Function at 0x1800ec990
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1068]
mov eax, 0x1168
call fcn.1801d3d00
sub rsp, rax
movaps xmmword [rsp + 0x1150], xmm6
movaps xmmword [rsp + 0x1140], xmm7
movaps xmmword [rsp + 0x1130], xmm8
movaps xmmword [rsp + 0x1120], xmm9
movaps xmmword [rsp + 0x1110], xmm10
movaps xmmword [rsp + 0x1100], xmm11
movaps xmmword [rsp + 0x10f0], xmm12
movaps xmmword [rsp + 0x10e0], xmm13
movaps xmmword [rsp + 0x10d0], xmm14
movaps xmmword [rsp + 0x10c0], xmm15
mov r13, r8
mov rsi, rdx
lea r8, [rbp + 0x10c8]
lea rdx, [rbp - 0x60]
lea rcx, [0x180285a68]
call fcn.1800d5850
mov rcx, qword [rax]
mov r12, qword [rcx + 0x18]
mov qword [rsp + 0x70], r12
mov rdi, qword [rcx + 0x20]
mov qword [rbp + 0x10b0], rdi
cmp r12, rdi
je 0x1800ed2eb
mov ebx, dword [0x18028ab2c]
mov r15, qword gs:[0x58]
mov r14d, 4
movss xmm11, dword [0x18025df04]
xorps xmm9, xmm9
movss xmm13, dword [0x18025df30]
movss xmm12, dword [0x18025df58]
movss xmm14, dword [0x18025e184]
movss xmm15, dword [0x18025e16c]
movss xmm10, dword [rbp + 0x10d0]
mov rax, rdi
nop dword [rax]
mov rdi, qword [r12]
mov qword [rsp + 0x40], rdi
test rdi, rdi
je 0x1800ed2d9
mov rcx, rdi
call fcn.1800d0270
cmp dword [rax], 2
je 0x1800ed2d2
mov qword [rsp + 0x78], r14
mov r15, qword [r15 + rbx*8]
mov qword [rbp - 0x80], r15
mov eax, dword [r15 + r14]
cmp dword [0x18028c9f4], eax
jle 0x1800ecb94
lea rcx, [0x18028c9f4]
call fcn.1801d1cb0
cmp dword [0x18028c9f4], 0xffffffff
jne 0x1800ecb94
mov rcx, qword [0x18028c720]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
test rax, rax
je 0x1800ecb7d
nop
mov r8, qword [r10 + 0x10]
mov rcx, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rcx
cmp byte [r8 + rcx], 0
jne 0x1800ecb31
xor edx, edx
test rcx, rcx
je 0x1800ecb74
nop dword [rax]
nop word [rax + rax]
movsx eax, byte [r8 + rdx]
xor eax, r9d
imul r9d, eax, 0x1000193
inc rdx
cmp rdx, rcx
jb 0x1800ecb50
cmp r9d, 0x941d2eb9
je 0x1800ecd00
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1800ecb20
xor eax, eax
add eax, 0xc
mov dword [0x18028c9f8], eax
lea rcx, [0x18028c9f4]
call fcn.1801d1c44
movsxd rax, dword [0x18028c9f8]
cmp byte [rax + rdi], 0
je 0x1800ed2c3
mov rcx, rdi
call fcn.1800cb3d0
mov rbx, rax
mov rcx, rdi
call fcn.1800cb5d0
movss xmm6, dword [rax + 8]
mov rcx, rdi
call fcn.1800cb4d0
addss xmm6, dword [rax + 8]
mulss xmm6, xmm11
addss xmm6, dword [rbx + 8]
movss xmm1, dword [rbx + 4]
addss xmm1, xmm9
movss xmm0, dword [rbx]
addss xmm0, xmm9
movss dword [rsp + 0x30], xmm0
movss dword [rsp + 0x34], xmm1
movss dword [rsp + 0x38], xmm6
cmp dword [rbp + 0x10c8], 0x10
jne 0x1800eceac
mov rcx, rdi
call fcn.1800d0270
cmp dword [rax], 1
jne 0x1800ece9d
mov rcx, rdi
call fcn.1800d0170
cmp byte [rax], 0
jne 0x1800ece9d
mov eax, dword [r15 + r14]
cmp dword [0x1802a08a8], eax
jle 0x1800ecc68
lea rcx, [0x1802a08a8]
call fcn.1801d1cb0
cmp dword [0x1802a08a8], 0xffffffff
jne 0x1800ecc68
lea rdx, str.tf_grenadelauncher_livetime
call fcn.1801d0010
mov qword [0x1802a0898], rax
lea rcx, [0x1802a08a8]
call fcn.1801d1c44
mov eax, dword [r15 + r14]
cmp dword [0x1802a0894], eax
jle 0x1800ecca8
lea rcx, [0x1802a0894]
call fcn.1801d1cb0
cmp dword [0x1802a0894], 0xffffffff
jne 0x1800ecca8
lea rdx, str.tf_sticky_radius_ramp_time
call fcn.1801d0010
mov qword [0x1802a08a0], rax
lea rcx, [0x1802a0894]
call fcn.1801d1c44
mov eax, dword [r15 + r14]
cmp dword [0x1802a0890], eax
jle 0x1800ecce8
lea rcx, [0x1802a0890]
call fcn.1801d1cb0
cmp dword [0x1802a0890], 0xffffffff
jne 0x1800ecce8
lea rdx, str.tf_sticky_airdet_radius
call fcn.1801d0010
mov qword [0x1802a0888], rax
lea rcx, [0x1802a0890]
call fcn.1801d1c44
mov rax, qword [0x1802a0898]
test rax, rax
je 0x1800ecd15
mov rax, qword [rax + 0x38]
movss xmm8, dword [rax + 0x54]
jmp 0x1800ecd19
lea r8, str.m_iType
mov rdx, qword [r10 + 0x18]
call fcn.1801d1920
jmp 0x1800ecb7f
movaps xmm8, xmm13
mov rax, qword [0x1802a08a0]
test rax, rax
je 0x1800ecd30
mov rax, qword [rax + 0x38]
movss xmm6, dword [rax + 0x54]
jmp 0x1800ecd38
movss xmm6, dword [0x18025dfa0]
mov rax, qword [0x1802a0888]
test rax, rax
je 0x1800ecd4f
mov rax, qword [rax + 0x38]
movss xmm7, dword [rax + 0x54]
jmp 0x1800ecd57
movss xmm7, dword [0x18025df34]
mov eax, dword [r15 + r14]
cmp dword [0x18028c9fc], eax
jle 0x1800ece00
lea rcx, [0x18028c9fc]
call fcn.1801d1cb0
cmp dword [0x18028c9fc], 0xffffffff
jne 0x1800ece00
mov rcx, qword [0x18028c720]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r10, rax
test rax, rax
je 0x1800ecde9
mov r8, qword [r10 + 0x10]
mov rcx, 0xffffffffffffffff
mov r9d, 0x811c9dc5
inc rcx
cmp byte [r8 + rcx], 0
jne 0x1800ecda6
xor edx, edx
test rcx, rcx
je 0x1800ecde0
nop word [rax + rax]
movsx eax, byte [rdx + r8]
xor eax, r9d
imul r9d, eax, 0x1000193
inc rdx
cmp rdx, rcx
jb 0x1800ecdc0
cmp r9d, 0x941d2eb9
je 0x1800ece30
mov r10, qword [r10 + 0x20]
test r10, r10
jne 0x1800ecd95
xor eax, eax
add eax, 4
mov dword [0x18028c9f0], eax
lea rcx, [0x18028c9fc]
call fcn.1801d1c44
addss xmm6, xmm8
movsxd rcx, dword [0x18028c9f0]
mov rax, qword [0x18028c7a0]
movss xmm0, dword [rax + 0xc]
subss xmm0, dword [rcx + rdi]
ucomiss xmm8, xmm6
jp 0x1800ece42
jne 0x1800ece42
comiss xmm0, xmm6
jb 0x1800ece98
movaps xmm7, xmm12
jmp 0x1800ece98
lea r8, str.m_iType
mov rdx, qword [r10 + 0x18]
call fcn.1801d1920
jmp 0x1800ecdeb
subss xmm0, xmm8
subss xmm6, xmm8
divss xmm0, xmm6
movss dword [rsp + 0x64], xmm0
mov dword [rsp + 0x68], 0x3f800000
mov dword [rsp + 0x60], 0
lea rcx, [rsp + 0x60]
lea rax, [rsp + 0x64]
comiss xmm9, xmm0
cmovbe rcx, rax
lea rax, [rsp + 0x68]
comiss xmm0, xmm12
cmovbe rax, rcx
movaps xmm0, xmm12
subss xmm0, xmm7
mulss xmm0, dword [rax]
addss xmm0, xmm7
movaps xmm7, xmm0
mulss xmm10, xmm7
cmp dword [rbp + 0x10c8], 0x10
jne 0x1800eceac
movaps xmm7, xmm14
jmp 0x1800eceb0
movaps xmm7, xmm15
mulss xmm7, xmm10
mov eax, dword [r15 + r14]
cmp dword [0x18028c8ac], eax
jle 0x1800ecef0
lea rcx, [0x18028c8ac]
call fcn.1801d1cb0
cmp dword [0x18028c8ac], 0xffffffff
jne 0x1800ecef0
mov rax, qword [0x180285630]
mov qword [0x18028c850], rax
lea rcx, [0x18028c8ac]
call fcn.1801d1c44
mov dword [rsp + 0x20], 0x80
xor r9d, r9d
movaps xmm2, xmm7
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x50]
call qword [0x18028c850]
mov ecx, dword [rbp - 0x50]
cmp ecx, dword [rbp - 0x4c]
jge 0x1800ed2b8
movsxd rax, ecx
mov rdi, qword [rbp + rax*8 - 0x48]
test rdi, rdi
je 0x1800ed2b8
cmp rdi, rsi
je 0x1800ed2ae
lea rcx, [rdi + 0x10]
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x1800ecf72
cmp dword [rax + 0x28], 0xf7
jne 0x1800ecf72
mov rcx, rdi
call fcn.1800b6850
cmp byte [rax], 0
jne 0x1800ed2ab
mov rcx, rdi
call fcn.1800ca5e0
mov ecx, dword [rax]
shr ecx, 0xd
test cl, 1
jne 0x1800ed2ab
mov rcx, rdi
call fcn.1800ca2d0
mov ebx, dword [rax]
mov rcx, rsi
call fcn.1800ca2d0
cmp ebx, dword [rax]
je 0x1800ed2ab
mov qword [rsp + 0x54], 0
mov dword [rsp + 0x50], 0
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
mov rbx, rax
mov ecx, dword [r15 + r14]
cmp dword [0x18028c890], ecx
jle 0x1800ecfe4
lea rcx, [0x18028c890]
call fcn.1801d1cb0
cmp dword [0x18028c890], 0xffffffff
jne 0x1800ecfe4
mov rcx, qword [0x180284ff0]
mov qword [0x18028c858], rcx
lea rcx, [0x18028c890]
call fcn.1801d1c44
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call qword [0x18028c858]
movss xmm1, dword [rsp + 0x30]
subss xmm1, dword [rsp + 0x50]
movss xmm2, dword [rsp + 0x34]
subss xmm2, dword [rsp + 0x54]
movss xmm0, dword [rsp + 0x38]
subss xmm0, dword [rsp + 0x58]
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
mulss xmm0, xmm0
addss xmm2, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x1800ed040
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x1800ed048
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm0, xmm7
ja 0x1800ed2ab
lea rcx, [rdi + 0x10]
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x1800ed08e
cmp dword [rax + 0x28], 0xf7
jne 0x1800ed08e
test byte [0x18028f334], 1
je 0x1800ed08e
mov byte [rsp + 0x20], 0
mov r9, r13
mov r8, rsi
mov rdx, rdi
call fcn.1800ccb00
test al, al
jne 0x1800ed08e
mov r13b, 1
jmp 0x1800ed091
xor r13b, r13b
test byte [0x18028f334], 2
je 0x1800ed0b4
lea rcx, [rdi + 0x10]
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x1800ed0b4
cmp dword [rax + 0x28], 0x58
jne 0x1800ed0b4
mov r12b, 1
jmp 0x1800ed0b7
xor r12b, r12b
test byte [0x18028f334], 4
je 0x1800ed0da
lea rcx, [rdi + 0x10]
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x1800ed0da
cmp dword [rax + 0x28], 0x56
jne 0x1800ed0da
mov r15b, 1
jmp 0x1800ed0dd
xor r15b, r15b
test byte [0x18028f334], 8
je 0x1800ed100
lea rcx, [rdi + 0x10]
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x1800ed100
cmp dword [rax + 0x28], 0x59
jne 0x1800ed100
mov r14b, 1
jmp 0x1800ed103
xor r14b, r14b
test byte [0x18028f334], 0x10
je 0x1800ed14a
lea rcx, [rdi + 0x10]
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x1800ed14a
cmp dword [rax + 0x28], 0xd9
jne 0x1800ed14a
mov rcx, rdi
call fcn.1800d0270
cmp dword [rax], 1
jne 0x1800ed14a
mov eax, dword [0x18028c820]
cmp eax, 0x47e
je 0x1800ed145
cmp eax, 0x82
jne 0x1800ed14a
mov sil, 1
jmp 0x1800ed14d
xor sil, sil
test byte [0x18028f334], 0x20
je 0x1800ed188
lea rcx, [rdi + 0x10]
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x1800ed188
mov ecx, dword [rax + 0x28]
sub ecx, 0x30
je 0x1800ed184
sub ecx, 0x19
je 0x1800ed184
sub ecx, 9
je 0x1800ed184
sub ecx, 0xea
je 0x1800ed184
cmp ecx, 0x26
jne 0x1800ed188
mov bl, 1
jmp 0x1800ed18a
xor bl, bl
test byte [0x18028f334], 0x40
je 0x1800ed1b6
lea rcx, [rdi + 0x10]
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x1800ed1b6
mov ecx, dword [rax + 0x28]
sub ecx, 0xd5
je 0x1800ed1b2
cmp ecx, 0x45
jne 0x1800ed1b6
mov al, 1
jmp 0x1800ed1b8
xor al, al
test r13b, r13b
jne 0x1800ed234
test r12b, r12b
jne 0x1800ed1dd
test r15b, r15b
jne 0x1800ed1dd
test r14b, r14b
jne 0x1800ed1dd
test bl, bl
jne 0x1800ed1dd
test al, al
jne 0x1800ed1dd
test sil, sil
je 0x1800ed294
mov rcx, rdi
call fcn.1800cb3d0
mov rbx, rax
mov rcx, rdi
call fcn.1800cb5d0
movss xmm6, dword [rax + 8]
mov rcx, rdi
call fcn.1800cb4d0
addss xmm6, dword [rax + 8]
mulss xmm6, xmm11
movss xmm0, dword [rbx]
addss xmm0, xmm9
movss dword [rbp - 0x78], xmm0
movss xmm1, dword [rbx + 4]
addss xmm1, xmm9
movss dword [rbp - 0x74], xmm1
addss xmm6, dword [rbx + 8]
movss dword [rbp - 0x70], xmm6
lea r9, [rbp - 0x78]
jmp 0x1800ed27a
mov rcx, rdi
call fcn.1800cb3d0
mov rbx, rax
lea rdx, [rbp - 0x60]
mov rcx, rdi
call fcn.1800cbed0
movss xmm0, dword [rbx]
addss xmm0, dword [rax]
movss dword [rbp - 0x6c], xmm0
movss xmm1, dword [rbx + 4]
addss xmm1, dword [rax + 4]
movss dword [rbp - 0x68], xmm1
movss xmm0, dword [rbx + 8]
addss xmm0, dword [rax + 8]
movss dword [rbp - 0x64], xmm0
lea r9, [rbp - 0x6c]
lea r8, [rsp + 0x30]
mov rdx, rdi
mov rcx, qword [rsp + 0x40]
call fcn.1801cec80
test al, al
jne 0x1800ed340
mov r13, qword [rbp + 0x10c0]
mov r15, qword [rbp - 0x80]
mov r14, qword [rsp + 0x78]
mov rsi, qword [rbp + 0x10b8]
mov ecx, dword [rbp - 0x50]
inc ecx
mov dword [rbp - 0x50], ecx
jmp 0x1800ecf10
mov ebx, dword [0x18028ab2c]
mov r12, qword [rsp + 0x70]
mov r15, qword gs:[0x58]
mov r14d, 4
mov rax, qword [rbp + 0x10b0]
add r12, 8
mov qword [rsp + 0x70], r12
cmp r12, rax
jne 0x1800ecab0
xor al, al
lea r11, [rsp + 0x1168]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0x98]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
cmp dword [0x18028c820], 0x82
jne 0x1800ed476
mov rcx, qword [rbp + 0x10b8]
call fcn.1800cb3d0
mov rbx, rax
mov rcx, qword [rbp + 0x10b8]
call fcn.1800cb6d0
movss xmm8, dword [rbx]
addss xmm8, dword [rax]
subss xmm8, dword [rsp + 0x30]
movss xmm7, dword [rbx + 4]
addss xmm7, dword [rax + 4]
subss xmm7, dword [rsp + 0x34]
movss xmm6, dword [rbx + 8]
addss xmm6, dword [rax + 8]
subss xmm6, dword [rsp + 0x38]
movaps xmm1, xmm7
mulss xmm1, xmm7
movaps xmm0, xmm8
mulss xmm0, xmm8
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x1800ed3c1
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x1800ed3c9
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
divss xmm6, xmm0
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_atanf
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
mulsd xmm1, qword [0x18025dff8]
cvtpd2ps xmm1, xmm1
movss dword [rsp + 0x40], xmm1
divss xmm7, xmm8
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_atanf
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
mulsd xmm1, qword [0x18025dff8]
cvtpd2ps xmm2, xmm1
movss dword [rsp + 0x44], xmm2
mov dword [rsp + 0x48], 0
comiss xmm8, xmm9
jb 0x1800ed430
addss xmm2, dword [0x18025e198]
movss dword [rsp + 0x44], xmm2
lea rcx, [rsp + 0x40]
call fcn.1800cf660
lea rdx, [rsp + 0x40]
mov rbx, qword [rbp + 0x10d8]
mov rcx, rbx
call fcn.1801cf470
movss xmm0, dword [rsp + 0x40]
movss dword [rbx + 0x10], xmm0
movss xmm1, dword [rsp + 0x44]
movss dword [rbx + 0x14], xmm1
movss xmm0, dword [rsp + 0x48]
movss dword [rbx + 0x18], xmm0
mov byte [0x18028c9b8], 1
mov al, 1
jmp 0x1800ed2ed