Function at 0x100b6940
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1019ce4d
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x2e0
mov eax, dword [0x102480b4]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x40], edi
mov ecx, 0x1028ab98
call fcn.10193940
lea eax, [ebp - 0x15]
mov dword [ebp - 0x128], 0
push 8
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x38], eax
call fcn.10191600
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x3c], eax
add esp, 4
mov dword [eax], ecx
mov dword [eax + 4], 0
mov dword [ebp - 0x128], eax
mov dword [ebp - 4], 0
push 4
push str.head
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0xf
mov byte [ebp - 0x124], 0
call fcn.100425a0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 4], 1
lea eax, [ebp - 0x16]
push 8
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x108], 0
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0x38], eax
call fcn.10191600
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x3c], eax
add esp, 4
mov dword [eax], ecx
mov dword [eax + 4], 0
mov dword [ebp - 0x10c], eax
mov byte [ebp - 4], 2
push 5
push str.chest
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], 0
call fcn.100425a0
mov dword [ebp - 0x3c], 0
mov byte [ebp - 4], 3
lea eax, [ebp - 0x15]
push 8
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0xec], 0
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0x38], eax
call fcn.10191600
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0x3c], eax
add esp, 4
mov dword [eax], ecx
mov dword [eax + 4], 0
mov dword [ebp - 0xf0], eax
mov byte [ebp - 4], 4
push 4
push str.body
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xd8], 0xf
mov byte [ebp - 0xec], 0
call fcn.100425a0
mov dword [ebp - 0x3c], 0
mov byte [ebp - 4], 5
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0
lea eax, [ebp - 0x16]
push 8
mov dword [ebp - 0x38], eax
call fcn.10191600
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x3c], eax
add esp, 4
mov dword [eax], ecx
mov dword [eax + 4], 0
mov dword [ebp - 0xd4], eax
mov byte [ebp - 4], 6
push 4
push str.arms
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0xf
mov byte [ebp - 0xd0], 0
call fcn.100425a0
mov dword [ebp - 0x3c], 0
mov byte [ebp - 4], 7
lea eax, [ebp - 0x15]
push 8
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x38], eax
call fcn.10191600
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0x3c], eax
add esp, 4
mov dword [eax], ecx
mov dword [eax + 4], 0
mov dword [ebp - 0xb8], eax
mov byte [ebp - 4], 8
push 4
push str.legs
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xa0], 0xf
mov byte [ebp - 0xb4], 0
call fcn.100425a0
mov dword [ebp - 0x3c], 0
lea eax, [ebp - 0x9c]
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x128]
push eax
push ecx
push ecx
lea ecx, [ebp - 0x98]
call fcn.100f2270
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x16]
push 8
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x38], eax
call fcn.10191600
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0x3c], eax
add esp, 4
mov dword [eax], ecx
mov dword [eax + 4], 0
mov dword [ebp - 0x6c], eax
mov byte [ebp - 4], 0xb
push 0xc
push str.scout_hitbox
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
call fcn.100425a0
mov dword [ebp - 0x3c], 0
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x88], 0
lea eax, [ebp - 0x15]
mov dword [ebp - 0x84], 0
push 8
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x38], eax
call fcn.10191600
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x3c], eax
add esp, 4
mov dword [eax], ecx
mov dword [eax + 4], 0
mov dword [ebp - 0x88], eax
mov byte [ebp - 4], 0xd
push 6
push str.hitbox
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x70], 0xf
mov byte [ebp - 0x84], 0
call fcn.100425a0
mov dword [ebp - 0x3c], 0
xorps xmm0, xmm0
mov byte [ebp - 4], 0xf
push 8
movups xmmword [ebp - 0x50], xmm0
call fcn.10191600
lea ecx, [ebp - 0x50]
add esp, 4
mov dword [eax + 4], 0
mov dword [ebp - 0x50], eax
mov dword [eax], ecx
lea ecx, [edi + 0x13b8]
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x6c]
cmp ecx, eax
je 0x100b6d7f
cmp dword [ebp - 0x54], 0x10
lea eax, [ebp - 0x68]
push dword [ebp - 0x58]
cmovae eax, dword [ebp - 0x68]
push eax
call fcn.100425a0
lea ecx, [edi + 0x13f8]
mov byte [edi + 0x13f1], 1
lea eax, [ebp - 0x88]
cmp ecx, eax
je 0x100b6db0
cmp dword [ebp - 0x70], 0x10
lea eax, [ebp - 0x84]
push dword [ebp - 0x74]
cmovae eax, dword [ebp - 0x84]
push eax
call fcn.100425a0
mov esi, dword [ebp - 0x94]
xor eax, eax
cmp byte [edi + 0x13f1], al
mov ecx, 0xf
cmovne eax, ecx
mov dword [edi + 0x1438], eax
add eax, 0x14
mov dword [edi + 0x138c], eax
mov dword [edi + 0x1390], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x20], eax
cmp esi, eax
je 0x100b6e36
nop dword [eax + eax]
mov ecx, dword [edi + 0x141c]
lea eax, [edi + 0x1414]
push esi
cmp ecx, dword [edi + 0x1420]
je 0x100b6e26
call fcn.100429a0
mov eax, dword [edi + 0x141c]
lea ecx, [edi + 0x1414]
push eax
push eax
call fcn.1004f600
add dword [edi + 0x141c], 0x1c
jmp 0x100b6e2e
push ecx
mov ecx, eax
call fcn.1004d880
add esi, 0x1c
cmp esi, dword [ebp - 0x20]
jne 0x100b6df0
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x34], ecx
cmp eax, ecx
je 0x100b6f5e
lea esi, [edi + 0x1428]
mov eax, dword [eax]
sub esp, 0xc
mov ecx, esi
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x1c], eax
push esp
call fcn.100416a0
sub esp, 0xc
mov ecx, esi
push esp
call fcn.10041720
lea edx, [ebp - 0x1c]
lea ecx, [ebp - 0x140]
call fcn.10048230
add esp, 0x18
lea ecx, [edi + 0x1428]
mov esi, eax
lea eax, [ebp - 0x134]
push eax
call fcn.100416a0
push eax
mov ecx, esi
call fcn.1003e530
mov esi, dword [sym.imp.MSVCP140D.dll_public:_void___thiscall_std::_Lockit::constructor_int_]
lea ecx, [ebp - 0x20]
push 3
mov byte [ebp - 0x15], al
call esi
lea ecx, [ebp - 0x134]
call fcn.1002f5b0
lea ecx, [ebp - 0x20]
call dword [sym.imp.MSVCP140D.dll_public:_void___thiscall_std::_Lockit::destructor_void_]
push 3
lea ecx, [ebp - 0x28]
call esi
lea ecx, [ebp - 0x140]
call fcn.1002f5b0
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVCP140D.dll_public:_void___thiscall_std::_Lockit::destructor_void_]
mov ecx, dword [edi + 0x141c]
lea esi, [edi + 0x1428]
sub ecx, dword [edi + 0x1418]
mov eax, 0x92492493
imul ecx
add edx, ecx
mov ecx, dword [ebp - 0x2c]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ecx, eax
jae 0x100b6f3a
mov eax, dword [edi + 0x1430]
cmp eax, dword [edi + 0x1434]
je 0x100b6f2e
mov dword [eax], ecx
mov ecx, esi
mov eax, dword [edi + 0x1430]
push eax
push eax
call fcn.10079c70
add dword [edi + 0x1430], 4
jmp 0x100b6f3a
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.1007b330
cmp byte [ebp - 0x15], 0
je 0x100b6f4c
mov eax, dword [edi + 0x13ec]
test eax, eax
je 0x100b6f4c
call eax
mov eax, dword [ebp - 0x24]
add eax, 4
mov dword [ebp - 0x24], eax
cmp eax, dword [ebp - 0x34]
jne 0x100b6e50
lea ecx, [ebp - 0x50]
call fcn.1002f6d0
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
je 0x100b6f8f
mov edx, dword [ebp - 0x44]
sub edx, ecx
and edx, 0xfffffffc
call fcn.10049fa0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
mov eax, dword [ebp - 0x50]
push 8
push eax
mov dword [ebp - 0x50], 0
call fcn.10191ec0
add esp, 8
lea ecx, [ebp - 0x88]
call fcn.1002f6d0
mov eax, dword [ebp - 0x70]
mov esi, dword [sym.imp.ucrtbased.dll__invalid_parameter]
cmp eax, 0x10
jb 0x100b7020
mov ecx, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x34], eax
test ecx, ecx
jne 0x100b7019
test eax, eax
je 0x100b7019
push str.null_pointer_cannot_point_to_a_block_of_non_zero_size
push 0x101ad5ac
push ecx
push 0x33c
push 0x101ad5b0
push 2
call dword [sym.imp.ucrtbased.dll__CrtDbgReport]
add esp, 0x18
cmp eax, 1
jne 0x100b6ff8
int3
push 0
push 0x33c
push str.C:Program_FilesMicrosoft_Visual_Studio2022CommunityVCToolsMSVC14.32.31326includexmemory
push 0x101ad6dc
push str._null_pointer_cannot_point_to_a_block_of_non_zero_size_
call esi
mov eax, dword [ebp - 0x34]
add esp, 0x14
mov ecx, dword [ebp - 0x2c]
mov edx, eax
call fcn.10049fa0
mov eax, dword [ebp - 0x88]
push 8
push eax
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x70], 0xf
mov byte [ebp - 0x84], 0
mov dword [ebp - 0x88], 0
call fcn.10191ec0
add esp, 8
lea ecx, [ebp - 0x6c]
call fcn.1002f6d0
mov eax, dword [ebp - 0x54]
cmp eax, 0x10
jb 0x100b70c0
mov ecx, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x34], eax
test ecx, ecx
jne 0x100b70b9
test eax, eax
je 0x100b70b9
push str.null_pointer_cannot_point_to_a_block_of_non_zero_size
push 0x101ad5ac
push ecx
push 0x33c
push 0x101ad5b0
push 2
call dword [sym.imp.ucrtbased.dll__CrtDbgReport]
add esp, 0x18
cmp eax, 1
jne 0x100b7098
int3
push 0
push 0x33c
push str.C:Program_FilesMicrosoft_Visual_Studio2022CommunityVCToolsMSVC14.32.31326includexmemory
push 0x101ad6dc
push str._null_pointer_cannot_point_to_a_block_of_non_zero_size_
call esi
mov eax, dword [ebp - 0x34]
add esp, 0x14
mov ecx, dword [ebp - 0x2c]
mov edx, eax
call fcn.10049fa0
mov eax, dword [ebp - 0x6c]
push 8
push eax
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
mov dword [ebp - 0x6c], 0
call fcn.10191ec0
add esp, 8
lea ecx, [ebp - 0x98]
call fcn.10044c30
mov eax, dword [ebp - 0x98]
push 8
push eax
mov dword [ebp - 0x98], 0
call fcn.10191ec0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x128]
push fcn.10042720
push 5
push 0x1c
push eax
call fcn.10191670
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x10057610
lea esi, [edi + 0x137c]
lea ecx, [esi + 0x60]
push eax
call fcn.100ef420
mov dword [edi + 0x1394], 1
lea ecx, [ebp - 0x34]
mov dword [edi + 0x1380], 0x14a
mov dword [edi + 0x1388], 0xfa
mov eax, dword [edi + 0x34]
push ecx
lea ecx, [edi + 0x1c]
mov dword [ebp - 0x34], esi
mov dword [edi + 0x1398], eax
call fcn.100ef1f0
lea eax, [ebp - 0x16]
mov dword [ebp - 0x128], 0
push 8
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x38], eax
call fcn.10191600
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x3c], eax
add esp, 4
mov dword [eax], ecx
mov dword [eax + 4], 0
mov dword [ebp - 0x128], eax
mov dword [ebp - 4], 0x11
push 4
push str.head
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0xf
mov byte [ebp - 0x124], 0
call fcn.100425a0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 4], 0x12
lea eax, [ebp - 0x15]
push 8
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x108], 0
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0x38], eax
call fcn.10191600
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x3c], eax
add esp, 4
mov dword [eax], ecx
mov dword [eax + 4], 0
mov dword [ebp - 0x10c], eax
mov byte [ebp - 4], 0x13
push 5
push str.chest
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], 0
call fcn.100425a0
mov dword [ebp - 0x3c], 0
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x16]
push 8
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0xec], 0
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0x38], eax
call fcn.10191600
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0x3c], eax
add esp, 4
mov dword [eax], ecx
mov dword [eax + 4], 0
mov dword [ebp - 0xf0], eax
mov byte [ebp - 4], 0x15
push 4
push str.body
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xd8], 0xf
mov byte [ebp - 0xec], 0
call fcn.100425a0
mov dword [ebp - 0x3c], 0
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x15]
push 8
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0x38], eax
call fcn.10191600
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x3c], eax
add esp, 4
mov dword [eax], ecx
mov dword [eax + 4], 0
mov dword [ebp - 0xd4], eax
mov byte [ebp - 4], 0x17
push 4
push str.arms
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0xf
mov byte [ebp - 0xd0], 0
call fcn.100425a0
mov dword [ebp - 0x3c], 0
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x16]
push 8
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x38], eax
call fcn.10191600
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0x3c], eax
add esp, 4
mov dword [eax], ecx
mov dword [eax + 4], 0
mov dword [ebp - 0xb8], eax
mov byte [ebp - 4], 0x19
push 4
push str.legs
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xa0], 0xf
mov byte [ebp - 0xb4], 0
call fcn.100425a0
mov dword [ebp - 0x3c], 0
lea eax, [ebp - 0x9c]
mov dword [ebp - 4], 0x1a
lea ecx, [ebp - 0x128]
push eax
push ecx
push ecx
lea ecx, [ebp - 0x98]
call fcn.100f2270
mov byte [ebp - 4], 0x1b
lea eax, [ebp - 0x16]
push 8
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x38], eax
call fcn.10191600
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x3c], eax
add esp, 4
mov dword [eax], ecx
mov dword [eax + 4], 0
mov dword [ebp - 0x88], eax
mov byte [ebp - 4], 0x1c
push 0x14
push str.scout_hitbox_history
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x70], 0xf
mov byte [ebp - 0x84], 0
call fcn.100425a0
mov dword [ebp - 0x3c], 0
mov byte [ebp - 4], 0x1d
lea eax, [ebp - 0x15]
push 8
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x38], eax
call fcn.10191600
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0x3c], eax
add esp, 4
mov dword [eax], ecx
mov dword [eax + 4], 0
mov dword [ebp - 0x6c], eax
mov byte [ebp - 4], 0x1e
push 0xe
push str.hitbox_history
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
call fcn.100425a0
mov dword [ebp - 0x3c], 0
xorps xmm0, xmm0
mov byte [ebp - 4], 0x20
push 8
movups xmmword [ebp - 0x50], xmm0
call fcn.10191600
lea ecx, [ebp - 0x50]
add esp, 4
mov dword [eax + 4], 0
mov dword [ebp - 0x50], eax
mov dword [eax], ecx
lea ecx, [edi + 0x1478]
mov byte [ebp - 4], 0x21
lea eax, [ebp - 0x88]
cmp ecx, eax
je 0x100b7570
cmp dword [ebp - 0x70], 0x10
lea eax, [ebp - 0x84]
push dword [ebp - 0x74]
cmovae eax, dword [ebp - 0x84]
push eax
call fcn.100425a0
lea ecx, [edi + 0x14b8]
mov byte [edi + 0x14b1], 1
lea eax, [ebp - 0x6c]
cmp ecx, eax
je 0x100b7598
cmp dword [ebp - 0x54], 0x10
lea eax, [ebp - 0x68]
push dword [ebp - 0x58]
cmovae eax, dword [ebp - 0x68]
push eax
call fcn.100425a0
mov esi, dword [ebp - 0x94]
xor eax, eax
cmp byte [edi + 0x14b1], al
mov ecx, 0xf
cmovne eax, ecx
mov dword [edi + 0x14f8], eax
add eax, 0x14
mov dword [edi + 0x144c], eax
mov dword [edi + 0x1450], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x34], eax
cmp esi, eax
je 0x100b7616
mov ecx, dword [edi + 0x14dc]
lea eax, [edi + 0x14d4]
push esi
cmp ecx, dword [edi + 0x14e0]
je 0x100b7606
call fcn.100429a0
mov eax, dword [edi + 0x14dc]
lea ecx, [edi + 0x14d4]
push eax
push eax
call fcn.1004f600
add dword [edi + 0x14dc], 0x1c
jmp 0x100b760e
push ecx
mov ecx, eax
call fcn.1004d880
add esi, 0x1c
cmp esi, dword [ebp - 0x34]
jne 0x100b75d0
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x28], ecx
cmp eax, ecx
je 0x100b773e
lea esi, [edi + 0x14e8]
mov eax, dword [eax]
sub esp, 0xc
mov ecx, esi
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], eax
push esp
call fcn.100416a0
sub esp, 0xc
mov ecx, esi
push esp
call fcn.10041720
lea edx, [ebp - 0x24]
lea ecx, [ebp - 0x134]
call fcn.10048230
add esp, 0x18
lea ecx, [edi + 0x14e8]
mov esi, eax
lea eax, [ebp - 0x140]
push eax
call fcn.100416a0
push eax
mov ecx, esi
call fcn.1003e530
mov esi, dword [sym.imp.MSVCP140D.dll_public:_void___thiscall_std::_Lockit::constructor_int_]
lea ecx, [ebp - 0x34]
push 3
mov byte [ebp - 0x15], al
call esi
lea ecx, [ebp - 0x140]
call fcn.1002f5b0
lea ecx, [ebp - 0x34]
call dword [sym.imp.MSVCP140D.dll_public:_void___thiscall_std::_Lockit::destructor_void_]
push 3
lea ecx, [ebp - 0x2c]
call esi
lea ecx, [ebp - 0x134]
call fcn.1002f5b0
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVCP140D.dll_public:_void___thiscall_std::_Lockit::destructor_void_]
mov ecx, dword [edi + 0x14dc]
lea esi, [edi + 0x14e8]
sub ecx, dword [edi + 0x14d8]
mov eax, 0x92492493
imul ecx
add edx, ecx
mov ecx, dword [ebp - 0x20]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ecx, eax
jae 0x100b771a
mov eax, dword [edi + 0x14f0]
cmp eax, dword [edi + 0x14f4]
je 0x100b770e
mov dword [eax], ecx
mov ecx, esi
mov eax, dword [edi + 0x14f0]
push eax
push eax
call fcn.10079c70
add dword [edi + 0x14f0], 4
jmp 0x100b771a
lea ecx, [ebp - 0x24]
push ecx
push eax
mov ecx, esi
call fcn.1007b330
cmp byte [ebp - 0x15], 0
je 0x100b772c
mov eax, dword [edi + 0x14ac]
test eax, eax
je 0x100b772c
call eax
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x1c], eax
cmp eax, dword [ebp - 0x28]
jne 0x100b7630
lea ecx, [ebp - 0x50]
call fcn.1002f6d0
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
je 0x100b776f
mov edx, dword [ebp - 0x44]
sub edx, ecx
and edx, 0xfffffffc
call fcn.10049fa0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
mov eax, dword [ebp - 0x50]
push 8
push eax
mov dword [ebp - 0x50], 0
call fcn.10191ec0
add esp, 8
lea ecx, [ebp - 0x6c]
call fcn.1002f6d0
mov eax, dword [ebp - 0x54]
cmp eax, 0x10
jb 0x100b780f
mov ecx, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x34], eax
test ecx, ecx
jne 0x100b7800
test eax, eax
je 0x100b7800
push str.null_pointer_cannot_point_to_a_block_of_non_zero_size
push 0x101ad5ac
push ecx
push 0x33c
push 0x101ad5b0
push 2
call dword [sym.imp.ucrtbased.dll__CrtDbgReport]
add esp, 0x18
cmp eax, 1
jne 0x100b77d0
int3
mov esi, dword [sym.imp.ucrtbased.dll__invalid_parameter]
push 0
push 0x33c
push str.C:Program_FilesMicrosoft_Visual_Studio2022CommunityVCToolsMSVC14.32.31326includexmemory
push 0x101ad6dc
push str._null_pointer_cannot_point_to_a_block_of_non_zero_size_
call esi
mov eax, dword [ebp - 0x34]
add esp, 0x14
mov ecx, dword [ebp - 0x2c]
mov edx, eax
call fcn.10049fa0
jmp 0x100b7815
mov esi, dword [sym.imp.ucrtbased.dll__invalid_parameter]
mov edx, eax
call fcn.10049fa0
jmp 0x100b7815
mov esi, dword [sym.imp.ucrtbased.dll__invalid_parameter]
mov eax, dword [ebp - 0x6c]
push 8
push eax
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
mov dword [ebp - 0x6c], 0
call fcn.10191ec0
add esp, 8
lea ecx, [ebp - 0x88]
call fcn.1002f6d0
mov eax, dword [ebp - 0x70]
cmp eax, 0x10
jb 0x100b78b2
mov ecx, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x34], eax
test ecx, ecx
jne 0x100b78ab
test eax, eax
je 0x100b78ab
push str.null_pointer_cannot_point_to_a_block_of_non_zero_size
push 0x101ad5ac
push ecx
push 0x33c
push 0x101ad5b0
push 2
call dword [sym.imp.ucrtbased.dll__CrtDbgReport]
add esp, 0x18
cmp eax, 1
jne 0x100b788a
int3
push 0
push 0x33c
push str.C:Program_FilesMicrosoft_Visual_Studio2022CommunityVCToolsMSVC14.32.31326includexmemory
push 0x101ad6dc
push str._null_pointer_cannot_point_to_a_block_of_non_zero_size_
call esi
mov eax, dword [ebp - 0x34]
add esp, 0x14
mov ecx, dword [ebp - 0x2c]
mov edx, eax
call fcn.10049fa0
mov eax, dword [ebp - 0x88]
push 8
push eax
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x70], 0xf
mov byte [ebp - 0x84], 0
mov dword [ebp - 0x88], 0
call fcn.10191ec0
add esp, 8
lea ecx, [ebp - 0x98]
call fcn.10044c30
mov eax, dword [ebp - 0x98]
push 8
push eax
mov dword [ebp - 0x98], 0
call fcn.10191ec0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x128]
push fcn.10042720
push 5
push 0x1c
push eax
call fcn.10191670
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x10057610
lea esi, [edi + 0x143c]
lea ecx, [esi + 0x60]
push eax
call fcn.100ef420
mov dword [edi + 0x1454], 1
lea ecx, [edi + 0x1c]
mov dword [edi + 0x1440], 0x14a
mov dword [edi + 0x1448], 0xfa
mov eax, dword [edi + 0x34]
mov dword [edi + 0x1458], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x34], esi
call fcn.100ef1f0
lea eax, [ebp - 0x16]
mov dword [ebp - 0x110], 0
push 8
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0x38], eax
call fcn.10191600
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x3c], eax
add esp, 4
mov dword [eax], ecx
mov dword [eax + 4], 0
mov dword [ebp - 0x110], eax
mov dword [ebp - 4], 0x22
push 4
push str.head
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0xf8], 0xf
mov byte [ebp - 0x10c], 0
call fcn.100425a0
mov dword [ebp - 4], 0x23
lea eax, [ebp - 0x15]
mov ecx, 8
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0x38], eax
call fcn.1002f040
mov esi, eax
lea eax, [ebp - 0xf4]
push eax
mov ecx, esi
mov dword [ebp - 0x3c], esi
call fcn.1002f140
mov dword [ebp - 0xf4], esi
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0xf4]
call fcn.100454d0
push str.chest
lea ecx, [ebp - 0xf4]
call fcn.100455b0
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0
call fcn.10042ef0
push str.body
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x25
call fcn.10042840
push str.legs
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x26
call fcn.10042840
lea eax, [ebp - 0xa0]
mov dword [ebp - 4], 0x27
push eax
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x30]
call fcn.100f2200
push dword [eax + 4]
push dword [eax]
push ecx
lea ecx, [ebp - 0x50]
call fcn.100f2270
push str.scout_multipoint
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x28
call fcn.10042840
push str.multi_point
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x29
call fcn.10042840
lea ecx, [ebp - 0x98]
call fcn.100418f0
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0x2b
push eax
lea ecx, [edi + 0x1538]
call fcn.10073120
lea eax, [ebp - 0x6c]
mov byte [edi + 0x1571], 1
push eax
lea ecx, [edi + 0x1578]
call fcn.10073120
mov esi, dword [ebp - 0x4c]
xor eax, eax
cmp byte [edi + 0x1571], al
mov ecx, 0xf
cmovne eax, ecx
mov ecx, dword [ebp - 0x48]
mov dword [edi + 0x15b8], eax
add eax, 0x14
mov dword [edi + 0x150c], eax
mov dword [edi + 0x1510], eax
lea eax, [edi + 0x1594]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x24], eax
cmp esi, ecx
je 0x100b7b76
mov edi, eax
push esi
mov ecx, edi
call fcn.10041290
add esi, 0x1c
cmp esi, dword [ebp - 0x34]
jne 0x100b7b63
mov edi, dword [ebp - 0x40]
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x90]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x34], ecx
cmp eax, ecx
je 0x100b7c3f
lea esi, [edi + 0x15a8]
mov dword [ebp - 0x1c], esi
nop dword [eax]
mov edi, dword [eax]
sub esp, 0xc
mov ecx, esi
mov dword [ebp - 0x28], edi
push esp
call fcn.100416a0
sub esp, 0xc
mov ecx, esi
push esp
call fcn.10041720
lea edx, [ebp - 0x28]
lea ecx, [ebp - 0x134]
call fcn.10048230
mov ecx, dword [ebp - 0x1c]
add esp, 0x18
mov esi, eax
lea eax, [ebp - 0x140]
push eax
call fcn.100416a0
push eax
mov ecx, esi
call fcn.1003e530
lea ecx, [ebp - 0x140]
mov byte [ebp - 0x15], al
call fcn.10034970
lea ecx, [ebp - 0x134]
call fcn.10034970
mov ecx, dword [ebp - 0x24]
call fcn.10041220
mov esi, dword [ebp - 0x1c]
cmp edi, eax
jae 0x100b7c18
lea eax, [ebp - 0x28]
mov ecx, esi
push eax
call fcn.10072eb0
cmp byte [ebp - 0x15], 0
mov edi, dword [ebp - 0x40]
je 0x100b7c2d
mov eax, dword [edi + 0x156c]
test eax, eax
je 0x100b7c2d
call eax
mov eax, dword [ebp - 0x20]
add eax, 4
mov dword [ebp - 0x20], eax
cmp eax, dword [ebp - 0x34]
jne 0x100b7ba0
lea ecx, [ebp - 0x98]
call fcn.100417a0
lea ecx, [ebp - 0x6c]
call fcn.10042720
lea ecx, [ebp - 0x88]
call fcn.10042720
lea ecx, [ebp - 0x50]
call fcn.10041330
push fcn.10042720
push 4
push 0x1c
lea eax, [ebp - 0x110]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.10191670
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x10057610
lea esi, [edi + 0x14fc]
lea ecx, [esi + 0x60]
push eax
call fcn.100ef420
mov dword [edi + 0x1514], 1
lea ecx, [edi + 0x1c]
mov dword [edi + 0x1500], 0x14a
mov dword [edi + 0x1508], 0xfa
mov eax, dword [edi + 0x34]
mov dword [edi + 0x1518], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x34], esi
call fcn.100ef1f0
push 0x1022c89c
lea ecx, [ebp - 0x1cc]
lea esi, [edi + 0x15bc]
call fcn.100f24f0
push str.scout_hitbox_scale
lea ecx, [ebp - 0x6c]
mov dword [ebp - 4], 0x2c
call fcn.10042840
push 0x101af3e7
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x2d
call fcn.10042840
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x2e
push eax
lea ecx, [edi + 0x15f8]
call fcn.10073120
lea eax, [ebp - 0x1cc]
mov byte [edi + 0x1631], 0
push eax
lea ecx, [edi + 0x166c]
mov dword [edi + 0x1688], 0
mov dword [edi + 0x15cc], 8
mov dword [edi + 0x15d0], 8
mov dword [edi + 0x163c], 0x3f800000
mov dword [edi + 0x1640], 0x42c80000
mov dword [edi + 0x1638], 0x428c0000
mov dword [edi + 0x164c], 0
mov dword [edi + 0x1644], 0x3f800000
call fcn.100f24b0
lea ecx, [ebp - 0x88]
call fcn.10042720
lea ecx, [ebp - 0x6c]
call fcn.10042720
lea ecx, [ebp - 0x1cc]
mov dword [ebp - 4], 0xffffffff
call fcn.100a6a90
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x10057610
lea ecx, [esi + 0x60]
push eax
call fcn.100ef420
mov dword [edi + 0x15d4], 1
mov dword [edi + 0x15c0], 0x14a
mov dword [edi + 0x15c8], 0xfa
mov eax, dword [edi + 0x34]
mov dword [ebp - 0x34], esi
mov dword [edi + 0x15d8], eax
lea ecx, [edi + 0x1c]
lea eax, [ebp - 0x34]
push eax
call fcn.100ef1f0
push 0x1022c89c
lea ecx, [ebp - 0x1e8]
lea esi, [edi + 0x168c]
call fcn.100f24f0
push str.scout_body_hitbox_scale
lea ecx, [ebp - 0x6c]
mov dword [ebp - 4], 0x2f
call fcn.10042840
push str.body_hitbox_scale
lea ecx, [ebp - 0x1cc]
mov byte [ebp - 4], 0x30
call fcn.10042840
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x31
push eax
lea ecx, [edi + 0x16c8]
call fcn.10073120
lea eax, [ebp - 0x1cc]
mov byte [edi + 0x1701], 1
push eax
lea ecx, [edi + 0x1720]
call fcn.10073120
xor eax, eax
mov dword [edi + 0x170c], 0x3f800000
cmp byte [edi + 0x1701], al
mov ecx, 0xf
mov dword [edi + 0x1710], 0x42c80000
cmovne eax, ecx
mov dword [edi + 0x1708], 0x42700000
mov dword [edi + 0x1758], eax
lea ecx, [edi + 0x173c]
add eax, 8
mov dword [edi + 0x171c], 0
mov dword [edi + 0x169c], eax
mov dword [edi + 0x16a0], eax
lea eax, [ebp - 0x1e8]
push eax
mov dword [edi + 0x1714], 0x3f800000
call fcn.100f24b0
lea ecx, [ebp - 0x1cc]
call fcn.10042720
lea ecx, [ebp - 0x6c]
call fcn.10042720
lea ecx, [ebp - 0x1e8]
mov dword [ebp - 4], 0xffffffff
call fcn.100a6a90
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x10057610
lea ecx, [esi + 0x60]
push eax
call fcn.100ef420
mov dword [edi + 0x16a4], 1
lea ecx, [edi + 0x1c]
mov dword [edi + 0x1690], 0x14a
mov dword [edi + 0x1698], 0xfa
mov eax, dword [edi + 0x34]
mov dword [edi + 0x16a8], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x34], esi
call fcn.100ef1f0
push 0x1022c89c
lea ecx, [ebp - 0x204]
lea esi, [edi + 0x175c]
call fcn.100f24f0
push str.scout_feet_hitbox_scale
lea ecx, [ebp - 0x1cc]
mov dword [ebp - 4], 0x32
call fcn.10042840
mov byte [ebp - 4], 0x33
push str.feet_hitbox_scale
lea ecx, [ebp - 0x1e8]
call fcn.10042840
lea eax, [ebp - 0x1cc]
mov byte [ebp - 4], 0x34
push eax
lea ecx, [edi + 0x1798]
call fcn.10073120
lea eax, [ebp - 0x1e8]
mov byte [edi + 0x17d1], 1
push eax
lea ecx, [edi + 0x17f0]
call fcn.10073120
xor eax, eax
mov dword [edi + 0x17dc], 0x3f800000
cmp byte [edi + 0x17d1], al
mov ecx, 0xf
mov dword [edi + 0x17e0], 0x42c80000
cmovne eax, ecx
mov dword [edi + 0x17d8], 0x42700000
mov dword [edi + 0x1828], eax
lea ecx, [edi + 0x180c]
add eax, 8
mov dword [edi + 0x17ec], 0
mov dword [edi + 0x176c], eax
mov dword [edi + 0x1770], eax
lea eax, [ebp - 0x204]
push eax
mov dword [edi + 0x17e4], 0x3f800000
call fcn.100f24b0
lea ecx, [ebp - 0x1e8]
call fcn.10042720
lea ecx, [ebp - 0x1cc]
call fcn.10042720
lea ecx, [ebp - 0x204]
mov dword [ebp - 4], 0xffffffff
call fcn.100a6a90
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x10057610
lea ecx, [esi + 0x60]
push eax
call fcn.100ef420
mov dword [edi + 0x1774], 1
lea ecx, [edi + 0x1c]
mov dword [edi + 0x1760], 0x14a
mov dword [edi + 0x1768], 0xfa
mov eax, dword [edi + 0x34]
mov dword [edi + 0x1778], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x34], esi
call fcn.100ef1f0
push 0x101ad6dc
lea ecx, [ebp - 0x194]
lea esi, [edi + 0x182c]
call fcn.100f24f0
push str.scout_minimal_damage
lea ecx, [ebp - 0x1e8]
mov dword [ebp - 4], 0x35
call fcn.10042840
push str.minimal_damage
lea ecx, [ebp - 0x204]
mov byte [ebp - 4], 0x36
call fcn.10042840
lea eax, [ebp - 0x1e8]
mov byte [ebp - 4], 0x37
push eax
lea ecx, [edi + 0x1868]
call fcn.10073120
lea eax, [ebp - 0x204]
mov byte [edi + 0x18a1], 1
push eax
lea ecx, [edi + 0x18c0]
call fcn.10073120
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0x18a1], al
cmovne eax, ecx
mov dword [edi + 0x18f8], eax
lea ecx, [edi + 0x18dc]
add eax, 8
mov dword [edi + 0x18ac], 0x3f800000
mov dword [edi + 0x183c], eax
mov dword [edi + 0x1840], eax
lea eax, [ebp - 0x194]
push eax
mov dword [edi + 0x18b0], 0x42c80000
mov dword [edi + 0x18a8], 0x42200000
mov dword [edi + 0x18bc], 0
mov dword [edi + 0x18b4], 0x3f800000
call fcn.100f24b0
lea ecx, [ebp - 0x204]
call fcn.10042720
lea ecx, [ebp - 0x1e8]
call fcn.10042720
lea ecx, [ebp - 0x194]
mov dword [ebp - 4], 0xffffffff
call fcn.100a6a90
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x10057610
lea ecx, [esi + 0x60]
push eax
call fcn.100ef420
mov dword [edi + 0x1844], 1
lea ecx, [edi + 0x1c]
mov dword [edi + 0x1830], 0x14a
mov dword [edi + 0x1838], 0xfa
mov eax, dword [edi + 0x34]
mov dword [edi + 0x1848], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x34], esi
call fcn.100ef1f0
push str.scout_minimal_damage_hp
lea ecx, [ebp - 0x1b0]
lea esi, [edi + 0x18fc]
call fcn.10042840
push str.scale_damage_on_hp
lea ecx, [ebp - 0x194]
mov dword [ebp - 4], 0x38
call fcn.10042840
lea eax, [ebp - 0x1b0]
mov byte [ebp - 4], 0x39
push eax
lea ecx, [edi + 0x1938]
call fcn.10073120
lea eax, [ebp - 0x194]
mov byte [edi + 0x1971], 1
push eax
lea ecx, [edi + 0x1978]
call fcn.10073120
lea ecx, [ebp - 0x194]
mov byte [edi + 0x1974], 0
call fcn.10042720
lea ecx, [ebp - 0x1b0]
mov dword [ebp - 4], 0xffffffff
call fcn.10042720
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x10057610
lea ecx, [esi + 0x60]
push eax
call fcn.100ef420
mov dword [edi + 0x1914], 1
lea ecx, [edi + 0x1c]
mov dword [edi + 0x1900], 0x14a
mov dword [edi + 0x1908], 0xfa
mov eax, dword [edi + 0x34]
mov dword [edi + 0x1918], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x34], esi
call fcn.100ef1f0
push 0x101ad6dc
lea ecx, [ebp - 0x178]
lea esi, [edi + 0x1994]
call fcn.100f24f0
push str.scout_dmg_override_amount
lea ecx, [ebp - 0x194]
mov dword [ebp - 4], 0x3a
call fcn.10042840
push str.dmg_override_amount
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 0x3b
call fcn.10042840
lea eax, [ebp - 0x194]
mov byte [ebp - 4], 0x3c
push eax
lea ecx, [edi + 0x19d0]
call fcn.10073120
lea eax, [ebp - 0x1b0]
mov byte [edi + 0x1a09], 1
push eax
lea ecx, [edi + 0x1a28]
call fcn.10073120
xor eax, eax
mov dword [edi + 0x1a14], 0x3f800000
cmp byte [edi + 0x1a09], al
mov ecx, 0xf
mov dword [edi + 0x1a18], 0x42c80000
cmovne eax, ecx
mov dword [edi + 0x1a10], 0x41200000
mov dword [edi + 0x1a60], eax
lea ecx, [edi + 0x1a44]
add eax, 8
mov dword [edi + 0x1a24], 0
mov dword [edi + 0x19a4], eax
mov dword [edi + 0x19a8], eax
lea eax, [ebp - 0x178]
push eax
mov dword [edi + 0x1a1c], 0x3f800000
call fcn.100f24b0
lea ecx, [ebp - 0x1b0]
call fcn.10042720
lea ecx, [ebp - 0x194]
call fcn.10042720
lea ecx, [ebp - 0x178]
mov dword [ebp - 4], 0xffffffff
call fcn.100a6a90
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x10057610
lea ecx, [esi + 0x60]
push eax
call fcn.100ef420
mov dword [edi + 0x19ac], 1
lea ecx, [edi + 0x1c]
mov dword [edi + 0x1998], 0x14a
mov dword [edi + 0x19a0], 0xfa
mov eax, dword [edi + 0x34]
mov dword [edi + 0x19b0], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x34], esi
call fcn.100ef1f0
push str.scout_penetrate
lea ecx, [ebp - 0x15c]
lea esi, [edi + 0x1a64]
call fcn.10042840
push str.penetrate_walls
lea ecx, [ebp - 0x178]
mov dword [ebp - 4], 0x3d
call fcn.10042840
lea eax, [ebp - 0x15c]
mov byte [ebp - 4], 0x3e
push eax
lea ecx, [edi + 0x1aa0]
call fcn.10073120
lea eax, [ebp - 0x178]
mov byte [edi + 0x1ad9], 1
push eax
lea ecx, [edi + 0x1ae0]
call fcn.10073120
mov byte [edi + 0x1adc], 0
lea ecx, [ebp - 0x178]
call fcn.10042720
lea ecx, [ebp - 0x15c]
mov dword [ebp - 4], 0xffffffff
call fcn.10042720
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x10057610
lea ecx, [esi + 0x60]
push eax
call fcn.100ef420
mov dword [edi + 0x1a7c], 1
lea ecx, [edi + 0x1c]
mov dword [edi + 0x1a68], 0x14a
mov dword [edi + 0x1a70], 0xfa
mov eax, dword [edi + 0x34]
mov dword [edi + 0x1a80], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x34], esi
call fcn.100ef1f0
push 0x1022c958
lea ecx, [ebp - 0x260]
call fcn.10042840
push str.always
lea ecx, [ebp - 0x244]
mov dword [ebp - 4], 0x3f
call fcn.10042840
push str.hitchance_fail
lea ecx, [ebp - 0x228]
mov byte [ebp - 4], 0x40
call fcn.10042840
lea eax, [ebp - 0x20c]
mov dword [ebp - 4], 0x41
push eax
lea eax, [ebp - 0x260]
push eax
lea ecx, [ebp - 0x3c]
call fcn.100f2200
push dword [eax + 4]
push dword [eax]
push ecx
lea ecx, [ebp - 0x98]
call fcn.100f2270
push str.scout_zoom
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x42
call fcn.10042840
push str.auto_scope
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x43
call fcn.10042840
lea eax, [ebp - 0x178]
mov byte [ebp - 4], 0x44
push eax
lea ecx, [edi + 0x1b38]
call fcn.10073120
lea eax, [ebp - 0x15c]
mov byte [edi + 0x1b71], 1
push eax
lea ecx, [edi + 0x1b78]
call fcn.10073120
mov esi, dword [ebp - 0x94]
xor eax, eax
cmp byte [edi + 0x1b71], al
mov ecx, 0xf
cmovne eax, ecx
lea ecx, [edi + 0x1b94]
mov dword [edi + 0x1bac], eax
add eax, 0x14
mov dword [edi + 0x1b0c], eax
mov dword [edi + 0x1b10], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x20], ecx
cmp esi, eax
je 0x100b85c6
mov edi, ecx
nop dword [eax]
push esi
mov ecx, edi
call fcn.10041290
add esi, 0x1c
cmp esi, dword [ebp - 0x34]
jne 0x100b85b0
mov edi, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x20]
call fcn.10041220
test eax, eax
je 0x100b85d9
mov dword [edi + 0x1ba8], 0
lea ecx, [ebp - 0x15c]
call fcn.10042720
lea ecx, [ebp - 0x178]
call fcn.10042720
lea ecx, [ebp - 0x98]
call fcn.10041330
push fcn.10042720
push 3
push 0x1c
lea eax, [ebp - 0x260]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.10191670
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x10057610
lea esi, [edi + 0x1afc]
lea ecx, [esi + 0x60]
push eax
call fcn.100ef420
mov dword [edi + 0x1b14], 1
lea ecx, [edi + 0x1c]
mov dword [edi + 0x1b00], 0x14a
mov dword [edi + 0x1b08], 0xfa
mov eax, dword [edi + 0x34]
mov dword [edi + 0x1b18], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x34], esi
call fcn.100ef1f0
push str.scout_hitchance
lea ecx, [ebp - 0x1b0]
add edi, 0x1bb0
call fcn.10042840
push str.hitchance
lea ecx, [ebp - 0x15c]
mov dword [ebp - 4], 0x45
call fcn.10042840
mov esi, dword [ebp - 0x40]
lea eax, [ebp - 0x1b0]
push eax
mov byte [ebp - 4], 0x46
lea ecx, [esi + 0x1bec]
call fcn.10073120
lea eax, [ebp - 0x15c]
mov byte [esi + 0x1c25], 1
push eax
lea ecx, [esi + 0x1c2c]
call fcn.10073120
lea ecx, [ebp - 0x15c]
mov byte [esi + 0x1c28], 0
call fcn.10042720
lea ecx, [ebp - 0x1b0]
mov dword [ebp - 4], 0xffffffff
call fcn.10042720
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x10057610
push eax
lea ecx, [edi + 0x60]
call fcn.100ef420
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x100585d0
push eax
lea ecx, [edi + 0x60]
call fcn.100ef420
mov dword [esi + 0x1bc8], 1
lea ecx, [esi + 0x1c]
mov dword [esi + 0x1bb4], 0x14a
mov dword [esi + 0x1bbc], 0xfa
mov eax, dword [esi + 0x34]
mov dword [esi + 0x1bcc], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x34], edi
call fcn.100ef1f0
push 0x1022c89c
lea ecx, [ebp - 0x194]
lea edi, [esi + 0x1c48]
call fcn.100f24f0
push str.scout_hitchance_amount
lea ecx, [ebp - 0x15c]
mov dword [ebp - 4], 0x47
call fcn.10042840
push 0x101af3e7
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x48
call fcn.10042840
lea eax, [ebp - 0x15c]
mov byte [ebp - 4], 0x49
push eax
lea ecx, [esi + 0x1c84]
call fcn.10073120
lea eax, [ebp - 0x194]
mov byte [esi + 0x1cbd], 0
push eax
lea ecx, [esi + 0x1cf8]
mov dword [esi + 0x1d14], 0
mov dword [esi + 0x1c58], 8
mov dword [esi + 0x1c5c], 8
mov dword [esi + 0x1cc8], 0x3f800000
mov dword [esi + 0x1ccc], 0x42c80000
mov dword [esi + 0x1cc4], 0x428c0000
mov dword [esi + 0x1cd8], 0
mov dword [esi + 0x1cd0], 0x3f800000
call fcn.100f24b0
lea ecx, [ebp - 0x178]
call fcn.10042720
lea ecx, [ebp - 0x15c]
call fcn.10042720
lea ecx, [ebp - 0x194]
mov dword [ebp - 4], 0xffffffff
call fcn.100a6a90
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x10057610
push eax
lea ecx, [edi + 0x60]
call fcn.100ef420
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x100585d0
push eax
lea ecx, [edi + 0x60]
call fcn.100ef420
mov dword [ebp - 0x34], edi
mov edi, esi
mov dword [edi + 0x1c60], 1
lea ecx, [edi + 0x1c]
mov dword [edi + 0x1c4c], 0x14a
mov dword [edi + 0x1c54], 0xfa
mov eax, dword [edi + 0x34]
mov dword [edi + 0x1c64], eax
lea eax, [ebp - 0x34]
push eax
call fcn.100ef1f0
push str.always
lea ecx, [ebp - 0x2f0]
call fcn.10042840
push str.lethal
lea ecx, [ebp - 0x2d4]
mov dword [ebp - 4], 0x4a
call fcn.10042840
push str.lethal_x2
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 4], 0x4b
call fcn.10042840
push str.fake
lea ecx, [ebp - 0x29c]
mov byte [ebp - 4], 0x4c
call fcn.10042840
push str.in_air
lea ecx, [ebp - 0x280]
mov byte [ebp - 4], 0x4d
call fcn.10042840
mov dword [ebp - 4], 0x4e
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x2f0]
push eax
lea ecx, [ebp - 0x30]
call fcn.100f2200
push dword [eax + 4]
push dword [eax]
push ecx
lea ecx, [ebp - 0x50]
call fcn.100f2270
push str.scout_baim1
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x4f
call fcn.10042840
push str.prefer_body_aim
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x50
call fcn.10042840
lea ecx, [ebp - 0x98]
call fcn.100418f0
lea eax, [ebp - 0x178]
mov byte [ebp - 4], 0x52
push eax
lea ecx, [edi + 0x1d54]
call fcn.10073120
lea eax, [ebp - 0x15c]
mov byte [edi + 0x1d8d], 1
push eax
lea ecx, [edi + 0x1d94]
call fcn.10073120
mov esi, dword [ebp - 0x4c]
xor eax, eax
cmp byte [edi + 0x1d8d], al
mov ecx, 0xf
cmovne eax, ecx
mov ecx, dword [ebp - 0x48]
mov dword [edi + 0x1dd4], eax
add eax, 0x14
mov dword [edi + 0x1d28], eax
mov dword [edi + 0x1d2c], eax
lea eax, [edi + 0x1db0]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x20], eax
cmp esi, ecx
je 0x100b89ca
mov edi, eax
push esi
mov ecx, edi
call fcn.10041290
add esi, 0x1c
cmp esi, dword [ebp - 0x34]
jne 0x100b89b7
mov edi, dword [ebp - 0x40]
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x90]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x34], ecx
cmp eax, ecx
je 0x100b8a8f
lea esi, [edi + 0x1dc4]
mov dword [ebp - 0x1c], esi
nop dword [eax]
mov edi, dword [eax]
sub esp, 0xc
mov ecx, esi
mov dword [ebp - 0x28], edi
push esp
call fcn.100416a0
sub esp, 0xc
mov ecx, esi
push esp
call fcn.10041720
lea edx, [ebp - 0x28]
lea ecx, [ebp - 0x134]
call fcn.10048230
mov ecx, dword [ebp - 0x1c]
add esp, 0x18
mov esi, eax
lea eax, [ebp - 0x140]
push eax
call fcn.100416a0
push eax
mov ecx, esi
call fcn.1003e530
lea ecx, [ebp - 0x140]
mov byte [ebp - 0x15], al
call fcn.10034970
lea ecx, [ebp - 0x134]
call fcn.10034970
mov ecx, dword [ebp - 0x20]
call fcn.10041220
mov esi, dword [ebp - 0x1c]
cmp edi, eax
jae 0x100b8a68
lea eax, [ebp - 0x28]
mov ecx, esi
push eax
call fcn.10072eb0
cmp byte [ebp - 0x15], 0
mov edi, dword [ebp - 0x40]
je 0x100b8a7d
mov eax, dword [edi + 0x1d88]
test eax, eax
je 0x100b8a7d
call eax
mov eax, dword [ebp - 0x24]
add eax, 4
mov dword [ebp - 0x24], eax
cmp eax, dword [ebp - 0x34]
jne 0x100b89f0
lea ecx, [ebp - 0x98]
call fcn.100417a0
lea ecx, [ebp - 0x15c]
call fcn.10042720
lea ecx, [ebp - 0x178]
call fcn.10042720
lea ecx, [ebp - 0x50]
call fcn.10041330
push fcn.10042720
push 5
push 0x1c
lea eax, [ebp - 0x2f0]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.10191670
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x10057610
lea esi, [edi + 0x1d18]
lea ecx, [esi + 0x60]
push eax
call fcn.100ef420
mov dword [edi + 0x1d30], 1
lea ecx, [edi + 0x1c]
mov dword [edi + 0x1d1c], 0x14a
mov dword [edi + 0x1d24], 0xfa
mov eax, dword [edi + 0x34]
mov dword [edi + 0x1d34], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x34], esi
call fcn.100ef1f0
push str.always
lea ecx, [ebp - 0x110]
call fcn.10042840
push str.health
lea ecx, [ebp - 0xf4]
mov dword [ebp - 4], 0x53
call fcn.10042840
push str.fake
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x54
call fcn.10042840
push str.in_air
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x55
call fcn.10042840
lea eax, [ebp - 0xa0]
mov dword [ebp - 4], 0x56
push eax
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x30]
call fcn.100f2200
push dword [eax + 4]
push dword [eax]
push ecx
lea ecx, [ebp - 0x50]
call fcn.100f2270
push str.scout_baim2
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x57
call fcn.10042840
push str.only_body_aim
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x58
call fcn.10042840
lea ecx, [ebp - 0x98]
call fcn.100418f0
lea eax, [ebp - 0x178]
mov byte [ebp - 4], 0x5a
push eax
lea ecx, [edi + 0x1e14]
call fcn.10073120
lea eax, [ebp - 0x15c]
mov byte [edi + 0x1e4d], 1
push eax
lea ecx, [edi + 0x1e54]
call fcn.10073120
mov esi, dword [ebp - 0x4c]
xor eax, eax
cmp byte [edi + 0x1e4d], al
mov ecx, 0xf
cmovne eax, ecx
mov ecx, dword [ebp - 0x48]
mov dword [edi + 0x1e94], eax
add eax, 0x14
mov dword [edi + 0x1de8], eax
mov dword [edi + 0x1dec], eax
lea eax, [edi + 0x1e70]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x20], eax
cmp esi, ecx
je 0x100b8c53
mov edi, eax
nop dword [eax]
push esi
mov ecx, edi
call fcn.10041290
add esi, 0x1c
cmp esi, dword [ebp - 0x34]
jne 0x100b8c40
mov edi, dword [ebp - 0x40]
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x90]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x34], ecx
cmp eax, ecx
je 0x100b8d15
lea esi, [edi + 0x1e84]
mov dword [ebp - 0x1c], esi
mov edi, dword [eax]
sub esp, 0xc
mov ecx, esi
mov dword [ebp - 0x28], edi
push esp
call fcn.100416a0
sub esp, 0xc
mov ecx, esi
push esp
call fcn.10041720
lea edx, [ebp - 0x28]
lea ecx, [ebp - 0x134]
call fcn.10048230
mov ecx, dword [ebp - 0x1c]
add esp, 0x18
mov esi, eax
lea eax, [ebp - 0x140]
push eax
call fcn.100416a0
push eax
mov ecx, esi
call fcn.1003e530
lea ecx, [ebp - 0x140]
mov byte [ebp - 0x15], al
call fcn.10034970
lea ecx, [ebp - 0x134]
call fcn.10034970
mov ecx, dword [ebp - 0x20]
call fcn.10041220
mov esi, dword [ebp - 0x1c]
cmp edi, eax
jae 0x100b8cee
lea eax, [ebp - 0x28]
mov ecx, esi
push eax
call fcn.10072eb0
cmp byte [ebp - 0x15], 0
mov edi, dword [ebp - 0x40]
je 0x100b8d03
mov eax, dword [edi + 0x1e48]
test eax, eax
je 0x100b8d03
call eax
mov eax, dword [ebp - 0x24]
add eax, 4
mov dword [ebp - 0x24], eax
cmp eax, dword [ebp - 0x34]
jne 0x100b8c76
lea ecx, [ebp - 0x98]
call fcn.100417a0
lea ecx, [ebp - 0x15c]
call fcn.10042720
lea ecx, [ebp - 0x178]
call fcn.10042720
lea ecx, [ebp - 0x50]
call fcn.10041330
push fcn.10042720
push 4
push 0x1c
lea eax, [ebp - 0x110]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.10191670
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x10057610
lea esi, [edi + 0x1dd8]
lea ecx, [esi + 0x60]
push eax
call fcn.100ef420
mov dword [edi + 0x1df0], 1
lea ecx, [edi + 0x1c]
mov dword [edi + 0x1ddc], 0x14a
mov dword [edi + 0x1de4], 0xfa
mov eax, dword [edi + 0x34]
mov dword [edi + 0x1df4], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x34], esi
call fcn.100ef1f0
push 0x1022ca90
lea ecx, [ebp - 0x1b0]
lea esi, [edi + 0x1e98]
call fcn.100f24f0
push str.scout_baim_hp
lea ecx, [ebp - 0x15c]
mov dword [ebp - 4], 0x5b
call fcn.10042840
push 0x101af3e7
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x5c
call fcn.10042840
lea eax, [ebp - 0x15c]
mov byte [ebp - 4], 0x5d
push eax
lea ecx, [edi + 0x1ed4]
call fcn.10073120
lea eax, [ebp - 0x1b0]
mov byte [edi + 0x1f0d], 0
push eax
lea ecx, [edi + 0x1f48]
mov dword [edi + 0x1f64], 0
mov dword [edi + 0x1ea8], 8
mov dword [edi + 0x1eac], 8
mov dword [edi + 0x1f18], 0x3f800000
mov dword [edi + 0x1f1c], 0x42c80000
mov dword [edi + 0x1f14], 0x42b80000
mov dword [edi + 0x1f28], 0
mov dword [edi + 0x1f20], 0x3f800000
call fcn.100f24b0
lea ecx, [ebp - 0x178]
call fcn.10042720
lea ecx, [ebp - 0x15c]
call fcn.10042720
lea ecx, [ebp - 0x1b0]
mov dword [ebp - 4], 0xffffffff
call fcn.100a6a90
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x10057610
push eax
lea ecx, [edi + 0x1ef8]
call fcn.100ef420
mov dword [esi + 0x18], 1
mov dword [esi + 4], 0x14a
mov dword [esi + 0xc], 0xfa
mov eax, dword [edi + 0x34]
mov dword [ebp - 0x34], esi
mov dword [esi + 0x1c], eax
lea ecx, [edi + 0x1c]
lea eax, [ebp - 0x34]
push eax
call fcn.100ef1f0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.101912d0
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret