joyce8/EMBER2024-capa huggingface dataset:
Function at 0x429410
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x754]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1964], eax
mov ecx, dword [ebp - 0x754]
mov edx, dword [ebp - 0x320]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1968], edx
mov eax, dword [ebp - 0x754]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x196c], ecx
mov dword [ebp - 0x758], 0
jmp 0x42946a
mov edx, dword [ebp - 0x758]
add edx, 1
mov dword [ebp - 0x758], edx
mov eax, dword [ebp - 0x754]
mov ecx, dword [ebp - 0x758]
cmp ecx, dword [eax + 0x18]
jae 0x429676
mov edx, dword [ebp - 0x758]
mov eax, dword [ebp - 0x1964]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x75c], ecx
mov edx, dword [ebp - 0x758]
mov eax, dword [ebp - 0x1968]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x196c]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1970], eax
mov dword [ebp - 0x198], 0
jmp 0x4294da
mov ecx, dword [ebp - 0x198]
add ecx, 1
mov dword [ebp - 0x198], ecx
mov edx, dword [ebp - 0x75c]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
test eax, eax
je 0x42958c
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x894]
test edx, edx
je 0x42958c
push ebx
or ebx, 0xcedd
add ebx, 0x1067e
pop ebx
push eax
push edx
add esp, 4
jmp 0x429521
add eax, 0xc11b
or eax, 0xa8fe
pop eax
push ebx
jmp 0x429538
pop ebx
mov eax, dword [ebp - 0x75c]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x894]
cmp ecx, eax
je 0x42957e
mov ecx, dword [ebp - 0x75c]
add ecx, dword [ebp - 0x198]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x198]
movsx ecx, byte [ebp + eax - 0x894]
cmp edx, ecx
jne 0x429585
jmp 0x4294cb
jmp 0x42958c
push edx
xor edx, 0x11e44
jmp 0x429599
pop edx
push edx
push edx
add esp, 4
add edx, 0x14d73
and edx, 0x16ba8
call 0x4295ba
add byte [ebx], dh
dec edi
dec ebx
xor eax, 0x47404933
xor al, 0x83
les eax, [edx + ebx*2]
mov edx, dword [ebp - 0x75c]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x894]
cmp eax, edx
jne 0x4295eb
mov dword [ebp - 0xca8], 0
jmp 0x42965a
push esi
push edi
add esp, 4
call 0x4295fc
add byte [esi + 0x38], cl
inc ebx
dec esi
aas
dec edi
add esp, 4
or esi, 0x8ff9
and esi, 0x17ddb
call 0x429619
add byte [ebx + 0x4e], al
inc ecx
cmp eax, 0x4d363849
add esp, 4
pop esi
mov eax, dword [ebp - 0x75c]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x894]
or eax, 0x20
cmp ecx, eax
jge 0x429650
mov dword [ebp - 0xca8], 0xffffffff
jmp 0x42965a
mov dword [ebp - 0xca8], 1
cmp dword [ebp - 0xca8], 0
jne 0x429671
mov ecx, dword [ebp - 0x1970]
mov dword [ebp - 0x3f4], ecx
jmp 0x429682
jmp 0x42945b
mov edx, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], edx
mov eax, dword [ebp - 0x78c]
add eax, 1
mov dword [ebp - 0x78c], eax
mov edx, dword [ebp - 0x1a4]
add edx, 1
mov dword [ebp - 0x1a4], edx
Function at 0x4295ba
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x754]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1964], eax
mov ecx, dword [ebp - 0x754]
mov edx, dword [ebp - 0x320]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1968], edx
mov eax, dword [ebp - 0x754]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x196c], ecx
mov dword [ebp - 0x758], 0
jmp 0x42946a
mov edx, dword [ebp - 0x758]
add edx, 1
mov dword [ebp - 0x758], edx
mov eax, dword [ebp - 0x754]
mov ecx, dword [ebp - 0x758]
cmp ecx, dword [eax + 0x18]
jae 0x429676
mov edx, dword [ebp - 0x758]
mov eax, dword [ebp - 0x1964]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x75c], ecx
mov edx, dword [ebp - 0x758]
mov eax, dword [ebp - 0x1968]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x196c]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1970], eax
mov dword [ebp - 0x198], 0
jmp 0x4294da
mov ecx, dword [ebp - 0x198]
add ecx, 1
mov dword [ebp - 0x198], ecx
mov edx, dword [ebp - 0x75c]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
test eax, eax
je 0x42958c
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x894]
test edx, edx
je 0x42958c
push ebx
or ebx, 0xcedd
add ebx, 0x1067e
pop ebx
push eax
push edx
add esp, 4
jmp 0x429521
add eax, 0xc11b
or eax, 0xa8fe
pop eax
push ebx
jmp 0x429538
pop ebx
mov eax, dword [ebp - 0x75c]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x894]
cmp ecx, eax
je 0x42957e
mov ecx, dword [ebp - 0x75c]
add ecx, dword [ebp - 0x198]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x198]
movsx ecx, byte [ebp + eax - 0x894]
cmp edx, ecx
jne 0x429585
jmp 0x4294cb
jmp 0x42958c
push edx
xor edx, 0x11e44
jmp 0x429599
pop edx
push edx
push edx
add esp, 4
add edx, 0x14d73
and edx, 0x16ba8
call 0x4295ba
add byte [ebx], dh
dec edi
dec ebx
xor eax, 0x47404933
xor al, 0x83
les eax, [edx + ebx*2]
mov edx, dword [ebp - 0x75c]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x894]
cmp eax, edx
jne 0x4295eb
mov dword [ebp - 0xca8], 0
jmp 0x42965a
push esi
push edi
add esp, 4
call 0x4295fc
add byte [esi + 0x38], cl
inc ebx
dec esi
aas
dec edi
add esp, 4
or esi, 0x8ff9
and esi, 0x17ddb
call 0x429619
add byte [ebx + 0x4e], al
inc ecx
cmp eax, 0x4d363849
add esp, 4
pop esi
mov eax, dword [ebp - 0x75c]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x894]
or eax, 0x20
cmp ecx, eax
jge 0x429650
mov dword [ebp - 0xca8], 0xffffffff
jmp 0x42965a
mov dword [ebp - 0xca8], 1
cmp dword [ebp - 0xca8], 0
jne 0x429671
mov ecx, dword [ebp - 0x1970]
mov dword [ebp - 0x3f4], ecx
jmp 0x429682
jmp 0x42945b
mov edx, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], edx
mov eax, dword [ebp - 0x78c]
add eax, 1
mov dword [ebp - 0x78c], eax
mov edx, dword [ebp - 0x1a4]
add edx, 1
mov dword [ebp - 0x1a4], edx
Function at 0x4295fc
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x754]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1964], eax
mov ecx, dword [ebp - 0x754]
mov edx, dword [ebp - 0x320]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1968], edx
mov eax, dword [ebp - 0x754]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x196c], ecx
mov dword [ebp - 0x758], 0
jmp 0x42946a
mov edx, dword [ebp - 0x758]
add edx, 1
mov dword [ebp - 0x758], edx
mov eax, dword [ebp - 0x754]
mov ecx, dword [ebp - 0x758]
cmp ecx, dword [eax + 0x18]
jae 0x429676
mov edx, dword [ebp - 0x758]
mov eax, dword [ebp - 0x1964]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x75c], ecx
mov edx, dword [ebp - 0x758]
mov eax, dword [ebp - 0x1968]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x196c]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1970], eax
mov dword [ebp - 0x198], 0
jmp 0x4294da
mov ecx, dword [ebp - 0x198]
add ecx, 1
mov dword [ebp - 0x198], ecx
mov edx, dword [ebp - 0x75c]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
test eax, eax
je 0x42958c
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x894]
test edx, edx
je 0x42958c
push ebx
or ebx, 0xcedd
add ebx, 0x1067e
pop ebx
push eax
push edx
add esp, 4
jmp 0x429521
add eax, 0xc11b
or eax, 0xa8fe
pop eax
push ebx
jmp 0x429538
pop ebx
mov eax, dword [ebp - 0x75c]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x894]
cmp ecx, eax
je 0x42957e
mov ecx, dword [ebp - 0x75c]
add ecx, dword [ebp - 0x198]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x198]
movsx ecx, byte [ebp + eax - 0x894]
cmp edx, ecx
jne 0x429585
jmp 0x4294cb
jmp 0x42958c
push edx
xor edx, 0x11e44
jmp 0x429599
pop edx
push edx
push edx
add esp, 4
add edx, 0x14d73
and edx, 0x16ba8
call 0x4295ba
add byte [ebx], dh
dec edi
dec ebx
xor eax, 0x47404933
xor al, 0x83
les eax, [edx + ebx*2]
mov edx, dword [ebp - 0x75c]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x894]
cmp eax, edx
jne 0x4295eb
mov dword [ebp - 0xca8], 0
jmp 0x42965a
push esi
push edi
add esp, 4
call 0x4295fc
add byte [esi + 0x38], cl
inc ebx
dec esi
aas
dec edi
add esp, 4
or esi, 0x8ff9
and esi, 0x17ddb
call 0x429619
add byte [ebx + 0x4e], al
inc ecx
cmp eax, 0x4d363849
add esp, 4
pop esi
mov eax, dword [ebp - 0x75c]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x894]
or eax, 0x20
cmp ecx, eax
jge 0x429650
mov dword [ebp - 0xca8], 0xffffffff
jmp 0x42965a
mov dword [ebp - 0xca8], 1
cmp dword [ebp - 0xca8], 0
jne 0x429671
mov ecx, dword [ebp - 0x1970]
mov dword [ebp - 0x3f4], ecx
jmp 0x429682
jmp 0x42945b
mov edx, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], edx
mov eax, dword [ebp - 0x78c]
add eax, 1
mov dword [ebp - 0x78c], eax
mov edx, dword [ebp - 0x1a4]
add edx, 1
mov dword [ebp - 0x1a4], edx
Function at 0x429619
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x754]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1964], eax
mov ecx, dword [ebp - 0x754]
mov edx, dword [ebp - 0x320]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1968], edx
mov eax, dword [ebp - 0x754]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x196c], ecx
mov dword [ebp - 0x758], 0
jmp 0x42946a
mov edx, dword [ebp - 0x758]
add edx, 1
mov dword [ebp - 0x758], edx
mov eax, dword [ebp - 0x754]
mov ecx, dword [ebp - 0x758]
cmp ecx, dword [eax + 0x18]
jae 0x429676
mov edx, dword [ebp - 0x758]
mov eax, dword [ebp - 0x1964]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x75c], ecx
mov edx, dword [ebp - 0x758]
mov eax, dword [ebp - 0x1968]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x196c]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1970], eax
mov dword [ebp - 0x198], 0
jmp 0x4294da
mov ecx, dword [ebp - 0x198]
add ecx, 1
mov dword [ebp - 0x198], ecx
mov edx, dword [ebp - 0x75c]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
test eax, eax
je 0x42958c
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x894]
test edx, edx
je 0x42958c
push ebx
or ebx, 0xcedd
add ebx, 0x1067e
pop ebx
push eax
push edx
add esp, 4
jmp 0x429521
add eax, 0xc11b
or eax, 0xa8fe
pop eax
push ebx
jmp 0x429538
pop ebx
mov eax, dword [ebp - 0x75c]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x894]
cmp ecx, eax
je 0x42957e
mov ecx, dword [ebp - 0x75c]
add ecx, dword [ebp - 0x198]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x198]
movsx ecx, byte [ebp + eax - 0x894]
cmp edx, ecx
jne 0x429585
jmp 0x4294cb
jmp 0x42958c
push edx
xor edx, 0x11e44
jmp 0x429599
pop edx
push edx
push edx
add esp, 4
add edx, 0x14d73
and edx, 0x16ba8
call 0x4295ba
add byte [ebx], dh
dec edi
dec ebx
xor eax, 0x47404933
xor al, 0x83
les eax, [edx + ebx*2]
mov edx, dword [ebp - 0x75c]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x894]
cmp eax, edx
jne 0x4295eb
mov dword [ebp - 0xca8], 0
jmp 0x42965a
push esi
push edi
add esp, 4
call 0x4295fc
add byte [esi + 0x38], cl
inc ebx
dec esi
aas
dec edi
add esp, 4
or esi, 0x8ff9
and esi, 0x17ddb
call 0x429619
add byte [ebx + 0x4e], al
inc ecx
cmp eax, 0x4d363849
add esp, 4
pop esi
mov eax, dword [ebp - 0x75c]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x894]
or eax, 0x20
cmp ecx, eax
jge 0x429650
mov dword [ebp - 0xca8], 0xffffffff
jmp 0x42965a
mov dword [ebp - 0xca8], 1
cmp dword [ebp - 0xca8], 0
jne 0x429671
mov ecx, dword [ebp - 0x1970]
mov dword [ebp - 0x3f4], ecx
jmp 0x429682
jmp 0x42945b
mov edx, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], edx
mov eax, dword [ebp - 0x78c]
add eax, 1
mov dword [ebp - 0x78c], eax
mov edx, dword [ebp - 0x1a4]
add edx, 1
mov dword [ebp - 0x1a4], edx
Function at 0x4299e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov dword [ebp - 0x1600], 1
mov eax, dword [ebp - 0x1600]
mov dword [ebp - 0x1604], eax
cmp dword [ebp - 0x1604], 0
jne 0x429a3f
push edx
push eax
add eax, 0x14324
add eax, 0x16699
xor eax, 0x648b
pop eax
push ecx
push ecx
add esp, 4
xor ecx, 0xc2f5
xor ecx, 0x14fdc
and ecx, 0x941f
sub ecx, 0x15995
pop ecx
mov edx, dword [ebp - 0x50c]
mov eax, dword [edx]
mov dword [ebp - 0x50c], eax
mov ecx, dword [ebp - 0x50c]
cmp ecx, dword [ebp - 0xcb4]
je 0x429a9d
mov edx, dword [ebp - 0x50c]
cmp dword [edx + 0x30], 0
jne 0x429868
mov dword [ebp - 0x31c], 0

Function at 0x429a00
Capabilities:
Resolve function by parsing pe exports

Disassembly:
and edx, 0xd641
add edx, 0x63b6
pop edx
push edx
push ecx
add esp, 4
call 0x429a21
add byte [edi + 0x4b], cl
inc ebx
cmp eax, 0x3a393b33
inc ecx
add esp, 4
xor edx, 0xb404
or edx, 0x1518c
pop edx
mov ecx, dword [ebp - 0x50c]
mov dword [ebp - 0x31c], ecx
jmp 0x429aa7
push esi
push edx
add esp, 4
or esi, 0x32f1
pop esi
push edi
push edx
add esp, 4
xor edi, 0xc663
or edi, 0x10aaf
sub edi, 0xb172
and edi, 0x4016
pop edi
push eax
add eax, 0x6007
pop eax
mov eax, dword [ebp - 0x31c]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x324], ecx
push ecx
add ecx, 0x154ce
xor ecx, 0x2880
or ecx, 0xc25c
pop ecx
push edx
push esi
add esp, 4
call 0x429b10
add byte [edx + 0x42], al
inc ecx
dec edi
dec ebx
aas
inc edx
push eax
dec ecx
add esp, 4
sub edx, 0x3625
pop edx
mov dword [ebp - 0x770], 0
mov edx, dword [ebp - 0x324]
mov dword [ebp - 0x1608], edx
cmp dword [ebp - 0x1608], 0
jne 0x429b4a
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x510], eax
jmp 0x429e3b
mov ecx, dword [ebp - 0x1608]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x160c], edx
jne 0x429b72
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x510], eax
jmp 0x429e3b
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x160c]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1610], ecx
cmp dword [ebp - 0x1610], 0
jne 0x429ba4
mov edx, dword [ebp - 0x770]
mov dword [ebp - 0x510], edx
jmp 0x429e3b
mov eax, dword [ebp - 0x324]
add eax, dword [ebp - 0x1610]
mov dword [ebp - 0x764], eax
jne 0x429bc9
mov ecx, dword [ebp - 0x770]
mov dword [ebp - 0x510], ecx
jmp 0x429e3b
mov edx, dword [ebp - 0x764]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1984], eax
mov ecx, dword [ebp - 0x764]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x24]
invalid
xchg ebp, eax
invalid
Function at 0x429a21
Capabilities:
Resolve function by parsing pe exports

Disassembly:
and edx, 0xd641
add edx, 0x63b6
pop edx
push edx
push ecx
add esp, 4
call 0x429a21
add byte [edi + 0x4b], cl
inc ebx
cmp eax, 0x3a393b33
inc ecx
add esp, 4
xor edx, 0xb404
or edx, 0x1518c
pop edx
mov ecx, dword [ebp - 0x50c]
mov dword [ebp - 0x31c], ecx
jmp 0x429aa7
push esi
push edx
add esp, 4
or esi, 0x32f1
pop esi
push edi
push edx
add esp, 4
xor edi, 0xc663
or edi, 0x10aaf
sub edi, 0xb172
and edi, 0x4016
pop edi
push eax
add eax, 0x6007
pop eax
mov eax, dword [ebp - 0x31c]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x324], ecx
push ecx
add ecx, 0x154ce
xor ecx, 0x2880
or ecx, 0xc25c
pop ecx
push edx
push esi
add esp, 4
call 0x429b10
add byte [edx + 0x42], al
inc ecx
dec edi
dec ebx
aas
inc edx
push eax
dec ecx
add esp, 4
sub edx, 0x3625
pop edx
mov dword [ebp - 0x770], 0
mov edx, dword [ebp - 0x324]
mov dword [ebp - 0x1608], edx
cmp dword [ebp - 0x1608], 0
jne 0x429b4a
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x510], eax
jmp 0x429e3b
mov ecx, dword [ebp - 0x1608]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x160c], edx
jne 0x429b72
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x510], eax
jmp 0x429e3b
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x160c]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1610], ecx
cmp dword [ebp - 0x1610], 0
jne 0x429ba4
mov edx, dword [ebp - 0x770]
mov dword [ebp - 0x510], edx
jmp 0x429e3b
mov eax, dword [ebp - 0x324]
add eax, dword [ebp - 0x1610]
mov dword [ebp - 0x764], eax
jne 0x429bc9
mov ecx, dword [ebp - 0x770]
mov dword [ebp - 0x510], ecx
jmp 0x429e3b
mov edx, dword [ebp - 0x764]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1984], eax
mov ecx, dword [ebp - 0x764]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x24]
invalid
xchg ebp, eax
invalid
Function at 0x429b10
Capabilities:
Resolve function by parsing pe exports

Disassembly:
and edx, 0xd641
add edx, 0x63b6
pop edx
push edx
push ecx
add esp, 4
call 0x429a21
add byte [edi + 0x4b], cl
inc ebx
cmp eax, 0x3a393b33
inc ecx
add esp, 4
xor edx, 0xb404
or edx, 0x1518c
pop edx
mov ecx, dword [ebp - 0x50c]
mov dword [ebp - 0x31c], ecx
jmp 0x429aa7
push esi
push edx
add esp, 4
or esi, 0x32f1
pop esi
push edi
push edx
add esp, 4
xor edi, 0xc663
or edi, 0x10aaf
sub edi, 0xb172
and edi, 0x4016
pop edi
push eax
add eax, 0x6007
pop eax
mov eax, dword [ebp - 0x31c]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x324], ecx
push ecx
add ecx, 0x154ce
xor ecx, 0x2880
or ecx, 0xc25c
pop ecx
push edx
push esi
add esp, 4
call 0x429b10
add byte [edx + 0x42], al
inc ecx
dec edi
dec ebx
aas
inc edx
push eax
dec ecx
add esp, 4
sub edx, 0x3625
pop edx
mov dword [ebp - 0x770], 0
mov edx, dword [ebp - 0x324]
mov dword [ebp - 0x1608], edx
cmp dword [ebp - 0x1608], 0
jne 0x429b4a
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x510], eax
jmp 0x429e3b
mov ecx, dword [ebp - 0x1608]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x160c], edx
jne 0x429b72
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x510], eax
jmp 0x429e3b
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x160c]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1610], ecx
cmp dword [ebp - 0x1610], 0
jne 0x429ba4
mov edx, dword [ebp - 0x770]
mov dword [ebp - 0x510], edx
jmp 0x429e3b
mov eax, dword [ebp - 0x324]
add eax, dword [ebp - 0x1610]
mov dword [ebp - 0x764], eax
jne 0x429bc9
mov ecx, dword [ebp - 0x770]
mov dword [ebp - 0x510], ecx
jmp 0x429e3b
mov edx, dword [ebp - 0x764]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1984], eax
mov ecx, dword [ebp - 0x764]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x24]
invalid
xchg ebp, eax
invalid
Function at 0x42a56f
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add esp, 4
and ecx, 0x4298
pop ecx
cmp dword [ebp - 0xcd0], 0
jne 0x42a591
mov dword [ebp - 0x774], 0
jmp 0x42a7dc
mov edx, dword [ebp - 0xcd0]
mov dword [ebp - 0x518], edx
push edx
xor edx, 0x15d75
pop edx
push esi
and esi, 0x16f57
jmp 0x42a5b1
add esi, 0x1155f
jmp 0x42a5c0
pop esi
push ecx
and ecx, 0x10048
and ecx, 0xb4e8
pop ecx
lea eax, [ebp - 0x1790]
mov dword [ebp - 0xccc], eax
mov ecx, dword [ebp - 0x518]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcc8], edx
xor eax, eax
mov word [ebp - 0x220], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push esi
push edi
add esp, 4
or esi, 0xaec5
sub esi, 0x12cf4
or esi, 0x1949
pop esi
push ebx
sub ebx, 0x17015
sub ebx, 0x181c3
pop ebx
push edx
push eax
add esp, 4
add edx, 0xb7ca
pop edx
mov edx, dword [ebp - 0xcc8]
mov ax, word [edx]
mov word [ebp - 0x1042], ax
mov ecx, dword [ebp - 0xcc8]
add ecx, 2
mov dword [ebp - 0xcc8], ecx
mov dx, word [ebp - 0x1042]
mov word [ebp - 0x220], dx
mov eax, dword [ebp - 0xccc]
mov cx, word [eax]
mov word [ebp - 0x1044], cx
mov edx, dword [ebp - 0xccc]
add edx, 2
mov dword [ebp - 0xccc], edx
mov ax, word [ebp - 0x1044]
mov word [ebp - 0x3c], ax
push esi
jmp 0x42a68b
sub esi, 0x10b44
call 0x42a6a1
add byte [edx + edi], dh
cmp eax, 0x50403c33
aaa
inc esp
add esp, 4
call 0x42a6b0
add byte [ebx + esi + 0x40], al
cmp byte [0x4c48347], dh
pop esi
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x42a6d1
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1668], edx
jmp 0x42a72b
movzx ecx, word [ebp - 0x220]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x42a5f9
movzx eax, word [ebp - 0x220]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x42a5f9
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x42a715
mov dword [ebp - 0x1624], 0xffffffff
jmp 0x42a71f
mov dword [ebp - 0x1624], 1
mov ecx, dword [ebp - 0x1624]
mov dword [ebp - 0x1668], ecx
cmp dword [ebp - 0x1668], 0
jne 0x42a774
push edi
sub edi, 0x7bb2
sub edi, 0x13b6d
add edi, 0x126bd
and edi, 0x297b
pop edi
push eax
push edx
add esp, 4
add eax, 0x39be
xor eax, 0x46c6
add eax, 0x125fb
pop eax
mov edx, dword [ebp - 0x518]
mov dword [ebp - 0x774], edx
jmp 0x42a7dc
push ecx
add ecx, 0x1f4f
pop ecx
push edi
push edx
add esp, 4
sub edi, 0xf92e
pop edi
push eax
push eax
add esp, 4
sub eax, 0x5e85
and eax, 0xd789
add eax, 0x255d
xor eax, 0x5bda
pop eax
mov eax, dword [ebp - 0x518]
mov ecx, dword [eax]
mov dword [ebp - 0x518], ecx
mov edx, dword [ebp - 0x518]
cmp edx, dword [ebp - 0xcd0]
je 0x42a7d2
mov eax, dword [ebp - 0x518]
cmp dword [eax + 0x30], 0
jne 0x42a59d
mov dword [ebp - 0x774], 0
Function at 0x42a6a1
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add esp, 4
and ecx, 0x4298
pop ecx
cmp dword [ebp - 0xcd0], 0
jne 0x42a591
mov dword [ebp - 0x774], 0
jmp 0x42a7dc
mov edx, dword [ebp - 0xcd0]
mov dword [ebp - 0x518], edx
push edx
xor edx, 0x15d75
pop edx
push esi
and esi, 0x16f57
jmp 0x42a5b1
add esi, 0x1155f
jmp 0x42a5c0
pop esi
push ecx
and ecx, 0x10048
and ecx, 0xb4e8
pop ecx
lea eax, [ebp - 0x1790]
mov dword [ebp - 0xccc], eax
mov ecx, dword [ebp - 0x518]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcc8], edx
xor eax, eax
mov word [ebp - 0x220], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push esi
push edi
add esp, 4
or esi, 0xaec5
sub esi, 0x12cf4
or esi, 0x1949
pop esi
push ebx
sub ebx, 0x17015
sub ebx, 0x181c3
pop ebx
push edx
push eax
add esp, 4
add edx, 0xb7ca
pop edx
mov edx, dword [ebp - 0xcc8]
mov ax, word [edx]
mov word [ebp - 0x1042], ax
mov ecx, dword [ebp - 0xcc8]
add ecx, 2
mov dword [ebp - 0xcc8], ecx
mov dx, word [ebp - 0x1042]
mov word [ebp - 0x220], dx
mov eax, dword [ebp - 0xccc]
mov cx, word [eax]
mov word [ebp - 0x1044], cx
mov edx, dword [ebp - 0xccc]
add edx, 2
mov dword [ebp - 0xccc], edx
mov ax, word [ebp - 0x1044]
mov word [ebp - 0x3c], ax
push esi
jmp 0x42a68b
sub esi, 0x10b44
call 0x42a6a1
add byte [edx + edi], dh
cmp eax, 0x50403c33
aaa
inc esp
add esp, 4
call 0x42a6b0
add byte [ebx + esi + 0x40], al
cmp byte [0x4c48347], dh
pop esi
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x42a6d1
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1668], edx
jmp 0x42a72b
movzx ecx, word [ebp - 0x220]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x42a5f9
movzx eax, word [ebp - 0x220]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x42a5f9
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x42a715
mov dword [ebp - 0x1624], 0xffffffff
jmp 0x42a71f
mov dword [ebp - 0x1624], 1
mov ecx, dword [ebp - 0x1624]
mov dword [ebp - 0x1668], ecx
cmp dword [ebp - 0x1668], 0
jne 0x42a774
push edi
sub edi, 0x7bb2
sub edi, 0x13b6d
add edi, 0x126bd
and edi, 0x297b
pop edi
push eax
push edx
add esp, 4
add eax, 0x39be
xor eax, 0x46c6
add eax, 0x125fb
pop eax
mov edx, dword [ebp - 0x518]
mov dword [ebp - 0x774], edx
jmp 0x42a7dc
push ecx
add ecx, 0x1f4f
pop ecx
push edi
push edx
add esp, 4
sub edi, 0xf92e
pop edi
push eax
push eax
add esp, 4
sub eax, 0x5e85
and eax, 0xd789
add eax, 0x255d
xor eax, 0x5bda
pop eax
mov eax, dword [ebp - 0x518]
mov ecx, dword [eax]
mov dword [ebp - 0x518], ecx
mov edx, dword [ebp - 0x518]
cmp edx, dword [ebp - 0xcd0]
je 0x42a7d2
mov eax, dword [ebp - 0x518]
cmp dword [eax + 0x30], 0
jne 0x42a59d
mov dword [ebp - 0x774], 0