Function at 0x140230000
Capabilities:
Encode data using xor

Disassembly:
push rax
push rcx
push rdx
push rbx
push rbp
push rsi
push rdi
push r8
push r9
push r10
push r11
push r12
push r13
push r14
push r15
push rbp
mov rbp, rsp
sub rsp, 0x20
and rsp, 0xfffffffffffffff0
lea rax, [0x1401a3a00]
push 0
pop rbx
push rax
xor dword [rax + 0x13c], 0x2d0626bf
not dword [rax + 0x31c]
sub dword [rax + 0x190], 0x6a354e0a
add dword [rax + 0x134], 0x389a25c5
sub dword [rax + 0x23c], 0x7d37ef
sub dword [rax + 0x344], 0x427c1319
xor dword [rax + 0x1a8], 0x29eb590c
add dword [rax + 0x1e4], 0x14c00e46
xor dword [rax + 0x254], 0x2ef22a06
add dword [rax + 0x2e8], 0x53666f6d
not dword [rax + 0x184]
sub dword [rax + 0xd4], 0x1dd44d8
sub dword [rax + 0xf4], 0x58211dd
not dword [rax + 0xf8]
sub dword [rax + 0x330], 0x22876234
not dword [rax + 0xb0]
sub dword [rax + 0x354], 0x4c6d1332
not dword [rax + 0x120]
not dword [rax + 0xa0]
xor dword [rax + 0x37c], 0x1191424e
xor dword [rax + 0x3c], 0x4a4b1afb
xor dword [rax + 0x17c], 0x6cbf640f
not dword [rax + 0x2b0]
add dword [rax + 0x70], 0x1fcb1bb7
xor dword [rax + 0x228], 0x65c53cd5
add dword [rax + 0x2f0], 0x2d105b2a
sub dword [rax + 0x1e8], 0x6195290f
xor dword [rax + 0x80], 0x19963325
not dword [rax + 0xc0]
add dword [rax + 0x1c], 0x394b39ab
add dword [rax + 0x84], 0x5a7d078b
add dword [rax + 0x2f4], 0x5802147
not dword [rax + 0x94]
xor dword [rax + 0x2b4], 0x5e24237b
xor dword [rax + 0x220], 0x4c2878ff
xor dword [rax + 0x60], 0x4a0c1bac
add dword [rax + 0xbc], 0x30bd79cb
sub dword [rax + 0x2d0], 0x2ebb5303
add dword [rax + 0x320], 0xc5a3a79
xor dword [rax + 0x1d8], 0x369c6cb2
sub dword [rax + 0x248], 0x487d06bd
add dword [rax + 0x2e0], 0x673b084f
not dword [rax + 0x8c]
xor dword [rax + 0x364], 0x4f41622d
not dword [rax + 0x130]
sub dword [rax + 0x290], 0x44b35651
xor dword [rax + 0x1f8], 0xfa40f79
add dword [rax + 0x18], 0x2ae17b83
add dword [rax + 0x21c], 0x20d96f6b
not dword [rax + 0x1dc]
sub dword [rax + 0x64], 0xd4dda
add dword [rax + 0x300], 0x1b423679
add dword [rax + 0x154], 0x28dd26b8
not dword [rax + 0x3d4]
sub dword [rax + 0x14c], 0x67042ee5
not dword [rax + 0x370]
xor dword [rax + 0x6c], 0x2c765ea4
sub dword [rax + 0xb8], 0x15022b2e
add dword [rax + 0x26c], 0xc030844
not dword [rax + 0x2a4]
xor dword [rax + 0x3b0], 0x458b423b
xor dword [rax + 0x2ac], 0x2ab22f7c
not dword [rax + 0x110]
add dword [rax + 0x15c], 0x456e4c4d
xor dword [rax + 0x1c8], 0x40670b6d
sub dword [rax + 0x28c], 0x5fd276ed
xor dword [rax + reloc.SHELL32.dll_IsUserAnAdmin], 0x5d6e6719
add dword [rax + 0x1bc], 0x487e140d
sub dword [rax + 0x388], 0x215b660a
sub dword [rax + 0x230], 0x194945cd
add dword [rax + 0x150], 0x78d901fa
xor dword [rax + 0x22c], 0x60b60c47
sub dword [rax + 0x3f0], 0x5de77f9e
xor dword [rax + 0x88], 0x71db7f2a
sub dword [rax + 0x144], 0x250577f7
xor dword [rax + 0x2c], 0x72ec7a3a
not dword [rax + 0x36c]
add dword [rax + 0x268], 0x44585e6a
sub dword [rax + 4], 0xcd86f30
not dword [rax + 0x328]
add dword [rax + 0x1b8], 0x654c43bf
not dword [rax + 0x1e0]
xor dword [rax + 0x1b4], 0x440f2e63
add dword [rax + 0x174], 0x4af27ec7
xor dword [rax + 0x360], 0x4cc328fc
add dword [rax + 0x10], 0x36ad6558
sub dword [rax + 0x100], 0x4860626d
not dword [rax + 0x358]
xor dword [rax + 0x24c], 0x5cff2b19
add dword [rax + 0x200], 0x220960e0
not dword [rax + 0x310]
not dword [rax + 0x29c]
xor dword [rax + 0x3b8], 0x5b0f7025
not dword [rax + 0x104]
xor dword [rax + 0x234], 0x3ee01aa2
not dword [rax + 0x34]
sub dword [rax + 0x40], 0x43cb50cb
sub dword [rax + 0x2f8], 0x4c9d23e4
not dword [rax + 0x16c]
xor dword [rax + 0x2bc], 0x465b0c9b
xor dword [rax + 0x2cc], 0x2c9c4b1e
sub dword [rax + 0x2d4], 0x4e374b64
not dword [rax + 0x1cc]
add dword [rax + 0x318], 0x49672f87
add dword [rax + 0x38c], 0x631525c9
not dword [rax + 0x348]
xor dword [rax + 0x24], 0x4811773a
xor dword [rax + 0x2ec], 0x70be4f44
sub dword [rax + 0x108], 0x655d6ca0
add dword [rax + 0xd0], 0x18f720e2
not dword [rax + 0x38]
not dword [rax + 0xdc]
xor dword [rax + 0x124], 0x6e251c23
not dword [rax + 0x3b4]
sub dword [rax + 0x3a8], 0x4c0f2072
not dword [rax + 0x284]
xor dword [rax + 0x224], 0x545b2956
sub dword [rax + 0x1fc], 0x5b8f21a0
not dword [rax + 0x114]
xor dword [rax + 0x1a4], 0x1e7023f7
xor dword [rax + 0x2a0], 0x60ec77f8
not dword [rax + 0x33c]
add dword [rax + 0x198], 0x69114656
xor dword [rax + 0x350], 0x7e2955ec
add dword [rax + 0x2e4], 0x25ac1e27
add dword [rax + 0xe4], 0x4184277f
sub dword [rax + 0x1d4], 0x7087391f
add dword [rax + 0x18c], 0x1d0642e9
xor dword [rax + 0x12c], 0x277a1688
add dword [rax + 0x1ec], 0x7810426c
xor dword [rax + 0x3e8], 0xa441dc7
xor dword [rax + 0x214], 0x67bb797b
sub dword [rax + 0x164], 0x838397b
xor dword [rax + 0x4c], 0x1d0f745a
xor dword [rax + 0x218], 0x7f6e4b91
not dword [rax + 0x10c]
xor dword [rax + 0x138], 0x14d44b08
xor dword [rax + 0x1f4], 0x2cb27057
xor dword [rax + 0x1f0], 0x5fcd672f
add dword [rax + 0x19c], 0x62d43f3c
sub dword [rax + 0x334], 0x6af325e6
not dword [rax + 0x9c]
xor dword [rax + 0x54], 0x396d0988
xor dword [rax + 0x1b0], 0x289f223d
sub dword [rax + 0x2c0], 0x15b60855
not dword [rax + 0x3dc]
not dword [rax + 0xe8]
sub dword [rax + 0x238], 0x28e37f2b
xor dword [rax + 0x158], 0x163f4a02
not dword [rax + 0x3d8]
xor dword [rax + 0xd8], 0x1dc755c5
add dword [rax + 0x3bc], 0x5124536
xor dword [rax + 0x278], 0x54f84032
sub dword [rax + 0x32c], 0x45627935
not dword [rax + 0x244]
add dword [rax + 0x260], 0x49380034
sub dword [rax + 0xc8], 0x65233fc0
add dword [rax], 0x50887a5f
xor dword [rax + 0x3e4], 0x90a7ae2
xor dword [rax + 0x3ac], 0x579d272a
not dword [rax + 0x298]
add dword [rax + 0xe0], 0x9266c69
xor dword [rax + 0x208], 0x445c0c24
not dword [rax + 0x204]
add dword [rax + 0x194], 0x4b36bd3
xor dword [rax + 0x3c8], 0x2a312eb1
add dword [rax + 0x368], 0x4ab73d6e
add dword [rax + 0x280], 0x1c58003c
sub dword [rax + 0x14], 0x567d0911
sub dword [rax + 0xc4], 0x4a2644e4
not dword [rax + 8]
add dword [rax + 0x160], 0x64e63959
add dword [rax + 0x2c4], 0x32d513f4
not dword [rax + 0xa8]
not dword [rax + 0x2b8]
sub dword [rax + 0x140], 0x59ce79e1
add dword [rax + 0x7c], 0x49d7059a
sub dword [rax + 0x398], 0x23f56bf1
add dword [rax + 0x30c], 0x7af84924
not dword [rax + 0x258]
not dword [rax + 0xac]
xor dword [rax + 0x1c4], 0x51b141db
not dword [rax + 0x384]
add dword [rax + 0x44], 0x657f2729
add dword [rax + 0x250], 0x35832a72
not dword [rax + 0x34c]
sub dword [rax + 0x1ac], 0x749615dd
add dword [rax + 0x128], 0x63e90865
not dword [rax + 0x68]
add dword [rax + 0x168], 0x13276202
add dword [rax + 0x180], 0x1e9f124e
add dword [rax + 0x5c], 0x6ae143c4
not dword [rax + 0x338]
xor dword [rax + 0x28], 0x558c1721
add dword [rax + 0x78], 0x2cea04b9
add dword [rax + 0x3a4], 0x2dcd6362
not dword [rax + 0x3c4]
not dword [rax + 0x3e0]
not dword [rax + 0x178]
not dword [rax + 0xa4]
xor dword [rax + 0x240], 0x3b112b8b
sub dword [rax + 0x11c], 0x5f2053b1
add dword [rax + 0x308], 0x33221abc
add dword [rax + 0x25c], 0x628e5efa
not dword [rax + 0xcc]
not dword [rax + 0x3ec]
not dword [rax + 0x3f8]
xor dword [rax + 0x294], 0x4104a1f
sub dword [rax + 0x2fc], 0x8a05287
xor dword [rax + 0x148], 0x28466d36
sub dword [rax + 0x3c0], 0x4da15a47
xor dword [rax + 0x2c8], 0x7f813f7d
not dword [rax + 0x2d8]
sub dword [rax + 0x74], 0x54826a0
sub dword [rax + 0x264], 0x7bb41457
sub dword [rax + 0x270], 0x1d187f6a
xor dword [rax + 0x30], 0x3bd95afb
sub dword [rax + 0xf0], 0x5c5f56ee
sub dword [rax + 0x378], 0x130e2669
not dword [rax + 0x90]
xor dword [rax + 0x188], 0x7de0202c
xor dword [rax + 0x35c], 0x6500458c
sub dword [rax + 0x380], 0x70815daf
add dword [rax + 0x394], 0x4d026838
add dword [rax + 0x39c], 0x683d4c08
xor dword [rax + 0x288], 0x65ca16e2
xor dword [rax + 0x2dc], 0x4c7150aa
xor dword [rax + 0x324], 0x1f711294
xor dword [rax + 0xb4], 0x7b686bd0
sub dword [rax + 0x1d0], 0x7e4b6da2
xor dword [rax + 0x98], 0x66437127
sub dword [rax + 0x20], 0x315b2e81
not dword [rax + 0x390]
xor dword [rax + 0x314], 0x4dca01b6
not dword [rax + 0x374]
not dword [rax + 0xfc]
xor dword [rax + 0x3f4], 0x58ab0c6e
xor dword [rax + 0x20c], 0x47c9526c
xor dword [rax + 0x1a0], 0x7f566274
xor dword [rax + 0x3d0], 0x3c0775c5
not dword [rax + 0x118]
xor dword [rax + 0x170], 0x73f772e4
not dword [rax + 0x1c0]
add dword [rax + 0x3a0], 0x612b2f9a
sub dword [rax + 0x50], 0x566c57c2
add dword [rax + 0x3cc], 0x644b7496
not dword [rax + 0x304]
sub dword [rax + 0x340], 0x3554768b
sub dword [rax + 0xec], 0x13211f54
add dword [rax + 0x210], 0x1ac21833
not dword [rax + 0x48]
not dword [rax + 0x274]
not dword [rax + 0x27c]
not dword [rax + 0xc]
xor dword [rax + 0x58], 0x25bb7d25
add dword [rax + 0x3fc], 0x2f3d45eb
add rbx, 0x400
add rax, 0x400
cmp rbx, 0x8c000
jne 0x14023002e
pop rcx
call fcn.14022f306
mov rsp, rbp
pop rbp
pop r15
pop r14
pop r13
pop r12
pop r11
pop r10
pop r9
pop r8
pop rdi
pop rsi
pop rbp
pop rbx
pop rdx
pop rcx
pop rax