Function at 0x10001fe88
Capabilities:
Allocate or change rwx memory
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xc0
mov rax, qword [0x1004946a0]
xor rax, rsp
mov qword [rsp + 0xb0], rax
mov eax, dword [0x1002f3aa4]
mov r14d, 0x8000
lea r11, [0x100000000]
mov r15d, 0x269ec3
mov r13d, 0xfffffff
mov rbp, qword [rcx + 0x10]
mov qword [rsp + 0x78], rdx
mov edx, dword [rbp + 5]
mov qword [rsp + 0x90], rcx
and rdx, r13
lea rsi, [rax + rdx - 1]
xor edx, edx
mov rcx, rax
mov rax, rsi
div rcx
sub rsi, rdx
mov eax, dword [0x1002f3aa4]
mov r10d, dword [0x10005e244]
mov eax, dword [0x1002f3aa4]
mov eax, dword [0x10005e244]
test eax, eax
je 0x10001ffa8
mov edi, dword [0x10005e244]
xor r8d, r8d
xor eax, eax
add edi, 0xffffffff
add rdi, 1
mov r9, rdi
je 0x10001ff61
mov rcx, qword [0x100495210]
imul rcx, rcx, 0x343fd
shl rax, 0x10
add rcx, r15
mov rdx, rcx
shr rdx, 0x10
movzx edx, dx
or rax, rdx
shr r9, 0x10
jne 0x10001ff39
mov qword [0x100495210], rcx
xor edx, edx
div rdi
test r10, r10
je 0x10001ff9d
mov ecx, 0xffffc428
add r8, 1
mov eax, 0x3bd7
lock cmpxchg dword [r11 + rdx*4 + 0x478cb0], ecx
je 0x100020264
mov ecx, dword [0x10005e244]
lea rax, [rdx + 1]
xor edx, edx
div rcx
cmp r8, r10
jb 0x10001ff6b
xor ebx, ebx
test rbx, rbx
jne 0x1000200cc
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor edi, edi
mov r12d, eax
add rdi, 1
xor eax, eax
mov rcx, qword [0x10047b438]
mov r9, rcx
test rcx, rcx
mov r8, rcx
je 0x10001fffa
mov rcx, qword [0x100495210]
imul rcx, rcx, 0x343fd
shl rax, 0x10
add rcx, r15
mov rdx, rcx
shr rdx, 0x10
movzx edx, dx
or rax, rdx
shr r9, 0x10
jne 0x10001ffd2
mov qword [0x100495210], rcx
xor edx, edx
mov r9d, 0x40
div r8
mov r8d, 0x3000
mov rcx, rdx
mov rdx, rsi
shl rcx, 0x10
add rcx, qword [0x100493ee0]
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rbx, rax
test rax, rax
je 0x100020065
mov r8d, esi
mov rdx, rax
mov rcx, rax
lea r9, [0x1003c433c]
and qword [rsp + 0x28], 0
and qword [rsp + 0x20], 0
or rcx, 3
call qword [sym.imp.ntdll.dll_RtlInstallFunctionTableCallback]
movzx edx, al
test al, al
jne 0x100020079
xor edx, edx
mov rcx, rbx
mov r8d, r14d
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp rdi, 0x11
jb 0x10001ffb3
xor ebx, ebx
cmp rbx, 0x10000
jb 0x100020087
test bl, 3
je 0x1000200a9
test rbx, rbx
je 0x1000200a7
mov rcx, rbx
or rcx, 3
call qword [sym.imp.ntdll.dll_RtlDeleteFunctionTable]
xor edx, edx
mov rcx, rbx
mov r8d, r14d
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xor ebx, ebx
mov ecx, r12d
call qword [sym.imp.KERNEL32.dll_SetLastError]
test rbx, rbx
lea r11, [0x100000000]
je 0x10001ff00
mov rcx, rsi
xor eax, eax
mov rdi, rbx
rep stosb byte [rdi], al
mov eax, 0x7607cd44
mov dl, byte [rbp + 1]
mov edi, dword [0x1002f3aa4]
mov r15d, dword [rbp + 5]
and r15, r13
and edx, 7
sub rdi, r15
xor eax, eax
lea r12, [rdx + rbp + 9]
lea rbp, [0x100000000]
mov qword [rsp + 0x98], r15
mov esi, r12d
mov qword [rsp + 0x88], r12
sub esi, ebp
add rdi, 1
mov r8, rdi
mov dword [rsp + 0x3c], esi
je 0x10002014a
mov rcx, qword [0x100495210]
imul rcx, rcx, 0x343fd
shl rax, 0x10
add rcx, 0x269ec3
mov rdx, rcx
shr rdx, 0x10
movzx edx, dx
or rax, rdx
shr r8, 0x10
jne 0x10002011e
mov qword [0x100495210], rcx
mov ecx, esi
xor edx, edx
div rdi
add rbx, rdx
mov r8, rbx
mov rdx, r15
mov qword [rsp + 0x80], rbx
mov eax, 0x6f1fc57b
lea rcx, [rsp + 0x70]
mov rdx, qword [r12 + r15]
mov qword [rsp + 0x70], rdx
xor dil, dil
mov eax, 0xd7b8f981
mov r14d, 4
mov r9d, dword [rsp + 0x74]
mov rcx, rbp
mov rax, qword [0x1003f4900]
mov r11, qword [rsp + 0x70]
and qword [rsp + 0x48], 0
and r11, r13
and r9, r13
add r11, rbp
sub rcx, rax
mov qword [rsp + 0x30], rcx
jne 0x10002027b
xor r10d, r10d
test r9, r9
je 0x10002063b
mov r8d, dword [rsp + 0x48]
mov eax, dword [rsp + 0x4c]
mov ebp, 0xf7df258b
movzx ecx, byte [r11 + r10]
add r10, 1
sub ecx, 0x820da75
add r8d, ecx
add ecx, eax
mov eax, ecx
imul eax, eax, 0xa5eb
rol eax, 0xb
ror ecx, 0xb
xor eax, ecx
imul rax, rbp
mov qword [rsp + 0x30], rax
shr rax, 0x20
mov ecx, dword [rsp + 0x30]
lea edx, [rcx + rax*2 - 0x7fffffff]
sar ecx, 0x1f
btr ecx, 0x1f
sub edx, ecx
mov eax, edx
sar eax, 0x1f
btr eax, 0x1f
add eax, edx
imul rax, rbp
mov qword [rsp + 0x30], rax
mov ecx, dword [rsp + 0x30]
shr rax, 0x20
lea edx, [rcx + rax*2 - 0x7fffffff]
sar ecx, 0x1f
btr ecx, 0x1f
sub edx, ecx
mov eax, edx
sar eax, 0x1f
btr eax, 0x1f
add eax, edx
add r8d, eax
cmp r10, r9
jb 0x1000201ce
mov dword [rsp + 0x4c], eax
mov dword [rsp + 0x48], r8d
jmp 0x10002063b
mov ecx, dword [0x1002f3aa4]
imul rcx, rdx
lea rbx, [rcx + r11 + 0x425000]
jmp 0x10001ff9f
lea rax, [r11 + r9]
movsxd rcx, dword [0x10000003c]
mov r8d, dword [rcx + rbp + 0xb0]
add r8, rbp
mov edx, dword [rcx + rbp + 0xb4]
mov qword [rsp + 0x40], rax
mov eax, r11d
sub eax, ebp
mov esi, eax
lea r13, [rax + r9]
mov rcx, r13
mov r10d, eax
and r10, 0xfffffffffffff000
sub rsi, r10
and rcx, 0xfffffffffffff000
sub r13, rcx
add rdx, r8
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x60], r13
jmp 0x1000202e5
mov eax, dword [r8]
cmp rax, r10
jae 0x1000202ea
mov eax, dword [r8 + 4]
add r8, rax
cmp r8, rdx
jne 0x1000202d6
xor ebx, ebx
cmp r8, rdx
je 0x100020324
mov eax, dword [r8]
cmp rax, r10
jne 0x100020324
mov ecx, dword [r8 + 4]
sub rcx, 8
shr rcx, 1
je 0x10002031f
mov ax, word [r8 + rbx*2 + 8]
and eax, 0xfff
cmp rax, rsi
jae 0x10002031f
add rbx, 1
cmp rbx, rcx
jne 0x100020306
mov rcx, qword [rsp + 0x50]
mov esi, dword [rsp + 0x48]
mov r12, qword [rsp + 0x30]
mov ebp, 0xf7df258b
mov r9d, dword [rsp + 0x4c]
cmp r8, rdx
je 0x100020576
mov eax, dword [r8]
cmp rax, rcx
ja 0x100020576
mov edi, dword [r8 + 4]
lea rax, [rdi - 8]
shr rax, 1
cmp rbx, rax
jne 0x100020378
add r8, rdi
cmp r8, rdx
je 0x100020576
mov eax, dword [r8]
cmp rax, rcx
ja 0x100020576
xor ebx, ebx
jmp 0x10002034c
mov eax, dword [r8]
cmp rax, rcx
jne 0x100020394
mov ax, word [r8 + rbx*2 + 8]
and eax, 0xfff
cmp rax, r13
jae 0x100020576
mov rax, rbx
add rbx, 1
test word [r8 + rax*2 + 8], 0xf000
je 0x100020337
movzx r10d, word [r8 + rax*2 + 8]
mov r13d, r10d
xor edi, edi
and r13d, 0xfff
lea rax, [0x100000000]
add r13d, dword [r8]
add r13, rax
mov rax, r13
sub rax, r11
je 0x100020468
mov r15, rax
movzx ecx, byte [r11 + rdi]
add rdi, 1
sub ecx, 0x820da75
add esi, ecx
add ecx, r9d
mov eax, ecx
imul eax, eax, 0xa5eb
rol eax, 0xb
ror ecx, 0xb
xor eax, ecx
imul rax, rbp
mov qword [rsp + 0x58], rax
mov ecx, dword [rsp + 0x58]
shr rax, 0x20
lea edx, [rcx + rax*2 - 0x7fffffff]
sar ecx, 0x1f
btr ecx, 0x1f
sub edx, ecx
mov eax, edx
sar eax, 0x1f
btr eax, 0x1f
add eax, edx
imul rax, rbp
mov qword [rsp + 0x58], rax
shr rax, 0x20
mov ecx, dword [rsp + 0x58]
lea edx, [rcx + rax*2 - 0x7fffffff]
sar ecx, 0x1f
btr ecx, 0x1f
sub edx, ecx
mov r9d, edx
sar r9d, 0x1f
btr r9d, 0x1f
add r9d, edx
add esi, r9d
cmp rdi, r15
jb 0x1000203d3
mov dword [rsp + 0x4c], r9d
mov dword [rsp + 0x48], esi
mov rax, qword [r13]
mov qword [rsp + 0x58], rax
shr r10d, 0xc
cmp r10d, 3
je 0x100020489
sub r10d, 0xa
neg r10d
sbb edx, edx
add edx, 3
jmp 0x10002048e
mov edx, 2
mov r10, r12
neg r10
sub edx, 2
je 0x1000204b4
cmp edx, 1
je 0x1000204a4
or r10, 0xffffffffffffffff
jmp 0x1000204bc
add rax, r10
mov qword [rsp + 0x58], rax
mov r10d, 8
jmp 0x1000204bc
add dword [rsp + 0x58], r10d
mov r10, r14
xor r11d, r11d
test r10, r10
je 0x10002055e
movzx ecx, byte [rsp + r11 + 0x58]
add r11, 1
sub ecx, 0x820da75
add esi, ecx
add ecx, r9d
mov eax, ecx
imul eax, eax, 0xa5eb
rol eax, 0xb
ror ecx, 0xb
xor eax, ecx
imul rax, rbp
mov qword [rsp + 0x30], rax
shr rax, 0x20
mov ecx, dword [rsp + 0x30]
lea edx, [rcx + rax*2 - 0x7fffffff]
sar ecx, 0x1f
btr ecx, 0x1f
sub edx, ecx
mov eax, edx
sar eax, 0x1f
btr eax, 0x1f
add eax, edx
imul rax, rbp
mov qword [rsp + 0x30], rax
mov ecx, dword [rsp + 0x30]
shr rax, 0x20
lea edx, [rcx + rax*2 - 0x7fffffff]
sar ecx, 0x1f
btr ecx, 0x1f
sub edx, ecx
mov r9d, edx
sar r9d, 0x1f
btr r9d, 0x1f
add r9d, edx
add esi, r9d
cmp r11, r10
jb 0x1000204c8
mov dword [rsp + 0x4c], r9d
mov dword [rsp + 0x48], esi
mov rcx, qword [rsp + 0x50]
lea r11, [r10 + r13]
mov r13, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x68]
jmp 0x100020337
mov r12, qword [rsp + 0x88]
xor r8d, r8d
mov r10, qword [rsp + 0x40]
sub r10, r11
mov dil, r8b
mov r15, qword [rsp + 0x98]
je 0x10002062f
movzx ecx, byte [r11 + r8]
add r8, 1
sub ecx, 0x820da75
add esi, ecx
add ecx, r9d
mov eax, ecx
imul eax, eax, 0xa5eb
rol eax, 0xb
ror ecx, 0xb
xor eax, ecx
imul rax, rbp
mov qword [rsp + 0x30], rax
mov ecx, dword [rsp + 0x30]
shr rax, 0x20
lea edx, [rcx + rax*2 - 0x7fffffff]
sar ecx, 0x1f
btr ecx, 0x1f
sub edx, ecx
mov eax, edx
sar eax, 0x1f
btr eax, 0x1f
add eax, edx
imul rax, rbp
mov qword [rsp + 0x30], rax
shr rax, 0x20
mov ecx, dword [rsp + 0x30]
lea edx, [rcx + rax*2 - 0x7fffffff]
sar ecx, 0x1f
btr ecx, 0x1f
sub edx, ecx
mov r9d, edx
sar r9d, 0x1f
btr r9d, 0x1f
add r9d, edx
add esi, r9d
cmp r8, r10
jb 0x10002059a
mov dword [rsp + 0x4c], r9d
mov dword [rsp + 0x48], esi
mov rbx, qword [rsp + 0x80]
mov esi, dword [rsp + 0x3c]
xor ecx, ecx
mov al, cl
add rcx, 1
and eax, 7
cmp rcx, 8
mov al, byte [rsp + rax + 0x48]
mov byte [rsp + rcx + 0xa7], al
jb 0x10002063d
mov eax, 0xd194c53d
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x50], r12
mov ebp, esi
mov r10, r12
mov qword [rsp + 0x30], rbx
mov r13b, r15b
not ebp
xor r11d, r11d
and r13d, 7
je 0x100020b5d
xor r8d, r8d
mov dword [rsp + 0x60], r8d
xor ebx, ebx
mov dword [rsp + 0x40], ebx
test r13d, r13d
jle 0x1000206d6
lea r9d, [r11 + 0x38]
movzx edx, byte [r10]
cmp r11d, r14d
jge 0x1000206af
lea ecx, [r9 - 0x20]
shl edx, cl
or ebx, edx
jmp 0x1000206b7
mov ecx, r9d
shl edx, cl
or r8d, edx
add r11d, 1
add r10, 1
sub r9d, 8
cmp r11d, r13d
jl 0x10002069c
mov dword [rsp + 0x40], ebx
mov dword [rsp + 0x60], r8d
mov qword [rsp + 0x50], r10
mov ecx, esi
movzx r10d, ax
movzx r11d, word [rsp + 0xae]
mov edx, eax
mov r8d, dword [rsp + 0xac]
movzx ebx, r8w
movzx r9d, word [rsp + 0xaa]
ror ecx, 1
xor ecx, r11d
mov esi, ebx
imul ecx, ebx
xor ebp, ecx
xor edx, ebp
mov ecx, ebp
rol edx, 4
rol ecx, 1
imul esi, edx
sub esi, ecx
xor esi, dword [rsp + 0x3c]
mov ecx, r9d
mov edx, esi
add r8d, esi
rol r8d, 7
ror edx, 2
imul ecx, r8d
mov r8d, r9d
add edx, ecx
xor ebp, edx
xor r8d, ebp
rol r8d, 7
mov ecx, r10d
mov edx, ebp
ror edx, 8
imul ecx, r8d
xor edx, ecx
mov ecx, r11d
xor esi, edx
mov r8d, esi
mov edx, esi
sub r8d, eax
rol r8d, 1
rol edx, 8
imul ecx, r8d
mov r8d, dword [rsp + 0xac]
sub ecx, edx
mov edx, r8d
xor ebp, ecx
mov ecx, ebp
sub ecx, ebx
xor ecx, eax
xor esi, ecx
sub edx, esi
mov ecx, esi
ror edx, 0xf
rol ecx, 0xc
imul r9d, edx
xor ecx, r9d
mov edx, r8d
xor ebp, ecx
sub edx, ebp
rol edx, 0xf
mov ecx, ebp
rol ecx, 2
imul edx, r10d
add ecx, edx
xor esi, ecx
mov ecx, esi
mov edx, esi
sub edx, ebx
shr ecx, 0xe
imul edx, r11d
sub edx, ecx
xor ebp, edx
mov ecx, ebp
mov edx, ebp
sub edx, r11d
shr ecx, 0xa
mov r11d, r8d
rol edx, 3
imul edx, ebx
xor edx, ecx
xor esi, edx
xor r9d, r9d
xor r11d, eax
xor r11d, ebp
xor r11d, esi
mov ecx, r11d
mov ebp, dword [rsp + 0x60]
xor ebx, r11d
xor r11d, ebp
ror ecx, 9
imul ebx, r10d
mov r8d, r11d
xor ecx, ebx
xor ecx, dword [rsp + 0x40]
xor esi, ecx
test r13d, r13d
mov edx, esi
jle 0x10002082d
mov rcx, qword [rsp + 0x30]
cmp r9d, r14d
jge 0x100020811
rol edx, 8
mov byte [rcx], dl
add rcx, 1
xor dil, dl
jmp 0x10002081f
rol r8d, 8
mov byte [rcx], r8b
add rcx, 1
xor dil, r8b
add r9d, 1
cmp r9d, r13d
jl 0x1000207fe
mov qword [rsp + 0x30], rcx
lea ecx, [r13 - 4]
test ecx, ecx
jle 0x100020b44
sub r14d, ecx
shl r14d, 3
mov ecx, r14d
shr r11d, cl
shl r11d, cl
mov r14d, dword [rsp + 0x40]
mov r10, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x30]
mov rcx, r15
shr rcx, 3
mov qword [rsp + 0xa0], rcx
je 0x100020a8a
movzx ecx, word [rsp + 0xaa]
mov r15, qword [rsp + 0xa0]
mov r13d, dword [rsp + 0xac]
movzx edx, word [rsp + 0xae]
mov dword [rsp + 0x68], ecx
mov dword [rsp + 0x60], edx
mov ecx, edx
neg ecx
mov dword [rsp + 0x50], ecx
mov r12d, dword [rsp + 0x50]
mov ecx, r13d
xor ecx, eax
mov dword [rsp + 0x30], ecx
movzx ecx, r13w
mov dword [rsp + 0x40], ecx
movzx ecx, ax
mov dword [rsp + 0x3c], ecx
movzx ecx, byte [r10]
movzx r9d, byte [r10 + 1]
shl ecx, 8
movzx r8d, byte [r10 + 4]
shl r8d, 8
add r10, 8
or r9d, ecx
movzx ecx, byte [r10 - 6]
shl r9d, 8
or r9d, ecx
shl r9d, 8
movzx ecx, byte [r10 - 5]
or r9d, ecx
movzx ecx, byte [r10 - 3]
or r8d, ecx
xor esi, r9d
movzx ecx, byte [r10 - 2]
shl r8d, 8
or r8d, ecx
movzx ecx, byte [r10 - 1]
shl r8d, 8
or r8d, ecx
mov ecx, esi
ror ecx, 1
xor ecx, edx
imul ecx, dword [rsp + 0x40]
mov edx, eax
xor ecx, r8d
xor r11d, ecx
mov ecx, r11d
xor edx, r11d
rol edx, 4
rol ecx, 1
imul edx, dword [rsp + 0x40]
sub edx, ecx
xor esi, edx
lea edx, [r13 + rsi]
mov ecx, esi
rol edx, 7
ror ecx, 2
imul edx, dword [rsp + 0x68]
add ecx, edx
movzx edx, word [rsp + 0xaa]
xor r11d, ecx
xor edx, r11d
rol edx, 7
mov ecx, r11d
ror ecx, 8
imul edx, dword [rsp + 0x3c]
xor ecx, edx
xor esi, ecx
mov ecx, esi
mov edx, esi
sub edx, eax
rol edx, 1
rol ecx, 8
imul edx, dword [rsp + 0x60]
sub edx, ecx
xor r11d, edx
mov edx, r13d
mov ecx, r11d
sub ecx, dword [rsp + 0x40]
xor ecx, eax
xor esi, ecx
mov ecx, esi
sub edx, esi
ror edx, 0xf
rol ecx, 0xc
imul edx, dword [rsp + 0x68]
xor ecx, edx
mov edx, r13d
xor r11d, ecx
mov ecx, r11d
sub edx, r11d
rol edx, 0xf
rol ecx, 2
imul edx, dword [rsp + 0x3c]
add ecx, edx
xor esi, ecx
mov ecx, esi
mov edx, esi
sub edx, dword [rsp + 0x40]
imul edx, dword [rsp + 0x60]
shr ecx, 0xe
sub edx, ecx
xor r11d, edx
lea edx, [r11 + r12]
mov ecx, r11d
shr ecx, 0xa
rol edx, 3
imul edx, dword [rsp + 0x40]
xor edx, ecx
mov ecx, dword [rsp + 0x30]
xor r11d, ecx
xor esi, edx
mov ecx, dword [rsp + 0x40]
xor r11d, esi
mov edx, r11d
xor ecx, r11d
xor r11d, ebp
mov ebp, r8d
ror edx, 9
mov byte [rbx + 7], r11b
imul ecx, dword [rsp + 0x3c]
xor edx, ecx
xor edx, r14d
mov r14d, r9d
xor esi, edx
xor dil, sil
mov edx, dword [rsp + 0x60]
mov byte [rbx + 3], sil
ror esi, 8
xor dil, r11b
mov byte [rbx + 2], sil
ror r11d, 8
mov byte [rbx + 6], r11b
xor dil, sil
ror esi, 8
mov byte [rbx + 1], sil
xor dil, r11b
ror r11d, 8
mov byte [rbx + 5], r11b
xor dil, sil
ror esi, 8
xor dil, r11b
ror r11d, 8
mov cl, r11b
mov byte [rbx], sil
mov byte [rbx + 4], r11b
add rbx, 8
xor cl, sil
xor dil, cl
ror esi, 8
ror r11d, 8
sub r15, 1
jne 0x1000208ba
mov r12, qword [rsp + 0x88]
mov r15, qword [rsp + 0x98]
cmp dil, byte [r15 + r12 + 8]
je 0x100020b7d
call fcn.1002d3e40
mov r11d, 0xffff
lea rbp, [0x1003e8888]
mov r10, rax
mov rbx, qword [rsp + 0x90]
mov qword [rbx + 0x10], rbp
lea r8, [rbx + 0x18]
mov rcx, qword [0x100495210]
and r8, 0xfffffffffffffff8
lea r9, [r8 + 0xfff]
mov rax, 0xfffffffffffff000
and r10, rax
and r9, rax
xor edi, edi
imul rcx, rcx, 0x343fd
shl rdi, 0x10
add rcx, 0x269ec3
mov rax, rcx
shr rax, 0x10
movzx edx, ax
or rdi, rdx
shr r11, 0x10
jne 0x100020adb
mov qword [0x100495210], rcx
movabs rax, 0x8000800080008001
mul rdi
mov rax, qword [rsp + 0x78]
mov qword [rax + 0x98], r10
shr rdx, 0xf
imul rdx, rdx, 0xffff
sub rdi, rdx
add rdi, 1
mov qword [rax + 0xb0], rdi
mov qword [rsp + 0x78], 0
jmp 0x100020b73
xor r11d, r11d
test ecx, ecx
jns 0x100020849
neg ecx
shl ecx, 3
shr esi, cl
shl esi, cl
jmp 0x100020849
mov r14d, esi
xor esi, esi
jmp 0x100020858
mov rax, qword [rsp + 0x78]
mov qword [r8], rax
add r8, 8
cmp r8, r9
jb 0x100020b67
jmp 0x100020c97
lea r14, [0x100000000]
mov rbx, r12
mov rsi, r14
mov rbp, qword [rsp + 0x80]
mov rax, qword [0x1003f4900]
sub rbx, rbp
sub rsi, rax
jne 0x100020baa
test rbx, rbx
je 0x100020c84
mov rcx, qword [0x1000016e8]
xor edi, edi
lea r8d, [rcx - 1]
mov r11, rbp
sub r11, r12
sub r12d, r14d
lea r13d, [r15 + r12]
lea r15, [0x100000000]
test r8d, r8d
js 0x100020c00
lea eax, [r8 + rdi]
cdq
sub eax, edx
sar eax, 1
movsxd rdx, eax
mov r9d, dword [r15 + rdx*4 + 0x16ec]
and r9d, 0xfffffff
cmp r12d, r9d
jae 0x100020bf6
lea r8d, [rax - 1]
jmp 0x100020bfb
jbe 0x100020c05
lea edi, [rax + 1]
cmp r8d, edi
jge 0x100020bd0
movsxd r10, edi
jmp 0x100020c7d
movsxd r10, eax
jmp 0x100020c7d
mov edx, dword [r15 + r10*4 + 0x16ec]
mov eax, edx
and eax, 0xfffffff
cmp eax, r13d
jae 0x100020c84
mov edi, edx
mov r8, rdx
sar edx, 0x1e
shl edi, 2
and r8d, 0xfffffff
and edx, 3
sar edi, 0x1e
add r8, r14
xor r9d, r9d
and edi, 3
sub edi, 1
je 0x100020c58
sub edi, 1
je 0x100020c53
cmp edi, 1
jne 0x100020c5e
mov r9, rsi
jmp 0x100020c5e
mov r9, rbx
jmp 0x100020c5e
mov r9, rsi
sub r9, rbx
sub edx, 2
je 0x100020c6e
cmp edx, 1
jne 0x100020c79
add qword [r8 + r11], r9
jmp 0x100020c72
add dword [r8 + r11], r9d
mov rcx, qword [0x1000016e8]
add r10, 1
mov eax, ecx
cmp r10, rax
jb 0x100020c0a
mov eax, dword [0x1002f3aa4]
mov eax, 0x57afa24b
mov rbx, qword [rsp + 0x90]
mov qword [rbx + 0x10], rbp
mov rcx, qword [rsp + 0xb0]
xor rcx, rsp
call fcn.1002d532c
mov rbx, qword [rsp + 0x110]
add rsp, 0xc0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret