Function at 0x11003e950
Capabilities:
Create thread
Encode data using xor

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov qword [rbp - 0x30], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x110109588]
xor rax, rsp
mov qword [rbp - 8], rax
mov r14, rcx
mov ecx, 0x1600
call fcn.11009b934
mov qword [rbp - 0x38], rax
xor ebx, ebx
test rax, rax
je 0x11003e9ce
mov qword [rax], 0x26
lea rdi, [rax + 8]
lea rax, [fcn.110015810]
mov qword [rsp + 0x20], rax
lea r9, [0x11003c540]
mov edx, 0x94
lea r8d, [rbx + 0x26]
mov rcx, rdi
call fcn.11009b7f4
jmp 0x11003e9d1
mov rdi, rbx
mov qword [0x110207f98], rdi
mov ecx, 0x28
call fcn.11009af84
mov qword [rbp - 0x38], rax
test rax, rax
je 0x11003e9f5
mov rcx, rax
call fcn.110045850
jmp 0x11003e9f8
mov rax, rbx
mov qword [0x110208240], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x38], rax
mov qword [0x110207dc8], rax
mov ecx, 0x10
call fcn.11009af84
mov qword [rbp - 0x38], rax
mov qword [0x1102070d8], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x38], rax
mov qword [0x1101121b0], rax
mov ecx, 0x10
call fcn.11009af84
mov qword [rbp - 0x38], rax
mov qword [0x1102071e0], rax
mov ecx, 0x148
call fcn.11009af84
mov qword [rbp - 0x38], rax
test rax, rax
je 0x11003ea70
mov rcx, rax
call fcn.11000af10
jmp 0x11003ea73
mov rax, rbx
mov qword [0x1101121c8], rax
mov ecx, 0x98
call fcn.11009af84
mov qword [rbp - 0x38], rax
test rax, rax
je 0x11003eb46
lea rcx, [0x1100d4620]
mov qword [rax + 0x48], rcx
lea rcx, [0x1100d14c0]
mov qword [rax + 0x50], rcx
lea rcx, [0x1100d4628]
mov qword [rax + 0x58], rcx
lea rcx, [0x1100d4630]
mov qword [rax + 0x60], rcx
lea rdx, [0x1100d4638]
mov qword [rax + 0x68], rdx
lea rcx, [0x1100d4648]
mov qword [rax + 0x70], rcx
lea rcx, [0x1100d4658]
mov qword [rax + 0x78], rcx
lea rcx, [0x1100d4668]
mov qword [rax + 0x80], rcx
lea rcx, [0x1100d4678]
mov qword [rax + 0x88], rcx
mov qword [rax + 0x90], rdx
mov qword [rax], 0xffffffffffffffff
mov qword [rax + 8], 0xffffffffffffffff
mov qword [rax + 0x10], 0xffffffffffffffff
mov qword [rax + 0x18], 0xffffffffffffffff
mov qword [rax + 0x20], 0xffffffffffffffff
mov qword [rax + 0x28], 0xffffffffffffffff
mov qword [rax + 0x30], 0xffffffffffffffff
mov qword [rax + 0x38], 0xffffffffffffffff
mov byte [rax + 0x40], 0xff
jmp 0x11003eb49
mov rax, rbx
mov qword [0x110207df0], rax
mov ecx, 0x18
call fcn.11009af84
mov qword [rbp - 0x38], rax
test rax, rax
je 0x11003eb69
mov qword [rax + 0x10], rbx
jmp 0x11003eb6c
mov rax, rbx
mov qword [0x1102073c0], rax
mov ecx, 0x1ee98
call fcn.11009af84
mov qword [rbp - 0x38], rax
mov qword [0x1102070e0], rax
mov ecx, 0x27e4
call fcn.11009af84
mov qword [rbp - 0x38], rax
test rax, rax
je 0x11003ebe2
lea rcx, [rax + 0x54]
mov edx, 0x9e
nop dword [rax]
nop dword [rax + rax]
mov qword [rcx], rbx
mov qword [rcx + 8], rbx
mov qword [rcx + 0x10], rbx
lea rcx, [rcx + 0x40]
mov qword [rcx - 0x28], rbx
mov qword [rcx - 0x20], rbx
mov qword [rcx - 0x18], rbx
mov qword [rcx - 0x10], rbx
mov qword [rcx - 8], rbx
sub rdx, 1
jne 0x11003ebb0
mov qword [rcx], rbx
mov qword [rcx + 8], rbx
jmp 0x11003ebe5
mov rax, rbx
mov qword [0x110206f78], rax
mov ecx, 0x28
call fcn.11009af84
mov qword [rbp - 0x38], rax
mov qword [0x1102070b0], rax
mov ecx, 0xa00
call fcn.11009af84
mov qword [rbp - 0x38], rax
test rax, rax
je 0x11003ec2b
mov qword [rax + 0x9e8], rbx
mov qword [rax + 0x9f0], rbx
mov qword [rax + 0x9f8], rbx
jmp 0x11003ec2e
mov rax, rbx
mov qword [0x1102070e8], rax
mov ecx, 0x21
call fcn.11009af84
mov qword [rbp - 0x38], rax
mov qword [0x1101122a0], rax
mov ecx, 0x60
call fcn.11009af84
mov rsi, rax
mov qword [rbp - 0x38], rax
test rax, rax
je 0x11003ec81
lea rdi, [rax + 0x50]
mov qword [rbp - 0x40], rdi
mov qword [rdi], rbx
mov qword [rdi + 8], rbx
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.11001d000
mov qword [rdi], rax
jmp 0x11003ec84
mov rsi, rbx
mov qword [0x1101122a8], rsi
mov ecx, 0x10
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110206f80], rax
mov ecx, 2
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110206fb0], rax
mov ecx, 0xc
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110208260], rax
mov ecx, 0x10
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110206f88], rax
mov ecx, 0xf9
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110206f90], rax
mov ecx, 0x18
call fcn.11009af84
mov qword [rbp - 0x40], rax
test rax, rax
je 0x11003ed0d
mov qword [rax + 0x10], rbx
jmp 0x11003ed10
mov rax, rbx
mov qword [0x110206f98], rax
mov ecx, 0x3b0
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110207398], rax
mov ecx, 0x2c
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110207dd8], rax
mov ecx, 0x14
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110207de0], rax
mov ecx, 0xdd00
call fcn.11009af84
mov qword [rbp - 0x40], rax
test rax, rax
je 0x11003ed73
mov rcx, rax
call fcn.110020fb0
jmp 0x11003ed76
mov rax, rbx
mov qword [0x110206fa0], rax
mov ecx, 0xc
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110207de8], rax
mov ecx, 0x14
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110207210], rax
mov ecx, 0x14
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110207218], rax
mov ecx, 0x1d0
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110206fa8], rax
mov ecx, 0x58
call fcn.11009af84
mov qword [rbp - 0x40], rax
lea rsi, [0x1100d4538]
lea r15, [0x1100d20a0]
lea r12, [0x1100d4540]
lea r13, [0x1100d4550]
lea rcx, [0x1100d4568]
lea rdx, [0x1100d4578]
lea r8, [0x1100d20d0]
test rax, rax
je 0x11003ee42
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], r15
mov qword [rax + 0x20], r12
mov qword [rax + 0x28], r13
mov qword [rax + 0x30], rcx
mov qword [rax + 0x38], rdx
mov qword [rax + 0x40], r8
lea rcx, [0x1100d4588]
mov qword [rax + 0x48], rcx
mov qword [rax + 0x50], rbx
jmp 0x11003ee45
mov rax, rbx
mov qword [0x110207208], rax
mov ecx, 0x18
call fcn.11009af84
mov qword [rbp - 0x40], rax
test rax, rax
je 0x11003ee65
mov qword [rax + 0x10], rbx
jmp 0x11003ee68
mov rax, rbx
mov qword [0x110206fb8], rax
mov ecx, 0x10
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x1102070f0], rax
mov ecx, 0x18
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x1102070f8], rax
mov ecx, 0x9e5
call fcn.11009af84
mov qword [rbp - 0x40], rax
test rax, rax
je 0x11003ef31
lea rcx, [rax + 1]
mov edx, 0x27
nop dword [rax]
mov qword [rcx], 0xffffffffffffffff
mov qword [rcx + 8], 0xffffffffffffffff
mov qword [rcx + 0x10], 0xffffffffffffffff
lea rcx, [rcx + 0x40]
mov qword [rcx - 0x28], 0xffffffffffffffff
mov qword [rcx - 0x20], 0xffffffffffffffff
mov qword [rcx - 0x18], 0xffffffffffffffff
mov qword [rcx - 0x10], 0xffffffffffffffff
mov qword [rcx - 8], 0xffffffffffffffff
sub rdx, 1
jne 0x11003eec0
mov qword [rcx], 0xffffffffffffffff
mov qword [rcx + 8], 0xffffffffffffffff
mov qword [rcx + 0x10], 0xffffffffffffffff
mov qword [rcx + 0x18], 0xffffffffffffffff
mov dword [rcx + 0x20], 0xffffffff
jmp 0x11003ef34
mov rax, rbx
mov qword [0x110207e98], rax
mov ecx, 0x14698
call fcn.11009af84
mov rdi, rax
mov qword [rbp - 0x40], rax
test rax, rax
je 0x11003ef7d
lea rcx, [rax + 0x9e8]
lea rax, [fcn.11000ba50]
mov qword [rsp + 0x20], rax
lea r9, [0x11003e2f0]
mov edx, 0x20
mov r8d, 0x9e4
call fcn.11009b7f4
jmp 0x11003ef80
mov rdi, rbx
mov qword [0x110207220], rdi
mov ecx, 0xc
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110206fc0], rax
mov ecx, 0x1875630
call fcn.11009af84
mov rdi, rax
mov qword [rbp - 0x40], rax
test rax, rax
je 0x11003efbc
mov rcx, rax
call fcn.110049180
jmp 0x11003efbf
mov rdi, rbx
mov qword [0x1102071e8], rdi
mov ecx, 0xc
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x1102071f0], rax
mov ecx, 0xc
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x1102071f8], rax
mov ecx, 0x30
call fcn.11009af84
mov qword [rbp - 0x40], rax
test rax, rax
je 0x11003f02a
lea rcx, [0x1100d4594]
mov qword [rax + 0x10], rcx
lea rcx, [0x1100d4598]
mov qword [rax + 0x18], rcx
lea rcx, [0x1100d459c]
mov qword [rax + 0x20], rcx
mov qword [rax + 0x28], rbx
jmp 0x11003f02d
mov rax, rbx
mov qword [0x110207200], rax
mov ecx, 0x18
call fcn.11009af84
mov qword [rbp - 0x40], rax
test rax, rax
je 0x11003f04d
mov qword [rax + 0x10], rbx
jmp 0x11003f050
mov rax, rbx
mov qword [0x110206fd0], rax
mov ecx, 0x14
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110207228], rax
mov ecx, 0x98
call fcn.11009af84
mov qword [rbp - 0x40], rax
test rax, rax
je 0x11003f12d
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], r15
mov qword [rax + 0x20], r12
mov qword [rax + 0x28], r13
lea rcx, [0x1100d4568]
mov qword [rax + 0x30], rcx
lea rcx, [0x1100d4578]
mov qword [rax + 0x38], rcx
lea rcx, [0x1100d20d0]
mov qword [rax + 0x40], rcx
lea rcx, [0x1100d45a8]
mov qword [rax + 0x48], rcx
lea rcx, [0x1100d45b0]
mov qword [rax + 0x50], rcx
lea rcx, [0x1100d2058]
mov qword [rax + 0x58], rcx
lea rcx, [0x1100d45b8]
mov qword [rax + 0x60], rcx
lea rcx, [0x1100d45c0]
mov qword [rax + 0x68], rcx
lea rcx, [0x1100d45d0]
mov qword [rax + 0x70], rcx
lea rcx, [0x1100d45e0]
mov qword [rax + 0x78], rcx
lea rcx, [0x1100d45f0]
mov qword [rax + 0x80], rcx
lea rcx, [0x1100d4600]
mov qword [rax + 0x88], rcx
lea rcx, [0x1100d4610]
mov qword [rax + 0x90], rcx
jmp 0x11003f130
mov rax, rbx
mov qword [0x110207230], rax
mov ecx, 0x9e4c
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110208168], rax
mov ecx, 0x87380
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x1102070a0], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110207388], rax
mov ecx, 0xa6
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x1102070a8], rax
mov ecx, 0x28
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110207300], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110207308], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110207318], rax
mov ecx, 0x20
call fcn.11009af84
mov qword [rbp - 0x40], rax
test rax, rax
je 0x11003f1e3
mov qword [rax + 0x18], rbx
jmp 0x11003f1e6
mov rax, rbx
mov qword [0x110207310], rax
mov ecx, 0x1c
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x1102082a0], rax
mov ecx, 0x20f
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110207320], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110208270], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x1101121c0], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110207dc0], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110207dd0], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x1101122b8], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x1101122b0], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110207db8], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x1102070b8], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x1102070c0], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110206f70], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110207e80], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x1102070d0], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110207e88], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x1102070c8], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110207e90], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x1102073a0], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110208130], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110207328], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110207ea0], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110207f90], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110208158], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110208160], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110208170], rax
mov ecx, 6
call fcn.11009af84
mov qword [rbp - 0x40], rax
test rax, rax
je 0x11003f41b
mov dword [rax], 0x2070503
mov word [rax + 4], 0x604
jmp 0x11003f41e
mov rax, rbx
mov qword [0x110208178], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110208268], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110208278], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110208280], rax
mov ecx, 1
call fcn.11009af84
mov qword [0x110208290], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110208288], rax
mov ecx, 1
call fcn.11009af84
mov qword [rbp - 0x40], rax
mov qword [0x110208298], rax
cmp qword [0x110207f98], 0
je 0x11003f8ee
cmp qword [0x1101121c8], 0
je 0x11003f8ee
mov rcx, qword [0x110207df0]
test rcx, rcx
je 0x11003f8ee
cmp qword [0x110208240], 0
je 0x11003f8ee
cmp qword [0x110207dc8], 0
je 0x11003f8ee
cmp qword [0x1102070d8], 0
je 0x11003f8ee
cmp qword [0x1101121b0], 0
je 0x11003f8ee
cmp qword [0x1102071e0], 0
je 0x11003f8ee
cmp qword [0x1102073c0], 0
je 0x11003f8ee
cmp qword [0x1102070e0], 0
je 0x11003f8ee
cmp qword [0x110206f78], 0
je 0x11003f8ee
cmp qword [0x1102070b0], 0
je 0x11003f8ee
cmp qword [0x1102070e8], 0
je 0x11003f8ee
cmp qword [0x1101122a0], 0
je 0x11003f8ee
cmp qword [0x1101122a8], 0
je 0x11003f8ee
cmp qword [0x110206f80], 0
je 0x11003f8ee
cmp qword [0x110206fb0], 0
je 0x11003f8ee
cmp qword [0x110208260], 0
je 0x11003f8ee
cmp qword [0x110206f88], 0
je 0x11003f8ee
cmp qword [0x110206f90], 0
je 0x11003f8ee
cmp qword [0x110206f98], 0
je 0x11003f8ee
cmp qword [0x110207398], 0
je 0x11003f8ee
cmp qword [0x110207dd8], 0
je 0x11003f8ee
cmp qword [0x110207de0], 0
je 0x11003f8ee
cmp qword [0x110206fa0], 0
je 0x11003f8ee
cmp qword [0x110207de8], 0
je 0x11003f8ee
cmp qword [0x110207210], 0
je 0x11003f8ee
cmp qword [0x110207218], 0
je 0x11003f8ee
cmp qword [0x110207208], 0
je 0x11003f8ee
cmp qword [0x110206fa8], 0
je 0x11003f8ee
cmp qword [0x110206fb8], 0
je 0x11003f8ee
cmp qword [0x1102071e8], 0
je 0x11003f8ee
cmp qword [0x1102070f0], 0
je 0x11003f8ee
cmp qword [0x1102070f8], 0
je 0x11003f8ee
cmp qword [0x110207e98], 0
je 0x11003f8ee
cmp qword [0x110207220], 0
je 0x11003f8ee
cmp qword [0x110206fc0], 0
je 0x11003f8ee
cmp qword [0x1102071f0], 0
je 0x11003f8ee
cmp qword [0x1102071f8], 0
je 0x11003f8ee
cmp qword [0x110207200], 0
je 0x11003f8ee
cmp qword [0x110206fd0], 0
je 0x11003f8ee
cmp qword [0x110207228], 0
je 0x11003f8ee
cmp qword [0x110207230], 0
je 0x11003f8ee
cmp qword [0x110208168], 0
je 0x11003f8ee
cmp qword [0x1102070a0], 0
je 0x11003f8ee
cmp qword [0x110207388], 0
je 0x11003f8ee
cmp qword [0x1102070a8], 0
je 0x11003f8ee
cmp qword [0x110207300], 0
je 0x11003f8ee
cmp qword [0x110207308], 0
je 0x11003f8ee
cmp qword [0x110207310], 0
je 0x11003f8ee
cmp qword [0x110207318], 0
je 0x11003f8ee
cmp qword [0x1102082a0], 0
je 0x11003f8ee
cmp qword [0x110208270], 0
je 0x11003f8ee
cmp qword [0x1101121c0], 0
je 0x11003f8ee
cmp qword [0x110207dc0], 0
je 0x11003f8ee
cmp qword [0x110207dd0], 0
je 0x11003f8ee
cmp qword [0x1101122b0], 0
je 0x11003f8ee
cmp qword [0x1101122b8], 0
je 0x11003f8ee
cmp qword [0x110207db8], 0
je 0x11003f8ee
cmp qword [0x1102070b8], 0
je 0x11003f8ee
cmp qword [0x1102070c0], 0
je 0x11003f8ee
cmp qword [0x110206f70], 0
je 0x11003f8ee
cmp qword [0x110207e80], 0
je 0x11003f8ee
cmp qword [0x1102070d0], 0
je 0x11003f8ee
cmp qword [0x110207e88], 0
je 0x11003f8ee
cmp qword [0x1102070c8], 0
je 0x11003f8ee
cmp qword [0x110207e90], 0
je 0x11003f8ee
cmp qword [0x110208130], 0
je 0x11003f8ee
cmp qword [0x110207328], 0
je 0x11003f8ee
cmp qword [0x110207ea0], 0
je 0x11003f8ee
cmp qword [0x110207f90], 0
je 0x11003f8ee
cmp qword [0x1102073a0], 0
je 0x11003f8ee
cmp qword [0x110208158], 0
je 0x11003f8ee
cmp qword [0x110208160], 0
je 0x11003f8ee
cmp qword [0x110208170], 0
je 0x11003f8ee
cmp qword [0x110208178], 0
je 0x11003f8ee
cmp qword [0x110208268], 0
je 0x11003f8ee
cmp qword [0x110208278], 0
je 0x11003f8ee
cmp qword [0x110208290], 0
je 0x11003f8ee
cmp qword [0x110208280], 0
je 0x11003f8ee
cmp qword [0x110208288], 0
je 0x11003f8ee
test rax, rax
je 0x11003f8ee
cmp qword [0x110207320], 0
jne 0x11003f95d
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], ebx
mov r9d, 0xbb8
lea r8, [0x11003fe40]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.kernel32.dll_CreateThread]
movdqa xmm0, xmmword [0x1100d46e0]
movdqu xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x1100d46d0]
movdqu xmmword [rbp - 0x18], xmm1
nop dword [rax + rax]
movsxd rax, ebx
lea rcx, [rbp - 0x28]
add rcx, rax
lea eax, [rbx + 0x14]
xor byte [rcx], al
inc ebx
cmp ebx, 0x1f
jb 0x11003f930
mov byte [rbp - 9], 0
lea rdx, [rbp - 0x28]
xor ecx, ecx
call qword [sym.imp.kernel32.dll_FatalAppExitA]
mov rcx, qword [0x110207df0]
call fcn.110038de0
mov dword [r14 + 4], eax
mov rcx, qword [0x110207f98]
call fcn.11003c880
mov rcx, qword [0x1102070d8]
call fcn.110026020
mov rcx, qword [0x1101121b0]
call fcn.110001930
mov rcx, qword [0x1102071e0]
call fcn.110029e90
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.11009af60
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret