Function at 0x1401d9000
Capabilities:
Encode data using xor

Disassembly:
push rax
push rcx
push rdx
push rbx
push rbp
push rsi
push rdi
push r8
push r9
push r10
push r11
push r12
push r13
push r14
push r15
push rbp
mov rbp, rsp
sub rsp, 0x20
and rsp, 0xfffffffffffffff0
lea rcx, [0x14014ca00]
push 0
pop rax
push rcx
xor dword [rcx + 0x3e8], 0x76fa738f
add dword [rcx + 0x1c0], 0x6d0b1d9e
not dword [rcx + 0x230]
sub dword [rcx + 0x258], 0x6aac2f4f
not dword [rcx + 0x1b4]
xor dword [rcx + 0x1c8], 0x24757c55
xor dword [rcx + 0xec], 0x64ff2e7a
add dword [rcx + 0x290], 0xfd4471
not dword [rcx + 0x380]
add dword [rcx + 0x390], 0x35a6788b
add dword [rcx + 0x1d8], 0x720223cd
not dword [rcx + 0x6c]
sub dword [rcx + 0x2c8], 0x275a27e3
sub dword [rcx + 0x35c], 0x42dd0458
sub dword [rcx + 0x208], 0x28040e7f
sub dword [rcx + 0x1f8], 0x15c160ea
sub dword [rcx + 0x240], 0x412a50a4
sub dword [rcx + 0x1ac], 0xa772d62
add dword [rcx + 0x398], 0x21a779eb
add dword [rcx + 0x3f0], 0x52f2832
add dword [rcx + 0x3b4], 0xf5767dc
not dword [rcx + 0x264]
add dword [rcx + 0x284], 0x7c3a6fd6
sub dword [rcx + 0x184], 0x6041381e
xor dword [rcx + 0x7c], 0x7c43be6
add dword [rcx + 0x2f0], 0x52022ccf
xor dword [rcx + 0x28], 0x7a746018
not dword [rcx + 0x108]
add dword [rcx + 0x2fc], 0x73d53422
not dword [rcx + 0x2f8]
not dword [rcx + 0x32c]
xor dword [rcx + 0x130], 0x49710085
add dword [rcx + 0x22c], 0x6fd1231b
add dword [rcx + 0x128], 0x11b3adb
add dword [rcx + 0xac], 0x163a21b3
add dword [rcx + 0x1b8], 0x5f086150
sub dword [rcx + 0xc8], 0x750272a1
not dword [rcx + 0x348]
not dword [rcx + 0x88]
xor dword [rcx + 0x5c], 0x2aa27507
xor dword [rcx + 0x2dc], 0x55463d61
add dword [rcx + 0x334], 0x3afe4757
add dword [rcx + 0x100], 0x335450be
add dword [rcx + 0x134], 0x40a04f14
add dword [rcx + 0x1a0], 0x50eb0467
not dword [rcx + 0x3c4]
sub dword [rcx + 0x304], 0x5fe24519
add dword [rcx + 0x20c], 0x1ccb3a43
xor dword [rcx + 0x1a8], 0x167f6802
add dword [rcx + 0x19c], 0x41274316
sub dword [rcx + 0x220], 0x11ff176d
sub dword [rcx + 0x1f4], 0x670452ba
add dword [rcx + 0x2bc], 0x3d6a5d4b
xor dword [rcx + 0x160], 0x227b6439
xor dword [rcx + 0x280], 0x720650ec
add dword [rcx + 0x3c8], 0x5270590b
add dword [rcx + 0x36c], 0x3e4c6849
not dword [rcx + 0x320]
add dword [rcx + 0xc4], 0x241463d1
add dword [rcx + 0xf8], 0x297b416c
not dword [rcx + 0x200]
not dword [rcx + 0x39c]
sub dword [rcx + 0x1fc], 0x6e860b9e
add dword [rcx + 0x26c], 0x6172468e
add dword [rcx + 0x13c], 0x69560e7a
add dword [rcx + 0x3c0], 0x36851c8f
xor dword [rcx + 0x33c], 0x31f3d9e
not dword [rcx + 0x3d0]
add dword [rcx + 0x94], 0x5efb17f5
not dword [rcx + 0x18]
not dword [rcx + 0xc]
sub dword [rcx + 0x48], 0x499750cd
xor dword [rcx + 0x3c], 0x68cd2e9e
xor dword [rcx + 0x3dc], 0x71e723ea
add dword [rcx + 0xf0], 0x4baf71b1
xor dword [rcx + 0x1bc], 0x79fd2291
not dword [rcx + 0x260]
add dword [rcx + 0x84], 0xfef1382
add dword [rcx + 0x30], 0x46a62496
add dword [rcx + 0x1e4], 0x6770e28
not dword [rcx + 0x3a0]
sub dword [rcx + 0x14c], 0x170a64e6
xor dword [rcx + 0xb0], 0x75fe23dc
xor dword [rcx + 0x360], 0x636201c7
sub dword [rcx + 0x248], 0xdae2d25
sub dword [rcx + 0x154], 0x56042b47
sub dword [rcx + 0x2b4], 0x60c45532
not dword [rcx + 0x21c]
add dword [rcx + 0x364], 0x74d8562a
not dword [rcx + 0xa8]
not dword [rcx + 0x378]
not dword [rcx + 0x80]
not dword [rcx + 0xa4]
not dword [rcx + 0xdc]
add dword [rcx + 0x238], 0x89911ff
add dword [rcx + 0x138], 0x18a80050
not dword [rcx + 0x2e4]
add dword [rcx + 0xa0], 0x49cf6aee
xor dword [rcx + 0x210], 0x430a730e
add dword [rcx + 0x4c], 0x3c96623e
add dword [rcx + 0x3e4], 0x60d023b7
xor dword [rcx + 0x3a8], 0x74616401
xor dword [rcx + 0x14], 0x56394
sub dword [rcx + 0x370], 0x333a5095
not dword [rcx + 0x190]
xor dword [rcx + 0x1f0], 0x7e6d21e4
xor dword [rcx + 0x25c], 0xaa672b
sub dword [rcx + 0x314], 0x6201bfe
xor dword [rcx + 0x1a4], 0x4a4c1a8f
sub dword [rcx + 0xbc], 0x28c330c6
sub dword [rcx + 0x70], 0x16841e50
not dword [rcx + 0x37c]
xor dword [rcx + 0x15c], 0x748171a5
xor dword [rcx + 0xfc], 0x585917b9
xor dword [rcx + 0x268], 0x52ff262b
xor dword [rcx + 0x34], 0x49cb1b55
add dword [rcx + 0x18c], 0x439568c
add dword [rcx + 0x3d8], 0x2a46c57
sub dword [rcx + 0x90], 0x549858ee
not dword [rcx + 0x3ac]
xor dword [rcx + 0x350], 0x3cb818e8
sub dword [rcx + 0x114], 0x378a2839
xor dword [rcx + 0x324], 0x6ad6168d
sub dword [rcx + 0xf4], 0x279c49ec
not dword [rcx + 0x318]
add dword [rcx + 0x330], 0x391c5b5b
add dword [rcx + 0xcc], 0x63062b4a
sub dword [rcx + 0x12c], 0x584113b2
sub dword [rcx + 0x3b8], 0x316579db
not dword [rcx + 0x74]
not dword [rcx + 0x2d4]
sub dword [rcx + 0x3a4], 0x1b795257
not dword [rcx + 0x11c]
not dword [rcx + 0xd0]
not dword [rcx + 0x308]
not dword [rcx + 0x110]
add dword [rcx + 0x228], 0x10ba05a1
add dword [rcx + 0x8c], 0x16334800
xor dword [rcx + 0x140], 0x61d86508
sub dword [rcx + 0x338], 0x61b06e4d
sub dword [rcx + 0x3f4], 0x607965cb
xor dword [rcx + 0x10], 0x34c4432c
not dword [rcx + 0x254]
sub dword [rcx + 0xc0], 0x6d3a17ac
add dword [rcx + 0x28c], 0x525d5964
not dword [rcx + 0x2d0]
not dword [rcx + 0x170]
xor dword [rcx + 0x30c], 0x36e62348
sub dword [rcx + 0x10c], 0x1aae32e9
not dword [rcx + 0x250]
add dword [rcx + 0x178], 0x7ecb2112
xor dword [rcx + 0xb8], 0x57611908
not dword [rcx + 0x31c]
xor dword [rcx + 0x24], 0x2bbb09a8
not dword [rcx + 0x150]
xor dword [rcx + 0x2ac], 0x6f4a1d35
sub dword [rcx + 0x1e8], 0x7b403803
sub dword [rcx + 0x188], 0x538d3279
xor dword [rcx + 0x294], 0x66fd7c41
xor dword [rcx + 0x1d4], 0x4c20c1b
add dword [rcx + 0x29c], 0x41783da3
add dword [rcx + 0x38c], 0x5f7b47
xor dword [rcx + 0x388], 0x75bb199e
sub dword [rcx + 0x164], 0x131f3a10
not dword [rcx + 0x278]
add dword [rcx + 0x54], 0x5190d5a
xor dword [rcx + 0x2c4], 0x21900b3f
sub dword [rcx + 0x310], 0x57940f08
xor dword [rcx + 8], 0x4a2a1ee8
not dword [rcx + 0x1c]
xor dword [rcx + 0x3d4], 0x275a790a
sub dword [rcx + 0x298], 0x72a15723
not dword [rcx + 0x270]
not dword [rcx + 0xe0]
not dword [rcx + 0x198]
add dword [rcx + 0x144], 0x36a663fb
add dword [rcx + 0x9c], 0xa0f7f1f
not dword [rcx + 0x104]
xor dword [rcx + 0x2a0], 0x21e15aed
sub dword [rcx + 0x38], 0x511c797f
xor dword [rcx + 0xd8], 0xf1d323a
add dword [rcx + 0x174], 0x21e311ed
not dword [rcx + 0x24c]
not dword [rcx + 0x3fc]
xor dword [rcx + 0x1b0], 0x1cd51147
sub dword [rcx + 0x2b0], 0x36d27dfa
sub dword [rcx + 0x3cc], 0x39ab0c54
not dword [rcx + 0x1dc]
not dword [rcx + 0x374]
add dword [rcx + 0x60], 0x4f285c3d
add dword [rcx + 0x64], 0x664b7d2b
sub dword [rcx + 0x17c], 0x64c87603
sub dword [rcx + 0x204], 0x63ed0c8a
not dword [rcx + 0x3b0]
xor dword [rcx + 0x118], 0x6f387e36
add dword [rcx + 0x368], 0x1d444a79
xor dword [rcx + 0x2f4], 0x2eb9751a
not dword [rcx + 0x148]
xor dword [rcx + 0xd4], 0x21345639
sub dword [rcx + 0x78], 0x41b83e03
not dword [rcx + 0x2a4]
add dword [rcx + 0x328], 0x36133c28
xor dword [rcx + 0x120], 0x254e3fa5
not dword [rcx]
xor dword [rcx + 0x358], 0xde52a9c
xor dword [rcx + 0x218], 0x39a3435d
not dword [rcx + 0x2cc]
xor dword [rcx + 0xb4], 0x74b27481
not dword [rcx + 0x158]
not dword [rcx + 0x2c0]
add dword [rcx + 0x34c], 0x6a3d07c7
sub dword [rcx + 0x40], 0x50d92a50
not dword [rcx + 0x16c]
not dword [rcx + 0x2e8]
not dword [rcx + 0x288]
sub dword [rcx + 0x3f8], 0x4fed5db0
add dword [rcx + 0x168], 0x73a4668f
not dword [rcx + 0x340]
not dword [rcx + 0x58]
sub dword [rcx + 0x2c], 0x2567170c
sub dword [rcx + 0x50], 0x47eb4176
xor dword [rcx + reloc.SHELL32.dll_IsUserAnAdmin], 0x7b630530
sub dword [rcx + 0x98], 0x779c2ee5
not dword [rcx + 0x274]
add dword [rcx + 0xe8], 0x5a913258
add dword [rcx + 0x3bc], 0x3ec947b5
not dword [rcx + 0x344]
not dword [rcx + 0x3e0]
not dword [rcx + 0xe4]
add dword [rcx + 0x224], 0x7bf71cc1
sub dword [rcx + 0x384], 0x99c036c
xor dword [rcx + 0x1c4], 0x7b4663e1
add dword [rcx + 0x1e0], 0x24e81816
add dword [rcx + 0x1ec], 0x622876f0
xor dword [rcx + 0x214], 0x565306c7
add dword [rcx + 0x27c], 0x1b0e4160
xor dword [rcx + 0x194], 0x68ea69f7
xor dword [rcx + 0x1d0], 0xce2709f
add dword [rcx + 0x2e0], 0x580400a5
not dword [rcx + 0x44]
sub dword [rcx + 0x23c], 0xe317be4
add dword [rcx + 0x3ec], 0x79cc5b16
not dword [rcx + 0x244]
not dword [rcx + 0x394]
xor dword [rcx + 0x20], 0x6d182c0a
not dword [rcx + 0x234]
add dword [rcx + 0x68], 0x22717fe6
not dword [rcx + 0x180]
not dword [rcx + 0x354]
xor dword [rcx + 0x300], 0x33ae1ce5
add dword [rcx + 0x124], 0x40d95e0a
not dword [rcx + 0x1cc]
xor dword [rcx + 0x2ec], 0x4bd73a3a
add dword [rcx + 0x2d8], 0x40455497
xor dword [rcx + 0x2b8], 0x7740c56
not dword [rcx + 4]
add rax, 0x400
add rcx, 0x400
cmp rax, 0x8c000
jne 0x1401d902e
pop rcx
call fcn.1401d7b3e
mov rsp, rbp
pop rbp
pop r15
pop r14
pop r13
pop r12
pop r11
pop r10
pop r9
pop r8
pop rdi
pop rsi
pop rbp
pop rbx
pop rdx
pop rcx
pop rax