Function at 0x140287000
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rax
push rcx
push rdx
push rbx
push rbp
push rsi
push rdi
push r8
push r9
push r10
push r11
push r12
push r13
push r14
push r15
push rbp
mov rbp, rsp
sub rsp, 0x20
and rsp, 0xfffffffffffffff0
lea rax, [0x1401fa000]
movabs rbx, 0
push rax
not dword [rax + 0x70]
sub dword [rax + 0x250], 0x1d3248dc
not dword [rax + 0x40]
not dword [rax]
sub dword [rax + 0x26c], 0x58c20c4e
add dword [rax + 0x22c], 0x354d1189
xor dword [rax + 0x3a8], 0x3c4c6bec
add dword [rax + 0xec], 0x55674f0a
add dword [rax + 0x24c], 0x68f30bcc
sub dword [rax + 0x2ac], 0x70412e40
add dword [rax + 0x360], 0x615668ed
not dword [rax + 0x260]
sub dword [rax + 0x3c0], 0x7cfe7cba
sub dword [rax + 0x1cc], 0x2dce310c
not dword [rax + 0x3f0]
add dword [rax + 0x240], 0x3cb63365
xor dword [rax + 0x344], 0x1a86222
sub dword [rax + 0x32c], 0x58e44327
sub dword [rax + 0x1b0], 0x69c42aad
not dword [rax + 0x314]
sub dword [rax + 0x1f0], 0x41516abc
xor dword [rax + 0x2a4], 0x3b6c68f4
xor dword [rax + 0x324], 0x62412d8
add dword [rax + 0x164], 0x49670bab
not dword [rax + 0x138]
not dword [rax + 0x28c]
sub dword [rax + 0x14c], 0x2b2d5d8a
sub dword [rax + 0x1c0], 0x50d73660
xor dword [rax + 0x1ec], 0xb0c12e3
xor dword [rax + 0x2a0], 0x10686605
add dword [rax + 0x318], 0x16656f65
xor dword [rax + 0x270], 0x4bca0b8b
xor dword [rax + 0x3a0], 0x234e45e2
not dword [rax + 0x3b8]
add dword [rax + 0xf0], 0x21a54e9d
add dword [rax + 0xb0], 0x6d4b4d3d
xor dword [rax + 0x154], 0x49281336
sub dword [rax + 0x370], 0x5ed83a60
add dword [rax + 0x3cc], 0x6f6d5c36
add dword [rax + 0x30], 0x2d471811
add dword [rax + 0xbc], 0x1eb679c
add dword [rax + 0xf8], 0x4b2076d9
add dword [rax + 0x300], 0x285279b0
xor dword [rax + 0x1d8], 0x24232483
add dword [rax + 0x384], 0x20524585
not dword [rax + 0x3d8]
not dword [rax + 0x248]
sub dword [rax + 0x3b0], 0x33996798
not dword [rax + 0x338]
not dword [rax + 0x3e4]
add dword [rax + 0x380], 0x2ff1397f
xor dword [rax + 0x2dc], 0x30fb736b
xor dword [rax + 0x304], 0x456547f8
sub dword [rax + 0x2b8], 0x7ecc2628
add dword [rax + 0x90], 0x2f221f5b
xor dword [rax + 0x3d0], 0x499423fb
not dword [rax + 0x18]
add dword [rax + 0x10], 0x58fe3d2a
not dword [rax + 0x320]
xor dword [rax + 0x220], 0x313b65a0
not dword [rax + 0x210]
xor dword [rax + 0x340], 0x295219ba
xor dword [rax + 0x1d0], 0x21e35544
xor dword [rax + 0x198], 0x73977bd0
not dword [rax + 0x368]
sub dword [rax + 0x9c], 0xbc432f4
sub dword [rax + 0x184], 0x26636490
sub dword [rax + 0x19c], 0x20c42594
xor dword [rax + 0x33c], 0x6daa0550
add dword [rax + 0x39c], 0x36eb4fc6
xor dword [rax + 0x29c], 0x51915c99
not dword [rax + 0x37c]
not dword [rax + 0xd4]
not dword [rax + 0x4c]
not dword [rax + 0x188]
add dword [rax + 0x20], 0xb694c94
not dword [rax + 0x68]
sub dword [rax + 0x2c], 0x166a4f35
add dword [rax + 0x3e8], 0x64c31262
sub dword [rax + 0x3a4], 0xc4313af
not dword [rax + 0x158]
add dword [rax + 0x398], 0xc7b097c
sub dword [rax + 0x214], 0x1cd26744
xor dword [rax + 0x254], 0x2aa01521
xor dword [rax + 0x178], 0x47a723af
sub dword [rax + 0x88], 0x1e760e4c
sub dword [rax + 0x1fc], 0x63660195
xor dword [rax + 0x3d4], 0x1e5f4a1d
add dword [rax + 0x200], 0x371d5df8
sub dword [rax + 0x20c], 0x467e7d75
not dword [rax + 0x34c]
sub dword [rax + 0x274], 0x3ea04ebe
not dword [rax + 0xcc]
not dword [rax + 0x2e0]
xor dword [rax + 0x28], 0x2b3605f0
not dword [rax + 0x224]
sub dword [rax + 0x350], 0x7f1220df
sub dword [rax + 0xac], 0x69551da
add dword [rax + 0x150], 0x6e5f5ed3
sub dword [rax + 0x1d4], 0x4c017d8
add dword [rax + 0x180], 0x5e973c60
add dword [rax + 0x148], 0x1cea2d3b
sub dword [rax + 0x1f8], 0x5d1139fa
xor dword [rax + 0x124], 0x7e3c4acb
sub dword [rax + 0x5c], 0x776d5ecb
not dword [rax + 0xa8]
not dword [rax + 0x84]
add dword [rax + 0x168], 0x62c574e9
not dword [rax + 0x38c]
sub dword [rax + 0x140], 0x5b4d62ff
not dword [rax + 0x48]
not dword [rax + 0x364]
add dword [rax + 0x18c], 0x1dee52e2
add dword [rax + 0x2c8], 0xaa412f9
add dword [rax + 0x15c], 0x3fd85f88
sub dword [rax + 0x58], 0x491f6621
xor dword [rax + 0x3ac], 0x2ecd05b6
xor dword [rax + 0x60], 0x480579cd
not dword [rax + 0x2c0]
sub dword [rax + 0x64], 0x1cf72d8e
not dword [rax + 0x290]
xor dword [rax + 0x3fc], 0x6f921d5b
not dword [rax + 0x244]
add dword [rax + 0x3ec], 0x1c937c2b
xor dword [rax + 0x10c], 0x4f1629d2
sub dword [rax + 0x308], 0x2f704775
sub dword [rax + 0x3c8], 0x7ff97a29
sub dword [rax + 0xe0], 0x37cc10df
add dword [rax + 0x330], 0xc1b7bc0
xor dword [rax + 0x194], 0x6711186
not dword [rax + 0x374]
add dword [rax + 0x50], 0x22db2806
sub dword [rax + 0x284], 0x3fa95b70
xor dword [rax + 0x3b4], 0xd116d4a
not dword [rax + 0x130]
sub dword [rax + 0x378], 0x7cd14783
add dword [rax + 0xc4], 0x5638565d
not dword [rax + 0x3bc]
xor dword [rax + 0x1e4], 0x58405aa4
sub dword [rax + 0x174], 0x1e74335
sub dword [rax + 0x230], 0x291fa3
xor dword [rax + 0x144], 0x4f3e342c
add dword [rax + 0x258], 0x31345291
xor dword [rax + 0x2f0], 0x62a4254f
add dword [rax + 0x298], 0x7070cd1
sub dword [rax + 0x208], 0x78df549a
not dword [rax + reloc.SHELL32.dll_IsUserAnAdmin]
add dword [rax + 0xd8], 0x2f5063e3
add dword [rax + 0x1c], 0x63755b5e
not dword [rax + 0x2e4]
xor dword [rax + 0x98], 0x286b39b9
xor dword [rax + 0x1a8], 0x44e16fe3
not dword [rax + 0x108]
xor dword [rax + 0x394], 0x6c8c1777
sub dword [rax + 0x134], 0x34c05032
not dword [rax + 0x1b4]
add dword [rax + 0x44], 0x22566997
add dword [rax + 0x35c], 0x10454a23
xor dword [rax + 0x2c4], 0x449e0fff
xor dword [rax + 0x8c], 0x1b5f21cd
add dword [rax + 0x30c], 0x43284d01
add dword [rax + 0x228], 0x43502769
sub dword [rax + 0x2d8], 0x25aa5d3d
add dword [rax + 0xd0], 0x2ab03832
not dword [rax + 0x3e0]
xor dword [rax + 0x2d4], 0x47a026ca
not dword [rax + 0x348]
xor dword [rax + 0x288], 0x6bb765f8
add dword [rax + 0xc], 0x182f3e5a
add dword [rax + 0x190], 0x2b7f62f4
xor dword [rax + 0x204], 0xec50ab6
sub dword [rax + 0xa4], 0x23af6684
sub dword [rax + 0x2b0], 0x73f337e1
xor dword [rax + 0x358], 0x4abd4c1f
not dword [rax + 0x390]
sub dword [rax + 0x354], 0x1c972c8b
not dword [rax + 0x278]
xor dword [rax + 0x110], 0x54a556d6
add dword [rax + 0x74], 0x54456da3
sub dword [rax + 0x3dc], 0x48d75bd7
add dword [rax + 0x80], 0x465d6980
add dword [rax + 0x100], 0x782a6080
xor dword [rax + 0xc8], 0x3233de2
xor dword [rax + 0xdc], 0x3ebb3717
xor dword [rax + 0x23c], 0xdbb58cb
not dword [rax + 0x16c]
sub dword [rax + 0x3c], 0x7e6d633b
not dword [rax + 0x25c]
not dword [rax + 0x3f8]
xor dword [rax + 0x1a4], 0x16d00526
xor dword [rax + 0x1c4], 0x37c16a3c
xor dword [rax + 0xc0], 0x2c9f7e6a
xor dword [rax + 0x1f4], 0x69f56e5e
sub dword [rax + 0x54], 0x6170590c
add dword [rax + 0x2d0], 0x5c445af2
not dword [rax + 0x388]
sub dword [rax + 0x6c], 0x664771ad
add dword [rax + 0x12c], 0x6e0f5ece
sub dword [rax + 0x334], 0x300a297e
add dword [rax + 0x2ec], 0x3db48ae
xor dword [rax + 0x294], 0x3d677b06
add dword [rax + 0x21c], 0x63a50e8e
xor dword [rax + 0x1e0], 0x467a0539
add dword [rax + 0x218], 0x132b3028
sub dword [rax + 0x3c4], 0x5f8e5167
add dword [rax + 0x2cc], 0x59356444
add dword [rax + 0x1bc], 0x697a226c
sub dword [rax + 0x2fc], 0x215150b1
sub dword [rax + 0x14], 0x8151733
xor dword [rax + 0x34], 0x78960639
add dword [rax + 0x128], 0x53336732
add dword [rax + 0x1ac], 0x3c6e1b8b
sub dword [rax + 0x2bc], 0x1e6e311a
add dword [rax + 0xf4], 0x309f7489
xor dword [rax + 0x11c], 0x7fd604b3
xor dword [rax + 0x114], 0x476c4013
not dword [rax + 0x3f4]
not dword [rax + 0x38]
xor dword [rax + 0x120], 0x7f1566ae
add dword [rax + 0x310], 0x47cc4890
sub dword [rax + 0x1b8], 0x10340f54
not dword [rax + 0x170]
add dword [rax + 0x94], 0x60eb7d35
not dword [rax + 0x160]
add dword [rax + 0x238], 0x5ca442d2
xor dword [rax + 0x264], 0x4aa33884
add dword [rax + 0x1c8], 0x68477c77
add dword [rax + 0xa0], 0x3b2c7872
not dword [rax + 0x268]
add dword [rax + 0x118], 0x65156633
not dword [rax + 0xb4]
sub dword [rax + 0x234], 0x625144b4
not dword [rax + 0xb8]
not dword [rax + 0x17c]
xor dword [rax + 8], 0x5bf72e7b
not dword [rax + 0x1e8]
not dword [rax + 0x78]
add dword [rax + 0x36c], 0x21ee0b7a
sub dword [rax + 0xfc], 0x250f6047
not dword [rax + 0xe4]
not dword [rax + 4]
sub dword [rax + 0x2b4], 0x69bd7234
add dword [rax + 0x24], 0x49d12217
sub dword [rax + 0xe8], 0x76d237da
xor dword [rax + 0x328], 0x694d7756
sub dword [rax + 0x27c], 0x10dd03ed
sub dword [rax + 0x104], 0x6e297bc7
add dword [rax + 0x31c], 0x7a150af
not dword [rax + 0x13c]
sub dword [rax + 0x1a0], 0x399d4120
add dword [rax + 0x2f4], 0x9c2010d
add dword [rax + 0x280], 0x23335a20
xor dword [rax + 0x7c], 0x40001d62
add dword [rax + 0x1dc], 0x25dc3f16
sub dword [rax + 0x2f8], 0x1f6e094c
not dword [rax + 0x2e8]
add rbx, 0x400
add rax, 0x400
cmp rbx, 0x8c000
je 0x1402878f4
jmp 0x140287035
pop rcx
call fcn.14028513e
mov rsp, rbp
pop rbp
pop r15
pop r14
pop r13
pop r12
pop r11
pop r10
pop r9
pop r8
pop rdi
pop rsi
pop rbp
pop rbx
pop rdx
pop rcx
pop rax