Function at 0x140245000
Capabilities:
Encode data using xor

Disassembly:
push rax
push rcx
push rdx
push rbx
push rbp
push rsi
push rdi
push r8
push r9
push r10
push r11
push r12
push r13
push r14
push r15
push rbp
mov rbp, rsp
sub rsp, 0x20
and rsp, 0xfffffffffffffff0
lea rax, [0x1401b8a00]
push 0
pop rdx
push rax
not dword [rax + 0x64]
add dword [rax + 0x334], 0x58c501b4
xor dword [rax + 0x17c], 0x55731697
add dword [rax + 0x1ec], 0x235c7295
sub dword [rax + 0x2b4], 0x45702e64
add dword [rax + 0x114], 0x76821153
add dword [rax + 0x13c], 0x6b3075dc
xor dword [rax + 0x1c0], 0x4d3b1fb4
not dword [rax + 0x84]
sub dword [rax + 0x3f0], 0x6fb25488
not dword [rax + 0x2bc]
not dword [rax + 0x304]
add dword [rax + 0xc4], 0x18146a38
xor dword [rax + 0x210], 0xd881757
xor dword [rax + 0x7c], 0x2df430f1
sub dword [rax + 0xdc], 0x722d075d
add dword [rax + 0x6c], 0x7f791191
xor dword [rax + 0x1e0], 0x129a3dd3
not dword [rax + 0x58]
xor dword [rax + 0x3f4], 0x7a8a213c
add dword [rax + 0x250], 0x4f555fed
add dword [rax + 0x48], 0x255b7c56
sub dword [rax + 0x94], 0x706a04f5
xor dword [rax + 0x2f4], 0x42d43821
xor dword [rax + 0x168], 0x7dd158b7
not dword [rax + 0x22c]
sub dword [rax + 0x11c], 0x6cfd56a1
add dword [rax + 0x1b0], 0x4c8d3bfb
sub dword [rax + 0x360], 0x2b9e46dc
sub dword [rax + 0x368], 0x674255de
xor dword [rax + 0x184], 0x7b7c3c4e
not dword [rax + 0x2c4]
add dword [rax + 0x150], 0x78162c8e
not dword [rax + 0x200]
xor dword [rax + 0x384], 0x79b36b4b
sub dword [rax + 0x288], 0x2a0ed2
not dword [rax + 0x2f8]
not dword [rax + 0x3d4]
not dword [rax + 0x29c]
not dword [rax + 0x80]
xor dword [rax + 0x3f8], 0x2978712a
not dword [rax + 0x98]
add dword [rax + 0xa8], 0x1daa5234
sub dword [rax + 0x254], 0xbde6a3d
add dword [rax + 0x198], 0x21896568
xor dword [rax + 8], 0x606d01b7
xor dword [rax + 0x2c], 0xcd77bb8
not dword [rax + 0x30]
xor dword [rax + 0xf4], 0x45db6b6f
not dword [rax + 0x178]
sub dword [rax + 0x2b0], 0x29852666
add dword [rax + 0x110], 0x78e446da
not dword [rax + 0x390]
sub dword [rax + 0xcc], 0x70495f14
xor dword [rax + 0x25c], 0x28fd281f
add dword [rax + 0xd8], 0x7f5657e3
sub dword [rax + 0x1a4], 0x6dae3424
sub dword [rax + 0x380], 0x24d40d7f
xor dword [rax + 0x224], 0x61c95b99
add dword [rax + 0x9c], 0x604757a6
not dword [rax + 0x3c0]
not dword [rax + 0x2ac]
sub dword [rax + 0x40], 0x5de91b55
xor dword [rax + 0x370], 0x46d26634
add dword [rax + 0x2c8], 0x3c976ca7
add dword [rax + 0x1e4], 0x560c0441
xor dword [rax + 0x37c], 0x347d3588
add dword [rax + 0x2c0], 0x4a172a44
xor dword [rax + 0x14c], 0x3371759b
not dword [rax + 0x23c]
add dword [rax + 0xb0], 0x68800d96
xor dword [rax + 0x2ec], 0x646c4a30
xor dword [rax + 0x10], 0x5512fad
add dword [rax + 0x50], 0x46d9462f
not dword [rax + 0x3e0]
sub dword [rax + 0x284], 0x4fc479e8
not dword [rax + 0x220]
add dword [rax + 0x208], 0xbe906ef
sub dword [rax + 0x24], 0x22db75c4
add dword [rax + 0x1d0], 0x4b95ab2
not dword [rax + 0x1bc]
not dword [rax + 0x204]
add dword [rax + 4], 0x5ae531ea
xor dword [rax + 0xc0], 0x35a667b8
not dword [rax + 0x238]
add dword [rax + 0xf8], 0x3c9f3d85
add dword [rax + 0x2d0], 0x9612118
add dword [rax + 0x260], 0x7c76625b
sub dword [rax + 0xc8], 0x4c843921
sub dword [rax + 0x1d4], 0x58d4374f
xor dword [rax + 0x1a0], 0x15d51cbe
not dword [rax + 0x1f8]
xor dword [rax + 0x38c], 0x20626eb2
sub dword [rax + 0x31c], 0x6cf7510
xor dword [rax + 0x108], 0x5c4d4972
sub dword [rax + 0x194], 0x920219a
xor dword [rax + 0x60], 0x40424afb
xor dword [rax + 0x1ac], 0x46dc5190
not dword [rax + 0x5c]
add dword [rax + 0x378], 0x61c57c7b
not dword [rax + 0x16c]
add dword [rax + 0x388], 0x16a869d9
add dword [rax + 0x308], 0x61013eed
not dword [rax]
xor dword [rax + 0xa4], 0x290f02f1
add dword [rax + 0x394], 0x2ba71632
sub dword [rax + 0x344], 0x5c597a5f
xor dword [rax + 0x2e4], 0x54c8412a
sub dword [rax + 0x1d8], 0x12b327d
xor dword [rax + 0x74], 0x6b1d61a3
not dword [rax + 0x3d0]
xor dword [rax + 0x3ec], 0x23894570
xor dword [rax + 0x1c4], 0x484c6a42
xor dword [rax + 0x3e4], 0x71342483
add dword [rax + 0x118], 0x3bb51dbe
add dword [rax + 0x3cc], 0x2d5c0377
add dword [rax + 0x12c], 0xc5e3e95
xor dword [rax + 0x2a0], 0x600c5ba5
xor dword [rax + 0xa0], 0x466c5e93
add dword [rax + 0x1c8], 0x5308553b
sub dword [rax + 0x128], 0x374415d4
not dword [rax + 0x1fc]
add dword [rax + 0xb4], 0x31482eed
add dword [rax + 0x280], 0x67ed23b3
sub dword [rax + 0x88], 0x648112a8
add dword [rax + 0x340], 0x476c70df
not dword [rax + 0x33c]
add dword [rax + 0x148], 0x53013290
add dword [rax + 0x3fc], 0x36634c6e
add dword [rax + 0xd0], 0x5bf324ab
not dword [rax + 0x274]
sub dword [rax + 0xac], 0x460f3da0
sub dword [rax + 0x120], 0x754310bd
not dword [rax + 0x34]
add dword [rax + 0x18c], 0x7964045d
xor dword [rax + 0x218], 0x41d25f56
add dword [rax + 0xbc], 0x5e247f78
xor dword [rax + 0x1a8], 0x5f7b73aa
sub dword [rax + 0x258], 0x553534b5
add dword [rax + 0x26c], 0x2d2e56ea
xor dword [rax + 0x298], 0x194a2c9e
xor dword [rax + 0x104], 0x225a30a0
sub dword [rax + 0x3ac], 0x48e3914
sub dword [rax + 0x70], 0x16e977dc
xor dword [rax + 0x1e8], 0x460b1cc1
sub dword [rax + 0x248], 0x6ad261bb
sub dword [rax + 0x8c], 0x740d0450
add dword [rax + 0x348], 0x6e8f5e98
xor dword [rax + reloc.SHELL32.dll_IsUserAnAdmin], 0x14a14059
not dword [rax + 0x3c4]
sub dword [rax + 0x3a0], 0x74d15607
xor dword [rax + 0x38], 0x24ef5a1c
not dword [rax + 0x20]
sub dword [rax + 0x320], 0x7da07d3b
xor dword [rax + 0x3a4], 0xb6a360a
add dword [rax + 0x21c], 0x1e1d259b
not dword [rax + 0x278]
xor dword [rax + 0x140], 0x67c4130f
not dword [rax + 0x130]
xor dword [rax + 0x138], 0x47727571
sub dword [rax + 0x30c], 0x3c5c6e6a
xor dword [rax + 0x3dc], 0x71ff7d91
xor dword [rax + 0xfc], 0xfdc70ac
add dword [rax + 0x188], 0x200728ad
xor dword [rax + 0x4c], 0x661e20f7
xor dword [rax + 0x15c], 0x516a43e0
xor dword [rax + 0x170], 0x5251780c
xor dword [rax + 0x1c], 0x7eae0461
xor dword [rax + 0x78], 0x1dd4785d
not dword [rax + 0x3e8]
xor dword [rax + 0x44], 0x39943274
sub dword [rax + 0x34c], 0x57d84f4e
add dword [rax + 0x374], 0x4f4c11c5
not dword [rax + 0x240]
xor dword [rax + 0xb8], 0x471d8a
sub dword [rax + 0x3b0], 0x53265b99
add dword [rax + 0x158], 0x2d743094
sub dword [rax + 0x1f0], 0x58880d99
not dword [rax + 0xc]
xor dword [rax + 0x354], 0x15ec01b0
not dword [rax + 0x24c]
add dword [rax + 0x230], 0x74307c44
add dword [rax + 0x310], 0x2eff27e3
xor dword [rax + 0x2a4], 0x318c0097
not dword [rax + 0x144]
xor dword [rax + 0x20c], 0x40f61137
sub dword [rax + 0x174], 0x74a723f7
add dword [rax + 0x10c], 0x2c747f62
xor dword [rax + 0x124], 0x2c63227f
sub dword [rax + 0x134], 0x57a17b90
sub dword [rax + 0x318], 0x68a7025a
xor dword [rax + 0x28], 0x49752133
add dword [rax + 0x39c], 0x33fa6ba4
xor dword [rax + 0xd4], 0xd0310f2
add dword [rax + 0x160], 0x6ded5ca5
xor dword [rax + 0x270], 0x4bb43294
add dword [rax + 0x2e0], 0x657a0196
add dword [rax + 0xf0], 0x629a4415
xor dword [rax + 0x180], 0x4c1d388b
sub dword [rax + 0x90], 0x43342c05
sub dword [rax + 0x324], 0x39cf4ed4
not dword [rax + 0x100]
sub dword [rax + 0x268], 0x223753e6
xor dword [rax + 0x244], 0x49b537f8
not dword [rax + 0x294]
xor dword [rax + 0x1b8], 0x502a0fea
add dword [rax + 0x1f4], 0x4da5172
add dword [rax + 0x330], 0x5904363b
add dword [rax + 0x14], 0x707d0948
sub dword [rax + 0x264], 0x63a07d44
sub dword [rax + 0x3c], 0x647a3a09
xor dword [rax + 0x338], 0x48ca67ab
add dword [rax + 0x2d8], 0x48482254
xor dword [rax + 0xec], 0x479a46e1
sub dword [rax + 0x3d8], 0x5a6d5029
not dword [rax + 0x32c]
not dword [rax + 0x2d4]
sub dword [rax + 0x2dc], 0x128314ca
sub dword [rax + 0x28c], 0x7d4047e8
sub dword [rax + 0x290], 0x76e2eaf
not dword [rax + 0x54]
sub dword [rax + 0x364], 0x605c5dad
not dword [rax + 0x3bc]
sub dword [rax + 0x164], 0x29340c6b
sub dword [rax + 0x2f0], 0x665048d5
xor dword [rax + 0x228], 0x6387474f
xor dword [rax + 0xe0], 0x78787b7b
not dword [rax + 0x35c]
xor dword [rax + 0xe8], 0x7a4f022f
sub dword [rax + 0x314], 0x17862616
xor dword [rax + 0x398], 0x34a329a1
not dword [rax + 0x2e8]
not dword [rax + 0x190]
sub dword [rax + 0x328], 0x47ff6262
xor dword [rax + 0x3c8], 0x2af37424
not dword [rax + 0x19c]
not dword [rax + 0x350]
sub dword [rax + 0x1dc], 0x3427294f
add dword [rax + 0x2b8], 0x511e28ef
sub dword [rax + 0x2fc], 0x1c3d782b
xor dword [rax + 0x154], 0x55536c9e
add dword [rax + 0x3a8], 0x56da0502
add dword [rax + 0x36c], 0x362d1d5f
not dword [rax + 0x214]
sub dword [rax + 0x1b4], 0x3a36798b
not dword [rax + 0x300]
add dword [rax + 0x3b8], 0xe26959
add dword [rax + 0x27c], 0x5e0b4ede
sub dword [rax + 0xe4], 0xe3f1008
add dword [rax + 0x1cc], 0xbaf1086
add dword [rax + 0x18], 0x9004d4
sub dword [rax + 0x358], 0x3d1e7a73
sub dword [rax + 0x68], 0x704f6791
not dword [rax + 0x3b4]
not dword [rax + 0x2cc]
sub dword [rax + 0x234], 0x205d3114
add rdx, 0x400
add rax, 0x400
cmp rdx, 0x8c000
jne 0x14024502e
pop rcx
call fcn.140244306
mov rsp, rbp
pop rbp
pop r15
pop r14
pop r13
pop r12
pop r11
pop r10
pop r9
pop r8
pop rdi
pop rsi
pop rbp
pop rbx
pop rdx
pop rcx
pop rax