Function at 0x1002d890
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100b4419
mov eax, dword fs:[0]
push eax
sub esp, 0x70
mov eax, dword [0x100fd040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x14]
mov ecx, 0x1010bb3f
mov esi, dword [ebp + 8]
mov dword [ebp - 0x2c], eax
call fcn.100b18e0
push dword [ebp + 0x10]
movss xmm0, dword [ebp + 0xc]
xor edx, edx
push ecx
mov ecx, dword [0x1010292c]
movss dword [esp], xmm0
push esi
call dword [0x101028c8]
mov eax, 0x1b4e81b5
mov byte [0x100fdf18], 0
imul esi
mov byte [0x100fe510], 0
sar edx, 4
mov eax, edx
mov byte [0x100fe54c], 0
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x96
sub esi, eax
mov eax, dword [0x100fe5d8]
imul ecx, esi, 0x64
imul edx, esi, 0x68
add ecx, dword [eax + 0xec]
add edx, dword [eax + 0xf0]
mov eax, dword [0x10107e14]
mov dword [ebp - 0x30], ecx
mov dword [0x100fdf14], ecx
mov dword [ebp - 0x6c], edx
mov ecx, dword [eax]
test ecx, ecx
je 0x1002e469
call fcn.1009f980
test al, al
je 0x1002e469
mov eax, dword [0x100fdf14]
test eax, eax
je 0x1002e469
cmp dword [eax + 4], 0
je 0x1002e469
movss xmm0, dword [eax + 0xc]
movss dword [0x10107e08], xmm0
movss xmm0, dword [eax + 0x10]
movss dword [0x10107e0c], xmm0
movss xmm0, dword [eax + 0x14]
movss dword [0x10107e10], xmm0
call fcn.10025fa0
mov ecx, dword [0x100fdf14]
xorps xmm1, xmm1
mov eax, dword [0x100fdf2c]
movss dword [0x100fdf20], xmm0
movss xmm0, dword [ecx + 0x24]
mov eax, dword [eax + 0x4cb0]
ucomiss xmm0, xmm1
mov dword [0x100fdf84], eax
lahf
test ah, 0x44
jp 0x1002d9db
movss xmm0, dword [ecx + 0x28]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x1002d9db
xor al, al
jmp 0x1002d9dd
mov al, 1
mov ecx, dword [0x100fdef0]
mov byte [0x100fe544], al
mov eax, dword [ecx]
mov eax, dword [eax + 0x138]
call eax
test eax, eax
je 0x1002da40
mov ecx, dword [0x100fdef0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x138]
call eax
push 0
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x28]
mov dword [ebp - 0x24], ecx
mov ecx, eax
call dword [ebp - 0x24]
mov ecx, dword [0x100fdef0]
fstp dword [0x10108c50]
mov eax, dword [ecx]
mov eax, dword [eax + 0x138]
call eax
push 1
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x28]
mov dword [ebp - 0x24], ecx
mov ecx, eax
call dword [ebp - 0x24]
fstp dword [0x10108c54]
call fcn.10015b20
mov eax, dword [0x1010770c]
cmp byte [eax], 0
je 0x1002da5b
mov eax, dword [0x100fdf14]
or dword [eax + 0x30], 0x400000
mov esi, dword [0x100fdf2c]
mov edi, dword [esi + 0x174]
test edi, edi
je 0x1002da95
mov ecx, dword [0x100fe540]
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
mov eax, dword [esi + 0x4cb0]
add eax, dword [esi + 0x4cac]
test edi, edi
push eax
push dword [esi + 0x4cb4]
setg al
movzx eax, al
push eax
push edi
call edx
mov eax, dword [0x10107e14]
mov ecx, dword [eax]
call fcn.1000f100
mov ecx, dword [0x100fdf14]
mov eax, dword [eax]
and eax, 1
mov dword [0x100fe548], eax
jne 0x1002daca
mov eax, dword [0x10107734]
cmp byte [eax], 0
je 0x1002daca
mov eax, dword [ecx + 0x30]
test al, 2
je 0x1002daca
and eax, 0xfffffffd
mov dword [ecx + 0x30], eax
xor dl, dl
mov byte [0x100fe511], 0
test dword [ecx + 0x30], 0x20000
je 0x1002daf3
mov eax, dword [0x10107784]
cmp byte [eax], dl
je 0x1002daf3
call fcn.100190e0
mov byte [0x100fe511], 1
mov dl, 1
cmp byte [0x100fe544], 0
jne 0x1002db0f
mov eax, dword [0x101077ac]
cmp byte [eax], 0
je 0x1002db17
mov byte [0x100fe54c], 1
jmp 0x1002db17
mov byte [ebp - 0x21], 0
test dl, dl
je 0x1002db1b
mov byte [ebp - 0x21], 1
cmp byte [0x100fe54c], 0
jne 0x1002db31
cmp byte [0x100fdf40], 0
je 0x1002dc31
mov eax, dword [0x10107e14]
mov ecx, dword [eax]
call fcn.1000f100
test byte [eax], 1
je 0x1002dc31
mov eax, dword [0x100fdf14]
test byte [eax + 0x30], 2
jne 0x1002dc31
mov eax, dword [0x10107e14]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov ecx, dword [eax]
call fcn.1000f260
lea edx, [ebp - 0x20]
mov ecx, eax
call fcn.100246d0
mov eax, dword [0x10107e14]
mov ecx, dword [eax]
call fcn.1000f260
movss xmm1, dword [eax + 4]
movss xmm0, dword [eax]
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm1
call fcn.1000a050
movss xmm1, dword [0x10107e0c]
lea edx, [ebp - 0x7c]
subss xmm1, dword [ebp - 0x1c]
lea ecx, [ebp - 0x20]
movss dword [ebp - 0x14], xmm0
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x7c], 0
movss dword [ebp - 0x1c], xmm1
call fcn.10023fc0
movss xmm1, dword [ebp - 0x14]
comiss xmm1, dword [0x100f4cc8]
movss xmm2, dword [ebp - 0x7c]
movaps xmm0, xmm1
xorps xmm0, xmmword [0x100f50a0]
movss xmm3, dword [ebp - 0x78]
mulss xmm2, xmm0
mulss xmm3, xmm0
jbe 0x1002dc18
mov eax, dword [0x100fdf14]
movss dword [eax + 0x24], xmm2
movss dword [eax + 0x28], xmm3
jmp 0x1002dc31
cmp byte [ebp - 0x21], 0
je 0x1002dc31
mov eax, dword [0x100fdf14]
mov dword [eax + 0x28], 0
mov dword [eax + 0x24], 0
call fcn.10018870
call fcn.10015f10
call fcn.10012900
mov eax, dword [0x10107e14]
mov ecx, dword [eax]
call fcn.1000acf0
movd xmm0, dword [eax]
mov eax, dword [0x100fdeec]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [eax + 0x20]
mov eax, dword [0x10107e14]
movss dword [ebp - 0x24], xmm0
mov ecx, dword [eax]
call fcn.1000f3c0
mov ecx, eax
call fcn.100116c0
mov dword [0x100fdf24], eax
test eax, eax
je 0x1002dd3e
mov ecx, dword [eax]
mov edx, dword [ecx + 0x75c]
mov ecx, eax
call edx
mov ecx, dword [0x100fdf24]
call fcn.1009ee30
mov edx, dword [0x100fdedc]
mov dword [0x100fdf1c], eax
mov eax, dword [0x10107e14]
mov edi, dword [eax]
mov eax, dword fs:[0x2c]
mov ecx, dword [eax + edx*4]
mov eax, dword [0x10102878]
cmp eax, dword [ecx + 4]
jg 0x1002e486
jmp 0x1002dccd
mov edx, dword [0x100fdedc]
mov eax, dword [0x10102888]
movss xmm0, dword [ebp - 0x24]
comiss xmm0, dword [edi + eax]
jb 0x1002dd2c
mov eax, dword fs:[0x2c]
mov edi, dword [0x100fdf24]
mov ecx, dword [eax + edx*4]
mov eax, dword [0x10102928]
cmp eax, dword [ecx + 4]
jg 0x1002e570
jmp 0x1002dd04
movss xmm0, dword [ebp - 0x24]
mov eax, dword [0x10102880]
comiss xmm0, dword [edi + eax]
jb 0x1002dd2c
mov ecx, dword [0x100fdf24]
call fcn.1002ad60
cmp dword [eax], 0
jg 0x1002dd28
call fcn.1002b1d0
test al, al
je 0x1002dd2c
mov al, 1
jmp 0x1002dd2e
xor al, al
mov ecx, dword [0x100fdf24]
mov byte [0x100fdf18], al
call fcn.1000a8b0
cmp byte [0x100fdf18], 0
jne 0x1002dd59
call fcn.1002b150
test al, al
jne 0x1002dd59
mov eax, dword [0x100fdf14]
and dword [eax + 0x30], 0xfffffffe
call fcn.1000c980
cmp dword [0x100fdf24], 0
je 0x1002ddcf
call fcn.1002b150
test al, al
je 0x1002ddcf
mov eax, dword fs:[0x2c]
mov ecx, dword [0x100fdedc]
mov edi, dword [0x100fdf24]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x10102934]
cmp eax, dword [ecx + 4]
jg 0x1002e65a
mov eax, dword [0x10102918]
cmp byte [eax + edi], 0
je 0x1002ddaf
mov eax, dword [0x100fdf14]
test dword [eax + 0x30], 0x801
je 0x1002ddd4
call fcn.1002b000
xorps xmm1, xmm1
movss xmm0, dword [eax]
comiss xmm0, xmm1
jbe 0x1002ddcf
call fcn.1002b000
movss xmm0, dword [ebp - 0x24]
comiss xmm0, dword [eax]
jae 0x1002ddfa
mov eax, dword [0x100fdf14]
mov ecx, dword [eax + 0x30]
mov al, byte [0x100fdf18]
test cl, 1
je 0x1002dde5
test al, al
jne 0x1002ddfa
test ecx, 0x800
je 0x1002de01
test al, al
je 0x1002de01
call fcn.1002b1d0
test al, al
je 0x1002de01
mov byte [0x100fe510], 1
mov eax, dword [0x101070a4]
mov edi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
push dword [eax]
call edi
mov ecx, dword [0x10107054]
mov word [ebp - 0x22], ax
push dword [ecx]
call edi
mov ecx, dword [0x1010707c]
mov si, ax
push dword [ecx]
call edi
test si, si
je 0x1002de3d
mov ecx, 2
mov dword [0x100fd09c], ecx
jmp 0x1002de43
mov ecx, dword [0x100fd09c]
test ax, ax
je 0x1002de53
mov ecx, 3
mov dword [0x100fd09c], ecx
cmp word [ebp - 0x22], 0
je 0x1002de65
mov ecx, 1
mov dword [0x100fd09c], ecx
mov eax, dword [0x1010702c]
movss xmm2, dword [0x100f4d04]
movss xmm1, dword [0x100f4d18]
cmp byte [eax], 0
je 0x1002df33
cmp byte [0x100fe510], 0
jne 0x1002df33
mov edx, dword [0x100fdf14]
mov dword [edx + 0xc], 0x42b20000
sub ecx, 1
je 0x1002deca
sub ecx, 1
je 0x1002debb
sub ecx, 1
jne 0x1002ded8
movss xmm0, dword [edx + 0x10]
addss xmm0, dword [0x100f4d08]
jmp 0x1002ded3
movss xmm0, dword [edx + 0x10]
subss xmm0, dword [0x100f4d08]
jmp 0x1002ded3
movss xmm0, dword [edx + 0x10]
addss xmm0, xmm1
movss dword [edx + 0x10], xmm0
mov ecx, dword [0x100fdf84]
test ecx, ecx
je 0x1002df10
movss xmm0, dword [0x100f4de8]
call fcn.10022370
mov edx, dword [0x100fdf14]
mov ecx, dword [0x100fdf84]
movss xmm1, dword [0x100f4d18]
movss xmm2, dword [0x100f4d04]
movss dword [edx + 0x10], xmm0
cmp byte [0x100fe511], 0
je 0x1002df25
mov eax, 0xe
cmp ecx, eax
setge cl
jmp 0x1002df3b
mov eax, dword [0x101070cc]
mov eax, dword [eax]
cmp ecx, eax
setge cl
jmp 0x1002df3b
mov edx, dword [0x100fdf14]
mov cl, 1
movss xmm0, dword [edx + 0xc]
lea eax, [edx + 0xc]
comiss xmm0, xmm2
mov byte [0x100fd098], cl
jbe 0x1002df5d
nop
subss xmm0, xmm1
comiss xmm0, xmm2
movss dword [eax], xmm0
ja 0x1002df50
movss xmm2, dword [0x100f4ddc]
comiss xmm2, xmm0
jbe 0x1002df7d
nop word [eax + eax]
addss xmm0, xmm1
comiss xmm2, xmm0
movss dword [eax], xmm0
ja 0x1002df70
movss xmm0, dword [eax + 4]
movss xmm3, dword [0x100f4de8]
comiss xmm3, xmm0
movss xmm2, dword [0x100f4d28]
jbe 0x1002dfae
nop word [eax + eax]
addss xmm0, xmm2
comiss xmm3, xmm0
movss dword [eax + 4], xmm0
ja 0x1002dfa0
comiss xmm0, xmm1
jbe 0x1002dfc1
subss xmm0, xmm2
comiss xmm0, xmm1
movss dword [eax + 4], xmm0
ja 0x1002dfb3
mov dword [eax + 8], 0
test cl, cl
je 0x1002e130
push eax
mov ecx, 0x10107dfc
call fcn.1000a430
mov eax, dword [0x100fdf14]
lea ecx, [ebp - 0x14]
push 3
mov dword [ebp - 0x28], eax
call dword [sym.imp.MSVCP140D.dll_public:_void___thiscall_std::_Lockit::constructor_int_]
mov ecx, dword [0x10106f50]
test ecx, ecx
je 0x1002e01d
mov eax, dword [ecx + 4]
mov dword [ecx + 4], 0
test eax, eax
je 0x1002e01d
nop word [eax + eax]
mov dword [eax], 0
mov eax, dword [eax + 4]
test eax, eax
jne 0x1002e010
lea ecx, [ebp - 0x14]
call dword [sym.imp.MSVCP140D.dll_public:_void___thiscall_std::_Lockit::destructor_void_]
mov edx, dword [0x10106f60]
mov esi, dword [0x10106f5c]
mov ecx, dword [0x10106f58]
lea eax, [edx + esi]
test al, 3
jne 0x1002e061
lea eax, [edx + 4]
shr eax, 2
cmp ecx, eax
ja 0x1002e061
push ecx
call fcn.10030270
mov edx, dword [0x10106f60]
mov esi, dword [0x10106f5c]
mov ecx, dword [0x10106f58]
lea eax, [ecx*4 - 1]
and eax, esi
lea esi, [ecx - 1]
add edx, eax
mov dword [0x10106f5c], eax
mov eax, dword [0x10106f54]
mov edi, edx
shr edi, 2
and esi, edi
mov dword [ebp - 0x24], edx
cmp dword [eax + esi*4], 0
jne 0x1002e0aa
push 0x10
call fcn.100af2c0
mov ecx, dword [0x10106f54]
add esp, 4
mov edx, dword [ebp - 0x24]
mov dword [ecx + esi*4], eax
mov ecx, dword [0x10106f58]
mov eax, dword [0x10106f54]
dec ecx
and edx, 3
and ecx, edi
mov ecx, dword [eax + ecx*4]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 4]
mov dword [ecx + edx*4], eax
mov eax, dword [0x10106f60]
add eax, 1
mov dword [0x10106f60], eax
jne 0x1002e116
push str.back___called_on_empty_deque
push 0x100b7564
push 0
push 0x458
push 0x100b7bf8
push 2
call dword [sym.imp.ucrtbased.dll__CrtDbgReport]
add esp, 0x18
cmp eax, 1
jne 0x1002e0f2
int3
push 0
push 0x458
push str.C:Program_FilesMicrosoft_Visual_Studio2022CommunityVCToolsMSVC14.40.33807includedeque
push 0x100b7694
push str._back___called_on_empty_deque_
call dword [sym.imp.ucrtbased.dll__invalid_parameter]
mov eax, dword [0x10106f60]
add esp, 0x14
cmp eax, 0x40
jbe 0x1002e15d
nop dword [eax + eax]
call fcn.10017200
cmp dword [0x10106f60], 0x40
ja 0x1002e120
jmp 0x1002e15d
mov eax, dword [0x100fdf2c]
mov edi, dword [eax + 0x9c]
test edi, edi
je 0x1002e15d
mov eax, dword [edi]
mov ecx, edi
mov esi, dword [edi + 0x2c]
mov dword [edi + 0x2c], 0
push 0
mov eax, dword [eax + 0xc0]
call eax
dec dword [edi + 0x18]
mov dword [edi + 0x2c], esi
mov eax, dword [0x10107e14]
mov ecx, dword [eax]
test ecx, ecx
je 0x1002e202
call fcn.1009f980
test al, al
je 0x1002e202
mov ecx, dword [0x10107e14]
mov eax, dword [ecx]
mov esi, dword [eax + 0x3874]
test esi, esi
je 0x1002e202
cmp dword [0x100fdf84], 0
jne 0x1002e202
mov eax, dword [0x100fdf14]
movss xmm0, dword [eax + 0xc]
movss dword [0x10107e18], xmm0
movss xmm0, dword [eax + 0x10]
movss dword [0x10107e1c], xmm0
movss xmm0, dword [eax + 0x14]
mov eax, dword [0x100fdeec]
movss dword [0x10107e20], xmm0
mov edx, dword [esi + 0x70]
cmp edx, dword [eax + 4]
jne 0x1002e1d9
lea eax, [edx - 1]
mov dword [esi + 0x70], eax
mov ecx, dword [0x10107e14]
mov ecx, dword [ecx]
call dword [0x100fe4b4]
mov eax, dword [0x10107e14]
push 0x10107e30
mov ecx, dword [eax]
call fcn.1009f1f0
movss xmm0, dword [esi + 0x80]
movss dword [0x10107e90], xmm0
movq xmm0, qword [0x10107e08]
sub esp, 0xc
mov eax, dword [0x10107e10]
mov ecx, esp
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
call fcn.10018a50
mov ecx, dword [ebp - 0x2c]
add esp, 0xc
mov al, byte [0x100fd098]
mov byte [ecx], al
mov eax, dword [0x100fe540]
mov ecx, dword [0x100fe53c]
mov byte [eax + 0xc], 0
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
mov eax, dword [0x10107e14]
push dword [eax]
call edx
mov ecx, dword [0x100fe538]
push 0
mov eax, dword [ecx]
call dword [eax + 4]
or ecx, 0xffffffff
call fcn.10015660
mov eax, dword fs:[0x2c]
mov ecx, dword [0x100fdedc]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x10107eb0]
cmp eax, dword [ecx + 4]
jg 0x1002e744
mov eax, dword [0x10107eb8]
movss xmm0, dword [0x10107eac]
mov eax, dword [eax]
mov dword [eax], 0
mov eax, dword [0x100fdeec]
movss dword [eax + 0x10], xmm0
movss xmm0, dword [0x10107ea8]
movss dword [eax + 0x14], xmm0
mov eax, dword [0x101078d8]
mov edi, dword [0x101078d4]
mov dword [ebp - 0x70], eax
cmp edi, eax
je 0x1002e3c3
lea esi, [edi + 0xc]
mov dword [ebp - 0x24], esi
mov ecx, dword [edi]
call fcn.1000ea20
mov ecx, dword [esi - 8]
mov dword [eax], ecx
mov ecx, dword [esi - 4]
mov dword [eax + 4], ecx
mov ecx, dword [esi]
mov dword [eax + 8], ecx
lea eax, [esi + 4]
mov ecx, dword [edi]
push eax
call fcn.1000b380
mov ecx, dword [edi]
lea eax, [esi + 0x10]
push eax
call fcn.1000b300
mov ecx, dword [edi]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov ecx, eax
mov edx, dword [eax]
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esi + 0x1c]
mov dword [eax], ecx
mov ecx, dword [esi + 0x20]
mov dword [eax + 4], ecx
mov ecx, dword [esi + 0x24]
mov dword [eax + 8], ecx
mov ecx, dword [edi]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov ecx, eax
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
mov ecx, dword [esi + 0x28]
mov dword [eax], ecx
mov ecx, dword [esi + 0x2c]
mov dword [eax + 4], ecx
mov ecx, dword [esi + 0x30]
mov dword [eax + 8], ecx
lea eax, [esi + 0x34]
mov ecx, dword [edi]
push eax
call fcn.1009f3c0
mov ecx, dword [edi]
lea eax, [esi + 0x94]
push eax
call fcn.1009f600
mov esi, dword [edi]
mov ecx, esi
call fcn.1000b280
mov ecx, esi
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x2c], eax
call fcn.1000b280
mov dword [ebp - 0x28], eax
cmp dword [eax + 8], 0xfffffffe
jne 0x1002e38a
push 0x12c
push str.D:New_folder_valve_sdkmiscUtlMemory.hpp
push str._IsReadOnly__
call dword [sym.imp.ucrtbased.dll__wassert]
add esp, 0xc
mov eax, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x24]
lea eax, [eax + eax*2]
shl eax, 4
push eax
lea eax, [esi + 0x36c]
push eax
mov eax, dword [ebp - 0x28]
push dword [eax]
call sub.VCRUNTIME140D.dll_memcpy
add edi, 0x1b78
add esi, 0x1b78
add esp, 0xc
mov dword [ebp - 0x24], esi
cmp edi, dword [ebp - 0x70]
jne 0x1002e2c7
mov esi, dword [ebp - 0x6c]
mov edi, 0x18
mov ecx, dword [ebp - 0x30]
lea edx, [esi + 0x49]
mov eax, dword [ecx + 4]
mov dword [esi + 4], eax
mov eax, dword [ecx + 8]
mov dword [esi + 8], eax
mov eax, dword [ecx + 0xc]
mov dword [esi + 0xc], eax
mov eax, dword [ecx + 0x10]
mov dword [esi + 0x10], eax
mov eax, dword [ecx + 0x14]
mov dword [esi + 0x14], eax
mov eax, dword [ecx + 0x18]
mov dword [esi + 0x18], eax
mov eax, dword [ecx + 0x1c]
mov dword [esi + 0x1c], eax
mov eax, dword [ecx + 0x20]
mov dword [esi + 0x20], eax
mov eax, dword [ecx + 0x24]
mov dword [esi + 0x24], eax
mov eax, dword [ecx + 0x28]
mov dword [esi + 0x28], eax
mov eax, dword [ecx + 0x2c]
mov dword [esi + 0x2c], eax
mov eax, dword [ecx + 0x30]
mov dword [esi + 0x30], eax
mov al, byte [ecx + 0x34]
mov byte [esi + 0x34], al
mov eax, dword [ecx + 0x38]
mov dword [esi + 0x38], eax
mov eax, dword [ecx + 0x3c]
mov dword [esi + 0x3c], eax
mov eax, dword [ecx + 0x40]
mov dword [esi + 0x40], eax
movzx eax, word [ecx + 0x44]
mov word [esi + 0x44], ax
movzx eax, word [ecx + 0x46]
mov word [esi + 0x46], ax
mov al, byte [ecx + 0x48]
mov byte [esi + 0x48], al
mov eax, ecx
sub eax, esi
mov esi, eax
nop dword [eax]
mov al, byte [edx + esi]
lea edx, [edx + 1]
mov byte [edx - 1], al
sub edi, 1
jne 0x1002e450
call fcn.100296f0
mov esi, dword [ebp - 0x6c]
mov dword [esi + 0x64], eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100af2b0
mov esp, ebp
pop ebp
ret 0x10
push 0x10102878
call fcn.100afd50
add esp, 4
cmp dword [0x10102878], 0xffffffff
jne 0x1002dcc7
mov dword [ebp - 4], 0
call fcn.1000d150
push 0xe
xorps xmm0, xmm0
mov dword [ebp - 0x68], 0
push str.m_flNextAttack
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x54], 0
mov esi, eax
mov dword [ebp - 0x50], 0
movups xmmword [ebp - 0x64], xmm0
call fcn.10007680
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x4c]
push 0x16
xorps xmm0, xmm0
mov dword [ebp - 0x4c], 0
push str.DT_BaseCombatCharacter
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
call fcn.10007680
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 2
push eax
lea eax, [ebp - 0x4c]
mov ecx, esi
push eax
call fcn.100ad130
lea ecx, [ebp - 0x4c]
mov dword [0x10102888], eax
call fcn.10005df0
mov eax, dword [ebp - 0x4c]
push 8
push eax
mov dword [ebp - 0x4c], 0
call fcn.100afb80
add esp, 8
lea ecx, [ebp - 0x68]
call fcn.10005df0
mov eax, dword [ebp - 0x68]
push 8
push eax
mov dword [ebp - 0x68], 0
call fcn.100afb80
push 0x10102878
mov dword [ebp - 4], 0xffffffff
call fcn.100afd00
add esp, 0xc
jmp 0x1002dcc7
push 0x10102928
call fcn.100afd50
add esp, 4
cmp dword [0x10102928], 0xffffffff
jne 0x1002dcff
mov dword [ebp - 4], 3
call fcn.1000d150
push 0x15
xorps xmm0, xmm0
mov dword [ebp - 0x4c], 0
push str.m_flNextPrimaryAttack
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x38], 0
mov esi, eax
mov dword [ebp - 0x34], 0
movups xmmword [ebp - 0x48], xmm0
call fcn.10007680
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x68]
push 0x13
xorps xmm0, xmm0
mov dword [ebp - 0x68], 0
push str.DT_BaseCombatWeapon
movups xmmword [ebp - 0x64], xmm0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
call fcn.10007680
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x68]
mov ecx, esi
push eax
call fcn.100ad130
lea ecx, [ebp - 0x68]
mov dword [0x10102880], eax
call fcn.10005df0
mov eax, dword [ebp - 0x68]
push 8
push eax
mov dword [ebp - 0x68], 0
call fcn.100afb80
add esp, 8
lea ecx, [ebp - 0x4c]
call fcn.10005df0
mov eax, dword [ebp - 0x4c]
push 8
push eax
mov dword [ebp - 0x4c], 0
call fcn.100afb80
push 0x10102928
mov dword [ebp - 4], 0xffffffff
call fcn.100afd00
add esp, 0xc
jmp 0x1002dcff
push 0x10102934
call fcn.100afd50
add esp, 4
cmp dword [0x10102934], 0xffffffff
jne 0x1002dd96
mov dword [ebp - 4], 6
call fcn.1000d150
push 0xc
xorps xmm0, xmm0
mov dword [ebp - 0x4c], 0
push str.m_bPinPulled
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x38], 0
mov esi, eax
mov dword [ebp - 0x34], 0
movups xmmword [ebp - 0x48], xmm0
call fcn.10007680
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x68]
push 0x10
xorps xmm0, xmm0
mov dword [ebp - 0x68], 0
push str.DT_BaseCSGrenade
movups xmmword [ebp - 0x64], xmm0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
call fcn.10007680
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0x68]
mov ecx, esi
push eax
call fcn.100ad130
lea ecx, [ebp - 0x68]
mov dword [0x10102918], eax
call fcn.10005df0
mov eax, dword [ebp - 0x68]
push 8
push eax
mov dword [ebp - 0x68], 0
call fcn.100afb80
add esp, 8
lea ecx, [ebp - 0x4c]
call fcn.10005df0
mov eax, dword [ebp - 0x4c]
push 8
push eax
mov dword [ebp - 0x4c], 0
call fcn.100afb80
push 0x10102934
mov dword [ebp - 4], 0xffffffff
call fcn.100afd00
add esp, 0xc
jmp 0x1002dd96
push 0x10107eb0
call fcn.100afd50
add esp, 4
cmp dword [0x10107eb0], 0xffffffff
jne 0x1002e27f
mov edx, str.89_35_________F3_0F_10_48
mov ecx, 0x100e7218
call fcn.10025c40
add eax, 2
push 0x10107eb0
mov dword [0x10107eb8], eax
call fcn.100afd00
add esp, 4
jmp 0x1002e27f