Function at 0x18006b020
Capabilities:
Hash data with crc32

Disassembly:
push rbp
push rsi
push r13
push r14
lea rbp, [rsp - 0xa8]
sub rsp, 0x1a8
mov rax, qword [0x1800c2040]
xor rax, rsp
mov qword [rbp + 8], rax
mov r14, qword [0x1800c6f88]
mov r13d, r9d
mov dword [rsp + 0x34], r8d
mov r10d, edx
mov dword [rsp + 0x38], edx
mov qword [rsp + 0x70], rcx
mov rax, qword [r14 + 0x3ec8]
mov byte [rax + 0xb8], 1
mov rsi, qword [r14 + 0x3ec8]
cmp byte [rsi + 0xbb], 0
je 0x18006b084
xor al, al
jmp 0x18006c2c4
movss xmm2, dword [rsi + 0x250]
and r9d, 0x3000000
cmp qword [rsi + 0x1a8], 0
movss xmm3, dword [rsi + 0x254]
movaps xmmword [rsp + 0x170], xmm7
movaps xmmword [rsp + 0x160], xmm8
movaps xmmword [rsp + 0x150], xmm9
movaps xmmword [rsp + 0x130], xmm11
movaps xmmword [rsp + 0x120], xmm12
movaps xmmword [rsp + 0x110], xmm13
mov dword [rsp + 0x4c], r9d
jne 0x18006b0e9
cmp qword [r14 + 0x4b08], 0
je 0x18006b0f1
movss xmm2, dword [rsi + 0x220]
movss xmm13, dword [0x1800b7a84]
xorps xmm9, xmm9
subss xmm2, dword [rsi + 0x100]
subss xmm3, dword [rsi + 0x104]
test r9d, r9d
je 0x18006b11a
maxss xmm3, xmm13
jmp 0x18006b11d
xorps xmm3, xmm3
mov rdx, qword [rbp + 0xf0]
maxss xmm2, xmm13
lea rcx, [rsp + 0x40]
mov rdx, qword [rdx]
call fcn.1800142b0
movss xmm11, dword [rsi + 0x100]
movss xmm12, dword [rsi + 0x104]
movaps xmm7, xmm11
movss dword [rsp + 0x60], xmm11
movaps xmm8, xmm12
movss dword [rsp + 0x64], xmm12
addss xmm7, dword [rsp + 0x40]
addss xmm8, dword [rsp + 0x44]
movss dword [rsp + 0x68], xmm7
movss dword [rsp + 0x6c], xmm8
test r9d, r9d
je 0x18006b1e6
comiss xmm8, dword [rsi + 0x23c]
jbe 0x18006b1ac
movss xmm0, dword [rsi + 0x244]
comiss xmm0, xmm12
jbe 0x18006b1ac
comiss xmm7, dword [rsi + 0x238]
jbe 0x18006b1ac
movss xmm0, dword [rsi + 0x240]
comiss xmm0, xmm11
ja 0x18006b1e6
cmp byte [r14 + 0x5c38], 0
jne 0x18006b1e6
movss xmm1, dword [0x1800b7c60]
subss xmm7, xmm11
subss xmm8, xmm12
lea rcx, [rsp + 0x40]
movss dword [rsp + 0x40], xmm7
movss dword [rsp + 0x44], xmm8
call fcn.180013a50
xor al, al
jmp 0x18006c28f
mov qword [rsp + 0x1e0], rbx
mov edx, r10d
mov qword [rsp + 0x1a0], rdi
mov qword [rsp + 0x198], r12
mov qword [rsp + 0x190], r15
movaps xmmword [rsp + 0x180], xmm6
movaps xmmword [rsp + 0x140], xmm10
call fcn.180074b60
mov edi, dword [r14 + 0x4b10]
mov rbx, rax
inc edi
mov rcx, rbx
sub rcx, qword [r14 + 0x4b30]
mov r10d, 8
mov eax, dword [rax + 4]
mov dword [rsp + 0x48], eax
movabs rax, 0x73615a240e6c2b45
imul rcx
mov dword [r14 + 0x4b10], edi
mov r15, rdx
sar r15, 8
mov rcx, r15
shr rcx, 0x3f
add r15, rcx
mov qword [rsp + 0x40], r15
cmp edi, dword [r14 + 0x4b18]
jle 0x18006b3db
mov ecx, dword [r14 + 0x4b1c]
xorps xmm6, xmm6
movups xmmword [rbp - 0x78], xmm6
mov dword [rbp - 0x74], 0xbf800000
movups xmmword [rbp - 0x68], xmm6
movups xmmword [rbp - 0x58], xmm6
movups xmmword [rbp - 0x48], xmm6
movups xmmword [rbp - 0x38], xmm6
movups xmmword [rbp - 0x28], xmm6
movups xmmword [rbp - 0x18], xmm6
cmp edi, ecx
jle 0x18006b347
test ecx, ecx
je 0x18006b2bd
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18006b2c0
mov eax, r10d
cmp eax, edi
mov r15d, edi
cmovg r15d, eax
cmp r15d, ecx
jle 0x18006b342
mov rax, qword [0x1800c6f88]
test rax, rax
je 0x18006b2e0
inc dword [rax + 0xf4]
movsxd rax, r15d
imul rcx, rax, 0x70
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r12, qword [r14 + 0x4b20]
mov qword [rsp + 0x58], rax
test r12, r12
je 0x18006b334
movsxd rcx, dword [r14 + 0x4b18]
mov rdx, r12
imul r8, rcx, 0x70
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov rcx, qword [0x1800c6f88]
test rcx, rcx
je 0x18006b326
dec dword [rcx + 0xf4]
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [rsp + 0x58]
mov qword [r14 + 0x4b20], rax
mov dword [r14 + 0x4b1c], r15d
mov r15, qword [rsp + 0x40]
movsxd rax, dword [r14 + 0x4b18]
cmp edi, eax
jle 0x18006b3a4
movsxd rdx, edi
cmp rax, rdx
jge 0x18006b3a4
movups xmm0, xmmword [rbp - 0x78]
imul rcx, rax, 0x70
sub rdx, rax
nop word [rax + rax]
mov rax, qword [r14 + 0x4b20]
lea rcx, [rcx + 0x70]
movups xmmword [rcx + rax - 0x70], xmm0
movups xmmword [rcx + rax - 0x60], xmm6
movups xmmword [rcx + rax - 0x50], xmm6
movups xmmword [rcx + rax - 0x40], xmm6
movups xmmword [rcx + rax - 0x30], xmm6
movups xmmword [rcx + rax - 0x20], xmm6
movups xmmword [rcx + rax - 0x10], xmm6
sub rdx, 1
jne 0x18006b370
lea rcx, [rbp - 0x68]
mov dword [r14 + 0x4b18], edi
call fcn.180061e00
mov rcx, qword [rbp - 0x58]
test rcx, rcx
je 0x18006b3d5
mov rax, qword [0x1800c6f88]
test rax, rax
je 0x18006b3cf
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r10d, 8
movsxd rax, dword [r14 + 0x4b10]
xor edi, edi
mov r9, qword [r14 + 0x4b20]
imul rcx, rax, 0x70
add r9, 0xffffffffffffff90
add r9, rcx
mov qword [rbx + 0x10], r9
mov qword [rsp + 0x58], r9
mov dword [r9], r15d
mov rax, qword [rbx + 0x10]
add rax, 0x10
mov qword [rbx + 0x198], rax
test r13d, 0xe000
mov dword [rax], edi
mov dword [rax + 4], 1
sete al
mov byte [rbx + 0x22e], al
test r13d, 0xe000
jne 0x18006b44d
bt r13d, 0x18
jb 0x18006b445
test byte [rsi + 0x14], 0x40
mov eax, 0x8000
je 0x18006b44a
mov eax, 0x2000
or r13d, eax
mov eax, r13d
mov ecx, r13d
bts ecx, 0x12
and eax, 0xe000
cmp eax, 0x4000
mov rax, qword [rsi + 0x378]
cmovne ecx, r13d
mov edx, ecx
bts edx, 9
test cl, 1
cmove edx, ecx
mov ecx, edx
and ecx, 0xfffcffff
test edx, 0x3000000
cmove ecx, edx
mov edx, ecx
btr edx, 0xb
bt ecx, 0xc
cmovae edx, ecx
mov r8d, edx
or r8d, 0x10
test dl, 0xf
cmovne r8d, edx
mov r13d, r8d
or r13d, 0x10
test dword [rax + 0x14], 0x100
mov eax, dword [r14 + 0x3e48]
cmove r13d, r8d
cmp dword [rbx + 0x68], eax
je 0x18006b4cb
mov r12d, edi
mov dword [rsp + 0x30], edi
jmp 0x18006b4d8
movsx r12d, word [rbx + 0x78]
inc r12d
mov dword [rsp + 0x30], r12d
mov r8d, dword [rsp + 0x38]
movss xmm6, dword [rbp + 0xf8]
mov dword [rbx], r8d
mov dword [rbx + 4], r13d
mov eax, dword [r14 + 0x3e48]
mov dword [rbx + 0x68], eax
mov eax, dword [rsp + 0x34]
mov dword [rbx + 0x6c], eax
mov rax, qword [rbp + 0xf0]
movss dword [rbx + 0xcc], xmm6
mov qword [rbx + 0x180], rsi
mov qword [rbx + 0x178], rsi
mov byte [rbx + 0x222], dil
movsd xmm0, qword [rax]
movsd qword [r9 + 8], xmm0
mov word [rbx + 0x78], r12w
test r12d, r12d
jle 0x18006b6cf
mov r15d, dword [rbx + 0x1b0]
cmp r15d, r12d
jge 0x18006b61e
mov ecx, dword [rbx + 0x1b4]
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], rdi
cmp r15d, ecx
jne 0x18006b5fe
inc r15d
test ecx, ecx
je 0x18006b573
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18006b576
mov eax, r10d
cmp eax, r15d
cmovg r15d, eax
cmp r15d, ecx
jle 0x18006b5fe
mov rax, qword [0x1800c6f88]
test rax, rax
je 0x18006b594
inc dword [rax + 0xf4]
movsxd rcx, r15d
shl rcx, 4
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rcx, rax
mov qword [rbp], rax
mov rax, qword [rbx + 0x1b8]
mov qword [rbp - 8], rax
test rax, rax
je 0x18006b5eb
movsxd r8, dword [rbx + 0x1b0]
mov rdx, rax
shl r8, 4
call sub.VCRUNTIME140.dll_memcpy
mov rcx, qword [0x1800c6f88]
test rcx, rcx
je 0x18006b5dd
dec dword [rcx + 0xf4]
mov rcx, qword [rbp - 8]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rbp]
mov r8d, dword [rsp + 0x38]
mov qword [rbx + 0x1b8], rcx
mov dword [rbx + 0x1b4], r15d
movsxd rcx, dword [rbx + 0x1b0]
mov rax, qword [rbx + 0x1b8]
add rcx, rcx
movups xmm0, xmmword [rsp + 0x78]
movups xmmword [rax + rcx*8], xmm0
inc dword [rbx + 0x1b0]
xor edx, edx
lea rcx, str.Instances
call fcn.180001f80
mov rdx, qword [0x1800c6f88]
mov r15d, eax
cmp dword [rdx + 0x3f10], eax
jne 0x18006b658
lea r8, str.Instances
mov edx, 0xb
mov ecx, eax
call fcn.180025b50
mov rdx, qword [0x1800c6f88]
not r15d
movzx eax, r12b
movzx ecx, r15b
lea r8, [0x1800a38f0]
xor rcx, rax
shr r15d, 8
movzx eax, byte [rsp + 0x31]
xor r15d, dword [r8 + rcx*4]
movzx ecx, r15b
xor rcx, rax
shr r15d, 8
movzx eax, byte [rsp + 0x32]
xor r15d, dword [r8 + rcx*4]
movzx ecx, r15b
xor rcx, rax
shr r15d, 8
movzx eax, byte [rsp + 0x33]
xor r15d, dword [r8 + rcx*4]
movzx ecx, r15b
shr r15d, 8
xor rcx, rax
xor r15d, dword [r8 + rcx*4]
not r15d
cmp dword [rdx + 0x3f10], r15d
jne 0x18006b6d9
movsxd r8, r12d
mov edx, 4
mov ecx, r15d
call fcn.180025b50
jmp 0x18006b6d2
mov r15d, r8d
mov rdx, qword [0x1800c6f88]
movsx eax, word [rbx + 0x78]
test eax, eax
jne 0x18006b6ea
lea rax, [rbx + 0x1a0]
jmp 0x18006b6f9
dec eax
cdqe
shl rax, 4
add rax, qword [rbx + 0x1b8]
movss xmm10, dword [0x1800b7c30]
mov dword [rax], r15d
cmp dword [rsp + 0x4c], edi
je 0x18006b888
mov eax, r13d
movaps xmm1, xmm10
and eax, 0x3000000
movaps xmm0, xmm10
cmp eax, 0x1000000
jne 0x18006b72e
movss xmm0, dword [0x1800b79c0]
bt r13d, 0x18
jae 0x18006b754
comiss xmm6, xmm9
jbe 0x18006b754
ucomiss xmm6, xmm10
movaps xmm1, xmm6
jp 0x18006b746
je 0x18006b754
ucomiss xmm0, xmm10
jp 0x18006b75c
jne 0x18006b75c
movaps xmm0, xmm9
jmp 0x18006b75c
ucomiss xmm0, xmm10
jp 0x18006b75c
je 0x18006b795
ucomiss xmm1, xmm10
jp 0x18006b768
jne 0x18006b768
movaps xmm1, xmm9
or dword [rdx + 0x47a0], 4
cvttss2si eax, xmm1
movd xmm1, eax
cvttss2si eax, xmm0
cvtdq2ps xmm1, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rdx + 0x47c8], xmm1
movss dword [rdx + 0x47cc], xmm0
test dword [rsp + 0x48], 0x3000000
jne 0x18006b7b0
or dword [rdx + 0x47a0], 0x80
mov qword [rdx + 0x47d0], rdi
mov rcx, qword [rsp + 0x70]
subss xmm7, xmm11
subss xmm8, xmm12
mov eax, r13d
shr eax, 0xd
lea r8, [rsp + 0x4c]
and eax, 0x800
xor r9d, r9d
mov edx, r15d
mov dword [rsp + 0x20], eax
movss dword [rsp + 0x4c], xmm7
movss dword [rsp + 0x50], xmm8
call fcn.18000abe0
mov rax, qword [r14 + 0x3ec8]
mov qword [rbx + 0x180], rax
movups xmm0, xmmword [rax + 0x218]
movups xmmword [rbx + 0x108], xmm0
movss xmm0, dword [rax + 0x28]
movss xmm1, dword [rax + 0x20]
movss xmm3, dword [rax + 0x24]
addss xmm0, xmm1
movss xmm2, dword [rax + 0x2c]
movss dword [rbx + 0xe8], xmm1
addss xmm2, xmm3
movss dword [rbx + 0xec], xmm3
movss dword [rbx + 0xf0], xmm0
movss dword [rbx + 0xf4], xmm2
movups xmm0, xmmword [rax + 0x1f8]
movups xmmword [rbx + 0xf8], xmm0
test r12d, r12d
jne 0x18006b86a
movzx eax, byte [rbx + 0x22f]
mov byte [rbx + 0x230], al
mov byte [rbx + 0x22f], dil
mov rax, qword [rbx + 0x180]
movss xmm0, dword [rax + 0x90]
comiss xmm0, xmm9
seta al
or byte [rbx + 0x22f], al
jmp 0x18006b8a2
movups xmm0, xmmword [rsp + 0x60]
movups xmmword [rbx + 0xf8], xmm0
movups xmmword [rbx + 0xe8], xmm0
movups xmmword [rbx + 0x108], xmm0
mov ecx, dword [rsp + 0x38]
call fcn.180011110
movaps xmm6, xmmword [rsp + 0x180]
test r12d, r12d
jle 0x18006b8c0
mov ecx, r15d
call fcn.180011110
mov r15, qword [rbx + 0x180]
mov r9, qword [rsp + 0x58]
mov eax, dword [r15 + 0x144]
mov dword [rbx + 0xb0], eax
movups xmm0, xmmword [r15 + 0x238]
movups xmmword [rbx + 0x158], xmm0
movzx eax, byte [r15 + 0xbb]
mov byte [rbx + 0x232], al
movups xmm0, xmmword [r15 + 0x218]
movups xmmword [r9 + 0x28], xmm0
movups xmm0, xmmword [r15 + 0x228]
movups xmmword [r9 + 0x38], xmm0
movss xmm1, dword [rsi + 0x148]
movss dword [r9 + 0x60], xmm1
movsd xmm0, qword [r15 + 0x130]
movsd qword [r9 + 0x48], xmm0
movsd xmm0, qword [r15 + 0x128]
movsd qword [r9 + 0x50], xmm0
movsd xmm1, qword [r15 + 0x118]
movsd qword [r9 + 0x58], xmm1
mov eax, dword [rsi + 0x1bc]
mov dword [r9 + 0x64], eax
mov eax, dword [rsi + 0x1c8]
mov dword [r9 + 0x68], eax
mov qword [r15 + 0x128], rdi
mov qword [r15 + 0x130], rdi
bt r13d, 0x16
jae 0x18006b978
xor cl, cl
jmp 0x18006b98c
bt r13d, 0x15
jae 0x18006b983
mov cl, 1
jmp 0x18006b98c
mov ecx, r13d
shr ecx, 0xa
and cl, 1
mov eax, r13d
mov edx, r13d
shr eax, 0x17
not al
and al, 1
and edx, 0x200
je 0x18006b9a7
movaps xmm3, xmm13
jmp 0x18006b9ab
movaps xmm3, xmm9
test al, al
je 0x18006ba06
test edx, edx
jne 0x18006ba06
movss xmm1, dword [r14 + 0x384c]
movaps xmm2, xmm9
movss dword [rbx + 0xc8], xmm1
movaps xmm0, xmm1
movss dword [rbx + 0xbc], xmm2
addss xmm0, xmm3
movss dword [rbx + 0xc4], xmm0
mov eax, dword [r14 + 0x3850]
mov dword [rbx + 0xc0], eax
bt r13d, 0xa
jb 0x18006b9f7
movaps xmm13, xmm9
test cl, cl
je 0x18006ba1d
movss xmm0, dword [r14 + 0x384c]
jmp 0x18006ba21
movaps xmm1, xmm9
test al, al
je 0x18006b9bc
test edx, edx
je 0x18006b9bc
movss xmm2, dword [r14 + 0x384c]
jmp 0x18006b9c0
movaps xmm0, xmm9
mov qword [rbx + 0x70], 0xffffffffffffffff
addss xmm0, xmm13
mov dword [rbx + 0x94], edi
lea rax, [rbx + 0x108]
mov word [rbx + 0x92], di
subss xmm0, xmm2
movss dword [rbx + 0xb8], xmm0
cmp r15, rsi
je 0x18006ba5a
lea rax, [r15 + 0x238]
movups xmm0, xmmword [rax]
lea rcx, [rbx + 0x118]
lea rdx, [rbx + 0x158]
movups xmmword [rcx], xmm0
movss xmm1, dword [rcx]
movss xmm0, dword [rcx + 4]
maxss xmm1, dword [rbx + 0x108]
maxss xmm0, dword [rbx + 0x10c]
movss dword [rcx], xmm1
movss dword [rcx + 4], xmm0
movss xmm1, dword [rcx + 8]
movss xmm0, dword [rcx + 0xc]
minss xmm1, dword [rbx + 0x110]
minss xmm0, dword [rbx + 0x114]
movss dword [rcx + 8], xmm1
movss dword [rcx + 0xc], xmm0
call fcn.180001130
bt r13d, 0x11
jae 0x18006bad3
movss xmm0, dword [rbx + 0x124]
minss xmm0, dword [r15 + 0x224]
jmp 0x18006badc
movss xmm0, dword [r15 + 0x244]
mov r10, qword [0x1800c6f88]
lea rcx, [rsp + 0x60]
movss dword [rbx + 0x124], xmm0
movss xmm0, dword [rbx + 0x10c]
movss dword [rbx + 0x80], xmm0
movss dword [rbx + 0x7c], xmm0
mov dword [rbx + 0x88], edi
mov qword [rbx + 0x212], rdi
mov byte [rbx + 0x22d], 1
mov word [rbx + 0x1f6], di
movups xmm0, xmmword [r10 + 0x3b7c]
movups xmmword [rsp + 0x60], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [r10 + 0x37f0]
movss dword [rsp + 0x6c], xmm0
call fcn.180002510
mov dword [rbx + 0xa0], eax
lea rcx, [rsp + 0x60]
movups xmm0, xmmword [r10 + 0x3b8c]
movups xmmword [rsp + 0x60], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [r10 + 0x37f0]
movss dword [rsp + 0x6c], xmm0
call fcn.180002510
mov r11, qword [rsp + 0x40]
mov dword [rbx + 0xa4], eax
mov qword [r14 + 0x4b08], rbx
mov dword [rsi + 0x1b0], r11d
cmp r15, rsi
je 0x18006bb9a
mov dword [r15 + 0x1b0], r11d
test byte [rsp + 0x48], 2
je 0x18006bbae
test r13b, 2
jne 0x18006bbae
mov byte [rbx + 0x22c], 1
lea rsi, [r14 + 0x4b50]
cmp r11d, dword [rsi]
jl 0x18006bc32
mov ecx, dword [rsi + 4]
lea r12d, [r11 + 1]
mov dword [rsp + 0x4c], 0xbf800000
cmp r12d, ecx
jle 0x18006bc04
test ecx, ecx
je 0x18006bbdd
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18006bbe2
mov eax, 8
cmp eax, r12d
mov edx, r12d
mov rcx, rsi
cmovg edx, eax
call fcn.180027600
mov r10, qword [0x1800c6f88]
mov r9, qword [rsp + 0x58]
mov r11, qword [rsp + 0x40]
movsxd rax, dword [rsi]
cmp r12d, eax
jle 0x18006bc2f
movsxd r8, r12d
mov rdx, rax
cmp rax, r8
jge 0x18006bc2f
mov eax, dword [rsp + 0x4c]
nop dword [rax + rax]
mov rcx, qword [rsi + 8]
mov dword [rcx + rdx*4], eax
inc rdx
cmp rdx, r8
jl 0x18006bc20
mov dword [rsi], r12d
movsd xmm0, qword [r14 + 0x3e40]
mov rsi, rdi
mov rax, qword [r14 + 0x4b58]
cvtpd2ps xmm0, xmm0
movsxd rcx, r11d
mov r11d, dword [rsp + 0x34]
mov qword [rsp + 0x58], rdi
movss dword [rax + rcx*4], xmm0
movabs rax, 0x4924924924924925
movsd xmm0, qword [r14 + 0x3e40]
cvtpd2ps xmm0, xmm0
movss dword [r9 + 4], xmm0
mov byte [rbx + 0x231], dil
mov r8, qword [rbx + 0x18]
mov rcx, qword [rbx + 0x20]
sub rcx, r8
imul rcx
mov r12, rdx
sar r12, 5
mov rax, r12
shr rax, 0x3f
add r12, rax
test r12d, r12d
je 0x18006bcb8
cmp r12d, r11d
je 0x18006bcb8
mov rax, qword [rbx + 8]
mov rsi, r8
mov qword [rsp + 0x58], rax
mov qword [rbx + 8], rdi
cmp qword [rbx + 8], rdi
jne 0x18006bdb9
imul ecx, r11d, 0x70
lea eax, [r11 + 0x1f]
sar eax, 3
lea edx, [r11 + r11]
and eax, 0xfffffffc
mov dword [rsp + 0x4c], ecx
lea r13d, [rcx + 3]
add r13d, edx
lea ecx, [r11*8]
and r13d, 0xfffffffc
add ecx, r13d
mov dword [rsp + 0x48], ecx
add ecx, eax
mov dword [rsp + 0x38], ecx
add ecx, eax
add eax, ecx
mov dword [rsp + 0x30], ecx
cdqe
mov qword [rsp + 0x70], rax
test r10, r10
je 0x18006bd13
inc dword [r10 + 0xf4]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r8, qword [rsp + 0x70]
xor edx, edx
mov rcx, rax
mov qword [rbx + 8], rax
call sub.VCRUNTIME140.dll_memset
mov rdx, qword [rbx + 8]
movsxd rcx, dword [rsp + 0x4c]
mov r11d, dword [rsp + 0x34]
mov r10, qword [0x1800c6f88]
mov qword [rbx + 0x18], rdx
lea rax, [rcx + rdx]
mov qword [rbx + 0x20], rax
lea rax, [rcx + rdx]
mov qword [rbx + 0x28], rax
lea eax, [r11 + r11]
cdqe
add rax, rcx
movsxd rcx, r13d
add rax, rdx
mov qword [rbx + 0x30], rax
lea rax, [rdx + rcx]
mov qword [rbx + 0x38], rax
lea eax, [r11*8]
cdqe
add rax, rdx
add rax, rcx
mov qword [rbx + 0x40], rax
movsxd rax, dword [rsp + 0x48]
add rax, rdx
mov byte [rbx + 0x228], 1
mov qword [rbx + 0x48], rax
movsxd rax, dword [rsp + 0x38]
add rax, rdx
mov byte [rbx + 0x224], 1
mov qword [rbx + 0x50], rax
movsxd rax, dword [rsp + 0x30]
add rax, rdx
mov qword [rbx + 0x58], rax
cmp byte [rbx + 0x22b], dil
je 0x18006bddc
mov word [rbx + 0x228], 0x100
mov byte [rbx + 0x224], 1
mov byte [rbx + 0x22b], dil
mov dword [rbx + 0x60], edi
mov r13d, 0xffffffff
cmp byte [rbx + 0x224], dil
je 0x18006bf55
mov dword [rbx + 0x64], r13d
mov r8d, edi
mov byte [rbx + 0x225], 1
mov word [rbx + 0x7a], r13w
mov word [rbx + 0x210], r13w
mov qword [rbx + 0x1fa], 0xffffffffffffffff
mov word [rbx + 0x204], r13w
mov word [rbx + 0x1f8], r13w
test r11d, r11d
jle 0x18006bf55
mov r9, rdi
mov rcx, rdi
mov r10d, 0xff
nop word [rax + rax]
mov rdx, qword [rbx + 0x18]
test rsi, rsi
je 0x18006be97
cmp r8d, r12d
jge 0x18006be97
movups xmm0, xmmword [rcx + rsi]
movups xmmword [rcx + rdx], xmm0
movups xmm1, xmmword [rcx + rsi + 0x10]
movups xmmword [rcx + rdx + 0x10], xmm1
movups xmm0, xmmword [rcx + rsi + 0x20]
movups xmmword [rcx + rdx + 0x20], xmm0
movups xmm1, xmmword [rcx + rsi + 0x30]
movups xmmword [rcx + rdx + 0x30], xmm1
movups xmm0, xmmword [rcx + rsi + 0x40]
movups xmmword [rcx + rdx + 0x40], xmm0
movups xmm1, xmmword [rcx + rsi + 0x50]
movups xmmword [rcx + rdx + 0x50], xmm1
movups xmm0, xmmword [rcx + rsi + 0x60]
movups xmmword [rcx + rdx + 0x60], xmm0
jmp 0x18006bf2b
movss xmm2, dword [rcx + rdx + 0x14]
xorps xmm1, xmm1
movups xmmword [rcx + rdx], xmm1
movups xmmword [rbp - 0x28], xmm1
mov qword [rbp - 0x28], 0xffffffffffffffff
movups xmmword [rbp - 0x68], xmm1
mov dword [rbp - 0x68], 0xbf800000
xorps xmm0, xmm0
mov dword [rbp - 0x60], 0xbf800000
psrldq xmm0, 0xd
movd eax, xmm0
movups xmm0, xmmword [rbp - 0x68]
mov dword [rbp - 0x20], 0xffffffff
movups xmmword [rbp - 0x18], xmm1
mov dword [rbp - 0x1a], 0xff00ff
and al, 0xfc
movups xmmword [rcx + rdx + 0x10], xmm0
mov word [rbp - 0x1c], r10w
movups xmm0, xmmword [rbp - 0x28]
mov byte [rbp - 0xb], al
movups xmmword [rcx + rdx + 0x20], xmm1
movups xmmword [rcx + rdx + 0x30], xmm1
movups xmmword [rcx + rdx + 0x40], xmm1
movups xmm1, xmmword [rbp - 0x18]
movups xmmword [rcx + rdx + 0x50], xmm0
movups xmmword [rcx + rdx + 0x60], xmm1
mov byte [rcx + rdx + 0x69], 1
movss dword [rcx + rdx + 0x14], xmm2
mov word [rcx + rdx + 0x63], 0x101
mov byte [rcx + rdx + 0x62], 1
mov rax, qword [rbx + 0x28]
mov word [r9 + rax], r8w
add r9, 2
mov word [rcx + rdx + 0x52], r8w
inc r8d
add rcx, 0x70
cmp r8d, r11d
jl 0x18006be40
mov r10, qword [0x1800c6f88]
mov rax, qword [rsp + 0x58]
mov r12, qword [rsp + 0x198]
test rax, rax
je 0x18006bf7c
test r10, r10
je 0x18006bf73
dec dword [r10 + 0xf4]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
cmp byte [rbx + 0x228], dil
je 0x18006bf8d
mov rcx, rbx
call fcn.1800723f0
movss xmm0, dword [rbx + 0xe4]
ucomiss xmm0, xmm9
movss xmm2, dword [r14 + 0x3c28]
jp 0x18006bfaa
je 0x18006c084
ucomiss xmm0, xmm2
jp 0x18006bfb5
je 0x18006c084
movsxd rax, dword [rsp + 0x34]
movaps xmm1, xmm2
mov rdx, rax
mov r9, rdi
divss xmm1, xmm0
cmp rax, 4
jl 0x18006c05b
lea r8, [rax - 4]
mov rcx, rdi
shr r8, 2
inc r8
lea r9, [r8*4]
nop word [rax + rax]
mov rax, qword [rbx + 0x18]
movaps xmm0, xmm1
lea rcx, [rcx + 0x1c0]
mulss xmm0, dword [rcx + rax - 0x1b0]
movss dword [rcx + rax - 0x1b0], xmm0
movaps xmm0, xmm1
mov rax, qword [rbx + 0x18]
mulss xmm0, dword [rcx + rax - 0x140]
movss dword [rcx + rax - 0x140], xmm0
movaps xmm0, xmm1
mov rax, qword [rbx + 0x18]
mulss xmm0, dword [rcx + rax - 0xd0]
movss dword [rcx + rax - 0xd0], xmm0
movaps xmm0, xmm1
mov rax, qword [rbx + 0x18]
mulss xmm0, dword [rcx + rax - 0x60]
movss dword [rcx + rax - 0x60], xmm0
sub r8, 1
jne 0x18006bff0
cmp r9, rdx
jge 0x18006c084
imul rcx, r9, 0x70
sub rdx, r9
mov rax, qword [rbx + 0x18]
movaps xmm0, xmm1
lea rcx, [rcx + 0x70]
mulss xmm0, dword [rcx + rax - 0x60]
movss dword [rcx + rax - 0x60], xmm0
sub rdx, 1
jne 0x18006c067
movss dword [rbx + 0xe4], xmm2
mov byte [r15 + 0xbb], 1
mov r15, qword [rsp + 0x190]
cmp dword [rbx + 0x188], edi
jle 0x18006c0d0
mov ecx, dword [rbx + 0x18c]
test ecx, ecx
jns 0x18006c0ca
mov eax, ecx
cdq
sub eax, edx
mov edx, edi
sar eax, 1
add eax, ecx
lea rcx, [rbx + 0x188]
test eax, eax
cmovg edx, eax
call fcn.180027110
mov dword [rbx + 0x188], edi
cmp word [rbx + 0x78], di
jne 0x18006c143
movsx eax, word [rbx + 0x1fe]
cmp ax, 0xffff
je 0x18006c0fa
movss xmm1, dword [rbx + 0xdc]
ucomiss xmm1, xmm10
jp 0x18006c0f3
je 0x18006c0fa
mov ecx, eax
call fcn.18006f3f0
movzx eax, word [rbx + 0x1fe]
movsx rcx, word [rbx + 0x1fc]
mov word [rbx + 0x200], ax
mov dword [rbx + 0xdc], 0x7f7fffff
mov word [rbx + 0x1fe], r13w
cmp cx, 0xffff
je 0x18006c143
mov rax, qword [rbx + 0x18]
imul rdx, rcx, 0x70
movss xmm1, dword [rdx + rax + 0x14]
call fcn.18006f3f0
mov word [rbx + 0x1fc], r13w
movaps xmm10, xmmword [rsp + 0x140]
cmp word [rbx + 0x78], di
jne 0x18006c241
cmp word [rbx + 0x202], 0xffff
jne 0x18006c172
cmp word [rbx + 0x204], 0xffff
je 0x18006c172
mov word [rbx + 0x204], r13w
movsx rax, word [rbx + 0x204]
mov word [rbx + 0x202], r13w
cmp ax, 0xffff
je 0x18006c241
movsx r10d, word [rbx + 0x206]
test r10w, r10w
je 0x18006c241
mov r11, qword [rbx + 0x18]
imul r8, rax, 0x70
add r8, r11
cmp r10d, 0xffffffff
jne 0x18006c1b6
movzx eax, word [r8 + 0x56]
jmp 0x18006c1bb
movzx eax, word [r8 + 0x58]
movsx edx, word [r8 + 0x52]
movsx rax, ax
imul rcx, rax, 0x70
movsx eax, word [rcx + r11 + 0x52]
mov word [r8 + 0x52], ax
lea r8d, [rdx + r10]
lea r11d, [r10 + rax]
cmp r8d, r11d
je 0x18006c202
mov rax, qword [rbx + 0x28]
movsxd rcx, r8d
add r8d, r10d
movsx rcx, word [rax + rcx*2]
mov rax, qword [rbx + 0x18]
imul rdx, rcx, 0x70
sub word [rdx + rax + 0x52], r10w
cmp r8d, r11d
jne 0x18006c1e0
mov r8d, edi
cmp dword [rbx + 0x6c], edi
jle 0x18006c233
nop word [rax + rax]
movsxd rax, r8d
imul rcx, rax, 0x70
mov rax, qword [rbx + 0x18]
movsx rdx, word [rcx + rax + 0x52]
mov rax, qword [rbx + 0x28]
mov word [rax + rdx*2], r8w
inc r8d
cmp r8d, dword [rbx + 0x6c]
jl 0x18006c210
mov word [rbx + 0x206], di
mov byte [rbx + 0x229], 1
cmp byte [rbx + 0x22c], dil
je 0x18006c27d
cmp dword [rbx + 0x6c], edi
jle 0x18006c26f
nop
mov rax, qword [rbx + 0x18]
movsxd rdx, edi
imul rcx, rdx, 0x70
mov word [rcx + rax + 0x52], di
mov rax, qword [rbx + 0x28]
mov word [rax + rdx*2], di
inc edi
cmp edi, dword [rbx + 0x6c]
jl 0x18006c250
mov byte [rbx + 0x22c], 0
mov byte [rbx + 0x229], 1
mov rdi, qword [rsp + 0x1a0]
mov al, 1
mov rbx, qword [rsp + 0x1e0]
movaps xmm12, xmmword [rsp + 0x120]
movaps xmm11, xmmword [rsp + 0x130]
movaps xmm9, xmmword [rsp + 0x150]
movaps xmm8, xmmword [rsp + 0x160]
movaps xmm7, xmmword [rsp + 0x170]
movaps xmm13, xmmword [rsp + 0x110]
mov rcx, qword [rbp + 8]
xor rcx, rsp
call fcn.18009dd10
add rsp, 0x1a8
pop r14
pop r13
pop rsi
pop rbp
ret