Function at 0x1002af70
Capabilities:
Log keystrokes via polling
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100784b0
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x62e0
call fcn.10075d80
mov eax, dword [0x1008f040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [0x100917dc]
mov ecx, dword [ebx + 8]
mov dword [ebp - 0x49b0], ecx
mov ecx, dword [eax + 0x74]
test ecx, ecx
je 0x1002cb07
call fcn.1000ff70
test al, al
je 0x1002cb07
mov eax, dword [0x100917dc]
cmp dword [eax + 0x78], 0
je 0x1002cb07
mov eax, dword [0x100917fc]
cmp byte [eax], 0
je 0x1002cb07
cmp byte [eax + 0x8c], 0
je 0x1002cb07
cmp byte [eax + 0x8d], 0
je 0x1002b04c
movzx eax, word [eax + 2]
test ax, ax
je 0x1002b042
push eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1002b042
cmp dword [0x10090218], 0
jne 0x1002b636
push 0x1007e9a4
push 0
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [0x10090218], eax
xor al, al
test al, al
je 0x1002cb07
mov eax, dword [0x100917dc]
mov ecx, dword [eax + 0x78]
mov eax, dword [ecx]
mov eax, dword [eax + 0x528]
call eax
cmp eax, 2
jne 0x1002cb07
mov ecx, dword [0x100917dc]
mov ecx, dword [ecx + 0x74]
call fcn.1001ba00
test al, al
jne 0x1002cb07
xor ecx, ecx
mov dword [ebp - 0x1880], 0
xorps xmm0, xmm0
mov dword [ebp - 0x1880], ecx
movq qword [ebp - 0x1888], xmm0
mov dword [ebp - 0x1888], ecx
mov dword [ebp - 0x1884], ecx
mov dword [ebp - 4], ecx
mov eax, dword [0x100917dc]
mov esi, dword [eax + 0x98]
mov eax, dword [eax + 0x9c]
mov dword [ebp - 0x49b8], esi
mov dword [ebp - 0x49a0], eax
cmp esi, eax
je 0x1002c050
mov ecx, eax
mov esi, dword [esi]
mov dword [ebp - 0x49a4], esi
test esi, esi
je 0x1002c033
mov eax, dword [0x100917dc]
cmp esi, dword [eax + 0x74]
je 0x1002c033
mov eax, dword [esi + 8]
lea edi, [esi + 8]
mov ecx, edi
mov dword [ebp - 0x49b4], edi
mov eax, dword [eax + 0x20]
call eax
test al, al
jne 0x1002c02d
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 8]
call eax
cmp dword [eax + 0x14], 0xf7
jne 0x1002b12a
mov ecx, esi
call fcn.1000ff70
test al, al
je 0x1002c02d
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 8]
call eax
cmp dword [eax + 0x14], 0xf7
jne 0x1002b27a
mov ecx, esi
call fcn.1000fe30
mov eax, dword [eax]
shr eax, 5
test al, 1
jne 0x1002c02d
mov ecx, esi
call fcn.1000fe30
mov eax, dword [eax]
shr eax, 0xe
test al, 1
jne 0x1002c02d
mov ecx, esi
call fcn.1001b960
mov eax, dword [eax]
shr eax, 0xd
test al, 1
jne 0x1002c02d
mov eax, dword [0x100900d8]
mov ecx, dword fs:[0x2c]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x10091ac4]
cmp eax, dword [ecx + 4]
jle 0x1002b1d7
push 0x10091ac4
call fcn.10074b0a
add esp, 4
cmp dword [0x10091ac4], 0xffffffff
jne 0x1002b1d7
mov edx, str.55_8B_EC_81_EC_________E8_________85_C0_74_7E_8B_4D_08_85_C9_74_77_A1_________83_78_08_00_74_6C_83_78_0C_00_74_66_A1_________83_C1_08_56_8B_30_8D_85_________50_8B_01
mov byte [ebp - 4], 1
mov ecx, str.client.dll
call fcn.1001b3d0
push 0x10091ac4
mov dword [0x10091ad0], eax
mov byte [ebp - 4], 0
call fcn.10074ab9
add esp, 4
push esi
call dword [0x10091ad0]
test al, al
je 0x1002b27a
mov eax, dword [0x100917fc]
cmp byte [eax + 0x16], 0
je 0x1002b27a
mov edi, dword fs:[0x2c]
mov edx, dword [0x100900d8]
mov eax, dword [0x100917dc]
mov ecx, dword [edi + edx*4]
lea edi, [esi + 8]
mov eax, dword [eax + 0x78]
mov dword [ebp - 0x187c], eax
mov eax, dword [0x10090168]
cmp eax, dword [ecx + 4]
jle 0x1002b262
push 0x10090168
call fcn.10074b0a
add esp, 4
cmp dword [0x10090168], 0xffffffff
jne 0x1002b262
push str.m_iItemDefinitionIndex
push str.CEconEntity
mov byte [ebp - 4], 2
call fcn.10070660
push 0x10090168
mov dword [0x100900f0], eax
mov byte [ebp - 4], 0
call fcn.10074ab9
add esp, 4
mov eax, dword [0x100900f0]
mov ecx, dword [ebp - 0x187c]
cmp dword [ecx + eax], 0x1bf
jne 0x1002c02d
mov eax, dword [0x100917dc]
lea ecx, [ebp - 0x4a44]
push ecx
mov ecx, dword [eax + 0x74]
call fcn.1000fac0
mov ecx, dword [0x100917dc]
mov dword [ebp - 0x18a8], eax
mov eax, dword [ecx + 0x74]
mov ecx, dword fs:[0x2c]
mov dword [ebp - 0x187c], eax
mov eax, dword [0x100900d8]
mov eax, dword [ecx + eax*4]
mov ecx, dword [0x10090150]
mov dword [ebp - 0x49ac], eax
cmp ecx, dword [eax + 4]
jle 0x1002b305
push 0x10090150
call fcn.10074b0a
add esp, 4
cmp dword [0x10090150], 0xffffffff
jne 0x1002b305
push str.m_vecVelocity_0_
push str.CBasePlayer
mov byte [ebp - 4], 3
call fcn.10070660
push 0x10090150
mov dword [0x1009016c], eax
mov byte [ebp - 4], 0
call fcn.10074ab9
add esp, 4
mov eax, dword [0x100917dc]
mov ecx, dword [0x1009016c]
mov eax, dword [eax + 0x2c]
movss xmm2, dword [eax + 0x1c]
mulss xmm2, dword [0x100856b8]
mov eax, dword [ebp - 0x187c]
movaps xmm1, xmm2
movaps xmm0, xmm2
mulss xmm1, dword [eax + ecx]
mulss xmm0, dword [eax + ecx + 4]
mulss xmm2, dword [eax + ecx + 8]
mov ecx, esi
mov eax, dword [ebp - 0x18a8]
addss xmm1, dword [eax]
addss xmm0, dword [eax + 4]
addss xmm2, dword [eax + 8]
lea eax, [ebp - 0x4a80]
push eax
movss dword [ebp - 0x187c], xmm1
movss dword [ebp - 0x18a8], xmm0
movss dword [ebp - 0x18ac], xmm2
call fcn.1000fac0
movss xmm1, dword [ebp - 0x187c]
lea ecx, [ebp - 0x4a04]
movss xmm2, dword [ebp - 0x18ac]
movss xmm0, dword [ebp - 0x18a8]
subss xmm1, dword [eax]
subss xmm0, dword [eax + 4]
subss xmm2, dword [eax + 8]
movss dword [ebp - 0x4a04], xmm1
movss dword [ebp - 0x4a00], xmm0
movss dword [ebp - 0x49fc], xmm2
call fcn.1000f500
mov eax, dword [0x100917dc]
mov ecx, dword [ebp - 0x49ac]
movss dword [ebp - 0x499c], xmm0
mov eax, dword [eax + 0x74]
mov dword [ebp - 0x187c], eax
mov eax, dword [0x10090130]
cmp eax, dword [ecx + 4]
jle 0x1002b428
push 0x10090130
call fcn.10074b0a
add esp, 4
cmp dword [0x10090130], 0xffffffff
jne 0x1002b428
push str.m_iClass
push str.CTFPlayer
mov byte [ebp - 4], 4
call fcn.10070660
push 0x10090130
mov dword [0x10090128], eax
mov byte [ebp - 4], 0
call fcn.10074ab9
add esp, 4
mov eax, dword [0x10090128]
mov ecx, dword [ebp - 0x187c]
cmp dword [ecx + eax], 8
jne 0x1002b4ae
mov eax, dword [0x100917dc]
lea ecx, [ebp - 0x4a50]
push ecx
mov ecx, dword [eax + 0x74]
call fcn.1000fac0
mov ecx, dword [ebp - 0x49a4]
mov esi, eax
lea eax, [ebp - 0x4a5c]
push eax
call fcn.1000fac0
movss xmm2, dword [esi]
lea ecx, [ebp - 0x4a10]
movss xmm1, dword [esi + 4]
movss xmm0, dword [esi + 8]
subss xmm2, dword [eax]
subss xmm1, dword [eax + 4]
subss xmm0, dword [eax + 8]
movss dword [ebp - 0x4a10], xmm2
movss dword [ebp - 0x4a0c], xmm1
movss dword [ebp - 0x4a08], xmm0
call fcn.1000f500
mov esi, dword [ebp - 0x49a4]
movss dword [ebp - 0x499c], xmm0
push 0x1860
lea eax, [ebp - 0x4990]
mov dword [ebp - 0x4998], 0
push 0
push eax
mov dword [ebp - 0x4994], 0
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x4990]
call fcn.100173f0
mov eax, dword [edi]
mov ecx, edi
mov dword [ebp - 0x3130], 0
mov eax, dword [eax + 8]
call eax
cmp dword [eax + 0x14], 0xf7
jne 0x1002be91
mov eax, dword [0x100917dc]
mov ecx, dword [ebp - 0x49ac]
mov eax, dword [eax + 0x78]
mov dword [ebp - 0x187c], eax
mov eax, dword [0x10090168]
cmp eax, dword [ecx + 4]
jle 0x1002b563
push 0x10090168
call fcn.10074b0a
add esp, 4
cmp dword [0x10090168], 0xffffffff
jne 0x1002b563
push str.m_iItemDefinitionIndex
push str.CEconEntity
mov byte [ebp - 4], 5
call fcn.10070660
push 0x10090168
mov dword [0x100900f0], eax
mov byte [ebp - 4], 0
call fcn.10074ab9
add esp, 4
mov eax, dword [0x100900f0]
mov ecx, dword [ebp - 0x187c]
cmp dword [ecx + eax], 0x1bf
jne 0x1002b64f
mov ecx, esi
call fcn.10060d50
test al, al
jne 0x1002b64f
mov eax, dword [0x100917fc]
cmp byte [eax + 0x90], 0
je 0x1002b64f
movss xmm0, dword [ebp - 0x499c]
movss xmm1, dword [0x1008572c]
comiss xmm1, xmm0
jb 0x1002b64f
push 0x1860
lea eax, [ebp - 0x1878]
movss dword [ebp - 0x4998], xmm0
push 0
push eax
mov dword [ebp - 0x3130], esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x1878]
call fcn.100173f0
lea eax, [ebp - 0x1878]
push eax
lea ecx, [ebp - 0x4990]
call fcn.10017aa0
mov eax, dword [ebp - 0x1884]
lea ecx, [ebp - 0x4998]
mov dword [ebp - 0x4994], 1
cmp eax, dword [ebp - 0x1880]
je 0x1002c020
push 0x186c
push ecx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add dword [ebp - 0x1884], 0x186c
jmp 0x1002c02d
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, dword [0x10090218]
jne 0x1002b042
mov al, 1
jmp 0x1002b044
mov eax, dword [edi]
mov ecx, edi
mov esi, dword [0x100917e8]
mov eax, dword [eax + 0x24]
call eax
lea eax, [eax + eax*4]
cmp dword [esi + eax*4 + 0x24], 2
jbe 0x1002c02d
mov eax, dword [edi]
mov ecx, edi
mov esi, dword [0x100917e8]
mov dword [ebp - 0x499c], 2
mov eax, dword [eax + 0x24]
call eax
lea eax, [eax + eax*4]
cmp dword [esi + eax*4 + 0x24], 2
jbe 0x1002c02d
mov eax, dword [edi]
mov ecx, edi
mov esi, dword [0x100917e8]
mov eax, dword [eax + 0x24]
call eax
mov ecx, dword [ebp - 0x499c]
lea edx, [eax + eax*4]
mov eax, dword [esi + edx*4 + 0x1c]
add ecx, dword [esi + edx*4 + 0x20]
dec eax
and ecx, eax
mov eax, dword [esi + edx*4 + 0x18]
mov esi, dword [eax + ecx*4]
mov dword [ebp - 0x49a8], esi
movss xmm1, dword [esi + 0x184c]
call fcn.100164a0
test al, al
je 0x1002be64
mov eax, dword [0x100917dc]
lea ecx, [ebp - 0x4a68]
push ecx
mov ecx, dword [eax + 0x74]
call fcn.1000fac0
add esi, 0x3c
lea ecx, [ebp - 0x4a1c]
movss xmm2, dword [eax]
movss xmm1, dword [eax + 4]
movss xmm0, dword [eax + 8]
subss xmm2, dword [esi]
subss xmm1, dword [esi + 4]
subss xmm0, dword [esi + 8]
movss dword [ebp - 0x4a1c], xmm2
movss dword [ebp - 0x4a18], xmm1
movss dword [ebp - 0x4a14], xmm0
call fcn.1000f500
mov eax, dword [0x100917dc]
mov ecx, dword fs:[0x2c]
movss dword [ebp - 0x49ac], xmm0
mov eax, dword [eax + 0x74]
mov dword [ebp - 0x187c], eax
mov eax, dword [0x100900d8]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x10090130]
cmp eax, dword [ecx + 4]
jle 0x1002b7a7
push 0x10090130
call fcn.10074b0a
add esp, 4
cmp dword [0x10090130], 0xffffffff
jne 0x1002b79f
push str.m_iClass
push str.CTFPlayer
mov byte [ebp - 4], 6
call fcn.10070660
push 0x10090130
mov dword [0x10090128], eax
mov byte [ebp - 4], 0
call fcn.10074ab9
add esp, 4
movss xmm0, dword [ebp - 0x49ac]
mov eax, dword [0x10090128]
mov ecx, dword [ebp - 0x187c]
cmp dword [ecx + eax], 8
je 0x1002b8cd
mov eax, dword [0x100917dc]
lea ecx, [ebp - 0x4a74]
push ecx
mov ecx, dword [eax + 0x74]
call fcn.1000fac0
mov ecx, dword [0x100917dc]
mov edi, dword fs:[0x2c]
mov edx, dword [0x100900d8]
mov dword [ebp - 0x18a8], eax
mov eax, dword [ecx + 0x74]
mov ecx, dword [0x10090150]
mov dword [ebp - 0x187c], eax
mov eax, dword [edi + edx*4]
mov edi, dword [ebp - 0x49b4]
cmp ecx, dword [eax + 4]
jle 0x1002b848
push 0x10090150
call fcn.10074b0a
add esp, 4
cmp dword [0x10090150], 0xffffffff
jne 0x1002b848
push str.m_vecVelocity_0_
push str.CBasePlayer
mov byte [ebp - 4], 7
call fcn.10070660
push 0x10090150
mov dword [0x1009016c], eax
mov byte [ebp - 4], 0
call fcn.10074ab9
add esp, 4
mov eax, dword [0x100917dc]
mov ecx, dword [0x1009016c]
mov eax, dword [eax + 0x2c]
movss xmm2, dword [eax + 0x1c]
mulss xmm2, dword [0x100856b8]
mov eax, dword [ebp - 0x187c]
movaps xmm1, xmm2
movaps xmm0, xmm2
mulss xmm1, dword [eax + ecx]
mulss xmm0, dword [eax + ecx + 4]
mulss xmm2, dword [eax + ecx + 8]
lea ecx, [ebp - 0x49f8]
mov eax, dword [ebp - 0x18a8]
addss xmm1, dword [eax]
addss xmm0, dword [eax + 4]
addss xmm2, dword [eax + 8]
subss xmm1, dword [esi]
subss xmm0, dword [esi + 4]
subss xmm2, dword [esi + 8]
movss dword [ebp - 0x49f8], xmm1
movss dword [ebp - 0x49f4], xmm0
movss dword [ebp - 0x49f0], xmm2
call fcn.1000f500
movss dword [ebp - 0x49ac], xmm0
movss xmm1, dword [0x1008572c]
comiss xmm1, xmm0
jb 0x1002be64
mov eax, dword [0x100917dc]
push esi
push ecx
lea ecx, [ebp - 0x4a2c]
push ecx
mov ecx, dword [eax + 0x74]
call fcn.10010080
add esp, 4
lea ecx, [ebp - 0x18a4]
mov edx, eax
call fcn.1000f550
mov eax, dword [0x100917fc]
add esp, 4
cmp byte [eax + 0x8e], 0
je 0x1002bdf1
mov edi, dword fs:[0x2c]
mov edx, dword [0x100900d8]
mov eax, dword [0x100917dc]
mov ecx, dword [edi + edx*4]
mov eax, dword [eax + 0x74]
mov edi, dword [ebp - 0x49b4]
mov dword [ebp - 0x187c], eax
mov eax, dword [0x10090130]
cmp eax, dword [ecx + 4]
jle 0x1002b989
push 0x10090130
call fcn.10074b0a
add esp, 4
cmp dword [0x10090130], 0xffffffff
jne 0x1002b989
push str.m_iClass
push str.CTFPlayer
mov byte [ebp - 4], 8
call fcn.10070660
push 0x10090130
mov dword [0x10090128], eax
mov byte [ebp - 4], 0
call fcn.10074ab9
add esp, 4
mov eax, dword [0x10090128]
mov ecx, dword [ebp - 0x187c]
cmp dword [ecx + eax], 8
jne 0x1002bdf1
mov eax, dword [0x100917dc]
lea ecx, [ebp - 0x4a38]
push ecx
mov ecx, dword [eax + 0x74]
call fcn.1000fac0
movss xmm5, dword [esi]
movss xmm6, dword [esi + 4]
mov edx, dword [0x100900d8]
mov esi, dword fs:[0x2c]
subss xmm5, dword [eax]
subss xmm6, dword [eax + 4]
mov eax, dword [0x100901c8]
mov ecx, dword [esi + edx*4]
movss dword [ebp - 0x18ac], xmm5
movss dword [ebp - 0x18a8], xmm6
cmp eax, dword [ecx + 4]
jle 0x1002ba40
push 0x100901c8
call fcn.10074b0a
add esp, 4
cmp dword [0x100901c8], 0xffffffff
jne 0x1002ba30
push str.m_angEyeAngles_0_
push str.CTFPlayer
mov byte [ebp - 4], 9
call fcn.10070660
push 0x100901c8
mov dword [0x100901b0], eax
mov byte [ebp - 4], 0
call fcn.10074ab9
add esp, 4
movss xmm6, dword [ebp - 0x18a8]
movss xmm5, dword [ebp - 0x18ac]
mov esi, dword [0x100901b0]
lea ecx, [ebp - 0x1894]
movss dword [ebp - 0x1894], xmm5
movss dword [ebp - 0x1890], xmm6
mov dword [ebp - 0x188c], 0
call fcn.1000f500
addss xmm0, dword [0x100855b8]
movss xmm7, dword [0x10085654]
lea eax, [ebp - 0x49d8]
movss xmm1, dword [0x100855f4]
mov dword [ebp - 0x18a8], eax
lea eax, [ebp - 0x4a20]
mov dword [ebp - 0x18ac], eax
divss xmm7, xmm0
movss xmm0, dword [ebp - 0x18a4]
mulss xmm5, xmm7
mulss xmm6, xmm7
mulss xmm7, dword [0x100855a8]
mulss xmm0, xmm1
movss dword [ebp - 0x1894], xmm5
movss dword [ebp - 0x1890], xmm6
movss dword [ebp - 0x188c], xmm7
movss dword [ebp - 0x187c], xmm0
fld dword [ebp - 0x187c]
fsincos
mov edx, dword [ebp - 0x18a8]
mov eax, dword [ebp - 0x18ac]
fstp dword [edx]
fstp dword [eax]
movss xmm0, dword [ebp - 0x18a0]
lea eax, [ebp - 0x49d4]
mulss xmm0, xmm1
mov dword [ebp - 0x18a8], eax
lea eax, [ebp - 0x49dc]
mov dword [ebp - 0x18ac], eax
movss dword [ebp - 0x187c], xmm0
fld dword [ebp - 0x187c]
fsincos
mov edx, dword [ebp - 0x18a8]
mov eax, dword [ebp - 0x18ac]
fstp dword [edx]
fstp dword [eax]
movss xmm3, dword [ebp - 0x49d4]
lea ecx, [ebp - 0x49c4]
movss xmm4, dword [ebp - 0x49dc]
mulss xmm3, dword [ebp - 0x49d8]
mov dword [ebp - 0x49bc], 0
mulss xmm4, dword [ebp - 0x49d8]
movss dword [ebp - 0x49c4], xmm3
movss dword [ebp - 0x49c0], xmm4
call fcn.1000f500
addss xmm0, dword [0x100855b8]
movss xmm1, dword [0x10085654]
lea eax, [ebp - 0x49e4]
mov ecx, dword [ebp - 0x49a4]
mov dword [ebp - 0x18b4], eax
lea eax, [ebp - 0x49ec]
mov dword [ebp - 0x1898], eax
divss xmm1, xmm0
movaps xmm0, xmm1
mulss xmm0, xmm3
movss dword [ebp - 0x18ac], xmm0
movss dword [ebp - 0x49c4], xmm0
movaps xmm0, xmm1
mulss xmm1, dword [0x100855a8]
mulss xmm0, xmm4
movss dword [ebp - 0x187c], xmm1
movss dword [ebp - 0x49bc], xmm1
movss xmm1, dword [0x100855f4]
movss dword [ebp - 0x18a8], xmm0
movss dword [ebp - 0x49c0], xmm0
movss xmm0, dword [esi + ecx]
mulss xmm0, xmm1
movss dword [ebp - 0x18b0], xmm0
fld dword [ebp - 0x18b0]
fsincos
mov edx, dword [ebp - 0x18b4]
mov eax, dword [ebp - 0x1898]
fstp dword [edx]
fstp dword [eax]
movss xmm0, dword [esi + ecx + 4]
lea eax, [ebp - 0x49e0]
mulss xmm0, xmm1
mov dword [ebp - 0x18b4], eax
lea eax, [ebp - 0x49e8]
mov dword [ebp - 0x18b0], eax
movss dword [ebp - 0x1898], xmm0
fld dword [ebp - 0x1898]
fsincos
mov edx, dword [ebp - 0x18b4]
mov eax, dword [ebp - 0x18b0]
fstp dword [edx]
fstp dword [eax]
movss xmm3, dword [ebp - 0x49e4]
lea ecx, [ebp - 0x49d0]
movss xmm4, dword [ebp - 0x49e0]
mulss xmm4, xmm3
mov dword [ebp - 0x49c8], 0
mulss xmm3, dword [ebp - 0x49e8]
movss dword [ebp - 0x49d0], xmm4
movss dword [ebp - 0x49cc], xmm3
call fcn.1000f500
addss xmm0, dword [0x100855b8]
movss xmm2, dword [0x10085654]
movaps xmm1, xmm6
mulss xmm1, dword [ebp - 0x18a8]
divss xmm2, xmm0
movaps xmm0, xmm5
mulss xmm0, dword [ebp - 0x18ac]
mulss xmm4, xmm2
addss xmm1, xmm0
mulss xmm3, xmm2
movss xmm0, dword [ebp - 0x187c]
mulss xmm2, dword [0x100855a8]
mulss xmm0, xmm7
movss dword [ebp - 0x49d0], xmm4
movss dword [ebp - 0x49cc], xmm3
addss xmm1, xmm0
movss dword [ebp - 0x49c8], xmm2
movss xmm0, dword [0x10085644]
comiss xmm0, xmm1
jae 0x1002bd76
movaps xmm0, xmm4
movaps xmm1, xmm3
mulss xmm0, xmm5
mulss xmm1, xmm6
addss xmm1, xmm0
movaps xmm0, xmm2
mulss xmm0, xmm7
addss xmm1, xmm0
movss xmm0, dword [0x100855e4]
comiss xmm0, xmm1
jae 0x1002bd76
mulss xmm3, dword [ebp - 0x18a8]
mulss xmm4, dword [ebp - 0x18ac]
mulss xmm2, dword [ebp - 0x187c]
movss xmm0, dword [0x100857dc]
addss xmm3, xmm4
addss xmm3, xmm2
comiss xmm0, xmm3
jb 0x1002bdf1
push 0x1860
lea eax, [ebp - 0x62e8]
mov dword [ebp - 0x62f0], 0
push 0
push eax
mov dword [ebp - 0x62ec], 0
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x62e8]
call fcn.100173f0
mov eax, dword [ebp - 0x62ec]
lea ecx, [ebp - 0x4990]
movss xmm0, dword [ebp - 0x62f0]
mov dword [ebp - 0x4994], eax
lea eax, [ebp - 0x62e8]
push eax
mov dword [ebp - 0x4a88], 0
movss dword [ebp - 0x4998], xmm0
call fcn.10017aa0
mov eax, dword [ebp - 0x4a88]
mov dword [ebp - 0x3130], eax
jmp 0x1002be64
movss xmm0, dword [ebp - 0x49ac]
lea ecx, [ebp - 0x4990]
mov eax, dword [ebp - 0x49a4]
push dword [ebp - 0x49a8]
movss dword [ebp - 0x4998], xmm0
mov dword [ebp - 0x3130], eax
call fcn.10017aa0
mov eax, dword [ebp - 0x1884]
lea ecx, [ebp - 0x4998]
mov dword [ebp - 0x4994], 1
cmp eax, dword [ebp - 0x1880]
je 0x1002be57
push 0x186c
push ecx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add dword [ebp - 0x1884], 0x186c
jmp 0x1002be64
push ecx
push eax
lea ecx, [ebp - 0x1888]
call fcn.1002cba0
mov eax, dword [edi]
mov ecx, edi
inc dword [ebp - 0x499c]
mov esi, dword [0x100917e8]
mov eax, dword [eax + 0x24]
call eax
mov ecx, dword [ebp - 0x499c]
lea eax, [eax + eax*4]
cmp ecx, dword [esi + eax*4 + 0x24]
jb 0x1002b693
jmp 0x1002c02d
movss xmm0, dword [ebp - 0x499c]
comiss xmm0, dword [0x1008572c]
ja 0x1002c02d
mov eax, dword [0x100917fc]
cmp byte [eax + 0x8f], 0
jne 0x1002bec3
mov eax, dword [0x100917dc]
cmp dword [eax + 0x74], 0
je 0x1002c02d
mov eax, dword [0x100917dc]
mov ecx, dword [ebp - 0x49ac]
mov edi, dword [eax + 0x74]
mov eax, dword [0x10090130]
cmp eax, dword [ecx + 4]
jle 0x1002bf23
push 0x10090130
call fcn.10074b0a
add esp, 4
cmp dword [0x10090130], 0xffffffff
jne 0x1002bf1d
push str.m_iClass
push str.CTFPlayer
mov byte [ebp - 4], 0xa
call fcn.10070660
push 0x10090130
mov dword [0x10090128], eax
mov byte [ebp - 4], 0
call fcn.10074ab9
add esp, 4
mov ecx, dword [ebp - 0x49ac]
mov eax, dword [0x10090128]
cmp dword [edi + eax], 9
jne 0x1002c02d
mov eax, dword [0x100917dc]
mov edi, dword [eax + 0x20]
mov eax, dword [edi]
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x49a8], eax
mov eax, dword [0x10090250]
cmp eax, dword [ecx + 4]
jle 0x1002bf91
push 0x10090250
call fcn.10074b0a
add esp, 4
cmp dword [0x10090250], 0xffffffff
jne 0x1002bf91
push str.m_hBuilder
push str.CBaseObject
mov byte [ebp - 4], 0xb
call fcn.10070660
push 0x10090250
mov dword [0x10090284], eax
mov byte [ebp - 4], 0
call fcn.10074ab9
add esp, 4
mov eax, dword [0x10090284]
mov ecx, edi
push dword [eax + esi]
call dword [ebp - 0x49a8]
mov edi, eax
test edi, edi
je 0x1002c02d
movss xmm0, dword [ebp - 0x499c]
lea eax, [ebp - 0x1878]
push 0x1860
push 0
push eax
movss dword [ebp - 0x4998], xmm0
mov dword [ebp - 0x3130], esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x1878]
call fcn.100173f0
lea eax, [ebp - 0x1878]
push eax
lea ecx, [ebp - 0x4990]
call fcn.10017aa0
mov eax, dword [0x100917dc]
xor ecx, ecx
cmp edi, dword [eax + 0x74]
mov eax, dword [ebp - 0x1884]
sete cl
inc ecx
mov dword [ebp - 0x4994], ecx
lea ecx, [ebp - 0x4998]
cmp eax, dword [ebp - 0x1880]
jne 0x1002b618
push ecx
push eax
lea ecx, [ebp - 0x1888]
call fcn.1002cba0
mov ecx, dword [ebp - 0x49a0]
mov esi, dword [ebp - 0x49b8]
add esi, 4
mov dword [ebp - 0x49b8], esi
cmp esi, ecx
jne 0x1002b0d0
mov ecx, dword [ebp - 0x1888]
mov esi, dword [ebp - 0x1884]
mov eax, 0x14f6fddf
push dword [ebp - 0x49ec]
sub esi, ecx
imul esi
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x1884]
push eax
call fcn.1002cd60
mov esi, dword [ebp - 0x1888]
add esp, 8
cmp esi, dword [ebp - 0x1884]
je 0x1002caba
push 0x186c
lea eax, [ebp - 0x3128]
push esi
push eax
call sub.VCRUNTIME140.dll_memcpy
mov ecx, dword [ebp - 0x18c0]
add esp, 0xc
test ecx, ecx
je 0x1002caba
movss xmm0, dword [ebp - 0x18d4]
comiss xmm0, dword [0x100855a8]
jbe 0x1002c0e8
movq xmm0, qword [ebp - 0x30e4]
lea esi, [ebp - 0x18a4]
mov eax, dword [ebp - 0x30dc]
movq qword [ebp - 0x18a4], xmm0
mov dword [ebp - 0x189c], eax
jmp 0x1002c0f6
lea eax, [ebp - 0x4a38]
push eax
call fcn.1000fac0
mov esi, eax
mov ecx, dword [0x100917dc]
lea eax, [ebp - 0x4a2c]
push eax
mov ecx, dword [ecx + 0x74]
call fcn.10010080
push esi
mov edx, eax
lea ecx, [ebp - 0x1894]
call fcn.1000f550
add esp, 4
lea ecx, [ebp - 0x1894]
call fcn.100261e0
mov eax, dword [0x100917dc]
mov ecx, dword fs:[0x2c]
mov edi, dword [eax + 0x74]
mov eax, dword [0x100900d8]
mov esi, dword [ecx + eax*4]
mov eax, dword [0x100902a4]
cmp eax, dword [esi + 4]
jle 0x1002c18a
push 0x100902a4
call fcn.10074b0a
add esp, 4
cmp dword [0x100902a4], 0xffffffff
jne 0x1002c18a
push str.m_fFlags
push str.CBasePlayer
mov byte [ebp - 4], 0xc
call fcn.10070660
push 0x100902a4
mov dword [0x100902a0], eax
mov byte [ebp - 4], 0
call fcn.10074ab9
add esp, 4
mov eax, dword [0x100902a0]
test byte [edi + eax], 1
jne 0x1002c213
mov eax, dword [0x100917dc]
mov edi, dword [eax + 0x74]
mov eax, dword [0x100900fc]
cmp eax, dword [esi + 4]
jle 0x1002c1ed
push 0x100900fc
call fcn.10074b0a
add esp, 4
cmp dword [0x100900fc], 0xffffffff
jne 0x1002c1ed
push str.m_vecOrigin
push str.CBaseEntity
mov byte [ebp - 4], 0xd
call fcn.10070660
push 0x100900fc
mov dword [0x10090124], eax
mov byte [ebp - 4], 0
call fcn.10074ab9
add esp, 4
mov eax, dword [0x10090124]
movss xmm0, dword [edi + eax + 8]
subss xmm0, dword [ebp - 0x3118]
comiss xmm0, dword [0x10085714]
jbe 0x1002c213
mov eax, dword [ebp - 0x49b0]
or dword [eax + 0x24], 4
mov eax, dword [0x100917dc]
mov ecx, dword [0x10090130]
mov edi, dword [eax + 0x74]
cmp ecx, dword [esi + 4]
jle 0x1002c270
push 0x10090130
call fcn.10074b0a
mov ecx, dword [0x10090130]
add esp, 4
cmp ecx, 0xffffffff
jne 0x1002c270
push str.m_iClass
push str.CTFPlayer
mov byte [ebp - 4], 0xe
call fcn.10070660
push 0x10090130
mov dword [0x10090128], eax
mov byte [ebp - 4], 0
call fcn.10074ab9
mov ecx, dword [0x10090130]
add esp, 4
mov eax, dword [0x10090128]
cmp dword [edi + eax], 1
je 0x1002c541
mov eax, dword [0x100917dc]
mov edi, dword [eax + 0x74]
cmp ecx, dword [esi + 4]
jle 0x1002c2d6
push 0x10090130
call fcn.10074b0a
mov ecx, dword [0x10090130]
add esp, 4
cmp ecx, 0xffffffff
jne 0x1002c2d6
push str.m_iClass
push str.CTFPlayer
mov byte [ebp - 4], 0xf
call fcn.10070660
push 0x10090130
mov dword [0x10090128], eax
mov byte [ebp - 4], 0
call fcn.10074ab9
mov ecx, dword [0x10090130]
add esp, 4
mov eax, dword [0x10090128]
cmp dword [edi + eax], 3
je 0x1002c541
mov eax, dword [0x100917dc]
mov edi, dword [eax + 0x74]
cmp ecx, dword [esi + 4]
jle 0x1002c33c
push 0x10090130
call fcn.10074b0a
mov ecx, dword [0x10090130]
add esp, 4
cmp ecx, 0xffffffff
jne 0x1002c33c
push str.m_iClass
push str.CTFPlayer
mov byte [ebp - 4], 0x10
call fcn.10070660
push 0x10090130
mov dword [0x10090128], eax
mov byte [ebp - 4], 0
call fcn.10074ab9
mov ecx, dword [0x10090130]
add esp, 4
mov eax, dword [0x10090128]
cmp dword [edi + eax], 7
je 0x1002c541
mov eax, dword [0x100917dc]
mov edi, dword [eax + 0x74]
cmp ecx, dword [esi + 4]
jle 0x1002c3a2
push 0x10090130
call fcn.10074b0a
mov ecx, dword [0x10090130]
add esp, 4
cmp ecx, 0xffffffff
jne 0x1002c3a2
push str.m_iClass
push str.CTFPlayer
mov byte [ebp - 4], 0x11
call fcn.10070660
push 0x10090130
mov dword [0x10090128], eax
mov byte [ebp - 4], 0
call fcn.10074ab9
mov ecx, dword [0x10090130]
add esp, 4
mov eax, dword [0x10090128]
cmp dword [edi + eax], 4
je 0x1002c541
mov eax, dword [0x100917dc]
mov edi, dword [eax + 0x74]
cmp ecx, dword [esi + 4]
jle 0x1002c408
push 0x10090130
call fcn.10074b0a
mov ecx, dword [0x10090130]
add esp, 4
cmp ecx, 0xffffffff
jne 0x1002c408
push str.m_iClass
push str.CTFPlayer
mov byte [ebp - 4], 0x12
call fcn.10070660
push 0x10090130
mov dword [0x10090128], eax
mov byte [ebp - 4], 0
call fcn.10074ab9
mov ecx, dword [0x10090130]
add esp, 4
mov eax, dword [0x10090128]
cmp dword [edi + eax], 6
je 0x1002c541
mov eax, dword [0x100917dc]
mov edi, dword [eax + 0x74]
cmp ecx, dword [esi + 4]
jle 0x1002c46e
push 0x10090130
call fcn.10074b0a
mov ecx, dword [0x10090130]
add esp, 4
cmp ecx, 0xffffffff
jne 0x1002c46e
push str.m_iClass
push str.CTFPlayer
mov byte [ebp - 4], 0x13
call fcn.10070660
push 0x10090130
mov dword [0x10090128], eax
mov byte [ebp - 4], 0
call fcn.10074ab9
mov ecx, dword [0x10090130]
add esp, 4
mov eax, dword [0x10090128]
cmp dword [edi + eax], 9
je 0x1002c541
mov eax, dword [0x100917dc]
mov edi, dword [eax + 0x74]
cmp ecx, dword [esi + 4]
jle 0x1002c4d4
push 0x10090130
call fcn.10074b0a
mov ecx, dword [0x10090130]
add esp, 4
cmp ecx, 0xffffffff
jne 0x1002c4d4
push str.m_iClass
push str.CTFPlayer
mov byte [ebp - 4], 0x14
call fcn.10070660
push 0x10090130
mov dword [0x10090128], eax
mov byte [ebp - 4], 0
call fcn.10074ab9
mov ecx, dword [0x10090130]
add esp, 4
mov eax, dword [0x10090128]
cmp dword [edi + eax], 5
je 0x1002c541
mov eax, dword [0x100917dc]
mov edi, dword [eax + 0x74]
cmp ecx, dword [esi + 4]
jle 0x1002c52e
push 0x10090130
call fcn.10074b0a
add esp, 4
cmp dword [0x10090130], 0xffffffff
jne 0x1002c52e
push str.m_iClass
push str.CTFPlayer
mov byte [ebp - 4], 0x15
call fcn.10070660
push 0x10090130
mov dword [0x10090128], eax
mov byte [ebp - 4], 0
call fcn.10074ab9
add esp, 4
mov eax, dword [0x10090128]
cmp dword [edi + eax], 2
je 0x1002c541
mov edi, dword [ebp - 0x49b0]
jmp 0x1002c559
mov eax, dword [0x100917dc]
mov edi, dword [ebp - 0x49b0]
push edi
mov ecx, dword [eax + 0x78]
call fcn.10063020
test al, al
je 0x1002c580
movss xmm0, dword [ebp - 0x1894]
movss dword [edi + 0xc], xmm0
movss xmm0, dword [ebp - 0x1890]
movss dword [edi + 0x10], xmm0
movss xmm0, dword [ebp - 0x188c]
movss dword [edi + 0x14], xmm0
or dword [edi + 0x24], 1
mov ecx, dword [0x100917dc]
mov eax, dword [edi + 0xc]
push edi
mov dword [ecx + 0x300], eax
mov eax, dword [edi + 0x10]
mov dword [ecx + 0x304], eax
mov eax, dword [edi + 0x14]
mov dword [ecx + 0x308], eax
mov eax, dword [0x100917dc]
mov dword [eax + 0x30c], 0x94
mov eax, dword [0x100917dc]
mov ecx, dword [eax + 0x78]
call fcn.10063020
test al, al
je 0x1002cab4
movss xmm0, dword [ebp - 0x18d4]
comiss xmm0, dword [0x100855a8]
jbe 0x1002c94a
mov eax, dword [0x100901c8]
mov edi, dword [ebp - 0x18c0]
cmp eax, dword [esi + 4]
jle 0x1002c631
push 0x100901c8
call fcn.10074b0a
add esp, 4
cmp dword [0x100901c8], 0xffffffff
jne 0x1002c631
push str.m_angEyeAngles_0_
push str.CTFPlayer
mov byte [ebp - 4], 0x16
call fcn.10070660
push 0x100901c8
mov dword [0x100901b0], eax
mov byte [ebp - 4], 0
call fcn.10074ab9
add esp, 4
mov eax, dword [0x100901b0]
movss xmm0, dword [ebp - 0x3114]
movss dword [edi + eax], xmm0
movss xmm0, dword [ebp - 0x3110]
movss dword [edi + eax + 4], xmm0
movss xmm0, dword [ebp - 0x310c]
movss dword [edi + eax + 8], xmm0
mov eax, dword [0x100900f8]
mov edi, dword [ebp - 0x18c0]
cmp eax, dword [esi + 4]
jle 0x1002c6b1
push 0x100900f8
call fcn.10074b0a
add esp, 4
cmp dword [0x100900f8], 0xffffffff
jne 0x1002c6b1
push str.m_vecMins
push str.CBaseEntity
mov byte [ebp - 4], 0x17
call fcn.10070660
push 0x100900f8
mov dword [0x1009013c], eax
mov byte [ebp - 4], 0
call fcn.10074ab9
add esp, 4
mov eax, dword [0x1009013c]
movss xmm0, dword [ebp - 0x3108]
movss dword [edi + eax], xmm0
movss xmm0, dword [ebp - 0x3104]
movss dword [edi + eax + 4], xmm0
movss xmm0, dword [ebp - 0x3100]
movss dword [edi + eax + 8], xmm0
mov eax, dword [0x10090164]
mov edi, dword [ebp - 0x18c0]
cmp eax, dword [esi + 4]
jle 0x1002c731
push 0x10090164
call fcn.10074b0a
add esp, 4
cmp dword [0x10090164], 0xffffffff
jne 0x1002c731
push str.m_vecMaxs
push str.CBaseEntity
mov byte [ebp - 4], 0x18
call fcn.10070660
push 0x10090164
mov dword [0x1009014c], eax
mov byte [ebp - 4], 0
call fcn.10074ab9
add esp, 4
mov eax, dword [0x1009014c]
movss xmm0, dword [ebp - 0x30fc]
movss dword [edi + eax], xmm0
movss xmm0, dword [ebp - 0x30f8]
movss dword [edi + eax + 4], xmm0
movss xmm0, dword [ebp - 0x30f4]
movss dword [edi + eax + 8], xmm0
mov eax, dword [0x100900fc]
mov edi, dword [ebp - 0x18c0]
cmp eax, dword [esi + 4]
jle 0x1002c7b1
push 0x100900fc
call fcn.10074b0a
add esp, 4
cmp dword [0x100900fc], 0xffffffff
jne 0x1002c7b1
push str.m_vecOrigin
push str.CBaseEntity
mov byte [ebp - 4], 0x19
call fcn.10070660
push 0x100900fc
mov dword [0x10090124], eax
mov byte [ebp - 4], 0
call fcn.10074ab9
add esp, 4
mov eax, dword [0x10090124]
movss xmm0, dword [ebp - 0x3120]
movss dword [edi + eax], xmm0
movss xmm0, dword [ebp - 0x311c]
movss dword [edi + eax + 4], xmm0
movss xmm0, dword [ebp - 0x3118]
movss dword [edi + eax + 8], xmm0
mov eax, dword [0x10090150]
mov edi, dword [ebp - 0x18c0]
cmp eax, dword [esi + 4]
jle 0x1002c831
push 0x10090150
call fcn.10074b0a
add esp, 4
cmp dword [0x10090150], 0xffffffff
jne 0x1002c831
push str.m_vecVelocity_0_
push str.CBasePlayer
mov byte [ebp - 4], 0x1a
call fcn.10070660
push 0x10090150
mov dword [0x1009016c], eax
mov byte [ebp - 4], 0
call fcn.10074ab9
add esp, 4
mov eax, dword [0x1009016c]
movss xmm0, dword [ebp - 0x30f0]
movss dword [eax + edi], xmm0
movss xmm0, dword [ebp - 0x30ec]
movss dword [eax + edi + 4], xmm0
movss xmm0, dword [ebp - 0x30e8]
movss dword [eax + edi + 8], xmm0
mov eax, dword [0x100901cc]
mov edi, dword [ebp - 0x18c0]
cmp eax, dword [esi + 4]
jle 0x1002c8b1
push 0x100901cc
call fcn.10074b0a
add esp, 4
cmp dword [0x100901cc], 0xffffffff
jne 0x1002c8b1
push str.m_flCycle
push str.CBaseAnimating
mov byte [ebp - 4], 0x1b
call fcn.10070660
push 0x100901cc
mov dword [0x10090194], eax
mov byte [ebp - 4], 0
call fcn.10074ab9
add esp, 4
mov eax, dword [0x10090194]
movss xmm0, dword [ebp - 0x18d0]
movss dword [eax + edi], xmm0
mov eax, dword [0x100917dc]
mov ecx, dword [eax + 0x14]
mov eax, dword [ecx]
mov eax, dword [eax + 0x120]
call eax
push 1
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x24]
mov dword [ebp - 0x49a8], ecx
mov ecx, eax
call dword [ebp - 0x49a8]
push ecx
fstp dword [ebp - 0x49a8]
movss xmm0, dword [ebp - 0x49a8]
lea eax, [ebp - 0x499c]
movss dword [esp], xmm0
push eax
lea eax, [ebp - 0x49a4]
mov dword [ebp - 0x499c], 0xffffffff
push eax
lea eax, [ebp - 0x30d8]
mov dword [ebp - 0x49a4], 0xaffffff
push eax
push dword [ebp - 0x18d8]
push dword [ebp - 0x18c0]
call fcn.10052620
call fcn.10015ff0
addss xmm0, dword [ebp - 0x18d4]
jmp 0x1002ca92
mov ecx, dword [ebp - 0x18c0]
add ecx, 8
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
cmp dword [eax + 0x14], 0xf7
jne 0x1002cab4
push 0x1800
lea eax, [ebp - 0x1818]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [0x100917dc]
lea edx, [ebp - 0x1818]
mov ecx, dword [ebp - 0x18c0]
add esp, 8
add ecx, 4
mov eax, dword [eax + 0x2c]
movss xmm0, dword [eax + 0xc]
mov eax, dword [ecx]
movss dword [esp], xmm0
push 0x100
push 0x80
mov eax, dword [eax + 0x40]
push edx
call eax
mov eax, dword [0x100917dc]
mov ecx, dword [eax + 0x14]
mov eax, dword [ecx]
mov eax, dword [eax + 0x120]
call eax
push 1
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x24]
mov dword [ebp - 0x49a8], ecx
mov ecx, eax
call dword [ebp - 0x49a8]
mov ecx, dword [ebp - 0x18c0]
add ecx, 4
mov dword [ebp - 0x499c], 0xffffffff
mov dword [ebp - 0x49a4], 0xaffffff
fstp dword [ebp - 0x49a8]
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
call eax
movss xmm0, dword [ebp - 0x49a8]
push ecx
movss dword [esp], xmm0
lea ecx, [ebp - 0x499c]
push ecx
lea ecx, [ebp - 0x49a4]
push ecx
lea ecx, [ebp - 0x1818]
push ecx
push eax
push dword [ebp - 0x18c0]
call fcn.10052620
mov eax, dword [0x100901d4]
mov edi, dword [ebp - 0x18c0]
cmp eax, dword [esi + 4]
jle 0x1002ca82
push 0x100901d4
call fcn.10074b0a
add esp, 4
cmp dword [0x100901d4], 0xffffffff
jne 0x1002ca82
push str.m_flSimulationTime
push str.CBaseEntity
mov byte [ebp - 4], 0x1c
call fcn.10070660
push 0x100901d4
mov dword [0x100901a8], eax
mov byte [ebp - 4], 0
call fcn.10074ab9
add esp, 4
mov esi, dword [0x100901a8]
call fcn.10015ff0
addss xmm0, dword [edi + esi]
mov eax, dword [0x100917dc]
mov ecx, dword [ebp - 0x49b0]
mov eax, dword [eax + 0x2c]
divss xmm0, dword [eax + 0x1c]
addss xmm0, dword [0x10085644]
cvttss2si eax, xmm0
mov dword [ecx + 8], eax
mov esi, dword [ebp - 0x1888]
test esi, esi
je 0x1002cb07
mov ecx, dword [ebp - 0x1880]
mov eax, 0x14f6fddf
sub ecx, esi
imul ecx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x186c
mov eax, esi
cmp ecx, 0x1000
jb 0x1002cafd
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1002cafd
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push esi
call fcn.10074fd2
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.10074a80
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4