Function at 0x1401ce230
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
mov rbx, rcx
xor ebp, ebp
mov ecx, dword [rcx + 0x8c]
mov rsi, rdx
movsxd r8, dword [rbx + 0x88]
test ecx, ecx
je 0x1401ce29d
mov edx, 1
mov eax, 8
shl dl, cl
sub eax, ecx
movzx ecx, al
dec dl
shl dl, cl
mov eax, 7
and byte [r8 + rbx + 0x47], dl
sub eax, dword [rbx + 0x8c]
movsxd rdx, dword [rbx + 0x88]
movzx ecx, byte [rdx + rbx + 0x47]
btc ecx, eax
mov byte [rdx + rbx + 0x47], cl
mov dword [rbx + 0x8c], ebp
jmp 0x1401ce2a9
mov byte [r8 + rbx + 0x48], 0x80
inc dword [rbx + 0x88]
mov eax, dword [rbx + 0x88]
cmp eax, 0x38
jle 0x1401ce2f5
cmp eax, 0x40
jge 0x1401ce2db
nop dword [rax]
movsxd rax, dword [rbx + 0x88]
mov byte [rax + rbx + 0x48], bpl
inc dword [rbx + 0x88]
cmp dword [rbx + 0x88], 0x40
jl 0x1401ce2c0
lea rdx, [rbx + 0x48]
mov r8d, reloc.advapi32.dll_AdjustTokenPrivileges
mov rcx, rbx
call fcn.1401ce860
mov dword [rbx + 0x88], ebp
jmp 0x1401ce300
jge 0x1401ce31b
nop word [rax + rax]
movsxd rax, dword [rbx + 0x88]
mov byte [rax + rbx + 0x48], bpl
inc dword [rbx + 0x88]
cmp dword [rbx + 0x88], 0x38
jl 0x1401ce300
add dword [rbx + 0x40], 1
jne 0x1401ce324
inc dword [rbx + 0x44]
mov dword [rbx + 0x88], reloc.advapi32.dll_AdjustTokenPrivileges
nop
movsxd rcx, dword [rbx + 0x88]
lea eax, [rcx - 1]
mov dword [rbx + 0x88], eax
movzx eax, byte [rbx + 0x40]
mov byte [rcx + rbx + 0x47], al
shr dword [rbx + 0x40], 8
mov eax, dword [rbx + 0x88]
cmp eax, 0x3c
jg 0x1401ce330
cmp eax, 0x38
jle 0x1401ce385
nop dword [rax]
movsxd rcx, dword [rbx + 0x88]
lea eax, [rcx - 1]
mov dword [rbx + 0x88], eax
movzx eax, byte [rbx + 0x44]
mov byte [rcx + rbx + 0x47], al
shr dword [rbx + 0x44], 8
cmp dword [rbx + 0x88], 0x38
jg 0x1401ce360
mov r8d, reloc.advapi32.dll_AdjustTokenPrivileges
lea rdx, [rbx + 0x48]
mov rcx, rbx
call fcn.1401ce860
mov rcx, rbx
call fcn.1401ce660
movzx eax, byte [rbx + 0x20]
mov byte [rsi], al
movzx eax, byte [rbx + 0x21]
mov byte [rsi + 1], al
movzx eax, byte [rbx + 0x22]
mov byte [rsi + 2], al
movzx eax, byte [rbx + 0x23]
mov byte [rsi + 3], al
movzx eax, byte [rbx + 0x24]
mov byte [rsi + 4], al
movzx eax, byte [rbx + 0x25]
mov byte [rsi + 5], al
movzx eax, byte [rbx + 0x26]
mov byte [rsi + 6], al
movzx eax, byte [rbx + 0x27]
mov byte [rsi + 7], al
movzx eax, byte [rbx + 0x28]
mov byte [rsi + 8], al
movzx eax, byte [rbx + 0x29]
mov byte [rsi + 9], al
movzx eax, byte [rbx + 0x2a]
mov byte [rsi + 0xa], al
movzx eax, byte [rbx + 0x2b]
mov byte [rsi + 0xb], al
movzx eax, byte [rbx + 0x2c]
mov byte [rsi + 0xc], al
movzx eax, byte [rbx + 0x2d]
mov byte [rsi + 0xd], al
movzx eax, byte [rbx + 0x2e]
mov byte [rsi + 0xe], al
movzx eax, byte [rbx + 0x2f]
mov byte [rsi + 0xf], al
movzx eax, byte [rbx + 0x30]
mov byte [rsi + 0x10], al
movzx eax, byte [rbx + 0x31]
mov byte [rsi + 0x11], al
movzx eax, byte [rbx + 0x32]
mov byte [rsi + 0x12], al
movzx eax, byte [rbx + 0x33]
mov byte [rsi + 0x13], al
movzx eax, byte [rbx + 0x34]
mov byte [rsi + 0x14], al
movzx eax, byte [rbx + 0x35]
mov byte [rsi + 0x15], al
movzx eax, byte [rbx + 0x36]
mov byte [rsi + 0x16], al
movzx eax, byte [rbx + 0x37]
mov byte [rsi + 0x17], al
movzx eax, byte [rbx + 0x38]
mov byte [rsi + 0x18], al
movzx eax, byte [rbx + 0x39]
mov byte [rsi + 0x19], al
movzx eax, byte [rbx + 0x3a]
mov byte [rsi + 0x1a], al
movzx eax, byte [rbx + 0x3b]
mov byte [rsi + 0x1b], al
movzx eax, byte [rbx + 0x3c]
mov byte [rsi + 0x1c], al
movzx eax, byte [rbx + 0x3d]
mov byte [rsi + 0x1d], al
movzx eax, byte [rbx + 0x3e]
mov byte [rsi + 0x1e], al
movzx eax, byte [rbx + 0x3f]
mov byte [rsi + 0x1f], al
mov qword [rbx], rbp
mov qword [rbx + 8], rbp
mov qword [rbx + 0x10], rbp
mov qword [rbx + 0x18], rbp
mov qword [rbx + 0x48], rbp
mov qword [rbx + 0x50], rbp
mov qword [rbx + 0x58], rbp
mov qword [rbx + 0x60], rbp
mov qword [rbx + 0x68], rbp
mov qword [rbx + 0x70], rbp
mov qword [rbx + 0x78], rbp
mov rsi, qword [rsp + 0x40]
mov qword [rbx + 0x80], rbp
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret