joyce8/EMBER2024-capa huggingface dataset:
Function at 0x680980
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x680ba3
sub esp, 0x7c
mov eax, 0
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov byte [esp + 0x17], 0
mov byte [esp + 0x84], 0
mov eax, dword [esp + 0x80]
test byte [eax], al
lea ecx, [eax + 0x68]
mov dword [esp + 0x2c], ecx
mov dword [esp], ecx
call fcn.0046aed0
lea eax, [0xbd5624]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x74], eax
mov byte [esp + 0x17], 1
mov eax, dword [esp + 0x80]
mov ecx, dword [eax + 0x74]
mov dword [esp + 0x28], ecx
lea edi, [esp + 0x44]
xor eax, eax
call fcn.00460de4
lea eax, [0xab2120]
mov dword [esp], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 4], ecx
lea ecx, [esp + 0x44]
mov dword [esp + 8], ecx
call fcn.0040d9f0
mov eax, 1
jmp 0x680a35
mov byte [esp + 0x16], al
lea ecx, [esp + 0x44]
mov dword [esp], ecx
call fcn.0040dc60
movzx eax, byte [esp + 0x16]
mov ecx, dword [esp + 0x44]
test ecx, ecx
je 0x680b7e
mov byte [esp + 0x16], al
mov eax, dword [ecx]
mov dword [esp + 0x24], eax
test byte [eax], al
nop
lea ecx, [eax + 0x40]
mov dword [esp], ecx
call fcn.00465b70
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, eax
and eax, 0xff
shr edx, 8
mov ebx, ecx
shl ecx, 0x18
or ecx, edx
shr ebx, 8
test eax, eax
je 0x680ad2
cmp eax, 2
je 0x680a82
xor eax, eax
jmp 0x680a20
test ecx, ecx
sete al
test ebx, ebx
sete cl
and ecx, eax
test cl, cl
jne 0x680a7e
mov eax, dword [esp + 0x24]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov ecx, dword [ecx + 0x10]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 0x80]
mov ecx, dword [eax + 0x74]
lea edx, [0xab2120]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x24]
mov dword [esp + 8], ecx
call fcn.0040f310
movzx eax, byte [esp + 0x16]
jmp 0x680a20
mov dword [esp + 0x20], ecx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], ebx
call fcn.0048c5d0
lea edi, [esp + 0x30]
mov esi, esp
call fcn.004612ce
nop
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
test ecx, 0x80000000
je 0x680b74
shl ecx, 1
mov edx, eax
shr eax, 0x1f
or eax, ecx
shl edx, 1
mov ecx, eax
shl eax, 1
shr edx, 0x1f
or eax, edx
mov edx, eax
add eax, 0xd7b17f80
shr ecx, 0x1f
add edx, 0xd7b17f80
adc ecx, 0xd
mov edx, eax
add eax, 0x886e08fb
mov ebx, dword [esp + 0x20]
cmp ebx, eax
setb al
add edx, 0x886e08fb
adc ecx, 0xfffffff1
mov edx, dword [esp + 0x18]
cmp edx, ecx
sete cl
xchg ebp, ebx
setl bl
xchg ebp, ebx
and eax, ecx
or ebp, eax
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x680b67
mov ecx, ebx
mov ebx, edx
mov eax, 2
jmp 0x680a79
mov eax, dword [esp + 0x1c]
mov ecx, ebx
mov ebx, edx
jmp 0x680a79
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
jmp 0x680b26
mov byte [esp + 0x84], al
mov byte [esp + 0x17], 0
mov eax, dword [esp + 0x74]
mov dword [esp], eax
call fcn.0046b290
add esp, 0x7c
ret
call fcn.0045f5f0
jmp fcn.00680980
Function at 0x6bb2f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x6bb50c
sub esp, 0x5c
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x60]
mov esi, dword [esp + 0x64]
mov edi, dword [esp + 0x6c]
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x84]
mov dword [esp + 0x54], eax
xor eax, eax
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x54]
jmp 0x6bb417
lea edx, [ecx + edi*8]
mov ebx, dword [edx]
mov edx, dword [edx + 4]
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x7c]
mov dword [esp + 0x18], edx
mov ebx, dword [esp + 0x80]
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
mov ebx, dword [0x10e5108]
mov edx, dword [0x10e510c]
mov eax, dword [0x10e5110]
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], edx
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x40], eax
call fcn.006bb700
mov eax, dword [esp + 0x50]
inc eax
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x48]
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x80]
mov esi, dword [esp + 0x7c]
mov edi, dword [esp + 0x60]
mov ebp, edi
mov esi, dword [esp + 0x64]
mov edi, dword [esp + 0x6c]
mov dword [esp + 0x50], eax
mov dword [esp + 0x78], ebx
mov dword [esp + 0x70], ecx
mov dword [esp + 0x74], edx
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x7c]
mov edx, dword [esp + 0x88]
lea ebx, [edx - 1]
mov edi, dword [esp + 0x50]
cmp edi, ebx
jge 0x6bb436
cmp edi, edx
jb 0x6bb33e
jmp 0x6bb502
cmp ebx, edx
jae 0x6bb4f9
lea ecx, [ecx + edx*8 - 8]
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [esp], ebp
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x40], eax
call fcn.006bb700
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], ecx
mov dword [esp + 0xb0], edx
add esp, 0x5c
ret
mov eax, ebx
mov ecx, edx
call fcn.00460bc0
mov eax, edi
mov ecx, edx
call fcn.00460bc0
nop
call fcn.0045f5f0
jmp fcn.006bb2f0
Function at 0x6bb520
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x6bb6f1
sub esp, 0x6c
lea ecx, [0xc8dd60]
mov edx, dword [esp + 0x70]
mov dword [edx + 0xc], ecx
mov ecx, dword [0x10fd360]
test ecx, ecx
jne 0x6bb6dd
mov eax, dword [esp + 0x80]
mov dword [edx + 0x10], eax
mov ecx, dword [eax + 0xc]
mov dword [esp + 0x58], ecx
mov eax, dword [eax + 0x10]
mov dword [esp + 0x50], eax
mov ebx, dword [edx]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.006bfef0
movzx eax, byte [esp + 0x18]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
test al, al
je 0x6bb654
mov eax, dword [esp + 0x70]
mov dword [esp], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], ebx
mov eax, dword [esp + 0x84]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x40], eax
call fcn.006bc310
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xac], edx
add esp, 0x6c
ret
mov dword [esp + 0x54], ebx
mov dword [esp + 0x60], edx
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0
mov eax, dword [esp + 0x58]
mov dword [esp], eax
mov ecx, dword [esp + 0x50]
mov dword [esp + 4], ecx
call fcn.00409480
mov eax, dword [esp + 8]
lea ecx, [0xaa9660]
mov dword [esp + 0x64], ecx
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x70]
mov dword [esp], eax
lea ecx, [0xba68b0]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1c
lea ecx, [esp + 0x64]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
call fcn.006b7e30
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x60]
mov ebx, dword [esp + 0x54]
jmp 0x6bb597
lea edi, [edx + 0x10]
mov eax, dword [esp + 0x80]
call fcn.00460b40
jmp 0x6bb55e
call fcn.0045f5f0
jmp fcn.006bb520
Function at 0x703710
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x70390e
sub esp, 0x54
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x7038f5
movzx eax, byte [esp + 0x58]
test al, al
je 0x7038cc
movzx eax, byte [esp + 0x59]
mov byte [esp + 0x2e], al
mov word [esp + 0x58], 0x101
nop
mov ecx, dword [esp + 0x70]
mov edx, dword [ecx + 0x38]
mov ebx, dword [esp + 0x74]
mov dword [esp], ebx
call edx
mov eax, dword [esp + 4]
test eax, eax
je 0x703795
mov ecx, dword [eax + 0x10]
test ecx, ecx
je 0x703795
movzx ecx, byte [esp + 0x5a]
test cl, cl
je 0x70384f
mov ecx, dword [eax]
test ecx, 2
sete cl
and ecx, 1
test cl, cl
je 0x70384f
mov edi, esp
lea esi, [esp + 0x58]
call fcn.004612e2
mov eax, dword [esp + 0x64]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x1c], ecx
call fcn.00703990
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
xor edx, edx
test eax, eax
jne 0x70383c
movzx eax, byte [esp + 0x2e]
test al, al
je 0x7037ff
mov byte [esp + 0x78], dl
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
add esp, 0x54
ret
test dl, 1
jne 0x7037e4
mov byte [esp + 0x2f], dl
mov eax, dword [esp + 0x70]
mov dword [esp], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 4], eax
call fcn.007032a0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
movzx edx, byte [esp + 0x2f]
mov byte [esp + 0x78], dl
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x54
ret
mov byte [esp + 0x78], dl
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x54
ret
mov dword [esp + 0x30], eax
lea edi, [esp + 0x34]
xor eax, eax
call fcn.00460de8
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x34], ecx
mov ebx, dword [esp + 0x74]
mov dword [esp + 0x38], ebx
mov ebp, dword [esp + 0x64]
mov dword [esp + 0x3c], ebp
mov ebp, dword [esp + 0x68]
mov dword [esp + 0x40], ebp
mov ebp, dword [esp + 0x6c]
mov dword [esp + 0x44], ebp
mov ebp, dword [esp + 0x5c]
mov ebx, dword [esp + 0x60]
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x50], ebx
movzx ebx, byte [esp + 0x5a]
test bl, bl
je 0x7038a4
mov byte [esp + 0x48], 1
mov eax, dword [esp + 0x30]
mov edx, dword [eax + 0x10]
mov edi, esp
lea esi, [esp + 0x34]
call fcn.004612b0
mov eax, dword [edx]
call eax
movzx edx, byte [esp + 0x20]
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
jmp 0x7037d7
mov eax, dword [esp + 0x70]
mov ecx, dword [eax + 0x24]
mov edx, dword [esp + 0x74]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0070e750
jmp 0x703742
mov eax, dword [0x10e35f8]
lea ecx, [0xc87460]
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x60], eax
jmp 0x703735
call fcn.0045f5f0
jmp fcn.00703710
Function at 0x7ee150
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x7ee299
sub esp, 0x58
lea edi, [esp + 4]
mov dword [esp + 0x44], edi
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax + 0x3c]
mov dword [esp + 0x40], ecx
mov eax, dword [eax + 0x40]
mov dword [esp + 0x34], eax
xor edx, edx
jmp 0x7ee19a
mov ebx, dword [esp + 0x30]
lea edx, [ebx + 1]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x40]
mov edi, dword [esp + 0x44]
cmp edx, eax
jge 0x7ee295
mov dword [esp + 0x30], edx
mov eax, dword [ecx + edx*4]
mov dword [esp + 0x38], eax
mov ebx, dword [eax]
mov ebp, dword [eax + 4]
mov ebx, dword [ebx + 0x1c]
mov dword [esp], ebp
lea esi, [esp + 0x60]
call fcn.004612ce
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x18], ecx
mov ebp, dword [esp + 0x78]
mov dword [esp + 0x1c], ebp
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x20], eax
call ebx
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
test eax, eax
je 0x7ee187
mov dword [esp + 0x2c], eax
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x48], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
mov eax, dword [esp + 0x38]
mov ecx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00409480
mov eax, dword [esp + 8]
lea ecx, [0xaa9660]
mov dword [esp + 0x48], ecx
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x7ee242
mov eax, dword [eax + 4]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x54], eax
mov eax, dword [0x10e37d0]
lea ecx, [0xc836e0]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [0xbb6814]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x2a
lea edx, [esp + 0x48]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], 2
mov dword [esp + 0x18], 2
call fcn.004eea60
jmp 0x7ee187
add esp, 0x58
ret
call fcn.0045f5f0
jmp fcn.007ee150
Function at 0x87a1b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x87a3c0
sub esp, 0x5c
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov eax, dword [esp + 0x60]
mov dword [esp], eax
lea edi, [esp + 4]
mov dword [esp + 0x38], edi
lea esi, [esp + 0x64]
call fcn.004612e2
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x10], ecx
call fcn.0087a3d0
movzx eax, byte [esp + 0x20]
lea esi, [esp + 0x14]
mov dword [esp + 0x34], esi
lea edi, [esp + 0x50]
call fcn.004612e2
test al, al
je 0x87a36c
mov eax, 1
test al, al
je 0x87a23e
lea edi, [esp + 0x74]
lea esi, [esp + 0x50]
call fcn.004612e2
add esp, 0x5c
ret
cmp byte [esp + 0x50], 0x18
je 0x87a22d
mov eax, dword [esp + 0x70]
mov ecx, dword [eax + 8]
mov ecx, dword [ecx + 0x10]
mov dword [esp + 0x30], ecx
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.00409480
mov eax, dword [esp + 8]
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], 0
lea ecx, [0xaa9660]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], eax
lea eax, [0xbb8573]
mov dword [esp], eax
mov dword [esp + 4], 0x2d
lea eax, [esp + 0x3c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004eeb30
mov eax, dword [esp + 0x14]
mov dword [esp + 0x2c], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x28], ecx
lea edx, [0xb26300]
mov dword [esp], edx
call fcn.0040bd00
mov eax, dword [esp + 4]
mov dword [eax], 6
lea ecx, [0xc8dde0]
mov dword [eax + 4], ecx
mov ecx, dword [0x10fd360]
test ecx, ecx
jne 0x87a35a
mov ecx, dword [esp + 0x30]
mov dword [eax + 8], ecx
mov dword [eax + 0x10], 0
mov dword [eax + 0xc], 0
mov dword [eax + 0x14], 0
mov ecx, dword [esp + 0x28]
mov dword [eax + 0x1c], ecx
mov ecx, dword [0x10fd360]
test ecx, ecx
jne 0x87a348
mov ecx, dword [esp + 0x2c]
mov dword [eax + 0x18], ecx
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov byte [esp + 0x74], 0x18
mov dword [esp + 0x7c], eax
add esp, 0x5c
ret
lea edi, [eax + 0x18]
mov ecx, eax
mov eax, dword [esp + 0x2c]
call fcn.00460b40
mov eax, ecx
jmp 0x87a323
lea edi, [eax + 8]
mov ecx, eax
mov eax, dword [esp + 0x30]
call fcn.00460b40
mov eax, ecx
jmp 0x87a2f6
mov byte [esp + 0x27], al
mov eax, dword [esp + 0x60]
mov dword [esp], eax
mov edi, dword [esp + 0x38]
lea esi, [esp + 0x50]
call fcn.004612e2
mov eax, dword [esp + 0x70]
mov dword [esp + 0x10], eax
call fcn.0087a3d0
movzx eax, byte [esp + 0x20]
lea edi, [esp + 0x44]
mov esi, dword [esp + 0x34]
call fcn.004612e2
test al, al
je 0x87a3b4
lea edi, [esp + 0x50]
lea esi, [esp + 0x44]
call fcn.004612e2
movzx ecx, byte [esp + 0x27]
or eax, ecx
jmp 0x87a229
call fcn.0045f5f0
jmp fcn.0087a1b0
Function at 0x8e5070
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x8e5174
sub esp, 0xc
mov edx, dword [esp + 0x10]
dec edx
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
jmp 0x8e511c
mov edx, ecx
mov esi, dword [esp + 8]
mov eax, edi
test eax, eax
jle 0x8e50e8
lea edi, [eax - 1]
cmp edi, ebp
jae 0x8e5163
mov ecx, edx
movzx edx, byte [ebx + eax - 1]
cmp eax, ebp
jae 0x8e515c
movzx esi, byte [ebx + eax]
xchg esi, eax
shr al, 1
xchg esi, eax
xchg esi, ecx
mov byte [ebx + eax], cl
xchg esi, ecx
test edx, 1
je 0x8e509b
xchg esi, eax
movzx edx, al
xchg esi, eax
or edx, 0x80
mov byte [ebx + eax], dl
jmp 0x8e509b
movzx edi, byte [ebx]
xchg edi, eax
shr al, 1
xchg edi, eax
xchg edi, eax
mov byte [ebx], al
xchg edi, eax
and esi, 1
mov eax, edx
shr edx, 0x1f
add edx, eax
sar edx, 1
shl edx, 1
mov ecx, eax
sub eax, edx
xor esi, eax
cmp esi, 1
jne 0x8e5135
xchg edi, eax
movzx edx, al
xchg edi, eax
or edx, 0x80
mov byte [ebx], dl
lea edx, [ecx - 1]
test edx, edx
jl 0x8e5148
lea eax, [ebp - 1]
cmp eax, ebp
jae 0x8e516c
movzx esi, byte [ebp + ebx - 1]
mov dword [esp + 8], esi
jmp 0x8e50a3
xchg edi, eax
movzx edx, al
xchg edi, eax
shl edx, 1
and edx, 0xff
sar edx, 1
mov byte [ebx], dl
jmp 0x8e5119
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebp
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x28], eax
add esp, 0xc
ret
mov ecx, ebp
call fcn.00460bc0
mov eax, edi
mov ecx, ebp
call fcn.00460bc0
mov ecx, ebp
call fcn.00460bc0
nop
call fcn.0045f5f0
jmp fcn.008e5070
Function at 0x94b450
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x94b620
sub esp, 0x74
lea eax, [0xaa8120]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00446f30
mov eax, dword [esp + 0xc]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x78]
mov edx, dword [ecx + 0x18]
lea edi, [esp + 0x44]
xor eax, eax
call fcn.00460de4
lea eax, [0xab29e0]
mov dword [esp], eax
mov dword [esp + 4], edx
lea ecx, [esp + 0x44]
mov dword [esp + 8], ecx
call fcn.0040d9f0
xor eax, eax
xor ecx, ecx
mov edx, dword [esp + 0x40]
jmp 0x94b4e9
mov dword [esp + 0x38], edx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x28], ecx
lea ebx, [esp + 0x44]
mov dword [esp], ebx
call fcn.0040dc60
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x44]
test ebx, ebx
je 0x94b604
mov dword [esp + 0x38], edx
mov dword [esp + 0x2c], ecx
mov ebp, dword [esp + 0x48]
mov esi, dword [ebx + 4]
mov edi, dword [esp + 0x80]
cmp edi, esi
sete dl
mov ebx, dword [ebx]
mov ecx, dword [esp + 0x7c]
cmp ebx, ecx
setbe cl
cmp edi, esi
xchg edi, ebx
seta bl
xchg edi, ebx
mov ebp, dword [ebp]
and edx, ecx
or edi, edx
xchg edi, eax
test al, al
xchg edi, eax
je 0x94b5f5
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], esi
mov ecx, dword [ebp + 4]
lea edx, [eax + ecx]
mov dword [esp + 0x28], edx
mov ebp, dword [ebp]
mov edi, dword [esp + 0x2c]
cmp edx, edi
ja 0x94b5aa
mov dword [esp + 0x2c], edi
mov edx, dword [esp + 0x38]
lea eax, [edx + eax*8]
mov dword [esp], eax
mov dword [esp + 4], ebp
shl ecx, 3
mov dword [esp + 8], ecx
call fcn.004614f0
mov eax, dword [esp + 0x78]
mov ecx, dword [eax + 0x18]
lea edx, [0xab29e0]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xc], ecx
call fcn.0040ffd0
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x38]
jmp 0x94b4c5
mov dword [esp + 0x34], eax
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x30], ecx
lea ecx, [0xaa8120]
mov dword [esp], ecx
mov ebx, dword [esp + 0x38]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], edx
call fcn.00447080
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x30]
mov ebp, dword [esp + 0x3c]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x34]
jmp 0x94b552
mov ecx, eax
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x2c]
jmp 0x94b4c5
mov ebx, dword [esp + 0x78]
mov ebx, dword [ebx + 0x34]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov eax, dword [ebx]
mov edx, ebx
call eax
add esp, 0x74
ret
call fcn.0045f5f0
jmp fcn.0094b450
Function at 0x962670
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x9628e2
sub esp, 0x60
movzx eax, byte [esp + 0x64]
test al, al
je 0x9626ac
mov eax, dword [esp + 0x6c]
test eax, eax
jne 0x9626ac
lea eax, [0xb8e0a0]
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], 2
mov eax, dword [esp + 0x74]
test eax, eax
je 0x9628c9
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x6c]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0095a840
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
test edx, edx
jne 0x962896
mov ecx, dword [esp + 0x7c]
test ecx, ecx
je 0x962848
lea edi, [esp + 0x44]
mov edx, eax
xor eax, eax
call fcn.00460de9
mov dword [esp + 0x44], edx
lea edi, [esp + 0x48]
lea esi, [esp + 0x64]
call fcn.004612c4
mov ecx, dword [esp + 0x7c]
mov edx, dword [ecx + 0x10]
mov ebx, dword [esp + 0x80]
mov dword [esp], ebx
call edx
mov ecx, dword [esp + 4]
mov dword [esp + 0x3c], ecx
mov edx, dword [esp + 8]
mov edi, esp
lea esi, [esp + 0x44]
call fcn.004612ba
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
call fcn.00962bb0
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
test ecx, ecx
jne 0x962815
movzx eax, byte [esp + 0x70]
test al, al
je 0x9627aa
mov eax, dword [esp + 0x44]
mov ecx, dword [eax + 0x18]
mov edx, dword [eax + 0x1c]
mov eax, dword [eax + 0x20]
mov dword [esp + 0x84], ecx
mov dword [esp + 0x88], edx
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 0
add esp, 0x60
ret
mov eax, dword [esp + 0x44]
mov ecx, dword [eax + 0x18]
mov dword [esp + 0x40], ecx
mov edx, dword [eax + 0x1c]
mov dword [esp + 0x34], edx
mov eax, dword [eax + 0x20]
mov dword [esp + 0x38], eax
mov ebx, dword [esp + 0x7c]
mov dword [esp], ebx
mov ebx, dword [esp + 0x80]
mov dword [esp + 4], ebx
call fcn.00703230
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x40]
mov dword [esp + 0x84], edx
mov edx, dword [esp + 0x34]
mov dword [esp + 0x88], edx
mov edx, dword [esp + 0x38]
mov dword [esp + 0x8c], edx
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], ecx
add esp, 0x60
ret
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x90], ecx
mov dword [esp + 0x94], edx
add esp, 0x60
ret
lea eax, [0xa93440]
mov dword [esp], eax
call fcn.0040bd00
mov eax, dword [esp + 4]
mov word [eax], 0x7d7b
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], 2
mov dword [esp + 0x8c], 2
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 0
add esp, 0x60
ret
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x90], edx
mov dword [esp + 0x94], ecx
add esp, 0x60
ret
mov eax, dword [0x10e35f8]
lea ecx, [0xc8ad60]
mov dword [esp + 0x74], ecx
mov dword [esp + 0x78], eax
jmp 0x9626b8
call fcn.0045f5f0
jmp fcn.00962670