joyce8/EMBER2024-capa huggingface dataset:
Function at 0x100c7dc0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x101468a1
push eax
mov dword fs:[0], esp
sub esp, 0x1c
mov ecx, dword [0x101e66f0]
push edi
mov eax, dword [ecx]
mov eax, dword [eax + 0x138]
call eax
mov edi, eax
test edi, edi
je 0x100c7f55
mov ecx, dword fs:[0x2c]
mov edx, dword [0x101e66ac]
mov edx, dword [ecx + edx*4]
mov ecx, dword [0x101eef00]
cmp ecx, dword [edx + 4]
jg 0x100c7f68
mov eax, dword [0x101e671c]
mov dword [ebp - 0x10], eax
mov eax, dword [0x101e6748]
push esi
test eax, eax
jne 0x100c7e56
mov edx, 0xe80c2f78
mov ecx, 0x10170e21
call fcn.100074c0
mov edx, 0xc10bf213
mov ecx, 0x10170861
mov esi, eax
call fcn.100074c0
push esi
push eax
call fcn.100fc040
mov dword [0x101e6748], eax
mov esi, dword [ebp - 0x10]
mov ecx, dword [0x101ee7c4]
mov esi, dword [esi + eax]
mov eax, dword [ecx]
inc esi
mov eax, dword [eax + 0x1c]
call eax
mov eax, dword [edi]
mov ecx, dword [0x101ee7c4]
fstp dword [ebp - 0x1c]
mov eax, dword [eax + 0x28]
mov dword [ebp - 0x10], eax
mov eax, dword [0x101e66e8]
movss xmm0, dword [eax + 0x20]
mov eax, dword [ecx]
movss dword [ebp - 0x18], xmm0
mov eax, dword [eax + 0x1c]
call eax
fstp dword [ebp - 0x14]
push 0
mov ecx, edi
call dword [ebp - 0x10]
fadd dword [ebp - 0x14]
sub esp, 8
fstp dword [ebp - 0x14]
movss xmm0, dword [ebp - 0x14]
mov dword [esp + 4], 0x3e4ccccd
movss dword [esp], xmm0
call dword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_fminf]
movss xmm3, dword [ebp + 8]
add esp, 8
movaps xmm0, xmm3
movss xmm4, dword [0x1017f114]
divss xmm0, dword [ebp - 0x18]
movss xmm2, dword [0x1017f0e4]
addss xmm0, xmm4
cvttss2si eax, xmm0
sub esi, eax
movd xmm0, esi
cvtdq2ps xmm0, xmm0
pop esi
mulss xmm0, dword [ebp - 0x18]
movss dword [ebp + 8], xmm0
fsub dword [ebp + 8]
fstp dword [ebp + 8]
movss xmm0, dword [ebp + 8]
andps xmm0, xmmword [0x1017fa00]
comiss xmm0, xmm2
ja 0x100c7f55
mov eax, dword [0x101e66e8]
pop edi
movd xmm0, dword [eax + 0x1c]
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [eax + 0x20]
subss xmm0, xmm2
cvttss2si ecx, xmm0
movss xmm0, dword [ebp - 0x1c]
addss xmm0, xmm3
divss xmm0, dword [eax + 0x20]
addss xmm0, xmm4
cvttss2si eax, xmm0
cmp eax, ecx
setge al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [ebp - 0xc]
xor al, al
pop edi
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4
push 0x101eef00
call fcn.1006d20f
add esp, 4
cmp dword [0x101eef00], 0xffffffff
jne 0x100c7e18
mov dword [ebp - 4], 0
mov ecx, dword [0x101e674c]
mov dword [ebp - 0x28], 0xb98ba2a7
mov dword [ebp - 0x24], 0xbaa1acb5
mov dword [ebp - 0x20], 0xd4b3b5b8
mov eax, dword [ecx]
mov edx, dword [eax + 0x44]
xor eax, eax
jmp 0x100c7fb0
xor byte [ebp + eax - 0x28], 0xd4
inc eax
cmp eax, 0xc
jb 0x100c7fb0
lea eax, [ebp - 0x28]
push eax
call edx
push 0x101eef00
mov dword [ebp - 4], 0xffffffff
call fcn.1006d1be
add esp, 4
jmp 0x100c7e18
Function at 0x100cb900
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
push ebx
push esi
mov esi, dword [0x101e6788]
mov ecx, 0x96
mov dword [ebp - 0xc], edx
push edi
mov eax, dword [esi + 4]
inc eax
cdq
idiv ecx
mov eax, dword [0x101edde8]
imul ebx, edx, 0x64
add ebx, dword [eax + 0xf0]
mov eax, dword [0x101e6760]
mov dword [ebp - 0x10], ebx
mov eax, dword [eax + 0x9c]
mov dword [ebp - 0x1c], eax
je 0x100cba34
test eax, eax
je 0x100cba34
mov ecx, 0x19
mov edi, ebx
rep movsd dword es:[edi], dword [esi]
inc dword [ebx + 4]
mov ecx, ebx
and dword [ebx + 0x30], 0xfffff7fe
call fcn.100d07d0
xor edx, edx
mov dword [ebp - 8], edx
cmp dword [ebp - 0xc], edx
jle 0x100cba34
mov ecx, dword [0x101e66ac]
mov eax, dword fs:[0x2c]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x18], eax
mov ebx, dword [ebx + 4]
mov eax, 0x1b4e81b5
add ebx, edx
mov esi, dword [ebp - 0x10]
imul ebx
mov ecx, ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x96
sub ecx, eax
mov eax, dword [0x101edde8]
imul edx, ecx, 0x64
imul ecx, ecx, 0x68
add edx, dword [eax + 0xf0]
add ecx, dword [eax + 0xf4]
mov edi, edx
mov dword [ebp - 0x14], ecx
mov ecx, 0x19
rep movsd dword es:[edi], dword [esi]
cmp dword [edx + 8], 0x7fffffff
mov ecx, 0x19
mov dword [edx + 4], ebx
mov esi, edx
mov ebx, dword [ebp - 0x14]
sete al
mov byte [edx + 0x48], al
mov edi, ebx
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x18]
mov eax, dword [0x101ede04]
mov dword [ebp - 4], edx
cmp eax, dword [ecx + 4]
jg 0x100cba3b
jmp 0x100cba01
mov edx, dword [ebp - 4]
mov eax, dword [0x101e678c]
mov ecx, edx
call eax
mov edx, dword [ebp - 8]
mov dword [ebx + 0x64], eax
inc edx
mov eax, dword [0x101e6760]
mov ebx, dword [ebp - 0x10]
mov dword [ebp - 8], edx
inc dword [eax + 0x4d30]
mov eax, dword [ebp - 0x1c]
inc dword [eax + 0x2c]
inc dword [eax + 0x18]
cmp edx, dword [ebp - 0xc]
jl 0x100cb985
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x101ede04
call fcn.1006d20f
add esp, 4
cmp dword [0x101ede04], 0xffffffff
jne 0x100cb9fe
mov dword [ebp - 0x27], 0xb1bdb8b7
xor eax, eax
mov dword [ebp - 0x23], 0xb0faa0ba
mov word [ebp - 0x1f], 0xb8b8
mov byte [ebp - 0x1d], 0xd4
jmp 0x100cba70
xor byte [ebp + eax - 0x27], 0xd4
inc eax
cmp eax, 0xb
jb 0x100cba70
mov edx, str.53_8B_D9_83_C8
lea ecx, [ebp - 0x27]
call fcn.100c52b0
push 0x101ede04
mov dword [0x101e678c], eax
call fcn.1006d1be
add esp, 4
jmp 0x100cb9fe
Function at 0x100ce390
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0x2c]
sub esp, 0x34
mov ecx, dword [0x101e66ac]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x101eef20]
cmp eax, dword [ecx + 4]
jg 0x100ce3e7
movq xmm0, qword [ebp + 0x14]
sub esp, 0xc
mov eax, dword [ebp + 0x1c]
mov ecx, esp
sub esp, 0xc
movq qword [ecx], xmm0
movq xmm0, qword [ebp + 8]
mov dword [ecx + 8], eax
mov ecx, esp
mov eax, dword [ebp + 0x10]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
call dword [0x101eef0c]
add esp, 0x18
mov esp, ebp
pop ebp
ret
push 0x101eef20
call fcn.1006d20f
add esp, 4
cmp dword [0x101eef20], 0xffffffff
jne 0x100ce3b2
movaps xmm0, xmmword [0x1017ff80]
xor eax, eax
movaps xmm2, xmmword [0x1017fe80]
movups xmmword [ebp - 0x34], xmm0
mov dword [ebp - 0x14], 0xe1f492e4
movaps xmm0, xmmword [0x10180150]
movups xmmword [ebp - 0x24], xmm0
mov dword [ebp - 0x10], 0xe497f4e3
mov byte [ebp - 0xc], 0xd4
jmp 0x100ce430
movups xmm0, xmmword [ebp + eax - 0x34]
movaps xmm1, xmm2
xorps xmm1, xmm0
movups xmmword [ebp + eax - 0x34], xmm1
add eax, 0x10
cmp eax, 0x20
jb 0x100ce430
cmp eax, 0x29
jae 0x100ce45d
jmp 0x100ce450
xor byte [ebp + eax - 0x34], 0xd4
inc eax
cmp eax, 0x29
jb 0x100ce450
jmp 0x100ce45d
mov dword [ebp - 0xb], 0xb1bdb8b7
xor eax, eax
mov dword [ebp - 7], 0xb0faa0ba
mov word [ebp - 3], 0xb8b8
mov byte [ebp - 1], 0xd4
jmp 0x100ce480
xor byte [ebp + eax - 0xb], 0xd4
inc eax
cmp eax, 0xb
jb 0x100ce480
lea edx, [ebp - 0x34]
lea ecx, [ebp - 0xb]
call fcn.100c52b0
push 0x101eef20
mov dword [0x101eef0c], eax
call fcn.1006d1be
add esp, 4
jmp 0x100ce3b2
Function at 0x100d16d0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
cmp dword [0x101ede9c], 0
push esi
mov esi, dword [0x101e66ac]
push edi
mov edi, dword fs:[0x2c]
jne 0x100d1720
mov ecx, dword [edi + esi*4]
mov eax, dword [0x101eef74]
cmp eax, dword [ecx + 4]
jg 0x100d174b
mov eax, dword [0x101eef60]
test eax, eax
je 0x100d170f
mov eax, dword [eax + 1]
mov dword [0x101ede9c], eax
cmp dword [0x101ede9c], 0
jne 0x100d1720
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret
mov ecx, dword [edi + esi*4]
mov eax, dword [0x101eef50]
cmp eax, dword [ecx + 4]
jg 0x100d180d
mov ecx, dword [0x101ede9c]
push str.CCSGO_HudDeathNotice
call dword [0x101eef68]
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push 0x101eef74
call fcn.1006d20f
add esp, 4
cmp dword [0x101eef74], 0xffffffff
jne 0x100d16fe
movaps xmm0, xmmword [0x1017fa80]
xor eax, eax
movaps xmm2, xmmword [0x1017fe80]
movups xmmword [ebp - 0x32], xmm0
mov dword [ebp - 0x12], 0xf490e1f4
movaps xmm0, xmmword [0x1017fb00]
movups xmmword [ebp - 0x22], xmm0
mov word [ebp - 0xe], 0xece4
mov byte [ebp - 0xc], 0xd4
jmp 0x100d1793
movups xmm0, xmmword [ebp + eax - 0x32]
movaps xmm1, xmm2
xorps xmm1, xmm0
movups xmmword [ebp + eax - 0x32], xmm1
add eax, 0x10
cmp eax, 0x20
jb 0x100d1793
cmp eax, 0x27
jae 0x100d17bf
jmp 0x100d17b2
xor byte [ebp + eax - 0x32], 0xd4
inc eax
cmp eax, 0x27
jb 0x100d17b2
jmp 0x100d17bf
mov dword [ebp - 0xb], 0xb1bdb8b7
xor eax, eax
mov dword [ebp - 7], 0xb0faa0ba
mov word [ebp - 3], 0xb8b8
mov byte [ebp - 1], 0xd4
jmp 0x100d17e0
xor byte [ebp + eax - 0xb], 0xd4
inc eax
cmp eax, 0xb
jb 0x100d17e0
lea edx, [ebp - 0x32]
lea ecx, [ebp - 0xb]
call fcn.100c52b0
push 0x101eef74
mov dword [0x101eef60], eax
call fcn.1006d1be
add esp, 4
jmp 0x100d16fe
push 0x101eef50
call fcn.1006d20f
add esp, 4
cmp dword [0x101eef50], 0xffffffff
jne 0x100d1734
movaps xmm0, xmmword [0x1017fee0]
xor eax, eax
movaps xmm2, xmmword [0x1017fe80]
movups xmmword [ebp - 0x3b], xmm0
movaps xmm0, xmmword [0x101800d0]
movups xmmword [ebp - 0x2b], xmm0
movaps xmm0, xmmword [0x1017feb0]
movups xmmword [ebp - 0x1b], xmm0
jmp 0x100d1853
movups xmm0, xmmword [ebp + eax - 0x3b]
movaps xmm1, xmm2
xorps xmm1, xmm0
movups xmmword [ebp + eax - 0x3b], xmm1
add eax, 0x10
cmp eax, 0x30
jb 0x100d1853
mov dword [ebp - 0xb], 0xb1bdb8b7
xor eax, eax
mov dword [ebp - 7], 0xb0faa0ba
mov word [ebp - 3], 0xb8b8
mov byte [ebp - 1], 0xd4
jmp 0x100d1887
xor byte [ebp + eax - 0xb], 0xd4
inc eax
cmp eax, 0xb
jb 0x100d1887
lea edx, [ebp - 0x3b]
lea ecx, [ebp - 0xb]
call fcn.100c52b0
push 0x101eef50
mov dword [0x101eef68], eax
call fcn.1006d1be
add esp, 4
jmp 0x100d1734
Function at 0x100d2310
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov ecx, dword [0x101e66f0]
sub esp, 0x30
mov eax, dword [ecx]
push esi
push edi
mov eax, dword [eax + 0x6c]
call eax
test al, al
je 0x100d2422
mov ecx, dword [0x101e66f0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x68]
call eax
test al, al
je 0x100d2422
mov edi, dword [0x101e671c]
test edi, edi
je 0x100d2418
mov eax, dword [0x101e6718]
test eax, eax
jne 0x100d2385
mov edx, 0xe80c2f78
mov ecx, 0x101708c5
call fcn.100074c0
mov edx, 0xc10bf213
mov ecx, 0x10170861
mov esi, eax
call fcn.100074c0
push esi
push eax
call fcn.100fc040
mov dword [0x101e6718], eax
cmp dword [eax + edi], 0
jle 0x100d2418
mov edx, dword [0x101edeb0]
test edx, edx
jne 0x100d23af
mov ecx, str.CCSGO_HudDeathNotice
call fcn.100d16d0
mov edx, eax
mov dword [0x101edeb0], edx
test edx, edx
je 0x100d2422
lea eax, [edx + 0x50]
test eax, eax
je 0x100d23d5
cmp byte [0x101e9998], 0
je 0x100d23c9
movss xmm0, dword [0x1017f3c0]
jmp 0x100d23d1
movss xmm0, dword [0x1017f188]
movss dword [eax], xmm0
cmp byte [0x101ede98], 0
je 0x100d2422
mov eax, dword fs:[0x2c]
mov ecx, dword [0x101e66ac]
mov byte [0x101ede98], 0
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x101eef58]
cmp eax, dword [ecx + 4]
jg 0x100d2428
jmp 0x100d2409
mov edx, dword [0x101edeb0]
lea ecx, [edx - 0x14]
call dword [0x101eef64]
pop edi
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x101edeb0], 0
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push 0x101eef58
call fcn.1006d20f
add esp, 4
cmp dword [0x101eef58], 0xffffffff
jne 0x100d2403
movaps xmm0, xmmword [0x1017ff80]
xor eax, eax
movaps xmm2, xmmword [0x1017fe80]
movups xmmword [ebp - 0x2c], xmm0
mov byte [ebp - 0xc], 0xd4
movaps xmm0, xmmword [0x10180030]
movups xmmword [ebp - 0x1c], xmm0
jmp 0x100d2463
movups xmm0, xmmword [ebp + eax - 0x2c]
movaps xmm1, xmm2
xorps xmm1, xmm0
movups xmmword [ebp + eax - 0x2c], xmm1
add eax, 0x10
cmp eax, 0x20
jb 0x100d2463
cmp eax, 0x21
jae 0x100d248f
jmp 0x100d2482
xor byte [ebp + eax - 0x2c], 0xd4
inc eax
cmp eax, 0x21
jb 0x100d2482
jmp 0x100d248f
mov dword [ebp - 0xb], 0xb1bdb8b7
xor eax, eax
mov dword [ebp - 7], 0xb0faa0ba
mov word [ebp - 3], 0xb8b8
mov byte [ebp - 1], 0xd4
jmp 0x100d24b0
xor byte [ebp + eax - 0xb], 0xd4
inc eax
cmp eax, 0xb
jb 0x100d24b0
lea edx, [ebp - 0x2c]
lea ecx, [ebp - 0xb]
call fcn.100c52b0
push 0x101eef58
mov dword [0x101eef64], eax
call fcn.1006d1be
add esp, 4
jmp 0x100d2403
Function at 0x100d7530
Capabilities:
Access peb ldr_data
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x10146c62
push eax
mov dword fs:[0], esp
mov eax, dword [0x101ee810]
push ebx
sub esp, 0x18
mov ecx, dword [eax + 0xc]
push esi
push edi
mov edi, dword [0x101ee80c]
cmp ecx, dword [eax + 0x10]
je 0x100d7577
mov dword [eax + 0x10], ecx
cmp dword [0x101e6780], 0
je 0x100d7612
mov ecx, edi
call fcn.100d24e0
cmp byte [edi + 0xc], 0
je 0x100d760f
cmp byte [0x101e676c], 0
jne 0x100d760f
mov eax, dword [0x101e671c]
mov dword [ebp - 0x14], eax
test eax, eax
je 0x100d760f
mov eax, dword [0x101e6718]
test eax, eax
jne 0x100d75db
mov edx, 0xe80c2f78
mov ecx, 0x101708c5
call fcn.100074c0
mov edx, 0xc10bf213
mov ecx, 0x10170861
mov esi, eax
call fcn.100074c0
push esi
push eax
call fcn.100fc040
mov dword [0x101e6718], eax
mov ecx, dword [ebp - 0x14]
cmp dword [eax + ecx], 0
jle 0x100d760f
mov eax, dword [0x101e66e8]
movss xmm0, dword [eax + 0x10]
call fcn.100d7760
test al, al
jne 0x100d7625
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
lea ecx, [edi + 0x18]
call fcn.1000b6f0
cmp byte [eax], 0
jne 0x100d7612
mov byte [edi], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.100d6970
mov ecx, edi
call fcn.100d5e50
mov eax, dword fs:[0x2c]
mov ecx, dword [0x101e66ac]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x101eef84]
cmp eax, dword [ecx + 4]
jg 0x100d76d9
mov ecx, dword [0x101eef8c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x14], eax
call dword [ebp - 0x14]
fstp dword [ebp - 0x14]
movss xmm0, dword [ebp - 0x14]
comiss xmm0, dword [0x1017f060]
jbe 0x100d7612
call fcn.1000ac60
mov ecx, dword [0x101eef8c]
mov esi, eax
mov edx, dword [ecx]
mov edx, dword [edx + 0x30]
mov dword [ebp - 0x14], edx
call dword [ebp - 0x14]
mov eax, dword [0x101e6788]
fstp dword [ebp - 0x14]
movss xmm1, dword [ebp - 0x14]
mulss xmm1, dword [esi]
mov ecx, dword [ebp - 0xc]
movss xmm0, dword [eax + 0xc]
pop edi
subss xmm0, xmm1
pop esi
movss dword [eax + 0xc], xmm0
movss xmm0, dword [eax + 0x10]
subss xmm0, xmm1
movss dword [eax + 0x10], xmm0
movss xmm0, dword [eax + 0x14]
subss xmm0, xmm1
movss dword [eax + 0x14], xmm0
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0x101eef84
call fcn.1006d20f
add esp, 4
cmp dword [0x101eef84], 0xffffffff
jne 0x100d7651
mov dword [ebp - 4], 0
mov ecx, dword [0x101e674c]
movaps xmm0, xmmword [0x1017fe80]
xorps xmm0, xmmword [0x1017fce0]
mov dword [ebp - 0x18], 0xd4b1b8b5
mov eax, dword [ecx]
movups xmmword [ebp - 0x28], xmm0
mov edx, dword [eax + 0x44]
mov eax, 0x10
jmp 0x100d7725
xor byte [ebp + eax - 0x28], 0xd4
inc eax
cmp eax, 0x14
jb 0x100d7725
lea eax, [ebp - 0x28]
push eax
call edx
push 0x101eef84
mov dword [0x101eef8c], eax
mov dword [ebp - 4], 0xffffffff
call fcn.1006d1be
add esp, 4
jmp 0x100d7651
Function at 0x100db7c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10146d89
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x3c
mov eax, dword fs:[0x2c]
push esi
mov esi, dword [0x101e66ac]
push edi
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x14], ecx
mov edi, dword [eax + esi*4]
mov eax, dword [0x101eefc8]
cmp eax, dword [edi + 4]
jg 0x100db86c
push dword [ebp - 0x10]
mov esi, dword [ebp - 0x14]
push esi
call dword [0x101eefcc]
mov ecx, dword [0x101e66e4]
add esp, 8
mov eax, dword [ecx]
push esi
mov eax, dword [eax + 0xc]
call eax
mov esi, eax
test esi, esi
jne 0x100db838
push 0x14
push str.C:UsersyaxeDownloadsowned.me_csgo_cheat_mainowned.me_csgo_cheat_mainowned.mehack_features_skinsglove.cpp
push str.glove
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
add esp, 0xc
mov eax, dword [0x101eefc4]
cmp eax, dword [edi + 4]
jg 0x100db8e0
push 0x101716cc
mov ecx, esi
call dword [0x101eefc0]
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
mov eax, dword [eax]
jmp 0x100db8c2
push 0x101eefc8
call fcn.1006d20f
add esp, 4
cmp dword [0x101eefc8], 0xffffffff
jne 0x100db7ff
mov dword [ebp - 4], 0
mov ecx, dword [0x101edea0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
call eax
mov ecx, dword [0x101edea0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
call eax
test eax, eax
je 0x100db8bf
jmp 0x100db8b0
cmp dword [eax + 0x14], 0x36
je 0x100db868
mov eax, dword [eax + 0x10]
test eax, eax
jne 0x100db8b0
jmp 0x100db8bf
mov eax, dword [ebp - 0x10]
push 0x101eefc8
mov dword [0x101eefcc], eax
mov dword [ebp - 4], 0xffffffff
call fcn.1006d1be
add esp, 4
jmp 0x100db7ff
push 0x101eefc4
call fcn.1006d20f
add esp, 4
cmp dword [0x101eefc4], 0xffffffff
jne 0x100db849
movaps xmm0, xmmword [0x1017fab0]
xor eax, eax
movaps xmm2, xmmword [0x1017fe80]
movups xmmword [ebp - 0x46], xmm0
mov dword [ebp - 0x26], 0xf4e592f4
movaps xmm0, xmmword [0x1017fae0]
movups xmmword [ebp - 0x36], xmm0
mov word [ebp - 0x22], 0xec91
mov byte [ebp - 0x20], 0xd4
jmp 0x100db930
movups xmm0, xmmword [ebp + eax - 0x46]
movaps xmm1, xmm2
xorps xmm1, xmm0
movups xmmword [ebp + eax - 0x46], xmm1
add eax, 0x10
cmp eax, 0x20
jb 0x100db930
cmp eax, 0x27
jae 0x100db95d
jmp 0x100db950
xor byte [ebp + eax - 0x46], 0xd4
inc eax
cmp eax, 0x27
jb 0x100db950
jmp 0x100db95d
mov dword [ebp - 0x1f], 0xb1bdb8b7
xor eax, eax
mov dword [ebp - 0x1b], 0xb0faa0ba
mov word [ebp - 0x17], 0xb8b8
mov byte [ebp - 0x15], 0xd4
jmp 0x100db980
xor byte [ebp + eax - 0x1f], 0xd4
inc eax
cmp eax, 0xb
jb 0x100db980
lea edx, [ebp - 0x46]
lea ecx, [ebp - 0x1f]
call fcn.100c52b0
push 0x101eefc4
mov dword [0x101eefc0], eax
call fcn.1006d1be
add esp, 4
jmp 0x100db849
Function at 0x100e4e20
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov edx, dword [0x101ef10c]
sub esp, 0x30
push esi
mov esi, ecx
test edx, edx
jne 0x100e4eca
movaps xmm0, xmmword [0x1017fff0]
xor eax, eax
movaps xmm2, xmmword [0x1017fe80]
movups xmmword [ebp - 0x2d], xmm0
mov word [ebp - 0xd], 0xd4ed
movaps xmm0, xmmword [0x1017fb20]
movups xmmword [ebp - 0x1d], xmm0
nop dword [eax]
movups xmm0, xmmword [ebp + eax - 0x2d]
movaps xmm1, xmm2
xorps xmm1, xmm0
movups xmmword [ebp + eax - 0x2d], xmm1
add eax, 0x10
cmp eax, 0x20
jb 0x100e4e60
cmp eax, 0x22
jae 0x100e4e8b
nop dword [eax]
xor byte [ebp + eax - 0x2d], 0xd4
inc eax
cmp eax, 0x22
jb 0x100e4e80
mov dword [ebp - 0xb], 0xb1bdb8b7
xor eax, eax
mov dword [ebp - 7], 0xb0faa0ba
mov word [ebp - 3], 0xb8b8
mov byte [ebp - 1], 0xd4
xor byte [ebp + eax - 0xb], 0xd4
inc eax
cmp eax, 0xb
jb 0x100e4ea5
lea edx, [ebp - 0x2d]
lea ecx, [ebp - 0xb]
call fcn.100c52b0
mov edx, dword [eax + 3]
add edx, 0xb0
mov dword [0x101ef10c], edx
mov eax, dword [esi]
movss xmm1, dword [edx + 4]
mov ecx, dword [esi + 4]
pop esi
movss xmm0, dword [eax]
mulss xmm0, dword [edx]
mulss xmm1, dword [eax + 4]
addss xmm1, xmm0
movss xmm0, dword [edx + 8]
mulss xmm0, dword [eax + 8]
addss xmm1, xmm0
addss xmm1, dword [edx + 0xc]
movss dword [ecx], xmm1
movss xmm0, dword [edx + 0x14]
mulss xmm0, dword [eax + 4]
movss xmm2, dword [edx + 0x10]
mulss xmm2, dword [eax]
addss xmm2, xmm0
movss xmm0, dword [edx + 0x18]
mulss xmm0, dword [eax + 8]
addss xmm2, xmm0
addss xmm2, dword [edx + 0x1c]
movss dword [ecx + 4], xmm2
mov dword [ecx + 8], 0
movss xmm0, dword [edx + 0x34]
mulss xmm0, dword [eax + 4]
movss xmm3, dword [edx + 0x30]
mulss xmm3, dword [eax]
addss xmm3, xmm0
movss xmm0, dword [edx + 0x38]
mulss xmm0, dword [eax + 8]
addss xmm3, xmm0
movss xmm0, dword [0x1017f094]
addss xmm3, dword [edx + 0x3c]
comiss xmm0, xmm3
jbe 0x100e4f89
mulss xmm1, dword [0x1017f3ac]
mov al, 1
mulss xmm2, dword [0x1017f3ac]
movss dword [ecx], xmm1
movss dword [ecx + 4], xmm2
mov esp, ebp
pop ebp
ret
movss xmm0, dword [0x1017f158]
xor al, al
divss xmm0, xmm3
mulss xmm1, xmm0
mulss xmm2, xmm0
movss dword [ecx], xmm1
movss dword [ecx + 4], xmm2
mov esp, ebp
pop ebp
ret
Function at 0x100e8120
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0x2c]
sub esp, 0x34
mov edx, dword [0x101e66ac]
push esi
mov esi, dword [eax + edx*4]
mov eax, dword [0x101ef13c]
push edi
mov edi, ecx
cmp eax, dword [esi + 4]
jg 0x100e81c2
mov eax, dword [0x101ef120]
cmp eax, dword [esi + 4]
jg 0x100e828d
test edi, edi
je 0x100e81ba
mov eax, dword [edi + 8]
lea ecx, [edi + 8]
mov eax, dword [eax + 0x28]
call eax
test eax, eax
je 0x100e81ba
mov eax, dword [0x101ef114]
mov ecx, dword [0x101edea0]
push ebx
mov esi, dword [eax + 0x26]
mov eax, dword [ecx]
mov bl, byte [esi + edi]
mov eax, dword [eax + 0x20]
call eax
mov eax, dword [eax + 8]
cmp byte [eax + 1], 0x42
jne 0x100e81a4
cmp byte [eax + 9], 0x65
jne 0x100e819e
cmp byte [eax + 0xa], 0x53
jne 0x100e819e
cmp byte [eax + 0x10], 0x65
je 0x100e81a4
cmp byte [eax + 5], 0x44
je 0x100e81a8
mov byte [esi + edi], 2
mov ecx, edi
call dword [0x101ef114]
mov byte [esi + edi], bl
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
pop edi
xor al, al
pop esi
mov esp, ebp
pop ebp
ret
push 0x101ef13c
call fcn.1006d20f
add esp, 4
cmp dword [0x101ef13c], 0xffffffff
jne 0x100e8146
movaps xmm0, xmmword [0x10180080]
xor eax, eax
movaps xmm2, xmmword [0x1017fe80]
movups xmmword [ebp - 0x32], xmm0
mov dword [ebp - 0x12], 0xf4e7ecf4
movaps xmm0, xmmword [0x10180040]
movups xmmword [ebp - 0x22], xmm0
mov word [ebp - 0xe], 0x9196
mov byte [ebp - 0xc], 0xd4
jmp 0x100e8210
movups xmm0, xmmword [ebp + eax - 0x32]
movaps xmm1, xmm2
xorps xmm1, xmm0
movups xmmword [ebp + eax - 0x32], xmm1
add eax, 0x10
cmp eax, 0x20
jb 0x100e8210
cmp eax, 0x27
jae 0x100e823d
jmp 0x100e8230
xor byte [ebp + eax - 0x32], 0xd4
inc eax
cmp eax, 0x27
jb 0x100e8230
jmp 0x100e823d
mov dword [ebp - 0xb], 0xb1bdb8b7
xor eax, eax
mov dword [ebp - 7], 0xb0faa0ba
mov word [ebp - 3], 0xb8b8
mov byte [ebp - 1], 0xd4
jmp 0x100e8260
xor byte [ebp + eax - 0xb], 0xd4
inc eax
cmp eax, 0xb
jb 0x100e8260
lea edx, [ebp - 0x32]
lea ecx, [ebp - 0xb]
call fcn.100c52b0
push 0x101ef13c
mov dword [0x101ef11c], eax
call fcn.1006d1be
add esp, 4
jmp 0x100e8146
push 0x101ef120
call fcn.1006d20f
add esp, 4
cmp dword [0x101ef120], 0xffffffff
jne 0x100e8157
mov eax, dword [0x101ef11c]
push 0x101ef120
mov dword [0x101ef114], eax
call fcn.1006d1be
add esp, 4
jmp 0x100e8157
Function at 0x100f1770
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
mov ecx, dword [0x101e674c]
push str.viewmodel_offset_x
mov eax, dword [ecx]
call dword [eax + 0x44]
push ecx
lea ecx, [eax + 0x44]
call fcn.10024140
mov ecx, dword [0x101e674c]
push str.viewmodel_offset_y
mov eax, dword [ecx]
call dword [eax + 0x44]
push ecx
lea ecx, [eax + 0x44]
call fcn.10024140
mov ecx, dword [0x101e674c]
push str.viewmodel_offset_z
mov eax, dword [ecx]
call dword [eax + 0x44]
push ecx
lea ecx, [eax + 0x44]
call fcn.10024140
movaps xmm0, xmmword [0x1017fab0]
xor eax, eax
movaps xmm1, xmmword [0x1017fe80]
movups xmmword [ebp - 0x31], xmm0
mov dword [ebp - 0x11], 0xf496ecf4
movaps xmm0, xmmword [0x1017ff20]
movups xmmword [ebp - 0x21], xmm0
mov dword [ebp - 0xd], 0xe4f4ed92
mov word [ebp - 9], 0xd492
nop dword [eax]
nop dword [eax + eax]
movups xmm0, xmmword [ebp + eax - 0x31]
xorps xmm0, xmm1
movups xmmword [ebp + eax - 0x31], xmm0
add eax, 0x10
cmp eax, 0x20
jb 0x100f1800
cmp eax, 0x2a
jae 0x100f182b
nop word [eax + eax]
xor byte [ebp + eax - 0x31], 0xd4
inc eax
cmp eax, 0x2a
jb 0x100f1820
lea edx, [ebp - 0x31]
mov dword [ebp - 7], 0x65696c63
lea ecx, [ebp - 7]
mov word [ebp - 3], 0x746e
mov byte [ebp - 1], 0
call fcn.100c52b0
push 0x101ee0b8
mov edx, 0x100ef0e0
mov dword [0x101ef26c], eax
mov ecx, eax
call fcn.100f3800
mov ecx, dword [0x101ef26c]
mov edx, 1
call fcn.100f2f30
mov al, 1
mov esp, ebp
pop ebp
ret