Function at 0x1000adf18
Capabilities:
Allocate or change rwx memory
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xd0
mov rax, qword [0x1004c4740]
xor rax, rsp
mov qword [rsp + 0xc0], rax
lea r11, [0x100000000]
lea rax, [0x100000000]
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x98], rcx
lea r12, [rcx + 0x18]
mov ecx, 0xfffffff
mov r14, qword [r12]
mov edx, dword [r14 + 5]
mov ebp, dword [r14 + 1]
and rdx, rcx
shr rbp, 2
mov qword [rsp + 0x90], r12
and rbp, rcx
add rbp, rax
mov eax, dword [0x1002f8888]
lea rsi, [rax + rdx - 1]
mov qword [rsp + 0xa0], rbp
mov rcx, rax
mov rax, rsi
xor edx, edx
div rcx
mov eax, dword [0x1002f8888]
sub rsi, rdx
xor r15d, r15d
mov r10d, dword [0x1002a02b4]
mov eax, dword [0x1002f8888]
mov eax, dword [0x1002a02b4]
cmp eax, r15d
je 0x1000ae065
mov edi, dword [0x1002a02b4]
dec edi
inc rdi
mov r9, rdi
mov r8, r15
mov rax, r15
cmp rdi, r15
je 0x1000ae01e
mov rcx, qword [0x1004c43a0]
imul rcx, rcx, 0x343fd
shl rax, 0x10
shr r9, 0x10
add rcx, 0x269ec3
mov rdx, rcx
shr rdx, 0x10
movzx edx, dx
or rax, rdx
cmp r9, r15
jne 0x1000adfef
mov qword [0x1004c43a0], rcx
xor edx, edx
div rdi
cmp r10, r15
jbe 0x1000ae059
mov ecx, 0xffffc428
mov eax, 0x3bd7
inc r8
lock cmpxchg dword [r11 + rdx*4 + 0x4c5a60], ecx
je 0x1000ae2e1
lea rax, [rdx + 1]
mov ecx, dword [0x1002a02b4]
xor edx, edx
div rcx
cmp r8, r10
jb 0x1000ae028
mov rbx, r15
cmp rbx, r15
jne 0x1000ae198
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r13d, eax
mov rdi, r15
mov rcx, qword [0x1004c4380]
mov rax, r15
mov r8, rcx
mov r9, rcx
inc rdi
cmp rcx, r15
je 0x1000ae0bf
mov rcx, qword [0x1004c43a0]
imul rcx, rcx, 0x343fd
shl rax, 0x10
shr r9, 0x10
add rcx, 0x269ec3
mov rdx, rcx
shr rdx, 0x10
movzx edx, dx
or rax, rdx
cmp r9, r15
jne 0x1000ae090
mov qword [0x1004c43a0], rcx
mov r9d, 0x40
xor edx, edx
div r8
mov rcx, rdx
mov r8d, 0x3000
shl rcx, 0x10
add rcx, qword [0x1004c4308]
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
cmp rax, r15
mov rbx, rax
je 0x1000ae12c
lea r9, [0x100435424]
mov r8d, esi
mov rcx, rax
mov rdx, rax
mov qword [rsp + 0x28], r15
or rcx, 3
mov qword [rsp + 0x20], r15
call qword [sym.imp.ntdll.dll_RtlInstallFunctionTableCallback]
movzx edx, al
cmp edx, r15d
jne 0x1000ae141
mov r8d, 0x8000
mov rcx, rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp rdi, 0x11
jb 0x1000ae071
mov rbx, r15
cmp rbx, 0x10000
jb 0x1000ae14f
test bl, 3
je 0x1000ae175
cmp rbx, r15
je 0x1000ae172
mov rcx, rbx
or rcx, 3
call qword [sym.imp.ntdll.dll_RtlDeleteFunctionTable]
mov rcx, rbx
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rbx, r15
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea r11, [0x100000000]
cmp rbx, r15
je 0x1000adfb3
mov rcx, rsi
mov rdi, rbx
xor eax, eax
rep stosb byte [rdi], al
mov eax, 0x95658a03
mov rax, r15
add qword [r12], 9
lea r13, [0x100000000]
mov esi, ebp
mov r14d, dword [r14 + 5]
and r14d, 0xfffffff
mov r8d, dword [0x1002f8888]
sub r8, r14
mov qword [rsp + 0xa8], r14
inc r8
mov rdi, r8
sub esi, r13d
mov dword [rsp + 0x48], esi
cmp r8, r15
je 0x1000ae213
mov rcx, qword [0x1004c43a0]
imul rcx, rcx, 0x343fd
shl rax, 0x10
shr rdi, 0x10
add rcx, 0x269ec3
mov rdx, rcx
shr rdx, 0x10
movzx edx, dx
or rax, rdx
cmp rdi, r15
jne 0x1000ae1e4
mov qword [0x1004c43a0], rcx
mov ecx, esi
xor edx, edx
div r8
add rbx, rdx
mov rdx, r14
mov qword [rsp + 0x70], rbx
mov r8, rbx
mov eax, 0x1c8c522a
mov dil, r15b
mov rdx, qword [r14 + rbp]
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x78], rdx
mov eax, 0x2ce1e4c8
mov r10, qword [rsp + 0x78]
mov eax, 0xfffffff
mov r9d, dword [rsp + 0x7c]
mov rcx, r13
and r10, rax
and r9, rax
add r10, r13
mov rax, qword [0x1000487b8]
sub rcx, rax
mov qword [rsp + 0x40], r15
mov r15d, 4
mov qword [rsp + 0x68], rcx
jne 0x1000ae2f8
xor r11d, r11d
test r9, r9
je 0x1000ae5f2
mov r13d, 0x966c4cad
mov r8d, dword [rsp + 0x40]
mov edx, dword [rsp + 0x44]
movzx ecx, byte [r11 + r10]
inc r11
sub ecx, 0x6993b353
add r8d, ecx
add ecx, edx
mov eax, ecx
imul eax, eax, 0x81ee
rol eax, 0xd
ror ecx, 0xd
xor eax, ecx
imul rax, r13
mov qword [rsp + 0x38], rax
mov edx, dword [rsp + 0x38]
shr rax, 0x20
add edx, eax
add r8d, edx
cmp r11, r9
jb 0x1000ae295
mov dword [rsp + 0x44], edx
mov dword [rsp + 0x40], r8d
jmp 0x1000ae5f2
mov ecx, dword [0x1002f8888]
imul rcx, rdx
lea rbx, [rcx + r11 + 0x454000]
jmp 0x1000ae05c
movsxd rcx, dword [0x10000003c]
mov rbx, 0xfffffffffffff000
lea rax, [r10 + r9]
mov r8d, dword [rcx + r13 + 0xb0]
mov qword [rsp + 0x88], rax
mov eax, r10d
sub eax, r13d
add r8, r13
mov r11d, eax
and r11, rbx
mov r13d, dword [rcx + r13 + 0xb4]
mov ecx, eax
sub rax, r11
mov qword [rsp + 0x58], rax
lea rax, [rcx + r9]
mov rcx, rax
and rcx, rbx
mov qword [rsp + 0x38], rcx
sub rax, rcx
add r13, r8
mov qword [rsp + 0xb0], r13
mov qword [rsp + 0x50], rax
jmp 0x1000ae36e
mov eax, dword [r8]
cmp rax, r11
jae 0x1000ae373
mov eax, dword [r8 + 4]
add r8, rax
cmp r8, r13
jne 0x1000ae35f
xor ebx, ebx
cmp r8, r13
je 0x1000ae3b6
mov eax, dword [r8]
cmp rax, r11
jne 0x1000ae3b6
mov ecx, dword [r8 + 4]
sub rcx, 8
shr rcx, 1
je 0x1000ae3b1
lea rdx, [r8 + 8]
mov r9, qword [rsp + 0x58]
movzx eax, word [rdx]
and eax, 0xfff
cmp rax, r9
jae 0x1000ae3b1
inc rbx
add rdx, 2
cmp rbx, rcx
jne 0x1000ae398
mov rcx, qword [rsp + 0x38]
mov r14, qword [rsp + 0x68]
lea rbp, [0x100000000]
mov r9d, dword [rsp + 0x40]
mov esi, 0x966c4cad
mov edx, dword [rsp + 0x44]
cmp r8, r13
je 0x1000ae56b
mov eax, dword [r8]
cmp rax, rcx
ja 0x1000ae56b
mov edi, dword [r8 + 4]
lea rax, [rdi - 8]
shr rax, 1
cmp rbx, rax
jne 0x1000ae411
add r8, rdi
cmp r8, r13
je 0x1000ae56b
mov eax, dword [r8]
cmp rax, rcx
ja 0x1000ae56b
xor ebx, ebx
jmp 0x1000ae3e5
mov eax, dword [r8]
cmp rax, rcx
jne 0x1000ae42f
movzx eax, word [r8 + rbx*2 + 8]
and eax, 0xfff
cmp rax, qword [rsp + 0x50]
jae 0x1000ae56b
mov edi, 0xf000
mov rax, rbx
inc rbx
test word [r8 + rax*2 + 8], di
je 0x1000ae3d0
xor r12d, r12d
movzx r11d, word [r8 + rax*2 + 8]
mov r13d, r11d
and r13d, 0xfff
add r13d, dword [r8]
add r13, rbp
mov rax, r13
sub rax, r10
je 0x1000ae4ad
mov rdi, rax
movzx ecx, byte [r10 + r12]
inc r12
sub ecx, 0x6993b353
add r9d, ecx
add ecx, edx
mov eax, ecx
imul eax, eax, 0x81ee
rol eax, 0xd
ror ecx, 0xd
xor eax, ecx
imul rax, rsi
mov qword [rsp + 0x60], rax
mov edx, dword [rsp + 0x60]
shr rax, 0x20
add edx, eax
add r9d, edx
cmp r12, rdi
jb 0x1000ae466
mov dword [rsp + 0x44], edx
mov dword [rsp + 0x40], r9d
mov rax, qword [r13]
shr r11d, 0xc
mov qword [rsp + 0x60], rax
cmp r11d, 3
je 0x1000ae4d0
sub r11d, 0xa
neg r11d
sbb r10d, r10d
add r10d, 3
jmp 0x1000ae4d6
mov r10d, 2
mov r11, r14
neg r11
sub r10d, 2
je 0x1000ae4fe
cmp r10d, 1
je 0x1000ae4ee
or r10, 0xffffffffffffffff
jmp 0x1000ae506
add rax, r11
mov r10d, 8
mov qword [rsp + 0x60], rax
jmp 0x1000ae506
add dword [rsp + 0x60], r11d
mov r10, r15
xor r11d, r11d
test r10, r10
je 0x1000ae556
movzx ecx, byte [rsp + r11 + 0x60]
inc r11
sub ecx, 0x6993b353
add r9d, ecx
add ecx, edx
mov eax, ecx
imul eax, eax, 0x81ee
rol eax, 0xd
ror ecx, 0xd
xor eax, ecx
imul rax, rsi
mov qword [rsp + 0x58], rax
shr rax, 0x20
mov edx, dword [rsp + 0x58]
add edx, eax
add r9d, edx
cmp r11, r10
jb 0x1000ae50e
mov dword [rsp + 0x44], edx
mov dword [rsp + 0x40], r9d
mov rcx, qword [rsp + 0x38]
add r10, r13
mov r13, qword [rsp + 0xb0]
jmp 0x1000ae3d0
mov r14, qword [rsp + 0xa8]
mov rbx, qword [rsp + 0x88]
mov r12, qword [rsp + 0x90]
xor r8d, r8d
mov rbp, qword [rsp + 0xa0]
sub rbx, r10
mov esi, dword [rsp + 0x48]
mov dil, r8b
je 0x1000ae5ed
mov r11d, 0x966c4cad
movzx ecx, byte [r10 + r8]
inc r8
sub ecx, 0x6993b353
add r9d, ecx
add ecx, edx
mov eax, ecx
imul eax, eax, 0x81ee
rol eax, 0xd
ror ecx, 0xd
xor eax, ecx
imul rax, r11
mov qword [rsp + 0x88], rax
mov edx, dword [rsp + 0x88]
shr rax, 0x20
add edx, eax
add r9d, edx
cmp r8, rbx
jb 0x1000ae5a0
mov dword [rsp + 0x44], edx
mov dword [rsp + 0x40], r9d
mov rbx, qword [rsp + 0x70]
xor ecx, ecx
mov rax, rcx
inc rcx
and eax, 7
mov al, byte [rsp + rax + 0x40]
mov byte [rsp + rcx + 0xb7], al
cmp rcx, 8
jb 0x1000ae5f4
mov eax, 0x96ea230f
mov r11, rbx
mov r10, rbp
mov r13, r14
and r13d, 7
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x58], rbp
mov qword [rsp + 0x38], rbx
je 0x1000aeae7
mov ebx, esi
xor r8d, r8d
not ebx
xor r11d, r11d
and dword [rsp + 0x68], r8d
mov dword [rsp + 0x50], r8d
test r13d, r13d
jle 0x1000ae68b
lea r9d, [r8 + 0x38]
movzx edx, byte [r10]
cmp r11d, r15d
jge 0x1000ae66a
lea ecx, [r9 - 0x20]
shl edx, cl
or dword [rsp + 0x68], edx
jmp 0x1000ae672
mov ecx, r9d
shl edx, cl
or r8d, edx
inc r11d
inc r10
sub r9d, 8
cmp r11d, r13d
jl 0x1000ae655
mov dword [rsp + 0x50], r8d
mov qword [rsp + 0x58], r10
movzx r11d, ax
mov edx, eax
mov ecx, esi
sub ecx, eax
movzx r10d, word [rsp + 0xba]
movzx r9d, word [rsp + 0xbc]
movzx r8d, word [rsp + 0xbe]
sub ecx, r8d
xor ebx, ecx
mov esi, ebx
sub esi, r9d
xor esi, eax
xor esi, dword [rsp + 0x48]
mov ecx, esi
ror ecx, 0xe
xor ecx, r10d
imul ecx, r8d
xor ebx, ecx
mov ecx, ebx
ror ecx, 4
sub ecx, r11d
imul ecx, r10d
xor esi, ecx
sub edx, esi
rol edx, 0xd
mov ecx, esi
rol ecx, 0xd
imul edx, r8d
add ecx, edx
xor ebx, ecx
mov edx, ebx
xor edx, r10d
mov ecx, ebx
shr ecx, 9
imul edx, r9d
xor edx, ecx
xor esi, edx
mov edx, esi
xor edx, r9d
mov ecx, esi
rol edx, 1
ror ecx, 0x10
imul edx, r10d
add ecx, edx
xor ebx, ecx
mov edx, ebx
xor edx, r10d
rol edx, 5
mov ecx, ebx
rol ecx, 3
imul edx, r11d
sub edx, ecx
xor esi, edx
mov ecx, esi
not ecx
ror ecx, 6
add ecx, r8d
imul ecx, r9d
xor ebx, ecx
mov ecx, ebx
mov edx, ebx
sub edx, eax
rol edx, 5
ror ecx, 2
imul edx, r9d
add ecx, edx
xor esi, ecx
mov ecx, esi
mov edx, esi
sub edx, r11d
shr ecx, 9
rol edx, 4
imul edx, r10d
xor edx, ecx
xor ebx, edx
mov edx, ebx
sub edx, dword [rsp + 0xbc]
rol edx, 0xb
mov ecx, ebx
ror ecx, 8
imul edx, r11d
xor ebx, dword [rsp + 0x50]
xor ecx, edx
mov edx, ebx
xor r9d, r9d
xor ecx, dword [rsp + 0x68]
xor esi, ecx
mov ecx, esi
test r13d, r13d
jle 0x1000ae7c0
mov r8, qword [rsp + 0x38]
cmp r9d, r15d
jge 0x1000ae7a7
rol ecx, 8
mov byte [r8], cl
inc r8
xor dil, cl
jmp 0x1000ae7b3
rol edx, 8
mov byte [r8], dl
inc r8
xor dil, dl
inc r9d
cmp r9d, r13d
jl 0x1000ae794
mov qword [rsp + 0x38], r8
lea ecx, [r13 - 4]
test ecx, ecx
jle 0x1000aeacf
sub r15d, ecx
shl r15d, 3
mov ecx, r15d
shr ebx, cl
shl ebx, cl
mov r11, qword [rsp + 0x38]
mov r10, qword [rsp + 0x58]
mov r13d, dword [rsp + 0x50]
mov r15, r14
shr r15, 3
test r15, r15
je 0x1000aea14
movzx r14d, ax
mov r12d, dword [rsp + 0x68]
movzx ecx, word [rsp + 0xbe]
movzx edx, word [rsp + 0xba]
mov dword [rsp + 0x50], ecx
movzx ecx, word [rsp + 0xbc]
mov dword [rsp + 0x48], ecx
mov ecx, r14d
neg ecx
mov dword [rsp + 0x38], edx
mov ebp, ecx
movzx r8d, byte [r10 + 4]
movzx r9d, byte [r10 + 1]
movzx ecx, byte [r10]
shl ecx, 8
shl r8d, 8
add r10, 8
or r9d, ecx
movzx ecx, byte [r10 - 6]
shl r9d, 8
or r9d, ecx
movzx ecx, byte [r10 - 5]
shl r9d, 8
or r9d, ecx
movzx ecx, byte [r10 - 3]
or r8d, ecx
xor esi, r9d
shl r8d, 8
movzx ecx, byte [r10 - 2]
or r8d, ecx
movzx ecx, byte [r10 - 1]
shl r8d, 8
or r8d, ecx
mov ecx, esi
sub ecx, eax
sub ecx, dword [rsp + 0x50]
xor ecx, r8d
xor ebx, ecx
mov ecx, ebx
sub ecx, dword [rsp + 0x48]
xor ecx, eax
xor esi, ecx
mov ecx, esi
ror ecx, 0xe
xor ecx, edx
imul ecx, dword [rsp + 0x50]
xor ebx, ecx
mov ecx, ebx
ror ecx, 4
sub ecx, r14d
imul ecx, edx
mov edx, eax
xor esi, ecx
mov ecx, esi
sub edx, esi
rol edx, 0xd
rol ecx, 0xd
imul edx, dword [rsp + 0x50]
add ecx, edx
xor ebx, ecx
mov edx, ebx
movzx ecx, word [rsp + 0xba]
xor edx, ecx
movzx ecx, word [rsp + 0xbc]
imul edx, ecx
mov ecx, ebx
shr ecx, 9
xor edx, ecx
movzx ecx, word [rsp + 0xbc]
xor esi, edx
mov edx, esi
xor edx, ecx
rol edx, 1
mov ecx, esi
ror ecx, 0x10
imul edx, dword [rsp + 0x38]
add ecx, edx
xor ebx, ecx
movzx ecx, word [rsp + 0xba]
mov edx, ebx
xor edx, ecx
rol edx, 5
mov ecx, ebx
rol ecx, 3
imul edx, r14d
sub edx, ecx
xor esi, edx
movzx edx, word [rsp + 0xbe]
mov ecx, esi
not ecx
ror ecx, 6
add ecx, edx
movzx edx, word [rsp + 0xbc]
imul ecx, edx
xor ebx, ecx
mov ecx, ebx
mov edx, ebx
sub edx, eax
rol edx, 5
ror ecx, 2
imul edx, dword [rsp + 0x48]
add ecx, edx
xor esi, ecx
movzx ecx, word [rsp + 0xba]
lea edx, [rsi + rbp]
rol edx, 4
imul edx, ecx
mov ecx, esi
shr ecx, 9
xor edx, ecx
xor ebx, edx
mov ecx, ebx
mov edx, ebx
xor ebx, r13d
mov r13d, r8d
sub edx, dword [rsp + 0xbc]
rol edx, 0xb
ror ecx, 8
imul edx, r14d
xor ecx, edx
mov byte [r11 + 7], bl
xor ecx, r12d
mov r12d, r9d
xor esi, ecx
xor dil, sil
movzx edx, word [rsp + 0xba]
mov byte [r11 + 3], sil
ror esi, 8
mov byte [r11 + 2], sil
xor dil, bl
ror ebx, 8
xor dil, sil
ror esi, 8
xor dil, bl
mov byte [r11 + 6], bl
ror ebx, 8
xor dil, sil
mov byte [r11 + 1], sil
ror esi, 8
xor dil, bl
mov byte [r11 + 5], bl
mov byte [r11], sil
ror ebx, 8
mov cl, bl
mov byte [r11 + 4], bl
add r11, 8
xor cl, sil
xor dil, cl
ror esi, 8
ror ebx, 8
sub r15, 1
jne 0x1000ae82d
mov r12, qword [rsp + 0x90]
mov rbp, qword [rsp + 0xa0]
mov r14, qword [rsp + 0xa8]
cmp dil, byte [r14 + rbp + 8]
je 0x1000aeb14
call fcn.100058248
and r12, 0xfffffffffffffff8
lea r13, [0x1001094ec]
mov r11, qword [rsp + 0x98]
mov qword [r11 + 0x10], r13
mov r9d, 0xffff
mov r10, rax
mov rcx, qword [0x1004c43a0]
mov rax, 0xfffffffffffff000
lea r8, [r12 + 0xfff]
and r10, rax
and r8, rax
xor edi, edi
imul rcx, rcx, 0x343fd
shl rdi, 0x10
shr r9, 0x10
add rcx, 0x269ec3
mov rax, rcx
shr rax, 0x10
movzx edx, ax
or rdi, rdx
test r9, r9
jne 0x1000aea62
movabs rax, 0x8000800080008001
mul rdi
shr rdx, 0xf
imul rdx, rdx, 0xffff
mov qword [0x1004c43a0], rcx
mov rax, qword [rsp + 0x80]
mov qword [rax + 0x98], r10
sub rdi, rdx
inc rdi
mov qword [rax + 0xb0], rdi
mov qword [rsp + 0x80], r9
jmp 0x1000aeb0a
xor ebx, ebx
test ecx, ecx
jns 0x1000ae7da
neg ecx
shl ecx, 3
shr esi, cl
shl esi, cl
jmp 0x1000ae7da
mov r13d, esi
not r13d
mov dword [rsp + 0x68], esi
xor ebx, ebx
xor esi, esi
jmp 0x1000ae7e9
mov rax, qword [rsp + 0x80]
mov qword [r12], rax
add r12, 8
cmp r12, r8
jb 0x1000aeafa
jmp 0x1000aec2a
lea r15, [0x100000000]
mov rbx, rbp
mov rsi, r15
mov r13, qword [rsp + 0x70]
mov rax, qword [0x1000487b8]
sub rbx, r13
sub rsi, rax
jne 0x1000aeb3e
test rbx, rbx
je 0x1000aec17
mov r11, r13
mov rcx, qword [0x1001d1e58]
xor edi, edi
sub r11, rbp
lea r8d, [rcx - 1]
sub ebp, r15d
test r8d, r8d
lea r12d, [r14 + rbp]
lea r14, [0x100000000]
js 0x1000aeb94
lea eax, [r8 + rdi]
cdq
sub eax, edx
sar eax, 1
movsxd rdx, eax
mov r9d, dword [r14 + rdx*4 + 0x1d1e5c]
and r9d, 0xfffffff
cmp ebp, r9d
jae 0x1000aeb8a
lea r8d, [rax - 1]
jmp 0x1000aeb8f
jbe 0x1000aeb99
lea edi, [rax + 1]
cmp r8d, edi
jge 0x1000aeb64
movsxd r10, edi
jmp 0x1000aec10
movsxd r10, eax
jmp 0x1000aec10
mov edx, dword [r14 + r10*4 + 0x1d1e5c]
mov eax, edx
and eax, 0xfffffff
cmp eax, r12d
jae 0x1000aec17
mov r8, rdx
mov edi, edx
sar edx, 0x1e
shl edi, 2
and r8d, 0xfffffff
and edx, 3
sar edi, 0x1e
add r8, r15
xor r9d, r9d
and edi, 3
sub edi, 1
je 0x1000aebec
sub edi, 1
je 0x1000aebe7
cmp edi, 1
jne 0x1000aebf2
mov r9, rsi
jmp 0x1000aebf2
mov r9, rbx
jmp 0x1000aebf2
mov r9, rsi
sub r9, rbx
sub edx, 2
je 0x1000aec02
cmp edx, 1
jne 0x1000aec0d
add qword [r8 + r11], r9
jmp 0x1000aec06
add dword [r8 + r11], r9d
mov rcx, qword [0x1001d1e58]
inc r10
mov eax, ecx
cmp r10, rax
jb 0x1000aeb9e
mov eax, dword [0x1002f8888]
mov eax, 0x25982476
mov r11, qword [rsp + 0x98]
mov qword [r11 + 0x10], r13
mov rcx, qword [rsp + 0xc0]
xor rcx, rsp
call fcn.10027d5f4
mov rbx, qword [rsp + 0x120]
add rsp, 0xd0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret