joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10009ea0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x101a2378]
imul eax, dword [0x1047eb20]
mov dword [0x1047eb3c], eax
mov ecx, dword [0x1047eb1c]
and ecx, dword [0x1047eb6c]
mov dword [0x101a237c], ecx
mov edx, dword [0x1047eb3c]
sub edx, dword [0x101a233c]
mov dword [0x101a2318], edx
mov eax, dword [0x1047eb28]
sub eax, dword [0x101a23ec]
mov dword [0x101a23a8], eax
push str.fuckyou
call fcn.10005b10
add esp, 4
mov ecx, dword [0x101a2300]
and ecx, dword [0x1047eb44]
mov dword [0x101a2338], ecx
mov edx, dword [0x1047eb3c]
add edx, dword [0x101a2324]
mov dword [0x1047eb3c], edx
mov eax, dword [0x1047eb8c]
sub eax, dword [0x101a23ec]
mov dword [0x101a2354], eax
mov ecx, dword [0x101a2390]
sub ecx, dword [0x101a23dc]
mov dword [0x101a2388], ecx
mov edx, dword [0x1047eb48]
sub edx, dword [0x1047eb2c]
mov dword [0x1047eaf0], edx
mov eax, dword [0x101a2320]
imul eax, dword [0x1047eb4c]
mov dword [0x101a237c], eax
mov ecx, dword [0x101a231c]
imul ecx, dword [0x101a2368]
mov dword [0x101a22f8], ecx
mov edx, dword [0x1047eb3c]
imul edx, dword [0x101a22e8]
mov dword [0x1047eb04], edx
push 0
call fcn.1012b5f8
mov eax, dword [0x1047eb44]
add eax, dword [0x101a2318]
mov dword [0x101a23c8], eax
mov ecx, dword [0x101a23f0]
imul ecx, dword [0x101a232c]
mov dword [0x101a234c], ecx
mov edx, dword [0x1047eb18]
sub edx, dword [0x101a2380]
mov dword [0x101a2328], edx
mov eax, dword [0x101a2384]
imul eax, dword [0x1047eba0]
mov dword [0x101a2358], eax
mov ecx, dword [0x101a23a8]
and ecx, dword [0x101a23d0]
mov dword [0x101a23bc], ecx
mov edx, dword [0x1047eb00]
sub edx, dword [0x1047eb08]
mov dword [0x101a23d0], edx
mov eax, dword [0x1047eb74]
sub eax, dword [0x101a2340]
mov dword [0x101a2328], eax
xor eax, eax
jmp 0x1000a0ab
pop ebp
ret

Function at 0x1000a0b0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x101a232c]
and eax, dword [0x101a2338]
mov dword [0x101a22ec], eax
mov ecx, dword [0x1047eb8c]
imul ecx, dword [0x101a23a4]
mov dword [0x101a2370], ecx
push str.fuckyou
call fcn.10005b10
add esp, 4
mov edx, dword [0x101a236c]
and edx, dword [0x1047eb90]
mov dword [0x101a23cc], edx
mov eax, dword [0x1047eb40]
sub eax, dword [0x101a23bc]
mov dword [0x101a23d4], eax
mov ecx, dword [0x101a23d8]
imul ecx, dword [0x1047ebac]
mov dword [0x1047eb84], ecx
mov edx, dword [0x1047eb14]
imul edx, dword [0x1047eb64]
mov dword [0x101a23d4], edx
mov eax, dword [0x101a22f0]
add eax, dword [0x1047eb50]
mov dword [0x1047eb8c], eax
mov ecx, dword [0x101a22f8]
add ecx, dword [0x1047eb24]
mov dword [0x101a2348], ecx
mov edx, dword [0x1047ebac]
imul edx, dword [0x101a22f0]
mov dword [0x1047eb18], edx
push 0
call fcn.1012b5f8
mov eax, dword [0x101a234c]
sub eax, dword [0x101a231c]
mov dword [0x101a23b0], eax
mov ecx, dword [0x1047eb60]
and ecx, dword [0x101a239c]
mov dword [0x1047eb48], ecx
mov edx, dword [0x1047eb78]
add edx, dword [0x1047eb10]
mov dword [0x1047eb30], edx
xor eax, eax
jmp 0x1000a1c1
pop ebp
ret
Function at 0x1000a1d0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x1047eb18]
and eax, dword [0x101a23c4]
mov dword [0x101a23ec], eax
mov ecx, dword [0x101a2338]
imul ecx, dword [0x101a2300]
mov dword [0x1047eb5c], ecx
mov edx, dword [0x1047eb20]
imul edx, dword [0x101a23b0]
mov dword [0x1047eb80], edx
mov eax, dword [0x1047eb64]
and eax, dword [0x101a2300]
mov dword [0x101a23ac], eax
mov ecx, dword [0x1047eb00]
add ecx, dword [0x101a23e4]
mov dword [0x1047eb28], ecx
mov edx, dword [0x101a22ec]
and edx, dword [0x101a23a0]
mov dword [0x1047eba4], edx
mov eax, dword [0x1047eb40]
and eax, dword [0x101a235c]
mov dword [0x101a2300], eax
mov ecx, dword [0x1047ebb8]
imul ecx, dword [0x1047eb68]
mov dword [0x101a23a0], ecx
push str.fuckyou
call fcn.10005b10
add esp, 4
mov edx, dword [0x1047eb8c]
and edx, dword [0x101a2368]
mov dword [0x101a2328], edx
mov eax, dword [0x101a2364]
and eax, dword [0x101a2324]
mov dword [0x101a2324], eax
mov ecx, dword [0x101a2314]
add ecx, dword [0x101a2350]
mov dword [0x101a238c], ecx
mov edx, dword [0x1047eba8]
and edx, dword [0x1047eb94]
mov dword [0x101a231c], edx
mov eax, dword [0x101a23f0]
sub eax, dword [0x101a2314]
mov dword [0x101a2314], eax
mov ecx, dword [0x101a22fc]
sub ecx, dword [0x101a231c]
mov dword [0x1047ebac], ecx
mov edx, dword [0x1047eb74]
and edx, dword [0x1047eb0c]
mov dword [0x101a23c8], edx
mov eax, dword [0x101a23c4]
and eax, dword [0x101a23b8]
mov dword [0x101a2308], eax
push 0
call fcn.1012b5f8
mov ecx, dword [0x1047eb70]
and ecx, dword [0x101a23c8]
mov dword [0x101a2364], ecx
mov edx, dword [0x101a2320]
sub edx, dword [0x1047eb90]
mov dword [0x101a23e4], edx
xor eax, eax
jmp 0x1000a36a
pop ebp
ret
Function at 0x1000a370
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x1047eb98]
and eax, dword [0x101a2334]
mov dword [0x101a230c], eax
mov ecx, dword [0x1047eba4]
imul ecx, dword [0x101a2350]
mov dword [0x1047eb44], ecx
mov edx, dword [0x1047eb48]
add edx, dword [0x1047eb04]
mov dword [0x1047eb50], edx
mov eax, dword [0x1047eb44]
sub eax, dword [0x101a2340]
mov dword [0x101a2374], eax
mov ecx, dword [0x101a236c]
and ecx, dword [0x101a23f0]
mov dword [0x101a238c], ecx
mov edx, dword [0x101a23d0]
and edx, dword [0x101a22fc]
mov dword [0x1047eb74], edx
mov eax, dword [0x101a22e8]
imul eax, dword [0x1047eb00]
mov dword [0x1047eb8c], eax
push str.fuckyou
call fcn.10005b10
add esp, 4
mov ecx, dword [0x101a2388]
add ecx, dword [0x1047eb8c]
mov dword [0x1047eb44], ecx
mov edx, dword [0x101a2370]
and edx, dword [0x1047eb90]
mov dword [0x101a2358], edx
mov eax, dword [0x1047eafc]
and eax, dword [0x101a235c]
mov dword [0x1047eba0], eax
push 0
call fcn.1012b5f8
mov ecx, dword [0x1047eb80]
add ecx, dword [0x101a23ec]
mov dword [0x101a23b4], ecx
mov edx, dword [0x101a2324]
imul edx, dword [0x1047ebb8]
mov dword [0x101a238c], edx
mov eax, dword [0x101a2394]
imul eax, dword [0x101a2300]
mov dword [0x101a2350], eax
mov ecx, dword [0x101a232c]
and ecx, dword [0x101a23b8]
mov dword [0x1047eba4], ecx
mov edx, dword [0x101a2378]
add edx, dword [0x1047eb94]
mov dword [0x101a2300], edx
mov eax, dword [0x1047eafc]
imul eax, dword [0x1047ebb4]
mov dword [0x1047eb90], eax
mov ecx, dword [0x1047eb0c]
sub ecx, dword [0x101a22f4]
mov dword [0x1047eb48], ecx
xor eax, eax
jmp 0x1000a51e
pop ebp
ret

Function at 0x1000a520
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x101a23e4]
add eax, dword [0x1047eb28]
mov dword [0x101a23dc], eax
mov ecx, dword [0x1047eb94]
imul ecx, dword [0x101a2330]
mov dword [0x101a2374], ecx
mov edx, dword [0x1047eb04]
and edx, dword [0x101a239c]
mov dword [0x101a237c], edx
mov eax, dword [0x1047eb5c]
add eax, dword [0x101a23a0]
mov dword [0x1047eb94], eax
mov ecx, dword [0x101a23ec]
sub ecx, dword [0x101a23bc]
mov dword [0x101a23c4], ecx
mov edx, dword [0x1047eb3c]
and edx, dword [0x1047eb9c]
mov dword [0x101a2334], edx
push str.fuckyou
call fcn.10005b10
add esp, 4
mov eax, dword [0x101a2318]
sub eax, dword [0x1047eaf8]
mov dword [0x101a22ec], eax
mov ecx, dword [0x1047eb90]
imul ecx, dword [0x1047ebb8]
mov dword [0x101a230c], ecx
mov edx, dword [0x1047eb3c]
and edx, dword [0x1047eb68]
mov dword [0x1047eb30], edx
mov eax, dword [0x101a22fc]
and eax, dword [0x101a23b0]
mov dword [0x101a23a0], eax
push 0
call fcn.1012b5f8
mov ecx, dword [0x1047eb84]
and ecx, dword [0x101a2380]
mov dword [0x1047ebb4], ecx
xor eax, eax
jmp 0x1000a69c
pop ebp
ret
Function at 0x1000a6a0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x101a2390]
and eax, dword [0x101a23d4]
mov dword [0x101a23e8], eax
mov ecx, dword [0x101a23cc]
imul ecx, dword [0x101a232c]
mov dword [0x101a2308], ecx
mov edx, dword [0x101a23d0]
add edx, dword [0x101a232c]
mov dword [0x101a22f8], edx
mov eax, dword [0x101a2358]
add eax, dword [0x1047eb0c]
mov dword [0x101a2300], eax
mov ecx, dword [0x101a23e4]
imul ecx, dword [0x1047eba8]
mov dword [0x101a2304], ecx
mov edx, dword [0x101a23d0]
add edx, dword [0x101a231c]
mov dword [0x1047eba8], edx
mov eax, dword [0x1047ebac]
sub eax, dword [0x1047eb74]
mov dword [0x101a2358], eax
push str.fuckyou
call fcn.10005b10
add esp, 4
mov ecx, dword [0x101a2318]
sub ecx, dword [0x1047eb8c]
mov dword [0x101a2374], ecx
mov edx, dword [0x1047eb94]
imul edx, dword [0x1047eafc]
mov dword [0x101a234c], edx
mov eax, dword [0x101a239c]
and eax, dword [0x101a2364]
mov dword [0x1047eb40], eax
mov ecx, dword [0x101a2368]
sub ecx, dword [0x101a230c]
mov dword [0x1047eb70], ecx
push 0
call fcn.1012b5f8
mov edx, dword [0x101a23c8]
add edx, dword [0x101a2344]
mov dword [0x1047eb48], edx
mov eax, dword [0x101a23e4]
add eax, dword [0x101a2310]
mov dword [0x1047eb9c], eax
mov ecx, dword [0x1047eb04]
and ecx, dword [0x1047eb60]
mov dword [0x1047eb94], ecx
mov edx, dword [0x1047eb1c]
sub edx, dword [0x101a2348]
mov dword [0x1047eb50], edx
mov eax, dword [0x101a2374]
add eax, dword [0x1047eba4]
mov dword [0x1047eb88], eax
xor eax, eax
jmp 0x1000a84e
pop ebp
ret

Function at 0x1000a850
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x1047eb60]
imul eax, dword [0x101a23d0]
mov dword [0x1047ebb0], eax
push str.fuckyou
call fcn.10005b10
add esp, 4
mov ecx, dword [0x101a2384]
add ecx, dword [0x101a23e0]
mov dword [0x1047eb14], ecx
push 0
call fcn.1012b5f8
mov edx, dword [0x101a2328]
add edx, dword [0x1047eb80]
mov dword [0x101a2390], edx
mov eax, dword [0x101a23a4]
and eax, dword [0x101a23d8]
mov dword [0x1047ebac], eax
mov ecx, dword [0x101a23b8]
imul ecx, dword [0x101a2378]
mov dword [0x1047eaf0], ecx
mov edx, dword [0x1047eaf4]
sub edx, dword [0x101a23d4]
mov dword [0x1047eb7c], edx
mov eax, dword [0x101a23e8]
add eax, dword [0x1047eaf8]
mov dword [0x1047eb20], eax
mov ecx, dword [0x101a23b4]
imul ecx, dword [0x101a23f0]
mov dword [0x1047eb14], ecx
xor eax, eax
jmp 0x1000a962
pop ebp
ret
Function at 0x1000a970
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x101a234c]
sub eax, dword [0x101a2338]
mov dword [0x1047eb6c], eax
mov ecx, dword [0x1047eb1c]
and ecx, dword [0x1047eb08]
mov dword [0x1047eb8c], ecx
mov edx, dword [0x101a238c]
sub edx, dword [0x1047ebb8]
mov dword [0x101a2360], edx
mov eax, dword [0x101a22f8]
add eax, dword [0x101a233c]
mov dword [0x101a2328], eax
mov ecx, dword [0x1047eb38]
and ecx, dword [0x101a2314]
mov dword [0x1047eb18], ecx
mov edx, dword [0x101a23a8]
sub edx, dword [0x1047eb44]
mov dword [0x1047eb48], edx
push str.fuckyou
call fcn.10005b10
add esp, 4
mov eax, dword [0x101a2354]
add eax, dword [0x1047eb2c]
mov dword [0x1047eb2c], eax
mov ecx, dword [0x101a23e0]
and ecx, dword [0x101a2368]
mov dword [0x1047eb8c], ecx
mov edx, dword [0x1047eaf0]
sub edx, dword [0x1047eb04]
mov dword [0x101a23d0], edx
mov eax, dword [0x101a22ec]
sub eax, dword [0x1047eb94]
mov dword [0x1047eb10], eax
mov ecx, dword [0x101a22e8]
imul ecx, dword [0x101a2334]
mov dword [0x101a2364], ecx
mov edx, dword [0x1047eb54]
add edx, dword [0x1047eb64]
mov dword [0x101a2358], edx
mov eax, dword [0x1047eb18]
add eax, dword [0x1047eb28]
mov dword [0x101a23e8], eax
mov ecx, dword [0x1047eba0]
sub ecx, dword [0x1047ebb4]
mov dword [0x1047eb90], ecx
push 0
call fcn.1012b5f8
mov edx, dword [0x1047eb50]
and edx, dword [0x1047ebb8]
mov dword [0x101a2350], edx
mov eax, dword [0x1047eb94]
imul eax, dword [0x101a23a0]
mov dword [0x101a2338], eax
mov ecx, dword [0x101a2348]
imul ecx, dword [0x101a22f4]
mov dword [0x101a2340], ecx
mov edx, dword [0x1047eaf4]
add edx, dword [0x101a236c]
mov dword [0x101a2358], edx
xor eax, eax
jmp 0x1000ab0d
pop ebp
ret
Function at 0x1000ab10
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x1047eba4]
and eax, dword [0x1047eb08]
mov dword [0x101a2334], eax
mov ecx, dword [0x101a2388]
and ecx, dword [0x101a2310]
mov dword [0x1047eb04], ecx
mov edx, dword [0x101a23e8]
and edx, dword [0x101a233c]
mov dword [0x1047eb70], edx
mov eax, dword [0x1047eb6c]
imul eax, dword [0x101a2348]
mov dword [0x1047eb94], eax
push str.fuckyou
call fcn.10005b10
add esp, 4
mov ecx, dword [0x1047eaf8]
add ecx, dword [0x1047eb84]
mov dword [0x1047eafc], ecx
mov edx, dword [0x101a23a0]
add edx, dword [0x101a23cc]
mov dword [0x101a2338], edx
mov eax, dword [0x101a2338]
and eax, dword [0x101a236c]
mov dword [0x101a2304], eax
mov ecx, dword [0x1047eb10]
imul ecx, dword [0x1047eb7c]
mov dword [0x1047eb38], ecx
mov edx, dword [0x101a2370]
sub edx, dword [0x101a2328]
mov dword [0x101a23bc], edx
mov eax, dword [0x101a22fc]
imul eax, dword [0x1047ebb0]
mov dword [0x101a233c], eax
mov ecx, dword [0x101a22fc]
sub ecx, dword [0x101a22ec]
mov dword [0x101a2304], ecx
push 0
call fcn.1012b5f8
mov edx, dword [0x101a23d8]
sub edx, dword [0x101a23d8]
mov dword [0x1047eb20], edx
mov eax, dword [0x101a23a4]
sub eax, dword [0x1047eb0c]
mov dword [0x101a22f4], eax
mov ecx, dword [0x101a23ec]
add ecx, dword [0x101a2324]
mov dword [0x1047eb38], ecx
mov edx, dword [0x101a231c]
and edx, dword [0x1047eb3c]
mov dword [0x101a233c], edx
mov eax, dword [0x1047eb24]
sub eax, dword [0x101a23c4]
mov dword [0x101a23e8], eax
mov ecx, dword [0x101a22f8]
add ecx, dword [0x101a231c]
mov dword [0x1047eb98], ecx
mov edx, dword [0x1047eb0c]
imul edx, dword [0x101a2320]
mov dword [0x1047eb80], edx
xor eax, eax
jmp 0x1000ace1
pop ebp
ret
Function at 0x1000acf0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x101a2308]
sub eax, dword [0x101a23b0]
mov dword [0x101a2324], eax
mov ecx, dword [0x1047eb8c]
sub ecx, dword [0x1047eb04]
mov dword [0x1047eb74], ecx
mov edx, dword [0x1047eb18]
imul edx, dword [0x1047eb54]
mov dword [0x1047eb94], edx
mov eax, dword [0x101a23ac]
add eax, dword [0x101a22fc]
mov dword [0x1047eb6c], eax
mov ecx, dword [0x1047eb2c]
and ecx, dword [0x101a23f0]
mov dword [0x1047eb64], ecx
mov edx, dword [0x1047eb0c]
imul edx, dword [0x101a23e4]
mov dword [0x101a23b4], edx
mov eax, dword [0x1047eb90]
and eax, dword [0x101a2304]
mov dword [0x101a23d8], eax
mov ecx, dword [0x101a23d0]
and ecx, dword [0x1047eb54]
mov dword [0x101a2378], ecx
push str.fuckyou
call fcn.10005b10
add esp, 4
mov edx, dword [0x1047eb9c]
sub edx, dword [0x101a232c]
mov dword [0x1047ebb0], edx
mov eax, dword [0x101a23c4]
imul eax, dword [0x101a2300]
mov dword [0x101a23f0], eax
mov ecx, dword [0x1047eb8c]
add ecx, dword [0x1047eb9c]
mov dword [0x1047eaf4], ecx
mov edx, dword [0x1047eb08]
add edx, dword [0x1047eb60]
mov dword [0x101a234c], edx
mov eax, dword [0x1047eb18]
imul eax, dword [0x101a2378]
mov dword [0x1047eaf0], eax
mov ecx, dword [0x101a23e0]
imul ecx, dword [0x101a2308]
mov dword [0x1047eba8], ecx
mov edx, dword [0x1047eb9c]
and edx, dword [0x101a23d8]
mov dword [0x1047eb48], edx
push 0
call fcn.1012b5f8
mov eax, dword [0x1047ebb4]
sub eax, dword [0x101a23b8]
mov dword [0x101a2350], eax
mov ecx, dword [0x101a23b0]
and ecx, dword [0x101a22fc]
mov dword [0x101a2380], ecx
xor eax, eax
jmp 0x1000aed9
pop ebp
ret

Function at 0x1000aee0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x101a235c]
imul eax, dword [0x1047eb3c]
mov dword [0x1047eb40], eax
push str.fuckyou
call fcn.10005b10
add esp, 4
mov ecx, dword [0x1047eb1c]
add ecx, dword [0x1047eb98]
mov dword [0x1047eb30], ecx
mov edx, dword [0x101a2368]
sub edx, dword [0x101a23d4]
mov dword [0x101a22f0], edx
mov eax, dword [0x101a23b0]
add eax, dword [0x1047eb00]
mov dword [0x101a2348], eax
mov ecx, dword [0x1047eb30]
and ecx, dword [0x101a2334]
mov dword [0x101a2324], ecx
mov edx, dword [0x1047eaf8]
add edx, dword [0x1047eb84]
mov dword [0x101a23c0], edx
mov eax, dword [0x101a23bc]
add eax, dword [0x101a2334]
mov dword [0x101a234c], eax
mov ecx, dword [0x101a22f8]
add ecx, dword [0x1047eba0]
mov dword [0x101a236c], ecx
push 0
call fcn.1012b5f8
mov edx, dword [0x1047eba8]
add edx, dword [0x1047eb30]
mov dword [0x1047eb0c], edx
mov eax, dword [0x1047eb34]
sub eax, dword [0x101a23ac]
mov dword [0x101a2374], eax
mov ecx, dword [0x101a23d4]
and ecx, dword [0x101a23e8]
mov dword [0x1047eb5c], ecx
mov edx, dword [0x1047eb04]
add edx, dword [0x101a237c]
mov dword [0x1047eb78], edx
xor eax, eax
jmp 0x1000b045
pop ebp
ret
Function at 0x1000b050
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x101a233c]
and eax, dword [0x101a238c]
mov dword [0x101a22fc], eax
mov ecx, dword [0x1047eb44]
and ecx, dword [0x101a2314]
mov dword [0x1047ebb0], ecx
mov edx, dword [0x101a2308]
sub edx, dword [0x101a23d4]
mov dword [0x1047eb80], edx
push str.fuckyou
call fcn.10005b10
add esp, 4
mov eax, dword [0x1047eb80]
add eax, dword [0x101a23e0]
mov dword [0x1047eb94], eax
mov ecx, dword [0x101a23f0]
and ecx, dword [0x101a23b8]
mov dword [0x101a23a8], ecx
mov edx, dword [0x101a2380]
add edx, dword [0x101a2394]
mov dword [0x101a2338], edx
mov eax, dword [0x1047eb80]
and eax, dword [0x1047eb3c]
mov dword [0x101a22ec], eax
mov ecx, dword [0x1047eba0]
add ecx, dword [0x101a23d0]
mov dword [0x1047eb18], ecx
mov edx, dword [0x1047ebb4]
imul edx, dword [0x101a23a0]
mov dword [0x1047eb5c], edx
mov eax, dword [0x1047eb4c]
and eax, dword [0x101a2324]
mov dword [0x1047eb88], eax
mov ecx, dword [0x1047eb1c]
and ecx, dword [0x1047eb50]
mov dword [0x101a23b8], ecx
mov edx, dword [0x1047eb84]
add edx, dword [0x1047eb4c]
mov dword [0x101a2338], edx
push 0
call fcn.1012b5f8
mov eax, dword [0x101a2350]
and eax, dword [0x1047eb58]
mov dword [0x101a2320], eax
mov ecx, dword [0x101a23b4]
and ecx, dword [0x101a23b0]
mov dword [0x101a22f0], ecx
mov edx, dword [0x101a23e0]
sub edx, dword [0x101a23b4]
mov dword [0x101a2328], edx
mov eax, dword [0x1047eb54]
add eax, dword [0x1047eb28]
mov dword [0x1047eb24], eax
mov ecx, dword [0x101a237c]
sub ecx, dword [0x101a23d4]
mov dword [0x1047eb48], ecx
xor eax, eax
jmp 0x1000b1d9
pop ebp
ret
Function at 0x1000b1e0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x101a2300]
add eax, dword [0x101a2318]
mov dword [0x101a237c], eax
mov ecx, dword [0x101a23e4]
add ecx, dword [0x1047eb9c]
mov dword [0x1047eb08], ecx
push str.fuckyou
call fcn.10005b10
add esp, 4
mov edx, dword [0x101a2368]
add edx, dword [0x101a2384]
mov dword [0x101a234c], edx
mov eax, dword [0x1047eb14]
add eax, dword [0x101a234c]
mov dword [0x1047eb64], eax
mov ecx, dword [0x101a23c0]
imul ecx, dword [0x101a234c]
mov dword [0x101a2324], ecx
mov edx, dword [0x101a23cc]
sub edx, dword [0x1047eb00]
mov dword [0x101a2314], edx
mov eax, dword [0x101a230c]
add eax, dword [0x101a23ec]
mov dword [0x101a2364], eax
mov ecx, dword [0x101a23e0]
and ecx, dword [0x101a2348]
mov dword [0x1047eb40], ecx
mov edx, dword [0x1047eb74]
add edx, dword [0x101a2388]
mov dword [0x101a2330], edx
mov eax, dword [0x1047eb04]
add eax, dword [0x101a2348]
mov dword [0x101a2340], eax
mov ecx, dword [0x101a231c]
and ecx, dword [0x101a238c]
mov dword [0x1047eb38], ecx
push 0
call fcn.1012b5f8
mov edx, dword [0x1047eba4]
add edx, dword [0x101a2324]
mov dword [0x101a23ac], edx
mov eax, dword [0x1047eb90]
and eax, dword [0x101a2370]
mov dword [0x1047eb9c], eax
mov ecx, dword [0x1047eb54]
imul ecx, dword [0x101a2324]
mov dword [0x101a2300], ecx
mov edx, dword [0x1047eb98]
sub edx, dword [0x101a22f0]
mov dword [0x101a234c], edx
mov eax, dword [0x101a2370]
add eax, dword [0x101a235c]
mov dword [0x101a23f0], eax
mov ecx, dword [0x101a2338]
sub ecx, dword [0x101a23e0]
mov dword [0x101a23b0], ecx
xor eax, eax
jmp 0x1000b38b
pop ebp
ret

Function at 0x1000b390
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x1047eb0c]
add eax, dword [0x101a236c]
mov dword [0x101a231c], eax
mov ecx, dword [0x101a2328]
add ecx, dword [0x1047eba0]
mov dword [0x101a2324], ecx
mov edx, dword [0x1047eb80]
add edx, dword [0x101a236c]
mov dword [0x101a23cc], edx
push str.fuckyou
call fcn.10005b10
add esp, 4
mov eax, dword [0x1047eb30]
imul eax, dword [0x101a23f0]
mov dword [0x101a2334], eax
mov ecx, dword [0x1047eb34]
sub ecx, dword [0x1047eb50]
mov dword [0x1047eb3c], ecx
mov edx, dword [0x101a231c]
sub edx, dword [0x1047eb74]
mov dword [0x1047eb0c], edx
mov eax, dword [0x101a2344]
add eax, dword [0x1047eb54]
mov dword [0x101a22f0], eax
mov ecx, dword [0x101a23d4]
sub ecx, dword [0x101a2330]
mov dword [0x1047eb30], ecx
mov edx, dword [0x101a2330]
imul edx, dword [0x101a2354]
mov dword [0x1047eb60], edx
push 0
call fcn.1012b5f8
mov eax, dword [0x101a23e4]
sub eax, dword [0x1047ebb8]
mov dword [0x1047eba8], eax
mov ecx, dword [0x101a23a8]
add ecx, dword [0x101a2334]
mov dword [0x101a23a4], ecx
mov edx, dword [0x1047eb68]
imul edx, dword [0x101a2398]
mov dword [0x101a23d4], edx
mov eax, dword [0x1047eb3c]
imul eax, dword [0x1047eba4]
mov dword [0x101a237c], eax
mov ecx, dword [0x101a22fc]
sub ecx, dword [0x101a2310]
mov dword [0x1047eaf4], ecx
mov edx, dword [0x1047eb20]
add edx, dword [0x101a23d4]
mov dword [0x101a23ac], edx
mov eax, dword [0x101a2388]
add eax, dword [0x1047eba0]
mov dword [0x101a23f0], eax
xor eax, eax
jmp 0x1000b51c
pop ebp
ret
Function at 0x1000b520
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x1047eb70]
add eax, dword [0x1047eb74]
mov dword [0x1047eb7c], eax
mov ecx, dword [0x1047eb28]
imul ecx, dword [0x101a22f0]
mov dword [0x1047eb0c], ecx
mov edx, dword [0x1047eb28]
add edx, dword [0x101a23e4]
mov dword [0x101a2308], edx
mov eax, dword [0x1047eb50]
imul eax, dword [0x101a22e8]
mov dword [0x101a23ec], eax
mov ecx, dword [0x1047eb24]
add ecx, dword [0x101a2310]
mov dword [0x1047eb24], ecx
mov edx, dword [0x101a2330]
imul edx, dword [0x1047eb9c]
mov dword [0x101a22fc], edx
push str.fuckyou
call fcn.10005b10
add esp, 4
mov eax, dword [0x1047eb90]
sub eax, dword [0x101a236c]
mov dword [0x1047eaf0], eax
mov ecx, dword [0x1047eb68]
and ecx, dword [0x101a2388]
mov dword [0x1047eba0], ecx
mov edx, dword [0x101a23a8]
sub edx, dword [0x101a2310]
mov dword [0x101a2314], edx
push 0
call fcn.1012b5f8
mov eax, dword [0x101a2350]
imul eax, dword [0x101a23d8]
mov dword [0x101a23e0], eax
mov ecx, dword [0x101a23a0]
and ecx, dword [0x101a23a8]
mov dword [0x101a23dc], ecx
mov edx, dword [0x101a2390]
sub edx, dword [0x101a2324]
mov dword [0x101a23e8], edx
mov eax, dword [0x101a2368]
imul eax, dword [0x101a2334]
mov dword [0x1047eb18], eax
mov ecx, dword [0x101a236c]
imul ecx, dword [0x101a23c8]
mov dword [0x1047eb1c], ecx
mov edx, dword [0x1047eb0c]
imul edx, dword [0x101a2388]
mov dword [0x101a23ac], edx
mov eax, dword [0x1047eb28]
add eax, dword [0x101a23b0]
mov dword [0x1047eb80], eax
xor eax, eax
jmp 0x1000b67a
pop ebp
ret
Function at 0x1000b680
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x1047eb08]
imul eax, dword [0x1047eb58]
mov dword [0x1047eb8c], eax
mov ecx, dword [0x101a235c]
imul ecx, dword [0x101a239c]
mov dword [0x101a234c], ecx
mov edx, dword [0x101a235c]
and edx, dword [0x101a2310]
mov dword [0x1047eb18], edx
mov eax, dword [0x1047eb68]
add eax, dword [0x101a235c]
mov dword [0x101a2388], eax
mov ecx, dword [0x1047eb34]
add ecx, dword [0x101a233c]
mov dword [0x101a2390], ecx
mov edx, dword [0x101a234c]
sub edx, dword [0x101a23d8]
mov dword [0x101a2388], edx
push str.fuckyou
call fcn.10005b10
add esp, 4
mov eax, dword [0x1047eb24]
add eax, dword [0x101a23d0]
mov dword [0x101a22f8], eax
mov ecx, dword [0x1047eb1c]
and ecx, dword [0x1047eb38]
mov dword [0x101a23c8], ecx
mov edx, dword [0x101a23bc]
sub edx, dword [0x101a2374]
mov dword [0x101a231c], edx
mov eax, dword [0x101a2354]
imul eax, dword [0x101a234c]
mov dword [0x101a2300], eax
mov ecx, dword [0x101a2308]
add ecx, dword [0x101a23b8]
mov dword [0x1047eb14], ecx
mov edx, dword [0x101a23e4]
add edx, dword [0x1047eb98]
mov dword [0x1047eb50], edx
mov eax, dword [0x101a23a0]
and eax, dword [0x1047eba0]
mov dword [0x101a2374], eax
push 0
call fcn.1012b5f8
mov ecx, dword [0x101a2360]
and ecx, dword [0x1047eb24]
mov dword [0x101a23a8], ecx
mov edx, dword [0x1047eb44]
and edx, dword [0x101a2324]
mov dword [0x101a23ec], edx
mov eax, dword [0x1047eb44]
sub eax, dword [0x101a232c]
mov dword [0x101a2344], eax
mov ecx, dword [0x1047eb58]
and ecx, dword [0x1047eba0]
mov dword [0x1047eb4c], ecx
mov edx, dword [0x1047eb7c]
and edx, dword [0x101a22fc]
mov dword [0x101a23d4], edx
mov eax, dword [0x101a2360]
add eax, dword [0x1047eb34]
mov dword [0x101a230c], eax
mov ecx, dword [0x101a2304]
and ecx, dword [0x101a2304]
mov dword [0x1047eba8], ecx
xor eax, eax
jmp 0x1000b89a
pop ebp
ret