joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5ac559
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [ecx + 0xc]
push ebx
push esi
mov esi, dword [ebp + 8]
mov edx, dword [eax + 0x28]
mov dword [ebp - 0x10], edx
push edi
mov edi, dword [ebp + 0xc]
imul edx, edi
sub edi, dword [ecx + 0x18]
add edx, dword [eax + 8]
mov eax, dword [ecx + 0x10]
lea ebx, [edx + esi*2]
sub esi, dword [ecx + 0x14]
mov edx, dword [eax + 0x28]
imul edi, edx
mov dword [ebp - 0x14], edx
mov dword [ebp + 0xc], ebx
lea esi, [edi + esi*2]
add esi, dword [eax + 8]
movzx eax, byte [ecx + 0x20]
mov edx, eax
mov dword [ebp + 8], esi
shr edx, 3
add edx, eax
mov dword [ebp - 4], edx
mov eax, dword [ebp + 0x10]
mov edi, esi
mov dword [ebp - 8], ebx
sub edi, ebx
mov esi, ebx
mov ebx, eax
movzx eax, word [edi + esi]
mov ecx, eax
and eax, 0xf0f
and ecx, 0xf0f0
shl ecx, 0xc
or ecx, eax
movzx eax, word [esi]
imul ecx, edx
push eax
shr ecx, 4
mov eax, ecx
shr eax, 0xc
xor eax, ecx
shr ecx, 0xc
and eax, 0xf0f
xor eax, ecx
push eax
call fcn.005ac341
mov edx, dword [ebp - 4]
mov word [esi], ax
lea esi, [esi + 2]
pop ecx
pop ecx
sub ebx, 1
jne 0x5ac5b4
mov ebx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
add ebx, dword [ebp - 0x10]
add esi, dword [ebp - 0x14]
sub dword [ebp + 0x14], 1
mov dword [ebp + 0xc], ebx
mov dword [ebp + 8], esi
jne 0x5ac5a6
pop edi
pop esi
pop ebx
leave
ret 0x10

Function at 0x5ad2bf
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [ecx + 0xc]
push ebx
push esi
mov esi, dword [ebp + 8]
mov edx, dword [eax + 0x28]
push edi
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0xc], edx
imul edx, edi
sub edi, dword [ecx + 0x18]
add edx, dword [eax + 8]
mov eax, dword [ecx + 0x10]
lea edx, [edx + esi*4]
sub esi, dword [ecx + 0x14]
mov ebx, dword [eax + 0x28]
imul edi, ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 4], edx
lea ebx, [edi + esi*2]
add ebx, dword [eax + 8]
mov dword [ebp - 8], ebx
mov eax, dword [ebp + 0x10]
mov dword [ebp + 8], eax
mov eax, ebx
mov dword [ebp + 0xc], eax
mov ebx, edx
movzx eax, word [eax]
mov edi, dword [ebx]
push eax
call fcn.005ad17f
mov esi, eax
mov edx, 0x100
pop ecx
mov ecx, esi
mov eax, edi
shr ecx, 0x18
sub edx, ecx
shr eax, 8
mov ecx, edi
and eax, 0xffff00ff
and ecx, 0xff00ff
imul eax, edx
imul ecx, edx
shr edi, 8
shr ecx, 8
xor ecx, eax
mov eax, 0xff00ff
and edi, eax
and ecx, eax
mov eax, dword [ebp + 0xc]
imul edi, edx
add eax, 2
mov dword [ebp + 0xc], eax
xor ecx, edi
add ecx, esi
sub dword [ebp + 8], 1
mov dword [ebx], ecx
lea ebx, [ebx + 4]
jne 0x5ad30b
mov edx, dword [ebp - 4]
mov ebx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
add ebx, dword [ebp - 0x10]
sub dword [ebp + 0x14], 1
mov dword [ebp - 4], edx
mov dword [ebp - 8], ebx
jne 0x5ad2fe
pop edi
pop esi
pop ebx
leave
ret 0x10
Function at 0x5b8c76
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
mov eax, dword [ecx + 8]
push ebx
mov ebx, dword [ebp + 0x14]
mov dword [ebp - 4], eax
push esi
push edi
test ebx, ebx
je 0x5b8d14
xor esi, esi
cmp dword [ebp + 0x10], esi
jle 0x5b8dca
movzx edi, byte [esi + ebx]
test edi, edi
je 0x5b8d09
mov eax, dword [ebp + 8]
movzx eax, word [eax + esi*2]
push eax
call fcn.005b8bde
push dword [ebp - 4]
mov dword [ebp + 0x14], eax
push eax
mov eax, dword [ebp + 0xc]
push dword [eax + esi*4]
call fcn.005b8b6a
add esp, 0x10
mov edx, eax
cmp edi, 0xff
jae 0x5b8ce3
mov ecx, edi
shr ecx, 7
add ecx, edi
push ecx
push dword [ebp + 0x14]
push edx
call fcn.005b8b6a
add esp, 0xc
mov edx, eax
mov ecx, edx
mov eax, edx
shr ecx, 8
shr eax, 5
and ecx, 0xf800
and eax, 0x7e0
shr edx, 3
or ecx, eax
and edx, 0x1f
mov eax, dword [ebp + 8]
or ecx, edx
mov word [eax + esi*2], cx
inc esi
cmp esi, dword [ebp + 0x10]
jl 0x5b8c99
jmp 0x5b8dca
xor edi, edi
mov dword [ebp + 0x14], edi
cmp dword [ebp + 0x10], edi
jle 0x5b8dca
mov ebx, 0x100
sub ebx, eax
mov eax, dword [ebp + 8]
movzx eax, word [eax + edi*2]
push eax
call fcn.005b8bde
mov esi, eax
mov eax, dword [ebp + 0xc]
pop ecx
mov edx, dword [eax + edi*4]
mov edi, esi
shr edi, 8
mov ecx, edx
shr ecx, 8
mov eax, 0xffff00ff
and ecx, eax
and edi, eax
imul ecx, dword [ebp - 4]
mov eax, edx
imul edi, ebx
and eax, 0xff00ff
imul eax, dword [ebp - 4]
shr edx, 8
add edi, ecx
mov ecx, esi
and ecx, 0xff00ff
shr esi, 8
imul ecx, ebx
add ecx, eax
mov eax, 0xff00ff
and esi, eax
shr ecx, 8
and edx, eax
imul esi, ebx
imul edx, dword [ebp - 4]
xor edi, ecx
and edi, eax
add esi, edx
xor edi, esi
mov ecx, edi
mov eax, edi
shr ecx, 8
shr eax, 5
and ecx, 0xf800
and eax, 0x7e0
shr edi, 3
or ecx, eax
and edi, 0x1f
mov eax, dword [ebp + 8]
or ecx, edi
mov edi, dword [ebp + 0x14]
mov word [eax + edi*2], cx
inc edi
mov dword [ebp + 0x14], edi
cmp edi, dword [ebp + 0x10]
jl 0x5b8d2c
pop edi
pop esi
pop ebx
leave
ret 0x10
Function at 0x5b8dd1
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ecx
mov edx, dword [ebp + 0x14]
mov ecx, dword [ecx + 8]
mov dword [ebp - 4], ecx
push ebx
push esi
push edi
test edx, edx
je 0x5b8e45
xor edi, edi
cmp dword [ebp + 0x10], edi
jle 0x5b8ed9
mov esi, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
sub eax, esi
mov dword [ebp + 8], eax
movzx ebx, byte [edi + edx]
test ebx, ebx
je 0x5b8e37
push ecx
push dword [esi]
push dword [eax + esi]
call fcn.005b8b6a
add esp, 0xc
cmp ebx, 0xff
jae 0x5b8e2c
mov ecx, ebx
shr ecx, 7
add ecx, ebx
push ecx
push dword [esi]
push eax
call fcn.005b8b6a
add esp, 0xc
mov ecx, dword [ebp - 4]
mov edx, dword [ebp + 0x14]
mov dword [esi], eax
mov eax, dword [ebp + 8]
inc edi
add esi, 4
cmp edi, dword [ebp + 0x10]
jl 0x5b8dfb
jmp 0x5b8ed9
mov ebx, dword [ebp + 0x10]
test ebx, ebx
jle 0x5b8ed9
mov edx, dword [ebp + 0xc]
mov eax, 0x100
sub eax, ecx
mov ecx, dword [ebp + 8]
sub edx, ecx
mov dword [ebp + 0x10], eax
mov dword [ebp + 0x14], ecx
mov dword [ebp + 8], edx
mov edx, dword [ecx + edx]
mov edi, dword [ecx]
mov esi, edi
shr esi, 8
mov ecx, 0xffff00ff
and esi, ecx
imul esi, eax
mov eax, edx
shr eax, 8
and eax, ecx
mov ecx, edi
imul eax, dword [ebp - 4]
and ecx, 0xff00ff
imul ecx, dword [ebp + 0x10]
shr edi, 8
add esi, eax
mov eax, edx
and eax, 0xff00ff
shr edx, 8
imul eax, dword [ebp - 4]
add ecx, eax
mov eax, dword [ebp + 0x10]
shr ecx, 8
xor esi, ecx
mov ecx, 0xff00ff
and edi, ecx
and edx, ecx
imul edx, dword [ebp - 4]
and esi, ecx
mov ecx, dword [ebp + 0x14]
imul edi, eax
add edi, edx
mov edx, dword [ebp + 8]
xor esi, edi
mov dword [ecx], esi
add ecx, 4
mov dword [ebp + 0x14], ecx
sub ebx, 1
jne 0x5b8e68
pop edi
pop esi
pop ebx
leave
ret 0x10
Function at 0x5d7c75
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
xor esi, esi
xor edx, edx
inc edx
mov eax, edx
mov ecx, edx
xor eax, esi
cmp eax, 3
cmovne ecx, eax
shl ecx, 4
add ecx, dword [ebp + 8]
mov dword [ebp + edx*4 - 0x10], ecx
inc edx
cmp edx, 3
jl 0x5d7c86
mov eax, dword [ebp - 0xc]
movsd xmm1, qword [ebx + 8]
push ecx
push ecx
movsd xmm3, qword [eax]
movsd xmm4, qword [eax + 8]
mov eax, dword [ebp - 8]
subsd xmm1, xmm4
movsd qword [ebp - 0x24], xmm3
movsd qword [ebp - 0x14], xmm4
movsd xmm0, qword [eax]
movsd xmm2, qword [eax + 8]
subsd xmm0, xmm3
subsd xmm2, xmm4
mulsd xmm1, xmm0
movsd qword [ebp - 0x1c], xmm0
movsd xmm0, qword [ebx]
subsd xmm0, xmm3
movsd qword [ebp - 0x2c], xmm2
mulsd xmm0, xmm2
subsd xmm1, xmm0
movsd qword [ebp - 0x34], xmm1
movsd qword [esp], xmm1
call fcn.0056bb4f
pop ecx
pop ecx
test al, al
jne 0x5d7d65
mov edi, dword [ebp + 0xc]
xor eax, eax
mov dword [ebp - 4], eax
cmp eax, 3
jge 0x5d7d79
movsd xmm1, qword [edi + 8]
movsd xmm0, qword [edi]
subsd xmm1, qword [ebp - 0x14]
subsd xmm0, qword [ebp - 0x24]
mulsd xmm1, qword [ebp - 0x1c]
mulsd xmm0, qword [ebp - 0x2c]
subsd xmm1, xmm0
movaps xmm0, xmm1
mulsd xmm0, qword [ebp - 0x34]
comisd xmm0, xmmword [0x664168]
jbe 0x5d7d5f
push ecx
push ecx
movsd qword [esp], xmm1
call fcn.005764a7
pop ecx
pop ecx
test al, al
je 0x5d7d65
mov eax, dword [ebp - 4]
inc eax
add edi, 0x10
jmp 0x5d7d0f
inc esi
add ebx, 0x10
cmp esi, 3
jl 0x5d7c83
xor al, al
pop edi
pop esi
pop ebx
leave
ret
mov al, 1
jmp 0x5d7d74
Function at 0x5d9c15
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
mov eax, dword [0x6e47f0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
xor esi, esi
xor ecx, ecx
lea edx, [ebp - 0x10]
inc ecx
mov eax, ecx
xor eax, esi
shl eax, 4
add eax, dword [ebp + 8]
inc ecx
mov dword [edx], eax
lea edx, [edx + 4]
cmp ecx, 4
jl 0x5d9c33
xor ecx, ecx
cmp ecx, 3
jge 0x5d9d81
mov eax, dword [ebp + ecx*4 - 0x10]
lea edx, [ecx + 1]
mov dword [ebp - 0x18], edx
movsd xmm3, qword [eax]
movsd xmm4, qword [eax + 8]
xor eax, eax
cmp ecx, 2
movsd qword [ebp - 0x30], xmm3
movsd qword [ebp - 0x38], xmm4
cmovne eax, edx
mov eax, dword [ebp + eax*4 - 0x10]
movsd xmm0, qword [eax]
movsd xmm2, qword [eax + 8]
subsd xmm0, xmm3
subsd xmm2, xmm4
ucomisd xmm0, qword [0x664168]
movsd qword [ebp - 0x40], xmm0
movsd qword [ebp - 0x28], xmm2
lahf
test ah, 0x44
jp 0x5d9cb7
ucomisd xmm2, qword [0x664168]
lahf
test ah, 0x44
jnp 0x5d9d69
movsd xmm1, qword [edi + 8]
subsd xmm1, xmm4
push ecx
push ecx
mulsd xmm1, xmm0
movsd xmm0, qword [edi]
subsd xmm0, xmm3
mulsd xmm0, xmm2
subsd xmm1, xmm0
movsd qword [ebp - 0x20], xmm1
movsd qword [esp], xmm1
call fcn.0056bb4f
pop ecx
pop ecx
test al, al
jne 0x5d9d70
mov ebx, dword [ebp + 0xc]
xor eax, eax
movsd xmm1, qword [ebp - 0x20]
movsd xmm3, qword [ebp - 0x28]
movsd xmm4, qword [ebp - 0x30]
mov dword [ebp - 0x14], eax
movsd xmm2, qword [ebx + 8]
movsd xmm0, qword [ebx]
subsd xmm2, qword [ebp - 0x38]
subsd xmm0, xmm4
mulsd xmm2, qword [ebp - 0x40]
mulsd xmm0, xmm3
subsd xmm2, xmm0
movaps xmm0, xmm2
mulsd xmm0, xmm1
comisd xmm0, xmmword [0x664168]
jbe 0x5d9d5a
push ecx
push ecx
movsd qword [esp], xmm2
call fcn.005764a7
pop ecx
pop ecx
test al, al
je 0x5d9d70
movsd xmm1, qword [ebp - 0x20]
movsd xmm3, qword [ebp - 0x28]
movsd xmm4, qword [ebp - 0x30]
mov eax, dword [ebp - 0x14]
inc eax
add ebx, 0x10
mov dword [ebp - 0x14], eax
cmp eax, 4
jl 0x5d9d06
mov edx, dword [ebp - 0x18]
mov ecx, edx
jmp 0x5d9c4a
inc esi
add edi, 0x10
cmp esi, 4
jl 0x5d9c2d
xor al, al
jmp 0x5d9d83
mov al, 1
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0049f7c1
leave
ret

Function at 0x5ddc38
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 0xc]
mov eax, ebx
push esi
shr eax, 4
xor esi, esi
push edi
mov edi, dword [ebp + 8]
test eax, eax
je 0x5ddc73
mov ebx, eax
rol esi, 0xf
xor esi, dword [edi]
rol esi, 0xf
xor esi, dword [edi + 4]
rol esi, 0xf
xor esi, dword [edi + 8]
rol esi, 0xf
xor esi, dword [edi + 0xc]
add edi, 0x10
sub ebx, 1
jne 0x5ddc51
mov ebx, dword [ebp + 0xc]
shr ebx, 2
and ebx, 3
lea eax, [edi + ebx*4]
jmp 0x5ddc86
rol esi, 0xf
xor esi, dword [edi]
add edi, 4
cmp edi, eax
jb 0x5ddc7e
pop edi
mov eax, esi
pop esi
pop ebx
pop ebp
ret
Function at 0x5fdcae
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push esi
mov esi, dword [ebp + 8]
push edi
push dword [ebp + 0xc]
push esi
call fcn.005fd9f4
mov eax, dword [ebp + 0x14]
xor edi, edi
pop ecx
pop ecx
mov ecx, dword [esi + 8]
mov edx, edi
mov dword [eax], edi
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xc], ecx
mov dword [eax], edi
test ecx, ecx
jle 0x5fde57
mov eax, edi
mov dword [ebp - 0x14], edi
mov ecx, dword [esi + 0x14]
inc edx
mov dword [ebp - 0x18], edx
lea esi, [eax + ecx]
mov eax, edx
cdq
idiv dword [ebp - 0xc]
mov eax, dword [esi]
imul edx, edx, 0x2c
lea esi, [esi + eax*8]
add esi, 4
add edx, ecx
mov dword [ebp - 0x10], edx
mov eax, dword [edx]
inc eax
mov dword [ebp - 8], eax
test eax, eax
jle 0x5fddc2
cmp dword [ebp + 0x10], 2
lea ecx, [edx + 0x18]
mov dword [ebp - 4], ecx
jne 0x5fdd71
movss xmm0, dword [ecx - 0x10]
lea edi, [ecx - 0x14]
movss xmm1, dword [edi]
subss xmm1, dword [esi]
subss xmm0, dword [esi + 4]
lea esi, [ecx - 4]
mov ecx, esi
movss dword [esi], xmm1
movss dword [esi + 4], xmm0
call fcn.00531af1
mov ecx, dword [ebp - 4]
movss xmm1, dword [esi]
movss xmm0, dword [ecx]
xorps xmm0, xmmword [0x668fa0]
movss dword [esi], xmm0
mov esi, edi
movss dword [ecx], xmm1
add ecx, 8
sub dword [ebp - 8], 1
mov dword [ebp - 4], ecx
jne 0x5fdd1f
jmp 0x5fddbd
movss xmm0, dword [ecx - 0x10]
lea edi, [ecx - 0x14]
movss xmm1, dword [edi]
subss xmm1, dword [esi]
subss xmm0, dword [esi + 4]
lea esi, [ecx - 4]
mov ecx, esi
movss dword [esi], xmm1
movss dword [esi + 4], xmm0
call fcn.00531af1
mov ecx, dword [ebp - 4]
movss xmm0, dword [esi]
xorps xmm0, xmmword [0x668fa0]
mov eax, dword [ecx]
mov dword [esi], eax
mov esi, edi
movss dword [ecx], xmm0
add ecx, 8
sub dword [ebp - 8], 1
mov dword [ebp - 4], ecx
jne 0x5fdd71
mov edx, dword [ebp - 0x10]
xor edi, edi
mov ecx, dword [ebp + 0x14]
mov eax, dword [ecx]
cmp dword [edx], edi
jne 0x5fddd8
add eax, 5
mov dword [ecx], eax
mov eax, dword [ebp + 0x18]
add dword [eax], 9
jmp 0x5fdde3
add eax, 6
mov dword [ecx], eax
mov eax, dword [ebp + 0x18]
add dword [eax], 0xc
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x18]
add eax, 0x2c
mov esi, dword [ebp + 8]
mov dword [ebp - 0x14], eax
cmp edx, dword [ebp - 0xc]
jl 0x5fdce5
mov edx, edi
mov eax, dword [ebp + 8]
inc edx
mov dword [ebp + 0x10], edx
mov ecx, dword [eax + 0x14]
mov eax, edx
cdq
idiv dword [ebp - 0xc]
lea esi, [edi + ecx]
mov eax, dword [esi]
imul edx, edx, 0x2c
movss xmm1, dword [edx + ecx + 0x14]
movss xmm0, dword [edx + ecx + 0x18]
add ecx, 0x24
addss xmm1, dword [esi + eax*8 + 0x14]
addss xmm0, dword [esi + eax*8 + 0x18]
add ecx, edx
movss dword [ecx], xmm1
movss dword [ecx + 4], xmm0
call fcn.00531af1
mov eax, dword [ebp + 0x14]
add edi, 0x2c
mov edx, dword [ebp + 0x10]
add dword [eax], 4
mov eax, dword [ebp + 0x18]
add dword [eax], 6
cmp edx, dword [ebp - 0xc]
jl 0x5fddfd
pop edi
pop esi
leave
ret
Function at 0x600686
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [ebp + 8]
push ecx
push ecx
movss xmm0, dword [esi + 4]
movss xmm1, dword [esi]
mulss xmm1, dword [0x678618]
mulss xmm0, dword [0x667818]
mulss xmm1, dword [esi + 8]
mulss xmm0, dword [esi + 4]
subss xmm1, xmm0
cvtps2pd xmm0, xmm1
movsd qword [esp], xmm0
call fcn.00622db0
movss xmm3, dword [esi + 4]
movss xmm5, dword [esi]
movaps xmm2, xmm3
mov edx, dword [ebp + 0xc]
addss xmm5, xmm5
movss xmm7, dword [0x667818]
fstp dword [ebp - 4]
addss xmm3, dword [ebp - 4]
subss xmm2, dword [ebp - 4]
movss dword [ebp + 8], xmm5
pop ecx
pop ecx
movaps xmm0, xmm3
mov ecx, dword [ebp + 0x10]
mulss xmm0, xmm2
movaps xmm1, xmm2
mulss xmm1, xmm7
movaps xmm6, xmm3
mulss xmm6, xmm5
movaps xmm4, xmm3
movss dword [edx], xmm0
movss dword [ebp - 0xc], xmm0
movaps xmm0, xmm5
mulss xmm0, xmm2
mulss xmm1, xmm3
mulss xmm4, xmm7
subss xmm1, xmm0
movss dword [ebp - 4], xmm3
movaps xmm0, xmm3
addss xmm0, xmm3
subss xmm1, xmm6
divss xmm1, xmm7
movaps xmm7, xmm5
movss dword [edx + 4], xmm1
addss xmm7, xmm5
movaps xmm1, xmm5
subss xmm1, xmm0
movaps xmm0, xmm4
subss xmm0, xmm7
mulss xmm1, xmm5
subss xmm5, xmm3
movss xmm3, dword [ebp + 8]
mulss xmm0, xmm2
subss xmm3, xmm2
addss xmm1, xmm0
movaps xmm0, xmm3
mulss xmm0, xmm5
divss xmm1, dword [0x667818]
movss dword [edx + 0xc], xmm0
movaps xmm0, xmm2
mulss xmm0, xmm2
movss dword [edx + 8], xmm1
mulss xmm0, dword [ebp - 4]
movss dword [ecx], xmm0
movss xmm0, dword [ebp + 8]
subss xmm0, xmm4
mulss xmm0, xmm2
movss dword [ebp + 8], xmm0
movaps xmm0, xmm7
mulss xmm0, dword [ebp - 4]
movss xmm1, dword [ebp + 8]
addss xmm1, xmm0
movaps xmm0, xmm1
movss dword [ebp + 8], xmm1
mulss xmm0, xmm2
divss xmm0, dword [0x68f4d4]
movss dword [ecx + 4], xmm0
subss xmm7, xmm4
mov eax, dword [ebp + 0x14]
movaps xmm1, xmm3
mulss xmm1, dword [0x65eb5c]
mulss xmm7, xmm2
addss xmm7, xmm6
movaps xmm0, xmm7
mulss xmm7, dword [ebp - 4]
mulss xmm0, xmm3
divss xmm7, dword [0x68f4d4]
divss xmm0, dword [0x667818]
movss dword [ecx + 8], xmm0
movaps xmm0, xmm1
mulss xmm0, xmm3
mulss xmm1, xmm5
mulss xmm0, xmm5
mulss xmm1, xmm5
movss dword [ecx + 0xc], xmm0
movss xmm0, dword [ebp - 0xc]
mulss xmm0, dword [ebp - 4]
movss dword [eax + 0xc], xmm1
xorps xmm1, xmm1
movss dword [eax + 4], xmm7
movss dword [eax], xmm0
movss xmm0, dword [ebp + 8]
mulss xmm0, xmm5
divss xmm0, dword [0x667818]
movss dword [eax + 8], xmm0
movss xmm2, dword [esi]
comiss xmm1, xmm2
pop esi
jbe 0x600870
movss xmm0, dword [edx + 4]
comiss xmm0, xmm1
ja 0x60087b
comiss xmm2, xmm1
jbe 0x6008a8
comiss xmm1, dword [edx + 4]
jbe 0x6008a8
movss xmm1, dword [0x668fa0]
sub edx, ecx
push 4
pop eax
movss xmm0, dword [edx + ecx]
xorps xmm0, xmm1
movss dword [edx + ecx], xmm0
movss xmm0, dword [ecx]
xorps xmm0, xmm1
movss dword [ecx], xmm0
lea ecx, [ecx + 4]
sub eax, 1
jne 0x600888
leave
ret
Function at 0x6008aa
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov edx, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp + 0x14]
and dword [edx], 0
mov dword [edx + 4], 0x3eaaaaab
mov dword [edx + 8], 0x3f2aaaab
mov dword [edx + 0xc], 0x3f800000
and dword [ecx], 0
and dword [ecx + 4], 0
mov dword [ecx + 8], 0x3eaaaaab
mov dword [ecx + 0xc], 0x3f800000
and dword [eax], 0
mov dword [eax + 4], 0x3eaaaaab
mov dword [eax + 8], 0x3f2aaaab
mov dword [eax + 0xc], 0x3f800000
mov eax, dword [ebp + 8]
movss xmm0, dword [eax + 8]
comiss xmm0, dword [0x6567cc]
jbe 0x600939
movss xmm1, dword [0x668fa0]
sub edx, ecx
push 4
pop eax
movss xmm0, dword [edx + ecx]
xorps xmm0, xmm1
movss dword [edx + ecx], xmm0
movss xmm0, dword [ecx]
xorps xmm0, xmm1
movss dword [ecx], xmm0
lea ecx, [ecx + 4]
sub eax, 1
jne 0x600919
pop ebp
ret
Function at 0x60093b
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push esi
mov esi, dword [ebp + 8]
push ecx
push ecx
movss xmm0, dword [esi]
movss xmm1, dword [esi + 4]
mulss xmm1, dword [0x67975c]
mulss xmm0, dword [0x67861c]
mulss xmm1, dword [esi + 4]
mulss xmm0, dword [esi + 8]
subss xmm1, xmm0
cvtps2pd xmm0, xmm1
movsd qword [esp], xmm0
call fcn.00622db0
movss xmm6, dword [esi + 4]
movss xmm3, dword [0x667818]
movss xmm5, dword [esi]
mulss xmm5, dword [0x679758]
mov edx, dword [ebp + 0xc]
mulss xmm6, xmm3
pop ecx
fstp dword [ebp + 8]
pop ecx
movaps xmm4, xmm6
mov ecx, dword [ebp + 0x10]
addss xmm6, dword [ebp + 8]
subss xmm4, dword [ebp + 8]
movaps xmm0, xmm6
movaps xmm2, xmm6
mulss xmm0, xmm4
movaps xmm1, xmm4
mulss xmm1, xmm3
movss dword [edx], xmm0
movaps xmm0, xmm5
mulss xmm0, xmm4
mulss xmm1, xmm6
mulss xmm2, xmm3
subss xmm1, xmm0
movaps xmm0, xmm6
mulss xmm0, xmm5
subss xmm1, xmm0
movaps xmm0, xmm5
addss xmm0, xmm5
divss xmm1, xmm3
subss xmm2, xmm0
movaps xmm0, xmm6
addss xmm0, xmm6
movss dword [edx + 4], xmm1
movaps xmm1, xmm5
mulss xmm2, xmm4
subss xmm1, xmm0
mulss xmm1, xmm5
addss xmm2, xmm1
movaps xmm1, xmm4
mulss xmm1, xmm4
divss xmm2, xmm3
movaps xmm3, xmm5
subss xmm5, xmm4
subss xmm3, xmm6
movss dword [edx + 8], xmm2
movss xmm2, dword [0x65eb5c]
movaps xmm0, xmm5
mulss xmm0, xmm3
movss dword [edx + 0xc], xmm0
movaps xmm0, xmm1
mulss xmm0, xmm4
mulss xmm1, xmm5
movss dword [ecx], xmm0
movaps xmm0, xmm5
mulss xmm0, xmm5
mulss xmm1, xmm2
mulss xmm0, xmm4
movss dword [ecx + 4], xmm1
movaps xmm1, xmm6
mulss xmm1, xmm6
movss dword [ecx + 8], xmm0
movaps xmm0, xmm5
mulss xmm0, xmm2
mulss xmm0, xmm5
mulss xmm0, xmm5
movss dword [ecx + 0xc], xmm0
mov eax, dword [ebp + 0x14]
movaps xmm0, xmm1
mulss xmm0, xmm6
mulss xmm1, xmm3
movss dword [eax], xmm0
movaps xmm0, xmm3
mulss xmm0, xmm3
mulss xmm1, xmm2
mulss xmm0, xmm6
movss dword [eax + 4], xmm1
movss dword [eax + 8], xmm0
movaps xmm0, xmm3
mulss xmm0, xmm2
mulss xmm0, xmm3
mulss xmm0, xmm3
movss dword [eax + 0xc], xmm0
movss xmm0, dword [esi]
comiss xmm0, dword [0x6567cc]
pop esi
jbe 0x600afa
movss xmm1, dword [0x668fa0]
sub edx, ecx
push 4
pop eax
movss xmm0, dword [edx + ecx]
xorps xmm0, xmm1
movss dword [edx + ecx], xmm0
movss xmm0, dword [ecx]
xorps xmm0, xmm1
movss dword [ecx], xmm0
lea ecx, [ecx + 4]
sub eax, 1
jne 0x600ada
pop ebp
ret
Function at 0x60e1c7
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
push esi
push edi
push dword [ebp + 0x18]
xor edi, edi
xor esi, esi
push dword [ebp + 0x1c]
inc edi
mov dword [ebp - 8], esi
push edi
call fcn.0061dbbc
add esp, 0xc
mov dword [ebp - 4], eax
cmp dword [ebp - 4], esi
jne 0x60e1f4
xor eax, eax
jmp 0x60e2f0
mov eax, dword [ebp - 4]
mov ecx, SysReAllocString
push 0x40
push 0x4a4eae
mov dword [eax + 0x2a4], ecx
mov eax, dword [ebp - 4]
push dword [ebp - 4]
mov dword [eax + 0x2a8], ecx
call fcn.0060fc0b
push esi
push eax
call fcn.004a4ec0
add esp, 0x14
test eax, eax
je 0x60e22f
push esi
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
push dword [ebp - 4]
call fcn.0061dd77
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp - 4]
call fcn.0060fbed
push dword [ebp + 8]
push dword [ebp - 4]
call fcn.00611b0c
add esp, 0x28
test eax, eax
jne 0x60e266
mov dword [ebp - 8], edi
mov eax, dword [ebp - 4]
mov dword [eax + 0xb4], 0x2000
cmp dword [ebp - 8], esi
jne 0x60e2a7
mov eax, dword [ebp - 4]
push dword [eax + 0xb4]
push dword [ebp - 4]
call fcn.0061dd48
pop ecx
pop ecx
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xb0], eax
mov eax, dword [ebp - 4]
cmp dword [eax + 0xb0], esi
jne 0x60e2a2
mov dword [ebp - 8], edi
cmp dword [ebp - 8], esi
je 0x60e2d7
mov eax, dword [ebp - 4]
push dword [eax + 0xb0]
push dword [ebp - 4]
call fcn.0061dc89
push dword [ebp + 0x18]
mov eax, dword [ebp - 4]
push dword [ebp + 0x20]
push dword [ebp - 4]
mov dword [eax + 0xb0], esi
call fcn.0061dc43
add esp, 0x14
jmp 0x60e1ed
push esi
push esi
push esi
push dword [ebp - 4]
call fcn.0061db0b
push dword [ebp - 4]
call fcn.0060e5c9
mov eax, dword [ebp - 4]
add esp, 0x14
pop edi
pop esi
leave
ret
Function at 0x6117b8
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push esi
mov esi, dword [ebp + 8]
mov eax, dword [esi]
test eax, eax
je 0x6117ee
push edi
mov edi, 0x10c
cmp dword [ebp + 0xc], edi
jae 0x6117e1
push eax
call fcn.0061dc2f
push 2
call fcn.0061dba8
pop ecx
pop ecx
mov dword [esi], eax
push edi
push 0
push eax
call fcn.004a2900
add esp, 0xc
pop edi
pop esi
pop ebp
ret