joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10085971
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ebp, 1
mov eax, ebp
shl eax, cl
mov ecx, dword [esp + 0x8c]
add byte [eax], al
test dword [ecx], eax
mov dword [esp + 0x2c], eax
je 0x10085b32
fld dword [esi]
lea edi, [ebx - 0xc]
mov ecx, edi
fstp dword [esp + 0x3c]
call fcn.1009e85c
fadd dword [ebx]
mov dword [esp + 0x20], ebp
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x10085997
mov dword [esp + 0x20], 0
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0x10]
mov edx, dword [esi]
push eax
push ecx
push edx
lea ecx, [esp + 0x48]
call fcn.10092aab
lea eax, [esp + 0x3c]
push eax
mov ecx, edi
call fcn.1009e897
fadd dword [ebx]
mov dword [esp + 0x1c], ebp
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x100859d2
mov dword [esp + 0x1c], 0
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0x10]
mov eax, dword [esi + 0xc]
push ecx
push edx
push eax
lea ecx, [esp + 0x54]
call fcn.10092ae7
lea ecx, [esp + 0x48]
push ecx
mov ecx, edi
call fcn.1009e8d3
loopne 0x1008597f
add dword [eax], eax
fadd dword [ebx]
mov dword [esp + 0x18], ebp
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x10085a0e
mov dword [esp + 0x18], 0
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push edx
push eax
push ecx
lea ecx, [esp + 0x60]
call fcn.10092b22
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.1009e90e
fadd dword [ebx]
mov dword [esp + 0x14], ebp
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x10085a49
mov dword [esp + 0x14], 0
mov eax, dword [esi + 0x14]
mov ecx, dword [esi + 4]
mov edx, dword [esi + 0xc]
push eax
push ecx
push edx
lea ecx, [esp + 0x6c]
call fcn.10092b5e
add byte [ebp + 0x50602444], cl
mov ecx, edi
call fcn.1009e94a
fadd dword [ebx]
mov dword [esp + 0x10], ebp
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x10085a85
mov dword [esp + 0x10], 0
mov ecx, dword [esi + 0x14]
mov edx, dword [esi + 0x10]
mov eax, dword [esi]
push ecx
push edx
push eax
lea ecx, [esp + 0x78]
call fcn.10092b99
lea ecx, [esp + 0x6c]
push ecx
mov ecx, edi
call fcn.1009e985
fadd dword [ebx]
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x10085ab6
xor ebp, ebp
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0xc]
push edx
push eax
push ecx
lea ecx, [esp + 0x84]
call fcn.10092bce
lea edx, [esp + 0x78]
push edx
mov ecx, edi
call fcn.1009e9ba
fadd dword [ebx]
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
jne 0x10085af0
mov eax, 1
jmp 0x10085af2
xor eax, eax
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
add eax, ebp
mov ebp, dword [esp + 0x18]
add eax, edx
mov edx, dword [esp + 0x20]
add eax, ecx
mov ecx, dword [esp + 0x24]
add eax, ebp
add eax, edi
add eax, edx
add eax, ecx
je 0x10085b53
cmp eax, 8
jne 0x10085b32
mov ecx, dword [esp + 0x8c]
mov eax, dword [esp + 0x2c]
mov edx, dword [ecx]
not eax
and edx, eax
mov dword [ecx], edx
mov ecx, dword [esp + 0x28]
inc ecx
add ebx, 0x10
cmp ecx, 6
mov dword [esp + 0x28], ecx
jl 0x10085909
pop edi
pop esi
pop ebp
mov al, 1
pop ebx
add esp, 0x74
ret 8
pop edi
pop esi
pop ebp
xor al, al
pop ebx
add esp, 0x74
ret 8
Function at 0x10085983
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ebp, 1
mov eax, ebp
shl eax, cl
mov ecx, dword [esp + 0x8c]
add byte [eax], al
test dword [ecx], eax
mov dword [esp + 0x2c], eax
je 0x10085b32
fld dword [esi]
lea edi, [ebx - 0xc]
mov ecx, edi
fstp dword [esp + 0x3c]
call fcn.1009e85c
fadd dword [ebx]
mov dword [esp + 0x20], ebp
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x10085997
mov dword [esp + 0x20], 0
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0x10]
mov edx, dword [esi]
push eax
push ecx
push edx
lea ecx, [esp + 0x48]
call fcn.10092aab
lea eax, [esp + 0x3c]
push eax
mov ecx, edi
call fcn.1009e897
fadd dword [ebx]
mov dword [esp + 0x1c], ebp
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x100859d2
mov dword [esp + 0x1c], 0
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0x10]
mov eax, dword [esi + 0xc]
push ecx
push edx
push eax
lea ecx, [esp + 0x54]
call fcn.10092ae7
lea ecx, [esp + 0x48]
push ecx
mov ecx, edi
call fcn.1009e8d3
loopne 0x1008597f
add dword [eax], eax
fadd dword [ebx]
mov dword [esp + 0x18], ebp
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x10085a0e
mov dword [esp + 0x18], 0
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push edx
push eax
push ecx
lea ecx, [esp + 0x60]
call fcn.10092b22
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.1009e90e
fadd dword [ebx]
mov dword [esp + 0x14], ebp
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x10085a49
mov dword [esp + 0x14], 0
mov eax, dword [esi + 0x14]
mov ecx, dword [esi + 4]
mov edx, dword [esi + 0xc]
push eax
push ecx
push edx
lea ecx, [esp + 0x6c]
call fcn.10092b5e
add byte [ebp + 0x50602444], cl
mov ecx, edi
call fcn.1009e94a
fadd dword [ebx]
mov dword [esp + 0x10], ebp
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x10085a85
mov dword [esp + 0x10], 0
mov ecx, dword [esi + 0x14]
mov edx, dword [esi + 0x10]
mov eax, dword [esi]
push ecx
push edx
push eax
lea ecx, [esp + 0x78]
call fcn.10092b99
lea ecx, [esp + 0x6c]
push ecx
mov ecx, edi
call fcn.1009e985
fadd dword [ebx]
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x10085ab6
xor ebp, ebp
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0xc]
push edx
push eax
push ecx
lea ecx, [esp + 0x84]
call fcn.10092bce
lea edx, [esp + 0x78]
push edx
mov ecx, edi
call fcn.1009e9ba
fadd dword [ebx]
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
jne 0x10085af0
mov eax, 1
jmp 0x10085af2
xor eax, eax
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
add eax, ebp
mov ebp, dword [esp + 0x18]
add eax, edx
mov edx, dword [esp + 0x20]
add eax, ecx
mov ecx, dword [esp + 0x24]
add eax, ebp
add eax, edi
add eax, edx
add eax, ecx
je 0x10085b53
cmp eax, 8
jne 0x10085b32
mov ecx, dword [esp + 0x8c]
mov eax, dword [esp + 0x2c]
mov edx, dword [ecx]
not eax
and edx, eax
mov dword [ecx], edx
mov ecx, dword [esp + 0x28]
inc ecx
add ebx, 0x10
cmp ecx, 6
mov dword [esp + 0x28], ecx
jl 0x10085909
pop edi
pop esi
pop ebp
mov al, 1
pop ebx
add esp, 0x74
ret 8
pop edi
pop esi
pop ebp
xor al, al
pop ebx
add esp, 0x74
ret 8
Function at 0x10085993
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ebp, 1
mov eax, ebp
shl eax, cl
mov ecx, dword [esp + 0x8c]
add byte [eax], al
test dword [ecx], eax
mov dword [esp + 0x2c], eax
je 0x10085b32
fld dword [esi]
lea edi, [ebx - 0xc]
mov ecx, edi
fstp dword [esp + 0x3c]
call fcn.1009e85c
fadd dword [ebx]
mov dword [esp + 0x20], ebp
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x10085997
mov dword [esp + 0x20], 0
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0x10]
mov edx, dword [esi]
push eax
push ecx
push edx
lea ecx, [esp + 0x48]
call fcn.10092aab
lea eax, [esp + 0x3c]
push eax
mov ecx, edi
call fcn.1009e897
fadd dword [ebx]
mov dword [esp + 0x1c], ebp
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x100859d2
mov dword [esp + 0x1c], 0
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0x10]
mov eax, dword [esi + 0xc]
push ecx
push edx
push eax
lea ecx, [esp + 0x54]
call fcn.10092ae7
lea ecx, [esp + 0x48]
push ecx
mov ecx, edi
call fcn.1009e8d3
loopne 0x1008597f
add dword [eax], eax
fadd dword [ebx]
mov dword [esp + 0x18], ebp
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x10085a0e
mov dword [esp + 0x18], 0
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push edx
push eax
push ecx
lea ecx, [esp + 0x60]
call fcn.10092b22
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.1009e90e
fadd dword [ebx]
mov dword [esp + 0x14], ebp
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x10085a49
mov dword [esp + 0x14], 0
mov eax, dword [esi + 0x14]
mov ecx, dword [esi + 4]
mov edx, dword [esi + 0xc]
push eax
push ecx
push edx
lea ecx, [esp + 0x6c]
call fcn.10092b5e
add byte [ebp + 0x50602444], cl
mov ecx, edi
call fcn.1009e94a
fadd dword [ebx]
mov dword [esp + 0x10], ebp
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x10085a85
mov dword [esp + 0x10], 0
mov ecx, dword [esi + 0x14]
mov edx, dword [esi + 0x10]
mov eax, dword [esi]
push ecx
push edx
push eax
lea ecx, [esp + 0x78]
call fcn.10092b99
lea ecx, [esp + 0x6c]
push ecx
mov ecx, edi
call fcn.1009e985
fadd dword [ebx]
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x10085ab6
xor ebp, ebp
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0xc]
push edx
push eax
push ecx
lea ecx, [esp + 0x84]
call fcn.10092bce
lea edx, [esp + 0x78]
push edx
mov ecx, edi
call fcn.1009e9ba
fadd dword [ebx]
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
jne 0x10085af0
mov eax, 1
jmp 0x10085af2
xor eax, eax
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
add eax, ebp
mov ebp, dword [esp + 0x18]
add eax, edx
mov edx, dword [esp + 0x20]
add eax, ecx
mov ecx, dword [esp + 0x24]
add eax, ebp
add eax, edi
add eax, edx
add eax, ecx
je 0x10085b53
cmp eax, 8
jne 0x10085b32
mov ecx, dword [esp + 0x8c]
mov eax, dword [esp + 0x2c]
mov edx, dword [ecx]
not eax
and edx, eax
mov dword [ecx], edx
mov ecx, dword [esp + 0x28]
inc ecx
add ebx, 0x10
cmp ecx, 6
mov dword [esp + 0x28], ecx
jl 0x10085909
pop edi
pop esi
pop ebp
mov al, 1
pop ebx
add esp, 0x74
ret 8
pop edi
pop esi
pop ebp
xor al, al
pop ebx
add esp, 0x74
ret 8
Function at 0x100859ef
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ebp, 1
mov eax, ebp
shl eax, cl
mov ecx, dword [esp + 0x8c]
add byte [eax], al
test dword [ecx], eax
mov dword [esp + 0x2c], eax
je 0x10085b32
fld dword [esi]
lea edi, [ebx - 0xc]
mov ecx, edi
fstp dword [esp + 0x3c]
call fcn.1009e85c
fadd dword [ebx]
mov dword [esp + 0x20], ebp
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x10085997
mov dword [esp + 0x20], 0
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0x10]
mov edx, dword [esi]
push eax
push ecx
push edx
lea ecx, [esp + 0x48]
call fcn.10092aab
lea eax, [esp + 0x3c]
push eax
mov ecx, edi
call fcn.1009e897
fadd dword [ebx]
mov dword [esp + 0x1c], ebp
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x100859d2
mov dword [esp + 0x1c], 0
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0x10]
mov eax, dword [esi + 0xc]
push ecx
push edx
push eax
lea ecx, [esp + 0x54]
call fcn.10092ae7
lea ecx, [esp + 0x48]
push ecx
mov ecx, edi
call fcn.1009e8d3
loopne 0x1008597f
add dword [eax], eax
fadd dword [ebx]
mov dword [esp + 0x18], ebp
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x10085a0e
mov dword [esp + 0x18], 0
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push edx
push eax
push ecx
lea ecx, [esp + 0x60]
call fcn.10092b22
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.1009e90e
fadd dword [ebx]
mov dword [esp + 0x14], ebp
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x10085a49
mov dword [esp + 0x14], 0
mov eax, dword [esi + 0x14]
mov ecx, dword [esi + 4]
mov edx, dword [esi + 0xc]
push eax
push ecx
push edx
lea ecx, [esp + 0x6c]
call fcn.10092b5e
add byte [ebp + 0x50602444], cl
mov ecx, edi
call fcn.1009e94a
fadd dword [ebx]
mov dword [esp + 0x10], ebp
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x10085a85
mov dword [esp + 0x10], 0
mov ecx, dword [esi + 0x14]
mov edx, dword [esi + 0x10]
mov eax, dword [esi]
push ecx
push edx
push eax
lea ecx, [esp + 0x78]
call fcn.10092b99
lea ecx, [esp + 0x6c]
push ecx
mov ecx, edi
call fcn.1009e985
fadd dword [ebx]
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x10085ab6
xor ebp, ebp
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0xc]
push edx
push eax
push ecx
lea ecx, [esp + 0x84]
call fcn.10092bce
lea edx, [esp + 0x78]
push edx
mov ecx, edi
call fcn.1009e9ba
fadd dword [ebx]
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
jne 0x10085af0
mov eax, 1
jmp 0x10085af2
xor eax, eax
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
add eax, ebp
mov ebp, dword [esp + 0x18]
add eax, edx
mov edx, dword [esp + 0x20]
add eax, ecx
mov ecx, dword [esp + 0x24]
add eax, ebp
add eax, edi
add eax, edx
add eax, ecx
je 0x10085b53
cmp eax, 8
jne 0x10085b32
mov ecx, dword [esp + 0x8c]
mov eax, dword [esp + 0x2c]
mov edx, dword [ecx]
not eax
and edx, eax
mov dword [ecx], edx
mov ecx, dword [esp + 0x28]
inc ecx
add ebx, 0x10
cmp ecx, 6
mov dword [esp + 0x28], ecx
jl 0x10085909
pop edi
pop esi
pop ebp
mov al, 1
pop ebx
add esp, 0x74
ret 8
pop edi
pop esi
pop ebp
xor al, al
pop ebx
add esp, 0x74
ret 8
Function at 0x10085a07
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ebp, 1
mov eax, ebp
shl eax, cl
mov ecx, dword [esp + 0x8c]
add byte [eax], al
test dword [ecx], eax
mov dword [esp + 0x2c], eax
je 0x10085b32
fld dword [esi]
lea edi, [ebx - 0xc]
mov ecx, edi
fstp dword [esp + 0x3c]
call fcn.1009e85c
fadd dword [ebx]
mov dword [esp + 0x20], ebp
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x10085997
mov dword [esp + 0x20], 0
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0x10]
mov edx, dword [esi]
push eax
push ecx
push edx
lea ecx, [esp + 0x48]
call fcn.10092aab
lea eax, [esp + 0x3c]
push eax
mov ecx, edi
call fcn.1009e897
fadd dword [ebx]
mov dword [esp + 0x1c], ebp
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x100859d2
mov dword [esp + 0x1c], 0
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0x10]
mov eax, dword [esi + 0xc]
push ecx
push edx
push eax
lea ecx, [esp + 0x54]
call fcn.10092ae7
lea ecx, [esp + 0x48]
push ecx
mov ecx, edi
call fcn.1009e8d3
loopne 0x1008597f
add dword [eax], eax
fadd dword [ebx]
mov dword [esp + 0x18], ebp
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x10085a0e
mov dword [esp + 0x18], 0
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push edx
push eax
push ecx
lea ecx, [esp + 0x60]
call fcn.10092b22
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.1009e90e
fadd dword [ebx]
mov dword [esp + 0x14], ebp
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x10085a49
mov dword [esp + 0x14], 0
mov eax, dword [esi + 0x14]
mov ecx, dword [esi + 4]
mov edx, dword [esi + 0xc]
push eax
push ecx
push edx
lea ecx, [esp + 0x6c]
call fcn.10092b5e
add byte [ebp + 0x50602444], cl
mov ecx, edi
call fcn.1009e94a
fadd dword [ebx]
mov dword [esp + 0x10], ebp
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x10085a85
mov dword [esp + 0x10], 0
mov ecx, dword [esi + 0x14]
mov edx, dword [esi + 0x10]
mov eax, dword [esi]
push ecx
push edx
push eax
lea ecx, [esp + 0x78]
call fcn.10092b99
lea ecx, [esp + 0x6c]
push ecx
mov ecx, edi
call fcn.1009e985
fadd dword [ebx]
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x10085ab6
xor ebp, ebp
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0xc]
push edx
push eax
push ecx
lea ecx, [esp + 0x84]
call fcn.10092bce
lea edx, [esp + 0x78]
push edx
mov ecx, edi
call fcn.1009e9ba
fadd dword [ebx]
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
jne 0x10085af0
mov eax, 1
jmp 0x10085af2
xor eax, eax
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
add eax, ebp
mov ebp, dword [esp + 0x18]
add eax, edx
mov edx, dword [esp + 0x20]
add eax, ecx
mov ecx, dword [esp + 0x24]
add eax, ebp
add eax, edi
add eax, edx
add eax, ecx
je 0x10085b53
cmp eax, 8
jne 0x10085b32
mov ecx, dword [esp + 0x8c]
mov eax, dword [esp + 0x2c]
mov edx, dword [ecx]
not eax
and edx, eax
mov dword [ecx], edx
mov ecx, dword [esp + 0x28]
inc ecx
add ebx, 0x10
cmp ecx, 6
mov dword [esp + 0x28], ecx
jl 0x10085909
pop edi
pop esi
pop ebp
mov al, 1
pop ebx
add esp, 0x74
ret 8
pop edi
pop esi
pop ebp
xor al, al
pop ebx
add esp, 0x74
ret 8
Function at 0x10085a5d
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ebp, 1
mov eax, ebp
shl eax, cl
mov ecx, dword [esp + 0x8c]
add byte [eax], al
test dword [ecx], eax
mov dword [esp + 0x2c], eax
je 0x10085b32
fld dword [esi]
lea edi, [ebx - 0xc]
mov ecx, edi
fstp dword [esp + 0x3c]
call fcn.1009e85c
fadd dword [ebx]
mov dword [esp + 0x20], ebp
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x10085997
mov dword [esp + 0x20], 0
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0x10]
mov edx, dword [esi]
push eax
push ecx
push edx
lea ecx, [esp + 0x48]
call fcn.10092aab
lea eax, [esp + 0x3c]
push eax
mov ecx, edi
call fcn.1009e897
fadd dword [ebx]
mov dword [esp + 0x1c], ebp
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x100859d2
mov dword [esp + 0x1c], 0
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0x10]
mov eax, dword [esi + 0xc]
push ecx
push edx
push eax
lea ecx, [esp + 0x54]
call fcn.10092ae7
lea ecx, [esp + 0x48]
push ecx
mov ecx, edi
call fcn.1009e8d3
loopne 0x1008597f
add dword [eax], eax
fadd dword [ebx]
mov dword [esp + 0x18], ebp
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x10085a0e
mov dword [esp + 0x18], 0
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push edx
push eax
push ecx
lea ecx, [esp + 0x60]
call fcn.10092b22
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.1009e90e
fadd dword [ebx]
mov dword [esp + 0x14], ebp
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x10085a49
mov dword [esp + 0x14], 0
mov eax, dword [esi + 0x14]
mov ecx, dword [esi + 4]
mov edx, dword [esi + 0xc]
push eax
push ecx
push edx
lea ecx, [esp + 0x6c]
call fcn.10092b5e
add byte [ebp + 0x50602444], cl
mov ecx, edi
call fcn.1009e94a
fadd dword [ebx]
mov dword [esp + 0x10], ebp
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x10085a85
mov dword [esp + 0x10], 0
mov ecx, dword [esi + 0x14]
mov edx, dword [esi + 0x10]
mov eax, dword [esi]
push ecx
push edx
push eax
lea ecx, [esp + 0x78]
call fcn.10092b99
lea ecx, [esp + 0x6c]
push ecx
mov ecx, edi
call fcn.1009e985
fadd dword [ebx]
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
je 0x10085ab6
xor ebp, ebp
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0xc]
push edx
push eax
push ecx
lea ecx, [esp + 0x84]
call fcn.10092bce
lea edx, [esp + 0x78]
push edx
mov ecx, edi
call fcn.1009e9ba
fadd dword [ebx]
fcomp dword [0x10100498]
fnstsw ax
test ah, 1
jne 0x10085af0
mov eax, 1
jmp 0x10085af2
xor eax, eax
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
add eax, ebp
mov ebp, dword [esp + 0x18]
add eax, edx
mov edx, dword [esp + 0x20]
add eax, ecx
mov ecx, dword [esp + 0x24]
add eax, ebp
add eax, edi
add eax, edx
add eax, ecx
je 0x10085b53
cmp eax, 8
jne 0x10085b32
mov ecx, dword [esp + 0x8c]
mov eax, dword [esp + 0x2c]
mov edx, dword [ecx]
not eax
and edx, eax
mov dword [ecx], edx
mov ecx, dword [esp + 0x28]
inc ecx
add ebx, 0x10
cmp ecx, 6
mov dword [esp + 0x28], ecx
jl 0x10085909
pop edi
pop esi
pop ebp
mov al, 1
pop ebx
add esp, 0x74
ret 8
pop edi
pop esi
pop ebp
xor al, al
pop ebx
add esp, 0x74
ret 8
Function at 0x1008a0ff
Capabilities:
Enumerate pe sections

Disassembly:
add esi, 0x20
cmp esi, eax
jle 0x1008a109
mov dword [ebp + 0x20], esi
mov ecx, dword [ebp + 0x24]
lea eax, [ebx + 0x20]
cmp eax, ecx
jle 0x1008a116
mov dword [ebp + 0x24], eax
mov eax, dword [ebp + 8]
test eax, eax
je 0x1008a129
mov ecx, dword [0x1012b794]
push eax
call fcn.100d3969
mov eax, dword [ebp + 0x24]
mov ecx, dword [ebp + 0x20]
push 0
push eax
push ecx
mov ecx, dword [0x1012b794]
call fcn.100d381e
mov dword [ebp + 8], eax
mov ecx, dword [ebp + 8]
call fcn.100ddff9
mov al, byte [ebp + 0x29]
xor edi, edi
Function at 0x10099e1a
Capabilities:
Accept command line arguments

Disassembly:
test eax, eax
pop ecx
je 0x10099e5b
mov eax, dword [0x1013340c]
xor ecx, ecx
mov cl, byte [0x1013340d]
and eax, 0xff
shr dword [0x1013340c], 0x10
mov dword [0x10133414], eax
mov dword [0x10133418], ecx
shl eax, 8
add eax, ecx
mov dword [0x10133410], eax
call 0x10138aa1
test eax, eax
jne 0x10099e5f
call 0x10139d61
xor eax, eax
jmp 0x10099ed1
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov dword [0x1016b60c], eax
call 0x10139a71
mov dword [0x10133338], eax
call 0x10139565
call 0x10139833
call 0x1013977f
call 0x101386e9
inc dword [0x10133334]
jmp 0x10099ece
push 1
pop eax
ret 0xc

Function at 0x10099e21
Capabilities:
Accept command line arguments

Disassembly:
test eax, eax
pop ecx
je 0x10099e5b
mov eax, dword [0x1013340c]
xor ecx, ecx
mov cl, byte [0x1013340d]
and eax, 0xff
shr dword [0x1013340c], 0x10
mov dword [0x10133414], eax
mov dword [0x10133418], ecx
shl eax, 8
add eax, ecx
mov dword [0x10133410], eax
call 0x10138aa1
test eax, eax
jne 0x10099e5f
call 0x10139d61
xor eax, eax
jmp 0x10099ed1
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov dword [0x1016b60c], eax
call 0x10139a71
mov dword [0x10133338], eax
call 0x10139565
call 0x10139833
call 0x1013977f
call 0x101386e9
inc dword [0x10133334]
jmp 0x10099ece
push 1
pop eax
ret 0xc

Function at 0x1009e8d0
Capabilities:
Terminate process

Disassembly:
push dword [esp + 8]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
cmp dword [esp + 0xc], 0
push ebx
mov ebx, dword [esp + 0x14]
mov dword [0x10133444], edi
mov byte [0x10133440], bl
jne 0x1009e935
mov eax, dword [0x1016a5f0]
test eax, eax
je 0x1009e924
mov ecx, dword [0x1016a5ec]
push esi
lea esi, [ecx - 4]
cld
cmp esi, eax

Function at 0x1009e8d3
Capabilities:
Terminate process

Disassembly:
push dword [esp + 8]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
cmp dword [esp + 0xc], 0
push ebx
mov ebx, dword [esp + 0x14]
mov dword [0x10133444], edi
mov byte [0x10133440], bl
jne 0x1009e935
mov eax, dword [0x1016a5f0]
test eax, eax
je 0x1009e924
mov ecx, dword [0x1016a5ec]
push esi
lea esi, [ecx - 4]
cld
cmp esi, eax

Function at 0x1009e90e
Capabilities:
Terminate process

Disassembly:
jb 0x1009e923
mov eax, dword [esi]
test eax, eax
je 0x1009e918
call eax
sub esi, 4
cmp esi, dword [0x1016a5f0]
jae 0x1009e910
pop esi
push 0x1010d4cc
push 0x1010d4c4
call 0x1013d2a9
pop ecx
pop ecx
push 0x1010d4d8
push 0x1010d4d0
call 0x1013d2ba
pop ecx
pop ecx
test ebx, ebx
pop ebx
invalid