Function at 0x41c2d0
Capabilities:
Compare security identifiers
Get disk information

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43d36b
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x1b0
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [0x4574c0]
mov dword [ebp - 0xc0], eax
mov eax, dword [0x4574c8]
push 0x30
mov dword [ebp - 0x1ac], eax
lea eax, [ebp - 0x118]
push 0
push eax
mov dword [ebp - 0x120], 0
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0x124], 0x1f01ff
mov dword [ebp - 0x1b4], 0
mov dword [ebp - 0x12c], 0x14
mov dword [ebp - 0x128], 0
mov byte [ebp - 0xb5], 1
call fcn.0042a4e0
mov ax, word [0x4574e0]
add esp, 0xc
mov esi, dword [sym.imp.KERNEL32.dll_HeapAlloc]
xorps xmm0, xmm0
mov word [ebp - 0x1c], ax
xor eax, eax
mov dword [ebp - 0x11c], 0
push 0x10212
push eax
push dword [0x45764c]
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0x1a], 0x5c003a
mov word [ebp - 0x16], ax
mov dword [ebp - 0xb4], eax
movq qword [ebp - 0x1bc], xmm0
movups xmmword [ebp - 0xa8], xmm0
movups xmmword [ebp - 0x98], xmm0
movq qword [ebp - 0x88], xmm0
movq qword [ebp - 0x134], xmm0
call esi
mov dword [ebp - 0xc4], eax
test eax, eax
je 0x41c458
push 0x300
push 0
push dword [0x45764c]
mov edx, 0x20
mov dword [ebp - 0xf8], edx
call esi
mov dword [ebp - 0xb0], eax
mov edi, eax
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xf0], edi
test eax, eax
jne 0x41c467
push dword [ebp - 0xc4]
push eax
push dword [0x45764c]
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov dword [0x45771c], 8
jmp 0x41d26e
lea eax, [ebp - 0xe4]
mov dword [ebp - 0xe4], str.Grant_Admin_Access
push eax
push 0x104
push 0x457720
push 0x400
push 0
push dword [0x45631c]
push 0x2400
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
sub esp, 8
lea ecx, [ebp - 0x1a8]
push 0x457720
push dword [0x45633c]
sub esp, 8
push 0x457720
call fcn.00402d80
lea ecx, [ebp - 0x1a8]
mov dword [ebp - 4], 0
call fcn.00402fd0
push 0x403720
push 0xfa
push 0x64
push dword [ebp - 0x1a0]
lea eax, [ebp - 0x1a8]
mov dword [0x45754c], eax
call dword [sym.imp.USER32.dll_SetTimer]
movzx ecx, byte [ebp - 0x16b]
test eax, eax
lea eax, [ebp - 0xbc]
mov dword [ebp - 0xbc], 0
mov edx, 1
mov dword [ebp - 0xe0], 0
push eax
cmovne ecx, edx
push 0x2000e
mov byte [ebp - 0x16b], cl
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x41c55f
lea eax, [ebp - 0xe0]
push eax
push 2
push dword [ebp - 0xbc]
call dword [sym.imp.ADVAPI32.dll_DuplicateToken]
push dword [ebp - 0xbc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xfc], eax
mov eax, 1
mov dword [ebp - 0x108], 0xffffffff
mov dword [ebp - 0x104], 0xffffffff
mov dword [0x45771c], 0
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xc0], eax
jbe 0x41cb5a
mov ecx, dword [ebp - 0x1ac]
mov esi, dword [ecx + eax*4]
mov eax, dword [ebp - 0x1a4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
test eax, eax
jne 0x41cbfe
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0xf4], eax
jne 0x41c61d
add eax, eax
mov dword [ebp - 0xf8], eax
lea eax, [eax + eax*2]
shl eax, 3
push eax
mov eax, dword [ebp - 0xb0]
push eax
push 0
push dword [0x45764c]
call dword [sym.imp.KERNEL32.dll_HeapReAlloc]
mov dword [ebp - 0xf0], eax
test eax, eax
je 0x41cb4e
mov ecx, eax
mov dword [ebp - 0xb0], ecx
mov dword [ebp - 0x100], ecx
mov ecx, dword [ebp - 0xf4]
lea ecx, [ecx + ecx*2]
lea edi, [eax + ecx*8]
mov dword [ebp - 0xf0], edi
cmp word [esi], 0x2f
jne 0x41c846
movzx eax, word [esi + 2]
cmp eax, 0x53
je 0x41c635
cmp eax, 0x73
jne 0x41c66a
movzx ecx, word [esi + 4]
cmp ecx, 0x41
je 0x41c643
cmp ecx, 0x61
jne 0x41c66a
movzx ecx, word [esi + 6]
cmp ecx, 0x4f
je 0x41c651
cmp ecx, 0x6f
jne 0x41c66a
movzx ecx, word [esi + 8]
cmp ecx, 0x44
je 0x41c65f
cmp ecx, 0x64
jne 0x41c66a
cmp word [esi + 0xa], 0
je 0x41cac1
cmp eax, 0x41
je 0x41c678
cmp eax, 0x61
jne 0x41c7aa
cmp word [esi + 4], 0x3d
jne 0x41c7aa
lea edx, [esi + 6]
test edx, edx
je 0x41c79d
movzx eax, word [edx]
test ax, ax
je 0x41c79d
nop word [eax + eax]
cmp ax, 9
je 0x41c750
cmp ax, 0x20
je 0x41c750
cmp ax, 0xd
je 0x41c750
cmp ax, 0xa
je 0x41c750
mov ecx, 0xa0
cmp ax, cx
je 0x41c750
cmp ax, 0xc
je 0x41c750
cmp ax, 0xb
je 0x41c750
mov ecx, 0x85
cmp ax, cx
je 0x41c750
mov ecx, 0x2028
cmp ax, cx
je 0x41c750
mov ecx, 0x2029
cmp ax, cx
je 0x41c750
mov ecx, 0x202f
cmp ax, cx
je 0x41c750
mov ecx, 0x1680
cmp ax, cx
je 0x41c750
mov ecx, 0x180e
cmp ax, cx
je 0x41c750
mov ecx, 0x1fff
cmp ax, cx
jbe 0x41c732
mov ecx, 0x200c
cmp ax, cx
jb 0x41c750
mov ecx, 0x3000
cmp ax, cx
je 0x41c750
mov ecx, 0xfeff
cmp ax, cx
je 0x41c750
mov ecx, 0x205f
cmp ax, cx
jne 0x41c75c
movzx eax, word [edx + 2]
add edx, 2
jmp 0x41c6a0
cmp ax, 0x2b
je 0x41c76b
movzx ecx, ax
cmp ax, 0x2d
jne 0x41c772
movzx ecx, word [edx + 2]
add edx, 2
cmp cx, 0x30
jb 0x41cac1
movzx ecx, cx
nop
cmp cx, 0x39
ja 0x41cac1
movzx eax, word [edx + 2]
add edx, 2
mov ecx, eax
cmp eax, 0x30
jae 0x41c780
jmp 0x41cac1
push 0x57
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x41cac1
cmp eax, 0x46
je 0x41c7b8
cmp eax, 0x66
jne 0x41c846
cmp word [esi + 4], 0x3d
jne 0x41c846
cmp word [ebp - 0xb4], 0
jne 0x41c846
lea ecx, [esi + 6]
movzx eax, word [ecx]
cmp eax, 0x20
je 0x41c7dd
cmp eax, 9
jne 0x41c7e2
add ecx, 2
jmp 0x41c7d0
test ax, ax
je 0x41c846
lea eax, [esi + 6]
mov dword [ebp - 0xc8], eax
test eax, eax
je 0x41c81e
push 0x457630
mov edx, 0x7fff
mov ecx, eax
call fcn.00402470
test eax, eax
js 0x41c818
movzx eax, word [0x457630]
mov dword [ebp - 0xb4], eax
jmp 0x41c846
mov eax, dword [ebp - 0xc8]
mov dword [0x457630], 0
test eax, eax
je 0x41c83c
cmp word [eax], 0
mov dword [ebp - 0xb4], 0x7fff
jne 0x41c846
mov dword [ebp - 0xb4], 0
push ecx
lea eax, [ebp - 0x11c]
mov ecx, esi
push eax
lea edx, [ebp - 0xc4]
call fcn.00404830
add esp, 8
test al, al
je 0x41cac1
mov ax, word [0x457638]
mov edx, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0xf0]
push 0
push 0x2000080
mov word [edi + 4], ax
mov eax, dword [ebp - 0x11c]
push 3
push 0
sub eax, edx
push 7
sar eax, 1
push 0x80
movzx edi, ax
push edx
mov word [ecx + 6], di
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
jne 0x41c8c6
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x45771c], eax
cmp eax, 5
je 0x41cb04
jmp 0x41cac1
push 0x23
push 8
lea eax, [ebp - 0x134]
mov dword [ebp - 0x134], 0
push eax
lea eax, [ebp - 0x1bc]
push eax
push esi
call dword [0x4576d0]
test eax, eax
jns 0x41c942
mov eax, dword [ebp - 0xc4]
mov ax, word [eax + 8]
mov word [ebp - 0x1c], ax
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 3
je 0x41c913
cmp eax, 2
jne 0x41caba
push 4
push 0x28
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x1bc]
push eax
push esi
call dword [0x4576d0]
test eax, eax
js 0x41caba
mov ecx, dword [ebp - 0x88]
mov dword [ebp - 0x134], ecx
jmp 0x41c954
mov ecx, dword [ebp - 0x134]
test ecx, 0x400
jne 0x41caba
mov edx, dword [ebp - 0xf0]
mov eax, dword [edx]
xor eax, ecx
and eax, 0xfffffff
xor dword [edx], eax
movzx eax, word [edx + 4]
lea eax, [eax*2 + 2]
push eax
push 0
push dword [0x45764c]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ecx, dword [ebp - 0xf0]
mov dword [ecx + 0x10], eax
test eax, eax
je 0x41cafa
movzx ecx, word [ecx + 4]
lea ecx, [ecx*2 + 2]
push ecx
push dword [ebp - 0xc4]
push eax
call fcn.0043c9e0
mov ecx, dword [ebp - 0xf0]
add esp, 0xc
add dword [ebp - 0x148], 1
mov eax, dword [ebp - 0xf4]
adc dword [ebp - 0x144], 0
add ecx, 0x18
inc dword [ebp - 0x114]
inc eax
test byte [ebp - 0x134], 0x10
mov dword [ebp - 0xf0], ecx
mov dword [ebp - 0xf4], eax
je 0x41caba
mov edx, dword [ebp - 0xf8]
cmp eax, edx
jne 0x41ca3d
lea eax, [edx + edx]
mov dword [ebp - 0xf8], eax
lea eax, [eax + eax*2]
shl eax, 3
push eax
mov eax, dword [ebp - 0xb0]
push eax
push 0
push dword [0x45764c]
call dword [sym.imp.KERNEL32.dll_HeapReAlloc]
mov dword [ebp - 0xf0], eax
test eax, eax
je 0x41cb4e
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0x100], eax
lea ecx, [ecx + ecx*2]
lea ecx, [eax + ecx*8]
mov dword [ebp - 0xf0], ecx
mov ax, word [0x457638]
lea edx, [ebp - 0x118]
push ecx
push 0xc
push dword [ebp - 0xc8]
mov word [ecx + 4], ax
mov word [ecx + 6], di
lea ecx, [ebp - 0x1a8]
mov edi, dword [ebp - 0xc4]
push edi
call fcn.00404c20
add esp, 0x10
test al, al
jne 0x41caae
cmp dword [0x45771c], 0
je 0x41caae
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x1a4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
test eax, eax
jne 0x41d227
cmp dword [0x45771c], 5
je 0x41cae1
mov edi, dword [ebp - 0x100]
mov dword [ebp - 0xb0], edi
jmp 0x41cac1
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0xb0], eax
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp eax, dword [ebp - 0xc0]
jae 0x41cb4e
mov edi, dword [ebp - 0xf0]
jmp 0x41c5a0
cmp dword [0x4574d4], 0
je 0x41d28e
mov dword [0x45771c], 5
jmp 0x41cb04
mov dword [0x45771c], 8
cmp byte [ebp - 0x16b], 0
je 0x41cb18
lea ecx, [ebp - 0x1a8]
call fcn.004036a0
sub esp, 8
lea ecx, [ebp - 0x1a8]
call fcn.00403080
push 0x320
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push dword [0x45771c]
lea ecx, [ebp - 0x1a8]
push 0x5dc
call fcn.00403330
jmp 0x41d227
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0x148], 0
je 0x41d227
push 0x60
lea eax, [ebp - 0x80]
push 0
push eax
call fcn.0042a4e0
mov eax, dword [0x457680]
add esp, 0xc
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0xdc]
mov dword [ebp - 0x80], 0x1f01ff
mov dword [ebp - 0x7c], 1
push eax
push 0x44416c
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 2
mov dword [ebp - 0x60], 0x1200a9
mov dword [ebp - 0x5c], 1
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x4c], 0
call dword [sym.imp.ADVAPI32.dll_ConvertStringSidToSidW]
mov eax, dword [ebp - 0xdc]
xor ecx, ecx
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x154], ecx
cmp eax, 0x63
ja 0x41cc3f
mov dword [ebp - 0x140], 1
jmp 0x41cc50
push 0x64
push dword [ebp - 0x1a0]
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [ebp - 0x1a4]
push 0
push 0
push 0x44413c
mov byte [ebp - 0x16b], 0
mov ecx, dword [eax]
push 2
push eax
call dword [ecx + 0x28]
mov eax, dword [ebp - 0x1a4]
push 0
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x30]
jmp 0x41d227
push 0
push 0x64
push ecx
push eax
call fcn.0043d1d0
mov dword [ebp - 0x140], eax
push 0x64
push dword [ebp - 0x1a0]
mov dword [ebp - 0x168], 1
mov dword [ebp - 0x164], 0
mov byte [ebp - 0x169], 1
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [ebp - 0x1a4]
push 0
push 0
push 0x44413c
mov byte [ebp - 0x16b], 0
mov ecx, dword [eax]
push 2
push eax
call dword [ecx + 0x28]
mov eax, dword [ebp - 0x1a4]
push 0
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x30]
cmp byte [ebp - 0x16f], 0
je 0x41cce4
mov eax, dword [ebp - 0x19c]
mov byte [ebp - 0x16f], 0
test eax, eax
je 0x41cce4
push 0
push 0
push 0x40a
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x50000000
push 0xfffffffffffffff0
push dword [ebp - 0x19c]
call dword [sym.imp.USER32.dll_SetWindowLongW]
xor esi, esi
mov dword [ebp - 0xc0], 0
push 0x22
push esi
push str.rshx32.dll
mov dword [ebp - 0xb4], esi
mov dword [0x457638], esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov edi, eax
test edi, edi
je 0x41cd98
push esi
lea eax, [ebp - 0xc0]
push eax
push 0xd
push edi
call dword [sym.imp.USER32.dll_LoadStringW]
mov dword [0x457638], eax
test eax, eax
je 0x41cd72
lea eax, [eax*2 + 4]
push eax
push esi
push dword [0x45764c]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov esi, eax
mov dword [ebp - 0xb4], esi
test esi, esi
je 0x41cd72
mov ecx, dword [0x457638]
add ecx, ecx
push ecx
push dword [ebp - 0xc0]
push esi
call fcn.0043c9e0
mov eax, dword [0x457638]
add esp, 0xc
xor ecx, ecx
mov word [esi + eax*2], cx
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
test esi, esi
je 0x41cd98
mov eax, dword [0x457638]
mov dword [esi + eax*2], 0x20
mov al, byte [0x457638]
inc al
mov byte [ebp - 0xa9], al
jmp 0x41cdd1
mov eax, 0x410
mov byte [ebp - 0xb5], 0
cmp word [0x4576ac], ax
jne 0x41cdc0
mov dword [ebp - 0xb4], str.Impostazione_delle_autorizzazioni_su_:
mov byte [ebp - 0xa9], 0x27
jmp 0x41cdd1
mov dword [ebp - 0xb4], str.Setting_permissions_on_:
mov byte [ebp - 0xa9], 0x19
mov ecx, dword [0x45754c]
mov ecx, dword [ecx + 0x60]
call fcn.00428880
movzx esi, byte [ebp - 0xa9]
mov dword [ebp - 0x1b0], eax
lea edi, [esi + esi]
push edi
push dword [ebp - 0xb4]
push 0x457720
call fcn.0043c9e0
add esp, 0xc
lea eax, [ebp - 0x1b0]
push eax
mov eax, 0x104
sub eax, esi
push eax
lea eax, [edi + 0x457720]
push eax
push 0x400
push 0
push dword [0x45639c]
push 0x2400
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
mov eax, dword [ebp - 0x1a4]
push 0
push 0
push 0x457720
mov ecx, dword [eax]
push 1
push eax
call dword [ecx + 0x28]
cmp byte [ebp - 0xb5], 0
mov dword [ebp - 0x1a8], eax
je 0x41ce6b
push dword [ebp - 0xb4]
push 0
push dword [0x45764c]
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [ebp - 0x1a4]
push 0
mov byte [ebp - 0x169], 1
push 1
mov ecx, dword [eax]
push eax
call dword [ecx + 0x30]
mov edi, dword [ebp - 0xb0]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xf0], edi
test eax, eax
je 0x41d20a
nop dword [eax + eax]
mov eax, dword [ebp - 0x1a4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
test eax, eax
jne 0x41d20a
movzx ecx, word [edi + 6]
mov eax, dword [edi + 0x10]
push 0
push 1
lea eax, [eax + ecx*2]
mov ecx, dword [ebp - 0x1a4]
push eax
push 2
push ecx
mov edx, dword [ecx]
call dword [edx + 0x28]
mov dword [ebp - 0x1a8], eax
xor edi, edi
lea eax, [ebp - 0xd8]
mov dword [ebp - 0xd8], 0
push eax
push edi
lea eax, [ebp - 0xcc]
mov dword [ebp - 0xd0], 0
push eax
push edi
lea eax, [ebp - 0x120]
mov dword [ebp - 0xc8], edi
push eax
mov eax, dword [ebp - 0xb0]
push 7
push 1
mov byte [ebp - 0xa9], 0
push dword [eax + 0x10]
call dword [sym.imp.ADVAPI32.dll_GetNamedSecurityInfoW]
mov esi, eax
mov dword [0x45771c], esi
test esi, esi
jne 0x41d125
push dword [0x457680]
push dword [ebp - 0x120]
call dword [sym.imp.ADVAPI32.dll_EqualSid]
mov dword [ebp - 0xc0], eax
lea eax, [ebp - 0x124]
push 0x45602c
push eax
call dword [sym.imp.ADVAPI32.dll_MapGenericMask]
mov ecx, dword [ebp - 0xcc]
xor eax, eax
cmp ax, word [ecx + 4]
jae 0x41d04a
lea eax, [ebp - 0xd4]
movzx edi, si
push eax
push edi
push ecx
call dword [sym.imp.ADVAPI32.dll_GetAce]
test eax, eax
je 0x41d025
mov eax, dword [ebp - 0xd4]
cmp byte [eax], 0
jne 0x41cff0
push dword [ebp - 0xdc]
add eax, 8
push eax
call dword [sym.imp.ADVAPI32.dll_EqualSid]
test eax, eax
jne 0x41cfdb
mov eax, dword [ebp - 0xd4]
push dword [0x457684]
add eax, 8
push eax
call dword [sym.imp.ADVAPI32.dll_EqualSid]
test eax, eax
jne 0x41cfdb
mov eax, dword [ebp - 0xd4]
jmp 0x41cff0
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0xc8]
or ecx, dword [eax + 4]
mov dword [ebp - 0xc8], ecx
test byte [eax + 1], 0x1f
jne 0x41d025
mov al, byte [eax]
cmp al, 1
je 0x41d008
cmp al, 6
je 0x41d008
cmp al, 0xa
je 0x41d008
cmp al, 0xc
jne 0x41d025
push edi
push dword [ebp - 0xcc]
call dword [sym.imp.ADVAPI32.dll_DeleteAce]
mov al, 1
add esi, 0xffff
mov byte [ebp - 0xa9], al
jmp 0x41d02b
mov al, byte [ebp - 0xa9]
mov ecx, dword [ebp - 0xcc]
inc esi
cmp si, word [ecx + 4]
jb 0x41cf80
test al, al
jne 0x41d0e0
mov edi, dword [ebp - 0xc8]
and edi, 0x1200a9
cmp edi, 0x1200a9
jne 0x41d0e0
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x12c]
push eax
push 0x457928
push 0x45602c
push dword [ebp - 0x124]
push dword [ebp - 0xbc]
push dword [ebp - 0xd8]
call dword [sym.imp.ADVAPI32.dll_AccessCheck]
test eax, eax
je 0x41d0da
cmp dword [ebp - 0x128], 0
je 0x41d0da
cmp dword [ebp - 0xc0], 0
mov edi, dword [ebp - 0xb0]
jne 0x41d0d2
push 0
push 0
push 0
push dword [0x457680]
push 1
push 1
push dword [edi + 0x10]
call dword [sym.imp.ADVAPI32.dll_SetNamedSecurityInfoW]
mov esi, eax
mov dword [0x45771c], esi
jmp 0x41d12b
mov esi, dword [0x45771c]
jmp 0x41d12b
mov ecx, dword [ebp - 0xcc]
lea eax, [ebp - 0xd0]
push eax
push ecx
lea eax, [ebp - 0x80]
push eax
push 2
call dword [sym.imp.ADVAPI32.dll_SetEntriesInAclW]
mov edi, dword [ebp - 0xb0]
mov esi, eax
mov dword [0x45771c], esi
test esi, esi
jne 0x41d12b
push eax
push dword [ebp - 0xd0]
push eax
cmp dword [ebp - 0xc0], eax
je 0x41d11b
push eax
push 4
jmp 0x41d0bd
push dword [0x457680]
push 5
jmp 0x41d0bd
mov edi, dword [ebp - 0xb0]
mov eax, dword [ebp - 0xd8]
test eax, eax
je 0x41d142
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov esi, dword [0x45771c]
mov eax, dword [ebp - 0xd0]
test eax, eax
je 0x41d159
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov esi, dword [0x45771c]
add dword [ebp - 0x148], 0xffffffff
mov ecx, dword [ebp - 0x150]
adc dword [ebp - 0x144], 0xffffffff
add ecx, 1
mov eax, dword [ebp - 0x14c]
push 0
push dword [ebp - 0x140]
adc eax, 0
mov dword [ebp - 0x150], ecx
push eax
push ecx
mov dword [ebp - 0x14c], eax
call fcn.0043d1d0
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], edx
cmp edx, dword [ebp - 0x164]
jb 0x41d1c3
ja 0x41d1b2
cmp eax, dword [ebp - 0x168]
jbe 0x41d1c3
lea ecx, [ebp - 0x1a8]
call fcn.004031a0
mov esi, dword [0x45771c]
test esi, esi
je 0x41d1e6
cmp dword [ebp - 0xb4], 1
lea ecx, [ebp - 0x1a8]
sete al
movzx eax, al
push eax
push esi
push 0x3e8
call fcn.00403330
mov esi, dword [ebp - 0xb4]
add edi, 0x18
dec esi
mov dword [ebp - 0xb0], edi
mov dword [ebp - 0xb4], esi
mov dword [ebp - 0xf0], edi
test esi, esi
jne 0x41ceb0
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 0x160], 0x64
call fcn.004031a0
push 0x258
call dword [sym.imp.KERNEL32.dll_Sleep]
push dword [ebp - 0xdc]
call dword [sym.imp.KERNEL32.dll_LocalFree]
push dword [ebp - 0xc4]
push 0
push dword [0x45764c]
call dword [sym.imp.KERNEL32.dll_HeapFree]
sub esp, 8
lea ecx, [ebp - 0x118]
call fcn.00403870
add esp, 8
lea ecx, [ebp - 0x1a8]
call fcn.00403270
lea ecx, [ebp - 0x1a8]
call fcn.00402f30
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00428cd6
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push edi
push 0
push dword [0x45764c]
call dword [sym.imp.KERNEL32.dll_HeapFree]
sub esp, 0xc
lea edx, [ebp - 0x118]
lea ecx, [ebp - 0x1a8]
call fcn.00403910
int3