Function at 0x45d3c0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x240
mov eax, dword [0x5365f0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
xor ebx, ebx
push 0x11c
lea ecx, [ebp - 0x1e8]
push ebx
push ecx
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x208], ebx
mov dword [ebp - 0x210], ebx
mov dword [ebp - 0x1ec], ebx
call fcn.004da450
xor edx, edx
cmp dword [ebp + 0xc], 3
push 0xc6
sete dl
lea ecx, [ebp - 0xca]
xor eax, eax
push ebx
push ecx
mov word [ebp - 0xcc], ax
mov dword [ebp - 0x22c], edx
call fcn.004da450
mov edi, dword [sym.imp.KERNEL32.dll_LocalAlloc]
add esp, 0x18
push 0x44
push ebx
mov dword [ebp - 0x218], ebx
xor esi, esi
mov dword [ebp - 0x230], 0x44
call edi
mov dword [ebp - 0x218], eax
cmp eax, ebx
je 0x45d472
lea edx, [ebp - 0x230]
push edx
push eax
push ebx
push 0x16
call dword [sym.imp.ADVAPI32.dll_CreateWellKnownSid]
mov esi, eax
mov eax, dword [ebp - 0x218]
neg esi
sbb esi, esi
and esi, eax
push 0x44
mov dword [ebp - 0x200], esi
push ebx
mov dword [ebp - 0x21c], ebx
xor esi, esi
mov dword [ebp - 0x234], 0x44
call edi
mov dword [ebp - 0x21c], eax
cmp eax, ebx
je 0x45d4b8
lea ecx, [ebp - 0x234]
push ecx
push eax
push ebx
push 0x1a
call dword [sym.imp.ADVAPI32.dll_CreateWellKnownSid]
mov esi, eax
mov eax, dword [ebp - 0x21c]
lea edx, [ebp - 0x224]
push edx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
neg esi
sbb esi, esi
push ebx
and esi, eax
push 1
lea eax, [ebp - 0x1f4]
push eax
mov dword [ebp - 0x1f8], esi
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x240], 0x44
mov dword [ebp - 0x1f4], ebx
mov word [ebp - 0x1f0], 0x100
call dword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
neg eax
sbb eax, eax
and eax, dword [ebp - 0x224]
push 0x44
push ebx
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 0x220], ebx
xor esi, esi
mov dword [ebp - 0x23c], 0x44
call edi
mov dword [ebp - 0x220], eax
cmp eax, ebx
je 0x45d54b
lea ecx, [ebp - 0x23c]
push ecx
push eax
push ebx
push 0x1d
call dword [sym.imp.ADVAPI32.dll_CreateWellKnownSid]
mov esi, eax
mov eax, dword [ebp - 0x220]
neg esi
sbb esi, esi
and esi, eax
push 0x44
mov dword [ebp - 0x204], esi
push ebx
mov dword [ebp - 0x214], ebx
xor esi, esi
mov dword [ebp - 0x228], 0x44
call edi
mov dword [ebp - 0x214], eax
cmp eax, ebx
je 0x45d591
lea edx, [ebp - 0x228]
push edx
push eax
push ebx
push 0x1b
call dword [sym.imp.ADVAPI32.dll_CreateWellKnownSid]
mov esi, eax
mov eax, dword [ebp - 0x214]
neg esi
sbb esi, esi
and esi, eax
mov dword [ebp - 0x20c], esi
cmp dword [ebp - 0x1f8], ebx
je 0x45d906
mov edx, dword [ebp - 0x200]
cmp edx, ebx
je 0x45d906
cmp dword [ebp - 0x1fc], ebx
je 0x45d906
cmp dword [ebp - 0x204], ebx
je 0x45d906
cmp esi, ebx
je 0x45d906
mov edi, dword [ebp - 0x22c]
mov eax, 0x10000000
mov ecx, 3
mov dword [ebp - 0x1d0], edx
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x1e8], 1
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 0x1e4], ecx
mov dword [ebp - 0x1e0], ebx
mov dword [ebp - 0x1dc], ebx
mov dword [ebp - 0x1d8], ebx
mov dword [ebp - 0x1d4], 2
cmp edi, ebx
je 0x45d636
mov eax, edx
neg eax
sbb eax, eax
and eax, 0xfffffeea
add eax, 0xd0156
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x1cc], eax
mov eax, edx
neg eax
sbb eax, eax
and eax, 0x116
mov dword [ebp - 0x1c4], ecx
mov ecx, dword [ebp - 0x1f8]
add eax, 0xa01200a9
mov dword [ebp - 0x1c8], esi
mov dword [ebp - 0x1c0], ebx
mov dword [ebp - 0x1bc], ebx
mov dword [ebp - 0x1b8], ebx
mov dword [ebp - 0x1b4], 2
mov dword [ebp - 0x1b0], ecx
mov dword [ebp - 0x1a8], 1
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x1a4], 3
mov dword [ebp - 0x1a0], ebx
mov dword [ebp - 0x19c], ebx
mov dword [ebp - 0x198], ebx
mov dword [ebp - 0x194], 2
mov dword [ebp - 0x190], ecx
cmp edi, ebx
je 0x45d6d7
mov ecx, edx
neg ecx
sbb ecx, ecx
and ecx, 0xfffffeea
add ecx, 0xd0156
jmp 0x45d6dc
mov ecx, 0x10000000
mov dword [ebp - 0x18c], ecx
mov ecx, dword [ebp - 0x204]
mov dword [ebp - 0x188], esi
mov dword [ebp - 0x184], 3
mov dword [ebp - 0x180], ebx
mov dword [ebp - 0x17c], ebx
mov dword [ebp - 0x178], ebx
mov dword [ebp - 0x174], 2
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x168], 1
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x164], 3
mov dword [ebp - 0x160], ebx
mov dword [ebp - 0x15c], ebx
mov dword [ebp - 0x158], ebx
mov dword [ebp - 0x154], 2
mov dword [ebp - 0x150], ecx
cmp edi, ebx
je 0x45d76e
mov ecx, edx
neg ecx
sbb ecx, ecx
and ecx, 0xfffffeea
add ecx, 0xd0156
jmp 0x45d773
mov ecx, 0x10000000
mov dword [ebp - 0x14c], ecx
mov ecx, dword [ebp - 0x20c]
mov dword [ebp - 0x148], esi
mov dword [ebp - 0x144], 3
mov dword [ebp - 0x140], ebx
mov dword [ebp - 0x13c], ebx
mov dword [ebp - 0x138], ebx
mov dword [ebp - 0x134], 2
mov dword [ebp - 0x130], ecx
mov dword [ebp - 0x128], 1
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x124], 3
mov dword [ebp - 0x120], ebx
mov dword [ebp - 0x11c], ebx
mov dword [ebp - 0x118], ebx
mov dword [ebp - 0x114], 2
mov dword [ebp - 0x110], ecx
cmp edi, ebx
je 0x45d803
neg edx
sbb edx, edx
and edx, 0xfffffeea
add edx, 0xd0156
jmp 0x45d808
mov edx, 0x10000000
mov dword [ebp - 0xec], eax
mov ecx, 2
lea eax, [ebp - 0x208]
push eax
mov dword [ebp - 0xf4], ecx
mov dword [ebp - 0xd4], ecx
push ebx
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x108], esi
mov esi, dword [ebp - 0x1fc]
mov dword [ebp - 0x10c], edx
mov edx, 3
push ecx
push 9
mov dword [ebp - 0x104], edx
mov dword [ebp - 0x100], ebx
mov dword [ebp - 0xfc], ebx
mov dword [ebp - 0xf8], ebx
mov dword [ebp - 0xf0], esi
mov dword [ebp - 0xe8], 1
mov dword [ebp - 0xe4], edx
mov dword [ebp - 0xe0], ebx
mov dword [ebp - 0xdc], ebx
mov dword [ebp - 0xd8], ebx
mov dword [ebp - 0xd0], esi
call dword [sym.imp.ADVAPI32.dll_SetEntriesInAclW]
cmp eax, ebx
je 0x45d8bc
push eax
push str.Error___SetEntriesInAcl___Failed._ErrorCode:__d
lea edx, [ebp - 0xcc]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0xcc]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x45d935
mov ecx, dword [ebp - 0x208]
mov edx, edi
neg edx
sbb edx, edx
and edx, dword [ebp - 0x200]
xor eax, eax
push ebx
push ecx
mov ecx, dword [ebp - 0x238]
cmp edi, ebx
setne al
push ebx
push edx
add eax, 0x80000004
push eax
push 1
push ecx
call dword [sym.imp.ADVAPI32.dll_SetNamedSecurityInfoW]
cmp eax, ebx
je 0x45d8fa
push eax
push str.Error___SetNamedSecurityInfo___Failed._ErrorCode:__d
jmp 0x45d89d
mov dword [ebp - 0x210], 1
jmp 0x45d935
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp - 0xcc]
push 0x519190
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea edx, [ebp - 0xcc]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov esi, dword [ebp - 0x1fc]
mov eax, dword [ebp - 0x208]
mov ebx, dword [sym.imp.KERNEL32.dll_LocalFree]
push eax
call ebx
mov ecx, dword [ebp - 0x200]
push ecx
call ebx
mov edx, dword [ebp - 0x1f8]
push edx
call ebx
push esi
call ebx
mov eax, dword [ebp - 0x204]
push eax
call ebx
mov ecx, dword [ebp - 0x20c]
push ecx
call ebx
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x210]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004d5564
mov esp, ebp
pop ebp
ret