joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1006ada0
Capabilities:
Terminate process

Disassembly:
push ebp
push ebx
push edi
push esi
mov eax, dword [ecx]
cmp eax, dword [ecx + 0x14]
jne 0x1006af68
mov ebx, dword [esp + 0x14]
cmp eax, ebx
jge 0x1006af61
mov esi, ecx
mov ecx, dword [ecx + 4]
cmp ecx, ebx
jge 0x1006ae1f
test ecx, ecx
je 0x1006add5
mov ebp, ecx
shr ebp, 0x1f
add ebp, ecx
sar ebp, 1
add ebp, ecx
jmp 0x1006adda
mov ebp, 8
cmp ebp, ebx
cmovle ebp, ebx
cmp ecx, ebp
jge 0x1006ae1f
lea eax, [ebp*4]
push eax
call fcn.100485a0
add esp, 4
mov edi, eax
mov eax, dword [esi + 8]
test eax, eax
je 0x1006ae17
mov ecx, dword [esi]
shl ecx, 2
push ecx
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push dword [esi + 8]
call fcn.100485d0
add esp, 4
mov dword [esi + 8], edi
mov dword [esi + 4], ebp
mov eax, dword [esi]
cmp eax, ebx
jge 0x1006ae92
mov edx, ebx
sub edx, eax
mov ecx, eax
not ecx
add ecx, ebx
and edx, 3
je 0x1006ae4e
nop word cs:[eax + eax]
mov edi, dword [esi + 8]
mov dword [edi + eax*4], 0xbf800000
inc eax
dec edx
jne 0x1006ae40
cmp ecx, 3
jb 0x1006ae92
nop word cs:[eax + eax]
mov ecx, dword [esi + 8]
mov dword [ecx + eax*4], 0xbf800000
mov ecx, dword [esi + 8]
mov dword [ecx + eax*4 + 4], 0xbf800000
mov ecx, dword [esi + 8]
mov dword [ecx + eax*4 + 8], 0xbf800000
mov ecx, dword [esi + 8]
mov dword [ecx + eax*4 + 0xc], 0xbf800000
add eax, 4
cmp ebx, eax
jne 0x1006ae60
mov dword [esi], ebx
mov eax, dword [esi + 0x18]
cmp eax, ebx
jge 0x1006aef1
test eax, eax
je 0x1006aeac
mov ebp, eax
shr ebp, 0x1f
add ebp, eax
sar ebp, 1
add ebp, eax
jmp 0x1006aeb1
mov ebp, 8
cmp ebp, ebx
cmovle ebp, ebx
cmp eax, ebp
jge 0x1006aef1
mov eax, ebp
add eax, ebp
push eax
call fcn.100485a0
add esp, 4
mov edi, eax
mov eax, dword [esi + 0x1c]
test eax, eax
je 0x1006aeeb
mov ecx, dword [esi + 0x14]
add ecx, ecx
push ecx
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push dword [esi + 0x1c]
call fcn.100485d0
add esp, 4
mov dword [esi + 0x1c], edi
mov dword [esi + 0x18], ebp
mov eax, dword [esi + 0x14]
cmp eax, ebx
jge 0x1006af5e
mov edx, ebx
sub edx, eax
mov ecx, eax
not ecx
add ecx, ebx
and edx, 3
je 0x1006af1d
nop word [eax + eax]
mov edi, dword [esi + 0x1c]
mov word [edi + eax*2], 0xffff
inc eax
dec edx
jne 0x1006af10
cmp ecx, 3
jb 0x1006af5e
nop word cs:[eax + eax]
mov ecx, dword [esi + 0x1c]
mov word [ecx + eax*2], 0xffff
mov ecx, dword [esi + 0x1c]
mov word [ecx + eax*2 + 2], 0xffff
mov ecx, dword [esi + 0x1c]
mov word [ecx + eax*2 + 4], 0xffff
mov ecx, dword [esi + 0x1c]
mov word [ecx + eax*2 + 6], 0xffff
add eax, 4
cmp ebx, eax
jne 0x1006af30
mov dword [esi + 0x14], ebx
pop esi
pop edi
pop ebx
pop ebp
ret 4
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
Function at 0x1006b690
Capabilities:
Terminate process

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x14
mov dword [esp + 0x10], ecx
mov esi, dword [edx + 4]
mov ecx, dword [edx + 8]
xor edi, edi
mov eax, esi
mov ebx, 0
mov dword [esp], ecx
cmp esi, ecx
jl 0x1006b6bf
cmp eax, dword [esp]
jl 0x1006b6d3
or ebx, edi
jne 0x1006b6f1
jmp 0x1006b7f2
mov ebx, dword [edx]
lea eax, [esi + 1]
mov dword [edx + 4], eax
movzx ebx, byte [ebx + esi]
shl ebx, 8
cmp eax, dword [esp]
jge 0x1006b6b6
mov edi, dword [edx]
mov dword [esp + 4], esi
lea ebp, [eax + 1]
mov dword [edx + 4], ebp
movzx edi, byte [edi + eax]
mov eax, ebp
mov esi, dword [esp + 4]
or ebx, edi
je 0x1006b7f2
cmp eax, dword [esp]
jge 0x1006b835
mov dword [esp + 8], edx
mov ecx, dword [esp + 8]
mov ebp, dword [ecx]
lea edi, [eax + 1]
mov ecx, dword [esp + 8]
mov dword [ecx + 4], edi
mov dword [esp + 0xc], ebp
movzx ecx, byte [ebp + eax]
mov edx, dword [esp + 8]
mov eax, ecx
dec al
cmp al, 4
jae 0x1006b835
imul ebx, ecx
add edi, ebx
js 0x1006b835
cmp dword [esp], edi
jl 0x1006b835
mov eax, ecx
mov dword [edx + 4], edi
xor ebx, ebx
cmp edi, dword [esp]
jge 0x1006b75b
mov ecx, eax
lea eax, [edi + 1]
mov dword [edx + 4], eax
mov ebx, dword [esp + 0xc]
movzx ebx, byte [ebx + edi]
mov edi, eax
mov eax, ecx
cmp al, 1
je 0x1006b7e3
shl ebx, 8
xor ebp, ebp
cmp edi, dword [esp]
jge 0x1006b787
lea ecx, [edi + 1]
mov dword [esp + 4], ecx
mov dword [edx + 4], ecx
mov ecx, eax
mov eax, dword [esp + 0xc]
movzx ebp, byte [eax + edi]
mov eax, ecx
mov edi, dword [esp + 4]
or ebx, ebp
cmp al, 2
je 0x1006b7e3
shl ebx, 8
xor ebp, ebp
cmp edi, dword [esp]
jge 0x1006b7b1
lea ecx, [edi + 1]
mov dword [esp + 4], ecx
mov dword [edx + 4], ecx
mov ecx, eax
mov eax, dword [esp + 0xc]
movzx ebp, byte [eax + edi]
mov eax, ecx
mov edi, dword [esp + 4]
or ebx, ebp
cmp al, 3
je 0x1006b7e3
shl ebx, 8
xor eax, eax
cmp edi, dword [esp]
jge 0x1006b7e1
mov dword [esp + 4], esi
lea ebp, [edi + 1]
mov eax, dword [esp + 8]
mov dword [eax + 4], ebp
mov eax, dword [esp + 0xc]
movzx eax, byte [eax + edi]
mov edi, ebp
mov edx, dword [esp + 8]
mov esi, dword [esp + 4]
or ebx, eax
add edi, ebx
mov eax, edi
dec eax
js 0x1006b835
cmp dword [esp], eax
jl 0x1006b835
mov dword [edx + 4], eax
mov edi, eax
sub edi, esi
mov ebx, dword [esp + 0x10]
mov dword [ebx], 0
mov dword [ebx + 8], 0
mov dword [ebx + 4], 0
mov ebx, edi
or ebx, esi
js 0x1006b829
cmp dword [esp], esi
jl 0x1006b829
cmp dword [esp], eax
jl 0x1006b829
add esi, dword [edx]
mov eax, dword [esp + 0x10]
mov dword [eax], esi
mov dword [eax + 8], edi
mov eax, dword [esp + 0x10]
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x1006b840
Capabilities:
Terminate process

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x10
mov esi, dword [esp + 0x24]
test esi, esi
js 0x1006b9db
mov ebp, 0
mov eax, 0
test esi, esi
je 0x1006b86c
movzx eax, byte [edx]
shl eax, 8
mov ebp, 1
cmp ebp, esi
jae 0x1006b87a
movzx edi, byte [edx + ebp]
mov dword [esp], edi
inc ebp
jmp 0x1006b881
mov dword [esp], 0
mov dword [esp + 0xc], ecx
mov edi, dword [esp + 0x28]
cmp ebp, esi
jae 0x1006b894
movzx ebx, byte [edx + ebp]
inc ebp
jmp 0x1006b896
xor ebx, ebx
test edi, edi
js 0x1006b9db
or eax, dword [esp]
mov dword [esp + 8], eax
cmp eax, edi
jle 0x1006b9db
mov eax, ebx
dec al
cmp al, 4
jae 0x1006b9db
movzx eax, bl
imul edi, eax
add edi, ebp
js 0x1006b9db
cmp edi, esi
jg 0x1006b9db
xor ebp, ebp
cmp edi, esi
jge 0x1006b8da
movzx ebp, byte [edx + edi]
inc edi
cmp bl, 1
je 0x1006b919
shl ebp, 8
xor ecx, ecx
cmp edi, esi
jge 0x1006b8ed
movzx ecx, byte [edx + edi]
inc edi
or ebp, ecx
cmp bl, 2
je 0x1006b919
shl ebp, 8
xor ecx, ecx
cmp edi, esi
jge 0x1006b902
movzx ecx, byte [edx + edi]
inc edi
or ebp, ecx
cmp bl, 3
je 0x1006b919
shl ebp, 8
xor ecx, ecx
cmp edi, esi
jge 0x1006b917
movzx ecx, byte [edx + edi]
inc edi
or ebp, ecx
cmp bl, 1
mov dword [esp], eax
jne 0x1006b929
xor ebx, ebx
test al, 1
jne 0x1006b987
jmp 0x1006b995
mov dword [esp + 4], ebp
mov ebp, eax
and ebp, 0xfffffffe
xor ecx, ecx
jmp 0x1006b94f
movzx eax, byte [edx + edi]
inc edi
movzx eax, al
or ecx, eax
add ebp, 0xfffffffe
je 0x1006b977
cmp edi, esi
jge 0x1006b960
movzx eax, byte [edx + edi]
inc edi
jmp 0x1006b962
xor eax, eax
mov ebx, ecx
movzx ecx, al
shl ebx, 0x10
shl ecx, 8
or ecx, ebx
cmp edi, esi
jl 0x1006b940
xor eax, eax
jmp 0x1006b945
mov ebx, ecx
shl ebx, 8
mov eax, dword [esp]
mov ebp, dword [esp + 4]
test al, 1
je 0x1006b995
xor eax, eax
cmp edi, esi
jge 0x1006b991
movzx eax, byte [edx + edi]
or ebx, eax
mov ecx, ebx
sub ecx, ebp
mov eax, dword [esp + 8]
inc eax
imul eax, dword [esp]
lea ebx, [eax + ebp]
add ebx, 2
mov eax, dword [esp + 0xc]
mov dword [eax], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov edi, ecx
or edi, ebx
js 0x1006b9d3
sub esi, ebx
jl 0x1006b9d3
cmp esi, ecx
jl 0x1006b9d3
add edx, ebx
mov dword [eax], edx
mov dword [eax + 8], ecx
add esp, 0x10
pop esi
pop edi
pop ebx
pop ebp
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x1006b9f0
Capabilities:
Terminate process

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x1c
mov eax, dword [0x1025ad40]
xor eax, esp
mov dword [esp + 0x18], eax
mov eax, dword [ecx + 8]
test eax, eax
js 0x1006bbc1
mov esi, ecx
mov dword [ecx + 4], 0
je 0x1006bba6
xor ebp, ebp
mov dword [esp], edx
jmp 0x1006ba48
mov ebx, ebp
mov ecx, ebp
xor edi, edi
cmp edi, edx
je 0x1006bb3e
mov ebp, ebx
cmp ebx, eax
jge 0x1006bba2
cmp ebp, eax
jge 0x1006ba30
mov dword [esp + 4], ebp
mov ecx, ebp
jmp 0x1006ba64
cmp ecx, eax
jge 0x1006bad1
mov ebp, dword [esi]
movzx edx, byte [ebp + ecx]
cmp dl, 0x1c
jb 0x1006baf7
cmp dl, 0x1e
jne 0x1006bac0
cmp ecx, 0xfffffffe
jle 0x1006bbc1
inc ecx
mov dword [esi + 4], ecx
mov edi, ecx
nop dword [eax + eax]
cmp eax, edi
je 0x1006bae0
lea ecx, [edi + 1]
mov dword [esi + 4], ecx
movzx ebx, byte [ebp + edi]
mov edx, ebx
not edx
test dl, 0xf
je 0x1006ba60
and ebx, 0xfffffff0
mov edi, ecx
cmp ebx, 0xf0
jne 0x1006ba90
jmp 0x1006ba60
mov ecx, esi
call fcn.1006bcf0
mov ecx, dword [esi + 4]
mov eax, dword [esi + 8]
cmp ecx, eax
jl 0x1006ba64
mov ebx, ecx
jmp 0x1006bae4
mov ebx, eax
mov ecx, eax
xor edi, edi
mov ebp, dword [esp + 4]
mov edx, dword [esp]
cmp edi, edx
jne 0x1006ba3e
jmp 0x1006bb3e
lea ebx, [ecx + 1]
mov dword [esi + 4], ebx
movzx edi, byte [ebp + ecx]
cmp edi, 0xc
jne 0x1006bae6
mov dword [esp + 8], ebx
cmp ebx, eax
jge 0x1006bb20
lea edx, [ecx + 2]
mov dword [esp + 8], edx
mov dword [esi + 4], edx
movzx ebx, byte [ebp + ecx + 1]
jmp 0x1006bb22
xor ebx, ebx
mov ebp, dword [esp + 4]
mov edx, dword [esp]
movzx edi, bl
or edi, 0x100
mov ebx, dword [esp + 8]
cmp edi, edx
jne 0x1006ba3e
mov ebx, ecx
sub ebx, ebp
mov dword [esp + 0x10], 0
mov edi, ebx
or edi, ebp
js 0x1006bbae
cmp eax, ebp
jl 0x1006bbae
cmp eax, ecx
jl 0x1006bbae
add ebp, dword [esi]
mov dword [esp + 0xc], ebp
mov dword [esp + 0x14], ebx
cmp dword [esp + 0x30], 0
jle 0x1006bbae
test ebx, ebx
jle 0x1006bbae
mov edi, 1
lea esi, [esp + 0xc]
nop word cs:[eax + eax]
mov ecx, esi
call fcn.1006bcf0
mov ecx, dword [esp + 0x34]
mov dword [ecx + edi*4 - 4], eax
cmp edi, dword [esp + 0x30]
jge 0x1006bbae
inc edi
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x10], eax
jl 0x1006bb80
jmp 0x1006bbae
test eax, eax
js 0x1006bbae
mov dword [esp + 0x14], 0
mov ecx, dword [esp + 0x18]
xor ecx, esp
call fcn.10157981
add esp, 0x1c
pop esi
pop edi
pop ebx
pop ebp
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x1006bbd0
Capabilities:
Terminate process

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x34
mov edi, edx
mov esi, ecx
mov ebx, dword [esp + 0x48]
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x4c]
mov ebp, dword [0x1025ad40]
xor ebp, esp
mov dword [esp + 0x30], ebp
mov dword [esp + 0x1c], edi
mov dword [esp + 0x24], ebx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], eax
mov dword [esp + 0xc], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
lea eax, [esp + 0x28]
lea ecx, [esp + 0x10]
mov edx, 0x12
push eax
push 2
call fcn.1006b9f0
add esp, 8
mov ebp, dword [esp + 0x2c]
test ebp, ebp
je 0x1006bcb7
mov eax, dword [esp + 0x28]
test eax, eax
je 0x1006bcb7
mov ecx, eax
or ecx, ebp
js 0x1006bc6d
mov ecx, ebx
sub ecx, ebp
setl dl
cmp ecx, eax
setl cl
or cl, dl
add edi, ebp
xor edx, edx
test cl, cl
cmovne eax, edx
cmovne edi, edx
jmp 0x1006bc71
xor eax, eax
xor edi, edi
mov dword [esp], edi
mov dword [esp + 4], 0
mov dword [esp + 8], eax
lea eax, [esp + 0xc]
mov ecx, esp
mov edx, 0x13
push eax
push 1
call fcn.1006b9f0
add esp, 8
mov eax, dword [esp + 0xc]
test eax, eax
je 0x1006bcb7
add eax, ebp
js 0x1006bce0
cmp eax, ebx
jg 0x1006bce0
mov dword [esp + 0x20], eax
lea edx, [esp + 0x1c]
mov ecx, esi
call fcn.1006b690
jmp 0x1006bccb
mov dword [esi], 0
mov dword [esi + 8], 0
mov dword [esi + 4], 0
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.10157981
mov eax, esi
add esp, 0x34
pop esi
pop edi
pop ebx
pop ebp
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x1006bcf0
Capabilities:
Terminate process

Disassembly:
push ebp
push ebx
push edi
push esi
push eax
mov ebx, dword [ecx + 4]
mov edi, dword [ecx + 8]
cmp ebx, edi
jge 0x1006be33
mov ebp, dword [ecx]
lea esi, [ebx + 1]
mov dword [ecx + 4], esi
movzx eax, byte [ebp + ebx]
mov edx, eax
add dl, 0xe0
cmp dl, 0xd6
ja 0x1006bd26
add eax, 0xffffff75
mov ebp, eax
jmp 0x1006be29
mov edx, eax
add dl, 9
cmp dl, 3
ja 0x1006bd57
mov dword [esp], ebp
shl eax, 8
xor ebp, ebp
cmp esi, edi
jge 0x1006bd4a
lea edx, [ebx + 2]
mov dword [ecx + 4], edx
mov ecx, dword [esp]
movzx ebp, byte [ecx + ebx + 1]
add ebp, eax
add ebp, 0xffff096c
jmp 0x1006be29
mov edx, eax
add dl, 5
cmp dl, 3
ja 0x1006bd89
mov dword [esp], ebp
xor ebp, ebp
cmp esi, edi
jge 0x1006bd78
lea edx, [ebx + 2]
mov dword [ecx + 4], edx
mov ecx, dword [esp]
movzx ebp, byte [ecx + ebx + 1]
shl eax, 8
or eax, ebp
mov ebp, 0xfa94
sub ebp, eax
jmp 0x1006be29
cmp al, 0x1d
je 0x1006bdc1
cmp eax, 0x1c
jne 0x1006be33
mov edx, ebp
xor eax, eax
mov ebp, 0
cmp esi, edi
jge 0x1006bdb1
lea esi, [ebx + 2]
mov dword [ecx + 4], esi
movzx ebp, byte [edx + ebx + 1]
shl ebp, 8
cmp esi, edi
jge 0x1006be27
lea eax, [esi + 1]
mov dword [ecx + 4], eax
movzx eax, byte [edx + esi]
jmp 0x1006be27
mov dword [esp], ebp
xor eax, eax
mov ebp, 0
cmp esi, edi
jge 0x1006bde0
lea esi, [ebx + 2]
mov dword [ecx + 4], esi
mov edx, dword [esp]
movzx ebp, byte [edx + ebx + 1]
shl ebp, 8
cmp esi, edi
jge 0x1006bdf3
lea edx, [esi + 1]
mov dword [ecx + 4], edx
mov eax, dword [esp]
movzx eax, byte [eax + esi]
mov esi, edx
or ebp, eax
xor eax, eax
cmp esi, edi
jge 0x1006be0f
lea edx, [esi + 1]
mov dword [ecx + 4], edx
mov ebx, dword [esp]
movzx ebx, byte [ebx + esi]
shl ebx, 8
mov esi, edx
jmp 0x1006be11
xor ebx, ebx
shl ebp, 0x10
or ebp, ebx
cmp esi, edi
jge 0x1006be27
lea eax, [esi + 1]
mov dword [ecx + 4], eax
mov eax, dword [esp]
movzx eax, byte [eax + esi]
or ebp, eax
mov eax, ebp
add esp, 4
pop esi
pop edi
pop ebx
pop ebp
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3

Function at 0x1006be40
Capabilities:
Terminate process

Disassembly:
push ebx
push edi
push esi
cmp dword [ecx + 0x3c], 0
jne 0x1006bea4
mov eax, 0xffffffff
cmp dword [ecx + 0xc], edx
jle 0x1006bea0
mov ebx, dword [ecx + 0x30]
cmp ebx, 1
jg 0x1006bea0
mov edi, dword [ecx + 4]
mov esi, dword [ecx + 0x18]
add edi, dword [ecx + 0x10]
test ebx, ebx
je 0x1006be75
mov eax, dword [edi + edx*4]
mov ecx, dword [edi + edx*4 + 4]
bswap eax
bswap ecx
jmp 0x1006be94
movzx eax, byte [edi + edx*2]
movzx ecx, byte [edi + edx*2 + 1]
shl eax, 9
lea eax, [eax + ecx*2]
movzx ecx, byte [edi + edx*2 + 2]
movzx edx, byte [edi + edx*2 + 3]
shl ecx, 9
lea ecx, [ecx + edx*2]
add esi, eax
cmp eax, ecx
mov eax, 0xffffffff
cmovne eax, esi
pop esi
pop edi
pop ebx
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x1006ea50
Capabilities:
Terminate process

Disassembly:
push esi
movss xmm5, dword [esp + 0xc]
ucomiss xmm1, xmm5
jne 0x1006ea60
jp 0x1006ea60
pop esi
ret
ucomiss xmm5, xmm1
jbe 0x1006ebad
mov eax, dword [esp + 8]
movss xmm4, dword [eax + 0x14]
movss xmm3, dword [eax + 0x18]
ucomiss xmm3, xmm4
jb 0x1006ebad
ucomiss xmm1, xmm3
ja 0x1006ea5e
ucomiss xmm4, xmm5
ja 0x1006ea5e
ucomiss xmm4, xmm1
jbe 0x1006eaba
movaps xmm6, xmm2
subss xmm6, xmm0
movaps xmm7, xmm4
subss xmm7, xmm1
mulss xmm7, xmm6
movaps xmm6, xmm5
subss xmm6, xmm1
divss xmm7, xmm6
addss xmm0, xmm7
ucomiss xmm5, xmm3
ja 0x1006eac2
movaps xmm3, xmm5
jmp 0x1006eae0
movaps xmm4, xmm1
ucomiss xmm5, xmm3
jbe 0x1006eab5
movaps xmm1, xmm2
subss xmm1, xmm0
movaps xmm6, xmm3
subss xmm6, xmm5
mulss xmm6, xmm1
subss xmm5, xmm4
divss xmm6, xmm5
addss xmm2, xmm6
xorps xmm1, xmm1
cvtsi2ss xmm1, edx
ucomiss xmm0, xmm1
jne 0x1006eb2d
jp 0x1006eb2d
lea esi, [edx + 1]
xorps xmm5, xmm5
cvtsi2ss xmm5, esi
ucomiss xmm5, xmm2
jb 0x1006ebad
ucomiss xmm0, xmm5
jne 0x1006eb2d
jp 0x1006eb2d
ucomiss xmm2, xmm1
jb 0x1006ebad
ucomiss xmm1, xmm0
jb 0x1006eb2d
ucomiss xmm1, xmm2
jb 0x1006ebad
ucomiss xmm0, xmm5
jb 0x1006eb2d
ucomiss xmm2, xmm5
jb 0x1006ebad
ucomiss xmm1, xmm0
jb 0x1006eb4c
ucomiss xmm1, xmm2
jb 0x1006eb4c
subss xmm3, xmm4
mulss xmm3, dword [eax + 0x10]
addss xmm3, dword [ecx + edx*4]
movss dword [ecx + edx*4], xmm3
pop esi
ret
lea esi, [edx + 1]
xorps xmm5, xmm5
cvtsi2ss xmm5, esi
ucomiss xmm0, xmm5
jb 0x1006eb64
ucomiss xmm2, xmm5
jae 0x1006ea5e
ucomiss xmm0, xmm1
jb 0x1006ebad
ucomiss xmm5, xmm0
jb 0x1006ebad
ucomiss xmm2, xmm1
jb 0x1006ebad
ucomiss xmm5, xmm2
jb 0x1006ebad
subss xmm3, xmm4
mulss xmm3, dword [eax + 0x10]
subss xmm0, xmm1
subss xmm2, xmm1
addss xmm2, xmm0
mulss xmm2, dword [0x101a9d94]
addss xmm2, dword [0x101a8280]
mulss xmm2, xmm3
addss xmm2, dword [ecx + edx*4]
movss dword [ecx + edx*4], xmm2
pop esi
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x100731f0
Capabilities:
Terminate process

Disassembly:
push ebx
push edi
push esi
sub esp, 0x20
mov eax, dword [0x1025ad40]
xor eax, esp
mov dword [esp + 0x1c], eax
mov eax, dword [0x1025afd0]
mov ecx, dword [eax + 0x19e4]
mov byte [ecx + 0x7c], 1
mov edi, dword [eax + 0x19e4]
cmp byte [edi + 0x7f], 0
jne 0x100732ef
mov ebx, dword [esp + 0x34]
movss xmm1, dword [ebx]
xorps xmm0, xmm0
ucomiss xmm1, xmm0
jne 0x10073236
jnp 0x10073305
movss xmm1, dword [ebx + 4]
ucomiss xmm1, xmm0
jne 0x10073246
jnp 0x10073305
mov ecx, edi
push 0
push dword [esp + 0x34]
call fcn.1004b380
mov esi, eax
movss xmm0, dword [ebx]
movss xmm1, dword [ebx + 4]
sub esp, 0x14
movss dword [esp + 8], xmm1
movss dword [esp + 4], xmm0
lea ebx, [esp + 0x28]
mov dword [esp], ebx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call fcn.1004c980
add esp, 0x14
mov eax, dword [edi + 0xc8]
mov ecx, dword [edi + 0xcc]
movsd xmm0, qword [edi + 0xc8]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
movsd xmm1, qword [esp + 0x14]
addps xmm1, xmm0
movlps qword [esp + 0xc], xmm1
push 0
push ebx
call fcn.1004bdd0
add esp, 8
lea edi, [esp + 4]
push 0
push esi
push edi
call fcn.1004c080
add esp, 0xc
test al, al
je 0x100732ef
lea eax, [esp + 2]
lea ecx, [esp + 3]
push 0
push eax
push ecx
push esi
push edi
call fcn.10072260
add esp, 0x14
mov ebx, eax
jmp 0x100732f1
xor ebx, ebx
mov ecx, dword [esp + 0x1c]
xor ecx, esp
call fcn.10157981
mov eax, ebx
add esp, 0x20
pop esi
pop edi
pop ebx
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x10078fc0
Capabilities:
Terminate process

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x4c
mov ebp, dword [esp + 0x74]
mov eax, dword [0x1025ad40]
xor eax, esp
mov dword [esp + 0x48], eax
mov esi, dword [0x1025afd0]
cmp dword [esi + 0x2c40], 0
jne 0x10078fea
call fcn.1004bd00
mov edi, dword [esp + 0x6c]
movzx ecx, byte [ebp]
test cl, cl
je 0x100790a3
mov eax, ebp
jmp 0x10079018
xor edx, edx
cmp cl, 0x25
sete dl
movzx ecx, byte [eax + edx + 1]
add eax, edx
inc eax
test cl, cl
je 0x100790a3
cmp cl, 0x25
jne 0x10079000
cmp byte [eax + 1], 0x25
je 0x10079000
mov dl, 0x25
mov ebx, 0x25
mov ecx, 2
mov edi, 0x900
mov ebp, 0x2480a80
jmp 0x10079056
dec bl
movzx edx, bl
bt edi, edx
jae 0x10079072
movsx ebx, byte [eax + ecx - 1]
inc ecx
mov edx, ebx
test ebx, ebx
je 0x10079099
mov dh, dl
add dh, 0xbf
cmp dh, 0x19
jbe 0x10079040
add dl, 0x9f
cmp dl, 0x19
ja 0x1007904a
dec bl
movzx edx, bl
bt ebp, edx
jb 0x1007904a
cmp byte [eax + ecx - 1], 0
mov edi, dword [esp + 0x6c]
je 0x100790a1
cmp ecx, 0x20
mov edx, 0x20
cmovb edx, ecx
lea ebp, [esp + 0x28]
push edx
push eax
push ebp
call fcn.10048570
add esp, 0xc
jmp 0x100790a3
mov ebp, eax
mov edi, dword [esp + 0x6c]
jmp 0x100790a3
mov ebp, eax
mov ecx, dword [esp + 0x70]
cmp edi, 1
ja 0x100790c7
mov edi, esi
lea eax, [esp + 8]
push dword [ecx]
push ebp
push 0x20
push eax
call fcn.100486b0
add esp, 0x10
mov ebp, 0x11
jmp 0x10079136
mov eax, edi
and eax, 0xfffffffe
cmp eax, 2
jne 0x100790ef
mov edi, esi
lea eax, [esp + 8]
push dword [ecx + 4]
push dword [ecx]
push ebp
push 0x20
push eax
call fcn.100486b0
add esp, 0x14
mov ebp, 0x11
jmp 0x10079136
cmp edi, 5
je 0x10079107
cmp edi, 4
jne 0x100791cb
movss xmm0, dword [ecx]
cvtss2sd xmm0, xmm0
jmp 0x1007910b
movsd xmm0, qword [ecx]
mov edi, esi
sub esp, 0x14
movsd qword [esp + 0xc], xmm0
mov dword [esp + 8], ebp
lea eax, [esp + 0x1c]
mov dword [esp], eax
mov dword [esp + 4], 0x20
call fcn.100486b0
add esp, 0x14
mov ebp, 0x20010
mov esi, dword [esp + 0x60]
lea ebx, [esp + 8]
push ebx
call fcn.10048630
add esp, 4
movsd xmm0, qword [esi]
movsd xmm1, qword [esi + 8]
subps xmm1, xmm0
movlps qword [esp], xmm1
mov eax, esp
push 0
push 0
push ebp
push eax
push 0x20
push ebx
push dword [esp + 0x80]
call fcn.1007dc60
add esp, 0x1c
cmp dword [edi + 0x2c40], 0
je 0x1007919e
test al, al
je 0x100791b4
mov edx, dword [edi + 0x1d90]
lea ecx, [esp + 8]
push 0
push dword [esp + 0x74]
push dword [esp + 0x74]
call fcn.10080b30
add esp, 0xc
mov ebx, eax
jmp 0x100791b6
mov ecx, dword [esp + 0x64]
cmp dword [edi + 0x1a04], ecx
jne 0x100791cb
mov dword [edi + 0x2c40], ecx
test al, al
jne 0x1007917e
xor ebx, ebx
mov ecx, dword [esp + 0x48]
xor ecx, esp
call fcn.10157981
mov eax, ebx
add esp, 0x4c
pop esi
pop edi
pop ebx
pop ebp
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x100791e0
Capabilities:
Terminate process

Disassembly:
push ebx
push edi
push esi
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x10]
cmp edi, 1
ja 0x10079203
push dword [esi]
push eax
push edx
push ecx
call fcn.100486b0
add esp, 0x10
jmp 0x1007924b
mov ebx, edi
and ebx, 0xfffffffe
cmp ebx, 2
jne 0x10079217
push dword [esi + 4]
push dword [esi]
push eax
push edx
push ecx
jmp 0x10079243
cmp edi, 5
je 0x1007922b
cmp edi, 4
jne 0x1007924f
movss xmm0, dword [esi]
cvtss2sd xmm0, xmm0
jmp 0x1007922f
movsd xmm0, qword [esi]
sub esp, 0x14
movsd qword [esp + 0xc], xmm0
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.100486b0
add esp, 0x14
pop esi
pop edi
pop ebx
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x10080f00
Capabilities:
Terminate process

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xc
mov eax, dword [esp + 0x2c]
mov ecx, dword [0x1025ad40]
xor ecx, esp
mov dword [esp + 8], ecx
test eax, 0x100000
jne 0x10080f61
mov edi, dword [esp + 0x34]
mov ebx, dword [esp + 0x30]
mov esi, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
xorps xmm0, xmm0
movlps qword [esp], xmm0
mov ebp, esp
push edi
push ebx
push eax
push ebp
push esi
push edx
push ecx
call fcn.1007dc60
add esp, 0x1c
mov ebx, eax
mov ecx, dword [esp + 8]
xor ecx, esp
call fcn.10157981
mov eax, ebx
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3