Function at 0x1404a1000
Capabilities:
Encode data using xor

Disassembly:
push rax
push rcx
push rdx
push rbx
push rbp
push rsi
push rdi
push r8
push r9
push r10
push r11
push r12
push r13
push r14
push r15
push rbp
mov rbp, rsp
sub rsp, 0x20
and rsp, 0xfffffffffffffff0
lea rdx, [0x140414800]
push 0
pop rcx
push rdx
xor dword [rdx + 0xac], 0xcfa4051
not dword [rdx + 0x378]
not dword [rdx + 0x288]
sub dword [rdx + 0x3b0], 0x21c53075
sub dword [rdx + 0x120], 0x5f262858
xor dword [rdx + 0x8c], 0x694a3d93
add dword [rdx + 0x2fc], 0x48746b23
xor dword [rdx + 0x1b8], 0x395301cc
xor dword [rdx + 0xb0], 0x34be38d3
not dword [rdx + 0x80]
xor dword [rdx + 0x110], 0x5db31911
not dword [rdx + 0xa0]
not dword [rdx + 0xe8]
not dword [rdx + 0x1a0]
add dword [rdx + 0x208], 0x19a97380
add dword [rdx + 0x84], 0x23803a1e
sub dword [rdx + 0x1a4], 0x329d5289
add dword [rdx + 0x184], 0x62581dc0
xor dword [rdx + 0x78], 0x263002a9
xor dword [rdx + 0x3f0], 0x1feb2a3c
not dword [rdx + 0x334]
add dword [rdx + 0x27c], 0x526e64e7
sub dword [rdx + 0x58], 0x41b8336f
not dword [rdx + 0x248]
sub dword [rdx + 0x1c4], 0x26c8456d
sub dword [rdx + 0x368], 0x60a275c9
xor dword [rdx + 0x3c0], 0x12792edf
add dword [rdx + 0x174], 0x67cb657d
xor dword [rdx + 0x320], 0x3c247f83
add dword [rdx + 0x33c], 0x56074db8
not dword [rdx + 4]
sub dword [rdx + 0x34], 0x1c34b8
add dword [rdx + 0xc8], 0x3d1f44a8
add dword [rdx + 0x1a8], 0x7f711fba
not dword [rdx + 0x1ac]
add dword [rdx + 0x2ec], 0x66355e5a
add dword [rdx + 0x130], 0x33a87d88
sub dword [rdx + 0x24c], 0x6bc222ba
add dword [rdx + 0x114], 0x60c73624
xor dword [rdx + 0x384], 0x45251af8
not dword [rdx + 0x398]
add dword [rdx + reloc.SHELL32.dll_IsUserAnAdmin], 0x17c163c2
add dword [rdx + 0x2e8], 0x15a301e2
not dword [rdx + 0x230]
sub dword [rdx + 0x23c], 0x42ae465b
not dword [rdx + 0x394]
sub dword [rdx + 0x1e4], 0x5379095f
sub dword [rdx + 0x13c], 0x6fd83b26
sub dword [rdx + 0x54], 0x5dd737ff
not dword [rdx + 0x90]
add dword [rdx + 0x260], 0x49de3338
xor dword [rdx + 0x190], 0x71485a1d
add dword [rdx + 0x4c], 0x407d1ca4
xor dword [rdx + 0x374], 0x4b7f3433
not dword [rdx + 0x2f8]
not dword [rdx + 0x2f4]
not dword [rdx + 0x270]
xor dword [rdx + 0xd4], 0x1f823eb2
xor dword [rdx + 0x12c], 0x4e6458fe
not dword [rdx + 0x104]
xor dword [rdx + 0x3c], 0x33c70f5b
xor dword [rdx + 0x5c], 0x15e50014
add dword [rdx + 0xfc], 0x78eb09d9
sub dword [rdx + 0x20c], 0x4fbd6ece
not dword [rdx + 0xec]
xor dword [rdx + 0x3e4], 0x29551a28
sub dword [rdx + 0x36c], 0x72991be9
xor dword [rdx + 0x18c], 0x49c31c96
sub dword [rdx + 0x350], 0x62574c01
not dword [rdx + 0x220]
add dword [rdx + 0x2dc], 0x48a55659
not dword [rdx + 0x31c]
not dword [rdx + 0x11c]
xor dword [rdx + 0x7c], 0x2c890766
sub dword [rdx + 0x158], 0x6f457c72
sub dword [rdx + 0x2bc], 0x472e7438
not dword [rdx + 0x2d4]
xor dword [rdx + 0x264], 0x4ca1680c
sub dword [rdx + 0x234], 0x1fd92c96
xor dword [rdx + 0x140], 0x47065481
not dword [rdx + 0x3c4]
xor dword [rdx + 0x2e4], 0x55ae7d2c
add dword [rdx + 0x39c], 0xa5675f0
add dword [rdx + 0x3d4], 0x172d551a
xor dword [rdx + 0x21c], 0x4de41b0c
add dword [rdx + 0x240], 0x3a1f0218
xor dword [rdx + 0x2f0], 0x5f1f54fb
not dword [rdx + 0x35c]
add dword [rdx + 0x30c], 0x4fc60b21
xor dword [rdx + 0x1d0], 0x3eea42ce
sub dword [rdx + 0x100], 0x1d5b3e34
sub dword [rdx + 0xf4], 0x48d76ddc
sub dword [rdx + 0x48], 0x22e35746
xor dword [rdx + 0x2d8], 0x5e9b0797
not dword [rdx + 0x330]
sub dword [rdx + 0x1c], 0x36e831d4
add dword [rdx + 0x3ec], 0x7dcb14f4
not dword [rdx + 0x3e8]
not dword [rdx + 0x15c]
add dword [rdx + 0xd8], 0x15426450
sub dword [rdx + 0x10], 0x33e63371
xor dword [rdx + 0xb8], 0x4fb604ae
sub dword [rdx + 0x1bc], 0x4d4e2287
not dword [rdx + 0x298]
sub dword [rdx + 0x26c], 0x2be64b2e
add dword [rdx + 0x38c], 0x1944256d
add dword [rdx + 0x70], 0x6d2342f8
xor dword [rdx + 0x198], 0x63605fae
sub dword [rdx + 0x1b0], 0x7c6a1e5f
xor dword [rdx + 0x3d0], 0x1f58149d
sub dword [rdx + 0x1e0], 0x4fee57a8
add dword [rdx + 0xf8], 0x95441b1
not dword [rdx + 0x250]
xor dword [rdx + 0x2c], 0x2dea3c9b
xor dword [rdx + 0x218], 0x558f048d
xor dword [rdx + 0xc0], 0x22231947
sub dword [rdx + 0xe0], 0x21a8663f
xor dword [rdx + 0x108], 0x588f49f1
sub dword [rdx + 0x274], 0x76ee18ea
xor dword [rdx + 0x160], 0x7c8e0aa8
not dword [rdx + 0x170]
add dword [rdx + 0x134], 0x761b4471
not dword [rdx + 0x32c]
not dword [rdx + 0x294]
add dword [rdx + 0x2a4], 0x36cb7c98
xor dword [rdx + 0x34c], 0x1b653a44
sub dword [rdx + 0x310], 0x5e70bca
xor dword [rdx + 0x3a0], 0x1f694dd6
sub dword [rdx + 0x2c8], 0x3f065d60
xor dword [rdx + 0x1f0], 0x7c0448d5
xor dword [rdx + 0xdc], 0x669a20fa
sub dword [rdx + 0x24], 0x3f173ffd
xor dword [rdx + 0x204], 0x633390b
sub dword [rdx + 0x318], 0x188765ac
add dword [rdx + 0x1e8], 0x2745651f
add dword [rdx + 0x138], 0x33467847
sub dword [rdx + 0x168], 0x233671d3
add dword [rdx + 0x2b8], 0x6c40417a
add dword [rdx + 0x1ec], 0x5af6654e
add dword [rdx + 0x1f8], 0x46235728
xor dword [rdx + 0x1c0], 0x7bfd0874
sub dword [rdx + 0x328], 0x4f355622
sub dword [rdx + 0x19c], 0x5454714
xor dword [rdx + 0x348], 0x32752d71
add dword [rdx + 0x64], 0x30ab7ba1
xor dword [rdx + 0x1d4], 0x1e0f1f9c
not dword [rdx + 0x16c]
sub dword [rdx + 0x188], 0x7ec76f75
xor dword [rdx + 0x300], 0x469f4f32
xor dword [rdx + 0x3bc], 0x6e724873
sub dword [rdx + 0x128], 0x31e707a2
xor dword [rdx + 0x38], 0x1fc90149
add dword [rdx + 0x2b0], 0x49d72a55
sub dword [rdx + 0x200], 0xd8f2158
sub dword [rdx + 0x390], 0x12b64217
add dword [rdx + 0x29c], 0x1f771dc9
not dword [rdx + 0x380]
xor dword [rdx + 0x354], 0x2c7942e9
not dword [rdx + 0x22c]
sub dword [rdx], 0x2d453e07
xor dword [rdx + 0x2ac], 0x7fee2bc1
xor dword [rdx + 0x3a4], 0x437c2826
sub dword [rdx + 0x3f8], 0x2d8003d9
add dword [rdx + 0x2e0], 0x2c78274f
add dword [rdx + 0x2cc], 0x1ad007e0
sub dword [rdx + 0x154], 0x2541311f
xor dword [rdx + 0x214], 0x2f203c35
xor dword [rdx + 0x118], 0x5cef45a5
sub dword [rdx + 0x2c0], 0xe843266
add dword [rdx + 0x10c], 0x518508e0
sub dword [rdx + 0x178], 0x51085b48
add dword [rdx + 0x37c], 0x37ef5d4d
add dword [rdx + 0x2a0], 0x5a2d5c2b
not dword [rdx + 0x148]
add dword [rdx + 0x2b4], 0x4f8b44ac
xor dword [rdx + 0xd0], 0x58582dd9
xor dword [rdx + 0x224], 0x6ce0144d
sub dword [rdx + 0x3b8], 0x6f3c4178
not dword [rdx + 0x3b4]
sub dword [rdx + 0x304], 0x15224dcf
add dword [rdx + 0x124], 0x528a7e75
add dword [rdx + 0x1b4], 0x2c06704a
xor dword [rdx + 0x60], 0x25242877
add dword [rdx + 0x28c], 0x252b099f
sub dword [rdx + 0xc], 0x575c5897
xor dword [rdx + 0x1dc], 0x4af211b9
not dword [rdx + 0x284]
not dword [rdx + 0x44]
sub dword [rdx + 0x164], 0x42bd4e4f
sub dword [rdx + 0x358], 0x10f567f2
xor dword [rdx + 0xa4], 0x7b301339
not dword [rdx + 0x3fc]
add dword [rdx + 0x94], 0x34b1605f
xor dword [rdx + 0x14c], 0x276033c4
sub dword [rdx + 0x180], 0x70652a6c
add dword [rdx + 0x314], 0x55806e98
add dword [rdx + 0xb4], 0x242051b3
xor dword [rdx + 0x6c], 0x452a0c80
sub dword [rdx + 0x290], 0x69cb5201
not dword [rdx + 0x98]
not dword [rdx + 0x3c8]
xor dword [rdx + 8], 0x70bf6d9e
sub dword [rdx + 0x244], 0x4d496db6
xor dword [rdx + 0x340], 0x1a452e56
not dword [rdx + 0x20]
xor dword [rdx + 0x25c], 0x63044ac1
add dword [rdx + 0x3a8], 0x2d535e5e
xor dword [rdx + 0x17c], 0x61e241da
add dword [rdx + 0xe4], 0x56f65802
xor dword [rdx + 0x3ac], 0x6be51326
sub dword [rdx + 0x268], 0x50a25ebc
add dword [rdx + 0x258], 0x1a1a415e
xor dword [rdx + 0x88], 0x4baa56bc
xor dword [rdx + 0x150], 0x70520863
sub dword [rdx + 0x228], 0x229d5e08
xor dword [rdx + 0x14], 0x52b439a7
add dword [rdx + 0x194], 0x73ef514e
xor dword [rdx + 0x3cc], 0x193b75fe
add dword [rdx + 0x2d0], 0x72543124
sub dword [rdx + 0x3f4], 0x483d60a5
not dword [rdx + 0x254]
xor dword [rdx + 0x360], 0x4dd361e6
add dword [rdx + 0x388], 0x3c32cfb
sub dword [rdx + 0xc4], 0x6dd87413
sub dword [rdx + 0xcc], 0xe9a15c5
xor dword [rdx + 0x308], 0x5ecf5c0b
xor dword [rdx + 0x364], 0x7a170f98
sub dword [rdx + 0x18], 0x2fe55336
not dword [rdx + 0x3dc]
xor dword [rdx + 0x144], 0x7a744829
not dword [rdx + 0xf0]
not dword [rdx + 0x1cc]
add dword [rdx + 0x2c4], 0x2c7276dd
sub dword [rdx + 0x210], 0x64c83d45
xor dword [rdx + 0x30], 0x51153fc9
sub dword [rdx + 0x3e0], 0x180834f4
not dword [rdx + 0x74]
xor dword [rdx + 0x40], 0x283b2dd0
not dword [rdx + 0x1fc]
xor dword [rdx + 0x50], 0x436579b8
sub dword [rdx + 0x338], 0x7ad01713
add dword [rdx + 0x280], 0x37ef01f3
add dword [rdx + 0x1f4], 0x132b4364
not dword [rdx + 0xa8]
xor dword [rdx + 0x1d8], 0x7b9a628f
xor dword [rdx + 0x28], 0x6a555930
sub dword [rdx + 0x324], 0x29d77843
sub dword [rdx + 0x3d8], 0x2d025927
xor dword [rdx + 0x278], 0x657f0109
sub dword [rdx + 0x9c], 0x79fe5d0f
not dword [rdx + 0x370]
add dword [rdx + 0xbc], 0x3713169f
not dword [rdx + 0x68]
sub dword [rdx + 0x238], 0x4b40af5
add dword [rdx + 0x344], 0x66b94aba
sub dword [rdx + 0x1c8], 0x486562be
add rcx, 0x400
add rdx, 0x400
cmp rcx, 0x8c000
jne 0x1404a102e
pop rcx
call fcn.1404a0106
mov rsp, rbp
pop rbp
pop r15
pop r14
pop r13
pop r12
pop r11
pop r10
pop r9
pop r8
pop rdi
pop rsi
pop rbp
pop rbx
pop rdx
pop rcx
pop rax