joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1000b8a0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x1047eb60]
imul eax, dword [0x1047eb70]
mov dword [0x101a2314], eax
mov ecx, dword [0x1047eb08]
and ecx, dword [0x101a23dc]
mov dword [0x101a2330], ecx
mov edx, dword [0x1047eb74]
and edx, dword [0x1047eb78]
mov dword [0x101a2368], edx
mov eax, dword [0x1047eb84]
add eax, dword [0x1047eba0]
mov dword [0x101a23dc], eax
mov ecx, dword [0x1047eb1c]
imul ecx, dword [0x101a2338]
mov dword [0x1047eb30], ecx
push str.fuckyou
call fcn.10005b10
add esp, 4
mov edx, dword [0x1047ebb8]
sub edx, dword [0x101a23d8]
mov dword [0x101a2344], edx
mov eax, dword [0x101a2338]
imul eax, dword [0x101a235c]
mov dword [0x1047eb98], eax
mov ecx, dword [0x1047eb50]
add ecx, dword [0x101a2394]
mov dword [0x1047eb80], ecx
mov edx, dword [0x1047eb70]
add edx, dword [0x1047ebac]
mov dword [0x101a23d0], edx
push 0
call fcn.1012b5f8
mov eax, dword [0x1047eb24]
add eax, dword [0x101a23e8]
mov dword [0x101a23ec], eax
mov ecx, dword [0x1047eba4]
imul ecx, dword [0x1047eb64]
mov dword [0x1047eba4], ecx
mov edx, dword [0x101a2394]
and edx, dword [0x101a2360]
mov dword [0x1047eb18], edx
mov eax, dword [0x101a2334]
add eax, dword [0x1047eb54]
mov dword [0x101a23d0], eax
mov ecx, dword [0x101a23c4]
sub ecx, dword [0x101a239c]
mov dword [0x1047eb44], ecx
mov edx, dword [0x1047eb58]
sub edx, dword [0x101a22ec]
mov dword [0x1047eb54], edx
mov eax, dword [0x1047eba8]
sub eax, dword [0x1047eb14]
mov dword [0x1047eb20], eax
mov ecx, dword [0x1047eaf8]
and ecx, dword [0x1047eb00]
mov dword [0x101a239c], ecx
xor eax, eax
jmp 0x1000ba09
pop ebp
ret
Function at 0x1000ba10
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x101a2310]
imul eax, dword [0x101a22e8]
mov dword [0x101a234c], eax
mov ecx, dword [0x101a23b8]
sub ecx, dword [0x1047eb68]
mov dword [0x101a2308], ecx
mov edx, dword [0x101a236c]
sub edx, dword [0x101a230c]
mov dword [0x1047eb5c], edx
mov eax, dword [0x1047eb5c]
and eax, dword [0x1047eb20]
mov dword [0x1047eb88], eax
mov ecx, dword [0x1047eb94]
imul ecx, dword [0x101a2390]
mov dword [0x101a2348], ecx
mov edx, dword [0x101a23a4]
add edx, dword [0x1047eb1c]
mov dword [0x1047eb2c], edx
mov eax, dword [0x101a230c]
sub eax, dword [0x1047eb78]
mov dword [0x101a2368], eax
mov ecx, dword [0x101a23bc]
imul ecx, dword [0x101a234c]
mov dword [0x1047eb18], ecx
mov edx, dword [0x1047eb30]
add edx, dword [0x1047eb68]
mov dword [0x101a22fc], edx
push str.fuckyou
call fcn.10005b10
add esp, 4
mov eax, dword [0x101a237c]
add eax, dword [0x101a23ac]
mov dword [0x101a23f0], eax
mov ecx, dword [0x101a2378]
imul ecx, dword [0x101a238c]
mov dword [0x1047eb24], ecx
push 0
call fcn.1012b5f8
mov edx, dword [0x1047eb04]
add edx, dword [0x1047ebac]
mov dword [0x101a2344], edx
mov eax, dword [0x1047eb90]
add eax, dword [0x101a23a4]
mov dword [0x1047eb48], eax
mov ecx, dword [0x101a2398]
add ecx, dword [0x1047ebb4]
mov dword [0x101a23a8], ecx
mov edx, dword [0x101a23ec]
and edx, dword [0x101a232c]
mov dword [0x101a23e4], edx
mov eax, dword [0x1047eb90]
and eax, dword [0x1047eb0c]
mov dword [0x1047eb78], eax
mov ecx, dword [0x1047eb48]
and ecx, dword [0x101a23e4]
mov dword [0x101a23ec], ecx
mov edx, dword [0x101a234c]
and edx, dword [0x101a2338]
mov dword [0x101a238c], edx
xor eax, eax
jmp 0x1000bbad
pop ebp
ret
Function at 0x1000bbb0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x1047eafc]
imul eax, dword [0x1047eb84]
mov dword [0x101a23d8], eax
mov ecx, dword [0x1047eb64]
sub ecx, dword [0x1047eb70]
mov dword [0x1047eb38], ecx
mov edx, dword [0x1047eb2c]
sub edx, dword [0x1047eb50]
mov dword [0x1047eb54], edx
mov eax, dword [0x101a23c0]
add eax, dword [0x101a2390]
mov dword [0x101a2364], eax
mov ecx, dword [0x1047eb7c]
imul ecx, dword [0x101a23a4]
mov dword [0x1047eb8c], ecx
mov edx, dword [0x101a22f8]
sub edx, dword [0x101a23dc]
mov dword [0x1047eb7c], edx
mov eax, dword [0x1047eb1c]
add eax, dword [0x1047ebb0]
mov dword [0x101a23d4], eax
push str.fuckyou
call fcn.10005b10
add esp, 4
mov ecx, dword [0x101a234c]
imul ecx, dword [0x101a23b0]
mov dword [0x101a2324], ecx
mov edx, dword [0x101a22f0]
sub edx, dword [0x101a2394]
mov dword [0x101a238c], edx
mov eax, dword [0x101a23a0]
add eax, dword [0x101a23a4]
mov dword [0x1047eb2c], eax
mov ecx, dword [0x1047eb3c]
imul ecx, dword [0x101a2364]
mov dword [0x101a2350], ecx
mov edx, dword [0x1047eba0]
sub edx, dword [0x1047eb8c]
mov dword [0x1047eb74], edx
mov eax, dword [0x101a231c]
imul eax, dword [0x101a238c]
mov dword [0x1047eb08], eax
mov ecx, dword [0x101a22e8]
add ecx, dword [0x101a22fc]
mov dword [0x101a230c], ecx
push 0
call fcn.1012b5f8
mov edx, dword [0x1047eb08]
add edx, dword [0x101a23a4]
mov dword [0x101a2380], edx
mov eax, dword [0x101a234c]
sub eax, dword [0x101a2300]
mov dword [0x101a2320], eax
mov ecx, dword [0x101a23c8]
and ecx, dword [0x101a22e8]
mov dword [0x101a23a0], ecx
mov edx, dword [0x1047eb50]
and edx, dword [0x101a22fc]
mov dword [0x101a2388], edx
mov eax, dword [0x101a234c]
sub eax, dword [0x1047eb7c]
mov dword [0x1047ebb8], eax
mov ecx, dword [0x101a2350]
add ecx, dword [0x101a2370]
mov dword [0x101a23bc], ecx
mov edx, dword [0x101a2354]
and edx, dword [0x1047eaf4]
mov dword [0x101a23bc], edx
mov eax, dword [0x1047eb0c]
and eax, dword [0x1047eb94]
mov dword [0x1047eb48], eax
mov ecx, dword [0x101a22fc]
and ecx, dword [0x1047eb9c]
mov dword [0x101a2370], ecx
xor eax, eax
jmp 0x1000bd70
pop ebp
ret
Function at 0x1000bd80
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x101a2380]
sub eax, dword [0x1047eb6c]
mov dword [0x1047eafc], eax
mov ecx, dword [0x1047eba8]
imul ecx, dword [0x101a2370]
mov dword [0x101a23a0], ecx
mov edx, dword [0x101a22ec]
sub edx, dword [0x1047eb14]
mov dword [0x101a235c], edx
mov eax, dword [0x101a231c]
and eax, dword [0x101a2374]
mov dword [0x1047eb9c], eax
mov ecx, dword [0x101a23a4]
add ecx, dword [0x101a236c]
mov dword [0x101a23a4], ecx
mov edx, dword [0x101a23d0]
sub edx, dword [0x1047eb20]
mov dword [0x101a233c], edx
mov eax, dword [0x1047eb94]
and eax, dword [0x101a2350]
mov dword [0x101a2394], eax
mov ecx, dword [0x101a2378]
imul ecx, dword [0x101a23c0]
mov dword [0x1047eb44], ecx
mov edx, dword [0x101a23b4]
and edx, dword [0x101a2340]
mov dword [0x1047eb54], edx
push str.fuckyou
call fcn.10005b10
add esp, 4
mov eax, dword [0x1047eb44]
imul eax, dword [0x101a2360]
mov dword [0x1047eb20], eax
mov ecx, dword [0x1047eb98]
add ecx, dword [0x101a22e8]
mov dword [0x101a23ec], ecx
mov edx, dword [0x101a2324]
imul edx, dword [0x1047eb34]
mov dword [0x101a2328], edx
mov eax, dword [0x1047ebb0]
imul eax, dword [0x101a22f4]
mov dword [0x101a23b0], eax
mov ecx, dword [0x1047eb80]
imul ecx, dword [0x1047eb1c]
mov dword [0x101a2340], ecx
mov edx, dword [0x101a2300]
imul edx, dword [0x101a22f8]
mov dword [0x101a23d4], edx
mov eax, dword [0x101a22f4]
imul eax, dword [0x101a23d4]
mov dword [0x101a23e4], eax
push 0
call fcn.1012b5f8
mov ecx, dword [0x101a2308]
and ecx, dword [0x101a23cc]
mov dword [0x1047eb60], ecx
mov edx, dword [0x101a2374]
add edx, dword [0x101a234c]
mov dword [0x1047eb50], edx
mov eax, dword [0x101a2340]
imul eax, dword [0x101a2328]
mov dword [0x101a2314], eax
mov ecx, dword [0x1047eb58]
imul ecx, dword [0x101a2390]
mov dword [0x1047eb3c], ecx
mov edx, dword [0x1047eb84]
sub edx, dword [0x1047eb88]
mov dword [0x1047eb40], edx
mov eax, dword [0x101a2330]
imul eax, dword [0x101a2320]
mov dword [0x101a238c], eax
xor eax, eax
jmp 0x1000bf46
pop ebp
ret
Function at 0x1000bf50
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x1047eb58]
and eax, dword [0x1047eb74]
mov dword [0x1047eb30], eax
push str.fuckyou
call fcn.10005b10
add esp, 4
mov ecx, dword [0x101a235c]
and ecx, dword [0x1047eb34]
mov dword [0x1047ebb0], ecx
mov edx, dword [0x1047eb88]
sub edx, dword [0x101a233c]
mov dword [0x1047eb78], edx
mov eax, dword [0x1047ebb4]
add eax, dword [0x1047eb18]
mov dword [0x1047eafc], eax
mov ecx, dword [0x101a233c]
imul ecx, dword [0x1047eb8c]
mov dword [0x1047eb70], ecx
mov edx, dword [0x1047eb38]
imul edx, dword [0x1047eb7c]
mov dword [0x101a23f0], edx
mov eax, dword [0x101a23ac]
imul eax, dword [0x101a2374]
mov dword [0x101a23a8], eax
mov ecx, dword [0x1047eb28]
add ecx, dword [0x101a22f8]
mov dword [0x101a2340], ecx
mov edx, dword [0x101a2324]
add edx, dword [0x1047eb44]
mov dword [0x1047eb20], edx
mov eax, dword [0x101a2340]
imul eax, dword [0x1047eb60]
mov dword [0x101a2330], eax
push 0
call fcn.1012b5f8
mov ecx, dword [0x101a23c4]
and ecx, dword [0x101a23dc]
mov dword [0x1047eb88], ecx
mov edx, dword [0x101a23b0]
and edx, dword [0x101a23dc]
mov dword [0x1047eb60], edx
mov eax, dword [0x1047eafc]
add eax, dword [0x1047eb70]
mov dword [0x1047eb4c], eax
xor eax, eax
jmp 0x1000c096
pop ebp
ret

Function at 0x1000c0a0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x1047eb7c]
and eax, dword [0x1047eb14]
mov dword [0x1047eb64], eax
mov ecx, dword [0x101a23b0]
sub ecx, dword [0x101a23e0]
mov dword [0x101a231c], ecx
push str.fuckyou
call fcn.10005b10
add esp, 4
mov edx, dword [0x101a235c]
and edx, dword [0x101a23d8]
mov dword [0x1047eb24], edx
mov eax, dword [0x1047eaf4]
add eax, dword [0x1047eb44]
mov dword [0x1047eafc], eax
mov ecx, dword [0x1047eafc]
and ecx, dword [0x101a2354]
mov dword [0x1047ebb0], ecx
mov edx, dword [0x1047eb04]
add edx, dword [0x1047eaf0]
mov dword [0x101a234c], edx
push 0
call fcn.1012b5f8
mov eax, dword [0x1047eafc]
sub eax, dword [0x1047eb58]
mov dword [0x101a233c], eax
mov ecx, dword [0x101a23a8]
sub ecx, dword [0x1047eb84]
mov dword [0x101a2388], ecx
mov edx, dword [0x101a2398]
and edx, dword [0x101a23d0]
mov dword [0x101a22f0], edx
mov eax, dword [0x101a23bc]
add eax, dword [0x101a23b4]
mov dword [0x101a2344], eax
mov ecx, dword [0x1047eb28]
add ecx, dword [0x101a23e8]
mov dword [0x1047eb34], ecx
mov edx, dword [0x101a23c8]
sub edx, dword [0x1047eb78]
mov dword [0x1047ebb4], edx
mov eax, dword [0x101a236c]
sub eax, dword [0x101a23b0]
mov dword [0x101a23c8], eax
mov ecx, dword [0x101a2338]
add ecx, dword [0x1047eb68]
mov dword [0x1047eba4], ecx
xor eax, eax
jmp 0x1000c229
pop ebp
ret
Function at 0x1000c230
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x1047eb40]
add eax, dword [0x101a23cc]
mov dword [0x1047eb60], eax
mov ecx, dword [0x1047eb5c]
and ecx, dword [0x101a23c0]
mov dword [0x101a2388], ecx
push str.fuckyou
call fcn.10005b10
add esp, 4
mov edx, dword [0x101a2354]
imul edx, dword [0x101a23a0]
mov dword [0x1047eb90], edx
mov eax, dword [0x101a23d8]
imul eax, dword [0x1047eb64]
mov dword [0x1047eb7c], eax
mov ecx, dword [0x1047eb94]
sub ecx, dword [0x1047eb4c]
mov dword [0x1047eb80], ecx
mov edx, dword [0x101a2308]
imul edx, dword [0x1047eb7c]
mov dword [0x101a2398], edx
mov eax, dword [0x101a235c]
sub eax, dword [0x101a23d0]
mov dword [0x1047eb64], eax
mov ecx, dword [0x1047eb0c]
sub ecx, dword [0x1047eb9c]
mov dword [0x101a2334], ecx
push 0
call fcn.1012b5f8
mov edx, dword [0x1047eb2c]
sub edx, dword [0x101a2320]
mov dword [0x1047eb5c], edx
mov eax, dword [0x1047eb50]
add eax, dword [0x101a2348]
mov dword [0x101a23c8], eax
mov ecx, dword [0x1047eb08]
and ecx, dword [0x101a2360]
mov dword [0x101a2350], ecx
mov edx, dword [0x1047eb3c]
add edx, dword [0x101a23cc]
mov dword [0x1047eb00], edx
mov eax, dword [0x1047eba0]
imul eax, dword [0x101a23d4]
mov dword [0x1047eb64], eax
mov ecx, dword [0x1047ebb8]
imul ecx, dword [0x101a2358]
mov dword [0x101a235c], ecx
mov edx, dword [0x101a2314]
and edx, dword [0x101a2320]
mov dword [0x101a2300], edx
mov eax, dword [0x1047eaf4]
sub eax, dword [0x1047eb70]
mov dword [0x1047eb90], eax
mov ecx, dword [0x101a237c]
and ecx, dword [0x1047eb10]
mov dword [0x1047eb98], ecx
xor eax, eax
jmp 0x1000c3f3
pop ebp
ret
Function at 0x1000c400
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x101a237c]
sub eax, dword [0x101a23e4]
mov dword [0x1047eb44], eax
mov ecx, dword [0x101a22f8]
sub ecx, dword [0x1047eb3c]
mov dword [0x101a2358], ecx
mov edx, dword [0x101a234c]
sub edx, dword [0x101a23f0]
mov dword [0x101a22fc], edx
mov eax, dword [0x1047eafc]
imul eax, dword [0x1047eb24]
mov dword [0x1047eb40], eax
mov ecx, dword [0x101a2360]
add ecx, dword [0x101a2390]
mov dword [0x1047eb44], ecx
mov edx, dword [0x1047eb30]
and edx, dword [0x101a23ac]
mov dword [0x101a2370], edx
mov eax, dword [0x101a2364]
sub eax, dword [0x101a232c]
mov dword [0x1047eb04], eax
push str.fuckyou
call fcn.10005b10
add esp, 4
mov ecx, dword [0x101a23f0]
imul ecx, dword [0x101a2354]
mov dword [0x101a22f0], ecx
mov edx, dword [0x1047eb10]
imul edx, dword [0x1047eb34]
mov dword [0x101a2388], edx
mov eax, dword [0x1047eb10]
and eax, dword [0x101a23e0]
mov dword [0x101a23c0], eax
mov ecx, dword [0x1047ebb0]
add ecx, dword [0x101a23b4]
mov dword [0x1047eb70], ecx
mov edx, dword [0x101a2338]
imul edx, dword [0x1047eb24]
mov dword [0x101a23a8], edx
mov eax, dword [0x101a2354]
and eax, dword [0x101a22f8]
mov dword [0x101a23f0], eax
mov ecx, dword [0x101a23ec]
and ecx, dword [0x1047eb04]
mov dword [0x1047eb8c], ecx
mov edx, dword [0x101a22ec]
and edx, dword [0x101a23e8]
mov dword [0x1047eaf4], edx
mov eax, dword [0x101a2318]
imul eax, dword [0x1047eafc]
mov dword [0x101a2364], eax
push 0
call fcn.1012b5f8
mov ecx, dword [0x1047eba8]
and ecx, dword [0x101a23dc]
mov dword [0x101a239c], ecx
mov edx, dword [0x1047eb78]
and edx, dword [0x101a233c]
mov dword [0x1047eaf4], edx
mov eax, dword [0x101a22f0]
and eax, dword [0x101a2370]
mov dword [0x1047eb44], eax
mov ecx, dword [0x1047eb4c]
sub ecx, dword [0x1047eb18]
mov dword [0x101a238c], ecx
xor eax, eax
jmp 0x1000c619
pop ebp
ret

Function at 0x1000c620
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x101a22ec]
and eax, dword [0x1047eb54]
mov dword [0x101a2398], eax
push str.fuckyou
call fcn.10005b10
add esp, 4
mov ecx, dword [0x101a2380]
imul ecx, dword [0x1047eb84]
mov dword [0x1047eb98], ecx
mov edx, dword [0x1047eb08]
add edx, dword [0x101a2318]
mov dword [0x101a2324], edx
mov eax, dword [0x101a2328]
sub eax, dword [0x101a23a8]
mov dword [0x1047ebb0], eax
push 0
call fcn.1012b5f8
mov ecx, dword [0x101a23b0]
sub ecx, dword [0x101a22f0]
mov dword [0x101a2374], ecx
mov edx, dword [0x101a235c]
and edx, dword [0x1047eaf4]
mov dword [0x1047eb24], edx
xor eax, eax
jmp 0x1000c734
pop ebp
ret
Function at 0x1000c740
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x1047eb1c]
and eax, dword [0x1047eb74]
mov dword [0x1047ebb4], eax
mov ecx, dword [0x101a239c]
imul ecx, dword [0x101a2318]
mov dword [0x1047eba8], ecx
mov edx, dword [0x101a2338]
and edx, dword [0x1047eb34]
mov dword [0x101a23b0], edx
push str.fuckyou
call fcn.10005b10
add esp, 4
mov eax, dword [0x101a23a4]
sub eax, dword [0x1047eb14]
mov dword [0x101a2378], eax
mov ecx, dword [0x101a2340]
imul ecx, dword [0x1047ebac]
mov dword [0x1047eba0], ecx
mov edx, dword [0x1047eaf8]
add edx, dword [0x101a23d8]
mov dword [0x101a2388], edx
mov eax, dword [0x1047eaf0]
sub eax, dword [0x101a2364]
mov dword [0x101a2388], eax
mov ecx, dword [0x101a2390]
add ecx, dword [0x1047eb54]
mov dword [0x101a23ec], ecx
mov edx, dword [0x101a2394]
imul edx, dword [0x1047eb50]
mov dword [0x1047eba0], edx
mov eax, dword [0x101a23b0]
add eax, dword [0x101a23bc]
mov dword [0x101a23c4], eax
mov ecx, dword [0x101a231c]
imul ecx, dword [0x1047eb64]
mov dword [0x101a23b4], ecx
push 0
call fcn.1012b5f8
mov edx, dword [0x101a2338]
imul edx, dword [0x1047eb04]
mov dword [0x1047eb3c], edx
mov eax, dword [0x1047eb1c]
sub eax, dword [0x101a22f8]
mov dword [0x101a23a8], eax
mov ecx, dword [0x101a2348]
sub ecx, dword [0x1047eb10]
mov dword [0x101a2310], ecx
xor eax, eax
jmp 0x1000c8cf
pop ebp
ret

Function at 0x1000c8e0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x101a23cc]
add eax, dword [0x101a22ec]
mov dword [0x101a236c], eax
mov ecx, dword [0x101a2350]
and ecx, dword [0x101a22f8]
mov dword [0x1047eb48], ecx
mov edx, dword [0x101a23d4]
add edx, dword [0x1047eb3c]
mov dword [0x1047ebac], edx
mov eax, dword [0x101a2358]
imul eax, dword [0x101a2330]
mov dword [0x1047eb4c], eax
mov ecx, dword [0x101a23b8]
add ecx, dword [0x1047eb30]
mov dword [0x101a2334], ecx
mov edx, dword [0x101a2334]
sub edx, dword [0x1047eb04]
mov dword [0x101a234c], edx
mov eax, dword [0x101a2374]
add eax, dword [0x101a23a4]
mov dword [0x1047eba0], eax
mov ecx, dword [0x1047eb6c]
add ecx, dword [0x101a23c8]
mov dword [0x101a2398], ecx
push str.fuckyou
call fcn.10005b10
add esp, 4
mov edx, dword [0x101a2360]
sub edx, dword [0x1047eba0]
mov dword [0x101a23b4], edx
mov eax, dword [0x1047eb48]
sub eax, dword [0x101a23b0]
mov dword [0x101a2370], eax
mov ecx, dword [0x1047eaf4]
sub ecx, dword [0x101a2394]
mov dword [0x1047eb7c], ecx
mov edx, dword [0x1047ebb8]
sub edx, dword [0x101a2394]
mov dword [0x1047eb24], edx
push 0
call fcn.1012b5f8
mov eax, dword [0x101a23e4]
add eax, dword [0x1047eb4c]
mov dword [0x101a23e4], eax
mov ecx, dword [0x1047eb24]
add ecx, dword [0x101a23b8]
mov dword [0x1047eb3c], ecx
mov edx, dword [0x101a22f0]
sub edx, dword [0x101a23a0]
mov dword [0x101a23b4], edx
mov eax, dword [0x1047eb2c]
add eax, dword [0x1047eaf8]
mov dword [0x101a23e0], eax
mov ecx, dword [0x1047eb88]
add ecx, dword [0x101a23e8]
mov dword [0x101a2344], ecx
mov edx, dword [0x101a23b8]
sub edx, dword [0x101a235c]
mov dword [0x1047eb40], edx
xor eax, eax
jmp 0x1000caae
pop ebp
ret
Function at 0x1000cab0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x101a22f0]
and eax, dword [0x101a23e8]
mov dword [0x101a2354], eax
mov ecx, dword [0x1047eb24]
imul ecx, dword [0x1047eb68]
mov dword [0x101a235c], ecx
mov edx, dword [0x1047eb98]
imul edx, dword [0x101a23c4]
mov dword [0x101a2364], edx
mov eax, dword [0x1047eb50]
and eax, dword [0x101a2308]
mov dword [0x101a2320], eax
mov ecx, dword [0x101a2348]
imul ecx, dword [0x1047eb88]
mov dword [0x101a2398], ecx
mov edx, dword [0x1047eb90]
imul edx, dword [0x1047eb40]
mov dword [0x1047eb00], edx
mov eax, dword [0x1047eba8]
imul eax, dword [0x101a2364]
mov dword [0x101a23dc], eax
mov ecx, dword [0x101a23c4]
imul ecx, dword [0x101a2384]
mov dword [0x1047eb40], ecx
push str.fuckyou
call fcn.10005b10
add esp, 4
mov edx, dword [0x1047eb10]
sub edx, dword [0x101a23f0]
mov dword [0x1047eb18], edx
mov eax, dword [0x1047eb28]
imul eax, dword [0x101a2328]
mov dword [0x1047eaf8], eax
mov ecx, dword [0x101a23a4]
add ecx, dword [0x101a236c]
mov dword [0x101a23ec], ecx
mov edx, dword [0x1047eb64]
add edx, dword [0x101a2388]
mov dword [0x1047eb28], edx
mov eax, dword [0x101a2368]
sub eax, dword [0x1047eb94]
mov dword [0x1047eb88], eax
mov ecx, dword [0x101a2380]
sub ecx, dword [0x1047eb88]
mov dword [0x1047eb54], ecx
push 0
call fcn.1012b5f8
mov edx, dword [0x1047eb78]
imul edx, dword [0x1047ebb0]
mov dword [0x101a23c4], edx
mov eax, dword [0x101a2390]
add eax, dword [0x101a2334]
mov dword [0x101a2328], eax
mov ecx, dword [0x101a22f8]
imul ecx, dword [0x1047eb30]
mov dword [0x101a23c0], ecx
mov edx, dword [0x101a2390]
and edx, dword [0x101a2310]
mov dword [0x101a22f8], edx
mov eax, dword [0x1047eb08]
sub eax, dword [0x101a2308]
mov dword [0x1047eb14], eax
xor eax, eax
jmp 0x1000cc64
pop ebp
ret
Function at 0x1000cc70
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x1047eaf8]
imul eax, dword [0x101a230c]
mov dword [0x101a2394], eax
mov ecx, dword [0x101a2324]
add ecx, dword [0x101a2374]
mov dword [0x101a2354], ecx
mov edx, dword [0x101a2314]
add edx, dword [0x1047eb90]
mov dword [0x1047eb78], edx
mov eax, dword [0x101a23cc]
imul eax, dword [0x1047eb3c]
mov dword [0x101a2378], eax
mov ecx, dword [0x101a2350]
sub ecx, dword [0x101a235c]
mov dword [0x101a23a4], ecx
mov edx, dword [0x1047eb68]
imul edx, dword [0x1047eb5c]
mov dword [0x101a2390], edx
mov eax, dword [0x101a2370]
add eax, dword [0x101a23dc]
mov dword [0x101a23b4], eax
push str.fuckyou
call fcn.10005b10
add esp, 4
mov ecx, dword [0x1047eb08]
add ecx, dword [0x1047eb5c]
mov dword [0x101a23d4], ecx
mov edx, dword [0x101a23c4]
sub edx, dword [0x101a22ec]
mov dword [0x101a2324], edx
mov eax, dword [0x101a2338]
imul eax, dword [0x101a2370]
mov dword [0x101a23ac], eax
mov ecx, dword [0x1047eb28]
add ecx, dword [0x1047eb58]
mov dword [0x101a2378], ecx
mov edx, dword [0x101a2398]
imul edx, dword [0x1047eb3c]
mov dword [0x1047eb64], edx
mov eax, dword [0x101a23c8]
and eax, dword [0x101a23b0]
mov dword [0x101a23a0], eax
mov ecx, dword [0x101a23e4]
and ecx, dword [0x101a231c]
mov dword [0x101a237c], ecx
push 0
call fcn.1012b5f8
mov edx, dword [0x101a23d4]
imul edx, dword [0x101a2338]
mov dword [0x101a23a4], edx
mov eax, dword [0x1047eb98]
add eax, dword [0x101a22f8]
mov dword [0x1047eb70], eax
mov ecx, dword [0x1047eb40]
imul ecx, dword [0x1047eaf4]
mov dword [0x101a23e8], ecx
mov edx, dword [0x101a23ec]
and edx, dword [0x1047eb08]
mov dword [0x1047ebb0], edx
mov eax, dword [0x1047eb04]
add eax, dword [0x1047eb2c]
mov dword [0x101a2370], eax
mov ecx, dword [0x101a233c]
and ecx, dword [0x101a23cc]
mov dword [0x101a22f4], ecx
mov edx, dword [0x101a23d8]
add edx, dword [0x1047eaf8]
mov dword [0x101a2358], edx
mov eax, dword [0x1047eb88]
sub eax, dword [0x101a2334]
mov dword [0x1047eb7c], eax
xor eax, eax
jmp 0x1000ce77
pop ebp
ret
Function at 0x1000ce80
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x1047eb3c]
sub eax, dword [0x1047eb2c]
mov dword [0x101a23b0], eax
mov ecx, dword [0x1047eb60]
add ecx, dword [0x1047eb10]
mov dword [0x1047eb58], ecx
mov edx, dword [0x101a2358]
imul edx, dword [0x101a22e8]
mov dword [0x101a2368], edx
mov eax, dword [0x101a236c]
sub eax, dword [0x101a2354]
mov dword [0x101a235c], eax
mov ecx, dword [0x101a22e8]
imul ecx, dword [0x101a232c]
mov dword [0x1047eb6c], ecx
mov edx, dword [0x101a235c]
sub edx, dword [0x1047ebb0]
mov dword [0x1047eb04], edx
mov eax, dword [0x101a2360]
sub eax, dword [0x1047eaf4]
mov dword [0x101a23e8], eax
mov ecx, dword [0x1047eba8]
add ecx, dword [0x101a2374]
mov dword [0x1047eb44], ecx
push str.fuckyou
call fcn.10005b10
add esp, 4
mov edx, dword [0x101a2330]
sub edx, dword [0x101a2388]
mov dword [0x101a2384], edx
mov eax, dword [0x1047eb44]
imul eax, dword [0x1047eb70]
mov dword [0x1047eb20], eax
push 0
call fcn.1012b5f8
mov ecx, dword [0x101a2320]
imul ecx, dword [0x1047eb90]
mov dword [0x1047eb2c], ecx
mov edx, dword [0x101a23c4]
add edx, dword [0x101a2374]
mov dword [0x1047eb80], edx
xor eax, eax
jmp 0x1000cfc5
pop ebp
ret

Function at 0x1000cfe0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x101a23a0]
add eax, dword [0x101a2360]
mov dword [0x101a230c], eax
mov ecx, dword [0x101a237c]
and ecx, dword [0x1047eb90]
mov dword [0x1047ebb8], ecx
mov edx, dword [0x101a23c4]
imul edx, dword [0x101a2308]
mov dword [0x1047eb8c], edx
push str.fuckyou
call fcn.10005b10
add esp, 4
mov eax, dword [0x101a235c]
add eax, dword [0x1047eb9c]
mov dword [0x101a2358], eax
mov ecx, dword [0x101a2300]
add ecx, dword [0x1047ebb4]
mov dword [0x101a23c0], ecx
mov edx, dword [0x101a233c]
sub edx, dword [0x101a2320]
mov dword [0x101a2398], edx
mov eax, dword [0x1047eb78]
and eax, dword [0x101a23bc]
mov dword [0x101a2394], eax
mov ecx, dword [0x1047eb58]
imul ecx, dword [0x101a239c]
mov dword [0x101a231c], ecx
mov edx, dword [0x101a2314]
and edx, dword [0x101a23c4]
mov dword [0x1047eb8c], edx
mov eax, dword [0x101a234c]
add eax, dword [0x1047eb68]
mov dword [0x101a235c], eax
push 0
call fcn.1012b5f8
mov ecx, dword [0x101a22f4]
and ecx, dword [0x101a23a4]
mov dword [0x101a2390], ecx
mov edx, dword [0x101a232c]
add edx, dword [0x101a2338]
mov dword [0x101a23e0], edx
mov eax, dword [0x101a2354]
imul eax, dword [0x101a23bc]
mov dword [0x101a23b4], eax
mov ecx, dword [0x101a2364]
add ecx, dword [0x1047eb54]
mov dword [0x1047eb44], ecx
xor eax, eax
jmp 0x1000d192
pop ebp
ret