joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1e03a1b8
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push esi
mov esi, dword [edi + 8]
cmp esi, 0x7fffffff
je 0x1e03a0db
push ebx
lea ebx, [esi + 1]
call fcn.1e016b22
pop ebx
cmp eax, 0xffffffff
je 0x1e03a0ed
mov eax, dword [esp + 8]
inc dword [eax]
mov ecx, dword [edi + 0xc]
mov dword [ecx + esi*4], eax
xor eax, eax
pop esi
ret
add dword [eax], eax
pop edx
cmp dword [ebp - 0x2a4], 0
jne 0x1e03a9f4
mov edx, 0x6b
mov word [ebp - 0x1654], dx
mov eax, 0x65
mov word [ebp - 0x1652], ax
mov ecx, 0x72
mov word [ebp - 0x1650], cx
mov edx, 0x6e
mov word [ebp - 0x164e], dx
mov eax, 0x65
mov word [ebp - 0x164c], ax
mov ecx, 0x6c
mov word [ebp - 0x164a], cx
mov edx, 0x33
mov word [ebp - 0x1648], dx
mov eax, 0x32
mov word [ebp - 0x1646], ax
mov ecx, 0x2e
mov word [ebp - 0x1644], cx
mov edx, 0x64
mov word [ebp - 0x1642], dx
mov eax, 0x6c
mov word [ebp - 0x1640], ax
mov ecx, 0x6c
mov word [ebp - 0x163e], cx
xor edx, edx
mov word [ebp - 0x163c], dx
push edx
push edi
add esp, 4
jmp 0x1e03a1a3
pop edx
push esi
push esi
add esp, 4
call 0x1e03a1b8
add byte [esi + 0x4f], al
dec ecx
dec esi
dec edi
inc edx
dec edi
inc ebp
add esp, 4
or esi, 0x29aa
jmp 0x1e03a1c7
pop esi
mov byte [ebp - 0x85c], 0x4c
mov byte [ebp - 0x85b], 0x6f
mov byte [ebp - 0x85a], 0x61
mov byte [ebp - 0x859], 0x64
mov byte [ebp - 0x858], 0x4c
mov byte [ebp - 0x857], 0x69
mov byte [ebp - 0x856], 0x62
mov byte [ebp - 0x855], 0x72
mov byte [ebp - 0x854], 0x61
mov byte [ebp - 0x853], 0x72
mov byte [ebp - 0x852], 0x79
mov byte [ebp - 0x851], 0x57
mov byte [ebp - 0x850], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c14], eax
mov ecx, dword [ebp - 0x1c14]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1c18], edx
mov eax, dword [ebp - 0x1c18]
mov dword [ebp - 0x154c], eax
push ebx
add ebx, 0xa830
jmp 0x1e03a257
call 0x1e03a265
add byte [ebx], bh
cmp al, 0x32
inc ebp
inc ecx
dec eax
dec ecx
add esp, 4
call 0x1e03a278
add byte [ecx], bh
dec edi
inc ebx
inc esp
xor eax, dword [ecx + 0x4c]
dec esp
cmp byte [edx], dh
add esp, 4
pop ebx
cmp dword [ebp - 0x154c], 0
jne 0x1e03a294
mov dword [ebp - 0x74c], 0
jmp fcn.1e03a53b
mov ecx, dword [ebp - 0x154c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc54], eax
push esi
push edx
add esp, 4
or esi, 0x9432
sub esi, 0xbeae
or esi, 0x79b
pop esi
push esi
xor esi, 0xa4d
pop esi
push ecx
push edx
add esp, 4
and ecx, 0xceaa
xor ecx, 0x15b5d
pop ecx
cmp dword [ebp - 0xc54], 0
jne 0x1e03a2f0
mov dword [ebp - 0x74c], 0
jmp fcn.1e03a53b
mov ecx, dword [ebp - 0xc54]
mov dword [ebp - 0x4d0], ecx
Function at 0x1e03a265
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push esi
mov esi, dword [edi + 8]
cmp esi, 0x7fffffff
je 0x1e03a0db
push ebx
lea ebx, [esi + 1]
call fcn.1e016b22
pop ebx
cmp eax, 0xffffffff
je 0x1e03a0ed
mov eax, dword [esp + 8]
inc dword [eax]
mov ecx, dword [edi + 0xc]
mov dword [ecx + esi*4], eax
xor eax, eax
pop esi
ret
add dword [eax], eax
pop edx
cmp dword [ebp - 0x2a4], 0
jne 0x1e03a9f4
mov edx, 0x6b
mov word [ebp - 0x1654], dx
mov eax, 0x65
mov word [ebp - 0x1652], ax
mov ecx, 0x72
mov word [ebp - 0x1650], cx
mov edx, 0x6e
mov word [ebp - 0x164e], dx
mov eax, 0x65
mov word [ebp - 0x164c], ax
mov ecx, 0x6c
mov word [ebp - 0x164a], cx
mov edx, 0x33
mov word [ebp - 0x1648], dx
mov eax, 0x32
mov word [ebp - 0x1646], ax
mov ecx, 0x2e
mov word [ebp - 0x1644], cx
mov edx, 0x64
mov word [ebp - 0x1642], dx
mov eax, 0x6c
mov word [ebp - 0x1640], ax
mov ecx, 0x6c
mov word [ebp - 0x163e], cx
xor edx, edx
mov word [ebp - 0x163c], dx
push edx
push edi
add esp, 4
jmp 0x1e03a1a3
pop edx
push esi
push esi
add esp, 4
call 0x1e03a1b8
add byte [esi + 0x4f], al
dec ecx
dec esi
dec edi
inc edx
dec edi
inc ebp
add esp, 4
or esi, 0x29aa
jmp 0x1e03a1c7
pop esi
mov byte [ebp - 0x85c], 0x4c
mov byte [ebp - 0x85b], 0x6f
mov byte [ebp - 0x85a], 0x61
mov byte [ebp - 0x859], 0x64
mov byte [ebp - 0x858], 0x4c
mov byte [ebp - 0x857], 0x69
mov byte [ebp - 0x856], 0x62
mov byte [ebp - 0x855], 0x72
mov byte [ebp - 0x854], 0x61
mov byte [ebp - 0x853], 0x72
mov byte [ebp - 0x852], 0x79
mov byte [ebp - 0x851], 0x57
mov byte [ebp - 0x850], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c14], eax
mov ecx, dword [ebp - 0x1c14]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1c18], edx
mov eax, dword [ebp - 0x1c18]
mov dword [ebp - 0x154c], eax
push ebx
add ebx, 0xa830
jmp 0x1e03a257
call 0x1e03a265
add byte [ebx], bh
cmp al, 0x32
inc ebp
inc ecx
dec eax
dec ecx
add esp, 4
call 0x1e03a278
add byte [ecx], bh
dec edi
inc ebx
inc esp
xor eax, dword [ecx + 0x4c]
dec esp
cmp byte [edx], dh
add esp, 4
pop ebx
cmp dword [ebp - 0x154c], 0
jne 0x1e03a294
mov dword [ebp - 0x74c], 0
jmp fcn.1e03a53b
mov ecx, dword [ebp - 0x154c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc54], eax
push esi
push edx
add esp, 4
or esi, 0x9432
sub esi, 0xbeae
or esi, 0x79b
pop esi
push esi
xor esi, 0xa4d
pop esi
push ecx
push edx
add esp, 4
and ecx, 0xceaa
xor ecx, 0x15b5d
pop ecx
cmp dword [ebp - 0xc54], 0
jne 0x1e03a2f0
mov dword [ebp - 0x74c], 0
jmp fcn.1e03a53b
mov ecx, dword [ebp - 0xc54]
mov dword [ebp - 0x4d0], ecx
Function at 0x1e03a278
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push esi
mov esi, dword [edi + 8]
cmp esi, 0x7fffffff
je 0x1e03a0db
push ebx
lea ebx, [esi + 1]
call fcn.1e016b22
pop ebx
cmp eax, 0xffffffff
je 0x1e03a0ed
mov eax, dword [esp + 8]
inc dword [eax]
mov ecx, dword [edi + 0xc]
mov dword [ecx + esi*4], eax
xor eax, eax
pop esi
ret
add dword [eax], eax
pop edx
cmp dword [ebp - 0x2a4], 0
jne 0x1e03a9f4
mov edx, 0x6b
mov word [ebp - 0x1654], dx
mov eax, 0x65
mov word [ebp - 0x1652], ax
mov ecx, 0x72
mov word [ebp - 0x1650], cx
mov edx, 0x6e
mov word [ebp - 0x164e], dx
mov eax, 0x65
mov word [ebp - 0x164c], ax
mov ecx, 0x6c
mov word [ebp - 0x164a], cx
mov edx, 0x33
mov word [ebp - 0x1648], dx
mov eax, 0x32
mov word [ebp - 0x1646], ax
mov ecx, 0x2e
mov word [ebp - 0x1644], cx
mov edx, 0x64
mov word [ebp - 0x1642], dx
mov eax, 0x6c
mov word [ebp - 0x1640], ax
mov ecx, 0x6c
mov word [ebp - 0x163e], cx
xor edx, edx
mov word [ebp - 0x163c], dx
push edx
push edi
add esp, 4
jmp 0x1e03a1a3
pop edx
push esi
push esi
add esp, 4
call 0x1e03a1b8
add byte [esi + 0x4f], al
dec ecx
dec esi
dec edi
inc edx
dec edi
inc ebp
add esp, 4
or esi, 0x29aa
jmp 0x1e03a1c7
pop esi
mov byte [ebp - 0x85c], 0x4c
mov byte [ebp - 0x85b], 0x6f
mov byte [ebp - 0x85a], 0x61
mov byte [ebp - 0x859], 0x64
mov byte [ebp - 0x858], 0x4c
mov byte [ebp - 0x857], 0x69
mov byte [ebp - 0x856], 0x62
mov byte [ebp - 0x855], 0x72
mov byte [ebp - 0x854], 0x61
mov byte [ebp - 0x853], 0x72
mov byte [ebp - 0x852], 0x79
mov byte [ebp - 0x851], 0x57
mov byte [ebp - 0x850], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c14], eax
mov ecx, dword [ebp - 0x1c14]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1c18], edx
mov eax, dword [ebp - 0x1c18]
mov dword [ebp - 0x154c], eax
push ebx
add ebx, 0xa830
jmp 0x1e03a257
call 0x1e03a265
add byte [ebx], bh
cmp al, 0x32
inc ebp
inc ecx
dec eax
dec ecx
add esp, 4
call 0x1e03a278
add byte [ecx], bh
dec edi
inc ebx
inc esp
xor eax, dword [ecx + 0x4c]
dec esp
cmp byte [edx], dh
add esp, 4
pop ebx
cmp dword [ebp - 0x154c], 0
jne 0x1e03a294
mov dword [ebp - 0x74c], 0
jmp fcn.1e03a53b
mov ecx, dword [ebp - 0x154c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc54], eax
push esi
push edx
add esp, 4
or esi, 0x9432
sub esi, 0xbeae
or esi, 0x79b
pop esi
push esi
xor esi, 0xa4d
pop esi
push ecx
push edx
add esp, 4
and ecx, 0xceaa
xor ecx, 0x15b5d
pop ecx
cmp dword [ebp - 0xc54], 0
jne 0x1e03a2f0
mov dword [ebp - 0x74c], 0
jmp fcn.1e03a53b
mov ecx, dword [ebp - 0xc54]
mov dword [ebp - 0x4d0], ecx
Function at 0x1e03a569
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
push esi
add esp, 4
sub ebx, 0x14438
xor ebx, 0x221f
and ebx, 0xe348
pop ebx
push edi
and edi, 0x14f6a
call 0x1e03a569
add byte [esi + eax*2 + 0x4e], cl
cmp dword [edi], edi
inc edx
inc ebp
aaa
cmp al, 0x83
les eax, [edi + ebx*2]
cmp dword [ebp - 0x74c], 0
jne 0x1e03a5b7
push edx
jmp 0x1e03a57e
jmp 0x1e03a583
or edx, 0x4aa4
and edx, 0x5085
pop edx
push eax
push ebx
add esp, 4
or eax, 0x7159
pop eax
push edi
push eax
add esp, 4
add edi, 0x10369
pop edi
mov dword [ebp - 0xa44], 0
jmp fcn.1e03b0de
push esi
push ebx
add esp, 4
add esi, 0x154e6
and esi, 0xdae2
pop esi
push edi
call 0x1e03a5d6
add byte [esi], bh
dec ebx
inc edi
inc ebx
xor eax, dword [eax - 0x7d]
les eax, [eax + ebp*8]
pop es
add byte [eax], al
add byte [eax], al
xor cl, byte [ebp + esi + 0x33]
inc eax
cmp dword [ebx - 0x74a0fb3c], eax
test dword [eax + edi*8 + 0x488bffff], esi
sbb byte [ecx - 0x31b73], cl
inc edi
test dword [eax + edi*8 + 0xffff], esp
add byte [eax], al
mov edx, dword [ebp - 0x31c]
mov dword [ebp - 0x1558], edx
cmp dword [ebp - 0x1558], 0
jne 0x1e03a628
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0x394], eax
jmp fcn.1e03a919
mov ecx, dword [ebp - 0x1558]
mov edx, dword [ebp - 0x31c]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x155c], edx
jne 0x1e03a650
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0x394], eax
jmp fcn.1e03a919
mov ecx, 8
imul edx, ecx, 0

Function at 0x1e03a5d6
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
push esi
add esp, 4
sub ebx, 0x14438
xor ebx, 0x221f
and ebx, 0xe348
pop ebx
push edi
and edi, 0x14f6a
call 0x1e03a569
add byte [esi + eax*2 + 0x4e], cl
cmp dword [edi], edi
inc edx
inc ebp
aaa
cmp al, 0x83
les eax, [edi + ebx*2]
cmp dword [ebp - 0x74c], 0
jne 0x1e03a5b7
push edx
jmp 0x1e03a57e
jmp 0x1e03a583
or edx, 0x4aa4
and edx, 0x5085
pop edx
push eax
push ebx
add esp, 4
or eax, 0x7159
pop eax
push edi
push eax
add esp, 4
add edi, 0x10369
pop edi
mov dword [ebp - 0xa44], 0
jmp fcn.1e03b0de
push esi
push ebx
add esp, 4
add esi, 0x154e6
and esi, 0xdae2
pop esi
push edi
call 0x1e03a5d6
add byte [esi], bh
dec ebx
inc edi
inc ebx
xor eax, dword [eax - 0x7d]
les eax, [eax + ebp*8]
pop es
add byte [eax], al
add byte [eax], al
xor cl, byte [ebp + esi + 0x33]
inc eax
cmp dword [ebx - 0x74a0fb3c], eax
test dword [eax + edi*8 + 0x488bffff], esi
sbb byte [ecx - 0x31b73], cl
inc edi
test dword [eax + edi*8 + 0xffff], esp
add byte [eax], al
mov edx, dword [ebp - 0x31c]
mov dword [ebp - 0x1558], edx
cmp dword [ebp - 0x1558], 0
jne 0x1e03a628
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0x394], eax
jmp fcn.1e03a919
mov ecx, dword [ebp - 0x1558]
mov edx, dword [ebp - 0x31c]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x155c], edx
jne 0x1e03a650
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0x394], eax
jmp fcn.1e03a919
mov ecx, 8
imul edx, ecx, 0
Function at 0x1e03a5e5
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
push esi
add esp, 4
sub ebx, 0x14438
xor ebx, 0x221f
and ebx, 0xe348
pop ebx
push edi
and edi, 0x14f6a
call 0x1e03a569
add byte [esi + eax*2 + 0x4e], cl
cmp dword [edi], edi
inc edx
inc ebp
aaa
cmp al, 0x83
les eax, [edi + ebx*2]
cmp dword [ebp - 0x74c], 0
jne 0x1e03a5b7
push edx
jmp 0x1e03a57e
jmp 0x1e03a583
or edx, 0x4aa4
and edx, 0x5085
pop edx
push eax
push ebx
add esp, 4
or eax, 0x7159
pop eax
push edi
push eax
add esp, 4
add edi, 0x10369
pop edi
mov dword [ebp - 0xa44], 0
jmp fcn.1e03b0de
push esi
push ebx
add esp, 4
add esi, 0x154e6
and esi, 0xdae2
pop esi
push edi
call 0x1e03a5d6
add byte [esi], bh
dec ebx
inc edi
inc ebx
xor eax, dword [eax - 0x7d]
les eax, [eax + ebp*8]
pop es
add byte [eax], al
add byte [eax], al
xor cl, byte [ebp + esi + 0x33]
inc eax
cmp dword [ebx - 0x74a0fb3c], eax
test dword [eax + edi*8 + 0x488bffff], esi
sbb byte [ecx - 0x31b73], cl
inc edi
test dword [eax + edi*8 + 0xffff], esp
add byte [eax], al
mov edx, dword [ebp - 0x31c]
mov dword [ebp - 0x1558], edx
cmp dword [ebp - 0x1558], 0
jne 0x1e03a628
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0x394], eax
jmp fcn.1e03a919
mov ecx, dword [ebp - 0x1558]
mov edx, dword [ebp - 0x31c]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x155c], edx
jne 0x1e03a650
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0x394], eax
jmp fcn.1e03a919
mov ecx, 8
imul edx, ecx, 0
Function at 0x1e03a851
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x754]
add edx, 1
mov dword [ebp - 0x754], edx
mov eax, dword [ebp - 0x6d0]
mov ecx, dword [ebp - 0x754]
cmp ecx, dword [eax + 0x18]
jae 0x1e03a90d
mov edx, dword [ebp - 0x754]
mov eax, dword [ebp - 0x1c1c]
mov ecx, dword [ebp - 0x31c]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x758], ecx
mov edx, dword [ebp - 0x754]
mov eax, dword [ebp - 0x1c20]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x1c24]
mov eax, dword [ebp - 0x31c]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1c28], eax
mov dword [ebp - 0x158], 0
jmp 0x1e03a771
mov ecx, dword [ebp - 0x158]
add ecx, 1
mov dword [ebp - 0x158], ecx
mov edx, dword [ebp - 0x758]
add edx, dword [ebp - 0x158]
movsx eax, byte [edx]
test eax, eax
je 0x1e03a823
mov ecx, dword [ebp - 0x158]
movsx edx, byte [ebp + ecx - 0x85c]
test edx, edx
je 0x1e03a823
push eax
push ecx
add esp, 4
jmp 0x1e03a7a8
add eax, 0x17c3
pop eax
push edx
push ebx
add esp, 4
add edx, 0x93f5
or edx, 0x10781
pop edx
push esi
jmp 0x1e03a7c9
xor esi, 0x16a6b
pop esi
mov eax, dword [ebp - 0x758]
add eax, dword [ebp - 0x158]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x158]
movsx eax, byte [ebp + edx - 0x85c]
cmp ecx, eax
je 0x1e03a815
mov ecx, dword [ebp - 0x758]
add ecx, dword [ebp - 0x158]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x158]
movsx ecx, byte [ebp + eax - 0x85c]
cmp edx, ecx
jne 0x1e03a81c
jmp 0x1e03a762
jmp 0x1e03a823
push eax
push ebx
add esp, 4
xor eax, 0xa739
or eax, 0x15060
sub eax, 0x1550b
xor eax, 0x1cd0
pop eax
push edx
call 0x1e03a851
add byte [esi], bh
inc ebp
cmp eax, 0x4f354a4b
inc ecx
xor eax, 0x5a04c483
mov edx, dword [ebp - 0x758]
add edx, dword [ebp - 0x158]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x158]
movsx edx, byte [ebp + ecx - 0x85c]
cmp eax, edx
jne 0x1e03a882
mov dword [ebp - 0xc58], 0
jmp 0x1e03a8f1
push esi
push edx
add esp, 4
call 0x1e03a896
add byte [eax + 0x4f], al
inc ebx
cmp bh, byte [ecx*2 - 0x7cc8b7cc]
les eax, [ecx + eax*4]
into
xor al, 0xd
add dword [eax], eax
sub esi, 0x13cfe
and esi, 0x22e5
pop esi
push edi
xor edi, 0xb3b
pop edi
mov eax, dword [ebp - 0x758]
add eax, dword [ebp - 0x158]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x158]
movsx eax, byte [ebp + edx - 0x85c]
or eax, 0x20
cmp ecx, eax
jge 0x1e03a8e7
mov dword [ebp - 0xc58], 0xffffffff
jmp 0x1e03a8f1
mov dword [ebp - 0xc58], 1
cmp dword [ebp - 0xc58], 0
jne 0x1e03a908
mov ecx, dword [ebp - 0x1c28]
mov dword [ebp - 0x394], ecx
jmp fcn.1e03a919
jmp 0x1e03a6f2
mov edx, dword [ebp - 0x75c]
mov dword [ebp - 0x394], edx
Function at 0x1e03a896
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x754]
add edx, 1
mov dword [ebp - 0x754], edx
mov eax, dword [ebp - 0x6d0]
mov ecx, dword [ebp - 0x754]
cmp ecx, dword [eax + 0x18]
jae 0x1e03a90d
mov edx, dword [ebp - 0x754]
mov eax, dword [ebp - 0x1c1c]
mov ecx, dword [ebp - 0x31c]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x758], ecx
mov edx, dword [ebp - 0x754]
mov eax, dword [ebp - 0x1c20]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x1c24]
mov eax, dword [ebp - 0x31c]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1c28], eax
mov dword [ebp - 0x158], 0
jmp 0x1e03a771
mov ecx, dword [ebp - 0x158]
add ecx, 1
mov dword [ebp - 0x158], ecx
mov edx, dword [ebp - 0x758]
add edx, dword [ebp - 0x158]
movsx eax, byte [edx]
test eax, eax
je 0x1e03a823
mov ecx, dword [ebp - 0x158]
movsx edx, byte [ebp + ecx - 0x85c]
test edx, edx
je 0x1e03a823
push eax
push ecx
add esp, 4
jmp 0x1e03a7a8
add eax, 0x17c3
pop eax
push edx
push ebx
add esp, 4
add edx, 0x93f5
or edx, 0x10781
pop edx
push esi
jmp 0x1e03a7c9
xor esi, 0x16a6b
pop esi
mov eax, dword [ebp - 0x758]
add eax, dword [ebp - 0x158]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x158]
movsx eax, byte [ebp + edx - 0x85c]
cmp ecx, eax
je 0x1e03a815
mov ecx, dword [ebp - 0x758]
add ecx, dword [ebp - 0x158]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x158]
movsx ecx, byte [ebp + eax - 0x85c]
cmp edx, ecx
jne 0x1e03a81c
jmp 0x1e03a762
jmp 0x1e03a823
push eax
push ebx
add esp, 4
xor eax, 0xa739
or eax, 0x15060
sub eax, 0x1550b
xor eax, 0x1cd0
pop eax
push edx
call 0x1e03a851
add byte [esi], bh
inc ebp
cmp eax, 0x4f354a4b
inc ecx
xor eax, 0x5a04c483
mov edx, dword [ebp - 0x758]
add edx, dword [ebp - 0x158]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x158]
movsx edx, byte [ebp + ecx - 0x85c]
cmp eax, edx
jne 0x1e03a882
mov dword [ebp - 0xc58], 0
jmp 0x1e03a8f1
push esi
push edx
add esp, 4
call 0x1e03a896
add byte [eax + 0x4f], al
inc ebx
cmp bh, byte [ecx*2 - 0x7cc8b7cc]
les eax, [ecx + eax*4]
into
xor al, 0xd
add dword [eax], eax
sub esi, 0x13cfe
and esi, 0x22e5
pop esi
push edi
xor edi, 0xb3b
pop edi
mov eax, dword [ebp - 0x758]
add eax, dword [ebp - 0x158]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x158]
movsx eax, byte [ebp + edx - 0x85c]
or eax, 0x20
cmp ecx, eax
jge 0x1e03a8e7
mov dword [ebp - 0xc58], 0xffffffff
jmp 0x1e03a8f1
mov dword [ebp - 0xc58], 1
cmp dword [ebp - 0xc58], 0
jne 0x1e03a908
mov ecx, dword [ebp - 0x1c28]
mov dword [ebp - 0x394], ecx
jmp fcn.1e03a919
jmp 0x1e03a6f2
mov edx, dword [ebp - 0x75c]
mov dword [ebp - 0x394], edx
Function at 0x1e03a94f
Capabilities:
Resolve function by parsing pe exports

Disassembly:
cmp dword [ebp - 0x394], 0
je 0x1e03a9f4
push edi
or edi, 0xc2ac
xor edi, 0x7560
pop edi
push ecx
push ebx
add esp, 4
sub ecx, 0x109b0
pop ecx
push edi
call 0x1e03a94f
add byte [edi], dh
aas
cmp eax, 0x343d3649
add esp, 4
jmp 0x1e03a957
pop edi
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0x1c2c], eax
push edi
add edi, 0x16158
pop edi
push eax
push edx
add esp, 4
jmp 0x1e03a977
add eax, 0x139f
call 0x1e03a98b
add byte [ebx + 0x35], cl
cmp al, byte [esi + esi + 0x4c]
inc edi
inc eax
add esp, 4
jmp 0x1e03a995
pop eax
mov ecx, dword [ebp - 0x1c2c]
mov dword [ebp - 0x1c30], ecx
lea edx, [ebp - 0x15cc]
push edx
call dword [ebp - 0x1c30]
test eax, eax
jne 0x1e03a9f4
push edi
call 0x1e03a9c3
add byte [eax + 0x4c], cl
inc esi
cmp edi, dword ss:[edi]
xor al, 0x43
dec ebp
add esp, 4
and edi, 0x6806
jmp 0x1e03a9d5
call 0x1e03a9e1
add byte [edx + 0x48], cl
cmp edi, dword [edi]
add esp, 4
pop edi
mov dword [ebp - 0xa44], 0
jmp fcn.1e03b0de
push edi
or edi, 0x3949
xor edi, 0x12327
pop edi
push edi
sub edi, 0x16f00
call 0x1e03aa16
add byte [eax + ecx*2 + 0x49], cl
cmp al, 0x33
push eax
xor eax, dword [ebx + 0x4eb04c4]
xor bh, byte [eax]
cmp byte [ecx - 0x7f], cl
invalid

Function at 0x1e03a98b
Capabilities:
Resolve function by parsing pe exports

Disassembly:
cmp dword [ebp - 0x394], 0
je 0x1e03a9f4
push edi
or edi, 0xc2ac
xor edi, 0x7560
pop edi
push ecx
push ebx
add esp, 4
sub ecx, 0x109b0
pop ecx
push edi
call 0x1e03a94f
add byte [edi], dh
aas
cmp eax, 0x343d3649
add esp, 4
jmp 0x1e03a957
pop edi
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0x1c2c], eax
push edi
add edi, 0x16158
pop edi
push eax
push edx
add esp, 4
jmp 0x1e03a977
add eax, 0x139f
call 0x1e03a98b
add byte [ebx + 0x35], cl
cmp al, byte [esi + esi + 0x4c]
inc edi
inc eax
add esp, 4
jmp 0x1e03a995
pop eax
mov ecx, dword [ebp - 0x1c2c]
mov dword [ebp - 0x1c30], ecx
lea edx, [ebp - 0x15cc]
push edx
call dword [ebp - 0x1c30]
test eax, eax
jne 0x1e03a9f4
push edi
call 0x1e03a9c3
add byte [eax + 0x4c], cl
inc esi
cmp edi, dword ss:[edi]
xor al, 0x43
dec ebp
add esp, 4
and edi, 0x6806
jmp 0x1e03a9d5
call 0x1e03a9e1
add byte [edx + 0x48], cl
cmp edi, dword [edi]
add esp, 4
pop edi
mov dword [ebp - 0xa44], 0
jmp fcn.1e03b0de
push edi
or edi, 0x3949
xor edi, 0x12327
pop edi
push edi
sub edi, 0x16f00
call 0x1e03aa16
add byte [eax + ecx*2 + 0x49], cl
cmp al, 0x33
push eax
xor eax, dword [ebx + 0x4eb04c4]
xor bh, byte [eax]
cmp byte [ecx - 0x7f], cl
invalid
Function at 0x1e03aa16
Capabilities:
Resolve function by parsing pe exports

Disassembly:
cmp dword [ebp - 0x394], 0
je 0x1e03a9f4
push edi
or edi, 0xc2ac
xor edi, 0x7560
pop edi
push ecx
push ebx
add esp, 4
sub ecx, 0x109b0
pop ecx
push edi
call 0x1e03a94f
add byte [edi], dh
aas
cmp eax, 0x343d3649
add esp, 4
jmp 0x1e03a957
pop edi
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0x1c2c], eax
push edi
add edi, 0x16158
pop edi
push eax
push edx
add esp, 4
jmp 0x1e03a977
add eax, 0x139f
call 0x1e03a98b
add byte [ebx + 0x35], cl
cmp al, byte [esi + esi + 0x4c]
inc edi
inc eax
add esp, 4
jmp 0x1e03a995
pop eax
mov ecx, dword [ebp - 0x1c2c]
mov dword [ebp - 0x1c30], ecx
lea edx, [ebp - 0x15cc]
push edx
call dword [ebp - 0x1c30]
test eax, eax
jne 0x1e03a9f4
push edi
call 0x1e03a9c3
add byte [eax + 0x4c], cl
inc esi
cmp edi, dword ss:[edi]
xor al, 0x43
dec ebp
add esp, 4
and edi, 0x6806
jmp 0x1e03a9d5
call 0x1e03a9e1
add byte [edx + 0x48], cl
cmp edi, dword [edi]
add esp, 4
pop edi
mov dword [ebp - 0xa44], 0
jmp fcn.1e03b0de
push edi
or edi, 0x3949
xor edi, 0x12327
pop edi
push edi
sub edi, 0x16f00
call 0x1e03aa16
add byte [eax + ecx*2 + 0x49], cl
cmp al, 0x33
push eax
xor eax, dword [ebx + 0x4eb04c4]
xor bh, byte [eax]
cmp byte [ecx - 0x7f], cl
invalid

Function at 0x1e03aacf
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ecx
push ebx
push ebp
xor ebx, ebx
xor ebp, ebp
cmp dword [0x1e20061c], ebx
jne 0x1e031051
call sym.python31.dll_PyThread_allocate_lock
mov dword [0x1e20061c], eax
cmp eax, ebx
je 0x1e03aaa7
cmp dword [0x1e200620], ebx
jne 0x1e03aaaf
cmp byte [0x1e20062c], bl
jne 0x1e03aac0
push esi
mov byte [0x1e20062c], 1
mov dword [esp + 0xc], ebx
push edi
push 1
push dword [0x1e20061c]
call sym.python31.dll_PyThread_acquire_lock
mov edx, dword [0x1e200624]
pop ecx
pop ecx
mov ecx, dword [0x1e200628]
cmp edx, ecx
jne 0x1e03aac7
xor edi, edi
xor esi, esi
push dword [0x1e20061c]
xor eax, eax
cmp edx, ecx
setne al
mov dword [0x1e1b656c], eax
call sym.python31.dll_PyThread_release_lock
pop ecx
cmp esi, ebx
jne 0x1e03aaeb
pop edi
mov byte [0x1e20062c], bl
mov eax, ebp
pop esi
pop ebp
pop ebx
pop ecx
ret
invalid
add byte [ecx + 0x920fc0], al
add bl, ch
add edi, dword [edx]
inc eax
xor ebx, dword [eax + 0x53]
jmp 0x1e03aac3
inc esp
inc eax
dec ebp
call 0x1e03aacf
add byte [ebx], bh
xor al, byte [eax + 0x42]
add byte [eax], al
cmp esi, dword [edx]
inc eax
inc edx
dec ebp
add esp, 4
pop ebx
push esi
and esi, 0x17470
pop esi
cmp dword [ebp - 0xc64], 0
jne 0x1e03aaf3
mov dword [ebp - 0x2a4], 0
jmp 0x1e03ad3e
add byte [eax], al
add cl, ch
dec ebx
add al, byte [eax]
add byte [ebx - 0xc6373], cl
dec dword [ecx - 0x4d373]
call dword [edx - 0x7f]
pushfd
push 0xc2810000
shr dword [edi], 0
add bl, ch
pop es
inc esi
inc ebx
inc edi
dec esp
aaa
xor eax, dword [ebp + 0x5a]
mov ecx, dword [ebp - 0xc64]
mov dword [ebp - 0x4d4], ecx