joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4130e0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5dde3b
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65d4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
cmp dword [0x663c24], 0
jne 0x4131bd
mov ecx, 0x663f4c
call fcn.004087a0
cmp dword [0x663c24], 0
jne 0x4131b3
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0xf0
call fcn.00595e8d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x413165
mov ecx, dword [ebp - 0x1c]
call fcn.004da490
mov dword [ebp - 0x20], eax
jmp 0x41316c
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x413192
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x4131aa
push 0x62aadc
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
mov dword [0x663c24], edx
mov ecx, 0x663f4c
call fcn.00408760
mov eax, dword [0x663c24]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x4131e0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d919b
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65d4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
cmp dword [0x663c28], 0
jne 0x4132ba
mov ecx, 0x663f30
call fcn.004087a0
cmp dword [0x663c28], 0
jne 0x4132b0
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x38
call fcn.00595e8d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x413262
mov ecx, dword [ebp - 0x1c]
call fcn.004e2980
mov dword [ebp - 0x20], eax
jmp 0x413269
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x41328f
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x4132a7
push 0x62aadc
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
mov dword [0x663c28], edx
mov ecx, 0x663f30
call fcn.00408760
mov eax, dword [0x663c28]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x41a090
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ec15b
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65d4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
cmp dword [0x663de8], 0
jne 0x41a16a
mov ecx, 0x664080
call fcn.004087a0
cmp dword [0x663de8], 0
jne 0x41a160
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x58
call fcn.00595e8d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x41a112
mov ecx, dword [ebp - 0x1c]
call fcn.004abb70
mov dword [ebp - 0x20], eax
jmp 0x41a119
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x41a13f
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x41a157
push 0x62aadc
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
mov dword [0x663de8], edx
mov ecx, 0x664080
call fcn.00408760
mov eax, dword [0x663de8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x41a190
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d811b
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65d4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
cmp dword [0x663dec], 0
jne 0x41a26a
mov ecx, 0x664064
call fcn.004087a0
cmp dword [0x663dec], 0
jne 0x41a260
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x58
call fcn.00595e8d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x41a212
mov ecx, dword [ebp - 0x1c]
call fcn.004174f0
mov dword [ebp - 0x20], eax
jmp 0x41a219
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x41a23f
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x41a257
push 0x62aadc
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
mov dword [0x663dec], edx
mov ecx, 0x664064
call fcn.00408760
mov eax, dword [0x663dec]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x41a2a0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d724b
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65d4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
cmp dword [0x663df0], 0
jne 0x41a37a
mov ecx, 0x664048
call fcn.004087a0
cmp dword [0x663df0], 0
jne 0x41a370
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x44
call fcn.00595e8d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x41a322
mov ecx, dword [ebp - 0x1c]
call fcn.00417680
mov dword [ebp - 0x20], eax
jmp 0x41a329
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x41a34f
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x41a367
push 0x62aadc
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
mov dword [0x663df0], edx
mov ecx, 0x664048
call fcn.00408760
mov eax, dword [0x663df0]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x41a3a0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5e8e4b
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65d4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
cmp dword [0x663df4], 0
jne 0x41a47a
mov ecx, 0x66402c
call fcn.004087a0
cmp dword [0x663df4], 0
jne 0x41a470
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x74
call fcn.00595e8d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x41a422
mov ecx, dword [ebp - 0x1c]
call fcn.004b8220
mov dword [ebp - 0x20], eax
jmp 0x41a429
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x41a44f
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x41a467
push 0x62aadc
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
mov dword [0x663df4], edx
mov ecx, 0x66402c
call fcn.00408760
mov eax, dword [0x663df4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x41a4a0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d7d0b
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65d4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
cmp dword [0x663df8], 0
jne 0x41a57a
mov ecx, 0x664010
call fcn.004087a0
cmp dword [0x663df8], 0
jne 0x41a570
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x3c
call fcn.00595e8d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x41a522
mov ecx, dword [ebp - 0x1c]
call fcn.00415d90
mov dword [ebp - 0x20], eax
jmp 0x41a529
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x41a54f
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x41a567
push 0x62aadc
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
mov dword [0x663df8], edx
mov ecx, 0x664010
call fcn.00408760
mov eax, dword [0x663df8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x41a5a0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5e540b
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65d4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
cmp dword [0x663dfc], 0
jne 0x41a67d
mov ecx, 0x663ff4
call fcn.004087a0
cmp dword [0x663dfc], 0
jne 0x41a673
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x11c
call fcn.00595e8d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x41a625
mov ecx, dword [ebp - 0x1c]
call fcn.0046ba80
mov dword [ebp - 0x20], eax
jmp 0x41a62c
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x41a652
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x41a66a
push 0x62aadc
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
mov dword [0x663dfc], edx
mov ecx, 0x663ff4
call fcn.00408760
mov eax, dword [0x663dfc]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x41a6a0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d721b
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65d4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
cmp dword [0x663e00], 0
jne 0x41a77a
mov ecx, 0x663fd8
call fcn.004087a0
cmp dword [0x663e00], 0
jne 0x41a770
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x3c
call fcn.00595e8d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x41a722
mov ecx, dword [ebp - 0x1c]
call fcn.0041a9f0
mov dword [ebp - 0x20], eax
jmp 0x41a729
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x41a74f
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x41a767
push 0x62aadc
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
mov dword [0x663e00], edx
mov ecx, 0x663fd8
call fcn.00408760
mov eax, dword [0x663e00]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x41a7a0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d7cdb
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65d4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
cmp dword [0x663e04], 0
jne 0x41a87a
mov ecx, 0x663fbc
call fcn.004087a0
cmp dword [0x663e04], 0
jne 0x41a870
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x70
call fcn.00595e8d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x41a822
mov ecx, dword [ebp - 0x1c]
call fcn.0041aa60
mov dword [ebp - 0x20], eax
jmp 0x41a829
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x41a84f
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x41a867
push 0x62aadc
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
mov dword [0x663e04], edx
mov ecx, 0x663fbc
call fcn.00408760
mov eax, dword [0x663e04]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x41a8a0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5dca4b
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65d4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
cmp dword [0x663e08], 0
jne 0x41a97d
mov ecx, 0x663fa0
call fcn.004087a0
cmp dword [0x663e08], 0
jne 0x41a973
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x160
call fcn.00595e8d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x41a925
mov ecx, dword [ebp - 0x1c]
call fcn.004ac2b0
mov dword [ebp - 0x20], eax
jmp 0x41a92c
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x41a952
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x41a96a
push 0x62aadc
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
mov dword [0x663e08], edx
mov ecx, 0x663fa0
call fcn.00408760
mov eax, dword [0x663e08]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x41aef0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d655b
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65d4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ecx, 0x663f9c
call fcn.0043ead0
test eax, eax
jne 0x41afb6
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x1e4
call fcn.00595e8d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x41af63
mov ecx, dword [ebp - 0x1c]
call fcn.00524d00
mov dword [ebp - 0x20], eax
jmp 0x41af6a
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x41af90
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x41afa8
push 0x62945c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
push edx
mov ecx, 0x663f9c
call fcn.00455d50
mov ecx, 0x663f9c
call fcn.0043ead0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x41afe0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ec12b
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65d4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ecx, 0x663f98
call fcn.0043ead0
test eax, eax
jne 0x41b0a6
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x138
call fcn.00595e8d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x41b053
mov ecx, dword [ebp - 0x1c]
call fcn.004e0b10
mov dword [ebp - 0x20], eax
jmp 0x41b05a
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x41b080
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x41b098
push 0x629474
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
push edx
mov ecx, 0x663f98
call fcn.0041bd20
mov ecx, 0x663f98
call fcn.0043ead0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x41b0d0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5edacb
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65d4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ecx, 0x663f94
call fcn.0043ead0
test eax, eax
jne 0x41b196
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x214
call fcn.00595e8d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x41b143
mov ecx, dword [ebp - 0x1c]
call fcn.004e69e0
mov dword [ebp - 0x20], eax
jmp 0x41b14a
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x41b170
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x41b188
push 0x62948c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
push edx
mov ecx, 0x663f94
call fcn.0041bd20
mov ecx, 0x663f94
call fcn.0043ead0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x41b1c0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d71eb
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65d4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ecx, 0x663f90
call fcn.0043ead0
test eax, eax
jne 0x41b286
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x90
call fcn.00595e8d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x41b233
mov ecx, dword [ebp - 0x1c]
call fcn.004dc590
mov dword [ebp - 0x20], eax
jmp 0x41b23a
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x41b260
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x41b278
push 0x6294a4
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
push edx
mov ecx, 0x663f90
call fcn.0041bd20
mov ecx, 0x663f90
call fcn.0043ead0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x41b2b0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d7beb
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65d4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ecx, 0x663f8c
call fcn.0043ead0
test eax, eax
jne 0x41b376
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x90
call fcn.00595e8d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x41b323
mov ecx, dword [ebp - 0x1c]
call fcn.0041bc30
mov dword [ebp - 0x20], eax
jmp 0x41b32a
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x41b350
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x41b368
push 0x6294bc
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
push edx
mov ecx, 0x663f8c
call fcn.0041bd20
mov ecx, 0x663f8c
call fcn.0043ead0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x41b3a0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d71bb
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65d4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ecx, 0x663f88
call fcn.0043ead0
test eax, eax
jne 0x41b463
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x40
call fcn.00595e8d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x41b410
mov ecx, dword [ebp - 0x1c]
call fcn.004dd1d0
mov dword [ebp - 0x20], eax
jmp 0x41b417
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x41b43d
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x41b455
push 0x6294d4
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
push edx
mov ecx, 0x663f88
call fcn.0041bd20
mov ecx, 0x663f88
call fcn.0043ead0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x41b480
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5dddab
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65d4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ecx, 0x663f84
call fcn.0043ead0
test eax, eax
jne 0x41b546
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0xc8
call fcn.00595e8d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x41b4f3
mov ecx, dword [ebp - 0x1c]
call fcn.0049b9e0
mov dword [ebp - 0x20], eax
jmp 0x41b4fa
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x41b520
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x41b538
push 0x6294ec
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
push edx
mov ecx, 0x663f84
call fcn.0041bd20
mov ecx, 0x663f84
call fcn.0043ead0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x41b570
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d7bbb
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65d4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ecx, 0x663f80
call fcn.0043ead0
test eax, eax
jne 0x41b633
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x74
call fcn.00595e8d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x41b5e0
mov ecx, dword [ebp - 0x1c]
call fcn.0042ca30
mov dword [ebp - 0x20], eax
jmp 0x41b5e7
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x41b60d
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x41b625
push 0x629504
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
push edx
mov ecx, 0x663f80
call fcn.0041bd20
mov ecx, 0x663f80
call fcn.0043ead0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x41b650
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d718b
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65d4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ecx, 0x663f7c
call fcn.0043ead0
test eax, eax
jne 0x41b713
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x3c
call fcn.00595e8d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x41b6c0
mov ecx, dword [ebp - 0x1c]
call fcn.0042b420
mov dword [ebp - 0x20], eax
jmp 0x41b6c7
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x41b6ed
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x41b705
push 0x62951c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
push edx
mov ecx, 0x663f7c
call fcn.0041bd20
mov ecx, 0x663f7c
call fcn.0043ead0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret