Function at 0x10084a90
Capabilities:
Encode data using xor
Encrypt data using speck
Hash data using fnv

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100ab323
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x168
mov eax, dword [0x100be040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebx + 8]
lea eax, [ebp - 0xc4]
push 0x30
push 0
push eax
mov dword [ebp - 0x1c], esi
call sub.VCRUNTIME140.dll_memset
xorps xmm0, xmm0
mov dword [ebp - 0xc8], 0
add esp, 0xc
movups xmmword [ebp - 0xe8], xmm0
movups xmmword [ebp - 0xd8], xmm0
test esi, esi
je 0x10085a56
cmp dword [0x100be2a8], 0
je 0x10085a56
mov eax, dword [0x10103a70]
mov edi, dword [esi + 8]
test al, 1
jne 0x10084b6d
or eax, 1
mov dword [0x10103a70], eax
mov edx, 0x990704d7
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x84]
call fcn.10043bb0
push 0xda7d68cb
mov edx, eax
mov ecx, 0x10103a74
call fcn.10044000
add esp, 4
push 0x100ac9a0
call fcn.100a3172
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x10103a74]
call eax
mov esi, eax
mov dword [ebp - 0xec], esi
test edi, edi
je 0x10084bf3
test esi, esi
je 0x10084bf3
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x10084bf3
nop
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x10084bd9
mov edi, 0x811c9dc5
xor ecx, ecx
nop
inc ecx
cmp byte [esi + ecx], 0
jne 0x10084bb0
xor edx, edx
test ecx, ecx
je 0x10084bd9
nop dword [eax]
movsx eax, byte [esi + edx]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x10084bc0
cmp edi, 0x11ab48ff
je 0x10084bee
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x10084bf3
mov esi, dword [ebp - 0xec]
jmp 0x10084b90
mov ecx, dword [ebp - 0x18]
jmp 0x10084bf5
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
movss xmm5, dword [0x100b407c]
dec eax
cmp eax, 6
ja case.0x10084c07.2
jmp dword [eax*4 + 0x10085c88]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 4
mov edx, eax
jmp 0x10084c82
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
add esp, 4
mov edx, eax
jmp 0x10084c82
movss xmm4, dword [ecx + 0xc]
movss xmm3, dword [0x100b4248]
movaps xmm0, xmm4
movss xmm2, dword [0x100b4240]
andps xmm3, xmm4
xorps xmm0, xmm3
movaps xmm1, xmm4
cmpltss xmm0, xmm2
andps xmm2, xmm0
orps xmm2, xmm3
addss xmm1, xmm2
subss xmm1, xmm2
movaps xmm0, xmm1
subss xmm0, xmm4
cmpnless xmm0, xmm3
andps xmm0, xmm5
subss xmm1, xmm0
cvttss2si edx, xmm1
jmp 0x10084c82
xor edx, edx
jmp 0x10084c82
mov edx, dword [ecx + 0xc]
mov ecx, dword [0x100fe580]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
call eax
mov esi, dword [0x100fe580]
mov edi, eax
mov ecx, dword [esi]
mov edx, dword [ecx + 0x30]
mov ecx, esi
call edx
cmp edi, eax
jne 0x10085a56
mov edi, dword [ebp - 0x1c]
mov eax, dword [0x10103a70]
mov edi, dword [edi + 8]
test al, 1
jne 0x10084cff
or eax, 1
mov dword [0x10103a70], eax
mov edx, 0x990704d7
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x84]
call fcn.10043bb0
push 0xda7d68cb
mov edx, eax
mov ecx, 0x10103a74
call fcn.10044000
add esp, 4
push 0x100ac9a0
call fcn.100a3172
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x10103a74]
call eax
mov esi, eax
mov dword [ebp - 0xec], esi
test edi, edi
je 0x10084d83
test esi, esi
je 0x10084d83
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x10084d83
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x10084d69
mov edi, 0x811c9dc5
xor ecx, ecx
nop
inc ecx
cmp byte [ecx + esi], 0
jne 0x10084d40
xor edx, edx
test ecx, ecx
je 0x10084d69
nop dword [eax]
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x10084d50
cmp edi, 0xfd0c5087
je 0x10084d7e
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x10084d83
mov esi, dword [ebp - 0xec]
jmp 0x10084d20
mov ecx, dword [ebp - 0x18]
jmp 0x10084d85
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
dec eax
cmp eax, 6
ja case.0x10084d8f.4
jmp dword [eax*4 + 0x10085ca4]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atof]
fstp dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x18]
add esp, 4
jmp 0x10084de9
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtof]
fstp dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x18]
add esp, 4
jmp 0x10084de9
movss xmm0, dword [ecx + 0xc]
jmp 0x10084de9
movd xmm0, dword [ecx + 0xc]
cvtdq2ps xmm0, xmm0
jmp 0x10084de9
mov ecx, dword [ecx + 4]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
call fcn.100a4210
cvtsd2ss xmm0, xmm0
jmp 0x10084de9
xorps xmm0, xmm0
mov eax, dword [ebp - 0x1c]
movss dword [ebp - 0xf4], xmm0
mov edi, dword [eax + 8]
mov eax, dword [0x10103a70]
test al, 1
jne 0x10084e47
or eax, 1
mov dword [0x10103a70], eax
mov edx, 0x990704d7
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x84]
call fcn.10043bb0
push 0xda7d68cb
mov edx, eax
mov ecx, 0x10103a74
call fcn.10044000
add esp, 4
push 0x100ac9a0
call fcn.100a3172
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x10103a74]
call eax
mov esi, eax
mov dword [ebp - 0xec], esi
test edi, edi
je 0x10084ec6
test esi, esi
je 0x10084ec6
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x10084ec6
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x10084eac
mov edi, 0x811c9dc5
xor ecx, ecx
inc ecx
cmp byte [ecx + esi], 0
jne 0x10084e86
xor edx, edx
test ecx, ecx
je 0x10084eac
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x10084e93
cmp edi, 0xfc0c4ef4
je 0x10084ec1
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x10084ec6
mov esi, dword [ebp - 0xec]
jmp 0x10084e68
mov ecx, dword [ebp - 0x18]
jmp 0x10084ec8
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
dec eax
cmp eax, 6
ja case.0x10084ed2.4
jmp dword [eax*4 + 0x10085cc0]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atof]
fstp dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x18]
add esp, 4
jmp 0x10084f2c
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtof]
fstp dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x18]
add esp, 4
jmp 0x10084f2c
movss xmm0, dword [ecx + 0xc]
jmp 0x10084f2c
movd xmm0, dword [ecx + 0xc]
cvtdq2ps xmm0, xmm0
jmp 0x10084f2c
mov ecx, dword [ecx + 4]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
call fcn.100a4210
cvtsd2ss xmm0, xmm0
jmp 0x10084f2c
xorps xmm0, xmm0
mov eax, dword [ebp - 0x1c]
movss dword [ebp - 0xf8], xmm0
mov edi, dword [eax + 8]
mov eax, dword [0x10103a70]
test al, 1
jne 0x10084f8a
or eax, 1
mov dword [0x10103a70], eax
mov edx, 0x990704d7
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x84]
call fcn.10043bb0
push 0xda7d68cb
mov edx, eax
mov ecx, 0x10103a74
call fcn.10044000
add esp, 4
push 0x100ac9a0
call fcn.100a3172
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x10103a74]
call eax
mov esi, eax
mov dword [ebp - 0xec], esi
test edi, edi
je 0x10085013
test esi, esi
je 0x10085013
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x10085013
nop dword [eax + eax]
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x10084ff9
mov edi, 0x811c9dc5
xor ecx, ecx
nop
inc ecx
cmp byte [ecx + esi], 0
jne 0x10084fd0
xor edx, edx
test ecx, ecx
je 0x10084ff9
nop dword [eax]
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x10084fe0
cmp edi, 0xff0c53ad
je 0x1008500e
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x10085013
mov esi, dword [ebp - 0xec]
jmp 0x10084fb0
mov ecx, dword [ebp - 0x18]
jmp 0x10085015
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
dec eax
cmp eax, 6
ja case.0x1008501f.4
jmp dword [eax*4 + 0x10085cdc]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atof]
fstp dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x18]
add esp, 4
jmp 0x10085079
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtof]
fstp dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x18]
add esp, 4
jmp 0x10085079
movss xmm0, dword [ecx + 0xc]
jmp 0x10085079
movd xmm0, dword [ecx + 0xc]
cvtdq2ps xmm0, xmm0
jmp 0x10085079
mov ecx, dword [ecx + 4]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
call fcn.100a4210
cvtsd2ss xmm0, xmm0
jmp 0x10085079
xorps xmm0, xmm0
mov eax, dword [0x100fe7dc]
mov esi, dword [0x100be2a8]
add eax, 0xffffffc2
xor eax, 0x9f3a95a7
movss dword [ebp - 0xf0], xmm0
cmp byte [0x100c6280], 0
movd xmm0, dword [eax + esi]
mov eax, dword [0x100fe5dc]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [eax + 0x20]
movss dword [ebp - 0x18], xmm0
je 0x100852e3
mov dword [ebp - 0x84], 0
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0
mov eax, dword [esi]
push ecx
mov ecx, esi
mov eax, dword [eax + 0x28c]
call eax
cmp dword [esi + 0x39e1], 0
je 0x10085237
mov eax, dword [0x100fe724]
mov edi, dword [esi + eax]
test edi, edi
je 0x10085237
mov ecx, dword [edi + 0x60]
test ecx, ecx
je 0x10085237
cmp byte [edi + 0x109], 0
xorps xmm1, xmm1
jne 0x1008515f
mov eax, dword [0x100fe7e4]
add eax, 0xffffffc0
xor eax, 0x9f3a95a9
movss xmm0, dword [eax + ecx]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x1008515f
mov eax, dword [0x100fe858]
add eax, 0xffffffa3
xor eax, 0x9f3a95c6
mov eax, dword [eax + ecx]
mov ecx, dword [0x100fe584]
push ecx
mov edx, dword [ecx]
mov esi, dword [edx + 0x10]
mov edx, esp
mov dword [edx], eax
call esi
test eax, eax
jne 0x10085237
xorps xmm1, xmm1
mov ecx, dword [0x100fe84c]
mov eax, dword [edi + 0x60]
add ecx, 0xffffffa6
xor ecx, 0x9f3a95c3
mov eax, dword [ecx + eax]
test eax, eax
je 0x10085237
movss xmm3, dword [eax + 0x1ac]
movss xmm2, dword [ebp - 0x7c]
cvtps2pd xmm3, xmm3
cvtps2pd xmm0, xmm2
addsd xmm3, qword [0x100b40c0]
comisd xmm0, xmm3
movsd qword [ebp - 0x20], xmm3
jbe 0x10085237
subsd xmm0, xmm3
xorps xmm4, xmm4
cvtpd2ps xmm0, xmm0
subss xmm0, dword [0x100b4124]
cvtps2pd xmm0, xmm0
mulsd xmm0, qword [0x100b40a0]
cvtpd2ps xmm0, xmm0
comiss xmm0, xmm1
jb 0x100851fe
sub esp, 8
mov dword [esp + 4], 0x3f800000
movss dword [esp], xmm0
call dword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_fminf]
movss xmm2, dword [ebp - 0x7c]
add esp, 8
movsd xmm3, qword [ebp - 0x20]
fstp dword [ebp - 0xec]
movss xmm4, dword [ebp - 0xec]
movaps xmm1, xmm4
mulss xmm1, xmm4
cvtps2pd xmm2, xmm2
movaps xmm0, xmm1
addss xmm1, xmm1
mulss xmm0, dword [0x100b4108]
subsd xmm3, xmm2
mulss xmm1, xmm4
subss xmm0, xmm1
cvtps2pd xmm0, xmm0
mulsd xmm0, xmm3
addsd xmm0, xmm2
cvtpd2ps xmm0, xmm0
movss dword [ebp - 0x7c], xmm0
mov ecx, dword [0x100fe7dc]
mov eax, dword [0x100be2a8]
add ecx, 0xffffffc2
movss xmm5, dword [ebp - 0xf4]
xor ecx, 0x9f3a95a7
movss xmm4, dword [ebp - 0xf8]
movss xmm3, dword [ebp - 0xf0]
movq xmm0, qword [ebp - 0x84]
mov ecx, dword [ecx + eax]
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x108], eax
mov eax, dword [0x100ff260]
movss dword [ebp - 0x11c], xmm5
movss dword [ebp - 0x118], xmm4
movss dword [ebp - 0x114], xmm3
movq qword [ebp - 0x110], xmm0
mov dword [ebp - 0x104], ecx
mov word [ebp - 0x100], 0
cmp eax, dword [0x100ff264]
je 0x100852d1
movups xmm0, xmmword [ebp - 0x11c]
movups xmmword [eax], xmm0
movups xmm0, xmmword [ebp - 0x10c]
movups xmmword [eax + 0x10], xmm0
add dword [0x100ff260], 0x20
jmp 0x100852f3
lea ecx, [ebp - 0x11c]
push ecx
push eax
mov ecx, 0x100ff25c
call fcn.10087140
movss xmm5, dword [ebp - 0xf4]
movss xmm4, dword [ebp - 0xf8]
mov eax, dword [0x100ff258]
test eax, eax
je 0x10085a56
mov ecx, dword [0x100ff254]
xor esi, esi
movss xmm2, dword [0x100b4244]
lea edx, [eax + ecx]
cmp ecx, edx
je 0x10085a56
mov eax, dword [0x100ff250]
mov edi, dword [0x100ff24c]
dec eax
movss xmm3, dword [ebp - 0x18]
movss xmm6, dword [0x100b407c]
mov dword [ebp - 0xec], eax
nop word [eax + eax]
mov eax, ecx
and eax, dword [ebp - 0xec]
mov eax, dword [edi + eax*4]
cmp byte [eax + 0x20], 0
jne 0x10085376
movss xmm1, dword [eax + 0xc]
movaps xmm0, xmm3
addss xmm1, dword [eax + 8]
subss xmm0, xmm1
call fcn.10035640
comiss xmm0, xmm6
ja 0x10085376
comiss xmm2, xmm0
jbe 0x10085376
movaps xmm2, xmm0
mov esi, eax
inc ecx
cmp ecx, edx
jne 0x10085340
movss xmm3, dword [ebp - 0xf0]
mov dword [ebp - 0x1c], esi
test esi, esi
je 0x10085a56
mov byte [esi + 0x20], 1
mov ecx, dword [0x100fe7dc]
mov eax, dword [0x100be2a8]
add ecx, 0xffffffc2
xor ecx, 0x9f3a95a7
mov dword [ebp - 0x8c], esi
movss dword [ebp - 0x84], xmm5
movss dword [ebp - 0x80], xmm4
movss dword [ebp - 0x7c], xmm3
mov eax, dword [ecx + eax]
mov ecx, dword [0x100ff270]
mov dword [ebp - 0x88], eax
mov eax, dword [0x100ff278]
inc eax
cmp ecx, eax
ja 0x100853e8
push ecx
mov ecx, 0x100ff268
call fcn.10086dc0
mov ecx, dword [0x100ff270]
mov edx, dword [0x100ff26c]
lea edi, [ecx - 1]
and edi, dword [0x100ff274]
lea eax, [ecx - 1]
mov dword [0x100ff274], edi
cmove edi, ecx
dec edi
and eax, edi
mov dword [ebp - 0xec], eax
cmp dword [edx + eax*4], 0
jne 0x10085437
push 0x14
call fcn.100a2d28
mov ecx, dword [0x100ff26c]
add esp, 4
mov edx, dword [ebp - 0xec]
mov dword [ecx + edx*4], eax
mov ecx, dword [0x100ff270]
mov edx, dword [0x100ff26c]
movups xmm0, xmmword [ebp - 0x8c]
lea eax, [ecx - 1]
and eax, edi
mov ecx, dword [edx + eax*4]
mov eax, dword [ebp - 0x7c]
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], eax
mov eax, dword [0x100ff278]
inc eax
mov dword [0x100ff274], edi
mov dword [0x100ff278], eax
cmp eax, 0x80
jbe 0x1008548d
mov dword [ebp - 0x1c], esi
nop word [eax + eax]
add eax, 0xffffffff
mov dword [0x100ff278], eax
je 0x10085483
cmp eax, 0x80
ja 0x10085470
jmp 0x1008548d
mov dword [0x100ff274], 0
cmp dword [0x100ceb2c], 1
je 0x10085a56
mov esi, dword [esi]
mov dword [ebp - 0xec], esi
test esi, esi
je 0x10085a56
mov eax, dword [0x100fe7b4]
add eax, 0xffffffcc
xor eax, 0x9f3a959d
cmp dword [eax + esi], 0
jne 0x10085a56
mov eax, dword [esi + 8]
lea ecx, [esi + 8]
mov eax, dword [eax + 0x28]
call eax
imul eax, eax, 0xad8
lea edi, [eax + 0x100cf914]
test edi, edi
je 0x10085a56
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 4]
cmp dword [eax + 0x3c8], 0
je 0x10085a56
push 0x44
lea eax, [ebp - 0x68]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x68]
call fcn.10020de0
mov ecx, dword [0x100fe84c]
add ecx, 0xffffffa6
xor ecx, 0x9f3a95c3
mov eax, dword [ecx + esi]
mov dword [ebp - 0x68], eax
mov eax, dword [ecx + esi + 0xc]
mov ecx, esi
mov dword [ebp - 0x64], eax
mov eax, dword [0x100fe778]
add eax, 0xffffffdb
xor eax, 0x9f3a958e
movss xmm0, dword [eax + esi]
movss dword [ebp - 0x60], xmm0
movss xmm0, dword [eax + esi + 4]
movss dword [ebp - 0x5c], xmm0
movss xmm0, dword [eax + esi + 8]
mov eax, dword [0x100fe784]
add eax, 0xffffffd8
movss dword [ebp - 0x58], xmm0
xor eax, 0x9f3a9591
movss xmm0, dword [eax + esi]
movss dword [ebp - 0x48], xmm0
movss xmm0, dword [eax + esi + 4]
movss dword [ebp - 0x44], xmm0
movss xmm0, dword [eax + esi + 8]
mov eax, dword [0x100fe788]
add eax, 0xffffffd7
movss dword [ebp - 0x40], xmm0
xor eax, 0x9f3a9592
movss xmm0, dword [eax + esi]
movss dword [ebp - 0x3c], xmm0
movss xmm0, dword [eax + esi + 4]
movss dword [ebp - 0x38], xmm0
movss xmm0, dword [eax + esi + 8]
movss dword [ebp - 0x34], xmm0
mov eax, dword [esi]
mov eax, dword [eax + 0x28]
call eax
mov ecx, esi
movss xmm0, dword [eax]
movss dword [ebp - 0x54], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x50], xmm0
movss xmm0, dword [eax + 8]
movss dword [ebp - 0x4c], xmm0
mov eax, dword [esi]
mov eax, dword [eax + 0x2c]
call eax
movss xmm0, dword [eax]
movss dword [ebp - 0x30], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x2c], xmm0
movss xmm0, dword [eax + 8]
mov eax, dword [ebp - 0x1c]
movss dword [ebp - 0x28], xmm0
mov edx, dword [eax + 4]
mov dword [ebp - 0x18], edx
cmp byte [edx + 0x3c4], 0
je 0x10085644
cmp byte [edx + 0x10], 0
jne 0x10085644
mov esi, dword [ebp - 0x18]
mov edx, dword [0x100fe84c]
add edx, 0xffffffa6
xor edx, 0x9f3a95c3
mov ecx, dword [esi]
mov eax, dword [edx + ecx + 0xc]
lea eax, [eax + eax*2]
shl eax, 4
push eax
push dword [esi + 0x3c8]
push dword [edx + ecx]
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, esi
mov ecx, dword [0x100fe778]
lea esi, [edx + 0x3d4]
mov eax, dword [esi]
add ecx, 0xffffffdb
xor ecx, 0x9f3a958e
add ecx, dword [edx]
mov dword [ecx], eax
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov eax, dword [esi + 8]
mov dword [ecx + 8], eax
mov ecx, dword [0x100fe784]
mov eax, dword [edx + 0x48]
add ecx, 0xffffffd8
xor ecx, 0x9f3a9591
add ecx, dword [edx]
mov dword [ecx], eax
mov eax, dword [edx + 0x4c]
mov dword [ecx + 4], eax
mov eax, dword [edx + 0x50]
mov dword [ecx + 8], eax
mov ecx, dword [0x100fe788]
mov eax, dword [edx + 0x54]
add ecx, 0xffffffd7
xor ecx, 0x9f3a9592
add ecx, dword [edx]
mov dword [ecx], eax
mov eax, dword [edx + 0x58]
mov dword [ecx + 4], eax
mov eax, dword [edx + 0x5c]
mov dword [ecx + 8], eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [0x100fe698]
lea eax, [ecx + 0x6c]
mov ecx, dword [ecx]
push eax
call edx
mov eax, dword [0x100fe69c]
push esi
mov esi, dword [ebp - 0x18]
mov ecx, dword [esi]
call eax
mov eax, dword [ebp - 0x1c]
movss xmm4, dword [ebp - 0xf4]
movss xmm3, dword [ebp - 0xf8]
movss xmm2, dword [ebp - 0xf0]
movss xmm5, dword [eax + 0x14]
movss xmm6, dword [eax + 0x18]
subss xmm4, xmm5
movss xmm7, dword [eax + 0x1c]
subss xmm3, xmm6
subss xmm2, xmm7
movaps xmm0, xmm4
movaps xmm1, xmm3
mulss xmm0, xmm4
mulss xmm1, xmm3
addss xmm0, xmm1
movaps xmm1, xmm2
mulss xmm1, xmm2
addss xmm0, xmm1
call fcn.1001ff90
addss xmm0, dword [0x100b3f8c]
movss xmm1, dword [0x100b407c]
mov dword [ebp - 0x84], 0
divss xmm1, xmm0
movss xmm0, dword [0x100b4234]
mulss xmm2, xmm1
mulss xmm4, xmm1
mulss xmm3, xmm1
mulss xmm2, xmm0
mulss xmm4, xmm0
mulss xmm3, xmm0
movss dword [ebp - 0x90], xmm4
movss dword [ebp - 0x88], xmm2
movss dword [ebp - 0x8c], xmm3
movaps xmm2, xmmword [ebp - 0x90]
movaps xmm1, xmm2
movaps xmmword [ebp - 0x160], xmm2
shufps xmm1, xmm2, 0x55
movaps xmm0, xmm2
mulss xmm1, xmm1
mulss xmm0, xmm2
mov byte [ebp - 0x12b], 1
shufps xmm2, xmm2, 0xaa
mulss xmm2, xmm2
addss xmm1, xmm0
addss xmm1, xmm2
ucomiss xmm1, dword [0x100b3f7c]
lahf
test ah, 0x44
jp 0x100857c6
mov byte [ebp - 0x12b], 0
mov ecx, dword [0x100fe59c]
lea edx, [ebp - 0xe8]
mov esi, dword [ebp - 0xec]
push edx
mov dword [ebp - 0x130], 0
lea edx, [ebp - 0x170]
mov byte [ebp - 0x12c], 1
movss dword [ebp - 0x170], xmm5
movss dword [ebp - 0x16c], xmm6
movss dword [ebp - 0x168], xmm7
mov dword [ebp - 0x164], 0
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x140], 0
mov eax, dword [ecx]
push esi
push 0x4600400b
push edx
mov eax, dword [eax + 0xc]
call eax
push 3
push dword [0x100ce2dc]
push dword [0x100ce2d8]
call fcn.100a2b00
cmp eax, dword [0x100ce2dc]
je 0x10085a76
mov ecx, dword [ebp - 0x9c]
test ecx, ecx
je 0x1008589f
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
test al, al
je 0x1008589f
cmp dword [ebp - 0x9c], esi
je 0x10085999
mov esi, dword [0x100af62c]
lea ecx, [ebp - 0x90]
push 0x22
xorps xmm0, xmm0
mov dword [ebp - 0x80], 0
push str.missed_shot_due_to_spread_failure_n
movups xmmword [ebp - 0x90], xmm0
mov dword [ebp - 0x7c], 0
call fcn.100272c0
lea eax, [ebp - 0x18]
mov dword [ebp - 4], 4
push eax
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x18], 0x40a00000
push eax
lea edx, [ebp - 0x90]
mov dword [ebp - 0x1c], esi
lea ecx, [ebp - 0xfc]
call fcn.1002b7b0
add esp, 8
push eax
mov byte [ebp - 4], 5
call fcn.1002b260
mov byte [ebp - 4], 4
mov esi, dword [ebp - 0xf8]
test esi, esi
je 0x10085935
or edi, 0xffffffff
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x10085935
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lock xadd dword [esi + 8], edi
dec edi
jne 0x10085935
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
sub esp, 0x18
lea eax, [ebp - 0x90]
mov ecx, esp
push eax
call fcn.1002b3e0
push 0x100be2a8
call fcn.10032d00
mov dword [ebp - 4], 0xffffffff
add esp, 0x1c
mov ecx, dword [ebp - 0x7c]
cmp ecx, 0xf
jbe 0x10085993
mov edx, dword [ebp - 0x90]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10085989
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10085989
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100a3187
add esp, 8
mov esi, dword [ebp - 0xec]
mov ecx, dword [0x100fe84c]
mov eax, dword [ebp - 0x68]
add ecx, 0xffffffa6
xor ecx, 0x9f3a95c3
mov dword [ecx + esi], eax
mov eax, dword [ebp - 0x64]
mov dword [ecx + esi + 0xc], eax
lea ecx, [ebp - 0x30]
mov eax, dword [0x100fe778]
movss xmm0, dword [ebp - 0x60]
add eax, 0xffffffdb
xor eax, 0x9f3a958e
push ecx
mov ecx, esi
movss dword [eax + esi], xmm0
movss xmm0, dword [ebp - 0x5c]
movss dword [eax + esi + 4], xmm0
movss xmm0, dword [ebp - 0x58]
movss dword [eax + esi + 8], xmm0
mov eax, dword [0x100fe784]
movss xmm0, dword [ebp - 0x48]
add eax, 0xffffffd8
xor eax, 0x9f3a9591
movss dword [eax + esi], xmm0
movss xmm0, dword [ebp - 0x44]
movss dword [eax + esi + 4], xmm0
movss xmm0, dword [ebp - 0x40]
movss dword [eax + esi + 8], xmm0
mov eax, dword [0x100fe788]
movss xmm0, dword [ebp - 0x3c]
add eax, 0xffffffd7
xor eax, 0x9f3a9592
movss dword [eax + esi], xmm0
movss xmm0, dword [ebp - 0x38]
movss dword [eax + esi + 4], xmm0
movss xmm0, dword [ebp - 0x34]
movss dword [eax + esi + 8], xmm0
mov eax, dword [0x100fe698]
call eax
mov eax, dword [0x100fe69c]
lea ecx, [ebp - 0x60]
push ecx
mov ecx, esi
call eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100a2d0c
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4
cmp dword [ebp - 0x9c], esi
jne 0x10085999
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 4]
mov eax, dword [eax + 0x42c]
cmp eax, 0xc
jne 0x10085aa4
inc dword [edi + 0x4b4]
inc dword [edi + 0x48c]
jmp 0x10085999
cmp eax, 0x1b
jne 0x10085aba
inc dword [edi + 0x520]
inc dword [edi + 0x48c]
jmp 0x10085999
cmp eax, 0x1c
jne 0x10085ad0
inc dword [edi + 0x524]
inc dword [edi + 0x48c]
jmp 0x10085999
cmp eax, 0x1f
jne 0x10085ae6
inc dword [edi + 0x534]
inc dword [edi + 0x48c]
jmp 0x10085999
cmp eax, 0x19
jne 0x10085afc
inc dword [edi + 0x568]
inc dword [edi + 0x48c]
jmp 0x10085999
cmp eax, 7
jne 0x10085b12
inc dword [edi + 0x4c0]
inc dword [edi + 0x48c]
jmp 0x10085999
cmp eax, 9
jne 0x10085b28
inc dword [edi + 0x4c4]
inc dword [edi + 0x48c]
jmp 0x10085999
cmp eax, 6
jne 0x10085b3e
inc dword [edi + 0x4f8]
inc dword [edi + 0x48c]
jmp 0x10085999
cmp eax, 0xe
jne 0x10085b54
inc dword [edi + 0x574]
inc dword [edi + 0x48c]
jmp 0x10085999
cmp eax, 0x28
jne 0x10085b6a
inc dword [edi + 0x578]
inc dword [edi + 0x48c]
jmp 0x10085999
cmp eax, 0x27
jne 0x10085b80
inc dword [edi + 0x570]
inc dword [edi + 0x48c]
jmp 0x10085999
cmp eax, 4
jne 0x10085b96
inc dword [edi + 0x57c]
inc dword [edi + 0x48c]
jmp 0x10085999
cmp eax, 2
jne 0x10085bac
inc dword [edi + 0x51c]
inc dword [edi + 0x48c]
jmp 0x10085999
cmp eax, 0x23
jne 0x10085bc2
inc dword [edi + 0x4f0]
inc dword [edi + 0x48c]
jmp 0x10085999
cmp eax, 0xb
jne 0x10085bd8
inc dword [edi + 0x508]
inc dword [edi + 0x48c]
jmp 0x10085999
cmp eax, 0x17
jne 0x10085bee
inc dword [edi + 0x558]
inc dword [edi + 0x48c]
jmp 0x10085999
cmp eax, 5
jne 0x10085c04
inc dword [edi + 0x4e8]
inc dword [edi + 0x48c]
jmp 0x10085999
cmp eax, 0x18
jne 0x10085c1a
inc dword [edi + 0x50c]
inc dword [edi + 0x48c]
jmp 0x10085999
cmp eax, 0x1a
jne 0x10085c30
inc dword [edi + 0x510]
inc dword [edi + 0x48c]
jmp 0x10085999
cmp eax, 0x26
jne 0x10085c46
inc dword [edi + 0x544]
inc dword [edi + 0x48c]
jmp 0x10085999
cmp eax, 0xd
jne 0x10085c5c
inc dword [edi + 0x538]
inc dword [edi + 0x48c]
jmp 0x10085999
cmp eax, 0x1e
jne 0x10085c72
inc dword [edi + 0x55c]
inc dword [edi + 0x48c]
jmp 0x10085999
cmp eax, 0x20
jne 0x10085c7d
inc dword [edi + 0x560]
inc dword [edi + 0x48c]
jmp 0x10085999