Function at 0x1401d9000
Capabilities:
Encode data using xor

Disassembly:
push rax
push rcx
push rdx
push rbx
push rbp
push rsi
push rdi
push r8
push r9
push r10
push r11
push r12
push r13
push r14
push r15
push rbp
mov rbp, rsp
sub rsp, 0x20
and rsp, 0xfffffffffffffff0
lea rax, [0x14014ca00]
push 0
pop rcx
push rax
not dword [rax + 0xb0]
xor dword [rax + 0x378], 0x3850671f
add dword [rax + 0x388], 0x1ad63179
not dword [rax + 0x23c]
sub dword [rax + 0x2dc], 0x40fe5ad6
add dword [rax + 0xcc], 0x3e5e4924
xor dword [rax + 0xa0], 0x35b96d39
add dword [rax + 0x18], 0x52515ad1
xor dword [rax + 0x15c], 0x128533aa
not dword [rax + 0x204]
sub dword [rax + 0x254], 0x610f1531
add dword [rax + 0x2e8], 0x3cce44b8
not dword [rax + 0xac]
xor dword [rax + 0x31c], 0x37c6528d
add dword [rax + 0x210], 0x7dea053b
add dword [rax + 0xe0], 0xcaa703b
add dword [rax + 0x320], 0x1efa33cd
sub dword [rax + 0x50], 0x59e70f79
sub dword [rax + 0x2f0], 0x32322d2c
not dword [rax + 0x8c]
add dword [rax + 0x364], 0x166e0b5e
xor dword [rax + 0x3e4], 0x573967ea
xor dword [rax + 0x78], 0x61840356
add dword [rax + 0x25c], 0x88a39af
add dword [rax + 0x70], 0x3dd45c1f
sub dword [rax + 0x330], 0x455e2df7
add dword [rax + 0x394], 0x192e1d93
not dword [rax + 0x170]
xor dword [rax + 0x64], 0x32493150
add dword [rax + 0xec], 0x25771398
not dword [rax + 0x1e0]
not dword [rax + 0x278]
not dword [rax + 0x2f8]
add dword [rax + 0x17c], 0x2f7a560d
add dword [rax + 0x158], 0x3212072d
xor dword [rax + 0x384], 0x47e8788f
xor dword [rax + 0x264], 0x1ed0378a
sub dword [rax + 0x16c], 0x5880211a
xor dword [rax + 0x1b0], 0x67a0c51
add dword [rax + 0x33c], 0x9f81be3
sub dword [rax + 0x354], 0x91a411b
add dword [rax + 0x310], 0x14cf0829
add dword [rax + 0x3dc], 0x21e55265
sub dword [rax + 0x358], 0x4ae207a2
add dword [rax + 0x1b8], 0x5f3774df
not dword [rax + 0xe8]
xor dword [rax + 0x214], 0x7e021cbc
xor dword [rax + 0x9c], 0x10864ce8
add dword [rax + 0x1dc], 0x6e741028
not dword [rax + 0x10]
not dword [rax + 0x200]
xor dword [rax + 0x21c], 0x5cf4899
add dword [rax + 0x294], 0x6e1f12ea
not dword [rax + 0x1bc]
add dword [rax + 0x290], 0x1a476004
sub dword [rax + 0x54], 0x70da3a66
sub dword [rax + 0x3a4], 0x3d0f2e18
not dword [rax + 0x318]
not dword [rax + 0x2c0]
xor dword [rax + 0x18c], 0x626b7abe
not dword [rax + 0x88]
add dword [rax + 0x3c0], 0x3ef13d3e
xor dword [rax + 4], 0x297523d1
sub dword [rax + 0xe4], 0x703f084c
not dword [rax + 0x29c]
sub dword [rax + 0x2a4], 0x7e635b2
not dword [rax + 0xf8]
not dword [rax + 0x3f4]
sub dword [rax + 0x98], 0x6f561453
xor dword [rax + 0x328], 0x147f552d
add dword [rax + 0xc0], 0x70261978
xor dword [rax + 0x1cc], 0x730c2981
sub dword [rax + 0x2cc], 0x5b591a53
xor dword [rax + 0x4c], 0x26984f66
add dword [rax + 0x228], 0xac35875
xor dword [rax + 0x140], 0x294a191c
xor dword [rax + 0xbc], 0x21360ce4
xor dword [rax + 0x340], 0x562c01ba
xor dword [rax + 0x10c], 0x56cb3453
not dword [rax + 0x174]
add dword [rax + 0x380], 0x21e57b47
not dword [rax + 0x26c]
sub dword [rax + 0x180], 0x5fd0783a
sub dword [rax + 0x230], 0x1a7b5153
add dword [rax + 0x2a0], 0x42c6335f
xor dword [rax + 0x198], 0x65131fb1
xor dword [rax + 0x1c4], 0x38ef1522
sub dword [rax + 0x224], 0x18360cd3
sub dword [rax + 0x274], 0x5e102c92
add dword [rax + 0x2c], 0x39b33fd8
xor dword [rax + 0x34c], 0x12a813a4
sub dword [rax + 0x1a4], 0xc7f590b
xor dword [rax + 0x3a8], 0x56876df1
not dword [rax + 0x370]
not dword [rax + 0x100]
sub dword [rax + 0x188], 0x60237e85
add dword [rax + 0x2b8], 0xceb74a0
add dword [rax + 0xd8], 0x3faf5d55
sub dword [rax + 0x324], 0xd063881
xor dword [rax + 0xb8], 0x25117eef
sub dword [rax + 0x1fc], 0x7d652ca7
not dword [rax + 0x304]
not dword [rax + 0x38]
add dword [rax + 0x1c8], 0xe1a1946
not dword [rax + 0x14c]
sub dword [rax + 0xd0], 0x467d298f
not dword [rax + 0x248]
xor dword [rax + 0x19c], 0x29321aa
not dword [rax + 0x32c]
sub dword [rax + 0x244], 0x4fba7fd3
not dword [rax + 0x1f4]
xor dword [rax + 0x344], 0x30aa7f57
xor dword [rax + 0x368], 0x6ee0abe
xor dword [rax + 0x3f0], 0x7cfc256e
add dword [rax + 0x74], 0x7bff1bfb
sub dword [rax + 0x154], 0x263a4e8a
xor dword [rax + 0x1d0], 0x1d845f5c
sub dword [rax + 0x308], 0x5c1d51f5
not dword [rax + 0x1c]
xor dword [rax + 0x298], 0x700709a8
not dword [rax + 0x104]
add dword [rax + reloc.SHELL32.dll_IsUserAnAdmin], 0x44b17917
xor dword [rax + 0xd4], 0x72d700d3
add dword [rax + 0x20], 0xcef14bd
add dword [rax + 0x35c], 0x7c0a7235
sub dword [rax + 0x398], 0x6ef307f6
sub dword [rax + 0x7c], 0x784319e3
add dword [rax + 0x3b4], 0x21e508ba
not dword [rax]
sub dword [rax + 0x2e4], 0x30c92186
xor dword [rax + 0x2bc], 0x69ef5c48
sub dword [rax + 0x190], 0x21f6c57
add dword [rax + 0x12c], 0x2de727fd
add dword [rax + 0x268], 0x483b4a42
add dword [rax + 0x1d4], 0x51f92be1
not dword [rax + 0x2d0]
xor dword [rax + 0x374], 0x433e0ca6
add dword [rax + 0x390], 0x7f186d23
not dword [rax + 0x3cc]
add dword [rax + 0x334], 0xbee2e10
not dword [rax + 0x178]
not dword [rax + 0x2c4]
sub dword [rax + 0x3c], 0x1acb5ad5
not dword [rax + 0x1c0]
xor dword [rax + 0x250], 0x33250203
xor dword [rax + 8], 0x683a4525
sub dword [rax + 0x110], 0x3d4e6ddf
add dword [rax + 0x280], 0x1e1c13d6
add dword [rax + 0x48], 0x475e1e0c
xor dword [rax + 0x1f8], 0x45433412
sub dword [rax + 0x27c], 0x7d25070f
not dword [rax + 0x114]
not dword [rax + 0x3d4]
xor dword [rax + 0x6c], 0x35742028
sub dword [rax + 0x300], 0x18455318
xor dword [rax + 0x1a8], 0x7e5e7610
not dword [rax + 0x14]
not dword [rax + 0x194]
sub dword [rax + 0x2fc], 0x7ff314de
not dword [rax + 0x1a0]
sub dword [rax + 0x2ac], 0x43a254db
add dword [rax + 0x3e0], 0x26172b96
add dword [rax + 0x164], 0x4c031bc5
sub dword [rax + 0x24], 0x2e7c17d4
sub dword [rax + 0x234], 0x6b657984
sub dword [rax + 0x258], 0x175756f3
add dword [rax + 0xc8], 0x5dc92e89
add dword [rax + 0x3ac], 0x397320a1
xor dword [rax + 0x5c], 0x283d5b66
sub dword [rax + 0xb4], 0x71922e80
sub dword [rax + 0x208], 0x341c46b3
sub dword [rax + 0xa4], 0x4f1a4164
xor dword [rax + 0x36c], 0x5d437dc6
not dword [rax + 0x138]
not dword [rax + 0xfc]
xor dword [rax + 0x68], 0x6a8e1fb7
not dword [rax + 0x2d8]
xor dword [rax + 0x284], 0x69ec5c50
sub dword [rax + 0x3d0], 0x39e669d
xor dword [rax + 0x39c], 0x2ef232c1
add dword [rax + 0x3b8], 0x74ef3bf1
xor dword [rax + 0x168], 0x4a5b3f2b
add dword [rax + 0xc], 0x535054d0
sub dword [rax + 0x1ec], 0x434841c8
xor dword [rax + 0x38c], 0x11927309
add dword [rax + 0x1d8], 0x7582ecf
sub dword [rax + 0x124], 0x17486984
add dword [rax + 0x44], 0x79a81f32
not dword [rax + 0x80]
sub dword [rax + 0x314], 0x35864914
sub dword [rax + 0x28], 0x22f31c20
add dword [rax + 0x148], 0x6cea418a
add dword [rax + 0x37c], 0x5b0559ab
add dword [rax + 0x2b4], 0x19163771
add dword [rax + 0x350], 0x149a562c
not dword [rax + 0xf4]
not dword [rax + 0x1b4]
not dword [rax + 0x3fc]
not dword [rax + 0x1e4]
not dword [rax + 0x1ac]
sub dword [rax + 0x150], 0x39297e5d
sub dword [rax + 0x1f0], 0x9596745
not dword [rax + 0x2ec]
not dword [rax + 0x2f4]
not dword [rax + 0x3b0]
add dword [rax + 0x118], 0x1cfa770b
not dword [rax + 0x160]
sub dword [rax + 0xdc], 0x18864d9c
xor dword [rax + 0x60], 0x10313744
sub dword [rax + 0x22c], 0x79a4749f
xor dword [rax + 0x1e8], 0x46dd1c26
xor dword [rax + 0x58], 0xc55728f
not dword [rax + 0x11c]
xor dword [rax + 0x90], 0x19e0465c
not dword [rax + 0x13c]
sub dword [rax + 0x220], 0x1dd64144
not dword [rax + 0x238]
xor dword [rax + 0x134], 0x1b9b3e64
xor dword [rax + 0x270], 0x6a5363a9
xor dword [rax + 0xc4], 0xe5f04a9
xor dword [rax + 0x3bc], 0x3e6163c9
sub dword [rax + 0x84], 0x12912f46
sub dword [rax + 0x260], 0x11f6a9f
sub dword [rax + 0x3e8], 0x7cf31f8e
sub dword [rax + 0x40], 0x660d52e6
xor dword [rax + 0x2d4], 0x62727ad2
not dword [rax + 0x240]
xor dword [rax + 0x130], 0x43f95639
xor dword [rax + 0xf0], 0x6db12ff8
not dword [rax + 0x28c]
not dword [rax + 0x3ec]
xor dword [rax + 0x120], 0x7d685c29
xor dword [rax + 0x2b0], 0xe9415b7
sub dword [rax + 0x144], 0x1ea46a07
not dword [rax + 0x2e0]
xor dword [rax + 0x2c8], 0x300733cf
xor dword [rax + 0x3c8], 0x1e4f5fe4
add dword [rax + 0x3d8], 0x221f699c
xor dword [rax + 0x218], 0x57a6efd
not dword [rax + 0x360]
sub dword [rax + 0x3a0], 0x4a8c5a87
sub dword [rax + 0x128], 0x2b2958b0
sub dword [rax + 0x94], 0x23b456b1
not dword [rax + 0x3c4]
not dword [rax + 0x30]
add dword [rax + 0x348], 0x27740f0c
add dword [rax + 0x108], 0x6657dae
xor dword [rax + 0xa8], 0x10ce0b1d
not dword [rax + 0x3f8]
xor dword [rax + 0x34], 0x7cd031ef
not dword [rax + 0x20c]
sub dword [rax + 0x30c], 0x7d720dc8
sub dword [rax + 0x24c], 0x3b626c4f
sub dword [rax + 0x338], 0x64b730fa
xor dword [rax + 0x184], 0x3eb91377
sub dword [rax + 0x288], 0x49a75e71
add rcx, 0x400
add rax, 0x400
cmp rcx, 0x8c000
jne 0x1401d902e
pop rcx
call fcn.1401d8306
mov rsp, rbp
pop rbp
pop r15
pop r14
pop r13
pop r12
pop r11
pop r10
pop r9
pop r8
pop rdi
pop rsi
pop rbp
pop rbx
pop rdx
pop rcx
pop rax