Function at 0x1001bdb0
Capabilities:
Log keystrokes via polling
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005b3a0
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x31f0
call fcn.100593f0
mov eax, dword [0x1006c040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [0x1006e394]
mov ecx, dword [ebx + 8]
mov dword [ebp - 0x3128], ecx
mov ecx, dword [eax + 0x74]
test ecx, ecx
je 0x1001d2e7
call fcn.10002fe0
test al, al
je 0x1001d2e7
mov ecx, dword [0x1006e394]
cmp dword [ecx + 0x78], 0
je 0x1001d2e7
mov eax, dword [0x1006e3b4]
cmp byte [eax], 0
je 0x1001d2e7
cmp byte [eax + 0x98], 0
je 0x1001d2e7
cmp byte [eax + 0x99], 0
je 0x1001bea4
movzx eax, word [eax + 2]
test ax, ax
je 0x1001d2e7
push eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1001d2e7
cmp dword [0x1006cea8], 0
jne 0x1001be8c
push 0x1005f834
push 0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [0x1006cea8], eax
jmp 0x1001d2e7
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, dword [0x1006cea8]
jne 0x1001d2e7
mov ecx, dword [0x1006e394]
mov ecx, dword [ecx + 0x78]
mov eax, dword [ecx]
mov eax, dword [eax + 0x528]
call eax
cmp eax, 2
jne 0x1001d2e7
mov ecx, dword [0x1006e394]
mov ecx, dword [ecx + 0x74]
call fcn.1000e210
test al, al
jne 0x1001d2e7
xor ecx, ecx
mov dword [ebp - 0x188c], 0
xorps xmm0, xmm0
mov dword [ebp - 0x188c], ecx
movq qword [ebp - 0x1894], xmm0
mov dword [ebp - 0x1894], ecx
mov dword [ebp - 0x1890], ecx
mov dword [ebp - 4], ecx
mov eax, dword [0x1006e394]
mov esi, dword [eax + 0x98]
mov eax, dword [eax + 0x9c]
mov dword [ebp - 0x314c], esi
mov dword [ebp - 0x3114], eax
cmp esi, eax
je 0x1001ccf7
mov ecx, eax
mov esi, dword [esi]
mov dword [ebp - 0x3148], esi
test esi, esi
je 0x1001ccda
mov eax, dword [0x1006e394]
cmp esi, dword [eax + 0x74]
je 0x1001ccda
mov eax, dword [esi + 8]
lea edi, [esi + 8]
mov ecx, edi
mov dword [ebp - 0x3144], edi
mov eax, dword [eax + 0x20]
call eax
test al, al
jne 0x1001ccd4
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 8]
call eax
cmp dword [eax + 0x14], 0xf7
jne 0x1001bf7d
mov ecx, esi
call fcn.10002fe0
test al, al
je 0x1001ccd4
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 8]
call eax
cmp dword [eax + 0x14], 0xf7
jne 0x1001c0cd
mov ecx, esi
call fcn.10002e90
mov eax, dword [eax]
shr eax, 5
test al, 1
jne 0x1001ccd4
mov ecx, esi
call fcn.10002e90
mov eax, dword [eax]
shr eax, 0xe
test al, 1
jne 0x1001ccd4
mov ecx, esi
call fcn.1000e170
mov eax, dword [eax]
shr eax, 0xd
test al, 1
jne 0x1001ccd4
mov eax, dword [0x1006cd68]
mov ecx, dword fs:[0x2c]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x1006e678]
cmp eax, dword [ecx + 4]
jle 0x1001c02a
push 0x1006e678
call fcn.10058180
add esp, 4
cmp dword [0x1006e678], 0xffffffff
jne 0x1001c02a
mov edx, str.55_8B_EC_81_EC_________E8_________85_C0_74_7E_8B_4D_08_85_C9_74_77_A1_________83_78_08_00_74_6C_83_78_0C_00_74_66_A1_________83_C1_08_56_8B_30_8D_85_________50_8B_01
mov byte [ebp - 4], 1
mov ecx, str.client.dll
call fcn.1000dc10
push 0x1006e678
mov dword [0x1006e684], eax
mov byte [ebp - 4], 0
call fcn.1005812f
add esp, 4
push esi
call dword [0x1006e684]
test al, al
je 0x1001c0cd
mov eax, dword [0x1006e3b4]
cmp byte [eax + 4], 0
je 0x1001c0cd
mov edi, dword fs:[0x2c]
mov edx, dword [0x1006cd68]
mov eax, dword [0x1006e394]
mov ecx, dword [edi + edx*4]
lea edi, [esi + 8]
mov eax, dword [eax + 0x78]
mov dword [ebp - 0x3124], eax
mov eax, dword [0x1006cdf8]
cmp eax, dword [ecx + 4]
jle 0x1001c0b5
push 0x1006cdf8
call fcn.10058180
add esp, 4
cmp dword [0x1006cdf8], 0xffffffff
jne 0x1001c0b5
push str.m_iItemDefinitionIndex
push str.CEconEntity
mov byte [ebp - 4], 2
call fcn.10054180
push 0x1006cdf8
mov dword [0x1006cd80], eax
mov byte [ebp - 4], 0
call fcn.1005812f
add esp, 4
mov eax, dword [0x1006cd80]
mov ecx, dword [ebp - 0x3124]
cmp dword [ecx + eax], 0x1bf
jne 0x1001ccd4
mov eax, dword [0x1006e3b4]
cmp byte [eax + 0xc], 0
je 0x1001ccd4
mov eax, dword [0x1006e394]
lea ecx, [ebp - 0x319c]
push ecx
mov ecx, dword [eax + 0x74]
call fcn.10002b20
lea eax, [ebp - 0x31a8]
mov ecx, esi
push eax
call fcn.10002b20
mov eax, dword [0x1006e394]
mov ecx, dword fs:[0x2c]
mov eax, dword [eax + 0x74]
mov dword [ebp - 0x3124], eax
mov eax, dword [0x1006cd68]
mov eax, dword [ecx + eax*4]
mov ecx, dword [0x1006cde0]
mov dword [ebp - 0x311c], eax
cmp ecx, dword [eax + 4]
jle 0x1001c176
push 0x1006cde0
call fcn.10058180
mov ecx, dword [0x1006cde0]
add esp, 4
cmp ecx, 0xffffffff
jne 0x1001c176
push str.m_vecVelocity_0_
push str.CBasePlayer
mov byte [ebp - 4], 3
call fcn.10054180
push 0x1006cde0
mov dword [0x1006cdfc], eax
mov byte [ebp - 4], 0
call fcn.1005812f
mov ecx, dword [0x1006cde0]
add esp, 4
mov edx, dword [ebp - 0x3124]
mov eax, dword [0x1006cdfc]
movq xmm0, qword [edx + eax]
mov eax, dword [edx + eax + 8]
mov edx, dword [ebp - 0x311c]
movq qword [ebp - 0x3184], xmm0
mov dword [ebp - 0x317c], eax
cmp ecx, dword [edx + 4]
jle 0x1001c1eb
push 0x1006cde0
call fcn.10058180
add esp, 4
cmp dword [0x1006cde0], 0xffffffff
jne 0x1001c1e5
push str.m_vecVelocity_0_
push str.CBasePlayer
mov byte [ebp - 4], 4
call fcn.10054180
push 0x1006cde0
mov dword [0x1006cdfc], eax
mov byte [ebp - 4], 0
call fcn.1005812f
add esp, 4
mov edx, dword [ebp - 0x311c]
mov eax, dword [0x1006cdfc]
lea ecx, [ebp - 0x31b4]
movss xmm1, dword [ebp - 0x3180]
movss xmm3, dword [ebp - 0x319c]
movss xmm2, dword [ebp - 0x317c]
movq xmm0, qword [eax + esi]
mov eax, dword [eax + esi + 8]
movss xmm7, dword [ebp - 0x3198]
mov dword [ebp - 0x3188], eax
mov eax, dword [0x1006e394]
movss xmm6, dword [ebp - 0x3194]
movq qword [ebp - 0x3190], xmm0
movss xmm0, dword [ebp - 0x3184]
mov eax, dword [eax + 0x2c]
movss dword [ebp - 0x3170], xmm0
movss dword [ebp - 0x3174], xmm1
movss dword [ebp - 0x3130], xmm3
movss xmm5, dword [eax + 0x1c]
mulss xmm5, dword [0x10064c48]
movss dword [ebp - 0x3178], xmm2
movss dword [ebp - 0x312c], xmm7
mulss xmm0, xmm5
mulss xmm1, xmm5
addss xmm3, xmm0
mulss xmm2, xmm5
movss xmm0, dword [ebp - 0x3190]
addss xmm7, xmm1
movss xmm1, dword [ebp - 0x3188]
movss dword [ebp - 0x315c], xmm0
movaps xmm4, xmm1
movss dword [ebp - 0x3120], xmm3
movss xmm3, dword [ebp - 0x318c]
mulss xmm0, xmm5
movss dword [ebp - 0x3160], xmm3
mulss xmm3, xmm5
mulss xmm4, xmm5
movss xmm5, dword [ebp - 0x31a8]
movss dword [ebp - 0x3118], xmm6
addss xmm6, xmm2
movaps xmm2, xmm5
movss dword [ebp - 0x3164], xmm1
addss xmm2, xmm0
movss dword [ebp - 0x3124], xmm5
movss xmm0, dword [ebp - 0x31a4]
movaps xmm1, xmm0
movss dword [ebp - 0x3168], xmm0
movss xmm0, dword [ebp - 0x31a0]
addss xmm1, xmm3
movss xmm3, dword [ebp - 0x3120]
movss dword [ebp - 0x316c], xmm0
subss xmm3, xmm2
addss xmm0, xmm4
subss xmm7, xmm1
movss dword [ebp - 0x31b4], xmm3
subss xmm6, xmm0
movss dword [ebp - 0x31b0], xmm7
movss dword [ebp - 0x31ac], xmm6
call fcn.100025b0
movss xmm1, dword [0x10064cd8]
comiss xmm1, xmm0
movss dword [ebp - 0x3120], xmm0
jbe 0x1001c49d
mov eax, dword [0x1006cdc0]
cmp eax, dword [edx + 4]
jle 0x1001c3c1
push 0x1006cdc0
call fcn.10058180
add esp, 4
cmp dword [0x1006cdc0], 0xffffffff
jne 0x1001c3b9
push str.m_iClass
push str.CTFPlayer
mov byte [ebp - 4], 5
call fcn.10054180
push 0x1006cdc0
mov dword [0x1006cdb8], eax
mov byte [ebp - 4], 0
call fcn.1005812f
add esp, 4
movss xmm5, dword [ebp - 0x3124]
movss xmm3, dword [0x10064bc8]
lea ecx, [ebp - 0x31c0]
mov eax, dword [0x1006e394]
movss xmm0, dword [ebp - 0x315c]
movss xmm1, dword [ebp - 0x3160]
movss xmm2, dword [ebp - 0x3164]
mov eax, dword [eax + 0x2c]
movss xmm4, dword [ebp - 0x316c]
movss xmm6, dword [ebp - 0x3178]
mulss xmm0, xmm3
mulss xmm1, xmm3
mulss xmm2, xmm3
addss xmm5, xmm0
movss xmm0, dword [eax + 0x1c]
mulss xmm0, dword [0x10064c48]
movss xmm3, dword [ebp - 0x3168]
addss xmm4, xmm2
movss xmm2, dword [ebp - 0x3174]
addss xmm3, xmm1
movss xmm1, dword [ebp - 0x3170]
mulss xmm1, xmm0
mulss xmm2, xmm0
mulss xmm6, xmm0
movss xmm0, dword [ebp - 0x3130]
addss xmm0, xmm1
movss xmm1, dword [ebp - 0x312c]
addss xmm1, xmm2
movss xmm2, dword [ebp - 0x3118]
addss xmm2, xmm6
subss xmm0, xmm5
subss xmm1, xmm3
subss xmm2, xmm4
movss dword [ebp - 0x31c0], xmm0
movss dword [ebp - 0x31bc], xmm1
movss dword [ebp - 0x31b8], xmm2
call fcn.100025b0
movss dword [ebp - 0x3120], xmm0
push 0x1860
lea eax, [ebp - 0x3108]
mov dword [ebp - 0x3110], 0
push 0
push eax
mov dword [ebp - 0x310c], 0
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x3108]
call fcn.10009af0
mov eax, dword [edi]
mov ecx, edi
mov dword [ebp - 0x18a8], 0
mov eax, dword [eax + 8]
call eax
cmp dword [eax + 0x14], 0xf7
jne 0x1001cb38
mov eax, dword [0x1006e394]
mov ecx, dword [ebp - 0x311c]
mov eax, dword [eax + 0x78]
mov dword [ebp - 0x3118], eax
mov eax, dword [0x1006cdf8]
cmp eax, dword [ecx + 4]
jle 0x1001c552
push 0x1006cdf8
call fcn.10058180
add esp, 4
cmp dword [0x1006cdf8], 0xffffffff
jne 0x1001c552
push str.m_iItemDefinitionIndex
push str.CEconEntity
mov byte [ebp - 4], 6
call fcn.10054180
push 0x1006cdf8
mov dword [0x1006cd80], eax
mov byte [ebp - 4], 0
call fcn.1005812f
add esp, 4
mov eax, dword [0x1006cd80]
mov ecx, dword [ebp - 0x3118]
cmp dword [ecx + eax], 0x1bf
jne 0x1001c625
mov ecx, esi
call fcn.10048390
test al, al
jne 0x1001c625
mov eax, dword [0x1006e3b4]
cmp byte [eax + 0x9c], 0
je 0x1001c625
movss xmm0, dword [ebp - 0x3120]
movss xmm1, dword [0x10064cc8]
comiss xmm1, xmm0
jb 0x1001c625
push 0x1860
lea eax, [ebp - 0x1880]
movss dword [ebp - 0x3110], xmm0
push 0
push eax
mov dword [ebp - 0x18a8], esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x1880]
call fcn.10009af0
lea eax, [ebp - 0x1880]
push eax
lea ecx, [ebp - 0x3108]
call fcn.1000a1e0
mov eax, dword [ebp - 0x1890]
lea ecx, [ebp - 0x3110]
mov dword [ebp - 0x310c], 1
cmp eax, dword [ebp - 0x188c]
je 0x1001ccc7
push 0x186c
push ecx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add dword [ebp - 0x1890], 0x186c
jmp 0x1001ccd4
mov eax, dword [edi]
mov ecx, edi
mov esi, dword [0x1006e3a0]
mov eax, dword [eax + 0x24]
call eax
lea eax, [eax + eax*4]
cmp dword [esi + eax*4 + 0x24], 2
jbe 0x1001ccd4
mov eax, dword [edi]
mov ecx, edi
mov esi, dword [0x1006e3a0]
mov dword [ebp - 0x311c], 2
mov eax, dword [eax + 0x24]
call eax
lea eax, [eax + eax*4]
cmp dword [esi + eax*4 + 0x24], 2
jbe 0x1001ccd4
nop dword [eax]
mov eax, dword [edi]
mov ecx, edi
mov esi, dword [0x1006e3a0]
mov eax, dword [eax + 0x24]
call eax
lea edx, [eax + eax*4]
mov eax, dword [esi + edx*4 + 0x20]
mov ecx, dword [esi + edx*4 + 0x1c]
add eax, dword [ebp - 0x311c]
dec ecx
and ecx, eax
mov eax, dword [esi + edx*4 + 0x18]
mov esi, dword [eax + ecx*4]
mov dword [ebp - 0x3130], esi
movss xmm1, dword [esi + 0x184c]
call fcn.10008ba0
test al, al
je 0x1001cb0b
mov eax, dword [0x1006e394]
lea ecx, [ebp - 0x31f0]
push ecx
mov ecx, dword [eax + 0x74]
call fcn.10002b20
add esi, 0x3c
lea ecx, [ebp - 0x31cc]
movss xmm2, dword [eax]
movss xmm1, dword [eax + 4]
movss xmm0, dword [eax + 8]
subss xmm2, dword [esi]
subss xmm1, dword [esi + 4]
subss xmm0, dword [esi + 8]
movss dword [ebp - 0x31cc], xmm2
movss dword [ebp - 0x31c8], xmm1
movss dword [ebp - 0x31c4], xmm0
call fcn.100025b0
mov eax, dword [0x1006cd68]
mov ecx, dword fs:[0x2c]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x1006cdc0]
cmp eax, dword [ecx + 4]
jle 0x1001c766
push 0x1006cdc0
call fcn.10058180
add esp, 4
cmp dword [0x1006cdc0], 0xffffffff
jne 0x1001c766
push str.m_iClass
push str.CTFPlayer
mov byte [ebp - 4], 7
call fcn.10054180
push 0x1006cdc0
mov dword [0x1006cdb8], eax
mov byte [ebp - 4], 0
call fcn.1005812f
add esp, 4
mov eax, dword [0x1006e394]
lea ecx, [ebp - 0x31fc]
push ecx
mov ecx, dword [eax + 0x74]
call fcn.10002b20
mov ecx, dword [0x1006e394]
mov edi, dword fs:[0x2c]
mov edx, dword [0x1006cd68]
mov dword [ebp - 0x312c], eax
mov eax, dword [ecx + 0x74]
mov ecx, dword [0x1006cde0]
mov dword [ebp - 0x3118], eax
mov eax, dword [edi + edx*4]
mov edi, dword [ebp - 0x3144]
cmp ecx, dword [eax + 4]
jle 0x1001c7f2
push 0x1006cde0
call fcn.10058180
add esp, 4
cmp dword [0x1006cde0], 0xffffffff
jne 0x1001c7f2
push str.m_vecVelocity_0_
push str.CBasePlayer
mov byte [ebp - 4], 8
call fcn.10054180
push 0x1006cde0
mov dword [0x1006cdfc], eax
mov byte [ebp - 4], 0
call fcn.1005812f
add esp, 4
mov eax, dword [0x1006e394]
mov ecx, dword [0x1006cdfc]
mov eax, dword [eax + 0x2c]
movss xmm2, dword [eax + 0x1c]
mulss xmm2, dword [0x10064c48]
mov eax, dword [ebp - 0x3118]
movaps xmm1, xmm2
movaps xmm0, xmm2
mulss xmm1, dword [eax + ecx]
mulss xmm0, dword [eax + ecx + 4]
mulss xmm2, dword [eax + ecx + 8]
lea ecx, [ebp - 0x3158]
mov eax, dword [ebp - 0x312c]
addss xmm1, dword [eax]
addss xmm0, dword [eax + 4]
addss xmm2, dword [eax + 8]
subss xmm1, dword [esi]
subss xmm0, dword [esi + 4]
subss xmm2, dword [esi + 8]
movss dword [ebp - 0x3158], xmm1
movss dword [ebp - 0x3154], xmm0
movss dword [ebp - 0x3150], xmm2
call fcn.100025b0
movss xmm1, dword [0x10064cc8]
comiss xmm1, xmm0
movss dword [ebp - 0x312c], xmm0
jb 0x1001cb0b
mov eax, dword [0x1006e394]
push esi
push ecx
lea ecx, [ebp - 0x31d8]
push ecx
mov ecx, dword [eax + 0x74]
call fcn.100030f0
add esp, 4
lea ecx, [ebp - 0x18a0]
mov edx, eax
call fcn.10002600
mov eax, dword [0x1006e3b4]
add esp, 4
cmp byte [eax + 0x9a], 0
je 0x1001ca98
mov edi, dword fs:[0x2c]
mov edx, dword [0x1006cd68]
mov eax, dword [0x1006e394]
mov ecx, dword [edi + edx*4]
mov eax, dword [eax + 0x74]
mov edi, dword [ebp - 0x3144]
mov dword [ebp - 0x3118], eax
mov eax, dword [0x1006cdc0]
cmp eax, dword [ecx + 4]
jle 0x1001c933
push 0x1006cdc0
call fcn.10058180
add esp, 4
cmp dword [0x1006cdc0], 0xffffffff
jne 0x1001c933
push str.m_iClass
push str.CTFPlayer
mov byte [ebp - 4], 9
call fcn.10054180
push 0x1006cdc0
mov dword [0x1006cdb8], eax
mov byte [ebp - 4], 0
call fcn.1005812f
add esp, 4
mov eax, dword [0x1006cdb8]
mov ecx, dword [ebp - 0x3118]
cmp dword [ecx + eax], 8
jne 0x1001ca98
mov eax, dword [0x1006e394]
lea ecx, [ebp - 0x31e4]
push ecx
mov ecx, dword [eax + 0x74]
call fcn.10002b20
movss xmm2, dword [esi]
movss xmm1, dword [esi + 4]
movss xmm0, dword [esi + 8]
mov edx, dword [0x1006cd68]
mov esi, dword fs:[0x2c]
subss xmm2, dword [eax]
subss xmm1, dword [eax + 4]
subss xmm0, dword [eax + 8]
mov ecx, dword [esi + edx*4]
mov eax, dword [0x1006ce58]
movss dword [ebp - 0x3140], xmm2
movss dword [ebp - 0x313c], xmm1
movss dword [ebp - 0x3138], xmm0
cmp eax, dword [ecx + 4]
jle 0x1001c9ec
push 0x1006ce58
call fcn.10058180
add esp, 4
cmp dword [0x1006ce58], 0xffffffff
jne 0x1001c9ec
push str.m_angEyeAngles_0_
push str.CTFPlayer
mov byte [ebp - 4], 0xa
call fcn.10054180
push 0x1006ce58
mov dword [0x1006ce40], eax
mov byte [ebp - 4], 0
call fcn.1005812f
add esp, 4
mov edx, dword [0x1006ce40]
sub esp, 0xc
movq xmm0, qword [ebp - 0x3140]
mov ecx, esp
add edx, dword [ebp - 0x3148]
mov eax, dword [ebp - 0x3138]
push edx
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
lea eax, [ebp - 0x18a0]
push eax
call fcn.1001bb20
test al, al
jne 0x1001ca98
push 0x1860
lea eax, [ebp - 0x1880]
mov dword [ebp - 0x1888], 0
push 0
push eax
mov dword [ebp - 0x1884], 0
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x1880]
call fcn.10009af0
mov eax, dword [ebp - 0x1884]
lea ecx, [ebp - 0x3108]
movss xmm0, dword [ebp - 0x1888]
mov dword [ebp - 0x310c], eax
lea eax, [ebp - 0x1880]
push eax
mov dword [ebp - 0x20], 0
movss dword [ebp - 0x3110], xmm0
call fcn.1000a1e0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18a8], eax
jmp 0x1001cb0b
movss xmm0, dword [ebp - 0x312c]
lea ecx, [ebp - 0x3108]
mov eax, dword [ebp - 0x3148]
push dword [ebp - 0x3130]
movss dword [ebp - 0x3110], xmm0
mov dword [ebp - 0x18a8], eax
call fcn.1000a1e0
mov eax, dword [ebp - 0x1890]
lea ecx, [ebp - 0x3110]
mov dword [ebp - 0x310c], 1
cmp eax, dword [ebp - 0x188c]
je 0x1001cafe
push 0x186c
push ecx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add dword [ebp - 0x1890], 0x186c
jmp 0x1001cb0b
push ecx
push eax
lea ecx, [ebp - 0x1894]
call fcn.1001d380
mov eax, dword [edi]
mov ecx, edi
inc dword [ebp - 0x311c]
mov esi, dword [0x1006e3a0]
mov eax, dword [eax + 0x24]
call eax
mov ecx, dword [ebp - 0x311c]
lea eax, [eax + eax*4]
cmp ecx, dword [esi + eax*4 + 0x24]
jb 0x1001c670
jmp 0x1001ccd4
movss xmm0, dword [ebp - 0x3120]
comiss xmm0, dword [0x10064cc8]
ja 0x1001ccd4
mov eax, dword [0x1006e3b4]
cmp byte [eax + 0x9b], 0
jne 0x1001cb6a
mov ecx, esi
call fcn.10048390
test al, al
je 0x1001ccd4
mov eax, dword [0x1006e394]
mov ecx, dword [ebp - 0x311c]
mov edi, dword [eax + 0x74]
mov eax, dword [0x1006cdc0]
cmp eax, dword [ecx + 4]
jle 0x1001cbca
push 0x1006cdc0
call fcn.10058180
add esp, 4
cmp dword [0x1006cdc0], 0xffffffff
jne 0x1001cbc4
push str.m_iClass
push str.CTFPlayer
mov byte [ebp - 4], 0xb
call fcn.10054180
push 0x1006cdc0
mov dword [0x1006cdb8], eax
mov byte [ebp - 4], 0
call fcn.1005812f
add esp, 4
mov ecx, dword [ebp - 0x311c]
mov eax, dword [0x1006cdb8]
cmp dword [edi + eax], 9
jne 0x1001ccd4
mov eax, dword [0x1006e394]
mov edi, dword [eax + 0x20]
mov eax, dword [edi]
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x3118], eax
mov eax, dword [0x1006cee0]
cmp eax, dword [ecx + 4]
jle 0x1001cc38
push 0x1006cee0
call fcn.10058180
add esp, 4
cmp dword [0x1006cee0], 0xffffffff
jne 0x1001cc38
push str.m_hBuilder
push str.CBaseObject
mov byte [ebp - 4], 0xc
call fcn.10054180
push 0x1006cee0
mov dword [0x1006cf0c], eax
mov byte [ebp - 4], 0
call fcn.1005812f
add esp, 4
mov eax, dword [0x1006cf0c]
mov ecx, edi
push dword [eax + esi]
call dword [ebp - 0x3118]
mov edi, eax
test edi, edi
je 0x1001ccd4
movss xmm0, dword [ebp - 0x3120]
lea eax, [ebp - 0x1880]
push 0x1860
push 0
push eax
movss dword [ebp - 0x3110], xmm0
mov dword [ebp - 0x18a8], esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x1880]
call fcn.10009af0
lea eax, [ebp - 0x1880]
push eax
lea ecx, [ebp - 0x3108]
call fcn.1000a1e0
mov eax, dword [0x1006e394]
xor ecx, ecx
cmp edi, dword [eax + 0x74]
mov eax, dword [ebp - 0x1890]
sete cl
inc ecx
mov dword [ebp - 0x310c], ecx
lea ecx, [ebp - 0x3110]
cmp eax, dword [ebp - 0x188c]
jne 0x1001c607
push ecx
push eax
lea ecx, [ebp - 0x1894]
call fcn.1001d380
mov ecx, dword [ebp - 0x3114]
mov esi, dword [ebp - 0x314c]
add esi, 4
mov dword [ebp - 0x314c], esi
cmp esi, ecx
jne 0x1001bf23
mov ecx, dword [ebp - 0x1894]
mov esi, dword [ebp - 0x1890]
mov eax, 0x14f6fddf
push dword [ebp - 0x3118]
sub esi, ecx
imul esi
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x1890]
push eax
call fcn.1001d540
mov esi, dword [ebp - 0x1894]
add esp, 8
cmp esi, dword [ebp - 0x1890]
je 0x1001d29a
push 0x186c
lea eax, [ebp - 0x3110]
push esi
push eax
call sub.VCRUNTIME140.dll_memcpy
mov edi, dword [ebp - 0x18a8]
add esp, 0xc
test edi, edi
je 0x1001d29a
movss xmm1, dword [ebp - 0x18bc]
xorps xmm0, xmm0
comiss xmm1, xmm0
jbe 0x1001cd8e
movq xmm0, qword [ebp - 0x30cc]
lea esi, [ebp - 0x3158]
mov eax, dword [ebp - 0x30c4]
movq qword [ebp - 0x3158], xmm0
mov dword [ebp - 0x3150], eax
jmp 0x1001cd9e
lea eax, [ebp - 0x31e4]
mov ecx, edi
push eax
call fcn.10002b20
mov esi, eax
mov ecx, dword [0x1006e394]
lea eax, [ebp - 0x31d8]
push eax
mov ecx, dword [ecx + 0x74]
call fcn.100030f0
push esi
mov edx, eax
lea ecx, [ebp - 0x3140]
call fcn.10002600
add esp, 4
lea ecx, [ebp - 0x3140]
call fcn.10016f70
mov eax, dword [0x1006e394]
mov ecx, dword fs:[0x2c]
mov eax, dword [eax + 0x74]
mov dword [ebp - 0x3118], eax
mov eax, dword [0x1006cd68]
mov esi, dword [ecx + eax*4]
mov eax, dword [0x1006cf2c]
cmp eax, dword [esi + 4]
jle 0x1001ce38
push 0x1006cf2c
call fcn.10058180
add esp, 4
cmp dword [0x1006cf2c], 0xffffffff
jne 0x1001ce38
push str.m_fFlags
push str.CBasePlayer
mov byte [ebp - 4], 0xd
call fcn.10054180
push 0x1006cf2c
mov dword [0x1006cf28], eax
mov byte [ebp - 4], 0
call fcn.1005812f
add esp, 4
mov eax, dword [0x1006cf28]
mov ecx, dword [ebp - 0x3118]
test byte [ecx + eax], 1
jne 0x1001ced5
mov eax, dword [0x1006e394]
mov eax, dword [eax + 0x74]
mov dword [ebp - 0x3118], eax
mov eax, dword [0x1006cd8c]
cmp eax, dword [esi + 4]
jle 0x1001cea7
push 0x1006cd8c
call fcn.10058180
add esp, 4
cmp dword [0x1006cd8c], 0xffffffff
jne 0x1001cea7
push str.m_vecOrigin
push str.CBaseEntity
mov byte [ebp - 4], 0xe
call fcn.10054180
push 0x1006cd8c
mov dword [0x1006cdb4], eax
mov byte [ebp - 4], 0
call fcn.1005812f
add esp, 4
mov eax, dword [0x1006cdb4]
mov ecx, dword [ebp - 0x3118]
mov edx, dword [ebp - 0x3128]
movss xmm0, dword [ecx + eax + 8]
subss xmm0, dword [ebp - 0x3100]
comiss xmm0, dword [0x10064ca8]
jbe 0x1001cedb
or dword [edx + 0x24], 4
jmp 0x1001cedb
mov edx, dword [ebp - 0x3128]
or dword [edx + 0x24], 1
movss xmm0, dword [ebp - 0x313c]
movss xmm1, dword [ebp - 0x3140]
movss dword [edx + 0x10], xmm0
movss xmm0, dword [ebp - 0x3138]
movss dword [edx + 0xc], xmm1
movss dword [edx + 0x14], xmm0
mov ecx, dword [0x1006e394]
push edx
movss dword [ecx + 0x2bc], xmm1
mov eax, dword [edx + 0x10]
mov dword [ecx + 0x2c0], eax
mov eax, dword [edx + 0x14]
mov dword [ecx + 0x2c4], eax
mov eax, dword [0x1006e3b4]
mov ecx, dword [eax + 0x18]
mov eax, dword [0x1006e394]
mov dword [eax + 0x2c8], ecx
mov eax, dword [0x1006e394]
mov ecx, dword [eax + 0x78]
call fcn.1004a660
test al, al
je 0x1001d294
movss xmm0, dword [ebp - 0x18bc]
xorps xmm1, xmm1
comiss xmm0, xmm1
jbe 0x1001d1bb
mov eax, dword [0x1006ce58]
cmp eax, dword [esi + 4]
jle 0x1001cfaf
push 0x1006ce58
call fcn.10058180
add esp, 4
cmp dword [0x1006ce58], 0xffffffff
jne 0x1001cfaf
push str.m_angEyeAngles_0_
push str.CTFPlayer
mov byte [ebp - 4], 0xf
call fcn.10054180
push 0x1006ce58
mov dword [0x1006ce40], eax
mov byte [ebp - 4], 0
call fcn.1005812f
add esp, 4
mov eax, dword [0x1006ce40]
movss xmm0, dword [ebp - 0x30fc]
movss dword [eax + edi], xmm0
movss xmm0, dword [ebp - 0x30f8]
movss dword [eax + edi + 4], xmm0
movss xmm0, dword [ebp - 0x30f4]
movss dword [eax + edi + 8], xmm0
mov eax, dword [0x1006cd88]
cmp eax, dword [esi + 4]
jle 0x1001d029
push 0x1006cd88
call fcn.10058180
add esp, 4
cmp dword [0x1006cd88], 0xffffffff
jne 0x1001d029
push str.m_vecMins
push str.CBaseEntity
mov byte [ebp - 4], 0x10
call fcn.10054180
push 0x1006cd88
mov dword [0x1006cdcc], eax
mov byte [ebp - 4], 0
call fcn.1005812f
add esp, 4
mov eax, dword [0x1006cdcc]
movss xmm0, dword [ebp - 0x30f0]
movss dword [edi + eax], xmm0
movss xmm0, dword [ebp - 0x30ec]
movss dword [edi + eax + 4], xmm0
movss xmm0, dword [ebp - 0x30e8]
movss dword [edi + eax + 8], xmm0
mov eax, dword [0x1006cdf4]
cmp eax, dword [esi + 4]
jle 0x1001d0a3
push 0x1006cdf4
call fcn.10058180
add esp, 4
cmp dword [0x1006cdf4], 0xffffffff
jne 0x1001d0a3
push str.m_vecMaxs
push str.CBaseEntity
mov byte [ebp - 4], 0x11
call fcn.10054180
push 0x1006cdf4
mov dword [0x1006cddc], eax
mov byte [ebp - 4], 0
call fcn.1005812f
add esp, 4
mov eax, dword [0x1006cddc]
movss xmm0, dword [ebp - 0x30e4]
movss dword [edi + eax], xmm0
movss xmm0, dword [ebp - 0x30e0]
movss dword [edi + eax + 4], xmm0
movss xmm0, dword [ebp - 0x30dc]
movss dword [edi + eax + 8], xmm0
mov eax, dword [0x1006cde0]
cmp eax, dword [esi + 4]
jle 0x1001d11d
push 0x1006cde0
call fcn.10058180
add esp, 4
cmp dword [0x1006cde0], 0xffffffff
jne 0x1001d11d
push str.m_vecVelocity_0_
push str.CBasePlayer
mov byte [ebp - 4], 0x12
call fcn.10054180
push 0x1006cde0
mov dword [0x1006cdfc], eax
mov byte [ebp - 4], 0
call fcn.1005812f
add esp, 4
mov eax, dword [0x1006cdfc]
movss xmm0, dword [ebp - 0x30d8]
movss dword [edi + eax], xmm0
movss xmm0, dword [ebp - 0x30d4]
movss dword [edi + eax + 4], xmm0
movss xmm0, dword [ebp - 0x30d0]
movss dword [edi + eax + 8], xmm0
mov eax, dword [0x1006ce5c]
cmp eax, dword [esi + 4]
jle 0x1001d197
push 0x1006ce5c
call fcn.10058180
add esp, 4
cmp dword [0x1006ce5c], 0xffffffff
jne 0x1001d197
push str.m_flCycle
push str.CBaseAnimating
mov byte [ebp - 4], 0x13
call fcn.10054180
push 0x1006ce5c
mov dword [0x1006ce24], eax
mov byte [ebp - 4], 0
call fcn.1005812f
add esp, 4
mov eax, dword [0x1006ce24]
movss xmm0, dword [ebp - 0x18b8]
movss dword [edi + eax], xmm0
call fcn.100086f0
addss xmm0, dword [ebp - 0x18bc]
jmp 0x1001d272
mov eax, dword [edi + 8]
lea ecx, [edi + 8]
mov eax, dword [eax + 8]
call eax
cmp dword [eax + 0x14], 0xf7
jne 0x1001d294
push 0x1800
lea eax, [ebp - 0x1820]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [0x1006e394]
lea ecx, [edi + 4]
add esp, 8
lea edx, [ebp - 0x1820]
mov eax, dword [eax + 0x2c]
movss xmm0, dword [eax + 0xc]
mov eax, dword [ecx]
movss dword [esp], xmm0
push 0x100
push 0x80
mov eax, dword [eax + 0x40]
push edx
call eax
mov eax, dword [0x1006ce64]
cmp eax, dword [esi + 4]
jle 0x1001d262
push 0x1006ce64
call fcn.10058180
add esp, 4
cmp dword [0x1006ce64], 0xffffffff
jne 0x1001d262
push str.m_flSimulationTime
push str.CBaseEntity
mov byte [ebp - 4], 0x14
call fcn.10054180
push 0x1006ce64
mov dword [0x1006ce38], eax
mov byte [ebp - 4], 0
call fcn.1005812f
add esp, 4
mov esi, dword [0x1006ce38]
call fcn.100086f0
addss xmm0, dword [esi + edi]
mov eax, dword [0x1006e394]
mov ecx, dword [ebp - 0x3128]
mov eax, dword [eax + 0x2c]
divss xmm0, dword [eax + 0x1c]
addss xmm0, dword [0x10064bf0]
cvttss2si eax, xmm0
mov dword [ecx + 8], eax
mov esi, dword [ebp - 0x1894]
test esi, esi
je 0x1001d2e7
mov ecx, dword [ebp - 0x188c]
mov eax, 0x14f6fddf
sub ecx, esi
imul ecx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x186c
mov eax, esi
cmp ecx, 0x1000
jb 0x1001d2dd
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1001d2dd
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push esi
call fcn.10058648
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100580f6
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4