joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1004f58e
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
push ebx
push edi
push esi
push eax
mov ebx, dword [edx]
mov esi, ecx
mov eax, dword [ebx + 0xc]
mov dword [esp], eax
movzx eax, al
xor eax, 0x811c9dc5
imul edi, eax, 0x1000193
mov eax, 0xfffffffd
movzx ecx, byte [esp + eax + 4]
xor ecx, edi
imul edi, ecx, 0x1000193
inc eax
jne 0x1004f5b0
mov eax, dword [ebx + 0x28]
cmp dword [ebx + 0x2c], eax
je 0x1004f5e4
xor ebp, ebp
mov ecx, dword [eax + ebp*4]
mov eax, dword [ecx]
call dword [eax + 0x10]
xor edi, eax
mov eax, dword [ebx + 0x28]
mov ecx, dword [ebx + 0x2c]
inc ebp
sub ecx, eax
sar ecx, 2
cmp ebp, ecx
jb 0x1004f5ca
and edi, dword [esi + 0x20]
mov eax, edi
add esp, 4
pop esi
pop edi
pop ebx
pop ebp
ret

Function at 0x1004fda0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
push ebx
push edi
push esi
mov eax, dword [esp + 0x18]
mov edi, ecx
mov ebx, 0x811c9dc5
mov ecx, 0xfffffffc
movzx edx, byte [eax + ecx + 4]
xor edx, ebx
imul ebx, edx, 0x1000193
inc ecx
jne 0x1004fdb4
and ebx, dword [edi + 0x20]
mov ecx, dword [edi + 0x14]
mov edx, dword [edi + 8]
mov esi, dword [ecx + ebx*8]
mov ebp, edx
cmp esi, edx
je 0x1004fde4
lea ebp, [ebx + ebx]
shl ebp, 2
or ebp, 4
mov ecx, dword [ecx + ebp]
mov ebp, dword [ecx]
mov ecx, dword [eax]
cmp esi, ebp
je 0x1004fdf6
mov ebp, dword [ebp + 4]
cmp ecx, dword [ebp + 8]
jne 0x1004fde6
xor ecx, ecx
jmp 0x1004fe41
lea ecx, [edi + 4]
push eax
push dword [edx]
call fcn.1004f52c
mov eax, dword [edi + 8]
mov ebp, dword [eax]
mov eax, dword [ebp]
cmp eax, esi
je 0x1004fe2e
mov ecx, dword [ebp + 4]
mov dword [ecx], eax
mov ecx, dword [eax + 4]
mov dword [ecx], esi
mov ecx, dword [esi + 4]
mov dword [ecx], ebp
mov edx, dword [eax + 4]
mov ecx, dword [esi + 4]
mov dword [esi + 4], edx
mov edx, dword [ebp + 4]
mov dword [eax + 4], edx
mov dword [ebp + 4], ecx
mov ecx, edi
push ebx
push esi
push ebp
call fcn.1004fe52
mov ecx, edi
call fcn.1004fea4
mov cl, 1
mov eax, dword [esp + 0x14]
mov dword [eax], ebp
mov byte [eax + 4], cl
pop esi
pop edi
pop ebx
pop ebp
ret 0xc
Function at 0x1004ff40
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
push ebx
push edi
push esi
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x18]
mov edi, ecx
mov eax, 0x811c9dc5
mov ecx, 0xfffffffc
movzx edx, byte [ebp + ecx + 4]
xor edx, eax
imul eax, edx, 0x1000193
inc ecx
jne 0x1004ff58
and eax, dword [edi + 0x20]
mov esi, dword [edi + 0x14]
mov ecx, dword [edi + 8]
mov edx, dword [esi + eax*8]
cmp edx, ecx
je 0x1004ff86
lea ecx, [eax + eax]
shl ecx, 2
or ecx, 4
mov ecx, dword [esi + ecx]
mov ecx, dword [ecx]
mov ebp, dword [ebp]
cmp edx, ecx
je 0x1004ffab
mov ecx, dword [ecx + 4]
cmp ebp, dword [ecx + 8]
jne 0x1004ff89
mov eax, dword [ebx]
mov edx, dword [ebx + 4]
mov dword [edx], eax
mov eax, dword [ebx]
mov edx, dword [ebx + 4]
mov dword [eax + 4], edx
dec dword [edi + 0xc]
xor edx, edx
jmp 0x1004ffe7
mov ecx, dword [ebx]
cmp ecx, edx
je 0x1004ffd2
mov esi, dword [ebx + 4]
mov dword [esi], ecx
mov esi, dword [ecx + 4]
mov dword [esi], edx
mov esi, dword [edx + 4]
mov dword [esi], ebx
mov ebp, dword [ecx + 4]
mov esi, dword [edx + 4]
mov dword [edx + 4], ebp
mov ebp, dword [ebx + 4]
mov dword [ecx + 4], ebp
mov dword [ebx + 4], esi
mov ecx, edi
push eax
push edx
push ebx
call fcn.1004fe52
mov ecx, edi
call fcn.1004fea4
mov dl, 1
mov ecx, ebx
mov eax, dword [esp + 0x14]
mov dword [eax], ecx
mov byte [eax + 4], dl
pop esi
pop edi
pop ebx
pop ebp
ret 0xc

Function at 0x10050046
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
push ebx
push edi
push esi
mov ebx, dword [esp + 0x18]
mov edi, 0x811c9dc5
mov edx, 0xfffffffc
movzx eax, byte [ebx + edx + 4]
xor eax, edi
imul edi, eax, 0x1000193
inc edx
jne 0x10050058
and edi, dword [ecx + 0x20]
mov ebp, dword [ecx + 8]
mov ecx, dword [ecx + 0x14]
mov esi, dword [ecx + edi*8]
lea eax, [edi + edi + 1]
mov edi, dword [ebx]
mov ebx, esi
jmp 0x10050085
cmp dword [ebx + 8], edi
je 0x10050098
mov ebx, dword [ebx]
cmp esi, ebp
je 0x10050090
mov edx, dword [ecx + eax*4]
mov edx, dword [edx]
jmp 0x10050092
mov edx, ebp
cmp edx, ebx
jne 0x1005007e
jmp 0x1005009a
mov ebp, ebx
mov eax, dword [esp + 0x14]
mov dword [eax], ebp
pop esi
pop edi
pop ebx
pop ebp
ret 8

Function at 0x10050760
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
push ebx
push edi
push esi
mov ebx, dword [esp + 0x18]
mov edi, 0x811c9dc5
mov edx, 0xfffffffc
movzx eax, byte [ebx + edx + 4]
xor eax, edi
imul edi, eax, 0x1000193
inc edx
jne 0x10050772
and edi, dword [ecx + 0x20]
mov ebp, dword [ecx + 8]
mov ecx, dword [ecx + 0x14]
mov esi, dword [ecx + edi*8]
lea eax, [edi + edi + 1]
mov edi, dword [ebx]
mov ebx, esi
jmp 0x1005079f
cmp dword [ebx + 8], edi
je 0x100507b8
mov ebx, dword [ebx]
cmp esi, ebp
je 0x100507aa
mov edx, dword [ecx + eax*4]
mov edx, dword [edx]
jmp 0x100507ac
mov edx, ebp
cmp edx, ebx
jne 0x10050798
mov eax, dword [esp + 0x14]
mov dword [eax], ebp
jmp 0x100507be
mov eax, dword [esp + 0x14]
mov dword [eax], ebx
pop esi
pop edi
pop ebx
pop ebp
ret 8
Function at 0x100507c6
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
push ebx
push edi
push esi
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x18]
mov edi, ecx
mov eax, 0x811c9dc5
mov ecx, 0xfffffffc
movzx edx, byte [ebp + ecx + 4]
xor edx, eax
imul eax, edx, 0x1000193
inc ecx
jne 0x100507de
and eax, dword [edi + 0x20]
mov esi, dword [edi + 0x14]
mov ecx, dword [edi + 8]
mov edx, dword [esi + eax*8]
cmp edx, ecx
je 0x1005080c
lea ecx, [eax + eax]
shl ecx, 2
or ecx, 4
mov ecx, dword [esi + ecx]
mov ecx, dword [ecx]
mov ebp, dword [ebp]
cmp edx, ecx
je 0x10050840
mov ecx, dword [ecx + 4]
cmp ebp, dword [ecx + 8]
jne 0x1005080f
mov eax, dword [ebx]
mov edx, dword [ebx + 4]
mov dword [edx], eax
mov eax, dword [ebx]
mov edx, dword [ebx + 4]
mov dword [eax + 4], edx
dec dword [edi + 0xc]
xor edx, edx
cmp dword [ebx + 0x10], 0
je 0x1005087c
mov dword [ebx + 0x10], edx
mov dword [ebx + 0x14], edx
mov dword [ebx + 0x18], edx
jmp 0x1005087c
mov ecx, dword [ebx]
cmp ecx, edx
je 0x10050867
mov esi, dword [ebx + 4]
mov dword [esi], ecx
mov esi, dword [ecx + 4]
mov dword [esi], edx
mov esi, dword [edx + 4]
mov dword [esi], ebx
mov ebp, dword [ecx + 4]
mov esi, dword [edx + 4]
mov dword [edx + 4], ebp
mov ebp, dword [ebx + 4]
mov dword [ecx + 4], ebp
mov dword [ebx + 4], esi
mov ecx, edi
push eax
push edx
push ebx
call fcn.1004fe52
mov ecx, edi
call fcn.100508fe
mov dl, 1
mov ecx, ebx
mov eax, dword [esp + 0x14]
mov dword [eax], ecx
mov byte [eax + 4], dl
pop esi
pop edi
pop ebx
pop ebp
ret 0xc
Function at 0x100657a6
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
push ebx
push edi
push esi
push eax
mov ebx, dword [esp + 0x18]
mov edi, 0x811c9dc5
mov eax, 0xfffffffe
mov dword [esp], edx
movzx edx, byte [ebx + eax + 2]
xor edx, edi
imul edi, edx, 0x1000193
inc eax
jne 0x100657bc
and edi, dword [ecx + 0x18]
mov eax, dword [ecx + 0xc]
mov edx, dword [ecx + 4]
movzx ebp, word [ebx]
mov ecx, dword [eax + edi*8]
lea edi, [edi + edi + 1]
mov ebx, ecx
jmp 0x100657eb
cmp word [ebx + 8], bp
je 0x10065801
mov ebx, dword [ebx]
cmp ecx, edx
mov esi, ecx
je 0x100657f6
mov esi, dword [eax + edi*4]
mov esi, dword [esi]
cmp esi, ebx
jne 0x100657e3
mov eax, dword [esp]
mov dword [eax], edx
jmp 0x10065806
mov eax, dword [esp]
mov dword [eax], ebx
add esp, 4
pop esi
pop edi
pop ebx
pop ebp
ret
Function at 0x1006580e
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xc
mov esi, dword [esp + 0x20]
mov edi, ecx
mov eax, 0x811c9dc5
mov ecx, 0xfffffffe
mov dword [esp + 4], edx
movzx edx, byte [esi + ecx + 2]
xor edx, eax
imul eax, edx, 0x1000193
inc ecx
jne 0x10065829
and eax, dword [edi + 0x18]
mov edx, dword [edi + 0xc]
mov ebx, dword [edi + 4]
mov ecx, dword [edx + eax*8]
add eax, eax
mov ebp, ebx
cmp ecx, ebx
je 0x1006585d
lea ebp, [eax*4]
or ebp, 4
mov ebp, dword [edx + ebp]
mov ebp, dword [ebp]
movzx esi, word [esi]
cmp ecx, ebp
je 0x10065897
mov ebp, dword [ebp + 4]
cmp si, word [ebp + 8]
jne 0x10065860
mov eax, dword [esp + 0x24]
mov edx, eax
mov eax, dword [eax]
mov ecx, dword [edx + 4]
mov dword [ecx], eax
mov eax, dword [edx]
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
dec dword [edi + 8]
push 0x10
push edx
call fcn.1018304e
add esp, 8
xor ebx, ebx
jmp 0x100659a1
mov ebp, dword [esp + 0x24]
mov esi, dword [ebp]
cmp esi, ecx
je 0x100658c9
mov edx, dword [ebp + 4]
mov dword [edx], esi
mov edx, dword [esi + 4]
mov dword [edx], ecx
mov edx, dword [ecx + 4]
mov dword [edx], ebp
mov ebx, dword [esi + 4]
mov edx, dword [ecx + 4]
mov dword [ecx + 4], ebx
mov ebx, dword [ebp + 4]
mov dword [esi + 4], ebx
mov dword [ebp + 4], edx
mov ebx, dword [edi + 4]
mov edx, dword [edi + 0xc]
lea esi, [edx + eax*4]
mov ebp, dword [esi]
cmp ebp, ebx
je 0x100658f6
cmp ebp, ecx
je 0x10065909
or eax, 1
mov ecx, dword [edx + eax*4]
mov ecx, dword [ecx]
mov dword [edx + eax*4], ecx
mov edx, dword [esp + 0x24]
cmp ecx, edx
je 0x10065911
mov ecx, dword [edi + 0xc]
lea esi, [ecx + eax*4]
mov eax, dword [esi]
mov eax, dword [eax + 4]
jmp 0x1006590f
mov edx, dword [esp + 0x24]
shl eax, 2
or eax, 4
mov dword [esi], edx
add eax, dword [edi + 0xc]
mov esi, eax
jmp 0x1006590d
mov edx, dword [esp + 0x24]
mov eax, edx
mov dword [esi], eax
movss xmm0, dword [edi + 8]
movsd xmm1, qword [0x101d4490]
movss xmm2, dword [edi + 0x1c]
mov bl, 1
orpd xmm0, xmm1
orpd xmm2, xmm1
subsd xmm0, xmm1
subsd xmm2, xmm1
cvtsd2ss xmm0, xmm0
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm2
divss xmm0, xmm1
ucomiss xmm0, dword [edi]
jbe 0x1006599f
mov esi, dword [edi + 0x1c]
mov cl, 3
cmp esi, 0x1fffffff
setb al
cmp esi, 0x200
jb 0x10065961
mov ecx, eax
shl esi, cl
lea ebp, [edi + 0xc]
lea eax, [esi + esi]
mov ecx, ebp
mov dword [esp], eax
push eax
call fcn.10044d54
mov eax, dword [edi + 4]
lea edx, [esp + 8]
mov ecx, ebp
mov dword [edx], eax
push edx
push dword [esp + 4]
call fcn.10044d78
lea eax, [esi - 1]
mov ecx, edi
mov dword [edi + 0x18], eax
mov dword [edi + 0x1c], esi
call fcn.10065a12
mov ebp, dword [esp + 0x24]
jmp 0x100659a1
mov ebp, edx
mov eax, dword [esp + 4]
mov dword [eax], ebp
mov byte [eax + 4], bl
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret
Function at 0x10065a5e
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
push ebx
push edi
push esi
push eax
mov ebx, dword [esp + 0x18]
mov edi, 0x811c9dc5
mov eax, 0xfffffffc
mov dword [esp], edx
movzx edx, byte [ebx + eax + 4]
xor edx, edi
imul edi, edx, 0x1000193
inc eax
jne 0x10065a74
and edi, dword [ecx + 0x18]
mov eax, dword [ecx + 0xc]
mov edx, dword [ecx + 4]
mov ebp, dword [ebx]
mov ecx, dword [eax + edi*8]
lea edi, [edi + edi + 1]
mov ebx, ecx
jmp 0x10065aa1
cmp dword [ebx + 8], ebp
je 0x10065ab7
mov ebx, dword [ebx]
cmp ecx, edx
mov esi, ecx
je 0x10065aac
mov esi, dword [eax + edi*4]
mov esi, dword [esi]
cmp esi, ebx
jne 0x10065a9a
mov eax, dword [esp]
mov dword [eax], edx
jmp 0x10065abc
mov eax, dword [esp]
mov dword [eax], ebx
add esp, 4
pop esi
pop edi
pop ebx
pop ebp
ret
Function at 0x10065ac4
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xc
mov esi, dword [esp + 0x20]
mov edi, ecx
mov eax, 0x811c9dc5
mov ecx, 0xfffffffc
mov dword [esp + 4], edx
movzx edx, byte [esi + ecx + 4]
xor edx, eax
imul eax, edx, 0x1000193
inc ecx
jne 0x10065adf
and eax, dword [edi + 0x18]
mov edx, dword [edi + 0xc]
mov ebx, dword [edi + 4]
mov ecx, dword [edx + eax*8]
add eax, eax
mov ebp, ebx
cmp ecx, ebx
je 0x10065b13
lea ebp, [eax*4]
or ebp, 4
mov ebp, dword [edx + ebp]
mov ebp, dword [ebp]
mov esi, dword [esi]
cmp ecx, ebp
je 0x10065b4b
mov ebp, dword [ebp + 4]
cmp esi, dword [ebp + 8]
jne 0x10065b15
mov eax, dword [esp + 0x24]
mov edx, eax
mov eax, dword [eax]
mov ecx, dword [edx + 4]
mov dword [ecx], eax
mov eax, dword [edx]
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
dec dword [edi + 8]
push 0x10
push edx
call fcn.1018304e
add esp, 8
xor ebx, ebx
jmp 0x10065c55
mov ebp, dword [esp + 0x24]
mov esi, dword [ebp]
cmp esi, ecx
je 0x10065b7d
mov edx, dword [ebp + 4]
mov dword [edx], esi
mov edx, dword [esi + 4]
mov dword [edx], ecx
mov edx, dword [ecx + 4]
mov dword [edx], ebp
mov ebx, dword [esi + 4]
mov edx, dword [ecx + 4]
mov dword [ecx + 4], ebx
mov ebx, dword [ebp + 4]
mov dword [esi + 4], ebx
mov dword [ebp + 4], edx
mov ebx, dword [edi + 4]
mov edx, dword [edi + 0xc]
lea esi, [edx + eax*4]
mov ebp, dword [esi]
cmp ebp, ebx
je 0x10065baa
cmp ebp, ecx
je 0x10065bbd
or eax, 1
mov ecx, dword [edx + eax*4]
mov ecx, dword [ecx]
mov dword [edx + eax*4], ecx
mov edx, dword [esp + 0x24]
cmp ecx, edx
je 0x10065bc5
mov ecx, dword [edi + 0xc]
lea esi, [ecx + eax*4]
mov eax, dword [esi]
mov eax, dword [eax + 4]
jmp 0x10065bc3
mov edx, dword [esp + 0x24]
shl eax, 2
or eax, 4
mov dword [esi], edx
add eax, dword [edi + 0xc]
mov esi, eax
jmp 0x10065bc1
mov edx, dword [esp + 0x24]
mov eax, edx
mov dword [esi], eax
movss xmm0, dword [edi + 8]
movsd xmm1, qword [0x101d4490]
movss xmm2, dword [edi + 0x1c]
mov bl, 1
orpd xmm0, xmm1
orpd xmm2, xmm1
subsd xmm0, xmm1
subsd xmm2, xmm1
cvtsd2ss xmm0, xmm0
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm2
divss xmm0, xmm1
ucomiss xmm0, dword [edi]
jbe 0x10065c53
mov esi, dword [edi + 0x1c]
mov cl, 3
cmp esi, 0x1fffffff
setb al
cmp esi, 0x200
jb 0x10065c15
mov ecx, eax
shl esi, cl
lea ebp, [edi + 0xc]
lea eax, [esi + esi]
mov ecx, ebp
mov dword [esp], eax
push eax
call fcn.10044d54
mov eax, dword [edi + 4]
lea edx, [esp + 8]
mov ecx, ebp
mov dword [edx], eax
push edx
push dword [esp + 4]
call fcn.10044d78
lea eax, [esi - 1]
mov ecx, edi
mov dword [edi + 0x18], eax
mov dword [edi + 0x1c], esi
call fcn.10065cc4
mov ebp, dword [esp + 0x24]
jmp 0x10065c55
mov ebp, edx
mov eax, dword [esp + 4]
mov dword [eax], ebp
mov byte [eax + 4], bl
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret
Function at 0x10065d10
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xc
mov edi, dword [esp + 0x20]
mov dword [esp], edx
mov edx, 0x811c9dc5
mov eax, 0xfffffff8
movzx esi, byte [edi + eax + 8]
xor esi, edx
imul edx, esi, 0x1000193
inc eax
jne 0x10065d28
and edx, dword [ecx + 0x18]
mov eax, dword [ecx + 4]
mov ecx, dword [ecx + 0xc]
mov ebx, dword [edi]
mov edi, dword [edi + 4]
mov dword [esp + 8], ecx
mov ecx, dword [ecx + edx*8]
lea edx, [edx + edx + 1]
mov dword [esp + 4], edx
mov ebp, ecx
jmp 0x10065d6a
mov esi, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
xor esi, ebx
xor edx, edi
or edx, esi
je 0x10065d8a
mov ebp, dword [ebp]
cmp ecx, eax
mov esi, ecx
je 0x10065d7d
mov edx, dword [esp + 8]
mov esi, dword [esp + 4]
mov esi, dword [edx + esi*4]
mov esi, dword [esi]
cmp esi, ebp
jne 0x10065d59
mov ecx, dword [esp]
mov dword [ecx], eax
mov eax, ecx
jmp 0x10065d8f
mov eax, dword [esp]
mov dword [eax], ebp
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret
Function at 0x10066194
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x14
mov esi, dword [esp + 0x28]
mov eax, 0x811c9dc5
mov edi, 0xfffffff8
mov dword [esp + 0xc], edx
movzx edx, byte [esi + edi + 8]
xor edx, eax
imul eax, edx, 0x1000193
inc edi
jne 0x100661ad
and eax, dword [ecx + 0x18]
mov edx, dword [ecx + 0xc]
mov ebp, dword [ecx + 4]
mov dword [esp], ecx
mov ecx, dword [edx + eax*8]
add eax, eax
mov dword [esp + 4], ebp
cmp ecx, ebp
je 0x100661e5
lea edi, [eax*4]
or edi, 4
mov edi, dword [edx + edi]
mov ebp, dword [edi]
mov edi, dword [esi]
mov esi, dword [esi + 4]
mov dword [esp + 8], edx
cmp ecx, ebp
je 0x10066230
mov ebp, dword [ebp + 4]
mov edx, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
xor edx, esi
xor ebx, edi
or ebx, edx
jne 0x100661ee
mov eax, dword [esp + 0x2c]
mov edx, eax
mov eax, dword [eax]
mov ecx, dword [edx + 4]
mov dword [ecx], eax
mov eax, dword [edx]
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
mov ecx, dword [esp]
dec dword [ecx + 8]
push 0x18
push edx
call fcn.1018304e
add esp, 8
xor ebx, ebx
jmp 0x1006633e
mov ebp, dword [esp + 0x2c]
mov edx, dword [esp + 8]
mov ebx, dword [esp + 4]
mov esi, dword [ebp]
cmp esi, ecx
je 0x1006626d
mov edx, dword [ebp + 4]
mov dword [edx], esi
mov edx, dword [esi + 4]
mov dword [edx], ecx
mov edx, dword [ecx + 4]
mov dword [edx], ebp
mov edi, dword [esi + 4]
mov edx, dword [ecx + 4]
mov dword [ecx + 4], edi
mov edi, dword [ebp + 4]
mov dword [esi + 4], edi
mov dword [ebp + 4], edx
mov edx, dword [esp]
mov ebx, dword [edx + 4]
mov edx, dword [edx + 0xc]
lea esi, [edx + eax*4]
mov edi, dword [esi]
cmp edi, ebx
je 0x10066299
cmp edi, ecx
je 0x100662ab
or eax, 1
mov edi, dword [esp]
mov ecx, dword [edx + eax*4]
mov ecx, dword [ecx]
cmp ecx, ebp
mov dword [edx + eax*4], ecx
je 0x100662b2
mov ecx, dword [edi + 0xc]
lea esi, [ecx + eax*4]
mov eax, dword [esi]
mov eax, dword [eax + 4]
jmp 0x100662b0
mov edi, dword [esp]
shl eax, 2
mov dword [esi], ebp
or eax, 4
add eax, dword [edi + 0xc]
mov esi, eax
jmp 0x100662ae
mov edi, dword [esp]
mov eax, ebp
mov dword [esi], eax
movss xmm0, dword [edi + 8]
movsd xmm1, qword [0x101d4490]
movss xmm2, dword [edi + 0x1c]
mov bl, 1
orpd xmm0, xmm1
orpd xmm2, xmm1
subsd xmm0, xmm1
subsd xmm2, xmm1
cvtsd2ss xmm0, xmm0
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm2
divss xmm0, xmm1
ucomiss xmm0, dword [edi]
jbe 0x1006633e
mov esi, dword [edi + 0x1c]
mov cl, 3
cmp esi, 0x1fffffff
setb al
cmp esi, 0x200
jb 0x10066302
mov ecx, eax
shl esi, cl
lea ebp, [edi + 0xc]
lea eax, [esi + esi]
mov ecx, ebp
mov dword [esp], eax
push eax
call fcn.10044d54
mov eax, dword [edi + 4]
lea edx, [esp + 0x10]
mov ecx, ebp
mov dword [edx], eax
push edx
push dword [esp + 4]
call fcn.10044d78
lea eax, [esi - 1]
mov ecx, edi
mov dword [edi + 0x18], eax
mov dword [edi + 0x1c], esi
call fcn.100663b2
mov ebp, dword [esp + 0x2c]
mov eax, dword [esp + 0xc]
mov dword [eax], ebp
mov byte [eax + 4], bl
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret
Function at 0x100663fe
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 8
mov dword [esp], edx
mov edx, dword [esp + 0x1c]
xorps xmm1, xmm1
mov esi, 0xfffffffd
movss xmm0, dword [edx]
cmpeqss xmm1, xmm0
andnps xmm1, xmm0
movd eax, xmm1
movss dword [esp + 4], xmm1
movzx eax, al
xor eax, 0x811c9dc5
imul ebp, eax, 0x1000193
movzx eax, byte [esp + esi + 8]
xor eax, ebp
imul ebp, eax, 0x1000193
inc esi
jne 0x10066438
and ebp, dword [ecx + 0x18]
mov edi, dword [ecx + 0xc]
mov esi, dword [ecx + 4]
mov eax, dword [edi + ebp*8]
lea ebp, [ebp + ebp + 1]
mov ecx, eax
jmp 0x10066465
mov ebx, dword [ecx + 8]
cmp ebx, dword [edx]
je 0x10066476
mov ecx, dword [ecx]
cmp eax, esi
mov ebx, eax
je 0x10066470
mov ebx, dword [edi + ebp*4]
mov ebx, dword [ebx]
cmp ebx, ecx
jne 0x1006645c
jmp 0x1006647d
mov eax, dword [edx]
cmp eax, dword [ecx + 8]
je 0x1006648a
mov eax, dword [esp]
mov dword [eax], esi
add esp, 8
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [esp]
mov dword [eax], ecx
jmp 0x10066482
Function at 0x1006677c
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x14
mov ebx, dword [esp + 0x28]
xorps xmm1, xmm1
mov dword [esp + 8], edx
mov edx, 0xfffffffd
movss xmm0, dword [ebx]
cmpeqss xmm1, xmm0
andnps xmm1, xmm0
movd eax, xmm1
movss dword [esp + 0xc], xmm1
movzx eax, al
xor eax, 0x811c9dc5
imul eax, eax, 0x1000193
movzx esi, byte [esp + edx + 0x10]
xor esi, eax
imul eax, esi, 0x1000193
inc edx
jne 0x100667b7
mov esi, dword [ecx + 4]
and eax, dword [ecx + 0x18]
mov dword [esp], ecx
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*8]
add eax, eax
mov ebp, esi
cmp edx, esi
je 0x100667ee
lea ebp, [eax*4]
or ebp, 4
mov ebp, dword [ecx + ebp]
mov ebp, dword [ebp]
mov dword [esp + 4], ecx
cmp edx, ebp
je 0x1006682d
mov ebp, dword [ebp + 4]
mov edi, dword [ebx]
cmp edi, dword [ebp + 8]
jne 0x100667f2
mov eax, dword [esp + 0x2c]
mov edx, eax
mov eax, dword [eax]
mov ecx, dword [edx + 4]
mov dword [ecx], eax
mov eax, dword [edx]
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
mov ecx, dword [esp]
dec dword [ecx + 8]
push 0x10
push edx
call fcn.1018304e
add esp, 8
xor ebx, ebx
jmp 0x10066947
mov ebp, dword [esp + 0x2c]
mov edi, dword [esp + 4]
mov ecx, dword [ebp]
cmp ecx, edx
je 0x10066866
mov esi, dword [ebp + 4]
mov dword [esi], ecx
mov esi, dword [ecx + 4]
mov dword [esi], edx
mov esi, dword [edx + 4]
mov dword [esi], ebp
mov edi, dword [ecx + 4]
mov esi, dword [edx + 4]
mov dword [edx + 4], edi
mov edi, dword [ebp + 4]
mov dword [ecx + 4], edi
mov edi, dword [esp]
mov dword [ebp + 4], esi
mov esi, dword [edi + 4]
mov edi, dword [edi + 0xc]
lea ecx, [edi + eax*4]
mov ebp, dword [ecx]
cmp ebp, esi
je 0x10066896
cmp ebp, edx
je 0x100668ac
or eax, 1
mov edx, dword [esp + 0x2c]
mov ecx, dword [edi + eax*4]
mov ecx, dword [ecx]
mov dword [edi + eax*4], ecx
mov edi, dword [esp]
cmp ecx, edx
je 0x100668b7
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*4]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
jmp 0x100668b5
mov edx, dword [esp + 0x2c]
mov edi, dword [esp]
shl eax, 2
or eax, 4
mov dword [ecx], edx
add eax, dword [edi + 0xc]
mov ecx, eax
jmp 0x100668b3
mov edx, dword [esp + 0x2c]
mov edi, dword [esp]
mov eax, edx
mov dword [ecx], eax
movss xmm0, dword [edi + 8]
movsd xmm1, qword [0x101d4490]
movss xmm2, dword [edi + 0x1c]
mov bl, 1
orpd xmm0, xmm1
orpd xmm2, xmm1
subsd xmm0, xmm1
subsd xmm2, xmm1
cvtsd2ss xmm0, xmm0
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm2
divss xmm0, xmm1
ucomiss xmm0, dword [edi]
jbe 0x10066945
mov esi, dword [edi + 0x1c]
mov cl, 3
cmp esi, 0x1fffffff
setb al
cmp esi, 0x200
jb 0x10066907
mov ecx, eax
shl esi, cl
lea ebp, [edi + 0xc]
lea eax, [esi + esi]
mov ecx, ebp
mov dword [esp], eax
push eax
call fcn.10044d54
mov eax, dword [edi + 4]
lea edx, [esp + 0x10]
mov ecx, ebp
mov dword [edx], eax
push edx
push dword [esp + 4]
call fcn.10044d78
lea eax, [esi - 1]
mov ecx, edi
mov dword [edi + 0x18], eax
mov dword [edi + 0x1c], esi
call fcn.10066958
mov ebp, dword [esp + 0x2c]
jmp 0x10066947
mov ebp, edx
mov eax, dword [esp + 8]
mov dword [eax], ebp
mov byte [eax + 4], bl
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret
Function at 0x100669a4
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x28
mov eax, dword [ebp + 8]
xorpd xmm1, xmm1
mov dword [esp + 4], edx
mov esi, 0xfffffff9
movsd xmm0, qword [eax]
cmpeqsd xmm1, xmm0
andnpd xmm1, xmm0
movsd qword [esp + 0x18], xmm1
movsd qword [esp + 0x10], xmm1
movzx eax, byte [esp + 0x10]
xor eax, 0x811c9dc5
imul eax, eax, 0x1000193
movzx edx, byte [esp + esi + 0x20]
xor edx, eax
imul eax, edx, 0x1000193
inc esi
jne 0x100669e9
and eax, dword [ecx + 0x18]
mov esi, dword [ecx + 4]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*8]
mov dword [esp + 0xc], ecx
lea eax, [eax + eax + 1]
mov dword [esp + 8], eax
mov ecx, edx
jmp 0x10066a29
mov ebx, dword [ecx + 8]
mov edi, dword [ebp + 8]
mov eax, dword [ecx + 0xc]
xor ebx, dword [edi]
xor eax, dword [edi + 4]
or eax, ebx
je 0x10066a42
mov ecx, dword [ecx]
cmp edx, esi
mov ebx, edx
je 0x10066a3c
mov eax, dword [esp + 0xc]
mov edi, dword [esp + 8]
mov ebx, dword [eax + edi*4]
mov ebx, dword [ebx]
cmp ebx, ecx
jne 0x10066a15
jmp 0x10066a56
mov eax, dword [ebp + 8]
mov edx, eax
mov eax, dword [eax]
mov edx, dword [edx + 4]
xor eax, dword [ecx + 8]
xor edx, dword [ecx + 0xc]
or edx, eax
je 0x10066a64
mov eax, dword [esp + 4]
mov dword [eax], esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [esp + 4]
mov dword [eax], ecx
jmp 0x10066a5c