Function at 0x18006fab4
Capabilities:
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x218]
sub rsp, 0x2e0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm11
mov rax, qword [0x180293020]
xor rax, rsp
mov qword [rbp + 0x170], rax
xor r15d, r15d
mov dword [rsp + 0x70], r8d
mov rdi, rdx
mov qword [rbp - 0x38], rdx
mov qword [rbp - 0x58], rcx
cmp dword [rdx + 0x484], r15d
jge 0x18006fb47
lea edx, [r15 + 2]
mov rcx, rdi
test byte [rdi], dl
jne 0x18006fb39
mov edx, 0xf5
lea r8d, [r15 + 0x1b]
jmp 0x18006fb3c
mov r8d, edx
call fcn.18005af78
mov dword [rdi + 0x484], eax
cmp dword [rdi + 0x488], r15d
jge 0x18006fb6c
test byte [rdi], 4
jne 0x18006fb6c
mov edx, 0x41
mov rcx, rdi
lea r8d, [rdx - 1]
call fcn.18005af78
mov dword [rdi + 0x488], eax
mov rcx, rdi
mov qword [rdi + 8], r15
mov qword [rdi + 0x30], r15
mov qword [rdi + 0x38], r15
mov qword [rdi + 0x40], r15
call fcn.18005a46c
mov r13d, dword [rdi + 0x68]
mov edx, 8
mov byte [rsp + 0x68], r15b
mov rbx, r15
mov qword [rbp - 0x80], rbx
mov r14, r15
mov qword [rbp - 0x60], r15
mov dword [rsp + 0x78], r13d
lea esi, [rdx - 7]
test r13d, r13d
jle 0x18006fbe3
cmp r13d, edx
mov eax, r13d
cmovl eax, edx
test eax, eax
jle 0x18006fbe3
mov rcx, qword [0x18029faf0]
test rcx, rcx
je 0x18006fbcc
add dword [rcx + 0xf4], esi
cdqe
imul rcx, rax, 0x70
call fcn.1800f00dc
mov rbx, rax
mov qword [rbp - 0x80], rax
mov edx, 8
mov r12d, dword [rdi + 0x48]
mov dword [rsp + 0x6c], r12d
test r12d, r12d
jle 0x18006fc23
cmp r12d, edx
mov ecx, r12d
cmovl ecx, edx
test ecx, ecx
jle 0x18006fc23
mov rax, qword [0x18029faf0]
test rax, rax
je 0x18006fc10
add dword [rax + 0xf4], esi
movsxd rcx, ecx
shl rcx, 5
call fcn.1800f00dc
mov r14, rax
mov qword [rbp - 0x60], rax
imul ecx, r13d, 0x70
xor edx, edx
movsxd r8, ecx
mov rcx, rbx
call fcn.1800e2cc0
mov ecx, r12d
xor edx, edx
shl ecx, 5
movsxd r8, ecx
mov rcx, r14
call fcn.1800e2cc0
or r10d, 0xffffffff
mov dword [rsp + 0x74], r15d
cmp dword [rdi + 0x68], r15d
jle 0x18006fd6b
add rbx, 0x44
xor r9d, r9d
mov r14, qword [rdi + 0x70]
mov r8d, r9d
add r14, r15
mov dword [rbx - 4], r10d
cmp dword [rdi + 0x48], r9d
jle 0x18006fd60
mov edx, r10d
mov eax, edx
cmp edx, r10d
jne 0x18006fcad
mov rax, qword [rdi + 0x50]
mov edx, r10d
mov rcx, qword [r9 + rax]
cmp qword [r14 + 0x80], rcx
jne 0x18006fc9e
mov dword [rbx - 4], r8d
mov edx, r8d
add r8d, esi
add r9, 8
mov eax, edx
cmp r8d, dword [rdi + 0x48]
jl 0x18006fc7c
cmp eax, r10d
je 0x18006fd60
mov r9d, dword [rsp + 0x70]
lea rcx, [rbx - 0x44]
mov rdx, qword [rbp - 0x58]
mov r8, r14
call fcn.18006f378
xor r9d, r9d
test al, al
je 0x18006fd60
mov eax, dword [r14 + 0x4c]
lea rcx, [0x18027f18c]
movsxd rdx, dword [rbx - 4]
mov r8, qword [rbp - 0x60]
shr eax, 8
and al, sil
shl rdx, 5
or byte [rsp + 0x68], al
add rdx, r8
cmp qword [r14 + 0x38], r9
cmovne rcx, qword [r14 + 0x38]
mov qword [rbx - 0xc], rcx
jmp 0x18006fd1f
cmp word [rcx + 2], r9w
je 0x18006fd25
movzx eax, word [rcx + 2]
cmp dword [rbx], eax
cmovge eax, dword [rbx]
add rcx, 4
mov dword [rbx], eax
cmp word [rcx], r9w
jne 0x18006fd09
add dword [rdx], esi
mov r10d, 0xffffffff
mov eax, dword [rbx]
cmp dword [rdx + 4], eax
mov ecx, dword [rsp + 0x74]
cmovge eax, dword [rdx + 4]
add ecx, esi
add rbx, 0x70
mov dword [rdx + 4], eax
add r15, 0x88
mov dword [rsp + 0x74], ecx
cmp ecx, dword [rdi + 0x68]
jl 0x18006fc61
mov rbx, qword [rbp - 0x80]
xor r15d, r15d
jmp 0x18006fd6f
xor r14d, r14d
mov sil, r14b
jmp 0x180070ba8
mov r8, qword [rbp - 0x60]
mov eax, r13d
mov r14d, r15d
mov qword [rbp - 0x40], rax
test r13d, r13d
jle 0x18006fff1
mov r12d, r13d
lea r14, [rbx + 0x48]
mov qword [rbp - 0x70], r12
mov edi, r15d
mov edx, dword [r14 - 4]
lea rcx, [r14 + 8]
movsxd r15, dword [r14 - 8]
add edx, 0x20
shl r15, 5
sar edx, 5
add r15, r8
call fcn.180055370
movsxd r8, dword [r14 + 8]
xor edx, edx
mov rcx, qword [r14 + 0x10]
shl r8, 2
call fcn.1800e2cc0
xor edx, edx
lea rbx, [r15 + 0x10]
cmp dword [rbx], edx
jne 0x18006fdf1
mov edx, dword [r15 + 4]
mov rcx, rbx
add edx, 0x20
sar edx, 5
call fcn.180055370
movsxd r8, dword [rbx]
xor edx, edx
mov rcx, qword [rbx + 8]
shl r8, 2
call fcn.1800e2cc0
xor edx, edx
mov rbx, qword [r14 - 0x10]
cmp word [rbx], dx
je 0x18006fe8f
cmp word [rbx + 2], dx
je 0x18006fe8b
movzx r12d, word [rbx]
movzx eax, word [rbx + 2]
cmp r12d, eax
ja 0x18006fe7e
mov rax, qword [r15 + 0x18]
mov ecx, r12d
and ecx, 0x1f
movsxd r13, r12d
sar r13, 5
mov dword [rsp + 0x70], ecx
mov eax, dword [rax + r13*4]
bt eax, ecx
jb 0x18006fe70
mov rcx, qword [r14 - 0x30]
mov edx, r12d
call fcn.180076880
xor edx, edx
test eax, eax
je 0x18006fe72
add dword [r14], esi
add dword [r15 + 8], esi
mov rcx, qword [r14 + 0x10]
mov edx, dword [rsp + 0x70]
mov eax, dword [rcx + r13*4]
bts eax, edx
mov dword [rcx + r13*4], eax
mov rcx, qword [r15 + 0x18]
mov eax, dword [rcx + r13*4]
bts eax, edx
mov dword [rcx + r13*4], eax
add edi, esi
xor edx, edx
movzx eax, word [rbx + 2]
add r12d, esi
cmp r12d, eax
jle 0x18006fe15
add rbx, 4
cmp word [rbx], dx
jne 0x18006fdfe
mov r12, qword [rbp - 0x70]
mov r8, qword [rbp - 0x60]
add r14, 0x70
sub r12, rsi
mov qword [rbp - 0x70], r12
jne 0x18006fd90
mov rbx, qword [rbp - 0x80]
mov r14, qword [rbp - 0x40]
add rbx, 0x60
mov dword [rsp + 0x64], edi
mov rdi, qword [rbp - 0x38]
mov qword [rbp - 0x70], r14
mov edx, dword [rbx - 0x18]
mov rcx, rbx
call fcn.180070d28
mov r12, qword [rbx - 8]
movsxd rax, dword [rbx - 0x10]
mov r15, r12
lea rax, [r12 + rax*4]
mov qword [rbp - 0x58], rax
cmp r12, rax
jae 0x18006ffa6
xor edx, edx
mov r13d, dword [r15]
test r13d, r13d
je 0x18006ff95
mov r14d, edx
bt r13d, r14d
jae 0x18006ff84
mov r8d, dword [rbx]
lea rcx, [r15*8]
xor eax, eax
xorps xmm6, xmm6
mov qword [rbp + 0x10], rax
lea rax, [r12*8]
sub ecx, eax
and ecx, 0xffffffe0
add ecx, r14d
movzx eax, cx
mov ecx, dword [rbx + 4]
movups xmmword [rbp], xmm6
mov dword [rbp + 8], eax
cmp r8d, ecx
jne 0x18006ff5f
inc r8d
test ecx, ecx
je 0x18006ff46
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18006ff4b
mov eax, 8
cmp eax, r8d
mov rcx, rbx
cmovg r8d, eax
mov edx, r8d
call fcn.180070d28
xor edx, edx
movsxd rax, dword [rbx]
movups xmm0, xmmword [rbp]
movsd xmm1, qword [rbp + 0x10]
lea rcx, [rax + rax*4]
mov rax, qword [rbx + 8]
movups xmmword [rax + rcx*8], xmm6
movups xmmword [rax + rcx*8 + 0x10], xmm0
movsd qword [rax + rcx*8 + 0x20], xmm1
add dword [rbx], esi
add r14d, esi
cmp r14d, 0x20
jb 0x18006fef4
mov rax, qword [rbp - 0x58]
add r15, 4
cmp r15, rax
jb 0x18006fee5
mov r14, qword [rbp - 0x70]
mov rcx, qword [rbx - 8]
xor r15d, r15d
test rcx, rcx
je 0x18006ffd1
mov rax, qword [0x18029faf0]
mov qword [rbx - 0x10], r15
test rax, rax
je 0x18006ffc8
dec dword [rax + 0xf4]
call fcn.1800ef914
mov qword [rbx - 8], r15
add rbx, 0x70
sub r14, rsi
mov qword [rbp - 0x70], r14
jne 0x18006febc
mov r14d, dword [rsp + 0x64]
mov r12d, dword [rsp + 0x6c]
mov r13d, dword [rsp + 0x78]
test r12d, r12d
jle 0x180070035
mov rbx, qword [rbp - 0x60]
add rbx, 0x18
mov r15d, r12d
xor r12d, r12d
mov rcx, qword [rbx]
test rcx, rcx
je 0x18007002a
mov rax, qword [0x18029faf0]
mov qword [rbx - 8], r12
test rax, rax
je 0x180070022
dec dword [rax + 0xf4]
call fcn.1800ef914
mov qword [rbx], r12
add rbx, 0x20
sub r15, rsi
jne 0x180070004
jmp 0x180070038
xor r12d, r12d
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x18007005c
mov rax, qword [0x18029faf0]
test rax, rax
je 0x180070053
dec dword [rax + 0xf4]
call fcn.1800ef914
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x70], r12
mov r15, r12
test r14d, r14d
jle 0x1800700a2
mov ecx, 8
mov eax, r14d
cmp r14d, ecx
cmovl eax, ecx
test eax, eax
jle 0x1800700a2
mov rcx, qword [0x18029faf0]
test rcx, rcx
je 0x18007008c
add dword [rcx + 0xf4], esi
cdqe
lea rcx, [rax + rax*2]
shl rcx, 3
call fcn.1800f00dc
mov r15, rax
mov qword [rbp - 0x70], rax
lea ecx, [r14 + r14*2]
xor edx, edx
shl ecx, 3
movsxd r8, ecx
mov rcx, r15
call fcn.1800e2cc0
mov rcx, qword [0x18029faf0]
mov dword [rsp + 0x6c], r12d
test rcx, rcx
je 0x1800700cd
add dword [rcx + 0xf4], esi
mov ecx, 0x40000
call fcn.1800f00dc
mov rcx, qword [0x18029faf0]
mov rbx, rax
test rcx, rcx
je 0x1800700ec
add dword [rcx + 0xf4], esi
mov ecx, 0x40
call fcn.1800f00dc
movss xmm11, dword [0x18027ff2c]
mov edx, 8
mov qword [rbp - 0x30], rax
mov ecx, r12d
mov qword [rbp - 0x18], rax
mov r9d, r12d
mov qword [rax], rbx
mov eax, esi
mov dword [rsp + 0x74], eax
mov dword [rbp - 0x20], eax
mov dword [rbp - 0x1c], edx
mov dword [rsp + 0x64], ecx
test r13d, r13d
jle 0x180070416
mov rbx, qword [rbp - 0x80]
mov r8, r12
mov r10, qword [rbp - 0x40]
add rbx, 0x60
mov qword [rbp - 0x48], r10
mov r11d, 0xff
mov qword [rbp - 0x78], r12
mov rdx, qword [rdi + 0x70]
cmp dword [rbx - 0x18], r12d
je 0x1800703f0
movsxd rax, r9d
add r9d, dword [rbx - 0x18]
mov dword [rbp - 0x68], r9d
lea rcx, [rax + rax*2]
lea rax, [r15 + rcx*8]
mov qword [rbx - 0x30], rax
movss xmm1, dword [r8 + rdx + 0x50]
ucomiss xmm1, xmm11
je 0x1800701bc
mov byte [rsp + 0x60], sil
lea r8, [rbp + 0x70]
mov edx, r12d
mov eax, edx
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
mulss xmm0, xmm1
cvttss2si rax, xmm0
cmp eax, r11d
movzx ecx, al
cmova ecx, r11d
add edx, esi
mov byte [r8], cl
add r8, rsi
cmp edx, 0x100
jb 0x180070189
mov r8, qword [rbp - 0x78]
jmp 0x1800701c1
mov byte [rsp + 0x60], r12b
mov eax, dword [rdi + 0x14]
mov dword [rbp - 0x50], eax
cmp dword [rbx], r12d
jle 0x1800703ec
mov r13, r12
mov r14, r12
mov edi, r12d
mov r12, qword [rbx + 8]
mov rcx, qword [rbx - 0x48]
mov edx, dword [r14 + r12 + 0x18]
call fcn.180076880
test eax, eax
je 0x1800703b7
mov r8d, dword [rbx - 0x3c]
mov edx, eax
mov rcx, qword [rbx - 0x48]
call fcn.180077880
test eax, eax
jne 0x1800703b7
test byte [rbx - 0x40], 0x20
mov rcx, qword [rbx - 0x48]
mov r15, qword [rcx + 0x78]
je 0x180070224
mov rcx, r15
call fcn.18007ffc0
mov rcx, qword [rbx - 0x48]
test byte [rbx - 0x40], 0x40
je 0x180070236
mov rcx, r15
call fcn.1800800c0
mov rcx, qword [rbx - 0x48]
lea rax, [r15 + 0x30]
test rax, rax
je 0x1800703b7
mov r15, qword [rcx + 0x78]
mov edx, dword [rbx - 0x38]
mov rcx, r15
call fcn.18007a2c0
xor r11d, r11d
test eax, eax
jne 0x1800703b7
mov rax, qword [rbx - 0x48]
mov r10, qword [rax + 0x78]
add r10, 0x68
mov qword [rbp - 0x28], r10
mov r8d, dword [r10 + 4]
mov dword [r14 + r12], r8d
mov r9d, dword [r10]
mov dword [r14 + r12 + 4], r9d
mov rax, qword [rbx - 0x48]
mov rcx, qword [rax + 0x78]
mov eax, dword [rcx + 0x90]
mov dword [r14 + r12 + 8], eax
mov rax, qword [rbx - 0x48]
mov rcx, qword [rax + 0x78]
mov eax, dword [rcx + 0x94]
mov ecx, 0x40000
neg eax
mov dword [r14 + r12 + 0xc], eax
mov eax, dword [r15 + 0x58]
mov r15d, dword [rsp + 0x6c]
add eax, 0x3f
and eax, 0xffffffc0
cdq
and edx, 0x3f
add eax, edx
sar eax, 6
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [r14 + r12 + 0x10], xmm0
cmp byte [r10 + 0x1a], 7
sete al
imul r9d, r8d
mov byte [r14 + r12 + 0x14], al
shl r9d, 2
mov dword [rsp + 0x70], r9d
lea eax, [r9 + r15]
cmp eax, ecx
jle 0x180070337
mov rax, qword [0x18029faf0]
mov r15d, r11d
test rax, rax
je 0x180070307
add dword [rax + 0xf4], esi
call fcn.1800f00dc
lea rdx, [rbp - 0x58]
mov qword [rbp - 0x58], rax
lea rcx, [rbp - 0x20]
call fcn.1800552a4
mov rax, qword [rbp - 0x18]
mov r9d, dword [rsp + 0x70]
mov r10, qword [rbp - 0x28]
mov qword [rbp - 0x30], rax
mov eax, dword [rbp - 0x20]
mov dword [rsp + 0x74], eax
jmp 0x18007033b
mov eax, dword [rsp + 0x74]
mov rdx, qword [rbp - 0x30]
dec eax
cdqe
movsxd rcx, r15d
add r15d, r9d
mov r9d, dword [r14 + r12]
mov dword [rsp + 0x6c], r15d
mov r8, qword [rdx + rax*8]
mov rdx, r10
mov al, byte [rsp + 0x60]
add r8, rcx
neg al
mov qword [r14 + r12 + 0x20], r8
lea rax, [rbp + 0x70]
sbb rcx, rcx
and rcx, rax
mov qword [rsp + 0x20], rcx
call fcn.18006f568
mov ecx, dword [r14 + r12]
add ecx, dword [rbp - 0x50]
mov rax, qword [rbx - 0x30]
mov dword [rax + r13 + 4], ecx
mov ecx, dword [r14 + r12 + 4]
add ecx, dword [rbp - 0x50]
mov rax, qword [rbx - 0x30]
mov dword [rax + r13 + 8], ecx
mov rcx, qword [rbx - 0x30]
mov eax, dword [rcx + r13 + 8]
imul eax, dword [rcx + r13 + 4]
mov ecx, dword [rsp + 0x64]
add ecx, eax
mov dword [rsp + 0x64], ecx
jmp 0x1800703bb
mov ecx, dword [rsp + 0x64]
add edi, esi
add r14, 0x28
add r13, 0x18
cmp edi, dword [rbx]
jl 0x1800701d9
mov rdi, qword [rbp - 0x38]
xor r12d, r12d
mov r8, qword [rbp - 0x78]
mov r11d, 0xff
mov r9d, dword [rbp - 0x68]
mov r10, qword [rbp - 0x48]
mov r15, qword [rbp - 0x70]
jmp 0x1800703f0
mov ecx, dword [rsp + 0x64]
add r8, 0x88
add rbx, 0x70
sub r10, rsi
mov qword [rbp - 0x78], r8
mov qword [rbp - 0x48], r10
jne 0x18007014b
mov r13d, dword [rsp + 0x78]
mov edx, 8
mov ebx, dword [rdi + 0x10]
mov dword [rdi + 0x34], r12d
test ebx, ebx
jg 0x18007046e
movd xmm0, ecx
xorps xmm1, xmm1
cvtdq2ps xmm0, xmm0
mov ebx, 0x200
sqrtss xmm1, xmm0
cvttss2si eax, xmm1
add eax, esi
movd xmm0, eax
mov eax, 0x400
cvtdq2ps xmm0, xmm0
comiss xmm0, dword [0x18028047c]
cmovae ebx, eax
mov eax, 0x800
comiss xmm0, dword [0x180280494]
cmovae ebx, eax
mov eax, 0x1000
comiss xmm0, dword [0x1802804a0]
cmovae ebx, eax
mov dword [rdi + 0x30], ebx
mov r15, r12
sub ebx, dword [rdi + 0x14]
mov qword [rbp - 0x38], r12
test ebx, ebx
jle 0x1800704af
cmp ebx, edx
mov eax, ebx
cmovl eax, edx
test eax, eax
jle 0x1800704af
mov rcx, qword [0x18029faf0]
test rcx, rcx
je 0x18007049c
add dword [rcx + 0xf4], esi
movsxd rcx, eax
shl rcx, 4
call fcn.1800f00dc
mov r15, rax
mov qword [rbp - 0x38], rax
mov r9d, dword [rdi + 0x30]
lea r10d, [rbx - 1]
movsxd r8, r10d
mov r11d, r12d
test r10d, r10d
jle 0x1800704e3
mov ecx, esi
lea rdx, [r15 + 8]
mov r11d, r10d
movsxd rax, ecx
add ecx, esi
shl rax, 4
add rax, r15
mov qword [rdx], rax
lea rdx, [rdx + 0x10]
sub r8, rsi
jne 0x1800704cb
movsxd rax, r11d
mov r14, r12
add rax, rax
mov qword [r15 + rax*8 + 8], r12
lea rax, [rbp + 0x48]
and qword [rbp + 0x48], 0
mov qword [rbp + 0x38], rax
lea eax, [rbx - 1]
add eax, r9d
mov dword [rbp + 0x34], ebx
cdq
mov qword [rbp + 0x2c], rsi
idiv ebx
mov ebx, dword [rdi + 0x58]
mov dword [rbp + 0x28], eax
lea rax, [rbp + 0x58]
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x40], r15
mov dword [rbp + 0x20], r9d
mov dword [rbp + 0x24], 0x8000
mov dword [rbp + 0x58], r9d
mov dword [rbp + 0x5c], 0x40000000
mov qword [rbp + 0x60], r12
test ebx, ebx
jle 0x180070572
mov ecx, 8
mov eax, ebx
cmp ebx, ecx
cmovl eax, ecx
test eax, eax
jle 0x180070572
mov rcx, qword [0x18029faf0]
test rcx, rcx
je 0x180070560
add dword [rcx + 0xf4], esi
cdqe
lea rcx, [rax + rax*2]
shl rcx, 3
call fcn.1800f00dc
mov r14, rax
lea ecx, [rbx + rbx*2]
xor edx, edx
shl ecx, 3
movsxd r8, ecx
mov rcx, r14
call fcn.1800e2cc0
mov r9d, r12d
cmp dword [rdi + 0x58], r12d
jle 0x1800705be
mov rdx, r12
lea r8, [r14 + 8]
mov rax, qword [rdi + 0x60]
add r9d, esi
movzx ecx, word [rax + rdx]
lea rdx, [rdx + 0x20]
mov dword [r8 - 4], ecx
mov rax, qword [rdi + 0x60]
movzx ecx, word [rax + rdx - 0x1e]
mov dword [r8], ecx
lea r8, [r8 + 0x18]
cmp r9d, dword [rdi + 0x58]
jl 0x180070595
mov r8d, ebx
lea rcx, [rbp + 0x20]
mov rdx, r14
call fcn.180055cc0
test ebx, ebx
jle 0x180070618
mov r8, r12
lea rdx, [r14 + 0x10]
mov r9, rbx
cmp dword [rdx + 4], r12d
je 0x18007060b
movzx eax, word [rdx - 4]
mov rcx, qword [rdi + 0x60]
mov word [rcx + r8 + 4], ax
movzx eax, word [rdx]
mov rcx, qword [rdi + 0x60]
mov word [rcx + r8 + 6], ax
mov eax, dword [rdx - 8]
add eax, dword [rdx]
cmp dword [rdi + 0x34], eax
cmovge eax, dword [rdi + 0x34]
mov dword [rdi + 0x34], eax
add r8, 0x20
add rdx, 0x18
sub r9, rsi
jne 0x1800705db
test r14, r14
je 0x180070637
mov rax, qword [0x18029faf0]
test rax, rax
je 0x18007062f
dec dword [rax + 0xf4]
mov rcx, r14
call fcn.1800ef914
mov r12, qword [rbp - 0x40]
test r13d, r13d
mov r13, qword [rbp - 0x80]
jle 0x1800706a0
lea rbx, [r13 + 0x48]
mov r14, r12
xor eax, eax
mov r8d, dword [rbx]
test r8d, r8d
je 0x180070697
mov rdx, qword [rbx - 0x18]
lea rcx, [rbp + 0x20]
call fcn.18006f8e0
xor eax, eax
mov r8d, eax
cmp dword [rbx], eax
jle 0x180070697
mov ecx, eax
mov rdx, qword [rbx - 0x18]
cmp dword [rcx + rdx + 0x14], eax
je 0x18007068b
mov eax, dword [rcx + rdx + 0x10]
add eax, dword [rcx + rdx + 8]
cmp dword [rdi + 0x34], eax
cmovge eax, dword [rdi + 0x34]
mov dword [rdi + 0x34], eax
xor eax, eax
add r8d, esi
add rcx, 0x18
cmp r8d, dword [rbx]
jl 0x18007066d
add rbx, 0x70
sub r14, rsi
jne 0x18007064d
mov eax, dword [rdi + 0x34]
test byte [rdi], sil
jne 0x1800706cd
lea ecx, [rax - 1]
mov eax, ecx
sar eax, 1
or ecx, eax
mov eax, ecx
sar eax, 2
or ecx, eax
mov eax, ecx
sar eax, 4
or ecx, eax
mov eax, ecx
sar eax, 8
or ecx, eax
mov eax, ecx
sar eax, 0x10
or eax, ecx
movd xmm0, dword [rdi + 0x30]
inc eax
cvtdq2ps xmm0, xmm0
movsxd rbx, eax
xor r14d, r14d
mov dword [rdi + 0x34], eax
movd xmm1, eax
movaps xmm2, xmm11
movsxd rax, dword [rdi + 0x30]
divss xmm2, xmm0
cvtdq2ps xmm1, xmm1
movaps xmm0, xmm11
movss dword [rdi + 0x38], xmm2
divss xmm0, xmm1
imul rbx, rax
movss dword [rdi + 0x3c], xmm0
mov rax, qword [0x18029faf0]
cmp byte [rsp + 0x68], r14b
je 0x180070734
shl rbx, 2
test rax, rax
je 0x180070726
add dword [rax + 0xf4], esi
mov rcx, rbx
call fcn.1800f00dc
mov qword [rdi + 0x28], rax
jmp 0x18007074b
test rax, rax
je 0x18007073f
add dword [rax + 0xf4], esi
mov rcx, rbx
call fcn.1800f00dc
mov qword [rdi + 0x20], rax
mov r8, rbx
xor edx, edx
mov rcx, rax
call fcn.1800e2cc0
mov dl, r14b
mov byte [rsp + 0x60], dl
cmp dword [rsp + 0x78], r14d
jle 0x180070ab6
mov rcx, r14
lea rbx, [r13 + 8]
mov rax, r12
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x58], rax
cmp dword [rbx + 0x40], r14d
je 0x180070a92
mov r12, qword [rdi + 0x70]
xor eax, eax
movss xmm6, dword [rbx - 4]
add r12, rcx
movss xmm7, dword [rbx]
mov r13, qword [r12 + 0x80]
cmp byte [r12 + 0x48], al
jne 0x1800707d3
mov rcx, r13
call fcn.18005b4f0
mov eax, dword [r12 + 0x14]
mov dword [r13 + 0x14], eax
xor eax, eax
mov word [r13 + 0x50], ax
movss dword [r13 + 0x60], xmm6
movss dword [r13 + 0x64], xmm7
mov qword [r13 + 0x48], r12
mov qword [r13 + 0x40], rdi
add word [r13 + 0x50], si
xor r14d, r14d
movss xmm0, dword [r13 + 0x60]
addss xmm0, dword [0x18027fdfc]
mov r9d, dword [rdi + 0x14]
movss xmm10, dword [r12 + 0x2c]
mov dword [rsp + 0x64], r9d
mov dword [rsp + 0x70], r14d
cvttss2si eax, xmm0
movd xmm9, eax
cvtdq2ps xmm9, xmm9
addss xmm9, dword [r12 + 0x30]
cmp dword [rbx + 0x40], r14d
jle 0x180070a86
mov edx, r14d
xor eax, eax
mov qword [rbp - 0x78], rdx
mov rcx, qword [rbx + 0x28]
mov r15, qword [rbx + 0x60]
cmp dword [rdx + rcx + 4], eax
jne 0x18007083d
cmp dword [rdx + rcx + 8], eax
je 0x180070a64
mov r8d, dword [rdx + rcx + 0xc]
movaps xmm2, xmm11
movd xmm0, dword [rdi + 0x34]
add r8d, r9d
add r9d, dword [rdx + rcx + 0x10]
movaps xmm1, xmm11
mov edx, dword [r14 + r15 + 4]
mov ecx, dword [r14 + r15]
movd xmm8, dword [r14 + r15 + 0xc]
movd xmm3, dword [r14 + r15 + 8]
cvtdq2ps xmm0, xmm0
lea eax, [r9 + rdx]
mov dword [rbp - 0x50], r8d
mov dword [rbp - 0x68], r9d
movd xmm4, r8d
divss xmm2, xmm0
movd xmm0, dword [rdi + 0x30]
cvtdq2ps xmm0, xmm0
movd xmm7, eax
lea eax, [rcx + r8]
movzx r8d, word [r14 + r15 + 0x18]
divss xmm1, xmm0
movss xmm0, dword [r14 + r15 + 0x10]
movss dword [rsp + 0x58], xmm0
movd xmm5, r9d
movd xmm6, eax
cvtdq2ps xmm7, xmm7
cvtdq2ps xmm5, xmm5
mulss xmm7, xmm2
mulss xmm5, xmm2
movd xmm2, edx
mov rdx, r12
movss dword [rsp + 0x50], xmm7
cvtdq2ps xmm6, xmm6
cvtdq2ps xmm4, xmm4
mulss xmm6, xmm1
mulss xmm4, xmm1
movd xmm1, ecx
mov rcx, r13
movss dword [rsp + 0x48], xmm6
movss dword [rsp + 0x40], xmm5
movss dword [rsp + 0x38], xmm4
cvtdq2ps xmm8, xmm8
cvtdq2ps xmm3, xmm3
addss xmm8, xmm9
cvtdq2ps xmm2, xmm2
cvtdq2ps xmm1, xmm1
addss xmm3, xmm10
addss xmm2, xmm8
addss xmm1, xmm3
movss dword [rsp + 0x30], xmm2
movss dword [rsp + 0x28], xmm1
movss dword [rsp + 0x20], xmm8
call fcn.18005b9bc
cmp byte [r14 + r15 + 0x14], 0
movsxd rax, dword [r13 + 0x28]
lea rcx, [rax + rax*4]
mov rax, qword [r13 + 0x30]
je 0x18007094d
or dword [rax + rcx*8 - 0x28], esi
mov byte [rsp + 0x60], sil
movsxd r11, dword [rdi + 0x30]
movsxd rax, dword [rbp - 0x50]
movsxd rdx, dword [rbp - 0x68]
mov r9, qword [rdi + 0x20]
movsxd rcx, dword [r14 + r15]
mov r8, qword [r14 + r15 + 0x20]
mov r10, rcx
imul rdx, r11
mov qword [rbp - 0x48], r11
add rdx, rax
xor eax, eax
test r9, r9
je 0x1800709e9
lea r11, [rdx + r9]
mov dword [rsp + 0x6c], eax
cmp dword [r14 + r15 + 4], eax
jle 0x180070a5b
lea rdx, [rcx*4]
mov qword [rbp - 0x68], rdx
mov r9, qword [rbp - 0x68]
mov rdx, qword [rbp - 0x48]
xor r10d, r10d
test ecx, ecx
jle 0x1800709d4
mov rdx, r11
lea r9, [r8 + 3]
mov al, byte [r9]
add r10d, esi
mov byte [rdx], al
lea r9, [r9 + 4]
mov ecx, dword [r14 + r15]
add rdx, rsi
cmp r10d, ecx
jl 0x1800709b0
mov eax, dword [rsp + 0x6c]
mov rdx, qword [rbp - 0x48]
mov r9, qword [rbp - 0x68]
add eax, esi
add r11, rdx
add r8, r9
mov dword [rsp + 0x6c], eax
cmp eax, dword [r14 + r15 + 4]
jl 0x1800709a2
jmp 0x180070a59
mov rax, qword [rdi + 0x28]
lea r9, [rax + rdx*4]
xor edx, edx
mov eax, edx
mov dword [rsp + 0x6c], edx
cmp dword [r14 + r15 + 4], edx
jle 0x180070a5b
lea rdx, [r11*4]
shl r10, 2
mov qword [rbp - 0x48], rdx
mov qword [rbp - 0x68], r10
xor r11d, r11d
test ecx, ecx
jle 0x180070a46
mov r10, r8
mov rdx, r9
sub r10, r9
mov eax, dword [r10 + rdx]
add r11d, esi
mov dword [rdx], eax
lea rdx, [rdx + 4]
mov ecx, dword [r14 + r15]
cmp r11d, ecx
jl 0x180070a24
mov eax, dword [rsp + 0x6c]
mov rdx, qword [rbp - 0x48]
mov r10, qword [rbp - 0x68]
add eax, esi
add r9, rdx
add r8, r10
mov dword [rsp + 0x6c], eax
cmp eax, dword [r14 + r15 + 4]
jl 0x180070a14
xor eax, eax
mov r9d, dword [rsp + 0x64]
mov rdx, qword [rbp - 0x78]
mov ecx, dword [rsp + 0x70]
add rdx, 0x18
add ecx, esi
mov qword [rbp - 0x78], rdx
add r14, 0x28
mov dword [rsp + 0x70], ecx
cmp ecx, dword [rbx + 0x40]
jl 0x180070825
xor r14d, r14d
mov rcx, qword [rbp - 0x28]
mov rax, qword [rbp - 0x58]
mov qword [rbx + 0x28], r14
add rcx, 0x88
add rbx, 0x70
sub rax, rsi
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x58], rax
jne 0x18007077c
mov r15, qword [rbp - 0x38]
mov dl, byte [rsp + 0x60]
mov eax, dword [rsp + 0x74]
mov r12, qword [rbp - 0x30]
mov byte [rdi + 0x1a], dl
test eax, eax
jle 0x180070af7
mov rbx, r12
mov r14d, eax
mov rcx, qword [rbx]
test rcx, rcx
je 0x180070ae5
mov rax, qword [0x18029faf0]
test rax, rax
je 0x180070ae5
dec dword [rax + 0xf4]
call fcn.1800ef914
add rbx, 8
sub r14, rsi
jne 0x180070acb
mov r15, qword [rbp - 0x38]
cmp dword [rsp + 0x78], r14d
jle 0x180070b1b
mov rbx, qword [rbp - 0x80]
mov r12, qword [rbp - 0x40]
mov rcx, rbx
call fcn.180070db8
add rbx, 0x70
sub r12, rsi
jne 0x180070b06
mov r12, qword [rbp - 0x30]
mov rbx, qword [rbp - 0x80]
test rbx, rbx
je 0x180070b42
mov rax, qword [0x18029faf0]
test rax, rax
je 0x180070b36
dec dword [rax + 0xf4]
mov rcx, rbx
call fcn.1800ef914
mov qword [rbp - 0x80], r14
mov rcx, rdi
call fcn.18005b268
test r15, r15
je 0x180070b69
mov rax, qword [0x18029faf0]
test rax, rax
je 0x180070b61
dec dword [rax + 0xf4]
mov rcx, r15
call fcn.1800ef914
test r12, r12
je 0x180070b88
mov rax, qword [0x18029faf0]
test rax, rax
je 0x180070b80
dec dword [rax + 0xf4]
mov rcx, r12
call fcn.1800ef914
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x180070ba8
mov rax, qword [0x18029faf0]
test rax, rax
je 0x180070ba3
dec dword [rax + 0xf4]
call fcn.1800ef914
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x180070bc8
mov rax, qword [0x18029faf0]
test rax, rax
je 0x180070bc3
dec dword [rax + 0xf4]
call fcn.1800ef914
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x180070be8
mov rax, qword [0x18029faf0]
test rax, rax
je 0x180070be3
dec dword [rax + 0xf4]
call fcn.1800ef914
mov al, sil
mov rcx, qword [rbp + 0x170]
xor rcx, rsp
call fcn.1800df160
lea r11, [rsp + 0x2e0]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret