joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10065fb0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x10073dcb
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push esi
push edi
mov eax, dword [0x1008c288]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov esi, ecx
mov ecx, dword [esi + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
call edx
push eax
lea ecx, [esp + 0x20]
call fcn.10064cd0
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
mov dword [esp + 0x2c], 0
call edx
push eax
lea ecx, [esp + 0x18]
call fcn.10064cd0
push 0x14
mov byte [esp + 0x30], 1
call sub.MFC80U.DLL_Ordinal_762
add esp, 4
mov dword [esp + 0xc], eax
test eax, eax
mov byte [esp + 0x2c], 2
je 0x10066082
mov ecx, dword [esp + 0x14]
sub esp, 8
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [esp + 0x20]
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x20]
test ecx, ecx
mov dword [esp + 0x18], esp
je 0x1006604d
add ecx, 4
mov edx, 1
lock xadd dword [ecx], edx
mov ecx, dword [esp + 0x24]
sub esp, 8
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [esp + 0x30]
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x30]
test ecx, ecx
mov dword [esp + 0x20], esp
je 0x10066077
add ecx, 4
mov edx, 1
lock xadd dword [ecx], edx
mov ecx, eax
call fcn.10061d70
mov edi, eax
jmp 0x10066084
xor edi, edi
mov esi, dword [esp + 0x18]
test esi, esi
mov byte [esp + 0x2c], 0
je 0x100660bb
lea eax, [esi + 4]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x100660bb
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x100660bb
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov esi, dword [esp + 0x20]
test esi, esi
mov dword [esp + 0x2c], 0xffffffff
je 0x100660f5
lea eax, [esi + 4]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x100660f5
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x100660f5
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov eax, edi
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x24
ret
Function at 0x10066110
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x10073dcb
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push esi
push edi
mov eax, dword [0x1008c288]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov esi, ecx
mov ecx, dword [esi + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
call edx
push eax
lea ecx, [esp + 0x20]
call fcn.10064cd0
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
mov dword [esp + 0x2c], 0
call edx
push eax
lea ecx, [esp + 0x18]
call fcn.10064cd0
push 0x14
mov byte [esp + 0x30], 1
call sub.MFC80U.DLL_Ordinal_762
add esp, 4
mov dword [esp + 0xc], eax
test eax, eax
mov byte [esp + 0x2c], 2
je 0x100661e2
mov ecx, dword [esp + 0x14]
sub esp, 8
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [esp + 0x20]
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x20]
test ecx, ecx
mov dword [esp + 0x18], esp
je 0x100661ad
add ecx, 4
mov edx, 1
lock xadd dword [ecx], edx
mov ecx, dword [esp + 0x24]
sub esp, 8
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [esp + 0x30]
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x30]
test ecx, ecx
mov dword [esp + 0x20], esp
je 0x100661d7
add ecx, 4
mov edx, 1
lock xadd dword [ecx], edx
mov ecx, eax
call fcn.10061eb0
mov edi, eax
jmp 0x100661e4
xor edi, edi
mov esi, dword [esp + 0x18]
test esi, esi
mov byte [esp + 0x2c], 0
je 0x1006621b
lea eax, [esi + 4]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x1006621b
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x1006621b
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov esi, dword [esp + 0x20]
test esi, esi
mov dword [esp + 0x2c], 0xffffffff
je 0x10066255
lea eax, [esi + 4]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x10066255
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x10066255
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov eax, edi
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x24
ret
Function at 0x10066270
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x10073dcb
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push esi
push edi
mov eax, dword [0x1008c288]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov esi, ecx
mov ecx, dword [esi + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
call edx
push eax
lea ecx, [esp + 0x20]
call fcn.10064cd0
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
mov dword [esp + 0x2c], 0
call edx
push eax
lea ecx, [esp + 0x18]
call fcn.10064cd0
push 0x14
mov byte [esp + 0x30], 1
call sub.MFC80U.DLL_Ordinal_762
add esp, 4
mov dword [esp + 0xc], eax
test eax, eax
mov byte [esp + 0x2c], 2
je 0x10066342
mov ecx, dword [esp + 0x14]
sub esp, 8
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [esp + 0x20]
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x20]
test ecx, ecx
mov dword [esp + 0x18], esp
je 0x1006630d
add ecx, 4
mov edx, 1
lock xadd dword [ecx], edx
mov ecx, dword [esp + 0x24]
sub esp, 8
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [esp + 0x30]
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x30]
test ecx, ecx
mov dword [esp + 0x20], esp
je 0x10066337
add ecx, 4
mov edx, 1
lock xadd dword [ecx], edx
mov ecx, eax
call fcn.10061ff0
mov edi, eax
jmp 0x10066344
xor edi, edi
mov esi, dword [esp + 0x18]
test esi, esi
mov byte [esp + 0x2c], 0
je 0x1006637b
lea eax, [esi + 4]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x1006637b
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x1006637b
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov esi, dword [esp + 0x20]
test esi, esi
mov dword [esp + 0x2c], 0xffffffff
je 0x100663b5
lea eax, [esi + 4]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x100663b5
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x100663b5
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov eax, edi
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x24
ret
Function at 0x100663d0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x10073dcb
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push esi
push edi
mov eax, dword [0x1008c288]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov esi, ecx
mov ecx, dword [esi + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
call edx
push eax
lea ecx, [esp + 0x20]
call fcn.10064cd0
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
mov dword [esp + 0x2c], 0
call edx
push eax
lea ecx, [esp + 0x18]
call fcn.10064cd0
push 0x14
mov byte [esp + 0x30], 1
call sub.MFC80U.DLL_Ordinal_762
add esp, 4
mov dword [esp + 0xc], eax
test eax, eax
mov byte [esp + 0x2c], 2
je 0x100664a2
mov ecx, dword [esp + 0x14]
sub esp, 8
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [esp + 0x20]
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x20]
test ecx, ecx
mov dword [esp + 0x18], esp
je 0x1006646d
add ecx, 4
mov edx, 1
lock xadd dword [ecx], edx
mov ecx, dword [esp + 0x24]
sub esp, 8
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [esp + 0x30]
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x30]
test ecx, ecx
mov dword [esp + 0x20], esp
je 0x10066497
add ecx, 4
mov edx, 1
lock xadd dword [ecx], edx
mov ecx, eax
call fcn.10062130
mov edi, eax
jmp 0x100664a4
xor edi, edi
mov esi, dword [esp + 0x18]
test esi, esi
mov byte [esp + 0x2c], 0
je 0x100664db
lea eax, [esi + 4]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x100664db
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x100664db
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov esi, dword [esp + 0x20]
test esi, esi
mov dword [esp + 0x2c], 0xffffffff
je 0x10066515
lea eax, [esi + 4]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x10066515
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x10066515
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov eax, edi
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x24
ret
Function at 0x10066530
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x10073dcb
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push esi
push edi
mov eax, dword [0x1008c288]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov esi, ecx
mov ecx, dword [esi + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
call edx
push eax
lea ecx, [esp + 0x20]
call fcn.10064cd0
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
mov dword [esp + 0x2c], 0
call edx
push eax
lea ecx, [esp + 0x18]
call fcn.10064cd0
push 0x14
mov byte [esp + 0x30], 1
call sub.MFC80U.DLL_Ordinal_762
add esp, 4
mov dword [esp + 0xc], eax
test eax, eax
mov byte [esp + 0x2c], 2
je 0x10066602
mov ecx, dword [esp + 0x14]
sub esp, 8
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [esp + 0x20]
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x20]
test ecx, ecx
mov dword [esp + 0x18], esp
je 0x100665cd
add ecx, 4
mov edx, 1
lock xadd dword [ecx], edx
mov ecx, dword [esp + 0x24]
sub esp, 8
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [esp + 0x30]
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x30]
test ecx, ecx
mov dword [esp + 0x20], esp
je 0x100665f7
add ecx, 4
mov edx, 1
lock xadd dword [ecx], edx
mov ecx, eax
call fcn.10062270
mov edi, eax
jmp 0x10066604
xor edi, edi
mov esi, dword [esp + 0x18]
test esi, esi
mov byte [esp + 0x2c], 0
je 0x1006663b
lea eax, [esi + 4]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x1006663b
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x1006663b
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov esi, dword [esp + 0x20]
test esi, esi
mov dword [esp + 0x2c], 0xffffffff
je 0x10066675
lea eax, [esi + 4]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x10066675
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x10066675
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov eax, edi
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x24
ret
Function at 0x10066690
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x10073dcb
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push esi
push edi
mov eax, dword [0x1008c288]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov esi, ecx
mov ecx, dword [esi + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
call edx
push eax
lea ecx, [esp + 0x20]
call fcn.10064cd0
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
mov dword [esp + 0x2c], 0
call edx
push eax
lea ecx, [esp + 0x18]
call fcn.10064cd0
push 0x14
mov byte [esp + 0x30], 1
call sub.MFC80U.DLL_Ordinal_762
add esp, 4
mov dword [esp + 0xc], eax
test eax, eax
mov byte [esp + 0x2c], 2
je 0x10066762
mov ecx, dword [esp + 0x14]
sub esp, 8
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [esp + 0x20]
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x20]
test ecx, ecx
mov dword [esp + 0x18], esp
je 0x1006672d
add ecx, 4
mov edx, 1
lock xadd dword [ecx], edx
mov ecx, dword [esp + 0x24]
sub esp, 8
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [esp + 0x30]
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x30]
test ecx, ecx
mov dword [esp + 0x20], esp
je 0x10066757
add ecx, 4
mov edx, 1
lock xadd dword [ecx], edx
mov ecx, eax
call fcn.100623b0
mov edi, eax
jmp 0x10066764
xor edi, edi
mov esi, dword [esp + 0x18]
test esi, esi
mov byte [esp + 0x2c], 0
je 0x1006679b
lea eax, [esi + 4]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x1006679b
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x1006679b
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov esi, dword [esp + 0x20]
test esi, esi
mov dword [esp + 0x2c], 0xffffffff
je 0x100667d5
lea eax, [esi + 4]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x100667d5
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x100667d5
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov eax, edi
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x24
ret
Function at 0x100667f0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x10073dcb
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push esi
push edi
mov eax, dword [0x1008c288]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov esi, ecx
mov ecx, dword [esi + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
call edx
push eax
lea ecx, [esp + 0x20]
call fcn.10064cd0
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
mov dword [esp + 0x2c], 0
call edx
push eax
lea ecx, [esp + 0x18]
call fcn.10064cd0
push 0x14
mov byte [esp + 0x30], 1
call sub.MFC80U.DLL_Ordinal_762
add esp, 4
mov dword [esp + 0xc], eax
test eax, eax
mov byte [esp + 0x2c], 2
je 0x100668c2
mov ecx, dword [esp + 0x14]
sub esp, 8
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [esp + 0x20]
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x20]
test ecx, ecx
mov dword [esp + 0x18], esp
je 0x1006688d
add ecx, 4
mov edx, 1
lock xadd dword [ecx], edx
mov ecx, dword [esp + 0x24]
sub esp, 8
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [esp + 0x30]
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x30]
test ecx, ecx
mov dword [esp + 0x20], esp
je 0x100668b7
add ecx, 4
mov edx, 1
lock xadd dword [ecx], edx
mov ecx, eax
call fcn.100624f0
mov edi, eax
jmp 0x100668c4
xor edi, edi
mov esi, dword [esp + 0x18]
test esi, esi
mov byte [esp + 0x2c], 0
je 0x100668fb
lea eax, [esi + 4]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x100668fb
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x100668fb
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov esi, dword [esp + 0x20]
test esi, esi
mov dword [esp + 0x2c], 0xffffffff
je 0x10066935
lea eax, [esi + 4]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x10066935
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x10066935
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov eax, edi
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x24
ret
Function at 0x10066950
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x10073dcb
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push esi
push edi
mov eax, dword [0x1008c288]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov esi, ecx
mov ecx, dword [esi + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
call edx
push eax
lea ecx, [esp + 0x20]
call fcn.10064cd0
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
mov dword [esp + 0x2c], 0
call edx
push eax
lea ecx, [esp + 0x18]
call fcn.10064cd0
push 0x14
mov byte [esp + 0x30], 1
call sub.MFC80U.DLL_Ordinal_762
add esp, 4
mov dword [esp + 0xc], eax
test eax, eax
mov byte [esp + 0x2c], 2
je 0x10066a22
mov ecx, dword [esp + 0x14]
sub esp, 8
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [esp + 0x20]
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x20]
test ecx, ecx
mov dword [esp + 0x18], esp
je 0x100669ed
add ecx, 4
mov edx, 1
lock xadd dword [ecx], edx
mov ecx, dword [esp + 0x24]
sub esp, 8
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [esp + 0x30]
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x30]
test ecx, ecx
mov dword [esp + 0x20], esp
je 0x10066a17
add ecx, 4
mov edx, 1
lock xadd dword [ecx], edx
mov ecx, eax
call fcn.10062630
mov edi, eax
jmp 0x10066a24
xor edi, edi
mov esi, dword [esp + 0x18]
test esi, esi
mov byte [esp + 0x2c], 0
je 0x10066a5b
lea eax, [esi + 4]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x10066a5b
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x10066a5b
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov esi, dword [esp + 0x20]
test esi, esi
mov dword [esp + 0x2c], 0xffffffff
je 0x10066a95
lea eax, [esi + 4]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x10066a95
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x10066a95
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov eax, edi
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x24
ret
Function at 0x10066ab0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x10073dcb
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push esi
push edi
mov eax, dword [0x1008c288]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov esi, ecx
mov ecx, dword [esi + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
call edx
push eax
lea ecx, [esp + 0x20]
call fcn.10064cd0
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
mov dword [esp + 0x2c], 0
call edx
push eax
lea ecx, [esp + 0x18]
call fcn.10064cd0
push 0x14
mov byte [esp + 0x30], 1
call sub.MFC80U.DLL_Ordinal_762
add esp, 4
mov dword [esp + 0xc], eax
test eax, eax
mov byte [esp + 0x2c], 2
je 0x10066b82
mov ecx, dword [esp + 0x14]
sub esp, 8
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [esp + 0x20]
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x20]
test ecx, ecx
mov dword [esp + 0x18], esp
je 0x10066b4d
add ecx, 4
mov edx, 1
lock xadd dword [ecx], edx
mov ecx, dword [esp + 0x24]
sub esp, 8
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [esp + 0x30]
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x30]
test ecx, ecx
mov dword [esp + 0x20], esp
je 0x10066b77
add ecx, 4
mov edx, 1
lock xadd dword [ecx], edx
mov ecx, eax
call fcn.10062770
mov edi, eax
jmp 0x10066b84
xor edi, edi
mov esi, dword [esp + 0x18]
test esi, esi
mov byte [esp + 0x2c], 0
je 0x10066bbb
lea eax, [esi + 4]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x10066bbb
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x10066bbb
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov esi, dword [esp + 0x20]
test esi, esi
mov dword [esp + 0x2c], 0xffffffff
je 0x10066bf5
lea eax, [esi + 4]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x10066bf5
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x10066bf5
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov eax, edi
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x24
ret
Function at 0x10066c10
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x10073dcb
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push esi
push edi
mov eax, dword [0x1008c288]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov esi, ecx
mov ecx, dword [esi + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
call edx
push eax
lea ecx, [esp + 0x20]
call fcn.10064cd0
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
mov dword [esp + 0x2c], 0
call edx
push eax
lea ecx, [esp + 0x18]
call fcn.10064cd0
push 0x14
mov byte [esp + 0x30], 1
call sub.MFC80U.DLL_Ordinal_762
add esp, 4
mov dword [esp + 0xc], eax
test eax, eax
mov byte [esp + 0x2c], 2
je 0x10066ce2
mov ecx, dword [esp + 0x14]
sub esp, 8
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [esp + 0x20]
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x20]
test ecx, ecx
mov dword [esp + 0x18], esp
je 0x10066cad
add ecx, 4
mov edx, 1
lock xadd dword [ecx], edx
mov ecx, dword [esp + 0x24]
sub esp, 8
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [esp + 0x30]
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x30]
test ecx, ecx
mov dword [esp + 0x20], esp
je 0x10066cd7
add ecx, 4
mov edx, 1
lock xadd dword [ecx], edx
mov ecx, eax
call fcn.100628b0
mov edi, eax
jmp 0x10066ce4
xor edi, edi
mov esi, dword [esp + 0x18]
test esi, esi
mov byte [esp + 0x2c], 0
je 0x10066d1b
lea eax, [esi + 4]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x10066d1b
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x10066d1b
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov esi, dword [esp + 0x20]
test esi, esi
mov dword [esp + 0x2c], 0xffffffff
je 0x10066d55
lea eax, [esi + 4]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x10066d55
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x10066d55
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov eax, edi
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x24
ret
Function at 0x10066d70
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x10073dcb
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push esi
push edi
mov eax, dword [0x1008c288]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov esi, ecx
mov ecx, dword [esi + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
call edx
push eax
lea ecx, [esp + 0x20]
call fcn.10064cd0
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
mov dword [esp + 0x2c], 0
call edx
push eax
lea ecx, [esp + 0x18]
call fcn.10064cd0
push 0x14
mov byte [esp + 0x30], 1
call sub.MFC80U.DLL_Ordinal_762
add esp, 4
mov dword [esp + 0xc], eax
test eax, eax
mov byte [esp + 0x2c], 2
je 0x10066e42
mov ecx, dword [esp + 0x14]
sub esp, 8
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [esp + 0x20]
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x20]
test ecx, ecx
mov dword [esp + 0x18], esp
je 0x10066e0d
add ecx, 4
mov edx, 1
lock xadd dword [ecx], edx
mov ecx, dword [esp + 0x24]
sub esp, 8
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [esp + 0x30]
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x30]
test ecx, ecx
mov dword [esp + 0x20], esp
je 0x10066e37
add ecx, 4
mov edx, 1
lock xadd dword [ecx], edx
mov ecx, eax
call fcn.100629f0
mov edi, eax
jmp 0x10066e44
xor edi, edi
mov esi, dword [esp + 0x18]
test esi, esi
mov byte [esp + 0x2c], 0
je 0x10066e7b
lea eax, [esi + 4]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x10066e7b
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x10066e7b
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov esi, dword [esp + 0x20]
test esi, esi
mov dword [esp + 0x2c], 0xffffffff
je 0x10066eb5
lea eax, [esi + 4]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x10066eb5
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x10066eb5
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov eax, edi
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x24
ret