Function at 0x10036520
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100ba0eb
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x2c8
mov eax, dword [0x100dc380]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebx + 8]
lea eax, [ebp - 0x1f4]
push 0x30
push 0
push eax
mov dword [ebp - 0x21c], esi
mov dword [ebp - 0x224], 0
call sub.VCRUNTIME140.dll_memset
xorps xmm0, xmm0
mov dword [ebp - 0x1f8], 0
add esp, 0xc
cmp dword [esi + 4], 0
movups xmmword [ebp - 0x218], xmm0
movups xmmword [ebp - 0x208], xmm0
je 0x100373b5
mov edi, dword [esi]
mov dword [ebp - 0x1c], edi
test edi, edi
je 0x100373b5
mov eax, dword [0x101937b0]
add eax, 0xffffffce
xor eax, 0x18cdb7d2
cmp dword [eax + edi], 0
je 0x10036809
mov esi, dword [0x100ca508]
push 6
push dword [0x100fd6a0]
push dword [0x100fd69c]
call fcn.100b7460
cmp eax, dword [0x100fd6a0]
je 0x10036617
mov edx, str.missed_shot_due_to_target_death_n
lea ecx, [ebp - 0x278]
call fcn.10032d70
mov edi, eax
mov dword [ebp - 0x220], edi
mov dword [ebp - 4], 0
mov ecx, 1
jmp 0x1003663b
mov edx, str.Missed_shot_due_to_target_death_n
lea ecx, [ebp - 0x260]
call fcn.10032d70
mov edi, eax
mov dword [ebp - 0x220], eax
mov dword [ebp - 4], 1
mov ecx, 2
push 9
mov dword [ebp - 0x224], ecx
xorps xmm0, xmm0
mov dword [ebp - 0x21c], ecx
lea ecx, [ebp - 0x240]
push str._aimbot_
movups xmmword [ebp - 0x240], xmm0
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x22c], 0
call fcn.10028190
mov dword [ebp - 0x1c], 0x41000000
mov dword [ebp - 0x18], esi
lea eax, [ebp - 0x1c]
mov dword [ebp - 4], 2
push eax
lea eax, [ebp - 0x18]
mov edx, edi
push eax
lea eax, [ebp - 0x240]
push eax
lea ecx, [ebp - 0x248]
call fcn.10038120
add esp, 0xc
push eax
mov byte [ebp - 4], 3
call fcn.10037730
mov byte [ebp - 4], 2
mov edi, dword [ebp - 0x244]
test edi, edi
je 0x100366e0
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edi + 4], eax
jne 0x100366e0
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
lock xadd dword [edi + 8], esi
dec esi
jne 0x100366e0
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov esi, dword [0x100ca508]
lea eax, [ebp - 0x240]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.10027c00
sub esp, 0x18
mov byte [ebp - 4], 4
mov ecx, esp
push dword [ebp - 0x220]
call fcn.10027c00
push esi
mov byte [ebp - 4], 2
call fcn.10096da0
mov ecx, dword [ebp - 0x22c]
cmp ecx, 0xf
jbe 0x10036752
mov edx, dword [ebp - 0x240]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10036748
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100367f4
push ecx
push edx
call fcn.100b7b6b
add esp, 8
mov eax, dword [ebp - 0x21c]
test al, 2
je 0x100367bc
mov ecx, dword [ebp - 0x24c]
and eax, 0xfffffffd
mov dword [ebp - 0x21c], eax
cmp ecx, 0xf
jbe 0x100367a1
mov edx, dword [ebp - 0x260]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10036791
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100367f4
push ecx
push edx
call fcn.100b7b6b
mov eax, dword [ebp - 0x21c]
add esp, 8
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0xf
mov byte [ebp - 0x260], 0
test al, 1
je 0x100373b5
mov ecx, dword [ebp - 0x264]
cmp ecx, 0xf
jbe 0x100373b5
mov edx, dword [ebp - 0x278]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100367fa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100367fa
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100b7b6b
add esp, 8
jmp 0x100373b5
mov eax, dword [edi + 8]
lea ecx, [edi + 8]
mov eax, dword [eax + 0x28]
call eax
imul eax, eax, 0x64c
lea eax, [eax + 0x101033a8]
mov dword [ebp - 0x220], eax
test eax, eax
je 0x100373b5
mov eax, dword [esi + 4]
cmp dword [eax + 0x3dc], 0
je 0x100373b5
mov ecx, dword [0x1019384c]
add ecx, 0xffffffa7
xor ecx, 0x18cdb7f9
mov eax, dword [ecx + edi]
mov dword [ebp - 0x68], eax
mov eax, dword [ecx + edi + 0xc]
mov ecx, edi
mov dword [ebp - 0x64], eax
mov eax, dword [0x10193774]
add eax, 0xffffffdd
xor eax, 0x18cdb7c3
movss xmm0, dword [eax + edi]
movss dword [ebp - 0x60], xmm0
movss xmm0, dword [eax + edi + 4]
movss dword [ebp - 0x5c], xmm0
movss xmm0, dword [eax + edi + 8]
mov eax, dword [0x10193780]
add eax, 0xffffffda
movss dword [ebp - 0x58], xmm0
xor eax, 0x18cdb7c6
movss xmm0, dword [eax + edi]
movss dword [ebp - 0x48], xmm0
movss xmm0, dword [eax + edi + 4]
movss dword [ebp - 0x44], xmm0
movss xmm0, dword [eax + edi + 8]
mov eax, dword [0x10193784]
add eax, 0xffffffd9
movss dword [ebp - 0x40], xmm0
xor eax, 0x18cdb7c7
movss xmm0, dword [eax + edi]
movss dword [ebp - 0x3c], xmm0
movss xmm0, dword [eax + edi + 4]
movss dword [ebp - 0x38], xmm0
movss xmm0, dword [eax + edi + 8]
movss dword [ebp - 0x34], xmm0
mov eax, dword [edi]
mov eax, dword [eax + 0x28]
call eax
mov ecx, edi
movss xmm0, dword [eax]
movss dword [ebp - 0x54], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x50], xmm0
movss xmm0, dword [eax + 8]
movss dword [ebp - 0x4c], xmm0
mov eax, dword [edi]
mov eax, dword [eax + 0x2c]
call eax
mov edx, dword [esi + 4]
mov ecx, dword [0x1019384c]
lea edi, [edx + 0x3e4]
add ecx, 0xffffffa7
mov dword [ebp - 0x18], edx
movss xmm0, dword [eax]
xor ecx, 0x18cdb7f9
movss dword [ebp - 0x30], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x2c], xmm0
movss xmm0, dword [eax + 8]
movss dword [ebp - 0x28], xmm0
add ecx, dword [edx]
mov eax, dword [edx + 0x3dc]
mov dword [ecx], eax
mov dword [ecx + 0xc], 0x80
mov ecx, dword [0x10193774]
mov esi, dword [edx]
add ecx, 0xffffffdd
mov eax, dword [edi]
xor ecx, 0x18cdb7c3
mov dword [ecx + esi], eax
mov eax, dword [edi + 4]
mov dword [ecx + esi + 4], eax
mov eax, dword [edi + 8]
mov dword [ecx + esi + 8], eax
mov ecx, dword [0x10193780]
mov eax, dword [edx + 0x54]
add ecx, 0xffffffda
xor ecx, 0x18cdb7c6
mov dword [ecx + esi], eax
mov eax, dword [edx + 0x58]
mov dword [ecx + esi + 4], eax
mov eax, dword [edx + 0x5c]
mov dword [ecx + esi + 8], eax
mov ecx, dword [0x10193784]
mov eax, dword [edx + 0x60]
add ecx, 0xffffffd9
xor ecx, 0x18cdb7c7
mov dword [ecx + esi], eax
mov eax, dword [edx + 0x64]
mov dword [ecx + esi + 4], eax
mov eax, dword [edx + 0x68]
mov dword [ecx + esi + 8], eax
mov ecx, esi
mov eax, dword [ebp - 0x18]
mov edx, dword [0x10193688]
add eax, 0x78
push eax
call edx
mov ecx, dword [ebp - 0x18]
mov eax, dword [0x1019368c]
push edi
mov ecx, dword [ecx]
call eax
mov esi, dword [ebp - 0x21c]
movss xmm4, dword [esi + 0x24]
movss xmm3, dword [esi + 0x28]
movss xmm5, dword [esi + 0x18]
movss xmm6, dword [esi + 0x1c]
subss xmm4, xmm5
movss xmm2, dword [esi + 0x2c]
subss xmm3, xmm6
movss xmm7, dword [esi + 0x20]
subss xmm2, xmm7
movaps xmm0, xmm4
movaps xmm1, xmm3
mulss xmm0, xmm4
mulss xmm1, xmm3
addss xmm0, xmm1
movaps xmm1, xmm2
mulss xmm1, xmm2
addss xmm0, xmm1
call fcn.10021fd0
addss xmm0, dword [0x100d1210]
movss xmm1, dword [0x100d12f0]
mov dword [ebp - 0x2b4], 0
mov byte [ebp - 0x28b], 1
divss xmm1, xmm0
movss xmm0, dword [esi + 0x14]
mulss xmm4, xmm1
mulss xmm3, xmm1
mulss xmm4, xmm0
mulss xmm3, xmm0
mulss xmm2, xmm1
movss dword [ebp - 0x2c0], xmm4
movss dword [ebp - 0x2bc], xmm3
mulss xmm2, xmm0
xorps xmm0, xmm0
mulss xmm4, xmm4
mulss xmm3, xmm3
movss dword [ebp - 0x2b8], xmm2
mulss xmm2, xmm2
addss xmm4, xmm3
addss xmm4, xmm2
ucomiss xmm4, xmm0
lahf
test ah, 0x44
jp 0x10036ab4
mov byte [ebp - 0x28b], 0
mov ecx, dword [0x10193568]
lea edx, [ebp - 0x218]
mov edi, dword [ebp - 0x1c]
push edx
mov dword [ebp - 0x290], 0
lea edx, [ebp - 0x2d0]
mov byte [ebp - 0x28c], 1
movss dword [ebp - 0x2d0], xmm5
movss dword [ebp - 0x2cc], xmm6
movss dword [ebp - 0x2c8], xmm7
mov dword [ebp - 0x2c4], 0
mov dword [ebp - 0x2a8], 0
mov dword [ebp - 0x2ac], 0
mov dword [ebp - 0x2b0], 0
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x29c], 0
mov dword [ebp - 0x2a0], 0
mov eax, dword [ecx]
push edi
push 0x4600400b
push edx
mov eax, dword [eax + 0xc]
call eax
cmp dword [esi], 0
je 0x10036de0
mov eax, dword [esi + 4]
test eax, eax
je 0x10036de0
movss xmm2, dword [eax + 0x30]
subss xmm2, dword [eax + 0x3c]
movss xmm0, dword [eax + 0x34]
subss xmm0, dword [eax + 0x40]
movss xmm1, dword [eax + 0x38]
subss xmm1, dword [eax + 0x44]
mulss xmm2, xmm2
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm2, xmm0
addss xmm2, xmm1
comiss xmm2, dword [0x100d14a4]
jbe 0x10036de0
mov esi, dword [0x100ca508]
push 6
push dword [0x100fd6a0]
push dword [0x100fd69c]
call fcn.100b7460
cmp eax, dword [0x100fd6a0]
je 0x10036bdf
mov edx, str.missed_shot_due_to_fake_lag_correction_n
lea ecx, [ebp - 0x278]
call fcn.10032d70
mov dword [ebp - 0x220], eax
mov dword [ebp - 4], 5
mov ecx, 4
jmp 0x10036c01
mov edx, str.Missed_shot_due_to_fake_lag_correction_n
lea ecx, [ebp - 0x260]
call fcn.10032d70
mov dword [ebp - 0x220], eax
mov dword [ebp - 4], 6
mov ecx, 8
push 9
mov dword [ebp - 0x224], ecx
xorps xmm0, xmm0
mov dword [ebp - 0x21c], ecx
lea ecx, [ebp - 0x240]
push str._aimbot_
movups xmmword [ebp - 0x240], xmm0
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x22c], 0
call fcn.10028190
mov dword [ebp - 0x1c], 0x41000000
mov dword [ebp - 0x18], esi
mov edx, dword [ebp - 0x220]
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
mov dword [ebp - 4], 7
push eax
lea eax, [ebp - 0x240]
push eax
lea ecx, [ebp - 0x248]
call fcn.10038120
add esp, 0xc
push eax
mov byte [ebp - 4], 8
call fcn.10037730
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x244]
mov dword [ebp - 0x1c], ecx
test ecx, ecx
je 0x10036cac
or esi, 0xffffffff
mov eax, esi
lock xadd dword [ecx + 4], eax
jne 0x10036cac
mov eax, dword [ecx]
call dword [eax]
mov ecx, dword [ebp - 0x1c]
lock xadd dword [ecx + 8], esi
dec esi
jne 0x10036cac
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [0x100ca508]
lea eax, [ebp - 0x240]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.10027c00
sub esp, 0x18
mov byte [ebp - 4], 9
mov ecx, esp
push dword [ebp - 0x220]
call fcn.10027c00
push esi
mov byte [ebp - 4], 7
call fcn.10096da0
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x22c]
cmp ecx, 0xf
jbe 0x10036d22
mov edx, dword [ebp - 0x240]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10036d18
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10036dda
push ecx
push edx
call fcn.100b7b6b
add esp, 8
mov dword [ebp - 4], 5
mov eax, dword [ebp - 0x21c]
test al, 8
je 0x10036d93
mov ecx, dword [ebp - 0x24c]
and eax, 0xfffffff7
mov dword [ebp - 0x21c], eax
cmp ecx, 0xf
jbe 0x10036d78
mov edx, dword [ebp - 0x260]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10036d68
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10036dda
push ecx
push edx
call fcn.100b7b6b
mov eax, dword [ebp - 0x21c]
add esp, 8
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0xf
mov byte [ebp - 0x260], 0
mov dword [ebp - 4], 0xffffffff
test al, 4
je 0x100372f8
mov ecx, dword [ebp - 0x264]
cmp ecx, 0xf
jbe 0x100372f8
mov edx, dword [ebp - 0x278]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100372ee
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100372ee
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov ecx, dword [ebp - 0x1cc]
test ecx, ecx
je 0x100370e3
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
test al, al
je 0x100370e3
cmp dword [ebp - 0x1cc], edi
jne 0x100370e3
mov eax, dword [esi + 4]
mov edi, dword [ebp - 0x220]
mov eax, dword [eax + 0x428]
mov dword [ebp - 0x224], eax
cmp eax, 8
jne 0x10036e2e
inc dword [edi + 0x5c0]
jmp 0x10036e78
cmp eax, 6
jne 0x10036e3b
inc dword [edi + 0x590]
jmp 0x10036e78
cmp eax, 2
je 0x10036e72
cmp eax, 0xb
jne 0x10036e4d
inc dword [edi + 0x5f0]
jmp 0x10036e78
cmp eax, 3
jne 0x10036e5a
inc dword [edi + 0x4c4]
jmp 0x10036e78
cmp eax, 4
jne 0x10036e67
inc dword [edi + 0x614]
jmp 0x10036e78
cmp eax, 0xa
jne 0x10036e78
inc dword [edi + 0x620]
inc dword [edi + 0x4bc]
mov eax, dword [esi + 4]
test byte [eax + 0x440], 1
je 0x10036e8b
mov byte [edi + 0x5d4], 1
mov esi, dword [esi + 4]
movss xmm0, dword [esi + 0x438]
subss xmm0, dword [esi + 0x70]
movss dword [ebp - 0x18], xmm0
fld dword [ebp - 0x18]
fld dword [0x100d148c]
call sub.api_ms_win_crt_math_l1_1_0.dll__CIfmod
movss xmm0, dword [esi + 0x438]
comiss xmm0, dword [esi + 0x70]
movss xmm1, dword [0x100d148c]
fstp dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x18]
jbe 0x10036edb
comiss xmm0, dword [0x100d1460]
jb 0x10036eec
subss xmm0, xmm1
jmp 0x10036eec
movss xmm2, dword [0x100d14fc]
comiss xmm2, xmm0
jb 0x10036eec
addss xmm0, xmm1
call fcn.10021fa0
movss xmm1, dword [0x100d13d4]
comiss xmm1, xmm0
jb 0x10036f05
mov byte [edi + 0x5dc], 1
mov esi, dword [ebp - 0x21c]
mov eax, dword [esi + 4]
movss xmm0, dword [eax + 0x444]
subss xmm0, dword [eax + 0x70]
movss dword [ebp - 0x18], xmm0
fld dword [ebp - 0x18]
fld dword [0x100d148c]
call sub.api_ms_win_crt_math_l1_1_0.dll__CIfmod
mov eax, dword [esi + 4]
fstp dword [ebp - 0x18]
movss xmm0, dword [eax + 0x444]
comiss xmm0, dword [eax + 0x70]
movss xmm0, dword [ebp - 0x18]
jbe 0x10036f5a
comiss xmm0, dword [0x100d1460]
jb 0x10036f6f
subss xmm0, dword [0x100d148c]
jmp 0x10036f6f
movss xmm1, dword [0x100d14fc]
comiss xmm1, xmm0
jb 0x10036f6f
addss xmm0, dword [0x100d148c]
call fcn.10021fa0
movss xmm1, dword [0x100d13d4]
comiss xmm1, xmm0
jb 0x10036f91
test byte [eax + 0x400], 1
jne 0x10036f91
mov byte [edi + 0x61d], 1
movss xmm0, dword [edi + 0x630]
xorps xmm1, xmm1
comiss xmm0, xmm1
jbe 0x10037025
mov esi, dword [esi + 4]
movss xmm0, dword [edi + 0x62c]
subss xmm0, dword [esi + 0x70]
movss dword [ebp - 0x18], xmm0
fld dword [ebp - 0x18]
fld dword [0x100d148c]
call sub.api_ms_win_crt_math_l1_1_0.dll__CIfmod
movss xmm0, dword [edi + 0x62c]
comiss xmm0, dword [esi + 0x70]
fstp dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x18]
jbe 0x10036ff1
comiss xmm0, dword [0x100d1460]
jb 0x10037006
subss xmm0, dword [0x100d148c]
jmp 0x10037006
movss xmm1, dword [0x100d14fc]
comiss xmm1, xmm0
jb 0x10037006
addss xmm0, dword [0x100d148c]
call fcn.10021fa0
movss xmm1, dword [0x100d13d4]
comiss xmm1, xmm0
mov esi, dword [ebp - 0x21c]
jb 0x10037025
mov byte [edi + 0x5e9], 1
mov eax, dword [ebp - 0x224]
cmp eax, 2
je 0x100370ae
cmp eax, 1
je 0x100370ae
mov esi, dword [esi + 4]
movss xmm0, dword [esi + 0x84]
subss xmm0, dword [esi + 0x70]
movss dword [ebp - 0x18], xmm0
fld dword [ebp - 0x18]
fld dword [0x100d148c]
call sub.api_ms_win_crt_math_l1_1_0.dll__CIfmod
movss xmm0, dword [esi + 0x84]
comiss xmm0, dword [esi + 0x70]
fstp dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x18]
jbe 0x10037081
comiss xmm0, dword [0x100d1460]
jb 0x10037096
subss xmm0, dword [0x100d148c]
jmp 0x10037096
movss xmm1, dword [0x100d14fc]
comiss xmm1, xmm0
jb 0x10037096
addss xmm0, dword [0x100d148c]
call fcn.10021fa0
movss xmm1, dword [0x100d13cc]
comiss xmm1, xmm0
jb 0x100370ae
inc dword [edi + 0x4bc]
mov ecx, dword [ebp - 0x21c]
inc dword [edi + 0x498]
mov ecx, dword [ecx]
add ecx, 8
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
call eax
mov ecx, dword [0x1019354c]
lea esi, [ebp - 0x1c0]
push esi
push eax
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
call eax
mov edi, dword [ebp - 0x1c]
jmp 0x100372f8
mov esi, dword [0x100ca508]
push 6
push dword [0x100fd6a0]
push dword [0x100fd69c]
call fcn.100b7460
cmp eax, dword [0x100fd6a0]
je 0x10037128
mov edx, str.missed_shot_due_to_spread_n
lea ecx, [ebp - 0x278]
call fcn.10032d70
mov dword [ebp - 0x220], eax
mov dword [ebp - 4], 0xa
mov ecx, 0x10
jmp 0x1003714a
mov edx, str.Missed_shot_due_to_spread_n
lea ecx, [ebp - 0x260]
call fcn.10032d70
mov dword [ebp - 0x220], eax
mov dword [ebp - 4], 0xb
mov ecx, 0x20
push 9
mov dword [ebp - 0x224], ecx
xorps xmm0, xmm0
mov dword [ebp - 0x21c], ecx
lea ecx, [ebp - 0x240]
push str._aimbot_
movups xmmword [ebp - 0x240], xmm0
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x22c], 0
call fcn.10028190
mov dword [ebp - 0x1c], 0x41000000
mov dword [ebp - 0x18], esi
mov edx, dword [ebp - 0x220]
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
mov dword [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x240]
push eax
lea ecx, [ebp - 0x248]
call fcn.10038120
add esp, 0xc
push eax
mov byte [ebp - 4], 0xd
call fcn.10037730
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x244]
mov dword [ebp - 0x1c], ecx
test ecx, ecx
je 0x100371f5
or esi, 0xffffffff
mov eax, esi
lock xadd dword [ecx + 4], eax
jne 0x100371f5
mov eax, dword [ecx]
call dword [eax]
mov ecx, dword [ebp - 0x1c]
lock xadd dword [ecx + 8], esi
dec esi
jne 0x100371f5
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [0x100ca508]
lea eax, [ebp - 0x240]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.10027c00
sub esp, 0x18
mov byte [ebp - 4], 0xe
mov ecx, esp
push dword [ebp - 0x220]
call fcn.10027c00
push esi
mov byte [ebp - 4], 0xc
call fcn.10096da0
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x22c]
cmp ecx, 0xf
jbe 0x1003726b
mov edx, dword [ebp - 0x240]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10037261
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10036dda
push ecx
push edx
call fcn.100b7b6b
add esp, 8
mov dword [ebp - 4], 0xa
mov eax, dword [ebp - 0x21c]
test al, 0x20
je 0x100372e0
mov ecx, dword [ebp - 0x24c]
and eax, 0xffffffdf
mov dword [ebp - 0x21c], eax
cmp ecx, 0xf
jbe 0x100372c5
mov edx, dword [ebp - 0x260]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100372b5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10036dda
push ecx
push edx
call fcn.100b7b6b
mov eax, dword [ebp - 0x21c]
add esp, 8
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0xf
mov byte [ebp - 0x260], 0
mov dword [ebp - 4], 0xffffffff
test al, 0x10
jmp 0x10036d9c
push ecx
push edx
call fcn.100b7b6b
add esp, 8
mov ecx, dword [0x1019384c]
mov eax, dword [ebp - 0x68]
add ecx, 0xffffffa7
xor ecx, 0x18cdb7f9
mov dword [ecx + edi], eax
mov eax, dword [ebp - 0x64]
mov dword [ecx + edi + 0xc], eax
lea ecx, [ebp - 0x30]
mov eax, dword [0x10193774]
movss xmm0, dword [ebp - 0x60]
add eax, 0xffffffdd
xor eax, 0x18cdb7c3
push ecx
mov ecx, edi
movss dword [eax + edi], xmm0
movss xmm0, dword [ebp - 0x5c]
movss dword [eax + edi + 4], xmm0
movss xmm0, dword [ebp - 0x58]
movss dword [eax + edi + 8], xmm0
mov eax, dword [0x10193780]
movss xmm0, dword [ebp - 0x48]
add eax, 0xffffffda
xor eax, 0x18cdb7c6
movss dword [eax + edi], xmm0
movss xmm0, dword [ebp - 0x44]
movss dword [eax + edi + 4], xmm0
movss xmm0, dword [ebp - 0x40]
movss dword [eax + edi + 8], xmm0
mov eax, dword [0x10193784]
movss xmm0, dword [ebp - 0x3c]
add eax, 0xffffffd9
xor eax, 0x18cdb7c7
movss dword [eax + edi], xmm0
movss xmm0, dword [ebp - 0x38]
movss dword [eax + edi + 4], xmm0
movss xmm0, dword [ebp - 0x34]
movss dword [eax + edi + 8], xmm0
mov eax, dword [0x10193688]
call eax
mov eax, dword [0x1019368c]
lea ecx, [ebp - 0x60]
push ecx
mov ecx, edi
call eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100b76f0
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4