Function at 0x140590000
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rax
push rcx
push rdx
push rbx
push rbp
push rsi
push rdi
push r8
push r9
push r10
push r11
push r12
push r13
push r14
push r15
push rbp
mov rbp, rsp
sub rsp, 0x20
and rsp, 0xfffffffffffffff0
lea rdx, [0x140503c00]
movabs rcx, 0
push rdx
add dword [rdx + 0x310], 0x77b84a1f
xor dword [rdx + 0x104], 0x42303907
not dword [rdx + 0xc4]
sub dword [rdx + 0x26c], 0x4d3532c1
add dword [rdx + 0x3d4], 0x1b5d4597
not dword [rdx + 0x2b0]
sub dword [rdx + 0x338], 0x7c115c93
xor dword [rdx + 0x174], 0x483c7d8d
sub dword [rdx + 0xfc], 0x7564220c
sub dword [rdx + 0x200], 0x3dd24a7a
add dword [rdx + 0x1b8], 0x2fe6081f
add dword [rdx + 0x394], 0x501d31fd
not dword [rdx + 0x3c]
sub dword [rdx + 0x1f0], 0x3a7915c3
sub dword [rdx + 0x2e4], 0x2b004283
sub dword [rdx + 0x2a4], 0x284f0b27
sub dword [rdx + 0x10], 0x79e92bd2
add dword [rdx + 0x2bc], 0x59657d20
add dword [rdx + 0x8c], 0x39096073
add dword [rdx + 0xd4], 0x66f35b02
xor dword [rdx + 0x3c8], 0x7bda77a3
add dword [rdx + 0x1a0], 0x7e4e7b9c
sub dword [rdx + 0x2b4], 0x7b985dfc
add dword [rdx + 0x358], 0x3ac26b98
add dword [rdx + 0x280], 0x7ee740f6
add dword [rdx + 0x258], 0x5d2f3c6f
xor dword [rdx + 0xe8], 0x10c003a8
xor dword [rdx + 0x364], 0x23fd58ac
add dword [rdx + 0x138], 0x6eaf1d6a
sub dword [rdx + 0x1c4], 0x31301b13
add dword [rdx + 0x1d4], 0x6da9323c
xor dword [rdx + 0x1b4], 0x3c65102
sub dword [rdx + 0x2fc], 0x7d20562a
add dword [rdx + 0x260], 0x45167864
sub dword [rdx + 0x38], 0x34f37b59
xor dword [rdx + 0x328], 0x54ac02b4
not dword [rdx + 0x210]
not dword [rdx + 0x48]
sub dword [rdx + 0xb4], 0x5293237c
sub dword [rdx + 0x10c], 0x11ed03ab
xor dword [rdx + 0x14], 0x43fb0b54
add dword [rdx + 0x2dc], 0x1ba65330
add dword [rdx + 0xf4], 0x125a748d
sub dword [rdx + 0x34], 0x23aa60c9
sub dword [rdx + 0x1c0], 0x1412672a
add dword [rdx + 0xb8], 0x1ee669a5
sub dword [rdx + 0x134], 0x16b55cdc
sub dword [rdx + 0x250], 0x21fb3d5c
xor dword [rdx + 0x284], 0x10a83392
add dword [rdx + 0x2b8], 0x58ff3c3c
xor dword [rdx + 0x3b8], 0x6f261ba
add dword [rdx + 0x28], 0x7a716de8
sub dword [rdx + 0x1ec], 0x6ab8156b
not dword [rdx + 0x3dc]
add dword [rdx + 0x1f4], 0xa6a5ade
not dword [rdx + 0x130]
xor dword [rdx + 0x318], 0x7b15581e
xor dword [rdx + 0x2c], 0x5bdc4855
add dword [rdx + 0x208], 0x37ba1847
sub dword [rdx + 0x344], 0x10b60925
not dword [rdx + 0x100]
sub dword [rdx + 0x118], 0x637e0fc6
add dword [rdx + 0x2e0], 0x33551138
xor dword [rdx + 0x1b0], 0x41d80ce0
add dword [rdx + 0x36c], 0x41fe1e11
sub dword [rdx + 0x140], 0x52e56ad6
not dword [rdx + 0x218]
xor dword [rdx + 0x290], 0x5629709d
xor dword [rdx + 0x94], 0x4bf325e8
sub dword [rdx + 0x2f4], 0x5e8a2ed4
add dword [rdx + 0xb0], 0x4d65322f
add dword [rdx + 0x50], 0x124c1627
not dword [rdx + 0x74]
sub dword [rdx + 0x64], 0x58fc6cfa
not dword [rdx + 0x204]
not dword [rdx + 0x288]
not dword [rdx + 0x1c8]
add dword [rdx + 0x2cc], 0x7c95584b
not dword [rdx + 0x1d0]
xor dword [rdx + 0x278], 0x5d7c5581
not dword [rdx + 0x390]
sub dword [rdx + 0x70], 0x5fb60316
xor dword [rdx + 0x124], 0x562c502f
not dword [rdx + 0x37c]
sub dword [rdx + 0x384], 0x2e4313d0
not dword [rdx + 0x18]
add dword [rdx + 0x114], 0x2d55142
add dword [rdx + 0x368], 0x6aff07b8
not dword [rdx + 0x2c0]
add dword [rdx + 0x30], 0x6d8a36d6
sub dword [rdx + 0x300], 0x49ba3849
add dword [rdx + 0x40], 0x12974313
not dword [rdx + 0xa8]
sub dword [rdx + 0xec], 0xb36042d
sub dword [rdx + 0xd8], 0x2328388a
add dword [rdx + 0x230], 0x3d1f34a9
add dword [rdx + 0x120], 0x203d4243
add dword [rdx + 0x3cc], 0x17f24e60
add dword [rdx + 0x25c], 0x45f25365
not dword [rdx + 0x15c]
xor dword [rdx + 0xc], 0x32752d8b
xor dword [rdx + 0x3c4], 0x6e0b4781
sub dword [rdx + 0x194], 0x5b585c7c
add dword [rdx + 0x2ac], 0x776f507f
sub dword [rdx + 0x24], 0x64b71285
sub dword [rdx + 0x1c], 0x8086f50
not dword [rdx + 0x2d8]
sub dword [rdx + 0x170], 0x12b010da
add dword [rdx + 0x164], 0x5480e1c
xor dword [rdx + 0x244], 0x38803b86
add dword [rdx + 0x3bc], 0x7b06275
xor dword [rdx + 4], 0x769c399c
not dword [rdx + 0x148]
add dword [rdx + 0x88], 0x71ff0970
not dword [rdx + 0x304]
sub dword [rdx + 0x378], 0x42865e8d
xor dword [rdx + 0x180], 0x40a24c1b
add dword [rdx + 0x2d0], 0x656f60dc
xor dword [rdx + 0x21c], 0x415820a8
xor dword [rdx + 0x3e4], 0x2f375d2c
sub dword [rdx + 0x3f0], 0x184a4aad
xor dword [rdx + 0x3a0], 0x7f682c37
xor dword [rdx + 0x39c], 0x2c3638f
sub dword [rdx + 0x3a4], 0x60977d60
xor dword [rdx + 0x29c], 0x3e970f64
sub dword [rdx + 0x190], 0x45955501
xor dword [rdx + 0x380], 0x18237d2a
xor dword [rdx + 0x350], 0xc2f20ad
not dword [rdx + 0xa0]
add dword [rdx + 0x24c], 0x78456917
add dword [rdx + 0x1a4], 0x2bac16b7
xor dword [rdx + 0x360], 0x29d50e0c
not dword [rdx + 0x17c]
xor dword [rdx + 0x5c], 0xba75d8c
not dword [rdx + 0x3f4]
xor dword [rdx + 0x274], 0x129c6e98
not dword [rdx + 0x27c]
add dword [rdx + 0x2ec], 0x662401b0
not dword [rdx + 0x254]
add dword [rdx + 0x1d8], 0xaa827e4
xor dword [rdx + 0x1e4], 0xede56d3
sub dword [rdx + 0x35c], 0x2fbd489a
not dword [rdx + 0x154]
not dword [rdx + 0x234]
xor dword [rdx + 0xcc], 0x133174b0
sub dword [rdx + 0x354], 0x749b7be8
sub dword [rdx + 0x2f8], 0x60404e3d
xor dword [rdx + 0x314], 0x25e00055
not dword [rdx + 0x18c]
not dword [rdx + 0x68]
add dword [rdx + 0x264], 0x4b082318
sub dword [rdx + 0x330], 0x5c830c35
xor dword [rdx + 0x6c], 0x69405c95
xor dword [rdx + 0x80], 0x7e9468d8
add dword [rdx + 0x3a8], 0x25954ed6
sub dword [rdx + 0x2c4], 0x56ef2b5a
add dword [rdx + 0x214], 0xc362aad
sub dword [rdx + 0x3f8], 0x9e779ea
not dword [rdx + 0x320]
sub dword [rdx + 0x1ac], 0x605713de
not dword [rdx + 0x3d8]
add dword [rdx + 0x11c], 0x4eb10526
xor dword [rdx + 0x2c8], 0x6d480355
sub dword [rdx + 0x1e8], 0x49df4b7e
not dword [rdx + 0x398]
add dword [rdx + 0x270], 0x799522fb
xor dword [rdx + 0x3b0], 0x1f4f1c68
not dword [rdx + 0x188]
sub dword [rdx + 0xd0], 0x57fd5892
add dword [rdx + 0x374], 0x2fed25a9
xor dword [rdx + 0xe0], 0x4f6664b8
xor dword [rdx + 0xdc], 0x377c2c4c
not dword [rdx + 0x334]
not dword [rdx + 0x3e0]
not dword [rdx + 0x178]
add dword [rdx + 0xc8], 0x62335db2
sub dword [rdx + 0x324], 0x31e2583e
not dword [rdx + 0x1bc]
not dword [rdx + 0x3c0]
not dword [rdx + 0x84]
sub dword [rdx + 0x3b4], 0x27cb7b2d
add dword [rdx + 0x1e0], 0x623e77d8
add dword [rdx + 0x3d0], 0xc952007
add dword [rdx + 0x168], 0x16586830
xor dword [rdx + 0x240], 0x79ba40c1
xor dword [rdx + 0x9c], 0x115905b2
add dword [rdx + 0x54], 0x259d1cae
add dword [rdx + 0x128], 0x1cb87b1b
sub dword [rdx + 0x158], 0xe2e70bf
not dword [rdx + 0x58]
xor dword [rdx + 0x78], 0x19a304ff
xor dword [rdx + 0x19c], 0x2e096905
xor dword [rdx + 0x184], 0x59fa7806
sub dword [rdx + 0xac], 0x6a397095
sub dword [rdx + 0x1a8], 0x5b246a67
not dword [rdx + 0x3ac]
not dword [rdx + 0x98]
sub dword [rdx + 0xf8], 0x464e5219
add dword [rdx + 0x31c], 0x7fbd0c94
add dword [rdx + 0x34c], 0x4f51491c
sub dword [rdx + 0x1dc], 0x2aa37e1
xor dword [rdx + 0x23c], 0x4fc3643e
xor dword [rdx + 0x1f8], 0x8a264e2
xor dword [rdx + 0x220], 0x6e025b28
not dword [rdx + 0x150]
xor dword [rdx + 0xc0], 0x3e59290b
xor dword [rdx + 0x90], 0x4c4547a
not dword [rdx + 0x13c]
sub dword [rdx + 0x228], 0x728b6f74
not dword [rdx + 0x308]
xor dword [rdx + 0x268], 0x466d4489
xor dword [rdx + 0x16c], 0x163541d7
sub dword [rdx + 0xe4], 0x41104d5c
xor dword [rdx + 0x294], 0x102632ee
not dword [rdx + 0x30c]
sub dword [rdx + 0x110], 0x39e05c77
add dword [rdx + 0x38c], 0x6c8539fa
not dword [rdx + 0x1cc]
sub dword [rdx + 0x2d4], 0x2d370d83
xor dword [rdx + 0x22c], 0x9080e98
not dword [rdx + 0x3ec]
sub dword [rdx + 0x348], 0x493d2e38
sub dword [rdx + 0x224], 0x4ca54882
add dword [rdx + 0x238], 0x42237f3d
add dword [rdx + 0x2f0], 0x2b5c64ba
add dword [rdx + 0x20], 0x61a67f4d
sub dword [rdx + 0x32c], 0x6055b6d
sub dword [rdx + 0x198], 0x67eb6de4
xor dword [rdx + 0x28c], 0x752f2ba3
not dword [rdx + 0x108]
xor dword [rdx + 0xbc], 0x7150289f
xor dword [rdx + 0x12c], 0x6e5127b
xor dword [rdx + 8], 0x51816585
add dword [rdx + 0xa4], 0x60ed2350
not dword [rdx + 0x2a0]
add dword [rdx + 0x340], 0x15d76a94
sub dword [rdx], 0x32064684
add dword [rdx + 0x388], 0x13cd5115
sub dword [rdx + 0x33c], 0x6f0c546a
add dword [rdx + 0x248], 0x25e56d01
not dword [rdx + 0x3fc]
sub dword [rdx + 0x2e8], 0x3b1a0e4a
sub dword [rdx + 0x60], 0x29b60eb5
sub dword [rdx + 0x160], 0x41f607dc
add dword [rdx + 0x298], 0x1b1f0f98
sub dword [rdx + 0xf0], 0x1ae26c08
xor dword [rdx + 0x44], 0x37ca500c
sub dword [rdx + 0x4c], 0xde45f7a
not dword [rdx + 0x1fc]
sub dword [rdx + 0x144], 0x40c77f68
xor dword [rdx + 0x370], 0x1f250b38
add dword [rdx + 0x20c], 0x3488726b
add dword [rdx + reloc.SHELL32.dll_IsUserAnAdmin], 0x4806333b
xor dword [rdx + 0x3e8], 0x2d3333cc
not dword [rdx + 0x7c]
not dword [rdx + 0x14c]
add rcx, 0x400
add rdx, 0x400
cmp rcx, 0x8c000
je 0x140590910
jmp 0x140590035
pop rcx
call fcn.14058f506
mov rsp, rbp
pop rbp
pop r15
pop r14
pop r13
pop r12
pop r11
pop r10
pop r9
pop r8
pop rdi
pop rsi
pop rbp
pop rbx
pop rdx
pop rcx
pop rax