Function at 0x4560e2
Capabilities:
Acquire debug privileges

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x80
mov eax, ecx
push ebx
xor ebx, ebx
mov dword [ebp - 8], eax
cmp dword [eax + 8], ebx
jne 0x45612c
mov eax, dword [0x50b594]
cmp eax, 0x50b594
je 0x456125
test byte [eax + 0x1c], 1
je 0x456125
cmp byte [eax + 0x19], 2
jb 0x456125
push 0x4c95e0
push 0xe
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0041df22
add esp, 0x10
xor al, al
jmp 0x4563bd
push esi
mov esi, dword [ebp + 8]
test esi, esi
jne 0x456168
mov eax, dword [0x50b594]
cmp eax, 0x50b594
je 0x456161
test byte [eax + 0x1c], 1
je 0x456161
cmp byte [eax + 0x19], 2
jb 0x456161
push 0x4c95e0
push 0xf
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0041df22
add esp, 0x10
xor al, al
jmp 0x4563bc
lea ecx, [ebp - 0x2c]
call fcn.0042ead5
push ebx
push 0x80
push 2
push ebx
push ebx
push 0x40000000
push esi
lea ecx, [ebp - 0x2c]
call fcn.0042ec09
test eax, eax
jne 0x4561d9
mov eax, dword [0x50b594]
cmp eax, 0x50b594
je 0x4563b2
test byte [eax + 0x1c], 1
je 0x4563b2
cmp byte [eax + 0x19], 2
jb 0x4563b2
lea ecx, [ebp - 0x2c]
call fcn.0042f635
push eax
mov eax, dword [0x50b594]
push esi
push 0x4c95e0
push 0x10
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0041dfa9
add esp, 0x18
jmp 0x4563b2
push edi
lea ecx, [ebp - 0x80]
call fcn.00426eed
push str.SeDebugPrivilege
lea ecx, [ebp - 0x80]
call fcn.004272bd
mov ecx, 0x4c95e0
test al, al
jne 0x456217
mov eax, dword [0x50b594]
mov edi, 0x50b594
cmp eax, edi
je 0x456242
test byte [eax + 0x1c], 1
je 0x456242
cmp byte [eax + 0x19], 3
jb 0x456242
push ecx
push 0x11
jmp 0x456234
mov eax, dword [0x50b594]
mov edi, 0x50b594
cmp eax, edi
je 0x456242
test byte [eax + 0x1c], 1
je 0x456242
cmp byte [eax + 0x19], 4
jb 0x456242
push ecx
push 0x12
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0041df22
add esp, 0x10
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov esi, eax
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], esi
call fcn.00426c3e
push esi
push ebx
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push eax
lea ecx, [ebp - 0x10]
call fcn.00426e89
lea ecx, [ebp - 0x10]
call fcn.00426eb2
test al, al
jne 0x4562bc
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
mov eax, dword [0x50b594]
cmp eax, edi
je 0x4563a1
test byte [eax + 0x1c], 1
je 0x4563a1
cmp byte [eax + 0x19], 2
jb 0x4563a1
push ecx
push esi
push 0x4c95e0
push 0x13
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0042de03
add esp, 0x18
jmp 0x4563a1
mov eax, dword [0x50b594]
cmp eax, edi
je 0x456311
test byte [eax + 0x1c], 1
je 0x4562ec
cmp byte [eax + 0x19], 4
jb 0x4562ec
push esi
push 0x4c95e0
push 0x14
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0041e118
mov eax, dword [0x50b594]
add esp, 0x14
cmp eax, edi
je 0x456311
test byte [eax + 0x1c], 1
je 0x456311
cmp byte [eax + 0x19], 4
jb 0x456311
push 0x4c95e0
push 0x1a
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0041df22
add esp, 0x10
push 0xc
lea eax, [ebp - 0x1c]
push ebx
push eax
call fcn.0046bdb0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0x10]
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], 1
call fcn.00426ec4
push ebx
mov esi, eax
push ebx
lea eax, [ebp - 0x1c]
push eax
push dword [ebp + 0xc]
lea ecx, [ebp - 0x2c]
call fcn.0042ec01
push eax
push dword [ebp - 4]
mov eax, dword [ebp - 8]
push dword [esi]
call dword [eax + 8]
test eax, eax
jne 0x45639f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
mov eax, dword [0x50b594]
cmp eax, edi
je 0x4563a1
test byte [eax + 0x1c], 1
je 0x4563a1
cmp byte [eax + 0x19], 2
jb 0x4563a1
push ecx
push dword [ebp + 0xc]
push dword [ebp + 8]
push dword [ebp - 4]
push 0x4c95e0
push 0x1b
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.004568ef
add esp, 0x20
jmp 0x4563a1
mov bl, 1
lea ecx, [ebp - 0x10]
call fcn.00426c89
lea ecx, [ebp - 0x80]
call fcn.00426f17
pop edi
lea ecx, [ebp - 0x2c]
call fcn.0042eb17
mov al, bl
pop esi
pop ebx
leave
ret 0xc