joyce8/EMBER2024-capa huggingface dataset:
Function at 0x405c64
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x4d0]
add edx, 1
mov dword [ebp - 0x4d0], edx
push eax
push esi
add esp, 4
and eax, 0x18f
add eax, 0xbc20
add eax, 0x11f43
pop eax
push ebx
push eax
add esp, 4
add ebx, 0x938
pop ebx
push eax
add eax, 0x1119e
sub eax, 0x2a93
pop eax
mov eax, dword [ebp - 0x4d0]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x405946
push ecx
and ecx, 0xbc7a
or ecx, 0xbd9f
xor ecx, 0xddd3
pop ecx
push ecx
push ecx
add esp, 4
add ecx, 0x14df9
pop ecx
push ecx
push ebx
add esp, 4
and ecx, 0xb52b
sub ecx, 0xf02b
pop ecx
jmp 0x405b74
mov dword [ebp - 0xc10], 7
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0xa60], ecx
push eax
push eax
add esp, 4
or eax, 0x5b00
add eax, 0x7c7b
pop eax
push edx
jmp fcn.00405978
call 0x405984
add byte [edx], bh
xor eax, 0x4c344538
add esp, 4
or edx, 0x3d49
pop edx
mov edx, dword [ebp - 0x14c8]
mov dword [ebp - 0x9f0], edx
mov dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0x4d0]
cmp eax, dword [ebp - 0x14c8]
jne 0x4059f5
push ecx
push edx
add esp, 4
sub ecx, 0x14d6b
and ecx, 0x3215
sub ecx, 0x9480
pop ecx
push edi
xor edi, 0xd49b
xor edi, 0x9e88
pop edi
push ecx
push ebx
add esp, 4
sub ecx, 0xb344
pop ecx
mov ecx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], ecx
jmp 0x405b26
cmp dword [ebp - 0xc10], 0
jle 0x405b1a
push esi
or esi, 0x11a09
sub esi, 0x155aa
or esi, 0x6991
or esi, 0x7cec
pop esi
push ebx
push eax
add esp, 4
sub ebx, 0x147ce
pop ebx
push eax
push ecx
add esp, 4
sub eax, 0x14f44
pop eax
mov edx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], edx
cmp dword [ebp - 0x14d0], 0
jne 0x405b6f
push esi
jmp 0x4058bd
push ecx
or ecx, 0x3074
and ecx, 0xcee3
loope 0x405b61
into
add byte [eax], al
pop ecx
push ebx
push edi
add esp, 4
add ebx, 0x5fa
add ebx, 0x6643
call 0x405ba2
add byte [ebx], bh
dec eax
push eax
inc ecx
inc edi
inc esp
cmp al, 0x4d
xor eax, dword [ebx - 0x38a4fb3c]
test dword [ebp + esi*8 + 0xffff], esp
add byte [eax], al
push ecx
xor ecx, 0xee67
or ecx, 0x806b
add ecx, 0xbf37
pop ecx
push ebx
push ecx
add esp, 4
add ebx, 0x143ea
add ebx, 0xb99f
sub ebx, 0x9395
add ebx, 0xe988
pop ebx
mov byte [ebp - 0x804], 0x45
mov byte [ebp - 0x803], 0x78
idiv edi
invalid
js 0x405bb7
test esi, edi
idiv edi
jmp [ecx - 0x3a]
test edi, edi
idiv edi
push dword [esi + eax*8 - 0x7b]
add al, bh
invalid
call dword [eax - 0x3a]
test dword [ecx], eax
clc
invalid
push dword [edx - 0x3a]
test dword [edx], eax
clc
invalid
jmp [edi - 0x3a]
test dword [ebx], eax
clc
invalid
jmp dword [ebx - 0x3a]
test dword [eax + edi*8], eax
invalid
jmp dword [ebp - 0x3a]
test dword [0x73fffff8], eax
mov byte [ebp - 0x7fa], 0x73
mov byte [ebp - 0x7f9], 0
push ecx
call 0x405c45
add byte [esp + eax*2], bh
dec ebx
push eax
dec ebx
inc eax
inc esp
cmp al, 0x83
les eax, [ecx + ebx*2]
push ebx
jmp 0x405c50
xor ebx, 0x1f5a
call 0x405c64
add byte [0x3d3f3a35], bh
dec edx
dec eax
cmp byte [ebx - 0x46a4fb3c], al
imul eax, dword [eax], 0
add byte [esi - 0x77], ah
invalid
Function at 0x405d27
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edx
push eax
add eax, 0x17103
add dword [eax], eax
pop eax
push esi
push edi
add esp, 4
sub esi, 0x14989
pop esi
push ebx
add ebx, 0x10e4a
pop ebx
push edx
push ebx
add esp, 4
or edx, 0x5ef4
sub edx, 0xd2b8
xor edx, 0x63f
xor edx, 0x3cd9
pop edx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1890], edx
mov eax, dword [ebp - 0x1890]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1894], ecx
mov edx, dword [ebp - 0x1894]
mov dword [ebp - 0x14d4], edx
push ecx
push edx
add esp, 4
and ecx, 0x182cf
pop ecx
push ecx
and ecx, 0x1825e
add ecx, 0x887c
pop ecx
push ebx
push edx
add esp, 4
jmp 0x405db2
or ebx, 0xd212
xor ebx, 0xa704
pop ebx
cmp dword [ebp - 0x14d4], 0
jne 0x405dd7
mov eax, dword [ebp - 0x14d4]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc20], edx
push edx
add edx, 0xdf95
add edx, 0x1101c
sub edx, 0xe03c
sub edx, 0x15e78
pop edx
push ebx
push ecx
add esp, 4
sub ebx, 0x13f63
sub ebx, 0xae48
sub ebx, 0x9c9a
pop ebx
cmp dword [ebp - 0xc20], 0
jne 0x405e33
invalid
test dword [eax], esp
std

Function at 0x405d30
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edx
push eax
add eax, 0x17103
add dword [eax], eax
pop eax
push esi
push edi
add esp, 4
sub esi, 0x14989
pop esi
push ebx
add ebx, 0x10e4a
pop ebx
push edx
push ebx
add esp, 4
or edx, 0x5ef4
sub edx, 0xd2b8
xor edx, 0x63f
xor edx, 0x3cd9
pop edx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1890], edx
mov eax, dword [ebp - 0x1890]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1894], ecx
mov edx, dword [ebp - 0x1894]
mov dword [ebp - 0x14d4], edx
push ecx
push edx
add esp, 4
and ecx, 0x182cf
pop ecx
push ecx
and ecx, 0x1825e
add ecx, 0x887c
pop ecx
push ebx
push edx
add esp, 4
jmp 0x405db2
or ebx, 0xd212
xor ebx, 0xa704
pop ebx
cmp dword [ebp - 0x14d4], 0
jne 0x405dd7
mov eax, dword [ebp - 0x14d4]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc20], edx
push edx
add edx, 0xdf95
add edx, 0x1101c
sub edx, 0xe03c
sub edx, 0x15e78
pop edx
push ebx
push ecx
add esp, 4
sub ebx, 0x13f63
sub ebx, 0xae48
sub ebx, 0x9c9a
pop ebx
cmp dword [ebp - 0xc20], 0
jne 0x405e33
invalid
test dword [eax], esp
std

Function at 0x405dc8
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov dword [ebp - 0x2e0], 0
jmp 0x406093
Function at 0x405e64
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
pop edi
push edx
push ecx
add esp, 4
and edx, 0x2a0c
pop edx
lea ecx, [ebp - 0x1628]
mov dword [ebp - 0xc1c], ecx
mov edx, dword [ebp - 0x4d4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc18], eax
xor ecx, ecx
mov word [ebp - 0x1f8], cx
xor edx, edx
mov word [ebp - 0x100], dx
push ebx
push eax
add esp, 4
and ebx, 0x11b91
sub ebx, 0x6c1b
jmp 0x405eb4
add ebx, 0x8458
pop ebx
push ebx
push ecx
add esp, 4
call 0x405ecc
add byte [edi + 0x3f], cl
dec esi
inc edi
cmp al, 0x3e
add esp, 4
pop ebx
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xf7e], cx
mov edx, dword [ebp - 0xc18]
add edx, 2
mov dword [ebp - 0xc18], edx
mov ax, word [ebp - 0xf7e]
mov word [ebp - 0x1f8], ax
mov ecx, dword [ebp - 0xc1c]
mov dx, word [ecx]
mov word [ebp - 0xf80], dx
mov eax, dword [ebp - 0xc1c]
add eax, 2
mov dword [ebp - 0xc1c], eax
mov cx, word [ebp - 0xf80]
mov word [ebp - 0x100], cx
push ebx
or ebx, 0x44f
xor ebx, 0x3ed3
add ebx, 0xe1e1
pop ebx
push ecx
jmp 0x405f47
and ecx, 0x9710
sub ecx, 0xdf78
pop ecx
push esi
and esi, 0x17da7
pop esi

Function at 0x405ecc
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
pop edi
push edx
push ecx
add esp, 4
and edx, 0x2a0c
pop edx
lea ecx, [ebp - 0x1628]
mov dword [ebp - 0xc1c], ecx
mov edx, dword [ebp - 0x4d4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc18], eax
xor ecx, ecx
mov word [ebp - 0x1f8], cx
xor edx, edx
mov word [ebp - 0x100], dx
push ebx
push eax
add esp, 4
and ebx, 0x11b91
sub ebx, 0x6c1b
jmp 0x405eb4
add ebx, 0x8458
pop ebx
push ebx
push ecx
add esp, 4
call 0x405ecc
add byte [edi + 0x3f], cl
dec esi
inc edi
cmp al, 0x3e
add esp, 4
pop ebx
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xf7e], cx
mov edx, dword [ebp - 0xc18]
add edx, 2
mov dword [ebp - 0xc18], edx
mov ax, word [ebp - 0xf7e]
mov word [ebp - 0x1f8], ax
mov ecx, dword [ebp - 0xc1c]
mov dx, word [ecx]
mov word [ebp - 0xf80], dx
mov eax, dword [ebp - 0xc1c]
add eax, 2
mov dword [ebp - 0xc1c], eax
mov cx, word [ebp - 0xf80]
mov word [ebp - 0x100], cx
push ebx
or ebx, 0x44f
xor ebx, 0x3ed3
add ebx, 0xe1e1
pop ebx
push ecx
jmp 0x405f47
and ecx, 0x9710
sub ecx, 0xdf78
pop ecx
push esi
and esi, 0x17da7
pop esi

Function at 0x405f5c
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
movzx edx, word [ebp - 0x100]
test edx, edx
jne 0x405f7f
invalid
mov bh, 0x85
or dh, bh

Function at 0x406014
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [eax], al
xor edi, 0x5a07
pop edi
mov eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x2e0], eax
jmp 0x406093
push edx
push edx
add esp, 4
sub edx, 0x3742
pop edx
push edi
push eax
add esp, 4
xor edi, 0x8cea
xor edi, 0x10456
pop edi
push edx
push eax
add esp, 4
or edx, 0x16f83
pop edx
push ecx
sub ecx, 0xce08
pop ecx
cmp dword [ebp - 0x2e0], 0
jne 0x4069de
invalid
invalid
Function at 0x406043
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
jmp 0x405fe2
cmp dword [ebp - 0x1498], 0
jne 0x40602b
push edi
push esi
add esp, 4
and edi, 0xfedf
and edi, 0x6de4
add edi, 0x1f82
sub edi, 0x101ab
pop edi
push edi
and edi, 0xa158
sub edi, 0x5f06
add byte [eax], al
push edx
push edx
add esp, 4
and edx, 0xf2ae
call 0x406043
add byte [edx + eax*2], bh
inc eax
inc eax
cmp byte [eax + 0x4a], dl
add esp, 4
pop edx
push ecx
add ecx, 0x116bb
pop ecx
push eax
sub eax, 0x7aae
invalid
invalid

Function at 0x406058
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push eax
arpl word [ecx], ax
add byte [eax - 0x75], bl
lea ebp, [ebx + edi*8]
invalid

Function at 0x4060d4
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [eax], al
add byte [esi - 0x77], ah
xchg ebp, eax
xor al, 0xe9
invalid

Function at 0x4061a0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
loopne 0x406198
idiv edi
dec dword [esi + eax*8 - 0x7b]
loope 0x40619f
invalid

Function at 0x4061f4
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
idiv edi
inc dword [eax]
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1898], eax
mov ecx, dword [ebp - 0x1898]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x189c], edx
mov eax, dword [ebp - 0x189c]
mov dword [ebp - 0x14dc], eax
push eax
jmp 0x406229
jmp 0x406230
sub eax, 0x101ac
and eax, 0x6f99
pop eax
push edx
xor edx, 0xf357
and edx, 0x7f8c
xor edx, 0x148f8
pop edx
cmp dword [ebp - 0x14dc], 0
jne 0x406269
mov dword [ebp - 0x6ec], 0
jmp 0x406525
mov ecx, dword [ebp - 0x14dc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc2c], eax
push edi
push ecx
add esp, 4
add edi, 0x101ba
pop edi
push eax
and eax, 0x1190
sub eax, 0xdcab
stosd dword es:[edi], eax
fadd qword [eax]
add bl, ch
invalid
add eax, 0x7615
pop eax
push edi
push esi
add esp, 4
jmp 0x4062ac
pop edi
cmp dword [ebp - 0xc2c], 0
jne 0x4062c5
mov dword [ebp - 0x6ec], 0
jmp 0x406525
mov ecx, dword [ebp - 0xc2c]
mov dword [ebp - 0x4d8], ecx
Function at 0x406394
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edi
sub edi, 0xbbf
and edi, 0x1160a
and edi, 0x10236
add edi, 0x14be2
pop edi
push edi
push eax
add esp, 4
or edi, 0x5353
or edi, 0x722
sub edi, 0xbb68
pop edi
lea edx, [ebp - 0x16cc]
mov dword [ebp - 0xc28], edx
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc24], ecx
xor edx, edx
mov word [ebp - 0x1fc], dx
xor eax, eax
mov word [ebp - 0x104], ax
push ebx
and ebx, 0x6d5f
pop ebx
push eax
or eax, 0x3d9b
jmp 0x406347
pop eax
push esi
sub esi, 0xdcbc
and esi, 0x5607
pop esi
push edx
push edx
add esp, 4
add edx, 0x5bc1
pop edx
mov ecx, dword [ebp - 0xc24]
mov dx, word [ecx]
mov word [ebp - 0xf82], dx
mov eax, dword [ebp - 0xc24]
add eax, 2
mov dword [ebp - 0xc24], eax
mov cx, word [ebp - 0xf82]
mov word [ebp - 0x1fc], cx
mov edx, dword [ebp - 0xc28]
jmp dword [esi - 0x75]
add ah, byte [esi - 0x77]
test dword [eax + esi*8 - 1], edi
dec dword [ebx - 0xc2773]
inc dword [ebx - 0x7276fd3f]
fdiv st(3)
invalid
jmp dword [esi - 0x75]
xchg ebp, eax
jl 0x4063a3
invalid
jmp dword [esi - 0x77]
xchg ebp, eax
cld
invalid
invalid
call dword [edx - 0x18]
or al, byte [eax]
add byte [eax], al
add byte [ebx], dh
dec edi
inc edx
cmp eax, dword [edi + 0x3f]
xor eax, 0xc4833843
add al, 0x81
adc byte [ebx], dl
add byte [ecx + 0x6eb9f2], al
add byte [edx + 0x51], bl
push edi
add esp, 4
add ecx, 0x136a1
sub ecx, 0x670b
jmp 0x40caf8
pop ecx
movzx eax, word [ebp - 0x104]
test eax, eax
jne 0x406411
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
sub ecx, edx
mov dword [ebp - 0x14e4], ecx
jmp 0x406474
invalid
movzx eax, word [ebp - 0x1fc]
movzx ecx, word [ebp - 0x104]
cmp eax, ecx
je 0x406330
movzx edx, word [ebp - 0x1fc]
xor edx, 0x20
and byte [edi], cl
mov bh, 0x85
cld
invalid
invalid
invalid
movzx ecx, word [ebp - 0x1fc]
invalid
Function at 0x4063cc
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edi
sub edi, 0xbbf
and edi, 0x1160a
and edi, 0x10236
add edi, 0x14be2
pop edi
push edi
push eax
add esp, 4
or edi, 0x5353
or edi, 0x722
sub edi, 0xbb68
pop edi
lea edx, [ebp - 0x16cc]
mov dword [ebp - 0xc28], edx
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc24], ecx
xor edx, edx
mov word [ebp - 0x1fc], dx
xor eax, eax
mov word [ebp - 0x104], ax
push ebx
and ebx, 0x6d5f
pop ebx
push eax
or eax, 0x3d9b
jmp 0x406347
pop eax
push esi
sub esi, 0xdcbc
and esi, 0x5607
pop esi
push edx
push edx
add esp, 4
add edx, 0x5bc1
pop edx
mov ecx, dword [ebp - 0xc24]
mov dx, word [ecx]
mov word [ebp - 0xf82], dx
mov eax, dword [ebp - 0xc24]
add eax, 2
mov dword [ebp - 0xc24], eax
mov cx, word [ebp - 0xf82]
mov word [ebp - 0x1fc], cx
mov edx, dword [ebp - 0xc28]
jmp dword [esi - 0x75]
add ah, byte [esi - 0x77]
test dword [eax + esi*8 - 1], edi
dec dword [ebx - 0xc2773]
inc dword [ebx - 0x7276fd3f]
fdiv st(3)
invalid
jmp dword [esi - 0x75]
xchg ebp, eax
jl 0x4063a3
invalid
jmp dword [esi - 0x77]
xchg ebp, eax
cld
invalid
invalid
call dword [edx - 0x18]
or al, byte [eax]
add byte [eax], al
add byte [ebx], dh
dec edi
inc edx
cmp eax, dword [edi + 0x3f]
xor eax, 0xc4833843
add al, 0x81
adc byte [ebx], dl
add byte [ecx + 0x6eb9f2], al
add byte [edx + 0x51], bl
push edi
add esp, 4
add ecx, 0x136a1
sub ecx, 0x670b
jmp 0x40caf8
pop ecx
movzx eax, word [ebp - 0x104]
test eax, eax
jne 0x406411
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
sub ecx, edx
mov dword [ebp - 0x14e4], ecx
jmp 0x406474
invalid
movzx eax, word [ebp - 0x1fc]
movzx ecx, word [ebp - 0x104]
cmp eax, ecx
je 0x406330
movzx edx, word [ebp - 0x1fc]
xor edx, 0x20
and byte [edi], cl
mov bh, 0x85
cld
invalid
invalid
invalid
movzx ecx, word [ebp - 0x1fc]
invalid
Function at 0x4063e8
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edi
sub edi, 0xbbf
and edi, 0x1160a
and edi, 0x10236
add edi, 0x14be2
pop edi
push edi
push eax
add esp, 4
or edi, 0x5353
or edi, 0x722
sub edi, 0xbb68
pop edi
lea edx, [ebp - 0x16cc]
mov dword [ebp - 0xc28], edx
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc24], ecx
xor edx, edx
mov word [ebp - 0x1fc], dx
xor eax, eax
mov word [ebp - 0x104], ax
push ebx
and ebx, 0x6d5f
pop ebx
push eax
or eax, 0x3d9b
jmp 0x406347
pop eax
push esi
sub esi, 0xdcbc
and esi, 0x5607
pop esi
push edx
push edx
add esp, 4
add edx, 0x5bc1
pop edx
mov ecx, dword [ebp - 0xc24]
mov dx, word [ecx]
mov word [ebp - 0xf82], dx
mov eax, dword [ebp - 0xc24]
add eax, 2
mov dword [ebp - 0xc24], eax
mov cx, word [ebp - 0xf82]
mov word [ebp - 0x1fc], cx
mov edx, dword [ebp - 0xc28]
jmp dword [esi - 0x75]
add ah, byte [esi - 0x77]
test dword [eax + esi*8 - 1], edi
dec dword [ebx - 0xc2773]
inc dword [ebx - 0x7276fd3f]
fdiv st(3)
invalid
jmp dword [esi - 0x75]
xchg ebp, eax
jl 0x4063a3
invalid
jmp dword [esi - 0x77]
xchg ebp, eax
cld
invalid
invalid
call dword [edx - 0x18]
or al, byte [eax]
add byte [eax], al
add byte [ebx], dh
dec edi
inc edx
cmp eax, dword [edi + 0x3f]
xor eax, 0xc4833843
add al, 0x81
adc byte [ebx], dl
add byte [ecx + 0x6eb9f2], al
add byte [edx + 0x51], bl
push edi
add esp, 4
add ecx, 0x136a1
sub ecx, 0x670b
jmp 0x40caf8
pop ecx
movzx eax, word [ebp - 0x104]
test eax, eax
jne 0x406411
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
sub ecx, edx
mov dword [ebp - 0x14e4], ecx
jmp 0x406474
invalid
movzx eax, word [ebp - 0x1fc]
movzx ecx, word [ebp - 0x104]
cmp eax, ecx
je 0x406330
movzx edx, word [ebp - 0x1fc]
xor edx, 0x20
and byte [edi], cl
mov bh, 0x85
cld
invalid
invalid
invalid
movzx ecx, word [ebp - 0x1fc]
invalid
Function at 0x406430
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edi
sub edi, 0xbbf
and edi, 0x1160a
and edi, 0x10236
add edi, 0x14be2
pop edi
push edi
push eax
add esp, 4
or edi, 0x5353
or edi, 0x722
sub edi, 0xbb68
pop edi
lea edx, [ebp - 0x16cc]
mov dword [ebp - 0xc28], edx
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc24], ecx
xor edx, edx
mov word [ebp - 0x1fc], dx
xor eax, eax
mov word [ebp - 0x104], ax
push ebx
and ebx, 0x6d5f
pop ebx
push eax
or eax, 0x3d9b
jmp 0x406347
pop eax
push esi
sub esi, 0xdcbc
and esi, 0x5607
pop esi
push edx
push edx
add esp, 4
add edx, 0x5bc1
pop edx
mov ecx, dword [ebp - 0xc24]
mov dx, word [ecx]
mov word [ebp - 0xf82], dx
mov eax, dword [ebp - 0xc24]
add eax, 2
mov dword [ebp - 0xc24], eax
mov cx, word [ebp - 0xf82]
mov word [ebp - 0x1fc], cx
mov edx, dword [ebp - 0xc28]
jmp dword [esi - 0x75]
add ah, byte [esi - 0x77]
test dword [eax + esi*8 - 1], edi
dec dword [ebx - 0xc2773]
inc dword [ebx - 0x7276fd3f]
fdiv st(3)
invalid
jmp dword [esi - 0x75]
xchg ebp, eax
jl 0x4063a3
invalid
jmp dword [esi - 0x77]
xchg ebp, eax
cld
invalid
invalid
call dword [edx - 0x18]
or al, byte [eax]
add byte [eax], al
add byte [ebx], dh
dec edi
inc edx
cmp eax, dword [edi + 0x3f]
xor eax, 0xc4833843
add al, 0x81
adc byte [ebx], dl
add byte [ecx + 0x6eb9f2], al
add byte [edx + 0x51], bl
push edi
add esp, 4
add ecx, 0x136a1
sub ecx, 0x670b
jmp 0x40caf8
pop ecx
movzx eax, word [ebp - 0x104]
test eax, eax
jne 0x406411
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
sub ecx, edx
mov dword [ebp - 0x14e4], ecx
jmp 0x406474
invalid
movzx eax, word [ebp - 0x1fc]
movzx ecx, word [ebp - 0x104]
cmp eax, ecx
je 0x406330
movzx edx, word [ebp - 0x1fc]
xor edx, 0x20
and byte [edi], cl
mov bh, 0x85
cld
invalid
invalid
invalid
movzx ecx, word [ebp - 0x1fc]
invalid
Function at 0x406440
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edi
sub edi, 0xbbf
and edi, 0x1160a
and edi, 0x10236
add edi, 0x14be2
pop edi
push edi
push eax
add esp, 4
or edi, 0x5353
or edi, 0x722
sub edi, 0xbb68
pop edi
lea edx, [ebp - 0x16cc]
mov dword [ebp - 0xc28], edx
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc24], ecx
xor edx, edx
mov word [ebp - 0x1fc], dx
xor eax, eax
mov word [ebp - 0x104], ax
push ebx
and ebx, 0x6d5f
pop ebx
push eax
or eax, 0x3d9b
jmp 0x406347
pop eax
push esi
sub esi, 0xdcbc
and esi, 0x5607
pop esi
push edx
push edx
add esp, 4
add edx, 0x5bc1
pop edx
mov ecx, dword [ebp - 0xc24]
mov dx, word [ecx]
mov word [ebp - 0xf82], dx
mov eax, dword [ebp - 0xc24]
add eax, 2
mov dword [ebp - 0xc24], eax
mov cx, word [ebp - 0xf82]
mov word [ebp - 0x1fc], cx
mov edx, dword [ebp - 0xc28]
jmp dword [esi - 0x75]
add ah, byte [esi - 0x77]
test dword [eax + esi*8 - 1], edi
dec dword [ebx - 0xc2773]
inc dword [ebx - 0x7276fd3f]
fdiv st(3)
invalid
jmp dword [esi - 0x75]
xchg ebp, eax
jl 0x4063a3
invalid
jmp dword [esi - 0x77]
xchg ebp, eax
cld
invalid
invalid
call dword [edx - 0x18]
or al, byte [eax]
add byte [eax], al
add byte [ebx], dh
dec edi
inc edx
cmp eax, dword [edi + 0x3f]
xor eax, 0xc4833843
add al, 0x81
adc byte [ebx], dl
add byte [ecx + 0x6eb9f2], al
add byte [edx + 0x51], bl
push edi
add esp, 4
add ecx, 0x136a1
sub ecx, 0x670b
jmp 0x40caf8
pop ecx
movzx eax, word [ebp - 0x104]
test eax, eax
jne 0x406411
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
sub ecx, edx
mov dword [ebp - 0x14e4], ecx
jmp 0x406474
invalid
movzx eax, word [ebp - 0x1fc]
movzx ecx, word [ebp - 0x104]
cmp eax, ecx
je 0x406330
movzx edx, word [ebp - 0x1fc]
xor edx, 0x20
and byte [edi], cl
mov bh, 0x85
cld
invalid
invalid
invalid
movzx ecx, word [ebp - 0x1fc]
invalid

Function at 0x40649c
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
pop edi
push eax
push edi
add esp, 4
xor eax, 0xdaac
jmp 0x4064ae
pop eax
mov ecx, dword [ebp - 0x4d8]
mov dword [ebp - 0x6ec], ecx
jmp 0x406525
Function at 0x4064d4
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
and ecx, 0x630b
sub ecx, 0xa708
jmp 0x4064e6
pop ecx
push ebx
add ebx, 0x11b31
pop ebx
mov edx, dword [ebp - 0x4d8]
mov eax, dword [edx]
mov dword [ebp - 0x4d8], eax
mov ecx, dword [ebp - 0x4d8]
cmp ecx, dword [ebp - 0xc2c]
je 0x40651b
mov edx, dword [ebp - 0x4d8]
cmp dword [edx + 0x30], 0
jne 0x4062d1
mov dword [ebp - 0x6ec], 0
push eax
call 0x406536
add byte [ecx + ecx*2], bh
aas
dec ebx
aas
cmp cl, byte ss:[eax + 0x41]
add esp, 4
and eax, 0xb3f2
and eax, 0x174fc
jmp 0x40654a
pop eax
push ebx
push ecx
add esp, 4
xor ebx, 0x28a9
pop ebx
cmp dword [ebp - 0x6ec], 0
jne 0x4065a1
push edi
push edx
add esp, 4
jmp 0x40656b
add edi, 0x1692f
pop edi
push esi
sub esi, 0xc8d1
out dx, al
ror eax, 1
add byte [eax], al
or esi, 0xea0e
sub esi, 0x6372
add byte [esi + 0x52], bl
push ecx
add esp, 4
or edx, 0xb396
pop edx
mov dword [ebp - 0x738], 0
jmp 0x4070c8
push eax
call 0x4065ae
add byte [esi], dh
inc edx
inc eax
inc edi
dec edi
dec edi
add esp, 4
jmp 0x4065b8
and eax, 0xc907
pop eax
push ebx
or ebx, 0xc335
add byte [eax], al
xor ebx, 0x11a1c
and ebx, 0x12dfe
pop ebx
invalid

Function at 0x406536
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
and ecx, 0x630b
sub ecx, 0xa708
jmp 0x4064e6
pop ecx
push ebx
add ebx, 0x11b31
pop ebx
mov edx, dword [ebp - 0x4d8]
mov eax, dword [edx]
mov dword [ebp - 0x4d8], eax
mov ecx, dword [ebp - 0x4d8]
cmp ecx, dword [ebp - 0xc2c]
je 0x40651b
mov edx, dword [ebp - 0x4d8]
cmp dword [edx + 0x30], 0
jne 0x4062d1
mov dword [ebp - 0x6ec], 0
push eax
call 0x406536
add byte [ecx + ecx*2], bh
aas
dec ebx
aas
cmp cl, byte ss:[eax + 0x41]
add esp, 4
and eax, 0xb3f2
and eax, 0x174fc
jmp 0x40654a
pop eax
push ebx
push ecx
add esp, 4
xor ebx, 0x28a9
pop ebx
cmp dword [ebp - 0x6ec], 0
jne 0x4065a1
push edi
push edx
add esp, 4
jmp 0x40656b
add edi, 0x1692f
pop edi
push esi
sub esi, 0xc8d1
out dx, al
ror eax, 1
add byte [eax], al
or esi, 0xea0e
sub esi, 0x6372
add byte [esi + 0x52], bl
push ecx
add esp, 4
or edx, 0xb396
pop edx
mov dword [ebp - 0x738], 0
jmp 0x4070c8
push eax
call 0x4065ae
add byte [esi], dh
inc edx
inc eax
inc edi
dec edi
dec edi
add esp, 4
jmp 0x4065b8
and eax, 0xc907
pop eax
push ebx
or ebx, 0xc335
add byte [eax], al
xor ebx, 0x11a1c
and ebx, 0x12dfe
pop ebx
invalid