Function at 0x1404b1000
Capabilities:
Encode data using xor

Disassembly:
push rax
push rcx
push rdx
push rbx
push rbp
push rsi
push rdi
push r8
push r9
push r10
push r11
push r12
push r13
push r14
push r15
push rbp
mov rbp, rsp
sub rsp, 0x20
and rsp, 0xfffffffffffffff0
lea rax, [0x140424800]
push 0
pop rdx
push rax
xor dword [rax + 0x200], 0x667e3417
sub dword [rax + 0x38], 0x5f8609ff
not dword [rax + 0x30c]
not dword [rax + 0x394]
sub dword [rax + 0x2c], 0xaa00d42
sub dword [rax + 0x20c], 0x660f1bef
add dword [rax + 0x2d4], 0x126b3d9d
add dword [rax + 0x24], 0x2ff26737
sub dword [rax + 0x1d4], 0x306132ba
add dword [rax + 0x1b8], 0x65f2ec1
xor dword [rax + 0x168], 0xc35196a
xor dword [rax + 0x2e8], 0x731e2d3e
xor dword [rax + 0x338], 0x53ec0807
not dword [rax + 0x17c]
not dword [rax + 0x130]
add dword [rax + 0x2cc], 0x119005f1
sub dword [rax + 0x3e8], 0x70f02008
sub dword [rax + 0x244], 0x114356b9
sub dword [rax + 0x258], 0x3229e0
sub dword [rax + 0x308], 0xc6a2db2
sub dword [rax + 0x3a4], 0x4b076cb3
add dword [rax + 0x1dc], 0x4ff02c4f
not dword [rax + 0x3dc]
sub dword [rax + 0x174], 0x67824126
add dword [rax + 0x68], 0x20e27ff6
sub dword [rax + 0x158], 0x231506b5
xor dword [rax + 0x1ac], 0x7a5a3649
add dword [rax + 0xd4], 0x324c5830
sub dword [rax + 0x22c], 0x3a732a82
sub dword [rax + 0x2b4], 0x8277f5f
sub dword [rax + 0xe8], 0x13362cc2
not dword [rax + 0x100]
xor dword [rax + 0x1a8], 0x666b009e
xor dword [rax + 0x1c4], 0x39c90f47
not dword [rax + 0x3b0]
add dword [rax + 0x2d8], 0x2c705c06
xor dword [rax + 0x4c], 0x490e3b8e
xor dword [rax + 0x240], 0x13525591
xor dword [rax + 0x80], 0x2ded4189
add dword [rax + 0x13c], 0x42086933
not dword [rax + 0x30]
sub dword [rax + 0x12c], 0x10fe0790
sub dword [rax + 0x3ac], 0x4e067a4
xor dword [rax + 0x238], 0x68af78f0
not dword [rax + 0x64]
add dword [rax + 0x32c], 0x4ebe08d8
xor dword [rax + 0x218], 0x6e0c4018
xor dword [rax + 0x150], 0x76b124a3
add dword [rax + 0x3b8], 0x50954dd
xor dword [rax + 0x1a0], 0x162c6ff1
not dword [rax + 0x198]
add dword [rax + 0xac], 0x67680601
not dword [rax + 0xf8]
add dword [rax + 0x1bc], 0x2331688a
sub dword [rax + 0x5c], 0x4bd46346
add dword [rax + 0x38c], 0x3f1c540b
add dword [rax + 0x284], 0x7a7d38c6
sub dword [rax + 0x254], 0x6cc76d4
not dword [rax + 0x28c]
sub dword [rax + 0x178], 0x401870fb
sub dword [rax + 0x2c4], 0x72940b4f
not dword [rax + 0x3d8]
xor dword [rax + 0x270], 0x392b6df5
not dword [rax + 0x1e8]
xor dword [rax + 0x288], 0x5de95070
sub dword [rax + 0x2fc], 0xa350b97
not dword [rax + 0x118]
xor dword [rax + 0x358], 0x79ed2681
sub dword [rax + 0x318], 0x764d6722
not dword [rax + 0x110]
xor dword [rax + 0x160], 0x2b3e360d
sub dword [rax + 0x224], 0x4e994b2c
add dword [rax + 0x3c], 0x6ec578c1
not dword [rax + 0x138]
add dword [rax + 0x228], 0x58a62952
xor dword [rax + 0x3bc], 0x56f2165c
add dword [rax + 0x300], 0x12f61dbc
not dword [rax + 0x304]
not dword [rax + 0x1f0]
sub dword [rax + 0x1d8], 0x561c2518
add dword [rax + 0x298], 0x3a933c70
xor dword [rax + 0x1e0], 0x584654cb
xor dword [rax + 0x378], 0x589b67a4
not dword [rax + 0x3cc]
not dword [rax + 0x374]
not dword [rax + 0xf0]
not dword [rax + 0x33c]
add dword [rax + 0x1cc], 0x5bce4463
add dword [rax + 0xa4], 0x35b4098c
add dword [rax + 0x36c], 0x7ac34d9f
not dword [rax + 0x1f8]
xor dword [rax + 0x9c], 0x751a6276
add dword [rax + 0x344], 0x2a735e20
add dword [rax + 0xd8], 0x70052bc0
not dword [rax + 0x140]
add dword [rax + 0x268], 0x2c905430
add dword [rax + 0x3c8], 0x70637dc0
add dword [rax + 0x10], 0x5b9144b9
not dword [rax + 0x2bc]
sub dword [rax + 0x24c], 0x57a51fa3
add dword [rax + 0x190], 0x4f8f1d55
sub dword [rax + 0x214], 0xfdb1823
xor dword [rax + 0x98], 0x34ba1b79
sub dword [rax + 0x3a0], 0x54df780f
add dword [rax + 0x210], 0x38465977
not dword [rax + 0x290]
xor dword [rax + 0x380], 0x1ea76a32
sub dword [rax + 0xf4], 0x620e0e1f
add dword [rax + 0x35c], 0x584315b1
add dword [rax + 0x2e4], 0x72f123c2
xor dword [rax + 0x314], 0x37687d9a
sub dword [rax + 8], 0x720d012d
add dword [rax + 0x340], 0x79490c21
xor dword [rax + 0xdc], 0x682d6b52
add dword [rax + 0x27c], 0x52304d29
not dword [rax + 0x21c]
sub dword [rax + 0x2f4], 0x70f131b5
sub dword [rax + 0xd0], 0x358b66c6
sub dword [rax + 0x18], 0x1a1046d7
not dword [rax + 0x34c]
xor dword [rax + 0xfc], 0x12542050
xor dword [rax + 0xc0], 0x270d1174
not dword [rax + 0x368]
xor dword [rax + 0x29c], 0x3203c71
not dword [rax + 0x278]
xor dword [rax + 0x37c], 0x180b63d4
not dword [rax + 0x78]
not dword [rax + 0x370]
xor dword [rax + 0x324], 0x34bd12b6
sub dword [rax + 0x274], 0x42bc6c59
not dword [rax + 0x23c]
add dword [rax + 0xcc], 0x727a3db1
xor dword [rax + 0x2b8], 0x54811b60
xor dword [rax + 0x260], 0x71696a41
sub dword [rax + 0x3f8], 0x50193c0f
add dword [rax + 0x294], 0x78f906e1
sub dword [rax + 0x220], 0x51976344
not dword [rax + 0x204]
add dword [rax + 0x384], 0x366977ae
sub dword [rax + 0x28], 0x18b03005
add dword [rax + 0x1fc], 0x6e8433b4
not dword [rax + 0x108]
sub dword [rax + 0x7c], 0xae140b2
add dword [rax + 0x2c0], 0x15c31cfc
sub dword [rax + 0x334], 0x47836e8f
add dword [rax + 0x3d4], 0x52292599
add dword [rax + 0x2c8], 0x1e9918a9
xor dword [rax + 0x1e4], 0x5edf4147
sub dword [rax + 0x154], 0x71f405b6
not dword [rax + 0x164]
xor dword [rax + 0x248], 0x12a61398
not dword [rax + 0x1a4]
not dword [rax + 0x3d0]
add dword [rax + 0x14c], 0xa125adb
not dword [rax + 0x50]
add dword [rax + 0x39c], 0x5a4b2fe1
xor dword [rax + 0x2ec], 0x351363e3
sub dword [rax + 0x2d0], 0x13825398
add dword [rax + 0x250], 0x3ad50954
add dword [rax + 0x15c], 0x5ab96fb8
add dword [rax + 0x128], 0x24be247b
xor dword [rax + 0x104], 0x41874291
not dword [rax + 0x2ac]
not dword [rax + 0x34]
not dword [rax + 0x74]
add dword [rax + 0x84], 0x253f346e
xor dword [rax + 0xa8], 0x18087370
xor dword [rax + 0xa0], 0x29cc1b64
xor dword [rax + 0x388], 0x687c3b2f
not dword [rax + 0x18c]
not dword [rax + 0x16c]
sub dword [rax + 0x184], 0x615a1a9c
add dword [rax + 0x170], 0x497e0fbc
xor dword [rax + 0x1d0], 0x32d7203f
add dword [rax + 0x2a0], 0x664878ea
not dword [rax + 0x26c]
xor dword [rax + 0x1c0], 0x739e6aa6
add dword [rax + 0xb8], 0x19e20f40
sub dword [rax + 0x1c8], 0x47e01d8d
sub dword [rax + 0xe4], 0x627d3891
sub dword [rax + 0xec], 0x51426421
sub dword [rax + 0x264], 0x199610c0
xor dword [rax + 0x58], 0x59d41540
xor dword [rax + 0x1f4], 0x39aa61b2
add dword [rax + 0x3a8], 0x129d1982
xor dword [rax + 0x2dc], 0x683d4174
sub dword [rax + 0x1b4], 0x52746dea
not dword [rax + 0x94]
add dword [rax + 0x390], 0x106161b4
xor dword [rax + 0x14], 0xc2e6910
xor dword [rax + 0x208], 0x6a5f7ef1
xor dword [rax + 0x10c], 0x5e997788
not dword [rax + 0xc]
xor dword [rax + 0x1c], 0x366c4666
xor dword [rax + 0x134], 0x7fad2a74
xor dword [rax + 0x234], 0x468a12b0
sub dword [rax + 0x350], 0x75b836c5
xor dword [rax + 0x3fc], 0x61297eb9
sub dword [rax + 0x328], 0x61275a4c
sub dword [rax + 0x70], 0x72832bc
not dword [rax + 0x40]
xor dword [rax + 0x354], 0x747846ac
xor dword [rax + 0x120], 0x16b108b9
not dword [rax + 0x1ec]
add dword [rax + 0x19c], 0x6d500238
sub dword [rax + 0x348], 0x74501f39
sub dword [rax + 0x330], 0x3e256f9a
sub dword [rax + 0xc4], 0x4975676c
xor dword [rax + 0x6c], 0x7e321044
not dword [rax + 0x2b0]
xor dword [rax + 0x3c0], 0x303b7237
add dword [rax + 0x31c], 0x1dce7c96
not dword [rax + 0x148]
xor dword [rax], 0x6b9937c9
sub dword [rax + 0x124], 0x31953797
add dword [rax + 0x280], 0x5306501b
xor dword [rax + 0x8c], 0x71567acc
not dword [rax + 0x114]
not dword [rax + 0x2a4]
xor dword [rax + 0x3b4], 0x38d66ed6
not dword [rax + 0x144]
not dword [rax + reloc.SHELL32.dll_IsUserAnAdmin]
add dword [rax + 0x2f8], 0x395a0be5
add dword [rax + 0x3ec], 0x53140390
sub dword [rax + 0x3e0], 0x72e2791c
not dword [rax + 0x188]
sub dword [rax + 0xb0], 0x14a42e27
not dword [rax + 0xb4]
add dword [rax + 0xbc], 0x270c6e38
sub dword [rax + 0x88], 0x63a54052
xor dword [rax + 0x180], 0x49080078
add dword [rax + 0x11c], 0x93d4074
sub dword [rax + 0x360], 0x395f5e31
add dword [rax + 0x90], 0x3e0d3eae
xor dword [rax + 0x2e0], 0x4dff4ea6
sub dword [rax + 0xe0], 0x6f939cd
xor dword [rax + 0x20], 0x1a2619ba
xor dword [rax + 4], 0x2dc8451b
xor dword [rax + 0x2f0], 0x751e61d2
not dword [rax + 0x230]
not dword [rax + 0x1b0]
not dword [rax + 0xc8]
add dword [rax + 0x310], 0x1fd743ee
add dword [rax + 0x364], 0x18a86066
xor dword [rax + 0x3f4], 0x9a552ea
sub dword [rax + 0x3e4], 0x7c7340c2
add dword [rax + 0x60], 0x7c1e0fd5
xor dword [rax + 0x398], 0xa533d25
not dword [rax + 0x194]
xor dword [rax + 0x320], 0x65984b1b
sub dword [rax + 0x48], 0x4a778e3
not dword [rax + 0x54]
add dword [rax + 0x3f0], 0x2766ea7
xor dword [rax + 0x25c], 0x584910f1
xor dword [rax + 0x3c4], 0x49981444
xor dword [rax + 0x44], 0x6b2d08d4
add rdx, 0x400
add rax, 0x400
cmp rdx, 0x8c000
jne 0x1404b102e
pop rcx
call 0x1404b0106
mov rsp, rbp
pop rbp
pop r15
pop r14
pop r13
pop r12
pop r11
pop r10
pop r9
pop r8
pop rdi
pop rsi
pop rbp
pop rbx
pop rdx
pop rcx
pop rax