joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10007f80
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov ecx, dword [0x10128158]
push esi
push edi
lea ecx, [ecx + 0x419ef0]
call fcn.1005f250
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 8], xmm0
test eax, eax
je 0x10007ff0
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 4], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 8]
mov ecx, dword [0x10128158]
movss dword [0x10109dc8], xmm0
lea ecx, [ecx + 0x419ef4]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x1000805a
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109d94], xmm0
lea ecx, [ecx + 0x419ef8]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x100080c4
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109e6c], xmm0
lea ecx, [ecx + 0x419ef8]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x1000812e
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
ucomiss xmm0, dword [0x100fd984]
lahf
test ah, 0x44
jnp 0x10008174
movss xmm1, dword [0x10109dc8]
mov ecx, dword [0x10128144]
call fcn.1005ee50
movss xmm1, dword [0x10109d94]
mov ecx, dword [0x10128148]
call fcn.1005ee50
movss xmm1, dword [0x10109e6c]
mov ecx, dword [0x10128150]
call fcn.1005ee50
pop edi
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x10008180
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov ecx, dword [0x10128158]
push esi
push edi
lea ecx, [ecx + 0x419f28]
call fcn.1005f250
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 8], xmm0
test eax, eax
je 0x100081f0
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 4], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 8]
mov ecx, dword [0x10128158]
movss dword [0x10109d9c], xmm0
lea ecx, [ecx + 0x419f2c]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x1000825a
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109de8], xmm0
lea ecx, [ecx + 0x419f30]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x100082c4
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109e48], xmm0
lea ecx, [ecx + 0x419f30]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x1000832e
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
ucomiss xmm0, dword [0x100fd984]
lahf
test ah, 0x44
jnp 0x10008374
movss xmm1, dword [0x10109d9c]
mov ecx, dword [0x10128144]
call fcn.1005ee50
movss xmm1, dword [0x10109de8]
mov ecx, dword [0x10128148]
call fcn.1005ee50
movss xmm1, dword [0x10109e48]
mov ecx, dword [0x10128150]
call fcn.1005ee50
pop edi
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x10008380
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov ecx, dword [0x10128158]
push esi
push edi
lea ecx, [ecx + 0x419f60]
call fcn.1005f250
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 8], xmm0
test eax, eax
je 0x100083f0
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 4], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 8]
mov ecx, dword [0x10128158]
movss dword [0x10109e4c], xmm0
lea ecx, [ecx + 0x419f64]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x1000845a
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109d64], xmm0
lea ecx, [ecx + 0x419f68]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x100084c4
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109d74], xmm0
lea ecx, [ecx + 0x419f68]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x1000852e
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
ucomiss xmm0, dword [0x100fd984]
lahf
test ah, 0x44
jnp 0x10008574
movss xmm1, dword [0x10109e4c]
mov ecx, dword [0x10128144]
call fcn.1005ee50
movss xmm1, dword [0x10109d64]
mov ecx, dword [0x10128148]
call fcn.1005ee50
movss xmm1, dword [0x10109d74]
mov ecx, dword [0x10128150]
call fcn.1005ee50
pop edi
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x10008580
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov ecx, dword [0x10128158]
push esi
push edi
lea ecx, [ecx + 0x419f98]
call fcn.1005f250
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 8], xmm0
test eax, eax
je 0x100085f0
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 4], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 8]
mov ecx, dword [0x10128158]
movss dword [0x10109e5c], xmm0
lea ecx, [ecx + 0x419f9c]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x1000865a
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109e8c], xmm0
lea ecx, [ecx + 0x419fa0]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x100086c4
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109e74], xmm0
lea ecx, [ecx + 0x419fa0]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x1000872e
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
ucomiss xmm0, dword [0x100fd984]
lahf
test ah, 0x44
jnp 0x10008774
movss xmm1, dword [0x10109e5c]
mov ecx, dword [0x10128144]
call fcn.1005ee50
movss xmm1, dword [0x10109e8c]
mov ecx, dword [0x10128148]
call fcn.1005ee50
movss xmm1, dword [0x10109e74]
mov ecx, dword [0x10128150]
call fcn.1005ee50
pop edi
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x10008780
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov ecx, dword [0x10128158]
push esi
push edi
lea ecx, [ecx + 0x419fd0]
call fcn.1005f250
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 8], xmm0
test eax, eax
je 0x100087f0
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 4], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 8]
mov ecx, dword [0x10128158]
movss dword [0x10109d48], xmm0
lea ecx, [ecx + 0x419fd4]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x1000885a
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109e64], xmm0
lea ecx, [ecx + 0x419fd8]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x100088c4
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109d50], xmm0
lea ecx, [ecx + 0x419fd8]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x1000892e
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
ucomiss xmm0, dword [0x100fd984]
lahf
test ah, 0x44
jnp 0x10008974
movss xmm1, dword [0x10109d48]
mov ecx, dword [0x10128144]
call fcn.1005ee50
movss xmm1, dword [0x10109e64]
mov ecx, dword [0x10128148]
call fcn.1005ee50
movss xmm1, dword [0x10109d50]
mov ecx, dword [0x10128150]
call fcn.1005ee50
pop edi
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x10008980
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov ecx, dword [0x10128158]
push esi
push edi
lea ecx, [ecx + 0x41a008]
call fcn.1005f250
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 8], xmm0
test eax, eax
je 0x100089f0
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 4], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 8]
mov ecx, dword [0x10128158]
movss dword [0x10109db8], xmm0
lea ecx, [ecx + 0x41a00c]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x10008a5a
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109e60], xmm0
lea ecx, [ecx + 0x41a010]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x10008ac4
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109d90], xmm0
lea ecx, [ecx + 0x41a010]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x10008b2e
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
ucomiss xmm0, dword [0x100fd984]
lahf
test ah, 0x44
jnp 0x10008b74
movss xmm1, dword [0x10109db8]
mov ecx, dword [0x10128144]
call fcn.1005ee50
movss xmm1, dword [0x10109e60]
mov ecx, dword [0x10128148]
call fcn.1005ee50
movss xmm1, dword [0x10109d90]
mov ecx, dword [0x10128150]
call fcn.1005ee50
pop edi
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x10008b80
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov ecx, dword [0x10128158]
push esi
push edi
lea ecx, [ecx + 0x41a040]
call fcn.1005f250
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 8], xmm0
test eax, eax
je 0x10008bf0
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 4], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 8]
mov ecx, dword [0x10128158]
movss dword [0x10109d60], xmm0
lea ecx, [ecx + 0x41a044]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x10008c5a
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109e50], xmm0
lea ecx, [ecx + 0x41a048]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x10008cc4
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109e58], xmm0
lea ecx, [ecx + 0x41a048]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x10008d2e
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
ucomiss xmm0, dword [0x100fd984]
lahf
test ah, 0x44
jnp 0x10008d74
movss xmm1, dword [0x10109d60]
mov ecx, dword [0x10128144]
call fcn.1005ee50
movss xmm1, dword [0x10109e50]
mov ecx, dword [0x10128148]
call fcn.1005ee50
movss xmm1, dword [0x10109e58]
mov ecx, dword [0x10128150]
call fcn.1005ee50
pop edi
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x10008d80
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov ecx, dword [0x10128158]
push esi
push edi
lea ecx, [ecx + 0x41a078]
call fcn.1005f250
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 8], xmm0
test eax, eax
je 0x10008df0
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 4], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 8]
mov ecx, dword [0x10128158]
movss dword [0x10109dd8], xmm0
lea ecx, [ecx + 0x41a07c]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x10008e5a
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109e68], xmm0
lea ecx, [ecx + 0x41a080]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x10008ec4
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109dd0], xmm0
lea ecx, [ecx + 0x41a080]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x10008f2e
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
ucomiss xmm0, dword [0x100fd984]
lahf
test ah, 0x44
jnp 0x10008f74
movss xmm1, dword [0x10109dd8]
mov ecx, dword [0x10128144]
call fcn.1005ee50
movss xmm1, dword [0x10109e68]
mov ecx, dword [0x10128148]
call fcn.1005ee50
movss xmm1, dword [0x10109dd0]
mov ecx, dword [0x10128150]
call fcn.1005ee50
pop edi
pop esi
mov esp, ebp
pop ebp
ret