Function at 0x10085bee
Capabilities:
Encrypt data using speck
Hash data using fnv

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100ac8b0
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x168
mov eax, dword [0x100c0040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebx + 8]
lea eax, [ebp - 0xb4]
push 0x30
push 0
push eax
mov dword [ebp - 0x1c], esi
call sub.VCRUNTIME140.dll_memset
xorps xmm0, xmm0
mov dword [ebp - 0xb8], 0
add esp, 0xc
movups xmmword [ebp - 0xd8], xmm0
movups xmmword [ebp - 0xc8], xmm0
test esi, esi
je 0x100869f6
cmp dword [0x100c02a8], 0
je 0x100869f6
mov eax, dword [0x10105458]
mov edi, dword [esi + 8]
test al, 1
jne 0x10085b3d
or eax, 1
mov dword [0x10105458], eax
mov edx, 0x990704d7
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xf8]
call fcn.10043b70
push 0xda7d68cb
mov edx, eax
mov ecx, 0x1010545c
call fcn.10043fe0
add esp, 4
push 0x100adee0
call fcn.100a425c
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x1010545c]
call eax
mov esi, eax
mov dword [ebp - 0xdc], esi
test edi, edi
je 0x10085bc3
test esi, esi
je 0x10085bc3
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x10085bc3
nop
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x10085ba9
mov edi, 0x811c9dc5
xor ecx, ecx
nop
inc ecx
cmp byte [ecx + esi], 0
jne 0x10085b80
xor edx, edx
test ecx, ecx
je 0x10085ba9
nop dword [eax]
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x10085b90
cmp edi, 0x11ab48ff
je 0x10085bbe
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x10085bc3
mov esi, dword [ebp - 0xdc]
jmp 0x10085b60
mov ecx, dword [ebp - 0x18]
jmp 0x10085bc5
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
movss xmm5, dword [0x100b603c]
dec eax
cmp eax, 6
ja case.0x10085bd7.2
jmp dword [eax*4 + 0x10086c28]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 4
mov edx, eax
jmp 0x10085c52
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
add esp, 4
mov edx, eax
jmp 0x10085c52
movss xmm4, dword [ecx + 0xc]
movss xmm3, dword [0x100b6210]
movaps xmm0, xmm4
movss xmm2, dword [0x100b6204]
andps xmm3, xmm4
xorps xmm0, xmm3
movaps xmm1, xmm4
cmpltss xmm0, xmm2
andps xmm2, xmm0
orps xmm2, xmm3
addss xmm1, xmm2
subss xmm1, xmm2
movaps xmm0, xmm1
subss xmm0, xmm4
cmpnless xmm0, xmm3
andps xmm0, xmm5
subss xmm1, xmm0
cvttss2si edx, xmm1
jmp 0x10085c52
xor edx, edx
jmp 0x10085c52
mov edx, dword [ecx + 0xc]
mov ecx, dword [0x100fff88]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
call eax
mov esi, dword [0x100fff88]
mov edi, eax
mov ecx, dword [esi]
mov edx, dword [ecx + 0x30]
mov ecx, esi
call edx
cmp edi, eax
jne 0x100869f6
mov edi, dword [ebp - 0x1c]
mov eax, dword [0x10105458]
mov edi, dword [edi + 8]
test al, 1
jne 0x10085ccf
or eax, 1
mov dword [0x10105458], eax
mov edx, 0x990704d7
mov dword [ebp - 4], 1
lea ecx, [ebp - 0xf8]
call fcn.10043b70
push 0xda7d68cb
mov edx, eax
mov ecx, 0x1010545c
call fcn.10043fe0
add esp, 4
push 0x100adee0
call fcn.100a425c
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x1010545c]
call eax
mov esi, eax
mov dword [ebp - 0xdc], esi
test edi, edi
je 0x10085d53
test esi, esi
je 0x10085d53
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x10085d53
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x10085d39
mov edi, 0x811c9dc5
xor ecx, ecx
nop
inc ecx
cmp byte [ecx + esi], 0
jne 0x10085d10
xor edx, edx
test ecx, ecx
je 0x10085d39
nop dword [eax]
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x10085d20
cmp edi, 0xfd0c5087
je 0x10085d4e
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x10085d53
mov esi, dword [ebp - 0xdc]
jmp 0x10085cf0
mov ecx, dword [ebp - 0x18]
jmp 0x10085d55
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
dec eax
cmp eax, 6
ja case.0x10085d5f.4
jmp dword [eax*4 + 0x10086c44]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atof]
fstp dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x18]
add esp, 4
jmp 0x10085db9
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtof]
fstp dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x18]
add esp, 4
jmp 0x10085db9
movss xmm0, dword [ecx + 0xc]
jmp 0x10085db9
movd xmm0, dword [ecx + 0xc]
cvtdq2ps xmm0, xmm0
jmp 0x10085db9
mov ecx, dword [ecx + 4]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
call fcn.100a51a0
cvtsd2ss xmm0, xmm0
jmp 0x10085db9
xorps xmm0, xmm0
mov eax, dword [ebp - 0x1c]
movss dword [ebp - 0xe4], xmm0
mov edi, dword [eax + 8]
mov eax, dword [0x10105458]
test al, 1
jne 0x10085e17
or eax, 1
mov dword [0x10105458], eax
mov edx, 0x990704d7
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xf8]
call fcn.10043b70
push 0xda7d68cb
mov edx, eax
mov ecx, 0x1010545c
call fcn.10043fe0
add esp, 4
push 0x100adee0
call fcn.100a425c
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x1010545c]
call eax
mov esi, eax
mov dword [ebp - 0xdc], esi
test edi, edi
je 0x10085e96
test esi, esi
je 0x10085e96
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x10085e96
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x10085e7c
mov edi, 0x811c9dc5
xor ecx, ecx
inc ecx
cmp byte [ecx + esi], 0
jne 0x10085e56
xor edx, edx
test ecx, ecx
je 0x10085e7c
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x10085e63
cmp edi, 0xfc0c4ef4
je 0x10085e91
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x10085e96
mov esi, dword [ebp - 0xdc]
jmp 0x10085e38
mov ecx, dword [ebp - 0x18]
jmp 0x10085e98
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
dec eax
cmp eax, 6
ja case.0x10085ea2.4
jmp dword [eax*4 + 0x10086c60]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atof]
fstp dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x18]
add esp, 4
jmp 0x10085efc
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtof]
fstp dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x18]
add esp, 4
jmp 0x10085efc
movss xmm0, dword [ecx + 0xc]
jmp 0x10085efc
movd xmm0, dword [ecx + 0xc]
cvtdq2ps xmm0, xmm0
jmp 0x10085efc
mov ecx, dword [ecx + 4]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
call fcn.100a51a0
cvtsd2ss xmm0, xmm0
jmp 0x10085efc
xorps xmm0, xmm0
mov eax, dword [ebp - 0x1c]
movss dword [ebp - 0xe8], xmm0
mov edi, dword [eax + 8]
mov eax, dword [0x10105458]
test al, 1
jne 0x10085f5a
or eax, 1
mov dword [0x10105458], eax
mov edx, 0x990704d7
mov dword [ebp - 4], 3
lea ecx, [ebp - 0xf8]
call fcn.10043b70
push 0xda7d68cb
mov edx, eax
mov ecx, 0x1010545c
call fcn.10043fe0
add esp, 4
push 0x100adee0
call fcn.100a425c
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x1010545c]
call eax
mov esi, eax
mov dword [ebp - 0xdc], esi
test edi, edi
je 0x10085fe3
test esi, esi
je 0x10085fe3
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x10085fe3
nop dword [eax + eax]
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x10085fc9
mov edi, 0x811c9dc5
xor ecx, ecx
nop
inc ecx
cmp byte [ecx + esi], 0
jne 0x10085fa0
xor edx, edx
test ecx, ecx
je 0x10085fc9
nop dword [eax]
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x10085fb0
cmp edi, 0xff0c53ad
je 0x10085fde
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x10085fe3
mov esi, dword [ebp - 0xdc]
jmp 0x10085f80
mov ecx, dword [ebp - 0x18]
jmp 0x10085fe5
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
dec eax
cmp eax, 6
ja case.0x10085fef.4
jmp dword [eax*4 + 0x10086c7c]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atof]
fstp dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x18]
add esp, 4
jmp 0x10086049
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtof]
fstp dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x18]
add esp, 4
jmp 0x10086049
movss xmm0, dword [ecx + 0xc]
jmp 0x10086049
movd xmm0, dword [ecx + 0xc]
cvtdq2ps xmm0, xmm0
jmp 0x10086049
mov ecx, dword [ecx + 4]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
call fcn.100a51a0
cvtsd2ss xmm0, xmm0
jmp 0x10086049
xorps xmm0, xmm0
mov eax, dword [0x101001dc]
mov esi, dword [0x100c02a8]
add eax, 0xffffffc2
xor eax, 0x53935b1f
movss dword [ebp - 0xe0], xmm0
cmp byte [0x100c8280], 0
movd xmm0, dword [eax + esi]
mov eax, dword [0x100fffe4]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [eax + 0x20]
movss dword [ebp - 0x18], xmm0
je 0x100862c5
mov dword [ebp - 0xf8], 0
lea ecx, [ebp - 0xf8]
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xf0], 0
mov eax, dword [esi]
push ecx
mov ecx, esi
mov eax, dword [eax + 0x28c]
call eax
cmp dword [esi + 0x39e1], 0
je 0x10086216
mov eax, dword [0x10100128]
mov edi, dword [esi + eax]
test edi, edi
je 0x10086216
mov ecx, dword [edi + 0x60]
test ecx, ecx
je 0x10086216
cmp byte [edi + 0x109], 0
xorps xmm1, xmm1
jne 0x10086135
mov eax, dword [0x101001e4]
add eax, 0xffffffc0
xor eax, 0x53935b21
movss xmm0, dword [eax + ecx]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x10086135
mov eax, dword [0x10100258]
add eax, 0xffffffa3
xor eax, 0x53935b3e
mov eax, dword [eax + ecx]
mov ecx, dword [0x100fff8c]
push ecx
mov edx, dword [ecx]
mov esi, dword [edx + 0x10]
mov edx, esp
mov dword [edx], eax
call esi
test eax, eax
jne 0x10086216
xorps xmm1, xmm1
mov ecx, dword [0x1010024c]
mov eax, dword [edi + 0x60]
add ecx, 0xffffffa6
xor ecx, 0x53935b3b
mov eax, dword [ecx + eax]
test eax, eax
je 0x10086216
movss xmm3, dword [eax + 0x1ac]
movss xmm2, dword [ebp - 0xf0]
cvtps2pd xmm3, xmm3
cvtps2pd xmm0, xmm2
addsd xmm3, qword [0x100b6080]
comisd xmm0, xmm3
movsd qword [ebp - 0x20], xmm3
jbe 0x10086216
subsd xmm0, xmm3
xorps xmm4, xmm4
cvtpd2ps xmm0, xmm0
subss xmm0, dword [0x100b60dc]
cvtps2pd xmm0, xmm0
mulsd xmm0, qword [0x100b6060]
cvtpd2ps xmm0, xmm0
comiss xmm0, xmm1
jb 0x100861da
sub esp, 8
mov dword [esp + 4], 0x3f800000
movss dword [esp], xmm0
call dword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_fminf]
movss xmm2, dword [ebp - 0xf0]
add esp, 8
movsd xmm3, qword [ebp - 0x20]
fstp dword [ebp - 0xdc]
movss xmm4, dword [ebp - 0xdc]
movaps xmm1, xmm4
mulss xmm1, xmm4
cvtps2pd xmm2, xmm2
movaps xmm0, xmm1
addss xmm1, xmm1
mulss xmm0, dword [0x100b60c0]
subsd xmm3, xmm2
mulss xmm1, xmm4
subss xmm0, xmm1
cvtps2pd xmm0, xmm0
mulsd xmm0, xmm3
addsd xmm0, xmm2
cvtpd2ps xmm0, xmm0
movss dword [ebp - 0xf0], xmm0
mov ecx, dword [0x101001dc]
mov eax, dword [0x100c02a8]
add ecx, 0xffffffc2
movss xmm5, dword [ebp - 0xe4]
xor ecx, 0x53935b1f
movss xmm4, dword [ebp - 0xe8]
movss xmm3, dword [ebp - 0xe0]
movq xmm0, qword [ebp - 0xf8]
mov ecx, dword [ecx + eax]
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x104], eax
mov eax, dword [0x10100c58]
movss dword [ebp - 0x118], xmm5
movss dword [ebp - 0x114], xmm4
movss dword [ebp - 0x110], xmm3
movq qword [ebp - 0x10c], xmm0
mov dword [ebp - 0x100], ecx
mov word [ebp - 0xfc], 0
cmp eax, dword [0x10100c5c]
je 0x100862b3
movups xmm0, xmmword [ebp - 0x118]
movups xmmword [eax], xmm0
movups xmm0, xmmword [ebp - 0x108]
movups xmmword [eax + 0x10], xmm0
add dword [0x10100c58], 0x20
jmp 0x100862d5
lea ecx, [ebp - 0x118]
push ecx
push eax
mov ecx, 0x10100c54
call fcn.100880b0
movss xmm5, dword [ebp - 0xe4]
movss xmm4, dword [ebp - 0xe8]
mov eax, dword [0x10100c50]
test eax, eax
je 0x100869f6
mov ecx, dword [0x10100c4c]
xor esi, esi
movss xmm2, dword [0x100b620c]
lea edx, [eax + ecx]
cmp ecx, edx
je 0x100869f6
mov eax, dword [0x10100c48]
mov edi, dword [0x10100c44]
dec eax
movss xmm3, dword [ebp - 0x18]
movss xmm6, dword [0x100b603c]
mov dword [ebp - 0xdc], eax
nop dword [eax]
and eax, ecx
mov eax, dword [edi + eax*4]
cmp byte [eax + 0x20], 0
jne 0x10086350
movss xmm1, dword [eax + 0xc]
movaps xmm0, xmm3
addss xmm1, dword [eax + 8]
subss xmm0, xmm1
call fcn.10035520
comiss xmm0, xmm6
ja 0x10086350
comiss xmm2, xmm0
jbe 0x10086350
movaps xmm2, xmm0
mov esi, eax
mov eax, dword [ebp - 0xdc]
inc ecx
cmp ecx, edx
jne 0x10086320
movss xmm3, dword [ebp - 0xe0]
mov dword [ebp - 0x1c], esi
test esi, esi
je 0x100869f6
mov byte [esi + 0x20], 1
mov ecx, dword [0x101001dc]
mov eax, dword [0x100c02a8]
add ecx, 0xffffffc2
xor ecx, 0x53935b1f
mov dword [ebp - 0x7c], esi
movss dword [ebp - 0x74], xmm5
movss dword [ebp - 0x70], xmm4
movss dword [ebp - 0x6c], xmm3
mov eax, dword [ecx + eax]
mov ecx, dword [0x10100c68]
mov dword [ebp - 0x78], eax
mov eax, dword [0x10100c70]
inc eax
cmp ecx, eax
ja 0x100863bf
push ecx
mov ecx, 0x10100c60
call fcn.10087d50
mov ecx, dword [0x10100c68]
lea eax, [ecx - 1]
mov edi, eax
and edi, dword [0x10100c6c]
mov dword [0x10100c6c], edi
cmove edi, ecx
mov ecx, dword [0x10100c64]
dec edi
and eax, edi
mov dword [ebp - 0xdc], eax
cmp dword [ecx + eax*4], 0
jne 0x10086409
push 0x14
call fcn.100a3e12
mov ecx, dword [0x10100c64]
add esp, 4
mov edx, dword [ebp - 0xdc]
mov dword [ecx + edx*4], eax
mov eax, edx
mov ecx, dword [0x10100c64]
mov ecx, dword [ecx + eax*4]
movups xmm0, xmmword [ebp - 0x7c]
mov eax, dword [ebp - 0x6c]
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], eax
mov eax, dword [0x10100c70]
inc eax
mov dword [0x10100c6c], edi
mov dword [0x10100c70], eax
cmp eax, 0x80
jbe 0x10086451
mov dword [ebp - 0x1c], esi
add eax, 0xffffffff
mov dword [0x10100c70], eax
je 0x10086447
cmp eax, 0x80
ja 0x10086434
jmp 0x10086451
mov dword [0x10100c6c], 0
cmp dword [0x100d0b2c], 1
je 0x100869f6
mov esi, dword [esi]
mov dword [ebp - 0xdc], esi
test esi, esi
je 0x100869f6
mov eax, dword [0x101001b4]
add eax, 0xffffffcc
xor eax, 0x53935b15
cmp dword [eax + esi], 0
jne 0x100869f6
mov eax, dword [esi + 8]
lea ecx, [esi + 8]
mov eax, dword [eax + 0x28]
call eax
imul eax, eax, 0xac0
lea edi, [eax + 0x100d1934]
test edi, edi
je 0x100869f6
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 4]
cmp dword [eax + 0x3c4], 0
je 0x100869f6
push 0x44
lea eax, [ebp - 0x68]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x68]
call fcn.10020c20
mov ecx, dword [0x1010024c]
add ecx, 0xffffffa6
xor ecx, 0x53935b3b
mov eax, dword [ecx + esi]
mov dword [ebp - 0x68], eax
mov eax, dword [ecx + esi + 0xc]
mov ecx, esi
mov dword [ebp - 0x64], eax
mov eax, dword [0x10100178]
add eax, 0xffffffdb
xor eax, 0x53935b06
movss xmm0, dword [eax + esi]
movss dword [ebp - 0x60], xmm0
movss xmm0, dword [eax + esi + 4]
movss dword [ebp - 0x5c], xmm0
movss xmm0, dword [eax + esi + 8]
mov eax, dword [0x10100184]
add eax, 0xffffffd8
movss dword [ebp - 0x58], xmm0
xor eax, 0x53935b09
movss xmm0, dword [eax + esi]
movss dword [ebp - 0x48], xmm0
movss xmm0, dword [eax + esi + 4]
movss dword [ebp - 0x44], xmm0
movss xmm0, dword [eax + esi + 8]
mov eax, dword [0x10100188]
add eax, 0xffffffd7
movss dword [ebp - 0x40], xmm0
xor eax, 0x53935b0a
movss xmm0, dword [eax + esi]
movss dword [ebp - 0x3c], xmm0
movss xmm0, dword [eax + esi + 4]
movss dword [ebp - 0x38], xmm0
movss xmm0, dword [eax + esi + 8]
movss dword [ebp - 0x34], xmm0
mov eax, dword [esi]
mov eax, dword [eax + 0x28]
call eax
mov ecx, esi
movss xmm0, dword [eax]
movss dword [ebp - 0x54], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x50], xmm0
movss xmm0, dword [eax + 8]
movss dword [ebp - 0x4c], xmm0
mov eax, dword [esi]
mov eax, dword [eax + 0x2c]
call eax
movss xmm0, dword [eax]
movss dword [ebp - 0x30], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x2c], xmm0
movss xmm0, dword [eax + 8]
mov eax, dword [ebp - 0x1c]
movss dword [ebp - 0x28], xmm0
mov edx, dword [eax + 4]
mov dword [ebp - 0x18], edx
cmp byte [edx + 0x3c0], 0
je 0x10086608
cmp byte [edx + 0x10], 0
jne 0x10086608
mov esi, dword [ebp - 0x18]
mov edx, dword [0x1010024c]
add edx, 0xffffffa6
xor edx, 0x53935b3b
mov ecx, dword [esi]
mov eax, dword [edx + ecx + 0xc]
lea eax, [eax + eax*2]
shl eax, 4
push eax
push dword [esi + 0x3c4]
push dword [edx + ecx]
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, esi
mov ecx, dword [0x10100178]
lea esi, [edx + 0x3d0]
mov eax, dword [esi]
add ecx, 0xffffffdb
xor ecx, 0x53935b06
add ecx, dword [edx]
mov dword [ecx], eax
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov eax, dword [esi + 8]
mov dword [ecx + 8], eax
mov ecx, dword [0x10100184]
mov eax, dword [edx + 0x44]
add ecx, 0xffffffd8
xor ecx, 0x53935b09
add ecx, dword [edx]
mov dword [ecx], eax
mov eax, dword [edx + 0x48]
mov dword [ecx + 4], eax
mov eax, dword [edx + 0x4c]
mov dword [ecx + 8], eax
mov ecx, dword [0x10100188]
mov eax, dword [edx + 0x50]
add ecx, 0xffffffd7
xor ecx, 0x53935b0a
add ecx, dword [edx]
mov dword [ecx], eax
mov eax, dword [edx + 0x54]
mov dword [ecx + 4], eax
mov eax, dword [edx + 0x58]
mov dword [ecx + 8], eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [0x1010009c]
lea eax, [ecx + 0x68]
mov ecx, dword [ecx]
push eax
call edx
mov eax, dword [0x101000a0]
push esi
mov esi, dword [ebp - 0x18]
mov ecx, dword [esi]
call eax
mov ecx, dword [ebp - 0x1c]
movss xmm6, dword [ebp - 0xe4]
movss xmm5, dword [ebp - 0xe8]
movss xmm4, dword [ebp - 0xe0]
movss xmm7, dword [ecx + 0x14]
subss xmm5, dword [ecx + 0x18]
subss xmm4, dword [ecx + 0x1c]
subss xmm6, xmm7
movaps xmm0, xmm5
mulss xmm0, xmm5
movaps xmm1, xmm6
mulss xmm1, xmm6
addss xmm0, xmm1
movaps xmm1, xmm4
mulss xmm1, xmm4
addss xmm0, xmm1
call fcn.1001fe00
addss xmm0, dword [0x100b5f4c]
mov dword [ebp - 0x154], 0
divss xmm6, xmm0
divss xmm5, xmm0
divss xmm4, xmm0
movss xmm0, dword [0x100b61f8]
movaps xmm3, xmm6
movaps xmm2, xmm5
mulss xmm6, xmm6
mulss xmm5, xmm5
movaps xmm1, xmm4
mulss xmm4, xmm4
addss xmm6, xmm5
mulss xmm3, xmm0
mulss xmm2, xmm0
mulss xmm1, xmm0
addss xmm6, xmm4
movss dword [ebp - 0x160], xmm3
movss dword [ebp - 0x15c], xmm2
movss dword [ebp - 0x158], xmm1
mulss xmm6, dword [0x100b6208]
ucomiss xmm6, dword [0x100b5f3c]
lahf
mov byte [ebp - 0x12b], 1
test ah, 0x44
jp 0x1008676b
mov byte [ebp - 0x12b], 0
movss xmm0, dword [ecx + 0x18]
lea edx, [ebp - 0xd8]
mov esi, dword [ebp - 0xdc]
movss dword [ebp - 0x16c], xmm0
movss xmm0, dword [ecx + 0x1c]
mov ecx, dword [0x100fffa4]
push edx
mov dword [ebp - 0x130], 0
lea edx, [ebp - 0x170]
mov byte [ebp - 0x12c], 1
movss dword [ebp - 0x170], xmm7
movss dword [ebp - 0x168], xmm0
mov dword [ebp - 0x164], 0
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x140], 0
mov eax, dword [ecx]
push esi
push 0x4600400b
push edx
mov eax, dword [eax + 0xc]
call eax
push 3
push dword [0x100d02dc]
push dword [0x100d02d8]
call fcn.100a3bf0
cmp eax, dword [0x100d02dc]
je 0x10086a16
mov ecx, dword [ebp - 0x8c]
test ecx, ecx
je 0x1008684e
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
test al, al
je 0x1008684e
cmp dword [ebp - 0x8c], esi
je 0x10086939
mov esi, dword [0x100b1640]
lea ecx, [ebp - 0x80]
push 0x1a
xorps xmm0, xmm0
mov dword [ebp - 0x70], 0
push str.missed_shot_due_to_spread_n
movups xmmword [ebp - 0x80], xmm0
mov dword [ebp - 0x6c], 0
call fcn.10027130
lea eax, [ebp - 0x18]
mov dword [ebp - 4], 4
push eax
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x18], 0x40a00000
push eax
lea edx, [ebp - 0x80]
mov dword [ebp - 0x1c], esi
lea ecx, [ebp - 0xec]
call fcn.1002b5c0
add esp, 8
push eax
mov byte [ebp - 4], 5
call fcn.1002b070
mov byte [ebp - 4], 4
mov esi, dword [ebp - 0xe8]
test esi, esi
je 0x100868db
or edi, 0xffffffff
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x100868db
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lock xadd dword [esi + 8], edi
dec edi
jne 0x100868db
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
sub esp, 0x18
lea eax, [ebp - 0x80]
mov ecx, esp
push eax
call fcn.1002b1e0
push 0x100c02a8
call fcn.10032b40
mov dword [ebp - 4], 0xffffffff
add esp, 0x1c
mov ecx, dword [ebp - 0x6c]
cmp ecx, 0xf
jbe 0x10086933
mov edx, dword [ebp - 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10086929
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10086929
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100a4271
add esp, 8
mov esi, dword [ebp - 0xdc]
mov ecx, dword [0x1010024c]
mov eax, dword [ebp - 0x68]
add ecx, 0xffffffa6
xor ecx, 0x53935b3b
mov dword [ecx + esi], eax
mov eax, dword [ebp - 0x64]
mov dword [ecx + esi + 0xc], eax
lea ecx, [ebp - 0x30]
mov eax, dword [0x10100178]
movss xmm0, dword [ebp - 0x60]
add eax, 0xffffffdb
xor eax, 0x53935b06
push ecx
mov ecx, esi
movss dword [eax + esi], xmm0
movss xmm0, dword [ebp - 0x5c]
movss dword [eax + esi + 4], xmm0
movss xmm0, dword [ebp - 0x58]
movss dword [eax + esi + 8], xmm0
mov eax, dword [0x10100184]
movss xmm0, dword [ebp - 0x48]
add eax, 0xffffffd8
xor eax, 0x53935b09
movss dword [eax + esi], xmm0
movss xmm0, dword [ebp - 0x44]
movss dword [eax + esi + 4], xmm0
movss xmm0, dword [ebp - 0x40]
movss dword [eax + esi + 8], xmm0
mov eax, dword [0x10100188]
movss xmm0, dword [ebp - 0x3c]
add eax, 0xffffffd7
xor eax, 0x53935b0a
movss dword [eax + esi], xmm0
movss xmm0, dword [ebp - 0x38]
movss dword [eax + esi + 4], xmm0
movss xmm0, dword [ebp - 0x34]
movss dword [eax + esi + 8], xmm0
mov eax, dword [0x1010009c]
call eax
mov eax, dword [0x101000a0]
lea ecx, [ebp - 0x60]
push ecx
mov ecx, esi
call eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100a3df6
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4
cmp dword [ebp - 0x8c], esi
jne 0x10086939
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 4]
mov eax, dword [eax + 0x424]
cmp eax, 0xc
jne 0x10086a44
inc dword [edi + 0x4a8]
inc dword [edi + 0x480]
jmp 0x10086939
cmp eax, 0x1b
jne 0x10086a5a
inc dword [edi + 0x514]
inc dword [edi + 0x480]
jmp 0x10086939
cmp eax, 0x1c
jne 0x10086a70
inc dword [edi + 0x518]
inc dword [edi + 0x480]
jmp 0x10086939
cmp eax, 0x1f
jne 0x10086a86
inc dword [edi + 0x528]
inc dword [edi + 0x480]
jmp 0x10086939
cmp eax, 0x19
jne 0x10086a9c
inc dword [edi + 0x55c]
inc dword [edi + 0x480]
jmp 0x10086939
cmp eax, 7
jne 0x10086ab2
inc dword [edi + 0x4b4]
inc dword [edi + 0x480]
jmp 0x10086939
cmp eax, 9
jne 0x10086ac8
inc dword [edi + 0x4b8]
inc dword [edi + 0x480]
jmp 0x10086939
cmp eax, 6
jne 0x10086ade
inc dword [edi + 0x4ec]
inc dword [edi + 0x480]
jmp 0x10086939
cmp eax, 0xe
jne 0x10086af4
inc dword [edi + 0x568]
inc dword [edi + 0x480]
jmp 0x10086939
cmp eax, 0x28
jne 0x10086b0a
inc dword [edi + 0x56c]
inc dword [edi + 0x480]
jmp 0x10086939
cmp eax, 0x27
jne 0x10086b20
inc dword [edi + 0x564]
inc dword [edi + 0x480]
jmp 0x10086939
cmp eax, 4
jne 0x10086b36
inc dword [edi + 0x570]
inc dword [edi + 0x480]
jmp 0x10086939
cmp eax, 2
jne 0x10086b4c
inc dword [edi + 0x510]
inc dword [edi + 0x480]
jmp 0x10086939
cmp eax, 0x23
jne 0x10086b62
inc dword [edi + 0x4e4]
inc dword [edi + 0x480]
jmp 0x10086939
cmp eax, 0xb
jne 0x10086b78
inc dword [edi + 0x4fc]
inc dword [edi + 0x480]
jmp 0x10086939
cmp eax, 0x17
jne 0x10086b8e
inc dword [edi + 0x54c]
inc dword [edi + 0x480]
jmp 0x10086939
cmp eax, 5
jne 0x10086ba4
inc dword [edi + 0x4dc]
inc dword [edi + 0x480]
jmp 0x10086939
cmp eax, 0x18
jne 0x10086bba
inc dword [edi + 0x500]
inc dword [edi + 0x480]
jmp 0x10086939
cmp eax, 0x1a
jne 0x10086bd0
inc dword [edi + 0x504]
inc dword [edi + 0x480]
jmp 0x10086939
cmp eax, 0x26
jne 0x10086be6
inc dword [edi + 0x538]
inc dword [edi + 0x480]
jmp 0x10086939
cmp eax, 0xd
jne 0x10086bfc
inc dword [edi + 0x52c]
inc dword [edi + 0x480]
jmp 0x10086939
cmp eax, 0x1e
jne 0x10086c12
inc dword [edi + 0x550]
inc dword [edi + 0x480]
jmp 0x10086939
cmp eax, 0x20
jne 0x10086c1d
inc dword [edi + 0x554]
inc dword [edi + 0x480]
jmp 0x10086939