Function at 0x1401e6000
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rax
push rcx
push rdx
push rbx
push rbp
push rsi
push rdi
push r8
push r9
push r10
push r11
push r12
push r13
push r14
push r15
push rbp
mov rbp, rsp
sub rsp, 0x20
and rsp, 0xfffffffffffffff0
lea rbx, [0x140159800]
movabs rax, 0
push rbx
not dword [rbx + 0x23c]
add dword [rbx + 0x8c], 0x5f885367
xor dword [rbx + 0x3b0], 0x71e90e8e
not dword [rbx + 0x2c8]
xor dword [rbx + 0x130], 0x15116e4
sub dword [rbx + 0x14c], 0x4b1820dd
sub dword [rbx + 0x380], 0x45c3de4
not dword [rbx + 0x270]
sub dword [rbx + reloc.SHELL32.dll_IsUserAnAdmin], 0x491f1079
not dword [rbx + 0x378]
xor dword [rbx + 0x208], 0x117d0321
add dword [rbx + 0xd8], 0x515123b4
add dword [rbx + 0x3cc], 0x389a362f
add dword [rbx + 0xa0], 0x2b597f07
xor dword [rbx + 0x318], 0x138419ea
not dword [rbx + 0x90]
not dword [rbx + 0x2e4]
not dword [rbx + 0x19c]
xor dword [rbx + 0x24c], 0x6fd1352b
not dword [rbx + 0x3e8]
xor dword [rbx + 0x398], 0x2cb14fd9
add dword [rbx + 0x28], 0x1335157
not dword [rbx + 0x210]
sub dword [rbx + 0x340], 0x649d6bf1
sub dword [rbx + 0x28c], 0x28910b50
add dword [rbx + 0x388], 0x7b803113
sub dword [rbx], 0x2245358d
add dword [rbx + 0x18c], 0x20900505
add dword [rbx + 0xa8], 0x7d6a6e86
add dword [rbx + 0x324], 0x1feb15aa
sub dword [rbx + 0xb8], 0x662d4b91
sub dword [rbx + 0x370], 0x6b4f77a0
xor dword [rbx + 0x114], 0x4f38235f
sub dword [rbx + 0x48], 0x3e2e7191
not dword [rbx + 0x1b0]
xor dword [rbx + 0x214], 0x12e5001e
xor dword [rbx + 0x1f4], 0x631c0ff0
xor dword [rbx + 0xcc], 0x78eb71f1
sub dword [rbx + 0x304], 0x5f4b5a20
sub dword [rbx + 0x2c4], 0x6c721849
add dword [rbx + 0x204], 0xd31569f
not dword [rbx + 0x34]
not dword [rbx + 0xd4]
xor dword [rbx + 0x3e0], 0x3b183a8c
sub dword [rbx + 0x3c4], 0x32f7703b
not dword [rbx + 0x368]
xor dword [rbx + 0x288], 0x36814d5b
xor dword [rbx + 0x1a0], 0x1c9476a9
add dword [rbx + 0x84], 0x465360b
add dword [rbx + 0x3f0], 0x7dc9643f
xor dword [rbx + 0x3f4], 0x615b630d
not dword [rbx + 0x44]
add dword [rbx + 0x250], 0x7aef2587
add dword [rbx + 0x308], 0x63ba5cee
not dword [rbx + 0x194]
add dword [rbx + 0xc8], 0x162f652d
not dword [rbx + 0x158]
not dword [rbx + 0x1dc]
xor dword [rbx + 0x2b0], 0x402b4b12
sub dword [rbx + 0xfc], 0x1daa1980
add dword [rbx + 0xf0], 0x4ee45d1c
not dword [rbx + 0x280]
add dword [rbx + 0xec], 0x78790d0c
not dword [rbx + 0xb4]
add dword [rbx + 0x80], 0x157b08db
add dword [rbx + 0x300], 0x1a62b41
add dword [rbx + 0x350], 0x473e4707
xor dword [rbx + 0xac], 0x4fdb2d5d
sub dword [rbx + 0x2dc], 0xa1b427f
not dword [rbx + 4]
add dword [rbx + 0x78], 0x6149766e
xor dword [rbx + 0x1cc], 0x6b2820e8
add dword [rbx + 0x1f8], 0x525d58a8
sub dword [rbx + 0x1a4], 0x19056779
add dword [rbx + 0x2c], 0x366d49b7
add dword [rbx + 0x2cc], 0x33cd34bd
xor dword [rbx + 0x128], 0x362b279c
xor dword [rbx + 0x5c], 0x2a62093d
xor dword [rbx + 0x174], 0x30ce5773
add dword [rbx + 0x1c8], 0x570b045b
sub dword [rbx + 0x1ac], 0x7fc25ee7
not dword [rbx + 0x12c]
xor dword [rbx + 0x2d8], 0x2a433e5d
sub dword [rbx + 0x10], 0x5dc456a
not dword [rbx + 0x68]
xor dword [rbx + 0xe0], 0xa484772
add dword [rbx + 0xb0], 0x41ed10b3
sub dword [rbx + 0x3d8], 0x68d30e2a
xor dword [rbx + 0x390], 0x57e85f2d
not dword [rbx + 0x188]
xor dword [rbx + 0x148], 0x6fb0705e
not dword [rbx + 0x168]
add dword [rbx + 0x7c], 0x25046214
not dword [rbx + 0x354]
sub dword [rbx + 0xe8], 0x33fb77a9
not dword [rbx + 0x200]
add dword [rbx + 0x150], 0x37012991
add dword [rbx + 0xf4], 0x77de0396
sub dword [rbx + 0x1d4], 0x574c5540
sub dword [rbx + 0x3ac], 0xfe10189
xor dword [rbx + 0x240], 0xf4e1acc
add dword [rbx + 0x25c], 0x651e2ba0
xor dword [rbx + 0x4c], 0x21e8650c
sub dword [rbx + 0x2a4], 0x3114715d
xor dword [rbx + 0x20], 0x53c73d53
not dword [rbx + 0x88]
xor dword [rbx + 0x178], 0x46124608
sub dword [rbx + 0x254], 0x4d1b28b8
add dword [rbx + 0x13c], 0x41963d56
add dword [rbx + 0x358], 0x2ad56a76
xor dword [rbx + 0x1c0], 0x7ef6653f
sub dword [rbx + 0x218], 0x56d21b13
not dword [rbx + 0x3c]
not dword [rbx + 0x260]
not dword [rbx + 0x11c]
not dword [rbx + 0x348]
not dword [rbx + 0x184]
sub dword [rbx + 0x248], 0x4c96165e
sub dword [rbx + 0x60], 0x455901d2
add dword [rbx + 0x16c], 0xdf54d4d
xor dword [rbx + 0x2f0], 0x2de37611
not dword [rbx + 0x6c]
not dword [rbx + 0x2d0]
add dword [rbx + 0xd0], 0x68326efe
sub dword [rbx + 0x3a4], 0x3fec62a8
add dword [rbx + 0x110], 0x757e1db9
not dword [rbx + 0x24]
add dword [rbx + 0x338], 0x61064d1c
add dword [rbx + 0x30c], 0x7f7b7b73
xor dword [rbx + 0x290], 0x64202b4
not dword [rbx + 0x30]
xor dword [rbx + 0x1e4], 0x68123b87
xor dword [rbx + 0x360], 0x297d79fa
add dword [rbx + 0x2f4], 0x3b1142d
sub dword [rbx + 0x21c], 0x4fc500cc
not dword [rbx + 0x39c]
sub dword [rbx + 0x1e8], 0x3a196b21
not dword [rbx + 0x33c]
sub dword [rbx + 0x2a0], 0x1e8b7660
xor dword [rbx + 0xe4], 0x63a63902
add dword [rbx + 0x3fc], 0x263d4e8d
xor dword [rbx + 0x3d4], 0x43853a9f
xor dword [rbx + 0x274], 0x79c02966
xor dword [rbx + 0xdc], 0xeeb3942
not dword [rbx + 0x140]
not dword [rbx + 0x26c]
not dword [rbx + 0x58]
sub dword [rbx + 0x1d8], 0x3a035a21
not dword [rbx + 0x1d0]
sub dword [rbx + 0x2fc], 0x619b3d92
xor dword [rbx + 0x314], 0x6d602999
xor dword [rbx + 0x54], 0x574d438b
xor dword [rbx + 0x190], 0x582e02b6
not dword [rbx + 0x9c]
sub dword [rbx + 0x154], 0x77b534cc
not dword [rbx + 0x144]
sub dword [rbx + 0x74], 0x71530c03
sub dword [rbx + 0x10c], 0x3a0940ac
sub dword [rbx + 0x2b8], 0x2f62cde
xor dword [rbx + 0x2ac], 0x75da5ab5
xor dword [rbx + 0x64], 0x3b815204
xor dword [rbx + 0x37c], 0x62045b27
sub dword [rbx + 0x1c4], 0x23ae7016
add dword [rbx + 0x1b4], 0x39f21010
sub dword [rbx + 0x180], 0x280b0855
xor dword [rbx + 0x134], 0x23724e2e
xor dword [rbx + 0x1ec], 0x30a25194
add dword [rbx + 0x334], 0x736c5ce2
xor dword [rbx + 0x27c], 0x3cc82335
not dword [rbx + 0x310]
add dword [rbx + 0x364], 0x6617664d
xor dword [rbx + 0x40], 0x320e3d0d
add dword [rbx + 0x17c], 0x790851c4
sub dword [rbx + 0x20c], 0x7d61989
not dword [rbx + 0x344]
not dword [rbx + 0x264]
xor dword [rbx + 0x118], 0x255f337c
xor dword [rbx + 8], 0x7c9b2b52
xor dword [rbx + 0x35c], 0x65426110
sub dword [rbx + 0x2b4], 0x52f76712
add dword [rbx + 0x224], 0x6ef79ea
not dword [rbx + 0x3ec]
xor dword [rbx + 0x108], 0x1ab255d7
sub dword [rbx + 0x1e0], 0x756001df
xor dword [rbx + 0x104], 0x260a73ce
xor dword [rbx + 0x120], 0x27eb57d1
sub dword [rbx + 0x1a8], 0xace7cd1
not dword [rbx + 0x2f8]
xor dword [rbx + 0x3dc], 0x4dca34eb
add dword [rbx + 0x3b8], 0x2ded1728
not dword [rbx + 0x278]
xor dword [rbx + 0xc0], 0x626e5057
not dword [rbx + 0x1c]
not dword [rbx + 0x244]
add dword [rbx + 0x29c], 0x252306ab
sub dword [rbx + 0x3c0], 0x45c51379
add dword [rbx + 0x124], 0x42de2631
xor dword [rbx + 0x170], 0x44061918
sub dword [rbx + 0x294], 0x1dcc6b18
add dword [rbx + 0x3f8], 0x3b3c196d
not dword [rbx + 0x3d0]
not dword [rbx + 0x228]
xor dword [rbx + 0x31c], 0x368e2cef
add dword [rbx + 0x330], 0xaa915e6
sub dword [rbx + 0x38], 0x7ea12d91
add dword [rbx + 0xa4], 0x4401563c
sub dword [rbx + 0x230], 0xd83e9c
not dword [rbx + 0x164]
sub dword [rbx + 0x138], 0x3565bc7
add dword [rbx + 0x15c], 0x74be029a
add dword [rbx + 0x36c], 0x68f80b79
not dword [rbx + 0x2e8]
xor dword [rbx + 0x3b4], 0x71220607
add dword [rbx + 0x3a8], 0x431a7b3d
sub dword [rbx + 0x32c], 0x46036632
sub dword [rbx + 0x1f0], 0x17d71245
sub dword [rbx + 0x2ec], 0x406c1a92
not dword [rbx + 0x3e4]
add dword [rbx + 0x298], 0x15d76c3a
add dword [rbx + 0x1fc], 0xf540d78
not dword [rbx + 0x394]
xor dword [rbx + 0x1b8], 0x5ff67aeb
sub dword [rbx + 0xbc], 0x7e5b3c91
sub dword [rbx + 0x3bc], 0x30fb4bae
xor dword [rbx + 0x220], 0x706c2e86
sub dword [rbx + 0x3a0], 0x5a0045ee
sub dword [rbx + 0xf8], 0x1a83a32
sub dword [rbx + 0x1bc], 0x132515bf
sub dword [rbx + 0x34c], 0x55d20ab6
add dword [rbx + 0x3c8], 0x51cc10b5
sub dword [rbx + 0xc4], 0x5ced20e3
sub dword [rbx + 0x234], 0x4acc463e
xor dword [rbx + 0x268], 0x751677ae
xor dword [rbx + 0x2d4], 0x6f19728a
xor dword [rbx + 0xc], 0x6054581d
xor dword [rbx + 0x258], 0x30457c29
add dword [rbx + 0x38c], 0x4d4a1f09
xor dword [rbx + 0x18], 0x286b5566
xor dword [rbx + 0x160], 0x3b430724
not dword [rbx + 0x328]
sub dword [rbx + 0x50], 0x56b45f66
not dword [rbx + 0x238]
sub dword [rbx + 0x14], 0x129a189b
xor dword [rbx + 0x2bc], 0x4e1a53de
not dword [rbx + 0x22c]
not dword [rbx + 0x98]
sub dword [rbx + 0x374], 0x33e7349d
sub dword [rbx + 0x94], 0x328312e9
sub dword [rbx + 0x284], 0x25a4755e
add dword [rbx + 0x320], 0x360a6930
xor dword [rbx + 0x384], 0x5d9f43be
xor dword [rbx + 0x70], 0x4cd80cd8
add dword [rbx + 0x198], 0x2d9c3ebb
not dword [rbx + 0x2c0]
sub dword [rbx + 0x2e0], 0x5d656052
add dword [rbx + 0x100], 0x580a3d20
add rax, 0x400
add rbx, 0x400
cmp rax, 0x8c000
je 0x1401e68f8
jmp 0x1401e6035
pop rcx
call fcn.1401e5106
mov rsp, rbp
pop rbp
pop r15
pop r14
pop r13
pop r12
pop r11
pop r10
pop r9
pop r8
pop rdi
pop rsi
pop rbp
pop rbx
pop rdx
pop rcx
pop rax