Function at 0x180027ab0
Capabilities:
Write file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xb0
vmovaps xmmword [rax - 0x38], xmm6
vmovaps xmmword [rax - 0x48], xmm7
vmovaps xmmword [rax - 0x58], xmm8
vmovaps xmmword [rax - 0x68], xmm9
vmovaps xmmword [rax - 0x78], xmm10
vmovaps xmmword [rsp + 0x50], xmm11
mov rax, qword [0x180101010]
xor rax, rsp
mov qword [rsp + 0x40], rax
mov rbx, qword [0x180186220]
mov edi, dword [rbx + 0x53c0]
lea r13, [rbx + 0x53c8]
sub edi, 1
mov qword [rsp + 0x20], r13
js 0x180027b7b
movsxd rsi, edi
shl rsi, 5
mov rbp, rsi
mov rdx, qword [r13]
cmp dword [rdx + rsi + 4], 7
jne 0x180027b6c
mov rcx, qword [rbx + 0x53c8]
movsxd r8, dword [rbx + 0x53c0]
sub rdx, rcx
add rdx, rbp
sar rdx, 5
sub r8, rdx
mov rax, rdx
shl rax, 5
add rcx, rax
shl r8, 5
sub r8, 0x20
lea rdx, [rcx + 0x20]
call sub.VCRUNTIME140.dll_memmove
dec dword [rbx + 0x53c0]
sub rbp, 0x20
sub rsi, 0x20
sub edi, 1
jns 0x180027b25
jmp 0x180027b80
mov qword [rsp + 0x20], r13
xor edi, edi
mov esi, edi
cmp dword [rbx + 0x53c0], edi
jle 0x180027bb9
mov ebp, edi
nop
mov rax, qword [r13]
cmp dword [rax + rbp + 4], edi
jne 0x180027bab
movsxd rdx, esi
mov rcx, rbx
shl rdx, 5
add rdx, rax
call qword [rax + rbp + 0x10]
inc esi
add rbp, 0x20
cmp esi, dword [rbx + 0x53c0]
jl 0x180027b90
mov rsi, qword [0x180186220]
cmp byte [rsi + 0x7e], dil
je 0x180027bd0
test byte [rsi + 0xc], 2
jne 0x180027bd0
mov byte [rsi + 0x7e], dil
cmp byte [rsi + 0x5379], dil
jne 0x180027c2d
mov rcx, qword [rsi + 0x20]
test rcx, rcx
je 0x180027c26
lea r8, [rsp + 0x28]
mov qword [rsp + 0x28], rdi
call fcn.180023050
mov rbp, rax
test rax, rax
je 0x180027c26
mov rdx, qword [rsp + 0x28]
test rdx, rdx
je 0x180027c0b
mov rcx, rax
call fcn.180037d80
mov rcx, qword [0x180186220]
test rcx, rcx
je 0x180027c1d
dec dword [rcx + 0xf4]
mov rcx, rbp
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov byte [rsi + 0x5379], 1
vmovss xmm0, dword [rsi + 0x537c]
vxorps xmm9, xmm9, xmm9
vcomiss xmm0, xmm9
jbe 0x180027cc5
vsubss xmm0, xmm0, dword [rsi + 0x18]
vcomiss xmm9, xmm0
vmovss dword [rsi + 0x537c], xmm0
jb 0x180027cc5
mov rbp, qword [rsi + 0x20]
test rbp, rbp
je 0x180027cb8
mov rax, qword [0x180186220]
lea rcx, [rsp + 0x28]
mov qword [rsp + 0x28], rdi
mov dword [rax + 0x537c], edi
call fcn.180038030
lea rdx, [0x1800cf948]
mov rcx, rbp
mov r14, rax
call fcn.180022f00
mov rbp, rax
test rax, rax
je 0x180027cbf
mov r8, qword [rsp + 0x28]
mov r9, rax
mov edx, 1
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
mov rcx, rbp
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
jmp 0x180027cbf
mov byte [rsi + 0xdc], 1
mov dword [rsi + 0x537c], edi
inc dword [rbx + 0x3e10]
vmovss xmm0, dword [rbx + 0x18]
vcvtss2sd xmm0, xmm0, xmm0
vaddsd xmm1, xmm0, qword [rbx + 0x3e08]
vmovsd qword [rbx + 0x3e08], xmm1
mov byte [rbx + 0x3e1c], 1
mov word [rbx + 0x5332], di
mov dword [rbx + 0x3e80], edi
mov ecx, dword [rbx + 0x534c]
test ecx, ecx
jns 0x180027d1e
mov eax, ecx
cdq
sub eax, edx
mov edx, edi
sar eax, 1
add eax, ecx
lea rcx, [rbx + 0x5348]
test eax, eax
cmovg edx, eax
call fcn.1800214c0
vmovss xmm11, dword [0x1800f4fe4]
vmovss xmm10, dword [0x1800f4d60]
mov dword [rbx + 0x5348], edi
movsxd rax, dword [rbx + 0x5560]
vmovss xmm2, dword [rbx + 0x18]
vsubss xmm0, xmm2, dword [rbx + rax*4 + 0x5470]
vaddss xmm1, xmm0, dword [rbx + 0x5568]
vmovss dword [rbx + 0x5568], xmm1
vmovss dword [rbx + rax*4 + 0x5470], xmm2
mov ecx, dword [rbx + 0x5560]
mov eax, 0x88888889
vmovss xmm1, dword [rbx + 0x5568]
inc ecx
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x3c
sub ecx, eax
mov eax, dword [rbx + 0x5564]
inc eax
mov dword [rbx + 0x5560], ecx
mov ecx, 0x3c
cmp eax, ecx
cmovl ecx, eax
vcomiss xmm1, xmm9
mov dword [rbx + 0x5564], ecx
jbe 0x180027dc1
vxorps xmm0, xmm0, xmm0
vcvtsi2ss xmm0, xmm0, ecx
vdivss xmm1, xmm1, xmm0
vdivss xmm2, xmm10, xmm1
jmp 0x180027dc6
vmovaps xmm2, xmm11
mov rdx, qword [0x180186220]
mov r9d, edi
vmovss dword [rbx + 0xe0], xmm2
mov rax, qword [rdx + 0x4090]
mov rcx, qword [rax]
mov qword [rcx], 5
mov dword [rcx + 8], edi
vmovsd xmm0, qword [rdx + 0x10]
vmovsd qword [rcx + 0xc], xmm0
cmp dword [rdx + 0x4088], edi
jle 0x180027eac
mov r8, rdi
nop word [rax + rax]
mov rax, qword [rdx + 0x4090]
lea r8, [r8 + 8]
inc r9d
mov rcx, qword [r8 + rax - 8]
vmovsd xmm4, qword [rcx + 0xa8]
vmovsd xmm3, qword [rcx + 0xb0]
vaddss xmm2, xmm4, dword [rcx + 4]
vmovss dword [rcx + 0x14], xmm2
vmovss xmm2, dword [rcx + 0x10]
vmovsd qword [rcx + 0xa0], xmm3
vshufps xmm0, xmm4, xmm4, 0x55
vaddss xmm1, xmm0, dword [rcx + 8]
vmovss xmm0, dword [rcx + 0xc]
vmovss dword [rcx + 0x18], xmm1
vsubss xmm1, xmm0, xmm4
vaddss xmm0, xmm1, xmm3
vshufps xmm1, xmm4, xmm4, 0x55
vmaxss xmm3, xmm9, xmm0
vsubss xmm0, xmm2, xmm1
mov qword [rcx + 0xb0], rdi
mov qword [rcx + 0xa8], rdi
vmovsd qword [rcx + 0x98], xmm4
vaddss xmm2, xmm0, dword [rcx + 0xa4]
vmaxss xmm1, xmm9, xmm2
vmovss dword [rcx + 0x20], xmm1
vmovss dword [rcx + 0x1c], xmm3
cmp r9d, dword [rdx + 0x4088]
jl 0x180027e10
mov rax, qword [rbx + 0x58]
mov byte [rax + 0x18], 1
mov rax, qword [0x180186220]
mov rcx, qword [rax + 0x68]
test rcx, rcx
jne 0x180027ecf
mov rax, qword [rax + 0x58]
mov rcx, qword [rax + 0x50]
mov rcx, qword [rcx]
call fcn.1800302b0
mov eax, dword [rbx + 0x4088]
vmovss xmm6, dword [0x1800f5058]
vmovaps xmm5, xmm11
vmovaps xmm7, xmm11
vmovaps xmm8, xmm6
test eax, eax
jle 0x180027f4d
mov rcx, qword [rbx + 0x4090]
mov edx, eax
nop dword [rax]
mov rax, qword [rcx]
lea rcx, [rcx + 8]
vmovss xmm1, dword [rax + 4]
vmovss xmm2, dword [rax + 8]
vaddss xmm3, xmm1, dword [rax + 0xc]
vaddss xmm4, xmm2, dword [rax + 0x10]
vcmpltss xmm0, xmm1, xmm5
vblendvps xmm5, xmm5, xmm1, xmm0
vcmpltss xmm0, xmm2, xmm7
vblendvps xmm7, xmm7, xmm2, xmm0
vcmpltss xmm0, xmm6, xmm3
vblendvps xmm6, xmm6, xmm3, xmm0
vcmpltss xmm0, xmm8, xmm4
vblendvps xmm8, xmm8, xmm4, xmm0
sub rdx, 1
jne 0x180027f00
mov eax, dword [rbx + 0x38a0]
vmovss xmm1, dword [rbx + 0x38a4]
vinsertps xmm5, xmm5, xmm7, 0x10
vinsertps xmm5, xmm5, xmm6, 0x20
vinsertps xmm5, xmm5, xmm8, 0x30
vmovups xmmword [rbx + 0x3c24], xmm5
mov dword [rbx + 0x3c1c], eax
vmovss xmm0, dword [rbx + 0x3c20]
vucomiss xmm0, xmm1
vmovups xmmword [rsp + 0x28], xmm5
jp 0x180027f95
je 0x18002803d
vmovss xmm6, dword [0x1800f4dfc]
vmovss dword [rbx + 0x3c20], xmm1
mov esi, edi
lea r14, [rbx + 0x3dbc]
mov ebp, 0x200
vxorps xmm2, xmm2, xmm2
vcvtsi2ss xmm2, xmm2, esi
test esi, esi
je 0x180028006
vmovss xmm0, dword [rbx + 0x3c20]
vminss xmm1, xmm0, xmm2
vdivss xmm2, xmm1, xmm2
vsubss xmm0, xmm10, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_acosf
vdivss xmm1, xmm6, xmm0
vxorps xmm2, xmm2, xmm2
vroundss xmm2, xmm2, xmm1, 2
vcvttss2si eax, xmm2
inc eax
cdq
sub eax, edx
sar eax, 1
add eax, eax
cmp eax, 4
jge 0x180027fff
mov eax, 4
jmp 0x18002800b
cmp eax, ebp
cmovg eax, ebp
jmp 0x18002800b
mov eax, 0x30
mov byte [r14], al
inc esi
inc r14
cmp esi, 0x40
jl 0x180027fb3
vmovss xmm0, dword [0x1800f4cd0]
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
vsubss xmm1, xmm10, xmm0
vmovss xmm0, dword [rbx + 0x3c20]
vdivss xmm1, xmm0, xmm1
vmovss dword [rbx + 0x3db8], xmm1
mov r8d, edi
mov dword [rbx + 0x3c34], edi
cmp byte [rbx + 0x389c], dil
je 0x18002805f
mov dword [rbx + 0x3c34], 1
mov r8d, 1
mov edx, r8d
cmp byte [rbx + 0x389d], dil
je 0x180028084
mov rax, qword [rbx + 0x3bf8]
mov rcx, qword [rax + 0x40]
test byte [rcx], 4
jne 0x180028084
or edx, 2
mov dword [rbx + 0x3c34], edx
cmp byte [rbx + 0x389e], dil
je 0x180028096
or edx, 4
mov dword [rbx + 0x3c34], edx
test byte [rbx + 0xc], 8
je 0x1800280a5
or edx, 8
mov dword [rbx + 0x3c34], edx
mov edx, edi
cmp dword [rbx + 0x4088], edi
jle 0x1800280e8
mov r8, rdi
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rbx + 0x4090]
lea r8, [r8 + 8]
vpxor xmm0, xmm0, xmm0
inc edx
mov rcx, qword [rax + r8 - 8]
vmovups ymmword [rcx + 0x48], ymm0
vmovups xmmword [rcx + 0x68], xmm0
cmp edx, dword [rbx + 0x4088]
jl 0x1800280c0
cmp byte [rbx + 0x423c], dil
je 0x180028123
mov eax, dword [rbx + 0x425c]
cmp eax, dword [rbx + 0x3edc]
jne 0x180028123
mov rcx, qword [0x180186220]
cmp dword [rcx + 0x3edc], eax
jne 0x180028114
mov dword [rcx + 0x3ee0], eax
cmp dword [rcx + 0x3f08], eax
jne 0x180028123
mov byte [rcx + 0x3f0c], 1
lea rax, [rbx + 0x3ec8]
mov ecx, dword [rax]
cmp dword [rbx + 0x3ecc], edi
jne 0x18002813c
mov dword [rbx + 0x3ed4], edi
jmp 0x18002814d
mov edx, ecx
mov r8, rax
test ecx, ecx
je 0x180028158
cmp dword [rbx + 0x3edc], ecx
jne 0x180028158
mov dword [rbx + 0x3ed8], edi
mov edx, ecx
mov r8, rax
vmovss xmm1, dword [rbx + 0x18]
test edx, edx
je 0x180028189
vaddss xmm0, xmm1, dword [rbx + 0x3ed4]
vmovss dword [rbx + 0x3ed4], xmm0
cmp dword [rbx + 0x3edc], edx
je 0x180028189
vaddss xmm0, xmm1, dword [rbx + 0x3ed8]
vmovss dword [rbx + 0x3ed8], xmm0
movzx eax, byte [rbx + 0x3ed1]
mov byte [rbx + 0x3ed2], al
mov eax, dword [rbx + 0x3edc]
mov dword [rbx + 0x3ecc], edx
mov dword [r8], edi
mov word [rbx + 0x3ed0], di
mov byte [rbx + 0x3ed3], dil
vmovaps xmm2, xmm1
test eax, eax
je 0x1800281f4
cmp dword [rbx + 0x3ee0], eax
je 0x1800281f4
cmp dword [rbx + 0x3f08], eax
jne 0x1800281f4
test byte [rbx + 0x541c], 1
je 0x1800281e3
lea rcx, str.NewFrame__:_ClearActiveID___because_it_isnt_marked_alive_anymore__n
vzeroupper
call fcn.180038a60
xor edx, edx
xor ecx, ecx
vzeroupper
call fcn.180025e30
vmovss xmm2, dword [rbx + 0x18]
mov ecx, dword [rbx + 0x3edc]
test ecx, ecx
je 0x18002820e
vaddss xmm0, xmm2, dword [rbx + 0x3ee4]
vmovss dword [rbx + 0x3ee4], xmm0
mov rax, qword [rbx + 0x3ef8]
vaddss xmm0, xmm2, dword [rbx + 0x3f1c]
mov qword [rbx + 0x3f10], rax
movzx eax, byte [rbx + 0x3eec]
mov byte [rbx + 0x3f0d], al
mov eax, dword [rbx + 0x52c0]
mov dword [rbx + 0x3f08], ecx
mov dword [rbx + 0x3ee0], edi
mov byte [rbx + 0x3eed], dil
mov byte [rbx + 0x3f0c], dil
mov byte [rbx + 0x3ee8], dil
vmovss dword [rbx + 0x3f1c], xmm0
test eax, eax
je 0x18002826e
cmp ecx, eax
je 0x18002826e
mov dword [rbx + 0x52c0], edi
test ecx, ecx
jne 0x18002828c
mov dword [rbx + 0x3f20], edi
xor eax, eax
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx + 0x3f24], xmm0
mov dword [rbx + 0x3f34], eax
cmp dword [rbx + 0x3edc], edi
jne 0x18002829c
mov dword [rbx + 0x3f38], edi
jmp 0x1800282c1
mov eax, dword [rbx + 0x3f38]
test eax, eax
je 0x1800282c1
test al, 2
je 0x1800282c1
mov rcx, qword [0x180186220]
mov eax, dword [rcx + 0x3f24]
bts eax, 0xe
mov dword [rcx + 0x3f24], eax
mov eax, dword [rbx + 0x43b0]
mov dword [rbx + 0x43b4], eax
vmovss xmm0, dword [rbx + 0x43b8]
test eax, eax
je 0x1800282f4
vaddss xmm0, xmm0, dword [rbx + 0x18]
vmovss dword [rbx + 0x43b8], xmm0
mov dword [rbx + 0x43bc], edi
mov dword [rbx + 0x43b0], edi
jmp 0x18002832d
vcomiss xmm0, xmm9
jbe 0x18002832d
vmovss xmm0, dword [rbx + 0x18]
vaddss xmm2, xmm0, dword [rbx + 0x43bc]
vaddss xmm1, xmm0, xmm0
vmovss xmm0, dword [0x1800f4cec]
vmaxss xmm0, xmm0, xmm1
vcomiss xmm2, xmm0
vmovss dword [rbx + 0x43bc], xmm2
jb 0x18002832d
mov qword [rbx + 0x43b8], rdi
mov eax, dword [rbx + 0x42ac]
lea rcx, [rbx + 0x37d0]
mov dword [rbx + 0x42b0], eax
mov qword [rbx + 0x42a8], 0x7f7fffff
mov word [rbx + 0x423d], di
mov dword [rbx + 0x42b8], edi
vzeroupper
call fcn.1800395a0
movzx ecx, byte [rbx + 0x7a]
call fcn.180030dc0
call fcn.180026740
call fcn.180034d70
call fcn.180026e20
call fcn.180027690
mov r10, qword [0x180186220]
mov rcx, qword [r10 + 0x3ea8]
test rcx, rcx
je 0x180028447
mov eax, dword [r10 + 0x3edc]
mov dword [r10 + 0x3ee0], eax
cmp dword [r10 + 0x3f08], eax
jne 0x1800283b3
mov byte [r10 + 0x3f0c], 1
mov r9, qword [rcx + 0x360]
cmp byte [r10 + 0xe04], dil
je 0x18002843e
lea rax, [r10 + 0xdfc]
mov rcx, rax
test rax, rax
jne 0x1800283d9
lea rcx, [r10 + 0xdfc]
vmovss xmm0, dword [rcx]
vmovss xmm1, dword [0x1800f5054]
vcomiss xmm0, xmm1
vmovss xmm2, dword [rcx + 4]
jb 0x18002843e
vcomiss xmm2, xmm1
jb 0x18002843e
vmovss xmm0, dword [rax]
vsubss xmm1, xmm0, dword [r10 + 0x3ef0]
vmovss xmm2, dword [rax + 4]
vsubss xmm0, xmm2, dword [r10 + 0x3ef4]
mov r8d, 1
lea rdx, [rsp + 0x28]
mov rcx, r9
vmovss dword [rsp + 0x2c], xmm0
vmovss dword [rsp + 0x28], xmm1
call fcn.180030460
mov rcx, qword [r10 + 0x3ea8]
call fcn.180030060
jmp 0x180028489
mov qword [r10 + 0x3ea8], rdi
jmp 0x180028480
mov rcx, qword [r10 + 0x3ef8]
test rcx, rcx
je 0x180028489
mov eax, dword [r10 + 0x3edc]
cmp dword [rcx + 0x5c], eax
jne 0x180028489
mov dword [r10 + 0x3ee0], eax
cmp dword [r10 + 0x3f08], eax
jne 0x180028477
mov byte [r10 + 0x3f0c], 1
cmp byte [r10 + 0xe04], dil
jne 0x180028489
xor edx, edx
xor ecx, ecx
call fcn.180025e30
mov r8, qword [0x180186220]
mov eax, dword [r8 + 0x4060]
sub eax, 1
js 0x1800284cc
mov r8, qword [r8 + 0x4068]
movsxd rdx, eax
add r8, 8
imul rcx, rdx, 0x38
add r8, rcx
mov rax, qword [r8]
test rax, rax
je 0x1800284c2
test dword [rax + 0xc], 0x8000000
jne 0x1800284e4
sub r8, 0x38
sub rdx, 1
jns 0x1800284b1
cmp qword [rbx + 0x4200], rdi
je 0x180028500
vmovss xmm0, dword [rbx + 0x421c]
vcomiss xmm0, xmm9
jbe 0x180028500
vmovss xmm0, dword [rbx + 0x18]
vmulss xmm0, xmm0, dword [0x1800f4e34]
vaddss xmm1, xmm0, dword [rbx + 0x4234]
vminss xmm2, xmm1, xmm10
jmp 0x18002851e
vmovss xmm0, dword [rbx + 0x18]
vmulss xmm1, xmm0, dword [0x1800f4e60]
vmovss xmm0, dword [rbx + 0x4234]
vsubss xmm2, xmm0, xmm1
vmaxss xmm2, xmm2, xmm9
vmovss dword [rbx + 0x4234], xmm2
vmovups xmm0, xmmword [rbx + 0x5358]
mov r15d, 0xffffffff
mov dword [rbx + 0x4238], edi
vmovups xmmword [rbx + 0x5368], xmm0
mov qword [rbx + 0x5570], 0xffffffffffffffff
mov dword [rbx + 0x556c], r15d
mov byte [rbx + 0x5358], dil
call fcn.1800271b0
cmp byte [rbx + 0x3e1f], dil
jne 0x180028587
vmovss xmm1, dword [rbx + 0x80]
vcomiss xmm9, xmm1
ja 0x180028587
vmovsd xmm0, qword [rbx + 0x3e08]
vcvtpd2ps xmm0, xmm0
vsubss xmm11, xmm0, xmm1
mov ebp, edi
cmp dword [rbx + 0x3e30], edi
je 0x1800286f6
mov r14, rdi
nop dword [rax + rax]
mov rax, qword [rbx + 0x3e38]
mov rsi, qword [r14 + rax]
movzx eax, byte [rsi + 0x96]
mov byte [rsi + 0x97], al
mov word [rsi + 0xa2], di
mov byte [rsi + 0x96], dil
mov byte [rsi + 0x98], dil
test al, al
jne 0x1800286e4
cmp byte [rsi + 0x3b8], dil
jne 0x1800286e4
vcomiss xmm11, dword [rsi + 0x24c]
jbe 0x1800286e4
mov rcx, qword [rsi + 0x280]
mov byte [rsi + 0x3b8], 1
mov eax, dword [rcx + 0x14]
mov dword [rsi + 0x3b0], eax
mov eax, dword [rcx + 0x24]
mov dword [rsi + 0x3b4], eax
mov rcx, qword [rsi + 0xd8]
test rcx, rcx
je 0x180028642
mov rax, qword [0x180186220]
mov qword [rsi + 0xd0], rdi
test rax, rax
je 0x180028635
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rsi + 0xd8], rdi
mov rcx, qword [rsi + 0x280]
call fcn.180041790
mov rcx, qword [rsi + 0x180]
test rcx, rcx
je 0x180028680
mov rax, qword [0x180186220]
mov qword [rsi + 0x178], rdi
test rax, rax
je 0x180028673
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rsi + 0x180], rdi
mov rcx, qword [rsi + 0x1b8]
test rcx, rcx
je 0x1800286b2
mov rax, qword [0x180186220]
mov qword [rsi + 0x1b0], rdi
test rax, rax
je 0x1800286a5
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rsi + 0x1b8], rdi
mov rcx, qword [rsi + 0x1c8]
test rcx, rcx
je 0x1800286e4
mov rax, qword [0x180186220]
mov qword [rsi + 0x1c0], rdi
test rax, rax
je 0x1800286d7
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rsi + 0x1c8], rdi
inc ebp
add r14, 8
cmp ebp, dword [rbx + 0x3e30]
jne 0x1800285a0
mov r14d, edi
cmp dword [rbx + 0x4340], edi
jle 0x180028847
mov r12, rdi
mov r15, rdi
movabs r13, 0x7a44c6afc2dd9ca9
nop word [rax + rax]
mov rax, qword [rbx + 0x4348]
vmovss xmm0, dword [r15 + rax]
vcomiss xmm0, xmm9
jb 0x180028821
vcomiss xmm11, xmm0
jbe 0x180028821
mov rsi, qword [rbx + 0x4320]
mov rbp, qword [0x180186220]
add rsi, r12
mov qword [rsi + 0x1e0], rdi
mov rcx, qword [rsi + 0x1d8]
test rcx, rcx
je 0x180028785
mov qword [rsi + 0x1d0], rdi
test rbp, rbp
je 0x180028778
dec dword [rbp + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rsi + 0x1d8], rdi
mov byte [rsi + 0x20c], 1
mov rcx, qword [rsi + 0x198]
test rcx, rcx
je 0x1800287be
mov rax, qword [0x180186220]
mov qword [rsi + 0x190], rdi
test rax, rax
je 0x1800287b1
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rsi + 0x198], rdi
mov edx, edi
mov byte [rsi + 0x216], 1
cmp dword [rsi + 0x74], edi
jle 0x1800287f5
mov rcx, rdi
mov r8d, 0xffffffff
nop word [rax + rax]
mov rax, qword [rsi + 0x18]
lea rcx, [rcx + 0x68]
inc edx
mov word [rcx + rax - 0x18], r8w
cmp edx, dword [rsi + 0x74]
jl 0x1800287e0
sub rsi, qword [rbp + 0x4320]
mov rax, r13
imul rsi
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov rax, qword [rbp + 0x4348]
movsxd rcx, edx
mov dword [rax + rcx*4], 0xbf800000
inc r14d
add r15, 4
add r12, 0x218
cmp r14d, dword [rbx + 0x4340]
jl 0x180028720
mov r13, qword [rsp + 0x20]
mov r15d, 0xffffffff
mov r14d, edi
cmp dword [rbx + 0x4308], edi
jle 0x18002889e
mov rsi, rdi
nop word [rax + rax]
mov rbp, qword [rbx + 0x4310]
vmovss xmm0, dword [rsi + rbp + 4]
vcomiss xmm0, xmm9
jb 0x18002888e
vcomiss xmm11, xmm0
jbe 0x18002888e
lea rcx, [rbp + 0x10]
add rcx, rsi
call fcn.180045300
mov dword [rsi + rbp + 4], 0xbf800000
inc r14d
add rsi, 0x70
cmp r14d, dword [rbx + 0x4308]
jl 0x180028860
cmp byte [rbx + 0x3e1f], dil
je 0x180028910
mov rsi, qword [0x180186220]
mov rcx, qword [rsi + 0x4048]
test rcx, rcx
je 0x1800288d9
mov qword [rsi + 0x4040], rdi
test rsi, rsi
je 0x1800288cc
dec dword [rsi + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rsi + 0x4048], rdi
mov rcx, qword [rsi + 0x4058]
test rcx, rcx
je 0x18002890b
mov rax, qword [0x180186220]
mov qword [rsi + 0x4050], rdi
test rax, rax
je 0x1800288fe
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rsi + 0x4058], rdi
call fcn.18001fc70
mov rax, qword [rbx + 0x4098]
mov byte [rbx + 0x3e1f], dil
test rax, rax
je 0x180028985
cmp byte [rax + 0x97], dil
jne 0x180028985
mov rcx, qword [0x180186220]
mov eax, dword [rcx + 0x3e40]
sub eax, 1
js 0x18002897e
movsxd rdx, eax
mov rax, qword [rcx + 0x3e48]
lea r8, [rax + rdx*8]
nop dword [rax]
mov rcx, qword [r8]
test rcx, rcx
je 0x180028974
cmp byte [rcx + 0x97], dil
je 0x180028974
mov eax, dword [rcx + 0xc]
and eax, 0x40200
cmp eax, 0x40200
jne 0x180028b5c
sub r8, 8
sub rdx, 1
jns 0x180028950
xor ecx, ecx
call fcn.180030060
mov ecx, dword [rbx + 0x3e64]
test ecx, ecx
jns 0x1800289ab
mov eax, ecx
cdq
sub eax, edx
mov edx, edi
sar eax, 1
add eax, ecx
lea rcx, [rbx + 0x3e60]
test eax, eax
cmovg edx, eax
call fcn.180039b20
mov dword [rbx + 0x3e60], edi
mov ecx, dword [rbx + 0x4074]
test ecx, ecx
jns 0x1800289d7
mov eax, ecx
cdq
sub eax, edx
mov edx, edi
sar eax, 1
add eax, ecx
lea rcx, [rbx + 0x4070]
test eax, eax
cmovg edx, eax
call fcn.180039a90
lea rsi, [rbx + 0x4040]
mov dword [rbx + 0x4070], edi
mov ecx, dword [rsi + 4]
test ecx, ecx
jns 0x180028a03
mov eax, ecx
cdq
sub eax, edx
mov edx, edi
sar eax, 1
add eax, ecx
mov rcx, rsi
test eax, eax
cmovg edx, eax
call fcn.1800214c0
mov dword [rsi], edi
cmp dword [rsi + 4], edi
jne 0x180028a17
mov edx, 8
mov rcx, rsi
call fcn.1800214c0
movsxd rcx, dword [rsi]
xor edx, edx
mov rax, qword [rsi + 8]
mov dword [rax + rcx*4], edi
lea rcx, [rbx + 0x4050]
inc dword [rsi]
call fcn.180039150
mov rsi, qword [0x180186220]
mov dword [rsi + 0x5434], edi
cmp byte [rsi + 0x5430], dil
je 0x180028bc0
mov r14d, dword [rsi + 0x3ecc]
mov edx, 1
mov ecx, 0x20e
mov dword [rsi + 0x4238], 7
call fcn.180030b00
test al, al
je 0x180028a76
mov byte [rsi + 0x5430], dil
mov ebp, dword [rsi + 0xe18]
cmp ebp, 3
je 0x180028ab7
movzx eax, byte [rsi + 0x5431]
cmp byte [rax + rsi + 0xe04], dil
je 0x180028ab7
vmovss xmm0, dword [rsi + rax*4 + 0x3768]
vucomiss xmm0, xmm9
jp 0x180028ab7
jne 0x180028ab7
test r14d, r14d
je 0x180028ab7
mov dword [rsi + 0x5434], r14d
mov byte [rsi + 0x5430], dil
mov eax, edi
mov rcx, rdi
mov edx, 0x3768
cmp ebp, 3
jne 0x180028ae4
cmp byte [rcx + rsi + 0xe04], dil
je 0x180028ae4
vmovss xmm0, dword [rdx + rsi]
vucomiss xmm0, xmm9
jp 0x180028ae4
jne 0x180028ae4
mov byte [rsi + 0x5431], al
inc eax
inc rcx
add rdx, 4
cmp eax, 3
jl 0x180028ac1
or dword [rsi + 0x3f90], 0x40
xor ecx, ecx
mov dword [rsi + 0x3ff0], 0x3f333333
call fcn.180032640
mov edx, r14d
lea rcx, str.HoveredId:_0x_08X
call fcn.18004d4d0
lea rcx, str.Press_ESC_to_abort_picking.
call fcn.18004d4d0
lea rax, str.Left
mov qword [rsp + 0x28], rax
lea rax, str.Right
mov qword [rsp + 0x30], rax
lea rax, str.Middle
mov qword [rsp + 0x38], rax
cmp ebp, 3
jne 0x180028b7c
lea rcx, str.Remap_w__CtrlShift:_click_anywhere_to_select_new_mouse_button.
call fcn.18004d4d0
jmp 0x180028bb4
mov rax, qword [rcx + 0x380]
test rax, rax
je 0x180028b71
cmp byte [rax + 0x97], dil
jne 0x180028b74
mov rax, rcx
mov rcx, rax
jmp 0x180028980
movzx r8d, byte [rsi + 0x5431]
lea rdx, str.Click__s_Button_to_break_in_debugger___remap_w__CtrlShift_
test r14d, r14d
mov eax, 0x10
mov rcx, rdi
cmove rcx, rax
mov rax, qword [0x180186220]
mov r8, qword [rsp + r8*8 + 0x28]
add rax, 0x38a8
add rcx, rax
call fcn.18004d5e0
call fcn.18002fdb0
mov rsi, qword [0x180186220]
lea r12, [rsi + 0x3ec4]
lea r14, [rsi + 0x5448]
mov dword [r12], edi
mov eax, dword [r14]
inc eax
cmp dword [rsi + 0x3e10], eax
jne 0x180028c94
mov ebp, dword [rsi + 0x3ecc]
test ebp, ebp
jne 0x180028bf3
mov ebp, dword [rsi + 0x3edc]
cmp dword [r14 + 8], ebp
je 0x180028c31
mov dword [r14 + 4], r15d
lea r15, [r14 + 0x10]
mov dword [r14 + 8], ebp
mov ecx, dword [r15 + 4]
test ecx, ecx
jns 0x180028c2c
mov eax, ecx
cdq
sub eax, edx
mov edx, edi
sar eax, 1
add eax, ecx
mov rcx, r15
test eax, eax
cmovg edx, eax
call fcn.180039bb0
mov rsi, qword [0x180186220]
mov dword [r15], edi
jmp 0x180028c35
lea r15, [r14 + 0x10]
test ebp, ebp
je 0x180028c94
movsxd rcx, dword [r14 + 4]
test ecx, ecx
js 0x180028c65
mov eax, ecx
cmp ecx, dword [r15]
jge 0x180028c76
mov r8, qword [r14 + 0x18]
lea rdx, [rcx + rcx*8]
cmp byte [r8 + rdx*8 + 5], dil
jne 0x180028c5f
cmp byte [r8 + rdx*8 + 4], 2
jle 0x180028c76
inc ecx
mov dword [r14 + 4], ecx
mov eax, ecx
cmp ecx, 0xffffffff
jne 0x180028c72
mov dword [r12], ebp
jmp 0x180028c94
test ecx, ecx
js 0x180028c94
cmp eax, dword [r15]
jge 0x180028c94
cdqe
lea rdx, [rax + rax*8]
mov rax, qword [r14 + 0x18]
mov ecx, dword [rax + rdx*8]
mov dword [r12], ecx
mov rax, qword [r14 + 0x18]
inc byte [rax + rdx*8 + 4]
mov byte [rbx + 0x3e1d], 1
lea rcx, str.DebugDefault
or dword [rsi + 0x3f90], 2
xor r8d, r8d
xor edx, edx
mov dword [rsi + 0x3fb0], 0x43c80000
mov dword [rsi + 0x3fb4], 0x43c80000
mov dword [rsi + 0x3f98], 4
call fcn.18002da20
cmp dword [rbx + 0x53c0], edi
jle 0x180028d0a
mov rsi, rdi
nop dword [rax]
mov rax, qword [r13]
cmp dword [rsi + rax + 4], 1
jne 0x180028cfc
movsxd rdx, edi
mov rcx, rbx
shl rdx, 5
add rdx, rax
call qword [rsi + rax + 0x10]
inc edi
add rsi, 0x20
cmp edi, dword [rbx + 0x53c0]
jl 0x180028ce0
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.18006e830
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
vmovaps xmm6, xmmword [r11 - 0x10]
vmovaps xmm7, xmmword [r11 - 0x20]
vmovaps xmm8, xmmword [r11 - 0x30]
vmovaps xmm9, xmmword [r11 - 0x40]
vmovaps xmm10, xmmword [r11 - 0x50]
vmovaps xmm11, xmmword [r11 - 0x60]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret