Function at 0x140287000
Capabilities:
Encode data using xor

Disassembly:
push rax
push rcx
push rdx
push rbx
push rbp
push rsi
push rdi
push r8
push r9
push r10
push r11
push r12
push r13
push r14
push r15
push rbp
mov rbp, rsp
sub rsp, 0x20
and rsp, 0xfffffffffffffff0
lea rdx, [0x1401fae00]
push 0
pop rdi
push rdx
xor dword [rdx + 0x4c], 0x171e65f7
xor dword [rdx + 0x37c], 0x357d0a88
add dword [rdx + 0xa8], 0x1aaa5334
xor dword [rdx + 0x78], 0xad4295d
sub dword [rdx + 0x318], 0x35a7135a
add dword [rdx + 0x3cc], 0x5e5c4877
sub dword [rdx + 0xe4], 0x73f3d08
add dword [rdx + 0x2c0], 0x6f177344
sub dword [rdx + 0x164], 0x2234396b
add dword [rdx + 0x150], 0x4d16658e
xor dword [rdx + 0x2e4], 0x4dc86e2a
sub dword [rdx + 0x290], 0x1c6e27af
xor dword [rdx + 0x218], 0xed27056
sub dword [rdx + 0x1dc], 0x55271e4f
add dword [rdx + 0x118], 0x8b52ebe
not dword [rdx + 0x2c4]
sub dword [rdx + 0x234], 0x495d4e14
add dword [rdx + 0x48], 0x25b5d56
xor dword [rdx + 0x168], 0x3ad119b7
add dword [rdx + 0xc4], 0x31143738
add dword [rdx + 0xd8], 0xc5628e3
add dword [rdx + 0x110], 0xde43fda
not dword [rdx + 0x30]
not dword [rdx + 0x214]
add dword [rdx + 0x6c], 0x10793691
xor dword [rdx + 0x184], 0x547c494e
sub dword [rdx + 0x30c], 0x2d5c736a
sub dword [rdx + 0x68], 0x2d4f2891
add dword [rdx + 0x2d8], 0x55487354
xor dword [rdx + 0x170], 0x751110c
xor dword [rdx + 0x3dc], 0x12ff7291
not dword [rdx + 0x2cc]
add dword [rdx + 0x13c], 0x2c300adc
not dword [rdx + 0x23c]
add dword [rdx + 0x2c8], 0x19974da7
add dword [rdx + 0x148], 0x30011390
not dword [rdx + 0x350]
xor dword [rdx + 0x7c], 0x2ef405f1
add dword [rdx + 0x250], 0x245518ed
not dword [rdx + 0x22c]
xor dword [rdx + 0x15c], 0x726a38e0
sub dword [rdx + 0x3b0], 0x48263499
sub dword [rdx + 0xc8], 0x29841a21
sub dword [rdx + 0x1f0], 0xd882699
xor dword [rdx + 0x1c], 0x5fae3961
sub dword [rdx + 0x24], 0x5bdb62c4
xor dword [rdx + 0x38c], 0x116273b2
add dword [rdx + 0x26c], 0x3e2e7bea
add dword [rdx + 0x280], 0x4ced2cb3
sub dword [rdx + 0x90], 0x58342505
add dword [rdx + 0x39c], 0x14fa20a4
xor dword [rdx + 0x17c], 0x56736b97
not dword [rdx + 0x24c]
xor dword [rdx + 0x1ac], 0x17dc3690
sub dword [rdx + 0x3ac], 0x558e1e14
not dword [rdx + 0x19c]
xor dword [rdx + 0x3ec], 0x34896a70
sub dword [rdx + 0x2f0], 0x1b5061d5
not dword [rdx + 0x3d0]
add dword [rdx + 0x27c], 0x5f0b23de
sub dword [rdx + 0x34c], 0x8d8144e
xor dword [rdx + 0xfc], 0x10dc45ac
not dword [rdx + 0x3b4]
add dword [rdx + 0x378], 0x4ec52d7b
add dword [rdx + 0x2b8], 0x7e1e19ef
add dword [rdx + 0x21c], 0x7f1d5a9b
sub dword [rdx + 0x2dc], 0x338309ca
xor dword [rdx + 0xd4], 0x16030df2
sub dword [rdx + 0xdc], 0x132d7c5d
add dword [rdx + 0x158], 0x3a740194
add dword [rdx + 0x114], 0x3f824e53
add dword [rdx + 0x50], 0x1bd97f2f
not dword [rdx + 0x35c]
xor dword [rdx + 0x338], 0x75ca58ab
sub dword [rdx + 0x128], 0x344416d4
add dword [rdx + 0x230], 0x69305544
sub dword [rdx + 0x31c], 0x67cf2a10
xor dword [rdx + 0x1e0], 0x179a66d3
xor dword [rdx + 0x1a0], 0x5ad505be
xor dword [rdx + 0x124], 0x65630f7f
add dword [rdx + 0x308], 0x7e015fed
add dword [rdx + 0x394], 0x74a75332
sub dword [rdx + 0x8c], 0x650d0950
xor dword [rdx + 0x140], 0xcc45c0f
not dword [rdx + 0x3d4]
sub dword [rdx + 0x40], 0x2e96455
xor dword [rdx + 0xe0], 0x7d78247b
not dword [rdx + 0x1bc]
not dword [rdx + 0x1f8]
xor dword [rdx + 0x3f4], 0x638a7e3c
xor dword [rdx + 0x14c], 0x64713a9b
xor dword [rdx + 0x2f4], 0x2bd41521
sub dword [rdx + 0x328], 0x44ff6362
sub dword [rdx + 0x1b4], 0x6336168b
xor dword [rdx + 0x2a0], 0x250c44a5
not dword [rdx + 0x54]
not dword [rdx + 0x190]
sub dword [rdx + 0x1d8], 0xe2b037d
xor dword [rdx + 0x270], 0xb44b94
xor dword [rdx + 0x2c], 0x5dd760b8
not dword [rdx + 0x238]
sub dword [rdx + 0x94], 0x396a41f5
not dword [rdx + 0x2d4]
sub dword [rdx + 0x88], 0x18133a8
sub dword [rdx + 0x324], 0x72cf3bd4
not dword [rdx + 0x1fc]
sub dword [rdx + 0x120], 0x3a4379bd
not dword [rdx + 0x178]
xor dword [rdx + reloc.SHELL32.dll_IsUserAnAdmin], 0x11a14159
add dword [rdx + 0x348], 0x4b8f3f98
add dword [rdx + 0x1ec], 0x345c1795
add dword [rdx + 0x2d0], 0x5e615a18
sub dword [rdx + 0x70], 0x4be910dc
add dword [rdx + 0x18], 0x4d9015d4
sub dword [rdx + 0x11c], 0x4dfd0ba1
add dword [rdx + 0x1e4], 0x4f0c3141
xor dword [rdx + 0xe8], 0x374f432f
add dword [rdx + 0x310], 0x43ff20e3
sub dword [rdx + 0x2b4], 0x6e704b64
sub dword [rdx + 0x284], 0x28c406e8
add dword [rdx + 0xf0], 0x179a5d15
add dword [rdx + 0x3b8], 0x2de25a59
add dword [rdx + 0x18c], 0x6a64095d
sub dword [rdx + 0x134], 0xa11890
add dword [rdx + 0x334], 0x1c51eb4
not dword [rdx + 0x220]
sub dword [rdx + 0x28c], 0x6e404ce8
not dword [rdx + 0x80]
sub dword [rdx + 0x3f0], 0x24b26d88
add dword [rdx + 0xf8], 0x299f6e85
xor dword [rdx + 0x20c], 0x31f61637
not dword [rdx + 0x390]
not dword [rdx + 0x2e8]
add dword [rdx + 0x1f4], 0x6dda2e72
not dword [rdx]
not dword [rdx + 0x20]
not dword [rdx + 0x3e8]
not dword [rdx + 0xc]
add dword [rdx + 0xbc], 0x1f241478
xor dword [rdx + 0x154], 0x5e53699e
not dword [rdx + 0x33c]
not dword [rdx + 0x130]
xor dword [rdx + 0x104], 0x7b5a3da0
xor dword [rdx + 0xc0], 0x5aa630b8
add dword [rdx + 0x10c], 0x1d740462
sub dword [rdx + 0x344], 0x7559475f
not dword [rdx + 0x304]
sub dword [rdx + 0x380], 0x9d4167f
add dword [rdx + 0x3a8], 0x53da0602
add dword [rdx + 0x188], 0x3d0749ad
add dword [rdx + 0x1b0], 0x418d14fb
add dword [rdx + 0x260], 0x1760b5b
xor dword [rdx + 0xb8], 0x2d470e8a
xor dword [rdx + 0x1c0], 0x723b68b4
xor dword [rdx + 0x210], 0x22881057
xor dword [rdx + 0xec], 0x589a6be1
add dword [rdx + 0x14], 0x397d4648
sub dword [rdx + 0x1d4], 0x61d4344f
not dword [rdx + 0x2f8]
xor dword [rdx + 0x180], 0x311d418b
sub dword [rdx + 0x248], 0x47d242bb
xor dword [rdx + 0x228], 0x6087484f
sub dword [rdx + 0x320], 0x42a0663b
not dword [rdx + 0x3e0]
not dword [rdx + 0x2ac]
xor dword [rdx + 0x25c], 0x49fd1d1f
add dword [rdx + 0x36c], 0x472d425f
xor dword [rdx + 0x108], 0x794d6a72
add dword [rdx + 0x330], 0x4e040f3b
sub dword [rdx + 0x2fc], 0x1d3d4d2b
xor dword [rdx + 0x38], 0x51ef4b1c
xor dword [rdx + 0x138], 0x74726671
sub dword [rdx + 0x258], 0x623505b5
add dword [rdx + 0x374], 0x384c6ec5
add dword [rdx + 0x12c], 0x5d5e2395
sub dword [rdx + 0x314], 0x60866316
sub dword [rdx + 0x368], 0x244216de
xor dword [rdx + 0x2a4], 0x6a8c6d97
sub dword [rdx + 0x364], 0x595c0aad
add dword [rdx + 4], 0x33e53eea
xor dword [rdx + 0xa0], 0xb6c4793
xor dword [rdx + 0x3c8], 0x7f35524
add dword [rdx + 0x388], 0x33a80ad9
sub dword [rdx + 0x3a0], 0x39d13f07
add dword [rdx + 0x340], 0x6c6c39df
not dword [rdx + 0x144]
not dword [rdx + 0x204]
xor dword [rdx + 0xa4], 0x620f6ff1
add dword [rdx + 0x1cc], 0x3caf5586
sub dword [rdx + 0x358], 0x4a1e4b73
add dword [rdx + 0x198], 0x6e897668
xor dword [rdx + 0x2ec], 0x756c6f30
xor dword [rdx + 0x398], 0x1a33aa1
sub dword [rdx + 0x360], 0x309e6fdc
add dword [rdx + 0x2e0], 0x6a7a2a96
xor dword [rdx + 0x1e8], 0x30b5dc1
not dword [rdx + 0x98]
xor dword [rdx + 0xf4], 0x2edb486f
add dword [rdx + 0x1d0], 0x59b913b2
not dword [rdx + 0x100]
xor dword [rdx + 0x354], 0x1eec7eb0
not dword [rdx + 0x3c4]
add dword [rdx + 0x1c8], 0x3008363b
not dword [rdx + 0x16c]
not dword [rdx + 0x64]
not dword [rdx + 0x278]
sub dword [rdx + 0xcc], 0x21492414
xor dword [rdx + 8], 0x7d6d22b7
not dword [rdx + 0x3bc]
not dword [rdx + 0x5c]
xor dword [rdx + 0x1c4], 0x614c3742
not dword [rdx + 0x2bc]
xor dword [rdx + 0x3f8], 0x1678222a
sub dword [rdx + 0x254], 0x14de673d
xor dword [rdx + 0x1b8], 0x7d2a00ea
sub dword [rdx + 0x2b0], 0x1e857f66
not dword [rdx + 0x84]
sub dword [rdx + 0x288], 0x1d2a2fd2
xor dword [rdx + 0x3a4], 0x446a230a
add dword [rdx + 0x9c], 0x41470ca6
not dword [rdx + 0x3c0]
xor dword [rdx + 0x298], 0x664a3d9e
add dword [rdx + 0x208], 0x28e927ef
xor dword [rdx + 0x60], 0x454273fb
xor dword [rdx + 0x224], 0x1ac94899
not dword [rdx + 0x274]
not dword [rdx + 0x34]
xor dword [rdx + 0x384], 0x52b3784b
xor dword [rdx + 0x10], 0x1a5128ad
not dword [rdx + 0x29c]
not dword [rdx + 0x58]
not dword [rdx + 0x240]
sub dword [rdx + 0x3c], 0x257a4f09
sub dword [rdx + 0x194], 0x52205e9a
sub dword [rdx + 0x1a4], 0x26ae2124
xor dword [rdx + 0x28], 0x46752233
add dword [rdx + 0x160], 0x72ed05a5
xor dword [rdx + 0x3e4], 0x6a345183
xor dword [rdx + 0x74], 0x541d3ea3
xor dword [rdx + 0x244], 0x62b504f8
add dword [rdx + 0xb4], 0x5a484bed
xor dword [rdx + 0x44], 0x52947f74
not dword [rdx + 0x294]
add dword [rdx + 0x3fc], 0x3763216e
sub dword [rdx + 0x3d8], 0x676d2129
xor dword [rdx + 0x1a8], 0x5c7b74aa
not dword [rdx + 0x300]
add dword [rdx + 0xb0], 0x5d806696
sub dword [rdx + 0x264], 0x5ca02a44
sub dword [rdx + 0x174], 0x5da700f7
add dword [rdx + 0xd0], 0x30f35dab
xor dword [rdx + 0x370], 0x7bd27f34
not dword [rdx + 0x32c]
sub dword [rdx + 0x268], 0x5f3714e6
not dword [rdx + 0x200]
sub dword [rdx + 0xac], 0x170f22a0
add rdi, 0x400
add rdx, 0x400
cmp rdi, 0x8c000
jne 0x14028702e
pop rcx
call fcn.140286706
mov rsp, rbp
pop rbp
pop r15
pop r14
pop r13
pop r12
pop r11
pop r10
pop r9
pop r8
pop rdi
pop rsi
pop rbp
pop rbx
pop rdx
pop rcx
pop rax