joyce8/EMBER2024-capa huggingface dataset:
Function at 0x50008524
Capabilities:
Write file on windows

Disassembly:
push ecx
cmp byte [sym.rtl120.bpl__System_IsConsole], 0
je 0x50008585
cmp word [0x500a4334], 0xd7b2
jne 0x5000854d
cmp dword [0x500a433c], 0
jbe 0x5000854d
mov eax, sym.rtl120.bpl__System_Output
call dword [0x500a434c]
push 0
lea eax, [esp + 4]
push eax
push 0x1d
push str.Runtime_error_____at_00000000
push 0xfffffffffffffff5
call fcn.50001b64
push eax
call sub.kernel32.dll_WriteFile
push 0
lea eax, [esp + 4]
push eax
push 2
push 0x500085b0
push 0xfffffffffffffff5
call fcn.50001b64
push eax
call sub.kernel32.dll_WriteFile
pop edx
ret
cmp byte [sym.rtl120.bpl__System_NoErrMsg], 0
jne 0x500085a1
push 0
push 0x5009ca2c
push str.Runtime_error_____at_00000000
push 0
call sub.user32.dll_MessageBoxA
pop edx
ret

Function at 0x5000872c
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov ebx, ecx
mov dword [ebp - 4], edx
mov edi, eax
mov esi, dword [ebp + 0x10]
cmp dword [sym.rtl120.bpl__System_SystemThreadFuncProc], 0
je 0x50008752
mov edx, esi
mov eax, ebx
call dword [sym.rtl120.bpl__System_SystemThreadFuncProc]
jmp 0x50008761
mov eax, 8
call sym.rtl120.bpl__System__GetMem_qqri
mov dword [eax], ebx
mov dword [eax + 4], esi
mov byte [sym.rtl120.bpl__System_IsMultiThread], 1
mov edx, dword [ebp + 8]
push edx
mov edx, dword [ebp + 0xc]
push edx
push eax
mov eax, 0x500086f4
push eax
mov eax, dword [ebp - 4]
push eax
push edi
call sub.kernel32.dll_CreateThread
pop edi
pop esi
pop ebx
pop ecx
pop ebp
ret 0xc

Function at 0x5000ab98
Capabilities:
Get common file path
Set current directory

Disassembly:
push ebx
push esi
add esp, 0xfffffbe4
mov esi, edx
mov ebx, eax
test bl, bl
je 0x5000abda
movzx eax, bl
add ax, 0x41
dec eax
mov word [esp], ax
mov word [esp + 2], 0x3a
mov word [esp + 4], 0
lea eax, [esp + 0x212]
push eax
push 0x105
call sub.kernel32.dll_GetCurrentDirectoryW
push esp
call sub.kernel32.dll_SetCurrentDirectoryW
lea eax, [esp + 8]
push eax
push 0x105
call sub.kernel32.dll_GetCurrentDirectoryW
test bl, bl
je 0x5000abfa
lea eax, [esp + 0x212]
push eax
call sub.kernel32.dll_SetCurrentDirectoryW
mov eax, esi
lea edx, [esp + 8]
mov ecx, 0x105
call sym.rtl120.bpl__System__UStrFromWArray_qqrr20System_UnicodeStringpbi
add esp, 0x41c
pop esi
pop ebx
ret
Function at 0x5000d7f0
Capabilities:
Get system information on windows

Disassembly:
add esp, 0xffffffdc
push esp
call sub.kernel32.dll_GetSystemInfo
mov eax, dword [esp + 0x14]
add esp, 0x24
ret

Function at 0x5001062c
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebx
push esi
mov esi, 0x500a6b50
push 0xa
push 0x500106c0
mov eax, dword [0x500a6b30]
push eax
call sub.kernel32.dll_FindResourceW
mov ebx, eax
test ebx, ebx
jne 0x50010650
call sym.rtl120.bpl__Sysutils_RaiseLastOSError_qqrv
push ebx
mov eax, dword [0x500a6b30]
push eax
call sub.kernel32.dll_LoadResource
mov ebx, eax
test ebx, ebx
jne 0x50010667
call sym.rtl120.bpl__Sysutils_RaiseLastOSError_qqrv
push ebx
call sub.kernel32.dll_LockResource
mov dword [esi], eax
cmp dword [esi], 0
jne 0x50010679
call sym.rtl120.bpl__Sysutils_RaiseLastOSError_qqrv
mov eax, dword [esi]
mov edx, dword [esi]
mov ecx, edx
add ecx, dword [eax]
mov dword [0x500a6b54], ecx
mov ecx, edx
add ecx, dword [eax + 4]
mov dword [0x500a6b58], ecx
mov ecx, edx
add ecx, dword [eax + 8]
mov dword [0x500a6b5c], ecx
mov ecx, edx
add ecx, dword [eax + 0xc]
mov dword [0x500a6b60], ecx
mov ecx, edx
add ecx, dword [eax + 0x10]
mov dword [0x500a6b64], ecx
add edx, dword [eax + 0x14]
mov dword [0x500a6b68], edx
pop esi
pop ebx
ret
Function at 0x50016d64
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add edx, dword [edi]
pop edi
dec ecx
dec ebp
inc ecx
inc edi
inc ebp
dec eax
dec esp
push eax
pop edi
push ebx
push esp
inc ecx
push esp
push ebp
push ebx
pop edi
push edx
inc ebp
inc ecx
push ebx
dec edi
dec esi
add eax, 0
or eax, 0x60000000
insd dword es:[edi], dx
add dword [eax + 0xf], edx
inc edx
imul ebp, dword [esi + 0x64], 0x4f74754f
dec bp
insd dword es:[edi], dx
outsd dx, dword [esi]
jb 0x50016e13
adc dword [edx + 0x69], eax
outsb dx, byte [esi]
push edx
jbe 0x50016e03
push esp
outsd dx, dword [esi]
push esi
popal
inc esi
popal
imul ebp, dword [ebp + 0x64], 0x6e694211
dec esi
outsd dx, dword [esi]
push edx
outsd dx, dword [esi]
outsd dx, dword [esi]
insd dword es:[edi], dx
dec ecx
outsb dx, byte [esi]
dec ecx
insd dword es:[edi], dx
popal
push ss
inc edx
imul ebp, dword [esi + 0x64], 0x6f706d49
jb 0x50016e3d
dec ebp
outsd dx, dword [esi]
jne 0x50016e3a
inc esi
popal
imul ebp, dword [ebp + 0x64], 0x6e694219
dec ecx
insd dword es:[edi], dx
jo 0x50016e4d
jb 0x50016e54
push eax
jb 0x50016e52
arpl word [ebp + 0x64], sp
jne 0x50016e5a
inc esi
popal
imul ebp, dword [ebp + 0x64], 0x6e694210
dec ecx
insd dword es:[edi], dx
jo 0x50016e67
jb 0x50016e6e
dec ebp
outsd dx, dword [esi]
jne 0x50016e6b
adc eax, dword gs:[edx + 0x69]
outsb dx, byte [esi]
dec ecx
insd dword es:[edi], dx
jo 0x50016e78
jb 0x50016e7f
push eax
jb 0x50016e7d
arpl word [ebp + 0x64], sp
jne 0x50016e85
or eax, 0x646e6942
inc esi
outsd dx, dword [esi]
jb 0x50016e94
popal
jb 0x50016e84
jb 0x50016e33
inc edx
imul ebp, dword [esi + 0x64], 0x77726f46
popal
jb 0x50016e92
jb 0x50016e7f
dec edi
push esp
adc dword [edx + 0x69], eax
outsb dx, byte [esi]
dec ecx
insd dword es:[edi], dx
popal
dec ebp
dec ebp
outsd dx, dword [esi]
imul esp, dword fs:[esi + 0x69], 0x42156465
imul ebp, dword [esi + 0x64], 0x61707845
popal
outsb dx, byte [esi]
inc esi
imul ebp, dword [ebp + 0x48], 0x65646165
jb 0x50016ece
insb byte es:[edi], dx
dec eax
dec eax
popal
jb 0x50016ece
jae 0x50016e6d
adc dword [edx + 0x69], eax
outsb dx, byte [esi]
dec ecx
insd dword es:[edi], dx
popal
inc ebx
inc edx
imul ebp, dword [esi + 0x64], 0x67616d49
inc ebx
outsd dx, dword [esi]
insd dword es:[edi], dx
jo 0x50016ed6
je 0x50016ed2
je 0x50016ed2
adc eax, 0x646e6942
dec ebp
imul esi, dword [ebx + 0x6d], 0x68637461
push ebx
inc edx
imul ebp, dword [esi + 0x64], 0x6d73694d
popal
je 0x50016edc
arpl word [eax + 0x65], bp
push ebx
push 0x79536465
insd dword es:[edi], dx
jns 0x50016eec
bound ebp, qword [edi + 0x6c]
jae 0x50016e99
inc edx
imul ebp, dword [esi + 0x64], 0x626d7953
outsd dx, dword [esi]
insb byte es:[edi], dx
jae 0x50016ede
outsd dx, dword [esi]
je 0x50016ee8
push ebp
jo 0x50016ef9
popal
popal
je 0x50016efd
or byte fs:[ecx + 0x6d], cl
or byte [ecx + 0x6d], cl
popal
dec eax
insb byte es:[edi], dx
jo 0x50016e2e
shr byte [eax + 0x350016e], 0xc
inc ecx
xor cl, byte [ecx + eax*2]
inc ecx
popal
dec eax
Function at 0x50016ea8
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add ecx, dword [ecx + eax*2]
inc esp
inc esp
push edx
inc ebp
push ebx
push ebx
pop edi
dec ebp
dec edi
inc esp
inc ebp
add eax, 0
add eax, dword [eax]
add byte [eax], al
movsb byte es:[edi], byte [esi]
outsb dx, byte [esi]
add dword [eax + 0xc], edx
inc ecx
jb 0x50016f16
outsd dx, dword [esi]
xor dword gs:[esi], esi
xor dword [esi], esi
or al, 0x41
jb 0x50016f23
outsd dx, dword [esi]
xor dword gs:[esi], esi
xor esi, dword [edx]
or al, 0x41
jb 0x50016f30
outsd dx, dword [esi]
push edx
popal
insb byte es:[edi], dx
pop es

Function at 0x50016f04
Capabilities:
Resolve function by parsing pe exports

Disassembly:
or al, 0x41
jb 0x50016f3d
outsd dx, dword [esi]
inc esi
insb byte es:[edi], dx
popal
je 0x50016f00
dec ecx
insd dword es:[edi], dx
popal
dec eax
insb byte es:[edi], dx
jo 0x50016f05
add al, 0x6f
outsd dx, dword [esi]
add dword [eax + 3], edx
add ecx, dword [eax]
push ebx
pop ecx
or byte [ebx + 0x59], dl
dec ebp
pop edi
push esp
pop ecx
push eax
inc ebp
add eax, 0
push es
add byte [eax], al
add byte [eax], al
outsd dx, dword [esi]
add dword [eax + 7], edx
push ebx
jns 0x50016f8c
dec esi
outsd dx, dword [esi]
outsb dx, byte [esi]
pop es
push ebx
jns 0x50016f94
inc ebx
outsd dx, dword [esi]
add ax, 0x7953
insd dword es:[edi], dx
inc ebx
jbe 0x50016f38
push ebx
jns 0x50016fa2
push eax
bound ecx, qword fs:[ecx]
push ebx
jns 0x50016fa9
or dword [ebx + 0x79], edx
insd dword es:[edi], dx
inc ebp
js 0x50016faf
outsd dx, dword [esi]
jb 0x50016fb6
or edx, dword [ebx + 0x79]
insd dword es:[edi], dx
inc esp
jb 0x50016fbe
jb 0x50016fb2
push es
push es
push ebx
jns 0x50016fbf
push ebx
jns 0x50016fc2
or byte [ecx + 0x6d], cl
popal
dec eax
insb byte es:[edi], dx
jo 0x50016eea
invalid

Function at 0x50016fdc
Capabilities:
Resolve function by parsing pe exports

Disassembly:
adc cl, byte [ecx]
push esp
inc esi
imul ebp, dword [ebp + 0x4e], 0x90656d61

Function at 0x5001704c
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add ecx, dword [esp + edx*2]
inc esi
insb byte es:[edi], dx
outsd dx, dword [esi]
popal
je 0x5001709b
outsd dx, dword [esi]
jb 0x500170c5
jae 0x500170f2
insd dword es:[edi], dx

Function at 0x500171a4
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push cs
add byte [eax], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx + esi*2], bl
Function at 0x500171c8
Capabilities:
Resolve function by parsing pe exports

Disassembly:
insb byte es:[edi], dx
pop es
or dl, byte [esp + ecx*2 + 0x61]
outsb dx, byte [esi]
jne 0x50017232
jae 0x50017179
jno 0x500171d8
push eax
inc eax
adc eax, dword [eax]
push eax
add byte [eax], al
or byte [ebx + 0x79], dl
jae 0x50017238
je 0x5001724e
insb byte es:[edi], dx
jae 0x500171e8
add byte [ebp + 0x72440040], cl
add dword [eax], edx
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [edx + esi*2 + 1], cl
push eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
pop esi
jb 0x50017210
push eax
sbb al, 0
add byte [eax], al
loopne 0x50017228
add byte [eax - 0x58], dl
insb byte es:[edi], dx
add byte [eax - 0x50], dl
insb byte es:[edi], dx
add byte [eax + 0x10], dl
insb byte es:[edi], dx
add dl, byte [eax + 0x18]
outsd dx, dword [esi]
add byte [eax + 0x38], dl
outsd dx, dword [esi]
add byte [eax + 0x3c], dl
outsd dx, dword [esi]
test byte [ebx], ch
push eax
add byte [eax], al
add byte [eax], al
add dword [eax], eax
add byte [eax], al
inc eax
adc al, byte [eax]
push eax
add al, 0
add byte [eax], al
or dword [ebp + 0x78], eax
arpl word [ebp + 0x70], sp
je 0x500172cf
outsd dx, dword [esi]
outsb dx, byte [esi]
insb byte es:[edi], dx
jb sym.rtl120.bpl___xp_18Sysutils_Exception
push eax
push eax
inc eax

Function at 0x50017244
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x5850026b
imul eax, dword [edx], 0x50
push cs
add byte [eax], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [eax + 0x12], al
add byte [eax + 4], dl
add byte [eax], al
add byte [ecx], cl
inc ebp
js 0x500172c5
jo 0x500172d9
imul ebp, dword [edi + 0x6e], sym.rtl120.bpl___xp_18Sysutils_Exception

Function at 0x5001726c
Capabilities:
Resolve function by parsing pe exports

Disassembly:
pop es
or dword [ebp + 0x78], eax
arpl word [ebp + 0x70], sp
je 0x500172de
outsd dx, dword [esi]
outsb dx, byte [esi]
inc esp
jb 0x5001727b
push eax
inc eax
adc eax, dword [eax]
push eax
add byte [eax], al
or byte [ebx + 0x79], dl
jae 0x500172db
je 0x500172f1
insb byte es:[edi], dx
jae 0x5001728b
add ah, ah
jb 0x50017290
push eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
in al, dx
jb 0x500172b0
push eax
sbb al, 0
add byte [eax], al
in al, dx
jno 0x500172b8
push eax
test al, 0x6c
add byte [eax - 0x50], dl
insb byte es:[edi], dx
add byte [eax + 0x10], dl
insb byte es:[edi], dx
add dl, byte [eax + 0x18]
outsd dx, dword [esi]
add byte [eax + 0x38], dl
outsd dx, dword [esi]
add byte [eax + 0x3c], dl
outsd dx, dword [esi]
add byte [eax + 0x40], dl
outsd dx, dword [esi]
add byte [eax + 0x34], dl
outsd dx, dword [esi]
add byte [eax - 0x7c], dl
imul eax, dword [eax], 0x50
push eax
mov al, byte [0x1450006b]
add byte [eax + 0x14], dl
imul eax, dword [edx], 0x50
Function at 0x500172e4
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x5850026b
imul eax, dword [edx], 0x50
adc al, byte [ebp + 0x41]
jb 0x50017358
jne 0x50017360
outsb dx, byte gs:[esi]
je 0x5001733c
js 0x5001735c
jo 0x50017370
imul ebp, dword [edi + 0x6e], 0x1730490
push eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
nop
jae 0x50017354
push eax
sbb al, 0
add byte [eax], al
invalid
test al, 0x6c
mov al, 0x6c
cmp al, 0x6f

Function at 0x50017304
Capabilities:
Resolve function by parsing pe exports

Disassembly:
pop es
adc al, byte [ebp + 0x41]
jb 0x50017371
jne 0x50017379
outsb dx, byte gs:[esi]
je 0x50017355
js 0x50017375
jo 0x50017389
imul ebp, dword [edi + 0x6e], sym.rtl120.bpl__Sysutils_EArgumentException_
push 0x500172
add byte [eax], cl
push ebx
jns 0x50017399
push ebp
je 0x50017392
insb byte es:[edi], dx
jae 0x5001732c
add byte [ebp + 0x73880040], cl
add dword [eax], edx
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax + 0x1c500173], dl
add byte [eax], al
add byte [edx + esi*2 + 0x6ca85001], cl
add byte [eax - 0x50], dl
insb byte es:[edi], dx
add byte [eax + 0x10], dl
insb byte es:[edi], dx
add dl, byte [eax + 0x18]
outsd dx, dword [esi]
add byte [eax + 0x38], dl
outsd dx, dword [esi]
add byte [eax + 0x3c], dl
outsd dx, dword [esi]
add byte [eax + 0x40], dl
outsd dx, dword [esi]
add byte [eax + 0x34], dl
outsd dx, dword [esi]
add byte [eax - 0x7c], dl
imul eax, dword [eax], 0x50
mov al, byte [0x1450006b]
imul eax, dword [edx], 0x50
imul eax, dword [edx], 0x50
pop eax

Function at 0x50017388
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x5850026b
imul eax, dword [edx], 0x50
sbb al, 0x45
inc ecx
jb 0x500173fc
jne 0x50017404
outsb dx, byte gs:[esi]
je 0x500173ea
jne 0x50017411
dec edi
push dx
popal
outsb dx, byte [esi]
inc ebp
js 0x5001740a
jo 0x5001741e
imul ebp, dword [edi + 0x6e], 0xb400408d
jae sym.rtl120.bpl___xp_37Sysutils_EArgumentOutOfRangeException
push eax
add dword [eax], edx
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax + 0x74], cl
add dword [eax + 0x1c], edx
add byte [eax], al
Function at 0x500173b4
Capabilities:
Resolve function by parsing pe exports

Disassembly:
pop es
sbb al, 0x45
inc ecx
jb 0x50017421
jne 0x50017429
outsb dx, byte gs:[esi]
je 0x5001740f
jne 0x50017436
dec edi
push dx
popal
outsb dx, byte [esi]
inc ebp
js 0x5001742f
jo 0x50017443
imul ebp, dword [edi + 0x6e], sym.rtl120.bpl__Sysutils_EArgumentOutOfRangeException_
add byte [ebx + 1], dh
push eax
add byte [eax], al
or byte [ebx + 0x79], dl
jae 0x50017436
je 0x5001744c
insb byte es:[edi], dx
jae 0x500173e6
add byte [eax + sym.rtl120.bpl__Sysutils_ENoConstructException_], dl
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
dec eax
je 0x5001740c
push eax
sbb al, 0
add byte [eax], al
in al, dx
add ah, ch
jno 0x50017414
push eax
test al, 0x6c
add byte [eax - 0x50], dl
insb byte es:[edi], dx
add byte [eax + 0x10], dl
insb byte es:[edi], dx
add dl, byte [eax + 0x18]
outsd dx, dword [esi]
add byte [eax + 0x38], dl
outsd dx, dword [esi]
add byte [eax + 0x3c], dl
outsd dx, dword [esi]
add byte [eax + 0x40], dl
outsd dx, dword [esi]
add byte [eax + 0x34], dl
outsd dx, dword [esi]
push eax
xor al, 0x6f
add byte [eax - 0x7c], dl
imul eax, dword [eax], 0x50
mov al, byte [0x1450006b]
imul eax, dword [edx], 0x50
add byte [eax - 0x60], dl
imul eax, dword [eax], 0x50
adc al, 0x6b
add dl, byte [eax - 0x48]
invalid
imul eax, dword [edx], 0x50
push eax
pop eax
inc ebx

Function at 0x50017440
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x5850026b
imul eax, dword [edx], 0x50
adc eax, 0x436f4e45
outsd dx, dword [esi]
outsb dx, byte [esi]
jae 0x500174c5
jb 0x500174c8
arpl word [ebp + eax*2 + 0x78], si
arpl word [ebp + 0x70], sp
je 0x500174c5
outsd dx, dword [esi]
outsb dx, byte [esi]
mov eax, eax
je sym.rtl120.bpl___xp_30Sysutils_ENoConstructException
push eax
insb byte es:[edi], dx
add dl, byte [eax + 0x18]
outsd dx, dword [esi]
add byte [eax + 0x38], dl
outsd dx, dword [esi]
add byte [eax + 0x3c], dl
outsd dx, dword [esi]
sbb byte [edi], ch
push eax
cmp byte [edi], ch
push eax
cmp al, 0x6f
add byte [eax + 0x40], dl
outsd dx, dword [esi]
add byte [eax + 0x34], dl
outsd dx, dword [esi]
add byte [eax - 0x7c], dl
imul eax, dword [eax], 0x50

Function at 0x50017464
Capabilities:
Resolve function by parsing pe exports

Disassembly:
pop es
adc eax, 0x436f4e45
outsd dx, dword [esi]
outsb dx, byte [esi]
jae 0x500174e2
jb 0x500174e5
arpl word [ebp + eax*2 + 0x78], si
arpl word [ebp + 0x70], sp
je 0x500174e2
outsd dx, dword [esi]
outsb dx, byte [esi]
inc eax
je 0x5001747f
push eax
push 0x500172
add byte [eax], cl
push ebx
jns sym.rtl120.bpl___xp_15Sysutils_EAbort
push ebp
add byte [eax + 0x14], dl
Function at 0x500174fc
Capabilities:
Resolve function by parsing pe exports

Disassembly:
jae 0x500174df
je 0x500174f5
insb byte es:[edi], dx
jae 0x5001748f
add al, ch
je 0x50017494
push eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
invalid
push eax
mov al, byte [0x1450006b]
imul eax, dword [edx], 0x50
imul eax, dword [edx], 0x50
push es
inc ebp
inc ecx
bound ebp, qword [edi + 0x72]
je 0x50017488
jb 0x5001756b
nop
cld
je sym.rtl120.bpl___xp_15Sysutils_EAbort
push eax
pop es
push es
inc ebp
inc ecx
bound ebp, qword [edi + 0x72]
je 0x500174ed
je 0x50017508
push eax
push 0x500172
add byte [eax], cl
push ebx
jns 0x50017585
push ebp
je 0x5001757e
insb byte es:[edi], dx
jae 0x50017518
add byte [ebp + 0x75740040], cl
add dword [eax], edx
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebp + esi*2 + 1], bh
push eax
and byte [eax], al
add byte [eax], al
in al, dx
jno 0x50017548
push eax
test al, 0x6c
add byte [eax - 0x50], dl
insb byte es:[edi], dx
add byte [eax + 0x10], dl
insb byte es:[edi], dx
add dl, byte [eax + 0x18]
outsd dx, dword [esi]
add byte [eax + 0x38], dl
outsd dx, dword [esi]
add byte [eax + 0x3c], dl
outsd dx, dword [esi]
add byte [eax + 0x40], dl
outsd dx, dword [esi]
add byte [eax + 0x34], dl
outsd dx, dword [esi]
add byte [eax - 0x7c], dl
imul eax, dword [eax], 0x50
push eax
push 0x1450026c
imul eax, dword [edx], 0x50

Function at 0x50017574
Capabilities:
Resolve function by parsing pe exports

Disassembly:
je 0x500175e2
add dl, byte [eax + 0x58]
imul eax, dword [edx], 0x50
push cs
inc ebp
dec eax
popal
jo 0x500175c8
js 0x500175e8
jo 0x500175fc
imul ebp, dword [edi + 0x6e], 0x1759090
push eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
sbb byte [esi + 1], dh
mov al, 0x6c
inc eax
Function at 0x50017590
Capabilities:
Resolve function by parsing pe exports

Disassembly:
pop es
push cs
inc ebp
dec eax
popal
jo 0x500175dd
js 0x500175fd
jo 0x50017611
imul ebp, dword [edi + 0x6e], sym.rtl120.bpl__Sysutils_EHeapException_
push 0x500172
add byte [eax], cl
push ebx
jns 0x50017621
push ebp
je 0x5001761a
insb byte es:[edi], dx
jae 0x500175b4
add byte [ebp + 0x76100040], cl
add dword [eax], edx
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], bl
jbe 0x500175dc
push eax
and byte [eax], al
add byte [eax], al
sbb al, 0x75
add byte [eax], al
add byte [esi*2 + 0x6ca85001], bl
add dword [eax - 0x58], edx
insb byte es:[edi], dx
add byte [eax - 0x50], dl
insb byte es:[edi], dx
add byte [eax + 0x10], dl
insb byte es:[edi], dx
add dl, byte [eax + 0x18]
outsd dx, dword [esi]
add byte [eax + 0x38], dl
outsd dx, dword [esi]
add byte [eax + 0x3c], dl
outsd dx, dword [esi]
add byte [eax + 0x40], dl
outsd dx, dword [esi]
add byte [eax + 0x34], dl
outsd dx, dword [esi]
add byte [eax - 0x7c], dl
imul eax, dword [eax], 0x50
push 0x1450026c
imul eax, dword [edx], 0x50
insb byte es:[edi], dx
insd dword es:[edi], dx

Function at 0x50017610
Capabilities:
Resolve function by parsing pe exports

Disassembly:
je 0x5001767e
add dl, byte [eax + 0x58]
imul eax, dword [edx], 0x50
or al, 0x45
dec edi
jne 0x50017691
dec edi
dec bp
insd dword es:[edi], dx
outsd dx, dword [esi]
jb 0x5001769e
lea eax, [eax]
sub al, 0x76
add dword [eax + 7], edx
pop es
add byte [eax - 0x60], dl
imul eax, dword [eax], 0x50
adc al, 0x6b

Function at 0x5001762c
Capabilities:
Resolve function by parsing pe exports

Disassembly:
pop es
or al, 0x45
dec edi
jne 0x500176a6
dec edi
dec bp
insd dword es:[edi], dx
outsd dx, dword [esi]
jb 0x500176b3
adc byte [esi + 1], dh
push eax
invalid
add dl, byte [eax - 0x48]
imul eax, dword [edx], 0x50
pop eax

Function at 0x500176a8
Capabilities:
Resolve function by parsing pe exports

Disassembly:
insb byte es:[edi], dx
mov eax, 0x5850026b
imul eax, dword [edx], 0x50
or eax, dword [ebp + 0x49]
outsb dx, byte [esi]
dec edi
jne 0x5001772b
inc ebp
jb 0x5001772c
outsd dx, dword [esi]
jb 0x5001767d
jbe sym.rtl120.bpl___xp_20Sysutils_EInOutError
push eax
push eax
xor al, 0x6f
Function at 0x500176c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add byte [eax], al
in al, dx
jno 0x5001767c
push eax
test al, 0x6c
add byte [eax - 0x50], dl
insb byte es:[edi], dx
add byte [eax + 0x10], dl
insb byte es:[edi], dx
add dl, byte [eax + 0x18]
outsd dx, dword [esi]
add byte [eax + 0x38], dl
outsd dx, dword [esi]
add byte [eax + 0x3c], dl
outsd dx, dword [esi]
add byte [eax + 0x40], dl
outsd dx, dword [esi]
add byte [eax + 0x34], dl
outsd dx, dword [esi]
add byte [eax - 0x7c], dl
imul eax, dword [eax], 0x50
mov al, byte [0x1450006b]
imul eax, dword [edx], 0x50
pop es
or eax, dword [ebp + 0x49]
outsb dx, byte [esi]
dec edi
jne sym.rtl120.bpl__Sysutils_EExternal_
inc ebp
jb 0x5001773d
outsd dx, dword [esi]
jb 0x50017676
jbe 0x500176d1
push eax
push 0x500172
add byte [eax], cl
push ebx
jns 0x5001774e
push ebp
je 0x50017747
insb byte es:[edi], dx
jae 0x500176e1
add byte [ebx + 0x1773cc0], cl
push eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
inc esp
ja 0x50017708
push eax
and byte [eax], al
add byte [eax], al
in al, dx
jno 0x50017710
push eax
test al, 0x6c
add byte [eax - 0x50], dl
insb byte es:[edi], dx
add byte [eax + 0x10], dl
insb byte es:[edi], dx
add dl, byte [eax + 0x18]
outsd dx, dword [esi]
add byte [eax + 0x38], dl
outsd dx, dword [esi]
add byte [eax + 0x3c], dl
outsd dx, dword [esi]
add byte [eax + 0x40], dl
outsd dx, dword [esi]
add byte [eax + 0x34], dl
outsd dx, dword [esi]
add byte [eax - 0x7c], dl
imul eax, dword [eax], 0x50
mov al, byte [0x1450006b]
imul eax, dword [edx], 0x50
imul eax, dword [edx], 0x50
pop eax

Function at 0x5001773c
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x5850026b
imul eax, dword [edx], 0x50
or dword [ebp + 0x45], eax
js 0x500177bd
jb 0x500177ba
popal
insb byte es:[edi], dx
mov eax, eax
push esp
ja sym.rtl120.bpl___xp_18Sysutils_EExternal
push eax