joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1e038739
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add edi, 0x3f11
pop edi
push edi
push esi
add esp, 4
jmp 0x1e0386cc
sub edi, 0x17cf5
pop edi
mov byte [ebp - 0x83c], 0x45
mov byte [ebp - 0x83b], 0x78
mov byte [ebp - 0x83a], 0x69
mov byte [ebp - 0x839], 0x74
mov byte [ebp - 0x838], 0x50
mov byte [ebp - 0x837], 0x72
mov byte [ebp - 0x836], 0x6f
mov byte [ebp - 0x835], 0x63
mov byte [ebp - 0x834], 0x65
mov byte [ebp - 0x833], 0x73
mov byte [ebp - 0x832], 0x73
mov byte [ebp - 0x831], 0
push esi
push edx
add esp, 4
call 0x1e038739
add byte [ebx + eax*2 + 0x39], cl
inc edx
dec ebx
aas
dec esp
add esp, 4
and esi, 0xe3f0
call 0x1e03874f
add byte [esi + 0x39433c47], dh
xor al, byte [ebx - 0x317efb3c]
sbb eax, 0x5e0000e6
mov eax, 0x6b
mov word [ebp - 0x15cc], ax
mov ecx, 0x65
mov word [ebp - 0x15ca], cx
mov edx, 0x72
mov word [ebp - 0x15c8], dx
mov eax, 0x6e
mov word [ebp - 0x15c6], ax
mov ecx, 0x65
mov word [ebp - 0x15c4], cx
mov edx, 0x6c
mov word [ebp - 0x15c2], dx
mov eax, 0x33
mov word [ebp - 0x15c0], ax
mov ecx, 0x32
mov word [ebp - 0x15be], cx
mov edx, 0x2e
mov word [ebp - 0x15bc], dx
mov eax, 0x64
mov word [ebp - 0x15ba], ax
mov ecx, 0x6c
mov word [ebp - 0x15b8], cx
mov edx, 0x6c
mov word [ebp - 0x15b6], dx
xor eax, eax
mov word [ebp - 0x15b4], ax
push edx
and edx, 0xcb40
jmp 0x1e038801
jmp 0x1e038806
pop edx
push esi
sub esi, 0x16cfd
jmp 0x1e038814
and esi, 0xf9d5
jmp 0x1e038823
pop esi
push edi
push edx
add esp, 4
sub edi, 0x8d5b
pop edi
push edx
add edx, 0x18447
call 0x1e038846
add byte [edx], dh
inc edi
inc ecx
dec edx
dec ebp
dec ecx
dec edi
xor eax, 0x4c48342
xor edx, 0x136f9
xor edx, 0x178ef
pop edx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1a18], ecx
mov edx, dword [ebp - 0x1a18]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1bcc], eax
mov ecx, dword [ebp - 0x1bcc]
mov dword [ebp - 0x1500], ecx
push edi
add edi, 0x9508
or edi, 0x1472a
pop edi
push eax
push edx
add esp, 4
xor eax, 0x3996
and eax, 0x17ec4
pop eax
push edi
call 0x1e0388ac
add byte [edx + esi + 0x4e], cl
dec edi
dec esp
add esp, 4
pop edi
cmp dword [ebp - 0x1500], 0
jne 0x1e0388c8
mov dword [ebp - 0x2a0], 0
jmp 0x1e038b84
mov edx, dword [ebp - 0x1500]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc1c], ecx
push ebx
push ecx
add esp, 4
xor ebx, 0x12ca6
add byte [ebx + 0x52], bl
Function at 0x1e03874f
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add edi, 0x3f11
pop edi
push edi
push esi
add esp, 4
jmp 0x1e0386cc
sub edi, 0x17cf5
pop edi
mov byte [ebp - 0x83c], 0x45
mov byte [ebp - 0x83b], 0x78
mov byte [ebp - 0x83a], 0x69
mov byte [ebp - 0x839], 0x74
mov byte [ebp - 0x838], 0x50
mov byte [ebp - 0x837], 0x72
mov byte [ebp - 0x836], 0x6f
mov byte [ebp - 0x835], 0x63
mov byte [ebp - 0x834], 0x65
mov byte [ebp - 0x833], 0x73
mov byte [ebp - 0x832], 0x73
mov byte [ebp - 0x831], 0
push esi
push edx
add esp, 4
call 0x1e038739
add byte [ebx + eax*2 + 0x39], cl
inc edx
dec ebx
aas
dec esp
add esp, 4
and esi, 0xe3f0
call 0x1e03874f
add byte [esi + 0x39433c47], dh
xor al, byte [ebx - 0x317efb3c]
sbb eax, 0x5e0000e6
mov eax, 0x6b
mov word [ebp - 0x15cc], ax
mov ecx, 0x65
mov word [ebp - 0x15ca], cx
mov edx, 0x72
mov word [ebp - 0x15c8], dx
mov eax, 0x6e
mov word [ebp - 0x15c6], ax
mov ecx, 0x65
mov word [ebp - 0x15c4], cx
mov edx, 0x6c
mov word [ebp - 0x15c2], dx
mov eax, 0x33
mov word [ebp - 0x15c0], ax
mov ecx, 0x32
mov word [ebp - 0x15be], cx
mov edx, 0x2e
mov word [ebp - 0x15bc], dx
mov eax, 0x64
mov word [ebp - 0x15ba], ax
mov ecx, 0x6c
mov word [ebp - 0x15b8], cx
mov edx, 0x6c
mov word [ebp - 0x15b6], dx
xor eax, eax
mov word [ebp - 0x15b4], ax
push edx
and edx, 0xcb40
jmp 0x1e038801
jmp 0x1e038806
pop edx
push esi
sub esi, 0x16cfd
jmp 0x1e038814
and esi, 0xf9d5
jmp 0x1e038823
pop esi
push edi
push edx
add esp, 4
sub edi, 0x8d5b
pop edi
push edx
add edx, 0x18447
call 0x1e038846
add byte [edx], dh
inc edi
inc ecx
dec edx
dec ebp
dec ecx
dec edi
xor eax, 0x4c48342
xor edx, 0x136f9
xor edx, 0x178ef
pop edx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1a18], ecx
mov edx, dword [ebp - 0x1a18]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1bcc], eax
mov ecx, dword [ebp - 0x1bcc]
mov dword [ebp - 0x1500], ecx
push edi
add edi, 0x9508
or edi, 0x1472a
pop edi
push eax
push edx
add esp, 4
xor eax, 0x3996
and eax, 0x17ec4
pop eax
push edi
call 0x1e0388ac
add byte [edx + esi + 0x4e], cl
dec edi
dec esp
add esp, 4
pop edi
cmp dword [ebp - 0x1500], 0
jne 0x1e0388c8
mov dword [ebp - 0x2a0], 0
jmp 0x1e038b84
mov edx, dword [ebp - 0x1500]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc1c], ecx
push ebx
push ecx
add esp, 4
xor ebx, 0x12ca6
add byte [ebx + 0x52], bl
Function at 0x1e038846
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add edi, 0x3f11
pop edi
push edi
push esi
add esp, 4
jmp 0x1e0386cc
sub edi, 0x17cf5
pop edi
mov byte [ebp - 0x83c], 0x45
mov byte [ebp - 0x83b], 0x78
mov byte [ebp - 0x83a], 0x69
mov byte [ebp - 0x839], 0x74
mov byte [ebp - 0x838], 0x50
mov byte [ebp - 0x837], 0x72
mov byte [ebp - 0x836], 0x6f
mov byte [ebp - 0x835], 0x63
mov byte [ebp - 0x834], 0x65
mov byte [ebp - 0x833], 0x73
mov byte [ebp - 0x832], 0x73
mov byte [ebp - 0x831], 0
push esi
push edx
add esp, 4
call 0x1e038739
add byte [ebx + eax*2 + 0x39], cl
inc edx
dec ebx
aas
dec esp
add esp, 4
and esi, 0xe3f0
call 0x1e03874f
add byte [esi + 0x39433c47], dh
xor al, byte [ebx - 0x317efb3c]
sbb eax, 0x5e0000e6
mov eax, 0x6b
mov word [ebp - 0x15cc], ax
mov ecx, 0x65
mov word [ebp - 0x15ca], cx
mov edx, 0x72
mov word [ebp - 0x15c8], dx
mov eax, 0x6e
mov word [ebp - 0x15c6], ax
mov ecx, 0x65
mov word [ebp - 0x15c4], cx
mov edx, 0x6c
mov word [ebp - 0x15c2], dx
mov eax, 0x33
mov word [ebp - 0x15c0], ax
mov ecx, 0x32
mov word [ebp - 0x15be], cx
mov edx, 0x2e
mov word [ebp - 0x15bc], dx
mov eax, 0x64
mov word [ebp - 0x15ba], ax
mov ecx, 0x6c
mov word [ebp - 0x15b8], cx
mov edx, 0x6c
mov word [ebp - 0x15b6], dx
xor eax, eax
mov word [ebp - 0x15b4], ax
push edx
and edx, 0xcb40
jmp 0x1e038801
jmp 0x1e038806
pop edx
push esi
sub esi, 0x16cfd
jmp 0x1e038814
and esi, 0xf9d5
jmp 0x1e038823
pop esi
push edi
push edx
add esp, 4
sub edi, 0x8d5b
pop edi
push edx
add edx, 0x18447
call 0x1e038846
add byte [edx], dh
inc edi
inc ecx
dec edx
dec ebp
dec ecx
dec edi
xor eax, 0x4c48342
xor edx, 0x136f9
xor edx, 0x178ef
pop edx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1a18], ecx
mov edx, dword [ebp - 0x1a18]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1bcc], eax
mov ecx, dword [ebp - 0x1bcc]
mov dword [ebp - 0x1500], ecx
push edi
add edi, 0x9508
or edi, 0x1472a
pop edi
push eax
push edx
add esp, 4
xor eax, 0x3996
and eax, 0x17ec4
pop eax
push edi
call 0x1e0388ac
add byte [edx + esi + 0x4e], cl
dec edi
dec esp
add esp, 4
pop edi
cmp dword [ebp - 0x1500], 0
jne 0x1e0388c8
mov dword [ebp - 0x2a0], 0
jmp 0x1e038b84
mov edx, dword [ebp - 0x1500]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc1c], ecx
push ebx
push ecx
add esp, 4
xor ebx, 0x12ca6
add byte [ebx + 0x52], bl
Function at 0x1e0388ac
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add edi, 0x3f11
pop edi
push edi
push esi
add esp, 4
jmp 0x1e0386cc
sub edi, 0x17cf5
pop edi
mov byte [ebp - 0x83c], 0x45
mov byte [ebp - 0x83b], 0x78
mov byte [ebp - 0x83a], 0x69
mov byte [ebp - 0x839], 0x74
mov byte [ebp - 0x838], 0x50
mov byte [ebp - 0x837], 0x72
mov byte [ebp - 0x836], 0x6f
mov byte [ebp - 0x835], 0x63
mov byte [ebp - 0x834], 0x65
mov byte [ebp - 0x833], 0x73
mov byte [ebp - 0x832], 0x73
mov byte [ebp - 0x831], 0
push esi
push edx
add esp, 4
call 0x1e038739
add byte [ebx + eax*2 + 0x39], cl
inc edx
dec ebx
aas
dec esp
add esp, 4
and esi, 0xe3f0
call 0x1e03874f
add byte [esi + 0x39433c47], dh
xor al, byte [ebx - 0x317efb3c]
sbb eax, 0x5e0000e6
mov eax, 0x6b
mov word [ebp - 0x15cc], ax
mov ecx, 0x65
mov word [ebp - 0x15ca], cx
mov edx, 0x72
mov word [ebp - 0x15c8], dx
mov eax, 0x6e
mov word [ebp - 0x15c6], ax
mov ecx, 0x65
mov word [ebp - 0x15c4], cx
mov edx, 0x6c
mov word [ebp - 0x15c2], dx
mov eax, 0x33
mov word [ebp - 0x15c0], ax
mov ecx, 0x32
mov word [ebp - 0x15be], cx
mov edx, 0x2e
mov word [ebp - 0x15bc], dx
mov eax, 0x64
mov word [ebp - 0x15ba], ax
mov ecx, 0x6c
mov word [ebp - 0x15b8], cx
mov edx, 0x6c
mov word [ebp - 0x15b6], dx
xor eax, eax
mov word [ebp - 0x15b4], ax
push edx
and edx, 0xcb40
jmp 0x1e038801
jmp 0x1e038806
pop edx
push esi
sub esi, 0x16cfd
jmp 0x1e038814
and esi, 0xf9d5
jmp 0x1e038823
pop esi
push edi
push edx
add esp, 4
sub edi, 0x8d5b
pop edi
push edx
add edx, 0x18447
call 0x1e038846
add byte [edx], dh
inc edi
inc ecx
dec edx
dec ebp
dec ecx
dec edi
xor eax, 0x4c48342
xor edx, 0x136f9
xor edx, 0x178ef
pop edx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1a18], ecx
mov edx, dword [ebp - 0x1a18]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1bcc], eax
mov ecx, dword [ebp - 0x1bcc]
mov dword [ebp - 0x1500], ecx
push edi
add edi, 0x9508
or edi, 0x1472a
pop edi
push eax
push edx
add esp, 4
xor eax, 0x3996
and eax, 0x17ec4
pop eax
push edi
call 0x1e0388ac
add byte [edx + esi + 0x4e], cl
dec edi
dec esp
add esp, 4
pop edi
cmp dword [ebp - 0x1500], 0
jne 0x1e0388c8
mov dword [ebp - 0x2a0], 0
jmp 0x1e038b84
mov edx, dword [ebp - 0x1500]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc1c], ecx
push ebx
push ecx
add esp, 4
xor ebx, 0x12ca6
add byte [ebx + 0x52], bl
Function at 0x1e038a28
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov word [ebp - 0xfb8], cx
mov edx, dword [ebp - 0xc18]
add edx, 2
mov dword [ebp - 0xc18], edx
mov ax, word [ebp - 0xfb8]
mov word [ebp - 0x100], ax
push edi
call 0x1e038a28
add byte [edx + 0x48], cl
xor eax, 0x833e3e32
les eax, [eax + ebp*8]
or dword [eax], eax
add byte [eax], al
add byte [ebx], bh
cmp byte [ebp + edi + 0x33], cl

Function at 0x1e038a39
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edi
push ebx
add esp, 4
xor edi, 0xb7b9
or edi, 0xb1
pop edi
push ebx
push ecx
add esp, 4
add ebx, 0x16a7a
pop ebx
push edi
add edi, 0x1340d
xor edi, 0x178ed
and edi, 0xd059
pop edi
mov edx, dword [ebp - 0xc14]
mov ax, word [edx]
mov word [ebp - 0xfb6], ax
mov dword [ebp - 0xfb6], eax
mov ecx, dword [ebp - 0xc14]
xor dh, byte [edi]
inc ebx
add esp, 4
pop edi
push edx
and edx, 0xe540
jmp 0x1e038a4c
pop edx
movzx ecx, word [ebp - 0x100]
mov bh, 0x8d
add bh, bh
invalid
invalid
test ecx, ecx
jne 0x1e038a70
movzx edx, word [ebp - 0x1ac]
movzx eax, word [ebp - 0x100]
sub edx, eax
mov dword [ebp - 0x150c], edx
xchg ebp, eax
hlt
invalid
invalid
invalid
jmp 0x1e038ad3
movzx ecx, word [ebp - 0x1ac]
movzx edx, word [ebp - 0x100]
cmp ecx, edx
je 0x1e03898f
movzx eax, word [ebp - 0x1ac]
xor eax, 0x20
movzx ecx, word [ebp - 0x100]
cmp eax, ecx
je 0x1e03898f
movzx edx, word [ebp - 0x1ac]
movzx eax, word [ebp - 0x100]
cmp edx, eax
Function at 0x1e039098
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
add ebx, 0x17d8c
or ebx, 0xd84f
pop ebx
push ecx
add ecx, 0x59c6
pop ecx
mov edx, dword [ebp - 0x728]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0x354], eax
mov dword [ebp - 0x738], 0
mov ecx, dword [ebp - 0x354]
mov dword [ebp - 0x151c], ecx
cmp dword [ebp - 0x151c], 0
jne 0x1e0390ef
mov edx, dword [ebp - 0x738]
mov dword [ebp - 0x398], edx
jmp fcn.1e0393e0
mov eax, dword [ebp - 0x151c]
mov ecx, dword [ebp - 0x354]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x1520], ecx
jne 0x1e039117
mov edx, dword [ebp - 0x738]
mov dword [ebp - 0x398], edx
jmp fcn.1e0393e0
mov eax, 8
imul ecx, eax, 0
mov edx, dword [ebp - 0x1520]
mov eax, dword [edx + ecx + 0x78]
mov dword [ebp - 0x1524], eax
cmp dword [ebp - 0x1524], 0
jne 0x1e039149
mov ecx, dword [ebp - 0x738]
mov dword [ebp - 0x398], ecx
jmp fcn.1e0393e0
mov edx, dword [ebp - 0x354]
add edx, dword [ebp - 0x1524]
mov dword [ebp - 0x72c], edx
jne 0x1e03916e
mov eax, dword [ebp - 0x738]
mov dword [ebp - 0x398], eax
jmp fcn.1e0393e0
mov ecx, dword [ebp - 0x72c]
mov edx, dword [ebp - 0x354]
add edx, dword [ecx + 0x20]
mov dword [ebp - 0x1bd8], edx
mov eax, dword [ebp - 0x72c]
mov ecx, dword [ebp - 0x354]
add ecx, dword [eax + 0x24]
mov dword [ebp - 0x1bdc], ecx
mov edx, dword [ebp - 0x72c]
mov eax, dword [ebp - 0x354]
add eax, dword [edx + 0x1c]
mov dword [ebp - 0x1be0], eax
mov dword [ebp - 0x730], 0
jmp fcn.1e0391c8
Function at 0x1e039280
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [ebp - 0x730]
add ecx, 1
mov dword [ebp - 0x730], ecx
mov edx, dword [ebp - 0x72c]
mov eax, dword [ebp - 0x730]
cmp eax, dword [edx + 0x18]
jae 0x1e0393d4
mov ecx, dword [ebp - 0x730]
mov edx, dword [ebp - 0x1bd8]
mov eax, dword [ebp - 0x354]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x734], eax
mov ecx, dword [ebp - 0x730]
mov edx, dword [ebp - 0x1bdc]
movzx eax, word [edx + ecx*2]
mov ecx, dword [ebp - 0x1be0]
mov edx, dword [ebp - 0x354]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x1be4], edx
mov dword [ebp - 0x150], 0
jmp 0x1e039238
mov eax, dword [ebp - 0x150]
add eax, 1
mov dword [ebp - 0x150], eax
mov ecx, dword [ebp - 0x734]
add ecx, dword [ebp - 0x150]
movsx edx, byte [ecx]
test edx, edx
je 0x1e0392ea
mov eax, dword [ebp - 0x150]
movsx ecx, byte [ebp + eax - 0x84c]
test ecx, ecx
je 0x1e0392ea
push esi
xor esi, 0x20d1
pop esi
push edi
push esi
add esp, 4
call 0x1e039280
add byte [ebx], dh
dec esi
dec ecx
inc ecx
inc edi
cmp dword [esi + ecx*2], edi
add esp, 4
jmp 0x1e03928a
add edi, 0x14e62
and edi, 0x11b75
pop edi
mov edx, dword [ebp - 0x734]
add edx, dword [ebp - 0x150]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x150]
movsx edx, byte [ebp + ecx - 0x84c]
cmp eax, edx
je 0x1e0392dc
mov eax, dword [ebp - 0x734]
add eax, dword [ebp - 0x150]
movsx ecx, byte [eax]
xor ecx, 0x20
mov edx, dword [ebp - 0x150]
movsx eax, byte [ebp + edx - 0x84c]
cmp ecx, eax
jne 0x1e0392e3
jmp 0x1e039229
jmp 0x1e0392ea
push esi
add esi, 0x3db2
call 0x1e0392fd
add byte [esi + 0x4f], al
inc ebp
dec ebp
cmp edi, dword [eax]
add esp, 4
call 0x1e039310
add byte [esi], bh
inc esi
xor edi, dword [edi]
dec edi
cmp esi, dword [esi]
xor eax, 0xc4833c4d
add al, 0x5e
push edx
and edx, 0x13a62
pop edx
mov ecx, dword [ebp - 0x734]
add ecx, dword [ebp - 0x150]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x150]
movsx ecx, byte [ebp + eax - 0x84c]
cmp edx, ecx
jne 0x1e039349
mov dword [ebp - 0xc2c], 0
jmp 0x1e0393b8
push eax
or eax, 0x993b
pop eax
push edi
push esi
add esp, 4
sub edi, 0x16e85
xor edi, 0xee00
call 0x1e03936f
add byte [eax], bh
inc edx
push eax
inc edi
inc esp
inc ecx
add esp, 4
pop edi
push eax
xor eax, 0x9542
pop eax
mov edx, dword [ebp - 0x734]
add edx, dword [ebp - 0x150]
movsx eax, byte [edx]
or eax, 0x20
mov ecx, dword [ebp - 0x150]
movsx edx, byte [ebp + ecx - 0x84c]
or edx, 0x20
cmp eax, edx
jge 0x1e0393ae
mov dword [ebp - 0xc2c], 0xffffffff
jmp 0x1e0393b8
mov dword [ebp - 0xc2c], 1
cmp dword [ebp - 0xc2c], 0
jne 0x1e0393cf
mov eax, dword [ebp - 0x1be4]
mov dword [ebp - 0x398], eax
jmp fcn.1e0393e0
jmp 0x1e0391b9
mov ecx, dword [ebp - 0x738]
mov dword [ebp - 0x398], ecx
Function at 0x1e0392fd
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [ebp - 0x730]
add ecx, 1
mov dword [ebp - 0x730], ecx
mov edx, dword [ebp - 0x72c]
mov eax, dword [ebp - 0x730]
cmp eax, dword [edx + 0x18]
jae 0x1e0393d4
mov ecx, dword [ebp - 0x730]
mov edx, dword [ebp - 0x1bd8]
mov eax, dword [ebp - 0x354]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x734], eax
mov ecx, dword [ebp - 0x730]
mov edx, dword [ebp - 0x1bdc]
movzx eax, word [edx + ecx*2]
mov ecx, dword [ebp - 0x1be0]
mov edx, dword [ebp - 0x354]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x1be4], edx
mov dword [ebp - 0x150], 0
jmp 0x1e039238
mov eax, dword [ebp - 0x150]
add eax, 1
mov dword [ebp - 0x150], eax
mov ecx, dword [ebp - 0x734]
add ecx, dword [ebp - 0x150]
movsx edx, byte [ecx]
test edx, edx
je 0x1e0392ea
mov eax, dword [ebp - 0x150]
movsx ecx, byte [ebp + eax - 0x84c]
test ecx, ecx
je 0x1e0392ea
push esi
xor esi, 0x20d1
pop esi
push edi
push esi
add esp, 4
call 0x1e039280
add byte [ebx], dh
dec esi
dec ecx
inc ecx
inc edi
cmp dword [esi + ecx*2], edi
add esp, 4
jmp 0x1e03928a
add edi, 0x14e62
and edi, 0x11b75
pop edi
mov edx, dword [ebp - 0x734]
add edx, dword [ebp - 0x150]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x150]
movsx edx, byte [ebp + ecx - 0x84c]
cmp eax, edx
je 0x1e0392dc
mov eax, dword [ebp - 0x734]
add eax, dword [ebp - 0x150]
movsx ecx, byte [eax]
xor ecx, 0x20
mov edx, dword [ebp - 0x150]
movsx eax, byte [ebp + edx - 0x84c]
cmp ecx, eax
jne 0x1e0392e3
jmp 0x1e039229
jmp 0x1e0392ea
push esi
add esi, 0x3db2
call 0x1e0392fd
add byte [esi + 0x4f], al
inc ebp
dec ebp
cmp edi, dword [eax]
add esp, 4
call 0x1e039310
add byte [esi], bh
inc esi
xor edi, dword [edi]
dec edi
cmp esi, dword [esi]
xor eax, 0xc4833c4d
add al, 0x5e
push edx
and edx, 0x13a62
pop edx
mov ecx, dword [ebp - 0x734]
add ecx, dword [ebp - 0x150]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x150]
movsx ecx, byte [ebp + eax - 0x84c]
cmp edx, ecx
jne 0x1e039349
mov dword [ebp - 0xc2c], 0
jmp 0x1e0393b8
push eax
or eax, 0x993b
pop eax
push edi
push esi
add esp, 4
sub edi, 0x16e85
xor edi, 0xee00
call 0x1e03936f
add byte [eax], bh
inc edx
push eax
inc edi
inc esp
inc ecx
add esp, 4
pop edi
push eax
xor eax, 0x9542
pop eax
mov edx, dword [ebp - 0x734]
add edx, dword [ebp - 0x150]
movsx eax, byte [edx]
or eax, 0x20
mov ecx, dword [ebp - 0x150]
movsx edx, byte [ebp + ecx - 0x84c]
or edx, 0x20
cmp eax, edx
jge 0x1e0393ae
mov dword [ebp - 0xc2c], 0xffffffff
jmp 0x1e0393b8
mov dword [ebp - 0xc2c], 1
cmp dword [ebp - 0xc2c], 0
jne 0x1e0393cf
mov eax, dword [ebp - 0x1be4]
mov dword [ebp - 0x398], eax
jmp fcn.1e0393e0
jmp 0x1e0391b9
mov ecx, dword [ebp - 0x738]
mov dword [ebp - 0x398], ecx
Function at 0x1e039310
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [ebp - 0x730]
add ecx, 1
mov dword [ebp - 0x730], ecx
mov edx, dword [ebp - 0x72c]
mov eax, dword [ebp - 0x730]
cmp eax, dword [edx + 0x18]
jae 0x1e0393d4
mov ecx, dword [ebp - 0x730]
mov edx, dword [ebp - 0x1bd8]
mov eax, dword [ebp - 0x354]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x734], eax
mov ecx, dword [ebp - 0x730]
mov edx, dword [ebp - 0x1bdc]
movzx eax, word [edx + ecx*2]
mov ecx, dword [ebp - 0x1be0]
mov edx, dword [ebp - 0x354]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x1be4], edx
mov dword [ebp - 0x150], 0
jmp 0x1e039238
mov eax, dword [ebp - 0x150]
add eax, 1
mov dword [ebp - 0x150], eax
mov ecx, dword [ebp - 0x734]
add ecx, dword [ebp - 0x150]
movsx edx, byte [ecx]
test edx, edx
je 0x1e0392ea
mov eax, dword [ebp - 0x150]
movsx ecx, byte [ebp + eax - 0x84c]
test ecx, ecx
je 0x1e0392ea
push esi
xor esi, 0x20d1
pop esi
push edi
push esi
add esp, 4
call 0x1e039280
add byte [ebx], dh
dec esi
dec ecx
inc ecx
inc edi
cmp dword [esi + ecx*2], edi
add esp, 4
jmp 0x1e03928a
add edi, 0x14e62
and edi, 0x11b75
pop edi
mov edx, dword [ebp - 0x734]
add edx, dword [ebp - 0x150]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x150]
movsx edx, byte [ebp + ecx - 0x84c]
cmp eax, edx
je 0x1e0392dc
mov eax, dword [ebp - 0x734]
add eax, dword [ebp - 0x150]
movsx ecx, byte [eax]
xor ecx, 0x20
mov edx, dword [ebp - 0x150]
movsx eax, byte [ebp + edx - 0x84c]
cmp ecx, eax
jne 0x1e0392e3
jmp 0x1e039229
jmp 0x1e0392ea
push esi
add esi, 0x3db2
call 0x1e0392fd
add byte [esi + 0x4f], al
inc ebp
dec ebp
cmp edi, dword [eax]
add esp, 4
call 0x1e039310
add byte [esi], bh
inc esi
xor edi, dword [edi]
dec edi
cmp esi, dword [esi]
xor eax, 0xc4833c4d
add al, 0x5e
push edx
and edx, 0x13a62
pop edx
mov ecx, dword [ebp - 0x734]
add ecx, dword [ebp - 0x150]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x150]
movsx ecx, byte [ebp + eax - 0x84c]
cmp edx, ecx
jne 0x1e039349
mov dword [ebp - 0xc2c], 0
jmp 0x1e0393b8
push eax
or eax, 0x993b
pop eax
push edi
push esi
add esp, 4
sub edi, 0x16e85
xor edi, 0xee00
call 0x1e03936f
add byte [eax], bh
inc edx
push eax
inc edi
inc esp
inc ecx
add esp, 4
pop edi
push eax
xor eax, 0x9542
pop eax
mov edx, dword [ebp - 0x734]
add edx, dword [ebp - 0x150]
movsx eax, byte [edx]
or eax, 0x20
mov ecx, dword [ebp - 0x150]
movsx edx, byte [ebp + ecx - 0x84c]
or edx, 0x20
cmp eax, edx
jge 0x1e0393ae
mov dword [ebp - 0xc2c], 0xffffffff
jmp 0x1e0393b8
mov dword [ebp - 0xc2c], 1
cmp dword [ebp - 0xc2c], 0
jne 0x1e0393cf
mov eax, dword [ebp - 0x1be4]
mov dword [ebp - 0x398], eax
jmp fcn.1e0393e0
jmp 0x1e0391b9
mov ecx, dword [ebp - 0x738]
mov dword [ebp - 0x398], ecx
Function at 0x1e03936f
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [ebp - 0x730]
add ecx, 1
mov dword [ebp - 0x730], ecx
mov edx, dword [ebp - 0x72c]
mov eax, dword [ebp - 0x730]
cmp eax, dword [edx + 0x18]
jae 0x1e0393d4
mov ecx, dword [ebp - 0x730]
mov edx, dword [ebp - 0x1bd8]
mov eax, dword [ebp - 0x354]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x734], eax
mov ecx, dword [ebp - 0x730]
mov edx, dword [ebp - 0x1bdc]
movzx eax, word [edx + ecx*2]
mov ecx, dword [ebp - 0x1be0]
mov edx, dword [ebp - 0x354]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x1be4], edx
mov dword [ebp - 0x150], 0
jmp 0x1e039238
mov eax, dword [ebp - 0x150]
add eax, 1
mov dword [ebp - 0x150], eax
mov ecx, dword [ebp - 0x734]
add ecx, dword [ebp - 0x150]
movsx edx, byte [ecx]
test edx, edx
je 0x1e0392ea
mov eax, dword [ebp - 0x150]
movsx ecx, byte [ebp + eax - 0x84c]
test ecx, ecx
je 0x1e0392ea
push esi
xor esi, 0x20d1
pop esi
push edi
push esi
add esp, 4
call 0x1e039280
add byte [ebx], dh
dec esi
dec ecx
inc ecx
inc edi
cmp dword [esi + ecx*2], edi
add esp, 4
jmp 0x1e03928a
add edi, 0x14e62
and edi, 0x11b75
pop edi
mov edx, dword [ebp - 0x734]
add edx, dword [ebp - 0x150]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x150]
movsx edx, byte [ebp + ecx - 0x84c]
cmp eax, edx
je 0x1e0392dc
mov eax, dword [ebp - 0x734]
add eax, dword [ebp - 0x150]
movsx ecx, byte [eax]
xor ecx, 0x20
mov edx, dword [ebp - 0x150]
movsx eax, byte [ebp + edx - 0x84c]
cmp ecx, eax
jne 0x1e0392e3
jmp 0x1e039229
jmp 0x1e0392ea
push esi
add esi, 0x3db2
call 0x1e0392fd
add byte [esi + 0x4f], al
inc ebp
dec ebp
cmp edi, dword [eax]
add esp, 4
call 0x1e039310
add byte [esi], bh
inc esi
xor edi, dword [edi]
dec edi
cmp esi, dword [esi]
xor eax, 0xc4833c4d
add al, 0x5e
push edx
and edx, 0x13a62
pop edx
mov ecx, dword [ebp - 0x734]
add ecx, dword [ebp - 0x150]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x150]
movsx ecx, byte [ebp + eax - 0x84c]
cmp edx, ecx
jne 0x1e039349
mov dword [ebp - 0xc2c], 0
jmp 0x1e0393b8
push eax
or eax, 0x993b
pop eax
push edi
push esi
add esp, 4
sub edi, 0x16e85
xor edi, 0xee00
call 0x1e03936f
add byte [eax], bh
inc edx
push eax
inc edi
inc esp
inc ecx
add esp, 4
pop edi
push eax
xor eax, 0x9542
pop eax
mov edx, dword [ebp - 0x734]
add edx, dword [ebp - 0x150]
movsx eax, byte [edx]
or eax, 0x20
mov ecx, dword [ebp - 0x150]
movsx edx, byte [ebp + ecx - 0x84c]
or edx, 0x20
cmp eax, edx
jge 0x1e0393ae
mov dword [ebp - 0xc2c], 0xffffffff
jmp 0x1e0393b8
mov dword [ebp - 0xc2c], 1
cmp dword [ebp - 0xc2c], 0
jne 0x1e0393cf
mov eax, dword [ebp - 0x1be4]
mov dword [ebp - 0x398], eax
jmp fcn.1e0393e0
jmp 0x1e0391b9
mov ecx, dword [ebp - 0x738]
mov dword [ebp - 0x398], ecx
Function at 0x1e03943b
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
cmp dword [ebp - 0x398], 0
je 0x1e0394bb
push eax
sub eax, 0x1354d
and eax, 0xaca1
xor eax, 0xf04b
pop eax
push esi
push edi
add esp, 4
xor esi, 0x18322
or esi, 0x257b
sub esi, 0x5a7a
sub esi, 0x13b0d
pop esi
mov edx, dword [ebp - 0x398]
mov dword [ebp - 0x1be8], edx
push edx
call 0x1e03943b
add byte [ebx], bh
cmp bh, byte [esi]
dec ecx
cmp eax, 0x34423e47
add esp, 4
sub edx, 0xd0ba
and edx, 0x9dfc
pop edx
push edx
push esi
add esp, 4
xor edx, 0x11d99
sub edx, 0x8867
pop edx
mov eax, dword [ebp - 0x1be8]
mov dword [ebp - 0x1bec], eax
lea ecx, [ebp - 0x15cc]
push ecx
call dword [ebp - 0x1bec]
test eax, eax
jne 0x1e0394bb
push edi
push ecx
add esp, 4
sub edi, 0x132f9
sub edi, 0x407e
xor edi, 0x13fd8
or edi, 0x11438
pop edi
push edx
xor edx, 0x176fd
xor edx, 0x13104
or edx, 0x251c
pop edx
mov dword [ebp - 0x774], 0
jmp 0x1e039ba6