joyce8/EMBER2024-capa huggingface dataset:
Function at 0x405dd0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 4], 0x6e
mov dword [ebp - 8], 0xdd
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
movzx eax, ax
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
shr ecx, 0x10
mov dword [ebp - 4], ecx
push 0
call fcn.00401060
add esp, 4
push 0
push 0x63
push edx
push eax
call fcn.0045ade0
mov dword [ebp - 8], eax
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 8]
jbe 0x405e30
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, 1
jmp 0x405e32
xor eax, eax
mov esp, ebp
pop ebp
ret

Function at 0x405ee0
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
push ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
je 0x405f01
cmp dword [ebp - 4], 4
je 0x405f01
cmp dword [ebp - 4], 8
je 0x405f01
jmp 0x405f14
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov eax, 1
jmp 0x405f1a
xor eax, eax
jmp 0x405f1a
mov esp, ebp
pop ebp
ret

Function at 0x406020
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 4], 0xf7
mov dword [ebp - 8], 0xa2
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
movzx eax, ax
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
shr ecx, 0x10
mov dword [ebp - 4], ecx
push 0
call fcn.00401060
add esp, 4
push 0
push 0x63
push edx
push eax
call fcn.0045ade0
mov dword [ebp - 8], eax
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 8]
jbe 0x40607a
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov eax, 1
jmp 0x40607c
xor eax, eax
mov esp, ebp
pop ebp
ret

Function at 0x4060e0
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 4], 0x97
mov dword [ebp - 8], 0x10
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
movzx eax, ax
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
shr ecx, 0x10
mov dword [ebp - 4], ecx
push 0
call fcn.00401060
add esp, 4
push 0
push 0x63
push edx
push eax
call fcn.0045ade0
mov dword [ebp - 8], eax
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 8]
jbe 0x40613a
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov eax, 1
jmp 0x40613c
xor eax, eax
mov esp, ebp
pop ebp
ret

Function at 0x406140
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov dword [ebp - 4], 0xf9
mov dword [ebp - 8], 0xda
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 4], eax
push 0
call fcn.00401060
add esp, 4
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 0
fild qword [ebp - 0x10]
sub esp, 8
fstp qword [esp]
call sub.MSVCR90.dll_sin
add esp, 8
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], 0
fild qword [ebp - 0x18]
fcompp
fnstsw ax
test ah, 5
jp 0x4061b2
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov eax, 1
jmp 0x4061b4
xor eax, eax
mov esp, ebp
pop ebp
ret
Function at 0x4061c0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 4], 0xe0
mov dword [ebp - 8], 0x46
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
movzx eax, ax
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
shr ecx, 0x10
mov dword [ebp - 4], ecx
push 0
call fcn.00401060
add esp, 4
push 0
push 0x63
push edx
push eax
call fcn.0045ade0
mov dword [ebp - 8], eax
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 8]
jbe 0x406220
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, 1
jmp 0x406222
xor eax, eax
mov esp, ebp
pop ebp
ret

Function at 0x406230
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov dword [ebp - 4], 0xfe
mov dword [ebp - 8], 0xbf
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 4], eax
push 0
call fcn.00401060
add esp, 4
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 0
fild qword [ebp - 0x10]
sub esp, 8
fstp qword [esp]
call sub.MSVCR90.dll_sin
add esp, 8
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], 0
fild qword [ebp - 0x18]
fcompp
fnstsw ax
test ah, 5
jp 0x4062a2
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov eax, 1
jmp 0x4062a4
xor eax, eax
mov esp, ebp
pop ebp
ret

Function at 0x4063d0
Capabilities:
Create directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 4], 0x38
mov dword [ebp - 8], 9
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
movzx eax, ax
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
shr ecx, 0x10
mov dword [ebp - 4], ecx
push 0
call fcn.00401060
add esp, 4
push 0
push 0x63
push edx
push eax
call fcn.0045ade0
mov dword [ebp - 8], eax
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 8]
jbe 0x40642a
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov eax, 1
jmp 0x40642c
xor eax, eax
mov esp, ebp
pop ebp
ret

Function at 0x406430
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
call dword [sym.imp.MSVCR90.dll_rand]
cdq
mov ecx, 3
idiv ecx
add edx, 1
mov dword [ebp - 8], edx
mov dword [ebp - 4], 0
mov dword [ebp - 0xc], 0
jmp 0x406463
mov edx, dword [ebp - 0xc]
add edx, 1
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 8]
jge 0x406481
call dword [sym.imp.MSVCR90.dll_rand]
cdq
idiv dword [ebp - 8]
mov ecx, dword [ebp - 4]
lea edx, [ecx + edx + 1]
mov dword [ebp - 4], edx
jmp 0x40645a
cmp dword [ebp - 4], 0
jge 0x40649e
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, 1
jmp 0x4064a0
xor eax, eax
mov esp, ebp
pop ebp
ret
Function at 0x406590
Capabilities:
Create directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 4], 0x21
mov dword [ebp - 8], 0xce
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
movzx eax, ax
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
shr ecx, 0x10
mov dword [ebp - 4], ecx
push 0
call fcn.00401060
add esp, 4
push 0
push 0x63
push edx
push eax
call fcn.0045ade0
mov dword [ebp - 8], eax
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 8]
jbe 0x4065ea
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov eax, 1
jmp 0x4065ec
xor eax, eax
mov esp, ebp
pop ebp
ret

Function at 0x4065f0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 4], 0x62
mov dword [ebp - 8], 0xe9
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
movzx eax, ax
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
shr ecx, 0x10
mov dword [ebp - 4], ecx
push 0
call fcn.00401060
add esp, 4
push 0
push 0x63
push edx
push eax
call fcn.0045ade0
mov dword [ebp - 8], eax
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 8]
jbe 0x406650
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, 1
jmp 0x406652
xor eax, eax
mov esp, ebp
pop ebp
ret

Function at 0x406660
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
call dword [sym.imp.MSVCR90.dll_rand]
cdq
mov ecx, 3
idiv ecx
add edx, 1
mov dword [ebp - 8], edx
mov dword [ebp - 4], 0
mov dword [ebp - 0xc], 0
jmp 0x406693
mov edx, dword [ebp - 0xc]
add edx, 1
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 8]
jge 0x4066b1
call dword [sym.imp.MSVCR90.dll_rand]
cdq
idiv dword [ebp - 8]
mov ecx, dword [ebp - 4]
lea edx, [ecx + edx + 1]
mov dword [ebp - 4], edx
jmp 0x40668a
cmp dword [ebp - 4], 0
jge 0x4066c8
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov eax, 1
jmp 0x4066ca
xor eax, eax
mov esp, ebp
pop ebp
ret

Function at 0x406750
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 4], 0x6c
mov dword [ebp - 8], 0xdc
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
movzx eax, ax
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
shr ecx, 0x10
mov dword [ebp - 4], ecx
push 0
call fcn.00401060
add esp, 4
push 0
push 0x63
push edx
push eax
call fcn.0045ade0
mov dword [ebp - 8], eax
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 8]
jbe 0x4067aa
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov eax, 1
jmp 0x4067ac
xor eax, eax
mov esp, ebp
pop ebp
ret
Function at 0x4067b0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov dword [ebp - 4], 0x7c
mov dword [ebp - 8], 0xa
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 4], eax
push 0
call fcn.00401060
add esp, 4
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 0
fild qword [ebp - 0x10]
sub esp, 8
fstp qword [esp]
call sub.MSVCR90.dll_sin
add esp, 8
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], 0
fild qword [ebp - 0x18]
fcompp
fnstsw ax
test ah, 5
jp 0x406828
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, 1
jmp 0x40682a
xor eax, eax
mov esp, ebp
pop ebp
ret

Function at 0x4068b0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov dword [ebp - 4], 0x7d
mov dword [ebp - 8], 0x84
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 4], eax
push 0
call fcn.00401060
add esp, 4
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 0
fild qword [ebp - 0x10]
sub esp, 8
fstp qword [esp]
call sub.MSVCR90.dll_sin
add esp, 8
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], 0
fild qword [ebp - 0x18]
fcompp
fnstsw ax
test ah, 5
jp 0x406928
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, 1
jmp 0x40692a
xor eax, eax
mov esp, ebp
pop ebp
ret

Function at 0x4069f0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 4], 0x57
mov dword [ebp - 8], 0x86
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
movzx eax, ax
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
shr ecx, 0x10
mov dword [ebp - 4], ecx
push 0
call fcn.00401060
add esp, 4
push 0
push 0x63
push edx
push eax
call fcn.0045ade0
mov dword [ebp - 8], eax
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 8]
jbe 0x406a50
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, 1
jmp 0x406a52
xor eax, eax
mov esp, ebp
pop ebp
ret

Function at 0x406a60
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 4], 0x50
mov dword [ebp - 8], 0x4e
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
movzx eax, ax
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
shr ecx, 0x10
mov dword [ebp - 4], ecx
push 0
call fcn.00401060
add esp, 4
push 0
push 0x63
push edx
push eax
call fcn.0045ade0
mov dword [ebp - 8], eax
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 8]
jbe 0x406ac0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, 1
jmp 0x406ac2
xor eax, eax
mov esp, ebp
pop ebp
ret
Function at 0x406d40
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 4], 0x67
mov dword [ebp - 8], 0xae
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
movzx eax, ax
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
shr ecx, 0x10
mov dword [ebp - 4], ecx
push 0
call fcn.00401060
add esp, 4
push 0
push 0x63
push edx
push eax
call fcn.0045ade0
mov dword [ebp - 8], eax
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 8]
jbe 0x406d9a
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov eax, 1
jmp 0x406d9c
xor eax, eax
mov esp, ebp
pop ebp
ret

Function at 0x406e80
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 4], 0xb5
mov dword [ebp - 8], 0x1c
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
movzx eax, ax
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
shr ecx, 0x10
mov dword [ebp - 4], ecx
push 0
call fcn.00401060
add esp, 4
push 0
push 0x63
push edx
push eax
call fcn.0045ade0
mov dword [ebp - 8], eax
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 8]
jbe 0x406eda
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov eax, 1
jmp 0x406edc
xor eax, eax
mov esp, ebp
pop ebp
ret

Function at 0x406ee0
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov dword [ebp - 4], 0xc
mov dword [ebp - 8], 0xe
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 4], eax
push 0
call fcn.00401060
add esp, 4
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 0
fild qword [ebp - 0x10]
sub esp, 8
fstp qword [esp]
call sub.MSVCR90.dll_sin
add esp, 8
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], 0
fild qword [ebp - 0x18]
fcompp
fnstsw ax
test ah, 5
jp 0x406f52
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov eax, 1
jmp 0x406f54
xor eax, eax
mov esp, ebp
pop ebp
ret

Function at 0x406fe0
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 4], 0x11
mov dword [ebp - 8], 0x3f
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
movzx eax, ax
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
shr ecx, 0x10
mov dword [ebp - 4], ecx
push 0
call fcn.00401060
add esp, 4
push 0
push 0x63
push edx
push eax
call fcn.0045ade0
mov dword [ebp - 8], eax
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 8]
jbe 0x40703a
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov eax, 1
jmp 0x40703c
xor eax, eax
mov esp, ebp
pop ebp
ret
Function at 0x407040
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov dword [ebp - 4], 0xba
mov dword [ebp - 8], 0x51
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 4], eax
push 0
call fcn.00401060
add esp, 4
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 0
fild qword [ebp - 0x10]
sub esp, 8
fstp qword [esp]
call sub.MSVCR90.dll_sin
add esp, 8
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], 0
fild qword [ebp - 0x18]
fcompp
fnstsw ax
test ah, 5
jp 0x4070b2
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov eax, 1
jmp 0x4070b4
xor eax, eax
mov esp, ebp
pop ebp
ret

Function at 0x407130
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov dword [ebp - 4], 0x22
mov dword [ebp - 8], 0x1f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 4], eax
push 0
call fcn.00401060
add esp, 4
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 0
fild qword [ebp - 0x10]
sub esp, 8
fstp qword [esp]
call sub.MSVCR90.dll_sin
add esp, 8
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], 0
fild qword [ebp - 0x18]
fcompp
fnstsw ax
test ah, 5
jp 0x4071a2
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov eax, 1
jmp 0x4071a4
xor eax, eax
mov esp, ebp
pop ebp
ret

Function at 0x4071b0
Capabilities:
Create directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 4], 0xed
mov dword [ebp - 8], 0x71
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
movzx eax, ax
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
shr ecx, 0x10
mov dword [ebp - 4], ecx
push 0
call fcn.00401060
add esp, 4
push 0
push 0x63
push edx
push eax
call fcn.0045ade0
mov dword [ebp - 8], eax
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 8]
jbe 0x40720a
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov eax, 1
jmp 0x40720c
xor eax, eax
mov esp, ebp
pop ebp
ret

Function at 0x4072f0
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 4], 0x14
mov dword [ebp - 8], 0x76
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
movzx eax, ax
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
shr ecx, 0x10
mov dword [ebp - 4], ecx
push 0
call fcn.00401060
add esp, 4
push 0
push 0x63
push edx
push eax
call fcn.0045ade0
mov dword [ebp - 8], eax
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 8]
jbe 0x40734a
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov eax, 1
jmp 0x40734c
xor eax, eax
mov esp, ebp
pop ebp
ret
Function at 0x4073d0
Capabilities:
Create directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov dword [ebp - 4], 0x59
mov dword [ebp - 8], 0xb
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 4], eax
push 0
call fcn.00401060
add esp, 4
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 0
fild qword [ebp - 0x10]
sub esp, 8
fstp qword [esp]
call sub.MSVCR90.dll_sin
add esp, 8
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], 0
fild qword [ebp - 0x18]
fcompp
fnstsw ax
test ah, 5
jp 0x407442
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov eax, 1
jmp 0x407444
xor eax, eax
mov esp, ebp
pop ebp
ret

Function at 0x407580
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 4], 0xfc
mov dword [ebp - 8], 0x30
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
movzx eax, ax
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
shr ecx, 0x10
mov dword [ebp - 4], ecx
push 0
call fcn.00401060
add esp, 4
push 0
push 0x63
push edx
push eax
call fcn.0045ade0
mov dword [ebp - 8], eax
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 8]
jbe 0x4075da
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov eax, 1
jmp 0x4075dc
xor eax, eax
mov esp, ebp
pop ebp
ret

Function at 0x407660
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov dword [ebp - 4], 0xee
mov dword [ebp - 8], 0x38
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 4], eax
push 0
call fcn.00401060
add esp, 4
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 0
fild qword [ebp - 0x10]
sub esp, 8
fstp qword [esp]
call sub.MSVCR90.dll_sin
add esp, 8
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], 0
fild qword [ebp - 0x18]
fcompp
fnstsw ax
test ah, 5
jp 0x4076d2
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov eax, 1
jmp 0x4076d4
xor eax, eax
mov esp, ebp
pop ebp
ret

Function at 0x407760
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 4], 0xdd
mov dword [ebp - 8], 0x93
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
movzx eax, ax
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
shr ecx, 0x10
mov dword [ebp - 4], ecx
push 0
call fcn.00401060
add esp, 4
push 0
push 0x63
push edx
push eax
call fcn.0045ade0
mov dword [ebp - 8], eax
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 8]
jbe 0x4077c0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, 1
jmp 0x4077c2
xor eax, eax
mov esp, ebp
pop ebp
ret
Function at 0x4077d0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov dword [ebp - 4], 0x46
mov dword [ebp - 8], 0x60
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 4], eax
push 0
call fcn.00401060
add esp, 4
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 0
fild qword [ebp - 0x10]
sub esp, 8
fstp qword [esp]
call sub.MSVCR90.dll_sin
add esp, 8
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], 0
fild qword [ebp - 0x18]
fcompp
fnstsw ax
test ah, 5
jp 0x407848
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, 1
jmp 0x40784a
xor eax, eax
mov esp, ebp
pop ebp
ret

Function at 0x407850
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 4], 0x28
mov dword [ebp - 8], 0x74
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
movzx eax, ax
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
shr ecx, 0x10
mov dword [ebp - 4], ecx
push 0
call fcn.00401060
add esp, 4
push 0
push 0x63
push edx
push eax
call fcn.0045ade0
mov dword [ebp - 8], eax
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 8]
jbe 0x4078b0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, 1
jmp 0x4078b2
xor eax, eax
mov esp, ebp
pop ebp
ret

Function at 0x4078c0
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 4], 0xd4
mov dword [ebp - 8], 0x77
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
movzx eax, ax
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
shr ecx, 0x10
mov dword [ebp - 4], ecx
push 0
call fcn.00401060
add esp, 4
push 0
push 0x63
push edx
push eax
call fcn.0045ade0
mov dword [ebp - 8], eax
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 8]
jbe 0x40791a
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov eax, 1
jmp 0x40791c
xor eax, eax
mov esp, ebp
pop ebp
ret

Function at 0x407ae0
Capabilities:
Create directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 4], 0x60
mov dword [ebp - 8], 0xce
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
movzx eax, ax
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
shr ecx, 0x10
mov dword [ebp - 4], ecx
push 0
call fcn.00401060
add esp, 4
push 0
push 0x63
push edx
push eax
call fcn.0045ade0
mov dword [ebp - 8], eax
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 8]
jbe 0x407b3a
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov eax, 1
jmp 0x407b3c
xor eax, eax
mov esp, ebp
pop ebp
ret
Function at 0x407d10
Capabilities:
Create directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov dword [ebp - 4], 0x16
mov dword [ebp - 8], 0x77
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 4], eax
push 0
call fcn.00401060
add esp, 4
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 0
fild qword [ebp - 0x10]
sub esp, 8
fstp qword [esp]
call sub.MSVCR90.dll_sin
add esp, 8
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], 0
fild qword [ebp - 0x18]
fcompp
fnstsw ax
test ah, 5
jp 0x407d82
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov eax, 1
jmp 0x407d84
xor eax, eax
mov esp, ebp
pop ebp
ret

Function at 0x407e50
Capabilities:
Create directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
call dword [sym.imp.MSVCR90.dll_rand]
cdq
mov ecx, 3
idiv ecx
add edx, 1
mov dword [ebp - 8], edx
mov dword [ebp - 4], 0
mov dword [ebp - 0xc], 0
jmp 0x407e83
mov edx, dword [ebp - 0xc]
add edx, 1
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 8]
jge 0x407ea1
call dword [sym.imp.MSVCR90.dll_rand]
cdq
idiv dword [ebp - 8]
mov ecx, dword [ebp - 4]
lea edx, [ecx + edx + 1]
mov dword [ebp - 4], edx
jmp 0x407e7a
cmp dword [ebp - 4], 0
jge 0x407eb8
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov eax, 1
jmp 0x407eba
xor eax, eax
mov esp, ebp
pop ebp
ret

Function at 0x408040
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov dword [ebp - 4], 0xd2
mov dword [ebp - 8], 0xa6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 4], eax
push 0
call fcn.00401060
add esp, 4
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 0
fild qword [ebp - 0x10]
sub esp, 8
fstp qword [esp]
call sub.MSVCR90.dll_sin
add esp, 8
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], 0
fild qword [ebp - 0x18]
fcompp
fnstsw ax
test ah, 5
jp 0x4080b2
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov eax, 1
jmp 0x4080b4
xor eax, eax
mov esp, ebp
pop ebp
ret