Function at 0x1008541b
Capabilities:
Encode data using xor
Encrypt data using speck
Hash data using fnv

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100abd63
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x168
mov eax, dword [0x100bf040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebx + 8]
lea eax, [ebp - 0xc4]
push 0x30
push 0
push eax
mov dword [ebp - 0x1c], esi
call sub.VCRUNTIME140.dll_memset
xorps xmm0, xmm0
mov dword [ebp - 0xc8], 0
add esp, 0xc
movups xmmword [ebp - 0xe8], xmm0
movups xmmword [ebp - 0xd8], xmm0
test esi, esi
je 0x100861e6
cmp dword [0x100bf2a8], 0
je 0x100861e6
mov eax, dword [0x10104450]
mov edi, dword [esi + 8]
test al, 1
jne 0x1008530d
or eax, 1
mov dword [0x10104450], eax
mov edx, 0x990704d7
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x84]
call fcn.100439e0
push 0xda7d68cb
mov edx, eax
mov ecx, 0x10104454
call fcn.10043e30
add esp, 4
push 0x100ad380
call fcn.100a3c62
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x10104454]
call eax
mov esi, eax
mov dword [ebp - 0xec], esi
test edi, edi
je 0x10085393
test esi, esi
je 0x10085393
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x10085393
nop
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x10085379
mov edi, 0x811c9dc5
xor ecx, ecx
nop
inc ecx
cmp byte [esi + ecx], 0
jne 0x10085350
xor edx, edx
test ecx, ecx
je 0x10085379
nop dword [eax]
movsx eax, byte [esi + edx]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x10085360
cmp edi, 0x11ab48ff
je 0x1008538e
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x10085393
mov esi, dword [ebp - 0xec]
jmp 0x10085330
mov ecx, dword [ebp - 0x18]
jmp 0x10085395
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
movss xmm5, dword [0x100b5054]
dec eax
cmp eax, 6
ja case.0x100853a7.2
jmp dword [eax*4 + 0x10086418]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 4
mov edx, eax
jmp 0x10085422
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
add esp, 4
mov edx, eax
jmp 0x10085422
movss xmm4, dword [ecx + 0xc]
movss xmm3, dword [0x100b5218]
movaps xmm0, xmm4
movss xmm2, dword [0x100b5210]
andps xmm3, xmm4
xorps xmm0, xmm3
movaps xmm1, xmm4
cmpltss xmm0, xmm2
andps xmm2, xmm0
orps xmm2, xmm3
addss xmm1, xmm2
subss xmm1, xmm2
movaps xmm0, xmm1
subss xmm0, xmm4
cmpnless xmm0, xmm3
andps xmm0, xmm5
subss xmm1, xmm0
cvttss2si edx, xmm1
jmp 0x10085422
xor edx, edx
jmp 0x10085422
mov edx, dword [ecx + 0xc]
mov ecx, dword [0x100fef80]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
call eax
mov esi, dword [0x100fef80]
mov edi, eax
mov ecx, dword [esi]
mov edx, dword [ecx + 0x30]
mov ecx, esi
call edx
cmp edi, eax
jne 0x100861e6
mov edi, dword [ebp - 0x1c]
mov eax, dword [0x10104450]
mov edi, dword [edi + 8]
test al, 1
jne 0x1008549f
or eax, 1
mov dword [0x10104450], eax
mov edx, 0x990704d7
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x84]
call fcn.100439e0
push 0xda7d68cb
mov edx, eax
mov ecx, 0x10104454
call fcn.10043e30
add esp, 4
push 0x100ad380
call fcn.100a3c62
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x10104454]
call eax
mov esi, eax
mov dword [ebp - 0xec], esi
test edi, edi
je 0x10085523
test esi, esi
je 0x10085523
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x10085523
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x10085509
mov edi, 0x811c9dc5
xor ecx, ecx
nop
inc ecx
cmp byte [ecx + esi], 0
jne 0x100854e0
xor edx, edx
test ecx, ecx
je 0x10085509
nop dword [eax]
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x100854f0
cmp edi, 0xfd0c5087
je 0x1008551e
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x10085523
mov esi, dword [ebp - 0xec]
jmp 0x100854c0
mov ecx, dword [ebp - 0x18]
jmp 0x10085525
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
dec eax
cmp eax, 6
ja case.0x1008552f.4
jmp dword [eax*4 + 0x10086434]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atof]
fstp dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x18]
add esp, 4
jmp 0x10085585
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtof]
fstp dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x18]
add esp, 4
jmp 0x10085585
movss xmm0, dword [ecx + 0xc]
jmp 0x10085585
movd xmm0, dword [ecx + 0xc]
cvtdq2ps xmm0, xmm0
jmp 0x10085585
mov ecx, dword [ecx + 4]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
call fcn.100a4d10
jmp 0x10085585
xorps xmm0, xmm0
mov eax, dword [ebp - 0x1c]
movss dword [ebp - 0xf4], xmm0
mov edi, dword [eax + 8]
mov eax, dword [0x10104450]
test al, 1
jne 0x100855e3
or eax, 1
mov dword [0x10104450], eax
mov edx, 0x990704d7
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x84]
call fcn.100439e0
push 0xda7d68cb
mov edx, eax
mov ecx, 0x10104454
call fcn.10043e30
add esp, 4
push 0x100ad380
call fcn.100a3c62
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x10104454]
call eax
mov esi, eax
mov dword [ebp - 0xec], esi
test edi, edi
je 0x10085663
test esi, esi
je 0x10085663
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x10085663
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x10085649
mov edi, 0x811c9dc5
xor ecx, ecx
inc ecx
cmp byte [ecx + esi], 0
jne 0x10085622
xor edx, edx
test ecx, ecx
je 0x10085649
nop
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x10085630
cmp edi, 0xfc0c4ef4
je 0x1008565e
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x10085663
mov esi, dword [ebp - 0xec]
jmp 0x10085604
mov ecx, dword [ebp - 0x18]
jmp 0x10085665
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
dec eax
cmp eax, 6
ja case.0x1008566f.4
jmp dword [eax*4 + 0x10086450]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atof]
fstp dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x18]
add esp, 4
jmp 0x100856c5
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtof]
fstp dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x18]
add esp, 4
jmp 0x100856c5
movss xmm0, dword [ecx + 0xc]
jmp 0x100856c5
movd xmm0, dword [ecx + 0xc]
cvtdq2ps xmm0, xmm0
jmp 0x100856c5
mov ecx, dword [ecx + 4]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
call fcn.100a4d10
jmp 0x100856c5
xorps xmm0, xmm0
mov eax, dword [ebp - 0x1c]
movss dword [ebp - 0xf8], xmm0
mov edi, dword [eax + 8]
mov eax, dword [0x10104450]
test al, 1
jne 0x10085723
or eax, 1
mov dword [0x10104450], eax
mov edx, 0x990704d7
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x84]
call fcn.100439e0
push 0xda7d68cb
mov edx, eax
mov ecx, 0x10104454
call fcn.10043e30
add esp, 4
push 0x100ad380
call fcn.100a3c62
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x10104454]
call eax
mov esi, eax
mov dword [ebp - 0xec], esi
test edi, edi
je 0x100857a3
test esi, esi
je 0x100857a3
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x100857a3
mov eax, dword [esi]
mov edx, dword [eax + 0x10]
mov eax, dword [ecx]
mov ecx, esi
and eax, 0xffffff
push eax
call edx
mov esi, eax
test esi, esi
je 0x10085789
mov edi, 0x811c9dc5
xor ecx, ecx
inc ecx
cmp byte [ecx + esi], 0
jne 0x10085762
xor edx, edx
test ecx, ecx
je 0x10085789
nop
movsx eax, byte [edx + esi]
inc edx
xor eax, edi
imul edi, eax, 0x1000193
cmp edx, ecx
jb 0x10085770
cmp edi, 0xff0c53ad
je 0x1008579e
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x100857a3
mov esi, dword [ebp - 0xec]
jmp 0x10085744
mov ecx, dword [ebp - 0x18]
jmp 0x100857a5
xor ecx, ecx
movsx eax, byte [ecx + 0x10]
dec eax
cmp eax, 6
ja case.0x100857af.4
jmp dword [eax*4 + 0x1008646c]
push dword [ecx + 4]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atof]
fstp dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x18]
add esp, 4
jmp 0x10085805
push dword [ecx + 8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtof]
fstp dword [ebp - 0x18]
movss xmm0, dword [ebp - 0x18]
add esp, 4
jmp 0x10085805
movss xmm0, dword [ecx + 0xc]
jmp 0x10085805
movd xmm0, dword [ecx + 0xc]
cvtdq2ps xmm0, xmm0
jmp 0x10085805
mov ecx, dword [ecx + 4]
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
call fcn.100a4d10
jmp 0x10085805
xorps xmm0, xmm0
mov eax, dword [0x100ff1d4]
mov esi, dword [0x100bf2a8]
add eax, 0xffffffc2
xor eax, 0x7f685683
movss dword [ebp - 0xf0], xmm0
cmp byte [0x100c7280], 0
movd xmm0, dword [eax + esi]
mov eax, dword [0x100fefdc]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [eax + 0x20]
movss dword [ebp - 0x18], xmm0
je 0x10085a6f
mov dword [ebp - 0x84], 0
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0
mov eax, dword [esi]
push ecx
mov ecx, esi
mov eax, dword [eax + 0x28c]
call eax
cmp dword [esi + 0x39e1], 0
je 0x100859c3
mov eax, dword [0x100ff120]
mov edi, dword [esi + eax]
test edi, edi
je 0x100859c3
mov ecx, dword [edi + 0x60]
test ecx, ecx
je 0x100859c3
cmp byte [edi + 0x109], 0
xorps xmm1, xmm1
jne 0x100858eb
mov eax, dword [0x100ff1dc]
add eax, 0xffffffc0
xor eax, 0x7f685685
movss xmm0, dword [eax + ecx]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x100858eb
mov eax, dword [0x100ff250]
add eax, 0xffffffa3
xor eax, 0x7f6856a2
mov eax, dword [eax + ecx]
mov ecx, dword [0x100fef84]
push ecx
mov edx, dword [ecx]
mov esi, dword [edx + 0x10]
mov edx, esp
mov dword [edx], eax
call esi
test eax, eax
jne 0x100859c3
xorps xmm1, xmm1
mov ecx, dword [0x100ff244]
mov eax, dword [edi + 0x60]
add ecx, 0xffffffa6
xor ecx, 0x7f68569f
mov eax, dword [ecx + eax]
test eax, eax
je 0x100859c3
movss xmm3, dword [eax + 0x1ac]
movss xmm2, dword [ebp - 0x7c]
cvtps2pd xmm3, xmm3
cvtps2pd xmm0, xmm2
addsd xmm3, qword [0x100b5098]
comisd xmm0, xmm3
movsd qword [ebp - 0x20], xmm3
jbe 0x100859c3
subsd xmm0, xmm3
xorps xmm4, xmm4
cvtpd2ps xmm0, xmm0
subss xmm0, dword [0x100b50f4]
cvtps2pd xmm0, xmm0
mulsd xmm0, qword [0x100b5078]
cvtpd2ps xmm0, xmm0
comiss xmm0, xmm1
jb 0x1008598a
sub esp, 8
mov dword [esp + 4], 0x3f800000
movss dword [esp], xmm0
call dword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_fminf]
movss xmm2, dword [ebp - 0x7c]
add esp, 8
movsd xmm3, qword [ebp - 0x20]
fstp dword [ebp - 0xec]
movss xmm4, dword [ebp - 0xec]
movaps xmm1, xmm4
mulss xmm1, xmm4
cvtps2pd xmm2, xmm2
movaps xmm0, xmm1
addss xmm1, xmm1
mulss xmm0, dword [0x100b50d8]
subsd xmm3, xmm2
mulss xmm1, xmm4
subss xmm0, xmm1
cvtps2pd xmm0, xmm0
mulsd xmm0, xmm3
addsd xmm0, xmm2
cvtpd2ps xmm0, xmm0
movss dword [ebp - 0x7c], xmm0
mov ecx, dword [0x100ff1d4]
mov eax, dword [0x100bf2a8]
add ecx, 0xffffffc2
movss xmm5, dword [ebp - 0xf4]
xor ecx, 0x7f685683
movss xmm4, dword [ebp - 0xf8]
movss xmm3, dword [ebp - 0xf0]
movq xmm0, qword [ebp - 0x84]
mov ecx, dword [ecx + eax]
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x108], eax
mov eax, dword [0x100ffc50]
movss dword [ebp - 0x11c], xmm5
movss dword [ebp - 0x118], xmm4
movss dword [ebp - 0x114], xmm3
movq qword [ebp - 0x110], xmm0
mov dword [ebp - 0x104], ecx
mov word [ebp - 0x100], 0
cmp eax, dword [0x100ffc54]
je 0x10085a5d
movups xmm0, xmmword [ebp - 0x11c]
movups xmmword [eax], xmm0
movups xmm0, xmmword [ebp - 0x10c]
movups xmmword [eax + 0x10], xmm0
add dword [0x100ffc50], 0x20
jmp 0x10085a7f
lea ecx, [ebp - 0x11c]
push ecx
push eax
mov ecx, 0x100ffc4c
call fcn.100878d0
movss xmm5, dword [ebp - 0xf4]
movss xmm4, dword [ebp - 0xf8]
mov eax, dword [0x100ffc48]
test eax, eax
je 0x100861e6
mov ecx, dword [0x100ffc44]
xor esi, esi
movss xmm2, dword [0x100b5214]
lea edx, [eax + ecx]
cmp ecx, edx
je 0x100861e6
mov eax, dword [0x100ffc40]
mov edi, dword [0x100ffc3c]
dec eax
movss xmm3, dword [ebp - 0x18]
movss xmm6, dword [0x100b5054]
mov dword [ebp - 0xec], eax
nop word [eax + eax]
mov eax, ecx
and eax, dword [ebp - 0xec]
mov eax, dword [edi + eax*4]
cmp byte [eax + 0x20], 0
jne 0x10085b06
movss xmm1, dword [eax + 0xc]
movaps xmm0, xmm3
addss xmm1, dword [eax + 8]
subss xmm0, xmm1
call fcn.10035460
comiss xmm0, xmm6
ja 0x10085b06
comiss xmm2, xmm0
jbe 0x10085b06
movaps xmm2, xmm0
mov esi, eax
inc ecx
cmp ecx, edx
jne 0x10085ad0
movss xmm3, dword [ebp - 0xf0]
mov dword [ebp - 0x1c], esi
test esi, esi
je 0x100861e6
mov byte [esi + 0x20], 1
mov ecx, dword [0x100ff1d4]
mov eax, dword [0x100bf2a8]
add ecx, 0xffffffc2
xor ecx, 0x7f685683
mov dword [ebp - 0x8c], esi
movss dword [ebp - 0x84], xmm5
movss dword [ebp - 0x80], xmm4
movss dword [ebp - 0x7c], xmm3
mov eax, dword [ecx + eax]
mov ecx, dword [0x100ffc60]
mov dword [ebp - 0x88], eax
mov eax, dword [0x100ffc68]
inc eax
cmp ecx, eax
ja 0x10085b78
push ecx
mov ecx, 0x100ffc58
call fcn.10087550
mov ecx, dword [0x100ffc60]
mov edx, dword [0x100ffc5c]
lea edi, [ecx - 1]
and edi, dword [0x100ffc64]
lea eax, [ecx - 1]
mov dword [0x100ffc64], edi
cmove edi, ecx
dec edi
and eax, edi
mov dword [ebp - 0xec], eax
cmp dword [edx + eax*4], 0
jne 0x10085bc7
push 0x14
call fcn.100a3818
mov ecx, dword [0x100ffc5c]
add esp, 4
mov edx, dword [ebp - 0xec]
mov dword [ecx + edx*4], eax
mov ecx, dword [0x100ffc60]
mov edx, dword [0x100ffc5c]
movups xmm0, xmmword [ebp - 0x8c]
lea eax, [ecx - 1]
and eax, edi
mov ecx, dword [edx + eax*4]
mov eax, dword [ebp - 0x7c]
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], eax
mov eax, dword [0x100ffc68]
inc eax
mov dword [0x100ffc64], edi
mov dword [0x100ffc68], eax
cmp eax, 0x80
jbe 0x10085c1d
mov dword [ebp - 0x1c], esi
nop word [eax + eax]
add eax, 0xffffffff
mov dword [0x100ffc68], eax
je 0x10085c13
cmp eax, 0x80
ja 0x10085c00
jmp 0x10085c1d
mov dword [0x100ffc64], 0
cmp dword [0x100cfb2c], 1
je 0x100861e6
mov esi, dword [esi]
mov dword [ebp - 0xec], esi
test esi, esi
je 0x100861e6
mov eax, dword [0x100ff1ac]
add eax, 0xffffffcc
xor eax, 0x7f685679
cmp dword [eax + esi], 0
jne 0x100861e6
mov eax, dword [esi + 8]
lea ecx, [esi + 8]
mov eax, dword [eax + 0x28]
call eax
imul eax, eax, 0xac0
lea edi, [eax + 0x100d092c]
test edi, edi
je 0x100861e6
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 4]
cmp dword [eax + 0x3c4], 0
je 0x100861e6
push 0x44
lea eax, [ebp - 0x68]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x68]
call fcn.10020c00
mov ecx, dword [0x100ff244]
add ecx, 0xffffffa6
xor ecx, 0x7f68569f
mov eax, dword [ecx + esi]
mov dword [ebp - 0x68], eax
mov eax, dword [ecx + esi + 0xc]
mov ecx, esi
mov dword [ebp - 0x64], eax
mov eax, dword [0x100ff170]
add eax, 0xffffffdb
xor eax, 0x7f68566a
movss xmm0, dword [eax + esi]
movss dword [ebp - 0x60], xmm0
movss xmm0, dword [eax + esi + 4]
movss dword [ebp - 0x5c], xmm0
movss xmm0, dword [eax + esi + 8]
mov eax, dword [0x100ff17c]
add eax, 0xffffffd8
movss dword [ebp - 0x58], xmm0
xor eax, 0x7f68566d
movss xmm0, dword [eax + esi]
movss dword [ebp - 0x48], xmm0
movss xmm0, dword [eax + esi + 4]
movss dword [ebp - 0x44], xmm0
movss xmm0, dword [eax + esi + 8]
mov eax, dword [0x100ff180]
add eax, 0xffffffd7
movss dword [ebp - 0x40], xmm0
xor eax, 0x7f68566e
movss xmm0, dword [eax + esi]
movss dword [ebp - 0x3c], xmm0
movss xmm0, dword [eax + esi + 4]
movss dword [ebp - 0x38], xmm0
movss xmm0, dword [eax + esi + 8]
movss dword [ebp - 0x34], xmm0
mov eax, dword [esi]
mov eax, dword [eax + 0x28]
call eax
mov ecx, esi
movss xmm0, dword [eax]
movss dword [ebp - 0x54], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x50], xmm0
movss xmm0, dword [eax + 8]
movss dword [ebp - 0x4c], xmm0
mov eax, dword [esi]
mov eax, dword [eax + 0x2c]
call eax
movss xmm0, dword [eax]
movss dword [ebp - 0x30], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x2c], xmm0
movss xmm0, dword [eax + 8]
mov eax, dword [ebp - 0x1c]
movss dword [ebp - 0x28], xmm0
mov edx, dword [eax + 4]
mov dword [ebp - 0x18], edx
cmp byte [edx + 0x3c0], 0
je 0x10085dd4
cmp byte [edx + 0x10], 0
jne 0x10085dd4
mov esi, dword [ebp - 0x18]
mov edx, dword [0x100ff244]
add edx, 0xffffffa6
xor edx, 0x7f68569f
mov ecx, dword [esi]
mov eax, dword [edx + ecx + 0xc]
lea eax, [eax + eax*2]
shl eax, 4
push eax
push dword [esi + 0x3c4]
push dword [edx + ecx]
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, esi
mov ecx, dword [0x100ff170]
lea esi, [edx + 0x3d0]
mov eax, dword [esi]
add ecx, 0xffffffdb
xor ecx, 0x7f68566a
add ecx, dword [edx]
mov dword [ecx], eax
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov eax, dword [esi + 8]
mov dword [ecx + 8], eax
mov ecx, dword [0x100ff17c]
mov eax, dword [edx + 0x44]
add ecx, 0xffffffd8
xor ecx, 0x7f68566d
add ecx, dword [edx]
mov dword [ecx], eax
mov eax, dword [edx + 0x48]
mov dword [ecx + 4], eax
mov eax, dword [edx + 0x4c]
mov dword [ecx + 8], eax
mov ecx, dword [0x100ff180]
mov eax, dword [edx + 0x50]
add ecx, 0xffffffd7
xor ecx, 0x7f68566e
add ecx, dword [edx]
mov dword [ecx], eax
mov eax, dword [edx + 0x54]
mov dword [ecx + 4], eax
mov eax, dword [edx + 0x58]
mov dword [ecx + 8], eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [0x100ff094]
lea eax, [ecx + 0x68]
mov ecx, dword [ecx]
push eax
call edx
mov eax, dword [0x100ff098]
push esi
mov esi, dword [ebp - 0x18]
mov ecx, dword [esi]
call eax
mov eax, dword [ebp - 0x1c]
movss xmm4, dword [ebp - 0xf4]
movss xmm3, dword [ebp - 0xf8]
movss xmm2, dword [ebp - 0xf0]
movss xmm5, dword [eax + 0x14]
movss xmm6, dword [eax + 0x18]
subss xmm4, xmm5
movss xmm7, dword [eax + 0x1c]
subss xmm3, xmm6
subss xmm2, xmm7
movaps xmm0, xmm4
movaps xmm1, xmm3
mulss xmm0, xmm4
mulss xmm1, xmm3
addss xmm0, xmm1
movaps xmm1, xmm2
mulss xmm1, xmm2
addss xmm0, xmm1
call fcn.1001fe00
addss xmm0, dword [0x100b4f64]
movss xmm1, dword [0x100b5054]
mov dword [ebp - 0x84], 0
divss xmm1, xmm0
movss xmm0, dword [0x100b5204]
mulss xmm2, xmm1
mulss xmm4, xmm1
mulss xmm3, xmm1
mulss xmm2, xmm0
mulss xmm4, xmm0
mulss xmm3, xmm0
movss dword [ebp - 0x90], xmm4
movss dword [ebp - 0x88], xmm2
movss dword [ebp - 0x8c], xmm3
movaps xmm2, xmmword [ebp - 0x90]
movaps xmm1, xmm2
movaps xmmword [ebp - 0x160], xmm2
shufps xmm1, xmm2, 0x55
movaps xmm0, xmm2
mulss xmm1, xmm1
mulss xmm0, xmm2
mov byte [ebp - 0x12b], 1
shufps xmm2, xmm2, 0xaa
mulss xmm2, xmm2
addss xmm1, xmm0
addss xmm1, xmm2
ucomiss xmm1, dword [0x100b4f50]
lahf
test ah, 0x44
jp 0x10085f56
mov byte [ebp - 0x12b], 0
mov ecx, dword [0x100fef9c]
lea edx, [ebp - 0xe8]
mov esi, dword [ebp - 0xec]
push edx
mov dword [ebp - 0x130], 0
lea edx, [ebp - 0x170]
mov byte [ebp - 0x12c], 1
movss dword [ebp - 0x170], xmm5
movss dword [ebp - 0x16c], xmm6
movss dword [ebp - 0x168], xmm7
mov dword [ebp - 0x164], 0
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x140], 0
mov eax, dword [ecx]
push esi
push 0x4600400b
push edx
mov eax, dword [eax + 0xc]
call eax
push 3
push dword [0x100cf2dc]
push dword [0x100cf2d8]
call fcn.100a36c0
cmp eax, dword [0x100cf2dc]
je 0x10086206
mov ecx, dword [ebp - 0x9c]
test ecx, ecx
je 0x1008602f
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
test al, al
je 0x1008602f
cmp dword [ebp - 0x9c], esi
je 0x10086129
mov esi, dword [0x100b0674]
lea ecx, [ebp - 0x90]
push 0x1a
xorps xmm0, xmm0
mov dword [ebp - 0x80], 0
push str.missed_shot_due_to_spread_n
movups xmmword [ebp - 0x90], xmm0
mov dword [ebp - 0x7c], 0
call fcn.100270f0
lea eax, [ebp - 0x18]
mov dword [ebp - 4], 4
push eax
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x18], 0x40a00000
push eax
lea edx, [ebp - 0x90]
mov dword [ebp - 0x1c], esi
lea ecx, [ebp - 0xfc]
call fcn.1002b5e0
add esp, 8
push eax
mov byte [ebp - 4], 5
call fcn.1002b090
mov byte [ebp - 4], 4
mov esi, dword [ebp - 0xf8]
test esi, esi
je 0x100860c5
or edi, 0xffffffff
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x100860c5
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lock xadd dword [esi + 8], edi
dec edi
jne 0x100860c5
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
sub esp, 0x18
lea eax, [ebp - 0x90]
mov ecx, esp
push eax
call fcn.1002b210
push 0x100bf2a8
call fcn.10032b10
mov dword [ebp - 4], 0xffffffff
add esp, 0x1c
mov ecx, dword [ebp - 0x7c]
cmp ecx, 0xf
jbe 0x10086123
mov edx, dword [ebp - 0x90]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10086119
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10086119
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100a3c77
add esp, 8
mov esi, dword [ebp - 0xec]
mov ecx, dword [0x100ff244]
mov eax, dword [ebp - 0x68]
add ecx, 0xffffffa6
xor ecx, 0x7f68569f
mov dword [ecx + esi], eax
mov eax, dword [ebp - 0x64]
mov dword [ecx + esi + 0xc], eax
lea ecx, [ebp - 0x30]
mov eax, dword [0x100ff170]
movss xmm0, dword [ebp - 0x60]
add eax, 0xffffffdb
xor eax, 0x7f68566a
push ecx
mov ecx, esi
movss dword [eax + esi], xmm0
movss xmm0, dword [ebp - 0x5c]
movss dword [eax + esi + 4], xmm0
movss xmm0, dword [ebp - 0x58]
movss dword [eax + esi + 8], xmm0
mov eax, dword [0x100ff17c]
movss xmm0, dword [ebp - 0x48]
add eax, 0xffffffd8
xor eax, 0x7f68566d
movss dword [eax + esi], xmm0
movss xmm0, dword [ebp - 0x44]
movss dword [eax + esi + 4], xmm0
movss xmm0, dword [ebp - 0x40]
movss dword [eax + esi + 8], xmm0
mov eax, dword [0x100ff180]
movss xmm0, dword [ebp - 0x3c]
add eax, 0xffffffd7
xor eax, 0x7f68566e
movss dword [eax + esi], xmm0
movss xmm0, dword [ebp - 0x38]
movss dword [eax + esi + 4], xmm0
movss xmm0, dword [ebp - 0x34]
movss dword [eax + esi + 8], xmm0
mov eax, dword [0x100ff094]
call eax
mov eax, dword [0x100ff098]
lea ecx, [ebp - 0x60]
push ecx
mov ecx, esi
call eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100a37fc
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4
cmp dword [ebp - 0x9c], esi
jne 0x10086129
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 4]
mov eax, dword [eax + 0x424]
cmp eax, 0xc
jne 0x10086234
inc dword [edi + 0x4a8]
inc dword [edi + 0x480]
jmp 0x10086129
cmp eax, 0x1b
jne 0x1008624a
inc dword [edi + 0x514]
inc dword [edi + 0x480]
jmp 0x10086129
cmp eax, 0x1c
jne 0x10086260
inc dword [edi + 0x518]
inc dword [edi + 0x480]
jmp 0x10086129
cmp eax, 0x1f
jne 0x10086276
inc dword [edi + 0x528]
inc dword [edi + 0x480]
jmp 0x10086129
cmp eax, 0x19
jne 0x1008628c
inc dword [edi + 0x55c]
inc dword [edi + 0x480]
jmp 0x10086129
cmp eax, 7
jne 0x100862a2
inc dword [edi + 0x4b4]
inc dword [edi + 0x480]
jmp 0x10086129
cmp eax, 9
jne 0x100862b8
inc dword [edi + 0x4b8]
inc dword [edi + 0x480]
jmp 0x10086129
cmp eax, 6
jne 0x100862ce
inc dword [edi + 0x4ec]
inc dword [edi + 0x480]
jmp 0x10086129
cmp eax, 0xe
jne 0x100862e4
inc dword [edi + 0x568]
inc dword [edi + 0x480]
jmp 0x10086129
cmp eax, 0x28
jne 0x100862fa
inc dword [edi + 0x56c]
inc dword [edi + 0x480]
jmp 0x10086129
cmp eax, 0x27
jne 0x10086310
inc dword [edi + 0x564]
inc dword [edi + 0x480]
jmp 0x10086129
cmp eax, 4
jne 0x10086326
inc dword [edi + 0x570]
inc dword [edi + 0x480]
jmp 0x10086129
cmp eax, 2
jne 0x1008633c
inc dword [edi + 0x510]
inc dword [edi + 0x480]
jmp 0x10086129
cmp eax, 0x23
jne 0x10086352
inc dword [edi + 0x4e4]
inc dword [edi + 0x480]
jmp 0x10086129
cmp eax, 0xb
jne 0x10086368
inc dword [edi + 0x4fc]
inc dword [edi + 0x480]
jmp 0x10086129
cmp eax, 0x17
jne 0x1008637e
inc dword [edi + 0x54c]
inc dword [edi + 0x480]
jmp 0x10086129
cmp eax, 5
jne 0x10086394
inc dword [edi + 0x4dc]
inc dword [edi + 0x480]
jmp 0x10086129
cmp eax, 0x18
jne 0x100863aa
inc dword [edi + 0x500]
inc dword [edi + 0x480]
jmp 0x10086129
cmp eax, 0x1a
jne 0x100863c0
inc dword [edi + 0x504]
inc dword [edi + 0x480]
jmp 0x10086129
cmp eax, 0x26
jne 0x100863d6
inc dword [edi + 0x538]
inc dword [edi + 0x480]
jmp 0x10086129
cmp eax, 0xd
jne 0x100863ec
inc dword [edi + 0x52c]
inc dword [edi + 0x480]
jmp 0x10086129
cmp eax, 0x1e
jne 0x10086402
inc dword [edi + 0x550]
inc dword [edi + 0x480]
jmp 0x10086129
cmp eax, 0x20
jne 0x1008640d
inc dword [edi + 0x554]
inc dword [edi + 0x480]
jmp 0x10086129