Function at 0x1401e6000
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rax
push rcx
push rdx
push rbx
push rbp
push rsi
push rdi
push r8
push r9
push r10
push r11
push r12
push r13
push r14
push r15
push rbp
mov rbp, rsp
sub rsp, 0x20
and rsp, 0xfffffffffffffff0
lea rbx, [0x140159800]
movabs rdx, 0
push rbx
not dword [rbx + 0x39c]
not dword [rbx + 0x30]
xor dword [rbx + 4], 0x48e81180
sub dword [rbx + 0x308], 0x555304d8
add dword [rbx + 0x64], 0xf180d0f
add dword [rbx + 0x15c], 0x7ed02d7e
add dword [rbx + 0x1d8], 0x414c5e39
add dword [rbx + 0x200], 0x60f47a24
xor dword [rbx + 0x32c], 0x4fe9780e
xor dword [rbx + 0xfc], 0x11565c1e
add dword [rbx + 0x2a4], 0x57a5c37
not dword [rbx + 0x250]
add dword [rbx + 0x2fc], 0x51f0787
sub dword [rbx + 0x19c], 0x5eb91111
sub dword [rbx + 0x344], 0x533440cb
add dword [rbx + 0x244], 0x4420aad
sub dword [rbx + 0x23c], 0xcd40118
not dword [rbx + 0x264]
sub dword [rbx + 0xe0], 0x61926574
xor dword [rbx + 0x1f4], 0xb0759f
sub dword [rbx + 0x1ac], 0x56fc3204
sub dword [rbx + 0x378], 0x18050431
sub dword [rbx + 0x13c], 0x52857146
add dword [rbx + 0x118], 0x6a057dbf
not dword [rbx + 0x218]
xor dword [rbx + 0x168], 0x42930d04
sub dword [rbx + 0x10], 0x2a2c547c
not dword [rbx + 0x288]
sub dword [rbx + 0x2b0], 0x5e175821
add dword [rbx + 0x1fc], 0xea21530
xor dword [rbx + 0x108], 0x42a83d81
not dword [rbx + 0x1e4]
add dword [rbx + 0x27c], 0x265f08a7
not dword [rbx + 0x74]
xor dword [rbx + 0x5c], 0x5d9710c5
not dword [rbx + 0x204]
sub dword [rbx + 0x22c], 0x686a6c92
not dword [rbx + 0x224]
sub dword [rbx + 0x38c], 0x52317a03
add dword [rbx + 0x390], 0x252d1fe6
xor dword [rbx + 0x208], 0x13e21660
not dword [rbx + 0x2d4]
sub dword [rbx + 0x1a8], 0x693441f5
xor dword [rbx + 0xd0], 0x331a4e20
xor dword [rbx + 0xc4], 0x538e0f0e
sub dword [rbx + 0xa8], 0x2ef202e4
xor dword [rbx + 0x374], 0x63590739
add dword [rbx + 0x2bc], 0x609b18c0
sub dword [rbx + 0xd8], 0x64926715
sub dword [rbx + 0x78], 0x26bb1d2e
add dword [rbx + 0xc8], 0x2d0006f5
xor dword [rbx + 0x2d8], 0x27194802
not dword [rbx + 0x16c]
not dword [rbx + 0x30c]
not dword [rbx + 0x24c]
xor dword [rbx + 0x210], 0x223808f8
add dword [rbx + 0x164], 0xd731895
xor dword [rbx + 0x178], 0x63b34cc8
not dword [rbx + 0x298]
sub dword [rbx + 0x170], 0x246d104a
add dword [rbx + 0x348], 0x110b3d3a
add dword [rbx + 0xa0], 0x55154dd4
xor dword [rbx + 0x290], 0x70943283
add dword [rbx + 0xc0], 0x2e9e36fa
not dword [rbx + 0x7c]
add dword [rbx + 0x3c8], 0x2c4584b
sub dword [rbx + 0x3cc], 0x78a16a9c
add dword [rbx + 0x58], 0x724068f4
sub dword [rbx + 0x1cc], 0x11fa1dc7
sub dword [rbx + 0x280], 0x4782401c
add dword [rbx + 0x1dc], 0x503a498b
not dword [rbx + 0x1e8]
not dword [rbx + 0x1c0]
not dword [rbx + 0x3d4]
not dword [rbx + 0x88]
add dword [rbx + 0xac], 0x60ab3b4e
not dword [rbx + 0x110]
not dword [rbx + 0x304]
add dword [rbx + 0x48], 0x7c9a1948
sub dword [rbx + 0x2f4], 0x5b2b6ab4
sub dword [rbx + 0x1f0], 0x156a23b0
not dword [rbx + 0x3a0]
sub dword [rbx + 0x31c], 0x717508ee
xor dword [rbx + 0x238], 0x33ba5145
not dword [rbx + 0x25c]
xor dword [rbx + 0x300], 0x63616bba
sub dword [rbx + 0x354], 0x3f2254b7
xor dword [rbx + 0x80], 0x314a3365
add dword [rbx + 0x1b0], 0x6777740b
add dword [rbx + 0x380], 0x122b2874
sub dword [rbx + 0x120], 0x2b0f6f43
not dword [rbx + 0x260]
not dword [rbx + 0x90]
xor dword [rbx + 0x28c], 0xfe8042a
xor dword [rbx + 0x2e8], 0x4fc450da
xor dword [rbx + 0x1a4], 0x64976aca
xor dword [rbx + 0x278], 0x3b3733de
add dword [rbx + 0x3d0], 0x6e167320
xor dword [rbx + 0x2d0], 0x37279ac
sub dword [rbx + 0x284], 0x2e015b4b
sub dword [rbx + 0x2c4], 0x2b42233
not dword [rbx + 0xbc]
sub dword [rbx + 0x35c], 0xc4c3d97
xor dword [rbx + 0x320], 0x6b8e36f8
not dword [rbx + 0xc]
add dword [rbx + 0x4c], 0x35706bb7
xor dword [rbx + 0x134], 0x5b67d5b
add dword [rbx + 0x38], 0x16d83836
add dword [rbx + 0x148], 0x135816bb
not dword [rbx + 0x398]
sub dword [rbx + 0x160], 0x468162f1
add dword [rbx + 0x2a0], 0x69c23bcf
sub dword [rbx + 0x3e0], 0x2efa6db5
not dword [rbx + 0x184]
add dword [rbx + 0x190], 0x3fb17190
add dword [rbx + 0x11c], 0x68094850
not dword [rbx + 0x36c]
xor dword [rbx + 0x314], 0x5e1d7744
sub dword [rbx + 8], 0x42e6047b
not dword [rbx + 0x180]
not dword [rbx + 0x158]
sub dword [rbx + 0x29c], 0xab74448
add dword [rbx + 0x368], 0x3fda7bbc
add dword [rbx + 0xa4], 0x53b23308
not dword [rbx + 0x1e0]
xor dword [rbx + 0x188], 0x72aa001a
sub dword [rbx + 0x14], 0x21b37db7
not dword [rbx + 0x50]
not dword [rbx + 0x60]
add dword [rbx + 0x220], 0x4ce2bc9
add dword [rbx + 0x6c], 0x7d334b04
add dword [rbx + 0x198], 0x4ed7332a
xor dword [rbx + 0x364], 0x140551
add dword [rbx + 0xf8], 0x70120ea7
not dword [rbx + 0x228]
not dword [rbx + 0x68]
not dword [rbx + 0x3b8]
xor dword [rbx + 0x330], 0x33781945
add dword [rbx + 0x20], 0x59922da8
sub dword [rbx + 0x17c], 0x4324b0a
xor dword [rbx + 0x3d8], 0x38b96e2f
add dword [rbx + 0x3e8], 0x752f4b9e
add dword [rbx + 0x2b4], 0x4ebf3aa0
xor dword [rbx + 0x3a4], 0x561b5210
sub dword [rbx], 0x816214e
add dword [rbx + 0x94], 0x76ec47fd
add dword [rbx + 0x138], 0x145c0a37
xor dword [rbx + 0x40], 0x62635e31
sub dword [rbx + 0xb4], 0x109b5a05
sub dword [rbx + 0x1c8], 0x3f7a6354
xor dword [rbx + 0x1c4], 0x28e669df
sub dword [rbx + 0x3f0], 0x29a978af
not dword [rbx + 0x294]
xor dword [rbx + 0x2cc], 0x33103171
sub dword [rbx + 0x12c], 0x76cf7620
add dword [rbx + 0x2ac], 0x16517763
add dword [rbx + 0x3c4], 0x48b96acb
not dword [rbx + 0x104]
sub dword [rbx + 0x2c8], 0x2c7b71db
add dword [rbx + 0xf0], 0xf4721b1
xor dword [rbx + 0x310], 0x3ade5e2b
xor dword [rbx + 0xcc], 0x23a12ade
xor dword [rbx + 0xb8], 0x628b4231
not dword [rbx + 0x9c]
sub dword [rbx + 0x98], 0x7c7438a9
sub dword [rbx + 0x3c], 0x3517242a
sub dword [rbx + 0x130], 0x1009232b
xor dword [rbx + 0x2e0], 0x6edb3a10
xor dword [rbx + 0xe4], 0x2c8068df
xor dword [rbx + 0x274], 0x72705cc8
xor dword [rbx + 0xdc], 0x1e2c1c44
sub dword [rbx + 0x2dc], 0x5c401a80
add dword [rbx + 0x2f8], 0x79c92944
add dword [rbx + 0x3f4], 0x17714e30
not dword [rbx + 0x360]
xor dword [rbx + 0x24], 0x64d350eb
xor dword [rbx + 0x34], 0x8571b7c
xor dword [rbx + 0x1d4], 0x4b9e248b
add dword [rbx + 0x1ec], 0x11ef0554
not dword [rbx + 0x2f0]
xor dword [rbx + 0x128], 0x25994e8b
add dword [rbx + 0x114], 0x25ff0abc
not dword [rbx + 0x248]
xor dword [rbx + 0x1d0], 0x1ab34297
not dword [rbx + 0x174]
add dword [rbx + 0x33c], 0x11c2445f
not dword [rbx + 0x338]
xor dword [rbx + 0x124], 0x65a063df
sub dword [rbx + 0xd4], 0x657b4238
sub dword [rbx + 0x1a0], 0xe1a766c
xor dword [rbx + 0x3b0], 0x35043f1c
not dword [rbx + 0x324]
not dword [rbx + reloc.SHELL32.dll_IsUserAnAdmin]
add dword [rbx + 0x3a8], 0xe076ba9
xor dword [rbx + 0x34c], 0x2fad348a
add dword [rbx + 0xb0], 0x78655b1c
xor dword [rbx + 0x258], 0x46479ad
add dword [rbx + 0x370], 0x3a5f6c63
sub dword [rbx + 0x37c], 0x289b07e9
sub dword [rbx + 0x18c], 0x6fac74a2
sub dword [rbx + 0x44], 0x2fa2785b
sub dword [rbx + 0x3e4], 0x264a3cb1
sub dword [rbx + 0x84], 0x4f9a0cbc
xor dword [rbx + 0x70], 0x62e008ee
not dword [rbx + 0x1bc]
add dword [rbx + 0x3ac], 0x86a682c
xor dword [rbx + 0x100], 0x61716540
not dword [rbx + 0x350]
xor dword [rbx + 0x3fc], 0x528c13e4
sub dword [rbx + 0x14c], 0x71124c07
xor dword [rbx + 0x2b8], 0x7f818bc
add dword [rbx + 0x1f8], 0xf877c8
not dword [rbx + 0x2c]
add dword [rbx + 0x28], 0x32660549
xor dword [rbx + 0x3f8], 0x654574dd
xor dword [rbx + 0x328], 0x4a2d07fe
sub dword [rbx + 0x1b8], 0x71a36e80
add dword [rbx + 0x3bc], 0x1040a
add dword [rbx + 0x194], 0x70617aca
sub dword [rbx + 0x240], 0x3922613b
not dword [rbx + 0x388]
not dword [rbx + 0x214]
add dword [rbx + 0x2ec], 0x518b2c5c
not dword [rbx + 0x358]
add dword [rbx + 0x10c], 0x73475641
xor dword [rbx + 0x234], 0x44506dd1
add dword [rbx + 0x254], 0x487b3166
not dword [rbx + 0x384]
not dword [rbx + 0x3dc]
add dword [rbx + 0x3b4], 0xa3802a1
sub dword [rbx + 0x8c], 0xfbc16ac
xor dword [rbx + 0xf4], 0x543f0031
xor dword [rbx + 0x54], 0x31441b10
sub dword [rbx + 0x150], 0x524e4183
add dword [rbx + 0x2e4], 0x11437090
add dword [rbx + 0x318], 0x4842359a
sub dword [rbx + 0x140], 0x4e1610c5
not dword [rbx + 0x2c0]
not dword [rbx + 0xe8]
sub dword [rbx + 0x334], 0x47e46b9e
sub dword [rbx + 0x394], 0x74723d01
xor dword [rbx + 0x3ec], 0x685c07fd
not dword [rbx + 0x154]
add dword [rbx + 0x21c], 0x580b6eb1
add dword [rbx + 0x268], 0x28177f40
not dword [rbx + 0x20c]
xor dword [rbx + 0xec], 0x2fc76626
add dword [rbx + 0x26c], 0xff30491
xor dword [rbx + 0x340], 0x50486b54
add dword [rbx + 0x270], 0x69574edb
not dword [rbx + 0x1c]
add dword [rbx + 0x18], 0x4dcc56b0
sub dword [rbx + 0x1b4], 0x32203757
xor dword [rbx + 0x144], 0x65a72372
add dword [rbx + 0x3c0], 0x61e06429
not dword [rbx + 0x230]
add rdx, 0x400
add rbx, 0x400
cmp rdx, 0x8c000
je 0x1401e68f4
jmp 0x1401e6035
pop rcx
call fcn.1401e5106
mov rsp, rbp
pop rbp
pop r15
pop r14
pop r13
pop r12
pop r11
pop r10
pop r9
pop r8
pop rdi
pop rsi
pop rbp
pop rbx
pop rdx
pop rcx
pop rax