joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10073120
Capabilities:
Terminate process

Disassembly:
push ebx
push edi
push esi
sub esp, 0x20
mov eax, dword [0x10259d1c]
xor eax, esp
mov dword [esp + 0x1c], eax
mov eax, dword [0x10259f60]
mov ecx, dword [eax + 0x19e4]
mov byte [ecx + 0x7c], 1
mov edi, dword [eax + 0x19e4]
cmp byte [edi + 0x7f], 0
jne 0x1007321f
mov ebx, dword [esp + 0x34]
movss xmm1, dword [ebx]
xorps xmm0, xmm0
ucomiss xmm1, xmm0
jne 0x10073166
jnp 0x10073235
movss xmm1, dword [ebx + 4]
ucomiss xmm1, xmm0
jne 0x10073176
jnp 0x10073235
mov ecx, edi
push 0
push dword [esp + 0x34]
call fcn.1004b2b0
mov esi, eax
movss xmm0, dword [ebx]
movss xmm1, dword [ebx + 4]
sub esp, 0x14
movss dword [esp + 8], xmm1
movss dword [esp + 4], xmm0
lea ebx, [esp + 0x28]
mov dword [esp], ebx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call fcn.1004c8b0
add esp, 0x14
mov eax, dword [edi + 0xc8]
mov ecx, dword [edi + 0xcc]
movsd xmm0, qword [edi + 0xc8]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
movsd xmm1, qword [esp + 0x14]
addps xmm1, xmm0
movlps qword [esp + 0xc], xmm1
push 0
push ebx
call fcn.1004bd00
add esp, 8
lea edi, [esp + 4]
push 0
push esi
push edi
call fcn.1004bfb0
add esp, 0xc
test al, al
je 0x1007321f
lea eax, [esp + 2]
lea ecx, [esp + 3]
push 0
push eax
push ecx
push esi
push edi
call fcn.10072190
add esp, 0x14
mov ebx, eax
jmp 0x10073221
xor ebx, ebx
mov ecx, dword [esp + 0x1c]
xor ecx, esp
call fcn.10155bf1
mov eax, ebx
add esp, 0x20
pop esi
pop edi
pop ebx
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x10078ef0
Capabilities:
Terminate process

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x4c
mov ebp, dword [esp + 0x74]
mov eax, dword [0x10259d1c]
xor eax, esp
mov dword [esp + 0x48], eax
mov esi, dword [0x10259f60]
cmp dword [esi + 0x2c40], 0
jne 0x10078f1a
call fcn.1004bc30
mov edi, dword [esp + 0x6c]
movzx ecx, byte [ebp]
test cl, cl
je 0x10078fd3
mov eax, ebp
jmp 0x10078f48
xor edx, edx
cmp cl, 0x25
sete dl
movzx ecx, byte [eax + edx + 1]
add eax, edx
inc eax
test cl, cl
je 0x10078fd3
cmp cl, 0x25
jne 0x10078f30
cmp byte [eax + 1], 0x25
je 0x10078f30
mov dl, 0x25
mov ebx, 0x25
mov ecx, 2
mov edi, 0x900
mov ebp, 0x2480a80
jmp 0x10078f86
dec bl
movzx edx, bl
bt edi, edx
jae 0x10078fa2
movsx ebx, byte [eax + ecx - 1]
inc ecx
mov edx, ebx
test ebx, ebx
je 0x10078fc9
mov dh, dl
add dh, 0xbf
cmp dh, 0x19
jbe 0x10078f70
add dl, 0x9f
cmp dl, 0x19
ja 0x10078f7a
dec bl
movzx edx, bl
bt ebp, edx
jb 0x10078f7a
cmp byte [eax + ecx - 1], 0
mov edi, dword [esp + 0x6c]
je 0x10078fd1
cmp ecx, 0x20
mov edx, 0x20
cmovb edx, ecx
lea ebp, [esp + 0x28]
push edx
push eax
push ebp
call fcn.100484a0
add esp, 0xc
jmp 0x10078fd3
mov ebp, eax
mov edi, dword [esp + 0x6c]
jmp 0x10078fd3
mov ebp, eax
mov ecx, dword [esp + 0x70]
cmp edi, 1
ja 0x10078ff7
mov edi, esi
lea eax, [esp + 8]
push dword [ecx]
push ebp
push 0x20
push eax
call fcn.100485e0
add esp, 0x10
mov ebp, 0x11
jmp 0x10079066
mov eax, edi
and eax, 0xfffffffe
cmp eax, 2
jne 0x1007901f
mov edi, esi
lea eax, [esp + 8]
push dword [ecx + 4]
push dword [ecx]
push ebp
push 0x20
push eax
call fcn.100485e0
add esp, 0x14
mov ebp, 0x11
jmp 0x10079066
cmp edi, 5
je 0x10079037
cmp edi, 4
jne 0x100790fb
movss xmm0, dword [ecx]
cvtss2sd xmm0, xmm0
jmp 0x1007903b
movsd xmm0, qword [ecx]
mov edi, esi
sub esp, 0x14
movsd qword [esp + 0xc], xmm0
mov dword [esp + 8], ebp
lea eax, [esp + 0x1c]
mov dword [esp], eax
mov dword [esp + 4], 0x20
call fcn.100485e0
add esp, 0x14
mov ebp, 0x20010
mov esi, dword [esp + 0x60]
lea ebx, [esp + 8]
push ebx
call fcn.10048560
add esp, 4
movsd xmm0, qword [esi]
movsd xmm1, qword [esi + 8]
subps xmm1, xmm0
movlps qword [esp], xmm1
mov eax, esp
push 0
push 0
push ebp
push eax
push 0x20
push ebx
push dword [esp + 0x80]
call fcn.1007db90
add esp, 0x1c
cmp dword [edi + 0x2c40], 0
je 0x100790ce
test al, al
je 0x100790e4
mov edx, dword [edi + 0x1d90]
lea ecx, [esp + 8]
push 0
push dword [esp + 0x74]
push dword [esp + 0x74]
call fcn.10080a60
add esp, 0xc
mov ebx, eax
jmp 0x100790e6
mov ecx, dword [esp + 0x64]
cmp dword [edi + 0x1a04], ecx
jne 0x100790fb
mov dword [edi + 0x2c40], ecx
test al, al
jne 0x100790ae
xor ebx, ebx
mov ecx, dword [esp + 0x48]
xor ecx, esp
call fcn.10155bf1
mov eax, ebx
add esp, 0x4c
pop esi
pop edi
pop ebx
pop ebp
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x10079110
Capabilities:
Terminate process

Disassembly:
push ebx
push edi
push esi
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x10]
cmp edi, 1
ja 0x10079133
push dword [esi]
push eax
push edx
push ecx
call fcn.100485e0
add esp, 0x10
jmp 0x1007917b
mov ebx, edi
and ebx, 0xfffffffe
cmp ebx, 2
jne 0x10079147
push dword [esi + 4]
push dword [esi]
push eax
push edx
push ecx
jmp 0x10079173
cmp edi, 5
je 0x1007915b
cmp edi, 4
jne 0x1007917f
movss xmm0, dword [esi]
cvtss2sd xmm0, xmm0
jmp 0x1007915f
movsd xmm0, qword [esi]
sub esp, 0x14
movsd qword [esp + 0xc], xmm0
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.100485e0
add esp, 0x14
pop esi
pop edi
pop ebx
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x10080e30
Capabilities:
Terminate process

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xc
mov eax, dword [esp + 0x2c]
mov ecx, dword [0x10259d1c]
xor ecx, esp
mov dword [esp + 8], ecx
test eax, 0x100000
jne 0x10080e91
mov edi, dword [esp + 0x34]
mov ebx, dword [esp + 0x30]
mov esi, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
xorps xmm0, xmm0
movlps qword [esp], xmm0
mov ebp, esp
push edi
push ebx
push eax
push ebp
push esi
push edx
push ecx
call fcn.1007db90
add esp, 0x1c
mov ebx, eax
mov ecx, dword [esp + 8]
xor ecx, esp
call fcn.10155bf1
mov eax, ebx
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x10085200
Capabilities:
Terminate process

Disassembly:
mov eax, dword [0x10259f60]
mov eax, dword [eax + 0x19e4]
test byte [eax + 0xb], 2
je 0x1005b986
jmp fcn.10057bf0
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
push ebp
push ebx
push edi
push esi
sub esp, 0x38
mov eax, dword [esp + 0x54]
mov esi, dword [esp + 0x50]
mov edi, dword [esp + 0x4c]
movss xmm5, dword [esi]
movss xmm6, dword [esi + 4]
movss xmm1, dword [0x101a7280]
movaps xmm0, xmm1
minss xmm0, xmm5
xorps xmm2, xmm2
cmpltss xmm5, xmm2
andnps xmm5, xmm0
movss xmm3, dword [0x101a7294]
mulss xmm5, xmm3
movss xmm0, dword [0x101a72c0]
movaps xmm4, xmm1
minss xmm4, xmm6
cmpltss xmm6, xmm2
andnps xmm6, xmm4
mulss xmm6, xmm3
movss xmm7, dword [esi + 8]
movaps xmm4, xmm1
minss xmm4, xmm7
cmpltss xmm7, xmm2
andnps xmm7, xmm4
mulss xmm7, xmm3
mov ecx, 0xff
mov dword [esp + 4], eax
test al, 2
jne 0x100852a7
movss xmm3, dword [esi + 0xc]
minss xmm1, xmm3
cmpltss xmm3, xmm2
andnps xmm3, xmm1
mulss xmm3, dword [0x101a7294]
addss xmm3, dword [0x101a72c0]
cvttss2si ecx, xmm3
mov dword [esp], ecx
addss xmm5, xmm0
movups xmmword [esp + 0x28], xmm5
addss xmm6, xmm0
movups xmmword [esp + 0x18], xmm6
addss xmm7, xmm0
movups xmmword [esp + 8], xmm7
push 1
push 0
call fcn.1005b7c0
add esp, 8
test edi, edi
je 0x100852f3
push 0
push edi
call fcn.100496b0
add esp, 8
cmp eax, edi
jbe 0x100852f3
push eax
push edi
call fcn.10071cc0
add esp, 8
call fcn.10074710
cvttss2si edi, dword [esp + 0x28]
cvttss2si ebx, dword [esp + 0x18]
cvttss2si ebp, dword [esp + 8]
push 0xbf800000
push 0
call fcn.1004bea0
add esp, 8
test byte [esp + 4], 2
jne 0x1008538e
movss xmm0, dword [esi + 0xc]
cvtss2sd xmm0, xmm0
movss xmm1, dword [esi + 8]
cvtss2sd xmm1, xmm1
movss xmm2, dword [esi]
movss xmm3, dword [esi + 4]
cvtss2sd xmm3, xmm3
cvtss2sd xmm2, xmm2
sub esp, 0x44
movsd qword [esp + 0x3c], xmm0
movsd qword [esp + 0x34], xmm1
movsd qword [esp + 0x2c], xmm3
movsd qword [esp + 0x24], xmm2
mov eax, dword [esp + 0x44]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ebp
mov dword [esp + 8], ebx
mov dword [esp + 4], edi
mov dword [esp], str._02X_02X_02X_02X_nR:_d__G:_d__B:_d__A:_d_n__.3f___.3f___.3f___.3f_
call fcn.100720d0
add esp, 0x44
jmp 0x100853e4
movss xmm0, dword [esi + 8]
cvtss2sd xmm0, xmm0
movss xmm1, dword [esi]
movss xmm2, dword [esi + 4]
cvtss2sd xmm2, xmm2
cvtss2sd xmm1, xmm1
sub esp, 0x34
movsd qword [esp + 0x2c], xmm0
movsd qword [esp + 0x24], xmm2
movsd qword [esp + 0x1c], xmm1
mov dword [esp + 0x18], ebp
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], ebp
mov dword [esp + 8], ebx
mov dword [esp + 4], edi
mov dword [esp], str._02X_02X_02X_nR:__d__G:__d__B:__d_n__.3f___.3f___.3f_
call fcn.100720d0
add esp, 0x34
add esp, 0x38
pop esi
pop edi
pop ebx
pop ebp
jmp 0x1005b970
Function at 0x10085af0
Capabilities:
Terminate process

Disassembly:
cmp dword [ecx], 5
jge 0x10085ba7
movzx edx, byte [esp + 0xc]
movss xmm0, dword [esp + 8]
mov eax, dword [esp + 4]
mov dword [ecx], eax
xorps xmm1, xmm1
movlps qword [ecx + 8], xmm1
movss dword [ecx + 4], xmm0
test dl, dl
je 0x10085b1e
movups xmmword [ecx + 0x20], xmm1
test eax, eax
jle 0x10085ba4
mov dword [ecx + 0x10], 0
xorps xmm1, xmm1
movss xmm2, dword [ecx + 0x20]
addss xmm2, xmm1
mov dword [ecx + 0x20], 0
cmp eax, 1
jne 0x10085b4a
movaps xmm3, xmm2
jmp 0x10085b9f
dec eax
xor edx, edx
movss xmm1, dword [0x101af354]
nop word cs:[eax + eax]
movss xmm4, dword [ecx + edx*4 + 0x24]
xorps xmm3, xmm3
cmpltss xmm3, xmm4
movaps xmm5, xmm3
andps xmm5, xmm0
andnps xmm3, xmm1
orps xmm3, xmm5
addss xmm3, xmm2
cvttps2dq xmm2, xmm3
cvtdq2ps xmm2, xmm2
movss dword [ecx + edx*4 + 0x14], xmm2
addss xmm3, xmm4
mov dword [ecx + edx*4 + 0x24], 0
inc edx
movaps xmm2, xmm3
cmp eax, edx
jne 0x10085b60
movss dword [ecx + 8], xmm3
ret 0xc
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x10085bc0
Capabilities:
Terminate process

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x10
mov ebx, dword [ecx + 0x2c]
mov eax, edx
mov dword [esp], edx
cmp ebx, edx
jl 0x10085d2e
mov esi, ecx
mov ebp, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
mov edi, dword [esi + 0xe64]
lea eax, [ecx + ebp*2]
push eax
push ecx
call fcn.10048cc0
add esp, 8
test edi, 0x40000
jne 0x10085c1d
mov ecx, dword [esi + 0x28]
add ecx, eax
cmp ecx, dword [esi + 0x30]
jge 0x10085c16
mov dword [esp + 4], eax
lea eax, [ebx + ebp]
cmp eax, dword [esi + 4]
jl 0x10085cd0
xor eax, eax
jmp 0x10085d26
mov dword [esp + 4], eax
lea ecx, [ebx + ebp]
mov eax, dword [esi + 4]
cmp ecx, eax
jl 0x10085cd0
cmp ebx, eax
jge 0x10085d2e
cmp ebp, 0x101
mov eax, 0x100
cmovge eax, ebp
lea ecx, [ebp*4]
cmp ecx, eax
cmovl eax, ecx
cmp ebp, 8
mov ecx, 0x20
cmovge ecx, eax
lea edx, [ebx + ecx]
lea edi, [ebx + ecx]
inc edi
mov eax, dword [esi + 8]
cmp eax, edx
jg 0x10085ccd
test eax, eax
je 0x10085c7b
mov ecx, eax
shr ecx, 0x1f
add ecx, eax
sar ecx, 1
add ecx, eax
jmp 0x10085c80
mov ecx, 8
cmp ecx, edi
cmovle ecx, edi
cmp eax, ecx
jge 0x10085ccd
mov dword [esp + 0xc], ecx
lea eax, [ecx + ecx]
push eax
call fcn.100484d0
add esp, 4
mov edx, dword [esi + 0xc]
test edx, edx
je 0x10085cc3
mov ecx, dword [esi + 4]
add ecx, ecx
push ecx
push edx
push eax
mov dword [esp + 0x14], eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push dword [esi + 0xc]
call fcn.10048500
mov eax, dword [esp + 0xc]
add esp, 4
mov dword [esi + 0xc], eax
mov eax, dword [esp + 0xc]
mov dword [esi + 8], eax
mov dword [esi + 4], edi
mov edi, dword [esi + 0xc]
mov eax, dword [esp]
sub ebx, eax
je 0x10085cf4
mov eax, dword [esp]
lea eax, [edi + eax*2]
lea ecx, [eax + ebp*2]
add ebx, ebx
push ebx
push eax
push ecx
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [esp + 0xc]
add esp, 0xc
lea eax, [edi + eax*2]
mov ecx, ebp
add ecx, ebp
push ecx
push dword [esp + 0x28]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add ebp, dword [esi + 0x2c]
mov dword [esi + 0x2c], ebp
mov eax, dword [esp + 4]
add dword [esi + 0x28], eax
cmp dword [esi + 4], ebp
jle 0x10085d2e
mov eax, dword [esi + 0xc]
mov word [eax + ebp*2], 0
mov al, 1
add esp, 0x10
pop esi
pop edi
pop ebx
pop ebp
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x10086080
Capabilities:
Terminate process

Disassembly:
push ebp
push ebx
push edi
push esi
push eax
mov ebx, edx
mov edi, ecx
mov ebp, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
lea ecx, [ebx + 0x18]
push 0
push ebp
call fcn.10086140
add esp, 8
test ebp, ebp
jle 0x100860ca
test eax, eax
je 0x100860ca
mov ecx, dword [esp + 0x18]
mov edx, ebp
nop dword [eax]
cmp dword [edi + 4], ecx
jle 0x10086135
mov esi, dword [edi + 0xc]
movzx esi, word [esi + ecx*2]
mov word [eax], si
add eax, 2
inc ecx
dec edx
jne 0x100860b0
mov dword [esp], ebx
mov eax, dword [esp + 0x18]
lea ebx, [eax + eax]
mov esi, dword [edi + 0xc]
add esi, ebx
lea eax, [esi + ebp*2]
push eax
push esi
call fcn.10048cc0
add esp, 8
sub dword [edi + 0x28], eax
sub dword [edi + 0x2c], ebp
mov ecx, dword [edi + 0xc]
mov eax, dword [esp + 0x18]
lea eax, [ecx + eax*2]
movzx eax, word [eax + ebp*2]
test ax, ax
je 0x10086121
lea edx, [ebx + ebp*2]
add ecx, edx
add ecx, 2
nop word [eax + eax]
mov word [esi], ax
add esi, 2
movzx eax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10086110
mov word [esi], 0
mov eax, dword [esp]
mov byte [eax + 0xf], 0
add esp, 4
pop esi
pop edi
pop ebx
pop ebp
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3

Function at 0x10086350
Capabilities:
Terminate process

Disassembly:
push ebx
push edi
push esi
mov eax, 1
test edx, edx
jle case.0x1008638c.32
mov esi, dword [ecx + 4]
cmp esi, edx
jl 0x100863ba
mov ecx, dword [ecx + 0xc]
movzx edi, word [ecx + edx*2 - 2]
xor eax, eax
lea ebx, [edi - 0x20]
cmp ebx, 0x5d
ja case.default.0x10086375
jmp dword [ebx*4 + 0x101b025c]
cmp esi, edx
jle 0x100863ba
movzx ecx, word [ecx + edx*2]
lea edx, [ecx - 0x20]
cmp edx, 0x5d
ja case.default.0x1008638c
jmp dword [edx*4 + 0x101b03d4]
pop esi
pop edi
pop ebx
ret
cmp edi, 0x3000
je case.0x10086375.32
cmp edi, 9
je case.0x10086375.32
jmp case.0x1008638c.32
cmp ecx, 9
je case.0x1008638c.32
cmp ecx, 0x3000
je case.0x1008638c.32
mov eax, 1
jmp case.0x1008638c.32
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x100863d0
Capabilities:
Terminate process

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x3c
movss dword [esp], xmm1
mov eax, dword [ecx + 0x2c]
test eax, eax
jle 0x100865f5
movss dword [esp + 0x14], xmm0
mov dword [esp + 0x10], ecx
mov esi, dword [ecx + 0xc]
mov ecx, dword [0x10259f60]
mov edx, dword [ecx + 0x18fc]
movss xmm1, dword [ecx + 0x1900]
movaps xmm0, xmm1
divss xmm0, dword [edx + 0x10]
movups xmmword [esp + 0x2c], xmm0
lea edi, [esi + eax*2]
mov dword [esp + 0xc], edx
lea ecx, [edx + 0xc]
mov dword [esp + 8], ecx
xorps xmm0, xmm0
movaps xmm2, xmm1
addss xmm2, xmm0
movups xmmword [esp + 0x1c], xmm2
xor ebx, ebx
xorps xmm4, xmm4
mov dword [esp + 4], eax
mov dword [esp + 0x18], esi
nop
lea edx, [esi + ebx*2]
mov ebp, edx
xorps xmm6, xmm6
nop dword [eax + eax]
cmp ebp, edi
jae 0x100864a0
movzx ecx, word [ebp]
add ebp, 2
cmp ecx, 0xd
je 0x10086450
cmp ecx, 0xa
je 0x100864b0
lea esi, [ecx*4]
mov eax, dword [esp + 0xc]
add esi, dword [eax + 8]
cmp dword [eax], ecx
cmovle esi, dword [esp + 8]
movss xmm0, dword [esi]
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 4]
mulss xmm0, dword [esp + 0x2c]
addss xmm6, xmm0
jmp 0x10086450
xorps xmm5, xmm5
xorps xmm0, xmm0
jmp 0x100864c6
xorps xmm5, xmm5
movaps xmm0, xmm6
cmpless xmm0, xmm5
andnps xmm0, xmm6
movups xmm5, xmmword [esp + 0x1c]
xorps xmm6, xmm6
sub ebp, edx
cmp ebp, 2
jl 0x100865f5
test ebx, ebx
jne 0x100864e6
movaps xmm7, xmm4
addss xmm7, dword [0x101a8780]
ucomiss xmm7, dword [esp]
ja 0x10086539
movaps xmm7, xmm5
cmpeqss xmm7, dword [0x101a8780]
movaps xmm2, xmm7
andps xmm2, xmm1
movss xmm3, dword [0x101af354]
andnps xmm7, xmm3
orps xmm7, xmm2
xorps xmm2, xmm2
cmpltss xmm2, xmm6
movaps xmm3, xmm2
andnps xmm3, xmm7
andps xmm2, xmm1
orps xmm2, xmm3
addss xmm2, xmm5
addss xmm4, xmm2
sar ebp, 1
ucomiss xmm4, dword [esp]
ja 0x10086540
add ebx, ebp
cmp ebx, eax
jl 0x10086440
jmp 0x100865f5
xor eax, eax
jmp 0x100865f5
xorps xmm1, xmm1
movss xmm4, dword [esp + 0x14]
ucomiss xmm1, xmm4
jbe 0x10086555
mov eax, ebx
jmp 0x100865f5
maxss xmm6, xmm0
ucomiss xmm6, xmm4
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 4]
mov dword [esp + 0x1c], eax
jbe 0x100865e1
mov eax, dword [esp + 0x1c]
cmp ebx, eax
mov edi, eax
cmovg edi, ebx
cmp ebp, 2
mov edx, 1
cmovge edx, ebp
movss xmm0, dword [0x101a87b0]
mov eax, ebx
mov dword [esp], edi
nop dword [eax]
cmp edi, eax
je 0x10086611
movzx ecx, word [esi + eax*2]
movaps xmm2, xmm0
cmp ecx, 0xa
je 0x100865ce
mov dword [esp + 4], eax
mov edi, esi
lea esi, [ecx*4]
mov eax, dword [esp + 0xc]
add esi, dword [eax + 8]
cmp dword [eax], ecx
cmovle esi, dword [esp + 8]
movss xmm2, dword [esi]
mov esi, edi
mov edi, dword [esp]
mov eax, dword [esp + 4]
mulss xmm2, dword [esp + 0x2c]
movaps xmm3, xmm1
addss xmm3, xmm2
ucomiss xmm3, xmm4
ja 0x100865fd
inc eax
movaps xmm1, xmm3
dec edx
jne 0x10086590
add ebp, ebx
cmp dword [esp + 0x1c], ebp
jl 0x10086611
lea eax, [ebp - 1]
cmp word [esi + ebp*2 - 2], 0xa
cmovne eax, ebp
add esp, 0x3c
pop esi
pop edi
pop ebx
pop ebp
ret
mulss xmm2, dword [0x101a72c0]
addss xmm1, xmm2
ucomiss xmm1, xmm4
ja 0x100865f5
inc eax
jmp 0x100865f5
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x100869a0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x60
mov esi, dword [ebp + 0x14]
mov edi, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
mov ecx, dword [0x10259d1c]
xor ecx, ebp
mov dword [esp + 0x58], ecx
movzx ecx, byte [eax]
jmp 0x100869e0
xor edx, edx
cmp cl, 0x25
sete dl
movzx ecx, byte [eax + edx + 1]
add eax, edx
inc eax
test cl, cl
je 0x10086b15
cmp cl, 0x25
jne 0x100869d0
cmp byte [eax + 1], 0x25
je 0x100869d0
lea ebx, [esp + 0x18]
push esi
push edi
push eax
push 0x40
push ebx
call fcn.100485e0
add esp, 0x14
nop word cs:[eax + eax]
movzx ecx, byte [ebx]
inc ebx
cmp cl, 0x20
je 0x10086a10
mov eax, dword [ebp + 0xc]
and eax, 0xfffffffe
cmp eax, 4
jne 0x10086a8f
dec ebx
push ebx
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atof]
add esp, 4
fstp qword [esp + 0x10]
movsd xmm0, qword [esp + 0x10]
movsd xmm1, qword [0x101afda8]
ucomisd xmm0, xmm1
jae 0x10086a4b
xorpd xmm1, xmm1
subsd xmm0, xmm1
movsd qword [esp + 8], xmm0
setae al
fld qword [esp + 8]
fnstcw word [esp + 4]
movzx ecx, word [esp + 4]
or ecx, 0xc00
mov word [esp + 6], cx
fldcw word [esp + 6]
fistp qword [esp + 8]
fldcw word [esp + 4]
movzx esi, al
shl esi, 0x1f
xor esi, dword [esp + 0xc]
mov edi, dword [esp + 8]
jmp 0x10086b15
xor eax, eax
cmp cl, 0x2d
sete al
xor edx, edx
cmp byte [ebx + eax - 1], 0x2b
sete dl
add edx, eax
mov ch, byte [ebx + edx - 1]
mov al, ch
add al, 0xd0
mov byte [esp + 3], al
mov eax, 0
mov esi, 0
cmp byte [esp + 3], 9
ja 0x10086aff
add ebx, edx
xor edx, edx
xor esi, esi
nop word cs:[eax + eax]
mov eax, edx
mov edx, 0xa
mul edx
mov edi, eax
movzx eax, ch
add esi, esi
lea esi, [esi + esi*4]
add eax, 0xffffffd0
add eax, edi
adc esi, edx
mov ch, byte [ebx]
mov byte [esp + 3], ch
add ch, 0xd0
inc ebx
mov edx, eax
cmp ch, 0xa
mov ch, byte [esp + 3]
jb 0x10086ad0
mov edi, eax
neg edi
mov edx, 0
sbb edx, esi
cmp cl, 0x2d
cmovne edi, eax
cmovne edx, esi
mov esi, edx
mov ecx, dword [esp + 0x58]
xor ecx, ebp
call fcn.10155bf1
mov eax, edi
mov edx, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
Function at 0x10086b30
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push edi
push esi
sub esp, 0x6c
movss xmm0, dword [esp + 0x80]
mov eax, dword [esp + 0x78]
mov ecx, dword [0x10259d1c]
xor ecx, esp
mov dword [esp + 0x68], ecx
movzx ecx, byte [eax]
test cl, cl
je 0x10086c3e
mov edi, dword [esp + 0x7c]
jmp 0x10086b78
xor edx, edx
cmp cl, 0x25
sete dl
movzx ecx, byte [eax + edx + 1]
add eax, edx
inc eax
test cl, cl
je 0x10086c3e
cmp cl, 0x25
jne 0x10086b60
cmp byte [eax + 1], 0x25
je 0x10086b60
cvtss2sd xmm0, xmm0
movsd qword [esp + 0xc], xmm0
mov dword [esp + 8], eax
lea esi, [esp + 0x28]
mov dword [esp], esi
mov dword [esp + 4], 0x40
call fcn.100485e0
nop word cs:[eax + eax]
movzx eax, byte [esi]
inc esi
cmp al, 0x20
je 0x10086bb0
and edi, 0xfffffffe
cmp edi, 4
jne 0x10086bd6
dec esi
mov dword [esp], esi
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atof]
fstp dword [esp + 0x18]
movss xmm0, dword [esp + 0x18]
jmp 0x10086c3e
xor ecx, ecx
cmp al, 0x2d
sete cl
xor edx, edx
cmp byte [esi + ecx - 1], 0x2b
sete dl
add edx, ecx
movzx ecx, byte [esi + edx - 1]
mov ah, cl
add ah, 0xd0
xorps xmm0, xmm0
cmp ah, 9
ja 0x10086c33
add esi, edx
movss xmm1, dword [0x101a89bc]
nop word cs:[eax + eax]
movzx ecx, cl
add ecx, 0xffffffd0
xorps xmm2, xmm2
cvtsi2ss xmm2, ecx
mulss xmm0, xmm1
addss xmm0, xmm2
movzx ecx, byte [esi]
mov edx, ecx
add dl, 0xd0
inc esi
cmp dl, 0xa
jb 0x10086c10
cmp al, 0x2d
jne 0x10086c3e
xorps xmm0, xmmword [0x101a87e0]
movss dword [esp + 0x14], xmm0
fld dword [esp + 0x14]
fstp xword [esp + 0x1c]
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.10155bf1
fld xword [esp + 0x1c]
add esp, 0x6c
pop esi
pop edi
ret
Function at 0x10086c70
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x78
movsd xmm0, qword [ebp + 0x10]
mov eax, dword [ebp + 8]
mov ecx, dword [0x10259d1c]
xor ecx, ebp
mov dword [esp + 0x74], ecx
movzx ecx, byte [eax]
test cl, cl
je 0x10086d7f
mov edi, dword [ebp + 0xc]
jmp 0x10086cb8
xor edx, edx
cmp cl, 0x25
sete dl
movzx ecx, byte [eax + edx + 1]
add eax, edx
inc eax
test cl, cl
je 0x10086d7f
cmp cl, 0x25
jne 0x10086ca0
cmp byte [eax + 1], 0x25
je 0x10086ca0
movsd qword [esp + 0xc], xmm0
mov dword [esp + 8], eax
lea esi, [esp + 0x34]
mov dword [esp], esi
mov dword [esp + 4], 0x40
call fcn.100485e0
nop word cs:[eax + eax]
movzx eax, byte [esi]
inc esi
cmp al, 0x20
je 0x10086cf0
and edi, 0xfffffffe
cmp edi, 4
jne 0x10086d16
dec esi
mov dword [esp], esi
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atof]
fstp qword [esp + 0x20]
movsd xmm0, qword [esp + 0x20]
jmp 0x10086d7f
xor ecx, ecx
cmp al, 0x2d
sete cl
xor edx, edx
cmp byte [esi + ecx - 1], 0x2b
sete dl
add edx, ecx
movzx ecx, byte [esi + edx - 1]
mov ah, cl
add ah, 0xd0
xorpd xmm0, xmm0
cmp ah, 9
ja 0x10086d73
add esi, edx
movsd xmm1, qword [0x101b0028]
nop word cs:[eax + eax]
movzx ecx, cl
add ecx, 0xffffffd0
xorps xmm2, xmm2
cvtsi2sd xmm2, ecx
mulsd xmm0, xmm1
addsd xmm0, xmm2
movzx ecx, byte [esi]
mov edx, ecx
add dl, 0xd0
inc esi
cmp dl, 0xa
jb 0x10086d50
cmp al, 0x2d
jne 0x10086d7f
xorpd xmm0, xmmword [0x101a73a0]
movsd qword [esp + 0x18], xmm0
fld qword [esp + 0x18]
fstp xword [esp + 0x28]
mov ecx, dword [esp + 0x74]
xor ecx, ebp
call fcn.10155bf1
fld xword [esp + 0x28]
lea esp, [ebp - 8]
pop esi
pop edi
pop ebp
ret