Function at 0x1d0e300
Capabilities:
Acquire debug privileges
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x9c
push ebx
mov ebx, dword [esp + 0xa4]
push ebp
xor ebp, ebp
mov dword [esp + 0x14], str.SeCreateTokenPrivilege
mov dword [esp + 0x18], str.SeAssignPrimaryTokenPrivilege
mov dword [esp + 0x1c], str.SeLockMemoryPrivilege
mov dword [esp + 0x20], str.SeIncreaseQuotaPrivilege
mov dword [esp + 0x24], str.SeUnsolicitedInputPrivilege
mov dword [esp + 0x28], str.SeMachineAccountPrivilege
mov dword [esp + 0x2c], str.SeTcbPrivilege
mov dword [esp + 0x30], str.SeSecurityPrivilege
mov dword [esp + 0x34], str.SeTakeOwnershipPrivilege
mov dword [esp + 0x38], str.SeLoadDriverPrivilege
mov dword [esp + 0x3c], str.SeSystemProfilePrivilege
mov dword [esp + 0x40], str.SeSystemtimePrivilege
mov dword [esp + 0x44], str.SeProfileSingleProcessPrivilege
mov dword [esp + 0x48], str.SeIncreaseBasePriorityPrivilege
mov dword [esp + 0x4c], str.SeCreatePagefilePrivilege
mov dword [esp + 0x50], str.SeCreatePermanentPrivilege
mov dword [esp + 0x54], str.SeBackupPrivilege
mov dword [esp + 0x58], str.SeRestorePrivilege
mov dword [esp + 0x5c], str.SeShutdownPrivilege
mov dword [esp + 0x60], str.SeDebugPrivilege
mov dword [esp + 0x64], str.SeAuditPrivilege
mov dword [esp + 0x68], str.SeSystemEnvironmentPrivilege
mov dword [esp + 0x6c], str.SeChangeNotifyPrivilege
mov dword [esp + 0x70], str.SeRemoteShutdownPrivilege
mov dword [esp + 0x74], str.SeUndockPrivilege
mov dword [esp + 0x78], str.SeSyncAgentPrivilege
mov dword [esp + 0x7c], str.SeEnableDelegationPrivilege
mov dword [esp + 0x80], str.SeManageVolumePrivilege
mov dword [esp + 0x84], str.SeImpersonatePrivilege
mov dword [esp + 0x88], str.SeCreateGlobalPrivilege
mov dword [esp + 0x8c], str.SeTrustedCredManAccessPrivilege
mov dword [esp + 0x90], str.SeRelabelPrivilege
mov dword [esp + 0x94], str.SeIncreaseWorkingSetPrivilege
mov dword [esp + 0x98], str.SeTimeZonePrivilege
mov dword [esp + 0x9c], str.SeCreateSymbolicLinkPrivilege
mov dword [esp + 0xa0], ebp
cmp ebx, ebp
jne 0x1d0e457
pop ebp
xor eax, eax
pop ebx
add esp, 0x9c
ret
push edi
push 0x1b0
call fcn.01c60190
mov edi, eax
add esp, 4
cmp edi, ebp
jne 0x1d0e477
pop edi
pop ebp
xor eax, eax
pop ebx
add esp, 0x9c
ret
push esi
mov esi, dword [esp + 0xb4]
mov dword [esp + 0x18], ebp
mov eax, str.SeCreateTokenPrivilege
jmp 0x1d0e497
mov ebx, dword [esp + 0xb0]
lea ecx, [esp + 0x10]
push ecx
push eax
push ebp
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x20], ebp
call dword [0x1da433c]
test eax, eax
je 0x1d0e502
mov edx, dword [ebx]
xor ecx, ecx
cmp edx, ebp
jbe 0x1d0e4d6
mov ebp, dword [esp + 0x10]
lea eax, [ebx + 4]
mov ebx, dword [esp + 0x14]
cmp ebx, dword [eax + 4]
jne 0x1d0e4cc
cmp ebp, dword [eax]
je 0x1d0e500
inc ecx
add eax, 0xc
cmp ecx, edx
jb 0x1d0e4c3
xor ebp, ebp
mov eax, dword [esi]
lea edx, [eax + eax*2]
mov dword [edi + edx*4 + 8], 4
mov eax, dword [esi]
mov ecx, dword [esp + 0x14]
lea eax, [eax + eax*2]
mov dword [edi + eax*4 + 4], ecx
mov eax, dword [esi]
lea edx, [eax + eax*2]
mov eax, dword [esp + 0x10]
mov dword [edi + edx*4], eax
inc dword [esi]
jmp 0x1d0e502
xor ebp, ebp
mov eax, dword [esp + 0x18]
inc eax
mov dword [esp + 0x18], eax
mov eax, dword [esp + eax*4 + 0x1c]
cmp eax, ebp
jne 0x1d0e490
pop esi
mov eax, edi
pop edi
pop ebp
pop ebx
add esp, 0x9c
ret