Function at 0x1401e6000
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rax
push rcx
push rdx
push rbx
push rbp
push rsi
push rdi
push r8
push r9
push r10
push r11
push r12
push r13
push r14
push r15
push rbp
mov rbp, rsp
sub rsp, 0x20
and rsp, 0xfffffffffffffff0
lea rcx, [0x140159800]
movabs rdx, 0
push rcx
sub dword [rcx + 0x30c], 0x2435152c
add dword [rcx + 0x160], 0x39c93660
not dword [rcx + 0x1cc]
not dword [rcx + 0x1ac]
sub dword [rcx + 0x2b4], 0x30c42c47
sub dword [rcx + 0x368], 0x5dcd4e88
add dword [rcx + 0x24c], 0x15780dc8
not dword [rcx + 0x300]
not dword [rcx + 0x29c]
not dword [rcx + 0x24]
xor dword [rcx + 0xfc], 0x69741cba
not dword [rcx + 0x360]
sub dword [rcx + 0x144], 0x5b0163b
sub dword [rcx + 0xb4], 0x4157e7d
not dword [rcx + 0xdc]
sub dword [rcx + 0x1bc], 0x67794571
not dword [rcx + 0x3ac]
xor dword [rcx + 0x23c], 0x20fc6078
add dword [rcx + 0x1b4], 0x2fdf78bc
xor dword [rcx + 0x2bc], 0x653e6a00
not dword [rcx + 0x7c]
xor dword [rcx + 0x18], 0x56dc070a
not dword [rcx + 0x2fc]
sub dword [rcx + 0x344], 0x69610464
xor dword [rcx + 0x154], 0x21096113
xor dword [rcx + 0x240], 0x713e7f90
not dword [rcx + 0x158]
xor dword [rcx + 0x31c], 0x3c577d1
add dword [rcx + 0x3c0], 0x12da2ee2
not dword [rcx + 0x1d0]
sub dword [rcx + 0x2e8], 0x1e810d79
sub dword [rcx + 0x218], 0x3103146a
add dword [rcx + 0x27c], 0x5b4454ec
not dword [rcx + 0xc8]
not dword [rcx + 0x124]
not dword [rcx + 0x34]
add dword [rcx + 0x1e8], 0x4ea12e5d
sub dword [rcx + 0x2c0], 0x2e250706
not dword [rcx + 0x11c]
xor dword [rcx + 0xd4], 0x3d087257
sub dword [rcx + 0x5c], 0x64c675f6
add dword [rcx + 0x190], 0xb3501c9
sub dword [rcx + 0x188], 0x250340b9
sub dword [rcx + 0x150], 0x635d0976
sub dword [rcx + 0x1a8], 0x5604243a
xor dword [rcx + 0x134], 0x1c82000f
add dword [rcx + 0x60], 0x172212c9
xor dword [rcx + 0x26c], 0x26401ed1
add dword [rcx + 0x3a0], 0x66ad4e7c
xor dword [rcx + 0x30], 0x65b75292
add dword [rcx + 0x1e4], 0x7af65883
sub dword [rcx + 0x3b4], 0x61857ade
sub dword [rcx + 0x3e8], 0xcf5340d
sub dword [rcx + 0xbc], 0x5a4d1906
sub dword [rcx + 0x74], 0x67846284
xor dword [rcx + 0x278], 0x1879070f
add dword [rcx + 0x104], 0x22770f4e
sub dword [rcx + 0x50], 0x74a43000
add dword [rcx + 0x3d8], 0x1deb403e
add dword [rcx + 0x3b0], 0x37f10983
not dword [rcx + 0x22c]
sub dword [rcx + 0x268], 0x25db0948
sub dword [rcx + 0x98], 0x7bdf14ef
xor dword [rcx + 0x390], 0x6d025d16
sub dword [rcx + 0x36c], 0x581534e9
xor dword [rcx + 0x4c], 0x70d14500
add dword [rcx + 0xf4], 0x753b339e
xor dword [rcx + 0x258], 0x741639f3
sub dword [rcx + 0x28c], 0x35727142
add dword [rcx + 0xa4], 0x7e981dee
add dword [rcx + 0x2f0], 0x1ab8592f
add dword [rcx + 0x1e0], 0x36cb7e91
sub dword [rcx + 0x290], 0x787a43d0
not dword [rcx + 0x19c]
add dword [rcx + 0x248], 0x56a8415a
not dword [rcx + 0x10]
xor dword [rcx + 0x94], 0x584a5ceb
add dword [rcx + 0x310], 0x7b9a379f
sub dword [rcx + 0x3b8], 0x7e5b3be8
add dword [rcx + 0xe8], 0x39549fa
sub dword [rcx + 0x328], 0x57d718e3
sub dword [rcx + 0x13c], 0x151c2f73
sub dword [rcx + 0x364], 0x72246f2f
not dword [rcx + 0x378]
xor dword [rcx + 0x358], 0x4a8e486d
not dword [rcx + 0x294]
sub dword [rcx + 0x3c], 0x3b7560b1
add dword [rcx + 0x140], 0x538343e1
xor dword [rcx + 0x384], 0x10095f5b
not dword [rcx + 0x210]
add dword [rcx + 0x15c], 0x7bf10dec
not dword [rcx + 0x38c]
xor dword [rcx + 0x3c4], 0x2e8518bc
add dword [rcx + 0x9c], 0x4234284a
xor dword [rcx + 0x238], 0x40570452
add dword [rcx + 0x2f8], 0x232a24b5
sub dword [rcx + 0x3d0], 0x521f7b6c
xor dword [rcx + 0x2c], 0x1415c07
add dword [rcx + 0x394], 0x509c6e37
not dword [rcx + 0x64]
xor dword [rcx + 0x208], 0x25702643
xor dword [rcx + 0x204], 0x13c85cfb
sub dword [rcx + 0x68], 0x59533d53
xor dword [rcx + 0x2dc], 0x470702b7
not dword [rcx + 0x2d8]
sub dword [rcx + 4], 0x1a7e2eda
not dword [rcx + 0x2b8]
sub dword [rcx + 0x320], 0x2e4a3ef6
add dword [rcx + 0x1fc], 0x6a145214
xor dword [rcx + 0x380], 0x13ba5aa9
not dword [rcx + 0x25c]
sub dword [rcx + 0xd8], 0x40404abf
sub dword [rcx + 0x58], 0x10101f09
xor dword [rcx + 0x2ec], 0x97f44b6
add dword [rcx + 0x1b0], 0x1e847bab
xor dword [rcx + 0x2a0], 0x2667645a
sub dword [rcx + 0x318], 0x116221d6
xor dword [rcx + 0x21c], 0x616d24ff
xor dword [rcx + 0xb0], 0x60e550e1
sub dword [rcx + 0x1f8], 0x75240a0b
sub dword [rcx + 0x8c], 0x1cec32ef
sub dword [rcx + 0x2e4], 0x33fd4be9
sub dword [rcx + 0x348], 0x420b2294
sub dword [rcx + 0x220], 0x210b0352
add dword [rcx + 0x1f4], 0xb4a1286
sub dword [rcx + 0xa0], 0x70763439
sub dword [rcx + 0x214], 0x359b28ce
xor dword [rcx + 0x230], 0x1e607d4
xor dword [rcx + 0x3c8], 0x3b6739ee
add dword [rcx + 0xc4], 0xbc417e5
sub dword [rcx + 0x32c], 0x25665e2f
xor dword [rcx + 0x3dc], 0x22e61347
xor dword [rcx + 0x354], 0x66e3b0b
xor dword [rcx + 0x12c], 0x1baa1883
xor dword [rcx + 0x370], 0x46d23fd0
add dword [rcx + 0x270], 0x1e277120
add dword [rcx + 0x234], 0x5b827ebc
not dword [rcx + 0x37c]
xor dword [rcx + 0x244], 0x1aa5041b
xor dword [rcx + 0x40], 0x40bd0e34
add dword [rcx + 0x10c], 0x17aa0fdb
not dword [rcx + 0x314]
not dword [rcx + 0x340]
add dword [rcx + 0x130], 0x7f0141f7
xor dword [rcx + 0xb8], 0x4253587d
not dword [rcx + 0x3d4]
xor dword [rcx + 0x6c], 0x78cc5ee3
not dword [rcx + 0x2cc]
add dword [rcx + 0x374], 0x3d1a23ef
not dword [rcx + 0x38]
not dword [rcx + 0x33c]
not dword [rcx + 0x1f0]
not dword [rcx + 0x39c]
not dword [rcx + 0x3a8]
not dword [rcx + 0x20c]
xor dword [rcx + 0x3e0], 0x19434d5b
not dword [rcx + 0x78]
add dword [rcx + 0x16c], 0x69671a0f
xor dword [rcx + 0x2c8], 0x5dde45eb
add dword [rcx + 0x3ec], 0x591b2262
xor dword [rcx + 0x2d4], 0x36c90fdb
add dword [rcx + 0xcc], 0x16692f43
sub dword [rcx + 0xec], 0x659e0942
sub dword [rcx + 0x128], 0x57e53e3c
xor dword [rcx + 0xe0], 0x29e41ee5
not dword [rcx + 0x54]
add dword [rcx + 0x1a0], 0x143f5484
add dword [rcx + 0x260], 0x34e010d1
sub dword [rcx + 0x180], 0x48b509f9
sub dword [rcx + 0x194], 0x2de27330
not dword [rcx + 0x14c]
sub dword [rcx + 0x1d4], 0x3c6f7017
xor dword [rcx + 0x100], 0x3a302d19
not dword [rcx + 0x398]
not dword [rcx + 0xc]
add dword [rcx + 0x330], 0x122442e8
xor dword [rcx + 0x174], 0xab55236
sub dword [rcx + 0x148], 0x12415a20
add dword [rcx + 0x3e4], 0x368341ce
not dword [rcx + 0x44]
not dword [rcx + 0x324]
xor dword [rcx + 0x228], 0x153c239b
xor dword [rcx + 0x2d0], 0x74f11148
xor dword [rcx + 0x298], 0x307d707c
not dword [rcx + 0x14]
not dword [rcx + 0x178]
not dword [rcx + 0x114]
sub dword [rcx + 0x110], 0x21f7de1
add dword [rcx + 0x184], 0x3d8908a1
xor dword [rcx + 0x3f0], 0x42f064db
xor dword [rcx + 0x80], 0x256c7a0e
sub dword [rcx + 0x18c], 0x79456091
not dword [rcx + 0x2f4]
sub dword [rcx + 0x388], 0x5467477a
add dword [rcx + 0x164], 0x5a6654f5
add dword [rcx + 0xac], 0xd00410c
xor dword [rcx + 0x108], 0x46824c4c
sub dword [rcx + 0x334], 0x34fd1f95
sub dword [rcx + 0x2c4], 0x395e5d17
add dword [rcx + 0x280], 0x1ae47e97
not dword [rcx + 0x35c]
add dword [rcx + 0x288], 0x35ff4d81
xor dword [rcx + 0x198], 0x243a1287
not dword [rcx + 0x48]
add dword [rcx + 0x3bc], 0x405c6270
xor dword [rcx + 0x118], 0x5f6b03bb
xor dword [rcx + reloc.SHELL32.dll_IsUserAnAdmin], 0x34c551f6
xor dword [rcx + 0x90], 0x29714041
not dword [rcx + 0x20]
xor dword [rcx + 0x168], 0x779d3d20
sub dword [rcx + 0x1ec], 0x7b403441
sub dword [rcx + 0x2e0], 0x6c007a78
not dword [rcx + 0x170]
sub dword [rcx + 0x254], 0x1992669d
xor dword [rcx + 0x138], 0x2a8762d7
xor dword [rcx + 0x1dc], 0x749a0201
sub dword [rcx + 0x1a4], 0x63d680a
not dword [rcx + 0x3cc]
add dword [rcx + 0x1c8], 0x78310649
add dword [rcx + 0x3a4], 0x9773bf0
xor dword [rcx + 0xe4], 0x74ae19de
not dword [rcx + 0x200]
not dword [rcx + 8]
not dword [rcx + 0x308]
add dword [rcx + 0x338], 0x3a272623
not dword [rcx + 0x2ac]
not dword [rcx + 0xd0]
sub dword [rcx + 0x28], 0x36130c07
xor dword [rcx + 0xc0], 0x58bd02f6
sub dword [rcx + 0x2a4], 0x1cf35d75
sub dword [rcx], 0x572527f
add dword [rcx + 0x284], 0x270e0112
not dword [rcx + 0x264]
xor dword [rcx + 0x304], 0x2d312da0
sub dword [rcx + 0xf0], 0x5d063dee
sub dword [rcx + 0x3f4], 0x5b8a054b
xor dword [rcx + 0x1c0], 0x4806694c
sub dword [rcx + 0x17c], 0x17573c81
xor dword [rcx + 0x2b0], 0x4f9e244b
not dword [rcx + 0x1c4]
xor dword [rcx + 0x34c], 0x5047799
sub dword [rcx + 0x1b8], 0x274b0416
add dword [rcx + 0x84], 0x74bb4049
add dword [rcx + 0x1c], 0xba128b9
add dword [rcx + 0x120], 0x1a0b0499
xor dword [rcx + 0x224], 0x16ca3af9
xor dword [rcx + 0x274], 0x4e524cc4
add dword [rcx + 0x70], 0x29f061b6
not dword [rcx + 0xf8]
sub dword [rcx + 0x3f8], 0x79813e44
not dword [rcx + 0x1d8]
add dword [rcx + 0x88], 0x1fb44c63
not dword [rcx + 0x3fc]
add dword [rcx + 0x350], 0x60462990
sub dword [rcx + 0x250], 0x38a82fbc
not dword [rcx + 0xa8]
add rdx, 0x400
add rcx, 0x400
cmp rdx, 0x8c000
je 0x1401e68f0
jmp 0x1401e6035
pop rcx
call fcn.1401e5106
mov rsp, rbp
pop rbp
pop r15
pop r14
pop r13
pop r12
pop r11
pop r10
pop r9
pop r8
pop rdi
pop rsi
pop rbp
pop rbx
pop rdx
pop rcx
pop rax