joyce8/EMBER2024-capa huggingface dataset:
Function at 0x100475a0
Capabilities:
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x28
xor ecx, ecx
push esi
push edi
mov edi, dword [0x1017bfd8]
mov eax, dword [edi + 0x1a48]
test eax, eax
je 0x100475d7
test dword [eax + 8], 0x200
cmove ecx, eax
cmp byte [edi + 0xaf], 0
movss xmm1, dword [edi + 0x155c]
movss xmm7, dword [edi + 0x1558]
movaps xmm6, xmm1
movss dword [ebp - 4], xmm1
movaps xmm5, xmm7
je 0x1004760b
maxss xmm5, dword [0x101450fc]
maxss xmm6, dword [0x101450fc]
mov eax, dword [edi + 0x19a4]
lea edx, [eax - 1]
test edx, edx
js 0x100476d8
nop dword [eax]
cmp edx, eax
jge 0x100476f7
mov eax, dword [edi + 0x19ac]
mov eax, dword [eax + edx*4]
cmp byte [eax + 0x7a], 0
je 0x100476c9
cmp byte [eax + 0x81], 0
jne 0x100476c9
mov esi, dword [eax + 8]
test esi, 0x200
jne 0x100476c9
movups xmm0, xmmword [eax + 0x1dc]
movups xmmword [ebp - 0x20], xmm0
movss xmm0, dword [ebp - 0x20]
movss xmm3, dword [ebp - 0x1c]
test esi, 0x1000002
jne 0x10047680
subss xmm0, xmm5
movaps xmm2, xmm5
subss xmm3, xmm6
movaps xmm1, xmm6
jmp 0x1004768b
subss xmm0, xmm7
movaps xmm2, xmm7
subss xmm3, xmm1
movss xmm4, dword [edi + 0xe0]
comiss xmm4, xmm0
addss xmm1, dword [ebp - 0x14]
addss xmm2, dword [ebp - 0x18]
jb 0x100476c4
movss xmm0, dword [edi + 0xe4]
comiss xmm0, xmm3
jb 0x100476c4
comiss xmm2, xmm4
jbe 0x100476c4
comiss xmm1, xmm0
jbe 0x100476c4
test ecx, ecx
cmovne eax, ecx
mov ecx, eax
test ecx, ecx
jne 0x100476d8
movss xmm1, dword [ebp - 4]
sub edx, 1
mov eax, dword [edi + 0x19a4]
jns 0x10047620
mov dword [edi + 0x19e8], ecx
test ecx, ecx
je 0x100476ff
mov eax, dword [ecx + 0x2f0]
mov dword [edi + 0x19ec], eax
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
xor eax, eax
mov dword [edi + 0x19ec], eax
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
Function at 0x10047ba0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x20
push esi
push edi
mov edi, dword [0x1017bfd8]
mov esi, dword [edi + 0x19e4]
test dword [esi + 8], 0x1000000
jne 0x10047bc8
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
xorps xmm1, xmm1
mov dword [esp + 0x10], 0
lea ecx, [esp + 0x10]
mov dword [esp + 0x14], 0x41300000
call fcn.10044ce0
cmp word [esi + 0x84], 1
jle 0x10047bf9
call fcn.1004c800
pop edi
pop esi
mov esp, ebp
pop ebp
ret
movss xmm1, dword [esi + 0x14]
movss xmm0, dword [esi + 0x18]
mov eax, dword [esi + 0x9c]
movss xmm2, dword [0x101450fc]
movss dword [esp + 8], xmm1
movss dword [esp + 0x10], xmm1
movss dword [esp + 0xc], xmm0
movss dword [esp + 0x14], xmm0
test al, 1
je 0x10047c3d
maxss xmm1, xmm2
movss dword [esp + 8], xmm1
movss dword [esp + 0x10], xmm1
test al, 2
je 0x10047c51
maxss xmm0, xmm2
movss dword [esp + 0xc], xmm0
movss dword [esp + 0x14], xmm0
call fcn.1004c800
mov eax, dword [edi + 0x19e4]
lea ecx, [esp + 0x10]
xorps xmm1, xmm1
movss xmm3, dword [eax + 0xc8]
movss xmm0, dword [eax + 0xcc]
movaps xmm4, xmm3
addss xmm4, dword [esp + 8]
movaps xmm2, xmm0
movss dword [esp + 0x18], xmm3
addss xmm2, dword [esp + 0xc]
movss dword [esp + 0x1c], xmm0
movss dword [esp + 0x20], xmm4
movss dword [esp + 0x24], xmm2
call fcn.10044ce0
cmp dword [esi + 0x13c], 0
jne 0x10047cb8
cmp byte [esi + 0x145], 0
je 0x10047d5a
test dword [esi + 8], 0x800000
jne 0x10047d5a
mov edx, dword [esi + 0x54]
lea ecx, [esp + 0x18]
push 0
call fcn.10044e10
mov edx, dword [esi + 0x54]
lea ecx, [esp + 0x1c]
add esp, 4
push 1
call fcn.10043cf0
add esp, 4
cmp dword [esi + 0x13c], 0
jne 0x10047d6a
cmp esi, dword [edi + 0x1af4]
jne 0x10047d6a
movss xmm2, dword [0x101450a4]
lea ecx, [esp + 0x18]
movss xmm4, dword [esp + 0x20]
movss xmm3, dword [esp + 0x24]
addss xmm4, xmm2
movss xmm1, dword [esp + 0x18]
addss xmm3, xmm2
movss xmm0, dword [esp + 0x1c]
subss xmm1, xmm2
mov edx, dword [edi + 0x1af8]
subss xmm0, xmm2
push 2
movss dword [esp + 0x24], xmm4
movss dword [esp + 0x28], xmm3
movss dword [esp + 0x1c], xmm1
movss dword [esp + 0x20], xmm0
call fcn.10043cf0
add esp, 4
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push 0
xor edx, edx
lea ecx, [esp + 0x1c]
call fcn.10044e10
add esp, 4
pop edi
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x10047d70
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
push esi
push edi
mov edi, dword [0x1017bfd8]
lea eax, [ebp - 0x1c]
mov ebx, ecx
mov dword [ebp - 8], edx
push eax
mov dword [ebp - 0x1c], 5
movups xmm0, xmmword [edi + 0x15fc]
lea ecx, [edi + 0x1a4c]
movups xmmword [ebp - 0x18], xmm0
call fcn.10053840
movups xmm0, xmmword [edi + 0x163c]
mov esi, dword [0x1017bfd8]
lea eax, [ebp - 0x14]
push eax
movups xmmword [edi + 0x15fc], xmm0
mov dword [ebp - 0x14], 6
movss xmm0, dword [edi + 0x1540]
lea ecx, [esi + 0x1a58]
movss dword [ebp - 4], xmm0
movss xmm0, dword [esi + 0x1528]
movss dword [ebp - 0x10], xmm0
call fcn.10053780
movss xmm0, dword [ebp - 4]
lea eax, [ebp - 0x14]
movss dword [esi + 0x1528], xmm0
mov esi, dword [0x1017bfd8]
movss xmm0, dword [edi + 0x1544]
movss dword [ebp - 4], xmm0
push eax
movss xmm0, dword [esi + 0x152c]
lea ecx, [esi + 0x1a58]
mov dword [ebp - 0x14], 7
movss dword [ebp - 0x10], xmm0
call fcn.10053780
movss xmm0, dword [ebp - 4]
lea eax, [ebp - 0x14]
movss dword [esi + 0x152c], xmm0
mov esi, dword [0x1017bfd8]
push eax
mov dword [ebp - 0x14], 1
movss xmm0, dword [esi + 0x1508]
lea ecx, [esi + 0x1a58]
movss xmm1, dword [esi + 0x150c]
movss dword [ebp - 0x10], xmm0
movss dword [ebp - 0xc], xmm1
call fcn.10053780
mov eax, dword [edi + 0x1538]
mov ecx, dword [edi + 0x153c]
mov dword [esi + 0x1508], eax
mov dword [esi + 0x150c], ecx
test ebx, ebx
jne 0x10047e92
push ebx
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
push 0x20010004
push 1
push dword [ebp - 8]
mov edx, ebx
xor ecx, ecx
call fcn.100478e0
add esp, 0xc
mov ecx, 3
mov bl, al
call fcn.1004d420
call fcn.1004d3c0
pop edi
pop esi
mov al, bl
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x10047ed0
Capabilities:
Hash data with crc32

Disassembly:
push ebx
mov bl, byte [ecx]
or eax, 0xffffffff
push esi
lea esi, [ecx + 1]
or ecx, 0xffffffff
push edi
test bl, bl
je 0x10047f0f
cmp bl, 0x23
jne 0x10047ef1
cmp byte [esi], bl
jne 0x10047ef1
cmp byte [esi + 1], bl
cmove eax, ecx
movzx edx, al
movzx ecx, bl
mov bl, byte [esi]
xor edx, ecx
shr eax, 8
inc esi
mov ecx, 0xffffffff
xor eax, dword [edx*4 + 0x1013a068]
test bl, bl
jne 0x10047ee2
mov ecx, dword [0x1017bfd8]
not eax
mov esi, dword [ecx + 0x19d4]
mov edi, dword [ecx + 0x19dc]
lea ebx, [edi + esi*8]
test esi, esi
je 0x10047f4e
nop word [eax + eax]
mov edx, esi
shr edx, 1
cmp dword [edi + edx*8], eax
lea ecx, [edi + edx*8]
jae 0x10047f48
lea edi, [ecx + 8]
or ecx, 0xffffffff
sub ecx, edx
add esi, ecx
jmp 0x10047f4a
mov esi, edx
test esi, esi
jne 0x10047f30
cmp edi, ebx
je 0x10047f5d
cmp dword [edi], eax
jne 0x10047f5d
mov eax, dword [edi + 4]
pop edi
pop esi
pop ebx
ret
pop edi
pop esi
xor eax, eax
pop ebx
ret
Function at 0x1004ced0
Capabilities:
Terminate process

Disassembly:
push esi
push edi
mov edi, dword [0x1017bfd8]
mov esi, ecx
cmp dword [edi + 0x1af4], esi
je 0x1004cf37
mov dword [edi + 0x1af4], esi
test esi, esi
je 0x1004cf0b
cmp byte [edi + 0x1b57], 0
je 0x1004cf0b
mov byte [edi + 0x1b55], 1
mov byte [edi + 0x1b59], 0
mov eax, dword [esi + 0x300]
jmp 0x1004cf20
mov byte [edi + 0x1b59], 0
test esi, esi
je 0x1004cf1e
mov eax, dword [esi + 0x300]
jmp 0x1004cf20
xor eax, eax
mov dword [edi + 0x1af8], eax
mov byte [edi + 0x1b54], 0
mov dword [edi + 0x1b4c], 0
test esi, esi
je 0x1004d034
mov eax, dword [esi + 0x2f0]
test eax, eax
cmovne esi, eax
test dword [esi + 8], 0x4000000
je 0x1004cf73
cmp dword [edi + 0x1a04], 0
je 0x1004cf73
mov eax, dword [edi + 0x1a2c]
test eax, eax
je 0x1004cf73
cmp dword [eax + 0x2f0], esi
je 0x1004cf73
call fcn.10044c80
mov eax, dword [edi + 0x19b0]
push ebx
test eax, eax
jle 0x1004d078
mov edx, dword [edi + 0x19b8]
cmp dword [edx + eax*4 - 4], esi
je 0x1004cff0
lea ecx, [eax - 2]
test ecx, ecx
js 0x1004cff0
lea edx, [edx + ecx*4]
cmp ecx, eax
jge 0x1004d078
cmp dword [edx], esi
je 0x1004cfae
sub edx, 4
sub ecx, 1
jns 0x1004cf98
jmp 0x1004cff0
lea ebx, [ecx + 1]
cmp ebx, eax
jge 0x1004d078
sub eax, ecx
lea eax, [eax*4 - 4]
push eax
mov eax, dword [edi + 0x19b8]
lea eax, [eax + ebx*4]
push eax
push edx
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [edi + 0x19b0]
add esp, 0xc
lea ecx, [eax - 1]
cmp ecx, eax
jge 0x1004d078
mov eax, dword [edi + 0x19b8]
mov dword [eax + ecx*4], esi
test dword [esi + 8], 0x2000
jne 0x1004d033
mov eax, dword [edi + 0x19a4]
test eax, eax
jle 0x1004d078
mov ebx, dword [edi + 0x19ac]
mov ecx, dword [ebx + eax*4 - 4]
cmp ecx, esi
je 0x1004d033
cmp dword [ecx + 0x2f0], esi
je 0x1004d033
lea ecx, [eax - 2]
test ecx, ecx
js 0x1004d033
lea edx, [ebx + ecx*4]
cmp ecx, eax
jge 0x1004d078
cmp dword [edx], esi
je 0x1004d037
sub edx, 4
sub ecx, 1
jns 0x1004d023
pop ebx
pop edi
pop esi
ret
lea ebx, [ecx + 1]
cmp ebx, eax
mov ebx, dword [edi + 0x19ac]
jge 0x1004d078
sub eax, ecx
lea eax, [eax*4 - 4]
push eax
lea eax, [ebx + 4]
lea eax, [eax + ecx*4]
push eax
push edx
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [edi + 0x19a4]
add esp, 0xc
lea ecx, [eax - 1]
cmp ecx, eax
jge 0x1004d078
mov eax, dword [edi + 0x19ac]
pop ebx
pop edi
mov dword [eax + ecx*4], esi
pop esi
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3

Function at 0x1004d090
Capabilities:
Terminate process

Disassembly:
mov ecx, dword [0x1017bfd8]
push ebx
mov ebx, dword [ecx + 0x19b0]
lea eax, [ebx - 1]
test eax, eax
js 0x1004d107
push esi
push edi
cmp eax, ebx
jge 0x1004d0fd
mov ecx, dword [ecx + 0x19b8]
mov edi, dword [ecx + eax*4]
test edi, edi
je 0x1004d0db
cmp byte [edi + 0x7b], 0
je 0x1004d0db
mov ecx, dword [edi + 8]
and ecx, 0x40200
cmp ecx, 0x40200
setne dl
bt dword [edi + 8], 0x18
setae cl
test cl, dl
jne 0x1004d0e8
sub eax, 1
js 0x1004d105
mov ecx, dword [0x1017bfd8]
jmp 0x1004d0a6
mov eax, dword [edi + 0x2fc]
test eax, eax
cmovne edi, eax
mov ecx, edi
pop edi
pop esi
pop ebx
jmp fcn.1004ced0
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
pop edi
pop esi
pop ebx
ret
Function at 0x1004d110
Capabilities:
Terminate process

Disassembly:
mov ecx, dword [0x1017bfd8]
mov eax, dword [ecx + 0x19e4]
mov byte [eax + 0x7c], 1
mov ecx, dword [ecx + 0x19e4]
mov edx, dword [ecx + 0x180]
test edx, edx
jle 0x1004d165
add edx, 0xffffffff
mov dword [ecx + 0x180], edx
jne 0x1004d14c
movss xmm0, dword [ecx + 0x220]
movss dword [ecx + 0x16c], xmm0
ret
test edx, edx
jle 0x1004d165
mov eax, dword [ecx + 0x188]
movss xmm0, dword [eax + edx*4 - 4]
movss dword [ecx + 0x16c], xmm0
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3

Function at 0x1004d170
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, ecx
mov dword [ebp - 4], esi
push edi
mov edi, dword [0x1017bfd8]
test esi, esi
jne 0x1004d1af
mov esi, dword [edi + 0xa0]
test esi, esi
jne 0x1004d1a4
mov eax, dword [edi + 0x94]
cmp dword [eax + 0x34], esi
jle 0x1004d2a1
mov eax, dword [eax + 0x3c]
mov esi, dword [eax]
mov dword [ebp - 4], esi
test esi, esi
je 0x1004d2a1
cmp dword [esi + 0x38], 0
je 0x1004d2a1
movss xmm0, dword [esi + 0x44]
xorps xmm1, xmm1
comiss xmm0, xmm1
jbe 0x1004d2a1
movss xmm0, dword [edi + 0x98]
mov eax, dword [edi + 0x19e4]
mov dword [edi + 0x18fc], esi
mulss xmm0, dword [esi + 0x10]
mulss xmm0, dword [esi + 0x44]
maxss xmm0, dword [0x10145040]
movss dword [edi + 0x1904], xmm0
test eax, eax
je 0x1004d208
movss xmm1, dword [eax + 0x26c]
mulss xmm1, xmm0
movss dword [edi + 0x1900], xmm1
mov eax, dword [esi + 0x38]
mov ecx, dword [eax + 0x2c]
mov eax, dword [eax + 0x30]
mov dword [edi + 0x190c], eax
lea eax, [ebp - 4]
mov dword [edi + 0x1908], ecx
lea ecx, [edi + 0x1a64]
push eax
mov dword [edi + 0x1910], esi
movss dword [edi + 0x1914], xmm1
call fcn.100539a0
mov eax, dword [edi + 0x19e4]
mov ebx, dword [eax + 0x274]
mov eax, dword [esi + 0x38]
mov ecx, dword [ebx + 0x48]
mov edi, dword [ebx + 0x4c]
mov eax, dword [eax + 8]
mov dword [ebp - 4], eax
cmp ecx, edi
jne 0x1004d284
inc ecx
test edi, edi
je 0x1004d271
mov eax, edi
cdq
sub eax, edx
sar eax, 1
add eax, edi
jmp 0x1004d276
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
lea ecx, [ebx + 0x48]
call fcn.10053900
mov edx, dword [ebx + 0x48]
mov eax, dword [ebx + 0x50]
mov ecx, dword [ebp - 4]
mov dword [eax + edx*4], ecx
mov ecx, ebx
inc dword [ebx + 0x48]
call fcn.1005af20
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x1004d2b0
Capabilities:
Terminate process

Disassembly:
push ecx
push esi
push edi
mov edi, dword [0x1017bfd8]
mov eax, dword [edi + 0x19e4]
mov ecx, dword [eax + 0x274]
mov eax, dword [ecx + 0x48]
test eax, eax
jle 0x1004d3b3
dec eax
mov dword [ecx + 0x48], eax
call fcn.1005af20
mov edx, dword [edi + 0x1a64]
test edx, edx
jle 0x1004d3b3
mov esi, dword [0x1017bfd8]
add edx, 0xffffffff
mov dword [edi + 0x1a64], edx
jne 0x1004d318
mov edx, dword [esi + 0xa0]
test edx, edx
jne 0x1004d332
mov eax, dword [esi + 0x94]
cmp dword [eax + 0x34], edx
jle 0x1004d3b3
mov eax, dword [eax + 0x3c]
mov edx, dword [eax]
jmp 0x1004d32a
test edx, edx
jle 0x1004d3b3
mov eax, dword [edi + 0x1a6c]
mov edx, dword [eax + edx*4 - 4]
test edx, edx
je 0x1004d3b3
cmp dword [edx + 0x38], 0
je 0x1004d3b3
movss xmm0, dword [edx + 0x44]
xorps xmm1, xmm1
comiss xmm0, xmm1
jbe 0x1004d3b3
mov eax, dword [esi + 0x19e4]
mov dword [esi + 0x18fc], edx
movss xmm0, dword [edx + 0x10]
mulss xmm0, dword [esi + 0x98]
mulss xmm0, dword [edx + 0x44]
maxss xmm0, dword [0x10145040]
movss dword [esi + 0x1904], xmm0
test eax, eax
je 0x1004d381
mulss xmm0, dword [eax + 0x26c]
jmp 0x1004d384
xorps xmm0, xmm0
movss dword [esi + 0x1900], xmm0
mov eax, dword [edx + 0x38]
pop edi
mov ecx, dword [eax + 0x2c]
mov eax, dword [eax + 0x30]
mov dword [esi + 0x1908], ecx
mov dword [esi + 0x190c], eax
mov dword [esi + 0x1910], edx
movss dword [esi + 0x1914], xmm0
pop esi
pop ecx
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3

Function at 0x1004d3c0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ecx
mov eax, dword [0x1017bfd8]
push esi
mov esi, 1
nop
mov ecx, dword [eax + 0x1a4c]
test ecx, ecx
jle 0x1004d413
lea edx, [ecx + ecx*4]
mov ecx, dword [eax + 0x1a54]
movups xmm0, xmmword [ecx + edx*4 - 0x10]
lea edx, [ecx + edx*4]
mov ecx, dword [edx - 0x14]
add ecx, ecx
movups xmmword [eax + ecx*8 + 0x15ac], xmm0
mov ecx, dword [eax + 0x1a4c]
test ecx, ecx
jle 0x1004d413
dec ecx
dec esi
mov dword [eax + 0x1a4c], ecx
test esi, esi
jg 0x1004d3d0
pop esi
mov esp, ebp
pop ebp
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3

Function at 0x1004d420
Capabilities:
Terminate process

Disassembly:
mov edx, dword [0x1017bfd8]
push ebx
push esi
push edi
mov ebx, ecx
nop dword [eax + eax]
mov eax, dword [edx + 0x1a58]
test eax, eax
jle 0x1004d4ae
mov esi, dword [edx + 0x1a60]
lea ecx, [eax + eax*2]
mov eax, dword [esi + ecx*4 - 0xc]
cmp eax, 0x16
ja 0x1004d4ae
lea eax, [eax + eax*2]
cmp dword [eax*4 + 0x10139f50], 4
mov edi, dword [eax*4 + 0x10139f58]
jne 0x1004d494
mov eax, dword [eax*4 + 0x10139f54]
cmp eax, 1
jne 0x1004d479
mov eax, dword [esi + ecx*4 - 8]
mov dword [edi + edx + 0x1500], eax
jmp 0x1004d494
cmp eax, 2
jne 0x1004d494
mov eax, dword [esi + ecx*4 - 8]
mov dword [edi + edx + 0x1500], eax
mov eax, dword [esi + ecx*4 - 4]
mov dword [edi + edx + 0x1504], eax
mov eax, dword [edx + 0x1a58]
test eax, eax
jle 0x1004d4ae
dec eax
dec ebx
mov dword [edx + 0x1a58], eax
test ebx, ebx
jg 0x1004d430
pop edi
pop esi
pop ebx
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x1004d4e0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push esi
mov esi, dword [ebp + 8]
push edi
test esi, esi
je 0x1004d507
test dword [ecx + 0xac], esi
je 0x1004d5a7
lea eax, [esi - 1]
test esi, eax
je 0x1004d507
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
and dword [ecx + 0xac], 0xfffffff1
mov dword [ecx + 0xb8], 0x7f7fffff
mov dword [ecx + 0xbc], 0x7f7fffff
cvttss2si eax, dword [edx]
movss xmm2, dword [ecx + 0xc]
movss xmm3, dword [ecx + 0x10]
movd xmm0, eax
cvttss2si eax, dword [edx + 4]
cvtdq2ps xmm0, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [ecx + 0xc], xmm0
subss xmm0, xmm2
movss dword [ecx + 0x10], xmm1
subss xmm1, xmm3
addss xmm0, dword [ecx + 0xc8]
addss xmm1, dword [ecx + 0xcc]
movss dword [ecx + 0xc8], xmm0
movss dword [ecx + 0xcc], xmm1
movss xmm1, dword [ecx + 0x10]
movss xmm0, dword [ecx + 0xc]
subss xmm1, xmm3
subss xmm0, xmm2
addss xmm1, dword [ecx + 0xe4]
addss xmm0, dword [ecx + 0xe0]
movss dword [ecx + 0xe4], xmm1
movss dword [ecx + 0xe0], xmm0
pop edi
pop esi
pop ebp
ret

Function at 0x1004d5d0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push esi
push edi
mov edi, dword [ebp + 8]
test edi, edi
je 0x1004d5f7
test dword [ecx + 0xb0], edi
je 0x1004d671
lea eax, [edi - 1]
test edi, eax
je 0x1004d5f7
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
and dword [ecx + 0xb0], 0xfffffff1
xorps xmm1, xmm1
movss xmm0, dword [edx]
comiss xmm0, xmm1
jbe 0x1004d626
mov dword [ecx + 0x90], 0
cvttss2si eax, dword [edx]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ecx + 0x1c], xmm0
jmp 0x1004d637
mov dword [ecx + 0x90], 2
mov byte [ecx + 0x98], 0
movss xmm0, dword [edx + 4]
comiss xmm0, xmm1
jbe 0x1004d660
mov dword [ecx + 0x94], 0
cvttss2si eax, dword [edx + 4]
pop edi
pop esi
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ecx + 0x20], xmm0
pop ebp
ret
mov dword [ecx + 0x94], 2
mov byte [ecx + 0x98], 0
pop edi
pop esi
pop ebp
ret

Function at 0x1004d6e0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ecx
mov eax, dword [0x1017bfd8]
push esi
push edi
mov esi, dword [eax + 0x19e4]
add esi, 0x1c0
mov edi, dword [esi]
test edi, edi
jg 0x1004d705
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov eax, dword [esi + 8]
xor edx, edx
push ebx
push dword [eax + edi*4 - 4]
call fcn.100421e0
mov ebx, dword [esi + 4]
add esp, 4
mov dword [ebp - 4], eax
cmp edi, ebx
jne 0x1004d745
lea ecx, [edi + 1]
test ebx, ebx
je 0x1004d733
mov eax, ebx
cdq
sub eax, edx
sar eax, 1
add eax, ebx
jmp 0x1004d738
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.10053900
mov ecx, dword [esi]
mov eax, dword [esi + 8]
mov edx, dword [ebp - 4]
pop ebx
pop edi
mov dword [eax + ecx*4], edx
inc dword [esi]
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x1004d760
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, dword [0x1017bfd8]
push ebx
push esi
push edi
mov eax, dword [ecx + 0x19e4]
mov dword [ebp - 4], ecx
mov byte [eax + 0x7c], 1
mov edi, dword [ecx + 0x19e4]
mov eax, dword [edi + 0x198]
lea ecx, [edi + 0x198]
inc eax
push eax
call fcn.10053430
mov eax, dword [edi + 0x198]
test eax, eax
jg 0x1004d7a5
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov edx, dword [edi + 0x1a0]
lea esi, [eax + eax*2]
mov eax, dword [edi + 0xc8]
add esi, esi
mov ecx, dword [edi + 0xcc]
mov dword [edx + esi*8 - 0x2c], ecx
mov dword [edx + esi*8 - 0x30], eax
mov eax, dword [edi + 0xe0]
mov ecx, dword [edi + 0xe4]
mov dword [edx + esi*8 - 0x24], ecx
mov dword [edx + esi*8 - 0x28], eax
mov eax, dword [edi + 0x1b0]
mov dword [edx + esi*8 - 0x20], eax
mov eax, dword [edi + 0x1b4]
mov dword [edx + esi*8 - 0x1c], eax
mov eax, dword [edi + 0xe8]
mov ecx, dword [edi + 0xec]
mov dword [edx + esi*8 - 0x14], ecx
mov ecx, dword [ebp - 4]
mov dword [edx + esi*8 - 0x18], eax
mov eax, dword [edi + 0xf0]
mov dword [edx + esi*8 - 0x10], eax
mov eax, dword [edi + 0x100]
mov dword [edx + esi*8 - 0xc], eax
mov eax, dword [ecx + 0x1a0c]
mov dword [edx + esi*8 - 8], eax
mov al, byte [ecx + 0x1a18]
mov byte [edx + esi*8 - 4], al
mov byte [edx + esi*8 - 3], 1
movss xmm0, dword [edi + 0xc8]
subss xmm0, dword [edi + 0xc]
mov ecx, dword [edi + 0xcc]
mov dword [edi + 0xe4], ecx
mov dword [edi + 0xe8], 0
mov dword [edi + 0xec], 0
subss xmm0, dword [edi + 0x1b8]
movss dword [edi + 0x1b4], xmm0
movss xmm0, dword [edi + 0xcc]
subss xmm0, dword [0x101452c0]
mov eax, dword [edi + 0x1b4]
mov dword [edi + 0x1b0], eax
mov eax, dword [edi + 0xc8]
mov dword [edi + 0xe0], eax
movss dword [edi + 0x100], xmm0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x1004d8b0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
mov edi, dword [0x1017bfd8]
mov eax, dword [edi + 0x19e4]
mov byte [eax + 0x7c], 1
mov esi, dword [edi + 0x19e4]
mov edx, dword [esi + 0x198]
test edx, edx
jle 0x1004da46
mov ecx, dword [esi + 0x1a0]
lea ebx, [edx + edx*2]
movss xmm2, dword [esi + 0xe0]
add ebx, ebx
movss xmm1, dword [esi + 0xe4]
mov dword [ebp - 4], ecx
movaps xmm4, xmm1
movss xmm6, dword [ecx + ebx*8 - 0x2c]
movss xmm5, dword [ecx + ebx*8 - 0x30]
maxss xmm4, xmm6
movss dword [esi + 0xc8], xmm5
movaps xmm3, xmm5
movss dword [esi + 0xcc], xmm6
maxss xmm3, xmm2
movss xmm0, dword [ecx + ebx*8 - 0x24]
maxss xmm2, dword [ecx + ebx*8 - 0x28]
maxss xmm0, xmm1
movss dword [ebp - 0x1c], xmm5
movss dword [ebp - 0x18], xmm6
movss dword [ebp - 0x14], xmm3
movss dword [ebp - 0x10], xmm4
movss dword [esi + 0xe0], xmm2
movss dword [esi + 0xe4], xmm0
movaps xmm0, xmm6
mov eax, dword [ecx + ebx*8 - 0x20]
subss xmm0, dword [0x101452c0]
mov dword [esi + 0x1b0], eax
mov eax, dword [ecx + ebx*8 - 0x1c]
mov dword [esi + 0x1b4], eax
mov eax, dword [ecx + ebx*8 - 0x18]
mov ecx, dword [ecx + ebx*8 - 0x14]
mov dword [esi + 0xec], ecx
mov ecx, dword [ebp - 4]
mov dword [esi + 0xe8], eax
mov eax, dword [ecx + ebx*8 - 0x10]
mov dword [esi + 0xf0], eax
movss dword [esi + 0x100], xmm0
cmp byte [ecx + ebx*8 - 3], 0
je 0x1004d9f3
movss xmm0, dword [esi + 0xfc]
subss xmm3, xmm5
maxss xmm0, dword [ecx + ebx*8 - 0x10]
subss xmm4, xmm6
xorps xmm1, xmm1
lea ecx, [ebp - 0xc]
movss dword [ebp - 0xc], xmm3
movss dword [esi + 0xf0], xmm0
movss dword [ebp - 8], xmm4
call fcn.10044ce0
push 0
xor edx, edx
lea ecx, [ebp - 0x1c]
call fcn.10044e10
mov edx, dword [esi + 0x198]
add esp, 4
mov ecx, dword [ebp - 4]
mov eax, dword [edi + 0x1a04]
cmp dword [ecx + ebx*8 - 8], eax
je 0x1004da0b
cmp dword [edi + 0x1a0c], eax
jne 0x1004da0b
test eax, eax
jne 0x1004da21
cmp byte [ecx + ebx*8 - 4], 0
jne 0x1004da27
cmp byte [edi + 0x1a18], 0
je 0x1004da27
mov eax, dword [edi + 0x1a08]
mov dword [esi + 0x10c], eax
movups xmm0, xmmword [ebp - 0x1c]
movups xmmword [esi + 0x114], xmm0
test edx, edx
jle 0x1004da46
lea eax, [edx - 1]
pop edi
mov dword [esi + 0x198], eax
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3