joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1007dcd0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov edx, ecx
test dword [ebp + 0x10], 0xff000000
push ebx
push esi
push edi
je 0x1007dde6
mov esi, dword [ebp + 0x18]
mov ebx, dword [ebp + 0x14]
test esi, esi
jne 0x1007dd03
mov ecx, ebx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1007dcf7
sub ecx, esi
lea esi, [ecx + ebx]
cmp ebx, esi
je 0x1007dde6
mov edi, dword [ebp + 8]
test edi, edi
jne 0x1007dd18
mov eax, dword [edx + 0x28]
mov edi, dword [eax + 8]
ucomiss xmm2, dword [0x101625e4]
lahf
test ah, 0x44
jp 0x1007dd2d
mov eax, dword [edx + 0x28]
movss xmm2, dword [eax + 0xc]
mov eax, dword [edx + 0x48]
test eax, eax
jle 0x1007ddef
mov eax, dword [edi + 0x38]
mov ebx, dword [edx + 0x48]
mov ecx, dword [edx + 0x50]
mov eax, dword [eax + 8]
cmp eax, dword [ecx + ebx*4 - 4]
mov ebx, dword [ebp + 0x14]
jne 0x1007ddef
mov ecx, dword [edx + 0x3c]
test ecx, ecx
jle 0x1007ddef
mov eax, dword [edx + 0x44]
shl ecx, 4
movups xmm0, xmmword [ecx + eax - 0x10]
mov eax, dword [ebp + 0x20]
movups xmmword [ebp - 0x14], xmm0
test eax, eax
je 0x1007ddbb
movss xmm1, dword [eax]
movss xmm0, dword [ebp - 0x14]
comiss xmm0, xmm1
jae 0x1007dd85
movss dword [ebp - 0x14], xmm1
movss xmm1, dword [eax + 4]
movss xmm0, dword [ebp - 0x10]
comiss xmm0, xmm1
jae 0x1007dd99
movss dword [ebp - 0x10], xmm1
movss xmm0, dword [eax + 8]
comiss xmm0, dword [ebp - 0xc]
ja 0x1007dda9
movss dword [ebp - 0xc], xmm0
movss xmm0, dword [eax + 0xc]
comiss xmm0, dword [ebp - 8]
ja 0x1007ddb9
movss dword [ebp - 8], xmm0
test eax, eax
movss xmm0, dword [ebp + 0x1c]
setne al
movzx eax, al
push eax
push ecx
movss dword [esp], xmm0
lea eax, [ebp - 0x14]
push esi
push ebx
push eax
mov eax, dword [ebp + 0xc]
mov ecx, edi
push dword [ebp + 0x10]
push dword [eax + 4]
push dword [eax]
push edx
call fcn.10080ff0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x1c
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x1007de00
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
test dword [ebp + 0xc], 0xff000000
push ebx
push esi
push edi
mov esi, ecx
je 0x1007de90
mov edi, dword [ebp + 0x10]
mov edx, edi
lea ecx, [edx + 1]
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x1007de20
sub edx, ecx
lea eax, [edx + edi]
mov dword [ebp + 0x10], eax
cmp edi, eax
je 0x1007de90
mov edx, dword [esi + 0x28]
mov ebx, dword [esi + 0x48]
mov eax, dword [edx + 8]
test ebx, ebx
jle 0x1007de99
mov eax, dword [eax + 0x38]
mov ecx, dword [esi + 0x50]
mov eax, dword [eax + 8]
cmp eax, dword [ecx + ebx*4 - 4]
jne 0x1007de99
mov ecx, dword [esi + 0x3c]
test ecx, ecx
jle 0x1007de99
mov eax, dword [esi + 0x44]
movss xmm2, dword [edx + 0xc]
push 0
shl ecx, 4
push ecx
mov dword [esp], 0
push dword [ebp + 0x10]
movups xmm0, xmmword [ecx + eax - 0x10]
mov ecx, dword [edx + 8]
lea eax, [ebp - 0x10]
push edi
push eax
mov eax, dword [ebp + 8]
push dword [ebp + 0xc]
movups xmmword [ebp - 0x10], xmm0
push dword [eax + 4]
push dword [eax]
push esi
call fcn.10080ff0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3

Function at 0x1007deb0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
mov ebx, dword [ebp + 0x1c]
push esi
push edi
mov edi, ecx
test ebx, 0xff000000
je 0x1007df6f
mov edx, dword [edi + 0x48]
test edx, edx
je 0x1007dee7
jle 0x1007df5c
mov eax, dword [edi + 0x50]
mov ecx, dword [ebp + 8]
cmp ecx, dword [eax + edx*4 - 4]
jne 0x1007dee7
mov byte [ebp - 1], 0
jmp 0x1007df30
mov ecx, dword [edi + 0x4c]
mov byte [ebp - 1], 1
cmp edx, ecx
jne 0x1007df1d
lea ebx, [edx + 1]
test ecx, ecx
je 0x1007df04
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x1007df09
mov eax, 8
cmp eax, ebx
lea ecx, [edi + 0x48]
cmovg ebx, eax
push ebx
call fcn.100746c0
mov edx, dword [edi + 0x48]
mov ebx, dword [ebp + 0x1c]
mov eax, dword [edi + 0x50]
mov ecx, dword [ebp + 8]
mov dword [eax + edx*4], ecx
mov ecx, edi
inc dword [edi + 0x48]
call fcn.1007bb10
push 4
push 6
mov ecx, edi
call fcn.1007c000
push ebx
push dword [ebp + 0x18]
mov ecx, edi
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
call fcn.1007c090
cmp byte [ebp - 1], 0
je 0x1007df6f
mov eax, dword [edi + 0x48]
test eax, eax
jg 0x1007df64
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
dec eax
mov ecx, edi
mov dword [edi + 0x48], eax
call fcn.1007bb10
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
Function at 0x1007e010
Capabilities:
Terminate process

Disassembly:
push esi
mov esi, ecx
cmp byte [esi], 0
jne 0x1007e072
mov ecx, dword [esi + 0x14]
test ecx, ecx
je 0x1007e03d
mov eax, dword [0x101e0c0c]
test eax, eax
je 0x1007e02e
dec dword [eax + 0x36c]
push dword [0x101e0c08]
push ecx
call fcn.10062c60
add esp, 8
mov ecx, dword [esi + 0x18]
test ecx, ecx
je 0x1007e062
mov eax, dword [0x101e0c0c]
test eax, eax
je 0x1007e053
dec dword [eax + 0x36c]
push dword [0x101e0c08]
push ecx
call fcn.10062c60
add esp, 8
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0
pop esi
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x1007e080
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
mov ebx, ecx
push esi
push edi
cmp byte [ebx], 0
jne 0x1007e240
mov esi, dword [ebp + 8]
cmp dword [esi], 0
je 0x1007e240
cmp dword [esi + 4], 0
jle 0x1007e240
movss xmm0, dword [esi + 0x10]
comiss xmm0, dword [0x101625e4]
jbe 0x1007e240
cmp byte [esi + 0x3c], 0
jne 0x1007e113
mov eax, dword [0x101e0c0c]
test eax, eax
je 0x1007e0d1
inc dword [eax + 0x36c]
push dword [0x101e0c08]
push 0x58
call fcn.10062c40
add esp, 8
mov dword [ebp - 8], eax
test eax, eax
je 0x1007e100
mov ecx, eax
call fcn.10080600
mov dword [ebp - 8], eax
lea ecx, [ebx + 0x34]
lea eax, [ebp - 8]
push eax
call fcn.10074760
jmp 0x1007e11d
xor eax, eax
lea ecx, [ebx + 0x34]
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
call fcn.10074760
jmp 0x1007e11d
cmp dword [ebx + 0x34], 0
je 0x1007e240
mov edi, dword [ebx + 0x4c]
mov ecx, dword [ebx + 0x50]
cmp edi, ecx
jne 0x1007e1b1
inc edi
test ecx, ecx
je 0x1007e13b
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x1007e140
mov eax, 8
cmp eax, edi
cmovg edi, eax
cmp edi, ecx
jle 0x1007e1b1
mov eax, dword [0x101e0c0c]
test eax, eax
je 0x1007e158
inc dword [eax + 0x36c]
push dword [0x101e0c08]
imul eax, edi, 0x74
push eax
call fcn.10062c40
mov edx, dword [ebx + 0x54]
add esp, 8
mov dword [ebp - 8], eax
test edx, edx
je 0x1007e1ab
imul ecx, dword [ebx + 0x4c], 0x74
push ecx
push edx
push eax
call sub.VCRUNTIME140.dll_memcpy
mov ecx, dword [ebx + 0x54]
add esp, 0xc
test ecx, ecx
je 0x1007e199
mov eax, dword [0x101e0c0c]
test eax, eax
je 0x1007e199
dec dword [eax + 0x36c]
push dword [0x101e0c08]
push ecx
call fcn.10062c60
mov eax, dword [ebp - 8]
add esp, 8
mov dword [ebx + 0x54], eax
mov dword [ebx + 0x50], edi
imul eax, dword [ebx + 0x4c], 0x74
mov ecx, 0x1d
mov edi, dword [ebx + 0x54]
add edi, eax
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebx + 0x4c]
inc eax
mov dword [ebx + 0x4c], eax
test eax, eax
jle 0x1007e240
mov edi, dword [ebx + 0x54]
imul esi, eax, 0x74
cmp dword [edi + esi - 4], 0
jne 0x1007e1eb
mov ecx, dword [ebx + 0x34]
test ecx, ecx
jle 0x1007e240
mov eax, dword [ebx + 0x3c]
mov eax, dword [eax + ecx*4 - 4]
mov dword [edi + esi - 4], eax
cmp byte [edi + esi - 0x6c], 0
jne 0x1007e22c
mov eax, dword [0x101e0c0c]
mov ecx, dword [edi + esi - 0x70]
test eax, eax
je 0x1007e205
inc dword [eax + 0x36c]
push dword [0x101e0c08]
push ecx
call fcn.10062c40
mov ecx, dword [ebp + 8]
push dword [edi + esi - 0x70]
mov dword [edi + esi - 0x74], eax
mov byte [edi + esi - 0x6c], 1
push dword [ecx]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x14
mov ecx, ebx
call fcn.1007e010
mov eax, dword [edi + esi - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x1007e330
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x110
mov eax, dword [0x1016c008]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, ecx
mov ecx, dword [ebp + 0x10]
push ebx
mov ebx, dword [ebp + 8]
push esi
cmp byte [eax], 0
mov esi, dword [ebp + 0xc]
push edi
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x104], ecx
jne 0x1007e455
push ecx
lea eax, [ebp - 0x100]
mov dword [ebp - 0x100], 0
push eax
mov ecx, ebx
call fcn.10063690
add esp, 8
mov dword [ebp - 0x108], eax
test eax, eax
je 0x1007e455
test esi, esi
je 0x1007e3a9
mov ecx, 0x1d
lea edi, [ebp - 0xfc]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xfc]
jmp 0x1007e3b4
lea ecx, [ebp - 0xfc]
call fcn.1007df80
mov ecx, 0x1d
lea edi, [ebp - 0x84]
mov esi, eax
rep movsd dword es:[edi], dword [esi]
cmp byte [ebp - 0x3c], 0
jne 0x1007e416
mov ecx, ebx
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1007e3d0
sub ecx, edx
lea eax, [ecx + ebx]
cmp eax, ebx
jbe 0x1007e3f2
mov dl, byte [eax - 1]
cmp dl, 0x2f
je 0x1007e3f2
cmp dl, 0x5c
je 0x1007e3f2
dec eax
cmp eax, ebx
ja 0x1007e3e0
movsd xmm0, qword [0x101627f0]
sub esp, 8
movsd qword [esp], xmm0
push eax
push str._s___.0fpx
lea eax, [ebp - 0x3c]
push 0x28
push eax
call fcn.10063400
add esp, 0x18
push dword [ebp - 0x104]
movss xmm3, dword [0x10162840]
lea eax, [ebp - 0x84]
mov ecx, dword [ebp - 0x10c]
push eax
push dword [ebp - 0x100]
push dword [ebp - 0x108]
call fcn.1007e460
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1012838d
mov esp, ebp
pop ebp
ret 0xc
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3

Function at 0x1007e460
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x104
mov eax, dword [0x1016c008]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov edx, ecx
push ebx
mov ebx, dword [ebp + 0x14]
push esi
cmp byte [edx], 0
mov esi, dword [ebp + 0x10]
push edi
mov dword [ebp - 0x84], eax
jne 0x1007e512
test esi, esi
je 0x1007e4a3
mov ecx, 0x1d
lea edi, [ebp - 0x80]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x80]
jmp 0x1007e4ab
lea ecx, [ebp - 0x80]
call fcn.1007df80
mov ecx, 0x1d
lea edi, [ebp - 0x100]
mov esi, eax
rep movsd dword es:[edi], dword [esi]
cmp dword [ebp - 0x100], 0
jne 0x1007e512
mov eax, dword [ebp - 0x84]
test ebx, ebx
mov dword [ebp - 0x100], eax
mov ecx, edx
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xd0]
cmovne eax, ebx
movss dword [ebp - 0xf0], xmm3
mov dword [ebp - 0xd0], eax
lea eax, [ebp - 0x100]
push eax
call fcn.1007e080
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1012838d
mov esp, ebp
pop ebp
ret 0x10
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x1007e520
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x118
mov eax, dword [0x1016c008]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x9c], ecx
mov ecx, edi
mov dword [ebp - 0x90], eax
mov eax, dword [ebp + 0x10]
movss dword [ebp - 0x98], xmm2
mov dword [ebp - 0x94], eax
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1007e560
sub ecx, edx
mov eax, 0x66666667
add ecx, 4
imul ecx
mov ecx, dword [0x101e0c0c]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
shl eax, 2
test ecx, ecx
je 0x1007e58f
inc dword [ecx + 0x36c]
push dword [0x101e0c08]
push eax
call fcn.10062c40
mov bh, byte [edi]
add esp, 8
mov esi, eax
mov dword [ebp - 0x8c], esi
test bh, bh
je 0x1007e65d
lea eax, [esi + 2]
add edi, 2
mov dword [ebp - 0x88], eax
mov esi, eax
nop
movsx eax, byte [edi + 2]
lea edi, [edi + 5]
xor ecx, ecx
mov bl, byte [edi - 5]
cmp byte [edi - 3], 0x5c
lea esi, [esi + 4]
setge cl
add ecx, 0x23
sub eax, ecx
imul ecx, eax, 0x55
xor eax, eax
cmp byte [edi - 4], 0x5c
setge al
add eax, 0x23
sub ecx, eax
movsx eax, byte [edi - 4]
add ecx, eax
xor eax, eax
imul ecx, ecx, 0x55
cmp bl, 0x5c
setge al
add eax, 0x23
sub ecx, eax
movsx eax, bl
add ecx, eax
xor eax, eax
imul ecx, ecx, 0x55
cmp byte [edi - 6], 0x5c
setge al
add eax, 0x23
sub ecx, eax
movsx eax, byte [edi - 6]
add ecx, eax
xor eax, eax
imul ecx, ecx, 0x55
cmp bh, 0x5c
setge al
add eax, 0x23
sub ecx, eax
movsx eax, bh
add ecx, eax
mov eax, ecx
mov byte [esi - 6], cl
shr eax, 8
mov byte [esi - 5], al
mov eax, ecx
shr eax, 0x10
shr ecx, 0x18
mov byte [esi - 4], al
mov byte [esi - 3], cl
mov bh, byte [edi - 2]
test bh, bh
jne 0x1007e5c0
mov esi, dword [ebp - 0x8c]
movzx ebx, byte [esi + 8]
movzx eax, byte [esi + 9]
shl ebx, 8
add ebx, eax
movzx eax, byte [esi + 0xa]
shl ebx, 8
add ebx, eax
movzx eax, byte [esi + 0xb]
shl ebx, 8
add ebx, eax
mov eax, dword [0x101e0c0c]
test eax, eax
je 0x1007e68b
inc dword [eax + 0x36c]
push dword [0x101e0c08]
push ebx
call fcn.10062c40
add esp, 4
mov dword [ebp - 0x88], eax
mov edx, esi
mov ecx, eax
call fcn.10081d60
mov eax, dword [ebp - 0x90]
add esp, 4
test eax, eax
je 0x1007e6cd
mov esi, eax
lea edi, [ebp - 0x84]
mov ecx, 0x1d
lea eax, [ebp - 0x84]
rep movsd dword es:[edi], dword [esi]
jmp 0x1007e6d8
lea ecx, [ebp - 0x84]
call fcn.1007df80
mov ecx, 0x1d
lea edi, [ebp - 0x114]
mov esi, eax
rep movsd dword es:[edi], dword [esi]
cmp dword [ebp - 0x114], 0
je 0x1007e6f8
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
push dword [ebp - 0x94]
movss xmm3, dword [ebp - 0x98]
lea eax, [ebp - 0x114]
mov ecx, dword [ebp - 0x9c]
push eax
push ebx
push dword [ebp - 0x88]
mov byte [ebp - 0x10c], 1
call fcn.1007e460
mov ecx, dword [0x101e0c0c]
mov esi, eax
test ecx, ecx
je 0x1007e738
dec dword [ecx + 0x36c]
push dword [0x101e0c08]
push dword [ebp - 0x8c]
call fcn.10062c60
mov ecx, dword [ebp - 8]
add esp, 8
mov eax, esi
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.1012838d
mov esp, ebp
pop ebp
ret 0xc
Function at 0x10080150
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1012e86d
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x1016c008]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, edx
mov dword [ebp - 0x10], edi
mov esi, ecx
test edi, edi
je 0x100802f6
mov eax, dword [esi + 0x40]
cmp eax, 1
jl 0x100802f6
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x14], 0
push eax
lea ecx, [ebp - 0x1c]
mov dword [ebp - 4], 0
call fcn.10081fe0
mov ebx, dword [ebp - 0x1c]
mov eax, ebx
shl eax, 4
push eax
push 0
push dword [ebp - 0x14]
call sub.VCRUNTIME140.dll_memset
mov eax, dword [esi + 0x40]
add esp, 0xc
xor ecx, ecx
test eax, eax
jle 0x10080220
mov edx, dword [ebp - 0x14]
xor edi, edi
add edx, 6
cmp ecx, eax
jge 0x100802f6
mov eax, dword [esi + 0x48]
movzx eax, word [eax + edi + 4]
cmp ecx, ebx
jge 0x100802f6
mov word [edx - 2], ax
cmp ecx, dword [esi + 0x40]
jge 0x100802f6
mov eax, dword [esi + 0x48]
inc ecx
mov ax, word [eax + edi + 6]
add edi, 0x1c
mov word [edx], ax
add edx, 0x10
mov eax, dword [esi + 0x40]
cmp ecx, eax
jl 0x100801e7
mov edi, dword [ebp - 0x10]
test ebx, ebx
jle 0x100802f6
mov edx, dword [ebp - 0x14]
mov ecx, edi
push ebx
call fcn.10074fa0
mov edx, dword [ebp - 0x14]
xor edi, edi
mov eax, dword [ebp - 0x1c]
add esp, 4
xor ebx, ebx
add edx, 8
cmp edi, eax
jge 0x100802f6
cmp dword [edx + 4], 0
je 0x100802ad
movzx ecx, word [edx]
cmp edi, dword [esi + 0x40]
jge 0x100802f6
mov eax, dword [esi + 0x48]
mov word [eax + ebx + 8], cx
movzx ecx, word [edx + 2]
cmp edi, dword [esi + 0x40]
jge 0x100802f6
mov eax, dword [esi + 0x48]
mov word [eax + ebx + 0xa], cx
cmp edi, dword [esi + 0x40]
jge 0x100802f6
mov ecx, dword [esi + 0x48]
mov ax, word [edx - 4]
cmp ax, word [ecx + ebx + 4]
jne 0x100802f6
movzx eax, word [edx - 2]
cmp ax, word [ecx + ebx + 6]
jne 0x100802f6
mov ecx, eax
movzx eax, word [edx + 2]
add ecx, eax
mov eax, dword [ebp - 0x1c]
cmp dword [esi + 0x20], ecx
cmovge ecx, dword [esi + 0x20]
mov dword [esi + 0x20], ecx
inc edi
add ebx, 0x1c
add edx, 0x10
cmp edi, eax
jl 0x1008024b
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x14]
test ecx, ecx
je 0x100802e4
mov eax, dword [0x101e0c0c]
test eax, eax
je 0x100802d5
dec dword [eax + 0x36c]
push dword [0x101e0c08]
push ecx
call fcn.10062c60
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x10080490
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
push edi
mov edi, ecx
call fcn.10080300
mov eax, dword [edi + 0x40]
xor ecx, ecx
mov dword [ebp - 4], ecx
test eax, eax
jle 0x100805c7
xor esi, esi
mov dword [ebp - 8], esi
cmp ecx, eax
jge 0x100805f4
mov ebx, dword [edi + 0x48]
mov edx, eax
add ebx, esi
cmp dword [ebx + 0x18], 0
je 0x100805b3
cmp dword [ebx], 0x10000
ja 0x100805b3
mov eax, dword [ebx + 0x18]
cmp dword [eax + 0x38], edi
jne 0x100805f4
cmp dword [edi + 0x1c], 0
jle 0x100805f4
cmp dword [edi + 0x20], 0
jle 0x100805f4
movzx eax, word [ebx + 8]
mov ecx, 0xffff
cmp ax, cx
je 0x100805f4
movzx esi, word [ebx + 4]
sub esp, 0x1c
movzx ecx, word [ebx + 0xa]
movzx edx, word [ebx + 6]
movss xmm0, dword [ebx + 0xc]
movd xmm6, eax
add eax, esi
movss dword [esp + 0x18], xmm0
movd xmm3, ecx
cvtdq2ps xmm3, xmm3
movd xmm2, eax
lea eax, [edx + ecx]
mulss xmm3, dword [edi + 0x28]
mov ecx, dword [ebx + 0x18]
movd xmm1, eax
cvtdq2ps xmm2, xmm2
cvtdq2ps xmm1, xmm1
mulss xmm2, dword [edi + 0x24]
mulss xmm1, dword [edi + 0x28]
movd xmm0, edx
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm6, xmm6
addss xmm0, dword [ebx + 0x14]
mulss xmm6, dword [edi + 0x24]
movss dword [esp + 0x14], xmm1
movss dword [esp + 0x10], xmm2
movss xmm2, dword [ebx + 0x10]
movss dword [esp + 0xc], xmm3
movss xmm3, dword [ebx + 0x14]
movss dword [esp + 8], xmm6
movss dword [esp + 4], xmm0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
addss xmm0, dword [ebx + 0x10]
movss dword [esp], xmm0
push dword [ebx]
call fcn.10080ba0
mov edx, dword [edi + 0x40]
mov ecx, dword [ebp - 4]
mov esi, dword [ebp - 8]
inc ecx
add esi, 0x1c
mov dword [ebp - 4], ecx
mov eax, edx
mov dword [ebp - 8], esi
cmp ecx, edx
jl 0x100804b5
mov edx, dword [edi + 0x34]
xor esi, esi
test edx, edx
jle 0x100805ed
cmp esi, edx
jge 0x100805f4
mov eax, dword [edi + 0x3c]
mov ecx, dword [eax + esi*4]
cmp byte [ecx + 0x54], 0
je 0x100805e8
call fcn.10080860
mov edx, dword [edi + 0x34]
inc esi
cmp esi, edx
jl 0x100805d4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x10080ae0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov edi, ecx
mov eax, dword [edi + 0x14]
lea ebx, [edi + 0x14]
mov edx, dword [edi]
cmp edx, eax
je 0x10080afc
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov esi, dword [ebp + 8]
cmp esi, eax
jle 0x10080b94
mov eax, dword [edi + 4]
mov dword [ebp + 8], 0xbf800000
cmp esi, eax
jle 0x10080b3b
test eax, eax
je 0x10080b25
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
add ecx, dword [edi + 4]
jmp 0x10080b2a
mov ecx, 8
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
mov ecx, edi
push eax
call fcn.100746c0
mov edx, dword [edi]
cmp esi, edx
jle 0x10080b4d
mov eax, dword [ebp + 8]
mov ecx, dword [edi + 8]
mov dword [ecx + edx*4], eax
inc edx
cmp edx, esi
jl 0x10080b42
mov dword [edi], esi
mov edi, dword [ebx + 4]
cmp esi, edi
jle 0x10080b7b
test edi, edi
je 0x10080b67
mov eax, edi
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
add ecx, edi
jmp 0x10080b6c
mov ecx, 8
cmp ecx, esi
mov eax, esi
cmovg eax, ecx
mov ecx, ebx
push eax
call fcn.10052b50
mov ecx, dword [ebx]
cmp esi, ecx
jle 0x10080b92
mov edx, 0xffff
mov eax, dword [ebx + 8]
mov word [eax + ecx*2], dx
inc ecx
cmp ecx, esi
jl 0x10080b86
mov dword [ebx], esi
pop edi
pop esi
pop ebx
pop ebp
ret 4

Function at 0x10080ba0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push esi
push edi
mov edi, ecx
movss dword [ebp - 8], xmm3
movss dword [ebp - 4], xmm2
mov eax, dword [edi + 0x20]
lea ecx, [edi + 0x20]
inc eax
push eax
call fcn.100820a0
mov eax, dword [edi + 0x20]
test eax, eax
jg 0x10080bd0
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov esi, dword [edi + 0x28]
lea edx, [eax + eax*4]
movss xmm0, dword [ebp - 4]
mov ax, word [ebp + 8]
movss dword [esi + edx*8 - 0x20], xmm0
movss xmm0, dword [ebp - 8]
movss dword [esi + edx*8 - 0x1c], xmm0
movss xmm0, dword [ebp + 0xc]
movss dword [esi + edx*8 - 0x18], xmm0
movss xmm0, dword [ebp + 0x10]
movss dword [esi + edx*8 - 0x14], xmm0
movss xmm0, dword [ebp + 0x14]
movss dword [esi + edx*8 - 0x10], xmm0
movss xmm0, dword [ebp + 0x18]
movss dword [esi + edx*8 - 0xc], xmm0
movss xmm0, dword [ebp + 0x1c]
movss dword [esi + edx*8 - 8], xmm0
movss xmm0, dword [ebp + 0x20]
movss dword [esi + edx*8 - 4], xmm0
movss xmm0, dword [ebp + 0x24]
mov word [esi + edx*8 - 0x28], ax
mov eax, dword [edi + 0x3c]
addss xmm0, dword [eax + 0x20]
movss dword [esi + edx*8 - 0x24], xmm0
mov eax, dword [edi + 0x3c]
cmp byte [eax + 0x1c], 0
je 0x10080c6c
addss xmm0, dword [0x101626c8]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esi + edx*8 - 0x24], xmm0
mov eax, dword [edi + 0x38]
mov byte [edi + 0x54], 1
movss xmm0, dword [esi + edx*8 - 4]
subss xmm0, dword [esi + edx*8 - 0xc]
movd xmm1, dword [eax + 0x20]
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm0
movd xmm0, dword [eax + 0x1c]
cvtdq2ps xmm0, xmm0
addss xmm1, dword [0x101627c0]
cvttss2si ecx, xmm1
movss xmm1, dword [esi + edx*8 - 8]
subss xmm1, dword [esi + edx*8 - 0x10]
mulss xmm1, xmm0
addss xmm1, dword [0x101627c0]
cvttss2si eax, xmm1
imul ecx, eax
add dword [edi + 0x50], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x20
Function at 0x100825f0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
mov ebx, dword [ebp + 0xc]
mov eax, edx
mov dword [ebp - 4], eax
push esi
mov esi, ecx
movd xmm0, ebx
pshufd xmm1, xmm0, 0
push edi
cmp eax, 0xffff
jg 0x10082773
mov edx, dword [ebp + 0x10]
xor edi, edi
dec edx
test edx, edx
jle 0x10082710
cmp edx, 8
jb 0x100826f0
movaps xmm2, xmmword [0x10162ae0]
mov eax, edx
and eax, 0x80000007
jns 0x10082643
dec eax
or eax, 0xfffffff8
inc eax
movaps xmm4, xmmword [str._b_b_b_b]
mov ecx, edx
sub ecx, eax
mov eax, 3
mov dword [ebp - 8], ecx
lea ecx, [ebx + 0xc]
mov ebx, dword [ebp - 8]
movd xmm3, eax
movd xmm0, edi
lea eax, [edi + 4]
pshufd xmm0, xmm0, 0
lea ecx, [ecx + 0x40]
paddd xmm0, xmm2
add edi, 8
pslld xmm0, xmm3
paddd xmm0, xmm1
paddd xmm0, xmm4
movd dword [ecx - 0x48], xmm0
psrldq xmm0, 4
movd dword [ecx - 0x40], xmm0
psrldq xmm0, 4
movd dword [ecx - 0x38], xmm0
psrldq xmm0, 4
movd dword [ecx - 0x30], xmm0
movd xmm0, eax
pshufd xmm0, xmm0, 0
paddd xmm0, xmm2
pslld xmm0, xmm3
paddd xmm0, xmm1
paddd xmm0, xmm4
movd dword [ecx - 0x28], xmm0
psrldq xmm0, 4
movd dword [ecx - 0x20], xmm0
psrldq xmm0, 4
movd dword [ecx - 0x18], xmm0
psrldq xmm0, 4
movd dword [ecx - 0x10], xmm0
cmp edi, ebx
jl 0x10082660
mov ebx, dword [ebp + 0xc]
cmp edi, edx
jge 0x1008270d
lea eax, [edi*8 + 4]
sub edx, edi
add eax, ebx
add edi, edx
nop dword [eax]
lea ecx, [eax + 4]
mov dword [eax], ecx
lea eax, [eax + 8]
sub edx, 1
jne 0x10082700
mov eax, dword [ebp - 4]
mov dword [ebx + edi*8 + 4], 0
lea ecx, [esi + 0x20]
mov dword [esi], eax
dec eax
mov dword [esi + 0x1c], ebx
mov ebx, dword [ebp + 0x10]
add eax, ebx
cdq
idiv ebx
mov dword [esi + 0x18], ecx
mov dword [esi + 8], eax
xor eax, eax
mov dword [esi + 0x14], ebx
mov dword [esi + 0xc], 1
mov dword [esi + 0x10], 0
mov dword [esi + 4], 0x8000
mov word [ecx], ax
mov ecx, dword [ebp - 4]
mov word [esi + 0x22], ax
lea eax, [esi + 0x28]
mov dword [esi + 0x24], eax
mov word [eax], cx
mov eax, 0xffff
pop edi
mov word [esi + 0x2a], ax
mov dword [esi + 0x2c], 0
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3