joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1005ab70
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, dword [ebp + 8]
mov eax, edx
push edi
mov dword [ebp - 4], eax
mov ebx, ecx
cmp dword [esi + 0x14], 0x10
mov edi, dword [esi + 0x10]
jb 0x1005ab8c
mov esi, dword [esi]
xor ecx, ecx
mov edx, 0x811c9dc5
test edi, edi
je 0x1005abab
movzx eax, byte [ecx + esi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, edi
jb 0x1005ab97
mov eax, dword [ebp - 4]
push edx
mov edx, eax
mov ecx, ebx
call fcn.1005a570
add esp, 4
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x10060ef0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1012e455
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x1016c008]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
movzx eax, byte [esi]
xor eax, 0x811c9dc5
imul ecx, eax, 0x1000193
movzx eax, byte [esi + 1]
xor ecx, eax
movzx eax, byte [esi + 2]
imul ecx, ecx, 0x1000193
xor ecx, eax
movzx eax, byte [esi + 3]
imul ecx, ecx, 0x1000193
xor ecx, eax
lea eax, [ebp - 0x18]
imul edi, ecx, 0x1000193
push edi
push esi
push eax
call fcn.100206e0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x10061056
cmp dword [0x1021e2d0], 0xfffffff
jne 0x10060f7a
push str.unordered_map_set_too_long
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const__]
mov dword [ebp - 0x20], 0x1021e2cc
mov dword [ebp - 4], 0
push 0x10
mov dword [ebp - 0x1c], 0
call fcn.101283a9
mov ebx, eax
add esp, 4
mov eax, dword [esi]
mov dword [ebp - 0x1c], ebx
mov dword [ebx + 8], eax
mov dword [ebx + 0xc], 0
mov dword [ebp - 4], 1
mov eax, dword [0x1021e2d0]
mov esi, dword [0x1021e2e4]
inc eax
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x10163240]
mov eax, esi
shr eax, 0x1f
cvtpd2ps xmm3, xmm0
movd xmm0, esi
cvtdq2pd xmm0, xmm0
movaps xmm2, xmm3
addsd xmm0, qword [eax*8 + 0x10163240]
cvtpd2ps xmm1, xmm0
movss xmm0, dword [0x1021e2c8]
divss xmm2, xmm1
comiss xmm2, xmm0
jbe 0x1006104b
divss xmm3, xmm0
movaps xmm0, xmm3
call fcn.10004d10
call fcn.10129650
mov ecx, 8
cmp eax, ecx
cmova ecx, eax
cmp esi, ecx
jae 0x10061033
cmp esi, 0x200
jae 0x10061031
shl esi, 3
cmp esi, ecx
jae 0x10061033
mov esi, ecx
push esi
call fcn.10020560
push edi
lea eax, [ebx + 8]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.100206e0
mov ecx, dword [eax]
jmp 0x1006104e
mov ecx, dword [ebp - 0x18]
push ebx
push ecx
push edi
call fcn.100204f0
add eax, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x100634c0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1012e6fd
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
push esi
push edi
mov eax, dword [0x1016c008]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, edx
mov dword [ebp - 0x18], ecx
xor ebx, ebx
mov esi, ecx
cmp byte [ecx], bl
je 0x1006351a
push 0
mov edx, esi
lea ecx, [ebp - 0x14]
call fcn.100637b0
add esi, eax
add esp, 4
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006351a
cmp eax, 0x10000
jae 0x10063515
inc ebx
cmp byte [esi], 0
jne 0x100634f5
lea eax, [ebx + 1]
mov esi, edi
xor ebx, ebx
mov dword [ebp - 0x10], eax
cmp byte [edi], bl
je 0x10063550
push 0
mov edx, esi
lea ecx, [ebp - 0x14]
call fcn.100637b0
add esi, eax
add esp, 4
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1006354d
cmp eax, 0x10000
jae 0x10063548
inc ebx
cmp byte [esi], 0
jne 0x10063528
mov eax, dword [ebp - 0x10]
inc ebx
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x20], 0
lea ecx, [ebx + eax]
mov dword [ebp - 4], 0
test ecx, ecx
jle 0x10063684
mov edx, 8
mov eax, ecx
cmp ecx, edx
lea ecx, [ebp - 0x28]
cmovl eax, edx
push eax
call fcn.10052b50
mov esi, dword [ebp - 0x20]
mov edx, dword [ebp - 0x10]
lea ecx, [esi + edx*2]
lea eax, [ecx - 2]
mov dword [ebp - 0x14], ecx
cmp esi, eax
jae 0x100635e5
mov ebx, dword [ebp - 0x18]
cmp byte [ebx], 0
je 0x100635df
push 0
mov edx, ebx
lea ecx, [ebp - 0x18]
call fcn.100637b0
add ebx, eax
add esp, 4
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x100635dc
cmp eax, 0x10000
jae 0x100635d0
mov word [esi], ax
add esi, 2
mov ecx, dword [ebp - 0x14]
lea eax, [ecx - 2]
cmp esi, eax
jb 0x100635a6
jmp 0x100635df
mov ecx, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x10]
xor eax, eax
mov word [esi], ax
lea eax, [ebx + edx]
cmp edx, eax
jge 0x10063684
dec ebx
mov esi, ecx
lea ebx, [ecx + ebx*2]
cmp ecx, ebx
jae 0x10063631
nop
cmp byte [edi], 0
je 0x1006362e
push 0
mov edx, edi
lea ecx, [ebp - 0x1c]
call fcn.100637b0
add edi, eax
add esp, 4
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x1006362e
cmp eax, 0x10000
jae 0x1006362a
mov word [esi], ax
add esi, 2
cmp esi, ebx
jb 0x10063600
mov ecx, dword [ebp - 0x14]
mov edi, dword [ebp - 0x20]
xor eax, eax
push ecx
push edi
mov word [esi], ax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__wfopen]
add esp, 8
mov esi, eax
mov dword [ebp - 4], 1
test edi, edi
je 0x10063670
mov ecx, dword [0x101e0c0c]
test ecx, ecx
je 0x10063661
dec dword [ecx + 0x36c]
push dword [0x101e0c08]
push edi
call fcn.10062c60
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x10063690
Capabilities:
Read file on windows
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ecx
test ecx, ecx
je 0x10063799
push esi
push edi
mov edi, dword [ebp + 8]
test edi, edi
je 0x100636ab
mov dword [edi], 0
mov edx, 0x10160e40
call fcn.100634c0
mov esi, eax
test esi, esi
jne 0x100636c1
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push ebx
push 2
push 0
push esi
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
add esp, 0xc
test eax, eax
jne 0x10063786
push esi
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ftell]
mov ebx, eax
add esp, 4
cmp ebx, 0xffffffff
je 0x10063786
push 0
push 0
push esi
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
add esp, 0xc
test eax, eax
jne 0x10063786
mov eax, dword [0x101e0c0c]
test eax, eax
je 0x10063712
inc dword [eax + 0x36c]
push dword [0x101e0c08]
push ebx
call fcn.10062c40
add esp, 8
mov dword [ebp - 4], eax
test eax, eax
je 0x10063786
push esi
push ebx
push 1
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
add esp, 0x10
push esi
cmp eax, ebx
je 0x1006376d
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov eax, dword [0x101e0c0c]
add esp, 4
test eax, eax
je 0x10063753
dec dword [eax + 0x36c]
push dword [0x101e0c08]
push dword [ebp - 4]
call fcn.10062c60
add esp, 8
xor eax, eax
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
test edi, edi
je 0x1006377c
mov dword [edi], ebx
mov eax, dword [ebp - 4]
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push esi
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
xor eax, eax
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3

Function at 0x10063e00
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
push edi
push dword [ebp + 0xc]
mov ebx, ecx
xor edx, edx
push ecx
push dword [ebp + 8]
xor ecx, ecx
call fcn.100538b0
add esp, 0xc
mov dword [ebp - 8], eax
test eax, eax
jle 0x10063ec1
mov ecx, dword [ebx]
mov edx, 1
mov edi, dword [ebx + 4]
test ecx, ecx
cmovne edx, ecx
mov dword [ebp - 4], edx
lea esi, [edx + eax]
cmp esi, edi
jl 0x10063e7e
lea eax, [edi + edi]
mov ecx, ebx
cmp esi, eax
cmovg eax, esi
push eax
call fcn.10074930
mov edi, dword [ebx + 4]
cmp esi, edi
jle 0x10063e7e
test edi, edi
je 0x10063e6a
mov eax, edi
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
add ecx, edi
jmp 0x10063e6f
mov ecx, 8
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
mov ecx, ebx
push eax
call fcn.10074930
mov eax, dword [ebp - 4]
dec eax
mov dword [ebx], esi
cmp eax, esi
jl 0x10063e90
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov edi, dword [ebp - 8]
push dword [ebp + 0xc]
mov esi, dword [ebx + 8]
push ecx
push dword [ebp + 8]
add esi, eax
lea ebx, [edi + 1]
mov edx, ebx
mov ecx, esi
call fcn.100538b0
add esp, 0xc
test esi, esi
je 0x10063ec1
cmp eax, 0xffffffff
je 0x10063ebb
cmp eax, ebx
jl 0x10063ebd
mov eax, edi
mov byte [eax + esi], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x10063ed0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
cmp byte [ebp + 8], 0
mov eax, dword [0x101e0c0c]
push ebx
push esi
mov ebx, ecx
mov dword [ebp - 8], eax
mov ecx, dword [eax + 0x198c]
push edi
mov dword [ebp - 0xc], ecx
je 0x10063f19
or edi, 0xffffffff
mov esi, ebx
test edx, edx
cmovne edi, edx
cmp ebx, edi
jae 0x10063f36
mov al, byte [esi]
test al, al
je 0x10063f14
cmp al, 0x23
jne 0x10063f0f
cmp byte [esi + 1], al
je 0x10063f14
inc esi
cmp esi, edi
jb 0x10063f00
mov eax, dword [ebp - 8]
jmp 0x10063f36
test edx, edx
jne 0x10063f34
mov ecx, ebx
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10063f22
mov eax, dword [ebp - 8]
sub ecx, edx
lea edx, [ecx + ebx]
mov ecx, dword [ebp - 0xc]
mov esi, edx
cmp ebx, esi
je 0x10064056
movss xmm0, dword [eax + 0x1500]
xorps xmm1, xmm1
comiss xmm1, xmm0
mov edx, dword [ecx + 0x274]
ja 0x1006403f
minss xmm0, dword [0x10162728]
mov ecx, dword [eax + 0x18a8]
movss xmm2, dword [eax + 0x18ac]
mov dword [ebp + 8], ecx
mov dword [ebp - 0xc], esi
mulss xmm0, dword [0x10162960]
addss xmm0, dword [0x101626c8]
cvttss2si edi, xmm0
shl edi, 0x18
or edi, 0xcdcdcd
mov dword [ebp - 0x10], edi
test edi, 0xff000000
je 0x1006403f
test esi, esi
jne 0x10063fc7
mov ecx, ebx
lea eax, [ecx + 1]
mov dword [ebp - 0xc], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10063fb0
sub ecx, dword [ebp - 0xc]
lea eax, [ecx + ebx]
mov dword [ebp - 0xc], eax
cmp ebx, eax
je 0x1006403c
mov ecx, dword [ebp + 8]
test ecx, ecx
jne 0x10063fd4
mov eax, dword [edx + 0x28]
mov eax, dword [eax + 8]
mov dword [ebp + 8], eax
ucomiss xmm2, xmm1
lahf
test ah, 0x44
jp 0x10063fe5
mov eax, dword [edx + 0x28]
movss xmm2, dword [eax + 0xc]
mov eax, dword [edx + 0x48]
test eax, eax
jle 0x1006405d
mov eax, dword [ebp + 8]
mov edi, dword [edx + 0x48]
mov ecx, dword [edx + 0x50]
mov eax, dword [eax + 0x38]
mov eax, dword [eax + 8]
cmp eax, dword [ecx + edi*4 - 4]
mov edi, dword [ebp - 0x10]
jne 0x1006405d
mov ecx, dword [edx + 0x3c]
test ecx, ecx
jle 0x1006405d
mov eax, dword [edx + 0x44]
push 0
shl ecx, 4
push ecx
mov dword [esp], 0
push dword [ebp - 0xc]
movups xmm0, xmmword [ecx + eax - 0x10]
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x20]
push ebx
push eax
push edi
push dword [ebp + 0x10]
movups xmmword [ebp - 0x20], xmm0
push dword [ebp + 0xc]
push edx
call fcn.10080ff0
mov eax, dword [ebp - 8]
cmp byte [eax + 0x2c64], 0
je 0x10064056
push esi
mov edx, ebx
lea ecx, [ebp + 0xc]
call fcn.10073410
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x10065a90
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov edx, dword [ecx + 0x1c0]
test edx, edx
jg 0x10065aa5
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov eax, dword [ecx + 0x1c8]
mov ecx, dword [ebp + 8]
push dword [eax + edx*4 - 4]
xor edx, edx
call fcn.10063440
mov ecx, dword [0x101e0c0c]
add esp, 4
cmp dword [ecx + 0x19ac], eax
jne 0x10065ad0
mov dword [ecx + 0x19b4], eax
cmp dword [ecx + 0x19b0], eax
jne 0x10065adf
mov byte [ecx + 0x19c0], 1
pop ebp
ret 8

Function at 0x10065af0
Capabilities:
Encode data using xor
Hash data with crc32
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov edx, dword [ecx + 0x1c0]
test edx, edx
jg 0x10065b05
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov eax, dword [ecx + 0x1c8]
push esi
push edi
lea esi, [ebp + 8]
mov edi, 4
mov eax, dword [eax + edx*4 - 4]
not eax
nop dword [eax + eax]
movzx ecx, byte [esi]
lea esi, [esi + 1]
movzx edx, al
xor edx, ecx
shr eax, 8
xor eax, dword [edx*4 + 0x10150220]
sub edi, 1
jne 0x10065b20
mov ecx, dword [0x101e0c0c]
not eax
pop edi
pop esi
cmp dword [ecx + 0x19ac], eax
jne 0x10065b52
mov dword [ecx + 0x19b4], eax
cmp dword [ecx + 0x19b0], eax
jne 0x10065b61
mov byte [ecx + 0x19c0], 1
pop ebp
ret 4

Function at 0x10065b70
Capabilities:
Encode data using xor
Hash data with crc32
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov edx, dword [ecx + 0x1c0]
test edx, edx
jg 0x10065b85
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov eax, dword [ecx + 0x1c8]
push esi
push edi
lea esi, [ebp + 8]
mov edi, 4
mov eax, dword [eax + edx*4 - 4]
not eax
nop dword [eax + eax]
movzx ecx, byte [esi]
lea esi, [esi + 1]
movzx edx, al
xor edx, ecx
shr eax, 8
xor eax, dword [edx*4 + 0x10150220]
sub edi, 1
jne 0x10065ba0
pop edi
not eax
pop esi
pop ebp
ret 4

Function at 0x10065bd0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push esi
mov esi, dword [0x101e0c0c]
mov eax, dword [esi + 0x1a9c]
test eax, eax
je 0x10065c23
test edx, edx
je 0x10065bed
cmp edx, 1
jne 0x10065c23
mov dword [esi + 0x1aa0], ecx
mov dword [eax + edx*4 + 0x300], ecx
add edx, edx
mov eax, dword [ebp + 8]
mov ecx, dword [esi + 0x1a9c]
movups xmm0, xmmword [eax]
movups xmmword [ecx + edx*8 + 0x308], xmm0
mov word [esi + 0x1afd], 1
mov byte [esi + 0x1aff], 1
pop esi
pop ebp
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x10065ce0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x101e0c0c]
sub esp, 0x10
push esi
test ecx, ecx
jne 0x10065cf7
push ecx
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov esi, dword [edx + 0x134]
cmp dword [eax + 0x1a9c], edx
je 0x10065d0c
mov byte [eax + 0x1b01], 0
mov dword [eax + 0x1aa0], ecx
mov dword [eax + 0x1a9c], edx
mov dword [eax + 0x1af4], esi
mov dword [edx + esi*4 + 0x300], ecx
cmp dword [edx + 0x10c], ecx
jne 0x10065d83
movss xmm0, dword [edx + 0x118]
add esi, esi
movss xmm4, dword [edx + 0x11c]
movss xmm3, dword [edx + 0x120]
movss xmm1, dword [edx + 0x114]
subss xmm0, dword [edx + 0x10]
subss xmm4, dword [edx + 0xc]
subss xmm3, dword [edx + 0x10]
subss xmm1, dword [edx + 0xc]
movss dword [ebp - 0xc], xmm0
movss dword [ebp - 8], xmm4
movss dword [ebp - 4], xmm3
movss dword [ebp - 0x10], xmm1
movups xmm0, xmmword [ebp - 0x10]
movups xmmword [edx + esi*8 + 0x308], xmm0
cmp dword [eax + 0x19dc], 2
jne 0x10065d98
mov byte [eax + 0x1aff], 1
pop esi
mov esp, ebp
pop ebp
ret
mov byte [eax + 0x1afe], 1
pop esi
mov esp, ebp
pop ebp
ret

Function at 0x10066430
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
movss xmm4, dword [ebp + 0xc]
movaps xmm6, xmm1
movss xmm1, dword [ebp + 8]
xorps xmm5, xmm5
comiss xmm5, xmm1
push ebx
push esi
mov esi, ecx
push edi
movaps xmm7, xmm2
xorps xmm3, xmm3
xorps xmm2, xmm2
ja 0x1006645b
comiss xmm5, xmm4
jbe 0x100664d2
mov ebx, dword [0x101e0c0c]
mov ebx, dword [ebx + 0x198c]
movss xmm3, dword [ebx + 0x218]
mov edi, dword [ebx + 0x1bc]
movss xmm2, dword [ebx + 0x214]
subss xmm3, dword [ebx + 0x10]
subss xmm2, dword [ebx + 0xc]
test edi, edi
je 0x100664c8
mov edx, dword [edi + 0xc]
lea eax, [edx + 1]
test eax, eax
cmovns edx, eax
cmp edx, dword [edi + 0x2c]
jl 0x100664a3
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
movss xmm2, dword [edi + 0x18]
lea ecx, [edx*8]
subss xmm2, dword [edi + 0x14]
mov eax, dword [edi + 0x34]
sub ecx, edx
mulss xmm2, dword [eax + ecx*4]
addss xmm2, dword [edi + 0x14]
subss xmm2, dword [ebx + 0x3c]
addss xmm2, dword [ebx + 0xc]
addss xmm3, dword [ebx + 0x10]
comiss xmm5, xmm1
mov ecx, dword [0x101e0c0c]
movss xmm0, dword [0x10162814]
jb 0x1006650e
ucomiss xmm1, xmm5
lahf
test ah, 0x44
jp 0x100664f3
movaps xmm1, xmm6
jmp 0x10066509
mov eax, dword [ecx + 0x198c]
subss xmm2, dword [eax + 0xc8]
maxss xmm2, xmm0
addss xmm1, xmm2
movss dword [ebp + 8], xmm1
comiss xmm5, xmm4
jb 0x10066545
ucomiss xmm4, xmm5
lahf
test ah, 0x44
jp 0x1006652f
movaps xmm4, xmm7
movss dword [esi], xmm1
movss dword [esi + 4], xmm4
mov eax, esi
pop edi
pop esi
pop ebx
pop ebp
ret
mov eax, dword [ecx + 0x198c]
subss xmm3, dword [eax + 0xcc]
maxss xmm3, xmm0
addss xmm4, xmm3
pop edi
movss dword [esi], xmm1
mov eax, esi
movss dword [esi + 4], xmm4
pop esi
pop ebx
pop ebp
ret
Function at 0x10066560
Capabilities:
Terminate process

Disassembly:
push esi
mov esi, dword [0x101e0c0c]
mov ecx, dword [esi + 0x19f0]
test ecx, ecx
je 0x1006672e
mov eax, dword [esi + 0x19ac]
mov dword [esi + 0x19b4], eax
cmp dword [esi + 0x19b0], eax
jne 0x10066590
mov byte [esi + 0x19c0], 1
mov ecx, dword [ecx + 0x2f0]
test ecx, ecx
je 0x10066726
cmp byte [esi + 0xe8], 0
je 0x10066715
test esi, esi
je 0x10066726
movss xmm0, dword [esi + 0xe0]
movss xmm1, dword [0x10162a68]
comiss xmm0, xmm1
movss xmm2, dword [esi + 0xe4]
jb 0x10066715
comiss xmm2, xmm1
jb 0x10066715
movss xmm1, dword [esi + 0xe4]
movaps xmm2, xmm0
subss xmm2, dword [esi + 0x19cc]
movss xmm0, dword [ecx + 0xc]
subss xmm1, dword [esi + 0x19d0]
ucomiss xmm0, xmm2
lahf
test ah, 0x44
jp 0x10066618
movss xmm0, dword [ecx + 0x10]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x10066709
test dword [ecx + 8], 0x100
xorps xmm0, xmm0
movss xmm4, dword [esi + 0x10]
maxss xmm2, xmm0
movss xmm5, dword [esi + 0x14]
maxss xmm1, xmm0
subss xmm4, dword [ecx + 0x14]
subss xmm5, dword [ecx + 0x18]
minss xmm4, xmm2
minss xmm5, xmm1
jne 0x1006665a
comiss xmm0, dword [esi + 0x2c3c]
jb 0x1006665a
mov eax, dword [esi + 0x1c]
mov dword [esi + 0x2c3c], eax
mov eax, dword [ecx + 0xac]
test al, 1
je 0x10066709
and eax, 0xfffffff1
movss xmm2, dword [ecx + 0xc]
mov dword [ecx + 0xac], eax
movss xmm3, dword [ecx + 0x10]
cvttss2si eax, xmm4
mov dword [ecx + 0xb8], 0x7f7fffff
mov dword [ecx + 0xbc], 0x7f7fffff
movd xmm0, eax
cvttss2si eax, xmm5
cvtdq2ps xmm0, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [ecx + 0xc], xmm0
subss xmm0, xmm2
movss dword [ecx + 0x10], xmm1
subss xmm1, xmm3
addss xmm0, dword [ecx + 0xc8]
addss xmm1, dword [ecx + 0xcc]
movss dword [ecx + 0xc8], xmm0
movss dword [ecx + 0xcc], xmm1
movss xmm1, dword [ecx + 0x10]
movss xmm0, dword [ecx + 0xc]
subss xmm1, xmm3
subss xmm0, xmm2
addss xmm1, dword [ecx + 0xe4]
addss xmm0, dword [ecx + 0xe0]
movss dword [ecx + 0xe4], xmm1
movss dword [ecx + 0xe0], xmm0
mov ecx, dword [esi + 0x19f0]
pop esi
jmp fcn.1006df90
call fcn.10065db0
mov dword [esi + 0x19f0], 0
pop esi
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov ecx, dword [esi + 0x19d4]
test ecx, ecx
je 0x10066724
mov eax, dword [esi + 0x19ac]
cmp dword [ecx + 0x50], eax
jne 0x10066724
mov dword [esi + 0x19b4], eax
cmp dword [esi + 0x19b0], eax
jne 0x10066758
mov byte [esi + 0x19c0], 1
cmp byte [esi + 0xe8], 0
jne 0x10066724
pop esi
jmp fcn.10065db0
Function at 0x10066770
Capabilities:
Terminate process

Disassembly:
push ebx
push esi
mov esi, dword [0x101e0c0c]
push edi
cmp dword [esi + 0x19ac], 0
jne 0x10066948
cmp dword [esi + 0x1998], 0
jne 0x10066948
mov eax, dword [esi + 0x1a9c]
test eax, eax
je 0x100667aa
cmp byte [eax + 0x80], 0
jne 0x10066948
cmp byte [esi + 0x3d0], 0
je 0x100668e0
cmp dword [esi + 0x1994], 0
je 0x100668ad
mov edi, dword [esi + 0x1990]
mov ecx, edi
call fcn.1006df90
mov ecx, dword [edi + 0x50]
mov edx, edi
call fcn.10065c30
mov byte [esi + 0x1afe], 1
mov eax, dword [edi + 0x2f0]
movss xmm1, dword [esi + 0xe0]
movss xmm0, dword [esi + 0xe4]
subss xmm1, dword [eax + 0xc]
subss xmm0, dword [eax + 0x10]
movss dword [esi + 0x19cc], xmm1
movss dword [esi + 0x19d0], xmm0
test byte [edi + 8], 4
jne 0x1006682a
mov eax, dword [edi + 0x2f0]
test byte [eax + 8], 4
jne 0x1006682a
mov dword [esi + 0x19f0], edi
cmp byte [esi + 0xb0], 0
je 0x100668e0
mov ecx, dword [esi + 0x1994]
test byte [ecx + 8], 1
jne 0x100668e0
mov eax, dword [0x101e0c0c]
movss xmm4, dword [esi + 0x380]
comiss xmm4, dword [ecx + 0xc]
movss xmm2, dword [eax + 0x18b0]
mulss xmm2, dword [ecx + 0x26c]
movss xmm0, dword [eax + 0x1538]
movss xmm3, dword [ecx + 0xc]
addss xmm0, xmm0
addss xmm2, dword [ecx + 0x10]
addss xmm3, dword [ecx + 0x1c]
addss xmm2, xmm0
jb 0x100668a1
movss xmm0, dword [esi + 0x384]
comiss xmm0, dword [ecx + 0x10]
jb 0x100668a1
comiss xmm3, xmm4
jbe 0x100668a1
comiss xmm2, xmm0
ja 0x100668e0
mov dword [esi + 0x19f0], 0
jmp 0x100668e0
test eax, eax
je 0x100668e0
call fcn.1006ef20
test eax, eax
jne 0x100668e0
mov dword [esi + 0x1a9c], eax
mov byte [esi + 0x1b01], al
mov dword [esi + 0x1aa0], eax
mov byte [esi + 0x1afc], al
mov dword [esi + 0x1af4], eax
nop dword [eax + eax]
cmp byte [esi + 0x3d1], 0
je 0x10066948
call fcn.1006ef20
mov ebx, dword [esi + 0x194c]
mov edi, eax
test edi, edi
sete cl
lea edx, [ebx - 1]
test edx, edx
js 0x1006692c
test cl, cl
jne 0x10066930
cmp edx, ebx
jge 0x10066940
mov eax, dword [esi + 0x1954]
mov eax, dword [eax + edx*4]
cmp eax, edi
je 0x10066936
cmp eax, dword [esi + 0x1990]
mov eax, 1
movzx ecx, cl
cmove ecx, eax
sub edx, eax
jns 0x10066902
test cl, cl
je 0x10066936
mov edi, dword [esi + 0x1990]
mov ecx, edi
pop edi
pop esi
pop ebx
jmp fcn.1006f100
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
pop edi
pop esi
pop ebx
ret
Function at 0x10067bc0
Capabilities:
Terminate process

Disassembly:
push esi
mov esi, edx
push edi
mov edi, ecx
mov ecx, dword [esi]
test ecx, ecx
je 0x10067c61
jle 0x10067c64
mov eax, dword [esi + 8]
mov edx, ecx
shl edx, 5
cmp dword [edx + eax - 0x20], 0
jne 0x10067bf5
cmp dword [edx + eax - 8], 0
jne 0x10067bf5
lea eax, [ecx - 1]
mov dword [esi], eax
test eax, eax
je 0x10067c61
mov edx, dword [esi + 0x18]
test edx, edx
je 0x10067c0a
mov eax, dword [esi + 0x20]
lea ecx, [edx + edx*4]
lea eax, [eax + ecx*4]
cmp dword [esi + 0x34], eax
jne 0x10067c64
mov ecx, dword [esi + 0xc]
test ecx, ecx
je 0x10067c1c
mov eax, dword [esi + 0x14]
lea eax, [eax + ecx*2]
cmp dword [esi + 0x38], eax
jne 0x10067c64
mov eax, dword [esi + 0x30]
cmp eax, edx
jne 0x10067c64
cmp eax, 0x10000
jae 0x10067c64
mov ecx, dword [edi]
push ebx
mov ebx, dword [edi + 4]
cmp ecx, ebx
jne 0x10067c58
inc ecx
test ebx, ebx
je 0x10067c44
mov eax, ebx
cdq
sub eax, edx
sar eax, 1
add eax, ebx
jmp 0x10067c49
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, edi
call fcn.100746c0
mov ecx, dword [edi]
mov eax, dword [edi + 8]
pop ebx
mov dword [eax + ecx*4], esi
inc dword [edi]
pop edi
pop esi
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3

Function at 0x10067ce0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push esi
mov esi, dword [0x101e0c0c]
mov eax, dword [esi + 0x198c]
mov byte [eax + 0x7c], 1
push dword [edx + 4]
mov esi, dword [esi + 0x198c]
push dword [edx]
push dword [ecx + 4]
push dword [ecx]
mov ecx, dword [esi + 0x274]
push dword [ebp + 8]
call fcn.1007bbf0
mov eax, dword [esi + 0x274]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jg 0x10067d27
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov eax, dword [eax + 0x44]
add ecx, ecx
movss xmm0, dword [eax + ecx*8 - 0xc]
movss xmm1, dword [eax + ecx*8 - 8]
movss xmm2, dword [eax + ecx*8 - 4]
mov eax, dword [eax + ecx*8 - 0x10]
mov dword [esi + 0x1cc], eax
movss dword [esi + 0x1d0], xmm0
movss dword [esi + 0x1d4], xmm1
movss dword [esi + 0x1d8], xmm2
pop esi
pop ebp
ret

Function at 0x10067d70
Capabilities:
Terminate process

Disassembly:
mov ecx, dword [0x101e0c0c]
push esi
mov eax, dword [ecx + 0x198c]
mov byte [eax + 0x7c], 1
mov esi, dword [ecx + 0x198c]
mov ecx, dword [esi + 0x274]
mov eax, dword [ecx + 0x3c]
test eax, eax
jle 0x10067de5
dec eax
mov dword [ecx + 0x3c], eax
call fcn.1007ba20
mov eax, dword [esi + 0x274]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jle 0x10067de5
mov eax, dword [eax + 0x44]
add ecx, ecx
movss xmm0, dword [eax + ecx*8 - 0xc]
movss xmm1, dword [eax + ecx*8 - 8]
movss xmm2, dword [eax + ecx*8 - 4]
mov eax, dword [eax + ecx*8 - 0x10]
mov dword [esi + 0x1cc], eax
movss dword [esi + 0x1d0], xmm0
movss dword [esi + 0x1d4], xmm1
movss dword [esi + 0x1d8], xmm2
pop esi
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3