Function at 0x101164b0
Capabilities:
Encode data using xor
Hash data with crc32
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1019ef10
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0xf0
push esi
push edi
mov edi, dword [0x10255824]
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x24], edi
mov eax, dword [edi + 0x3e58]
mov byte [eax + 0xac], 1
mov eax, dword [edi + 0x3e58]
mov dword [ebp - 0x34], eax
cmp byte [eax + 0xaf], 0
jne 0x101166ae
mov eax, dword [ebx + 8]
mov esi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
test eax, eax
jle 0x1011652a
cmp eax, 0x200
jl 0x1011653e
push 0x13b
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiimgui_tables.cpp
push str.columns_count___0__columns_count___512
call esi
add esp, 0xc
mov eax, dword [ebx + 0xc]
xorps xmm0, xmm0
test eax, 0x1000000
je 0x1011656c
movss xmm1, dword [ebx + 0x14]
comiss xmm1, xmm0
jae 0x1011656c
push 0x13d
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiimgui_tables.cpp
push str.inner_width___0.0f
call esi
mov eax, dword [ebx + 0xc]
add esp, 0xc
and eax, 0x3000000
mov dword [ebp - 0x18], eax
mov eax, dword [0x10255824]
mov edx, dword [eax + 0x3e58]
mov ecx, edx
mov dword [ebp - 0x20], ecx
cmp dword [ecx + 0x190], 0
jne 0x1011659e
cmp dword [eax + 0x4a14], 0
jne 0x1011659e
add ecx, 0x228
jmp 0x101165a4
add ecx, 0x1f8
cmp dword [ebp - 0x18], 0
movss xmm1, dword [ecx]
movss xmm2, dword [ecx + 4]
subss xmm1, dword [edx + 0xf0]
subss xmm2, dword [edx + 0xf4]
movss xmm3, dword [0x1023d120]
je 0x101165d1
maxss xmm2, xmm3
jmp 0x101165d4
xorps xmm2, xmm2
mov eax, dword [ebx + 0x10]
maxss xmm1, xmm3
lea ecx, [ebp - 0x68]
push dword [eax + 4]
push dword [eax]
call fcn.100fa250
mov eax, dword [ebp - 0x34]
add esp, 8
cmp dword [ebp - 0x18], 0
movss xmm1, dword [ebp - 0x68]
movss xmm0, dword [ebp - 0x64]
movss xmm2, dword [eax + 0xf0]
movss xmm3, dword [eax + 0xf4]
addss xmm1, xmm2
addss xmm0, xmm3
movss dword [ebp - 0x5c], xmm2
movss dword [ebp - 0x30], xmm3
movss dword [ebp - 0x90], xmm2
movss dword [ebp - 0x8c], xmm3
movss dword [ebp - 0x58], xmm1
movss dword [ebp - 0x40], xmm0
movss dword [ebp - 0x88], xmm1
movss dword [ebp - 0x84], xmm0
je 0x101166c3
mov eax, dword [ebp - 0x20]
comiss xmm0, dword [eax + 0x214]
jbe 0x1011667e
movss xmm0, dword [eax + 0x21c]
comiss xmm0, xmm3
jbe 0x10116679
comiss xmm1, dword [eax + 0x210]
jbe 0x10116679
movss xmm0, dword [eax + 0x218]
comiss xmm0, xmm2
ja 0x101166c3
movss xmm0, dword [ebp - 0x40]
mov eax, dword [0x10255824]
cmp byte [eax + 0x5ac8], 0
jne 0x101166c3
subss xmm1, xmm2
subss xmm0, xmm3
lea ecx, [ebp - 0x4c]
movss dword [ebp - 0x4c], xmm1
movss xmm1, dword [0x1023d440]
movss dword [ebp - 0x48], xmm0
call fcn.100f9b30
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov edx, dword [ebp - 0x44]
lea ecx, [edi + 0x4a34]
push ecx
push edx
call fcn.100e9d60
mov dword [ebp - 0x14], eax
mov ecx, dword [eax]
mov dword [ebp - 0x20], ecx
cmp ecx, 0xffffffff
je 0x1011671a
test ecx, ecx
js 0x101166f2
cmp ecx, dword [edi + 0x4a28]
lea eax, [edi + 0x4a28]
jl 0x1011670f
push 0x730
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiimgui.h
push str.i___0__i___Size
call esi
mov ecx, dword [ebp - 0x20]
lea eax, [edi + 0x4a28]
add esp, 0xc
imul esi, ecx, 0x1f0
add esi, dword [eax + 8]
jmp 0x10116738
mov ecx, dword [ebp - 0x14]
mov eax, dword [edi + 0x4a40]
mov dword [ecx], eax
lea ecx, [edi + 0x4a28]
call fcn.1011fef0
mov esi, eax
lea eax, [edi + 0x4a28]
mov ecx, dword [esi + 4]
mov dword [ebp - 0x20], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x3c], esi
cmp esi, ecx
jb 0x10116754
imul eax, dword [eax], 0x1f0
add eax, ecx
cmp esi, eax
jb 0x1011676c
push 0x295
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiimgui_internal.h
push str.p___Buf.Data__p___Buf.Data__Buf.Size
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
mov ecx, esi
mov eax, 0x84210843
sub ecx, dword [edi + 0x4a30]
imul ecx
add edx, ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x38], eax
mov eax, dword [edi + 0x4a18]
inc eax
mov dword [ebp - 0x14], eax
mov dword [edi + 0x4a18], eax
cmp eax, dword [edi + 0x4a1c]
jle 0x101168f8
push 0x68
lea eax, [ebp - 0xf8]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0xf4], 0xbf800000
mov eax, dword [edi + 0x4a20]
mov ecx, dword [ebp - 0x14]
cmp ecx, eax
jle 0x10116879
test eax, eax
je 0x101167e7
cdq
sub eax, edx
mov edx, dword [edi + 0x4a20]
sar eax, 1
add eax, edx
jmp 0x101167f2
mov edx, dword [edi + 0x4a20]
mov eax, 8
cmp eax, ecx
mov esi, ecx
cmovg esi, eax
mov eax, esi
mov dword [ebp - 0x2c], esi
mov esi, dword [ebp - 0x3c]
cmp eax, edx
jle 0x10116879
mov ecx, dword [0x10255824]
test ecx, ecx
je 0x10116815
inc dword [ecx + 0xac]
imul eax, eax, 0x68
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov edx, dword [edi + 0x4a24]
add esp, 4
mov dword [ebp - 0x28], eax
test edx, edx
je 0x10116867
imul ecx, dword [edi + 0x4a1c], 0x68
push ecx
push edx
push eax
call sub.VCRUNTIME140.dll_memcpy
mov ecx, dword [edi + 0x4a24]
add esp, 0xc
test ecx, ecx
je 0x1011685a
mov eax, dword [0x10255824]
test eax, eax
je 0x1011685a
dec dword [eax + 0xac]
push ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov eax, dword [ebp - 0x28]
add esp, 4
mov ecx, dword [ebp - 0x14]
mov dword [edi + 0x4a24], eax
mov eax, dword [ebp - 0x2c]
mov dword [edi + 0x4a20], eax
mov eax, dword [edi + 0x4a1c]
cmp ecx, eax
jle 0x101168b6
mov edx, ecx
imul eax, eax, 0x68
sub edx, dword [edi + 0x4a1c]
nop
mov edi, dword [edi + 0x4a24]
lea esi, [ebp - 0xf8]
add edi, eax
mov ecx, 0x1a
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0x24]
add eax, 0x68
sub edx, 1
jne 0x10116890
mov esi, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x14]
mov dword [edi + 0x4a1c], ecx
lea ecx, [ebp - 0xe8]
mov dword [ebp - 4], 1
call fcn.1010dce0
mov ecx, dword [ebp - 0xd8]
test ecx, ecx
je 0x101168f1
mov eax, dword [0x10255824]
test eax, eax
je 0x101168e7
dec dword [eax + 0xac]
push ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [edi + 0x4a18]
sub eax, 1
mov dword [ebp - 0x14], eax
js 0x1011690e
cmp eax, dword [edi + 0x4a1c]
jl 0x10116929
push 0x730
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiimgui.h
push str.i___0__i___Size
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [ebp - 0x14]
add esp, 0xc
mov edx, dword [ebx + 0xc]
imul ecx, eax, 0x68
mov eax, dword [edi + 0x4a24]
add eax, ecx
mov ecx, dword [ebp - 0x38]
mov dword [esi + 0xc], eax
mov dword [ebp - 0x14], eax
mov dword [eax], ecx
mov ecx, edx
mov eax, dword [esi + 0xc]
add eax, 0x10
test edx, 0xe000
mov dword [esi + 0x160], eax
mov dword [eax], 0
mov dword [eax + 4], 1
sete al
mov byte [esi + 0x1ea], al
test ecx, 0xe000
jne 0x10116991
test edx, 0x1000000
jne 0x1011698a
mov ecx, dword [ebp - 0x34]
mov eax, 0x8000
test byte [ecx + 0xc], 0x40
je 0x1011698f
mov eax, 0x2000
or edx, eax
mov eax, edx
mov ecx, edx
or ecx, 0x40000
and eax, 0xe000
cmp eax, 0x4000
mov eax, dword [ebp - 0x34]
cmovne ecx, edx
mov edx, ecx
or edx, 0x200
mov eax, dword [eax + 0x300]
test cl, 1
cmove edx, ecx
mov ecx, edx
and ecx, 0xfffcffff
test edx, 0x3000000
cmove ecx, edx
mov edx, ecx
and edx, 0xfffff7ff
test ecx, 0x1000
cmove edx, ecx
mov ecx, edx
or ecx, 0x10
test dl, 0xf
cmovne ecx, edx
mov edx, ecx
or edx, 0x10
test dword [eax + 0xc], 0x100
mov eax, dword [esi + 0x3c]
cmove edx, ecx
mov dword [ebp - 0x2c], edx
cmp eax, dword [edi + 0x3dd8]
je 0x10116a12
mov dword [ebp - 0x28], 0
jmp 0x10116a1a
movsx eax, word [esi + 0x4c]
inc eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebx + 0x10]
movss xmm0, dword [ebx + 0x14]
mov dword [esi], eax
mov dword [esi + 4], edx
mov eax, dword [edi + 0x3dd8]
mov edi, dword [ebp - 0x14]
mov edx, dword [ebx + 8]
mov dword [esi + 0x3c], eax
mov eax, dword [ebp - 0x34]
mov dword [esi + 0x150], eax
mov dword [esi + 0x14c], eax
mov dword [esi + 0x40], edx
mov byte [esi + 0x1de], 0
movss dword [esi + 0xa0], xmm0
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [edi + 8], eax
mov eax, edi
mov edi, dword [ebp - 0x24]
mov dword [eax + 0xc], ecx
mov eax, dword [ebp - 0x28]
mov word [esi + 0x4c], ax
test eax, eax
jle 0x10116c32
cmp dword [esi + 0x40], edx
je 0x10116a99
push 0x16b
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiimgui_tables.cpp
push str.table__ColumnsCount__columns_count___BeginTable__:_Cannot_change_columns_count_mid_frame_while_preserving_same_ID_
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [ebp - 0x28]
add esp, 0xc
mov edi, dword [esi + 0x17c]
cmp edi, eax
jge 0x10116b9a
mov ecx, dword [esi + 0x180]
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x6c], 0xffffffff
mov dword [ebp - 0x70], 0xffffffff
cmp edi, ecx
jne 0x10116b72
inc edi
test ecx, ecx
je 0x10116aef
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x10116af4
mov eax, 8
cmp eax, edi
cmovg edi, eax
cmp edi, ecx
jle 0x10116b72
mov eax, dword [0x10255824]
test eax, eax
je 0x10116b0c
inc dword [eax + 0xac]
lea eax, [edi + edi*2]
shl eax, 3
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov edx, dword [esi + 0x184]
add esp, 4
mov dword [ebp - 0x1c], eax
test edx, edx
je 0x10116b66
mov ecx, dword [esi + 0x17c]
lea ecx, [ecx + ecx*2]
shl ecx, 3
push ecx
push edx
push eax
call sub.VCRUNTIME140.dll_memcpy
mov ecx, dword [esi + 0x184]
add esp, 0xc
test ecx, ecx
je 0x10116b59
mov eax, dword [0x10255824]
test eax, eax
je 0x10116b59
dec dword [eax + 0xac]
push ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov eax, dword [ebp - 0x1c]
add esp, 4
mov dword [esi + 0x184], eax
mov dword [esi + 0x180], edi
mov eax, dword [esi + 0x17c]
movups xmm0, xmmword [ebp - 0x80]
lea ecx, [eax + eax*2]
mov eax, dword [esi + 0x184]
movups xmmword [eax + ecx*8], xmm0
movq xmm0, qword [ebp - 0x70]
movq qword [eax + ecx*8 + 0x10], xmm0
inc dword [esi + 0x17c]
push dword [ebp - 0x44]
xor edx, edx
mov ecx, str.Instances
call fcn.100e9410
mov ecx, dword [0x10255824]
mov edx, eax
add esp, 4
mov dword [ebp - 0x1c], edx
cmp dword [ecx + 0x3e8c], edx
jne 0x10116bd7
push ecx
push str.Instances
mov edx, 0xb
mov ecx, eax
call fcn.101021c0
mov edx, dword [ebp - 0x1c]
add esp, 8
mov eax, dword [ebp - 0x28]
lea edi, [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
not edx
mov esi, 4
movzx eax, byte [edi]
lea edi, [edi + 1]
movzx ecx, dl
xor ecx, eax
shr edx, 8
xor edx, dword [ecx*4 + 0x101dcb80]
sub esi, 1
jne 0x10116be7
mov eax, dword [0x10255824]
not edx
mov esi, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], edx
cmp dword [eax + 0x3e8c], edx
jne 0x10116c2d
push ecx
push dword [ebp - 0x28]
mov ecx, dword [ebp - 0x1c]
mov edx, 4
call fcn.101021c0
mov edx, dword [ebp - 0x1c]
add esp, 8
mov edi, dword [ebp - 0x24]
jmp 0x10116c38
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x1c], edx
movsx eax, word [esi + 0x4c]
mov dword [ebp - 0x64], eax
test eax, eax
jne 0x10116c4b
lea eax, [esi + 0x164]
jmp 0x10116c85
cmp eax, 1
jl 0x10116c58
cmp eax, dword [esi + 0x17c]
jle 0x10116c76
push 0x730
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiimgui.h
push str.i___0__i___Size
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov edx, dword [ebp - 0x1c]
add esp, 0xc
mov eax, dword [ebp - 0x64]
lea ecx, [eax + eax*2]
mov eax, dword [esi + 0x184]
lea eax, [eax + ecx*8]
add eax, 0xffffffe8
cmp dword [ebp - 0x18], 0
mov dword [eax], edx
je 0x10116e65
mov ecx, dword [ebp - 0x2c]
mov eax, ecx
movss xmm0, dword [0x1023d408]
and eax, 0x3000000
movaps xmm1, xmm0
movaps xmm2, xmm0
cmp eax, 0x1000000
jne 0x10116cb8
movss xmm2, dword [0x1023cfe8]
test ecx, 0x1000000
je 0x10116ce7
movss xmm4, dword [ebx + 0x14]
xorps xmm3, xmm3
comiss xmm4, xmm3
jbe 0x10116ce7
ucomiss xmm4, xmm0
movaps xmm1, xmm4
lahf
test ah, 0x44
jnp 0x10116ce7
ucomiss xmm2, xmm0
lahf
test ah, 0x44
jp 0x10116cf0
xorps xmm2, xmm2
jmp 0x10116cf0
ucomiss xmm2, xmm0
lahf
test ah, 0x44
jnp 0x10116d32
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jp 0x10116cfc
xorps xmm1, xmm1
mov ecx, dword [0x10255824]
cvttss2si eax, xmm1
or dword [ecx + 0x470c], 4
movd xmm1, eax
cvttss2si eax, xmm2
cvtdq2ps xmm1, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ecx + 0x4734], xmm1
movss dword [ecx + 0x4738], xmm0
mov ecx, dword [ebp - 0x2c]
test dword [ebp - 0x20], 0x3000000
jne 0x10116d5e
mov eax, dword [0x10255824]
or dword [eax + 0x470c], 0x80
mov dword [eax + 0x473c], 0
mov dword [eax + 0x4740], 0
movss xmm0, dword [ebp - 0x58]
mov eax, ecx
subss xmm0, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x48]
shr eax, 0xd
and eax, 0x800
push eax
movss dword [ebp - 0x60], xmm0
lea eax, [ebp - 0x60]
movss xmm0, dword [ebp - 0x40]
subss xmm0, dword [ebp - 0x30]
push 0
push eax
movss dword [ebp - 0x5c], xmm0
call fcn.100eff70
mov ecx, dword [edi + 0x3e58]
add esp, 0xc
mov dword [esi + 0x150], ecx
movups xmm0, xmmword [ecx + 0x1f0]
movups xmmword [esi + 0xdc], xmm0
movss xmm1, dword [ecx + 0x14]
movss xmm0, dword [ecx + 0x18]
movss dword [ebp - 0x50], xmm0
addss xmm0, dword [ecx + 0x20]
movss dword [ebp - 0x54], xmm1
addss xmm1, dword [ecx + 0x1c]
movss dword [ebp - 0x48], xmm0
movss dword [ebp - 0x4c], xmm1
xorps xmm1, xmm1
movups xmm0, xmmword [ebp - 0x54]
movups xmmword [esi + 0xbc], xmm0
movups xmm0, xmmword [ecx + 0x1d0]
movups xmmword [esi + 0xcc], xmm0
movss xmm0, dword [ecx + 0x44]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x10116e20
movss xmm0, dword [ecx + 0x48]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x10116e20
movss xmm0, dword [ecx + 0x50]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x10116e38
push 0x195
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiimgui_tables.cpp
push str.table__InnerWindow__WindowPadding.x__0.0f__table__InnerWindow__WindowPadding.y__0.0f__table__InnerWindow__WindowBorderSize__0.0f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
cmp dword [ebp - 0x28], 0
jne 0x10116e51
mov al, byte [esi + 0x1eb]
mov byte [esi + 0x1ec], al
mov byte [esi + 0x1eb], 0
mov eax, dword [esi + 0x150]
mov al, byte [eax + 0xa9]
or byte [esi + 0x1eb], al
jmp 0x10116e81
movups xmm0, xmmword [ebp - 0x90]
movups xmmword [esi + 0xcc], xmm0
movups xmmword [esi + 0xbc], xmm0
movups xmmword [esi + 0xdc], xmm0
mov eax, dword [0x10255824]
mov ecx, dword [ebp - 0x44]
mov edi, dword [eax + 0x3e58]
cmp dword [eax + 0x3e8c], ecx
jne 0x10116ea7
push ecx
push 0
mov edx, 0xd
call fcn.101021c0
add esp, 8
mov ecx, dword [edi + 0xe8]
add edi, 0xe4
mov edx, dword [edi]
cmp edx, ecx
jne 0x10116ee1
inc edx
mov dword [ebp - 0x48], edx
test ecx, ecx
je 0x10116ecf
mov eax, ecx
cdq
sub eax, edx
mov edx, dword [ebp - 0x48]
sar eax, 1
add eax, ecx
jmp 0x10116ed4
mov eax, 8
cmp eax, edx
mov ecx, edi
cmovg edx, eax
push edx
call fcn.10102bc0
mov ecx, dword [edi]
mov eax, dword [edi + 8]
mov edx, dword [ebp - 0x44]
mov dword [eax + ecx*4], edx
inc dword [edi]
cmp dword [ebp - 0x28], 0
jle 0x10116f69
mov eax, dword [0x10255824]
mov edi, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x3e58]
mov dword [ebp - 0x48], ecx
cmp dword [eax + 0x3e8c], edi
jne 0x10116f22
push ecx
push 0
mov edx, 0xd
mov ecx, edi
call fcn.101021c0
mov ecx, dword [ebp - 0x48]
add esp, 8
lea edx, [ecx + 0xe4]
mov ecx, dword [edx + 4]
mov dword [ebp - 0x18], edx
cmp dword [edx], ecx
jne 0x10116f5f
test ecx, ecx
je 0x10116f44
mov eax, ecx
cdq
sub eax, edx
mov edx, dword [ebp - 0x18]
sar eax, 1
add eax, ecx
jmp 0x10116f49
mov eax, 8
mov ecx, dword [edx]
inc ecx
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, edx
call fcn.10102bc0
mov esi, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x18]
mov ecx, dword [edx]
mov eax, dword [edx + 8]
mov dword [eax + ecx*4], edi
inc dword [edx]
mov edx, dword [esi + 0x150]
mov edi, dword [ebp - 0x14]
mov dword [ebp - 0x58], edx
mov eax, dword [edx + 0x134]
mov dword [esi + 0x84], eax
movups xmm0, xmmword [edx + 0x210]
movups xmmword [esi + 0x12c], xmm0
mov al, byte [edx + 0xaf]
mov byte [esi + 0x1ee], al
movups xmm0, xmmword [edx + 0x1f0]
mov eax, dword [ebp - 0x34]
movups xmmword [edi + 0x24], xmm0
movups xmm0, xmmword [edx + 0x200]
movups xmmword [edi + 0x34], xmm0
mov eax, dword [eax + 0x138]
mov dword [edi + 0x5c], eax
mov eax, dword [edx + 0x120]
mov ecx, dword [edx + 0x124]
mov dword [edi + 0x44], eax
mov dword [edi + 0x48], ecx
mov eax, dword [edx + 0x118]
mov ecx, dword [edx + 0x11c]
mov dword [edi + 0x4c], eax
mov dword [edi + 0x50], ecx
mov eax, dword [edx + 0x108]
mov ecx, dword [edx + 0x10c]
mov dword [edi + 0x58], ecx
mov ecx, dword [ebp - 0x34]
mov dword [edi + 0x54], eax
mov eax, dword [ecx + 0x1a0]
mov dword [edi + 0x60], eax
mov eax, dword [ecx + 0x1a8]
mov dword [edi + 0x64], eax
mov eax, dword [ebp - 0x2c]
mov dword [edx + 0x118], 0
mov dword [edx + 0x11c], 0
mov dword [edx + 0x120], 0
mov dword [edx + 0x124], 0
test eax, 0x400000
je 0x1011703e
xor cl, cl
jmp 0x10117051
test eax, 0x200000
je 0x10117049
mov cl, 1
jmp 0x10117051
mov ecx, eax
shr ecx, 0xa
and cl, 1
mov edi, dword [ebp - 0x2c]
movss xmm7, dword [0x1023d120]
shr eax, 0x17
not al
and al, 1
and edi, 0x200
je 0x10117070
movaps xmm3, xmm7
jmp 0x10117073
xorps xmm3, xmm3
test al, al
je 0x10117088
test edi, edi
jne 0x10117088
mov edi, dword [ebp - 0x24]
movss xmm1, dword [edi + 0x37dc]
jmp 0x101170a8
xorps xmm1, xmm1
movss dword [ebp - 0x48], xmm1
test al, al
je 0x101170a5
test edi, edi
mov edi, dword [ebp - 0x24]
je 0x101170a8
movss xmm2, dword [edi + 0x37dc]
jmp 0x101170ab
mov edi, dword [ebp - 0x24]
xorps xmm2, xmm2
movaps xmm0, xmm1
movss dword [esi + 0x9c], xmm1
addss xmm0, xmm3
movss dword [esi + 0x90], xmm2
movss dword [esi + 0x98], xmm0
mov eax, dword [edi + 0x37e0]
mov dword [esi + 0x94], eax
mov eax, dword [ebp - 0x2c]
test eax, 0x400
je 0x101170e5
movaps xmm1, xmm7
jmp 0x101170e8
xorps xmm1, xmm1
test cl, cl
je 0x101170f6
movss xmm0, dword [edi + 0x37dc]
jmp 0x101170f9
xorps xmm0, xmm0
addss xmm0, xmm1
mov dword [esi + 0x48], 0xffffffff
xor ecx, ecx
mov dword [esi + 0x44], 0xffffffff
mov word [esi + 0x66], cx
lea ecx, [esi + 0xdc]
mov dword [esi + 0x68], 0
subss xmm0, xmm2
movss dword [esi + 0x8c], xmm0
cmp edx, dword [ebp - 0x34]
je 0x10117135
lea ecx, [edx + 0x210]
movups xmm0, xmmword [ecx]
movups xmmword [esi + 0xec], xmm0
movss xmm3, dword [esi + 0xec]
movss xmm4, dword [esi + 0xf0]
maxss xmm4, dword [esi + 0xe0]
maxss xmm3, dword [esi + 0xdc]
movss dword [esi + 0xf0], xmm4
movss dword [esi + 0xec], xmm3
movss xmm1, dword [esi + 0xf4]
movss xmm0, dword [esi + 0xf8]
minss xmm1, dword [esi + 0xe4]
minss xmm0, dword [esi + 0xe8]
movss dword [esi + 0xf4], xmm1
movss dword [esi + 0xf8], xmm0
movss xmm2, dword [esi + 0x130]
comiss xmm2, xmm4
movss xmm1, dword [esi + 0x134]
ja 0x101171c0
movss xmm2, dword [esi + 0x138]
minss xmm2, xmm4
movss xmm0, dword [esi + 0x12c]
comiss xmm0, xmm3
jbe 0x101171d2
movaps xmm1, xmm0
jmp 0x101171d6
minss xmm1, xmm3
movss dword [esi + 0xec], xmm1
movss dword [esi + 0xf0], xmm2
movss xmm2, dword [esi + 0xf8]
movss xmm1, dword [esi + 0x130]
comiss xmm1, xmm2
ja 0x10117207
movss xmm1, dword [esi + 0x138]
minss xmm1, xmm2
movss xmm2, dword [esi + 0xf4]
comiss xmm0, xmm2
ja 0x10117220
movss xmm0, dword [esi + 0x134]
minss xmm0, xmm2
movss dword [esi + 0xf4], xmm0
movss dword [esi + 0xf8], xmm1
test eax, 0x20000
je 0x10117244
movaps xmm0, xmm1
minss xmm0, dword [edx + 0x1fc]
jmp 0x1011724c
movss xmm0, dword [edx + 0x21c]
xor eax, eax
movss dword [esi + 0xf8], xmm0
movss xmm0, dword [esi + 0xe0]
movaps xmm1, xmm7
movss dword [esi + 0x54], xmm0
movss dword [esi + 0x50], xmm0
lea ecx, [eax + 0x2b]
mov dword [esi + 0x5c], 0
mov dword [esi + 0x1ce], eax
mov dword [esi + 0x1d2], eax
mov byte [esi + 0x1e9], 1
mov word [esi + 0x1b2], ax
call fcn.100ea190
movaps xmm1, xmm7
mov dword [esi + 0x74], eax
mov ecx, 0x2c
call fcn.100ea190
mov ecx, dword [ebp - 0x34]
mov dword [esi + 0x78], eax
mov eax, dword [ebp - 0x38]
mov dword [edi + 0x4a14], esi
mov byte [ecx + 0x150], 0
mov dword [ecx + 0x194], eax
cmp edx, ecx
je 0x101172ca
mov dword [edx + 0x194], eax
test byte [ebp - 0x20], 2
je 0x101172dd
test byte [ebp - 0x2c], 2
jne 0x101172dd
mov byte [esi + 0x1e8], 1
mov ecx, dword [edi + 0x4a48]
lea eax, [edi + 0x4a48]
mov edx, dword [ebp - 0x38]
cmp edx, ecx
jl 0x10117365
lea ecx, [edx + 1]
mov dword [ebp - 0x30], 0xbf800000
mov edx, dword [eax + 4]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x48], edx
cmp ecx, edx
jle 0x1011733a
test edx, edx
je 0x10117319
mov eax, edx
cdq
sub eax, edx
mov edx, eax
sar edx, 1
add edx, dword [ebp - 0x48]
jmp 0x1011731e
mov edx, 8
cmp edx, ecx
mov eax, ecx
lea ecx, [edi + 0x4a48]
cmovg eax, edx
push eax
call fcn.10102bc0
mov ecx, dword [ebp - 0x18]
lea eax, [edi + 0x4a48]
mov edx, dword [eax]
cmp ecx, edx
jle 0x10117360
mov eax, dword [ebp - 0x30]
mov esi, dword [ebp - 0x18]
mov ecx, dword [edi + 0x4a50]
mov dword [ecx + edx*4], eax
inc edx
cmp edx, esi
jl 0x10117346
mov esi, dword [ebp - 0x3c]
lea eax, [edi + 0x4a48]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x38]
mov dword [eax], ecx
movsd xmm0, qword [edi + 0x3dd0]
cvtpd2ps xmm0, xmm0
movss dword [ebp - 0x48], xmm0
test edx, edx
js 0x1011737e
cmp edx, ecx
jl 0x1011739e
push 0x730
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiimgui.h
push str.i___0__i___Size
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movss xmm0, dword [ebp - 0x48]
add esp, 0xc
mov edx, dword [ebp - 0x38]
mov eax, dword [edi + 0x4a50]
movss dword [eax + edx*4], xmm0
movsd xmm0, qword [edi + 0x3dd0]
mov eax, dword [ebp - 0x14]
cvtpd2ps xmm0, xmm0
movss dword [eax + 4], xmm0
xor eax, eax
mov byte [esi + 0x1ed], 0
mov ecx, dword [esi + 0x14]
sub ecx, dword [esi + 0x10]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x38], eax
mov eax, 0x92492493
imul ecx
mov eax, dword [ebx + 8]
add edx, ecx
sar edx, 6
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov dword [ebp - 0x48], ecx
je 0x10117407
cmp ecx, eax
je 0x10117407
mov eax, dword [esi + 0x10]
mov dword [ebp - 0x20], eax
mov eax, dword [esi + 8]
mov dword [ebp - 0x38], eax
mov eax, dword [ebx + 8]
mov dword [esi + 8], 0
cmp dword [esi + 8], 0
jne 0x10117424
mov edx, eax
mov ecx, esi
call fcn.10117770
mov byte [esi + 0x1e4], 1
mov byte [esi + 0x1e0], 1
cmp byte [esi + 0x1e7], 0
je 0x1011744b
mov word [esi + 0x1e4], 0x100
mov byte [esi + 0x1e0], 1
mov byte [esi + 0x1e7], 0
mov dword [esi + 0x34], 0
cmp byte [esi + 0x1e0], 0
je 0x101175fc
or eax, 0xffffffff
mov dword [esi + 0x38], 0xffffffff
xor edi, edi
mov byte [esi + 0x1e1], 1
mov word [esi + 0x4e], ax
mov word [esi + 0x1cc], ax
mov word [esi + 0x1bc], ax
mov word [esi + 0x1ba], ax
mov word [esi + 0x1c0], ax
mov word [esi + 0x1b8], ax
mov word [esi + 0x1b6], ax
mov word [esi + 0x1b4], ax
mov dword [ebp - 0x40], edi
cmp dword [ebx + 8], edi
jle 0x101175f9
xor ecx, ecx
mov dword [ebp - 0x14], ecx
mov eax, dword [esi + 0x10]
lea edx, [ecx + eax]
mov dword [ebp - 0x18], edx
cmp edx, eax
jb 0x101174c3
cmp edx, dword [esi + 0x14]
jb 0x101174e1
push 0x263
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiimgui_internal.h
push str.p___Data__p___DataEnd
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov edx, dword [ebp - 0x18]
add esp, 0xc
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x101174fe
cmp edi, dword [ebp - 0x48]
jge 0x101174fe
lea esi, [ecx + eax]
mov edi, edx
mov ecx, 0x1c
rep movsd dword es:[edi], dword [esi]
jmp 0x101175a3
movss xmm0, dword [edx + 0x14]
lea eax, [ebp - 0x100]
push 0x70
push 0
push eax
movss dword [ebp - 0x30], xmm0
call sub.VCRUNTIME140.dll_memset
mov edx, dword [ebp - 0x18]
lea esi, [ebp - 0x100]
movss xmm0, dword [ebp - 0x30]
or eax, 0xffffffff
mov word [ebp - 0xb0], ax
add esp, 0xc
and byte [ebp - 0x93], 0xfc
mov ecx, 0x1c
mov word [ebp - 0xac], ax
mov edi, edx
mov word [ebp - 0xae], ax
mov word [ebp - 0xa8], ax
mov word [ebp - 0xaa], ax
mov word [ebp - 0xa6], ax
mov eax, 0xff
mov dword [ebp - 0xf0], 0xbf800000
mov dword [ebp - 0xe8], 0xbf800000
mov dword [ebp - 0xa2], 0xff00ff
mov word [ebp - 0xa4], ax
rep movsd dword es:[edi], dword [esi]
movss dword [edx + 0x14], xmm0
mov byte [edx + 0x69], 1
mov word [edx + 0x63], 0x101
mov byte [edx + 0x62], 1
mov esi, dword [ebp - 0x3c]
mov edi, dword [ebp - 0x40]
mov eax, dword [esi + 0x18]
lea ecx, [eax + edi*2]
mov dword [ebp - 0x30], ecx
cmp ecx, eax
jb 0x101175bb
cmp ecx, dword [esi + 0x1c]
jb 0x101175d6
push 0x263
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiimgui_internal.h
push str.p___Data__p___DataEnd
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov ecx, dword [ebp - 0x30]
add esp, 0xc
movzx eax, di
inc edi
mov word [ecx], ax
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x40], edi
mov word [ecx + 0x52], ax
mov ecx, dword [ebp - 0x14]
add ecx, 0x70
mov dword [ebp - 0x14], ecx
cmp edi, dword [ebx + 8]
jl 0x101174b1
mov edi, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x38]
test ecx, ecx
je 0x1011761c
mov eax, dword [0x10255824]
test eax, eax
je 0x10117612
dec dword [eax + 0xac]
push ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
cmp byte [esi + 0x1e4], 0
je 0x1011762c
mov ecx, esi
call fcn.1011e7b0
movss xmm1, dword [esi + 0xb8]
xorps xmm3, xmm3
movss xmm2, dword [edi + 0x3bc4]
ucomiss xmm1, xmm3
movss dword [ebp - 0x5c], xmm2
lahf
test ah, 0x44
jnp 0x10117700
ucomiss xmm1, xmm2
lahf
test ah, 0x44
jnp 0x10117700
cmp dword [ebx + 8], 0
movaps xmm0, xmm2
divss xmm0, xmm1
movss dword [ebp - 0x20], xmm0
jle 0x10117700
xor edi, edi
mov eax, dword [esi + 0x10]
lea ecx, [edi + eax]
mov dword [ebp - 0x48], ecx
cmp ecx, eax
jb 0x10117688
cmp ecx, dword [esi + 0x14]
jb 0x101176a8
push 0x263
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiimgui_internal.h
push str.p___Data__p___DataEnd
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movss xmm0, dword [ebp - 0x20]
add esp, 0xc
mov ecx, dword [ebp - 0x48]
mov eax, dword [esi + 0x10]
mulss xmm0, dword [ecx + 0x10]
lea ecx, [edi + eax]
movss dword [ebp - 0x48], xmm0
mov dword [ebp - 0x30], ecx
cmp ecx, eax
jb 0x101176c4
cmp ecx, dword [esi + 0x14]
jb 0x101176e4
push 0x263
push str.D:_aFedorawareFedorawareFedorawareFedoraware_TF2includeImGuiimgui_internal.h
push str.p___Data__p___DataEnd
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movss xmm0, dword [ebp - 0x48]
add esp, 0xc
mov ecx, dword [ebp - 0x30]
add edi, 0x70
movss dword [ecx + 0x10], xmm0
sub dword [ebx + 8], 1
movss xmm0, dword [ebp - 0x20]
jne 0x10117676
movss xmm2, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x58]
movss dword [esi + 0xb8], xmm2
mov byte [eax + 0xaf], 1
cmp dword [esi + 0x154], 0
jle 0x1011774b
mov ecx, dword [esi + 0x158]
test ecx, ecx
jns 0x10117741
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [esi + 0x154]
call fcn.10102ea0
mov dword [esi + 0x154], 0
mov ecx, esi
call fcn.101179c0
mov ecx, dword [ebp - 0xc]
mov al, 1
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret