Function at 0x140245000
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rax
push rcx
push rdx
push rbx
push rbp
push rsi
push rdi
push r8
push r9
push r10
push r11
push r12
push r13
push r14
push r15
push rbp
mov rbp, rsp
sub rsp, 0x20
and rsp, 0xfffffffffffffff0
lea rcx, [0x1401b8a00]
movabs rdx, 0
push rcx
not dword [rcx + 0xdc]
not dword [rcx + 0x324]
add dword [rcx + 0xe0], 0x25ae731f
add dword [rcx + 0xe8], 0x7f3927ab
not dword [rcx + 0x29c]
sub dword [rcx + 0x290], 0x38404ffb
xor dword [rcx + 0x21c], 0x47c477b9
not dword [rcx + 0x330]
not dword [rcx + 0x180]
xor dword [rcx + 0x214], 0x6cbb561b
add dword [rcx + 0x4c], 0x5da11c11
not dword [rcx + 0x24c]
not dword [rcx + 0x60]
not dword [rcx + 0x2e4]
add dword [rcx + 0x3f8], 0x46c15b96
not dword [rcx + 0x358]
sub dword [rcx + 0x144], 0xafd3a81
xor dword [rcx + 0x248], 0x1be50989
xor dword [rcx + 0xd0], 0x9e66fd6
add dword [rcx + 0x3ac], 0x5b2c5905
sub dword [rcx + 0x3a8], 0x59d82937
sub dword [rcx + 0x1f4], 0x43396e80
xor dword [rcx + 0x1e8], 0xed5940
sub dword [rcx + 0x304], 0x29842ef4
add dword [rcx + 0x54], 0x7a8a41cc
not dword [rcx + 0x360]
xor dword [rcx + 0x278], 0x4aa71d9d
xor dword [rcx + 0x2e8], 0x10a5427e
sub dword [rcx + 0x1b8], 0x5a474b24
sub dword [rcx + 0x1f8], 0x700e5bfa
sub dword [rcx + 0x13c], 0x55c21da1
xor dword [rcx + 0x3d0], 0x604c788f
not dword [rcx + 0x2f4]
xor dword [rcx + 0x1d0], 0x2ea65d8a
xor dword [rcx + 4], 0x340177de
sub dword [rcx + 0x1c8], 0x3e2b3a84
sub dword [rcx + 0xb0], 0x67f844ca
not dword [rcx + 0x364]
not dword [rcx + 0x2a4]
add dword [rcx + 0x234], 0x290376a0
not dword [rcx + 0x380]
not dword [rcx + 0x24]
xor dword [rcx + 0x3dc], 0x20b72614
sub dword [rcx + 0x64], 0x2ec7301b
add dword [rcx + 0x338], 0x7c813a88
not dword [rcx + 0x58]
not dword [rcx + 0x33c]
xor dword [rcx + 0x2b8], 0x25672470
add dword [rcx + 0x204], 0x2bbc775a
xor dword [rcx + 0x1b4], 0xbe3543e
not dword [rcx]
sub dword [rcx + 0x280], 0x71d54368
not dword [rcx + 0x74]
not dword [rcx + 0x7c]
xor dword [rcx + 0x108], 0xc165919
add dword [rcx + 0x48], 0x20f58ef
add dword [rcx + 0x200], 0x607b2fef
xor dword [rcx + 0x30c], 0x75201f83
xor dword [rcx + 0x110], 0x328f13b3
not dword [rcx + 0x19c]
xor dword [rcx + 0x2a0], 0x16f10b25
xor dword [rcx + 0x378], 0x58480753
sub dword [rcx + 0x8c], 0x7ad85ae7
not dword [rcx + 0x22c]
not dword [rcx + 0x18]
not dword [rcx + 0x38c]
add dword [rcx + 0x210], 0x33e712c
not dword [rcx + 0x17c]
xor dword [rcx + 0x124], 0x1c326682
xor dword [rcx + 0xf0], 0x17a861ac
add dword [rcx + 0x188], 0x59e84421
not dword [rcx + 0xb8]
sub dword [rcx + 0x314], 0x2adf3bc7
xor dword [rcx + 0x170], 0x77995b66
xor dword [rcx + 0x260], 0x55523a49
sub dword [rcx + 0x154], 0x115b03fe
add dword [rcx + 0x2f0], 0x7ca21d56
add dword [rcx + 0x1e4], 0x11af2413
sub dword [rcx + 0x3e0], 0x7ee9668c
add dword [rcx + 0x138], 0x76d217c0
xor dword [rcx + 0x284], 0x41c34166
add dword [rcx + 0xb4], 0x3bf411a1
xor dword [rcx + 0x1c0], 0xf593fec
xor dword [rcx + 0xac], 0x29c13cdf
not dword [rcx + 0x2f8]
xor dword [rcx + 0x38], 0x5b832104
xor dword [rcx + 0x84], 0x69912712
sub dword [rcx + 0x1a0], 0xa2c516e
xor dword [rcx + 0x1bc], 0x1c425c1e
not dword [rcx + 0x2c]
sub dword [rcx + 0x194], 0x551c523f
xor dword [rcx + 0x258], 0x4cc2366a
sub dword [rcx + 0x158], 0x41ad6fbb
not dword [rcx + 0x230]
sub dword [rcx + 0x25c], 0x125c0c40
xor dword [rcx + 0x1dc], 0x7e09796e
sub dword [rcx + 0x3bc], 0x560a6050
add dword [rcx + 0x14], 0x3bec27f0
xor dword [rcx + 0x310], 0x78fe5bf5
add dword [rcx + 0x78], 0x40857ed1
add dword [rcx + 0x374], 0x5ffd6ae2
add dword [rcx + 0x34], 0x3e7574f5
xor dword [rcx + 0x1b0], 0x1a7704b4
sub dword [rcx + 0xd8], 0x453e49fa
xor dword [rcx + 0x44], 0x74330527
add dword [rcx + 0xbc], 0x1e0c71a0
sub dword [rcx + 0x3c0], 0x3820290
not dword [rcx + 0x224]
not dword [rcx + 0xec]
add dword [rcx + 0x3fc], 0x4eff41f0
xor dword [rcx + 0x3b4], 0x192420ae
xor dword [rcx + 0x198], 0x7f4127a4
add dword [rcx + 0x3d8], 0x5fb002cc
xor dword [rcx + 0x264], 0x284a7493
not dword [rcx + 0x208]
not dword [rcx + 0x288]
add dword [rcx + 0x50], 0x59e7347c
sub dword [rcx + 0x1cc], 0x2cec668d
sub dword [rcx + 0x398], 0x12635ddb
xor dword [rcx + 0x228], 0x4b8161b0
add dword [rcx + 0x168], 0x426e32cc
xor dword [rcx + 0x148], 0x28c40523
not dword [rcx + 0x1e0]
not dword [rcx + 0xc]
add dword [rcx + 0x16c], 0x714c5950
add dword [rcx + 0x3c8], 0x1367263
sub dword [rcx + 0x2dc], 0x472f68fc
not dword [rcx + 0x318]
xor dword [rcx + 0x2fc], 0xf6647d3
not dword [rcx + 0x36c]
sub dword [rcx + 0xc4], 0x76b54615
add dword [rcx + 0x1d8], 0x53465983
add dword [rcx + 0x150], 0x1afe4be8
not dword [rcx + 0x88]
xor dword [rcx + 0x2ec], 0x5851069e
not dword [rcx + 0x11c]
xor dword [rcx + 0x340], 0x2b0224c4
sub dword [rcx + 0x70], 0x3ce2d01
add dword [rcx + 0x90], 0xbf30358
sub dword [rcx + 0x3a4], 0x19a1146a
sub dword [rcx + 0x3e4], 0x44d07bad
add dword [rcx + 0x68], 0x74152e43
xor dword [rcx + 0x274], 0x7b4c2145
sub dword [rcx + 0x344], 0x4eb6797d
not dword [rcx + 0x39c]
xor dword [rcx + 0x390], 0x4f11ff3
xor dword [rcx + 0x1d4], 0x2dd808db
add dword [rcx + 0x23c], 0x33250c90
sub dword [rcx + 0x1a4], 0xe8c224d
not dword [rcx + 0x354]
add dword [rcx + 0x2c8], 0x5c2a5ecb
xor dword [rcx + 0x1ac], 0x659d7f76
not dword [rcx + 0x14c]
add dword [rcx + 0x12c], 0x642f6da0
not dword [rcx + 0x3cc]
not dword [rcx + 0x140]
sub dword [rcx + 0x28], 0x69f4d2e
not dword [rcx + 0x190]
add dword [rcx + 0x1ec], 0x5823170e
sub dword [rcx + reloc.SHELL32.dll_IsUserAnAdmin], 0x25b676dc
not dword [rcx + 0x134]
add dword [rcx + 0x20c], 0x3db24953
sub dword [rcx + 0xf4], 0x4ea0ded
sub dword [rcx + 0x118], 0x12547083
not dword [rcx + 0x5c]
xor dword [rcx + 0x2d0], 0x578878dd
not dword [rcx + 0x3b0]
xor dword [rcx + 0xd4], 0x85e10b7
add dword [rcx + 0xc8], 0x457850cf
add dword [rcx + 0xf8], 0x7cb526ac
sub dword [rcx + 0x254], 0x6a2e1085
not dword [rcx + 0x1f0]
not dword [rcx + 0xc0]
sub dword [rcx + 0x6c], 0x44aa0d12
sub dword [rcx + 0x384], 0x6ed706bc
not dword [rcx + 0x3d4]
not dword [rcx + 0x128]
sub dword [rcx + 0x334], 0x6e4b529f
not dword [rcx + 0x2c4]
sub dword [rcx + 0x35c], 0x2b1b001a
xor dword [rcx + 0x114], 0x68aa2814
add dword [rcx + 0x164], 0x721064f
add dword [rcx + 8], 0x79b66533
xor dword [rcx + 0x394], 0x3a141006
not dword [rcx + 0x10c]
add dword [rcx + 0x94], 0x150d6861
sub dword [rcx + 0x9c], 0x199e2909
sub dword [rcx + 0x160], 0x3b4b1212
sub dword [rcx + 0x218], 0x123457d9
xor dword [rcx + 0x2b0], 0x362005e4
not dword [rcx + 0x174]
sub dword [rcx + 0x15c], 0x4f9f240f
xor dword [rcx + 0x40], 0x121e36af
add dword [rcx + 0x3e8], 0x18224025
xor dword [rcx + 0x244], 0x743e64b3
sub dword [rcx + 0x1c4], 0x6e23b23
not dword [rcx + 0x26c]
xor dword [rcx + 0x130], 0x4ece2902
not dword [rcx + 0x10]
xor dword [rcx + 0x32c], 0x36d10529
sub dword [rcx + 0xa4], 0x6f205a5f
sub dword [rcx + 0x1c], 0x4cdf7afb
add dword [rcx + 0x388], 0x36894aa2
add dword [rcx + 0x3ec], 0x71cd6615
add dword [rcx + 0x3b8], 0x5965861
add dword [rcx + 0x250], 0x4a576d93
sub dword [rcx + 0x3a0], 0x62835998
sub dword [rcx + 0x30], 0x6d7c6034
not dword [rcx + 0x2cc]
not dword [rcx + 0x370]
add dword [rcx + 0x178], 0x7ca6405d
add dword [rcx + 0x268], 0x1ed789d
not dword [rcx + 0x2b4]
add dword [rcx + 0x300], 0x318449da
xor dword [rcx + 0x2ac], 0x1dd62642
sub dword [rcx + 0xa0], 0x2c7631b1
xor dword [rcx + 0x31c], 0x7d11154f
sub dword [rcx + 0x1fc], 0x73460a39
sub dword [rcx + 0x2d8], 0x44d74989
sub dword [rcx + 0x320], 0x55645f9b
sub dword [rcx + 0x37c], 0x61776b15
not dword [rcx + 0x3c]
add dword [rcx + 0x34c], 0x4a205dd1
xor dword [rcx + 0x20], 0x2fd450b5
sub dword [rcx + 0x120], 0x57eb4d7c
xor dword [rcx + 0x104], 0x497b06e8
not dword [rcx + 0x1a8]
not dword [rcx + 0x27c]
add dword [rcx + 0x100], 0x40e86487
xor dword [rcx + 0x2e0], 0x19ac6e3d
not dword [rcx + 0x368]
sub dword [rcx + 0x308], 0x548a74aa
not dword [rcx + 0x18c]
xor dword [rcx + 0xa8], 0x29b06311
not dword [rcx + 0x98]
add dword [rcx + 0x3f0], 0x4706545e
sub dword [rcx + 0x3f4], 0x34b1a29
sub dword [rcx + 0x2d4], 0x46b61034
sub dword [rcx + 0x240], 0x7fe533ca
not dword [rcx + 0x348]
sub dword [rcx + 0x2bc], 0x3002726e
add dword [rcx + 0x350], 0x23b2303e
not dword [rcx + 0x220]
xor dword [rcx + 0x2c0], 0x34ca2df4
add dword [rcx + 0x3c4], 0x53837228
not dword [rcx + 0xcc]
add dword [rcx + 0xe4], 0x21c61d8f
not dword [rcx + 0x184]
add dword [rcx + 0x80], 0x48bf0fe8
xor dword [rcx + 0x270], 0x299e1963
sub dword [rcx + 0xfc], 0x2de04d60
not dword [rcx + 0x238]
add dword [rcx + 0x294], 0x35de26e0
add dword [rcx + 0x328], 0x64c07ed6
not dword [rcx + 0x298]
not dword [rcx + 0x28c]
add rdx, 0x400
add rcx, 0x400
cmp rdx, 0x8c000
je 0x1402458d0
jmp 0x140245035
pop rcx
call fcn.140244306
mov rsp, rbp
pop rbp
pop r15
pop r14
pop r13
pop r12
pop r11
pop r10
pop r9
pop r8
pop rdi
pop rsi
pop rbp
pop rbx
pop rdx
pop rcx
pop rax