Function at 0x433620
Capabilities:
Log keystrokes via polling
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
mov eax, 0x4c18
call fcn.00476ea0
mov eax, dword [0x497080]
xor eax, esp
mov dword [esp + 0x4c14], eax
mov ecx, dword [0x4a8ca4]
push esi
push edi
cmp ecx, dword [0x4a8ca8]
je 0x4354b7
movss xmm0, dword [0x48941c]
xor esi, esi
mov edi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movss dword [esp + 0x2c], xmm0
mov dword [0x4a8810], 0
mov dword [esp + 0x6c], esi
add esi, esi
movups xmm0, xmmword [ecx + esi*8]
movd esi, xmm0
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x10], esi
cmp esi, dword [0x4a8820]
jne 0x43369c
cmp dword [esp + 0x34], 0
je 0x435485
cmp byte [0x4a87ac], 0
je 0x4336cf
push 0
push 4
lea eax, [esp + 0x27c]
mov dword [esp + 0x27c], 0x3f99999a
push eax
mov eax, dword [0x4a8820]
add eax, 0xdf00
push eax
push dword [0x4a87b0]
call edi
cmp byte [0x4a866e], 0
je 0x433702
push 0
push 4
lea eax, [esp + 0x280]
mov dword [esp + 0x280], 0x4479c000
push eax
mov eax, dword [0x4a8820]
add eax, 0xff0
push eax
push dword [0x4a87b0]
call edi
cmp byte [0x4a8817], 0
je 0x433742
push 0x20
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x433742
push 0
push 4
lea eax, [esp + 0x284]
mov dword [esp + 0x284], 0x41980000
push eax
mov eax, dword [0x4a8820]
add eax, 0xe980
push eax
push dword [0x4a87b0]
call edi
cmp byte [0x4a87af], 0
je 0x433775
push 0
push 4
lea eax, [esp + 0x238]
mov dword [esp + 0x238], 0x42960000
push eax
mov eax, dword [0x4a8820]
add eax, 0xdfd8
push eax
push dword [0x4a87b0]
call edi
push 0x42
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, 0x8001
push 0
push 4
test cx, ax
je 0x4337bc
cmp byte [0x4a87c2], 0
je 0x4337a8
mov dword [esp + 0x288], 0xc22a0000
lea eax, [esp + 0x288]
jmp 0x4337ce
mov dword [esp + 0x28c], 0
lea eax, [esp + 0x28c]
jmp 0x4337ce
mov dword [esp + 0x290], 0
lea eax, [esp + 0x290]
push eax
mov eax, dword [0x4a8820]
add eax, 0xdcd0
push eax
push dword [0x4a87b0]
call edi
push 0
push 4
lea eax, [esp + 0x294]
push eax
mov eax, dword [0x4a8828]
add eax, 0x11d6f34
push eax
push dword [0x4a87b0]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [0x4a87bc], 0
mov edi, dword [esp + 0x28c]
push 0
push 4
lea eax, [edi + 0x58]
je 0x433836
movss xmm0, dword [0x497318]
lea ecx, [esp + 0x298]
movss dword [esp + 0x298], xmm0
jmp 0x433848
mov dword [esp + 0x29c], 0x3b23d70a
lea ecx, [esp + 0x29c]
push ecx
push eax
push dword [0x4a87b0]
mov eax, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
call eax
cmp byte [0x4a8816], 0
lea eax, [edi + 0xc]
push 0
push 4
je 0x43387b
mov dword [esp + 0x2a0], 0
lea ecx, [esp + 0x2a0]
jmp 0x43388d
mov dword [esp + 0x2a4], 0x3f8ccccd
lea ecx, [esp + 0x2a4]
push ecx
push eax
push dword [0x4a87b0]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
add edi, 0x1c
cmp byte [0x4a8781], 0
push 0
push 4
je 0x4338bf
mov dword [esp + 0x2a8], 0
lea eax, [esp + 0x2a8]
jmp 0x4338d1
mov dword [esp + 0x2ac], 0x3f99999a
lea eax, [esp + 0x2ac]
push eax
push edi
push dword [0x4a87b0]
mov edi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
call edi
cmp byte [0x4a87bb], 0
push 0
push 4
je 0x433902
mov dword [esp + 0x2b0], 2
lea eax, [esp + 0x2b0]
jmp 0x433914
mov dword [esp + 0x2b4], 3
lea eax, [esp + 0x2b4]
push eax
mov eax, dword [0x4a8828]
add eax, 0x4853af
push eax
push dword [0x4a87b0]
call edi
cmp byte [0x4a8826], 0
mov edi, dword [esp + 0x38]
jne 0x433942
cmp byte [0x4a8825], 0
je 0x433f03
mov ecx, dword [esp + 0x34]
mov eax, esi
or eax, ecx
je 0x433f07
cmp edi, 0x20001
je 0x433964
cmp edi, 0x20000
jne 0x433f07
push 0
push 0xc
lea eax, [esp + 0x1a8]
add esi, 0xe38
push eax
push esi
push dword [0x4a87b0]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movq xmm0, qword [esp + 0x1a0]
lea eax, [esp + 0x2b0]
mov edi, dword [esp + 0x1a8]
push 0
push 4
push eax
mov eax, dword [0x4a8828]
add eax, 0xf56fb4
movq qword [esp + 0x2c], xmm0
push eax
push dword [0x4a87b0]
movq qword [esp + 0xa8], xmm0
mov dword [esp + 0xb0], edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 0
push 4
lea eax, [esp + 0x2bc]
push eax
mov eax, dword [esp + 0x2bc]
add eax, 0xfe8
push eax
push dword [0x4a87b0]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 0
push 0xc
lea eax, [esp + 0x2fc]
push eax
mov eax, dword [esp + 0x2c0]
add eax, 0xe38
push eax
push dword [0x4a87b0]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 0
push 0xc
lea eax, [esp + 0x84]
push eax
push esi
push dword [0x4a87b0]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movq xmm0, qword [esp + 0x7c]
xorps xmm3, xmm3
movq qword [0x4a8c70], xmm0
sub esp, 0xc
movss xmm0, dword [esp + 0x88]
mov ecx, esp
subss xmm0, dword [esp + 0x300]
movss xmm2, dword [esp + 0xa0]
movss xmm1, dword [esp + 0xa4]
addss xmm2, xmm3
addss xmm1, dword [0x489344]
mov eax, dword [esp + 0x90]
movss dword [0x4a8c98], xmm0
movss xmm0, dword [esp + 0x8c]
subss xmm0, dword [esp + 0x304]
unpcklps xmm2, xmm1
mov dword [0x4a8c78], eax
movq qword [ecx], xmm2
movss dword [0x4a8c9c], xmm0
movss xmm0, dword [esp + 0x90]
subss xmm0, dword [esp + 0x308]
movss dword [0x4a8ca0], xmm0
movss xmm0, dword [esp + 0xa8]
addss xmm0, xmm3
movss dword [esp + 0x1d8], xmm0
mov eax, dword [esp + 0x1d8]
mov dword [ecx + 8], eax
lea ecx, [esp + 0x318]
call fcn.00432930
movq xmm0, qword [esp + 0x2c]
mov ecx, esp
mov byte [esp + 0x1b], al
movq qword [ecx], xmm0
mov dword [ecx + 8], edi
lea ecx, [esp + 0x24c]
call fcn.00432930
mov cl, byte [esp + 0x1b]
add esp, 0xc
or cl, al
mov esi, dword [esp + 0x10]
je 0x433eff
push 0
push 1
lea eax, [esp + 0x237]
push eax
lea eax, [esi + 0xf40]
push eax
push dword [0x4a87b0]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [esp + 0x244]
subss xmm0, dword [esp + 0x310]
movss xmm1, dword [0x4a8c9c]
mulss xmm1, xmm1
cvttss2si eax, xmm0
movss xmm0, dword [0x4a8c98]
mulss xmm0, xmm0
mov dword [esp + 8], eax
cdq
sub eax, edx
addss xmm1, xmm0
mov edi, eax
movss xmm0, dword [0x4a8ca0]
mulss xmm0, xmm0
sar edi, 1
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x433ba0
sqrtsd xmm0, xmm0
jmp 0x433ba5
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
xorps xmm2, xmm2
cvtsd2ss xmm2, xmm0
movss xmm0, dword [0x497310]
comiss xmm0, xmm2
movss dword [esp + 0x20], xmm2
jb 0x433eff
cmp byte [0x4a8826], 0
mov al, byte [esp + 0x22f]
je 0x433d6e
test al, al
jne 0x433d6e
cvtps2pd xmm0, xmm2
sub esp, 8
mov dword [esp + 0xd8], 0x5ebaba59
lea eax, [esp + 0x48]
mov dword [esp + 0xdc], 0x5230f080
mov dword [esp + 0xe0], 0x9d3c9bc8
mov dword [esp + 0xe4], 0x111c1fbd
mov dword [esp + 0xe8], 0x5ebaba03
movaps xmm1, xmmword [esp + 0xd8]
movsd qword [esp], xmm0
push eax
movaps xmmword [esp + 0x4c], xmm1
lea eax, [esp + 0x524]
mov dword [esp + 0xf0], 0x5230f080
mov dword [esp + 0xf4], 0x9d3c9bc8
mov dword [esp + 0xf8], 0x111c1fbd
xorps xmm1, xmmword [esp + 0xec]
push eax
movaps xmmword [esp + 0x50], xmm1
call fcn.00413660
cvttss2si edx, dword [esp + 0x254]
lea eax, [esp + 0x528]
push eax
push 0x4a17a8
cvttss2si ecx, dword [esp + 0x258]
call fcn.0042e880
mov eax, dword [0x4a8670]
lea ecx, [esp + 0x530]
movss xmm3, dword [0x48941c]
add esp, 0x14
movss xmm0, dword [eax + 0x18bc]
mov eax, dword [eax + 0x18b8]
movaps xmm2, xmm0
push 0
push ecx
push ecx
lea ecx, [esp + 0xc0]
mov dword [esp], 0xbf800000
push ecx
mov ecx, eax
movss dword [esp + 0x244], xmm0
mov dword [esp + 0x3c], eax
call fcn.0041fdb0
movss xmm0, dword [esp + 0xb0]
xorps xmm1, xmm1
comiss xmm0, xmm1
jbe 0x433d07
mov eax, dword [esp + 0x28]
movss xmm1, dword [esp + 0x230]
divss xmm1, dword [eax]
subss xmm0, xmm1
addss xmm0, dword [0x489338]
movd xmm3, dword [esp + 8]
mov ecx, 0x4a17a8
movd xmm2, edi
cvtdq2ps xmm3, xmm3
cvttss2si eax, xmm0
cvtdq2ps xmm2, xmm2
movd xmm0, eax
mov eax, edi
cdq
sub eax, edx
sar eax, 1
cvtdq2ps xmm0, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [esp + 0xb0], xmm0
movss xmm0, dword [esp + 0x240]
subss xmm0, xmm1
movss xmm1, dword [esp + 0x310]
call fcn.0042ec70
movss xmm2, dword [esp + 0x20]
mov al, byte [esp + 0x22f]
cmp byte [0x4a8825], 0
je 0x433eff
cmp al, 1
jne 0x433eff
cvtps2pd xmm0, xmm2
sub esp, 8
mov dword [esp + 0xf8], 0xde9f541
lea eax, [esp + 0x48]
mov dword [esp + 0xfc], 0x7c00d5a0
mov dword [esp + 0x100], 0x9d3cf6ae
mov dword [esp + 0x104], 0x111c1fbd
mov dword [esp + 0x108], 0x5ebaba03
movaps xmm1, xmmword [esp + 0xf8]
movsd qword [esp], xmm0
push eax
movaps xmmword [esp + 0x4c], xmm1
lea eax, [esp + 0x624]
mov dword [esp + 0x110], 0x5230f080
mov dword [esp + 0x114], 0x9d3c9bc8
mov dword [esp + 0x118], 0x111c1fbd
xorps xmm1, xmmword [esp + 0x10c]
push eax
movaps xmmword [esp + 0x50], xmm1
call fcn.00413660
cvttss2si edx, dword [esp + 0x254]
lea eax, [esp + 0x628]
push eax
push 0x4a17e8
cvttss2si ecx, dword [esp + 0x258]
call fcn.0042e880
mov eax, dword [0x4a8670]
lea ecx, [esp + 0x630]
movss xmm3, dword [0x48941c]
add esp, 0x14
movss xmm0, dword [eax + 0x18bc]
mov eax, dword [eax + 0x18b8]
movaps xmm2, xmm0
push 0
push ecx
push ecx
lea ecx, [esp + 0xb0]
mov dword [esp], 0xbf800000
push ecx
mov ecx, eax
movss dword [esp + 0x34], xmm0
mov dword [esp + 0x3c], eax
call fcn.0041fdb0
movss xmm0, dword [esp + 0xa0]
xorps xmm1, xmm1
comiss xmm0, xmm1
jbe 0x433ea5
mov eax, dword [esp + 0x28]
movss xmm1, dword [esp + 0x20]
divss xmm1, dword [eax]
subss xmm0, xmm1
addss xmm0, dword [0x489338]
movd xmm3, dword [esp + 8]
mov eax, edi
cdq
sub eax, edx
movd xmm2, edi
sar eax, 1
cvttss2si ecx, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movd xmm0, ecx
mov ecx, 0x4a17e8
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm3, xmm3
movss dword [esp + 0xa0], xmm0
movss xmm0, dword [esp + 0x240]
cvtdq2ps xmm2, xmm2
subss xmm0, xmm1
movss xmm1, dword [esp + 0x310]
call fcn.0042ec70
mov edi, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
cmp byte [0x4a8783], 0
je 0x4344da
mov eax, esi
or eax, ecx
je 0x4344da
cmp edi, 0x250005
jne 0x4344da
push 0
push 0xc
lea eax, [esp + 0x19c]
add esi, 0xe38
push eax
push esi
push dword [0x4a87b0]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movq xmm0, qword [esp + 0x194]
lea eax, [esp + 0x2b8]
mov edi, dword [esp + 0x19c]
push 0
push 4
push eax
mov eax, dword [0x4a8828]
add eax, 0xf56fb4
movq qword [esp + 0x2c], xmm0
push eax
push dword [0x4a87b0]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 0
push 4
lea eax, [esp + 0x2c4]
push eax
mov eax, dword [esp + 0x2c4]
add eax, 0xfe8
push eax
push dword [0x4a87b0]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 0
push 0xc
lea eax, [esp + 0x2f0]
push eax
mov eax, dword [esp + 0x2c8]
add eax, 0xe38
push eax
push dword [0x4a87b0]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 0
push 0xc
lea eax, [esp + 0x78]
push eax
push esi
push dword [0x4a87b0]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movq xmm0, qword [esp + 0x70]
lea ecx, [esp + 0x2d0]
mov eax, dword [esp + 0x78]
sub esp, 0xc
movq qword [0x4a8c70], xmm0
movss xmm0, dword [esp + 0x7c]
subss xmm0, dword [esp + 0x2f4]
mov dword [0x4a8c78], eax
mov eax, esp
movss dword [0x4a8c98], xmm0
movss xmm0, dword [esp + 0x80]
subss xmm0, dword [esp + 0x2f8]
movss dword [0x4a8c9c], xmm0
movss xmm0, dword [esp + 0x84]
subss xmm0, dword [esp + 0x2fc]
movss dword [0x4a8ca0], xmm0
movq xmm0, qword [esp + 0x2c]
movq qword [eax], xmm0
mov dword [eax + 8], edi
call fcn.00432930
add esp, 0xc
test al, al
je 0x43434f
movss xmm1, dword [0x4a8c9c]
movss xmm0, dword [0x4a8c98]
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm1, xmm0
movss xmm0, dword [0x4a8ca0]
mulss xmm0, xmm0
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x4340ab
sqrtsd xmm0, xmm0
jmp 0x4340b0
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
movss xmm0, dword [0x497304]
comiss xmm0, xmm1
movss dword [esp + 0x20], xmm1
jb 0x43434f
push 0xff
lea eax, [esp + 0x41c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x718]
push 0xff
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [esp + 0x40], 0xbe1902e3
lea eax, [esp + 0x1d0]
mov dword [esp + 0x44], 0xead06638
mov dword [esp + 0x48], 0x29847b43
mov dword [esp + 0x4c], 0xf194a65d
movaps xmm1, xmmword [esp + 0x40]
mov dword [esp + 0x50], 0xce7ebdf5
mov dword [esp + 0x54], 0x635ed0f6
mov dword [esp + 0x58], 0xfb258a
mov dword [esp + 0x5c], 0xc4361bb
movaps xmm2, xmmword [esp + 0x50]
push eax
movaps xmmword [esp + 0x1d4], xmm1
lea eax, [esp + 0x41c]
movaps xmmword [esp + 0x1e4], xmm2
mov dword [esp + 0x174], 0x5ebaba03
mov dword [esp + 0x178], 0x5230f080
mov dword [esp + 0x17c], 0x9d3c9bc8
mov dword [esp + 0x180], 0x111c1fbd
xorps xmm1, xmmword [esp + 0x174]
mov dword [esp + 0x184], 0xce7e3a4d
mov dword [esp + 0x188], 0x635ed0f6
mov dword [esp + 0x18c], 0xfb258a
mov dword [esp + 0x190], 0xc4361bb
xorps xmm2, xmmword [esp + 0x184]
push eax
movaps xmmword [esp + 0x1d8], xmm1
movaps xmmword [esp + 0x1e8], xmm2
call fcn.00413660
movss xmm0, dword [esp + 0x28]
lea eax, [esp + 0x48]
cvtps2pd xmm0, xmm0
mov dword [esp + 0x118], 0x38948a26
mov dword [esp + 0x11c], 0x5230f0ed
mov dword [esp + 0x120], 0x9d3c9bc8
mov dword [esp + 0x124], 0x111c1fbd
mov dword [esp + 0x128], 0x5ebaba03
movaps xmm1, xmmword [esp + 0x118]
movsd qword [esp], xmm0
push eax
movaps xmmword [esp + 0x4c], xmm1
lea eax, [esp + 0x724]
mov dword [esp + 0x130], 0x5230f080
mov dword [esp + 0x134], 0x9d3c9bc8
mov dword [esp + 0x138], 0x111c1fbd
xorps xmm1, xmmword [esp + 0x12c]
push eax
movaps xmmword [esp + 0x50], xmm1
call fcn.00413660
mov eax, dword [0x4a8670]
add esp, 0xc
movss xmm3, dword [0x48941c]
movss xmm0, dword [eax + 0x18bc]
mov esi, dword [eax + 0x18b8]
movaps xmm2, xmm0
push 0
lea eax, [esp + 0x420]
movss dword [esp + 0x28], xmm0
push eax
push ecx
lea eax, [esp + 0xb8]
mov dword [esp], 0xbf800000
push eax
mov ecx, esi
call fcn.0041fdb0
movss xmm0, dword [esp + 0xa8]
xorps xmm1, xmm1
comiss xmm0, xmm1
jbe 0x4342dc
movss xmm1, dword [esp + 0x20]
divss xmm1, dword [esi]
subss xmm0, xmm1
addss xmm0, dword [0x489338]
cvttss2si edx, dword [esp + 0x2d4]
cvttss2si ecx, dword [esp + 0x2d0]
cvttss2si eax, xmm0
movd xmm0, eax
lea eax, [esp + 0x418]
cvtdq2ps xmm0, xmm0
push eax
push 0x4a17c8
movss dword [esp + 0xb0], xmm0
call fcn.0042e880
movss xmm0, dword [esp + 0x2dc]
lea eax, [esp + 0x720]
addss xmm0, dword [0x4893b4]
cvttss2si ecx, dword [esp + 0x2d8]
push eax
push 0x4a17c8
cvttss2si edx, xmm0
call fcn.0042e880
add esp, 0x10
mov edi, dword [esp + 0x38]
mov esi, dword [esp + 0x10]
lea eax, [esp + 0x2cc]
push 0
push 4
push eax
lea eax, [esi + 0x2df4]
push eax
push dword [0x4a87b0]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [esp + 0x2cc]
mov eax, esi
or eax, dword [esp + 0x34]
movss dword [esp + 0x230], xmm0
je 0x435479
cmp edi, 0x20
je 0x4343a2
cmp edi, 0x21
jne 0x435479
comiss xmm0, dword [0x48933c]
jb 0x435479
movss xmm1, dword [0x4893e0]
comiss xmm1, xmm0
jb 0x435479
mov edi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea eax, [esp + 0x24c]
push 0
push 4
push eax
mov eax, dword [0x4a8828]
add eax, 0xf56fb4
push eax
push dword [0x4a87b0]
call edi
push 0
push 4
lea eax, [esp + 0x258]
push eax
mov eax, dword [esp + 0x258]
add eax, 0xfe8
push eax
push dword [0x4a87b0]
call edi
push 0
push 0xc
lea eax, [esp + 0x308]
push eax
mov eax, dword [esp + 0x25c]
add eax, 0xe38
push eax
push dword [0x4a87b0]
call edi
push 0
push 0xc
lea eax, [esp + 0x90]
push eax
lea eax, [esi + 0xe38]
push eax
push dword [0x4a87b0]
call edi
movss xmm1, dword [esp + 0x8c]
subss xmm1, dword [esp + 0x304]
movss xmm2, dword [esp + 0x88]
subss xmm2, dword [esp + 0x300]
movq xmm0, qword [esp + 0x88]
movq qword [0x4a8c70], xmm0
movss xmm0, dword [esp + 0x90]
subss xmm0, dword [esp + 0x308]
mov eax, dword [esp + 0x90]
movss dword [0x4a8c9c], xmm1
mulss xmm1, xmm1
mov dword [0x4a8c78], eax
movss dword [0x4a8c98], xmm2
mulss xmm2, xmm2
movss dword [0x4a8ca0], xmm0
mulss xmm0, xmm0
addss xmm1, xmm2
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x434bda
sqrtsd xmm0, xmm0
jmp 0x434bdf
cmp edi, 0x240005
jne 0x434353
push 0
push 0xc
lea eax, [esp + 0x26c]
push eax
lea eax, [esi + 0xe38]
push eax
push dword [0x4a87b0]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 0
push 4
lea eax, [esp + 0x2c8]
push eax
lea eax, [esi + 0xfc8]
push eax
push dword [0x4a87b0]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov esi, dword [esp + 0x2c0]
lea eax, [esp + 0x2c4]
push 0
push 4
push eax
mov eax, dword [0x4a8828]
add eax, 0xf56fb4
push eax
push dword [0x4a87b0]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 0
push 4
lea eax, [esp + 0x2d0]
push eax
mov eax, dword [esp + 0x2d0]
add eax, 0xfe8
push eax
push dword [0x4a87b0]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 0
push 0xc
lea eax, [esp + 0xc0]
push eax
mov eax, dword [esp + 0x2d4]
add eax, 0xe38
push eax
push dword [0x4a87b0]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [esp + 0xb8]
lea ecx, [esp + 0x1fc]
subss xmm0, dword [esp + 0x264]
mov edx, esi
mov dword [esp + 0x204], 0
movss dword [esp + 0x20], xmm0
movss xmm0, dword [esp + 0xbc]
subss xmm0, dword [esp + 0x268]
movss dword [esp + 0x28], xmm0
movss xmm0, dword [esp + 0xc0]
subss xmm0, dword [esp + 0x26c]
movss dword [esp + 0x230], xmm0
xorps xmm0, xmm0
movq qword [esp + 0x1fc], xmm0
call fcn.0042f050
movq xmm0, qword [esp + 0x264]
sub esp, 0xc
mov eax, dword [esp + 0x278]
mov ecx, esp
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
lea ecx, [esp + 0x240]
call fcn.00432930
add esp, 0xc
test al, al
je 0x434353
movss xmm0, dword [esp + 0x20]
movss xmm1, dword [esp + 0x28]
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm0, xmm1
movss xmm1, dword [esp + 0x230]
mulss xmm1, xmm1
addss xmm0, xmm1
xorps xmm1, xmm1
cvtps2pd xmm0, xmm0
ucomisd xmm1, xmm0
ja 0x434676
sqrtsd xmm0, xmm0
jmp 0x43467b
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
cvtsd2ss xmm0, xmm0
comiss xmm0, dword [0x497108]
movss dword [esp + 8], xmm0
jbe 0x4346ff
cmp byte [0x4a87b9], 0
je 0x4346ff
push 0x400
lea eax, [esp + 0x81c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x14]
lea eax, [esp + 0x824]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x204]
push str._s___0.fm
push eax
call fcn.0043de70
cvttss2si edx, dword [esp + 0x24c]
add esp, 0x14
lea eax, [esp + 0x818]
push eax
push 0x4a1978
cvttss2si ecx, dword [esp + 0x23c]
call fcn.0042e880
add esp, 8
cmp byte [0x49732c], 0
je 0x43477a
cmp dword [esp + 0x204], 7
jne 0x43477a
push 0x400
lea eax, [esp + 0xc1c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x14]
lea eax, [esp + 0xc24]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x204]
push str._s___0.fm
push eax
call fcn.0043de70
cvttss2si edx, dword [esp + 0x24c]
add esp, 0x14
lea eax, [esp + 0xc18]
push eax
push 0x4a17e8
cvttss2si ecx, dword [esp + 0x23c]
call fcn.0042e880
add esp, 8
cmp byte [0x4a8824], 0
je 0x4347f5
cmp dword [esp + 0x204], 8
jne 0x4347f5
push 0x400
lea eax, [esp + 0x101c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x14]
lea eax, [esp + 0x1024]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x204]
push str._s___0.fm
push eax
call fcn.0043de70
cvttss2si edx, dword [esp + 0x24c]
add esp, 0x14
lea eax, [esp + 0x1018]
push eax
push 0x4a1828
cvttss2si ecx, dword [esp + 0x23c]
call fcn.0042e880
add esp, 8
cmp byte [0x49710c], 0
je 0x434870
cmp dword [esp + 0x204], 9
jne 0x434870
push 0x400
lea eax, [esp + 0x141c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x14]
lea eax, [esp + 0x1424]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x204]
push str._s___0.fm
push eax
call fcn.0043de70
cvttss2si edx, dword [esp + 0x24c]
add esp, 0x14
lea eax, [esp + 0x1418]
push eax
push 0x4a1898
cvttss2si ecx, dword [esp + 0x23c]
call fcn.0042e880
add esp, 8
cmp byte [0x4a87c0], 0
je 0x4348eb
cmp dword [esp + 0x204], 0xa
jne 0x4348eb
push 0x400
lea eax, [esp + 0x181c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x14]
lea eax, [esp + 0x1824]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x204]
push str._s___0.fm
push eax
call fcn.0043de70
cvttss2si edx, dword [esp + 0x24c]
add esp, 0x14
lea eax, [esp + 0x1818]
push eax
push 0x4a17c8
cvttss2si ecx, dword [esp + 0x23c]
call fcn.0042e880
add esp, 8
cmp byte [0x4a866d], 0
je 0x434966
cmp dword [esp + 0x204], 2
jne 0x434966
push 0x400
lea eax, [esp + 0x1c1c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x14]
lea eax, [esp + 0x1c24]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x204]
push str._s___0.fm
push eax
call fcn.0043de70
cvttss2si edx, dword [esp + 0x24c]
add esp, 0x14
lea eax, [esp + 0x1c18]
push eax
push 0x4a1958
cvttss2si ecx, dword [esp + 0x23c]
call fcn.0042e880
add esp, 8
cmp byte [0x4a8782], 0
je 0x4349e1
cmp dword [esp + 0x204], 0
jne 0x4349e1
push 0x400
lea eax, [esp + 0x201c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x14]
lea eax, [esp + 0x2024]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x204]
push str._s___0.fm
push eax
call fcn.0043de70
cvttss2si edx, dword [esp + 0x24c]
add esp, 0x14
lea eax, [esp + 0x2018]
push eax
push 0x4a1818
cvttss2si ecx, dword [esp + 0x23c]
call fcn.0042e880
add esp, 8
cmp byte [0x49710d], 0
je 0x434a5c
cmp dword [esp + 0x204], 4
jne 0x434a5c
push 0x400
lea eax, [esp + 0x241c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x14]
lea eax, [esp + 0x2424]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x204]
push str._s___0.fm
push eax
call fcn.0043de70
cvttss2si edx, dword [esp + 0x24c]
add esp, 0x14
lea eax, [esp + 0x2418]
push eax
push 0x4a1858
cvttss2si ecx, dword [esp + 0x23c]
call fcn.0042e880
add esp, 8
cmp byte [0x4a8780], 0
je 0x434ad7
cmp dword [esp + 0x204], 5
jne 0x434ad7
push 0x400
lea eax, [esp + 0x281c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x14]
lea eax, [esp + 0x2824]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x204]
push str._s___0.fm
push eax
call fcn.0043de70
cvttss2si edx, dword [esp + 0x24c]
add esp, 0x14
lea eax, [esp + 0x2818]
push eax
push 0x4a1928
cvttss2si ecx, dword [esp + 0x23c]
call fcn.0042e880
add esp, 8
cmp byte [0x4a87ba], 0
je 0x434b52
cmp dword [esp + 0x204], 0xb
jne 0x434b52
push 0x400
lea eax, [esp + 0x2c1c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x14]
lea eax, [esp + 0x2c24]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x204]
push str._s___0.fm
push eax
call fcn.0043de70
cvttss2si edx, dword [esp + 0x24c]
add esp, 0x14
lea eax, [esp + 0x2c18]
push eax
push 0x4a1aa8
cvttss2si ecx, dword [esp + 0x23c]
call fcn.0042e880
add esp, 8
cmp byte [0x4a87c1], 0
je 0x434353
cmp dword [esp + 0x204], 0xe
jne 0x434353
push 0x400
lea eax, [esp + 0x301c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [esp + 0x14]
lea eax, [esp + 0x3024]
cvtps2pd xmm0, xmm0
add esp, 4
movsd qword [esp], xmm0
push dword [esp + 0x204]
push str._s___0.fm
push eax
call fcn.0043de70
cvttss2si edx, dword [esp + 0x24c]
add esp, 0x14
lea eax, [esp + 0x3018]
push eax
push 0x4a1b28
cvttss2si ecx, dword [esp + 0x23c]
call fcn.0042e880
add esp, 8
jmp 0x434353
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
cvtsd2ss xmm0, xmm0
push 6
mov edx, esi
lea ecx, [esp + 0x1bc]
movss dword [esp + 0xc], xmm0
call fcn.00432750
mov eax, dword [0x4a87d4]
add esp, 4
sub eax, 0
je 0x434c16
sub eax, 1
jne 0x434c21
mov eax, 3
mov dword [esp + 0x68], eax
jmp 0x434c25
mov eax, 6
mov dword [esp + 0x68], eax
jmp 0x434c25
mov eax, dword [esp + 0x68]
push eax
mov edx, esi
lea ecx, [esp + 0x1b0]
call fcn.00432750
movq xmm0, qword [esp + 0x1b0]
sub esp, 8
mov eax, dword [esp + 0x1c0]
mov ecx, esp
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
mov ecx, 0x4a8c8c
call fcn.00432930
movq xmm0, qword [0x4a8c70]
mov ecx, esp
mov eax, dword [0x4a8c78]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
mov ecx, 0x4a8c80
call fcn.00432930
movq xmm0, qword [esp + 0x1c4]
mov ecx, esp
mov eax, dword [esp + 0x1cc]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
mov ecx, 0x4a8cb0
call fcn.00432930
add esp, 0xc
test al, al
je 0x435479
movss xmm0, dword [0x4a8c84]
subss xmm0, dword [0x4a8cb4]
push 0xff
push 0
cvttss2si eax, xmm0
mov dword [esp + 0x18], eax
cdq
sub eax, edx
mov edi, eax
lea eax, [esp + 0x320]
push eax
sar edi, 1
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [0x497314]
add esp, 0xc
movss xmm1, dword [esp + 8]
comiss xmm0, xmm1
jb 0x434f57
cmp byte [0x4a87ad], 0
je 0x434dcb
mov dword [esp + 0x130], 0x38948a26
lea eax, [esp + 0x40]
mov dword [esp + 0x134], 0x5230f0ed
sub esp, 8
mov dword [esp + 0x140], 0x9d3c9bc8
mov dword [esp + 0x144], 0x111c1fbd
movaps xmm1, xmmword [esp + 0x138]
movaps xmmword [esp + 0x48], xmm1
mov dword [esp + 0x148], 0x5ebaba03
mov dword [esp + 0x14c], 0x5230f080
mov dword [esp + 0x150], 0x9d3c9bc8
mov dword [esp + 0x154], 0x111c1fbd
movaps xmm0, xmmword [esp + 0x148]
xorps xmm0, xmm1
movaps xmmword [esp + 0x48], xmm0
movss xmm0, dword [esp + 0x10]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push eax
lea eax, [esp + 0x324]
push eax
call fcn.00413660
movss xmm0, dword [0x4a8c80]
lea eax, [esp + 0x328]
subss xmm0, dword [0x4893a8]
cvttss2si edx, dword [0x4a8c84]
push eax
push 0x4a1978
cvttss2si ecx, xmm0
call fcn.0042e880
add esp, 0x18
cmp byte [0x4a8815], 0
je 0x434eb0
mov dword [esp + 0x150], 0x7b80ea4b
lea eax, [esp + 0x40]
mov dword [esp + 0x154], 0x3400deb0
sub esp, 8
mov dword [esp + 0x160], 0x9d3c9bc8
mov dword [esp + 0x164], 0x111c1fbd
movaps xmm1, xmmword [esp + 0x158]
movaps xmmword [esp + 0x48], xmm1
mov dword [esp + 0x168], 0x5ebaba03
mov dword [esp + 0x16c], 0x5230f080
mov dword [esp + 0x170], 0x9d3c9bc8
mov dword [esp + 0x174], 0x111c1fbd
movaps xmm0, xmmword [esp + 0x168]
xorps xmm0, xmm1
movaps xmmword [esp + 0x48], xmm0
movss xmm0, dword [esp + 0x238]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push eax
lea eax, [esp + 0x324]
push eax
call fcn.00413660
movss xmm0, dword [0x4a8c84]
lea eax, [esp + 0x328]
addss xmm0, dword [0x4893d8]
push eax
push 0x4a1978
cvttss2si edx, xmm0
movss xmm0, dword [0x4a8c80]
subss xmm0, dword [0x4893a8]
cvttss2si ecx, xmm0
call fcn.0042e880
add esp, 0x18
cmp byte [0x4a87c3], 0
je 0x434ef5
movd xmm3, dword [esp + 0x10]
mov eax, edi
movss xmm0, dword [0x4a8c80]
mov ecx, 0x49731c
cdq
sub eax, edx
movd xmm2, edi
sar eax, 1
cvtdq2ps xmm3, xmm3
movd xmm1, eax
cvtdq2ps xmm1, xmm1
cvtdq2ps xmm2, xmm2
subss xmm0, xmm1
movss xmm1, dword [0x4a8cb4]
call fcn.0042ec70
cmp byte [0x4a87be], 0
je 0x434f0a
mov edx, 0x4a1978
mov ecx, esi
call fcn.00432a60
cmp byte [0x4a87bf], 0
je 0x434f51
movd xmm1, edi
cvtdq2ps xmm1, xmm1
movss xmm0, dword [0x4a8c80]
divss xmm1, dword [0x489358]
movd xmm3, dword [esp + 0x10]
cvttss2si edx, dword [0x4a8c84]
movss xmm2, dword [esp + 0x230]
subss xmm0, xmm1
cvtdq2ps xmm3, xmm3
cvttss2si ecx, xmm0
call fcn.004331e0
movss xmm1, dword [esp + 8]
movss xmm0, dword [0x497300]
comiss xmm0, xmm1
jb 0x435024
mov eax, dword [0x4a8c7c]
movss xmm2, dword [0x4a8c8c]
movss xmm1, dword [0x4a8c90]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
mov eax, dword [0x4a882c]
cvtdq2ps xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
cmp byte [0x49710e], 0
subss xmm2, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm2, xmm2
subss xmm1, xmm0
mulss xmm1, xmm1
addss xmm1, xmm2
cvtps2pd xmm0, xmm1
xorps xmm1, xmm1
je 0x434ff8
ucomisd xmm1, xmm0
ja 0x434fc9
sqrtsd xmm0, xmm0
jmp 0x434fce
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
movd xmm0, dword [0x4a1c28]
cvtdq2ps xmm0, xmm0
comiss xmm0, xmm1
jbe 0x435024
movss xmm0, dword [esp + 0x2c]
comiss xmm0, xmm1
jbe 0x435024
movss dword [esp + 0x2c], xmm1
jmp 0x43501e
ucomisd xmm1, xmm0
ja 0x435004
sqrtsd xmm0, xmm0
jmp 0x435009
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
movss xmm1, dword [esp + 0x2c]
cvtsd2ss xmm0, xmm0
comiss xmm1, xmm0
jbe 0x435024
movss dword [esp + 0x2c], xmm0
mov dword [0x4a8810], esi
mov edi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea eax, [esp + 0x2dc]
push 0
push 0xc
push eax
lea eax, [esi + 0xe38]
push eax
push dword [0x4a87b0]
call edi
push 0
push 4
lea eax, [esp + 0x25c]
push eax
mov eax, dword [0x4a8828]
add eax, 0xf56fb4
push eax
push dword [0x4a87b0]
call edi
push 0
push 4
lea eax, [esp + 0x260]
push eax
mov eax, dword [esp + 0x260]
add eax, 0xfe8
push eax
push dword [0x4a87b0]
call edi
push 0
push 0xc
lea eax, [esp + 0xcc]
push eax
mov eax, dword [esp + 0x264]
add eax, 0xe38
push eax
push dword [0x4a87b0]
call edi
movss xmm0, dword [esp + 0xc8]
movss xmm2, dword [esp + 0xc4]
subss xmm2, dword [esp + 0x2dc]
subss xmm0, dword [esp + 0x2e0]
movss xmm1, dword [esp + 0xcc]
subss xmm1, dword [esp + 0x2e4]
mulss xmm2, xmm2
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm2, xmm0
addss xmm2, xmm1
xorps xmm1, xmm1
cvtps2pd xmm0, xmm2
ucomisd xmm1, xmm0
ja 0x435102
sqrtsd xmm0, xmm0
jmp 0x435107
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
cvtsd2ss xmm0, xmm0
comiss xmm0, dword [0x497314]
ja 0x435479
cmp byte [0x4a87b8], 0
je 0x43523b
push 0
push 4
lea eax, [esp + 0x264]
push eax
lea eax, [esi + 0x2f88]
push eax
push dword [0x4a87b0]
call edi
mov edi, dword [esp + 0x25c]
test edi, edi
je 0x435235
push 0x400
lea eax, [esp + 0x341c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x4018]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [esp + 0x210], 0
xorps xmm0, xmm0
lea ecx, [esp + 0x208]
mov edx, edi
movq qword [esp + 0x208], xmm0
call fcn.0042f050
push dword [esp + 0x208]
lea eax, [esp + 0x341c]
push 0x483d38
push eax
call fcn.0043de70
movss xmm0, dword [0x4a8c84]
lea eax, [esp + 0x3424]
addss xmm0, dword [0x4893bc]
add esp, 0xc
cvttss2si edx, xmm0
push eax
push 0x4a1858
movss xmm0, dword [0x4a8c80]
subss xmm0, dword [0x4893a8]
cvttss2si ecx, xmm0
call fcn.0042e880
movss xmm0, dword [0x4a8c84]
lea eax, [esp + 0x4020]
addss xmm0, dword [0x4893c8]
push eax
push 0x4a17a8
cvttss2si edx, xmm0
movss xmm0, dword [0x4a8c80]
subss xmm0, dword [0x4893d4]
cvttss2si ecx, xmm0
call fcn.0042e880
add esp, 0x10
mov edi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [0x4a866f], 0
je 0x435358
push 0
push 4
lea eax, [esp + 0x268]
push eax
lea eax, [esi + 0x3110]
push eax
push dword [0x4a87b0]
call edi
mov edi, dword [esp + 0x260]
test edi, edi
je 0x435358
push 0x400
lea eax, [esp + 0x381c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x4418]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [esp + 0x21c], 0
xorps xmm0, xmm0
lea ecx, [esp + 0x214]
mov edx, edi
movq qword [esp + 0x214], xmm0
call fcn.0042f050
push dword [esp + 0x214]
lea eax, [esp + 0x381c]
push 0x483d38
push eax
call fcn.0043de70
movss xmm0, dword [0x4a8c84]
lea eax, [esp + 0x3824]
addss xmm0, dword [0x4893c4]
add esp, 0xc
cvttss2si edx, xmm0
push eax
push 0x4a1858
movss xmm0, dword [0x4a8c80]
subss xmm0, dword [0x4893a8]
cvttss2si ecx, xmm0
call fcn.0042e880
movss xmm0, dword [0x4a8c84]
lea eax, [esp + 0x4420]
addss xmm0, dword [0x4893d4]
push eax
push 0x4a17a8
cvttss2si edx, xmm0
movss xmm0, dword [0x4a8c80]
subss xmm0, dword [0x4893d4]
cvttss2si ecx, xmm0
call fcn.0042e880
add esp, 0x10
cmp byte [0x4a8814], 0
je 0x435479
push 0
push 4
lea eax, [esp + 0x278]
push eax
lea eax, [esi + 0x30d8]
push eax
push dword [0x4a87b0]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov esi, dword [esp + 0x270]
test esi, esi
je 0x435479
push 0x400
lea eax, [esp + 0x3c1c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x4818]
push 0x400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [esp + 0x228], 0
xorps xmm0, xmm0
lea ecx, [esp + 0x220]
mov edx, esi
movq qword [esp + 0x220], xmm0
call fcn.0042f050
push dword [esp + 0x220]
lea eax, [esp + 0x3c1c]
push 0x483d38
push eax
call fcn.0043de70
movss xmm0, dword [0x4a8c84]
lea eax, [esp + 0x3c24]
addss xmm0, dword [0x4893d0]
add esp, 0xc
cvttss2si edx, xmm0
push eax
push 0x4a1858
movss xmm0, dword [0x4a8c80]
subss xmm0, dword [0x4893a8]
cvttss2si ecx, xmm0
call fcn.0042e880
movss xmm0, dword [0x4a8c84]
lea eax, [esp + 0x4820]
addss xmm0, dword [0x4893dc]
push eax
push 0x4a17a8
cvttss2si edx, xmm0
movss xmm0, dword [0x4a8c80]
subss xmm0, dword [0x4893d4]
cvttss2si ecx, xmm0
call fcn.0042e880
add esp, 0x10
mov edi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ecx, dword [0x4a8ca4]
mov eax, dword [0x4a8ca8]
mov esi, dword [esp + 0x6c]
sub eax, ecx
inc esi
sar eax, 4
mov dword [esp + 0x6c], esi
cmp esi, eax
jbe 0x433676
cmp dword [0x4a8810], 0
je 0x4354b7
cmp byte [0x4a87bd], 0
je 0x4354b7
call fcn.00433390
mov ecx, dword [esp + 0x4c1c]
pop edi
pop esi
xor ecx, esp
call fcn.00476194
mov esp, ebp
pop ebp
ret