Function at 0x18004bd00
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rbx
push rdi
sub rsp, 0x58
mov rdi, qword [0x1800a9d08]
movaps xmmword [rsp + 0x40], xmm6
mov qword [rsp + 0x78], rbp
movaps xmmword [rsp + 0x30], xmm7
cmp byte [rdi + 0xcb], 0
movaps xmmword [rsp + 0x20], xmm8
je 0x18004bd39
test byte [rdi + 0xc], 2
jne 0x18004bd39
mov byte [rdi + 0xcb], 0
xor ebp, ebp
cmp byte [rdi + 0x3048], bpl
jne 0x18004bd93
mov rcx, qword [rdi + 0x20]
test rcx, rcx
je 0x18004bd8c
lea r8, [rsp + 0x70]
mov qword [rsp + 0x70], rbp
call fcn.180048360
mov rbx, rax
test rax, rax
je 0x18004bd8c
mov rdx, qword [rsp + 0x70]
mov rcx, rax
call fcn.180058730
mov rcx, qword [0x1800a9d08]
test rcx, rcx
je 0x18004bd83
dec dword [rcx + 0x3bc]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov byte [rdi + 0x3048], 1
movss xmm0, dword [rdi + 0x304c]
xorps xmm6, xmm6
comiss xmm0, xmm6
jbe 0x18004bdd2
subss xmm0, dword [rdi + 0x18]
comiss xmm0, xmm6
movss dword [rdi + 0x304c], xmm0
ja 0x18004bdd2
mov rcx, qword [rdi + 0x20]
test rcx, rcx
je 0x18004bdc5
call fcn.180058990
jmp 0x18004bdcc
mov byte [rdi + 0x3a4], 1
mov dword [rdi + 0x304c], ebp
inc dword [rdi + 0x1abc]
movss xmm0, dword [rdi + 0x18]
mov rax, qword [rdi + 0xa8]
mov byte [rdi + 0x1ac8], 1
mov dword [rdi + 0x3024], ebp
mov dword [rdi + 0x1b20], ebp
cvtps2pd xmm0, xmm0
addsd xmm0, qword [rdi + 0x1ab0]
movsd qword [rdi + 0x1ab0], xmm0
mov byte [rax], 1
mov rax, qword [0x1800a9d08]
mov rcx, qword [rax + 0xb8]
test rcx, rcx
jne 0x18004be2e
mov rax, qword [rax + 0xa8]
mov rcx, qword [rax + 0x48]
mov rcx, qword [rcx]
mov qword [rsp + 0x80], rsi
call fcn.1800528b0
movss xmm2, dword [rdi + 0x10]
movss xmm3, dword [rdi + 0x14]
mov qword [rdi + 0x19fc], rbp
movss dword [rdi + 0x1a04], xmm2
movss dword [rdi + 0x1a08], xmm3
mov eax, dword [rdi + 0x1608]
movss xmm0, dword [rdi + 0x160c]
movss xmm8, dword [0x180088970]
mov dword [rdi + 0x19f4], eax
ucomiss xmm0, dword [rdi + 0x19f8]
je 0x18004bf0c
movss xmm7, dword [0x180088c7c]
lea rsi, [rdi + 0x1a70]
mov qword [rsp + 0x50], r14
mov ebx, ebp
mov r14d, 0x200
movss dword [rdi + 0x19f8], xmm0
nop word [rax + rax]
movd xmm1, ebx
cvtdq2ps xmm1, xmm1
addss xmm1, xmm8
movaps xmm0, xmm1
subss xmm0, dword [rdi + 0x19f8]
divss xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_acosf
movaps xmm1, xmm7
divss xmm1, xmm0
cvttss2si edx, xmm1
cmp edx, 0xc
jge 0x18004bee7
mov edx, 0xc
jmp 0x18004beee
cmp edx, r14d
cmovg edx, r14d
mov ecx, 0xff
movzx eax, dl
cmp edx, ecx
cmovl ecx, eax
inc ebx
mov byte [rsi], cl
inc rsi
cmp ebx, 0x40
jl 0x18004beb0
mov r14, qword [rsp + 0x50]
mov eax, ebp
mov dword [rdi + 0x1a0c], ebp
cmp byte [rdi + 0x1604], bpl
je 0x18004bf2c
mov dword [rdi + 0x1a0c], 1
mov eax, 1
cmp byte [rdi + 0x1605], bpl
je 0x18004bf3e
or eax, 2
mov dword [rdi + 0x1a0c], eax
test byte [rdi + 0xc], 8
je 0x18004bf4d
or eax, 4
mov dword [rdi + 0x1a0c], eax
lea rcx, [rdi + 0x1e98]
call fcn.180060590
mov rdx, qword [rdi + 0xa8]
lea rcx, [rdi + 0x1e98]
mov rdx, qword [rdx + 8]
call fcn.180060b90
mov rax, qword [rdi + 0x1ed0]
lea rcx, [rdi + 0x1e98]
xor r9d, r9d
movss xmm1, dword [rax + 0x28]
movss xmm0, dword [rax + 0x24]
movss xmm2, dword [rax + 0x20]
unpcklps xmm0, xmm1
movss xmm1, dword [rax + 0x1c]
movq r8, xmm0
unpcklps xmm1, xmm2
movq rdx, xmm1
call fcn.180060a60
lea rcx, [rdi + 0x1f40]
call fcn.180060590
mov rdx, qword [rdi + 0xa8]
lea rcx, [rdi + 0x1f40]
mov rdx, qword [rdx + 8]
call fcn.180060b90
mov rax, qword [rdi + 0x1f78]
lea rcx, [rdi + 0x1f40]
xor r9d, r9d
movss xmm1, dword [rax + 0x28]
movss xmm0, dword [rax + 0x24]
movss xmm2, dword [rax + 0x20]
unpcklps xmm0, xmm1
movss xmm1, dword [rax + 0x1c]
movq r8, xmm0
unpcklps xmm1, xmm2
movq rdx, xmm1
call fcn.180060a60
mov byte [rdi + 0x1e38], bpl
mov qword [rdi + 0x1e40], rbp
mov qword [rdi + 0x1e4c], rbp
mov dword [rdi + 0x1e48], ebp
mov qword [rdi + 0x1e64], rbp
mov qword [rdi + 0x1e5c], rbp
mov qword [rdi + 0x1e54], rbp
cmp byte [rdi + 0x1fec], bpl
je 0x18004c072
mov eax, dword [rdi + 0x200c]
cmp eax, dword [rdi + 0x1b70]
jne 0x18004c072
mov rcx, qword [0x1800a9d08]
cmp dword [rcx + 0x1b70], eax
jne 0x18004c063
mov dword [rcx + 0x1b74], eax
cmp dword [rcx + 0x1bb0], eax
jne 0x18004c072
mov byte [rcx + 0x1bb4], 1
cmp dword [rdi + 0x1b64], ebp
jne 0x18004c082
mov dword [rdi + 0x1b68], ebp
jmp 0x18004c094
mov eax, dword [rdi + 0x1b5c]
test eax, eax
je 0x18004c09a
cmp dword [rdi + 0x1b70], eax
jne 0x18004c09a
mov dword [rdi + 0x1b6c], ebp
mov eax, dword [rdi + 0x1b5c]
test eax, eax
je 0x18004c0d4
movss xmm1, dword [rdi + 0x18]
movaps xmm0, xmm1
addss xmm0, dword [rdi + 0x1b68]
movss dword [rdi + 0x1b68], xmm0
cmp dword [rdi + 0x1b70], eax
je 0x18004c0d4
addss xmm1, dword [rdi + 0x1b6c]
movss dword [rdi + 0x1b6c], xmm1
mov dword [rdi + 0x1b64], eax
mov eax, dword [rdi + 0x1b70]
mov dword [rdi + 0x1b5c], ebp
mov byte [rdi + 0x1b60], bpl
cmp dword [rdi + 0x1b74], eax
je 0x18004c106
cmp dword [rdi + 0x1bb0], eax
jne 0x18004c106
test eax, eax
je 0x18004c106
call fcn.18004a860
mov ecx, dword [rdi + 0x1b70]
test ecx, ecx
je 0x18004c125
movss xmm0, dword [rdi + 0x18]
addss xmm0, dword [rdi + 0x1b78]
movss dword [rdi + 0x1b78], xmm0
mov rax, qword [rdi + 0x1ba0]
movss xmm0, dword [rdi + 0x18]
addss xmm0, dword [rdi + 0x1bc4]
mov qword [rdi + 0x1bb8], rax
movzx eax, byte [rdi + 0x1b7f]
mov byte [rdi + 0x1bb5], al
mov eax, dword [rdi + 0x2fe0]
movss dword [rdi + 0x1bc4], xmm0
mov dword [rdi + 0x1bb0], ecx
mov dword [rdi + 0x1b74], ebp
mov byte [rdi + 0x1b80], bpl
mov byte [rdi + 0x1bb4], bpl
mov byte [rdi + 0x1b7c], bpl
test eax, eax
je 0x18004c18a
cmp ecx, eax
je 0x18004c18a
mov dword [rdi + 0x2fe0], ebp
test ecx, ecx
jne 0x18004c19c
mov qword [rdi + 0x1b84], rbp
mov qword [rdi + 0x1b90], rbp
mov eax, dword [rdi + 0x205c]
lea rcx, [rdi + 0xca0]
lea rdx, [rdi + 0x4a0]
mov dword [rdi + 0x2060], eax
mov r8d, 0x800
mov qword [rdi + 0x2058], 0x7f7fffff
mov byte [rdi + 0x1fed], bpl
call sub.VCRUNTIME140.dll_memcpy
movss xmm1, dword [0x180088e34]
lea rcx, [rdi + 0x14d]
lea rax, [rdi + 0x4a4]
mov r8d, 0x80
nop
cmp byte [rcx - 1], bpl
je 0x18004c20c
movss xmm0, dword [rax - 4]
comiss xmm0, xmm6
jae 0x18004c205
movaps xmm0, xmm6
jmp 0x18004c20f
addss xmm0, dword [rdi + 0x18]
jmp 0x18004c20f
movaps xmm0, xmm1
movss dword [rax - 4], xmm0
cmp byte [rcx], bpl
je 0x18004c22e
movss xmm0, dword [rax]
comiss xmm0, xmm6
jae 0x18004c227
movaps xmm0, xmm6
jmp 0x18004c231
addss xmm0, dword [rdi + 0x18]
jmp 0x18004c231
movaps xmm0, xmm1
movss dword [rax], xmm0
cmp byte [rcx + 1], bpl
je 0x18004c251
movss xmm0, dword [rax + 4]
comiss xmm0, xmm6
jae 0x18004c24a
movaps xmm0, xmm6
jmp 0x18004c254
addss xmm0, dword [rdi + 0x18]
jmp 0x18004c254
movaps xmm0, xmm1
movss dword [rax + 4], xmm0
cmp byte [rcx + 2], bpl
je 0x18004c275
movss xmm0, dword [rax + 8]
comiss xmm0, xmm6
jae 0x18004c26e
movaps xmm0, xmm6
jmp 0x18004c278
addss xmm0, dword [rdi + 0x18]
jmp 0x18004c278
movaps xmm0, xmm1
movss dword [rax + 8], xmm0
add rcx, 4
add rax, 0x10
sub r8, 1
jne 0x18004c1f0
call fcn.180055ce0
call fcn.18004b120
movsxd rax, dword [rdi + 0x32ac]
movss xmm1, dword [rdi + 0x18]
movss xmm7, dword [0x180088dfc]
movaps xmm0, xmm1
subss xmm0, dword [rdi + rax*4 + 0x30cc]
addss xmm0, dword [rdi + 0x32b0]
movss dword [rdi + 0x32b0], xmm0
movss dword [rdi + rax*4 + 0x30cc], xmm1
mov eax, 0x88888889
mov ecx, dword [rdi + 0x32ac]
movss xmm1, dword [rdi + 0x32b0]
inc ecx
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x78
sub ecx, eax
comiss xmm1, xmm6
mov dword [rdi + 0x32ac], ecx
jbe 0x18004c313
movss xmm0, dword [0x180088d48]
divss xmm0, xmm1
jmp 0x18004c316
movaps xmm0, xmm7
movss dword [rdi + 0x3a8], xmm0
call fcn.18004b890
mov r9, qword [0x1800a9d08]
mov r10, qword [r9 + 0x1b40]
test r10, r10
je 0x18004c473
mov ecx, dword [r9 + 0x1b70]
mov dword [r9 + 0x1b74], ecx
cmp dword [r9 + 0x1bb0], ecx
jne 0x18004c359
mov byte [r9 + 0x1bb4], 1
mov r10, qword [r10 + 0x368]
cmp byte [r9 + 0x138], bpl
je 0x18004c421
lea rax, [r9 + 0x130]
mov rdx, rax
test rax, rax
jne 0x18004c383
lea rdx, [r9 + 0x130]
movss xmm0, dword [rdx]
movss xmm1, dword [0x180088ee0]
comiss xmm0, xmm1
movss xmm2, dword [rdx + 4]
jb 0x18004c421
comiss xmm2, xmm1
jb 0x18004c421
movss xmm0, dword [rax]
subss xmm0, dword [r9 + 0x1b98]
movss xmm1, dword [rax + 4]
subss xmm1, dword [r9 + 0x1b9c]
ucomiss xmm0, dword [r10 + 0x10]
movss dword [rsp + 0x70], xmm0
movss dword [rsp + 0x74], xmm1
jne 0x18004c3d7
ucomiss xmm1, dword [r10 + 0x14]
je 0x18004c409
test dword [r10 + 0xc], 0x100
jne 0x18004c3f6
comiss xmm6, dword [r9 + 0x304c]
jb 0x18004c3f6
mov eax, dword [r9 + 0x1c]
mov dword [r9 + 0x304c], eax
mov r8d, 1
lea rdx, [rsp + 0x70]
mov rcx, r10
call fcn.180052e40
mov rcx, qword [r9 + 0x1b40]
call fcn.180052390
mov r9, qword [0x1800a9d08]
jmp 0x18004c4b1
test ecx, ecx
setne al
mov byte [r9 + 0x1b7c], al
test ecx, ecx
je 0x18004c440
mov dword [r9 + 0x1b78], ebp
mov word [r9 + 0x1b7e], bp
mov dword [r9 + 0x1b70], ebp
mov byte [r9 + 0x1b7d], bpl
mov qword [r9 + 0x1ba0], rbp
mov byte [r9 + 0x1b80], bpl
mov qword [r9 + 0x1b84], rbp
mov qword [r9 + 0x1b90], rbp
mov qword [r9 + 0x1b40], rbp
jmp 0x18004c4b1
mov rcx, qword [r9 + 0x1ba0]
test rcx, rcx
je 0x18004c4b1
mov eax, dword [r9 + 0x1b70]
cmp dword [rcx + 0x4c], eax
jne 0x18004c4b1
mov dword [r9 + 0x1b74], eax
cmp dword [r9 + 0x1bb0], eax
jne 0x18004c4a3
mov byte [r9 + 0x1bb4], 1
cmp byte [r9 + 0x138], bpl
jne 0x18004c4b1
call fcn.18004a860
mov eax, dword [r9 + 0x1cb0]
sub eax, 1
js 0x18004c4f1
mov r8, qword [r9 + 0x1cb8]
movsxd rdx, eax
add r8, 8
lea rcx, [rdx + rdx*2]
shl rcx, 4
add r8, rcx
mov rax, qword [r8]
test rax, rax
je 0x18004c4e7
test dword [rax + 0xc], 0x8000000
jne 0x18004c503
sub r8, 0x30
sub rdx, 1
jns 0x18004c4d6
cmp qword [rdi + 0x1de8], rbp
je 0x18004c51f
comiss xmm6, dword [rdi + 0x1e04]
jae 0x18004c51f
movss xmm1, dword [rdi + 0x18]
mulss xmm1, dword [0x180088c74]
addss xmm1, dword [rdi + 0x1e90]
minss xmm1, xmm8
jmp 0x18004c53c
movss xmm0, dword [rdi + 0x18]
mulss xmm0, dword [0x180088c90]
movss xmm1, dword [rdi + 0x1e90]
subss xmm1, xmm0
maxss xmm1, xmm6
movss dword [rdi + 0x1e90], xmm1
mov dword [rdi + 0x1fe8], ebp
mov qword [rdi + 0x32b8], 0xffffffffffffffff
mov dword [rdi + 0x32b4], 0xffffffff
mov dword [rdi + 0x3038], 0x3f800000
mov dword [rdi + 0x303c], 0x3f800000
call fcn.18004b500
mov r9, qword [rdi + 0x1cd0]
mov r10, qword [0x1800a9d08]
movaps xmm8, xmmword [rsp + 0x20]
test r9, r9
je 0x18004c5bf
cmp byte [r9 + 0x7e], bpl
je 0x18004c5bf
test dword [r9 + 0xc], 0x40000
jne 0x18004c5bf
cmp byte [rdi + 0x148], bpl
jne 0x18004c5bf
mov ecx, dword [r10 + 0x3c]
test ecx, ecx
js 0x18004c5bf
call fcn.18004d670
test al, al
je 0x18004c5bf
mov al, 1
jmp 0x18004c5c1
xor al, al
mov byte [rdi + 0x1e30], al
cmp dword [rdi + 0x1b70], ebp
jne 0x18004c624
test al, al
je 0x18004c624
mov qword [rdi + 0x1e18], r9
mov dword [rdi + 0x1e28], 0x7fffffff
cmp dword [rdi + 0x1cd8], ebp
je 0x18004c613
mov ecx, dword [rdi + 0x1d20]
cmp ecx, 0x7fffffff
je 0x18004c613
cmp byte [rdi + 0x149], bpl
mov eax, 2
cmovne eax, ebp
add eax, ecx
mov dword [rdi + 0x1e2c], eax
jmp 0x18004c624
movzx eax, byte [rdi + 0x149]
neg al
sbb ecx, ecx
mov dword [rdi + 0x1e2c], ecx
mov r8, qword [rdi + 0x1e18]
mov qword [rdi + 0x1e10], rbp
mov dword [rdi + 0x1e24], 0x7fffffff
mov dword [rdi + 0x1e20], 0x7fffffff
test r8, r8
je 0x18004c6b9
mov eax, dword [rdi + 0x1e28]
mov qword [rdi + 0x1e10], r8
cmp eax, 0x7fffffff
je 0x18004c678
mov ecx, dword [r8 + 0x1b0]
cmp ecx, 0xffffffff
je 0x18004c678
inc ecx
add eax, ecx
cdq
idiv ecx
mov dword [rdi + 0x1e20], edx
mov eax, dword [rdi + 0x1e2c]
cmp eax, 0x7fffffff
je 0x18004c69e
mov ecx, dword [r8 + 0x1b4]
cmp ecx, 0xffffffff
je 0x18004c69e
inc ecx
add eax, ecx
cdq
idiv ecx
mov dword [rdi + 0x1e24], edx
mov qword [rdi + 0x1e18], rbp
mov dword [rdi + 0x1e2c], 0x7fffffff
mov dword [rdi + 0x1e28], 0x7fffffff
movss xmm0, dword [rdi + 0xd0]
comiss xmm0, xmm6
mov dword [rdi + 0x1d20], 0x7fffffff
jb 0x18004c6e0
movsd xmm7, qword [rdi + 0x1ab0]
cvtpd2ps xmm7, xmm7
subss xmm7, xmm0
mov ebx, ebp
cmp dword [rdi + 0x1ad0], ebp
je 0x18004c744
mov rsi, rbp
nop dword [rax]
mov rax, qword [rdi + 0x1ad8]
mov rcx, qword [rsi + rax]
movzx eax, byte [rcx + 0x7e]
mov byte [rcx + 0x7f], al
mov word [rcx + 0x8a], bp
mov byte [rcx + 0x7e], bpl
mov byte [rcx + 0x80], bpl
test al, al
jne 0x18004c72f
cmp byte [rcx + 0x3c8], bpl
jne 0x18004c72f
comiss xmm7, dword [rcx + 0x27c]
jbe 0x18004c72f
call fcn.18004a610
inc ebx
add rsi, 8
cmp ebx, dword [rdi + 0x1ad0]
jne 0x18004c6f0
mov r10, qword [0x1800a9d08]
mov rax, qword [rdi + 0x1cd0]
movaps xmm7, xmmword [rsp + 0x30]
mov rsi, qword [rsp + 0x80]
test rax, rax
je 0x18004c7c1
cmp byte [rax + 0x7f], bpl
jne 0x18004c7c1
mov eax, dword [r10 + 0x1ae0]
sub eax, 1
js 0x18004c7ba
movsxd r9, eax
mov rax, qword [r10 + 0x1ae8]
lea r10, [rax + r9*8]
nop dword [rax]
mov r8, qword [r10]
test r8, r8
je 0x18004c7b0
cmp byte [r8 + 0x7f], bpl
je 0x18004c7b0
mov eax, dword [r8 + 0xc]
and eax, 0x40200
cmp eax, 0x40200
setne cl
bt dword [r8 + 0xc], 0x18
setae al
test al, cl
jne 0x18004c942
sub r10, 8
sub r9, 1
jns 0x18004c780
xor ecx, ecx
call fcn.180052390
mov ecx, dword [rdi + 0x1b04]
test ecx, ecx
jns 0x18004c7e7
mov eax, ecx
cdq
sub eax, edx
mov edx, ebp
sar eax, 1
add eax, ecx
lea rcx, [rdi + 0x1b00]
test eax, eax
cmovg edx, eax
call fcn.1800425f0
mov dword [rdi + 0x1b00], ebp
mov ecx, dword [rdi + 0x1cc4]
test ecx, ecx
jns 0x18004c813
mov eax, ecx
cdq
sub eax, edx
mov edx, ebp
sar eax, 1
add eax, ecx
lea rcx, [rdi + 0x1cc0]
test eax, eax
cmovg edx, eax
call fcn.180059b40
mov dword [rdi + 0x1cc0], ebp
xor edx, edx
mov rcx, qword [rdi + 0x1cd0]
call fcn.1800542d0
mov r8, qword [0x1800a9d08]
cmp byte [r8 + 0x30c4], 0
mov dword [r8 + 0x30c8], ebp
mov rbp, qword [rsp + 0x78]
je 0x18004c8f6
mov ebx, dword [r8 + 0x1b64]
mov dword [r8 + 0x1fe8], 7
mov ecx, dword [r8 + 0x74]
test ecx, ecx
js 0x18004c873
call fcn.18004d670
test al, al
je 0x18004c873
mov byte [r8 + 0x30c4], 0
movss xmm0, dword [r8 + 0x43c]
ucomiss xmm0, xmm6
jne 0x18004c894
test ebx, ebx
je 0x18004c894
mov dword [r8 + 0x30c8], ebx
mov byte [r8 + 0x30c4], 0
or dword [r8 + 0x1bc8], 0x40
xor edx, edx
mov dword [r8 + 0x1c20], 0x3f19999a
call fcn.180053ed0
mov edx, ebx
lea rcx, str.HoveredId:_0x_08X
call fcn.18006a150
lea rcx, str.Press_ESC_to_abort_picking.
call fcn.18006a150
mov eax, 0x1620
lea rdx, str.Click_to_break_in_debugger_
test ebx, ebx
mov ecx, 0x1610
cmove ecx, eax
add rcx, qword [0x1800a9d08]
call fcn.18006a250
call fcn.1800521b0
mov r8, qword [0x1800a9d08]
mov byte [rdi + 0x1ac9], 1
lea rcx, str.DebugDefault
or dword [r8 + 0x1bc8], 2
xor edx, edx
mov dword [r8 + 0x1be8], 0x43c80000
mov dword [r8 + 0x1bec], 0x43c80000
mov dword [r8 + 0x1bd0], 4
xor r8d, r8d
movaps xmm6, xmmword [rsp + 0x40]
add rsp, 0x58
pop rdi
pop rbx
jmp fcn.180050070
mov rax, qword [r8 + 0x380]
test rax, rax
cmovne r8, rax
mov rcx, r8
jmp 0x18004c7bc