joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10001d64
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
and eax, 0xb562
sub eax, 0x4ab8
add eax, 0x39e
pop eax
cmp dword [ebp - 0xc1c], 0
jne 0x10001c4b
mov dword [ebp - 0x29c], 0
jmp 0x10001eab
mov edx, dword [ebp - 0xc1c]
mov dword [ebp - 0x4bc], edx
push ecx
push edx
add esp, 4
xor ecx, 0x1240d
pop ecx
push ebx
push edx
add esp, 4
call 0x10001c77
add byte [esi + 0x42], cl
xor cl, byte [esi + 0x50]
inc edi
dec esp
inc esp
dec eax
add esp, 4
pop ebx
push ebx
and ebx, 0x11980
xor ebx, 0xbd25
pop ebx
lea eax, [ebp - 0x15d0]
mov dword [ebp - 0xc18], eax
mov ecx, dword [ebp - 0x4bc]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc14], edx
xor eax, eax
mov word [ebp - 0x1ac], ax
xor ecx, ecx
mov word [ebp - 0x100], cx
push edi
push esi
add esp, 4
sub edi, 0x14147
pop edi
push ecx
add ecx, 0x10360
pop ecx
push ecx
push edi
add esp, 4
xor ecx, 0x5473
jmp 0x10001cdb
xor ecx, 0x9832
and ecx, 0xf10e
pop ecx
mov edx, dword [ebp - 0xc14]
mov ax, word [edx]
mov word [ebp - 0xfb6], ax
mov ecx, dword [ebp - 0xc14]
add ecx, 2
mov dword [ebp - 0xc14], ecx
mov dx, word [ebp - 0xfb6]
mov word [ebp - 0x1ac], dx
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xfb8], cx
mov edx, dword [ebp - 0xc18]
add edx, 2
mov dword [ebp - 0xc18], edx
call 0x77001d28
mov eax, dword [ebp - 0xfb8]
mov word [ebp - 0x100], ax
push ebx
push ebx
add esp, 4
jmp 0x10001d50
pop ebx
push edx
or edx, 0x68d1
call 0x10001d64
add byte [edx], bh
dec esp
cmp al, byte [ecx + edi + 0x3e]
add esp, 4
xor edx, 0x134c9
and edx, 0x2d44
pop edx
movzx ecx, word [ebp - 0x100]
test ecx, ecx
jne 0x10001d97
movzx edx, word [ebp - 0x1ac]
movzx eax, word [ebp - 0x100]
sub edx, eax
mov dword [ebp - 0x1510], edx
jmp 0x10001dfa
movzx ecx, word [ebp - 0x1ac]
movzx edx, word [ebp - 0x100]
cmp ecx, edx
je 0x10001cb6
movzx eax, word [ebp - 0x1ac]
xor eax, 0x20
movzx ecx, word [ebp - 0x100]
cmp eax, ecx
je 0x10001cb6
movzx edx, word [ebp - 0x1ac]
movzx eax, word [ebp - 0x100]
cmp edx, eax
jge 0x10001de4
mov dword [ebp - 0x1508], 0xffffffff
jmp 0x10001dee
mov dword [ebp - 0x1508], 1
mov ecx, dword [ebp - 0x1508]
mov dword [ebp - 0x1510], ecx
cmp dword [ebp - 0x1510], 0
jne 0x10001e43
push ebx
push ebx
add esp, 4
xor ebx, 0x125af
call 0x10001e1c
add byte [ebp + 0x33], al
inc edx
xor al, 0x44
xor al, 0x4a
cmp byte [ebx - 0x3c7efb3c], al
imul esi, dword [edx], 0
add al, ch
pop es
add byte [eax], al
add byte [eax], al
dec ecx
cmp eax, dword [ebx + esi + 0x50]
xor al, 0x83
les eax, [ebx + ebx*2]
mov edx, dword [ebp - 0x4bc]
mov dword [ebp - 0x29c], edx
jmp 0x10001eab
push ebx
push eax
add esp, 4
add ebx, 0xbe28
or ebx, 0xd013
call 0x10001e62
add byte [edi], bh
xor al, 0x39
cmp al, 0x4b
xor al, 0x45
dec edi
add esp, 4
pop ebx
push ecx
push ecx
add esp, 4
jmp 0x10001e74
pop ecx
mov eax, dword [ebp - 0x4bc]
mov ecx, dword [eax]
mov dword [ebp - 0x4bc], ecx
mov edx, dword [ebp - 0x4bc]
cmp edx, dword [ebp - 0xc1c]
je 0x10001ea1
mov eax, dword [ebp - 0x4bc]
cmp dword [eax + 0x30], 0
jne 0x10001c57
mov dword [ebp - 0x29c], 0
push edx
push eax
add esp, 4
Function at 0x10001e1c
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
and eax, 0xb562
sub eax, 0x4ab8
add eax, 0x39e
pop eax
cmp dword [ebp - 0xc1c], 0
jne 0x10001c4b
mov dword [ebp - 0x29c], 0
jmp 0x10001eab
mov edx, dword [ebp - 0xc1c]
mov dword [ebp - 0x4bc], edx
push ecx
push edx
add esp, 4
xor ecx, 0x1240d
pop ecx
push ebx
push edx
add esp, 4
call 0x10001c77
add byte [esi + 0x42], cl
xor cl, byte [esi + 0x50]
inc edi
dec esp
inc esp
dec eax
add esp, 4
pop ebx
push ebx
and ebx, 0x11980
xor ebx, 0xbd25
pop ebx
lea eax, [ebp - 0x15d0]
mov dword [ebp - 0xc18], eax
mov ecx, dword [ebp - 0x4bc]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc14], edx
xor eax, eax
mov word [ebp - 0x1ac], ax
xor ecx, ecx
mov word [ebp - 0x100], cx
push edi
push esi
add esp, 4
sub edi, 0x14147
pop edi
push ecx
add ecx, 0x10360
pop ecx
push ecx
push edi
add esp, 4
xor ecx, 0x5473
jmp 0x10001cdb
xor ecx, 0x9832
and ecx, 0xf10e
pop ecx
mov edx, dword [ebp - 0xc14]
mov ax, word [edx]
mov word [ebp - 0xfb6], ax
mov ecx, dword [ebp - 0xc14]
add ecx, 2
mov dword [ebp - 0xc14], ecx
mov dx, word [ebp - 0xfb6]
mov word [ebp - 0x1ac], dx
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xfb8], cx
mov edx, dword [ebp - 0xc18]
add edx, 2
mov dword [ebp - 0xc18], edx
call 0x77001d28
mov eax, dword [ebp - 0xfb8]
mov word [ebp - 0x100], ax
push ebx
push ebx
add esp, 4
jmp 0x10001d50
pop ebx
push edx
or edx, 0x68d1
call 0x10001d64
add byte [edx], bh
dec esp
cmp al, byte [ecx + edi + 0x3e]
add esp, 4
xor edx, 0x134c9
and edx, 0x2d44
pop edx
movzx ecx, word [ebp - 0x100]
test ecx, ecx
jne 0x10001d97
movzx edx, word [ebp - 0x1ac]
movzx eax, word [ebp - 0x100]
sub edx, eax
mov dword [ebp - 0x1510], edx
jmp 0x10001dfa
movzx ecx, word [ebp - 0x1ac]
movzx edx, word [ebp - 0x100]
cmp ecx, edx
je 0x10001cb6
movzx eax, word [ebp - 0x1ac]
xor eax, 0x20
movzx ecx, word [ebp - 0x100]
cmp eax, ecx
je 0x10001cb6
movzx edx, word [ebp - 0x1ac]
movzx eax, word [ebp - 0x100]
cmp edx, eax
jge 0x10001de4
mov dword [ebp - 0x1508], 0xffffffff
jmp 0x10001dee
mov dword [ebp - 0x1508], 1
mov ecx, dword [ebp - 0x1508]
mov dword [ebp - 0x1510], ecx
cmp dword [ebp - 0x1510], 0
jne 0x10001e43
push ebx
push ebx
add esp, 4
xor ebx, 0x125af
call 0x10001e1c
add byte [ebp + 0x33], al
inc edx
xor al, 0x44
xor al, 0x4a
cmp byte [ebx - 0x3c7efb3c], al
imul esi, dword [edx], 0
add al, ch
pop es
add byte [eax], al
add byte [eax], al
dec ecx
cmp eax, dword [ebx + esi + 0x50]
xor al, 0x83
les eax, [ebx + ebx*2]
mov edx, dword [ebp - 0x4bc]
mov dword [ebp - 0x29c], edx
jmp 0x10001eab
push ebx
push eax
add esp, 4
add ebx, 0xbe28
or ebx, 0xd013
call 0x10001e62
add byte [edi], bh
xor al, 0x39
cmp al, 0x4b
xor al, 0x45
dec edi
add esp, 4
pop ebx
push ecx
push ecx
add esp, 4
jmp 0x10001e74
pop ecx
mov eax, dword [ebp - 0x4bc]
mov ecx, dword [eax]
mov dword [ebp - 0x4bc], ecx
mov edx, dword [ebp - 0x4bc]
cmp edx, dword [ebp - 0xc1c]
je 0x10001ea1
mov eax, dword [ebp - 0x4bc]
cmp dword [eax + 0x30], 0
jne 0x10001c57
mov dword [ebp - 0x29c], 0
push edx
push eax
add esp, 4
Function at 0x10001e31
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
and eax, 0xb562
sub eax, 0x4ab8
add eax, 0x39e
pop eax
cmp dword [ebp - 0xc1c], 0
jne 0x10001c4b
mov dword [ebp - 0x29c], 0
jmp 0x10001eab
mov edx, dword [ebp - 0xc1c]
mov dword [ebp - 0x4bc], edx
push ecx
push edx
add esp, 4
xor ecx, 0x1240d
pop ecx
push ebx
push edx
add esp, 4
call 0x10001c77
add byte [esi + 0x42], cl
xor cl, byte [esi + 0x50]
inc edi
dec esp
inc esp
dec eax
add esp, 4
pop ebx
push ebx
and ebx, 0x11980
xor ebx, 0xbd25
pop ebx
lea eax, [ebp - 0x15d0]
mov dword [ebp - 0xc18], eax
mov ecx, dword [ebp - 0x4bc]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc14], edx
xor eax, eax
mov word [ebp - 0x1ac], ax
xor ecx, ecx
mov word [ebp - 0x100], cx
push edi
push esi
add esp, 4
sub edi, 0x14147
pop edi
push ecx
add ecx, 0x10360
pop ecx
push ecx
push edi
add esp, 4
xor ecx, 0x5473
jmp 0x10001cdb
xor ecx, 0x9832
and ecx, 0xf10e
pop ecx
mov edx, dword [ebp - 0xc14]
mov ax, word [edx]
mov word [ebp - 0xfb6], ax
mov ecx, dword [ebp - 0xc14]
add ecx, 2
mov dword [ebp - 0xc14], ecx
mov dx, word [ebp - 0xfb6]
mov word [ebp - 0x1ac], dx
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xfb8], cx
mov edx, dword [ebp - 0xc18]
add edx, 2
mov dword [ebp - 0xc18], edx
call 0x77001d28
mov eax, dword [ebp - 0xfb8]
mov word [ebp - 0x100], ax
push ebx
push ebx
add esp, 4
jmp 0x10001d50
pop ebx
push edx
or edx, 0x68d1
call 0x10001d64
add byte [edx], bh
dec esp
cmp al, byte [ecx + edi + 0x3e]
add esp, 4
xor edx, 0x134c9
and edx, 0x2d44
pop edx
movzx ecx, word [ebp - 0x100]
test ecx, ecx
jne 0x10001d97
movzx edx, word [ebp - 0x1ac]
movzx eax, word [ebp - 0x100]
sub edx, eax
mov dword [ebp - 0x1510], edx
jmp 0x10001dfa
movzx ecx, word [ebp - 0x1ac]
movzx edx, word [ebp - 0x100]
cmp ecx, edx
je 0x10001cb6
movzx eax, word [ebp - 0x1ac]
xor eax, 0x20
movzx ecx, word [ebp - 0x100]
cmp eax, ecx
je 0x10001cb6
movzx edx, word [ebp - 0x1ac]
movzx eax, word [ebp - 0x100]
cmp edx, eax
jge 0x10001de4
mov dword [ebp - 0x1508], 0xffffffff
jmp 0x10001dee
mov dword [ebp - 0x1508], 1
mov ecx, dword [ebp - 0x1508]
mov dword [ebp - 0x1510], ecx
cmp dword [ebp - 0x1510], 0
jne 0x10001e43
push ebx
push ebx
add esp, 4
xor ebx, 0x125af
call 0x10001e1c
add byte [ebp + 0x33], al
inc edx
xor al, 0x44
xor al, 0x4a
cmp byte [ebx - 0x3c7efb3c], al
imul esi, dword [edx], 0
add al, ch
pop es
add byte [eax], al
add byte [eax], al
dec ecx
cmp eax, dword [ebx + esi + 0x50]
xor al, 0x83
les eax, [ebx + ebx*2]
mov edx, dword [ebp - 0x4bc]
mov dword [ebp - 0x29c], edx
jmp 0x10001eab
push ebx
push eax
add esp, 4
add ebx, 0xbe28
or ebx, 0xd013
call 0x10001e62
add byte [edi], bh
xor al, 0x39
cmp al, 0x4b
xor al, 0x45
dec edi
add esp, 4
pop ebx
push ecx
push ecx
add esp, 4
jmp 0x10001e74
pop ecx
mov eax, dword [ebp - 0x4bc]
mov ecx, dword [eax]
mov dword [ebp - 0x4bc], ecx
mov edx, dword [ebp - 0x4bc]
cmp edx, dword [ebp - 0xc1c]
je 0x10001ea1
mov eax, dword [ebp - 0x4bc]
cmp dword [eax + 0x30], 0
jne 0x10001c57
mov dword [ebp - 0x29c], 0
push edx
push eax
add esp, 4
Function at 0x10001e62
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
and eax, 0xb562
sub eax, 0x4ab8
add eax, 0x39e
pop eax
cmp dword [ebp - 0xc1c], 0
jne 0x10001c4b
mov dword [ebp - 0x29c], 0
jmp 0x10001eab
mov edx, dword [ebp - 0xc1c]
mov dword [ebp - 0x4bc], edx
push ecx
push edx
add esp, 4
xor ecx, 0x1240d
pop ecx
push ebx
push edx
add esp, 4
call 0x10001c77
add byte [esi + 0x42], cl
xor cl, byte [esi + 0x50]
inc edi
dec esp
inc esp
dec eax
add esp, 4
pop ebx
push ebx
and ebx, 0x11980
xor ebx, 0xbd25
pop ebx
lea eax, [ebp - 0x15d0]
mov dword [ebp - 0xc18], eax
mov ecx, dword [ebp - 0x4bc]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc14], edx
xor eax, eax
mov word [ebp - 0x1ac], ax
xor ecx, ecx
mov word [ebp - 0x100], cx
push edi
push esi
add esp, 4
sub edi, 0x14147
pop edi
push ecx
add ecx, 0x10360
pop ecx
push ecx
push edi
add esp, 4
xor ecx, 0x5473
jmp 0x10001cdb
xor ecx, 0x9832
and ecx, 0xf10e
pop ecx
mov edx, dword [ebp - 0xc14]
mov ax, word [edx]
mov word [ebp - 0xfb6], ax
mov ecx, dword [ebp - 0xc14]
add ecx, 2
mov dword [ebp - 0xc14], ecx
mov dx, word [ebp - 0xfb6]
mov word [ebp - 0x1ac], dx
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xfb8], cx
mov edx, dword [ebp - 0xc18]
add edx, 2
mov dword [ebp - 0xc18], edx
call 0x77001d28
mov eax, dword [ebp - 0xfb8]
mov word [ebp - 0x100], ax
push ebx
push ebx
add esp, 4
jmp 0x10001d50
pop ebx
push edx
or edx, 0x68d1
call 0x10001d64
add byte [edx], bh
dec esp
cmp al, byte [ecx + edi + 0x3e]
add esp, 4
xor edx, 0x134c9
and edx, 0x2d44
pop edx
movzx ecx, word [ebp - 0x100]
test ecx, ecx
jne 0x10001d97
movzx edx, word [ebp - 0x1ac]
movzx eax, word [ebp - 0x100]
sub edx, eax
mov dword [ebp - 0x1510], edx
jmp 0x10001dfa
movzx ecx, word [ebp - 0x1ac]
movzx edx, word [ebp - 0x100]
cmp ecx, edx
je 0x10001cb6
movzx eax, word [ebp - 0x1ac]
xor eax, 0x20
movzx ecx, word [ebp - 0x100]
cmp eax, ecx
je 0x10001cb6
movzx edx, word [ebp - 0x1ac]
movzx eax, word [ebp - 0x100]
cmp edx, eax
jge 0x10001de4
mov dword [ebp - 0x1508], 0xffffffff
jmp 0x10001dee
mov dword [ebp - 0x1508], 1
mov ecx, dword [ebp - 0x1508]
mov dword [ebp - 0x1510], ecx
cmp dword [ebp - 0x1510], 0
jne 0x10001e43
push ebx
push ebx
add esp, 4
xor ebx, 0x125af
call 0x10001e1c
add byte [ebp + 0x33], al
inc edx
xor al, 0x44
xor al, 0x4a
cmp byte [ebx - 0x3c7efb3c], al
imul esi, dword [edx], 0
add al, ch
pop es
add byte [eax], al
add byte [eax], al
dec ecx
cmp eax, dword [ebx + esi + 0x50]
xor al, 0x83
les eax, [ebx + ebx*2]
mov edx, dword [ebp - 0x4bc]
mov dword [ebp - 0x29c], edx
jmp 0x10001eab
push ebx
push eax
add esp, 4
add ebx, 0xbe28
or ebx, 0xd013
call 0x10001e62
add byte [edi], bh
xor al, 0x39
cmp al, 0x4b
xor al, 0x45
dec edi
add esp, 4
pop ebx
push ecx
push ecx
add esp, 4
jmp 0x10001e74
pop ecx
mov eax, dword [ebp - 0x4bc]
mov ecx, dword [eax]
mov dword [ebp - 0x4bc], ecx
mov edx, dword [ebp - 0x4bc]
cmp edx, dword [ebp - 0xc1c]
je 0x10001ea1
mov eax, dword [ebp - 0x4bc]
cmp dword [eax + 0x30], 0
jne 0x10001c57
mov dword [ebp - 0x29c], 0
push edx
push eax
add esp, 4
Function at 0x10001eb0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
jmp 0x10001eb9
xor edx, 0xe707
and edx, 0xb292
jmp 0x10001eca
pop edx
push ecx
push esi
add esp, 4
add ecx, 0x7613
jmp 0x10001edc
pop ecx
cmp dword [ebp - 0x29c], 0
jne 0x100027e2
mov ecx, 0x6b
mov word [ebp - 0x1650], cx
mov edx, 0x65
mov word [ebp - 0x164e], dx
mov eax, 0x72
mov word [ebp - 0x164c], ax
mov ecx, 0x6e
mov word [ebp - 0x164a], cx
mov edx, 0x65
mov word [ebp - 0x1648], dx
mov eax, 0x6c
mov word [ebp - 0x1646], ax
mov ecx, 0x33
mov word [ebp - 0x1644], cx
mov edx, 0x32
mov word [ebp - 0x1642], dx
mov eax, 0x2e
mov word [ebp - 0x1640], ax
mov ecx, 0x64
mov word [ebp - 0x163e], cx
mov edx, 0x6c
mov word [ebp - 0x163c], dx
mov eax, 0x6c
mov word [ebp - 0x163a], ax
xor ecx, ecx
mov word [ebp - 0x1638], cx
push edx
sub edx, 0x159e5
and edx, 0xfccb

Function at 0x10002010
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1be4], edx
mov eax, dword [ebp - 0x1be4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1be8], ecx
mov edx, dword [ebp - 0x1be8]
mov dword [ebp - 0x1514], edx
push edx
push ebx
add esp, 4
add edx, 0x26ca
jmp 0x1000204c
add edx, 0x13596
xor edx, 0x123c0
pop edx
push edi
push ebx
add esp, 4
jmp 0x10002063
xor edi, 0xd029
pop edi
cmp dword [ebp - 0x1514], 0
jne 0x10002082
mov dword [ebp - 0x728], 0
jmp 0x10002329
mov eax, dword [ebp - 0x1514]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc28], edx
push ebx
push esi
add esp, 4
xor ebx, 0x5c9d
sub ebx, 0x98a6
or ebx, 0xf222
pop ebx
push eax
and eax, 0x7fb9
or eax, 0x1406e
sub eax, 0xfbbd
sub eax, 0xbe4b
pop eax
cmp dword [ebp - 0xc28], 0
jne 0x100020de
mov dword [ebp - 0x728], 0
jmp 0x10002329
mov eax, dword [ebp - 0xc28]
mov dword [ebp - 0x4c0], eax
push eax
sub eax, 0x18599
xor eax, 0x206
sub eax, 0x1747e
and eax, 0x3c54
pop eax
push ebx
push ecx
add esp, 4
and ebx, 0x1501b
sub ebx, 0x22ac
sub ebx, 0x976b
pop ebx
lea ecx, [ebp - 0x1650]
mov dword [ebp - 0xc24], ecx
mov edx, dword [ebp - 0x4c0]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc20], eax
xor ecx, ecx
mov word [ebp - 0x1b0], cx
xor edx, edx
mov word [ebp - 0x24], dx
push edx
push edi
add esp, 4
call 0x1000215a
add byte [edx], bh
aas
cmp al, byte [edx + 0x37]
inc edi
dec ebp
inc ebp
inc edx
add esp, 4
jmp 0x10002163
and edx, 0xfb56
add edx, 0x7f1d
pop edx
push ebx
xor ebx, 0x79b9
pop ebx
mov eax, dword [ebp - 0xc20]
invalid
invalid
Function at 0x1000215a
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1be4], edx
mov eax, dword [ebp - 0x1be4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1be8], ecx
mov edx, dword [ebp - 0x1be8]
mov dword [ebp - 0x1514], edx
push edx
push ebx
add esp, 4
add edx, 0x26ca
jmp 0x1000204c
add edx, 0x13596
xor edx, 0x123c0
pop edx
push edi
push ebx
add esp, 4
jmp 0x10002063
xor edi, 0xd029
pop edi
cmp dword [ebp - 0x1514], 0
jne 0x10002082
mov dword [ebp - 0x728], 0
jmp 0x10002329
mov eax, dword [ebp - 0x1514]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc28], edx
push ebx
push esi
add esp, 4
xor ebx, 0x5c9d
sub ebx, 0x98a6
or ebx, 0xf222
pop ebx
push eax
and eax, 0x7fb9
or eax, 0x1406e
sub eax, 0xfbbd
sub eax, 0xbe4b
pop eax
cmp dword [ebp - 0xc28], 0
jne 0x100020de
mov dword [ebp - 0x728], 0
jmp 0x10002329
mov eax, dword [ebp - 0xc28]
mov dword [ebp - 0x4c0], eax
push eax
sub eax, 0x18599
xor eax, 0x206
sub eax, 0x1747e
and eax, 0x3c54
pop eax
push ebx
push ecx
add esp, 4
and ebx, 0x1501b
sub ebx, 0x22ac
sub ebx, 0x976b
pop ebx
lea ecx, [ebp - 0x1650]
mov dword [ebp - 0xc24], ecx
mov edx, dword [ebp - 0x4c0]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc20], eax
xor ecx, ecx
mov word [ebp - 0x1b0], cx
xor edx, edx
mov word [ebp - 0x24], dx
push edx
push edi
add esp, 4
call 0x1000215a
add byte [edx], bh
aas
cmp al, byte [edx + 0x37]
inc edi
dec ebp
inc ebp
inc edx
add esp, 4
jmp 0x10002163
and edx, 0xfb56
add edx, 0x7f1d
pop edx
push ebx
xor ebx, 0x79b9
pop ebx
mov eax, dword [ebp - 0xc20]
invalid
invalid
Function at 0x100029d0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov dword [ebp - 0x28], ecx
push eax
push ebx
add esp, 4
sub eax, 0xac2b
or eax, 0x386d
pop eax
push ebx
push esi
add esp, 4
add ebx, 0x14ca1
or ebx, 0x8039
pop ebx
push eax
xor eax, 0x16bb3
or eax, 0x6ddf
pop eax
movzx edx, word [ebp - 0x28]
test edx, edx
jne 0x10002a22
invalid
mov bh, 0x85
Function at 0x10002e44
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [ebp - 0x740]
add ecx, 1
mov dword [ebp - 0x740], ecx
add bl, ch
pop es
xor al, byte [esi + 0x48]
aaa
cmp dword [eax], edi
and ebx, 0x157af
pop ebx
push esi
push ecx
add esp, 4
add esi, 0x8c0c
pop esi
mov ecx, dword [ebp - 0x744]
add ecx, dword [ebp - 0x158]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x158]
movsx ecx, byte [ebp + eax - 0x83c]
add eax, 0xfffff7c4
cmp edx, ecx
jne 0x10002e2a
mov dword [ebp - 0xc3c], 0
jmp 0x10002e99
push edx
sub edx, 0xfb4a
sub edx, 0x2a0c
call 0x10002e44
add byte [esi], dh
inc edi
cmp dword [ebp + 0x40], ecx
inc ebx
cmp byte [ebx - 0x357efb3c], al
jecxz 0x10002e15
add byte [eax], al
pop edx
push edi
push edx
add esp, 4
jmp 0x10002e5b
pop edi
mov edx, dword [ebp - 0x744]
add edx, dword [ebp - 0x158]
movsx eax, byte [edx]
or eax, 0x20
invalid
invalid

Function at 0x10002efb
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edi
mov eax, dword [ebp - 0x378]
add eax, 0xe
mov dword [ebp - 0x1c68], eax
push edx
and edx, 0xf587
or edx, 0xc946
jmp 0x10002f22
call 0x10002f2e
add byte [ebp + 0x4e], al
cmp byte [edx], dh
dec eax
push eax
add esp, 4
pop edx
push ecx
sub ecx, 0x1431f
add ecx, 0x1650c
pop ecx
cmp dword [ebp - 0x378], 0
je 0x10002f52
cmp dword [ebp - 0xa50], 0
jne 0x10002f98
push eax
call 0x10002f63
add byte [0x3a4d473a], bh
dec ebp
dec esi
aaa
dec ecx
add esp, 4
xor eax, 0x111f3
or eax, 0x5066
call 0x10002f80
add byte [edi + 0x41], cl
cmp eax, 0x393b504e
inc eax
add esp, 4
pop eax
mov ecx, dword [ebp - 0x774]
mov dword [ebp - 0x1c1c], ecx
push 0
call dword [ebp - 0x1c1c]
mov dword [ebp - 0x1d38], 0xa
push ebx
xor ebx, 0x5d5d
xor ebx, 0x14768
pop ebx
push edi
push ebx
add esp, 4
and edi, 0x1581b
xor edi, 0xdabf
pop edi
push edi
call 0x10002fd0
add byte [0x494e4550], bh
push eax
cmp al, byte [ebx - 0x74a0fb3c]
xchg ebp, eax
mov ah, bh
invalid

Function at 0x10002f2e
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edi
mov eax, dword [ebp - 0x378]
add eax, 0xe
mov dword [ebp - 0x1c68], eax
push edx
and edx, 0xf587
or edx, 0xc946
jmp 0x10002f22
call 0x10002f2e
add byte [ebp + 0x4e], al
cmp byte [edx], dh
dec eax
push eax
add esp, 4
pop edx
push ecx
sub ecx, 0x1431f
add ecx, 0x1650c
pop ecx
cmp dword [ebp - 0x378], 0
je 0x10002f52
cmp dword [ebp - 0xa50], 0
jne 0x10002f98
push eax
call 0x10002f63
add byte [0x3a4d473a], bh
dec ebp
dec esi
aaa
dec ecx
add esp, 4
xor eax, 0x111f3
or eax, 0x5066
call 0x10002f80
add byte [edi + 0x41], cl
cmp eax, 0x393b504e
inc eax
add esp, 4
pop eax
mov ecx, dword [ebp - 0x774]
mov dword [ebp - 0x1c1c], ecx
push 0
call dword [ebp - 0x1c1c]
mov dword [ebp - 0x1d38], 0xa
push ebx
xor ebx, 0x5d5d
xor ebx, 0x14768
pop ebx
push edi
push ebx
add esp, 4
and edi, 0x1581b
xor edi, 0xdabf
pop edi
push edi
call 0x10002fd0
add byte [0x494e4550], bh
push eax
cmp al, byte [ebx - 0x74a0fb3c]
xchg ebp, eax
mov ah, bh
invalid
Function at 0x10002f63
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edi
mov eax, dword [ebp - 0x378]
add eax, 0xe
mov dword [ebp - 0x1c68], eax
push edx
and edx, 0xf587
or edx, 0xc946
jmp 0x10002f22
call 0x10002f2e
add byte [ebp + 0x4e], al
cmp byte [edx], dh
dec eax
push eax
add esp, 4
pop edx
push ecx
sub ecx, 0x1431f
add ecx, 0x1650c
pop ecx
cmp dword [ebp - 0x378], 0
je 0x10002f52
cmp dword [ebp - 0xa50], 0
jne 0x10002f98
push eax
call 0x10002f63
add byte [0x3a4d473a], bh
dec ebp
dec esi
aaa
dec ecx
add esp, 4
xor eax, 0x111f3
or eax, 0x5066
call 0x10002f80
add byte [edi + 0x41], cl
cmp eax, 0x393b504e
inc eax
add esp, 4
pop eax
mov ecx, dword [ebp - 0x774]
mov dword [ebp - 0x1c1c], ecx
push 0
call dword [ebp - 0x1c1c]
mov dword [ebp - 0x1d38], 0xa
push ebx
xor ebx, 0x5d5d
xor ebx, 0x14768
pop ebx
push edi
push ebx
add esp, 4
and edi, 0x1581b
xor edi, 0xdabf
pop edi
push edi
call 0x10002fd0
add byte [0x494e4550], bh
push eax
cmp al, byte [ebx - 0x74a0fb3c]
xchg ebp, eax
mov ah, bh
invalid

Function at 0x10002f80
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edi
mov eax, dword [ebp - 0x378]
add eax, 0xe
mov dword [ebp - 0x1c68], eax
push edx
and edx, 0xf587
or edx, 0xc946
jmp 0x10002f22
call 0x10002f2e
add byte [ebp + 0x4e], al
cmp byte [edx], dh
dec eax
push eax
add esp, 4
pop edx
push ecx
sub ecx, 0x1431f
add ecx, 0x1650c
pop ecx
cmp dword [ebp - 0x378], 0
je 0x10002f52
cmp dword [ebp - 0xa50], 0
jne 0x10002f98
push eax
call 0x10002f63
add byte [0x3a4d473a], bh
dec ebp
dec esi
aaa
dec ecx
add esp, 4
xor eax, 0x111f3
or eax, 0x5066
call 0x10002f80
add byte [edi + 0x41], cl
cmp eax, 0x393b504e
inc eax
add esp, 4
pop eax
mov ecx, dword [ebp - 0x774]
mov dword [ebp - 0x1c1c], ecx
push 0
call dword [ebp - 0x1c1c]
mov dword [ebp - 0x1d38], 0xa
push ebx
xor ebx, 0x5d5d
xor ebx, 0x14768
pop ebx
push edi
push ebx
add esp, 4
and edi, 0x1581b
xor edi, 0xdabf
pop edi
push edi
call 0x10002fd0
add byte [0x494e4550], bh
push eax
cmp al, byte [ebx - 0x74a0fb3c]
xchg ebp, eax
mov ah, bh
invalid
Function at 0x10002fd0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edi
mov eax, dword [ebp - 0x378]
add eax, 0xe
mov dword [ebp - 0x1c68], eax
push edx
and edx, 0xf587
or edx, 0xc946
jmp 0x10002f22
call 0x10002f2e
add byte [ebp + 0x4e], al
cmp byte [edx], dh
dec eax
push eax
add esp, 4
pop edx
push ecx
sub ecx, 0x1431f
add ecx, 0x1650c
pop ecx
cmp dword [ebp - 0x378], 0
je 0x10002f52
cmp dword [ebp - 0xa50], 0
jne 0x10002f98
push eax
call 0x10002f63
add byte [0x3a4d473a], bh
dec ebp
dec esi
aaa
dec ecx
add esp, 4
xor eax, 0x111f3
or eax, 0x5066
call 0x10002f80
add byte [edi + 0x41], cl
cmp eax, 0x393b504e
inc eax
add esp, 4
pop eax
mov ecx, dword [ebp - 0x774]
mov dword [ebp - 0x1c1c], ecx
push 0
call dword [ebp - 0x1c1c]
mov dword [ebp - 0x1d38], 0xa
push ebx
xor ebx, 0x5d5d
xor ebx, 0x14768
pop ebx
push edi
push ebx
add esp, 4
and edi, 0x1581b
xor edi, 0xdabf
pop edi
push edi
call 0x10002fd0
add byte [0x494e4550], bh
push eax
cmp al, byte [ebx - 0x74a0fb3c]
xchg ebp, eax
mov ah, bh
invalid