Capabilities:
Get token privileges

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [0x1099a38]
mov ecx, dword [ebp + 0x10]
xor edx, edx
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
mov esi, 0x100
mov dword [edi], edx
mov dword [eax], edx
push esi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], edx
mov byte [ebp - 0xc], dl
mov byte [ebp - 0xb], dl
mov byte [ebp - 0xa], dl
mov byte [ebp - 9], dl
mov byte [ebp - 8], dl
mov byte [ebp - 7], 5
mov dword [ecx], edx
call sub.msvcrt.dll_malloc
mov ebx, eax
xor eax, eax
cmp ebx, eax
pop ecx
jne 0x1071cb6
push 0x1024678
push 0x1024660
jmp 0x1071e73
push edi
push eax
push eax
push eax
push eax
push eax
push eax
push 0x220
push 0x20
push 2
lea eax, [ebp - 0xc]
push eax
call dword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
test eax, eax
jne 0x1071cea
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x1024678
push 0x1024634
jmp 0x1071e44
lea eax, [ebp - 0x14]
push eax
push 0x28
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
jne 0x1071d17
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x1024678
push 0x1024610
jmp 0x1071e44
mov edi, dword [sym.imp.ADVAPI32.dll_GetTokenInformation]
lea eax, [ebp - 0x10]
push eax
push esi
push ebx
push 4
push dword [ebp - 0x14]
call edi
test eax, eax
jne 0x1071d93
cmp dword [ebp - 0x10], esi
jbe 0x1071e9e
push esi
mov esi, 0x1024678
push esi
push 0x10245e4
call fcn.01071aea
push ebx
call sub.msvcrt.dll_free
push dword [ebp - 0x10]
call sub.msvcrt.dll_malloc
mov ebx, eax
mov eax, dword [ebp - 0x10]
add esp, 0x14
test ebx, ebx
mov dword [ebp - 0x1c], eax
jne 0x1071d70
push esi
push 0x10245c0
jmp 0x1071e73
lea ecx, [ebp - 0x10]
push ecx
push eax
push ebx
push 4
push dword [ebp - 0x14]
call edi
test eax, eax
jne 0x1071d98
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push esi
push 0x1024588
jmp 0x1071e44
mov esi, 0x1024678
push dword [ebx]
call dword [sym.imp.ADVAPI32.dll_GetLengthSid]
mov edi, eax
push edi
call sub.msvcrt.dll_malloc
test eax, eax
pop ecx
mov ecx, dword [ebp - 0x24]
mov dword [ecx], eax
jne 0x1071dbd
push esi
push 0x1024568
jmp 0x1071e73
mov esi, dword [ebx]
mov ecx, edi
mov edi, eax
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [ebp - 0x1c]
mov edi, dword [sym.imp.ADVAPI32.dll_GetTokenInformation]
lea eax, [ebp - 0x10]
push eax
push esi
push ebx
push 1
push dword [ebp - 0x14]
call edi
test eax, eax
jne 0x1071e4e
cmp dword [ebp - 0x10], esi
jbe 0x1071e9e
push esi
mov esi, 0x1024678
push esi
push 0x1024540
call fcn.01071aea
push ebx
call sub.msvcrt.dll_free
push dword [ebp - 0x10]
call sub.msvcrt.dll_malloc
mov ebx, eax
add esp, 0x14
test ebx, ebx
jne 0x1071e24
push esi
push 0x1024520
jmp 0x1071e73
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x10]
push ebx
push 1
push dword [ebp - 0x14]
call edi
test eax, eax
jne 0x1071e53
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push esi
push 0x10244e8
call fcn.01071aea
add esp, 0xc
jmp 0x1071e9e
mov esi, 0x1024678
push dword [ebx]
call dword [sym.imp.ADVAPI32.dll_GetLengthSid]
mov edi, eax
push edi
call sub.msvcrt.dll_malloc
test eax, eax
pop ecx
mov ecx, dword [ebp - 0x20]
mov dword [ecx], eax
jne 0x1071e83
push esi
push 0x10244cc
call fcn.01071aea
pop ecx
pop ecx
push 8
call fcn.01037f35
jmp 0x1071e9e
mov esi, dword [ebx]
mov ecx, edi
mov edi, eax
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov dword [ebp - 0x18], 1
push ebx
call sub.msvcrt.dll_free
xor edi, edi
cmp dword [ebp - 0x18], edi
pop ecx
jne 0x1071ed3
mov esi, dword [ebp - 0x28]
push dword [esi]
call dword [sym.imp.ADVAPI32.dll_FreeSid]
mov dword [esi], edi
mov esi, dword [ebp - 0x20]
push dword [esi]
call sub.msvcrt.dll_free
mov dword [esi], edi
mov esi, dword [ebp - 0x24]
push dword [esi]
call sub.msvcrt.dll_free
pop ecx
pop ecx
mov dword [esi], edi
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x18]
pop edi
pop esi
pop ebx
call fcn.0106bc50
leave
ret 0xc