joyce8/EMBER2024-capa huggingface dataset:
Function at 0x7301d65d
Capabilities:
Packed with generic packer
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x44
mov eax, dword [0x7308c0b0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
and dword [ebp - 0x38], 0
xor eax, eax
and dword [ebp - 0x34], 0
mov ebx, edx
push esi
push edi
mov dword [ebp - 0x3c], ecx
lea edi, [ebp - 0x30]
push 7
pop ecx
rep stosd dword es:[edi], eax
lea edi, [ebp - 0x14]
mov dword [ebp - 0x40], 0
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
test byte [0x7308c948], 0x10
push 0x17
pop eax
jne 0x73040cf1
test ebx, ebx
je 0x7301d6b1
mov dword [ebx], 0
push 0xf
lea edx, [ebp - 0x38]
pop ecx
call fcn.7301d7c2
mov esi, dword [ebp - 0x38]
mov edi, eax
test edi, edi
js 0x73040d02
push 0x17
pop eax
mov word [ebp - 0x30], ax
lea edi, [ebp - 0x28]
xor eax, eax
and dword [ebp - 0x2c], eax
mov word [ebp - 0x2e], ax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x30]
xor edi, edi
push eax
mov dword [ebp - 0x18], edi
call dword [0x73090044]
inc esp
add byte [ecx], cl
jae 0x7301d679
invalid
jne 0x7301d70c
mov edx, esi
test esi, esi
je 0x7301d70c
mov eax, dword [ebp - 0x34]
cmp dword [edx + 4], eax
je 0x7301d781
mov edx, dword [edx + 8]
test edx, edx
jne 0x7301d700
push 2
pop eax
mov word [ebp - 0x14], ax
xor eax, eax
mov word [ebp - 0x12], ax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x14]
mov dword [ebp - 0x10], edi
push eax
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], edi
call dword [0x73090044]
test eax, eax
jne 0x7301d749
mov edx, esi
test esi, esi
je 0x7301d749
mov eax, dword [ebp - 0x34]
cmp dword [edx + 4], eax
je 0x7301d790
mov edx, dword [edx + 8]
test edx, edx
jne 0x7301d73d
mov edi, 0x80070490
mov dword [ebp - 0x40], 0x559
test byte [0x7308c948], 0x10
jne 0x73040d64
test esi, esi
je 0x7301d76e
lea ecx, [ebp - 0x38]
call fcn.7301d7a0
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.7302b750
mov esp, ebp
pop ebp
ret
cmp dword [edx + 0x40], 0x17
jne 0x7301d705
jmp 0x73040d0e
cmp dword [edx + 0x40], 0x17
jne 0x7301d742
jmp 0x73040d3f
and byte [ebx + 0x6c], dh
add byte [eax], al
add byte [eax], al
add byte [eax], al
sbb byte [eax], dh
jae 0x73040db0
add byte [eax], al
add byte [eax], al
clc
Function at 0x7301d6ef
Capabilities:
Packed with generic packer
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x44
mov eax, dword [0x7308c0b0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
and dword [ebp - 0x38], 0
xor eax, eax
and dword [ebp - 0x34], 0
mov ebx, edx
push esi
push edi
mov dword [ebp - 0x3c], ecx
lea edi, [ebp - 0x30]
push 7
pop ecx
rep stosd dword es:[edi], eax
lea edi, [ebp - 0x14]
mov dword [ebp - 0x40], 0
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
test byte [0x7308c948], 0x10
push 0x17
pop eax
jne 0x73040cf1
test ebx, ebx
je 0x7301d6b1
mov dword [ebx], 0
push 0xf
lea edx, [ebp - 0x38]
pop ecx
call fcn.7301d7c2
mov esi, dword [ebp - 0x38]
mov edi, eax
test edi, edi
js 0x73040d02
push 0x17
pop eax
mov word [ebp - 0x30], ax
lea edi, [ebp - 0x28]
xor eax, eax
and dword [ebp - 0x2c], eax
mov word [ebp - 0x2e], ax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x30]
xor edi, edi
push eax
mov dword [ebp - 0x18], edi
call dword [0x73090044]
inc esp
add byte [ecx], cl
jae 0x7301d679
invalid
jne 0x7301d70c
mov edx, esi
test esi, esi
je 0x7301d70c
mov eax, dword [ebp - 0x34]
cmp dword [edx + 4], eax
je 0x7301d781
mov edx, dword [edx + 8]
test edx, edx
jne 0x7301d700
push 2
pop eax
mov word [ebp - 0x14], ax
xor eax, eax
mov word [ebp - 0x12], ax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x14]
mov dword [ebp - 0x10], edi
push eax
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], edi
call dword [0x73090044]
test eax, eax
jne 0x7301d749
mov edx, esi
test esi, esi
je 0x7301d749
mov eax, dword [ebp - 0x34]
cmp dword [edx + 4], eax
je 0x7301d790
mov edx, dword [edx + 8]
test edx, edx
jne 0x7301d73d
mov edi, 0x80070490
mov dword [ebp - 0x40], 0x559
test byte [0x7308c948], 0x10
jne 0x73040d64
test esi, esi
je 0x7301d76e
lea ecx, [ebp - 0x38]
call fcn.7301d7a0
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.7302b750
mov esp, ebp
pop ebp
ret
cmp dword [edx + 0x40], 0x17
jne 0x7301d705
jmp 0x73040d0e
cmp dword [edx + 0x40], 0x17
jne 0x7301d742
jmp 0x73040d3f
and byte [ebx + 0x6c], dh
add byte [eax], al
add byte [eax], al
add byte [eax], al
sbb byte [eax], dh
jae 0x73040db0
add byte [eax], al
add byte [eax], al
clc
Function at 0x7301d7c2
Capabilities:
Packed with generic packer
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
xor esi, esi
mov dword [ebp - 0x10], edx
mov eax, 0x7800
mov dword [ebp - 0xc], ecx
push edi
mov dword [ebp - 0x14], 0
xor ebx, ebx
mov dword [ebp - 4], esi
mov dword [ebp - 8], eax
test esi, esi
jne 0x73040d77
lea edx, [ebp - 4]
mov ecx, eax
call fcn.73023be6
mov esi, dword [ebp - 4]
mov edi, eax
test edi, edi
js 0x7301d863
lea eax, [ebp - 8]
push eax
push esi
push 0
push dword [ebp - 0xc]
push 0
call dword [0x73090048]
mov edi, eax
cmp edi, 0x6f
je 0x73040d87
test edi, edi
jg 0x7301d84d
js 0x7301d85a
cmp ebx, 3
jae 0x73040dbd
mov eax, dword [ebp - 0x10]
xor edi, edi
mov dword [eax], esi
xor esi, esi
mov dword [ebp - 4], esi
test esi, esi
jne 0x73040dce
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movzx edi, di
or edi, 0x80070000
test edi, edi
jmp 0x7301d825
mov dword [ebp - 0x14], 0x9c
jmp 0x7301d83c
mov dword [ebp - 0x14], 0x94
jmp 0x7301d83c
add dword [eax], eax
add dword [ecx], eax
add byte [eax], al
add byte [eax], al
add byte [eax], al

Function at 0x7301dbb4
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push ecx
push ecx
mov eax, dword [0x7308c0b0]
xor eax, ebp
mov dword [ebp - 4], eax
and dword [ebp - 8], 0
lea eax, [ebp - 8]
push 0x73003088
push eax
mov edx, 0x73003058
call fcn.7301dd8f
test eax, eax
je 0x73040f41
mov ecx, dword [ebp - 4]
xor eax, eax
xor ecx, ebp
call fcn.7302b750
mov esp, ebp
pop ebp
ret
Function at 0x7301dbf9
Capabilities:
Packed with generic packer
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x18
mov eax, dword [0x7308c0b0]
xor eax, ebp
mov dword [ebp - 4], eax
push edi
test byte [0x7308c94a], 2
mov edi, 0x73005338
jne 0x73040f53
push esi
xor esi, esi
mov dword [ebp - 8], 0xaa0
push 0x7308c9e8
mov dword [ebp - 0x14], esi
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x18], esi
call dword [0x7308d1f8]
cmp dword [0x7308c934], esi
jne 0x73040f62
cmp dword [0x7308cbc8], esi
jne 0x7301dd82
cmp dword [0x7308cbd4], esi
jne 0x73040f71
push ebx
xor ebx, ebx
inc ebx
mov dword [0x7308c934], ebx
call fcn.7301e1da
test byte [0x7308c94a], 2
jne 0x73040f80
call fcn.7301dbb4
mov ecx, 0x7308cbe0
call fcn.7301dea7
push 0x73003100
lea eax, [ebp - 8]
mov edx, 0x73003238
push eax
call fcn.7301dd8f
test eax, eax
je 0x73040f8f
mov eax, 0xaa0
mov dword [ebp - 8], eax
mov dword [0x7308c0d4], eax
mov edx, 0x73003210
push 0x73003100
lea eax, [ebp - 0xc]
push eax
call fcn.7301dd8f
neg eax
mov edx, 0x730031e4
push 0
sbb eax, eax
not eax
and dword [ebp - 0xc], eax
pop eax
sete al
mov dword [0x7308c0cc], eax
lea eax, [ebp - 0x10]
push 0x73003100
push eax
call fcn.7301dd8f
neg eax
mov edx, 0x730031bc
push 0
sbb eax, eax
not eax
and dword [ebp - 0x10], eax
pop eax
sete al
mov dword [0x7308c0d0], eax
lea eax, [ebp - 0x14]
push 0x73003100
push eax
call fcn.7301dd8f
test eax, eax
je 0x73040faa
push 0x73003100
lea eax, [ebp - 0x18]
mov edx, 0x73003188
push eax
call fcn.7301dd8f
test eax, eax
je 0x73040fbc
cmp dword [0x7308c930], esi
jne 0x7301dd48
mov dword [0x7308cbc8], ebx
mov dword [0x7308cbd4], ebx
mov dword [0x7308c934], esi
pop ebx
push 0x7308c9e8
call dword [0x7308d1fc]
pop esi
test byte [0x7308c948], 0x80
jne 0x73040fce
mov ecx, dword [ebp - 4]
mov eax, dword [0x7308c930]
xor ecx, ebp
pop edi
call fcn.7302b750
mov esp, ebp
pop ebp
ret
mov dword [0x7308c930], esi
jmp 0x7301dd55
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
js 0x73040fad
cwde
aas
and byte [ebx - 0x6b], dh
and byte [ebx - 0x68], dh

Function at 0x7301dd8f
Capabilities:
Packed with generic packer
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push ecx
push ecx
mov eax, dword [0x7308c0b0]
xor eax, ebp
mov dword [ebp - 4], eax
and dword [ebp - 8], 0
push ebx
mov ebx, dword [ebp + 8]
push esi
mov esi, dword [ebp + 0xc]
push edi
mov edi, edx
test byte [0x7308c949], 0x40
jne 0x73040fe3
lea eax, [ebp - 8]
push eax
push 1
push 0
push esi
push 0x80000002
call dword [0x7308d174]
mov esi, eax
test esi, esi
jne 0x7301ddeb
mov ecx, dword [ebp - 8]
mov edx, edi
push ebx
call fcn.7301de25
mov esi, eax
test esi, esi
je 0x73040ff4
cmp dword [ebp - 8], 0
je 0x7301ddfe
push dword [ebp - 8]
call dword [0x7308d17c]
and dword [ebp - 8], 0
test byte [0x7308c949], 0x40
jne 0x73041010
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.7302b750
mov esp, ebp
pop ebp
ret 8
popfd
Function at 0x7301de25
Capabilities:
Packed with generic packer
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x7308c0b0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
xor eax, eax
mov ebx, edx
push edi
mov edi, dword [ebp + 8]
mov esi, ecx
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], eax
test byte [0x7308c949], 0x40
jne 0x73041023
lea eax, [ebp - 8]
mov dword [ebp - 8], 4
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0xc]
push eax
push 0
push ebx
push esi
call dword [0x7308d188]
mov esi, eax
test esi, esi
je 0x73041038
test byte [0x7308c949], 0x40
jne 0x73041078
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.7302b750
mov esp, ebp
pop ebp
ret 4
jae 0x73040fc3
mov al, byte [0x1000100]
add al, byte [ecx]
inc eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax - 0x598cdfbc], ch

Function at 0x7301dea7
Capabilities:
Packed with generic packer
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push ecx
push ecx
push esi
push edi
lea eax, [ebp - 4]
mov edi, ecx
push eax
xor esi, esi
push 0x73003268
mov dword [ebp - 4], esi
push esi
mov dword [ebp - 4], esi
mov dword [edi], esi
call dword [0x7308d370]
test eax, eax
je 0x7301df1f
cmp dword [ebp - 4], esi
jne 0x7301df17
lea eax, [ebp - 4]
push eax
push 0x73003274
push esi
call dword [0x7308d370]
test eax, eax
je 0x7304108b
cmp dword [ebp - 4], esi
jne 0x7301df17
lea eax, [ebp - 4]
push eax
push 0x73003290
push esi
call dword [0x7308d370]
test eax, eax
je 0x730410b5
cmp dword [ebp - 4], esi
jne 0x7301df17
pop edi
mov eax, esi
pop esi
mov esp, ebp
pop ebp
ret
mov dword [edi], 1
jmp 0x7301df0f
call dword [0x7308d028]
mov esi, eax
test esi, esi
jle 0x7301df36
movzx esi, si
or esi, 0x80070000
test esi, esi
jns 0x7301df41
mov dword [ebp - 4], 0x385
jmp 0x7301df0f
mov esi, 0x8000ffff
jmp 0x7301df38
Function at 0x7301e029
Capabilities:
Packed with generic packer
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x30
mov eax, dword [0x7308c0b0]
xor eax, ebp
mov dword [ebp - 8], eax
and dword [ebp - 0xc], 0
xor eax, eax
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
push 8
mov esi, ecx
mov dword [ebp - 0x30], edx
pop ecx
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0xc]
xor edi, edi
push eax
push esi
mov dword [ebx], edi
call dword [0x730900d0]
mov esi, eax
test esi, esi
jne 0x73041150
cmp dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], 4
setne al
mov dword [ebp - 0x28], 0x11
add eax, 2
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x2c]
push eax
push edi
push edi
push 0x14
push 6
push edi
push dword [ebp - 0xc]
mov dword [ebp - 0x14], 0x73003274
call dword [0x730900cc]
mov esi, eax
test esi, esi
jne 0x73041175
push 1
push 9
push dword [ebp - 0xc]
call dword [0x730900c8]
mov esi, eax
test esi, esi
jne 0x73041187
mov eax, dword [ebp - 0xc]
mov dword [ebx], eax
mov dword [ebp - 0xc], edi
cmp dword [ebp - 0xc], edi
jne 0x73041196
mov ecx, dword [ebp - 8]
mov eax, esi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.7302b750
mov esp, ebp
pop ebp
ret 4
mov dh, 0
add al, byte [eax]
add al, byte [ecx]
inc eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add al, cl
dec eax
and byte [ebx - 0x48], dh

Function at 0x7301e0f5
Capabilities:
Packed with generic packer
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x7308c0b0]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
xor edi, edi
mov esi, edi
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x14], edi
mov dword [ebp - 8], edi
mov dword [ebp - 0xc], edi
cmp dword [0x7308cc0c], esi
je 0x7301e133
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
xor ecx, ebp
pop esi
call fcn.7302b750
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x10]
push eax
push 1
push 0x2000000
call dword [0x7308d148]
push eax
call dword [0x7308d13c]
test eax, eax
jne 0x7301e1b5
call dword [0x7308d028]
mov esi, eax
cmp esi, 0x3f0
jne 0x730411a5
lea eax, [ebp - 0x14]
push eax
push 0x2000000
call dword [0x7308d140]
push eax
call dword [0x7308d144]
test eax, eax
je 0x730411ca
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x1d
push dword [ebp - 0x14]
call dword [0x7308d384]
test eax, eax
je 0x730411e4
xor eax, eax
mov dword [0x7308cc0c], 1
cmp dword [ebp - 8], eax
setne al
mov dword [0x7308c938], eax
cmp dword [ebp - 0x10], edi
jne 0x730411fb
cmp dword [ebp - 0x14], edi
je 0x7301e121
push dword [ebp - 0x14]
call dword [0x7308d080]
jmp 0x7301e121
add al, byte [eax]
add dword [ecx], eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
cmp byte [ebx + 0x20], cl
jae 0x730411b2
add byte [eax], al
add byte [eax], al
add al, ch
dec ebx
and byte [ebx - 0x3e], dh
Function at 0x7301e1da
Capabilities:
Packed with generic packer
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push ecx
push ecx
xor eax, eax
push eax
push eax
push fcn.730377d0
push 0x7308cc20
mov dword [ebp - 4], eax
call dword [0x7308d220]
test eax, eax
je 0x7304120c
mov esp, ebp
pop ebp
ret
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
or byte [eax + 0x73], cl
ret

Function at 0x7301e2a9
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x7308c0b0]
xor eax, ebp
mov dword [ebp - 4], eax
and dword [ebp - 8], 0
lea ecx, [ebp - 0xc]
push esi
mov dword [ebp - 0xc], 0x7308cacc
xor esi, esi
call fcn.73017ca2
sub dword [0x7308cc5c], 1
jne 0x7301e2e7
mov esi, dword [0x7308cc58]
and dword [0x7308cc58], 0
lea ecx, [ebp - 0xc]
call fcn.73017c7f
test esi, esi
je 0x7301e30a
mov ecx, esi
call fcn.7301c2dd
mov eax, dword [esi]
push esi
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x7308d3fc]
call esi
cmp dword [ebp - 8], 0
jne 0x73041261
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.7302b750
mov esp, ebp
in eax, 0x5d
add byte [eax], al
add byte [eax - 0x378cdfb3], ch

Function at 0x7301e659
Capabilities:
Packed with generic packer
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebx
push esi
push edi
mov edi, ecx
xor esi, esi
mov cl, byte [0x7308c948]
mov eax, dword [edi + 0x28]
cmp dword [eax], esi
jbe 0x7301e698
xor ebx, ebx
mov eax, dword [edi + 0x28]
mov edx, dword [eax + 4]
mov eax, dword [edx + ebx]
sub eax, 0
je 0x7301e6c5
sub eax, 1
jne 0x7301e6b5
test cl, 0x10
jne 0x73041441
mov eax, dword [edi + 0x28]
inc esi
add ebx, 0xc
cmp esi, dword [eax]
jb 0x7301e671
test cl, 0x10
jne 0x73041489
push dword [edi + 0x24]
mov dword [edi + 0x30], 1
call dword [0x7308d20c]
pop edi
pop esi
pop ebx
ret
sub eax, 1
jne 0x7301e68d
cmp dword [edx + ebx + 4], eax
jl 0x7301e68d
jmp 0x7304145a
test cl, 0x10
je 0x7301e6b1
jmp 0x73041476
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
enter 0x2057, 0x73
out 0, eax
add dword [eax], eax
add dword [ecx], eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
cmp byte [eax + 0x20], bl
jae 0x73041481
Function at 0x7301e87c
Capabilities:
Packed with generic packer
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x24
mov eax, dword [0x7308c0b0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov esi, ecx
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp + 0xc]
mov ebx, edx
mov edx, dword [ebp + 0x10]
push edi
xor edi, edi
mov dword [ebp - 0x20], ecx
and dword [esi], edi
and dword [ebx], edi
and dword [eax], edi
and dword [ecx], edi
mov ecx, 0x8e
and dword [edx], edi
and dword [ebp - 0x18], edi
and dword [ebp - 0xc], edi
and dword [ebp - 0x10], edi
and dword [ebp - 0x14], edi
and dword [ebp - 8], edi
mov dword [ebp - 0x24], edx
lea edx, [ebp - 0x18]
call fcn.7301d7c2
test eax, eax
js 0x73041539
xor ecx, ecx
lea eax, [ebp - 8]
push ecx
push eax
push 0x238
lea eax, [ebp - 0x14]
push eax
push 0x290
lea eax, [ebp - 0x10]
push eax
push ecx
push ecx
push 8
lea eax, [ebp - 0xc]
push eax
push 1
push 0x7300329c
push 1
call dword [0x73090068]
test eax, eax
js 0x73041542
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, dword [ebp - 0x1c]
and dword [ebp - 0x18], edi
mov dword [esi], eax
xor esi, esi
mov eax, dword [ebp - 0xc]
mov dword [ebx], eax
mov eax, dword [ebp - 0x10]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x14], esi
mov dword [ecx], eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 8]
mov dword [ecx], eax
xor ecx, ecx
and dword [ebp - 8], ecx
mov dword [ebp - 0xc], ecx
test ecx, ecx
jne 0x73041559
test edx, edx
jne 0x73041559
test esi, esi
jne 0x73041559
cmp dword [ebp - 0x18], 0
jne 0x73041575
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.7302b750
mov esp, ebp
pop ebp
ret 0xc

Function at 0x7301eab2
Capabilities:
Packed with generic packer
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xdc
mov eax, dword [0x7308c0b0]
xor eax, esp
mov dword [esp + 0xd8], eax
push ebx
push esi
push edi
xor esi, esi
mov dword [esp + 0x6c], edx
mov eax, esi
mov dword [esp + 0x1c], esi
push 0x4e
mov dword [esp + 0x10], eax
mov ebx, ecx
mov dword [esp + 0x44], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x4c], eax
pop eax
push eax
lea eax, [esp + 0x94]
mov dword [esp + 0x78], ebx
push esi
push eax
mov dword [esp + 0x1c], esi
call fcn.7302c3d0
Function at 0x7301fddc
Capabilities:
Packed with generic packer
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push ecx
mov eax, dword [0x7308c0b0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
xor ebx, ebx
mov eax, 0x80004005
push edi
mov edi, ecx
mov dword [edi], 0x7300145c
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
mov dword [edi + 0x14], ebx
mov dword [edi + 0x18], ebx
mov dword [edi + 0x20], ebx
mov dword [edi + 0x24], ebx
mov dword [edi + 0x3c], ebx
mov dword [edi + 0x50], ebx
mov ecx, dword [edi + 0x54]
test ecx, ecx
je 0x7301fe30
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x7308d3fc]
call esi
mov dword [edi + 0x54], ebx
cmp dword [edi + 0x38], ebx
jne 0x7301fe99
mov ecx, dword [edi + 0x34]
test ecx, ecx
jne 0x7304141f
lea ecx, [edi + 0x30]
cmp dword [ecx], ebx
jne 0x7301fea7
mov ecx, dword [edi + 0x2c]
test ecx, ecx
jne 0x7304142c
lea ecx, [edi + 0x28]
cmp dword [ecx], ebx
jne 0x7301feae
mov ecx, dword [edi + 0x1c]
test ecx, ecx
je 0x7301fe73
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x7308d3fc]
call esi
mov dword [edi + 0x1c], ebx
mov ecx, dword [edi + 0x10]
test ecx, ecx
je 0x7301fe82
call fcn.7301fd75
mov dword [edi + 0x10], ebx
mov ecx, dword [ebp - 4]
mov dword [edi], 0x73001e38
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.7302a750
mov esp, ebp
pop ebp
ret
push dword [edi + 0x38]
call dword [0x7308d080]
mov dword [edi + 0x38], ebx
jmp 0x7301fe35
call fcn.730121b0
jmp 0x7301fe47
call fcn.730121b0
jmp 0x7301fe59
jae 0x73041403

Function at 0x7301feba
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x7308c0b0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov ebx, ecx
xor esi, esi
push edi
lea ecx, [ebp - 8]
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], esi
call fcn.7301fb82
mov edi, eax
test edi, edi
js 0x73041439
mov eax, dword [ebp - 8]
mov dword [ebx + 0x54], eax
mov dword [ebx + 0x58], esi
test esi, esi
jne 0x73041448
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.7302a750
mov esp, ebp
pop ebp
ret
in al, 0
add dword [eax], eax
add al, byte [ecx]
inc eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
Function at 0x7301ff9e
Capabilities:
Packed with generic packer
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push ecx
mov eax, dword [0x7308c0b0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push edi
mov edi, ecx
xor ebx, ebx
mov edx, dword [edi + 0x30]
mov ecx, dword [edi + 0x34]
mov dword [edi], 0x73001464
mov dword [edi + 8], 0x80004005
mov dword [edi + 0x10], ebx
mov dword [edi + 0x14], ebx
mov dword [edi + 0x24], 2
mov dword [edi + 0x28], 1
call fcn.7301f9aa
mov dword [edi + 0x34], ebx
mov dword [edi + 0x30], ebx
mov dword [edi + 0x3c], ebx
mov dword [edi + 0x40], ebx
mov dword [edi + 0x54], ebx
cmp dword [edi + 0x38], ebx
jne 0x73020066
mov ecx, dword [edi + 0x2c]
test ecx, ecx
jne 0x7304145d
lea ecx, [edi + 0x20]
cmp dword [ecx], ebx
je 0x7302000b
call fcn.7301f6a7
mov ecx, dword [edi + 0x1c]
push esi
test ecx, ecx
je 0x73020026
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x7308d3fc]
call esi
mov dword [edi + 0x1c], ebx
mov ecx, dword [edi + 0x18]
test ecx, ecx
je 0x73020040
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x7308d3fc]
call esi
mov dword [edi + 0x18], ebx
mov ecx, dword [edi + 0xc]
pop esi
test ecx, ecx
je 0x73020050
call fcn.7301fd75
mov dword [edi + 0xc], ebx
mov ecx, dword [ebp - 4]
mov dword [edi], 0x73001e38
xor ecx, ebp
pop edi
pop ebx
call fcn.7302a750
mov esp, ebp
pop ebp
ret
push dword [edi + 0x38]
call dword [0x7308d080]
mov dword [edi + 0x38], ebx
jmp 0x7301fff4

Function at 0x7302010e
Capabilities:
Packed with generic packer
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push ecx
mov eax, dword [0x7308c0b0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
xor ebx, ebx
push edi
mov edi, ecx
mov dword [edi], 0x7300146c
mov dword [edi + 8], 0x80004005
mov dword [edi + 0x10], ebx
mov dword [edi + 0x2c], ebx
mov dword [edi + 0x1c], ebx
mov dword [edi + 0x18], ebx
mov dword [edi + 0x30], ebx
mov dword [edi + 0x44], ebx
cmp dword [edi + 0x28], ebx
jne 0x730201a0
mov ecx, dword [edi + 0x24]
test ecx, ecx
jne 0x7304146a
mov ecx, dword [edi + 0x20]
test ecx, ecx
je 0x7302016f
mov eax, dword [ecx]
push esi
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x7308d3fc]
call esi
mov dword [edi + 0x20], ebx
pop esi
lea ecx, [edi + 0x14]
cmp dword [ecx], ebx
je 0x7302017b
call fcn.7301c7a0
mov ecx, dword [edi + 0xc]
test ecx, ecx
je 0x7302018a
call fcn.7301fd75
mov dword [edi + 0xc], ebx
mov ecx, dword [ebp - 4]
mov dword [edi], 0x73001e38
xor ecx, ebp
pop edi
pop ebx
call fcn.7302a750
mov esp, ebp
pop ebp
ret
push dword [edi + 0x28]
call dword [0x7308d080]
mov dword [edi + 0x28], ebx
jmp 0x73020148