joyce8/EMBER2024-capa huggingface dataset:
Function at 0x466b2e
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x4cc]
add edx, 1
mov dword [ebp - 0x4cc], edx
add esp, 4
pop edi
mov eax, dword [ebp - 0xa68]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa64]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x466b54
mov dword [ebp - 0x14c0], 1
jmp 0x466b5e
mov dword [ebp - 0x14c0], 0xffffffff
mov ecx, dword [ebp - 0x14c0]
mov dword [ebp - 0xc0c], ecx
jmp 0x466bd0
mov edx, dword [ebp - 0xc0c]
mov dword [ebp - 0x14c4], edx
cmp dword [ebp - 0x14c4], 0
jne 0x466c25
push edx
push esi
add esp, 4
sub edx, 0x11aa
xor edx, 0xe214
pop edx
push eax
or eax, 0x5709
xor eax, 0xb726
sub eax, 0x1045d
pop eax
push edi
push ebx
add esp, 4
xor edi, 0x172f
pop edi
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x3cc], eax
jmp 0x466c66
jmp 0x466973

Function at 0x466b81
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
cmp dword [ebp - 0xc08], 0
jle 0x466bd0
push ebx
add ebx, 0xec19
pop ebx
push ebx
push edi
add esp, 4
and ebx, 0xa066
add ebx, 0x6b11
pop ebx
push eax
push ecx
add esp, 4
xor eax, 0x7d6c
or eax, 0xa4b9
xor eax, 0xb04d
pop eax
mov edx, dword [ebp - 0xa68]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa64]
movzx edx, byte [ecx]
cmp eax, edx
je 0x466b6c
push edi
jmp 0x466b06
jmp 0x466b0d
pop edi
push edi
push ecx
add esp, 4
jmp 0x466b1b
and edi, 0x957a
call fcn.00466b2e
add byte [edi + edi + 0x3d], cl
inc ebp
inc ebp
cmp dh, byte [ebx]
push ebx
or ebx, 0x13ee8
call fcn.00466b81
add byte [eax + ecx*2], dh
aas
inc ebx
inc esi
xor al, 0x39
dec ebp
add esp, 4
pop ebx
push ebx
xor ebx, 0x2333
pop ebx
push eax
call 0x466b9a
add byte [ebx + eax*2], dh
cmp eax, dword [edx + 0x4d]
xor al, 0x83
les eax, [eax + ebx*2]
mov edx, dword [ebp - 0xc08]
sub edx, 1
mov dword [ebp - 0xc08], edx
mov eax, dword [ebp - 0xa68]
add eax, 1
mov dword [ebp - 0xa68], eax
mov ecx, dword [ebp - 0xa64]
add ecx, 1
mov dword [ebp - 0xa64], ecx
jmp 0x466aab

Function at 0x466b9a
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
cmp dword [ebp - 0xc08], 0
jle 0x466bd0
push ebx
add ebx, 0xec19
pop ebx
push ebx
push edi
add esp, 4
and ebx, 0xa066
add ebx, 0x6b11
pop ebx
push eax
push ecx
add esp, 4
xor eax, 0x7d6c
or eax, 0xa4b9
xor eax, 0xb04d
pop eax
mov edx, dword [ebp - 0xa68]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa64]
movzx edx, byte [ecx]
cmp eax, edx
je 0x466b6c
push edi
jmp 0x466b06
jmp 0x466b0d
pop edi
push edi
push ecx
add esp, 4
jmp 0x466b1b
and edi, 0x957a
call fcn.00466b2e
add byte [edi + edi + 0x3d], cl
inc ebp
inc ebp
cmp dh, byte [ebx]
push ebx
or ebx, 0x13ee8
call fcn.00466b81
add byte [eax + ecx*2], dh
aas
inc ebx
inc esi
xor al, 0x39
dec ebp
add esp, 4
pop ebx
push ebx
xor ebx, 0x2333
pop ebx
push eax
call 0x466b9a
add byte [ebx + eax*2], dh
cmp eax, dword [edx + 0x4d]
xor al, 0x83
les eax, [eax + ebx*2]
mov edx, dword [ebp - 0xc08]
sub edx, 1
mov dword [ebp - 0xc08], edx
mov eax, dword [ebp - 0xa68]
add eax, 1
mov dword [ebp - 0xa68], eax
mov ecx, dword [ebp - 0xa64]
add ecx, 1
mov dword [ebp - 0xa64], ecx
jmp 0x466aab
Function at 0x46786b
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push esi
xor esi, 0xcfde
add esi, 0xc5ab
xor esi, 0x1dd4
pop esi
push ecx
push ebx
add esp, 4
or ecx, 0x185af
and ecx, 0x13923
or ecx, 0x12abf
add ecx, 0xed56
pop ecx
mov ecx, dword [ebp - 0xc24]
mov dx, word [ecx]
mov word [ebp - 0xf82], dx
mov eax, dword [ebp - 0xc24]
add eax, 2
mov dword [ebp - 0xc24], eax
mov cx, word [ebp - 0xf82]
mov word [ebp - 0x1fc], cx
mov edx, dword [ebp - 0xc28]
mov ax, word [edx]
mov word [ebp - 0xf84], ax
mov ecx, dword [ebp - 0xc28]
add ecx, 2
mov dword [ebp - 0xc28], ecx
mov dx, word [ebp - 0xf84]
mov word [ebp - 0x104], dx
push ecx
call fcn.0046786b
add byte [edi + edi + 0x3b], al
dec edi
cmp cl, byte [esi + 0x33]
inc ebx
dec edi
add esp, 4
sub ecx, 0x17912
pop ecx
push ebx
push ecx
add esp, 4
jmp 0x46787f
pop ebx
push esi
push esi
add esp, 4
sub esi, 0x116e5
pop esi
movzx eax, word [ebp - 0x104]
test eax, eax
jne 0x4678af
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
sub ecx, edx
mov dword [ebp - 0x14e4], ecx
jmp 0x467912
movzx eax, word [ebp - 0x1fc]
movzx ecx, word [ebp - 0x104]
cmp eax, ecx
je 0x4677ce
movzx edx, word [ebp - 0x1fc]
xor edx, 0x20
movzx eax, word [ebp - 0x104]
cmp edx, eax
je 0x4677ce
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
cmp ecx, edx
jge 0x4678fc
mov dword [ebp - 0x14e0], 0xffffffff
jmp 0x467906
mov dword [ebp - 0x14e0], 1
mov eax, dword [ebp - 0x14e0]
mov dword [ebp - 0x14e4], eax
cmp dword [ebp - 0x14e4], 0
jne 0x46795b
push eax
push edx
add esp, 4
add eax, 0x76f3
xor eax, 0xa6bc
pop eax
push ecx
and ecx, 0x135a2
jmp 0x46793d
call 0x467949
add byte [edi + 0x3e], al
dec esp
cmp al, 0x43
inc esp
add esp, 4
pop ecx
mov ecx, dword [ebp - 0x4d8]
mov dword [ebp - 0x6ec], ecx
jmp 0x4679c3
push edx
push eax
add esp, 4
or edx, 0x1612d
pop edx
push esi
call 0x467977
add byte [0x33494d42], dh
cmp ecx, dword [eax + 0x38]
dec edx
add esp, 4
or esi, 0xc499
xor esi, 0x1d3
sub esi, 0x79d5
pop esi
mov edx, dword [ebp - 0x4d8]
mov eax, dword [edx]
mov dword [ebp - 0x4d8], eax
mov ecx, dword [ebp - 0x4d8]
cmp ecx, dword [ebp - 0xc2c]
je 0x4679b9
mov edx, dword [ebp - 0x4d8]
cmp dword [edx + 0x30], 0
jne 0x46776f
mov dword [ebp - 0x6ec], 0
Function at 0x467949
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push esi
xor esi, 0xcfde
add esi, 0xc5ab
xor esi, 0x1dd4
pop esi
push ecx
push ebx
add esp, 4
or ecx, 0x185af
and ecx, 0x13923
or ecx, 0x12abf
add ecx, 0xed56
pop ecx
mov ecx, dword [ebp - 0xc24]
mov dx, word [ecx]
mov word [ebp - 0xf82], dx
mov eax, dword [ebp - 0xc24]
add eax, 2
mov dword [ebp - 0xc24], eax
mov cx, word [ebp - 0xf82]
mov word [ebp - 0x1fc], cx
mov edx, dword [ebp - 0xc28]
mov ax, word [edx]
mov word [ebp - 0xf84], ax
mov ecx, dword [ebp - 0xc28]
add ecx, 2
mov dword [ebp - 0xc28], ecx
mov dx, word [ebp - 0xf84]
mov word [ebp - 0x104], dx
push ecx
call fcn.0046786b
add byte [edi + edi + 0x3b], al
dec edi
cmp cl, byte [esi + 0x33]
inc ebx
dec edi
add esp, 4
sub ecx, 0x17912
pop ecx
push ebx
push ecx
add esp, 4
jmp 0x46787f
pop ebx
push esi
push esi
add esp, 4
sub esi, 0x116e5
pop esi
movzx eax, word [ebp - 0x104]
test eax, eax
jne 0x4678af
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
sub ecx, edx
mov dword [ebp - 0x14e4], ecx
jmp 0x467912
movzx eax, word [ebp - 0x1fc]
movzx ecx, word [ebp - 0x104]
cmp eax, ecx
je 0x4677ce
movzx edx, word [ebp - 0x1fc]
xor edx, 0x20
movzx eax, word [ebp - 0x104]
cmp edx, eax
je 0x4677ce
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
cmp ecx, edx
jge 0x4678fc
mov dword [ebp - 0x14e0], 0xffffffff
jmp 0x467906
mov dword [ebp - 0x14e0], 1
mov eax, dword [ebp - 0x14e0]
mov dword [ebp - 0x14e4], eax
cmp dword [ebp - 0x14e4], 0
jne 0x46795b
push eax
push edx
add esp, 4
add eax, 0x76f3
xor eax, 0xa6bc
pop eax
push ecx
and ecx, 0x135a2
jmp 0x46793d
call 0x467949
add byte [edi + 0x3e], al
dec esp
cmp al, 0x43
inc esp
add esp, 4
pop ecx
mov ecx, dword [ebp - 0x4d8]
mov dword [ebp - 0x6ec], ecx
jmp 0x4679c3
push edx
push eax
add esp, 4
or edx, 0x1612d
pop edx
push esi
call 0x467977
add byte [0x33494d42], dh
cmp ecx, dword [eax + 0x38]
dec edx
add esp, 4
or esi, 0xc499
xor esi, 0x1d3
sub esi, 0x79d5
pop esi
mov edx, dword [ebp - 0x4d8]
mov eax, dword [edx]
mov dword [ebp - 0x4d8], eax
mov ecx, dword [ebp - 0x4d8]
cmp ecx, dword [ebp - 0xc2c]
je 0x4679b9
mov edx, dword [ebp - 0x4d8]
cmp dword [edx + 0x30], 0
jne 0x46776f
mov dword [ebp - 0x6ec], 0
Function at 0x467977
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push esi
xor esi, 0xcfde
add esi, 0xc5ab
xor esi, 0x1dd4
pop esi
push ecx
push ebx
add esp, 4
or ecx, 0x185af
and ecx, 0x13923
or ecx, 0x12abf
add ecx, 0xed56
pop ecx
mov ecx, dword [ebp - 0xc24]
mov dx, word [ecx]
mov word [ebp - 0xf82], dx
mov eax, dword [ebp - 0xc24]
add eax, 2
mov dword [ebp - 0xc24], eax
mov cx, word [ebp - 0xf82]
mov word [ebp - 0x1fc], cx
mov edx, dword [ebp - 0xc28]
mov ax, word [edx]
mov word [ebp - 0xf84], ax
mov ecx, dword [ebp - 0xc28]
add ecx, 2
mov dword [ebp - 0xc28], ecx
mov dx, word [ebp - 0xf84]
mov word [ebp - 0x104], dx
push ecx
call fcn.0046786b
add byte [edi + edi + 0x3b], al
dec edi
cmp cl, byte [esi + 0x33]
inc ebx
dec edi
add esp, 4
sub ecx, 0x17912
pop ecx
push ebx
push ecx
add esp, 4
jmp 0x46787f
pop ebx
push esi
push esi
add esp, 4
sub esi, 0x116e5
pop esi
movzx eax, word [ebp - 0x104]
test eax, eax
jne 0x4678af
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
sub ecx, edx
mov dword [ebp - 0x14e4], ecx
jmp 0x467912
movzx eax, word [ebp - 0x1fc]
movzx ecx, word [ebp - 0x104]
cmp eax, ecx
je 0x4677ce
movzx edx, word [ebp - 0x1fc]
xor edx, 0x20
movzx eax, word [ebp - 0x104]
cmp edx, eax
je 0x4677ce
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
cmp ecx, edx
jge 0x4678fc
mov dword [ebp - 0x14e0], 0xffffffff
jmp 0x467906
mov dword [ebp - 0x14e0], 1
mov eax, dword [ebp - 0x14e0]
mov dword [ebp - 0x14e4], eax
cmp dword [ebp - 0x14e4], 0
jne 0x46795b
push eax
push edx
add esp, 4
add eax, 0x76f3
xor eax, 0xa6bc
pop eax
push ecx
and ecx, 0x135a2
jmp 0x46793d
call 0x467949
add byte [edi + 0x3e], al
dec esp
cmp al, 0x43
inc esp
add esp, 4
pop ecx
mov ecx, dword [ebp - 0x4d8]
mov dword [ebp - 0x6ec], ecx
jmp 0x4679c3
push edx
push eax
add esp, 4
or edx, 0x1612d
pop edx
push esi
call 0x467977
add byte [0x33494d42], dh
cmp ecx, dword [eax + 0x38]
dec edx
add esp, 4
or esi, 0xc499
xor esi, 0x1d3
sub esi, 0x79d5
pop esi
mov edx, dword [ebp - 0x4d8]
mov eax, dword [edx]
mov dword [ebp - 0x4d8], eax
mov ecx, dword [ebp - 0x4d8]
cmp ecx, dword [ebp - 0xc2c]
je 0x4679b9
mov edx, dword [ebp - 0x4d8]
cmp dword [edx + 0x30], 0
jne 0x46776f
mov dword [ebp - 0x6ec], 0
Function at 0x468c75
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add esp, 4
xor edx, 0x16dfc
pop edx
push eax
push ecx
add esp, 4
sub eax, 0x13138
jmp 0x468c91
or eax, 0xd295
pop eax
cmp dword [ebp - 0xc58], 0
jne 0x468cb0
mov dword [ebp - 0x710], 0
jmp 0x468efb
mov edx, dword [ebp - 0xc58]
mov dword [ebp - 0x4e8], edx
push ebx
call 0x468ccb
add byte [0x3b39383f], dh
dec esp
xor cl, byte [edi - 0x7d]
les eax, [ecx + eax*4]
fstp xword [eax + eax]
and ebx, 0x9ef9
sub ebx, 0x16fc5
pop ebx
push ebx
jmp 0x468ce7
add ebx, 0xd9df
pop ebx
lea eax, [ebp - 0x16e8]
mov dword [ebp - 0xc54], eax
mov ecx, dword [ebp - 0x4e8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc50], edx
xor eax, eax
mov word [ebp - 0x208], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push ecx
sub ecx, 0x174c7
pop ecx
push edi
push ebx
add esp, 4
and edi, 0x14eb2
and edi, 0x13a0a
pop edi
push ecx
push esi
add esp, 4
call 0x468d46
add byte [edi], dh
cmp dword [edi + 0x37], ecx
dec esp
xor eax, 0x83373f44
les eax, [ecx + ebx*2]
mov edx, dword [ebp - 0xc50]
mov ax, word [edx]
mov word [ebp - 0xf8e], ax
mov ecx, dword [ebp - 0xc50]
add ecx, 2
mov dword [ebp - 0xc50], ecx
mov dx, word [ebp - 0xf8e]
mov word [ebp - 0x208], dx
mov eax, dword [ebp - 0xc54]
mov cx, word [eax]
mov word [ebp - 0xf90], cx
mov edx, dword [ebp - 0xc54]
add edx, 2
mov dword [ebp - 0xc54], edx
mov ax, word [ebp - 0xf90]
mov word [ebp - 0x3c], ax
push ecx
push esi
add esp, 4
and ecx, 0x140e4
call 0x468db8
add byte [0x39354b4d], bh
xor al, byte [ebx + 0x565904c4]
and esi, 0x49e0
call 0x468dcf
add byte [0x36504c4c], dh
xor eax, 0x5e04c483
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x468df0
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1560], edx
jmp 0x468e4a
movzx ecx, word [ebp - 0x208]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x468d18
movzx eax, word [ebp - 0x208]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x468d18
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x468e34
mov dword [ebp - 0x151c], 0xffffffff
jmp 0x468e3e
mov dword [ebp - 0x151c], 1
mov ecx, dword [ebp - 0x151c]
mov dword [ebp - 0x1560], ecx
cmp dword [ebp - 0x1560], 0
jne 0x468e93
push eax
push edx
add esp, 4
call 0x468e68
add byte [ebx + 0x35], cl
dec ebx
inc esi
aas
xor eax, 0x3f465044
add esp, 4
pop eax
push edx
push edi
add esp, 4
call 0x468e81
add byte [ecx], bh
cmp byte [edx + 0x45], cl
dec edi
dec esi
inc eax
dec edx
xor cl, byte [esi - 0x7d]
les eax, [edx + ebx*2]
mov edx, dword [ebp - 0x4e8]
mov dword [ebp - 0x710], edx
jmp 0x468efb
push edx
push ebx
add esp, 4
or edx, 0x13b79
jmp 0x468ea4
pop edx
push ebx
and ebx, 0x9fec
add ebx, 0x15f6a
or ebx, 0x12b98
pop ebx
push ebx
push esi
add esp, 4
and ebx, 0x84a6
pop ebx
mov eax, dword [ebp - 0x4e8]
mov ecx, dword [eax]
mov dword [ebp - 0x4e8], ecx
mov edx, dword [ebp - 0x4e8]
cmp edx, dword [ebp - 0xc58]
je 0x468ef1
mov eax, dword [ebp - 0x4e8]
cmp dword [eax + 0x30], 0
jne 0x468cbc
mov dword [ebp - 0x710], 0
Function at 0x468ccb
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add esp, 4
xor edx, 0x16dfc
pop edx
push eax
push ecx
add esp, 4
sub eax, 0x13138
jmp 0x468c91
or eax, 0xd295
pop eax
cmp dword [ebp - 0xc58], 0
jne 0x468cb0
mov dword [ebp - 0x710], 0
jmp 0x468efb
mov edx, dword [ebp - 0xc58]
mov dword [ebp - 0x4e8], edx
push ebx
call 0x468ccb
add byte [0x3b39383f], dh
dec esp
xor cl, byte [edi - 0x7d]
les eax, [ecx + eax*4]
fstp xword [eax + eax]
and ebx, 0x9ef9
sub ebx, 0x16fc5
pop ebx
push ebx
jmp 0x468ce7
add ebx, 0xd9df
pop ebx
lea eax, [ebp - 0x16e8]
mov dword [ebp - 0xc54], eax
mov ecx, dword [ebp - 0x4e8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc50], edx
xor eax, eax
mov word [ebp - 0x208], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push ecx
sub ecx, 0x174c7
pop ecx
push edi
push ebx
add esp, 4
and edi, 0x14eb2
and edi, 0x13a0a
pop edi
push ecx
push esi
add esp, 4
call 0x468d46
add byte [edi], dh
cmp dword [edi + 0x37], ecx
dec esp
xor eax, 0x83373f44
les eax, [ecx + ebx*2]
mov edx, dword [ebp - 0xc50]
mov ax, word [edx]
mov word [ebp - 0xf8e], ax
mov ecx, dword [ebp - 0xc50]
add ecx, 2
mov dword [ebp - 0xc50], ecx
mov dx, word [ebp - 0xf8e]
mov word [ebp - 0x208], dx
mov eax, dword [ebp - 0xc54]
mov cx, word [eax]
mov word [ebp - 0xf90], cx
mov edx, dword [ebp - 0xc54]
add edx, 2
mov dword [ebp - 0xc54], edx
mov ax, word [ebp - 0xf90]
mov word [ebp - 0x3c], ax
push ecx
push esi
add esp, 4
and ecx, 0x140e4
call 0x468db8
add byte [0x39354b4d], bh
xor al, byte [ebx + 0x565904c4]
and esi, 0x49e0
call 0x468dcf
add byte [0x36504c4c], dh
xor eax, 0x5e04c483
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x468df0
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1560], edx
jmp 0x468e4a
movzx ecx, word [ebp - 0x208]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x468d18
movzx eax, word [ebp - 0x208]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x468d18
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x468e34
mov dword [ebp - 0x151c], 0xffffffff
jmp 0x468e3e
mov dword [ebp - 0x151c], 1
mov ecx, dword [ebp - 0x151c]
mov dword [ebp - 0x1560], ecx
cmp dword [ebp - 0x1560], 0
jne 0x468e93
push eax
push edx
add esp, 4
call 0x468e68
add byte [ebx + 0x35], cl
dec ebx
inc esi
aas
xor eax, 0x3f465044
add esp, 4
pop eax
push edx
push edi
add esp, 4
call 0x468e81
add byte [ecx], bh
cmp byte [edx + 0x45], cl
dec edi
dec esi
inc eax
dec edx
xor cl, byte [esi - 0x7d]
les eax, [edx + ebx*2]
mov edx, dword [ebp - 0x4e8]
mov dword [ebp - 0x710], edx
jmp 0x468efb
push edx
push ebx
add esp, 4
or edx, 0x13b79
jmp 0x468ea4
pop edx
push ebx
and ebx, 0x9fec
add ebx, 0x15f6a
or ebx, 0x12b98
pop ebx
push ebx
push esi
add esp, 4
and ebx, 0x84a6
pop ebx
mov eax, dword [ebp - 0x4e8]
mov ecx, dword [eax]
mov dword [ebp - 0x4e8], ecx
mov edx, dword [ebp - 0x4e8]
cmp edx, dword [ebp - 0xc58]
je 0x468ef1
mov eax, dword [ebp - 0x4e8]
cmp dword [eax + 0x30], 0
jne 0x468cbc
mov dword [ebp - 0x710], 0
Function at 0x468d46
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add esp, 4
xor edx, 0x16dfc
pop edx
push eax
push ecx
add esp, 4
sub eax, 0x13138
jmp 0x468c91
or eax, 0xd295
pop eax
cmp dword [ebp - 0xc58], 0
jne 0x468cb0
mov dword [ebp - 0x710], 0
jmp 0x468efb
mov edx, dword [ebp - 0xc58]
mov dword [ebp - 0x4e8], edx
push ebx
call 0x468ccb
add byte [0x3b39383f], dh
dec esp
xor cl, byte [edi - 0x7d]
les eax, [ecx + eax*4]
fstp xword [eax + eax]
and ebx, 0x9ef9
sub ebx, 0x16fc5
pop ebx
push ebx
jmp 0x468ce7
add ebx, 0xd9df
pop ebx
lea eax, [ebp - 0x16e8]
mov dword [ebp - 0xc54], eax
mov ecx, dword [ebp - 0x4e8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc50], edx
xor eax, eax
mov word [ebp - 0x208], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push ecx
sub ecx, 0x174c7
pop ecx
push edi
push ebx
add esp, 4
and edi, 0x14eb2
and edi, 0x13a0a
pop edi
push ecx
push esi
add esp, 4
call 0x468d46
add byte [edi], dh
cmp dword [edi + 0x37], ecx
dec esp
xor eax, 0x83373f44
les eax, [ecx + ebx*2]
mov edx, dword [ebp - 0xc50]
mov ax, word [edx]
mov word [ebp - 0xf8e], ax
mov ecx, dword [ebp - 0xc50]
add ecx, 2
mov dword [ebp - 0xc50], ecx
mov dx, word [ebp - 0xf8e]
mov word [ebp - 0x208], dx
mov eax, dword [ebp - 0xc54]
mov cx, word [eax]
mov word [ebp - 0xf90], cx
mov edx, dword [ebp - 0xc54]
add edx, 2
mov dword [ebp - 0xc54], edx
mov ax, word [ebp - 0xf90]
mov word [ebp - 0x3c], ax
push ecx
push esi
add esp, 4
and ecx, 0x140e4
call 0x468db8
add byte [0x39354b4d], bh
xor al, byte [ebx + 0x565904c4]
and esi, 0x49e0
call 0x468dcf
add byte [0x36504c4c], dh
xor eax, 0x5e04c483
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x468df0
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1560], edx
jmp 0x468e4a
movzx ecx, word [ebp - 0x208]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x468d18
movzx eax, word [ebp - 0x208]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x468d18
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x468e34
mov dword [ebp - 0x151c], 0xffffffff
jmp 0x468e3e
mov dword [ebp - 0x151c], 1
mov ecx, dword [ebp - 0x151c]
mov dword [ebp - 0x1560], ecx
cmp dword [ebp - 0x1560], 0
jne 0x468e93
push eax
push edx
add esp, 4
call 0x468e68
add byte [ebx + 0x35], cl
dec ebx
inc esi
aas
xor eax, 0x3f465044
add esp, 4
pop eax
push edx
push edi
add esp, 4
call 0x468e81
add byte [ecx], bh
cmp byte [edx + 0x45], cl
dec edi
dec esi
inc eax
dec edx
xor cl, byte [esi - 0x7d]
les eax, [edx + ebx*2]
mov edx, dword [ebp - 0x4e8]
mov dword [ebp - 0x710], edx
jmp 0x468efb
push edx
push ebx
add esp, 4
or edx, 0x13b79
jmp 0x468ea4
pop edx
push ebx
and ebx, 0x9fec
add ebx, 0x15f6a
or ebx, 0x12b98
pop ebx
push ebx
push esi
add esp, 4
and ebx, 0x84a6
pop ebx
mov eax, dword [ebp - 0x4e8]
mov ecx, dword [eax]
mov dword [ebp - 0x4e8], ecx
mov edx, dword [ebp - 0x4e8]
cmp edx, dword [ebp - 0xc58]
je 0x468ef1
mov eax, dword [ebp - 0x4e8]
cmp dword [eax + 0x30], 0
jne 0x468cbc
mov dword [ebp - 0x710], 0
Function at 0x468db8
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add esp, 4
xor edx, 0x16dfc
pop edx
push eax
push ecx
add esp, 4
sub eax, 0x13138
jmp 0x468c91
or eax, 0xd295
pop eax
cmp dword [ebp - 0xc58], 0
jne 0x468cb0
mov dword [ebp - 0x710], 0
jmp 0x468efb
mov edx, dword [ebp - 0xc58]
mov dword [ebp - 0x4e8], edx
push ebx
call 0x468ccb
add byte [0x3b39383f], dh
dec esp
xor cl, byte [edi - 0x7d]
les eax, [ecx + eax*4]
fstp xword [eax + eax]
and ebx, 0x9ef9
sub ebx, 0x16fc5
pop ebx
push ebx
jmp 0x468ce7
add ebx, 0xd9df
pop ebx
lea eax, [ebp - 0x16e8]
mov dword [ebp - 0xc54], eax
mov ecx, dword [ebp - 0x4e8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc50], edx
xor eax, eax
mov word [ebp - 0x208], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push ecx
sub ecx, 0x174c7
pop ecx
push edi
push ebx
add esp, 4
and edi, 0x14eb2
and edi, 0x13a0a
pop edi
push ecx
push esi
add esp, 4
call 0x468d46
add byte [edi], dh
cmp dword [edi + 0x37], ecx
dec esp
xor eax, 0x83373f44
les eax, [ecx + ebx*2]
mov edx, dword [ebp - 0xc50]
mov ax, word [edx]
mov word [ebp - 0xf8e], ax
mov ecx, dword [ebp - 0xc50]
add ecx, 2
mov dword [ebp - 0xc50], ecx
mov dx, word [ebp - 0xf8e]
mov word [ebp - 0x208], dx
mov eax, dword [ebp - 0xc54]
mov cx, word [eax]
mov word [ebp - 0xf90], cx
mov edx, dword [ebp - 0xc54]
add edx, 2
mov dword [ebp - 0xc54], edx
mov ax, word [ebp - 0xf90]
mov word [ebp - 0x3c], ax
push ecx
push esi
add esp, 4
and ecx, 0x140e4
call 0x468db8
add byte [0x39354b4d], bh
xor al, byte [ebx + 0x565904c4]
and esi, 0x49e0
call 0x468dcf
add byte [0x36504c4c], dh
xor eax, 0x5e04c483
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x468df0
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1560], edx
jmp 0x468e4a
movzx ecx, word [ebp - 0x208]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x468d18
movzx eax, word [ebp - 0x208]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x468d18
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x468e34
mov dword [ebp - 0x151c], 0xffffffff
jmp 0x468e3e
mov dword [ebp - 0x151c], 1
mov ecx, dword [ebp - 0x151c]
mov dword [ebp - 0x1560], ecx
cmp dword [ebp - 0x1560], 0
jne 0x468e93
push eax
push edx
add esp, 4
call 0x468e68
add byte [ebx + 0x35], cl
dec ebx
inc esi
aas
xor eax, 0x3f465044
add esp, 4
pop eax
push edx
push edi
add esp, 4
call 0x468e81
add byte [ecx], bh
cmp byte [edx + 0x45], cl
dec edi
dec esi
inc eax
dec edx
xor cl, byte [esi - 0x7d]
les eax, [edx + ebx*2]
mov edx, dword [ebp - 0x4e8]
mov dword [ebp - 0x710], edx
jmp 0x468efb
push edx
push ebx
add esp, 4
or edx, 0x13b79
jmp 0x468ea4
pop edx
push ebx
and ebx, 0x9fec
add ebx, 0x15f6a
or ebx, 0x12b98
pop ebx
push ebx
push esi
add esp, 4
and ebx, 0x84a6
pop ebx
mov eax, dword [ebp - 0x4e8]
mov ecx, dword [eax]
mov dword [ebp - 0x4e8], ecx
mov edx, dword [ebp - 0x4e8]
cmp edx, dword [ebp - 0xc58]
je 0x468ef1
mov eax, dword [ebp - 0x4e8]
cmp dword [eax + 0x30], 0
jne 0x468cbc
mov dword [ebp - 0x710], 0