{"type": "func", "start": 6442475632, "end": 6442476407, "name": "sub_180006070", "pseudocode": "// \n// sub_180006070 from 0x180006070 to 0x180006377 (775 bytes)\n// \n// 2 xrefs:\n// > sub_180005520 @ 0x18000560a\n// > @ 0x1801f6318\n// \n// This function is hookable on this platform!\n// \n// Using BromaIDA 8.0.0 @ https://github.com/Stazzical/BromaIDA\n// Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings\n// \n\n__int64 __fastcall sub_180006070(\n _DWORD *_RCX,\n __int64 a2,\n __int64 _R8,\n __int64 _R9,\n _DWORD *a5,\n __int64 a6,\n __int64 a7,\n int a8,\n int a9,\n int a10,\n int a11)\n{\n int v13; // eax\n int v21; // edx\n int v22; // eax\n __int64 result; // rax\n int v25; // edi\n int v39; // ebx\n int v48; // edi\n int v61; // ebx\n int v71; // r9d\n int v82; // r8d\n\n _R10 = a5;\n _R11 = a2;\n v13 = a8 >> 3;\n if ( a8 >> 3 )\n {\n __asm { vmovdqu ymm3, cs:ymmword_1801446A0 }\n do\n {\n __asm\n {\n vpermps ymm0, ymm3, ymmword ptr [r10-20h]\n vpermps ymm1, ymm3, ymmword ptr [r9-20h]\n vunpcklps ymm2, ymm1, ymm0\n }\n _R9 -= 32;\n _R10 -= 8;\n __asm\n {\n vunpckhps ymm1, ymm1, ymm0\n vperm2f128 ymm0, ymm2, ymm1, 20h ; ' '\n vmovups ymmword ptr [rcx], ymm0\n vperm2f128 ymm1, ymm2, ymm1, 31h ; '1'\n vmovups ymmword ptr [rcx+20h], ymm1\n }\n _RCX += 16;\n --v13;\n }\n while ( v13 );\n }\n v21 = a8 & 7;\n if ( (a8 & 7) != 0 )\n {\n do\n {\n v22 = *(_DWORD *)(_R9 - 4);\n _R9 -= 4;\n --_R10;\n *_RCX = v22;\n _RCX[1] = *_R10;\n _RCX += 2;\n --v21;\n }\n while ( v21 );\n }\n result = a7;\n _RDX = a6;\n v25 = a9 >> 3;\n if ( a9 >> 3 )\n {\n __asm { vmovdqu ymm4, cs:ymmword_1801446A0 }\n do\n {\n __asm\n {\n vmovups ymm2, ymmword ptr [r8]\n vmovups ymm1, ymmword ptr [r11-20h]\n vmulps ymm0, ymm1, ymmword ptr [r9-20h]\n vpermps ymm3, ymm4, ymm0\n vmulps ymm0, ymm1, ymmword ptr [r10-20h]\n vfmadd231ps ymm3, ymm2, ymmword ptr [rdx]\n }\n _R11 -= 32;\n _R9 -= 32;\n _R10 -= 8;\n _RDX += 32;\n __asm\n {\n vpermps ymm1, ymm4, ymm0\n vfmadd231ps ymm1, ymm2, ymmword ptr [rax]\n vunpcklps ymm2, ymm3, ymm1\n vunpckhps ymm1, ymm3, ymm1\n vperm2f128 ymm0, ymm2, ymm1, 20h ; ' '\n vmovups ymmword ptr [rcx], ymm0\n vperm2f128 ymm1, ymm2, ymm1, 31h ; '1'\n vmovups ymmword ptr [rcx+20h], ymm1\n }\n _RCX += 16;\n result += 32;\n _R8 += 32;\n --v25;\n }\n while ( v25 );\n }\n v39 = a9 & 7;\n if ( (a9 & 7) != 0 )\n {\n do\n {\n __asm\n {\n vmovss xmm0, dword ptr [rdx]\n vmulss xmm2, xmm0, dword ptr [r8]\n vmovss xmm1, dword ptr [r9-4]\n vfmadd231ss xmm2, xmm1, dword ptr [r11-4]\n vmovss dword ptr [rcx], xmm2\n vmovss xmm1, dword ptr [r8]\n vmovss xmm0, dword ptr [r10-4]\n vmulss xmm3, xmm0, dword ptr [r11-4]\n vfmadd231ss xmm3, xmm1, dword ptr [rax]\n }\n _R11 -= 4;\n _R9 -= 4;\n --_R10;\n _RDX += 4;\n __asm { vmovss dword ptr [rcx+4], xmm3 }\n _RCX += 2;\n result += 4;\n _R8 += 4;\n --v39;\n }\n while ( v39 );\n }\n v48 = a10 >> 3;\n if ( a10 >> 3 )\n {\n __asm { vmovdqu ymm4, cs:ymmword_1801446A0 }\n do\n {\n __asm\n {\n vpermps ymm2, ymm4, ymmword ptr [r11-20h]\n vpermps ymm0, ymm4, ymmword ptr [rdx-20h]\n vmulps ymm3, ymm0, ymmword ptr [r8]\n vfmsub231ps ymm3, ymm2, ymmword ptr [r9]\n vpermps ymm0, ymm4, ymmword ptr [rax-20h]\n vmulps ymm1, ymm0, ymmword ptr [r8]\n vfmsub231ps ymm1, ymm2, ymmword ptr [r10]\n vunpcklps ymm2, ymm3, ymm1\n }\n _RDX -= 32;\n result -= 32;\n _R11 -= 32;\n _R9 += 32;\n __asm\n {\n vunpckhps ymm1, ymm3, ymm1\n vperm2f128 ymm0, ymm2, ymm1, 20h ; ' '\n vmovups ymmword ptr [rcx], ymm0\n vperm2f128 ymm1, ymm2, ymm1, 31h ; '1'\n vmovups ymmword ptr [rcx+20h], ymm1\n }\n _RCX += 16;\n _R10 += 8;\n _R8 += 32;\n --v48;\n }\n while ( v48 );\n }\n v61 = a10 & 7;\n if ( (a10 & 7) != 0 )\n {\n _R9 = _R9 - _R8;\n do\n {\n __asm\n {\n vmovss xmm1, dword ptr [r9+r8]\n vmovss xmm0, dword ptr [rdx-4]\n vmulss xmm2, xmm0, dword ptr [r8]\n }\n _RDX -= 4;\n _R11 -= 4;\n __asm\n {\n vfmsub231ss xmm2, xmm1, dword ptr [r11]\n vmovss dword ptr [rcx], xmm2\n vmovss xmm0, dword ptr [rax-4]\n vmulss xmm3, xmm0, dword ptr [r8]\n vmovss xmm1, dword ptr [r11]\n vfmsub231ss xmm3, xmm1, dword ptr [r10+r8]\n }\n result -= 4;\n _R8 += 4;\n __asm { vmovss dword ptr [rcx+4], xmm3 }\n _RCX += 2;\n --v61;\n }\n while ( v61 );\n }\n v71 = a11 >> 3;\n if ( a11 >> 3 )\n {\n __asm\n {\n vmovdqu ymm4, cs:ymmword_1801446A0\n vmovups ymm5, cs:ymmword_1801446E0\n }\n do\n {\n __asm\n {\n vpermps ymm0, ymm4, ymmword ptr [rdx-20h]\n vpermps ymm1, ymm4, ymmword ptr [rax-20h]\n vmulps ymm3, ymm0, ymm5\n vmulps ymm0, ymm1, ymm5\n }\n _RDX -= 32;\n result -= 32;\n __asm\n {\n vunpcklps ymm2, ymm3, ymm0\n vunpckhps ymm1, ymm3, ymm0\n vperm2f128 ymm0, ymm2, ymm1, 20h ; ' '\n vmovups ymmword ptr [rcx], ymm0\n vperm2f128 ymm1, ymm2, ymm1, 31h ; '1'\n vmovups ymmword ptr [rcx+20h], ymm1\n }\n _RCX += 16;\n --v71;\n }\n while ( v71 );\n }\n v82 = a11 & 7;\n if ( (a11 & 7) != 0 )\n {\n __asm { vmovss xmm3, dword ptr cs:xmmword_180144610 }\n _RDX = _RDX - result;\n do\n {\n result -= 4;\n _RCX += 2;\n __asm\n {\n vmovss xmm0, dword ptr [rdx+rax]\n vxorps xmm1, xmm0, xmm3\n vmovss dword ptr [rcx-8], xmm1\n vmovss xmm2, dword ptr [rax]\n vxorps xmm0, xmm2, xmm3\n vmovss dword ptr [rcx-4], xmm0\n }\n --v82;\n }\n while ( v82 );\n }\n __asm { vzeroupper }\n return result;\n}", "assembly": "; \n; sub_180006070 from 0x180006070 to 0x180006377 (775 bytes)\n; \n; 2 xrefs:\n; > sub_180005520 @ 0x18000560a\n; > @ 0x1801f6318\n; \n; This function is hookable on this platform!\n; \n; Using BromaIDA 8.0.0 @ https:;github.com/Stazzical/BromaIDA\n; Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https:;github.com/geode-sdk/bindings\n; \n\nmov [rsp+arg_0], rbx ; +0x0, 0x180006070\nmov [rsp+arg_8], rdi ; +0x5, 0x180006075\nmov r10, [rsp+arg_20] ; +0xa, 0x18000607a\nmov r11, rdx ; +0xf, 0x18000607f\nmov edx, [rsp+arg_38] ; +0x12, 0x180006082\nmov eax, edx ; +0x16, 0x180006086\nsar eax, 3 ; +0x18, 0x180006088\ntest eax, eax ; +0x1b, 0x18000608b\njz short loc_1800060DA ; +0x1d, 0x18000608d\nvmovdqu ymm3, cs:ymmword_1801446A0 ; +0x1f, 0x18000608f\nnop word ptr [rax+rax+00000000h] ; +0x27, 0x180006097\nvpermps ymm0, ymm3, ymmword ptr [r10-20h] ; +0x30, 0x1800060a0\nvpermps ymm1, ymm3, ymmword ptr [r9-20h] ; +0x36, 0x1800060a6\nvunpcklps ymm2, ymm1, ymm0 ; +0x3c, 0x1800060ac\nsub r9, 20h ; ' ' ; +0x40, 0x1800060b0\nsub r10, 20h ; ' ' ; +0x44, 0x1800060b4\nvunpckhps ymm1, ymm1, ymm0 ; +0x48, 0x1800060b8\nvperm2f128 ymm0, ymm2, ymm1, 20h ; ' ' ; +0x4c, 0x1800060bc\nvmovups ymmword ptr [rcx], ymm0 ; +0x52, 0x1800060c2\nvperm2f128 ymm1, ymm2, ymm1, 31h ; '1' ; +0x56, 0x1800060c6\nvmovups ymmword ptr [rcx+20h], ymm1 ; +0x5c, 0x1800060cc\nadd rcx, 40h ; '@' ; +0x61, 0x1800060d1\nsub eax, 1 ; +0x65, 0x1800060d5\njnz short loc_1800060A0 ; +0x68, 0x1800060d8\nand edx, 7 ; +0x6a, 0x1800060da\njz short loc_1800060FD ; +0x6d, 0x1800060dd\nnop ; +0x6f, 0x1800060df\nmov eax, [r9-4] ; +0x70, 0x1800060e0\nsub r9, 4 ; +0x74, 0x1800060e4\nsub r10, 4 ; +0x78, 0x1800060e8\nmov [rcx], eax ; +0x7c, 0x1800060ec\nmov eax, [r10] ; +0x7e, 0x1800060ee\nmov [rcx+4], eax ; +0x81, 0x1800060f1\nadd rcx, 8 ; +0x84, 0x1800060f4\nsub edx, 1 ; +0x88, 0x1800060f8\njnz short loc_1800060E0 ; +0x8b, 0x1800060fb\nmov ebx, [rsp+arg_40] ; +0x8d, 0x1800060fd\nmov edi, ebx ; +0x91, 0x180006101\nmov rax, [rsp+arg_30] ; +0x93, 0x180006103\nmov rdx, [rsp+arg_28] ; +0x98, 0x180006108\nsar edi, 3 ; +0x9d, 0x18000610d\ntest edi, edi ; +0xa0, 0x180006110\njz short loc_180006189 ; +0xa2, 0x180006112\nvmovdqu ymm4, cs:ymmword_1801446A0 ; +0xa4, 0x180006114\nnop dword ptr [rax+00h] ; +0xac, 0x18000611c\nvmovups ymm2, ymmword ptr [r8] ; +0xb0, 0x180006120\nvmovups ymm1, ymmword ptr [r11-20h] ; +0xb5, 0x180006125\nvmulps ymm0, ymm1, ymmword ptr [r9-20h] ; +0xbb, 0x18000612b\nvpermps ymm3, ymm4, ymm0 ; +0xc1, 0x180006131\nvmulps ymm0, ymm1, ymmword ptr [r10-20h] ; +0xc6, 0x180006136\nvfmadd231ps ymm3, ymm2, ymmword ptr [rdx] ; +0xcc, 0x18000613c\nsub r11, 20h ; ' ' ; +0xd1, 0x180006141\nsub r9, 20h ; ' ' ; +0xd5, 0x180006145\nsub r10, 20h ; ' ' ; +0xd9, 0x180006149\nadd rdx, 20h ; ' ' ; +0xdd, 0x18000614d\nvpermps ymm1, ymm4, ymm0 ; +0xe1, 0x180006151\nvfmadd231ps ymm1, ymm2, ymmword ptr [rax] ; +0xe6, 0x180006156\nvunpcklps ymm2, ymm3, ymm1 ; +0xeb, 0x18000615b\nvunpckhps ymm1, ymm3, ymm1 ; +0xef, 0x18000615f\nvperm2f128 ymm0, ymm2, ymm1, 20h ; ' ' ; +0xf3, 0x180006163\nvmovups ymmword ptr [rcx], ymm0 ; +0xf9, 0x180006169\nvperm2f128 ymm1, ymm2, ymm1, 31h ; '1' ; +0xfd, 0x18000616d\nvmovups ymmword ptr [rcx+20h], ymm1 ; +0x103, 0x180006173\nadd rcx, 40h ; '@' ; +0x108, 0x180006178\nadd rax, 20h ; ' ' ; +0x10c, 0x18000617c\nadd r8, 20h ; ' ' ; +0x110, 0x180006180\nsub edi, 1 ; +0x114, 0x180006184\njnz short loc_180006120 ; +0x117, 0x180006187\nand ebx, 7 ; +0x119, 0x180006189\njz short loc_1800061E5 ; +0x11c, 0x18000618c\nxchg ax, ax ; +0x11e, 0x18000618e\nvmovss xmm0, dword ptr [rdx] ; +0x120, 0x180006190\nvmulss xmm2, xmm0, dword ptr [r8] ; +0x124, 0x180006194\nvmovss xmm1, dword ptr [r9-4] ; +0x129, 0x180006199\nvfmadd231ss xmm2, xmm1, dword ptr [r11-4] ; +0x12f, 0x18000619f\nvmovss dword ptr [rcx], xmm2 ; +0x135, 0x1800061a5\nvmovss xmm1, dword ptr [r8] ; +0x139, 0x1800061a9\nvmovss xmm0, dword ptr [r10-4] ; +0x13e, 0x1800061ae\nvmulss xmm3, xmm0, dword ptr [r11-4] ; +0x144, 0x1800061b4\nvfmadd231ss xmm3, xmm1, dword ptr [rax] ; +0x14a, 0x1800061ba\nsub r11, 4 ; +0x14f, 0x1800061bf\nsub r9, 4 ; +0x153, 0x1800061c3\nsub r10, 4 ; +0x157, 0x1800061c7\nadd rdx, 4 ; +0x15b, 0x1800061cb\nvmovss dword ptr [rcx+4], xmm3 ; +0x15f, 0x1800061cf\nadd rcx, 8 ; +0x164, 0x1800061d4\nadd rax, 4 ; +0x168, 0x1800061d8\nadd r8, 4 ; +0x16c, 0x1800061dc\nsub ebx, 1 ; +0x170, 0x1800061e0\njnz short loc_180006190 ; +0x173, 0x1800061e3\nmov ebx, [rsp+arg_48] ; +0x175, 0x1800061e5\nmov edi, ebx ; +0x179, 0x1800061e9\nsar edi, 3 ; +0x17b, 0x1800061eb\ntest edi, edi ; +0x17e, 0x1800061ee\njz short loc_180006264 ; +0x180, 0x1800061f0\nvmovdqu ymm4, cs:ymmword_1801446A0 ; +0x182, 0x1800061f2\nnop word ptr [rax+rax+00h] ; +0x18a, 0x1800061fa\nvpermps ymm2, ymm4, ymmword ptr [r11-20h] ; +0x190, 0x180006200\nvpermps ymm0, ymm4, ymmword ptr [rdx-20h] ; +0x196, 0x180006206\nvmulps ymm3, ymm0, ymmword ptr [r8] ; +0x19c, 0x18000620c\nvfmsub231ps ymm3, ymm2, ymmword ptr [r9] ; +0x1a1, 0x180006211\nvpermps ymm0, ymm4, ymmword ptr [rax-20h] ; +0x1a6, 0x180006216\nvmulps ymm1, ymm0, ymmword ptr [r8] ; +0x1ac, 0x18000621c\nvfmsub231ps ymm1, ymm2, ymmword ptr [r10] ; +0x1b1, 0x180006221\nvunpcklps ymm2, ymm3, ymm1 ; +0x1b6, 0x180006226\nsub rdx, 20h ; ' ' ; +0x1ba, 0x18000622a\nsub rax, 20h ; ' ' ; +0x1be, 0x18000622e\nsub r11, 20h ; ' ' ; +0x1c2, 0x180006232\nadd r9, 20h ; ' ' ; +0x1c6, 0x180006236\nvunpckhps ymm1, ymm3, ymm1 ; +0x1ca, 0x18000623a\nvperm2f128 ymm0, ymm2, ymm1, 20h ; ' ' ; +0x1ce, 0x18000623e\nvmovups ymmword ptr [rcx], ymm0 ; +0x1d4, 0x180006244\nvperm2f128 ymm1, ymm2, ymm1, 31h ; '1' ; +0x1d8, 0x180006248\nvmovups ymmword ptr [rcx+20h], ymm1 ; +0x1de, 0x18000624e\nadd rcx, 40h ; '@' ; +0x1e3, 0x180006253\nadd r10, 20h ; ' ' ; +0x1e7, 0x180006257\nadd r8, 20h ; ' ' ; +0x1eb, 0x18000625b\nsub edi, 1 ; +0x1ef, 0x18000625f\njnz short loc_180006200 ; +0x1f2, 0x180006262\nand ebx, 7 ; +0x1f4, 0x180006264\njz short loc_1800062BC ; +0x1f7, 0x180006267\nsub r9, r8 ; +0x1f9, 0x180006269\nsub r10, r8 ; +0x1fc, 0x18000626c\nnop ; +0x1ff, 0x18000626f\nvmovss xmm1, dword ptr [r9+r8] ; +0x200, 0x180006270\nvmovss xmm0, dword ptr [rdx-4] ; +0x206, 0x180006276\nvmulss xmm2, xmm0, dword ptr [r8] ; +0x20b, 0x18000627b\nsub rdx, 4 ; +0x210, 0x180006280\nlea r11, [r11-4] ; +0x214, 0x180006284\nvfmsub231ss xmm2, xmm1, dword ptr [r11] ; +0x218, 0x180006288\nvmovss dword ptr [rcx], xmm2 ; +0x21d, 0x18000628d\nvmovss xmm0, dword ptr [rax-4] ; +0x221, 0x180006291\nvmulss xmm3, xmm0, dword ptr [r8] ; +0x226, 0x180006296\nvmovss xmm1, dword ptr [r11] ; +0x22b, 0x18000629b\nvfmsub231ss xmm3, xmm1, dword ptr [r10+r8] ; +0x230, 0x1800062a0\nsub rax, 4 ; +0x236, 0x1800062a6\nlea r8, [r8+4] ; +0x23a, 0x1800062aa\nvmovss dword ptr [rcx+4], xmm3 ; +0x23e, 0x1800062ae\nadd rcx, 8 ; +0x243, 0x1800062b3\nsub ebx, 1 ; +0x247, 0x1800062b7\njnz short loc_180006270 ; +0x24a, 0x1800062ba\nmov r8d, [rsp+arg_50] ; +0x24c, 0x1800062bc\nmov r9d, r8d ; +0x251, 0x1800062c1\nsar r9d, 3 ; +0x254, 0x1800062c4\ntest r9d, r9d ; +0x258, 0x1800062c8\njz short loc_180006323 ; +0x25b, 0x1800062cb\nvmovdqu ymm4, cs:ymmword_1801446A0 ; +0x25d, 0x1800062cd\nvmovups ymm5, cs:ymmword_1801446E0 ; +0x265, 0x1800062d5\nnop dword ptr [rax] ; +0x26d, 0x1800062dd\nvpermps ymm0, ymm4, ymmword ptr [rdx-20h] ; +0x270, 0x1800062e0\nvpermps ymm1, ymm4, ymmword ptr [rax-20h] ; +0x276, 0x1800062e6\nvmulps ymm3, ymm0, ymm5 ; +0x27c, 0x1800062ec\nvmulps ymm0, ymm1, ymm5 ; +0x280, 0x1800062f0\nsub rdx, 20h ; ' ' ; +0x284, 0x1800062f4\nsub rax, 20h ; ' ' ; +0x288, 0x1800062f8\nvunpcklps ymm2, ymm3, ymm0 ; +0x28c, 0x1800062fc\nvunpckhps ymm1, ymm3, ymm0 ; +0x290, 0x180006300\nvperm2f128 ymm0, ymm2, ymm1, 20h ; ' ' ; +0x294, 0x180006304\nvmovups ymmword ptr [rcx], ymm0 ; +0x29a, 0x18000630a\nvperm2f128 ymm1, ymm2, ymm1, 31h ; '1' ; +0x29e, 0x18000630e\nvmovups ymmword ptr [rcx+20h], ymm1 ; +0x2a4, 0x180006314\nadd rcx, 40h ; '@' ; +0x2a9, 0x180006319\nsub r9d, 1 ; +0x2ad, 0x18000631d\njnz short loc_1800062E0 ; +0x2b1, 0x180006321\nand r8d, 7 ; +0x2b3, 0x180006323\njz short loc_180006369 ; +0x2b7, 0x180006327\nvmovss xmm3, dword ptr cs:xmmword_180144610 ; +0x2b9, 0x180006329\nsub rdx, rax ; +0x2c1, 0x180006331\nnop dword ptr [rax+00h] ; +0x2c4, 0x180006334\nnop dword ptr [rax+rax+00000000h] ; +0x2c8, 0x180006338\nlea rax, [rax-4] ; +0x2d0, 0x180006340\nlea rcx, [rcx+8] ; +0x2d4, 0x180006344\nvmovss xmm0, dword ptr [rdx+rax] ; +0x2d8, 0x180006348\nvxorps xmm1, xmm0, xmm3 ; +0x2dd, 0x18000634d\nvmovss dword ptr [rcx-8], xmm1 ; +0x2e1, 0x180006351\nvmovss xmm2, dword ptr [rax] ; +0x2e6, 0x180006356\nvxorps xmm0, xmm2, xmm3 ; +0x2ea, 0x18000635a\nvmovss dword ptr [rcx-4], xmm0 ; +0x2ee, 0x18000635e\nsub r8d, 1 ; +0x2f3, 0x180006363\njnz short loc_180006340 ; +0x2f7, 0x180006367\nvzeroupper ; +0x2f9, 0x180006369\nmov rbx, [rsp+arg_0] ; +0x2fc, 0x18000636c\nmov rdi, [rsp+arg_8] ; +0x301, 0x180006371\nretn ; +0x306, 0x180006376", "xrefs": ["sub_180005520 @ 0x18000560a", " @ 0x1801f6318"], "is_objc": false, "is_arm32": false, "is_arm64": false, "bida_info": "8.0.0 @ https://github.com/Stazzical/BromaIDA", "bindings_info": "commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings"}