joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10068400
Capabilities:
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x28
xor ecx, ecx
push esi
push edi
mov edi, dword [0x101e0c0c]
mov eax, dword [edi + 0x19f0]
test eax, eax
je 0x10068437
test dword [eax + 8], 0x200
cmove ecx, eax
cmp byte [edi + 0xaf], 0
lea eax, [ebp - 8]
movss xmm5, dword [edi + 0x1554]
movss xmm6, dword [edi + 0x1558]
je 0x10068475
movaps xmm0, xmm5
maxss xmm0, dword [0x10162814]
movss dword [ebp - 8], xmm0
movaps xmm0, xmm6
maxss xmm0, dword [0x10162814]
movss dword [ebp - 4], xmm0
jmp 0x1006847f
movss dword [ebp - 8], xmm5
movss dword [ebp - 4], xmm6
movss xmm7, dword [eax]
movss xmm1, dword [eax + 4]
mov eax, dword [edi + 0x194c]
movss dword [ebp - 4], xmm1
lea edx, [eax - 1]
test edx, edx
js 0x10068568
nop
cmp edx, eax
jge 0x10068587
mov eax, dword [edi + 0x1954]
mov eax, dword [eax + edx*4]
cmp byte [eax + 0x7a], 0
je 0x10068559
cmp byte [eax + 0x81], 0
jne 0x10068559
mov esi, dword [eax + 8]
test esi, 0x200
jne 0x10068559
movups xmm0, xmmword [eax + 0x1dc]
movups xmmword [ebp - 0x20], xmm0
movss xmm0, dword [ebp - 0x20]
movss xmm3, dword [ebp - 0x1c]
test esi, 0x1000002
jne 0x1006850b
movaps xmm2, xmm7
subss xmm3, xmm1
addss xmm2, dword [ebp - 0x18]
addss xmm1, dword [ebp - 0x14]
subss xmm0, xmm7
jmp 0x10068525
movss xmm2, dword [ebp - 0x18]
subss xmm0, xmm5
movss xmm1, dword [ebp - 0x14]
subss xmm3, xmm6
addss xmm2, xmm5
addss xmm1, xmm6
movss xmm4, dword [edi + 0xe0]
comiss xmm4, xmm0
jb 0x10068554
movss xmm0, dword [edi + 0xe4]
comiss xmm0, xmm3
jb 0x10068554
comiss xmm2, xmm4
jbe 0x10068554
comiss xmm1, xmm0
jbe 0x10068554
test ecx, ecx
cmovne eax, ecx
mov ecx, eax
test ecx, ecx
jne 0x10068568
movss xmm1, dword [ebp - 4]
sub edx, 1
mov eax, dword [edi + 0x194c]
jns 0x100684a0
mov dword [edi + 0x1990], ecx
test ecx, ecx
je 0x1006858f
mov eax, dword [ecx + 0x2f0]
mov dword [edi + 0x1994], eax
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
xor eax, eax
mov dword [edi + 0x1994], eax
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
Function at 0x10068920
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push esi
push edi
mov edi, dword [0x101e0c0c]
mov esi, dword [edi + 0x198c]
test dword [esi + 8], 0x1000000
jne 0x10068945
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
xorps xmm1, xmm1
mov dword [ebp - 0x10], 0
lea ecx, [ebp - 0x10]
mov dword [ebp - 0xc], 0x41300000
call fcn.10065e10
cmp word [esi + 0x84], 1
jle 0x10068973
call fcn.1006daf0
pop edi
pop esi
mov esp, ebp
pop ebp
ret
movss xmm2, dword [esi + 0x14]
movss xmm0, dword [esi + 0x18]
mov eax, dword [esi + 0x9c]
movss xmm1, dword [0x10162814]
movss dword [ebp - 4], xmm2
movss dword [ebp - 0x10], xmm2
movss dword [ebp - 8], xmm0
movss dword [ebp - 0xc], xmm0
test al, 1
je 0x100689b5
comiss xmm1, xmm2
jb 0x100689b5
movaps xmm2, xmm1
movss dword [ebp - 4], xmm2
movss dword [ebp - 0x10], xmm2
test al, 2
je 0x100689cb
comiss xmm1, xmm0
jb 0x100689cb
movaps xmm0, xmm1
movss dword [ebp - 8], xmm0
movss dword [ebp - 0xc], xmm0
call fcn.1006daf0
mov eax, dword [edi + 0x198c]
lea ecx, [ebp - 0x10]
xorps xmm1, xmm1
movss xmm3, dword [eax + 0xc8]
movss xmm0, dword [eax + 0xcc]
movaps xmm4, xmm3
addss xmm4, dword [ebp - 4]
movaps xmm2, xmm0
movss dword [ebp - 0x20], xmm3
addss xmm2, dword [ebp - 8]
movss dword [ebp - 0x1c], xmm0
movss dword [ebp - 0x18], xmm4
movss dword [ebp - 0x14], xmm2
call fcn.10065e10
cmp dword [esi + 0x13c], 0
jne 0x10068a2b
cmp byte [esi + 0x145], 0
je 0x10068ac2
test dword [esi + 8], 0x800000
jne 0x10068ac2
mov edx, dword [esi + 0x54]
lea ecx, [ebp - 0x20]
push 0
call fcn.10065f40
mov edx, dword [esi + 0x54]
lea ecx, [ebp - 0x20]
add esp, 4
push 1
call fcn.10064c80
add esp, 4
cmp dword [esi + 0x13c], 0
jne 0x10068ad1
cmp esi, dword [edi + 0x1a9c]
jne 0x10068ad1
movss xmm2, dword [0x101627c4]
lea ecx, [ebp - 0x20]
movss xmm4, dword [ebp - 0x18]
movss xmm3, dword [ebp - 0x14]
addss xmm4, xmm2
movss xmm1, dword [ebp - 0x20]
addss xmm3, xmm2
movss xmm0, dword [ebp - 0x1c]
subss xmm1, xmm2
mov edx, dword [edi + 0x1aa0]
subss xmm0, xmm2
push 2
movss dword [ebp - 0x18], xmm4
movss dword [ebp - 0x14], xmm3
movss dword [ebp - 0x20], xmm1
movss dword [ebp - 0x1c], xmm0
call fcn.10064c80
add esp, 4
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push 0
xor edx, edx
lea ecx, [ebp - 0x20]
call fcn.10065f40
add esp, 4
pop edi
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x10068ae0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
push esi
push edi
mov edi, dword [0x101e0c0c]
lea eax, [ebp - 0x1c]
mov ebx, ecx
mov dword [ebp - 8], edx
push eax
mov dword [ebp - 0x1c], 3
movups xmm0, xmmword [edi + 0x15d8]
lea ecx, [edi + 0x19f4]
movups xmmword [ebp - 0x18], xmm0
call fcn.100745f0
movups xmm0, xmmword [edi + 0x1618]
mov esi, dword [0x101e0c0c]
lea eax, [ebp - 0x14]
push eax
movups xmmword [edi + 0x15d8], xmm0
mov dword [ebp - 0x14], 6
movss xmm0, dword [edi + 0x153c]
lea ecx, [esi + 0x1a00]
movss dword [ebp - 4], xmm0
movss xmm0, dword [esi + 0x1524]
movss dword [ebp - 0x10], xmm0
call fcn.10074520
movss xmm0, dword [ebp - 4]
lea eax, [ebp - 0x14]
movss dword [esi + 0x1524], xmm0
mov esi, dword [0x101e0c0c]
movss xmm0, dword [edi + 0x1540]
movss dword [ebp - 4], xmm0
push eax
movss xmm0, dword [esi + 0x1528]
lea ecx, [esi + 0x1a00]
mov dword [ebp - 0x14], 7
movss dword [ebp - 0x10], xmm0
call fcn.10074520
movss xmm0, dword [ebp - 4]
lea edx, [edi + 0x1534]
movss dword [esi + 0x1528], xmm0
call fcn.1006e540
test ebx, ebx
jne 0x10068bbf
push ebx
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
push 0x20010004
push 1
push dword [ebp - 8]
mov edx, ebx
xor ecx, ecx
call fcn.10068640
add esp, 0xc
mov ecx, 3
mov bl, al
call fcn.1006e5a0
call fcn.1006e4e0
pop edi
pop esi
mov al, bl
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x10068bf0
Capabilities:
Hash data with crc32

Disassembly:
push ebx
mov bl, byte [ecx]
or eax, 0xffffffff
push esi
lea esi, [ecx + 1]
or ecx, 0xffffffff
push edi
test bl, bl
je 0x10068c2f
cmp bl, 0x23
jne 0x10068c11
cmp byte [esi], bl
jne 0x10068c11
cmp byte [esi + 1], bl
cmove eax, ecx
movzx edx, al
movzx ecx, bl
mov bl, byte [esi]
xor edx, ecx
shr eax, 8
inc esi
mov ecx, 0xffffffff
xor eax, dword [edx*4 + 0x10150220]
test bl, bl
jne 0x10068c02
mov ebx, dword [0x101e0c0c]
not eax
mov esi, dword [ebx + 0x197c]
mov edi, dword [ebx + 0x1984]
mov ecx, edi
test esi, esi
je 0x10068c74
nop dword [eax]
mov edx, esi
shr edx, 1
cmp dword [edi + edx*8], eax
lea ecx, [edi + edx*8]
jae 0x10068c68
lea edi, [ecx + 8]
or ecx, 0xffffffff
sub ecx, edx
add esi, ecx
jmp 0x10068c6a
mov esi, edx
test esi, esi
jne 0x10068c50
mov ecx, dword [ebx + 0x1984]
mov edx, dword [ebx + 0x197c]
lea ecx, [ecx + edx*8]
cmp edi, ecx
je 0x10068c8c
cmp dword [edi], eax
jne 0x10068c8c
mov eax, dword [edi + 4]
pop edi
pop esi
pop ebx
ret
pop edi
pop esi
xor eax, eax
pop ebx
ret
Function at 0x1006df90
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
push edi
mov edi, dword [0x101e0c0c]
mov esi, ecx
cmp dword [edi + 0x1a9c], esi
je 0x1006dffb
mov dword [edi + 0x1a9c], esi
test esi, esi
je 0x1006dfcf
cmp byte [edi + 0x1aff], 0
je 0x1006dfcf
mov byte [edi + 0x1afd], 1
mov byte [edi + 0x1b01], 0
mov eax, dword [esi + 0x300]
jmp 0x1006dfe4
mov byte [edi + 0x1b01], 0
test esi, esi
je 0x1006dfe2
mov eax, dword [esi + 0x300]
jmp 0x1006dfe4
xor eax, eax
mov dword [edi + 0x1aa0], eax
mov byte [edi + 0x1afc], 0
mov dword [edi + 0x1af4], 0
test esi, esi
je 0x1006e101
mov eax, dword [esi + 0x2f0]
test eax, eax
cmovne esi, eax
test dword [esi + 8], 0x4000000
je 0x1006e037
cmp dword [edi + 0x19ac], 0
je 0x1006e037
mov eax, dword [edi + 0x19d4]
test eax, eax
je 0x1006e037
cmp dword [eax + 0x2f0], esi
je 0x1006e037
call fcn.10065db0
mov edx, dword [edi + 0x1958]
push ebx
test edx, edx
jle 0x1006e14e
mov ecx, dword [edi + 0x1960]
cmp dword [ecx + edx*4 - 4], esi
je 0x1006e0b8
lea eax, [edx - 2]
test eax, eax
js 0x1006e0b8
lea ecx, [ecx + eax*4]
nop dword [eax]
cmp eax, edx
jge 0x1006e14e
cmp dword [ecx], esi
je 0x1006e076
sub ecx, 4
sub eax, 1
jns 0x1006e060
jmp 0x1006e0b8
lea ebx, [eax + 1]
cmp ebx, edx
jge 0x1006e14e
sub edx, eax
lea eax, [edx*4 - 4]
push eax
mov eax, dword [edi + 0x1960]
lea eax, [eax + ebx*4]
push eax
push ecx
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [edi + 0x1958]
add esp, 0xc
lea ecx, [eax - 1]
cmp ecx, eax
jge 0x1006e14e
mov eax, dword [edi + 0x1960]
mov dword [eax + ecx*4], esi
test dword [esi + 8], 0x2000
jne 0x1006e100
mov edx, dword [edi + 0x194c]
test edx, edx
jle 0x1006e14e
mov ebx, dword [edi + 0x1954]
mov eax, dword [ebx + edx*4 - 4]
cmp eax, esi
je 0x1006e100
cmp dword [eax + 0x2f0], esi
je 0x1006e100
lea eax, [edx - 2]
test eax, eax
js 0x1006e100
lea ecx, [ebx + eax*4]
nop
cmp eax, edx
jge 0x1006e14e
cmp dword [ecx], esi
je 0x1006e107
sub ecx, 4
sub eax, 1
jns 0x1006e0f0
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
lea edi, [eax + 1]
mov dword [ebp - 4], edi
cmp edi, edx
mov edi, dword [0x101e0c0c]
jge 0x1006e14e
sub edx, eax
lea eax, [edx*4 - 4]
push eax
mov eax, dword [ebp - 4]
lea eax, [ebx + eax*4]
push eax
push ecx
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [edi + 0x194c]
add esp, 0xc
lea ecx, [eax - 1]
cmp ecx, eax
jge 0x1006e14e
mov eax, dword [edi + 0x1954]
pop ebx
pop edi
mov dword [eax + ecx*4], esi
pop esi
mov esp, ebp
pop ebp
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x1006e160
Capabilities:
Terminate process

Disassembly:
mov ecx, dword [0x101e0c0c]
push ebx
mov ebx, dword [ecx + 0x1958]
lea eax, [ebx - 1]
test eax, eax
js 0x1006e1d7
push esi
push edi
cmp eax, ebx
jge 0x1006e1cd
mov ecx, dword [ecx + 0x1960]
mov edi, dword [ecx + eax*4]
test edi, edi
je 0x1006e1ab
cmp byte [edi + 0x7b], 0
je 0x1006e1ab
mov ecx, dword [edi + 8]
and ecx, 0x40200
cmp ecx, 0x40200
setne dl
bt dword [edi + 8], 0x18
setae cl
test cl, dl
jne 0x1006e1b8
sub eax, 1
js 0x1006e1d5
mov ecx, dword [0x101e0c0c]
jmp 0x1006e176
mov eax, dword [edi + 0x2fc]
test eax, eax
cmovne edi, eax
mov ecx, edi
pop edi
pop esi
pop ebx
jmp fcn.1006df90
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
pop edi
pop esi
pop ebx
ret

Function at 0x1006e1e0
Capabilities:
Terminate process

Disassembly:
mov ecx, dword [0x101e0c0c]
mov eax, dword [ecx + 0x198c]
mov byte [eax + 0x7c], 1
mov ecx, dword [ecx + 0x198c]
mov edx, dword [ecx + 0x180]
test edx, edx
jle 0x1006e235
add edx, 0xffffffff
mov dword [ecx + 0x180], edx
jne 0x1006e21c
movss xmm0, dword [ecx + 0x220]
movss dword [ecx + 0x16c], xmm0
ret
test edx, edx
jle 0x1006e235
mov eax, dword [ecx + 0x188]
movss xmm0, dword [eax + edx*4 - 4]
movss dword [ecx + 0x16c], xmm0
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3

Function at 0x1006e2e0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, ecx
mov dword [ebp - 4], esi
push edi
mov edi, dword [0x101e0c0c]
test esi, esi
jne 0x1006e31a
mov esi, dword [edi + 0xa0]
test esi, esi
jne 0x1006e317
mov eax, dword [edi + 0x94]
cmp dword [eax + 0x34], esi
jg 0x1006e312
push esi
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov eax, dword [eax + 0x3c]
mov esi, dword [eax]
mov dword [ebp - 4], esi
mov ecx, esi
call fcn.1006e240
lea eax, [ebp - 4]
push eax
lea ecx, [edi + 0x1a0c]
call fcn.10074760
mov eax, dword [edi + 0x198c]
mov ebx, dword [eax + 0x274]
mov eax, dword [esi + 0x38]
mov ecx, dword [ebx + 0x48]
mov edi, dword [ebx + 0x4c]
mov eax, dword [eax + 8]
mov dword [ebp - 4], eax
cmp ecx, edi
jne 0x1006e375
inc ecx
test edi, edi
je 0x1006e35f
mov eax, edi
cdq
sub eax, edx
sar eax, 1
add eax, edi
jmp 0x1006e364
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
lea ecx, [ebx + 0x48]
call fcn.100746c0
mov ecx, dword [ebx + 0x48]
mov eax, dword [ebx + 0x50]
mov edx, dword [ebp - 4]
mov dword [eax + ecx*4], edx
mov ecx, ebx
inc dword [ebx + 0x48]
call fcn.1007bb10
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x1006e390
Capabilities:
Terminate process

Disassembly:
push esi
mov esi, dword [0x101e0c0c]
mov eax, dword [esi + 0x198c]
mov ecx, dword [eax + 0x274]
mov eax, dword [ecx + 0x48]
test eax, eax
jle 0x1006e401
dec eax
mov dword [ecx + 0x48], eax
call fcn.1007bb10
mov ecx, dword [esi + 0x1a0c]
test ecx, ecx
jle 0x1006e401
add ecx, 0xffffffff
mov dword [esi + 0x1a0c], ecx
jne 0x1006e3ed
mov eax, dword [0x101e0c0c]
mov ecx, dword [eax + 0xa0]
test ecx, ecx
jne 0x1006e3fb
mov eax, dword [eax + 0x94]
cmp dword [eax + 0x34], ecx
jle 0x1006e401
mov eax, dword [eax + 0x3c]
mov ecx, dword [eax]
pop esi
jmp fcn.1006e240
test ecx, ecx
jle 0x1006e401
mov eax, dword [esi + 0x1a14]
mov ecx, dword [eax + ecx*4 - 4]
pop esi
jmp fcn.1006e240
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3

Function at 0x1006e480
Capabilities:
Terminate process

Disassembly:
mov ecx, dword [0x101e0c0c]
mov eax, dword [ecx + 0x198c]
mov byte [eax + 0x7c], 1
mov edx, dword [ecx + 0x198c]
mov ecx, dword [edx + 0x174]
test ecx, ecx
jle 0x1006e4c9
add ecx, 0xffffffff
mov dword [edx + 0x174], ecx
jne 0x1006e4b4
xor eax, eax
mov dword [edx + 0x168], eax
ret
test ecx, ecx
jle 0x1006e4c9
mov eax, dword [edx + 0x17c]
mov eax, dword [eax + ecx*4 - 4]
mov dword [edx + 0x168], eax
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3

Function at 0x1006e4e0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ecx
mov eax, dword [0x101e0c0c]
push esi
mov esi, 1
nop
mov ecx, dword [eax + 0x19f4]
test ecx, ecx
jle 0x1006e533
lea edx, [ecx + ecx*4]
mov ecx, dword [eax + 0x19fc]
movups xmm0, xmmword [ecx + edx*4 - 0x10]
lea edx, [ecx + edx*4]
mov ecx, dword [edx - 0x14]
add ecx, ecx
movups xmmword [eax + ecx*8 + 0x15a8], xmm0
mov ecx, dword [eax + 0x19f4]
test ecx, ecx
jle 0x1006e533
dec ecx
dec esi
mov dword [eax + 0x19f4], ecx
test esi, esi
jg 0x1006e4f0
pop esi
mov esp, ebp
pop ebp
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3

Function at 0x1006e5a0
Capabilities:
Terminate process

Disassembly:
mov edx, dword [0x101e0c0c]
push ebx
push esi
push edi
mov ebx, ecx
nop dword [eax + eax]
mov eax, dword [edx + 0x1a00]
test eax, eax
jle 0x1006e632
mov esi, dword [edx + 0x1a08]
lea ecx, [eax + eax*2]
mov eax, dword [esi + ecx*4 - 0xc]
test eax, eax
js 0x1006e632
cmp eax, 0x17
jge 0x1006e632
lea eax, [eax + eax*2]
cmp dword [eax*4 + 0x10150108], 4
mov edi, dword [eax*4 + 0x10150110]
jne 0x1006e618
mov eax, dword [eax*4 + 0x1015010c]
cmp eax, 1
jne 0x1006e5fd
mov eax, dword [esi + ecx*4 - 8]
mov dword [edi + edx + 0x1500], eax
jmp 0x1006e618
cmp eax, 2
jne 0x1006e618
mov eax, dword [esi + ecx*4 - 8]
mov dword [edi + edx + 0x1500], eax
mov eax, dword [esi + ecx*4 - 4]
mov dword [edi + edx + 0x1504], eax
mov eax, dword [edx + 0x1a00]
test eax, eax
jle 0x1006e632
dec eax
dec ebx
mov dword [edx + 0x1a00], eax
test ebx, ebx
jg 0x1006e5b0
pop edi
pop esi
pop ebx
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x1006e640
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push esi
mov esi, dword [ebp + 8]
test esi, esi
je 0x1006e666
test dword [ecx + 0xac], esi
je 0x1006e706
lea eax, [esi - 1]
test esi, eax
je 0x1006e666
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
and dword [ecx + 0xac], 0xfffffff1
mov dword [ecx + 0xb8], 0x7f7fffff
mov dword [ecx + 0xbc], 0x7f7fffff
cvttss2si eax, dword [edx]
movss xmm2, dword [ecx + 0xc]
movss xmm3, dword [ecx + 0x10]
movd xmm0, eax
cvttss2si eax, dword [edx + 4]
cvtdq2ps xmm0, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [ecx + 0xc], xmm0
subss xmm0, xmm2
movss dword [ecx + 0x10], xmm1
subss xmm1, xmm3
addss xmm0, dword [ecx + 0xc8]
addss xmm1, dword [ecx + 0xcc]
movss dword [ecx + 0xc8], xmm0
movss dword [ecx + 0xcc], xmm1
movss xmm1, dword [ecx + 0x10]
movss xmm0, dword [ecx + 0xc]
subss xmm1, xmm3
subss xmm0, xmm2
addss xmm1, dword [ecx + 0xe4]
addss xmm0, dword [ecx + 0xe0]
movss dword [ecx + 0xe4], xmm1
movss dword [ecx + 0xe0], xmm0
pop esi
pop ebp
ret

Function at 0x1006e730
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push esi
mov esi, dword [ebp + 8]
test esi, esi
je 0x1006e756
test dword [ecx + 0xb0], esi
je 0x1006e7cf
lea eax, [esi - 1]
test esi, eax
je 0x1006e756
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
and dword [ecx + 0xb0], 0xfffffff1
xorps xmm1, xmm1
movss xmm0, dword [edx]
comiss xmm0, xmm1
jbe 0x1006e785
mov dword [ecx + 0x90], 0
cvttss2si eax, dword [edx]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ecx + 0x1c], xmm0
jmp 0x1006e796
mov dword [ecx + 0x90], 2
mov byte [ecx + 0x98], 0
movss xmm0, dword [edx + 4]
comiss xmm0, xmm1
jbe 0x1006e7be
mov dword [ecx + 0x94], 0
cvttss2si eax, dword [edx + 4]
pop esi
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ecx + 0x20], xmm0
pop ebp
ret
mov dword [ecx + 0x94], 2
mov byte [ecx + 0x98], 0
pop esi
pop ebp
ret

Function at 0x1006e840
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ecx
mov eax, dword [0x101e0c0c]
push ebx
push esi
push edi
mov esi, dword [eax + 0x198c]
add esi, 0x1c0
mov edi, dword [esi]
test edi, edi
jg 0x1006e866
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov ebx, dword [esi + 8]
xor edx, edx
push dword [ebx + edi*4 - 4]
call fcn.10063440
mov ecx, dword [esi + 4]
add esp, 4
mov dword [ebp - 4], eax
cmp edi, ecx
jne 0x1006e8ab
inc edi
test ecx, ecx
je 0x1006e891
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x1006e896
mov eax, 8
cmp eax, edi
mov ecx, esi
cmovg edi, eax
push edi
call fcn.100746c0
mov edi, dword [esi]
mov ebx, dword [esi + 8]
mov eax, dword [ebp - 4]
mov dword [ebx + edi*4], eax
inc dword [esi]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x1006e8c0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, dword [0x101e0c0c]
push ebx
push esi
push edi
mov eax, dword [ecx + 0x198c]
mov dword [ebp - 4], ecx
mov byte [eax + 0x7c], 1
mov edi, dword [ecx + 0x198c]
mov eax, dword [edi + 0x198]
lea ecx, [edi + 0x198]
inc eax
push eax
call fcn.10074190
mov eax, dword [edi + 0x198]
test eax, eax
jg 0x1006e905
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov edx, dword [edi + 0x1a0]
lea esi, [eax + eax*2]
mov eax, dword [edi + 0xc8]
add esi, esi
mov ecx, dword [edi + 0xcc]
mov dword [edx + esi*8 - 0x2c], ecx
mov dword [edx + esi*8 - 0x30], eax
mov eax, dword [edi + 0xe0]
mov ecx, dword [edi + 0xe4]
mov dword [edx + esi*8 - 0x24], ecx
mov dword [edx + esi*8 - 0x28], eax
mov eax, dword [edi + 0x1b0]
mov dword [edx + esi*8 - 0x20], eax
mov eax, dword [edi + 0x1b4]
mov dword [edx + esi*8 - 0x1c], eax
mov eax, dword [edi + 0xe8]
mov ecx, dword [edi + 0xec]
mov dword [edx + esi*8 - 0x14], ecx
mov ecx, dword [ebp - 4]
mov dword [edx + esi*8 - 0x18], eax
mov eax, dword [edi + 0xf0]
mov dword [edx + esi*8 - 0x10], eax
mov eax, dword [edi + 0x100]
mov dword [edx + esi*8 - 0xc], eax
mov eax, dword [ecx + 0x19b4]
mov dword [edx + esi*8 - 8], eax
mov al, byte [ecx + 0x19c0]
mov byte [edx + esi*8 - 4], al
mov byte [edx + esi*8 - 3], 1
movss xmm0, dword [edi + 0xc8]
subss xmm0, dword [edi + 0xc]
mov ecx, dword [edi + 0xcc]
mov dword [edi + 0xe4], ecx
mov dword [edi + 0xe8], 0
mov dword [edi + 0xec], 0
subss xmm0, dword [edi + 0x1b8]
movss dword [edi + 0x1b4], xmm0
movss xmm0, dword [edi + 0xcc]
subss xmm0, dword [0x101629b4]
mov eax, dword [edi + 0x1b4]
mov dword [edi + 0x1b0], eax
mov eax, dword [edi + 0xc8]
mov dword [edi + 0xe0], eax
movss dword [edi + 0x100], xmm0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x1006ea10
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
mov edi, dword [0x101e0c0c]
mov eax, dword [edi + 0x198c]
mov byte [eax + 0x7c], 1
mov esi, dword [edi + 0x198c]
mov eax, dword [esi + 0x198]
test eax, eax
jle 0x1006ebae
mov edx, dword [esi + 0x1a0]
lea ebx, [eax + eax*2]
movss xmm0, dword [esi + 0xe0]
add ebx, ebx
movss xmm2, dword [esi + 0xe4]
movaps xmm3, xmm0
movaps xmm4, xmm2
mov dword [ebp - 4], edx
movss xmm5, dword [edx + ebx*8 - 0x30]
movss xmm6, dword [edx + ebx*8 - 0x2c]
maxss xmm3, xmm5
mov eax, dword [edx + ebx*8 - 0x30]
maxss xmm4, xmm6
mov ecx, dword [edx + ebx*8 - 0x2c]
mov dword [esi + 0xcc], ecx
mov dword [esi + 0xc8], eax
movss xmm1, dword [edx + ebx*8 - 0x28]
maxss xmm1, xmm0
movss dword [ebp - 0x1c], xmm5
movss xmm0, dword [edx + ebx*8 - 0x24]
maxss xmm0, xmm2
movss dword [ebp - 0x18], xmm6
movss dword [ebp - 0x14], xmm3
movss dword [ebp - 0x10], xmm4
movss dword [esi + 0xe0], xmm1
movss dword [esi + 0xe4], xmm0
mov eax, dword [edx + ebx*8 - 0x20]
movss xmm0, dword [esi + 0xcc]
subss xmm0, dword [0x101629b4]
mov dword [esi + 0x1b0], eax
mov eax, dword [edx + ebx*8 - 0x1c]
mov dword [esi + 0x1b4], eax
mov eax, dword [edx + ebx*8 - 0x18]
mov ecx, dword [edx + ebx*8 - 0x14]
mov dword [esi + 0xe8], eax
mov dword [esi + 0xec], ecx
mov eax, dword [edx + ebx*8 - 0x10]
mov dword [esi + 0xf0], eax
movss dword [esi + 0x100], xmm0
cmp byte [edx + ebx*8 - 3], 0
je 0x1006eb57
movss xmm0, dword [esi + 0xfc]
subss xmm3, xmm5
maxss xmm0, dword [edx + ebx*8 - 0x10]
subss xmm4, xmm6
xorps xmm1, xmm1
lea ecx, [ebp - 0xc]
movss dword [ebp - 0xc], xmm3
movss dword [esi + 0xf0], xmm0
movss dword [ebp - 8], xmm4
call fcn.10065e10
push 0
xor edx, edx
lea ecx, [ebp - 0x1c]
call fcn.10065f40
mov edx, dword [ebp - 4]
add esp, 4
mov eax, dword [edi + 0x19ac]
cmp dword [edx + ebx*8 - 8], eax
je 0x1006eb6f
cmp dword [edi + 0x19b4], eax
jne 0x1006eb6f
test eax, eax
jne 0x1006eb85
cmp byte [edx + ebx*8 - 4], 0
jne 0x1006eb8b
cmp byte [edi + 0x19c0], 0
je 0x1006eb8b
mov eax, dword [edi + 0x19b0]
mov dword [esi + 0x10c], eax
movups xmm0, xmmword [ebp - 0x1c]
movups xmmword [esi + 0x114], xmm0
mov eax, dword [esi + 0x198]
test eax, eax
jle 0x1006ebae
dec eax
pop edi
mov dword [esi + 0x198], eax
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3