Function at 0x10006fe8c
Capabilities:
Allocate or change rwx memory
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xc0
mov rax, qword [0x1003fe1f8]
xor rax, rsp
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0x78], rdx
lea rax, [0x100000000]
lea r11, [0x100000000]
lea r12, [rcx + 0x18]
mov qword [rsp + 0x88], rcx
mov ecx, 0xfffffff
mov r14, qword [r12]
mov edx, dword [r14 + 5]
mov ebp, dword [r14 + 1]
and rdx, rcx
mov qword [rsp + 0x90], r12
shr rbp, 1
and rbp, rcx
add rbp, rax
mov eax, dword [0x100015b94]
mov qword [rsp + 0x80], rbp
lea rsi, [rax + rdx - 1]
mov rcx, rax
mov rax, rsi
xor edx, edx
div rcx
sub rsi, rdx
mov eax, dword [0x100015b94]
xor r15d, r15d
mov r10d, dword [0x10028bffc]
mov eax, dword [0x100015b94]
mov eax, dword [0x10028bffc]
cmp eax, r15d
je 0x10006ffd5
mov r8, r15
mov rax, r15
mov edi, dword [0x10028bffc]
dec edi
inc rdi
cmp rdi, r15
mov r9, rdi
je 0x10006ff8e
mov rcx, qword [0x1003feeb8]
imul rcx, rcx, 0x343fd
shl rax, 0x10
shr r9, 0x10
add rcx, 0x269ec3
mov rdx, rcx
shr rdx, 0x10
movzx edx, dx
or rax, rdx
cmp r9, r15
jne 0x10006ff5f
mov qword [0x1003feeb8], rcx
xor edx, edx
div rdi
cmp r10, r15
jbe 0x10006ffc9
inc r8
mov ecx, 0xffff10f4
mov eax, 0xef0b
lock cmpxchg dword [r11 + rdx*4 + 0x41a130], ecx
je 0x10007027f
lea rax, [rdx + 1]
xor edx, edx
mov ecx, dword [0x10028bffc]
div rcx
cmp r8, r10
jb 0x10006ff98
mov rbx, r15
cmp rbx, r15
jne 0x100070108
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, r15
mov r13d, eax
inc rdi
mov rax, r15
mov rcx, qword [0x10041aa98]
cmp rcx, r15
mov r8, rcx
mov r9, rcx
je 0x10007002f
mov rcx, qword [0x1003feeb8]
imul rcx, rcx, 0x343fd
shl rax, 0x10
shr r9, 0x10
add rcx, 0x269ec3
mov rdx, rcx
shr rdx, 0x10
movzx edx, dx
or rax, rdx
cmp r9, r15
jne 0x100070000
mov qword [0x1003feeb8], rcx
xor edx, edx
div r8
mov r9d, 0x40
mov r8d, 0x3000
mov rcx, rdx
shl rcx, 0x10
mov rdx, rsi
add rcx, qword [0x10041cce0]
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rbx, rax
cmp rax, r15
je 0x10007009c
mov rcx, rax
lea r9, [0x100363f08]
mov qword [rsp + 0x28], r15
mov r8d, esi
mov rdx, rax
mov qword [rsp + 0x20], r15
or rcx, 3
call qword [sym.imp.ntdll.dll_RtlInstallFunctionTableCallback]
movzx edx, al
cmp edx, r15d
jne 0x1000700b1
xor edx, edx
mov rcx, rbx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp rdi, 0x11
jb 0x10006ffe1
mov rbx, r15
cmp rbx, 0x10000
jb 0x1000700bf
test bl, 3
je 0x1000700e5
cmp rbx, r15
je 0x1000700e2
mov rcx, rbx
or rcx, 3
call qword [sym.imp.ntdll.dll_RtlDeleteFunctionTable]
mov rcx, rbx
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rbx, r15
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_SetLastError]
cmp rbx, r15
lea r11, [0x100000000]
je 0x10006ff23
xor eax, eax
mov rdi, rbx
mov rcx, rsi
rep stosb byte [rdi], al
mov eax, 0x9500627b
add qword [r12], 9
mov r8d, dword [0x100015b94]
mov r14d, dword [r14 + 5]
lea r13, [0x100000000]
and r14d, 0xfffffff
mov esi, ebp
sub r8, r14
mov qword [rsp + 0x98], r14
mov rax, r15
inc r8
sub esi, r13d
mov dword [rsp + 0x38], esi
mov rdi, r8
cmp r8, r15
je 0x100070183
mov rcx, qword [0x1003feeb8]
imul rcx, rcx, 0x343fd
shl rax, 0x10
shr rdi, 0x10
add rcx, 0x269ec3
mov rdx, rcx
shr rdx, 0x10
movzx edx, dx
or rax, rdx
cmp rdi, r15
jne 0x100070154
mov qword [0x1003feeb8], rcx
mov ecx, esi
xor edx, edx
div r8
add rbx, rdx
mov r8, rbx
mov rdx, r14
mov qword [rsp + 0x70], rbx
mov eax, 0xfd4b64a0
lea rcx, [rsp + 0x68]
mov dil, r15b
mov rdx, qword [r14 + rbp]
mov qword [rsp + 0x68], rdx
mov eax, 0x64c0389b
mov r11, qword [rsp + 0x68]
mov r9d, dword [rsp + 0x6c]
mov rcx, r13
mov eax, 0xfffffff
and r11, rax
and r9, rax
add r11, r13
mov rax, qword [0x10014d838]
mov qword [rsp + 0x50], r15
sub rcx, rax
mov qword [rsp + 0x30], rcx
mov r15d, 4
jne 0x100070296
xor r10d, r10d
test r9, r9
je 0x1000705f5
mov esi, 0x8532a4bd
mov r8d, dword [rsp + 0x50]
mov ecx, dword [rsp + 0x54]
movzx eax, byte [r11 + r10]
inc r10
sub eax, 0x7acd5b43
add r8d, eax
add eax, ecx
imul rax, rsi
mov qword [rsp + 0x30], rax
mov ecx, dword [rsp + 0x30]
shr rax, 0x20
lea edx, [rcx + rax*2 - 0x7fffffff]
sar ecx, 0x1f
btr ecx, 0x1f
sub edx, ecx
mov ecx, edx
sar ecx, 0x1f
btr ecx, 0x1f
add ecx, edx
mov eax, ecx
imul eax, eax, 0x1c57
rol eax, 0xd
ror ecx, 0xd
xor eax, ecx
imul rax, rsi
mov qword [rsp + 0x30], rax
shr rax, 0x20
mov ecx, dword [rsp + 0x30]
add ecx, eax
add r8d, ecx
cmp r10, r9
jb 0x100070208
mov dword [rsp + 0x54], ecx
mov dword [rsp + 0x50], r8d
jmp 0x1000705f1
mov ecx, dword [0x100015b94]
imul rcx, rdx
lea rbx, [rcx + r11 + 0x3df000]
jmp 0x10006ffcc
mov rbx, 0xfffffffffffff000
movsxd rcx, dword [0x10000003c]
lea rax, [r11 + r9]
mov r8d, dword [rcx + r13 + 0xb0]
mov qword [rsp + 0xa0], rax
mov eax, r11d
sub eax, r13d
mov esi, eax
add r8, r13
mov r10d, eax
add rax, r9
mov r13d, dword [rcx + r13 + 0xb4]
and r10, rbx
mov rcx, rax
and rcx, rbx
mov qword [rsp + 0x40], rcx
sub rsi, r10
sub rax, rcx
add r13, r8
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x60], rax
jmp 0x100070303
mov eax, dword [r8]
cmp rax, r10
jae 0x100070308
mov eax, dword [r8 + 4]
add r8, rax
cmp r8, r13
jne 0x1000702f4
xor ebx, ebx
cmp r8, r13
je 0x100070346
mov eax, dword [r8]
cmp rax, r10
jne 0x100070346
mov ecx, dword [r8 + 4]
sub rcx, 8
shr rcx, 1
je 0x100070341
lea rdx, [r8 + 8]
movzx eax, word [rdx]
and eax, 0xfff
cmp rax, rsi
jae 0x100070341
inc rbx
add rdx, 2
cmp rbx, rcx
jne 0x100070328
mov rcx, qword [rsp + 0x40]
mov edx, dword [rsp + 0x54]
lea rbp, [0x100000000]
mov esi, 0x8532a4bd
mov r9d, dword [rsp + 0x50]
mov r14, qword [rsp + 0x30]
cmp r8, r13
je 0x10007054f
mov eax, dword [r8]
cmp rax, rcx
ja 0x10007054f
mov edi, dword [r8 + 4]
lea rax, [rdi - 8]
shr rax, 1
cmp rbx, rax
jne 0x1000703a1
add r8, rdi
cmp r8, r13
je 0x10007054f
mov eax, dword [r8]
cmp rax, rcx
ja 0x10007054f
xor ebx, ebx
jmp 0x100070375
mov eax, dword [r8]
cmp rax, rcx
jne 0x1000703bf
movzx eax, word [r8 + rbx*2 + 8]
and eax, 0xfff
cmp rax, qword [rsp + 0x60]
jae 0x10007054f
mov edi, 0xf000
mov rax, rbx
inc rbx
test word [r8 + rax*2 + 8], di
je 0x100070360
movzx r10d, word [r8 + rax*2 + 8]
mov r13d, r10d
xor r12d, r12d
and r13d, 0xfff
add r13d, dword [r8]
add r13, rbp
mov rax, r13
sub rax, r11
je 0x100070468
mov rdi, rax
movzx eax, byte [r11 + r12]
inc r12
sub eax, 0x7acd5b43
add r9d, eax
add eax, edx
imul rax, rsi
mov qword [rsp + 0x58], rax
shr rax, 0x20
mov ecx, dword [rsp + 0x58]
lea edx, [rcx + rax*2 - 0x7fffffff]
sar ecx, 0x1f
btr ecx, 0x1f
sub edx, ecx
mov ecx, edx
sar ecx, 0x1f
btr ecx, 0x1f
add ecx, edx
mov eax, ecx
imul eax, eax, 0x1c57
rol eax, 0xd
ror ecx, 0xd
xor eax, ecx
imul rax, rsi
mov qword [rsp + 0x58], rax
mov edx, dword [rsp + 0x58]
shr rax, 0x20
add edx, eax
add r9d, edx
cmp r12, rdi
jb 0x1000703f6
mov dword [rsp + 0x54], edx
mov dword [rsp + 0x50], r9d
mov rax, qword [r13]
shr r10d, 0xc
mov qword [rsp + 0x58], rax
cmp r10d, 3
je 0x10007048b
sub r10d, 0xa
neg r10d
sbb r11d, r11d
add r11d, 3
jmp 0x100070491
mov r11d, 2
mov r10, r14
neg r10
sub r11d, 2
je 0x1000704b9
cmp r11d, 1
je 0x1000704a9
or r10, 0xffffffffffffffff
jmp 0x1000704c1
add rax, r10
mov qword [rsp + 0x58], rax
mov r10d, 8
jmp 0x1000704c1
add dword [rsp + 0x58], r10d
mov r10, r15
xor r11d, r11d
test r10, r10
je 0x10007053c
movzx eax, byte [rsp + r11 + 0x58]
inc r11
sub eax, 0x7acd5b43
add r9d, eax
add eax, edx
imul rax, rsi
mov qword [rsp + 0x30], rax
mov ecx, dword [rsp + 0x30]
shr rax, 0x20
lea edx, [rcx + rax*2 - 0x7fffffff]
sar ecx, 0x1f
btr ecx, 0x1f
sub edx, ecx
mov ecx, edx
sar ecx, 0x1f
btr ecx, 0x1f
add ecx, edx
mov eax, ecx
imul eax, eax, 0x1c57
rol eax, 0xd
ror ecx, 0xd
xor eax, ecx
imul rax, rsi
mov qword [rsp + 0x30], rax
mov edx, dword [rsp + 0x30]
shr rax, 0x20
add edx, eax
add r9d, edx
cmp r11, r10
jb 0x1000704c9
mov dword [rsp + 0x54], edx
mov dword [rsp + 0x50], r9d
lea r11, [r10 + r13]
mov rcx, qword [rsp + 0x40]
mov r13, qword [rsp + 0x48]
jmp 0x100070360
mov r10, qword [rsp + 0xa0]
xor r8d, r8d
mov dil, r8b
mov r12, qword [rsp + 0x90]
mov r14, qword [rsp + 0x98]
sub r10, r11
mov rbp, qword [rsp + 0x80]
je 0x1000705ec
movzx eax, byte [r8 + r11]
inc r8
sub eax, 0x7acd5b43
add r9d, eax
add eax, edx
imul rax, rsi
mov qword [rsp + 0x30], rax
shr rax, 0x20
mov ecx, dword [rsp + 0x30]
lea edx, [rcx + rax*2 - 0x7fffffff]
sar ecx, 0x1f
btr ecx, 0x1f
sub edx, ecx
mov ecx, edx
sar ecx, 0x1f
btr ecx, 0x1f
add ecx, edx
mov eax, ecx
imul eax, eax, 0x1c57
rol eax, 0xd
ror ecx, 0xd
xor eax, ecx
imul rax, rsi
mov qword [rsp + 0x30], rax
mov edx, dword [rsp + 0x30]
shr rax, 0x20
add edx, eax
add r9d, edx
cmp r8, r10
jb 0x10007057a
mov dword [rsp + 0x54], edx
mov dword [rsp + 0x50], r9d
mov rbx, qword [rsp + 0x70]
mov esi, dword [rsp + 0x38]
xor ecx, ecx
mov rax, rcx
inc rcx
and eax, 7
mov al, byte [rsp + rax + 0x50]
mov byte [rsp + rcx + 0xa7], al
cmp rcx, 8
jb 0x1000705f7
mov eax, 0xfff0a1e5
mov r11, rbx
mov r10, rbp
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x30], rbx
mov r13, r14
and r13d, 7
je 0x100070aeb
mov ebx, esi
not ebx
xor r8d, r8d
xor r11d, r11d
and dword [rsp + 0x60], r8d
mov dword [rsp + 0x48], r8d
test r13d, r13d
jle 0x10007068e
lea r9d, [r8 + 0x38]
cmp r11d, r15d
movzx edx, byte [r10]
jge 0x10007066d
lea ecx, [r9 - 0x20]
shl edx, cl
or dword [rsp + 0x60], edx
jmp 0x100070675
mov ecx, r9d
shl edx, cl
or r8d, edx
inc r11d
inc r10
sub r9d, 8
cmp r11d, r13d
jl 0x100070658
mov dword [rsp + 0x48], r8d
mov qword [rsp + 0x40], r10
movzx r8d, word [rsp + 0xac]
mov ecx, esi
mov esi, dword [rsp + 0xac]
movzx r9d, word [rsp + 0xae]
movzx r11d, word [rsp + 0xaa]
movzx r10d, ax
sub ecx, r9d
xor esi, eax
xor ecx, eax
xor ebx, ecx
xor esi, ebx
xor esi, dword [rsp + 0x38]
mov edx, esi
sub edx, r9d
mov ecx, esi
shr ecx, 0xb
rol edx, 1
imul edx, r11d
xor edx, ecx
xor ebx, edx
mov ecx, ebx
ror ecx, 0xd
sub ecx, r10d
imul ecx, r8d
xor esi, ecx
mov ecx, esi
mov edx, esi
sub edx, eax
ror edx, 9
ror ecx, 0xd
imul edx, r9d
sub edx, ecx
xor ebx, edx
mov ecx, ebx
mov edx, eax
sub edx, ebx
rol edx, 6
rol ecx, 4
imul edx, r8d
xor ecx, edx
mov edx, r10d
xor esi, ecx
xor edx, esi
rol edx, 3
mov ecx, esi
ror ecx, 8
imul edx, r11d
xor ecx, edx
mov edx, dword [rsp + 0xac]
xor ebx, ecx
xor edx, ebx
mov ecx, ebx
rol edx, 7
shr ecx, 7
imul edx, r10d
sub edx, ecx
mov ecx, r10d
xor esi, edx
mov edx, esi
xor ecx, esi
ror edx, 0xe
imul ecx, r9d
sub ecx, edx
xor ebx, ecx
mov edx, ebx
mov ecx, ebx
sub edx, eax
ror edx, 0xb
ror ecx, 4
imul edx, r8d
xor ecx, edx
mov edx, dword [rsp + 0xac]
xor esi, ecx
xor edx, esi
mov ecx, esi
rol edx, 0xa
rol ecx, 0xa
imul edx, r11d
sub edx, ecx
xor ebx, edx
mov ecx, ebx
mov edx, ebx
ror edx, 3
xor ebx, dword [rsp + 0x48]
xor ecx, r11d
mov r8d, ebx
xor r9d, r9d
imul ecx, r10d
add edx, ecx
xor edx, dword [rsp + 0x60]
xor esi, edx
test r13d, r13d
mov edx, esi
jle 0x1000707d4
mov rcx, qword [rsp + 0x30]
cmp r9d, r15d
jge 0x1000707ba
rol edx, 8
mov byte [rcx], dl
inc rcx
xor dil, dl
jmp 0x1000707c7
rol r8d, 8
mov byte [rcx], r8b
inc rcx
xor dil, r8b
inc r9d
cmp r9d, r13d
jl 0x1000707a8
mov qword [rsp + 0x30], rcx
lea ecx, [r13 - 4]
test ecx, ecx
jle 0x100070ad3
sub r15d, ecx
shl r15d, 3
mov ecx, r15d
shr ebx, cl
shl ebx, cl
mov r13d, dword [rsp + 0x48]
mov r10, qword [rsp + 0x40]
mov r11, qword [rsp + 0x30]
mov r15, r14
shr r15, 3
test r15, r15
je 0x100070a1b
mov r12d, dword [rsp + 0x60]
movzx edx, word [rsp + 0xae]
mov r14d, edx
movzx ecx, word [rsp + 0xac]
mov ebp, dword [rsp + 0xac]
xor ebp, eax
mov dword [rsp + 0x30], ecx
neg r14d
movzx ecx, word [rsp + 0xaa]
mov dword [rsp + 0x38], ecx
movzx ecx, ax
mov dword [rsp + 0x40], edx
mov dword [rsp + 0x48], ecx
movzx r9d, byte [r10 + 1]
movzx ecx, byte [r10]
shl ecx, 8
movzx r8d, byte [r10 + 4]
shl r8d, 8
add r10, 8
or r9d, ecx
movzx ecx, byte [r10 - 6]
shl r9d, 8
or r9d, ecx
shl r9d, 8
movzx ecx, byte [r10 - 5]
or r9d, ecx
movzx ecx, byte [r10 - 3]
or r8d, ecx
xor esi, r9d
movzx ecx, byte [r10 - 2]
shl r8d, 8
or r8d, ecx
shl r8d, 8
movzx ecx, byte [r10 - 1]
or r8d, ecx
mov ecx, esi
sub ecx, edx
xor ecx, eax
xor ecx, r8d
xor ebx, ecx
movzx ecx, word [rsp + 0xaa]
xor esi, ebx
xor esi, ebp
lea edx, [r14 + rsi]
rol edx, 1
imul edx, ecx
mov ecx, esi
shr ecx, 0xb
xor edx, ecx
xor ebx, edx
mov ecx, ebx
movzx edx, word [rsp + 0xac]
ror ecx, 0xd
sub ecx, dword [rsp + 0x48]
imul ecx, edx
xor esi, ecx
mov ecx, esi
mov edx, esi
sub edx, eax
ror edx, 9
ror ecx, 0xd
imul edx, dword [rsp + 0x40]
sub edx, ecx
xor ebx, edx
mov edx, eax
mov ecx, ebx
sub edx, ebx
rol edx, 6
rol ecx, 4
imul edx, dword [rsp + 0x30]
xor ecx, edx
xor esi, ecx
mov edx, dword [rsp + 0x48]
mov ecx, esi
xor edx, esi
rol edx, 3
ror ecx, 8
imul edx, dword [rsp + 0x38]
xor ecx, edx
mov edx, dword [rsp + 0xac]
xor ebx, ecx
mov ecx, ebx
xor edx, ebx
shr ecx, 7
rol edx, 7
imul edx, dword [rsp + 0x48]
sub edx, ecx
xor esi, edx
mov ecx, dword [rsp + 0x48]
xor ecx, esi
mov edx, esi
ror edx, 0xe
imul ecx, dword [rsp + 0x40]
sub ecx, edx
xor ebx, ecx
mov edx, ebx
mov ecx, ebx
sub edx, eax
ror edx, 0xb
ror ecx, 4
imul edx, dword [rsp + 0x30]
xor ecx, edx
xor esi, ecx
mov edx, dword [rsp + 0xac]
mov ecx, esi
xor edx, esi
rol edx, 0xa
rol ecx, 0xa
imul edx, dword [rsp + 0x38]
sub edx, ecx
xor ebx, edx
mov edx, ebx
mov ecx, ebx
xor ebx, r13d
xor ecx, dword [rsp + 0x38]
mov r13d, r8d
mov byte [r11 + 7], bl
ror edx, 3
imul ecx, dword [rsp + 0x48]
add edx, ecx
xor edx, r12d
mov r12d, r9d
xor esi, edx
mov edx, dword [rsp + 0x40]
mov byte [r11 + 3], sil
xor dil, sil
ror esi, 8
xor dil, bl
mov byte [r11 + 2], sil
ror ebx, 8
mov byte [r11 + 6], bl
xor dil, sil
ror esi, 8
mov byte [r11 + 1], sil
xor dil, bl
ror ebx, 8
mov byte [r11 + 5], bl
xor dil, sil
ror esi, 8
xor dil, bl
ror ebx, 8
mov cl, bl
mov byte [r11], sil
mov byte [r11 + 4], bl
add r11, 8
xor cl, sil
xor dil, cl
ror esi, 8
ror ebx, 8
sub r15, 1
jne 0x10007084c
mov rbp, qword [rsp + 0x80]
mov r12, qword [rsp + 0x90]
mov r14, qword [rsp + 0x98]
mov al, byte [r14 + rbp + 8]
xor al, dil
je 0x100070b15
call fcn.1000024bc
mov r9d, 0xffff
and r12, 0xfffffffffffffff8
mov r11, qword [rsp + 0x88]
lea r8, [r12 + 0xfff]
mov r10, rax
lea r13, [0x100059e28]
mov rax, 0xfffffffffffff000
mov qword [r11 + 0x10], r13
and r10, rax
and r8, rax
xor edi, edi
mov rcx, qword [0x1003feeb8]
imul rcx, rcx, 0x343fd
shl rdi, 0x10
shr r9, 0x10
add rcx, 0x269ec3
mov rax, rcx
shr rax, 0x10
movzx edx, ax
or rdi, rdx
test r9, r9
jne 0x100070a6c
mov qword [0x1003feeb8], rcx
movabs rax, 0x8000800080008001
mul rdi
shr rdx, 0xf
imul rdx, rdx, 0xffff
mov rax, qword [rsp + 0x78]
sub rdi, rdx
inc rdi
mov qword [rax + 0x98], r10
mov qword [rax + 0xb0], rdi
mov qword [rsp + 0x78], r9
jmp 0x100070b0b
xor ebx, ebx
test ecx, ecx
jns 0x1000707ee
neg ecx
shl ecx, 3
shr esi, cl
shl esi, cl
jmp 0x1000707ee
mov dword [rsp + 0x60], esi
xor ebx, ebx
mov r13d, esi
not r13d
xor esi, esi
jmp 0x1000707fd
mov rax, qword [rsp + 0x78]
mov qword [r12], rax
add r12, 8
cmp r12, r8
jb 0x100070afe
jmp 0x100070c2b
mov rax, qword [0x10014d838]
lea r15, [0x100000000]
mov rsi, r15
mov r13, qword [rsp + 0x70]
mov rbx, rbp
sub rbx, r13
sub rsi, rax
jne 0x100070b3f
test rbx, rbx
je 0x100070c18
mov rcx, qword [0x1000199f8]
mov r11, r13
lea r8d, [rcx - 1]
xor edi, edi
sub r11, rbp
sub ebp, r15d
test r8d, r8d
lea r12d, [r14 + rbp]
lea r14, [0x100000000]
js 0x100070b95
lea eax, [r8 + rdi]
cdq
sub eax, edx
sar eax, 1
movsxd rdx, eax
mov r9d, dword [r14 + rdx*4 + 0x199fc]
and r9d, 0xfffffff
cmp ebp, r9d
jae 0x100070b8b
lea r8d, [rax - 1]
jmp 0x100070b90
jbe 0x100070b9a
lea edi, [rax + 1]
cmp r8d, edi
jge 0x100070b65
movsxd r10, edi
jmp 0x100070c11
movsxd r10, eax
jmp 0x100070c11
mov edx, dword [r14 + r10*4 + 0x199fc]
mov eax, edx
and eax, 0xfffffff
cmp eax, r12d
jae 0x100070c18
mov edi, edx
mov r8, rdx
sar edx, 0x1e
shl edi, 2
and r8d, 0xfffffff
and edx, 3
sar edi, 0x1e
add r8, r15
xor r9d, r9d
and edi, 3
sub edi, 1
je 0x100070bed
sub edi, 1
je 0x100070be8
cmp edi, 1
jne 0x100070bf3
mov r9, rsi
jmp 0x100070bf3
mov r9, rbx
jmp 0x100070bf3
mov r9, rsi
sub r9, rbx
sub edx, 2
je 0x100070c03
cmp edx, 1
jne 0x100070c0e
add qword [r8 + r11], r9
jmp 0x100070c07
add dword [r8 + r11], r9d
mov rcx, qword [0x1000199f8]
inc r10
mov eax, ecx
cmp r10, rax
jb 0x100070b9f
mov eax, dword [0x100015b94]
mov eax, 0x5507f124
mov r11, qword [rsp + 0x88]
mov qword [r11 + 0x10], r13
mov rcx, qword [rsp + 0xb0]
xor rcx, rsp
call fcn.1002d7828
mov rbx, qword [rsp + 0x110]
add rsp, 0xc0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret