Function at 0x1401b0000
Capabilities:
Encode data using xor

Disassembly:
push rax
push rcx
push rdx
push rbx
push rbp
push rsi
push rdi
push r8
push r9
push r10
push r11
push r12
push r13
push r14
push r15
push rbp
mov rbp, rsp
sub rsp, 0x20
and rsp, 0xfffffffffffffff0
lea rbx, [0x140123800]
push 0
pop rdx
push rbx
add dword [rbx + 0x238], 0x2b5f4cc0
add dword [rbx + 0x74], 0x423a0989
not dword [rbx + 0x350]
sub dword [rbx + 0x344], 0x30632900
sub dword [rbx + 0x3b8], 0x4b464495
not dword [rbx + 0x12c]
xor dword [rbx + 0x39c], 0x683c67e6
not dword [rbx + 0x110]
not dword [rbx + 0x1b0]
add dword [rbx + 0x1bc], 0x29fb475b
sub dword [rbx + 0x1b8], 0x62285f63
not dword [rbx + 0x184]
xor dword [rbx + 0x130], 0x27390799
not dword [rbx + 0x144]
add dword [rbx + 0x26c], 0x3631313c
add dword [rbx + 0x14], 0x42a09cf
not dword [rbx + 0x98]
sub dword [rbx + 0x364], 0x5fe4f86
sub dword [rbx + 0x384], 0x2d7d4be1
sub dword [rbx + 0xb4], 0x1dac7111
xor dword [rbx + 0x1d4], 0x7d9d1c89
add dword [rbx + 0x3d4], 0x7db828bf
sub dword [rbx + 0x3cc], 0x197d3ca3
xor dword [rbx + 0x2b0], 0x22797577
xor dword [rbx + 0x1a8], 0x69cc500f
xor dword [rbx + 0x3e0], 0x3dba5965
add dword [rbx + 0xbc], 0x372e0bfd
add dword [rbx + 0x2d0], 0x131d45e7
sub dword [rbx + 0x8c], 0x46d112bf
xor dword [rbx + 0x138], 0x2e8a013e
add dword [rbx + 0x2f0], 0x340c6085
xor dword [rbx + 0xf0], 0xa7438ab
not dword [rbx + 0x318]
xor dword [rbx + 0xb8], 0x130d1178
add dword [rbx + 0x22c], 0x347262b2
add dword [rbx + 0x128], 0x67ee6a8d
sub dword [rbx + 0x2f8], 0x2e3d1f24
sub dword [rbx + 0x60], 0x2d4579de
add dword [rbx + 0x7c], 0x12a7aa3
not dword [rbx + 0x340]
xor dword [rbx + 0x1f0], 0x7b421518
not dword [rbx + 0x34c]
add dword [rbx + 0x37c], 0x87a5884
add dword [rbx + 0x284], 0xb2b5422
add dword [rbx + 0x18c], 0x38940c3b
add dword [rbx + 0x380], 0x77f093e
add dword [rbx + 0xc4], 0x71595437
sub dword [rbx + 0xe0], 0x4e047e09
add dword [rbx + 0x3a0], 0x64f551ce
add dword [rbx + 0xac], 0x14542c1b
add dword [rbx + 0x298], 0x68e40687
not dword [rbx + 0x1fc]
add dword [rbx + 0x1a4], 0x174d3ef8
add dword [rbx + 0x218], 0x27bc58ab
sub dword [rbx + 0x3f8], 0x3f3c7383
xor dword [rbx + 0x224], 0x4e64257
not dword [rbx + 0x1e8]
not dword [rbx + 0x1f4]
sub dword [rbx + 0x2dc], 0x79f5e8b
not dword [rbx + 0x1dc]
not dword [rbx + 0x29c]
sub dword [rbx + 8], 0x646e48d7
add dword [rbx + 0x288], 0x449a46c1
xor dword [rbx + 0x314], 0x46bc5013
add dword [rbx + 0x254], 0x56ba14c4
not dword [rbx + 0x24c]
not dword [rbx + 0x120]
add dword [rbx + 0x1c4], 0x79825b6e
xor dword [rbx + 0x3f4], 0x7ea07a9b
not dword [rbx + 0x3b0]
not dword [rbx + 0x228]
add dword [rbx + 0x3e4], 0x6ad463c6
not dword [rbx + 0x394]
not dword [rbx + 0x27c]
xor dword [rbx + 0xb0], 0x46c451d2
sub dword [rbx + 0x1c], 0x44d06997
xor dword [rbx + 0xa0], 0x455e67a8
not dword [rbx + 0x204]
add dword [rbx + 0x17c], 0xabc13aa
add dword [rbx + 0x164], 0x36750769
add dword [rbx + 0x2a4], 0x3c92cb4
xor dword [rbx + 0x230], 0x44db3ed3
xor dword [rbx + 0x214], 0x6424363c
xor dword [rbx + 0x300], 0x18464e0b
sub dword [rbx + 0x3ac], 0x439d43af
sub dword [rbx + 0xcc], 0x313e23ec
add dword [rbx + 0x320], 0x227953ec
sub dword [rbx + 0x354], 0x2fb047e7
not dword [rbx + 0x1c0]
sub dword [rbx + 0x2e8], 0xf028ea
add dword [rbx + 0x290], 0x37de7a20
not dword [rbx + 0x2bc]
xor dword [rbx + 0x68], 0x533f5f72
sub dword [rbx + 0x2c4], 0x528d1ab0
add dword [rbx + 0x30], 0x76421dcf
xor dword [rbx + 0x2c8], 0x38835909
add dword [rbx + 0x3f0], 0x66925fb4
add dword [rbx + 0x2b4], 0x26fd4a20
sub dword [rbx + 0x3c], 0x6169068d
xor dword [rbx + 0x38c], 0x12177e34
not dword [rbx + 0xfc]
xor dword [rbx + 0x370], 0x107c18d9
not dword [rbx + 0x15c]
sub dword [rbx + 0xd8], 0x78736738
not dword [rbx + 0x2b8]
not dword [rbx + 0x44]
xor dword [rbx + 0x328], 0x22f10893
not dword [rbx + 0x70]
add dword [rbx + 0x1d8], 0x638643b0
sub dword [rbx + 0x13c], 0x29ec3fd9
add dword [rbx + 0xf8], 0x45b70594
xor dword [rbx + 0x3ec], 0x7f205e6d
add dword [rbx + 0xdc], 0x640e5ab7
add dword [rbx + 0x390], 0x76590a08
sub dword [rbx + 0x2fc], 0x665b7168
add dword [rbx + 0x334], 0x4f4e5044
add dword [rbx + 0x258], 0x7eb67854
xor dword [rbx + 0x108], 0x367555f8
add dword [rbx + 0x270], 0x350b2022
sub dword [rbx + 0x1f8], 0x14511215
add dword [rbx + 0x3a8], 0x22662338
not dword [rbx + 0x398]
not dword [rbx + 4]
not dword [rbx + 0x3c8]
not dword [rbx + reloc.SHELL32.dll_IsUserAnAdmin]
xor dword [rbx + 0x2d8], 0x74f4625f
not dword [rbx + 0x19c]
not dword [rbx + 0x24]
not dword [rbx + 0x2ec]
sub dword [rbx + 0x240], 0xe640860
sub dword [rbx + 0x3b4], 0x5435184d
xor dword [rbx + 0x9c], 0x438c4f04
not dword [rbx + 0x378]
not dword [rbx + 0x150]
xor dword [rbx + 0x194], 0x26a25d2c
sub dword [rbx + 0x1c8], 0x2c26791a
sub dword [rbx + 0xf4], 0x50d54b8b
not dword [rbx + 0x32c]
xor dword [rbx + 0x388], 0x47bc4baf
xor dword [rbx + 0x104], 0x59c94370
add dword [rbx + 0xa8], 0x5b095077
not dword [rbx + 0xc]
add dword [rbx + 0x3bc], 0x523e1e33
xor dword [rbx], 0x2fe3129f
xor dword [rbx + 0x58], 0x7f9f37b5
xor dword [rbx + 0x40], 0x7e58434d
sub dword [rbx + 0x23c], 0x1bb24bb9
not dword [rbx + 0x38]
not dword [rbx + 0x35c]
xor dword [rbx + 0x348], 0x1fd65595
add dword [rbx + 0x250], 0x34483b91
add dword [rbx + 0x294], 0x13240ce0
add dword [rbx + 0x2c0], 0x78c5033b
xor dword [rbx + 0x114], 0x5b8836ba
sub dword [rbx + 0x158], 0x38ed7299
sub dword [rbx + 0x188], 0x228575cf
add dword [rbx + 0xc0], 0x5a60569b
not dword [rbx + 0x34]
xor dword [rbx + 0x18], 0x7fa6128b
not dword [rbx + 0x3c0]
xor dword [rbx + 0x264], 0x450d2506
not dword [rbx + 0x64]
sub dword [rbx + 0x170], 0x727850cd
add dword [rbx + 0x200], 0x76d7148f
sub dword [rbx + 0x10c], 0x24a65521
add dword [rbx + 0x28], 0x3a260f76
sub dword [rbx + 0x160], 0xf946a5a
not dword [rbx + 0xc8]
not dword [rbx + 0xd4]
add dword [rbx + 0x1d0], 0x93b0f0c
sub dword [rbx + 0x3d8], 0x107c2205
not dword [rbx + 0x148]
sub dword [rbx + 0x2a0], 0x6b08001c
xor dword [rbx + 0x1e0], 0x59ab66e8
xor dword [rbx + 0x28c], 0x4a166b77
not dword [rbx + 0x21c]
sub dword [rbx + 0xa4], 0xd9a634f
sub dword [rbx + 0x20c], 0x67710bc5
sub dword [rbx + 0x10], 0xefe168b
not dword [rbx + 0x360]
xor dword [rbx + 0x374], 0x4ea529e4
xor dword [rbx + 0x308], 0x4e8d468c
sub dword [rbx + 0x2e0], 0x7a52151c
xor dword [rbx + 0x80], 0x26f2a36
not dword [rbx + 0x154]
sub dword [rbx + 0x2e4], 0x23ee0c6e
sub dword [rbx + 0x6c], 0x73e2359d
sub dword [rbx + 0xe8], 0x174419f2
add dword [rbx + 0x140], 0x6bea4328
not dword [rbx + 0x210]
sub dword [rbx + 0x3d0], 0xd033e6c
not dword [rbx + 0x220]
sub dword [rbx + 0x3a4], 0xfcf1841
not dword [rbx + 0x31c]
sub dword [rbx + 0x118], 0x28ec2707
not dword [rbx + 0x260]
xor dword [rbx + 0x234], 0x3f2819e7
sub dword [rbx + 0xe4], 0x2b8f5a44
not dword [rbx + 0x4c]
sub dword [rbx + 0x30c], 0x2d5a0709
not dword [rbx + 0x368]
sub dword [rbx + 0x190], 0x18f706b2
not dword [rbx + 0x1e4]
not dword [rbx + 0x3c4]
not dword [rbx + 0x2cc]
add dword [rbx + 0x1b4], 0xfb977a1
sub dword [rbx + 0x2d4], 0x48644d91
not dword [rbx + 0x324]
xor dword [rbx + 0x338], 0x68765c81
sub dword [rbx + 0xec], 0x1e1b132e
xor dword [rbx + 0x33c], 0x297c03ee
not dword [rbx + 0x1ac]
add dword [rbx + 0x84], 0x6d1b3b72
sub dword [rbx + 0x94], 0x17be1bee
not dword [rbx + 0x278]
sub dword [rbx + 0x180], 0x1f313816
not dword [rbx + 0x50]
xor dword [rbx + 0x280], 0x244c0f83
xor dword [rbx + 0x25c], 0x6dc10dc9
sub dword [rbx + 0x16c], 0x29566f28
not dword [rbx + 0x268]
sub dword [rbx + 0x2ac], 0x6a43195b
add dword [rbx + 0x48], 0x49c219f1
add dword [rbx + 0x274], 0x6efc7a9d
add dword [rbx + 0x5c], 0x52fb1cb1
xor dword [rbx + 0x1ec], 0x5d6b7c45
add dword [rbx + 0x244], 0x4d204e52
xor dword [rbx + 0x168], 0x37461833
xor dword [rbx + 0x2c], 0x43ea23fb
add dword [rbx + 0x134], 0x24983f57
xor dword [rbx + 0x3fc], 0x6cf57c42
not dword [rbx + 0x11c]
not dword [rbx + 0x178]
sub dword [rbx + 0x3dc], 0x476026f8
sub dword [rbx + 0xd0], 0x459d7d1b
add dword [rbx + 0x100], 0x70a16900
xor dword [rbx + 0x36c], 0x49344198
add dword [rbx + 0x310], 0x1f0d0539
xor dword [rbx + 0x2f4], 0xcc3e8d
add dword [rbx + 0x330], 0x50ea183f
add dword [rbx + 0x174], 0x4b192514
sub dword [rbx + 0x1a0], 0xa6b324f
not dword [rbx + 0x88]
add dword [rbx + 0x90], 0x7fe462fc
sub dword [rbx + 0x1cc], 0x7a4f6f0e
xor dword [rbx + 0x14c], 0x74c53e73
not dword [rbx + 0x54]
not dword [rbx + 0x358]
xor dword [rbx + 0x78], 0x427d5cee
sub dword [rbx + 0x20], 0x4f6202c6
xor dword [rbx + 0x124], 0xd67671d
not dword [rbx + 0x248]
xor dword [rbx + 0x208], 0x49ea76f5
not dword [rbx + 0x3e8]
xor dword [rbx + 0x198], 0x4fe720c8
add dword [rbx + 0x304], 0x46ba6a2a
add rdx, 0x400
add rbx, 0x400
cmp rdx, 0x8c000
jne 0x1401b002e
pop rcx
call fcn.1401af106
mov rsp, rbp
pop rbp
pop r15
pop r14
pop r13
pop r12
pop r11
pop r10
pop r9
pop r8
pop rdi
pop rsi
pop rbp
pop rbx
pop rdx
pop rcx
pop rax