joyce8/EMBER2024-capa huggingface dataset:
Function at 0x466790
Capabilities:
Resolve function by parsing pe exports

Disassembly:
das
push ebp
inc ebx
add byte [eax], al
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add dword [ebx], eax
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [edx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add byte [ebx], ah
push esp
inc ebx
add byte [edx + 0x53], bh
inc ebx
add cl, dl
push ebx
inc ebx
add byte [esp + edx*2 + 0x552f0043], al
inc ebx
add byte [eax], al
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 1
add al, 4
add al, 4
add al, byte [ebx]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop

Function at 0x4669d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add dword [eax], eax
add byte [ecx - 0x3899f7a9], cl
inc edi
or al, 1
add byte [esi - 0x39], ah
inc edi
push cs

Function at 0x466a55
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add byte [ebx + 0xb496], cl
add byte [ebx + 0xa8a04c0], al

Function at 0x466b75
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, edx
and ecx, 0xff
dec bl
and ebx, 0xff
and ebx, ecx
mov cl, byte [esi + 0x40]
shr dl, cl
mov ecx, dword [esi + 0x40]
mov ebp, ebx
mov dword [esp + 0x38], ebp
sub eax, ecx
mov byte [esi + 0x3c], dl
jmp 0x466d52
Function at 0x466be6
Capabilities:
Resolve function by parsing pe exports

Disassembly:
jle 0x466bfa
sub ecx, edi
dec ecx
or dl, 0xff
mov dword [esi + 0x94], ecx
mov byte [esp + 0x28], dl
jmp 0x466c2f
test edi, edi
jne 0x466c15
dec edx
dec ecx
mov dword [esi + 0xb4], edx
or dl, 0xff
mov dword [esi + 0x94], ecx
mov byte [esp + 0x28], dl
jmp 0x466c2f

Function at 0x466c76
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub eax, edx
add eax, 8
jmp 0x466d52
mov ecx, ebp
mov dword [esi + 0x48], eax
mov eax, dword [esp + 0x40]
and ecx, 0xffff
cmp ecx, eax
je 0x4674ca
dec eax
cmp ecx, eax
jne 0x466fb5
mov ecx, dword [esi + 0x44]
mov eax, dword [esi + 0x48]
mov edx, dword [esp + 0x14]
cmp eax, ecx
mov dword [esi + 0x40], ecx
mov dword [esp + 0x18], edx
jb 0x466daf
mov dl, byte [esi + 0x3c]
mov bl, 1
shl bl, cl
mov edi, edx
and edi, 0xff
shr dl, cl
mov ecx, dword [esi + 0x4c]
mov edx, dword [esi + 0x50]
xor ebx, ebx
cmp ecx, edx
mov bl, byte [esi + 0x3c]
jb 0x466e1e
mov edi, dword [esi + 0xb4]
mov ebp, dword [esi + 0x94]
xor edx, edx
mov dl, byte [edi]
inc edi
mov dword [esi + 0x50], edx
mov dword [esi + 0xb4], edi
lea ecx, [edx + 1]
mov dword [esi + 0x4c], 0
add ebp, ecx
mov dword [esi + 0x94], ebp
mov ecx, ebp
cmp ecx, dword [esi + 0x74]
jle 0x466e03
sub ecx, edx
dec ecx
mov dword [esi + 0x94], ecx
or cl, 0xff
mov byte [esp + 0x1c], cl
jmp 0x466e39
test edx, edx
jne 0x466e1e
dec edi
dec ecx
mov dword [esi + 0x94], ecx
or cl, 0xff
mov dword [esi + 0xb4], edi
mov byte [esp + 0x1c], cl
jmp 0x466e39
mov ecx, dword [esi + 0x4c]
mov edx, dword [esi + 0xb4]
inc ecx
cmp ecx, dword [esp + 0x18]
jge 0x4671c6
mov edx, dword [esp + 0x14]
xor eax, eax
mov ebx, ebp
mov ebp, dword [esp + 0x30]
cmp ecx, edx
jl 0x467001
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x14]
mov ebp, dword [esp + 0x30]
mov ebx, ecx
and ecx, 0xffff
xor eax, eax
cmp ecx, edx
mov dword [esp + 0x34], ebx
jl 0x467210
lea ecx, [ecx + ecx*2]
lea ecx, [ebp + ecx*2]
mov word [ecx + 4], ax
inc ecx
add al, 0x66
mov ecx, dword [ecx + 2]
mov eax, ebx
mov dword [esp + 0x34], ecx
cmp cx, ax
jae 0x4674b3
mov ebx, dword [esp + 0x34]
and ecx, 0xffff
cmp ecx, edx
jge 0x4671e4
test byte [esi + 0x3d], 0x40
je 0x46728c
mov edx, dword [esi + 0x78]
mov ecx, dword [esi + 0x54]
cmp edx, ecx
jne 0x467269
mov ecx, dword [esi + 0x64]
mov dword [esi + 0x78], 0
cmp ecx, 1
stc
add dword [edi + 8], edi
jne 0x467237
add dword [esi + 0x68], edi
cmp ecx, 2
jne 0x46723f
add dword [esi + 0x68], edi
cmp ecx, 3
jne 0x467248
add dword [esi + 0x68], 4
cmp ecx, 4
jne 0x467251
add dword [esi + 0x68], 2
mov edx, dword [esi + 0x68]
cmp edx, dword [esi + 0x58]
jl 0x46726e
inc ecx
mov edx, 0x10
shr dword [esi - 0x73], cl
dec esp
and al, 0x18
push ecx
lea ecx, [esp + 0x28]
call 0x483380
sub al, ch
adc ecx, eax
add dword [eax], eax
add byte [ebp - 0x7c978a40], al
invalid
test eax, eax
jne 0x4672db
add edi, 8
add esi, 8
jmp 0x4672a6
sbb edi, esi
fmul dword [ebx + 0x575653d8]
call str.0_0
add esp, 0xc
test eax, eax
jl 0x4672db
jg 0x4672cf
add edi, ebx
add esi, ebx
add byte [ebx], bh
jmp 0x4674c6
add byte [eax], al
mov byte [esi], al
inc esi
mov byte [esi], dl
inc esi
jmp 0x467591
Function at 0x466d98
Capabilities:
Resolve function by parsing pe exports

Disassembly:
dec bl
and ebx, 0xff
and ebx, edi
sub eax, ecx
mov byte [esi + 0x3c], dl
mov dword [esi + 0x48], eax
jmp 0x466ee7
Function at 0x466ea4
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov cl, byte [esi + 0x48]
sub dl, cl
mov byte [esp + 0x3c], al
sub dl, 8
mov al, 1
mov cl, dl
mov edi, dword [esi + 0x48]
shl al, cl
mov ecx, dword [esp + 0x3c]
and ecx, 0xff
dec al
and eax, 0xff
and eax, ecx
lea ecx, [edi + 8]
shl eax, cl
mov cl, dl
add ebx, eax
mov al, byte [esp + 0x3c]
shr al, cl
sub edi, dword [esi + 0x40]
add edi, 0x10
mov byte [esi + 0x3c], al
mov dword [esi + 0x48], edi

Function at 0x466feb
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, ebx
and ecx, 0xffff
lea edx, [ecx + ecx*2]
lea ecx, [ebp + edx*2]
mov word [ecx + 4], ax
mov eax, ebx
mov bx, word [ecx + 2]
cmp bx, ax
jae 0x46749c
mov edx, dword [esp + 0x14]
mov ecx, ebx
and ecx, 0xffff
cmp ecx, edx
jge 0x466fcf
test byte [esi + 0x3d], 0x40
je 0x467071
mov edx, dword [esi + 0x78]
mov ecx, dword [esi + 0x54]
cmp edx, ecx
jne 0x467057
mov ecx, dword [esi + 0x64]
mov dword [esi + 0x78], 0
cmp ecx, 1
jne 0x467024
mov ecx, dword [esi + 0x78]
mov edx, dword [esi + 0x54]
cmp ecx, edx
jne 0x467089
mov ecx, dword [esi + 0x7c]
mov dword [esi + 0x78], 0
js 0x467082
add byte [eax], al
add byte [ecx - 0x77], al
dec esi
invalid
mov ecx, dword [esi + 0x7c]
mov edx, dword [esi + 0x78]
imul ecx, dword [esi + 0x6c]
add ecx, edx
or dword [ebx - 0x7af0fd01], eax
xlatb
add byte [eax], al
add byte [edx - 0x7f1e7f38], cl

Function at 0x467012
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, ebx
and ecx, 0xffff
lea edx, [ecx + ecx*2]
lea ecx, [ebp + edx*2]
mov word [ecx + 4], ax
mov eax, ebx
mov bx, word [ecx + 2]
cmp bx, ax
jae 0x46749c
mov edx, dword [esp + 0x14]
mov ecx, ebx
and ecx, 0xffff
cmp ecx, edx
jge 0x466fcf
test byte [esi + 0x3d], 0x40
je 0x467071
mov edx, dword [esi + 0x78]
mov ecx, dword [esi + 0x54]
cmp edx, ecx
jne 0x467057
mov ecx, dword [esi + 0x64]
mov dword [esi + 0x78], 0
cmp ecx, 1
jne 0x467024
mov ecx, dword [esi + 0x78]
mov edx, dword [esi + 0x54]
cmp ecx, edx
jne 0x467089
mov ecx, dword [esi + 0x7c]
mov dword [esi + 0x78], 0
js 0x467082
add byte [eax], al
add byte [ecx - 0x77], al
dec esi
invalid
mov ecx, dword [esi + 0x7c]
mov edx, dword [esi + 0x78]
imul ecx, dword [esi + 0x6c]
add ecx, edx
or dword [ebx - 0x7af0fd01], eax
xlatb
add byte [eax], al
add byte [edx - 0x7f1e7f38], cl
Function at 0x467020
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add dword [esi + 0x68], 8
cmp ecx, 2
jne 0x46702d
add dword [esi + 0x68], 8
cmp ecx, 3
jne 0x467036
add dword [esi + 0x68], 4
cmp ecx, 4
jne 0x46703f
add dword [esi + 0x68], 2
mov edx, dword [esi + 0x68]
mov edi, dword [esi + 0x58]
cmp edx, edi
jl 0x467057
inc ecx
mov edx, 0x10
sar edx, cl
mov dword [esi + 0x64], ecx
mov dword [esi + 0x68], edx
mov ecx, dword [esi + 0x6c]
mov edi, dword [esi + 0x78]
imul ecx, dword [esi + 0x68]
mov edx, dword [esi + 0xac]
add ecx, edi
mov byte [edx + ecx], bl
mov edx, dword [esi + 0x78]
jmp 0x467095
inc edx
mov dword [esi + 0x78], edx
mov edx, dword [esi + 0x98]
cmp ecx, edx
jg 0x4670ac
mov edx, dword [esi + 0xac]
mov byte [edx + ecx], bl
test ax, ax
je 0x46717d
and eax, 0xffff
lea eax, [eax + eax*2]
mov dl, byte [ebp + eax*2]
lea edi, [ebp + eax*2]
test byte [esi + 0x3d], 0x40
je 0x467135
mov ecx, dword [esi + 0x78]
mov eax, dword [esi + 0x54]
inc esi
push esp
mov eax, dword [esi + 0x78]
mov ecx, dword [esi + 0x54]
cmp eax, ecx
jne 0x46714d
mov eax, dword [esi + 0x7c]
mov dword [esi + 0x78], 0
add byte [eax], al
inc eax
mov dword [esi + 0x7c], eax
mov eax, dword [esi + 0x7c]
mov ecx, dword [esi + 0x78]
imul eax, dword [esi + 0x6c]
add eax, ecx
inc ecx
mov dword [esi + 0x78], ecx
mov ecx, dword [esi + 0x98]
cmp eax, ecx
jg 0x467170
mov ecx, dword [esi + 0xac]
mov byte [ecx + eax], dl
mov ax, word [edi + 4]
test ax, ax
jne 0x4670b5
mov edx, dword [esp + 0x18]
mov cx, word [esp + 0x20]
lea eax, [edx + edx*2]
inc edx
mov dword [esp + 0x18], edx
lea eax, [ebp + eax*2]
mov byte [eax], bl
mov word [eax + 2], cx
mov ecx, dword [esi + 0x40]
mov eax, 1
shl eax, cl
cmp edx, eax
jne 0x4671aa
inc ecx
mov dword [esi + 0x40], ecx
mov ecx, dword [esi + 0x40]
mov eax, 0xc
cmp ecx, eax
jbe 0x4671b9
mov dword [esi + 0x40], eax
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x20], ecx
jmp 0x466b64

Function at 0x467080
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, ebx
and ecx, 0xffff
lea edx, [ecx + ecx*2]
lea ecx, [ebp + edx*2]
mov word [ecx + 4], ax
mov eax, ebx
mov bx, word [ecx + 2]
cmp bx, ax
jae 0x46749c
mov edx, dword [esp + 0x14]
mov ecx, ebx
and ecx, 0xffff
cmp ecx, edx
jge 0x466fcf
test byte [esi + 0x3d], 0x40
je 0x467071
mov edx, dword [esi + 0x78]
mov ecx, dword [esi + 0x54]
cmp edx, ecx
jne 0x467057
mov ecx, dword [esi + 0x64]
mov dword [esi + 0x78], 0
cmp ecx, 1
jne 0x467024
mov ecx, dword [esi + 0x78]
mov edx, dword [esi + 0x54]
cmp ecx, edx
jne 0x467089
mov ecx, dword [esi + 0x7c]
mov dword [esi + 0x78], 0
js 0x467082
add byte [eax], al
add byte [ecx - 0x77], al
dec esi
invalid
mov ecx, dword [esi + 0x7c]
mov edx, dword [esi + 0x78]
imul ecx, dword [esi + 0x6c]
add ecx, edx
or dword [ebx - 0x7af0fd01], eax
xlatb
add byte [eax], al
add byte [edx - 0x7f1e7f38], cl
Function at 0x4670d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add dword [esi + 0x68], 8
cmp ecx, 2
jne 0x46702d
add dword [esi + 0x68], 8
cmp ecx, 3
jne 0x467036
add dword [esi + 0x68], 4
cmp ecx, 4
jne 0x46703f
add dword [esi + 0x68], 2
mov edx, dword [esi + 0x68]
mov edi, dword [esi + 0x58]
cmp edx, edi
jl 0x467057
inc ecx
mov edx, 0x10
sar edx, cl
mov dword [esi + 0x64], ecx
mov dword [esi + 0x68], edx
mov ecx, dword [esi + 0x6c]
mov edi, dword [esi + 0x78]
imul ecx, dword [esi + 0x68]
mov edx, dword [esi + 0xac]
add ecx, edi
mov byte [edx + ecx], bl
mov edx, dword [esi + 0x78]
jmp 0x467095
inc edx
mov dword [esi + 0x78], edx
mov edx, dword [esi + 0x98]
cmp ecx, edx
jg 0x4670ac
mov edx, dword [esi + 0xac]
mov byte [edx + ecx], bl
test ax, ax
je 0x46717d
and eax, 0xffff
lea eax, [eax + eax*2]
mov dl, byte [ebp + eax*2]
lea edi, [ebp + eax*2]
test byte [esi + 0x3d], 0x40
je 0x467135
mov ecx, dword [esi + 0x78]
mov eax, dword [esi + 0x54]
inc esi
push esp
mov eax, dword [esi + 0x78]
mov ecx, dword [esi + 0x54]
cmp eax, ecx
jne 0x46714d
mov eax, dword [esi + 0x7c]
mov dword [esi + 0x78], 0
add byte [eax], al
inc eax
mov dword [esi + 0x7c], eax
mov eax, dword [esi + 0x7c]
mov ecx, dword [esi + 0x78]
imul eax, dword [esi + 0x6c]
add eax, ecx
inc ecx
mov dword [esi + 0x78], ecx
mov ecx, dword [esi + 0x98]
cmp eax, ecx
jg 0x467170
mov ecx, dword [esi + 0xac]
mov byte [ecx + eax], dl
mov ax, word [edi + 4]
test ax, ax
jne 0x4670b5
mov edx, dword [esp + 0x18]
mov cx, word [esp + 0x20]
lea eax, [edx + edx*2]
inc edx
mov dword [esp + 0x18], edx
lea eax, [ebp + eax*2]
mov byte [eax], bl
mov word [eax + 2], cx
mov ecx, dword [esi + 0x40]
mov eax, 1
shl eax, cl
cmp edx, eax
jne 0x4671aa
inc ecx
mov dword [esi + 0x40], ecx
mov ecx, dword [esi + 0x40]
mov eax, 0xc
cmp ecx, eax
jbe 0x4671b9
mov dword [esi + 0x40], eax
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x20], ecx
jmp 0x466b64
Function at 0x467147
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add dword [esi + 0x68], 8
cmp ecx, 2
jne 0x46702d
add dword [esi + 0x68], 8
cmp ecx, 3
jne 0x467036
add dword [esi + 0x68], 4
cmp ecx, 4
jne 0x46703f
add dword [esi + 0x68], 2
mov edx, dword [esi + 0x68]
mov edi, dword [esi + 0x58]
cmp edx, edi
jl 0x467057
inc ecx
mov edx, 0x10
sar edx, cl
mov dword [esi + 0x64], ecx
mov dword [esi + 0x68], edx
mov ecx, dword [esi + 0x6c]
mov edi, dword [esi + 0x78]
imul ecx, dword [esi + 0x68]
mov edx, dword [esi + 0xac]
add ecx, edi
mov byte [edx + ecx], bl
mov edx, dword [esi + 0x78]
jmp 0x467095
inc edx
mov dword [esi + 0x78], edx
mov edx, dword [esi + 0x98]
cmp ecx, edx
jg 0x4670ac
mov edx, dword [esi + 0xac]
mov byte [edx + ecx], bl
test ax, ax
je 0x46717d
and eax, 0xffff
lea eax, [eax + eax*2]
mov dl, byte [ebp + eax*2]
lea edi, [ebp + eax*2]
test byte [esi + 0x3d], 0x40
je 0x467135
mov ecx, dword [esi + 0x78]
mov eax, dword [esi + 0x54]
inc esi
push esp
mov eax, dword [esi + 0x78]
mov ecx, dword [esi + 0x54]
cmp eax, ecx
jne 0x46714d
mov eax, dword [esi + 0x7c]
mov dword [esi + 0x78], 0
add byte [eax], al
inc eax
mov dword [esi + 0x7c], eax
mov eax, dword [esi + 0x7c]
mov ecx, dword [esi + 0x78]
imul eax, dword [esi + 0x6c]
add eax, ecx
inc ecx
mov dword [esi + 0x78], ecx
mov ecx, dword [esi + 0x98]
cmp eax, ecx
jg 0x467170
mov ecx, dword [esi + 0xac]
mov byte [ecx + eax], dl
mov ax, word [edi + 4]
test ax, ax
jne 0x4670b5
mov edx, dword [esp + 0x18]
mov cx, word [esp + 0x20]
lea eax, [edx + edx*2]
inc edx
mov dword [esp + 0x18], edx
lea eax, [ebp + eax*2]
mov byte [eax], bl
mov word [eax + 2], cx
mov ecx, dword [esi + 0x40]
mov eax, 1
shl eax, cl
cmp edx, eax
jne 0x4671aa
inc ecx
mov dword [esi + 0x40], ecx
mov ecx, dword [esi + 0x40]
mov eax, 0xc
cmp ecx, eax
jbe 0x4671b9
mov dword [esi + 0x40], eax
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x20], ecx
jmp 0x466b64
Function at 0x4671ed
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub eax, edx
add eax, 8
jmp 0x466d52
mov ecx, ebp
mov dword [esi + 0x48], eax
mov eax, dword [esp + 0x40]
and ecx, 0xffff
cmp ecx, eax
je 0x4674ca
dec eax
cmp ecx, eax
jne 0x466fb5
mov ecx, dword [esi + 0x44]
mov eax, dword [esi + 0x48]
mov edx, dword [esp + 0x14]
cmp eax, ecx
mov dword [esi + 0x40], ecx
mov dword [esp + 0x18], edx
jb 0x466daf
mov dl, byte [esi + 0x3c]
mov bl, 1
shl bl, cl
mov edi, edx
and edi, 0xff
shr dl, cl
mov ecx, dword [esi + 0x4c]
mov edx, dword [esi + 0x50]
xor ebx, ebx
cmp ecx, edx
mov bl, byte [esi + 0x3c]
jb 0x466e1e
mov edi, dword [esi + 0xb4]
mov ebp, dword [esi + 0x94]
xor edx, edx
mov dl, byte [edi]
inc edi
mov dword [esi + 0x50], edx
mov dword [esi + 0xb4], edi
lea ecx, [edx + 1]
mov dword [esi + 0x4c], 0
add ebp, ecx
mov dword [esi + 0x94], ebp
mov ecx, ebp
cmp ecx, dword [esi + 0x74]
jle 0x466e03
sub ecx, edx
dec ecx
mov dword [esi + 0x94], ecx
or cl, 0xff
mov byte [esp + 0x1c], cl
jmp 0x466e39
test edx, edx
jne 0x466e1e
dec edi
dec ecx
mov dword [esi + 0x94], ecx
or cl, 0xff
mov dword [esi + 0xb4], edi
mov byte [esp + 0x1c], cl
jmp 0x466e39
mov ecx, dword [esi + 0x4c]
mov edx, dword [esi + 0xb4]
inc ecx
cmp ecx, dword [esp + 0x18]
jge 0x4671c6
mov edx, dword [esp + 0x14]
xor eax, eax
mov ebx, ebp
mov ebp, dword [esp + 0x30]
cmp ecx, edx
jl 0x467001
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x14]
mov ebp, dword [esp + 0x30]
mov ebx, ecx
and ecx, 0xffff
xor eax, eax
cmp ecx, edx
mov dword [esp + 0x34], ebx
jl 0x467210
lea ecx, [ecx + ecx*2]
lea ecx, [ebp + ecx*2]
mov word [ecx + 4], ax
inc ecx
add al, 0x66
mov ecx, dword [ecx + 2]
mov eax, ebx
mov dword [esp + 0x34], ecx
cmp cx, ax
jae 0x4674b3
mov ebx, dword [esp + 0x34]
and ecx, 0xffff
cmp ecx, edx
jge 0x4671e4
test byte [esi + 0x3d], 0x40
je 0x46728c
mov edx, dword [esi + 0x78]
mov ecx, dword [esi + 0x54]
cmp edx, ecx
jne 0x467269
mov ecx, dword [esi + 0x64]
mov dword [esi + 0x78], 0
cmp ecx, 1
stc
add dword [edi + 8], edi
jne 0x467237
add dword [esi + 0x68], edi
cmp ecx, 2
jne 0x46723f
add dword [esi + 0x68], edi
cmp ecx, 3
jne 0x467248
add dword [esi + 0x68], 4
cmp ecx, 4
jne 0x467251
add dword [esi + 0x68], 2
mov edx, dword [esi + 0x68]
cmp edx, dword [esi + 0x58]
jl 0x46726e
inc ecx
mov edx, 0x10
shr dword [esi - 0x73], cl
dec esp
and al, 0x18
push ecx
lea ecx, [esp + 0x28]
call 0x483380
sub al, ch
adc ecx, eax
add dword [eax], eax
add byte [ebp - 0x7c978a40], al
invalid
test eax, eax
jne 0x4672db
add edi, 8
add esi, 8
jmp 0x4672a6
sbb edi, esi
fmul dword [ebx + 0x575653d8]
call str.0_0
add esp, 0xc
test eax, eax
jl 0x4672db
jg 0x4672cf
add edi, ebx
add esi, ebx
add byte [ebx], bh
jmp 0x4674c6
add byte [eax], al
mov byte [esi], al
inc esi
mov byte [esi], dl
inc esi
jmp 0x467591
Function at 0x46722b
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub eax, edx
add eax, 8
jmp 0x466d52
mov ecx, ebp
mov dword [esi + 0x48], eax
mov eax, dword [esp + 0x40]
and ecx, 0xffff
cmp ecx, eax
je 0x4674ca
dec eax
cmp ecx, eax
jne 0x466fb5
mov ecx, dword [esi + 0x44]
mov eax, dword [esi + 0x48]
mov edx, dword [esp + 0x14]
cmp eax, ecx
mov dword [esi + 0x40], ecx
mov dword [esp + 0x18], edx
jb 0x466daf
mov dl, byte [esi + 0x3c]
mov bl, 1
shl bl, cl
mov edi, edx
and edi, 0xff
shr dl, cl
mov ecx, dword [esi + 0x4c]
mov edx, dword [esi + 0x50]
xor ebx, ebx
cmp ecx, edx
mov bl, byte [esi + 0x3c]
jb 0x466e1e
mov edi, dword [esi + 0xb4]
mov ebp, dword [esi + 0x94]
xor edx, edx
mov dl, byte [edi]
inc edi
mov dword [esi + 0x50], edx
mov dword [esi + 0xb4], edi
lea ecx, [edx + 1]
mov dword [esi + 0x4c], 0
add ebp, ecx
mov dword [esi + 0x94], ebp
mov ecx, ebp
cmp ecx, dword [esi + 0x74]
jle 0x466e03
sub ecx, edx
dec ecx
mov dword [esi + 0x94], ecx
or cl, 0xff
mov byte [esp + 0x1c], cl
jmp 0x466e39
test edx, edx
jne 0x466e1e
dec edi
dec ecx
mov dword [esi + 0x94], ecx
or cl, 0xff
mov dword [esi + 0xb4], edi
mov byte [esp + 0x1c], cl
jmp 0x466e39
mov ecx, dword [esi + 0x4c]
mov edx, dword [esi + 0xb4]
inc ecx
cmp ecx, dword [esp + 0x18]
jge 0x4671c6
mov edx, dword [esp + 0x14]
xor eax, eax
mov ebx, ebp
mov ebp, dword [esp + 0x30]
cmp ecx, edx
jl 0x467001
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x14]
mov ebp, dword [esp + 0x30]
mov ebx, ecx
and ecx, 0xffff
xor eax, eax
cmp ecx, edx
mov dword [esp + 0x34], ebx
jl 0x467210
lea ecx, [ecx + ecx*2]
lea ecx, [ebp + ecx*2]
mov word [ecx + 4], ax
inc ecx
add al, 0x66
mov ecx, dword [ecx + 2]
mov eax, ebx
mov dword [esp + 0x34], ecx
cmp cx, ax
jae 0x4674b3
mov ebx, dword [esp + 0x34]
and ecx, 0xffff
cmp ecx, edx
jge 0x4671e4
test byte [esi + 0x3d], 0x40
je 0x46728c
mov edx, dword [esi + 0x78]
mov ecx, dword [esi + 0x54]
cmp edx, ecx
jne 0x467269
mov ecx, dword [esi + 0x64]
mov dword [esi + 0x78], 0
cmp ecx, 1
stc
add dword [edi + 8], edi
jne 0x467237
add dword [esi + 0x68], edi
cmp ecx, 2
jne 0x46723f
add dword [esi + 0x68], edi
cmp ecx, 3
jne 0x467248
add dword [esi + 0x68], 4
cmp ecx, 4
jne 0x467251
add dword [esi + 0x68], 2
mov edx, dword [esi + 0x68]
cmp edx, dword [esi + 0x58]
jl 0x46726e
inc ecx
mov edx, 0x10
shr dword [esi - 0x73], cl
dec esp
and al, 0x18
push ecx
lea ecx, [esp + 0x28]
call 0x483380
sub al, ch
adc ecx, eax
add dword [eax], eax
add byte [ebp - 0x7c978a40], al
invalid
test eax, eax
jne 0x4672db
add edi, 8
add esi, 8
jmp 0x4672a6
sbb edi, esi
fmul dword [ebx + 0x575653d8]
call str.0_0
add esp, 0xc
test eax, eax
jl 0x4672db
jg 0x4672cf
add edi, ebx
add esi, ebx
add byte [ebx], bh
jmp 0x4674c6
add byte [eax], al
mov byte [esi], al
inc esi
mov byte [esi], dl
inc esi
jmp 0x467591
Function at 0x46727d
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add dh, dh
inc esi
cmp eax, 0x8b6a7440
dec esi
js 0x46705a
dec esi
js 0x467131
scasd eax, dword es:[edi]
inc esi
push 0x8e8bc103
lodsb al, byte [esi]
add byte [eax], al
add byte [eax + 0x4e8b0114], cl
dec esi
js 0x46711f
and al, 0x8b
inc esi
js 0x4670c4
dec esi
push esp
mov ecx, dword [esi]
cmp eax, ecx
ja 0x4672cf
jb 0x4672db
add edi, 4
add esi, 4
jmp 0x4672a6
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
inc ecx
add eax, 4
cmp ecx, edx
mov dword [esp + 0xc], ecx
or al, 0x89
inc esp
and al, 0x10
jl 0x467123
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop edi
pop esi
or eax, 0xffffffff
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x4677f0
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x46c238
push eax
mov dword fs:[0], esp
sub esp, 0x14
push ebx
push ebp
mov ebp, dword [esp + 0x30]
push esi
mov ebx, ecx
push edi
mov esi, dword [ebp]
mov ecx, dword [esi + 0xc]
mov eax, dword [esi + 0x10]
dec ecx
cmp eax, ecx
jge 0x467829
inc eax
mov dword [esi + 0x10], eax
jmp 0x46793c
mov eax, dword [ebx + 0x3c]
mov ecx, dword [esi + 8]
cmp ecx, eax
jne 0x46783d
mov eax, 0xffffffc7
jmp 0x46793e
mov esi, dword [esi]
mov edx, dword [esi + 0x10]
mov ecx, dword [esi + 0xc]
cmp edx, ecx
jl 0x46784e
cmp dword [esi + 8], eax
jne 0x46783d
cmp dword [esi + 8], eax
jne 0x467867
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0xc]
cmp eax, ecx
jl 0x467867
mov eax, 0xffffffc7
jmp 0x46793e
mov eax, dword [esi + 4]
xor edi, edi
cmp eax, edi
je 0x46787b
push eax
mov ecx, ebx
call fcn.00467020
mov dword [esi + 4], edi
mov dword [ebp], esi
mov ecx, dword [esi + 0x10]
inc ecx
mov dword [esi + 0x10], ecx
lea ecx, [esp + 0x10]
call fcn.00437900
mov dword [esp + 0x2c], edi
mov edi, dword [esp + 0x3c]
test edi, edi
jne 0x4678ac
mov ecx, dword [ebx + 4]
mov edx, dword [ecx + 8]
lea ecx, [esp + 0x10]
push edx
call fcn.00437920
mov edi, eax
mov eax, dword [esi + 8]
push edi
push eax
mov ecx, ebx
call fcn.00466790
test eax, eax
mov dword [esp + 0x38], eax
je 0x4678df
lea ecx, [esp + 0x10]
mov dword [esp + 0x2c], 0xffffffff
mov dword [esp + 0x10], 0x4a5350
call fcn.00437b00
mov eax, dword [esp + 0x38]
jmp 0x46793e
mov ecx, dword [esi + 0x10]
push ecx
push edi
mov ecx, ebx
call fcn.00467650
mov dl, byte [edi]
and dl, 1
cmp dl, 1
jne 0x467923
mov ecx, dword [esp + 0x34]
push ebp
push ecx
push edi
push eax
mov ecx, ebx
call fcn.00467670
mov esi, eax
test esi, esi
jne 0x467953
mov edx, dword [ebp]
push eax
push edi
mov ecx, ebx
mov dword [edx + 0x10], eax
call fcn.00467650
mov cl, byte [edi]
and cl, 1
cmp cl, 1
je 0x4678f5
lea ecx, [esp + 0x10]
mov dword [esp + 0x2c], 0xffffffff
mov dword [esp + 0x10], 0x4a5350
call fcn.00437b00
xor eax, eax
mov ecx, dword [esp + 0x24]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x20
ret 0xc
lea ecx, [esp + 0x10]
mov dword [esp + 0x2c], 0xffffffff
mov dword [esp + 0x10], 0x4a5350
call fcn.00437b00
mov eax, esi
jmp 0x46793e