Function at 0x1004fa94
Capabilities:
Log keystrokes via polling

Disassembly:
sub esp, 0x934
push str.ikidokuzuc
call fcn.1005b96b
pop ecx
call fcn.1002b157
test eax, eax
jne 0x10051264
mov eax, dword [0x1015c888]
push ebx
xor ebx, ebx
cmp dword [eax + 0xd09f], ebx
jne 0x10051263
cmp dword [eax + 0xe1cc], ebx
je 0x10051263
push esi
cmp dword [0x1019a990], ebx
je 0x1004fb18
cmp dword [0x1018d148], ebx
je 0x1004fb18
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
push 9
call esi
test ax, ax
jns 0x1004fafe
cmp dword [0x101709a0], ebx
jne 0x10051262
mov eax, dword [0x1018d160]
cmp dword [eax], ebx
jne 0x10051262
push 0x79
call esi
test ax, ax
js 0x10051262
cmp dword [0x1019a9a4], ebx
je 0x10051262
push dword [0x1019a9ac]
call fcn.1002b3fb
pop ecx
test eax, eax
jne 0x10051262
push edi
mov esi, 0x3ec
lea eax, [esp + 0xc]
push esi
push ebx
push eax
call fcn.1005f3d0
push esi
lea eax, [esp + 0x408]
push 1
push eax
call fcn.1005f3d0
mov ecx, dword [0x1019a9ac]
add esp, 0x18
mov eax, dword [ecx]
call dword [eax + 0x10]
test eax, eax
je 0x1004fb8b
mov ecx, dword [0x1019a9ac]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, dword [eax + 4]
add eax, 4
mov ecx, dword [ecx + 4]
add ecx, eax
mov eax, dword [ecx]
call dword [eax + 0x28]
mov esi, eax
jmp 0x1004fb96
mov eax, dword [0x1019a9b0]
mov esi, dword [eax + 0x14]
add esi, 0x30
mov ecx, dword [0x1019a9ac]
lea edi, [esp + 0x8f0]
movsd dword es:[edi], dword [esi]
mov eax, dword [ecx + 4]
add ecx, 4
movsd dword es:[edi], dword [esi]
mov eax, dword [eax + 4]
add ecx, eax
movsd dword es:[edi], dword [esi]
mov eax, dword [ecx]
call dword [eax + 0xb0]
mov ecx, dword [0x1019a9a4]
mov esi, eax
mov dword [esp + 0x908], esi
mov edx, dword [ecx]
call dword [edx]
add eax, 0x1f84
lea ecx, [esp + 0x90c]
push ecx
mov ecx, eax
mov dword [esp + 0x940], eax
call fcn.100174a0
mov ebx, dword [esp + 0x910]
cmp ebx, dword [esp + 0x914]
jae 0x1004fdde
mov edi, dword [ebx + 4]
add ebx, 8
test edi, edi
je 0x1004fdca
mov eax, dword [edi]
mov ecx, dword [eax + 4]
add ecx, edi
mov eax, dword [ecx]
call dword [eax + 0xb0]
mov dword [esp + 0x930], eax
cmp eax, esi
je 0x1004fdca
mov ecx, dword [edi]
mov ecx, dword [ecx + 0xc]
add ecx, edi
mov edx, dword [ecx]
call dword [edx + 0x10]
mov ecx, dword [edi]
test eax, eax
je 0x1004fca5
mov ecx, dword [ecx + 0xc]
add ecx, edi
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, dword [eax + 4]
add eax, 4
mov ecx, dword [ecx + 4]
add ecx, eax
mov eax, dword [ecx]
call dword [eax + 0x34]
movzx eax, ax
push eax
call fcn.1002b1e8
pop ecx
cmp dword [eax + 4], 7
jne 0x1004fc9e
mov eax, dword [edi]
mov eax, dword [eax + 0xc]
lea ecx, [eax + edi]
lea esi, [eax + edi]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 4]
cmp eax, esi
jne 0x1004fc9e
mov eax, dword [edi]
mov ecx, dword [eax + 0xc]
add ecx, edi
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, dword [eax + 4]
add eax, 4
mov ecx, dword [ecx + 4]
add ecx, eax
mov eax, dword [ecx]
call dword [eax + 0x28]
mov esi, eax
jmp 0x1004fcb5
mov eax, dword [edi]
mov ecx, dword [eax + 4]
jmp 0x1004fca8
mov ecx, dword [ecx + 4]
add ecx, edi
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [eax + 0x14]
add esi, 0x30
movss xmm2, dword [esp + 0x8f0]
lea edi, [esp + 0x8fc]
movss xmm1, dword [esp + 0x8f4]
movss xmm0, dword [esp + 0x8f8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movss xmm4, dword [esp + 0x8fc]
movss xmm5, dword [esp + 0x900]
subss xmm2, xmm4
movss xmm3, dword [esp + 0x904]
subss xmm1, xmm5
subss xmm0, xmm3
imul esi, dword [esp + 0x930], 0x16
mulss xmm2, xmm2
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm1, xmm2
addss xmm1, xmm0
xorps xmm0, xmm0
sqrtss xmm0, xmm1
comiss xmm0, dword [0x10170a59]
jbe 0x1004fd39
mov byte [esi + 0x10194f55], 1
jmp 0x1004fdc3
addss xmm3, dword [0x10095ea8]
lea eax, [esp + 0x918]
mov byte [esi + 0x10194f55], 0
push eax
lea eax, [esp + 0x8e8]
movss dword [esp + 0x8e8], xmm4
push eax
movss dword [esp + 0x8f0], xmm5
movss dword [esp + 0x8f4], xmm3
call fcn.100030b8
movss xmm1, dword [esp + 0x928]
movss xmm0, dword [0x10083148]
comiss xmm0, xmm1
pop ecx
pop ecx
jbe 0x1004fd99
and dword [esi + 0x10194f4c], 0
jmp 0x1004fd2d
movss xmm0, dword [esp + 0x918]
movss dword [esi + 0x10194f40], xmm0
movss xmm0, dword [esp + 0x91c]
movss dword [esi + 0x10194f44], xmm0
movss dword [esi + 0x10194f48], xmm1
mov esi, dword [esp + 0x908]
cmp ebx, dword [esp + 0x914]
jb 0x1004fbfb
mov dword [esp + 0x910], ebx
mov ebx, dword [esp + 0x93c]
lea eax, [esp + 0x918]
push eax
mov ecx, ebx
call fcn.100174a0
mov eax, dword [esp + 0x91c]
lea esi, [esp + 0x918]
lea edi, [esp + 0x90c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
cmp eax, dword [esp + 0x920]
jae 0x10050012
mov esi, dword [esp + 0x910]
mov ecx, dword [esi + 4]
add esi, 8
mov dword [esp + 0x910], esi
test ecx, ecx
je 0x1004fffe
mov eax, dword [ecx]
mov eax, dword [eax + 4]
add ecx, eax
mov eax, dword [ecx]
call dword [eax + 0xb0]
mov dword [esp + 0x928], eax
cmp eax, dword [esp + 0x908]
je 0x1004fffe
imul ebx, eax, 0x16
cmp byte [ebx + 0x10194f55], 0
jne 0x1004fffe
cmp byte [ebx + 0x10194f50], 0
jne 0x1004ffbb
movss xmm0, dword [0x1008dcb4]
comiss xmm0, dword [ebx + 0x10194f4c]
ja 0x1004fffe
mov ecx, dword [esp + 0x93c]
lea eax, [esp + 0x918]
push eax
call fcn.100174a0
mov eax, dword [esp + 0x91c]
lea esi, [esp + 0x918]
lea edi, [esp + 0x8fc]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, dword [esp + 0x928]
cmp eax, dword [esp + 0x920]
jae 0x1004ff82
mov esi, dword [esp + 0x900]
mov ecx, dword [esi + 4]
add esi, 8
test ecx, ecx
je 0x1004ff6e
mov eax, dword [ecx]
mov eax, dword [eax + 4]
add ecx, eax
mov eax, dword [ecx]
call dword [eax + 0xb0]
imul ecx, eax, 0x16
cmp byte [ecx + 0x10194f55], 0
jne 0x1004ff6e
cmp eax, edi
je 0x1004ff6e
movss xmm0, dword [ebx + 0x10194f40]
subss xmm0, dword [ecx + 0x10194f40]
movss xmm2, dword [0x100831c0]
movss xmm1, dword [0x1008695c]
andps xmm0, xmm2
comiss xmm1, xmm0
jb 0x1004ff6e
movss xmm0, dword [ebx + 0x10194f4c]
mulss xmm0, dword [0x10083140]
movss xmm1, dword [ebx + 0x10194f44]
subss xmm1, xmm0
movss xmm0, dword [ecx + 0x10194f44]
subss xmm0, dword [ecx + 0x10194f4c]
subss xmm1, xmm0
movss xmm0, dword [0x1008e2d0]
andps xmm1, xmm2
comiss xmm0, xmm1
jb 0x1004ff6e
mov byte [esp + edi + 0x3f8], 0
cmp esi, dword [esp + 0x904]
jb 0x1004fed1
mov dword [esp + 0x900], esi
cmp byte [esp + edi + 0x3f8], 0
mov esi, dword [esp + 0x910]
je 0x1004ffb2
movss xmm0, dword [ebx + 0x10194f4c]
mulss xmm0, dword [0x10083140]
mov byte [ebx + 0x10194f50], 1
movss dword [ebx + 0x10194f51], xmm0
cmp byte [ebx + 0x10194f50], 0
je 0x1004fffe
movss xmm0, dword [ebx + 0x10194f4c]
movss xmm1, dword [0x10089688]
subss xmm0, xmm1
movss dword [ebx + 0x10194f4c], xmm0
movss xmm0, dword [ebx + 0x10194f51]
subss xmm0, xmm1
comiss xmm1, xmm0
movss dword [ebx + 0x10194f51], xmm0
jbe 0x1004fffe
and dword [ebx + 0x10194f51], 0
mov byte [ebx + 0x10194f50], 0
cmp esi, dword [esp + 0x914]
jb 0x1004fe20
mov ebx, dword [esp + 0x93c]
lea eax, [esp + 0x918]
mov ecx, ebx
push eax
call fcn.100174a0
mov eax, dword [esp + 0x91c]
lea esi, [esp + 0x918]
lea edi, [esp + 0x90c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
cmp eax, dword [esp + 0x920]
jae 0x100502a2
mov esi, dword [esp + 0x910]
mov ecx, dword [esi + 4]
add esi, 8
mov dword [esp + 0x910], esi
test ecx, ecx
je 0x1005028e
mov eax, dword [ecx]
mov eax, dword [eax + 4]
add ecx, eax
mov eax, dword [ecx]
call dword [eax + 0xb0]
imul ebx, eax, 0x16
mov dword [esp + 0x928], eax
cmp byte [ebx + 0x10194f55], 0
jne 0x1005028e
cmp byte [ebx + 0x10194f50], 0
jne 0x1005028e
mov ecx, dword [esp + 0x93c]
lea eax, [esp + 0x918]
push eax
call fcn.100174a0
mov eax, dword [esp + 0x91c]
lea esi, [esp + 0x918]
lea edi, [esp + 0x8fc]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
cmp eax, dword [esp + 0x920]
jae 0x1005024f
mov esi, dword [esp + 0x900]
mov ecx, dword [esi + 4]
add esi, 8
test ecx, ecx
je 0x1005023b
mov eax, dword [ecx]
mov eax, dword [eax + 4]
add ecx, eax
mov eax, dword [ecx]
call dword [eax + 0xb0]
cmp byte [ebx + 0x10194f55], 0
mov edx, eax
jne 0x1005023b
imul ecx, edx, 0x16
cmp byte [ecx + 0x10194f50], 0
jne 0x1005023b
mov eax, dword [esp + 0x928]
cmp eax, edx
je 0x1005023b
movss xmm0, dword [ebx + 0x10194f40]
subss xmm0, dword [ecx + 0x10194f40]
movss xmm4, dword [0x100831c0]
movss xmm5, dword [0x1008695c]
andps xmm0, xmm4
comiss xmm5, xmm0
jb 0x100501d2
movss xmm0, dword [ecx + 0x10194f44]
movss xmm3, dword [ebx + 0x10194f4c]
movss xmm2, dword [ecx + 0x10194f4c]
movss xmm1, dword [ebx + 0x10194f44]
subss xmm0, xmm2
subss xmm1, xmm3
subss xmm1, xmm0
movss xmm0, dword [0x1008e2d0]
andps xmm1, xmm4
comiss xmm0, xmm1
jb 0x100501d2
movss xmm1, dword [ebx + 0x10194f48]
movss xmm0, dword [ecx + 0x10194f48]
comiss xmm0, xmm1
ja 0x100501a6
comiss xmm1, xmm0
ja 0x100501bd
cmp eax, edx
jge 0x100501bd
addss xmm2, dword [0x10089688]
mov byte [esp + edx + 0xc], 1
movss dword [ecx + 0x10194f4c], xmm2
jmp 0x100501d2
addss xmm3, dword [0x10089688]
mov byte [esp + eax + 0xc], 1
movss dword [ebx + 0x10194f4c], xmm3
movss xmm0, dword [ebx + 0x10194f40]
subss xmm0, dword [ecx + 0x10194f40]
andps xmm0, xmm4
comiss xmm5, xmm0
jb 0x1005023b
movss xmm0, dword [ecx + 0x10194f44]
movss xmm1, dword [ebx + 0x10194f44]
subss xmm1, dword [ebx + 0x10194f4c]
subss xmm0, dword [ecx + 0x10194f4c]
subss xmm1, xmm0
movss xmm0, dword [0x10095f04]
andps xmm1, xmm4
comiss xmm0, xmm1
jb 0x1005023b
movss xmm0, dword [ecx + 0x10194f48]
comiss xmm0, dword [ebx + 0x10194f48]
jbe 0x10050236
mov byte [esp + edx + 0xc], 1
jmp 0x1005023b
mov byte [esp + eax + 0xc], 1
cmp esi, dword [esp + 0x904]
jb 0x100500d5
mov dword [esp + 0x900], esi
mov eax, dword [esp + 0x928]
mov esi, dword [esp + 0x910]
cmp byte [esp + eax + 0xc], 0
jne 0x1005028e
movss xmm1, dword [ebx + 0x10194f4c]
movss xmm0, dword [0x10089688]
comiss xmm1, xmm0
jb 0x10050287
subss xmm1, xmm0
movss dword [ebx + 0x10194f4c], xmm1
jmp 0x1005028e
and dword [ebx + 0x10194f4c], 0
cmp esi, dword [esp + 0x914]
jb 0x1005004d
mov ebx, dword [esp + 0x93c]
lea eax, [esp + 0x918]
mov ecx, ebx
push eax
call fcn.100174a0
mov eax, dword [esp + 0x91c]
lea esi, [esp + 0x918]
lea edi, [esp + 0x90c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
cmp eax, dword [esp + 0x920]
jae 0x10051261
mov ebx, dword [esp + 0x910]
mov esi, dword [esp + 0x930]
mov dword [esp + 0x928], ebx
mov ebx, dword [ebx + 4]
add dword [esp + 0x928], 8
test ebx, ebx
je 0x1005124d
mov eax, dword [ebx]
mov ecx, dword [eax + 4]
add ecx, ebx
mov eax, dword [ecx]
call dword [eax + 0xb0]
imul edi, eax, 0x16
cmp byte [edi + 0x10194f55], 0
jne 0x1005124d
cmp eax, dword [esp + 0x908]
je 0x1005124d
cmp dword [0x1018d14c], 0
movss xmm0, dword [edi + 0x10194f44]
subss xmm0, dword [edi + 0x10194f4c]
subss xmm0, dword [0x10090df0]
movss dword [esp + 0x938], xmm0
je 0x100503dd
mov eax, dword [ebx]
mov ecx, dword [eax + 0xc]
add ecx, ebx
mov eax, dword [ecx]
call dword [eax]
push eax
call fcn.1002aff1
pop ecx
mov esi, dword [eax*4 + 0x10192f68]
mov eax, dword [0x1018d14c]
test eax, eax
je 0x100503dd
mov eax, dword [eax + esi*4 + 0x26]
test eax, eax
je 0x1005124d
mov eax, dword [eax + 8]
test eax, eax
je 0x1005124d
cmp dword [eax + 4], 0
je 0x1005124d
mov eax, dword [ebx]
mov ecx, dword [eax + 0xc]
add ecx, ebx
mov eax, dword [ecx]
call dword [eax]
mov ecx, dword [0x1018d14c]
mov ecx, dword [ecx + esi*4 + 0x26]
mov edx, dword [ecx + 8]
mov ecx, dword [edx + 4]
cmp dword [ecx + 0x2a4], eax
jne 0x1005124d
movss xmm0, dword [edx + 0x1b0]
movss dword [esp + 0x93c], xmm0
movss xmm0, dword [edx + 0x1ac]
jmp 0x1005041e
mov eax, dword [ebx]
mov ecx, dword [eax + 0xc]
add ecx, ebx
mov eax, dword [ecx]
call dword [eax + 0x1c]
mov eax, dword [ebx]
fstp dword [esp + 0x930]
mov ecx, dword [eax + 0xc]
add ecx, ebx
mov eax, dword [ecx]
call dword [eax + 0x24]
movss xmm0, dword [esp + 0x930]
fstp dword [esp + 0x934]
movss dword [esp + 0x93c], xmm0
movss xmm0, dword [esp + 0x934]
movss dword [esp + 0x934], xmm0
movss xmm0, dword [edi + 0x10194f40]
subss xmm0, dword [0x10090df4]
movss dword [edi + 0x10194f40], xmm0
call fcn.100411c5
movss xmm0, dword [esp + 0x93c]
minss xmm0, dword [0x1008695c]
movss xmm1, dword [0x10095f2c]
comiss xmm1, xmm0
movss xmm1, dword [0x1008e2d0]
movss dword [esp + 0x93c], xmm0
jbe 0x1005047f
comiss xmm0, xmm1
jbe 0x1005047f
mov ebx, 0xffa1a310
jmp 0x1005049a
comiss xmm1, xmm0
mov eax, 0xff04b903
mov ebx, eax
jbe 0x1005049a
comiss xmm0, dword [0x10083134]
mov eax, 0xff93041a
cmova ebx, eax
movss xmm0, dword [esp + 0x938]
subss xmm0, dword [0x10083140]
mov ecx, dword [0x10194f14]
push 0x6f000000
sub esp, 0x10
mov dword [esp + 0xc], 0x41e00000
mov dword [esp + 8], 0x42c80000
movss dword [esp + 4], xmm0
movss xmm0, dword [edi + 0x10194f40]
subss xmm0, dword [0x10083140]
movss dword [esp], xmm0
call fcn.10041726
movss xmm0, dword [esp + 0x93c]
subss xmm0, dword [0x10089668]
movss xmm1, dword [esp + 0x938]
addss xmm1, dword [0x10083140]
mov ecx, dword [0x10194f14]
push ebx
sub esp, 0x10
movss dword [esp + 0x938], xmm1
mov dword [esp + 0xc], 0x41000000
movss dword [esp + 8], xmm0
movss xmm0, dword [edi + 0x10194f40]
addss xmm0, dword [0x10083140]
movss dword [esp + 4], xmm1
movss dword [esp], xmm0
call fcn.10041726
mov eax, dword [0x1018d14c]
mov eax, dword [eax + esi*4 + 0x26]
mov eax, dword [eax + 0xc]
cmp eax, 0x14
jle 0x10050562
push 5
pop eax
jmp 0x1005056b
cdq
and edx, 7
add eax, edx
sar eax, 3
mov ecx, dword [0x10194f14]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
push 0xff008080
sub esp, 0x10
mov dword [esp + 0xc], 0x41000000
movss dword [esp + 8], xmm0
movss xmm0, dword [esp + 0x938]
addss xmm0, dword [0x10089690]
movss dword [esp + 4], xmm0
movss xmm0, dword [edi + 0x10194f40]
addss xmm0, dword [0x10083140]
movss dword [esp], xmm0
call fcn.10041726
movss xmm0, dword [esp + 0x934]
subss xmm0, dword [0x10089668]
mov ecx, dword [0x10194f14]
push 0x78bababa
sub esp, 0x10
mov dword [esp + 0xc], 0x41000000
movss dword [esp + 8], xmm0
movss xmm0, dword [esp + 0x938]
addss xmm0, dword [0x10090df0]
movss dword [esp + 4], xmm0
movss xmm0, dword [edi + 0x10194f40]
addss xmm0, dword [0x10083140]
movss dword [esp], xmm0
call fcn.10041726
cmp dword [0x1018d14c], 0
mov eax, dword [0x10194f28]
movss xmm0, dword [esp + 0x938]
cvttss2si ebx, dword [esp + 0x934]
movss xmm1, dword [eax + 0xe45]
addss xmm1, dword [0x10083148]
cvttss2si eax, dword [esp + 0x93c]
subss xmm0, xmm1
movss dword [esp + 0x92c], xmm1
push eax
push str.Health:__d
lea eax, [esp + 0x7ec]
push 0xff
movaps xmm1, xmm0
movss dword [esp + 0x930], xmm0
addss xmm1, dword [0x10090df0]
push eax
movss dword [esp + 0x940], xmm1
movaps xmm1, xmm0
addss xmm1, dword [0x1008e2d0]
addss xmm0, dword [0x10095f10]
movss dword [esp + 0x944], xmm1
movss dword [esp + 0x94c], xmm0
jne 0x100507b1
call fcn.10043233
movss xmm0, dword [esp + 0x940]
lea eax, [esp + 0x7f4]
add esp, 0x10
push eax
push 0x82ff6a00
push ecx
push ecx
mov ecx, dword [0x10194f28]
movss dword [esp + 4], xmm0
movss xmm0, dword [edi + 0x10194f40]
addss xmm0, dword [0x10086284]
movss dword [esp], xmm0
call fcn.10042e7f
push ebx
push str.Armor:__d
lea eax, [esp + 0x7ec]
push 0xff
push eax
call fcn.10043233
movss xmm0, dword [esp + 0x944]
lea eax, [esp + 0x7f4]
add esp, 0x10
mov ebx, 0x82ff6a00
push eax
push ebx
push ecx
push ecx
mov ecx, dword [0x10194f28]
movss dword [esp + 4], xmm0
movss xmm0, dword [edi + 0x10194f40]
addss xmm0, dword [0x10086284]
movss dword [esp], xmm0
call fcn.10042e7f
mov eax, dword [0x1018d14c]
mov eax, dword [eax + esi*4 + 0x26]
push dword [eax + 0xc]
lea eax, [esp + 0x7e8]
push str.Ping:__i
push 0xff
push eax
call fcn.10043233
movss xmm0, dword [esp + 0x94c]
lea eax, [esp + 0x7f4]
add esp, 0x10
push eax
push ebx
push ecx
push ecx
movss dword [esp + 4], xmm0
movss xmm0, dword [edi + 0x10194f40]
addss xmm0, dword [0x10086284]
jmp 0x1005123d
call fcn.10043233
movss xmm0, dword [esp + 0x940]
lea eax, [esp + 0x7f4]
add esp, 0x10
push eax
push 0x82ff6a00
push ecx
push ecx
mov ecx, dword [0x10194f28]
movss dword [esp + 4], xmm0
movss xmm0, dword [edi + 0x10194f40]
addss xmm0, dword [0x10086284]
movss dword [esp], xmm0
call fcn.10042e7f
push ebx
push str.Armor:__d
lea eax, [esp + 0x7ec]
push 0xff
push eax
call fcn.10043233
movss xmm0, dword [esp + 0x944]
lea eax, [esp + 0x7f4]
add esp, 0x10
mov ebx, 0x82ff6a00
push eax
push ebx
push ecx
push ecx
mov ecx, dword [0x10194f28]
movss dword [esp + 4], xmm0
movss xmm0, dword [edi + 0x10194f40]
addss xmm0, dword [0x10086284]
movss dword [esp], xmm0
call fcn.10042e7f
mov eax, dword [0x1018d14c]
mov eax, dword [eax + esi*4 + 0x26]
push dword [eax + 0xc]
lea eax, [esp + 0x7e8]
push str.Ping:__i
push 0xff
push eax
call fcn.10043233
movss xmm0, dword [esp + 0x94c]
lea eax, [esp + 0x7f4]
add esp, 0x10
push eax
push ebx
push ecx
push ecx
mov ecx, dword [0x10194f28]
movss dword [esp + 4], xmm0
movss xmm0, dword [edi + 0x10194f40]
addss xmm0, dword [0x10086284]
movss dword [esp], xmm0
call fcn.10042e7f
mov ecx, dword [0x10194f28]
lea eax, [esp + 0x7e4]
xor ebx, ebx
push ebx
push eax
call fcn.10041c9f
mov eax, dword [0x1018d14c]
fstp st(0)
mov eax, dword [eax + esi*4 + 0x26]
mov ecx, dword [eax + 8]
movzx eax, byte [ecx + 0x1a]
sub eax, 0x11
je 0x10050a75
sub eax, 1
je 0x10050a1f
sub eax, 1
je 0x100509c6
sub eax, 0xd
je 0x10050964
sub eax, 1
jne 0x10050aff
cmp dword [ecx + 0x20], ebx
jne 0x10050aff
movss xmm0, dword [esp + 0x924]
addss xmm0, dword [0x10095f14]
mov ecx, dword [0x10194f14]
push 0x6f000000
sub esp, 0x10
mov dword [esp + 0xc], 0x41200000
mov dword [esp + 8], 0x425c0000
movss dword [esp + 4], xmm0
movss xmm0, dword [edi + 0x10194f40]
addss xmm0, dword [0x1008695c]
movss dword [esp], xmm0
call fcn.10041726
push str.Spawned
jmp 0x10050ac9
cmp dword [ecx + 0x20], ebx
jne 0x10050aff
movss xmm0, dword [esp + 0x924]
addss xmm0, dword [0x10095f14]
mov ecx, dword [0x10194f14]
push 0x6f000000
sub esp, 0x10
mov dword [esp + 0xc], 0x41200000
mov dword [esp + 8], 0x42480000
movss dword [esp + 4], xmm0
movss xmm0, dword [edi + 0x10194f40]
addss xmm0, dword [0x1008695c]
movss dword [esp], xmm0
call fcn.10041726
push str.Wasted
jmp 0x10050ac9
movss xmm0, dword [esp + 0x924]
addss xmm0, dword [0x10095f14]
mov ecx, dword [0x10194f14]
push 0x6f000000
sub esp, 0x10
mov dword [esp + 0xc], 0x41200000
mov dword [esp + 8], 0x42200000
movss dword [esp + 4], xmm0
movss xmm0, dword [edi + 0x10194f40]
addss xmm0, dword [0x1008695c]
movss dword [esp], xmm0
call fcn.10041726
push str.Driver
jmp 0x10050ac9
movss xmm0, dword [esp + 0x924]
addss xmm0, dword [0x10095f14]
mov ecx, dword [0x10194f14]
push 0x6f000000
sub esp, 0x10
mov dword [esp + 0xc], 0x41200000
mov dword [esp + 8], 0x42820000
movss dword [esp + 4], xmm0
movss xmm0, dword [edi + 0x10194f40]
addss xmm0, dword [0x1008695c]
movss dword [esp], xmm0
call fcn.10041726
push str.Passenger
jmp 0x10050ac9
movss xmm0, dword [esp + 0x924]
addss xmm0, dword [0x10095f14]
mov ecx, dword [0x10194f14]
push 0x6f000000
sub esp, 0x10
mov dword [esp + 0xc], 0x41200000
mov dword [esp + 8], 0x42480000
movss dword [esp + 4], xmm0
movss xmm0, dword [edi + 0x10194f40]
addss xmm0, dword [0x1008695c]
movss dword [esp], xmm0
call fcn.10041726
push str.OnFoot
movss xmm0, dword [esp + 0x940]
push 0x82ff6a00
push ecx
push ecx
mov ecx, dword [0x10194f28]
movss dword [esp + 4], xmm0
movss xmm0, dword [edi + 0x10194f40]
addss xmm0, dword [0x1008695c]
movss dword [esp], xmm0
call fcn.10042e7f
mov dword [esp + 0x93c], 0x1008a0b0
push esi
call fcn.10040704
pop ecx
cmp eax, 0x13
jne 0x10050b38
mov eax, dword [0x1018d14c]
mov ecx, dword [esp + 0x93c]
mov eax, dword [eax + esi*4 + 0x26]
mov edx, dword [eax + 8]
movzx eax, byte [edx + 0xb6]
cmp dword [ecx], eax
je 0x10050c30
push esi
call fcn.10040704
pop ecx
cmp eax, 0x11
jne 0x10050b63
mov eax, dword [0x1018d14c]
mov ecx, dword [esp + 0x93c]
mov eax, dword [eax + esi*4 + 0x26]
mov edx, dword [eax + 8]
movzx eax, byte [edx + 0x60]
cmp dword [ecx], eax
je 0x10050c30
push esi
call fcn.10040704
pop ecx
cmp eax, 0x12
jne 0x10050b8e
mov eax, dword [0x1018d14c]
mov ecx, dword [esp + 0x93c]
mov eax, dword [eax + esi*4 + 0x26]
mov edx, dword [eax + 8]
movzx eax, byte [edx + 0x27]
cmp dword [ecx], eax
je 0x10050c5d
push esi
call fcn.10040704
pop ecx
test eax, eax
jne 0x10050bb8
mov eax, dword [0x1018d14c]
mov ecx, dword [esp + 0x93c]
mov eax, dword [eax + esi*4 + 0x26]
mov edx, dword [eax + 8]
movzx eax, byte [edx + 0x27]
cmp dword [ecx], eax
je 0x10050e12
push esi
call fcn.10040704
pop ecx
cmp eax, 0x21
jne 0x10050be3
mov eax, dword [0x1018d14c]
mov ecx, dword [esp + 0x93c]
mov eax, dword [eax + esi*4 + 0x26]
mov edx, dword [eax + 8]
movzx eax, byte [edx + 0x27]
cmp dword [ecx], eax
je 0x10050e12
push esi
call fcn.10040704
pop ecx
cmp eax, 0x20
jne 0x10050c0e
mov eax, dword [0x1018d14c]
mov ecx, dword [esp + 0x93c]
mov eax, dword [eax + esi*4 + 0x26]
mov edx, dword [eax + 8]
movzx eax, byte [edx + 0x27]
cmp dword [ecx], eax
je 0x10050e12
mov eax, dword [esp + 0x93c]
inc ebx
add eax, 0x10
mov dword [esp + 0x93c], eax
cmp eax, 0x1008a380
jl 0x10050b0a
jmp 0x10050ec5
mov eax, dword [edx + 4]
mov ecx, dword [eax + 0x2a4]
movzx eax, byte [ecx + 0x718]
imul eax, eax, 0x1c
shl ebx, 4
push dword [eax + ecx + 0x5a8]
push dword [ebx + 0x1008a0bc]
push str._s_aClip:_d_
jmp 0x10050e3a
cmp dword [edx + 0x20], 0
je 0x10050c30
mov eax, dword [0x1019a720]
inc eax
mov dword [0x1019a720], eax
cmp eax, 5
jge 0x10050d31
mov eax, dword [edx + 4]
mov ecx, dword [eax + 0x2a4]
movzx eax, byte [ecx + 0x718]
imul eax, eax, 0x1c
push dword [eax + ecx + 0x5a8]
mov eax, ebx
shl eax, 4
push dword [eax + 0x1008a0bc]
lea eax, [esp + 0x6ec]
push str._s_aClip:_d___FF0000_Drive_By_
push 0xfe
push eax
call fcn.10043233
mov ecx, dword [0x10194f28]
lea eax, [esp + 0x6f8]
add esp, 0x14
push 0
push eax
call fcn.10041c9f
mov ecx, dword [0x10194f28]
lea eax, [esp + 0x6e4]
push eax
push 0xffff8c00
push ecx
movss xmm0, dword [ecx + 0xe45]
fstp st(0)
subss xmm0, dword [0x10095edc]
push ecx
movss dword [esp + 0x93c], xmm0
movss xmm0, dword [esp + 0x948]
addss xmm0, dword [0x10095f0c]
movss dword [esp + 4], xmm0
movss xmm0, dword [edi + 0x10194f40]
addss xmm0, dword [0x1008dcb4]
movss dword [esp], xmm0
call fcn.10042e7f
mov eax, dword [0x1019a720]
cmp eax, 4
jle 0x10050ec5
mov eax, dword [0x1018d14c]
shl ebx, 4
mov eax, dword [eax + esi*4 + 0x26]
mov eax, dword [eax + 8]
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0x2a4]
movzx eax, byte [ecx + 0x718]
imul eax, eax, 0x1c
push dword [eax + ecx + 0x5a8]
lea eax, [esp + 0x6e8]
push dword [ebx + 0x1008a0bc]
push str._s_aClip:_d___FF0000_Drive_By_
push 0xfe
push eax
call fcn.10043233
mov ecx, dword [0x10194f28]
lea eax, [esp + 0x6f8]
add esp, 0x14
push 0
push eax
call fcn.10041c9f
mov ecx, dword [0x10194f28]
lea eax, [esp + 0x6e4]
push eax
push 0xffff8c00
push ecx
movss xmm0, dword [ecx + 0xe45]
fstp st(0)
subss xmm0, dword [0x10095edc]
push ecx
movss dword [esp + 0x93c], xmm0
movss xmm0, dword [esp + 0x948]
addss xmm0, dword [0x10095f0c]
movss dword [esp + 4], xmm0
movss xmm0, dword [edi + 0x10194f40]
addss xmm0, dword [0x1008dcb4]
movss dword [esp], xmm0
call fcn.10042e7f
cmp dword [0x1019a720], 0x1e
jne 0x10050ec5
and dword [0x1019a720], 0
jmp 0x10050ec5
mov eax, dword [edx + 4]
mov ecx, dword [eax + 0x2a4]
movzx eax, byte [ecx + 0x718]
imul eax, eax, 0x1c
shl ebx, 4
push dword [eax + ecx + 0x5a8]
push dword [ebx + 0x1008a0bc]
push 0x10082554
lea eax, [esp + 0x6f0]
push 0xfe
push eax
call fcn.10043233
mov ecx, dword [0x10194f28]
lea eax, [esp + 0x6f8]
add esp, 0x14
push 0
push eax
call fcn.10041c9f
mov ecx, dword [0x10194f28]
lea eax, [esp + 0x6e4]
push eax
push 0xffff8c00
push ecx
movss xmm0, dword [ecx + 0xe45]
fstp st(0)
subss xmm0, dword [0x10095edc]
push ecx
movss dword [esp + 0x93c], xmm0
movss xmm0, dword [esp + 0x948]
addss xmm0, dword [0x10095f0c]
movss dword [esp + 4], xmm0
movss xmm0, dword [edi + 0x10194f40]
addss xmm0, dword [0x1008dcb4]
movss dword [esp], xmm0
call fcn.10042e7f
mov eax, dword [0x1018d14c]
mov ecx, 0x6a5
mov eax, dword [eax + esi*4 + 0x26]
mov eax, dword [eax + 8]
movzx eax, word [eax + 0x7c]
cmp ax, cx
je 0x10050eef
mov ecx, 0x3fa
cmp ax, cx
je 0x10050eef
inc ecx
cmp ax, cx
jne 0x10050f0b
push esi
call fcn.100405cc
push eax
lea eax, [esp + 0x7ec]
push str.ff00bb_s_YARALI_
push eax
call fcn.10043293
add esp, 0x10
movss xmm0, dword [esp + 0x938]
subss xmm0, dword [esp + 0x92c]
mov eax, dword [0x1015c888]
cmp dword [eax + esi*4 + 0x479b], 0
movss dword [esp + 0x934], xmm0
je 0x10050fa0
lea eax, [esp + 0x2f8]
push str.18DA18_FRIEND
push eax
call fcn.10043293
pop ecx
pop ecx
lea eax, [esp + 0x2f8]
push eax
push 0xdd000000
push esi
call fcn.10040f1a
movss xmm0, dword [esp + 0x940]
subss xmm0, dword [0x10095f14]
pop ecx
pop ecx
push eax
push ecx
push ecx
mov ecx, dword [0x10194f28]
movss dword [esp + 4], xmm0
movss xmm0, dword [edi + 0x10194f40]
movss dword [esp], xmm0
call fcn.10042e7f
push esi
push esi
call fcn.100405cc
pop ecx
push eax
push str.18DA18_s___d_
jmp 0x10051013
cmp byte [esi + eax + 0x26cc], 0
je 0x10051025
lea eax, [esp + 0x2f8]
push str.FF0000_ENEMY
push eax
call fcn.10043293
pop ecx
pop ecx
lea eax, [esp + 0x2f8]
push eax
push 0xdd000000
push esi
call fcn.10040f1a
movss xmm0, dword [esp + 0x940]
subss xmm0, dword [0x10095f14]
pop ecx
pop ecx
push eax
push ecx
push ecx
mov ecx, dword [0x10194f28]
movss dword [esp + 4], xmm0
movss xmm0, dword [edi + 0x10194f40]
movss dword [esp], xmm0
call fcn.10042e7f
push esi
push esi
call fcn.100405cc
pop ecx
push eax
push 0x10094280
lea eax, [esp + 0x7f0]
push eax
call fcn.10043293
add esp, 0x10
jmp 0x1005104e
mov eax, dword [0x1018d14c]
mov eax, dword [eax + esi*4 + 0x26]
push dword [eax]
push esi
push esi
call fcn.100405cc
pop ecx
push eax
lea eax, [esp + 0x7f0]
push str._s___d_
push eax
call fcn.10043293
add esp, 0x14
lea eax, [esp + 0x7e4]
push eax
push 0xdd000000
push esi
call fcn.10040f1a
movss xmm0, dword [esp + 0x940]
subss xmm0, dword [0x10095ee8]
pop ecx
pop ecx
push eax
push ecx
push ecx
mov ecx, dword [0x10194f1c]
movss dword [esp + 4], xmm0
movss xmm0, dword [edi + 0x10194f40]
movss dword [esp], xmm0
call fcn.10042e7f
mov ecx, dword [0x10194f1c]
lea eax, [esp + 0x7e4]
push 0
push eax
call fcn.10041c9f
mov eax, dword [0x1018d14c]
fstp st(0)
mov eax, dword [eax + esi*4 + 0x26]
mov eax, dword [eax + 8]
cmp dword [eax + 0x1d1], 2
jne 0x1005124d
push 0x10094108
lea eax, [esp + 0x7e8]
push 0xff
push eax
call fcn.10043233
mov ecx, dword [0x10194f28]
lea eax, [esp + 0x7f0]
add esp, 0xc
push 0
push eax
call fcn.10041c9f
mov eax, dword [0x10194f28]
fstp st(0)
mov ecx, dword [0x10194f1c]
push 0
movss xmm0, dword [eax + 0xe45]
lea eax, [esp + 0x7e8]
addss xmm0, dword [0x10083148]
push eax
movss dword [esp + 0x93c], xmm0
movss xmm0, dword [edi + 0x10194f40]
addss xmm0, dword [0x10095f28]
movss dword [esp + 0x938], xmm0
call fcn.10041c9f
movss xmm0, dword [esp + 0x938]
fmul dword [0x10083140]
subss xmm0, dword [esp + 0x934]
push esi
fsubr dword [esp + 0x934]
addss xmm0, dword [0x10095efc]
fstp dword [esp + 0x934]
movss dword [esp + 0x93c], xmm0
call fcn.10040704
pop ecx
cmp eax, 0x13
jne 0x1005119f
movss xmm0, dword [esp + 0x938]
addss xmm0, dword [0x10083148]
movss dword [esp + 0x938], xmm0
push 0x4b000000
push ecx
mov ecx, dword [0x10194f1c]
lea eax, [esp + 0x7ec]
mov dword [esp], 0x41200000
push 0
push eax
call fcn.10041c9f
movss xmm0, dword [esp + 0x940]
sub esp, 0xc
subss xmm0, dword [0x10090df0]
fadd dword [0x10089668]
mov ecx, dword [0x10194f14]
fstp dword [esp + 8]
movss dword [esp + 4], xmm0
movss xmm0, dword [esp + 0x944]
addss xmm0, dword [0x10095f30]
movss dword [esp], xmm0
call fcn.10041726
movss xmm0, dword [esp + 0x938]
lea eax, [esp + 0x7e4]
subss xmm0, dword [0x1008968c]
push eax
push 0x82aaaaaa
push ecx
push ecx
movss dword [esp + 4], xmm0
movss xmm0, dword [esp + 0x940]
addss xmm0, dword [0x10095f34]
mov ecx, dword [0x10194f28]
movss dword [esp], xmm0
call fcn.10042e7f
mov ebx, dword [esp + 0x928]
cmp ebx, dword [esp + 0x914]
jb 0x100502eb
pop edi
pop esi
pop ebx
add esp, 0x934
ret