joyce8/EMBER2024-capa huggingface dataset:
Function at 0x40797d
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov byte [ebp - 0xbf8], 0x10
mov byte [ebp - 0xbf7], 0x10
mov byte [ebp - 0xbf6], 0x59
push ecx
call 0x40797d
add byte [ecx + 0x4d], al
push eax
aaa
inc edi
dec edi
inc edi
xor ecx, dword [esi - 0x7d]
les eax, [ebx + ebp*8]
add eax, 0x3b364e4e
dec esi
or ecx, 0xea53
call 0x40799b
add byte [ecx + 0x3a], al
push eax
inc edx
dec eax
dec eax
xor eax, 0x4c4833c
pop ecx
push eax
or eax, 0x16a32
xor eax, 0x13169
and eax, 0x168fc
pop eax
push ecx
push ecx
add esp, 4
xor ecx, 0xd2d3
call 0x4079cd
add byte [esi], dh
dec ebp
xor eax, 0x373f3f3c
xor eax, 0x5904c483
mov byte [ebp - 0xbf4], 0x51
mov byte [ebp - 0xbf3], 0xb9
mov byte [ebp - 0xbf2], 0x20
mov byte [ebp - 0xbf1], 0x20
mov byte [ebp - 0xbf0], 0x20
mov byte [ebp - 0xbef], 0x20
mov byte [ebp - 0xbee], 0x59
push ecx
push eax
add esp, 4
and ecx, 0x101d
sub ecx, 0xd3b6
add ecx, 0x16452
pop ecx
push edi
xor edi, 0xef12
add byte [ecx + 0x7258cf], al
add byte [ecx + 0x1cf7cf], al
add byte [ecx + 0x12a03c7], al
add byte [edi + 0x57], bl
sub edi, 0x14210
pop edi
push edx
push ebx
add esp, 4
sub edx, 0x15d3b
pop ebp
add dword [eax], eax
or edx, 0x13221
and edx, 0x924f
and edx, 0x105ce
pop edx
push edx
push ecx
add esp, 4
or edx, 0xfc0d
pop edx
invalid
invalid

Function at 0x40799b
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov byte [ebp - 0xbf8], 0x10
mov byte [ebp - 0xbf7], 0x10
mov byte [ebp - 0xbf6], 0x59
push ecx
call 0x40797d
add byte [ecx + 0x4d], al
push eax
aaa
inc edi
dec edi
inc edi
xor ecx, dword [esi - 0x7d]
les eax, [ebx + ebp*8]
add eax, 0x3b364e4e
dec esi
or ecx, 0xea53
call 0x40799b
add byte [ecx + 0x3a], al
push eax
inc edx
dec eax
dec eax
xor eax, 0x4c4833c
pop ecx
push eax
or eax, 0x16a32
xor eax, 0x13169
and eax, 0x168fc
pop eax
push ecx
push ecx
add esp, 4
xor ecx, 0xd2d3
call 0x4079cd
add byte [esi], dh
dec ebp
xor eax, 0x373f3f3c
xor eax, 0x5904c483
mov byte [ebp - 0xbf4], 0x51
mov byte [ebp - 0xbf3], 0xb9
mov byte [ebp - 0xbf2], 0x20
mov byte [ebp - 0xbf1], 0x20
mov byte [ebp - 0xbf0], 0x20
mov byte [ebp - 0xbef], 0x20
mov byte [ebp - 0xbee], 0x59
push ecx
push eax
add esp, 4
and ecx, 0x101d
sub ecx, 0xd3b6
add ecx, 0x16452
pop ecx
push edi
xor edi, 0xef12
add byte [ecx + 0x7258cf], al
add byte [ecx + 0x1cf7cf], al
add byte [ecx + 0x12a03c7], al
add byte [edi + 0x57], bl
sub edi, 0x14210
pop edi
push edx
push ebx
add esp, 4
sub edx, 0x15d3b
pop ebp
add dword [eax], eax
or edx, 0x13221
and edx, 0x924f
and edx, 0x105ce
pop edx
push edx
push ecx
add esp, 4
or edx, 0xfc0d
pop edx
invalid
invalid
Function at 0x4079cd
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov byte [ebp - 0xbf8], 0x10
mov byte [ebp - 0xbf7], 0x10
mov byte [ebp - 0xbf6], 0x59
push ecx
call 0x40797d
add byte [ecx + 0x4d], al
push eax
aaa
inc edi
dec edi
inc edi
xor ecx, dword [esi - 0x7d]
les eax, [ebx + ebp*8]
add eax, 0x3b364e4e
dec esi
or ecx, 0xea53
call 0x40799b
add byte [ecx + 0x3a], al
push eax
inc edx
dec eax
dec eax
xor eax, 0x4c4833c
pop ecx
push eax
or eax, 0x16a32
xor eax, 0x13169
and eax, 0x168fc
pop eax
push ecx
push ecx
add esp, 4
xor ecx, 0xd2d3
call 0x4079cd
add byte [esi], dh
dec ebp
xor eax, 0x373f3f3c
xor eax, 0x5904c483
mov byte [ebp - 0xbf4], 0x51
mov byte [ebp - 0xbf3], 0xb9
mov byte [ebp - 0xbf2], 0x20
mov byte [ebp - 0xbf1], 0x20
mov byte [ebp - 0xbf0], 0x20
mov byte [ebp - 0xbef], 0x20
mov byte [ebp - 0xbee], 0x59
push ecx
push eax
add esp, 4
and ecx, 0x101d
sub ecx, 0xd3b6
add ecx, 0x16452
pop ecx
push edi
xor edi, 0xef12
add byte [ecx + 0x7258cf], al
add byte [ecx + 0x1cf7cf], al
add byte [ecx + 0x12a03c7], al
add byte [edi + 0x57], bl
sub edi, 0x14210
pop edi
push edx
push ebx
add esp, 4
sub edx, 0x15d3b
pop ebp
add dword [eax], eax
or edx, 0x13221
and edx, 0x924f
and edx, 0x105ce
pop edx
push edx
push ecx
add esp, 4
or edx, 0xfc0d
pop edx
invalid
invalid

Function at 0x407a20
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [ecx + 0x7258cf], al
add byte [ecx + 0x1cf7cf], al
add byte [ecx + 0x12a03c7], al
add byte [edi + 0x57], bl

Function at 0x407a80
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
sub al, byte [eax]
add byte [ecx + 0x133f7c0], al
add byte [ecx + 0x4b58f0], al
add byte [eax + 0x51], bl
Function at 0x407e74
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
or byte [eax], al
add byte [eax], al
add byte [esi + esi + 0x43], cl
xor al, 0x35
cmp eax, 0x4c48333
add esi, 0x11ec0
pop esi
mov edx, 1
imul eax, edx, 0
lea ecx, [ebp + eax - 0xbf4]
mov dword [ebp - 0x15e0], ecx
ljmp 0xc483
add al, 0x81
dec ebx
adc eax, 0x535b0000
and ebx, 0x12cf0
or ebx, 0xe65e
sub ebx, 0x144c0
sub ebx, 0x10c7b
pop ebx
push esi
push ecx
add esp, 4
and esi, 0x14d61
pop esi
mov dword [ebp - 0x2054], 0xffffffff
push edi
xor edi, 0x1538d
add edi, 0x11d85
sub edi, 0xac65
pop edi
push edi
push ecx
add esp, 4
add edi, 0x2c96
and edi, 0x3e60
add edi, 0x4c0f
add byte [eax], al

Function at 0x407e80
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
or byte [eax], al
add byte [eax], al
add byte [esi + esi + 0x43], cl
xor al, 0x35
cmp eax, 0x4c48333
add esi, 0x11ec0
pop esi
mov edx, 1
imul eax, edx, 0
lea ecx, [ebp + eax - 0xbf4]
mov dword [ebp - 0x15e0], ecx
ljmp 0xc483
add al, 0x81
dec ebx
adc eax, 0x535b0000
and ebx, 0x12cf0
or ebx, 0xe65e
sub ebx, 0x144c0
sub ebx, 0x10c7b
pop ebx
push esi
push ecx
add esp, 4
and esi, 0x14d61
pop esi
mov dword [ebp - 0x2054], 0xffffffff
push edi
xor edi, 0x1538d
add edi, 0x11d85
sub edi, 0xac65
pop edi
push edi
push ecx
add esp, 4
add edi, 0x2c96
and edi, 0x3e60
add edi, 0x4c0f
add byte [eax], al
Function at 0x407f3b
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x4fc]
add eax, 1
mov dword [ebp - 0x4fc], eax
push esi
call 0x407f3b
add byte [ebx + 0x4b], cl
cmp byte [ebx], dh
inc ecx
push eax
dec esp
dec esp
push eax
inc esi
add esp, 4
or esi, 0xa8ad
jmp 0x407f4d
add esi, 0x74d9
pop esi
push edi
and edi, 0x88a
pop edi
mov ecx, dword [ebp - 0x4fc]
sub ecx, dword [ebp - 0x3f4]
cmp ecx, 0xffffffff
jb 0x407fa4
push edi
push eax
add esp, 4
add edi, 0xc5c7
or edi, 0xc309
pop edi
push edx
push ebx
add esp, 4
xor edx, 0x8d0e
or edx, 0xb295
jmp 0x407f98
and edx, 0x182bd
pop edx
jmp 0x4081d2
add al, byte cs:[eax]
invalid
mov dword [ebp - 0xc9c], 7
mov edx, dword [ebp - 0x4fc]
mov dword [ebp - 0xae8], edx
invalid
call dword [edx - 0x7f]
loop 0x407f5c
inc ecx
add byte [eax], al
jmp 0x407fca
pop edx
push edx
push edi
add esp, 4
and edx, 0x1536c
jmp 0x407fdf
or edx, 0x143a9
and edx, 0x936c
pop edx
mov eax, dword [ebp - 0x15e0]
mov dword [ebp - 0xa64], eax
mov dword [ebp - 0xca0], 0
mov ecx, dword [ebp - 0x4fc]
cmp ecx, dword [ebp - 0x15e0]
jne 0x408053
push ebx
or ebx, 0x52b9
xor ebx, 0xb51d
pop ebx
push edi
push edi
add esp, 4
or edi, 0x12f70
jmp 0x40802f
pop edi
push ebx
push ebx
add esp, 4
sub ebx, 0x15aac
and ebx, 0x7a3
jecxz 0x407fe1
pop es
add byte [eax], al
pop ebx
mov edx, dword [ebp - 0xca0]
mov dword [ebp - 0x15e8], edx
jmp fcn.00408184
cmp dword [ebp - 0xc9c], 0
jle 0x408178
push edi
push edi
add esp, 4
add edi, 0xfff3
or edi, 0x7b38
pop edi
push edi
and edi, 0x8138
or edi, 0xb5c
call 0x40808e
add byte [edx + edi], dh
inc eax
dec eax
dec edx
aaa
dec esp
cmp byte [ebx - 0x7d], al
les eax, [edi + ebx*2]
mov eax, dword [ebp - 0xae8]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa64]
movzx eax, byte [edx]
cmp ecx, eax
je 0x408114
push ecx
call 0x4080b8
add byte [eax], al
add byte [esp + esi], bh
cmp dword [edx + 0x39], ecx
dec esp
dec edi
cmp eax, 0x4c48343
or ecx, 0x14895
call 0x4080d0
add byte [esi], bh
cmp byte [eax + 0x3c], dl
inc edx
xor al, 0x42
dec esi
add esp, 4
add ecx, 0xaffe
pop ecx
mov ecx, dword [ebp - 0xae8]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0xa64]
movzx ecx, byte [eax]
cmp edx, ecx
jle fcn.004080fc
mov dword [ebp - 0x15e4], 1
jmp 0x408106
push eax
push ebx
add esp, 4
sub eax, 0xdb22
and eax, 0x8add
pop eax
push edx
push esi
add esp, 4
jmp 0x408133
sub edx, 0x139ef
add edx, 0x3f93
sub edx, 0x5ac9
pop edx
mov eax, dword [ebp - 0xc9c]
sub eax, 1
mov dword [ebp - 0xc9c], eax
mov ecx, dword [ebp - 0xae8]
add ecx, 1
mov dword [ebp - 0xae8], ecx
mov edx, dword [ebp - 0xa64]
add edx, 1
mov dword [ebp - 0xa64], edx
cmc
invalid
invalid
jmp 0x408053
cmp dword [ebp - 0x15e8], 0
jne 0x4081cd
push edi
push edi
add esp, 4
jmp 0x408198
xor edi, 0x63e
or edi, 0x17081
xor edi, 0x7126
pop edi
push edi
and edi, 0xb43b
sub edi, 0xd68e
jmp 0x4081be
pop edi
invalid
Function at 0x40803c
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
test eax, 0x81000143
loop 0x408054
xchg ebx, eax
add byte [eax], al
jecxz 0x407fe1
pop es
add byte [eax], al
mov ebp, 0xfffff364
add byte [edi], cl
mov ds, word [eax]
add dword [eax], eax
add byte [edi + 0x57], dl
Function at 0x40808e
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x4fc]
add eax, 1
mov dword [ebp - 0x4fc], eax
push esi
call 0x407f3b
add byte [ebx + 0x4b], cl
cmp byte [ebx], dh
inc ecx
push eax
dec esp
dec esp
push eax
inc esi
add esp, 4
or esi, 0xa8ad
jmp 0x407f4d
add esi, 0x74d9
pop esi
push edi
and edi, 0x88a
pop edi
mov ecx, dword [ebp - 0x4fc]
sub ecx, dword [ebp - 0x3f4]
cmp ecx, 0xffffffff
jb 0x407fa4
push edi
push eax
add esp, 4
add edi, 0xc5c7
or edi, 0xc309
pop edi
push edx
push ebx
add esp, 4
xor edx, 0x8d0e
or edx, 0xb295
jmp 0x407f98
and edx, 0x182bd
pop edx
jmp 0x4081d2
add al, byte cs:[eax]
invalid
mov dword [ebp - 0xc9c], 7
mov edx, dword [ebp - 0x4fc]
mov dword [ebp - 0xae8], edx
invalid
call dword [edx - 0x7f]
loop 0x407f5c
inc ecx
add byte [eax], al
jmp 0x407fca
pop edx
push edx
push edi
add esp, 4
and edx, 0x1536c
jmp 0x407fdf
or edx, 0x143a9
and edx, 0x936c
pop edx
mov eax, dword [ebp - 0x15e0]
mov dword [ebp - 0xa64], eax
mov dword [ebp - 0xca0], 0
mov ecx, dword [ebp - 0x4fc]
cmp ecx, dword [ebp - 0x15e0]
jne 0x408053
push ebx
or ebx, 0x52b9
xor ebx, 0xb51d
pop ebx
push edi
push edi
add esp, 4
or edi, 0x12f70
jmp 0x40802f
pop edi
push ebx
push ebx
add esp, 4
sub ebx, 0x15aac
and ebx, 0x7a3
jecxz 0x407fe1
pop es
add byte [eax], al
pop ebx
mov edx, dword [ebp - 0xca0]
mov dword [ebp - 0x15e8], edx
jmp fcn.00408184
cmp dword [ebp - 0xc9c], 0
jle 0x408178
push edi
push edi
add esp, 4
add edi, 0xfff3
or edi, 0x7b38
pop edi
push edi
and edi, 0x8138
or edi, 0xb5c
call 0x40808e
add byte [edx + edi], dh
inc eax
dec eax
dec edx
aaa
dec esp
cmp byte [ebx - 0x7d], al
les eax, [edi + ebx*2]
mov eax, dword [ebp - 0xae8]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa64]
movzx eax, byte [edx]
cmp ecx, eax
je 0x408114
push ecx
call 0x4080b8
add byte [eax], al
add byte [esp + esi], bh
cmp dword [edx + 0x39], ecx
dec esp
dec edi
cmp eax, 0x4c48343
or ecx, 0x14895
call 0x4080d0
add byte [esi], bh
cmp byte [eax + 0x3c], dl
inc edx
xor al, 0x42
dec esi
add esp, 4
add ecx, 0xaffe
pop ecx
mov ecx, dword [ebp - 0xae8]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0xa64]
movzx ecx, byte [eax]
cmp edx, ecx
jle fcn.004080fc
mov dword [ebp - 0x15e4], 1
jmp 0x408106
push eax
push ebx
add esp, 4
sub eax, 0xdb22
and eax, 0x8add
pop eax
push edx
push esi
add esp, 4
jmp 0x408133
sub edx, 0x139ef
add edx, 0x3f93
sub edx, 0x5ac9
pop edx
mov eax, dword [ebp - 0xc9c]
sub eax, 1
mov dword [ebp - 0xc9c], eax
mov ecx, dword [ebp - 0xae8]
add ecx, 1
mov dword [ebp - 0xae8], ecx
mov edx, dword [ebp - 0xa64]
add edx, 1
mov dword [ebp - 0xa64], edx
cmc
invalid
invalid
jmp 0x408053
cmp dword [ebp - 0x15e8], 0
jne 0x4081cd
push edi
push edi
add esp, 4
jmp 0x408198
xor edi, 0x63e
or edi, 0x17081
xor edi, 0x7126
pop edi
push edi
and edi, 0xb43b
sub edi, 0xd68e
jmp 0x4081be
pop edi
invalid
Function at 0x4080ac
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x4fc]
add eax, 1
mov dword [ebp - 0x4fc], eax
push esi
call 0x407f3b
add byte [ebx + 0x4b], cl
cmp byte [ebx], dh
inc ecx
push eax
dec esp
dec esp
push eax
inc esi
add esp, 4
or esi, 0xa8ad
jmp 0x407f4d
add esi, 0x74d9
pop esi
push edi
and edi, 0x88a
pop edi
mov ecx, dword [ebp - 0x4fc]
sub ecx, dword [ebp - 0x3f4]
cmp ecx, 0xffffffff
jb 0x407fa4
push edi
push eax
add esp, 4
add edi, 0xc5c7
or edi, 0xc309
pop edi
push edx
push ebx
add esp, 4
xor edx, 0x8d0e
or edx, 0xb295
jmp 0x407f98
and edx, 0x182bd
pop edx
jmp 0x4081d2
add al, byte cs:[eax]
invalid
mov dword [ebp - 0xc9c], 7
mov edx, dword [ebp - 0x4fc]
mov dword [ebp - 0xae8], edx
invalid
call dword [edx - 0x7f]
loop 0x407f5c
inc ecx
add byte [eax], al
jmp 0x407fca
pop edx
push edx
push edi
add esp, 4
and edx, 0x1536c
jmp 0x407fdf
or edx, 0x143a9
and edx, 0x936c
pop edx
mov eax, dword [ebp - 0x15e0]
mov dword [ebp - 0xa64], eax
mov dword [ebp - 0xca0], 0
mov ecx, dword [ebp - 0x4fc]
cmp ecx, dword [ebp - 0x15e0]
jne 0x408053
push ebx
or ebx, 0x52b9
xor ebx, 0xb51d
pop ebx
push edi
push edi
add esp, 4
or edi, 0x12f70
jmp 0x40802f
pop edi
push ebx
push ebx
add esp, 4
sub ebx, 0x15aac
and ebx, 0x7a3
jecxz 0x407fe1
pop es
add byte [eax], al
pop ebx
mov edx, dword [ebp - 0xca0]
mov dword [ebp - 0x15e8], edx
jmp fcn.00408184
cmp dword [ebp - 0xc9c], 0
jle 0x408178
push edi
push edi
add esp, 4
add edi, 0xfff3
or edi, 0x7b38
pop edi
push edi
and edi, 0x8138
or edi, 0xb5c
call 0x40808e
add byte [edx + edi], dh
inc eax
dec eax
dec edx
aaa
dec esp
cmp byte [ebx - 0x7d], al
les eax, [edi + ebx*2]
mov eax, dword [ebp - 0xae8]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa64]
movzx eax, byte [edx]
cmp ecx, eax
je 0x408114
push ecx
call 0x4080b8
add byte [eax], al
add byte [esp + esi], bh
cmp dword [edx + 0x39], ecx
dec esp
dec edi
cmp eax, 0x4c48343
or ecx, 0x14895
call 0x4080d0
add byte [esi], bh
cmp byte [eax + 0x3c], dl
inc edx
xor al, 0x42
dec esi
add esp, 4
add ecx, 0xaffe
pop ecx
mov ecx, dword [ebp - 0xae8]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0xa64]
movzx ecx, byte [eax]
cmp edx, ecx
jle fcn.004080fc
mov dword [ebp - 0x15e4], 1
jmp 0x408106
push eax
push ebx
add esp, 4
sub eax, 0xdb22
and eax, 0x8add
pop eax
push edx
push esi
add esp, 4
jmp 0x408133
sub edx, 0x139ef
add edx, 0x3f93
sub edx, 0x5ac9
pop edx
mov eax, dword [ebp - 0xc9c]
sub eax, 1
mov dword [ebp - 0xc9c], eax
mov ecx, dword [ebp - 0xae8]
add ecx, 1
mov dword [ebp - 0xae8], ecx
mov edx, dword [ebp - 0xa64]
add edx, 1
mov dword [ebp - 0xa64], edx
cmc
invalid
invalid
jmp 0x408053
cmp dword [ebp - 0x15e8], 0
jne 0x4081cd
push edi
push edi
add esp, 4
jmp 0x408198
xor edi, 0x63e
or edi, 0x17081
xor edi, 0x7126
pop edi
push edi
and edi, 0xb43b
sub edi, 0xd68e
jmp 0x4081be
pop edi
invalid
Function at 0x4080b8
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x4fc]
add eax, 1
mov dword [ebp - 0x4fc], eax
push esi
call 0x407f3b
add byte [ebx + 0x4b], cl
cmp byte [ebx], dh
inc ecx
push eax
dec esp
dec esp
push eax
inc esi
add esp, 4
or esi, 0xa8ad
jmp 0x407f4d
add esi, 0x74d9
pop esi
push edi
and edi, 0x88a
pop edi
mov ecx, dword [ebp - 0x4fc]
sub ecx, dword [ebp - 0x3f4]
cmp ecx, 0xffffffff
jb 0x407fa4
push edi
push eax
add esp, 4
add edi, 0xc5c7
or edi, 0xc309
pop edi
push edx
push ebx
add esp, 4
xor edx, 0x8d0e
or edx, 0xb295
jmp 0x407f98
and edx, 0x182bd
pop edx
jmp 0x4081d2
add al, byte cs:[eax]
invalid
mov dword [ebp - 0xc9c], 7
mov edx, dword [ebp - 0x4fc]
mov dword [ebp - 0xae8], edx
invalid
call dword [edx - 0x7f]
loop 0x407f5c
inc ecx
add byte [eax], al
jmp 0x407fca
pop edx
push edx
push edi
add esp, 4
and edx, 0x1536c
jmp 0x407fdf
or edx, 0x143a9
and edx, 0x936c
pop edx
mov eax, dword [ebp - 0x15e0]
mov dword [ebp - 0xa64], eax
mov dword [ebp - 0xca0], 0
mov ecx, dword [ebp - 0x4fc]
cmp ecx, dword [ebp - 0x15e0]
jne 0x408053
push ebx
or ebx, 0x52b9
xor ebx, 0xb51d
pop ebx
push edi
push edi
add esp, 4
or edi, 0x12f70
jmp 0x40802f
pop edi
push ebx
push ebx
add esp, 4
sub ebx, 0x15aac
and ebx, 0x7a3
jecxz 0x407fe1
pop es
add byte [eax], al
pop ebx
mov edx, dword [ebp - 0xca0]
mov dword [ebp - 0x15e8], edx
jmp fcn.00408184
cmp dword [ebp - 0xc9c], 0
jle 0x408178
push edi
push edi
add esp, 4
add edi, 0xfff3
or edi, 0x7b38
pop edi
push edi
and edi, 0x8138
or edi, 0xb5c
call 0x40808e
add byte [edx + edi], dh
inc eax
dec eax
dec edx
aaa
dec esp
cmp byte [ebx - 0x7d], al
les eax, [edi + ebx*2]
mov eax, dword [ebp - 0xae8]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa64]
movzx eax, byte [edx]
cmp ecx, eax
je 0x408114
push ecx
call 0x4080b8
add byte [eax], al
add byte [esp + esi], bh
cmp dword [edx + 0x39], ecx
dec esp
dec edi
cmp eax, 0x4c48343
or ecx, 0x14895
call 0x4080d0
add byte [esi], bh
cmp byte [eax + 0x3c], dl
inc edx
xor al, 0x42
dec esi
add esp, 4
add ecx, 0xaffe
pop ecx
mov ecx, dword [ebp - 0xae8]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0xa64]
movzx ecx, byte [eax]
cmp edx, ecx
jle fcn.004080fc
mov dword [ebp - 0x15e4], 1
jmp 0x408106
push eax
push ebx
add esp, 4
sub eax, 0xdb22
and eax, 0x8add
pop eax
push edx
push esi
add esp, 4
jmp 0x408133
sub edx, 0x139ef
add edx, 0x3f93
sub edx, 0x5ac9
pop edx
mov eax, dword [ebp - 0xc9c]
sub eax, 1
mov dword [ebp - 0xc9c], eax
mov ecx, dword [ebp - 0xae8]
add ecx, 1
mov dword [ebp - 0xae8], ecx
mov edx, dword [ebp - 0xa64]
add edx, 1
mov dword [ebp - 0xa64], edx
cmc
invalid
invalid
jmp 0x408053
cmp dword [ebp - 0x15e8], 0
jne 0x4081cd
push edi
push edi
add esp, 4
jmp 0x408198
xor edi, 0x63e
or edi, 0x17081
xor edi, 0x7126
pop edi
push edi
and edi, 0xb43b
sub edi, 0xd68e
jmp 0x4081be
pop edi
invalid
Function at 0x4080d0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x4fc]
add eax, 1
mov dword [ebp - 0x4fc], eax
push esi
call 0x407f3b
add byte [ebx + 0x4b], cl
cmp byte [ebx], dh
inc ecx
push eax
dec esp
dec esp
push eax
inc esi
add esp, 4
or esi, 0xa8ad
jmp 0x407f4d
add esi, 0x74d9
pop esi
push edi
and edi, 0x88a
pop edi
mov ecx, dword [ebp - 0x4fc]
sub ecx, dword [ebp - 0x3f4]
cmp ecx, 0xffffffff
jb 0x407fa4
push edi
push eax
add esp, 4
add edi, 0xc5c7
or edi, 0xc309
pop edi
push edx
push ebx
add esp, 4
xor edx, 0x8d0e
or edx, 0xb295
jmp 0x407f98
and edx, 0x182bd
pop edx
jmp 0x4081d2
add al, byte cs:[eax]
invalid
mov dword [ebp - 0xc9c], 7
mov edx, dword [ebp - 0x4fc]
mov dword [ebp - 0xae8], edx
invalid
call dword [edx - 0x7f]
loop 0x407f5c
inc ecx
add byte [eax], al
jmp 0x407fca
pop edx
push edx
push edi
add esp, 4
and edx, 0x1536c
jmp 0x407fdf
or edx, 0x143a9
and edx, 0x936c
pop edx
mov eax, dword [ebp - 0x15e0]
mov dword [ebp - 0xa64], eax
mov dword [ebp - 0xca0], 0
mov ecx, dword [ebp - 0x4fc]
cmp ecx, dword [ebp - 0x15e0]
jne 0x408053
push ebx
or ebx, 0x52b9
xor ebx, 0xb51d
pop ebx
push edi
push edi
add esp, 4
or edi, 0x12f70
jmp 0x40802f
pop edi
push ebx
push ebx
add esp, 4
sub ebx, 0x15aac
and ebx, 0x7a3
jecxz 0x407fe1
pop es
add byte [eax], al
pop ebx
mov edx, dword [ebp - 0xca0]
mov dword [ebp - 0x15e8], edx
jmp fcn.00408184
cmp dword [ebp - 0xc9c], 0
jle 0x408178
push edi
push edi
add esp, 4
add edi, 0xfff3
or edi, 0x7b38
pop edi
push edi
and edi, 0x8138
or edi, 0xb5c
call 0x40808e
add byte [edx + edi], dh
inc eax
dec eax
dec edx
aaa
dec esp
cmp byte [ebx - 0x7d], al
les eax, [edi + ebx*2]
mov eax, dword [ebp - 0xae8]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa64]
movzx eax, byte [edx]
cmp ecx, eax
je 0x408114
push ecx
call 0x4080b8
add byte [eax], al
add byte [esp + esi], bh
cmp dword [edx + 0x39], ecx
dec esp
dec edi
cmp eax, 0x4c48343
or ecx, 0x14895
call 0x4080d0
add byte [esi], bh
cmp byte [eax + 0x3c], dl
inc edx
xor al, 0x42
dec esi
add esp, 4
add ecx, 0xaffe
pop ecx
mov ecx, dword [ebp - 0xae8]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0xa64]
movzx ecx, byte [eax]
cmp edx, ecx
jle fcn.004080fc
mov dword [ebp - 0x15e4], 1
jmp 0x408106
push eax
push ebx
add esp, 4
sub eax, 0xdb22
and eax, 0x8add
pop eax
push edx
push esi
add esp, 4
jmp 0x408133
sub edx, 0x139ef
add edx, 0x3f93
sub edx, 0x5ac9
pop edx
mov eax, dword [ebp - 0xc9c]
sub eax, 1
mov dword [ebp - 0xc9c], eax
mov ecx, dword [ebp - 0xae8]
add ecx, 1
mov dword [ebp - 0xae8], ecx
mov edx, dword [ebp - 0xa64]
add edx, 1
mov dword [ebp - 0xa64], edx
cmc
invalid
invalid
jmp 0x408053
cmp dword [ebp - 0x15e8], 0
jne 0x4081cd
push edi
push edi
add esp, 4
jmp 0x408198
xor edi, 0x63e
or edi, 0x17081
xor edi, 0x7126
pop edi
push edi
and edi, 0xb43b
sub edi, 0xd68e
jmp 0x4081be
pop edi
invalid

Function at 0x4080fc
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov dword [ebp - 0x15e4], 0xffffffff
mov edx, dword [ebp - 0x15e4]
mov dword [ebp - 0xca0], edx
jmp 0x408178
mov eax, dword [ebp - 0xca0]
mov dword [ebp - 0x15e8], eax
Function at 0x408184
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x4fc]
add eax, 1
mov dword [ebp - 0x4fc], eax
push esi
call 0x407f3b
add byte [ebx + 0x4b], cl
cmp byte [ebx], dh
inc ecx
push eax
dec esp
dec esp
push eax
inc esi
add esp, 4
or esi, 0xa8ad
jmp 0x407f4d
add esi, 0x74d9
pop esi
push edi
and edi, 0x88a
pop edi
mov ecx, dword [ebp - 0x4fc]
sub ecx, dword [ebp - 0x3f4]
cmp ecx, 0xffffffff
jb 0x407fa4
push edi
push eax
add esp, 4
add edi, 0xc5c7
or edi, 0xc309
pop edi
push edx
push ebx
add esp, 4
xor edx, 0x8d0e
or edx, 0xb295
jmp 0x407f98
and edx, 0x182bd
pop edx
jmp 0x4081d2
add al, byte cs:[eax]
invalid
mov dword [ebp - 0xc9c], 7
mov edx, dword [ebp - 0x4fc]
mov dword [ebp - 0xae8], edx
invalid
call dword [edx - 0x7f]
loop 0x407f5c
inc ecx
add byte [eax], al
jmp 0x407fca
pop edx
push edx
push edi
add esp, 4
and edx, 0x1536c
jmp 0x407fdf
or edx, 0x143a9
and edx, 0x936c
pop edx
mov eax, dword [ebp - 0x15e0]
mov dword [ebp - 0xa64], eax
mov dword [ebp - 0xca0], 0
mov ecx, dword [ebp - 0x4fc]
cmp ecx, dword [ebp - 0x15e0]
jne 0x408053
push ebx
or ebx, 0x52b9
xor ebx, 0xb51d
pop ebx
push edi
push edi
add esp, 4
or edi, 0x12f70
jmp 0x40802f
pop edi
push ebx
push ebx
add esp, 4
sub ebx, 0x15aac
and ebx, 0x7a3
jecxz 0x407fe1
pop es
add byte [eax], al
pop ebx
mov edx, dword [ebp - 0xca0]
mov dword [ebp - 0x15e8], edx
jmp fcn.00408184
cmp dword [ebp - 0xc9c], 0
jle 0x408178
push edi
push edi
add esp, 4
add edi, 0xfff3
or edi, 0x7b38
pop edi
push edi
and edi, 0x8138
or edi, 0xb5c
call 0x40808e
add byte [edx + edi], dh
inc eax
dec eax
dec edx
aaa
dec esp
cmp byte [ebx - 0x7d], al
les eax, [edi + ebx*2]
mov eax, dword [ebp - 0xae8]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa64]
movzx eax, byte [edx]
cmp ecx, eax
je 0x408114
push ecx
call 0x4080b8
add byte [eax], al
add byte [esp + esi], bh
cmp dword [edx + 0x39], ecx
dec esp
dec edi
cmp eax, 0x4c48343
or ecx, 0x14895
call 0x4080d0
add byte [esi], bh
cmp byte [eax + 0x3c], dl
inc edx
xor al, 0x42
dec esi
add esp, 4
add ecx, 0xaffe
pop ecx
mov ecx, dword [ebp - 0xae8]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0xa64]
movzx ecx, byte [eax]
cmp edx, ecx
jle fcn.004080fc
mov dword [ebp - 0x15e4], 1
jmp 0x408106
push eax
push ebx
add esp, 4
sub eax, 0xdb22
and eax, 0x8add
pop eax
push edx
push esi
add esp, 4
jmp 0x408133
sub edx, 0x139ef
add edx, 0x3f93
sub edx, 0x5ac9
pop edx
mov eax, dword [ebp - 0xc9c]
sub eax, 1
mov dword [ebp - 0xc9c], eax
mov ecx, dword [ebp - 0xae8]
add ecx, 1
mov dword [ebp - 0xae8], ecx
mov edx, dword [ebp - 0xa64]
add edx, 1
mov dword [ebp - 0xa64], edx
cmc
invalid
invalid
jmp 0x408053
cmp dword [ebp - 0x15e8], 0
jne 0x4081cd
push edi
push edi
add esp, 4
jmp 0x408198
xor edi, 0x63e
or edi, 0x17081
xor edi, 0x7126
pop edi
push edi
and edi, 0xb43b
sub edi, 0xd68e
jmp 0x4081be
pop edi
invalid