Function at 0x434bd0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
mov eax, 0x7648
call fcn.00479880
mov eax, dword [0x49a080]
xor eax, esp
mov dword [esp + 0x7644], eax
mov eax, dword [0x4b65b4]
push esi
push edi
cmp eax, dword [0x4b65b8]
je 0x436d64
movss xmm0, dword [0x48c42c]
xor esi, esi
mov edi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss dword [esp + 0x54], xmm0
mov dword [0x4b6124], 0
mov dword [esp + 0x7c], esi
mov eax, esi
shl eax, 4
add eax, dword [0x4b65b4]
movups xmm0, xmmword [eax]
movd esi, xmm0
movaps xmmword [esp + 0x60], xmm0
mov dword [esp + 0x40], esi
cmp esi, dword [0x4b613c]
jne 0x434c53
cmp dword [esp + 0x64], 0
je 0x436d2e
push 0
push 4
lea eax, [esp + 0x2f0]
push eax
lea eax, [esi + 0x2df4]
push eax
push dword [0x4b60a4]
call edi
movss xmm0, dword [esp + 0x2e8]
mov eax, esi
or eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x68]
movss dword [esp + 0x18], xmm0
je 0x435b6f
cmp ecx, 0x20
je 0x434c9b
cmp ecx, 0x21
jne 0x435b6f
comiss xmm0, dword [0x48c20c]
jb 0x435b6f
movss xmm1, dword [0x48c3fc]
comiss xmm1, xmm0
jb 0x435b6f
push 0
push 4
lea eax, [esp + 0x2ec]
push eax
mov eax, dword [0x4b6150]
add eax, 0xf46f14
xor eax, dword [0x4b6120]
push eax
push dword [0x4b60a4]
call edi
push 0
push 4
lea eax, [esp + 0x2e8]
push eax
mov eax, dword [esp + 0x2f0]
add eax, 0xfe8
xor eax, dword [0x4b6138]
push eax
push dword [0x4b60a4]
call edi
push 0
push 0xc
lea eax, [esp + 0x314]
push eax
mov eax, dword [esp + 0x2ec]
add eax, 0xe38
push eax
push dword [0x4b60a4]
call edi
push 0
push 0xc
lea eax, [esp + 0xb4]
push eax
lea eax, [esi + 0xe38]
push eax
push dword [0x4b60a4]
call edi
movss xmm1, dword [esp + 0xac]
movss xmm2, dword [esp + 0xb0]
subss xmm2, dword [esp + 0x310]
subss xmm1, dword [esp + 0x30c]
movq xmm0, qword [esp + 0xac]
mov eax, dword [esp + 0xb4]
movq qword [0x4b6598], xmm0
movss xmm0, dword [esp + 0xb4]
subss xmm0, dword [esp + 0x314]
mulss xmm2, xmm2
mov dword [0x4b65a0], eax
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm2, xmm1
xorps xmm1, xmm1
addss xmm2, xmm0
cvtps2pd xmm0, xmm2
ucomisd xmm1, xmm0
ja 0x434dba
sqrtsd xmm0, xmm0
jmp 0x434dbf
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
cvtsd2ss xmm0, xmm0
push 6
mov edx, esi
lea ecx, [esp + 0x254]
movss dword [esp + 0x54], xmm0
call fcn.004326d0
mov eax, dword [0x4b60d8]
add esp, 4
sub eax, 0
je 0x434df6
sub eax, 1
jne 0x434e01
mov eax, 3
mov dword [esp + 0x78], eax
jmp 0x434e05
mov eax, 6
mov dword [esp + 0x78], eax
jmp 0x434e05
mov eax, dword [esp + 0x78]
push eax
mov edx, esi
lea ecx, [esp + 0x260]
call fcn.004326d0
movq xmm0, qword [esp + 0x260]
sub esp, 8
mov eax, dword [esp + 0x270]
mov ecx, esp
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
mov ecx, 0x4b65a8
call fcn.004328b0
movq xmm0, qword [0x4b6598]
mov ecx, esp
mov eax, dword [0x4b65a0]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
lea ecx, [esp + 0x2c0]
call fcn.004328b0
movq xmm0, qword [esp + 0x25c]
mov ecx, esp
mov eax, dword [esp + 0x264]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
mov ecx, 0x4b65c0
call fcn.004328b0
add esp, 0xc
test al, al
je 0x435b6b
push 0xff
lea eax, [esp + 0x34c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [0x49a350]
add esp, 0xc
movss xmm1, dword [esp + 0x50]
comiss xmm0, xmm1
jb 0x43571d
movss xmm3, dword [0x4b65c4]
movss xmm0, dword [esp + 0x2b8]
subss xmm0, xmm3
movss dword [esp + 0x14], xmm3
cvttss2si eax, xmm0
mov dword [esp + 0x1c], eax
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
cmp byte [0x4b6063], 0
mov dword [esp + 0x38], ecx
je 0x434fca
movss xmm0, dword [esp + 0x50]
lea eax, [esp + 0x80]
cvtps2pd xmm0, xmm0
sub esp, 8
mov dword [esp + 0x1e8], 0xab8e3fca
mov dword [esp + 0x1ec], 0x466febed
mov dword [esp + 0x1f0], 0x1de3604
mov dword [esp + 0x1f4], 0xc311cb19
mov dword [esp + 0x1f8], 0xcda00fef
movaps xmm1, xmmword [esp + 0x1e8]
movsd qword [esp], xmm0
push eax
movaps xmmword [esp + 0x8c], xmm1
lea eax, [esp + 0x354]
mov dword [esp + 0x200], 0x466feb80
mov dword [esp + 0x204], 0x1de3604
mov dword [esp + 0x208], 0xc311cb19
xorps xmm1, xmmword [esp + 0x1fc]
push eax
movaps xmmword [esp + 0x90], xmm1
call fcn.00413750
cvttss2si edx, dword [esp + 0x2c8]
lea eax, [esp + 0x358]
push eax
push 0x4af268
cvttss2si ecx, dword [esp + 0x2cc]
call fcn.0042e860
movss xmm3, dword [0x4b65c4]
add esp, 0x18
mov ecx, dword [esp + 0x38]
movss dword [esp + 0x14], xmm3
cmp byte [0x4b611a], 0
je 0x4356ba
mov eax, 0x55555556
movss xmm2, dword [esp + 0x2b4]
imul ecx
movss dword [esp + 0x110], xmm3
mov eax, 0x55555556
mov esi, edx
shr esi, 0x1f
add esi, edx
imul dword [esp + 0x1c]
mov eax, ecx
mov edi, edx
shr edi, 0x1f
add edi, edx
cdq
sub eax, edx
sar eax, 1
movd xmm1, edi
cvtdq2ps xmm1, xmm1
movd xmm0, eax
lea eax, [esp + 0x104]
cvtdq2ps xmm0, xmm0
subss xmm2, xmm0
movd xmm0, ecx
mov ecx, dword [0x4b5f50]
cvtdq2ps xmm0, xmm0
add ecx, 0x1be4
push ecx
mov dword [esp], 0x40400000
push 0xff010202
push eax
movss dword [esp + 0x2c], xmm0
lea eax, [esp + 0x118]
movd xmm0, dword [esp + 0x28]
cvtdq2ps xmm0, xmm0
push eax
movss dword [esp + 0x3c], xmm2
movss dword [esp + 0x34], xmm0
movaps xmm0, xmm3
addss xmm0, xmm1
movss dword [esp + 0x114], xmm2
movss dword [esp + 0x11c], xmm2
movss dword [esp + 0x68], xmm0
movss dword [esp + 0x118], xmm0
call fcn.0041d5d0
mov ecx, dword [0x4b5f50]
lea eax, [esp + 0x114]
movss xmm2, dword [esp + 0x2c]
add ecx, 0x1be4
movd xmm0, esi
movaps xmm1, xmm2
cvtdq2ps xmm0, xmm0
push ecx
mov dword [esp], 0x40400000
push 0xff010202
push eax
lea eax, [esp + 0x128]
movss dword [esp + 0x128], xmm2
addss xmm1, xmm0
movss xmm0, dword [esp + 0x20]
push eax
movss dword [esp + 0x128], xmm0
movss dword [esp + 0x130], xmm0
movss dword [esp + 0x6c], xmm1
movss dword [esp + 0x124], xmm1
call fcn.0041d5d0
movss xmm1, dword [esp + 0x20]
addss xmm1, dword [esp + 0x2c]
mov ecx, dword [0x4b5f50]
movss xmm2, dword [esp + 0x14]
add ecx, 0x1be4
movd xmm0, esi
cvtdq2ps xmm0, xmm0
push ecx
mov dword [esp], 0x40400000
movss dword [esp + 0x24], xmm1
movss dword [esp + 0x128], xmm1
subss xmm1, xmm0
movss dword [esp + 0x12c], xmm2
movss dword [esp + 0x134], xmm2
movss dword [esp + 0x38], xmm1
movss dword [esp + 0x130], xmm1
push 0xff010202
lea eax, [esp + 0x12c]
push eax
lea eax, [esp + 0x138]
push eax
call fcn.0041d5d0
mov ecx, dword [0x4b5f50]
lea eax, [esp + 0x134]
movss xmm0, dword [esp + 0x58]
add ecx, 0x1be4
movss xmm1, dword [esp + 0x20]
push ecx
mov dword [esp], 0x40400000
push 0xff010202
push eax
movss dword [esp + 0x144], xmm0
lea eax, [esp + 0x148]
movss xmm0, dword [esp + 0x20]
push eax
movss dword [esp + 0x144], xmm1
movss dword [esp + 0x14c], xmm1
movss dword [esp + 0x150], xmm0
call fcn.0041d5d0
movss xmm0, dword [esp + 0x2c]
lea eax, [esp + 0x144]
movss xmm1, dword [esp + 0x24]
addss xmm1, dword [esp + 0x14]
mov ecx, dword [0x4b5f50]
movss dword [esp + 0x144], xmm0
add ecx, 0x1be4
movss dword [esp + 0x14c], xmm0
movd xmm0, edi
cvtdq2ps xmm0, xmm0
push ecx
mov dword [esp], 0x40400000
push 0xff010202
push eax
movss dword [esp + 0x30], xmm1
lea eax, [esp + 0x158]
movss dword [esp + 0x154], xmm1
subss xmm1, xmm0
push eax
movss dword [esp + 0x38], xmm1
movss dword [esp + 0x160], xmm1
call fcn.0041d5d0
mov ecx, dword [0x4b5f50]
lea eax, [esp + 0x154]
movss xmm0, dword [esp + 0x5c]
add ecx, 0x1be4
movss xmm1, dword [esp + 0x24]
push ecx
mov dword [esp], 0x40400000
push 0xff010202
push eax
movss dword [esp + 0x160], xmm0
lea eax, [esp + 0x168]
movss xmm0, dword [esp + 0x38]
push eax
movss dword [esp + 0x168], xmm1
movss dword [esp + 0x16c], xmm0
movss dword [esp + 0x170], xmm1
call fcn.0041d5d0
mov ecx, dword [0x4b5f50]
lea eax, [esp + 0x164]
movss xmm0, dword [esp + 0x20]
add ecx, 0x1be4
movss xmm1, dword [esp + 0x24]
push ecx
mov dword [esp], 0x40400000
push 0xff010202
push eax
movss dword [esp + 0x170], xmm0
lea eax, [esp + 0x178]
movss xmm0, dword [esp + 0x40]
push eax
movss dword [esp + 0x178], xmm1
movss dword [esp + 0x17c], xmm0
movss dword [esp + 0x180], xmm1
call fcn.0041d5d0
mov ecx, dword [0x4b5f50]
add ecx, 0x1be4
movss xmm0, dword [esp + 0x24]
lea eax, [esp + 0x174]
movss xmm1, dword [esp + 0x20]
push ecx
mov dword [esp], 0x40400000
push 0xff010202
push eax
movss dword [esp + 0x184], xmm0
lea eax, [esp + 0x188]
movss xmm0, dword [esp + 0x34]
push eax
movss dword [esp + 0x184], xmm1
movss dword [esp + 0x18c], xmm1
movss dword [esp + 0x190], xmm0
call fcn.0041d5d0
movss xmm0, dword [esp + 0x58]
lea eax, [esp + 0x184]
movss xmm1, dword [esp + 0x2c]
push ecx
mov ecx, dword [0x4b5f50]
mov dword [esp], 0x3f800000
add ecx, 0x1be4
push 0xff00ff00
push eax
movss dword [esp + 0x194], xmm0
lea eax, [esp + 0x198]
movss xmm0, dword [esp + 0x20]
push eax
movss dword [esp + 0x194], xmm1
movss dword [esp + 0x19c], xmm1
movss dword [esp + 0x1a0], xmm0
call fcn.0041d5d0
movss xmm0, dword [esp + 0x5c]
lea eax, [esp + 0x194]
movss xmm1, dword [esp + 0x14]
push ecx
mov ecx, dword [0x4b5f50]
mov dword [esp], 0x3f800000
add ecx, 0x1be4
push 0xff00ff00
push eax
movss dword [esp + 0x1a0], xmm0
lea eax, [esp + 0x1a8]
movss xmm0, dword [esp + 0x38]
push eax
movss dword [esp + 0x1a8], xmm1
movss dword [esp + 0x1ac], xmm0
movss dword [esp + 0x1b0], xmm1
call fcn.0041d5d0
movss xmm0, dword [esp + 0x20]
lea eax, [esp + 0x1a4]
movss xmm1, dword [esp + 0x14]
push ecx
mov ecx, dword [0x4b5f50]
mov dword [esp], 0x3f800000
add ecx, 0x1be4
push 0xff00ff00
push eax
movss dword [esp + 0x1b0], xmm0
lea eax, [esp + 0x1b8]
movss xmm0, dword [esp + 0x40]
push eax
movss dword [esp + 0x1b8], xmm1
movss dword [esp + 0x1bc], xmm0
movss dword [esp + 0x1c0], xmm1
call fcn.0041d5d0
movss xmm0, dword [esp + 0x58]
lea eax, [esp + 0xec]
movss xmm1, dword [esp + 0x20]
push ecx
mov ecx, dword [0x4b5f50]
mov dword [esp], 0x3f800000
push 0xff00ff00
push eax
movss dword [esp + 0xfc], xmm0
lea eax, [esp + 0x1c0]
movss xmm0, dword [esp + 0x20]
movss dword [esp + 0xf8], xmm1
movss dword [esp + 0x1c0], xmm1
movss dword [esp + 0x1c4], xmm0
push eax
add ecx, 0x1be4
call fcn.0041d5d0
movss xmm0, dword [esp + 0x2c]
lea eax, [esp + 0x1bc]
movss xmm1, dword [esp + 0x24]
push ecx
mov ecx, dword [0x4b5f50]
mov dword [esp], 0x3f800000
add ecx, 0x1be4
push 0xff00ff00
push eax
movss dword [esp + 0x1c8], xmm0
lea eax, [esp + 0x1d0]
movss dword [esp + 0x1d0], xmm0
movss xmm0, dword [esp + 0x34]
push eax
movss dword [esp + 0x1d0], xmm1
movss dword [esp + 0x1d8], xmm0
call fcn.0041d5d0
movss xmm0, dword [esp + 0x5c]
lea eax, [esp + 0x1cc]
movss xmm1, dword [esp + 0x24]
push ecx
mov ecx, dword [0x4b5f50]
mov dword [esp], 0x3f800000
add ecx, 0x1be4
push 0xff00ff00
push eax
movss dword [esp + 0x1d8], xmm0
lea eax, [esp + 0xd8]
movss xmm0, dword [esp + 0x38]
push eax
movss dword [esp + 0x1e0], xmm1
movss dword [esp + 0xdc], xmm0
movss dword [esp + 0xe0], xmm1
call fcn.0041d5d0
movss xmm0, dword [esp + 0x20]
lea eax, [esp + 0xd4]
movss xmm1, dword [esp + 0x24]
push ecx
mov ecx, dword [0x4b5f50]
mov dword [esp], 0x3f800000
add ecx, 0x1be4
push 0xff00ff00
push eax
movss dword [esp + 0xe0], xmm0
lea eax, [esp + 0xe8]
movss xmm0, dword [esp + 0x40]
push eax
movss dword [esp + 0xe8], xmm1
movss dword [esp + 0xec], xmm0
movss dword [esp + 0xf0], xmm1
call fcn.0041d5d0
movss xmm0, dword [esp + 0x24]
lea eax, [esp + 0xe4]
movss xmm1, dword [esp + 0x20]
push ecx
mov ecx, dword [0x4b5f50]
mov dword [esp], 0x3f800000
push 0xff00ff00
push eax
movss dword [esp + 0xf4], xmm0
lea eax, [esp + 0x100]
movss xmm0, dword [esp + 0x34]
lea ecx, [ecx + 0x1be4]
push eax
movss dword [esp + 0xf4], xmm1
movss dword [esp + 0x104], xmm1
movss dword [esp + 0x108], xmm0
call fcn.0041d5d0
mov edi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov esi, dword [esp + 0x40]
cmp byte [0x4b60ba], 0
je 0x4356cf
mov edx, 0x4af268
mov ecx, esi
call fcn.004332f0
cmp byte [0x4b60c1], 0
je 0x435717
movd xmm1, dword [esp + 0x38]
cvtdq2ps xmm1, xmm1
movss xmm0, dword [esp + 0x2b4]
divss xmm1, dword [0x48c228]
movd xmm3, dword [esp + 0x1c]
cvttss2si edx, dword [esp + 0x2b8]
movss xmm2, dword [esp + 0x18]
subss xmm0, xmm1
cvtdq2ps xmm3, xmm3
cvttss2si ecx, xmm0
call fcn.00432eb0
movss xmm1, dword [esp + 0x50]
movss xmm0, dword [0x49a300]
comiss xmm0, xmm1
jb 0x435b6b
mov eax, dword [0x4b65a4]
movss xmm2, dword [0x4b65a8]
movss xmm1, dword [0x4b65ac]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
mov eax, dword [0x4b6154]
cvtdq2ps xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
cmp byte [0x4b60dd], 0
subss xmm2, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm2, xmm2
subss xmm1, xmm0
mulss xmm1, xmm1
addss xmm1, xmm2
cvtps2pd xmm0, xmm1
xorps xmm1, xmm1
je 0x4357be
ucomisd xmm1, xmm0
ja 0x43578f
sqrtsd xmm0, xmm0
jmp 0x435794
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
movd xmm0, dword [0x4af518]
cvtdq2ps xmm0, xmm0
comiss xmm0, xmm1
jbe 0x4357ea
movss xmm0, dword [esp + 0x54]
comiss xmm0, xmm1
jbe 0x4357ea
movss dword [esp + 0x54], xmm1
jmp 0x4357e4
ucomisd xmm1, xmm0
ja 0x4357ca
sqrtsd xmm0, xmm0
jmp 0x4357cf
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
movss xmm1, dword [esp + 0x54]
cvtsd2ss xmm0, xmm0
comiss xmm1, xmm0
jbe 0x4357ea
movss dword [esp + 0x54], xmm0
mov dword [0x4b6124], esi
cmp byte [0x4b60ae], 0
je 0x435915
push 0
push 4
lea eax, [esp + 0x2d0]
push eax
lea eax, [esi + 0x2f88]
push eax
push dword [0x4b60a4]
call edi
cmp dword [esp + 0x2c8], 0
je 0x435915
push 0x400
lea eax, [esp + 0x64c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa48]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x2d4]
lea ecx, [esp + 0x2a4]
add esp, 0xc
mov dword [esp + 0x2a0], 0
xorps xmm0, xmm0
movq qword [esp + 0x298], xmm0
call fcn.0042f060
push dword [esp + 0x298]
lea eax, [esp + 0x64c]
push 0x486cf8
push eax
call fcn.00440a80
add esp, 0xc
lea eax, [esp + 0xa48]
push str.WEAPON:
push eax
call fcn.00440a80
movss xmm0, dword [esp + 0x2c0]
lea eax, [esp + 0x650]
addss xmm0, dword [0x48c3cc]
cvttss2si ecx, dword [esp + 0x2bc]
push eax
push 0x4af268
cvttss2si edx, xmm0
call fcn.0042e860
movss xmm0, dword [esp + 0x2c8]
lea eax, [esp + 0xa58]
addss xmm0, dword [0x48c3cc]
push eax
push 0x4af098
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x2cc]
subss xmm0, dword [0x48c3ec]
cvttss2si ecx, xmm0
call fcn.0042e860
add esp, 0x18
cmp byte [0x4b5f4f], 0
je 0x435a40
push 0
push 4
lea eax, [esp + 0x2cc]
push eax
lea eax, [esi + 0x3110]
push eax
push dword [0x4b60a4]
call edi
cmp dword [esp + 0x2c4], 0
je 0x435a40
push 0x400
lea eax, [esp + 0xe4c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x1248]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x2d0]
lea ecx, [esp + 0x298]
add esp, 0xc
mov dword [esp + 0x294], 0
xorps xmm0, xmm0
movq qword [esp + 0x28c], xmm0
call fcn.0042f060
push dword [esp + 0x28c]
lea eax, [esp + 0xe4c]
push 0x486cf8
push eax
call fcn.00440a80
add esp, 0xc
lea eax, [esp + 0x1248]
push str.HELMET:
push eax
call fcn.00440a80
movss xmm0, dword [esp + 0x2c0]
lea eax, [esp + 0xe50]
addss xmm0, dword [0x48c3dc]
cvttss2si ecx, dword [esp + 0x2bc]
push eax
push 0x4af268
cvttss2si edx, xmm0
call fcn.0042e860
movss xmm0, dword [esp + 0x2c8]
lea eax, [esp + 0x1258]
addss xmm0, dword [0x48c3dc]
push eax
push 0x4af098
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x2cc]
subss xmm0, dword [0x48c3ec]
cvttss2si ecx, xmm0
call fcn.0042e860
add esp, 0x18
cmp byte [0x4b612d], 0
je 0x435b6b
push 0
push 4
lea eax, [esp + 0x2c8]
push eax
lea eax, [esi + 0x30d8]
push eax
push dword [0x4b60a4]
call edi
cmp dword [esp + 0x2c0], 0
je 0x435b6b
push 0x400
lea eax, [esp + 0x164c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x1a48]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x2cc]
lea ecx, [esp + 0x28c]
add esp, 0xc
mov dword [esp + 0x288], 0
xorps xmm0, xmm0
movq qword [esp + 0x280], xmm0
call fcn.0042f060
push dword [esp + 0x280]
lea eax, [esp + 0x164c]
push 0x486cf8
push eax
call fcn.00440a80
add esp, 0xc
lea eax, [esp + 0x1a48]
push str.ARMOR:
push eax
call fcn.00440a80
movss xmm0, dword [esp + 0x2c0]
lea eax, [esp + 0x1650]
addss xmm0, dword [0x48c3e4]
cvttss2si ecx, dword [esp + 0x2bc]
push eax
push 0x4af268
cvttss2si edx, xmm0
call fcn.0042e860
movss xmm0, dword [esp + 0x2c8]
lea eax, [esp + 0x1a58]
addss xmm0, dword [0x48c3e4]
push eax
push 0x4af098
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x2cc]
subss xmm0, dword [0x48c3ec]
cvttss2si ecx, xmm0
call fcn.0042e860
add esp, 0x18
mov ecx, dword [esp + 0x68]
cmp ecx, 0x240005
jne 0x43658e
push 0
push 0xc
lea eax, [esp + 0x300]
push eax
lea eax, [esi + 0xe38]
push eax
push dword [0x4b60a4]
call edi
push 0
push 4
lea eax, [esp + 0x2e4]
push eax
lea eax, [esi + 0xfc8]
push eax
push dword [0x4b60a4]
call edi
mov esi, dword [esp + 0x2dc]
lea eax, [esp + 0x2d8]
push 0
push 4
push eax
mov eax, dword [0x4b6150]
add eax, 0xf46f14
xor eax, dword [0x4b6120]
push eax
push dword [0x4b60a4]
call edi
push 0
push 4
lea eax, [esp + 0x310]
push eax
mov eax, dword [esp + 0x2e4]
add eax, 0xfe8
xor eax, dword [0x4b6138]
push eax
push dword [0x4b60a4]
call edi
push 0
push 0xc
lea eax, [esp + 0x1dc]
push eax
mov eax, dword [esp + 0x314]
add eax, 0xe38
push eax
push dword [0x4b60a4]
call edi
movss xmm0, dword [esp + 0x1d4]
lea ecx, [esp + 0x274]
subss xmm0, dword [esp + 0x2f8]
mov edx, esi
mov dword [esp + 0x27c], 0
movss dword [esp + 0x38], xmm0
movss xmm0, dword [esp + 0x1d8]
subss xmm0, dword [esp + 0x2fc]
movss dword [esp + 0x18], xmm0
movss xmm0, dword [esp + 0x1dc]
subss xmm0, dword [esp + 0x300]
movss dword [esp + 0x1c], xmm0
xorps xmm0, xmm0
movq qword [esp + 0x274], xmm0
call fcn.0042f060
movss xmm1, dword [esp + 0x18]
movss xmm0, dword [esp + 0x38]
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm1, xmm0
movss xmm0, dword [esp + 0x1c]
mulss xmm0, xmm0
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x435cca
sqrtsd xmm0, xmm0
jmp 0x435ccf
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
comiss xmm1, dword [0x49a350]
movss dword [esp + 0x14], xmm1
ja 0x436d2e
movss xmm0, dword [0x48c3f0]
comiss xmm0, xmm1
jb 0x43658a
movq xmm0, qword [esp + 0x2f8]
sub esp, 0xc
mov eax, dword [esp + 0x30c]
mov ecx, esp
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
lea ecx, [esp + 0x2b4]
call fcn.004328b0
add esp, 0xc
test al, al
je 0x43658a
cmp byte [0x4b60af], 0
je 0x435df5
push 0x400
lea eax, [esp + 0x4a4c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x1e48]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x20]
lea eax, [esp + 0x1e54]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x27c]
push str._s____0.fm_
push eax
call fcn.00440a80
cvttss2si edx, dword [esp + 0x2c0]
add esp, 0x14
lea eax, [esp + 0x1e48]
push eax
push 0x4af268
cvttss2si ecx, dword [esp + 0x2b0]
call fcn.0042e860
movss xmm0, dword [esp + 0x2c0]
lea eax, [esp + 0x4a50]
addss xmm0, dword [0x48c3dc]
push eax
push 0x4af098
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x2c4]
subss xmm0, dword [0x48c3ec]
cvttss2si ecx, xmm0
call fcn.0042e860
add esp, 0x10
cmp byte [0x4b6148], 0
je 0x435ebf
cmp dword [esp + 0x27c], 7
jne 0x435ebf
push 0x400
lea eax, [esp + 0x4e4c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x2248]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x20]
lea eax, [esp + 0x2254]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x27c]
push str._s____0.fm_
push eax
call fcn.00440a80
movss xmm0, dword [esp + 0x2bc]
lea eax, [esp + 0x4e5c]
subss xmm0, dword [0x48c3f0]
cvttss2si edx, dword [esp + 0x2c0]
add esp, 0x14
push eax
push 0x4af098
cvttss2si ecx, xmm0
call fcn.0042e860
cvttss2si edx, dword [esp + 0x2b4]
lea eax, [esp + 0x2250]
push eax
push 0x4af0d8
cvttss2si ecx, dword [esp + 0x2b8]
call fcn.0042e860
add esp, 0x10
cmp byte [0x4b6141], 0
je 0x435f89
cmp dword [esp + 0x27c], 8
jne 0x435f89
push 0x400
lea eax, [esp + 0x524c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x2648]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x20]
lea eax, [esp + 0x2654]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x27c]
push str._s____0.fm_
push eax
call fcn.00440a80
movss xmm0, dword [esp + 0x2bc]
lea eax, [esp + 0x525c]
subss xmm0, dword [0x48c3f0]
cvttss2si edx, dword [esp + 0x2c0]
add esp, 0x14
push eax
push 0x4af198
cvttss2si ecx, xmm0
call fcn.0042e860
cvttss2si edx, dword [esp + 0x2b4]
lea eax, [esp + 0x2650]
push eax
push 0x4af118
cvttss2si ecx, dword [esp + 0x2b8]
call fcn.0042e860
add esp, 0x10
cmp byte [0x4b609e], 0
je 0x436053
cmp dword [esp + 0x27c], 9
jne 0x436053
push 0x400
lea eax, [esp + 0x564c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x2a48]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x2b4]
lea eax, [esp + 0x5654]
subss xmm0, dword [0x48c3f8]
cvttss2si edx, dword [esp + 0x2b8]
add esp, 0xc
push eax
push 0x4af1e8
cvttss2si ecx, xmm0
call fcn.0042e860
movss xmm0, dword [esp + 0x1c]
lea eax, [esp + 0x2a50]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push dword [esp + 0x27c]
push str._s____0.fm_
push eax
call fcn.00440a80
cvttss2si edx, dword [esp + 0x2c0]
add esp, 0x14
lea eax, [esp + 0x2a48]
push eax
push 0x4af188
cvttss2si ecx, dword [esp + 0x2b0]
call fcn.0042e860
add esp, 8
cmp byte [0x4b60c2], 0
je 0x43611d
cmp dword [esp + 0x27c], 0xa
jne 0x43611d
push 0x400
lea eax, [esp + 0x5a4c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x2e48]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x2b4]
lea eax, [esp + 0x5a54]
subss xmm0, dword [0x48c3f0]
cvttss2si edx, dword [esp + 0x2b8]
add esp, 0xc
push eax
push 0x4af148
cvttss2si ecx, xmm0
call fcn.0042e860
movss xmm0, dword [esp + 0x1c]
lea eax, [esp + 0x2e50]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push dword [esp + 0x27c]
push str._s____0.fm_
push eax
call fcn.00440a80
cvttss2si edx, dword [esp + 0x2c0]
add esp, 0x14
lea eax, [esp + 0x2e48]
push eax
push 0x4af0b8
cvttss2si ecx, dword [esp + 0x2b0]
call fcn.0042e860
add esp, 8
cmp byte [0x4b5f4d], 0
je 0x4361e7
cmp dword [esp + 0x27c], 2
jne 0x4361e7
push 0x400
lea eax, [esp + 0x5e4c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x3248]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x2b4]
lea eax, [esp + 0x5e54]
subss xmm0, dword [0x48c3f0]
cvttss2si edx, dword [esp + 0x2b8]
add esp, 0xc
push eax
push 0x4af118
cvttss2si ecx, xmm0
call fcn.0042e860
movss xmm0, dword [esp + 0x1c]
lea eax, [esp + 0x3250]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push dword [esp + 0x27c]
push str._s____0.fm_
push eax
call fcn.00440a80
cvttss2si edx, dword [esp + 0x2c0]
add esp, 0x14
lea eax, [esp + 0x3248]
push eax
push 0x4af248
cvttss2si ecx, dword [esp + 0x2b0]
call fcn.0042e860
add esp, 8
cmp byte [0x4b6062], 0
je 0x4362b1
cmp dword [esp + 0x27c], 0
jne 0x4362b1
push 0x400
lea eax, [esp + 0x624c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x3648]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x2b4]
lea eax, [esp + 0x6254]
subss xmm0, dword [0x48c3f0]
cvttss2si edx, dword [esp + 0x2b8]
add esp, 0xc
push eax
push 0x4af0d8
cvttss2si ecx, xmm0
call fcn.0042e860
movss xmm0, dword [esp + 0x1c]
lea eax, [esp + 0x3650]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push dword [esp + 0x27c]
push str._s____0.fm_
push eax
call fcn.00440a80
cvttss2si edx, dword [esp + 0x2c0]
add esp, 0x14
lea eax, [esp + 0x3648]
push eax
push 0x4af108
cvttss2si ecx, dword [esp + 0x2b0]
call fcn.0042e860
add esp, 8
cmp byte [0x4b60bb], 0
je 0x43637b
cmp dword [esp + 0x27c], 4
jne 0x43637b
push 0x400
lea eax, [esp + 0x664c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x3a48]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x2b4]
lea eax, [esp + 0x6654]
subss xmm0, dword [0x48c3f8]
cvttss2si edx, dword [esp + 0x2b8]
add esp, 0xc
push eax
push 0x4af168
cvttss2si ecx, xmm0
call fcn.0042e860
movss xmm0, dword [esp + 0x1c]
lea eax, [esp + 0x3a50]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push dword [esp + 0x27c]
push str._s____0.fm_
push eax
call fcn.00440a80
cvttss2si edx, dword [esp + 0x2c0]
add esp, 0x14
lea eax, [esp + 0x3a48]
push eax
push 0x4af148
cvttss2si ecx, dword [esp + 0x2b0]
call fcn.0042e860
add esp, 8
cmp byte [0x4b6060], 0
je 0x4363f6
cmp dword [esp + 0x27c], 5
jne 0x4363f6
push 0x400
lea eax, [esp + 0x3e4c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x20]
lea eax, [esp + 0x3e54]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x27c]
push str._s____0.fm_
push eax
call fcn.00440a80
cvttss2si edx, dword [esp + 0x2c0]
add esp, 0x14
lea eax, [esp + 0x3e48]
push eax
push 0x4af218
cvttss2si ecx, dword [esp + 0x2b0]
call fcn.0042e860
add esp, 8
cmp byte [0x4b60b4], 0
je 0x4364c0
cmp dword [esp + 0x27c], 0xb
jne 0x4364c0
push 0x400
lea eax, [esp + 0x6a4c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x4248]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x2b4]
lea eax, [esp + 0x6a54]
subss xmm0, dword [0x48c3f0]
cvttss2si edx, dword [esp + 0x2b8]
add esp, 0xc
push eax
push 0x4af118
cvttss2si ecx, xmm0
call fcn.0042e860
movss xmm0, dword [esp + 0x1c]
lea eax, [esp + 0x4250]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push dword [esp + 0x27c]
push str._s____0.fm_
push eax
call fcn.00440a80
cvttss2si edx, dword [esp + 0x2c0]
add esp, 0x14
lea eax, [esp + 0x4248]
push eax
push 0x4af398
cvttss2si ecx, dword [esp + 0x2b0]
call fcn.0042e860
add esp, 8
cmp byte [0x4b60c3], 0
je 0x43658a
cmp dword [esp + 0x27c], 0xe
jne 0x43658a
push 0x400
lea eax, [esp + 0x6e4c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x4648]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x2b4]
lea eax, [esp + 0x6e54]
subss xmm0, dword [0x48c3f0]
cvttss2si edx, dword [esp + 0x2b8]
add esp, 0xc
push eax
push 0x4af188
cvttss2si ecx, xmm0
call fcn.0042e860
movss xmm0, dword [esp + 0x1c]
lea eax, [esp + 0x4650]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push dword [esp + 0x27c]
push str._s____0.fm_
push eax
call fcn.00440a80
cvttss2si edx, dword [esp + 0x2c0]
add esp, 0x14
lea eax, [esp + 0x4648]
push eax
push 0x4af418
cvttss2si ecx, dword [esp + 0x2b0]
call fcn.0042e860
add esp, 8
mov ecx, dword [esp + 0x68]
cmp byte [0x4b6143], 0
jne 0x4365a4
cmp byte [0x4b6142], 0
je 0x436b78
mov esi, dword [esp + 0x40]
mov eax, esi
or eax, dword [esp + 0x64]
je 0x436b7c
cmp ecx, 0x20001
je 0x4365c8
cmp ecx, 0x20000
jne 0x436b7c
push 0
push 0xc
lea eax, [esp + 0x24c]
add esi, 0xe38
push eax
push esi
push dword [0x4b60a4]
call edi
movq xmm0, qword [esp + 0x244]
lea eax, [esp + 0x304]
mov edi, dword [esp + 0x24c]
push 0
push 4
push eax
mov eax, dword [0x4b6150]
add eax, 0xf46f14
movq qword [esp + 0x44], xmm0
xor eax, dword [0x4b6120]
push eax
push dword [0x4b60a4]
movq qword [esp + 0xcc], xmm0
mov dword [esp + 0xd4], edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 0
push 4
lea eax, [esp + 0x2fc]
push eax
mov eax, dword [esp + 0x310]
add eax, 0xfe8
xor eax, dword [0x4b6138]
push eax
push dword [0x4b60a4]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 0
push 0xc
lea eax, [esp + 0x320]
push eax
mov eax, dword [esp + 0x300]
add eax, 0xe38
push eax
push dword [0x4b60a4]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 0
push 0xc
lea eax, [esp + 0xa8]
push eax
push esi
push dword [0x4b60a4]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movq xmm0, qword [esp + 0xa0]
xorps xmm3, xmm3
movq qword [0x4b6598], xmm0
sub esp, 0xc
movss xmm0, dword [esp + 0xac]
mov ecx, esp
subss xmm0, dword [esp + 0x324]
movss xmm2, dword [esp + 0xc4]
movss xmm1, dword [esp + 0xc8]
addss xmm2, xmm3
addss xmm1, dword [0x48c214]
mov eax, dword [esp + 0xb4]
movss dword [esp + 0x34], xmm0
movss xmm0, dword [esp + 0xb0]
subss xmm0, dword [esp + 0x328]
unpcklps xmm2, xmm1
mov dword [0x4b65a0], eax
movq qword [ecx], xmm2
movss dword [esp + 0x24], xmm0
movss xmm0, dword [esp + 0xb4]
subss xmm0, dword [esp + 0x32c]
movss dword [esp + 0x40], xmm0
movss xmm0, dword [esp + 0xcc]
addss xmm0, xmm3
movss dword [esp + 0x27c], xmm0
mov eax, dword [esp + 0x27c]
mov dword [ecx + 8], eax
lea ecx, [esp + 0x330]
call fcn.004328b0
movq xmm0, qword [esp + 0x44]
mov ecx, esp
mov byte [esp + 0x3f], al
movq qword [ecx], xmm0
mov dword [ecx + 8], edi
lea ecx, [esp + 0x2d8]
call fcn.004328b0
mov cl, byte [esp + 0x3f]
add esp, 0xc
or cl, al
mov esi, dword [esp + 0x40]
mov edi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
je 0x436b7c
push 0
push 1
lea eax, [esp + 0x2af]
push eax
lea eax, [esi + 0xf40]
push eax
push dword [0x4b60a4]
call edi
movss xmm0, dword [esp + 0x2d0]
subss xmm0, dword [esp + 0x328]
movss xmm1, dword [esp + 0x28]
mulss xmm1, xmm1
cvttss2si eax, xmm0
movss xmm0, dword [esp + 0x18]
mulss xmm0, xmm0
mov dword [esp + 0x38], eax
cdq
sub eax, edx
addss xmm0, xmm1
sar eax, 1
movss xmm1, dword [esp + 0x34]
mulss xmm1, xmm1
mov dword [esp + 0x1c], eax
addss xmm0, xmm1
xorps xmm1, xmm1
cvtps2pd xmm0, xmm0
ucomisd xmm1, xmm0
ja 0x436807
sqrtsd xmm0, xmm0
jmp 0x43680c
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
xorps xmm2, xmm2
cvtsd2ss xmm2, xmm0
movss xmm0, dword [0x49a34c]
comiss xmm0, xmm2
movss dword [esp + 0x34], xmm2
jb 0x436b7c
cmp byte [0x4b6143], 0
mov al, byte [esp + 0x2a7]
je 0x4369da
test al, al
jne 0x4369da
cvtps2pd xmm0, xmm2
sub esp, 8
mov dword [esp + 0x208], 0xafcd60b5
lea eax, [esp + 0x88]
mov dword [esp + 0x20c], 0x634f8ee9
mov dword [esp + 0x210], 0x6cb81834
mov dword [esp + 0x214], 0xc311cb19
mov dword [esp + 0x218], 0xcda00fef
movaps xmm1, xmmword [esp + 0x208]
movsd qword [esp], xmm0
push eax
movaps xmmword [esp + 0x8c], xmm1
lea eax, [esp + 0x454]
mov dword [esp + 0x220], 0x466feb80
mov dword [esp + 0x224], 0x1de3604
mov dword [esp + 0x228], 0xc311cb19
xorps xmm1, xmmword [esp + 0x21c]
push eax
movaps xmmword [esp + 0x90], xmm1
call fcn.00413750
cvttss2si edx, dword [esp + 0x2e0]
lea eax, [esp + 0x458]
push eax
push 0x4af098
cvttss2si ecx, dword [esp + 0x2e4]
call fcn.0042e860
mov eax, dword [0x4b5f50]
lea ecx, [esp + 0x460]
movss xmm3, dword [0x48c42c]
add esp, 0x14
movss xmm0, dword [eax + 0x18bc]
mov eax, dword [eax + 0x18b8]
movaps xmm2, xmm0
push 0
push ecx
push ecx
lea ecx, [esp + 0xd4]
mov dword [esp], 0xbf800000
push ecx
mov ecx, eax
movss dword [esp + 0x2c], xmm0
mov dword [esp + 0x3c], eax
call fcn.0041fe90
movss xmm0, dword [esp + 0xc4]
xorps xmm1, xmm1
comiss xmm0, xmm1
jbe 0x436971
mov eax, dword [esp + 0x28]
movss xmm1, dword [esp + 0x18]
divss xmm1, dword [eax]
subss xmm0, xmm1
addss xmm0, dword [0x48c208]
movd xmm3, dword [esp + 0x38]
mov ecx, 0x4af188
cvtdq2ps xmm3, xmm3
cvttss2si eax, xmm0
movd xmm0, eax
mov eax, dword [esp + 0x1c]
cvtdq2ps xmm0, xmm0
movd xmm2, eax
cdq
sub eax, edx
movss dword [esp + 0xc4], xmm0
movss xmm0, dword [esp + 0x2cc]
sar eax, 1
cvtdq2ps xmm2, xmm2
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm0, xmm1
movss xmm1, dword [esp + 0x328]
call fcn.0042ec60
movss xmm2, dword [esp + 0x34]
mov al, byte [esp + 0x2a7]
cmp byte [0x4b6142], 0
je 0x436b7c
cmp al, 1
jne 0x436b7c
cvtps2pd xmm0, xmm2
sub esp, 8
mov dword [esp + 0x228], 0x9ef340ad
lea eax, [esp + 0x88]
mov dword [esp + 0x22c], 0x685fcea0
mov dword [esp + 0x230], 0x1de5b62
mov dword [esp + 0x234], 0xc311cb19
mov dword [esp + 0x238], 0xcda00fef
movaps xmm1, xmmword [esp + 0x228]
movsd qword [esp], xmm0
push eax
movaps xmmword [esp + 0x8c], xmm1
lea eax, [esp + 0x554]
mov dword [esp + 0x240], 0x466feb80
mov dword [esp + 0x244], 0x1de3604
mov dword [esp + 0x248], 0xc311cb19
xorps xmm1, xmmword [esp + 0x23c]
push eax
movaps xmmword [esp + 0x90], xmm1
call fcn.00413750
cvttss2si edx, dword [esp + 0x2e0]
lea eax, [esp + 0x558]
push eax
push 0x4af0d8
cvttss2si ecx, dword [esp + 0x2e4]
call fcn.0042e860
mov eax, dword [0x4b5f50]
lea ecx, [esp + 0x560]
movss xmm3, dword [0x48c42c]
add esp, 0x14
movss xmm0, dword [eax + 0x18bc]
mov eax, dword [eax + 0x18b8]
movaps xmm2, xmm0
push 0
push ecx
push ecx
lea ecx, [esp + 0x10c]
mov dword [esp], 0xbf800000
push ecx
mov ecx, eax
movss dword [esp + 0x2c], xmm0
mov dword [esp + 0x3c], eax
call fcn.0041fe90
movss xmm0, dword [esp + 0xfc]
xorps xmm1, xmm1
comiss xmm0, xmm1
jbe 0x436b1a
mov eax, dword [esp + 0x28]
movss xmm1, dword [esp + 0x18]
divss xmm1, dword [eax]
subss xmm0, xmm1
addss xmm0, dword [0x48c208]
mov eax, dword [esp + 0x1c]
movd xmm3, dword [esp + 0x38]
cvtdq2ps xmm3, xmm3
cvttss2si ecx, xmm0
movd xmm2, eax
cdq
sub eax, edx
sar eax, 1
movd xmm0, ecx
mov ecx, 0x4af118
cvtdq2ps xmm0, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [esp + 0xfc], xmm0
movss xmm0, dword [esp + 0x2cc]
cvtdq2ps xmm2, xmm2
subss xmm0, xmm1
movss xmm1, dword [esp + 0x328]
call fcn.0042ec60
jmp 0x436b7c
mov esi, dword [esp + 0x40]
cmp dword [esp + 0x68], 0x250005
jne 0x436d2e
push 0
push 4
lea eax, [esp + 0x2f8]
push eax
mov eax, dword [0x4b6150]
add eax, 0xf46f14
xor eax, dword [0x4b6120]
push eax
push dword [0x4b60a4]
call edi
push 0
push 4
lea eax, [esp + 0x2f4]
push eax
mov eax, dword [esp + 0x2fc]
add eax, 0xfe8
xor eax, dword [0x4b6138]
push eax
push dword [0x4b60a4]
call edi
push 0
push 0xc
lea eax, [esp + 0x338]
push eax
mov eax, dword [esp + 0x2f8]
add eax, 0xe38
push eax
push dword [0x4b60a4]
call edi
push 0
push 0xc
lea eax, [esp + 0x9c]
push eax
lea eax, [esi + 0xe38]
push eax
push dword [0x4b60a4]
call edi
movss xmm1, dword [esp + 0x94]
sub esp, 0xc
subss xmm1, dword [esp + 0x33c]
movq xmm0, qword [esp + 0xa0]
mov eax, esp
mov ecx, dword [esp + 0xa8]
mov dword [0x4b65a0], ecx
movq qword [0x4b6598], xmm0
movss dword [esp + 0x44], xmm1
movss xmm1, dword [esp + 0xa4]
subss xmm1, dword [esp + 0x340]
movq qword [eax], xmm0
mov dword [eax + 8], ecx
lea ecx, [esp + 0x348]
movss dword [esp + 0x24], xmm1
movss xmm1, dword [esp + 0xa8]
subss xmm1, dword [esp + 0x344]
movss dword [esp + 0x28], xmm1
call fcn.004328b0
add esp, 0xc
test al, al
je 0x436d2e
cmp byte [0x4b60ac], 0
je 0x436d2e
movss xmm0, dword [esp + 0x18]
movss xmm1, dword [esp + 0x38]
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm0, xmm1
movss xmm1, dword [esp + 0x1c]
mulss xmm1, xmm1
addss xmm0, xmm1
xorps xmm1, xmm1
cvtps2pd xmm0, xmm0
ucomisd xmm1, xmm0
ja 0x436ce0
sqrtsd xmm0, xmm0
jmp 0x436ce5
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
cvtsd2ss xmm0, xmm0
sub esp, 8
lea eax, [esp + 0x7250]
cvtss2sd xmm0, xmm0
movsd qword [esp], xmm0
push str.Vehicle___0.1f_
push eax
call fcn.00440a80
cvttss2si edx, dword [esp + 0x350]
lea eax, [esp + 0x7258]
push eax
push 0x4af188
cvttss2si ecx, dword [esp + 0x354]
call fcn.0042e860
add esp, 0x18
mov eax, dword [0x4b65b8]
mov esi, dword [esp + 0x7c]
sub eax, dword [0x4b65b4]
inc esi
sar eax, 4
mov dword [esp + 0x7c], esi
cmp esi, eax
jbe 0x434c25
cmp dword [0x4b6124], 0
je 0x436d64
cmp byte [0x4b60b9], 0
je 0x436d64
call fcn.00433060
mov ecx, dword [esp + 0x764c]
pop edi
pop esi
xor ecx, esp
call fcn.00478b79
mov esp, ebp
pop ebp
ret