joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5543d2
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edi
xor ecx, ecx
mov word [ebp - 0x64], cx
xor edx, edx
mov word [ebp - 0x18], dx
push eax
push edi
add esp, 4
add eax, 0x76f4
pop eax
push ecx
push eax
add esp, 4
xor ecx, 0x14699
add ecx, 0x5810
xor ecx, 0xb7b7
or ecx, 0xf859
pop ecx
push esi
xor esi, 0x7bcf
pop esi
mov eax, dword [ebp - 0x23c]
mov cx, word [eax]
mov word [ebp - 0x1ce], cx
mov edx, dword [ebp - 0x23c]
add edx, 2
mov dword [ebp - 0x23c], edx
mov ax, word [ebp - 0x1ce]
mov word [ebp - 0x64], ax
push eax
jmp 0x554445
pop eax
push esi
and esi, 0x1224e
jmp 0x554455
pop esi
push edi
sub edi, 0xf52a
xor edi, 0xc0d0
and edi, 0x105a2
add edi, 0x1864b
pop edi
mov ecx, dword [ebp - 0x240]
mov dx, word [ecx]
mov word [ebp - 0x1d0], dx
mov eax, dword [ebp - 0x240]
add eax, 2
mov dword [ebp - 0x240], eax
mov cx, word [ebp - 0x1d0]
mov word [ebp - 0x18], cx
push ebx
call 0x5544a9
add byte [ecx], bh
xor dh, byte [esi]
inc ecx
dec esi
inc ecx
inc ebx
add esp, 4
or ebx, 0x461d
add ebx, 0x13dea
pop ebx
push esi
call 0x5544c8
add byte [ecx*2 + 0x3d3a4a45], dh
aas
push eax
add esp, 4
pop esi
movzx edx, word [ebp - 0x18]
test edx, edx
jne 0x5544e9
movzx eax, word [ebp - 0x64]
movzx ecx, word [ebp - 0x18]
sub eax, ecx
mov dword [ebp - 0x300], eax
jmp 0x55456c
movzx edx, word [ebp - 0x64]
movzx eax, word [ebp - 0x18]
cmp edx, eax
je 0x5543e2
movzx ecx, word [ebp - 0x64]
xor ecx, 0x20
movzx edx, word [ebp - 0x18]
cmp ecx, edx
je 0x5543e2
push esi
jmp 0x554515
xor esi, 0x9d0e
xor esi, 0xb854
or esi, 0x3c24
pop esi
push edx
jmp 0x554531
pop edx
push edi
push edx
add esp, 4
sub edi, 0x5125
pop edi
movzx eax, word [ebp - 0x64]
movzx ecx, word [ebp - 0x18]
cmp eax, ecx
jge 0x554556
mov dword [ebp - 0x2fc], 0xffffffff
jmp 0x554560
mov dword [ebp - 0x2fc], 1
mov edx, dword [ebp - 0x2fc]
mov dword [ebp - 0x300], edx
cmp dword [ebp - 0x300], 0
jne 0x5545b8
push ebx
push edx
add esp, 4
call 0x554589
add byte [ebx + edi + 0x4a], al
xor eax, 0x3c3f374e
dec esi
add esp, 4
sub ebx, 0x12764
pop ebx
push ecx
sub ecx, 0x10e65
or ecx, 0x15e53
sub ecx, 0x3ef5
pop ecx
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xec], eax
jmp 0x554652
mov ecx, dword [ebp - 0xa4]
mov edx, dword [ecx]
mov dword [ebp - 0xa4], edx
push edx
push edi
add esp, 4
xor edx, 0x17813
sub edx, 0x9d11
jmp 0x5545dd
or edx, 0xd367
pop edx
push ebx
or ebx, 0x69e4
and ebx, 0x9c1c
and ebx, 0x3248
pop ebx
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x244]
je 0x554616
mov ecx, dword [ebp - 0xa4]
cmp dword [ecx + 0x30], 0
jne 0x554357
push edi
xor edi, 0x1643f
pop edi
push ebx
push ecx
add esp, 4
add ebx, 0x7bd2
or ebx, 0x77b6
xor ebx, 0xe88c
or ebx, 0x13b06
pop ebx
push edi
push eax
add esp, 4
or edi, 0xee53
pop edi
mov dword [ebp - 0xec], 0
Function at 0x5544a9
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edi
xor ecx, ecx
mov word [ebp - 0x64], cx
xor edx, edx
mov word [ebp - 0x18], dx
push eax
push edi
add esp, 4
add eax, 0x76f4
pop eax
push ecx
push eax
add esp, 4
xor ecx, 0x14699
add ecx, 0x5810
xor ecx, 0xb7b7
or ecx, 0xf859
pop ecx
push esi
xor esi, 0x7bcf
pop esi
mov eax, dword [ebp - 0x23c]
mov cx, word [eax]
mov word [ebp - 0x1ce], cx
mov edx, dword [ebp - 0x23c]
add edx, 2
mov dword [ebp - 0x23c], edx
mov ax, word [ebp - 0x1ce]
mov word [ebp - 0x64], ax
push eax
jmp 0x554445
pop eax
push esi
and esi, 0x1224e
jmp 0x554455
pop esi
push edi
sub edi, 0xf52a
xor edi, 0xc0d0
and edi, 0x105a2
add edi, 0x1864b
pop edi
mov ecx, dword [ebp - 0x240]
mov dx, word [ecx]
mov word [ebp - 0x1d0], dx
mov eax, dword [ebp - 0x240]
add eax, 2
mov dword [ebp - 0x240], eax
mov cx, word [ebp - 0x1d0]
mov word [ebp - 0x18], cx
push ebx
call 0x5544a9
add byte [ecx], bh
xor dh, byte [esi]
inc ecx
dec esi
inc ecx
inc ebx
add esp, 4
or ebx, 0x461d
add ebx, 0x13dea
pop ebx
push esi
call 0x5544c8
add byte [ecx*2 + 0x3d3a4a45], dh
aas
push eax
add esp, 4
pop esi
movzx edx, word [ebp - 0x18]
test edx, edx
jne 0x5544e9
movzx eax, word [ebp - 0x64]
movzx ecx, word [ebp - 0x18]
sub eax, ecx
mov dword [ebp - 0x300], eax
jmp 0x55456c
movzx edx, word [ebp - 0x64]
movzx eax, word [ebp - 0x18]
cmp edx, eax
je 0x5543e2
movzx ecx, word [ebp - 0x64]
xor ecx, 0x20
movzx edx, word [ebp - 0x18]
cmp ecx, edx
je 0x5543e2
push esi
jmp 0x554515
xor esi, 0x9d0e
xor esi, 0xb854
or esi, 0x3c24
pop esi
push edx
jmp 0x554531
pop edx
push edi
push edx
add esp, 4
sub edi, 0x5125
pop edi
movzx eax, word [ebp - 0x64]
movzx ecx, word [ebp - 0x18]
cmp eax, ecx
jge 0x554556
mov dword [ebp - 0x2fc], 0xffffffff
jmp 0x554560
mov dword [ebp - 0x2fc], 1
mov edx, dword [ebp - 0x2fc]
mov dword [ebp - 0x300], edx
cmp dword [ebp - 0x300], 0
jne 0x5545b8
push ebx
push edx
add esp, 4
call 0x554589
add byte [ebx + edi + 0x4a], al
xor eax, 0x3c3f374e
dec esi
add esp, 4
sub ebx, 0x12764
pop ebx
push ecx
sub ecx, 0x10e65
or ecx, 0x15e53
sub ecx, 0x3ef5
pop ecx
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xec], eax
jmp 0x554652
mov ecx, dword [ebp - 0xa4]
mov edx, dword [ecx]
mov dword [ebp - 0xa4], edx
push edx
push edi
add esp, 4
xor edx, 0x17813
sub edx, 0x9d11
jmp 0x5545dd
or edx, 0xd367
pop edx
push ebx
or ebx, 0x69e4
and ebx, 0x9c1c
and ebx, 0x3248
pop ebx
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x244]
je 0x554616
mov ecx, dword [ebp - 0xa4]
cmp dword [ecx + 0x30], 0
jne 0x554357
push edi
xor edi, 0x1643f
pop edi
push ebx
push ecx
add esp, 4
add ebx, 0x7bd2
or ebx, 0x77b6
xor ebx, 0xe88c
or ebx, 0x13b06
pop ebx
push edi
push eax
add esp, 4
or edi, 0xee53
pop edi
mov dword [ebp - 0xec], 0
Function at 0x5544c8
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edi
xor ecx, ecx
mov word [ebp - 0x64], cx
xor edx, edx
mov word [ebp - 0x18], dx
push eax
push edi
add esp, 4
add eax, 0x76f4
pop eax
push ecx
push eax
add esp, 4
xor ecx, 0x14699
add ecx, 0x5810
xor ecx, 0xb7b7
or ecx, 0xf859
pop ecx
push esi
xor esi, 0x7bcf
pop esi
mov eax, dword [ebp - 0x23c]
mov cx, word [eax]
mov word [ebp - 0x1ce], cx
mov edx, dword [ebp - 0x23c]
add edx, 2
mov dword [ebp - 0x23c], edx
mov ax, word [ebp - 0x1ce]
mov word [ebp - 0x64], ax
push eax
jmp 0x554445
pop eax
push esi
and esi, 0x1224e
jmp 0x554455
pop esi
push edi
sub edi, 0xf52a
xor edi, 0xc0d0
and edi, 0x105a2
add edi, 0x1864b
pop edi
mov ecx, dword [ebp - 0x240]
mov dx, word [ecx]
mov word [ebp - 0x1d0], dx
mov eax, dword [ebp - 0x240]
add eax, 2
mov dword [ebp - 0x240], eax
mov cx, word [ebp - 0x1d0]
mov word [ebp - 0x18], cx
push ebx
call 0x5544a9
add byte [ecx], bh
xor dh, byte [esi]
inc ecx
dec esi
inc ecx
inc ebx
add esp, 4
or ebx, 0x461d
add ebx, 0x13dea
pop ebx
push esi
call 0x5544c8
add byte [ecx*2 + 0x3d3a4a45], dh
aas
push eax
add esp, 4
pop esi
movzx edx, word [ebp - 0x18]
test edx, edx
jne 0x5544e9
movzx eax, word [ebp - 0x64]
movzx ecx, word [ebp - 0x18]
sub eax, ecx
mov dword [ebp - 0x300], eax
jmp 0x55456c
movzx edx, word [ebp - 0x64]
movzx eax, word [ebp - 0x18]
cmp edx, eax
je 0x5543e2
movzx ecx, word [ebp - 0x64]
xor ecx, 0x20
movzx edx, word [ebp - 0x18]
cmp ecx, edx
je 0x5543e2
push esi
jmp 0x554515
xor esi, 0x9d0e
xor esi, 0xb854
or esi, 0x3c24
pop esi
push edx
jmp 0x554531
pop edx
push edi
push edx
add esp, 4
sub edi, 0x5125
pop edi
movzx eax, word [ebp - 0x64]
movzx ecx, word [ebp - 0x18]
cmp eax, ecx
jge 0x554556
mov dword [ebp - 0x2fc], 0xffffffff
jmp 0x554560
mov dword [ebp - 0x2fc], 1
mov edx, dword [ebp - 0x2fc]
mov dword [ebp - 0x300], edx
cmp dword [ebp - 0x300], 0
jne 0x5545b8
push ebx
push edx
add esp, 4
call 0x554589
add byte [ebx + edi + 0x4a], al
xor eax, 0x3c3f374e
dec esi
add esp, 4
sub ebx, 0x12764
pop ebx
push ecx
sub ecx, 0x10e65
or ecx, 0x15e53
sub ecx, 0x3ef5
pop ecx
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xec], eax
jmp 0x554652
mov ecx, dword [ebp - 0xa4]
mov edx, dword [ecx]
mov dword [ebp - 0xa4], edx
push edx
push edi
add esp, 4
xor edx, 0x17813
sub edx, 0x9d11
jmp 0x5545dd
or edx, 0xd367
pop edx
push ebx
or ebx, 0x69e4
and ebx, 0x9c1c
and ebx, 0x3248
pop ebx
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x244]
je 0x554616
mov ecx, dword [ebp - 0xa4]
cmp dword [ecx + 0x30], 0
jne 0x554357
push edi
xor edi, 0x1643f
pop edi
push ebx
push ecx
add esp, 4
add ebx, 0x7bd2
or ebx, 0x77b6
xor ebx, 0xe88c
or ebx, 0x13b06
pop ebx
push edi
push eax
add esp, 4
or edi, 0xee53
pop edi
mov dword [ebp - 0xec], 0
Function at 0x554589
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edi
xor ecx, ecx
mov word [ebp - 0x64], cx
xor edx, edx
mov word [ebp - 0x18], dx
push eax
push edi
add esp, 4
add eax, 0x76f4
pop eax
push ecx
push eax
add esp, 4
xor ecx, 0x14699
add ecx, 0x5810
xor ecx, 0xb7b7
or ecx, 0xf859
pop ecx
push esi
xor esi, 0x7bcf
pop esi
mov eax, dword [ebp - 0x23c]
mov cx, word [eax]
mov word [ebp - 0x1ce], cx
mov edx, dword [ebp - 0x23c]
add edx, 2
mov dword [ebp - 0x23c], edx
mov ax, word [ebp - 0x1ce]
mov word [ebp - 0x64], ax
push eax
jmp 0x554445
pop eax
push esi
and esi, 0x1224e
jmp 0x554455
pop esi
push edi
sub edi, 0xf52a
xor edi, 0xc0d0
and edi, 0x105a2
add edi, 0x1864b
pop edi
mov ecx, dword [ebp - 0x240]
mov dx, word [ecx]
mov word [ebp - 0x1d0], dx
mov eax, dword [ebp - 0x240]
add eax, 2
mov dword [ebp - 0x240], eax
mov cx, word [ebp - 0x1d0]
mov word [ebp - 0x18], cx
push ebx
call 0x5544a9
add byte [ecx], bh
xor dh, byte [esi]
inc ecx
dec esi
inc ecx
inc ebx
add esp, 4
or ebx, 0x461d
add ebx, 0x13dea
pop ebx
push esi
call 0x5544c8
add byte [ecx*2 + 0x3d3a4a45], dh
aas
push eax
add esp, 4
pop esi
movzx edx, word [ebp - 0x18]
test edx, edx
jne 0x5544e9
movzx eax, word [ebp - 0x64]
movzx ecx, word [ebp - 0x18]
sub eax, ecx
mov dword [ebp - 0x300], eax
jmp 0x55456c
movzx edx, word [ebp - 0x64]
movzx eax, word [ebp - 0x18]
cmp edx, eax
je 0x5543e2
movzx ecx, word [ebp - 0x64]
xor ecx, 0x20
movzx edx, word [ebp - 0x18]
cmp ecx, edx
je 0x5543e2
push esi
jmp 0x554515
xor esi, 0x9d0e
xor esi, 0xb854
or esi, 0x3c24
pop esi
push edx
jmp 0x554531
pop edx
push edi
push edx
add esp, 4
sub edi, 0x5125
pop edi
movzx eax, word [ebp - 0x64]
movzx ecx, word [ebp - 0x18]
cmp eax, ecx
jge 0x554556
mov dword [ebp - 0x2fc], 0xffffffff
jmp 0x554560
mov dword [ebp - 0x2fc], 1
mov edx, dword [ebp - 0x2fc]
mov dword [ebp - 0x300], edx
cmp dword [ebp - 0x300], 0
jne 0x5545b8
push ebx
push edx
add esp, 4
call 0x554589
add byte [ebx + edi + 0x4a], al
xor eax, 0x3c3f374e
dec esi
add esp, 4
sub ebx, 0x12764
pop ebx
push ecx
sub ecx, 0x10e65
or ecx, 0x15e53
sub ecx, 0x3ef5
pop ecx
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xec], eax
jmp 0x554652
mov ecx, dword [ebp - 0xa4]
mov edx, dword [ecx]
mov dword [ebp - 0xa4], edx
push edx
push edi
add esp, 4
xor edx, 0x17813
sub edx, 0x9d11
jmp 0x5545dd
or edx, 0xd367
pop edx
push ebx
or ebx, 0x69e4
and ebx, 0x9c1c
and ebx, 0x3248
pop ebx
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x244]
je 0x554616
mov ecx, dword [ebp - 0xa4]
cmp dword [ecx + 0x30], 0
jne 0x554357
push edi
xor edi, 0x1643f
pop edi
push ebx
push ecx
add esp, 4
add ebx, 0x7bd2
or ebx, 0x77b6
xor ebx, 0xe88c
or ebx, 0x13b06
pop ebx
push edi
push eax
add esp, 4
or edi, 0xee53
pop edi
mov dword [ebp - 0xec], 0
Function at 0x55482b
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop ebx
mov edx, dword [ebp - 0x84]
add edx, dword [ebp - 0x30c]
mov dword [ebp - 0xf0], edx
jne 0x554886
push esi
and esi, 0xa8f6
or esi, 0x12dd0
pop esi
push edi
sub edi, 0x7f19
call 0x554865
add byte [edi + 0x3a], cl
dec esp
aas
inc ebp
inc esp
add esp, 4
xor edi, 0x177af
and edi, 0x17cdb
pop edi
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x94], eax
jmp 0x554c2e
mov ecx, dword [ebp - 0xf0]
mov edx, dword [ebp - 0x84]
add edx, dword [ecx + 0x20]
mov dword [ebp - 0x404], edx
push ecx
push ebx
add esp, 4
call 0x5548af
add byte [eax + edx*2], bh

Function at 0x554865
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop ebx
mov edx, dword [ebp - 0x84]
add edx, dword [ebp - 0x30c]
mov dword [ebp - 0xf0], edx
jne 0x554886
push esi
and esi, 0xa8f6
or esi, 0x12dd0
pop esi
push edi
sub edi, 0x7f19
call 0x554865
add byte [edi + 0x3a], cl
dec esp
aas
inc ebp
inc esp
add esp, 4
xor edi, 0x177af
and edi, 0x17cdb
pop edi
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x94], eax
jmp 0x554c2e
mov ecx, dword [ebp - 0xf0]
mov edx, dword [ebp - 0x84]
add edx, dword [ecx + 0x20]
mov dword [ebp - 0x404], edx
push ecx
push ebx
add esp, 4
call 0x5548af
add byte [eax + edx*2], bh

Function at 0x5548a8
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
dec ebx
dec edx
cmp dh, byte [0x8340334f]
les eax, [ecx + eax*4]
shl dword [eax + 0x7c], 0
add byte [ecx + 0x56], bl
add esi, 0x359a
sub esi, 0x15b9
or esi, 0x7525
pop esi
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x84]
add ecx, dword [eax + 0x24]
mov dword [ebp - 0x408], ecx
push ecx
push ebx
add esp, 4
sub ecx, 0xff26
call 0x5548fb
add byte [ebx], bh
xor bh, byte [eax]
cmp al, byte [edi + 0x4e]
inc edx
inc esi
add esp, 4
sub ecx, 0x5eee
call 0x554910
add byte [0x4536444c], dh
dec esi
add esp, 4
pop ecx
mov edx, dword [ebp - 0xf0]
mov eax, dword [ebp - 0x84]
add eax, dword [edx + 0x1c]
mov dword [ebp - 0x40c], eax
mov dword [ebp - 0xf4], 0
jmp 0x554944
mov edx, dword [ebp - 0xf0]
invalid
invalid

Function at 0x5548af
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
dec ebx
dec edx
cmp dh, byte [0x8340334f]
les eax, [ecx + eax*4]
shl dword [eax + 0x7c], 0
add byte [ecx + 0x56], bl
add esi, 0x359a
sub esi, 0x15b9
or esi, 0x7525
pop esi
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x84]
add ecx, dword [eax + 0x24]
mov dword [ebp - 0x408], ecx
push ecx
push ebx
add esp, 4
sub ecx, 0xff26
call 0x5548fb
add byte [ebx], bh
xor bh, byte [eax]
cmp al, byte [edi + 0x4e]
inc edx
inc esi
add esp, 4
sub ecx, 0x5eee
call 0x554910
add byte [0x4536444c], dh
dec esi
add esp, 4
pop ecx
mov edx, dword [ebp - 0xf0]
mov eax, dword [ebp - 0x84]
add eax, dword [edx + 0x1c]
mov dword [ebp - 0x40c], eax
mov dword [ebp - 0xf4], 0
jmp 0x554944
mov edx, dword [ebp - 0xf0]
invalid
invalid
Function at 0x5548fb
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
dec ebx
dec edx
cmp dh, byte [0x8340334f]
les eax, [ecx + eax*4]
shl dword [eax + 0x7c], 0
add byte [ecx + 0x56], bl
add esi, 0x359a
sub esi, 0x15b9
or esi, 0x7525
pop esi
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x84]
add ecx, dword [eax + 0x24]
mov dword [ebp - 0x408], ecx
push ecx
push ebx
add esp, 4
sub ecx, 0xff26
call 0x5548fb
add byte [ebx], bh
xor bh, byte [eax]
cmp al, byte [edi + 0x4e]
inc edx
inc esi
add esp, 4
sub ecx, 0x5eee
call 0x554910
add byte [0x4536444c], dh
dec esi
add esp, 4
pop ecx
mov edx, dword [ebp - 0xf0]
mov eax, dword [ebp - 0x84]
add eax, dword [edx + 0x1c]
mov dword [ebp - 0x40c], eax
mov dword [ebp - 0xf4], 0
jmp 0x554944
mov edx, dword [ebp - 0xf0]
invalid
invalid

Function at 0x554910
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
dec ebx
dec edx
cmp dh, byte [0x8340334f]
les eax, [ecx + eax*4]
shl dword [eax + 0x7c], 0
add byte [ecx + 0x56], bl
add esi, 0x359a
sub esi, 0x15b9
or esi, 0x7525
pop esi
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x84]
add ecx, dword [eax + 0x24]
mov dword [ebp - 0x408], ecx
push ecx
push ebx
add esp, 4
sub ecx, 0xff26
call 0x5548fb
add byte [ebx], bh
xor bh, byte [eax]
cmp al, byte [edi + 0x4e]
inc edx
inc esi
add esp, 4
sub ecx, 0x5eee
call 0x554910
add byte [0x4536444c], dh
dec esi
add esp, 4
pop ecx
mov edx, dword [ebp - 0xf0]
mov eax, dword [ebp - 0x84]
add eax, dword [edx + 0x1c]
mov dword [ebp - 0x40c], eax
mov dword [ebp - 0xf4], 0
jmp 0x554944
mov edx, dword [ebp - 0xf0]
invalid
invalid

Function at 0x554b67
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop eax
mov edx, dword [ebp - 0xf8]
add edx, dword [ebp - 0x38]
movsx eax, byte [edx]
or eax, 0x20
mov ecx, dword [ebp - 0x38]
movsx edx, byte [ebp + ecx - 0x164]
or edx, 0x20
cmp eax, edx
jge 0x554b98
mov dword [ebp - 0x248], 0xffffffff
jmp fcn.00554bd4
push ebx
add ebx, 0xfbd0
pop ebx

Function at 0x554ba0
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push edx
xor edx, 0x14cd0
xor edx, 0xff0f
jmp 0x554bb6
jmp 0x554bbd
pop edx
push esi
push ebx
add esp, 4
and esi, 0x6bef
pop esi
mov dword [ebp - 0x248], 1
Function at 0x555960
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push esi
xor esi, 0x28cd
and esi, 0x8eae
add esi, 0xc8b8
pop esi
push edi
push ebx
add esp, 4
sub edi, 0x78ac
or edi, 0xc817
add edi, 0x9bf1
xor edi, 0xa27f
pop edi
push ecx
push edi
add esp, 4
xor ecx, 0xb762
call 0x5559a9
add byte [esi + 0x4e], cl
dec esi
cmp bh, byte [0xc4833a3a]
add al, 0x81
loope 0x5559a4
add byte [eax], 0
pop ecx
push edi
call 0x5559c0
add byte [0x483e3a42], bh
dec esi
add esp, 4
pop edi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x43c], eax
push esi
or esi, 0x175be
or esi, 0x124a6
pop esi
push ecx
push eax
add esp, 4
and ecx, 0x15bad
pop ecx
push ebx
push esi
add esp, 4
and ebx, 0x4913
xor ebx, 0xd42e
sub ebx, 0x7bc9
pop ebx
mov ecx, dword [ebp - 0x43c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x440], edx
push ecx
xor ecx, 0x5aa3
and ecx, 0x14f4e
pop ecx
push ecx
and ecx, 0x7015
jmp 0x555a2f
xor ecx, 0x15829
jmp 0x555a3a
pop ecx
push eax
or eax, 0xcf99
pop eax
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0
jne 0x555a96
push esi
push esi
add esp, 4
xor esi, 0x8869
sub esi, 0xe3a3
and esi, 0xf3a4
pop esi
push ebx
push edx
add esp, 4
jmp 0x555a7c
and ebx, 0xe7f4
jmp 0x555a89
pop ebx
mov dword [ebp - 0x74], 0
jmp fcn.00555e22
push esi
call 0x555aa3
add byte [esi], bh
dec ebx
aas
dec edx
aaa
inc ebx
add esp, 4
xor esi, 0x1129b
pop esi
push ebx
jmp 0x555ab3
and ebx, 0x42e8
pop ebx
push ebx
xor ebx, 0xf4ad
and ebx, 0x5b4
pop ebx
mov ecx, dword [ebp - 0x32c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0
jne 0x555b21
push ebx
xor ebx, 0xe3dc
add ebx, 0x1558d
pop ebx
push edx
push ebx
add esp, 4
or edx, 0x47c0
pop edx
push edx
push esi
add esp, 4
add edx, 0x106ba
add edx, 0x11705
xor edx, 0x16100
pop edx
mov dword [ebp - 0x74], 0
jmp fcn.00555e22
mov ecx, dword [ebp - 0x264]
mov dword [ebp - 0xb0], ecx
push ebx
or ebx, 0x17ee7
add ebx, 0x13d2f
sub ebx, 0x5ac2
pop ebx
push ebx
call 0x555b4f
add byte [esi + 0x48], cl
cmp eax, 0x3241453c
add esp, 4
jmp 0x555b58
or ebx, 0xfa88
pop ebx
lea edx, [ebp - 0x2b0]
mov dword [ebp - 0x260], edx
mov eax, dword [ebp - 0xb0]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x25c], ecx
push eax
push edx
add esp, 4
or eax, 0x1bfc
add eax, 0x5285
add eax, 0x126e
call 0x555ba0
add byte [ecx + 0x46], cl
xor al, 0x48
cmp al, 0x3a
cmp dh, byte [0xc4834e4d]
add al, 0x58
push esi
jmp 0x555bab
pop esi
xor edx, edx
mov word [ebp - 0x48], dx
xor eax, eax
mov word [ebp - 0x20], ax
push ebx
jmp 0x555bbe
sub ebx, 0x133ad
xor ebx, 0x3c4b
pop ebx
push esi
push esi
add esp, 4
Function at 0x5559a9
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push esi
xor esi, 0x28cd
and esi, 0x8eae
add esi, 0xc8b8
pop esi
push edi
push ebx
add esp, 4
sub edi, 0x78ac
or edi, 0xc817
add edi, 0x9bf1
xor edi, 0xa27f
pop edi
push ecx
push edi
add esp, 4
xor ecx, 0xb762
call 0x5559a9
add byte [esi + 0x4e], cl
dec esi
cmp bh, byte [0xc4833a3a]
add al, 0x81
loope 0x5559a4
add byte [eax], 0
pop ecx
push edi
call 0x5559c0
add byte [0x483e3a42], bh
dec esi
add esp, 4
pop edi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x43c], eax
push esi
or esi, 0x175be
or esi, 0x124a6
pop esi
push ecx
push eax
add esp, 4
and ecx, 0x15bad
pop ecx
push ebx
push esi
add esp, 4
and ebx, 0x4913
xor ebx, 0xd42e
sub ebx, 0x7bc9
pop ebx
mov ecx, dword [ebp - 0x43c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x440], edx
push ecx
xor ecx, 0x5aa3
and ecx, 0x14f4e
pop ecx
push ecx
and ecx, 0x7015
jmp 0x555a2f
xor ecx, 0x15829
jmp 0x555a3a
pop ecx
push eax
or eax, 0xcf99
pop eax
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0
jne 0x555a96
push esi
push esi
add esp, 4
xor esi, 0x8869
sub esi, 0xe3a3
and esi, 0xf3a4
pop esi
push ebx
push edx
add esp, 4
jmp 0x555a7c
and ebx, 0xe7f4
jmp 0x555a89
pop ebx
mov dword [ebp - 0x74], 0
jmp fcn.00555e22
push esi
call 0x555aa3
add byte [esi], bh
dec ebx
aas
dec edx
aaa
inc ebx
add esp, 4
xor esi, 0x1129b
pop esi
push ebx
jmp 0x555ab3
and ebx, 0x42e8
pop ebx
push ebx
xor ebx, 0xf4ad
and ebx, 0x5b4
pop ebx
mov ecx, dword [ebp - 0x32c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0
jne 0x555b21
push ebx
xor ebx, 0xe3dc
add ebx, 0x1558d
pop ebx
push edx
push ebx
add esp, 4
or edx, 0x47c0
pop edx
push edx
push esi
add esp, 4
add edx, 0x106ba
add edx, 0x11705
xor edx, 0x16100
pop edx
mov dword [ebp - 0x74], 0
jmp fcn.00555e22
mov ecx, dword [ebp - 0x264]
mov dword [ebp - 0xb0], ecx
push ebx
or ebx, 0x17ee7
add ebx, 0x13d2f
sub ebx, 0x5ac2
pop ebx
push ebx
call 0x555b4f
add byte [esi + 0x48], cl
cmp eax, 0x3241453c
add esp, 4
jmp 0x555b58
or ebx, 0xfa88
pop ebx
lea edx, [ebp - 0x2b0]
mov dword [ebp - 0x260], edx
mov eax, dword [ebp - 0xb0]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x25c], ecx
push eax
push edx
add esp, 4
or eax, 0x1bfc
add eax, 0x5285
add eax, 0x126e
call 0x555ba0
add byte [ecx + 0x46], cl
xor al, 0x48
cmp al, 0x3a
cmp dh, byte [0xc4834e4d]
add al, 0x58
push esi
jmp 0x555bab
pop esi
xor edx, edx
mov word [ebp - 0x48], dx
xor eax, eax
mov word [ebp - 0x20], ax
push ebx
jmp 0x555bbe
sub ebx, 0x133ad
xor ebx, 0x3c4b
pop ebx
push esi
push esi
add esp, 4