Function at 0x10091db0
Capabilities:
Access peb ldr_data

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100a84ad
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xf8
mov eax, dword [0x10112040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [0x10115e28]
mov ecx, dword [0x10115e34]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
call eax
mov ecx, dword [0x10115e28]
push eax
call esi
mov esi, eax
test esi, esi
je 0x10092354
mov edx, dword [0x10115de8]
mov ecx, dword fs:[0x2c]
mov eax, dword [0x10116020]
mov ecx, dword [ecx + edx*4]
mov dword [ebp - 0x100], ecx
cmp eax, dword [ecx + 4]
jle 0x10091e85
push 0x10116020
call fcn.100a0bb4
add esp, 4
cmp dword [0x10116020], 0xffffffff
jne 0x10091e85
mov edx, str.deadflag
mov dword [ebp - 4], 0
mov ecx, str.CBasePlayer
call fcn.1009c3f0
push 0x10116020
mov dword [0x10116038], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100a0b63
add esp, 4
mov eax, dword [0x10116038]
cmp dword [esi + eax], 0
jne 0x10092354
mov ecx, dword [0x10115e7c]
mov eax, dword [ecx]
mov eax, dword [eax + 0xd4]
call eax
test al, al
jne 0x10091ef7
mov ecx, dword [0x10115e48]
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
test al, al
jne 0x10091ef7
mov ecx, dword [0x10112aa0]
mov eax, dword [ecx + 1]
add ecx, 5
add eax, ecx
call eax
test al, al
jne 0x10091ef7
cmp byte [0x10117fed], al
jne 0x10091ef7
movsx eax, word [0x10115f80]
cmp dword [eax*4 + 0x101160a8], 1
jne 0x10091ef7
cmp byte [0x10115fc0], 0
sete al
mov byte [0x10115fc0], al
jmp 0x10091efc
mov al, byte [0x10115fc0]
test al, al
jne 0x10091f52
push 7
mov ecx, esi
call fcn.10023170
test al, al
jne 0x10091f52
push 0x52
mov ecx, esi
call fcn.10023170
test al, al
jne 0x10091f52
push 0x36
mov ecx, esi
call fcn.10023170
test al, al
jne 0x10091f52
push 0x4d
mov ecx, esi
call fcn.10023170
test al, al
jne 0x10091f52
cmp byte [0x10117fed], al
jne 0x10091f52
mov ecx, dword [0x10115e38]
mov byte [ebp - 0xc9], al
mov eax, dword [ecx]
call dword [eax + 0x84]
jmp 0x10091f67
mov ecx, dword [0x10115e38]
mov byte [ebp - 0xc9], 1
mov eax, dword [ecx]
call dword [eax + 0x80]
mov ecx, dword [0x101130e8]
mov eax, dword [ecx + 1]
add ecx, 5
add eax, ecx
mov ecx, esi
call eax
cmp byte [ebp - 0xc9], 0
je 0x10092354
lea eax, [ebp - 0xf0]
mov dword [ebp - 0xd0], 0
push eax
lea eax, [ebp - 0xe4]
mov dword [ebp - 0xd4], 0
push eax
lea ecx, [edi + 0x4c]
mov dword [ebp - 0xd8], 0
lea edx, [ebp - 0xd8]
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xec], 0
mov dword [ebp - 0xf0], 0
call fcn.1002d680
movss xmm0, dword [0x101123d4]
add esp, 8
movss xmm4, dword [ebp - 0xd8]
movss xmm5, dword [ebp - 0xd4]
movss xmm6, dword [ebp - 0xd0]
movss xmm1, dword [ebp - 0xe4]
movss xmm3, dword [ebp - 0xdc]
movss xmm2, dword [ebp - 0xe0]
mulss xmm4, xmm0
mov dword [ebp - 0x64], 0
mulss xmm5, xmm0
mov dword [ebp - 0x54], 0
mulss xmm6, xmm0
mov dword [ebp - 0x44], 0
movss xmm0, dword [0x10115f4c]
mulss xmm1, xmm0
mov dword [ebp - 0x34], 0
mulss xmm2, xmm0
mov byte [ebp - 0x2f], 1
mulss xmm3, xmm0
subss xmm4, xmm1
movss xmm0, dword [0x10115ea8]
subss xmm5, xmm2
movss xmm1, dword [ebp - 0xf0]
movss xmm2, dword [ebp - 0xec]
subss xmm6, xmm3
movss xmm3, dword [ebp - 0xe8]
mulss xmm1, xmm0
mulss xmm2, xmm0
mulss xmm3, xmm0
subss xmm4, xmm1
subss xmm5, xmm2
subss xmm6, xmm3
movss xmm3, dword [edi + 0x40]
movaps xmm2, xmm3
movss dword [ebp - 0xf4], xmm4
subss xmm2, xmm4
movss xmm4, dword [edi + 0x44]
movaps xmm1, xmm4
movss dword [ebp - 0xf8], xmm5
subss xmm1, xmm5
movss xmm5, dword [edi + 0x48]
movaps xmm0, xmm5
movss dword [ebp - 0xfc], xmm6
subss xmm0, xmm6
subss xmm2, xmm3
subss xmm1, xmm4
subss xmm0, xmm5
movss dword [ebp - 0x60], xmm2
mulss xmm2, xmm2
movss dword [ebp - 0x5c], xmm1
mulss xmm1, xmm1
movss dword [ebp - 0x58], xmm0
mulss xmm0, xmm0
addss xmm2, xmm1
xorps xmm1, xmm1
addss xmm2, xmm0
ucomiss xmm2, xmm1
lahf
test ah, 0x44
jp 0x10092136
mov byte [ebp - 0x2f], 0
mov ecx, dword [0x10115e64]
addss xmm3, xmm1
xor eax, eax
mov dword [ebp - 0x40], 0x41200000
addss xmm4, xmm1
mov dword [ebp - 0x3c], 0x41200000
addss xmm5, xmm1
mov dword [ebp - 0x38], 0x41200000
lea edx, [ebp - 0xc8]
mov byte [ebp - 0x30], 0
push edx
xorps xmm0, xmm0
movss dword [ebp - 0x70], xmm3
lea edx, [ebp - 0x1c]
movss dword [ebp - 0x6c], xmm4
push edx
movss dword [ebp - 0x68], xmm5
lea edx, [ebp - 0x70]
mov dword [ebp - 0x50], 0x80000000
mov dword [ebp - 0x4c], 0x80000000
mov dword [ebp - 0x48], 0x80000000
mov dword [ebp - 0x1c], 0x10101450
mov dword [ebp - 0x18], 0
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
movq qword [ebp - 0x8c], xmm0
mov dword [ebp - 0x84], eax
mov word [ebp - 0x80], ax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x78], eax
mov eax, dword [ecx]
push 0x200400b
push edx
call dword [eax + 0x10]
movss xmm0, dword [ebp - 0x9c]
movss xmm1, dword [ebp - 0xf4]
movss xmm2, dword [ebp - 0xf8]
movss xmm3, dword [ebp - 0xfc]
mulss xmm1, xmm0
mulss xmm2, xmm0
mulss xmm3, xmm0
movss xmm0, dword [edi + 0x40]
subss xmm0, xmm1
movss dword [edi + 0x40], xmm0
movss xmm0, dword [edi + 0x44]
subss xmm0, xmm2
movss dword [edi + 0x44], xmm0
movss xmm0, dword [edi + 0x48]
subss xmm0, xmm3
movss dword [edi + 0x48], xmm0
cmp byte [0x10115fe2], 0
je 0x10092354
mov ecx, dword [ebp - 0x100]
mov eax, dword [0x10116574]
cmp eax, dword [ecx + 4]
jle 0x10092315
push 0x10116574
call fcn.100a0bb4
add esp, 4
cmp dword [0x10116574], 0xffffffff
jne 0x10092315
mov edx, str.m_hItem
mov dword [ebp - 4], 1
mov ecx, str.CTFPlayer
call fcn.1009c3f0
sub eax, 0x34
mov dword [ebp - 4], 0xffffffff
push 0x10116574
mov dword [0x1011657c], eax
call fcn.100a0b63
add esp, 4
mov eax, dword [0x1011657c]
mov ecx, dword [eax + esi]
test ecx, ecx
je 0x10092354
movss xmm0, dword [0x10113090]
sub esp, 8
mov eax, dword [ecx]
movss dword [ecx + 0x80], xmm0
movss xmm0, dword [0x1011308c]
movss dword [esp + 4], xmm0
movss xmm0, dword [0x10113090]
movss dword [esp], xmm0
call dword [eax + 0x10]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100a07a5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret