joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10094460
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14
mov eax, dword [0x10001840]
xor eax, esp
mov dword [esp + 0x10], eax
push ebx
mov ebx, dword [ebp + 0x10]
push esi
mov esi, ecx
mov dword [esp + 8], ebx
mov ecx, dword [ebp + 8]
push edi
cmp byte [esi + 0xc8], 0
jne 0x100944da
mov edx, str.ERROR:
mov ecx, 0x100e6740
call fcn.10022690
mov edx, str.DecodeChunk___called_without_StartDecoding__
mov ecx, eax
call fcn.10022690
push eax
call fcn.100953e0
add esp, 4
cmp byte [0x100e7a64], 0
jne 0x1009462a
mov ecx, esi
call fcn.10093c60
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x10]
xor ecx, esp
call fcn.100acf3e
mov esp, ebp
pop ebp
ret 0xc
cmp dword [esi + 0x18], 0
xorps xmm0, xmm0
mov edx, dword [ebp + 0xc]
movq qword [esp + 0x10], xmm0
mov dword [esp + 0x18], 0
mov dword [esp + 0x10], ecx
lea eax, [ecx + edx]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x14], eax
je 0x10094528
push edx
lea edi, [esi + 8]
push ecx
mov ecx, edi
call fcn.100278f0
cmp dword [edi + 0x14], 0x10
mov eax, dword [esi + 0x18]
jb 0x1009451a
mov edi, dword [edi]
add eax, edi
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], edi
lea eax, [esp + 0x10]
mov ecx, esi
push eax
call fcn.10093db0
test eax, eax
jne 0x100945ef
lea eax, [esp + 0x10]
mov ecx, esi
push eax
call fcn.100941d0
test eax, eax
jne 0x100945ef
mov ecx, dword [esp + 0x14]
mov eax, ecx
mov edx, dword [esp + 0x18]
sub eax, edx
je 0x10094600
lea eax, [esi + 0x3c]
lea ecx, [esp + 0x10]
push ecx
mov ecx, eax
call fcn.10095140
test eax, eax
jne 0x100945ef
mov ecx, esi
call fcn.100939b0
test al, al
jne 0x100945f8
cmp byte [esi + 0xc9], al
jne 0x100945d8
cmp dword [esi + 0x34], 0x10
lea edi, [esi + 0x20]
mov ebx, dword [esi + 0x30]
jb 0x10094598
mov ecx, dword [edi]
jmp 0x1009459a
mov ecx, edi
mov edx, dword [esp + 0xc]
mov eax, dword [esi + 0xc4]
sub ebx, eax
push ebx
mov ebx, dword [esp + 0x10]
add eax, ecx
mov edx, dword [edx]
mov ecx, ebx
push eax
call dword [edx + 4]
cmp dword [edi + 0x14], 0x10
mov dword [edi + 0x10], 0
jb 0x100945c4
mov edi, dword [edi]
mov byte [edi], 0
mov dword [esi + 0x6c], 0
mov dword [esi + 0xc4], 0
mov ecx, dword [esp + 0x14]
mov eax, ecx
mov edx, dword [esp + 0x18]
sub eax, edx
lea eax, [esi + 0x3c]
jne 0x10094565
jmp 0x10094600
cmp eax, 0xffffffff
je 0x100944bd
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
sub ecx, edx
push ecx
push edx
lea ecx, [esi + 8]
call fcn.100106e0
push ebx
mov ecx, esi
call fcn.100943f0
mov ecx, dword [esp + 0x1c]
mov al, 1
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.100acf3e
mov esp, ebp
pop ebp
ret 0xc
mov ecx, 0x100e6740
call fcn.10026780
push 1
call fcn.100af252
int3
Function at 0x10094640
Capabilities:
Terminate process

Disassembly:
push ecx
push ebx
push esi
mov esi, ecx
mov bl, 1
cmp byte [esi + 0xc8], 0
jne 0x1009467f
mov edx, str.WARNING:
mov ecx, 0x100e6740
call fcn.10022690
mov edx, str.FinishDecoding___called_before_StartDecoding____or_called_after_DecodeChunk___returned_false
mov ecx, eax
call fcn.10022690
push eax
call fcn.100953e0
add esp, 4
cmp byte [0x100e7a64], 0
je 0x100946c1
jmp 0x100946d0
cmp dword [esi + 0x90], 0
je 0x100946a0
cmp dword [esi + 0xb0], 0
jne 0x100946ab
cmp byte [esi + 0x40], 0
jne 0x100946ab
call fcn.100939b0
test al, al
jne 0x100946c3
cmp dword [esi + 0x18], 0
sete al
test al, al
jne 0x100946c3
mov edx, str.ERROR:
mov ecx, 0x100e6740
call fcn.10022690
mov edx, str.FinishDecoding___called_before_parsing_entire_delta_file_window
jmp 0x10094664
xor bl, bl
mov ecx, esi
call fcn.10093c60
pop esi
mov al, bl
pop ebx
pop ecx
ret
mov ecx, 0x100e6740
call fcn.10026780
push 1
call fcn.100af252
int3

Function at 0x100946f0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ecx
mov eax, dword [ecx + 0xbc]
mov edx, dword [ebp + 8]
push esi
push edi
cmp edx, eax
jbe 0x1009476d
push eax
push ecx
push edx
push ecx
mov edx, str.ERROR:
mov ecx, 0x100e6740
call fcn.10022690
mov edx, str.Length_of_target_window__
mov ecx, eax
call fcn.10022690
add esp, 4
mov ecx, eax
call fcn.10049220
mov edx, str.__exceeds_limit_of
mov ecx, eax
call fcn.10022690
add esp, 4
mov ecx, eax
call fcn.10049220
mov edx, str._bytes
mov ecx, eax
call fcn.10022690
push eax
call fcn.100953e0
add esp, 4
cmp byte [0x100e7a64], 0
jne 0x10094839
mov al, 1
pop edi
pop esi
pop ecx
pop ebp
ret 4
mov esi, dword [ecx + 0xb4]
cmp esi, 0xfffffffd
je 0x100947d1
mov edi, dword [ecx + 0xc0]
mov eax, esi
sub eax, edi
cmp edx, eax
jbe 0x100947d1
push esi
push ecx
push edi
push ecx
push edx
push ecx
mov edx, str.ERROR:
mov ecx, 0x100e6740
call fcn.10022690
mov edx, str.Length_of_target_window__
mov ecx, eax
call fcn.10022690
add esp, 4
mov ecx, eax
call fcn.10049220
mov edx, str._bytes__plus_previous_windows__
mov ecx, eax
call fcn.10022690
add esp, 4
mov ecx, eax
call fcn.10049220
mov edx, str._bytes__would_exceed_planned_size_of
jmp 0x10094731
mov esi, dword [ecx + 0xb8]
mov eax, esi
mov ecx, dword [ecx + 0xc0]
sub eax, ecx
cmp edx, eax
jbe 0x10094830
push esi
push ecx
push ecx
push ecx
push edx
push ecx
mov edx, str.ERROR:
mov ecx, 0x100e6740
call fcn.10022690
mov edx, str.Length_of_target_window__
mov ecx, eax
call fcn.10022690
add esp, 4
mov ecx, eax
call fcn.10049220
mov edx, str._bytes__plus_previous_windows__
mov ecx, eax
call fcn.10022690
add esp, 4
mov ecx, eax
call fcn.10049220
mov edx, str._bytes__would_exceed_maximum_target_file_size_of
jmp 0x10094731
pop edi
xor al, al
pop esi
pop ecx
pop ebp
ret 4
mov ecx, 0x100e6740
call fcn.10026780
push 1
call fcn.100af252
int3
Function at 0x100948e0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
mov esi, dword [ebp + 8]
mov ebx, ecx
push edi
mov ecx, esi
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 0
lea eax, [ebx + 0x38]
mov dword [ebp - 4], 0
push eax
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
push eax
movzx eax, byte [ebx + 0x34]
push eax
call fcn.100a0920
test al, al
jne 0x1009492f
mov eax, dword [esi + 0xc]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebx]
mov edx, dword [ebp - 0xc]
cmp byte [eax + 0x38], 0x53
mov eax, dword [ebp - 4]
jne 0x10094980
test edx, edx
jne 0x10094980
test eax, eax
jne 0x10094980
mov eax, dword [ebp - 8]
mov ecx, ebx
mov dword [ebx + 0x28], eax
push dword [esi + 4]
push dword [esi + 8]
call fcn.10093780
mov eax, dword [ebx + 0x10]
mov ecx, dword [eax + 4]
add eax, 8
mov dword [ebx + 0x44], eax
xor eax, eax
mov dword [ebx + 0x48], ecx
mov dword [ebx + 0x4c], 0
mov dword [ebx + 0x50], 0x1000100
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
add eax, dword [ebp - 8]
mov ecx, dword [esi + 4]
add eax, edx
mov edi, dword [esi + 8]
sub ecx, edi
cmp ecx, eax
jae 0x1009499f
mov eax, 0xfffffffe
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push edx
push edi
lea ecx, [ebx + 0x18]
call fcn.10093660
mov eax, dword [ebx + 0x18]
lea ecx, [ebx + 0x10]
push dword [ebp - 8]
push dword [eax + 4]
call fcn.10093660
mov eax, dword [ebx + 0x10]
lea ecx, [ebx + 0x20]
push dword [ebp - 4]
push dword [eax + 4]
call fcn.10093660
mov eax, dword [ebx + 0x20]
mov esi, dword [eax + 4]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x14]
test ecx, ecx
jne 0x100949e2
call fcn.100a0840
jmp 0x100949e7
mov eax, dword [eax + 0x10]
add eax, ecx
cmp esi, eax
je 0x10094958
mov edx, str.ERROR:
mov ecx, 0x100e6740
call fcn.10022690
mov edx, str.The_end_of_the_instructions_section_does_not_match_the_end_of_the_delta_window
mov ecx, eax
call fcn.10022690
push eax
call fcn.100953e0
add esp, 4
cmp byte [0x100e7a64], 0
jne 0x10094a28
pop edi
pop esi
or eax, 0xffffffff
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, 0x100e6740
call fcn.10026780
push 1
call fcn.100af252
int3
Function at 0x10094be0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
mov dword [ebp - 8], esi
mov ecx, dword [esi]
mov ebx, dword [esi + 0xc]
mov eax, dword [ecx + 0x30]
sub eax, dword [esi + 0x30]
mov ecx, dword [ecx + 0x90]
add ebx, eax
mov dword [ebp - 4], eax
mov eax, dword [esi + 0x20]
push dword [eax + 4]
lea edx, [eax + 8]
push edx
push dword [ebp + 0xc]
push ebx
call fcn.1009fc00
mov edi, eax
cmp edi, 0xfffffffe
je 0x10094d74
cmp edi, 0xffffffff
je 0x10094d4b
test edi, edi
js 0x10094cf8
cmp edi, ebx
jg 0x10094cf8
mov ebx, dword [ebp + 8]
mov ecx, dword [esi + 0xc]
lea eax, [edi + ebx]
cmp eax, ecx
ja 0x10094c64
mov eax, dword [esi + 8]
mov ecx, dword [esi]
add eax, edi
push ebx
push eax
add ecx, 0x20
call fcn.100278f0
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
cmp edi, ecx
jae 0x10094c8f
mov eax, dword [esi + 8]
sub ecx, edi
push ecx
mov dword [ebp + 0xc], ecx
add eax, edi
mov ecx, dword [esi]
push eax
add ecx, 0x20
call fcn.100278f0
mov eax, dword [ebp - 4]
mov ecx, dword [ebp + 0xc]
add eax, ecx
add edi, ecx
mov dword [ebp - 4], eax
sub ebx, ecx
jmp 0x10094c92
mov eax, dword [ebp - 4]
mov ecx, dword [esi]
sub edi, dword [esi + 0xc]
add ecx, 0x20
cmp dword [ecx + 0x14], 0x10
jb 0x10094ca2
mov ecx, dword [ecx]
mov edx, dword [esi + 0x30]
mov esi, eax
add edx, ecx
sub esi, edi
mov dword [ebp + 0xc], edx
cmp ebx, esi
jbe 0x10094cdb
lea eax, [edx + edi]
push esi
push eax
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
add ecx, 0x20
call fcn.100278f0
mov eax, dword [ebp - 4]
add edi, esi
mov edx, dword [ebp + 0xc]
add eax, esi
sub ebx, esi
mov dword [ebp - 4], eax
mov esi, eax
sub esi, edi
cmp ebx, esi
ja 0x10094cb2
lea eax, [edx + edi]
push ebx
push eax
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
add ecx, 0x20
call fcn.100278f0
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push ebx
push ecx
push edi
push ecx
mov edx, str.ERROR:
mov ecx, 0x100e6740
call fcn.10022690
mov edx, str.Internal_error:_unexpected_address
mov ecx, eax
call fcn.10022690
add esp, 4
mov ecx, eax
call fcn.10050180
mov edx, str._returned_from_DecodeAddress__with_here_address_
mov ecx, eax
call fcn.10022690
add esp, 4
mov ecx, eax
call fcn.10050180
push eax
call fcn.100953e0
add esp, 4
cmp byte [0x100e7a64], 0
je 0x10094d68
jmp 0x10094d82
mov edx, str.ERROR:
mov ecx, 0x100e6740
call fcn.10022690
mov edx, str.Unable_to_decode_address_for_COPY
mov ecx, eax
call fcn.10022690
jmp 0x10094d37
or eax, 0xffffffff
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
pop edi
pop esi
mov eax, 0xfffffffe
pop ebx
mov esp, ebp
pop ebp
ret 8
mov ecx, 0x100e6740
call fcn.10026780
push 1
call fcn.100af252
int3
Function at 0x10095140
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
mov esi, ecx
push edi
cmp dword [esi], 0
jne 0x10095183
mov edx, str.ERROR:
mov ecx, 0x100e6740
call fcn.10022690
mov edx, str.Internal_error:_VCDiffDeltaFileWindow::DecodeWindow___called_before_VCDiffDeltaFileWindow::Init__
mov ecx, eax
call fcn.10022690
push eax
call fcn.100953e0
add esp, 4
cmp byte [0x100e7a64], 0
je 0x1009527a
jmp 0x10095284
cmp byte [esi + 4], 0
jne 0x100951d6
mov edi, dword [ebp + 8]
push edi
call fcn.10094a40
cmp eax, 0xfffffffe
je 0x100951ca
cmp eax, 0xffffffff
je 0x1009527a
mov eax, dword [esi]
mov ecx, dword [eax + 0x90]
call fcn.1009f7c0
test al, al
jne 0x1009521f
mov edx, str.ERROR:
mov ecx, 0x100e6740
call fcn.10022690
mov edx, str.Error_initializing_address_cache
jmp 0x10095265
mov eax, 0xfffffffe
pop edi
pop esi
pop ecx
pop ebp
ret 4
cmp byte [esi + 0x24], 0
je 0x100951f5
mov edx, str.ERROR:
mov ecx, 0x100e6740
call fcn.10022690
mov edx, str.Internal_error:_Resumed_decoding_of_a_delta_file_window_when_interleaved_format_is_not_being_used
jmp 0x10095161
mov edi, dword [ebp + 8]
push dword [edi + 4]
push dword [edi + 8]
call fcn.10093780
mov eax, dword [esi + 0x10]
mov ecx, dword [eax + 4]
add eax, 8
mov dword [esi + 0x44], eax
mov dword [esi + 0x48], ecx
mov eax, dword [eax]
mov dword [esi + 0x4c], eax
mov ax, word [esi + 0x50]
mov word [esi + 0x52], ax
push edi
mov ecx, esi
call fcn.10094da0
cmp eax, 0xfffffffe
je 0x10095241
cmp eax, 0xffffffff
je 0x1009527a
mov ecx, esi
call fcn.10094850
xor eax, eax
pop edi
pop esi
pop ecx
pop ebp
ret 4
cmp byte [esi + 0x24], 0
jne 0x10095251
cmp dword [esi + 0x28], 0
jg 0x100951ca
mov edx, str.ERROR:
mov ecx, 0x100e6740
call fcn.10022690
mov edx, str.End_of_data_reached_while_decoding_VCDIFF_delta_file
mov ecx, eax
call fcn.10022690
push eax
call fcn.100953e0
add esp, 4
call fcn.10093560
pop edi
or eax, 0xffffffff
pop esi
pop ecx
pop ebp
ret 4
mov ecx, 0x100e6740
call fcn.10026780
push 1
call fcn.100af252
int3

Function at 0x100957b0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push esi
mov esi, ecx
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov edx, dword [ecx]
push dword [eax + 4]
mov eax, dword [edx + 4]
call eax
test al, al
jne 0x100957fd
mov edx, str.ERROR:
mov ecx, 0x100e6740
call fcn.10022690
mov edx, str.Internal_error:_Initialization_of_code_table_writer_failed
mov ecx, eax
call fcn.10022690
push eax
call fcn.100953e0
add esp, 4
cmp byte [0x100e7a64], 0
jne 0x10095841
xor al, al
pop esi
pop ebp
ret 4
mov eax, dword [esi]
mov ecx, dword [esi + 4]
push dword [eax + 4]
mov edx, dword [ecx]
push dword [eax]
mov eax, dword [edx + 0x24]
call eax
test al, al
jne 0x10095828
mov edx, str.ERROR:
mov ecx, 0x100e6740
call fcn.10022690
mov edx, str.Dictionary_not_valid_for_writer
jmp 0x100957dd
mov ecx, dword [esi + 4]
push dword [esi + 8]
push dword [ebp + 8]
mov eax, dword [ecx]
call dword [eax + 8]
mov byte [esi + 0xd], 1
mov al, 1
pop esi
pop ebp
ret 4
mov ecx, 0x100e6740
call fcn.10026780
push 1
call fcn.100af252
int3
Function at 0x10095860
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, ecx
push esi
push edi
cmp byte [ebx + 0xd], 0
jne 0x100958a8
mov edx, str.ERROR:
mov ecx, 0x100e6740
call fcn.10022690
mov edx, str.EncodeChunk_called_before_StartEncoding
mov ecx, eax
call fcn.10022690
push eax
call fcn.100953e0
add esp, 4
cmp byte [0x100e7a64], 0
jne 0x10095928
xor al, al
pop edi
pop esi
pop ebx
pop ebp
ret 0xc
mov ecx, dword [ebx + 4]
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
push esi
mov eax, dword [ecx]
push edi
mov eax, dword [eax + 0x28]
call eax
test al, al
jne 0x100958d4
mov edx, str.ERROR:
mov ecx, 0x100e6740
call fcn.10022690
mov edx, str.Target_chunk_not_valid_for_writer
jmp 0x10095882
test byte [ebx + 8], 2
je 0x100958fb
mov esi, dword [ebx + 4]
xor ecx, ecx
push dword [ebp + 0xc]
mov edx, dword [ebp + 8]
mov edi, dword [esi]
call fcn.1009ee10
add esp, 4
mov ecx, esi
push eax
call dword [edi + 0x18]
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
cmp byte [ebx + 0xc], 0
mov eax, dword [ebx + 4]
mov ecx, dword [ebx]
push eax
push dword [ebp + 0x10]
push esi
push edi
je 0x1009591a
call fcn.100a0d10
mov al, 1
pop edi
pop esi
pop ebx
pop ebp
ret 0xc
call fcn.100a0ee0
pop edi
pop esi
mov al, 1
pop ebx
pop ebp
ret 0xc
mov ecx, 0x100e6740
call fcn.10026780
push 1
call fcn.100af252
int3

Function at 0x10095940
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ecx
cmp byte [ecx + 0xd], 0
jne 0x1009597e
mov edx, str.ERROR:
mov ecx, 0x100e6740
call fcn.10022690
mov edx, str.FinishEncoding_called_before_StartEncoding
mov ecx, eax
call fcn.10022690
push eax
call fcn.100953e0
add esp, 4
cmp byte [0x100e7a64], 0
jne 0x10095994
xor al, al
pop ecx
pop ebp
ret 4
push dword [ebp + 8]
mov byte [ecx + 0xd], 0
mov ecx, dword [ecx + 4]
mov eax, dword [ecx]
call dword [eax + 0x20]
mov al, 1
pop ecx
pop ebp
ret 4
mov ecx, 0x100e6740
call fcn.10026780
push 1
call fcn.100af252
int3
Function at 0x1009f080
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, ecx
push edi
mov eax, dword [esi + 8]
test eax, eax
jne 0x1009f0c6
mov edx, str.ERROR:
mov ecx, 0x100e6740
call fcn.10022690
mov edx, str.Internal_error:_GetNextInstruction___called_before_Init__
mov ecx, eax
call fcn.10022690
push eax
call fcn.100953e0
add esp, 4
cmp byte [0x100e7a64], 0
je 0x1009f18a
jmp 0x1009f1c0
mov eax, dword [eax]
mov dword [esi + 0x10], eax
mov ax, word [esi + 0x14]
mov word [esi + 0x16], ax
mov ecx, 0x100
cmp word [esi + 0x14], cx
jne 0x1009f121
mov ecx, dword [esi + 8]
mov eax, dword [ecx]
cmp eax, dword [esi + 0xc]
jae 0x1009f19e
mov dl, byte [eax]
mov eax, dword [esi]
movzx edi, dl
cmp byte [edi + eax + 0x100], 0
je 0x1009f105
movsx ax, dl
mov word [esi + 0x14], ax
inc dword [ecx]
mov eax, dword [esi]
mov bl, byte [edi + eax]
movzx edx, byte [edi + eax + 0x200]
mov bh, byte [edi + eax + 0x400]
test bl, bl
jne 0x1009f143
jmp 0x1009f0d3
mov al, byte [esi + 0x14]
mov word [esi + 0x14], cx
movzx ecx, al
mov eax, dword [esi]
mov bl, byte [ecx + eax + 0x100]
movzx edx, byte [ecx + eax + 0x300]
mov bh, byte [ecx + eax + 0x500]
test edx, edx
jne 0x1009f1ab
mov edx, dword [esi + 8]
mov ecx, dword [esi + 0xc]
call fcn.100a4a90
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
cmp eax, 0xfffffffe
je 0x1009f197
cmp eax, 0xffffffff
jne 0x1009f1b0
mov edx, str.ERROR:
mov ecx, 0x100e6740
call fcn.10022690
mov edx, str.Instruction_size_is_not_a_valid_variable_length_integer
mov ecx, eax
call fcn.10022690
push eax
call fcn.100953e0
add esp, 4
call fcn.10093560
mov eax, 4
pop edi
pop esi
pop ebx
pop ecx
pop ebp
ret 8
mov ecx, esi
call fcn.10093580
mov eax, 5
pop edi
pop esi
pop ebx
pop ecx
pop ebp
ret 8
mov eax, dword [ebp + 8]
mov dword [eax], edx
mov eax, dword [ebp + 0xc]
pop edi
pop esi
mov byte [eax], bh
movzx eax, bl
pop ebx
pop ecx
pop ebp
ret 8
mov ecx, 0x100e6740
call fcn.10026780
push 1
call fcn.100af252
int3

Function at 0x1009f1e0
Capabilities:
Terminate process

Disassembly:
push ecx
cmp ecx, 3
ja case.default.0x1009f1e6
jmp dword [ecx*4 + 0x1009f25c]
mov eax, str.NOOP
pop ecx
ret
mov eax, 0x101010f0
pop ecx
ret
mov eax, 0x101010f4
pop ecx
ret
mov eax, str.COPY
pop ecx
ret
push ecx
push ecx
mov edx, str.ERROR:
mov ecx, 0x100e6740
call fcn.10022690
mov edx, str.Unexpected_instruction_type
mov ecx, eax
call fcn.10022690
add esp, 4
mov ecx, eax
call fcn.10050180
push eax
call fcn.100953e0
add esp, 4
cmp byte [0x100e7a64], 0
jne 0x1009f249
mov eax, 0x100f4a73
pop ecx
ret
mov ecx, 0x100e6740
call fcn.10026780
push 1
call fcn.100af252
mov edi, edi
in eax, dx
int1
or dword [eax], edx
hlt
Function at 0x1009f270
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov bl, dl
mov esi, ecx
mov al, 1
push edi
mov edi, dword [ebp + 0x14]
cmp bl, 3
jbe 0x1009f2f4
movzx eax, bl
mov edx, str.ERROR:
push eax
push ecx
push esi
push ecx
mov ecx, 0x100e6740
call fcn.10022690
mov edx, str.VCDiff:_Bad_code_table__opcode
mov ecx, eax
call fcn.10022690
add esp, 4
mov ecx, eax
call fcn.10050180
mov edx, str._has_invalid
mov ecx, eax
call fcn.10022690
mov edx, edi
mov ecx, eax
call fcn.10022690
mov edx, str._instruction_type
mov ecx, eax
call fcn.10022690
add esp, 4
mov ecx, eax
call fcn.10050180
push eax
call fcn.100953e0
add esp, 4
cmp byte [0x100e7a64], 0
jne 0x1009f460
xor al, al
mov bh, byte [ebp + 0xc]
cmp bh, byte [ebp + 0x10]
jbe 0x1009f36b
movzx eax, bh
mov edx, str.ERROR:
push eax
push ecx
push esi
push ecx
mov ecx, 0x100e6740
call fcn.10022690
mov edx, str.VCDiff:_Bad_code_table__opcode
mov ecx, eax
call fcn.10022690
add esp, 4
mov ecx, eax
call fcn.10050180
mov edx, str._has_invalid
mov ecx, eax
call fcn.10022690
mov edx, edi
mov ecx, eax
call fcn.10022690
mov edx, str._mode
mov ecx, eax
call fcn.10022690
add esp, 4
mov ecx, eax
call fcn.10050180
push eax
call fcn.100953e0
add esp, 4
cmp byte [0x100e7a64], 0
jne 0x1009f471
xor al, al
test bl, bl
jne 0x1009f3e6
mov cl, byte [ebp + 8]
test cl, cl
je 0x1009f3eb
movzx eax, cl
mov edx, str.ERROR:
push eax
push ecx
push esi
push ecx
mov ecx, 0x100e6740
call fcn.10022690
mov edx, str.VCDiff:_Bad_code_table__opcode
mov ecx, eax
call fcn.10022690
add esp, 4
mov ecx, eax
call fcn.10050180
mov edx, str._has
mov ecx, eax
call fcn.10022690
mov edx, edi
mov ecx, eax
call fcn.10022690
mov edx, str._instruction_NOOP_with_nonzero_size
mov ecx, eax
call fcn.10022690
add esp, 4
mov ecx, eax
call fcn.10050180
push eax
call fcn.100953e0
add esp, 4
cmp byte [0x100e7a64], bl
jne 0x1009f482
xor al, al
jmp 0x1009f3eb
cmp bl, 3
je 0x1009f45a
test bh, bh
je 0x1009f45a
movzx eax, bh
mov edx, str.ERROR:
push eax
push ecx
push esi
push ecx
mov ecx, 0x100e6740
call fcn.10022690
mov edx, str.VCDiff:_Bad_code_table__opcode
mov ecx, eax
call fcn.10022690
add esp, 4
mov ecx, eax
call fcn.10050180
mov edx, str._has_non_COPY
mov ecx, eax
call fcn.10022690
mov edx, edi
mov ecx, eax
call fcn.10022690
mov edx, str._instruction_with_nonzero_mode
mov ecx, eax
call fcn.10022690
add esp, 4
mov ecx, eax
call fcn.10050180
push eax
call fcn.100953e0
add esp, 4
cmp byte [0x100e7a64], 0
jne 0x1009f493
xor al, al
pop edi
pop esi
pop ebx
pop ecx
pop ebp
ret
mov ecx, 0x100e6740
call fcn.10026780
push 1
call fcn.100af252
mov ecx, 0x100e6740
call fcn.10026780
push 1
call fcn.100af252
mov ecx, 0x100e6740
call fcn.10026780
push 1
call fcn.100af252
mov ecx, 0x100e6740
call fcn.10026780
push 1
call fcn.100af252
int3
Function at 0x1009f4b0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x118
mov edx, dword [ebp + 8]
xor eax, eax
push ebx
push esi
push edi
movzx edi, dl
mov bl, 1
add edi, 4
mov dword [ebp - 4], edi
test edi, edi
jle 0x1009f4e8
cmp eax, 0x103
jae 0x1009f67d
mov byte [ebp + eax - 0x118], 0
inc eax
cmp eax, edi
jl 0x1009f4d0
mov eax, 0xfffffe00
lea esi, [ecx + 0x200]
sub eax, ecx
mov dword [ebp - 8], eax
jmp 0x1009f500
lea ecx, [eax + esi]
movzx eax, byte [esi + 0x200]
push str.first
push edx
mov dl, byte [esi - 0x200]
push eax
movzx eax, byte [esi]
push eax
mov dword [ebp - 0xc], ecx
call fcn.1009f270
add esp, 0x10
test al, al
je 0x1009f532
test bl, bl
je 0x1009f532
mov bl, 1
jmp 0x1009f534
xor bl, bl
movzx eax, byte [esi + 0x300]
mov dl, byte [esi - 0x100]
mov ecx, dword [ebp - 0xc]
push str.second
push dword [ebp + 8]
push eax
movzx eax, byte [esi + 0x100]
push eax
call fcn.1009f270
add esp, 0x10
test al, al
je 0x1009f569
test bl, bl
je 0x1009f569
mov bl, 1
jmp 0x1009f56b
xor bl, bl
cmp byte [esi], 0
jne 0x1009f595
cmp byte [esi - 0x100], 0
jne 0x1009f595
movzx ecx, byte [esi + 0x200]
movzx eax, byte [esi - 0x200]
add eax, ecx
cmp eax, edi
jge 0x1009f595
mov byte [ebp + eax - 0x118], 1
mov eax, dword [ebp - 8]
inc esi
mov edx, dword [ebp + 8]
add eax, esi
cmp eax, 0x100
mov eax, dword [ebp - 8]
jl 0x1009f500
mov esi, dword [ebp - 4]
xor edi, edi
test esi, esi
jle 0x1009f672
lea esp, [esp]
test edi, edi
je 0x1009f669
cmp byte [ebp + edi - 0x118], 0
jne 0x1009f669
cmp edi, 3
jl 0x1009f619
lea eax, [edi - 3]
mov edx, str.ERROR:
push eax
push ecx
mov ecx, 0x100e6740
call fcn.10022690
mov edx, str.VCDiff:_Bad_code_table__there_is_no_opcode_for_inst_COPY__size_0__mode
mov ecx, eax
call fcn.10022690
add esp, 4
mov ecx, eax
call fcn.10050180
push eax
call fcn.100953e0
add esp, 4
cmp byte [0x100e7a64], 0
je 0x1009f667
jmp 0x1009f682
mov ecx, edi
call fcn.1009f1e0
mov edx, str.ERROR:
mov ecx, 0x100e6740
mov esi, eax
call fcn.10022690
mov edx, str.VCDiff:_Bad_code_table__there_is_no_opcode_for_inst
mov ecx, eax
call fcn.10022690
mov edx, esi
mov ecx, eax
call fcn.10022690
mov edx, str.__size_0___mode_0
mov ecx, eax
call fcn.10022690
push eax
call fcn.100953e0
add esp, 4
cmp byte [0x100e7a64], 0
jne 0x1009f682
mov esi, dword [ebp - 4]
xor bl, bl
inc edi
cmp edi, esi
jl 0x1009f5c0
pop edi
pop esi
mov al, bl
pop ebx
mov esp, ebp
pop ebp
ret 4
call fcn.100aec07
mov ecx, 0x100e6740
call fcn.10026780
push 1
call fcn.100af252
int3