joyce8/EMBER2024-capa huggingface dataset:
Function at 0x407db0
Capabilities:
Log keystrokes via polling

Disassembly:
mov al, byte [0x66b064]
sub esp, 0xc
push esi
push edi
mov edi, ecx
test al, al
jne 0x407de3
mov eax, dword [edi]
push ecx
mov ecx, dword [eax*4 + 0x482218]
call fcn.00461aa0
add esp, 4
test al, al
je 0x407e36
mov byte [0x66b064], 1
pop edi
pop esi
add esp, 0xc
ret
cmp al, 1
jne 0x407e36
push ecx
mov ecx, 0x480230
call fcn.00461aa0
add esp, 4
mov dword [esp + 8], 0x46
lea ecx, [esp + 8]
mov dword [esp + 0xc], 0
call fcn.004146a0
mov esi, 0x481f40
push dword [esi]
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x407e2b
mov eax, dword [esi]
mov dword [edi], eax
mov byte [0x66b064], 0
add esi, 4
cmp esi, 0x482218
jne 0x407e13
pop edi
pop esi
add esp, 0xc
ret
Function at 0x408290
Capabilities:
Execute command

Disassembly:
sub esp, 0x28
push esi
mov esi, dword [0x66aec0]
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], 0x15
movups xmm0, xmmword [esi + 0x39b4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x39b4], 0
lea eax, [esp + 0x14]
mov dword [esi + 0x39b8], 0
mov dword [esi + 0x39bc], 0
mov dword [esi + 0x39c0], 0
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 0x16
movups xmm0, xmmword [esi + 0x39c4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x39c4], 0x3e7ced91
lea eax, [esp + 0x14]
mov dword [esi + 0x39c8], 0x3c83126f
mov dword [esi + 0x39cc], 0x3f39999a
mov dword [esi + 0x39d0], 0x3f598b89
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 0x17
movups xmm0, xmmword [esi + 0x39d4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x39d4], 0
lea eax, [esp + 0x14]
mov dword [esi + 0x39d8], 0
mov dword [esi + 0x39dc], 0
mov dword [esi + 0x39e0], 0
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 5
movups xmm0, xmmword [esi + 0x38b4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x38b4], 0
lea eax, [esp + 0x14]
mov dword [esi + 0x38b8], 0
mov dword [esi + 0x38bc], 0
mov dword [esi + 0x38c0], 0
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 6
movups xmm0, xmmword [esi + 0x38c4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x38c4], 0
lea eax, [esp + 0x14]
mov dword [esi + 0x38c8], 0
mov dword [esi + 0x38cc], 0
mov dword [esi + 0x38d0], 0
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 0
movups xmm0, xmmword [esi + 0x3864]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x3864], 0x3f760419
mov dword [esi + 0x3868], 0x3ea4dd2f
mov dword [esi + 0x386c], 0x3e6872b0
mov dword [esi + 0x3870], 0x3f800000
mov esi, dword [0x66aec0]
push 0
push 0
push 0x4802c4
mov eax, dword [esi + 0x3e48]
push ecx
movss xmm0, dword [eax + 0x1c]
movss dword [esp + 0x14], xmm0
movss xmm3, dword [0x4a6460]
lea eax, [esp + 0x1c]
movss xmm2, dword [esi + 0x3bb8]
mov ecx, dword [esi + 0x3bb4]
mov dword [esp], 0xbf800000
push eax
call fcn.0045a830
mov eax, dword [esi + 0x3e48]
lea edx, [esp + 4]
movss xmm0, dword [esp + 0xc]
addss xmm0, dword [0x4a6308]
movss xmm1, dword [esp + 4]
mov byte [eax + 0xac], 1
mov ecx, dword [esi + 0x3e48]
push ecx
cvttss2si eax, xmm0
mov dword [esp + 8], 0
mov byte [ecx + 0x131], 1
mov dword [esp + 0xc], 0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm1, xmm0
movss xmm0, dword [ecx + 0x14]
subss xmm0, dword [ecx + 0x78]
mulss xmm1, dword [0x4a62d0]
addss xmm1, xmm0
movss dword [ecx + 0xf0], xmm1
mov ecx, 0x4802d0
call fcn.00461aa0
add esp, 4
test al, al
je 0x408565
push 0x4802d8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
push 0x4802fc
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
mov ecx, 4
pop esi
add esp, 0x28
jmp fcn.00434cc0
Function at 0x408580
Capabilities:
Execute command

Disassembly:
sub esp, 0x28
push esi
mov esi, dword [0x66aec0]
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], 0x15
movups xmm0, xmmword [esi + 0x39b4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x39b4], 0
lea eax, [esp + 0x14]
mov dword [esi + 0x39b8], 0
mov dword [esi + 0x39bc], 0
mov dword [esi + 0x39c0], 0
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 0x16
movups xmm0, xmmword [esi + 0x39c4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x39c4], 0x3edf0952
lea eax, [esp + 0x14]
mov dword [esi + 0x39c8], 0
mov dword [esi + 0x39cc], 0x3c455662
mov dword [esi + 0x39d0], 0x3f598b89
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 0x17
movups xmm0, xmmword [esi + 0x39d4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x39d4], 0
lea eax, [esp + 0x14]
mov dword [esi + 0x39d8], 0
mov dword [esi + 0x39dc], 0
mov dword [esi + 0x39e0], 0
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 5
movups xmm0, xmmword [esi + 0x38b4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x38b4], 0
lea eax, [esp + 0x14]
mov dword [esi + 0x38b8], 0
mov dword [esi + 0x38bc], 0
mov dword [esi + 0x38c0], 0
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 6
movups xmm0, xmmword [esi + 0x38c4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x38c4], 0
lea eax, [esp + 0x14]
mov dword [esi + 0x38c8], 0
mov dword [esi + 0x38cc], 0
mov dword [esi + 0x38d0], 0
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 0
movups xmm0, xmmword [esi + 0x3864]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x3864], 0x3f760419
mov dword [esi + 0x3868], 0x3ea4dd2f
mov dword [esi + 0x386c], 0x3e6872b0
mov dword [esi + 0x3870], 0x3f800000
mov esi, dword [0x66aec0]
push 0
push 0
push 0x480330
mov eax, dword [esi + 0x3e48]
push ecx
movss xmm0, dword [eax + 0x1c]
movss dword [esp + 0x14], xmm0
movss xmm3, dword [0x4a6460]
lea eax, [esp + 0x1c]
movss xmm2, dword [esi + 0x3bb8]
mov ecx, dword [esi + 0x3bb4]
mov dword [esp], 0xbf800000
push eax
call fcn.0045a830
mov eax, dword [esi + 0x3e48]
lea edx, [esp + 4]
movss xmm0, dword [esp + 0xc]
addss xmm0, dword [0x4a6308]
movss xmm1, dword [esp + 4]
mov byte [eax + 0xac], 1
mov ecx, dword [esi + 0x3e48]
push ecx
cvttss2si eax, xmm0
mov dword [esp + 8], 0
mov byte [ecx + 0x131], 1
mov dword [esp + 0xc], 0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm1, xmm0
movss xmm0, dword [ecx + 0x14]
subss xmm0, dword [ecx + 0x78]
mulss xmm1, dword [0x4a62d0]
addss xmm1, xmm0
movss dword [ecx + 0xf0], xmm1
mov ecx, 0x48033c
call fcn.00461aa0
add esp, 4
test al, al
je 0x408855
push 0x480344
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
push 0x480368
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
mov ecx, 4
pop esi
add esp, 0x28
jmp fcn.00434cc0
Function at 0x408870
Capabilities:
Execute command

Disassembly:
sub esp, 0x28
push esi
mov esi, dword [0x66aec0]
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], 0x15
movups xmm0, xmmword [esi + 0x39b4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x39b4], 0
lea eax, [esp + 0x14]
mov dword [esi + 0x39b8], 0
mov dword [esi + 0x39bc], 0
mov dword [esi + 0x39c0], 0
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 0x16
movups xmm0, xmmword [esi + 0x39c4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x39c4], 0x3edeb852
lea eax, [esp + 0x14]
mov dword [esi + 0x39c8], 0x3dd91687
mov dword [esi + 0x39cc], 0x3d89374c
mov dword [esi + 0x39d0], 0x3f598b89
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 0x17
movups xmm0, xmmword [esi + 0x39d4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x39d4], 0
lea eax, [esp + 0x14]
mov dword [esi + 0x39d8], 0
mov dword [esi + 0x39dc], 0
mov dword [esi + 0x39e0], 0
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 5
movups xmm0, xmmword [esi + 0x38b4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x38b4], 0
lea eax, [esp + 0x14]
mov dword [esi + 0x38b8], 0
mov dword [esi + 0x38bc], 0
mov dword [esi + 0x38c0], 0
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 6
movups xmm0, xmmword [esi + 0x38c4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x38c4], 0
lea eax, [esp + 0x14]
mov dword [esi + 0x38c8], 0
mov dword [esi + 0x38cc], 0
mov dword [esi + 0x38d0], 0
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 0
movups xmm0, xmmword [esi + 0x3864]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x3864], 0x3f38d4fe
mov dword [esi + 0x3868], 0x3e6c8b44
mov dword [esi + 0x386c], 0x3e24dd2f
mov dword [esi + 0x3870], 0x3f800000
mov esi, dword [0x66aec0]
push 0
push 0
push 0x48039c
mov eax, dword [esi + 0x3e48]
push ecx
movss xmm0, dword [eax + 0x1c]
movss dword [esp + 0x14], xmm0
movss xmm3, dword [0x4a6460]
lea eax, [esp + 0x1c]
movss xmm2, dword [esi + 0x3bb8]
mov ecx, dword [esi + 0x3bb4]
mov dword [esp], 0xbf800000
push eax
call fcn.0045a830
mov eax, dword [esi + 0x3e48]
lea edx, [esp + 4]
movss xmm0, dword [esp + 0xc]
addss xmm0, dword [0x4a6308]
movss xmm1, dword [esp + 4]
mov byte [eax + 0xac], 1
mov ecx, dword [esi + 0x3e48]
push ecx
cvttss2si eax, xmm0
mov dword [esp + 8], 0
mov byte [ecx + 0x131], 1
mov dword [esp + 0xc], 0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm1, xmm0
movss xmm0, dword [ecx + 0x14]
subss xmm0, dword [ecx + 0x78]
mulss xmm1, dword [0x4a62d0]
addss xmm1, xmm0
movss dword [ecx + 0xf0], xmm1
mov ecx, 0x4803a8
call fcn.00461aa0
add esp, 4
test al, al
je 0x408b45
push 0x4803b0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
push 0x4803d4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
mov ecx, 4
pop esi
add esp, 0x28
jmp fcn.00434cc0
Function at 0x408b60
Capabilities:
Execute command

Disassembly:
sub esp, 0x28
push esi
mov esi, dword [0x66aec0]
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], 0x15
movups xmm0, xmmword [esi + 0x39b4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x39b4], 0
lea eax, [esp + 0x14]
mov dword [esi + 0x39b8], 0
mov dword [esi + 0x39bc], 0
mov dword [esi + 0x39c0], 0
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 0x16
movups xmm0, xmmword [esi + 0x39c4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x39c4], 0x3f35c28f
lea eax, [esp + 0x14]
mov dword [esi + 0x39c8], 0x3f800000
mov dword [esi + 0x39cc], 0x3e9cac08
mov dword [esi + 0x39d0], 0x3f598b89
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 0x17
movups xmm0, xmmword [esi + 0x39d4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x39d4], 0
lea eax, [esp + 0x14]
mov dword [esi + 0x39d8], 0
mov dword [esi + 0x39dc], 0
mov dword [esi + 0x39e0], 0
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 5
movups xmm0, xmmword [esi + 0x38b4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x38b4], 0
lea eax, [esp + 0x14]
mov dword [esi + 0x38b8], 0
mov dword [esi + 0x38bc], 0
mov dword [esi + 0x38c0], 0
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 6
movups xmm0, xmmword [esi + 0x38c4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x38c4], 0
lea eax, [esp + 0x14]
mov dword [esi + 0x38c8], 0
mov dword [esi + 0x38cc], 0
mov dword [esi + 0x38d0], 0
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 0
movups xmm0, xmmword [esi + 0x3864]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x3864], 0x3f189375
mov dword [esi + 0x3868], 0x3e9cac08
mov dword [esi + 0x386c], 0x3f800000
mov dword [esi + 0x3870], 0x3f800000
mov esi, dword [0x66aec0]
push 0
push 0
push 0x480408
mov eax, dword [esi + 0x3e48]
push ecx
movss xmm0, dword [eax + 0x1c]
movss dword [esp + 0x14], xmm0
movss xmm3, dword [0x4a6460]
lea eax, [esp + 0x1c]
movss xmm2, dword [esi + 0x3bb8]
mov ecx, dword [esi + 0x3bb4]
mov dword [esp], 0xbf800000
push eax
call fcn.0045a830
mov eax, dword [esi + 0x3e48]
lea edx, [esp + 4]
movss xmm0, dword [esp + 0xc]
addss xmm0, dword [0x4a6308]
movss xmm1, dword [esp + 4]
mov byte [eax + 0xac], 1
mov ecx, dword [esi + 0x3e48]
push ecx
cvttss2si eax, xmm0
mov dword [esp + 8], 0
mov byte [ecx + 0x131], 1
mov dword [esp + 0xc], 0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm1, xmm0
movss xmm0, dword [ecx + 0x14]
subss xmm0, dword [ecx + 0x78]
mulss xmm1, dword [0x4a62d0]
addss xmm1, xmm0
movss dword [ecx + 0xf0], xmm1
mov ecx, 0x480414
call fcn.00461aa0
add esp, 4
test al, al
je 0x408e35
push 0x48041c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
push 0x480440
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
mov ecx, 4
pop esi
add esp, 0x28
jmp fcn.00434cc0
Function at 0x408e50
Capabilities:
Execute command

Disassembly:
sub esp, 0x28
push esi
mov esi, dword [0x66aec0]
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], 0x15
movups xmm0, xmmword [esi + 0x39b4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x39b4], 0
lea eax, [esp + 0x14]
mov dword [esi + 0x39b8], 0
mov dword [esi + 0x39bc], 0
mov dword [esi + 0x39c0], 0
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 0x16
movups xmm0, xmmword [esi + 0x39c4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x39c4], 0x3e408312
lea eax, [esp + 0x14]
mov dword [esi + 0x39c8], 0x3f71eb85
mov dword [esi + 0x39cc], 0x3f5df3b6
mov dword [esi + 0x39d0], 0x3f598b89
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 0x17
movups xmm0, xmmword [esi + 0x39d4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x39d4], 0
lea eax, [esp + 0x14]
mov dword [esi + 0x39d8], 0
mov dword [esi + 0x39dc], 0
mov dword [esi + 0x39e0], 0
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 5
movups xmm0, xmmword [esi + 0x38b4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x38b4], 0
lea eax, [esp + 0x14]
mov dword [esi + 0x38b8], 0
mov dword [esi + 0x38bc], 0
mov dword [esi + 0x38c0], 0
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 6
movups xmm0, xmmword [esi + 0x38c4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x38c4], 0
lea eax, [esp + 0x14]
mov dword [esi + 0x38c8], 0
mov dword [esi + 0x38cc], 0
mov dword [esi + 0x38d0], 0
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 0
movups xmm0, xmmword [esi + 0x3864]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x3864], 0x3f760419
mov dword [esi + 0x3868], 0x3ea4dd2f
mov dword [esi + 0x386c], 0x3e6872b0
mov dword [esi + 0x3870], 0x3f800000
mov esi, dword [0x66aec0]
push 0
push 0
push 0x4804e0
mov eax, dword [esi + 0x3e48]
push ecx
movss xmm0, dword [eax + 0x1c]
movss dword [esp + 0x14], xmm0
movss xmm3, dword [0x4a6460]
lea eax, [esp + 0x1c]
movss xmm2, dword [esi + 0x3bb8]
mov ecx, dword [esi + 0x3bb4]
mov dword [esp], 0xbf800000
push eax
call fcn.0045a830
mov eax, dword [esi + 0x3e48]
lea edx, [esp + 4]
movss xmm0, dword [esp + 0xc]
addss xmm0, dword [0x4a6308]
movss xmm1, dword [esp + 4]
mov byte [eax + 0xac], 1
mov ecx, dword [esi + 0x3e48]
push ecx
cvttss2si eax, xmm0
mov dword [esp + 8], 0
mov byte [ecx + 0x131], 1
mov dword [esp + 0xc], 0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm1, xmm0
movss xmm0, dword [ecx + 0x14]
subss xmm0, dword [ecx + 0x78]
mulss xmm1, dword [0x4a62d0]
addss xmm1, xmm0
movss dword [ecx + 0xf0], xmm1
mov ecx, 0x4804ec
call fcn.00461aa0
add esp, 4
test al, al
je 0x409125
push 0x4804f4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
push 0x480518
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
mov ecx, 4
pop esi
add esp, 0x28
jmp fcn.00434cc0
Function at 0x409140
Capabilities:
Execute command

Disassembly:
sub esp, 0x28
push esi
mov esi, dword [0x66aec0]
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], 0x15
movups xmm0, xmmword [esi + 0x39b4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x39b4], 0
lea eax, [esp + 0x14]
mov dword [esi + 0x39b8], 0
mov dword [esi + 0x39bc], 0
mov dword [esi + 0x39c0], 0
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 0x16
movups xmm0, xmmword [esi + 0x39c4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x39c4], 0x3f800000
lea eax, [esp + 0x14]
mov dword [esi + 0x39c8], 0x3e9cac08
mov dword [esi + 0x39cc], 0x3e88b439
mov dword [esi + 0x39d0], 0x3f598b89
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 0x17
movups xmm0, xmmword [esi + 0x39d4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x39d4], 0
lea eax, [esp + 0x14]
mov dword [esi + 0x39d8], 0
mov dword [esi + 0x39dc], 0
mov dword [esi + 0x39e0], 0
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 5
movups xmm0, xmmword [esi + 0x38b4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x38b4], 0
lea eax, [esp + 0x14]
mov dword [esi + 0x38b8], 0
mov dword [esi + 0x38bc], 0
mov dword [esi + 0x38c0], 0
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 6
movups xmm0, xmmword [esi + 0x38c4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x38c4], 0
lea eax, [esp + 0x14]
mov dword [esi + 0x38c8], 0
mov dword [esi + 0x38cc], 0
mov dword [esi + 0x38d0], 0
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 0
movups xmm0, xmmword [esi + 0x3864]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x3864], 0x3f760419
mov dword [esi + 0x3868], 0x3ea4dd2f
mov dword [esi + 0x386c], 0x3e6872b0
mov dword [esi + 0x3870], 0x3f800000
mov esi, dword [0x66aec0]
push 0
push 0
push 0x48054c
mov eax, dword [esi + 0x3e48]
push ecx
movss xmm0, dword [eax + 0x1c]
movss dword [esp + 0x14], xmm0
movss xmm3, dword [0x4a6460]
lea eax, [esp + 0x1c]
movss xmm2, dword [esi + 0x3bb8]
mov ecx, dword [esi + 0x3bb4]
mov dword [esp], 0xbf800000
push eax
call fcn.0045a830
mov eax, dword [esi + 0x3e48]
lea edx, [esp + 4]
movss xmm0, dword [esp + 0xc]
addss xmm0, dword [0x4a6308]
movss xmm1, dword [esp + 4]
mov byte [eax + 0xac], 1
mov ecx, dword [esi + 0x3e48]
push ecx
cvttss2si eax, xmm0
mov dword [esp + 8], 0
mov byte [ecx + 0x131], 1
mov dword [esp + 0xc], 0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm1, xmm0
movss xmm0, dword [ecx + 0x14]
subss xmm0, dword [ecx + 0x78]
mulss xmm1, dword [0x4a62d0]
addss xmm1, xmm0
movss dword [ecx + 0xf0], xmm1
mov ecx, 0x480558
call fcn.00461aa0
add esp, 4
test al, al
je 0x409415
push 0x480560
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
push 0x480584
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
mov ecx, 4
pop esi
add esp, 0x28
jmp fcn.00434cc0
Function at 0x409430
Capabilities:
Execute command

Disassembly:
sub esp, 0x28
push esi
mov esi, dword [0x66aec0]
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], 0x15
movups xmm0, xmmword [esi + 0x39b4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x39b4], 0
lea eax, [esp + 0x14]
mov dword [esi + 0x39b8], 0
mov dword [esi + 0x39bc], 0
mov dword [esi + 0x39c0], 0
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 0x16
movups xmm0, xmmword [esi + 0x39c4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x39c4], 0x3f800000
lea eax, [esp + 0x14]
mov dword [esi + 0x39c8], 0x3e9cac08
mov dword [esi + 0x39cc], 0x3e88b439
mov dword [esi + 0x39d0], 0x3f598b89
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 0x17
movups xmm0, xmmword [esi + 0x39d4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x39d4], 0
lea eax, [esp + 0x14]
mov dword [esi + 0x39d8], 0
mov dword [esi + 0x39dc], 0
mov dword [esi + 0x39e0], 0
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 5
movups xmm0, xmmword [esi + 0x38b4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x38b4], 0
lea eax, [esp + 0x14]
mov dword [esi + 0x38b8], 0
mov dword [esi + 0x38bc], 0
mov dword [esi + 0x38c0], 0
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 6
movups xmm0, xmmword [esi + 0x38c4]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x38c4], 0
lea eax, [esp + 0x14]
mov dword [esi + 0x38c8], 0
mov dword [esi + 0x38cc], 0
mov dword [esi + 0x38d0], 0
mov esi, dword [0x66aec0]
push eax
mov dword [esp + 0x18], 0
movups xmm0, xmmword [esi + 0x3864]
lea ecx, [esi + 0x4758]
movups xmmword [esp + 0x1c], xmm0
call fcn.0044ac70
mov dword [esi + 0x3864], 0x3f800000
mov dword [esi + 0x3868], 0
mov dword [esi + 0x386c], 0
mov dword [esi + 0x3870], 0x3f800000
mov esi, dword [0x66aec0]
push 0
push 0
push 0x4805b8
mov eax, dword [esi + 0x3e48]
push ecx
movss xmm0, dword [eax + 0x1c]
movss dword [esp + 0x14], xmm0
movss xmm3, dword [0x4a6460]
lea eax, [esp + 0x1c]
movss xmm2, dword [esi + 0x3bb8]
mov ecx, dword [esi + 0x3bb4]
mov dword [esp], 0xbf800000
push eax
call fcn.0045a830
mov eax, dword [esi + 0x3e48]
lea edx, [esp + 4]
movss xmm0, dword [esp + 0xc]
addss xmm0, dword [0x4a6308]
movss xmm1, dword [esp + 4]
mov byte [eax + 0xac], 1
mov ecx, dword [esi + 0x3e48]
push ecx
cvttss2si eax, xmm0
mov dword [esp + 8], 0
mov byte [ecx + 0x131], 1
mov dword [esp + 0xc], 0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm1, xmm0
movss xmm0, dword [ecx + 0x14]
subss xmm0, dword [ecx + 0x78]
mulss xmm1, dword [0x4a62d0]
addss xmm1, xmm0
movss dword [ecx + 0xf0], xmm1
mov ecx, 0x4805c4
call fcn.00461aa0
add esp, 4
test al, al
je 0x409705
push 0x4805cc
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
push 0x4805f0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
mov ecx, 4
pop esi
add esp, 0x28
jmp fcn.00434cc0