Function at 0x140245000
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rax
push rcx
push rdx
push rbx
push rbp
push rsi
push rdi
push r8
push r9
push r10
push r11
push r12
push r13
push r14
push r15
push rbp
mov rbp, rsp
sub rsp, 0x20
and rsp, 0xfffffffffffffff0
lea rbx, [0x1401b8a00]
movabs rdx, 0
push rbx
sub dword [rbx + 0x370], 0x7d22463b
sub dword [rbx + 0x3c], 0x40f27677
xor dword [rbx + 0x130], 0x62ed2891
sub dword [rbx + 0x148], 0x4bb6249d
not dword [rbx + 0x398]
sub dword [rbx + 0xc0], 0x34ed69a4
xor dword [rbx + 0x338], 0x37910b44
add dword [rbx + 0x1cc], 0x3e9166e
add dword [rbx + 0x3c8], 0x23650a6e
add dword [rbx + 0x2ec], 0x62f71400
xor dword [rbx + 0x164], 0x157922d6
xor dword [rbx + 0x26c], 0x3bce090d
sub dword [rbx + 0x27c], 0x2db236c3
add dword [rbx + 0x268], 0x39052f1
not dword [rbx + 0x2dc]
add dword [rbx + 0x1b8], 0x33202189
add dword [rbx + 0x84], 0x2da80871
sub dword [rbx + 0x248], 0x59176e75
sub dword [rbx + 0x340], 0x1fdc7453
sub dword [rbx + 0x3c4], 0x2e075c5c
add dword [rbx + 0x204], 0x7b0332d5
xor dword [rbx + 0x244], 0x5c751154
sub dword [rbx + 0x34], 0x7b79003a
not dword [rbx + 0x31c]
sub dword [rbx + 0x29c], 0x5d64acb
xor dword [rbx + 0x14c], 0x40764ada
sub dword [rbx + 0x2d8], 0x1658272d
add dword [rbx + 0x3dc], 0x4bf2598f
add dword [rbx + 0x64], 0x71a34e4a
xor dword [rbx + 0x3e0], 0x1a88735d
add dword [rbx + 0x35c], 0x1b3f3bc2
add dword [rbx + 0x294], 0x643ff7
sub dword [rbx + 0x58], 0x6b6b0b4e
add dword [rbx + 0x28c], 0x34e027fd
not dword [rbx + 0xcc]
add dword [rbx + 0x214], 0x45c55d90
xor dword [rbx + 0x1b0], 0x1fe51ba6
add dword [rbx + 0x2c0], 0x1538315f
sub dword [rbx + 0x7c], 0x3980371c
xor dword [rbx + 0x1f8], 0x6d3a4460
add dword [rbx + 0x2b8], 0x33cb2842
add dword [rbx + 0x200], 0x3f0c7fc1
sub dword [rbx + 0x358], 0x7f6f1519
sub dword [rbx + 0x94], 0x3bbd3d92
not dword [rbx + 0xa8]
add dword [rbx + 0x48], 0x56b932fa
add dword [rbx + 0xa0], 0x3741e9f
add dword [rbx + 0x44], 0x7f453028
sub dword [rbx + 0x1f0], 0x66b55932
xor dword [rbx + 0x3f4], 0x6326245b
xor dword [rbx + 0xb8], 0x18ac5e68
add dword [rbx + 0x2e0], 0x47436c54
sub dword [rbx + 0x168], 0x3de235d4
sub dword [rbx + 0x3e8], 0x46e9564c
not dword [rbx + 0x344]
add dword [rbx + 0x210], 0x30562bac
not dword [rbx + 0x2a0]
xor dword [rbx + 0x228], 0x6e9680b
add dword [rbx + 0x3cc], 0x21696e5b
not dword [rbx + 0x70]
add dword [rbx + 0xd8], 0x23d057b6
sub dword [rbx + 0xec], 0x30b64c93
add dword [rbx + 0x170], 0x1f1351f6
xor dword [rbx + 0x2d4], 0x15e51458
add dword [rbx + 0x24c], 0x6c360b7b
sub dword [rbx + 0x128], 0x58b6193
add dword [rbx + 0x54], 0x2a635c95
add dword [rbx + 0x34c], 0x5a3e6259
xor dword [rbx + 0xac], 0x50163e90
sub dword [rbx + 0x25c], 0x3f833630
sub dword [rbx + 0x39c], 0x49c924b6
not dword [rbx + 0x1dc]
add dword [rbx + 0x260], 0x20ad0f96
add dword [rbx + 0x1ec], 0x2d86538f
not dword [rbx + 0x3c0]
xor dword [rbx + 0x1c], 0x35e95bfa
sub dword [rbx + 0x140], 0x420c3e19
not dword [rbx + 0x36c]
add dword [rbx + 0x100], 0xb4e6080
sub dword [rbx + 0x3d0], 0x32181eb7
sub dword [rbx + 0x2fc], 0x4c411fe1
not dword [rbx + 0x1bc]
add dword [rbx + 0x1d4], 0x26a83033
xor dword [rbx + 0xc4], 0x6be11a63
add dword [rbx + 0x174], 0x2d93606d
add dword [rbx + 0x3d4], 0x1abf3048
add dword [rbx + 0x38], 0x77ab2ee5
add dword [rbx + 0x348], 0x519a4a40
xor dword [rbx + 0x368], 0x613a3dbb
add dword [rbx + 0x98], 0x7ab5424d
add dword [rbx + 0x238], 0x34427297
add dword [rbx + 0x2a4], 0x139b652c
xor dword [rbx + 0x18c], 0x2d98481f
not dword [rbx + 0x3f0]
xor dword [rbx + 0x22c], 0x70e225d9
xor dword [rbx + 0x258], 0x7b140b65
xor dword [rbx + 0x13c], 0x58c42478
not dword [rbx + 0x110]
not dword [rbx + 0xe0]
add dword [rbx + 0x124], 0x61675000
xor dword [rbx + 0x234], 0x434470fd
not dword [rbx + 0x19c]
not dword [rbx + 0x324]
xor dword [rbx + 0x250], 0x72bc28f9
add dword [rbx], 0x165619fe
xor dword [rbx + 0x2b0], 0x731c0a4e
add dword [rbx + 0x2f4], 0xbec1a00
sub dword [rbx + 0x104], 0x513d4239
not dword [rbx + 0x3ec]
add dword [rbx + 0x378], 0x1a176017
add dword [rbx + 0x154], 0x7cba2131
sub dword [rbx + 0x274], 0x7a946a5b
add dword [rbx + 0x68], 0x556f24a2
not dword [rbx + 0x2f0]
sub dword [rbx + 8], 0x134f75ad
sub dword [rbx + 0x290], 0x7d680b5e
sub dword [rbx + 0x218], 0xdb65e9d
sub dword [rbx + 0x88], 0x96e73de
sub dword [rbx + 0x14], 0x451c58d6
not dword [rbx + 0x3a8]
xor dword [rbx + 0x188], 0x5e4245a5
not dword [rbx + 0x184]
sub dword [rbx + 0x50], 0x46fb3d5a
not dword [rbx + 0x30c]
xor dword [rbx + 0x37c], 0x7aa62578
not dword [rbx + 0x11c]
xor dword [rbx + 0xb0], 0x359767b0
sub dword [rbx + 0x32c], 0x6f2033c5
sub dword [rbx + 0x1f4], 0x2ac94748
xor dword [rbx + 0x380], 0x757f33fa
add dword [rbx + 0x6c], 0x56be5ee5
sub dword [rbx + 0x310], 0x479e5b6f
add dword [rbx + 0x180], 0x6c95c8d
sub dword [rbx + 0x178], 0x7d59039c
xor dword [rbx + 0x230], 0x62176468
xor dword [rbx + 0xc8], 0x52d749e1
xor dword [rbx + 0x158], 0x56a86762
sub dword [rbx + 0x3a4], 0x45b31962
xor dword [rbx + 0x21c], 0x6aed7a1b
xor dword [rbx + 0x280], 0x7a312814
sub dword [rbx + 0x2ac], 0x5fe37b4e
xor dword [rbx + 0x17c], 0x133b138f
add dword [rbx + 0xe4], 0x54275e7d
not dword [rbx + 0x1d8]
xor dword [rbx + 0x74], 0x23094a02
xor dword [rbx + 0xd0], 0x647b12f2
xor dword [rbx + 0x1d0], 0x9c44e49
xor dword [rbx + 0x40], 0x70f472e2
add dword [rbx + 0x1c4], 0x43000821
xor dword [rbx + 0xd4], 0xd4a1919
not dword [rbx + 0x304]
xor dword [rbx + 0xc], 0x18515c3a
add dword [rbx + 0x3a0], 0xc146e34
not dword [rbx + 0x278]
not dword [rbx + 0x30]
sub dword [rbx + 0xdc], 0x43ce54fd
xor dword [rbx + 0x198], 0x1a1b6112
xor dword [rbx + 0x2c8], 0x22480c00
not dword [rbx + 0x3f8]
not dword [rbx + 0x390]
sub dword [rbx + 0xf8], 0x549a49e3
add dword [rbx + 0x320], 0x7955370e
xor dword [rbx + 0x300], 0x1250577f
xor dword [rbx + 0x3bc], 0x6a335178
add dword [rbx + 0x240], 0x6c1943ff
not dword [rbx + 0x9c]
xor dword [rbx + 0x270], 0x1dde0d57
add dword [rbx + 0x10], 0x5f9a3b36
sub dword [rbx + 0x28], 0x74b92096
xor dword [rbx + 0x2b4], 0x2fb70d0e
not dword [rbx + 0x328]
add dword [rbx + 0x38c], 0x19e02a49
xor dword [rbx + 0xb4], 0x2f757ac7
not dword [rbx + 0x33c]
xor dword [rbx + 0x394], 0x25d0a72
xor dword [rbx + 0x224], 0x1b374b23
xor dword [rbx + 0x16c], 0x5c66476e
xor dword [rbx + 0x1e4], 0x2412412d
xor dword [rbx + 0x134], 0xe1b4432
xor dword [rbx + 4], 0x6fa9288c
xor dword [rbx + 0x118], 0x1eb86ce0
xor dword [rbx + 0xf4], 0x37fb5973
not dword [rbx + 0x114]
not dword [rbx + 0x1fc]
sub dword [rbx + 0x90], 0x660b0a1e
xor dword [rbx + 0x1c0], 0x4068583a
sub dword [rbx + 0x3d8], 0x4d3242e1
not dword [rbx + 0x308]
not dword [rbx + 0x2d0]
not dword [rbx + 0x2e4]
add dword [rbx + 0x3fc], 0x11a7a1f
not dword [rbx + 0x108]
not dword [rbx + 0x298]
not dword [rbx + 0x208]
add dword [rbx + 0x3b4], 0x3131443e
sub dword [rbx + 0x8c], 0x2e4851ed
sub dword [rbx + 0xa4], 0x7b0a3b35
not dword [rbx + 0x1ac]
xor dword [rbx + 0x334], 0x72b3695c
sub dword [rbx + 0x364], 0x4c353e94
xor dword [rbx + 0x4c], 0x113e37b6
add dword [rbx + 0x20c], 0x7c6166cc
add dword [rbx + 0x3b8], 0x796d2854
not dword [rbx + 0xfc]
xor dword [rbx + 0x1a8], 0x5cfc7a83
xor dword [rbx + 0x284], 0x14252359
not dword [rbx + 0x1c8]
sub dword [rbx + 0x194], 0x4e1a0497
add dword [rbx + 0x318], 0x64f3489b
sub dword [rbx + 0x314], 0x45ef0925
sub dword [rbx + 0x388], 0x7e374de
add dword [rbx + 0x264], 0x526a135a
sub dword [rbx + 0x190], 0x7d139e1
add dword [rbx + 0x2c4], 0x5232bdf
xor dword [rbx + 0x2bc], 0x735a71a4
sub dword [rbx + 0x18], 0x413965a2
add dword [rbx + 0x1b4], 0x2c634ad1
not dword [rbx + 0x1e0]
sub dword [rbx + 0x2c], 0x20d52030
add dword [rbx + 0x12c], 0x40b35f92
xor dword [rbx + 0x160], 0x3c2462cf
sub dword [rbx + 0x1e8], 0x6ce62049
add dword [rbx + 0xe8], 0x92d6d59
add dword [rbx + 0x360], 0x2b847d44
add dword [rbx + 0x60], 0x25273f2e
xor dword [rbx + 0x5c], 0x20990286
sub dword [rbx + 0x254], 0x5d0f7578
xor dword [rbx + 0x78], 0x6f25787b
not dword [rbx + 0x3b0]
xor dword [rbx + 0x288], 0x5229580f
sub dword [rbx + 0x150], 0x388b15c4
not dword [rbx + 0x2e8]
add dword [rbx + 0x384], 0x6c3f0b04
sub dword [rbx + 0x15c], 0x648c4206
add dword [rbx + 0x3e4], 0x30994f53
not dword [rbx + 0xbc]
xor dword [rbx + 0x80], 0x1a8551a4
xor dword [rbx + 0x1a4], 0x614e155d
not dword [rbx + 0x24]
add dword [rbx + 0x120], 0x448f0a91
not dword [rbx + 0xf0]
add dword [rbx + 0x138], 0x5e8b3062
add dword [rbx + 0x354], 0x6b22242a
sub dword [rbx + 0x2f8], 0x35c129e5
sub dword [rbx + 0x3ac], 0x20521955
not dword [rbx + reloc.SHELL32.dll_IsUserAnAdmin]
add dword [rbx + 0x1a0], 0x13010ad0
xor dword [rbx + 0x220], 0x35e35255
sub dword [rbx + 0x144], 0xb4c7f6e
not dword [rbx + 0x350]
xor dword [rbx + 0x374], 0x71ca1a8d
xor dword [rbx + 0x10c], 0x2fcd5edc
xor dword [rbx + 0x23c], 0x3ee22a09
add dword [rbx + 0x20], 0x1c983804
not dword [rbx + 0x330]
not dword [rbx + 0x2cc]
add rdx, 0x400
add rbx, 0x400
cmp rdx, 0x8c000
je 0x14024591c
jmp 0x140245035
pop rcx
call fcn.140244306
mov rsp, rbp
pop rbp
pop r15
pop r14
pop r13
pop r12
pop r11
pop r10
pop r9
pop r8
pop rdi
pop rsi
pop rbp
pop rbx
pop rdx
pop rcx
pop rax