Function at 0x1400385b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x198
mov al, 0xbc
mov word [rsp + 0x182], 0xcda9
mov r8b, byte [rsp + 0x195]
mov r9b, r8b
not r9b
mov byte [rsp + 0x195], r9b
mov byte [rsp + 0x181], 0x58
mov dword [rsp + 0x17c], 0x4396a3f2
mov r9b, r8b
or r9b, 0xdb
mov byte [rsp + 0x195], r9b
mov qword [rsp + 0x170], 0x110199e7
mov r10, qword [rsp + 0x188]
mov qword [rsp + 0x188], 0
mov r11d, dword [rsp + 0x17c]
mov esi, r11d
add esi, 0x1280ab5f
mov dword [rsp + 0xbc], esi
movzx esi, word [rsp + 0x196]
mov di, si
add esi, 0x5568
mov bx, si
lea r14, [rsp + 0x140]
mov word [rsp + 0x196], bx
mov byte [rsp + 0x195], 0xe6
movaps xmm0, xmmword [0x1400420e0]
movaps xmmword [rsp + 0x140], xmm0
mov r15, r10
xor r15, 0xc09960f
mov qword [rsp + 0x188], r15
mov r9b, al
sub r9b, byte [rsp + 0x181]
mov bpl, r8b
and bpl, bpl
mov byte [rsp + 0x195], bpl
mov byte [rsp + 0x150], r9b
sub al, byte [rsp + 0x181]
mov byte [rsp + 0x151], al
mov dword [rsp + 0x184], 0x14ad47f
mov al, byte [rsp + 0x181]
mov esi, r11d
sub esi, 0x50ca0471
mov dword [rsp + 0x184], esi
add al, 0x1a
mov byte [rsp + 0x195], 0x26
mov byte [rsp + 0x152], al
mov bx, di
add bx, 0x26d
mov word [rsp + 0x196], bx
mov al, byte [rsp + 0x181]
add al, 0xd
mov byte [rsp + 0x153], al
mov al, byte [rsp + 0x181]
mov esi, r11d
xor esi, 0xffffffff
mov dword [rsp + 0x184], esi
xor al, 0x2b
mov byte [rsp + 0x154], al
mov esi, r11d
sub esi, 0x6e2e2d76
mov dword [rsp + 0x184], esi
mov al, r8b
sub al, 0x78
mov r9b, byte [rsp + 0x181]
mov byte [rsp + 0x195], al
xor r9b, 0x2b
mov byte [rsp + 0x155], r9b
mov esi, r11d
or esi, esi
mov dword [rsp + 0x184], esi
imul bx, di, 0x7bf5
mov al, byte [rsp + 0x181]
add al, 0xa8
mov word [rsp + 0x196], bx
mov byte [rsp + 0x156], al
mov dword [rsp + 0x184], 0xcdb70acf
mov al, byte [rsp + 0x181]
add al, 0x7c
mov qword [rsp + 0x188], r10
mov byte [rsp + 0x157], al
mov esi, r11d
and esi, 0x3830e433
mov dword [rsp + 0x184], esi
mov qword [rsp + 0xa0], 0
mov dword [rsp + 0x184], 0x3c461127
cmp rdx, 0
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x78], rcx
mov qword [rsp + 0x70], r14
mov byte [rsp + 0x6f], r8b
mov qword [rsp + 0x60], r10
mov dword [rsp + 0x5c], r11d
mov word [rsp + 0x5a], di
je 0x140038e44
jmp 0x140038faf
mov rax, qword [rsp + 0x90]
mov ecx, dword [rax + 0x88]
mov eax, ecx
mov dl, byte [rsp + 0x6f]
xor dl, 0x2c
mov ecx, dword [rsp + 0x17c]
add ecx, 0xbc695c0e
mov r8, qword [rsp + 0x128]
mov byte [rsp + 0x195], dl
add r8, rax
mov qword [rsp + 0xf8], r8
mov r9d, dword [rsp + 0x5c]
add r9d, r9d
mov dword [rsp + 0x184], r9d
mov rax, qword [rsp + 0xf8]
mov dl, byte [rsp + 0x6f]
xor dl, dl
mov byte [rsp + 0x195], dl
mov r9d, dword [rax + 0x20]
mov eax, r9d
mov r8, qword [rsp + 0x128]
mov r10w, word [rsp + 0x5a]
push rsp
and al, 0x5a
xor eax, eax
mov ecx, eax
mov eax, 0x85296ffc
mov edx, 0x5ccd6fcc
mov r8d, 0x67faf848
mov r9d, dword [rsp + 0x5c]
xor r9d, r9d
mov dword [rsp + 0x184], r9d
sub r8d, dword [rsp + 0x17c]
sub edx, dword [rsp + 0x17c]
mov qword [rsp + 0x188], 0x36e9052e
sub eax, dword [rsp + 0x17c]
mov r10, rsp
mov qword [r10 + 0x30], 0
mov qword [r10 + 0x28], 0
mov qword [r10 + 0x20], 0
mov r10, qword [sym.imp.ADVAPI32.dll_AddAccessDeniedObjectAce]
xor r9d, r9d
mov r11d, r9d
mov qword [rsp + 0x50], rcx
mov rcx, r11
mov r9d, eax
call r10
xor edx, edx
mov ecx, edx
mov dword [rsp + 0x4c], eax
mov rax, rcx
add rsp, 0x198
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
ret
call fcn.140037cf0
xor ecx, ecx
mov edx, ecx
mov ecx, 0xbbecefb4
mov r8, rax
mov qword [rsp + 0x128], r8
mov r8, qword [rsp + 0x60]
or r8, r8
mov qword [rsp + 0x188], r8
mov r9d, dword [rsp + 0x17c]
sub ecx, dword [rsp + 0x17c]
mov r10d, dword [rsp + 0x5c]
and r10d, r10d
xor r9d, 0x4396e6a2
mov r8, qword [rsp + 0x128]
movsxd rax, dword [rax + 0x3c]
mov r11, r8
add r11, rax
mov esi, dword [rsp + 0xbc]
mov dword [rsp + 0x184], r10d
mov rdi, qword [rsp + 0x60]
xor rdi, 0xffffffffffffffff
mov r10d, dword [r8 + rax]
mov qword [rsp + 0x188], rdi
mov dword [rsp + 0x184], 0x7a01bc
cmp r10d, r9d
cmove rdx, r11
mov qword [rsp + 0x90], rdx
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x188], rax
mov r9d, dword [rsp + 0x5c]
or r9d, 0x3f19268c
mov dword [rsp + 0x184], r9d
cmp ecx, esi
jae 0x1400387ff
jmp 0x140038d1b