joyce8/EMBER2024-capa huggingface dataset:
Function at 0x42f02c
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edi
push ebx
push edx
add esp, 4
sub ebx, 0x10ca7
jmp 0x42f042
xor ebx, 0x15eb9
pop ebx
mov ecx, dword [ebp - 0x138]
mov dword [ebp - 0x9c], ecx
jmp 0x42f402

Function at 0x42f0de
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
or eax, 0xc2ca
pop eax
mov eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x88]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x3e8], ecx
mov dword [ebp - 0x130], 0
jmp 0x42f118
mov eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x130]
cmp ecx, dword [eax + 0x18]
jae 0x42f3f6
push ebx
push eax
add esp, 4
call 0x42f142
add byte [edi + 0x33], al
cmp al, 0x3b
dec eax
xor eax, 0x3d3a3c34
add esp, 4
pop ebx
push esi
jmp 0x42f14c
and esi, 0x169bc
sub esi, 0x83b2
xor esi, 0x9257
pop esi
mov edx, dword [ebp - 0x130]
mov eax, dword [ebp - 0x3e0]
mov ecx, dword [ebp - 0x88]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x134], ecx
push ecx
xor ecx, 0xabcc
add ecx, 0x5076
jmp 0x42f18f
pop ecx
push eax
or eax, 0x118b6
add eax, 0x10f85
pop eax
push ebx
and ebx, 0xa482
and ebx, 0xee8
pop ebx
mov edx, dword [ebp - 0x130]
mov eax, dword [ebp - 0x3e4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x3e8]
mov eax, dword [ebp - 0x88]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x3ec], eax
push eax
xor eax, 0x69cd
add eax, 0x12355
call 0x42f1ea
add byte [eax + 0x47], dl
cmp byte [ecx + edi], bh
cmp eax, dword [ebx + 0x515804c4]
jmp 0x42f1f6
jmp 0x42f1fc
xor ecx, 0x1ce4
pop ecx
mov dword [ebp - 0x30], 0
jmp 0x42f215
mov ecx, dword [ebp - 0x30]
add ecx, 1
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x134]
add edx, dword [ebp - 0x30]
movsx eax, byte [edx]
test eax, eax
je 0x42f2b1
mov ecx, dword [ebp - 0x30]
movsx edx, byte [ebp + ecx - 0x198]
test edx, edx
je 0x42f2b1
push edx
push edi
add esp, 4
sub edx, 0x3a8e
pop edx
push edx
push edx
add esp, 4
add edx, 0xe14
pop edx
push esi
and esi, 0x160de
and esi, 0x5bde
pop esi
push esi
push ecx
add esp, 4
or esi, 0x9b8e
pop esi
mov eax, dword [ebp - 0x134]
add eax, dword [ebp - 0x30]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x30]
movsx eax, byte [ebp + edx - 0x198]
cmp ecx, eax
je 0x42f2a3
mov ecx, dword [ebp - 0x134]
add ecx, dword [ebp - 0x30]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x30]
movsx ecx, byte [ebp + eax - 0x198]
cmp edx, ecx
jne 0x42f2aa
jmp 0x42f20c
jmp 0x42f2b1
push edi
push ecx
add esp, 4
call 0x42f2c3
add byte [eax + 0x3a], dl
inc ebx
cmp eax, 0x8339384b
les eax, [eax + ebp*8]
or byte [eax], al
add byte [eax], al
add byte [ebp + 0x36], al
inc esi
inc ecx
dec esi
cmp edx, dword [eax - 0x7d]
les eax, [ecx + eax*4]
out dx, eax
xchg ecx, eax
add dword [eax], eax
add byte [ecx + 0x16ed8f7], al
add byte [edi - 0x75], bl
xchg ebp, eax
int3
mov edx, dword [ebp - 0x138]
mov dword [ebp - 0x9c], edx
Function at 0x42f142
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
or eax, 0xc2ca
pop eax
mov eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x88]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x3e8], ecx
mov dword [ebp - 0x130], 0
jmp 0x42f118
mov eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x130]
cmp ecx, dword [eax + 0x18]
jae 0x42f3f6
push ebx
push eax
add esp, 4
call 0x42f142
add byte [edi + 0x33], al
cmp al, 0x3b
dec eax
xor eax, 0x3d3a3c34
add esp, 4
pop ebx
push esi
jmp 0x42f14c
and esi, 0x169bc
sub esi, 0x83b2
xor esi, 0x9257
pop esi
mov edx, dword [ebp - 0x130]
mov eax, dword [ebp - 0x3e0]
mov ecx, dword [ebp - 0x88]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x134], ecx
push ecx
xor ecx, 0xabcc
add ecx, 0x5076
jmp 0x42f18f
pop ecx
push eax
or eax, 0x118b6
add eax, 0x10f85
pop eax
push ebx
and ebx, 0xa482
and ebx, 0xee8
pop ebx
mov edx, dword [ebp - 0x130]
mov eax, dword [ebp - 0x3e4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x3e8]
mov eax, dword [ebp - 0x88]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x3ec], eax
push eax
xor eax, 0x69cd
add eax, 0x12355
call 0x42f1ea
add byte [eax + 0x47], dl
cmp byte [ecx + edi], bh
cmp eax, dword [ebx + 0x515804c4]
jmp 0x42f1f6
jmp 0x42f1fc
xor ecx, 0x1ce4
pop ecx
mov dword [ebp - 0x30], 0
jmp 0x42f215
mov ecx, dword [ebp - 0x30]
add ecx, 1
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x134]
add edx, dword [ebp - 0x30]
movsx eax, byte [edx]
test eax, eax
je 0x42f2b1
mov ecx, dword [ebp - 0x30]
movsx edx, byte [ebp + ecx - 0x198]
test edx, edx
je 0x42f2b1
push edx
push edi
add esp, 4
sub edx, 0x3a8e
pop edx
push edx
push edx
add esp, 4
add edx, 0xe14
pop edx
push esi
and esi, 0x160de
and esi, 0x5bde
pop esi
push esi
push ecx
add esp, 4
or esi, 0x9b8e
pop esi
mov eax, dword [ebp - 0x134]
add eax, dword [ebp - 0x30]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x30]
movsx eax, byte [ebp + edx - 0x198]
cmp ecx, eax
je 0x42f2a3
mov ecx, dword [ebp - 0x134]
add ecx, dword [ebp - 0x30]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x30]
movsx ecx, byte [ebp + eax - 0x198]
cmp edx, ecx
jne 0x42f2aa
jmp 0x42f20c
jmp 0x42f2b1
push edi
push ecx
add esp, 4
call 0x42f2c3
add byte [eax + 0x3a], dl
inc ebx
cmp eax, 0x8339384b
les eax, [eax + ebp*8]
or byte [eax], al
add byte [eax], al
add byte [ebp + 0x36], al
inc esi
inc ecx
dec esi
cmp edx, dword [eax - 0x7d]
les eax, [ecx + eax*4]
out dx, eax
xchg ecx, eax
add dword [eax], eax
add byte [ecx + 0x16ed8f7], al
add byte [edi - 0x75], bl
xchg ebp, eax
int3
mov edx, dword [ebp - 0x138]
mov dword [ebp - 0x9c], edx
Function at 0x42f1ea
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
or eax, 0xc2ca
pop eax
mov eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x88]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x3e8], ecx
mov dword [ebp - 0x130], 0
jmp 0x42f118
mov eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x130]
cmp ecx, dword [eax + 0x18]
jae 0x42f3f6
push ebx
push eax
add esp, 4
call 0x42f142
add byte [edi + 0x33], al
cmp al, 0x3b
dec eax
xor eax, 0x3d3a3c34
add esp, 4
pop ebx
push esi
jmp 0x42f14c
and esi, 0x169bc
sub esi, 0x83b2
xor esi, 0x9257
pop esi
mov edx, dword [ebp - 0x130]
mov eax, dword [ebp - 0x3e0]
mov ecx, dword [ebp - 0x88]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x134], ecx
push ecx
xor ecx, 0xabcc
add ecx, 0x5076
jmp 0x42f18f
pop ecx
push eax
or eax, 0x118b6
add eax, 0x10f85
pop eax
push ebx
and ebx, 0xa482
and ebx, 0xee8
pop ebx
mov edx, dword [ebp - 0x130]
mov eax, dword [ebp - 0x3e4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x3e8]
mov eax, dword [ebp - 0x88]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x3ec], eax
push eax
xor eax, 0x69cd
add eax, 0x12355
call 0x42f1ea
add byte [eax + 0x47], dl
cmp byte [ecx + edi], bh
cmp eax, dword [ebx + 0x515804c4]
jmp 0x42f1f6
jmp 0x42f1fc
xor ecx, 0x1ce4
pop ecx
mov dword [ebp - 0x30], 0
jmp 0x42f215
mov ecx, dword [ebp - 0x30]
add ecx, 1
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x134]
add edx, dword [ebp - 0x30]
movsx eax, byte [edx]
test eax, eax
je 0x42f2b1
mov ecx, dword [ebp - 0x30]
movsx edx, byte [ebp + ecx - 0x198]
test edx, edx
je 0x42f2b1
push edx
push edi
add esp, 4
sub edx, 0x3a8e
pop edx
push edx
push edx
add esp, 4
add edx, 0xe14
pop edx
push esi
and esi, 0x160de
and esi, 0x5bde
pop esi
push esi
push ecx
add esp, 4
or esi, 0x9b8e
pop esi
mov eax, dword [ebp - 0x134]
add eax, dword [ebp - 0x30]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x30]
movsx eax, byte [ebp + edx - 0x198]
cmp ecx, eax
je 0x42f2a3
mov ecx, dword [ebp - 0x134]
add ecx, dword [ebp - 0x30]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x30]
movsx ecx, byte [ebp + eax - 0x198]
cmp edx, ecx
jne 0x42f2aa
jmp 0x42f20c
jmp 0x42f2b1
push edi
push ecx
add esp, 4
call 0x42f2c3
add byte [eax + 0x3a], dl
inc ebx
cmp eax, 0x8339384b
les eax, [eax + ebp*8]
or byte [eax], al
add byte [eax], al
add byte [ebp + 0x36], al
inc esi
inc ecx
dec esi
cmp edx, dword [eax - 0x7d]
les eax, [ecx + eax*4]
out dx, eax
xchg ecx, eax
add dword [eax], eax
add byte [ecx + 0x16ed8f7], al
add byte [edi - 0x75], bl
xchg ebp, eax
int3
mov edx, dword [ebp - 0x138]
mov dword [ebp - 0x9c], edx
Function at 0x42f2c3
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
or eax, 0xc2ca
pop eax
mov eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x88]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x3e8], ecx
mov dword [ebp - 0x130], 0
jmp 0x42f118
mov eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x130]
cmp ecx, dword [eax + 0x18]
jae 0x42f3f6
push ebx
push eax
add esp, 4
call 0x42f142
add byte [edi + 0x33], al
cmp al, 0x3b
dec eax
xor eax, 0x3d3a3c34
add esp, 4
pop ebx
push esi
jmp 0x42f14c
and esi, 0x169bc
sub esi, 0x83b2
xor esi, 0x9257
pop esi
mov edx, dword [ebp - 0x130]
mov eax, dword [ebp - 0x3e0]
mov ecx, dword [ebp - 0x88]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x134], ecx
push ecx
xor ecx, 0xabcc
add ecx, 0x5076
jmp 0x42f18f
pop ecx
push eax
or eax, 0x118b6
add eax, 0x10f85
pop eax
push ebx
and ebx, 0xa482
and ebx, 0xee8
pop ebx
mov edx, dword [ebp - 0x130]
mov eax, dword [ebp - 0x3e4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x3e8]
mov eax, dword [ebp - 0x88]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x3ec], eax
push eax
xor eax, 0x69cd
add eax, 0x12355
call 0x42f1ea
add byte [eax + 0x47], dl
cmp byte [ecx + edi], bh
cmp eax, dword [ebx + 0x515804c4]
jmp 0x42f1f6
jmp 0x42f1fc
xor ecx, 0x1ce4
pop ecx
mov dword [ebp - 0x30], 0
jmp 0x42f215
mov ecx, dword [ebp - 0x30]
add ecx, 1
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x134]
add edx, dword [ebp - 0x30]
movsx eax, byte [edx]
test eax, eax
je 0x42f2b1
mov ecx, dword [ebp - 0x30]
movsx edx, byte [ebp + ecx - 0x198]
test edx, edx
je 0x42f2b1
push edx
push edi
add esp, 4
sub edx, 0x3a8e
pop edx
push edx
push edx
add esp, 4
add edx, 0xe14
pop edx
push esi
and esi, 0x160de
and esi, 0x5bde
pop esi
push esi
push ecx
add esp, 4
or esi, 0x9b8e
pop esi
mov eax, dword [ebp - 0x134]
add eax, dword [ebp - 0x30]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x30]
movsx eax, byte [ebp + edx - 0x198]
cmp ecx, eax
je 0x42f2a3
mov ecx, dword [ebp - 0x134]
add ecx, dword [ebp - 0x30]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x30]
movsx ecx, byte [ebp + eax - 0x198]
cmp edx, ecx
jne 0x42f2aa
jmp 0x42f20c
jmp 0x42f2b1
push edi
push ecx
add esp, 4
call 0x42f2c3
add byte [eax + 0x3a], dl
inc ebx
cmp eax, 0x8339384b
les eax, [eax + ebp*8]
or byte [eax], al
add byte [eax], al
add byte [ebp + 0x36], al
inc esi
inc ecx
dec esi
cmp edx, dword [eax - 0x7d]
les eax, [ecx + eax*4]
out dx, eax
xchg ecx, eax
add dword [eax], eax
add byte [ecx + 0x16ed8f7], al
add byte [edi - 0x75], bl
xchg ebp, eax
int3
mov edx, dword [ebp - 0x138]
mov dword [ebp - 0x9c], edx
Function at 0x42f2d3
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
or eax, 0xc2ca
pop eax
mov eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x88]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x3e8], ecx
mov dword [ebp - 0x130], 0
jmp 0x42f118
mov eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x130]
cmp ecx, dword [eax + 0x18]
jae 0x42f3f6
push ebx
push eax
add esp, 4
call 0x42f142
add byte [edi + 0x33], al
cmp al, 0x3b
dec eax
xor eax, 0x3d3a3c34
add esp, 4
pop ebx
push esi
jmp 0x42f14c
and esi, 0x169bc
sub esi, 0x83b2
xor esi, 0x9257
pop esi
mov edx, dword [ebp - 0x130]
mov eax, dword [ebp - 0x3e0]
mov ecx, dword [ebp - 0x88]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x134], ecx
push ecx
xor ecx, 0xabcc
add ecx, 0x5076
jmp 0x42f18f
pop ecx
push eax
or eax, 0x118b6
add eax, 0x10f85
pop eax
push ebx
and ebx, 0xa482
and ebx, 0xee8
pop ebx
mov edx, dword [ebp - 0x130]
mov eax, dword [ebp - 0x3e4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x3e8]
mov eax, dword [ebp - 0x88]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x3ec], eax
push eax
xor eax, 0x69cd
add eax, 0x12355
call 0x42f1ea
add byte [eax + 0x47], dl
cmp byte [ecx + edi], bh
cmp eax, dword [ebx + 0x515804c4]
jmp 0x42f1f6
jmp 0x42f1fc
xor ecx, 0x1ce4
pop ecx
mov dword [ebp - 0x30], 0
jmp 0x42f215
mov ecx, dword [ebp - 0x30]
add ecx, 1
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x134]
add edx, dword [ebp - 0x30]
movsx eax, byte [edx]
test eax, eax
je 0x42f2b1
mov ecx, dword [ebp - 0x30]
movsx edx, byte [ebp + ecx - 0x198]
test edx, edx
je 0x42f2b1
push edx
push edi
add esp, 4
sub edx, 0x3a8e
pop edx
push edx
push edx
add esp, 4
add edx, 0xe14
pop edx
push esi
and esi, 0x160de
and esi, 0x5bde
pop esi
push esi
push ecx
add esp, 4
or esi, 0x9b8e
pop esi
mov eax, dword [ebp - 0x134]
add eax, dword [ebp - 0x30]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x30]
movsx eax, byte [ebp + edx - 0x198]
cmp ecx, eax
je 0x42f2a3
mov ecx, dword [ebp - 0x134]
add ecx, dword [ebp - 0x30]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x30]
movsx ecx, byte [ebp + eax - 0x198]
cmp edx, ecx
jne 0x42f2aa
jmp 0x42f20c
jmp 0x42f2b1
push edi
push ecx
add esp, 4
call 0x42f2c3
add byte [eax + 0x3a], dl
inc ebx
cmp eax, 0x8339384b
les eax, [eax + ebp*8]
or byte [eax], al
add byte [eax], al
add byte [ebp + 0x36], al
inc esi
inc ecx
dec esi
cmp edx, dword [eax - 0x7d]
les eax, [ecx + eax*4]
out dx, eax
xchg ecx, eax
add dword [eax], eax
add byte [ecx + 0x16ed8f7], al
add byte [edi - 0x75], bl
xchg ebp, eax
int3
mov edx, dword [ebp - 0x138]
mov dword [ebp - 0x9c], edx
Function at 0x42f32f
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x130]
add edx, 1
mov dword [ebp - 0x130], edx
add esp, 4
sub edx, 0xc824
or edx, 0xc897
pop edx
mov eax, dword [ebp - 0x134]
add eax, dword [ebp - 0x30]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x30]
movsx eax, byte [ebp + edx - 0x198]
or eax, 0x20
cmp ecx, eax
jge 0x42f36c
mov dword [ebp - 0x20c], 0xffffffff
jmp 0x42f3a8
push eax
call 0x42f37a
add byte [esi + 0x37], al
cmp eax, dword ss:[edx + edi + 0x4b]
add esp, 4
or eax, 0x2501
and eax, 0x185bd
add eax, 0x3e65
pop eax
push ecx
and ecx, 0x15445
xor ecx, 0x3a45
pop ecx
mov dword [ebp - 0x20c], 1
cmp dword [ebp - 0x20c], 0
jne 0x42f3f1
push eax
push eax
add esp, 4
xor eax, 0xaffd
xor eax, 0x15c28
or eax, 0x94a
call 0x42f3d4
add byte [edx + 0x3e], cl
inc ecx
dec edi
cmp eax, 0x4c48335
pop eax
push ebx
push ebx
add esp, 4
jmp 0x42f3e2
pop ebx
mov ecx, dword [ebp - 0x3ec]
mov dword [ebp - 0x9c], ecx
jmp 0x42f402
jmp 0x42f109

Function at 0x42f37a
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x130]
add edx, 1
mov dword [ebp - 0x130], edx
add esp, 4
sub edx, 0xc824
or edx, 0xc897
pop edx
mov eax, dword [ebp - 0x134]
add eax, dword [ebp - 0x30]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x30]
movsx eax, byte [ebp + edx - 0x198]
or eax, 0x20
cmp ecx, eax
jge 0x42f36c
mov dword [ebp - 0x20c], 0xffffffff
jmp 0x42f3a8
push eax
call 0x42f37a
add byte [esi + 0x37], al
cmp eax, dword ss:[edx + edi + 0x4b]
add esp, 4
or eax, 0x2501
and eax, 0x185bd
add eax, 0x3e65
pop eax
push ecx
and ecx, 0x15445
xor ecx, 0x3a45
pop ecx
mov dword [ebp - 0x20c], 1
cmp dword [ebp - 0x20c], 0
jne 0x42f3f1
push eax
push eax
add esp, 4
xor eax, 0xaffd
xor eax, 0x15c28
or eax, 0x94a
call 0x42f3d4
add byte [edx + 0x3e], cl
inc ecx
dec edi
cmp eax, 0x4c48335
pop eax
push ebx
push ebx
add esp, 4
jmp 0x42f3e2
pop ebx
mov ecx, dword [ebp - 0x3ec]
mov dword [ebp - 0x9c], ecx
jmp 0x42f402
jmp 0x42f109

Function at 0x42f3d4
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x130]
add edx, 1
mov dword [ebp - 0x130], edx
add esp, 4
sub edx, 0xc824
or edx, 0xc897
pop edx
mov eax, dword [ebp - 0x134]
add eax, dword [ebp - 0x30]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x30]
movsx eax, byte [ebp + edx - 0x198]
or eax, 0x20
cmp ecx, eax
jge 0x42f36c
mov dword [ebp - 0x20c], 0xffffffff
jmp 0x42f3a8
push eax
call 0x42f37a
add byte [esi + 0x37], al
cmp eax, dword ss:[edx + edi + 0x4b]
add esp, 4
or eax, 0x2501
and eax, 0x185bd
add eax, 0x3e65
pop eax
push ecx
and ecx, 0x15445
xor ecx, 0x3a45
pop ecx
mov dword [ebp - 0x20c], 1
cmp dword [ebp - 0x20c], 0
jne 0x42f3f1
push eax
push eax
add esp, 4
xor eax, 0xaffd
xor eax, 0x15c28
or eax, 0x94a
call 0x42f3d4
add byte [edx + 0x3e], cl
inc ecx
dec edi
cmp eax, 0x4c48335
pop eax
push ebx
push ebx
add esp, 4
jmp 0x42f3e2
pop ebx
mov ecx, dword [ebp - 0x3ec]
mov dword [ebp - 0x9c], ecx
jmp 0x42f402
jmp 0x42f109
Function at 0x42f686
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edi
push edi
push ecx
add esp, 4
or edi, 0x2cd0
pop edi
push eax
push ecx
add esp, 4
sub eax, 0x4263
add eax, 0x2a86
pop eax
mov byte [ebp - 0x285], 6
mov byte [ebp - 1], 2
jmp 0x42f6be
Function at 0x4327d4
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push edx
push edi
add esp, 4
xor edx, 0xe986
or edx, 0x16ede
pop edx
push esi
push esi
add esp, 4
and esi, 0xf6da
or esi, 0x8938
and esi, 0x10e09
pop esi
push eax
add eax, 0x7c4
pop eax
mov edx, dword [ebp - 0x268]
mov ax, word [edx]
mov word [ebp - 0x1d8], ax
mov ecx, dword [ebp - 0x268]
add ecx, 2
mov dword [ebp - 0x268], ecx
mov dx, word [ebp - 0x1d8]
mov word [ebp - 0x4c], dx
push edx
and edx, 0x9151
sub edx, 0x1c30
jmp 0x43277d
pop edx
push edi
add edi, 0xf872
pop edi
push edi
add edi, 0xae1a
sub edi, 0x16f35
sub edi, 0x13764
pop edi
mov eax, dword [ebp - 0x26c]
mov cx, word [eax]
mov word [ebp - 0x1da], cx
mov edx, dword [ebp - 0x26c]
add edx, 2
mov dword [ebp - 0x26c], edx
mov ax, word [ebp - 0x1da]
mov word [ebp - 0x24], ax
push eax
call fcn.004327d4
add byte [esi], bh
xor ecx, dword [ebx + 0x35]
xor ecx, dword [esi + 0x3d]
cmp byte [edi - 0x7d], cl
add esp, 4
pop eax
add esp, 4
pop eax
push eax
push ecx
add esp, 4
jmp 0x4327e3
call 0x4327f2
add byte [ebx + 0x3f], al
cmp dh, byte [0x4034394e]
aas
add esp, 4
pop eax
movzx ecx, word [ebp - 0x24]
test ecx, ecx
jne 0x432813
movzx edx, word [ebp - 0x4c]
movzx eax, word [ebp - 0x24]
sub edx, eax
mov dword [ebp - 0x340], edx
jmp 0x432896
movzx ecx, word [ebp - 0x4c]
movzx edx, word [ebp - 0x24]
cmp ecx, edx
je 0x43270c
movzx eax, word [ebp - 0x4c]
xor eax, 0x20
movzx ecx, word [ebp - 0x24]
cmp eax, ecx
je 0x43270c
push ecx
and ecx, 0x1470f
pop ecx
push eax
and eax, 0xd114
pop eax
push esi
or esi, 0x8ec7
and esi, 0x41a2
and esi, 0xdd3d
sub esi, 0xf586
pop esi
push ebx
sub ebx, 0x10f17
pop ebx
movzx edx, word [ebp - 0x4c]
movzx eax, word [ebp - 0x24]
cmp edx, eax
jge 0x432880
mov dword [ebp - 0x33c], 0xffffffff
jmp 0x43288a
mov dword [ebp - 0x33c], 1
mov ecx, dword [ebp - 0x33c]
mov dword [ebp - 0x340], ecx
cmp dword [ebp - 0x340], 0
jne 0x4328e2
push edi
jmp 0x4328a8
jmp 0x4328af
xor edi, 0x13165
pop edi
push edi
push eax
add esp, 4
and edi, 0xa54
pop edi
push esi
push eax
add esp, 4
jmp 0x4328d0
pop esi
mov edx, dword [ebp - 0xbc]
mov dword [ebp - 0xd0], edx
jmp 0x43297c
mov eax, dword [ebp - 0xbc]
mov ecx, dword [eax]
mov dword [ebp - 0xbc], ecx
push ecx
push edi
add esp, 4
sub ecx, 0x14706
and ecx, 0x165c1
and ecx, 0x1536e
pop ecx
push ebx
and ebx, 0x163de
add ebx, 0x11e8
and ebx, 0x84c9
xor ebx, 0xcc6a
pop ebx
mov edx, dword [ebp - 0xbc]
cmp edx, dword [ebp - 0x270]
je 0x432940
mov eax, dword [ebp - 0xbc]
cmp dword [eax + 0x30], 0
jne 0x432681
push ecx
push edi
add esp, 4
sub ecx, 0x5313
add ecx, 0x11b27
pop ecx
push ecx
push ebx
add esp, 4
and ecx, 0xe8ad
pop ecx
push edi
or edi, 0x173f8
jmp 0x43296b
xor edi, 0x16fab
pop edi
mov dword [ebp - 0xd0], 0
Function at 0x4327f2
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push edx
push edi
add esp, 4
xor edx, 0xe986
or edx, 0x16ede
pop edx
push esi
push esi
add esp, 4
and esi, 0xf6da
or esi, 0x8938
and esi, 0x10e09
pop esi
push eax
add eax, 0x7c4
pop eax
mov edx, dword [ebp - 0x268]
mov ax, word [edx]
mov word [ebp - 0x1d8], ax
mov ecx, dword [ebp - 0x268]
add ecx, 2
mov dword [ebp - 0x268], ecx
mov dx, word [ebp - 0x1d8]
mov word [ebp - 0x4c], dx
push edx
and edx, 0x9151
sub edx, 0x1c30
jmp 0x43277d
pop edx
push edi
add edi, 0xf872
pop edi
push edi
add edi, 0xae1a
sub edi, 0x16f35
sub edi, 0x13764
pop edi
mov eax, dword [ebp - 0x26c]
mov cx, word [eax]
mov word [ebp - 0x1da], cx
mov edx, dword [ebp - 0x26c]
add edx, 2
mov dword [ebp - 0x26c], edx
mov ax, word [ebp - 0x1da]
mov word [ebp - 0x24], ax
push eax
call fcn.004327d4
add byte [esi], bh
xor ecx, dword [ebx + 0x35]
xor ecx, dword [esi + 0x3d]
cmp byte [edi - 0x7d], cl
add esp, 4
pop eax
add esp, 4
pop eax
push eax
push ecx
add esp, 4
jmp 0x4327e3
call 0x4327f2
add byte [ebx + 0x3f], al
cmp dh, byte [0x4034394e]
aas
add esp, 4
pop eax
movzx ecx, word [ebp - 0x24]
test ecx, ecx
jne 0x432813
movzx edx, word [ebp - 0x4c]
movzx eax, word [ebp - 0x24]
sub edx, eax
mov dword [ebp - 0x340], edx
jmp 0x432896
movzx ecx, word [ebp - 0x4c]
movzx edx, word [ebp - 0x24]
cmp ecx, edx
je 0x43270c
movzx eax, word [ebp - 0x4c]
xor eax, 0x20
movzx ecx, word [ebp - 0x24]
cmp eax, ecx
je 0x43270c
push ecx
and ecx, 0x1470f
pop ecx
push eax
and eax, 0xd114
pop eax
push esi
or esi, 0x8ec7
and esi, 0x41a2
and esi, 0xdd3d
sub esi, 0xf586
pop esi
push ebx
sub ebx, 0x10f17
pop ebx
movzx edx, word [ebp - 0x4c]
movzx eax, word [ebp - 0x24]
cmp edx, eax
jge 0x432880
mov dword [ebp - 0x33c], 0xffffffff
jmp 0x43288a
mov dword [ebp - 0x33c], 1
mov ecx, dword [ebp - 0x33c]
mov dword [ebp - 0x340], ecx
cmp dword [ebp - 0x340], 0
jne 0x4328e2
push edi
jmp 0x4328a8
jmp 0x4328af
xor edi, 0x13165
pop edi
push edi
push eax
add esp, 4
and edi, 0xa54
pop edi
push esi
push eax
add esp, 4
jmp 0x4328d0
pop esi
mov edx, dword [ebp - 0xbc]
mov dword [ebp - 0xd0], edx
jmp 0x43297c
mov eax, dword [ebp - 0xbc]
mov ecx, dword [eax]
mov dword [ebp - 0xbc], ecx
push ecx
push edi
add esp, 4
sub ecx, 0x14706
and ecx, 0x165c1
and ecx, 0x1536e
pop ecx
push ebx
and ebx, 0x163de
add ebx, 0x11e8
and ebx, 0x84c9
xor ebx, 0xcc6a
pop ebx
mov edx, dword [ebp - 0xbc]
cmp edx, dword [ebp - 0x270]
je 0x432940
mov eax, dword [ebp - 0xbc]
cmp dword [eax + 0x30], 0
jne 0x432681
push ecx
push edi
add esp, 4
sub ecx, 0x5313
add ecx, 0x11b27
pop ecx
push ecx
push ebx
add esp, 4
and ecx, 0xe8ad
pop ecx
push edi
or edi, 0x173f8
jmp 0x43296b
xor edi, 0x16fab
pop edi
mov dword [ebp - 0xd0], 0