Function at 0x14033b000
Capabilities:
Encode data using xor

Disassembly:
push rax
push rcx
push rdx
push rbx
push rbp
push rsi
push rdi
push r8
push r9
push r10
push r11
push r12
push r13
push r14
push r15
push rbp
mov rbp, rsp
sub rsp, 0x20
and rsp, 0xfffffffffffffff0
lea rax, [0x1402ae600]
push 0
pop rdi
push rax
sub dword [rax + 0x2a4], 0x179f39de
sub dword [rax + 0x370], 0x38bd4414
sub dword [rax + 0x288], 0x56d872d0
not dword [rax + 0x378]
not dword [rax + 0x38c]
add dword [rax + 0x40], 0x2abc5ccf
add dword [rax + 0x138], 0x5c1c79b4
not dword [rax + 0x34c]
add dword [rax + 0x300], 0x5cbd1d28
not dword [rax + 0x3ac]
sub dword [rax + 0x26c], 0x6ef76e53
not dword [rax + 0x1e0]
not dword [rax + 0x1d0]
xor dword [rax + 0x35c], 0x9aa38e4
add dword [rax + 0xa8], 0x724701f6
add dword [rax + 0x2b4], 0x8b0154
not dword [rax + 0x2f4]
sub dword [rax + 0x160], 0x5a006189
not dword [rax + 0xf8]
xor dword [rax + 0x1ac], 0x49595295
not dword [rax + 0x314]
not dword [rax + 0x398]
add dword [rax + 0x374], 0x4ebf5bc8
sub dword [rax + 0x2b8], 0x57980625
xor dword [rax + 0xd8], 0x3d813764
xor dword [rax + 0x1c], 0x10066d86
xor dword [rax + 0x344], 0xa9c4adc
xor dword [rax + 0x118], 0x703c77b8
add dword [rax + 0xfc], 0x5275c4b
not dword [rax + 0x270]
xor dword [rax + 4], 0x35e83dec
xor dword [rax + 0x364], 0x71c93b0b
not dword [rax + 0x394]
sub dword [rax + 0x30c], 0x371e7037
xor dword [rax + 0x214], 0x7f246a0a
not dword [rax + 0x128]
add dword [rax + 0x380], 0x5d972916
xor dword [rax + 0xac], 0x8085b8c
not dword [rax + 0x3dc]
sub dword [rax + 0x108], 0x279c7662
xor dword [rax + 0x188], 0x127f3d9e
not dword [rax + 0xc]
add dword [rax + 0x358], 0x19ac0980
add dword [rax + 0x178], 0x76312c07
add dword [rax + 0x1c0], 0xe75186a
sub dword [rax + 0x1f4], 0x1c927ab
not dword [rax + 0x278]
xor dword [rax + 0x10], 0x499493a
xor dword [rax + 0x2b0], 0x3f216c4d
add dword [rax + 0x280], 0xdc940ad
not dword [rax + 0x3a0]
add dword [rax + 0x3c8], 0x67e15128
add dword [rax + 0x16c], 0x21be6958
sub dword [rax + 0x354], 0x6f5a5363
add dword [rax + 0x340], 0x748f2ea5
add dword [rax + 0x1cc], 0x108f1920
xor dword [rax + 0x234], 0x771e39a6
sub dword [rax + 0x70], 0x661a3428
not dword [rax + 0x1d8]
sub dword [rax + 0x2bc], 0x40a1050d
not dword [rax + 0xbc]
xor dword [rax + 0x34], 0x502d5229
add dword [rax + 0x388], 0x6fe97ec5
sub dword [rax + 0x88], 0x1620636e
not dword [rax + 0x264]
xor dword [rax + 0x334], 0x63151fb9
sub dword [rax + 0x194], 0x7a5d5aa9
add dword [rax + 0x2e8], 0x25855ca5
sub dword [rax + 0x2f8], 0x57272a6f
sub dword [rax + 0x68], 0x4bcd5e16
xor dword [rax + 0x310], 0x3dcf23ea
add dword [rax + 0x27c], 0x64580303
add dword [rax + 0x14c], 0x3d115f13
not dword [rax + 0x350]
add dword [rax + 0x338], 0x2f555e0b
xor dword [rax + 0x3b8], 0x5ad91d6e
xor dword [rax + 0x6c], 0x47c25248
sub dword [rax + 0x23c], 0x67201e39
xor dword [rax + 0xe8], 0x6ae700fa
xor dword [rax + reloc.SHELL32.dll_IsUserAnAdmin], 0x349056e8
xor dword [rax + 0x22c], 0x347704e7
not dword [rax + 0xc0]
not dword [rax + 0x134]
add dword [rax + 0x204], 0xe1e04b2
add dword [rax + 0x30], 0x239a41ac
add dword [rax + 0x25c], 0xb6e0caf
not dword [rax + 0x29c]
add dword [rax + 0x3b0], 0x60b55ead
xor dword [rax + 0x98], 0x50c36d41
not dword [rax + 0x2a0]
not dword [rax + 0x294]
xor dword [rax + 0x1d4], 0x50554ef0
xor dword [rax + 0x7c], 0x659f1344
sub dword [rax + 0x100], 0xae91dbf
add dword [rax + 0x198], 0x5e7818af
xor dword [rax + 0x114], 0x2f940f09
sub dword [rax], 0x38876c5d
xor dword [rax + 0x3e8], 0x1e75531a
sub dword [rax + 0x3a4], 0x4d4268f3
add dword [rax + 0x158], 0x6458191c
not dword [rax + 0x3bc]
xor dword [rax + 0x324], 0x7bf51607
not dword [rax + 0x298]
not dword [rax + 0x224]
xor dword [rax + 0x268], 0x485910c6
xor dword [rax + 0x148], 0x169f1d37
not dword [rax + 0xc8]
add dword [rax + 0xe0], 0xab4fc9
sub dword [rax + 0x28c], 0x5747603d
add dword [rax + 0x284], 0x3a4c2eb9
xor dword [rax + 0x78], 0x144b2b09
not dword [rax + 0x21c]
add dword [rax + 0x84], 0x7c8652ce
add dword [rax + 0x318], 0xaa16a41
sub dword [rax + 0x384], 0x5c6f636e
not dword [rax + 0x3f0]
not dword [rax + 0x4c]
sub dword [rax + 0x330], 0x1a433955
not dword [rax + 0x3c]
not dword [rax + 0x2ac]
sub dword [rax + 0x2c], 0x25e43026
add dword [rax + 0x10c], 0x25142fb3
add dword [rax + 0x2d4], 0x64600b08
xor dword [rax + 0x50], 0x307e0fe8
xor dword [rax + 0x1bc], 0x146b6e36
xor dword [rax + 0x15c], 0x67541c19
xor dword [rax + 0x3ec], 0x61d736e8
not dword [rax + 0x1c4]
add dword [rax + 0x228], 0x682c33d2
sub dword [rax + 0xe4], 0x323a05fe
add dword [rax + 0xcc], 0x7c845bca
not dword [rax + 0xd0]
not dword [rax + 0xb4]
xor dword [rax + 0x174], 0x1ff7a11
sub dword [rax + 0x230], 0x1a7613dc
not dword [rax + 0x3f8]
xor dword [rax + 0x2fc], 0x672a39f1
xor dword [rax + 0x110], 0x7593902
add dword [rax + 0x1a4], 0x76f44575
add dword [rax + 0x390], 0x2de1555d
add dword [rax + 0x3f4], 0x7cfe763b
xor dword [rax + 0x3e0], 0x7f6c769b
add dword [rax + 0x348], 0x457959b9
xor dword [rax + 0xd4], 0x4eb62909
add dword [rax + 0x74], 0xfe53cf3
not dword [rax + 0xf4]
not dword [rax + 0x3a8]
not dword [rax + 0x130]
sub dword [rax + 0xec], 0x1dd4083e
add dword [rax + 0x320], 0x6853196c
not dword [rax + 0x208]
sub dword [rax + 0xb8], 0x4c8c0214
not dword [rax + 0x28]
add dword [rax + 0x1f8], 0x7454ef0
add dword [rax + 0x258], 0x5a087177
xor dword [rax + 0x1e8], 0x409507da
add dword [rax + 0xf0], 0x4186440d
add dword [rax + 0x1a0], 0x525c1ee0
not dword [rax + 0xc4]
sub dword [rax + 0x3c0], 0x1b9e29e1
not dword [rax + 0x48]
xor dword [rax + 0x164], 0x5d9c1258
not dword [rax + 0x1dc]
xor dword [rax + 0x3cc], 0xb567fe5
sub dword [rax + 0x328], 0x692906ad
not dword [rax + 0x3b4]
not dword [rax + 0x1fc]
xor dword [rax + 0x154], 0x16d45603
sub dword [rax + 0x1f0], 0x5c4266cc
not dword [rax + 0x1b4]
not dword [rax + 0x90]
not dword [rax + 0x3d4]
not dword [rax + 0x39c]
sub dword [rax + 0x1a8], 0x736302f2
sub dword [rax + 0x1e4], 0x48f05f22
add dword [rax + 0x3fc], 0x5a4333e7
sub dword [rax + 0x3d8], 0x67f621d1
xor dword [rax + 0x2d0], 0x6f710ed5
not dword [rax + 0x200]
add dword [rax + 8], 0x2e721f4b
add dword [rax + 0x20], 0xb606816
add dword [rax + 0xdc], 0x37e8348e
not dword [rax + 0x220]
add dword [rax + 0x368], 0x52b137ee
not dword [rax + 0x144]
xor dword [rax + 0x104], 0x7cf31cd5
sub dword [rax + 0x168], 0x67a25969
sub dword [rax + 0x58], 0x47df50b0
add dword [rax + 0x254], 0x4d71186a
not dword [rax + 0x19c]
sub dword [rax + 0x240], 0x3b536c21
add dword [rax + 0x3d0], 0x6a8b7b69
not dword [rax + 0x2cc]
xor dword [rax + 0x274], 0x5e5d5018
sub dword [rax + 0x190], 0x219476bd
add dword [rax + 0x2c4], 0x8c144c4
not dword [rax + 0x33c]
sub dword [rax + 0x2f0], 0x4dce479a
not dword [rax + 0x31c]
xor dword [rax + 0x1c8], 0x264e27e5
sub dword [rax + 0xa0], 0x7e9c4913
add dword [rax + 0x32c], 0x4b753de1
sub dword [rax + 0x2dc], 0x270c736a
add dword [rax + 0x12c], 0x428613e9
sub dword [rax + 0x94], 0xe936c91
xor dword [rax + 0x37c], 0x6fc7af5
not dword [rax + 0x11c]
xor dword [rax + 0x9c], 0x4d8e6012
xor dword [rax + 0x250], 0x5f057fa0
xor dword [rax + 0x2d8], 0x250f5409
sub dword [rax + 0x360], 0x195b7b5a
sub dword [rax + 0x170], 0x53f64306
add dword [rax + 0x20c], 0x484e4264
sub dword [rax + 0x238], 0x188a5ec4
not dword [rax + 0x18c]
add dword [rax + 0x1ec], 0x197728ec
not dword [rax + 0x3c4]
not dword [rax + 0x248]
xor dword [rax + 0x64], 0x3c1172fa
not dword [rax + 0x80]
xor dword [rax + 0xb0], 0x6ed55cec
not dword [rax + 0x2ec]
sub dword [rax + 0x184], 0x1ee84419
not dword [rax + 0x2e4]
xor dword [rax + 0x36c], 0xf2f6bf9
not dword [rax + 0x24]
not dword [rax + 0x5c]
add dword [rax + 0xa4], 0x558212fb
xor dword [rax + 0x308], 0x337d1fb6
add dword [rax + 0x304], 0x57292644
add dword [rax + 0x44], 0x25d07272
add dword [rax + 0x120], 0x1d7e2399
xor dword [rax + 0x124], 0x15304f06
not dword [rax + 0x2c8]
xor dword [rax + 0x24c], 0x47f6644a
sub dword [rax + 0x210], 0x35801552
sub dword [rax + 0x150], 0x23360bc8
sub dword [rax + 0x54], 0x29c4176c
sub dword [rax + 0x1b8], 0x4b1354f1
xor dword [rax + 0x1b0], 0x2b6b104c
sub dword [rax + 0x2e0], 0x35332d6
sub dword [rax + 0x17c], 0x4fce0008
not dword [rax + 0x260]
sub dword [rax + 0x140], 0x5ba24c1a
xor dword [rax + 0x13c], 0x2c07092d
sub dword [rax + 0x60], 0x79a77aaf
sub dword [rax + 0x14], 0xb212ca9
not dword [rax + 0x38]
sub dword [rax + 0x290], 0x72f74f79
xor dword [rax + 0x18], 0x29f24b51
xor dword [rax + 0x180], 0x44370131
not dword [rax + 0x218]
not dword [rax + 0x244]
not dword [rax + 0x2c0]
not dword [rax + 0x3e4]
add dword [rax + 0x8c], 0x6ee3062d
add rdi, 0x400
add rax, 0x400
cmp rdi, 0x8c000
jne 0x14033b02e
pop rcx
call fcn.140339f06
mov rsp, rbp
pop rbp
pop r15
pop r14
pop r13
pop r12
pop r11
pop r10
pop r9
pop r8
pop rdi
pop rsi
pop rbp
pop rbx
pop rdx
pop rcx
pop rax