Function at 0x180067154
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
mov rax, rsp
mov dword [rax + 0x18], r8d
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x208]
sub rsp, 0x2c8
movaps xmmword [rax - 0x58], xmm6
xor r15d, r15d
mov rdi, rdx
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
mov eax, 2
cmp dword [rdx + 0x494], r15d
jge 0x1800671d8
mov rcx, rdx
test byte [rdx], al
jne 0x1800671c8
mov edx, 0xf5
lea r8d, [rax + 0x19]
jmp 0x1800671cd
mov r8d, eax
mov edx, eax
call fcn.180050aa8
mov dword [rdi + 0x494], eax
cmp dword [rdi + 0x498], r15d
jge 0x1800671fd
test byte [rdi], 4
jne 0x1800671fd
mov edx, 0x41
mov rcx, rdi
lea r8d, [rdx - 1]
call fcn.180050aa8
mov dword [rdi + 0x498], eax
mov rcx, rdi
mov qword [rdi + 8], r15
mov qword [rdi + 0x40], r15
mov qword [rdi + 0x48], r15
mov qword [rdi + 0x50], r15
call fcn.180050148
mov r12d, dword [rdi + 0x78]
mov edx, 8
mov byte [rbp + 0x228], r15b
mov r14, r15
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x70], r15
mov dword [rsp + 0x70], r12d
lea esi, [rdx - 7]
test r12d, r12d
jle 0x180067276
cmp r12d, edx
mov eax, r12d
cmovl eax, edx
test eax, eax
jle 0x180067276
mov rcx, qword [0x1802d3cd8]
test rcx, rcx
je 0x18006725d
add dword [rcx + 0xf4], esi
cdqe
imul rcx, rax, 0x70
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r14, rax
mov qword [rsp + 0x78], rax
mov edx, 8
mov ebx, dword [rdi + 0x58]
mov dword [rsp + 0x60], ebx
test ebx, ebx
jle 0x1800672af
cmp ebx, edx
mov ecx, ebx
cmovl ecx, edx
test ecx, ecx
jle 0x1800672af
mov rax, qword [0x1802d3cd8]
test rax, rax
je 0x18006729e
add dword [rax + 0xf4], esi
movsxd rcx, ecx
shl rcx, 5
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp - 0x70], rax
imul ecx, r12d, 0x70
xor edx, edx
movsxd r8, ecx
mov rcx, r14
call sub.VCRUNTIME140.dll_memset
mov ecx, ebx
xor edx, edx
mov rbx, qword [rbp - 0x70]
shl ecx, 5
movsxd r8, ecx
mov rcx, rbx
call sub.VCRUNTIME140.dll_memset
or r10d, 0xffffffff
mov r13d, r15d
cmp dword [rdi + 0x78], r15d
jle 0x1800674a9
add r14, 0x24
xor r9d, r9d
mov r12, qword [rdi + 0x80]
mov r8d, r9d
mov dword [r14 + 0x1c], r10d
cmp dword [rdi + 0x58], r9d
jle 0x180067491
mov edx, r10d
mov eax, edx
cmp edx, r10d
jne 0x18006733b
mov rax, qword [rdi + 0x60]
mov edx, r10d
mov rcx, qword [r9 + rax]
cmp qword [r15 + r12 + 0x80], rcx
jne 0x18006732c
mov dword [r14 + 0x1c], r8d
mov edx, r8d
add r8d, esi
add r9, 8
mov eax, edx
cmp r8d, dword [rdi + 0x58]
jl 0x180067309
cmp eax, r10d
je 0x180067491
mov r9d, dword [r15 + r12 + 0x10]
lea rbx, [r14 - 0xc]
mov r8d, dword [r15 + r12 + 8]
mov rdx, qword [r15 + r12]
mov rcx, qword [rbp + 0x210]
mov qword [rsp + 0x20], rbx
call fcn.18006d830
test eax, eax
jne 0x180067491
mov rcx, qword [rbx]
mov edx, 0x756e6963
call fcn.18006f8d0
xor edx, edx
test eax, eax
jne 0x180067491
mov ecx, dword [rbp + 0x220]
mov eax, edx
or ecx, dword [r15 + r12 + 0x4c]
mov edx, 8
bt ecx, 9
mov dword [rbx + 8], ecx
cmovae eax, edx
test sil, cl
je 0x1800673aa
or eax, 2
test cl, 2
je 0x1800673b3
bts eax, 0xf
test cl, 4
je 0x1800673bb
or eax, 0x20
test dl, cl
je 0x1800673c5
bts eax, 0x10
jmp 0x1800673ce
test cl, 0x10
je 0x1800673ce
bts eax, 0x11
shr ecx, 6
and ecx, 2
mov dword [r14], eax
mov dword [rbx + 0x10], ecx
test dword [rbx + 8], 0x100
je 0x1800673e8
bts dword [r14], 0x14
xorps xmm0, xmm0
lea rcx, [r14 - 0x24]
movups xmmword [r14 - 0x24], xmm0
xor eax, eax
mov qword [r14 - 0x14], rax
cvttss2si rdx, dword [r15 + r12 + 0x14]
call fcn.180066b00
mov eax, dword [r15 + r12 + 0x4c]
lea rcx, [0x1801b744c]
movsxd rdx, dword [r14 + 0x1c]
xor r9d, r9d
mov rbx, qword [rbp - 0x70]
shr eax, 8
and al, sil
shl rdx, 5
or byte [rbp + 0x228], al
add rdx, rbx
mov rax, qword [r15 + r12 + 0x38]
test rax, rax
cmovne rcx, rax
mov qword [r14 + 0x14], rcx
jmp 0x18006745e
cmp word [rcx + 2], r9w
je 0x180067464
movzx eax, word [rcx + 2]
cmp dword [r14 + 0x20], eax
cmovge eax, dword [r14 + 0x20]
add rcx, 4
mov dword [r14 + 0x20], eax
cmp word [rcx], r9w
jne 0x180067442
add dword [rdx], esi
mov eax, dword [r14 + 0x20]
cmp dword [rdx + 4], eax
cmovge eax, dword [rdx + 4]
add r13d, esi
add r14, 0x70
mov dword [rdx + 4], eax
add r15, 0x88
cmp r13d, dword [rdi + 0x78]
jge 0x18006749c
or r10d, 0xffffffff
jmp 0x1800672ee
xor r14d, r14d
mov sil, r14b
jmp 0x180068320
mov r12d, dword [rsp + 0x70]
xor r15d, r15d
mov r14, qword [rsp + 0x78]
mov r13d, r15d
test r12d, r12d
jle 0x180067733
add r14, 0x48
mov qword [rbp - 0x78], r12
mov edx, dword [r14 - 4]
lea rcx, [r14 + 8]
movsxd r15, dword [r14 - 8]
add edx, 0x20
shl r15, 5
sar edx, 5
add r15, rbx
call fcn.18004a2d8
movsxd r8, dword [r14 + 8]
xor edx, edx
mov rcx, qword [r14 + 0x10]
shl r8, 2
call sub.VCRUNTIME140.dll_memset
xor r8d, r8d
lea rbx, [r15 + 0x10]
cmp dword [rbx], r8d
jne 0x180067521
mov edx, dword [r15 + 4]
mov rcx, rbx
add edx, 0x20
sar edx, 5
call fcn.18004a2d8
movsxd r8, dword [rbx]
xor edx, edx
mov rcx, qword [rbx + 8]
shl r8, 2
call sub.VCRUNTIME140.dll_memset
xor r8d, r8d
mov rbx, qword [r14 - 0x10]
cmp word [rbx], r8w
je 0x1800675cb
cmp word [rbx + 2], r8w
je 0x1800675c7
movzx r12d, word [rbx]
movzx eax, word [rbx + 2]
cmp r12d, eax
ja 0x1800675b9
mov rax, qword [r15 + 0x18]
mov edx, r12d
and edx, 0x1f
movsxd rcx, r12d
sar rcx, 5
mov qword [rbp - 0x68], rcx
mov dword [rsp + 0x6c], edx
mov eax, dword [rax + rcx*4]
bt eax, edx
jb 0x1800675aa
mov rcx, qword [r14 - 0x30]
mov edx, r12d
call fcn.18006b5f0
xor r8d, r8d
test eax, eax
je 0x1800675ad
add dword [r14], esi
add dword [r15 + 8], esi
mov rcx, qword [r14 + 0x10]
mov rdx, qword [rbp - 0x68]
mov r8d, dword [rsp + 0x6c]
mov eax, dword [rcx + rdx*4]
bts eax, r8d
mov dword [rcx + rdx*4], eax
mov rcx, qword [r15 + 0x18]
mov eax, dword [rcx + rdx*4]
bts eax, r8d
mov dword [rcx + rdx*4], eax
add r13d, esi
xor r8d, r8d
movzx eax, word [rbx + 2]
add r12d, esi
cmp r12d, eax
jle 0x180067547
add rbx, 4
cmp word [rbx], r8w
jne 0x18006752f
mov r12, qword [rbp - 0x78]
mov rbx, qword [rbp - 0x70]
add r14, 0x70
sub r12, rsi
mov qword [rbp - 0x78], r12
jne 0x1800674bd
mov rbx, qword [rsp + 0x78]
mov edi, dword [rsp + 0x70]
add rbx, 0x60
mov qword [rbp - 0x80], rdi
mov edx, dword [rbx - 0x18]
mov rcx, rbx
call fcn.180068490
mov r12, qword [rbx - 8]
movsxd rax, dword [rbx - 0x10]
mov r15, r12
lea rax, [r12 + rax*4]
mov qword [rbp - 0x78], rax
cmp r12, rax
jae 0x1800676e6
mov rdi, rax
xor edx, edx
mov eax, dword [r15]
mov dword [rsp + 0x6c], eax
test eax, eax
je 0x1800676d5
mov r14d, edx
mov edi, 8
bt eax, r14d
jae 0x1800676c4
mov r8d, dword [rbx + 4]
lea rcx, [r15*8]
xor eax, eax
xorps xmm6, xmm6
mov qword [rbp + 0x50], rax
lea rax, [r12*8]
sub ecx, eax
and ecx, 0xffffffe0
add ecx, r14d
movzx eax, cx
mov ecx, dword [rbx]
movups xmmword [rbp + 0x40], xmm6
mov dword [rbp + 0x48], eax
cmp ecx, r8d
jne 0x18006769b
inc ecx
test r8d, r8d
je 0x180067688
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
add eax, r8d
jmp 0x18006768a
mov eax, edi
cmp eax, ecx
cmovg ecx, eax
mov edx, ecx
mov rcx, rbx
call fcn.180068490
xor edx, edx
movsxd rax, dword [rbx]
movups xmm0, xmmword [rbp + 0x40]
movsd xmm1, qword [rbp + 0x50]
lea rcx, [rax + rax*4]
mov rax, qword [rbx + 8]
movups xmmword [rax + rcx*8], xmm6
movups xmmword [rax + rcx*8 + 0x10], xmm0
movsd qword [rax + rcx*8 + 0x20], xmm1
add dword [rbx], esi
mov eax, dword [rsp + 0x6c]
add r14d, esi
cmp r14d, 0x20
jb 0x180067634
mov rdi, qword [rbp - 0x78]
add r15, 4
cmp r15, rdi
jb 0x18006761d
mov rdi, qword [rbp - 0x80]
mov rcx, qword [rbx - 8]
xor r15d, r15d
test rcx, rcx
je 0x180067712
mov rax, qword [0x1802d3cd8]
mov qword [rbx - 0x10], r15
test rax, rax
je 0x180067708
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx - 8], r15
add rbx, 0x70
sub rdi, rsi
mov qword [rbp - 0x80], rdi
jne 0x1800675f1
mov rdi, qword [rbp + 0x218]
mov r12d, dword [rsp + 0x70]
mov rbx, qword [rbp - 0x70]
mov eax, dword [rsp + 0x60]
test eax, eax
jle 0x180067773
add rbx, 0x18
mov r14d, eax
mov rcx, qword [rbx]
test rcx, rcx
je 0x18006776a
and qword [rbx - 8], 0
mov rax, qword [0x1802d3cd8]
test rax, rax
je 0x180067761
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx], r15
add rbx, 0x20
sub r14, rsi
jne 0x180067742
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x180067798
mov rax, qword [0x1802d3cd8]
test rax, rax
je 0x18006778e
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x78], r15
mov r14, r15
test r13d, r13d
jle 0x1800677df
mov ecx, 8
mov eax, r13d
cmp r13d, ecx
cmovl eax, ecx
test eax, eax
jle 0x1800677df
mov rcx, qword [0x1802d3cd8]
test rcx, rcx
je 0x1800677c8
add dword [rcx + 0xf4], esi
cdqe
lea rcx, [rax + rax*2]
shl rcx, 3
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r14, rax
mov qword [rbp - 0x78], rax
lea ecx, [r13*2]
xor edx, edx
add ecx, r13d
shl ecx, 3
movsxd r8, ecx
mov rcx, r14
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [0x1802d3cd8]
mov dword [rsp + 0x60], r15d
test rcx, rcx
je 0x180067811
add dword [rcx + 0xf4], esi
mov ecx, 0x40000
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rcx, qword [0x1802d3cd8]
mov rbx, rax
test rcx, rcx
je 0x180067831
add dword [rcx + 0xf4], esi
mov ecx, 0x40
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
movss xmm11, dword [0x1801b82bc]
mov edx, 8
mov qword [rbp - 0x40], rax
mov ecx, r15d
mov qword [rbp - 0x30], rax
mov r9d, r15d
mov qword [rax], rbx
mov eax, esi
mov dword [rsp + 0x6c], eax
mov dword [rbp - 0x38], eax
mov dword [rbp - 0x34], edx
mov dword [rsp + 0x68], ecx
test r12d, r12d
jle 0x180067b7f
mov rbx, qword [rsp + 0x78]
mov r8, r15
mov r10d, r12d
add rbx, 0x60
mov qword [rbp - 0x50], r10
mov r11d, 0xff
mov qword [rbp - 0x80], r15
mov rdx, qword [rdi + 0x80]
cmp dword [rbx - 0x18], r15d
je 0x180067b59
movsxd rax, r9d
add r9d, dword [rbx - 0x18]
mov dword [rbp - 0x54], r9d
lea rcx, [rax + rax*2]
lea rax, [r14 + rcx*8]
mov qword [rbx - 0x30], rax
movss xmm1, dword [r8 + rdx + 0x50]
ucomiss xmm1, xmm11
je 0x180067905
mov byte [rsp + 0x64], sil
lea r8, [rbp + 0x60]
mov edx, r15d
mov eax, edx
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
mulss xmm0, xmm1
cvttss2si rax, xmm0
cmp eax, r11d
movzx ecx, al
cmova ecx, r11d
add edx, esi
mov byte [r8], cl
add r8, rsi
cmp edx, 0x100
jb 0x1800678d2
mov r8, qword [rbp - 0x80]
jmp 0x18006790a
mov byte [rsp + 0x64], r15b
mov eax, dword [rdi + 0x14]
mov dword [rbp - 0x58], eax
cmp dword [rbx], r15d
jle 0x180067b55
mov r13, r15
mov qword [rbp - 0x48], r15
mov r14, r15
mov edi, r15d
mov r12, qword [rbx + 8]
mov rcx, qword [rbx - 0x48]
mov edx, dword [r14 + r12 + 0x18]
call fcn.18006b5f0
test eax, eax
je 0x180067b1c
mov r8d, dword [rbx - 0x3c]
mov edx, eax
mov rcx, qword [rbx - 0x48]
call fcn.18006c5f0
test eax, eax
jne 0x180067b1c
test byte [rbx - 0x40], 0x20
mov rax, qword [rbx - 0x48]
mov r15, qword [rax + 0x78]
je 0x18006796d
mov rcx, r15
call fcn.180074d30
test byte [rbx - 0x40], 0x40
je 0x18006797b
mov rcx, r15
call fcn.180074e30
lea rax, [r15 + 0x30]
xor r15d, r15d
test rax, rax
je 0x180067b1c
mov rax, qword [rbx - 0x48]
mov edx, dword [rbx - 0x38]
mov rax, qword [rax + 0x78]
mov rcx, rax
mov qword [rbp - 0x68], rax
call fcn.18006f030
test eax, eax
jne 0x180067b1c
mov rax, qword [rbx - 0x48]
mov r13, qword [rax + 0x78]
add r13, 0x68
mov r15d, dword [r13 + 4]
mov dword [r14 + r12], r15d
mov eax, dword [r13]
mov dword [r14 + r12 + 4], eax
mov rax, qword [rbx - 0x48]
mov rcx, qword [rax + 0x78]
mov eax, dword [rcx + 0x90]
mov dword [r14 + r12 + 8], eax
mov rax, qword [rbx - 0x48]
mov rcx, qword [rax + 0x78]
mov eax, dword [rcx + 0x94]
neg eax
mov dword [r14 + r12 + 0xc], eax
mov rax, qword [rbp - 0x68]
mov eax, dword [rax + 0x58]
add eax, 0x3f
and eax, 0xffffffc0
cdq
and edx, 0x3f
add eax, edx
sar eax, 6
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [r14 + r12 + 0x10], xmm0
cmp byte [r13 + 0x1a], 7
sete al
xor r8d, r8d
mov byte [r14 + r12 + 0x14], al
test r13, r13
je 0x180067b15
imul r15d, dword [r14 + r12 + 4]
mov r9d, 0x40000
mov edx, dword [rsp + 0x60]
shl r15d, 2
lea eax, [r15 + rdx]
cmp eax, r9d
jle 0x180067a8f
mov rax, qword [0x1802d3cd8]
mov dword [rsp + 0x60], r8d
test rax, rax
je 0x180067a60
add dword [rax + 0xf4], esi
mov rcx, r9
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
lea rdx, [rbp - 0x68]
mov qword [rbp - 0x68], rax
lea rcx, [rbp - 0x38]
call fcn.18004a208
mov rax, qword [rbp - 0x30]
mov edx, dword [rsp + 0x60]
mov qword [rbp - 0x40], rax
mov eax, dword [rbp - 0x38]
mov dword [rsp + 0x6c], eax
jmp 0x180067a93
mov eax, dword [rsp + 0x6c]
mov r8, qword [rbp - 0x40]
dec eax
mov r9d, dword [r14 + r12]
cdqe
movsxd rcx, edx
add edx, r15d
mov dword [rsp + 0x60], edx
mov rdx, r13
mov r8, qword [r8 + rax*8]
mov al, byte [rsp + 0x64]
add r8, rcx
neg al
mov qword [r14 + r12 + 0x20], r8
lea rax, [rbp + 0x60]
sbb rcx, rcx
and rcx, rax
mov qword [rsp + 0x20], rcx
call fcn.180066c18
mov r13, qword [rbp - 0x48]
mov ecx, dword [r14 + r12]
add ecx, dword [rbp - 0x58]
mov rax, qword [rbx - 0x30]
mov dword [rax + r13 + 4], ecx
mov ecx, dword [r14 + r12 + 4]
add ecx, dword [rbp - 0x58]
mov rax, qword [rbx - 0x30]
mov dword [rax + r13 + 8], ecx
mov rcx, qword [rbx - 0x30]
mov eax, dword [rcx + r13 + 8]
imul eax, dword [rcx + r13 + 4]
mov ecx, dword [rsp + 0x68]
add ecx, eax
mov dword [rsp + 0x68], ecx
xor r15d, r15d
jmp 0x180067b20
mov r13, qword [rbp - 0x48]
xor r15d, r15d
mov ecx, dword [rsp + 0x68]
add r13, 0x18
add edi, esi
add r14, 0x28
mov qword [rbp - 0x48], r13
cmp edi, dword [rbx]
jl 0x180067926
mov rdi, qword [rbp + 0x218]
mov r11d, 0xff
mov r8, qword [rbp - 0x80]
mov r9d, dword [rbp - 0x54]
mov r10, qword [rbp - 0x50]
mov r14, qword [rbp - 0x78]
jmp 0x180067b59
mov ecx, dword [rsp + 0x68]
add r8, 0x88
add rbx, 0x70
sub r10, rsi
mov qword [rbp - 0x80], r8
mov qword [rbp - 0x50], r10
jne 0x180067891
mov r12d, dword [rsp + 0x70]
mov edx, 8
mov ebx, dword [rdi + 0x10]
mov dword [rdi + 0x44], r15d
test ebx, ebx
jg 0x180067bd7
movd xmm0, ecx
xorps xmm1, xmm1
cvtdq2ps xmm0, xmm0
mov ebx, 0x200
sqrtss xmm1, xmm0
cvttss2si eax, xmm1
add eax, esi
movd xmm0, eax
mov eax, 0x400
cvtdq2ps xmm0, xmm0
comiss xmm0, dword [0x1801b87c0]
cmovae ebx, eax
mov eax, 0x800
comiss xmm0, dword [0x1801b87d0]
cmovae ebx, eax
mov eax, 0x1000
comiss xmm0, dword [0x1801b87d4]
cmovae ebx, eax
mov dword [rdi + 0x40], ebx
xor r13d, r13d
sub ebx, dword [rdi + 0x14]
mov qword [rbp - 0x68], r15
test ebx, ebx
jle 0x180067c19
cmp ebx, edx
mov eax, ebx
cmovl eax, edx
test eax, eax
jle 0x180067c19
mov rcx, qword [0x1802d3cd8]
test rcx, rcx
je 0x180067c05
add dword [rcx + 0xf4], esi
movsxd rcx, eax
shl rcx, 4
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r15, rax
mov qword [rbp - 0x68], rax
mov ecx, dword [rdi + 0x40]
lea r10d, [rbx - 1]
sub ecx, dword [rdi + 0x14]
mov r14d, 0x8000
sub r14d, dword [rdi + 0x14]
mov r11d, r13d
movsxd r9, r10d
test r10d, r10d
jle 0x180067c59
mov edx, esi
lea r8, [r15 + 8]
mov r11d, r10d
movsxd rax, edx
add edx, esi
shl rax, 4
add rax, r15
mov qword [r8], rax
lea r8, [r8 + 0x10]
sub r9, rsi
jne 0x180067c41
movsxd rax, r11d
add rax, rax
mov qword [r15 + rax*8 + 8], r13
lea rax, [rbp + 8]
mov qword [rbp - 8], rax
lea eax, [rbx - 1]
add eax, ecx
mov dword [rbp - 0xc], ebx
cdq
mov dword [rbp - 0x1c], r14d
idiv ebx
mov ebx, dword [rdi + 0x68]
mov r14, r13
mov dword [rbp - 0x18], eax
lea rax, [rbp + 0x18]
mov qword [rbp + 0x10], rax
mov qword [rbp - 0x14], rsi
mov qword [rbp], r15
mov dword [rbp - 0x20], ecx
mov qword [rbp + 8], r13
mov dword [rbp + 0x18], ecx
mov dword [rbp + 0x1c], 0x40000000
mov qword [rbp + 0x20], r13
test ebx, ebx
jle 0x180067ce2
mov ecx, 8
mov eax, ebx
cmp ebx, ecx
cmovl eax, ecx
test eax, eax
jle 0x180067ce2
mov rcx, qword [0x1802d3cd8]
test rcx, rcx
je 0x180067ccf
add dword [rcx + 0xf4], esi
cdqe
lea rcx, [rax + rax*2]
shl rcx, 3
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r14, rax
lea ecx, [rbx + rbx*2]
xor edx, edx
shl ecx, 3
movsxd r8, ecx
mov rcx, r14
call sub.VCRUNTIME140.dll_memset
mov r9d, r13d
cmp dword [rdi + 0x68], r13d
jle 0x180067d2e
mov rdx, r13
lea r8, [r14 + 8]
mov rax, qword [rdi + 0x70]
add r9d, esi
movzx ecx, word [rdx + rax]
lea rdx, [rdx + 0x20]
mov dword [r8 - 4], ecx
mov rax, qword [rdi + 0x70]
movzx ecx, word [rdx + rax - 0x1e]
mov dword [r8], ecx
lea r8, [r8 + 0x18]
cmp r9d, dword [rdi + 0x68]
jl 0x180067d05
mov r8d, ebx
lea rcx, [rbp - 0x20]
mov rdx, r14
call fcn.18004ae3c
test ebx, ebx
jle 0x180067d88
mov r8, r13
lea rdx, [r14 + 0x10]
mov r9, rbx
cmp dword [rdx + 4], r13d
je 0x180067d7b
movzx eax, word [rdx - 4]
mov rcx, qword [rdi + 0x70]
mov word [r8 + rcx + 4], ax
movzx eax, word [rdx]
mov rcx, qword [rdi + 0x70]
mov word [r8 + rcx + 6], ax
mov eax, dword [rdx - 8]
add eax, dword [rdx]
cmp dword [rdi + 0x44], eax
cmovge eax, dword [rdi + 0x44]
mov dword [rdi + 0x44], eax
add r8, 0x20
add rdx, 0x18
sub r9, rsi
jne 0x180067d4b
test r14, r14
je 0x180067da8
mov rax, qword [0x1802d3cd8]
test rax, rax
je 0x180067d9f
dec dword [rax + 0xf4]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r13, qword [rsp + 0x78]
test r12d, r12d
jle 0x180067e0e
lea rbx, [r13 + 0x48]
mov r14d, r12d
xor eax, eax
mov r8d, dword [rbx]
test r8d, r8d
je 0x180067e05
mov rdx, qword [rbx - 0x18]
lea rcx, [rbp - 0x20]
call fcn.180066f90
xor eax, eax
mov r8d, eax
cmp dword [rbx], eax
jle 0x180067e05
mov ecx, eax
mov rdx, qword [rbx - 0x18]
cmp dword [rcx + rdx + 0x14], eax
je 0x180067df9
mov eax, dword [rcx + rdx + 0x10]
add eax, dword [rcx + rdx + 8]
cmp dword [rdi + 0x44], eax
cmovge eax, dword [rdi + 0x44]
mov dword [rdi + 0x44], eax
xor eax, eax
add r8d, esi
add rcx, 0x18
cmp r8d, dword [rbx]
jl 0x180067ddb
add rbx, 0x70
sub r14, rsi
jne 0x180067dbb
mov eax, dword [rdi + 0x44]
test byte [rdi], sil
jne 0x180067e3b
lea ecx, [rax - 1]
mov eax, ecx
sar eax, 1
or ecx, eax
mov eax, ecx
sar eax, 2
or ecx, eax
mov eax, ecx
sar eax, 4
or ecx, eax
mov eax, ecx
sar eax, 8
or ecx, eax
mov eax, ecx
sar eax, 0x10
or eax, ecx
movd xmm0, dword [rdi + 0x40]
inc eax
movsxd rbx, dword [rdi + 0x40]
movaps xmm2, xmm11
cvtdq2ps xmm0, xmm0
mov dword [rdi + 0x44], eax
xor r14d, r14d
movd xmm1, eax
divss xmm2, xmm0
cdqe
cvtdq2ps xmm1, xmm1
movaps xmm0, xmm11
movss dword [rdi + 0x48], xmm2
divss xmm0, xmm1
imul rbx, rax
movss dword [rdi + 0x4c], xmm0
mov rax, qword [0x1802d3cd8]
cmp byte [rbp + 0x228], r14b
je 0x180067ea4
shl rbx, 2
test rax, rax
je 0x180067e95
add dword [rax + 0xf4], esi
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rdi + 0x38], rax
jmp 0x180067ebc
test rax, rax
je 0x180067eaf
add dword [rax + 0xf4], esi
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rdi + 0x30], rax
mov r8, rbx
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov dl, r14b
mov byte [rbp + 0x218], dl
test r12d, r12d
jle 0x180068230
mov rcx, r14
mov eax, r12d
mov qword [rbp - 0x80], rcx
lea rbx, [r13 + 8]
mov qword [rbp - 0x48], rax
cmp dword [rbx + 0x40], r14d
je 0x180068205
mov r12, qword [rdi + 0x80]
xor eax, eax
movss xmm6, dword [rbx - 4]
add r12, rcx
movss xmm7, dword [rbx]
mov r13, qword [r12 + 0x80]
cmp byte [r12 + 0x48], al
jne 0x180067f47
mov rcx, r13
call fcn.180050ff4
mov eax, dword [r12 + 0x14]
mov dword [r13 + 0x14], eax
xor eax, eax
mov word [r13 + 0x50], ax
movss dword [r13 + 0x68], xmm6
movss dword [r13 + 0x6c], xmm7
mov qword [r13 + 0x48], r12
mov qword [r13 + 0x40], rdi
add word [r13 + 0x50], si
xor r14d, r14d
movss xmm0, dword [r13 + 0x68]
addss xmm0, dword [0x1801b8174]
mov r9d, dword [rdi + 0x14]
movss xmm10, dword [r12 + 0x2c]
mov dword [rbp + 0x228], r9d
mov dword [rsp + 0x68], r14d
cvttss2si eax, xmm0
movd xmm9, eax
cvtdq2ps xmm9, xmm9
addss xmm9, dword [r12 + 0x30]
cmp dword [rbx + 0x40], r14d
jle 0x1800681f9
mov edx, r14d
xor eax, eax
mov qword [rbp - 0x60], rdx
mov rcx, qword [rbx + 0x28]
mov r15, qword [rbx + 0x60]
cmp dword [rdx + rcx + 4], eax
jne 0x180067fb3
cmp dword [rdx + rcx + 8], eax
je 0x1800681d7
mov r8d, dword [rdx + rcx + 0xc]
movaps xmm2, xmm11
movd xmm0, dword [rdi + 0x44]
add r8d, r9d
add r9d, dword [rdx + rcx + 0x10]
movaps xmm1, xmm11
mov edx, dword [r14 + r15 + 4]
mov ecx, dword [r14 + r15]
movd xmm8, dword [r14 + r15 + 0xc]
movd xmm3, dword [r14 + r15 + 8]
cvtdq2ps xmm0, xmm0
lea eax, [rdx + r9]
mov dword [rbp - 0x58], r8d
mov dword [rbp - 0x54], r9d
movd xmm4, r8d
divss xmm2, xmm0
movd xmm0, dword [rdi + 0x40]
cvtdq2ps xmm0, xmm0
movd xmm7, eax
lea eax, [rcx + r8]
movzx r8d, word [r14 + r15 + 0x18]
divss xmm1, xmm0
movss xmm0, dword [r14 + r15 + 0x10]
movss dword [rsp + 0x58], xmm0
movd xmm5, r9d
movd xmm6, eax
cvtdq2ps xmm7, xmm7
cvtdq2ps xmm5, xmm5
mulss xmm7, xmm2
mulss xmm5, xmm2
movd xmm2, edx
mov rdx, r12
movss dword [rsp + 0x50], xmm7
cvtdq2ps xmm6, xmm6
cvtdq2ps xmm4, xmm4
mulss xmm6, xmm1
mulss xmm4, xmm1
movd xmm1, ecx
mov rcx, r13
movss dword [rsp + 0x48], xmm6
movss dword [rsp + 0x40], xmm5
movss dword [rsp + 0x38], xmm4
cvtdq2ps xmm8, xmm8
cvtdq2ps xmm3, xmm3
addss xmm8, xmm9
cvtdq2ps xmm2, xmm2
cvtdq2ps xmm1, xmm1
addss xmm3, xmm10
addss xmm2, xmm8
addss xmm1, xmm3
movss dword [rsp + 0x30], xmm2
movss dword [rsp + 0x28], xmm1
movss dword [rsp + 0x20], xmm8
call fcn.18005152c
movsxd rax, dword [r13 + 0x28]
xor r9d, r9d
lea rcx, [rax + rax*4]
mov rax, qword [r13 + 0x30]
cmp byte [r14 + r15 + 0x14], r9b
je 0x1800680c7
or dword [rax + rcx*8 - 0x28], esi
mov byte [rbp + 0x218], sil
movsxd r8, dword [rdi + 0x40]
movsxd rax, dword [rbp - 0x54]
movsxd rcx, dword [rbp - 0x58]
movsxd rdx, dword [r14 + r15]
mov r11, qword [r14 + r15 + 0x20]
imul rax, r8
mov qword [rbp - 0x50], rdx
add rcx, rax
mov qword [rbp - 0x38], r8
cmp qword [rdi + 0x30], r9
je 0x180068156
add rcx, qword [rdi + 0x30]
mov eax, r9d
mov dword [rsp + 0x60], eax
cmp dword [r14 + r15 + 4], r9d
jle 0x1800681cc
add r11, 3
mov r9, rdx
xor r10d, r10d
test edx, edx
jle 0x180068140
mov r8, rcx
mov r9, r11
mov al, byte [r9]
add r10d, esi
mov byte [r8], al
lea r9, [r9 + 4]
mov edx, dword [r14 + r15]
add r8, rsi
cmp r10d, edx
jl 0x18006811b
mov eax, dword [rsp + 0x60]
mov r8, qword [rbp - 0x38]
mov r9, qword [rbp - 0x50]
add eax, esi
lea r11, [r11 + r9*4]
add rcx, r8
mov dword [rsp + 0x60], eax
cmp eax, dword [r14 + r15 + 4]
jl 0x18006810e
jmp 0x1800681ca
mov rax, qword [rdi + 0x38]
lea r9, [rax + rcx*4]
xor ecx, ecx
mov eax, ecx
mov dword [rsp + 0x60], ecx
cmp dword [r14 + r15 + 4], ecx
jle 0x1800681cc
lea rcx, [r8*4]
lea r8, [rdx*4]
mov qword [rbp - 0x38], rcx
mov qword [rbp - 0x50], r8
xor r10d, r10d
test edx, edx
jle 0x1800681b7
mov r8, r11
mov rcx, r9
sub r8, r9
mov eax, dword [r8 + rcx]
add r10d, esi
mov dword [rcx], eax
lea rcx, [rcx + 4]
mov edx, dword [r14 + r15]
cmp r10d, edx
jl 0x180068195
mov eax, dword [rsp + 0x60]
mov rcx, qword [rbp - 0x38]
mov r8, qword [rbp - 0x50]
add eax, esi
add r9, rcx
add r11, r8
mov dword [rsp + 0x60], eax
cmp eax, dword [r14 + r15 + 4]
jl 0x180068185
xor eax, eax
mov r9d, dword [rbp + 0x228]
mov rdx, qword [rbp - 0x60]
mov ecx, dword [rsp + 0x68]
add rdx, 0x18
add ecx, esi
mov qword [rbp - 0x60], rdx
add r14, 0x28
mov dword [rsp + 0x68], ecx
cmp ecx, dword [rbx + 0x40]
jl 0x180067f9b
xor r14d, r14d
mov rcx, qword [rbp - 0x80]
mov rax, qword [rbp - 0x48]
mov qword [rbx + 0x28], r14
add rcx, 0x88
add rbx, 0x70
sub rax, rsi
mov qword [rbp - 0x80], rcx
mov qword [rbp - 0x48], rax
jne 0x180067eed
mov r15, qword [rbp - 0x68]
mov r12d, dword [rsp + 0x70]
mov dl, byte [rbp + 0x218]
mov eax, dword [rsp + 0x6c]
mov byte [rdi + 0x29], dl
test eax, eax
jle 0x18006826b
mov rbx, qword [rbp - 0x40]
mov r14d, eax
mov rcx, qword [rbx]
test rcx, rcx
je 0x18006825c
mov rax, qword [0x1802d3cd8]
test rax, rax
je 0x18006825c
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add rbx, 8
sub r14, rsi
jne 0x180068242
mov r13, qword [rbp - 0x40]
test r12d, r12d
jle 0x18006828d
mov rbx, qword [rsp + 0x78]
mov r14d, r12d
mov rcx, rbx
call fcn.180068524
add rbx, 0x70
sub r14, rsi
jne 0x18006827c
mov rbx, qword [rsp + 0x78]
test rbx, rbx
je 0x1800682b7
mov rax, qword [0x1802d3cd8]
test rax, rax
je 0x1800682a9
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rsp + 0x78], r14
mov rcx, rdi
call fcn.180050d78
test r15, r15
je 0x1800682df
mov rax, qword [0x1802d3cd8]
test rax, rax
je 0x1800682d6
dec dword [rax + 0xf4]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
test r13, r13
je 0x1800682ff
mov rax, qword [0x1802d3cd8]
test rax, rax
je 0x1800682f6
dec dword [rax + 0xf4]
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rbp - 0x78]
test rcx, rcx
je 0x180068320
mov rax, qword [0x1802d3cd8]
test rax, rax
je 0x18006831a
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x180068341
mov rax, qword [0x1802d3cd8]
test rax, rax
je 0x18006833b
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x180068363
mov rax, qword [0x1802d3cd8]
test rax, rax
je 0x18006835d
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
lea r11, [rsp + 0x2c8]
mov al, sil
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret