joyce8/EMBER2024-capa huggingface dataset:
Function at 0x406fbe
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
sub ebx, 0x1142d
jmp 0x406e81
pop ebx
push eax
push eax
add esp, 4
jmp 0x406e8d
jmp 0x406e92
pop eax
push ebx
add ebx, 0x13959
pop ebx
mov dword [ebp - 0x3cc], 0
push eax
push edx
add esp, 4
and eax, 0xec3e
sub eax, 0x9ff0
call 0x406ec3
add byte [ecx + 0x45], cl
push eax
inc ebp
dec esp
aas
dec esp
add esp, 4
les eax, [eax + ebp*8]
or byte [eax], al
add byte [eax], al
add byte [edx + 0x3d], cl
cmp edi, dword [edi]
dec eax
dec esi
inc ebp
add esp, 4
pop eax
push edx
push edi
add esp, 4
add edx, 0x11fe
pop edx
push eax
push edx
add esp, 4
add eax, 0x6d9d
pop eax
push edi
and edi, 0x5491
sub edi, 0xddf6
add edi, 0x29ba
or edi, 0x55f7
pop edi
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb80]
mov dword [ebp - 0x14c8], eax
push esi
call 0x406f2e
add byte [ebx], dh
aas
inc ecx
dec eax
dec esp
cmp al, 0x3e
dec edi
add esp, 4
jmp 0x406f39
call 0x406f46
add byte [ecx + 0x3b], al
cmp esi, dword [0x4850413c]
add esp, 4
or esi, 0x110bc
pop esi
mov dword [ebp - 0x1fac], 0xffffffff
push ebx
jmp 0x406f60
call 0x406f6f
add byte [ebx], dh
cmp byte [esi + 0x4b], al
inc eax
cmp eax, dword [edi + 0x45]
cmp byte [ebx - 0xc7efb3c], al
cmp byte [esi], al
add byte [eax], al
call 0x406f88
add byte [0x343d4e44], bh
xor eax, 0x494c4d4e
add esp, 4
pop ebx
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4d0], ecx
jmp 0x406fa9
mov edx, dword [ebp - 0x4d0]
add edx, 1
mov dword [ebp - 0x4d0], edx
push edi
jmp 0x406fb1
add eax, 0x42484046
dec ecx
call 0x406fbe
add byte [ebp + 0x50], al
xor al, 0x45
dec ecx
aaa
xor eax, dword [ebx - 0x187efb3c]
jg 0x406fab
add byte [eax], al
pop edi
push ecx
sub ecx, 0x4e9f
jmp 0x406fd4
add ecx, 0xd28
pop ecx
mov eax, dword [ebp - 0x4d0]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x407023
push ecx
jmp 0x406ff3
pop ecx
push ebx
push esi
add esp, 4
and ebx, 0x5525
sub ebx, 0xe30d
sub ebx, 0x14c9b
dec esp
add dword [eax], eax
pop ebx
push esi
jmp 0x407016
jmp 0x40701d
pop esi
jmp 0x407251
mov dword [ebp - 0xc10], 7
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0xa60], ecx
push edx
push eax
add esp, 4
call 0x40704d
add byte [ecx + 0x43], al
aaa
push eax
inc ebp
dec edi
dec esp
inc edi
inc edi
add esp, 4
Function at 0x40702c
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
sub ebx, 0x1142d
jmp 0x406e81
pop ebx
push eax
push eax
add esp, 4
jmp 0x406e8d
jmp 0x406e92
pop eax
push ebx
add ebx, 0x13959
pop ebx
mov dword [ebp - 0x3cc], 0
push eax
push edx
add esp, 4
and eax, 0xec3e
sub eax, 0x9ff0
call 0x406ec3
add byte [ecx + 0x45], cl
push eax
inc ebp
dec esp
aas
dec esp
add esp, 4
les eax, [eax + ebp*8]
or byte [eax], al
add byte [eax], al
add byte [edx + 0x3d], cl
cmp edi, dword [edi]
dec eax
dec esi
inc ebp
add esp, 4
pop eax
push edx
push edi
add esp, 4
add edx, 0x11fe
pop edx
push eax
push edx
add esp, 4
add eax, 0x6d9d
pop eax
push edi
and edi, 0x5491
sub edi, 0xddf6
add edi, 0x29ba
or edi, 0x55f7
pop edi
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb80]
mov dword [ebp - 0x14c8], eax
push esi
call 0x406f2e
add byte [ebx], dh
aas
inc ecx
dec eax
dec esp
cmp al, 0x3e
dec edi
add esp, 4
jmp 0x406f39
call 0x406f46
add byte [ecx + 0x3b], al
cmp esi, dword [0x4850413c]
add esp, 4
or esi, 0x110bc
pop esi
mov dword [ebp - 0x1fac], 0xffffffff
push ebx
jmp 0x406f60
call 0x406f6f
add byte [ebx], dh
cmp byte [esi + 0x4b], al
inc eax
cmp eax, dword [edi + 0x45]
cmp byte [ebx - 0xc7efb3c], al
cmp byte [esi], al
add byte [eax], al
call 0x406f88
add byte [0x343d4e44], bh
xor eax, 0x494c4d4e
add esp, 4
pop ebx
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4d0], ecx
jmp 0x406fa9
mov edx, dword [ebp - 0x4d0]
add edx, 1
mov dword [ebp - 0x4d0], edx
push edi
jmp 0x406fb1
add eax, 0x42484046
dec ecx
call 0x406fbe
add byte [ebp + 0x50], al
xor al, 0x45
dec ecx
aaa
xor eax, dword [ebx - 0x187efb3c]
jg 0x406fab
add byte [eax], al
pop edi
push ecx
sub ecx, 0x4e9f
jmp 0x406fd4
add ecx, 0xd28
pop ecx
mov eax, dword [ebp - 0x4d0]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x407023
push ecx
jmp 0x406ff3
pop ecx
push ebx
push esi
add esp, 4
and ebx, 0x5525
sub ebx, 0xe30d
sub ebx, 0x14c9b
dec esp
add dword [eax], eax
pop ebx
push esi
jmp 0x407016
jmp 0x40701d
pop esi
jmp 0x407251
mov dword [ebp - 0xc10], 7
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0xa60], ecx
push edx
push eax
add esp, 4
call 0x40704d
add byte [ecx + 0x43], al
aaa
push eax
inc ebp
dec edi
dec esp
inc edi
inc edi
add esp, 4
Function at 0x40704d
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
sub ebx, 0x1142d
jmp 0x406e81
pop ebx
push eax
push eax
add esp, 4
jmp 0x406e8d
jmp 0x406e92
pop eax
push ebx
add ebx, 0x13959
pop ebx
mov dword [ebp - 0x3cc], 0
push eax
push edx
add esp, 4
and eax, 0xec3e
sub eax, 0x9ff0
call 0x406ec3
add byte [ecx + 0x45], cl
push eax
inc ebp
dec esp
aas
dec esp
add esp, 4
les eax, [eax + ebp*8]
or byte [eax], al
add byte [eax], al
add byte [edx + 0x3d], cl
cmp edi, dword [edi]
dec eax
dec esi
inc ebp
add esp, 4
pop eax
push edx
push edi
add esp, 4
add edx, 0x11fe
pop edx
push eax
push edx
add esp, 4
add eax, 0x6d9d
pop eax
push edi
and edi, 0x5491
sub edi, 0xddf6
add edi, 0x29ba
or edi, 0x55f7
pop edi
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb80]
mov dword [ebp - 0x14c8], eax
push esi
call 0x406f2e
add byte [ebx], dh
aas
inc ecx
dec eax
dec esp
cmp al, 0x3e
dec edi
add esp, 4
jmp 0x406f39
call 0x406f46
add byte [ecx + 0x3b], al
cmp esi, dword [0x4850413c]
add esp, 4
or esi, 0x110bc
pop esi
mov dword [ebp - 0x1fac], 0xffffffff
push ebx
jmp 0x406f60
call 0x406f6f
add byte [ebx], dh
cmp byte [esi + 0x4b], al
inc eax
cmp eax, dword [edi + 0x45]
cmp byte [ebx - 0xc7efb3c], al
cmp byte [esi], al
add byte [eax], al
call 0x406f88
add byte [0x343d4e44], bh
xor eax, 0x494c4d4e
add esp, 4
pop ebx
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4d0], ecx
jmp 0x406fa9
mov edx, dword [ebp - 0x4d0]
add edx, 1
mov dword [ebp - 0x4d0], edx
push edi
jmp 0x406fb1
add eax, 0x42484046
dec ecx
call 0x406fbe
add byte [ebp + 0x50], al
xor al, 0x45
dec ecx
aaa
xor eax, dword [ebx - 0x187efb3c]
jg 0x406fab
add byte [eax], al
pop edi
push ecx
sub ecx, 0x4e9f
jmp 0x406fd4
add ecx, 0xd28
pop ecx
mov eax, dword [ebp - 0x4d0]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x407023
push ecx
jmp 0x406ff3
pop ecx
push ebx
push esi
add esp, 4
and ebx, 0x5525
sub ebx, 0xe30d
sub ebx, 0x14c9b
dec esp
add dword [eax], eax
pop ebx
push esi
jmp 0x407016
jmp 0x40701d
pop esi
jmp 0x407251
mov dword [ebp - 0xc10], 7
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0xa60], ecx
push edx
push eax
add esp, 4
call 0x40704d
add byte [ecx + 0x43], al
aaa
push eax
inc ebp
dec edi
dec esp
inc edi
inc edi
add esp, 4

Function at 0x407050
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
pop edx
push ecx
add ecx, 0x41e2
sub ecx, 0x134a
xor ecx, 0xe67
or ecx, 0x158c2
add dword [eax], eax
pop ecx
mov edx, dword [ebp - 0x14c8]
mov dword [ebp - 0x9f0], edx
mov dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0x4d0]
cmp eax, dword [ebp - 0x14c8]
jne 0x4070d2
push edx
push edi
add esp, 4
xor edx, 0x9b3a
or edx, 0x1263e
or edx, 0xcde7
pop edx
push ecx
xor ecx, 0xd415
add ecx, 0x7212
xor ecx, 0x14fef
sub ecx, 0x3a9
pop ecx
mov ecx, dword [ebp - 0xc14]
invalid
Function at 0x4070fc
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
cmp dword [ebp - 0xc10], 0
jle 0x4071f7
push eax
push eax
add esp, 4
and eax, 0x93e8
and eax, 0xccf1
int1
int3
add byte [eax], al
sub eax, 0x13efd
pop eax
push ecx
add ecx, 0xab17
add byte [eax], al
add byte [eax], al
sub ecx, 0x8e76
sub ecx, 0x96ed
add ecx, 0x129ad
pop ecx
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x9f0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x407193
push ebx
push ecx
add esp, 4
and ebx, 0x5d7
add ebx, 0x498e
or ebx, 0xaefe
jmp 0x407144
pop ebx
push edi
add edi, 0xb2ad
xor edi, 0x7e00
sub edi, 0x14e82
pop edi
mov eax, dword [ebp - 0xa60]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x9f0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x40717b
mov dword [ebp - 0x14cc], 1
jmp 0x407185
mov dword [ebp - 0x14cc], 0xffffffff
mov ecx, dword [ebp - 0x14cc]
mov dword [ebp - 0xc14], ecx
invalid
push eax
jmp 0x40719d
pop eax
push ebx
push eax
add esp, 4
call 0x4071af
add byte [edi], bh
inc ebx
dec eax
dec esi
inc esi
cmp eax, dword [ebx + 0x505b04c4]
push edi
add esp, 4
xor eax, 0x4551
or eax, 0x927a
pop eax
mov edx, dword [ebp - 0xc10]
sub edx, 1
mov dword [ebp - 0xc10], edx
mov eax, dword [ebp - 0xa60]
add eax, 1
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0x9f0]
lea edx, [eax]
idiv bh
inc dword [ebx - 0x7276fe3f]
adc dh, dh
invalid
invalid
jmp 0x4070d2
mov edx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], edx
cmp dword [ebp - 0x14d0], 0
jne 0x40724c
push esi
add esi, 0x8d69
call 0x407222
add byte [edx + 0x4c], cl
cmp al, 0x45
dec edi
dec eax
cmp eax, dword [ebx - 0x7d]
les eax, [ecx + eax*4]
out 0x77, al
inc ecx
add dword [eax], eax
add esi, 0x49cc
pop esi
push ecx
push ebx
add esp, 4
or ecx, 0x6816
pop ecx
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0xa5c], eax
jmp 0x40728d
jmp 0x406f9a
push esi
add esi, 0x4c7
jmp 0x40729c
pop esi
push ebx
push ebx
add esp, 4
call 0x4072af
add byte [eax + 0x37], cl
cmp dword [eax + 0x38], eax
cmp al, byte [ecx - 0x7d]
Function at 0x4071af
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
cmp dword [ebp - 0xc10], 0
jle 0x4071f7
push eax
push eax
add esp, 4
and eax, 0x93e8
and eax, 0xccf1
int1
int3
add byte [eax], al
sub eax, 0x13efd
pop eax
push ecx
add ecx, 0xab17
add byte [eax], al
add byte [eax], al
sub ecx, 0x8e76
sub ecx, 0x96ed
add ecx, 0x129ad
pop ecx
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x9f0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x407193
push ebx
push ecx
add esp, 4
and ebx, 0x5d7
add ebx, 0x498e
or ebx, 0xaefe
jmp 0x407144
pop ebx
push edi
add edi, 0xb2ad
xor edi, 0x7e00
sub edi, 0x14e82
pop edi
mov eax, dword [ebp - 0xa60]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x9f0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x40717b
mov dword [ebp - 0x14cc], 1
jmp 0x407185
mov dword [ebp - 0x14cc], 0xffffffff
mov ecx, dword [ebp - 0x14cc]
mov dword [ebp - 0xc14], ecx
invalid
push eax
jmp 0x40719d
pop eax
push ebx
push eax
add esp, 4
call 0x4071af
add byte [edi], bh
inc ebx
dec eax
dec esi
inc esi
cmp eax, dword [ebx + 0x505b04c4]
push edi
add esp, 4
xor eax, 0x4551
or eax, 0x927a
pop eax
mov edx, dword [ebp - 0xc10]
sub edx, 1
mov dword [ebp - 0xc10], edx
mov eax, dword [ebp - 0xa60]
add eax, 1
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0x9f0]
lea edx, [eax]
idiv bh
inc dword [ebx - 0x7276fe3f]
adc dh, dh
invalid
invalid
jmp 0x4070d2
mov edx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], edx
cmp dword [ebp - 0x14d0], 0
jne 0x40724c
push esi
add esi, 0x8d69
call 0x407222
add byte [edx + 0x4c], cl
cmp al, 0x45
dec edi
dec eax
cmp eax, dword [ebx - 0x7d]
les eax, [ecx + eax*4]
out 0x77, al
inc ecx
add dword [eax], eax
add esi, 0x49cc
pop esi
push ecx
push ebx
add esp, 4
or ecx, 0x6816
pop ecx
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0xa5c], eax
jmp 0x40728d
jmp 0x406f9a
push esi
add esi, 0x4c7
jmp 0x40729c
pop esi
push ebx
push ebx
add esp, 4
call 0x4072af
add byte [eax + 0x37], cl
cmp dword [eax + 0x38], eax
cmp al, byte [ecx - 0x7d]
Function at 0x407222
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
cmp dword [ebp - 0xc10], 0
jle 0x4071f7
push eax
push eax
add esp, 4
and eax, 0x93e8
and eax, 0xccf1
int1
int3
add byte [eax], al
sub eax, 0x13efd
pop eax
push ecx
add ecx, 0xab17
add byte [eax], al
add byte [eax], al
sub ecx, 0x8e76
sub ecx, 0x96ed
add ecx, 0x129ad
pop ecx
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x9f0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x407193
push ebx
push ecx
add esp, 4
and ebx, 0x5d7
add ebx, 0x498e
or ebx, 0xaefe
jmp 0x407144
pop ebx
push edi
add edi, 0xb2ad
xor edi, 0x7e00
sub edi, 0x14e82
pop edi
mov eax, dword [ebp - 0xa60]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x9f0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x40717b
mov dword [ebp - 0x14cc], 1
jmp 0x407185
mov dword [ebp - 0x14cc], 0xffffffff
mov ecx, dword [ebp - 0x14cc]
mov dword [ebp - 0xc14], ecx
invalid
push eax
jmp 0x40719d
pop eax
push ebx
push eax
add esp, 4
call 0x4071af
add byte [edi], bh
inc ebx
dec eax
dec esi
inc esi
cmp eax, dword [ebx + 0x505b04c4]
push edi
add esp, 4
xor eax, 0x4551
or eax, 0x927a
pop eax
mov edx, dword [ebp - 0xc10]
sub edx, 1
mov dword [ebp - 0xc10], edx
mov eax, dword [ebp - 0xa60]
add eax, 1
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0x9f0]
lea edx, [eax]
idiv bh
inc dword [ebx - 0x7276fe3f]
adc dh, dh
invalid
invalid
jmp 0x4070d2
mov edx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], edx
cmp dword [ebp - 0x14d0], 0
jne 0x40724c
push esi
add esi, 0x8d69
call 0x407222
add byte [edx + 0x4c], cl
cmp al, 0x45
dec edi
dec eax
cmp eax, dword [ebx - 0x7d]
les eax, [ecx + eax*4]
out 0x77, al
inc ecx
add dword [eax], eax
add esi, 0x49cc
pop esi
push ecx
push ebx
add esp, 4
or ecx, 0x6816
pop ecx
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0xa5c], eax
jmp 0x40728d
jmp 0x406f9a
push esi
add esi, 0x4c7
jmp 0x40729c
pop esi
push ebx
push ebx
add esp, 4
call 0x4072af
add byte [eax + 0x37], cl
cmp dword [eax + 0x38], eax
cmp al, byte [ecx - 0x7d]
Function at 0x4072af
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
cmp dword [ebp - 0xc10], 0
jle 0x4071f7
push eax
push eax
add esp, 4
and eax, 0x93e8
and eax, 0xccf1
int1
int3
add byte [eax], al
sub eax, 0x13efd
pop eax
push ecx
add ecx, 0xab17
add byte [eax], al
add byte [eax], al
sub ecx, 0x8e76
sub ecx, 0x96ed
add ecx, 0x129ad
pop ecx
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x9f0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x407193
push ebx
push ecx
add esp, 4
and ebx, 0x5d7
add ebx, 0x498e
or ebx, 0xaefe
jmp 0x407144
pop ebx
push edi
add edi, 0xb2ad
xor edi, 0x7e00
sub edi, 0x14e82
pop edi
mov eax, dword [ebp - 0xa60]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x9f0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x40717b
mov dword [ebp - 0x14cc], 1
jmp 0x407185
mov dword [ebp - 0x14cc], 0xffffffff
mov ecx, dword [ebp - 0x14cc]
mov dword [ebp - 0xc14], ecx
invalid
push eax
jmp 0x40719d
pop eax
push ebx
push eax
add esp, 4
call 0x4071af
add byte [edi], bh
inc ebx
dec eax
dec esi
inc esi
cmp eax, dword [ebx + 0x505b04c4]
push edi
add esp, 4
xor eax, 0x4551
or eax, 0x927a
pop eax
mov edx, dword [ebp - 0xc10]
sub edx, 1
mov dword [ebp - 0xc10], edx
mov eax, dword [ebp - 0xa60]
add eax, 1
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0x9f0]
lea edx, [eax]
idiv bh
inc dword [ebx - 0x7276fe3f]
adc dh, dh
invalid
invalid
jmp 0x4070d2
mov edx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], edx
cmp dword [ebp - 0x14d0], 0
jne 0x40724c
push esi
add esi, 0x8d69
call 0x407222
add byte [edx + 0x4c], cl
cmp al, 0x45
dec edi
dec eax
cmp eax, dword [ebx - 0x7d]
les eax, [ecx + eax*4]
out 0x77, al
inc ecx
add dword [eax], eax
add esi, 0x49cc
pop esi
push ecx
push ebx
add esp, 4
or ecx, 0x6816
pop ecx
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0xa5c], eax
jmp 0x40728d
jmp 0x406f9a
push esi
add esi, 0x4c7
jmp 0x40729c
pop esi
push ebx
push ebx
add esp, 4
call 0x4072af
add byte [eax + 0x37], cl
cmp dword [eax + 0x38], eax
cmp al, byte [ecx - 0x7d]

Function at 0x407327
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
or ebx, 0xde39
and ebx, 0x114d5
jmp 0x40733c
pop ebx
push esi
sub esi, 0x12c91
pop esi
mov ecx, 0x6b
mov word [ebp - 0x1628], cx
mov edx, 0x65
mov word [ebp - 0x1626], dx
mov eax, 0x72
mov word [ebp - 0x1624], ax
mov ecx, 0x6e
mov word [ebp - 0x1622], cx
mov edx, 0x65
mov word [ebp - 0x1620], dx
mov eax, 0x6c
mov word [ebp - 0x161e], ax
mov ecx, 0x33
mov word [ebp - 0x161c], cx
mov edx, 0x32
mov word [ebp - 0x161a], dx
mov eax, 0x2e
mov word [ebp - 0x1618], ax
mov ecx, 0x64
mov word [ebp - 0x1616], cx
mov edx, 0x6c
mov word [ebp - 0x1614], dx
mov eax, 0x6c
mov word [ebp - 0x1612], ax
xor ecx, ecx
mov word [ebp - 0x1610], cx
push eax
push eax
add esp, 4
jmp 0x4073eb
xor eax, 0x4218
pop eax
push edx
push ebx
add esp, 4
or edx, 0x1554e
add edx, 0x143a8
or edx, 0x7514
sub edx, 0x7e45
pop edx
push eax
push esi
add esp, 4
xor eax, 0x6e23
xor eax, 0x11826
pop eax
push edx
push eax
add esp, 4
jmp 0x40742f
invalid
Function at 0x407484
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
loopne 0x4074e4
push ss
add byte [eax], al
sub eax, 0xfcc9
add eax, 0xdc58
or eax, 0x1547
pop eax
cmp dword [ebp - 0x14d4], 0
jne 0x4074b4
mov dword [ebp - 0x2e0], 0
jmp 0x407770
mov eax, dword [ebp - 0x14d4]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc20], edx
push edx
push esi
add esp, 4
invalid

Function at 0x4074d8
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add al, ch
or dword [eax], eax
add byte [eax], al
add byte [ebx], dh
inc esp
aas
cmp byte [edx], dh
aaa
dec ebp
cmp byte [ebx + 0x5eb04c4], al
inc ecx
inc eax
xor esi, dword [esp + eax*2]
xor ebx, 0x5442
pop ebx
cmp dword [ebp - 0xc20], 0
jne 0x407510
mov dword [ebp - 0x2e0], 0
jmp 0x407770
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0x4d4], eax

Function at 0x4074e7
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add al, ch
or dword [eax], eax
add byte [eax], al
add byte [ebx], dh
inc esp
aas
cmp byte [edx], dh
aaa
dec ebp
cmp byte [ebx + 0x5eb04c4], al
inc ecx
inc eax
xor esi, dword [esp + eax*2]
xor ebx, 0x5442
pop ebx
cmp dword [ebp - 0xc20], 0
jne 0x407510
mov dword [ebp - 0x2e0], 0
jmp 0x407770
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0x4d4], eax

Function at 0x4075bc
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edi
push ecx
add esp, 4
and edi, 0x10c6b
jmp 0x40752f
pop edi
push ecx
push ebx
add esp, 4
and ecx, 0xc400
xor ecx, 0xc4de
sub ecx, 0x13542
and ecx, 0x12649
pop ecx
lea ecx, [ebp - 0x1628]
mov dword [ebp - 0xc1c], ecx
mov edx, dword [ebp - 0x4d4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc18], eax
xor ecx, ecx
mov word [ebp - 0x1f8], cx
xor edx, edx
mov word [ebp - 0x100], dx
push ebx
add ebx, 0x146f8
pop ebx
push esi
jmp 0x40758c
xor esi, 0x103c0
and esi, 0x8f8e
add esi, 0x1cc1
pop esi
push edi
xor edi, 0xe5cc
xor edi, 0x1379d
pop edi
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xf7e], cx
dec dword [ebx - 0xc176b]
inc dword [ebx - 0x6a76fd3e]
ret 0x8902
xchg ebp, eax
invalid
invalid
invalid
invalid
mov ax, word [ebp - 0xf7e]
mov word [ebp - 0x1f8], ax
mov ecx, dword [ebp - 0xc1c]
mov dx, word [ecx]
mov word [ebp - 0xf80], dx
mov eax, dword [ebp - 0xc1c]
add eax, 2
mov dword [ebp - 0xc1c], eax
mov cx, word [ebp - 0xf80]
mov word [ebp - 0x100], cx
push ecx
push edx
add esp, 4
add ecx, 0x489d
xor ecx, 0x2b7b
jmp 0x407620
xor ecx, 0x22c7
pop ecx
push ebx
push esi
add esp, 4
and ebx, 0x15d7
sub ebx, 0x9f3f
pop ebx
movzx edx, word [ebp - 0x100]
test edx, edx
jne 0x40765c
invalid
mov bh, 0x95
invalid
Function at 0x4075c4
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edi
push ecx
add esp, 4
and edi, 0x10c6b
jmp 0x40752f
pop edi
push ecx
push ebx
add esp, 4
and ecx, 0xc400
xor ecx, 0xc4de
sub ecx, 0x13542
and ecx, 0x12649
pop ecx
lea ecx, [ebp - 0x1628]
mov dword [ebp - 0xc1c], ecx
mov edx, dword [ebp - 0x4d4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc18], eax
xor ecx, ecx
mov word [ebp - 0x1f8], cx
xor edx, edx
mov word [ebp - 0x100], dx
push ebx
add ebx, 0x146f8
pop ebx
push esi
jmp 0x40758c
xor esi, 0x103c0
and esi, 0x8f8e
add esi, 0x1cc1
pop esi
push edi
xor edi, 0xe5cc
xor edi, 0x1379d
pop edi
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xf7e], cx
dec dword [ebx - 0xc176b]
inc dword [ebx - 0x6a76fd3e]
ret 0x8902
xchg ebp, eax
invalid
invalid
invalid
invalid
mov ax, word [ebp - 0xf7e]
mov word [ebp - 0x1f8], ax
mov ecx, dword [ebp - 0xc1c]
mov dx, word [ecx]
mov word [ebp - 0xf80], dx
mov eax, dword [ebp - 0xc1c]
add eax, 2
mov dword [ebp - 0xc1c], eax
mov cx, word [ebp - 0xf80]
mov word [ebp - 0x100], cx
push ecx
push edx
add esp, 4
add ecx, 0x489d
xor ecx, 0x2b7b
jmp 0x407620
xor ecx, 0x22c7
pop ecx
push ebx
push esi
add esp, 4
and ebx, 0x15d7
sub ebx, 0x9f3f
pop ebx
movzx edx, word [ebp - 0x100]
test edx, edx
jne 0x40765c
invalid
mov bh, 0x95
invalid

Function at 0x4075cc
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edi
push ecx
add esp, 4
and edi, 0x10c6b
jmp 0x40752f
pop edi
push ecx
push ebx
add esp, 4
and ecx, 0xc400
xor ecx, 0xc4de
sub ecx, 0x13542
and ecx, 0x12649
pop ecx
lea ecx, [ebp - 0x1628]
mov dword [ebp - 0xc1c], ecx
mov edx, dword [ebp - 0x4d4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc18], eax
xor ecx, ecx
mov word [ebp - 0x1f8], cx
xor edx, edx
mov word [ebp - 0x100], dx
push ebx
add ebx, 0x146f8
pop ebx
push esi
jmp 0x40758c
xor esi, 0x103c0
and esi, 0x8f8e
add esi, 0x1cc1
pop esi
push edi
xor edi, 0xe5cc
xor edi, 0x1379d
pop edi
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xf7e], cx
dec dword [ebx - 0xc176b]
inc dword [ebx - 0x6a76fd3e]
ret 0x8902
xchg ebp, eax
invalid
invalid
invalid
invalid
mov ax, word [ebp - 0xf7e]
mov word [ebp - 0x1f8], ax
mov ecx, dword [ebp - 0xc1c]
mov dx, word [ecx]
mov word [ebp - 0xf80], dx
mov eax, dword [ebp - 0xc1c]
add eax, 2
mov dword [ebp - 0xc1c], eax
mov cx, word [ebp - 0xf80]
mov word [ebp - 0x100], cx
push ecx
push edx
add esp, 4
add ecx, 0x489d
xor ecx, 0x2b7b
jmp 0x407620
xor ecx, 0x22c7
pop ecx
push ebx
push esi
add esp, 4
and ebx, 0x15d7
sub ebx, 0x9f3f
pop ebx
movzx edx, word [ebp - 0x100]
test edx, edx
jne 0x40765c
invalid
mov bh, 0x95
invalid

Function at 0x4076d8
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
and ebx, 0xc5e
call 0x4076f0
add byte [edx], bh
dec ebx
dec ecx
dec ebx
cmp eax, 0x4c494d39
cmp dword [ebp + 0x49], ecx
dec esp
add esp, 4
sub ebx, 0x7ad8
pop ebx
mov eax, dword [ebp - 0x4d4]
invalid
test dword [eax], esp
std
Function at 0x4076f0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
and ebx, 0xc5e
call 0x4076f0
add byte [edx], bh
dec ebx
dec ecx
dec ebx
cmp eax, 0x4c494d39
cmp dword [ebp + 0x49], ecx
dec esp
add esp, 4
sub ebx, 0x7ad8
pop ebx
mov eax, dword [ebp - 0x4d4]
invalid
test dword [eax], esp
std