joyce8/EMBER2024-capa huggingface dataset:
Function at 0x406e94
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
call 0x406ea5
add byte [edi + eax*2], dh
inc esp
dec ecx
dec esp
xor al, 0x3b
xor eax, 0x5e04c483
mov eax, dword [ebp - 0x73c]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x32c], ecx
mov dword [ebp - 0x74c], 0
mov edx, dword [ebp - 0x32c]
mov dword [ebp - 0x157c], edx
cmp dword [ebp - 0x157c], 0
jne 0x406ee8
mov eax, dword [ebp - 0x74c]
mov dword [ebp - 0x3c0], eax
jmp 0x4071d9
mov ecx, dword [ebp - 0x157c]
mov edx, dword [ebp - 0x32c]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x15a0], edx
jne 0x406f10
mov eax, dword [ebp - 0x74c]
mov dword [ebp - 0x3c0], eax
jmp 0x4071d9
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x15a0]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x15a4], ecx
cmp dword [ebp - 0x15a4], 0
jne 0x406f42
mov edx, dword [ebp - 0x74c]
mov dword [ebp - 0x3c0], edx
jmp 0x4071d9
mov eax, dword [ebp - 0x32c]
add eax, dword [ebp - 0x15a4]
mov dword [ebp - 0x740], eax
jne 0x406f67
mov ecx, dword [ebp - 0x74c]
mov dword [ebp - 0x3c0], ecx
jmp 0x4071d9
mov edx, dword [ebp - 0x740]
mov eax, dword [ebp - 0x32c]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1d70], eax
mov ecx, dword [ebp - 0x740]
mov edx, dword [ebp - 0x32c]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1d74], edx
mov eax, dword [ebp - 0x740]
mov ecx, dword [ebp - 0x32c]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x1b3c], ecx
mov dword [ebp - 0x744], 0
jmp 0x406fc1
mov edx, dword [ebp - 0x744]
add edx, 1
mov dword [ebp - 0x744], edx
mov eax, dword [ebp - 0x740]
mov ecx, dword [ebp - 0x744]
cmp ecx, dword [eax + 0x18]
jae 0x4071cd
mov edx, dword [ebp - 0x744]
mov eax, dword [ebp - 0x1d70]
mov ecx, dword [ebp - 0x32c]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x748], ecx
mov edx, dword [ebp - 0x744]
mov eax, dword [ebp - 0x1d74]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x1b3c]
mov eax, dword [ebp - 0x32c]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1d78], eax
mov dword [ebp - 0x150], 0
jmp 0x407031
mov ecx, dword [ebp - 0x150]
add ecx, 1
mov dword [ebp - 0x150], ecx
mov edx, dword [ebp - 0x748]
add edx, dword [ebp - 0x150]
movsx eax, byte [edx]
test eax, eax
je 0x4070e3
mov ecx, dword [ebp - 0x150]
movsx edx, byte [ebp + ecx - 0x870]
test edx, edx
je 0x4070e3
push ebx
add ebx, 0xa95d
and ebx, 0xccea
or ebx, 0xe69c
pop ebx
push esi
push esi
add esp, 4
xor esi, 0xe194
pop esi
push esi
push eax
add esp, 4
add esi, 0x3bd7
or esi, 0xabf5
pop esi
mov eax, dword [ebp - 0x748]
add eax, dword [ebp - 0x150]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x150]
movsx eax, byte [ebp + edx - 0x870]
cmp ecx, eax
je 0x4070d5
mov ecx, dword [ebp - 0x748]
add ecx, dword [ebp - 0x150]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x150]
movsx ecx, byte [ebp + eax - 0x870]
cmp edx, ecx
jne 0x4070dc
jmp 0x407022
jmp 0x4070e3
push esi
push edi
add esp, 4
add esi, 0xfe70
pop esi
push ecx
or ecx, 0x15e76
and ecx, 0x930
xor ecx, 0x36de
sub ecx, 0x14d7
pop ecx
push esi
push edi
add esp, 4
add esi, 0x9903
pop esi
mov edx, dword [ebp - 0x748]
invalid
Function at 0x406ea5
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
call 0x406ea5
add byte [edi + eax*2], dh
inc esp
dec ecx
dec esp
xor al, 0x3b
xor eax, 0x5e04c483
mov eax, dword [ebp - 0x73c]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x32c], ecx
mov dword [ebp - 0x74c], 0
mov edx, dword [ebp - 0x32c]
mov dword [ebp - 0x157c], edx
cmp dword [ebp - 0x157c], 0
jne 0x406ee8
mov eax, dword [ebp - 0x74c]
mov dword [ebp - 0x3c0], eax
jmp 0x4071d9
mov ecx, dword [ebp - 0x157c]
mov edx, dword [ebp - 0x32c]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x15a0], edx
jne 0x406f10
mov eax, dword [ebp - 0x74c]
mov dword [ebp - 0x3c0], eax
jmp 0x4071d9
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x15a0]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x15a4], ecx
cmp dword [ebp - 0x15a4], 0
jne 0x406f42
mov edx, dword [ebp - 0x74c]
mov dword [ebp - 0x3c0], edx
jmp 0x4071d9
mov eax, dword [ebp - 0x32c]
add eax, dword [ebp - 0x15a4]
mov dword [ebp - 0x740], eax
jne 0x406f67
mov ecx, dword [ebp - 0x74c]
mov dword [ebp - 0x3c0], ecx
jmp 0x4071d9
mov edx, dword [ebp - 0x740]
mov eax, dword [ebp - 0x32c]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1d70], eax
mov ecx, dword [ebp - 0x740]
mov edx, dword [ebp - 0x32c]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1d74], edx
mov eax, dword [ebp - 0x740]
mov ecx, dword [ebp - 0x32c]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x1b3c], ecx
mov dword [ebp - 0x744], 0
jmp 0x406fc1
mov edx, dword [ebp - 0x744]
add edx, 1
mov dword [ebp - 0x744], edx
mov eax, dword [ebp - 0x740]
mov ecx, dword [ebp - 0x744]
cmp ecx, dword [eax + 0x18]
jae 0x4071cd
mov edx, dword [ebp - 0x744]
mov eax, dword [ebp - 0x1d70]
mov ecx, dword [ebp - 0x32c]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x748], ecx
mov edx, dword [ebp - 0x744]
mov eax, dword [ebp - 0x1d74]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x1b3c]
mov eax, dword [ebp - 0x32c]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1d78], eax
mov dword [ebp - 0x150], 0
jmp 0x407031
mov ecx, dword [ebp - 0x150]
add ecx, 1
mov dword [ebp - 0x150], ecx
mov edx, dword [ebp - 0x748]
add edx, dword [ebp - 0x150]
movsx eax, byte [edx]
test eax, eax
je 0x4070e3
mov ecx, dword [ebp - 0x150]
movsx edx, byte [ebp + ecx - 0x870]
test edx, edx
je 0x4070e3
push ebx
add ebx, 0xa95d
and ebx, 0xccea
or ebx, 0xe69c
pop ebx
push esi
push esi
add esp, 4
xor esi, 0xe194
pop esi
push esi
push eax
add esp, 4
add esi, 0x3bd7
or esi, 0xabf5
pop esi
mov eax, dword [ebp - 0x748]
add eax, dword [ebp - 0x150]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x150]
movsx eax, byte [ebp + edx - 0x870]
cmp ecx, eax
je 0x4070d5
mov ecx, dword [ebp - 0x748]
add ecx, dword [ebp - 0x150]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x150]
movsx ecx, byte [ebp + eax - 0x870]
cmp edx, ecx
jne 0x4070dc
jmp 0x407022
jmp 0x4070e3
push esi
push edi
add esp, 4
add esi, 0xfe70
pop esi
push ecx
or ecx, 0x15e76
and ecx, 0x930
xor ecx, 0x36de
sub ecx, 0x14d7
pop ecx
push esi
push edi
add esp, 4
add esi, 0x9903
pop esi
mov edx, dword [ebp - 0x748]
invalid
Function at 0x4071f6
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
je 0x4072b4
push eax
call 0x4071f6
add byte [0x3d364448], dh
cmp bh, byte [ecx]
inc eax
dec ecx
add esp, 4
sub eax, 0xa7c8
xor eax, 0x74c3
pop eax
push edi
push edi
add esp, 4
and edi, 0x89f9
add byte [ecx + 0x16ef5cf], al
add byte [edi - 0x75], bl
test dword [eax - 4], eax
invalid
dec dword [ecx - 0x1d7b7b]
call dword [edx + 0x50]
add esp, 4
and edx, 0x48f6
xor edx, 0x69b
pop edx
push edx
push esi
add esp, 4
or edx, 0xa614
pop edx
push eax
and eax, 0x3c5e
and eax, 0xc906
xor eax, 0x13385
pop eax
mov ecx, dword [ebp - 0x1d7c]
mov dword [ebp - 0x1d80], ecx
lea edx, [ebp - 0x1670]
push edx
call dword [ebp - 0x1d80]
test eax, eax
jne 0x4072b4
push esi
push ecx
add esp, 4
jmp 0x407280
sub esi, 0x29ab
xor esi, 0xdcf1
sub esi, 0xde21
pop esi
push eax
push esi
add esp, 4
add eax, 0x216a
or eax, 0x13bb2
pop eax
mov dword [ebp - 0x788], 0
jmp 0x40799e

Function at 0x4074ba
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
or esi, 0x108d1
and esi, 0xd90d
pop esi
push ebx
push ebx
add esp, 4
or ebx, 0x8377
pop ebx
movzx eax, word [ebp - 0x30]
test eax, eax
jne 0x4074f3
movzx ecx, word [ebp - 0x1cc]
movzx edx, word [ebp - 0x30]
sub ecx, edx
mov dword [ebp - 0x15b4], ecx
jmp 0x40754d
movzx eax, word [ebp - 0x1cc]
movzx ecx, word [ebp - 0x30]
cmp eax, ecx
je 0x40741b
movzx edx, word [ebp - 0x1cc]
xor edx, 0x20
movzx eax, word [ebp - 0x30]
cmp edx, eax
je 0x40741b
movzx ecx, word [ebp - 0x1cc]
movzx edx, word [ebp - 0x30]
cmp ecx, edx
jge 0x407537
mov dword [ebp - 0x15b0], 0xffffffff
jmp 0x407541
mov dword [ebp - 0x15b0], 1
mov eax, dword [ebp - 0x15b0]
mov dword [ebp - 0x15b4], eax
cmp dword [ebp - 0x15b4], 0
jne 0x407596
push eax
add eax, 0x6ef7
jmp 0x407563
pop eax
push edx
push esi
add esp, 4
sub edx, 0x55d6
add edx, 0x9e5c
add edx, 0x7b50
pop edx
push eax
push edi
add esp, 4
sub eax, 0xd2e3
pop eax
push esi
call 0x4075a7
add byte [ecx + 0x4a], al
aaa
dec esi
dec esi
aas
dec edx
inc ebx
xor cl, byte [esi - 0x7d]
les eax, [ebx + ebp*8]
push es
dec ebx
inc ebx
inc eax
cmp eax, 0x7e836
add byte [eax], al
add byte [eax + 0x4e], cl
xor al, byte [esi + 0x35]
inc edx
add esp, 4
or esi, 0xdf45
pop esi
mov edx, dword [ebp - 0x4e0]
mov eax, dword [edx]

Function at 0x407588
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [ebp - 0x4e0]
mov dword [ebp - 0x2bc], ecx
jmp 0x4075fe
Function at 0x4075a7
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
or esi, 0x108d1
and esi, 0xd90d
pop esi
push ebx
push ebx
add esp, 4
or ebx, 0x8377
pop ebx
movzx eax, word [ebp - 0x30]
test eax, eax
jne 0x4074f3
movzx ecx, word [ebp - 0x1cc]
movzx edx, word [ebp - 0x30]
sub ecx, edx
mov dword [ebp - 0x15b4], ecx
jmp 0x40754d
movzx eax, word [ebp - 0x1cc]
movzx ecx, word [ebp - 0x30]
cmp eax, ecx
je 0x40741b
movzx edx, word [ebp - 0x1cc]
xor edx, 0x20
movzx eax, word [ebp - 0x30]
cmp edx, eax
je 0x40741b
movzx ecx, word [ebp - 0x1cc]
movzx edx, word [ebp - 0x30]
cmp ecx, edx
jge 0x407537
mov dword [ebp - 0x15b0], 0xffffffff
jmp 0x407541
mov dword [ebp - 0x15b0], 1
mov eax, dword [ebp - 0x15b0]
mov dword [ebp - 0x15b4], eax
cmp dword [ebp - 0x15b4], 0
jne 0x407596
push eax
add eax, 0x6ef7
jmp 0x407563
pop eax
push edx
push esi
add esp, 4
sub edx, 0x55d6
add edx, 0x9e5c
add edx, 0x7b50
pop edx
push eax
push edi
add esp, 4
sub eax, 0xd2e3
pop eax
push esi
call 0x4075a7
add byte [ecx + 0x4a], al
aaa
dec esi
dec esi
aas
dec edx
inc ebx
xor cl, byte [esi - 0x7d]
les eax, [ebx + ebp*8]
push es
dec ebx
inc ebx
inc eax
cmp eax, 0x7e836
add byte [eax], al
add byte [eax + 0x4e], cl
xor al, byte [esi + 0x35]
inc edx
add esp, 4
or esi, 0xdf45
pop esi
mov edx, dword [ebp - 0x4e0]
mov eax, dword [edx]

Function at 0x4075be
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
or esi, 0x108d1
and esi, 0xd90d
pop esi
push ebx
push ebx
add esp, 4
or ebx, 0x8377
pop ebx
movzx eax, word [ebp - 0x30]
test eax, eax
jne 0x4074f3
movzx ecx, word [ebp - 0x1cc]
movzx edx, word [ebp - 0x30]
sub ecx, edx
mov dword [ebp - 0x15b4], ecx
jmp 0x40754d
movzx eax, word [ebp - 0x1cc]
movzx ecx, word [ebp - 0x30]
cmp eax, ecx
je 0x40741b
movzx edx, word [ebp - 0x1cc]
xor edx, 0x20
movzx eax, word [ebp - 0x30]
cmp edx, eax
je 0x40741b
movzx ecx, word [ebp - 0x1cc]
movzx edx, word [ebp - 0x30]
cmp ecx, edx
jge 0x407537
mov dword [ebp - 0x15b0], 0xffffffff
jmp 0x407541
mov dword [ebp - 0x15b0], 1
mov eax, dword [ebp - 0x15b0]
mov dword [ebp - 0x15b4], eax
cmp dword [ebp - 0x15b4], 0
jne 0x407596
push eax
add eax, 0x6ef7
jmp 0x407563
pop eax
push edx
push esi
add esp, 4
sub edx, 0x55d6
add edx, 0x9e5c
add edx, 0x7b50
pop edx
push eax
push edi
add esp, 4
sub eax, 0xd2e3
pop eax
push esi
call 0x4075a7
add byte [ecx + 0x4a], al
aaa
dec esi
dec esi
aas
dec edx
inc ebx
xor cl, byte [esi - 0x7d]
les eax, [ebx + ebp*8]
push es
dec ebx
inc ebx
inc eax
cmp eax, 0x7e836
add byte [eax], al
add byte [eax + 0x4e], cl
xor al, byte [esi + 0x35]
inc edx
add esp, 4
or esi, 0xdf45
pop esi
mov edx, dword [ebp - 0x4e0]
mov eax, dword [edx]
Function at 0x4075d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ecx
push ebx
add esp, 4
add ecx, 0x152db
add ecx, 0x5668
or ecx, 0x2c87
pop ecx
push edi
xor edi, 0xe800
xor edi, 0x14cf8
sub edi, 0x4094
add edi, 0x2113
pop edi
lea edx, [ebp - 0x1670]
mov dword [ebp - 0xc64], edx
mov eax, dword [ebp - 0x4e0]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc60], ecx
xor edx, edx
mov word [ebp - 0x1cc], dx
xor eax, eax
mov word [ebp - 0x30], ax
push eax
push eax
add esp, 4
or eax, 0xd261
and eax, 0x11709
xor eax, 0x588
add eax, 0x1061a
pop eax
push ecx
sub ecx, 0xb56a
sub ecx, 0x6ff5
and ecx, 0xb9f3
pop ecx
mov ecx, dword [ebp - 0xc60]
mov dx, word [ecx]
mov word [ebp - 0xfee], dx
mov eax, dword [ebp - 0xc60]
add eax, 2
mov dword [ebp - 0xc60], eax
mov cx, word [ebp - 0xfee]
mov word [ebp - 0x1cc], cx
mov edx, dword [ebp - 0xc64]
mov ax, word [edx]
mov word [ebp - 0xff0], ax
mov ecx, dword [ebp - 0xc64]
add ecx, 2
mov dword [ebp - 0xc64], ecx
mov dx, word [ebp - 0xff0]
mov word [ebp - 0x30], dx
push esi
jmp 0x4074ad
call fcn.004074ba
add byte [esp + eax*2], bh
cmp eax, dword [esi + 0x44]
dec esi
dec ebx
mov dword [ebp - 0x4e0], eax
mov ecx, dword [ebp - 0x4e0]
cmp ecx, dword [ebp - 0xc68]
je fcn.004075f4
mov edx, dword [ebp - 0x4e0]
cmp dword [edx + 0x30], 0
jne 0x4073bf
Function at 0x407a51
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
call 0x407a51
add byte [0x333d433c], bh
dec edi
add esp, 4
pop ecx
mov edx, dword [ebp - 0x788]
mov dword [ebp - 0x1d9c], edx
push 0
call dword [ebp - 0x1d9c]
invalid

Function at 0x407a80
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
xor ecx, dword [ebx + 0x34]
xor eax, 0x16bef781
add dword [eax], eax

Function at 0x407b04
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
pushal
idiv bh
call dword [esi - 0x3a]
test dword [ecx - 0xa], esp
invalid
Function at 0x407fbb
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
cmp al, 0x35
xor al, byte [ebx - 0x39a5fb3c]
test dword [eax + 0x4cfffff7], eax
mov byte [ebp - 0x87f], 0x6f
mov byte [ebp - 0x87e], 0x61
mov byte [ebp - 0x87d], 0x64
mov byte [ebp - 0x87c], 0x4c
mov byte [ebp - 0x87b], 0x69
mov byte [ebp - 0x87a], 0x62
mov byte [ebp - 0x879], 0x72
mov byte [ebp - 0x878], 0x61
mov byte [ebp - 0x877], 0x72
mov byte [ebp - 0x876], 0x79
mov byte [ebp - 0x875], 0x57
mov byte [ebp - 0x874], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1da8], ecx
mov edx, dword [ebp - 0x1da8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1dac], eax
mov ecx, dword [ebp - 0x1dac]

Function at 0x40803c
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov dword [ebp - 0x15d0], ecx
push eax
call 0x40804f
add byte [eax + 0x33], cl
cmp eax, 0x8341344f
les eax, [ecx + eax*4]
call fcn.0040a5bf
pop eax
push edx
push eax
add esp, 4
jmp 0x408064
xor edx, 0x85e2
pop edx
push ecx
jmp 0x408073
pop ecx
cmp dword [ebp - 0x15d0], 0
jne 0x40808c
mov dword [ebp - 0x760], 0
jmp 0x408333
mov edx, dword [ebp - 0x15d0]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc84], ecx
push edx
push edx
add esp, 4
sub edx, 0xdeda
or edx, 0x5d3d
pop ebp
add byte [eax], al
pop edx
push ebx
push edx
add esp, 4
xor ebx, 0xa954
jmp 0x4080c2
jmp 0x4080c9
or ebx, 0x28d7
pop ebx
cmp dword [ebp - 0xc84], 0
jne 0x4080e8
mov dword [ebp - 0x760], 0
jmp 0x408333
mov edx, dword [ebp - 0xc84]
mov dword [ebp - 0x4ec], edx

Function at 0x40804f
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov dword [ebp - 0x15d0], ecx
push eax
call 0x40804f
add byte [eax + 0x33], cl
cmp eax, 0x8341344f
les eax, [ecx + eax*4]
call fcn.0040a5bf
pop eax
push edx
push eax
add esp, 4
jmp 0x408064
xor edx, 0x85e2
pop edx
push ecx
jmp 0x408073
pop ecx
cmp dword [ebp - 0x15d0], 0
jne 0x40808c
mov dword [ebp - 0x760], 0
jmp 0x408333
mov edx, dword [ebp - 0x15d0]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc84], ecx
push edx
push edx
add esp, 4
sub edx, 0xdeda
or edx, 0x5d3d
pop ebp
add byte [eax], al
pop edx
push ebx
push edx
add esp, 4
xor ebx, 0xa954
jmp 0x4080c2
jmp 0x4080c9
or ebx, 0x28d7
pop ebx
cmp dword [ebp - 0xc84], 0
jne 0x4080e8
mov dword [ebp - 0x760], 0
jmp 0x408333
mov edx, dword [ebp - 0xc84]
mov dword [ebp - 0x4ec], edx
Function at 0x4080ac
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov dword [ebp - 0x15d0], ecx
push eax
call 0x40804f
add byte [eax + 0x33], cl
cmp eax, 0x8341344f
les eax, [ecx + eax*4]
call fcn.0040a5bf
pop eax
push edx
push eax
add esp, 4
jmp 0x408064
xor edx, 0x85e2
pop edx
push ecx
jmp 0x408073
pop ecx
cmp dword [ebp - 0x15d0], 0
jne 0x40808c
mov dword [ebp - 0x760], 0
jmp 0x408333
mov edx, dword [ebp - 0x15d0]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc84], ecx
push edx
push edx
add esp, 4
sub edx, 0xdeda
or edx, 0x5d3d
pop ebp
add byte [eax], al
pop edx
push ebx
push edx
add esp, 4
xor ebx, 0xa954
jmp 0x4080c2
jmp 0x4080c9
or ebx, 0x28d7
pop ebx
cmp dword [ebp - 0xc84], 0
jne 0x4080e8
mov dword [ebp - 0x760], 0
jmp 0x408333
mov edx, dword [ebp - 0xc84]
mov dword [ebp - 0x4ec], edx

Function at 0x4080fc
Capabilities:
Resolve function by parsing pe exports

Disassembly:
dec edx
inc ebx
inc esi
inc esp
dec esi
inc ebx
add esp, 4
xor eax, 0xf9b5
add eax, 0x13d85
pop eax
push eax
or eax, 0xbd6d
and eax, 0x3aa8
or eax, 0x1177a
pop eax
lea eax, [ebp - 0x16c8]
invalid
invalid
invalid
invalid

Function at 0x408102
Capabilities:
Resolve function by parsing pe exports

Disassembly:
dec edx
inc ebx
inc esi
inc esp
dec esi
inc ebx
add esp, 4
xor eax, 0xf9b5
add eax, 0x13d85
pop eax
push eax
or eax, 0xbd6d
and eax, 0x3aa8
or eax, 0x1177a
pop eax
lea eax, [ebp - 0x16c8]
invalid
invalid
invalid
invalid

Function at 0x408160
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push eax
call 0x408160
add byte [esi + 0x41], al
inc eax
inc esi
xor bh, byte [ecx]
dec ecx
dec ebp
aas
add esp, 4
call 0x408172
add byte [edi + 0x32], al
inc ebp
xor dh, byte [esp + ecx*2]
inc edx
cmp bh, byte [eax]
add esp, 4
jmp 0x40817b
sub eax, 0x16147
pop eax
mov edx, dword [ebp - 0xc7c]
test bl, dh
invalid
jmp dword [esi - 0x75]
add ah, byte [esi - 0x77]
test dword [edx], ecx
invalid
invalid
dec dword [ebx - 0xc7b73]
invalid
add ecx, 2
invalid

Function at 0x408170
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push eax
call 0x408160
add byte [esi + 0x41], al
inc eax
inc esi
xor bh, byte [ecx]
dec ecx
dec ebp
aas
add esp, 4
call 0x408172
add byte [edi + 0x32], al
inc ebp
xor dh, byte [esp + ecx*2]
inc edx
cmp bh, byte [eax]
add esp, 4
jmp 0x40817b
sub eax, 0x16147
pop eax
mov edx, dword [ebp - 0xc7c]
test bl, dh
invalid
jmp dword [esi - 0x75]
add ah, byte [esi - 0x77]
test dword [edx], ecx
invalid
invalid
dec dword [ebx - 0xc7b73]
invalid
add ecx, 2
invalid

Function at 0x408172
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push eax
call 0x408160
add byte [esi + 0x41], al
inc eax
inc esi
xor bh, byte [ecx]
dec ecx
dec ebp
aas
add esp, 4
call 0x408172
add byte [edi + 0x32], al
inc ebp
xor dh, byte [esp + ecx*2]
inc edx
cmp bh, byte [eax]
add esp, 4
jmp 0x40817b
sub eax, 0x16147
pop eax
mov edx, dword [ebp - 0xc7c]
test bl, dh
invalid
jmp dword [esi - 0x75]
add ah, byte [esi - 0x77]
test dword [edx], ecx
invalid
invalid
dec dword [ebx - 0xc7b73]
invalid
add ecx, 2
invalid
Function at 0x40819c
Capabilities:
Resolve function by parsing pe exports

Disassembly:
lea eax, [ebx + esi*8 - 0x74990001]
xchg ebp, eax
or dh, al
invalid

Function at 0x4081c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
xchg ebp, eax
xor bl, 0xff
inc dword [ebx - 0x6a76fd3e]
xor bl, 0xff
jmp dword [esi - 0x75]

Function at 0x4082cc
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push eax
call 0x408102
add byte [edx], dh
push ebx
add esp, 4
or ebx, 0x4f8e
add ebx, 0xd834
or ebx, 0x1727a
pop ebx
push eax
push ebx
add esp, 4
sub eax, 0xe95f
pop eax
push edi
add edi, 0x16f22
add dword [eax], eax
xor edi, 0xb57b
pop edi
mov eax, dword [ebp - 0x4ec]
mov ecx, dword [eax]
mov dword [ebp - 0x4ec], ecx
invalid

Function at 0x4082f4
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push eax
call 0x408102
add byte [edx], dh
push ebx
add esp, 4
or ebx, 0x4f8e
add ebx, 0xd834
or ebx, 0x1727a
pop ebx
push eax
push ebx
add esp, 4
sub eax, 0xe95f
pop eax
push edi
add edi, 0x16f22
add dword [eax], eax
xor edi, 0xb57b
pop edi
mov eax, dword [ebp - 0x4ec]
mov ecx, dword [eax]
mov dword [ebp - 0x4ec], ecx
invalid

Function at 0x40834c
Capabilities:
Resolve function by parsing pe exports

Disassembly:
pop eax
push edi
jmp 0x408356
add edi, 0xe32
jmp 0x408364
pop edi
cmp dword [ebp - 0x760], 0
jne 0x4083af
push edx
push edx
add esp, 4
and edx, 0xe73e
sub edx, 0x84c8
and edx, 0x4426
pop edx
push eax
add eax, 0x15cdb
rcr bl, 0x5c
add dword [eax], eax
or eax, 0xe9d3
or eax, 0x3e72
or eax, 0x6b0b
pop eax
mov dword [ebp - 0xa78], 0
add byte [eax], al
jmp 0x408ed7
push ebx
xor ebx, 0x143a9
xor ebx, 0xae6c

Function at 0x4083a8
Capabilities:
Resolve function by parsing pe exports

Disassembly:
pop eax
push edi
jmp 0x408356
add edi, 0xe32
jmp 0x408364
pop edi
cmp dword [ebp - 0x760], 0
jne 0x4083af
push edx
push edx
add esp, 4
and edx, 0xe73e
sub edx, 0x84c8
and edx, 0x4426
pop edx
push eax
add eax, 0x15cdb
rcr bl, 0x5c
add dword [eax], eax
or eax, 0xe9d3
or eax, 0x3e72
or eax, 0x6b0b
pop eax
mov dword [ebp - 0xa78], 0
add byte [eax], al
jmp 0x408ed7
push ebx
xor ebx, 0x143a9
xor ebx, 0xae6c

Function at 0x4083bc
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add ebx, 0x6e0
and ebx, 0x11332
pop ebx
push edx
push ecx
add esp, 4
xor edx, 0x56b
add edx, 0x13110
or edx, 0x683f
pop edx
mov ecx, dword [ebp - 0x760]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x324], edx
mov dword [ebp - 0x770], 0
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x15dc], eax
cmp dword [ebp - 0x15dc], 0
jne 0x408420
mov ecx, dword [ebp - 0x770]
mov dword [ebp - 0x3c4], ecx
jmp 0x408711
mov edx, dword [ebp - 0x15dc]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x15e0], eax
jne 0x408448
mov ecx, dword [ebp - 0x770]
invalid
invalid
invalid
Function at 0x4085c8
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x768]
add eax, 1
mov dword [ebp - 0x768], eax
mov edx, dword [ebp - 0x158]
add edx, 1
mov dword [ebp - 0x158], edx
mov ecx, dword [ebp - 0x76c]
add ecx, dword [ebp - 0x158]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x158]
dec dword [edi]
mov esi, 0xf780058c
invalid
invalid
cmp edx, ecx
je 0x40860d
invalid
xchg ebp, eax
xchg esp, eax

Function at 0x40873c
Capabilities:
Resolve function by parsing pe exports

Disassembly:
dec ebp
inc ebp
cmp ecx, dword [ecx + 0x41]
add esp, 4
pop ebx
push edi
push edi
add esp, 4
jmp 0x40874f
pop edi
mov ecx, dword [ebp - 0x3c4]
mov dword [ebp - 0x1dc0], ecx
push ecx
push edi
add esp, 4
or ecx, 0x1863b
xor ecx, 0x8993
add ecx, 0x68a6
pop ecx
push ebx
or ebx, 0xc3e8
sub ebx, 0x177cc
add ebx, 0x7de3
xor ebx, 0xdf0f
pop ebx
mov edx, dword [ebp - 0x1dc0]
mov dword [ebp - 0x1dc4], edx
lea eax, [ebp - 0x1670]
push eax
call dword [ebp - 0x1dc4]
test eax, eax
jne 0x4087ec
push edi
call 0x4087bb
add byte [edx], dh
cmp esi, dword [esi]
xor al, 0x50
inc edx
dec ebx
dec eax
cmp dword [ebx - 0x387efb3c], eax
fistp qword [ecx + 0x4eb0000]
jmp 0x4087ca
dec edi
xor eax, 0xef813836
leave
mov esp, 0x575f0000
push esi
add esp, 4
and edi, 0x56b5
pop edi
mov dword [ebp - 0xa78], 0
jmp 0x408ed7

Function at 0x408741
Capabilities:
Resolve function by parsing pe exports

Disassembly:
dec ebp
inc ebp
cmp ecx, dword [ecx + 0x41]
add esp, 4
pop ebx
push edi
push edi
add esp, 4
jmp 0x40874f
pop edi
mov ecx, dword [ebp - 0x3c4]
mov dword [ebp - 0x1dc0], ecx
push ecx
push edi
add esp, 4
or ecx, 0x1863b
xor ecx, 0x8993
add ecx, 0x68a6
pop ecx
push ebx
or ebx, 0xc3e8
sub ebx, 0x177cc
add ebx, 0x7de3
xor ebx, 0xdf0f
pop ebx
mov edx, dword [ebp - 0x1dc0]
mov dword [ebp - 0x1dc4], edx
lea eax, [ebp - 0x1670]
push eax
call dword [ebp - 0x1dc4]
test eax, eax
jne 0x4087ec
push edi
call 0x4087bb
add byte [edx], dh
cmp esi, dword [esi]
xor al, 0x50
inc edx
dec ebx
dec eax
cmp dword [ebx - 0x387efb3c], eax
fistp qword [ecx + 0x4eb0000]
jmp 0x4087ca
dec edi
xor eax, 0xef813836
leave
mov esp, 0x575f0000
push esi
add esp, 4
and edi, 0x56b5
pop edi
mov dword [ebp - 0xa78], 0
jmp 0x408ed7

Function at 0x408874
Capabilities:
Resolve function by parsing pe exports

Disassembly:
je 0x408876
add byte [edx - 0x7d], bl
mov ebp, 0xffffea18
add byte [ebp + 0xf], dh