joyce8/EMBER2024-capa huggingface dataset:
Function at 0x403f80
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46bf40
mov eax, dword fs:[0]
push eax
push esi
push edi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x20]
mov dword [esp + 0x18], 1
call fcn.004024d0
mov esi, dword [esp + 0x24]
mov edi, dword [esp + 0x30]
cmp esi, edi
je 0x403fee
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x2c]
call fcn.004024d0
cmp edi, esi
jae 0x403fee
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
push edx
push eax
push str.invalid_iterator_range
call dword [0x4751e8]
add esp, 0xc
lea ecx, [esp + 0x1c]
mov byte [esp + 0x14], 0
call fcn.00402a70
lea ecx, [esp + 0x28]
mov dword [esp + 0x14], 0xffffffff
call fcn.00402a70
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0xc
ret

Function at 0x404610
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x46c011
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov esi, ecx
xor ebx, ebx
mov dword [esp + 0xc], ebx
push esi
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
call fcn.004037b0
mov eax, dword [esi + 8]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x30]
push ecx
lea ecx, [esp + 0x14]
mov dword [esp + 0x28], 1
call fcn.00402290
mov esi, dword [esp + 0x2c]
lea edx, [esp + 0x10]
push edx
mov ecx, esi
mov dword [esi], ebx
mov dword [esi + 4], ebx
call fcn.004037b0
mov eax, dword [esp + 0x18]
mov dword [esi + 8], eax
lea ecx, [esp + 0x10]
mov dword [esp + 0xc], 1
mov byte [esp + 0x24], bl
call fcn.00402a70
mov eax, esi
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x1c
ret 8

Function at 0x4046c0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x46c051
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov esi, ecx
xor ebx, ebx
mov dword [esp + 0xc], ebx
push esi
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
call fcn.004037b0
mov eax, dword [esi + 8]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x30]
push ecx
lea ecx, [esp + 0x14]
mov dword [esp + 0x28], 1
call fcn.00402340
mov esi, dword [esp + 0x2c]
lea edx, [esp + 0x10]
push edx
mov ecx, esi
mov dword [esi], ebx
mov dword [esi + 4], ebx
call fcn.004037b0
mov eax, dword [esp + 0x18]
mov dword [esi + 8], eax
lea ecx, [esp + 0x10]
mov dword [esp + 0xc], 1
mov byte [esp + 0x24], bl
call fcn.00402a70
mov eax, esi
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x1c
ret 8
Function at 0x404770
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x46c091
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov esi, ecx
xor ebx, ebx
mov dword [esp + 0xc], ebx
push esi
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
call fcn.004037b0
mov eax, dword [esi + 8]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x30]
push ecx
lea ecx, [esp + 0x14]
mov dword [esp + 0x28], 1
call fcn.004023f0
mov esi, dword [esp + 0x2c]
lea edx, [esp + 0x10]
push edx
mov ecx, esi
mov dword [esi], ebx
mov dword [esi + 4], ebx
call fcn.004037b0
mov eax, dword [esp + 0x18]
mov dword [esi + 8], eax
lea ecx, [esp + 0x10]
mov dword [esp + 0xc], 1
mov byte [esp + 0x24], bl
call fcn.00402a70
mov eax, esi
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x1c
ret 8

Function at 0x404820
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x46c0d1
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov esi, ecx
xor ebx, ebx
mov dword [esp + 0xc], ebx
push esi
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
call fcn.004037b0
mov eax, dword [esi + 8]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x30]
push ecx
lea ecx, [esp + 0x14]
mov dword [esp + 0x28], 1
call fcn.00402690
mov esi, dword [esp + 0x2c]
lea edx, [esp + 0x10]
push edx
mov ecx, esi
mov dword [esi], ebx
mov dword [esi + 4], ebx
call fcn.004037b0
mov eax, dword [esp + 0x18]
mov dword [esi + 8], eax
lea ecx, [esp + 0x10]
mov dword [esp + 0xc], 1
mov byte [esp + 0x24], bl
call fcn.00402a70
mov eax, esi
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x1c
ret 8

Function at 0x404ac0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x46c151
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov esi, ecx
xor ebx, ebx
mov dword [esp + 0xc], ebx
push esi
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
call fcn.004037b0
mov eax, dword [esi + 8]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x30]
neg ecx
push ecx
lea ecx, [esp + 0x14]
mov dword [esp + 0x28], 1
call fcn.00402290
mov esi, dword [esp + 0x2c]
lea edx, [esp + 0x10]
push edx
mov ecx, esi
mov dword [esi], ebx
mov dword [esi + 4], ebx
call fcn.004037b0
mov eax, dword [esp + 0x18]
mov dword [esi + 8], eax
lea ecx, [esp + 0x10]
mov dword [esp + 0xc], 1
mov byte [esp + 0x24], bl
call fcn.00402a70
mov eax, esi
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x1c
ret 8
Function at 0x406100
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46c4e1
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov esi, ecx
xor ebx, ebx
mov dword [esp + 0x18], ebx
cmp dword [esp + 0x30], esi
mov edi, dword [esp + 0x38]
mov dword [esp + 0x24], 1
jne 0x40614a
cmp edi, dword [esi + 8]
jb 0x40614a
cmp dword [esi + 0xc], edi
ja 0x406162
push 0x3da
push str.C:Program_FilesMicrosoft_Visual_Studio_8VCinclude_vector
push str.vector_erase_iterator_outside_range
call dword [0x4751e8]
add esp, 0xc
mov eax, dword [esi + 0xc]
mov byte [esp + 0x10], bl
mov edx, dword [esp + 0x10]
push edx
mov byte [esp + 0x18], bl
mov edx, dword [esp + 0x18]
push edx
mov edx, dword [esp + 0x34]
push edx
push edi
lea ecx, [edi + 0x10]
push eax
push ecx
call fcn.004040b0
mov eax, dword [esi + 0xc]
add esp, 0x18
push eax
push edi
mov ecx, esi
call fcn.0040f520
add dword [esi + 0xc], 0xfffffff0
push esi
mov esi, dword [esp + 0x30]
push edi
mov ecx, esi
call fcn.004038f0
lea ecx, [esp + 0x30]
mov dword [esp + 0x18], 1
mov byte [esp + 0x24], bl
call fcn.00402a70
mov eax, esi
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add esp, 0x18
ret 0x10
Function at 0x409f00
Capabilities:
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x46cca1
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x48]
mov dword [esp + 0x34], 1
call fcn.004024d0
mov ecx, dword [esp + 0x4c]
sub ecx, dword [esp + 0x40]
mov eax, 0x57d990d1
imul ecx
sar edx, 7
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov eax, ebx
cdq
sub eax, edx
mov ebp, eax
sar ebp, 1
test ebp, ebp
jle 0x40a0a7
sub ebp, 1
push ebp
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x40]
call fcn.00404610
mov esi, eax
mov eax, dword [esi]
test eax, eax
mov byte [esp + 0x30], 2
je 0x409f93
mov ecx, dword [esi + 8]
cmp ecx, dword [eax + 8]
jb 0x409f93
cmp dword [eax + 0xc], ecx
ja 0x409fe0
push 0x63
push str.C:Program_FilesMicrosoft_Visual_Studio_8VCinclude_vector
push str.vector_iterator_not_dereferencable
call dword [0x4751e8]
push str.__Standard_C_Libraries_Out_of_Range___0_
push 0
push 0x64
push str.C:Program_FilesMicrosoft_Visual_Studio_8VCinclude_vector
push 2
call dword [0x4752e8]
add esp, 0x20
cmp eax, 1
jne 0x409fc4
int3
push 0
push 0x64
push str.C:Program_FilesMicrosoft_Visual_Studio_8VCinclude_vector
push 0x475c40
push str._out_of_range_
call dword [0x4752ec]
add esp, 0x14
mov edx, dword [esp + 0x50]
mov esi, dword [esi + 8]
push edx
sub esp, 0x178
mov edi, esp
mov ecx, 0x5d
rep movsd dword es:[edi], dword [esi]
push ebx
push ebp
movsb byte es:[edi], byte [esi]
sub esp, 0xc
mov esi, esp
lea eax, [esp + 0x1c8]
mov dword [esp + 0x1a8], esp
xor edi, edi
push eax
mov ecx, esi
mov dword [esi], edi
mov dword [esi + 4], edi
call fcn.004037b0
mov ecx, dword [esp + 0x1d0]
mov dword [esi + 8], ecx
call fcn.00406870
add esp, 0x190
push 3
lea ecx, [esp + 0x18]
mov byte [esp + 0x34], 1
call dword [0x4751fc]
mov esi, dword [esp + 0x1c]
cmp esi, edi
mov byte [esp + 0x30], 3
je 0x40a090
cmp dword [esi], 0xfffffffd
je 0x40a090
cmp dword [esi], edi
je 0x40a06e
mov eax, dword [esi]
lea edx, [esp + 0x1c]
cmp eax, edx
je 0x40a06a
cmp dword [eax + 4], edi
lea esi, [eax + 4]
jne 0x40a058
cmp dword [esi], edi
jne 0x40a086
push 0xb2
push str.C:Program_FilesMicrosoft_Visual_Studio_8VCincludexutility
push str.ITERATOR_LIST_CORRUPTED_
call dword [0x4751e8]
add esp, 0xc
mov eax, dword [esp + 0x20]
mov dword [esi], eax
mov dword [esp + 0x1c], edi
lea ecx, [esp + 0x14]
mov byte [esp + 0x30], 1
call dword [0x4751f8]
cmp ebp, edi
jg 0x409f67
lea ecx, [esp + 0x38]
mov byte [esp + 0x30], 0
call fcn.00402a70
lea ecx, [esp + 0x44]
mov dword [esp + 0x30], 0xffffffff
call fcn.00402a70
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x20
ret
Function at 0x410750
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46d610
mov eax, dword fs:[0]
push eax
push esi
push edi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x20]
mov dword [esp + 0x18], 1
call fcn.0040f6e0
mov esi, dword [esp + 0x24]
mov edi, dword [esp + 0x30]
cmp esi, edi
je 0x4107be
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0040f6e0
cmp edi, esi
jae 0x4107be
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
push edx
push eax
push str.invalid_iterator_range
call dword [0x4751e8]
add esp, 0xc
lea ecx, [esp + 0x1c]
mov byte [esp + 0x14], 0
call fcn.00402a70
lea ecx, [esp + 0x28]
mov dword [esp + 0x14], 0xffffffff
call fcn.00402a70
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0xc
ret

Function at 0x410d90
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x46d6f1
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov esi, ecx
xor ebx, ebx
mov dword [esp + 0xc], ebx
push esi
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
call fcn.004037b0
mov eax, dword [esi + 8]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x30]
push ecx
lea ecx, [esp + 0x14]
mov dword [esp + 0x28], 1
call fcn.0040f7f0
mov esi, dword [esp + 0x2c]
lea edx, [esp + 0x10]
push edx
mov ecx, esi
mov dword [esi], ebx
mov dword [esi + 4], ebx
call fcn.004037b0
mov eax, dword [esp + 0x18]
mov dword [esi + 8], eax
lea ecx, [esp + 0x10]
mov dword [esp + 0xc], 1
mov byte [esp + 0x24], bl
call fcn.00402a70
mov eax, esi
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x1c
ret 8
Function at 0x412310
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46db39
mov eax, dword fs:[0]
push eax
sub esp, 0x38
push ebx
push esi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0x44]
mov dword fs:[0], eax
xor ebx, ebx
mov dword [esp + 0xc], ebx
lea eax, [esp + 0x70]
push eax
lea ecx, [esp + 0x24]
mov dword [esp + 0x50], 4
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
call fcn.004037b0
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x28], ecx
lea ecx, [esp + 0x20]
call fcn.00402a70
push ebx
lea edx, [esp + 0x5c]
push edx
lea ecx, [esp + 0x34]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
call fcn.004037b0
mov eax, dword [esp + 0x64]
lea ecx, [esp + 0x30]
mov dword [esp + 0x38], eax
call fcn.00402a70
push ebx
sub esp, 0xc
mov ecx, esp
lea edx, [esp + 0x90]
mov dword [esp + 0x24], esp
push edx
push ecx
call fcn.00458af0
push ecx
mov eax, esp
lea ecx, [esp + 0x90]
mov dword [esp + 0x34], esp
push ecx
push eax
mov byte [esp + 0x74], 5
call fcn.00458af0
push ecx
mov edx, esp
lea eax, [esp + 0x90]
mov dword [esp + 0x44], esp
push eax
push edx
mov byte [esp + 0x80], 6
call fcn.00458af0
push ecx
mov ecx, esp
lea edx, [esp + 0x90]
mov dword [esp + 0x54], esp
push edx
push ecx
mov byte [esp + 0x8c], 7
call fcn.00458af0
lea eax, [esp + 0x78]
add esp, 8
push eax
mov byte [esp + 0x88], 4
call fcn.00411a60
add esp, 0x3c
mov esi, eax
push esi
lea ecx, [esp + 0x5c]
mov byte [esp + 0x50], 8
call fcn.004037b0
mov ecx, dword [esi + 8]
mov dword [esp + 0x60], ecx
lea ecx, [esp + 0x38]
mov byte [esp + 0x4c], 4
call fcn.00402a70
mov esi, dword [esp + 0x54]
lea edx, [esp + 0x58]
push edx
mov ecx, esi
mov dword [esi], ebx
mov dword [esi + 4], ebx
call fcn.004037b0
mov eax, dword [esp + 0x60]
mov dword [esi + 8], eax
lea ecx, [esp + 0x58]
mov dword [esp + 0xc], 1
mov byte [esp + 0x4c], 3
call fcn.00402a70
lea ecx, [esp + 0x64]
mov byte [esp + 0x4c], 2
call fcn.00402a70
lea ecx, [esp + 0x70]
mov byte [esp + 0x4c], 1
call fcn.00402a70
lea ecx, [esp + 0x7c]
mov byte [esp + 0x4c], bl
call fcn.00402a70
mov eax, esi
mov ecx, dword [esp + 0x44]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x44
ret
Function at 0x412b30
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x46dca4
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push esi
push edi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0x18]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x14], esi
xor edi, edi
push edi
lea ecx, [esi + 0x1c0]
mov dword [esi], 0x478c18
call fcn.0043ffb0
mov dword [esp + 0x20], edi
mov dword [esi + 0x2e8], edi
mov dword [esi + 0x2f0], edi
mov dword [esi + 0x2f4], edi
mov dword [esi + 0x2f8], edi
lea eax, [esp + 0x13]
push eax
lea ecx, [esp + 0x17]
push ecx
lea ecx, [esi + 0x2fc]
mov byte [esp + 0x28], 2
call fcn.00410850
mov dword [esi + 4], edi
mov dword [esi + 0xc], edi
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov dword [esi + 0x18], edi
mov dword [esi + 0x1c], edi
mov dword [esi + 0x20], edi
mov dword [esi + 0x24], edi
mov dword [esi + 0x28], edi
mov dword [esi + 0x2c], edi
mov dword [esi + 0x30], edi
mov dword [esi + 0x34], edi
mov dword [esi + 0x38], edi
mov dword [esi + 0x3c], edi
mov dword [esi + 0x40], edi
mov dword [esi + 0x44], edi
mov dword [esi + 0x48], edi
mov dword [esi + 0x50], edi
mov dword [esi + 0x2d0], edi
mov dword [esi + 0x2d4], edi
mov dword [esi + 0x54], edi
mov dword [esi + 0x2d8], edi
call fcn.0040e420
cmp dword [0x491738], 6
mov eax, esi
sbb edx, edx
add edx, 1
mov dword [esi + 0x318], edx
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x18
ret

Function at 0x414ad0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x46ddd1
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov esi, ecx
xor ebx, ebx
mov dword [esp + 0xc], ebx
push esi
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
call fcn.004037b0
mov eax, dword [esi + 8]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x30]
push ecx
lea ecx, [esp + 0x14]
mov dword [esp + 0x28], 1
call fcn.00413f30
mov esi, dword [esp + 0x2c]
lea edx, [esp + 0x10]
push edx
mov ecx, esi
mov dword [esi], ebx
mov dword [esi + 4], ebx
call fcn.004037b0
mov eax, dword [esp + 0x18]
mov dword [esi + 8], eax
lea ecx, [esp + 0x10]
mov dword [esp + 0xc], 1
mov byte [esp + 0x24], bl
call fcn.00402a70
mov eax, esi
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x1c
ret 8
Function at 0x419460
Capabilities:
Parse credit card information

Disassembly:
mov eax, dword [esp + 8]
push esi
xor esi, esi
cmp byte [eax], 0
je 0x419545
push ebx
push edi
mov edi, dword [esp + 0x10]
mov ebx, eax
movsx ecx, byte [ebx]
test ecx, ecx
jge 0x419485
add ecx, 0x100
cmp ecx, 0x1f
jle 0x4194ec
cmp ecx, 0x7f
je 0x4194ec
cmp ecx, 0x80
jge 0x4194ec
cmp ecx, 0x20
je 0x4194ec
cmp ecx, 0x7b
je 0x4194ec
cmp ecx, 0x7d
je 0x4194ec
cmp ecx, 0x5b
je 0x4194ec
cmp ecx, 0x5d
je 0x4194ec
cmp ecx, 0x7c
je 0x4194ec
cmp ecx, 0x5c
je 0x4194ec
cmp ecx, 0x5e
je 0x4194ec
cmp ecx, 0x7e
je 0x4194ec
cmp ecx, 0x60
je 0x4194ec
cmp ecx, 0x23
je 0x4194ec
cmp ecx, 0x3b
je 0x4194ec
cmp ecx, 0x2f
je 0x4194ec
cmp ecx, 0x3f
je 0x4194ec
cmp ecx, 0x40
je 0x4194ec
cmp ecx, 0x3d
je 0x4194ec
cmp ecx, 0x26
jne 0x419529
mov eax, ecx
cdq
and edx, 0xf
add eax, edx
mov byte [esi + edi], 0x25
sar eax, 4
add esi, 1
cmp eax, 9
ja 0x419507
add al, 0x30
jmp 0x419509
add al, 0x37
and ecx, 0x8000000f
mov byte [esi + edi], al
jns 0x419519
dec ecx
or ecx, 0xfffffff0
inc ecx
add esi, 1
cmp ecx, 9
ja 0x419526
add cl, 0x30
jmp 0x419529
add cl, 0x37
mov byte [esi + edi], cl
add ebx, 1
add esi, 1
cmp byte [ebx], 0
jne 0x419478
mov byte [esi + edi], 0
pop edi
pop ebx
pop esi
ret 8
mov eax, dword [esp + 8]
mov byte [esi + eax], 0
pop esi
ret 8
Function at 0x41ea10
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46e240
mov eax, dword fs:[0]
push eax
push esi
push edi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x20]
mov dword [esp + 0x18], 1
call fcn.0041a3a0
mov esi, dword [esp + 0x24]
mov edi, dword [esp + 0x30]
cmp esi, edi
je 0x41ea7e
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0041a3a0
cmp edi, esi
jae 0x41ea7e
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
push edx
push eax
push str.invalid_iterator_range
call dword [0x4751e8]
add esp, 0xc
lea ecx, [esp + 0x1c]
mov byte [esp + 0x14], 0
call fcn.00402a70
lea ecx, [esp + 0x28]
mov dword [esp + 0x14], 0xffffffff
call fcn.00402a70
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0xc
ret

Function at 0x41eda0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x46e2e1
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov esi, ecx
xor ebx, ebx
mov dword [esp + 0xc], ebx
push esi
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
call fcn.004037b0
mov eax, dword [esi + 8]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x30]
push ecx
lea ecx, [esp + 0x14]
mov dword [esp + 0x28], 1
call fcn.0041dcc0
mov esi, dword [esp + 0x2c]
lea edx, [esp + 0x10]
push edx
mov ecx, esi
mov dword [esi], ebx
mov dword [esi + 4], ebx
call fcn.004037b0
mov eax, dword [esp + 0x18]
mov dword [esi + 8], eax
lea ecx, [esp + 0x10]
mov dword [esp + 0xc], 1
mov byte [esp + 0x24], bl
call fcn.00402a70
mov eax, esi
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x1c
ret 8

Function at 0x41ef90
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x46e361
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov esi, ecx
xor ebx, ebx
mov dword [esp + 0xc], ebx
push esi
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
call fcn.004037b0
mov eax, dword [esi + 8]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x30]
neg ecx
push ecx
lea ecx, [esp + 0x14]
mov dword [esp + 0x28], 1
call fcn.0041dc10
mov esi, dword [esp + 0x2c]
lea edx, [esp + 0x10]
push edx
mov ecx, esi
mov dword [esi], ebx
mov dword [esi + 4], ebx
call fcn.004037b0
mov eax, dword [esp + 0x18]
mov dword [esi + 8], eax
lea ecx, [esp + 0x10]
mov dword [esp + 0xc], 1
mov byte [esp + 0x24], bl
call fcn.00402a70
mov eax, esi
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x1c
ret 8
Function at 0x41f5f0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x46e481
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov esi, ecx
xor ebx, ebx
mov dword [esp + 0xc], ebx
push esi
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
call fcn.004037b0
mov eax, dword [esi + 8]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x30]
push ecx
lea ecx, [esp + 0x14]
mov dword [esp + 0x28], 1
call fcn.0041dc10
mov esi, dword [esp + 0x2c]
lea edx, [esp + 0x10]
push edx
mov ecx, esi
mov dword [esi], ebx
mov dword [esi + 4], ebx
call fcn.004037b0
mov eax, dword [esp + 0x18]
mov dword [esi + 8], eax
lea ecx, [esp + 0x10]
mov dword [esp + 0xc], 1
mov byte [esp + 0x24], bl
call fcn.00402a70
mov eax, esi
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x1c
ret 8
Function at 0x423630
Capabilities:
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x46ed41
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x48]
mov dword [esp + 0x34], 1
call fcn.0041a3a0
mov ecx, dword [esp + 0x4c]
sub ecx, dword [esp + 0x40]
mov eax, 0x10624dd3
imul ecx
sar edx, 4
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov eax, ebx
cdq
sub eax, edx
mov ebp, eax
sar ebp, 1
test ebp, ebp
jle 0x4237df
sub ebp, 1
push ebp
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x40]
call fcn.0041f5f0
mov esi, eax
mov eax, dword [esi]
test eax, eax
mov byte [esp + 0x30], 2
je 0x4236c3
mov ecx, dword [esi + 8]
cmp ecx, dword [eax + 8]
jb 0x4236c3
cmp dword [eax + 0xc], ecx
ja 0x423710
push 0x63
push str.C:Program_FilesMicrosoft_Visual_Studio_8VCinclude_vector
push str.vector_iterator_not_dereferencable
call dword [0x4751e8]
push str.__Standard_C_Libraries_Out_of_Range___0_
push 0
push 0x64
push str.C:Program_FilesMicrosoft_Visual_Studio_8VCinclude_vector
push 2
call dword [0x4752e8]
add esp, 0x20
cmp eax, 1
jne 0x4236f4
int3
push 0
push 0x64
push str.C:Program_FilesMicrosoft_Visual_Studio_8VCinclude_vector
push 0x479b50
push str._out_of_range_
call dword [0x4752ec]
add esp, 0x14
mov edx, dword [esp + 0x50]
mov esi, dword [esi + 8]
push edx
sub esp, 0xfc
mov edi, esp
mov ecx, 0x3e
rep movsd dword es:[edi], dword [esi]
push ebx
push ebp
movsw word es:[edi], word [esi]
sub esp, 0xc
mov esi, esp
lea eax, [esp + 0x14c]
mov dword [esp + 0x12c], esp
xor edi, edi
push eax
mov ecx, esi
mov dword [esi], edi
mov dword [esi + 4], edi
call fcn.004037b0
mov ecx, dword [esp + 0x154]
mov dword [esi + 8], ecx
call fcn.00422cd0
add esp, 0x114
push 3
lea ecx, [esp + 0x18]
mov byte [esp + 0x34], 1
call dword [0x4751fc]
mov esi, dword [esp + 0x1c]
cmp esi, edi
mov byte [esp + 0x30], 3
je 0x4237c8
cmp dword [esi], 0xfffffffd
je 0x4237c8
cmp dword [esi], edi
je 0x4237a6
lea esp, [esp]
mov eax, dword [esi]
lea edx, [esp + 0x1c]
cmp eax, edx
je 0x4237a2
cmp dword [eax + 4], edi
lea esi, [eax + 4]
jne 0x423790
cmp dword [esi], edi
jne 0x4237be
push 0xb2
push str.C:Program_FilesMicrosoft_Visual_Studio_8VCincludexutility
push str.ITERATOR_LIST_CORRUPTED_
call dword [0x4751e8]
add esp, 0xc
mov eax, dword [esp + 0x20]
mov dword [esi], eax
mov dword [esp + 0x1c], edi
lea ecx, [esp + 0x14]
mov byte [esp + 0x30], 1
call dword [0x4751f8]
cmp ebp, edi
jg 0x423697
lea ecx, [esp + 0x38]
mov byte [esp + 0x30], 0
call fcn.00402a70
lea ecx, [esp + 0x44]
mov dword [esp + 0x30], 0xffffffff
call fcn.00402a70
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x20
ret