Function at 0x100483b0
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10094632
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x468
mov eax, dword [0x100a9040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x6c], edi
push 7
xorps xmm0, xmm0
mov dword [ebp - 0x348], 0
push str.players
lea ecx, [ebp - 0x358]
mov dword [ebp - 0x344], 0
movups xmmword [ebp - 0x358], xmm0
call fcn.1001d570
lea eax, [ebp - 0x358]
mov dword [ebp - 4], 0
cmp edi, eax
je 0x10048453
cmp dword [ebp - 0x344], 0xf
mov ecx, edi
push dword [ebp - 0x348]
cmova eax, dword [ebp - 0x358]
push eax
call fcn.100213d0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x344]
cmp ecx, 0xf
jbe 0x10048494
mov edx, dword [ebp - 0x358]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004848a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004a5af
push ecx
push edx
call fcn.1008e3d7
add esp, 8
push 5
xorps xmm0, xmm0
mov dword [ebp - 0x58], 0
push str.enemy
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x54], 0
movups xmmword [ebp - 0x68], xmm0
call fcn.1001d570
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x50]
push 8
xorps xmm0, xmm0
mov dword [ebp - 0x40], 0
push str.friendly
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x3c], 0
call fcn.1001d570
lea ecx, [ebp - 0x68]
mov dword [ebp - 4], 2
push ecx
lea eax, [ebp - 0x38]
push eax
push ecx
lea ecx, [ebp - 0x94]
call fcn.10066680
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xb8]
push 3
xorps xmm0, xmm0
mov dword [ebp - 0xa8], 0
push 0x1009c750
movups xmmword [ebp - 0xb8], xmm0
mov dword [ebp - 0xa4], 0
call fcn.1001d570
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x370]
push 5
xorps xmm0, xmm0
mov dword [ebp - 0x360], 0
push str.boxes
movups xmmword [ebp - 0x370], xmm0
mov dword [ebp - 0x35c], 0
call fcn.1001d570
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0
lea ecx, [edi + 0x68]
mov byte [ebp - 4], 6
lea eax, [ebp - 0xb8]
cmp ecx, eax
je 0x100485a6
cmp dword [ebp - 0xa4], 0xf
push dword [ebp - 0xa8]
cmova eax, dword [ebp - 0xb8]
push eax
call fcn.100213d0
lea ecx, [edi + 0xa0]
mov byte [edi + 0x99], 1
lea eax, [ebp - 0x370]
cmp ecx, eax
je 0x100485d7
cmp dword [ebp - 0x35c], 0xf
push dword [ebp - 0x360]
cmova eax, dword [ebp - 0x370]
push eax
call fcn.100213d0
mov esi, dword [ebp - 0x94]
xor eax, eax
cmp byte [edi + 0x99], al
mov ecx, 0xf
cmovne eax, ecx
mov dword [edi + 0xd4], eax
add eax, 0x14
mov dword [edi + 0x40], eax
mov dword [edi + 0x44], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x18], eax
cmp esi, eax
je 0x10048643
lea ecx, [edi + 0xb8]
nop
mov eax, dword [edi + 0xbc]
push esi
cmp eax, dword [edi + 0xc0]
je 0x1004862f
mov ecx, eax
call fcn.10021130
add dword [edi + 0xbc], 0x18
jmp 0x10048635
push eax
call fcn.1003b7d0
add esi, 0x18
lea ecx, [edi + 0xb8]
cmp esi, dword [ebp - 0x18]
jne 0x10048610
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x35c]
cmp ecx, 0xf
jbe 0x1004867d
mov edx, dword [ebp - 0x370]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10048673
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100486ad
push ecx
push edx
call fcn.1008e3d7
add esp, 8
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xa4]
cmp ecx, 0xf
jbe 0x100486bd
mov edx, dword [ebp - 0xb8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100486b3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100486b3
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1008e3d7
add esp, 8
lea ecx, [ebp - 0x94]
call fcn.1003afc0
push fcn.1001ce70
push 2
push 0x18
lea eax, [ebp - 0x68]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.1008dfa8
mov dword [edi + 0x48], 0
lea esi, [edi + 0x18]
mov dword [edi + 0x34], 0x14
lea ecx, [edi + 0x30]
mov dword [edi + 0x3c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x4c], eax
mov eax, dword [esi + 4]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x1c], esi
cmp eax, dword [esi + 8]
je 0x10048718
mov dword [eax], ecx
add dword [esi + 4], 4
jmp 0x10048724
lea ecx, [ebp - 0x18]
push ecx
push eax
mov ecx, esi
call fcn.1001dae0
push 9
xorps xmm0, xmm0
mov dword [ebp - 0xd8], 0
push str.box_enemy
lea ecx, [ebp - 0xe8]
mov dword [ebp - 0xd4], 0
movups xmmword [ebp - 0xe8], xmm0
call fcn.1001d570
mov dword [ebp - 4], 7
lea ecx, [ebp - 0xd0]
push 0xf
xorps xmm0, xmm0
mov dword [ebp - 0xc0], 0
push str.box_enemy_color
movups xmmword [ebp - 0xd0], xmm0
mov dword [ebp - 0xbc], 0
call fcn.1001d570
lea ecx, [edi + 0x148]
mov byte [ebp - 4], 8
lea eax, [ebp - 0xd0]
cmp ecx, eax
je 0x100487b9
cmp dword [ebp - 0xbc], 0xf
push dword [ebp - 0xc0]
cmova eax, dword [ebp - 0xd0]
push eax
call fcn.100213d0
lea ecx, [edi + 0x110]
lea eax, [ebp - 0xe8]
cmp ecx, eax
je 0x100487e3
cmp dword [ebp - 0xd4], 0xf
push dword [ebp - 0xd8]
cmova eax, dword [ebp - 0xe8]
push eax
call fcn.100213d0
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0xbc]
mov dword [edi + 0x160], 0xff3cc896
mov dword [edi + 0x164], 0
cmp ecx, 0xf
jbe 0x10048835
mov edx, dword [ebp - 0xd0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004882b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004a5af
push ecx
push edx
call fcn.1008e3d7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xd4]
cmp ecx, 0xf
jbe 0x10048876
mov edx, dword [ebp - 0xe8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004886c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004a5af
push ecx
push edx
call fcn.1008e3d7
add esp, 8
mov dword [edi + 0xf0], 0
lea ecx, [edi + 0xd8]
mov dword [edi + 0xdc], 0x14
mov dword [edi + 0xe4], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xf4], eax
mov eax, dword [esi + 4]
mov dword [ebp - 0x18], ecx
cmp eax, dword [esi + 8]
je 0x100488b6
mov dword [eax], ecx
add dword [esi + 4], 4
jmp 0x100488c2
lea ecx, [ebp - 0x18]
push ecx
push eax
mov ecx, esi
call fcn.1001dae0
push 0xc
xorps xmm0, xmm0
mov dword [ebp - 0x108], 0
push str.box_friendly
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x104], 0
movups xmmword [ebp - 0x118], xmm0
call fcn.1001d570
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x100]
push 0x12
xorps xmm0, xmm0
mov dword [ebp - 0xf0], 0
push str.box_friendly_color
movups xmmword [ebp - 0x100], xmm0
mov dword [ebp - 0xec], 0
call fcn.1001d570
lea ecx, [edi + 0x1d8]
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x100]
cmp ecx, eax
je 0x10048957
cmp dword [ebp - 0xec], 0xf
push dword [ebp - 0xf0]
cmova eax, dword [ebp - 0x100]
push eax
call fcn.100213d0
lea ecx, [edi + 0x1a0]
lea eax, [ebp - 0x118]
cmp ecx, eax
je 0x10048981
cmp dword [ebp - 0x104], 0xf
push dword [ebp - 0x108]
cmova eax, dword [ebp - 0x118]
push eax
call fcn.100213d0
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0xec]
mov dword [edi + 0x1f0], 0xff00c8ff
mov dword [edi + 0x1f4], 0
cmp ecx, 0xf
jbe 0x100489d3
mov edx, dword [ebp - 0x100]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100489c9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004a5af
push ecx
push edx
call fcn.1008e3d7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x104]
cmp ecx, 0xf
jbe 0x10048a14
mov edx, dword [ebp - 0x118]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10048a0a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004a5af
push ecx
push edx
call fcn.1008e3d7
add esp, 8
mov dword [edi + 0x180], 0
lea ecx, [edi + 0x168]
mov dword [edi + 0x16c], 0x14
mov dword [edi + 0x174], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x184], eax
mov eax, dword [esi + 4]
mov dword [ebp - 0x18], ecx
cmp eax, dword [esi + 8]
je 0x10048a54
mov dword [eax], ecx
add dword [esi + 4], 4
jmp 0x10048a60
lea ecx, [ebp - 0x18]
push ecx
push eax
mov ecx, esi
call fcn.1001dae0
push 7
xorps xmm0, xmm0
mov dword [ebp - 0x138], 0
push str.dormant
lea ecx, [ebp - 0x148]
mov dword [ebp - 0x134], 0
movups xmmword [ebp - 0x148], xmm0
call fcn.1001d570
mov dword [ebp - 4], 0xb
lea ecx, [ebp - 0x130]
push 0xf
xorps xmm0, xmm0
mov dword [ebp - 0x120], 0
push str.dormant_enemies
movups xmmword [ebp - 0x130], xmm0
mov dword [ebp - 0x11c], 0
call fcn.1001d570
lea ecx, [edi + 0x230]
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x148]
cmp ecx, eax
je 0x10048af5
cmp dword [ebp - 0x134], 0xf
push dword [ebp - 0x138]
cmova eax, dword [ebp - 0x148]
push eax
call fcn.100213d0
lea ecx, [edi + 0x268]
mov byte [edi + 0x261], 1
lea eax, [ebp - 0x130]
cmp ecx, eax
je 0x10048b26
cmp dword [ebp - 0x11c], 0xf
push dword [ebp - 0x120]
cmova eax, dword [ebp - 0x130]
push eax
call fcn.100213d0
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x11c]
mov byte [edi + 0x264], 0
cmp ecx, 0xf
jbe 0x10048b6b
mov edx, dword [ebp - 0x130]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10048b61
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004a5af
push ecx
push edx
call fcn.1008e3d7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x134]
cmp ecx, 0xf
jbe 0x10048bac
mov edx, dword [ebp - 0x148]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10048ba2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004a5af
push ecx
push edx
call fcn.1008e3d7
add esp, 8
mov dword [edi + 0x210], 0
lea ecx, [edi + 0x1f8]
mov dword [edi + 0x1fc], 0x14
mov dword [edi + 0x204], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x214], eax
mov eax, dword [esi + 4]
mov dword [ebp - 0x18], ecx
cmp eax, dword [esi + 8]
je 0x10048bec
mov dword [eax], ecx
add dword [esi + 4], 4
jmp 0x10048bf8
lea ecx, [ebp - 0x18]
push ecx
push eax
mov ecx, esi
call fcn.1001dae0
push 9
xorps xmm0, xmm0
mov dword [ebp - 0x168], 0
push str.offscreen
lea ecx, [ebp - 0x178]
mov dword [ebp - 0x164], 0
movups xmmword [ebp - 0x178], xmm0
call fcn.1001d570
mov dword [ebp - 4], 0xd
lea ecx, [ebp - 0x160]
push 0x13
xorps xmm0, xmm0
mov dword [ebp - 0x150], 0
push str.enemy_offscreen_esp
movups xmmword [ebp - 0x160], xmm0
mov dword [ebp - 0x14c], 0
call fcn.1001d570
lea ecx, [edi + 0x2b8]
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x178]
cmp ecx, eax
je 0x10048c8d
cmp dword [ebp - 0x164], 0xf
push dword [ebp - 0x168]
cmova eax, dword [ebp - 0x178]
push eax
call fcn.100213d0
lea ecx, [edi + 0x2f0]
mov byte [edi + 0x2e9], 1
lea eax, [ebp - 0x160]
cmp ecx, eax
je 0x10048cbe
cmp dword [ebp - 0x14c], 0xf
push dword [ebp - 0x150]
cmova eax, dword [ebp - 0x160]
push eax
call fcn.100213d0
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x14c]
mov byte [edi + 0x2ec], 0
cmp ecx, 0xf
jbe 0x10048d03
mov edx, dword [ebp - 0x160]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10048cf9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004a5af
push ecx
push edx
call fcn.1008e3d7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x164]
cmp ecx, 0xf
jbe 0x10048d44
mov edx, dword [ebp - 0x178]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10048d3a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004a5af
push ecx
push edx
call fcn.1008e3d7
add esp, 8
mov dword [edi + 0x298], 0
lea ecx, [edi + 0x280]
mov dword [edi + 0x284], 0x14
mov dword [edi + 0x28c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x29c], eax
mov eax, dword [esi + 4]
mov dword [ebp - 0x18], ecx
cmp eax, dword [esi + 8]
je 0x10048d84
mov dword [eax], ecx
add dword [esi + 4], 4
jmp 0x10048d90
lea ecx, [ebp - 0x18]
push ecx
push eax
mov ecx, esi
call fcn.1001dae0
mov esi, dword [0x1009ab68]
lea ecx, [ebp - 0x1a8]
push 0xf
xorps xmm0, xmm0
mov dword [ebp - 0x198], 0
push str.offscreen_color
movups xmmword [ebp - 0x1a8], xmm0
mov dword [ebp - 0x194], 0
call fcn.1001d570
mov dword [ebp - 4], 0xf
lea ecx, [ebp - 0x190]
push 0x13
xorps xmm0, xmm0
mov dword [ebp - 0x180], 0
push str.offscreen_esp_color
movups xmmword [ebp - 0x190], xmm0
mov dword [ebp - 0x17c], 0
call fcn.1001d570
lea ecx, [edi + 0x378]
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x190]
cmp ecx, eax
je 0x10048e2b
cmp dword [ebp - 0x17c], 0xf
push dword [ebp - 0x180]
cmova eax, dword [ebp - 0x190]
push eax
call fcn.100213d0
lea ecx, [edi + 0x340]
lea eax, [ebp - 0x1a8]
cmp ecx, eax
je 0x10048e55
cmp dword [ebp - 0x194], 0xf
push dword [ebp - 0x198]
cmova eax, dword [ebp - 0x1a8]
push eax
call fcn.100213d0
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x17c]
mov dword [edi + 0x390], esi
mov dword [edi + 0x394], 0
cmp ecx, 0xf
jbe 0x10048ea3
mov edx, dword [ebp - 0x190]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10048e99
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004a5af
push ecx
push edx
call fcn.1008e3d7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x194]
cmp ecx, 0xf
jbe 0x10048ee4
mov edx, dword [ebp - 0x1a8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10048eda
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004a5af
push ecx
push edx
call fcn.1008e3d7
add esp, 8
mov dword [edi + 0x320], 0
lea esi, [edi + 0x18]
mov dword [edi + 0x30c], 0x14
lea ecx, [edi + 0x308]
mov dword [edi + 0x314], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x324], eax
mov eax, dword [esi + 4]
mov dword [ebp - 0x18], ecx
cmp eax, dword [esi + 8]
je 0x10048f27
mov dword [eax], ecx
add dword [esi + 4], 4
jmp 0x10048f33
lea ecx, [ebp - 0x18]
push ecx
push eax
mov ecx, esi
call fcn.1001dae0
push 5
xorps xmm0, xmm0
mov dword [ebp - 0x58], 0
push str.enemy
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x54], 0
movups xmmword [ebp - 0x68], xmm0
call fcn.1001d570
mov dword [ebp - 4], 0x11
lea ecx, [ebp - 0x50]
push 8
xorps xmm0, xmm0
mov dword [ebp - 0x40], 0
push str.friendly
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x3c], 0
call fcn.1001d570
lea ecx, [ebp - 0x68]
mov dword [ebp - 4], 0x12
push ecx
lea eax, [ebp - 0x38]
push eax
push ecx
lea ecx, [ebp - 0x94]
call fcn.10066680
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x1d8]
push 4
xorps xmm0, xmm0
mov dword [ebp - 0x1c8], 0
push str.name
movups xmmword [ebp - 0x1d8], xmm0
mov dword [ebp - 0x1c4], 0
call fcn.1001d570
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x1c0]
push 4
xorps xmm0, xmm0
mov dword [ebp - 0x1b0], 0
push str.name
movups xmmword [ebp - 0x1c0], xmm0
mov dword [ebp - 0x1ac], 0
call fcn.1001d570
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0
lea ecx, [edi + 0x3d0]
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x1d8]
cmp ecx, eax
je 0x10049048
cmp dword [ebp - 0x1c4], 0xf
push dword [ebp - 0x1c8]
cmova eax, dword [ebp - 0x1d8]
push eax
call fcn.100213d0
lea ecx, [edi + 0x408]
mov byte [edi + 0x401], 1
lea eax, [ebp - 0x1c0]
cmp ecx, eax
je 0x10049079
cmp dword [ebp - 0x1ac], 0xf
push dword [ebp - 0x1b0]
cmova eax, dword [ebp - 0x1c0]
push eax
call fcn.100213d0
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0x401], al
cmovne eax, ecx
mov ecx, dword [ebp - 0x90]
mov dword [edi + 0x43c], eax
add eax, 0x14
mov dword [edi + 0x3a8], eax
mov dword [edi + 0x3ac], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x20], ecx
cmp eax, ecx
je 0x100490f6
lea ecx, [edi + 0x420]
mov esi, eax
nop dword [eax]
mov eax, dword [edi + 0x424]
push esi
cmp eax, dword [edi + 0x428]
je 0x100490df
mov ecx, eax
call fcn.10021130
add dword [edi + 0x424], 0x18
jmp 0x100490e5
push eax
call fcn.1003b7d0
add esi, 0x18
lea ecx, [edi + 0x420]
cmp esi, dword [ebp - 0x20]
jne 0x100490c0
lea esi, [edi + 0x18]
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x1ac]
cmp ecx, 0xf
jbe 0x10049130
mov edx, dword [ebp - 0x1c0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10049126
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10049160
push ecx
push edx
call fcn.1008e3d7
add esp, 8
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x1c4]
cmp ecx, 0xf
jbe 0x10049170
mov edx, dword [ebp - 0x1d8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10049166
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10049166
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1008e3d7
add esp, 8
lea ecx, [ebp - 0x94]
call fcn.1003afc0
push fcn.1001ce70
push 2
push 0x18
lea eax, [ebp - 0x68]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.1008dfa8
mov dword [edi + 0x3b0], 0
lea ecx, [edi + 0x398]
mov dword [edi + 0x39c], 0x14
mov dword [edi + 0x3a4], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x3b4], eax
mov eax, dword [esi + 4]
mov dword [ebp - 0x20], ecx
cmp eax, dword [esi + 8]
je 0x100491d4
mov dword [eax], ecx
add dword [esi + 4], 4
jmp 0x100491e0
lea ecx, [ebp - 0x20]
push ecx
push eax
mov ecx, esi
call fcn.1001dae0
mov esi, dword [0x1009ab68]
lea ecx, [ebp - 0x208]
push 0xa
xorps xmm0, xmm0
mov dword [ebp - 0x1f8], 0
push 0x1009c7f0
movups xmmword [ebp - 0x208], xmm0
mov dword [ebp - 0x1f4], 0
call fcn.1001d570
mov dword [ebp - 4], 0x17
lea ecx, [ebp - 0x1f0]
push 0xa
xorps xmm0, xmm0
mov dword [ebp - 0x1e0], 0
push str.name_color
movups xmmword [ebp - 0x1f0], xmm0
mov dword [ebp - 0x1dc], 0
call fcn.1001d570
lea ecx, [edi + 0x4b0]
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x1f0]
cmp ecx, eax
je 0x1004927b
cmp dword [ebp - 0x1dc], 0xf
push dword [ebp - 0x1e0]
cmova eax, dword [ebp - 0x1f0]
push eax
call fcn.100213d0
lea ecx, [edi + 0x478]
lea eax, [ebp - 0x208]
cmp ecx, eax
je 0x100492a5
cmp dword [ebp - 0x1f4], 0xf
push dword [ebp - 0x1f8]
cmova eax, dword [ebp - 0x208]
push eax
call fcn.100213d0
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x1dc]
mov dword [edi + 0x4c8], esi
mov dword [edi + 0x4cc], 0
cmp ecx, 0xf
jbe 0x100492f3
mov edx, dword [ebp - 0x1f0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100492e9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004a5af
push ecx
push edx
call fcn.1008e3d7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1f4]
cmp ecx, 0xf
jbe 0x10049334
mov edx, dword [ebp - 0x208]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004932a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004a5af
push ecx
push edx
call fcn.1008e3d7
add esp, 8
mov dword [edi + 0x458], 0
lea esi, [edi + 0x18]
mov dword [edi + 0x444], 0x14
lea ecx, [edi + 0x440]
mov dword [edi + 0x44c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x45c], eax
mov eax, dword [esi + 4]
mov dword [ebp - 0x20], ecx
cmp eax, dword [esi + 8]
je 0x10049377
mov dword [eax], ecx
add dword [esi + 4], 4
jmp 0x10049383
lea ecx, [ebp - 0x20]
push ecx
push eax
mov ecx, esi
call fcn.1001dae0
push 5
xorps xmm0, xmm0
mov dword [ebp - 0x58], 0
push str.enemy
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x54], 0
movups xmmword [ebp - 0x68], xmm0
call fcn.1001d570
mov dword [ebp - 4], 0x19
lea ecx, [ebp - 0x50]
push 8
xorps xmm0, xmm0
mov dword [ebp - 0x40], 0
push str.friendly
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x3c], 0
call fcn.1001d570
lea ecx, [ebp - 0x68]
mov dword [ebp - 4], 0x1a
push ecx
lea eax, [ebp - 0x38]
push eax
push ecx
lea ecx, [ebp - 0x94]
call fcn.10066680
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x238]
push 6
xorps xmm0, xmm0
mov dword [ebp - 0x228], 0
push str.health
movups xmmword [ebp - 0x238], xmm0
mov dword [ebp - 0x224], 0
call fcn.1001d570
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x220]
push 6
xorps xmm0, xmm0
mov dword [ebp - 0x210], 0
push str.health
movups xmmword [ebp - 0x220], xmm0
mov dword [ebp - 0x20c], 0
call fcn.1001d570
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0
lea ecx, [edi + 0x508]
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0x238]
cmp ecx, eax
je 0x10049498
cmp dword [ebp - 0x224], 0xf
push dword [ebp - 0x228]
cmova eax, dword [ebp - 0x238]
push eax
call fcn.100213d0
lea ecx, [edi + 0x540]
mov byte [edi + 0x539], 1
lea eax, [ebp - 0x220]
cmp ecx, eax
je 0x100494c9
cmp dword [ebp - 0x20c], 0xf
push dword [ebp - 0x210]
cmova eax, dword [ebp - 0x220]
push eax
call fcn.100213d0
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0x539], al
cmovne eax, ecx
mov ecx, dword [ebp - 0x90]
mov dword [edi + 0x574], eax
add eax, 0x14
mov dword [edi + 0x4e0], eax
mov dword [edi + 0x4e4], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x18], ecx
cmp eax, ecx
je 0x10049546
lea ecx, [edi + 0x558]
mov esi, eax
nop dword [eax]
mov eax, dword [edi + 0x55c]
push esi
cmp eax, dword [edi + 0x560]
je 0x1004952f
mov ecx, eax
call fcn.10021130
add dword [edi + 0x55c], 0x18
jmp 0x10049535
push eax
call fcn.1003b7d0
add esi, 0x18
lea ecx, [edi + 0x558]
cmp esi, dword [ebp - 0x18]
jne 0x10049510
lea esi, [edi + 0x18]
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x20c]
cmp ecx, 0xf
jbe 0x10049580
mov edx, dword [ebp - 0x220]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10049576
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100495b0
push ecx
push edx
call fcn.1008e3d7
add esp, 8
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x224]
cmp ecx, 0xf
jbe 0x100495c0
mov edx, dword [ebp - 0x238]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100495b6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100495b6
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1008e3d7
add esp, 8
lea ecx, [ebp - 0x94]
call fcn.1003afc0
push fcn.1001ce70
push 2
push 0x18
lea eax, [ebp - 0x68]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.1008dfa8
mov dword [edi + 0x4e8], 0
lea ecx, [edi + 0x4d0]
mov dword [edi + 0x4d4], 0x14
mov dword [edi + 0x4dc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x4ec], eax
mov eax, dword [esi + 4]
mov dword [ebp - 0x20], ecx
cmp eax, dword [esi + 8]
je 0x10049624
mov dword [eax], ecx
add dword [esi + 4], 4
jmp 0x10049630
lea ecx, [ebp - 0x20]
push ecx
push eax
mov ecx, esi
call fcn.1001dae0
push 5
xorps xmm0, xmm0
mov dword [ebp - 0x438], 0
push str.money
lea ecx, [ebp - 0x448]
mov dword [ebp - 0x434], 0
movups xmmword [ebp - 0x448], xmm0
call fcn.1001d570
mov dword [ebp - 4], 0x1f
lea ecx, [ebp - 0x430]
push 5
xorps xmm0, xmm0
mov dword [ebp - 0x420], 0
push str.armor
movups xmmword [ebp - 0x430], xmm0
mov dword [ebp - 0x41c], 0
call fcn.1001d570
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x418]
push 6
xorps xmm0, xmm0
mov dword [ebp - 0x408], 0
push str.scoped
movups xmmword [ebp - 0x418], xmm0
mov dword [ebp - 0x404], 0
call fcn.1001d570
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x400]
push 7
xorps xmm0, xmm0
mov dword [ebp - 0x3f0], 0
push str.flashed
movups xmmword [ebp - 0x400], xmm0
mov dword [ebp - 0x3ec], 0
call fcn.1001d570
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x3e8]
push 9
xorps xmm0, xmm0
mov dword [ebp - 0x3d8], 0
push str.reloading
movups xmmword [ebp - 0x3e8], xmm0
mov dword [ebp - 0x3d4], 0
call fcn.1001d570
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x3d0]
push 4
xorps xmm0, xmm0
mov dword [ebp - 0x3c0], 0
push str.bomb
movups xmmword [ebp - 0x3d0], xmm0
mov dword [ebp - 0x3bc], 0
call fcn.1001d570
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x3b8]
push 8
xorps xmm0, xmm0
mov dword [ebp - 0x3a8], 0
push str.resolver
movups xmmword [ebp - 0x3b8], xmm0
mov dword [ebp - 0x3a4], 0
call fcn.1001d570
lea ecx, [ebp - 0x448]
mov dword [ebp - 4], 0x25
push ecx
lea eax, [ebp - 0x3a0]
push eax
push ecx
lea ecx, [ebp - 0x94]
call fcn.10066680
xorps xmm0, xmm0
mov byte [ebp - 4], 0x26
movups xmmword [ebp - 0x268], xmm0
push 0xb
push str.flags_enemy
lea ecx, [ebp - 0x268]
mov dword [ebp - 0x258], 0
mov dword [ebp - 0x254], 0
call fcn.1001d570
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x250]
push 0xb
xorps xmm0, xmm0
mov dword [ebp - 0x240], 0
push 0x1009c850
movups xmmword [ebp - 0x250], xmm0
mov dword [ebp - 0x23c], 0
call fcn.1001d570
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0
lea ecx, [edi + 0x5b0]
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0x268]
cmp ecx, eax
je 0x10049867
cmp dword [ebp - 0x254], 0xf
push dword [ebp - 0x258]
cmova eax, dword [ebp - 0x268]
push eax
call fcn.100213d0
lea ecx, [edi + 0x5e8]
mov byte [edi + 0x5e1], 1
lea eax, [ebp - 0x250]
cmp ecx, eax
je 0x10049898
cmp dword [ebp - 0x23c], 0xf
push dword [ebp - 0x240]
cmova eax, dword [ebp - 0x250]
push eax
call fcn.100213d0
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0x5e1], al
cmovne eax, ecx
mov ecx, dword [ebp - 0x90]
mov dword [edi + 0x61c], eax
add eax, 0x14
mov dword [edi + 0x588], eax
mov dword [edi + 0x58c], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x18], ecx
cmp eax, ecx
je 0x10049916
lea ecx, [edi + 0x600]
mov esi, eax
nop dword [eax + eax]
mov eax, dword [edi + 0x604]
push esi
cmp eax, dword [edi + 0x608]
je 0x100498ff
mov ecx, eax
call fcn.10021130
add dword [edi + 0x604], 0x18
jmp 0x10049905
push eax
call fcn.1003b7d0
add esi, 0x18
lea ecx, [edi + 0x600]
cmp esi, dword [ebp - 0x18]
jne 0x100498e0
lea esi, [edi + 0x18]
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x23c]
cmp ecx, 0xf
jbe 0x10049950
mov edx, dword [ebp - 0x250]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10049946
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10049980
push ecx
push edx
call fcn.1008e3d7
add esp, 8
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x254]
cmp ecx, 0xf
jbe 0x10049990
mov edx, dword [ebp - 0x268]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10049986
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10049986
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1008e3d7
add esp, 8
lea ecx, [ebp - 0x94]
call fcn.1003afc0
push fcn.1001ce70
push 7
push 0x18
lea eax, [ebp - 0x448]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.1008dfa8
mov dword [edi + 0x590], 0
lea ecx, [edi + 0x578]
mov dword [edi + 0x57c], 0x14
mov dword [edi + 0x584], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x594], eax
mov eax, dword [esi + 4]
mov dword [ebp - 0x20], ecx
cmp eax, dword [esi + 8]
je 0x100499f7
mov dword [eax], ecx
add dword [esi + 4], 4
jmp 0x10049a03
lea ecx, [ebp - 0x20]
push ecx
push eax
mov ecx, esi
call fcn.1001dae0
push 5
xorps xmm0, xmm0
mov dword [ebp - 0x420], 0
push str.money
lea ecx, [ebp - 0x430]
mov dword [ebp - 0x41c], 0
movups xmmword [ebp - 0x430], xmm0
call fcn.1001d570
mov dword [ebp - 4], 0x2a
lea ecx, [ebp - 0x418]
push 5
xorps xmm0, xmm0
mov dword [ebp - 0x408], 0
push str.armor
movups xmmword [ebp - 0x418], xmm0
mov dword [ebp - 0x404], 0
call fcn.1001d570
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x400]
push 6
xorps xmm0, xmm0
mov dword [ebp - 0x3f0], 0
push str.scoped
movups xmmword [ebp - 0x400], xmm0
mov dword [ebp - 0x3ec], 0
call fcn.1001d570
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x3e8]
push 7
xorps xmm0, xmm0
mov dword [ebp - 0x3d8], 0
push str.flashed
movups xmmword [ebp - 0x3e8], xmm0
mov dword [ebp - 0x3d4], 0
call fcn.1001d570
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x3d0]
push 9
xorps xmm0, xmm0
mov dword [ebp - 0x3c0], 0
push str.reloading
movups xmmword [ebp - 0x3d0], xmm0
mov dword [ebp - 0x3bc], 0
call fcn.1001d570
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x3b8]
push 4
xorps xmm0, xmm0
mov dword [ebp - 0x3a8], 0
push str.bomb
movups xmmword [ebp - 0x3b8], xmm0
mov dword [ebp - 0x3a4], 0
call fcn.1001d570
lea ecx, [ebp - 0x430]
mov dword [ebp - 4], 0x2f
push ecx
lea eax, [ebp - 0x3a0]
push eax
push ecx
lea ecx, [ebp - 0x94]
call fcn.10066680
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x298]
push 0xe
xorps xmm0, xmm0
mov dword [ebp - 0x288], 0
push str.flags_friendly
movups xmmword [ebp - 0x298], xmm0
mov dword [ebp - 0x284], 0
call fcn.1001d570
xorps xmm0, xmm0
mov byte [ebp - 4], 0x31
movups xmmword [ebp - 0x280], xmm0
push 0xe
push 0x1009c868
lea ecx, [ebp - 0x280]
mov dword [ebp - 0x270], 0
mov dword [ebp - 0x26c], 0
call fcn.1001d570
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0
lea ecx, [edi + 0x658]
mov byte [ebp - 4], 0x33
lea eax, [ebp - 0x298]
cmp ecx, eax
je 0x10049c06
cmp dword [ebp - 0x284], 0xf
push dword [ebp - 0x288]
cmova eax, dword [ebp - 0x298]
push eax
call fcn.100213d0
lea ecx, [edi + 0x690]
mov byte [edi + 0x689], 1
lea eax, [ebp - 0x280]
cmp ecx, eax
je 0x10049c37
cmp dword [ebp - 0x26c], 0xf
push dword [ebp - 0x270]
cmova eax, dword [ebp - 0x280]
push eax
call fcn.100213d0
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0x689], al
cmovne eax, ecx
mov ecx, dword [ebp - 0x90]
mov dword [edi + 0x6c4], eax
add eax, 0x14
mov dword [edi + 0x630], eax
mov dword [edi + 0x634], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x18], ecx
cmp eax, ecx
je 0x10049cb6
lea ecx, [edi + 0x6a8]
mov esi, eax
nop word [eax + eax]
mov eax, dword [edi + 0x6ac]
push esi
cmp eax, dword [edi + 0x6b0]
je 0x10049c9f
mov ecx, eax
call fcn.10021130
add dword [edi + 0x6ac], 0x18
jmp 0x10049ca5
push eax
call fcn.1003b7d0
add esi, 0x18
lea ecx, [edi + 0x6a8]
cmp esi, dword [ebp - 0x18]
jne 0x10049c80
lea esi, [edi + 0x18]
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x26c]
cmp ecx, 0xf
jbe 0x10049cf0
mov edx, dword [ebp - 0x280]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10049ce6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10049d20
push ecx
push edx
call fcn.1008e3d7
add esp, 8
mov byte [ebp - 4], 0x30
mov ecx, dword [ebp - 0x284]
cmp ecx, 0xf
jbe 0x10049d30
mov edx, dword [ebp - 0x298]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10049d26
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10049d26
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1008e3d7
add esp, 8
lea ecx, [ebp - 0x94]
call fcn.1003afc0
push fcn.1001ce70
push 6
push 0x18
lea eax, [ebp - 0x430]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.1008dfa8
mov dword [edi + 0x638], 0
lea ecx, [edi + 0x620]
mov dword [edi + 0x624], 0x14
mov dword [edi + 0x62c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x63c], eax
mov eax, dword [esi + 4]
mov dword [ebp - 0x20], ecx
cmp eax, dword [esi + 8]
je 0x10049d97
mov dword [eax], ecx
add dword [esi + 4], 4
jmp 0x10049da3
lea ecx, [ebp - 0x20]
push ecx
push eax
mov ecx, esi
call fcn.1001dae0
push 5
xorps xmm0, xmm0
mov dword [ebp - 0x58], 0
push str.enemy
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x54], 0
movups xmmword [ebp - 0x68], xmm0
call fcn.1001d570
mov dword [ebp - 4], 0x34
lea ecx, [ebp - 0x50]
push 8
xorps xmm0, xmm0
mov dword [ebp - 0x40], 0
push str.friendly
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x3c], 0
call fcn.1001d570
lea ecx, [ebp - 0x68]
mov dword [ebp - 4], 0x35
push ecx
lea eax, [ebp - 0x38]
push eax
push ecx
lea ecx, [ebp - 0x94]
call fcn.10066680
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x2c8]
push 6
xorps xmm0, xmm0
mov dword [ebp - 0x2b8], 0
push str.weapon
movups xmmword [ebp - 0x2c8], xmm0
mov dword [ebp - 0x2b4], 0
call fcn.1001d570
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x2b0]
push 6
xorps xmm0, xmm0
mov dword [ebp - 0x2a0], 0
push str.weapon
movups xmmword [ebp - 0x2b0], xmm0
mov dword [ebp - 0x29c], 0
call fcn.1001d570
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0
lea ecx, [edi + 0x700]
mov byte [ebp - 4], 0x39
lea eax, [ebp - 0x2c8]
cmp ecx, eax
je 0x10049eb8
cmp dword [ebp - 0x2b4], 0xf
push dword [ebp - 0x2b8]
cmova eax, dword [ebp - 0x2c8]
push eax
call fcn.100213d0
lea ecx, [edi + 0x738]
mov byte [edi + 0x731], 1
lea eax, [ebp - 0x2b0]
cmp ecx, eax
je 0x10049ee9
cmp dword [ebp - 0x29c], 0xf
push dword [ebp - 0x2a0]
cmova eax, dword [ebp - 0x2b0]
push eax
call fcn.100213d0
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0x731], al
cmovne eax, ecx
mov ecx, dword [ebp - 0x90]
mov dword [edi + 0x76c], eax
add eax, 0x14
mov dword [edi + 0x6d8], eax
mov dword [edi + 0x6dc], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x18], ecx
cmp eax, ecx
je 0x10049f66
lea ecx, [edi + 0x750]
mov esi, eax
nop dword [eax]
mov eax, dword [edi + 0x754]
push esi
cmp eax, dword [edi + 0x758]
je 0x10049f4f
mov ecx, eax
call fcn.10021130
add dword [edi + 0x754], 0x18
jmp 0x10049f55
push eax
call fcn.1003b7d0
add esi, 0x18
lea ecx, [edi + 0x750]
cmp esi, dword [ebp - 0x18]
jne 0x10049f30
lea esi, [edi + 0x18]
mov byte [ebp - 4], 0x37
mov ecx, dword [ebp - 0x29c]
cmp ecx, 0xf
jbe 0x10049fa0
mov edx, dword [ebp - 0x2b0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10049f96
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10049fd0
push ecx
push edx
call fcn.1008e3d7
add esp, 8
mov byte [ebp - 4], 0x36
mov ecx, dword [ebp - 0x2b4]
cmp ecx, 0xf
jbe 0x10049fe0
mov edx, dword [ebp - 0x2c8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10049fd6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10049fd6
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1008e3d7
add esp, 8
lea ecx, [ebp - 0x94]
call fcn.1003afc0
push fcn.1001ce70
push 2
push 0x18
lea eax, [ebp - 0x68]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.1008dfa8
mov dword [edi + 0x6e0], 0
lea ecx, [edi + 0x6c8]
mov dword [edi + 0x6cc], 0x14
mov dword [edi + 0x6d4], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x6e4], eax
mov eax, dword [esi + 4]
mov dword [ebp - 0x20], ecx
cmp eax, dword [esi + 8]
je 0x1004a044
mov dword [eax], ecx
add dword [esi + 4], 4
jmp 0x1004a050
lea ecx, [ebp - 0x20]
push ecx
push eax
mov ecx, esi
call fcn.1001dae0
push 4
xorps xmm0, xmm0
mov dword [ebp - 0x58], 0
push str.text
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x54], 0
movups xmmword [ebp - 0x68], xmm0
call fcn.1001d570
mov dword [ebp - 4], 0x3a
lea ecx, [ebp - 0x50]
push 4
xorps xmm0, xmm0
mov dword [ebp - 0x40], 0
push str.icon
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x3c], 0
call fcn.1001d570
lea ecx, [ebp - 0x68]
mov dword [ebp - 4], 0x3b
push ecx
lea eax, [ebp - 0x38]
push eax
push ecx
lea ecx, [ebp - 0x94]
call fcn.10066680
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x2e0]
push 0xb
xorps xmm0, xmm0
mov dword [ebp - 0x2d0], 0
push str.weapon_mode
movups xmmword [ebp - 0x2e0], xmm0
mov dword [ebp - 0x2cc], 0
call fcn.1001d570
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x88]
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x78], 0
push 0x1009a7a0
movups xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x74], 0
call fcn.1001d570
lea ecx, [edi + 0x7a8]
mov byte [ebp - 4], 0x3e
lea eax, [ebp - 0x2e0]
cmp ecx, eax
je 0x1004a14a
cmp dword [ebp - 0x2cc], 0xf
push dword [ebp - 0x2d0]
cmova eax, dword [ebp - 0x2e0]
push eax
call fcn.100213d0
mov eax, dword [ebp - 0x90]
mov esi, dword [ebp - 0x94]
mov byte [edi + 0x7d9], 0
mov dword [edi + 0x80c], 0
mov dword [edi + 0x780], 0x14
mov dword [edi + 0x784], 0x14
mov dword [ebp - 0x20], eax
cmp esi, eax
je 0x1004a1c3
lea ecx, [edi + 0x7f8]
nop dword [eax + eax]
mov eax, dword [edi + 0x7fc]
push esi
cmp eax, dword [edi + 0x800]
je 0x1004a1af
mov ecx, eax
call fcn.10021130
add dword [edi + 0x7fc], 0x18
jmp 0x1004a1b5
push eax
call fcn.1003b7d0
add esi, 0x18
lea ecx, [edi + 0x7f8]
cmp esi, dword [ebp - 0x20]
jne 0x1004a190
mov ecx, dword [edi + 0x7fc]
mov eax, 0x2aaaaaab
sub ecx, dword [edi + 0x7f8]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x1004a1ec
mov dword [edi + 0x808], 0
mov byte [ebp - 4], 0x3d
mov ecx, dword [ebp - 0x74]
cmp ecx, 0xf
jbe 0x1004a223
mov edx, dword [ebp - 0x88]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004a219
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004a253
push ecx
push edx
call fcn.1008e3d7
add esp, 8
mov byte [ebp - 4], 0x3c
mov ecx, dword [ebp - 0x2cc]
cmp ecx, 0xf
jbe 0x1004a263
mov edx, dword [ebp - 0x2e0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004a259
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1004a259
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1008e3d7
add esp, 8
lea ecx, [ebp - 0x94]
call fcn.1003afc0
push fcn.1001ce70
push 2
push 0x18
lea eax, [ebp - 0x68]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.1008dfa8
mov dword [edi + 0x788], 0
lea ecx, [edi + 0x18]
mov dword [edi + 0x774], 0x14
lea edx, [edi + 0x770]
mov dword [edi + 0x77c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x78c], eax
mov eax, dword [ecx + 4]
mov dword [ebp - 0x20], edx
cmp eax, dword [ecx + 8]
je 0x1004a2ca
mov dword [eax], edx
add dword [ecx + 4], 4
jmp 0x1004a2d4
lea edx, [ebp - 0x20]
push edx
push eax
call fcn.1001dae0
push 4
xorps xmm0, xmm0
mov dword [ebp - 0x300], 0
push str.ammo
lea ecx, [ebp - 0x310]
mov dword [ebp - 0x2fc], 0
lea esi, [edi + 0x810]
movups xmmword [ebp - 0x310], xmm0
call fcn.1001d570
mov dword [ebp - 4], 0x3f
lea ecx, [ebp - 0x2f8]
push 4
xorps xmm0, xmm0
mov dword [ebp - 0x2e8], 0
push str.ammo
movups xmmword [ebp - 0x2f8], xmm0
mov dword [ebp - 0x2e4], 0
call fcn.1001d570
lea ecx, [edi + 0x848]
mov byte [ebp - 4], 0x40
lea eax, [ebp - 0x310]
cmp ecx, eax
je 0x1004a36f
cmp dword [ebp - 0x2fc], 0xf
push dword [ebp - 0x300]
cmova eax, dword [ebp - 0x310]
push eax
call fcn.100213d0
lea ecx, [edi + 0x880]
mov byte [edi + 0x879], 1
lea eax, [ebp - 0x2f8]
cmp ecx, eax
je 0x1004a3a0
cmp dword [ebp - 0x2e4], 0xf
push dword [ebp - 0x2e8]
cmova eax, dword [ebp - 0x2f8]
push eax
call fcn.100213d0
mov byte [ebp - 4], 0x3f
mov ecx, dword [ebp - 0x2e4]
mov byte [edi + 0x87c], 0
cmp ecx, 0xf
jbe 0x1004a3e5
mov edx, dword [ebp - 0x2f8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004a3db
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004a5af
push ecx
push edx
call fcn.1008e3d7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2fc]
cmp ecx, 0xf
jbe 0x1004a426
mov edx, dword [ebp - 0x310]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004a41c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004a5af
push ecx
push edx
call fcn.1008e3d7
add esp, 8
mov dword [edi + 0x828], 0
lea ecx, [edi + 0x18]
mov dword [edi + 0x814], 0x14
mov dword [edi + 0x81c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x82c], eax
mov eax, dword [ecx + 4]
mov dword [ebp - 0x20], esi
cmp eax, dword [ecx + 8]
je 0x1004a463
mov dword [eax], esi
add dword [ecx + 4], 4
jmp 0x1004a46d
lea edx, [ebp - 0x20]
push edx
push eax
call fcn.1001dae0
mov esi, dword [0x1009ab88]
lea ecx, [ebp - 0x340]
push 0xa
xorps xmm0, xmm0
mov dword [ebp - 0x330], 0
push str.ammo_color
movups xmmword [ebp - 0x340], xmm0
mov dword [ebp - 0x32c], 0
call fcn.1001d570
mov dword [ebp - 4], 0x41
lea ecx, [ebp - 0x328]
push 5
xorps xmm0, xmm0
mov dword [ebp - 0x318], 0
push str.color
movups xmmword [ebp - 0x328], xmm0
mov dword [ebp - 0x314], 0
call fcn.1001d570
lea ecx, [edi + 0x908]
mov byte [ebp - 4], 0x42
lea eax, [ebp - 0x328]
cmp ecx, eax
je 0x1004a508
cmp dword [ebp - 0x314], 0xf
push dword [ebp - 0x318]
cmova eax, dword [ebp - 0x328]
push eax
call fcn.100213d0
lea ecx, [edi + 0x8d0]
lea eax, [ebp - 0x340]
cmp ecx, eax
je 0x1004a532
cmp dword [ebp - 0x32c], 0xf
push dword [ebp - 0x330]
cmova eax, dword [ebp - 0x340]
push eax
call fcn.100213d0
mov byte [ebp - 4], 0x41
mov ecx, dword [ebp - 0x314]
mov dword [edi + 0x920], esi
mov dword [edi + 0x924], 0
cmp ecx, 0xf
jbe 0x1004a57c
mov edx, dword [ebp - 0x328]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004a572
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004a5af
push ecx
push edx
call fcn.1008e3d7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x32c]
cmp ecx, 0xf
jbe 0x1004a5bf
mov edx, dword [ebp - 0x340]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1004a5b5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1004a5b5
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1008e3d7
add esp, 8
mov dword [edi + 0x8b0], 0
lea ecx, [edi + 0x18]
mov dword [edi + 0x89c], 0x14
lea edx, [edi + 0x898]
mov dword [edi + 0x8a4], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x8b4], eax
mov eax, dword [ecx + 4]
mov dword [ebp - 0x20], edx
cmp eax, dword [ecx + 8]
je 0x1004a602
mov dword [eax], edx
add dword [ecx + 4], 4
jmp 0x1004a60c
lea edx, [ebp - 0x20]
push edx
push eax
call fcn.1001dae0
push 0xa
xorps xmm0, xmm0
mov dword [ebp - 0x390], 0
push 0x1009c8c0
lea ecx, [ebp - 0x3a0]
mov dword [ebp - 0x38c], 0
lea esi, [edi + 0x928]
movups xmmword [ebp - 0x3a0], xmm0
call fcn.1001d570
mov dword [ebp - 4], 0x43
lea ecx, [ebp - 0x388]
push 0xa
xorps xmm0, xmm0
mov dword [ebp - 0x378], 0
push str.lby_update
movups xmmword [ebp - 0x388], xmm0
mov dword [ebp - 0x374], 0
call fcn.1001d570
lea ecx, [edi + 0x960]
mov byte [ebp - 4], 0x44
lea eax, [ebp - 0x3a0]
cmp ecx, eax
je 0x1004a6a7
cmp dword [ebp - 0x38c], 0xf
push dword [ebp - 0x390]
cmova eax, dword [ebp - 0x3a0]
push eax
call fcn.100213d0
lea ecx, [edi + 0x998]
mov byte [edi + 0x991], 1
lea eax, [ebp - 0x388]
cmp ecx, eax
je 0x1004a6d8
cmp dword [ebp - 0x374], 0xf
push dword [ebp - 0x378]
cmova eax, dword [ebp - 0x388]
push eax
call fcn.100213d0
lea ecx, [ebp - 0x388]
mov byte [edi + 0x994], 0
call fcn.1001ce70
lea ecx, [ebp - 0x3a0]
mov dword [ebp - 4], 0xffffffff
call fcn.1001ce70
mov dword [edi + 0x940], 0
lea ecx, [edi + 0x18]
mov dword [edi + 0x92c], 0x14
mov dword [edi + 0x934], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x944], eax
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x20], esi
call fcn.1002d8a0
mov esi, dword [0x1009ab80]
lea ecx, [ebp - 0xa0]
push str.lby_update_color
add edi, 0x9b0
call fcn.1001cec0
push str.color
lea ecx, [ebp - 0x88]
mov dword [ebp - 4], 0x45
call fcn.1001cec0
mov ecx, dword [ebp - 0x6c]
lea eax, [ebp - 0x88]
push eax
add ecx, 0xa20
mov byte [ebp - 4], 0x46
call fcn.10034ed0
mov ecx, dword [ebp - 0x6c]
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ecx + 0x9e8]
call fcn.10034ed0
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x88]
mov dword [eax + 0xa38], esi
mov dword [eax + 0xa3c], 0
call fcn.1001ce70
lea ecx, [ebp - 0xa0]
mov dword [ebp - 4], 0xffffffff
call fcn.1001ce70
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x1c]
mov dword [edi + 0x18], 0
mov dword [edi + 4], 0x14
mov dword [edi + 0xc], 0xaf
mov eax, dword [eax + 0x2c]
mov dword [edi + 0x1c], eax
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x20], edi
call fcn.1002d8a0
push str.enemy
lea ecx, [ebp - 0x478]
call fcn.1001cec0
push str.friendly
lea ecx, [ebp - 0x460]
mov dword [ebp - 4], 0x47
call fcn.1001cec0
lea ecx, [ebp - 0x478]
mov dword [ebp - 4], 0x48
push ecx
lea eax, [ebp - 0x448]
push eax
push ecx
lea ecx, [ebp - 0x7c]
call fcn.10066680
push str.glow
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x49
call fcn.1001cec0
mov byte [ebp - 4], 0x4a
push str.glow
lea ecx, [ebp - 0x38]
call fcn.1001cec0
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0
mov edi, dword [ebp - 0x6c]
lea eax, [ebp - 0x50]
push eax
mov byte [ebp - 4], 0x4c
lea ecx, [edi + 0xa78]
call fcn.10034ed0
lea eax, [ebp - 0x38]
mov byte [edi + 0xaa9], 1
push eax
lea ecx, [edi + 0xab0]
call fcn.10034ed0
mov esi, dword [ebp - 0x7c]
xor eax, eax
cmp byte [edi + 0xaa9], al
mov ecx, 0xf
cmovne eax, ecx
mov dword [edi + 0xae4], eax
add eax, 0x14
mov dword [edi + 0xa50], eax
mov dword [edi + 0xa54], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x1c], eax
cmp esi, eax
je 0x1004a8f5
lea eax, [edi + 0xac8]
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
nop
push esi
mov ecx, eax
call fcn.1003ab90
mov eax, dword [ebp - 0x20]
add esi, 0x18
cmp esi, edi
jne 0x1004a8e0
mov edi, dword [ebp - 0x6c]
lea ecx, [ebp - 0x98]
call fcn.1001c470
lea ecx, [ebp - 0x38]
call fcn.1001ce70
lea ecx, [ebp - 0x50]
call fcn.1001ce70
lea ecx, [ebp - 0x7c]
call fcn.1003afc0
push fcn.1001ce70
push 2
push 0x18
lea eax, [ebp - 0x478]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.1008dfa8
mov dword [edi + 0xa58], 1
lea eax, [edi + 0xa40]
mov dword [edi + 0xa44], 0xff
lea ecx, [edi + 0x18]
mov dword [ebp - 0x1c], eax
mov dword [edi + 0xa4c], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xa5c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.1002d8a0
push str.glow_enemy
lea ecx, [ebp - 0x38]
lea esi, [edi + 0xae8]
call fcn.1001cec0
push str.enemy_color
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x4d
call fcn.1001cec0
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x4e
push eax
lea ecx, [edi + 0xb58]
mov dword [ebp - 0x18], 0xff3cc896
call fcn.10034ed0
lea eax, [ebp - 0x38]
push eax
lea ecx, [edi + 0xb20]
call fcn.10034ed0
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x50]
mov dword [edi + 0xb70], eax
mov dword [edi + 0xb74], 0
call fcn.1001ce70
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 0xffffffff
call fcn.1001ce70
mov dword [esi + 0x18], 1
lea ecx, [edi + 0x18]
mov dword [esi + 4], 0xff
mov dword [esi + 0xc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [esi + 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x1c], esi
call fcn.1002d8a0
push str.glow_friendly
lea ecx, [ebp - 0x38]
lea esi, [edi + 0xb78]
call fcn.1001cec0
push str.friendly_color
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x4f
call fcn.1001cec0
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x50
push eax
lea ecx, [edi + 0xbe8]
mov dword [ebp - 0x18], 0xff3cc896
call fcn.10034ed0
lea eax, [ebp - 0x38]
push eax
lea ecx, [edi + 0xbb0]
call fcn.10034ed0
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x50]
mov dword [edi + 0xc00], eax
mov dword [edi + 0xc04], 0
call fcn.1001ce70
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 0xffffffff
call fcn.1001ce70
mov dword [esi + 0x18], 1
lea ecx, [edi + 0x18]
mov dword [esi + 4], 0xff
mov dword [esi + 0xc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [esi + 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x1c], esi
call fcn.1002d8a0
push 0x1009c02c
lea ecx, [ebp - 0x38]
lea esi, [edi + 0xc08]
call fcn.10066970
push str.glow_blend
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x51
call fcn.1001cec0
push 0x1009a7a0
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x52
call fcn.1001cec0
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x53
push eax
lea ecx, [edi + 0xc40]
call fcn.10034ed0
mov byte [edi + 0xc71], 0
lea eax, [ebp - 0x38]
mov dword [edi + 0xcc0], 0
lea ecx, [edi + 0xca8]
mov dword [edi + 0xc18], 8
mov dword [edi + 0xc1c], 8
mov dword [edi + 0xc7c], 0x41200000
mov dword [edi + 0xc80], 0x42c80000
mov dword [edi + 0xc78], 0x42700000
mov dword [edi + 0xc8c], 0
push eax
mov dword [edi + 0xc84], 0x3f800000
call fcn.10066900
lea ecx, [ebp - 0x88]
call fcn.1001ce70
lea ecx, [ebp - 0x50]
call fcn.1001ce70
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 0xffffffff
call fcn.1003aeb0
mov dword [esi + 0x18], 1
lea ecx, [edi + 0x18]
mov dword [esi + 4], 0xff
mov dword [esi + 0xc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [esi + 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x1c], esi
call fcn.1002d8a0
push str.visible
lea ecx, [ebp - 0x478]
call fcn.1001cec0
push str.invisible
lea ecx, [ebp - 0x460]
mov dword [ebp - 4], 0x54
call fcn.1001cec0
mov dword [ebp - 4], 0x55
lea ecx, [ebp - 0x478]
push ecx
lea eax, [ebp - 0x448]
push eax
push ecx
lea ecx, [ebp - 0x94]
call fcn.10066680
push str.chams_enemy
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x56
call fcn.1001cec0
push 0x1009c954
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x57
call fcn.1001cec0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x59
push eax
lea ecx, [edi + 0xcfc]
call fcn.10034ed0
lea eax, [ebp - 0x50]
mov byte [edi + 0xd2d], 1
push eax
lea ecx, [edi + 0xd34]
call fcn.10034ed0
mov esi, dword [ebp - 0x94]
xor eax, eax
cmp byte [edi + 0xd2d], al
mov ecx, 0xf
cmovne eax, ecx
mov dword [edi + 0xd68], eax
add eax, 0x14
mov dword [edi + 0xcd4], eax
mov dword [edi + 0xcd8], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x20], eax
cmp esi, eax
je 0x1004acb6
lea eax, [edi + 0xd4c]
mov dword [ebp - 0x1c], eax
mov edi, eax
push esi
mov ecx, edi
call fcn.1003ab90
add esi, 0x18
cmp esi, dword [ebp - 0x20]
jne 0x1004aca3
mov edi, dword [ebp - 0x6c]
lea ecx, [ebp - 0x80]
call fcn.1001c470
lea ecx, [ebp - 0x50]
call fcn.1001ce70
lea ecx, [ebp - 0x38]
call fcn.1001ce70
lea ecx, [ebp - 0x94]
call fcn.1003afc0
push fcn.1001ce70
push 2
push 0x18
lea eax, [ebp - 0x478]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.1008dfa8
mov dword [edi + 0xcdc], 1
lea eax, [edi + 0xcc4]
mov dword [edi + 0xcc8], 0xff
lea ecx, [edi + 0x18]
mov dword [ebp - 0x1c], eax
mov dword [edi + 0xcd0], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0xce0], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.1002d8a0
push str.chams_enemy_vis
lea ecx, [ebp - 0x38]
lea esi, [edi + 0xd6c]
call fcn.1001cec0
push str.color_visible
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x5a
call fcn.1001cec0
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x5b
push eax
lea ecx, [edi + 0xddc]
mov dword [ebp - 0x18], 0xff3cc896
call fcn.10034ed0
lea eax, [ebp - 0x38]
push eax
lea ecx, [edi + 0xda4]
call fcn.10034ed0
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x50]
mov dword [edi + 0xdf4], eax
mov dword [edi + 0xdf8], 0
call fcn.1001ce70
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 0xffffffff
call fcn.1001ce70
mov dword [esi + 0x18], 1
lea ecx, [edi + 0x18]
mov dword [esi + 4], 0xff
mov dword [esi + 0xc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [esi + 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x1c], esi
call fcn.1002d8a0
push str.chams_enemy_invis
lea ecx, [ebp - 0x38]
lea esi, [edi + 0xdfc]
call fcn.1001cec0
push str.color_invisible
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x5c
call fcn.1001cec0
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x5d
push eax
lea ecx, [edi + 0xe6c]
mov dword [ebp - 0x18], 0xffe1b43c
call fcn.10034ed0
lea eax, [ebp - 0x38]
push eax
lea ecx, [edi + 0xe34]
call fcn.10034ed0
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x50]
mov dword [edi + 0xe84], eax
mov dword [edi + 0xe88], 0
call fcn.1001ce70
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 0xffffffff
call fcn.1001ce70
mov dword [esi + 0x18], 1
lea ecx, [edi + 0x18]
mov dword [esi + 4], 0xff
mov dword [esi + 0xc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [esi + 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x1c], esi
call fcn.1002d8a0
push 0x1009c02c
lea ecx, [ebp - 0x38]
lea esi, [edi + 0xe8c]
call fcn.10066970
push str.chams_enemy_blend
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x5e
call fcn.1001cec0
push 0x1009a7a0
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x5f
call fcn.1001cec0
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x60
push eax
lea ecx, [edi + 0xec4]
call fcn.10034ed0
mov byte [edi + 0xef5], 0
lea eax, [ebp - 0x38]
mov dword [edi + 0xf44], 0
lea ecx, [edi + 0xf2c]
mov dword [edi + 0xe9c], 8
mov dword [edi + 0xea0], 8
mov dword [edi + 0xf00], 0x41200000
mov dword [edi + 0xf04], 0x42c80000
mov dword [edi + 0xefc], 0x42c80000
mov dword [edi + 0xf10], 0
push eax
mov dword [edi + 0xf08], 0x3f800000
call fcn.10066900
lea ecx, [ebp - 0x88]
call fcn.1001ce70
lea ecx, [ebp - 0x50]
call fcn.1001ce70
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 0xffffffff
call fcn.1003aeb0
mov dword [esi + 0x18], 1
lea ecx, [edi + 0x18]
mov dword [esi + 4], 0xff
mov dword [esi + 0xc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [esi + 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x1c], esi
call fcn.1002d8a0
push 0x1009c9b0
lea ecx, [ebp - 0x38]
lea esi, [edi + 0xf48]
call fcn.1001cec0
push str.chams_history
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x61
call fcn.1001cec0
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x62
push eax
lea ecx, [edi + 0xf80]
call fcn.10034ed0
lea eax, [ebp - 0x50]
mov byte [edi + 0xfb1], 1
push eax
lea ecx, [edi + 0xfb8]
call fcn.10034ed0
lea ecx, [ebp - 0x50]
mov byte [edi + 0xfb4], 0
call fcn.1001ce70
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 0xffffffff
call fcn.1001ce70
mov dword [esi + 0x18], 1
lea ecx, [edi + 0x18]
mov dword [esi + 4], 0xff
mov dword [esi + 0xc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [esi + 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x1c], esi
call fcn.1002d8a0
push str.chams_history_col
lea ecx, [ebp - 0x38]
lea esi, [edi + 0xfd0]
call fcn.1001cec0
push str.color
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x63
call fcn.1001cec0
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x64
push eax
lea ecx, [edi + 0x1040]
mov dword [ebp - 0x18], 0xffc8ffff
call fcn.10034ed0
lea eax, [ebp - 0x38]
push eax
lea ecx, [edi + 0x1008]
call fcn.10034ed0
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x50]
mov dword [edi + 0x1058], eax
mov dword [edi + 0x105c], 0
call fcn.1001ce70
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 0xffffffff
call fcn.1001ce70
mov dword [esi + 0x18], 1
lea ecx, [edi + 0x18]
mov dword [esi + 4], 0xff
mov dword [esi + 0xc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [esi + 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x1c], esi
call fcn.1002d8a0
push 0x1009c02c
lea ecx, [ebp - 0x38]
lea esi, [edi + 0x1060]
call fcn.10066970
push str.chams_history_blend
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x65
call fcn.1001cec0
push 0x1009a7a0
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x66
call fcn.1001cec0
mov byte [ebp - 4], 0x67
lea eax, [ebp - 0x50]
push eax
lea ecx, [edi + 0x1098]
call fcn.10034ed0
mov byte [edi + 0x10c9], 0
lea eax, [ebp - 0x38]
mov dword [edi + 0x1118], 0
lea ecx, [edi + 0x1100]
mov dword [edi + 0x1070], 8
mov dword [edi + 0x1074], 8
mov dword [edi + 0x10d4], 0x41200000
mov dword [edi + 0x10d8], 0x42c80000
mov dword [edi + 0x10d0], 0x42c80000
mov dword [edi + 0x10e4], 0
push eax
mov dword [edi + 0x10dc], 0x3f800000
call fcn.10066900
lea ecx, [ebp - 0x88]
call fcn.1001ce70
lea ecx, [ebp - 0x50]
call fcn.1001ce70
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 0xffffffff
call fcn.1003aeb0
mov dword [esi + 0x18], 1
lea ecx, [edi + 0x18]
mov dword [esi + 4], 0xff
mov dword [esi + 0xc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [esi + 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x1c], esi
call fcn.1002d8a0
push str.visible
lea ecx, [ebp - 0x478]
call fcn.1001cec0
push str.invisible
lea ecx, [ebp - 0x460]
mov dword [ebp - 4], 0x68
call fcn.1001cec0
lea ecx, [ebp - 0x478]
mov dword [ebp - 4], 0x69
push ecx
lea eax, [ebp - 0x448]
push eax
push ecx
lea ecx, [ebp - 0x94]
call fcn.10066680
push 0x1009c9f8
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x6a
call fcn.1001cec0
push str.chams_friendly
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x6b
call fcn.1001cec0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x6d
push eax
lea ecx, [edi + 0x1154]
call fcn.10034ed0
lea eax, [ebp - 0x50]
mov byte [edi + 0x1185], 1
push eax
lea ecx, [edi + 0x118c]
call fcn.10034ed0
xor eax, eax
mov ecx, 0xf
cmp byte [edi + 0x1185], al
cmovne eax, ecx
mov dword [edi + 0x11c0], eax
add eax, 0x14
mov esi, dword [ebp - 0x94]
mov dword [edi + 0x112c], eax
mov dword [edi + 0x1130], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x20], eax
cmp esi, eax
je 0x1004b2b3
lea eax, [edi + 0x11a4]
mov dword [ebp - 0x1c], eax
mov edi, eax
push esi
mov ecx, edi
call fcn.1003ab90
add esi, 0x18
cmp esi, dword [ebp - 0x20]
jne 0x1004b2a0
mov edi, dword [ebp - 0x6c]
lea ecx, [ebp - 0x80]
call fcn.1001c470
lea ecx, [ebp - 0x50]
call fcn.1001ce70
lea ecx, [ebp - 0x38]
call fcn.1001ce70
lea ecx, [ebp - 0x94]
call fcn.1003afc0
push fcn.1001ce70
push 2
push 0x18
lea eax, [ebp - 0x478]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.1008dfa8
mov dword [edi + 0x1134], 1
lea eax, [edi + 0x111c]
mov dword [edi + 0x1120], 0xff
lea ecx, [edi + 0x18]
mov dword [ebp - 0x1c], eax
mov dword [edi + 0x1128], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x1138], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.1002d8a0
push str.chams_friendly_vis
lea ecx, [ebp - 0x38]
lea esi, [edi + 0x11c4]
call fcn.1001cec0
push str.color_visible
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x6e
call fcn.1001cec0
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x6f
push eax
lea ecx, [edi + 0x1234]
mov dword [ebp - 0x18], 0xff00c8ff
call fcn.10034ed0
lea eax, [ebp - 0x38]
push eax
lea ecx, [edi + 0x11fc]
call fcn.10034ed0
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x50]
mov dword [edi + 0x124c], eax
mov dword [edi + 0x1250], 0
call fcn.1001ce70
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 0xffffffff
call fcn.1001ce70
mov dword [esi + 0x18], 1
lea ecx, [edi + 0x18]
mov dword [esi + 4], 0xff
mov dword [esi + 0xc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [esi + 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x1c], esi
call fcn.1002d8a0
push str.chams_friendly_invis
lea ecx, [ebp - 0x38]
lea esi, [edi + 0x1254]
call fcn.1001cec0
push str.color_invisible
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x70
call fcn.1001cec0
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x71
push eax
lea ecx, [edi + 0x12c4]
mov dword [ebp - 0x18], 0xff0032ff
call fcn.10034ed0
lea eax, [ebp - 0x38]
push eax
lea ecx, [edi + 0x128c]
call fcn.10034ed0
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x50]
mov dword [edi + 0x12dc], eax
mov dword [edi + 0x12e0], 0
call fcn.1001ce70
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 0xffffffff
call fcn.1001ce70
mov dword [esi + 0x18], 1
lea ecx, [edi + 0x18]
mov dword [esi + 4], 0xff
mov dword [esi + 0xc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [esi + 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x1c], esi
call fcn.1002d8a0
push 0x1009c02c
lea ecx, [ebp - 0x38]
lea esi, [edi + 0x12e4]
call fcn.10066970
push str.chams_friendly_blend
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x72
call fcn.1001cec0
push 0x1009a7a0
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x73
call fcn.1001cec0
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x74
push eax
lea ecx, [edi + 0x131c]
call fcn.10034ed0
mov byte [edi + 0x134d], 0
lea eax, [ebp - 0x38]
mov dword [edi + 0x139c], 0
lea ecx, [edi + 0x1384]
mov dword [edi + 0x12f4], 8
mov dword [edi + 0x12f8], 8
mov dword [edi + 0x1358], 0x41200000
mov dword [edi + 0x135c], 0x42c80000
mov dword [edi + 0x1354], 0x42c80000
mov dword [edi + 0x1368], 0
push eax
mov dword [edi + 0x1360], 0x3f800000
call fcn.10066900
lea ecx, [ebp - 0x88]
call fcn.1001ce70
lea ecx, [ebp - 0x50]
call fcn.1001ce70
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 0xffffffff
call fcn.1003aeb0
mov dword [esi + 0x18], 1
lea ecx, [edi + 0x18]
mov dword [esi + 4], 0xff
mov dword [esi + 0xc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [esi + 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x1c], esi
call fcn.1002d8a0
push str.chams_local
lea ecx, [ebp - 0x38]
lea esi, [edi + 0x13a0]
call fcn.1001cec0
push 0x1009ca70
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x75
call fcn.1001cec0
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x76
push eax
lea ecx, [edi + 0x13d8]
call fcn.10034ed0
lea eax, [ebp - 0x50]
mov byte [edi + 0x1409], 1
push eax
lea ecx, [edi + 0x1410]
call fcn.10034ed0
lea ecx, [ebp - 0x50]
mov byte [edi + 0x140c], 0
call fcn.1001ce70
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 0xffffffff
call fcn.1001ce70
mov dword [esi + 0x18], 1
lea ecx, [edi + 0x18]
mov dword [esi + 4], 0xff
mov dword [esi + 0xc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [esi + 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x1c], esi
call fcn.1002d8a0
push str.chams_local_col
lea ecx, [ebp - 0x38]
lea esi, [edi + 0x1428]
call fcn.1001cec0
push str.color
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x77
call fcn.1001cec0
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x78
push eax
lea ecx, [edi + 0x1498]
mov dword [ebp - 0x18], 0xffc8ffff
call fcn.10034ed0
lea eax, [ebp - 0x38]
push eax
lea ecx, [edi + 0x1460]
call fcn.10034ed0
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x50]
mov dword [edi + 0x14b0], eax
mov dword [edi + 0x14b4], 0
call fcn.1001ce70
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 0xffffffff
call fcn.1001ce70
mov dword [esi + 0x18], 1
lea ecx, [edi + 0x18]
mov dword [esi + 4], 0xff
mov dword [esi + 0xc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [esi + 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x1c], esi
call fcn.1002d8a0
push 0x1009c02c
lea ecx, [ebp - 0x38]
lea esi, [edi + 0x14b8]
call fcn.10066970
push str.chams_local_blend
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x79
call fcn.1001cec0
push 0x1009a7a0
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x7a
call fcn.1001cec0
mov byte [ebp - 4], 0x7b
lea eax, [ebp - 0x50]
push eax
lea ecx, [edi + 0x14f0]
call fcn.10034ed0
mov byte [edi + 0x1521], 0
lea eax, [ebp - 0x38]
mov dword [edi + 0x1570], 0
lea ecx, [edi + 0x1558]
mov dword [edi + 0x14c8], 8
mov dword [edi + 0x14cc], 8
mov dword [edi + 0x152c], 0x41200000
mov dword [edi + 0x1530], 0x42c80000
mov dword [edi + 0x1528], 0x42c80000
mov dword [edi + 0x153c], 0
push eax
mov dword [edi + 0x1534], 0x3f800000
call fcn.10066900
lea ecx, [ebp - 0x88]
call fcn.1001ce70
lea ecx, [ebp - 0x50]
call fcn.1001ce70
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 0xffffffff
call fcn.1003aeb0
mov dword [esi + 0x18], 1
lea ecx, [edi + 0x18]
mov dword [esi + 4], 0xff
mov dword [esi + 0xc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [esi + 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x1c], esi
call fcn.1002d8a0
push str.chams_local_scope
lea ecx, [ebp - 0x38]
lea esi, [edi + 0x1574]
call fcn.1001cec0
push str.blend_when_scoped
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0x7c
call fcn.1001cec0
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x7d
push eax
lea ecx, [edi + 0x15ac]
call fcn.10034ed0
lea eax, [ebp - 0x50]
mov byte [edi + 0x15dd], 1
push eax
lea ecx, [edi + 0x15e4]
call fcn.10034ed0
lea ecx, [ebp - 0x50]
mov byte [edi + 0x15e0], 0
call fcn.1001ce70
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 0xffffffff
call fcn.1001ce70
mov dword [esi + 0x18], 1
lea ecx, [edi + 0x18]
mov dword [esi + 4], 0xff
mov dword [esi + 0xc], 0xaf
mov eax, dword [edi + 0x2c]
mov dword [esi + 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x1c], esi
call fcn.1002d8a0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1008df5c
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret