Function at 0x1800184b0
Capabilities:
Write file on windows

Disassembly:
mov rax, rsp
push rbx
push rsi
push rdi
sub rsp, 0x70
mov rdi, qword [0x18007ce08]
xor edx, edx
mov qword [rax + 0x10], rbp
mov rcx, rdi
mov qword [rax + 0x20], r13
mov qword [rax - 0x20], r14
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
call fcn.180017330
mov rbx, qword [0x18007ce08]
cmp byte [rbx + 0x114], 0
je 0x180018502
test byte [rbx + 0x54], 2
jne 0x180018502
mov byte [rbx + 0x114], 0
xor esi, esi
cmp byte [rbx + 0x3131], sil
jne 0x180018565
mov rcx, qword [rbx + 0x68]
test rcx, rcx
je 0x18001855e
lea r8, [rsp + 0x90]
mov qword [rsp + 0x90], rsi
call fcn.180015070
mov rbp, rax
test rax, rax
je 0x18001855e
mov rdx, qword [rsp + 0x90]
mov rcx, rax
call fcn.180024c60
mov rcx, qword [0x18007ce08]
test rcx, rcx
je 0x180018555
dec dword [rcx + 0x3fc]
mov rcx, rbp
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov byte [rbx + 0x3131], 1
movss xmm0, dword [rbx + 0x3134]
xorps xmm6, xmm6
comiss xmm0, xmm6
jbe 0x180018601
subss xmm0, dword [rbx + 0x60]
comiss xmm6, xmm0
movss dword [rbx + 0x3134], xmm0
jb 0x180018601
mov rbp, qword [rbx + 0x68]
test rbp, rbp
je 0x1800185f4
mov rax, qword [0x18007ce08]
lea rcx, [rsp + 0x90]
mov qword [rsp + 0x90], rsi
mov dword [rax + 0x3134], esi
call fcn.180024fc0
lea rdx, [0x180073e68]
mov rcx, rbp
mov r14, rax
call fcn.180014f40
mov rbp, rax
test rax, rax
je 0x1800185fb
mov r8, qword [rsp + 0x90]
mov r9, rax
mov edx, 1
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
mov rcx, rbp
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
jmp 0x1800185fb
mov byte [rbx + 0x3e4], 1
mov dword [rbx + 0x3134], esi
inc dword [rdi + 0x1ac0]
movss xmm0, dword [rdi + 0x60]
cvtps2pd xmm0, xmm0
mov byte [rdi + 0x1acc], 1
mov dword [rdi + 0x30f8], esi
mov dword [rdi + 0x1b30], esi
addsd xmm0, qword [rdi + 0x1ab8]
movsd qword [rdi + 0x1ab8], xmm0
mov ecx, dword [rdi + 0x3114]
test ecx, ecx
jns 0x180018658
mov eax, ecx
cdq
sub eax, edx
mov edx, esi
sar eax, 1
add eax, ecx
lea rcx, [rdi + 0x3110]
test eax, eax
cmovg edx, eax
call fcn.180026220
movss xmm8, dword [0x180074678]
movss xmm9, dword [0x18007456c]
mov dword [rdi + 0x3110], esi
movsxd rax, dword [rdi + 0x33b4]
movss xmm1, dword [rdi + 0x60]
movaps xmm0, xmm1
subss xmm0, dword [rdi + rax*4 + 0x31d4]
addss xmm0, dword [rdi + 0x33b8]
movss dword [rdi + 0x33b8], xmm0
movss dword [rdi + rax*4 + 0x31d4], xmm1
mov eax, 0x88888889
mov ecx, dword [rdi + 0x33b4]
movss xmm1, dword [rdi + 0x33b8]
inc ecx
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x78
sub ecx, eax
comiss xmm1, xmm6
mov dword [rdi + 0x33b4], ecx
jbe 0x1800186e6
divss xmm1, dword [0x180074630]
movaps xmm0, xmm9
divss xmm0, xmm1
jmp 0x1800186ea
movaps xmm0, xmm8
mov rax, qword [rdi + 0xf0]
movss dword [rdi + 0x3e8], xmm0
mov byte [rax], 1
mov rax, qword [0x18007ce08]
mov rcx, qword [rax + 0x100]
test rcx, rcx
jne 0x18001871d
mov rax, qword [rax + 0xf0]
mov rcx, qword [rax + 0x48]
mov rcx, qword [rcx]
call fcn.18001f5b0
movss xmm2, dword [rdi + 0x58]
movss xmm3, dword [rdi + 0x5c]
mov qword [rdi + 0x19fc], rsi
movss dword [rdi + 0x1a04], xmm2
movss dword [rdi + 0x1a08], xmm3
mov eax, dword [rdi + 0x1664]
movss xmm1, dword [rdi + 0x1668]
mov dword [rdi + 0x19f4], eax
movss xmm0, dword [rdi + 0x19f8]
ucomiss xmm0, xmm1
jp 0x18001876a
je 0x1800187eb
movaps xmmword [rsp + 0x40], xmm7
lea r14, [rdi + 0x1a70]
movss xmm7, dword [0x1800745b0]
mov ebx, esi
movss dword [rdi + 0x19f8], xmm1
mov ebp, 0x200
nop dword [rax]
movd xmm1, ebx
cvtdq2ps xmm1, xmm1
addss xmm1, xmm9
movaps xmm0, xmm1
subss xmm0, dword [rdi + 0x19f8]
divss xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_acosf
movaps xmm1, xmm7
divss xmm1, xmm0
cvttss2si edx, xmm1
cmp edx, 0xc
jge 0x1800187c7
mov edx, 0xc
jmp 0x1800187cc
cmp edx, ebp
cmovg edx, ebp
mov ecx, 0xff
movzx eax, dl
cmp edx, ecx
cmovl ecx, eax
inc ebx
mov byte [r14], cl
inc r14
cmp ebx, 0x40
jl 0x180018790
movaps xmm7, xmmword [rsp + 0x40]
mov r8d, esi
mov dword [rdi + 0x1a0c], esi
cmp byte [rdi + 0x1660], sil
je 0x18001880d
mov dword [rdi + 0x1a0c], 1
mov r8d, 1
mov edx, r8d
cmp byte [rdi + 0x1661], sil
je 0x180018833
mov rax, qword [rdi + 0x19d0]
mov rcx, qword [rax + 0x40]
test byte [rcx + 4], 4
jne 0x180018833
or edx, 2
mov dword [rdi + 0x1a0c], edx
cmp byte [rdi + 0x1662], sil
je 0x180018845
or edx, 4
mov dword [rdi + 0x1a0c], edx
test byte [rdi + 0x54], 8
je 0x180018854
or edx, 8
mov dword [rdi + 0x1a0c], edx
lea rcx, [rdi + 0x1ec8]
call fcn.18002d900
mov rdx, qword [rdi + 0xf0]
lea rcx, [rdi + 0x1ec8]
mov rdx, qword [rdx + 8]
call fcn.18002df00
mov rax, qword [rdi + 0x1f00]
lea rcx, [rdi + 0x1ec8]
xor r9d, r9d
movss xmm1, dword [rax + 0x28]
movss xmm0, dword [rax + 0x24]
movss xmm2, dword [rax + 0x20]
unpcklps xmm0, xmm1
movss xmm1, dword [rax + 0x1c]
movq r8, xmm0
unpcklps xmm1, xmm2
movq rdx, xmm1
call fcn.18002dde0
lea rcx, [rdi + 0x1f90]
call fcn.18002d900
mov rdx, qword [rdi + 0xf0]
lea rcx, [rdi + 0x1f90]
mov rdx, qword [rdx + 8]
call fcn.18002df00
mov rax, qword [rdi + 0x1fc8]
lea rcx, [rdi + 0x1f90]
xor r9d, r9d
movss xmm1, dword [rax + 0x28]
movss xmm0, dword [rax + 0x24]
movss xmm2, dword [rax + 0x20]
unpcklps xmm0, xmm1
movss xmm1, dword [rax + 0x1c]
movq r8, xmm0
unpcklps xmm1, xmm2
movq rdx, xmm1
call fcn.18002dde0
mov r8, qword [0x18007ce08]
mov byte [rdi + 0x1e68], sil
mov qword [rdi + 0x1e70], rsi
mov qword [rdi + 0x1e7c], rsi
mov dword [rdi + 0x1e78], esi
mov qword [rdi + 0x1e94], rsi
mov qword [rdi + 0x1e8c], rsi
mov qword [rdi + 0x1e84], rsi
cmp byte [rdi + 0x205c], sil
je 0x18001897d
mov eax, dword [rdi + 0x207c]
cmp eax, dword [rdi + 0x1b88]
jne 0x18001897d
cmp dword [r8 + 0x1b88], eax
jne 0x18001896c
mov dword [r8 + 0x1b8c], eax
cmp dword [r8 + 0x1bc8], eax
jne 0x18001897d
mov byte [r8 + 0x1bcc], 1
cmp dword [rdi + 0x1b78], esi
jne 0x18001898d
mov dword [rdi + 0x1b80], esi
jmp 0x18001899f
mov eax, dword [rdi + 0x1b74]
test eax, eax
je 0x1800189a5
cmp dword [rdi + 0x1b88], eax
jne 0x1800189a5
mov dword [rdi + 0x1b84], esi
mov eax, dword [rdi + 0x1b74]
test eax, eax
je 0x1800189df
movss xmm1, dword [rdi + 0x60]
movaps xmm0, xmm1
addss xmm0, dword [rdi + 0x1b80]
movss dword [rdi + 0x1b80], xmm0
cmp dword [rdi + 0x1b88], eax
je 0x1800189df
addss xmm1, dword [rdi + 0x1b84]
movss dword [rdi + 0x1b84], xmm1
mov dword [rdi + 0x1b78], eax
movzx eax, byte [rdi + 0x1b7d]
mov byte [rdi + 0x1b7e], al
mov eax, dword [rdi + 0x1b88]
mov dword [rdi + 0x1b74], esi
mov word [rdi + 0x1b7c], si
mov byte [rdi + 0x1b7f], sil
cmp dword [rdi + 0x1b8c], eax
je 0x180018a72
cmp dword [rdi + 0x1bc8], eax
jne 0x180018a72
test eax, eax
je 0x180018a72
mov ecx, dword [r8 + 0x1b88]
test ecx, ecx
setne al
mov byte [r8 + 0x1b94], al
test ecx, ecx
je 0x180018a46
mov dword [r8 + 0x1b90], esi
mov word [r8 + 0x1b97], si
mov dword [r8 + 0x1b88], esi
mov word [r8 + 0x1b95], si
mov qword [r8 + 0x1bb8], rsi
mov word [r8 + 0x1b99], si
mov qword [r8 + 0x1b9c], rsi
mov qword [r8 + 0x1ba8], rsi
mov ecx, dword [rdi + 0x1b88]
test ecx, ecx
je 0x180018a91
movss xmm0, dword [rdi + 0x60]
addss xmm0, dword [rdi + 0x1b90]
movss dword [rdi + 0x1b90], xmm0
mov rax, qword [rdi + 0x1bb8]
movss xmm0, dword [rdi + 0x60]
addss xmm0, dword [rdi + 0x1bdc]
mov qword [rdi + 0x1bd0], rax
movzx eax, byte [rdi + 0x1b98]
mov byte [rdi + 0x1bcd], al
mov eax, dword [rdi + 0x30b8]
movss dword [rdi + 0x1bdc], xmm0
mov dword [rdi + 0x1bc8], ecx
mov dword [rdi + 0x1b8c], esi
mov byte [rdi + 0x1b99], sil
mov byte [rdi + 0x1bcc], sil
mov byte [rdi + 0x1b94], sil
test eax, eax
je 0x180018af6
cmp ecx, eax
je 0x180018af6
mov dword [rdi + 0x30b8], esi
test ecx, ecx
jne 0x180018b08
mov qword [rdi + 0x1b9c], rsi
mov qword [rdi + 0x1ba8], rsi
mov eax, dword [rdi + 0x20cc]
mov dword [rdi + 0x20d0], eax
mov eax, esi
mov qword [rdi + 0x20c8], 0x7f7fffff
mov word [rdi + 0x205d], si
mov dword [rdi + 0x20d8], esi
cmp byte [r8 + 0x188], sil
setne al
mov ecx, eax
or ecx, 2
cmp byte [r8 + 0x189], sil
cmove ecx, eax
mov edx, ecx
or edx, 4
cmp byte [r8 + 0x18a], sil
cmove edx, ecx
lea rcx, [rdi + 0xce8]
mov eax, edx
or eax, 8
cmp byte [r8 + 0x18b], sil
mov r8d, 0x800
cmove eax, edx
lea rdx, [rdi + 0x4e8]
mov dword [rdi + 0x408], eax
call sub.VCRUNTIME140.dll_memcpy
movss xmm1, dword [0x180074684]
lea rcx, [rdi + 0x18d]
lea rax, [rdi + 0x4ec]
mov r8d, 0x80
cmp byte [rcx - 1], sil
je 0x180018bbc
movss xmm0, dword [rax - 4]
comiss xmm6, xmm0
jbe 0x180018bb5
movaps xmm0, xmm6
jmp 0x180018bbf
addss xmm0, dword [rdi + 0x60]
jmp 0x180018bbf
movaps xmm0, xmm1
movss dword [rax - 4], xmm0
cmp byte [rcx], sil
je 0x180018bde
movss xmm0, dword [rax]
comiss xmm6, xmm0
jbe 0x180018bd7
movaps xmm0, xmm6
jmp 0x180018be1
addss xmm0, dword [rdi + 0x60]
jmp 0x180018be1
movaps xmm0, xmm1
movss dword [rax], xmm0
cmp byte [rcx + 1], sil
je 0x180018c01
movss xmm0, dword [rax + 4]
comiss xmm6, xmm0
jbe 0x180018bfa
movaps xmm0, xmm6
jmp 0x180018c04
addss xmm0, dword [rdi + 0x60]
jmp 0x180018c04
movaps xmm0, xmm1
movss dword [rax + 4], xmm0
cmp byte [rcx + 2], sil
je 0x180018c25
movss xmm0, dword [rax + 8]
comiss xmm6, xmm0
jbe 0x180018c1e
movaps xmm0, xmm6
jmp 0x180018c28
addss xmm0, dword [rdi + 0x60]
jmp 0x180018c28
movaps xmm0, xmm1
movss dword [rax + 8], xmm0
add rcx, 4
add rax, 0x10
sub r8, 1
jne 0x180018ba0
call fcn.180021f10
call fcn.180017910
call fcn.1800181a0
call fcn.180017440
mov r8, qword [0x18007ce08]
mov eax, dword [r8 + 0x1cc8]
sub eax, 1
js 0x180018c9b
mov r8, qword [r8 + 0x1cd0]
movsxd rdx, eax
add r8, 8
lea rcx, [rdx + rdx*2]
shl rcx, 4
add r8, rcx
nop
mov rax, qword [r8]
test rax, rax
je 0x180018c91
test dword [rax + 0xc], 0x8000000
jne 0x180018cb1
sub r8, 0x30
sub rdx, 1
jns 0x180018c80
cmp qword [rdi + 0x1e18], rsi
je 0x180018ccd
movss xmm0, dword [rdi + 0x1e34]
comiss xmm0, xmm6
jbe 0x180018ccd
movss xmm1, dword [rdi + 0x60]
mulss xmm1, dword [0x1800745a8]
addss xmm1, dword [rdi + 0x1ec0]
minss xmm1, xmm9
jmp 0x180018cea
movss xmm0, dword [rdi + 0x60]
mulss xmm0, dword [0x1800745c4]
movss xmm1, dword [rdi + 0x1ec0]
subss xmm1, xmm0
maxss xmm1, xmm6
movss dword [rdi + 0x1ec0], xmm1
mov dword [rdi + 0x2058], esi
mov qword [rdi + 0x33c0], 0xffffffffffffffff
mov dword [rdi + 0x33bc], 0xffffffff
mov dword [rdi + 0x3120], 0x3f800000
mov dword [rdi + 0x3124], 0x3f800000
call fcn.180017cd0
mov r11, qword [0x18007ce08]
movaps xmm9, xmmword [rsp + 0x20]
mov r8, qword [r11 + 0x1ce8]
test r8, r8
je 0x180018d73
cmp byte [r8 + 0x8e], sil
je 0x180018d73
test dword [r8 + 0xc], 0x40000
jne 0x180018d73
cmp byte [r11 + 0x188], sil
jne 0x180018d73
mov ecx, dword [r11 + 0x84]
test ecx, ecx
js 0x180018d73
call fcn.18001a570
test al, al
je 0x180018d73
mov al, 1
jmp 0x180018d75
xor al, al
mov byte [r11 + 0x1e60], al
cmp dword [r11 + 0x1b88], esi
jne 0x180018de0
test al, al
je 0x180018de0
mov qword [r11 + 0x1e48], r8
mov dword [r11 + 0x1e58], 0x7fffffff
cmp dword [r11 + 0x1cf0], esi
je 0x180018dcd
mov ecx, dword [r11 + 0x1d38]
cmp ecx, 0x7fffffff
je 0x180018dcd
cmp byte [r11 + 0x189], sil
mov eax, 2
cmovne eax, esi
add eax, ecx
mov dword [r11 + 0x1e5c], eax
jmp 0x180018de0
movzx eax, byte [r11 + 0x189]
neg al
sbb ecx, ecx
mov dword [r11 + 0x1e5c], ecx
mov r8, qword [r11 + 0x1e48]
mov qword [r11 + 0x1e40], rsi
mov dword [r11 + 0x1e54], 0x7fffffff
mov dword [r11 + 0x1e50], 0x7fffffff
test r8, r8
je 0x180018e7d
mov eax, dword [r11 + 0x1e58]
mov qword [r11 + 0x1e40], r8
cmp eax, 0x7fffffff
je 0x180018e38
mov ecx, dword [r8 + 0x1c4]
cmp ecx, 0xffffffff
je 0x180018e38
inc ecx
add eax, ecx
cdq
idiv ecx
mov dword [r11 + 0x1e50], edx
mov eax, dword [r11 + 0x1e5c]
cmp eax, 0x7fffffff
je 0x180018e60
mov ecx, dword [r8 + 0x1c8]
cmp ecx, 0xffffffff
je 0x180018e60
inc ecx
add eax, ecx
cdq
idiv ecx
mov dword [r11 + 0x1e54], edx
mov qword [r11 + 0x1e48], rsi
mov dword [r11 + 0x1e5c], 0x7fffffff
mov dword [r11 + 0x1e58], 0x7fffffff
mov dword [r11 + 0x1d38], 0x7fffffff
cmp byte [rdi + 0x1acf], sil
jne 0x180018eb1
movss xmm0, dword [rdi + 0x118]
comiss xmm6, xmm0
ja 0x180018eb1
movsd xmm8, qword [rdi + 0x1ab8]
cvtpd2ps xmm8, xmm8
subss xmm8, xmm0
mov ebp, esi
cmp dword [rdi + 0x1ae0], esi
je 0x180019018
mov r14, rsi
mov rax, qword [rdi + 0x1ae8]
mov rbx, qword [r14 + rax]
movzx eax, byte [rbx + 0x8e]
mov byte [rbx + 0x8f], al
mov word [rbx + 0x9a], si
mov byte [rbx + 0x8e], sil
mov byte [rbx + 0x90], sil
test al, al
jne 0x180019006
cmp byte [rbx + 0x3e0], sil
jne 0x180019006
comiss xmm8, dword [rbx + 0x284]
jbe 0x180019006
mov rcx, qword [rbx + 0x2b8]
mov byte [rbx + 0x3e0], 1
mov eax, dword [rcx + 0x14]
mov dword [rbx + 0x3d8], eax
mov eax, dword [rcx + 0x24]
mov dword [rbx + 0x3dc], eax
mov rcx, qword [rbx + 0xd0]
test rcx, rcx
je 0x180018f64
mov rax, qword [0x18007ce08]
mov qword [rbx + 0xc8], rsi
test rax, rax
je 0x180018f57
dec dword [rax + 0x3fc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0xd0], rsi
mov rcx, qword [rbx + 0x2b8]
call fcn.18002daa0
mov rcx, qword [rbx + 0x1a0]
test rcx, rcx
je 0x180018fa2
mov rax, qword [0x18007ce08]
mov qword [rbx + 0x198], rsi
test rax, rax
je 0x180018f95
dec dword [rax + 0x3fc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x1a0], rsi
mov rcx, qword [rbx + 0x1e0]
test rcx, rcx
je 0x180018fd4
mov rax, qword [0x18007ce08]
mov qword [rbx + 0x1d8], rsi
test rax, rax
je 0x180018fc7
dec dword [rax + 0x3fc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x1e0], rsi
mov rcx, qword [rbx + 0x1f0]
test rcx, rcx
je 0x180019006
mov rax, qword [0x18007ce08]
mov qword [rbx + 0x1e8], rsi
test rax, rax
je 0x180018ff9
dec dword [rax + 0x3fc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x1f0], rsi
inc ebp
add r14, 8
cmp ebp, dword [rdi + 0x1ae0]
jne 0x180018ec2
mov ebp, esi
cmp dword [rdi + 0x2140], esi
jle 0x1800190c7
mov r14, rsi
nop dword [rax]
mov rax, qword [rdi + 0x2148]
movss xmm0, dword [r14 + rax]
comiss xmm0, xmm6
jb 0x1800190b5
comiss xmm8, xmm0
jbe 0x1800190b5
cmp byte [rdi + 0x1acf], sil
je 0x1800190b5
mov rbx, qword [0x18007ce08]
mov rcx, qword [rbx + 0x1cb0]
test rcx, rcx
je 0x180019083
mov qword [rbx + 0x1ca8], rsi
test rbx, rbx
je 0x180019076
dec dword [rbx + 0x3fc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x1cb0], rsi
mov rcx, qword [rbx + 0x1cc0]
test rcx, rcx
je 0x1800190b5
mov rax, qword [0x18007ce08]
mov qword [rbx + 0x1cb8], rsi
test rax, rax
je 0x1800190a8
dec dword [rax + 0x3fc]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x1cc0], rsi
inc ebp
add r14, 4
cmp ebp, dword [rdi + 0x2140]
jl 0x180019030
mov rax, qword [rdi + 0x1ce8]
movaps xmm8, xmmword [rsp + 0x30]
mov byte [rdi + 0x1acf], sil
test rax, rax
je 0x180019154
cmp byte [rax + 0x8f], sil
jne 0x180019154
mov rcx, qword [0x18007ce08]
mov eax, dword [rcx + 0x1af0]
sub eax, 1
js 0x18001914d
movsxd r9, eax
mov rax, qword [rcx + 0x1af8]
lea r10, [rax + r9*8]
nop dword [rax]
mov r8, qword [r10]
test r8, r8
je 0x180019143
cmp byte [r8 + 0x8f], sil
je 0x180019143
mov eax, dword [r8 + 0xc]
and eax, 0x40200
cmp eax, 0x40200
setne cl
bt dword [r8 + 0xc], 0x18
setae al
test al, cl
jne 0x18001929c
sub r10, 8
sub r9, 1
jns 0x180019110
xor ecx, ecx
call fcn.18001f290
mov ecx, dword [rdi + 0x1b14]
test ecx, ecx
jns 0x18001917a
mov eax, ecx
cdq
sub eax, edx
mov edx, esi
sar eax, 1
add eax, ecx
lea rcx, [rdi + 0x1b10]
test eax, eax
cmovg edx, eax
call fcn.180025cf0
mov dword [rdi + 0x1b10], esi
mov ecx, dword [rdi + 0x1cdc]
test ecx, ecx
jns 0x1800191a6
mov eax, ecx
cdq
sub eax, edx
mov edx, esi
sar eax, 1
add eax, ecx
lea rcx, [rdi + 0x1cd8]
test eax, eax
cmovg edx, eax
call fcn.180026180
lea rbx, [rdi + 0x1ca8]
mov dword [rdi + 0x1cd8], esi
mov ecx, dword [rbx + 4]
test ecx, ecx
jns 0x1800191d2
mov eax, ecx
cdq
sub eax, edx
mov edx, esi
sar eax, 1
add eax, ecx
mov rcx, rbx
test eax, eax
cmovg edx, eax
call fcn.180026220
mov dword [rbx], esi
mov r13d, 8
cmp dword [rbx + 4], esi
jne 0x1800191ea
mov edx, r13d
mov rcx, rbx
call fcn.180026220
movsxd rcx, dword [rbx]
xor edx, edx
mov rax, qword [rbx + 8]
mov dword [rax + rcx*4], esi
lea rcx, [rdi + 0x1cb8]
inc dword [rbx]
call fcn.180025a20
mov r9, qword [0x18007ce08]
mov r11, qword [rdi + 0x1ce8]
movsxd rbp, dword [r9 + 0x1cc8]
test ebp, ebp
je 0x18001931d
mov qword [rsp + 0xa0], r12
mov ebx, esi
mov qword [rsp + 0x60], r15
test r11, r11
je 0x1800192ce
test ebp, ebp
jle 0x1800192ce
mov r14, qword [r9 + 0x1cd0]
mov r15, rsi
add r14, r13
mov r12, rsi
mov rax, qword [r14]
test rax, rax
je 0x1800192bd
test dword [rax + 0xc], 0x1000000
jne 0x1800192bd
mov rdx, r15
cmp ebx, ebp
jge 0x1800192ce
mov rcx, qword [r9 + 0x1cd0]
add rcx, r13
add rcx, r12
mov r8, qword [rcx]
test r8, r8
je 0x18001928e
mov rax, qword [r11 + 0x390]
cmp qword [r8 + 0x390], rax
je 0x1800192bd
inc rdx
add rcx, 0x30
cmp rdx, rbp
jl 0x180019276
jmp 0x1800192d7
mov rcx, qword [r8 + 0x3a8]
test rcx, rcx
je 0x1800192b5
cmp byte [rcx + 0x8f], sil
jne 0x18001914f
mov rcx, r8
jmp 0x18001914f
inc ebx
inc r15
add r12, 0x30
add r14, 0x30
cmp ebx, ebp
jl 0x180019251
cmp ebx, dword [r9 + 0x1cc8]
jge 0x180019310
lea r14, [r9 + 0x1cc8]
mov ecx, dword [r14 + 4]
cmp ebx, ecx
jle 0x18001930d
test ecx, ecx
je 0x1800192f5
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
lea r13d, [rcx + rax]
cmp r13d, ebx
mov edx, ebx
mov rcx, r14
cmovg edx, r13d
call fcn.180026180
mov r9, qword [0x18007ce08]
mov dword [r14], ebx
mov r12, qword [rsp + 0xa0]
mov r15, qword [rsp + 0x60]
mov r14, qword [rsp + 0x68]
mov r13, qword [rsp + 0xa8]
mov rbp, qword [rsp + 0x98]
mov dword [r9 + 0x31c0], esi
cmp byte [r9 + 0x31bc], sil
je 0x180019400
mov ebx, dword [r9 + 0x1b78]
mov dword [r9 + 0x2058], 7
mov ecx, dword [r9 + 0xbc]
test ecx, ecx
js 0x180019373
call fcn.18001a570
test al, al
je 0x180019373
mov byte [r9 + 0x31bc], sil
movss xmm0, dword [r9 + 0x484]
ucomiss xmm0, xmm6
jp 0x180019395
jne 0x180019395
test ebx, ebx
je 0x180019395
mov dword [r9 + 0x31c0], ebx
mov byte [r9 + 0x31bc], sil
or dword [r9 + 0x1be0], 0x40
xor edx, edx
mov dword [r9 + 0x1c40], 0x3f19999a
call fcn.1800207f0
mov edx, ebx
lea rcx, str.HoveredId:_0x_08X
call fcn.1800374c0
lea rcx, str.Press_ESC_to_abort_picking.
call fcn.1800374c0
mov eax, 0x10
lea rdx, str.Click_to_break_in_debugger_
test ebx, ebx
mov ecx, 0x20
cmovne ecx, eax
mov rax, qword [0x18007ce08]
add rax, 0x166c
add rcx, rax
call fcn.1800375c0
call fcn.18001f170
mov r9, qword [0x18007ce08]
mov byte [rdi + 0x1acd], 1
lea rcx, str.DebugDefault
or dword [r9 + 0x1be0], 2
xor r8d, r8d
xor edx, edx
mov dword [r9 + 0x1c00], 0x43c80000
mov dword [r9 + 0x1c04], 0x43c80000
mov dword [r9 + 0x1be8], 4
call fcn.18001ccc0
movaps xmm6, xmmword [rsp + 0x50]
cmp dword [rdi + 0x3178], esi
jle 0x180019480
mov rbx, rsi
mov r8, qword [rdi + 0x3180]
cmp dword [r8 + rbx], 1
jne 0x180019472
movsxd rax, esi
lea rcx, [rax + rax*2]
lea rdx, [r8 + rcx*8]
mov rcx, rdi
call qword [r8 + rbx + 8]
inc esi
add rbx, 0x18
cmp esi, dword [rdi + 0x3178]
jl 0x180019451
add rsp, 0x70
pop rdi
pop rsi
pop rbx
ret