joyce8/EMBER2024-capa huggingface dataset:
Function at 0x411624
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add eax, 0x14d24
and eax, 0x143be
xor eax, 0x10be7
pop eax
push ebx
xor ebx, 0x10d89
or ebx, 0x96de
and ebx, 0x11c34
and ebx, 0x18486
pop ebx
mov eax, dword [ebp - 0x3e8]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x3ae], cl
mov edx, dword [ebp - 0xab8]
sub edx, dword [ebp - 0x3e8]
mov dword [ebp - 0x1694], edx
mov dword [ebp - 0xce8], 0
push ebx
push ecx
add esp, 4
sub ebx, 0x925b
pop ebx
push eax
push esi
add esp, 4
or eax, 0x99ba
sub eax, 0x791d
or eax, 0xe5c0
pop eax
push eax
sub eax, 0x121
jmp 0x411539
pop eax
mov byte [ebp - 0x9d4], 0x56
push esi
mov byte [ebp - 0x9d3], 0x69
mov byte [ebp - 0x9d2], 0x72
mov byte [ebp - 0x9d1], 0x74
mov byte [ebp - 0x9d0], 0x75
mov byte [ebp - 0x9cf], 0x61
mov byte [ebp - 0x9ce], 0x6c
mov byte [ebp - 0x9cd], 0x50
mov byte [ebp - 0x9cc], 0x72
mov byte [ebp - 0x9cb], 0x6f
mov byte [ebp - 0x9ca], 0x74
mov byte [ebp - 0x9c9], 0x65
mov byte [ebp - 0x9c8], 0x63
mov byte [ebp - 0x9c7], 0x74
mov byte [ebp - 0x9c6], 0
push edx
push edx
add esp, 4
and edx, 0x16e26
pop edx
push ebx
push ecx
add esp, 4
call 0x4115c2
add byte [ecx], bh
cmp al, 0x38
cmp ecx, dword [ebp + 0x34]
dec esi
xor al, byte [ebx + 0x7eb04c4]
cmp dword [ecx + 0x4a], ecx
dec ebx
inc esi
cmp cl, byte [ecx + eax*4 - 0x1d]
push cs
ja 0x4115d4
add byte [ebx + 0x64], bl
mov eax, dword [0x18]
pop ebx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1994], eax
mov ecx, dword [ebp - 0x1994]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1998], edx
mov eax, dword [ebp - 0x1998]
mov dword [ebp - 0x1614], eax
push esi
sub esi, 0x15306
pop esi
push ebx
xor ebx, 0xdf58
jmp 0x411610
sub ebx, 0x153f6
pop ebx
push esi
call 0x411624
add byte [esi], dh
inc esp
dec eax
dec edx
inc esp
dec esi
add esp, 4
and esi, 0x5173
pop esi
cmp dword [ebp - 0x1614], 0
jne 0x411646
mov dword [ebp - 0x2fc], 0
jmp 0x4118ed
mov ecx, dword [ebp - 0x1614]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcc4], eax
push ebx
push edi
add esp, 4
call 0x41166d
add byte [edi + 0x47], cl
push eax
inc ebp
inc edx
inc eax
cmp dword [esi], edi
aas
add esp, 4
jmp 0x411678
pop ebx
push esi
push edi
add esp, 4
jmp 0x411683
xor esi, 0x9565
pop esi
cmp dword [ebp - 0xcc4], 0
jne 0x4116a2
mov dword [ebp - 0x2fc], 0
jmp 0x4118ed
mov ecx, dword [ebp - 0xcc4]
mov dword [ebp - 0x514], ecx
push ebx
jmp 0x4116b7
add ebx, 0xa5d1
pop ebx
push ecx
add ecx, 0x1649c
jmp 0x4116ca
or ecx, 0xc0b6
call 0x4116dc
add byte [edi], dh
inc edi
aas
cmp eax, dword [ebp + ecx*2 - 0x7d]
les eax, [ecx + ebx*2]
Function at 0x41166d
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add eax, 0x14d24
and eax, 0x143be
xor eax, 0x10be7
pop eax
push ebx
xor ebx, 0x10d89
or ebx, 0x96de
and ebx, 0x11c34
and ebx, 0x18486
pop ebx
mov eax, dword [ebp - 0x3e8]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x3ae], cl
mov edx, dword [ebp - 0xab8]
sub edx, dword [ebp - 0x3e8]
mov dword [ebp - 0x1694], edx
mov dword [ebp - 0xce8], 0
push ebx
push ecx
add esp, 4
sub ebx, 0x925b
pop ebx
push eax
push esi
add esp, 4
or eax, 0x99ba
sub eax, 0x791d
or eax, 0xe5c0
pop eax
push eax
sub eax, 0x121
jmp 0x411539
pop eax
mov byte [ebp - 0x9d4], 0x56
push esi
mov byte [ebp - 0x9d3], 0x69
mov byte [ebp - 0x9d2], 0x72
mov byte [ebp - 0x9d1], 0x74
mov byte [ebp - 0x9d0], 0x75
mov byte [ebp - 0x9cf], 0x61
mov byte [ebp - 0x9ce], 0x6c
mov byte [ebp - 0x9cd], 0x50
mov byte [ebp - 0x9cc], 0x72
mov byte [ebp - 0x9cb], 0x6f
mov byte [ebp - 0x9ca], 0x74
mov byte [ebp - 0x9c9], 0x65
mov byte [ebp - 0x9c8], 0x63
mov byte [ebp - 0x9c7], 0x74
mov byte [ebp - 0x9c6], 0
push edx
push edx
add esp, 4
and edx, 0x16e26
pop edx
push ebx
push ecx
add esp, 4
call 0x4115c2
add byte [ecx], bh
cmp al, 0x38
cmp ecx, dword [ebp + 0x34]
dec esi
xor al, byte [ebx + 0x7eb04c4]
cmp dword [ecx + 0x4a], ecx
dec ebx
inc esi
cmp cl, byte [ecx + eax*4 - 0x1d]
push cs
ja 0x4115d4
add byte [ebx + 0x64], bl
mov eax, dword [0x18]
pop ebx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1994], eax
mov ecx, dword [ebp - 0x1994]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1998], edx
mov eax, dword [ebp - 0x1998]
mov dword [ebp - 0x1614], eax
push esi
sub esi, 0x15306
pop esi
push ebx
xor ebx, 0xdf58
jmp 0x411610
sub ebx, 0x153f6
pop ebx
push esi
call 0x411624
add byte [esi], dh
inc esp
dec eax
dec edx
inc esp
dec esi
add esp, 4
and esi, 0x5173
pop esi
cmp dword [ebp - 0x1614], 0
jne 0x411646
mov dword [ebp - 0x2fc], 0
jmp 0x4118ed
mov ecx, dword [ebp - 0x1614]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcc4], eax
push ebx
push edi
add esp, 4
call 0x41166d
add byte [edi + 0x47], cl
push eax
inc ebp
inc edx
inc eax
cmp dword [esi], edi
aas
add esp, 4
jmp 0x411678
pop ebx
push esi
push edi
add esp, 4
jmp 0x411683
xor esi, 0x9565
pop esi
cmp dword [ebp - 0xcc4], 0
jne 0x4116a2
mov dword [ebp - 0x2fc], 0
jmp 0x4118ed
mov ecx, dword [ebp - 0xcc4]
mov dword [ebp - 0x514], ecx
push ebx
jmp 0x4116b7
add ebx, 0xa5d1
pop ebx
push ecx
add ecx, 0x1649c
jmp 0x4116ca
or ecx, 0xc0b6
call 0x4116dc
add byte [edi], dh
inc edi
aas
cmp eax, dword [ebp + ecx*2 - 0x7d]
les eax, [ecx + ebx*2]
Function at 0x4116dc
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add eax, 0x14d24
and eax, 0x143be
xor eax, 0x10be7
pop eax
push ebx
xor ebx, 0x10d89
or ebx, 0x96de
and ebx, 0x11c34
and ebx, 0x18486
pop ebx
mov eax, dword [ebp - 0x3e8]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x3ae], cl
mov edx, dword [ebp - 0xab8]
sub edx, dword [ebp - 0x3e8]
mov dword [ebp - 0x1694], edx
mov dword [ebp - 0xce8], 0
push ebx
push ecx
add esp, 4
sub ebx, 0x925b
pop ebx
push eax
push esi
add esp, 4
or eax, 0x99ba
sub eax, 0x791d
or eax, 0xe5c0
pop eax
push eax
sub eax, 0x121
jmp 0x411539
pop eax
mov byte [ebp - 0x9d4], 0x56
push esi
mov byte [ebp - 0x9d3], 0x69
mov byte [ebp - 0x9d2], 0x72
mov byte [ebp - 0x9d1], 0x74
mov byte [ebp - 0x9d0], 0x75
mov byte [ebp - 0x9cf], 0x61
mov byte [ebp - 0x9ce], 0x6c
mov byte [ebp - 0x9cd], 0x50
mov byte [ebp - 0x9cc], 0x72
mov byte [ebp - 0x9cb], 0x6f
mov byte [ebp - 0x9ca], 0x74
mov byte [ebp - 0x9c9], 0x65
mov byte [ebp - 0x9c8], 0x63
mov byte [ebp - 0x9c7], 0x74
mov byte [ebp - 0x9c6], 0
push edx
push edx
add esp, 4
and edx, 0x16e26
pop edx
push ebx
push ecx
add esp, 4
call 0x4115c2
add byte [ecx], bh
cmp al, 0x38
cmp ecx, dword [ebp + 0x34]
dec esi
xor al, byte [ebx + 0x7eb04c4]
cmp dword [ecx + 0x4a], ecx
dec ebx
inc esi
cmp cl, byte [ecx + eax*4 - 0x1d]
push cs
ja 0x4115d4
add byte [ebx + 0x64], bl
mov eax, dword [0x18]
pop ebx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1994], eax
mov ecx, dword [ebp - 0x1994]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1998], edx
mov eax, dword [ebp - 0x1998]
mov dword [ebp - 0x1614], eax
push esi
sub esi, 0x15306
pop esi
push ebx
xor ebx, 0xdf58
jmp 0x411610
sub ebx, 0x153f6
pop ebx
push esi
call 0x411624
add byte [esi], dh
inc esp
dec eax
dec edx
inc esp
dec esi
add esp, 4
and esi, 0x5173
pop esi
cmp dword [ebp - 0x1614], 0
jne 0x411646
mov dword [ebp - 0x2fc], 0
jmp 0x4118ed
mov ecx, dword [ebp - 0x1614]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcc4], eax
push ebx
push edi
add esp, 4
call 0x41166d
add byte [edi + 0x47], cl
push eax
inc ebp
inc edx
inc eax
cmp dword [esi], edi
aas
add esp, 4
jmp 0x411678
pop ebx
push esi
push edi
add esp, 4
jmp 0x411683
xor esi, 0x9565
pop esi
cmp dword [ebp - 0xcc4], 0
jne 0x4116a2
mov dword [ebp - 0x2fc], 0
jmp 0x4118ed
mov ecx, dword [ebp - 0xcc4]
mov dword [ebp - 0x514], ecx
push ebx
jmp 0x4116b7
add ebx, 0xa5d1
pop ebx
push ecx
add ecx, 0x1649c
jmp 0x4116ca
or ecx, 0xc0b6
call 0x4116dc
add byte [edi], dh
inc edi
aas
cmp eax, dword [ebp + ecx*2 - 0x7d]
les eax, [ecx + ebx*2]

Function at 0x4116e0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
lea edx, [ebp - 0x1738]
mov dword [ebp - 0xcc0], edx
mov eax, dword [ebp - 0x514]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcbc], ecx
xor edx, edx
invalid
invalid
xchg ebp, eax
Function at 0x411df0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add byte [eax], al
pop esi
push edx
call fcn.00411e03
add byte [esi], bh
xor eax, dword [edx + 0x38]
dec ebx
inc ebp
inc esp
aas
dec edi

Function at 0x411e03
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edx
push edx
push edi
add esp, 4
sub edx, 0xdc36
and edx, 0x728d
pop edx
mov ecx, dword [ebp - 0x774]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3a4], edx
mov dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x166c], eax
cmp dword [ebp - 0x166c], 0
jne 0x411e58
mov ecx, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], ecx
jmp 0x412149
mov edx, dword [ebp - 0x166c]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1670], eax
jne 0x411e80
mov ecx, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], ecx
jmp 0x412149
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1670]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1678], edx
cmp dword [ebp - 0x1678], 0
invalid
Function at 0x412344
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push esi
add esi, 0x103cb
call 0x412344
add byte [edi + 0x45], cl
dec edx
inc edx
inc esi
inc edx
dec edx
add esp, 4
add esi, 0x3513
pop esi
push ebx
sub ebx, 0x3192
sub ebx, 0x760b
xor ebx, 0xbe57
pop ebx
lea eax, [ebp - 0x1738]
mov dword [ebp - 0xcdc], eax
mov ecx, dword [ebp - 0x51c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcd8], edx
xor eax, eax
mov word [ebp - 0x224], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push edx
or edx, 0x8403
call 0x4123a2
add byte [eax + 0x36], al
inc edx
dec edi
dec esi
cmp al, 0x43
inc ebx
xor eax, dword [ebx - 0x3d7efb3c]
push ebp
lea eax, [eax]
add byte [ecx + 0x10849e2], al
add byte [edx + 0x56], bl
push esi
add esp, 4
or esi, 0xc7c0
pop esi
mov edx, dword [ebp - 0xcd8]
mov ax, word [edx]
mov word [ebp - 0x1046], ax
mov ecx, dword [ebp - 0xcd8]
add ecx, 2
mov dword [ebp - 0xcd8], ecx
mov dx, word [ebp - 0x1046]
mov edx, 0x66ffffef
mov dword [ebp - 0x224], edx
mov eax, dword [ebp - 0xcdc]
mov cx, word [eax]
mov word [ebp - 0x1048], cx
mov edx, dword [ebp - 0xcdc]
inc dword [ebx - 0x6a76fd3e]
and al, 0xf3
invalid
jmp dword [esi - 0x75]
test dword [eax + 0x66ffffef], edi
mov dword [ebp - 0x40], eax
push ecx
push eax
add esp, 4
sub ecx, 0x7d18
pop ecx
push esi
push eax
add esp, 4
sub esi, 0xaa52
and esi, 0x911f
xor esi, 0x1a46
and esi, 0x12b56
pop esi
push edi
xor edi, 0x45dc
pop edi
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x412464
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
sub edx, eax
mov dword [ebp - 0x1684], edx
jmp 0x4124be
movzx ecx, word [ebp - 0x224]
movzx edx, word [ebp - 0x40]
cmp ecx, edx
je 0x41238c
movzx eax, word [ebp - 0x224]
xor eax, 0x20
and byte [edi], cl
mov bh, 0x4d
sar byte [ebx], 0xc1
je 0x41238c
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
cmp edx, eax
jge 0x4124a8
mov dword [ebp - 0x1680], 0xffffffff
jmp 0x4124b2
mov dword [ebp - 0x1680], 1
mov ecx, dword [ebp - 0x1680]
mov dword [ebp - 0x1684], ecx
cmp dword [ebp - 0x1684], 0
jne 0x412507
push ebx
jmp 0x4124cf
call 0x4124dd
add byte [ecx + 0x4b], cl
inc esi
dec ebx
inc ebp
dec esi
cmp edi, dword [ebx]
add esp, 4
pop ebx
push esi
xor esi, 0x151e7
call 0x4124f5
add byte [edx], dh
cmp byte [ecx + 0x3f], cl
cmp al, 0x47
add esp, 4
pop esi
mov edx, dword [ebp - 0x51c]
mov dword [ebp - 0x2fc], edx
jmp 0x41256f
push edx
push eax
add esp, 4
xor edx, 0xe4a3
pop edx
push edi
and edi, 0x12e20
xor edi, 0x15a6b
and edi, 0x17ca8
or edi, 0x7423
pop edi
push ecx
push esi
add esp, 4
add ecx, 0x105fa
pop ecx
mov eax, dword [ebp - 0x51c]
mov ecx, dword [eax]
mov dword [ebp - 0x51c], ecx
mov edx, dword [ebp - 0x51c]
cmp edx, dword [ebp - 0xce0]
je 0x412565
mov eax, dword [ebp - 0x51c]
cmp dword [eax + 0x30], 0
invalid
Function at 0x4123a2
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push esi
add esi, 0x103cb
call 0x412344
add byte [edi + 0x45], cl
dec edx
inc edx
inc esi
inc edx
dec edx
add esp, 4
add esi, 0x3513
pop esi
push ebx
sub ebx, 0x3192
sub ebx, 0x760b
xor ebx, 0xbe57
pop ebx
lea eax, [ebp - 0x1738]
mov dword [ebp - 0xcdc], eax
mov ecx, dword [ebp - 0x51c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcd8], edx
xor eax, eax
mov word [ebp - 0x224], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push edx
or edx, 0x8403
call 0x4123a2
add byte [eax + 0x36], al
inc edx
dec edi
dec esi
cmp al, 0x43
inc ebx
xor eax, dword [ebx - 0x3d7efb3c]
push ebp
lea eax, [eax]
add byte [ecx + 0x10849e2], al
add byte [edx + 0x56], bl
push esi
add esp, 4
or esi, 0xc7c0
pop esi
mov edx, dword [ebp - 0xcd8]
mov ax, word [edx]
mov word [ebp - 0x1046], ax
mov ecx, dword [ebp - 0xcd8]
add ecx, 2
mov dword [ebp - 0xcd8], ecx
mov dx, word [ebp - 0x1046]
mov edx, 0x66ffffef
mov dword [ebp - 0x224], edx
mov eax, dword [ebp - 0xcdc]
mov cx, word [eax]
mov word [ebp - 0x1048], cx
mov edx, dword [ebp - 0xcdc]
inc dword [ebx - 0x6a76fd3e]
and al, 0xf3
invalid
jmp dword [esi - 0x75]
test dword [eax + 0x66ffffef], edi
mov dword [ebp - 0x40], eax
push ecx
push eax
add esp, 4
sub ecx, 0x7d18
pop ecx
push esi
push eax
add esp, 4
sub esi, 0xaa52
and esi, 0x911f
xor esi, 0x1a46
and esi, 0x12b56
pop esi
push edi
xor edi, 0x45dc
pop edi
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x412464
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
sub edx, eax
mov dword [ebp - 0x1684], edx
jmp 0x4124be
movzx ecx, word [ebp - 0x224]
movzx edx, word [ebp - 0x40]
cmp ecx, edx
je 0x41238c
movzx eax, word [ebp - 0x224]
xor eax, 0x20
and byte [edi], cl
mov bh, 0x4d
sar byte [ebx], 0xc1
je 0x41238c
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
cmp edx, eax
jge 0x4124a8
mov dword [ebp - 0x1680], 0xffffffff
jmp 0x4124b2
mov dword [ebp - 0x1680], 1
mov ecx, dword [ebp - 0x1680]
mov dword [ebp - 0x1684], ecx
cmp dword [ebp - 0x1684], 0
jne 0x412507
push ebx
jmp 0x4124cf
call 0x4124dd
add byte [ecx + 0x4b], cl
inc esi
dec ebx
inc ebp
dec esi
cmp edi, dword [ebx]
add esp, 4
pop ebx
push esi
xor esi, 0x151e7
call 0x4124f5
add byte [edx], dh
cmp byte [ecx + 0x3f], cl
cmp al, 0x47
add esp, 4
pop esi
mov edx, dword [ebp - 0x51c]
mov dword [ebp - 0x2fc], edx
jmp 0x41256f
push edx
push eax
add esp, 4
xor edx, 0xe4a3
pop edx
push edi
and edi, 0x12e20
xor edi, 0x15a6b
and edi, 0x17ca8
or edi, 0x7423
pop edi
push ecx
push esi
add esp, 4
add ecx, 0x105fa
pop ecx
mov eax, dword [ebp - 0x51c]
mov ecx, dword [eax]
mov dword [ebp - 0x51c], ecx
mov edx, dword [ebp - 0x51c]
cmp edx, dword [ebp - 0xce0]
je 0x412565
mov eax, dword [ebp - 0x51c]
cmp dword [eax + 0x30], 0
invalid
Function at 0x4124dd
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push esi
add esi, 0x103cb
call 0x412344
add byte [edi + 0x45], cl
dec edx
inc edx
inc esi
inc edx
dec edx
add esp, 4
add esi, 0x3513
pop esi
push ebx
sub ebx, 0x3192
sub ebx, 0x760b
xor ebx, 0xbe57
pop ebx
lea eax, [ebp - 0x1738]
mov dword [ebp - 0xcdc], eax
mov ecx, dword [ebp - 0x51c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcd8], edx
xor eax, eax
mov word [ebp - 0x224], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push edx
or edx, 0x8403
call 0x4123a2
add byte [eax + 0x36], al
inc edx
dec edi
dec esi
cmp al, 0x43
inc ebx
xor eax, dword [ebx - 0x3d7efb3c]
push ebp
lea eax, [eax]
add byte [ecx + 0x10849e2], al
add byte [edx + 0x56], bl
push esi
add esp, 4
or esi, 0xc7c0
pop esi
mov edx, dword [ebp - 0xcd8]
mov ax, word [edx]
mov word [ebp - 0x1046], ax
mov ecx, dword [ebp - 0xcd8]
add ecx, 2
mov dword [ebp - 0xcd8], ecx
mov dx, word [ebp - 0x1046]
mov edx, 0x66ffffef
mov dword [ebp - 0x224], edx
mov eax, dword [ebp - 0xcdc]
mov cx, word [eax]
mov word [ebp - 0x1048], cx
mov edx, dword [ebp - 0xcdc]
inc dword [ebx - 0x6a76fd3e]
and al, 0xf3
invalid
jmp dword [esi - 0x75]
test dword [eax + 0x66ffffef], edi
mov dword [ebp - 0x40], eax
push ecx
push eax
add esp, 4
sub ecx, 0x7d18
pop ecx
push esi
push eax
add esp, 4
sub esi, 0xaa52
and esi, 0x911f
xor esi, 0x1a46
and esi, 0x12b56
pop esi
push edi
xor edi, 0x45dc
pop edi
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x412464
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
sub edx, eax
mov dword [ebp - 0x1684], edx
jmp 0x4124be
movzx ecx, word [ebp - 0x224]
movzx edx, word [ebp - 0x40]
cmp ecx, edx
je 0x41238c
movzx eax, word [ebp - 0x224]
xor eax, 0x20
and byte [edi], cl
mov bh, 0x4d
sar byte [ebx], 0xc1
je 0x41238c
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
cmp edx, eax
jge 0x4124a8
mov dword [ebp - 0x1680], 0xffffffff
jmp 0x4124b2
mov dword [ebp - 0x1680], 1
mov ecx, dword [ebp - 0x1680]
mov dword [ebp - 0x1684], ecx
cmp dword [ebp - 0x1684], 0
jne 0x412507
push ebx
jmp 0x4124cf
call 0x4124dd
add byte [ecx + 0x4b], cl
inc esi
dec ebx
inc ebp
dec esi
cmp edi, dword [ebx]
add esp, 4
pop ebx
push esi
xor esi, 0x151e7
call 0x4124f5
add byte [edx], dh
cmp byte [ecx + 0x3f], cl
cmp al, 0x47
add esp, 4
pop esi
mov edx, dword [ebp - 0x51c]
mov dword [ebp - 0x2fc], edx
jmp 0x41256f
push edx
push eax
add esp, 4
xor edx, 0xe4a3
pop edx
push edi
and edi, 0x12e20
xor edi, 0x15a6b
and edi, 0x17ca8
or edi, 0x7423
pop edi
push ecx
push esi
add esp, 4
add ecx, 0x105fa
pop ecx
mov eax, dword [ebp - 0x51c]
mov ecx, dword [eax]
mov dword [ebp - 0x51c], ecx
mov edx, dword [ebp - 0x51c]
cmp edx, dword [ebp - 0xce0]
je 0x412565
mov eax, dword [ebp - 0x51c]
cmp dword [eax + 0x30], 0
invalid
Function at 0x4124f5
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push esi
add esi, 0x103cb
call 0x412344
add byte [edi + 0x45], cl
dec edx
inc edx
inc esi
inc edx
dec edx
add esp, 4
add esi, 0x3513
pop esi
push ebx
sub ebx, 0x3192
sub ebx, 0x760b
xor ebx, 0xbe57
pop ebx
lea eax, [ebp - 0x1738]
mov dword [ebp - 0xcdc], eax
mov ecx, dword [ebp - 0x51c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcd8], edx
xor eax, eax
mov word [ebp - 0x224], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push edx
or edx, 0x8403
call 0x4123a2
add byte [eax + 0x36], al
inc edx
dec edi
dec esi
cmp al, 0x43
inc ebx
xor eax, dword [ebx - 0x3d7efb3c]
push ebp
lea eax, [eax]
add byte [ecx + 0x10849e2], al
add byte [edx + 0x56], bl
push esi
add esp, 4
or esi, 0xc7c0
pop esi
mov edx, dword [ebp - 0xcd8]
mov ax, word [edx]
mov word [ebp - 0x1046], ax
mov ecx, dword [ebp - 0xcd8]
add ecx, 2
mov dword [ebp - 0xcd8], ecx
mov dx, word [ebp - 0x1046]
mov edx, 0x66ffffef
mov dword [ebp - 0x224], edx
mov eax, dword [ebp - 0xcdc]
mov cx, word [eax]
mov word [ebp - 0x1048], cx
mov edx, dword [ebp - 0xcdc]
inc dword [ebx - 0x6a76fd3e]
and al, 0xf3
invalid
jmp dword [esi - 0x75]
test dword [eax + 0x66ffffef], edi
mov dword [ebp - 0x40], eax
push ecx
push eax
add esp, 4
sub ecx, 0x7d18
pop ecx
push esi
push eax
add esp, 4
sub esi, 0xaa52
and esi, 0x911f
xor esi, 0x1a46
and esi, 0x12b56
pop esi
push edi
xor edi, 0x45dc
pop edi
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x412464
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
sub edx, eax
mov dword [ebp - 0x1684], edx
jmp 0x4124be
movzx ecx, word [ebp - 0x224]
movzx edx, word [ebp - 0x40]
cmp ecx, edx
je 0x41238c
movzx eax, word [ebp - 0x224]
xor eax, 0x20
and byte [edi], cl
mov bh, 0x4d
sar byte [ebx], 0xc1
je 0x41238c
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
cmp edx, eax
jge 0x4124a8
mov dword [ebp - 0x1680], 0xffffffff
jmp 0x4124b2
mov dword [ebp - 0x1680], 1
mov ecx, dword [ebp - 0x1680]
mov dword [ebp - 0x1684], ecx
cmp dword [ebp - 0x1684], 0
jne 0x412507
push ebx
jmp 0x4124cf
call 0x4124dd
add byte [ecx + 0x4b], cl
inc esi
dec ebx
inc ebp
dec esi
cmp edi, dword [ebx]
add esp, 4
pop ebx
push esi
xor esi, 0x151e7
call 0x4124f5
add byte [edx], dh
cmp byte [ecx + 0x3f], cl
cmp al, 0x47
add esp, 4
pop esi
mov edx, dword [ebp - 0x51c]
mov dword [ebp - 0x2fc], edx
jmp 0x41256f
push edx
push eax
add esp, 4
xor edx, 0xe4a3
pop edx
push edi
and edi, 0x12e20
xor edi, 0x15a6b
and edi, 0x17ca8
or edi, 0x7423
pop edi
push ecx
push esi
add esp, 4
add ecx, 0x105fa
pop ecx
mov eax, dword [ebp - 0x51c]
mov ecx, dword [eax]
mov dword [ebp - 0x51c], ecx
mov edx, dword [ebp - 0x51c]
cmp edx, dword [ebp - 0xce0]
je 0x412565
mov eax, dword [ebp - 0x51c]
cmp dword [eax + 0x30], 0
invalid
Function at 0x412520
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push esi
add esi, 0x103cb
call 0x412344
add byte [edi + 0x45], cl
dec edx
inc edx
inc esi
inc edx
dec edx
add esp, 4
add esi, 0x3513
pop esi
push ebx
sub ebx, 0x3192
sub ebx, 0x760b
xor ebx, 0xbe57
pop ebx
lea eax, [ebp - 0x1738]
mov dword [ebp - 0xcdc], eax
mov ecx, dword [ebp - 0x51c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcd8], edx
xor eax, eax
mov word [ebp - 0x224], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push edx
or edx, 0x8403
call 0x4123a2
add byte [eax + 0x36], al
inc edx
dec edi
dec esi
cmp al, 0x43
inc ebx
xor eax, dword [ebx - 0x3d7efb3c]
push ebp
lea eax, [eax]
add byte [ecx + 0x10849e2], al
add byte [edx + 0x56], bl
push esi
add esp, 4
or esi, 0xc7c0
pop esi
mov edx, dword [ebp - 0xcd8]
mov ax, word [edx]
mov word [ebp - 0x1046], ax
mov ecx, dword [ebp - 0xcd8]
add ecx, 2
mov dword [ebp - 0xcd8], ecx
mov dx, word [ebp - 0x1046]
mov edx, 0x66ffffef
mov dword [ebp - 0x224], edx
mov eax, dword [ebp - 0xcdc]
mov cx, word [eax]
mov word [ebp - 0x1048], cx
mov edx, dword [ebp - 0xcdc]
inc dword [ebx - 0x6a76fd3e]
and al, 0xf3
invalid
jmp dword [esi - 0x75]
test dword [eax + 0x66ffffef], edi
mov dword [ebp - 0x40], eax
push ecx
push eax
add esp, 4
sub ecx, 0x7d18
pop ecx
push esi
push eax
add esp, 4
sub esi, 0xaa52
and esi, 0x911f
xor esi, 0x1a46
and esi, 0x12b56
pop esi
push edi
xor edi, 0x45dc
pop edi
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x412464
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
sub edx, eax
mov dword [ebp - 0x1684], edx
jmp 0x4124be
movzx ecx, word [ebp - 0x224]
movzx edx, word [ebp - 0x40]
cmp ecx, edx
je 0x41238c
movzx eax, word [ebp - 0x224]
xor eax, 0x20
and byte [edi], cl
mov bh, 0x4d
sar byte [ebx], 0xc1
je 0x41238c
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
cmp edx, eax
jge 0x4124a8
mov dword [ebp - 0x1680], 0xffffffff
jmp 0x4124b2
mov dword [ebp - 0x1680], 1
mov ecx, dword [ebp - 0x1680]
mov dword [ebp - 0x1684], ecx
cmp dword [ebp - 0x1684], 0
jne 0x412507
push ebx
jmp 0x4124cf
call 0x4124dd
add byte [ecx + 0x4b], cl
inc esi
dec ebx
inc ebp
dec esi
cmp edi, dword [ebx]
add esp, 4
pop ebx
push esi
xor esi, 0x151e7
call 0x4124f5
add byte [edx], dh
cmp byte [ecx + 0x3f], cl
cmp al, 0x47
add esp, 4
pop esi
mov edx, dword [ebp - 0x51c]
mov dword [ebp - 0x2fc], edx
jmp 0x41256f
push edx
push eax
add esp, 4
xor edx, 0xe4a3
pop edx
push edi
and edi, 0x12e20
xor edi, 0x15a6b
and edi, 0x17ca8
or edi, 0x7423
pop edi
push ecx
push esi
add esp, 4
add ecx, 0x105fa
pop ecx
mov eax, dword [ebp - 0x51c]
mov ecx, dword [eax]
mov dword [ebp - 0x51c], ecx
mov edx, dword [ebp - 0x51c]
cmp edx, dword [ebp - 0xce0]
je 0x412565
mov eax, dword [ebp - 0x51c]
cmp dword [eax + 0x30], 0
invalid