Function at 0x140590000
Capabilities:
Encode data using xor

Disassembly:
push rax
push rcx
push rdx
push rbx
push rbp
push rsi
push rdi
push r8
push r9
push r10
push r11
push r12
push r13
push r14
push r15
push rbp
mov rbp, rsp
sub rsp, 0x20
and rsp, 0xfffffffffffffff0
lea rcx, [0x140503c00]
push 0
pop rsi
push rcx
add dword [rcx + 0x210], 0xd4a148b
sub dword [rcx + 0x120], 0x381512a9
not dword [rcx + 0x20]
add dword [rcx + 0x34], 0x41bd7bc7
sub dword [rcx + 0x288], 0x52c07560
sub dword [rcx + 0x140], 0x37f92970
add dword [rcx + 0x1a4], 0x370118d5
xor dword [rcx + 0x3d4], 0x758d157e
xor dword [rcx + 0x2bc], 0xa711932
add dword [rcx + 0x3bc], 0x4b896183
not dword [rcx + 0x10]
sub dword [rcx + 0x244], 0xeb6130c
add dword [rcx + 0x104], 0x12c218b3
xor dword [rcx + 0x78], 0xf8c13fe
not dword [rcx + 0x334]
not dword [rcx + 0x2ec]
sub dword [rcx + 0x1e0], 0x1e2b7ce7
xor dword [rcx + 0x68], 0x5199598e
sub dword [rcx + 0x354], 0x2dbc7289
not dword [rcx + 0x248]
xor dword [rcx + 0xcc], 0x2e734524
sub dword [rcx + 0x2dc], 0x7fe72e2e
sub dword [rcx + 0x330], 0xc069be
add dword [rcx + 0x194], 0x281f6ce0
add dword [rcx + 0x164], 0x17443ede
add dword [rcx + 0x3c8], 0x74507527
not dword [rcx + 0xc]
add dword [rcx + 0x214], 0x3d1640a9
sub dword [rcx + 0xe0], 0x572a7240
sub dword [rcx + 0x26c], 0x2d180307
add dword [rcx + 0x148], 0x5e8a247f
add dword [rcx + 0x118], 0x743d7c25
not dword [rcx + 0x1a8]
sub dword [rcx + 0x340], 0x35390cea
not dword [rcx + 0x40]
xor dword [rcx + 0xa0], 0x45f6d7c
xor dword [rcx + 0x1b8], 0x516a543a
sub dword [rcx + 0x260], 0x246d08c5
add dword [rcx + 0x2f0], 0x2fb86853
not dword [rcx + 0xfc]
xor dword [rcx + 0x180], 0x2ce87fdf
sub dword [rcx + 0x2cc], 0x3c790709
not dword [rcx + 0x1f4]
xor dword [rcx + 0x324], 0x78167d9d
add dword [rcx + 0x284], 0x78d62e41
xor dword [rcx + 0x14], 0x79af4e8a
add dword [rcx + 0x318], 0x26e156a3
not dword [rcx + 0x2f8]
not dword [rcx + 0x384]
sub dword [rcx + 0x390], 0x676f4d48
sub dword [rcx + 0x370], 0x412c0a0d
sub dword [rcx + 0x2fc], 0x15a8580d
not dword [rcx + 0x30]
not dword [rcx + 0xb4]
xor dword [rcx + 0x348], 0x38183625
sub dword [rcx + 0x20c], 0x29f20d62
not dword [rcx + 0x5c]
not dword [rcx + 0x25c]
add dword [rcx + 0x2d0], 0x78c66904
add dword [rcx + 0x1cc], 0x2fd51077
xor dword [rcx + 0x8c], 0x4a35079e
add dword [rcx + 0x2e0], 0xefb549f
add dword [rcx + 0xac], 0x3dca4671
sub dword [rcx + 0x100], 0xbb6220
not dword [rcx + 0x2d8]
add dword [rcx + 0x31c], 0x7ab52e50
xor dword [rcx + 0xd4], 0x76d60f43
add dword [rcx + 0x1f0], 0x2f6b643f
not dword [rcx + 0x230]
not dword [rcx + 0x44]
add dword [rcx + 4], 0x22b65386
sub dword [rcx + 0x1c0], 0x64a44265
not dword [rcx + 0x388]
xor dword [rcx + 0x38], 0x1c194fde
add dword [rcx + 0x3d0], 0x44741e42
add dword [rcx + 0x3b4], 0x770757
not dword [rcx + 0x108]
add dword [rcx + 0xd8], 0x4c3a0213
add dword [rcx + 0x2a4], 0x21f007c2
add dword [rcx + 0x1c4], 0x388e53ec
xor dword [rcx + 0x234], 0x51b108cd
add dword [rcx + 0x258], 0x1fbf01d8
not dword [rcx + 0x3e4]
xor dword [rcx + 0x39c], 0x79f65c81
sub dword [rcx + 0x358], 0x7be40f11
sub dword [rcx + 0x350], 0x66381a64
not dword [rcx + 0x14c]
sub dword [rcx + 0x240], 0x392d7cd1
xor dword [rcx + 0x3cc], 0x101f3f9b
add dword [rcx + 0xa8], 0x2e110a31
xor dword [rcx + 0x1ac], 0x1c60d06
sub dword [rcx + 0x24], 0xbc20486
add dword [rcx + 0x2c4], 0x46720e11
add dword [rcx + 0x128], 0x17206f51
add dword [rcx + 0x2ac], 0x7a0e2682
sub dword [rcx + 0x6c], 0xbd6a7e
not dword [rcx + 0x184]
sub dword [rcx + 0x268], 0x2c2d4ef2
add dword [rcx + 0xb0], 0x320d6df4
xor dword [rcx + 0x10c], 0x77da73e1
xor dword [rcx + 0x18c], 0x129c4230
sub dword [rcx + 0x80], 0x6f277a43
xor dword [rcx + 0x94], 0x71245ae9
xor dword [rcx + 0x328], 0x53d3332a
add dword [rcx + 0x310], 0x4f636210
sub dword [rcx + 0x3ac], 0x1a5f41a5
sub dword [rcx + 0x2b8], 0x222c40b4
xor dword [rcx + 0x36c], 0x410d1bde
sub dword [rcx + 0x344], 0x59f81192
not dword [rcx + 0x160]
sub dword [rcx + 0x60], 0x24bb0407
sub dword [rcx + 0x33c], 0x5cb438e8
not dword [rcx + 0x3c4]
sub dword [rcx + 0x3e0], 0x305a7727
add dword [rcx + 0x9c], 0x5522f6
add dword [rcx + 0x54], 0x45a90741
add dword [rcx + 0x130], 0x5b681e01
not dword [rcx + 0x64]
sub dword [rcx + 0x23c], 0x77c72c08
add dword [rcx + 0x114], 0x7db75b53
add dword [rcx + 8], 0x73584aa3
not dword [rcx + 0x178]
not dword [rcx + 0x21c]
add dword [rcx + 0x150], 0x4db35ba1
xor dword [rcx + 0x270], 0x78ea3dcc
sub dword [rcx + 0x294], 0x4d531bc6
add dword [rcx + 0x24c], 0x3e83086c
not dword [rcx + 0x144]
sub dword [rcx + 0x3a0], 0x6dcf00b9
add dword [rcx + 0x22c], 0x55a55ffb
sub dword [rcx + 0x124], 0x53ca2495
xor dword [rcx + 0x198], 0x6aa7530f
add dword [rcx + 0x74], 0x44853c72
xor dword [rcx + 0x224], 0x44a6335c
not dword [rcx + 0x218]
not dword [rcx + 0xb8]
xor dword [rcx + 0xf4], 0x4fe77627
add dword [rcx + 0x158], 0x783b0b6a
sub dword [rcx + 0x228], 0x7acb08a2
not dword [rcx + 0x2c0]
not dword [rcx + 0x7c]
not dword [rcx + 0x70]
not dword [rcx + 0x3b0]
sub dword [rcx + 0x170], 0x59e33976
xor dword [rcx + 0x27c], 0x10911129
sub dword [rcx + 0x11c], 0x6d84786e
add dword [rcx + 0x1b0], 0x4c3670fe
not dword [rcx + 0x1d8]
sub dword [rcx + 0x30c], 0x3d09d2
sub dword [rcx + 0x320], 0x123a3c6c
add dword [rcx + 0x2e4], 0x642c3fbf
not dword [rcx + 0x398]
sub dword [rcx + 0x2e8], 0x528e2796
xor dword [rcx + 0x2b4], 0x5b942722
not dword [rcx + 0x29c]
xor dword [rcx + 0x1fc], 0x1a177d25
xor dword [rcx + 0x374], 0x6e696869
add dword [rcx + 0x1d0], 0x12db1cda
xor dword [rcx + 0x12c], 0x41fb21cb
xor dword [rcx + 0x3e8], 0x63da519d
xor dword [rcx + 0x3f8], 0x2e5d2cef
sub dword [rcx + 0x220], 0x1668744a
add dword [rcx + 0x278], 0x99d6842
sub dword [rcx + 0xe8], 0x30fd66dd
not dword [rcx + 0x2d4]
add dword [rcx + 0xdc], 0x24c2171e
not dword [rcx + 0x16c]
sub dword [rcx + 0x18], 0x425508ee
sub dword [rcx + 0x17c], 0xb4233aa
add dword [rcx + 0x300], 0x6b7b539a
add dword [rcx + 0x368], 0x36a057d
not dword [rcx + 0x3dc]
xor dword [rcx + reloc.SHELL32.dll_IsUserAnAdmin], 0x479736c3
sub dword [rcx + 0x1f8], 0x2eaf6c34
not dword [rcx + 0x154]
sub dword [rcx + 0x1c8], 0x99e50e3
xor dword [rcx + 0x32c], 0xf792073
add dword [rcx + 0x190], 0x228c07cf
sub dword [rcx + 0x58], 0x20997806
sub dword [rcx + 0x314], 0x2d8e574d
xor dword [rcx + 0x1d4], 0x66d506a4
not dword [rcx + 0x1dc]
xor dword [rcx + 0x2c8], 0x44c1fbe
xor dword [rcx + 0x90], 0x7df81649
xor dword [rcx], 0x1056758f
not dword [rcx + 0x3f0]
add dword [rcx + 0x2a0], 0x66b5642f
not dword [rcx + 0x3a4]
not dword [rcx + 0x254]
not dword [rcx + 0x168]
sub dword [rcx + 0x290], 0x4f746c39
add dword [rcx + 0x364], 0x376636f
add dword [rcx + 0xf8], 0x7f3f5d8a
xor dword [rcx + 0x4c], 0x1ccf3c16
xor dword [rcx + 0x1a0], 0x7a2d06
add dword [rcx + 0x35c], 0x177035bd
not dword [rcx + 0x308]
sub dword [rcx + 0x360], 0x58ad022d
sub dword [rcx + 0x280], 0x78707be4
not dword [rcx + 0x204]
add dword [rcx + 0x3c0], 0x4c6b2808
sub dword [rcx + 0x88], 0x643749e4
add dword [rcx + 0x138], 0x37654c54
not dword [rcx + 0x338]
add dword [rcx + 0x28], 0x60127f76
not dword [rcx + 0x15c]
xor dword [rcx + 0x48], 0x48736df2
add dword [rcx + 0x3d8], 0x4af2be5
xor dword [rcx + 0xe4], 0x8e14a7
add dword [rcx + 0x394], 0x767f6058
xor dword [rcx + 0x1b4], 0x19e23232
sub dword [rcx + 0x3b8], 0x47d743e0
not dword [rcx + 0x1c]
xor dword [rcx + 0x2f4], 0x1b6f51d1
add dword [rcx + 0x3c], 0x51c10e03
not dword [rcx + 0x3f4]
xor dword [rcx + 0x3a8], 0x7a9654ce
sub dword [rcx + 0x250], 0x27c430e9
add dword [rcx + 0x3fc], 0x1b8f63d9
add dword [rcx + 0xc8], 0x738438d7
xor dword [rcx + 0xf0], 0x72fa1f38
sub dword [rcx + 0x28c], 0x31552450
not dword [rcx + 0xec]
not dword [rcx + 0x304]
not dword [rcx + 0x264]
not dword [rcx + 0x380]
sub dword [rcx + 0xa4], 0x79c81702
sub dword [rcx + 0xc4], 0x5c167af8
add dword [rcx + 0x1bc], 0x6bbf0f14
xor dword [rcx + 0x134], 0x426f2937
not dword [rcx + 0x84]
add dword [rcx + 0x1e8], 0x7f2f3696
not dword [rcx + 0x19c]
sub dword [rcx + 0x1ec], 0x72c42f04
xor dword [rcx + 0x298], 0x3d6277d6
sub dword [rcx + 0xbc], 0x37b40069
xor dword [rcx + 0xd0], 0x5ff32005
sub dword [rcx + 0x34c], 0x73306926
add dword [rcx + 0x38c], 0x522174c0
xor dword [rcx + 0x110], 0x1ce376cb
add dword [rcx + 0x2c], 0xbb5722
xor dword [rcx + 0x2b0], 0x258a74a4
add dword [rcx + 0x3ec], 0x239e4863
not dword [rcx + 0x98]
xor dword [rcx + 0x378], 0x3fdc4128
not dword [rcx + 0x188]
xor dword [rcx + 0x274], 0x649d6f97
not dword [rcx + 0x238]
not dword [rcx + 0x208]
not dword [rcx + 0x200]
xor dword [rcx + 0x1e4], 0x574b550e
not dword [rcx + 0x37c]
sub dword [rcx + 0x13c], 0x516153fc
add dword [rcx + 0x174], 0x30917bda
sub dword [rcx + 0x50], 0x454520ce
xor dword [rcx + 0xc0], 0x7d537939
add rsi, 0x400
add rcx, 0x400
cmp rsi, 0x8c000
jne 0x14059002e
pop rcx
call fcn.14058f506
mov rsp, rbp
pop rbp
pop r15
pop r14
pop r13
pop r12
pop r11
pop r10
pop r9
pop r8
pop rdi
pop rsi
pop rbp
pop rbx
pop rdx
pop rcx
pop rax