joyce8/EMBER2024-capa huggingface dataset:
Function at 0x3f967f5f
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade6d6
call fcn.3f9ec288
push ecx
push ebx
push esi
push edi
mov esi, ecx
mov dword [ebp - 0x10], esi
mov edi, dword [ebp + 8]
mov eax, dword [edi]
mov dword [esi], eax
mov eax, dword [edi + 4]
mov dword [esi + 4], eax
mov eax, dword [edi + 8]
mov dword [esi + 8], eax
mov eax, dword [edi + 0xc]
mov dword [esi + 0xc], eax
mov eax, dword [edi + 0x10]
mov dword [esi + 0x10], eax
mov eax, dword [edi + 0x14]
mov dword [esi + 0x14], eax
mov eax, dword [edi + 0x18]
mov dword [esi + 0x18], eax
mov eax, dword [edi + 0x1c]
mov dword [esi + 0x1c], eax
mov eax, dword [edi + 0x20]
mov dword [esi + 0x20], eax
mov eax, dword [edi + 0x24]
mov dword [esi + 0x24], eax
fld qword [edi + 0x28]
fstp qword [esi + 0x28]
lea ebx, [esi + 0x78]
fld qword [edi + 0x30]
fstp qword [esi + 0x30]
fld qword [edi + 0x38]
fstp qword [esi + 0x38]
mov eax, dword [edi + 0x40]
mov dword [esi + 0x40], eax
mov eax, dword [edi + 0x44]
mov dword [esi + 0x44], eax
mov eax, dword [edi + 0x48]
mov dword [esi + 0x48], eax
mov eax, dword [edi + 0x4c]
mov dword [esi + 0x4c], eax
mov eax, dword [edi + 0x50]
mov dword [esi + 0x50], eax
mov eax, dword [edi + 0x54]
mov dword [esi + 0x54], eax
mov eax, dword [edi + 0x58]
mov dword [esi + 0x58], eax
mov eax, dword [edi + 0x5c]
mov dword [esi + 0x5c], eax
mov eax, dword [edi + 0x60]
mov dword [esi + 0x60], eax
mov eax, dword [edi + 0x64]
mov dword [esi + 0x64], eax
mov eax, dword [edi + 0x68]
mov dword [esi + 0x68], eax
mov eax, dword [edi + 0x6c]
mov dword [esi + 0x6c], eax
mov eax, dword [edi + 0x70]
mov dword [esi + 0x70], eax
mov eax, dword [edi + 0x74]
mov dword [esi + 0x74], eax
xor eax, eax
mov dword [ebx], eax
mov dword [ebp - 4], eax
mov dword [esi + 0x7c], eax
mov byte [ebp - 4], 1
mov dword [esi + 0x80], eax
mov byte [ebp - 4], 2
mov dword [esi + 0x84], eax
mov byte [ebp - 4], 3
mov dword [esi + 0x88], eax
mov byte [ebp - 4], 4
mov ecx, dword [edi + 0xc0]
mov dword [esi + 0xc0], ecx
mov byte [esi + 0xc4], al
mov ecx, dword [edi + 0xc8]
mov dword [esi + 0xc8], ecx
push edi
mov ecx, esi
mov dword [esi + 0xd0], eax
call fcn.3f9f5d74
push dword [esi + 0xc8]
call fcn.3f9f5d74
mov dword [esi + 0xcc], eax
lea eax, [edi + 0x78]
push eax
mov ecx, ebx
call fcn.3f9f5d74
lea eax, [edi + 0x7c]
push eax
lea ecx, [esi + 0x7c]
call fcn.3f9f5d74
lea eax, [edi + 0x80]
push eax
lea ecx, [esi + 0x80]
call fcn.3f9f5d74
lea eax, [edi + 0x84]
push eax
lea ecx, [esi + 0x84]
call fcn.3f9f5d74
lea eax, [edi + 0x88]
push eax
lea ecx, [esi + 0x88]
call fcn.3f9f5d74
push edi
lea ecx, [ebp + 8]
call fcn.3f9f5d74
mov ecx, dword [ebx]
lea eax, [ebp + 8]
push eax
push 0x41
call fcn.3f96671d
mov dword [ebx], eax
mov byte [edi + 0xc4], 0
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
pop edi
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 4

Function at 0x3f96a15b
Capabilities:
Get thread local storage value

Disassembly:
push dword [0x3fae90dc]
call dword [sym.imp.kernel32.dll_TlsGetValue]
add eax, 0xcc
ret
Function at 0x3f96a16d
Capabilities:
Get thread local storage value

Disassembly:
push dword [0x3fae90dc]
call dword [sym.imp.kernel32.dll_TlsGetValue]
add eax, 0x184
ret

Function at 0x3f96a17f
Capabilities:
Get thread local storage value

Disassembly:
push dword [0x3fae90dc]
call dword [sym.imp.kernel32.dll_TlsGetValue]
add eax, 0x23c
ret

Function at 0x3f96a191
Capabilities:
Get thread local storage value

Disassembly:
push dword [0x3fae90dc]
call dword [sym.imp.kernel32.dll_TlsGetValue]
add eax, 0x2f4
ret

Function at 0x3f96a1a3
Capabilities:
Get thread local storage value

Disassembly:
push dword [0x3fae90dc]
call dword [sym.imp.kernel32.dll_TlsGetValue]
add eax, 0xfe4
ret

Function at 0x3f96a1b5
Capabilities:
Get thread local storage value

Disassembly:
push dword [0x3fae90dc]
call dword [sym.imp.kernel32.dll_TlsGetValue]
add eax, 0x1154
ret

Function at 0x3f96a1c7
Capabilities:
Get thread local storage value

Disassembly:
push dword [0x3fae90dc]
call dword [sym.imp.kernel32.dll_TlsGetValue]
add eax, 0x137c
ret

Function at 0x3f96a1d9
Capabilities:
Get thread local storage value

Disassembly:
push dword [0x3fae90dc]
call dword [sym.imp.kernel32.dll_TlsGetValue]
add eax, 0x1434
ret

Function at 0x3f96a1eb
Capabilities:
Get thread local storage value

Disassembly:
push dword [0x3fae90dc]
call dword [sym.imp.kernel32.dll_TlsGetValue]
add eax, 0x15a4
ret

Function at 0x3f96a1fd
Capabilities:
Get thread local storage value

Disassembly:
push dword [0x3fae90dc]
call dword [sym.imp.kernel32.dll_TlsGetValue]
add eax, 0x165c
ret

Function at 0x3f96a20f
Capabilities:
Get thread local storage value

Disassembly:
push dword [0x3fae90dc]
call dword [sym.imp.kernel32.dll_TlsGetValue]
add eax, 0x1714
ret

Function at 0x3f96a221
Capabilities:
Get thread local storage value

Disassembly:
push dword [0x3fae90dc]
call dword [sym.imp.kernel32.dll_TlsGetValue]
add eax, 0x19f4
ret

Function at 0x3f96a233
Capabilities:
Get thread local storage value

Disassembly:
push dword [0x3fae90dc]
call dword [sym.imp.kernel32.dll_TlsGetValue]
add eax, 0x1b64
ret

Function at 0x3f96a245
Capabilities:
Get thread local storage value

Disassembly:
push dword [0x3fae90dc]
call dword [sym.imp.kernel32.dll_TlsGetValue]
add eax, 0x1efc
ret

Function at 0x3f96a257
Capabilities:
Get thread local storage value

Disassembly:
push dword [0x3fae90dc]
call dword [sym.imp.kernel32.dll_TlsGetValue]
add eax, 0x1fb4
ret

Function at 0x3f96a2bb
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov eax, ecx
mov dword [ebp - 0x10], eax
mov dword [eax + 0x30], 0x18
mov dword [eax + 0xc], 0xffffff
mov dword [eax + 8], 0x3f832c90
mov dword [ebp - 0x14], eax
and dword [ebp - 4], 0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4
Function at 0x3f96a301
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov dword [ebp - 0x10], ecx
mov dword [ecx + 0x30], 0x18
mov dword [ecx + 0xc], 0xffffff
mov dword [ecx + 8], 0x3f832c90
mov dword [ebp - 0x14], ecx
and dword [ebp - 4], 0
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4

Function at 0x3f96a345
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov eax, ecx
mov dword [ebp - 0x10], eax
mov dword [eax + 0x30], 0x19
mov dword [eax + 0xc], 0xffffff
mov dword [eax + 8], 0x3f832ca4
mov dword [ebp - 0x14], eax
and dword [ebp - 4], 0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4

Function at 0x3f96a38b
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov dword [ebp - 0x10], ecx
mov dword [ecx + 0x30], 0x19
mov dword [ecx + 0xc], 0xffffff
mov dword [ecx + 8], 0x3f832ca4
mov dword [ebp - 0x14], ecx
and dword [ebp - 4], 0
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4

Function at 0x3f96a3cf
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov eax, ecx
mov dword [ebp - 0x10], eax
mov dword [eax + 0x30], 0x1a
mov dword [eax + 0xc], 0xffffff
mov dword [eax + 8], 0x3f832b2c
mov dword [ebp - 0x14], eax
and dword [ebp - 4], 0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4

Function at 0x3f96a415
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov dword [ebp - 0x10], ecx
mov dword [ecx + 0x30], 0x1a
mov dword [ecx + 0xc], 0xffffff
mov dword [ecx + 8], 0x3f832b2c
mov dword [ebp - 0x14], ecx
and dword [ebp - 4], 0
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4

Function at 0x3f96a459
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov eax, ecx
mov dword [ebp - 0x10], eax
mov dword [eax + 0x30], 0x1b
mov dword [eax + 0xc], 0xffffff
mov dword [eax + 8], 0x3f832cb4
mov dword [ebp - 0x14], eax
and dword [ebp - 4], 0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4
Function at 0x3f96a49f
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov dword [ebp - 0x10], ecx
mov dword [ecx + 0x30], 0x1b
mov dword [ecx + 0xc], 0xffffff
mov dword [ecx + 8], 0x3f832cb4
mov dword [ebp - 0x14], ecx
and dword [ebp - 4], 0
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4

Function at 0x3f96a4e3
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov eax, ecx
mov dword [ebp - 0x10], eax
mov dword [eax + 0x30], 0x1c
mov dword [eax + 0xc], 0xffffff
mov dword [eax + 8], 0x3f832cbc
mov dword [ebp - 0x14], eax
and dword [ebp - 4], 0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4

Function at 0x3f96a529
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov eax, ecx
mov dword [ebp - 0x10], eax
mov dword [eax + 0x30], 0x1d
mov dword [eax + 0xc], 0xffffff
mov dword [eax + 8], 0x3f832ccc
mov dword [ebp - 0x14], eax
and dword [ebp - 4], 0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4

Function at 0x3f96a56f
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov eax, ecx
mov dword [ebp - 0x10], eax
mov dword [eax + 0x30], 0x1e
mov dword [eax + 0xc], 0xffffff
mov dword [eax + 8], 0x3f832b44
mov dword [ebp - 0x14], eax
and dword [ebp - 4], 0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4

Function at 0x3f96a5b5
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov dword [ebp - 0x10], ecx
mov dword [ecx + 0x30], 0x1e
mov dword [ecx + 0xc], 0xffffff
mov dword [ecx + 8], 0x3f832b44
mov dword [ebp - 0x14], ecx
and dword [ebp - 4], 0
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4

Function at 0x3f96a5f9
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov eax, ecx
mov dword [ebp - 0x10], eax
mov dword [eax + 0x30], 0x1f
mov dword [eax + 0xc], 0xffffff
mov dword [eax + 8], 0x3f832b58
mov dword [ebp - 0x14], eax
and dword [ebp - 4], 0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4
Function at 0x3f96a63f
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov dword [ebp - 0x10], ecx
mov dword [ecx + 0x30], 0x1f
mov dword [ecx + 0xc], 0xffffff
mov dword [ecx + 8], 0x3f832b58
mov dword [ebp - 0x14], ecx
and dword [ebp - 4], 0
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4

Function at 0x3f96a683
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov eax, ecx
mov dword [ebp - 0x10], eax
mov dword [eax + 0x30], 0x20
mov dword [eax + 0xc], 0xffffff
mov dword [eax + 8], 0x3f832cdc
mov dword [ebp - 0x14], eax
and dword [ebp - 4], 0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4

Function at 0x3f96a6c9
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov eax, ecx
mov dword [ebp - 0x10], eax
mov dword [eax + 0x30], 0x21
mov dword [eax + 0xc], 0xffffff
mov dword [eax + 8], 0x3f832cf0
mov dword [ebp - 0x14], eax
and dword [ebp - 4], 0
mov ecx, dword [ebp + 8]
dec ebp
or byte [ebx - 0x7cf776f7], cl
dec ebp
cld
dec dword [ebx - 0x769b0bb3]
or eax, 0

Function at 0x3f96a9d7
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov eax, ecx
mov dword [ebp - 0x10], eax
mov dword [eax + 0x30], 0x22
mov dword [eax + 0xc], 0xffffff
mov dword [eax + 8], 0x3f832cfc
mov dword [ebp - 0x14], eax
and dword [ebp - 4], 0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4

Function at 0x3f96aa1d
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov dword [ebp - 0x10], ecx
mov dword [ecx + 0x30], 0x22
mov dword [ecx + 0xc], 0xffffff
mov dword [ecx + 8], 0x3f832cfc
mov dword [ebp - 0x14], ecx
and dword [ebp - 4], 0
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4

Function at 0x3f96aa61
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov eax, ecx
mov dword [ebp - 0x10], eax
mov dword [eax + 0x30], 0x23
mov dword [eax + 0xc], 0xffffff
mov dword [eax + 8], 0x3f832d1c
mov dword [ebp - 0x14], eax
and dword [ebp - 4], 0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4
Function at 0x3f96aaa7
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov eax, ecx
mov dword [ebp - 0x10], eax
mov dword [eax + 0x30], 0x24
mov dword [eax + 0xc], 0xffffff
mov dword [eax + 8], 0x3f832d3c
mov dword [ebp - 0x14], eax
and dword [ebp - 4], 0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4

Function at 0x3f96aaed
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov dword [ebp - 0x10], ecx
mov dword [ecx + 0x30], 0x24
mov dword [ecx + 0xc], 0xffffff
mov dword [ecx + 8], 0x3f832d3c
mov dword [ebp - 0x14], ecx
and dword [ebp - 4], 0
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4

Function at 0x3f96ab31
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov eax, ecx
mov dword [ebp - 0x10], eax
mov dword [eax + 0x30], 0x25
mov dword [eax + 0xc], 0xffffff
mov dword [eax + 8], 0x3f832d50
mov dword [ebp - 0x14], eax
and dword [ebp - 4], 0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4

Function at 0x3f96ab77
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov eax, ecx
mov dword [ebp - 0x10], eax
mov dword [eax + 0x30], 0x26
mov dword [eax + 0xc], 0xffffff
mov dword [eax + 8], 0x3f832d68
mov dword [ebp - 0x14], eax
and dword [ebp - 4], 0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4

Function at 0x3f96abbd
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov dword [ebp - 0x10], ecx
mov dword [ecx + 0x30], 0x26
mov dword [ecx + 0xc], 0xffffff
mov dword [ecx + 8], 0x3f832d68
mov dword [ebp - 0x14], ecx
and dword [ebp - 4], 0
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4

Function at 0x3f96ac01
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov eax, ecx
mov dword [ebp - 0x10], eax
mov dword [eax + 0x30], 0x27
mov dword [eax + 0xc], 0xffffff
mov dword [eax + 8], 0x3f832d78
mov dword [ebp - 0x14], eax
and dword [ebp - 4], 0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4
Function at 0x3f96ac47
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov dword [ebp - 0x10], ecx
mov dword [ecx + 0x30], 0x27
mov dword [ecx + 0xc], 0xffffff
mov dword [ecx + 8], 0x3f832d78
mov dword [ebp - 0x14], ecx
and dword [ebp - 4], 0
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4

Function at 0x3f96ac8b
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov eax, ecx
mov dword [ebp - 0x10], eax
mov dword [eax + 0x30], 0x28
mov dword [eax + 0xc], 0xffffff
mov dword [eax + 8], 0x3f832d88
mov dword [ebp - 0x14], eax
and dword [ebp - 4], 0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4

Function at 0x3f96acd1
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov eax, ecx
mov dword [ebp - 0x10], eax
mov dword [eax + 0x30], 0x29
mov dword [eax + 0xc], 0xffffff
mov dword [eax + 8], 0x3f832da0
mov dword [ebp - 0x14], eax
and dword [ebp - 4], 0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4

Function at 0x3f96ad17
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov dword [ebp - 0x10], ecx
mov dword [ecx + 0x30], 0x29
mov dword [ecx + 0xc], 0xffffff
mov dword [ecx + 8], 0x3f832da0
mov dword [ebp - 0x14], ecx
and dword [ebp - 4], 0
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4

Function at 0x3f96ad5b
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov eax, ecx
mov dword [ebp - 0x10], eax
mov dword [eax + 0x30], 0x2a
mov dword [eax + 0xc], 0xffffff
mov dword [eax + 8], 0x3f832db0
mov dword [ebp - 0x14], eax
and dword [ebp - 4], 0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4

Function at 0x3f96ada1
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov dword [ebp - 0x10], ecx
mov dword [ecx + 0x30], 0x2a
mov dword [ecx + 0xc], 0xffffff
mov dword [ecx + 8], 0x3f832db0
mov dword [ebp - 0x14], ecx
and dword [ebp - 4], 0
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4
Function at 0x3f96ade5
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov eax, ecx
mov dword [ebp - 0x10], eax
mov dword [eax + 0x30], 0x2b
mov dword [eax + 0xc], 0xffffff
mov dword [eax + 8], 0x3f832dc0
mov dword [ebp - 0x14], eax
and dword [ebp - 4], 0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4

Function at 0x3f96ae2b
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov dword [ebp - 0x10], ecx
mov dword [ecx + 0x30], 0x2b
mov dword [ecx + 0xc], 0xffffff
mov dword [ecx + 8], 0x3f832dc0
mov dword [ebp - 0x14], ecx
and dword [ebp - 4], 0
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4

Function at 0x3f96ae6f
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov eax, ecx
mov dword [ebp - 0x10], eax
mov dword [eax + 0x30], 0x2c
mov dword [eax + 0xc], 0xffffff
mov dword [eax + 8], 0x3f832dd0
mov dword [ebp - 0x14], eax
and dword [ebp - 4], 0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4

Function at 0x3f96aeb5
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov dword [ebp - 0x10], ecx
mov dword [ecx + 0x30], 0x2c
mov dword [ecx + 0xc], 0xffffff
mov dword [ecx + 8], 0x3f832dd0
mov dword [ebp - 0x14], ecx
and dword [ebp - 4], 0
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4

Function at 0x3f96aef9
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov eax, ecx
mov dword [ebp - 0x10], eax
mov dword [eax + 0x30], 0x2d
mov dword [eax + 0xc], 0xffffff
mov dword [eax + 8], 0x3f832de4
mov dword [ebp - 0x14], eax
and dword [ebp - 4], 0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4

Function at 0x3f96af3f
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x3fade809
call fcn.3f9ec288
push ecx
push ecx
mov dword [ebp - 0x10], ecx
mov dword [ecx + 0x30], 0x2d
mov dword [ecx + 0xc], 0xffffff
mov dword [ecx + 8], 0x3f832de4
mov dword [ebp - 0x14], ecx
and dword [ebp - 4], 0
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4