joyce8/EMBER2024-capa huggingface dataset:
Function at 0x455dbd
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edi
xor eax, eax
mov word [ebp - 0x60], ax
xor ecx, ecx
mov word [ebp - 0x14], cx
push ecx
push ecx
add esp, 4
add ecx, 0x1391a
xor ecx, 0xba82
pop ecx
push esi
push ebx
add esp, 4
and esi, 0x10898
jmp 0x455df0
xor esi, 0x3882
pop esi
push ecx
or ecx, 0x8706
pop ecx
mov edx, dword [ebp - 0x230]
mov ax, word [edx]
mov word [ebp - 0x1ca], ax
mov ecx, dword [ebp - 0x230]
add ecx, 2
mov dword [ebp - 0x230], ecx
mov dx, word [ebp - 0x1ca]
mov word [ebp - 0x60], dx
push ecx
push eax
add esp, 4
jmp 0x455e33
call 0x455e40
add byte [eax + 0x3a], al
xor eax, 0x464a444a
add esp, 4
xor ecx, 0x3f6
call 0x455e57
add byte [eax], bh
inc ecx
xor al, byte ds:[ebp + 0x48]
dec ebp
dec eax
add esp, 4
pop ecx
mov eax, dword [ebp - 0x234]
mov cx, word [eax]
mov word [ebp - 0x1cc], cx
mov edx, dword [ebp - 0x234]
add edx, 2
mov dword [ebp - 0x234], edx
mov ax, word [ebp - 0x1cc]
mov word [ebp - 0x14], ax
push edi
push eax
add esp, 4
sub edi, 0x162d3
pop edi
push esi
sub esi, 0x5b20
or esi, 0x323f
pop esi
push eax
call 0x455ead
add byte [ecx + 0x4f], al
dec ecx
aas
dec edx
push eax
inc esp
add esp, 4
or eax, 0xe68d
pop eax
movzx ecx, word [ebp - 0x14]
test ecx, ecx
jne 0x455ed4
movzx edx, word [ebp - 0x60]
movzx eax, word [ebp - 0x14]
sub edx, eax
mov dword [ebp - 0x2f4], edx
jmp 0x455f57
movzx ecx, word [ebp - 0x60]
movzx edx, word [ebp - 0x14]
cmp ecx, edx
je 0x455dcd
movzx eax, word [ebp - 0x60]
xor eax, 0x20
movzx ecx, word [ebp - 0x14]
cmp eax, ecx
je 0x455dcd
push edx
push esi
add esp, 4
jmp 0x455f04
sub edx, 0x13cde
pop edx
push edx
push esi
add esp, 4
or edx, 0x16473
or edx, 0x14292
sub edx, 0x11af0
or edx, 0x8c6
pop edx
movzx edx, word [ebp - 0x60]
movzx eax, word [ebp - 0x14]
cmp edx, eax
jge 0x455f41
mov dword [ebp - 0x2f0], 0xffffffff
jmp 0x455f4b
mov dword [ebp - 0x2f0], 1
mov ecx, dword [ebp - 0x2f0]
mov dword [ebp - 0x2f4], ecx
cmp dword [ebp - 0x2f4], 0
jne 0x455fa0
push esi
and esi, 0x7640
sub esi, 0x73fe
pop esi
push esi
push ebx
add esp, 4
sub esi, 0x99b7
pop esi
push ecx
push esi
add esp, 4
and ecx, 0x126cc
sub ecx, 0xba09
and ecx, 0x17b82
pop ecx
mov edx, dword [ebp - 0xa0]
mov dword [ebp - 0x70], edx
jmp 0x456037
mov eax, dword [ebp - 0xa0]
mov ecx, dword [eax]
mov dword [ebp - 0xa0], ecx
push edx
push ecx
add esp, 4
call 0x455fc0
add byte [eax + 0x3c], cl
inc edi
aaa
cmp byte [esi + 0x49], cl
add esp, 4
and edx, 0x397c
add edx, 0x17a6b
pop edx
push esi
xor esi, 0x44dc
pop esi
push esi
add esi, 0x9836
pop esi
mov edx, dword [ebp - 0xa0]
cmp edx, dword [ebp - 0x238]
je 0x455ffe
mov eax, dword [ebp - 0xa0]
cmp dword [eax + 0x30], 0
jne 0x455d42
push edx
jmp 0x456004
jmp 0x456009
sub edx, 0x12f7f
pop edx
push eax
push ebx
add esp, 4
sub eax, 0x5934
xor eax, 0xc81c
or eax, 0x10014
pop eax
push edi
add edi, 0x211c
pop edi
mov dword [ebp - 0x70], 0
Function at 0x455e40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edi
xor eax, eax
mov word [ebp - 0x60], ax
xor ecx, ecx
mov word [ebp - 0x14], cx
push ecx
push ecx
add esp, 4
add ecx, 0x1391a
xor ecx, 0xba82
pop ecx
push esi
push ebx
add esp, 4
and esi, 0x10898
jmp 0x455df0
xor esi, 0x3882
pop esi
push ecx
or ecx, 0x8706
pop ecx
mov edx, dword [ebp - 0x230]
mov ax, word [edx]
mov word [ebp - 0x1ca], ax
mov ecx, dword [ebp - 0x230]
add ecx, 2
mov dword [ebp - 0x230], ecx
mov dx, word [ebp - 0x1ca]
mov word [ebp - 0x60], dx
push ecx
push eax
add esp, 4
jmp 0x455e33
call 0x455e40
add byte [eax + 0x3a], al
xor eax, 0x464a444a
add esp, 4
xor ecx, 0x3f6
call 0x455e57
add byte [eax], bh
inc ecx
xor al, byte ds:[ebp + 0x48]
dec ebp
dec eax
add esp, 4
pop ecx
mov eax, dword [ebp - 0x234]
mov cx, word [eax]
mov word [ebp - 0x1cc], cx
mov edx, dword [ebp - 0x234]
add edx, 2
mov dword [ebp - 0x234], edx
mov ax, word [ebp - 0x1cc]
mov word [ebp - 0x14], ax
push edi
push eax
add esp, 4
sub edi, 0x162d3
pop edi
push esi
sub esi, 0x5b20
or esi, 0x323f
pop esi
push eax
call 0x455ead
add byte [ecx + 0x4f], al
dec ecx
aas
dec edx
push eax
inc esp
add esp, 4
or eax, 0xe68d
pop eax
movzx ecx, word [ebp - 0x14]
test ecx, ecx
jne 0x455ed4
movzx edx, word [ebp - 0x60]
movzx eax, word [ebp - 0x14]
sub edx, eax
mov dword [ebp - 0x2f4], edx
jmp 0x455f57
movzx ecx, word [ebp - 0x60]
movzx edx, word [ebp - 0x14]
cmp ecx, edx
je 0x455dcd
movzx eax, word [ebp - 0x60]
xor eax, 0x20
movzx ecx, word [ebp - 0x14]
cmp eax, ecx
je 0x455dcd
push edx
push esi
add esp, 4
jmp 0x455f04
sub edx, 0x13cde
pop edx
push edx
push esi
add esp, 4
or edx, 0x16473
or edx, 0x14292
sub edx, 0x11af0
or edx, 0x8c6
pop edx
movzx edx, word [ebp - 0x60]
movzx eax, word [ebp - 0x14]
cmp edx, eax
jge 0x455f41
mov dword [ebp - 0x2f0], 0xffffffff
jmp 0x455f4b
mov dword [ebp - 0x2f0], 1
mov ecx, dword [ebp - 0x2f0]
mov dword [ebp - 0x2f4], ecx
cmp dword [ebp - 0x2f4], 0
jne 0x455fa0
push esi
and esi, 0x7640
sub esi, 0x73fe
pop esi
push esi
push ebx
add esp, 4
sub esi, 0x99b7
pop esi
push ecx
push esi
add esp, 4
and ecx, 0x126cc
sub ecx, 0xba09
and ecx, 0x17b82
pop ecx
mov edx, dword [ebp - 0xa0]
mov dword [ebp - 0x70], edx
jmp 0x456037
mov eax, dword [ebp - 0xa0]
mov ecx, dword [eax]
mov dword [ebp - 0xa0], ecx
push edx
push ecx
add esp, 4
call 0x455fc0
add byte [eax + 0x3c], cl
inc edi
aaa
cmp byte [esi + 0x49], cl
add esp, 4
and edx, 0x397c
add edx, 0x17a6b
pop edx
push esi
xor esi, 0x44dc
pop esi
push esi
add esi, 0x9836
pop esi
mov edx, dword [ebp - 0xa0]
cmp edx, dword [ebp - 0x238]
je 0x455ffe
mov eax, dword [ebp - 0xa0]
cmp dword [eax + 0x30], 0
jne 0x455d42
push edx
jmp 0x456004
jmp 0x456009
sub edx, 0x12f7f
pop edx
push eax
push ebx
add esp, 4
sub eax, 0x5934
xor eax, 0xc81c
or eax, 0x10014
pop eax
push edi
add edi, 0x211c
pop edi
mov dword [ebp - 0x70], 0
Function at 0x455e57
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edi
xor eax, eax
mov word [ebp - 0x60], ax
xor ecx, ecx
mov word [ebp - 0x14], cx
push ecx
push ecx
add esp, 4
add ecx, 0x1391a
xor ecx, 0xba82
pop ecx
push esi
push ebx
add esp, 4
and esi, 0x10898
jmp 0x455df0
xor esi, 0x3882
pop esi
push ecx
or ecx, 0x8706
pop ecx
mov edx, dword [ebp - 0x230]
mov ax, word [edx]
mov word [ebp - 0x1ca], ax
mov ecx, dword [ebp - 0x230]
add ecx, 2
mov dword [ebp - 0x230], ecx
mov dx, word [ebp - 0x1ca]
mov word [ebp - 0x60], dx
push ecx
push eax
add esp, 4
jmp 0x455e33
call 0x455e40
add byte [eax + 0x3a], al
xor eax, 0x464a444a
add esp, 4
xor ecx, 0x3f6
call 0x455e57
add byte [eax], bh
inc ecx
xor al, byte ds:[ebp + 0x48]
dec ebp
dec eax
add esp, 4
pop ecx
mov eax, dword [ebp - 0x234]
mov cx, word [eax]
mov word [ebp - 0x1cc], cx
mov edx, dword [ebp - 0x234]
add edx, 2
mov dword [ebp - 0x234], edx
mov ax, word [ebp - 0x1cc]
mov word [ebp - 0x14], ax
push edi
push eax
add esp, 4
sub edi, 0x162d3
pop edi
push esi
sub esi, 0x5b20
or esi, 0x323f
pop esi
push eax
call 0x455ead
add byte [ecx + 0x4f], al
dec ecx
aas
dec edx
push eax
inc esp
add esp, 4
or eax, 0xe68d
pop eax
movzx ecx, word [ebp - 0x14]
test ecx, ecx
jne 0x455ed4
movzx edx, word [ebp - 0x60]
movzx eax, word [ebp - 0x14]
sub edx, eax
mov dword [ebp - 0x2f4], edx
jmp 0x455f57
movzx ecx, word [ebp - 0x60]
movzx edx, word [ebp - 0x14]
cmp ecx, edx
je 0x455dcd
movzx eax, word [ebp - 0x60]
xor eax, 0x20
movzx ecx, word [ebp - 0x14]
cmp eax, ecx
je 0x455dcd
push edx
push esi
add esp, 4
jmp 0x455f04
sub edx, 0x13cde
pop edx
push edx
push esi
add esp, 4
or edx, 0x16473
or edx, 0x14292
sub edx, 0x11af0
or edx, 0x8c6
pop edx
movzx edx, word [ebp - 0x60]
movzx eax, word [ebp - 0x14]
cmp edx, eax
jge 0x455f41
mov dword [ebp - 0x2f0], 0xffffffff
jmp 0x455f4b
mov dword [ebp - 0x2f0], 1
mov ecx, dword [ebp - 0x2f0]
mov dword [ebp - 0x2f4], ecx
cmp dword [ebp - 0x2f4], 0
jne 0x455fa0
push esi
and esi, 0x7640
sub esi, 0x73fe
pop esi
push esi
push ebx
add esp, 4
sub esi, 0x99b7
pop esi
push ecx
push esi
add esp, 4
and ecx, 0x126cc
sub ecx, 0xba09
and ecx, 0x17b82
pop ecx
mov edx, dword [ebp - 0xa0]
mov dword [ebp - 0x70], edx
jmp 0x456037
mov eax, dword [ebp - 0xa0]
mov ecx, dword [eax]
mov dword [ebp - 0xa0], ecx
push edx
push ecx
add esp, 4
call 0x455fc0
add byte [eax + 0x3c], cl
inc edi
aaa
cmp byte [esi + 0x49], cl
add esp, 4
and edx, 0x397c
add edx, 0x17a6b
pop edx
push esi
xor esi, 0x44dc
pop esi
push esi
add esi, 0x9836
pop esi
mov edx, dword [ebp - 0xa0]
cmp edx, dword [ebp - 0x238]
je 0x455ffe
mov eax, dword [ebp - 0xa0]
cmp dword [eax + 0x30], 0
jne 0x455d42
push edx
jmp 0x456004
jmp 0x456009
sub edx, 0x12f7f
pop edx
push eax
push ebx
add esp, 4
sub eax, 0x5934
xor eax, 0xc81c
or eax, 0x10014
pop eax
push edi
add edi, 0x211c
pop edi
mov dword [ebp - 0x70], 0
Function at 0x455ead
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edi
xor eax, eax
mov word [ebp - 0x60], ax
xor ecx, ecx
mov word [ebp - 0x14], cx
push ecx
push ecx
add esp, 4
add ecx, 0x1391a
xor ecx, 0xba82
pop ecx
push esi
push ebx
add esp, 4
and esi, 0x10898
jmp 0x455df0
xor esi, 0x3882
pop esi
push ecx
or ecx, 0x8706
pop ecx
mov edx, dword [ebp - 0x230]
mov ax, word [edx]
mov word [ebp - 0x1ca], ax
mov ecx, dword [ebp - 0x230]
add ecx, 2
mov dword [ebp - 0x230], ecx
mov dx, word [ebp - 0x1ca]
mov word [ebp - 0x60], dx
push ecx
push eax
add esp, 4
jmp 0x455e33
call 0x455e40
add byte [eax + 0x3a], al
xor eax, 0x464a444a
add esp, 4
xor ecx, 0x3f6
call 0x455e57
add byte [eax], bh
inc ecx
xor al, byte ds:[ebp + 0x48]
dec ebp
dec eax
add esp, 4
pop ecx
mov eax, dword [ebp - 0x234]
mov cx, word [eax]
mov word [ebp - 0x1cc], cx
mov edx, dword [ebp - 0x234]
add edx, 2
mov dword [ebp - 0x234], edx
mov ax, word [ebp - 0x1cc]
mov word [ebp - 0x14], ax
push edi
push eax
add esp, 4
sub edi, 0x162d3
pop edi
push esi
sub esi, 0x5b20
or esi, 0x323f
pop esi
push eax
call 0x455ead
add byte [ecx + 0x4f], al
dec ecx
aas
dec edx
push eax
inc esp
add esp, 4
or eax, 0xe68d
pop eax
movzx ecx, word [ebp - 0x14]
test ecx, ecx
jne 0x455ed4
movzx edx, word [ebp - 0x60]
movzx eax, word [ebp - 0x14]
sub edx, eax
mov dword [ebp - 0x2f4], edx
jmp 0x455f57
movzx ecx, word [ebp - 0x60]
movzx edx, word [ebp - 0x14]
cmp ecx, edx
je 0x455dcd
movzx eax, word [ebp - 0x60]
xor eax, 0x20
movzx ecx, word [ebp - 0x14]
cmp eax, ecx
je 0x455dcd
push edx
push esi
add esp, 4
jmp 0x455f04
sub edx, 0x13cde
pop edx
push edx
push esi
add esp, 4
or edx, 0x16473
or edx, 0x14292
sub edx, 0x11af0
or edx, 0x8c6
pop edx
movzx edx, word [ebp - 0x60]
movzx eax, word [ebp - 0x14]
cmp edx, eax
jge 0x455f41
mov dword [ebp - 0x2f0], 0xffffffff
jmp 0x455f4b
mov dword [ebp - 0x2f0], 1
mov ecx, dword [ebp - 0x2f0]
mov dword [ebp - 0x2f4], ecx
cmp dword [ebp - 0x2f4], 0
jne 0x455fa0
push esi
and esi, 0x7640
sub esi, 0x73fe
pop esi
push esi
push ebx
add esp, 4
sub esi, 0x99b7
pop esi
push ecx
push esi
add esp, 4
and ecx, 0x126cc
sub ecx, 0xba09
and ecx, 0x17b82
pop ecx
mov edx, dword [ebp - 0xa0]
mov dword [ebp - 0x70], edx
jmp 0x456037
mov eax, dword [ebp - 0xa0]
mov ecx, dword [eax]
mov dword [ebp - 0xa0], ecx
push edx
push ecx
add esp, 4
call 0x455fc0
add byte [eax + 0x3c], cl
inc edi
aaa
cmp byte [esi + 0x49], cl
add esp, 4
and edx, 0x397c
add edx, 0x17a6b
pop edx
push esi
xor esi, 0x44dc
pop esi
push esi
add esi, 0x9836
pop esi
mov edx, dword [ebp - 0xa0]
cmp edx, dword [ebp - 0x238]
je 0x455ffe
mov eax, dword [ebp - 0xa0]
cmp dword [eax + 0x30], 0
jne 0x455d42
push edx
jmp 0x456004
jmp 0x456009
sub edx, 0x12f7f
pop edx
push eax
push ebx
add esp, 4
sub eax, 0x5934
xor eax, 0xc81c
or eax, 0x10014
pop eax
push edi
add edi, 0x211c
pop edi
mov dword [ebp - 0x70], 0
Function at 0x455fc0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edi
xor eax, eax
mov word [ebp - 0x60], ax
xor ecx, ecx
mov word [ebp - 0x14], cx
push ecx
push ecx
add esp, 4
add ecx, 0x1391a
xor ecx, 0xba82
pop ecx
push esi
push ebx
add esp, 4
and esi, 0x10898
jmp 0x455df0
xor esi, 0x3882
pop esi
push ecx
or ecx, 0x8706
pop ecx
mov edx, dword [ebp - 0x230]
mov ax, word [edx]
mov word [ebp - 0x1ca], ax
mov ecx, dword [ebp - 0x230]
add ecx, 2
mov dword [ebp - 0x230], ecx
mov dx, word [ebp - 0x1ca]
mov word [ebp - 0x60], dx
push ecx
push eax
add esp, 4
jmp 0x455e33
call 0x455e40
add byte [eax + 0x3a], al
xor eax, 0x464a444a
add esp, 4
xor ecx, 0x3f6
call 0x455e57
add byte [eax], bh
inc ecx
xor al, byte ds:[ebp + 0x48]
dec ebp
dec eax
add esp, 4
pop ecx
mov eax, dword [ebp - 0x234]
mov cx, word [eax]
mov word [ebp - 0x1cc], cx
mov edx, dword [ebp - 0x234]
add edx, 2
mov dword [ebp - 0x234], edx
mov ax, word [ebp - 0x1cc]
mov word [ebp - 0x14], ax
push edi
push eax
add esp, 4
sub edi, 0x162d3
pop edi
push esi
sub esi, 0x5b20
or esi, 0x323f
pop esi
push eax
call 0x455ead
add byte [ecx + 0x4f], al
dec ecx
aas
dec edx
push eax
inc esp
add esp, 4
or eax, 0xe68d
pop eax
movzx ecx, word [ebp - 0x14]
test ecx, ecx
jne 0x455ed4
movzx edx, word [ebp - 0x60]
movzx eax, word [ebp - 0x14]
sub edx, eax
mov dword [ebp - 0x2f4], edx
jmp 0x455f57
movzx ecx, word [ebp - 0x60]
movzx edx, word [ebp - 0x14]
cmp ecx, edx
je 0x455dcd
movzx eax, word [ebp - 0x60]
xor eax, 0x20
movzx ecx, word [ebp - 0x14]
cmp eax, ecx
je 0x455dcd
push edx
push esi
add esp, 4
jmp 0x455f04
sub edx, 0x13cde
pop edx
push edx
push esi
add esp, 4
or edx, 0x16473
or edx, 0x14292
sub edx, 0x11af0
or edx, 0x8c6
pop edx
movzx edx, word [ebp - 0x60]
movzx eax, word [ebp - 0x14]
cmp edx, eax
jge 0x455f41
mov dword [ebp - 0x2f0], 0xffffffff
jmp 0x455f4b
mov dword [ebp - 0x2f0], 1
mov ecx, dword [ebp - 0x2f0]
mov dword [ebp - 0x2f4], ecx
cmp dword [ebp - 0x2f4], 0
jne 0x455fa0
push esi
and esi, 0x7640
sub esi, 0x73fe
pop esi
push esi
push ebx
add esp, 4
sub esi, 0x99b7
pop esi
push ecx
push esi
add esp, 4
and ecx, 0x126cc
sub ecx, 0xba09
and ecx, 0x17b82
pop ecx
mov edx, dword [ebp - 0xa0]
mov dword [ebp - 0x70], edx
jmp 0x456037
mov eax, dword [ebp - 0xa0]
mov ecx, dword [eax]
mov dword [ebp - 0xa0], ecx
push edx
push ecx
add esp, 4
call 0x455fc0
add byte [eax + 0x3c], cl
inc edi
aaa
cmp byte [esi + 0x49], cl
add esp, 4
and edx, 0x397c
add edx, 0x17a6b
pop edx
push esi
xor esi, 0x44dc
pop esi
push esi
add esi, 0x9836
pop esi
mov edx, dword [ebp - 0xa0]
cmp edx, dword [ebp - 0x238]
je 0x455ffe
mov eax, dword [ebp - 0xa0]
cmp dword [eax + 0x30], 0
jne 0x455d42
push edx
jmp 0x456004
jmp 0x456009
sub edx, 0x12f7f
pop edx
push eax
push ebx
add esp, 4
sub eax, 0x5934
xor eax, 0xc81c
or eax, 0x10014
pop eax
push edi
add edi, 0x211c
pop edi
mov dword [ebp - 0x70], 0
Function at 0x4571e0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [esi - 0x75], bl
push ebp
nop
mov eax, dword [edx + 0x18]
mov dword [ebp - 0x80], eax
push ebx
sub ebx, 0x43e9
call 0x4571ff
add byte [edx], bh
cmp eax, 0x423d4544
dec esp
add esp, 4
and ebx, 0x3d99
pop ebx
push esi
or esi, 0x5925

Function at 0x4571ff
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add byte [esi - 0x75], bl
push ebp
nop
mov eax, dword [edx + 0x18]
mov dword [ebp - 0x80], eax
push ebx
sub ebx, 0x43e9
call 0x4571ff
add byte [edx], bh
cmp eax, 0x423d4544
dec esp
add esp, 4
and ebx, 0x3d99
pop ebx
push esi
or esi, 0x5925
Function at 0x458070
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add byte [edx + 0x39], cl
cmp edi, dword [ecx]
dec edx
dec esi
inc ebp
cmp ecx, dword [ebx - 0x7d]
les eax, [eax + ebx*2]
mov ecx, dword [ebp - 0x448]
mov dword [ebp - 0x338], ecx
cmp dword [ebp - 0x338], 0
jne 0x4580d4
push edi
or edi, 0x1010a
or edi, 0x9418
add edi, 0x8750
xor edi, 0xf583
pop edi
push esi
push eax
add esp, 4
call fcn.004580c1
add byte [eax + ecx*2], bh
cmp dword [ebx], esi
inc edi
dec esi
dec edi
dec ebx
cmp al, 0x83
add esp, 4
pop esi
push eax
sub eax, 0xd334
pop eax
push eax
push edx
add esp, 4
xor eax, 0x40d7
pop eax
push ecx
xor ecx, 0x14392
sub ecx, 0x1422f
call fcn.00458102
add byte [edx], bh
xor dh, byte [0x3c42453a]

Function at 0x45807a
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add byte [edx + 0x39], cl
cmp edi, dword [ecx]
dec edx
dec esi
inc ebp
cmp ecx, dword [ebx - 0x7d]
les eax, [eax + ebx*2]
mov ecx, dword [ebp - 0x448]
mov dword [ebp - 0x338], ecx
cmp dword [ebp - 0x338], 0
jne 0x4580d4
push edi
or edi, 0x1010a
or edi, 0x9418
add edi, 0x8750
xor edi, 0xf583
pop edi
push esi
push eax
add esp, 4
call fcn.004580c1
add byte [eax + ecx*2], bh
cmp dword [ebx], esi
inc edi
dec esi
dec edi
dec ebx
cmp al, 0x83
add esp, 4
pop esi
push eax
sub eax, 0xd334
pop eax
push eax
push edx
add esp, 4
xor eax, 0x40d7
pop eax
push ecx
xor ecx, 0x14392
sub ecx, 0x1422f
call fcn.00458102
add byte [edx], bh
xor dh, byte [0x3c42453a]

Function at 0x4580c1
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop esi
mov dword [ebp - 0xd0], 0
jmp 0x458469
cmp dword [ebp - 0xd0], 0
jne 0x4584b3
push eax
or eax, 0x332a
call 0x458486
add byte [ebp + edi + 0x4b], al
dec edi
cmp dword [esi + 0x44], ecx
add esp, 4
sub eax, 0x4b14
add eax, 0x15321
pop eax
push eax
and eax, 0x116e4
add eax, 0xb001
pop eax
mov dword [ebp - 0x1b8], 0
jmp 0x45957a
mov ecx, dword [ebp - 0xd0]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x7c], edx
mov dword [ebp - 0xe0], 0
push edi
push edx
add esp, 4
add edi, 0x930
and edi, 0x5d82
sub edi, 0x14b6b
sub edi, 0x8ac0
pop edi
push ebx
add ebx, 0x4c63
pop ebx
push ebx
push esi
add esp, 4
add ebx, 0x14788
pop ebx
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 0
jne 0x458550
push ebx
jmp 0x458513
pop ebx
push esi
sub esi, 0x6bd2
pop esi
push edi
push edi
add esp, 4
add al, 0x81
out dx, eax
push ebx
push esi
add byte [eax], al
mov edx, dword [ebp - 0x344]
mov eax, dword [ebp - 0x7c]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x348], eax
jne 0x458575
mov ecx, dword [ebp - 0xe0]
mov dword [ebp - 0x90], ecx
jmp 0x458a2a
push edx
add edx, 0xb52
sub edx, 0x17fef
call 0x45858f
add byte [ebx + 0x4e], al
inc esp
xor eax, 0x83403237
les eax, [ecx + eax*4]
ljmp 0x565a
Function at 0x458102
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop ecx
mov edx, dword [ebp - 0x338]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x270], ecx
cmp dword [ebp - 0x270], 0
jne 0x458162
push edx
or edx, 0x1660e
call 0x458135
add byte [edi + 0x33], cl
mov edx, dword [ebp - 0x270]
mov dword [ebp - 0xbc], edx
push eax
push ebx
add esp, 4
sub eax, 0x69dd
pop eax
push esi
invalid
into
invalid
mov word [eax], es

Function at 0x458130
Capabilities:
Resolve function by parsing pe exports

Disassembly:
inc esp
dec ebp
dec ebx
dec esp
add esp, 4
pop edx
push esi
push edi
add esp, 4
add esi, 0x6ab1
pop esi
push edi
sub edi, 0x827d
or edi, 0xb11
pop edi
mov dword [ebp - 0xd0], 0
jmp 0x458469

Function at 0x458135
Capabilities:
Resolve function by parsing pe exports

Disassembly:
inc esp
dec ebp
dec ebx
dec esp
add esp, 4
pop edx
push esi
push edi
add esp, 4
add esi, 0x6ab1
pop esi
push edi
sub edi, 0x827d
or edi, 0xb11
pop edi
mov dword [ebp - 0xd0], 0
jmp 0x458469

Function at 0x4581c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add byte [eax], al
pop ebx
push edi
push eax
add esp, 4
call 0x4581d7
add byte [ebp + 0x38], cl
aas
cmp dword [esi + 0x44], eax
dec esi
cmp eax, dword [ebx - 0x7d]
les eax, [ecx + eax*4]
out dx, eax
sub dword [eax - 0x387f0000], edx
sub byte [ebp + 1], al
add byte [ecx + 0x1eaeef], al
add byte [edi + 0x33], bl
invalid
invalid

Function at 0x4581d7
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add byte [eax], al
pop ebx
push edi
push eax
add esp, 4
call 0x4581d7
add byte [ebp + 0x38], cl
aas
cmp dword [esi + 0x44], eax
dec esi
cmp eax, dword [ebx - 0x7d]
les eax, [ecx + eax*4]
out dx, eax
sub dword [eax - 0x387f0000], edx
sub byte [ebp + 1], al
add byte [ecx + 0x1eaeef], al
add byte [edi + 0x33], bl
invalid
invalid

Function at 0x4583a6
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add esp, 4
sub esi, 0xd342
pop esi
push edi
sub edi, 0x15430
add edi, 0x4819
pop edi
mov edx, dword [ebp - 0xbc]
mov dword [ebp - 0xd0], edx
jmp 0x458469

Function at 0x458520
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add al, 0x81
out dx, eax
push ebx
push esi
add byte [eax], al
pop edi
push esi
jmp 0x458532
add esi, 0xd5c8
and esi, 0x13663
pop esi
mov ecx, dword [ebp - 0xe0]
mov dword [ebp - 0x90], ecx
jmp 0x458a2a
cmp dword [ebp - 0x90], 0
je 0x458ad3
push esi
call 0x458a48
add byte [ecx + 0x49], al
xor eax, 0x4950433b
inc ebp
inc edi
dec edi
add esp, 4
or esi, 0x2308
call 0x458a5d
add byte [edi], bh
inc ebp
xor eax, 0x8347344e
les eax, [esi + ebx*2]
push ebx
xor ebx, 0x3e53
pop ebx
mov ecx, dword [ebp - 0x90]
mov dword [ebp - 0x45c], ecx
mov edx, dword [ebp - 0x45c]
mov dword [ebp - 0x460], edx
lea eax, [ebp - 0x2b0]
push eax
call dword [ebp - 0x460]
test eax, eax
jne 0x458ad3
push edi
or edi, 0x41a9
add edi, 0xb33a
or edi, 0x185e0
pop edi
push eax
push eax
add esp, 4
jmp 0x458ab1
sub eax, 0x84ed
xor eax, 0xd324
or eax, 0x15d21
pop eax
mov dword [ebp - 0x1b8], 0
jmp 0x45957a
push 0
call dword [ebp - 0x1b8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x45858f
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop esi
mov dword [ebp - 0xd0], 0
jmp 0x458469
cmp dword [ebp - 0xd0], 0
jne 0x4584b3
push eax
or eax, 0x332a
call 0x458486
add byte [ebp + edi + 0x4b], al
dec edi
cmp dword [esi + 0x44], ecx
add esp, 4
sub eax, 0x4b14
add eax, 0x15321
pop eax
push eax
and eax, 0x116e4
add eax, 0xb001
pop eax
mov dword [ebp - 0x1b8], 0
jmp 0x45957a
mov ecx, dword [ebp - 0xd0]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x7c], edx
mov dword [ebp - 0xe0], 0
push edi
push edx
add esp, 4
add edi, 0x930
and edi, 0x5d82
sub edi, 0x14b6b
sub edi, 0x8ac0
pop edi
push ebx
add ebx, 0x4c63
pop ebx
push ebx
push esi
add esp, 4
add ebx, 0x14788
pop ebx
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 0
jne 0x458550
push ebx
jmp 0x458513
pop ebx
push esi
sub esi, 0x6bd2
pop esi
push edi
push edi
add esp, 4
add al, 0x81
out dx, eax
push ebx
push esi
add byte [eax], al
mov edx, dword [ebp - 0x344]
mov eax, dword [ebp - 0x7c]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x348], eax
jne 0x458575
mov ecx, dword [ebp - 0xe0]
mov dword [ebp - 0x90], ecx
jmp 0x458a2a
push edx
add edx, 0xb52
sub edx, 0x17fef
call 0x45858f
add byte [ebx + 0x4e], al
inc esp
xor eax, 0x83403237
les eax, [ecx + eax*4]
ljmp 0x565a