Function at 0x10036450
Capabilities:
Contain obfuscated stackstrings
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10062949
mov eax, dword fs:[0]
push eax
sub esp, 0x344
mov eax, dword [0x10079040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [0x1007ad34]
mov dword [ebp - 0x288], esi
test esi, esi
je 0x10037a74
mov eax, dword [esi + 0xd4]
test eax, eax
je 0x10037a74
cmp dword [eax + 0x70], 0
je 0x10037a74
mov eax, dword [eax + 0x34]
test eax, eax
je 0x10037a74
cmp dword [eax + 0x5d0], 0
je 0x10037a74
cmp dword [eax + 0x7cc], 0
je 0x10037a74
movss xmm0, dword [0x10079b34]
movss xmm3, dword [0x1006fa74]
mulss xmm0, xmm3
cvttss2si edx, xmm0
and edx, 0x800000ff
jns 0x100364f6
dec edx
or edx, 0xffffff00
inc edx
movss xmm0, dword [0x10079b30]
mulss xmm0, xmm3
cvttss2si ecx, xmm0
and ecx, 0x800000ff
jns 0x10036516
dec ecx
or ecx, 0xffffff00
inc ecx
movss xmm0, dword [0x10079b2c]
mulss xmm0, xmm3
cvttss2si eax, xmm0
and eax, 0x800000ff
jns 0x10036534
dec eax
or eax, 0xffffff00
inc eax
movss xmm0, dword [0x1007acbc]
mulss xmm0, dword [0x1006f9dc]
movzx edi, al
movss xmm5, dword [0x1006f97c]
or edi, 0xffffff00
shl edi, 8
movzx eax, cl
or edi, eax
movzx eax, dl
shl edi, 8
or edi, eax
cmp byte [0x1007ac91], 0
mov eax, dword [0x1007ad34]
movss xmm3, dword [eax + 0x5c]
movss xmm4, dword [eax + 0x60]
movaps xmm1, xmm3
subss xmm3, xmm0
mulss xmm1, xmm5
movss xmm0, dword [0x1007ac44]
movaps xmm2, xmm4
mulss xmm0, dword [0x1006f9dc]
mulss xmm2, xmm5
subss xmm4, xmm0
movaps xmm0, xmm3
mulss xmm0, xmm5
subss xmm1, xmm0
movaps xmm0, xmm4
mulss xmm0, xmm5
subss xmm2, xmm0
je 0x100365c8
push edi
push ecx
movss dword [esp], xmm4
call fcn.100363f0
add esp, 8
mov eax, dword [esi + 0xd4]
mov ecx, dword [eax + 0x34]
mov dword [0x1007ad2c], ecx
mov dword [0x1007ad10], ecx
cmp dword [ecx + 0x420], 0
je 0x10037a74
movd xmm1, dword [0x1007ad24]
mov eax, dword [ecx + 0x420]
mov edi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov dword [ebp - 0x2b4], edi
cvtdq2ps xmm1, xmm1
movq xmm0, qword [eax + 0x2dc]
mulss xmm1, dword [0x1006f938]
mov eax, dword [eax + 0x2e4]
movq qword [ebp - 0x2ac], xmm0
mov dword [ebp - 0x2a4], eax
movss dword [ebp - 0x250], xmm1
movd xmm1, dword [0x1007ad20]
cvtdq2ps xmm1, xmm1
mulss xmm1, dword [0x1006f938]
movss dword [ebp - 0x290], xmm1
test ecx, ecx
je 0x10036ade
cmp byte [0x1007ac86], 0
je 0x10036675
push 0x77
call edi
test al, 1
je 0x10036675
cmp byte [0x1007ac8c], 0
sete byte [0x1007ac8c]
cmp byte [0x1007ac8f], 0
je 0x10036694
push 0x70
call edi
test al, 1
je 0x10036694
cmp byte [0x1007ac78], 0
sete byte [0x1007ac78]
cmp byte [0x1007ac37], 0
je 0x100366b3
push 0x71
call edi
test al, 1
je 0x100366b3
cmp byte [0x1007ac8d], 0
sete byte [0x1007ac8d]
cmp byte [0x1007ac73], 0
je 0x10036767
push 0x73
call edi
test al, 1
je 0x10036767
mov ecx, dword [0x1007ad6c]
mov esi, dword [0x1007ad10]
test ecx, ecx
jne 0x1003674f
push str.Function_Engine.PlayerController.Suicide
lea ecx, [ebp - 0x2e4]
call fcn.100392b0
lea ecx, [ebp - 0x2e4]
mov dword [ebp - 4], 0
call fcn.10039470
mov ecx, eax
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x2d0]
mov dword [0x1007ad6c], ecx
cmp eax, 0xf
jbe 0x1003674f
mov edx, dword [ebp - 0x2e4]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x1003673f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10037a8f
push ecx
push edx
call fcn.1003b388
mov ecx, dword [0x1007ad6c]
add esp, 8
mov eax, dword [esi]
lea edx, [ebp - 0x219]
push 0
push edx
push ecx
mov eax, dword [eax + 0x10]
mov ecx, esi
call eax
call fcn.1003a770
cmp byte [0x1007ac72], 0
je 0x1003677d
push 0x2e
call edi
test al, 1
je 0x1003677d
call fcn.1003a770
cmp byte [0x1007ac70], 0
je 0x10036794
push 1
call fcn.1003a960
push 0
call fcn.1003a960
cmp byte [0x1007ac84], 0
je 0x100367d3
cmp dword [0x1007ac88], 1
jne 0x100367b8
push 0x43
call edi
test al, 1
je 0x100367b8
push 0xf8
call fcn.1003a840
cmp dword [0x1007ac88], 2
jne 0x100367d3
push 0x43
call edi
test al, 1
je 0x100367d3
push 0xa4
call fcn.1003a840
cmp byte [0x1007ac79], 0
je 0x10036808
push 0x43
call fcn.1003a840
push 0x9a
call fcn.1003a840
push 0x6e
call fcn.1003a840
push 0x8a
call fcn.1003a840
push 0x85
call fcn.1003a840
cmp byte [0x1007ac78], 0
je 0x10036825
push 0xcc
call fcn.1003a840
push 0x1ef
call fcn.1003a840
cmp byte [0x1007ac8e], 0
je 0x1003688e
mov eax, dword fs:[0x2c]
mov ecx, dword [0x1007a290]
mov edi, dword [0x1007ad2c]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x1007adb4]
cmp eax, dword [ecx + 4]
jg 0x10037a94
mov edx, dword [0x1007adb0]
lea ecx, [ebp - 0x220]
mov eax, dword [edi]
push 0
push ecx
mov dword [ebp - 0x220], 0xdb
mov ecx, edi
mov eax, dword [eax + 0x10]
mov esi, dword [edx + 0x84]
push edx
call eax
mov eax, dword [0x1007adb0]
mov edi, dword [ebp - 0x2b4]
mov dword [eax + 0x84], esi
cmp byte [0x1007ac82], 0
je 0x1003689e
push 0x42
call fcn.1003a840
cmp byte [0x1007ac74], 0
je 0x100368b8
push 0x9a
call fcn.1003a840
push 0x6e
call fcn.1003a840
cmp byte [0x1007ac7a], 0
je 0x100368cb
push 0x174
call fcn.1003a840
cmp byte [0x1007ac8c], 0
je 0x100368db
push 0x52
call fcn.1003a840
cmp byte [0x1007ac71], 0
je 0x10036994
push 0x74
call edi
test al, 1
je 0x10036994
mov ecx, dword [0x1007ad90]
mov esi, dword [0x1007ad2c]
test ecx, ecx
jne 0x10036977
push str.Function_KFXGame.KFXPlayer.RybStateTest
lea ecx, [ebp - 0x2e4]
call fcn.100392b0
lea ecx, [ebp - 0x2e4]
mov dword [ebp - 4], 3
call fcn.10039470
mov ecx, eax
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x2d0]
mov dword [0x1007ad90], ecx
cmp eax, 0xf
jbe 0x10036977
mov edx, dword [ebp - 0x2e4]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x10036967
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10037b3f
push ecx
push edx
call fcn.1003b388
mov ecx, dword [0x1007ad90]
add esp, 8
mov eax, dword [esi]
lea edx, [ebp - 0x220]
push 0
push edx
mov dword [ebp - 0x220], 1
mov eax, dword [eax + 0x10]
push ecx
mov ecx, esi
call eax
cmp byte [0x1007ac77], 0
je 0x10036a4a
push 0x76
call edi
test al, 1
je 0x10036a4a
mov ecx, dword [0x1007ad88]
mov esi, dword [0x1007ad2c]
test ecx, ecx
jne 0x10036a30
push str.Function_Engine.PlayerController.BehindView
lea ecx, [ebp - 0x2e4]
call fcn.100392b0
lea ecx, [ebp - 0x2e4]
mov dword [ebp - 4], 4
call fcn.10039470
mov ecx, eax
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x2d0]
mov dword [0x1007ad88], ecx
cmp eax, 0xf
jbe 0x10036a30
mov edx, dword [ebp - 0x2e4]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x10036a20
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10037b44
push ecx
push edx
call fcn.1003b388
mov ecx, dword [0x1007ad88]
add esp, 8
mov eax, dword [esi]
lea edx, [ebp - 0x219]
push 0
push edx
mov byte [ebp - 0x219], 1
mov eax, dword [eax + 0x10]
push ecx
mov ecx, esi
call eax
push 0x78
call edi
cmp dword [0x1007ac7c], 0
je 0x10036a6a
push 0x75
call edi
test al, 1
je 0x10036a6a
push dword [0x1007ac7c]
call fcn.1003a840
cmp byte [0x1007ac80], 0
je 0x10036a7d
push 0x9a
call fcn.1003a840
cmp byte [0x1007ac76], 0
je 0x10036a8d
push 0x24
call fcn.1003a840
cmp byte [0x1007ac85], 0
je 0x10036aa0
push 0x140
call fcn.1003a840
cmp byte [0x1007ac81], 0
je 0x10036ab3
push 0xe5
call fcn.1003a840
cmp byte [0x1007ac75], 0
je 0x10036ac6
push 0xe7
call fcn.1003a840
cmp byte [0x1007ac7b], 0
je 0x10036ade
push 0x7b
call edi
test al, 1
je 0x10036ade
push 0x1c
call fcn.1003a840
cmp byte [0x1007ac83], 0
je 0x10036dc4
push 0x57
call edi
movss xmm0, dword [ebp - 0x2a4]
movss dword [ebp - 0x258], xmm0
movss xmm0, dword [ebp - 0x2a8]
movss dword [ebp - 0x25c], xmm0
movss xmm0, dword [ebp - 0x2ac]
movss dword [ebp - 0x254], xmm0
test ax, ax
jns 0x10036bc8
mov ecx, dword [0x1007ad10]
movss xmm0, dword [ebp - 0x250]
mov eax, dword [ecx + 0x420]
mov byte [eax + 0x84], 0x61
mov esi, dword [ecx + 0x420]
call fcn.100141e0
mulss xmm0, dword [0x1006fa70]
mulss xmm0, dword [0x1006f960]
addss xmm0, dword [ebp - 0x254]
movss dword [esi + 0x2dc], xmm0
movss xmm0, dword [ebp - 0x250]
call fcn.10014200
mulss xmm0, dword [0x1006fa70]
mulss xmm0, dword [0x1006f960]
addss xmm0, dword [ebp - 0x25c]
movss dword [esi + 0x2e0], xmm0
movss xmm0, dword [ebp - 0x290]
call fcn.10014200
mulss xmm0, dword [0x1006fa70]
mulss xmm0, dword [0x1006f960]
addss xmm0, dword [ebp - 0x258]
movss dword [esi + 0x2e4], xmm0
push 0x53
call edi
test ax, ax
jns 0x10036c6e
mov ecx, dword [0x1007ad10]
movss xmm0, dword [ebp - 0x250]
mov eax, dword [ecx + 0x420]
mov byte [eax + 0x84], 0x61
mov esi, dword [ecx + 0x420]
call fcn.100141e0
movaps xmm1, xmm0
movss xmm0, dword [ebp - 0x254]
mulss xmm1, dword [0x1006fa70]
mulss xmm1, dword [0x1006f960]
subss xmm0, xmm1
movss dword [esi + 0x2dc], xmm0
movss xmm0, dword [ebp - 0x250]
call fcn.10014200
movaps xmm1, xmm0
movss xmm0, dword [ebp - 0x25c]
mulss xmm1, dword [0x1006fa70]
mulss xmm1, dword [0x1006f960]
subss xmm0, xmm1
movss dword [esi + 0x2e0], xmm0
movss xmm0, dword [ebp - 0x258]
addss xmm0, dword [0x1006f910]
movss dword [esi + 0x2e4], xmm0
push 0x41
call edi
test ax, ax
jns 0x10036d0d
mov ecx, dword [0x1007ad10]
movss xmm0, dword [ebp - 0x250]
mov eax, dword [ecx + 0x420]
mov byte [eax + 0x84], 0x61
mov esi, dword [ecx + 0x420]
call fcn.10014200
mulss xmm0, dword [0x1006fa70]
mulss xmm0, dword [0x1006f960]
addss xmm0, dword [ebp - 0x254]
movss dword [esi + 0x2dc], xmm0
movss xmm0, dword [ebp - 0x250]
call fcn.100141e0
movaps xmm1, xmm0
movss xmm0, dword [ebp - 0x25c]
mulss xmm1, dword [0x1006fa70]
mulss xmm1, dword [0x1006f960]
subss xmm0, xmm1
movss dword [esi + 0x2e0], xmm0
movss xmm0, dword [ebp - 0x258]
addss xmm0, dword [0x1006f910]
movss dword [esi + 0x2e4], xmm0
push 0x44
call edi
test ax, ax
jns 0x10036da9
mov ecx, dword [0x1007ad10]
movss xmm0, dword [ebp - 0x250]
mov eax, dword [ecx + 0x420]
mov byte [eax + 0x84], 0x61
mov esi, dword [ecx + 0x420]
call fcn.10014200
mulss xmm0, dword [0x1006fa70]
movss xmm1, dword [ebp - 0x254]
mulss xmm0, dword [0x1006f960]
subss xmm1, xmm0
movss dword [esi + 0x2dc], xmm1
movss xmm0, dword [ebp - 0x250]
call fcn.100141e0
mulss xmm0, dword [0x1006fa70]
mulss xmm0, dword [0x1006f960]
addss xmm0, dword [ebp - 0x25c]
movss dword [esi + 0x2e0], xmm0
movss xmm0, dword [ebp - 0x258]
addss xmm0, dword [0x1006f910]
movss dword [esi + 0x2e4], xmm0
push 0x11
call edi
test ax, ax
jns 0x10036dc4
mov eax, dword [0x1007ad10]
mov eax, dword [eax + 0x420]
mov byte [eax + 0x84], 1
cmp dword [0x1007ad30], 0
jne 0x10036e40
mov ecx, 0x18
xor edx, edx
mov al, byte [edx + str.Lboio_eOEJJ__bp__NxHV_ECW]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x2e8], al
and ecx, 0x800000ff
jns 0x10036df4
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x1b
jl 0x10036dd4
mov byte [ebp - 0x2cd], 0
lea eax, [ebp - 0x2e8]
mov dword [ebp - 4], 5
push eax
lea ecx, [ebp - 0x314]
call fcn.100392b0
lea ecx, [ebp - 0x314]
mov byte [ebp - 4], 6
call fcn.10039470
lea ecx, [ebp - 0x314]
mov dword [0x1007ad30], eax
call fcn.10039260
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x1007ad34]
mov ecx, dword [0x1007ad10]
movss xmm1, dword [0x1006fa58]
mov esi, dword [ebp - 0x288]
movaps xmm2, xmm1
movss xmm0, dword [eax + 0x5c]
divss xmm0, dword [0x10079ad0]
mov dword [ebp - 0x220], 0
movss dword [0x1007acbc], xmm0
movss xmm0, dword [eax + 0x60]
divss xmm0, dword [0x10079ad0]
movss dword [0x1007ac44], xmm0
movq xmm0, qword [ecx + 0xaf0]
movq qword [0x1007ad14], xmm0
mov eax, dword [ecx + 0xaf8]
mov dword [0x1007ad1c], eax
movq xmm0, qword [ecx + 0xafc]
mov eax, dword [ecx + 0xb04]
mov ecx, esi
movq qword [0x1007ad20], xmm0
movss xmm0, dword [0x1006faa8]
mov dword [0x1007ad28], eax
movss dword [ebp - 0x2b0], xmm0
call fcn.1003a420
mov edx, dword [0x1007ad10]
mov dword [ebp - 0x254], 0xffffffff
mov eax, dword [ebp - 0x254]
mov dword [esi + 0x78], eax
mov eax, dword [edx + 0x7cc]
test eax, eax
je 0x10037a74
mov eax, dword [eax + 0x6e0]
test eax, eax
je 0x10037a74
cmp dword [edx + 0x420], 0
je 0x10037a74
mov dword [ebp - 0x290], 0
test eax, eax
je 0x10037a47
xor edi, edi
nop dword [eax]
nop word [eax + eax]
mov eax, dword [edx + 0x7cc]
mov eax, dword [eax + 0x6dc]
mov edi, dword [eax + edi*4]
test edi, edi
je 0x10037a22
mov eax, dword [esi + 0xd4]
cmp dword [eax + 0x34], 0
je 0x10037a22
test dword [edi + 0x78], 0x1000
jne 0x10037a22
cmp dword [edi + 0x54c], 0
jle 0x10037a22
mov ecx, dword [edx + 0x420]
test ecx, ecx
je 0x10037a22
cvttss2si eax, dword [edi + 0x544]
cmp dword [edi + 0x54c], eax
jg 0x10037a22
cmp dword [edi + 0x5e8], 0
je 0x10037a22
cmp dword [ecx + 0x5e8], 0
je 0x10037a22
mov eax, dword [ecx + 0xa4]
cmp eax, dword [edi + 0xa4]
jne 0x10037a22
cmp ecx, edi
je 0x10037a22
mov eax, dword [edi + 0x5e8]
cmp dword [eax + 0x490], 0
je 0x10037a22
cmp byte [0x10079ad4], 0
je 0x10037028
mov eax, dword [edx + 0x890]
test eax, eax
je 0x10037028
test byte [eax + 0x48c], 1
je 0x10037028
mov eax, dword [edx + 0x550]
test eax, eax
je 0x10037028
mov ecx, dword [edi + 0x5e8]
mov eax, dword [eax + 0x4d0]
cmp eax, dword [ecx + 0x4d0]
je 0x10037a22
mov dword [ebp - 0x270], 0x30706942
mov dword [ebp - 0x26c], 0x65482031
mov word [ebp - 0x268], 0x6461
mov byte [ebp - 0x266], 0
push ecx
lea eax, [ebp - 0x270]
mov dword [ebp - 4], 7
mov ecx, esp
push eax
call fcn.10035c50
lea eax, [ebp - 0x2d8]
mov ecx, edi
push eax
call fcn.10035f20
movq xmm0, qword [eax]
mov ecx, dword [eax + 8]
mov dword [ebp - 4], 0xffffffff
movq qword [ebp - 0x2c0], xmm0
xorps xmm0, xmm0
movq qword [ebp - 0x270], xmm0
movq qword [ebp - 0x338], xmm0
movq xmm0, qword [eax]
mov eax, ecx
movq qword [ebp - 0x2fc], xmm0
mov dword [ebp - 0x2f4], eax
movss xmm0, dword [ebp - 0x2f4]
addss xmm0, dword [0x1006fa50]
mov eax, dword [edi + 0x2e4]
mov dword [ebp - 0x2b8], ecx
movss xmm2, dword [ebp - 0x2b8]
mov dword [ebp - 0x318], eax
movss xmm1, dword [ebp - 0x318]
movss dword [ebp - 0x2f4], xmm0
xorps xmm0, xmm0
movq qword [ebp - 0x29c], xmm0
movq xmm0, qword [edi + 0x2dc]
movq qword [ebp - 0x320], xmm0
movaps xmm0, xmm2
subss xmm0, dword [edi + 0x2e4]
subss xmm2, dword [0x1007ad1c]
mov word [ebp - 0x268], 0
mov byte [ebp - 0x266], 0
mov dword [ebp - 0x330], 0
subss xmm1, xmm0
mov dword [ebp - 0x294], 0
xorps xmm0, xmm0
mulss xmm2, xmm2
mov dword [ebp - 0x324], 0
movq qword [ebp - 0x32c], xmm0
movss xmm0, dword [ebp - 0x2bc]
subss xmm1, dword [0x1006fa5c]
subss xmm0, dword [0x1007ad18]
movss dword [ebp - 0x318], xmm1
movss xmm1, dword [ebp - 0x2c0]
subss xmm1, dword [0x1007ad14]
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm1
addss xmm0, xmm2
call fcn.10014220
add esp, 4
movss dword [ebp - 0x2a0], xmm0
lea eax, [ebp - 0x2c0]
mov dword [ebp - 0x258], 0x1f03434
push eax
call fcn.10039f00
test al, al
je 0x100371d6
mov dword [ebp - 0x274], 0xffff0000
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x258], eax
lea edx, [ebp - 0x338]
lea ecx, [ebp - 0x2c0]
call fcn.10036080
test al, al
je 0x10037a16
lea edx, [ebp - 0x29c]
lea ecx, [ebp - 0x2fc]
call fcn.10036080
test al, al
je 0x10037a16
lea edx, [ebp - 0x32c]
lea ecx, [ebp - 0x320]
call fcn.10036080
test al, al
je 0x10037a16
movss xmm2, dword [ebp - 0x328]
subss xmm2, dword [ebp - 0x298]
movss xmm1, dword [ebp - 0x29c]
movss dword [ebp - 0x25c], xmm1
andps xmm2, xmmword [0x10070110]
movaps xmm0, xmm2
movss dword [ebp - 0x260], xmm2
mulss xmm0, dword [0x1006f97c]
movss dword [ebp - 0x284], xmm0
mulss xmm0, dword [0x1006f97c]
subss xmm1, xmm0
movss xmm0, dword [0x10079b18]
movss dword [ebp - 0x254], xmm1
movss xmm1, dword [0x1006fa74]
mulss xmm0, xmm1
cvttss2si edx, xmm0
and edx, 0x800000ff
jns 0x1003729f
dec edx
or edx, 0xffffff00
inc edx
movss xmm0, dword [0x10079b14]
mulss xmm0, xmm1
cvttss2si ecx, xmm0
and ecx, 0x800000ff
jns 0x100372bf
dec ecx
or ecx, 0xffffff00
inc ecx
movss xmm0, dword [0x10079b10]
mulss xmm0, xmm1
cvttss2si eax, xmm0
and eax, 0x800000ff
jns 0x100372dd
dec eax
or eax, 0xffffff00
inc eax
cmp byte [0x1007ac9c], 0
mov byte [ebp - 0x250], dl
mov byte [ebp - 0x24f], cl
mov byte [ebp - 0x24e], al
mov byte [ebp - 0x24d], 0xff
je 0x10037468
mov eax, dword [0x1007ad34]
mov ecx, dword [0x1007ad70]
mov dword [ebp - 0x2ec], eax
movss xmm1, dword [eax + 0x60]
movss xmm0, dword [eax + 0x5c]
mov eax, dword [0x1007ad10]
movss dword [ebp - 0x28c], xmm1
movss dword [ebp - 0x264], xmm0
movss xmm1, dword [eax + 0x42c]
movss dword [ebp - 0x2f0], xmm1
test ecx, ecx
jne 0x100373c2
push str.Function_Engine.Canvas.DrawActorClipped
lea ecx, [ebp - 0x314]
call fcn.100392b0
lea ecx, [ebp - 0x314]
mov dword [ebp - 4], 8
call fcn.10039470
mov ecx, eax
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x300]
mov dword [0x1007ad70], ecx
cmp eax, 0xf
jbe 0x100373ba
mov edx, dword [ebp - 0x314]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x100373aa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10037a8f
push ecx
push edx
call fcn.1003b388
mov ecx, dword [0x1007ad70]
add esp, 8
movss xmm0, dword [ebp - 0x264]
mov edx, dword [ebp - 0x2ec]
xor eax, eax
movss dword [ebp - 0x234], xmm0
movss xmm0, dword [ebp - 0x28c]
movss dword [ebp - 0x230], xmm0
movss xmm0, dword [ebp - 0x2f0]
mov dword [ebp - 0x244], edi
mov byte [ebp - 0x240], 1
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x238], 0
mov byte [ebp - 0x22c], 1
movss dword [ebp - 0x228], xmm0
movzx esi, word [ecx + 0x88]
or dword [ecx + 0x84], 0xfffffbff
push eax
mov word [ecx + 0x88], ax
lea eax, [ebp - 0x244]
push eax
mov eax, dword [edx]
push ecx
mov ecx, edx
mov eax, dword [eax + 0x10]
call eax
mov eax, dword [0x1007ad70]
movss xmm2, dword [ebp - 0x260]
or dword [eax + 0x84], 0x400
mov word [eax + 0x88], si
mov esi, dword [ebp - 0x288]
cmp byte [0x1007ac9b], 0
je 0x1003761a
movss xmm1, dword [edi + 0x544]
movd xmm0, dword [edi + 0x54c]
divss xmm1, xmm2
cvtdq2ps xmm0, xmm0
divss xmm0, xmm1
call fcn.10014250
movss xmm1, dword [ebp - 0x260]
mov ecx, dword [0x1007ad34]
subss xmm1, xmm0
movss xmm0, dword [edi + 0x544]
mulss xmm0, dword [0x1006f97c]
movss dword [ebp - 0x28c], xmm1
movd xmm1, dword [edi + 0x54c]
cvtdq2ps xmm1, xmm1
comiss xmm1, xmm0
jbe 0x1003751d
subss xmm1, xmm0
mov word [ebp - 0x278], 0xff00
mov byte [ebp - 0x275], 0xff
mulss xmm1, dword [0x1006fa64]
divss xmm1, xmm0
movss xmm0, dword [0x1006fa74]
mulss xmm1, dword [0x1006fa74]
divss xmm1, dword [0x1006fa64]
subss xmm0, xmm1
cvttss2si eax, xmm0
mov byte [ebp - 0x276], al
mov eax, dword [ebp - 0x278]
jmp 0x10037559
mulss xmm1, dword [0x1006fa64]
mov byte [ebp - 0x27c], 0
mov word [ebp - 0x27a], 0xffff
divss xmm1, xmm0
mulss xmm1, dword [0x1006fa74]
divss xmm1, dword [0x1006fa64]
cvttss2si eax, xmm1
mov byte [ebp - 0x27b], al
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x264], eax
lea eax, [ebp - 0x264]
push eax
call fcn.1003a240
movss xmm0, dword [ebp - 0x254]
subss xmm0, dword [0x1006fa1c]
movss xmm2, dword [ebp - 0x298]
addss xmm2, dword [0x1006f9b0]
mov ecx, dword [0x1007ad34]
movaps xmm1, xmm0
movss dword [ebp - 0x254], xmm0
call fcn.1003a420
movss xmm3, dword [ebp - 0x260]
subss xmm3, dword [0x1006f9dc]
movss xmm2, dword [0x1006fa18]
push ecx
subss xmm3, dword [ebp - 0x28c]
call fcn.1003a320
mov ecx, dword [0x1007ad34]
lea eax, [ebp - 0x280]
push eax
mov dword [ebp - 0x280], 0xff0a190a
call fcn.1003a240
movss xmm2, dword [ebp - 0x298]
movss xmm1, dword [ebp - 0x254]
mov ecx, dword [0x1007ad34]
call fcn.1003a420
mov ecx, dword [0x1007ad34]
movss xmm3, dword [ebp - 0x260]
movss xmm2, dword [0x1006fa18]
push ecx
call fcn.1003a140
cmp byte [0x1007ac99], 0
je 0x10037627
or dword [edi + 0x40], 2
cmp byte [0x1007ac9a], 0
je 0x1003768d
mov ecx, dword [0x1007ad34]
lea eax, [ebp - 0x250]
push eax
call fcn.1003a240
movss xmm0, dword [ebp - 0x284]
mulss xmm0, dword [0x1006f97c]
mov ecx, dword [0x1007ad34]
movss xmm1, dword [ebp - 0x25c]
movss xmm2, dword [ebp - 0x298]
subss xmm1, xmm0
call fcn.1003a420
mov ecx, dword [0x1007ad34]
movss xmm3, dword [ebp - 0x260]
movss xmm2, dword [ebp - 0x284]
push ecx
call fcn.1003a140
cmp byte [0x1007ac98], 0
je 0x10037798
mov eax, dword [0x1007ac94]
test eax, eax
jne 0x100376f3
mov ecx, dword [0x1007ad34]
lea eax, [ebp - 0x250]
push eax
call fcn.1003a240
movss xmm2, dword [esi + 0x60]
mov ecx, esi
divss xmm2, dword [0x1006fa60]
movss xmm1, dword [esi + 0x5c]
mulss xmm1, dword [0x1006f97c]
call fcn.1003a420
movss xmm2, dword [ebp - 0x298]
movss xmm1, dword [ebp - 0x25c]
push ecx
mov ecx, esi
call fcn.1003a510
mov eax, dword [0x1007ac94]
cmp eax, 1
jne 0x1003774c
lea eax, [ebp - 0x250]
mov ecx, esi
push eax
call fcn.1003a240
movss xmm2, dword [esi + 0x60]
mov ecx, esi
movss xmm1, dword [esi + 0x5c]
mulss xmm2, dword [0x1006f97c]
mulss xmm1, dword [0x1006f97c]
call fcn.1003a420
movss xmm2, dword [ebp - 0x298]
addss xmm2, dword [0x1006fa4c]
movss xmm1, dword [ebp - 0x25c]
push ecx
mov ecx, esi
call fcn.1003a510
mov eax, dword [0x1007ac94]
cmp eax, 2
jne 0x10037798
lea eax, [ebp - 0x250]
mov ecx, esi
push eax
call fcn.1003a240
movss xmm1, dword [esi + 0x5c]
mov ecx, esi
mulss xmm1, dword [0x1006f97c]
movss xmm2, dword [esi + 0x60]
call fcn.1003a420
movss xmm2, dword [ebp - 0x298]
addss xmm2, dword [ebp - 0x260]
movss xmm1, dword [ebp - 0x25c]
push ecx
mov ecx, esi
call fcn.1003a510
cmp byte [0x1007ac92], 0
je 0x1003798e
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.1003d5c0
mov eax, dword [edi + 0x5e8]
add esp, 0xc
test eax, eax
je 0x100377df
push dword [eax + 0x490]
lea eax, [ebp - 0x218]
push 0x1006f44c
push eax
call fcn.10039550
add esp, 0xc
lea eax, [ebp - 0x258]
mov ecx, esi
push eax
call fcn.1003a240
movss xmm0, dword [ebp - 0x284]
divss xmm0, dword [0x1006fa18]
mov ecx, dword [0x1007ad34]
movss xmm1, dword [ebp - 0x25c]
movss xmm2, dword [ebp - 0x298]
subss xmm1, xmm0
call fcn.1003a420
cmp word [ebp - 0x218], 0
mov dword [ebp - 0x2cc], 0
je 0x10037870
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10037840
sub ecx, edx
sar ecx, 1
lea eax, [ecx + 1]
mov dword [ebp - 0x2c8], eax
mov dword [ebp - 0x2c4], eax
test eax, eax
je 0x10037884
lea eax, [ebp - 0x218]
mov dword [ebp - 0x2cc], eax
jmp 0x10037884
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2c4], 0
push ecx
lea eax, [ebp - 0x250]
mov ecx, esi
push eax
lea eax, [ebp - 0x2cc]
push eax
call fcn.1003a640
cmp byte [0x1007ac93], 0
je 0x1003798e
movss xmm0, dword [ebp - 0x2a0]
lea eax, [ebp - 0x218]
divss xmm0, dword [0x1006fa64]
sub esp, 8
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push eax
push str._s___1.0f_
push eax
call fcn.10039550
add esp, 0x14
lea eax, [ebp - 0x258]
mov ecx, esi
push eax
call fcn.1003a240
movss xmm1, dword [ebp - 0x284]
divss xmm1, dword [0x1006fa44]
mov ecx, dword [0x1007ad34]
movss xmm0, dword [ebp - 0x25c]
movss xmm2, dword [ebp - 0x298]
subss xmm0, xmm1
movaps xmm1, xmm0
call fcn.1003a420
cmp word [ebp - 0x218], 0
mov dword [ebp - 0x2ac], 0
je 0x10037964
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10037934
sub ecx, edx
sar ecx, 1
lea eax, [ecx + 1]
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 0x2a4], eax
test eax, eax
je 0x10037978
lea eax, [ebp - 0x218]
mov dword [ebp - 0x2ac], eax
jmp 0x10037978
mov dword [ebp - 0x2a8], 0
mov dword [ebp - 0x2a4], 0
push ecx
lea eax, [ebp - 0x250]
mov ecx, esi
push eax
lea eax, [ebp - 0x2ac]
push eax
call fcn.1003a640
push ecx
lea eax, [ebp - 0x2c0]
push eax
call fcn.10039f00
test al, al
je 0x10037a16
mov eax, dword [0x1007ad10]
lea ecx, [ebp - 0x344]
push ecx
mov ecx, dword [eax + 0x420]
call fcn.1003a030
mov esi, eax
mov ecx, edi
lea eax, [ebp - 0x350]
push eax
call fcn.1003a030
movss xmm2, dword [eax]
movss xmm0, dword [eax + 4]
subss xmm0, dword [esi + 4]
subss xmm2, dword [esi]
movss xmm1, dword [eax + 8]
subss xmm1, dword [esi + 8]
mulss xmm0, xmm0
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm0, xmm2
addss xmm0, xmm1
call fcn.10014220
movss xmm1, dword [ebp - 0x2b0]
comiss xmm1, xmm0
jbe 0x10037a16
mov dword [ebp - 0x220], edi
movss dword [ebp - 0x2b0], xmm0
mov esi, dword [ebp - 0x288]
mov edx, dword [0x1007ad10]
mov edi, dword [ebp - 0x290]
mov eax, dword [edx + 0x7cc]
inc edi
mov dword [ebp - 0x290], edi
cmp edi, dword [eax + 0x6e0]
jb 0x10036f40
mov edi, dword [ebp - 0x2b4]
cmp byte [0x1007ac90], 0
je 0x10037a74
mov esi, dword [ebp - 0x220]
test esi, esi
je 0x10037a74
mov eax, dword [0x1007ac3c]
push dword [eax*4 + 0x1006ee40]
call edi
test ax, ax
jns 0x10037a74
mov ecx, esi
call fcn.100361d0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1003ae6b
mov esp, ebp
pop ebp
ret
call fcn.1004b511
push 0x1007adb4
call fcn.1003aef5
add esp, 4
cmp dword [0x1007adb4], 0xffffffff
jne 0x10036854
mov dword [ebp - 4], 1
lea eax, [ebp - 0x314]
movaps xmm0, xmmword [0x10070100]
lea ecx, [ebp - 0x24c]
movups xmmword [ebp - 0x24c], xmm0
push eax
movaps xmm0, xmmword [0x100700e0]
movups xmmword [ebp - 0x23c], xmm0
mov dword [ebp - 0x22c], 0x4a496d59
mov dword [ebp - 0x228], 0x4650447c
mov word [ebp - 0x224], 0x56
mov byte [ebp - 0x222], 1
call fcn.1003abf0
lea ecx, [ebp - 0x314]
mov byte [ebp - 4], 2
call fcn.10039470
lea ecx, [ebp - 0x314]
mov dword [0x1007adb0], eax
call fcn.10039260
push 0x1007adb4
mov dword [ebp - 4], 0xffffffff
call fcn.1003aea4
add esp, 4
jmp 0x10036854
call fcn.1004b511
call fcn.1004b511
int3