Function at 0x1401d9000
Capabilities:
Encode data using xor

Disassembly:
push rax
push rcx
push rdx
push rbx
push rbp
push rsi
push rdi
push r8
push r9
push r10
push r11
push r12
push r13
push r14
push r15
push rbp
mov rbp, rsp
sub rsp, 0x20
and rsp, 0xfffffffffffffff0
lea rcx, [0x14014ca00]
push 0
pop rdx
push rcx
xor dword [rcx + 0x1b8], 0x4fad0454
add dword [rcx + 0x194], 0x52336fea
add dword [rcx + 0x374], 0x17794374
not dword [rcx + 0x2a0]
not dword [rcx + 0x11c]
sub dword [rcx + 0xfc], 0x21237d8b
xor dword [rcx + 0x10], 0x59743c8
not dword [rcx + 0x384]
xor dword [rcx + 0x3dc], 0x7697727b
xor dword [rcx + 0xe0], 0x5d086906
sub dword [rcx + 0x224], 0x3c88728b
add dword [rcx + 0x27c], 0x5314450e
xor dword [rcx + 0x228], 0x6f7e0119
not dword [rcx + 0x274]
not dword [rcx + 0x1e8]
add dword [rcx + 0x284], 0x20e36735
sub dword [rcx + 0x254], 0x158c4343
xor dword [rcx + 0xd4], 0x1a784df6
xor dword [rcx + 0x1e0], 0x4632c4a
add dword [rcx + 0x2b0], 0x62315b1c
sub dword [rcx + 0x244], 0x10a5664c
xor dword [rcx + 0x2f0], 0x78836f2d
add dword [rcx + 8], 0x38092fe8
not dword [rcx + 0x188]
not dword [rcx + 0x39c]
xor dword [rcx + 0x344], 0x2fb76f31
sub dword [rcx + 0xa8], 0x4210b86
sub dword [rcx + 0x190], 0x7f0e6101
not dword [rcx + 0x380]
add dword [rcx + 0x1e4], 0xba507a
sub dword [rcx + 0x2ac], 0x1c97a49
xor dword [rcx + 0x36c], 0x75ea224b
xor dword [rcx + 0x350], 0x284349ef
not dword [rcx + 0x20]
not dword [rcx + 0xc4]
xor dword [rcx + 0x180], 0x5a8859b9
add dword [rcx + 0x7c], 0x470e13e9
add dword [rcx + 0x340], 0x3c326597
sub dword [rcx + 0x110], 0x15d616fa
sub dword [rcx + 0x394], 0x75670710
not dword [rcx + 0x230]
xor dword [rcx + 0x88], 0x14cb0f50
add dword [rcx + 0x264], 0x5f001a7e
add dword [rcx + 0x28], 0x85d3244
add dword [rcx + 0x114], 0x609379f
xor dword [rcx + 0x2c], 0x1e7c555f
add dword [rcx + 0xb0], 0x50b361a1
xor dword [rcx + 0x360], 0x58230ae8
xor dword [rcx + 0x1a4], 0x7ba00048
add dword [rcx + 0x1d8], 0x788c2df4
xor dword [rcx + 0x60], 0x2cde57ad
add dword [rcx + 0x1a0], 0x5de87bfd
not dword [rcx + 0x3c8]
add dword [rcx + 0xac], 0x42f648c8
sub dword [rcx + 0xa4], 0x67af2db7
xor dword [rcx + 0x240], 0x2f601306
sub dword [rcx + 0x214], 0x5bff0569
xor dword [rcx + 0x78], 0x2edf7fb4
add dword [rcx + 0xb4], 0x4d79029d
xor dword [rcx + 0x138], 0x59f3170d
add dword [rcx + 0x370], 0x3ffb1219
add dword [rcx + 0x318], 0x48a34479
not dword [rcx + 0x3c4]
xor dword [rcx + 0x118], 0x6e6f50b6
not dword [rcx + 0x368]
add dword [rcx + 0x288], 0x4f5809eb
xor dword [rcx + 0x378], 0xb021df2
add dword [rcx + 0x358], 0x7672379c
add dword [rcx + 0x178], 0x59635bbd
not dword [rcx + 0x3e8]
not dword [rcx + 0x278]
sub dword [rcx + 0x208], 0x15fd5661
sub dword [rcx + 0xcc], 0x39a34bfe
add dword [rcx + 0x2ec], 0x45a53586
not dword [rcx + 0x160]
add dword [rcx + 0x1c8], 0x1f53c83
add dword [rcx + 0x170], 0x550a489a
not dword [rcx + 0x37c]
add dword [rcx + 0x290], 0x5ce93d80
add dword [rcx + 0x34c], 0x2fd3760c
sub dword [rcx + 0x19c], 0x62cf5b97
sub dword [rcx + 0x130], 0x5fd55a4a
add dword [rcx + 0xf0], 0x6f610abe
xor dword [rcx + 0x1c0], 0x3f5507be
not dword [rcx + 0x34]
add dword [rcx + 0x1c], 0x32f612bd
sub dword [rcx + 0x324], 0x15ce1080
add dword [rcx + 0x70], 0x14107adb
not dword [rcx + 0xa0]
not dword [rcx + 0x2d4]
sub dword [rcx + 0x90], 0x474b5d7a
add dword [rcx + 0x1d0], 0x47375b08
not dword [rcx + 0x168]
xor dword [rcx + 0x2f4], 0x6ff31a0e
add dword [rcx + 0x15c], 0x7bcd131d
sub dword [rcx + 0x2bc], 0x29fb54f3
add dword [rcx + 0x3fc], 0x56637331
sub dword [rcx + 0x2e8], 0x40fb0aa5
add dword [rcx + 0x108], 0x5c4e028c
not dword [rcx + 0xe4]
add dword [rcx + 0x124], 0x2ea4bb4
sub dword [rcx + 0x3d8], 0x5d0c32c9
xor dword [rcx + 0x38], 0x4b396d2c
not dword [rcx + 0x3b0]
xor dword [rcx + 0x270], 0x6c36119
xor dword [rcx + 0x164], 0x69827f32
sub dword [rcx + 0x9c], 0x2dd850f6
sub dword [rcx + 0x25c], 0x36345c84
add dword [rcx + 0x30c], 0x3e210caf
sub dword [rcx + 0x44], 0xf614fe0
not dword [rcx + 0x174]
add dword [rcx + 0x154], 0x6d65171f
not dword [rcx + 0x260]
sub dword [rcx + 0x218], 0x5c3f5e30
add dword [rcx + 0x16c], 0x6fdd2f5e
xor dword [rcx + 0x1f0], 0x9e26826
xor dword [rcx + 0x24c], 0x3f1464de
add dword [rcx + 0x314], 0x75612e64
sub dword [rcx + 0x268], 0x3b454600
sub dword [rcx + 0x100], 0x3a6a67ed
xor dword [rcx + 0x48], 0x45230871
sub dword [rcx + 0x1fc], 0xae1846
xor dword [rcx + 0x12c], 0x318f133c
sub dword [rcx + 0x148], 0x15912bc7
sub dword [rcx + 0x14c], 0x72eb7bd2
xor dword [rcx + 0x3a8], 0x36e793b
xor dword [rcx + 0x258], 0x404a012a
xor dword [rcx + 0x144], 0x2a736c1b
add dword [rcx + 0x238], 0x4f1b6c75
xor dword [rcx + 0x68], 0x318435a
xor dword [rcx + 0x210], 0x44cd7045
not dword [rcx + 0x2c8]
not dword [rcx + 0x250]
xor dword [rcx + 0x140], 0x30681181
not dword [rcx + 0x3c0]
xor dword [rcx + 0x304], 0xdb51de4
not dword [rcx + 0x20c]
xor dword [rcx + 0x388], 0x630c0194
xor dword [rcx + 0x398], 0x5f0a4357
not dword [rcx + 0x3ac]
sub dword [rcx + 0x2f8], 0x3fcb2d35
add dword [rcx + 0x300], 0x77f35099
sub dword [rcx + 0x14], 0x71c07047
xor dword [rcx + 0x64], 0x215d1672
add dword [rcx + 0x248], 0x4980d3f
add dword [rcx + 0x3d4], 0x66cf20ec
not dword [rcx + 0x1f4]
sub dword [rcx + 0x2fc], 0x16842fe8
add dword [rcx + 0x298], 0x711266bf
add dword [rcx + 0x6c], 0x2a2c4aa0
add dword [rcx + 0x2cc], 0x33e512c5
add dword [rcx + 0x3a4], 0x579b6e61
add dword [rcx + 4], 0x25156d41
not dword [rcx + 0x3cc]
add dword [rcx + 0x330], 0x13726365
not dword [rcx + 0x204]
sub dword [rcx + 0x2dc], 0x6a7e1326
xor dword [rcx + 0xc0], 0x31435617
xor dword [rcx + 0x3d0], 0x531b4c76
add dword [rcx + 0x33c], 0x3fdd5787
xor dword [rcx + 0x104], 0xf05041d
sub dword [rcx + 0x8c], 0x6d7d0ad2
xor dword [rcx + 0x3f4], 0x39945869
xor dword [rcx + 0x31c], 0x4a455ba8
add dword [rcx + 0x80], 0x5ce72557
not dword [rcx + 0x200]
not dword [rcx + 0x320]
add dword [rcx + 0x328], 0x5f111102
not dword [rcx + 0x22c]
sub dword [rcx + 0x3f0], 0x72020d95
sub dword [rcx + 0xd8], 0x394469b7
sub dword [rcx + 0x3a0], 0x34f94b3c
not dword [rcx + 0x150]
xor dword [rcx + 0xe8], 0x40ec4cf6
add dword [rcx + 0x1f8], 0x64146d12
xor dword [rcx + 0x2b8], 0x1530c67
not dword [rcx + 0xf8]
not dword [rcx + 0x21c]
not dword [rcx + 0x26c]
not dword [rcx + 0x354]
sub dword [rcx + 0x1c4], 0x56cc11e9
not dword [rcx + 0x84]
xor dword [rcx + 0x50], 0x26ac560b
add dword [rcx + 0x2d8], 0x443a310f
xor dword [rcx + 0x1ac], 0x6c405413
xor dword [rcx + 0x35c], 0x56cc72db
add dword [rcx + 0x294], 0x55a75cb4
not dword [rcx + 0x10c]
xor dword [rcx + 0x2d0], 0x49e56cab
not dword [rcx + 0xdc]
sub dword [rcx + 0xc8], 0x5bd33194
not dword [rcx + 0x3e4]
add dword [rcx + 0x220], 0xef30295
not dword [rcx + 0xf4]
add dword [rcx + 0x38c], 0x6b7b5208
add dword [rcx + reloc.SHELL32.dll_IsUserAnAdmin], 0x4bf32274
add dword [rcx + 0x158], 0xee86176
sub dword [rcx + 0xec], 0x9b768e3
not dword [rcx + 0x348]
xor dword [rcx + 0x334], 0x3c4f3601
xor dword [rcx + 0x2e4], 0x550c6255
sub dword [rcx + 0x18], 0x2e750c4a
xor dword [rcx + 0x30], 0x5cfd1695
xor dword [rcx + 0x54], 0x615a689d
xor dword [rcx + 0xd0], 0x7c5031cd
add dword [rcx + 0x280], 0x33f42fd7
not dword [rcx + 0x3f8]
not dword [rcx + 0x308]
not dword [rcx + 0x58]
add dword [rcx + 0x29c], 0x5f272818
add dword [rcx + 0x1dc], 0x22760c1f
not dword [rcx + 0x1ec]
add dword [rcx + 0x134], 0x573550bd
xor dword [rcx + 0xb8], 0x58d40ba8
xor dword [rcx + 0x40], 0x648c7f48
sub dword [rcx + 0x74], 0x766b2e9b
xor dword [rcx + 0x310], 0x713b0568
add dword [rcx + 0x3bc], 0x2cfe7b71
add dword [rcx + 0x1cc], 0x6a694400
sub dword [rcx + 0x3ec], 0x38a27e00
sub dword [rcx + 0x1bc], 0x1e12006d
add dword [rcx + 0x3c], 0x7ed34f90
add dword [rcx + 0x1d4], 0x46596ab1
add dword [rcx + 0x18c], 0x6cc2590
xor dword [rcx + 0x234], 0x45b0513a
sub dword [rcx + 0x390], 0x5f9a48b7
xor dword [rcx + 0x94], 0x494b4bf1
add dword [rcx + 0x13c], 0x2f1c16cb
sub dword [rcx + 0xbc], 0x25841f1e
xor dword [rcx + 0xc], 0xa35509d
xor dword [rcx + 0x28c], 0x28e05c63
sub dword [rcx + 0x2c0], 0x45e21191
not dword [rcx + 0x198]
not dword [rcx + 0x32c]
not dword [rcx + 0x98]
sub dword [rcx + 0x2e0], 0x3e113472
not dword [rcx + 0x3b4]
not dword [rcx + 0x1b4]
sub dword [rcx + 0x2c4], 0x27b6195c
sub dword [rcx + 0x128], 0x142d6819
xor dword [rcx], 0x1ea77dc1
xor dword [rcx + 0x5c], 0x1bd96fe6
xor dword [rcx + 0x3b8], 0x6871ba1
not dword [rcx + 0x364]
not dword [rcx + 0x3e0]
sub dword [rcx + 0x1b0], 0x753a5246
add dword [rcx + 0x23c], 0x58df59dd
add dword [rcx + 0x24], 0x335133a
not dword [rcx + 0x184]
xor dword [rcx + 0x338], 0x236f4523
add dword [rcx + 0x2b4], 0x6cdf02c8
xor dword [rcx + 0x1a8], 0x431a6478
add dword [rcx + 0x17c], 0x22dc5db8
add dword [rcx + 0x120], 0x46c50f82
not dword [rcx + 0x4c]
add dword [rcx + 0x2a4], 0x745a5d96
add rdx, 0x400
add rcx, 0x400
cmp rdx, 0x8c000
jne 0x1401d902e
pop rcx
call fcn.1401d8306
mov rsp, rbp
pop rbp
pop r15
pop r14
pop r13
pop r12
pop r11
pop r10
pop r9
pop r8
pop rdi
pop rsi
pop rbp
pop rbx
pop rdx
pop rcx
pop rax