Function at 0x100056958
Capabilities:
Allocate or change rwx memory
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xb0
mov rax, qword [0x1004c4740]
xor rax, rsp
mov qword [rsp + 0xa0], rax
mov eax, dword [0x1002f8888]
mov r14d, 0x8000
mov r12, qword [rcx + 0x10]
lea r11, [0x100000000]
mov r13d, 0xfffffff
mov r15d, 0x269ec3
mov qword [rsp + 0x70], rdx
mov edx, dword [r12 + 5]
and rdx, r13
mov qword [rsp + 0x90], rcx
lea rsi, [rax + rdx - 1]
mov rcx, rax
mov rax, rsi
xor edx, edx
div rcx
mov eax, dword [0x1002f8888]
sub rsi, rdx
mov r10d, dword [0x1002a02b4]
mov eax, dword [0x1002f8888]
mov eax, dword [0x1002a02b4]
test eax, eax
je 0x100056a7a
xor r8d, r8d
mov edi, dword [0x1002a02b4]
xor eax, eax
dec edi
inc rdi
mov r9, rdi
je 0x100056a34
mov rcx, qword [0x1004c43a0]
imul rcx, rcx, 0x343fd
shl rax, 0x10
shr r9, 0x10
add rcx, r15
mov rdx, rcx
shr rdx, 0x10
movzx edx, dx
or rax, rdx
test r9, r9
jne 0x100056a09
mov qword [0x1004c43a0], rcx
xor edx, edx
div rdi
test r10, r10
je 0x100056a6f
mov ecx, 0xffffc428
inc r8
mov eax, 0x3bd7
lock cmpxchg dword [r11 + rdx*4 + 0x4c5a60], ecx
je 0x100056cf5
lea rax, [rdx + 1]
mov ecx, dword [0x1002a02b4]
xor edx, edx
div rcx
cmp r8, r10
jb 0x100056a3e
xor ebx, ebx
test rbx, rbx
jne 0x100056b9b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
xor edi, edi
mov rcx, qword [0x1004c4380]
mov r9, rcx
inc rdi
mov r8, rcx
xor eax, eax
test rcx, rcx
je 0x100056acd
mov rcx, qword [0x1004c43a0]
imul rcx, rcx, 0x343fd
shl rax, 0x10
shr r9, 0x10
add rcx, r15
mov rdx, rcx
shr rdx, 0x10
movzx edx, dx
or rax, rdx
test r9, r9
jne 0x100056aa2
mov qword [0x1004c43a0], rcx
mov r9d, 0x40
xor edx, edx
div r8
mov rcx, rdx
mov r8d, 0x3000
shl rcx, 0x10
mov rdx, rsi
add rcx, qword [0x1004c4308]
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rbx, rax
test rax, rax
je 0x100056b35
and qword [rsp + 0x28], 0
lea r9, [0x100435424]
and qword [rsp + 0x20], 0
mov r8d, esi
mov rcx, rax
mov rdx, rax
or rcx, 3
call qword [sym.imp.ntdll.dll_RtlInstallFunctionTableCallback]
test al, al
jne 0x100056b49
mov rcx, rbx
xor edx, edx
mov r8d, r14d
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp rdi, 0x11
jb 0x100056a84
xor ebx, ebx
cmp rbx, 0x10000
jb 0x100056b57
test bl, 3
je 0x100056b79
test rbx, rbx
je 0x100056b77
mov rcx, rbx
or rcx, 3
call qword [sym.imp.ntdll.dll_RtlDeleteFunctionTable]
xor edx, edx
mov r8d, r14d
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xor ebx, ebx
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea r11, [0x100000000]
test rbx, rbx
je 0x1000569d2
mov rcx, rsi
mov rdi, rbx
xor eax, eax
rep stosb byte [rdi], al
mov eax, 0x1823a874
mov edx, dword [r12 + 1]
mov r8d, dword [0x1002f8888]
shr rdx, 2
mov r14d, dword [r12 + 5]
and r14, r13
mov qword [rsp + 0x88], r14
and edx, 7
sub r8, r14
lea rbp, [rdx + r12 + 9]
xor eax, eax
mov esi, ebp
mov qword [rsp + 0x80], rbp
lea r12, [0x100000000]
sub esi, r12d
mov dword [rsp + 0x30], esi
inc r8
mov rdi, r8
je 0x100056c1f
mov rcx, qword [0x1004c43a0]
imul rcx, rcx, 0x343fd
shl rax, 0x10
shr rdi, 0x10
add rcx, r15
mov rdx, rcx
shr rdx, 0x10
movzx edx, dx
or rax, rdx
test rdi, rdi
jne 0x100056bf4
mov qword [0x1004c43a0], rcx
mov ecx, esi
xor edx, edx
div r8
add rbx, rdx
mov qword [rsp + 0x60], rbx
mov rdx, r14
mov r8, rbx
mov eax, 0x4d1b9b0c
lea rcx, [rsp + 0x68]
mov rdx, qword [r14 + rbp]
mov qword [rsp + 0x68], rdx
xor dil, dil
mov eax, 0xe49e0b8
mov rcx, r12
mov r9d, dword [rsp + 0x6c]
mov r10, qword [rsp + 0x68]
mov rax, qword [0x1000487b8]
and qword [rsp + 0x40], 0
and r10, r13
and r9, r13
add r10, r12
mov r13d, 4
sub rcx, rax
mov qword [rsp + 0x58], rcx
jne 0x100056d0c
xor r11d, r11d
test r9, r9
je 0x100056ff3
mov edx, dword [rsp + 0x44]
mov r8d, dword [rsp + 0x40]
mov r12d, 0xdf2e6555
movzx eax, byte [r10 + r11]
inc r11
sub eax, 0x20d19aab
add r8d, eax
add eax, edx
imul rax, r12
mov qword [rsp + 0x38], rax
mov ecx, dword [rsp + 0x38]
shr rax, 0x20
add ecx, eax
mov edx, ecx
imul edx, edx, 0x7b1f
rol edx, 5
ror ecx, 5
xor edx, ecx
imul edx, edx, 0xdf2e6555
ror edx, 0x1f
add r8d, edx
cmp r11, r9
jb 0x100056ca1
mov dword [rsp + 0x44], edx
mov dword [rsp + 0x40], r8d
jmp 0x100056ff3
mov ecx, dword [0x1002f8888]
imul rcx, rdx
lea rbx, [rcx + r11 + 0x454000]
jmp 0x100056a71
lea rax, [r10 + r9]
movsxd rcx, dword [0x10000003c]
mov r8d, dword [rcx + r12 + 0xb0]
add r8, r12
mov ecx, dword [rcx + r12 + 0xb4]
mov qword [rsp + 0x78], rax
mov eax, r10d
sub eax, r12d
lea r15, [rax + r9]
mov r12, r15
mov r11d, eax
mov esi, eax
and r11, 0xfffffffffffff000
sub rsi, r11
and r12, 0xfffffffffffff000
sub r15, r12
add rcx, r8
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x48], r15
jmp 0x100056d73
mov eax, dword [r8]
cmp rax, r11
jae 0x100056d78
mov eax, dword [r8 + 4]
add r8, rax
cmp r8, rcx
jne 0x100056d64
xor ebx, ebx
cmp r8, rcx
je 0x100056db6
mov eax, dword [r8]
cmp rax, r11
jne 0x100056db6
mov ecx, dword [r8 + 4]
sub rcx, 8
shr rcx, 1
je 0x100056db1
lea rdx, [r8 + 8]
movzx eax, word [rdx]
and eax, 0xfff
cmp rax, rsi
jae 0x100056db1
inc rbx
add rdx, 2
cmp rbx, rcx
jne 0x100056d98
mov rcx, qword [rsp + 0x38]
mov rbp, qword [rsp + 0x58]
mov edi, 0xdf2e6555
mov edx, dword [rsp + 0x44]
mov r9d, dword [rsp + 0x40]
cmp r8, rcx
je 0x100056f75
mov eax, dword [r8]
cmp rax, r12
ja 0x100056f75
mov r11d, dword [r8 + 4]
lea rax, [r11 - 8]
shr rax, 1
cmp rbx, rax
jne 0x100056e0a
add r8, r11
cmp r8, rcx
je 0x100056f75
mov eax, dword [r8]
cmp rax, r12
ja 0x100056f75
xor ebx, ebx
jmp 0x100056dde
mov eax, dword [r8]
cmp rax, r12
jne 0x100056e26
movzx eax, word [r8 + rbx*2 + 8]
and eax, 0xfff
cmp rax, r15
jae 0x100056f75
mov r11d, 0xf000
mov rax, rbx
inc rbx
test word [r8 + rax*2 + 8], r11w
je 0x100056dc9
xor r15d, r15d
movzx r11d, word [r8 + rax*2 + 8]
mov esi, r11d
and esi, 0xfff
lea rax, [0x100000000]
add esi, dword [r8]
add rsi, rax
mov rax, rsi
sub rax, r10
je 0x100056eb3
mov r14, rax
movzx eax, byte [r10 + r15]
inc r15
sub eax, 0x20d19aab
add r9d, eax
add eax, edx
imul rax, rdi
mov qword [rsp + 0x50], rax
shr rax, 0x20
mov ecx, dword [rsp + 0x50]
add ecx, eax
mov edx, ecx
imul edx, edx, 0x7b1f
rol edx, 5
ror ecx, 5
xor edx, ecx
imul edx, edx, 0xdf2e6555
ror edx, 0x1f
add r9d, edx
cmp r15, r14
jb 0x100056e64
mov dword [rsp + 0x44], edx
mov dword [rsp + 0x40], r9d
shr r11d, 0xc
cmp r11d, 3
mov rax, qword [rsi]
mov qword [rsp + 0x50], rax
je 0x100056ed5
sub r11d, 0xa
neg r11d
sbb r10d, r10d
add r10d, 3
jmp 0x100056edb
mov r10d, 2
mov r11, rbp
neg r11
sub r10d, 2
je 0x100056f03
cmp r10d, 1
je 0x100056ef3
or r10, 0xffffffffffffffff
jmp 0x100056f0b
add rax, r11
mov r10d, 8
mov qword [rsp + 0x50], rax
jmp 0x100056f0b
mov r10, r13
add dword [rsp + 0x50], r11d
xor r11d, r11d
test r10, r10
je 0x100056f63
movzx eax, byte [rsp + r11 + 0x50]
inc r11
sub eax, 0x20d19aab
add r9d, eax
add eax, edx
imul rax, rdi
mov qword [rsp + 0x58], rax
mov ecx, dword [rsp + 0x58]
shr rax, 0x20
add ecx, eax
mov edx, ecx
imul edx, edx, 0x7b1f
rol edx, 5
ror ecx, 5
xor edx, ecx
imul edx, edx, 0xdf2e6555
ror edx, 0x1f
add r9d, edx
cmp r11, r10
jb 0x100056f13
mov dword [rsp + 0x44], edx
mov dword [rsp + 0x40], r9d
mov rcx, qword [rsp + 0x38]
mov r15, qword [rsp + 0x48]
add r10, rsi
jmp 0x100056dc9
mov r11, qword [rsp + 0x78]
mov r14, qword [rsp + 0x88]
xor r8d, r8d
sub r11, r10
mov dil, r8b
mov rbp, qword [rsp + 0x80]
je 0x100056fea
mov r12d, 0xdf2e6555
movzx eax, byte [r8 + r10]
inc r8
sub eax, 0x20d19aab
add r9d, eax
add eax, edx
imul rax, r12
mov qword [rsp + 0x78], rax
shr rax, 0x20
mov ecx, dword [rsp + 0x78]
add ecx, eax
mov edx, ecx
imul edx, edx, 0x7b1f
rol edx, 5
ror ecx, 5
xor edx, ecx
imul edx, edx, 0xdf2e6555
ror edx, 0x1f
add r9d, edx
cmp r8, r11
jb 0x100056f9b
mov dword [rsp + 0x44], edx
mov dword [rsp + 0x40], r9d
mov rbx, qword [rsp + 0x60]
mov esi, dword [rsp + 0x30]
xor ecx, ecx
mov rax, rcx
inc rcx
and eax, 7
cmp rcx, 8
mov al, byte [rsp + rax + 0x40]
mov byte [rsp + rcx + 0x97], al
jb 0x100056ff5
mov eax, 0x6d3cc849
mov r15, rbp
mov r10, rbx
mov r12, r14
and r12d, 7
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x38], rbx
je 0x100057504
mov ebx, esi
xor r8d, r8d
xor r11d, r11d
mov dword [rsp + 0x58], r8d
mov dword [rsp + 0x48], r11d
not ebx
xor r10d, r10d
test r12d, r12d
jle 0x100057089
lea r9d, [r8 + 0x38]
cmp r10d, r13d
movzx edx, byte [r15]
jge 0x100057068
lea ecx, [r9 - 0x20]
shl edx, cl
or r11d, edx
jmp 0x100057070
mov ecx, r9d
shl edx, cl
or r8d, edx
inc r10d
inc r15
sub r9d, 8
cmp r10d, r12d
jl 0x100057054
mov dword [rsp + 0x48], r11d
mov dword [rsp + 0x58], r8d
movzx r11d, ax
mov ecx, eax
movzx r8d, word [rsp + 0x9a]
xor ecx, ebx
movzx r10d, word [rsp + 0x9e]
mov esi, dword [rsp + 0x9c]
sub esi, ecx
movzx r9d, word [rsp + 0x9c]
xor esi, dword [rsp + 0x30]
mov edx, esi
mov ecx, esi
ror edx, 9
xor ecx, r11d
imul ecx, r10d
add edx, ecx
xor ebx, edx
mov edx, ebx
mov ecx, ebx
ror edx, 5
xor ecx, r10d
imul ecx, r9d
xor edx, ecx
xor esi, edx
mov ecx, esi
sub ecx, r8d
xor ecx, dword [rsp + 0x9c]
xor ebx, ecx
mov ecx, ebx
ror ecx, 7
sub ecx, r11d
imul ecx, r8d
xor esi, ecx
mov ecx, esi
mov edx, esi
sub edx, eax
ror edx, 7
rol ecx, 4
imul edx, r10d
sub edx, ecx
xor ebx, edx
mov ecx, ebx
mov edx, ebx
xor edx, r8d
rol edx, 6
ror ecx, 0xf
imul edx, r9d
sub edx, ecx
xor esi, edx
mov ecx, esi
mov edx, dword [rsp + 0x9c]
sub edx, esi
ror edx, 4
ror ecx, 2
imul edx, r8d
add ecx, edx
mov edx, dword [rsp + 0x9c]
xor ebx, ecx
xor edx, ebx
mov ecx, ebx
ror edx, 7
ror ecx, 0x10
imul edx, r11d
xor ecx, edx
mov edx, eax
xor esi, ecx
mov ecx, esi
sub edx, esi
ror edx, 6
rol ecx, 0xe
imul edx, r10d
sub edx, ecx
xor ebx, edx
mov ecx, ebx
sub ecx, eax
sub ecx, r9d
xor esi, ecx
mov edx, esi
mov ecx, esi
xor edx, r10d
imul edx, r8d
shr ecx, 0xb
xor edx, ecx
xor ebx, edx
mov ecx, ebx
mov edx, ebx
sub edx, r9d
shr ecx, 3
xor r9d, r9d
rol edx, 4
imul edx, r11d
mov r11d, dword [rsp + 0x58]
xor edx, ecx
xor ebx, r11d
xor edx, dword [rsp + 0x48]
mov r8d, ebx
xor esi, edx
test r12d, r12d
mov edx, esi
jle 0x1000571e2
mov rcx, qword [rsp + 0x38]
cmp r9d, r13d
jge 0x1000571c8
rol edx, 8
mov byte [rcx], dl
inc rcx
xor dil, dl
jmp 0x1000571d5
rol r8d, 8
mov byte [rcx], r8b
inc rcx
xor dil, r8b
inc r9d
cmp r9d, r12d
jl 0x1000571b6
mov qword [rsp + 0x38], rcx
lea ecx, [r12 - 4]
test ecx, ecx
jle 0x1000574ec
sub r13d, ecx
shl r13d, 3
mov ecx, r13d
shr ebx, cl
shl ebx, cl
mov r10, qword [rsp + 0x38]
mov r13d, dword [rsp + 0x48]
mov r12, r14
shr r12, 3
test r12, r12
je 0x100057434
movzx ebp, word [rsp + 0x9c]
movzx ecx, word [rsp + 0x9e]
mov dword [rsp + 0x48], ecx
movzx ecx, word [rsp + 0x9a]
mov dword [rsp + 0x38], ecx
movzx ecx, word [rsp + 0x9c]
neg ecx
mov dword [rsp + 0x58], ecx
mov r14d, dword [rsp + 0x58]
movzx ecx, ax
mov dword [rsp + 0x30], ecx
movzx r9d, byte [r15 + 1]
mov edx, dword [rsp + 0x9c]
movzx ecx, byte [r15]
shl ecx, 8
movzx r8d, byte [r15 + 4]
shl r8d, 8
or r9d, ecx
movzx ecx, byte [r15 + 2]
add r15, 8
shl r9d, 8
or r9d, ecx
shl r9d, 8
movzx ecx, byte [r15 - 5]
or r9d, ecx
movzx ecx, byte [r15 - 3]
or r8d, ecx
movzx ecx, byte [r15 - 2]
shl r8d, 8
or r8d, ecx
shl r8d, 8
movzx ecx, byte [r15 - 1]
or r8d, ecx
xor ebx, r8d
mov ecx, eax
xor ecx, ebx
sub edx, ecx
xor edx, r9d
xor esi, edx
mov edx, esi
mov ecx, esi
xor ecx, dword [rsp + 0x30]
ror edx, 9
imul ecx, dword [rsp + 0x48]
add edx, ecx
xor ebx, edx
mov ecx, ebx
xor ecx, dword [rsp + 0x48]
mov edx, ebx
ror edx, 5
imul ecx, ebp
xor edx, ecx
xor esi, edx
mov ecx, esi
movzx edx, word [rsp + 0x9a]
sub ecx, edx
xor ecx, dword [rsp + 0x9c]
xor ebx, ecx
mov ecx, ebx
ror ecx, 7
sub ecx, dword [rsp + 0x30]
imul ecx, edx
xor esi, ecx
mov edx, esi
sub edx, eax
mov ecx, esi
ror edx, 7
rol ecx, 4
imul edx, dword [rsp + 0x48]
sub edx, ecx
xor ebx, edx
movzx ecx, word [rsp + 0x9a]
mov edx, ebx
xor edx, ecx
mov ecx, ebx
rol edx, 6
ror ecx, 0xf
imul edx, ebp
sub edx, ecx
xor esi, edx
mov edx, dword [rsp + 0x9c]
sub edx, esi
mov ecx, esi
ror edx, 4
ror ecx, 2
imul edx, dword [rsp + 0x38]
add ecx, edx
xor ebx, ecx
mov ecx, ebx
mov edx, dword [rsp + 0x9c]
xor edx, ebx
ror edx, 7
imul edx, dword [rsp + 0x30]
ror ecx, 0x10
xor ecx, edx
xor esi, ecx
mov ecx, esi
mov edx, eax
sub edx, esi
ror edx, 6
rol ecx, 0xe
imul edx, dword [rsp + 0x48]
sub edx, ecx
xor ebx, edx
mov ecx, ebx
sub ecx, eax
sub ecx, ebp
xor esi, ecx
movzx ecx, word [rsp + 0x9e]
mov edx, esi
xor edx, ecx
movzx ecx, word [rsp + 0x9a]
imul edx, ecx
mov ecx, esi
shr ecx, 0xb
xor edx, ecx
xor ebx, edx
lea edx, [rbx + r14]
mov ecx, ebx
shr ecx, 3
xor ebx, r11d
mov r11d, r8d
rol edx, 4
mov byte [r10 + 7], bl
imul edx, dword [rsp + 0x30]
xor edx, ecx
xor edx, r13d
xor esi, edx
xor dil, sil
mov r13d, r9d
mov byte [r10 + 3], sil
ror esi, 8
xor dil, bl
ror ebx, 8
xor dil, sil
mov byte [r10 + 2], sil
mov byte [r10 + 6], bl
ror esi, 8
xor dil, bl
mov byte [r10 + 1], sil
ror ebx, 8
mov byte [r10 + 5], bl
xor dil, sil
ror esi, 8
mov byte [r10], sil
xor dil, bl
ror ebx, 8
mov byte [r10 + 4], bl
mov cl, bl
add r10, 8
xor cl, sil
xor dil, cl
ror esi, 8
ror ebx, 8
sub r12, 1
jne 0x100057251
mov r14, qword [rsp + 0x88]
mov rbp, qword [rsp + 0x80]
cmp dil, byte [r14 + rbp + 8]
je 0x10005752c
call fcn.100058248
lea r12, [0x1001094ec]
mov r11, rax
mov rax, 0xfffffffffffff000
mov rbx, qword [rsp + 0x90]
mov r10d, 0xffff
mov qword [rbx + 0x10], r12
mov rcx, qword [0x1004c43a0]
lea r8, [rbx + 0x18]
and r8, 0xfffffffffffffff8
lea r9, [r8 + 0xfff]
and r11, rax
and r9, rax
xor edi, edi
imul rcx, rcx, 0x343fd
shl rdi, 0x10
shr r10, 0x10
add rcx, 0x269ec3
mov rax, rcx
shr rax, 0x10
movzx edx, ax
or rdi, rdx
test r10, r10
jne 0x100057485
movabs rax, 0x8000800080008001
mul rdi
mov qword [0x1004c43a0], rcx
shr rdx, 0xf
imul rdx, rdx, 0xffff
sub rdi, rdx
mov rax, qword [rsp + 0x70]
mov qword [rax + 0x98], r11
inc rdi
mov qword [rax + 0xb0], rdi
mov qword [rsp + 0x70], r10
jmp 0x100057522
xor ebx, ebx
test ecx, ecx
jns 0x1000571fd
neg ecx
shl ecx, 3
shr esi, cl
shl esi, cl
jmp 0x1000571fd
mov r13d, esi
xor ebx, ebx
mov r11d, esi
not r11d
xor esi, esi
jmp 0x100057207
mov rax, qword [rsp + 0x70]
mov qword [r8], rax
add r8, 8
cmp r8, r9
jb 0x100057516
jmp 0x100057642
mov rbx, rbp
lea r15, [0x100000000]
mov rax, qword [0x1000487b8]
mov rsi, r15
mov r12, qword [rsp + 0x60]
sub rbx, r12
sub rsi, rax
jne 0x100057556
test rbx, rbx
je 0x10005762f
mov r11, r12
xor edi, edi
mov rcx, qword [0x1001d1e58]
sub r11, rbp
lea r8d, [rcx - 1]
sub ebp, r15d
lea r13d, [r14 + rbp]
test r8d, r8d
lea r14, [0x100000000]
js 0x1000575ac
lea eax, [r8 + rdi]
cdq
sub eax, edx
sar eax, 1
movsxd rdx, eax
mov r9d, dword [r14 + rdx*4 + 0x1d1e5c]
and r9d, 0xfffffff
cmp ebp, r9d
jae 0x1000575a2
lea r8d, [rax - 1]
jmp 0x1000575a7
jbe 0x1000575b1
lea edi, [rax + 1]
cmp r8d, edi
jge 0x10005757c
movsxd r10, edi
jmp 0x100057628
movsxd r10, eax
jmp 0x100057628
mov edx, dword [r14 + r10*4 + 0x1d1e5c]
mov eax, edx
and eax, 0xfffffff
cmp eax, r13d
jae 0x10005762f
mov edi, edx
mov r8, rdx
sar edx, 0x1e
shl edi, 2
and r8d, 0xfffffff
and edx, 3
sar edi, 0x1e
add r8, r15
xor r9d, r9d
and edi, 3
sub edi, 1
je 0x100057604
sub edi, 1
je 0x1000575ff
cmp edi, 1
jne 0x10005760a
mov r9, rsi
jmp 0x10005760a
mov r9, rbx
jmp 0x10005760a
mov r9, rsi
sub r9, rbx
sub edx, 2
je 0x10005761a
cmp edx, 1
jne 0x100057625
add qword [r8 + r11], r9
jmp 0x10005761e
add dword [r8 + r11], r9d
mov rcx, qword [0x1001d1e58]
inc r10
mov eax, ecx
cmp r10, rax
jb 0x1000575b6
mov eax, dword [0x1002f8888]
mov eax, 0x8a70c308
mov rbx, qword [rsp + 0x90]
mov qword [rbx + 0x10], r12
mov rcx, qword [rsp + 0xa0]
xor rcx, rsp
call fcn.10027d5f4
mov rbx, qword [rsp + 0x100]
add rsp, 0xb0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret