joyce8/EMBER2024-capa huggingface dataset:
Function at 0x404104
Capabilities:
Get number of processors
Parse credit card information
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
or eax, 0x1d56
call 0x403fe7
add byte [ebp + 0x49], cl
dec eax
cmp byte [edi + 0x36], cl
cmp al, 0x3c
cmp byte [ebx + 0xf5804c4], al
mov bh, 0x55
clc
test edx, edx
jne 0x404008
movzx eax, word [ebp - 0x54]
movzx ecx, word [ebp - 8]
sub eax, ecx
mov dword [ebp - 0x370], eax
jmp 0x40408b
movzx edx, word [ebp - 0x54]
movzx eax, word [ebp - 8]
cmp edx, eax
je 0x403f01
movzx ecx, word [ebp - 0x54]
xor ecx, 0x20
movzx edx, word [ebp - 8]
cmp ecx, edx
je 0x403f01
push ebx
push eax
add esp, 4
and ebx, 0x4fe9
add ebx, 0x1606c
and ebx, 0x4ed2
pop ebx
push eax
xor eax, 0xdd74
or eax, 0x203
pop eax
push ecx
push esi
add esp, 4
and ecx, 0xd2d2
pop ecx
movzx eax, word [ebp - 0x54]
movzx ecx, word [ebp - 8]
cmp eax, ecx
jge 0x404075
mov dword [ebp - 0x36c], 0xffffffff
jmp 0x40407f
mov dword [ebp - 0x36c], 1
mov edx, dword [ebp - 0x36c]
mov dword [ebp - 0x370], edx
cmp dword [ebp - 0x370], 0
jne 0x4040d4
push eax
push esi
add esp, 4
xor eax, 0x11aad
add eax, 0x1845b
add eax, 0xfdc0
pop eax
push esi
and esi, 0xb907
add esi, 0x16e68
pop esi
push edi
push edx
add esp, 4
add edi, 0x9cd9
pop edi
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x6c], eax
jmp 0x40416b
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx]
mov dword [ebp - 0xc4], edx
push ebx
call 0x4040f1
add byte [eax], bh
dec edi
dec ecx
inc esp
cmp byte [edi + 0x4f], al
cmp dword [ebx + 0xbe804c4], eax
add byte [eax], al
add byte [eax], al
dec edx
dec eax
xor ecx, dword [eax + 0x48]
inc ebp
dec ebx
xor al, 0x4e
inc eax
add esp, 4
add ebx, 0x11ca1
sub ebx, 0xd79c
pop ebx
mov eax, dword [ebp - 0xc4]
cmp eax, dword [ebp - 0x1ec]
je 0x404132
mov ecx, dword [ebp - 0xc4]
cmp dword [ecx + 0x30], 0
jne 0x403e76
push edi
call 0x40413f
add byte [0x3f364d3d], dh
aas
add esp, 4
xor edi, 0xf6a3
pop edi
push ebx
push ebx
add esp, 4
or ebx, 0x2532
jmp 0x40415b
jmp 0x404163
pop ebx
mov dword [ebp - 0x6c], 0
Function at 0x40413f
Capabilities:
Get number of processors
Parse credit card information
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
or eax, 0x1d56
call 0x403fe7
add byte [ebp + 0x49], cl
dec eax
cmp byte [edi + 0x36], cl
cmp al, 0x3c
cmp byte [ebx + 0xf5804c4], al
mov bh, 0x55
clc
test edx, edx
jne 0x404008
movzx eax, word [ebp - 0x54]
movzx ecx, word [ebp - 8]
sub eax, ecx
mov dword [ebp - 0x370], eax
jmp 0x40408b
movzx edx, word [ebp - 0x54]
movzx eax, word [ebp - 8]
cmp edx, eax
je 0x403f01
movzx ecx, word [ebp - 0x54]
xor ecx, 0x20
movzx edx, word [ebp - 8]
cmp ecx, edx
je 0x403f01
push ebx
push eax
add esp, 4
and ebx, 0x4fe9
add ebx, 0x1606c
and ebx, 0x4ed2
pop ebx
push eax
xor eax, 0xdd74
or eax, 0x203
pop eax
push ecx
push esi
add esp, 4
and ecx, 0xd2d2
pop ecx
movzx eax, word [ebp - 0x54]
movzx ecx, word [ebp - 8]
cmp eax, ecx
jge 0x404075
mov dword [ebp - 0x36c], 0xffffffff
jmp 0x40407f
mov dword [ebp - 0x36c], 1
mov edx, dword [ebp - 0x36c]
mov dword [ebp - 0x370], edx
cmp dword [ebp - 0x370], 0
jne 0x4040d4
push eax
push esi
add esp, 4
xor eax, 0x11aad
add eax, 0x1845b
add eax, 0xfdc0
pop eax
push esi
and esi, 0xb907
add esi, 0x16e68
pop esi
push edi
push edx
add esp, 4
add edi, 0x9cd9
pop edi
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x6c], eax
jmp 0x40416b
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx]
mov dword [ebp - 0xc4], edx
push ebx
call 0x4040f1
add byte [eax], bh
dec edi
dec ecx
inc esp
cmp byte [edi + 0x4f], al
cmp dword [ebx + 0xbe804c4], eax
add byte [eax], al
add byte [eax], al
dec edx
dec eax
xor ecx, dword [eax + 0x48]
inc ebp
dec ebx
xor al, 0x4e
inc eax
add esp, 4
add ebx, 0x11ca1
sub ebx, 0xd79c
pop ebx
mov eax, dword [ebp - 0xc4]
cmp eax, dword [ebp - 0x1ec]
je 0x404132
mov ecx, dword [ebp - 0xc4]
cmp dword [ecx + 0x30], 0
jne 0x403e76
push edi
call 0x40413f
add byte [0x3f364d3d], dh
aas
add esp, 4
xor edi, 0xf6a3
pop edi
push ebx
push ebx
add esp, 4
or ebx, 0x2532
jmp 0x40415b
jmp 0x404163
pop ebx
mov dword [ebp - 0x6c], 0
Function at 0x405102
Capabilities:
Get number of processors
Parse credit card information
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop eax
mov edx, dword [ebp - 0x204]
mov ax, word [edx]
mov word [ebp - 0x292], ax
mov ecx, dword [ebp - 0x204]
add ecx, 2
mov dword [ebp - 0x204], ecx
mov dx, word [ebp - 0x292]
mov word [ebp - 0x10], dx
push edi
push esi
add esp, 4
xor edi, 0x7d
or edi, 0xede2
pop edi
push esi
push eax
add esp, 4
and esi, 0x1fa
pop esi
push edi
or edi, 0x15925
xor edi, 0x10e13
add edi, 0xa5e6
pop edi
movzx eax, word [ebp - 0x10]
test eax, eax
jne 0x40517f
movzx ecx, word [ebp - 0x5c]
movzx edx, word [ebp - 0x10]
sub ecx, edx
mov dword [ebp - 0x2c0], ecx
jmp 0x405202
movzx eax, word [ebp - 0x5c]
movzx ecx, word [ebp - 0x10]
cmp eax, ecx
je 0x405078
movzx edx, word [ebp - 0x5c]
xor edx, 0x20
movzx eax, word [ebp - 0x10]
cmp edx, eax
je 0x405078
push esi
xor esi, 0x1665a
pop esi
push edx
or edx, 0x9b0f
pop edx
push ebx
push edx
add esp, 4
sub ebx, 0x15a43
call 0x4051ca
add byte [ebx], bh
dec ebx
dec edi
cmp eax, dword [edi + 0x38]
dec edi
add esp, 4
and ebx, 0x32aa
pop ebx
movzx ecx, word [ebp - 0x5c]
movzx edx, word [ebp - 0x10]
cmp ecx, edx
jge 0x4051ec
mov dword [ebp - 0x2bc], 0xffffffff
jmp 0x4051f6
mov dword [ebp - 0x2bc], 1
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0
jne 0x40524b
push ecx
call 0x405219
add byte [edi + 0x40], al
dec edx
xor eax, 0x833f3f36
les eax, [ebx + ebp*8]
pop es
aaa
dec edi
aaa
inc eax
inc esi
aaa
dec esi
jmp 0x40522c
pop ecx
push edx
jmp 0x405234
pop edx
push ebx
add ebx, 0x8cf
pop ebx
mov ecx, dword [ebp - 0xc8]
mov dword [ebp - 0x6c], ecx
jmp 0x4052e2
mov edx, dword [ebp - 0xc8]
mov eax, dword [edx]
mov dword [ebp - 0xc8], eax
push eax
push edi
add esp, 4
xor eax, 0x6233
sub eax, 0x4f
jmp 0x405272
pop eax
push esi
push esi
add esp, 4
and esi, 0x14179
and esi, 0x2bb5
and esi, 0x56a
pop esi
mov ecx, dword [ebp - 0xc8]
cmp ecx, dword [ebp - 0x208]
je 0x4052a9
mov edx, dword [ebp - 0xc8]
cmp dword [edx + 0x30], 0
jne 0x404fed
push edx
push ebx
add esp, 4
sub edx, 0xb9f9
xor edx, 0x149e5
pop edx
push esi
push edx
add esp, 4
add esi, 0x922f
add esi, 0x117ed
or esi, 0x10cd7
pop esi
push ecx
xor ecx, 0xdc91
pop ecx
mov dword [ebp - 0x6c], 0
Function at 0x4051ca
Capabilities:
Get number of processors
Parse credit card information
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop eax
mov edx, dword [ebp - 0x204]
mov ax, word [edx]
mov word [ebp - 0x292], ax
mov ecx, dword [ebp - 0x204]
add ecx, 2
mov dword [ebp - 0x204], ecx
mov dx, word [ebp - 0x292]
mov word [ebp - 0x10], dx
push edi
push esi
add esp, 4
xor edi, 0x7d
or edi, 0xede2
pop edi
push esi
push eax
add esp, 4
and esi, 0x1fa
pop esi
push edi
or edi, 0x15925
xor edi, 0x10e13
add edi, 0xa5e6
pop edi
movzx eax, word [ebp - 0x10]
test eax, eax
jne 0x40517f
movzx ecx, word [ebp - 0x5c]
movzx edx, word [ebp - 0x10]
sub ecx, edx
mov dword [ebp - 0x2c0], ecx
jmp 0x405202
movzx eax, word [ebp - 0x5c]
movzx ecx, word [ebp - 0x10]
cmp eax, ecx
je 0x405078
movzx edx, word [ebp - 0x5c]
xor edx, 0x20
movzx eax, word [ebp - 0x10]
cmp edx, eax
je 0x405078
push esi
xor esi, 0x1665a
pop esi
push edx
or edx, 0x9b0f
pop edx
push ebx
push edx
add esp, 4
sub ebx, 0x15a43
call 0x4051ca
add byte [ebx], bh
dec ebx
dec edi
cmp eax, dword [edi + 0x38]
dec edi
add esp, 4
and ebx, 0x32aa
pop ebx
movzx ecx, word [ebp - 0x5c]
movzx edx, word [ebp - 0x10]
cmp ecx, edx
jge 0x4051ec
mov dword [ebp - 0x2bc], 0xffffffff
jmp 0x4051f6
mov dword [ebp - 0x2bc], 1
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0
jne 0x40524b
push ecx
call 0x405219
add byte [edi + 0x40], al
dec edx
xor eax, 0x833f3f36
les eax, [ebx + ebp*8]
pop es
aaa
dec edi
aaa
inc eax
inc esi
aaa
dec esi
jmp 0x40522c
pop ecx
push edx
jmp 0x405234
pop edx
push ebx
add ebx, 0x8cf
pop ebx
mov ecx, dword [ebp - 0xc8]
mov dword [ebp - 0x6c], ecx
jmp 0x4052e2
mov edx, dword [ebp - 0xc8]
mov eax, dword [edx]
mov dword [ebp - 0xc8], eax
push eax
push edi
add esp, 4
xor eax, 0x6233
sub eax, 0x4f
jmp 0x405272
pop eax
push esi
push esi
add esp, 4
and esi, 0x14179
and esi, 0x2bb5
and esi, 0x56a
pop esi
mov ecx, dword [ebp - 0xc8]
cmp ecx, dword [ebp - 0x208]
je 0x4052a9
mov edx, dword [ebp - 0xc8]
cmp dword [edx + 0x30], 0
jne 0x404fed
push edx
push ebx
add esp, 4
sub edx, 0xb9f9
xor edx, 0x149e5
pop edx
push esi
push edx
add esp, 4
add esi, 0x922f
add esi, 0x117ed
or esi, 0x10cd7
pop esi
push ecx
xor ecx, 0xdc91
pop ecx
mov dword [ebp - 0x6c], 0
Function at 0x405219
Capabilities:
Get number of processors
Parse credit card information
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop eax
mov edx, dword [ebp - 0x204]
mov ax, word [edx]
mov word [ebp - 0x292], ax
mov ecx, dword [ebp - 0x204]
add ecx, 2
mov dword [ebp - 0x204], ecx
mov dx, word [ebp - 0x292]
mov word [ebp - 0x10], dx
push edi
push esi
add esp, 4
xor edi, 0x7d
or edi, 0xede2
pop edi
push esi
push eax
add esp, 4
and esi, 0x1fa
pop esi
push edi
or edi, 0x15925
xor edi, 0x10e13
add edi, 0xa5e6
pop edi
movzx eax, word [ebp - 0x10]
test eax, eax
jne 0x40517f
movzx ecx, word [ebp - 0x5c]
movzx edx, word [ebp - 0x10]
sub ecx, edx
mov dword [ebp - 0x2c0], ecx
jmp 0x405202
movzx eax, word [ebp - 0x5c]
movzx ecx, word [ebp - 0x10]
cmp eax, ecx
je 0x405078
movzx edx, word [ebp - 0x5c]
xor edx, 0x20
movzx eax, word [ebp - 0x10]
cmp edx, eax
je 0x405078
push esi
xor esi, 0x1665a
pop esi
push edx
or edx, 0x9b0f
pop edx
push ebx
push edx
add esp, 4
sub ebx, 0x15a43
call 0x4051ca
add byte [ebx], bh
dec ebx
dec edi
cmp eax, dword [edi + 0x38]
dec edi
add esp, 4
and ebx, 0x32aa
pop ebx
movzx ecx, word [ebp - 0x5c]
movzx edx, word [ebp - 0x10]
cmp ecx, edx
jge 0x4051ec
mov dword [ebp - 0x2bc], 0xffffffff
jmp 0x4051f6
mov dword [ebp - 0x2bc], 1
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0
jne 0x40524b
push ecx
call 0x405219
add byte [edi + 0x40], al
dec edx
xor eax, 0x833f3f36
les eax, [ebx + ebp*8]
pop es
aaa
dec edi
aaa
inc eax
inc esi
aaa
dec esi
jmp 0x40522c
pop ecx
push edx
jmp 0x405234
pop edx
push ebx
add ebx, 0x8cf
pop ebx
mov ecx, dword [ebp - 0xc8]
mov dword [ebp - 0x6c], ecx
jmp 0x4052e2
mov edx, dword [ebp - 0xc8]
mov eax, dword [edx]
mov dword [ebp - 0xc8], eax
push eax
push edi
add esp, 4
xor eax, 0x6233
sub eax, 0x4f
jmp 0x405272
pop eax
push esi
push esi
add esp, 4
and esi, 0x14179
and esi, 0x2bb5
and esi, 0x56a
pop esi
mov ecx, dword [ebp - 0xc8]
cmp ecx, dword [ebp - 0x208]
je 0x4052a9
mov edx, dword [ebp - 0xc8]
cmp dword [edx + 0x30], 0
jne 0x404fed
push edx
push ebx
add esp, 4
sub edx, 0xb9f9
xor edx, 0x149e5
pop edx
push esi
push edx
add esp, 4
add esi, 0x922f
add esi, 0x117ed
or esi, 0x10cd7
pop esi
push ecx
xor ecx, 0xdc91
pop ecx
mov dword [ebp - 0x6c], 0
Function at 0x406ee0
Capabilities:
Get number of processors
Parse credit card information
Parse pe header
Resolve function by parsing pe exports

Disassembly:
jmp 0x406f68
cmp dword [ebp - 0x300], 0
jne 0x406fb4
push edi
or edi, 0x14617
or edi, 0x18253
sub edi, 0x7a4f
pop edi
push esi
push esi
add esp, 4
and esi, 0x52ac
jmp 0x406f99
jmp 0x406fa2
pop esi
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xec], eax
jmp 0x40704e
mov ecx, dword [ebp - 0xa4]
mov edx, dword [ecx]
mov dword [ebp - 0xa4], edx
push edi
push esi
add esp, 4
xor edi, 0x17a99
jmp 0x406fd2
pop edi
push ebx
push edi
add esp, 4
call 0x406fe8
add byte [ebp + 0x50], cl
inc esp
aas
inc ebx
dec eax
cmp eax, 0x8349414e
les eax, [ebx + ebp*8]
push es
inc esp
inc esp
inc ebx
cmp eax, 0x8b5b343c
test dword [edi + edi*8 - 1], ebx
invalid
Function at 0x4075b0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
call fcn.004075c2
add byte [eax + 0x49], al
inc esp
inc esi
dec ebp
push eax

Function at 0x4075c2
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
inc eax
xor al, byte [ebx - 0x38a6fb3c]
add esp, 4
pop ecx
mov dword [ebp - 0x248], 1
cmp dword [ebp - 0x248], 0
jne 0x407619
push eax
push edi
add esp, 4
jmp 0x4075e4
or eax, 0x12da3
pop eax
push ecx
push esi
add esp, 4
jmp 0x407331

Function at 0x4075f0
Capabilities:
Get number of processors
Parse credit card information
Parse pe header
Resolve function by parsing pe exports

Disassembly:
call 0x407600
add byte [0x36484b4f], dh
inc ebx
inc ecx
cmp byte [edx + 0x47], al
add esp, 4
jmp 0x40760a
pop ecx
invalid
test eax, esi
sti
invalid

Function at 0x407600
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
call 0x407600
add byte [0x36484b4f], dh
inc ebx
inc ecx
cmp byte [edx + 0x47], al
add esp, 4
jmp 0x40760a
pop ecx
invalid
test eax, esi
sti
invalid

Function at 0x407659
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
and edx, 0x157cd
add edx, 0x15104
pop edx
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x414], edx
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x418], eax
lea ecx, [ebp - 0x2b0]

Function at 0x4076e0
Capabilities:
Get number of processors
Parse credit card information
Parse pe header
Resolve function by parsing pe exports

Disassembly:
pop edx
push edi
push esi
add esp, 4
xor edi, 0x16c7d
sub edi, 0x13419
call 0x407701
add byte [edx + 0x48], al
inc ebp
inc esp
xor edx, dword [eax + 0x40]
dec eax

Function at 0x407700
Capabilities:
Get number of processors
Parse credit card information
Parse pe header
Resolve function by parsing pe exports

Disassembly:
inc ebp
add esp, 4
pop edi
push edi
xor edi, 0xbc87
xor edi, 0xad4a
add byte [eax], al
add edi, 0x5cb
pop edi
push edx
call 0x407727
add byte [eax + 0x38], cl
dec esi
dec edx
push eax
cmp dword [esi], edi
add esp, 4
or edx, 0xba2e

Function at 0x407701
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
inc ebp
add esp, 4
pop edi
push edi
xor edi, 0xbc87
xor edi, 0xad4a
add byte [eax], al
add edi, 0x5cb
pop edi
push edx
call 0x407727
add byte [eax + 0x38], cl
dec esi
dec edx
push eax
cmp dword [esi], edi
add esp, 4
or edx, 0xba2e

Function at 0x407727
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
inc ebp
add esp, 4
pop edi
push edi
xor edi, 0xbc87
xor edi, 0xad4a
add byte [eax], al
add edi, 0x5cb
pop edi
push edx
call 0x407727
add byte [eax + 0x38], cl
dec esi
dec edx
push eax
cmp dword [esi], edi
add esp, 4
or edx, 0xba2e
Function at 0x407c6f
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop eax
push edi
sub edi, 0x15338
jmp 0x407c82
pop edi
mov edx, dword [ebp - 0x114]
mov dword [ebp - 0xac], edx
jmp 0x40816e

Function at 0x407ce1
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
and esi, 0x9ab6
pop esi
mov eax, 8
imul ecx, eax, 0
mov edx, dword [ebp - 0x320]
mov eax, dword [edx + ecx + 0x78]
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0
jne 0x407d4f
push ebx
push ebx
add esp, 4
add ebx, 0x6a6d
xor ebx, 0xa836
sub ebx, 0xa9b4
sub ebx, 0xf251
pop ebx
push esi
xor esi, 0xf49
xor esi, 0x81a2
and esi, 0x14898
pop esi
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0xac], ecx
jmp 0x40816e
push eax
xor eax, 0x10fa5
call 0x407d65
add byte [edx], bh
dec ebx
xor eax, 0x4c483b44
aaa
dec edi
add esp, 4
sub eax, 0x16d2
pop eax
push ecx
push eax
add esp, 4
and ecx, 0x2a8e
xor ecx, 0x14b14
pop ecx
mov edx, dword [ebp - 0x80]
add edx, dword [ebp - 0x324]
mov dword [ebp - 0x100], edx
jne 0x407dd5
push esi
add esi, 0x761e
call 0x407da9
add byte [ebp + 0x43], cl
dec eax
aaa
inc edi
dec edi
cmp byte [edi], bh
dec ecx
cmp eax, 0x8104c483
into
add dl, byte [eax]
add byte [esi + 0x56], bl
push ecx
add esp, 4
sub esi, 0x9235
jmp 0x407dc3
pop esi
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0xac], eax
jmp 0x40816e
mov ecx, dword [ebp - 0x100]
mov edx, dword [ebp - 0x80]
add edx, dword [ecx + 0x20]
mov dword [ebp - 0x424], edx
push ecx
add ecx, 0x17570
or ecx, 0x12402
xor ecx, 0x710c
pop ecx
push esi
push eax
add esp, 4
add esi, 0x74fb
add esi, 0x116b6
add esi, 0x288
xor esi, 0x2cdb
pop esi
mov eax, dword [ebp - 0x100]
mov ecx, dword [ebp - 0x80]
add ecx, dword [eax + 0x24]
mov dword [ebp - 0x428], ecx
push ecx
add ecx, 0x18063
jmp 0x407e3a
and ecx, 0x14b24
pop ecx
push eax
xor eax, 0x4e6a
and eax, 0x11af4
sub eax, 0x13994
jmp 0x407e5c
pop eax
mov edx, dword [ebp - 0x100]
mov eax, dword [ebp - 0x80]
add eax, dword [edx + 0x1c]
mov dword [ebp - 0x42c], eax
mov dword [ebp - 0x104], 0
jmp 0x407e8a
Function at 0x407d65
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
and esi, 0x9ab6
pop esi
mov eax, 8
imul ecx, eax, 0
mov edx, dword [ebp - 0x320]
mov eax, dword [edx + ecx + 0x78]
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0
jne 0x407d4f
push ebx
push ebx
add esp, 4
add ebx, 0x6a6d
xor ebx, 0xa836
sub ebx, 0xa9b4
sub ebx, 0xf251
pop ebx
push esi
xor esi, 0xf49
xor esi, 0x81a2
and esi, 0x14898
pop esi
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0xac], ecx
jmp 0x40816e
push eax
xor eax, 0x10fa5
call 0x407d65
add byte [edx], bh
dec ebx
xor eax, 0x4c483b44
aaa
dec edi
add esp, 4
sub eax, 0x16d2
pop eax
push ecx
push eax
add esp, 4
and ecx, 0x2a8e
xor ecx, 0x14b14
pop ecx
mov edx, dword [ebp - 0x80]
add edx, dword [ebp - 0x324]
mov dword [ebp - 0x100], edx
jne 0x407dd5
push esi
add esi, 0x761e
call 0x407da9
add byte [ebp + 0x43], cl
dec eax
aaa
inc edi
dec edi
cmp byte [edi], bh
dec ecx
cmp eax, 0x8104c483
into
add dl, byte [eax]
add byte [esi + 0x56], bl
push ecx
add esp, 4
sub esi, 0x9235
jmp 0x407dc3
pop esi
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0xac], eax
jmp 0x40816e
mov ecx, dword [ebp - 0x100]
mov edx, dword [ebp - 0x80]
add edx, dword [ecx + 0x20]
mov dword [ebp - 0x424], edx
push ecx
add ecx, 0x17570
or ecx, 0x12402
xor ecx, 0x710c
pop ecx
push esi
push eax
add esp, 4
add esi, 0x74fb
add esi, 0x116b6
add esi, 0x288
xor esi, 0x2cdb
pop esi
mov eax, dword [ebp - 0x100]
mov ecx, dword [ebp - 0x80]
add ecx, dword [eax + 0x24]
mov dword [ebp - 0x428], ecx
push ecx
add ecx, 0x18063
jmp 0x407e3a
and ecx, 0x14b24
pop ecx
push eax
xor eax, 0x4e6a
and eax, 0x11af4
sub eax, 0x13994
jmp 0x407e5c
pop eax
mov edx, dword [ebp - 0x100]
mov eax, dword [ebp - 0x80]
add eax, dword [edx + 0x1c]
mov dword [ebp - 0x42c], eax
mov dword [ebp - 0x104], 0
jmp 0x407e8a
Function at 0x407da9
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
and esi, 0x9ab6
pop esi
mov eax, 8
imul ecx, eax, 0
mov edx, dword [ebp - 0x320]
mov eax, dword [edx + ecx + 0x78]
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0
jne 0x407d4f
push ebx
push ebx
add esp, 4
add ebx, 0x6a6d
xor ebx, 0xa836
sub ebx, 0xa9b4
sub ebx, 0xf251
pop ebx
push esi
xor esi, 0xf49
xor esi, 0x81a2
and esi, 0x14898
pop esi
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0xac], ecx
jmp 0x40816e
push eax
xor eax, 0x10fa5
call 0x407d65
add byte [edx], bh
dec ebx
xor eax, 0x4c483b44
aaa
dec edi
add esp, 4
sub eax, 0x16d2
pop eax
push ecx
push eax
add esp, 4
and ecx, 0x2a8e
xor ecx, 0x14b14
pop ecx
mov edx, dword [ebp - 0x80]
add edx, dword [ebp - 0x324]
mov dword [ebp - 0x100], edx
jne 0x407dd5
push esi
add esi, 0x761e
call 0x407da9
add byte [ebp + 0x43], cl
dec eax
aaa
inc edi
dec edi
cmp byte [edi], bh
dec ecx
cmp eax, 0x8104c483
into
add dl, byte [eax]
add byte [esi + 0x56], bl
push ecx
add esp, 4
sub esi, 0x9235
jmp 0x407dc3
pop esi
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0xac], eax
jmp 0x40816e
mov ecx, dword [ebp - 0x100]
mov edx, dword [ebp - 0x80]
add edx, dword [ecx + 0x20]
mov dword [ebp - 0x424], edx
push ecx
add ecx, 0x17570
or ecx, 0x12402
xor ecx, 0x710c
pop ecx
push esi
push eax
add esp, 4
add esi, 0x74fb
add esi, 0x116b6
add esi, 0x288
xor esi, 0x2cdb
pop esi
mov eax, dword [ebp - 0x100]
mov ecx, dword [ebp - 0x80]
add ecx, dword [eax + 0x24]
mov dword [ebp - 0x428], ecx
push ecx
add ecx, 0x18063
jmp 0x407e3a
and ecx, 0x14b24
pop ecx
push eax
xor eax, 0x4e6a
and eax, 0x11af4
sub eax, 0x13994
jmp 0x407e5c
pop eax
mov edx, dword [ebp - 0x100]
mov eax, dword [ebp - 0x80]
add eax, dword [edx + 0x1c]
mov dword [ebp - 0x42c], eax
mov dword [ebp - 0x104], 0
jmp 0x407e8a
Function at 0x407ebf
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [ebp - 0x104]
add ecx, 1
mov dword [ebp - 0x104], ecx
mov edx, dword [ebp - 0x100]
mov eax, dword [ebp - 0x104]
cmp eax, dword [edx + 0x18]
jae 0x408162
push eax
sub eax, 0x11461
jmp 0x407eaf
call 0x407ebf
add byte [ebx], dh
cmp dh, byte [esi]
inc ebp
aaa
dec eax
add esp, 4
les eax, [eax + ebx*2]
push edx
or edx, 0xd2e4
sub edx, 0x13fb3
pop edx
mov ecx, dword [ebp - 0x104]
mov edx, dword [ebp - 0x424]
mov eax, dword [ebp - 0x80]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x10c], eax
push edx
jmp 0x407ef2
xor edx, 0x1c4a
pop edx
push ebx
xor ebx, 0x6da8
add ebx, 0xaf43
and ebx, 0x167b
sub ebx, 0x3c48
pop ebx
push edi
jmp 0x407f1a
pop edi
mov ecx, dword [ebp - 0x104]
mov edx, dword [ebp - 0x428]
movzx eax, word [edx + ecx*2]
mov ecx, dword [ebp - 0x42c]
dec dword [ebx + 0x14038055]
or dword [ecx - 0x42f6b], 0xc88150ff
sbb dword [eax + eax], 0
xor eax, 0x316f
or eax, 0x83b0
xor eax, 0xf40c
pop eax
push eax
push edx
add esp, 4
and eax, 0x527f
sub eax, 0x15261
sub eax, 0x141ed
pop eax
mov dword [ebp - 0x3c], 0
jmp 0x407f81
mov eax, dword [ebp - 0x3c]
add eax, 1
mov dword [ebp - 0x3c], eax
invalid
mov ecx, dword [ebp - 0x10c]
add ecx, dword [ebp - 0x3c]
movsx edx, byte [ecx]
test edx, edx
je 0x40801d
mov eax, dword [ebp - 0x3c]
movsx ecx, byte [ebp + eax - 0x184]
test ecx, ecx
je 0x40801d
push ebx
call 0x407fb4
add byte [edi + edi], dh
cmp dword [edi], esi
dec edi
mov edx, dword [ebp - 0x3c]
movsx eax, byte [ebp + edx - 0x184]
cmp ecx, eax
jne 0x408016
jmp 0x407f78
jmp 0x40801d
push ecx
sub ecx, 0xb80
or byte [ebx], 0
add byte [ecx + 0x1281ce1], al
add byte [ecx + 0x57d4e1], al
add byte [ecx + 0xa121c9], al
add byte [ecx + 0x56], bl
push ecx
add esp, 4
xor esi, 0x12b3c
add esi, 0x62f8
sub esi, 0xf040
pop esi
mov ecx, dword [ebp - 0x10c]
add ecx, dword [ebp - 0x3c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x3c]
movsx ecx, byte [ebp + eax - 0x184]
mov word [0xfffffe7c], es
cmp edx, ecx
jne 0x408079
mov dword [ebp - 0x258], 0
jmp 0x408114
push edx
and edx, 0xb88b
or edx, 0x16543
sub edx, 0x39df
xor edx, 0x15aa9
pop edx
push eax
push edx
add esp, 4
add eax, 0xf04b
or eax, 0xfaa8
add eax, 0x12112
pop eax
mov edx, dword [ebp - 0x10c]
add edx, dword [ebp - 0x3c]
movsx eax, byte [edx]
or eax, 0x20
mov ecx, dword [ebp - 0x3c]
movsx edx, byte [ebp + ecx - 0x184]
or edx, 0x20
cmp eax, edx
jge 0x4080d8
mov dword [ebp - 0x258], 0xffffffff
jmp 0x408114
push eax
call 0x4080e6
add byte [ebp + 0x47], al
dec ebx
aaa
xor bh, byte [0x4c48346]
add eax, 0x8dbe
jmp 0x4080f5
xor eax, 0xfcc6
pop eax
push edx
sub edx, 0x11790
and edx, 0x105f7
pop edx
mov dword [ebp - 0x258], 1
cmp dword [ebp - 0x258], 0
jne 0x40815d
push ebx
and ebx, 0x4b19
sub ebx, 0x7f31
add ebx, 0x11657
pop ebx
push edi
or edi, 0x98ff
call 0x408145
add byte [ebp + 0x4c], cl
cmp dword [ebp + 0x46], eax
dec esi
aas
add esp, 4
or edi, 0x1548b
pop edi
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0xac], eax
jmp 0x40816e
jmp 0x407e7b
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0xac], ecx
mov edx, dword [ebp - 0xac]
mov dword [ebp - 0x1bc], edx