Function at 0x1001d0a0
Capabilities:
Log keystrokes via polling
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006a7c4
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x62e0
call fcn.100685f0
mov eax, dword [0x10080040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [0x1014e66c]
mov ecx, dword [ebx + 8]
mov dword [ebp - 0x49b0], ecx
mov ecx, dword [eax + 0x74]
test ecx, ecx
je 0x1001ebb6
call fcn.10003270
test al, al
je 0x1001ebb6
mov eax, dword [0x1014e66c]
cmp dword [eax + 0x78], 0
je 0x1001ebb6
mov eax, dword [0x1014e68c]
cmp byte [eax], 0
je 0x1001ebb6
cmp byte [eax + 0xfc], 0
je 0x1001ebb6
cmp byte [eax + 0xfd], 0
je 0x1001d17c
movzx eax, word [eax + 2]
test ax, ax
je 0x1001d172
push eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1001d172
cmp dword [0x1014d158], 0
jne 0x1001d766
push 0x10070874
push 0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [0x1014d158], eax
xor al, al
test al, al
je 0x1001ebb6
mov eax, dword [0x1014e66c]
mov ecx, dword [eax + 0x78]
mov eax, dword [ecx]
mov eax, dword [eax + 0x528]
call eax
cmp eax, 2
jne 0x1001ebb6
mov ecx, dword [0x1014e66c]
mov ecx, dword [ecx + 0x74]
call fcn.1000e900
test al, al
jne 0x1001ebb6
xor ecx, ecx
mov dword [ebp - 0x1880], 0
xorps xmm0, xmm0
mov dword [ebp - 0x1880], ecx
movq qword [ebp - 0x1888], xmm0
mov dword [ebp - 0x1888], ecx
mov dword [ebp - 0x1884], ecx
mov dword [ebp - 4], ecx
mov eax, dword [0x1014e66c]
mov esi, dword [eax + 0x98]
mov eax, dword [eax + 0x9c]
mov dword [ebp - 0x49b8], esi
mov dword [ebp - 0x49a0], eax
cmp esi, eax
je 0x1001e17f
mov ecx, eax
mov esi, dword [esi]
mov dword [ebp - 0x49a4], esi
test esi, esi
je 0x1001e162
mov eax, dword [0x1014e66c]
cmp esi, dword [eax + 0x74]
je 0x1001e162
mov eax, dword [esi + 8]
lea edi, [esi + 8]
mov ecx, edi
mov dword [ebp - 0x49b4], edi
mov eax, dword [eax + 0x20]
call eax
test al, al
jne 0x1001e15c
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 8]
call eax
cmp dword [eax + 0x14], 0xf7
jne 0x1001d25a
mov ecx, esi
call fcn.10003270
test al, al
je 0x1001e15c
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 8]
call eax
cmp dword [eax + 0x14], 0xf7
jne 0x1001d3aa
mov ecx, esi
call fcn.10003130
mov eax, dword [eax]
shr eax, 5
test al, 1
jne 0x1001e15c
mov ecx, esi
call fcn.10003130
mov eax, dword [eax]
shr eax, 0xe
test al, 1
jne 0x1001e15c
mov ecx, esi
call fcn.1000e860
mov eax, dword [eax]
shr eax, 0xd
test al, 1
jne 0x1001e15c
mov eax, dword [0x1014d018]
mov ecx, dword fs:[0x2c]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x1014e968]
cmp eax, dword [ecx + 4]
jle 0x1001d307
push 0x1014e968
call fcn.1006737a
add esp, 4
cmp dword [0x1014e968], 0xffffffff
jne 0x1001d307
mov edx, str.55_8B_EC_81_EC_________E8_________85_C0_74_7E_8B_4D_08_85_C9_74_77_A1_________83_78_08_00_74_6C_83_78_0C_00_74_66_A1_________83_C1_08_56_8B_30_8D_85_________50_8B_01
mov byte [ebp - 4], 1
mov ecx, str.client.dll
call fcn.1000e2c0
push 0x1014e968
mov dword [0x1014e974], eax
mov byte [ebp - 4], 0
call fcn.10067329
add esp, 4
push esi
call dword [0x1014e974]
test al, al
je 0x1001d3aa
mov eax, dword [0x1014e68c]
cmp byte [eax + 4], 0
je 0x1001d3aa
mov edi, dword fs:[0x2c]
mov edx, dword [0x1014d018]
mov eax, dword [0x1014e66c]
mov ecx, dword [edi + edx*4]
lea edi, [esi + 8]
mov eax, dword [eax + 0x78]
mov dword [ebp - 0x187c], eax
mov eax, dword [0x1014d0a8]
cmp eax, dword [ecx + 4]
jle 0x1001d392
push 0x1014d0a8
call fcn.1006737a
add esp, 4
cmp dword [0x1014d0a8], 0xffffffff
jne 0x1001d392
push str.m_iItemDefinitionIndex
push str.CEconEntity
mov byte [ebp - 4], 2
call fcn.10063340
push 0x1014d0a8
mov dword [0x1014d030], eax
mov byte [ebp - 4], 0
call fcn.10067329
add esp, 4
mov eax, dword [0x1014d030]
mov ecx, dword [ebp - 0x187c]
cmp dword [ecx + eax], 0x1bf
jne 0x1001e15c
mov eax, dword [0x1014e66c]
lea ecx, [ebp - 0x4a44]
push ecx
mov ecx, dword [eax + 0x74]
call fcn.10002dc0
mov ecx, dword [0x1014e66c]
mov dword [ebp - 0x18a8], eax
mov eax, dword [ecx + 0x74]
mov ecx, dword fs:[0x2c]
mov dword [ebp - 0x187c], eax
mov eax, dword [0x1014d018]
mov eax, dword [ecx + eax*4]
mov ecx, dword [0x1014d090]
mov dword [ebp - 0x49ac], eax
cmp ecx, dword [eax + 4]
jle 0x1001d435
push 0x1014d090
call fcn.1006737a
add esp, 4
cmp dword [0x1014d090], 0xffffffff
jne 0x1001d435
push str.m_vecVelocity_0_
push str.CBasePlayer
mov byte [ebp - 4], 3
call fcn.10063340
push 0x1014d090
mov dword [0x1014d0ac], eax
mov byte [ebp - 4], 0
call fcn.10067329
add esp, 4
mov eax, dword [0x1014e66c]
mov ecx, dword [0x1014d0ac]
mov eax, dword [eax + 0x2c]
movss xmm2, dword [eax + 0x1c]
mulss xmm2, dword [0x10076e88]
mov eax, dword [ebp - 0x187c]
movaps xmm1, xmm2
movaps xmm0, xmm2
mulss xmm1, dword [eax + ecx]
mulss xmm0, dword [eax + ecx + 4]
mulss xmm2, dword [eax + ecx + 8]
mov ecx, esi
mov eax, dword [ebp - 0x18a8]
addss xmm1, dword [eax]
addss xmm0, dword [eax + 4]
addss xmm2, dword [eax + 8]
lea eax, [ebp - 0x4a80]
push eax
movss dword [ebp - 0x187c], xmm1
movss dword [ebp - 0x18a8], xmm0
movss dword [ebp - 0x18ac], xmm2
call fcn.10002dc0
movss xmm1, dword [ebp - 0x187c]
lea ecx, [ebp - 0x4a04]
movss xmm2, dword [ebp - 0x18ac]
movss xmm0, dword [ebp - 0x18a8]
subss xmm1, dword [eax]
subss xmm0, dword [eax + 4]
subss xmm2, dword [eax + 8]
movss dword [ebp - 0x4a04], xmm1
movss dword [ebp - 0x4a00], xmm0
movss dword [ebp - 0x49fc], xmm2
call fcn.100027b0
mov eax, dword [0x1014e66c]
mov ecx, dword [ebp - 0x49ac]
movss dword [ebp - 0x499c], xmm0
mov eax, dword [eax + 0x74]
mov dword [ebp - 0x187c], eax
mov eax, dword [0x1014d070]
cmp eax, dword [ecx + 4]
jle 0x1001d558
push 0x1014d070
call fcn.1006737a
add esp, 4
cmp dword [0x1014d070], 0xffffffff
jne 0x1001d558
push str.m_iClass
push str.CTFPlayer
mov byte [ebp - 4], 4
call fcn.10063340
push 0x1014d070
mov dword [0x1014d068], eax
mov byte [ebp - 4], 0
call fcn.10067329
add esp, 4
mov eax, dword [0x1014d068]
mov ecx, dword [ebp - 0x187c]
cmp dword [ecx + eax], 8
jne 0x1001d5de
mov eax, dword [0x1014e66c]
lea ecx, [ebp - 0x4a50]
push ecx
mov ecx, dword [eax + 0x74]
call fcn.10002dc0
mov ecx, dword [ebp - 0x49a4]
mov esi, eax
lea eax, [ebp - 0x4a5c]
push eax
call fcn.10002dc0
movss xmm2, dword [esi]
lea ecx, [ebp - 0x4a10]
movss xmm1, dword [esi + 4]
movss xmm0, dword [esi + 8]
subss xmm2, dword [eax]
subss xmm1, dword [eax + 4]
subss xmm0, dword [eax + 8]
movss dword [ebp - 0x4a10], xmm2
movss dword [ebp - 0x4a0c], xmm1
movss dword [ebp - 0x4a08], xmm0
call fcn.100027b0
mov esi, dword [ebp - 0x49a4]
movss dword [ebp - 0x499c], xmm0
push 0x1860
lea eax, [ebp - 0x4990]
mov dword [ebp - 0x4998], 0
push 0
push eax
mov dword [ebp - 0x4994], 0
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x4990]
call fcn.10009d00
mov eax, dword [edi]
mov ecx, edi
mov dword [ebp - 0x3130], 0
mov eax, dword [eax + 8]
call eax
cmp dword [eax + 0x14], 0xf7
jne 0x1001dfc0
mov eax, dword [0x1014e66c]
mov ecx, dword [ebp - 0x49ac]
mov eax, dword [eax + 0x78]
mov dword [ebp - 0x187c], eax
mov eax, dword [0x1014d0a8]
cmp eax, dword [ecx + 4]
jle 0x1001d693
push 0x1014d0a8
call fcn.1006737a
add esp, 4
cmp dword [0x1014d0a8], 0xffffffff
jne 0x1001d693
push str.m_iItemDefinitionIndex
push str.CEconEntity
mov byte [ebp - 4], 5
call fcn.10063340
push 0x1014d0a8
mov dword [0x1014d030], eax
mov byte [ebp - 4], 0
call fcn.10067329
add esp, 4
mov eax, dword [0x1014d030]
mov ecx, dword [ebp - 0x187c]
cmp dword [ecx + eax], 0x1bf
jne 0x1001d77f
mov ecx, esi
call fcn.10053940
test al, al
jne 0x1001d77f
mov eax, dword [0x1014e68c]
cmp byte [eax + 0x100], 0
je 0x1001d77f
movss xmm0, dword [ebp - 0x499c]
movss xmm1, dword [0x10076ef4]
comiss xmm1, xmm0
jb 0x1001d77f
push 0x1860
lea eax, [ebp - 0x1878]
movss dword [ebp - 0x4998], xmm0
push 0
push eax
mov dword [ebp - 0x3130], esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x1878]
call fcn.10009d00
lea eax, [ebp - 0x1878]
push eax
lea ecx, [ebp - 0x4990]
call fcn.1000a3b0
mov eax, dword [ebp - 0x1884]
lea ecx, [ebp - 0x4998]
mov dword [ebp - 0x4994], 1
cmp eax, dword [ebp - 0x1880]
je 0x1001e14f
push 0x186c
push ecx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add dword [ebp - 0x1884], 0x186c
jmp 0x1001e15c
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, dword [0x1014d158]
jne 0x1001d172
mov al, 1
jmp 0x1001d174
mov eax, dword [edi]
mov ecx, edi
mov esi, dword [0x1014e678]
mov eax, dword [eax + 0x24]
call eax
lea eax, [eax + eax*4]
cmp dword [esi + eax*4 + 0x24], 2
jbe 0x1001e15c
mov eax, dword [edi]
mov ecx, edi
mov esi, dword [0x1014e678]
mov dword [ebp - 0x499c], 2
mov eax, dword [eax + 0x24]
call eax
lea eax, [eax + eax*4]
cmp dword [esi + eax*4 + 0x24], 2
jbe 0x1001e15c
mov eax, dword [edi]
mov ecx, edi
mov esi, dword [0x1014e678]
mov eax, dword [eax + 0x24]
call eax
mov ecx, dword [ebp - 0x499c]
lea edx, [eax + eax*4]
mov eax, dword [esi + edx*4 + 0x1c]
add ecx, dword [esi + edx*4 + 0x20]
dec eax
and ecx, eax
mov eax, dword [esi + edx*4 + 0x18]
mov esi, dword [eax + ecx*4]
mov dword [ebp - 0x49a8], esi
movss xmm1, dword [esi + 0x184c]
call fcn.10008db0
test al, al
je 0x1001df93
mov eax, dword [0x1014e66c]
lea ecx, [ebp - 0x4a68]
push ecx
mov ecx, dword [eax + 0x74]
call fcn.10002dc0
add esi, 0x3c
lea ecx, [ebp - 0x4a1c]
movss xmm2, dword [eax]
movss xmm1, dword [eax + 4]
movss xmm0, dword [eax + 8]
subss xmm2, dword [esi]
subss xmm1, dword [esi + 4]
subss xmm0, dword [esi + 8]
movss dword [ebp - 0x4a1c], xmm2
movss dword [ebp - 0x4a18], xmm1
movss dword [ebp - 0x4a14], xmm0
call fcn.100027b0
mov eax, dword [0x1014e66c]
mov ecx, dword fs:[0x2c]
movss dword [ebp - 0x49ac], xmm0
mov eax, dword [eax + 0x74]
mov dword [ebp - 0x187c], eax
mov eax, dword [0x1014d018]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x1014d070]
cmp eax, dword [ecx + 4]
jle 0x1001d8d7
push 0x1014d070
call fcn.1006737a
add esp, 4
cmp dword [0x1014d070], 0xffffffff
jne 0x1001d8cf
push str.m_iClass
push str.CTFPlayer
mov byte [ebp - 4], 6
call fcn.10063340
push 0x1014d070
mov dword [0x1014d068], eax
mov byte [ebp - 4], 0
call fcn.10067329
add esp, 4
movss xmm0, dword [ebp - 0x49ac]
mov eax, dword [0x1014d068]
mov ecx, dword [ebp - 0x187c]
cmp dword [ecx + eax], 8
je 0x1001d9fd
mov eax, dword [0x1014e66c]
lea ecx, [ebp - 0x4a74]
push ecx
mov ecx, dword [eax + 0x74]
call fcn.10002dc0
mov ecx, dword [0x1014e66c]
mov edi, dword fs:[0x2c]
mov edx, dword [0x1014d018]
mov dword [ebp - 0x18a8], eax
mov eax, dword [ecx + 0x74]
mov ecx, dword [0x1014d090]
mov dword [ebp - 0x187c], eax
mov eax, dword [edi + edx*4]
mov edi, dword [ebp - 0x49b4]
cmp ecx, dword [eax + 4]
jle 0x1001d978
push 0x1014d090
call fcn.1006737a
add esp, 4
cmp dword [0x1014d090], 0xffffffff
jne 0x1001d978
push str.m_vecVelocity_0_
push str.CBasePlayer
mov byte [ebp - 4], 7
call fcn.10063340
push 0x1014d090
mov dword [0x1014d0ac], eax
mov byte [ebp - 4], 0
call fcn.10067329
add esp, 4
mov eax, dword [0x1014e66c]
mov ecx, dword [0x1014d0ac]
mov eax, dword [eax + 0x2c]
movss xmm2, dword [eax + 0x1c]
mulss xmm2, dword [0x10076e80]
mov eax, dword [ebp - 0x187c]
movaps xmm1, xmm2
movaps xmm0, xmm2
mulss xmm1, dword [eax + ecx]
mulss xmm0, dword [eax + ecx + 4]
mulss xmm2, dword [eax + ecx + 8]
lea ecx, [ebp - 0x49f8]
mov eax, dword [ebp - 0x18a8]
addss xmm1, dword [eax]
addss xmm0, dword [eax + 4]
addss xmm2, dword [eax + 8]
subss xmm1, dword [esi]
subss xmm0, dword [esi + 4]
subss xmm2, dword [esi + 8]
movss dword [ebp - 0x49f8], xmm1
movss dword [ebp - 0x49f4], xmm0
movss dword [ebp - 0x49f0], xmm2
call fcn.100027b0
movss dword [ebp - 0x49ac], xmm0
movss xmm1, dword [0x10076ef4]
comiss xmm1, xmm0
jb 0x1001df93
mov eax, dword [0x1014e66c]
push esi
push ecx
lea ecx, [ebp - 0x4a2c]
push ecx
mov ecx, dword [eax + 0x74]
call fcn.10003380
add esp, 4
lea ecx, [ebp - 0x18a4]
mov edx, eax
call fcn.10002800
mov eax, dword [0x1014e68c]
add esp, 4
cmp byte [eax + 0xfe], 0
je 0x1001df20
mov edi, dword fs:[0x2c]
mov edx, dword [0x1014d018]
mov eax, dword [0x1014e66c]
mov ecx, dword [edi + edx*4]
mov eax, dword [eax + 0x74]
mov edi, dword [ebp - 0x49b4]
mov dword [ebp - 0x187c], eax
mov eax, dword [0x1014d070]
cmp eax, dword [ecx + 4]
jle 0x1001dab9
push 0x1014d070
call fcn.1006737a
add esp, 4
cmp dword [0x1014d070], 0xffffffff
jne 0x1001dab9
push str.m_iClass
push str.CTFPlayer
mov byte [ebp - 4], 8
call fcn.10063340
push 0x1014d070
mov dword [0x1014d068], eax
mov byte [ebp - 4], 0
call fcn.10067329
add esp, 4
mov eax, dword [0x1014d068]
mov ecx, dword [ebp - 0x187c]
cmp dword [ecx + eax], 8
jne 0x1001df20
mov eax, dword [0x1014e66c]
lea ecx, [ebp - 0x4a38]
push ecx
mov ecx, dword [eax + 0x74]
call fcn.10002dc0
movss xmm5, dword [esi]
movss xmm6, dword [esi + 4]
mov edx, dword [0x1014d018]
mov esi, dword fs:[0x2c]
subss xmm5, dword [eax]
subss xmm6, dword [eax + 4]
mov eax, dword [0x1014d108]
mov ecx, dword [esi + edx*4]
movss dword [ebp - 0x18ac], xmm5
movss dword [ebp - 0x18a8], xmm6
cmp eax, dword [ecx + 4]
jle 0x1001db70
push 0x1014d108
call fcn.1006737a
add esp, 4
cmp dword [0x1014d108], 0xffffffff
jne 0x1001db60
push str.m_angEyeAngles_0_
push str.CTFPlayer
mov byte [ebp - 4], 9
call fcn.10063340
push 0x1014d108
mov dword [0x1014d0f0], eax
mov byte [ebp - 4], 0
call fcn.10067329
add esp, 4
movss xmm6, dword [ebp - 0x18a8]
movss xmm5, dword [ebp - 0x18ac]
mov esi, dword [0x1014d0f0]
lea ecx, [ebp - 0x1894]
movss dword [ebp - 0x1894], xmm5
movss dword [ebp - 0x1890], xmm6
mov dword [ebp - 0x188c], 0
call fcn.100027b0
addss xmm0, dword [0x10076d88]
movss xmm7, dword [0x10076e28]
lea eax, [ebp - 0x49d8]
movss xmm1, dword [0x10076dc4]
mov dword [ebp - 0x18a8], eax
lea eax, [ebp - 0x4a20]
mov dword [ebp - 0x18ac], eax
divss xmm7, xmm0
movss xmm0, dword [ebp - 0x18a4]
mulss xmm5, xmm7
mulss xmm6, xmm7
mulss xmm7, dword [0x10076d7c]
mulss xmm0, xmm1
movss dword [ebp - 0x1894], xmm5
movss dword [ebp - 0x1890], xmm6
movss dword [ebp - 0x188c], xmm7
movss dword [ebp - 0x187c], xmm0
fld dword [ebp - 0x187c]
fsincos
mov edx, dword [ebp - 0x18a8]
mov eax, dword [ebp - 0x18ac]
fstp dword [edx]
fstp dword [eax]
movss xmm0, dword [ebp - 0x18a0]
lea eax, [ebp - 0x49d4]
mulss xmm0, xmm1
mov dword [ebp - 0x18a8], eax
lea eax, [ebp - 0x49dc]
mov dword [ebp - 0x18ac], eax
movss dword [ebp - 0x187c], xmm0
fld dword [ebp - 0x187c]
fsincos
mov edx, dword [ebp - 0x18a8]
mov eax, dword [ebp - 0x18ac]
fstp dword [edx]
fstp dword [eax]
movss xmm3, dword [ebp - 0x49d4]
lea ecx, [ebp - 0x49c4]
movss xmm4, dword [ebp - 0x49dc]
mulss xmm3, dword [ebp - 0x49d8]
mov dword [ebp - 0x49bc], 0
mulss xmm4, dword [ebp - 0x49d8]
movss dword [ebp - 0x49c4], xmm3
movss dword [ebp - 0x49c0], xmm4
call fcn.100027b0
addss xmm0, dword [0x10076d88]
movss xmm1, dword [0x10076e28]
lea eax, [ebp - 0x49e0]
mov ecx, dword [ebp - 0x49a4]
mov dword [ebp - 0x18b4], eax
lea eax, [ebp - 0x49ec]
mov dword [ebp - 0x1898], eax
divss xmm1, xmm0
movaps xmm0, xmm1
mulss xmm0, xmm3
movss dword [ebp - 0x18ac], xmm0
movss dword [ebp - 0x49c4], xmm0
movaps xmm0, xmm1
mulss xmm1, dword [0x10076d7c]
mulss xmm0, xmm4
movss dword [ebp - 0x187c], xmm1
movss dword [ebp - 0x49bc], xmm1
movss xmm1, dword [0x10076dc4]
movss dword [ebp - 0x18a8], xmm0
movss dword [ebp - 0x49c0], xmm0
movss xmm0, dword [esi + ecx]
mulss xmm0, xmm1
movss dword [ebp - 0x18b0], xmm0
fld dword [ebp - 0x18b0]
fsincos
mov edx, dword [ebp - 0x18b4]
mov eax, dword [ebp - 0x1898]
fstp dword [edx]
fstp dword [eax]
movss xmm0, dword [esi + ecx + 4]
lea eax, [ebp - 0x49e4]
mulss xmm0, xmm1
mov dword [ebp - 0x18b4], eax
lea eax, [ebp - 0x49e8]
mov dword [ebp - 0x18b0], eax
movss dword [ebp - 0x1898], xmm0
fld dword [ebp - 0x1898]
fsincos
mov edx, dword [ebp - 0x18b4]
mov eax, dword [ebp - 0x18b0]
fstp dword [edx]
fstp dword [eax]
movss xmm3, dword [ebp - 0x49e0]
lea ecx, [ebp - 0x49d0]
movaps xmm4, xmm3
mov dword [ebp - 0x49c8], 0
mulss xmm4, dword [ebp - 0x49e4]
mulss xmm3, dword [ebp - 0x49e8]
movss dword [ebp - 0x49d0], xmm4
movss dword [ebp - 0x49cc], xmm3
call fcn.100027b0
addss xmm0, dword [0x10076d88]
movss xmm2, dword [0x10076e28]
movaps xmm1, xmm6
mulss xmm1, dword [ebp - 0x18a8]
divss xmm2, xmm0
movaps xmm0, xmm5
mulss xmm0, dword [ebp - 0x18ac]
mulss xmm4, xmm2
addss xmm1, xmm0
mulss xmm3, xmm2
movss xmm0, dword [ebp - 0x187c]
mulss xmm2, dword [0x10076d7c]
mulss xmm0, xmm7
movss dword [ebp - 0x49d0], xmm4
movss dword [ebp - 0x49cc], xmm3
addss xmm1, xmm0
movss dword [ebp - 0x49c8], xmm2
movss xmm0, dword [0x10076e18]
comiss xmm0, xmm1
jae 0x1001dea5
movaps xmm0, xmm4
movaps xmm1, xmm3
mulss xmm0, xmm5
mulss xmm1, xmm6
addss xmm1, xmm0
movaps xmm0, xmm2
mulss xmm0, xmm7
addss xmm1, xmm0
movss xmm0, dword [0x10076db4]
comiss xmm0, xmm1
jae 0x1001dea5
mulss xmm3, dword [ebp - 0x18a8]
mulss xmm4, dword [ebp - 0x18ac]
mulss xmm2, dword [ebp - 0x187c]
movss xmm0, dword [0x10076fb4]
addss xmm3, xmm4
addss xmm3, xmm2
comiss xmm0, xmm3
jb 0x1001df20
push 0x1860
lea eax, [ebp - 0x62e8]
mov dword [ebp - 0x62f0], 0
push 0
push eax
mov dword [ebp - 0x62ec], 0
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x62e8]
call fcn.10009d00
mov eax, dword [ebp - 0x62ec]
lea ecx, [ebp - 0x4990]
movss xmm0, dword [ebp - 0x62f0]
mov dword [ebp - 0x4994], eax
lea eax, [ebp - 0x62e8]
push eax
mov dword [ebp - 0x4a88], 0
movss dword [ebp - 0x4998], xmm0
call fcn.1000a3b0
mov eax, dword [ebp - 0x4a88]
mov dword [ebp - 0x3130], eax
jmp 0x1001df93
movss xmm0, dword [ebp - 0x49ac]
lea ecx, [ebp - 0x4990]
mov eax, dword [ebp - 0x49a4]
push dword [ebp - 0x49a8]
movss dword [ebp - 0x4998], xmm0
mov dword [ebp - 0x3130], eax
call fcn.1000a3b0
mov eax, dword [ebp - 0x1884]
lea ecx, [ebp - 0x4998]
mov dword [ebp - 0x4994], 1
cmp eax, dword [ebp - 0x1880]
je 0x1001df86
push 0x186c
push ecx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add dword [ebp - 0x1884], 0x186c
jmp 0x1001df93
push ecx
push eax
lea ecx, [ebp - 0x1888]
call fcn.1001ec50
mov eax, dword [edi]
mov ecx, edi
inc dword [ebp - 0x499c]
mov esi, dword [0x1014e678]
mov eax, dword [eax + 0x24]
call eax
mov ecx, dword [ebp - 0x499c]
lea eax, [eax + eax*4]
cmp ecx, dword [esi + eax*4 + 0x24]
jb 0x1001d7c3
jmp 0x1001e15c
movss xmm0, dword [ebp - 0x499c]
comiss xmm0, dword [0x10076ef4]
ja 0x1001e15c
mov eax, dword [0x1014e68c]
cmp byte [eax + 0xff], 0
jne 0x1001dff2
mov ecx, esi
call fcn.10053940
test al, al
je 0x1001e15c
mov eax, dword [0x1014e66c]
mov ecx, dword [ebp - 0x49ac]
mov edi, dword [eax + 0x74]
mov eax, dword [0x1014d070]
cmp eax, dword [ecx + 4]
jle 0x1001e052
push 0x1014d070
call fcn.1006737a
add esp, 4
cmp dword [0x1014d070], 0xffffffff
jne 0x1001e04c
push str.m_iClass
push str.CTFPlayer
mov byte [ebp - 4], 0xa
call fcn.10063340
push 0x1014d070
mov dword [0x1014d068], eax
mov byte [ebp - 4], 0
call fcn.10067329
add esp, 4
mov ecx, dword [ebp - 0x49ac]
mov eax, dword [0x1014d068]
cmp dword [edi + eax], 9
jne 0x1001e15c
mov eax, dword [0x1014e66c]
mov edi, dword [eax + 0x20]
mov eax, dword [edi]
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x49a8], eax
mov eax, dword [0x1014d190]
cmp eax, dword [ecx + 4]
jle 0x1001e0c0
push 0x1014d190
call fcn.1006737a
add esp, 4
cmp dword [0x1014d190], 0xffffffff
jne 0x1001e0c0
push str.m_hBuilder
push str.CBaseObject
mov byte [ebp - 4], 0xb
call fcn.10063340
push 0x1014d190
mov dword [0x1014d1c4], eax
mov byte [ebp - 4], 0
call fcn.10067329
add esp, 4
mov eax, dword [0x1014d1c4]
mov ecx, edi
push dword [eax + esi]
call dword [ebp - 0x49a8]
mov edi, eax
test edi, edi
je 0x1001e15c
movss xmm0, dword [ebp - 0x499c]
lea eax, [ebp - 0x1878]
push 0x1860
push 0
push eax
movss dword [ebp - 0x4998], xmm0
mov dword [ebp - 0x3130], esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x1878]
call fcn.10009d00
lea eax, [ebp - 0x1878]
push eax
lea ecx, [ebp - 0x4990]
call fcn.1000a3b0
mov eax, dword [0x1014e66c]
xor ecx, ecx
cmp edi, dword [eax + 0x74]
mov eax, dword [ebp - 0x1884]
sete cl
inc ecx
mov dword [ebp - 0x4994], ecx
lea ecx, [ebp - 0x4998]
cmp eax, dword [ebp - 0x1880]
jne 0x1001d748
push ecx
push eax
lea ecx, [ebp - 0x1888]
call fcn.1001ec50
mov ecx, dword [ebp - 0x49a0]
mov esi, dword [ebp - 0x49b8]
add esi, 4
mov dword [ebp - 0x49b8], esi
cmp esi, ecx
jne 0x1001d200
mov ecx, dword [ebp - 0x1888]
mov esi, dword [ebp - 0x1884]
mov eax, 0x14f6fddf
push dword [ebp - 0x49ec]
sub esi, ecx
imul esi
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x1884]
push eax
call fcn.1001ee10
mov esi, dword [ebp - 0x1888]
add esp, 8
cmp esi, dword [ebp - 0x1884]
je 0x1001eb69
push 0x186c
lea eax, [ebp - 0x3128]
push esi
push eax
call sub.VCRUNTIME140.dll_memcpy
mov ecx, dword [ebp - 0x18c0]
add esp, 0xc
test ecx, ecx
je 0x1001eb69
movss xmm0, dword [ebp - 0x18d4]
comiss xmm0, dword [0x10076d7c]
jbe 0x1001e217
movq xmm0, qword [ebp - 0x30e4]
lea esi, [ebp - 0x18a4]
mov eax, dword [ebp - 0x30dc]
movq qword [ebp - 0x18a4], xmm0
mov dword [ebp - 0x189c], eax
jmp 0x1001e225
lea eax, [ebp - 0x4a38]
push eax
call fcn.10002dc0
mov esi, eax
mov ecx, dword [0x1014e66c]
lea eax, [ebp - 0x4a2c]
push eax
mov ecx, dword [ecx + 0x74]
call fcn.10003380
push esi
mov edx, eax
lea ecx, [ebp - 0x1894]
call fcn.10002800
add esp, 4
lea ecx, [ebp - 0x1894]
call fcn.10018540
mov eax, dword [0x1014e66c]
mov ecx, dword fs:[0x2c]
mov edi, dword [eax + 0x74]
mov eax, dword [0x1014d018]
mov esi, dword [ecx + eax*4]
mov eax, dword [0x1014d1dc]
cmp eax, dword [esi + 4]
jle 0x1001e2b9
push 0x1014d1dc
call fcn.1006737a
add esp, 4
cmp dword [0x1014d1dc], 0xffffffff
jne 0x1001e2b9
push str.m_fFlags
push str.CBasePlayer
mov byte [ebp - 4], 0xc
call fcn.10063340
push 0x1014d1dc
mov dword [0x1014d1d8], eax
mov byte [ebp - 4], 0
call fcn.10067329
add esp, 4
mov eax, dword [0x1014d1d8]
test byte [edi + eax], 1
jne 0x1001e342
mov eax, dword [0x1014e66c]
mov edi, dword [eax + 0x74]
mov eax, dword [0x1014d03c]
cmp eax, dword [esi + 4]
jle 0x1001e31c
push 0x1014d03c
call fcn.1006737a
add esp, 4
cmp dword [0x1014d03c], 0xffffffff
jne 0x1001e31c
push str.m_vecOrigin
push str.CBaseEntity
mov byte [ebp - 4], 0xd
call fcn.10063340
push 0x1014d03c
mov dword [0x1014d064], eax
mov byte [ebp - 4], 0
call fcn.10067329
add esp, 4
mov eax, dword [0x1014d064]
movss xmm0, dword [edi + eax + 8]
subss xmm0, dword [ebp - 0x3118]
comiss xmm0, dword [0x10076ed8]
jbe 0x1001e342
mov eax, dword [ebp - 0x49b0]
or dword [eax + 0x24], 4
mov eax, dword [0x1014e66c]
mov ecx, dword [0x1014d070]
mov edi, dword [eax + 0x74]
cmp ecx, dword [esi + 4]
jle 0x1001e39f
push 0x1014d070
call fcn.1006737a
mov ecx, dword [0x1014d070]
add esp, 4
cmp ecx, 0xffffffff
jne 0x1001e39f
push str.m_iClass
push str.CTFPlayer
mov byte [ebp - 4], 0xe
call fcn.10063340
push 0x1014d070
mov dword [0x1014d068], eax
mov byte [ebp - 4], 0
call fcn.10067329
mov ecx, dword [0x1014d070]
add esp, 4
mov eax, dword [0x1014d068]
cmp dword [edi + eax], 1
je 0x1001e670
mov eax, dword [0x1014e66c]
mov edi, dword [eax + 0x74]
cmp ecx, dword [esi + 4]
jle 0x1001e405
push 0x1014d070
call fcn.1006737a
mov ecx, dword [0x1014d070]
add esp, 4
cmp ecx, 0xffffffff
jne 0x1001e405
push str.m_iClass
push str.CTFPlayer
mov byte [ebp - 4], 0xf
call fcn.10063340
push 0x1014d070
mov dword [0x1014d068], eax
mov byte [ebp - 4], 0
call fcn.10067329
mov ecx, dword [0x1014d070]
add esp, 4
mov eax, dword [0x1014d068]
cmp dword [edi + eax], 3
je 0x1001e670
mov eax, dword [0x1014e66c]
mov edi, dword [eax + 0x74]
cmp ecx, dword [esi + 4]
jle 0x1001e46b
push 0x1014d070
call fcn.1006737a
mov ecx, dword [0x1014d070]
add esp, 4
cmp ecx, 0xffffffff
jne 0x1001e46b
push str.m_iClass
push str.CTFPlayer
mov byte [ebp - 4], 0x10
call fcn.10063340
push 0x1014d070
mov dword [0x1014d068], eax
mov byte [ebp - 4], 0
call fcn.10067329
mov ecx, dword [0x1014d070]
add esp, 4
mov eax, dword [0x1014d068]
cmp dword [edi + eax], 7
je 0x1001e670
mov eax, dword [0x1014e66c]
mov edi, dword [eax + 0x74]
cmp ecx, dword [esi + 4]
jle 0x1001e4d1
push 0x1014d070
call fcn.1006737a
mov ecx, dword [0x1014d070]
add esp, 4
cmp ecx, 0xffffffff
jne 0x1001e4d1
push str.m_iClass
push str.CTFPlayer
mov byte [ebp - 4], 0x11
call fcn.10063340
push 0x1014d070
mov dword [0x1014d068], eax
mov byte [ebp - 4], 0
call fcn.10067329
mov ecx, dword [0x1014d070]
add esp, 4
mov eax, dword [0x1014d068]
cmp dword [edi + eax], 4
je 0x1001e670
mov eax, dword [0x1014e66c]
mov edi, dword [eax + 0x74]
cmp ecx, dword [esi + 4]
jle 0x1001e537
push 0x1014d070
call fcn.1006737a
mov ecx, dword [0x1014d070]
add esp, 4
cmp ecx, 0xffffffff
jne 0x1001e537
push str.m_iClass
push str.CTFPlayer
mov byte [ebp - 4], 0x12
call fcn.10063340
push 0x1014d070
mov dword [0x1014d068], eax
mov byte [ebp - 4], 0
call fcn.10067329
mov ecx, dword [0x1014d070]
add esp, 4
mov eax, dword [0x1014d068]
cmp dword [edi + eax], 6
je 0x1001e670
mov eax, dword [0x1014e66c]
mov edi, dword [eax + 0x74]
cmp ecx, dword [esi + 4]
jle 0x1001e59d
push 0x1014d070
call fcn.1006737a
mov ecx, dword [0x1014d070]
add esp, 4
cmp ecx, 0xffffffff
jne 0x1001e59d
push str.m_iClass
push str.CTFPlayer
mov byte [ebp - 4], 0x13
call fcn.10063340
push 0x1014d070
mov dword [0x1014d068], eax
mov byte [ebp - 4], 0
call fcn.10067329
mov ecx, dword [0x1014d070]
add esp, 4
mov eax, dword [0x1014d068]
cmp dword [edi + eax], 9
je 0x1001e670
mov eax, dword [0x1014e66c]
mov edi, dword [eax + 0x74]
cmp ecx, dword [esi + 4]
jle 0x1001e603
push 0x1014d070
call fcn.1006737a
mov ecx, dword [0x1014d070]
add esp, 4
cmp ecx, 0xffffffff
jne 0x1001e603
push str.m_iClass
push str.CTFPlayer
mov byte [ebp - 4], 0x14
call fcn.10063340
push 0x1014d070
mov dword [0x1014d068], eax
mov byte [ebp - 4], 0
call fcn.10067329
mov ecx, dword [0x1014d070]
add esp, 4
mov eax, dword [0x1014d068]
cmp dword [edi + eax], 5
je 0x1001e670
mov eax, dword [0x1014e66c]
mov edi, dword [eax + 0x74]
cmp ecx, dword [esi + 4]
jle 0x1001e65d
push 0x1014d070
call fcn.1006737a
add esp, 4
cmp dword [0x1014d070], 0xffffffff
jne 0x1001e65d
push str.m_iClass
push str.CTFPlayer
mov byte [ebp - 4], 0x15
call fcn.10063340
push 0x1014d070
mov dword [0x1014d068], eax
mov byte [ebp - 4], 0
call fcn.10067329
add esp, 4
mov eax, dword [0x1014d068]
cmp dword [eax + edi], 2
je 0x1001e670
mov edi, dword [ebp - 0x49b0]
jmp 0x1001e688
mov eax, dword [0x1014e66c]
mov edi, dword [ebp - 0x49b0]
push edi
mov ecx, dword [eax + 0x78]
call fcn.10055d90
test al, al
je 0x1001e6af
movss xmm0, dword [ebp - 0x1894]
movss dword [edi + 0xc], xmm0
movss xmm0, dword [ebp - 0x1890]
movss dword [edi + 0x10], xmm0
movss xmm0, dword [ebp - 0x188c]
movss dword [edi + 0x14], xmm0
or dword [edi + 0x24], 1
mov ecx, dword [0x1014e66c]
mov eax, dword [edi + 0xc]
push edi
mov dword [ecx + 0x2bc], eax
mov eax, dword [edi + 0x10]
mov dword [ecx + 0x2c0], eax
mov eax, dword [edi + 0x14]
mov dword [ecx + 0x2c4], eax
mov eax, dword [0x1014e66c]
mov dword [eax + 0x2c8], 0x94
mov eax, dword [0x1014e66c]
mov ecx, dword [eax + 0x78]
call fcn.10055d90
test al, al
je 0x1001eb63
movss xmm0, dword [ebp - 0x18d4]
comiss xmm0, dword [0x10076d7c]
jbe 0x1001e9f9
mov eax, dword [0x1014d108]
mov edi, dword [ebp - 0x18c0]
cmp eax, dword [esi + 4]
jle 0x1001e760
push 0x1014d108
call fcn.1006737a
add esp, 4
cmp dword [0x1014d108], 0xffffffff
jne 0x1001e760
push str.m_angEyeAngles_0_
push str.CTFPlayer
mov byte [ebp - 4], 0x16
call fcn.10063340
push 0x1014d108
mov dword [0x1014d0f0], eax
mov byte [ebp - 4], 0
call fcn.10067329
add esp, 4
mov eax, dword [0x1014d0f0]
movss xmm0, dword [ebp - 0x3114]
movss dword [edi + eax], xmm0
movss xmm0, dword [ebp - 0x3110]
movss dword [edi + eax + 4], xmm0
movss xmm0, dword [ebp - 0x310c]
movss dword [edi + eax + 8], xmm0
mov eax, dword [0x1014d038]
mov edi, dword [ebp - 0x18c0]
cmp eax, dword [esi + 4]
jle 0x1001e7e0
push 0x1014d038
call fcn.1006737a
add esp, 4
cmp dword [0x1014d038], 0xffffffff
jne 0x1001e7e0
push str.m_vecMins
push str.CBaseEntity
mov byte [ebp - 4], 0x17
call fcn.10063340
push 0x1014d038
mov dword [0x1014d07c], eax
mov byte [ebp - 4], 0
call fcn.10067329
add esp, 4
mov eax, dword [0x1014d07c]
movss xmm0, dword [ebp - 0x3108]
movss dword [edi + eax], xmm0
movss xmm0, dword [ebp - 0x3104]
movss dword [edi + eax + 4], xmm0
movss xmm0, dword [ebp - 0x3100]
movss dword [edi + eax + 8], xmm0
mov eax, dword [0x1014d0a4]
mov edi, dword [ebp - 0x18c0]
cmp eax, dword [esi + 4]
jle 0x1001e860
push 0x1014d0a4
call fcn.1006737a
add esp, 4
cmp dword [0x1014d0a4], 0xffffffff
jne 0x1001e860
push str.m_vecMaxs
push str.CBaseEntity
mov byte [ebp - 4], 0x18
call fcn.10063340
push 0x1014d0a4
mov dword [0x1014d08c], eax
mov byte [ebp - 4], 0
call fcn.10067329
add esp, 4
mov eax, dword [0x1014d08c]
movss xmm0, dword [ebp - 0x30fc]
movss dword [edi + eax], xmm0
movss xmm0, dword [ebp - 0x30f8]
movss dword [edi + eax + 4], xmm0
movss xmm0, dword [ebp - 0x30f4]
movss dword [edi + eax + 8], xmm0
mov eax, dword [0x1014d090]
mov edi, dword [ebp - 0x18c0]
cmp eax, dword [esi + 4]
jle 0x1001e8e0
push 0x1014d090
call fcn.1006737a
add esp, 4
cmp dword [0x1014d090], 0xffffffff
jne 0x1001e8e0
push str.m_vecVelocity_0_
push str.CBasePlayer
mov byte [ebp - 4], 0x19
call fcn.10063340
push 0x1014d090
mov dword [0x1014d0ac], eax
mov byte [ebp - 4], 0
call fcn.10067329
add esp, 4
mov eax, dword [0x1014d0ac]
movss xmm0, dword [ebp - 0x30f0]
movss dword [eax + edi], xmm0
movss xmm0, dword [ebp - 0x30ec]
movss dword [eax + edi + 4], xmm0
movss xmm0, dword [ebp - 0x30e8]
movss dword [eax + edi + 8], xmm0
mov eax, dword [0x1014d10c]
mov edi, dword [ebp - 0x18c0]
cmp eax, dword [esi + 4]
jle 0x1001e960
push 0x1014d10c
call fcn.1006737a
add esp, 4
cmp dword [0x1014d10c], 0xffffffff
jne 0x1001e960
push str.m_flCycle
push str.CBaseAnimating
mov byte [ebp - 4], 0x1a
call fcn.10063340
push 0x1014d10c
mov dword [0x1014d0d4], eax
mov byte [ebp - 4], 0
call fcn.10067329
add esp, 4
mov eax, dword [0x1014d0d4]
movss xmm0, dword [ebp - 0x18d0]
movss dword [eax + edi], xmm0
mov eax, dword [0x1014e66c]
mov ecx, dword [eax + 0x14]
mov eax, dword [ecx]
mov eax, dword [eax + 0x120]
call eax
push 1
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x24]
mov dword [ebp - 0x49a8], ecx
mov ecx, eax
call dword [ebp - 0x49a8]
push ecx
fstp dword [ebp - 0x49a8]
movss xmm0, dword [ebp - 0x49a8]
lea eax, [ebp - 0x499c]
movss dword [esp], xmm0
push eax
lea eax, [ebp - 0x49a4]
mov dword [ebp - 0x499c], 0xffffffff
push eax
lea eax, [ebp - 0x30d8]
mov dword [ebp - 0x49a4], 0xaffffff
push eax
push dword [ebp - 0x18d8]
push dword [ebp - 0x18c0]
call fcn.10044de0
call fcn.10008900
addss xmm0, dword [ebp - 0x18d4]
jmp 0x1001eb41
mov ecx, dword [ebp - 0x18c0]
add ecx, 8
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
cmp dword [eax + 0x14], 0xf7
jne 0x1001eb63
push 0x1800
lea eax, [ebp - 0x1818]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [0x1014e66c]
lea edx, [ebp - 0x1818]
mov ecx, dword [ebp - 0x18c0]
add esp, 8
add ecx, 4
mov eax, dword [eax + 0x2c]
movss xmm0, dword [eax + 0xc]
mov eax, dword [ecx]
movss dword [esp], xmm0
push pe_nt_image_headers32
push 0x80
mov eax, dword [eax + 0x40]
push edx
call eax
mov eax, dword [0x1014e66c]
mov ecx, dword [eax + 0x14]
mov eax, dword [ecx]
mov eax, dword [eax + 0x120]
call eax
push 1
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x24]
mov dword [ebp - 0x49a8], ecx
mov ecx, eax
call dword [ebp - 0x49a8]
mov ecx, dword [ebp - 0x18c0]
add ecx, 4
mov dword [ebp - 0x499c], 0xffffffff
mov dword [ebp - 0x49a4], 0xaffffff
fstp dword [ebp - 0x49a8]
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
call eax
movss xmm0, dword [ebp - 0x49a8]
push ecx
movss dword [esp], xmm0
lea ecx, [ebp - 0x499c]
push ecx
lea ecx, [ebp - 0x49a4]
push ecx
lea ecx, [ebp - 0x1818]
push ecx
push eax
push dword [ebp - 0x18c0]
call fcn.10044de0
mov eax, dword [0x1014d114]
mov edi, dword [ebp - 0x18c0]
cmp eax, dword [esi + 4]
jle 0x1001eb31
push 0x1014d114
call fcn.1006737a
add esp, 4
cmp dword [0x1014d114], 0xffffffff
jne 0x1001eb31
push str.m_flSimulationTime
push str.CBaseEntity
mov byte [ebp - 4], 0x1b
call fcn.10063340
push 0x1014d114
mov dword [0x1014d0e8], eax
mov byte [ebp - 4], 0
call fcn.10067329
add esp, 4
mov esi, dword [0x1014d0e8]
call fcn.10008900
addss xmm0, dword [edi + esi]
mov eax, dword [0x1014e66c]
mov ecx, dword [ebp - 0x49b0]
mov eax, dword [eax + 0x2c]
divss xmm0, dword [eax + 0x1c]
addss xmm0, dword [0x10076e18]
cvttss2si eax, xmm0
mov dword [ecx + 8], eax
mov esi, dword [ebp - 0x1888]
test esi, esi
je 0x1001ebb6
mov ecx, dword [ebp - 0x1880]
mov eax, 0x14f6fddf
sub ecx, esi
imul ecx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x186c
mov eax, esi
cmp ecx, 0x1000
jb 0x1001ebac
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1001ebac
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push esi
call fcn.10067842
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100672f0
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4