Function at 0x100416e10
Capabilities:
Allocate or change rwx memory
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xb0
mov rax, qword [0x1004c4740]
xor rax, rsp
mov qword [rsp + 0xa0], rax
mov eax, dword [0x1002f8888]
mov r14d, 0x269ec3
mov r13d, 0x8000
lea r11, [0x100000000]
mov rbp, qword [rcx + 0x10]
mov qword [rsp + 0x68], rdx
mov edx, dword [rbp + 1]
shr rdx, 4
lea rsi, [rax + rdx - 1]
mov qword [rsp + 0x80], rcx
xor edx, edx
mov rcx, rax
mov rax, rsi
div rcx
sub rsi, rdx
mov eax, dword [0x1002f8888]
mov eax, dword [0x1002f8888]
mov eax, dword [0x1002a02b4]
mov r10d, dword [0x1002a02b4]
test eax, eax
je 0x100416f2b
xor r8d, r8d
xor eax, eax
mov edi, dword [0x1002a02b4]
dec edi
inc rdi
mov r9, rdi
je 0x100416ee5
mov rcx, qword [0x1004c43a0]
imul rcx, rcx, 0x343fd
shl rax, 0x10
shr r9, 0x10
add rcx, r14
mov rdx, rcx
shr rdx, 0x10
movzx edx, dx
or rax, rdx
test r9, r9
jne 0x100416eba
mov qword [0x1004c43a0], rcx
xor edx, edx
div rdi
test r10, r10
je 0x100416f20
inc r8
mov ecx, 0xffffc428
mov eax, 0x3bd7
lock cmpxchg dword [r11 + rdx*4 + 0x4c5a60], ecx
je 0x1004171b9
lea rax, [rdx + 1]
xor edx, edx
mov ecx, dword [0x1002a02b4]
div rcx
cmp r8, r10
jb 0x100416eef
xor ebx, ebx
test rbx, rbx
jne 0x10041704e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r12d, eax
xor edi, edi
mov rcx, qword [0x1004c4380]
mov r9, rcx
mov r8, rcx
inc rdi
xor eax, eax
test rcx, rcx
je 0x100416f7f
mov rcx, qword [0x1004c43a0]
imul rcx, rcx, 0x343fd
shl rax, 0x10
shr r9, 0x10
add rcx, r14
mov rdx, rcx
shr rdx, 0x10
movzx edx, dx
or rax, rdx
test r9, r9
jne 0x100416f54
mov qword [0x1004c43a0], rcx
mov r9d, 0x40
xor edx, edx
div r8
mov rcx, rdx
shl rcx, 0x10
mov rdx, rsi
mov r8d, 0x3000
add rcx, qword [0x1004c4308]
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rbx, rax
test rax, rax
je 0x100416fe7
mov r8d, esi
mov rcx, rax
and qword [rsp + 0x28], 0
and qword [rsp + 0x20], 0
or rcx, 3
mov rdx, rax
lea r9, [0x100435424]
call qword [sym.imp.ntdll.dll_RtlInstallFunctionTableCallback]
test al, al
jne 0x100416ffb
xor edx, edx
mov r8d, r13d
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp rdi, 0x11
jb 0x100416f36
xor ebx, ebx
cmp rbx, 0x10000
jb 0x100417009
test bl, 3
je 0x10041702b
test rbx, rbx
je 0x100417029
mov rcx, rbx
or rcx, 3
call qword [sym.imp.ntdll.dll_RtlDeleteFunctionTable]
mov r8d, r13d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xor ebx, ebx
mov ecx, r12d
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea r11, [0x100000000]
test rbx, rbx
je 0x100416e83
mov rcx, rsi
mov rdi, rbx
xor eax, eax
rep stosb byte [rdi], al
mov eax, 0x7cc98e1
mov r12d, dword [rbp + 1]
mov rax, r12
shr r12, 4
mov r8d, dword [0x1002f8888]
mov qword [rsp + 0x78], r12
shr rax, 1
lea r13, [0x100000000]
sub r8, r12
and eax, 7
lea rbp, [rax + rbp + 9]
xor eax, eax
mov esi, ebp
mov qword [rsp + 0x88], rbp
sub esi, r13d
inc r8
mov rdi, r8
mov dword [rsp + 0x3c], esi
je 0x1004170cc
mov rcx, qword [0x1004c43a0]
imul rcx, rcx, 0x343fd
shl rax, 0x10
shr rdi, 0x10
add rcx, r14
mov rdx, rcx
shr rdx, 0x10
movzx edx, dx
or rax, rdx
test rdi, rdi
jne 0x1004170a1
mov qword [0x1004c43a0], rcx
mov ecx, esi
xor edx, edx
div r8
add rbx, rdx
mov qword [rsp + 0x60], rbx
mov r8, rbx
mov rdx, r12
mov eax, 0x38c65677
xor dil, dil
mov rdx, qword [r12 + rbp]
mov qword [rsp + 0x70], rdx
lea rcx, [rsp + 0x70]
mov eax, 0x6fccc06a
mov rcx, r13
mov eax, 0xfffffff
mov r14d, 4
mov r9d, dword [rsp + 0x74]
mov r10, qword [rsp + 0x70]
and qword [rsp + 0x40], 0
and r10, rax
and r9, rax
mov rax, qword [0x1000487b8]
add r10, r13
sub rcx, rax
mov qword [rsp + 0x30], rcx
jne 0x1004171d0
xor r11d, r11d
test r9, r9
je 0x1004174ed
mov r8d, dword [rsp + 0x40]
mov esi, 0xd4afbe6b
mov ecx, dword [rsp + 0x44]
movzx eax, byte [r10 + r11]
inc r11
sub eax, 0x2b504195
add r8d, eax
add eax, ecx
imul rax, rsi
mov qword [rsp + 0x30], rax
mov ecx, dword [rsp + 0x30]
shr rax, 0x20
lea edx, [rcx + rax*2 - 0x7fffffff]
sar ecx, 0x1f
btr ecx, 0x1f
sub edx, ecx
mov eax, edx
sar eax, 0x1f
btr eax, 0x1f
add eax, edx
imul rax, rsi
mov qword [rsp + 0x30], rax
mov ecx, dword [rsp + 0x30]
shr rax, 0x20
add ecx, eax
add r8d, ecx
cmp r11, r9
jb 0x100417152
mov dword [rsp + 0x44], ecx
mov dword [rsp + 0x40], r8d
jmp 0x1004174e9
mov ecx, dword [0x1002f8888]
imul rcx, rdx
lea rbx, [rcx + r11 + 0x454000]
jmp 0x100416f22
movsxd rcx, dword [0x10000003c]
mov r8d, dword [rcx + r13 + 0xb0]
mov ecx, dword [rcx + r13 + 0xb4]
add r8, r13
lea rax, [r10 + r9]
mov qword [rsp + 0x90], rax
mov eax, r10d
sub eax, r13d
mov r11d, eax
mov esi, eax
and r11, 0xfffffffffffff000
sub rsi, r11
lea r13, [rax + r9]
mov r15, r13
and r15, 0xfffffffffffff000
sub r13, r15
add rcx, r8
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], r13
jmp 0x10041723a
mov eax, dword [r8]
cmp rax, r11
jae 0x10041723f
mov eax, dword [r8 + 4]
add r8, rax
cmp r8, rcx
jne 0x10041722b
xor ebx, ebx
cmp r8, rcx
je 0x10041727d
mov eax, dword [r8]
cmp rax, r11
jne 0x10041727d
mov ecx, dword [r8 + 4]
sub rcx, 8
shr rcx, 1
je 0x100417278
lea rdx, [r8 + 8]
movzx eax, word [rdx]
and eax, 0xfff
cmp rax, rsi
jae 0x100417278
inc rbx
add rdx, 2
cmp rbx, rcx
jne 0x10041725f
mov rcx, qword [rsp + 0x50]
mov esi, 0xd4afbe6b
mov r9d, dword [rsp + 0x40]
mov edx, dword [rsp + 0x44]
mov rbp, qword [rsp + 0x30]
cmp r8, rcx
je 0x100417462
mov eax, dword [r8]
cmp rax, r15
ja 0x100417462
mov edi, dword [r8 + 4]
lea rax, [rdi - 8]
shr rax, 1
cmp rbx, rax
jne 0x1004172d1
add r8, rdi
cmp r8, rcx
je 0x100417462
mov eax, dword [r8]
cmp rax, r15
ja 0x100417462
xor ebx, ebx
jmp 0x1004172a5
mov eax, dword [r8]
cmp rax, r15
jne 0x1004172ed
movzx eax, word [r8 + rbx*2 + 8]
and eax, 0xfff
cmp rax, r13
jae 0x100417462
mov rax, rbx
mov edi, 0xf000
inc rbx
test word [r8 + rax*2 + 8], di
je 0x100417290
xor edi, edi
movzx r11d, word [r8 + rax*2 + 8]
lea rax, [0x100000000]
mov r13d, r11d
and r13d, 0xfff
add r13d, dword [r8]
add r13, rax
mov rax, r13
sub rax, r10
je 0x10041738c
mov r12, rax
movzx eax, byte [r10 + rdi]
inc rdi
sub eax, 0x2b504195
add r9d, eax
add eax, edx
imul rax, rsi
mov qword [rsp + 0x48], rax
mov ecx, dword [rsp + 0x48]
shr rax, 0x20
lea edx, [rcx + rax*2 - 0x7fffffff]
sar ecx, 0x1f
btr ecx, 0x1f
sub edx, ecx
mov eax, edx
sar eax, 0x1f
btr eax, 0x1f
add eax, edx
imul rax, rsi
mov qword [rsp + 0x48], rax
mov edx, dword [rsp + 0x48]
shr rax, 0x20
add edx, eax
add r9d, edx
cmp rdi, r12
jb 0x10041732a
mov dword [rsp + 0x44], edx
mov dword [rsp + 0x40], r9d
mov rax, qword [r13]
mov qword [rsp + 0x48], rax
shr r11d, 0xc
cmp r11d, 3
je 0x1004173af
sub r11d, 0xa
neg r11d
sbb r10d, r10d
add r10d, 3
jmp 0x1004173b5
mov r10d, 2
mov r11, rbp
neg r11
sub r10d, 2
je 0x1004173dd
cmp r10d, 1
je 0x1004173cd
or r10, 0xffffffffffffffff
jmp 0x1004173e5
add rax, r11
mov qword [rsp + 0x48], rax
mov r10d, 8
jmp 0x1004173e5
add dword [rsp + 0x48], r11d
mov r10, r14
xor r11d, r11d
test r10, r10
je 0x100417450
movzx eax, byte [rsp + r11 + 0x48]
inc r11
sub eax, 0x2b504195
add r9d, eax
add eax, edx
imul rax, rsi
mov qword [rsp + 0x30], rax
shr rax, 0x20
mov ecx, dword [rsp + 0x30]
lea edx, [rcx + rax*2 - 0x7fffffff]
sar ecx, 0x1f
btr ecx, 0x1f
sub edx, ecx
mov eax, edx
sar eax, 0x1f
btr eax, 0x1f
add eax, edx
imul rax, rsi
mov qword [rsp + 0x30], rax
mov edx, dword [rsp + 0x30]
shr rax, 0x20
add edx, eax
add r9d, edx
cmp r11, r10
jb 0x1004173ed
mov dword [rsp + 0x44], edx
mov dword [rsp + 0x40], r9d
mov rcx, qword [rsp + 0x50]
add r10, r13
mov r13, qword [rsp + 0x58]
jmp 0x100417290
mov rbp, qword [rsp + 0x88]
mov r11, qword [rsp + 0x90]
xor r8d, r8d
mov dil, r8b
mov r12, qword [rsp + 0x78]
sub r11, r10
je 0x1004174e4
movzx eax, byte [r8 + r10]
inc r8
sub eax, 0x2b504195
add r9d, eax
add eax, edx
imul rax, rsi
mov qword [rsp + 0x30], rax
shr rax, 0x20
mov ecx, dword [rsp + 0x30]
lea edx, [rcx + rax*2 - 0x7fffffff]
sar ecx, 0x1f
btr ecx, 0x1f
sub edx, ecx
mov eax, edx
sar eax, 0x1f
btr eax, 0x1f
add eax, edx
imul rax, rsi
mov qword [rsp + 0x30], rax
mov edx, dword [rsp + 0x30]
shr rax, 0x20
add edx, eax
add r9d, edx
cmp r8, r11
jb 0x100417482
mov dword [rsp + 0x44], edx
mov dword [rsp + 0x40], r9d
mov rbx, qword [rsp + 0x60]
mov esi, dword [rsp + 0x3c]
xor ecx, ecx
mov rax, rcx
inc rcx
and eax, 7
cmp rcx, 8
mov al, byte [rsp + rax + 0x40]
mov byte [rsp + rcx + 0x97], al
jb 0x1004174ef
mov eax, 0x20c63a77
mov rax, qword [rsp + 0x98]
mov r13, r12
and r13d, 7
mov qword [rsp + 0x30], rbx
mov r15, rbp
mov r10, rbx
je 0x1004179ce
xor r8d, r8d
xor r11d, r11d
xor r10d, r10d
test r13d, r13d
mov dword [rsp + 0x50], r8d
mov ebx, esi
mov dword [rsp + 0x58], r11d
not ebx
jle 0x100417583
lea r9d, [r8 + 0x38]
cmp r10d, r14d
movzx edx, byte [r15]
jge 0x100417562
lea ecx, [r9 - 0x20]
shl edx, cl
or r11d, edx
jmp 0x10041756a
mov ecx, r9d
shl edx, cl
or r8d, edx
inc r10d
inc r15
sub r9d, 8
cmp r10d, r13d
jl 0x10041754e
mov dword [rsp + 0x58], r11d
mov dword [rsp + 0x50], r8d
mov ecx, esi
movzx r11d, word [rsp + 0x9c]
movzx r10d, word [rsp + 0x9e]
sub ecx, eax
movzx r8d, ax
sub ecx, r10d
movzx r9d, word [rsp + 0x9a]
xor ebx, ecx
mov esi, ebx
mov ecx, ebx
xor ecx, r8d
rol ecx, 3
ror esi, 9
imul ecx, r11d
add esi, ecx
xor esi, dword [rsp + 0x3c]
mov edx, esi
mov ecx, esi
xor edx, r10d
shr ecx, 3
rol edx, 6
imul edx, r9d
add edx, ecx
xor ebx, edx
mov edx, dword [rsp + 0x9c]
mov ecx, ebx
xor edx, ebx
ror edx, 0xc
rol ecx, 0xa
imul edx, r8d
xor ecx, edx
mov edx, eax
xor esi, ecx
xor edx, esi
mov ecx, esi
rol edx, 1
rol ecx, 0xf
imul edx, r10d
add ecx, edx
xor ebx, ecx
mov ecx, ebx
not ecx
ror ecx, 0xb
add ecx, r11d
imul ecx, r8d
xor esi, ecx
mov edx, esi
mov ecx, esi
sub edx, r11d
shr ecx, 0xc
imul edx, r9d
sub edx, ecx
xor ebx, edx
mov edx, ebx
sub edx, dword [rsp + 0x9c]
ror edx, 0xa
mov ecx, ebx
ror ecx, 7
imul edx, r8d
add ecx, edx
xor esi, ecx
mov ecx, esi
mov edx, esi
sub edx, eax
ror edx, 0xf
rol ecx, 3
imul edx, r10d
xor ecx, edx
xor ebx, ecx
lea edx, [rbx + rax]
ror edx, 0xd
mov ecx, ebx
ror ecx, 0xb
imul edx, r11d
add ecx, edx
xor esi, ecx
mov ecx, esi
mov edx, esi
xor ecx, r11d
mov r11d, dword [rsp + 0x50]
ror edx, 0xd
imul ecx, r9d
add edx, ecx
mov ecx, eax
xor ebx, edx
mov edx, dword [rsp + 0x9c]
xor r9d, r9d
xor ecx, ebx
xor ebx, r11d
mov r8d, ebx
sub edx, ecx
xor edx, dword [rsp + 0x58]
xor esi, edx
mov edx, esi
test r13d, r13d
jle 0x1004176d0
mov rcx, qword [rsp + 0x30]
cmp r9d, r14d
jge 0x1004176b6
rol edx, 8
mov byte [rcx], dl
inc rcx
xor dil, dl
jmp 0x1004176c3
rol r8d, 8
mov byte [rcx], r8b
inc rcx
xor dil, r8b
inc r9d
cmp r9d, r13d
jl 0x1004176a4
mov qword [rsp + 0x30], rcx
lea ecx, [r13 - 4]
test ecx, ecx
jle 0x1004179b6
sub r14d, ecx
shl r14d, 3
mov ecx, r14d
shr ebx, cl
shl ebx, cl
mov r14d, dword [rsp + 0x58]
mov r10, qword [rsp + 0x30]
mov r13, r12
shr r13, 3
test r13, r13
je 0x1004178fe
movzx ecx, ax
movzx ebp, word [rsp + 0x9c]
movzx edx, word [rsp + 0x9e]
mov dword [rsp + 0x3c], ecx
movzx ecx, word [rsp + 0x9a]
mov dword [rsp + 0x50], edx
mov r12d, dword [rsp + 0x3c]
mov dword [rsp + 0x58], ecx
movzx r9d, byte [r15 + 1]
movzx ecx, byte [r15]
movzx r8d, byte [r15 + 4]
shl ecx, 8
shl r8d, 8
add r15, 8
or r9d, ecx
shl r9d, 8
movzx ecx, byte [r15 - 6]
or r9d, ecx
shl r9d, 8
movzx ecx, byte [r15 - 5]
or r9d, ecx
movzx ecx, byte [r15 - 3]
or r8d, ecx
movzx ecx, byte [r15 - 2]
xor esi, r9d
shl r8d, 8
or r8d, ecx
movzx ecx, byte [r15 - 1]
shl r8d, 8
or r8d, ecx
mov ecx, esi
sub ecx, eax
sub ecx, edx
xor ecx, r8d
xor ebx, ecx
mov edx, ebx
xor edx, r12d
rol edx, 3
mov ecx, ebx
ror ecx, 9
imul edx, ebp
add ecx, edx
xor esi, ecx
movzx ecx, word [rsp + 0x9e]
mov edx, esi
xor edx, ecx
rol edx, 6
movzx ecx, word [rsp + 0x9a]
imul edx, ecx
mov ecx, esi
shr ecx, 3
add edx, ecx
xor ebx, edx
mov edx, dword [rsp + 0x9c]
xor edx, ebx
ror edx, 0xc
mov ecx, ebx
rol ecx, 0xa
imul edx, r12d
xor ecx, edx
mov edx, eax
xor esi, ecx
mov ecx, esi
xor edx, esi
rol edx, 1
rol ecx, 0xf
imul edx, dword [rsp + 0x50]
add ecx, edx
xor ebx, ecx
mov ecx, ebx
not ecx
ror ecx, 0xb
add ecx, ebp
imul ecx, r12d
xor esi, ecx
mov edx, esi
movzx ecx, word [rsp + 0x9a]
sub edx, ebp
imul edx, ecx
mov ecx, esi
shr ecx, 0xc
sub edx, ecx
xor ebx, edx
mov edx, ebx
sub edx, dword [rsp + 0x9c]
mov ecx, ebx
ror edx, 0xa
ror ecx, 7
imul edx, r12d
add ecx, edx
xor esi, ecx
mov edx, esi
mov ecx, esi
sub edx, eax
ror edx, 0xf
rol ecx, 3
imul edx, dword [rsp + 0x50]
xor ecx, edx
xor ebx, ecx
lea edx, [rbx + rax]
mov ecx, ebx
ror edx, 0xd
ror ecx, 0xb
imul edx, ebp
add ecx, edx
xor esi, ecx
mov edx, esi
mov ecx, esi
xor ecx, ebp
ror edx, 0xd
imul ecx, dword [rsp + 0x58]
add edx, ecx
xor ebx, edx
mov ecx, eax
xor ecx, ebx
xor ebx, r11d
mov r11d, r8d
mov edx, dword [rsp + 0x9c]
sub edx, ecx
xor edx, r14d
xor esi, edx
mov r14d, r9d
mov byte [r10 + 7], bl
xor dil, sil
movzx edx, word [rsp + 0x9e]
mov byte [r10 + 3], sil
ror esi, 8
mov byte [r10 + 2], sil
xor dil, bl
ror ebx, 8
mov byte [r10 + 6], bl
xor dil, sil
ror esi, 8
mov byte [r10 + 1], sil
xor dil, bl
ror ebx, 8
xor dil, sil
mov byte [r10 + 5], bl
ror esi, 8
xor dil, bl
mov byte [r10], sil
ror ebx, 8
mov byte [r10 + 4], bl
mov cl, bl
add r10, 8
xor cl, sil
xor dil, cl
ror esi, 8
ror ebx, 8
sub r13, 1
jne 0x100417730
mov rbp, qword [rsp + 0x88]
mov r12, qword [rsp + 0x78]
cmp dil, byte [r12 + rbp + 8]
je 0x1004179f6
call fcn.100058248
lea r13, [0x1001094ec]
mov r10d, 0xffff
mov r11, rax
mov rbx, qword [rsp + 0x80]
lea r8, [rbx + 0x18]
mov rax, 0xfffffffffffff000
and r8, 0xfffffffffffffff8
mov qword [rbx + 0x10], r13
and r11, rax
mov rcx, qword [0x1004c43a0]
lea r9, [r8 + 0xfff]
and r9, rax
xor edi, edi
imul rcx, rcx, 0x343fd
shl rdi, 0x10
shr r10, 0x10
add rcx, 0x269ec3
mov rax, rcx
shr rax, 0x10
movzx edx, ax
or rdi, rdx
test r10, r10
jne 0x10041794f
movabs rax, 0x8000800080008001
mul rdi
shr rdx, 0xf
imul rdx, rdx, 0xffff
mov qword [0x1004c43a0], rcx
sub rdi, rdx
mov rax, qword [rsp + 0x68]
mov qword [rax + 0x98], r11
inc rdi
mov qword [rax + 0xb0], rdi
mov qword [rsp + 0x68], r10
jmp 0x1004179ec
xor ebx, ebx
test ecx, ecx
jns 0x1004176ea
neg ecx
shl ecx, 3
shr esi, cl
shl esi, cl
jmp 0x1004176ea
mov r14d, esi
mov r11d, esi
xor ebx, ebx
xor esi, esi
not r11d
jmp 0x1004176f4
mov rax, qword [rsp + 0x68]
mov qword [r8], rax
add r8, 8
cmp r8, r9
jb 0x1004179e0
jmp 0x100417b0b
mov r13, qword [rsp + 0x60]
mov rbx, rbp
lea r14, [0x100000000]
sub rbx, r13
mov rax, qword [0x1000487b8]
mov rsi, r14
sub rsi, rax
jne 0x100417a20
test rbx, rbx
je 0x100417af8
xor edi, edi
mov rcx, qword [0x1001d1e58]
mov r11, r13
sub r11, rbp
lea r15, [0x100000000]
lea r8d, [rcx - 1]
sub ebp, r14d
add r12d, ebp
test r8d, r8d
js 0x100417a75
lea eax, [r8 + rdi]
cdq
sub eax, edx
sar eax, 1
movsxd rdx, eax
mov r9d, dword [r15 + rdx*4 + 0x1d1e5c]
and r9d, 0xfffffff
cmp ebp, r9d
jae 0x100417a6b
lea r8d, [rax - 1]
jmp 0x100417a70
jbe 0x100417a7a
lea edi, [rax + 1]
cmp r8d, edi
jge 0x100417a45
movsxd r10, edi
jmp 0x100417af1
movsxd r10, eax
jmp 0x100417af1
mov edx, dword [r15 + r10*4 + 0x1d1e5c]
mov eax, edx
and eax, 0xfffffff
cmp eax, r12d
jae 0x100417af8
mov r8, rdx
mov edi, edx
sar edx, 0x1e
shl edi, 2
and r8d, 0xfffffff
and edx, 3
sar edi, 0x1e
add r8, r14
xor r9d, r9d
and edi, 3
sub edi, 1
je 0x100417acd
sub edi, 1
je 0x100417ac8
cmp edi, 1
jne 0x100417ad3
mov r9, rsi
jmp 0x100417ad3
mov r9, rbx
jmp 0x100417ad3
mov r9, rsi
sub r9, rbx
sub edx, 2
je 0x100417ae3
cmp edx, 1
jne 0x100417aee
add qword [r8 + r11], r9
jmp 0x100417ae7
add dword [r8 + r11], r9d
mov rcx, qword [0x1001d1e58]
inc r10
mov eax, ecx
cmp r10, rax
jb 0x100417a7f
mov eax, dword [0x1002f8888]
mov eax, 0xdc35f644
mov rbx, qword [rsp + 0x80]
mov qword [rbx + 0x10], r13
mov rcx, qword [rsp + 0xa0]
xor rcx, rsp
call fcn.10027d5f4
mov rbx, qword [rsp + 0x100]
add rsp, 0xb0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret