Function at 0x40b760
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x28
push esi
push edi
mov edi, dword [0x443af8]
mov dword [esp + 0x14], edi
mov ecx, dword [edi + 0x5aa0]
lea edx, [ecx - 1]
mov dword [esp + 0x1c], edx
test edx, edx
js 0x40b7fe
lea eax, [edx + edx*4]
shl eax, 2
mov dword [esp + 0x18], eax
mov ecx, dword [edi + 0x5aa8]
cmp dword [ecx + eax + 4], 7
jne 0x40b7e8
mov esi, ecx
sub ecx, esi
add ecx, eax
mov eax, 0x66666667
imul ecx
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
lea eax, [ecx + ecx*4]
lea edx, [esi + eax*4]
mov eax, dword [edi + 0x5aa0]
sub eax, ecx
lea eax, [eax + eax*4]
lea eax, [eax*4 - 0x14]
push eax
lea eax, [edx + 0x14]
push eax
push edx
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [esp + 0x24]
add esp, 0xc
dec dword [edi + 0x5aa0]
mov edx, dword [esp + 0x1c]
mov ecx, dword [edi + 0x5aa0]
dec edx
sub eax, 0x14
mov dword [esp + 0x1c], edx
mov dword [esp + 0x18], eax
test edx, edx
jns 0x40b790
xor esi, esi
test ecx, ecx
jle 0x40b83c
xor ecx, ecx
mov dword [esp + 0x1c], ecx
nop word [eax + eax]
mov eax, dword [edi + 0x5aa8]
add eax, ecx
cmp dword [eax + 4], 0
jne 0x40b82c
push eax
mov eax, dword [eax + 0xc]
push edi
call eax
mov ecx, dword [esp + 0x24]
add esp, 8
inc esi
add ecx, 0x14
mov dword [esp + 0x1c], ecx
cmp esi, dword [edi + 0x5aa0]
jl 0x40b810
mov esi, dword [0x443af8]
cmp byte [esi + 0x66], 0
je 0x40b852
test byte [esi + 0xc], 2
jne 0x40b852
mov byte [esi + 0x66], 0
cmp byte [esi + 0x5a69], 0
jne 0x40b8b8
mov ecx, dword [esi + 0x20]
test ecx, ecx
je 0x40b8b1
push ecx
lea eax, [esp + 0x20]
mov dword [esp + 0x20], 0
push eax
call fcn.00407fc0
mov ecx, eax
add esp, 8
mov dword [esp + 0x20], ecx
test ecx, ecx
je 0x40b8b1
mov edx, dword [esp + 0x1c]
test edx, edx
je 0x40b893
call fcn.0041acc0
mov ecx, dword [esp + 0x20]
mov eax, dword [0x443af8]
test eax, eax
je 0x40b8a2
dec dword [eax + 0xb4]
push dword [0x443af0]
push ecx
call fcn.00407590
add esp, 8
mov byte [esi + 0x5a69], 1
movss xmm0, dword [esi + 0x5a6c]
xorps xmm1, xmm1
comiss xmm0, xmm1
jbe 0x40b954
subss xmm0, dword [esi + 0x18]
comiss xmm1, xmm0
movss dword [esi + 0x5a6c], xmm0
jb 0x40b954
mov eax, dword [esi + 0x20]
mov dword [esp + 0x20], eax
test eax, eax
je 0x40b943
mov eax, dword [0x443af8]
lea ecx, [esp + 0x1c]
mov dword [esp + 0x1c], 0
mov dword [eax + 0x5a6c], 0
call fcn.0041aef0
mov ecx, dword [esp + 0x20]
mov edx, 0x43e940
mov dword [esp + 0x18], eax
call fcn.00407ea0
mov dword [esp + 0x20], eax
test eax, eax
je 0x40b94a
push eax
push dword [esp + 0x20]
push 1
push dword [esp + 0x24]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
push dword [esp + 0x30]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 0x14
jmp 0x40b94a
mov byte [esi + 0x9c], 1
mov dword [esi + 0x5a6c], 0
movss xmm1, dword [edi + 0x18]
xor eax, eax
inc dword [edi + 0x3df0]
cvtps2pd xmm0, xmm1
mov byte [edi + 0x3dfc], 1
mov word [edi + 0x5a2e], ax
mov dword [edi + 0x3e64], eax
addsd xmm0, qword [edi + 0x3de8]
movsd qword [edi + 0x3de8], xmm0
mov ecx, dword [edi + 0x5a40]
test ecx, ecx
jns 0x40b9b3
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [edi + 0x5a3c]
call fcn.0041c3c0
movss xmm1, dword [edi + 0x18]
mov dword [edi + 0x5a3c], 0
movaps xmm0, xmm1
mov eax, dword [edi + 0x5c4c]
mov ecx, 0x3c
subss xmm0, dword [edi + eax*4 + 0x5b5c]
addss xmm0, dword [edi + 0x5c54]
movss dword [edi + 0x5c54], xmm0
movss dword [edi + eax*4 + 0x5b5c], xmm1
mov eax, dword [edi + 0x5c4c]
inc eax
movss xmm1, dword [edi + 0x5c54]
cdq
idiv ecx
mov eax, dword [edi + 0x5c50]
movss xmm0, dword [0x43f508]
inc eax
cmp eax, ecx
mov dword [edi + 0x5c4c], edx
movss dword [esp + 0x10], xmm0
cmovl ecx, eax
comiss xmm1, dword [0x43f3a4]
mov dword [edi + 0x5c50], ecx
jbe 0x40ba45
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
divss xmm1, xmm0
movss xmm0, dword [0x43f424]
divss xmm0, xmm1
movss dword [edi + 0xa0], xmm0
mov ecx, dword [edi + 0x3e18]
test ecx, ecx
jns 0x40ba73
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [edi + 0x3e14]
call fcn.0041cae0
mov dword [edi + 0x3e14], 0
mov cl, byte [edi + 0x62]
call fcn.00414e80
mov esi, dword [0x443af8]
mov eax, dword [esi + 0x47ec]
mov edx, dword [eax]
mov dword [edx], 5
mov dword [edx + 4], 0
mov dword [edx + 8], 0
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0x14]
mov dword [edx + 0xc], eax
mov dword [edx + 0x10], ecx
cmp dword [esi + 0x47e4], 0
jle 0x40bb95
xor edi, edi
mov eax, dword [esi + 0x47ec]
xorps xmm2, xmm2
mov edx, dword [eax + edi*4]
inc edi
mov eax, dword [edx + 0x8c]
mov ecx, dword [edx + 0x90]
movss xmm1, dword [edx + 4]
mov dword [edx + 0x7c], eax
mov eax, dword [edx + 0x94]
mov dword [edx + 0x80], ecx
mov ecx, dword [edx + 0x98]
mov dword [edx + 0x84], eax
mov dword [edx + 0x88], ecx
mov dword [edx + 0x94], 0
mov eax, dword [edx + 0x94]
mov dword [edx + 0x98], 0
mov ecx, dword [edx + 0x98]
mov dword [edx + 0x8c], eax
mov dword [edx + 0x90], ecx
movss xmm0, dword [edx + 0x80]
addss xmm0, dword [edx + 8]
addss xmm1, dword [edx + 0x7c]
movss dword [edx + 0x18], xmm0
movss xmm0, dword [edx + 0xc]
movss dword [edx + 0x14], xmm1
xorps xmm1, xmm1
subss xmm0, dword [edx + 0x7c]
addss xmm0, dword [edx + 0x84]
maxss xmm2, xmm0
movss xmm0, dword [edx + 0x10]
subss xmm0, dword [edx + 0x80]
addss xmm0, dword [edx + 0x88]
movss dword [edx + 0x1c], xmm2
maxss xmm1, xmm0
movss dword [edx + 0x20], xmm1
cmp edi, dword [esi + 0x47e4]
jl 0x40bac2
mov edi, dword [esp + 0x14]
mov eax, dword [edi + 0x48]
mov byte [eax + 0x10], 1
mov ecx, dword [esi + 0x54]
test ecx, ecx
jne 0x40bbab
mov eax, dword [esi + 0x48]
mov eax, dword [eax + 0x44]
mov ecx, dword [eax]
call fcn.00413170
movss xmm7, dword [0x43f508]
movss xmm4, dword [0x43f520]
movaps xmm6, xmm7
mov edx, dword [edi + 0x47e4]
movaps xmm5, xmm4
test edx, edx
jle 0x40bc1a
mov ecx, dword [edi + 0x47ec]
mov eax, dword [ecx]
movss xmm3, dword [eax + 4]
comiss xmm7, xmm3
movss xmm2, dword [eax + 8]
movaps xmm0, xmm3
addss xmm0, dword [eax + 0xc]
movaps xmm1, xmm2
addss xmm1, dword [eax + 0x10]
jbe 0x40bbfa
movaps xmm7, xmm3
comiss xmm6, xmm2
jbe 0x40bc02
movaps xmm6, xmm2
comiss xmm0, xmm4
jbe 0x40bc0a
movaps xmm4, xmm0
comiss xmm1, xmm5
jbe 0x40bc12
movaps xmm5, xmm1
add ecx, 4
sub edx, 1
jne 0x40bbd6
mov eax, dword [edi + 0x385c]
movss xmm1, dword [edi + 0x3860]
movss dword [esp + 0x20], xmm7
movss dword [esp + 0x24], xmm6
movss dword [esp + 0x28], xmm4
movss dword [esp + 0x2c], xmm5
movups xmm0, xmmword [esp + 0x20]
mov dword [edi + 0x3bec], eax
movups xmmword [edi + 0x3bf4], xmm0
movss xmm0, dword [edi + 0x3bf0]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x40bd4a
movss dword [edi + 0x3bf0], xmm1
xor esi, esi
movd xmm0, esi
cvtdq2ps xmm0, xmm0
test esi, esi
je 0x40bd03
movss xmm1, dword [edi + 0x3bf0]
minss xmm1, xmm0
divss xmm1, xmm0
movss xmm0, dword [0x43f424]
subss xmm0, xmm1
cvtps2pd xmm0, xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_acos_precise
movss xmm1, dword [0x43f480]
sub esp, 8
cvtsd2ss xmm0, xmm0
divss xmm1, xmm0
cvtps2pd xmm0, xmm1
movsd qword [esp + 0x28], xmm0
fld qword [esp + 0x28]
fstp qword [esp]
call sub.api_ms_win_crt_math_l1_1_0.dll_ceil
fstp qword [esp + 0x28]
movsd xmm0, qword [esp + 0x28]
add esp, 8
cvtpd2ps xmm0, xmm0
cvttss2si eax, xmm0
inc eax
cdq
sub eax, edx
and eax, 0xfffffffe
cmp eax, 4
jge 0x40bcf4
mov eax, 4
jmp 0x40bd08
cmp eax, 0x200
mov ecx, 0x200
cmovg eax, ecx
jmp 0x40bd08
mov eax, 0x30
mov byte [edi + esi + 0x3d98], al
inc esi
cmp esi, 0x40
jl 0x40bc71
movsd xmm0, qword [0x43f440]
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_cos_precise
movss xmm1, dword [0x43f424]
cvtsd2ss xmm0, xmm0
subss xmm1, xmm0
movss xmm0, dword [edi + 0x3bf0]
divss xmm0, xmm1
movss dword [edi + 0x3d94], xmm0
xor edx, edx
mov dword [edi + 0x3c04], 0
cmp byte [edi + 0x3858], dl
je 0x40bd6d
mov dword [edi + 0x3c04], 1
mov edx, 1
cmp byte [edi + 0x3859], 0
mov ecx, edx
je 0x40bd8f
mov eax, dword [edi + 0x3bd0]
mov eax, dword [eax + 0x30]
test byte [eax], 4
jne 0x40bd8f
or ecx, 2
mov dword [edi + 0x3c04], ecx
cmp byte [edi + 0x385a], 0
je 0x40bda1
or ecx, 4
mov dword [edi + 0x3c04], ecx
test byte [edi + 0xc], 8
je 0x40bdb0
or ecx, 8
mov dword [edi + 0x3c04], ecx
xor esi, esi
cmp dword [edi + 0x47e4], esi
jle 0x40bde2
nop word [eax + eax]
mov eax, dword [edi + 0x47ec]
push 0x2c
push 0
mov eax, dword [eax + esi*4]
add eax, 0x38
push eax
call sub.VCRUNTIME140.dll_memset
inc esi
add esp, 0xc
cmp esi, dword [edi + 0x47e4]
jl 0x40bdc0
cmp byte [edi + 0x498c], 0
je 0x40be1b
mov ecx, dword [edi + 0x49a4]
cmp ecx, dword [edi + 0x3ebc]
jne 0x40be1b
mov eax, dword [0x443af8]
cmp dword [eax + 0x3ebc], ecx
jne 0x40be0c
mov dword [eax + 0x3ec0], ecx
cmp dword [eax + 0x3ee4], ecx
jne 0x40be1b
mov byte [eax + 0x3ee8], 1
cmp dword [edi + 0x3eac], 0
mov eax, dword [edi + 0x3ea8]
jne 0x40be36
mov dword [edi + 0x3eb4], 0
jmp 0x40be44
mov ecx, eax
test eax, eax
je 0x40be50
cmp dword [edi + 0x3ebc], eax
jne 0x40be54
mov dword [edi + 0x3eb8], 0
mov ecx, eax
test ecx, ecx
je 0x40be88
movss xmm1, dword [edi + 0x18]
mov eax, dword [edi + 0x3ebc]
movaps xmm0, xmm1
addss xmm0, dword [edi + 0x3eb4]
movss dword [edi + 0x3eb4], xmm0
cmp eax, ecx
je 0x40be8e
addss xmm1, dword [edi + 0x3eb8]
movss dword [edi + 0x3eb8], xmm1
jmp 0x40be8e
mov eax, dword [edi + 0x3ebc]
mov dword [edi + 0x3eac], ecx
mov dword [edi + 0x3ea8], 0
mov word [edi + 0x3eb0], 0
test eax, eax
je 0x40beda
cmp dword [edi + 0x3ec0], eax
je 0x40beda
cmp dword [edi + 0x3ee4], eax
jne 0x40beda
test byte [edi + 0x5b00], 1
je 0x40bed1
push str.NewFrame__:_ClearActiveID___because_it_isnt_marked_alive_anymore__n
call fcn.0041b7d0
add esp, 4
xor edx, edx
xor ecx, ecx
call fcn.0040ab50
mov esi, dword [edi + 0x3ebc]
test esi, esi
je 0x40bef9
movss xmm0, dword [edi + 0x18]
addss xmm0, dword [edi + 0x3ec4]
movss dword [edi + 0x3ec4], xmm0
mov eax, dword [edi + 0x3ed8]
movss xmm0, dword [edi + 0x18]
addss xmm0, dword [edi + 0x3ef4]
mov dword [edi + 0x3eec], eax
mov al, byte [edi + 0x3ecc]
mov byte [edi + 0x3ee9], al
mov eax, dword [edi + 0x59b4]
movss dword [edi + 0x3ef4], xmm0
mov dword [edi + 0x3ee4], esi
mov dword [edi + 0x3ec0], 0
mov byte [edi + 0x3ecd], 0
mov byte [edi + 0x3ee8], 0
mov byte [edi + 0x3ec8], 0
test eax, eax
je 0x40bf63
cmp esi, eax
je 0x40bf63
mov dword [edi + 0x59b4], 0
test esi, esi
jne 0x40bf82
mov dword [edi + 0x46c0], esi
mov dword [edi + 0x46b8], esi
mov byte [edi + 0x46bc], 0
mov dword [edi + 0x46c0], esi
jmp 0x40bfab
mov eax, dword [edi + 0x46c0]
test eax, eax
je 0x40bfab
test al, 2
je 0x40bfab
mov ecx, dword [0x443af8]
mov edx, 0x20e
call fcn.004074d0
mov dword [eax + 4], esi
mov dword [eax], esi
mov word [eax + 8], 0
mov eax, dword [edi + 0x4ab4]
movss xmm0, dword [edi + 0x4abc]
mov dword [edi + 0x4ab8], eax
test eax, eax
je 0x40bfdc
addss xmm0, dword [edi + 0x18]
mov dword [edi + 0x4ab4], 0
movss dword [edi + 0x4abc], xmm0
jmp 0x40c01c
comiss xmm0, dword [0x43f3a4]
jbe 0x40c026
movss xmm1, dword [edi + 0x18]
movss xmm0, dword [0x43f3d8]
movaps xmm2, xmm1
addss xmm2, dword [edi + 0x4ac0]
addss xmm1, xmm1
movss dword [edi + 0x4ac0], xmm2
maxss xmm0, xmm1
comiss xmm2, xmm0
jb 0x40c026
mov dword [edi + 0x4abc], 0
mov dword [edi + 0x4ac0], 0
mov eax, dword [edi + 0x49f0]
mov dword [edi + 0x49f4], eax
mov dword [edi + 0x49f0], 0
mov dword [edi + 0x49ec], 0x7f7fffff
mov word [edi + 0x498d], 0
mov dword [edi + 0x49fc], 0
call fcn.00413cb0
call fcn.00417c10
call fcn.00414180
call fcn.0040b4f0
mov esi, dword [0x443af8]
mov ecx, dword [esi + 0x3e7c]
test ecx, ecx
je 0x40c112
mov eax, dword [esi + 0x3ebc]
mov dword [esi + 0x3ec0], eax
cmp dword [esi + 0x3ee4], eax
jne 0x40c09c
mov byte [esi + 0x3ee8], 1
cmp byte [esi + 0xdc8], 0
je 0x40c106
movss xmm1, dword [esi + 0xdc0]
movss xmm2, dword [0x43f51c]
comiss xmm1, xmm2
movss xmm0, dword [esi + 0xdc4]
jb 0x40c106
comiss xmm0, xmm2
jb 0x40c106
subss xmm1, dword [esi + 0x3ed0]
subss xmm0, dword [esi + 0x3ed4]
mov ecx, dword [ecx + 0x300]
lea edx, [esp + 0x20]
push 1
movss dword [esp + 0x24], xmm1
movss dword [esp + 0x28], xmm0
call fcn.00413230
mov ecx, dword [esi + 0x3e7c]
add esp, 4
xor edx, edx
call fcn.00412d20
jmp 0x40c14e
mov dword [esi + 0x3e7c], 0
jmp 0x40c145
mov ecx, dword [esi + 0x3ed8]
test ecx, ecx
je 0x40c14e
mov eax, dword [esi + 0x3ebc]
cmp dword [ecx + 0x70], eax
jne 0x40c14e
mov dword [esi + 0x3ec0], eax
cmp dword [esi + 0x3ee4], eax
jne 0x40c13c
mov byte [esi + 0x3ee8], 1
cmp byte [esi + 0xdc8], 0
jne 0x40c14e
xor edx, edx
xor ecx, ecx
call fcn.0040ab50
mov eax, dword [0x443af8]
mov edx, dword [eax + 0x47c8]
sub edx, 1
js 0x40c187
mov eax, dword [eax + 0x47d0]
lea ecx, [edx + edx*4]
lea eax, [eax + ecx*8]
add eax, 4
nop dword [eax]
mov ecx, dword [eax]
test ecx, ecx
je 0x40c17f
test dword [ecx + 0xc], 0x8000000
jne 0x40c1a1
sub eax, 0x28
sub edx, 1
jns 0x40c170
cmp dword [edi + 0x495c], 0
je 0x40c1c0
movss xmm0, dword [edi + 0x496c]
comiss xmm0, dword [0x43f3a4]
jbe 0x40c1c0
movss xmm1, dword [edi + 0x18]
mulss xmm1, dword [0x43f498]
addss xmm1, dword [edi + 0x4984]
minss xmm1, dword [0x43f424]
jmp 0x40c1e1
movss xmm0, dword [edi + 0x18]
mulss xmm0, dword [0x43f4a4]
movss xmm1, dword [edi + 0x4984]
subss xmm1, xmm0
maxss xmm1, dword [0x43f3a4]
movups xmm0, xmmword [edi + 0x5a48]
mov dword [edi + 0x4988], 0
movss dword [edi + 0x4984], xmm1
mov dword [edi + 0x5c60], 0xffffffff
mov dword [edi + 0x5c5c], 0xffffffff
mov dword [edi + 0x5c58], 0xffffffff
movups xmmword [edi + 0x5a58], xmm0
mov byte [edi + 0x5a48], 0
call fcn.004145d0
cmp byte [edi + 0x3dff], 0
jne 0x40c259
movss xmm0, dword [edi + 0x68]
xorps xmm1, xmm1
comiss xmm1, xmm0
ja 0x40c259
movsd xmm1, qword [edi + 0x3de8]
cvtpd2ps xmm1, xmm1
subss xmm1, xmm0
movss dword [esp + 0x10], xmm1
jmp 0x40c261
movss xmm1, dword [0x43f508]
xor ecx, ecx
mov dword [esp + 0x1c], ecx
cmp dword [edi + 0x3e28], ecx
je 0x40c438
nop dword [eax]
nop word [eax + eax]
mov eax, dword [edi + 0x3e30]
mov esi, dword [eax + ecx*4]
mov ax, word [esi + 0xb6]
mov cl, byte [esi + 0xaa]
mov word [esi + 0xb8], ax
xor eax, eax
mov byte [esi + 0xab], cl
mov byte [esi + 0xaa], 0
mov byte [esi + 0xac], 0
mov word [esi + 0xb6], ax
test cl, cl
jne 0x40c41d
cmp byte [esi + 0x358], al
jne 0x40c41d
comiss xmm1, dword [esi + 0x23c]
jbe 0x40c41d
mov ecx, dword [esi + 0x264]
mov byte [esi + 0x358], 1
mov eax, dword [ecx + 0x10]
mov dword [esi + 0x350], eax
mov eax, dword [ecx + 0x1c]
mov dword [esi + 0x354], eax
mov ecx, dword [esi + 0xec]
test ecx, ecx
je 0x40c340
mov eax, dword [0x443af8]
mov dword [esi + 0xe8], 0
mov dword [esi + 0xe4], 0
test eax, eax
je 0x40c327
dec dword [eax + 0xb4]
push dword [0x443af0]
push ecx
call fcn.00407590
add esp, 8
mov dword [esi + 0xec], 0
mov ecx, dword [esi + 0x264]
call fcn.00424bd0
mov ecx, dword [esi + 0x188]
test ecx, ecx
je 0x40c391
mov eax, dword [0x443af8]
mov dword [esi + 0x184], 0
mov dword [esi + 0x180], 0
test eax, eax
je 0x40c378
dec dword [eax + 0xb4]
push dword [0x443af0]
push ecx
call fcn.00407590
add esp, 8
mov dword [esi + 0x188], 0
mov ecx, dword [esi + 0x1b0]
test ecx, ecx
je 0x40c3d7
mov eax, dword [0x443af8]
mov dword [esi + 0x1ac], 0
mov dword [esi + 0x1a8], 0
test eax, eax
je 0x40c3be
dec dword [eax + 0xb4]
push dword [0x443af0]
push ecx
call fcn.00407590
add esp, 8
mov dword [esi + 0x1b0], 0
mov ecx, dword [esi + 0x1bc]
test ecx, ecx
je 0x40c41d
mov eax, dword [0x443af8]
mov dword [esi + 0x1b8], 0
mov dword [esi + 0x1b4], 0
test eax, eax
je 0x40c404
dec dword [eax + 0xb4]
push dword [0x443af0]
push ecx
call fcn.00407590
add esp, 8
mov dword [esi + 0x1bc], 0
mov ecx, dword [esp + 0x1c]
movss xmm1, dword [esp + 0x10]
inc ecx
mov dword [esp + 0x1c], ecx
cmp ecx, dword [edi + 0x3e28]
jne 0x40c280
xor ecx, ecx
mov dword [esp + 0x18], ecx
cmp dword [edi + 0x4a60], ecx
jle 0x40c5a7
xor edx, edx
xorps xmm1, xmm1
mov dword [esp + 0xc], edx
nop dword [eax]
nop word [eax + eax]
mov eax, dword [edi + 0x4a68]
movss xmm0, dword [eax + ecx*4]
comiss xmm0, xmm1
jb 0x40c58c
movss xmm2, dword [esp + 0x10]
comiss xmm2, xmm0
jbe 0x40c58c
mov esi, dword [edi + 0x4a48]
mov eax, dword [0x443af8]
add esi, edx
mov dword [esp + 0x1c], eax
mov dword [esi + 0x198], 0
mov ecx, dword [esi + 0x194]
test ecx, ecx
je 0x40c4df
mov dword [esi + 0x190], 0
mov dword [esi + 0x18c], 0
test eax, eax
je 0x40c4c6
dec dword [eax + 0xb4]
push dword [0x443af0]
push ecx
call fcn.00407590
add esp, 8
mov dword [esi + 0x194], 0
mov byte [esi + 0x1d9], 1
mov ecx, dword [esi + 0x15c]
test ecx, ecx
je 0x40c52c
mov eax, dword [0x443af8]
mov dword [esi + 0x158], 0
mov dword [esi + 0x154], 0
test eax, eax
je 0x40c513
dec dword [eax + 0xb4]
push dword [0x443af0]
push ecx
call fcn.00407590
add esp, 8
mov dword [esi + 0x15c], 0
xor edx, edx
mov byte [esi + 0x1e5], 1
cmp dword [esi + 0x40], edx
jle 0x40c555
xor ecx, ecx
or edi, 0xffffffff
nop
mov eax, dword [esi + 0x10]
lea ecx, [ecx + 0x70]
inc edx
mov word [eax + ecx - 0x20], di
cmp edx, dword [esi + 0x40]
jl 0x40c540
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
xorps xmm1, xmm1
sub esi, dword [eax + 0x4a48]
mov eax, 0x4325c53f
imul esi
mov eax, dword [esp + 0x1c]
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
mov eax, dword [eax + 0x4a68]
add ecx, edx
mov edx, dword [esp + 0xc]
mov dword [eax + ecx*4], 0xbf800000
mov ecx, dword [esp + 0x18]
inc ecx
add edx, 0x1e8
mov dword [esp + 0x18], ecx
mov dword [esp + 0xc], edx
cmp ecx, dword [edi + 0x4a60]
jl 0x40c460
xor ecx, ecx
mov dword [esp + 0x1c], ecx
cmp dword [edi + 0x4a34], ecx
jle 0x40c60d
xor esi, esi
xorps xmm1, xmm1
nop word [eax + eax]
mov eax, dword [edi + 0x4a3c]
mov dword [esp + 0x20], eax
movss xmm0, dword [esi + eax + 4]
comiss xmm0, xmm1
jb 0x40c5fd
movss xmm2, dword [esp + 0x10]
comiss xmm2, xmm0
jbe 0x40c5fd
lea ecx, [eax + 0x10]
add ecx, esi
call fcn.00428600
mov eax, dword [esp + 0x20]
xorps xmm1, xmm1
mov ecx, dword [esp + 0x1c]
mov dword [esi + eax + 4], 0xbf800000
inc ecx
add esi, 0x68
mov dword [esp + 0x1c], ecx
cmp ecx, dword [edi + 0x4a34]
jl 0x40c5c0
cmp byte [edi + 0x3dff], 0
je 0x40c6ac
mov esi, dword [0x443af8]
mov eax, dword [esi + 0x47b8]
test eax, eax
je 0x40c661
mov dword [esi + 0x47b4], 0
mov dword [esi + 0x47b0], 0
test esi, esi
je 0x40c648
dec dword [esi + 0xb4]
push dword [0x443af0]
push eax
call fcn.00407590
add esp, 8
mov dword [esi + 0x47b8], 0
mov ecx, dword [esi + 0x47c4]
test ecx, ecx
je 0x40c6a7
mov eax, dword [0x443af8]
mov dword [esi + 0x47c0], 0
mov dword [esi + 0x47bc], 0
test eax, eax
je 0x40c68e
dec dword [eax + 0xb4]
push dword [0x443af0]
push ecx
call fcn.00407590
add esp, 8
mov dword [esi + 0x47c4], 0
call fcn.00430ec0
mov eax, dword [edi + 0x47f0]
mov byte [edi + 0x3dff], 0
test eax, eax
je 0x40c712
cmp byte [eax + 0xab], 0
jne 0x40c712
mov eax, dword [0x443af8]
mov edx, dword [eax + 0x3e34]
sub edx, 1
js 0x40c706
mov eax, dword [eax + 0x3e3c]
lea esi, [eax + edx*4]
nop
mov ecx, dword [esi]
test ecx, ecx
je 0x40c6fe
cmp byte [ecx + 0xab], 0
je 0x40c6fe
mov eax, dword [ecx + 0xc]
and eax, 0x40200
cmp eax, 0x40200
jne 0x40c708
sub esi, 4
sub edx, 1
jns 0x40c6e0
xor ecx, ecx
mov edx, 1
call fcn.00412d20
mov ecx, dword [edi + 0x3e50]
test ecx, ecx
jns 0x40c738
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [edi + 0x3e4c]
call fcn.0041ca60
mov dword [edi + 0x3e4c], 0
mov ecx, dword [edi + 0x47d8]
test ecx, ecx
jns 0x40c768
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [edi + 0x47d4]
call fcn.0041c9d0
lea esi, [edi + 0x47b0]
mov dword [edi + 0x47d4], 0
mov ecx, dword [esi + 4]
test ecx, ecx
jns 0x40c79a
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.0041c3c0
mov ecx, dword [esi + 4]
xor edx, edx
mov dword [esi], 0
test ecx, ecx
jne 0x40c7b1
push 8
mov ecx, esi
call fcn.0041c3c0
mov edx, dword [esi]
mov eax, dword [esi + 8]
push ecx
lea ecx, [edi + 0x47bc]
mov dword [eax + edx*4], 0
inc dword [esi]
call fcn.0041c170
mov esi, dword [0x443af8]
cmp byte [esi + 0x5b23], 0
mov dword [esi + 0x5b28], 0
je 0x40c999
mov eax, dword [esi + 0x3eac]
xor edx, edx
push 1
mov ecx, 0x20e
mov dword [esp + 0x20], eax
mov dword [esi + 0x4988], 7
call fcn.00413ac0
add esp, 4
test al, al
je 0x40c816
mov byte [esi + 0x5b23], 0
mov eax, dword [esi + 0xde0]
xorps xmm1, xmm1
mov dword [esp + 0xc], eax
cmp eax, 0x3000
je 0x40c87c
movzx ecx, byte [esi + 0x5b24]
cmp byte [ecx + esi + 0xdc8], 0
je 0x40c87c
movss xmm0, dword [esi + ecx*4 + 0x3730]
comiss xmm1, xmm0
ja 0x40c87c
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x40c878
add ecx, 0x281
xor edx, edx
call fcn.004153d0
test al, al
je 0x40c878
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x40c878
mov dword [esi + 0x5b28], eax
mov byte [esi + 0x5b23], 0
mov eax, dword [esp + 0xc]
xor ecx, ecx
mov edx, 0x3730
mov dword [esp + 0x10], ecx
mov dword [esp + 0x18], edx
nop dword [eax + eax]
cmp eax, 0x3000
jne 0x40c8dd
cmp byte [esi + ecx + 0xdc8], 0
je 0x40c8dd
movss xmm0, dword [esi + edx]
comiss xmm1, xmm0
ja 0x40c8dd
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x40c8d9
add ecx, 0x281
xor edx, edx
call fcn.004153d0
mov ecx, dword [esp + 0x10]
test al, al
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0xc]
je 0x40c8dd
mov byte [esi + 0x5b24], cl
jmp 0x40c8dd
mov eax, dword [esp + 0xc]
add edx, 4
inc ecx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x18], edx
cmp edx, 0x373c
jl 0x40c890
or dword [esi + 0x4720], 0x40
xor ecx, ecx
mov dword [esi + 0x4774], 0x3f333333
call fcn.00415f40
test al, al
je 0x40c993
push dword [esp + 0x1c]
push str.HoveredId:_0x_08X
call fcn.00431bc0
push str.Press_ESC_to_abort_picking.
call fcn.00431bc0
add esp, 0xc
mov dword [esp + 0x20], str.Left
cmp dword [esp + 0xc], 0x3000
mov dword [esp + 0x24], str.Right
mov dword [esp + 0x28], str.Middle
jne 0x40c95d
push str.Remap_w__CtrlShift:_click_anywhere_to_select_new_mouse_button.
call fcn.00431bc0
add esp, 4
jmp 0x40c98e
movzx eax, byte [esi + 0x5b24]
mov ecx, 0x3880
cmp dword [esp + 0x1c], 0
push dword [esp + eax*4 + 0x20]
mov eax, 0x3870
cmove eax, ecx
add eax, dword [0x443af8]
push str.Click__s_Button_to_break_in_debugger___remap_w__CtrlShift_
push eax
call fcn.00431c90
add esp, 0xc
call fcn.00412bc0
mov esi, dword [0x443af8]
lea eax, [esi + 0x3ea4]
lea edx, [esi + 0x5b3c]
mov dword [eax], 0
mov dword [esp + 0x18], eax
mov eax, dword [edx]
inc eax
mov dword [esp + 0x20], edx
cmp dword [esi + 0x3df0], eax
jne 0x40cabd
mov ecx, dword [esi + 0x3eac]
mov dword [esp + 0xc], ecx
test ecx, ecx
jne 0x40c9da
mov ecx, dword [esi + 0x3ebc]
mov dword [esp + 0xc], ecx
cmp dword [edx + 8], ecx
je 0x40ca35
lea eax, [edx + 0xc]
mov dword [edx + 8], ecx
mov dword [edx + 4], 0xffffffff
mov ecx, dword [eax + 4]
test ecx, ecx
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1c], eax
jge 0x40ca2f
mov eax, dword [esp + 0x10]
xor ecx, ecx
cdq
sub eax, edx
sar eax, 1
add eax, dword [esp + 0x10]
test eax, eax
cmovg ecx, eax
push ecx
mov ecx, dword [esp + 0x20]
call fcn.0041cb70
mov esi, dword [0x443af8]
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x1c]
mov dword [eax], 0
test ecx, ecx
je 0x40cabd
mov eax, dword [edx + 4]
test eax, eax
js 0x40ca7f
mov dword [esp + 0x10], eax
cmp eax, dword [edx + 0xc]
jge 0x40ca9a
mov edi, dword [edx + 0x14]
lea ecx, [eax + eax*8]
cmp byte [edi + ecx*8 + 5], 0
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
jne 0x40ca7b
mov edi, dword [edx + 0x14]
lea ecx, [eax + eax*8]
mov dword [esp + 0x10], eax
cmp byte [edi + ecx*8 + 4], 2
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
jle 0x40ca9a
inc eax
mov dword [edx + 4], eax
mov dword [esp + 0x10], eax
cmp eax, 0xffffffff
jne 0x40ca90
mov eax, dword [esp + 0x18]
mov dword [eax], ecx
jmp 0x40cabd
mov eax, dword [esp + 0x10]
test eax, eax
js 0x40cabd
jmp 0x40ca9e
mov eax, dword [esp + 0x10]
cmp eax, dword [edx + 0xc]
jge 0x40cabd
lea ecx, [eax + eax*8]
mov eax, dword [edx + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [eax + ecx*8]
mov dword [edx], eax
mov edx, dword [esp + 0x20]
mov eax, dword [edx + 0x14]
inc byte [eax + ecx*8 + 4]
mov al, byte [edi + 0x5b21]
test al, al
je 0x40cadb
sub al, 1
mov byte [edi + 0x5b21], al
jne 0x40cadb
mov dword [edi + 0x46cc], 0
mov al, byte [edi + 0x5b20]
test al, al
je 0x40cb09
sub al, 1
mov byte [edi + 0x5b20], al
jne 0x40cb09
push str._Auto_disabled_ImGuiDebugLogFlags_EventClipper_to_avoid_spamming__n
call fcn.0041b7d0
mov esi, dword [0x443af8]
add esp, 4
and dword [edi + 0x5b00], 0xffffffef
mov byte [edi + 0x3dfd], 1
xor edx, edx
or dword [esi + 0x4720], 2
mov ecx, str.DebugDefault
push 0
mov dword [esi + 0x4740], 0x43c80000
mov dword [esi + 0x4744], 0x43c80000
mov dword [esi + 0x4728], 4
call fcn.004104c0
add esp, 4
cmp byte [edi + 0x6d], 0
je 0x40cb81
mov cl, byte [edi + 0x5b22]
cmp cl, 0xff
jne 0x40cb5b
xor edx, edx
jmp 0x40cb84
mov eax, dword [edi + 0x3df0]
and eax, 0x80000003
jns 0x40cb6d
dec eax
or eax, 0xfffffffc
inc eax
neg eax
movsx ecx, cl
sbb eax, eax
inc eax
add eax, ecx
mov ecx, 0xa
cdq
idiv ecx
jmp 0x40cb84
or dl, 0xff
xor esi, esi
mov byte [edi + 0x5b22], dl
cmp dword [edi + 0x5aa0], esi
jle 0x40cbcc
xor ecx, ecx
mov dword [esp + 0x20], ecx
nop word [eax + eax]
mov eax, dword [edi + 0x5aa8]
add eax, ecx
cmp dword [eax + 4], 1
jne 0x40cbbc
push eax
mov eax, dword [eax + 0xc]
push edi
call eax
mov ecx, dword [esp + 0x28]
add esp, 8
inc esi
add ecx, 0x14
mov dword [esp + 0x20], ecx
cmp esi, dword [edi + 0x5aa0]
jl 0x40cba0
pop edi
pop esi
mov esp, ebp
pop ebp
ret