Function at 0x100aea24
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100d8e94
mov eax, dword fs:[0]
push eax
mov eax, 0x1a10
call fcn.100cf940
mov eax, dword [0x100f4040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x19ec], ecx
mov ecx, dword [ebp + 8]
mov eax, 0xf
mov dword [ebp - 0x19c8], 0
vpxor xmm0, xmm0, xmm0
vmovdqu xmmword [ebp - 0x40], xmm0
mov dword [ebp - 0x19d0], ecx
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], eax
mov byte [ebp - 0x40], 0
mov dword [ebp - 4], 0
test ecx, ecx
je 0x100afe50
cmp dword [0x10336cec], 0
je 0x100afe50
mov eax, dword [0x10455418]
mov edi, dword [ecx + 8]
test al, 1
jne 0x100ae91c
or eax, 1
mov dword [0x10455418], eax
mov edx, 0x990704d7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x19f8]
call fcn.10057350
push 0xda7d68cb
mov edx, eax
mov ecx, 0x1045541c
call fcn.10057780
push 0x100da880
call fcn.100ce9f1
add esp, 8
mov byte [ebp - 4], 0
mov eax, dword [0x1045541c]
call eax
mov esi, eax
mov dword [ebp - 0x19bc], esi
test edi, edi
je 0x100ae9ac
test esi, esi
je 0x100ae9ac
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x19c8], ecx
test ecx, ecx
je 0x100ae9ac
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x100ae989
mov edi, 0x811c9dc5
xor ecx, ecx
nop
inc ecx
cmp byte [ecx + esi], 0
jne 0x100ae960
xor edx, edx
test ecx, ecx
je 0x100ae989
nop dword [eax]
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x100ae970
cmp edi, 0xd791104e
je 0x100ae9a4
mov ecx, dword [ebp - 0x19c8]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x19c8], ecx
test ecx, ecx
je 0x100ae9ac
mov esi, dword [ebp - 0x19bc]
jmp 0x100ae940
mov ecx, dword [ebp - 0x19c8]
jmp 0x100ae9ae
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
dec eax
cmp eax, 6
ja case.0x100ae9b8.2
jmp dword [eax*4 + 0x100afeac]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 4
mov edx, eax
jmp 0x100aea2b
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
add esp, 4
mov edx, eax
jmp 0x100aea2b
vmovss xmm0, dword [ecx + 0xc]
vmovss dword [ebp - 0x19bc], xmm0
fld dword [ebp - 0x19bc]
fstp qword [ebp - 0x19b8]
vxorpd xmm0, xmm0, xmm0
vroundsd xmm0, xmm0, qword [ebp - 0x19b8], 1
vmovsd qword [ebp - 0x19b8], xmm0
fld qword [ebp - 0x19b8]
fstp dword [ebp - 0x19bc]
vcvttss2si edx, dword [ebp - 0x19bc]
jmp 0x100aea2b
xor edx, edx
jmp 0x100aea2b
mov edx, dword [ecx + 0xc]
mov ecx, dword [0x103460d4]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
call eax
mov edi, dword [ebp - 0x19d0]
mov ecx, dword [0x10455418]
mov dword [ebp - 0x14], eax
mov edi, dword [edi + 8]
test cl, 1
jne 0x100aea8f
or ecx, 1
mov dword [0x10455418], ecx
mov edx, 0x990704d7
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x19f8]
call fcn.10057350
push 0xda7d68cb
mov edx, eax
mov ecx, 0x1045541c
call fcn.10057780
push 0x100da880
call fcn.100ce9f1
add esp, 8
mov byte [ebp - 4], 0
mov eax, dword [0x1045541c]
call eax
mov esi, eax
mov dword [ebp - 0x19bc], esi
test edi, edi
je 0x100aeb1c
test esi, esi
je 0x100aeb1c
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x19c8], ecx
test ecx, ecx
je 0x100aeb1c
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x100aeaf9
mov edi, 0x811c9dc5
xor ecx, ecx
inc ecx
cmp byte [ecx + esi], 0
jne 0x100aead1
xor edx, edx
test ecx, ecx
je 0x100aeaf9
nop
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x100aeae0
cmp edi, 0x11ab48ff
je 0x100aeb14
mov ecx, dword [ebp - 0x19c8]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x19c8], ecx
test ecx, ecx
je 0x100aeb1c
mov esi, dword [ebp - 0x19bc]
jmp 0x100aeab3
mov ecx, dword [ebp - 0x19c8]
jmp 0x100aeb1e
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
dec eax
cmp eax, 6
ja case.0x100aeb28.2
jmp dword [eax*4 + 0x100afec8]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 4
mov edx, eax
jmp 0x100aeb9b
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
add esp, 4
mov edx, eax
jmp 0x100aeb9b
vmovss xmm0, dword [ecx + 0xc]
vmovss dword [ebp - 0x19bc], xmm0
fld dword [ebp - 0x19bc]
fstp qword [ebp - 0x19b8]
vxorpd xmm0, xmm0, xmm0
vroundsd xmm0, xmm0, qword [ebp - 0x19b8], 1
vmovsd qword [ebp - 0x19b8], xmm0
fld qword [ebp - 0x19b8]
fstp dword [ebp - 0x19bc]
vcvttss2si edx, dword [ebp - 0x19bc]
jmp 0x100aeb9b
xor edx, edx
jmp 0x100aeb9b
mov edx, dword [ecx + 0xc]
mov ecx, dword [0x103460d4]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
call eax
mov esi, dword [ebp - 0x14]
mov edi, eax
mov dword [ebp - 0x19bc], edi
lea ecx, [esi - 1]
cmp ecx, 0x3f
ja 0x100afe4d
lea ecx, [edi - 1]
cmp ecx, 0x3f
ja 0x100afe4d
mov ecx, dword [0x103460d4]
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
call eax
cmp esi, eax
jne 0x100afe4d
mov ecx, dword [0x103460d4]
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
call eax
cmp edi, eax
je 0x100afe4d
mov eax, dword [ebp - 0x19d0]
mov edi, dword [eax + 8]
mov eax, dword [0x10455418]
test al, 1
jne 0x100aec46
or eax, 1
mov dword [0x10455418], eax
mov edx, 0x990704d7
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x19f8]
call fcn.10057350
push 0xda7d68cb
mov edx, eax
mov ecx, 0x1045541c
call fcn.10057780
push 0x100da880
call fcn.100ce9f1
add esp, 8
mov byte [ebp - 4], 0
mov eax, dword [0x1045541c]
call eax
mov esi, eax
mov dword [ebp - 0x14], esi
test edi, edi
je 0x100aeccb
test esi, esi
je 0x100aeccb
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x19c8], ecx
test ecx, ecx
je 0x100aeccb
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x100aecab
mov edi, 0x811c9dc5
xor ecx, ecx
inc ecx
cmp byte [ecx + esi], 0
jne 0x100aec85
xor edx, edx
test ecx, ecx
je 0x100aecab
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x100aec92
cmp edi, 0x2a7e565d
je 0x100aecc3
mov ecx, dword [ebp - 0x19c8]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x19c8], ecx
test ecx, ecx
je 0x100aeccb
mov esi, dword [ebp - 0x14]
jmp 0x100aec67
mov ecx, dword [ebp - 0x19c8]
jmp 0x100aeccd
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
dec eax
cmp eax, 6
ja case.0x100aecd7.2
jmp dword [eax*4 + 0x100afee4]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 4
mov esi, eax
jmp 0x100aed4c
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
add esp, 4
mov dword [ebp - 0x19c0], eax
mov esi, eax
jmp 0x100aed52
vmovss xmm0, dword [ecx + 0xc]
vmovss dword [ebp - 0x14], xmm0
fld dword [ebp - 0x14]
fstp qword [ebp - 0x19b8]
vxorpd xmm0, xmm0, xmm0
vroundsd xmm0, xmm0, qword [ebp - 0x19b8], 1
vmovsd qword [ebp - 0x19b8], xmm0
fld qword [ebp - 0x19b8]
fstp dword [ebp - 0x14]
vcvttss2si esi, dword [ebp - 0x14]
jmp 0x100aed4c
mov dword [ebp - 0x19c0], 0
jmp 0x100aed5b
mov esi, dword [ecx + 0xc]
mov dword [ebp - 0x19c0], esi
cmp esi, 0xa
je 0x100afe4d
mov ecx, dword [0x103460d8]
mov esi, dword [ebp - 0x19bc]
push esi
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov dword [ebp - 0x19b4], eax
test eax, eax
je 0x100afe4d
mov ecx, dword [0x103460d4]
lea eax, [ebp - 0x1b0]
push eax
push esi
mov edx, dword [ecx]
mov edx, dword [edx + 0x20]
call edx
test al, al
je 0x100afe4d
vpxor xmm0, xmm0, xmm0
lea ecx, [ebp - 0x1a0]
mov dword [ebp - 0x19d8], 0
vmovdqu xmmword [ebp - 0x19e8], xmm0
mov dword [ebp - 0x19d4], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100aedc3
sub ecx, edx
lea eax, [ebp - 0x1a0]
push ecx
push eax
lea ecx, [ebp - 0x19e8]
call fcn.10036160
mov byte [ebp - 4], 4
lea eax, [ebp - 0x19e8]
mov ecx, 0x18
mov dword [ebp - 0x19f4], 0
cmp dword [ebp - 0x19d8], ecx
vpxor xmm0, xmm0, xmm0
cmovb ecx, dword [ebp - 0x19d8]
cmp dword [ebp - 0x19d4], 0xf
push ecx
cmova eax, dword [ebp - 0x19e8]
lea ecx, [ebp - 0x1a04]
push eax
vmovdqu xmmword [ebp - 0x1a04], xmm0
mov dword [ebp - 0x19f0], 0
call fcn.10036160
lea eax, [ebp - 0x1a04]
mov dword [ebp - 0x19c8], 1
push eax
lea ecx, [ebp - 0x40]
call fcn.10035610
mov ecx, dword [ebp - 0x19f0]
cmp ecx, 0xf
jbe 0x100aee89
mov edx, dword [ebp - 0x1a04]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100aee7f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100af60c
push ecx
push edx
call fcn.100cea0b
add esp, 8
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x19d4]
cmp ecx, 0xf
jbe 0x100aeec7
mov edx, dword [ebp - 0x19e8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100aeebd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100af60c
push ecx
push edx
call fcn.100cea0b
add esp, 8
mov eax, dword [ebp - 0x19d0]
mov edi, dword [eax + 8]
mov eax, dword [0x10455418]
test al, 1
jne 0x100aef17
or eax, 1
mov dword [0x10455418], eax
mov edx, 0x990704d7
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x19f8]
call fcn.10057350
push 0xda7d68cb
mov edx, eax
mov ecx, 0x1045541c
call fcn.10057780
push 0x100da880
call fcn.100ce9f1
add esp, 8
mov byte [ebp - 4], 0
mov eax, dword [0x1045541c]
call eax
mov esi, eax
mov dword [ebp - 0x14], esi
test edi, edi
je 0x100aef9c
test esi, esi
je 0x100aef9c
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x19c4], ecx
test ecx, ecx
je 0x100aef9c
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x100aef7c
mov edi, 0x811c9dc5
xor ecx, ecx
inc ecx
cmp byte [esi + ecx], 0
jne 0x100aef56
xor edx, edx
test ecx, ecx
je 0x100aef7c
movsx eax, byte [esi + edx]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x100aef63
cmp edi, 0xa0d9523e
je 0x100aef94
mov ecx, dword [ebp - 0x19c4]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x19c4], ecx
test ecx, ecx
je 0x100aef9c
mov esi, dword [ebp - 0x14]
jmp 0x100aef38
mov ecx, dword [ebp - 0x19c4]
jmp 0x100aef9e
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
dec eax
cmp eax, 6
ja case.0x100aefa8.2
jmp dword [eax*4 + 0x100aff00]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 4
jmp 0x100aefff
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
add esp, 4
jmp 0x100aefff
vmovss xmm0, dword [ecx + 0xc]
vmovss dword [ebp - 0x14], xmm0
fld dword [ebp - 0x14]
fstp qword [ebp - 0x1c]
vxorpd xmm0, xmm0, xmm0
vroundsd xmm0, xmm0, qword [ebp - 0x1c], 1
vmovsd qword [ebp - 0x1c], xmm0
fld qword [ebp - 0x1c]
fstp dword [ebp - 0x14]
vcvttss2si eax, dword [ebp - 0x14]
jmp 0x100aefff
xor eax, eax
jmp 0x100aefff
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x19c4], eax
mov eax, dword [ebp - 0x19d0]
mov edi, dword [eax + 8]
mov eax, dword [0x10455418]
test al, 1
jne 0x100af055
or eax, 1
mov dword [0x10455418], eax
mov edx, 0x990704d7
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x19f8]
call fcn.10057350
push 0xda7d68cb
mov edx, eax
mov ecx, 0x1045541c
call fcn.10057780
push 0x100da880
call fcn.100ce9f1
add esp, 8
mov byte [ebp - 4], 0
mov eax, dword [0x1045541c]
call eax
mov esi, eax
mov dword [ebp - 0x18], esi
test edi, edi
je 0x100af0d0
test esi, esi
je 0x100af0d0
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x14], ecx
test ecx, ecx
je 0x100af0d0
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x100af0b9
mov edi, 0x811c9dc5
xor ecx, ecx
inc ecx
cmp byte [esi + ecx], 0
jne 0x100af091
xor edx, edx
test ecx, ecx
je 0x100af0b9
nop
movsx eax, byte [esi + edx]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x100af0a0
cmp edi, 0x6b98ed8f
je 0x100af0cb
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x14], ecx
test ecx, ecx
je 0x100af0d0
mov esi, dword [ebp - 0x18]
jmp 0x100af073
mov ecx, dword [ebp - 0x14]
jmp 0x100af0d2
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
dec eax
cmp eax, 6
ja case.0x100af0dc.2
jmp dword [eax*4 + 0x100aff1c]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 4
mov esi, eax
jmp 0x100af137
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
add esp, 4
mov esi, eax
jmp 0x100af137
vmovss xmm0, dword [ecx + 0xc]
vmovss dword [ebp - 0x18], xmm0
fld dword [ebp - 0x18]
fstp qword [ebp - 0x1c]
vxorpd xmm0, xmm0, xmm0
vroundsd xmm0, xmm0, qword [ebp - 0x1c], 1
vmovsd qword [ebp - 0x1c], xmm0
fld qword [ebp - 0x1c]
fstp dword [ebp - 0x18]
vcvttss2si esi, dword [ebp - 0x18]
jmp 0x100af137
xor esi, esi
jmp 0x100af137
mov esi, dword [ecx + 0xc]
mov eax, dword [0x102d3584]
mov ecx, eax
mov edx, dword [0x102d3588]
mov dword [ebp - 0x28], esi
cmp eax, edx
je 0x100af15c
nop dword [eax + eax]
cmp dword [ecx], 0
je 0x100af15c
add ecx, 8
cmp ecx, edx
jne 0x100af150
vmovss xmm1, dword [0x100e7f18]
cmp ecx, edx
jne 0x100af180
cmp eax, edx
je 0x100af1c7
nop dword [eax]
cmp dword [eax], 1
je 0x100af17c
add eax, 8
cmp eax, edx
jne 0x100af170
cmp eax, edx
je 0x100af1c7
mov eax, dword [0x10346134]
mov ecx, dword [ebp - 0x19c0]
vmovss dword [0x104550a0], xmm1
vmovss xmm0, dword [eax + 0x10]
vmovss dword [0x10455098], xmm0
vaddss xmm0, xmm0, xmm1
vmovss dword [0x1045509c], xmm0
cmp esi, 1
jge 0x100af1bb
mov eax, dword [0x100e0e68]
cmp ecx, 1
je 0x100af1c0
mov eax, dword [0x100e0e48]
mov dword [0x104550a4], eax
jmp 0x100af1cd
mov ecx, dword [ebp - 0x19c0]
mov eax, dword [0x10455250]
mov esi, dword [ebp - 0x19b4]
add eax, 0xffffffbb
xor eax, 0x90ddbbef
cmp byte [eax + esi], 0
je 0x100af41d
cmp ecx, 1
jne 0x100af41d
mov eax, dword [0x103460c8]
lea ecx, [esi + 4]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x19b4], eax
mov eax, dword [esi + 4]
mov eax, dword [eax + 0x20]
call eax
test eax, eax
je 0x100af3fa
mov ecx, dword [0x1034610c]
push eax
mov edx, dword [ecx]
mov edx, dword [edx + 0x78]
call edx
test eax, eax
je 0x100af3fa
mov ecx, dword [eax + 0xb0]
add ecx, eax
je 0x100af3fa
mov eax, dword [ecx + 8]
lea edi, [eax + 0x44]
add edi, ecx
je 0x100af3fa
mov eax, dword [esi + 4]
push ecx
vxorps xmm0, xmm0, xmm0
vmovss dword [esp], xmm0
mov eax, dword [eax + 0x34]
lea ecx, [ebp - 0x19b0]
push pe_nt_image_headers32
push 0x80
push ecx
lea ecx, [esi + 4]
call eax
test al, al
je 0x100af3fa
mov eax, dword [edi]
cmp eax, 0x80
jae 0x100afea0
vmovss xmm4, dword [edi + 0x18]
vmovss xmm2, dword [edi + 0x14]
vmovss xmm3, dword [edi + 0x1c]
lea eax, [eax + eax*2]
add eax, eax
vmulss xmm1, xmm2, dword [ebp + eax*8 - 0x19b0]
vmulss xmm0, xmm4, dword [ebp + eax*8 - 0x19ac]
vaddss xmm1, xmm1, xmm0
vmulss xmm0, xmm3, dword [ebp + eax*8 - 0x19a8]
vmovss xmm7, dword [ebp + eax*8 - 0x19a0]
vaddss xmm0, xmm1, xmm0
vaddss xmm5, xmm0, dword [ebp + eax*8 - 0x19a4]
vmulss xmm0, xmm4, dword [ebp + eax*8 - 0x199c]
vmulss xmm1, xmm2, xmm7
vaddss xmm1, xmm1, xmm0
vmulss xmm0, xmm3, dword [ebp + eax*8 - 0x1998]
vaddss xmm0, xmm1, xmm0
vaddss xmm6, xmm0, dword [ebp + eax*8 - 0x1994]
vmulss xmm1, xmm2, dword [ebp + eax*8 - 0x1990]
vmulss xmm0, xmm4, dword [ebp + eax*8 - 0x198c]
vmovss xmm2, dword [edi + 8]
vaddss xmm1, xmm1, xmm0
vmulss xmm0, xmm3, dword [ebp + eax*8 - 0x1988]
vaddss xmm0, xmm1, xmm0
vaddss xmm4, xmm0, dword [ebp + eax*8 - 0x1984]
vmulss xmm1, xmm2, dword [ebp + eax*8 - 0x19b0]
vmovss xmm0, dword [edi + 0xc]
vmulss xmm0, xmm0, dword [ebp + eax*8 - 0x19ac]
vaddss xmm1, xmm1, xmm0
vmovss xmm0, dword [edi + 0x10]
vmulss xmm0, xmm0, dword [ebp + eax*8 - 0x19a8]
vaddss xmm0, xmm1, xmm0
vaddss xmm0, xmm0, dword [ebp + eax*8 - 0x19a4]
vaddss xmm3, xmm0, xmm5
vmovss xmm5, dword [edi + 0x10]
vmulss xmm1, xmm7, xmm2
vmovss xmm7, dword [edi + 0xc]
vmulss xmm0, xmm7, dword [ebp + eax*8 - 0x199c]
vaddss xmm1, xmm1, xmm0
vmulss xmm0, xmm5, dword [ebp + eax*8 - 0x1998]
vaddss xmm0, xmm1, xmm0
vaddss xmm0, xmm0, dword [ebp + eax*8 - 0x1994]
vaddss xmm2, xmm0, xmm6
vmovss xmm0, dword [ebp + eax*8 - 0x1990]
vmulss xmm1, xmm0, dword [edi + 8]
vmulss xmm0, xmm7, dword [ebp + eax*8 - 0x198c]
vaddss xmm1, xmm1, xmm0
vmulss xmm0, xmm5, dword [ebp + eax*8 - 0x1988]
vaddss xmm0, xmm1, xmm0
vaddss xmm0, xmm0, dword [ebp + eax*8 - 0x1984]
vaddss xmm1, xmm0, xmm4
vmovss xmm0, dword [0x100e7ed8]
vmulss xmm3, xmm3, xmm0
vmulss xmm2, xmm2, xmm0
vmulss xmm0, xmm1, xmm0
vmovss dword [ebp - 0x19f0], xmm0
mov eax, dword [ebp - 0x19f0]
vunpcklps xmm0, xmm3, xmm2
mov dword [ebp - 0x1c], eax
mov al, 1
vmovq qword [ebp - 0x24], xmm0
jmp 0x100af3fc
xor al, al
mov byte [ebp - 0x18], al
test al, al
je 0x100afea5
mov ecx, dword [0x103460c8]
lea eax, [ebp - 0x24]
push 0
push 1
push 2
push eax
call dword [ebp - 0x19b4]
mov eax, dword [ebp - 0x19d0]
mov edi, dword [eax + 8]
mov eax, dword [0x10455418]
test al, 1
jne 0x100af46d
or eax, 1
mov dword [0x10455418], eax
mov edx, 0x990704d7
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x19f8]
call fcn.10057350
push 0xda7d68cb
mov edx, eax
mov ecx, 0x1045541c
call fcn.10057780
push 0x100da880
call fcn.100ce9f1
add esp, 8
mov byte [ebp - 4], 0
mov eax, dword [0x1045541c]
call eax
mov esi, eax
mov dword [ebp - 0x19b4], esi
test edi, edi
je 0x100af4f3
test esi, esi
je 0x100af4f3
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x14], ecx
test ecx, ecx
je 0x100af4f3
nop
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x100af4d9
mov edi, 0x811c9dc5
xor ecx, ecx
nop
inc ecx
cmp byte [ecx + esi], 0
jne 0x100af4b0
xor edx, edx
test ecx, ecx
je 0x100af4d9
nop dword [eax]
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x100af4c0
cmp edi, 0x6f332041
je 0x100af4ee
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x14], ecx
test ecx, ecx
je 0x100af4f3
mov esi, dword [ebp - 0x19b4]
jmp 0x100af490
mov eax, dword [ebp - 0x14]
jmp 0x100af4f5
xor eax, eax
mov edx, dword [eax + 4]
mov ecx, edx
vpxor xmm0, xmm0, xmm0
vmovdqu xmmword [ebp - 0x58], xmm0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100af514
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x58]
call fcn.10036160
mov edx, str.hegrenade
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x58]
call fcn.1005dda0
test al, al
je 0x100af6cb
mov esi, dword [0x100e0e54]
lea ecx, [ebp - 0x1a1c]
vxorps xmm0, xmm0, xmm0
vcvtsi2ss xmm0, xmm0, dword [ebp - 0x19c4]
vcvttss2si eax, xmm0
mov dword [ebp - 0x19b4], eax
mov edx, str.naded__s_for__i_damage___i_health_remaining__n
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x19b4]
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.100b1380
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 9
vmovss xmm0, dword [0x100e7f90]
push ecx
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x14], esi
push ecx
mov edx, eax
lea ecx, [ebp - 0x19cc]
vmovss dword [ebp - 0x18], xmm0
call fcn.1003e610
add esp, 0x14
push eax
mov byte [ebp - 4], 0xa
call fcn.1003e050
mov edi, dword [ebp - 0x19c8]
test edi, edi
je 0x100af5dc
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edi + 4], eax
jne 0x100af5dc
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
lock xadd dword [edi + 8], esi
dec esi
jne 0x100af5dc
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x1a08]
cmp ecx, 0xf
jbe 0x100af61c
mov edx, dword [ebp - 0x1a1c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100af612
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100af612
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100cea0b
add esp, 8
mov edi, dword [ebp - 0x19c0]
mov esi, dword [ebp - 0x19ec]
cmp dword [esi + 0xd4], 0
je 0x100afe17
mov eax, dword [esi + 0xd0]
add eax, dword [esi + 0xd4]
mov byte [ebp - 0x19ec], 0
push dword [ebp - 0x19ec]
sub esp, 0xc
mov ecx, esp
sub esp, 0xc
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ecx + 8], eax
mov eax, dword [esi + 0xc4]
mov dword [ecx], eax
mov ecx, esp
mov eax, dword [esi + 0xd0]
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ecx + 8], eax
mov eax, dword [esi + 0xc4]
mov dword [ecx], eax
lea ecx, [ebp - 0x19f8]
call fcn.100b1300
mov eax, dword [esi + 0xd4]
add esp, 0x1c
add eax, dword [esi + 0xd0]
mov edx, dword [ebp - 0x19f0]
cmp edx, eax
je 0x100afe17
mov eax, dword [ebp - 0x19f8]
test eax, eax
je 0x100afdcc
mov eax, dword [eax]
jmp 0x100afdce
cmp dword [ebp - 0x44], 0xf
lea ecx, [ebp - 0x58]
mov esi, dword [ebp - 0x48]
cmova ecx, dword [ebp - 0x58]
cmp esi, 7
jne 0x100af7ea
mov edx, str.inferno
sub esi, 4
jb 0x100af701
nop dword [eax]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x100af706
add ecx, 4
add edx, 4
sub esi, 4
jae 0x100af6f0
cmp esi, 0xfffffffc
je 0x100af73a
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x100af733
cmp esi, 0xfffffffd
je 0x100af73a
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x100af733
cmp esi, 0xfffffffe
je 0x100af73a
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x100af733
cmp esi, 0xffffffff
je 0x100af73a
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x100af73a
sbb eax, eax
or eax, 1
jmp 0x100af73c
xor eax, eax
test eax, eax
jne 0x100af7ea
mov esi, dword [0x100e0e54]
lea ecx, [ebp - 0x1a1c]
vxorps xmm0, xmm0, xmm0
vcvtsi2ss xmm0, xmm0, dword [ebp - 0x19c4]
vcvttss2si eax, xmm0
mov dword [ebp - 0x19b4], eax
mov edx, str.burned__s_for__i_damage___i_health_remaining__n
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x19b4]
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.100b1380
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xb
vmovss xmm0, dword [0x100e7f90]
push ecx
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x14], esi
push ecx
mov edx, eax
lea ecx, [ebp - 0x19cc]
vmovss dword [ebp - 0x18], xmm0
call fcn.1003e610
add esp, 0x14
push eax
mov byte [ebp - 4], 0xc
call fcn.1003e050
mov edi, dword [ebp - 0x19c8]
test edi, edi
je 0x100af5dc
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edi + 4], eax
jne 0x100af5dc
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
lock xadd dword [edi + 8], esi
dec esi
jne 0x100af5dc
jmp 0x100af5d5
mov eax, dword [0x102d3584]
mov ecx, dword [0x102d3588]
cmp eax, ecx
je 0x100af83c
nop dword [eax]
cmp dword [eax], 3
je 0x100af80c
add eax, 8
cmp eax, ecx
jne 0x100af800
cmp eax, ecx
je 0x100af83c
mov ecx, dword [0x1034612c]
push ecx
vxorps xmm0, xmm0, xmm0
vmovss dword [esp], xmm0
vmovss xmm0, dword [0x100e7f18]
mov eax, dword [ecx]
push 0
push 0x64
push ecx
vmovss dword [esp], xmm0
push str.buttons_arena_switch_press_02.wav
call dword [eax + 0x30]
mov esi, dword [0x100e0e48]
vxorps xmm0, xmm0, xmm0
vcvtsi2ss xmm0, xmm0, dword [ebp - 0x19c4]
vcvttss2si eax, xmm0
mov dword [ebp - 0x19c4], eax
mov dword [ebp - 0x19b4], eax
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x19e8]
push 1
vpxor xmm0, xmm0, xmm0
push 0x100e72a4
vmovdqu xmmword [ebp - 0x19e8], xmm0
mov dword [ebp - 0x19d8], 0
mov dword [ebp - 0x19d4], 0
call fcn.10036160
mov eax, dword [ebp - 0x19c0]
dec eax
mov dword [ebp - 0x19c8], 3
cmp eax, 7
ja case.default.0x100af8aa
jmp dword [eax*4 + 0x100aff38]
push 4
push str.head
jmp 0x100af8e5
push 4
push str.neck
jmp 0x100af8e5
push 5
push str.chest
jmp 0x100af8e5
push 7
push str.stomach
jmp 0x100af8e5
push 4
push str.arms
jmp 0x100af8e5
push 4
push str.legs
lea ecx, [ebp - 0x19e8]
call fcn.10037e50
push 0x98
lea eax, [ebp - 0x248]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x248], 0x100e14e0
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::constructor_void_]
push 0
push 0
lea eax, [ebp - 0x244]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x248]
mov dword [ebp - 0x19c8], 0xb
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char_____bool_]
mov dword [ebp - 4], 0xf
mov eax, dword [ebp - 0x248]
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0x248], 0x100e14dc
mov eax, dword [ebp - 0x248]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x50]
mov dword [ebp + ecx - 0x24c], eax
lea ecx, [ebp - 0x244]
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void_]
mov dword [ebp - 0x244], 0x100dcc70
mov dword [ebp - 0x20c], 0
mov dword [ebp - 0x208], 4
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x10
push eax
lea eax, [ebp - 0x19b4]
push eax
lea eax, [ebp - 0x19e8]
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x248]
call fcn.100b1880
add esp, 0x10
lea eax, [ebp - 0x1a1c]
lea ecx, [ebp - 0x244]
push eax
call fcn.1003e360
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x19c8], 0x1f
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0x248], 0x100e14dc
mov eax, dword [ebp - 0x248]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x50]
mov dword [ebp + ecx - 0x24c], eax
lea ecx, [ebp - 0x244]
call fcn.10035510
lea ecx, [ebp - 0x240]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x11
vmovss xmm0, dword [0x100e7f90]
push eax
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], esi
push eax
lea edx, [ebp - 0x1a1c]
lea ecx, [ebp - 0x19f4]
vmovss dword [ebp - 0x18], xmm0
call fcn.1003e610
add esp, 8
push eax
mov byte [ebp - 4], 0x12
call fcn.1003e050
mov edi, dword [ebp - 0x19f0]
test edi, edi
je 0x100afa8c
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edi + 4], eax
jne 0x100afa8c
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
lock xadd dword [edi + 8], esi
dec esi
jne 0x100afa8c
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x1a08]
cmp ecx, 0xf
jbe 0x100afaca
mov edx, dword [ebp - 0x1a1c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100afac0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100af60c
push ecx
push edx
call fcn.100cea0b
add esp, 8
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x19d4]
mov dword [ebp - 0x1a0c], 0
mov dword [ebp - 0x1a08], 0xf
mov byte [ebp - 0x1a1c], 0
mov dword [ebp - 0x19c8], 0x1d
cmp ecx, 0xf
jbe 0x100afb2d
mov edx, dword [ebp - 0x19e8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100afb23
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100af60c
push ecx
push edx
call fcn.100cea0b
add esp, 8
sub esp, 0x18
mov ecx, esp
vpxor xmm0, xmm0, xmm0
push 4
vmovdqu xmmword [ecx], xmm0
push str.hit
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.10036160
push 0x10336ce8
call fcn.10046bc0
mov esi, dword [0x100e0e60]
lea eax, [ebp - 0x40]
add esp, 4
mov edx, 0x100e72f0
mov ecx, esp
push eax
call fcn.10047960
add esp, 4
push esi
push 0x10336ce8
call fcn.10046d70
mov esi, dword [0x100e0e48]
add esp, 8
mov ecx, esp
vpxor xmm0, xmm0, xmm0
push 7
vmovdqu xmmword [ecx], xmm0
push str.in_the
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.10036160
push esi
push 0x10336ce8
call fcn.10046d70
mov esi, dword [0x100e0e60]
add esp, 0x20
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x19e8]
push 1
vpxor xmm0, xmm0, xmm0
push 0x100e72a4
vmovdqu xmmword [ebp - 0x19e8], xmm0
mov dword [ebp - 0x19d8], 0
mov dword [ebp - 0x19d4], 0
call fcn.10036160
mov edi, dword [ebp - 0x19c0]
mov dword [ebp - 0x19c8], 0x3d
lea eax, [edi - 1]
cmp eax, 7
ja case.default.0x100afc14
jmp dword [eax*4 + 0x100aff58]
push 4
push str.head
jmp 0x100afc4f
push 4
push str.neck
jmp 0x100afc4f
push 5
push str.chest
jmp 0x100afc4f
push 7
push str.stomach
jmp 0x100afc4f
push 4
push str.arms
jmp 0x100afc4f
push 4
push str.legs
lea ecx, [ebp - 0x19e8]
call fcn.10037e50
sub esp, 0x18
lea eax, [ebp - 0x19e8]
mov ecx, esp
mov edx, 0x100e73cc
push eax
call fcn.10047960
add esp, 4
push esi
push 0x10336ce8
call fcn.10046d70
mov byte [ebp - 4], 8
add esp, 0x20
mov ecx, dword [ebp - 0x19d4]
cmp ecx, 0xf
jbe 0x100afcbf
mov edx, dword [ebp - 0x19e8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100afcb5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100af60c
push ecx
push edx
call fcn.100cea0b
add esp, 8
mov esi, dword [0x100e0e48]
sub esp, 0x18
mov ecx, esp
vpxor xmm0, xmm0, xmm0
push 5
vmovdqu xmmword [ecx], xmm0
push str._for
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.10036160
push esi
push 0x10336ce8
call fcn.10046d70
mov eax, dword [ebp - 0x19c4]
add esp, 8
mov esi, dword [0x100e0e4c]
mov ecx, esp
mov dword [ebp - 0x19b4], eax
mov edx, 0x100e1c98
lea eax, [ebp - 0x19b4]
push eax
call fcn.100a2f10
add esp, 4
push esi
push 0x10336ce8
call fcn.10046d70
mov esi, dword [0x100e0e48]
add esp, 8
mov ecx, esp
vpxor xmm0, xmm0, xmm0
push 9
vmovdqu xmmword [ecx], xmm0
push str._damage__
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.10036160
push esi
push 0x10336ce8
call fcn.10046d70
mov esi, dword [0x100e0e4c]
lea eax, [ebp - 0x28]
add esp, 8
mov edx, 0x100e1c98
mov ecx, esp
push eax
call fcn.100a2f10
add esp, 4
push esi
push 0x10336ce8
call fcn.10046d70
mov esi, dword [0x100e0e48]
add esp, 8
mov ecx, esp
vpxor xmm0, xmm0, xmm0
push 0x13
vmovdqu xmmword [ecx], xmm0
push str._health_remaining__n
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.10036160
push esi
push 0x10336ce8
call fcn.10046d70
add esp, 0x20
jmp 0x100af622
xor eax, eax
mov ecx, dword [eax + 8]
mov eax, dword [eax + 4]
dec ecx
and ecx, edx
mov esi, dword [eax + ecx*4]
test esi, esi
je 0x100afe17
cmp dword [esi + 0xc], 0
je 0x100afdef
mov eax, dword [ebp - 0x19bc]
cmp dword [esi + 0x48], eax
jne 0x100afe17
mov ecx, dword [ebp - 0x19d0]
mov dword [esi + 0x6c], edi
push 0
push str.dmg_health
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
mov dword [esi + 0x70], eax
mov eax, dword [0x10346148]
mov eax, dword [eax + 0x16c]
mov dword [esi + 0x68], eax
mov eax, dword [ebp - 0x44]
cmp eax, 0xf
jbe 0x100afe4d
mov edx, dword [ebp - 0x58]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x100afe43
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100af60c
push ecx
push edx
call fcn.100cea0b
add esp, 8
mov eax, dword [ebp - 0x2c]
cmp eax, 0xf
jbe 0x100afe83
mov edx, dword [ebp - 0x40]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x100afe79
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100af60c
push ecx
push edx
call fcn.100cea0b
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100ce58b
mov esp, ebp
pop ebp
ret 4
call fcn.10035b50
call fcn.1002e560
nop
mov edi, 0x28100ae9
ljmp 125567