joyce8/EMBER2024-capa huggingface dataset:
Function at 0x47f4f9
Capabilities:
Execute anti-debugging instructions

Disassembly:
call fcn.0047f4f0
add esp, 8
je 0x47f507
jne 0x47f507
jmp 0x47f509
jmp 0x47f50a
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x47f51e
call fcn.00480204
call 0x47f514
call 0x47f515
add esp, 8
sub eax, dword [esp]
je 0x47f52f
jne 0x47f52f
jmp 0x47f531
jmp 0x47f532
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x47f549
add esp, 4
call 0x47f544
call 0x48022a
call 0x47f53a
call 0x47f53b
add esp, 8
cmp eax, 0xfff
jmp 0x47f554
jmp 0x47f558
jmp 0x47f55b
jbe 0x47f578
jmp 0x47f560
jmp 0x47f564
jmp 0x47f567
int3
call 0x47f587
call fcn.0048026d
call 0x47f57d
call 0x47f57e
add esp, 8

Function at 0x47f57e
Capabilities:
Execute anti-debugging instructions

Disassembly:
call fcn.0047f4f0
add esp, 8
je 0x47f507
jne 0x47f507
jmp 0x47f509
jmp 0x47f50a
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x47f51e
call fcn.00480204
call 0x47f514
call 0x47f515
add esp, 8
sub eax, dword [esp]
je 0x47f52f
jne 0x47f52f
jmp 0x47f531
jmp 0x47f532
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x47f549
add esp, 4
call 0x47f544
call 0x48022a
call 0x47f53a
call 0x47f53b
add esp, 8
cmp eax, 0xfff
jmp 0x47f554
jmp 0x47f558
jmp 0x47f55b
jbe 0x47f578
jmp 0x47f560
jmp 0x47f564
jmp 0x47f567
int3
call 0x47f587
call fcn.0048026d
call 0x47f57d
call 0x47f57e
add esp, 8

Function at 0x47f58f
Capabilities:
Execute anti-debugging instructions

Disassembly:
je 0x47f595
jne 0x47f595
jmp 0x47f597
jmp 0x47f598
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x47f5ac
call fcn.00480292
call 0x47f5a2
call 0x47f5a3
add esp, 8
sub eax, dword [esp]
je 0x47f5bd
jne 0x47f5bd
jmp 0x47f5bf
jmp 0x47f5c0
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x47f5d7
add esp, 4
call 0x47f5d2
call 0x4802b8
call 0x47f5c8
call 0x47f5c9
add esp, 8
cmp eax, 0xfff
jmp 0x47f5e2
jmp 0x47f5e6
jmp 0x47f5e9
jbe 0x47f606
jmp 0x47f5ee
jmp 0x47f5f2
jmp 0x47f5f5
int3
je 0x47f60c
jne 0x47f60c
jmp 0x47f60e
jmp 0x47f60f
xor dword [esp + eax + 0x75], 0xeb02eb02
add dword [ecx + 0x2750474], eax
je 0x47f615
jne 0x47f615
jmp 0x47f617
jmp 0x47f618
xor dword [esp + eax + 0x75], 0xeb02eb02
add dword [ecx + 0xf50310f], eax
xor eax, ebp
call 0x47f635
je 0x47f61e
jne 0x47f61e
jmp 0x47f620
jmp 0x47f621
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
Function at 0x47f6a7
Capabilities:
Execute anti-debugging instructions

Disassembly:
call 0x47f635
call 0x48031b
call 0x47f62b
call 0x47f62c
add esp, 8
sub eax, dword [esp]
je 0x47f646
jne 0x47f646
jmp 0x47f648
jmp 0x47f649
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x47f660
add esp, 4
call 0x47f65b
call 0x480341
call 0x47f651
call 0x47f652
add esp, 8
cmp eax, 0xfff
jmp 0x47f66b
jmp 0x47f66f
jmp 0x47f672
jbe 0x47f68f
jmp 0x47f677
jmp 0x47f67b
jmp 0x47f67e
int3
je 0x47f695
jne 0x47f695
jmp 0x47f697
jmp 0x47f698
sub eax, 0xa
call 0x47f6a7
call 0x48038d
call 0x47f69d
call 0x47f69e
add esp, 8
je 0x47f6b5
jne 0x47f6b5
jmp 0x47f6b7
jmp 0x47f6b8
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x47f6cc
call fcn.004803b2
call 0x47f6c2
call 0x47f6c3
add esp, 8
sub eax, dword [esp]
je 0x47f6dd
jne 0x47f6dd
jmp 0x47f6df
jmp 0x47f6e0
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x47f6f7
add esp, 4
call 0x47f6f2
call 0x4803d8
call 0x47f6e8
call 0x47f6e9
add esp, 8
cmp eax, 0xfff
jmp 0x47f702
jmp 0x47f706
jmp 0x47f709
jbe 0x47f726
jmp 0x47f70e
jmp 0x47f712
jmp 0x47f715
int3
je 0x47f72c
jne 0x47f72c
jmp 0x47f72e
jmp 0x47f72f
sub eax, 0xa
call 0x47f73e
call 0x480424
call 0x47f734
call 0x47f735
add esp, 8
je 0x47f74c
jne 0x47f74c
jmp 0x47f74e
jmp 0x47f74f
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x47f763
call fcn.00480449
call 0x47f759
call 0x47f75a
add esp, 8
sub eax, dword [esp]
je 0x47f774
jne 0x47f774
jmp 0x47f776
jmp 0x47f777
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x47f78e
add esp, 4
call 0x47f789
call 0x48046f
call 0x47f77f
call 0x47f780
add esp, 8
cmp eax, 0xfff
jmp 0x47f799
jmp 0x47f79d
jmp 0x47f7a0
jbe 0x47f7bd
jmp 0x47f7a5
jmp 0x47f7a9
jmp 0x47f7ac
int3
je 0x47f7c3
jne 0x47f7c3
jmp 0x47f7c5
jmp 0x47f7c6
sub eax, 0xa
call 0x47f7d5
call 0x4804bb
call 0x47f7cb
call 0x47f7cc
add esp, 8
je 0x47f7e3
jne 0x47f7e3
jmp 0x47f7e5
jmp 0x47f7e6
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x47f7fa
call fcn.004804e0
call 0x47f7f0
call 0x47f7f1
add esp, 8
Function at 0x47f73e
Capabilities:
Execute anti-debugging instructions

Disassembly:
call 0x47f635
call 0x48031b
call 0x47f62b
call 0x47f62c
add esp, 8
sub eax, dword [esp]
je 0x47f646
jne 0x47f646
jmp 0x47f648
jmp 0x47f649
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x47f660
add esp, 4
call 0x47f65b
call 0x480341
call 0x47f651
call 0x47f652
add esp, 8
cmp eax, 0xfff
jmp 0x47f66b
jmp 0x47f66f
jmp 0x47f672
jbe 0x47f68f
jmp 0x47f677
jmp 0x47f67b
jmp 0x47f67e
int3
je 0x47f695
jne 0x47f695
jmp 0x47f697
jmp 0x47f698
sub eax, 0xa
call 0x47f6a7
call 0x48038d
call 0x47f69d
call 0x47f69e
add esp, 8
je 0x47f6b5
jne 0x47f6b5
jmp 0x47f6b7
jmp 0x47f6b8
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x47f6cc
call fcn.004803b2
call 0x47f6c2
call 0x47f6c3
add esp, 8
sub eax, dword [esp]
je 0x47f6dd
jne 0x47f6dd
jmp 0x47f6df
jmp 0x47f6e0
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x47f6f7
add esp, 4
call 0x47f6f2
call 0x4803d8
call 0x47f6e8
call 0x47f6e9
add esp, 8
cmp eax, 0xfff
jmp 0x47f702
jmp 0x47f706
jmp 0x47f709
jbe 0x47f726
jmp 0x47f70e
jmp 0x47f712
jmp 0x47f715
int3
je 0x47f72c
jne 0x47f72c
jmp 0x47f72e
jmp 0x47f72f
sub eax, 0xa
call 0x47f73e
call 0x480424
call 0x47f734
call 0x47f735
add esp, 8
je 0x47f74c
jne 0x47f74c
jmp 0x47f74e
jmp 0x47f74f
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x47f763
call fcn.00480449
call 0x47f759
call 0x47f75a
add esp, 8
sub eax, dword [esp]
je 0x47f774
jne 0x47f774
jmp 0x47f776
jmp 0x47f777
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x47f78e
add esp, 4
call 0x47f789
call 0x48046f
call 0x47f77f
call 0x47f780
add esp, 8
cmp eax, 0xfff
jmp 0x47f799
jmp 0x47f79d
jmp 0x47f7a0
jbe 0x47f7bd
jmp 0x47f7a5
jmp 0x47f7a9
jmp 0x47f7ac
int3
je 0x47f7c3
jne 0x47f7c3
jmp 0x47f7c5
jmp 0x47f7c6
sub eax, 0xa
call 0x47f7d5
call 0x4804bb
call 0x47f7cb
call 0x47f7cc
add esp, 8
je 0x47f7e3
jne 0x47f7e3
jmp 0x47f7e5
jmp 0x47f7e6
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x47f7fa
call fcn.004804e0
call 0x47f7f0
call 0x47f7f1
add esp, 8
Function at 0x47f7d5
Capabilities:
Execute anti-debugging instructions

Disassembly:
call 0x47f635
call 0x48031b
call 0x47f62b
call 0x47f62c
add esp, 8
sub eax, dword [esp]
je 0x47f646
jne 0x47f646
jmp 0x47f648
jmp 0x47f649
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x47f660
add esp, 4
call 0x47f65b
call 0x480341
call 0x47f651
call 0x47f652
add esp, 8
cmp eax, 0xfff
jmp 0x47f66b
jmp 0x47f66f
jmp 0x47f672
jbe 0x47f68f
jmp 0x47f677
jmp 0x47f67b
jmp 0x47f67e
int3
je 0x47f695
jne 0x47f695
jmp 0x47f697
jmp 0x47f698
sub eax, 0xa
call 0x47f6a7
call 0x48038d
call 0x47f69d
call 0x47f69e
add esp, 8
je 0x47f6b5
jne 0x47f6b5
jmp 0x47f6b7
jmp 0x47f6b8
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x47f6cc
call fcn.004803b2
call 0x47f6c2
call 0x47f6c3
add esp, 8
sub eax, dword [esp]
je 0x47f6dd
jne 0x47f6dd
jmp 0x47f6df
jmp 0x47f6e0
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x47f6f7
add esp, 4
call 0x47f6f2
call 0x4803d8
call 0x47f6e8
call 0x47f6e9
add esp, 8
cmp eax, 0xfff
jmp 0x47f702
jmp 0x47f706
jmp 0x47f709
jbe 0x47f726
jmp 0x47f70e
jmp 0x47f712
jmp 0x47f715
int3
je 0x47f72c
jne 0x47f72c
jmp 0x47f72e
jmp 0x47f72f
sub eax, 0xa
call 0x47f73e
call 0x480424
call 0x47f734
call 0x47f735
add esp, 8
je 0x47f74c
jne 0x47f74c
jmp 0x47f74e
jmp 0x47f74f
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x47f763
call fcn.00480449
call 0x47f759
call 0x47f75a
add esp, 8
sub eax, dword [esp]
je 0x47f774
jne 0x47f774
jmp 0x47f776
jmp 0x47f777
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x47f78e
add esp, 4
call 0x47f789
call 0x48046f
call 0x47f77f
call 0x47f780
add esp, 8
cmp eax, 0xfff
jmp 0x47f799
jmp 0x47f79d
jmp 0x47f7a0
jbe 0x47f7bd
jmp 0x47f7a5
jmp 0x47f7a9
jmp 0x47f7ac
int3
je 0x47f7c3
jne 0x47f7c3
jmp 0x47f7c5
jmp 0x47f7c6
sub eax, 0xa
call 0x47f7d5
call 0x4804bb
call 0x47f7cb
call 0x47f7cc
add esp, 8
je 0x47f7e3
jne 0x47f7e3
jmp 0x47f7e5
jmp 0x47f7e6
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x47f7fa
call fcn.004804e0
call 0x47f7f0
call 0x47f7f1
add esp, 8

Function at 0x47f86c
Capabilities:
Execute anti-debugging instructions

Disassembly:
call fcn.0047f862
call fcn.0047f863
Function at 0x47f903
Capabilities:
Execute anti-debugging instructions

Disassembly:
jmp 0x47f871
add esp, 8
je 0x47f87a
jne 0x47f87a
jmp 0x47f87c
jmp 0x47f87d
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x47f891
call fcn.00480577
call 0x47f887
call 0x47f888
add esp, 8
sub eax, dword [esp]
je 0x47f8a2
jne 0x47f8a2
jmp 0x47f8a4
jmp 0x47f8a5
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x47f8bc
add esp, 4
call 0x47f8b7
call 0x48059d
call 0x47f8ad
call 0x47f8ae
add esp, 8
cmp eax, 0xfff
jmp 0x47f8c7
jmp 0x47f8cb
jmp 0x47f8ce
jbe 0x47f8eb
je 0x47f8f1
jne 0x47f8f1
jmp 0x47f8f3
jmp 0x47f8f4
sub eax, 0xa
call 0x47f903
call 0x4805e9
call 0x47f8f9
call 0x47f8fa
add esp, 8
je 0x47f911
jne 0x47f911
jmp 0x47f913
jmp 0x47f914
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x47f928
call fcn.0048060e
call 0x47f91e
call 0x47f91f
add esp, 8
sub eax, dword [esp]
je 0x47f939
jne 0x47f939
jmp 0x47f93b
jmp 0x47f93c
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x47f953
add esp, 4
call 0x47f94e
call 0x480634
call 0x47f944
call 0x47f945
add esp, 8
cmp eax, 0xfff
jmp 0x47f95e
jmp 0x47f962
jmp 0x47f965
jbe 0x47f982
jmp 0x47f96a
jmp 0x47f96e
jmp 0x47f971
int3
je 0x47f988
jne 0x47f988
jmp 0x47f98a
jmp 0x47f98b
sub eax, 0xa
call 0x47f99a

Function at 0x47f99a
Capabilities:
Execute anti-debugging instructions

Disassembly:
call 0x480680
call fcn.0047f990
call fcn.0047f991

Function at 0x47f9b5
Capabilities:
Execute anti-debugging instructions

Disassembly:
jmp 0x47f99f
add esp, 8
je 0x47f9a8
jne 0x47f9a8
jmp 0x47f9aa
jmp 0x47f9ab
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x47f9bf
call fcn.004806a5
call 0x47f9b5
call 0x47f9b6
add esp, 8
sub eax, dword [esp]
je 0x47f9d0
jne 0x47f9d0
jmp 0x47f9d2
jmp 0x47f9d3
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x47f9ea
add esp, 4
call 0x47f9e5
call 0x4806cb
call 0x47f9db
call 0x47f9dc
add esp, 8
cmp eax, 0xfff
jmp 0x47f9f5
jmp 0x47f9f9
jmp 0x47f9fc
jbe 0x47fa19
jmp 0x47fa01
jmp 0x47fa05
jmp 0x47fa08
int3
je 0x47fa1f
jne 0x47fa1f
jmp 0x47fa21
jmp 0x47fa22
sub eax, 0xa
call 0x47fa31

Function at 0x47f9b6
Capabilities:
Execute anti-debugging instructions

Disassembly:
jmp 0x47f99f
add esp, 8
je 0x47f9a8
jne 0x47f9a8
jmp 0x47f9aa
jmp 0x47f9ab
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x47f9bf
call fcn.004806a5
call 0x47f9b5
call 0x47f9b6
add esp, 8
sub eax, dword [esp]
je 0x47f9d0
jne 0x47f9d0
jmp 0x47f9d2
jmp 0x47f9d3
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x47f9ea
add esp, 4
call 0x47f9e5
call 0x4806cb
call 0x47f9db
call 0x47f9dc
add esp, 8
cmp eax, 0xfff
jmp 0x47f9f5
jmp 0x47f9f9
jmp 0x47f9fc
jbe 0x47fa19
jmp 0x47fa01
jmp 0x47fa05
jmp 0x47fa08
int3
je 0x47fa1f
jne 0x47fa1f
jmp 0x47fa21
jmp 0x47fa22
sub eax, 0xa
call 0x47fa31
Function at 0x47f9bf
Capabilities:
Execute anti-debugging instructions

Disassembly:
jmp 0x47f99f
add esp, 8
je 0x47f9a8
jne 0x47f9a8
jmp 0x47f9aa
jmp 0x47f9ab
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x47f9bf
call fcn.004806a5
call 0x47f9b5
call 0x47f9b6
add esp, 8
sub eax, dword [esp]
je 0x47f9d0
jne 0x47f9d0
jmp 0x47f9d2
jmp 0x47f9d3
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x47f9ea
add esp, 4
call 0x47f9e5
call 0x4806cb
call 0x47f9db
call 0x47f9dc
add esp, 8
cmp eax, 0xfff
jmp 0x47f9f5
jmp 0x47f9f9
jmp 0x47f9fc
jbe 0x47fa19
jmp 0x47fa01
jmp 0x47fa05
jmp 0x47fa08
int3
je 0x47fa1f
jne 0x47fa1f
jmp 0x47fa21
jmp 0x47fa22
sub eax, 0xa
call 0x47fa31

Function at 0x47f9dc
Capabilities:
Execute anti-debugging instructions

Disassembly:
jmp 0x47f99f
add esp, 8
je 0x47f9a8
jne 0x47f9a8
jmp 0x47f9aa
jmp 0x47f9ab
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x47f9bf
call fcn.004806a5
call 0x47f9b5
call 0x47f9b6
add esp, 8
sub eax, dword [esp]
je 0x47f9d0
jne 0x47f9d0
jmp 0x47f9d2
jmp 0x47f9d3
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x47f9ea
add esp, 4
call 0x47f9e5
call 0x4806cb
call 0x47f9db
call 0x47f9dc
add esp, 8
cmp eax, 0xfff
jmp 0x47f9f5
jmp 0x47f9f9
jmp 0x47f9fc
jbe 0x47fa19
jmp 0x47fa01
jmp 0x47fa05
jmp 0x47fa08
int3
je 0x47fa1f
jne 0x47fa1f
jmp 0x47fa21
jmp 0x47fa22
sub eax, 0xa
call 0x47fa31

Function at 0x47fa15
Capabilities:
Execute anti-debugging instructions

Disassembly:
and dword [esi - 0x19], 0x75047464
add ch, bl
add ch, bl
add dword [ecx + 0xae8], eax
add al, ch
invalid

Function at 0x47fa28
Capabilities:
Execute anti-debugging instructions

Disassembly:
call 0x480717
call fcn.0047fa27
call fcn.0047fa28

Function at 0x47fa3b
Capabilities:
Execute anti-debugging instructions

Disassembly:
jmp 0x47fa36
add esp, 8
je 0x47fa3f
jne 0x47fa3f
jmp 0x47fa41
jmp 0x47fa42
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x47fa56
call fcn.0048073c
call 0x47fa4c
call 0x47fa4d
add esp, 8
sub eax, dword [esp]
je 0x47fa67
jne 0x47fa67
jmp 0x47fa69
jmp 0x47fa6a
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x47fa81
add esp, 4
call 0x47fa7c
call 0x480762
call 0x47fa72
call 0x47fa73
add esp, 8
cmp eax, 0xfff
jmp 0x47fa8c
jmp 0x47fa90
jmp 0x47fa93
jbe 0x47fab0
jmp 0x47fa98
jmp 0x47fa9c
jmp 0x47fa9f
int3
je 0x47fab6
jne 0x47fab6
jmp 0x47fab8
jmp 0x47fab9
sub eax, 0xa
call 0x47fac8

Function at 0x47fac8
Capabilities:
Execute anti-debugging instructions

Disassembly:
call 0x4807ae
call fcn.0047fabe
call fcn.0047fabf

Function at 0x47fad2
Capabilities:
Execute anti-debugging instructions

Disassembly:
jmp 0x47facd
add esp, 8
je 0x47fad6
jne 0x47fad6
jmp 0x47fad8
jmp 0x47fad9
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x47faed
call fcn.004807d3
call 0x47fae3
call 0x47fae4
add esp, 8
sub eax, dword [esp]
je 0x47fafe
jne 0x47fafe
jmp 0x47fb00
jmp 0x47fb01
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x47fb18
add esp, 4
call 0x47fb13
call 0x4807f9
call 0x47fb09
call 0x47fb0a
add esp, 8
cmp eax, 0xfff
jmp 0x47fb23
jmp 0x47fb27
jmp 0x47fb2a
jbe 0x47fb47
jmp 0x47fb2f
jmp 0x47fb33
jmp 0x47fb36
int3
je 0x47fb4d
jne 0x47fb4d
jmp 0x47fb4f
jmp 0x47fb50
sub eax, 0xa
call 0x47fb5f
Function at 0x47fb5f
Capabilities:
Execute anti-debugging instructions

Disassembly:
call 0x480845
call fcn.0047fb55
call fcn.0047fb56

Function at 0x47fb69
Capabilities:
Execute anti-debugging instructions

Disassembly:
jmp 0x47fb64
add esp, 8
je 0x47fb6d
jne 0x47fb6d
jmp 0x47fb6f
jmp 0x47fb70
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x47fb84
call fcn.0048086a
call 0x47fb7a
call 0x47fb7b
add esp, 8
sub eax, dword [esp]
je 0x47fb95
jne 0x47fb95
jmp 0x47fb97
jmp 0x47fb98
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x47fbaf
add esp, 4
call 0x47fbaa
call 0x480890
call 0x47fba0
call 0x47fba1
add esp, 8
cmp eax, 0xfff
jmp 0x47fbba
jmp 0x47fbbe
jmp 0x47fbc1
jbe 0x47fbde
jmp 0x47fbc6
jmp 0x47fbca
jmp 0x47fbcd
int3
je 0x47fbe4
jne 0x47fbe4
jmp 0x47fbe6
jmp 0x47fbe7
sub eax, 0xa
call 0x47fbf6

Function at 0x47fbf6
Capabilities:
Execute anti-debugging instructions

Disassembly:
call 0x4808dc
call fcn.0047fbec
call fcn.0047fbed

Function at 0x47fc00
Capabilities:
Execute anti-debugging instructions

Disassembly:
jmp 0x47fbfb
add esp, 8
je 0x47fc04
jne 0x47fc04
jmp 0x47fc06
jmp 0x47fc07
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x47fc1b
call fcn.00480901
call 0x47fc11
call 0x47fc12
add esp, 8
sub eax, dword [esp]
je 0x47fc2c
jne 0x47fc2c
jmp 0x47fc2e
jmp 0x47fc2f
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x47fc46
add esp, 4
call 0x47fc41
call 0x480927
call 0x47fc37
call 0x47fc38
add esp, 8
cmp eax, 0xfff
jmp 0x47fc51
jmp 0x47fc55
jmp 0x47fc58
jbe 0x47fc75
jmp 0x47fc5d
je 0x47fc7b

Function at 0x47fc8d
Capabilities:
Execute anti-debugging instructions

Disassembly:
call 0x480973
call fcn.0047fc83
call fcn.0047fc84

Function at 0x47fc97
Capabilities:
Execute anti-debugging instructions

Disassembly:
jmp 0x47fc92
add esp, 8
je 0x47fc9b
jne 0x47fc9b
jmp 0x47fc9d
jmp 0x47fc9e
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x47fcb2
call fcn.00480998
call 0x47fca8
call 0x47fca9
add esp, 8
sub eax, dword [esp]
je 0x47fcc3
jne 0x47fcc3
jmp 0x47fcc5
jmp 0x47fcc6
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x47fcdd
add esp, 4
call 0x47fcd8
call 0x4809be
call 0x47fcce
call 0x47fccf
add esp, 8
cmp eax, 0xfff
jmp 0x47fce8
jmp 0x47fcec
jmp 0x47fcef
jbe 0x47fd0c
jmp 0x47fcf4
jmp 0x47fcf8
jmp 0x47fcfb
int3
je 0x47fd12
jne 0x47fd12
jmp 0x47fd14
jmp 0x47fd15
sub eax, 0xa
call 0x47fd24

Function at 0x47fd24
Capabilities:
Execute anti-debugging instructions

Disassembly:
call 0x480a0a
call fcn.0047fd1a
call fcn.0047fd1b

Function at 0x47fd2e
Capabilities:
Execute anti-debugging instructions

Disassembly:
jmp 0x47fd29
add esp, 8
je 0x47fd32
jne 0x47fd32
jmp 0x47fd34
jmp 0x47fd35
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x47fd49
call 0x480a2f
call 0x47fd3f
call 0x47fd40
add esp, 8
sub eax, dword [esp]
je 0x47fd5a
jne 0x47fd5a
jmp 0x47fd5c
jmp 0x47fd5d
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x47fd74
add esp, 4
call 0x47fd6f
call 0x480a55
call 0x47fd65
call 0x47fd66
add esp, 8
cmp eax, 0xfff
jmp 0x47fd7f
jmp 0x47fd83
jmp 0x47fd86
jbe 0x47fda3
jmp 0x47fd8b
jmp 0x47fd8f
jmp 0x47fd92
int3
je 0x47fda9
jne 0x47fda9
jmp 0x47fdab
jmp 0x47fdac
sub eax, 0xa
call 0x47fdbb
Function at 0x47fe11
Capabilities:
Execute anti-debugging instructions

Disassembly:
call fcn.0047fde4
add esp, 8
je 0x47fdfb
jne 0x47fdfb
jmp 0x47fdfd
jmp 0x47fdfe
sub ebx, 0x2eb6801
int 0x20
jmp 0x47fe01
jmp 0x47fe05
jmp 0x47fe08
je 0x47fe0e
jne 0x47fe0e
jmp 0x47fe10
jmp 0x47fe11
sub eax, 0
call 0x47fe16
add esp, 4
je 0x47fe1f
jne 0x47fe1f
jmp 0x47fe21
jmp 0x47fe22
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call fcn.0047fe36
call fcn.00480b1c
jmp 0x47fe3b
add byte [eax], al
call 0x47fe2c

Function at 0x47fe96
Capabilities:
Execute anti-debugging instructions

Disassembly:
call fcn.0047fe2d
add esp, 8
sub eax, dword [esp]
je 0x47fe47
jne 0x47fe47
jmp 0x47fe49
jmp 0x47fe4a
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x47fe61
add esp, 4
call 0x47fe5c
call 0x480b42
call 0x47fe52
call 0x47fe53
add esp, 8
cmp eax, 0xfff
jmp 0x47fe6c
jmp 0x47fe70
jmp 0x47fe73
jbe 0x47fe90
jmp 0x47fe78
jmp 0x47fe7c
jmp 0x47fe7f
int3
call 0x47fe9f
call fcn.00480b85
call 0x47fe95
call 0x47fe96
add esp, 8
je 0x47fead
jne 0x47fead
jmp 0x47feaf
jmp 0x47feb0
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x47fec4
call fcn.00480baa
call 0x47feba
call 0x47febb
add esp, 8
sub eax, dword [esp]
add al, 0x24
je 0x47fed5
jne 0x47fed5
jmp 0x47fed7
jmp 0x47fed8
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x47feef
add esp, 4
call 0x47feea
call 0x480bd0
call 0x47fee0
call 0x47fee1
add esp, 8
cmp eax, 0xfff
jmp 0x47fefa
jmp 0x47fefe
jmp 0x47ff01
jbe 0x47ff1e
jmp 0x47ff06
jmp 0x47ff0a
jmp 0x47ff0d
int3
je 0x47ff24
jne 0x47ff24
jmp 0x47ff26
jmp 0x47ff27
xor dword [esp + eax + 0x75], 0xeb02eb02
add dword [ecx + 0x2750474], eax
je 0x47ff2d
jne 0x47ff2d
jmp 0x47ff2f
jmp 0x47ff30
xor dword [esp + eax + 0x75], 0xeb02eb02
add dword [ecx + 0xf50310f], eax
xor eax, ebp
or al, byte [eax]
add byte [eax], al
je 0x47ff36
jne 0x47ff36
jmp 0x47ff38
jmp 0x47ff39
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x47ff4d
call 0x480c33
call 0x47ff43
call 0x47ff44
add esp, 8
sub eax, dword [esp]
je 0x47ff5e
jne 0x47ff5e
jmp 0x47ff60
jmp 0x47ff61
add dword [ebx + 0xae804c4], 0xe8000000
add esp, 4
Function at 0x47ffce
Capabilities:
Execute anti-debugging instructions

Disassembly:
jmp 0x47ff78
add esp, 8
cmp eax, 0xfff
jmp 0x47ff83
jmp 0x47ff87
jmp 0x47ff8a
jbe 0x47ffa7
jmp 0x47ff8f
jmp 0x47ff93
jmp 0x47ff96
int3
je 0x47ffad
jne 0x47ffad
jmp 0x47ffaf
jmp 0x47ffb0
sub ebx, 0x2eb6801
int 0x20
jmp 0x47ffb3
jmp 0x47ffb7
jmp 0x47ffba
je 0x47ffc0
jne 0x47ffc0
jmp 0x47ffc2
jmp 0x47ffc3
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x47ffd7
call 0x480cbd
call 0x47ffcd
call 0x47ffce
add esp, 8
sub eax, dword [esp]
je 0x47ffe8
jne 0x47ffe8
jmp 0x47ffea
jmp 0x47ffeb
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x480002
add esp, 4
call fcn.0047fffd
call 0x480ce3
call 0x47fff3
call 0x47fff4
add esp, 8
cmp eax, 0xfff
jmp 0x48000d
jmp 0x480011
jmp 0x480014
jbe 0x480031
jmp 0x480019
jmp 0x48001d
jmp 0x480020
int3
je 0x480037
jne 0x480037
jmp 0x480039
jmp 0x48003a
sub eax, 0
call 0x48003f
add esp, 4
je 0x480048
jne 0x480048
jmp 0x48004a
jmp 0x48004b
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x48005f
call 0x480d45
call 0x480055
call 0x480056
add esp, 8
sub eax, dword [esp]
je 0x480070
jne 0x480070
jmp 0x480072
jmp 0x480073
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x48008a
add esp, 4
call 0x480085
call 0x480d6b
call 0x48007b
call 0x48007c
add esp, 8
cmp eax, 0xfff

Function at 0x47ffd7
Capabilities:
Execute anti-debugging instructions

Disassembly:
jmp 0x47ff78
add esp, 8
cmp eax, 0xfff
jmp 0x47ff83
jmp 0x47ff87
jmp 0x47ff8a
jbe 0x47ffa7
jmp 0x47ff8f
jmp 0x47ff93
jmp 0x47ff96
int3
je 0x47ffad
jne 0x47ffad
jmp 0x47ffaf
jmp 0x47ffb0
sub ebx, 0x2eb6801
int 0x20
jmp 0x47ffb3
jmp 0x47ffb7
jmp 0x47ffba
je 0x47ffc0
jne 0x47ffc0
jmp 0x47ffc2
jmp 0x47ffc3
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x47ffd7
call 0x480cbd
call 0x47ffcd
call 0x47ffce
add esp, 8
sub eax, dword [esp]
je 0x47ffe8
jne 0x47ffe8
jmp 0x47ffea
jmp 0x47ffeb
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x480002
add esp, 4
call fcn.0047fffd
call 0x480ce3
call 0x47fff3
call 0x47fff4
add esp, 8
cmp eax, 0xfff
jmp 0x48000d
jmp 0x480011
jmp 0x480014
jbe 0x480031
jmp 0x480019
jmp 0x48001d
jmp 0x480020
int3
je 0x480037
jne 0x480037
jmp 0x480039
jmp 0x48003a
sub eax, 0
call 0x48003f
add esp, 4
je 0x480048
jne 0x480048
jmp 0x48004a
jmp 0x48004b
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x48005f
call 0x480d45
call 0x480055
call 0x480056
add esp, 8
sub eax, dword [esp]
je 0x480070
jne 0x480070
jmp 0x480072
jmp 0x480073
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x48008a
add esp, 4
call 0x480085
call 0x480d6b
call 0x48007b
call 0x48007c
add esp, 8
cmp eax, 0xfff