joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10340229
Capabilities:
Link many functions at runtime

Disassembly:
push 0xffffffffffffffff
push 0x104d7e3f
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
mov eax, dword [0x1072a790]
xor eax, esp
mov dword [esp + 0x18], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x1072a790]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
mov edi, ecx
lea eax, [esp + 0x14]
push eax
call fcn.10340391
and dword [esp + 0x38], 0
push 0x10
pop ebp
cmp dword [eax + 0x14], ebp
jb 0x10340276
mov eax, dword [eax]
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x10340370
lea eax, [esp + 0x14]
push eax
call fcn.1034040f
mov dword [esp + 0x38], 1
cmp dword [eax + 0x14], ebp
jb 0x103402b5
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x10340370
lea eax, [esp + 0x14]
push eax
call fcn.1034048b
mov dword [esp + 0x38], 2
cmp dword [eax + 0x14], ebp
jb 0x103402ee
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x10340370
lea eax, [esp + 0x14]
push eax
call fcn.10340508
mov dword [esp + 0x38], 3
cmp dword [eax + 0x14], ebp
jb 0x10340323
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x10340370
lea eax, [esp + 0x14]
push eax
call fcn.10340584
mov dword [esp + 0x38], 4
cmp dword [eax + 0x14], ebp
jb 0x10340358
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
mov eax, esi
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x18]
xor ecx, esp
call fcn.10436e26
add esp, 0x28
ret
Function at 0x10340600
Capabilities:
Link many functions at runtime

Disassembly:
push 0xffffffffffffffff
push 0x104d7e3f
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
mov eax, dword [0x1072a790]
xor eax, esp
mov dword [esp + 0x18], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x1072a790]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
mov edi, ecx
lea eax, [esp + 0x14]
push eax
call fcn.10340768
and dword [esp + 0x38], 0
push 0x10
pop ebp
cmp dword [eax + 0x14], ebp
jb 0x1034064d
mov eax, dword [eax]
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x10340747
lea eax, [esp + 0x14]
push eax
call fcn.103407e4
mov dword [esp + 0x38], 1
cmp dword [eax + 0x14], ebp
jb 0x1034068c
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x10340747
lea eax, [esp + 0x14]
push eax
call fcn.10340863
mov dword [esp + 0x38], 2
cmp dword [eax + 0x14], ebp
jb 0x103406c5
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x10340747
lea eax, [esp + 0x14]
push eax
call fcn.103408e1
mov dword [esp + 0x38], 3
cmp dword [eax + 0x14], ebp
jb 0x103406fa
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x10340747
lea eax, [esp + 0x14]
push eax
call fcn.1034095e
mov dword [esp + 0x38], 4
cmp dword [eax + 0x14], ebp
jb 0x1034072f
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
mov eax, esi
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x18]
xor ecx, esp
call fcn.10436e26
add esp, 0x28
ret
Function at 0x103409db
Capabilities:
Link many functions at runtime

Disassembly:
push 0xffffffffffffffff
push 0x104d7e3f
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
mov eax, dword [0x1072a790]
xor eax, esp
mov dword [esp + 0x18], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x1072a790]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
mov edi, ecx
lea eax, [esp + 0x14]
push eax
call fcn.10340b43
and dword [esp + 0x38], 0
push 0x10
pop ebp
cmp dword [eax + 0x14], ebp
jb 0x10340a28
mov eax, dword [eax]
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x10340b22
lea eax, [esp + 0x14]
push eax
call fcn.10340bc0
mov dword [esp + 0x38], 1
cmp dword [eax + 0x14], ebp
jb 0x10340a67
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x10340b22
lea eax, [esp + 0x14]
push eax
call fcn.10340c3f
mov dword [esp + 0x38], 2
cmp dword [eax + 0x14], ebp
jb 0x10340aa0
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x10340b22
lea eax, [esp + 0x14]
push eax
call fcn.10340cbd
mov dword [esp + 0x38], 3
cmp dword [eax + 0x14], ebp
jb 0x10340ad5
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x10340b22
lea eax, [esp + 0x14]
push eax
call fcn.10340d3a
mov dword [esp + 0x38], 4
cmp dword [eax + 0x14], ebp
jb 0x10340b0a
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
mov eax, esi
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x18]
xor ecx, esp
call fcn.10436e26
add esp, 0x28
ret
Function at 0x1034119a
Capabilities:
Link many functions at runtime

Disassembly:
push 0xffffffffffffffff
push 0x104d800e
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
mov eax, dword [0x1072a790]
xor eax, esp
mov dword [esp + 0x18], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x1072a790]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
mov edi, ecx
lea eax, [esp + 0x14]
push eax
call fcn.1034133b
and dword [esp + 0x38], 0
push 0x10
pop ebp
cmp dword [eax + 0x14], ebp
jb 0x103411e7
mov eax, dword [eax]
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x1034131a
lea eax, [esp + 0x14]
push eax
call fcn.103413b8
mov dword [esp + 0x38], 1
cmp dword [eax + 0x14], ebp
jb 0x10341226
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x1034131a
lea eax, [esp + 0x14]
push eax
call fcn.10341436
mov dword [esp + 0x38], 2
cmp dword [eax + 0x14], ebp
jb 0x1034125f
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x1034131a
lea eax, [esp + 0x14]
push eax
call fcn.103414b5
mov dword [esp + 0x38], 3
cmp dword [eax + 0x14], ebp
jb 0x10341298
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x1034131a
lea eax, [esp + 0x14]
push eax
call fcn.10341533
mov dword [esp + 0x38], 4
cmp dword [eax + 0x14], ebp
jb 0x103412cd
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x1034131a
lea eax, [esp + 0x14]
push eax
call fcn.103415af
mov dword [esp + 0x38], 5
cmp dword [eax + 0x14], ebp
jb 0x10341302
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
mov eax, esi
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x18]
xor ecx, esp
call fcn.10436e26
add esp, 0x28
ret
Function at 0x1034162d
Capabilities:
Link many functions at runtime

Disassembly:
push 0xffffffffffffffff
push 0x104d800e
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
mov eax, dword [0x1072a790]
xor eax, esp
mov dword [esp + 0x18], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x1072a790]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
mov edi, ecx
lea eax, [esp + 0x14]
push eax
call fcn.103417ce
and dword [esp + 0x38], 0
push 0x10
pop ebp
cmp dword [eax + 0x14], ebp
jb 0x1034167a
mov eax, dword [eax]
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x103417ad
lea eax, [esp + 0x14]
push eax
call fcn.10341847
mov dword [esp + 0x38], 1
cmp dword [eax + 0x14], ebp
jb 0x103416b9
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x103417ad
lea eax, [esp + 0x14]
push eax
call fcn.103418c5
mov dword [esp + 0x38], 2
cmp dword [eax + 0x14], ebp
jb 0x103416f2
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x103417ad
lea eax, [esp + 0x14]
push eax
call fcn.10341944
mov dword [esp + 0x38], 3
cmp dword [eax + 0x14], ebp
jb 0x1034172b
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x103417ad
lea eax, [esp + 0x14]
push eax
call fcn.103419c2
mov dword [esp + 0x38], 4
cmp dword [eax + 0x14], ebp
jb 0x10341760
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x103417ad
lea eax, [esp + 0x14]
push eax
call fcn.10341a3e
mov dword [esp + 0x38], 5
cmp dword [eax + 0x14], ebp
jb 0x10341795
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
mov eax, esi
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x18]
xor ecx, esp
call fcn.10436e26
add esp, 0x28
ret
Function at 0x10341abc
Capabilities:
Link many functions at runtime

Disassembly:
push 0xffffffffffffffff
push 0x104d800e
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
mov eax, dword [0x1072a790]
xor eax, esp
mov dword [esp + 0x18], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x1072a790]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
mov edi, ecx
lea eax, [esp + 0x14]
push eax
call fcn.10341c5d
and dword [esp + 0x38], 0
push 0x10
pop ebp
cmp dword [eax + 0x14], ebp
jb 0x10341b09
mov eax, dword [eax]
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x10341c3c
lea eax, [esp + 0x14]
push eax
call fcn.10341cd6
mov dword [esp + 0x38], 1
cmp dword [eax + 0x14], ebp
jb 0x10341b48
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x10341c3c
lea eax, [esp + 0x14]
push eax
call fcn.10341d54
mov dword [esp + 0x38], 2
cmp dword [eax + 0x14], ebp
jb 0x10341b81
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x10341c3c
lea eax, [esp + 0x14]
push eax
call fcn.10341dd3
mov dword [esp + 0x38], 3
cmp dword [eax + 0x14], ebp
jb 0x10341bba
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x10341c3c
lea eax, [esp + 0x14]
push eax
call fcn.10341e51
mov dword [esp + 0x38], 4
cmp dword [eax + 0x14], ebp
jb 0x10341bef
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x10341c3c
lea eax, [esp + 0x14]
push eax
call fcn.10341ecd
mov dword [esp + 0x38], 5
cmp dword [eax + 0x14], ebp
jb 0x10341c24
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
mov eax, esi
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x18]
xor ecx, esp
call fcn.10436e26
add esp, 0x28
ret
Function at 0x10342efb
Capabilities:
Link many functions at runtime

Disassembly:
push 0xffffffffffffffff
push 0x104d800e
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
mov eax, dword [0x1072a790]
xor eax, esp
mov dword [esp + 0x18], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x1072a790]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
mov edi, ecx
lea eax, [esp + 0x14]
push eax
call fcn.1034309c
and dword [esp + 0x38], 0
push 0x10
pop ebp
cmp dword [eax + 0x14], ebp
jb 0x10342f48
mov eax, dword [eax]
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x1034307b
lea eax, [esp + 0x14]
push eax
call fcn.10343119
mov dword [esp + 0x38], 1
cmp dword [eax + 0x14], ebp
jb 0x10342f87
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x1034307b
lea eax, [esp + 0x14]
push eax
call fcn.10343195
mov dword [esp + 0x38], 2
cmp dword [eax + 0x14], ebp
jb 0x10342fc0
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x1034307b
lea eax, [esp + 0x14]
push eax
call fcn.10343214
mov dword [esp + 0x38], 3
cmp dword [eax + 0x14], ebp
jb 0x10342ff9
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x1034307b
lea eax, [esp + 0x14]
push eax
call fcn.10343292
mov dword [esp + 0x38], 4
cmp dword [eax + 0x14], ebp
jb 0x1034302e
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x1034307b
lea eax, [esp + 0x14]
push eax
call fcn.1034330f
mov dword [esp + 0x38], 5
cmp dword [eax + 0x14], ebp
jb 0x10343063
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
mov eax, esi
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x18]
xor ecx, esp
call fcn.10436e26
add esp, 0x28
ret
Function at 0x1034338d
Capabilities:
Link many functions at runtime

Disassembly:
push 0xffffffffffffffff
push 0x104d800e
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
mov eax, dword [0x1072a790]
xor eax, esp
mov dword [esp + 0x18], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x1072a790]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
mov edi, ecx
lea eax, [esp + 0x14]
push eax
call fcn.1034352e
and dword [esp + 0x38], 0
push 0x10
pop ebp
cmp dword [eax + 0x14], ebp
jb 0x103433da
mov eax, dword [eax]
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x1034350d
lea eax, [esp + 0x14]
push eax
call fcn.103435a7
mov dword [esp + 0x38], 1
cmp dword [eax + 0x14], ebp
jb 0x10343419
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x1034350d
lea eax, [esp + 0x14]
push eax
call fcn.10343623
mov dword [esp + 0x38], 2
cmp dword [eax + 0x14], ebp
jb 0x10343452
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x1034350d
lea eax, [esp + 0x14]
push eax
call fcn.103436a2
mov dword [esp + 0x38], 3
cmp dword [eax + 0x14], ebp
jb 0x1034348b
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x1034350d
lea eax, [esp + 0x14]
push eax
call fcn.10343720
mov dword [esp + 0x38], 4
cmp dword [eax + 0x14], ebp
jb 0x103434c0
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x1034350d
lea eax, [esp + 0x14]
push eax
call fcn.1034379d
mov dword [esp + 0x38], 5
cmp dword [eax + 0x14], ebp
jb 0x103434f5
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
mov eax, esi
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x18]
xor ecx, esp
call fcn.10436e26
add esp, 0x28
ret
Function at 0x1034381b
Capabilities:
Link many functions at runtime

Disassembly:
push 0xffffffffffffffff
push 0x104d800e
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
mov eax, dword [0x1072a790]
xor eax, esp
mov dword [esp + 0x18], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x1072a790]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
mov edi, ecx
lea eax, [esp + 0x14]
push eax
call fcn.103439bc
and dword [esp + 0x38], 0
push 0x10
pop ebp
cmp dword [eax + 0x14], ebp
jb 0x10343868
mov eax, dword [eax]
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x1034399b
lea eax, [esp + 0x14]
push eax
call fcn.10343a35
mov dword [esp + 0x38], 1
cmp dword [eax + 0x14], ebp
jb 0x103438a7
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x1034399b
lea eax, [esp + 0x14]
push eax
call fcn.10343ab1
mov dword [esp + 0x38], 2
cmp dword [eax + 0x14], ebp
jb 0x103438e0
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x1034399b
lea eax, [esp + 0x14]
push eax
call fcn.10343b30
mov dword [esp + 0x38], 3
cmp dword [eax + 0x14], ebp
jb 0x10343919
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x1034399b
lea eax, [esp + 0x14]
push eax
call fcn.10343bae
mov dword [esp + 0x38], 4
cmp dword [eax + 0x14], ebp
jb 0x1034394e
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x1034399b
lea eax, [esp + 0x14]
push eax
call fcn.10343c2b
mov dword [esp + 0x38], 5
cmp dword [eax + 0x14], ebp
jb 0x10343983
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
mov eax, esi
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x18]
xor ecx, esp
call fcn.10436e26
add esp, 0x28
ret
Function at 0x103455df
Capabilities:
Link many functions at runtime

Disassembly:
push 0xffffffffffffffff
push 0x104d8332
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
mov eax, dword [0x1072a790]
xor eax, esp
mov dword [esp + 0x18], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x1072a790]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
mov edi, ecx
lea eax, [esp + 0x14]
push eax
call fcn.103457b9
and dword [esp + 0x38], 0
push 0x10
pop ebp
cmp dword [eax + 0x14], ebp
jb 0x1034562c
mov eax, dword [eax]
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x10345798
lea eax, [esp + 0x14]
push eax
call fcn.10345832
mov dword [esp + 0x38], 1
cmp dword [eax + 0x14], ebp
jb 0x1034566b
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x10345798
lea eax, [esp + 0x14]
push eax
call fcn.103458af
mov dword [esp + 0x38], 2
cmp dword [eax + 0x14], ebp
jb 0x103456a4
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x10345798
lea eax, [esp + 0x14]
push eax
call fcn.1034592d
mov dword [esp + 0x38], 3
cmp dword [eax + 0x14], ebp
jb 0x103456dd
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x10345798
lea eax, [esp + 0x14]
push eax
call fcn.103459a6
mov dword [esp + 0x38], 4
cmp dword [eax + 0x14], ebp
jb 0x10345716
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x10345798
lea eax, [esp + 0x14]
push eax
call fcn.10345a23
mov dword [esp + 0x38], 5
cmp dword [eax + 0x14], ebp
jb 0x1034574b
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
test esi, esi
jne 0x10345798
lea eax, [esp + 0x14]
push eax
call fcn.10345aa1
mov dword [esp + 0x38], 6
cmp dword [eax + 0x14], ebp
jb 0x10345780
mov eax, dword [eax]
push eax
push edi
call ebx
mov esi, eax
or dword [esp + 0x38], 0xffffffff
push 0
push 1
lea ecx, [esp + 0x1c]
call fcn.1007a274
mov eax, esi
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x18]
xor ecx, esp
call fcn.10436e26
add esp, 0x28
ret