Function at 0x10009a904
Capabilities:
Allocate or change rwx memory
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xc0
mov rax, qword [0x100347ae0]
xor rax, rsp
mov qword [rsp + 0xb8], rax
lea rax, [0x100000000]
mov qword [rsp + 0x80], rdx
lea r11, [0x100000000]
lea r12, [rcx + 0x18]
mov qword [rsp + 0x90], rcx
mov ecx, 0xfffffff
mov r13, qword [r12]
mov ebp, dword [r13 + 5]
mov edx, dword [r13 + 1]
mov qword [rsp + 0x98], r12
shr rdx, 2
and rbp, rcx
add rbp, rax
and rdx, rcx
mov eax, dword [0x1000d5e38]
mov rcx, rax
mov qword [rsp + 0x88], rbp
lea rsi, [rax + rdx - 1]
mov rax, rsi
xor edx, edx
div rcx
sub rsi, rdx
mov eax, dword [0x1000d5e38]
xor r15d, r15d
mov eax, dword [0x1000d5e38]
mov eax, dword [0x100172988]
mov r10d, dword [0x100172988]
cmp eax, r15d
je 0x10009aa51
mov r8, r15
mov rax, r15
mov edi, dword [0x100172988]
dec edi
inc rdi
mov r9, rdi
cmp rdi, r15
je 0x10009aa0a
mov rcx, qword [0x100346e50]
imul rcx, rcx, 0x343fd
shl rax, 0x10
shr r9, 0x10
add rcx, 0x269ec3
mov rdx, rcx
shr rdx, 0x10
movzx edx, dx
or rax, rdx
cmp r9, r15
jne 0x10009a9db
mov qword [0x100346e50], rcx
xor edx, edx
div rdi
cmp r10, r15
jbe 0x10009aa45
mov ecx, 0xffff349a
inc r8
mov eax, 0xcb65
lock cmpxchg dword [r11 + rdx*4 + 0x349c90], ecx
je 0x10009ad26
mov ecx, dword [0x100172988]
lea rax, [rdx + 1]
xor edx, edx
div rcx
cmp r8, r10
jb 0x10009aa14
mov rbx, r15
cmp rbx, r15
jne 0x10009ab84
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
mov rdi, r15
mov rax, r15
inc rdi
mov rcx, qword [0x100348890]
mov r9, rcx
mov r8, rcx
cmp rcx, r15
je 0x10009aaab
mov rcx, qword [0x100346e50]
imul rcx, rcx, 0x343fd
shl rax, 0x10
shr r9, 0x10
add rcx, 0x269ec3
mov rdx, rcx
shr rdx, 0x10
movzx edx, dx
or rax, rdx
cmp r9, r15
jne 0x10009aa7c
mov qword [0x100346e50], rcx
xor edx, edx
div r8
mov r9d, 0x40
mov rcx, rdx
shl rcx, 0x10
add rcx, qword [0x1003475b0]
mov rdx, rsi
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rbx, rax
cmp rax, r15
je 0x10009ab18
mov rcx, rax
mov qword [rsp + 0x28], r15
or rcx, 3
mov rdx, rax
mov qword [rsp + 0x20], r15
mov r8d, esi
lea r9, [0x1002af874]
call qword [sym.imp.ntdll.dll_RtlInstallFunctionTableCallback]
movzx edx, al
cmp edx, r15d
jne 0x10009ab2d
mov rcx, rbx
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp rdi, 0x11
jb 0x10009aa5d
mov rbx, r15
cmp rbx, 0x10000
jb 0x10009ab3b
test bl, 3
je 0x10009ab61
cmp rbx, r15
je 0x10009ab5e
mov rcx, rbx
or rcx, 3
call qword [sym.imp.ntdll.dll_RtlDeleteFunctionTable]
mov rcx, rbx
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rbx, r15
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea r11, [0x100000000]
cmp rbx, r15
je 0x10009a99f
xor eax, eax
mov rdi, rbx
mov rcx, rsi
rep stosb byte [rdi], al
mov eax, 0xb266cbc5
mov esi, ebp
add qword [r12], 9
lea rax, [0x100000000]
mov r8d, dword [0x1000d5e38]
mov r13d, dword [r13 + 1]
shr r13, 2
and r13d, 0xfffffff
mov qword [rsp + 0xa0], r13
sub esi, eax
mov rax, r15
mov dword [rsp + 0x50], esi
sub r8, r13
inc r8
mov rdi, r8
cmp r8, r15
je 0x10009ac02
mov rcx, qword [0x100346e50]
imul rcx, rcx, 0x343fd
shl rax, 0x10
shr rdi, 0x10
add rcx, 0x269ec3
mov rdx, rcx
shr rdx, 0x10
movzx edx, dx
or rax, rdx
cmp rdi, r15
jne 0x10009abd3
mov qword [0x100346e50], rcx
xor edx, edx
mov ecx, esi
div r8
lea r14, [rdx + rbx]
mov qword [rsp + 0x78], r14
mov rdx, r13
mov r8, r14
mov eax, 0x974c24d5
lea rcx, [rsp + 0x70]
mov dil, r15b
mov rdx, qword [r13 + rbp]
mov qword [rsp + 0x70], rdx
mov eax, 0x78c4899c
mov eax, 0xfffffff
lea rdx, [0x100000000]
mov rcx, rdx
mov r9d, dword [rsp + 0x74]
mov rbx, qword [rsp + 0x70]
and rbx, rax
and r9, rax
mov rax, qword [0x100037580]
mov qword [rsp + 0x48], r15
add rbx, rdx
mov r15d, 4
sub rcx, rax
mov qword [rsp + 0x30], rcx
jne 0x10009ad3d
xor r10d, r10d
test r9, r9
je 0x10009b122
mov r8d, dword [rsp + 0x48]
mov eax, dword [rsp + 0x4c]
movzx ecx, byte [r10 + rbx]
inc r10
add ecx, 0x2becbda7
add r8d, ecx
add ecx, eax
mov eax, ecx
imul eax, eax, 0x70ec
rol eax, 7
ror ecx, 7
xor eax, ecx
imul rax, rax, 0x2becbda7
mov qword [rsp + 0x30], rax
shr rax, 0x20
mov ecx, dword [rsp + 0x30]
lea edx, [rcx + rax*2 - 0x7fffffff]
sar ecx, 0x1f
btr ecx, 0x1f
sub edx, ecx
mov eax, edx
sar eax, 0x1f
btr eax, 0x1f
add eax, edx
imul rax, rax, 0x2becbda7
mov qword [rsp + 0x30], rax
shr rax, 0x20
mov ecx, dword [rsp + 0x30]
lea edx, [rcx + rax*2 - 0x7fffffff]
sar ecx, 0x1f
btr ecx, 0x1f
sub edx, ecx
mov eax, edx
sar eax, 0x1f
btr eax, 0x1f
add eax, edx
add r8d, eax
cmp r10, r9
jb 0x10009ac8b
mov dword [rsp + 0x4c], eax
mov dword [rsp + 0x48], r8d
jmp 0x10009b122
mov ecx, dword [0x1000d5e38]
imul rcx, rdx
lea rbx, [rcx + r11 + 0x313000]
jmp 0x10009aa48
lea rax, [rbx + r9]
movsxd rcx, dword [0x10000003c]
mov r8d, dword [rcx + rdx + 0xb0]
mov qword [rsp + 0xa8], rax
mov eax, ebx
sub eax, edx
lea r14, [rax + r9]
mov r11d, eax
add r8, rdx
mov r10d, eax
and r10, 0xfffffffffffff000
mov edx, dword [rcx + rdx + 0xb4]
mov rcx, r14
and rcx, 0xfffffffffffff000
mov qword [rsp + 0x40], rcx
sub r11, r10
sub r14, rcx
add rdx, r8
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x60], r14
jmp 0x10009adaa
mov eax, dword [r8]
cmp rax, r10
jae 0x10009adaf
mov eax, dword [r8 + 4]
add r8, rax
cmp r8, rdx
jne 0x10009ad9b
xor esi, esi
cmp r8, rdx
je 0x10009adf2
mov eax, dword [r8]
cmp rax, r10
jne 0x10009adf2
mov ecx, dword [r8 + 4]
sub rcx, 8
shr rcx, 1
je 0x10009aded
lea rdx, [r8 + 8]
movzx eax, word [rdx]
and eax, 0xfff
cmp rax, r11
jae 0x10009ade8
inc rsi
add rdx, 2
cmp rsi, rcx
jne 0x10009adcf
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x40]
mov r13, qword [rsp + 0x30]
mov r11d, dword [rsp + 0x48]
lea rbp, [0x100000000]
mov r9d, dword [rsp + 0x4c]
cmp r8, rdx
je 0x10009b04e
mov eax, dword [r8]
cmp rax, rcx
ja 0x10009b04e
mov edi, dword [r8 + 4]
lea rax, [rdi - 8]
shr rax, 1
cmp rsi, rax
jne 0x10009ae49
add r8, rdi
cmp r8, rdx
je 0x10009b04e
mov eax, dword [r8]
cmp rax, rcx
ja 0x10009b04e
xor esi, esi
jmp 0x10009ae1d
mov eax, dword [r8]
cmp rax, rcx
jne 0x10009ae65
movzx eax, word [r8 + rsi*2 + 8]
and eax, 0xfff
cmp rax, r14
jae 0x10009b04e
mov edi, 0xf000
mov rax, rsi
inc rsi
test word [r8 + rax*2 + 8], di
je 0x10009ae08
xor r12d, r12d
movzx r10d, word [r8 + rax*2 + 8]
mov r14d, r10d
and r14d, 0xfff
add r14d, dword [r8]
add r14, rbp
mov rax, r14
sub rax, rbx
je 0x10009af3c
mov rdi, rax
movzx ecx, byte [rbx + r12]
inc r12
add ecx, 0x2becbda7
add r11d, ecx
add ecx, r9d
mov eax, ecx
imul eax, eax, 0x70ec
rol eax, 7
ror ecx, 7
xor eax, ecx
imul rax, rax, 0x2becbda7
mov qword [rsp + 0x58], rax
shr rax, 0x20
mov ecx, dword [rsp + 0x58]
lea edx, [rcx + rax*2 - 0x7fffffff]
sar ecx, 0x1f
btr ecx, 0x1f
sub edx, ecx
mov eax, edx
sar eax, 0x1f
btr eax, 0x1f
add eax, edx
imul rax, rax, 0x2becbda7
mov qword [rsp + 0x58], rax
mov ecx, dword [rsp + 0x58]
shr rax, 0x20
lea edx, [rcx + rax*2 - 0x7fffffff]
sar ecx, 0x1f
btr ecx, 0x1f
sub edx, ecx
mov r9d, edx
sar r9d, 0x1f
btr r9d, 0x1f
add r9d, edx
add r11d, r9d
cmp r12, rdi
jb 0x10009aea0
mov dword [rsp + 0x4c], r9d
mov dword [rsp + 0x48], r11d
shr r10d, 0xc
mov rax, qword [r14]
cmp r10d, 3
mov qword [rsp + 0x58], rax
je 0x10009af5c
sub r10d, 0xa
neg r10d
sbb edx, edx
add edx, 3
jmp 0x10009af61
mov edx, 2
mov r10, r13
neg r10
sub edx, 2
je 0x10009af87
cmp edx, 1
je 0x10009af77
or r10, 0xffffffffffffffff
jmp 0x10009af8f
add rax, r10
mov r10d, 8
mov qword [rsp + 0x58], rax
jmp 0x10009af8f
add dword [rsp + 0x58], r10d
mov r10, r15
xor ebx, ebx
test r10, r10
je 0x10009b036
movzx ecx, byte [rsp + rbx + 0x58]
inc rbx
add ecx, 0x2becbda7
add r11d, ecx
add ecx, r9d
mov eax, ecx
imul eax, eax, 0x70ec
rol eax, 7
ror ecx, 7
xor eax, ecx
imul rax, rax, 0x2becbda7
mov qword [rsp + 0x30], rax
mov ecx, dword [rsp + 0x30]
shr rax, 0x20
lea edx, [rcx + rax*2 - 0x7fffffff]
sar ecx, 0x1f
btr ecx, 0x1f
sub edx, ecx
mov eax, edx
sar eax, 0x1f
btr eax, 0x1f
add eax, edx
imul rax, rax, 0x2becbda7
mov qword [rsp + 0x30], rax
shr rax, 0x20
mov ecx, dword [rsp + 0x30]
lea edx, [rcx + rax*2 - 0x7fffffff]
sar ecx, 0x1f
btr ecx, 0x1f
sub edx, ecx
mov r9d, edx
sar r9d, 0x1f
btr r9d, 0x1f
add r9d, edx
add r11d, r9d
cmp rbx, r10
jb 0x10009af9a
mov dword [rsp + 0x4c], r9d
mov dword [rsp + 0x48], r11d
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x40]
lea rbx, [r10 + r14]
mov r14, qword [rsp + 0x60]
jmp 0x10009ae08
mov r13, qword [rsp + 0xa0]
mov r10, qword [rsp + 0xa8]
xor r8d, r8d
mov r12, qword [rsp + 0x98]
mov dil, r8b
mov rbp, qword [rsp + 0x88]
sub r10, rbx
je 0x10009b119
movzx ecx, byte [rbx + r8]
inc r8
add ecx, 0x2becbda7
add r11d, ecx
add ecx, r9d
mov eax, ecx
imul eax, eax, 0x70ec
rol eax, 7
ror ecx, 7
xor eax, ecx
imul rax, rax, 0x2becbda7
mov qword [rsp + 0x30], rax
shr rax, 0x20
mov ecx, dword [rsp + 0x30]
lea edx, [rcx + rax*2 - 0x7fffffff]
sar ecx, 0x1f
btr ecx, 0x1f
sub edx, ecx
mov eax, edx
sar eax, 0x1f
btr eax, 0x1f
add eax, edx
imul rax, rax, 0x2becbda7
mov qword [rsp + 0x30], rax
shr rax, 0x20
mov ecx, dword [rsp + 0x30]
lea edx, [rcx + rax*2 - 0x7fffffff]
sar ecx, 0x1f
btr ecx, 0x1f
sub edx, ecx
mov r9d, edx
sar r9d, 0x1f
btr r9d, 0x1f
add r9d, edx
add r11d, r9d
cmp r8, r10
jb 0x10009b07d
mov dword [rsp + 0x4c], r9d
mov dword [rsp + 0x48], r11d
mov r14, qword [rsp + 0x78]
mov esi, dword [rsp + 0x50]
xor ecx, ecx
mov rax, rcx
inc rcx
and eax, 7
mov al, byte [rsp + rax + 0x48]
mov byte [rsp + rcx + 0xaf], al
cmp rcx, 8
jb 0x10009b124
mov eax, 0xdf483b71
mov rax, qword [rsp + 0xb0]
mov r10, rbp
mov qword [rsp + 0x40], r14
mov r11, r14
mov qword [rsp + 0x30], rbp
mov r14, r13
and r14d, 7
je 0x10009b620
xor r8d, r8d
xor r11d, r11d
mov ebx, esi
and dword [rsp + 0x68], r8d
not ebx
mov dword [rsp + 0x60], r8d
test r14d, r14d
jle 0x10009b1bb
lea r9d, [r8 + 0x38]
cmp r11d, r15d
movzx edx, byte [r10]
jge 0x10009b19a
lea ecx, [r9 - 0x20]
shl edx, cl
or dword [rsp + 0x68], edx
jmp 0x10009b1a2
mov ecx, r9d
shl edx, cl
or r8d, edx
inc r11d
inc r10
sub r9d, 8
cmp r11d, r14d
jl 0x10009b185
mov dword [rsp + 0x60], r8d
mov qword [rsp + 0x30], r10
movzx r10d, word [rsp + 0xb4]
mov ecx, eax
movzx r8d, word [rsp + 0xb6]
movzx r9d, ax
movzx r11d, word [rsp + 0xb2]
mov edx, dword [rsp + 0xb4]
xor edx, esi
sub ecx, edx
xor ebx, ecx
mov ecx, ebx
xor ecx, r11d
mov esi, ebx
rol ecx, 6
ror esi, 0xc
imul ecx, r10d
xor esi, ecx
xor esi, dword [rsp + 0x50]
mov ecx, esi
mov edx, esi
sub edx, dword [rsp + 0xb4]
ror edx, 6
rol ecx, 0xf
imul edx, r11d
xor ecx, edx
mov edx, dword [rsp + 0xb4]
xor ebx, ecx
sub edx, ebx
mov ecx, ebx
ror edx, 7
ror ecx, 1
imul edx, r9d
sub edx, ecx
xor esi, edx
mov ecx, esi
mov edx, esi
sub edx, r10d
shr ecx, 5
imul edx, r8d
sub edx, ecx
xor ebx, edx
mov edx, ebx
mov ecx, ebx
xor edx, r8d
rol edx, 4
ror ecx, 4
imul edx, r10d
sub edx, ecx
xor esi, edx
mov ecx, esi
mov edx, dword [rsp + 0xb4]
xor edx, esi
rol edx, 4
ror ecx, 0xd
imul edx, r11d
sub edx, ecx
xor ebx, edx
mov edx, ebx
mov ecx, ebx
xor ecx, r10d
ror edx, 1
imul ecx, r9d
sub ecx, edx
mov edx, eax
xor esi, ecx
mov ecx, esi
sub edx, esi
ror edx, 3
ror ecx, 4
imul edx, r8d
add ecx, edx
xor ebx, ecx
mov ecx, ebx
ror ecx, 0xe
sub ecx, r10d
imul ecx, r9d
xor esi, ecx
mov edx, esi
mov ecx, esi
xor edx, r9d
imul edx, r11d
shr ecx, 6
xor edx, ecx
xor ebx, edx
mov ecx, ebx
xor ebx, dword [rsp + 0x60]
mov r8d, ebx
sub ecx, dword [rsp + 0xb4]
sub ecx, r9d
xor r9d, r9d
xor ecx, dword [rsp + 0x68]
xor esi, ecx
test r14d, r14d
mov edx, esi
jle 0x10009b30a
mov rcx, qword [rsp + 0x40]
cmp r9d, r15d
jge 0x10009b2f0
rol edx, 8
mov byte [rcx], dl
inc rcx
xor dil, dl
jmp 0x10009b2fd
rol r8d, 8
mov byte [rcx], r8b
inc rcx
xor dil, r8b
inc r9d
cmp r9d, r14d
jl 0x10009b2de
mov qword [rsp + 0x40], rcx
lea ecx, [r14 - 4]
test ecx, ecx
jle 0x10009b608
sub r15d, ecx
shl r15d, 3
mov ecx, r15d
shr ebx, cl
shl ebx, cl
mov r11, qword [rsp + 0x40]
mov r14d, dword [rsp + 0x60]
mov r10, qword [rsp + 0x30]
mov r15, r13
shr r15, 3
test r15, r15
je 0x10009b54d
movzx r13d, word [rsp + 0xb4]
mov r12d, dword [rsp + 0x68]
movzx ecx, word [rsp + 0xb6]
mov dword [rsp + 0x40], ecx
movzx ecx, word [rsp + 0xb2]
mov dword [rsp + 0x50], ecx
movzx ecx, ax
mov ebp, ecx
movzx ecx, byte [r10]
movzx r8d, byte [r10 + 4]
mov edx, eax
shl ecx, 8
shl r8d, 8
movzx r9d, byte [r10 + 1]
add r10, 8
or r9d, ecx
movzx ecx, byte [r10 - 6]
shl r9d, 8
or r9d, ecx
shl r9d, 8
movzx ecx, byte [r10 - 5]
or r9d, ecx
movzx ecx, byte [r10 - 3]
or r8d, ecx
movzx ecx, byte [r10 - 2]
xor esi, r9d
shl r8d, 8
or r8d, ecx
movzx ecx, byte [r10 - 1]
shl r8d, 8
or r8d, ecx
mov ecx, dword [rsp + 0xb4]
xor ecx, esi
sub edx, ecx
movzx ecx, word [rsp + 0xb2]
xor edx, r8d
xor ebx, edx
mov edx, ebx
xor edx, ecx
mov ecx, ebx
rol edx, 6
ror ecx, 0xc
imul edx, r13d
xor ecx, edx
xor esi, ecx
mov edx, esi
mov ecx, esi
sub edx, dword [rsp + 0xb4]
ror edx, 6
rol ecx, 0xf
imul edx, dword [rsp + 0x50]
xor ecx, edx
xor ebx, ecx
mov ecx, ebx
mov edx, dword [rsp + 0xb4]
sub edx, ebx
ror edx, 7
ror ecx, 1
imul edx, ebp
sub edx, ecx
movzx ecx, word [rsp + 0xb6]
xor esi, edx
mov edx, esi
sub edx, r13d
imul edx, ecx
mov ecx, esi
shr ecx, 5
sub edx, ecx
movzx ecx, word [rsp + 0xb6]
xor ebx, edx
mov edx, ebx
xor edx, ecx
rol edx, 4
mov ecx, ebx
ror ecx, 4
imul edx, r13d
sub edx, ecx
xor esi, edx
mov edx, dword [rsp + 0xb4]
xor edx, esi
rol edx, 4
mov ecx, esi
ror ecx, 0xd
imul edx, dword [rsp + 0x50]
sub edx, ecx
xor ebx, edx
mov ecx, ebx
mov edx, ebx
ror edx, 1
xor ecx, r13d
imul ecx, ebp
sub ecx, edx
mov edx, eax
xor esi, ecx
sub edx, esi
mov ecx, esi
ror edx, 3
ror ecx, 4
imul edx, dword [rsp + 0x40]
add ecx, edx
xor ebx, ecx
mov ecx, ebx
ror ecx, 0xe
sub ecx, r13d
imul ecx, ebp
xor esi, ecx
mov edx, esi
xor edx, ebp
movzx ecx, word [rsp + 0xb2]
imul edx, ecx
mov ecx, esi
shr ecx, 6
xor edx, ecx
xor ebx, edx
mov ecx, ebx
xor ebx, r14d
mov r14d, r8d
sub ecx, dword [rsp + 0xb4]
sub ecx, ebp
xor ecx, r12d
xor esi, ecx
mov r12d, r9d
xor dil, sil
mov byte [r11 + 7], bl
mov byte [r11 + 3], sil
ror esi, 8
mov byte [r11 + 2], sil
xor dil, bl
ror ebx, 8
mov byte [r11 + 6], bl
xor dil, sil
ror esi, 8
xor dil, bl
ror ebx, 8
mov byte [r11 + 1], sil
xor dil, sil
mov byte [r11 + 5], bl
ror esi, 8
mov byte [r11], sil
xor dil, bl
ror ebx, 8
mov byte [r11 + 4], bl
add r11, 8
mov cl, bl
xor cl, sil
xor dil, cl
ror esi, 8
ror ebx, 8
sub r15, 1
jne 0x10009b36e
mov rbp, qword [rsp + 0x88]
mov r13, qword [rsp + 0xa0]
mov r12, qword [rsp + 0x98]
cmp dil, byte [r13 + rbp + 8]
je 0x10009b64d
call fcn.1000de678
mov r10, rax
mov r9d, 0xffff
mov r11, qword [rsp + 0x90]
lea r14, [0x100046aec]
mov rax, 0xfffffffffffff000
and r12, 0xfffffffffffffff8
mov qword [r11 + 0x10], r14
mov rcx, qword [0x100346e50]
lea r8, [r12 + 0xfff]
and r10, rax
and r8, rax
xor edi, edi
imul rcx, rcx, 0x343fd
shl rdi, 0x10
shr r9, 0x10
add rcx, 0x269ec3
mov rax, rcx
shr rax, 0x10
movzx edx, ax
or rdi, rdx
test r9, r9
jne 0x10009b59b
movabs rax, 0x8000800080008001
mul rdi
shr rdx, 0xf
mov qword [0x100346e50], rcx
imul rdx, rdx, 0xffff
sub rdi, rdx
mov rax, qword [rsp + 0x80]
inc rdi
mov qword [rax + 0x98], r10
mov qword [rax + 0xb0], rdi
mov qword [rsp + 0x80], r9
jmp 0x10009b643
xor ebx, ebx
test ecx, ecx
jns 0x10009b324
neg ecx
shl ecx, 3
shr esi, cl
shl esi, cl
jmp 0x10009b324
xor ebx, ebx
mov dword [rsp + 0x68], esi
mov r14d, esi
xor esi, esi
not r14d
jmp 0x10009b333
mov rax, qword [rsp + 0x80]
mov qword [r12], rax
add r12, 8
cmp r12, r8
jb 0x10009b633
jmp 0x10009b764
mov rax, qword [0x100037580]
mov r14, qword [rsp + 0x78]
lea r15, [0x100000000]
mov rsi, r15
mov rbx, rbp
sub rbx, r14
sub rsi, rax
jne 0x10009b677
test rbx, rbx
je 0x10009b751
xor edi, edi
mov rcx, qword [0x100021bc8]
mov r11, r14
lea r8d, [rcx - 1]
sub r11, rbp
sub ebp, r15d
lea r12d, [r13 + rbp]
test r8d, r8d
lea r13, [0x100000000]
js 0x10009b6ce
lea eax, [r8 + rdi]
cdq
sub eax, edx
sar eax, 1
movsxd rdx, eax
mov r9d, dword [r13 + rdx*4 + 0x21bcc]
and r9d, 0xfffffff
cmp ebp, r9d
jae 0x10009b6c4
lea r8d, [rax - 1]
jmp 0x10009b6c9
jbe 0x10009b6d3
lea edi, [rax + 1]
cmp r8d, edi
jge 0x10009b69e
movsxd r10, edi
jmp 0x10009b74a
movsxd r10, eax
jmp 0x10009b74a
mov edx, dword [r13 + r10*4 + 0x21bcc]
mov eax, edx
and eax, 0xfffffff
cmp eax, r12d
jae 0x10009b751
mov r8, rdx
mov edi, edx
sar edx, 0x1e
shl edi, 2
and r8d, 0xfffffff
and edx, 3
sar edi, 0x1e
add r8, r15
xor r9d, r9d
and edi, 3
sub edi, 1
je 0x10009b726
sub edi, 1
je 0x10009b721
cmp edi, 1
jne 0x10009b72c
mov r9, rsi
jmp 0x10009b72c
mov r9, rbx
jmp 0x10009b72c
mov r9, rsi
sub r9, rbx
sub edx, 2
je 0x10009b73c
cmp edx, 1
jne 0x10009b747
add qword [r8 + r11], r9
jmp 0x10009b740
add dword [r8 + r11], r9d
mov rcx, qword [0x100021bc8]
inc r10
mov eax, ecx
cmp r10, rax
jb 0x10009b6d8
mov eax, dword [0x1000d5e38]
mov eax, 0x63b2c69a
mov r11, qword [rsp + 0x90]
mov qword [r11 + 0x10], r14
mov rcx, qword [rsp + 0xb8]
xor rcx, rsp
call fcn.1002edf64
mov rbx, qword [rsp + 0x110]
add rsp, 0xc0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret