joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1006a000
Capabilities:
Terminate process

Disassembly:
push ebp
push ebx
push edi
push esi
push eax
mov esi, ecx
mov ebx, dword [ecx + 0x20]
mov eax, dword [ecx + 0x24]
lea ebp, [ebx + 1]
cmp eax, ebx
jg 0x1006a07a
test eax, eax
je 0x1006a025
mov edi, eax
shr edi, 0x1f
add edi, eax
sar edi, 1
add edi, eax
jmp 0x1006a02a
mov edi, 8
cmp edi, ebp
cmovle edi, ebp
cmp eax, edi
jge 0x1006a07a
lea eax, [edi*8]
lea eax, [eax + eax*4]
push eax
call fcn.100484d0
add esp, 4
mov edx, dword [esi + 0x28]
test edx, edx
je 0x1006a074
mov ecx, dword [esi + 0x20]
shl ecx, 3
lea ecx, [ecx + ecx*4]
push ecx
push edx
push eax
mov dword [esp + 0xc], eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push dword [esi + 0x28]
call fcn.10048500
mov eax, dword [esp + 4]
add esp, 4
mov dword [esi + 0x28], eax
mov dword [esi + 0x24], edi
mov dword [esi + 0x20], ebp
test ebx, ebx
js 0x1006a182
movss xmm0, dword [esp + 0x1c]
movzx eax, word [esp + 0x18]
mov ecx, dword [esi + 0x28]
lea edx, [ebx + ebx*4]
mov word [ecx + edx*8], ax
movss dword [ecx + edx*8 + 8], xmm0
movss xmm0, dword [esp + 0x20]
movss dword [ecx + edx*8 + 0xc], xmm0
movss xmm0, dword [esp + 0x24]
movss dword [ecx + edx*8 + 0x10], xmm0
movss xmm0, dword [esp + 0x28]
movss dword [ecx + edx*8 + 0x14], xmm0
movss xmm0, dword [esp + 0x2c]
movss dword [ecx + edx*8 + 0x18], xmm0
movss xmm0, dword [esp + 0x30]
movss dword [ecx + edx*8 + 0x1c], xmm0
movss xmm0, dword [esp + 0x34]
movss dword [ecx + edx*8 + 0x20], xmm0
movss xmm0, dword [esp + 0x38]
movss dword [ecx + edx*8 + 0x24], xmm0
movss xmm0, dword [esp + 0x3c]
lea eax, [ecx + edx*8 + 0x18]
mov edi, dword [esi + 0x3c]
addss xmm0, dword [edi + 0x20]
movss dword [ecx + edx*8 + 4], xmm0
mov edi, dword [esi + 0x3c]
cmp byte [edi + 0x1c], 0
je 0x1006a12e
addss xmm0, dword [0x101a62c0]
lea ecx, [ecx + edx*8]
add ecx, 4
cvttps2dq xmm0, xmm0
cvtdq2ps xmm0, xmm0
movss dword [ecx], xmm0
mov byte [esi + 0x54], 1
movss xmm0, dword [eax + 8]
subss xmm0, dword [eax]
mov ecx, dword [esi + 0x38]
cvtsi2ss xmm1, dword [ecx + 0x1c]
mulss xmm1, xmm0
movss xmm0, dword [0x101ae350]
addss xmm1, xmm0
cvttss2si edx, xmm1
movss xmm1, dword [eax + 0xc]
subss xmm1, dword [eax + 4]
cvtsi2ss xmm2, dword [ecx + 0x20]
mulss xmm2, xmm1
addss xmm2, xmm0
cvttss2si eax, xmm2
imul eax, edx
add dword [esi + 0x50], eax
add esp, 4
pop esi
pop edi
pop ebx
pop ebp
ret 0x28
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x1006a830
Capabilities:
Terminate process

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xc
mov esi, ecx
mov edi, dword [esp + 0x24]
mov ebx, dword [esp + 0x20]
mov eax, dword [0x10258d1c]
xor eax, esp
mov dword [esp + 8], eax
lea ebp, [esp + 4]
jmp 0x1006a862
add ebx, eax
test edi, edi
je 0x1006a880
xor eax, eax
cmp ebx, edi
setb al
test eax, eax
jne 0x1006a887
jmp 0x1006a8d0
movsx eax, byte [ebx]
test eax, eax
je 0x1006a8d0
mov dword [esp + 4], 0
push edi
push ebx
push ebp
call fcn.10048280
add esp, 0xc
test eax, eax
je 0x1006a8d0
mov ecx, dword [esp + 4]
cmp ecx, 0xffff
ja 0x1006a860
mov dword [esp], ebx
mov edx, ecx
shr edx, 5
cmp dword [esi], edx
jle 0x1006a8e5
mov ebx, edi
mov edi, ebp
mov ebp, 1
shl ebp, cl
mov ecx, dword [esi + 8]
or dword [ecx + edx*4], ebp
mov ebp, edi
mov edi, ebx
mov ebx, dword [esp]
jmp 0x1006a860
mov ecx, dword [esp + 8]
xor ecx, esp
call fcn.10155ad1
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret 8
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3

Function at 0x1006a8f0
Capabilities:
Terminate process

Disassembly:
push ebx
push edi
push esi
mov eax, ecx
mov edx, dword [esp + 0x10]
movzx ecx, word [edx]
jmp 0x1006a907
movzx ecx, word [edx + 4]
add edx, 4
test cx, cx
je 0x1006a938
nop dword [eax]
cmp cx, word [edx + 2]
ja 0x1006a900
movzx ecx, cx
mov esi, ecx
shr esi, 5
cmp dword [eax], esi
jle 0x1006a93e
mov edi, 1
shl edi, cl
mov ebx, dword [eax + 8]
or dword [ebx + esi*4], edi
inc ecx
cmp cx, word [edx + 2]
jbe 0x1006a916
jmp 0x1006a900
pop esi
pop edi
pop ebx
ret 4
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x1006b920
Capabilities:
Terminate process

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x1c
mov eax, dword [0x10258d1c]
xor eax, esp
mov dword [esp + 0x18], eax
mov eax, dword [ecx + 8]
test eax, eax
js 0x1006baf1
mov esi, ecx
mov dword [ecx + 4], 0
je 0x1006bad6
xor ebp, ebp
mov dword [esp], edx
jmp 0x1006b978
mov ebx, ebp
mov ecx, ebp
xor edi, edi
cmp edi, edx
je 0x1006ba6e
mov ebp, ebx
cmp ebx, eax
jge 0x1006bad2
cmp ebp, eax
jge 0x1006b960
mov dword [esp + 4], ebp
mov ecx, ebp
jmp 0x1006b994
cmp ecx, eax
jge 0x1006ba01
mov ebp, dword [esi]
movzx edx, byte [ebp + ecx]
cmp dl, 0x1c
jb 0x1006ba27
cmp dl, 0x1e
jne 0x1006b9f0
cmp ecx, 0xfffffffe
jle 0x1006baf1
inc ecx
mov dword [esi + 4], ecx
mov edi, ecx
nop dword [eax + eax]
cmp eax, edi
je 0x1006ba10
lea ecx, [edi + 1]
mov dword [esi + 4], ecx
movzx ebx, byte [ebp + edi]
mov edx, ebx
not edx
test dl, 0xf
je 0x1006b990
and ebx, 0xfffffff0
mov edi, ecx
cmp ebx, 0xf0
jne 0x1006b9c0
jmp 0x1006b990
mov ecx, esi
call fcn.1006bc20
mov ecx, dword [esi + 4]
mov eax, dword [esi + 8]
cmp ecx, eax
jl 0x1006b994
mov ebx, ecx
jmp 0x1006ba14
mov ebx, eax
mov ecx, eax
xor edi, edi
mov ebp, dword [esp + 4]
mov edx, dword [esp]
cmp edi, edx
jne 0x1006b96e
jmp 0x1006ba6e
lea ebx, [ecx + 1]
mov dword [esi + 4], ebx
movzx edi, byte [ebp + ecx]
cmp edi, 0xc
jne 0x1006ba16
mov dword [esp + 8], ebx
cmp ebx, eax
jge 0x1006ba50
lea edx, [ecx + 2]
mov dword [esp + 8], edx
mov dword [esi + 4], edx
movzx ebx, byte [ebp + ecx + 1]
jmp 0x1006ba52
xor ebx, ebx
mov ebp, dword [esp + 4]
mov edx, dword [esp]
movzx edi, bl
or edi, 0x100
mov ebx, dword [esp + 8]
cmp edi, edx
jne 0x1006b96e
mov ebx, ecx
sub ebx, ebp
mov dword [esp + 0x10], 0
mov edi, ebx
or edi, ebp
js 0x1006bade
cmp eax, ebp
jl 0x1006bade
cmp eax, ecx
jl 0x1006bade
add ebp, dword [esi]
mov dword [esp + 0xc], ebp
mov dword [esp + 0x14], ebx
cmp dword [esp + 0x30], 0
jle 0x1006bade
test ebx, ebx
jle 0x1006bade
mov edi, 1
lea esi, [esp + 0xc]
nop word cs:[eax + eax]
mov ecx, esi
call fcn.1006bc20
mov ecx, dword [esp + 0x34]
mov dword [ecx + edi*4 - 4], eax
cmp edi, dword [esp + 0x30]
jge 0x1006bade
inc edi
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x10], eax
jl 0x1006bab0
jmp 0x1006bade
test eax, eax
js 0x1006bade
mov dword [esp + 0x14], 0
mov ecx, dword [esp + 0x18]
xor ecx, esp
call fcn.10155ad1
add esp, 0x1c
pop esi
pop edi
pop ebx
pop ebp
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x1006bb00
Capabilities:
Terminate process

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x34
mov edi, edx
mov esi, ecx
mov ebx, dword [esp + 0x48]
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x4c]
mov ebp, dword [0x10258d1c]
xor ebp, esp
mov dword [esp + 0x30], ebp
mov dword [esp + 0x1c], edi
mov dword [esp + 0x24], ebx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], eax
mov dword [esp + 0xc], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
lea eax, [esp + 0x28]
lea ecx, [esp + 0x10]
mov edx, 0x12
push eax
push 2
call fcn.1006b920
add esp, 8
mov ebp, dword [esp + 0x2c]
test ebp, ebp
je 0x1006bbe7
mov eax, dword [esp + 0x28]
test eax, eax
je 0x1006bbe7
mov ecx, eax
or ecx, ebp
js 0x1006bb9d
mov ecx, ebx
sub ecx, ebp
setl dl
cmp ecx, eax
setl cl
or cl, dl
add edi, ebp
xor edx, edx
test cl, cl
cmovne eax, edx
cmovne edi, edx
jmp 0x1006bba1
xor eax, eax
xor edi, edi
mov dword [esp], edi
mov dword [esp + 4], 0
mov dword [esp + 8], eax
lea eax, [esp + 0xc]
mov ecx, esp
mov edx, 0x13
push eax
push 1
call fcn.1006b920
add esp, 8
mov eax, dword [esp + 0xc]
test eax, eax
je 0x1006bbe7
add eax, ebp
js 0x1006bc10
cmp eax, ebx
jg 0x1006bc10
mov dword [esp + 0x20], eax
lea edx, [esp + 0x1c]
mov ecx, esi
call fcn.1006b5c0
jmp 0x1006bbfb
mov dword [esi], 0
mov dword [esi + 8], 0
mov dword [esi + 4], 0
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.10155ad1
mov eax, esi
add esp, 0x34
pop esi
pop edi
pop ebx
pop ebp
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x1006e980
Capabilities:
Terminate process

Disassembly:
push esi
movss xmm5, dword [esp + 0xc]
ucomiss xmm1, xmm5
jne 0x1006e990
jp 0x1006e990
pop esi
ret
ucomiss xmm5, xmm1
jbe 0x1006eadd
mov eax, dword [esp + 8]
movss xmm4, dword [eax + 0x14]
movss xmm3, dword [eax + 0x18]
ucomiss xmm3, xmm4
jb 0x1006eadd
ucomiss xmm1, xmm3
ja 0x1006e98e
ucomiss xmm4, xmm5
ja 0x1006e98e
ucomiss xmm4, xmm1
jbe 0x1006e9ea
movaps xmm6, xmm2
subss xmm6, xmm0
movaps xmm7, xmm4
subss xmm7, xmm1
mulss xmm7, xmm6
movaps xmm6, xmm5
subss xmm6, xmm1
divss xmm7, xmm6
addss xmm0, xmm7
ucomiss xmm5, xmm3
ja 0x1006e9f2
movaps xmm3, xmm5
jmp 0x1006ea10
movaps xmm4, xmm1
ucomiss xmm5, xmm3
jbe 0x1006e9e5
movaps xmm1, xmm2
subss xmm1, xmm0
movaps xmm6, xmm3
subss xmm6, xmm5
mulss xmm6, xmm1
subss xmm5, xmm4
divss xmm6, xmm5
addss xmm2, xmm6
xorps xmm1, xmm1
cvtsi2ss xmm1, edx
ucomiss xmm0, xmm1
jne 0x1006ea5d
jp 0x1006ea5d
lea esi, [edx + 1]
xorps xmm5, xmm5
cvtsi2ss xmm5, esi
ucomiss xmm5, xmm2
jb 0x1006eadd
ucomiss xmm0, xmm5
jne 0x1006ea5d
jp 0x1006ea5d
ucomiss xmm2, xmm1
jb 0x1006eadd
ucomiss xmm1, xmm0
jb 0x1006ea5d
ucomiss xmm1, xmm2
jb 0x1006eadd
ucomiss xmm0, xmm5
jb 0x1006ea5d
ucomiss xmm2, xmm5
jb 0x1006eadd
ucomiss xmm1, xmm0
jb 0x1006ea7c
ucomiss xmm1, xmm2
jb 0x1006ea7c
subss xmm3, xmm4
mulss xmm3, dword [eax + 0x10]
addss xmm3, dword [ecx + edx*4]
movss dword [ecx + edx*4], xmm3
pop esi
ret
lea esi, [edx + 1]
xorps xmm5, xmm5
cvtsi2ss xmm5, esi
ucomiss xmm0, xmm5
jb 0x1006ea94
ucomiss xmm2, xmm5
jae 0x1006e98e
ucomiss xmm0, xmm1
jb 0x1006eadd
ucomiss xmm5, xmm0
jb 0x1006eadd
ucomiss xmm2, xmm1
jb 0x1006eadd
ucomiss xmm5, xmm2
jb 0x1006eadd
subss xmm3, xmm4
mulss xmm3, dword [eax + 0x10]
subss xmm0, xmm1
subss xmm2, xmm1
addss xmm2, xmm0
mulss xmm2, dword [0x101a7d94]
addss xmm2, dword [0x101a6280]
mulss xmm2, xmm3
addss xmm2, dword [ecx + edx*4]
movss dword [ecx + edx*4], xmm2
pop esi
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x10073120
Capabilities:
Terminate process

Disassembly:
push ebx
push edi
push esi
sub esp, 0x20
mov eax, dword [0x10258d1c]
xor eax, esp
mov dword [esp + 0x1c], eax
mov eax, dword [0x10258f60]
mov ecx, dword [eax + 0x19e4]
mov byte [ecx + 0x7c], 1
mov edi, dword [eax + 0x19e4]
cmp byte [edi + 0x7f], 0
jne 0x1007321f
mov ebx, dword [esp + 0x34]
movss xmm1, dword [ebx]
xorps xmm0, xmm0
ucomiss xmm1, xmm0
jne 0x10073166
jnp 0x10073235
movss xmm1, dword [ebx + 4]
ucomiss xmm1, xmm0
jne 0x10073176
jnp 0x10073235
mov ecx, edi
push 0
push dword [esp + 0x34]
call fcn.1004b2b0
mov esi, eax
movss xmm0, dword [ebx]
movss xmm1, dword [ebx + 4]
sub esp, 0x14
movss dword [esp + 8], xmm1
movss dword [esp + 4], xmm0
lea ebx, [esp + 0x28]
mov dword [esp], ebx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call fcn.1004c8b0
add esp, 0x14
mov eax, dword [edi + 0xc8]
mov ecx, dword [edi + 0xcc]
movsd xmm0, qword [edi + 0xc8]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
movsd xmm1, qword [esp + 0x14]
addps xmm1, xmm0
movlps qword [esp + 0xc], xmm1
push 0
push ebx
call fcn.1004bd00
add esp, 8
lea edi, [esp + 4]
push 0
push esi
push edi
call fcn.1004bfb0
add esp, 0xc
test al, al
je 0x1007321f
lea eax, [esp + 2]
lea ecx, [esp + 3]
push 0
push eax
push ecx
push esi
push edi
call fcn.10072190
add esp, 0x14
mov ebx, eax
jmp 0x10073221
xor ebx, ebx
mov ecx, dword [esp + 0x1c]
xor ecx, esp
call fcn.10155ad1
mov eax, ebx
add esp, 0x20
pop esi
pop edi
pop ebx
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x10078ef0
Capabilities:
Terminate process

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x4c
mov ebp, dword [esp + 0x74]
mov eax, dword [0x10258d1c]
xor eax, esp
mov dword [esp + 0x48], eax
mov esi, dword [0x10258f60]
cmp dword [esi + 0x2c40], 0
jne 0x10078f1a
call fcn.1004bc30
mov edi, dword [esp + 0x6c]
movzx ecx, byte [ebp]
test cl, cl
je 0x10078fd3
mov eax, ebp
jmp 0x10078f48
xor edx, edx
cmp cl, 0x25
sete dl
movzx ecx, byte [eax + edx + 1]
add eax, edx
inc eax
test cl, cl
je 0x10078fd3
cmp cl, 0x25
jne 0x10078f30
cmp byte [eax + 1], 0x25
je 0x10078f30
mov dl, 0x25
mov ebx, 0x25
mov ecx, 2
mov edi, 0x900
mov ebp, 0x2480a80
jmp 0x10078f86
dec bl
movzx edx, bl
bt edi, edx
jae 0x10078fa2
movsx ebx, byte [eax + ecx - 1]
inc ecx
mov edx, ebx
test ebx, ebx
je 0x10078fc9
mov dh, dl
add dh, 0xbf
cmp dh, 0x19
jbe 0x10078f70
add dl, 0x9f
cmp dl, 0x19
ja 0x10078f7a
dec bl
movzx edx, bl
bt ebp, edx
jb 0x10078f7a
cmp byte [eax + ecx - 1], 0
mov edi, dword [esp + 0x6c]
je 0x10078fd1
cmp ecx, 0x20
mov edx, 0x20
cmovb edx, ecx
lea ebp, [esp + 0x28]
push edx
push eax
push ebp
call fcn.100484a0
add esp, 0xc
jmp 0x10078fd3
mov ebp, eax
mov edi, dword [esp + 0x6c]
jmp 0x10078fd3
mov ebp, eax
mov ecx, dword [esp + 0x70]
cmp edi, 1
ja 0x10078ff7
mov edi, esi
lea eax, [esp + 8]
push dword [ecx]
push ebp
push 0x20
push eax
call fcn.100485e0
add esp, 0x10
mov ebp, 0x11
jmp 0x10079066
mov eax, edi
and eax, 0xfffffffe
cmp eax, 2
jne 0x1007901f
mov edi, esi
lea eax, [esp + 8]
push dword [ecx + 4]
push dword [ecx]
push ebp
push 0x20
push eax
call fcn.100485e0
add esp, 0x14
mov ebp, 0x11
jmp 0x10079066
cmp edi, 5
je 0x10079037
cmp edi, 4
jne 0x100790fb
movss xmm0, dword [ecx]
cvtss2sd xmm0, xmm0
jmp 0x1007903b
movsd xmm0, qword [ecx]
mov edi, esi
sub esp, 0x14
movsd qword [esp + 0xc], xmm0
mov dword [esp + 8], ebp
lea eax, [esp + 0x1c]
mov dword [esp], eax
mov dword [esp + 4], 0x20
call fcn.100485e0
add esp, 0x14
mov ebp, 0x20010
mov esi, dword [esp + 0x60]
lea ebx, [esp + 8]
push ebx
call fcn.10048560
add esp, 4
movsd xmm0, qword [esi]
movsd xmm1, qword [esi + 8]
subps xmm1, xmm0
movlps qword [esp], xmm1
mov eax, esp
push 0
push 0
push ebp
push eax
push 0x20
push ebx
push dword [esp + 0x80]
call fcn.1007db90
add esp, 0x1c
cmp dword [edi + 0x2c40], 0
je 0x100790ce
test al, al
je 0x100790e4
mov edx, dword [edi + 0x1d90]
lea ecx, [esp + 8]
push 0
push dword [esp + 0x74]
push dword [esp + 0x74]
call fcn.10080a60
add esp, 0xc
mov ebx, eax
jmp 0x100790e6
mov ecx, dword [esp + 0x64]
cmp dword [edi + 0x1a04], ecx
jne 0x100790fb
mov dword [edi + 0x2c40], ecx
test al, al
jne 0x100790ae
xor ebx, ebx
mov ecx, dword [esp + 0x48]
xor ecx, esp
call fcn.10155ad1
mov eax, ebx
add esp, 0x4c
pop esi
pop edi
pop ebx
pop ebp
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x10080e30
Capabilities:
Terminate process

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xc
mov eax, dword [esp + 0x2c]
mov ecx, dword [0x10258d1c]
xor ecx, esp
mov dword [esp + 8], ecx
test eax, 0x100000
jne 0x10080e91
mov edi, dword [esp + 0x34]
mov ebx, dword [esp + 0x30]
mov esi, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
xorps xmm0, xmm0
movlps qword [esp], xmm0
mov ebp, esp
push edi
push ebx
push eax
push ebp
push esi
push edx
push ecx
call fcn.1007db90
add esp, 0x1c
mov ebx, eax
mov ecx, dword [esp + 8]
xor ecx, esp
call fcn.10155ad1
mov eax, ebx
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x10085200
Capabilities:
Terminate process

Disassembly:
mov eax, dword [0x10258f60]
mov eax, dword [eax + 0x19e4]
test byte [eax + 0xb], 2
je 0x1005b986
jmp fcn.10057bf0
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
push ebp
push ebx
push edi
push esi
sub esp, 0x38
mov eax, dword [esp + 0x54]
mov esi, dword [esp + 0x50]
mov edi, dword [esp + 0x4c]
movss xmm5, dword [esi]
movss xmm6, dword [esi + 4]
movss xmm1, dword [0x101a6280]
movaps xmm0, xmm1
minss xmm0, xmm5
xorps xmm2, xmm2
cmpltss xmm5, xmm2
andnps xmm5, xmm0
movss xmm3, dword [0x101a6294]
mulss xmm5, xmm3
movss xmm0, dword [0x101a62c0]
movaps xmm4, xmm1
minss xmm4, xmm6
cmpltss xmm6, xmm2
andnps xmm6, xmm4
mulss xmm6, xmm3
movss xmm7, dword [esi + 8]
movaps xmm4, xmm1
minss xmm4, xmm7
cmpltss xmm7, xmm2
andnps xmm7, xmm4
mulss xmm7, xmm3
mov ecx, 0xff
mov dword [esp + 4], eax
test al, 2
jne 0x100852a7
movss xmm3, dword [esi + 0xc]
minss xmm1, xmm3
cmpltss xmm3, xmm2
andnps xmm3, xmm1
mulss xmm3, dword [0x101a6294]
addss xmm3, dword [0x101a62c0]
cvttss2si ecx, xmm3
mov dword [esp], ecx
addss xmm5, xmm0
movups xmmword [esp + 0x28], xmm5
addss xmm6, xmm0
movups xmmword [esp + 0x18], xmm6
addss xmm7, xmm0
movups xmmword [esp + 8], xmm7
push 1
push 0
call fcn.1005b7c0
add esp, 8
test edi, edi
je 0x100852f3
push 0
push edi
call fcn.100496b0
add esp, 8
cmp eax, edi
jbe 0x100852f3
push eax
push edi
call fcn.10071cc0
add esp, 8
call fcn.10074710
cvttss2si edi, dword [esp + 0x28]
cvttss2si ebx, dword [esp + 0x18]
cvttss2si ebp, dword [esp + 8]
push 0xbf800000
push 0
call fcn.1004bea0
add esp, 8
test byte [esp + 4], 2
jne 0x1008538e
movss xmm0, dword [esi + 0xc]
cvtss2sd xmm0, xmm0
movss xmm1, dword [esi + 8]
cvtss2sd xmm1, xmm1
movss xmm2, dword [esi]
movss xmm3, dword [esi + 4]
cvtss2sd xmm3, xmm3
cvtss2sd xmm2, xmm2
sub esp, 0x44
movsd qword [esp + 0x3c], xmm0
movsd qword [esp + 0x34], xmm1
movsd qword [esp + 0x2c], xmm3
movsd qword [esp + 0x24], xmm2
mov eax, dword [esp + 0x44]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ebp
mov dword [esp + 8], ebx
mov dword [esp + 4], edi
mov dword [esp], str._02X_02X_02X_02X_nR:_d__G:_d__B:_d__A:_d_n__.3f___.3f___.3f___.3f_
call fcn.100720d0
add esp, 0x44
jmp 0x100853e4
movss xmm0, dword [esi + 8]
cvtss2sd xmm0, xmm0
movss xmm1, dword [esi]
movss xmm2, dword [esi + 4]
cvtss2sd xmm2, xmm2
cvtss2sd xmm1, xmm1
sub esp, 0x34
movsd qword [esp + 0x2c], xmm0
movsd qword [esp + 0x24], xmm2
movsd qword [esp + 0x1c], xmm1
mov dword [esp + 0x18], ebp
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], ebp
mov dword [esp + 8], ebx
mov dword [esp + 4], edi
mov dword [esp], str._02X_02X_02X_nR:__d__G:__d__B:__d_n__.3f___.3f___.3f_
call fcn.100720d0
add esp, 0x34
add esp, 0x38
pop esi
pop edi
pop ebx
pop ebp
jmp 0x1005b970
Function at 0x10085af0
Capabilities:
Terminate process

Disassembly:
cmp dword [ecx], 5
jge 0x10085ba7
movzx edx, byte [esp + 0xc]
movss xmm0, dword [esp + 8]
mov eax, dword [esp + 4]
mov dword [ecx], eax
xorps xmm1, xmm1
movlps qword [ecx + 8], xmm1
movss dword [ecx + 4], xmm0
test dl, dl
je 0x10085b1e
movups xmmword [ecx + 0x20], xmm1
test eax, eax
jle 0x10085ba4
mov dword [ecx + 0x10], 0
xorps xmm1, xmm1
movss xmm2, dword [ecx + 0x20]
addss xmm2, xmm1
mov dword [ecx + 0x20], 0
cmp eax, 1
jne 0x10085b4a
movaps xmm3, xmm2
jmp 0x10085b9f
dec eax
xor edx, edx
movss xmm1, dword [0x101ae354]
nop word cs:[eax + eax]
movss xmm4, dword [ecx + edx*4 + 0x24]
xorps xmm3, xmm3
cmpltss xmm3, xmm4
movaps xmm5, xmm3
andps xmm5, xmm0
andnps xmm3, xmm1
orps xmm3, xmm5
addss xmm3, xmm2
cvttps2dq xmm2, xmm3
cvtdq2ps xmm2, xmm2
movss dword [ecx + edx*4 + 0x14], xmm2
addss xmm3, xmm4
mov dword [ecx + edx*4 + 0x24], 0
inc edx
movaps xmm2, xmm3
cmp eax, edx
jne 0x10085b60
movss dword [ecx + 8], xmm3
ret 0xc
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x10086080
Capabilities:
Terminate process

Disassembly:
push ebp
push ebx
push edi
push esi
push eax
mov ebx, edx
mov edi, ecx
mov ebp, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
lea ecx, [ebx + 0x18]
push 0
push ebp
call fcn.10086140
add esp, 8
test ebp, ebp
jle 0x100860ca
test eax, eax
je 0x100860ca
mov ecx, dword [esp + 0x18]
mov edx, ebp
nop dword [eax]
cmp dword [edi + 4], ecx
jle 0x10086135
mov esi, dword [edi + 0xc]
movzx esi, word [esi + ecx*2]
mov word [eax], si
add eax, 2
inc ecx
dec edx
jne 0x100860b0
mov dword [esp], ebx
mov eax, dword [esp + 0x18]
lea ebx, [eax + eax]
mov esi, dword [edi + 0xc]
add esi, ebx
lea eax, [esi + ebp*2]
push eax
push esi
call fcn.10048cc0
add esp, 8
sub dword [edi + 0x28], eax
sub dword [edi + 0x2c], ebp
mov ecx, dword [edi + 0xc]
mov eax, dword [esp + 0x18]
lea eax, [ecx + eax*2]
movzx eax, word [eax + ebp*2]
test ax, ax
je 0x10086121
lea edx, [ebx + ebp*2]
add ecx, edx
add ecx, 2
nop word [eax + eax]
mov word [esi], ax
add esi, 2
movzx eax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10086110
mov word [esi], 0
mov eax, dword [esp]
mov byte [eax + 0xf], 0
add esp, 4
pop esi
pop edi
pop ebx
pop ebp
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3

Function at 0x10086350
Capabilities:
Terminate process

Disassembly:
push ebx
push edi
push esi
mov eax, 1
test edx, edx
jle case.0x1008638c.32
mov esi, dword [ecx + 4]
cmp esi, edx
jl 0x100863ba
mov ecx, dword [ecx + 0xc]
movzx edi, word [ecx + edx*2 - 2]
xor eax, eax
lea ebx, [edi - 0x20]
cmp ebx, 0x5d
ja case.default.0x10086375
jmp dword [ebx*4 + 0x101af25c]
cmp esi, edx
jle 0x100863ba
movzx ecx, word [ecx + edx*2]
lea edx, [ecx - 0x20]
cmp edx, 0x5d
ja case.default.0x1008638c
jmp dword [edx*4 + 0x101af3d4]
pop esi
pop edi
pop ebx
ret
cmp edi, 0x3000
je case.0x10086375.32
cmp edi, 9
je case.0x10086375.32
jmp case.0x1008638c.32
cmp ecx, 9
je case.0x1008638c.32
cmp ecx, 0x3000
je case.0x1008638c.32
mov eax, 1
jmp case.0x1008638c.32
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3