Function at 0x100b5b10
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1011b7c7
mov eax, dword fs:[0]
push eax
sub esp, 0x68
mov eax, dword [0x10150380]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor eax, eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov eax, dword [0x10180514]
test al, 1
jne 0x100b5b53
or eax, 1
mov dword [0x10180514], eax
test al, 2
jne 0x100b5b5f
or eax, 2
mov dword [0x10180514], eax
test al, 4
jne 0x100b5b6b
or eax, 4
mov dword [0x10180514], eax
xor edi, edi
xor esi, esi
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x40], esi
mov dword [ebp - 4], esi
xorps xmm0, xmm0
push 0x20
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], esi
call fcn.1010fe49
movups xmm0, xmmword [str.local_indicators]
mov dword [ebp - 0x28], eax
add esp, 4
mov dword [ebp - 0x18], 0x10
mov dword [ebp - 0x14], 0x1f
movups xmmword [eax], xmm0
mov byte [eax + 0x10], 0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 1
push eax
mov ecx, 0x10180078
call fcn.1000de40
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], 3
push ecx
mov ecx, eax
call fcn.1000dcc0
mov al, byte [eax]
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x14]
mov byte [ebp - 0x2e], al
cmp ecx, 0xf
jbe 0x100b5c1a
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b5c0d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b5c0d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
mov al, byte [ebp - 0x2e]
add esp, 8
test al, al
je 0x100b6d3c
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
push str.Counter_Strike:_Global_Offensive
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
test eax, eax
jne 0x100b5c49
push str.CS:GO_MIGI
push eax
call dword [sym.imp.USER32.dll_FindWindowA]
lea ecx, [ebp - 0x64]
push ecx
push eax
call dword [sym.imp.USER32.dll_ScreenToClient]
cmp byte [0x1017bfe9], 0
movd xmm0, dword [ebp - 0x64]
movss xmm5, dword [0x10180528]
movss xmm4, dword [0x1018052c]
movss xmm2, dword [0x101451a0]
movss xmm3, dword [0x10145268]
cvtdq2ps xmm0, xmm0
movss dword [0x101804ec], xmm5
movss dword [0x10180528], xmm0
movd xmm0, dword [ebp - 0x60]
cvtdq2ps xmm0, xmm0
movss dword [0x101804f0], xmm4
movss dword [0x1018052c], xmm0
je 0x100b5d4c
movaps xmm1, xmm2
subss xmm1, dword [0x1018054c]
comiss xmm5, xmm1
jbe 0x100b5d4c
movaps xmm0, xmm3
subss xmm0, dword [0x10180550]
comiss xmm4, xmm0
jbe 0x100b5d4c
addss xmm1, dword [0x10145250]
comiss xmm1, xmm5
jbe 0x100b5d4c
addss xmm0, dword [0x10145158]
comiss xmm0, xmm4
jbe 0x100b5d4c
push 1
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
movss xmm2, dword [0x101451a0]
movss xmm3, dword [0x10145268]
test ax, ax
je 0x100b5d4c
movss xmm0, dword [0x101804ec]
subss xmm0, dword [0x10180528]
addss xmm0, dword [0x1018054c]
movss dword [0x1018054c], xmm0
movss xmm0, dword [0x101804f0]
subss xmm0, dword [0x1018052c]
addss xmm0, dword [0x10180550]
movss dword [0x10180550], xmm0
test byte [0x10176f3c], 1
subss xmm2, dword [0x1018054c]
subss xmm3, dword [0x10180550]
movss dword [ebp - 0x50], xmm2
movss dword [ebp - 0x58], xmm3
je 0x100b5d8d
mov ecx, dword [0x1017d4f0]
mov eax, dword [0x10176f30]
test byte [ecx + eax], 1
je 0x100b5d8d
cmp byte [0x10177088], 0
je 0x100b5d8d
mov dl, 1
jmp 0x100b5d8f
xor dl, dl
mov ecx, dword [0x10176f30]
mov eax, dword [0x1017d4b8]
mov byte [ebp - 0x2e], dl
movss xmm1, dword [eax + ecx + 4]
movss xmm0, dword [eax + ecx]
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm1
call fcn.10003c80
movss xmm1, dword [0x10144f64]
comiss xmm1, xmm0
ja 0x100b5dce
test dl, dl
jne 0x100b5e4f
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push 0x20
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
call fcn.1010fe49
movups xmm0, xmmword [str.nemesis_indicators]
mov dword [ebp - 0x28], eax
add esp, 4
mov dword [ebp - 0x18], 0x12
mov dword [ebp - 0x14], 0x1f
movups xmmword [eax], xmm0
mov cx, word [0x10140ae8]
mov word [eax + 0x10], cx
mov byte [eax + 0x12], 0
mov eax, 1
mov byte [ebp - 4], 2
mov dword [ebp - 0x3c], eax
mov ecx, 0x10180078
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x28]
push eax
call fcn.1000de40
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], 0
push ecx
mov ecx, eax
call fcn.1000dcc0
mov byte [ebp - 0x2d], 1
cmp byte [eax], 0
jne 0x100b5e53
mov byte [ebp - 0x2d], 0
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x3c]
test al, 1
je 0x100b5e9d
mov ecx, dword [ebp - 0x14]
and eax, 0xfffffffe
mov dword [ebp - 0x3c], eax
cmp ecx, 0xf
jbe 0x100b5e9d
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b5e93
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b5e93
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
add esp, 8
cmp byte [ebp - 0x2d], 0
je 0x100b5fcc
mov edi, dword [0x1017d528]
mov esi, dword [0x10176f30]
movss xmm1, dword [0x10145278]
mov dword [ebp - 0x54], 0x420c0000
mov dword [ebp - 0x34], 0
movss xmm0, dword [edi + esi]
subss xmm0, dword [0x10177040]
call fcn.10040960
movaps xmm2, xmm0
movss xmm0, dword [edi + esi]
comiss xmm0, dword [0x10177040]
jbe 0x100b5eff
comiss xmm2, dword [0x10145240]
jb 0x100b5f14
subss xmm2, dword [0x10145278]
jmp 0x100b5f14
movss xmm1, dword [0x10145358]
comiss xmm1, xmm2
jb 0x100b5f14
addss xmm2, dword [0x10145278]
movaps xmm0, xmm2
call fcn.10003c50
xorps xmm1, xmm1
movss dword [ebp - 0x5c], xmm0
comiss xmm0, xmm1
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x1c], 8
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x18], 0xf
movss xmm1, dword [0x10145188]
cmovae ecx, eax
lea eax, [ebp - 0x54]
comiss xmm1, xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x2c], xmm0
cmovae eax, ecx
mov dword [ebp - 0x2c], 0x79646f62
mov dword [ebp - 0x28], 0x77617920
mov byte [ebp - 0x24], 0
movss xmm1, dword [eax]
mulss xmm1, dword [0x10144f34]
movss dword [ebp - 0x14], xmm1
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 3
push eax
push 0
lea ecx, [ebp - 0x48]
call fcn.1007eb30
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
cmp ecx, 0xf
jbe 0x100b5fc3
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b5fb9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b6d8b
push ecx
push edx
call fcn.1011035b
add esp, 8
mov edi, dword [ebp - 0x48]
mov esi, dword [ebp - 0x44]
mov dword [ebp - 0x4c], edi
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push 0x20
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
call fcn.1010fe49
movups xmm0, xmmword [str.nemesis_indicators]
mov dword [ebp - 0x28], eax
add esp, 4
mov dword [ebp - 0x18], 0x12
mov dword [ebp - 0x14], 0x1f
movups xmmword [eax], xmm0
mov cx, word [0x10140ae8]
mov word [eax + 0x10], cx
mov byte [eax + 0x12], 0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 4
push eax
mov ecx, 0x10180078
call fcn.1000de40
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], 1
push ecx
mov ecx, eax
call fcn.1000dcc0
mov al, byte [eax]
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x14]
mov byte [ebp - 0x2d], al
cmp ecx, 0xf
jbe 0x100b607b
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b606e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b606e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
mov al, byte [ebp - 0x2d]
add esp, 8
test al, al
je 0x100b6173
mov ecx, dword [0x10176f30]
mov eax, dword [0x1017d4b8]
movss xmm1, dword [eax + ecx + 4]
movss xmm0, dword [eax + ecx]
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm1
call fcn.10003c80
movaps xmm2, xmm0
mov dword [ebp - 0x1c], 8
mulss xmm2, dword [0x10144ef8]
xorps xmm1, xmm1
mov dword [ebp - 0x18], 0xf
movups xmmword [ebp - 0x2c], xmm1
mov dword [ebp - 0x2c], 0x6f6c6576
mov dword [ebp - 0x28], 0x79746963
mov byte [ebp - 0x24], 0
movss dword [ebp - 0x14], xmm2
mov byte [ebp - 4], 5
cmp esi, dword [ebp - 0x40]
je 0x100b6125
xorps xmm0, xmm0
mov ecx, 0xf
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
movups xmm0, xmmword [ebp - 0x2c]
mov dword [esi + 0x14], 0
mov byte [ebp - 0x2c], 0
movups xmmword [esi], xmm0
movq xmm0, qword [ebp - 0x1c]
movq qword [esi + 0x10], xmm0
movss dword [esi + 0x18], xmm2
add esi, 0x1c
mov dword [ebp - 0x44], esi
jmp 0x100b613e
lea eax, [ebp - 0x2c]
push eax
push esi
lea ecx, [ebp - 0x48]
call fcn.1007eb30
mov edi, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x44]
mov dword [ebp - 0x4c], edi
mov byte [ebp - 4], 0
cmp ecx, 0xf
jbe 0x100b6173
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b6169
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b6d8b
push ecx
push edx
call fcn.1011035b
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push 0x20
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
call fcn.1010fe49
movups xmm0, xmmword [str.nemesis_indicators]
mov dword [ebp - 0x28], eax
add esp, 4
mov dword [ebp - 0x18], 0x12
mov dword [ebp - 0x14], 0x1f
movups xmmword [eax], xmm0
mov cx, word [0x10140ae8]
mov word [eax + 0x10], cx
mov byte [eax + 0x12], 0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 6
push eax
mov ecx, 0x10180078
call fcn.1000de40
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], 2
push ecx
mov ecx, eax
call fcn.1000dcc0
mov al, byte [eax]
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x14]
mov byte [ebp - 0x2d], al
cmp ecx, 0xf
jbe 0x100b6222
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b6215
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b6215
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
mov al, byte [ebp - 0x2d]
add esp, 8
test al, al
je 0x100b6310
mov eax, dword [0x1017c318]
movd xmm0, dword [0x10176f88]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0x1c], 7
mov dword [ebp - 0x18], 0xf
movd xmm1, dword [eax + 0x4cb0]
cvtdq2ps xmm1, xmm1
mov eax, dword [str.fakelag]
divss xmm1, xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x2c], eax
mov ax, word [0x10144e1c]
mov word [ebp - 0x28], ax
mov al, byte [0x10144e1e]
mov byte [ebp - 0x26], al
mov byte [ebp - 0x25], 0
movss dword [ebp - 0x14], xmm1
mov byte [ebp - 4], 7
cmp esi, dword [ebp - 0x40]
je 0x100b62c2
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov ecx, 0xf
movups xmm0, xmmword [ebp - 0x2c]
mov dword [esi + 0x14], 0
mov byte [ebp - 0x2c], 0
movups xmmword [esi], xmm0
movq xmm0, qword [ebp - 0x1c]
movq qword [esi + 0x10], xmm0
movss dword [esi + 0x18], xmm1
add esi, 0x1c
mov dword [ebp - 0x44], esi
jmp 0x100b62db
lea eax, [ebp - 0x2c]
push eax
push esi
lea ecx, [ebp - 0x48]
call fcn.1007eb30
mov edi, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x44]
mov dword [ebp - 0x4c], edi
mov byte [ebp - 4], 0
cmp ecx, 0xf
jbe 0x100b6310
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b6306
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b6d8b
push ecx
push edx
call fcn.1011035b
add esp, 8
cmp byte [0x1017bf70], 0
je 0x100b639f
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push 0x20
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
call fcn.1010fe49
movups xmm0, xmmword [str.nemesis_indicators]
mov dword [ebp - 0x28], eax
add esp, 4
mov dword [ebp - 0x18], 0x12
mov dword [ebp - 0x14], 0x1f
movups xmmword [eax], xmm0
mov cx, word [0x10140ae8]
mov word [eax + 0x10], cx
mov byte [eax + 0x12], 0
mov byte [ebp - 4], 8
mov ecx, 0x10180078
mov eax, dword [ebp - 0x3c]
or eax, 2
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x28]
push eax
call fcn.1000de40
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], 3
push ecx
mov ecx, eax
call fcn.1000dcc0
mov byte [ebp - 0x2d], 1
cmp byte [eax], 0
jne 0x100b63a3
mov byte [ebp - 0x2d], 0
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x3c]
test al, 2
je 0x100b63e7
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x100b63e7
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b63dd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b63dd
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
add esp, 8
cmp byte [ebp - 0x2d], 0
je 0x100b64d2
movd xmm1, dword [0x1017bfa0]
movd xmm0, dword [0x1017bfb8]
cvtdq2ps xmm0, xmm0
mov eax, dword [str.exploit]
mov dword [ebp - 0x1c], 7
mov dword [ebp - 0x18], 0xf
cvtdq2ps xmm1, xmm1
divss xmm1, xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x2c], eax
mov ax, word [0x10144e4c]
mov word [ebp - 0x28], ax
mov al, byte [0x10144e4e]
mov byte [ebp - 0x26], al
mov byte [ebp - 0x25], 0
movss dword [ebp - 0x14], xmm1
mov byte [ebp - 4], 9
cmp esi, dword [ebp - 0x40]
je 0x100b6484
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov ecx, 0xf
movups xmm0, xmmword [ebp - 0x2c]
mov dword [esi + 0x14], 0
mov byte [ebp - 0x2c], 0
movups xmmword [esi], xmm0
movq xmm0, qword [ebp - 0x1c]
movq qword [esi + 0x10], xmm0
movss dword [esi + 0x18], xmm1
add esi, 0x1c
mov dword [ebp - 0x44], esi
jmp 0x100b649d
lea eax, [ebp - 0x2c]
push eax
push esi
lea ecx, [ebp - 0x48]
call fcn.1007eb30
mov edi, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x44]
mov dword [ebp - 0x4c], edi
mov byte [ebp - 4], 0
cmp ecx, 0xf
jbe 0x100b64d2
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b64c8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b6d8b
push ecx
push edx
call fcn.1011035b
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push 0x20
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
call fcn.1010fe49
movups xmm0, xmmword [str.nemesis_indicators]
mov dword [ebp - 0x28], eax
add esp, 4
mov dword [ebp - 0x18], 0x12
mov dword [ebp - 0x14], 0x1f
movups xmmword [eax], xmm0
mov cx, word [0x10140ae8]
mov word [eax + 0x10], cx
mov byte [eax + 0x12], 0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xa
push eax
mov ecx, 0x10180078
call fcn.1000de40
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], 4
push ecx
mov ecx, eax
call fcn.1000dcc0
mov al, byte [eax]
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x14]
mov byte [ebp - 0x2d], al
cmp ecx, 0xf
jbe 0x100b6581
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b6574
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b6574
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
mov al, byte [ebp - 0x2d]
add esp, 8
test al, al
je 0x100b6682
cmp byte [ebp - 0x2e], 0
je 0x100b6599
movss xmm0, dword [0x10145040]
jmp 0x100b65a1
movss xmm0, dword [0x10144fac]
mov eax, dword [0x1017d51c]
mov ecx, dword [0x10176f30]
movss xmm1, dword [0x10145040]
mov dword [ebp - 0x1c], 0xc
mov dword [ebp - 0x18], 0xf
mulss xmm0, dword [eax + ecx]
mov eax, dword [0x10144e40]
subss xmm1, xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x24], eax
movq xmm0, qword [str.stand_height]
movq qword [ebp - 0x2c], xmm0
mov byte [ebp - 0x20], 0
movss dword [ebp - 0x14], xmm1
mov byte [ebp - 4], 0xb
cmp esi, dword [ebp - 0x40]
je 0x100b6634
xorps xmm0, xmm0
mov ecx, 0xf
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
movups xmm0, xmmword [ebp - 0x2c]
mov dword [esi + 0x14], 0
mov byte [ebp - 0x2c], 0
movups xmmword [esi], xmm0
movq xmm0, qword [ebp - 0x1c]
movq qword [esi + 0x10], xmm0
movss dword [esi + 0x18], xmm1
add esi, 0x1c
mov dword [ebp - 0x44], esi
jmp 0x100b664d
lea eax, [ebp - 0x2c]
push eax
push esi
lea ecx, [ebp - 0x48]
call fcn.1007eb30
mov edi, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x44]
mov dword [ebp - 0x4c], edi
mov byte [ebp - 4], 0
cmp ecx, 0xf
jbe 0x100b6682
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b6678
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b6d8b
push ecx
push edx
call fcn.1011035b
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push 0x20
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
call fcn.1010fe49
movups xmm0, xmmword [str.nemesis_indicators]
mov dword [ebp - 0x28], eax
add esp, 4
mov dword [ebp - 0x18], 0x12
mov dword [ebp - 0x14], 0x1f
movups xmmword [eax], xmm0
mov dx, word [0x10140ae8]
mov word [eax + 0x10], dx
mov byte [eax + 0x12], 0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xc
push eax
mov ecx, 0x10180078
call fcn.1000de40
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], 5
push ecx
mov ecx, eax
call fcn.1000dcc0
mov al, byte [eax]
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x14]
mov byte [ebp - 0x2e], al
cmp ecx, 0xf
jbe 0x100b6731
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b6724
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b6724
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
mov al, byte [ebp - 0x2e]
add esp, 8
test al, al
je 0x100b6810
movss xmm1, dword [0x101794d0]
xorps xmm0, xmm0
addss xmm1, dword [0x101794d4]
mov ax, word [0x10144e34]
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0xa
movq xmm0, qword [str.inaccuracy]
mov dword [ebp - 0x18], 0xf
movq qword [ebp - 0x2c], xmm0
mov word [ebp - 0x24], ax
mov byte [ebp - 0x22], 0
movss dword [ebp - 0x14], xmm1
mov byte [ebp - 4], 0xd
cmp esi, dword [ebp - 0x40]
je 0x100b67c2
xorps xmm0, xmm0
mov ecx, 0xf
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
movups xmm0, xmmword [ebp - 0x2c]
mov dword [esi + 0x14], 0
mov byte [ebp - 0x2c], 0
movups xmmword [esi], xmm0
movq xmm0, qword [ebp - 0x1c]
movq qword [esi + 0x10], xmm0
movss dword [esi + 0x18], xmm1
add esi, 0x1c
mov dword [ebp - 0x44], esi
jmp 0x100b67db
lea eax, [ebp - 0x2c]
push eax
push esi
lea ecx, [ebp - 0x48]
call fcn.1007eb30
mov edi, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x44]
mov dword [ebp - 0x4c], edi
mov byte [ebp - 4], 0
cmp ecx, 0xf
jbe 0x100b6810
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b6806
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b6d8b
push ecx
push edx
call fcn.1011035b
add esp, 8
cmp edi, esi
jne 0x100b6821
cmp byte [0x1017bfe9], 0
je 0x100b6d3c
mov ax, word [0x1013eb94]
xorps xmm0, xmm0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0xa
movq xmm0, qword [str.menu_color]
mov dword [ebp - 0x14], 0xf
movq qword [ebp - 0x28], xmm0
mov word [ebp - 0x20], ax
mov byte [ebp - 0x1e], 0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xe
push eax
mov ecx, 0x10180058
call fcn.1000de60
movss xmm1, dword [0x10145264]
movss xmm0, dword [eax + 0xc]
mulss xmm0, xmm1
cvttss2si ecx, xmm0
movss xmm0, dword [eax + 8]
mulss xmm0, xmm1
mov dword [ebp - 0x34], ecx
mov byte [ebp - 0x39], cl
cvttss2si edx, xmm0
movss xmm0, dword [eax + 4]
mulss xmm0, xmm1
mov dword [ebp - 0x5c], edx
mov byte [ebp - 0x3a], dl
cvttss2si esi, xmm0
movss xmm0, dword [eax]
mulss xmm0, xmm1
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x38], esi
cvttss2si eax, xmm0
mov dword [ebp - 0x54], eax
mov byte [ebp - 0x3c], al
mov eax, esi
mov byte [ebp - 0x3b], al
cmp ecx, 0xf
jbe 0x100b68f2
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b68e8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b68e8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
add esp, 8
mov ecx, dword [0x1017c2b0]
movss xmm0, dword [ebp - 0x58]
subss xmm0, dword [0x10145040]
mov eax, dword [ecx]
cvttss2si edi, xmm0
mov esi, dword [eax + 0x38]
mov eax, dword [ebp - 0x34]
movzx edx, al
mov eax, dword [ebp - 0x5c]
shl edx, 8
movzx eax, al
or edx, eax
mov eax, dword [ebp - 0x38]
shl edx, 8
movzx eax, al
or edx, eax
mov eax, dword [ebp - 0x54]
shl edx, 8
movzx eax, al
or edx, eax
push edx
call esi
cvttss2si esi, dword [ebp - 0x50]
mov ecx, dword [0x1017c2b0]
mov eax, dword [ecx]
mov edx, dword [eax + 0x40]
lea eax, [esi + 0xc8]
mov dword [ebp - 0x38], eax
lea eax, [edi + 1]
push eax
push dword [ebp - 0x38]
push edi
push esi
call edx
mov ecx, dword [0x1017c2b0]
cvttss2si edi, dword [ebp - 0x58]
push 0xff111111
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
mov ecx, dword [0x1017c2b0]
lea esi, [edi + 0x10]
cvttss2si edx, dword [ebp - 0x50]
push esi
mov eax, dword [ecx]
mov eax, dword [eax + 0x40]
push dword [ebp - 0x38]
push edi
push edx
call eax
mov ecx, dword [0x1017c2b0]
push 0xff232323
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
mov ecx, dword [0x1017c2b0]
cvttss2si edx, dword [ebp - 0x50]
push 0
push 0
mov eax, dword [ecx]
push 0xff
push esi
mov eax, dword [eax + 0x1ec]
push dword [ebp - 0x38]
push edi
push edx
call eax
mov ax, word [0x10144e28]
xorps xmm0, xmm0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0xa
movq xmm0, qword [str.indicators]
mov dword [ebp - 0x14], 0xf
movq qword [ebp - 0x28], xmm0
mov word [ebp - 0x20], ax
mov byte [ebp - 0x1e], 0
push 2
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xf
push eax
movss xmm0, dword [ebp - 0x58]
addss xmm0, dword [0x101450e0]
push ecx
mov eax, esp
mov ecx, 0x1017fea4
mov dword [eax], 0xffffffff
cvttss2si eax, xmm0
movss xmm0, dword [ebp - 0x50]
addss xmm0, dword [0x101451e4]
push eax
cvttss2si eax, xmm0
push eax
call fcn.100a06f0
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x100b6a6f
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b6a65
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b6a65
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1011035b
add esp, 8
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x4c]
cmp eax, ecx
jne 0x100b6a82
mov dword [ebp - 0x54], 0x12
jmp 0x100b6aaa
sub ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
lea eax, [ecx*8]
sub eax, ecx
lea eax, [eax*2 + 0x13]
mov dword [ebp - 0x54], eax
movss xmm0, dword [ebp - 0x58]
subss xmm0, dword [0x101450a4]
mov ecx, dword [0x1017c2b0]
push 0xff000000
mov eax, dword [ecx]
cvttss2si edi, xmm0
mov eax, dword [eax + 0x38]
movss xmm0, dword [ebp - 0x50]
subss xmm0, dword [0x10145040]
cvttss2si esi, xmm0
call eax
mov ecx, dword [0x1017c2b0]
mov eax, dword [ecx]
mov edx, dword [eax + 0x48]
mov eax, dword [ebp - 0x54]
add eax, edi
push eax
lea eax, [esi + 0xca]
push eax
push edi
push esi
call edx
mov esi, dword [ebp - 0x44]
mov edi, dword [ebp - 0x4c]
cmp edi, esi
je 0x100b6b68
movss xmm0, dword [ebp - 0x58]
mov ecx, esi
addss xmm0, dword [0x10145148]
sub ecx, edi
mov eax, 0x92492493
imul ecx
cvttss2si esi, xmm0
push 0x96232323
add edx, ecx
mov ecx, dword [0x1017c2b0]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edi, [eax*8]
sub edi, eax
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
mov ecx, dword [0x1017c2b0]
mov eax, dword [ecx]
mov edx, dword [eax + 0x40]
lea eax, [esi + edi*2]
push eax
cvttss2si eax, dword [ebp - 0x50]
push dword [ebp - 0x38]
push esi
push eax
call edx
mov esi, dword [ebp - 0x44]
mov edi, dword [ebp - 0x4c]
mov ecx, esi
mov eax, 0x92492493
sub ecx, edi
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x34], eax
je 0x100b6d3c
movss xmm1, dword [ebp - 0x50]
xor ecx, ecx
movss xmm2, dword [ebp - 0x58]
movaps xmm0, xmm1
addss xmm0, dword [0x101450fc]
addss xmm1, dword [0x101451d0]
addss xmm2, dword [0x10145150]
mov esi, dword [ebp - 0x3c]
add edi, 0x18
mov dword [ebp - 0x6c], 0x3f800000
cvttss2si edx, xmm0
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x74], 0x3f800000
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x50], edi
cvttss2si eax, xmm1
mov dword [ebp - 0x60], edx
movss dword [ebp - 0x58], xmm2
mov dword [ebp - 0x54], eax
nop word [eax + eax]
push 0
lea eax, [edi - 0x18]
movd xmm0, ecx
push eax
push ecx
mov eax, esp
cvtdq2pd xmm0, xmm0
mov dword [eax], 0xffffffff
mov eax, ecx
shr eax, 0x1f
mov ecx, 0x1017fea4
addsd xmm0, qword [eax*8 + 0x101456e0]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm2
cvttss2si eax, xmm0
movss dword [ebp - 0x38], xmm0
push eax
push edx
call fcn.100a06f0
movss xmm0, dword [edi]
lea ecx, [ebp - 0x68]
xorps xmm1, xmm1
lea eax, [ebp - 0x6c]
comiss xmm0, xmm1
push esi
movss xmm1, dword [0x10145040]
cmovae ecx, edi
comiss xmm1, xmm0
cmovae eax, ecx
mov ecx, dword [0x1017c2b0]
movss xmm0, dword [eax]
mulss xmm0, dword [0x101451fc]
cvttss2si edi, xmm0
movss xmm0, dword [ebp - 0x38]
addss xmm0, dword [0x101450a4]
cvttss2si eax, xmm0
mov dword [ebp - 0x38], eax
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
mov esi, dword [ebp - 0x54]
mov eax, dword [ebp - 0x38]
mov ecx, dword [0x1017c2b0]
add eax, 6
push eax
lea eax, [esi + edi]
push eax
mov edx, dword [ecx]
push dword [ebp - 0x38]
push esi
mov eax, dword [edx + 0x40]
call eax
mov eax, dword [ebp - 0x50]
lea ecx, [ebp - 0x70]
xorps xmm1, xmm1
push 0xff232323
movss xmm0, dword [eax]
comiss xmm0, xmm1
movss xmm1, dword [0x10145040]
cmovae ecx, eax
lea eax, [ebp - 0x74]
comiss xmm1, xmm0
cmovae eax, ecx
mov ecx, dword [0x1017c2b0]
movss xmm0, dword [eax]
mov eax, dword [ecx]
mulss xmm0, dword [0x101451fc]
mov eax, dword [eax + 0x38]
cvttss2si edi, xmm0
call eax
mov eax, dword [ebp - 0x38]
mov ecx, dword [0x1017c2b0]
add eax, 6
push 1
push 0
push 0x4b
mov edx, dword [ecx]
push eax
lea eax, [esi + edi]
push eax
push dword [ebp - 0x38]
mov eax, dword [edx + 0x1ec]
push esi
call eax
mov ecx, dword [ebp - 0x5c]
mov edi, dword [ebp - 0x50]
add ecx, 0xe
movss xmm2, dword [ebp - 0x58]
add edi, 0x1c
sub dword [ebp - 0x34], 1
mov esi, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x50], edi
jne 0x100b6bf0
mov esi, dword [ebp - 0x44]
mov edi, dword [ebp - 0x4c]
test edi, edi
je 0x100b6d9b
push ecx
mov edx, esi
mov ecx, edi
call fcn.1007eac0
mov ecx, dword [ebp - 0x40]
mov eax, 0x92492493
sub ecx, edi
add esp, 4
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax*8]
sub ecx, eax
mov eax, edi
shl ecx, 2
cmp ecx, 0x1000
jb 0x100b6d91
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b6d91
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edi
call fcn.1011035b
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1010fe2d
mov esp, ebp
pop ebp
ret