joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4045f2
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop eax
push ecx
push eax
add esp, 4
xor ecx, 0x2a7e
pop ecx
push eax
push edx
add esp, 4
sub eax, 0xa3ef
xor eax, 0x1392
pop eax
imul edx, dword [ebp - 0x1060], 0x70
add edx, 0x44f3663b
imul eax, dword [ebp - 0x1060], 0x70
sub edx, eax
xor edx, 0xaa6272
imul edx, dword [ebp - 0x1060]
imul ecx, dword [ebp - 0x1060], 0x70
sub edx, ecx
mov dword [ebp - 0x1064], edx
push eax
add eax, 0xde3c
and eax, 0x143e
jmp 0x4045be
pop eax
push ebx
push edi
add esp, 4
sub ebx, 0x9f8b
and ebx, 0x17f19
pop ebx
push esi
push edi
add esp, 4
xor esi, 0x37a8
pop esi
mov dword [ebp - 0x10], 1
push edi
call 0x4045f2
add byte [ebx + 0x3a], al
cmp byte [eax + 0x4a], al
aaa
dec ebp
add esp, 4
call 0x404604
add byte [eax], bh
cmp al, 0x3c
inc ecx
inc ebp
push eax
inc esp
aaa
add esp, 4
sub edi, 0x1766e
pop edi
push ebx
sub ebx, 0x183ad
pop ebx
imul edx, dword [ebp - 0x10], 0x70
add edx, 0x44f3663b
imul eax, dword [ebp - 0x10], 0x70
sub edx, eax
xor edx, 0x153c
imul edx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x10], 0x70
sub edx, ecx
mov dword [ebp - 0x14], edx
push esi
push esi
add esp, 4
sub esi, 0x123d1
and esi, 0x2265
and esi, 0x3e87
pop esi
push eax
add eax, 0x9067
or eax, 0xb445
add eax, 0x88b3
xor eax, 0x4524
pop eax
push eax
call 0x40467b
add byte [edi], dh
inc edx

Function at 0x404604
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop eax
push ecx
push eax
add esp, 4
xor ecx, 0x2a7e
pop ecx
push eax
push edx
add esp, 4
sub eax, 0xa3ef
xor eax, 0x1392
pop eax
imul edx, dword [ebp - 0x1060], 0x70
add edx, 0x44f3663b
imul eax, dword [ebp - 0x1060], 0x70
sub edx, eax
xor edx, 0xaa6272
imul edx, dword [ebp - 0x1060]
imul ecx, dword [ebp - 0x1060], 0x70
sub edx, ecx
mov dword [ebp - 0x1064], edx
push eax
add eax, 0xde3c
and eax, 0x143e
jmp 0x4045be
pop eax
push ebx
push edi
add esp, 4
sub ebx, 0x9f8b
and ebx, 0x17f19
pop ebx
push esi
push edi
add esp, 4
xor esi, 0x37a8
pop esi
mov dword [ebp - 0x10], 1
push edi
call 0x4045f2
add byte [ebx + 0x3a], al
cmp byte [eax + 0x4a], al
aaa
dec ebp
add esp, 4
call 0x404604
add byte [eax], bh
cmp al, 0x3c
inc ecx
inc ebp
push eax
inc esp
aaa
add esp, 4
sub edi, 0x1766e
pop edi
push ebx
sub ebx, 0x183ad
pop ebx
imul edx, dword [ebp - 0x10], 0x70
add edx, 0x44f3663b
imul eax, dword [ebp - 0x10], 0x70
sub edx, eax
xor edx, 0x153c
imul edx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x10], 0x70
sub edx, ecx
mov dword [ebp - 0x14], edx
push esi
push esi
add esp, 4
sub esi, 0x123d1
and esi, 0x2265
and esi, 0x3e87
pop esi
push eax
add eax, 0x9067
or eax, 0xb445
add eax, 0x88b3
xor eax, 0x4524
pop eax
push eax
call 0x40467b
add byte [edi], dh
inc edx
Function at 0x404674
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
dec esi
xor eax, dword [esp + edi + 0x41]
inc eax
push eax
add esp, 4
pop eax
push edx
jmp 0x404687
xor edx, 0x66e2
jmp 0x404696
xor edx, 0xe946
pop edx
mov dword [ebp - 0x2c], 1
push edx
push eax
add esp, 4
call 0x4046b7
add byte [edi], bh
cmp dh, byte [esp + esi]
aas
cmp edi, dword [edi]
dec ecx
add esp, 4
jmp 0x4046c1
pop edx
push ebx
sub ebx, 0xcdad
xor ebx, 0x8814
invalid

Function at 0x40467b
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
dec esi
xor eax, dword [esp + edi + 0x41]
inc eax
push eax
add esp, 4
pop eax
push edx
jmp 0x404687
xor edx, 0x66e2
jmp 0x404696
xor edx, 0xe946
pop edx
mov dword [ebp - 0x2c], 1
push edx
push eax
add esp, 4
call 0x4046b7
add byte [edi], bh
cmp dh, byte [esp + esi]
aas
cmp edi, dword [edi]
dec ecx
add esp, 4
jmp 0x4046c1
pop edx
push ebx
sub ebx, 0xcdad
xor ebx, 0x8814
invalid

Function at 0x4046b7
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
dec esi
xor eax, dword [esp + edi + 0x41]
inc eax
push eax
add esp, 4
pop eax
push edx
jmp 0x404687
xor edx, 0x66e2
jmp 0x404696
xor edx, 0xe946
pop edx
mov dword [ebp - 0x2c], 1
push edx
push eax
add esp, 4
call 0x4046b7
add byte [edi], bh
cmp dh, byte [esp + esi]
aas
cmp edi, dword [edi]
dec ecx
add esp, 4
jmp 0x4046c1
pop edx
push ebx
sub ebx, 0xcdad
xor ebx, 0x8814
invalid

Function at 0x4046d0
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
ret

Function at 0x404931
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ecx
push eax
add esp, 4
or ecx, 0x6846
pop ecx
push edx
and edx, 0x628d
call 0x404951
add byte [esi + 0x33], cl
inc ebp
dec esp
inc ebp
inc esi
inc esp
add esp, 4
add edx, 0x103bc
pop edx
push ecx
xor ecx, 0xb7c7
pop ecx
mov eax, dword [ebp - 0x1634]
add eax, 0x70
imul ecx, dword [ebp - 0x1630], 0x70
add ecx, 0x44f3663b
imul edx, dword [ebp - 0x1630], 0x70
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x1630]
mov dword [ebp - 0x1e2c], eax
invalid
invalid

Function at 0x404951
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ecx
push eax
add esp, 4
or ecx, 0x6846
pop ecx
push edx
and edx, 0x628d
call 0x404951
add byte [esi + 0x33], cl
inc ebp
dec esp
inc ebp
inc esi
inc esp
add esp, 4
add edx, 0x103bc
pop edx
push ecx
xor ecx, 0xb7c7
pop ecx
mov eax, dword [ebp - 0x1634]
add eax, 0x70
imul ecx, dword [ebp - 0x1630], 0x70
add ecx, 0x44f3663b
imul edx, dword [ebp - 0x1630], 0x70
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x1630]
mov dword [ebp - 0x1e2c], eax
invalid
invalid
Function at 0x407884
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x13379797
pop eax
mov dword [ebp - 0x3f0], eax
push ecx
push edx
add esp, 4
jmp 0x4077c9
or ecx, 0x99e8
sub ecx, 0x974a
and ecx, 0x1282c
pop ecx
push eax
push edi
add esp, 4
sub eax, 0x93c0
jmp 0x4077ec
pop eax
mov ecx, dword [ebp - 0x2098]
mov dword [ebp - 0x15c0], ecx
push ecx
push ecx
add esp, 4
or ecx, 0x834f
add ecx, 0x110b7
sub ecx, 0xe66b
pop ecx
push edx
xor edx, 0x8652
jmp 0x40781e
xor edx, 0x107cf
add edx, 0x87f0
pop edx
mov edx, dword [ebp - 0x14]
add edx, 0x70
imul eax, dword [ebp - 0x10], 0x70
add eax, 0x44f3663b
imul ecx, dword [ebp - 0x10], 0x70
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x15c0], edx
mov edx, dword [ebp - 0x3f0]
mov dword [ebp - 0x1ffc], edx
mov eax, dword [ebp - 0x1ffc]
add eax, dword [ebp - 0x15c0]
mov dword [ebp - 0x3f0], eax
push edx
push esi
add esp, 4
jmp 0x407878
call 0x407884
add byte [edi], bh
dec esp
inc ecx
xor eax, 0x4c4834e
or edx, 0x570a
pop edx
push edi
xor edi, 0x17b2a
add edi, 0xb24c
pop edi
mov byte [ebp - 0xbec], 0x52
mov byte [ebp - 0xbeb], 0xb9
mov byte [ebp - 0xbea], 0x10
mov byte [ebp - 0xbe9], 0x10
mov byte [ebp - 0xbe8], 0x10
mov byte [ebp - 0xbe7], 0x10
mov byte [ebp - 0xbe6], 0x5a
push edx
push ebx
add esp, 4
and edx, 0x1450b
and edx, 0x2fa3
and edx, 0x6754
pop edx
push edx
push ebx
add esp, 4
sub edx, 0x57db
jmp 0x4078f8
or edx, 0xcf2e
pop edx
mov byte [ebp - 0xbe4], 0x52
mov byte [ebp - 0xbe3], 0xb9
mov byte [ebp - 0xbe2], 0x20
mov byte [ebp - 0xbe1], 0x20
mov byte [ebp - 0xbe0], 0x20
mov byte [ebp - 0xbdf], 0x20
mov byte [ebp - 0xbde], 0x5a
push edi
push edx
add esp, 4
or edi, 0x99e9
and edi, 0x87f8
and edi, 0x54ed
pop edi
push esi
xor esi, 0x3a29
add esi, 0x5e9c
or esi, 0x12a02
xor esi, 0x11a3e
pop esi
mov dword [ebp - 0x209c], 0xe
push ebx
jmp 0x407974
sub ebx, 0x39e4
and ebx, 0x151de
pop ebx
push edx
xor edx, 0x13108
call 0x407994
add byte [esi + 0x34], al
inc ebp
inc ecx
inc ecx
add esp, 4
add edx, 0x494d
pop edx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbec]
mov dword [ebp - 0x15c4], eax
push edx
add edx, 0x6b35
add edx, 0x14eae
add edx, 0x3e62
pop edx
push ebx
push eax
add esp, 4
xor ebx, 0xc01f
and ebx, 0x9555
sub ebx, 0x11370
sub ebx, 0x8c6c
pop ebx
mov dword [ebp - 0x20a0], 0xffffffff
push esi
push edx
add esp, 4
add esi, 0x8051
pop esi
push edx
push ebx
add esp, 4
jmp 0x407a09
xor edx, 0x66bb
pop edx
push edx
call 0x407a1d
add byte [0x3732444b], bh
dec esp
add esp, 4
pop edx
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp - 0x4fc], ecx
jmp 0x407a3e
Function at 0x407994
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x13379797
pop eax
mov dword [ebp - 0x3f0], eax
push ecx
push edx
add esp, 4
jmp 0x4077c9
or ecx, 0x99e8
sub ecx, 0x974a
and ecx, 0x1282c
pop ecx
push eax
push edi
add esp, 4
sub eax, 0x93c0
jmp 0x4077ec
pop eax
mov ecx, dword [ebp - 0x2098]
mov dword [ebp - 0x15c0], ecx
push ecx
push ecx
add esp, 4
or ecx, 0x834f
add ecx, 0x110b7
sub ecx, 0xe66b
pop ecx
push edx
xor edx, 0x8652
jmp 0x40781e
xor edx, 0x107cf
add edx, 0x87f0
pop edx
mov edx, dword [ebp - 0x14]
add edx, 0x70
imul eax, dword [ebp - 0x10], 0x70
add eax, 0x44f3663b
imul ecx, dword [ebp - 0x10], 0x70
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x15c0], edx
mov edx, dword [ebp - 0x3f0]
mov dword [ebp - 0x1ffc], edx
mov eax, dword [ebp - 0x1ffc]
add eax, dword [ebp - 0x15c0]
mov dword [ebp - 0x3f0], eax
push edx
push esi
add esp, 4
jmp 0x407878
call 0x407884
add byte [edi], bh
dec esp
inc ecx
xor eax, 0x4c4834e
or edx, 0x570a
pop edx
push edi
xor edi, 0x17b2a
add edi, 0xb24c
pop edi
mov byte [ebp - 0xbec], 0x52
mov byte [ebp - 0xbeb], 0xb9
mov byte [ebp - 0xbea], 0x10
mov byte [ebp - 0xbe9], 0x10
mov byte [ebp - 0xbe8], 0x10
mov byte [ebp - 0xbe7], 0x10
mov byte [ebp - 0xbe6], 0x5a
push edx
push ebx
add esp, 4
and edx, 0x1450b
and edx, 0x2fa3
and edx, 0x6754
pop edx
push edx
push ebx
add esp, 4
sub edx, 0x57db
jmp 0x4078f8
or edx, 0xcf2e
pop edx
mov byte [ebp - 0xbe4], 0x52
mov byte [ebp - 0xbe3], 0xb9
mov byte [ebp - 0xbe2], 0x20
mov byte [ebp - 0xbe1], 0x20
mov byte [ebp - 0xbe0], 0x20
mov byte [ebp - 0xbdf], 0x20
mov byte [ebp - 0xbde], 0x5a
push edi
push edx
add esp, 4
or edi, 0x99e9
and edi, 0x87f8
and edi, 0x54ed
pop edi
push esi
xor esi, 0x3a29
add esi, 0x5e9c
or esi, 0x12a02
xor esi, 0x11a3e
pop esi
mov dword [ebp - 0x209c], 0xe
push ebx
jmp 0x407974
sub ebx, 0x39e4
and ebx, 0x151de
pop ebx
push edx
xor edx, 0x13108
call 0x407994
add byte [esi + 0x34], al
inc ebp
inc ecx
inc ecx
add esp, 4
add edx, 0x494d
pop edx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbec]
mov dword [ebp - 0x15c4], eax
push edx
add edx, 0x6b35
add edx, 0x14eae
add edx, 0x3e62
pop edx
push ebx
push eax
add esp, 4
xor ebx, 0xc01f
and ebx, 0x9555
sub ebx, 0x11370
sub ebx, 0x8c6c
pop ebx
mov dword [ebp - 0x20a0], 0xffffffff
push esi
push edx
add esp, 4
add esi, 0x8051
pop esi
push edx
push ebx
add esp, 4
jmp 0x407a09
xor edx, 0x66bb
pop edx
push edx
call 0x407a1d
add byte [0x3732444b], bh
dec esp
add esp, 4
pop edx
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp - 0x4fc], ecx
jmp 0x407a3e
Function at 0x407a1d
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x13379797
pop eax
mov dword [ebp - 0x3f0], eax
push ecx
push edx
add esp, 4
jmp 0x4077c9
or ecx, 0x99e8
sub ecx, 0x974a
and ecx, 0x1282c
pop ecx
push eax
push edi
add esp, 4
sub eax, 0x93c0
jmp 0x4077ec
pop eax
mov ecx, dword [ebp - 0x2098]
mov dword [ebp - 0x15c0], ecx
push ecx
push ecx
add esp, 4
or ecx, 0x834f
add ecx, 0x110b7
sub ecx, 0xe66b
pop ecx
push edx
xor edx, 0x8652
jmp 0x40781e
xor edx, 0x107cf
add edx, 0x87f0
pop edx
mov edx, dword [ebp - 0x14]
add edx, 0x70
imul eax, dword [ebp - 0x10], 0x70
add eax, 0x44f3663b
imul ecx, dword [ebp - 0x10], 0x70
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x15c0], edx
mov edx, dword [ebp - 0x3f0]
mov dword [ebp - 0x1ffc], edx
mov eax, dword [ebp - 0x1ffc]
add eax, dword [ebp - 0x15c0]
mov dword [ebp - 0x3f0], eax
push edx
push esi
add esp, 4
jmp 0x407878
call 0x407884
add byte [edi], bh
dec esp
inc ecx
xor eax, 0x4c4834e
or edx, 0x570a
pop edx
push edi
xor edi, 0x17b2a
add edi, 0xb24c
pop edi
mov byte [ebp - 0xbec], 0x52
mov byte [ebp - 0xbeb], 0xb9
mov byte [ebp - 0xbea], 0x10
mov byte [ebp - 0xbe9], 0x10
mov byte [ebp - 0xbe8], 0x10
mov byte [ebp - 0xbe7], 0x10
mov byte [ebp - 0xbe6], 0x5a
push edx
push ebx
add esp, 4
and edx, 0x1450b
and edx, 0x2fa3
and edx, 0x6754
pop edx
push edx
push ebx
add esp, 4
sub edx, 0x57db
jmp 0x4078f8
or edx, 0xcf2e
pop edx
mov byte [ebp - 0xbe4], 0x52
mov byte [ebp - 0xbe3], 0xb9
mov byte [ebp - 0xbe2], 0x20
mov byte [ebp - 0xbe1], 0x20
mov byte [ebp - 0xbe0], 0x20
mov byte [ebp - 0xbdf], 0x20
mov byte [ebp - 0xbde], 0x5a
push edi
push edx
add esp, 4
or edi, 0x99e9
and edi, 0x87f8
and edi, 0x54ed
pop edi
push esi
xor esi, 0x3a29
add esi, 0x5e9c
or esi, 0x12a02
xor esi, 0x11a3e
pop esi
mov dword [ebp - 0x209c], 0xe
push ebx
jmp 0x407974
sub ebx, 0x39e4
and ebx, 0x151de
pop ebx
push edx
xor edx, 0x13108
call 0x407994
add byte [esi + 0x34], al
inc ebp
inc ecx
inc ecx
add esp, 4
add edx, 0x494d
pop edx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbec]
mov dword [ebp - 0x15c4], eax
push edx
add edx, 0x6b35
add edx, 0x14eae
add edx, 0x3e62
pop edx
push ebx
push eax
add esp, 4
xor ebx, 0xc01f
and ebx, 0x9555
sub ebx, 0x11370
sub ebx, 0x8c6c
pop ebx
mov dword [ebp - 0x20a0], 0xffffffff
push esi
push edx
add esp, 4
add esi, 0x8051
pop esi
push edx
push ebx
add esp, 4
jmp 0x407a09
xor edx, 0x66bb
pop edx
push edx
call 0x407a1d
add byte [0x3732444b], bh
dec esp
add esp, 4
pop edx
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp - 0x4fc], ecx
jmp 0x407a3e
Function at 0x408060
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [ebp - 0xabc]
add ecx, 1
mov dword [ebp - 0xabc], ecx
jmp 0x407f4f

Function at 0x408344
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ecx
add esp, 4
sub edx, 0x15da0
add byte [edx + 0x56], bl
xor esi, 0x15efa
add esi, 0x1212d
and dword [ecx], eax
add byte [esi + 0x51], bl
push eax
add esp, 4
sub ecx, 0x1479c
pushfd
inc edi
add dword [eax], eax
jmp 0x40836e
add ecx, 0x17d36

Function at 0x40834d
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ecx
add esp, 4
sub edx, 0x15da0
add byte [edx + 0x56], bl
xor esi, 0x15efa
add esi, 0x1212d
and dword [ecx], eax
add byte [esi + 0x51], bl
push eax
add esp, 4
sub ecx, 0x1479c
pushfd
inc edi
add dword [eax], eax
jmp 0x40836e
add ecx, 0x17d36

Function at 0x408359
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ecx
add esp, 4
sub edx, 0x15da0
add byte [edx + 0x56], bl
xor esi, 0x15efa
add esi, 0x1212d
and dword [ecx], eax
add byte [esi + 0x51], bl
push eax
add esp, 4
sub ecx, 0x1479c
pushfd
inc edi
add dword [eax], eax
jmp 0x40836e
add ecx, 0x17d36

Function at 0x40836f
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ecx
add esp, 4
sub edx, 0x15da0
add byte [edx + 0x56], bl
xor esi, 0x15efa
add esi, 0x1212d
and dword [ecx], eax
add byte [esi + 0x51], bl
push eax
add esp, 4
sub ecx, 0x1479c
pushfd
inc edi
add dword [eax], eax
jmp 0x40836e
add ecx, 0x17d36

Function at 0x4083a0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push cs
sub eax, 0xc0810000
movsb byte es:[edi], byte [esi]
lea eax, [eax]
add byte [ecx + 0x880ef0], al
add byte [eax + 0x52], bl
pop eax
push edx

Function at 0x4083b0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
pop eax
push edx
or edx, 0xfe65
pop edx
push ecx
push ebx
add esp, 4
sub ecx, 0x171d
add byte [ecx + 0x16db0e1], al
add byte [ecx - 0x73], bl
invalid
enter 0xffffffffffffffe8, 0xffffffffffffffff
mov dword [ebp - 0xc94], ecx
mov edx, dword [ebp - 0x504]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc90], eax
push dword [ebx]
leave
mov word [ebp - 0x210], cx
xor edx, edx
mov word [ebp - 0x10c], dx
push edx
push ecx
add esp, 4

Function at 0x408566
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
and al, byte [0x575a0001]
push eax
add esp, 4
add edi, 0x85c
pop edi
mov eax, dword [ebp - 0x504]
invalid

Function at 0x4085f1
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
and eax, 0xc0810001
or byte [esi - 0x377f0000], al
push 0x48
add byte [eax], al
Function at 0x408793
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add edi, 0xd12e
jmp 0x408611
or edi, 0x13ff4
jmp 0x40861e
pop edi
cmp dword [ebp - 0x31c], 0
jne 0x408f38
mov edx, 0x6b
mov word [ebp - 0x1774], dx
mov eax, 0x65
mov word [ebp - 0x1772], ax
mov ecx, 0x72
mov word [ebp - 0x1770], cx
mov edx, 0x6e
mov word [ebp - 0x176e], dx
mov eax, 0x65
mov word [ebp - 0x176c], ax
mov ecx, 0x6c
mov word [ebp - 0x176a], cx
mov edx, 0x33
mov word [ebp - 0x1768], dx
mov eax, 0x32
mov word [ebp - 0x1766], ax
mov ecx, 0x2e
mov word [ebp - 0x1764], cx
mov edx, 0x64
mov word [ebp - 0x1762], dx
xchg ebp, eax
sahf
call 0x6cf986a5
add byte [eax], al
add byte [esi - 0x77], ah
test dword [eax - 0x46000018], esp
insb byte es:[edi], dx
add byte [eax], al
add byte [esi - 0x77], ah
lea esp, [edx + 0x33ffffe8]
shl byte [esi - 0x77], cl
xchg ebp, eax
movsb byte es:[edi], byte [esi]
call 0x509886c6
add esp, 4
xor edi, 0x15b8b
pop edi
push esi
push eax
add esp, 4
xor esi, 0x8505
pop esi
push esi
push edi
add esp, 4
jmp 0x4086e8
xor esi, 0xe349
pop esi
push ebx
or ebx, 0x15e6f
pop ebx
mov byte [ebp - 0x894], 0x4c
mov byte [ebp - 0x893], 0x6f
mov byte [ebp - 0x892], 0x61
mov byte [ebp - 0x891], 0x64
mov byte [ebp - 0x890], 0x4c
mov byte [ebp - 0x88f], 0x69
mov byte [ebp - 0x88e], 0x62
mov byte [ebp - 0x88d], 0x72
mov byte [ebp - 0x88c], 0x61
mov byte [ebp - 0x88b], 0x72
mov byte [ebp - 0x88a], 0x79
mov byte [ebp - 0x889], 0x57
mov byte [ebp - 0x888], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x195c], eax
mov ecx, dword [ebp - 0x195c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1960], edx
mov eax, dword [ebp - 0x1960]
mov dword [ebp - 0x15e4], eax
push eax
push ebx
add esp, 4
add eax, 0x1382a
call 0x408793
add byte [edi], bh
cmp byte [edi + 0x37], cl
xor eax, dword [esi + 0x4a]
dec ebx
cmp byte [ebx - 0x3f7efb3c], al
dec ecx
add byte [eax], al
add byte [eax + 0x50], bl
sub eax, 0xe151
and eax, 0x10f10
pop eax
cmp dword [ebp - 0x15e4], 0
jne 0x4087c3
mov dword [ebp - 0x750], 0
jmp 0x408a7f
mov ecx, dword [ebp - 0x15e4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xca4], eax
push ecx
push esi
add esp, 4
jmp 0x4087e1
or ecx, 0x16f7e
pop ecx
push esi
push edx
add esp, 4
jmp 0x4087f4
or esi, 0x17890
pop esi
push eax
push ecx
add esp, 4
or eax, 0xd595
pop eax
cmp dword [ebp - 0xca4], 0
jne 0x40881f
mov dword [ebp - 0x750], 0
jmp 0x408a7f
mov ecx, dword [ebp - 0xca4]
mov dword [ebp - 0x508], ecx
push esi
and esi, 0x8be9
call 0x408f4d
add byte [edi], dh
cmp byte [ecx + edi], bh
dec esi
xor eax, 0xc483443c
add al, 0x81
into
mov ah, 0x39
Function at 0x40883b
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edi
call 0x40883b
add byte [edi + 0x33], cl
xor al, 0x36
xor eax, 0x83464448
les eax, [eax + ebp*8]
or al, byte [eax]
add byte [eax], al
add byte [0x483f3632], dh
dec ecx
inc ebp
xor eax, 0x4c4833c
add esp, 4
add edi, 0xec6b
sub edi, 0x14edf
pop edi
lea edx, [ebp - 0x1774]
mov dword [ebp - 0xca0], edx
mov eax, dword [ebp - 0x508]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc9c], ecx
xor edx, edx
mov word [ebp - 0x214], dx
xor eax, eax
mov word [ebp - 0x110], ax
push ecx
call 0x40889a
add byte [eax + 0x36], cl
cmp eax, dword [eax + 0x49]
dec ecx
inc ebp
xor al, byte [ebx + eax*4 - 0x3c]
add al, 0x81
loope 0x40884d
jns 0x4088a3
add byte [ecx + 0x16242e9], al
add byte [ecx + 0x4054c1], al
add byte [ecx + 0x53], bl
sub ecx, 0x16242
add ecx, 0x4054
pop ecx
push ebx
push eax
add esp, 4
sub ebx, 0x12b34
pop ebx
mov ecx, dword [ebp - 0xc9c]
mov dx, word [ecx]
mov word [ebp - 0x1036], dx
mov eax, dword [ebp - 0xc9c]
add eax, 2
mov dword [ebp - 0xc9c], eax
mov cx, word [ebp - 0x1036]
mov word [ebp - 0x214], cx
mov edx, dword [ebp - 0xca0]
mov ax, word [edx]
mov word [ebp - 0x1038], ax
mov ecx, dword [ebp - 0xca0]
add ecx, 2
mov dword [ebp - 0xca0], ecx
mov dx, word [ebp - 0x1038]
mov word [ebp - 0x110], dx
push eax
and eax, 0x8387
xor eax, 0x839e
and eax, 0x1463d
call 0x408938
add byte [esi], dh
cmp ecx, dword [ebx + 0x4c]
inc edi
inc ebx
push eax
cmp al, 0x50
add esp, 4
pop eax
push ebx
push ecx
add esp, 4
add ebx, 0xea7b
pop ebx
movzx eax, word [ebp - 0x110]
test eax, eax
jne 0x40896b
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
sub ecx, edx
retf 0x8d89
adc al, 0xea
invalid
invalid
jmp 0x4089ce
movzx eax, word [ebp - 0x214]
movzx ecx, word [ebp - 0x110]
cmp eax, ecx
je 0x40888a
movzx edx, word [ebp - 0x214]
xor edx, 0x20
movzx eax, word [ebp - 0x110]
cmp edx, eax
je 0x40888a
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
cmp ecx, edx
jge 0x4089b8
mov dword [ebp - 0x15e8], 0xffffffff
jmp 0x4089c2
mov dword [ebp - 0x15e8], 1
mov eax, dword [ebp - 0x15e8]
mov dword [ebp - 0x15ec], eax
cmp dword [ebp - 0x15ec], 0
jne 0x408a17
push ebx
xor ebx, 0x7b9e
sub ebx, 0x801f
sub ebx, 0x7d88
sub ebx, 0x17fa5
pop ebx
push edx
push ebx
add esp, 4
sub edx, 0xe439
or edx, 0xe78f
and edx, 0x2231
pop edx
mov ecx, dword [ebp - 0x508]
mov dword [ebp - 0x750], ecx
jmp 0x408a7f
push eax
push edi
add esp, 4
and eax, 0x14dc0
or eax, 0x1556b
or eax, 0x2ec2
pop eax
push ecx
or ecx, 0x77a4
pop ecx
push esi
push edx
add esp, 4
or esi, 0x707d
add esi, 0x6854
pop esi
mov edx, dword [ebp - 0x508]
mov eax, dword [edx]
mov dword [ebp - 0x508], eax
mov ecx, dword [ebp - 0x508]
cmp ecx, dword [ebp - 0xca4]
je 0x408a75
mov edx, dword [ebp - 0x508]
cmp dword [edx + 0x30], 0
jne 0x40882b
mov dword [ebp - 0x750], 0
push eax
xor eax, 0x16c04
or eax, 0xbcee
pop eax
push ecx
jmp 0x408a94
add ecx, 0xd9af
call 0x408aa7