joyce8/EMBER2024-capa huggingface dataset:
Function at 0x619622
Capabilities:
Hash data with md5

Disassembly:
idiv dword [edi + ebp*2]
call 0x602874
jbe 0x60286b
jmp 0x602892

Function at 0x626c10
Capabilities:
Encode data using xor

Disassembly:
pushal
xchg bh, dl
xchg ah, al
popal
pushfd
mov dword [esp], eax
push word [esp + 2]
mov word [esp + 1], di
mov dword [esp], eax
pop word [esp]
je 0x626c42
add ah, byte [esi - 0x77]
jl 0x626c47
add dword [ecx - 0x7099dbfc], ecx
add al, 0x24
push word [esp + 3]
and al, 3
lea esp, [esp + 2]
lea esp, [esp + 4]
lea esp, [esp + 4]
push 0x1e55a
call fcn.00613799
jno 0x626c2e
push ebx
retf
out 0x74, al
adc ebp, esi
je 0x626c5d
out dx, al
pop eax
add cl, 0x72
jo 0x626c48
pop esp
xchg ebp, eax
rcl byte fs:[0x83701181]
xor edi, ebx
loopne 0x626c1c
pop dword [esp + 0x1a]
mov word [esp + 0x1f], dx
pop word [esp + 0x19]
pushal
lea esp, [esp + 0x40]
xor ecx, ecx
cmp dword [esp + 8], ecx
jbe 0x626bf7
mov edx, dword [esp + 4]
movzx edx, byte [ecx + edx]
rol eax, 7
xor eax, edx
inc ecx
cmp ecx, dword [esp + 8]
jb 0x626c7e
jae 0x626bf7
pushal
cmc
or al, 0xff
dec ebx
wait
or eax, 0xa117e49d
loope 0x626d1a
ljmp 0x4fdf:0x43cc7c8d
mov edi, 0x4bdb5d7e
frstor dword cs:[esp - 0xd]
arpl word [esi], ax
cmc
inc esi
scasb al, byte es:[edi]
and byte [esi - 0x3a1bdf2f], dh
dec edx
fdivr dword [edi + 0x488fd4a]
lcall 0x62ec, 0x61ca0cfd
add eax, 0xbe2c36f4
sub al, 0x4b
mov byte [edi], 0x61
pushal
pop es
xor al, 0x7e
out dx, al
jl 0x626d6b
div byte [edx]
dec esi
fisttp qword [ebp + 0x14]
out 0x51, eax
fisttp qword [ecx - 0x27]
mov eax, 0x66fbf94b
push edi
mov dword [esp], eax
je 0x626d91
add ah, byte [esi - 1]
je 0x626d96
add esp, dword [esi - 1]
je 0x626d9b
pop es
invalid
inc esi
xchg edx, eax
xchg ebp, eax
xchg edi, eax
loopne 0x626d62
invalid
Function at 0x10001450
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1001f42d
mov eax, dword fs:[0]
push eax
push ecx
push esi
mov eax, dword [0x1002b00c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
cmp dword [0x1002b914], 0x2c
jl 0x100014ab
push 0x1002b918
call fcn.1000cf90
mov ecx, dword [0x1002b910]
add esp, 4
test ecx, ecx
je 0x1000149d
mov eax, dword [ecx]
mov dword [0x1002b910], eax
mov dword [0x1002b918], 1
test ecx, ecx
jne 0x100014c2
push 0x2c
push 0
call dword [0x1002106c]
push eax
call dword [0x10021068]
mov ecx, eax
test ecx, ecx
je 0x100014e2
mov dword [ebp - 0x10], ecx
push esi
mov dword [ebp - 4], 0
call fcn.10001380
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
ret
push 0xffffffffffffffff
call fcn.10012757
int3

Function at 0x10001a60
Capabilities:
Terminate process

Disassembly:
cmp dword [0x1002b914], 0x1c
jl 0x10001a95
push 0x1002b918
call fcn.1000cf90
mov ecx, dword [0x1002b910]
add esp, 4
test ecx, ecx
je 0x10001a87
mov eax, dword [ecx]
mov dword [0x1002b910], eax
mov dword [0x1002b918], 1
test ecx, ecx
jne 0x10001aac
push 0x1c
push 0
call dword [0x1002106c]
push eax
call dword [0x10021068]
mov ecx, eax
test ecx, ecx
je 0x10001adf
mov dword [ecx + 4], 0
mov eax, ecx
mov dword [ecx + 8], 0
mov dword [ecx], vtable.CVolMem.0
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x18], 0x40
ret
push 0xffffffffffffffff
call fcn.10012757
int3

Function at 0x10001af0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1001f4b5
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x1002b00c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
cmp dword [0x1002b914], 0x1c
jl 0x10001b4c
push 0x1002b918
call fcn.1000cf90
mov esi, dword [0x1002b910]
add esp, 4
test esi, esi
je 0x10001b3e
mov eax, dword [esi]
mov dword [0x1002b910], eax
mov dword [0x1002b918], 1
test esi, esi
jne 0x10001b63
push 0x1c
push 0
call dword [0x1002106c]
push eax
call dword [0x10021068]
mov esi, eax
test esi, esi
je 0x10001bbc
mov dword [ebp - 0x10], esi
mov dword [ebp - 4], 0
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x18], 0x40
mov byte [ebp - 4], 1
mov ecx, esi
push edi
mov dword [esi], vtable.CVolMem.0
call fcn.10001c70
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push 0xffffffffffffffff
call fcn.10012757
int3
Function at 0x10002150
Capabilities:
Terminate process

Disassembly:
cmp dword [0x1002b914], 0xc
jl 0x10002185
push 0x1002b918
call fcn.1000cf90
mov ecx, dword [0x1002b910]
add esp, 4
test ecx, ecx
je 0x10002177
mov eax, dword [ecx]
mov dword [0x1002b910], eax
mov dword [0x1002b918], 1
test ecx, ecx
jne 0x1000219c
push 0xc
push 0
call dword [0x1002106c]
push eax
call dword [0x10021068]
mov ecx, eax
test ecx, ecx
je 0x100021b3
mov dword [ecx], vtable.CVolObject.0
mov eax, ecx
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
ret
push 0xffffffffffffffff
call fcn.10012757
int3

Function at 0x100021c0
Capabilities:
Terminate process

Disassembly:
cmp dword [0x1002b914], 0xc
push esi
mov esi, ecx
jl 0x100021f8
push 0x1002b918
call fcn.1000cf90
mov ecx, dword [0x1002b910]
add esp, 4
test ecx, ecx
je 0x100021ea
mov eax, dword [ecx]
mov dword [0x1002b910], eax
mov dword [0x1002b918], 1
test ecx, ecx
jne 0x1000220f
push 0xc
push 0
call dword [0x1002106c]
push eax
call dword [0x10021068]
mov ecx, eax
test ecx, ecx
je 0x10002233
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
mov dword [ecx], vtable.CVolObject.0
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov eax, dword [esi + 8]
mov dword [ecx + 8], eax
mov eax, ecx
pop esi
ret
push 0xffffffffffffffff
call fcn.10012757
int3

Function at 0x100026a0
Capabilities:
Terminate process

Disassembly:
cmp dword [0x1002b914], 0xc
jl 0x100026d5
push 0x1002b918
call fcn.1000cf90
mov ecx, dword [0x1002b910]
add esp, 4
test ecx, ecx
je 0x100026c7
mov eax, dword [ecx]
mov dword [0x1002b910], eax
mov dword [0x1002b918], 1
test ecx, ecx
jne 0x100026ec
push 0xc
push 0
call dword [0x1002106c]
push eax
call dword [0x10021068]
mov ecx, eax
test ecx, ecx
je 0x10002709
mov dword [ecx + 4], 0
mov eax, ecx
mov dword [ecx + 8], 0
mov dword [0x1002b938], ecx
mov dword [ecx], vtable.rg_hsh_jb::rg_chxl.0
ret
push 0xffffffffffffffff
call fcn.10012757
int3

Function at 0x10002830
Capabilities:
Terminate process

Disassembly:
cmp dword [0x1002b914], 0xc
jl 0x10002865
push 0x1002b918
call fcn.1000cf90
mov ecx, dword [0x1002b910]
add esp, 4
test ecx, ecx
je 0x10002857
mov eax, dword [ecx]
mov dword [0x1002b910], eax
mov dword [0x1002b918], 1
test ecx, ecx
jne 0x1000287c
push 0xc
push 0
call dword [0x1002106c]
push eax
call dword [0x10021068]
mov ecx, eax
test ecx, ecx
je 0x10002899
mov dword [ecx + 4], 0
mov eax, ecx
mov dword [ecx + 8], 0
mov dword [0x1002b938], ecx
mov dword [ecx], vtable.rg_hsh_jb::rg_dtkchxl.0
ret
push 0xffffffffffffffff
call fcn.10012757
int3

Function at 0x10002be0
Capabilities:
Terminate process

Disassembly:
cmp dword [0x1002b914], 0xc
jl 0x10002c15
push 0x1002b918
call fcn.1000cf90
mov ecx, dword [0x1002b910]
add esp, 4
test ecx, ecx
je 0x10002c07
mov eax, dword [ecx]
mov dword [0x1002b910], eax
mov dword [0x1002b918], 1
test ecx, ecx
jne 0x10002c2c
push 0xc
push 0
call dword [0x1002106c]
push eax
call dword [0x10021068]
mov ecx, eax
test ecx, ecx
je 0x10002c43
mov dword [ecx + 4], 0
mov eax, ecx
mov dword [ecx + 8], 0
mov dword [ecx], vtable.rg_hsh_chx::rg_l_jtzx.0
ret
push 0xffffffffffffffff
call fcn.10012757
int3
Function at 0x10002d80
Capabilities:
Terminate process

Disassembly:
cmp dword [0x1002b914], 0xc
push esi
mov esi, ecx
jl 0x10002db8
push 0x1002b918
call fcn.1000cf90
mov ecx, dword [0x1002b910]
add esp, 4
test ecx, ecx
je 0x10002daa
mov eax, dword [ecx]
mov dword [0x1002b910], eax
mov dword [0x1002b918], 1
test ecx, ecx
jne 0x10002dcf
push 0xc
push 0
call dword [0x1002106c]
push eax
call dword [0x10021068]
mov ecx, eax
test ecx, ecx
je 0x10002df3
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
mov dword [ecx], vtable.rg_hsh_chx::rg_l_jtzx.0
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov eax, dword [esi + 8]
mov dword [ecx + 8], eax
mov eax, ecx
pop esi
ret
push 0xffffffffffffffff
call fcn.10012757
int3

Function at 0x10003050
Capabilities:
Terminate process

Disassembly:
cmp dword [0x1002b914], 0xc
jl 0x10003085
push 0x1002b918
call fcn.1000cf90
mov ecx, dword [0x1002b910]
add esp, 4
test ecx, ecx
je 0x10003077
mov eax, dword [ecx]
mov dword [0x1002b910], eax
mov dword [0x1002b918], 1
test ecx, ecx
jne 0x1000309c
push 0xc
push 0
call dword [0x1002106c]
push eax
call dword [0x10021068]
mov ecx, eax
test ecx, ecx
je 0x100030b9
mov dword [ecx + 4], 0
mov eax, ecx
mov dword [ecx + 8], 0
mov dword [0x1002b938], ecx
mov dword [ecx], vtable.rg_hsh_chx::rg_qdl.0
ret
push 0xffffffffffffffff
call fcn.10012757
int3

Function at 0x10003200
Capabilities:
Terminate process

Disassembly:
cmp dword [0x1002b914], 0xc
push esi
mov esi, ecx
jl 0x10003238
push 0x1002b918
call fcn.1000cf90
mov ecx, dword [0x1002b910]
add esp, 4
test ecx, ecx
je 0x1000322a
mov eax, dword [ecx]
mov dword [0x1002b910], eax
mov dword [0x1002b918], 1
test ecx, ecx
jne 0x1000324f
push 0xc
push 0
call dword [0x1002106c]
push eax
call dword [0x10021068]
mov ecx, eax
test ecx, ecx
je 0x10003279
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
mov dword [0x1002b938], ecx
mov dword [ecx], vtable.rg_hsh_chx::rg_qdl.0
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov eax, dword [esi + 8]
mov dword [ecx + 8], eax
mov eax, ecx
pop esi
ret
push 0xffffffffffffffff
call fcn.10012757
int3

Function at 0x10005560
Capabilities:
Terminate process

Disassembly:
cmp dword [0x1002b914], 0x2c
jl 0x10005595
push 0x1002b918
call fcn.1000cf90
mov ecx, dword [0x1002b910]
add esp, 4
test ecx, ecx
je 0x10005587
mov eax, dword [ecx]
mov dword [0x1002b910], eax
mov dword [0x1002b918], 1
test ecx, ecx
jne 0x100055ac
push 0x2c
push 0
call dword [0x1002106c]
push eax
call dword [0x10021068]
mov ecx, eax
test ecx, ecx
je 0x10005602
mov dword [ecx + 0x28], 0x40
mov eax, ecx
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x18], 0
mov dword [ecx + 0x10], vtable.CVolMem.0
mov dword [ecx + 0x1c], 0
mov dword [ecx + 0x24], 0
mov dword [ecx + 0x20], 0
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x28], 0xfe
mov dword [ecx], vtable.CWConstString.0
ret
push 0xffffffffffffffff
call fcn.10012757
int3
Function at 0x10005610
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1001f8e5
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x1002b00c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
cmp dword [0x1002b914], 0x2c
jl 0x1000566d
push 0x1002b918
call fcn.1000cf90
mov esi, dword [0x1002b910]
add esp, 4
test esi, esi
je 0x1000565f
mov eax, dword [esi]
mov dword [0x1002b910], eax
mov dword [0x1002b918], 1
test esi, esi
jne 0x10005688
push 0x2c
push 0
call dword [0x1002106c]
push eax
call dword [0x10021068]
mov esi, eax
test esi, esi
je 0x1000572c
mov dword [ebp - 0x10], esi
mov dword [ebp - 4], 0
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0
mov dword [esi + 0x10], vtable.CVolMem.0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x24], 0
mov dword [esi + 0x20], 0
mov dword [esi + 0x28], 0x40
mov dword [esi + 0xc], 0
mov dword [esi + 0x28], 0xfe
mov byte [ebp - 4], 1
mov dword [esi], vtable.CWConstString.0
mov eax, dword [ebx + 4]
mov dword [esi + 4], eax
mov eax, dword [ebx + 8]
mov dword [esi + 8], eax
mov eax, dword [ebx + 0xc]
mov dword [esi + 0xc], eax
mov eax, dword [fcn.10001110]
cmp eax, fcn.10001110
je 0x1000570c
lea ecx, [esi + 0x10]
call eax
lea eax, [ebx + 0x10]
push eax
lea ecx, [esi + 0x10]
call fcn.10001c70
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0xffffffffffffffff
call fcn.10012757
int3

Function at 0x10005bf0
Capabilities:
Terminate process

Disassembly:
cmp dword [0x1002b914], 0xc
jl 0x10005c25
push 0x1002b918
call fcn.1000cf90
mov ecx, dword [0x1002b910]
add esp, 4
test ecx, ecx
je 0x10005c17
mov eax, dword [ecx]
mov dword [0x1002b910], eax
mov dword [0x1002b918], 1
test ecx, ecx
jne 0x10005c3c
push 0xc
push 0
call dword [0x1002106c]
push eax
call dword [0x10021068]
mov ecx, eax
test ecx, ecx
je 0x10005c59
mov dword [ecx + 4], 0
mov eax, ecx
mov dword [ecx + 8], 0
mov dword [ecx], vtable.CVolUserApp.0
mov dword [0x1002b938], ecx
ret
push 0xffffffffffffffff
call fcn.10012757
int3

Function at 0x10005dd0
Capabilities:
Terminate process

Disassembly:
cmp dword [0x1002b914], 0xc
jl 0x10005e05
push 0x1002b918
call fcn.1000cf90
mov ecx, dword [0x1002b910]
add esp, 4
test ecx, ecx
je 0x10005df7
mov eax, dword [ecx]
mov dword [0x1002b910], eax
mov dword [0x1002b918], 1
test ecx, ecx
jne 0x10005e1c
push 0xc
push 0
call dword [0x1002106c]
push eax
call dword [0x10021068]
mov ecx, eax
test ecx, ecx
je 0x10005e33
mov dword [ecx + 4], 0
mov eax, ecx
mov dword [ecx + 8], 0
mov dword [ecx], vtable.rg_hsh_jb::rg_kzhdxl.0
ret
push 0xffffffffffffffff
call fcn.10012757
int3
Function at 0x10005f80
Capabilities:
Terminate process

Disassembly:
cmp dword [0x1002b914], 0x2c
jl 0x10005fb5
push 0x1002b918
call fcn.1000cf90
mov ecx, dword [0x1002b910]
add esp, 4
test ecx, ecx
je 0x10005fa7
mov eax, dword [ecx]
mov dword [0x1002b910], eax
mov dword [0x1002b918], 1
test ecx, ecx
jne 0x10005fcc
push 0x2c
push 0
call dword [0x1002106c]
push eax
call dword [0x10021068]
mov ecx, eax
test ecx, ecx
je 0x10006022
mov dword [ecx + 0x28], 0x40
mov eax, ecx
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
mov dword [ecx], vtable.rg_hsh_jb::rg_wbshzl.0
mov dword [ecx + 0xc], vtable.CMStringArray.0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x18], 0
mov dword [ecx + 0x10], vtable.CVolMem.0
mov dword [ecx + 0x1c], 0
mov dword [ecx + 0x24], 0
mov dword [ecx + 0x20], 0
mov dword [ecx + 0x28], 0x80
ret
push 0xffffffffffffffff
call fcn.10012757
int3

Function at 0x10006210
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1001f42d
mov eax, dword fs:[0]
push eax
push ecx
push esi
mov eax, dword [0x1002b00c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
cmp dword [0x1002b914], 0x2c
jl 0x1000626b
push 0x1002b918
call fcn.1000cf90
mov ecx, dword [0x1002b910]
add esp, 4
test ecx, ecx
je 0x1000625d
mov eax, dword [ecx]
mov dword [0x1002b910], eax
mov dword [0x1002b918], 1
test ecx, ecx
jne 0x10006282
push 0x2c
push 0
call dword [0x1002106c]
push eax
call dword [0x10021068]
mov ecx, eax
test ecx, ecx
je 0x100062a2
mov dword [ebp - 0x10], ecx
push esi
mov dword [ebp - 4], 0
call fcn.100028b0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
ret
push 0xffffffffffffffff
call fcn.10012757
int3

Function at 0x100067a0
Capabilities:
Terminate process

Disassembly:
cmp dword [0x1002b914], 0xc
push esi
mov esi, ecx
jl 0x100067d8
push 0x1002b918
call fcn.1000cf90
mov ecx, dword [0x1002b910]
add esp, 4
test ecx, ecx
je 0x100067ca
mov eax, dword [ecx]
mov dword [0x1002b910], eax
mov dword [0x1002b918], 1
test ecx, ecx
jne 0x100067ef
push 0xc
push 0
call dword [0x1002106c]
push eax
call dword [0x10021068]
mov ecx, eax
test ecx, ecx
je 0x10006813
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
mov dword [ecx], vtable.rg_hsh_jb::rg_kzhdxl.0
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov eax, dword [esi + 8]
mov dword [ecx + 8], eax
mov eax, ecx
pop esi
ret
push 0xffffffffffffffff
call fcn.10012757
int3

Function at 0x10006a40
Capabilities:
Terminate process

Disassembly:
cmp dword [0x1002b914], 0x10
jl 0x10006a75
push 0x1002b918
call fcn.1000cf90
mov ecx, dword [0x1002b910]
add esp, 4
test ecx, ecx
je 0x10006a67
mov eax, dword [ecx]
mov dword [0x1002b910], eax
mov dword [0x1002b918], 1
test ecx, ecx
jne 0x10006a8c
push 0x10
push 0
call dword [0x1002106c]
push eax
call dword [0x10021068]
mov ecx, eax
test ecx, ecx
je 0x10006aaa
mov dword [ecx + 4], 0
mov eax, ecx
mov dword [ecx + 8], 0
mov dword [ecx], vtable.rg_hsh_jb::rg_bzhshl.0
mov dword [ecx + 0xc], 0
ret
push 0xffffffffffffffff
call fcn.10012757
int3
Function at 0x10006b90
Capabilities:
Terminate process

Disassembly:
cmp dword [0x1002b914], 0x10
push esi
mov esi, ecx
jl 0x10006bc8
push 0x1002b918
call fcn.1000cf90
mov ecx, dword [0x1002b910]
add esp, 4
test ecx, ecx
je 0x10006bba
mov eax, dword [ecx]
mov dword [0x1002b910], eax
mov dword [0x1002b918], 1
test ecx, ecx
jne 0x10006bdf
push 0x10
push 0
call dword [0x1002106c]
push eax
call dword [0x10021068]
mov ecx, eax
test ecx, ecx
je 0x10006c10
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
mov dword [ecx + 0xc], 0
mov dword [ecx], vtable.rg_hsh_jb::rg_bzhshl.0
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov eax, dword [esi + 8]
mov dword [ecx + 8], eax
mov eax, dword [esi + 0xc]
mov dword [ecx + 0xc], eax
mov eax, ecx
pop esi
ret
push 0xffffffffffffffff
call fcn.10012757
int3

Function at 0x10006ee0
Capabilities:
Terminate process

Disassembly:
cmp dword [0x1002b914], 0x18
jl 0x10006f15
push 0x1002b918
call fcn.1000cf90
mov ecx, dword [0x1002b910]
add esp, 4
test ecx, ecx
je 0x10006f07
mov eax, dword [ecx]
mov dword [0x1002b910], eax
mov dword [0x1002b918], 1
test ecx, ecx
jne 0x10006f2c
push 0x18
push 0
call dword [0x1002106c]
push eax
call dword [0x10021068]
mov ecx, eax
test ecx, ecx
je 0x10006f4b
xorps xmm0, xmm0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
mov eax, ecx
mov dword [ecx], vtable.rg_hsh_jb::rg_xshl.0
movsd qword [ecx + 0x10], xmm0
ret
push 0xffffffffffffffff
call fcn.10012757
int3

Function at 0x10007060
Capabilities:
Terminate process

Disassembly:
cmp dword [0x1002b914], 0x18
push esi
mov esi, ecx
jl 0x10007098
push 0x1002b918
call fcn.1000cf90
mov ecx, dword [0x1002b910]
add esp, 4
test ecx, ecx
je 0x1000708a
mov eax, dword [ecx]
mov dword [0x1002b910], eax
mov dword [0x1002b918], 1
test ecx, ecx
jne 0x100070af
push 0x18
push 0
call dword [0x1002106c]
push eax
call dword [0x10021068]
mov ecx, eax
test ecx, ecx
je 0x100070e5
mov dword [ecx + 4], 0
xorps xmm0, xmm0
mov dword [ecx + 8], 0
movsd qword [ecx + 0x10], xmm0
mov dword [ecx], vtable.rg_hsh_jb::rg_xshl.0
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov eax, dword [esi + 8]
mov dword [ecx + 8], eax
mov eax, ecx
movsd xmm0, qword [esi + 0x10]
movsd qword [ecx + 0x10], xmm0
pop esi
ret
push 0xffffffffffffffff
call fcn.10012757
int3

Function at 0x100073f0
Capabilities:
Terminate process

Disassembly:
cmp dword [0x1002b914], 0x10
jl 0x10007425
push 0x1002b918
call fcn.1000cf90
mov ecx, dword [0x1002b910]
add esp, 4
test ecx, ecx
je 0x10007417
mov eax, dword [ecx]
mov dword [0x1002b910], eax
mov dword [0x1002b918], 1
test ecx, ecx
jne 0x1000743c
push 0x10
push 0
call dword [0x1002106c]
push eax
call dword [0x10021068]
mov ecx, eax
test ecx, ecx
je 0x1000745a
mov dword [ecx + 4], 0
mov eax, ecx
mov dword [ecx + 8], 0
mov dword [ecx], vtable.rg_hsh_jb::rg_ljxl.0
mov dword [ecx + 0xc], 0
ret
push 0xffffffffffffffff
call fcn.10012757
int3
Function at 0x10007540
Capabilities:
Terminate process

Disassembly:
cmp dword [0x1002b914], 0x10
push esi
mov esi, ecx
jl 0x10007578
push 0x1002b918
call fcn.1000cf90
mov ecx, dword [0x1002b910]
add esp, 4
test ecx, ecx
je 0x1000756a
mov eax, dword [ecx]
mov dword [0x1002b910], eax
mov dword [0x1002b918], 1
test ecx, ecx
jne 0x1000758f
push 0x10
push 0
call dword [0x1002106c]
push eax
call dword [0x10021068]
mov ecx, eax
test ecx, ecx
je 0x100075c0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
mov dword [ecx + 0xc], 0
mov dword [ecx], vtable.rg_hsh_jb::rg_ljxl.0
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov eax, dword [esi + 8]
mov dword [ecx + 8], eax
mov eax, dword [esi + 0xc]
mov dword [ecx + 0xc], eax
mov eax, ecx
pop esi
ret
push 0xffffffffffffffff
call fcn.10012757
int3

Function at 0x10007800
Capabilities:
Terminate process

Disassembly:
cmp dword [0x1002b914], 0x18
jl 0x10007835
push 0x1002b918
call fcn.1000cf90
mov ecx, dword [0x1002b910]
add esp, 4
test ecx, ecx
je 0x10007827
mov eax, dword [ecx]
mov dword [0x1002b910], eax
mov dword [0x1002b918], 1
test ecx, ecx
jne 0x1000784c
push 0x18
push 0
call dword [0x1002106c]
push eax
call dword [0x10021068]
mov ecx, eax
test ecx, ecx
je 0x10007871
mov dword [ecx + 4], 0
mov eax, ecx
mov dword [ecx + 8], 0
mov dword [ecx], vtable.rg_hsh_jb::rg_chzhshl.0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
ret
push 0xffffffffffffffff
call fcn.10012757
int3

Function at 0x10007960
Capabilities:
Terminate process

Disassembly:
cmp dword [0x1002b914], 0x18
push esi
mov esi, ecx
jl 0x10007998
push 0x1002b918
call fcn.1000cf90
mov ecx, dword [0x1002b910]
add esp, 4
test ecx, ecx
je 0x1000798a
mov eax, dword [ecx]
mov dword [0x1002b910], eax
mov dword [0x1002b918], 1
test ecx, ecx
jne 0x100079af
push 0x18
push 0
call dword [0x1002106c]
push eax
call dword [0x10021068]
mov ecx, eax
test ecx, ecx
je 0x100079ed
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], vtable.rg_hsh_jb::rg_chzhshl.0
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov eax, dword [esi + 8]
mov dword [ecx + 8], eax
mov eax, dword [esi + 0x10]
mov dword [ecx + 0x10], eax
mov eax, dword [esi + 0x14]
mov dword [ecx + 0x14], eax
mov eax, ecx
pop esi
ret
push 0xffffffffffffffff
call fcn.10012757
int3

Function at 0x10007ca0
Capabilities:
Terminate process

Disassembly:
cmp dword [0x1002b914], 0x10
jl 0x10007cd5
push 0x1002b918
call fcn.1000cf90
mov ecx, dword [0x1002b910]
add esp, 4
test ecx, ecx
je 0x10007cc7
mov eax, dword [ecx]
mov dword [0x1002b910], eax
mov dword [0x1002b918], 1
test ecx, ecx
jne 0x10007cec
push 0x10
push 0
call dword [0x1002106c]
push eax
call dword [0x10021068]
mov ecx, eax
test ecx, ecx
je 0x10007d0a
mov dword [ecx + 4], 0
mov eax, ecx
mov dword [ecx + 8], 0
mov dword [ecx], vtable.rg_hsh_jb::rg_zhshl.0
mov dword [ecx + 0xc], 0
ret
push 0xffffffffffffffff
call fcn.10012757
int3