joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10008f80
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov ecx, dword [0x10128158]
push esi
push edi
lea ecx, [ecx + 0x41a0b0]
call fcn.1005f250
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 8], xmm0
test eax, eax
je 0x10008ff0
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 4], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 8]
mov ecx, dword [0x10128158]
movss dword [0x10109e40], xmm0
lea ecx, [ecx + 0x41a0b4]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x1000905a
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109e88], xmm0
lea ecx, [ecx + 0x41a0b8]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x100090c4
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109e84], xmm0
lea ecx, [ecx + 0x41a0b8]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x1000912e
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
ucomiss xmm0, dword [0x100fd984]
lahf
test ah, 0x44
jnp 0x10009174
movss xmm1, dword [0x10109e40]
mov ecx, dword [0x10128144]
call fcn.1005ee50
movss xmm1, dword [0x10109e88]
mov ecx, dword [0x10128148]
call fcn.1005ee50
movss xmm1, dword [0x10109e84]
mov ecx, dword [0x10128150]
call fcn.1005ee50
pop edi
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x10009180
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov ecx, dword [0x10128158]
push esi
push edi
lea ecx, [ecx + 0x41a0e8]
call fcn.1005f250
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 8], xmm0
test eax, eax
je 0x100091f0
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 4], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 8]
mov ecx, dword [0x10128158]
movss dword [0x10109d68], xmm0
lea ecx, [ecx + 0x41a0ec]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x1000925a
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109e18], xmm0
lea ecx, [ecx + 0x41a0f0]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x100092c4
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109e38], xmm0
lea ecx, [ecx + 0x41a0f0]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x1000932e
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
ucomiss xmm0, dword [0x100fd984]
lahf
test ah, 0x44
jnp 0x10009374
movss xmm1, dword [0x10109d68]
mov ecx, dword [0x10128144]
call fcn.1005ee50
movss xmm1, dword [0x10109e18]
mov ecx, dword [0x10128148]
call fcn.1005ee50
movss xmm1, dword [0x10109e38]
mov ecx, dword [0x10128150]
call fcn.1005ee50
pop edi
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x10009380
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov ecx, dword [0x10128158]
push esi
push edi
lea ecx, [ecx + 0x41a120]
call fcn.1005f250
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 8], xmm0
test eax, eax
je 0x100093f0
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 4], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 8]
mov ecx, dword [0x10128158]
movss dword [0x10109e7c], xmm0
lea ecx, [ecx + 0x41a124]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x1000945a
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109da0], xmm0
lea ecx, [ecx + 0x41a128]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x100094c4
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109d44], xmm0
lea ecx, [ecx + 0x41a128]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x1000952e
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
ucomiss xmm0, dword [0x100fd984]
lahf
test ah, 0x44
jnp 0x10009574
movss xmm1, dword [0x10109e7c]
mov ecx, dword [0x10128144]
call fcn.1005ee50
movss xmm1, dword [0x10109da0]
mov ecx, dword [0x10128148]
call fcn.1005ee50
movss xmm1, dword [0x10109d44]
mov ecx, dword [0x10128150]
call fcn.1005ee50
pop edi
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x10009580
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov ecx, dword [0x10128158]
push esi
push edi
lea ecx, [ecx + 0x41a158]
call fcn.1005f250
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 8], xmm0
test eax, eax
je 0x100095f0
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 4], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 8]
mov ecx, dword [0x10128158]
movss dword [0x10109e2c], xmm0
lea ecx, [ecx + 0x41a15c]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x1000965a
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109e78], xmm0
lea ecx, [ecx + 0x41a160]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x100096c4
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109e34], xmm0
lea ecx, [ecx + 0x41a160]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x1000972e
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
ucomiss xmm0, dword [0x100fd984]
lahf
test ah, 0x44
jnp 0x10009774
movss xmm1, dword [0x10109e2c]
mov ecx, dword [0x10128144]
call fcn.1005ee50
movss xmm1, dword [0x10109e78]
mov ecx, dword [0x10128148]
call fcn.1005ee50
movss xmm1, dword [0x10109e34]
mov ecx, dword [0x10128150]
call fcn.1005ee50
pop edi
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x10009780
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov ecx, dword [0x10128158]
push esi
push edi
lea ecx, [ecx + 0x41a190]
call fcn.1005f250
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 8], xmm0
test eax, eax
je 0x100097f0
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 4], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 8]
mov ecx, dword [0x10128158]
movss dword [0x10109e1c], xmm0
lea ecx, [ecx + 0x41a194]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x1000985a
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109dc4], xmm0
lea ecx, [ecx + 0x41a198]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x100098c4
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109da4], xmm0
lea ecx, [ecx + 0x41a198]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x1000992e
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
ucomiss xmm0, dword [0x100fd984]
lahf
test ah, 0x44
jnp 0x10009974
movss xmm1, dword [0x10109e1c]
mov ecx, dword [0x10128144]
call fcn.1005ee50
movss xmm1, dword [0x10109dc4]
mov ecx, dword [0x10128148]
call fcn.1005ee50
movss xmm1, dword [0x10109da4]
mov ecx, dword [0x10128150]
call fcn.1005ee50
pop edi
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x10009980
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov ecx, dword [0x10128158]
push esi
push edi
lea ecx, [ecx + 0x41a1c8]
call fcn.1005f250
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 8], xmm0
test eax, eax
je 0x100099f0
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 4], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 8]
mov ecx, dword [0x10128158]
movss dword [0x10109df4], xmm0
lea ecx, [ecx + 0x41a1cc]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x10009a5a
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109e70], xmm0
lea ecx, [ecx + 0x41a1d0]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x10009ac4
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109e3c], xmm0
lea ecx, [ecx + 0x41a1d0]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x10009b2e
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
ucomiss xmm0, dword [0x100fd984]
lahf
test ah, 0x44
jnp 0x10009b74
movss xmm1, dword [0x10109df4]
mov ecx, dword [0x10128144]
call fcn.1005ee50
movss xmm1, dword [0x10109e70]
mov ecx, dword [0x10128148]
call fcn.1005ee50
movss xmm1, dword [0x10109e3c]
mov ecx, dword [0x10128150]
call fcn.1005ee50
pop edi
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x10009b80
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov ecx, dword [0x10128158]
push esi
push edi
lea ecx, [ecx + 0x41a200]
call fcn.1005f250
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 8], xmm0
test eax, eax
je 0x10009bf0
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 4], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 8]
mov ecx, dword [0x10128158]
movss dword [0x10109da8], xmm0
lea ecx, [ecx + 0x41a204]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x10009c5a
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109e08], xmm0
lea ecx, [ecx + 0x41a208]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x10009cc4
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109dbc], xmm0
lea ecx, [ecx + 0x41a208]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x10009d2e
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
ucomiss xmm0, dword [0x100fd984]
lahf
test ah, 0x44
jnp 0x10009d74
movss xmm1, dword [0x10109da8]
mov ecx, dword [0x10128144]
call fcn.1005ee50
movss xmm1, dword [0x10109e08]
mov ecx, dword [0x10128148]
call fcn.1005ee50
movss xmm1, dword [0x10109dbc]
mov ecx, dword [0x10128150]
call fcn.1005ee50
pop edi
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x10009d80
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov ecx, dword [0x10128158]
push esi
push edi
lea ecx, [ecx + 0x41a238]
call fcn.1005f250
mov dword [ebp - 4], eax
lea ecx, [ebp - 4]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 8], xmm0
test eax, eax
je 0x10009df0
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 4]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 4], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 8]
mov ecx, dword [0x10128158]
movss dword [0x10109d88], xmm0
lea ecx, [ecx + 0x41a23c]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x10009e5a
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109d3c], xmm0
lea ecx, [ecx + 0x41a240]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x10009ec4
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
mov ecx, dword [0x10128158]
movss dword [0x10109e30], xmm0
lea ecx, [ecx + 0x41a240]
call fcn.1005f250
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
lea eax, [ebp - 0xc]
push eax
call fcn.100108c0
mov dword [ebp - 0x18], 4
mov esi, dword [eax]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], esi
call edi
test eax, eax
setne byte [ebp - 0x10]
movss xmm0, dword [esi]
movss dword [ebp - 4], xmm0
test eax, eax
je 0x10009f2e
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x18]
mov dword [ebp - 8], eax
push dword [ebp - 0x1c]
call edi
movss xmm0, dword [ebp - 4]
ucomiss xmm0, dword [0x100fd984]
lahf
test ah, 0x44
jnp 0x10009f74
movss xmm1, dword [0x10109d88]
mov ecx, dword [0x10128144]
call fcn.1005ee50
movss xmm1, dword [0x10109d3c]
mov ecx, dword [0x10128148]
call fcn.1005ee50
movss xmm1, dword [0x10109e30]
mov ecx, dword [0x10128150]
call fcn.1005ee50
pop edi
pop esi
mov esp, ebp
pop ebp
ret