Function at 0x140205000
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rax
push rcx
push rdx
push rbx
push rbp
push rsi
push rdi
push r8
push r9
push r10
push r11
push r12
push r13
push r14
push r15
push rbp
mov rbp, rsp
sub rsp, 0x20
and rsp, 0xfffffffffffffff0
lea rbx, [0x140178800]
movabs rdx, 0
push rbx
xor dword [rbx + 0x2b4], 0x2f1e45a1
sub dword [rbx + 0x1b4], 0x3317258
xor dword [rbx + 0x24c], 0x2aad1d1e
sub dword [rbx + 0x118], 0x536c1e28
add dword [rbx + 0xe4], 0x20884f7c
xor dword [rbx + 0x238], 0x26e2870
sub dword [rbx + 0x344], 0x6e7e615e
sub dword [rbx + 0x120], 0x26465003
sub dword [rbx + 0x1e4], 0x77787d54
not dword [rbx + 0x3a0]
sub dword [rbx + 0x58], 0x359b1622
sub dword [rbx + 0x354], 0x64b53e64
add dword [rbx + 0x1bc], 0x13b2226f
not dword [rbx + 0x360]
sub dword [rbx + 0x348], 0x62357272
xor dword [rbx + 0x108], 0x55d01a58
sub dword [rbx + 0xfc], 0x35936506
sub dword [rbx + 0x30c], 0x6c9f487f
xor dword [rbx + 0x39c], 0x7dde19c4
sub dword [rbx + 0x210], 0x21a97f53
not dword [rbx + 0x2c]
not dword [rbx + 0x2a0]
not dword [rbx + 0x3f0]
sub dword [rbx + 0x128], 0x33383fbf
add dword [rbx + 0xbc], 0x37e34024
add dword [rbx + 0x2f4], 0x68f87ae1
not dword [rbx + 0x2e8]
xor dword [rbx + 0x90], 0x47921ded
not dword [rbx + 0x1ac]
add dword [rbx + 0x114], 0x47381b0d
add dword [rbx + 0x2e4], 0xa571cdc
not dword [rbx + 0x384]
add dword [rbx + 0x280], 0x26d83681
sub dword [rbx + 0xcc], 0x256b528a
add dword [rbx + 0x3ec], 0x14f77ca2
not dword [rbx + 0x28c]
add dword [rbx + 0x31c], 0xd851f94
xor dword [rbx + 0x1a0], 0x620c3f9d
add dword [rbx + 0x144], 0x122901eb
not dword [rbx + 0xa8]
add dword [rbx + 0x370], 0x16d33fba
xor dword [rbx + 0x48], 0x44f42adf
sub dword [rbx + 0x330], 0x4c106868
add dword [rbx + 0x394], 0x6dac76d2
xor dword [rbx + 0x1a8], 0x551611b2
add dword [rbx + 0x1ec], 0x58742b39
not dword [rbx + 0x380]
not dword [rbx + 0x288]
sub dword [rbx + 0x2c4], 0x34a009a4
add dword [rbx + 0x2d8], 0x4f851c91
xor dword [rbx + 0x150], 0x4a8d2218
add dword [rbx + 0x240], 0x5796793e
sub dword [rbx + 0xc0], 0x556c733c
not dword [rbx + 0x7c]
sub dword [rbx + 0x184], 0x4ee45537
add dword [rbx + 0x18], 0x7bc84013
xor dword [rbx + 0x12c], 0x57be58cc
xor dword [rbx + 0x358], 0x41da0785
not dword [rbx + 0x194]
xor dword [rbx + 0x1e0], 0x47826977
not dword [rbx + 0x2b8]
sub dword [rbx + 0x2ac], 0x21e72118
not dword [rbx + 0x14]
xor dword [rbx + 0x21c], 0x383815a9
sub dword [rbx + 0x364], 0x1dc4a0e
not dword [rbx + 0x318]
not dword [rbx + 0x32c]
not dword [rbx + 0xb0]
add dword [rbx + 0x230], 0x5e05182e
sub dword [rbx], 0x333421a
add dword [rbx + 0x78], 0x4eee2726
add dword [rbx + 0x168], 0x52d01348
add dword [rbx + 0x34], 0x17200170
xor dword [rbx + 0x22c], 0x25ec2dc7
xor dword [rbx + 0x1f4], 0x350a6783
not dword [rbx + 0x2ec]
not dword [rbx + 0x104]
not dword [rbx + reloc.SHELL32.dll_IsUserAnAdmin]
sub dword [rbx + 0xe0], 0x3ef947eb
xor dword [rbx + 0x140], 0x138e473d
sub dword [rbx + 0x398], 0x2f771d7
xor dword [rbx + 0x308], 0x24631489
sub dword [rbx + 0x284], 0x4b6f4410
add dword [rbx + 0x224], 0x6dc52b7c
sub dword [rbx + 0x3d4], 0x203240c0
not dword [rbx + 0x3d0]
xor dword [rbx + 0x54], 0x1ddb2a9a
add dword [rbx + 0x40], 0x1ec2370
xor dword [rbx + 0x3c4], 0x4b4a46de
xor dword [rbx + 0x20c], 0x33ed3666
sub dword [rbx + 0x174], 0x6dbe0d11
add dword [rbx + 0x74], 0x1dc1638d
add dword [rbx + 0xd4], 0x39c6e61
not dword [rbx + 0x10]
not dword [rbx + 0x2a4]
not dword [rbx + 0x390]
not dword [rbx + 0x178]
xor dword [rbx + 0x5c], 0x532c67f1
xor dword [rbx + 0x26c], 0x5a7c36d1
not dword [rbx + 0xdc]
sub dword [rbx + 0x50], 0x39f96cd6
add dword [rbx + 0xa0], 0x147c277f
not dword [rbx + 0x3c8]
sub dword [rbx + 0x260], 0x4f20979
not dword [rbx + 0x218]
sub dword [rbx + 0x3e0], 0x458f1a8f
xor dword [rbx + 0x3fc], 0x770a53cd
not dword [rbx + 0x4c]
sub dword [rbx + 0x2f8], 0x73812b8d
xor dword [rbx + 0x320], 0x2cf21a66
sub dword [rbx + 0x8c], 0x51745804
add dword [rbx + 0x1cc], 0x11dc07a4
not dword [rbx + 0x388]
xor dword [rbx + 0x294], 0x163c0515
sub dword [rbx + 0x244], 0x2fd86ef9
xor dword [rbx + 0x3d8], 0x1eea2f51
xor dword [rbx + 0x2b0], 0x6dd570d2
xor dword [rbx + 0x80], 0x677f646d
xor dword [rbx + 0x378], 0x4f7b5865
add dword [rbx + 0x14c], 0x55797ec5
sub dword [rbx + 0x1c], 0x26933281
not dword [rbx + 0x154]
not dword [rbx + 0x3bc]
xor dword [rbx + 0x304], 0x5c47236c
add dword [rbx + 0xb4], 0x4e90624c
xor dword [rbx + 0x2fc], 0x66e94833
sub dword [rbx + 0x1d8], 0x542944cf
not dword [rbx + 0xb8]
add dword [rbx + 0x268], 0x7f054532
sub dword [rbx + 0x24], 0x231176e9
not dword [rbx + 0x148]
not dword [rbx + 0x1c4]
not dword [rbx + 0xc4]
add dword [rbx + 0xf0], 0x3cd27034
not dword [rbx + 0x200]
xor dword [rbx + 0x18c], 0x8963b78
add dword [rbx + 0x300], 0x73106cf0
sub dword [rbx + 0x368], 0x44df2ae5
sub dword [rbx + 0x248], 0x7ec8317a
sub dword [rbx + 0x180], 0x3a010d05
not dword [rbx + 0x3dc]
sub dword [rbx + 0x20], 0x2cb650ba
sub dword [rbx + 0xec], 0x3a0721be
add dword [rbx + 0x124], 0x4ffc5682
sub dword [rbx + 0x3b4], 0x7d164de6
add dword [rbx + 0x3a4], 0x455b149b
not dword [rbx + 0x1f8]
not dword [rbx + 0x160]
xor dword [rbx + 0x100], 0x17710549
sub dword [rbx + 0x2dc], 0x5cda5119
sub dword [rbx + 0x2cc], 0x403132c
add dword [rbx + 0x3b8], 0x36f860ce
add dword [rbx + 0x298], 0x749f7728
xor dword [rbx + 0x94], 0x5a3631a7
add dword [rbx + 0x64], 0x36ed6f67
sub dword [rbx + 0x3f4], 0x4ba029ab
sub dword [rbx + 0x258], 0x41327b5c
xor dword [rbx + 0x340], 0x45c43c33
not dword [rbx + 4]
sub dword [rbx + 0x198], 0x52df6f47
not dword [rbx + 0x2d4]
add dword [rbx + 0x220], 0x6bc55fa7
xor dword [rbx + 0x15c], 0x6699193d
not dword [rbx + 0x3b0]
not dword [rbx + 0x23c]
sub dword [rbx + 0x190], 0x45cc4d0d
add dword [rbx + 0x3ac], 0x5319343c
add dword [rbx + 0x214], 0x50e36b8c
add dword [rbx + 0xf8], 0x6b8869b3
not dword [rbx + 0x10c]
sub dword [rbx + 0x60], 0x2bf073b2
add dword [rbx + 0x310], 0x30362f82
sub dword [rbx + 0x3c0], 0x3f957864
not dword [rbx + 0x164]
not dword [rbx + 0x130]
add dword [rbx + 0x334], 0xead6988
sub dword [rbx + 0x88], 0x32d7a80
xor dword [rbx + 0x9c], 0x77da4fe1
sub dword [rbx + 0x1a4], 0xcd948f7
add dword [rbx + 0x278], 0x16d6475a
sub dword [rbx + 0xd0], 0x389e0a23
not dword [rbx + 0xf4]
xor dword [rbx + 0x37c], 0xc875b1c
xor dword [rbx + 0x2f0], 0x97639fa
sub dword [rbx + 0x11c], 0x677d1d38
add dword [rbx + 0x29c], 0x768061b3
add dword [rbx + 0x1e8], 0x1fd21d10
not dword [rbx + 0xd8]
not dword [rbx + 0x228]
sub dword [rbx + 0x35c], 0x1f351993
sub dword [rbx + 0x1b0], 0x502702a3
add dword [rbx + 0x3f8], 0x527e35fa
xor dword [rbx + 0x338], 0x5cb06dda
add dword [rbx + 0x234], 0x5b126df9
xor dword [rbx + 0x314], 0x3861126f
not dword [rbx + 0x27c]
add dword [rbx + 0x36c], 0x61a61c8e
xor dword [rbx + 0x13c], 0x3bad68f3
not dword [rbx + 0xe8]
add dword [rbx + 0x290], 0x43f915dc
not dword [rbx + 0x3e8]
xor dword [rbx + 0x1d0], 0x393b118d
sub dword [rbx + 0x3e4], 0x3fe50bd4
sub dword [rbx + 0x374], 0x7449143c
add dword [rbx + 0x1d4], 0x7fc0034c
add dword [rbx + 0x17c], 0x5b876f7c
sub dword [rbx + 0x1c0], 0x754901cb
sub dword [rbx + 0x208], 0x3ddb53b0
not dword [rbx + 0x19c]
add dword [rbx + 0x2c8], 0x1d4554d4
xor dword [rbx + 0x68], 0x367f1868
sub dword [rbx + 0x16c], 0x5a0071db
add dword [rbx + 0x1dc], 0x2d237767
not dword [rbx + 0x250]
sub dword [rbx + 0xa4], 0x62575065
xor dword [rbx + 0x3cc], 0x6c9e24e2
sub dword [rbx + 0x38c], 0x6a2a4f9c
not dword [rbx + 0x274]
xor dword [rbx + 0x158], 0x9b22dd1
sub dword [rbx + 0x1f0], 0xeb709bb
add dword [rbx + 0x28], 0x7cda54a3
xor dword [rbx + 0x44], 0x36b16476
sub dword [rbx + 0x2bc], 0x3ac9494c
add dword [rbx + 0x33c], 0x190d719e
not dword [rbx + 0x25c]
not dword [rbx + 0x270]
sub dword [rbx + 0x264], 0xe7d5286
not dword [rbx + 0x1fc]
not dword [rbx + 0x98]
add dword [rbx + 0x70], 0x598509d9
not dword [rbx + 0x138]
xor dword [rbx + 0x170], 0x865278c
not dword [rbx + 0x2d0]
sub dword [rbx + 0x34c], 0x15f661c5
sub dword [rbx + 0xc], 0x4d79578d
sub dword [rbx + 0x84], 0x5e405d66
add dword [rbx + 0xc8], 0x5fd47318
sub dword [rbx + 0x2e0], 0x29c9016d
add dword [rbx + 0x1b8], 0x3b022dc8
not dword [rbx + 0x350]
xor dword [rbx + 0x3a8], 0x1930400
not dword [rbx + 0x134]
sub dword [rbx + 8], 0x7a8163c1
sub dword [rbx + 0x2c0], 0x3b6c77ee
not dword [rbx + 0x254]
not dword [rbx + 0x38]
sub dword [rbx + 0x6c], 0x677175eb
sub dword [rbx + 0x188], 0x2aa225e0
sub dword [rbx + 0x30], 0x118c4a2f
sub dword [rbx + 0xac], 0x3b592533
sub dword [rbx + 0x204], 0x7c4022e7
add dword [rbx + 0x324], 0x732e2396
not dword [rbx + 0x328]
not dword [rbx + 0x1c8]
xor dword [rbx + 0x110], 0x10ed1433
not dword [rbx + 0x3c]
add rdx, 0x400
add rbx, 0x400
cmp rdx, 0x8c000
je 0x1402058d4
jmp 0x140205035
pop rcx
call fcn.140204106
mov rsp, rbp
pop rbp
pop r15
pop r14
pop r13
pop r12
pop r11
pop r10
pop r9
pop r8
pop rdi
pop rsi
pop rbp
pop rbx
pop rdx
pop rcx
pop rax