Function at 0x14004ae10
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x258]
sub rsp, 0x320
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm11
mov rax, qword [0x14010d040]
xor rax, rsp
mov qword [rbp + 0x1b0], rax
mov dword [rsp + 0x6c], r8d
mov rdi, rdx
mov qword [rbp - 0x50], rdx
mov qword [rbp - 0x48], rcx
mov rcx, rdx
call fcn.140048450
xor r12d, r12d
mov qword [rdi + 8], r12
mov qword [rdi + 0x40], r12
mov qword [rdi + 0x48], r12
mov qword [rdi + 0x50], r12
mov rcx, rdi
call fcn.140045904
mov byte [rsp + 0x68], r12b
mov dword [rbp - 0xc], r12d
mov r15d, r12d
mov qword [rbp - 0x40], r12
mov qword [rbp - 8], r12
mov dword [rbp - 0x1c], r12d
mov r14d, r12d
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x18], r12
mov r13d, dword [rdi + 0x78]
mov dword [rbp - 0x78], r13d
lea eax, [r12 + 8]
lea ebx, [rax - 7]
test r13d, r13d
jle 0x14004af0d
mov esi, r13d
cmp r13d, eax
cmovl esi, eax
test esi, esi
jle 0x14004af0d
mov rax, qword [0x14010fb98]
test rax, rax
je 0x14004aeed
add dword [rax + 0xf4], ebx
movsxd rax, esi
imul rcx, rax, 0x70
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r15, rax
mov qword [rbp - 0x40], rax
mov qword [rbp - 8], rax
mov dword [rbp - 0xc], esi
mov eax, 8
mov dword [rbp - 0x10], r13d
mov r12d, dword [rdi + 0x58]
mov dword [rbp - 0x80], r12d
test r12d, r12d
jle 0x14004af58
mov esi, r12d
cmp r12d, eax
cmovl esi, eax
test esi, esi
jle 0x14004af58
mov rax, qword [0x14010fb98]
test rax, rax
je 0x14004af3d
add dword [rax + 0xf4], ebx
movsxd rcx, esi
shl rcx, 5
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r14, rax
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x18], rax
mov dword [rbp - 0x1c], esi
mov dword [rbp - 0x20], r12d
imul ecx, r13d, 0x70
movsxd r8, ecx
xor edx, edx
mov rcx, r15
call qword [sym.imp.VCRUNTIME140.dll_memset]
mov ecx, r12d
shl ecx, 5
movsxd r8, ecx
xor edx, edx
mov rcx, r14
call qword [sym.imp.VCRUNTIME140.dll_memset]
xor r10d, r10d
mov dword [rsp + 0x70], r10d
or r11d, 0xffffffff
cmp dword [rdi + 0x78], r10d
jle 0x14004b0aa
mov ecx, r10d
mov qword [rsp + 0x78], rcx
lea rsi, [r15 + 0x44]
mov r14, qword [rdi + 0x80]
add r14, rcx
mov dword [rsi - 4], r11d
mov r8d, r10d
cmp dword [rdi + 0x58], r10d
jle 0x14004b0f2
mov edx, r11d
mov r9, r10
mov eax, edx
cmp edx, r11d
jne 0x14004aff6
mov edx, r11d
mov rax, qword [rdi + 0x60]
mov rcx, qword [r9 + rax]
cmp qword [r14 + 0x80], rcx
jne 0x14004afe7
mov dword [rsi - 4], r8d
mov edx, r8d
add r8d, ebx
add r9, 8
mov eax, edx
cmp r8d, dword [rdi + 0x58]
jl 0x14004afc5
cmp eax, r11d
je 0x14004b0f2
lea rcx, [rsi - 0x44]
mov r9d, dword [rsp + 0x6c]
mov r8, r14
mov rdx, qword [rbp - 0x48]
call fcn.14004a6f8
xor r10d, r10d
test al, al
je 0x14004b0f2
mov eax, dword [r14 + 0x4c]
shr eax, 8
and al, bl
or byte [rsp + 0x68], al
movsxd rdx, dword [rsi - 4]
shl rdx, 5
add rdx, qword [rbp - 0x70]
lea rcx, [0x1400f7634]
cmp qword [r14 + 0x38], r10
cmovne rcx, qword [r14 + 0x38]
mov qword [rsi - 0xc], rcx
jmp 0x14004b064
cmp word [rcx + 2], r10w
je 0x14004b06a
movzx eax, word [rcx + 2]
cmp dword [rsi], eax
cmovge eax, dword [rsi]
mov dword [rsi], eax
add rcx, 4
cmp word [rcx], r10w
jne 0x14004b04e
add dword [rdx], ebx
mov eax, dword [rsi]
cmp dword [rdx + 4], eax
cmovge eax, dword [rdx + 4]
mov dword [rdx + 4], eax
mov edx, dword [rsp + 0x70]
add edx, ebx
mov dword [rsp + 0x70], edx
add rsi, 0x70
mov rcx, qword [rsp + 0x78]
add rcx, 0x88
mov qword [rsp + 0x78], rcx
cmp edx, dword [rdi + 0x78]
mov r11d, 0xffffffff
jl 0x14004afa4
mov r14, qword [rbp - 0x70]
mov dword [rsp + 0x64], r10d
test r13d, r13d
jle 0x14004b395
lea rsi, [r15 + 0x58]
mov qword [rsp + 0x78], r13
mov edi, r10d
movsxd r15, dword [rsi - 0x18]
shl r15, 5
add r15, r14
mov r14d, dword [rsi - 0x14]
add r14d, 0x20
sar r14d, 5
mov ecx, dword [rsi - 4]
cmp r14d, ecx
jle 0x14004b116
test ecx, ecx
je 0x14004b0fa
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x14004b0ff
mov bl, r10b
jmp 0x14004be3d
mov eax, 8
lea r12, [rsi - 8]
mov edx, r14d
cmp eax, r14d
cmovg edx, eax
mov rcx, r12
call fcn.1400385f8
jmp 0x14004b11a
lea r12, [rsi - 8]
mov dword [r12], r14d
movsxd r8, r14d
shl r8, 2
xor edx, edx
mov rcx, qword [rsi]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea r12, [r15 + 0x10]
xor r10d, r10d
cmp dword [r12], r10d
jne 0x14004b193
mov r14d, dword [r15 + 4]
add r14d, 0x20
sar r14d, 5
mov ecx, dword [r12 + 4]
cmp r14d, ecx
jle 0x14004b178
test ecx, ecx
je 0x14004b162
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x14004b167
mov eax, 8
mov edx, r14d
cmp eax, r14d
cmovg edx, eax
mov rcx, r12
call fcn.1400385f8
mov dword [r12], r14d
movsxd r8, r14d
shl r8, 2
xor edx, edx
mov rcx, qword [r12 + 8]
call qword [sym.imp.VCRUNTIME140.dll_memset]
xor r10d, r10d
mov r14, qword [rsi - 0x20]
cmp word [r14], r10w
je 0x14004b224
cmp word [r14 + 2], r10w
je 0x14004b21f
movzx r12d, word [r14]
movzx eax, word [r14 + 2]
cmp r12d, eax
ja 0x14004b215
movsxd r13, r12d
sar r13, 5
mov ecx, r12d
and ecx, 0x1f
mov edx, ebx
shl edx, cl
mov dword [rsp + 0x6c], edx
mov rax, qword [r15 + 0x18]
test dword [rax + r13*4], edx
jne 0x14004b204
mov edx, r12d
mov rcx, qword [rsi - 0x40]
call fcn.14006da50
xor r10d, r10d
test eax, eax
je 0x14004b204
add dword [rsi - 0x10], ebx
add dword [r15 + 8], ebx
mov rax, qword [rsi]
mov ecx, dword [rsp + 0x6c]
or dword [rax + r13*4], ecx
mov rax, qword [r15 + 0x18]
or dword [rax + r13*4], ecx
add edi, ebx
add r12d, ebx
movzx eax, word [r14 + 2]
cmp r12d, eax
jle 0x14004b1b6
mov dword [rsp + 0x64], edi
add r14, 4
cmp word [r14], r10w
jne 0x14004b1a1
mov r13, qword [rsp + 0x78]
add rsi, 0x70
sub r13, rbx
mov qword [rsp + 0x78], r13
mov r14, qword [rbp - 0x70]
jne 0x14004b0c4
mov rsi, qword [rbp - 0x40]
add rsi, 0x60
mov r13d, dword [rbp - 0x78]
mov r14d, r13d
mov qword [rsp + 0x78], r13
mov rdi, qword [rbp - 0x50]
mov edx, dword [rsi - 0x18]
mov rcx, rsi
call fcn.14004bfdc
mov rcx, qword [rsi - 8]
movsxd rax, dword [rsi - 0x10]
lea rax, [rcx + rax*4]
mov r12, rcx
cmp rcx, rax
jae 0x14004b346
mov r15, rcx
mov r13, rax
mov eax, dword [r12]
mov dword [rsp + 0x6c], eax
test eax, eax
je 0x14004b334
xor r14d, r14d
bt eax, r14d
jae 0x14004b327
xor edx, edx
lea r8d, [rdx + 0x28]
lea rcx, [rbp + 0x80]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [r12*8]
lea rax, [r15*8]
sub ecx, eax
and ecx, 0xffffffe0
add ecx, r14d
movzx eax, cx
mov dword [rbp + 0x98], eax
mov ecx, dword [rsi]
mov r8d, dword [rsi + 4]
cmp ecx, r8d
jne 0x14004b2ff
inc ecx
test r8d, r8d
je 0x14004b2eb
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
add eax, r8d
jmp 0x14004b2f0
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
mov edx, ecx
mov rcx, rsi
call fcn.14004bfdc
movsxd rax, dword [rsi]
lea rcx, [rax + rax*4]
mov rax, qword [rsi + 8]
lea rcx, [rax + rcx*8]
mov r8d, 0x28
lea rdx, [rbp + 0x80]
call qword [sym.imp.VCRUNTIME140.dll_memcpy]
add dword [rsi], ebx
mov eax, dword [rsp + 0x6c]
add r14d, ebx
cmp r14d, 0x20
jb 0x14004b28e
add r12, 4
cmp r12, r13
jb 0x14004b27b
mov r14, qword [rsp + 0x78]
mov rcx, qword [rsi - 8]
xor r10d, r10d
test rcx, rcx
je 0x14004b375
mov qword [rsi - 0x10], r10
mov rax, qword [0x14010fb98]
test rax, rax
je 0x14004b368
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r10d, r10d
mov qword [rsi - 8], r10
add rsi, 0x70
sub r14, rbx
mov qword [rsp + 0x78], r14
jne 0x14004b252
mov r15, qword [rbp - 0x40]
mov r12d, dword [rbp - 0x80]
mov r13d, dword [rbp - 0x78]
jmp 0x14004b39a
mov dword [rsp + 0x64], r10d
test r12d, r12d
jle 0x14004b3de
mov rsi, qword [rbp - 0x70]
add rsi, 0x18
mov r14d, r12d
mov rcx, qword [rsi]
test rcx, rcx
je 0x14004b3d5
and qword [rsi - 8], 0
mov rax, qword [0x14010fb98]
test rax, rax
je 0x14004b3c9
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r10d, r10d
mov qword [rsi], r10
add rsi, 0x20
sub r14, rbx
jne 0x14004b3aa
mov rsi, qword [rbp - 0x70]
test rsi, rsi
je 0x14004b412
and qword [rbp - 0x20], 0
mov rax, qword [0x14010fb98]
test rax, rax
je 0x14004b3fe
dec dword [rax + 0xf4]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r10d, r10d
mov qword [rbp - 0x70], r10
mov qword [rbp - 0x18], r10
and qword [rbp], 0
mov qword [rbp + 8], r10
mov edx, dword [rsp + 0x64]
lea rcx, [rbp]
call fcn.14004a364
mov eax, dword [rbp]
lea ecx, [rax + rax*2]
shl ecx, 3
movsxd r8, ecx
xor edx, edx
mov r12, qword [rbp + 8]
mov qword [rbp - 0x48], r12
mov rcx, r12
call qword [sym.imp.VCRUNTIME140.dll_memset]
xor ecx, ecx
mov dword [rbp - 0x80], ecx
mov qword [rbp + 0x20], rcx
mov qword [rbp + 0x28], rcx
mov rax, qword [0x14010fb98]
test rax, rax
je 0x14004b466
add dword [rax + 0xf4], ebx
mov ecx, 0x40000
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp - 0x68], rax
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x20]
call fcn.14003804c
xor r11d, r11d
mov ecx, r11d
mov dword [rsp + 0x64], ecx
mov r9d, r11d
movss xmm6, dword [0x1400f8f54]
test r13d, r13d
jle 0x14004b7b1
mov r8d, r11d
mov qword [rsp + 0x78], r11
lea rsi, [r15 + 0x60]
mov r10d, r13d
mov qword [rbp - 0x30], r10
mov r15d, 0xff
mov r14, qword [rbp + 0x28]
mov qword [rbp - 0x38], r14
mov r14d, dword [rbp + 0x20]
mov dword [rsp + 0x70], r14d
mov rdx, qword [rdi + 0x80]
cmp dword [rsi - 0x18], r11d
je 0x14004b78e
movsxd rax, r9d
lea rcx, [rax + rax*2]
lea rax, [r12 + rcx*8]
mov qword [rsi - 0x30], rax
add r9d, dword [rsi - 0x18]
mov dword [rbp - 0x60], r9d
movss xmm1, dword [r8 + rdx + 0x50]
ucomiss xmm1, xmm6
jp 0x14004b507
jne 0x14004b507
mov byte [rsp + 0x60], r11b
jmp 0x14004b547
mov byte [rsp + 0x60], bl
mov edx, r11d
lea r8, [rbp + 0xb0]
mov eax, edx
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
mulss xmm0, xmm1
cvttss2si rax, xmm0
movzx ecx, al
cmp eax, r15d
cmova ecx, r15d
mov byte [r8], cl
add edx, ebx
add r8, rbx
cmp edx, 0x100
jb 0x14004b515
mov r8, qword [rsp + 0x78]
mov eax, dword [rdi + 0x14]
mov dword [rsp + 0x6c], eax
mov r15d, r11d
cmp dword [rsi], r11d
jle 0x14004b784
mov r13, r11
mov qword [rbp - 0x58], r11
mov r14, r11
mov edi, dword [rbp - 0x80]
mov r12, qword [rsi + 8]
mov edx, dword [r14 + r12 + 0x18]
mov rcx, qword [rsi - 0x48]
call fcn.14006da50
xor r11d, r11d
test eax, eax
je 0x14004b74e
mov r8d, dword [rsi - 0x3c]
mov edx, eax
mov rcx, qword [rsi - 0x48]
call fcn.14006e970
xor r11d, r11d
test eax, eax
jne 0x14004b74e
mov rax, qword [rsi - 0x48]
mov r13, qword [rax + 0x78]
test byte [rsi - 0x40], 0x20
je 0x14004b5b7
mov rcx, r13
call fcn.1400770f0
xor r11d, r11d
test byte [rsi - 0x40], 0x40
je 0x14004b5c8
mov rcx, r13
call fcn.1400771f0
xor r11d, r11d
lea rax, [r13 + 0x30]
test rax, rax
je 0x14004b74a
mov rax, qword [rsi - 0x48]
mov rax, qword [rax + 0x78]
mov qword [rbp - 0x68], rax
mov edx, dword [rsi - 0x38]
mov rcx, rax
call fcn.140071420
xor r11d, r11d
test eax, eax
jne 0x14004b74a
mov rax, qword [rsi - 0x48]
mov r9, qword [rax + 0x78]
add r9, 0x68
mov qword [rbp - 0x80], r9
mov r8d, dword [r9 + 4]
mov dword [r14 + r12], r8d
mov r13d, dword [r9]
mov dword [r14 + r12 + 4], r13d
mov rax, qword [rsi - 0x48]
mov rcx, qword [rax + 0x78]
mov eax, dword [rcx + 0x90]
mov dword [r14 + r12 + 8], eax
mov rax, qword [rsi - 0x48]
mov rcx, qword [rax + 0x78]
mov eax, dword [rcx + 0x94]
neg eax
mov dword [r14 + r12 + 0xc], eax
mov rax, qword [rbp - 0x68]
mov eax, dword [rax + 0x58]
add eax, 0x3f
and eax, 0xffffffc0
cdq
and edx, 0x3f
add eax, edx
sar eax, 6
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [r14 + r12 + 0x10], xmm0
cmp byte [r9 + 0x1a], 7
sete al
mov byte [r14 + r12 + 0x14], al
imul r13d, r8d
shl r13d, 2
lea eax, [rdi + r13]
mov ecx, 0x40000
cmp eax, ecx
jle 0x14004b6c2
mov edi, r11d
mov rax, qword [0x14010fb98]
test rax, rax
je 0x14004b69a
add dword [rax + 0xf4], ebx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp - 0x28], rax
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x20]
call fcn.14003804c
mov rax, qword [rbp + 0x28]
mov qword [rbp - 0x38], rax
mov eax, dword [rbp + 0x20]
mov dword [rsp + 0x70], eax
jmp 0x14004b6c6
mov eax, dword [rsp + 0x70]
dec eax
cdqe
movsxd rcx, edi
mov rdx, qword [rbp - 0x38]
mov r8, qword [rdx + rax*8]
add r8, rcx
mov qword [r14 + r12 + 0x20], r8
add edi, r13d
mov al, byte [rsp + 0x60]
neg al
sbb rcx, rcx
lea rax, [rbp + 0xb0]
and rcx, rax
mov qword [rsp + 0x20], rcx
mov r9d, dword [r14 + r12]
mov rdx, qword [rbp - 0x80]
call fcn.14004a8ec
mov ecx, dword [r14 + r12]
add ecx, dword [rsp + 0x6c]
mov rax, qword [rsi - 0x30]
mov r13, qword [rbp - 0x58]
mov dword [rax + r13 + 4], ecx
mov ecx, dword [r14 + r12 + 4]
add ecx, dword [rsp + 0x6c]
mov rax, qword [rsi - 0x30]
mov dword [rax + r13 + 8], ecx
mov rcx, qword [rsi - 0x30]
mov eax, dword [rcx + r13 + 8]
imul eax, dword [rcx + r13 + 4]
mov ecx, dword [rsp + 0x64]
add ecx, eax
mov dword [rsp + 0x64], ecx
xor r11d, r11d
jmp 0x14004b752
mov r13, qword [rbp - 0x58]
mov ecx, dword [rsp + 0x64]
add r15d, ebx
add r14, 0x28
add r13, 0x18
mov qword [rbp - 0x58], r13
cmp r15d, dword [rsi]
jl 0x14004b567
mov dword [rbp - 0x80], edi
mov rdi, qword [rbp - 0x50]
mov r8, qword [rsp + 0x78]
mov r9d, dword [rbp - 0x60]
mov r10, qword [rbp - 0x30]
mov r12, qword [rbp - 0x48]
jmp 0x14004b788
mov ecx, dword [rsp + 0x64]
mov r15d, 0xff
add rsi, 0x70
add r8, 0x88
mov qword [rsp + 0x78], r8
sub r10, rbx
mov qword [rbp - 0x30], r10
jne 0x14004b4ca
mov r15, qword [rbp - 0x40]
jmp 0x14004b7c0
mov rax, qword [rbp + 0x28]
mov qword [rbp - 0x38], rax
mov eax, dword [rbp + 0x20]
mov dword [rsp + 0x70], eax
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
call qword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_sqrtf]
cvttss2si eax, xmm0
add eax, ebx
xor r12d, r12d
mov dword [rdi + 0x44], r12d
mov esi, dword [rdi + 0x10]
test esi, esi
jg 0x14004b81a
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mov esi, 0x200
mov eax, 0x400
comiss xmm0, dword [0x1400f9080]
cmovae esi, eax
mov eax, 0x800
comiss xmm0, dword [0x1400f9090]
cmovae esi, eax
mov eax, 0x1000
comiss xmm0, dword [0x1400f9094]
cmovae esi, eax
mov dword [rdi + 0x40], esi
sub esi, dword [rdi + 0x14]
mov dword [rbp + 0x14], r12d
mov r13, r12
mov qword [rbp + 0x18], r12
test esi, esi
jle 0x14004b86c
mov r14d, esi
mov eax, 8
cmp esi, eax
cmovl r14d, eax
test r14d, r14d
jle 0x14004b86c
mov rax, qword [0x14010fb98]
test rax, rax
je 0x14004b854
add dword [rax + 0xf4], ebx
movsxd rcx, r14d
shl rcx, 4
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r13, rax
mov qword [rbp + 0x18], rax
mov dword [rbp + 0x14], r14d
mov dword [rbp + 0x10], esi
mov r10d, 0x8000
sub r10d, dword [rdi + 0x14]
mov ecx, dword [rdi + 0x40]
sub ecx, dword [rdi + 0x14]
lea eax, [rsi - 1]
mov r11d, r12d
movsxd r9, eax
test eax, eax
jle 0x14004b8ad
mov edx, ebx
lea r8, [r13 + 8]
mov r11d, eax
movsxd rax, edx
shl rax, 4
add rax, r13
mov qword [r8], rax
add edx, ebx
lea r8, [r8 + 0x10]
sub r9, rbx
jne 0x14004b895
movsxd rax, r11d
add rax, rax
mov qword [r13 + rax*8 + 8], r12
mov qword [rbp + 0x3c], 1
mov qword [rbp + 0x50], r13
lea rax, [rbp + 0x58]
mov qword [rbp + 0x48], rax
mov dword [rbp + 0x30], ecx
mov dword [rbp + 0x34], r10d
mov dword [rbp + 0x44], esi
lea eax, [rsi - 1]
add eax, ecx
cdq
idiv esi
mov dword [rbp + 0x38], eax
mov qword [rbp + 0x58], r12
lea rax, [rbp + 0x68]
mov qword [rbp + 0x60], rax
mov dword [rbp + 0x68], ecx
mov dword [rbp + 0x6c], 0x40000000
mov qword [rbp + 0x70], r12
lea rdx, [rbp + 0x30]
mov rcx, rdi
call fcn.140047778
mov r14d, dword [rbp - 0x78]
test r14d, r14d
jle 0x14004b96c
lea rsi, [r15 + 0x48]
mov r12d, r14d
xor eax, eax
mov r8d, dword [rsi]
test r8d, r8d
je 0x14004b963
mov rdx, qword [rsi - 0x18]
lea rcx, [rbp + 0x30]
call fcn.14004ac4c
xor eax, eax
mov edx, eax
cmp dword [rsi], eax
jle 0x14004b963
mov ecx, eax
mov r8, qword [rsi - 0x18]
cmp dword [r8 + rcx + 0x14], eax
je 0x14004b959
mov eax, dword [r8 + rcx + 0x10]
add eax, dword [r8 + rcx + 8]
cmp dword [rdi + 0x44], eax
cmovge eax, dword [rdi + 0x44]
mov dword [rdi + 0x44], eax
xor eax, eax
add edx, ebx
add rcx, 0x18
cmp edx, dword [rsi]
jl 0x14004b938
add rsi, 0x70
sub r12, rbx
jne 0x14004b919
mov eax, dword [rdi + 0x44]
test byte [rdi], bl
jne 0x14004b998
lea ecx, [rax - 1]
mov eax, ecx
sar eax, 1
or ecx, eax
mov eax, ecx
sar eax, 2
or ecx, eax
mov eax, ecx
sar eax, 4
or ecx, eax
mov eax, ecx
sar eax, 8
or ecx, eax
mov eax, ecx
sar eax, 0x10
or eax, ecx
inc eax
mov dword [rdi + 0x44], eax
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movaps xmm1, xmm6
divss xmm1, xmm0
movd xmm0, dword [rdi + 0x40]
cvtdq2ps xmm0, xmm0
divss xmm6, xmm0
movss dword [rdi + 0x48], xmm6
movss dword [rdi + 0x4c], xmm1
movsxd rsi, eax
movsxd rax, dword [rdi + 0x40]
imul rsi, rax
mov rax, qword [0x14010fb98]
cmp byte [rsp + 0x68], r12b
je 0x14004b9f8
shl rsi, 2
test rax, rax
je 0x14004b9e9
add dword [rax + 0xf4], ebx
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rdi + 0x38], rax
jmp 0x14004ba10
test rax, rax
je 0x14004ba03
add dword [rax + 0xf4], ebx
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rdi + 0x30], rax
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.VCRUNTIME140.dll_memset]
mov al, r12b
mov byte [rsp + 0x60], al
test r14d, r14d
jle 0x14004bd4f
mov qword [rbp - 0x58], r12
lea rsi, [r15 + 8]
mov r15, r14
mov qword [rbp - 0x68], r14
xor r9d, r9d
cmp dword [rsi + 0x40], r9d
je 0x14004bd20
mov r14, qword [rdi + 0x80]
add r14, r12
mov qword [rbp - 0x28], r14
mov r13, qword [r14 + 0x80]
mov qword [rbp - 0x30], r13
movss xmm0, dword [rsi]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [rsi - 4]
mov r8, r14
mov rdx, r13
mov rcx, rdi
call fcn.1400476f4
movss xmm11, dword [r14 + 0x2c]
movss xmm0, dword [r13 + 0x68]
addss xmm0, dword [0x1400f8f0c]
cvttss2si eax, xmm0
movd xmm10, eax
cvtdq2ps xmm10, xmm10
addss xmm10, dword [r14 + 0x30]
mov r8d, dword [rdi + 0x14]
mov dword [rsp + 0x64], r8d
xor r9d, r9d
mov dword [rsp + 0x6c], r9d
cmp dword [rsi + 0x40], r9d
jle 0x14004bd1c
mov r15d, r9d
mov r14d, r9d
mov r13, qword [rbp - 0x28]
mov r12, qword [rsi + 0x60]
mov rcx, qword [rsi + 0x28]
cmp dword [r15 + rcx + 4], r9d
jne 0x14004bae6
cmp dword [r15 + rcx + 8], r9d
je 0x14004bcf9
mov edx, dword [r15 + rcx + 0xc]
add edx, r8d
mov dword [rbp - 0x80], edx
add r8d, dword [r15 + rcx + 0x10]
mov dword [rbp - 0x60], r8d
movd xmm3, dword [r14 + r12 + 8]
cvtdq2ps xmm3, xmm3
addss xmm3, xmm11
movd xmm9, dword [r14 + r12 + 0xc]
cvtdq2ps xmm9, xmm9
addss xmm9, xmm10
mov eax, dword [r14 + r12]
movd xmm8, eax
cvtdq2ps xmm8, xmm8
addss xmm8, xmm3
mov ecx, dword [r14 + r12 + 4]
movd xmm7, ecx
cvtdq2ps xmm7, xmm7
addss xmm7, xmm9
movd xmm0, dword [rdi + 0x40]
cvtdq2ps xmm0, xmm0
movd xmm6, edx
cvtdq2ps xmm6, xmm6
divss xmm6, xmm0
movd xmm2, dword [rdi + 0x44]
cvtdq2ps xmm2, xmm2
movd xmm5, r8d
cvtdq2ps xmm5, xmm5
divss xmm5, xmm2
add eax, edx
movd xmm4, eax
cvtdq2ps xmm4, xmm4
divss xmm4, xmm0
lea eax, [rcx + r8]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
divss xmm1, xmm2
movss xmm0, dword [r14 + r12 + 0x10]
movss dword [rsp + 0x58], xmm0
movss dword [rsp + 0x50], xmm1
movss dword [rsp + 0x48], xmm4
movss dword [rsp + 0x40], xmm5
movss dword [rsp + 0x38], xmm6
movss dword [rsp + 0x30], xmm7
movss dword [rsp + 0x28], xmm8
movss dword [rsp + 0x20], xmm9
movzx r8d, word [r14 + r12 + 0x18]
mov rdx, r13
mov rcx, qword [rbp - 0x30]
call fcn.140048d8c
mov rdx, qword [rbp - 0x30]
movsxd rax, dword [rdx + 0x28]
lea rcx, [rax + rax*4]
mov rax, qword [rdx + 0x30]
xor r9d, r9d
cmp byte [r14 + r12 + 0x14], r9b
je 0x14004bbec
mov byte [rsp + 0x60], bl
or dword [rax + rcx*8 - 0x28], ebx
movsxd rdx, dword [r14 + r12]
mov r10, rdx
movsxd r11, dword [rdi + 0x40]
mov qword [rbp - 0x50], r11
mov r8, qword [r14 + r12 + 0x20]
movsxd rax, dword [rbp - 0x60]
imul rax, r11
movsxd rcx, dword [rbp - 0x80]
add rcx, rax
cmp qword [rdi + 0x30], r9
je 0x14004bc86
add rcx, qword [rdi + 0x30]
mov eax, r9d
mov dword [rbp - 0x80], eax
cmp dword [r14 + r12 + 4], r9d
jle 0x14004bcf4
lea r9, [rdx*4]
mov qword [rsp + 0x78], r9
mov r9, r11
mov r10, qword [rsp + 0x78]
xor r11d, r11d
test edx, edx
jle 0x14004bc72
mov r9, rcx
lea r10, [r8 + 3]
mov al, byte [r10]
mov byte [r9], al
add r11d, ebx
lea r10, [r10 + 4]
add r9, rbx
mov edx, dword [r14 + r12]
cmp r11d, edx
jl 0x14004bc4d
mov eax, dword [rbp - 0x80]
mov r9, qword [rbp - 0x50]
mov r10, qword [rsp + 0x78]
add eax, ebx
mov dword [rbp - 0x80], eax
add rcx, r9
add r8, r10
cmp eax, dword [r14 + r12 + 4]
jl 0x14004bc3f
jmp 0x14004bcf1
mov rax, qword [rdi + 0x38]
lea r9, [rax + rcx*4]
xor eax, eax
mov dword [rbp - 0x80], eax
cmp dword [r14 + r12 + 4], eax
jle 0x14004bcf1
lea rcx, [r11*4]
mov qword [rbp - 0x28], rcx
shl r10, 2
mov qword [rbp - 0x50], r10
xor r11d, r11d
test edx, edx
jle 0x14004bcdf
mov rcx, r9
mov r10, r8
sub r10, r9
mov eax, dword [rcx + r10]
mov dword [rcx], eax
add r11d, ebx
lea rcx, [rcx + 4]
mov edx, dword [r14 + r12]
cmp r11d, edx
jl 0x14004bcbe
mov eax, dword [rbp - 0x80]
mov rcx, qword [rbp - 0x28]
mov r10, qword [rbp - 0x50]
add eax, ebx
mov dword [rbp - 0x80], eax
add r9, rcx
add r8, r10
cmp eax, dword [r14 + r12 + 4]
jl 0x14004bcae
xor r9d, r9d
mov r8d, dword [rsp + 0x64]
mov ecx, dword [rsp + 0x6c]
add ecx, ebx
mov dword [rsp + 0x6c], ecx
add r14, 0x28
add r15, 0x18
cmp ecx, dword [rsi + 0x40]
jl 0x14004bacc
mov r12, qword [rbp - 0x58]
mov r15, qword [rbp - 0x68]
mov qword [rsi + 0x28], r9
add rsi, 0x70
add r12, 0x88
mov qword [rbp - 0x58], r12
sub r15, rbx
mov qword [rbp - 0x68], r15
jne 0x14004ba40
mov r15, qword [rbp - 0x40]
mov r13, qword [rbp + 0x18]
mov r14d, dword [rbp - 0x78]
mov al, byte [rsp + 0x60]
xor r12d, r12d
mov byte [rdi + 0x29], al
mov eax, dword [rsp + 0x70]
test eax, eax
jle 0x14004bd8a
mov rsi, qword [rbp - 0x38]
mov r12d, eax
mov rcx, qword [rsi]
test rcx, rcx
je 0x14004bd7b
mov rax, qword [0x14010fb98]
test rax, rax
je 0x14004bd7b
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add rsi, 8
sub r12, rbx
jne 0x14004bd61
test r14d, r14d
jle 0x14004bda3
mov rsi, r15
mov rcx, rsi
call fcn.14004c070
add rsi, 0x70
sub r14, rbx
jne 0x14004bd92
test r15, r15
je 0x14004bdcf
and qword [rbp - 0x10], 0
mov rax, qword [0x14010fb98]
test rax, rax
je 0x14004bdbf
dec dword [rax + 0xf4]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r15, r12
mov qword [rbp - 8], r12
mov rcx, rdi
call fcn.140048514
nop
test r13, r13
je 0x14004bdf9
mov rax, qword [0x14010fb98]
test rax, rax
je 0x14004bdef
dec dword [rax + 0xf4]
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov rcx, qword [rbp - 0x38]
test rcx, rcx
je 0x14004be1b
mov rax, qword [0x14010fb98]
test rax, rax
je 0x14004be14
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x14004be3d
mov rax, qword [0x14010fb98]
test rax, rax
je 0x14004be36
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x14004be5f
mov rax, qword [0x14010fb98]
test rax, rax
je 0x14004be58
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
test r15, r15
je 0x14004be80
mov rax, qword [0x14010fb98]
test rax, rax
je 0x14004be76
dec dword [rax + 0xf4]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov al, bl
mov rcx, qword [rbp + 0x1b0]
xor rcx, rsp
call fcn.14006b940
lea r11, [rsp + 0x320]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret