Function at 0x100b8680
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1018e485
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
mov eax, dword [0x102412a0]
push esi
mov esi, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], esi
push edi
mov edi, ecx
mov dword [ebp - 0x20], edi
test esi, esi
je 0x100b895c
test eax, eax
je 0x100b895c
mov eax, dword [esi + 8]
lea ecx, [esi + 8]
mov eax, dword [eax + 0x24]
call eax
cmp eax, dword [0x102fd994]
jne 0x100b86f9
cmp byte [0x103029dc], 0
je 0x100b86f9
push 0x103029d0
mov ecx, edi
call fcn.100b89d0
mov eax, edi
pop edi
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
cmp esi, dword [ebp - 0x14]
jne 0x100b871c
push 0x10302820
mov ecx, edi
call fcn.100b89d0
mov eax, edi
pop edi
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 8]
lea ecx, [esi + 8]
mov eax, dword [eax + 0x24]
call eax
xor esi, esi
mov ecx, eax
and ecx, 0x3f
xor edx, edx
bts esi, ecx
cmp ecx, 0x20
cmovae edx, esi
xor esi, edx
cmp ecx, 0x40
cmovae edx, esi
shr eax, 6
and esi, dword [eax*8 + 0x102412b0]
and edx, dword [eax*8 + 0x102412b4]
or esi, edx
je 0x100b877d
cmp byte [0x1030295c], 0
je 0x100b877d
push 0x10302950
mov ecx, edi
call fcn.100b89d0
mov eax, edi
pop edi
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x10243ad0]
mov eax, dword fs:[0x2c]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x102fda40]
mov dword [ebp - 0x10], eax
cmp ecx, dword [eax + 4]
jle 0x100b87ea
push 0x102fda40
call fcn.10189be4
mov ecx, dword [0x102fda40]
add esp, 4
cmp ecx, 0xffffffff
jne 0x100b87ea
push str.m_iTeamNum
push str.DT_BaseEntity
mov dword [ebp - 4], 0
call fcn.1006e7b0
push 0x102fda40
mov dword [0x102fda3c], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10189b93
mov ecx, dword [0x102fda40]
add esp, 4
mov eax, dword [0x102fda3c]
mov esi, dword [ebp - 0x18]
mov eax, dword [eax + esi]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x10]
cmp ecx, dword [eax + 4]
jle 0x100b8850
push 0x102fda40
call fcn.10189be4
mov ecx, dword [0x102fda40]
add esp, 4
cmp ecx, 0xffffffff
jne 0x100b8850
push str.m_iTeamNum
push str.DT_BaseEntity
mov dword [ebp - 4], 1
call fcn.1006e7b0
push 0x102fda40
mov dword [0x102fda3c], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10189b93
mov ecx, dword [0x102fda40]
add esp, 4
mov eax, dword [0x102fda3c]
mov edx, dword [ebp - 0x14]
mov esi, dword [ebp - 0x1c]
cmp esi, dword [eax + edx]
mov esi, dword [ebp - 0x18]
je 0x100b8881
push 0x103027c8
mov ecx, edi
call fcn.100b89d0
mov eax, edi
pop edi
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x10]
cmp ecx, dword [eax + 4]
jle 0x100b88d9
push 0x102fda40
call fcn.10189be4
mov ecx, dword [0x102fda40]
add esp, 4
cmp ecx, 0xffffffff
jne 0x100b88d9
push str.m_iTeamNum
push str.DT_BaseEntity
mov dword [ebp - 4], 2
call fcn.1006e7b0
push 0x102fda40
mov dword [0x102fda3c], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10189b93
mov ecx, dword [0x102fda40]
add esp, 4
mov eax, dword [0x102fda3c]
mov esi, dword [eax + esi]
mov eax, dword [ebp - 0x10]
cmp ecx, dword [eax + 4]
jle 0x100b8931
push 0x102fda40
call fcn.10189be4
add esp, 4
cmp dword [0x102fda40], 0xffffffff
jne 0x100b8931
push str.m_iTeamNum
push str.DT_BaseEntity
mov dword [ebp - 4], 3
call fcn.1006e7b0
push 0x102fda40
mov dword [0x102fda3c], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10189b93
add esp, 4
mov eax, dword [0x102fda3c]
mov ecx, dword [ebp - 0x14]
cmp esi, dword [eax + ecx]
jne 0x100b895c
push 0x103028f8
mov ecx, edi
call fcn.100b89d0
mov eax, edi
pop edi
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
push 0x38
push 0
push edi
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [ebp - 0xc]
add esp, 0xc
mov byte [edi], 0
xorps xmm0, xmm0
mov dword [edi + 4], 0
mov eax, edi
mov dword [edi + 8], 0
mov dword [edi + 0xc], 1
mov dword [edi + 0x10], 0x3f800000
mov dword [edi + 0x14], 0xff000000
mov dword [edi + 0x18], 0xffffffff
mov dword [edi + 0x1c], 0xffffffff
movups xmmword [edi + 0x20], xmm0
mov dword [edi + 0x30], 4
mov dword [edi + 0x34], 0xf
mov dword [edi + 0x20], 0x656e6f4e
mov byte [edi + 0x24], 0
pop edi
pop esi
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret