joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10006fc0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push eax
jmp 0x10006fab
and eax, 0x51e7
call fcn.10006fc0
add byte [edi + 0x4c], cl
cmp edi, dword [edi]
dec edx
xor eax, 0x8341374b
add esp, 4
jmp 0x10006fca
xor eax, 0x43393839
add esp, 4
jmp 0x10006fca
pop eax
push ecx
push esi
add esp, 4
or ecx, 0x726
pop ecx
lea eax, [ebp - 0x1b34]
mov dword [ebp - 0xeb8], eax
mov ecx, dword [ebp - 0x5d4]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xeb4], edx
xor eax, eax
mov word [ebp - 0x274], ax
xor ecx, ecx
mov word [ebp - 0x13c], cx
push ebx
push edi
add esp, 4
jmp 0x10007011
pop ebx
push esi
add esi, 0x14730
and esi, 0x1e9e
pop esi
push ecx
sub ecx, 0x16801
pop ecx
push ecx
and ecx, 0x55d2
or ecx, 0xca30
pop ecx
mov edx, dword [ebp - 0xeb4]
mov ax, word [edx]
mov word [ebp - 0x12ca], ax
mov ecx, dword [ebp - 0xeb4]
add ecx, 2
mov dword [ebp - 0xeb4], ecx
mov dx, word [ebp - 0x12ca]
mov word [ebp - 0x274], dx
mov eax, dword [ebp - 0xeb8]
mov cx, word [eax]
mov word [ebp - 0x12cc], cx
mov edx, dword [ebp - 0xeb8]
add edx, 2
mov dword [ebp - 0xeb8], edx
mov ax, word [ebp - 0x12cc]
mov word [ebp - 0x13c], ax
push edx
or edx, 0x5322
add edx, 0x411e
pop edx
push ebx
push ebx
add esp, 4
sub ebx, 0x596e
add ebx, 0x10456
pop ebx
push ecx
push esi
add esp, 4
and ecx, 0x1027e
and ecx, 0xb6e9
pop ecx
movzx ecx, word [ebp - 0x13c]
test ecx, ecx
jne 0x100070e5
movzx edx, word [ebp - 0x274]
movzx eax, word [ebp - 0x13c]
sub edx, eax
mov dword [ebp - 0x1918], edx
jmp 0x10007148
movzx ecx, word [ebp - 0x274]
movzx edx, word [ebp - 0x13c]
cmp ecx, edx
je 0x10007004
movzx eax, word [ebp - 0x274]
xor eax, 0x20
movzx ecx, word [ebp - 0x13c]
cmp eax, ecx
je 0x10007004
movzx edx, word [ebp - 0x274]
movzx eax, word [ebp - 0x13c]
cmp edx, eax
jge 0x10007132
mov dword [ebp - 0x1914], 0xffffffff
jmp 0x1000713c
mov dword [ebp - 0x1914], 1
mov ecx, dword [ebp - 0x1914]
mov dword [ebp - 0x1918], ecx
cmp dword [ebp - 0x1918], 0
jne 0x10007191
push ecx
push ebx
add esp, 4
and ecx, 0x55f0
pop ecx
push edx
and edx, 0x11ae7
jmp 0x1000716c
xor edx, 0xf766
call 0x1000717f
add byte [ebp + 0x50], cl
dec esi
cmp eax, 0x8350473e
les eax, [edx + ebx*2]
mov edx, dword [ebp - 0x5d4]
mov dword [ebp - 0x888], edx
jmp 0x100071f9
push edx
call 0x100071a2
add byte [edi + esi + 0x46], cl
push eax
inc edx
inc ebp
aas
inc esp
inc eax
add esp, 4
sub edx, 0x180a
xor edx, 0x4684
add edx, 0x10b71
pop edx
push ebx
push edi
add esp, 4
jmp 0x100071c2
pop ebx
mov eax, dword [ebp - 0x5d4]
mov ecx, dword [eax]
mov dword [ebp - 0x5d4], ecx
mov edx, dword [ebp - 0x5d4]
cmp edx, dword [ebp - 0xebc]
je 0x100071ef
mov eax, dword [ebp - 0x5d4]
cmp dword [eax + 0x30], 0
jne 0x10006fa5
mov dword [ebp - 0x888], 0
Function at 0x1000717f
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push eax
jmp 0x10006fab
and eax, 0x51e7
call fcn.10006fc0
add byte [edi + 0x4c], cl
cmp edi, dword [edi]
dec edx
xor eax, 0x8341374b
add esp, 4
jmp 0x10006fca
xor eax, 0x43393839
add esp, 4
jmp 0x10006fca
pop eax
push ecx
push esi
add esp, 4
or ecx, 0x726
pop ecx
lea eax, [ebp - 0x1b34]
mov dword [ebp - 0xeb8], eax
mov ecx, dword [ebp - 0x5d4]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xeb4], edx
xor eax, eax
mov word [ebp - 0x274], ax
xor ecx, ecx
mov word [ebp - 0x13c], cx
push ebx
push edi
add esp, 4
jmp 0x10007011
pop ebx
push esi
add esi, 0x14730
and esi, 0x1e9e
pop esi
push ecx
sub ecx, 0x16801
pop ecx
push ecx
and ecx, 0x55d2
or ecx, 0xca30
pop ecx
mov edx, dword [ebp - 0xeb4]
mov ax, word [edx]
mov word [ebp - 0x12ca], ax
mov ecx, dword [ebp - 0xeb4]
add ecx, 2
mov dword [ebp - 0xeb4], ecx
mov dx, word [ebp - 0x12ca]
mov word [ebp - 0x274], dx
mov eax, dword [ebp - 0xeb8]
mov cx, word [eax]
mov word [ebp - 0x12cc], cx
mov edx, dword [ebp - 0xeb8]
add edx, 2
mov dword [ebp - 0xeb8], edx
mov ax, word [ebp - 0x12cc]
mov word [ebp - 0x13c], ax
push edx
or edx, 0x5322
add edx, 0x411e
pop edx
push ebx
push ebx
add esp, 4
sub ebx, 0x596e
add ebx, 0x10456
pop ebx
push ecx
push esi
add esp, 4
and ecx, 0x1027e
and ecx, 0xb6e9
pop ecx
movzx ecx, word [ebp - 0x13c]
test ecx, ecx
jne 0x100070e5
movzx edx, word [ebp - 0x274]
movzx eax, word [ebp - 0x13c]
sub edx, eax
mov dword [ebp - 0x1918], edx
jmp 0x10007148
movzx ecx, word [ebp - 0x274]
movzx edx, word [ebp - 0x13c]
cmp ecx, edx
je 0x10007004
movzx eax, word [ebp - 0x274]
xor eax, 0x20
movzx ecx, word [ebp - 0x13c]
cmp eax, ecx
je 0x10007004
movzx edx, word [ebp - 0x274]
movzx eax, word [ebp - 0x13c]
cmp edx, eax
jge 0x10007132
mov dword [ebp - 0x1914], 0xffffffff
jmp 0x1000713c
mov dword [ebp - 0x1914], 1
mov ecx, dword [ebp - 0x1914]
mov dword [ebp - 0x1918], ecx
cmp dword [ebp - 0x1918], 0
jne 0x10007191
push ecx
push ebx
add esp, 4
and ecx, 0x55f0
pop ecx
push edx
and edx, 0x11ae7
jmp 0x1000716c
xor edx, 0xf766
call 0x1000717f
add byte [ebp + 0x50], cl
dec esi
cmp eax, 0x8350473e
les eax, [edx + ebx*2]
mov edx, dword [ebp - 0x5d4]
mov dword [ebp - 0x888], edx
jmp 0x100071f9
push edx
call 0x100071a2
add byte [edi + esi + 0x46], cl
push eax
inc edx
inc ebp
aas
inc esp
inc eax
add esp, 4
sub edx, 0x180a
xor edx, 0x4684
add edx, 0x10b71
pop edx
push ebx
push edi
add esp, 4
jmp 0x100071c2
pop ebx
mov eax, dword [ebp - 0x5d4]
mov ecx, dword [eax]
mov dword [ebp - 0x5d4], ecx
mov edx, dword [ebp - 0x5d4]
cmp edx, dword [ebp - 0xebc]
je 0x100071ef
mov eax, dword [ebp - 0x5d4]
cmp dword [eax + 0x30], 0
jne 0x10006fa5
mov dword [ebp - 0x888], 0
Function at 0x100071a2
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push eax
jmp 0x10006fab
and eax, 0x51e7
call fcn.10006fc0
add byte [edi + 0x4c], cl
cmp edi, dword [edi]
dec edx
xor eax, 0x8341374b
add esp, 4
jmp 0x10006fca
xor eax, 0x43393839
add esp, 4
jmp 0x10006fca
pop eax
push ecx
push esi
add esp, 4
or ecx, 0x726
pop ecx
lea eax, [ebp - 0x1b34]
mov dword [ebp - 0xeb8], eax
mov ecx, dword [ebp - 0x5d4]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xeb4], edx
xor eax, eax
mov word [ebp - 0x274], ax
xor ecx, ecx
mov word [ebp - 0x13c], cx
push ebx
push edi
add esp, 4
jmp 0x10007011
pop ebx
push esi
add esi, 0x14730
and esi, 0x1e9e
pop esi
push ecx
sub ecx, 0x16801
pop ecx
push ecx
and ecx, 0x55d2
or ecx, 0xca30
pop ecx
mov edx, dword [ebp - 0xeb4]
mov ax, word [edx]
mov word [ebp - 0x12ca], ax
mov ecx, dword [ebp - 0xeb4]
add ecx, 2
mov dword [ebp - 0xeb4], ecx
mov dx, word [ebp - 0x12ca]
mov word [ebp - 0x274], dx
mov eax, dword [ebp - 0xeb8]
mov cx, word [eax]
mov word [ebp - 0x12cc], cx
mov edx, dword [ebp - 0xeb8]
add edx, 2
mov dword [ebp - 0xeb8], edx
mov ax, word [ebp - 0x12cc]
mov word [ebp - 0x13c], ax
push edx
or edx, 0x5322
add edx, 0x411e
pop edx
push ebx
push ebx
add esp, 4
sub ebx, 0x596e
add ebx, 0x10456
pop ebx
push ecx
push esi
add esp, 4
and ecx, 0x1027e
and ecx, 0xb6e9
pop ecx
movzx ecx, word [ebp - 0x13c]
test ecx, ecx
jne 0x100070e5
movzx edx, word [ebp - 0x274]
movzx eax, word [ebp - 0x13c]
sub edx, eax
mov dword [ebp - 0x1918], edx
jmp 0x10007148
movzx ecx, word [ebp - 0x274]
movzx edx, word [ebp - 0x13c]
cmp ecx, edx
je 0x10007004
movzx eax, word [ebp - 0x274]
xor eax, 0x20
movzx ecx, word [ebp - 0x13c]
cmp eax, ecx
je 0x10007004
movzx edx, word [ebp - 0x274]
movzx eax, word [ebp - 0x13c]
cmp edx, eax
jge 0x10007132
mov dword [ebp - 0x1914], 0xffffffff
jmp 0x1000713c
mov dword [ebp - 0x1914], 1
mov ecx, dword [ebp - 0x1914]
mov dword [ebp - 0x1918], ecx
cmp dword [ebp - 0x1918], 0
jne 0x10007191
push ecx
push ebx
add esp, 4
and ecx, 0x55f0
pop ecx
push edx
and edx, 0x11ae7
jmp 0x1000716c
xor edx, 0xf766
call 0x1000717f
add byte [ebp + 0x50], cl
dec esi
cmp eax, 0x8350473e
les eax, [edx + ebx*2]
mov edx, dword [ebp - 0x5d4]
mov dword [ebp - 0x888], edx
jmp 0x100071f9
push edx
call 0x100071a2
add byte [edi + esi + 0x46], cl
push eax
inc edx
inc ebp
aas
inc esp
inc eax
add esp, 4
sub edx, 0x180a
xor edx, 0x4684
add edx, 0x10b71
pop edx
push ebx
push edi
add esp, 4
jmp 0x100071c2
pop ebx
mov eax, dword [ebp - 0x5d4]
mov ecx, dword [eax]
mov dword [ebp - 0x5d4], ecx
mov edx, dword [ebp - 0x5d4]
cmp edx, dword [ebp - 0xebc]
je 0x100071ef
mov eax, dword [ebp - 0x5d4]
cmp dword [eax + 0x30], 0
jne 0x10006fa5
mov dword [ebp - 0x888], 0
Function at 0x10007992
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
and esi, 0x667d
pop esi
mov edx, dword [ebp - 0x5d8]
mov dword [ebp - 0x380], edx
jmp 0x10007a12
Function at 0x10007ab0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
jmp 0x10007da6
mov ecx, dword [ebp - 0x5dc]
mov dword [ebp - 0x8d4], ecx

Function at 0x10007c30
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
sub edi, 0x1158f
pop edi
push esi
push edx
add esp, 4
and esi, 0xb483
pop esi
push eax
xor eax, 0x16a3c
add eax, 0xbb6d
xor eax, 0x8c15
sub eax, 0x16417
pop eax
mov ecx, dword [ebp - 0x8a4]
add ecx, dword [ebp - 0x1e8]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1e8]
movsx ecx, byte [ebp + eax - 0x9d8]
cmp edx, ecx
je 0x10007ca2
mov edx, dword [ebp - 0x8a4]
add edx, dword [ebp - 0x1e8]
movsx eax, byte [edx]
xor eax, 0x20

Function at 0x10007c90
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x8a0]
add eax, 1
mov dword [ebp - 0x8a0], eax
mov ecx, dword [ebp - 0x89c]
mov edx, dword [ebp - 0x8a0]
cmp edx, dword [ecx + 0x18]
jae 0x10007d9a
mov eax, dword [ebp - 0x8a0]
mov ecx, dword [ebp - 0x26fc]
mov edx, dword [ebp - 0x3d4]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x8a4], edx
mov eax, dword [ebp - 0x8a0]
mov ecx, dword [ebp - 0x271c]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x2720]
loopne 0x10007baa
invalid
dec dword [ebx - 0x3d373]
inc dword [ebx]
or al, 0x90
mov dword [ebp - 0x2724], ecx
mov dword [ebp - 0x1e8], 0
jmp 0x10007bfe
mov edx, dword [ebp - 0x1e8]
add edx, 1
mov dword [ebp - 0x1e8], edx
mov eax, dword [ebp - 0x8a4]
add eax, dword [ebp - 0x1e8]
movsx ecx, byte [eax]
test ecx, ecx
je 0x10007cb0
mov edx, dword [ebp - 0x1e8]
movsx eax, byte [ebp + edx - 0x9d8]
test eax, eax
je 0x10007cb0
push edi
push edx
add esp, 4
mov ecx, dword [ebp - 0x1e8]
movsx edx, byte [ebp + ecx - 0x9d8]
cmp eax, edx
jne 0x10007ca9
jmp 0x10007bef
jmp 0x10007cb0
push eax
push eax
add esp, 4
jmp 0x10007cbe
add eax, 0xd2ea
pop eax
push ecx
call 0x10007cd4
add byte [edx], dh
dec ebx
inc esp
inc edi
dec ebp
inc ecx
inc esp
cmp byte [ebx + 0x535904c4], al
jmp 0x10007ce1
pop ebx
mov eax, dword [ebp - 0x8a4]
add eax, dword [ebp - 0x1e8]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1e8]
movsx eax, byte [ebp + edx - 0x9d8]
cmp ecx, eax
jne 0x10007d0f
mov dword [ebp - 0xed0], 0
jmp 0x10007d7e
push edi
or edi, 0xd430
and edi, 0x112e6
pop edi
push esi
sub esi, 0x112c3
pop esi
push esi
push esi
add esp, 4
sub esi, 0xc536
call 0x10007d3d
add byte [ebp + 0x32], cl
inc esp
cmp edi, dword [edx]
inc edx
dec esp
add esp, 4
pop esi
mov ecx, dword [ebp - 0x8a4]
add ecx, dword [ebp - 0x1e8]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1e8]
movsx ecx, byte [ebp + eax - 0x9d8]
or ecx, 0x20
cmp edx, ecx
jge 0x10007d74
mov dword [ebp - 0xed0], 0xffffffff
jmp 0x10007d7e
mov dword [ebp - 0xed0], 1
cmp dword [ebp - 0xed0], 0
jne 0x10007d95
mov edx, dword [ebp - 0x2724]
mov dword [ebp - 0x5dc], edx
jmp 0x10007da6
jmp 0x10007b7f
mov eax, dword [ebp - 0x8a8]
mov dword [ebp - 0x5dc], eax
Function at 0x10007cd4
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x8a0]
add eax, 1
mov dword [ebp - 0x8a0], eax
mov ecx, dword [ebp - 0x89c]
mov edx, dword [ebp - 0x8a0]
cmp edx, dword [ecx + 0x18]
jae 0x10007d9a
mov eax, dword [ebp - 0x8a0]
mov ecx, dword [ebp - 0x26fc]
mov edx, dword [ebp - 0x3d4]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x8a4], edx
mov eax, dword [ebp - 0x8a0]
mov ecx, dword [ebp - 0x271c]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x2720]
loopne 0x10007baa
invalid
dec dword [ebx - 0x3d373]
inc dword [ebx]
or al, 0x90
mov dword [ebp - 0x2724], ecx
mov dword [ebp - 0x1e8], 0
jmp 0x10007bfe
mov edx, dword [ebp - 0x1e8]
add edx, 1
mov dword [ebp - 0x1e8], edx
mov eax, dword [ebp - 0x8a4]
add eax, dword [ebp - 0x1e8]
movsx ecx, byte [eax]
test ecx, ecx
je 0x10007cb0
mov edx, dword [ebp - 0x1e8]
movsx eax, byte [ebp + edx - 0x9d8]
test eax, eax
je 0x10007cb0
push edi
push edx
add esp, 4
mov ecx, dword [ebp - 0x1e8]
movsx edx, byte [ebp + ecx - 0x9d8]
cmp eax, edx
jne 0x10007ca9
jmp 0x10007bef
jmp 0x10007cb0
push eax
push eax
add esp, 4
jmp 0x10007cbe
add eax, 0xd2ea
pop eax
push ecx
call 0x10007cd4
add byte [edx], dh
dec ebx
inc esp
inc edi
dec ebp
inc ecx
inc esp
cmp byte [ebx + 0x535904c4], al
jmp 0x10007ce1
pop ebx
mov eax, dword [ebp - 0x8a4]
add eax, dword [ebp - 0x1e8]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1e8]
movsx eax, byte [ebp + edx - 0x9d8]
cmp ecx, eax
jne 0x10007d0f
mov dword [ebp - 0xed0], 0
jmp 0x10007d7e
push edi
or edi, 0xd430
and edi, 0x112e6
pop edi
push esi
sub esi, 0x112c3
pop esi
push esi
push esi
add esp, 4
sub esi, 0xc536
call 0x10007d3d
add byte [ebp + 0x32], cl
inc esp
cmp edi, dword [edx]
inc edx
dec esp
add esp, 4
pop esi
mov ecx, dword [ebp - 0x8a4]
add ecx, dword [ebp - 0x1e8]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1e8]
movsx ecx, byte [ebp + eax - 0x9d8]
or ecx, 0x20
cmp edx, ecx
jge 0x10007d74
mov dword [ebp - 0xed0], 0xffffffff
jmp 0x10007d7e
mov dword [ebp - 0xed0], 1
cmp dword [ebp - 0xed0], 0
jne 0x10007d95
mov edx, dword [ebp - 0x2724]
mov dword [ebp - 0x5dc], edx
jmp 0x10007da6
jmp 0x10007b7f
mov eax, dword [ebp - 0x8a8]
mov dword [ebp - 0x5dc], eax
Function at 0x10007d3d
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x8a0]
add eax, 1
mov dword [ebp - 0x8a0], eax
mov ecx, dword [ebp - 0x89c]
mov edx, dword [ebp - 0x8a0]
cmp edx, dword [ecx + 0x18]
jae 0x10007d9a
mov eax, dword [ebp - 0x8a0]
mov ecx, dword [ebp - 0x26fc]
mov edx, dword [ebp - 0x3d4]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x8a4], edx
mov eax, dword [ebp - 0x8a0]
mov ecx, dword [ebp - 0x271c]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x2720]
loopne 0x10007baa
invalid
dec dword [ebx - 0x3d373]
inc dword [ebx]
or al, 0x90
mov dword [ebp - 0x2724], ecx
mov dword [ebp - 0x1e8], 0
jmp 0x10007bfe
mov edx, dword [ebp - 0x1e8]
add edx, 1
mov dword [ebp - 0x1e8], edx
mov eax, dword [ebp - 0x8a4]
add eax, dword [ebp - 0x1e8]
movsx ecx, byte [eax]
test ecx, ecx
je 0x10007cb0
mov edx, dword [ebp - 0x1e8]
movsx eax, byte [ebp + edx - 0x9d8]
test eax, eax
je 0x10007cb0
push edi
push edx
add esp, 4
mov ecx, dword [ebp - 0x1e8]
movsx edx, byte [ebp + ecx - 0x9d8]
cmp eax, edx
jne 0x10007ca9
jmp 0x10007bef
jmp 0x10007cb0
push eax
push eax
add esp, 4
jmp 0x10007cbe
add eax, 0xd2ea
pop eax
push ecx
call 0x10007cd4
add byte [edx], dh
dec ebx
inc esp
inc edi
dec ebp
inc ecx
inc esp
cmp byte [ebx + 0x535904c4], al
jmp 0x10007ce1
pop ebx
mov eax, dword [ebp - 0x8a4]
add eax, dword [ebp - 0x1e8]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1e8]
movsx eax, byte [ebp + edx - 0x9d8]
cmp ecx, eax
jne 0x10007d0f
mov dword [ebp - 0xed0], 0
jmp 0x10007d7e
push edi
or edi, 0xd430
and edi, 0x112e6
pop edi
push esi
sub esi, 0x112c3
pop esi
push esi
push esi
add esp, 4
sub esi, 0xc536
call 0x10007d3d
add byte [ebp + 0x32], cl
inc esp
cmp edi, dword [edx]
inc edx
dec esp
add esp, 4
pop esi
mov ecx, dword [ebp - 0x8a4]
add ecx, dword [ebp - 0x1e8]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1e8]
movsx ecx, byte [ebp + eax - 0x9d8]
or ecx, 0x20
cmp edx, ecx
jge 0x10007d74
mov dword [ebp - 0xed0], 0xffffffff
jmp 0x10007d7e
mov dword [ebp - 0xed0], 1
cmp dword [ebp - 0xed0], 0
jne 0x10007d95
mov edx, dword [ebp - 0x2724]
mov dword [ebp - 0x5dc], edx
jmp 0x10007da6
jmp 0x10007b7f
mov eax, dword [ebp - 0x8a8]
mov dword [ebp - 0x5dc], eax
Function at 0x10008e33
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add esp, 4
xor esi, 0xcbba
and esi, 0xa897
call 0x10008e50
add byte [ebx + ecx*2 + 0x44], cl
cmp al, byte [ebp + 0x3b]
dec esi
xor eax, 0x5e04c483
movzx edx, word [ebp - 0x14c]
test edx, edx
jne 0x10008e77
movzx eax, word [ebp - 0x284]
movzx ecx, word [ebp - 0x14c]
sub eax, ecx
mov dword [ebp - 0x19b0], eax
jmp 0x10008eda
movzx edx, word [ebp - 0x284]
movzx eax, word [ebp - 0x14c]
cmp edx, eax
je 0x10008d96
movzx ecx, word [ebp - 0x284]
xor ecx, 0x20
movzx edx, word [ebp - 0x14c]
cmp ecx, edx
je 0x10008d96
movzx eax, word [ebp - 0x284]
movzx ecx, word [ebp - 0x14c]
cmp eax, ecx
jge 0x10008ec4
mov dword [ebp - 0x19ac], 0xffffffff
jmp 0x10008ece
mov dword [ebp - 0x19ac], 1
mov edx, dword [ebp - 0x19ac]
mov dword [ebp - 0x19b0], edx
cmp dword [ebp - 0x19b0], 0
jne 0x10008f23
push ebx
push ecx
add esp, 4
and ebx, 0x35fe
call 0x10008efb
add byte [esi + 0x36], cl
dec esi
cmp eax, 0x83474f4c
les eax, [ebx + ebx*2]
push edx
push edi
add esp, 4
call 0x10008f11
add byte [ebx + 0x3c], al
aaa
xor eax, 0x83323c36
les eax, [edx + ebx*2]
mov eax, dword [ebp - 0x5e8]
mov dword [ebp - 0x37c], eax
jmp 0x10008f8b
push esi
push esi
add esp, 4
sub esi, 0x16e96
pop esi
push esi
call 0x10008f3c
add byte [ebx], bh
xor eax, 0x43344a47
add esp, 4
or esi, 0x17526
or esi, 0x8d76
jmp 0x10008f54
pop esi
mov ecx, dword [ebp - 0x5e8]
mov edx, dword [ecx]
mov dword [ebp - 0x5e8], edx
mov eax, dword [ebp - 0x5e8]
cmp eax, dword [ebp - 0xef8]
je 0x10008f81
mov ecx, dword [ebp - 0x5e8]
cmp dword [ecx + 0x30], 0
jne 0x10008d37
mov dword [ebp - 0x37c], 0
Function at 0x10008e50
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add esp, 4
xor esi, 0xcbba
and esi, 0xa897
call 0x10008e50
add byte [ebx + ecx*2 + 0x44], cl
cmp al, byte [ebp + 0x3b]
dec esi
xor eax, 0x5e04c483
movzx edx, word [ebp - 0x14c]
test edx, edx
jne 0x10008e77
movzx eax, word [ebp - 0x284]
movzx ecx, word [ebp - 0x14c]
sub eax, ecx
mov dword [ebp - 0x19b0], eax
jmp 0x10008eda
movzx edx, word [ebp - 0x284]
movzx eax, word [ebp - 0x14c]
cmp edx, eax
je 0x10008d96
movzx ecx, word [ebp - 0x284]
xor ecx, 0x20
movzx edx, word [ebp - 0x14c]
cmp ecx, edx
je 0x10008d96
movzx eax, word [ebp - 0x284]
movzx ecx, word [ebp - 0x14c]
cmp eax, ecx
jge 0x10008ec4
mov dword [ebp - 0x19ac], 0xffffffff
jmp 0x10008ece
mov dword [ebp - 0x19ac], 1
mov edx, dword [ebp - 0x19ac]
mov dword [ebp - 0x19b0], edx
cmp dword [ebp - 0x19b0], 0
jne 0x10008f23
push ebx
push ecx
add esp, 4
and ebx, 0x35fe
call 0x10008efb
add byte [esi + 0x36], cl
dec esi
cmp eax, 0x83474f4c
les eax, [ebx + ebx*2]
push edx
push edi
add esp, 4
call 0x10008f11
add byte [ebx + 0x3c], al
aaa
xor eax, 0x83323c36
les eax, [edx + ebx*2]
mov eax, dword [ebp - 0x5e8]
mov dword [ebp - 0x37c], eax
jmp 0x10008f8b
push esi
push esi
add esp, 4
sub esi, 0x16e96
pop esi
push esi
call 0x10008f3c
add byte [ebx], bh
xor eax, 0x43344a47
add esp, 4
or esi, 0x17526
or esi, 0x8d76
jmp 0x10008f54
pop esi
mov ecx, dword [ebp - 0x5e8]
mov edx, dword [ecx]
mov dword [ebp - 0x5e8], edx
mov eax, dword [ebp - 0x5e8]
cmp eax, dword [ebp - 0xef8]
je 0x10008f81
mov ecx, dword [ebp - 0x5e8]
cmp dword [ecx + 0x30], 0
jne 0x10008d37
mov dword [ebp - 0x37c], 0
Function at 0x10008efb
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add esp, 4
xor esi, 0xcbba
and esi, 0xa897
call 0x10008e50
add byte [ebx + ecx*2 + 0x44], cl
cmp al, byte [ebp + 0x3b]
dec esi
xor eax, 0x5e04c483
movzx edx, word [ebp - 0x14c]
test edx, edx
jne 0x10008e77
movzx eax, word [ebp - 0x284]
movzx ecx, word [ebp - 0x14c]
sub eax, ecx
mov dword [ebp - 0x19b0], eax
jmp 0x10008eda
movzx edx, word [ebp - 0x284]
movzx eax, word [ebp - 0x14c]
cmp edx, eax
je 0x10008d96
movzx ecx, word [ebp - 0x284]
xor ecx, 0x20
movzx edx, word [ebp - 0x14c]
cmp ecx, edx
je 0x10008d96
movzx eax, word [ebp - 0x284]
movzx ecx, word [ebp - 0x14c]
cmp eax, ecx
jge 0x10008ec4
mov dword [ebp - 0x19ac], 0xffffffff
jmp 0x10008ece
mov dword [ebp - 0x19ac], 1
mov edx, dword [ebp - 0x19ac]
mov dword [ebp - 0x19b0], edx
cmp dword [ebp - 0x19b0], 0
jne 0x10008f23
push ebx
push ecx
add esp, 4
and ebx, 0x35fe
call 0x10008efb
add byte [esi + 0x36], cl
dec esi
cmp eax, 0x83474f4c
les eax, [ebx + ebx*2]
push edx
push edi
add esp, 4
call 0x10008f11
add byte [ebx + 0x3c], al
aaa
xor eax, 0x83323c36
les eax, [edx + ebx*2]
mov eax, dword [ebp - 0x5e8]
mov dword [ebp - 0x37c], eax
jmp 0x10008f8b
push esi
push esi
add esp, 4
sub esi, 0x16e96
pop esi
push esi
call 0x10008f3c
add byte [ebx], bh
xor eax, 0x43344a47
add esp, 4
or esi, 0x17526
or esi, 0x8d76
jmp 0x10008f54
pop esi
mov ecx, dword [ebp - 0x5e8]
mov edx, dword [ecx]
mov dword [ebp - 0x5e8], edx
mov eax, dword [ebp - 0x5e8]
cmp eax, dword [ebp - 0xef8]
je 0x10008f81
mov ecx, dword [ebp - 0x5e8]
cmp dword [ecx + 0x30], 0
jne 0x10008d37
mov dword [ebp - 0x37c], 0
Function at 0x10008f11
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add esp, 4
xor esi, 0xcbba
and esi, 0xa897
call 0x10008e50
add byte [ebx + ecx*2 + 0x44], cl
cmp al, byte [ebp + 0x3b]
dec esi
xor eax, 0x5e04c483
movzx edx, word [ebp - 0x14c]
test edx, edx
jne 0x10008e77
movzx eax, word [ebp - 0x284]
movzx ecx, word [ebp - 0x14c]
sub eax, ecx
mov dword [ebp - 0x19b0], eax
jmp 0x10008eda
movzx edx, word [ebp - 0x284]
movzx eax, word [ebp - 0x14c]
cmp edx, eax
je 0x10008d96
movzx ecx, word [ebp - 0x284]
xor ecx, 0x20
movzx edx, word [ebp - 0x14c]
cmp ecx, edx
je 0x10008d96
movzx eax, word [ebp - 0x284]
movzx ecx, word [ebp - 0x14c]
cmp eax, ecx
jge 0x10008ec4
mov dword [ebp - 0x19ac], 0xffffffff
jmp 0x10008ece
mov dword [ebp - 0x19ac], 1
mov edx, dword [ebp - 0x19ac]
mov dword [ebp - 0x19b0], edx
cmp dword [ebp - 0x19b0], 0
jne 0x10008f23
push ebx
push ecx
add esp, 4
and ebx, 0x35fe
call 0x10008efb
add byte [esi + 0x36], cl
dec esi
cmp eax, 0x83474f4c
les eax, [ebx + ebx*2]
push edx
push edi
add esp, 4
call 0x10008f11
add byte [ebx + 0x3c], al
aaa
xor eax, 0x83323c36
les eax, [edx + ebx*2]
mov eax, dword [ebp - 0x5e8]
mov dword [ebp - 0x37c], eax
jmp 0x10008f8b
push esi
push esi
add esp, 4
sub esi, 0x16e96
pop esi
push esi
call 0x10008f3c
add byte [ebx], bh
xor eax, 0x43344a47
add esp, 4
or esi, 0x17526
or esi, 0x8d76
jmp 0x10008f54
pop esi
mov ecx, dword [ebp - 0x5e8]
mov edx, dword [ecx]
mov dword [ebp - 0x5e8], edx
mov eax, dword [ebp - 0x5e8]
cmp eax, dword [ebp - 0xef8]
je 0x10008f81
mov ecx, dword [ebp - 0x5e8]
cmp dword [ecx + 0x30], 0
jne 0x10008d37
mov dword [ebp - 0x37c], 0
Function at 0x10008f3c
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add esp, 4
xor esi, 0xcbba
and esi, 0xa897
call 0x10008e50
add byte [ebx + ecx*2 + 0x44], cl
cmp al, byte [ebp + 0x3b]
dec esi
xor eax, 0x5e04c483
movzx edx, word [ebp - 0x14c]
test edx, edx
jne 0x10008e77
movzx eax, word [ebp - 0x284]
movzx ecx, word [ebp - 0x14c]
sub eax, ecx
mov dword [ebp - 0x19b0], eax
jmp 0x10008eda
movzx edx, word [ebp - 0x284]
movzx eax, word [ebp - 0x14c]
cmp edx, eax
je 0x10008d96
movzx ecx, word [ebp - 0x284]
xor ecx, 0x20
movzx edx, word [ebp - 0x14c]
cmp ecx, edx
je 0x10008d96
movzx eax, word [ebp - 0x284]
movzx ecx, word [ebp - 0x14c]
cmp eax, ecx
jge 0x10008ec4
mov dword [ebp - 0x19ac], 0xffffffff
jmp 0x10008ece
mov dword [ebp - 0x19ac], 1
mov edx, dword [ebp - 0x19ac]
mov dword [ebp - 0x19b0], edx
cmp dword [ebp - 0x19b0], 0
jne 0x10008f23
push ebx
push ecx
add esp, 4
and ebx, 0x35fe
call 0x10008efb
add byte [esi + 0x36], cl
dec esi
cmp eax, 0x83474f4c
les eax, [ebx + ebx*2]
push edx
push edi
add esp, 4
call 0x10008f11
add byte [ebx + 0x3c], al
aaa
xor eax, 0x83323c36
les eax, [edx + ebx*2]
mov eax, dword [ebp - 0x5e8]
mov dword [ebp - 0x37c], eax
jmp 0x10008f8b
push esi
push esi
add esp, 4
sub esi, 0x16e96
pop esi
push esi
call 0x10008f3c
add byte [ebx], bh
xor eax, 0x43344a47
add esp, 4
or esi, 0x17526
or esi, 0x8d76
jmp 0x10008f54
pop esi
mov ecx, dword [ebp - 0x5e8]
mov edx, dword [ecx]
mov dword [ebp - 0x5e8], edx
mov eax, dword [ebp - 0x5e8]
cmp eax, dword [ebp - 0xef8]
je 0x10008f81
mov ecx, dword [ebp - 0x5e8]
cmp dword [ecx + 0x30], 0
jne 0x10008d37
mov dword [ebp - 0x37c], 0