joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10225d90
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x54
push ebx
push esi
push edi
mov ecx, 0x104f66fc
call fcn.1015f0d9
mov eax, dword [0x104e7304]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x364]
add ecx, 1
mov edx, dword [ebp - 4]
mov dword [edx + 0x364], ecx
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x274]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.10225a50
add esp, 8
mov dword [ebp - 8], 0
jmp 0x10225de8
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 8]
cmp ecx, dword [eax + 0x150]
jge 0x10225e4f
mov eax, dword [ebp + 0xc]
add eax, 0x150
mov dword [ebp - 0x54], eax
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 8]
cmp edx, dword [ecx]
jl 0x10225e13
push 0
call dword [sym.imp.ucrtbased.dll_exit]
mov eax, dword [ebp - 0x54]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 8]
lea eax, [ecx + edx*4]
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0x50]
mov edx, dword [ecx]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
push eax
call fcn.10241d70
add esp, 4
movzx ecx, al
test ecx, ecx
je 0x10225e4d
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.10225d90
add esp, 8
jmp 0x10225ddf
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x10225e90
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x58
push ebx
push esi
push edi
mov ecx, 0x104f66fc
call fcn.1015f0d9
lea eax, [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
call fcn.1015e495
mov eax, dword [ebp + 0xc]
movzx ecx, byte [eax + 0x7a]
test ecx, ecx
je 0x10225f5f
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x150]
mov dword [ebp - 4], ecx
cmp dword [ebp - 4], 1
jle 0x10225ef4
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x158]
mov dword [ebp - 0x54], ecx
push 0x10233590
push 4
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 0x54]
push eax
call dword [sym.imp.ucrtbased.dll_qsort]
add esp, 0x10
mov dword [ebp - 8], 0
jmp 0x10225f06
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 4]
jge 0x10225f5f
mov eax, dword [ebp + 0xc]
add eax, 0x150
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 8]
cmp edx, dword [ecx]
jl 0x10225f2b
push 0
call dword [sym.imp.ucrtbased.dll_exit]
mov eax, dword [ebp - 0x58]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 8]
lea eax, [ecx + edx*4]
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0x50]
mov edx, dword [ecx]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
movzx ecx, byte [eax + 0x7a]
test ecx, ecx
je 0x10225f5d
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.10225e90
add esp, 8
jmp 0x10225efd
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x10230740
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
push ebx
push esi
push edi
mov ecx, 0x104f66fc
call fcn.1015f0d9
mov eax, dword [0x104e7304]
mov ecx, dword [eax + 0x198c]
mov dword [ebp - 4], ecx
cmp dword [ebp + 8], 0
je 0x1023077a
push 0
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 4]
call fcn.10160b5a
mov dword [ebp - 0x4c], eax
jmp 0x10230786
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x10c]
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x1023079a
push 0
call dword [sym.imp.ucrtbased.dll_exit]
mov eax, dword [ebp + 0xc]
push eax
call fcn.1015daa9
add esp, 4
movzx ecx, al
test ecx, ecx
je 0x102307ca
push 8
call fcn.1015c5a0
add esp, 4
movzx eax, al
test eax, eax
je 0x102307ca
mov eax, dword [ebp - 8]
push eax
call fcn.1015c0e1
add esp, 4
push 0x141
mov eax, dword [ebp - 8]
push eax
call fcn.1015ed19
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x10234d80
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x50
push ebx
push esi
push edi
mov ecx, 0x104f66fc
call fcn.1015f0d9
mov eax, dword [0x104e7304]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ecx + 0x198c]
mov byte [edx + 0x7c], 1
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax + 0x198c]
mov dword [ebp - 4], ecx
cmp dword [ebp + 8], 1
jge 0x10234dc2
push 0
call dword [sym.imp.ucrtbased.dll_exit]
movzx eax, byte [ebp + 0x10]
test eax, eax
je 0x10234dd3
mov dword [ebp - 0x50], 0
jmp 0x10234dda
mov dword [ebp - 0x50], 1
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 8], ecx
mov eax, dword [ebp - 4]
cmp dword [eax + 0x1bc], 0
je 0x10234e10
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1bc]
mov edx, dword [ecx + 0x10]
cmp edx, dword [ebp + 8]
jne 0x10234e10
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1bc]
mov edx, dword [ecx + 4]
cmp edx, dword [ebp - 8]
jne 0x10234e10
jmp 0x10234e3b
mov eax, dword [ebp - 4]
cmp dword [eax + 0x1bc], 0
je 0x10234e21
call fcn.1015d0db
cmp dword [ebp + 8], 1
je 0x10234e3b
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call fcn.1015ec33
add esp, 0xc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x102397f0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10417123
mov eax, dword fs:[0]
push eax
sub esp, 0xa4
push ebx
push esi
push edi
mov eax, dword [0x104e6584]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, 0x104f66fc
call fcn.1015f0d9
mov dword [ebp - 0x10], 0
jmp 0x10239837
mov eax, dword [ebp - 0x10]
add eax, 1
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x10]
cmp ecx, dword [eax + 0x260]
jge 0x102398d2
mov eax, dword [ebp + 8]
add eax, 0x260
mov dword [ebp - 0xa4], eax
mov ecx, dword [ebp - 0xa4]
mov edx, dword [ebp - 0x10]
cmp edx, dword [ecx]
jl 0x1023986c
push 0
call dword [sym.imp.ucrtbased.dll_exit]
imul eax, dword [ebp - 0x10], 0x38
mov ecx, dword [ebp - 0xa4]
add eax, dword [ecx + 8]
mov dword [ebp - 0x9c], eax
mov edx, dword [ebp - 0x9c]
mov eax, dword [edx]
cmp eax, dword [ebp + 0xc]
jne 0x102398cd
mov eax, dword [ebp + 8]
add eax, 0x260
mov dword [ebp - 0xa8], eax
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ebp - 0x10]
cmp edx, dword [ecx]
jl 0x102398af
push 0
call dword [sym.imp.ucrtbased.dll_exit]
imul eax, dword [ebp - 0x10], 0x38
mov ecx, dword [ebp - 0xa8]
add eax, dword [ecx + 8]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
jmp 0x102399ae
jmp 0x1023982e
mov eax, dword [ebp + 8]
add eax, 0x260
mov dword [ebp - 0xac], eax
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x18]
mov dword [edx + 4], 0
mov eax, dword [ebp - 0x18]
mov dword [eax], 0
mov ecx, dword [ebp - 0x18]
mov dword [ecx + 8], 0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x98]
call fcn.1015d338
mov dword [ebp - 4], 0xffffffff
lea edx, [ebp - 0x98]
mov dword [ebp - 0xb0], edx
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0xb0]
push eax
mov ecx, dword [ebp - 0xac]
call fcn.1015d42d
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 2
mov edx, dword [ebp - 0x1c]
cmp dword [edx + 8], 0
je 0x1023996d
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 8]
push ecx
call fcn.1015ea80
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 8]
add eax, 0x260
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
cmp dword [ecx], 0
jg 0x1023998f
push 0
call dword [sym.imp.ucrtbased.dll_exit]
mov edx, dword [ebp - 0x20]
mov eax, dword [edx]
sub eax, 1
imul ecx, eax, 0x38
mov edx, dword [ebp - 0x20]
add ecx, dword [edx + 8]
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp + 0xc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x10239cd0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x50
push ebx
push esi
push edi
mov ecx, 0x104f66fc
call fcn.1015f0d9
mov eax, dword [0x104e7304]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1958]
sub ecx, 1
mov dword [ebp - 8], ecx
jmp 0x10239d05
mov eax, dword [ebp - 8]
sub eax, 1
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jl 0x10239d48
mov eax, dword [ebp - 4]
add eax, 0x1958
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0x50]
mov edx, dword [ebp - 8]
cmp edx, dword [ecx]
jl 0x10239d28
push 0
call dword [sym.imp.ucrtbased.dll_exit]
mov eax, dword [ebp - 0x50]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 8]
lea eax, [ecx + edx*4]
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx]
cmp edx, dword [ebp + 8]
jne 0x10239d46
mov eax, dword [ebp - 8]
jmp 0x10239d4b
jmp 0x10239cfc
or eax, 0xffffffff
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x10239d80
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x58
push ebx
push esi
push edi
mov ecx, 0x104f66fc
call fcn.1015f0d9
mov eax, dword [0x104e7304]
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 8], eax
jmp 0x10239dac
mov eax, dword [ebp - 8]
add eax, dword [ebp + 0x10]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jl 0x10239e49
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 8]
cmp ecx, dword [eax + 0x1958]
jge 0x10239e49
mov eax, dword [ebp - 8]
cmp eax, dword [ebp + 0xc]
je 0x10239e49
mov eax, dword [ebp - 4]
add eax, 0x1958
mov dword [ebp - 0x54], eax
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 8]
cmp edx, dword [ecx]
jl 0x10239ded
push 0
call dword [sym.imp.ucrtbased.dll_exit]
mov eax, dword [ebp - 0x54]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 8]
lea eax, [ecx + edx*4]
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx]
push edx
call fcn.1015f8c2
add esp, 4
movzx eax, al
test eax, eax
je 0x10239e44
mov eax, dword [ebp - 4]
add eax, 0x1958
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 8]
cmp edx, dword [ecx]
jl 0x10239e2e
push 0
call dword [sym.imp.ucrtbased.dll_exit]
mov eax, dword [ebp - 0x58]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 8]
lea eax, [ecx + edx*4]
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0x50]
mov eax, dword [ecx]
jmp 0x10239e4b
jmp 0x10239da3
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x1023ae10
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6c
push ebx
push esi
push edi
mov ecx, 0x104f66fc
call fcn.1015f0d9
cmp dword [ebp + 0xc], 0
jge 0x1023ae32
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc]
mov dword [ebp + 0xc], ecx
movzx eax, byte [ebp + 0x10]
test eax, eax
je 0x1023aeaa
mov eax, dword [ebp + 8]
add eax, 0x2c
mov dword [ebp - 0x60], eax
mov ecx, dword [ebp + 8]
add ecx, 0x2c
mov dword [ebp - 0x64], ecx
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp + 0xc]
cmp eax, dword [edx]
jl 0x1023ae5e
push 0
call dword [sym.imp.ucrtbased.dll_exit]
imul ecx, dword [ebp + 0xc], 0x1c
mov edx, dword [ebp - 0x64]
add ecx, dword [edx + 8]
mov dword [ebp - 0x54], ecx
mov eax, dword [ebp + 0xc]
add eax, 1
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 8]
cmp edx, dword [ecx]
jl 0x1023ae86
push 0
call dword [sym.imp.ucrtbased.dll_exit]
imul eax, dword [ebp - 8], 0x1c
mov ecx, dword [ebp - 0x60]
add eax, dword [ecx + 8]
mov dword [ebp - 0x50], eax
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x54]
movss xmm0, dword [edx + 4]
subss xmm0, dword [eax + 4]
movss dword [ebp - 4], xmm0
jmp 0x1023af16
mov eax, dword [ebp + 8]
add eax, 0x2c
mov dword [ebp - 0x68], eax
mov ecx, dword [ebp + 8]
add ecx, 0x2c
mov dword [ebp - 0x6c], ecx
mov edx, dword [ebp - 0x6c]
mov eax, dword [ebp + 0xc]
cmp eax, dword [edx]
jl 0x1023aece
push 0
call dword [sym.imp.ucrtbased.dll_exit]
imul ecx, dword [ebp + 0xc], 0x1c
mov edx, dword [ebp - 0x6c]
add ecx, dword [edx + 8]
mov dword [ebp - 0x5c], ecx
mov eax, dword [ebp + 0xc]
add eax, 1
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x68]
mov edx, dword [ebp - 0xc]
cmp edx, dword [ecx]
jl 0x1023aef6
push 0
call dword [sym.imp.ucrtbased.dll_exit]
imul eax, dword [ebp - 0xc], 0x1c
mov ecx, dword [ebp - 0x68]
add eax, dword [ecx + 8]
mov dword [ebp - 0x58], eax
mov edx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x5c]
movss xmm0, dword [edx]
subss xmm0, dword [eax]
movss dword [ebp - 4], xmm0
push ecx
movss xmm0, dword [ebp - 4]
movss dword [esp], xmm0
mov eax, dword [ebp + 8]
push eax
call fcn.1024c710
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x1023b680
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5c
push ebx
push esi
push edi
mov ecx, 0x104f66fc
call fcn.1015f0d9
mov eax, dword [0x104e7304]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x198c]
mov dword [ebp - 8], ecx
cmp dword [ebp + 0xc], 0
jg 0x1023b6b5
push 0
call dword [sym.imp.ucrtbased.dll_exit]
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
add ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 4]
cmp dword [edx + 0x19ac], ecx
je 0x1023b6d0
push 0
call dword [sym.imp.ucrtbased.dll_exit]
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
movss xmm0, dword [eax + 0xe0]
subss xmm0, dword [ecx + 0x19cc]
addss xmm0, dword [0x10430afc]
mov edx, dword [ebp - 8]
subss xmm0, dword [edx + 0xc]
movss dword [ebp - 0xc], xmm0
mov eax, dword [ebp + 0xc]
sub eax, 1
push eax
call fcn.1015f4d5
add esp, 4
fstp dword [ebp - 0x58]
movss xmm0, dword [ebp - 0x58]
mov ecx, dword [ebp - 4]
addss xmm0, dword [ecx + 0x1560]
movss dword [ebp - 0x10], xmm0
movss xmm0, dword [ebp - 0xc]
comiss xmm0, dword [ebp - 0x10]
jb 0x1023b739
movss xmm0, dword [ebp - 0xc]
movss dword [ebp - 0x5c], xmm0
jmp 0x1023b743
movss xmm0, dword [ebp - 0x10]
movss dword [ebp - 0x5c], xmm0
movss xmm0, dword [ebp - 0x5c]
movss dword [ebp - 0xc], xmm0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
and ecx, 4
je 0x1023b7aa
mov eax, dword [ebp + 0xc]
add eax, 1
push eax
call fcn.1015f4d5
add esp, 4
fstp dword [ebp - 0x58]
movss xmm0, dword [ebp - 0x58]
mov ecx, dword [ebp - 4]
subss xmm0, dword [ecx + 0x1560]
movss dword [ebp - 0x14], xmm0
movss xmm0, dword [ebp - 0x14]
comiss xmm0, dword [ebp - 0xc]
jbe 0x1023b796
movss xmm0, dword [ebp - 0xc]
movss dword [ebp - 0x5c], xmm0
jmp 0x1023b7a0
movss xmm0, dword [ebp - 0x14]
movss dword [ebp - 0x5c], xmm0
movss xmm0, dword [ebp - 0x5c]
movss dword [ebp - 0xc], xmm0
fld dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x1023c460
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
push ebx
push esi
push edi
mov ecx, 0x104f66fc
call fcn.1015f0d9
cmp dword [ebp + 8], 0
jl 0x1023c47f
cmp dword [ebp + 8], 0x15
jl 0x1023c487
push 0
call dword [sym.imp.ucrtbased.dll_exit]
mov eax, dword [ebp + 8]
mov ecx, dword [0x104e7304]
mov eax, dword [ecx + eax*4 + 0x34]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x1023c5a0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x54
push ebx
push esi
push edi
mov ecx, 0x104f66fc
call fcn.1015f0d9
mov eax, dword [0x104e7304]
mov dword [ebp - 4], eax
cmp dword [ebp + 0xc], 0
jl 0x1023c5c7
cmp dword [ebp + 0xc], 5
jl 0x1023c5cf
push 0
call dword [sym.imp.ucrtbased.dll_exit]
xorps xmm0, xmm0
comiss xmm0, dword [ebp + 0x10]
jbe 0x1023c5e5
mov eax, dword [ebp - 4]
movss xmm0, dword [eax + 0x30]
movss dword [ebp + 0x10], xmm0
mov eax, dword [ebp - 4]
add eax, dword [ebp + 0xc]
movzx ecx, byte [eax + 0xe8]
test ecx, ecx
je 0x1023c675
movss xmm0, dword [ebp + 0x10]
mulss xmm0, dword [ebp + 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 4]
movss xmm1, dword [ecx + eax*4 + 0x434]
comiss xmm1, xmm0
jb 0x1023c675
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 4]
lea edx, [ecx + eax*8 + 0x380]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
add eax, 0xe0
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0xc]
movss xmm0, dword [ecx]
subss xmm0, dword [edx]
movss dword [ebp - 0x10], xmm0
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0xc]
movss xmm0, dword [eax + 4]
subss xmm0, dword [ecx + 4]
movss dword [ebp - 0x14], xmm0
mov edx, dword [ebp + 8]
movss xmm0, dword [ebp - 0x10]
movss dword [edx], xmm0
mov eax, dword [ebp + 8]
movss xmm0, dword [ebp - 0x14]
movss dword [eax + 4], xmm0
mov eax, dword [ebp + 8]
jmp 0x1023c68d
mov eax, dword [ebp + 8]
xorps xmm0, xmm0
movss dword [eax], xmm0
mov ecx, dword [ebp + 8]
xorps xmm0, xmm0
movss dword [ecx + 4], xmm0
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x1023d600
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
push ebx
push esi
push edi
mov ecx, 0x104f66fc
call fcn.1015f0d9
mov eax, dword [ebp + 8]
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x2f
ja case.default.0x1023d626
mov ecx, dword [ebp - 0x44]
jmp dword [ecx*4 + 0x1023d7fc]
mov eax, 0x10435404
jmp 0x1023d7f3
mov eax, str.TextDisabled
jmp 0x1023d7f3
mov eax, str.WindowBg
jmp 0x1023d7f3
mov eax, str.ChildBg
jmp 0x1023d7f3
mov eax, str.PopupBg
jmp 0x1023d7f3
mov eax, str.Border
jmp 0x1023d7f3
mov eax, str.BorderShadow
jmp 0x1023d7f3
mov eax, str.FrameBg
jmp 0x1023d7f3
mov eax, str.FrameBgHovered
jmp 0x1023d7f3
mov eax, str.FrameBgActive
jmp 0x1023d7f3
mov eax, str.TitleBg
jmp 0x1023d7f3
mov eax, str.TitleBgActive
jmp 0x1023d7f3
mov eax, str.TitleBgCollapsed
jmp 0x1023d7f3
mov eax, str.MenuBarBg
jmp 0x1023d7f3
mov eax, str.ScrollbarBg
jmp 0x1023d7f3
mov eax, str.ScrollbarGrab
jmp 0x1023d7f3
mov eax, str.ScrollbarGrabHovered
jmp 0x1023d7f3
mov eax, str.ScrollbarGrabActive
jmp 0x1023d7f3
mov eax, str.CheckMark
jmp 0x1023d7f3
mov eax, str.SliderGrab
jmp 0x1023d7f3
mov eax, str.SliderGrabActive
jmp 0x1023d7f3
mov eax, str.Button
jmp 0x1023d7f3
mov eax, str.ButtonHovered
jmp 0x1023d7f3
mov eax, str.ButtonActive
jmp 0x1023d7f3
mov eax, str.Header
jmp 0x1023d7f3
mov eax, str.HeaderHovered
jmp 0x1023d7f3
mov eax, str.HeaderActive
jmp 0x1023d7f3
mov eax, str.Separator
jmp 0x1023d7f3
mov eax, str.SeparatorHovered
jmp 0x1023d7f3
mov eax, str.SeparatorActive
jmp 0x1023d7f3
mov eax, str.ResizeGrip
jmp 0x1023d7f3
mov eax, str.ResizeGripHovered
jmp 0x1023d7f3
mov eax, str.ResizeGripActive
jmp 0x1023d7f3
mov eax, 0x10435608
jmp 0x1023d7f3
mov eax, str.TabHovered
jmp 0x1023d7f3
mov eax, str.TabActive
jmp 0x1023d7f3
mov eax, str.TabUnfocused
jmp 0x1023d7f3
mov eax, str.TabUnfocusedActive
jmp 0x1023d7f3
mov eax, str.PlotLines
jmp 0x1023d7f3
mov eax, str.PlotLinesHovered
jmp 0x1023d7f3
mov eax, str.PlotHistogram
jmp 0x1023d7f3
mov eax, str.PlotHistogramHovered
jmp 0x1023d7f3
mov eax, str.TextSelectedBg
jmp 0x1023d7f3
mov eax, str.DragDropTarget
jmp 0x1023d7f3
mov eax, str.NavHighlight
jmp 0x1023d7f3
mov eax, str.NavWindowingHighlight
jmp 0x1023d7f3
mov eax, str.NavWindowingDimBg
jmp 0x1023d7f3
mov eax, str.ModalWindowDimBg
jmp 0x1023d7f3
mov eax, 1
test eax, eax
je 0x1023d7ee
push 0
call dword [sym.imp.ucrtbased.dll_exit]
mov eax, str.Unknown
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x1023d9c0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
push ebx
push esi
push edi
mov ecx, 0x104f66fc
call fcn.1015f0d9
cmp dword [ebp + 8], 0
jl 0x1023d9df
cmp dword [ebp + 8], 0x17
jl 0x1023d9e7
push 0
call dword [sym.imp.ucrtbased.dll_exit]
xor eax, eax
je 0x1023d9f3
push 0
call dword [sym.imp.ucrtbased.dll_exit]
imul eax, dword [ebp + 8], 0xc
add eax, 0x10434be0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x10241380
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
push ebx
push esi
push edi
mov ecx, 0x104f66fc
call fcn.1015f0d9
mov eax, dword [0x104e7304]
mov dword [ebp - 4], eax
cmp dword [ebp + 8], 0
jge 0x102413a5
xor al, al
jmp 0x102413f8
cmp dword [ebp + 8], 0
jl 0x102413b4
cmp dword [ebp + 8], 0x200
jl 0x102413bc
push 0
call dword [sym.imp.ucrtbased.dll_exit]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 4]
movss xmm0, dword [ecx + eax*4 + 0xc48]
comiss xmm0, dword [0x1042d1cc]
jb 0x102413ee
mov edx, dword [ebp - 4]
add edx, dword [ebp + 8]
movzx eax, byte [edx + 0xfc]
test eax, eax
jne 0x102413ee
mov dword [ebp - 0x48], 1
jmp 0x102413f5
mov dword [ebp - 0x48], 0
mov al, byte [ebp - 0x48]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x10241610
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
push ebx
push esi
push edi
mov ecx, 0x104f66fc
call fcn.1015f0d9
mov eax, dword [0x104e7304]
mov dword [ebp - 4], eax
cmp dword [ebp + 8], 0
jl 0x10241637
cmp dword [ebp + 8], 5
jl 0x1024163f
push 0
call dword [sym.imp.ucrtbased.dll_exit]
mov eax, dword [ebp - 4]
add eax, dword [ebp + 8]
mov al, byte [eax + 0x3d5]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x10241b40
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x58
push ebx
push esi
push edi
mov ecx, 0x104f66fc
call fcn.1015f0d9
mov eax, dword [0x104e7304]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov edx, dword [eax + 0x1a18]
cmp edx, dword [ecx + 0x1a24]
jle 0x10241bcf
mov eax, dword [ebp - 4]
add eax, 0x1a18
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x198c]
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1a24]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 8]
cmp eax, dword [edx]
jl 0x10241ba4
push 0
call dword [sym.imp.ucrtbased.dll_exit]
imul ecx, dword [ebp - 8], 0x24
mov edx, dword [ebp - 0x50]
add ecx, dword [edx + 8]
mov dword [ebp - 0x4c], ecx
push 0
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x54]
call fcn.10160b5a
mov ecx, dword [ebp - 0x4c]
cmp dword [ecx], eax
jne 0x10241bcf
mov dword [ebp - 0x58], 1
jmp 0x10241bd6
mov dword [ebp - 0x58], 0
mov al, byte [ebp - 0x58]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x10241f90
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
push ebx
push esi
push edi
mov ecx, 0x104f66fc
call fcn.1015f0d9
mov eax, dword [0x104e7304]
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
and eax, 4
je 0x10241fd7
mov eax, dword [ebp - 4]
cmp dword [eax + 0x1a9c], 0
je 0x10241fc8
mov dword [ebp - 0x48], 1
jmp 0x10241fcf
mov dword [ebp - 0x48], 0
mov al, byte [ebp - 0x48]
jmp 0x102420ed
mov eax, dword [ebp - 4]
cmp dword [eax + 0x198c], 0
jne 0x10241feb
push 0
call dword [sym.imp.ucrtbased.dll_exit]
mov eax, dword [ebp + 8]
and eax, 3
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
je 0x10242082
cmp dword [ebp - 0x48], 2
je 0x10242053
cmp dword [ebp - 0x48], 3
je 0x1024200f
jmp 0x102420c6
mov eax, dword [ebp - 4]
cmp dword [eax + 0x1a9c], 0
je 0x10242044
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1a9c]
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x198c]
mov edx, dword [edx + 0x2f0]
cmp edx, dword [ecx + 0x2f0]
jne 0x10242044
mov dword [ebp - 0x48], 1
jmp 0x1024204b
mov dword [ebp - 0x48], 0
mov al, byte [ebp - 0x48]
jmp 0x102420ed
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x198c]
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1a9c]
cmp eax, dword [ecx + 0x2f0]
jne 0x10242076
mov dword [ebp - 0x48], 1
jmp 0x1024207d
mov dword [ebp - 0x48], 0
mov al, byte [ebp - 0x48]
jmp 0x102420ed
mov eax, dword [ebp - 4]
cmp dword [eax + 0x1a9c], 0
je 0x102420ba
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x198c]
push edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1a9c]
push ecx
call fcn.101609ac
add esp, 8
movzx edx, al
test edx, edx
je 0x102420ba
mov dword [ebp - 0x48], 1
jmp 0x102420c1
mov dword [ebp - 0x48], 0
mov al, byte [ebp - 0x48]
jmp 0x102420ed
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov edx, dword [eax + 0x1a9c]
cmp edx, dword [ecx + 0x198c]
jne 0x102420e3
mov dword [ebp - 0x48], 1
jmp 0x102420ea
mov dword [ebp - 0x48], 0
mov al, byte [ebp - 0x48]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret