Function at 0x100b9e70
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100cb507
mov eax, dword fs:[0]
push eax
sub esp, 0x68
mov eax, dword [0x100f0364]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor eax, eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov eax, dword [0x10139c1c]
test al, 1
jne 0x100b9eb3
or eax, 1
mov dword [0x10139c1c], eax
test al, 2
jne 0x100b9ebf
or eax, 2
mov dword [0x10139c1c], eax
test al, 4
jne 0x100b9ecb
or eax, 4
mov dword [0x10139c1c], eax
xor edi, edi
xor esi, esi
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x40], esi
mov dword [ebp - 4], esi
xorps xmm0, xmm0
push 0x20
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], 0xf
call fcn.1000e610
movups xmm0, xmmword [str.local_indicators]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x18], 0x10
mov dword [ebp - 0x14], 0x1f
movups xmmword [eax], xmm0
mov byte [eax + 0x10], 0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 1
push eax
mov ecx, 0x10139780
call fcn.1000dd40
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], 3
push ecx
mov ecx, eax
call fcn.1000dbc0
mov al, byte [eax]
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x14]
mov byte [ebp - 0x2e], al
cmp ecx, 0x10
jb 0x100b9f7b
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b9f6e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100b9f6e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
mov al, byte [ebp - 0x2e]
add esp, 8
test al, al
je 0x100bb085
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
push str.Counter_Strike:_Global_Offensive
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
test eax, eax
jne 0x100b9faa
push str.CS:GO_MIGI
push eax
call dword [sym.imp.USER32.dll_FindWindowA]
lea ecx, [ebp - 0x64]
push ecx
push eax
call dword [sym.imp.USER32.dll_ScreenToClient]
cmp byte [0x10130e09], 0
movd xmm0, dword [ebp - 0x64]
movd xmm1, dword [ebp - 0x60]
movss xmm5, dword [0x10139c34]
movss xmm4, dword [0x10139c38]
movss xmm2, dword [0x100e5890]
movss xmm3, dword [0x100e5944]
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm1, xmm1
movss dword [0x10139bf4], xmm5
movss dword [0x10139bf8], xmm4
movss dword [0x10139c34], xmm0
movss dword [0x10139c38], xmm1
je 0x100ba0ad
movaps xmm1, xmm2
subss xmm1, dword [0x10139c64]
comiss xmm5, xmm1
jbe 0x100ba0ad
movaps xmm0, xmm3
subss xmm0, dword [0x10139c68]
comiss xmm4, xmm0
jbe 0x100ba0ad
addss xmm1, dword [0x100e592c]
comiss xmm1, xmm5
jbe 0x100ba0ad
addss xmm0, dword [0x100e5854]
comiss xmm0, xmm4
jbe 0x100ba0ad
push 1
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
movss xmm2, dword [0x100e5890]
movss xmm3, dword [0x100e5944]
test ax, ax
je 0x100ba0ad
movss xmm0, dword [0x10139bf4]
subss xmm0, dword [0x10139c34]
addss xmm0, dword [0x10139c64]
movss dword [0x10139c64], xmm0
movss xmm0, dword [0x10139bf8]
subss xmm0, dword [0x10139c38]
addss xmm0, dword [0x10139c68]
movss dword [0x10139c68], xmm0
test byte [0x101305ec], 1
subss xmm2, dword [0x10139c64]
subss xmm3, dword [0x10139c68]
movss dword [ebp - 0x50], xmm2
movss dword [ebp - 0x58], xmm3
je 0x100ba0ee
mov ecx, dword [0x10136ed8]
mov eax, dword [0x101305e0]
test byte [ecx + eax], 1
je 0x100ba0ee
cmp byte [0x1013073c], 0
je 0x100ba0ee
mov dl, 1
jmp 0x100ba0f0
xor dl, dl
mov ecx, dword [0x101305e0]
mov eax, dword [0x10136ea0]
mov byte [ebp - 0x2e], dl
movss xmm1, dword [eax + ecx + 4]
movss xmm0, dword [eax + ecx]
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm1
call fcn.10003c40
movss xmm1, dword [0x100e5624]
comiss xmm1, xmm0
ja 0x100ba12b
test dl, dl
jne 0x100ba1a9
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push 0x20
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0xf
call fcn.1000e610
movups xmm0, xmmword [str.nemesis_indicators]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x18], 0x12
mov dword [ebp - 0x14], 0x1f
movups xmmword [eax], xmm0
mov cx, word [0x100e1140]
mov word [eax + 0x10], cx
mov byte [eax + 0x12], 0
mov eax, 1
mov byte [ebp - 4], 2
mov dword [ebp - 0x3c], eax
mov ecx, 0x10139780
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x28]
push eax
call fcn.1000dd40
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], 0
push ecx
mov ecx, eax
call fcn.1000dbc0
mov byte [ebp - 0x2d], 1
cmp byte [eax], 0
jne 0x100ba1ad
mov byte [ebp - 0x2d], 0
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x3c]
test al, 1
je 0x100ba1f7
mov ecx, dword [ebp - 0x14]
and eax, 0xfffffffe
mov dword [ebp - 0x3c], eax
cmp ecx, 0x10
jb 0x100ba1f7
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100ba1ed
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100ba1ed
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
add esp, 8
cmp byte [ebp - 0x2d], 0
je 0x100ba32c
mov edi, dword [0x10136f10]
mov esi, dword [0x101305e0]
movss xmm1, dword [0x100e5954]
mov dword [ebp - 0x54], 0x420c0000
mov dword [ebp - 0x34], 0
movss xmm0, dword [edi + esi]
subss xmm0, dword [0x101306f4]
call fcn.1003fe90
movaps xmm2, xmm0
movss xmm0, dword [edi + esi]
comiss xmm0, dword [0x101306f4]
jbe 0x100ba259
comiss xmm2, dword [0x100e591c]
jb 0x100ba26e
subss xmm2, dword [0x100e5954]
jmp 0x100ba26e
movss xmm1, dword [0x100e5a44]
comiss xmm1, xmm2
jb 0x100ba26e
addss xmm2, dword [0x100e5954]
movaps xmm0, xmm2
call fcn.10003c10
xorps xmm1, xmm1
movss dword [ebp - 0x5c], xmm0
comiss xmm1, xmm0
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x1c], 8
lea edx, [ebp - 0x34]
mov dword [ebp - 0x18], 0xf
seta al
test al, al
cmove edx, ecx
lea ecx, [ebp - 0x54]
comiss xmm0, dword [0x100e5880]
xorps xmm0, xmm0
movups xmmword [ebp - 0x2c], xmm0
seta al
mov dword [ebp - 0x2c], 0x79646f62
test al, al
mov dword [ebp - 0x28], 0x77617920
mov byte [ebp - 0x24], 0
cmove ecx, edx
movss xmm1, dword [ecx]
mulss xmm1, dword [0x100e55e8]
movss dword [ebp - 0x14], xmm1
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 3
push eax
push 0
lea ecx, [ebp - 0x48]
call fcn.10083070
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
cmp ecx, 0x10
jb 0x100ba323
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100ba319
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100bb0d4
push ecx
push edx
call fcn.100c0328
add esp, 8
mov edi, dword [ebp - 0x48]
mov esi, dword [ebp - 0x44]
mov dword [ebp - 0x4c], edi
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push 0x20
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0xf
call fcn.1000e610
movups xmm0, xmmword [str.nemesis_indicators]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x18], 0x12
mov dword [ebp - 0x14], 0x1f
movups xmmword [eax], xmm0
mov cx, word [0x100e1140]
mov word [eax + 0x10], cx
mov byte [eax + 0x12], 0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 4
push eax
mov ecx, 0x10139780
call fcn.1000dd40
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], 1
push ecx
mov ecx, eax
call fcn.1000dbc0
mov al, byte [eax]
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x14]
mov byte [ebp - 0x2d], al
cmp ecx, 0x10
jb 0x100ba3d8
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100ba3cb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100ba3cb
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
mov al, byte [ebp - 0x2d]
add esp, 8
test al, al
je 0x100ba4d0
mov ecx, dword [0x101305e0]
mov eax, dword [0x10136ea0]
movss xmm1, dword [eax + ecx + 4]
movss xmm0, dword [eax + ecx]
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm1
call fcn.10003c40
movaps xmm2, xmm0
mov dword [ebp - 0x1c], 8
mulss xmm2, dword [0x100e55b4]
xorps xmm1, xmm1
mov dword [ebp - 0x18], 0xf
movups xmmword [ebp - 0x2c], xmm1
mov dword [ebp - 0x2c], 0x6f6c6576
mov dword [ebp - 0x28], 0x79746963
mov byte [ebp - 0x24], 0
movss dword [ebp - 0x14], xmm2
mov byte [ebp - 4], 5
cmp esi, dword [ebp - 0x40]
je 0x100ba482
xorps xmm0, xmm0
mov ecx, 0xf
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
movups xmm0, xmmword [ebp - 0x2c]
mov dword [esi + 0x14], 0
mov byte [ebp - 0x2c], 0
movups xmmword [esi], xmm0
movq xmm0, qword [ebp - 0x1c]
movq qword [esi + 0x10], xmm0
movss dword [esi + 0x18], xmm2
add esi, 0x1c
mov dword [ebp - 0x44], esi
jmp 0x100ba49b
lea eax, [ebp - 0x2c]
push eax
push esi
lea ecx, [ebp - 0x48]
call fcn.10083070
mov edi, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x44]
mov dword [ebp - 0x4c], edi
mov byte [ebp - 4], 0
cmp ecx, 0x10
jb 0x100ba4d0
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100ba4c6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100bb0d4
push ecx
push edx
call fcn.100c0328
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push 0x20
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0xf
call fcn.1000e610
movups xmm0, xmmword [str.nemesis_indicators]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x18], 0x12
mov dword [ebp - 0x14], 0x1f
movups xmmword [eax], xmm0
mov cx, word [0x100e1140]
mov word [eax + 0x10], cx
mov byte [eax + 0x12], 0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 6
push eax
mov ecx, 0x10139780
call fcn.1000dd40
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], 2
push ecx
mov ecx, eax
call fcn.1000dbc0
mov al, byte [eax]
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x14]
mov byte [ebp - 0x2d], al
cmp ecx, 0x10
jb 0x100ba57c
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100ba56f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100ba56f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
mov al, byte [ebp - 0x2d]
add esp, 8
test al, al
je 0x100ba66a
mov eax, dword [0x10135d18]
movd xmm0, dword [0x10130638]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0x1c], 7
mov dword [ebp - 0x18], 0xf
movd xmm1, dword [eax + 0x4cb0]
cvtdq2ps xmm1, xmm1
mov eax, dword [str.fakelag]
divss xmm1, xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x2c], eax
mov ax, word [0x100e5500]
mov word [ebp - 0x28], ax
mov al, byte [0x100e5502]
mov byte [ebp - 0x26], al
mov byte [ebp - 0x25], 0
movss dword [ebp - 0x14], xmm1
mov byte [ebp - 4], 7
cmp esi, dword [ebp - 0x40]
je 0x100ba61c
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov ecx, 0xf
movups xmm0, xmmword [ebp - 0x2c]
mov dword [esi + 0x14], 0
mov byte [ebp - 0x2c], 0
movups xmmword [esi], xmm0
movq xmm0, qword [ebp - 0x1c]
movq qword [esi + 0x10], xmm0
movss dword [esi + 0x18], xmm1
add esi, 0x1c
mov dword [ebp - 0x44], esi
jmp 0x100ba635
lea eax, [ebp - 0x2c]
push eax
push esi
lea ecx, [ebp - 0x48]
call fcn.10083070
mov edi, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x44]
mov dword [ebp - 0x4c], edi
mov byte [ebp - 4], 0
cmp ecx, 0x10
jb 0x100ba66a
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100ba660
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100bb0d4
push ecx
push edx
call fcn.100c0328
add esp, 8
cmp byte [0x10135b10], 0
je 0x100ba6f2
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push 0x20
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0xf
call fcn.1000e610
movups xmm0, xmmword [str.nemesis_indicators]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x18], 0x12
mov dword [ebp - 0x14], 0x1f
movups xmmword [eax], xmm0
mov cx, word [0x100e1140]
mov word [eax + 0x10], cx
mov byte [eax + 0x12], 0
mov byte [ebp - 4], 8
mov ecx, 0x10139780
mov eax, dword [ebp - 0x3c]
or eax, 2
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x28]
push eax
call fcn.1000dd40
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], 3
push ecx
mov ecx, eax
call fcn.1000dbc0
mov byte [ebp - 0x2d], 1
cmp byte [eax], 0
jne 0x100ba6f6
mov byte [ebp - 0x2d], 0
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x3c]
test al, 2
je 0x100ba73a
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x100ba73a
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100ba730
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100ba730
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
add esp, 8
cmp byte [ebp - 0x2d], 0
je 0x100ba825
movd xmm1, dword [0x10135b40]
movd xmm0, dword [0x10135b58]
cvtdq2ps xmm0, xmm0
mov eax, dword [str.exploit]
mov dword [ebp - 0x1c], 7
mov dword [ebp - 0x18], 0xf
cvtdq2ps xmm1, xmm1
divss xmm1, xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x2c], eax
mov ax, word [0x100e54f8]
mov word [ebp - 0x28], ax
mov al, byte [0x100e54fa]
mov byte [ebp - 0x26], al
mov byte [ebp - 0x25], 0
movss dword [ebp - 0x14], xmm1
mov byte [ebp - 4], 9
cmp esi, dword [ebp - 0x40]
je 0x100ba7d7
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov ecx, 0xf
movups xmm0, xmmword [ebp - 0x2c]
mov dword [esi + 0x14], 0
mov byte [ebp - 0x2c], 0
movups xmmword [esi], xmm0
movq xmm0, qword [ebp - 0x1c]
movq qword [esi + 0x10], xmm0
movss dword [esi + 0x18], xmm1
add esi, 0x1c
mov dword [ebp - 0x44], esi
jmp 0x100ba7f0
lea eax, [ebp - 0x2c]
push eax
push esi
lea ecx, [ebp - 0x48]
call fcn.10083070
mov edi, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x44]
mov dword [ebp - 0x4c], edi
mov byte [ebp - 4], 0
cmp ecx, 0x10
jb 0x100ba825
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100ba81b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100bb0d4
push ecx
push edx
call fcn.100c0328
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push 0x20
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0xf
call fcn.1000e610
movups xmm0, xmmword [str.nemesis_indicators]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x18], 0x12
mov dword [ebp - 0x14], 0x1f
movups xmmword [eax], xmm0
mov cx, word [0x100e1140]
mov word [eax + 0x10], cx
mov byte [eax + 0x12], 0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xa
push eax
mov ecx, 0x10139780
call fcn.1000dd40
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], 4
push ecx
mov ecx, eax
call fcn.1000dbc0
mov al, byte [eax]
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x14]
mov byte [ebp - 0x2d], al
cmp ecx, 0x10
jb 0x100ba8d1
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100ba8c4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100ba8c4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
mov al, byte [ebp - 0x2d]
add esp, 8
test al, al
je 0x100ba9d2
cmp byte [ebp - 0x2e], 0
je 0x100ba8e9
movss xmm0, dword [0x100e572c]
jmp 0x100ba8f1
movss xmm0, dword [0x100e5670]
mov eax, dword [0x10136f04]
mov ecx, dword [0x101305e0]
movss xmm1, dword [0x100e572c]
mov dword [ebp - 0x1c], 0xc
mov dword [ebp - 0x18], 0xf
mulss xmm0, dword [eax + ecx]
mov eax, dword [0x100e54ec]
subss xmm1, xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x24], eax
movq xmm0, qword [str.stand_height]
movq qword [ebp - 0x2c], xmm0
mov byte [ebp - 0x20], 0
movss dword [ebp - 0x14], xmm1
mov byte [ebp - 4], 0xb
cmp esi, dword [ebp - 0x40]
je 0x100ba984
xorps xmm0, xmm0
mov ecx, 0xf
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
movups xmm0, xmmword [ebp - 0x2c]
mov dword [esi + 0x14], 0
mov byte [ebp - 0x2c], 0
movups xmmword [esi], xmm0
movq xmm0, qword [ebp - 0x1c]
movq qword [esi + 0x10], xmm0
movss dword [esi + 0x18], xmm1
add esi, 0x1c
mov dword [ebp - 0x44], esi
jmp 0x100ba99d
lea eax, [ebp - 0x2c]
push eax
push esi
lea ecx, [ebp - 0x48]
call fcn.10083070
mov edi, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x44]
mov dword [ebp - 0x4c], edi
mov byte [ebp - 4], 0
cmp ecx, 0x10
jb 0x100ba9d2
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100ba9c8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100bb0d4
push ecx
push edx
call fcn.100c0328
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push 0x20
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0xf
call fcn.1000e610
movups xmm0, xmmword [str.nemesis_indicators]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x18], 0x12
mov dword [ebp - 0x14], 0x1f
movups xmmword [eax], xmm0
mov dx, word [0x100e1140]
mov word [eax + 0x10], dx
mov byte [eax + 0x12], 0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xc
push eax
mov ecx, 0x10139780
call fcn.1000dd40
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], 5
push ecx
mov ecx, eax
call fcn.1000dbc0
mov al, byte [eax]
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x14]
mov byte [ebp - 0x2e], al
cmp ecx, 0x10
jb 0x100baa7e
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100baa71
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100baa71
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
mov al, byte [ebp - 0x2e]
add esp, 8
test al, al
je 0x100bab5d
movss xmm1, dword [0x10132f98]
xorps xmm0, xmm0
addss xmm1, dword [0x10132f9c]
mov ax, word [0x100e54e0]
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0xa
movq xmm0, qword [str.inaccuracy]
mov dword [ebp - 0x18], 0xf
movq qword [ebp - 0x2c], xmm0
mov word [ebp - 0x24], ax
mov byte [ebp - 0x22], 0
movss dword [ebp - 0x14], xmm1
mov byte [ebp - 4], 0xd
cmp esi, dword [ebp - 0x40]
je 0x100bab0f
xorps xmm0, xmm0
mov ecx, 0xf
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
movups xmm0, xmmword [ebp - 0x2c]
mov dword [esi + 0x14], 0
mov byte [ebp - 0x2c], 0
movups xmmword [esi], xmm0
movq xmm0, qword [ebp - 0x1c]
movq qword [esi + 0x10], xmm0
movss dword [esi + 0x18], xmm1
add esi, 0x1c
mov dword [ebp - 0x44], esi
jmp 0x100bab28
lea eax, [ebp - 0x2c]
push eax
push esi
lea ecx, [ebp - 0x48]
call fcn.10083070
mov edi, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x44]
mov dword [ebp - 0x4c], edi
mov byte [ebp - 4], 0
cmp ecx, 0x10
jb 0x100bab5d
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100bab53
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100bb0d4
push ecx
push edx
call fcn.100c0328
add esp, 8
cmp edi, esi
jne 0x100bab6e
cmp byte [0x10130e09], 0
je 0x100bb085
mov ax, word [0x100df218]
xorps xmm0, xmm0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0xa
movq xmm0, qword [str.menu_color]
mov dword [ebp - 0x14], 0xf
movq qword [ebp - 0x28], xmm0
mov word [ebp - 0x20], ax
mov byte [ebp - 0x1e], 0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xe
push eax
mov ecx, 0x10139760
call fcn.1000dd60
movss xmm1, dword [0x100e5940]
movss xmm0, dword [eax + 0xc]
mulss xmm0, xmm1
cvttss2si ecx, xmm0
movss xmm0, dword [eax + 8]
mulss xmm0, xmm1
mov dword [ebp - 0x34], ecx
mov byte [ebp - 0x39], cl
cvttss2si edx, xmm0
movss xmm0, dword [eax + 4]
mulss xmm0, xmm1
mov dword [ebp - 0x5c], edx
mov byte [ebp - 0x3a], dl
cvttss2si esi, xmm0
movss xmm0, dword [eax]
mulss xmm0, xmm1
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x38], esi
cvttss2si eax, xmm0
mov dword [ebp - 0x54], eax
mov byte [ebp - 0x3c], al
mov eax, esi
mov byte [ebp - 0x3b], al
cmp ecx, 0x10
jb 0x100bac3f
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100bac35
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100bac35
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
add esp, 8
mov ecx, dword [0x10135cb0]
movss xmm0, dword [ebp - 0x58]
subss xmm0, dword [0x100e572c]
mov eax, dword [ecx]
cvttss2si edi, xmm0
mov esi, dword [eax + 0x38]
mov eax, dword [ebp - 0x34]
movzx edx, al
mov eax, dword [ebp - 0x5c]
shl edx, 8
movzx eax, al
or edx, eax
mov eax, dword [ebp - 0x38]
shl edx, 8
movzx eax, al
or edx, eax
mov eax, dword [ebp - 0x54]
shl edx, 8
movzx eax, al
or edx, eax
push edx
call esi
cvttss2si esi, dword [ebp - 0x50]
mov ecx, dword [0x10135cb0]
mov eax, dword [ecx]
mov edx, dword [eax + 0x40]
lea eax, [esi + 0xc8]
mov dword [ebp - 0x38], eax
lea eax, [edi + 1]
push eax
push dword [ebp - 0x38]
push edi
push esi
call edx
mov ecx, dword [0x10135cb0]
cvttss2si edi, dword [ebp - 0x58]
push 0xff111111
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
mov ecx, dword [0x10135cb0]
lea esi, [edi + 0x10]
cvttss2si edx, dword [ebp - 0x50]
push esi
mov eax, dword [ecx]
mov eax, dword [eax + 0x40]
push dword [ebp - 0x38]
push edi
push edx
call eax
mov ecx, dword [0x10135cb0]
push 0xff232323
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
mov ecx, dword [0x10135cb0]
cvttss2si edx, dword [ebp - 0x50]
push 0
push 0
mov eax, dword [ecx]
push 0xff
push esi
mov eax, dword [eax + 0x1ec]
push dword [ebp - 0x38]
push edi
push edx
call eax
mov ax, word [0x100e550c]
xorps xmm0, xmm0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0xa
movq xmm0, qword [str.indicators]
mov dword [ebp - 0x14], 0xf
movq qword [ebp - 0x28], xmm0
mov word [ebp - 0x20], ax
mov byte [ebp - 0x1e], 0
push 2
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xf
push eax
movss xmm0, dword [ebp - 0x58]
addss xmm0, dword [0x100e57d8]
push ecx
mov eax, esp
mov ecx, 0x10139654
mov dword [eax], 0xffffffff
cvttss2si eax, xmm0
movss xmm0, dword [ebp - 0x50]
addss xmm0, dword [0x100e58c0]
push eax
cvttss2si eax, xmm0
push eax
call fcn.100a46b0
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x100badbc
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100badb2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100badb2
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100c0328
add esp, 8
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x4c]
cmp eax, ecx
jne 0x100badcf
mov dword [ebp - 0x54], 0x12
jmp 0x100badf7
sub ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
lea eax, [ecx*8]
sub eax, ecx
lea eax, [eax*2 + 0x13]
mov dword [ebp - 0x54], eax
movss xmm0, dword [ebp - 0x58]
subss xmm0, dword [0x100e5780]
mov ecx, dword [0x10135cb0]
push 0xff000000
mov eax, dword [ecx]
cvttss2si edi, xmm0
mov eax, dword [eax + 0x38]
movss xmm0, dword [ebp - 0x50]
subss xmm0, dword [0x100e572c]
cvttss2si esi, xmm0
call eax
mov ecx, dword [0x10135cb0]
mov eax, dword [ecx]
mov edx, dword [eax + 0x48]
mov eax, dword [ebp - 0x54]
add eax, edi
push eax
lea eax, [esi + 0xca]
push eax
push edi
push esi
call edx
mov esi, dword [ebp - 0x44]
mov edi, dword [ebp - 0x4c]
cmp edi, esi
je 0x100baeb5
movss xmm0, dword [ebp - 0x58]
mov ecx, esi
addss xmm0, dword [0x100e5840]
sub ecx, edi
mov eax, 0x92492493
imul ecx
cvttss2si esi, xmm0
push 0x96232323
add edx, ecx
mov ecx, dword [0x10135cb0]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edi, [eax*8]
sub edi, eax
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
mov ecx, dword [0x10135cb0]
mov eax, dword [ecx]
mov edx, dword [eax + 0x40]
lea eax, [esi + edi*2]
push eax
cvttss2si eax, dword [ebp - 0x50]
push dword [ebp - 0x38]
push esi
push eax
call edx
mov esi, dword [ebp - 0x44]
mov edi, dword [ebp - 0x4c]
mov ecx, esi
mov eax, 0x92492493
sub ecx, edi
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x34], eax
je 0x100bb085
movss xmm1, dword [ebp - 0x50]
xor ecx, ecx
movss xmm2, dword [ebp - 0x58]
movaps xmm0, xmm1
addss xmm0, dword [0x100e57f8]
addss xmm1, dword [0x100e58ac]
addss xmm2, dword [0x100e584c]
mov esi, dword [ebp - 0x3c]
add edi, 0x18
mov dword [ebp - 0x6c], 0x3f800000
cvttss2si edx, xmm0
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x74], 0x3f800000
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x50], edi
cvttss2si eax, xmm1
mov dword [ebp - 0x60], edx
movss dword [ebp - 0x58], xmm2
mov dword [ebp - 0x54], eax
push 0
lea eax, [edi - 0x18]
movd xmm0, ecx
push eax
push ecx
mov eax, esp
cvtdq2pd xmm0, xmm0
mov dword [eax], 0xffffffff
mov eax, ecx
shr eax, 0x1f
mov ecx, 0x10139654
addsd xmm0, qword [eax*8 + 0x100e5bd0]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm2
cvttss2si eax, xmm0
movss dword [ebp - 0x38], xmm0
push eax
push edx
call fcn.100a46b0
movss xmm0, dword [edi]
lea ecx, [ebp - 0x68]
comiss xmm0, dword [0x100e5558]
lea eax, [ebp - 0x6c]
push esi
movss xmm1, dword [0x100e572c]
cmovae ecx, edi
comiss xmm1, xmm0
cmovae eax, ecx
mov ecx, dword [0x10135cb0]
movss xmm0, dword [eax]
mulss xmm0, dword [0x100e58d8]
cvttss2si edi, xmm0
movss xmm0, dword [ebp - 0x38]
addss xmm0, dword [0x100e5780]
cvttss2si eax, xmm0
mov dword [ebp - 0x38], eax
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
mov esi, dword [ebp - 0x54]
mov eax, dword [ebp - 0x38]
mov ecx, dword [0x10135cb0]
add eax, 6
push eax
lea eax, [esi + edi]
push eax
mov edx, dword [ecx]
push dword [ebp - 0x38]
push esi
mov eax, dword [edx + 0x40]
call eax
mov eax, dword [ebp - 0x50]
lea ecx, [ebp - 0x70]
movss xmm1, dword [0x100e572c]
push 0xff232323
movss xmm0, dword [eax]
comiss xmm0, dword [0x100e5558]
cmovae ecx, eax
lea eax, [ebp - 0x74]
comiss xmm1, xmm0
cmovae eax, ecx
mov ecx, dword [0x10135cb0]
movss xmm0, dword [eax]
mov eax, dword [ecx]
mulss xmm0, dword [0x100e58d8]
mov eax, dword [eax + 0x38]
cvttss2si edi, xmm0
call eax
mov eax, dword [ebp - 0x38]
mov ecx, dword [0x10135cb0]
add eax, 6
push 1
push 0
push 0x4b
mov edx, dword [ecx]
push eax
lea eax, [esi + edi]
push eax
push dword [ebp - 0x38]
mov eax, dword [edx + 0x1ec]
push esi
call eax
mov ecx, dword [ebp - 0x5c]
mov edi, dword [ebp - 0x50]
add ecx, 0xe
movss xmm2, dword [ebp - 0x58]
add edi, 0x1c
sub dword [ebp - 0x34], 1
mov esi, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x50], edi
jne 0x100baf37
mov esi, dword [ebp - 0x44]
mov edi, dword [ebp - 0x4c]
test edi, edi
je 0x100bb0e4
push ecx
mov edx, esi
mov ecx, edi
call fcn.10083000
mov ecx, dword [ebp - 0x40]
mov eax, 0x92492493
sub ecx, edi
add esp, 4
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax*8]
sub ecx, eax
mov eax, edi
shl ecx, 2
cmp ecx, 0x1000
jb 0x100bb0da
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100bb0da
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edi
call fcn.100c0328
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100bfdfa
mov esp, ebp
pop ebp
ret