joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1005f7fb
Capabilities:
Resolve function by parsing pe exports

Disassembly:
lea ecx, [esp + 0x40]
push ecx
call fcn.100bed82
mov edx, dword [0x1012bf80]
push edx
push 1
lea eax, [esp + 0x38]
push 0x10
push eax
mov dword [esp + 0x88], ebx
call 0x100fc5f7
mov ecx, dword [0x1012bf80]
push ecx
push 1
lea edx, [esp + 0x30]
push 4
push edx
call fcn.100fc60c
mov eax, dword [0x1012bf80]
push eax
push 1
lea ecx, [esp + 0x44]
push 4
push ecx
call fcn.100fc620
mov edx, dword [0x1012bf80]
push edx
push 1
lea eax, [esp + 0x58]
push 4
push eax
call fcn.100fc635
mov ecx, dword [0x1012bf80]
mov edx, dword [esp + 0x54]
add esp, 0x40
push ecx
push 1
add dword [edx - 0x73], edx
inc esp
and al, 0x5c
add dword [edx - 0x73], edx
inc esp
and al, 0x5c
push eax
call fcn.100fc650
add esp, 0x10
lea ecx, [esp + 0x10]
call fcn.100c6773
fld dword [esp + 0x30]
fstp dword [esp + 0x24]
fld dword [esp + 0x34]
lea ecx, [esp + 0x24]
fstp dword [esp + 0x28]
fld dword [esp + 0x38]
push ecx
fstp dword [esp + 0x30]
lea ecx, [esp + 0x14]
mov byte [esp + 0x7c], 1
call fcn.100c6d7e
mov edx, dword [esp + 0x3c]
push edx
lea ecx, [esp + 0x14]
call fcn.100c6dac
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
dec esp
and al, 0x14
call fcn.100c6e1a
mov ecx, dword [esp + 0x1c]
push ecx
lea ecx, [esp + 0x14]
call fcn.100c6e38
mov edx, dword [esp + 0x20]
push edx
lea ecx, [esp + 0x14]
call fcn.100c6e66
xor esi, esi
lea edi, [esp + 0x50]
mov eax, dword [edi]
cmp eax, ebx
jl 0x1005f897
mov ecx, dword [0x1012bf64]
push ebx
lea edx, [ecx + eax*4]
push edx
push esi
lea ecx, [esp + 0x1c]
call fcn.100c6ea7
inc esi
add edi, 4
cmp esi, 8
jl 0x1005f87c
mov ecx, dword [0x1012bf58]
lea eax, [esp + 0x10]
push eax
push 1
push ecx
mov ecx, 0x1012bf50
call fcn.100b86a8
lea ecx, [esp + 0x10]
mov byte [esp + 0x78], bl
call fcn.100c6c05
mov ecx, dword [esp + 0x44]
cmp ecx, ebx
mov dword [esp + 0x78], ebp
je 0x1005f8ed
mov al, byte [ecx - 1]
cmp al, bl
je 0x1005f8e3
cmp al, 0xff
je 0x1005f8e3
dec al
mov byte [ecx - 1], al
jmp 0x1005f8ed
dec ecx
push ecx
call fcn.100ec8c3
add esp, 4
mov edx, dword [0x1012bf80]
mov esi, dword [0x1012bf78]
push edx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], ebx
call fcn.100fc5d1
mov ecx, dword [esi - 4]
add esp, 4
sub ecx, eax
jne 0x1005f788
pop edi
pop ebx
mov ecx, dword [esp + 0x68]
pop esi
pop ebp
mov dword fs:[0], ecx
add esp, 0x6c
ret

Function at 0x10061509
Capabilities:
Resolve function by parsing pe exports

Disassembly:
cmp byte [ecx + 0x5cd90457], cl
and al, 0x2c
mov ecx, dword [esp + 0x2c]
mov dword [edi + 8], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2c
ret 0xc
or cl, bl
loope 0x10061496
Function at 0x10061949
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [esp + 0xc4]
lea edx, [esp + 0x84]
push edx
call fcn.100c27fd
test al, al
je 0x10061973
mov eax, dword [esp + 0x54]
mov dword [esp + 0x9c], ebx
mov dword [esp + 0xb8], eax
mov ebp, dword [esp + 0xa8]
mov esi, dword [esp + 0xc4]
mov edi, dword [esp + 0x54]

Function at 0x10069f95
Capabilities:
Get common file path

Disassembly:
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [ebp + 4]
cmp eax, dword [edx + 4]
jne 0x10034f57
mov dword [edx + 4], ecx
mov dword [ecx], eax
jmp 0x10069f69
mov edx, dword [eax + 4]
cmp eax, dword [edx]
jne 0x10034f67
mov dword [edx], ecx
mov dword [ecx], eax
jmp 0x10069f79
mov dword [edx + 8], ecx
mov dword [ecx], eax
jmp 0x10069f83
or al, 0xc2
add al, 0
nop
nop
nop
sub esp, 0xc
push ebx
mov ebx, ecx
mov al, byte [ebx + 0x19]
test al, al
push esi
push edi
mov dword [esp + 0x14], ebx
je 0x1006a134
lodsd eax, dword [esi]
add dword [eax], eax
add byte [ebx + 0x850ff03], cl
mov eax, dword [ebx]
call dword [eax + 8]
test eax, eax
mov esi, dword [esp + 0x1c]
mov dword [esp + 0xc], eax
or al, 0xf
invalid
add byte [ecx], 0
invalid
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0xc]
sub ecx, eax
sar ecx, 2
cmp ecx, 1
mov edi, eax
jae 0x1006a092
mov edx, dword [esi + 4]
test edx, edx
je 0x10069fc5
mov ecx, eax
sub ecx, edx
sar ecx, 2
cmp ecx, 1
stc
add dword [edi + 5], esi
mov ecx, 1
test edx, edx
jne 0x10069fd2
invalid
xor eax, eax
jmp 0x10069fd7
sub eax, edx
mov ecx, eax
sub ecx, edi
sar ecx, 2
cmp ecx, 1
jae 0x1006a0e0
lea edx, [edi + 4]
push edx
push eax
push edi
mov ecx, esi
call fcn.100e6edb
mov eax, dword [esi + 8]
mov edx, eax
lea ecx, [esp + 0xc]
push ecx
sub edx, edi
sar edx, 2
mov ecx, 1
sub ecx, edx
push ecx
push eax
mov ecx, esi
call fcn.100d0f0a
mov eax, dword [esi + 8]
cmp edi, eax
je 0x1006a11a
push eax
push eax
add eax, 0xfffffffc
push eax
mov ecx, esi

Function at 0x10069fd4
Capabilities:
Get common file path

Disassembly:
sar eax, 2
add eax, ecx
test eax, eax
mov dword [esp + 0x10], eax
jge 0x10069fe3
xor eax, eax
lea edx, [eax*4]
push ebp
push edx
call 0x10104856
mov ebp, dword [esi + 4]
add esp, 4
cmp ebp, edi
mov dword [esp + 0x20], eax
and al, 0x20
mov ebx, eax
je 0x1006a012

Function at 0x10069ffb
Capabilities:
Get common file path

Disassembly:
sar eax, 2
add eax, ecx
test eax, eax
mov dword [esp + 0x10], eax
jge 0x10069fe3
xor eax, eax
lea edx, [eax*4]
push ebp
push edx
call 0x10104856
mov ebp, dword [esi + 4]
add esp, 4
cmp ebp, edi
mov dword [esp + 0x20], eax
and al, 0x20
mov ebx, eax
je 0x1006a012
Function at 0x1006a00e
Capabilities:
Get common file path

Disassembly:
push ebp
cmp ebp, edi
jne 0x1006a001
lea eax, [esp + 0x10]
push eax
push 1
push ebx
mov ecx, esi
call fcn.100d0e61
mov ecx, dword [esi + 8]
add ebx, 4
push ebx
push ecx
push edi
mov ecx, esi
call fcn.100e6e61
mov edx, dword [esi + 8]
push esi
or byte [ebx + 0x50520446], cl
mov ecx, esi
call fcn.1008d860
cmp byte [edx], al
add byte [ebx - 0x17aefbb2], cl
fxch st(7)
or byte [eax], al
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x24]
lea ecx, [edx + eax*4]
mov eax, dword [esi + 4]
add esp, 4
test eax, eax
mov dword [esi + 0xc], ecx
pop ebp
jne 0x1006a077
mov ebx, dword [esp + 0x14]
xor ecx, ecx
lea eax, [edx + ecx*4 + 4]
mov ecx, dword [esi + 8]

Function at 0x1006a032
Capabilities:
Get common file path

Disassembly:
push ebp
cmp ebp, edi
jne 0x1006a001
lea eax, [esp + 0x10]
push eax
push 1
push ebx
mov ecx, esi
call fcn.100d0e61
mov ecx, dword [esi + 8]
add ebx, 4
push ebx
push ecx
push edi
mov ecx, esi
call fcn.100e6e61
mov edx, dword [esi + 8]
push esi
or byte [ebx + 0x50520446], cl
mov ecx, esi
call fcn.1008d860
cmp byte [edx], al
add byte [ebx - 0x17aefbb2], cl
fxch st(7)
or byte [eax], al
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x24]
lea ecx, [edx + eax*4]
mov eax, dword [esi + 4]
add esp, 4
test eax, eax
mov dword [esi + 0xc], ecx
pop ebp
jne 0x1006a077
mov ebx, dword [esp + 0x14]
xor ecx, ecx
lea eax, [edx + ecx*4 + 4]
mov ecx, dword [esi + 8]

Function at 0x1006b984
Capabilities:
Check for peb beingdebugged flag

Disassembly:
add byte [ecx + 0x2949e], cl
add byte [ecx + 0x2989e], cl
add byte [ecx + 0x29c9e], cl
add dh, al
inc esp
and al, 0x20
add al, ch
inc eax
jae 0x1006b9a6
add byte [eax - 0x60], ch
xchg ecx, eax
push es
adc byte [edx + 2], ch

Function at 0x1006dc7a
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov byte [esp + 0x90], 2
mov dword [esp + 0x18], ecx
jne 0x1006dc08
mov dword [esp + 0x14], ecx
jmp 0x1006dc14
mov edx, dword [ebx + 0x28]
sub edx, eax
sar edx, 2
mov dword [esp + 0x14], edx
mov eax, dword [esi + 4]
cmp eax, ecx
je 0x1006dc23
mov ecx, dword [esi + 8]
sub ecx, eax
sar ecx, 2
cmp ecx, dword [esp + 0x14]
jae 0x1006dc51
mov ecx, dword [esi + 8]
lea edx, [esp + 0x18]
mov dword [esp + 0x1c], ecx
push edx
mov ecx, esi
call fcn.100efe2c
mov ecx, dword [esp + 0x18]
sub ecx, eax
mov eax, dword [esp + 0x20]
push ecx
push eax
mov ecx, esi
into
call fcn.100f48ff
jmp 0x1006dc72
invalid
mov ecx, esi
call fcn.100efe48
mov edx, dword [esp + 0x14]
cmp edx, eax
jae 0x1006dc72
mov eax, dword [esi + 8]
mov ecx, dword [esi + 4]
lea ecx, [ecx + edx*4]
push eax
push ecx
mov ecx, esi
call fcn.100d6eb2
lea edx, [esp + 0x13]
push edx
lea ecx, [esp + 0x28]
sub al, ch
rcl byte [edx], 8
invalid
Function at 0x1006dcd5
Capabilities:
Get number of processors

Disassembly:
call fcn.10079e49
lea ecx, [esp + 0x50]
push eax
call fcn.10079e52
lea ecx, [esp + 0x5c]
call fcn.10079e5b
rol dword [eax], 0
lea ecx, [esp + 0x6c]
mov dword [esp + 0x68], 0x3f800000
add byte [eax - 0x3e5f17c1], al
add byte [eax], al
lea ecx, [esp + 0x7c]
mov dword [esp + 0x78], 0x3f800000
add byte [eax - 0x3e5f17c1], al
add byte [eax], al
mov eax, dword [ebx + 0x14]

Function at 0x1006dce0
Capabilities:
Get number of processors

Disassembly:
test eax, eax
mov byte [esp + 0x90], 4
jne 0x1006dcf0
xor esi, esi
jmp 0x1006dd08
mov ecx, dword [ebx + 0x18]
sub ecx, eax
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov esi, edx
mov ecx, ebp
call fcn.100dd08f
cmp eax, esi
jae 0x1006dd37
mov ecx, dword [ebp + 8]
lea edx, [esp + 0x24]
mov dword [esp + 0x1c], ecx
push edx
mov ecx, ebp
invalid
xor bl, 6

Function at 0x1006dd66
Capabilities:
Get number of processors

Disassembly:
call fcn.100dcebb
xor ecx, ecx
xor ebp, ebp
xor esi, esi
mov eax, dword [ebx + 0x24]
cmp eax, ecx
je 0x1006ddab
mov edx, dword [ebx + 0x28]
sub edx, eax
sar edx, 2
cmp ebp, edx
jae 0x1006ddab
mov ecx, dword [eax + ebp*4]
mov eax, dword [ecx + 0x170]
mov edx, dword [edi + 0x24]
mov dword [edx + ebp*4], eax
stosb byte es:[edi], al
mov ecx, dword [ebx + 0x14]
add ecx, esi
push ecx
mov ecx, dword [edi + 0x14]
add ecx, esi
call fcn.100dcf33
inc ebp
add esi, 0x64
xor ecx, ecx
jmp 0x1006dd71
mov dword [edi + 0x48], ecx
mov dword [edi + 0x44], ecx
mov dword [edi + 0x40], ecx
mov dword [edi + 0x3c], ecx
mov dword [edi + 0x38], ecx
invalid
dec edi

Function at 0x1006e0d5
Capabilities:
Get number of processors

Disassembly:
and al, 0x8c
add byte [eax], al
add byte [ebp - 0x7376efa2], cl
and al, 0x84
add byte [eax], al
add byte [eax + 0x44b8913], cl
mov dword [ebx + 8], ecx
mov dword [ebx + 0xc], ecx
mov edi, dword [esp + 0x8c]
mov al, byte [edi]
mov byte [esi + 0x20], al
mov edx, dword [edi + 4]
cmp edx, ecx
mov byte [esp + 0x84], 1
jne 0x1006e10e
xor eax, eax
jmp 0x1006e116
mov eax, dword [edi + 8]
sub eax, edx
sar eax, 2
cmp eax, ecx
jge 0x1006e11c
xor eax, eax
lea ecx, [eax*4]

Function at 0x1006e11d
Capabilities:
Get number of processors

Disassembly:
or al, 0x85
add byte [eax], al
add byte [eax], al
push ecx
call 0x1010898e
test al, 9
add byte [ecx + 0x4f8b2446], cl
or byte [ebx - 0x3b7cfb81], cl
add al, 0x3b
stc
mov dword [esp + 0x8c], ecx
mov ebp, eax
je 0x1006e15a
push edi
push ebp
call fcn.1008d969
mov eax, dword [esp + 0x8c]
add edi, 4
add ebp, 4
cmp edi, eax
jne 0x1006e142
mov dword [esi + 0x28], ebp
mov dword [esi + 0x2c], ebp
mov dl, byte [esp + 0x8c]
xor edi, edi
lea ecx, [esp + 0x38]
mov byte [esp + 0x18], dl
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], edi
mov byte [esp + 0x28], 0
mov byte [esp + 0x29], 0
mov byte [esp + 0x2a], 0
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], edi
Function at 0x1006e198
Capabilities:
Get number of processors

Disassembly:
call fcn.1007a33d
lea ecx, [esp + 0x44]
call fcn.1007a346
lea ecx, [esp + 0x50]
and al, 0x50
call fcn.1007a34f
lea ecx, [esp + 0x60]
mov dword [esp + 0x5c], 0x3f800000
call fcn.1007a360
lea ecx, [esp + 0x70]
mov dword [esp + 0x6c], 0x3f800000
insb byte es:[edi], dx
add byte [eax], al
cmp byte [edi], 0xe8
mov al, byte [0x8b0000c1]
inc esi
and al, 0x3b
mov esi, 0x842484
and al, 0x84
add byte [eax], al
add byte [ebx], al
jne 0x1006e1e4
xor ebp, ebp
jmp 0x1006e1ec
mov ebp, dword [esi + 0x28]
sub ebp, eax
sar ebp, 2
mov eax, dword [ebx + 4]
cmp eax, edi
jne 0x1006e1f7
xor edx, edx
jmp 0x1006e20d
mov ecx, dword [ebx + 8]
sub ecx, eax
mov eax, 0x51eb851f
jmp 0x1006e252
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp edx, ebp
jae 0x1006e22f
mov edi, dword [ebx + 8]
lea ecx, [esp + 0x18]
push ecx
mov ecx, ebx
call fcn.100dd5a0
sub ebp, eax
push ebp
push edi
mov ecx, ebx
call fcn.100dd79b
xor edi, edi
jmp 0x1006e253
mov ecx, ebx
call fcn.100dd5b6
cmp ebp, eax
jae 0x1006e253
mov eax, dword [ebx + 8]
mov ecx, dword [ebx + 4]
push eax
lea eax, [ebp + ebp*4]
lea edx, [eax + eax*4]
lea eax, [ecx + edx*4]
push eax
mov ecx, ebx
call fcn.100ddb33
lea ecx, [esp + 0x18]
mov byte [esp + 0x84], 2
call fcn.100dd3b4
mov ecx, dword [esp + 0x90]
nop
add byte [eax], al
add byte [ebx - 0x6b72f7ba], cl
and al, 0x8c
add byte [eax], al
add byte [edx - 0x77], dl
mov word [eax + edx*4], fs
add byte [eax], al
add byte [eax - 0x75], dl
into
call fcn.100a86f5
xor ebp, ebp
xor ebx, ebx
mov eax, dword [esi + 0x24]
cmp eax, edi
je fcn.1006e317
mov ecx, dword [esi + 0x28]
sub ecx, eax
sar ecx, 2
cmp ebp, ecx
jae fcn.1006e317
mov edi, dword [eax + ebp*4]
lea edx, [esp + 0x90]
push edx
mov ecx, edi
call fcn.10083982
mov ecx, dword [esi + 0x14]
mov edx, dword [ecx + ebx + 8]
add ecx, ebx
push eax
push edx
mov byte [esp + 0x8c], 4
call fcn.100dd67a
lea ecx, [esp + 0x90]
mov byte [esp + 0x84], 2
call fcn.100e5e4e
lea ecx, [esp + 0x10]
call fcn.100e5ae7
push eax
lea ecx, [edi + 0x238]
mov byte [esp + 0x88], 5
call fcn.100e5f8b
lea ecx, [esp + 0x10]
mov byte [esp + 0x84], 2
test byte [eax], al
add byte [eax], al
add ch, al
jo 0x1006e385
pop es
add byte [ebp - 0x7d], al
ret
xor edi, edi
jmp 0x100dc5a0
jecxz 0x100dc5a6
sub edx, dword [ebx + eax]
sbb ecx, dword [ebx + eax + 4]
mov dword [esi + 0x50], edx
dec esp
add eax, dword [ecx + ecx*4]
push esi
push eax
mov dword [esi + 0x54], ecx
xor ecx, ecx
cmp dword [esi + 0x54], ecx
jg 0x100dc5c3
jl 0x100dc5bd
cmp dword [esi + 0x50], ecx
jae 0x100dc5c3
mov dword [esi + 0x50], ecx
mov dword [esi + 0x54], ecx
cmp edi, ecx
jle 0x100dc5db
add eax, 8
mov ecx, dword [eax]
mov edx, dword [eax + 4]
add dword [esi + 0x50], ecx
adc dword [esi + 0x54], edx
add eax, 0x10
dec edi
jne 0x100dc5ca
mov ebx, dword [ebp + 8]
mov dword [ebp - 4], ebx
jmp 0x101b8ac4

Function at 0x1006e1c7
Capabilities:
Get number of processors

Disassembly:
insb byte es:[edi], dx
add byte [eax], al
cmp byte [edi], 0xe8
mov al, byte [0x8b0000c1]
inc esi
and al, 0x3b
mov esi, 0x842484
and al, 0x84
add byte [eax], al
add byte [ebx], al
jne 0x1006e1e4
Function at 0x1007057b
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add byte [ebp - 0x7699fcb3], cl
dec esp
and al, 0x1c

Function at 0x10070580
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add byte [ebp - 0x7699fcb3], cl
dec esp
and al, 0x1c

Function at 0x1007058b
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [esp + 0x88]
cdq
and edx, 3
add eax, edx
sar eax, 2
lea edx, [eax + eax*2]
lea eax, [edx*4 + 0x10130150]
mov dword [esp + 0x14], eax
mov esi, 0x10130124
mov eax, dword [edi]
test al, 4
mov ebp, 0x10130114
jne 0x10070497
mov ebp, 0x10130108
test al, 2
mov ecx, 0x10130114
jne 0x100704a5
mov ecx, 0x10130108
test al, 1
mov eax, 0x10130114
jne 0x100704b3
mov eax, 0x10130108
fld dword [eax]
fstp dword [esp + 0x2c]
fld dword [ecx + 4]
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x38], ecx
mov ecx, dword [esp + 0x14]
fstp dword [esp + 0x30]
fld dword [ebp + 8]
mov edx, dword [esp + 0x30]
mov dword [esp + 0x3c], edx
mov edx, dword [ecx]
fstp dword [esp + 0x34]
mov eax, dword [esp + 0x34]
fld dword [esi - 4]
fst dword [esp + 0x5c]
mov dword [esp + 0x40], eax
mov eax, dword [ecx + 4]
fstp dword [esp + 0x54]
mov ecx, dword [ecx + 8]
fld dword [esi]
mov dword [esp + 0x44], edx
fst dword [esp + 0x60]
mov dword [esp + 0x4c], ecx
fstp dword [esp + 0x58]
lea edx, [esp + 0x38]
push edx
lea ecx, [ebx + 0x18]
mov dword [esp + 0x4c], eax
mov eax, dword [ecx + 8]
push 1
push eax
call fcn.1008cfaf
mov eax, dword [ebx + 0x48]
mov ebp, dword [eax + 4]
inc ebp
add esi, 0xc
add edi, 4
cmp esi, 0x10130154
mov dword [eax + 4], ebp
jl 0x10070487
mov ebp, dword [esp + 0x88]
mov word [esp + 0x18], bp
lea ecx, [ebp + 1]
mov word [esp + 0x1a], cx
add ebp, 2
lea esi, [ebx + 0x28]
lea edx, [esp + 0x18]
mov word [esp + 0x1c], bp
mov eax, dword [esi + 8]
push edx
push eax
mov ecx, esi
call fcn.100f236a
mov eax, dword [ebx + 0x48]
push edx
push eax
mov ecx, esi
call fcn.100f2394
mov eax, dword [ebx + 0x48]
mov edx, dword [eax + 4]
inc edx
add ebp, 4
cmp edi, 0x10112b9c
mov dword [eax + 4], edx
mov dword [esp + 0x88], ebp
jl 0x10070464
mov al, 0xfe
invalid
invalid
mov ecx, dword [esp + 0x78]
mov eax, dword [esp + 0x10]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x74
ret 4

Function at 0x100727fc
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp + 0x14]
cmp eax, edi
je 0x1007280f
mov ecx, dword [0x1012b794]
push eax
call fcn.100bc04f
mov eax, dword [ebp + 0x1c]
cmp eax, edi
jne 0x1007281a
xor esi, esi
mov esi, dword [ebp + 0x20]
sub esi, eax
sar esi, 6

Function at 0x10073237
Capabilities:
Set socket configuration

Disassembly:
mov edx, dword [eax + 4]
cmp eax, dword [edx + 8]
jne 0x10073244
mov dword [edx + 8], ecx
jmp 0x10073246
mov dword [edx], ecx
Function at 0x1007333b
Capabilities:
Set socket configuration

Disassembly:
mov dword [edx + 0x24], ebx
mov ecx, dword [eax + 8]
mov dword [eax + 0x24], edi
mov edx, dword [ecx]
mov dword [eax + 8], edx
mov edx, dword [ecx]
cmp edx, dword [0x101316d0]
je 0x10073356
mov dword [edx + 4], eax
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [ebp + 4]
cmp eax, dword [edx + 4]
jne 0x10073369
mov dword [edx + 4], ecx
jmp 0x10073377
mov edx, dword [eax + 4]
cmp eax, dword [edx]
jne 0x10073374
mov dword [edx], ecx
jmp 0x10073377
mov dword [edx + 8], ecx
mov dword [ecx], eax
mov dword [eax + 4], ecx
mov eax, dword [esi + 4]
mov eax, dword [eax]

Function at 0x100733d1
Capabilities:
Set socket configuration

Disassembly:
or byte [ecx + 0x5e890448], cl
and al, 0x8d
dec esp
and al, 0x1c

Function at 0x10073410
Capabilities:
Receive data
Receive data on socket

Disassembly:
mov eax, dword [0x101316d0]
push ebx
push esi
push edi
mov edi, dword [esp + 0x10]
cmp edi, eax
mov ebx, ecx
mov esi, edi
je 0x10073445
mov eax, dword [esi + 8]
push eax
mov ecx, ebx
call fcn.100e683f
mov esi, dword [esi]
push edi
call sym.imp.WSOCK32.dll_recvfrom
mov eax, dword [0x101316d0]
add esp, 4
cmp esi, eax
mov edi, esi
jne 0x10073424
pop edi
pop esi
pop ebx
ret 4

Function at 0x10074f90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ds, word [eax - 0x76fffffe]
xchg esi, eax
pushfd
add al, byte [eax]
add byte [eax + 0x4c25e01], dh
ret 4
nop
nop
nop
nop
sub esp, 0xc8
push ebx
push ebp

Function at 0x10074f98
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push esi
push edi
mov ebx, ecx
call fcn.100ddcd1
add byte [ebx + 0xdc24ac], cl
add byte [eax], al
mov esi, eax
mov eax, dword [ebx + 0x2a4]
cmp eax, 1
mov ecx, 0xc
add byte [eax], al
add byte [ebp - 0xccfdb84], cl
movsd dword es:[edi], dword [esi]
jne 0x10074fcc
mov ecx, 9
mov esi, ebp
jmp 0x100ea1c9
cmp eax, 3
jne 0x10075050
lea eax, [ebp + 0x18]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [esp + 0x48], ecx
cmp eax, 4
jne 0x10075203
fld dword [ebp + 0x18]
lea ecx, [esp + 0x14]
fld dword [ebp + 0x20]
fpatan
push ecx
push 0
push 0x3f800000
push 0
lea ecx, [esp + 0x30]
mov dword [esp + 0x28], 0
fchs
fld st(0)
fsin
fst dword [esp + 0x20]
fchs
fstp dword [esp + 0x24]
fcos
fst dword [esp + 0x3c]
fstp dword [esp + 0x2c]
call fcn.1008219a
mov edx, dword [esp + 0x14]
push eax
mov eax, dword [esp + 0x34]
push edx
push 0
push eax
lea ecx, [esp + 0xa4]
call fcn.100821b3
push eax
lea ecx, [esp + 0x6c]
call fcn.100821dd
fld dword [esp + 0x38]
fmul dword [esp + 0x78]
mov ecx, dword [0x1012b688]
fld dword [esp + 0x34]
and al, 0x34
mov eax, ecx
fmul dword [esp + 0x6c]
and eax, 0x3f
lea edx, [eax + eax*8]
lea esi, [edx*4 + 0x10130da8]
faddp st(1)
inc ecx
fld dword [esp + 0x30]
mov dword [0x1012b688], ecx
adc dl, byte [eax]
fmul dword [esp + 0x60]
faddp st(1)
fstp dword [esi]
fld dword [esp + 0x7c]
fmul dword [esp + 0x38]
fld dword [esp + 0x70]
fmul dword [esp + 0x34]
faddp st(1)
fld dword [esp + 0x64]
pop ss
Function at 0x10074fa0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push esi
push edi
mov ebx, ecx
call fcn.100ddcd1
add byte [ebx + 0xdc24ac], cl
add byte [eax], al
mov esi, eax
mov eax, dword [ebx + 0x2a4]
cmp eax, 1
mov ecx, 0xc
add byte [eax], al
add byte [ebp - 0xccfdb84], cl
movsd dword es:[edi], dword [esi]
jne 0x10074fcc
mov ecx, 9
mov esi, ebp
jmp 0x100ea1c9
cmp eax, 3
jne 0x10075050
lea eax, [ebp + 0x18]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [esp + 0x48], ecx
cmp eax, 4
jne 0x10075203
fld dword [ebp + 0x18]
lea ecx, [esp + 0x14]
fld dword [ebp + 0x20]
fpatan
push ecx
push 0
push 0x3f800000
push 0
lea ecx, [esp + 0x30]
mov dword [esp + 0x28], 0
fchs
fld st(0)
fsin
fst dword [esp + 0x20]
fchs
fstp dword [esp + 0x24]
fcos
fst dword [esp + 0x3c]
fstp dword [esp + 0x2c]
call fcn.1008219a
mov edx, dword [esp + 0x14]
push eax
mov eax, dword [esp + 0x34]
push edx
push 0
push eax
lea ecx, [esp + 0xa4]
call fcn.100821b3
push eax
lea ecx, [esp + 0x6c]
call fcn.100821dd
fld dword [esp + 0x38]
fmul dword [esp + 0x78]
mov ecx, dword [0x1012b688]
fld dword [esp + 0x34]
and al, 0x34
mov eax, ecx
fmul dword [esp + 0x6c]
and eax, 0x3f
lea edx, [eax + eax*8]
lea esi, [edx*4 + 0x10130da8]
faddp st(1)
inc ecx
fld dword [esp + 0x30]
mov dword [0x1012b688], ecx
adc dl, byte [eax]
fmul dword [esp + 0x60]
faddp st(1)
fstp dword [esi]
fld dword [esp + 0x7c]
fmul dword [esp + 0x38]
fld dword [esp + 0x70]
fmul dword [esp + 0x34]
faddp st(1)
fld dword [esp + 0x64]
pop ss

Function at 0x10074fb5
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push esi
push edi
mov ebx, ecx
call fcn.100ddcd1
add byte [ebx + 0xdc24ac], cl
add byte [eax], al
mov esi, eax
mov eax, dword [ebx + 0x2a4]
cmp eax, 1
mov ecx, 0xc
add byte [eax], al
add byte [ebp - 0xccfdb84], cl
movsd dword es:[edi], dword [esi]
jne 0x10074fcc
mov ecx, 9
mov esi, ebp
jmp 0x100ea1c9
cmp eax, 3
jne 0x10075050
lea eax, [ebp + 0x18]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [esp + 0x48], ecx
cmp eax, 4
jne 0x10075203
fld dword [ebp + 0x18]
lea ecx, [esp + 0x14]
fld dword [ebp + 0x20]
fpatan
push ecx
push 0
push 0x3f800000
push 0
lea ecx, [esp + 0x30]
mov dword [esp + 0x28], 0
fchs
fld st(0)
fsin
fst dword [esp + 0x20]
fchs
fstp dword [esp + 0x24]
fcos
fst dword [esp + 0x3c]
fstp dword [esp + 0x2c]
call fcn.1008219a
mov edx, dword [esp + 0x14]
push eax
mov eax, dword [esp + 0x34]
push edx
push 0
push eax
lea ecx, [esp + 0xa4]
call fcn.100821b3
push eax
lea ecx, [esp + 0x6c]
call fcn.100821dd
fld dword [esp + 0x38]
fmul dword [esp + 0x78]
mov ecx, dword [0x1012b688]
fld dword [esp + 0x34]
and al, 0x34
mov eax, ecx
fmul dword [esp + 0x6c]
and eax, 0x3f
lea edx, [eax + eax*8]
lea esi, [edx*4 + 0x10130da8]
faddp st(1)
inc ecx
fld dword [esp + 0x30]
mov dword [0x1012b688], ecx
adc dl, byte [eax]
fmul dword [esp + 0x60]
faddp st(1)
fstp dword [esi]
fld dword [esp + 0x7c]
fmul dword [esp + 0x38]
fld dword [esp + 0x70]
fmul dword [esp + 0x34]
faddp st(1)
fld dword [esp + 0x64]
pop ss
Function at 0x10075b48
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [0x60e81016]
inc eax
pop es
add byte [ebx], dh
neg cl
add eax, 0x1016a264
mov dword [esp + 0x12c], 0xffffffff
fcomp dword [0x10100498]
fnstsw ax
test ah, 0x41
jne 0x1007620e
mov ecx, dword [esp + 0x134]
call fcn.100de8b0
mov ecx, dword [ebp + 8]
xor edi, edi
cmp ecx, esi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x10], ecx
jl 0x10075d40
mov dword [esp + 0x14], 0x10131790