joyce8/EMBER2024-capa huggingface dataset:
Function at 0x100c9a93
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
or ebx, 0xfa09
and ebx, 0xc38a
xor ebx, 0x2090
pop ebx
push edi
jmp 0x100c9a18
jmp 0x100c9a1f
sub edi, 0x1173
sub edi, 0xd6cd
int 0xd6
add byte [eax], al
pop edi
lea eax, [ebp - 0x1790]
mov dword [ebp - 0xccc], eax
mov ecx, dword [ebp - 0x518]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcc8], edx
xor eax, eax
mov word [ebp - 0x220], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push edi
xor edi, 0xedfc
and edi, 0xb7db
add edi, 0x18283
sub edi, 0x178ee
pop edi
push edi
push ecx
add esp, 4
sub edi, 0x1381
xor edi, 0x1500
xor edi, 0xdb2c
pop edi
mov edx, dword [ebp - 0xcc8]
mov ax, word [edx]
mov word [ebp - 0x1042], ax
test dword [esi - 0x74000011], edi
lea edi, [eax]
invalid
invalid
inc dword [ebx - 0x7276fd3f]
cmp bl, dh
invalid
jmp dword [esi - 0x75]
xchg ebp, eax
mov esi, 0x66ffffef
mov dword [ebp - 0x220], edx
mov eax, dword [ebp - 0xccc]
mov cx, word [eax]
mov word [ebp - 0x1044], cx
mov edx, dword [ebp - 0xccc]
add edx, 2
mov dword [ebp - 0xccc], edx
mov ax, word [ebp - 0x1044]
mov word [ebp - 0x3c], ax
push edi
or edi, 0xdc1d
and edi, 0xe081
sub edi, 0xfde8
sub edi, 0x3636
pop edi
push edi
push eax
add esp, 4
or edi, 0x35bd
push esi
add esp, 4
call 0x100c9beb
add byte [edi + 0x40], cl
xor eax, 0x43364b33
add esp, 4
or esi, 0x70ad
pop esi
push ebx
xor ebx, 0x149d7
and ebx, 0x14e64
pop ebx
mov eax, dword [ebp - 0x518]
mov ecx, dword [eax]
mov dword [ebp - 0x518], ecx
mov edx, dword [ebp - 0x518]
cmp edx, dword [ebp - 0xcd0]
je 0x100c9c2f
mov eax, dword [ebp - 0x518]
cmp dword [eax + 0x30], 0
jne 0x100c99fa
mov dword [ebp - 0x774], 0
push edx
jmp 0x100c9c3f
jmp 0x100c9c46
add edx, 0xe714
pop edx
push ecx
add ecx, 0x6396
and ecx, 0xc18
pop ecx
push ebx
add ebx, 0x1200c
pop ebx
push ecx
and ecx, 0x91f0
pop ecx
cmp dword [ebp - 0x774], 0
jne 0x100c9cb5
push ebx
call 0x100c9c82
add byte [esi + 0x44], cl
dec ebx
inc edx
aas
aas
cmp eax, 0x8104c483
inc ebp
inc ecx
add dword [eax], eax
pop ebx
push edi
jmp 0x100c9c93
add edi, 0xc2bf
xor edi, 0x346
add edi, 0x72a4
pop edi
mov dword [ebp - 0xab4], 0
add byte [eax], al
add byte [eax], al
jmp 0x100ca7dd
push esi
push edx
add esp, 4
jmp 0x100c9cc0
sub esi, 0x12f4e
or esi, 0xd8df
pop esi
push edx
xor edx, 0xdee3
add edx, 0xdd4e
pop edx
push ecx
push edx
add esp, 4
sub ecx, 0xa79e
pop ecx
mov ecx, dword [ebp - 0x774]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3a4], edx
mov dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x166c], eax
cmp dword [ebp - 0x166c], 0
jne 0x100c9d26
invalid
lea edi, [eax + edi*8 - 1]
Function at 0x100c9b04
Capabilities:
Resolve function by parsing pe exports

Disassembly:
xor edi, 0x1f64
sub edi, 0xe70e
pop edi
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x100c9b2e
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1668], edx
jmp 0x100c9b88
movzx ecx, word [ebp - 0x220]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x100c9a56
movzx eax, word [ebp - 0x220]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x100c9a56
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x100c9b72
mov dword [ebp - 0x1624], 0xffffffff
jmp 0x100c9b7c
mov dword [ebp - 0x1624], 1
mov ecx, dword [ebp - 0x1624]
mov dword [ebp - 0x1668], ecx
cmp dword [ebp - 0x1668], 0
jne 0x100c9bd1
push eax
push eax
add esp, 4
jmp 0x100c9b9c
call fcn.100c9ba9
add byte [edi + ecx*2 + 0x46], al
dec ecx
xor eax, 0xc4835039
add esp, 4
add eax, 0x17622
pop eax
push ecx
or ecx, 0x169bd
pop ecx
push edx
add edx, 0xb9fe
pop edx
mov edx, dword [ebp - 0x518]
mov dword [ebp - 0x774], edx
jmp 0x100c9c39
push esi
xor esi, 0x151b9
pop esi
push esi
Function at 0x100c9ba9
Capabilities:
Resolve function by parsing pe exports

Disassembly:
xor edi, 0x1f64
sub edi, 0xe70e
pop edi
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x100c9b2e
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1668], edx
jmp 0x100c9b88
movzx ecx, word [ebp - 0x220]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x100c9a56
movzx eax, word [ebp - 0x220]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x100c9a56
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x100c9b72
mov dword [ebp - 0x1624], 0xffffffff
jmp 0x100c9b7c
mov dword [ebp - 0x1624], 1
mov ecx, dword [ebp - 0x1624]
mov dword [ebp - 0x1668], ecx
cmp dword [ebp - 0x1668], 0
jne 0x100c9bd1
push eax
push eax
add esp, 4
jmp 0x100c9b9c
call fcn.100c9ba9
add byte [edi + ecx*2 + 0x46], al
dec ecx
xor eax, 0xc4835039
add esp, 4
add eax, 0x17622
pop eax
push ecx
or ecx, 0x169bd
pop ecx
push edx
add edx, 0xb9fe
pop edx
mov edx, dword [ebp - 0x518]
mov dword [ebp - 0x774], edx
jmp 0x100c9c39
push esi
xor esi, 0x151b9
pop esi
push esi
Function at 0x100c9bda
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
or ebx, 0xfa09
and ebx, 0xc38a
xor ebx, 0x2090
pop ebx
push edi
jmp 0x100c9a18
jmp 0x100c9a1f
sub edi, 0x1173
sub edi, 0xd6cd
int 0xd6
add byte [eax], al
pop edi
lea eax, [ebp - 0x1790]
mov dword [ebp - 0xccc], eax
mov ecx, dword [ebp - 0x518]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcc8], edx
xor eax, eax
mov word [ebp - 0x220], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push edi
xor edi, 0xedfc
and edi, 0xb7db
add edi, 0x18283
sub edi, 0x178ee
pop edi
push edi
push ecx
add esp, 4
sub edi, 0x1381
xor edi, 0x1500
xor edi, 0xdb2c
pop edi
mov edx, dword [ebp - 0xcc8]
mov ax, word [edx]
mov word [ebp - 0x1042], ax
test dword [esi - 0x74000011], edi
lea edi, [eax]
invalid
invalid
inc dword [ebx - 0x7276fd3f]
cmp bl, dh
invalid
jmp dword [esi - 0x75]
xchg ebp, eax
mov esi, 0x66ffffef
mov dword [ebp - 0x220], edx
mov eax, dword [ebp - 0xccc]
mov cx, word [eax]
mov word [ebp - 0x1044], cx
mov edx, dword [ebp - 0xccc]
add edx, 2
mov dword [ebp - 0xccc], edx
mov ax, word [ebp - 0x1044]
mov word [ebp - 0x3c], ax
push edi
or edi, 0xdc1d
and edi, 0xe081
sub edi, 0xfde8
sub edi, 0x3636
pop edi
push edi
push eax
add esp, 4
or edi, 0x35bd
push esi
add esp, 4
call 0x100c9beb
add byte [edi + 0x40], cl
xor eax, 0x43364b33
add esp, 4
or esi, 0x70ad
pop esi
push ebx
xor ebx, 0x149d7
and ebx, 0x14e64
pop ebx
mov eax, dword [ebp - 0x518]
mov ecx, dword [eax]
mov dword [ebp - 0x518], ecx
mov edx, dword [ebp - 0x518]
cmp edx, dword [ebp - 0xcd0]
je 0x100c9c2f
mov eax, dword [ebp - 0x518]
cmp dword [eax + 0x30], 0
jne 0x100c99fa
mov dword [ebp - 0x774], 0
push edx
jmp 0x100c9c3f
jmp 0x100c9c46
add edx, 0xe714
pop edx
push ecx
add ecx, 0x6396
and ecx, 0xc18
pop ecx
push ebx
add ebx, 0x1200c
pop ebx
push ecx
and ecx, 0x91f0
pop ecx
cmp dword [ebp - 0x774], 0
jne 0x100c9cb5
push ebx
call 0x100c9c82
add byte [esi + 0x44], cl
dec ebx
inc edx
aas
aas
cmp eax, 0x8104c483
inc ebp
inc ecx
add dword [eax], eax
pop ebx
push edi
jmp 0x100c9c93
add edi, 0xc2bf
xor edi, 0x346
add edi, 0x72a4
pop edi
mov dword [ebp - 0xab4], 0
add byte [eax], al
add byte [eax], al
jmp 0x100ca7dd
push esi
push edx
add esp, 4
jmp 0x100c9cc0
sub esi, 0x12f4e
or esi, 0xd8df
pop esi
push edx
xor edx, 0xdee3
add edx, 0xdd4e
pop edx
push ecx
push edx
add esp, 4
sub ecx, 0xa79e
pop ecx
mov ecx, dword [ebp - 0x774]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3a4], edx
mov dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x166c], eax
cmp dword [ebp - 0x166c], 0
jne 0x100c9d26
invalid
lea edi, [eax + edi*8 - 1]
Function at 0x100c9beb
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
or ebx, 0xfa09
and ebx, 0xc38a
xor ebx, 0x2090
pop ebx
push edi
jmp 0x100c9a18
jmp 0x100c9a1f
sub edi, 0x1173
sub edi, 0xd6cd
int 0xd6
add byte [eax], al
pop edi
lea eax, [ebp - 0x1790]
mov dword [ebp - 0xccc], eax
mov ecx, dword [ebp - 0x518]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcc8], edx
xor eax, eax
mov word [ebp - 0x220], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push edi
xor edi, 0xedfc
and edi, 0xb7db
add edi, 0x18283
sub edi, 0x178ee
pop edi
push edi
push ecx
add esp, 4
sub edi, 0x1381
xor edi, 0x1500
xor edi, 0xdb2c
pop edi
mov edx, dword [ebp - 0xcc8]
mov ax, word [edx]
mov word [ebp - 0x1042], ax
test dword [esi - 0x74000011], edi
lea edi, [eax]
invalid
invalid
inc dword [ebx - 0x7276fd3f]
cmp bl, dh
invalid
jmp dword [esi - 0x75]
xchg ebp, eax
mov esi, 0x66ffffef
mov dword [ebp - 0x220], edx
mov eax, dword [ebp - 0xccc]
mov cx, word [eax]
mov word [ebp - 0x1044], cx
mov edx, dword [ebp - 0xccc]
add edx, 2
mov dword [ebp - 0xccc], edx
mov ax, word [ebp - 0x1044]
mov word [ebp - 0x3c], ax
push edi
or edi, 0xdc1d
and edi, 0xe081
sub edi, 0xfde8
sub edi, 0x3636
pop edi
push edi
push eax
add esp, 4
or edi, 0x35bd
push esi
add esp, 4
call 0x100c9beb
add byte [edi + 0x40], cl
xor eax, 0x43364b33
add esp, 4
or esi, 0x70ad
pop esi
push ebx
xor ebx, 0x149d7
and ebx, 0x14e64
pop ebx
mov eax, dword [ebp - 0x518]
mov ecx, dword [eax]
mov dword [ebp - 0x518], ecx
mov edx, dword [ebp - 0x518]
cmp edx, dword [ebp - 0xcd0]
je 0x100c9c2f
mov eax, dword [ebp - 0x518]
cmp dword [eax + 0x30], 0
jne 0x100c99fa
mov dword [ebp - 0x774], 0
push edx
jmp 0x100c9c3f
jmp 0x100c9c46
add edx, 0xe714
pop edx
push ecx
add ecx, 0x6396
and ecx, 0xc18
pop ecx
push ebx
add ebx, 0x1200c
pop ebx
push ecx
and ecx, 0x91f0
pop ecx
cmp dword [ebp - 0x774], 0
jne 0x100c9cb5
push ebx
call 0x100c9c82
add byte [esi + 0x44], cl
dec ebx
inc edx
aas
aas
cmp eax, 0x8104c483
inc ebp
inc ecx
add dword [eax], eax
pop ebx
push edi
jmp 0x100c9c93
add edi, 0xc2bf
xor edi, 0x346
add edi, 0x72a4
pop edi
mov dword [ebp - 0xab4], 0
add byte [eax], al
add byte [eax], al
jmp 0x100ca7dd
push esi
push edx
add esp, 4
jmp 0x100c9cc0
sub esi, 0x12f4e
or esi, 0xd8df
pop esi
push edx
xor edx, 0xdee3
add edx, 0xdd4e
pop edx
push ecx
push edx
add esp, 4
sub ecx, 0xa79e
pop ecx
mov ecx, dword [ebp - 0x774]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3a4], edx
mov dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x166c], eax
cmp dword [ebp - 0x166c], 0
jne 0x100c9d26
invalid
lea edi, [eax + edi*8 - 1]

Function at 0x100c9c43
Capabilities:
Resolve function by parsing pe exports

Disassembly:
xor eax, 0xc2814647
adc al, 0xe7
add byte [eax], al
Function at 0x100c9cac
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
or ebx, 0xfa09
and ebx, 0xc38a
xor ebx, 0x2090
pop ebx
push edi
jmp 0x100c9a18
jmp 0x100c9a1f
sub edi, 0x1173
sub edi, 0xd6cd
int 0xd6
add byte [eax], al
pop edi
lea eax, [ebp - 0x1790]
mov dword [ebp - 0xccc], eax
mov ecx, dword [ebp - 0x518]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcc8], edx
xor eax, eax
mov word [ebp - 0x220], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push edi
xor edi, 0xedfc
and edi, 0xb7db
add edi, 0x18283
sub edi, 0x178ee
pop edi
push edi
push ecx
add esp, 4
sub edi, 0x1381
xor edi, 0x1500
xor edi, 0xdb2c
pop edi
mov edx, dword [ebp - 0xcc8]
mov ax, word [edx]
mov word [ebp - 0x1042], ax
test dword [esi - 0x74000011], edi
lea edi, [eax]
invalid
invalid
inc dword [ebx - 0x7276fd3f]
cmp bl, dh
invalid
jmp dword [esi - 0x75]
xchg ebp, eax
mov esi, 0x66ffffef
mov dword [ebp - 0x220], edx
mov eax, dword [ebp - 0xccc]
mov cx, word [eax]
mov word [ebp - 0x1044], cx
mov edx, dword [ebp - 0xccc]
add edx, 2
mov dword [ebp - 0xccc], edx
mov ax, word [ebp - 0x1044]
mov word [ebp - 0x3c], ax
push edi
or edi, 0xdc1d
and edi, 0xe081
sub edi, 0xfde8
sub edi, 0x3636
pop edi
push edi
push eax
add esp, 4
or edi, 0x35bd
push esi
add esp, 4
call 0x100c9beb
add byte [edi + 0x40], cl
xor eax, 0x43364b33
add esp, 4
or esi, 0x70ad
pop esi
push ebx
xor ebx, 0x149d7
and ebx, 0x14e64
pop ebx
mov eax, dword [ebp - 0x518]
mov ecx, dword [eax]
mov dword [ebp - 0x518], ecx
mov edx, dword [ebp - 0x518]
cmp edx, dword [ebp - 0xcd0]
je 0x100c9c2f
mov eax, dword [ebp - 0x518]
cmp dword [eax + 0x30], 0
jne 0x100c99fa
mov dword [ebp - 0x774], 0
push edx
jmp 0x100c9c3f
jmp 0x100c9c46
add edx, 0xe714
pop edx
push ecx
add ecx, 0x6396
and ecx, 0xc18
pop ecx
push ebx
add ebx, 0x1200c
pop ebx
push ecx
and ecx, 0x91f0
pop ecx
cmp dword [ebp - 0x774], 0
jne 0x100c9cb5
push ebx
call 0x100c9c82
add byte [esi + 0x44], cl
dec ebx
inc edx
aas
aas
cmp eax, 0x8104c483
inc ebp
inc ecx
add dword [eax], eax
pop ebx
push edi
jmp 0x100c9c93
add edi, 0xc2bf
xor edi, 0x346
add edi, 0x72a4
pop edi
mov dword [ebp - 0xab4], 0
add byte [eax], al
add byte [eax], al
jmp 0x100ca7dd
push esi
push edx
add esp, 4
jmp 0x100c9cc0
sub esi, 0x12f4e
or esi, 0xd8df
pop esi
push edx
xor edx, 0xdee3
add edx, 0xdd4e
pop edx
push ecx
push edx
add esp, 4
sub ecx, 0xa79e
pop ecx
mov ecx, dword [ebp - 0x774]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3a4], edx
mov dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x166c], eax
cmp dword [ebp - 0x166c], 0
jne 0x100c9d26
invalid
lea edi, [eax + edi*8 - 1]
Function at 0x100c9e5c
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x77c]
add eax, 1
mov dword [ebp - 0x77c], eax
mov ecx, dword [ebp - 0x778]
mov edx, dword [ebp - 0x77c]
cmp edx, dword [ecx + 0x18]
jae 0x100ca00b
mov eax, dword [ebp - 0x77c]
mov ecx, dword [ebp - 0x19a4]
mov edx, dword [ebp - 0x3a4]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x780], edx
mov eax, dword [ebp - 0x77c]
mov ecx, dword [ebp - 0x19a8]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x19ac]
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x19b0], ecx
mov dword [ebp - 0x1a0], 0
add byte [eax], al
add byte [eax], al
jmp 0x100c9e6f
mov edx, dword [ebp - 0x1a0]
add edx, 1
mov dword [ebp - 0x1a0], edx
mov eax, dword [ebp - 0x780]
add eax, dword [ebp - 0x1a0]
movsx ecx, byte [eax]
test ecx, ecx
je 0x100c9f21
mov edx, dword [ebp - 0x1a0]
movsx eax, byte [ebp + edx - 0x8a4]
test eax, eax
je 0x100c9f21
push eax
xor eax, 0xcf58
call 0x100c9eb0
add byte [ebx], bh
aaa
dec eax
aaa
xor eax, 0x4c48343
or eax, 0xb201
pop eax
push ebx
sub ebx, 0xc03e
sub ebx, 0x621b
xor ebx, 0x15fe2
add dword [eax], eax
pop ebx
mov ecx, dword [ebp - 0x780]
add ecx, dword [ebp - 0x1a0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1a0]
movsx ecx, byte [ebp + eax - 0x8a4]
cmp edx, ecx
je 0x100c9f13
mov edx, dword [ebp - 0x780]
add edx, dword [ebp - 0x1a0]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1a0]
movsx edx, byte [ebp + ecx - 0x8a4]
cmp eax, edx
jne 0x100c9f1a
jmp 0x100c9e60
jmp 0x100c9f21
push ebx
sub ebx, 0xe0c9
pop ebx
push esi
push eax
add esp, 4
or esi, 0x93d7
pop esi
push edx
sub edx, 0xd0d0
pop edx
push esi
xor esi, 0x12e14
not byte [esi + ebp]
add dword [eax], eax
xor esi, 0x2dc
pop esi
push eax
xor eax, 0x171db
pop eax
mov eax, dword [ebp - 0x780]
add eax, dword [ebp - 0x1a0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1a0]
movsx eax, byte [ebp + edx - 0x8a4]
cmp ecx, eax
jne 0x100c9f80
mov dword [ebp - 0xcd4], 0
jmp 0x100c9fef
push edi
push eax
add esp, 4
xor edi, 0x9d08
xor edi, 0x198a
add edi, 0x424a
pop edi
push ecx
xor ecx, 0x18631
or ecx, 0x86c1
pop ecx
push ebx
push eax
add esp, 4
and ebx, 0x17062
pop ebx
invalid
Function at 0x100c9eb0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x77c]
add eax, 1
mov dword [ebp - 0x77c], eax
mov ecx, dword [ebp - 0x778]
mov edx, dword [ebp - 0x77c]
cmp edx, dword [ecx + 0x18]
jae 0x100ca00b
mov eax, dword [ebp - 0x77c]
mov ecx, dword [ebp - 0x19a4]
mov edx, dword [ebp - 0x3a4]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x780], edx
mov eax, dword [ebp - 0x77c]
mov ecx, dword [ebp - 0x19a8]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x19ac]
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x19b0], ecx
mov dword [ebp - 0x1a0], 0
add byte [eax], al
add byte [eax], al
jmp 0x100c9e6f
mov edx, dword [ebp - 0x1a0]
add edx, 1
mov dword [ebp - 0x1a0], edx
mov eax, dword [ebp - 0x780]
add eax, dword [ebp - 0x1a0]
movsx ecx, byte [eax]
test ecx, ecx
je 0x100c9f21
mov edx, dword [ebp - 0x1a0]
movsx eax, byte [ebp + edx - 0x8a4]
test eax, eax
je 0x100c9f21
push eax
xor eax, 0xcf58
call 0x100c9eb0
add byte [ebx], bh
aaa
dec eax
aaa
xor eax, 0x4c48343
or eax, 0xb201
pop eax
push ebx
sub ebx, 0xc03e
sub ebx, 0x621b
xor ebx, 0x15fe2
add dword [eax], eax
pop ebx
mov ecx, dword [ebp - 0x780]
add ecx, dword [ebp - 0x1a0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1a0]
movsx ecx, byte [ebp + eax - 0x8a4]
cmp edx, ecx
je 0x100c9f13
mov edx, dword [ebp - 0x780]
add edx, dword [ebp - 0x1a0]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1a0]
movsx edx, byte [ebp + ecx - 0x8a4]
cmp eax, edx
jne 0x100c9f1a
jmp 0x100c9e60
jmp 0x100c9f21
push ebx
sub ebx, 0xe0c9
pop ebx
push esi
push eax
add esp, 4
or esi, 0x93d7
pop esi
push edx
sub edx, 0xd0d0
pop edx
push esi
xor esi, 0x12e14
not byte [esi + ebp]
add dword [eax], eax
xor esi, 0x2dc
pop esi
push eax
xor eax, 0x171db
pop eax
mov eax, dword [ebp - 0x780]
add eax, dword [ebp - 0x1a0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1a0]
movsx eax, byte [ebp + edx - 0x8a4]
cmp ecx, eax
jne 0x100c9f80
mov dword [ebp - 0xcd4], 0
jmp 0x100c9fef
push edi
push eax
add esp, 4
xor edi, 0x9d08
xor edi, 0x198a
add edi, 0x424a
pop edi
push ecx
xor ecx, 0x18631
or ecx, 0x86c1
pop ecx
push ebx
push eax
add esp, 4
and ebx, 0x17062
pop ebx
invalid
Function at 0x100c9f3f
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x77c]
add eax, 1
mov dword [ebp - 0x77c], eax
mov ecx, dword [ebp - 0x778]
mov edx, dword [ebp - 0x77c]
cmp edx, dword [ecx + 0x18]
jae 0x100ca00b
mov eax, dword [ebp - 0x77c]
mov ecx, dword [ebp - 0x19a4]
mov edx, dword [ebp - 0x3a4]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x780], edx
mov eax, dword [ebp - 0x77c]
mov ecx, dword [ebp - 0x19a8]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x19ac]
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x19b0], ecx
mov dword [ebp - 0x1a0], 0
add byte [eax], al
add byte [eax], al
jmp 0x100c9e6f
mov edx, dword [ebp - 0x1a0]
add edx, 1
mov dword [ebp - 0x1a0], edx
mov eax, dword [ebp - 0x780]
add eax, dword [ebp - 0x1a0]
movsx ecx, byte [eax]
test ecx, ecx
je 0x100c9f21
mov edx, dword [ebp - 0x1a0]
movsx eax, byte [ebp + edx - 0x8a4]
test eax, eax
je 0x100c9f21
push eax
xor eax, 0xcf58
call 0x100c9eb0
add byte [ebx], bh
aaa
dec eax
aaa
xor eax, 0x4c48343
or eax, 0xb201
pop eax
push ebx
sub ebx, 0xc03e
sub ebx, 0x621b
xor ebx, 0x15fe2
add dword [eax], eax
pop ebx
mov ecx, dword [ebp - 0x780]
add ecx, dword [ebp - 0x1a0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1a0]
movsx ecx, byte [ebp + eax - 0x8a4]
cmp edx, ecx
je 0x100c9f13
mov edx, dword [ebp - 0x780]
add edx, dword [ebp - 0x1a0]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1a0]
movsx edx, byte [ebp + ecx - 0x8a4]
cmp eax, edx
jne 0x100c9f1a
jmp 0x100c9e60
jmp 0x100c9f21
push ebx
sub ebx, 0xe0c9
pop ebx
push esi
push eax
add esp, 4
or esi, 0x93d7
pop esi
push edx
sub edx, 0xd0d0
pop edx
push esi
xor esi, 0x12e14
not byte [esi + ebp]
add dword [eax], eax
xor esi, 0x2dc
pop esi
push eax
xor eax, 0x171db
pop eax
mov eax, dword [ebp - 0x780]
add eax, dword [ebp - 0x1a0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1a0]
movsx eax, byte [ebp + edx - 0x8a4]
cmp ecx, eax
jne 0x100c9f80
mov dword [ebp - 0xcd4], 0
jmp 0x100c9fef
push edi
push eax
add esp, 4
xor edi, 0x9d08
xor edi, 0x198a
add edi, 0x424a
pop edi
push ecx
xor ecx, 0x18631
or ecx, 0x86c1
pop ecx
push ebx
push eax
add esp, 4
and ebx, 0x17062
pop ebx
invalid

Function at 0x100ca017
Capabilities:
Resolve function by parsing pe exports

Disassembly:
cmp dword [ebp - 0x3f8], 0
je 0x100ca0f2
push eax
push ebx
add esp, 4
and eax, 0x18509
or eax, 0x9580
add eax, 0x17af6
xor eax, 0xd4d2
pop eax
push edi
push esi
add esp, 4
add edi, 0x117ba
pop edi
push esi
sub esi, 0x255c
pop esi
mov ecx, dword [ebp - 0x3f8]
mov dword [ebp - 0x19b4], ecx
push esi
push ebx
add esp, 4
sub esi, 0x140d6
and esi, 0xc067
pop esi
push edi
Function at 0x100ca075
Capabilities:
Resolve function by parsing pe exports

Disassembly:
call 0x100ca084
add byte [edi + 0x46], cl
xor edi, dword [esi]
xor eax, 0x444a3d40
add esp, 4
and edi, 0x15aa1
add edi, 0x12fb7
pop edi
mov edx, dword [ebp - 0x19b4]
mov dword [ebp - 0x19b8], edx
lea eax, [ebp - 0x1738]
push eax
call dword [ebp - 0x19b8]
test eax, eax
jne 0x100ca0f2
push edi
jmp 0x100ca0b8
sub edi, 0x6dcd
and edi, 0x1747d
add edi, 0x117a3
pop edi
push ebx
push ebx
add esp, 4
sub ebx, 0x4703
inc edi
add byte [eax], al
sub ebx, 0x178c7
xor ebx, 0xa0f
pop ebx
mov dword [ebp - 0xab4], 0
jmp 0x100ca7dd

Function at 0x100ca084
Capabilities:
Resolve function by parsing pe exports

Disassembly:
call 0x100ca084
add byte [edi + 0x46], cl
xor edi, dword [esi]
xor eax, 0x444a3d40
add esp, 4
and edi, 0x15aa1
add edi, 0x12fb7
pop edi
mov edx, dword [ebp - 0x19b4]
mov dword [ebp - 0x19b8], edx
lea eax, [ebp - 0x1738]
push eax
call dword [ebp - 0x19b8]
test eax, eax
jne 0x100ca0f2
push edi
jmp 0x100ca0b8
sub edi, 0x6dcd
and edi, 0x1747d
add edi, 0x117a3
pop edi
push ebx
push ebx
add esp, 4
sub ebx, 0x4703
inc edi
add byte [eax], al
sub ebx, 0x178c7
xor ebx, 0xa0f
pop ebx
mov dword [ebp - 0xab4], 0
jmp 0x100ca7dd

Function at 0x100ca134
Capabilities:
Resolve function by parsing pe exports

Disassembly:
out 0xff, al
dec dword [ebx - 0x7a76cfbe]
inc eax
out 0xff, al
dec dword [ebx - 0x19bf73]
dec dword [ecx - 0x167b73]
call dword [eax - 0x7f]
ror byte [ecx], 0xa2
add byte [eax], al
Function at 0x100ca1f2
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0xce0]
mov dword [ebp - 0x51c], edx
push eax
push edx
add esp, 4
xor eax, 0x9a24
sub eax, 0x2305
pop eax
push ebx
push esi
add esp, 4
jmp 0x100ca21d
and ebx, 0x11278
pop ebx
push eax
push ebx
add esp, 4
sub eax, 0x2274
pop eax
lea eax, [ebp - 0x1738]
mov dword [ebp - 0xcdc], eax
mov ecx, dword [ebp - 0x51c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcd8], edx
xor eax, eax
invalid
invalid

Function at 0x100ca2fe
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
push ebx
add esp, 4
add ebx, 0xe1f5
pop ebx
push esi
or esi, 0x24fe
xor esi, 0x11f
pop esi
push edi
push ecx
add esp, 4
xor edi, 0xad35
sub edi, 0x2d67
add edi, 0x96f8
pop edi
mov edx, dword [ebp - 0xcd8]
mov ax, word [edx]
mov word [ebp - 0x1046], ax
mov ecx, dword [ebp - 0xcd8]
add ecx, 2
mov dword [ebp - 0xcd8], ecx
mov dx, word [ebp - 0x1046]
out dx, eax
invalid
jmp dword [esi - 0x77]
xchg ebp, eax
fdiv st(5), st(0)
invalid
dec dword [ebx - 0xcdb7b]
jmp dword [esi - 0x75]
or byte [esi - 0x77], ah
lea edi, [eax - 0x74000011]
xchg ebp, eax
and al, 0xf3
invalid
inc dword [ebx - 0x6a76fd3e]
and al, 0xf3
invalid
jmp dword [esi - 0x75]
test dword [eax + 0x66ffffef], edi
mov dword [ebp - 0x40], eax
push edi
push edi
add esp, 4
xor edi, 0x1589a
call 0x100ca2fe
add byte [ecx + 0x4d], al
xor cl, byte [ebx + 0x4b]
xor eax, 0x4a393d33
add esp, 4
jmp 0x100ca308
pop edi
push esi
push edx
add esp, 4
add esi, 0x12bc2
mov dl, 0x2b
add dword [eax], eax
mov dl, 0x2b
add dword [eax], eax
pop esi
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x100ca332
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
sub edx, eax
mov dword [ebp - 0x1684], edx
jmp 0x100ca38c
movzx ecx, word [ebp - 0x224]
movzx edx, word [ebp - 0x40]
cmp ecx, edx
je 0x100ca25a
movzx eax, word [ebp - 0x224]
xor eax, 0x20
movzx ecx, word [ebp - 0x40]
cmp eax, ecx
je 0x100ca25a
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
cmp edx, eax
jge 0x100ca376
mov dword [ebp - 0x1680], 0xffffffff
jmp 0x100ca380
mov dword [ebp - 0x1680], 1
mov ecx, dword [ebp - 0x1680]
mov dword [ebp - 0x1684], ecx
cmp dword [ebp - 0x1684], 0
jne 0x100ca3d5
push edi
push ecx
add esp, 4
xor edi, 0x137ae
or edi, 0x5e3d
sub edi, 0x15dca
pop edi
push esi
push edx
add esp, 4
add esi, 0x11102
jmp 0x100ca3c0
xor esi, 0x8932
pop esi
mov edx, dword [ebp - 0x51c]
push esi
push esi
add esp, 4
and esi, 0xddcf
and esi, 0x4d0b
jmp 0x100ca3eb
pop esi
push esi
push edx
add esp, 4
call 0x100ca3fd
add byte [esi + 0x34], al
aaa
aas
cmp al, 0x49
add esp, 4
xor esi, 0x15aad
pop esi
mov eax, dword [ebp - 0x51c]
mov ecx, dword [eax]
mov dword [ebp - 0x51c], ecx
mov edx, dword [ebp - 0x51c]
cmp edx, dword [ebp - 0xce0]
je 0x100ca433
mov eax, dword [ebp - 0x51c]
cmp dword [eax + 0x30], 0
invalid
invalid