Function at 0x43cf30
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Log keystrokes via polling
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
mov eax, 0x6978
call fcn.00482950
mov eax, dword [0x4a5080]
xor eax, esp
mov dword [esp + 0x6974], eax
mov eax, dword [0x4accf8]
push esi
push edi
cmp eax, dword [0x4accfc]
je 0x441dc6
movss xmm0, dword [0x497364]
xor esi, esi
mov edi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss dword [esp + 0x60], xmm0
mov dword [0x4ac870], 0
mov dword [esp + 0x90], esi
nop dword [eax + eax]
mov eax, esi
shl eax, 4
add eax, dword [0x4accf8]
movups xmm0, xmmword [eax]
movd esi, xmm0
movaps xmmword [esp + 0x70], xmm0
mov dword [esp + 0x10], esi
cmp esi, dword [0x4ac888]
jne 0x43cfbe
cmp dword [esp + 0x74], 0
je 0x441d8a
push 0
push 4
lea eax, [esp + 0x5b8]
push eax
lea eax, [esi + 0x2204]
push eax
push dword [0x4ac7fc]
call edi
movss xmm0, dword [esp + 0x5b0]
mov eax, esi
or eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x78]
movss dword [esp + 0x4c0], xmm0
je 0x440a56
cmp ecx, 0x20
je 0x43d009
cmp ecx, 0x21
jne 0x440a56
comiss xmm0, dword [0x497110]
jb 0x440a56
movss xmm1, dword [0x497328]
comiss xmm1, xmm0
jb 0x440a56
push 0
push 4
lea eax, [esp + 0x5b4]
push eax
mov eax, dword [0x4ac894]
add eax, 0xf56d10
xor eax, dword [0x4ac86c]
push eax
push dword [0x4ac7fc]
call edi
push 0
push 4
lea eax, [esp + 0x5b0]
push eax
mov eax, dword [esp + 0x5b8]
add eax, 0x1004
xor eax, dword [0x4ac884]
push eax
push dword [0x4ac7fc]
call edi
push 0
push 0xc
lea eax, [esp + 0x60c]
push eax
mov eax, dword [esp + 0x5b4]
add eax, 0x24c
push eax
push dword [0x4ac7fc]
call edi
push 0
push 0xc
lea eax, [esp + 0xa8]
push eax
lea eax, [esi + 0x24c]
push eax
push dword [0x4ac7fc]
call edi
movss xmm1, dword [esp + 0xa0]
movss xmm2, dword [esp + 0xa4]
subss xmm2, dword [esp + 0x608]
subss xmm1, dword [esp + 0x604]
movq xmm0, qword [esp + 0xa0]
mov eax, dword [esp + 0xa8]
movq qword [0x4acce0], xmm0
movss xmm0, dword [esp + 0xa8]
subss xmm0, dword [esp + 0x60c]
mulss xmm2, xmm2
mov dword [0x4acce8], eax
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm2, xmm1
xorps xmm1, xmm1
addss xmm2, xmm0
cvtps2pd xmm0, xmm2
ucomisd xmm1, xmm0
ja 0x43d128
sqrtsd xmm0, xmm0
jmp 0x43d12d
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
cvtsd2ss xmm0, xmm0
push 6
mov edx, esi
lea ecx, [esp + 0x2b8]
movss dword [esp + 0x68], xmm0
call fcn.0043abf0
mov eax, dword [0x4ac828]
add esp, 4
sub eax, 0
je 0x43d167
sub eax, 1
jne 0x43d175
mov eax, 3
mov dword [esp + 0x8c], eax
jmp 0x43d17c
mov eax, 6
mov dword [esp + 0x8c], eax
jmp 0x43d17c
mov eax, dword [esp + 0x8c]
push eax
mov edx, esi
lea ecx, [esp + 0x2ac]
call fcn.0043abf0
movq xmm0, qword [esp + 0x2ac]
sub esp, 8
mov eax, dword [esp + 0x2bc]
mov ecx, esp
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
mov ecx, 0x4accec
call fcn.0043add0
movq xmm0, qword [0x4acce0]
mov ecx, esp
mov eax, dword [0x4acce8]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
lea ecx, [esp + 0x4a0]
call fcn.0043add0
movq xmm0, qword [esp + 0x2c0]
mov ecx, esp
mov eax, dword [esp + 0x2c8]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
mov ecx, 0x4acd04
call fcn.0043add0
add esp, 0xc
test al, al
je 0x440a52
push 0xff
lea eax, [esp + 0xe7c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [0x4a5304]
add esp, 0xc
movss xmm1, dword [esp + 0x64]
comiss xmm0, xmm1
jb 0x43dbc2
movss xmm1, dword [0x4acd08]
movss xmm0, dword [esp + 0x498]
subss xmm0, xmm1
movss dword [esp + 0xc], xmm1
cvttss2si eax, xmm0
mov dword [esp + 0x4b0], eax
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
cmp byte [0x4ac7f5], 0
mov dword [esp + 0x40], ecx
je 0x43d33e
mov dword [esp + 0x1f0], 0xd157c0d8
lea eax, [esp + 0x50]
mov dword [esp + 0x1f4], 0x51f67bec
sub esp, 8
mov dword [esp + 0x200], 0xca51b02e
mov dword [esp + 0x204], 0x6c1a2c64
movaps xmm1, xmmword [esp + 0x1f8]
movaps xmmword [esp + 0x58], xmm1
mov dword [esp + 0x208], 0xb779f0fd
mov dword [esp + 0x20c], 0x51f67b81
mov dword [esp + 0x210], 0xca51b02e
mov dword [esp + 0x214], 0x6c1a2c64
movaps xmm0, xmmword [esp + 0x208]
xorps xmm0, xmm1
movaps xmmword [esp + 0x58], xmm0
movss xmm0, dword [esp + 0x6c]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push eax
lea eax, [esp + 0xe84]
push eax
call fcn.0041cfb0
cvttss2si edx, dword [esp + 0x4a8]
lea eax, [esp + 0xe88]
push eax
push 0x4a5e80
cvttss2si ecx, dword [esp + 0x4ac]
call fcn.00436c40
movss xmm0, dword [0x4acd08]
add esp, 0x18
mov ecx, dword [esp + 0x40]
movss dword [esp + 0xc], xmm0
cmp byte [0x4ac867], 0
je 0x43db59
mov eax, 0x66666667
movss xmm1, dword [esp + 0x494]
imul ecx
mov eax, 0x66666667
sar edx, 2
mov esi, edx
shr esi, 0x1f
add esi, edx
imul dword [esp + 0x4b0]
mov eax, ecx
sar edx, 2
mov edi, edx
shr edi, 0x1f
add edi, edx
cdq
sub eax, edx
mov edx, 1
sar eax, 1
push str.Foreground
movd xmm0, eax
mov eax, dword [0x4ac6b0]
cvtdq2ps xmm0, xmm0
mov eax, dword [eax + 0x47c4]
subss xmm1, xmm0
movd xmm0, ecx
mov ecx, dword [eax]
cvtdq2ps xmm0, xmm0
movss dword [esp + 0x38], xmm1
movss dword [esp + 0x3c], xmm0
movd xmm0, dword [esp + 0x4b4]
cvtdq2ps xmm0, xmm0
movss dword [esp + 0x40], xmm0
call fcn.00409e10
movss xmm3, dword [esp + 0x10]
lea ecx, [esp + 0xf8]
movss xmm2, dword [esp + 0x38]
movaps xmm1, xmm3
movd xmm0, edi
cvtdq2ps xmm0, xmm0
mov dword [esp], 0x40a00000
push 0xff010202
push ecx
lea ecx, [esp + 0xd8]
movss dword [esp + 0x100], xmm2
addss xmm1, xmm0
movss dword [esp + 0xd8], xmm2
push ecx
mov ecx, eax
movss dword [esp + 0xe0], xmm3
movss dword [esp + 0x78], xmm1
movss dword [esp + 0x108], xmm1
call fcn.00427170
mov eax, dword [0x4ac6b0]
mov edx, 1
push str.Foreground
mov eax, dword [eax + 0x47c4]
mov ecx, dword [eax]
call fcn.00409e10
movss xmm2, dword [esp + 0x38]
lea ecx, [esp + 0x108]
movd xmm0, esi
movaps xmm1, xmm2
cvtdq2ps xmm0, xmm0
mov dword [esp], 0x40a00000
push 0xff010202
push ecx
lea ecx, [esp + 0x118]
movss dword [esp + 0x118], xmm2
addss xmm1, xmm0
movss xmm0, dword [esp + 0x18]
push ecx
mov ecx, eax
movss dword [esp + 0x118], xmm0
movss dword [esp + 0x120], xmm0
movss dword [esp + 0x7c], xmm1
movss dword [esp + 0x114], xmm1
call fcn.00427170
mov eax, dword [0x4ac6b0]
mov edx, 1
push str.Foreground
mov eax, dword [eax + 0x47c4]
mov ecx, dword [eax]
call fcn.00409e10
movss xmm0, dword [esp + 0x3c]
lea ecx, [esp + 0x118]
addss xmm0, dword [esp + 0x38]
movss xmm2, dword [esp + 0x10]
mov dword [esp], 0x40a00000
push 0xff010202
push ecx
movaps xmm1, xmm0
movss dword [esp + 0x44], xmm0
movss dword [esp + 0x120], xmm0
lea ecx, [esp + 0x128]
movd xmm0, esi
cvtdq2ps xmm0, xmm0
push ecx
mov ecx, eax
movss dword [esp + 0x128], xmm2
subss xmm1, xmm0
movss dword [esp + 0x130], xmm2
movss dword [esp + 0x5c], xmm1
movss dword [esp + 0x12c], xmm1
call fcn.00427170
mov eax, dword [0x4ac6b0]
mov edx, 1
push str.Foreground
mov eax, dword [eax + 0x47c4]
mov ecx, dword [eax]
call fcn.00409e10
movss xmm0, dword [esp + 0x6c]
lea ecx, [esp + 0x128]
movss xmm1, dword [esp + 0x3c]
mov dword [esp], 0x40a00000
push 0xff010202
push ecx
lea ecx, [esp + 0x138]
movss dword [esp + 0x134], xmm0
movss xmm0, dword [esp + 0x18]
push ecx
mov ecx, eax
movss dword [esp + 0x134], xmm1
movss dword [esp + 0x13c], xmm1
movss dword [esp + 0x140], xmm0
call fcn.00427170
mov eax, dword [0x4ac6b0]
mov edx, 1
push str.Foreground
mov eax, dword [eax + 0x47c4]
mov ecx, dword [eax]
call fcn.00409e10
movss xmm0, dword [esp + 0x38]
lea ecx, [esp + 0x138]
movss xmm1, dword [esp + 0x40]
addss xmm1, dword [esp + 0x10]
movss dword [esp + 0x138], xmm0
movss dword [esp + 0x140], xmm0
movd xmm0, edi
cvtdq2ps xmm0, xmm0
mov dword [esp], 0x40a00000
push 0xff010202
push ecx
lea ecx, [esp + 0x148]
movss dword [esp + 0x48], xmm1
movss dword [esp + 0x144], xmm1
subss xmm1, xmm0
push ecx
mov ecx, eax
movss dword [esp + 0x30], xmm1
movss dword [esp + 0x150], xmm1
call fcn.00427170
mov eax, dword [0x4ac6b0]
mov edx, 1
push str.Foreground
mov eax, dword [eax + 0x47c4]
mov ecx, dword [eax]
call fcn.00409e10
movss xmm0, dword [esp + 0x70]
movss xmm2, dword [esp + 0x38]
movss dword [esp + 0x148], xmm0
movss xmm0, dword [esp + 0x40]
movss dword [esp + 0x14c], xmm0
mov dword [esp], 0x40a00000
lea ecx, [esp + 0x148]
push 0xff010202
push ecx
lea ecx, [esp + 0x158]
movss dword [esp + 0x158], xmm2
push ecx
mov ecx, eax
movss dword [esp + 0x160], xmm0
call fcn.00427170
mov eax, dword [0x4ac6b0]
mov edx, 1
push str.Foreground
mov eax, dword [eax + 0x47c4]
mov ecx, dword [eax]
call fcn.00409e10
movss xmm0, dword [esp + 0x3c]
lea ecx, [esp + 0x158]
movss xmm1, dword [esp + 0x40]
mov dword [esp], 0x40a00000
push 0xff010202
push ecx
lea ecx, [esp + 0x168]
movss dword [esp + 0x160], xmm0
movss xmm0, dword [esp + 0x58]
push ecx
mov ecx, eax
movss dword [esp + 0x168], xmm1
movss dword [esp + 0x16c], xmm0
movss dword [esp + 0x170], xmm1
call fcn.00427170
mov eax, dword [0x4ac6b0]
mov edx, 1
push str.Foreground
mov eax, dword [eax + 0x47c4]
mov ecx, dword [eax]
call fcn.00409e10
movss xmm0, dword [esp + 0x40]
lea ecx, [esp + 0x168]
movss xmm1, dword [esp + 0x3c]
mov dword [esp], 0x40a00000
push 0xff010202
push ecx
lea ecx, [esp + 0x178]
movss dword [esp + 0x174], xmm0
movss xmm0, dword [esp + 0x2c]
push ecx
mov ecx, eax
movss dword [esp + 0x174], xmm1
movss dword [esp + 0x17c], xmm1
movss dword [esp + 0x180], xmm0
call fcn.00427170
mov eax, dword [0x4ac6b0]
mov edx, 1
push str.Foreground
mov eax, dword [eax + 0x47c4]
mov ecx, dword [eax]
call fcn.00409e10
movss xmm0, dword [esp + 0x6c]
lea ecx, [esp + 0x178]
movss xmm1, dword [esp + 0x38]
mov dword [esp], 0x3f800000
push 0xc80000ff
push ecx
lea ecx, [esp + 0x188]
movss dword [esp + 0x184], xmm0
movss xmm0, dword [esp + 0x18]
push ecx
mov ecx, eax
movss dword [esp + 0x184], xmm1
movss dword [esp + 0x18c], xmm1
movss dword [esp + 0x190], xmm0
call fcn.00427170
mov eax, dword [0x4ac6b0]
mov edx, 1
push str.Foreground
mov eax, dword [eax + 0x47c4]
mov ecx, dword [eax]
call fcn.00409e10
movss xmm0, dword [esp + 0x70]
movss dword [esp + 0x188], xmm0
movss xmm0, dword [esp + 0x10]
lea ecx, [esp + 0x188]
movss xmm2, dword [esp + 0x38]
mov dword [esp], 0x3f800000
push 0xc80000ff
push ecx
lea ecx, [esp + 0x198]
movss dword [esp + 0x194], xmm0
push ecx
mov ecx, eax
movss dword [esp + 0x19c], xmm2
movss dword [esp + 0x1a0], xmm0
call fcn.00427170
mov eax, dword [0x4ac6b0]
mov edx, 1
push str.Foreground
mov eax, dword [eax + 0x47c4]
mov ecx, dword [eax]
call fcn.00409e10
movss xmm0, dword [esp + 0x3c]
lea ecx, [esp + 0x198]
movss xmm1, dword [esp + 0x10]
mov dword [esp], 0x3f800000
push 0xc80000ff
push ecx
lea ecx, [esp + 0x1a8]
movss dword [esp + 0x1a0], xmm0
movss xmm0, dword [esp + 0x58]
push ecx
mov ecx, eax
movss dword [esp + 0x1a8], xmm1
movss dword [esp + 0x1ac], xmm0
movss dword [esp + 0x1b0], xmm1
call fcn.00427170
mov eax, dword [0x4ac6b0]
mov edx, 1
push str.Foreground
mov eax, dword [eax + 0x47c4]
mov ecx, dword [eax]
call fcn.00409e10
movss xmm0, dword [esp + 0x6c]
lea ecx, [esp + 0x1a8]
movss xmm1, dword [esp + 0x3c]
mov dword [esp], 0x3f800000
push 0xc80000ff
push ecx
lea ecx, [esp + 0x1b8]
movss dword [esp + 0x1b4], xmm0
movss xmm0, dword [esp + 0x18]
push ecx
mov ecx, eax
movss dword [esp + 0x1b4], xmm1
movss dword [esp + 0x1bc], xmm1
movss dword [esp + 0x1c0], xmm0
call fcn.00427170
mov eax, dword [0x4ac6b0]
mov edx, 1
push str.Foreground
mov eax, dword [eax + 0x47c4]
mov ecx, dword [eax]
call fcn.00409e10
movss xmm0, dword [esp + 0x38]
lea ecx, [esp + 0x1b8]
movss xmm1, dword [esp + 0x40]
mov dword [esp], 0x3f800000
push 0xc80000ff
push ecx
lea ecx, [esp + 0x1c8]
movss dword [esp + 0x1c0], xmm0
movss dword [esp + 0x1c8], xmm0
movss xmm0, dword [esp + 0x2c]
push ecx
mov ecx, eax
movss dword [esp + 0x1c8], xmm1
movss dword [esp + 0x1d0], xmm0
call fcn.00427170
mov eax, dword [0x4ac6b0]
mov edx, 1
push str.Foreground
mov eax, dword [eax + 0x47c4]
mov ecx, dword [eax]
call fcn.00409e10
movss xmm0, dword [esp + 0x70]
lea ecx, [esp + 0x1c8]
movss xmm2, dword [esp + 0x38]
mov dword [esp], 0x3f800000
push 0xc80000ff
push ecx
lea ecx, [esp + 0x1d8]
movss dword [esp + 0x1d0], xmm0
movss xmm0, dword [esp + 0x48]
push ecx
mov ecx, eax
movss dword [esp + 0x1d8], xmm0
movss dword [esp + 0x1dc], xmm2
movss dword [esp + 0x1e0], xmm0
call fcn.00427170
mov eax, dword [0x4ac6b0]
mov edx, 1
push str.Foreground
mov eax, dword [eax + 0x47c4]
mov ecx, dword [eax]
call fcn.00409e10
movss xmm0, dword [esp + 0x3c]
lea ecx, [esp + 0xc8]
movss xmm1, dword [esp + 0x40]
mov dword [esp], 0x3f800000
push 0xc80000ff
push ecx
lea ecx, [esp + 0x108]
movss dword [esp + 0xd0], xmm0
movss xmm0, dword [esp + 0x58]
push ecx
mov ecx, eax
movss dword [esp + 0xd8], xmm1
movss dword [esp + 0x10c], xmm0
movss dword [esp + 0x110], xmm1
call fcn.00427170
mov eax, dword [0x4ac6b0]
mov edx, 1
push str.Foreground
mov eax, dword [eax + 0x47c4]
mov ecx, dword [eax]
call fcn.00409e10
movss xmm0, dword [esp + 0x40]
lea ecx, [esp + 0xf0]
movss xmm1, dword [esp + 0x3c]
mov dword [esp], 0x3f800000
push 0xc80000ff
push ecx
lea ecx, [esp + 0xf0]
movss dword [esp + 0xfc], xmm0
movss xmm0, dword [esp + 0x2c]
push ecx
mov ecx, eax
movss dword [esp + 0xfc], xmm1
movss dword [esp + 0xf4], xmm1
movss dword [esp + 0xf8], xmm0
call fcn.00427170
mov edi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov esi, dword [esp + 0x10]
cmp byte [0x4ac810], 0
je 0x43db6e
mov edx, 0x4a5e70
mov ecx, esi
call fcn.0043bff0
cmp byte [0x4ac813], 0
je 0x43dbbc
movd xmm1, dword [esp + 0x40]
cvtdq2ps xmm1, xmm1
movss xmm0, dword [esp + 0x494]
divss xmm1, dword [0x497140]
movd xmm3, dword [esp + 0x4b0]
cvttss2si edx, dword [esp + 0x498]
movss xmm2, dword [esp + 0x4c0]
subss xmm0, xmm1
cvtdq2ps xmm3, xmm3
cvttss2si ecx, xmm0
call fcn.0043b3c0
movss xmm1, dword [esp + 0x64]
movss xmm0, dword [0x4a52f8]
comiss xmm0, xmm1
jb 0x440a52
mov eax, dword [0x4ac89c]
movss xmm2, dword [0x4accec]
movss xmm1, dword [0x4accf0]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
mov eax, dword [0x4ac898]
cvtdq2ps xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
cmp byte [0x4ac816], 0
subss xmm2, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm2, xmm2
subss xmm1, xmm0
mulss xmm1, xmm1
addss xmm1, xmm2
cvtps2pd xmm0, xmm1
xorps xmm1, xmm1
je 0x43dc63
ucomisd xmm1, xmm0
ja 0x43dc34
sqrtsd xmm0, xmm0
jmp 0x43dc39
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
movd xmm0, dword [0x4a5c2c]
cvtdq2ps xmm0, xmm0
comiss xmm0, xmm1
jbe 0x43dc8f
movss xmm0, dword [esp + 0x60]
comiss xmm0, xmm1
jbe 0x43dc8f
movss dword [esp + 0x60], xmm1
jmp 0x43dc89
ucomisd xmm1, xmm0
ja 0x43dc6f
sqrtsd xmm0, xmm0
jmp 0x43dc74
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
movss xmm1, dword [esp + 0x60]
cvtsd2ss xmm0, xmm0
comiss xmm1, xmm0
jbe 0x43dc8f
movss dword [esp + 0x60], xmm0
mov dword [0x4ac870], esi
cmp byte [0x4ac7f4], 0
je 0x43dfe8
push 0
push 4
lea eax, [esp + 0x5ac]
push eax
lea eax, [esi + 0xe38]
push eax
push dword [0x4ac7fc]
call edi
movss xmm0, dword [esp + 0x5a4]
lea eax, [esp + 0x5a0]
push 0
push 4
push eax
lea eax, [esi + 0xe3c]
movss dword [esp + 0x4bc], xmm0
push eax
push dword [0x4ac7fc]
call edi
movss xmm0, dword [esp + 0x5a0]
lea eax, [esp + 0x584]
push 0
push 4
push eax
lea eax, [esi + 0xe40]
movss dword [esp + 0x4c], xmm0
push eax
push dword [0x4ac7fc]
call edi
movss xmm0, dword [esp + 0x4b0]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x43dd48
movss xmm0, dword [esp + 0x40]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x43dd48
movss xmm0, dword [esp + 0x584]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x43dfe8
push 0x400
lea eax, [esp + 0x157c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x4bc]
lea eax, [esp + 0x1584]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push 0x49630c
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0x1588]
subss xmm0, dword [0x497300]
cvttss2si ecx, dword [esp + 0x4a4]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
call fcn.00436c40
add esp, 0x18
lea eax, [esp + 0x59c]
push 0
push 4
push eax
mov eax, dword [0x4ac894]
add eax, 0xc12f3c
push eax
push dword [0x4ac7fc]
call edi
push 0
push 4
lea eax, [esp + 0x5a0]
push eax
mov eax, dword [esp + 0x5a8]
add eax, 0x14
push eax
push dword [0x4ac7fc]
call edi
push 0
push 4
lea eax, [esp + 0x59c]
push eax
mov eax, dword [esp + 0x5a4]
add eax, 0x3c
push eax
push dword [0x4ac7fc]
call edi
push 0
push 4
lea eax, [esp + 0x598]
push eax
push dword [esp + 0x5a0]
push dword [0x4ac7fc]
call edi
mov esi, dword [esp + 0x590]
lea ecx, [esp + 0x638]
push 0
push 8
push ecx
lea eax, [esi + 0x1a8]
push eax
push dword [0x4ac7fc]
mov dword [esp + 0x4d4], eax
call edi
push 0
push 8
lea ecx, [esp + 0x648]
lea eax, [esi + 0x1b0]
push ecx
push eax
push dword [0x4ac7fc]
mov dword [esp + 0x34], eax
call edi
push 0
lea eax, [esi + 0x1b8]
push 8
lea ecx, [esp + 0x650]
mov dword [esp + 0x54], eax
push ecx
push eax
push dword [0x4ac7fc]
call edi
push 0x47
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x43dfe8
movss xmm0, dword [esp + 0x4b0]
lea eax, [esp + 0x57c]
mov esi, dword [esp + 0x4c0]
push eax
push 0x40
cvtps2pd xmm0, xmm0
push 8
push esi
push dword [0x4ac7fc]
movsd qword [esp + 0x4c4], xmm0
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
push 0
push 8
lea eax, [esp + 0x4b8]
push eax
push esi
push dword [0x4ac7fc]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea eax, [esp + 0x57c]
push eax
push dword [esp + 0x580]
push 8
push esi
push dword [0x4ac7fc]
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
movss xmm0, dword [esp + 0x40]
lea eax, [esp + 0x580]
addss xmm0, dword [0x4971f8]
mov esi, dword [esp + 0x20]
push eax
push 0x40
push 8
cvtps2pd xmm0, xmm0
push esi
push dword [0x4ac7fc]
movsd qword [esp + 0x4d4], xmm0
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
push 0
push 8
lea eax, [esp + 0x4c8]
push eax
push esi
push dword [0x4ac7fc]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea eax, [esp + 0x580]
push eax
push dword [esp + 0x584]
push 8
push esi
push dword [0x4ac7fc]
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
movss xmm0, dword [esp + 0x584]
lea eax, [esp + 0x588]
mov esi, dword [esp + 0x4c]
push eax
push 0x40
cvtps2pd xmm0, xmm0
push 8
push esi
push dword [0x4ac7fc]
movsd qword [esp + 0x63c], xmm0
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
push 0
push 8
lea eax, [esp + 0x630]
push eax
push esi
push dword [0x4ac7fc]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea eax, [esp + 0x588]
push eax
push dword [esp + 0x58c]
push 8
push esi
push dword [0x4ac7fc]
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
cmp byte [0x4ac805], 0
mov esi, dword [esp + 0x10]
je 0x43e1f9
push 0
push 4
lea eax, [esp + 0x5c8]
push eax
lea eax, [esi + 0x2398]
push eax
push dword [0x4ac7fc]
call edi
mov eax, dword [esp + 0x5c0]
push 0
mov dword [esp + 0x44], eax
lea eax, [esp + 0x5e0]
push 4
push eax
lea eax, [esi + 0xfd0]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x40], 0
je 0x43e1f9
push 0xff
lea eax, [esp + 0xf7c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x1078]
push 0xff
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x4c]
lea ecx, [esp + 0x440]
xor eax, eax
add esp, 0xc
xorps xmm0, xmm0
mov word [esp + 0x4bc], ax
mov byte [esp + 0x4be], al
movq qword [esp + 0x434], xmm0
mov dword [esp + 0x43c], eax
call fcn.00437550
push dword [esp + 0x5dc]
mov dword [esp + 0x214], 0xb77983d8
lea eax, [esp + 0x54]
push dword [esp + 0x438]
mov dword [esp + 0x21c], 0x51f67b81
mov dword [esp + 0x220], 0xca51b02e
mov dword [esp + 0x224], 0x6c1a2c64
movaps xmm1, xmmword [esp + 0x218]
movaps xmmword [esp + 0x58], xmm1
mov dword [esp + 0x228], 0xb779f0fd
mov dword [esp + 0x22c], 0x51f67b81
mov dword [esp + 0x230], 0xca51b02e
mov dword [esp + 0x234], 0x6c1a2c64
movaps xmm0, xmmword [esp + 0x228]
push eax
lea eax, [esp + 0xf84]
xorps xmm0, xmm1
push eax
movaps xmmword [esp + 0x60], xmm0
call fcn.00449910
lea eax, [esp + 0x1088]
push str.WEAPON:
push eax
call fcn.00449910
movss xmm0, dword [esp + 0x4b0]
lea eax, [esp + 0xf90]
addss xmm0, dword [0x4972d8]
cvttss2si ecx, dword [esp + 0x4ac]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4b8]
lea eax, [esp + 0x1098]
addss xmm0, dword [0x4972d8]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4bc]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4c0]
lea eax, [esp + 0x4e4]
addss xmm0, dword [0x4972d8]
push eax
push 0x4a5d20
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4c4]
addss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x30
cmp byte [0x4ac6c4], 0
je 0x43e324
push 0
push 4
lea eax, [esp + 0x594]
push eax
lea eax, [esi + 0x2fc0]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x58c], 0
je 0x43e324
push 0x400
lea eax, [esp + 0x197c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x1d78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x598]
lea ecx, [esp + 0x434]
add esp, 0xc
mov dword [esp + 0x430], 0
xorps xmm0, xmm0
movq qword [esp + 0x428], xmm0
call fcn.00437550
push dword [esp + 0x428]
lea eax, [esp + 0x197c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0x1d78]
push str.WEAPON_2:
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x1980]
addss xmm0, dword [0x4972f4]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0x1d88]
addss xmm0, dword [0x4972f4]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
cmp byte [0x4ac878], 0
je 0x43e44f
push 0
push 4
lea eax, [esp + 0x4f0]
push eax
lea eax, [esi + 0x2520]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x4e8], 0
je 0x43e44f
push 0x400
lea eax, [esp + 0x217c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x2578]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x4f4]
lea ecx, [esp + 0x428]
add esp, 0xc
mov dword [esp + 0x424], 0
xorps xmm0, xmm0
movq qword [esp + 0x41c], xmm0
call fcn.00437550
push dword [esp + 0x41c]
lea eax, [esp + 0x217c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0x2578]
push str.HELMET:
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x2180]
addss xmm0, dword [0x4972f8]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0x2588]
addss xmm0, dword [0x4972f8]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
cmp byte [0x4ac6bb], 0
je 0x43e57a
push 0
push 4
lea eax, [esp + 0x4f4]
push eax
lea eax, [esi + 0x24e8]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x4ec], 0
je 0x43e57a
push 0x400
lea eax, [esp + 0x297c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x2d78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x4f8]
lea ecx, [esp + 0x41c]
add esp, 0xc
mov dword [esp + 0x418], 0
xorps xmm0, xmm0
movq qword [esp + 0x410], xmm0
call fcn.00437550
push dword [esp + 0x410]
lea eax, [esp + 0x297c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0x2d78]
push str.ARMOR:
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x2980]
addss xmm0, dword [0x4972fc]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0x2d88]
addss xmm0, dword [0x4972fc]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
cmp byte [0x4ac6c6], 0
je 0x440a52
push 0
push 4
lea eax, [esp + 0x4f8]
push eax
lea eax, [esi + 0x2df4]
push eax
push dword [0x4ac7fc]
call edi
movss xmm0, dword [esp + 0x4f0]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x43e624
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x4fc]
lea eax, [esp + 0x684]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push str.HP_:__0.0f
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0x688]
subss xmm0, dword [0x4972f8]
cvttss2si ecx, dword [esp + 0x4a4]
push eax
push 0x4a5c70
cvttss2si edx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x4fc]
push eax
lea eax, [esi + 0x2398]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x4f4], 0
je 0x43e7b4
push 0xff
lea eax, [esp + 0xa7c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x678]
push 0xff
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x500]
lea ecx, [esp + 0x410]
add esp, 0xc
mov dword [esp + 0x40c], 0
xorps xmm0, xmm0
movq qword [esp + 0x404], xmm0
call fcn.00437550
push dword [esp + 0x404]
lea eax, [esp + 0x54]
mov dword [esp + 0x234], 0xb77983d8
mov dword [esp + 0x238], 0x51f67b81
mov dword [esp + 0x23c], 0xca51b02e
mov dword [esp + 0x240], 0x6c1a2c64
movaps xmm1, xmmword [esp + 0x234]
push eax
movaps xmmword [esp + 0x58], xmm1
lea eax, [esp + 0xa80]
mov dword [esp + 0x248], 0xb779f0fd
mov dword [esp + 0x24c], 0x51f67b81
mov dword [esp + 0x250], 0xca51b02e
mov dword [esp + 0x254], 0x6c1a2c64
xorps xmm1, xmmword [esp + 0x248]
push eax
movaps xmmword [esp + 0x5c], xmm1
call fcn.00449910
add esp, 0xc
lea eax, [esp + 0x678]
push 0x496350
push eax
call fcn.00449910
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0xa80]
addss xmm0, dword [0x4972d8]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0x688]
addss xmm0, dword [0x4972d8]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x500]
push eax
lea eax, [esi + 0x23d0]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x4f8], 0
je 0x43e8d2
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x504]
lea ecx, [esp + 0x404]
add esp, 0xc
mov dword [esp + 0x400], 0
xorps xmm0, xmm0
movq qword [esp + 0x3f8], xmm0
call fcn.00437550
push dword [esp + 0x3f8]
lea eax, [esp + 0x67c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x49635c
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x680]
addss xmm0, dword [0x4972ec]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0xa88]
addss xmm0, dword [0x4972ec]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x574]
push eax
lea eax, [esi + 0x2408]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x56c], 0
je 0x43e9f0
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x578]
lea ecx, [esp + 0x3f8]
add esp, 0xc
mov dword [esp + 0x3f4], 0
xorps xmm0, xmm0
movq qword [esp + 0x3ec], xmm0
call fcn.00437550
push dword [esp + 0x3ec]
lea eax, [esp + 0x67c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x496368
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x680]
addss xmm0, dword [0x4972f8]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0xa88]
addss xmm0, dword [0x4972f8]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x504]
push eax
lea eax, [esi + 0x2440]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x4fc], 0
je 0x43eb0e
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x508]
lea ecx, [esp + 0x3ec]
add esp, 0xc
mov dword [esp + 0x3e8], 0
xorps xmm0, xmm0
movq qword [esp + 0x3e0], xmm0
call fcn.00437550
push dword [esp + 0x3e0]
lea eax, [esp + 0x67c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x496378
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x680]
addss xmm0, dword [0x497300]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0xa88]
addss xmm0, dword [0x497300]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x508]
push eax
lea eax, [esi + 0x2478]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x500], 0
je 0x43ec2c
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x50c]
lea ecx, [esp + 0x3e0]
add esp, 0xc
mov dword [esp + 0x3dc], 0
xorps xmm0, xmm0
movq qword [esp + 0x3d4], xmm0
call fcn.00437550
push dword [esp + 0x3d4]
lea eax, [esp + 0x67c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x496388
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x680]
addss xmm0, dword [0x49730c]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0xa88]
addss xmm0, dword [0x49730c]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x50c]
push eax
lea eax, [esi + 0x24b0]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x504], 0
je 0x43ed4a
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x510]
lea ecx, [esp + 0x3d4]
add esp, 0xc
mov dword [esp + 0x3d0], 0
xorps xmm0, xmm0
movq qword [esp + 0x3c8], xmm0
call fcn.00437550
push dword [esp + 0x3c8]
lea eax, [esp + 0x67c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x496398
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x680]
addss xmm0, dword [0x497314]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0xa88]
addss xmm0, dword [0x497314]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x510]
push eax
lea eax, [esi + 0x24e8]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x508], 0
je 0x43ee68
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x514]
lea ecx, [esp + 0x44c]
add esp, 0xc
mov dword [esp + 0x448], 0
xorps xmm0, xmm0
movq qword [esp + 0x440], xmm0
call fcn.00437550
push dword [esp + 0x440]
lea eax, [esp + 0x67c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x4963a8
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x680]
addss xmm0, dword [0x49731c]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0xa88]
addss xmm0, dword [0x49731c]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x514]
push eax
lea eax, [esi + 0x2520]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x50c], 0
je 0x43ef86
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x518]
lea ecx, [esp + 0x458]
add esp, 0xc
mov dword [esp + 0x454], 0
xorps xmm0, xmm0
movq qword [esp + 0x44c], xmm0
call fcn.00437550
push dword [esp + 0x44c]
lea eax, [esp + 0x67c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0xa78]
push str.:
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x680]
addss xmm0, dword [0x497320]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0xa88]
addss xmm0, dword [0x497320]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x518]
push eax
lea eax, [esi + 0x2558]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x510], 0
je 0x43f0a4
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x51c]
lea ecx, [esp + 0x464]
add esp, 0xc
mov dword [esp + 0x460], 0
xorps xmm0, xmm0
movq qword [esp + 0x458], xmm0
call fcn.00437550
push dword [esp + 0x458]
lea eax, [esp + 0x67c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0xa78]
push str._1:
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x680]
addss xmm0, dword [0x497324]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0xa88]
addss xmm0, dword [0x497324]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x51c]
push eax
lea eax, [esi + 0x2590]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x514], 0
je 0x43f1c2
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x520]
lea ecx, [esp + 0x470]
add esp, 0xc
mov dword [esp + 0x46c], 0
xorps xmm0, xmm0
movq qword [esp + 0x464], xmm0
call fcn.00437550
push dword [esp + 0x464]
lea eax, [esp + 0x67c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0xa78]
push str._2:
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x680]
addss xmm0, dword [0x497324]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0xa88]
addss xmm0, dword [0x497324]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x520]
push eax
lea eax, [esi + 0x25c8]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x518], 0
je 0x43f2e0
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x524]
lea ecx, [esp + 0x47c]
add esp, 0xc
mov dword [esp + 0x478], 0
xorps xmm0, xmm0
movq qword [esp + 0x470], xmm0
call fcn.00437550
push dword [esp + 0x470]
lea eax, [esp + 0x67c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0xa78]
push str._3:
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x680]
addss xmm0, dword [0x497324]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0xa88]
addss xmm0, dword [0x497324]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x524]
push eax
lea eax, [esi + 0x2600]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x51c], 0
je 0x43f3fe
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x528]
lea ecx, [esp + 0x488]
add esp, 0xc
mov dword [esp + 0x484], 0
xorps xmm0, xmm0
movq qword [esp + 0x47c], xmm0
call fcn.00437550
push dword [esp + 0x47c]
lea eax, [esp + 0x67c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0xa78]
push str._4:
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x680]
addss xmm0, dword [0x497324]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0xa88]
addss xmm0, dword [0x497324]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x528]
push eax
lea eax, [esi + 0x2638]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x520], 0
je 0x43f51c
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x52c]
lea ecx, [esp + 0x2f0]
add esp, 0xc
mov dword [esp + 0x2ec], 0
xorps xmm0, xmm0
movq qword [esp + 0x2e4], xmm0
call fcn.00437550
push dword [esp + 0x2e4]
lea eax, [esp + 0x67c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0xa78]
push str._5:
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x680]
addss xmm0, dword [0x497324]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0xa88]
addss xmm0, dword [0x497324]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x52c]
push eax
lea eax, [esi + 0x2670]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x524], 0
je 0x43f63a
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x530]
lea ecx, [esp + 0x2fc]
add esp, 0xc
mov dword [esp + 0x2f8], 0
xorps xmm0, xmm0
movq qword [esp + 0x2f0], xmm0
call fcn.00437550
push dword [esp + 0x2f0]
lea eax, [esp + 0x67c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0xa78]
push str._6:
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x680]
addss xmm0, dword [0x497324]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0xa88]
addss xmm0, dword [0x497324]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x530]
push eax
lea eax, [esi + 0x26a8]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x528], 0
je 0x43f758
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x534]
lea ecx, [esp + 0x308]
add esp, 0xc
mov dword [esp + 0x304], 0
xorps xmm0, xmm0
movq qword [esp + 0x2fc], xmm0
call fcn.00437550
push dword [esp + 0x2fc]
lea eax, [esp + 0x67c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0xa78]
push str._7:
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x680]
addss xmm0, dword [0x497324]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0xa88]
addss xmm0, dword [0x497324]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x534]
push eax
lea eax, [esi + 0x26e0]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x52c], 0
je 0x43f876
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x538]
lea ecx, [esp + 0x314]
add esp, 0xc
mov dword [esp + 0x310], 0
xorps xmm0, xmm0
movq qword [esp + 0x308], xmm0
call fcn.00437550
push dword [esp + 0x308]
lea eax, [esp + 0x67c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0xa78]
push str._8:
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x680]
addss xmm0, dword [0x497324]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0xa88]
addss xmm0, dword [0x497324]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x538]
push eax
lea eax, [esi + 0x2718]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x530], 0
je 0x43f994
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x53c]
lea ecx, [esp + 0x320]
add esp, 0xc
mov dword [esp + 0x31c], 0
xorps xmm0, xmm0
movq qword [esp + 0x314], xmm0
call fcn.00437550
push dword [esp + 0x314]
lea eax, [esp + 0x67c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0xa78]
push str._9:
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x680]
addss xmm0, dword [0x497324]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0xa88]
addss xmm0, dword [0x497324]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x53c]
push eax
lea eax, [esi + 0x2750]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x534], 0
je 0x43fab2
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x540]
lea ecx, [esp + 0x32c]
add esp, 0xc
mov dword [esp + 0x328], 0
xorps xmm0, xmm0
movq qword [esp + 0x320], xmm0
call fcn.00437550
push dword [esp + 0x320]
lea eax, [esp + 0x67c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0xa78]
push str._10:
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x680]
addss xmm0, dword [0x497324]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0xa88]
addss xmm0, dword [0x497324]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x540]
push eax
lea eax, [esi + 0x2788]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x538], 0
je 0x43fbd0
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x544]
lea ecx, [esp + 0x338]
add esp, 0xc
mov dword [esp + 0x334], 0
xorps xmm0, xmm0
movq qword [esp + 0x32c], xmm0
call fcn.00437550
push dword [esp + 0x32c]
lea eax, [esp + 0x67c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0xa78]
push str._11:
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x680]
addss xmm0, dword [0x497324]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0xa88]
addss xmm0, dword [0x497324]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x544]
push eax
lea eax, [esi + 0x27c0]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x53c], 0
je 0x43fcee
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x548]
lea ecx, [esp + 0x344]
add esp, 0xc
mov dword [esp + 0x340], 0
xorps xmm0, xmm0
movq qword [esp + 0x338], xmm0
call fcn.00437550
push dword [esp + 0x338]
lea eax, [esp + 0x67c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0xa78]
push str._12:
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x680]
addss xmm0, dword [0x497324]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0xa88]
addss xmm0, dword [0x497324]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x548]
push eax
lea eax, [esi + 0x27f8]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x540], 0
je 0x43fe0c
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x54c]
lea ecx, [esp + 0x350]
add esp, 0xc
mov dword [esp + 0x34c], 0
xorps xmm0, xmm0
movq qword [esp + 0x344], xmm0
call fcn.00437550
push dword [esp + 0x344]
lea eax, [esp + 0x67c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0xa78]
push str._13:
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x680]
addss xmm0, dword [0x497324]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0xa88]
addss xmm0, dword [0x497324]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x54c]
push eax
lea eax, [esi + 0x2830]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x544], 0
je 0x43ff2a
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x550]
lea ecx, [esp + 0x35c]
add esp, 0xc
mov dword [esp + 0x358], 0
xorps xmm0, xmm0
movq qword [esp + 0x350], xmm0
call fcn.00437550
push dword [esp + 0x350]
lea eax, [esp + 0x67c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0xa78]
push str._14:
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x680]
addss xmm0, dword [0x497324]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0xa88]
addss xmm0, dword [0x497324]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x550]
push eax
lea eax, [esi + 0x2868]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x548], 0
je 0x440048
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x554]
lea ecx, [esp + 0x494]
add esp, 0xc
mov dword [esp + 0x490], 0
xorps xmm0, xmm0
movq qword [esp + 0x488], xmm0
call fcn.00437550
push dword [esp + 0x488]
lea eax, [esp + 0x67c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0xa78]
push str._15:
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x680]
addss xmm0, dword [0x497324]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0xa88]
addss xmm0, dword [0x497324]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x554]
push eax
lea eax, [esi + 0x28a0]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x54c], 0
je 0x440166
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x558]
lea ecx, [esp + 0x368]
add esp, 0xc
mov dword [esp + 0x364], 0
xorps xmm0, xmm0
movq qword [esp + 0x35c], xmm0
call fcn.00437550
push dword [esp + 0x35c]
lea eax, [esp + 0x67c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0xa78]
push str._16:
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x680]
addss xmm0, dword [0x497324]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0xa88]
addss xmm0, dword [0x497324]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x558]
push eax
lea eax, [esi + 0x28d8]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x550], 0
je 0x440284
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x55c]
lea ecx, [esp + 0x374]
add esp, 0xc
mov dword [esp + 0x370], 0
xorps xmm0, xmm0
movq qword [esp + 0x368], xmm0
call fcn.00437550
push dword [esp + 0x368]
lea eax, [esp + 0x67c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0xa78]
push str._17:
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x680]
addss xmm0, dword [0x497324]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0xa88]
addss xmm0, dword [0x497324]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x55c]
push eax
lea eax, [esi + 0x2910]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x554], 0
je 0x4403a2
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x560]
lea ecx, [esp + 0x380]
add esp, 0xc
mov dword [esp + 0x37c], 0
xorps xmm0, xmm0
movq qword [esp + 0x374], xmm0
call fcn.00437550
push dword [esp + 0x374]
lea eax, [esp + 0x67c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0xa78]
push str._18:
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x680]
addss xmm0, dword [0x497324]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0xa88]
addss xmm0, dword [0x497324]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x560]
push eax
lea eax, [esi + 0x2948]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x558], 0
je 0x4404c0
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x564]
lea ecx, [esp + 0x38c]
add esp, 0xc
mov dword [esp + 0x388], 0
xorps xmm0, xmm0
movq qword [esp + 0x380], xmm0
call fcn.00437550
push dword [esp + 0x380]
lea eax, [esp + 0x67c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0xa78]
push str._19:
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x680]
addss xmm0, dword [0x497324]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0xa88]
addss xmm0, dword [0x497324]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x564]
push eax
lea eax, [esi + 0x2980]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x55c], 0
je 0x4405de
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x568]
lea ecx, [esp + 0x398]
add esp, 0xc
mov dword [esp + 0x394], 0
xorps xmm0, xmm0
movq qword [esp + 0x38c], xmm0
call fcn.00437550
push dword [esp + 0x38c]
lea eax, [esp + 0x67c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0xa78]
push str._20:
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x680]
addss xmm0, dword [0x497324]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0xa88]
addss xmm0, dword [0x497324]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x568]
push eax
lea eax, [esi + 0x29b8]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x560], 0
je 0x4406fc
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x56c]
lea ecx, [esp + 0x3a4]
add esp, 0xc
mov dword [esp + 0x3a0], 0
xorps xmm0, xmm0
movq qword [esp + 0x398], xmm0
call fcn.00437550
push dword [esp + 0x398]
lea eax, [esp + 0x67c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0xa78]
push str._21:
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x680]
addss xmm0, dword [0x497324]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0xa88]
addss xmm0, dword [0x497324]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x56c]
push eax
lea eax, [esi + 0x29f0]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x564], 0
je 0x44081a
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x570]
lea ecx, [esp + 0x3b0]
add esp, 0xc
mov dword [esp + 0x3ac], 0
xorps xmm0, xmm0
movq qword [esp + 0x3a4], xmm0
call fcn.00437550
push dword [esp + 0x3a4]
lea eax, [esp + 0x67c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0xa78]
push str._22:
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x680]
addss xmm0, dword [0x497324]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0xa88]
addss xmm0, dword [0x497324]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x570]
push eax
lea eax, [esi + 0x2a28]
push eax
push dword [0x4ac7fc]
call edi
cmp dword [esp + 0x568], 0
je 0x440938
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x574]
lea ecx, [esp + 0x3bc]
add esp, 0xc
mov dword [esp + 0x3b8], 0
xorps xmm0, xmm0
movq qword [esp + 0x3b0], xmm0
call fcn.00437550
push dword [esp + 0x3b0]
lea eax, [esp + 0x67c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0xa78]
push str._23:
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x680]
addss xmm0, dword [0x497324]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0xa88]
addss xmm0, dword [0x497324]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
push 0
push 4
lea eax, [esp + 0x5e0]
push eax
lea eax, [esi + 0x2a60]
push eax
push dword [0x4ac7fc]
call edi
mov esi, dword [esp + 0x5d8]
test esi, esi
je 0x440a52
push 0x400
lea eax, [esp + 0x67c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0xa78]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [esp + 0x3c4], 0
xorps xmm0, xmm0
lea ecx, [esp + 0x3bc]
mov edx, esi
movq qword [esp + 0x3bc], xmm0
call fcn.00437550
push dword [esp + 0x3bc]
lea eax, [esp + 0x67c]
push 0x4908fc
push eax
call fcn.004498d0
add esp, 0xc
lea eax, [esp + 0xa78]
push str._24:
push eax
call fcn.004498d0
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x680]
addss xmm0, dword [0x497324]
cvttss2si ecx, dword [esp + 0x49c]
push eax
push 0x4a5e00
cvttss2si edx, xmm0
call fcn.00436c40
movss xmm0, dword [esp + 0x4a8]
lea eax, [esp + 0xa88]
addss xmm0, dword [0x497324]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4ac]
subss xmm0, dword [0x497310]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
mov ecx, dword [esp + 0x78]
cmp ecx, 0x240005
jne 0x4415b4
mov esi, dword [esp + 0x10]
lea eax, [esp + 0x610]
push 0
push 0xc
push eax
lea eax, [esi + 0x24c]
push eax
push dword [0x4ac7fc]
call edi
push 0
push 4
lea eax, [esp + 0x5dc]
push eax
lea eax, [esi + 0x3d8]
push eax
push dword [0x4ac7fc]
call edi
mov esi, dword [esp + 0x5d4]
lea eax, [esp + 0x4c0]
push 0
push 0x18
push eax
mov eax, dword [esp + 0x1c]
add eax, 0x198
push eax
push dword [0x4ac7fc]
call edi
movaps xmm0, xmmword [esp + 0x4c0]
lea eax, [esp + 0x5d0]
push 0
push 4
push eax
mov eax, dword [0x4ac894]
add eax, 0xf56d10
movaps xmmword [esp + 0x5c], xmm0
xor eax, dword [0x4ac86c]
movq xmm0, qword [esp + 0x4dc]
push eax
push dword [0x4ac7fc]
movq qword [esp + 0x34], xmm0
movq qword [esp + 0x674], xmm0
call edi
push 0
push 4
lea eax, [esp + 0x5d4]
push eax
mov eax, dword [esp + 0x5dc]
add eax, 0x1004
xor eax, dword [0x4ac884]
push eax
push dword [0x4ac7fc]
call edi
push 0
push 0xc
lea eax, [esp + 0x1dc]
push eax
mov eax, dword [esp + 0x5d8]
add eax, 0x24c
push eax
push dword [0x4ac7fc]
call edi
movaps xmm2, xmmword [esp + 0x50]
movss xmm3, dword [0x4970e4]
movaps xmm0, xmm2
movss xmm1, dword [esp + 0x1d4]
shufps xmm0, xmm2, 0xff
mulss xmm0, xmm3
addss xmm0, xmm2
subss xmm1, xmm0
movaps xmm0, xmm2
shufps xmm0, xmm2, 0x55
movss dword [esp + 0x40], xmm1
movss xmm1, dword [esp + 0x660]
mulss xmm1, xmm3
addss xmm1, xmm0
movss xmm0, dword [esp + 0x1d8]
subss xmm0, xmm1
movss xmm1, dword [esp + 0x664]
mulss xmm1, xmm3
movss dword [esp + 0x4c0], xmm0
movaps xmm0, xmm2
shufps xmm0, xmm2, 0xaa
lea ecx, [esp + 0x2d8]
addss xmm1, xmm0
mov dword [esp + 0x2e0], 0
movss xmm0, dword [esp + 0x1dc]
mov edx, esi
subss xmm0, xmm1
movss dword [esp + 0x4b0], xmm0
xorps xmm0, xmm0
movq qword [esp + 0x2d8], xmm0
call fcn.00437550
movss xmm1, dword [esp + 0x4c0]
movss xmm0, dword [esp + 0x40]
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm1, xmm0
movss xmm0, dword [esp + 0x4b0]
mulss xmm0, xmm0
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x440c41
sqrtsd xmm0, xmm0
jmp 0x440c46
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
cvtsd2ss xmm0, xmm0
comiss xmm0, dword [0x497340]
movss dword [esp + 0xc], xmm0
ja 0x441d8a
movq xmm0, qword [esp + 0x610]
sub esp, 0xc
mov eax, dword [esp + 0x624]
mov ecx, esp
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
lea ecx, [esp + 0x4b0]
call fcn.0043add0
add esp, 0xc
test al, al
je 0x4415b0
cmp byte [0x4ac806], 0
je 0x440d7a
push 0x400
lea eax, [esp + 0x617c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x3178]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x18]
lea eax, [esp + 0x3184]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x2e0]
push str._s____0.fm_
push eax
call fcn.004498d0
cvttss2si edx, dword [esp + 0x4bc]
add esp, 0x14
lea eax, [esp + 0x3178]
push eax
push 0x4a5e00
cvttss2si ecx, dword [esp + 0x4ac]
call fcn.00436c40
movss xmm0, dword [esp + 0x4a0]
lea eax, [esp + 0x6180]
addss xmm0, dword [0x4972ec]
push eax
push 0x4a5c30
cvttss2si edx, xmm0
movss xmm0, dword [esp + 0x4a4]
subss xmm0, dword [0x497304]
cvttss2si ecx, xmm0
call fcn.00436c40
movaps xmm0, xmmword [esp + 0x60]
sub esp, 8
mov eax, esp
mov ecx, 0x4a5e00
movups xmmword [eax], xmm0
movq xmm0, qword [esp + 0x38]
movq qword [eax + 0x10], xmm0
call fcn.0043b570
add esp, 0x18
cmp byte [0x4ac88e], 0
je 0x440ea7
cmp dword [esp + 0x2e0], 7
jne 0x440ea7
push 0
push 4
lea eax, [esp + 0x63c]
push eax
mov eax, dword [esp + 0x1c]
add eax, 0xfd0
push eax
push dword [0x4ac7fc]
call edi
mov dword [esp + 0x250], 0xec5983d8
lea eax, [esp + 0x4c0]
mov dword [esp + 0x254], 0x37d84ba4
sub esp, 8
mov dword [esp + 0x260], 0xca51ed43
mov dword [esp + 0x264], 0x6c1a2c64
movaps xmm1, xmmword [esp + 0x258]
movaps xmmword [esp + 0x4c8], xmm1
mov dword [esp + 0x268], 0xb779f0fd
mov dword [esp + 0x26c], 0x51f67b81
mov dword [esp + 0x270], 0xca51b02e
mov dword [esp + 0x274], 0x6c1a2c64
movaps xmm0, xmmword [esp + 0x268]
xorps xmm0, xmm1
movaps xmmword [esp + 0x4c8], xmm0
movss xmm0, dword [esp + 0x14]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push dword [esp + 0x2e0]
push eax
lea eax, [esp + 0x1388]
push eax
call fcn.00449910
cvttss2si edx, dword [esp + 0x4bc]
add esp, 0x14
lea eax, [esp + 0x1378]
push eax
push 0x4a5c30
cvttss2si ecx, dword [esp + 0x4ac]
call fcn.00436c40
movaps xmm0, xmmword [esp + 0x58]
sub esp, 0x10
mov eax, esp
mov ecx, 0x4a5c30
movups xmmword [eax], xmm0
movq xmm0, qword [esp + 0x38]
movq qword [eax + 0x10], xmm0
call fcn.0043b570
add esp, 0x18
cmp byte [0x4ac87b], 0
je 0x440f4c
cmp dword [esp + 0x2e0], 8
jne 0x440f4c
push 0x400
lea eax, [esp + 0x357c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x18]
lea eax, [esp + 0x3584]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x2e0]
push str._s____0.fm_
push eax
call fcn.004498d0
cvttss2si edx, dword [esp + 0x4bc]
add esp, 0x14
lea eax, [esp + 0x3578]
push eax
push 0x4a5cb0
cvttss2si ecx, dword [esp + 0x4ac]
call fcn.00436c40
movaps xmm0, xmmword [esp + 0x58]
sub esp, 0x10
mov eax, esp
mov ecx, 0x4a5cb0
movups xmmword [eax], xmm0
movq xmm0, qword [esp + 0x38]
movq qword [eax + 0x10], xmm0
call fcn.0043b570
add esp, 0x18
cmp byte [0x4ac7f7], 0
je 0x440ff1
cmp dword [esp + 0x2e0], 9
jne 0x440ff1
push 0x400
lea eax, [esp + 0x397c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x18]
lea eax, [esp + 0x3984]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x2e0]
push str._s____0.fm_
push eax
call fcn.004498d0
cvttss2si edx, dword [esp + 0x4bc]
add esp, 0x14
lea eax, [esp + 0x3978]
push eax
push 0x4a5d20
cvttss2si ecx, dword [esp + 0x4ac]
call fcn.00436c40
movaps xmm0, xmmword [esp + 0x58]
sub esp, 0x10
mov eax, esp
mov ecx, 0x4a5d20
movups xmmword [eax], xmm0
movq xmm0, qword [esp + 0x38]
movq qword [eax + 0x10], xmm0
call fcn.0043b570
add esp, 0x18
cmp byte [0x4ac814], 0
je 0x441096
cmp dword [esp + 0x2e0], 0xa
jne 0x441096
push 0x400
lea eax, [esp + 0x3d7c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x18]
lea eax, [esp + 0x3d84]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x2e0]
push str._s____0.fm_
push eax
call fcn.004498d0
cvttss2si edx, dword [esp + 0x4bc]
add esp, 0x14
lea eax, [esp + 0x3d78]
push eax
push 0x4a5c50
cvttss2si ecx, dword [esp + 0x4ac]
call fcn.00436c40
movaps xmm0, xmmword [esp + 0x58]
sub esp, 0x10
mov eax, esp
mov ecx, 0x4a5c50
movups xmmword [eax], xmm0
movq xmm0, qword [esp + 0x38]
movq qword [eax + 0x10], xmm0
call fcn.0043b570
add esp, 0x18
cmp byte [0x4ac6b9], 0
je 0x44113b
cmp dword [esp + 0x2e0], 2
jne 0x44113b
push 0x400
lea eax, [esp + 0x417c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x18]
lea eax, [esp + 0x4184]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x2e0]
push str._s____0.fm_
push eax
call fcn.004498d0
cvttss2si edx, dword [esp + 0x4bc]
add esp, 0x14
lea eax, [esp + 0x4178]
push eax
push 0x4a5de0
cvttss2si ecx, dword [esp + 0x4ac]
call fcn.00436c40
movaps xmm0, xmmword [esp + 0x58]
sub esp, 0x10
mov eax, esp
mov ecx, 0x4a5de0
movups xmmword [eax], xmm0
movq xmm0, qword [esp + 0x38]
movq qword [eax + 0x10], xmm0
call fcn.0043b570
add esp, 0x18
cmp byte [0x4ac6c7], 0
je 0x4411e0
cmp dword [esp + 0x2e0], 0
jne 0x4411e0
push 0x400
lea eax, [esp + 0x457c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x18]
lea eax, [esp + 0x4584]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x2e0]
push str._s____0.fm_
push eax
call fcn.004498d0
cvttss2si edx, dword [esp + 0x4bc]
add esp, 0x14
lea eax, [esp + 0x4578]
push eax
push 0x4a5ca0
cvttss2si ecx, dword [esp + 0x4ac]
call fcn.00436c40
movaps xmm0, xmmword [esp + 0x58]
sub esp, 0x10
mov eax, esp
mov ecx, 0x4a5ca0
movups xmmword [eax], xmm0
movq xmm0, qword [esp + 0x38]
movq qword [eax + 0x10], xmm0
call fcn.0043b570
add esp, 0x18
cmp byte [0x4ac811], 0
je 0x441285
cmp dword [esp + 0x2e0], 4
jne 0x441285
push 0x400
lea eax, [esp + 0x497c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x18]
lea eax, [esp + 0x4984]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x2e0]
push str._s____0.fm_
push eax
call fcn.004498d0
cvttss2si edx, dword [esp + 0x4bc]
add esp, 0x14
lea eax, [esp + 0x4978]
push eax
push 0x4a5ce0
cvttss2si ecx, dword [esp + 0x4ac]
call fcn.00436c40
movaps xmm0, xmmword [esp + 0x58]
sub esp, 0x10
mov eax, esp
mov ecx, 0x4a5ce0
movups xmmword [eax], xmm0
movq xmm0, qword [esp + 0x38]
movq qword [eax + 0x10], xmm0
call fcn.0043b570
add esp, 0x18
cmp byte [0x4ac6c5], 0
je 0x44132a
cmp dword [esp + 0x2e0], 5
jne 0x44132a
push 0x400
lea eax, [esp + 0x4d7c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x18]
lea eax, [esp + 0x4d84]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x2e0]
push str._s____0.fm_
push eax
call fcn.004498d0
cvttss2si edx, dword [esp + 0x4bc]
add esp, 0x14
lea eax, [esp + 0x4d78]
push eax
push 0x4a5db0
cvttss2si ecx, dword [esp + 0x4ac]
call fcn.00436c40
movaps xmm0, xmmword [esp + 0x58]
sub esp, 0x10
mov eax, esp
mov ecx, 0x4a5e00
movups xmmword [eax], xmm0
movq xmm0, qword [esp + 0x38]
movq qword [eax + 0x10], xmm0
call fcn.0043b570
add esp, 0x18
cmp byte [0x4ac80c], 0
je 0x4413cf
cmp dword [esp + 0x2e0], 0xb
jne 0x4413cf
push 0x400
lea eax, [esp + 0x517c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x18]
lea eax, [esp + 0x5184]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x2e0]
push str._s____0.fm_
push eax
call fcn.004498d0
cvttss2si edx, dword [esp + 0x4bc]
add esp, 0x14
lea eax, [esp + 0x5178]
push eax
push 0x4a5f30
cvttss2si ecx, dword [esp + 0x4ac]
call fcn.00436c40
movaps xmm0, xmmword [esp + 0x58]
sub esp, 0x10
mov eax, esp
mov ecx, 0x4a5f30
movups xmmword [eax], xmm0
movq xmm0, qword [esp + 0x38]
movq qword [eax + 0x10], xmm0
call fcn.0043b570
add esp, 0x18
cmp byte [0x4ac815], 0
je 0x441474
cmp dword [esp + 0x2e0], 0xe
jne 0x441474
push 0x400
lea eax, [esp + 0x557c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x18]
lea eax, [esp + 0x5584]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x2e0]
push str._s____0.fm_
push eax
call fcn.004498d0
cvttss2si edx, dword [esp + 0x4bc]
add esp, 0x14
lea eax, [esp + 0x5578]
push eax
push 0x4a5fb0
cvttss2si ecx, dword [esp + 0x4ac]
call fcn.00436c40
movaps xmm0, xmmword [esp + 0x58]
sub esp, 0x10
mov eax, esp
mov ecx, 0x4a5fb0
movups xmmword [eax], xmm0
movq xmm0, qword [esp + 0x38]
movq qword [eax + 0x10], xmm0
call fcn.0043b570
add esp, 0x18
cmp byte [0x4ac6ba], 0
je 0x441519
cmp dword [esp + 0x2e0], 0xf
jne 0x441519
push 0x400
lea eax, [esp + 0x597c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x18]
lea eax, [esp + 0x5984]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x2e0]
push str._s____0.fm_
push eax
call fcn.004498d0
cvttss2si edx, dword [esp + 0x4bc]
add esp, 0x14
lea eax, [esp + 0x5978]
push eax
push 0x4a5e70
cvttss2si ecx, dword [esp + 0x4ac]
call fcn.00436c40
movaps xmm0, xmmword [esp + 0x58]
sub esp, 0x10
mov eax, esp
mov ecx, 0x4a5e70
movups xmmword [eax], xmm0
movq xmm0, qword [esp + 0x38]
movq qword [eax + 0x10], xmm0
call fcn.0043b570
add esp, 0x18
cmp byte [0x4ac879], 0
je 0x4415b0
push 0x400
lea eax, [esp + 0x5d7c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x18]
lea eax, [esp + 0x5d84]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x2e0]
push str._s____0.fm_
push eax
call fcn.004498d0
cvttss2si edx, dword [esp + 0x4bc]
add esp, 0x14
lea eax, [esp + 0x5d78]
push eax
push 0x4a5f60
cvttss2si ecx, dword [esp + 0x4ac]
call fcn.00436c40
movaps xmm0, xmmword [esp + 0x58]
sub esp, 0x10
mov eax, esp
mov ecx, 0x4a5f60
movups xmmword [eax], xmm0
movq xmm0, qword [esp + 0x38]
movq qword [eax + 0x10], xmm0
call fcn.0043b570
add esp, 0x18
mov ecx, dword [esp + 0x78]
cmp byte [0x4ac88d], 0
jne 0x4415ca
cmp byte [0x4ac88c], 0
je 0x441bc8
mov esi, dword [esp + 0x10]
mov eax, esi
or eax, dword [esp + 0x74]
je 0x441bcc
cmp ecx, 0x20001
je 0x4415ee
cmp ecx, 0x20000
jne 0x441bcc
push 0
push 0xc
lea eax, [esp + 0x2c8]
add esi, 0x24c
push eax
push esi
push dword [0x4ac7fc]
call edi
movq xmm0, qword [esp + 0x2c0]
lea eax, [esp + 0x5c8]
mov edi, dword [esp + 0x2c8]
push 0
push 4
push eax
mov eax, dword [0x4ac894]
add eax, 0xf56d10
movq qword [esp + 0x4c], xmm0
xor eax, dword [0x4ac86c]
push eax
push dword [0x4ac7fc]
movq qword [esp + 0xcc], xmm0
mov dword [esp + 0xd4], edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 0
push 4
lea eax, [esp + 0x5cc]
push eax
mov eax, dword [esp + 0x5d4]
add eax, 0x1004
xor eax, dword [0x4ac884]
push eax
push dword [0x4ac7fc]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 0
push 0xc
lea eax, [esp + 0x5f4]
push eax
mov eax, dword [esp + 0x5d0]
add eax, 0x24c
push eax
push dword [0x4ac7fc]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 0
push 0xc
lea eax, [esp + 0xb4]
push eax
push esi
push dword [0x4ac7fc]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movq xmm0, qword [esp + 0xac]
xorps xmm3, xmm3
movq qword [0x4acce0], xmm0
sub esp, 0xc
movss xmm0, dword [esp + 0xb8]
mov ecx, esp
subss xmm0, dword [esp + 0x5f8]
movss xmm2, dword [esp + 0xc4]
movss xmm1, dword [esp + 0xc8]
addss xmm2, xmm3
addss xmm1, dword [0x497128]
mov eax, dword [esp + 0xc0]
movss dword [esp + 0x4cc], xmm0
movss xmm0, dword [esp + 0xbc]
subss xmm0, dword [esp + 0x5fc]
unpcklps xmm2, xmm1
mov dword [0x4acce8], eax
movq qword [ecx], xmm2
movss dword [esp + 0x2c], xmm0
movss xmm0, dword [esp + 0xc0]
subss xmm0, dword [esp + 0x600]
movss dword [esp + 0x58], xmm0
movss xmm0, dword [esp + 0xcc]
addss xmm0, xmm3
movss dword [esp + 0x2e0], xmm0
mov eax, dword [esp + 0x2e0]
mov dword [ecx + 8], eax
lea ecx, [esp + 0x5ec]
call fcn.0043add0
movq xmm0, qword [esp + 0x4c]
mov ecx, esp
mov byte [esp + 0x57], al
movq qword [ecx], xmm0
mov dword [ecx + 8], edi
lea ecx, [esp + 0x57c]
call fcn.0043add0
mov cl, byte [esp + 0x57]
add esp, 0xc
or cl, al
mov esi, dword [esp + 0x10]
mov edi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
je 0x441bcc
push 0
push 1
lea eax, [esp + 0x4ab]
push eax
lea eax, [esi + 0x354]
push eax
push dword [0x4ac7fc]
call edi
movss xmm0, dword [esp + 0x574]
subss xmm0, dword [esp + 0x5e4]
movss xmm1, dword [esp + 0x20]
mulss xmm1, xmm1
cvttss2si eax, xmm0
movss xmm0, dword [esp + 0x4c0]
mulss xmm0, xmm0
mov dword [esp + 0x40], eax
cdq
sub eax, edx
addss xmm0, xmm1
sar eax, 1
movss xmm1, dword [esp + 0x4c]
mulss xmm1, xmm1
mov dword [esp + 0x4b0], eax
addss xmm0, xmm1
xorps xmm1, xmm1
cvtps2pd xmm0, xmm0
ucomisd xmm1, xmm0
ja 0x441836
sqrtsd xmm0, xmm0
jmp 0x44183b
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
xorps xmm2, xmm2
cvtsd2ss xmm2, xmm0
movss xmm0, dword [0x497340]
comiss xmm0, xmm2
movss dword [esp + 0x4c0], xmm2
jb 0x441bcc
cmp byte [0x4ac88d], 0
mov al, byte [esp + 0x4a3]
je 0x4419e4
test al, al
jne 0x4419e4
mov dword [esp + 0x270], 0xd5149fa7
lea eax, [esp + 0x50]
mov dword [esp + 0x274], 0x74d61ee8
sub esp, 8
mov dword [esp + 0x280], 0xa7379e1e
mov dword [esp + 0x284], 0x6c1a2c64
movaps xmm1, xmmword [esp + 0x278]
movaps xmmword [esp + 0x58], xmm1
mov dword [esp + 0x288], 0xb779f0fd
mov dword [esp + 0x28c], 0x51f67b81
mov dword [esp + 0x290], 0xca51b02e
mov dword [esp + 0x294], 0x6c1a2c64
movaps xmm0, xmmword [esp + 0x288]
xorps xmm0, xmm1
movaps xmmword [esp + 0x58], xmm0
cvtps2pd xmm0, xmm2
movsd qword [esp], xmm0
push eax
lea eax, [esp + 0x1184]
push eax
call fcn.0041cfb0
cvttss2si edx, dword [esp + 0x584]
lea eax, [esp + 0x1188]
push eax
push 0x4a5ee0
cvttss2si ecx, dword [esp + 0x588]
call fcn.00436c40
mov ecx, dword [0x4ac6b0]
lea eax, [esp + 0x1190]
movss xmm3, dword [0x497364]
add esp, 0x14
movss xmm2, dword [ecx + 0x3bd4]
push 0
push eax
push ecx
mov ecx, dword [ecx + 0x3bd0]
lea eax, [esp + 0xec]
mov dword [esp], 0xbf800000
push eax
call fcn.0042b0f0
movss xmm0, dword [esp + 0xdc]
mov ecx, 0x4a5ee0
addss xmm0, dword [0x497108]
movd xmm3, dword [esp + 0x40]
cvtdq2ps xmm3, xmm3
cvttss2si eax, xmm0
movd xmm0, eax
mov eax, dword [esp + 0x4b0]
cvtdq2ps xmm0, xmm0
movd xmm2, eax
cdq
sub eax, edx
movss dword [esp + 0xdc], xmm0
movss xmm0, dword [esp + 0x570]
sar eax, 1
cvtdq2ps xmm2, xmm2
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm0, xmm1
movss xmm1, dword [esp + 0x5e4]
call fcn.004370e0
movss xmm2, dword [esp + 0x4c0]
mov al, byte [esp + 0x4a3]
cmp byte [0x4ac88c], 0
je 0x441bcc
cmp al, 1
jne 0x441bcc
cvtps2pd xmm0, xmm2
sub esp, 8
mov dword [esp + 0x298], 0xe42abfbf
lea eax, [esp + 0x58]
mov dword [esp + 0x29c], 0x7fc65ea1
mov dword [esp + 0x2a0], 0xca51dd48
mov dword [esp + 0x2a4], 0x6c1a2c64
mov dword [esp + 0x1e8], 0xb779f0fd
movaps xmm1, xmmword [esp + 0x298]
movsd qword [esp], xmm0
push eax
movaps xmmword [esp + 0x5c], xmm1
lea eax, [esp + 0x1284]
mov dword [esp + 0x1f0], 0x51f67b81
mov dword [esp + 0x1f4], 0xca51b02e
mov dword [esp + 0x1f8], 0x6c1a2c64
xorps xmm1, xmmword [esp + 0x1ec]
push eax
movaps xmmword [esp + 0x60], xmm1
call fcn.0041cfb0
cvttss2si edx, dword [esp + 0x584]
lea eax, [esp + 0x1288]
push eax
push 0x4a5cc0
cvttss2si ecx, dword [esp + 0x588]
call fcn.00436c40
mov ecx, dword [0x4ac6b0]
lea eax, [esp + 0x1290]
movss xmm3, dword [0x497364]
add esp, 0x14
movss xmm2, dword [ecx + 0x3bd4]
push 0
push eax
push ecx
mov ecx, dword [ecx + 0x3bd0]
lea eax, [esp + 0xe4]
mov dword [esp], 0xbf800000
push eax
call fcn.0042b0f0
movss xmm0, dword [esp + 0xd4]
addss xmm0, dword [0x497108]
mov eax, dword [esp + 0x4b0]
movd xmm3, dword [esp + 0x40]
cvtdq2ps xmm3, xmm3
cvttss2si ecx, xmm0
movd xmm2, eax
cdq
sub eax, edx
sar eax, 1
movd xmm0, ecx
mov ecx, 0x4a5cc0
cvtdq2ps xmm0, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [esp + 0xd4], xmm0
movss xmm0, dword [esp + 0x570]
cvtdq2ps xmm2, xmm2
subss xmm0, xmm1
movss xmm1, dword [esp + 0x5e4]
call fcn.004370e0
push 0
push 4
lea eax, [esp + 0x5c4]
push eax
lea eax, [esi + 0x2df4]
push eax
push dword [0x4ac7fc]
call edi
movss xmm0, dword [esp + 0x5bc]
lea eax, [esp + 0x1478]
cvtps2pd xmm0, xmm0
sub esp, 8
movsd qword [esp], xmm0
push str.__0.f
push eax
call fcn.00449910
cvttss2si edx, dword [esp + 0x5f4]
lea eax, [esp + 0x1488]
push eax
push 0x4a5cc0
movss xmm0, dword [esp + 0x588]
subss xmm0, dword [0x4972f8]
cvttss2si ecx, xmm0
call fcn.00436c40
add esp, 0x18
jmp 0x441bcc
mov esi, dword [esp + 0x10]
cmp dword [esp + 0x78], 0x250005
jne 0x441d8a
push 0
push 4
lea eax, [esp + 0x5c0]
push eax
mov eax, dword [0x4ac894]
add eax, 0xf56d10
xor eax, dword [0x4ac86c]
push eax
push dword [0x4ac7fc]
call edi
push 0
push 4
lea eax, [esp + 0x5bc]
push eax
mov eax, dword [esp + 0x5c4]
add eax, 0x1004
xor eax, dword [0x4ac884]
push eax
push dword [0x4ac7fc]
call edi
push 0
push 0xc
lea eax, [esp + 0x600]
push eax
mov eax, dword [esp + 0x5c0]
add eax, 0x24c
push eax
push dword [0x4ac7fc]
call edi
push 0
push 0xc
lea eax, [esp + 0x9c]
push eax
lea eax, [esi + 0x24c]
push eax
push dword [0x4ac7fc]
call edi
movss xmm1, dword [esp + 0x94]
sub esp, 0xc
subss xmm1, dword [esp + 0x604]
movq xmm0, qword [esp + 0xa0]
mov eax, esp
mov ecx, dword [esp + 0xa8]
mov dword [0x4acce8], ecx
movq qword [0x4acce0], xmm0
movss dword [esp + 0x4c], xmm1
movss xmm1, dword [esp + 0xa4]
subss xmm1, dword [esp + 0x608]
movq qword [eax], xmm0
mov dword [eax + 8], ecx
lea ecx, [esp + 0x628]
movss dword [esp + 0x4cc], xmm1
movss xmm1, dword [esp + 0xa8]
subss xmm1, dword [esp + 0x60c]
movss dword [esp + 0x4bc], xmm1
call fcn.0043add0
add esp, 0xc
test al, al
je 0x441d8a
cmp byte [0x4ac804], 0
je 0x441d8a
movss xmm0, dword [esp + 0x4c0]
movss xmm1, dword [esp + 0x40]
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm0, xmm1
movss xmm1, dword [esp + 0x4b0]
mulss xmm1, xmm1
addss xmm0, xmm1
xorps xmm1, xmm1
cvtps2pd xmm0, xmm0
ucomisd xmm1, xmm0
ja 0x441d3c
sqrtsd xmm0, xmm0
jmp 0x441d41
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
cvtsd2ss xmm0, xmm0
sub esp, 8
lea eax, [esp + 0x6580]
cvtss2sd xmm0, xmm0
movsd qword [esp], xmm0
push str.Vehicle___0.1f_
push eax
call fcn.004498d0
cvttss2si edx, dword [esp + 0x630]
lea eax, [esp + 0x6588]
push eax
push 0x4a5d20
cvttss2si ecx, dword [esp + 0x634]
call fcn.00436c40
add esp, 0x18
mov eax, dword [0x4accfc]
mov esi, dword [esp + 0x90]
sub eax, dword [0x4accf8]
inc esi
sar eax, 4
mov dword [esp + 0x90], esi
cmp esi, eax
jbe 0x43cf90
cmp dword [0x4ac870], 0
je 0x441dc6
cmp byte [0x4ac80f], 0
je 0x441dc6
call fcn.0043bd40
mov ecx, dword [esp + 0x697c]
pop edi
pop esi
xor ecx, esp
call fcn.00481c53
mov esp, ebp
pop ebp
ret