Function at 0x432ee0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
mov eax, 0x2e68
call fcn.0043a220
mov eax, dword [0x443040]
xor eax, esp
mov dword [esp + 0x2e64], eax
mov eax, dword [0x44ebe4]
push esi
push edi
cmp eax, dword [0x44ebe8]
je 0x43455d
movss xmm0, dword [0x440664]
xor edi, edi
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss dword [esp + 0x5c], xmm0
mov dword [0x44e754], 0
mov dword [esp + 0x78], edi
mov eax, edi
shl eax, 4
add eax, dword [0x44ebe4]
movups xmm0, xmmword [eax]
movd edi, xmm0
movaps xmmword [esp + 0x40], xmm0
mov dword [esp + 0x20], edi
cmp edi, dword [0x44e760]
jne 0x432f63
cmp dword [esp + 0x44], 0
je 0x43453e
push 0
push 4
lea eax, [esp + 0x1d0]
push eax
mov eax, dword [0x44e768]
add eax, 0x11d7f34
push eax
push dword [0x44e6ec]
call esi
movzx eax, byte [0x44e6f9]
mov esi, dword [esp + 0x1c8]
movss xmm1, dword [0x4432e4]
add esi, 0x58
movd xmm0, eax
cvtdq2ps xmm0, xmm0
comiss xmm1, xmm0
jb 0x432ff4
lea eax, [esp + 0x1b0]
movss dword [esp + 0x208], xmm1
push eax
push 0x40
push 4
push esi
push dword [0x44e6ec]
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
push 0
push 4
lea eax, [esp + 0x210]
push eax
mov eax, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push esi
push dword [0x44e6ec]
call eax
lea eax, [esp + 0x1b0]
push eax
push dword [esp + 0x1b4]
jmp 0x433041
lea eax, [esp + 0x1b4]
mov dword [esp + 0x1f8], 0x3b23d70a
push eax
push 0x40
push 4
push esi
push dword [0x44e6ec]
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
push 0
push 4
lea eax, [esp + 0x200]
push eax
mov eax, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push esi
push dword [0x44e6ec]
call eax
lea eax, [esp + 0x1b4]
push eax
push dword [esp + 0x1b8]
push 4
push esi
push dword [0x44e6ec]
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov esi, dword [0x44e760]
add esi, 0xdcd0
cmp byte [0x44e6fe], 0
je 0x4330b9
movss xmm0, dword [0x44e6f4]
lea eax, [esp + 0x1b8]
push eax
push 0x40
push 4
push esi
push dword [0x44e6ec]
movss dword [esp + 0x204], xmm0
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
push 0
push 4
lea eax, [esp + 0x1f8]
push eax
push esi
push dword [0x44e6ec]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea eax, [esp + 0x1b8]
push eax
push dword [esp + 0x1bc]
jmp 0x433105
lea eax, [esp + 0x1bc]
mov dword [esp + 0x1e8], 0
push eax
push 0x40
push 4
push esi
push dword [0x44e6ec]
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
push 0
push 4
lea eax, [esp + 0x1f0]
push eax
push esi
push dword [0x44e6ec]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea eax, [esp + 0x1bc]
push eax
push dword [esp + 0x1c0]
push 4
push esi
push dword [0x44e6ec]
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov esi, dword [0x44e768]
add esi, 0x440a49
cmp byte [0x44e5ae], 0
je 0x433177
lea eax, [esp + 0x1c0]
mov dword [esp + 0x1e4], 0xe1dc8b8b
push eax
push 0x40
push 4
push esi
push dword [0x44e6ec]
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
push 0
push 4
lea eax, [esp + 0x1ec]
push eax
push esi
push dword [0x44e6ec]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea eax, [esp + 0x1c0]
push eax
push dword [esp + 0x1c4]
jmp 0x4331c3
lea eax, [esp + 0x1c4]
mov dword [esp + 0x1e0], 0xe1dc8b8d
push eax
push 0x40
push 4
push esi
push dword [0x44e6ec]
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
push 0
push 4
lea eax, [esp + 0x1e8]
push eax
push esi
push dword [0x44e6ec]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea eax, [esp + 0x1c4]
push eax
push dword [esp + 0x1c8]
push 4
push esi
push dword [0x44e6ec]
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea eax, [esp + 0x1cc]
push 0
push 4
push eax
lea eax, [edi + 0x2df4]
push eax
push dword [0x44e6ec]
call esi
movss xmm0, dword [esp + 0x1cc]
mov eax, edi
mov edx, dword [esp + 0x44]
or eax, edx
mov ecx, dword [esp + 0x48]
movss dword [esp + 0x3c], xmm0
je 0x4337e7
cmp ecx, 0x20
je 0x433222
cmp ecx, 0x21
jne 0x4337e7
comiss xmm0, dword [0x4405a0]
jb 0x4337e7
movss xmm1, dword [0x440634]
comiss xmm1, xmm0
jb 0x4337e7
push 0
push 4
lea eax, [esp + 0x220]
push eax
mov eax, dword [0x44e768]
add eax, 0xf57fb4
push eax
push dword [0x44e6ec]
call esi
push 0
push 4
lea eax, [esp + 0x21c]
push eax
mov eax, dword [esp + 0x224]
add eax, 0xfe8
push eax
push dword [0x44e6ec]
call esi
push 0
push 0xc
lea eax, [esp + 0x23c]
push eax
mov eax, dword [esp + 0x220]
add eax, 0xe38
push eax
push dword [0x44e6ec]
call esi
push 0
push 0xc
lea eax, [esp + 0x90]
push eax
lea eax, [edi + 0xe38]
push eax
push dword [0x44e6ec]
call esi
movss xmm1, dword [esp + 0x8c]
movss xmm2, dword [esp + 0x88]
subss xmm2, dword [esp + 0x234]
subss xmm1, dword [esp + 0x238]
movq xmm0, qword [esp + 0x88]
movq qword [0x44ebb0], xmm0
movss xmm0, dword [esp + 0x90]
subss xmm0, dword [esp + 0x23c]
mov eax, dword [esp + 0x90]
movss dword [0x44ebd8], xmm2
movss dword [0x44ebdc], xmm1
mulss xmm2, xmm2
mov dword [0x44ebb8], eax
mulss xmm1, xmm1
movss dword [0x44ebe0], xmm0
mulss xmm0, xmm0
addss xmm2, xmm1
xorps xmm1, xmm1
addss xmm2, xmm0
cvtps2pd xmm0, xmm2
ucomisd xmm1, xmm0
ja 0x43334d
sqrtsd xmm0, xmm0
jmp 0x433352
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
cvtsd2ss xmm0, xmm0
push 6
mov edx, edi
lea ecx, [esp + 0x168]
movss dword [esp + 0x18], xmm0
call fcn.00432140
mov eax, dword [0x44e710]
add esp, 4
sub eax, 0
je 0x433389
sub eax, 1
jne 0x433394
mov eax, 3
mov dword [esp + 0x74], eax
jmp 0x433398
mov eax, 6
mov dword [esp + 0x74], eax
jmp 0x433398
mov eax, dword [esp + 0x74]
push eax
mov edx, edi
lea ecx, [esp + 0x174]
call fcn.00432140
movq xmm0, qword [esp + 0x174]
sub esp, 8
mov eax, dword [esp + 0x184]
mov ecx, esp
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
mov ecx, 0x44ebcc
call fcn.00432320
movq xmm0, qword [0x44ebb0]
mov ecx, esp
mov eax, dword [0x44ebb8]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
mov ecx, 0x44ebc0
call fcn.00432320
movq xmm0, qword [esp + 0x170]
mov ecx, esp
mov eax, dword [esp + 0x178]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
mov ecx, 0x44ebf0
call fcn.00432320
add esp, 0xc
test al, al
je 0x4337df
movss xmm0, dword [0x44ebc4]
subss xmm0, dword [0x44ebf4]
push 0xff
push 0
cvttss2si eax, xmm0
mov dword [esp + 0x24], eax
cdq
sub eax, edx
mov esi, eax
lea eax, [esp + 0x270]
push eax
sar esi, 1
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [0x4432cc]
add esp, 0xc
movss xmm1, dword [esp + 0x14]
comiss xmm0, xmm1
jb 0x4336fa
cmp byte [0x44e6e8], 0
je 0x433532
mov dword [esp + 0x120], 0x7a343a90
lea eax, [esp + 0x60]
mov dword [esp + 0x124], 0x225b9c02
sub esp, 8
mov dword [esp + 0x130], 0x5cbaa986
mov dword [esp + 0x134], 0xe334556
movaps xmm1, xmmword [esp + 0x128]
movaps xmmword [esp + 0x68], xmm1
mov dword [esp + 0x118], 0x1c1a0ab5
mov dword [esp + 0x11c], 0x225b9c6f
mov dword [esp + 0x120], 0x5cbaa986
mov dword [esp + 0x124], 0xe334556
movaps xmm0, xmmword [esp + 0x118]
xorps xmm0, xmm1
movaps xmmword [esp + 0x68], xmm0
movss xmm0, dword [esp + 0x1c]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push eax
lea eax, [esp + 0x274]
push eax
call fcn.004135e0
cvttss2si edx, dword [0x44ebc4]
lea eax, [esp + 0x278]
push eax
push 0x44d938
cvttss2si ecx, dword [0x44ebc0]
call fcn.0042e530
add esp, 0x18
cmp byte [0x44e6ff], 0
je 0x43357a
movd xmm3, dword [esp + 0x1c]
mov eax, esi
movss xmm0, dword [0x44ebc0]
mov ecx, 0x4432d4
movss xmm1, dword [0x44ebf4]
cdq
sub eax, edx
movd xmm4, esi
sar eax, 1
cvtdq2ps xmm4, xmm4
movd xmm2, eax
cvtdq2ps xmm2, xmm2
cvtdq2ps xmm3, xmm3
subss xmm0, xmm2
movaps xmm2, xmm4
call fcn.0042e920
cmp byte [0x44e6fb], 0
je 0x4335be
movd xmm1, esi
cvtdq2ps xmm1, xmm1
movss xmm0, dword [0x44ebc0]
divss xmm1, dword [0x4405c0]
movd xmm3, dword [esp + 0x1c]
cvttss2si edx, dword [0x44ebc4]
movss xmm2, dword [esp + 0x3c]
subss xmm0, xmm1
cvtdq2ps xmm3, xmm3
cvttss2si ecx, xmm0
call fcn.00432930
cmp byte [0x44e751], 0
je 0x4336f4
push 0
push 4
lea eax, [esp + 0x218]
push eax
lea eax, [edi + 0x2f88]
push eax
push dword [0x44e6ec]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov esi, dword [esp + 0x210]
test esi, esi
je 0x4336f4
push 0xff
lea eax, [esp + 0x36c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [esp + 0x19c], 0
xorps xmm0, xmm0
lea ecx, [esp + 0x194]
mov edx, esi
movq qword [esp + 0x194], xmm0
call fcn.0042ec60
push dword [esp + 0x194]
lea eax, [esp + 0x64]
mov dword [esp + 0x104], 0x1c1a7990
mov dword [esp + 0x108], 0x225b9c6f
mov dword [esp + 0x10c], 0x5cbaa986
mov dword [esp + 0x110], 0xe334556
movaps xmm1, xmmword [esp + 0x104]
push eax
movaps xmmword [esp + 0x68], xmm1
lea eax, [esp + 0x370]
mov dword [esp + 0xf8], 0x1c1a0ab5
mov dword [esp + 0xfc], 0x225b9c6f
mov dword [esp + 0x100], 0x5cbaa986
mov dword [esp + 0x104], 0xe334556
xorps xmm1, xmmword [esp + 0xf8]
push eax
movaps xmmword [esp + 0x6c], xmm1
call fcn.00438820
movss xmm0, dword [0x44ebc4]
lea eax, [esp + 0x374]
addss xmm0, dword [0x440610]
cvttss2si ecx, dword [0x44ebc0]
add esp, 0xc
push eax
push 0x44d938
cvttss2si edx, xmm0
call fcn.0042e530
add esp, 8
movss xmm1, dword [esp + 0x14]
movss xmm0, dword [0x4432b8]
comiss xmm0, xmm1
jb 0x4337df
mov eax, dword [0x44ebbc]
movss xmm2, dword [0x44ebcc]
movss xmm1, dword [0x44ebd0]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
mov eax, dword [0x44e76c]
cvtdq2ps xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
cmp byte [0x44e6fd], 0
subss xmm2, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm2, xmm2
subss xmm1, xmm0
mulss xmm1, xmm1
addss xmm1, xmm2
cvtps2pd xmm0, xmm1
xorps xmm1, xmm1
je 0x4337a9
ucomisd xmm1, xmm0
ja 0x43376c
sqrtsd xmm0, xmm0
jmp 0x433771
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
mov ecx, dword [esp + 0x48]
xorps xmm1, xmm1
mov edx, dword [esp + 0x44]
cvtsd2ss xmm1, xmm0
movd xmm0, dword [0x44d764]
cvtdq2ps xmm0, xmm0
comiss xmm0, xmm1
jbe 0x4337e7
movss xmm0, dword [esp + 0x5c]
comiss xmm0, xmm1
jbe 0x4337e7
movss dword [esp + 0x5c], xmm1
mov dword [0x44e754], edi
jmp 0x4337e7
ucomisd xmm1, xmm0
ja 0x4337b5
sqrtsd xmm0, xmm0
jmp 0x4337ba
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
movss xmm1, dword [esp + 0x5c]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x44]
cvtsd2ss xmm0, xmm0
comiss xmm1, xmm0
jbe 0x4337e7
movss dword [esp + 0x5c], xmm0
mov dword [0x44e754], edi
jmp 0x4337e7
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x44]
cmp byte [0x44e753], 0
je 0x433c06
mov eax, edi
or eax, edx
je 0x433c06
cmp ecx, 0x20001
je 0x433812
cmp ecx, 0x20000
jne 0x433c06
push 0
push 0xc
lea eax, [esp + 0x160]
push eax
lea esi, [edi + 0xe38]
push esi
push dword [0x44e6ec]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movq xmm0, qword [esp + 0x158]
lea eax, [esp + 0x20c]
mov edi, dword [esp + 0x160]
push 0
push 4
push eax
mov eax, dword [0x44e768]
add eax, 0xf57fb4
movq qword [esp + 0x6c], xmm0
push eax
push dword [0x44e6ec]
movq qword [esp + 0xb4], xmm0
mov dword [esp + 0xbc], edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 0
push 4
lea eax, [esp + 0x20c]
push eax
mov eax, dword [esp + 0x218]
add eax, 0xfe8
push eax
push dword [0x44e6ec]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 0
push 0xc
lea eax, [esp + 0x248]
push eax
mov eax, dword [esp + 0x210]
add eax, 0xe38
push eax
push dword [0x44e6ec]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 0
push 0xc
lea eax, [esp + 0x9c]
push eax
push esi
push dword [0x44e6ec]
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
call esi
movq xmm0, qword [esp + 0x94]
xorps xmm3, xmm3
movq qword [0x44ebb0], xmm0
sub esp, 0xc
movss xmm0, dword [esp + 0xa0]
mov ecx, esp
subss xmm0, dword [esp + 0x24c]
movss xmm2, dword [esp + 0xac]
movss xmm1, dword [esp + 0xb0]
addss xmm2, xmm3
addss xmm1, dword [0x4405a8]
mov eax, dword [esp + 0xa8]
movss dword [0x44ebd8], xmm0
movss xmm0, dword [esp + 0xa4]
subss xmm0, dword [esp + 0x250]
unpcklps xmm2, xmm1
mov dword [0x44ebb8], eax
movq qword [ecx], xmm2
movss dword [0x44ebdc], xmm0
movss xmm0, dword [esp + 0xa8]
subss xmm0, dword [esp + 0x254]
movss dword [0x44ebe0], xmm0
movss xmm0, dword [esp + 0xb4]
addss xmm0, xmm3
movss dword [esp + 0x190], xmm0
mov eax, dword [esp + 0x190]
mov dword [ecx + 8], eax
lea ecx, [esp + 0x268]
call fcn.00432320
movq xmm0, qword [esp + 0x6c]
mov ecx, esp
mov byte [esp + 0x27], al
movq qword [ecx], xmm0
mov dword [ecx + 8], edi
lea ecx, [esp + 0x228]
call fcn.00432320
mov cl, byte [esp + 0x27]
add esp, 0xc
or cl, al
mov edi, dword [esp + 0x20]
je 0x433c0c
push 0
push 1
lea eax, [esp + 0x1ab]
push eax
lea eax, [edi + 0xf40]
push eax
push dword [0x44e6ec]
call esi
movss xmm0, dword [esp + 0x220]
subss xmm0, dword [esp + 0x260]
movss xmm1, dword [0x44ebdc]
mulss xmm1, xmm1
cvttss2si eax, xmm0
movss xmm0, dword [0x44ebd8]
mulss xmm0, xmm0
mov dword [esp + 0x1c], eax
cdq
sub eax, edx
addss xmm1, xmm0
mov esi, eax
movss xmm0, dword [0x44ebe0]
mulss xmm0, xmm0
sar esi, 1
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x433a4f
sqrtsd xmm0, xmm0
jmp 0x433a54
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
xorps xmm2, xmm2
cvtsd2ss xmm2, xmm0
movss xmm0, dword [0x4432c8]
comiss xmm0, xmm2
jb 0x433c06
cmp byte [0x44e753], 0
je 0x433c06
cmp byte [esp + 0x1a3], 0
jne 0x433c06
mov dword [esp + 0xe0], 0x7e7765ef
lea eax, [esp + 0x60]
mov dword [esp + 0xe4], 0x77bf906
sub esp, 8
mov dword [esp + 0xf0], 0x31dc87b6
mov dword [esp + 0xf4], 0xe334556
movaps xmm1, xmmword [esp + 0xe8]
movaps xmmword [esp + 0x68], xmm1
mov dword [esp + 0xd8], 0x1c1a0ab5
mov dword [esp + 0xdc], 0x225b9c6f
mov dword [esp + 0xe0], 0x5cbaa986
mov dword [esp + 0xe4], 0xe334556
movaps xmm0, xmmword [esp + 0xd8]
xorps xmm0, xmm1
movaps xmmword [esp + 0x68], xmm0
cvtps2pd xmm0, xmm2
movsd qword [esp], xmm0
push eax
lea eax, [esp + 0x474]
push eax
call fcn.004135e0
cvttss2si edx, dword [esp + 0x230]
lea eax, [esp + 0x478]
push eax
push 0x44d768
cvttss2si ecx, dword [esp + 0x234]
call fcn.0042e530
mov eax, dword [0x44e5b0]
lea ecx, [esp + 0x480]
movss xmm3, dword [0x440664]
add esp, 0x14
movss xmm0, dword [eax + 0x18bc]
mov eax, dword [eax + 0x18b8]
movaps xmm2, xmm0
push 0
push ecx
push ecx
lea ecx, [esp + 0xbc]
mov dword [esp], 0xbf800000
push ecx
mov ecx, eax
movss dword [esp + 0x50], xmm0
mov dword [esp + 0x34], eax
call fcn.0041fd20
movss xmm0, dword [esp + 0xac]
xorps xmm1, xmm1
comiss xmm0, xmm1
jbe 0x433bac
mov eax, dword [esp + 0x20]
movss xmm1, dword [esp + 0x3c]
divss xmm1, dword [eax]
subss xmm0, xmm1
addss xmm0, dword [0x44059c]
movd xmm3, dword [esp + 0x1c]
mov eax, esi
cdq
sub eax, edx
movd xmm2, esi
sar eax, 1
cvttss2si ecx, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movd xmm0, ecx
mov ecx, 0x44d858
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm3, xmm3
movss dword [esp + 0xac], xmm0
movss xmm0, dword [esp + 0x21c]
cvtdq2ps xmm2, xmm2
subss xmm0, xmm1
movss xmm1, dword [esp + 0x260]
call fcn.0042e920
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [esp + 0x48]
cmp eax, 0x240005
jne 0x4342cf
push 0
push 0xc
lea eax, [esp + 0x1d8]
push eax
lea esi, [edi + 0xe38]
push esi
push dword [0x44e6ec]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 0
push 4
lea ecx, [esp + 0x208]
lea eax, [edi + 0xfc8]
push ecx
push eax
push dword [0x44e6ec]
mov dword [esp + 0x74], eax
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edi, dword [esp + 0x200]
lea eax, [esp + 0x14c]
push 0
push 0xc
push eax
push esi
push dword [0x44e6ec]
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
call esi
mov eax, dword [esp + 0x154]
movq xmm0, qword [esp + 0x14c]
push 0
mov dword [0x44ebb8], eax
lea eax, [esp + 0x200]
push 4
push eax
mov eax, dword [0x44e768]
add eax, 0xf57fb4
movq qword [0x44ebb0], xmm0
push eax
push dword [0x44e6ec]
call esi
push 0
push 4
lea eax, [esp + 0x1fc]
push eax
mov eax, dword [esp + 0x208]
add eax, 0xfe8
push eax
push dword [0x44e6ec]
call esi
push 0
push 0xc
lea eax, [esp + 0xbc]
push eax
mov eax, dword [esp + 0x200]
add eax, 0xe38
push eax
push dword [0x44e6ec]
call esi
movss xmm0, dword [esp + 0xb4]
lea ecx, [esp + 0x188]
subss xmm0, dword [esp + 0x1d0]
mov edx, edi
mov dword [esp + 0x190], 0
movss dword [esp + 0x3c], xmm0
movss xmm0, dword [esp + 0xb8]
subss xmm0, dword [esp + 0x1d4]
movss dword [esp + 0x20], xmm0
movss xmm0, dword [esp + 0xbc]
subss xmm0, dword [esp + 0x1d8]
movss dword [esp + 0x1c], xmm0
xorps xmm0, xmm0
movq qword [esp + 0x188], xmm0
call fcn.0042ec60
movss xmm0, dword [esp + 0x20]
movss xmm1, dword [esp + 0x3c]
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm1, xmm0
movss xmm0, dword [esp + 0x1c]
mulss xmm0, xmm0
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x433da2
sqrtsd xmm0, xmm0
jmp 0x433da7
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
mov eax, dword [esp + 0x1d8]
sub esp, 0xc
cvtsd2ss xmm0, xmm0
mov ecx, esp
movss dword [esp + 0x20], xmm0
movq xmm0, qword [esp + 0x1dc]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
lea ecx, [esp + 0x1b0]
call fcn.00432320
add esp, 0xc
test al, al
je 0x43453e
movss xmm0, dword [0x4432cc]
comiss xmm0, dword [esp + 0x14]
jb 0x43453e
cmp byte [0x44e6eb], 0
je 0x433e87
push 0x400
lea eax, [esp + 0x66c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x258]
push 0
push 4
push eax
push dword [esp + 0x6c]
push dword [0x44e6ec]
call esi
movss xmm0, dword [esp + 0x14]
lea eax, [esp + 0x668]
cvtps2pd xmm0, xmm0
sub esp, 8
movsd qword [esp], xmm0
push dword [esp + 0x190]
push str._s___0.fm
push eax
call fcn.00438860
cvttss2si edx, dword [esp + 0x1bc]
add esp, 0x14
lea eax, [esp + 0x668]
push eax
push 0x44d938
cvttss2si ecx, dword [esp + 0x1ac]
call fcn.0042e530
add esp, 8
cmp byte [0x44e764], 0
je 0x433fea
cmp dword [esp + 0x190], 7
jne 0x433f06
push 0x400
lea eax, [esp + 0xa6c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x20]
lea eax, [esp + 0xa74]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x190]
push str._s___0.fm
push eax
call fcn.00438860
cvttss2si edx, dword [esp + 0x1bc]
add esp, 0x14
lea eax, [esp + 0xa68]
push eax
push 0x44d768
cvttss2si ecx, dword [esp + 0x1ac]
call fcn.0042e530
add esp, 8
cmp dword [esp + 0x190], 8
jne 0x433f78
push 0x400
lea eax, [esp + 0xe6c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x20]
lea eax, [esp + 0xe74]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x190]
push str._s___0.fm
push eax
call fcn.00438860
cvttss2si edx, dword [esp + 0x1bc]
add esp, 0x14
lea eax, [esp + 0xe68]
push eax
push 0x44d768
cvttss2si ecx, dword [esp + 0x1ac]
call fcn.0042e530
add esp, 8
cmp dword [esp + 0x190], 0xa
jne 0x433fea
push 0x400
lea eax, [esp + 0x126c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x20]
lea eax, [esp + 0x1274]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x190]
push str._s___0.fm
push eax
call fcn.00438860
cvttss2si edx, dword [esp + 0x1bc]
add esp, 0x14
lea eax, [esp + 0x1268]
push eax
push 0x44d768
cvttss2si ecx, dword [esp + 0x1ac]
call fcn.0042e530
add esp, 8
cmp byte [0x44e6f8], 0
je 0x434065
cmp dword [esp + 0x190], 9
jne 0x434065
push 0x400
lea eax, [esp + 0x166c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x20]
lea eax, [esp + 0x1674]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x190]
push str._s___0.fm
push eax
call fcn.00438860
cvttss2si edx, dword [esp + 0x1bc]
add esp, 0x14
lea eax, [esp + 0x1668]
push eax
push 0x44d788
cvttss2si ecx, dword [esp + 0x1ac]
call fcn.0042e530
add esp, 8
cmp byte [0x44e752], 0
je 0x434156
cmp dword [esp + 0x190], 0
jne 0x4340e4
push 0x400
lea eax, [esp + 0x1a6c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x20]
lea eax, [esp + 0x1a74]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x190]
push str._s___0.fm
push eax
call fcn.00438860
cvttss2si edx, dword [esp + 0x1bc]
add esp, 0x14
lea eax, [esp + 0x1a68]
push eax
push 0x44d7e8
cvttss2si ecx, dword [esp + 0x1ac]
call fcn.0042e530
add esp, 8
cmp dword [esp + 0x190], 2
jne 0x434156
push 0x400
lea eax, [esp + 0x1e6c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x20]
lea eax, [esp + 0x1e74]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x190]
push str._s___0.fm
push eax
call fcn.00438860
cvttss2si edx, dword [esp + 0x1bc]
add esp, 0x14
lea eax, [esp + 0x1e68]
push eax
push 0x44d7e8
cvttss2si ecx, dword [esp + 0x1ac]
call fcn.0042e530
add esp, 8
cmp byte [0x44e6ea], 0
je 0x434247
cmp dword [esp + 0x190], 4
jne 0x4341d5
push 0x400
lea eax, [esp + 0x226c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x20]
lea eax, [esp + 0x2274]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x190]
push str._s___0.fm
push eax
call fcn.00438860
cvttss2si edx, dword [esp + 0x1bc]
add esp, 0x14
lea eax, [esp + 0x2268]
push eax
push 0x44d7a8
cvttss2si ecx, dword [esp + 0x1ac]
call fcn.0042e530
add esp, 8
cmp dword [esp + 0x190], 5
jne 0x434247
push 0x400
lea eax, [esp + 0x266c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x20]
lea eax, [esp + 0x2674]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x190]
push str._s___0.fm
push eax
call fcn.00438860
cvttss2si edx, dword [esp + 0x1bc]
add esp, 0x14
lea eax, [esp + 0x2668]
push eax
push 0x44d7a8
cvttss2si ecx, dword [esp + 0x1ac]
call fcn.0042e530
add esp, 8
cmp byte [0x44e5ad], 0
je 0x43453e
cmp dword [esp + 0x190], 0xc
jne 0x43453e
push 0x400
lea eax, [esp + 0x2a6c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x20]
lea eax, [esp + 0x2a74]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x190]
push str._s___0.fm
push eax
call fcn.00438860
cvttss2si edx, dword [esp + 0x1bc]
add esp, 0x14
lea eax, [esp + 0x2a68]
push eax
push 0x44d938
cvttss2si ecx, dword [esp + 0x1ac]
call fcn.0042e530
add esp, 8
jmp 0x43453e
cmp eax, 0x250005
jne 0x43453e
push 0
push 4
lea eax, [esp + 0x1f4]
push eax
mov eax, dword [0x44e768]
add eax, 0xf57fb4
push eax
push dword [0x44e6ec]
call esi
push 0
push 4
lea eax, [esp + 0x1e4]
push eax
mov eax, dword [esp + 0x1f8]
add eax, 0xfe8
push eax
push dword [0x44e6ec]
call esi
push 0
push 0xc
lea eax, [esp + 0x254]
push eax
mov eax, dword [esp + 0x1e8]
add eax, 0xe38
push eax
push dword [0x44e6ec]
call esi
push 0
push 0xc
lea eax, [esp + 0x84]
push eax
lea eax, [edi + 0xe38]
push eax
push dword [0x44e6ec]
call esi
movss xmm1, dword [esp + 0x80]
subss xmm1, dword [esp + 0x250]
movss xmm2, dword [esp + 0x7c]
subss xmm2, dword [esp + 0x24c]
movq xmm0, qword [esp + 0x7c]
movq qword [0x44ebb0], xmm0
movss xmm0, dword [esp + 0x84]
subss xmm0, dword [esp + 0x254]
mov esi, dword [esp + 0x84]
movss dword [0x44ebdc], xmm1
mulss xmm1, xmm1
mov dword [0x44ebb8], esi
movss dword [0x44ebd8], xmm2
mulss xmm2, xmm2
movss dword [0x44ebe0], xmm0
mulss xmm0, xmm0
addss xmm1, xmm2
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x4343e2
sqrtsd xmm0, xmm0
jmp 0x4343e7
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
cvtsd2ss xmm0, xmm0
push 0xff
lea eax, [esp + 0x56c]
push 0
push eax
movss dword [esp + 0x6c], xmm0
call sub.VCRUNTIME140.dll_memset
movq xmm0, qword [esp + 0x88]
lea ecx, [esp + 0x234]
mov eax, esp
movq qword [eax], xmm0
mov dword [eax + 8], esi
call fcn.00432320
add esp, 0xc
test al, al
je 0x434538
movss xmm0, dword [0x4432cc]
movss xmm2, dword [esp + 0x60]
comiss xmm0, xmm2
jb 0x434538
cmp byte [0x44e750], 0
je 0x434538
mov dword [esp + 0xc0], 0x7a343a90
lea eax, [esp + 0x40]
mov dword [esp + 0xc4], 0x225b9c02
sub esp, 8
mov dword [esp + 0xd0], 0x5cbaa986
mov dword [esp + 0xd4], 0xe334556
movaps xmm1, xmmword [esp + 0xc8]
movaps xmmword [esp + 0x48], xmm1
mov dword [esp + 0x138], 0x1c1a0ab5
mov dword [esp + 0x13c], 0x225b9c6f
mov dword [esp + 0x140], 0x5cbaa986
mov dword [esp + 0x144], 0xe334556
movaps xmm0, xmmword [esp + 0x138]
xorps xmm0, xmm1
movaps xmmword [esp + 0x48], xmm0
cvtps2pd xmm0, xmm2
movsd qword [esp], xmm0
push eax
lea eax, [esp + 0x574]
push eax
call fcn.004135e0
cvttss2si edx, dword [esp + 0x23c]
push str.Vehicle
push 0x44d788
cvttss2si ecx, dword [esp + 0x240]
call fcn.0042e530
movss xmm0, dword [esp + 0x244]
lea eax, [esp + 0x580]
addss xmm0, dword [0x440624]
cvttss2si ecx, dword [esp + 0x240]
push eax
push 0x44d788
cvttss2si edx, xmm0
call fcn.0042e530
add esp, 0x20
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [0x44ebe8]
mov edi, dword [esp + 0x78]
sub eax, dword [0x44ebe4]
inc edi
sar eax, 4
mov dword [esp + 0x78], edi
cmp edi, eax
jbe 0x432f35
cmp dword [0x44e754], 0
je 0x434574
cmp byte [0x44e6fa], 0
je 0x434574
call fcn.00432ae0
mov ecx, dword [esp + 0x2e6c]
pop edi
pop esi
xor ecx, esp
call fcn.00439054
mov esp, ebp
pop ebp
ret