Function at 0x140283000
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rax
push rcx
push rdx
push rbx
push rbp
push rsi
push rdi
push r8
push r9
push r10
push r11
push r12
push r13
push r14
push r15
push rbp
mov rbp, rsp
sub rsp, 0x20
and rsp, 0xfffffffffffffff0
lea rcx, [0x1401f6000]
movabs rbx, 0
push rcx
add dword [rcx + 0x4c], 0x2d390a7c
sub dword [rcx + 0x328], 0x4ddb262c
sub dword [rcx + 0x100], 0x3a311426
sub dword [rcx + 0x280], 0x92d4d3a
sub dword [rcx + 0x48], 0xbd84d59
add dword [rcx + 0xd4], 0x66e11261
sub dword [rcx + 0x268], 0x5031407e
xor dword [rcx + 0x80], 0x735d65ad
not dword [rcx + 0x1e8]
not dword [rcx + 0xbc]
add dword [rcx + 0x50], 0x7db622d8
xor dword [rcx + 0x9c], 0x5f457124
xor dword [rcx + 0x17c], 0x59770d51
not dword [rcx + 0x374]
xor dword [rcx + 0x25c], 0x29ca2d3f
sub dword [rcx + 0x2a4], 0x12354c01
not dword [rcx + 0x1f0]
add dword [rcx + 0x218], 0x684a3e5e
xor dword [rcx + 0x2f0], 0x49b07294
xor dword [rcx + 0xfc], 0x3dda31a0
add dword [rcx + 0x1a0], 0xe5b7f0d
sub dword [rcx + 0x278], 0x58246088
add dword [rcx + 0x314], 0x205a082c
sub dword [rcx + 0x3b0], 0x7cf16b2
add dword [rcx + 0x114], 0x469f3386
xor dword [rcx + 0x30], 0x7fc21e0f
xor dword [rcx + 0x3a0], 0x56b1062d
add dword [rcx + 0x270], 0x6e8f2ec2
sub dword [rcx + 0xa8], 0xefe56e3
sub dword [rcx + 0x3f0], 0x2544425c
not dword [rcx + 0x340]
add dword [rcx + 0x2f8], 0x2c260b1b
xor dword [rcx + 0x28], 0x34863dfa
not dword [rcx + 0x334]
sub dword [rcx + 0x348], 0x30be32fa
not dword [rcx + 0x1dc]
xor dword [rcx + 0x38c], 0x2b5a47c1
not dword [rcx + 0x248]
xor dword [rcx + 0x1f8], 0x637f5fec
add dword [rcx + 0x2b4], 0x6449617d
not dword [rcx + 0x2bc]
sub dword [rcx + 0x31c], 0x4efc7411
not dword [rcx + 0x188]
xor dword [rcx + 0x3bc], 0xafa5474
not dword [rcx + 0x1c8]
xor dword [rcx + 0x158], 0x20435c99
sub dword [rcx], 0x562b57bf
add dword [rcx + 0x138], 0x5f45250b
not dword [rcx + 0x384]
not dword [rcx + 0x1b4]
not dword [rcx + 0xe0]
xor dword [rcx + 0x3f4], 0x1e870807
not dword [rcx + 8]
not dword [rcx + 0x168]
not dword [rcx + 0x364]
sub dword [rcx + 0x1fc], 0x6ad30fd8
not dword [rcx + 0x2d4]
sub dword [rcx + 0xe8], 0x6ff42996
xor dword [rcx + 0xf4], 0x195732e0
xor dword [rcx + 0x3c8], 0x4584300e
not dword [rcx + 0x2ec]
xor dword [rcx + 0x2e8], 0x52f70f2d
not dword [rcx + 0x3f8]
xor dword [rcx + 0x1a8], 0x1d130192
sub dword [rcx + 0x288], 0x1c391998
xor dword [rcx + 0x350], 0x6e12132f
xor dword [rcx + 0x360], 0x47824c62
sub dword [rcx + 0x8c], 0x140b4c02
add dword [rcx + 0x394], 0x1ec03d5
not dword [rcx + 0xc]
xor dword [rcx + 0x18], 0x73ff3aea
not dword [rcx + 0x2c]
sub dword [rcx + 0xb8], 0x69743bdd
add dword [rcx + 0x40], 0x5ef4fda
not dword [rcx + 0x120]
add dword [rcx + 0x3d4], 0x1b67986
not dword [rcx + 0x36c]
add dword [rcx + 0x300], 0x6b3b6c4a
not dword [rcx + 0xe4]
not dword [rcx + 0x2c4]
not dword [rcx + 0x33c]
sub dword [rcx + 0x194], 0x6ba97306
xor dword [rcx + 0x3c0], 0x2f046258
add dword [rcx + 0x1c4], 0x608c6b02
sub dword [rcx + 0x228], 0x6a217589
xor dword [rcx + 0x3ec], 0x27ad05f2
sub dword [rcx + 0x330], 0x49446db9
xor dword [rcx + 0x64], 0x864519d
add dword [rcx + 0x184], 0x22006433
not dword [rcx + 0x2a0]
xor dword [rcx + 0x2cc], 0x5c3a6d8e
not dword [rcx + 0xcc]
not dword [rcx + 0x3c]
add dword [rcx + 0x34], 0x388e480d
sub dword [rcx + 0xdc], 0x2f335a12
not dword [rcx + 0x21c]
sub dword [rcx + 0x2b0], 0x1ea96ddb
not dword [rcx + 0x2d0]
add dword [rcx + 0x94], 0x281a2b44
sub dword [rcx + 0x264], 0x539c0ef9
sub dword [rcx + 0x98], 0xfb96c45
not dword [rcx + 0x128]
not dword [rcx + 0x60]
not dword [rcx + 0x150]
not dword [rcx + 0x27c]
xor dword [rcx + 0x198], 0x59a73366
not dword [rcx + 0x254]
not dword [rcx + 0xec]
sub dword [rcx + 0x3b8], 0x75f911f9
not dword [rcx + 0x1d8]
xor dword [rcx + 0x3a8], 0x15f73d08
add dword [rcx + 0x1bc], 0x4eb346a2
sub dword [rcx + 0x3dc], 0x26f31651
sub dword [rcx + 0xb4], 0x557c6172
sub dword [rcx + 0x310], 0x514875a4
add dword [rcx + 0x298], 0x2f013db9
xor dword [rcx + 0x10], 0x4d227b25
not dword [rcx + 0x1e4]
add dword [rcx + 0x160], 0x64f12ad6
not dword [rcx + 0x230]
sub dword [rcx + 0x38], 0x443c1192
sub dword [rcx + 0x370], 0x59446f54
xor dword [rcx + 0x84], 0x31b90b32
xor dword [rcx + 0x7c], 0x38e551cd
add dword [rcx + 0x14], 0x4e442587
xor dword [rcx + 0x74], 0x10e25b49
sub dword [rcx + 0x20c], 0x3d983135
not dword [rcx + 0x54]
add dword [rcx + 0x10c], 0x4155927
not dword [rcx + 0x104]
not dword [rcx + 0x35c]
sub dword [rcx + 0x110], 0xb297efc
sub dword [rcx + 0x24], 0x1e897a85
xor dword [rcx + 0x2e0], 0x411b5ef6
add dword [rcx + 0x338], 0x8e35a78
add dword [rcx + 0x208], 0x2cab7e7c
sub dword [rcx + 0x2e4], 0x613a0eeb
add dword [rcx + 0x304], 0xd7676a4
not dword [rcx + 0x214]
xor dword [rcx + 0x15c], 0x6b44306c
xor dword [rcx + 0x164], 0x50d629d9
add dword [rcx + 0x1d4], 0x566c178f
xor dword [rcx + 0x13c], 0x315a4325
xor dword [rcx + 0x180], 0x5f204700
xor dword [rcx + 0x220], 0x5b4c7641
not dword [rcx + 0x30c]
sub dword [rcx + 4], 0x182a0ca1
xor dword [rcx + 0x2dc], 0x7c6e23a8
add dword [rcx + 0x204], 0x1b677311
sub dword [rcx + 0x1b0], 0x5161500f
add dword [rcx + 0x1ac], 0x712e5b3e
not dword [rcx + 0x14c]
sub dword [rcx + 0x3d8], 0x6b040eb3
sub dword [rcx + 0x390], 0x611011ee
xor dword [rcx + 0x388], 0x47f234dc
xor dword [rcx + 0x318], 0x68033e11
not dword [rcx + 0x3e0]
xor dword [rcx + 0x23c], 0x78d863f0
not dword [rcx + 0x3cc]
sub dword [rcx + 0x1ec], 0x370b5f73
add dword [rcx + 0x240], 0x26d666df
xor dword [rcx + 0x18c], 0x38114710
not dword [rcx + 0x358]
sub dword [rcx + 0x1f4], 0x4ea814d8
add dword [rcx + 0x3d0], 0x7b807acc
sub dword [rcx + 0x224], 0x1c4450b
sub dword [rcx + 0x294], 0x54af3ea2
xor dword [rcx + 0x34c], 0x3c545ab8
sub dword [rcx + 0x378], 0x4cbc5b3c
not dword [rcx + 0x170]
add dword [rcx + 0x130], 0x2ec44771
xor dword [rcx + 0x2f4], 0x3378574f
add dword [rcx + 0x2c8], 0x325936db
xor dword [rcx + 0x2ac], 0x182b60
xor dword [rcx + 0x1cc], 0x158240fb
sub dword [rcx + 0x144], 0x1b7556bd
xor dword [rcx + 0x154], 0x492d176b
sub dword [rcx + 0xc4], 0x17d6984
not dword [rcx + 0x108]
sub dword [rcx + 0x238], 0x3d925e6d
sub dword [rcx + 0x124], 0x4e55458e
xor dword [rcx + 0x70], 0x5b3169f0
sub dword [rcx + 0x200], 0x7aa11614
add dword [rcx + 0x118], 0x4cde643b
xor dword [rcx + 0x3e4], 0x18a51daa
sub dword [rcx + 0x44], 0x414c491e
sub dword [rcx + 0x2d8], 0x3f6d35b4
add dword [rcx + 0x12c], 0x2c1d2181
add dword [rcx + 0x28c], 0x7641170f
sub dword [rcx + 0x3ac], 0x10044e2c
sub dword [rcx + 0x260], 0x30307b75
add dword [rcx + 0x140], 0x48b60dc1
add dword [rcx + 0x3e8], 0x5add47ac
not dword [rcx + 0x324]
xor dword [rcx + 0x1c], 0x26ad516c
not dword [rcx + 0xd8]
xor dword [rcx + 0x1a4], 0x79ec48a2
sub dword [rcx + 0x290], 0x58920ebf
xor dword [rcx + 0x24c], 0x6f2756cc
not dword [rcx + 0x2b8]
add dword [rcx + 0x274], 0x213452a7
add dword [rcx + 0xd0], 0x295a6738
not dword [rcx + 0x250]
xor dword [rcx + 0x258], 0x131808ad
sub dword [rcx + 0x344], 0x2bfb5440
add dword [rcx + 0x3b4], 0xc2749db
not dword [rcx + 0x148]
sub dword [rcx + 0xb0], 0x2037128f
not dword [rcx + 0x20]
not dword [rcx + 0x1c0]
xor dword [rcx + 0x5c], 0x21247a77
xor dword [rcx + 0x3a4], 0x42415275
not dword [rcx + 0x178]
add dword [rcx + 0x3c4], 0x5afd5ae1
add dword [rcx + 0x19c], 0x31ec5257
xor dword [rcx + 0x88], 0x3e990a21
xor dword [rcx + 0x368], 0x4cf37bdf
sub dword [rcx + 0x380], 0x6544271b
xor dword [rcx + reloc.SHELL32.dll_IsUserAnAdmin], 0x12d10b5e
add dword [rcx + 0x234], 0x7d3c7078
sub dword [rcx + 0x3fc], 0x739d65a9
add dword [rcx + 0x29c], 0x6b291457
not dword [rcx + 0x16c]
sub dword [rcx + 0xa0], 0x7f462bc
add dword [rcx + 0x244], 0x161a0489
add dword [rcx + 0x174], 0x5afb1e28
sub dword [rcx + 0x6c], 0x9ae3215
not dword [rcx + 0x308]
add dword [rcx + 0xf0], 0x64335f76
sub dword [rcx + 0x2fc], 0x4f296945
not dword [rcx + 0x210]
xor dword [rcx + 0x78], 0x399071ed
not dword [rcx + 0x2c0]
add dword [rcx + 0x32c], 0x2b2236b4
sub dword [rcx + 0x398], 0x51871ffd
sub dword [rcx + 0x1e0], 0x194a2b07
sub dword [rcx + 0x26c], 0x6c6d6435
add dword [rcx + 0x90], 0x3509163a
xor dword [rcx + 0x11c], 0x78527c1f
sub dword [rcx + 0x134], 0x62ae2c2b
add dword [rcx + 0x284], 0x437117cf
not dword [rcx + 0xc0]
add dword [rcx + 0xc8], 0x6a250a15
not dword [rcx + 0x354]
sub dword [rcx + 0x37c], 0x44534a1c
xor dword [rcx + 0x1d0], 0x3b175b
sub dword [rcx + 0x320], 0x43ff42f9
xor dword [rcx + 0x22c], 0x604f1bb6
xor dword [rcx + 0xa4], 0x46a72e97
sub dword [rcx + 0x58], 0x526a0085
not dword [rcx + 0x1b8]
sub dword [rcx + 0x190], 0x5c7a7bc3
xor dword [rcx + 0x68], 0x7ad65805
xor dword [rcx + 0xac], 0x5e840a07
add dword [rcx + 0x39c], 0x1bbb06e6
not dword [rcx + 0xf8]
add rbx, 0x400
add rcx, 0x400
cmp rbx, 0x8c000
je 0x1402838e0
jmp 0x140283035
pop rcx
call fcn.14028113e
mov rsp, rbp
pop rbp
pop r15
pop r14
pop r13
pop r12
pop r11
pop r10
pop r9
pop r8
pop rdi
pop rsi
pop rbp
pop rbx
pop rdx
pop rcx
pop rax