Function at 0x1000e490
Capabilities:
Check for peb beingdebugged flag
Check os version

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006771c
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x150
mov eax, dword [0x1007c040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xc4], ecx
mov eax, dword [0x1014a63c]
cmp byte [eax + 0x9c], 0
je 0x1000fd7f
mov eax, dword [0x1014a61c]
mov edi, dword [eax + 0x80]
mov ecx, dword [eax + 0x84]
mov dword [ebp - 0xc0], edi
mov dword [ebp - 0xc8], ecx
cmp edi, ecx
je 0x1000fd7f
mov eax, ecx
mov ecx, dword [edi]
test ecx, ecx
je 0x1000fd6e
call fcn.10003060
test al, al
je 0x1000fd68
mov ecx, dword [edi]
add ecx, 8
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
call eax
test al, al
je 0x1000e574
mov eax, dword [0x1014a61c]
push edi
mov esi, dword [eax + 0x2c]
lea ecx, [eax + 0x1e4]
call fcn.10013330
movss xmm1, dword [esi + 0xc]
movd xmm0, dword [eax]
mov eax, dword [0x1014a63c]
cvtdq2ps xmm0, xmm0
subss xmm1, xmm0
movd xmm0, dword [eax + 0xa8]
cvtdq2ps xmm0, xmm0
comiss xmm1, xmm0
ja 0x1000fd68
mov ecx, dword [edi]
call fcn.10051d60
test al, al
jne 0x1000e616
mov eax, dword [0x1014a63c]
cmp byte [eax + 0xa6], 0
je 0x1000e616
mov eax, dword [0x10149018]
mov ecx, dword fs:[0x2c]
mov esi, dword [edi]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x1014a90c]
cmp eax, dword [ecx + 4]
jle 0x1000e5f8
push 0x1014a90c
call fcn.10065320
add esp, 4
cmp dword [0x1014a90c], 0xffffffff
jne 0x1000e5f8
mov edx, str.55_8B_EC_81_EC_________E8_________85_C0_74_7E_8B_4D_08_85_C9_74_77_A1_________83_78_08_00_74_6C_83_78_0C_00_74_66_A1_________83_C1_08_56_8B_30_8D_85_________50_8B_01
mov dword [ebp - 4], 0
mov ecx, str.client.dll
call fcn.1000d500
push 0x1014a90c
mov dword [0x1014a918], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100652cf
add esp, 4
push esi
call dword [0x1014a918]
test al, al
jne 0x1000e616
mov ecx, dword [0x1014a61c]
mov eax, dword [edi]
cmp eax, dword [ecx + 0x74]
jne 0x1000fd68
jmp 0x1000e61c
mov ecx, dword [0x1014a61c]
mov ecx, dword [ecx + 0x30]
mov eax, dword [ecx]
mov eax, dword [eax + 0x7c]
call eax
test eax, eax
jne 0x1000e63a
mov eax, dword [0x1014a61c]
mov ecx, dword [edi]
cmp ecx, dword [eax + 0x74]
je 0x1000fd68
mov eax, dword [0x1014a63c]
mov esi, dword [edi]
cmp byte [eax + 0xa7], 0
je 0x1000e66b
mov ecx, esi
call fcn.10051d60
test al, al
mov ecx, 0xff3296ff
mov eax, 0xff32ff32
cmove ecx, eax
mov dword [ebp - 0xb4], ecx
jmp 0x1000e75f
mov ecx, dword fs:[0x2c]
mov eax, dword [0x10149018]
mov edx, dword [ecx + eax*4]
mov ecx, dword [0x1014904c]
mov dword [ebp - 0xbc], edx
cmp ecx, dword [edx + 4]
jle 0x1000e6e1
push 0x1014904c
call fcn.10065320
mov ecx, dword [0x1014904c]
add esp, 4
cmp ecx, 0xffffffff
jne 0x1000e6db
push str.m_iTeamNum
push str.CBaseEntity
mov dword [ebp - 4], 1
call fcn.10061320
push 0x1014904c
mov dword [0x10149098], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100652cf
mov ecx, dword [0x1014904c]
add esp, 4
mov edx, dword [ebp - 0xbc]
mov eax, dword [0x10149098]
cmp dword [eax + esi], 2
jne 0x1000e6f3
mov esi, 0xff3c3cd7
jmp 0x1000e765
mov esi, dword [edi]
cmp ecx, dword [edx + 4]
jle 0x1000e742
push 0x1014904c
call fcn.10065320
add esp, 4
cmp dword [0x1014904c], 0xffffffff
jne 0x1000e742
push str.m_iTeamNum
push str.CBaseEntity
mov dword [ebp - 4], 2
call fcn.10061320
push 0x1014904c
mov dword [0x10149098], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100652cf
add esp, 4
mov ecx, dword [0x10149098]
mov eax, 0xffffc800
cmp dword [ecx + esi], 3
mov ecx, 0xff000000
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
mov esi, dword [ebp - 0xb4]
mov eax, dword [edi]
mov ecx, dword fs:[0x2c]
mov dword [ebp - 0xbc], eax
mov eax, dword [0x10149018]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x1014a90c]
cmp eax, dword [ecx + 4]
jle 0x1000e7ce
push 0x1014a90c
call fcn.10065320
add esp, 4
cmp dword [0x1014a90c], 0xffffffff
jne 0x1000e7ce
mov edx, str.55_8B_EC_81_EC_________E8_________85_C0_74_7E_8B_4D_08_85_C9_74_77_A1_________83_78_08_00_74_6C_83_78_0C_00_74_66_A1_________83_C1_08_56_8B_30_8D_85_________50_8B_01
mov dword [ebp - 4], 3
mov ecx, str.client.dll
call fcn.1000d500
push 0x1014a90c
mov dword [0x1014a918], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100652cf
add esp, 4
push dword [ebp - 0xbc]
call dword [0x1014a918]
test al, al
mov eax, 0xff00c301
cmovne esi, eax
mov eax, dword [0x1014a63c]
mov dword [ebp - 0xb4], esi
cmp byte [eax + 0xac], 0
je 0x1000e81c
mov ecx, dword [edi]
call fcn.10051d60
test al, al
je 0x1000e81c
mov ecx, dword [edi]
call fcn.100546b0
test al, al
jne 0x1000e81c
mov ecx, dword [ebp - 0xc4]
push esi
push dword [edi]
call fcn.10011f20
lea eax, [ebp - 0x24]
xorps xmm0, xmm0
push eax
push dword [edi]
movups xmmword [ebp - 0x24], xmm0
call fcn.1000dec0
test al, al
je 0x1000fd68
mov ecx, dword [edi]
add ecx, 8
mov dword [ebp - 0xd0], 0xffffffff
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
call eax
test al, al
je 0x1000e866
mov dword [ebp - 0x130], 0xffaaaaaa
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0xd0], eax
mov eax, dword [0x1014a63c]
cmp byte [eax + 0xa2], 0
je 0x1000e9be
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xb8], eax
mov eax, dword [0x1014a61c]
mov edi, dword [eax + 0x68]
mov eax, dword [edi]
mov esi, dword [eax + 0x2c]
mov eax, dword [ebp - 0xb4]
mov ecx, eax
mov edx, eax
shr ecx, 0x18
shr edx, 0x10
push ecx
movzx edx, dl
mov ecx, edi
push edx
mov edx, eax
movzx eax, al
shr edx, 8
movzx edx, dl
push edx
push eax
call esi
mov eax, dword [0x1014a61c]
mov esi, dword [ebp - 0x144]
mov edi, dword [ebp - 0xb8]
mov ecx, dword [eax + 0x68]
mov eax, dword [ecx]
mov edx, dword [eax + 0x38]
mov eax, dword [ebp - 0xbc]
add eax, esi
push eax
mov eax, dword [ebp - 0xcc]
add eax, edi
push eax
push esi
push edi
call edx
mov eax, dword [ebp - 0x18]
mov edi, dword [ebp - 0x20]
mov esi, dword [ebp - 0x24]
dec edi
mov dword [ebp - 0xb8], eax
dec esi
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xcc], eax
mov eax, dword [0x1014a61c]
push 0xc8
push 0
push 0
mov ecx, dword [eax + 0x68]
push 0
mov eax, dword [ecx]
mov eax, dword [eax + 0x2c]
call eax
mov eax, dword [0x1014a61c]
mov ecx, dword [eax + 0x68]
mov eax, dword [ecx]
mov edx, dword [eax + 0x38]
mov eax, dword [ebp - 0xb8]
add eax, 2
add eax, edi
push eax
mov eax, dword [ebp - 0xcc]
add eax, 2
add eax, esi
push eax
push edi
push esi
call edx
mov eax, dword [ebp - 0x18]
mov edi, dword [ebp - 0x20]
mov dword [ebp - 0xb8], eax
inc edi
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xcc], eax
mov eax, dword [0x1014a61c]
mov esi, dword [ebp - 0x24]
push 0xc8
push 0
mov ecx, dword [eax + 0x68]
inc esi
push 0
push 0
mov eax, dword [ecx]
mov eax, dword [eax + 0x2c]
call eax
mov eax, dword [0x1014a61c]
mov ecx, dword [eax + 0x68]
mov eax, dword [ecx]
mov edx, dword [eax + 0x38]
mov eax, dword [ebp - 0xb8]
add eax, 0xfffffffe
add eax, edi
push eax
mov eax, dword [ebp - 0xcc]
add eax, 0xfffffffe
add eax, esi
push eax
push edi
push esi
call edx
mov edi, dword [ebp - 0xc0]
mov eax, dword [0x1014a63c]
cmp byte [eax + 0xa3], 0
je 0x1000f037
mov ecx, dword [edi]
add ecx, 8
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
call eax
mov ecx, dword [ebp - 0xc4]
xorps xmm0, xmm0
comiss xmm0, dword [ecx + eax*4]
ja 0x1000ea20
mov ecx, dword [edi]
add ecx, 8
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
call eax
mov ecx, dword [edi]
mov esi, eax
mov edx, dword [ecx]
mov edx, dword [edx + 0x1ac]
call edx
movd xmm1, eax
mov eax, dword [ebp - 0xc4]
cvtdq2ps xmm1, xmm1
movss xmm0, dword [eax + esi*4]
comiss xmm0, xmm1
jbe 0x1000eab7
mov eax, dword [0x10149018]
mov ecx, dword fs:[0x2c]
mov esi, dword [edi]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x101490a0]
cmp eax, dword [ecx + 4]
jle 0x1000ea83
push 0x101490a0
call fcn.10065320
add esp, 4
cmp dword [0x101490a0], 0xffffffff
jne 0x1000ea83
push str.m_iHealth
push str.CBasePlayer
mov dword [ebp - 4], 4
call fcn.10061320
push 0x101490a0
mov dword [0x10149084], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100652cf
add esp, 4
mov eax, dword [0x10149084]
mov ecx, dword [edi]
add ecx, 8
movd xmm0, dword [eax + esi]
cvtdq2ps xmm0, xmm0
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
movss dword [ebp - 0xb8], xmm0
call eax
mov ecx, dword [ebp - 0xc4]
movss xmm0, dword [ebp - 0xb8]
movss dword [ecx + eax*4], xmm0
mov ecx, dword [edi]
add ecx, 8
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
call eax
mov ecx, dword fs:[0x2c]
mov dword [ebp - 0xb4], eax
mov eax, dword [edi]
mov dword [ebp - 0xb8], eax
mov eax, dword [0x10149018]
mov eax, dword [ecx + eax*4]
mov ecx, dword [0x101490a0]
cmp ecx, dword [eax + 4]
jle 0x1000eb3b
push 0x101490a0
call fcn.10065320
mov ecx, dword [0x101490a0]
add esp, 4
cmp ecx, 0xffffffff
jne 0x1000eb3b
push str.m_iHealth
push str.CBasePlayer
mov dword [ebp - 4], 5
call fcn.10061320
push 0x101490a0
mov dword [0x10149084], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100652cf
mov ecx, dword [0x101490a0]
add esp, 4
mov eax, dword [0x10149084]
mov esi, dword [ebp - 0xb8]
mov edx, dword [edi]
mov dword [ebp - 0xbc], edx
movd xmm1, dword [esi + eax]
mov esi, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xc4]
cvtdq2ps xmm1, xmm1
movss xmm0, dword [eax + esi*4]
comiss xmm0, xmm1
jbe 0x1000ec0e
mov eax, dword [edx]
mov ecx, edx
mov eax, dword [eax + 0x1ac]
call eax
mov ecx, dword [edi]
cmp eax, 0x1c3
mov eax, dword [ecx]
mov eax, dword [eax + 0x1ac]
jge 0x1000ebb9
call eax
add eax, eax
movd xmm1, eax
mov eax, dword [0x1014a61c]
cvtdq2ps xmm1, xmm1
mov eax, dword [eax + 0x2c]
mulss xmm1, dword [eax + 0x10]
mov eax, dword [ebp - 0xc4]
movss xmm0, dword [eax + esi*4]
subss xmm0, xmm1
jmp 0x1000ec90
call eax
mov ecx, dword [edi]
mov esi, eax
mov edx, dword [ecx]
mov edx, dword [edx + 0x1ac]
call edx
lea ecx, [esi + esi]
mov esi, dword [ebp - 0xb4]
movd xmm1, ecx
mov ecx, dword [0x1014a61c]
cvtdq2ps xmm1, xmm1
mov ecx, dword [ecx + 0x2c]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mov eax, dword [ebp - 0xc4]
mulss xmm1, dword [ecx + 0x10]
mulss xmm1, xmm0
movss xmm0, dword [eax + esi*4]
divss xmm1, dword [0x10073924]
subss xmm0, xmm1
jmp 0x1000ec90
mov edi, dword [0x10149018]
mov esi, dword fs:[0x2c]
mov eax, dword [esi + edi*4]
mov edi, dword [ebp - 0xc0]
mov esi, dword [ebp - 0xb4]
cmp ecx, dword [eax + 4]
jle 0x1000ec7d
push 0x101490a0
call fcn.10065320
add esp, 4
cmp dword [0x101490a0], 0xffffffff
jne 0x1000ec77
push str.m_iHealth
push str.CBasePlayer
mov dword [ebp - 4], 6
call fcn.10061320
push 0x101490a0
mov dword [0x10149084], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100652cf
add esp, 4
mov edx, dword [ebp - 0xbc]
mov eax, dword [0x10149084]
movd xmm0, dword [eax + edx]
mov eax, dword [ebp - 0xc4]
cvtdq2ps xmm0, xmm0
movss dword [eax + esi*4], xmm0
mov ecx, dword [edi]
mov eax, dword [ecx]
mov eax, dword [eax + 0x1ac]
call eax
xorps xmm2, xmm2
mov dword [ebp - 0x144], 0x3f800000
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0xb8], 0
lea edx, [ebp - 0xb8]
movd xmm0, eax
mov eax, dword [ebp - 0xc4]
cvtdq2ps xmm0, xmm0
movss xmm1, dword [eax + esi*4]
subss xmm0, xmm2
subss xmm1, xmm2
divss xmm1, xmm0
movd xmm0, dword [ebp - 0x18]
comiss xmm2, xmm1
cvtdq2ps xmm0, xmm0
seta al
test al, al
cmove edx, ecx
movss dword [ebp - 0xcc], xmm1
comiss xmm1, dword [0x10073814]
lea ecx, [ebp - 0x144]
seta al
test al, al
cmove ecx, edx
mulss xmm0, dword [ecx]
mov ecx, dword [edi]
movss dword [ebp - 0xbc], xmm0
mov eax, dword [ecx]
mov eax, dword [eax + 0x1ac]
call eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0xc4]
mov dword [ebp - 0xb8], ecx
push 0xb4
movd xmm1, ecx
mov ecx, dword [ebp - 0x20]
cvtdq2ps xmm1, xmm1
push 0
push 0
lea edi, [ecx - 1]
push 0
movd xmm0, ecx
subss xmm1, dword [ebp - 0xbc]
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
xor eax, eax
comiss xmm0, dword [edx + esi*4]
mov esi, dword [ebp - 0x24]
seta al
add esi, 0xfffffffa
movd xmm0, eax
mov eax, dword [0x1014a61c]
cvtdq2ps xmm0, xmm0
mov ecx, dword [eax + 0x68]
addss xmm1, xmm0
mov eax, dword [ecx]
mov eax, dword [eax + 0x2c]
movss dword [ebp - 0xb4], xmm1
call eax
mov eax, dword [0x1014a61c]
mov ecx, dword [eax + 0x68]
mov eax, dword [ecx]
mov edx, dword [eax + 0x30]
mov eax, dword [ebp - 0xb8]
add eax, 2
add eax, edi
push eax
lea eax, [esi + 4]
push eax
push edi
push esi
call edx
mov edi, dword [ebp - 0xc0]
mov ecx, dword [edi]
mov eax, dword [ecx]
mov eax, dword [eax + 0x1ac]
call eax
mov esi, dword fs:[0x2c]
mov edx, dword [0x10149018]
mov ecx, dword [0x101490a0]
mov edi, dword [edi]
mov dword [ebp - 0xb8], eax
mov eax, dword [esi + edx*4]
mov esi, dword [ebp - 0xb8]
cmp ecx, dword [eax + 4]
jle 0x1000ee40
push 0x101490a0
call fcn.10065320
add esp, 4
cmp dword [0x101490a0], 0xffffffff
jne 0x1000ee40
push str.m_iHealth
push str.CBasePlayer
mov dword [ebp - 4], 7
call fcn.10061320
push 0x101490a0
mov dword [0x10149084], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100652cf
add esp, 4
mov eax, dword [0x10149084]
push 0xb4
push 0x28
mov eax, dword [eax + edi]
cmp esi, eax
mov edi, 0xff
cmovl eax, esi
xor ecx, ecx
test eax, eax
cmovg ecx, eax
mov eax, esi
sub eax, ecx
imul eax, eax, 0x1fe
cdq
idiv esi
add eax, 0x82
cmp eax, 0xff
cmovg eax, edi
mov dword [ebp - 0xcc], eax
imul eax, ecx, 0x1fe
cdq
idiv esi
cvttss2si esi, dword [ebp - 0xb4]
cmp eax, edi
cmovg eax, edi
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0xb8], eax
add edi, 0xfffffffb
mov eax, dword [0x1014a61c]
mov ecx, dword [eax + 0x68]
mov eax, dword [ecx]
mov edx, dword [eax + 0x2c]
mov eax, dword [ebp - 0xb8]
movzx eax, al
push eax
mov eax, dword [ebp - 0xcc]
movzx eax, al
push eax
call edx
mov eax, dword [0x1014a61c]
mov ecx, dword [eax + 0x68]
mov eax, dword [ecx]
mov edx, dword [eax + 0x30]
cvttss2si eax, dword [ebp - 0xbc]
add eax, esi
push eax
lea eax, [edi + 2]
push eax
push esi
push edi
call edx
mov edx, dword [0x10149018]
mov esi, dword fs:[0x2c]
mov edi, dword [ebp - 0xc0]
mov ecx, dword [esi + edx*4]
mov eax, dword [edi]
mov dword [ebp - 0xb8], eax
mov eax, dword [0x101490a0]
cmp eax, dword [ecx + 4]
jle 0x1000ef55
push 0x101490a0
call fcn.10065320
add esp, 4
cmp dword [0x101490a0], 0xffffffff
jne 0x1000ef55
push str.m_iHealth
push str.CBasePlayer
mov dword [ebp - 4], 8
call fcn.10061320
push 0x101490a0
mov dword [0x10149084], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100652cf
add esp, 4
mov ecx, dword [edi]
mov esi, dword [0x10149084]
mov eax, dword [ecx]
mov eax, dword [eax + 0x1ac]
call eax
mov ecx, dword [ebp - 0xb8]
cmp dword [ecx + esi], eax
jge 0x1000f037
mov esi, dword [edi]
mov edi, dword fs:[0x2c]
mov edx, dword [0x10149018]
mov eax, dword [0x101490a0]
mov ecx, dword [edi + edx*4]
mov edi, dword [ebp - 0xc0]
cmp eax, dword [ecx + 4]
jle 0x1000efe0
push 0x101490a0
call fcn.10065320
add esp, 4
cmp dword [0x101490a0], 0xffffffff
jne 0x1000efe0
push str.m_iHealth
push str.CBasePlayer
mov dword [ebp - 4], 9
call fcn.10061320
push 0x101490a0
mov dword [0x10149084], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100652cf
add esp, 4
mov eax, dword [0x10149084]
movss xmm0, dword [ebp - 0xb4]
subss xmm0, dword [0x10073858]
mov dword [ebp - 0x134], 0xffffffff
mov edx, dword [eax + esi]
mov eax, dword [0x1014a61c]
mov esi, dword [ebp - 0x24]
push edx
push 0x1006d99c
mov ecx, dword [eax + 0x128]
add esi, 0xfffffffa
lea eax, [ebp - 0x134]
push eax
cvttss2si eax, xmm0
push ecx
push 4
push eax
push esi
push dword [0x1014a644]
call fcn.10003e50
add esp, 0x20
mov eax, dword [0x1014a63c]
cmp byte [eax + 0xa5], 0
je 0x1000fa06
mov ecx, dword [edi]
xor eax, eax
mov esi, dword [ebp - 0x20]
add ecx, 8
mov dword [ebp - 0xbc], eax
add esi, 0xfffffffe
mov dword [ebp - 0xb4], esi
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
call eax
test al, al
je 0x1000f0bd
mov eax, dword [0x1014a61c]
mov ecx, dword [ebp - 0x24]
add ecx, 3
mov dword [ebp - 0x138], 0xffaaf0dc
push str.DORMANT
mov edx, dword [eax + 0x13c]
mov eax, dword [ebp - 0x1c]
add eax, ecx
lea ecx, [ebp - 0x138]
push ecx
push edx
push 0
push esi
push eax
push dword [0x1014a644]
call fcn.10003a30
mov eax, dword [0x1014a61c]
add esp, 0x1c
mov eax, dword [eax + 0x130]
mov dword [ebp - 0xbc], eax
mov edi, dword [edi]
mov ecx, edi
mov eax, dword [edi]
mov eax, dword [eax + 0x1ac]
call eax
mov ecx, edi
mov esi, eax
call fcn.10002d40
cmp dword [eax], esi
jle 0x1000f1c3
mov edi, dword [ebp - 0xc0]
mov ecx, dword fs:[0x2c]
mov eax, dword [edi]
mov dword [ebp - 0xb8], eax
mov eax, dword [0x10149018]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x101490a0]
cmp eax, dword [ecx + 4]
jle 0x1000f14b
push 0x101490a0
call fcn.10065320
add esp, 4
cmp dword [0x101490a0], 0xffffffff
jne 0x1000f14b
push str.m_iHealth
push str.CBasePlayer
mov dword [ebp - 4], 0xa
call fcn.10061320
push 0x101490a0
mov dword [0x10149084], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100652cf
add esp, 4
mov ecx, dword [edi]
mov esi, dword [0x10149084]
mov eax, dword [ecx]
mov eax, dword [eax + 0x1ac]
call eax
mov ecx, dword [ebp - 0xb8]
mov edi, dword [ebp - 0xbc]
mov dword [ebp - 0xd4], 0xff96ff96
mov esi, dword [esi + ecx]
mov ecx, dword [ebp - 0x24]
sub esi, eax
mov eax, dword [0x1014a61c]
push esi
push str._i_HP
mov edx, dword [eax + 0x13c]
mov eax, dword [ebp - 0x1c]
add eax, 3
add ecx, eax
lea eax, [ebp - 0xd4]
push eax
mov eax, dword [ebp - 0xb4]
push edx
push 0
add eax, edi
push eax
push ecx
push dword [0x1014a644]
call fcn.10003a30
mov eax, dword [0x1014a61c]
add esp, 0x20
add edi, dword [eax + 0x130]
jmp 0x1000f1c9
mov edi, dword [ebp - 0xbc]
mov esi, dword [ebp - 0xc0]
mov ecx, dword [esi]
call fcn.1000db40
test al, al
je 0x1000f22c
mov eax, dword [0x1014a61c]
mov ecx, dword [ebp - 0x24]
push str.CLOAKED
mov dword [ebp - 0xd8], 0xffc8c8c8
mov edx, dword [eax + 0x13c]
mov eax, dword [ebp - 0x1c]
add eax, 3
add ecx, eax
lea eax, [ebp - 0xd8]
push eax
mov eax, dword [ebp - 0xb4]
push edx
push 0
add eax, edi
push eax
push ecx
push dword [0x1014a644]
call fcn.10003a30
mov eax, dword [0x1014a61c]
add esp, 0x1c
add edi, dword [eax + 0x130]
mov ecx, dword [esi]
call fcn.10002f20
mov eax, dword [eax]
shr eax, 5
test al, 1
je 0x1000f28e
mov eax, dword [0x1014a61c]
mov ecx, dword [ebp - 0x24]
push str.UBERCHARGE
mov dword [ebp - 0xdc], 0xffff6eff
mov edx, dword [eax + 0x13c]
mov eax, dword [ebp - 0x1c]
add eax, 3
add ecx, eax
lea eax, [ebp - 0xdc]
push eax
mov eax, dword [ebp - 0xb4]
push edx
push 0
add eax, edi
push eax
push ecx
push dword [0x1014a644]
call fcn.10003a30
mov eax, dword [0x1014a61c]
add esp, 0x1c
add edi, dword [eax + 0x130]
mov ecx, dword [esi]
call fcn.1000c6a0
test al, al
je 0x1000f2eb
mov eax, dword [0x1014a61c]
mov ecx, dword [ebp - 0x24]
push str.CRIT_BOOSTED
mov dword [ebp - 0xe0], 0xffff96ff
mov edx, dword [eax + 0x13c]
mov eax, dword [ebp - 0x1c]
add eax, 3
add ecx, eax
lea eax, [ebp - 0xe0]
push eax
mov eax, dword [ebp - 0xb4]
push edx
push 0
add eax, edi
push eax
push ecx
push dword [0x1014a644]
call fcn.10003a30
mov eax, dword [0x1014a61c]
add esp, 0x1c
add edi, dword [eax + 0x130]
mov ecx, dword [esi]
call fcn.10002f20
mov eax, dword [eax]
shr eax, 0xf
test al, 1
je 0x1000f34d
mov eax, dword [0x1014a61c]
mov ecx, dword [ebp - 0x24]
push str.SLOWED
mov dword [ebp - 0xe4], 0xff969696
mov edx, dword [eax + 0x13c]
mov eax, dword [ebp - 0x1c]
add eax, 3
add ecx, eax
lea eax, [ebp - 0xe4]
push eax
mov eax, dword [ebp - 0xb4]
push edx
push 0
add eax, edi
push eax
push ecx
push dword [0x1014a644]
call fcn.10003a30
mov eax, dword [0x1014a61c]
add esp, 0x1c
add edi, dword [eax + 0x130]
mov ecx, dword [esi]
call fcn.10002f20
test byte [eax], 1
je 0x1000f436
mov eax, dword [esi]
mov ecx, dword fs:[0x2c]
mov dword [ebp - 0xb8], eax
mov eax, dword [0x10149018]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x10149070]
cmp eax, dword [ecx + 4]
jle 0x1000f3c6
push 0x10149070
call fcn.10065320
add esp, 4
cmp dword [0x10149070], 0xffffffff
jne 0x1000f3c6
push str.m_iClass
push str.CTFPlayer
mov dword [ebp - 4], 0xb
call fcn.10061320
push 0x10149070
mov dword [0x10149068], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100652cf
add esp, 4
mov eax, dword [0x10149068]
mov esi, str.REVVED
mov ecx, dword [ebp - 0xb8]
mov dword [ebp - 0xe8], 0xff969696
cmp dword [eax + ecx], 6
mov eax, str.SLOWED
mov ecx, dword [ebp - 0x24]
cmovne esi, eax
mov eax, dword [0x1014a61c]
push esi
mov edx, dword [eax + 0x13c]
mov eax, dword [ebp - 0x1c]
add eax, 3
add ecx, eax
lea eax, [ebp - 0xe8]
push eax
mov eax, dword [ebp - 0xb4]
push edx
push 0
add eax, edi
push eax
push ecx
push dword [0x1014a644]
call fcn.10003a30
mov eax, dword [0x1014a61c]
add esp, 0x1c
mov esi, dword [ebp - 0xc0]
add edi, dword [eax + 0x130]
mov ecx, dword [esi]
call fcn.10002f20
mov eax, dword [eax]
shr eax, 0xe
test al, 1
je 0x1000f498
mov eax, dword [0x1014a61c]
mov ecx, dword [ebp - 0x24]
push str.BONKED
mov dword [ebp - 0xec], 0xff6e90ff
mov edx, dword [eax + 0x13c]
mov eax, dword [ebp - 0x1c]
add eax, 3
add ecx, eax
lea eax, [ebp - 0xec]
push eax
mov eax, dword [ebp - 0xb4]
push edx
push 0
add eax, edi
push eax
push ecx
push dword [0x1014a644]
call fcn.10003a30
mov eax, dword [0x1014a61c]
add esp, 0x1c
add edi, dword [eax + 0x130]
mov ecx, dword [esi]
call fcn.10002f20
mov eax, dword [eax]
shr eax, 1
test al, 1
je 0x1000f4f9
mov eax, dword [0x1014a61c]
mov ecx, dword [ebp - 0x24]
push str.ZOOMED
mov dword [ebp - 0xf0], 0xffffc832
mov edx, dword [eax + 0x13c]
mov eax, dword [ebp - 0x1c]
add eax, 3
add ecx, eax
lea eax, [ebp - 0xf0]
push eax
mov eax, dword [ebp - 0xb4]
push edx
push 0
add eax, edi
push eax
push ecx
push dword [0x1014a644]
call fcn.10003a30
mov eax, dword [0x1014a61c]
add esp, 0x1c
add edi, dword [eax + 0x130]
mov ecx, dword [esi]
call fcn.10002f20
mov eax, dword [eax]
shr eax, 7
test al, 1
je 0x1000f55b
mov eax, dword [0x1014a61c]
mov ecx, dword [ebp - 0x24]
push str.TAUNTING
mov dword [ebp - 0xf4], 0xffff64c8
mov edx, dword [eax + 0x13c]
mov eax, dword [ebp - 0x1c]
add eax, 3
add ecx, eax
lea eax, [ebp - 0xf4]
push eax
mov eax, dword [ebp - 0xb4]
push edx
push 0
add eax, edi
push eax
push ecx
push dword [0x1014a644]
call fcn.10003a30
mov eax, dword [0x1014a61c]
add esp, 0x1c
add edi, dword [eax + 0x130]
mov eax, dword [esi]
mov ecx, eax
mov dword [ebp - 0xbc], eax
call fcn.10002f20
test dword [eax], 0x1000000
jne 0x1000f598
mov ecx, dword [ebp - 0xbc]
call fcn.10002f20
test dword [eax], 0x40000000
jne 0x1000f598
mov ecx, dword [ebp - 0xbc]
call fcn.10002fc0
test dword [eax], 0x10000
je 0x1000f5ea
mov eax, dword [0x1014a61c]
mov ecx, dword [ebp - 0x24]
push str.MARKED
mov dword [ebp - 0xf8], 0xff32ffc8
mov edx, dword [eax + 0x13c]
mov eax, dword [ebp - 0x1c]
add eax, 3
add ecx, eax
lea eax, [ebp - 0xf8]
push eax
mov eax, dword [ebp - 0xb4]
push edx
push 0
add eax, edi
push eax
push ecx
push dword [0x1014a644]
call fcn.10003a30
mov eax, dword [0x1014a61c]
add esp, 0x1c
add edi, dword [eax + 0x130]
mov ecx, dword [esi]
call fcn.10002f20
mov eax, dword [eax]
shr eax, 0x1a
test al, 1
je 0x1000f64c
mov eax, dword [0x1014a61c]
mov ecx, dword [ebp - 0x24]
push str.BATTALIONS
mov dword [ebp - 0xfc], 0xffff8080
mov edx, dword [eax + 0x13c]
mov eax, dword [ebp - 0x1c]
add eax, 3
add ecx, eax
lea eax, [ebp - 0xfc]
push eax
mov eax, dword [ebp - 0xb4]
push edx
push 0
add eax, edi
push eax
push ecx
push dword [0x1014a644]
call fcn.10003a30
mov eax, dword [0x1014a61c]
add esp, 0x1c
add edi, dword [eax + 0x130]
mov ecx, dword [esi]
call fcn.10002f20
mov eax, dword [eax]
shr eax, 0x1d
test al, 1
je 0x1000f6ae
mov eax, dword [0x1014a61c]
mov ecx, dword [ebp - 0x24]
push str.CONCHEROR
mov dword [ebp - 0x13c], 0xff96ffff
mov edx, dword [eax + 0x13c]
mov eax, dword [ebp - 0x1c]
add eax, 3
add ecx, eax
lea eax, [ebp - 0x13c]
push eax
mov eax, dword [ebp - 0xb4]
push edx
push 0
add eax, edi
push eax
push ecx
push dword [0x1014a644]
call fcn.10003a30
mov eax, dword [0x1014a61c]
add esp, 0x1c
add edi, dword [eax + 0x130]
mov ecx, dword [esi]
call fcn.10002f20
test byte [eax + 2], 1
je 0x1000f70d
mov eax, dword [0x1014a61c]
mov ecx, dword [ebp - 0x24]
push str.BUFF_BANNER
mov dword [ebp - 0x140], 0xffff96ff
mov edx, dword [eax + 0x13c]
mov eax, dword [ebp - 0x1c]
add eax, 3
add ecx, eax
lea eax, [ebp - 0x140]
push eax
mov eax, dword [ebp - 0xb4]
push edx
push 0
add eax, edi
push eax
push ecx
push dword [0x1014a644]
call fcn.10003a30
mov eax, dword [0x1014a61c]
add esp, 0x1c
add edi, dword [eax + 0x130]
mov ecx, dword [esi]
call fcn.10002f20
test dword [eax], 0x90000
je 0x1000f76e
mov eax, dword [0x1014a61c]
mov ecx, dword [ebp - 0x24]
push str.MINI_CRIT
mov dword [ebp - 0x100], 0xffff96ff
mov edx, dword [eax + 0x13c]
mov eax, dword [ebp - 0x1c]
add eax, 3
add ecx, eax
lea eax, [ebp - 0x100]
push eax
mov eax, dword [ebp - 0xb4]
push edx
push 0
add eax, edi
push eax
push ecx
push dword [0x1014a644]
call fcn.10003a30
mov eax, dword [0x1014a61c]
add esp, 0x1c
add edi, dword [eax + 0x130]
mov ecx, dword [esi]
call fcn.10002f20
mov eax, dword [eax]
shr eax, 0x1b
test al, 1
je 0x1000f7d0
mov eax, dword [0x1014a61c]
mov ecx, dword [ebp - 0x24]
push str.MAD_MILK
mov dword [ebp - 0x104], 0xffffffff
mov edx, dword [eax + 0x13c]
mov eax, dword [ebp - 0x1c]
add eax, 3
add ecx, eax
lea eax, [ebp - 0x104]
push eax
mov eax, dword [ebp - 0xb4]
push edx
push 0
add eax, edi
push eax
push ecx
push dword [0x1014a644]
call fcn.10003a30
mov eax, dword [0x1014a61c]
add esp, 0x1c
add edi, dword [eax + 0x130]
mov ecx, dword [esi]
call fcn.10002f20
mov eax, dword [eax]
shr eax, 0x19
test al, 1
je 0x1000f832
mov eax, dword [0x1014a61c]
mov ecx, dword [ebp - 0x24]
push str.BLEEDING
mov dword [ebp - 0x108], 0xff3232ff
mov edx, dword [eax + 0x13c]
mov eax, dword [ebp - 0x1c]
add eax, 3
add ecx, eax
lea eax, [ebp - 0x108]
push eax
mov eax, dword [ebp - 0xb4]
push edx
push 0
add eax, edi
push eax
push ecx
push dword [0x1014a644]
call fcn.10003a30
mov eax, dword [0x1014a61c]
add esp, 0x1c
add edi, dword [eax + 0x130]
mov ecx, dword [esi]
call fcn.10002fc0
mov eax, dword [eax]
shr eax, 0x1a
test al, 1
je 0x1000f86f
mov eax, dword [0x1014a61c]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x10c], 0xffff6eff
push str.BULLET_CHARGE
mov edx, dword [eax + 0x13c]
mov eax, dword [ebp - 0x1c]
add eax, 3
add ecx, eax
lea eax, [ebp - 0x10c]
jmp 0x1000f8aa
mov ecx, dword [esi]
call fcn.10002fc0
mov eax, dword [eax]
shr eax, 0x1d
test al, 1
je 0x1000f8d1
mov eax, dword [0x1014a61c]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x110], 0xffffa0ff
push str.BULLET_RESISTANT
mov edx, dword [eax + 0x13c]
mov eax, dword [ebp - 0x1c]
add eax, 3
add ecx, eax
lea eax, [ebp - 0x110]
push eax
mov eax, dword [ebp - 0xb4]
push edx
push 0
add eax, edi
push eax
push ecx
push dword [0x1014a644]
call fcn.10003a30
mov eax, dword [0x1014a61c]
add esp, 0x1c
add edi, dword [eax + 0x130]
mov ecx, dword [esi]
call fcn.10002fc0
mov eax, dword [eax]
shr eax, 0x1b
test al, 1
je 0x1000f90e
mov eax, dword [0x1014a61c]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x114], 0xffff6eff
push str.EXPLOSIVE_CHARGE
mov edx, dword [eax + 0x13c]
mov eax, dword [ebp - 0x1c]
add eax, 3
add ecx, eax
lea eax, [ebp - 0x114]
jmp 0x1000f949
mov ecx, dword [esi]
call fcn.10002fc0
mov eax, dword [eax]
shr eax, 0x1e
test al, 1
je 0x1000f970
mov eax, dword [0x1014a61c]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x118], 0xffffa0ff
push str.EXPLOSIVE_RESISTANT
mov edx, dword [eax + 0x13c]
mov eax, dword [ebp - 0x1c]
add eax, 3
add ecx, eax
lea eax, [ebp - 0x118]
push eax
mov eax, dword [ebp - 0xb4]
push edx
push 0
add eax, edi
push eax
push ecx
push dword [0x1014a644]
call fcn.10003a30
mov eax, dword [0x1014a61c]
add esp, 0x1c
add edi, dword [eax + 0x130]
mov ecx, dword [esi]
call fcn.10002fc0
mov eax, dword [eax]
shr eax, 0x1c
test al, 1
je 0x1000f9ad
mov eax, dword [0x1014a61c]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x11c], 0xffff6eff
push str.FIRE_CHARGE
mov edx, dword [eax + 0x13c]
mov eax, dword [ebp - 0x1c]
add eax, 3
add ecx, eax
lea eax, [ebp - 0x11c]
jmp 0x1000f9e4
mov ecx, dword [esi]
call fcn.10002fc0
cmp dword [eax], 0
jge 0x1000fa00
mov eax, dword [0x1014a61c]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x120], 0xffffa0ff
push str.FIRE_RESISTANT
mov edx, dword [eax + 0x13c]
mov eax, dword [ebp - 0x1c]
add eax, 3
add ecx, eax
lea eax, [ebp - 0x120]
push eax
mov eax, dword [ebp - 0xb4]
push edx
push 0
add eax, edi
push eax
push ecx
push dword [0x1014a644]
call fcn.10003a30
add esp, 0x1c
mov edi, dword [ebp - 0xc0]
mov eax, dword [0x1014a63c]
cmp byte [eax + 0xa0], 0
je 0x1000fcfd
push 0x84
lea eax, [ebp - 0xb0]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [0x1014a61c]
add esp, 0xc
mov ecx, dword [edi]
add ecx, 8
mov esi, dword [eax + 0x14]
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
call eax
mov edx, dword [esi]
lea ecx, [ebp - 0xb0]
push ecx
push eax
mov ecx, esi
mov edx, dword [edx + 0x20]
call edx
test al, al
je 0x1000fcfd
mov eax, dword [0x10149018]
mov ecx, dword fs:[0x2c]
mov esi, dword [edi]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x1014a90c]
cmp eax, dword [ecx + 4]
jle 0x1000fabe
push 0x1014a90c
call fcn.10065320
add esp, 4
cmp dword [0x1014a90c], 0xffffffff
jne 0x1000fabe
mov edx, str.55_8B_EC_81_EC_________E8_________85_C0_74_7E_8B_4D_08_85_C9_74_77_A1_________83_78_08_00_74_6C_83_78_0C_00_74_66_A1_________83_C1_08_56_8B_30_8D_85_________50_8B_01
mov dword [ebp - 4], 0xc
mov ecx, str.client.dll
call fcn.1000d500
push 0x1014a90c
mov dword [0x1014a918], eax
mov dword [ebp - 4], 0xffffffff
call fcn.100652cf
add esp, 4
push esi
call dword [0x1014a918]
test al, al
je 0x1000faeb
mov eax, dword [0x1014a61c]
lea esi, [ebp - 0x124]
mov dword [ebp - 0x124], 0xff00c301
push str._FRIEND_
mov ecx, dword [eax + 0x114]
jmp 0x1000fb5e
mov ecx, dword [ebp - 0x68]
call fcn.100648b0
test al, al
je 0x1000fb22
mov eax, dword [0x1014a61c]
lea esi, [ebp - 0x128]
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x128], 0xff3278c8
push str._SUSPECT_
mov ecx, dword [eax + 0x114]
sub edx, dword [eax + 0x11c]
jmp 0x1000fb67
mov ecx, dword [edi]
mov esi, dword [0x1014a64c]
add ecx, 8
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
call eax
imul eax, eax, 0x4c
cmp byte [eax + esi + 0x10], 0
je 0x1000fb9e
mov eax, dword [0x1014a61c]
lea esi, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0xff3232ff
push str._CHEATER_
mov ecx, dword [eax + 0x128]
mov edx, dword [ebp - 0x20]
sub edx, dword [eax + 0x108]
movd xmm1, dword [ebp - 0x1c]
sub edx, 0xc
movd xmm0, dword [ebp - 0x24]
cvtdq2ps xmm1, xmm1
push esi
push ecx
push 2
push edx
cvtdq2ps xmm0, xmm0
mulss xmm1, dword [0x10073808]
addss xmm1, xmm0
cvttss2si eax, xmm1
push eax
push dword [0x1014a644]
call fcn.10003a30
add esp, 0x1c
lea ecx, [ebp - 0xb0]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000fba7
push 0
push 0
sub ecx, edx
lea eax, [ebp - 0xb0]
push ecx
push eax
push 0
push 0xfde9
mov dword [ebp - 0xb8], ecx
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov esi, eax
mov dword [ebp - 0x14c], 0
push esi
xorps xmm0, xmm0
mov dword [ebp - 0x148], 0
push ecx
lea ecx, [ebp - 0x15c]
movups xmmword [ebp - 0x15c], xmm0
call fcn.10013480
cmp dword [ebp - 0x148], 7
lea eax, [ebp - 0x15c]
push esi
cmova eax, dword [ebp - 0x15c]
push eax
push dword [ebp - 0xb8]
lea eax, [ebp - 0xb0]
push eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 4], 0xd
lea esi, [ebp - 0x15c]
movd xmm1, dword [ebp - 0x1c]
movd xmm0, dword [ebp - 0x24]
mov eax, dword [0x1014a61c]
cmp dword [ebp - 0x148], 7
mov edx, dword [ebp - 0x20]
cmova esi, dword [ebp - 0x15c]
mov ecx, dword [eax + 0x114]
sub edx, dword [eax + 0x108]
cvtdq2ps xmm1, xmm1
push esi
lea esi, [ebp - 0xd0]
sub edx, 2
push esi
push ecx
cvtdq2ps xmm0, xmm0
push 2
push edx
mulss xmm1, dword [0x10073808]
addss xmm1, xmm0
cvttss2si eax, xmm1
push eax
push dword [0x1014a644]
call fcn.10003e50
mov dword [ebp - 4], 0xffffffff
add esp, 0x1c
mov ecx, dword [ebp - 0x148]
cmp ecx, 7
jbe 0x1000fce0
mov edx, dword [ebp - 0x15c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000fcd6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000fd9d
push ecx
push edx
call fcn.100657e8
add esp, 8
xor eax, eax
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x148], 7
mov word [ebp - 0x15c], ax
mov eax, dword [0x1014a63c]
cmp byte [eax + 0xa4], 0
je 0x1000fd68
mov ecx, dword [edi]
call fcn.10051e90
test eax, eax
je 0x1000fd68
mov ecx, dword [edi]
call fcn.100523f0
movd xmm1, dword [ebp - 0x1c]
movd xmm0, dword [ebp - 0x24]
push eax
cvtdq2ps xmm1, xmm1
lea eax, [ebp - 0xd0]
push eax
mov eax, dword [0x1014a61c]
cvtdq2ps xmm0, xmm0
push dword [eax + 0x13c]
mulss xmm1, dword [0x10073808]
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x18]
push 2
addss xmm1, xmm0
push eax
cvttss2si eax, xmm1
push eax
push dword [0x1014a644]
call fcn.10003a30
add esp, 0x1c
mov eax, dword [ebp - 0xc8]
add edi, 4
mov dword [ebp - 0xc0], edi
cmp edi, eax
jne 0x1000e510
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.10065296
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3