Function at 0x140280000
Capabilities:
Encode data using xor

Disassembly:
push rax
push rcx
push rdx
push rbx
push rbp
push rsi
push rdi
push r8
push r9
push r10
push r11
push r12
push r13
push r14
push r15
push rbp
mov rbp, rsp
sub rsp, 0x20
and rsp, 0xfffffffffffffff0
lea rbx, [0x1401f3000]
push 0
pop rax
push rbx
xor dword [rbx + 0x154], 0x7b530a9e
add dword [rbx + 0x6c], 0x55791f91
add dword [rbx + 0x1ec], 0x795c0095
xor dword [rbx + 0xa0], 0x146c4493
xor dword [rbx + 0x2a4], 0x778c3e97
not dword [rbx + 0x144]
add dword [rbx + 0xb0], 0x56801396
sub dword [rbx + 0x360], 0x799e2cdc
sub dword [rbx + 0x358], 0x3b1e5073
sub dword [rbx + 0x328], 0x65ff5862
xor dword [rbx + 0x140], 0x75c4390f
sub dword [rbx + 0x3ac], 0x5a8e4714
xor dword [rbx + 0x298], 0x174a029e
not dword [rbx + 0x58]
sub dword [rbx + 0x1d4], 0x7ed4554f
sub dword [rbx + 0x90], 0x71347205
xor dword [rbx + 0x14c], 0x4971439b
sub dword [rbx + 0x2fc], 0x123d262b
xor dword [rbx + 0xc0], 0x43a60db8
add dword [rbx + 0x2c0], 0x58175044
xor dword [rbx + 0x244], 0x4fb535f8
not dword [rbx + 0x84]
not dword [rbx + 0x3b4]
sub dword [rbx + 0xdc], 0x282d755d
xor dword [rbx + 0x74], 0x511d3fa3
xor dword [rbx + 0x170], 0x40517e0c
sub dword [rbx + 0x34c], 0x6dd81d4e
not dword [rbx + 0x24c]
add dword [rbx + 0x18c], 0xf64525d
add dword [rbx + 0x1cc], 0x21af5e86
add dword [rbx + 0x2c8], 0x1a9722a7
add dword [rbx + 0x280], 0x75ed49b3
xor dword [rbx + 0x224], 0x27c91999
add dword [rbx + 0x308], 0x3f0174ed
xor dword [rbx + 0x3e4], 0x37346283
xor dword [rbx + 0x168], 0x1bd14eb7
not dword [rbx + 0x2e8]
sub dword [rbx + 0x94], 0x166a22f5
not dword [rbx + 0x220]
not dword [rbx + 0x2bc]
add dword [rbx + 0x310], 0x5cff6de3
xor dword [rbx + 8], 0x3e6d37b7
sub dword [rbx + 0x2b0], 0x17852c66
sub dword [rbx + 0x3c], 0x5a7a6809
add dword [rbx + 0x330], 0x47043c3b
add dword [rbx + 0x348], 0x4c8f1498
xor dword [rbx + 0xec], 0x1d9a54e1
xor dword [rbx + 0x3c8], 0x8f32a24
xor dword [rbx + 0x1b8], 0xe2a25ea
add dword [rbx + 0x26c], 0x32e64ea
sub dword [rbx + 0x30c], 0x525c3c6a
add dword [rbx + 0x334], 0x3ec55fb4
xor dword [rbx + 0x384], 0x7fb3694b
sub dword [rbx + 0x134], 0x3da15990
xor dword [rbx + 0xa4], 0x6f0f40f1
xor dword [rbx + 0x2c], 0x62d709b8
sub dword [rbx + 0x3f0], 0x5db25a88
add dword [rbx + 0x2e0], 0x337a6796
add dword [rbx + 0xf0], 0x509a4a15
xor dword [rbx + 0x38], 0x62ef701c
not dword [rbx + 0x22c]
sub dword [rbx + 0x40], 0x6be94155
xor dword [rbx + 0x78], 0x5bd40e5d
sub dword [rbx + 0xcc], 0x6492d14
xor dword [rbx + 0x37c], 0x2a7d6388
add dword [rbx + 0xf8], 0x7a9f5385
add dword [rbx + 0x3cc], 0x435c5177
add dword [rbx + 0x1c8], 0x31080b3b
add dword [rbx + 0x14], 0x167d2748
xor dword [rbx + 0x25c], 0x5efd161f
not dword [rbx + 0x130]
add dword [rbx + 0x110], 0x26e40cda
add dword [rbx + 0x1f4], 0x6ada2f72
not dword [rbx + 0x1bc]
not dword [rbx + 0x2c4]
not dword [rbx + 0x300]
not dword [rbx + 0x100]
xor dword [rbx + 0x38c], 0x36623cb2
xor dword [rbx + 0xe8], 0x184f782f
add dword [rbx + 0x198], 0x1f893b68
add dword [rbx + 0x260], 0x4a76485b
not dword [rbx + 0x2d4]
sub dword [rbx + 0x380], 0x32d4337f
add dword [rbx + 0x10c], 0x42744d62
xor dword [rbx + 0x138], 0x5720b71
add dword [rbx + 0x1d0], 0x32b920b2
xor dword [rbx + 0x270], 0x39b43894
add dword [rbx + 0x148], 0x31016890
not dword [rbx + 0x200]
not dword [rbx + 0x3e8]
xor dword [rbx + 0xfc], 0x5dc1eac
sub dword [rbx + 0x268], 0x403749e6
not dword [rbx + 0x238]
not dword [rbx + 0x1f8]
sub dword [rbx + 0x1dc], 0x6a27174f
sub dword [rbx + 0x164], 0x6f344a6b
sub dword [rbx + 0x234], 0x65d0f14
not dword [rbx + 0x16c]
not dword [rbx + 0x33c]
xor dword [rbx + reloc.SHELL32.dll_IsUserAnAdmin], 0x32a13659
sub dword [rbx + 0x1f0], 0x46881399
xor dword [rbx + 0x3a4], 0x516a740a
sub dword [rbx + 0x2b4], 0x2b700c64
not dword [rbx + 0x32c]
sub dword [rbx + 0x174], 0x5aa701f7
sub dword [rbx + 0x318], 0x66a7585a
sub dword [rbx + 0x258], 0x53350ab5
sub dword [rbx + 0x68], 0xe4f5d91
not dword [rbx + 0x2f8]
add dword [rbx + 0x114], 0x1c822f53
sub dword [rbx + 0x1b4], 0x2036578b
not dword [rbx + 0x3c0]
add dword [rbx + 4], 0x60e52fea
sub dword [rbx + 0x254], 0x31de083d
sub dword [rbx + 0x344], 0x6259785f
sub dword [rbx + 0x314], 0x3d864416
not dword [rbx + 0x278]
add dword [rbx + 0x9c], 0x164745a6
not dword [rbx + 0x5c]
xor dword [rbx + 0xe0], 0x4678617b
not dword [rbx + 0x350]
sub dword [rbx + 0x1d8], 0x7f2b087d
add dword [rbx + 0x2b8], 0xf1e3eef
sub dword [rbx + 0x2dc], 0x488302ca
not dword [rbx + 0x274]
xor dword [rbx + 0x1c4], 0x4e4c6842
xor dword [rbx + 0x3f8], 0x6778072a
sub dword [rbx + 0xc8], 0x2a846f21
not dword [rbx + 0x190]
add dword [rbx + 0x150], 0x2616728e
not dword [rbx + 0x2ac]
sub dword [rbx + 0x194], 0x2f203f9a
add dword [rbx + 0x208], 0x69e93cef
not dword [rbx + 0x2cc]
sub dword [rbx + 0x8c], 0xa0d5250
xor dword [rbx + 0x28], 0x67751733
xor dword [rbx + 0x44], 0x3f943074
xor dword [rbx + 0x2e4], 0x1ac87f2a
add dword [rbx + 0x378], 0x1fc5127b
xor dword [rbx + 0xb8], 0x3e47338a
xor dword [rbx + 0x228], 0x1873d4f
sub dword [rbx + 0x264], 0x29a03b44
sub dword [rbx + 0x288], 0x5e2a44d2
add dword [rbx + 0x188], 0x7e075ead
not dword [rbx + 0x178]
not dword [rbx + 0x214]
xor dword [rbx + 0x1e8], 0x640b12c1
sub dword [rbx + 0x248], 0x48d217bb
xor dword [rbx + 0x2a0], 0x2e0c41a5
sub dword [rbx + 0x3d8], 0x586d2629
sub dword [rbx + 0x364], 0x265c1bad
add dword [rbx + 0x374], 0x354c6fc5
not dword [rbx + 0x390]
add dword [rbx + 0x2d0], 0x37616718
not dword [rbx + 0x54]
not dword [rbx + 0x3bc]
xor dword [rbx + 0x338], 0x6ca7dab
add dword [rbx + 0x158], 0x2b740694
xor dword [rbx + 0x7c], 0x23f45ef1
not dword [rbx + 0x3d4]
xor dword [rbx + 0x1a8], 0x7d7b69aa
xor dword [rbx + 0x180], 0x5a1d5e8b
xor dword [rbx + 0x398], 0x32a37fa1
not dword [rbx + 0x240]
sub dword [rbx + 0x28c], 0x134015e8
add dword [rbx + 0x250], 0x7d5525ed
not dword [rbx + 0x20]
sub dword [rbx + 0x1a4], 0x33ae7224
sub dword [rbx + 0x88], 0x428148a8
xor dword [rbx + 0x20c], 0x56f65f37
not dword [rbx + 0x30]
add dword [rbx + 0xd0], 0x9f36aab
xor dword [rbx + 0x104], 0x285a2ea0
sub dword [rbx + 0x2f0], 0x54504ed5
add dword [rbx + 0x118], 0x39b573be
not dword [rbx + 0x64]
sub dword [rbx + 0x31c], 0x3ccf6310
not dword [rbx + 0x3e0]
not dword [rbx + 0x19c]
add dword [rbx + 0x13c], 0x613023dc
xor dword [rbx + 0xf4], 0x2bdb496f
add dword [rbx + 0x39c], 0x69fa59a4
not dword [rbx + 0x80]
not dword [rbx + 0x23c]
add dword [rbx + 0x340], 0x556c16df
xor dword [rbx + 0xd4], 0x33032ef2
add dword [rbx + 0xbc], 0x54242d78
add dword [rbx + 0x230], 0x62300244
xor dword [rbx + 0x354], 0x3bec1fb0
add dword [rbx + 0x48], 0x35b3256
xor dword [rbx + 0x2ec], 0x3a6c5830
sub dword [rbx + 0x11c], 0x22fd44a1
sub dword [rbx + 0x120], 0x434376bd
not dword [rbx + 0x204]
add dword [rbx + 0x21c], 0x541d139b
add dword [rbx + 0xa8], 0x3baa4834
add dword [rbx + 0x2d8], 0x46487854
xor dword [rbx + 0x108], 0x3a4d7f72
xor dword [rbx + 0x124], 0x7263607f
xor dword [rbx + 0x1c], 0x34ae7261
sub dword [rbx + 0xac], 0x1c0f4ba0
xor dword [rbx + 0x1e0], 0x609a23d3
sub dword [rbx + 0x324], 0x7fcf0cd4
add dword [rbx + 0x394], 0x51a73432
xor dword [rbx + 0x184], 0x17c3a4e
xor dword [rbx + 0x2f4], 0x28d41621
add dword [rbx + 0x388], 0x74a81fd9
xor dword [rbx + 0x3ec], 0x79895370
add dword [rbx + 0x18], 0x7e905ad4
not dword [rbx + 0x34]
not dword [rbx + 0x304]
add dword [rbx + 0x12c], 0x625e4c95
not dword [rbx + 0xc]
sub dword [rbx + 0x284], 0x55c477e8
not dword [rbx + 0x3c4]
add dword [rbx + 0x3b8], 0x3ee27f59
xor dword [rbx + 0x4c], 0x7c1e6ef7
sub dword [rbx + 0x320], 0x4ba0633b
sub dword [rbx + 0x3b0], 0x41266199
xor dword [rbx + 0x1c0], 0x5b3b45b4
add dword [rbx + 0x160], 0x3bed42a5
add dword [rbx + 0x3a8], 0x74da7b02
add dword [rbx + 0xd8], 0x7d562de3
add dword [rbx + 0xc4], 0x1e146838
add dword [rbx + 0x3fc], 0x2c637a6e
sub dword [rbx + 0x70], 0x4e97ddc
xor dword [rbx + 0x10], 0x335175ad
add dword [rbx + 0x1e4], 0x1c0c4241
not dword [rbx + 0x29c]
xor dword [rbx + 0x210], 0x3b885d57
sub dword [rbx + 0x290], 0x356e74af
sub dword [rbx + 0x24], 0x68db33c4
sub dword [rbx + 0x128], 0x55440bd4
add dword [rbx + 0x1b0], 0x3a8d41fb
xor dword [rbx + 0x15c], 0x76a31e0
not dword [rbx]
xor dword [rbx + 0x17c], 0x4b734497
not dword [rbx + 0x1fc]
xor dword [rbx + 0x370], 0x34d26c34
sub dword [rbx + 0xe4], 0x543f4e08
add dword [rbx + 0x50], 0x74d90c2f
xor dword [rbx + 0x1ac], 0x1cdc5f90
xor dword [rbx + 0x218], 0x3fd23556
not dword [rbx + 0x294]
sub dword [rbx + 0x368], 0x5424bde
xor dword [rbx + 0x60], 0xe4230fb
sub dword [rbx + 0x3a0], 0x42d13c07
xor dword [rbx + 0x3dc], 0x27ff6b91
xor dword [rbx + 0x3f4], 0x608a7f3c
add dword [rbx + 0x36c], 0xc2d2b5f
not dword [rbx + 0x3d0]
not dword [rbx + 0x98]
add dword [rbx + 0x27c], 0x540b7cde
xor dword [rbx + 0x1a0], 0x63d502be
not dword [rbx + 0x35c]
add dword [rbx + 0xb4], 0x17480ced
add rax, 0x400
add rbx, 0x400
cmp rax, 0x8c000
jne 0x14028002e
pop rcx
call fcn.14027e906
mov rsp, rbp
pop rbp
pop r15
pop r14
pop r13
pop r12
pop r11
pop r10
pop r9
pop r8
pop rdi
pop rsi
pop rbp
pop rbx
pop rdx
pop rcx
pop rax