Function at 0x10085990
Capabilities:
Encode data using xor
Encrypt data using speck
Hash data using fnv

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100ac463
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x168
mov eax, dword [0x100bf040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebx + 8]
lea eax, [ebp - 0xc4]
push 0x30
push 0
push eax
mov dword [ebp - 0x1c], esi
call sub.VCRUNTIME140.dll_memset
xorps xmm0, xmm0
mov dword [ebp - 0xc8], 0
add esp, 0xc
movups xmmword [ebp - 0xe8], xmm0
movups xmmword [ebp - 0xd8], xmm0
test esi, esi
je 0x10086956
cmp dword [0x100bf2a8], 0
je 0x10086956
mov eax, dword [0x10104468]
mov edi, dword [esi + 8]
test al, 1
jne 0x10085a6d
or eax, 1
mov dword [0x10104468], eax
mov edx, 0x990704d7
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x84]
call fcn.10044060
push 0xda7d68cb
mov edx, eax
mov ecx, 0x1010446c
call fcn.100444b0
add esp, 4
push 0x100ada80
call fcn.100a4222
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x1010446c]
call eax
mov esi, eax
mov dword [ebp - 0xec], esi
test edi, edi
je 0x10085af3
test esi, esi
je 0x10085af3
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x10085af3
nop
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x10085ad9
mov edi, 0x811c9dc5
xor ecx, ecx
nop
inc ecx
cmp byte [esi + ecx], 0
jne 0x10085ab0
xor edx, edx
test ecx, ecx
je 0x10085ad9
nop dword [eax]
movsx eax, byte [esi + edx]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x10085ac0
cmp edi, 0x11ab48ff
je 0x10085aee
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x10085af3
mov esi, dword [ebp - 0xec]
jmp 0x10085a90
mov ecx, dword [ebp - 0x18]
jmp 0x10085af5
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
movss xmm5, dword [0x100b50a4]
dec eax
cmp eax, 6
ja case.0x10085b07.2
jmp dword [eax*4 + 0x10086b88]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 4
mov edx, eax
jmp 0x10085b82
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
add esp, 4
mov edx, eax
jmp 0x10085b82
movss xmm4, dword [ecx + 0xc]
movss xmm3, dword [0x100b5270]
movaps xmm0, xmm4
movss xmm2, dword [0x100b5268]
andps xmm3, xmm4
xorps xmm0, xmm3
movaps xmm1, xmm4
cmpltss xmm0, xmm2
andps xmm2, xmm0
orps xmm2, xmm3
addss xmm1, xmm2
subss xmm1, xmm2
movaps xmm0, xmm1
subss xmm0, xmm4
cmpnless xmm0, xmm3
andps xmm0, xmm5
subss xmm1, xmm0
cvttss2si edx, xmm1
jmp 0x10085b82
xor edx, edx
jmp 0x10085b82
mov edx, dword [ecx + 0xc]
mov ecx, dword [0x100fef80]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
call eax
mov esi, dword [0x100fef80]
mov edi, eax
mov ecx, dword [esi]
mov edx, dword [ecx + 0x30]
mov ecx, esi
call edx
cmp edi, eax
jne 0x10086956
mov edi, dword [ebp - 0x1c]
mov eax, dword [0x10104468]
mov edi, dword [edi + 8]
test al, 1
jne 0x10085bff
or eax, 1
mov dword [0x10104468], eax
mov edx, 0x990704d7
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x84]
call fcn.10044060
push 0xda7d68cb
mov edx, eax
mov ecx, 0x1010446c
call fcn.100444b0
add esp, 4
push 0x100ada80
call fcn.100a4222
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x1010446c]
call eax
mov esi, eax
mov dword [ebp - 0xec], esi
test edi, edi
je 0x10085c83
test esi, esi
je 0x10085c83
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x10085c83
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x10085c69
mov edi, 0x811c9dc5
xor ecx, ecx
nop
inc ecx
cmp byte [ecx + esi], 0
jne 0x10085c40
xor edx, edx
test ecx, ecx
je 0x10085c69
nop dword [eax]
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x10085c50
cmp edi, 0xfd0c5087
je 0x10085c7e
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x10085c83
mov esi, dword [ebp - 0xec]
jmp 0x10085c20
mov ecx, dword [ebp - 0x18]
jmp 0x10085c85
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
dec eax
cmp eax, 6
ja case.0x10085c8f.4
jmp dword [eax*4 + 0x10086ba4]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atof]
fstp dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x18]
add esp, 4
jmp 0x10085ce9
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtof]
fstp dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x18]
add esp, 4
jmp 0x10085ce9
movss xmm0, dword [ecx + 0xc]
jmp 0x10085ce9
movd xmm0, dword [ecx + 0xc]
cvtdq2ps xmm0, xmm0
jmp 0x10085ce9
mov ecx, dword [ecx + 4]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
call fcn.100a52c0
cvtsd2ss xmm0, xmm0
jmp 0x10085ce9
xorps xmm0, xmm0
mov eax, dword [ebp - 0x1c]
movss dword [ebp - 0xf4], xmm0
mov edi, dword [eax + 8]
mov eax, dword [0x10104468]
test al, 1
jne 0x10085d47
or eax, 1
mov dword [0x10104468], eax
mov edx, 0x990704d7
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x84]
call fcn.10044060
push 0xda7d68cb
mov edx, eax
mov ecx, 0x1010446c
call fcn.100444b0
add esp, 4
push 0x100ada80
call fcn.100a4222
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x1010446c]
call eax
mov esi, eax
mov dword [ebp - 0xec], esi
test edi, edi
je 0x10085dc6
test esi, esi
je 0x10085dc6
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x10085dc6
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x10085dac
mov edi, 0x811c9dc5
xor ecx, ecx
inc ecx
cmp byte [ecx + esi], 0
jne 0x10085d86
xor edx, edx
test ecx, ecx
je 0x10085dac
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x10085d93
cmp edi, 0xfc0c4ef4
je 0x10085dc1
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x10085dc6
mov esi, dword [ebp - 0xec]
jmp 0x10085d68
mov ecx, dword [ebp - 0x18]
jmp 0x10085dc8
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
dec eax
cmp eax, 6
ja case.0x10085dd2.4
jmp dword [eax*4 + 0x10086bc0]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atof]
fstp dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x18]
add esp, 4
jmp 0x10085e2c
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtof]
fstp dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x18]
add esp, 4
jmp 0x10085e2c
movss xmm0, dword [ecx + 0xc]
jmp 0x10085e2c
movd xmm0, dword [ecx + 0xc]
cvtdq2ps xmm0, xmm0
jmp 0x10085e2c
mov ecx, dword [ecx + 4]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
call fcn.100a52c0
cvtsd2ss xmm0, xmm0
jmp 0x10085e2c
xorps xmm0, xmm0
mov eax, dword [ebp - 0x1c]
movss dword [ebp - 0xf8], xmm0
mov edi, dword [eax + 8]
mov eax, dword [0x10104468]
test al, 1
jne 0x10085e8a
or eax, 1
mov dword [0x10104468], eax
mov edx, 0x990704d7
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x84]
call fcn.10044060
push 0xda7d68cb
mov edx, eax
mov ecx, 0x1010446c
call fcn.100444b0
add esp, 4
push 0x100ada80
call fcn.100a4222
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x1010446c]
call eax
mov esi, eax
mov dword [ebp - 0xec], esi
test edi, edi
je 0x10085f13
test esi, esi
je 0x10085f13
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x10085f13
nop dword [eax + eax]
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x10085ef9
mov edi, 0x811c9dc5
xor ecx, ecx
nop
inc ecx
cmp byte [ecx + esi], 0
jne 0x10085ed0
xor edx, edx
test ecx, ecx
je 0x10085ef9
nop dword [eax]
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x10085ee0
cmp edi, 0xff0c53ad
je 0x10085f0e
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x10085f13
mov esi, dword [ebp - 0xec]
jmp 0x10085eb0
mov ecx, dword [ebp - 0x18]
jmp 0x10085f15
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
dec eax
cmp eax, 6
ja case.0x10085f1f.4
jmp dword [eax*4 + 0x10086bdc]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atof]
fstp dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x18]
add esp, 4
jmp 0x10085f79
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtof]
fstp dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x18]
add esp, 4
jmp 0x10085f79
movss xmm0, dword [ecx + 0xc]
jmp 0x10085f79
movd xmm0, dword [ecx + 0xc]
cvtdq2ps xmm0, xmm0
jmp 0x10085f79
mov ecx, dword [ecx + 4]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
call fcn.100a52c0
cvtsd2ss xmm0, xmm0
jmp 0x10085f79
xorps xmm0, xmm0
mov eax, dword [0x100ff1dc]
mov esi, dword [0x100bf2a8]
add eax, 0xffffffc2
xor eax, 0x90fb2e52
movss dword [ebp - 0xf0], xmm0
cmp byte [0x100c7280], 0
movd xmm0, dword [eax + esi]
mov eax, dword [0x100fefdc]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [eax + 0x20]
movss dword [ebp - 0x18], xmm0
je 0x100861e3
mov dword [ebp - 0x84], 0
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0
mov eax, dword [esi]
push ecx
mov ecx, esi
mov eax, dword [eax + 0x28c]
call eax
cmp dword [esi + 0x39e1], 0
je 0x10086137
mov eax, dword [0x100ff124]
mov edi, dword [esi + eax]
test edi, edi
je 0x10086137
mov ecx, dword [edi + 0x60]
test ecx, ecx
je 0x10086137
cmp byte [edi + 0x109], 0
xorps xmm1, xmm1
jne 0x1008605f
mov eax, dword [0x100ff1e4]
add eax, 0xffffffc0
xor eax, 0x90fb2e54
movss xmm0, dword [eax + ecx]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x1008605f
mov eax, dword [0x100ff258]
add eax, 0xffffffa3
xor eax, 0x90fb2e71
mov eax, dword [eax + ecx]
mov ecx, dword [0x100fef84]
push ecx
mov edx, dword [ecx]
mov esi, dword [edx + 0x10]
mov edx, esp
mov dword [edx], eax
call esi
test eax, eax
jne 0x10086137
xorps xmm1, xmm1
mov ecx, dword [0x100ff24c]
mov eax, dword [edi + 0x60]
add ecx, 0xffffffa6
xor ecx, 0x90fb2e6e
mov eax, dword [ecx + eax]
test eax, eax
je 0x10086137
movss xmm3, dword [eax + 0x1ac]
movss xmm2, dword [ebp - 0x7c]
cvtps2pd xmm3, xmm3
cvtps2pd xmm0, xmm2
addsd xmm3, qword [0x100b50e8]
comisd xmm0, xmm3
movsd qword [ebp - 0x20], xmm3
jbe 0x10086137
subsd xmm0, xmm3
xorps xmm4, xmm4
cvtpd2ps xmm0, xmm0
subss xmm0, dword [0x100b514c]
cvtps2pd xmm0, xmm0
mulsd xmm0, qword [0x100b50c8]
cvtpd2ps xmm0, xmm0
comiss xmm0, xmm1
jb 0x100860fe
sub esp, 8
mov dword [esp + 4], 0x3f800000
movss dword [esp], xmm0
call dword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_fminf]
movss xmm2, dword [ebp - 0x7c]
add esp, 8
movsd xmm3, qword [ebp - 0x20]
fstp dword [ebp - 0xec]
movss xmm4, dword [ebp - 0xec]
movaps xmm1, xmm4
mulss xmm1, xmm4
cvtps2pd xmm2, xmm2
movaps xmm0, xmm1
addss xmm1, xmm1
mulss xmm0, dword [0x100b5130]
subsd xmm3, xmm2
mulss xmm1, xmm4
subss xmm0, xmm1
cvtps2pd xmm0, xmm0
mulsd xmm0, xmm3
addsd xmm0, xmm2
cvtpd2ps xmm0, xmm0
movss dword [ebp - 0x7c], xmm0
mov ecx, dword [0x100ff1dc]
mov eax, dword [0x100bf2a8]
add ecx, 0xffffffc2
movss xmm5, dword [ebp - 0xf4]
xor ecx, 0x90fb2e52
movss xmm4, dword [ebp - 0xf8]
movss xmm3, dword [ebp - 0xf0]
movq xmm0, qword [ebp - 0x84]
mov ecx, dword [ecx + eax]
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x108], eax
mov eax, dword [0x100ffc60]
movss dword [ebp - 0x11c], xmm5
movss dword [ebp - 0x118], xmm4
movss dword [ebp - 0x114], xmm3
movq qword [ebp - 0x110], xmm0
mov dword [ebp - 0x104], ecx
mov word [ebp - 0x100], 0
cmp eax, dword [0x100ffc64]
je 0x100861d1
movups xmm0, xmmword [ebp - 0x11c]
movups xmmword [eax], xmm0
movups xmm0, xmmword [ebp - 0x10c]
movups xmmword [eax + 0x10], xmm0
add dword [0x100ffc60], 0x20
jmp 0x100861f3
lea ecx, [ebp - 0x11c]
push ecx
push eax
mov ecx, 0x100ffc5c
call fcn.10088040
movss xmm5, dword [ebp - 0xf4]
movss xmm4, dword [ebp - 0xf8]
mov eax, dword [0x100ffc58]
test eax, eax
je 0x10086956
mov ecx, dword [0x100ffc54]
xor esi, esi
movss xmm2, dword [0x100b526c]
lea edx, [eax + ecx]
cmp ecx, edx
je 0x10086956
mov eax, dword [0x100ffc50]
mov edi, dword [0x100ffc4c]
dec eax
movss xmm3, dword [ebp - 0x18]
movss xmm6, dword [0x100b50a4]
mov dword [ebp - 0xec], eax
nop word [eax + eax]
mov eax, ecx
and eax, dword [ebp - 0xec]
mov eax, dword [edi + eax*4]
cmp byte [eax + 0x20], 0
jne 0x10086276
movss xmm1, dword [eax + 0xc]
movaps xmm0, xmm3
addss xmm1, dword [eax + 8]
subss xmm0, xmm1
call fcn.10035af0
comiss xmm0, xmm6
ja 0x10086276
comiss xmm2, xmm0
jbe 0x10086276
movaps xmm2, xmm0
mov esi, eax
inc ecx
cmp ecx, edx
jne 0x10086240
movss xmm3, dword [ebp - 0xf0]
mov dword [ebp - 0x1c], esi
test esi, esi
je 0x10086956
mov byte [esi + 0x20], 1
mov ecx, dword [0x100ff1dc]
mov eax, dword [0x100bf2a8]
add ecx, 0xffffffc2
xor ecx, 0x90fb2e52
mov dword [ebp - 0x8c], esi
movss dword [ebp - 0x84], xmm5
movss dword [ebp - 0x80], xmm4
movss dword [ebp - 0x7c], xmm3
mov eax, dword [ecx + eax]
mov ecx, dword [0x100ffc70]
mov dword [ebp - 0x88], eax
mov eax, dword [0x100ffc78]
inc eax
cmp ecx, eax
ja 0x100862e8
push ecx
mov ecx, 0x100ffc68
call fcn.10087cc0
mov ecx, dword [0x100ffc70]
mov edx, dword [0x100ffc6c]
lea edi, [ecx - 1]
and edi, dword [0x100ffc74]
lea eax, [ecx - 1]
mov dword [0x100ffc74], edi
cmove edi, ecx
dec edi
and eax, edi
mov dword [ebp - 0xec], eax
cmp dword [edx + eax*4], 0
jne 0x10086337
push 0x14
call fcn.100a3dd8
mov ecx, dword [0x100ffc6c]
add esp, 4
mov edx, dword [ebp - 0xec]
mov dword [ecx + edx*4], eax
mov ecx, dword [0x100ffc70]
mov edx, dword [0x100ffc6c]
movups xmm0, xmmword [ebp - 0x8c]
lea eax, [ecx - 1]
and eax, edi
mov ecx, dword [edx + eax*4]
mov eax, dword [ebp - 0x7c]
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], eax
mov eax, dword [0x100ffc78]
inc eax
mov dword [0x100ffc74], edi
mov dword [0x100ffc78], eax
cmp eax, 0x80
jbe 0x1008638d
mov dword [ebp - 0x1c], esi
nop word [eax + eax]
add eax, 0xffffffff
mov dword [0x100ffc78], eax
je 0x10086383
cmp eax, 0x80
ja 0x10086370
jmp 0x1008638d
mov dword [0x100ffc74], 0
cmp dword [0x100cfb2c], 1
je 0x10086956
mov esi, dword [esi]
mov dword [ebp - 0xec], esi
test esi, esi
je 0x10086956
mov eax, dword [0x100ff1b4]
add eax, 0xffffffcc
xor eax, 0x90fb2e48
cmp dword [eax + esi], 0
jne 0x10086956
mov eax, dword [esi + 8]
lea ecx, [esi + 8]
mov eax, dword [eax + 0x28]
call eax
imul eax, eax, 0xac0
lea edi, [eax + 0x100d092c]
test edi, edi
je 0x10086956
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 4]
cmp dword [eax + 0x3c4], 0
je 0x10086956
push 0x44
lea eax, [ebp - 0x68]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x68]
call fcn.10020db0
mov ecx, dword [0x100ff24c]
add ecx, 0xffffffa6
xor ecx, 0x90fb2e6e
mov eax, dword [ecx + esi]
mov dword [ebp - 0x68], eax
mov eax, dword [ecx + esi + 0xc]
mov ecx, esi
mov dword [ebp - 0x64], eax
mov eax, dword [0x100ff178]
add eax, 0xffffffdb
xor eax, 0x90fb2e39
movss xmm0, dword [eax + esi]
movss dword [ebp - 0x60], xmm0
movss xmm0, dword [eax + esi + 4]
movss dword [ebp - 0x5c], xmm0
movss xmm0, dword [eax + esi + 8]
mov eax, dword [0x100ff184]
add eax, 0xffffffd8
movss dword [ebp - 0x58], xmm0
xor eax, 0x90fb2e3c
movss xmm0, dword [eax + esi]
movss dword [ebp - 0x48], xmm0
movss xmm0, dword [eax + esi + 4]
movss dword [ebp - 0x44], xmm0
movss xmm0, dword [eax + esi + 8]
mov eax, dword [0x100ff188]
add eax, 0xffffffd7
movss dword [ebp - 0x40], xmm0
xor eax, 0x90fb2e3d
movss xmm0, dword [eax + esi]
movss dword [ebp - 0x3c], xmm0
movss xmm0, dword [eax + esi + 4]
movss dword [ebp - 0x38], xmm0
movss xmm0, dword [eax + esi + 8]
movss dword [ebp - 0x34], xmm0
mov eax, dword [esi]
mov eax, dword [eax + 0x28]
call eax
mov ecx, esi
movss xmm0, dword [eax]
movss dword [ebp - 0x54], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x50], xmm0
movss xmm0, dword [eax + 8]
movss dword [ebp - 0x4c], xmm0
mov eax, dword [esi]
mov eax, dword [eax + 0x2c]
call eax
movss xmm0, dword [eax]
movss dword [ebp - 0x30], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x2c], xmm0
movss xmm0, dword [eax + 8]
mov eax, dword [ebp - 0x1c]
movss dword [ebp - 0x28], xmm0
mov edx, dword [eax + 4]
mov dword [ebp - 0x18], edx
cmp byte [edx + 0x3c0], 0
je 0x10086544
cmp byte [edx + 0x10], 0
jne 0x10086544
mov esi, dword [ebp - 0x18]
mov edx, dword [0x100ff24c]
add edx, 0xffffffa6
xor edx, 0x90fb2e6e
mov ecx, dword [esi]
mov eax, dword [edx + ecx + 0xc]
lea eax, [eax + eax*2]
shl eax, 4
push eax
push dword [esi + 0x3c4]
push dword [edx + ecx]
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, esi
mov ecx, dword [0x100ff178]
lea esi, [edx + 0x3d0]
mov eax, dword [esi]
add ecx, 0xffffffdb
xor ecx, 0x90fb2e39
add ecx, dword [edx]
mov dword [ecx], eax
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov eax, dword [esi + 8]
mov dword [ecx + 8], eax
mov ecx, dword [0x100ff184]
mov eax, dword [edx + 0x44]
add ecx, 0xffffffd8
xor ecx, 0x90fb2e3c
add ecx, dword [edx]
mov dword [ecx], eax
mov eax, dword [edx + 0x48]
mov dword [ecx + 4], eax
mov eax, dword [edx + 0x4c]
mov dword [ecx + 8], eax
mov ecx, dword [0x100ff188]
mov eax, dword [edx + 0x50]
add ecx, 0xffffffd7
xor ecx, 0x90fb2e3d
add ecx, dword [edx]
mov dword [ecx], eax
mov eax, dword [edx + 0x54]
mov dword [ecx + 4], eax
mov eax, dword [edx + 0x58]
mov dword [ecx + 8], eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [0x100ff098]
lea eax, [ecx + 0x68]
mov ecx, dword [ecx]
push eax
call edx
mov eax, dword [0x100ff09c]
push esi
mov esi, dword [ebp - 0x18]
mov ecx, dword [esi]
call eax
mov eax, dword [ebp - 0x1c]
movss xmm4, dword [ebp - 0xf4]
movss xmm3, dword [ebp - 0xf8]
movss xmm2, dword [ebp - 0xf0]
movss xmm5, dword [eax + 0x14]
movss xmm6, dword [eax + 0x18]
subss xmm4, xmm5
movss xmm7, dword [eax + 0x1c]
subss xmm3, xmm6
subss xmm2, xmm7
movaps xmm0, xmm4
movaps xmm1, xmm3
mulss xmm0, xmm4
mulss xmm1, xmm3
addss xmm0, xmm1
movaps xmm1, xmm2
mulss xmm1, xmm2
addss xmm0, xmm1
call fcn.1001ff90
addss xmm0, dword [0x100b4fb4]
movss xmm1, dword [0x100b50a4]
mov dword [ebp - 0x84], 0
divss xmm1, xmm0
movss xmm0, dword [0x100b525c]
mulss xmm2, xmm1
mulss xmm4, xmm1
mulss xmm3, xmm1
mulss xmm2, xmm0
mulss xmm4, xmm0
mulss xmm3, xmm0
movss dword [ebp - 0x90], xmm4
movss dword [ebp - 0x88], xmm2
movss dword [ebp - 0x8c], xmm3
movaps xmm2, xmmword [ebp - 0x90]
movaps xmm1, xmm2
movaps xmmword [ebp - 0x160], xmm2
shufps xmm1, xmm2, 0x55
movaps xmm0, xmm2
mulss xmm1, xmm1
mulss xmm0, xmm2
mov byte [ebp - 0x12b], 1
shufps xmm2, xmm2, 0xaa
mulss xmm2, xmm2
addss xmm1, xmm0
addss xmm1, xmm2
ucomiss xmm1, dword [0x100b4fa4]
lahf
test ah, 0x44
jp 0x100866c6
mov byte [ebp - 0x12b], 0
mov ecx, dword [0x100fef9c]
lea edx, [ebp - 0xe8]
mov esi, dword [ebp - 0xec]
push edx
mov dword [ebp - 0x130], 0
lea edx, [ebp - 0x170]
mov byte [ebp - 0x12c], 1
movss dword [ebp - 0x170], xmm5
movss dword [ebp - 0x16c], xmm6
movss dword [ebp - 0x168], xmm7
mov dword [ebp - 0x164], 0
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x140], 0
mov eax, dword [ecx]
push esi
push 0x4600400b
push edx
mov eax, dword [eax + 0xc]
call eax
push 3
push dword [0x100cf2dc]
push dword [0x100cf2d8]
call fcn.100a3bb0
cmp eax, dword [0x100cf2dc]
je 0x10086976
mov ecx, dword [ebp - 0x9c]
test ecx, ecx
je 0x1008679f
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
test al, al
je 0x1008679f
cmp dword [ebp - 0x9c], esi
je 0x10086899
mov esi, dword [0x100b06ec]
lea ecx, [ebp - 0x90]
push 0x1a
xorps xmm0, xmm0
mov dword [ebp - 0x80], 0
push str.missed_shot_due_to_spread_n
movups xmmword [ebp - 0x90], xmm0
mov dword [ebp - 0x7c], 0
call fcn.100272b0
lea eax, [ebp - 0x18]
mov dword [ebp - 4], 4
push eax
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x18], 0x40a00000
push eax
lea edx, [ebp - 0x90]
mov dword [ebp - 0x1c], esi
lea ecx, [ebp - 0xfc]
call fcn.1002b7d0
add esp, 8
push eax
mov byte [ebp - 4], 5
call fcn.1002b280
mov byte [ebp - 4], 4
mov esi, dword [ebp - 0xf8]
test esi, esi
je 0x10086835
or edi, 0xffffffff
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x10086835
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lock xadd dword [esi + 8], edi
dec edi
jne 0x10086835
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
sub esp, 0x18
lea eax, [ebp - 0x90]
mov ecx, esp
push eax
call fcn.1002b400
push 0x100bf2a8
call fcn.10033190
mov dword [ebp - 4], 0xffffffff
add esp, 0x1c
mov ecx, dword [ebp - 0x7c]
cmp ecx, 0xf
jbe 0x10086893
mov edx, dword [ebp - 0x90]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10086889
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10086889
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100a4237
add esp, 8
mov esi, dword [ebp - 0xec]
mov ecx, dword [0x100ff24c]
mov eax, dword [ebp - 0x68]
add ecx, 0xffffffa6
xor ecx, 0x90fb2e6e
mov dword [ecx + esi], eax
mov eax, dword [ebp - 0x64]
mov dword [ecx + esi + 0xc], eax
lea ecx, [ebp - 0x30]
mov eax, dword [0x100ff178]
movss xmm0, dword [ebp - 0x60]
add eax, 0xffffffdb
xor eax, 0x90fb2e39
push ecx
mov ecx, esi
movss dword [eax + esi], xmm0
movss xmm0, dword [ebp - 0x5c]
movss dword [eax + esi + 4], xmm0
movss xmm0, dword [ebp - 0x58]
movss dword [eax + esi + 8], xmm0
mov eax, dword [0x100ff184]
movss xmm0, dword [ebp - 0x48]
add eax, 0xffffffd8
xor eax, 0x90fb2e3c
movss dword [eax + esi], xmm0
movss xmm0, dword [ebp - 0x44]
movss dword [eax + esi + 4], xmm0
movss xmm0, dword [ebp - 0x40]
movss dword [eax + esi + 8], xmm0
mov eax, dword [0x100ff188]
movss xmm0, dword [ebp - 0x3c]
add eax, 0xffffffd7
xor eax, 0x90fb2e3d
movss dword [eax + esi], xmm0
movss xmm0, dword [ebp - 0x38]
movss dword [eax + esi + 4], xmm0
movss xmm0, dword [ebp - 0x34]
movss dword [eax + esi + 8], xmm0
mov eax, dword [0x100ff098]
call eax
mov eax, dword [0x100ff09c]
lea ecx, [ebp - 0x60]
push ecx
mov ecx, esi
call eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100a3dbc
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4
cmp dword [ebp - 0x9c], esi
jne 0x10086899
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 4]
mov eax, dword [eax + 0x424]
cmp eax, 0xc
jne 0x100869a4
inc dword [edi + 0x4a8]
inc dword [edi + 0x480]
jmp 0x10086899
cmp eax, 0x1b
jne 0x100869ba
inc dword [edi + 0x514]
inc dword [edi + 0x480]
jmp 0x10086899
cmp eax, 0x1c
jne 0x100869d0
inc dword [edi + 0x518]
inc dword [edi + 0x480]
jmp 0x10086899
cmp eax, 0x1f
jne 0x100869e6
inc dword [edi + 0x528]
inc dword [edi + 0x480]
jmp 0x10086899
cmp eax, 0x19
jne 0x100869fc
inc dword [edi + 0x55c]
inc dword [edi + 0x480]
jmp 0x10086899
cmp eax, 7
jne 0x10086a12
inc dword [edi + 0x4b4]
inc dword [edi + 0x480]
jmp 0x10086899
cmp eax, 9
jne 0x10086a28
inc dword [edi + 0x4b8]
inc dword [edi + 0x480]
jmp 0x10086899
cmp eax, 6
jne 0x10086a3e
inc dword [edi + 0x4ec]
inc dword [edi + 0x480]
jmp 0x10086899
cmp eax, 0xe
jne 0x10086a54
inc dword [edi + 0x568]
inc dword [edi + 0x480]
jmp 0x10086899
cmp eax, 0x28
jne 0x10086a6a
inc dword [edi + 0x56c]
inc dword [edi + 0x480]
jmp 0x10086899
cmp eax, 0x27
jne 0x10086a80
inc dword [edi + 0x564]
inc dword [edi + 0x480]
jmp 0x10086899
cmp eax, 4
jne 0x10086a96
inc dword [edi + 0x570]
inc dword [edi + 0x480]
jmp 0x10086899
cmp eax, 2
jne 0x10086aac
inc dword [edi + 0x510]
inc dword [edi + 0x480]
jmp 0x10086899
cmp eax, 0x23
jne 0x10086ac2
inc dword [edi + 0x4e4]
inc dword [edi + 0x480]
jmp 0x10086899
cmp eax, 0xb
jne 0x10086ad8
inc dword [edi + 0x4fc]
inc dword [edi + 0x480]
jmp 0x10086899
cmp eax, 0x17
jne 0x10086aee
inc dword [edi + 0x54c]
inc dword [edi + 0x480]
jmp 0x10086899
cmp eax, 5
jne 0x10086b04
inc dword [edi + 0x4dc]
inc dword [edi + 0x480]
jmp 0x10086899
cmp eax, 0x18
jne 0x10086b1a
inc dword [edi + 0x500]
inc dword [edi + 0x480]
jmp 0x10086899
cmp eax, 0x1a
jne 0x10086b30
inc dword [edi + 0x504]
inc dword [edi + 0x480]
jmp 0x10086899
cmp eax, 0x26
jne 0x10086b46
inc dword [edi + 0x538]
inc dword [edi + 0x480]
jmp 0x10086899
cmp eax, 0xd
jne 0x10086b5c
inc dword [edi + 0x52c]
inc dword [edi + 0x480]
jmp 0x10086899
cmp eax, 0x1e
jne 0x10086b72
inc dword [edi + 0x550]
inc dword [edi + 0x480]
jmp 0x10086899
cmp eax, 0x20
jne 0x10086b7d
inc dword [edi + 0x554]
inc dword [edi + 0x480]
jmp 0x10086899