Function at 0x403160
Capabilities:
Acquire debug privileges

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
mov eax, dword [0x42cf34]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 0
push 0x10c
push 0x4000
call fcn.0040a6d4
add esp, 8
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x34], 0
push str.___AAA_AAA_n
call fcn.00402030
add esp, 4
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x48]
push ecx
call fcn.00402800
add esp, 8
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jne 0x4031e7
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.____Failesqdd_to_edqsdqnumerate_sqdsqdqsd_with_error_code:__d_n
call fcn.00402030
add esp, 8
jmp 0x403677
mov dword [ebp - 0x30], 0
jmp 0x4031f9
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x48]
jae 0x403255
imul ecx, dword [ebp - 0x30], 0x104
mov edx, dword [ebp - 0x3c]
cmp dword [edx + ecx + 0x100], 0
je 0x403253
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x44]
push ecx
mov edx, dword [ebp - 0x38]
push edx
imul eax, dword [ebp - 0x30], 0x104
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ecx + eax + 0x100]
push edx
call fcn.00403690
add esp, 0x10
imul eax, dword [ebp - 0x30], 0x104
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ecx + eax + 0x100]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x4031f0
cmp dword [ebp - 0x3c], 0
je 0x403267
mov eax, dword [ebp - 0x3c]
push eax
call fcn.00412693
add esp, 4
push 0x403ac0
push 0x10c
mov ecx, dword [ebp - 0x44]
push ecx
mov edx, dword [ebp - 0x38]
push edx
call fcn.004126d0
add esp, 0x10
push str.___Lisqdqsdusers_found_n
call fcn.00402030
add esp, 4
cmp dword [0x431308], 0
jne 0x4032b1
push str.AAAAAA_nDelegatiosqdqsdilable_n
call fcn.00401e00
add esp, 4
push 0x42ba48
call fcn.00401e00
add esp, 4
mov dword [ebp - 0x30], 0
jmp 0x4032c3
mov eax, dword [ebp - 0x30]
add eax, 1
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
cmp ecx, dword [ebp - 0x44]
jae 0x403323
imul edx, dword [ebp - 0x30], 0x10c
mov eax, dword [ebp - 0x38]
cmp dword [eax + edx + 0x104], 0
je 0x403321
mov dword [ebp - 0x40], 1
cmp dword [0x431308], 0
je 0x403309
imul ecx, dword [ebp - 0x30], 0x10c
add ecx, dword [ebp - 0x38]
push ecx
push str._Output_____Delegation_____s_n
call fcn.00401ee0
add esp, 8
jmp 0x403321
imul edx, dword [ebp - 0x30], 0x10c
add edx, dword [ebp - 0x38]
push edx
push 0x42ba9c
call fcn.00401e00
add esp, 8
jmp 0x4032ba
cmp dword [ebp - 0x40], 0
jne 0x403336
push str.____No_tqsdqsdavailable_n
call fcn.00402030
add esp, 4
cmp dword [0x431308], 0
jne 0x403359
push str.AAAAAA_nImpqsdkens_Available_n
call fcn.00401e00
add esp, 4
push 0x42bae4
call fcn.00401e00
add esp, 4
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x30], 0
jmp 0x403372
mov eax, dword [ebp - 0x30]
add eax, 1
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
cmp ecx, dword [ebp - 0x44]
jae 0x4033e6
imul edx, dword [ebp - 0x30], 0x10c
mov eax, dword [ebp - 0x38]
cmp dword [eax + edx + 0x104], 0
jne 0x4033e4
imul ecx, dword [ebp - 0x30], 0x10c
mov edx, dword [ebp - 0x38]
cmp dword [edx + ecx + 0x108], 0
je 0x4033e4
mov dword [ebp - 0x40], 1
cmp dword [0x431308], 0
je 0x4033cc
imul eax, dword [ebp - 0x30], 0x10c
add eax, dword [ebp - 0x38]
push eax
push str._Outputqsd_____s_n
call fcn.00401ee0
add esp, 8
jmp 0x4033e4
imul ecx, dword [ebp - 0x30], 0x10c
add ecx, dword [ebp - 0x38]
push ecx
push str.AAAAAA_s__n
call fcn.00401e00
add esp, 8
jmp 0x403369
cmp dword [ebp - 0x40], 0
jne 0x4033f9
push str.____No_qsd_available_n
call fcn.00402030
add esp, 4
cmp dword [0x431308], 0
jne 0x40341c
push str.AAAAAA_nAdministrative_qsd_qsd_n
call fcn.00401e00
add esp, 4
push 0x42bb70
call fcn.00401e00
add esp, 4
cmp dword [ebp - 0x2c], 0
je 0x403453
mov dword [ebp - 0x34], 1
cmp dword [0x431308], 0
je 0x403446
push 0x42bba4
push str._Output_____qsd_____s_n
call fcn.00401ee0
add esp, 8
jmp 0x403453
push str.AAAAAAqsd_n
call fcn.00401e00
add esp, 4
cmp dword [ebp - 0x28], 0
je 0x40348a
mov dword [ebp - 0x34], 1
cmp dword [0x431308], 0
je 0x40347d
push str.SeCreateTokenPrivilege
push 0x42bc00
call fcn.00401ee0
add esp, 8
jmp 0x40348a
push str.AAAAAASeCreateTokenPrivilege_n
call fcn.00401e00
add esp, 4
cmp dword [ebp - 0x24], 0
je 0x4034c1
mov dword [ebp - 0x34], 1
cmp dword [0x431308], 0
je 0x4034b4
push str.SeTcbPrivilege
push 0x42bc50
call fcn.00401ee0
add esp, 8
jmp 0x4034c1
push str.AAAAAASeTcbPrivilege_n
call fcn.00401e00
add esp, 4
cmp dword [ebp - 0x20], 0
je 0x4034f8
mov dword [ebp - 0x34], 1
cmp dword [0x431308], 0
je 0x4034eb
push str.SeTakeOwnershipPrivilege
push 0x42bca4
call fcn.00401ee0
add esp, 8
jmp 0x4034f8
push str.AAAAAASeTakeOwnershipPrivilege_n
call fcn.00401e00
add esp, 4
cmp dword [ebp - 0x1c], 0
je 0x40352f
mov dword [ebp - 0x34], 1
cmp dword [0x431308], 0
je 0x403522
push str.SeBackupPrivilege
push 0x42bcf8
call fcn.00401ee0
add esp, 8
jmp 0x40352f
push str.AAAAAASeBackupPrivilege_n
call fcn.00401e00
add esp, 4
cmp dword [ebp - 0x18], 0
je 0x403566
mov dword [ebp - 0x34], 1
cmp dword [0x431308], 0
je 0x403559
push str.SeRestorePrivilege
push 0x42bd48
call fcn.00401ee0
add esp, 8
jmp 0x403566
push str.AAAAAASeRestorePrivilege_n
call fcn.00401e00
add esp, 4
cmp dword [ebp - 0x14], 0
je 0x40359d
mov dword [ebp - 0x34], 1
cmp dword [0x431308], 0
je 0x403590
push 0x42bd84
push 0x42bd98
call fcn.00401ee0
add esp, 8
jmp 0x40359d
push str.AAAAAASeDebugPrivilege_n
call fcn.00401e00
add esp, 4
cmp dword [ebp - 0x10], 0
je 0x4035d4
mov dword [ebp - 0x34], 1
cmp dword [0x431308], 0
je 0x4035c7
push 0x42bdd0
push 0x42bde8
call fcn.00401ee0
add esp, 8
jmp 0x4035d4
push str.AAAAAASeImpersonatePrivilege_n
call fcn.00401e00
add esp, 4
cmp dword [ebp - 0xc], 0
je 0x40360b
mov dword [ebp - 0x34], 1
cmp dword [0x431308], 0
je 0x4035fe
push str.SeRelabelPrivilege
push 0x42be3c
call fcn.00401ee0
add esp, 8
jmp 0x40360b
push str.AAAAAASeRelabelPrivilege_n
call fcn.00401e00
add esp, 4
cmp dword [ebp - 8], 0
je 0x403642
mov dword [ebp - 0x34], 1
cmp dword [0x431308], 0
je 0x403635
push str.SeLoadDriverPrivilege
push str._Output_____Privilege_____s_n
call fcn.00401ee0
add esp, 8
jmp 0x403642
push str.AAAAAASeLoadDriverPrivilege_n
call fcn.00401e00
add esp, 4
cmp dword [ebp - 0x34], 0
jne 0x403655
push str.____No_administrative_privileges_available_n
call fcn.00402030
add esp, 4
cmp dword [0x431308], 0
jne 0x40366b
push 0x42befc
call fcn.00401e00
add esp, 4
mov edx, dword [ebp - 0x38]
push edx
call fcn.00412693
add esp, 4
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004070d2
mov esp, ebp
pop ebp
ret