Function at 0x10096130
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x10195a91
push eax
mov dword fs:[0], esp
sub esp, 0x84
cmp byte [0x10315da8], 0
je 0x10096a8a
cmp byte [0x1031097c], 0
je 0x10096a8a
push edi
mov edi, dword [ebp + 8]
test edi, edi
je 0x10096a89
mov eax, dword [0x1024d1e0]
mov dword [ebp - 0x74], eax
test eax, eax
je 0x10096a89
push esi
mov esi, dword [0x1024d1e4]
mov dword [ebp - 0x78], esi
test esi, esi
je 0x10096a88
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax + 0x550]
call eax
test al, 2
je 0x10096a88
mov edx, esi
mov ecx, edi
call fcn.10094ef0
test al, al
je 0x10096a88
mov ecx, esi
call fcn.10094a50
xorps xmm1, xmm1
movss dword [ebp - 0x8c], xmm0
comiss xmm1, xmm0
movss dword [ebp - 0x24], xmm1
jae 0x10096a88
mov ecx, esi
call fcn.100949a0
test eax, eax
je 0x10096a88
mov edi, dword [eax + 0x6fc]
mov eax, dword fs:[0x2c]
mov ecx, dword [0x1024f340]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x1024f78c]
mov dword [ebp - 0x20], ecx
cmp eax, dword [ecx + 4]
jle 0x1009625d
push 0x1024f78c
call fcn.101928b8
add esp, 4
cmp dword [0x1024f78c], 0xffffffff
jne 0x1009625d
mov dword [ebp - 4], 0
mov eax, dword [0x1024cedc]
test eax, eax
jne 0x10096244
mov ecx, 0x1024cedc
call fcn.1018f6d0
mov eax, dword [0x1024cedc]
push 0x1024f78c
mov dword [0x103106e8], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10192867
add esp, 4
mov eax, dword [0x103106e8]
push 1
push 0
movd xmm0, edi
cvtdq2ps xmm0, xmm0
push esi
push str.mult_bullets_per_shot
push ecx
mov dword [ebp - 0x10], eax
movss dword [esp], xmm0
call dword [ebp - 0x10]
xor esi, esi
xor edi, edi
fstp dword [ebp - 0x30]
cvttss2si eax, dword [ebp - 0x30]
add esp, 0x14
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x68], esi
mov dword [ebp - 4], 1
mov dword [ebp - 0x3c], esi
movss xmm3, dword [ebp - 0x24]
movss xmm0, dword [0x10310980]
movaps xmm5, xmm3
movss dword [ebp - 0x2c], xmm5
movaps xmm4, xmm3
movss dword [ebp - 0x28], xmm4
addss xmm0, dword [0x10310984]
addss xmm0, dword [0x10310978]
mulss xmm0, dword [0x10237a18]
movss dword [ebp - 0x10], xmm0
movzx ecx, byte [ebp - 0x10]
test eax, eax
jle 0x100968dd
mov edi, dword [ebp - 0x20]
nop word [eax + eax]
mov eax, dword [0x103108ec]
mov dword [ebp - 0x10], ecx
inc ecx
mov dword [ebp - 0x34], ecx
cmp eax, dword [edi + 4]
jle 0x10096343
push 0x103108ec
call fcn.101928b8
add esp, 4
cmp dword [0x103108ec], 0xffffffff
jne 0x10096343
push str.RandomSeed
push str.vstdlib.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x103108ec
mov dword [0x103108a0], eax
call fcn.10192867
add esp, 4
push dword [ebp - 0x10]
call dword [0x103108a0]
add esp, 4
cmp dword [ebp - 0x3c], 0
jne 0x1009644c
mov eax, dword [0x103108c0]
cmp eax, dword [edi + 4]
jle 0x100963a5
push 0x103108c0
call fcn.101928b8
add esp, 4
cmp dword [0x103108c0], 0xffffffff
jne 0x100963a5
mov edx, str.m_nTickBase
mov byte [ebp - 4], 2
mov ecx, str.CBasePlayer
call fcn.10071b90
push 0x103108c0
mov dword [0x103108d0], eax
mov byte [ebp - 4], 1
call fcn.10192867
add esp, 4
mov eax, dword [0x103108d0]
mov dword [ebp - 0x10], eax
mov eax, dword [0x103108c8]
cmp eax, dword [edi + 4]
jle 0x100963fe
push 0x103108c8
call fcn.101928b8
add esp, 4
cmp dword [0x103108c8], 0xffffffff
jne 0x100963fe
push str.m_flLastFireTime
push str.LocalActiveTFWeaponData
push str.DT_TFWeaponBase
mov byte [ebp - 4], 3
call fcn.100757e0
push 0x103108c8
mov dword [0x1031089c], eax
mov byte [ebp - 4], 1
call fcn.10192867
add esp, 4
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x74]
movd xmm0, dword [eax + ecx]
mov eax, dword [0x1024f710]
mov ecx, dword [ebp - 0x78]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [eax + 0x1c]
mov eax, dword [0x1031089c]
subss xmm0, dword [eax + ecx]
cvttss2si eax, dword [ebp - 0x30]
cmp eax, 1
jle 0x1009643d
comiss xmm0, dword [0x1023771c]
ja 0x10096a80
cmp eax, 1
jne 0x1009644c
comiss xmm0, dword [0x102377bc]
ja 0x10096a80
mov eax, dword [0x10310884]
cmp eax, dword [edi + 4]
jle 0x10096498
push 0x10310884
call fcn.101928b8
add esp, 4
cmp dword [0x10310884], 0xffffffff
jne 0x10096498
push str.RandomFloat
push str.vstdlib.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x10310884
mov dword [0x103108e0], eax
call fcn.10192867
add esp, 4
mov eax, dword [0x103108e0]
sub esp, 8
mov dword [ebp - 0x10], eax
mov dword [esp + 4], 0x3f000000
mov dword [esp], 0xbf000000
call dword [ebp - 0x10]
mov eax, dword [0x10310884]
add esp, 8
fstp dword [ebp - 0x14]
cmp eax, dword [edi + 4]
jle 0x10096507
push 0x10310884
call fcn.101928b8
add esp, 4
cmp dword [0x10310884], 0xffffffff
jne 0x10096507
push str.RandomFloat
push str.vstdlib.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x10310884
mov dword [0x103108e0], eax
call fcn.10192867
add esp, 4
mov eax, dword [0x103108e0]
sub esp, 8
mov dword [ebp - 0x10], eax
mov dword [esp + 4], 0x3f000000
mov dword [esp], 0xbf000000
call dword [ebp - 0x10]
fadd dword [ebp - 0x14]
mov eax, dword [0x10310884]
add esp, 8
fstp dword [ebp - 0x88]
cmp eax, dword [edi + 4]
jle 0x1009657c
push 0x10310884
call fcn.101928b8
add esp, 4
cmp dword [0x10310884], 0xffffffff
jne 0x1009657c
push str.RandomFloat
push str.vstdlib.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x10310884
mov dword [0x103108e0], eax
call fcn.10192867
add esp, 4
mov eax, dword [0x103108e0]
sub esp, 8
mov dword [ebp - 0x10], eax
mov dword [esp + 4], 0x3f000000
mov dword [esp], 0xbf000000
call dword [ebp - 0x10]
mov eax, dword [0x10310884]
add esp, 8
fstp dword [ebp - 0x14]
cmp eax, dword [edi + 4]
jle 0x100965eb
push 0x10310884
call fcn.101928b8
add esp, 4
cmp dword [0x10310884], 0xffffffff
jne 0x100965eb
push str.RandomFloat
push str.vstdlib.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x10310884
mov dword [0x103108e0], eax
call fcn.10192867
add esp, 4
mov eax, dword [0x103108e0]
sub esp, 8
mov dword [ebp - 0x10], eax
mov dword [esp + 4], 0x3f000000
mov dword [esp], 0xbf000000
call dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x20]
fadd dword [ebp - 0x14]
add esp, 8
add ecx, 0xc
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x10], ecx
movss xmm1, dword [0x102376d0]
movss xmm0, dword [ecx]
mulss xmm0, xmm1
mov dword [ebp - 0x18], eax
fstp dword [ebp - 0x40]
movss dword [ebp - 0x14], xmm0
fld dword [ebp - 0x14]
fsincos
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
fstp dword [edx]
fstp dword [eax]
movss xmm0, dword [ecx + 4]
lea eax, [ebp - 0x7c]
mulss xmm0, xmm1
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x80]
mov dword [ebp - 0x18], eax
movss dword [ebp - 0x14], xmm0
fld dword [ebp - 0x14]
fsincos
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
fstp dword [edx]
fstp dword [eax]
movss xmm0, dword [ecx + 8]
lea eax, [ebp - 0x38]
mulss xmm0, xmm1
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x84]
mov dword [ebp - 0x18], eax
movss dword [ebp - 0x14], xmm0
fld dword [ebp - 0x14]
fsincos
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
fstp dword [edx]
fstp dword [eax]
movss xmm7, dword [ebp - 0x7c]
movss xmm5, dword [ebp - 0x20]
movaps xmm0, xmm7
movss xmm6, dword [ebp - 0x80]
mulss xmm0, xmm5
movaps xmm3, xmm6
xorps xmm3, xmmword [0x10237e40]
movss xmm4, dword [ebp - 0x84]
movss dword [ebp - 0x90], xmm0
movaps xmm1, xmm4
mulss xmm1, dword [ebp - 0x58]
movaps xmm0, xmm6
mulss xmm0, xmm5
movss dword [ebp - 0x44], xmm0
movss xmm0, dword [ebp - 0x58]
xorps xmm0, xmmword [0x10237e40]
movss dword [ebp - 0x48], xmm0
movss xmm0, dword [ebp - 0x38]
mulss xmm0, dword [0x10237ab8]
movss dword [ebp - 0x18], xmm0
movaps xmm0, xmm3
mulss xmm0, dword [ebp - 0x18]
mulss xmm3, xmm4
movss dword [ebp - 0x1c], xmm0
movaps xmm0, xmm1
movss xmm2, dword [ebp - 0x1c]
mulss xmm0, xmm7
mulss xmm1, xmm6
subss xmm2, xmm0
movss xmm0, dword [ebp - 0x18]
mulss xmm0, xmm7
subss xmm0, xmm1
movss dword [ebp - 0x1c], xmm2
movss dword [ebp - 0x18], xmm0
movaps xmm0, xmm4
mulss xmm0, dword [0x10237ab8]
mulss xmm0, xmm5
movss xmm5, dword [ebp - 0x38]
mulss xmm5, dword [ebp - 0x58]
movss dword [ebp - 0x14], xmm0
movaps xmm2, xmm5
mulss xmm5, xmm6
mulss xmm2, xmm7
subss xmm2, xmm3
movss xmm1, dword [ebp - 0x88]
movss xmm0, dword [ebp - 0x40]
movss xmm6, dword [ebp - 0x18]
mulss xmm4, xmm7
movss xmm7, dword [ebp - 0x8c]
movss xmm3, dword [ebp - 0x38]
mulss xmm3, dword [ebp - 0x20]
subss xmm5, xmm4
movss xmm4, dword [ebp - 0x1c]
mulss xmm4, xmm1
mulss xmm2, xmm0
mulss xmm4, xmm7
mulss xmm6, xmm1
addss xmm4, dword [ebp - 0x90]
mulss xmm2, xmm7
mulss xmm5, xmm0
addss xmm4, xmm2
mulss xmm6, xmm7
movss xmm2, dword [ebp - 0x14]
mulss xmm2, xmm1
addss xmm6, dword [ebp - 0x44]
mulss xmm3, xmm0
movaps xmm1, xmm4
mulss xmm5, xmm7
mulss xmm2, xmm7
addss xmm6, xmm5
mulss xmm3, xmm7
addss xmm2, dword [ebp - 0x48]
mulss xmm1, xmm4
movaps xmm0, xmm6
movss dword [ebp - 0x1c], xmm4
mulss xmm0, xmm6
addss xmm2, xmm3
movss dword [ebp - 0x18], xmm6
addss xmm0, xmm1
movaps xmm1, xmm2
movss dword [ebp - 0x14], xmm2
mulss xmm1, xmm2
addss xmm0, xmm1
call fcn.1006f270
addss xmm0, dword [0x1023766c]
movss xmm1, dword [0x10237798]
movss xmm3, dword [ebp - 0x24]
divss xmm1, xmm0
movaps xmm2, xmm1
movaps xmm4, xmm1
mulss xmm2, dword [ebp - 0x1c]
mulss xmm4, dword [ebp - 0x18]
movaps xmm0, xmm2
mulss xmm1, dword [ebp - 0x14]
addss xmm0, dword [ebp - 0x28]
movss dword [ebp - 0x54], xmm2
movss dword [ebp - 0x50], xmm4
movss dword [ebp - 0x4c], xmm1
movss dword [ebp - 0x28], xmm0
movaps xmm0, xmm4
addss xmm0, dword [ebp - 0x2c]
movss dword [ebp - 0x2c], xmm0
movaps xmm0, xmm1
addss xmm3, xmm0
movss dword [ebp - 0x24], xmm3
cmp esi, dword [ebp - 0x68]
je 0x100968a2
movss dword [esi], xmm2
movss dword [esi + 4], xmm4
movss dword [esi + 8], xmm1
add esi, 0xc
mov dword [ebp - 0x6c], esi
jmp 0x100968b2
lea eax, [ebp - 0x54]
push eax
push esi
lea ecx, [ebp - 0x70]
call fcn.100973a0
mov esi, dword [ebp - 0x6c]
cvttss2si eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x3c]
inc ecx
mov dword [ebp - 0x3c], ecx
cmp ecx, eax
mov ecx, dword [ebp - 0x34]
jl 0x100962f0
mov edi, dword [ebp - 0x70]
movss xmm3, dword [ebp - 0x24]
movss xmm4, dword [ebp - 0x28]
movss xmm5, dword [ebp - 0x2c]
jmp 0x100968eb
mov eax, dword [ebp + 8]
add eax, 0xc
mov dword [ebp - 0x10], eax
cvttss2si eax, dword [ebp - 0x30]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm4, xmm0
divss xmm5, xmm0
movss dword [ebp - 0x28], xmm4
movss dword [ebp - 0x2c], xmm5
divss xmm3, xmm0
movss xmm0, dword [0x10237a80]
movss dword [ebp - 0x24], xmm3
movaps xmm1, xmm0
movss dword [ebp - 0x20], xmm0
movaps xmm2, xmm0
movss dword [ebp - 0x64], xmm0
movss dword [ebp - 0x60], xmm1
movss dword [ebp - 0x5c], xmm2
cmp edi, esi
je 0x10096a16
nop word [eax + eax]
subss xmm0, xmm4
subss xmm2, xmm3
subss xmm1, xmm5
movss dword [ebp - 0x48], xmm0
movss xmm0, dword [edi]
movss dword [ebp - 0x44], xmm2
subss xmm0, xmm4
movss xmm2, dword [edi + 4]
subss xmm2, xmm5
movss dword [ebp - 0x34], xmm1
movss xmm1, dword [edi + 8]
subss xmm1, xmm3
mulss xmm0, xmm0
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm0, xmm2
addss xmm0, xmm1
call fcn.1006f270
movss xmm1, dword [ebp - 0x34]
movss dword [ebp - 0x40], xmm0
movss xmm0, dword [ebp - 0x48]
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm1, xmm0
movss xmm0, dword [ebp - 0x44]
mulss xmm0, xmm0
addss xmm0, xmm1
call fcn.1006f270
comiss xmm0, dword [ebp - 0x40]
jbe 0x100969e5
movss xmm0, dword [edi]
movss xmm1, dword [edi + 4]
movss xmm2, dword [edi + 8]
movss dword [ebp - 0x20], xmm0
movss dword [ebp - 0x64], xmm0
movss dword [ebp - 0x60], xmm1
movss dword [ebp - 0x5c], xmm2
jmp 0x100969f4
movss xmm0, dword [ebp - 0x20]
movss xmm1, dword [ebp - 0x60]
movss xmm2, dword [ebp - 0x5c]
movss xmm3, dword [ebp - 0x24]
add edi, 0xc
movss xmm4, dword [ebp - 0x28]
movss xmm5, dword [ebp - 0x2c]
cmp edi, esi
jne 0x10096940
mov esi, dword [ebp + 8]
add esi, 0xc
jmp 0x10096a19
mov esi, dword [ebp - 0x10]
lea edx, [ebp - 0x54]
mov dword [ebp - 0x4c], 0
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x54], 0
call fcn.1007f480
movss xmm0, dword [esi]
mov ecx, esi
subss xmm0, dword [ebp - 0x54]
addss xmm0, dword [esi]
movss dword [esi], xmm0
movss xmm0, dword [esi + 4]
subss xmm0, dword [ebp - 0x50]
addss xmm0, dword [esi + 4]
movss dword [esi + 4], xmm0
movss xmm0, dword [esi + 8]
subss xmm0, dword [ebp - 0x4c]
addss xmm0, dword [esi + 8]
movss dword [esi + 8], xmm0
call fcn.10094780
mov byte [0x103108e5], 1
lea ecx, [ebp - 0x70]
call fcn.10096ae0
pop esi
pop edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4