Function at 0x1401fa000
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rax
push rcx
push rdx
push rbx
push rbp
push rsi
push rdi
push r8
push r9
push r10
push r11
push r12
push r13
push r14
push r15
push rbp
mov rbp, rsp
sub rsp, 0x20
and rsp, 0xfffffffffffffff0
lea rcx, [0x14016d400]
movabs rsi, 0
push rcx
add dword [rcx + 0x1a0], 0x2ac231db
not dword [rcx + 0x184]
not dword [rcx + 0x1c]
not dword [rcx + 0x338]
add dword [rcx + 0x2bc], 0x41654754
xor dword [rcx + 0x2d8], 0x32cd4e5e
sub dword [rcx + 0x5c], 0x38c35fb7
xor dword [rcx + 0x30], 0x1318065e
xor dword [rcx + 0x230], 0x72c01662
xor dword [rcx + 0x3a4], 0x2f99473a
xor dword [rcx + 0x1f8], 0x1631b16
xor dword [rcx + 0x388], 0x21f20706
add dword [rcx + 0x180], 0x36f025d4
not dword [rcx + 0x1f0]
sub dword [rcx + 0x210], 0x71503af2
xor dword [rcx + 0xe0], 0xd326fab
not dword [rcx + 0x2a0]
not dword [rcx + 0x2ac]
not dword [rcx + 0x90]
add dword [rcx + 0x36c], 0x4c912c08
add dword [rcx + 0x1f4], 0x2c92fbb
not dword [rcx + 0xc4]
xor dword [rcx + 0x26c], 0x2ac651cb
sub dword [rcx + 0x304], 0x2a5a5bf3
xor dword [rcx + 0x1e4], 0x379b70a9
add dword [rcx + 0x124], 0x7fa37b0e
add dword [rcx + 0x2c8], 0x46fb03b9
not dword [rcx + 0xd8]
sub dword [rcx + 0x70], 0x5270f63
sub dword [rcx + 0x7c], 0x4a8c1cf9
xor dword [rcx + 0x1dc], 0x15637759
xor dword [rcx + 0x220], 0x74100c78
not dword [rcx + 0x2a4]
not dword [rcx + 0x1b4]
sub dword [rcx + 0x19c], 0x13616613
xor dword [rcx + 0x258], 0x1310345c
sub dword [rcx + 0x1cc], 0x51226bd8
add dword [rcx + 0x248], 0x21027543
xor dword [rcx + 0x214], 0x1f60503b
not dword [rcx + 0xc0]
not dword [rcx + 0x3b4]
xor dword [rcx + 0x3d8], 0x247f0039
add dword [rcx + 0x160], 0x64bb35e9
add dword [rcx + 0x10], 0x4e0913e2
xor dword [rcx], 0x52792626
xor dword [rcx + 0x3a8], 0x372722a9
xor dword [rcx + 0xf0], 0x1db14e19
not dword [rcx + 0x2b8]
not dword [rcx + 0x64]
sub dword [rcx + 0x354], 0xf084a6e
add dword [rcx + 0x324], 0x6029071c
not dword [rcx + 0x2f8]
not dword [rcx + 0x134]
sub dword [rcx + 0x3a0], 0x453523bc
sub dword [rcx + 0x9c], 0x2e204299
not dword [rcx + 0x128]
add dword [rcx + 0x20c], 0x25c11119
sub dword [rcx + 0x318], 0x1f986d8d
sub dword [rcx + 0x278], 0x2b29106f
sub dword [rcx + 8], 0x5e2724d8
not dword [rcx + 0xd0]
add dword [rcx + 0x2e8], 0x13e379f9
sub dword [rcx + 0x274], 0x24ec2880
sub dword [rcx + 0x12c], 0x59926a35
add dword [rcx + 0x290], 0x240c2572
not dword [rcx + 0x2b4]
add dword [rcx + 0x334], 0x6ba659a4
add dword [rcx + 0x154], 0x31e45220
add dword [rcx + 0x31c], 0x50ef53b0
not dword [rcx + 0x2b0]
xor dword [rcx + 0x1bc], 0x1a84065a
xor dword [rcx + 0x1c0], 0x399b0e06
not dword [rcx + 0x2d0]
sub dword [rcx + 0x368], 0x2e3a297f
sub dword [rcx + 0x68], 0x7782597e
not dword [rcx + 0x14]
not dword [rcx + 0x224]
add dword [rcx + 0xdc], 0x14921da4
not dword [rcx + 0x1d0]
xor dword [rcx + 0x2c4], 0x51086fa2
sub dword [rcx + 0x25c], 0x5d957210
not dword [rcx + 0xac]
add dword [rcx + 0x314], 0x28b70b8b
sub dword [rcx + 0x2e0], 0x48d777fb
add dword [rcx + 0x3cc], 0x647133a8
not dword [rcx + 0x11c]
add dword [rcx + 0x270], 0x186d35b3
sub dword [rcx + 0x194], 0x23491281
sub dword [rcx + 0x24c], 0xbf51402
sub dword [rcx + 0x28c], 0x387f4c54
add dword [rcx + 0x35c], 0x4b845e90
xor dword [rcx + 0x348], 0x68c562a8
xor dword [rcx + 0x108], 0x27bf2737
not dword [rcx + 0x3d0]
add dword [rcx + 0xec], 0x1de44622
sub dword [rcx + 0x208], 0x358a0f2f
xor dword [rcx + 0x17c], 0x14118ec
add dword [rcx + 0x1b0], 0x6f71148d
sub dword [rcx + 0x13c], 0x7bcd5e15
xor dword [rcx + 0x1e0], 0x368a15d1
xor dword [rcx + 0x60], 0x7cf75ebd
xor dword [rcx + 0x39c], 0x5fbe1abe
sub dword [rcx + 0x370], 0x57db32c2
not dword [rcx + 0x378]
xor dword [rcx + 0x28], 0x3de650e9
sub dword [rcx + 0x3c8], 0x69983bab
add dword [rcx + 0x268], 0x4dcb0573
sub dword [rcx + 0x16c], 0x4501268e
not dword [rcx + 0x78]
sub dword [rcx + 0x48], 0x2ae91c54
sub dword [rcx + 0x2cc], 0x11632c0d
xor dword [rcx + 0xc], 0x63754373
add dword [rcx + 0xd4], 0x48b17f90
add dword [rcx + 0xb0], 0x23150b63
xor dword [rcx + 0x1b8], 0x253f2da7
xor dword [rcx + 0x138], 0x10e20876
not dword [rcx + 0x390]
sub dword [rcx + 0x29c], 0x4fab74df
not dword [rcx + 0xcc]
sub dword [rcx + 4], 0x73c3b46
not dword [rcx + 0x360]
not dword [rcx + 0x328]
not dword [rcx + 0x98]
not dword [rcx + 0x3e8]
not dword [rcx + 0x144]
add dword [rcx + 0x2c0], 0x4d6e0079
add dword [rcx + 0x344], 0x465d190f
sub dword [rcx + 0x94], 0xb8c71d3
not dword [rcx + 0x294]
xor dword [rcx + 0x288], 0x3d9076c0
xor dword [rcx + 0x118], 0x5c784340
xor dword [rcx + 0x150], 0x3b928b8
xor dword [rcx + 0x250], 0x7a0a389b
not dword [rcx + 0x284]
add dword [rcx + 0x4c], 0x395d34f5
add dword [rcx + 0x38], 0x3f8d6231
sub dword [rcx + 0x198], 0x31fa6cf5
xor dword [rcx + 0x1e8], 0x6bba5155
sub dword [rcx + 0x238], 0x6e5f2c58
xor dword [rcx + 0x308], 0x414a4980
sub dword [rcx + 0x254], 0x7ae81aa1
sub dword [rcx + 0x10c], 0x1fdc1a5b
not dword [rcx + 0x18c]
add dword [rcx + 0x88], 0x73894ba0
sub dword [rcx + 0x50], 0x3b222dec
xor dword [rcx + 0x260], 0x599667ba
add dword [rcx + 0x190], 0x54364cfb
add dword [rcx + 0x140], 0x54dd4009
add dword [rcx + 0x2c], 0x4c45628f
not dword [rcx + 0x3b0]
xor dword [rcx + 0x23c], 0x3841ff2
add dword [rcx + 0xfc], 0x29f421e3
sub dword [rcx + 0x2e4], 0x192a47ac
sub dword [rcx + 0x24], 0x42b33c6c
xor dword [rcx + 0x3ec], 0x29b46e31
not dword [rcx + 0x264]
add dword [rcx + 0x3ac], 0x673370ff
sub dword [rcx + 0x32c], 0x642b5d2c
xor dword [rcx + 0x2fc], 0x78715f6f
sub dword [rcx + 0x120], 0x12b56e92
xor dword [rcx + 0xa4], 0x5798578e
not dword [rcx + 0x3f4]
not dword [rcx + 0x3c0]
not dword [rcx + 0x300]
add dword [rcx + 0x1c8], 0x17a261b0
not dword [rcx + 0x34c]
sub dword [rcx + 0x3e0], 0x2bdc48e8
xor dword [rcx + 0x398], 0x1e3a2b37
sub dword [rcx + 0x298], 0xbd27a04
xor dword [rcx + 0x3f0], 0x13a92c37
xor dword [rcx + 0xbc], 0x70c56eaa
not dword [rcx + 0xa8]
xor dword [rcx + 0x130], 0x5c0b6e80
not dword [rcx + 0x1d8]
add dword [rcx + 0x3d4], 0x91e2d1d
xor dword [rcx + 0x384], 0x650e704b
add dword [rcx + 0x2f4], 0x364c2447
xor dword [rcx + 0x228], 0x331d69b8
xor dword [rcx + 0x3f8], 0x715e7aaf
xor dword [rcx + 0x350], 0x21d55c56
add dword [rcx + 0x234], 0x31505749
sub dword [rcx + 0x3bc], 0xa272558
sub dword [rcx + 0x358], 0x1e0a2cf5
add dword [rcx + 0x34], 0x30af778f
add dword [rcx + 0x38c], 0x7508655b
add dword [rcx + 0x3fc], 0x30e92a4c
add dword [rcx + 0x14c], 0x5fd23e98
sub dword [rcx + 0x158], 0x4b3671b9
add dword [rcx + 0x37c], 0x753f47a2
sub dword [rcx + 0x374], 0x75402e47
not dword [rcx + 0x54]
not dword [rcx + 0x114]
sub dword [rcx + 0xa0], 0x66f26447
sub dword [rcx + 0x218], 0x75302a84
sub dword [rcx + 0x2d4], 0x21693902
not dword [rcx + 0xe8]
not dword [rcx + 0x1a4]
sub dword [rcx + 0x6c], 0x3a814a8e
sub dword [rcx + 0x58], 0x18bd744b
add dword [rcx + 0x188], 0x4c026734
sub dword [rcx + 0x30c], 0x5de42f6d
not dword [rcx + 0x1ec]
add dword [rcx + 0x394], 0x58a63d91
xor dword [rcx + 0x27c], 0x1de75b3a
add dword [rcx + 0x2dc], 0x4e6d3150
xor dword [rcx + 0xe4], 0x1713544f
sub dword [rcx + 0x1d4], 0x4a2f1512
not dword [rcx + 0x170]
xor dword [rcx + 0xf4], 0x56da2e53
add dword [rcx + 0x3dc], 0xc710749
not dword [rcx + 0x40]
add dword [rcx + 0x20], 0x68028a0
xor dword [rcx + reloc.SHELL32.dll_IsUserAnAdmin], 0x5d6b47f7
sub dword [rcx + 0x84], 0x726976f5
not dword [rcx + 0x204]
sub dword [rcx + 0x3c4], 0x79a76f3f
sub dword [rcx + 0x200], 0x1dbf31ab
xor dword [rcx + 0x168], 0x1783708
sub dword [rcx + 0x18], 0x37b11702
xor dword [rcx + 0x320], 0x62524510
sub dword [rcx + 0x1fc], 0x1d0a088c
add dword [rcx + 0x174], 0x58b32be
sub dword [rcx + 0x104], 0x17671b75
not dword [rcx + 0x380]
add dword [rcx + 0x148], 0x4fa34767
not dword [rcx + 0x33c]
add dword [rcx + 0x100], 0x74c542db
xor dword [rcx + 0x74], 0x145d2341
not dword [rcx + 0x364]
xor dword [rcx + 0x22c], 0x5bf4232a
sub dword [rcx + 0x110], 0x7c472bb6
xor dword [rcx + 0x3e4], 0x4a807f17
add dword [rcx + 0x240], 0x3679190e
sub dword [rcx + 0x178], 0x473c2648
xor dword [rcx + 0x44], 0x701e47d7
sub dword [rcx + 0xb4], 0x51b2706a
xor dword [rcx + 0x164], 0x5fa23b03
sub dword [rcx + 0x3b8], 0x5d7a6456
xor dword [rcx + 0x8c], 0x52853ce8
add dword [rcx + 0x1a8], 0x763b0e16
sub dword [rcx + 0x1c4], 0x8d90035
add dword [rcx + 0xb8], 0x4e8e3dac
add dword [rcx + 0x80], 0x4b451769
not dword [rcx + 0xc8]
xor dword [rcx + 0x244], 0x46ce1941
sub dword [rcx + 0x340], 0x2473579e
not dword [rcx + 0x15c]
sub dword [rcx + 0x3c], 0x16d663a2
sub dword [rcx + 0x310], 0x20e37055
not dword [rcx + 0x1ac]
xor dword [rcx + 0x2ec], 0x419f148e
add dword [rcx + 0x280], 0x59294bba
sub dword [rcx + 0x330], 0x12f814c3
sub dword [rcx + 0x2f0], 0x6a996589
not dword [rcx + 0xf8]
not dword [rcx + 0x21c]
add rsi, 0x400
add rcx, 0x400
cmp rsi, 0x8c000
je 0x1401fa8f4
jmp 0x1401fa035
pop rcx
call 0x1401f853e
mov rsp, rbp
pop rbp
pop r15
pop r14
pop r13
pop r12
pop r11
pop r10
pop r9
pop r8
pop rdi
pop rsi
pop rbp
pop rbx
pop rdx
pop rcx
pop rax