joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1005d4b0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10080b4d
mov eax, dword fs:[0]
push eax
sub esp, 0x4c
mov eax, dword [0x10098010]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
movaps xmm0, xmmword [0x1008fcd0]
mov esi, 0x23
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x4c], esi
movaps xmm0, xmmword [0x10090100]
lea eax, [esi + 1]
mov dword [ebp - 0x28], 0x562b4e5a
movups xmmword [ebp - 0x38], xmm0
mov dword [ebp - 0x24], 0
call fcn.1007cdb0
xor edx, edx
mov edi, esp
lea ecx, [edx + edi]
lea edi, [ebp - 0x47]
sub edi, esp
sub esi, edx
mov dl, byte [ebp - 0x48]
nop
mov al, byte [ecx + edi]
lea ecx, [ecx + 1]
xor al, dl
mov byte [ecx - 1], al
sub esi, 1
jne 0x1005d520
mov esi, 0x23
mov dword [ebp - 0x20], 0xa
mov edi, esp
mov dword [ebp - 0x1c], 0x2f2a2546
mov dword [ebp - 0x18], 0x68322823
mov dword [ebp - 0x14], 0x2a2a22
lea eax, [esi - 0x17]
mov byte [edi + esi], 0
call fcn.1007cd80
mov eax, esp
lea esi, [ebp - 0x1b]
mov ecx, eax
sub esi, eax
mov edx, 0xa
nop dword [eax]
mov al, byte [esi + ecx]
lea ecx, [ecx + 1]
xor al, 0x46
mov byte [ecx - 1], al
sub edx, 1
jne 0x1005d570
mov esi, esp
mov ecx, edi
sub esp, 0x18
mov dword [ebp - 0x58], esp
mov byte [esi + 0xa], dl
lea eax, [ecx + 1]
mov edx, esp
mov dword [ebp - 0x50], eax
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005d5b0
sub ecx, dword [ebp - 0x50]
push ecx
push edi
mov ecx, edx
call fcn.100109d0
sub esp, 0x18
mov dword [ebp - 4], 0
mov edx, esp
mov ecx, esi
mov dword [edx], 0
lea edi, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005d5e8
sub ecx, edi
push ecx
push esi
mov ecx, edx
call fcn.100109d0
mov dword [ebp - 4], 0xffffffff
call fcn.10078060
add esp, 0x30
lea esp, [ebp - 0x64]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1007ba06
mov esp, ebp
pop ebp
ret
Function at 0x1005e350
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
mov eax, edx
mov ebx, ecx
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
push esi
mov dword [ebp - 0x18], edx
mov esi, eax
lea edx, [ecx - 1]
mov dword [ebp - 0x10], eax
push edi
mov edi, edx
mov dword [ebp - 4], ecx
sar edi, 1
mov dword [ebp - 0x14], eax
mov dword [ebp - 0xc], edx
mov dword [ebp - 8], edi
cmp eax, edi
jge 0x1005e3dc
add esi, esi
lea edx, [ebx + 0x20]
lea ecx, [ebx + 0x3c]
lea eax, [esi*8]
sub eax, esi
lea edx, [edx + eax*4]
lea ecx, [ecx + eax*4]
call fcn.10013730
mov ecx, dword [ebp - 0x10]
movzx eax, al
xor eax, 1
inc eax
add esi, eax
lea eax, [esi*8]
sub eax, esi
lea edx, [ebx + eax*4]
lea eax, [ecx*8]
sub eax, ecx
lea ecx, [ebx + eax*4]
mov eax, dword [edx]
mov dword [ecx], eax
lea eax, [edx + 4]
push eax
add ecx, 4
call fcn.1000f420
mov dword [ebp - 0x10], esi
cmp esi, edi
jl 0x1005e382
mov ecx, dword [ebp - 4]
mov edi, esi
cmp esi, dword [ebp - 8]
jne 0x1005e414
test cl, 1
jne 0x1005e414
lea eax, [ecx*8]
sub eax, ecx
lea edx, [ebx + eax*4]
lea eax, [esi*8]
sub eax, esi
lea ecx, [ebx + eax*4]
mov eax, dword [edx - 0x1c]
mov dword [ecx], eax
lea eax, [edx - 0x18]
push eax
add ecx, 4
call fcn.1000f420
mov edi, dword [ebp - 0xc]
cmp dword [ebp - 0x14], edi
jge 0x1005e471
mov ecx, dword [ebp - 0x18]
add ecx, 4
mov dword [ebp - 4], ecx
lea esi, [edi - 1]
mov edx, ecx
sar esi, 1
lea eax, [esi*8]
sub eax, esi
lea eax, [ebx + eax*4]
mov dword [ebp - 0xc], eax
add eax, 4
mov ecx, eax
mov dword [ebp - 8], eax
call fcn.10013730
test al, al
je 0x1005e471
push dword [ebp - 8]
lea eax, [edi*8]
sub eax, edi
lea ecx, [ebx + eax*4]
mov eax, dword [ebp - 0xc]
mov eax, dword [eax]
mov dword [ecx], eax
add ecx, 4
call fcn.1000f420
mov edi, esi
mov ecx, dword [ebp - 4]
cmp dword [ebp - 0x14], esi
jl 0x1005e422
mov edx, dword [ebp - 0x18]
lea eax, [edi*8]
sub eax, edi
lea ecx, [ebx + eax*4]
mov eax, dword [edx]
mov dword [ecx], eax
lea eax, [edx + 4]
push eax
add ecx, 4
call fcn.1000f420
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x1005e760
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
mov eax, dword [0x10098010]
xor eax, ebp
mov dword [ebp - 4], eax
mov ax, word [0x100ec64c]
mov dword [ebp - 0x30], ecx
push ebx
push esi
push edi
test ax, ax
jne 0x1005e819
movaps xmm0, xmmword [0x1008ef30]
mov edi, 0x1c
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x2c], edi
movaps xmm0, xmmword [str._r_1040]
lea eax, [edi + 1]
movups xmmword [ebp - 0x18], xmm0
call fcn.1007cdb0
mov ah, byte [ebp - 0x28]
lea ebx, [ebp - 0x27]
mov edx, esp
xor esi, esi
sub ebx, edx
sub edi, esi
lea ecx, [esi + edx]
nop dword [eax]
mov al, byte [ecx + ebx]
lea ecx, [ecx + 1]
xor al, ah
mov byte [ecx - 1], al
sub edi, 1
jne 0x1005e7c0
mov edi, 0x1c
mov ecx, edx
mov byte [edx + edi], 0
lea esi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005e7e0
sub ecx, esi
lea esi, [ecx + 1]
mov ecx, 0x811c9dc5
test esi, esi
je 0x1005e808
movsx eax, byte [edx]
lea edx, [edx + 1]
xor eax, ecx
imul ecx, eax, 0x1000193
sub esi, 1
jne 0x1005e7f5
mov dword [0x100ec650], ecx
call fcn.10040d60
mov word [0x100ec64c], ax
movzx eax, ax
add eax, dword [ebp - 0x30]
lea esp, [ebp - 0x3c]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1007ba06
mov esp, ebp
pop ebp
ret
Function at 0x1005f540
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
mov eax, dword [0x10098010]
xor eax, ebp
mov dword [ebp - 4], eax
mov ax, word [0x100ec68c]
mov dword [ebp - 0x28], ecx
push ebx
push esi
push edi
test ax, ax
jne 0x1005f604
movaps xmm0, xmmword [0x1008fd90]
mov edi, 0x17
mov dword [ebp - 0x24], edi
movups xmmword [ebp - 0x20], xmm0
mov dword [ebp - 0x10], 0x6b4f5250
lea eax, [edi + 1]
mov dword [ebp - 0xc], 0x5848515c
mov dword [ebp - 8], 0
call fcn.1007cdb0
mov ah, byte [ebp - 0x20]
lea ebx, [ebp - 0x1f]
mov edx, esp
xor esi, esi
sub ebx, edx
sub edi, esi
lea ecx, [esi + edx]
mov al, byte [ecx + ebx]
lea ecx, [ecx + 1]
xor al, ah
mov byte [ecx - 1], al
sub edi, 1
jne 0x1005f5a6
mov edi, 0x17
mov ecx, edx
mov byte [edx + edi], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005f5c4
sub ecx, esi
lea esi, [ecx + 1]
mov ecx, 0x811c9dc5
test esi, esi
je 0x1005f5f3
nop dword [eax]
movsx eax, byte [edx]
lea edx, [edx + 1]
xor eax, ecx
imul ecx, eax, 0x1000193
sub esi, 1
jne 0x1005f5e0
mov dword [0x100ec688], ecx
call fcn.10040d60
mov word [0x100ec68c], ax
movzx eax, ax
add eax, dword [ebp - 0x28]
lea esp, [ebp - 0x38]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1007ba06
mov esp, ebp
pop ebp
ret

Function at 0x1005f620
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
mov eax, dword [0x10098010]
xor eax, ebp
mov dword [ebp - 4], eax
mov ax, word [0x100ec658]
mov dword [ebp - 0x28], ecx
push ebx
push esi
push edi
test ax, ax
jne 0x1005f6e9
movaps xmm0, xmmword [0x1008f6a0]
mov edi, 0x18
xor eax, eax
mov dword [ebp - 0x24], edi
mov word [ebp - 7], ax
mov byte [ebp - 5], al
lea eax, [edi + 1]
mov dword [ebp - 0x10], 0x15340311
movups xmmword [ebp - 0x20], xmm0
mov dword [ebp - 0xc], 0x15030516
mov byte [ebp - 8], 2
call fcn.1007cdb0
mov ah, byte [ebp - 0x20]
lea ebx, [ebp - 0x1f]
mov edx, esp
xor esi, esi
sub ebx, edx
sub edi, esi
lea ecx, [esi + edx]
nop dword [eax]
mov al, byte [ecx + ebx]
lea ecx, [ecx + 1]
xor al, ah
mov byte [ecx - 1], al
sub edi, 1
jne 0x1005f690
mov edi, 0x18
mov ecx, edx
mov byte [edx + edi], 0
lea esi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005f6b0
sub ecx, esi
lea esi, [ecx + 1]
mov ecx, 0x811c9dc5
test esi, esi
je 0x1005f6d8
movsx eax, byte [edx]
lea edx, [edx + 1]
xor eax, ecx
imul ecx, eax, 0x1000193
sub esi, 1
jne 0x1005f6c5
mov dword [0x100ec668], ecx
call fcn.10040d60
mov word [0x100ec658], ax
movzx eax, ax
add eax, dword [ebp - 0x28]
lea esp, [ebp - 0x38]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1007ba06
mov esp, ebp
pop ebp
ret
Function at 0x1005f710
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Hash data using fnv

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [0x10098010]
xor eax, ebp
mov dword [ebp - 4], eax
mov ax, word [0x100ec680]
mov dword [ebp - 0x28], ecx
push esi
push edi
test ax, ax
jne 0x1005f819
movaps xmm0, xmmword [0x1008fd70]
mov byte [ebp - 5], al
mov eax, 0x20
mov dword [ebp - 0x24], 0x1a
mov byte [ebp - 0x20], 0xd
movups xmmword [ebp - 0x1f], xmm0
mov dword [ebp - 0xf], 0x496f6062
mov dword [ebp - 0xb], 0x7e786b68
mov word [ebp - 7], 0x7f68
call fcn.1007cdb0
mov edx, esp
lea esi, [ebp - 6]
xor eax, eax
lea ecx, [edx + 0x19]
cmp edx, esi
ja 0x1005f793
lea esi, [ebp - 0x1f]
cmp ecx, esi
jae 0x1005f7aa
movaps xmm0, xmmword [0x1008eb20]
mov eax, 0x10
pxor xmm0, xmmword [0x1008fd70]
movups xmmword [edx], xmm0
lea edi, [ebp - 0x1f]
mov esi, 0x1a
sub edi, edx
lea ecx, [eax + edx]
sub esi, eax
nop dword [eax]
mov al, byte [edi + ecx]
lea ecx, [ecx + 1]
xor al, 0xd
mov byte [ecx - 1], al
sub esi, 1
jne 0x1005f7c0
mov ecx, edx
mov byte [edx + 0x1a], 0
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005f7e0
sub ecx, esi
lea esi, [ecx + 1]
mov ecx, 0x811c9dc5
test esi, esi
je 0x1005f808
movsx eax, byte [edx]
lea edx, [edx + 1]
xor eax, ecx
imul ecx, eax, 0x1000193
sub esi, 1
jne 0x1005f7f5
mov dword [0x100ec66c], ecx
call fcn.10040d60
mov word [0x100ec680], ax
movzx eax, ax
add eax, dword [ebp - 0x28]
lea esp, [ebp - 0x30]
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1007ba06
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
Function at 0x1005f840
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [0x10098010]
xor eax, ebp
mov dword [ebp - 4], eax
mov ax, word [0x100ec65c]
mov dword [ebp - 0x28], ecx
push esi
push edi
test ax, ax
jne 0x1005f949
movaps xmm0, xmmword [0x1008ed00]
mov byte [ebp - 5], al
mov eax, 0x20
mov dword [ebp - 0x24], 0x1a
mov byte [ebp - 0x20], 0x51
movups xmmword [ebp - 0x1f], xmm0
mov dword [ebp - 0xf], 0x15333c3e
mov dword [ebp - 0xb], 0x22243734
mov word [ebp - 7], 0x3534
call fcn.1007cdb0
mov edx, esp
lea esi, [ebp - 6]
xor eax, eax
lea ecx, [edx + 0x19]
cmp edx, esi
ja 0x1005f8c3
lea esi, [ebp - 0x1f]
cmp ecx, esi
jae 0x1005f8da
movaps xmm0, xmmword [0x1008fe20]
mov eax, 0x10
pxor xmm0, xmmword [0x1008ed00]
movups xmmword [edx], xmm0
lea edi, [ebp - 0x1f]
mov esi, 0x1a
sub edi, edx
lea ecx, [eax + edx]
sub esi, eax
nop dword [eax]
mov al, byte [edi + ecx]
lea ecx, [ecx + 1]
xor al, 0x51
mov byte [ecx - 1], al
sub esi, 1
jne 0x1005f8f0
mov ecx, edx
mov byte [edx + 0x1a], 0
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005f910
sub ecx, esi
lea esi, [ecx + 1]
mov ecx, 0x811c9dc5
test esi, esi
je 0x1005f938
movsx eax, byte [edx]
lea edx, [edx + 1]
xor eax, ecx
imul ecx, eax, 0x1000193
sub esi, 1
jne 0x1005f925
mov dword [0x100ec690], ecx
call fcn.10040d60
mov word [0x100ec65c], ax
movzx eax, ax
add eax, dword [ebp - 0x28]
lea esp, [ebp - 0x30]
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1007ba06
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
Function at 0x1005f970
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Hash data using fnv

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [0x10098010]
xor eax, ebp
mov dword [ebp - 4], eax
mov ax, word [0x100ec654]
mov dword [ebp - 0x28], ecx
push esi
push edi
test ax, ax
jne 0x1005fa79
movaps xmm0, xmmword [0x1008f9f0]
mov byte [ebp - 5], al
mov eax, 0x20
mov dword [ebp - 0x24], 0x1a
mov byte [ebp - 0x20], 3
movups xmmword [ebp - 0x1f], xmm0
mov dword [ebp - 0xf], 0x57616e6c
mov dword [ebp - 0xb], 0x6a68606a
mov word [ebp - 7], 0x646d
call fcn.1007cdb0
mov edx, esp
lea esi, [ebp - 6]
xor eax, eax
lea ecx, [edx + 0x19]
cmp edx, esi
ja 0x1005f9f3
lea esi, [ebp - 0x1f]
cmp ecx, esi
jae 0x1005fa0a
movaps xmm0, xmmword [0x1008e7e0]
mov eax, 0x10
pxor xmm0, xmmword [0x1008f9f0]
movups xmmword [edx], xmm0
lea edi, [ebp - 0x1f]
mov esi, 0x1a
sub edi, edx
lea ecx, [eax + edx]
sub esi, eax
nop dword [eax]
mov al, byte [edi + ecx]
lea ecx, [ecx + 1]
xor al, 3
mov byte [ecx - 1], al
sub esi, 1
jne 0x1005fa20
mov ecx, edx
mov byte [edx + 0x1a], 0
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005fa40
sub ecx, esi
lea esi, [ecx + 1]
mov ecx, 0x811c9dc5
test esi, esi
je 0x1005fa68
movsx eax, byte [edx]
lea edx, [edx + 1]
xor eax, ecx
imul ecx, eax, 0x1000193
sub esi, 1
jne 0x1005fa55
mov dword [0x100ec684], ecx
call fcn.10040d60
mov word [0x100ec654], ax
movzx eax, ax
add eax, dword [ebp - 0x28]
lea esp, [ebp - 0x30]
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1007ba06
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
Function at 0x1005faa0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [0x10098010]
xor eax, ebp
mov dword [ebp - 4], eax
mov ax, word [0x100ec670]
mov dword [ebp - 0x24], ecx
push esi
push edi
test ax, ax
jne 0x1005fb99
movaps xmm0, xmmword [0x1008ed40]
mov byte [ebp - 5], al
mov eax, 0x18
mov dword [ebp - 0x20], 0x16
mov byte [ebp - 0x1c], 0x78
movups xmmword [ebp - 0x1b], xmm0
mov dword [ebp - 0xb], 0x143a4c3b
mov word [ebp - 7], 0xf17
call fcn.1007cdb0
mov edx, esp
lea esi, [ebp - 6]
xor eax, eax
lea ecx, [edx + 0x15]
cmp edx, esi
ja 0x1005fb1c
lea esi, [ebp - 0x1b]
cmp ecx, esi
jae 0x1005fb33
movaps xmm0, xmmword [0x10090810]
mov eax, 0x10
pxor xmm0, xmmword [0x1008ed40]
movups xmmword [edx], xmm0
lea edi, [ebp - 0x1b]
mov esi, 0x16
sub edi, edx
lea ecx, [eax + edx]
sub esi, eax
mov al, byte [edi + ecx]
lea ecx, [ecx + 1]
xor al, 0x78
mov byte [ecx - 1], al
sub esi, 1
jne 0x1005fb42
mov ecx, edx
mov byte [edx + 0x16], 0
lea esi, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005fb60
sub ecx, esi
lea esi, [ecx + 1]
mov ecx, 0x811c9dc5
test esi, esi
je 0x1005fb88
movsx eax, byte [edx]
lea edx, [edx + 1]
xor eax, ecx
imul ecx, eax, 0x1000193
sub esi, 1
jne 0x1005fb75
mov dword [0x100ec660], ecx
call fcn.10040d60
mov word [0x100ec670], ax
movzx eax, ax
add eax, dword [ebp - 0x24]
lea esp, [ebp - 0x30]
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1007ba06
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
Function at 0x100610b0
Capabilities:
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x20
mov eax, dword [0x10098010]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov edi, dword [ebx + 8]
mov dword [ebp - 0x1c], edi
mov esi, dword [edi + 0x68]
cmp esi, 0x64
jle 0x100610ea
mov esi, 0x64
jmp 0x100610f1
xor eax, eax
test esi, esi
cmovs esi, eax
movd xmm0, esi
cvtdq2ps xmm0, xmm0
movss xmm1, dword [0x1008d598]
divss xmm0, dword [0x1008d764]
comiss xmm0, xmm1
jbe 0x10061112
movaps xmm0, xmm1
jmp 0x1006111d
xorps xmm1, xmm1
comiss xmm1, xmm0
jbe 0x1006111d
xorps xmm0, xmm0
movss xmm1, dword [edi + 0x30]
subss xmm1, dword [0x1008d650]
mulss xmm1, xmm0
movss dword [ebp - 0x14], xmm1
call fcn.100167e0
cvttss2si ecx, dword [edi + 0x10]
mov edx, eax
movsd xmm0, qword [0x1008d6c0]
movd xmm1, esi
cvtdq2pd xmm1, xmm1
movzx ecx, cl
shl ecx, 0x10
mulsd xmm1, qword [str.ffffff]
subsd xmm0, xmm1
cvttsd2si eax, xmm1
movzx eax, al
or ecx, eax
cvttsd2si eax, xmm0
shl ecx, 8
movss xmm0, dword [edi + 0x30]
addss xmm0, dword [edi + 0x18]
movzx eax, al
or ecx, eax
cvttss2si eax, dword [ebp - 0x14]
push ecx
mov ecx, edx
subss xmm0, dword [ebp - 0x14]
push eax
push 2
subss xmm0, dword [0x1008d598]
cvttss2si eax, xmm0
movss xmm0, dword [edi + 0x14]
subss xmm0, dword [edi + 0x2c]
push eax
subss xmm0, dword [0x1008d650]
subss xmm0, dword [0x1008d504]
cvttss2si eax, xmm0
push eax
call fcn.10076f60
mov eax, 8
mov dword [ebp - 0x10], 2
mov dword [ebp - 0xc], 0x4a0b2e
call fcn.1007cd80
mov eax, esp
lea edi, [ebp - 0xb]
mov dword [ebp - 0x18], eax
mov ecx, eax
sub edi, eax
mov edx, 2
nop word [eax + eax]
mov al, byte [edi + ecx]
lea ecx, [ecx + 1]
xor al, 0x2e
mov byte [ecx - 1], al
sub edx, 1
jne 0x100611f0
mov eax, dword [ebp - 0x18]
mov edi, dword [ebp - 0x1c]
mov byte [eax + 2], dl
cmp esi, 0x64
je 0x1006127e
call fcn.100167e0
movss xmm0, dword [edi + 0x30]
sub esp, 0x18
addss xmm0, dword [edi + 0x18]
cvttss2si eax, dword [edi + 0x10]
mov ecx, esp
mov edx, dword [ebp - 0x18]
movss xmm1, dword [edi + 0x14]
subss xmm1, dword [edi + 0x2c]
subss xmm0, dword [ebp - 0x14]
movzx esi, al
lea eax, [edi + 0x68]
shl esi, 0x18
push eax
subss xmm1, dword [0x1008d688]
subss xmm0, dword [0x1008d6d4]
or esi, 0xffffff
movss dword [ebp - 0x10], xmm1
movss dword [ebp - 0xc], xmm0
call fcn.10066020
add esp, 4
push dword [ebp - 0xc]
push dword [ebp - 0x10]
push 0x13
push 0x100e956c
push esi
call fcn.100771b0
lea esp, [ebp - 0x28]
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1007ba06
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 8
Function at 0x10066d40
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
mov eax, dword [0x10098010]
xor eax, ebp
mov dword [ebp - 4], eax
mov ax, word [0x100ec694]
mov dword [ebp - 0x28], ecx
push ebx
push esi
push edi
test ax, ax
jne 0x10066e04
movaps xmm0, xmmword [0x1008ee50]
mov edi, 0x17
mov dword [ebp - 0x24], edi
movups xmmword [ebp - 0x20], xmm0
mov dword [ebp - 0x10], 0x34192230
lea eax, [edi + 1]
mov dword [ebp - 0xc], 0x25343c3d
mov dword [ebp - 8], 0
call fcn.1007cdb0
mov ah, byte [ebp - 0x20]
lea ebx, [ebp - 0x1f]
mov edx, esp
xor esi, esi
sub ebx, edx
sub edi, esi
lea ecx, [esi + edx]
mov al, byte [ecx + ebx]
lea ecx, [ecx + 1]
xor al, ah
mov byte [ecx - 1], al
sub edi, 1
jne 0x10066da6
mov edi, 0x17
mov ecx, edx
mov byte [edx + edi], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10066dc4
sub ecx, esi
lea esi, [ecx + 1]
mov ecx, 0x811c9dc5
test esi, esi
je 0x10066df3
nop dword [eax]
movsx eax, byte [edx]
lea edx, [edx + 1]
xor eax, ecx
imul ecx, eax, 0x1000193
sub esi, 1
jne 0x10066de0
mov dword [0x100ec698], ecx
call fcn.10040d60
mov word [0x100ec694], ax
movzx eax, ax
add eax, dword [ebp - 0x28]
lea esp, [ebp - 0x38]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1007ba06
mov esp, ebp
pop ebp
ret

Function at 0x10066e20
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
mov eax, dword [0x10098010]
xor eax, ebp
mov dword [ebp - 4], eax
mov ax, word [0x100ec6a0]
mov dword [ebp - 0x30], ecx
push ebx
push esi
push edi
test ax, ax
jne 0x10066ed9
movaps xmm0, xmmword [0x1008f2d0]
mov edi, 0x1b
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x2c], edi
movaps xmm0, xmmword [0x1008d8d0]
lea eax, [edi + 1]
movups xmmword [ebp - 0x18], xmm0
call fcn.1007cdb0
mov ah, byte [ebp - 0x28]
lea ebx, [ebp - 0x27]
mov edx, esp
xor esi, esi
sub ebx, edx
sub edi, esi
lea ecx, [esi + edx]
nop dword [eax]
mov al, byte [ecx + ebx]
lea ecx, [ecx + 1]
xor al, ah
mov byte [ecx - 1], al
sub edi, 1
jne 0x10066e80
mov edi, 0x1b
mov ecx, edx
mov byte [edx + edi], 0
lea esi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10066ea0
sub ecx, esi
lea esi, [ecx + 1]
mov ecx, 0x811c9dc5
test esi, esi
je 0x10066ec8
movsx eax, byte [edx]
lea edx, [edx + 1]
xor eax, ecx
imul ecx, eax, 0x1000193
sub esi, 1
jne 0x10066eb5
mov dword [0x100ec69c], ecx
call fcn.10040d60
mov word [0x100ec6a0], ax
movzx eax, ax
add eax, dword [ebp - 0x30]
lea esp, [ebp - 0x40]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1007ba06
mov esp, ebp
pop ebp
ret
Function at 0x1006ae10
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008093d
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
mov eax, dword [0x10098010]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
movaps xmm0, xmmword [0x10090230]
mov esi, 0x14
xor eax, eax
mov dword [ebp - 0x2c], esi
mov word [ebp - 0x13], ax
mov byte [ebp - 0x11], al
lea eax, [esi + 1]
mov dword [ebp - 0x18], 0x77627372
movups xmmword [ebp - 0x28], xmm0
mov byte [ebp - 0x14], 4
call fcn.1007cdb0
xor edx, edx
mov edi, esp
lea ecx, [edx + edi]
lea edi, [ebp - 0x27]
sub edi, esp
sub esi, edx
mov dl, byte [ebp - 0x28]
nop word [eax + eax]
mov al, byte [ecx + edi]
lea ecx, [ecx + 1]
xor al, dl
mov byte [ecx - 1], al
sub esi, 1
jne 0x1006ae80
mov esi, 0x14
mov dword [ebp - 0x20], 0xa
mov edi, esp
mov dword [ebp - 0x1c], 0x2b2e2142
mov dword [ebp - 0x18], 0x6c362c27
mov dword [ebp - 0x14], 0x2e2e26
lea eax, [esi - 8]
mov byte [edi + esi], 0
call fcn.1007cd80
mov eax, esp
lea esi, [ebp - 0x1b]
mov ecx, eax
sub esi, eax
mov edx, 0xa
nop dword [eax]
mov al, byte [esi + ecx]
lea ecx, [ecx + 1]
xor al, 0x42
mov byte [ecx - 1], al
sub edx, 1
jne 0x1006aed0
mov esi, esp
mov ecx, edi
sub esp, 0x18
mov dword [ebp - 0x38], esp
mov byte [esi + 0xa], dl
lea eax, [ecx + 1]
mov edx, esp
mov dword [ebp - 0x30], eax
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006af10
sub ecx, dword [ebp - 0x30]
push ecx
push edi
mov ecx, edx
call fcn.100109d0
sub esp, 0x18
mov dword [ebp - 4], 0
mov edx, esp
mov ecx, esi
mov dword [edx], 0
lea edi, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006af48
sub ecx, edi
push ecx
push esi
mov ecx, edx
call fcn.100109d0
mov dword [ebp - 4], 0xffffffff
call fcn.10078060
add esp, 0x30
lea esp, [ebp - 0x44]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1007ba06
mov esp, ebp
pop ebp
ret