joyce8/EMBER2024-capa huggingface dataset:
Function at 0x414938
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
jmp 0x414941
pop edx
mov dword [ebp - 0x1224], 0xe
push cs
add byte [eax], al
add byte [eax + 0x50], dl
add esp, 4
sub eax, 0x51b3
or eax, 0x55ca
sub eax, 0xc18c
rol dword [eax], 0
pop eax
push edx
push ebx
add esp, 4
add al, 0x81
imul esp, dword [eax], 0x6eb0001
push es
invalid

Function at 0x414948
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
jmp 0x414941
pop edx
mov dword [ebp - 0x1224], 0xe
push cs
add byte [eax], al
add byte [eax + 0x50], dl
add esp, 4
sub eax, 0x51b3
or eax, 0x55ca
sub eax, 0xc18c
rol dword [eax], 0
pop eax
push edx
push ebx
add esp, 4
add al, 0x81
imul esp, dword [eax], 0x6eb0001
push es
invalid

Function at 0x414950
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
jmp 0x414941
pop edx
mov dword [ebp - 0x1224], 0xe
push cs
add byte [eax], al
add byte [eax + 0x50], dl
add esp, 4
sub eax, 0x51b3
or eax, 0x55ca
sub eax, 0xc18c
rol dword [eax], 0
pop eax
push edx
push ebx
add esp, 4
add al, 0x81
imul esp, dword [eax], 0x6eb0001
push es
invalid

Function at 0x414958
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
jmp 0x414941
pop edx
mov dword [ebp - 0x1224], 0xe
push cs
add byte [eax], al
add byte [eax + 0x50], dl
add esp, 4
sub eax, 0x51b3
or eax, 0x55ca
sub eax, 0xc18c
rol dword [eax], 0
pop eax
push edx
push ebx
add esp, 4
add al, 0x81
imul esp, dword [eax], 0x6eb0001
push es
invalid

Function at 0x414960
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
jmp 0x414941
pop edx
mov dword [ebp - 0x1224], 0xe
push cs
add byte [eax], al
add byte [eax + 0x50], dl
add esp, 4
sub eax, 0x51b3
or eax, 0x55ca
sub eax, 0xc18c
rol dword [eax], 0
pop eax
push edx
push ebx
add esp, 4
add al, 0x81
imul esp, dword [eax], 0x6eb0001
push es
invalid

Function at 0x414980
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [eax], al
add byte [ebx - 0x3e], ch
add byte [ebp - 0x64ffa74], cl
invalid
mov al, 0xf9
invalid

Function at 0x414988
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [eax], al
add byte [ebx - 0x3e], ch
add byte [ebp - 0x64ffa74], cl
invalid
mov al, 0xf9
invalid

Function at 0x414998
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
xor esi, 0x10d78
xor esi, 0x10d49
dec ecx
or eax, 0x515e0001
push eax
add esp, 4
les eax, [ecx + eax*4]
int1
sal dword [ebp], 0

Function at 0x4149a0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
xor esi, 0x10d78
xor esi, 0x10d49
dec ecx
or eax, 0x515e0001
push eax
add esp, 4
les eax, [ecx + eax*4]
int1
sal dword [ebp], 0

Function at 0x4149b0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add ecx, 0x8b62
add ecx, 0x15415
adc eax, 0xeb000154
push es
Function at 0x4149c0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
aaa
dec ecx
inc ebp
dec ebp
pop ecx
mov dword [ebp - 0x1228], 0xffffffff
in eax, dx
invalid
invalid
invalid
invalid
invalid
call dword [ecx + 0x53]
add esp, 4
add ecx, 0x173c7
or ecx, 0x7153

Function at 0x4149e8
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
and eax, 0x12969
xor eax, 0x153ad
lodsd eax, dword [esi]
push ebx
add dword [eax], eax
and eax, 0x182ea
and eax, 0x12f2

Function at 0x4149f8
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
and eax, 0x12969
xor eax, 0x153ad
lodsd eax, dword [esi]
push ebx
add dword [eax], eax
and eax, 0x182ea
and eax, 0x12f2

Function at 0x414a00
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
pop eax
mov edx, dword [ebp - 0x238]
mov dword [ebp - 0x264], edx
jmp 0x414a1e

Function at 0x414a28
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [edi], dh
inc eax
dec edx
aas
dec esp
inc ebx
add esp, 4
les eax, [edi + ebx*2]
push eax
and eax, 0x65d1
add byte [eax], al
call 0x414a46
add byte [edi + 0x4a], cl
dec edi
dec edx
dec edx
inc ebp
aas
cmp eax, dword [ebx - 0x177efb3c]
add al, 0x81
call 0x42317d
pop eax
mov ecx, dword [ebp - 0x264]
invalid
invalid

Function at 0x414a2f
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [edi], dh
inc eax
dec edx
aas
dec esp
inc ebx
add esp, 4
les eax, [edi + ebx*2]
push eax
and eax, 0x65d1
add byte [eax], al
call 0x414a46
add byte [edi + 0x4a], cl
dec edi
dec edx
dec edx
inc ebp
aas
cmp eax, dword [ebx - 0x177efb3c]
add al, 0x81
call 0x42317d
pop eax
mov ecx, dword [ebp - 0x264]
invalid
invalid

Function at 0x414a30
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [edi], dh
inc eax
dec edx
aas
dec esp
inc ebx
add esp, 4
les eax, [edi + ebx*2]
push eax
and eax, 0x65d1
add byte [eax], al
call 0x414a46
add byte [edi + 0x4a], cl
dec edi
dec edx
dec edx
inc ebp
aas
cmp eax, dword [ebx - 0x177efb3c]
add al, 0x81
call 0x42317d
pop eax
mov ecx, dword [ebp - 0x264]
invalid
invalid

Function at 0x414a40
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [edi], dh
inc eax
dec edx
aas
dec esp
inc ebx
add esp, 4
les eax, [edi + ebx*2]
push eax
and eax, 0x65d1
add byte [eax], al
call 0x414a46
add byte [edi + 0x4a], cl
dec edi
dec edx
dec edx
inc ebp
aas
cmp eax, dword [ebx - 0x177efb3c]
add al, 0x81
call 0x42317d
pop eax
mov ecx, dword [ebp - 0x264]
invalid
invalid

Function at 0x414a46
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [edi], dh
inc eax
dec edx
aas
dec esp
inc ebx
add esp, 4
les eax, [edi + ebx*2]
push eax
and eax, 0x65d1
add byte [eax], al
call 0x414a46
add byte [edi + 0x4a], cl
dec edi
dec edx
dec edx
inc ebp
aas
cmp eax, dword [ebx - 0x177efb3c]
add al, 0x81
call 0x42317d
pop eax
mov ecx, dword [ebp - 0x264]
invalid
invalid
Function at 0x414a50
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [edi], dh
inc eax
dec edx
aas
dec esp
inc ebx
add esp, 4
les eax, [edi + ebx*2]
push eax
and eax, 0x65d1
add byte [eax], al
call 0x414a46
add byte [edi + 0x4a], cl
dec edi
dec edx
dec edx
inc ebp
aas
cmp eax, dword [ebx - 0x177efb3c]
add al, 0x81
call 0x42317d
pop eax
mov ecx, dword [ebp - 0x264]
invalid
invalid

Function at 0x414a60
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
aaa
push esi
or esi, 0xb9a
or eax, dword [eax]
add byte [ecx + 0x14138f6], al
add byte [ecx + 0xbe61ee], al
invalid
invalid

Function at 0x414a98
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov dword [ebp - 0x698], 7
mov edx, dword [ebp - 0x264]

Function at 0x414aa0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov dword [ebp - 0x698], 7
mov edx, dword [ebp - 0x264]

Function at 0x414ab0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
sub esi, 0xe0d2
add byte [esi + 0x50], bl
push edx
add esp, 4
jmp 0x414ac7
push es
pop eax

Function at 0x414ae0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [ecx + 0x14f8ac0], al
add byte [eax - 0x75], bl
invalid

Function at 0x414b10
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x264]
add eax, 1
jmp 0x414c46
cmp dword [ebp - 0xb44], 0
jne 0x414c8f
push ecx
invalid

Function at 0x414b28
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [ecx + 0xef8f6], al
add byte [ecx + 0x7d5de6], al
add bl, ch
pop es
dec ebx

Function at 0x414b38
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
cmp al, 0x47
aas
dec ecx
xor eax, 0x5eb515e
jmp 0x414b47
cmp byte [ebx + ecx*2], dh
inc ebp
dec edi

Function at 0x414b40
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
cmp al, 0x47
aas
dec ecx
xor eax, 0x5eb515e
jmp 0x414b47
cmp byte [ebx + ecx*2], dh
inc ebp
dec edi

Function at 0x414b50
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov dl, 0
add byte [ecx - 0x75], bl
test dword [eax + 0xffffff9], edi
dec dword [edi]
mov dh, 8

Function at 0x414b68
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
je 0x414bd6
push eax
add eax, 0x16125
add byte [ecx + 0x4281e8], al
add byte [ecx + 0x66f9c8], al
enter 0x66f9, 0
add byte [eax + 0x56], bl
push edx
push esi
push ecx

Function at 0x414b78
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
je 0x414bd6
push eax
add eax, 0x16125
add byte [ecx + 0x4281e8], al
add byte [ecx + 0x66f9c8], al
enter 0x66f9, 0
add byte [eax + 0x56], bl
push edx
push esi
push ecx
Function at 0x414b80
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
add esi, 0x4041
add byte [ecx + 0x12b3f6], al
add byte [ecx + 0x1634ef6], al
test byte [esi + 0x63], 1
add byte [ecx + 0x9839c6], al
invalid
pop esi
invalid
invalid
invalid
stc

Function at 0x414b90
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
add esi, 0x4041
add byte [ecx + 0x12b3f6], al
add byte [ecx + 0x1634ef6], al
test byte [esi + 0x63], 1
add byte [ecx + 0x9839c6], al
invalid
pop esi
invalid
invalid
invalid
stc

Function at 0x414b98
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
add esi, 0x4041
add byte [ecx + 0x12b3f6], al
add byte [ecx + 0x1634ef6], al
test byte [esi + 0x63], 1
add byte [ecx + 0x9839c6], al
invalid
pop esi
invalid
invalid
invalid
stc

Function at 0x414bc0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
cwde
add byte [eax], al
mov dword [ebp - 0xb40], 1
jmp reloc.user32.dll_PhysicalToLogicalPoint
mov dword [ebp - 0xb40], 0xffffffff
mov edx, dword [ebp - 0xb40]
mov dword [ebp - 0x69c], edx
jmp 0x414c3a
mov eax, dword [ebp - 0x69c]

Function at 0x414bd8
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
or esi, 0x16094
add byte [esi + 0x56], bl
xor esi, 0x1d1c
or esi, 0xc1d6
pop esi

Function at 0x414bf0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edi
push ecx
add esp, 4
xor edi, 0x6793
add byte [bx + si], al
invalid
out dx, eax
mov byte [ebp], cl

Function at 0x414c20
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
cmp dword [ebp - 0x698], 0
jle 0x414c3a
add byte [eax], al
push esi
sub esi, 0x15cf1
add byte [ecx + 0xef8f6], al
add byte [ecx + 0x7d5de6], al
add bl, ch
pop es
pop esi
push ecx
mov dword [ebp - 0x648], ecx
invalid
xchg ebp, eax

Function at 0x414c48
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
dec dword [ebx - 0x69b7b]
dec dword [ecx - 0xb437b]
mov dword [ebp - 0xb44], eax
cmp dword [ebp - 0xb44], 0

Function at 0x414c50
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push esi
add esp, 4
sub ecx, 0x598f
add byte [eax], al
sub ecx, 0x4bc6

Function at 0x414c98
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
aaa
push esi
or esi, 0xb9a
or eax, dword [eax]
add byte [ecx + 0x14138f6], al
add byte [ecx + 0xbe61ee], al
invalid
invalid

Function at 0x414ca8
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [ecx + 0xbe61ee], al
add byte [ecx + 0xa37cc6], al
invalid
jl 0x414c4e
add byte [eax], al
pop esi
push esi
push ebx
Function at 0x414cd0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edi
add edi, 0x10061
call 0x414ce6
or al, byte [eax]
add byte [eax], al
add byte [esp + esi + 0x47], cl
dec ebp
inc eax
cmp eax, dword [ebx + 0x4f]
inc esp
add esp, 4
add al, 0x81
out 0x75, eax
mov word [eax], es
invalid
pop edi

Function at 0x414ce6
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edi
add edi, 0x10061
call 0x414ce6
or al, byte [eax]
add byte [eax], al
add byte [esp + esi + 0x47], cl
dec ebp
inc eax
cmp eax, dword [ebx + 0x4f]
inc esp
add esp, 4
add al, 0x81
out 0x75, eax
mov word [eax], es
invalid
pop edi

Function at 0x414ce8
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add al, 0x81
out 0x75, eax
mov word [eax], es
add byte [edi + 0x51], bl
push ecx

Function at 0x414cf0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ecx
call 0x414cfe
add byte [ebx + 0x3a], al
cmp dh, byte [esi]
push eax
cmp dword [ebp + 0x46], eax
add esp, 4
add al, 0x59
push esi
push ebx
add esp, 4
jmp 0x414d0d
invalid
sub esi, 0x11b51
pop esi
push edx
and edx, 0x4499
call 0x414d2a

Function at 0x414cf8
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ecx
call 0x414cfe
add byte [ebx + 0x3a], al
cmp dh, byte [esi]
push eax
cmp dword [ebp + 0x46], eax
add esp, 4
add al, 0x59
push esi
push ebx
add esp, 4
jmp 0x414d0d
invalid
sub esi, 0x11b51
pop esi
push edx
and edx, 0x4499
call 0x414d2a

Function at 0x414cfe
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ecx
call 0x414cfe
add byte [ebx + 0x3a], al
cmp dh, byte [esi]
push eax
cmp dword [ebp + 0x46], eax
add esp, 4
add al, 0x59
push esi
push ebx
add esp, 4
jmp 0x414d0d
invalid
sub esi, 0x11b51
pop esi
push edx
and edx, 0x4499
call 0x414d2a

Function at 0x414d00
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ecx
call 0x414cfe
add byte [ebx + 0x3a], al
cmp dh, byte [esi]
push eax
cmp dword [ebp + 0x46], eax
add esp, 4
add al, 0x59
push esi
push ebx
add esp, 4
jmp 0x414d0d
invalid
sub esi, 0x11b51
pop esi
push edx
and edx, 0x4499
call 0x414d2a

Function at 0x414d10
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ecx
call 0x414cfe
add byte [ebx + 0x3a], al
cmp dh, byte [esi]
push eax
cmp dword [ebp + 0x46], eax
add esp, 4
add al, 0x59
push esi
push ebx
add esp, 4
jmp 0x414d0d
invalid
sub esi, 0x11b51
pop esi
push edx
and edx, 0x4499
call 0x414d2a

Function at 0x414d28
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
xor eax, 0x4c48335
or edx, 0x16564
add dword gs:[eax], eax
pop edx
invalid
add dword [eax], eax
invalid

Function at 0x414d2a
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
xor eax, 0x4c48335
or edx, 0x16564
add dword gs:[eax], eax
pop edx
invalid
add dword [eax], eax
invalid
Function at 0x414d38
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [ebx - 0x3e], ch
add byte [ebp - 0x657fa74], cl
stc

Function at 0x414d70
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ebx
add esp, 4
or edi, 0x16506
pop edi
mov dword [ebp - 0x122c], 0xffffffff
push esi
push edx
add esp, 4
les eax, [ecx + eax*4]
into
mov edi, 0xeb0000c6
push es

Function at 0x414d98
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
pop esi
push ecx
push edx
add esp, 4
add ecx, 0x15cad
sub ecx, 0xfdb6
and ecx, 0x316e
add ecx, 0x5c26
pop ecx
mov edx, dword [ebp - 0x238]
mov dword [ebp - 0x260], edx
jmp 0x414dd4

Function at 0x414de3
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x260]
add eax, 1
mov dword [ebp - 0x260], eax
push eax
call 0x414de3
add byte [edx], dh
inc ecx
dec eax
cmp eax, 0x5033414a
add esp, 4
jmp 0x414ded
jmp 0x414df3
pop eax
push edi
push edx
add esp, 4
or edi, 0x84fc
xor edi, 0x1484e
pop edi
mov ecx, dword [ebp - 0x260]
sub ecx, dword [ebp - 0x238]
cmp ecx, 0xffffffff
jb 0x414e4e
push eax
push ebx
add esp, 4
sub eax, 0x2e8
add eax, 0xfaa
xor eax, 0x7360
pop eax
push ebx
sub ebx, 0xe035
sub ebx, 0xebe5
xor ebx, 0x9a3
add ebx, 0xed78
pop ebx
jmp 0x41504a
mov dword [ebp - 0x6a0], 7
mov edx, dword [ebp - 0x260]
mov dword [ebp - 0x60c], edx
push edx
sub edx, 0x3b11
pop edx
push eax
add eax, 0xb2ed
pop eax
push edx
call 0x414e82
add byte [ebp + 0x4a], cl
xor eax, 0x3240474c
add esp, 4
pop edx
push ebx
or ebx, 0x94f2
pop ebx
push ecx
add ecx, 0xada6
pop ecx
mov eax, dword [ebp - 0xb48]
mov dword [ebp - 0x610], eax
mov dword [ebp - 0x6a4], 0
mov ecx, dword [ebp - 0x260]
cmp ecx, dword [ebp - 0xb48]
jne 0x414ecb
mov edx, dword [ebp - 0x6a4]
mov dword [ebp - 0xb50], edx
jmp 0x414ffc
mov dword [ebp - 0xb4c], 1
jmp 0x414f7e
invalid
xchg ebp, eax
Function at 0x414e82
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x260]
add eax, 1
mov dword [ebp - 0x260], eax
push eax
call 0x414de3
add byte [edx], dh
inc ecx
dec eax
cmp eax, 0x5033414a
add esp, 4
jmp 0x414ded
jmp 0x414df3
pop eax
push edi
push edx
add esp, 4
or edi, 0x84fc
xor edi, 0x1484e
pop edi
mov ecx, dword [ebp - 0x260]
sub ecx, dword [ebp - 0x238]
cmp ecx, 0xffffffff
jb 0x414e4e
push eax
push ebx
add esp, 4
sub eax, 0x2e8
add eax, 0xfaa
xor eax, 0x7360
pop eax
push ebx
sub ebx, 0xe035
sub ebx, 0xebe5
xor ebx, 0x9a3
add ebx, 0xed78
pop ebx
jmp 0x41504a
mov dword [ebp - 0x6a0], 7
mov edx, dword [ebp - 0x260]
mov dword [ebp - 0x60c], edx
push edx
sub edx, 0x3b11
pop edx
push eax
add eax, 0xb2ed
pop eax
push edx
call 0x414e82
add byte [ebp + 0x4a], cl
xor eax, 0x3240474c
add esp, 4
pop edx
push ebx
or ebx, 0x94f2
pop ebx
push ecx
add ecx, 0xada6
pop ecx
mov eax, dword [ebp - 0xb48]
mov dword [ebp - 0x610], eax
mov dword [ebp - 0x6a4], 0
mov ecx, dword [ebp - 0x260]
cmp ecx, dword [ebp - 0xb48]
jne 0x414ecb
mov edx, dword [ebp - 0x6a4]
mov dword [ebp - 0xb50], edx
jmp 0x414ffc
mov dword [ebp - 0xb4c], 1
jmp 0x414f7e
invalid
xchg ebp, eax

Function at 0x414f68
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x260]
add eax, 1
mov dword [ebp - 0x260], eax
push eax
call 0x414de3
add byte [edx], dh
inc ecx
dec eax
cmp eax, 0x5033414a
add esp, 4
jmp 0x414ded
jmp 0x414df3
pop eax
push edi
push edx
add esp, 4
or edi, 0x84fc
xor edi, 0x1484e
pop edi
mov ecx, dword [ebp - 0x260]
sub ecx, dword [ebp - 0x238]
cmp ecx, 0xffffffff
jb 0x414e4e
push eax
push ebx
add esp, 4
sub eax, 0x2e8
add eax, 0xfaa
xor eax, 0x7360
pop eax
push ebx
sub ebx, 0xe035
sub ebx, 0xebe5
xor ebx, 0x9a3
add ebx, 0xed78
pop ebx
jmp 0x41504a
mov dword [ebp - 0x6a0], 7
mov edx, dword [ebp - 0x260]
mov dword [ebp - 0x60c], edx
push edx
sub edx, 0x3b11
pop edx
push eax
add eax, 0xb2ed
pop eax
push edx
call 0x414e82
add byte [ebp + 0x4a], cl
xor eax, 0x3240474c
add esp, 4
pop edx
push ebx
or ebx, 0x94f2
pop ebx
push ecx
add ecx, 0xada6
pop ecx
mov eax, dword [ebp - 0xb48]
mov dword [ebp - 0x610], eax
mov dword [ebp - 0x6a4], 0
mov ecx, dword [ebp - 0x260]
cmp ecx, dword [ebp - 0xb48]
jne 0x414ecb
mov edx, dword [ebp - 0x6a4]
mov dword [ebp - 0xb50], edx
jmp 0x414ffc
mov dword [ebp - 0xb4c], 1
jmp 0x414f7e
invalid
xchg ebp, eax

Function at 0x414fdc
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
cmp dword [ebp - 0x6a0], 0
jle IsWow64Process
push edx
or edx, 0xc9ea
add edx, 0x9c
jmp 0x414eeb
add edx, 0x7306
pop edx
push ecx
push ecx
add esp, 4
jmp 0x414efd
and ecx, 0x90d5
xor ecx, 0x1ed
pop ecx
mov eax, dword [ebp - 0x60c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x610]
movzx eax, byte [edx]
cmp ecx, eax
je 0x414f8c
push ecx
push edx
add esp, 4
or ecx, 0x1310c
sub ecx, 0x7669
pop ecx
push edi
add edi, 0xa307
add byte [ecx + 0x2981f7], al
invalid
pop edi
mov edx, dword [ebp - 0x610]
add edx, 1
mov dword [ebp - 0x610], edx
jmp 0x414ecb
Function at 0x417492
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop ecx
mov eax, dword [ebp - 0x6f0]
mov cx, word [eax]
mov word [ebp - 0x896], cx
mov edx, dword [ebp - 0x6f0]
add edx, 2
mov dword [ebp - 0x6f0], edx
mov ax, word [ebp - 0x896]
mov word [ebp - 0x128], ax
mov ecx, dword [ebp - 0x6f4]
mov dx, word [ecx]
mov word [ebp - 0x898], dx
mov eax, dword [ebp - 0x6f4]
add eax, 2
mov dword [ebp - 0x6f4], eax
mov cx, word [ebp - 0x898]
mov word [ebp - 0x3c], cx
push edx
push edi
add esp, 4
and edx, 0x635c
xor edx, 0xe18a
pop edx
push eax
or eax, 0x1d23
pop eax
push edx
push ecx
add esp, 4
sub edx, 0x17e44
and edx, 0xa935
xor edx, 0x13f5a
pop edx
movzx edx, word [ebp - 0x3c]
test edx, edx
jne 0x41753c
movzx eax, word [ebp - 0x128]
movzx ecx, word [ebp - 0x3c]
sub eax, ecx
mov dword [ebp - 0xbfc], eax
jmp 0x417596
movzx edx, word [ebp - 0x128]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
je 0x417464
movzx ecx, word [ebp - 0x128]
xor ecx, 0x20
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x417464
movzx eax, word [ebp - 0x128]
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
jge 0x417580
mov dword [ebp - 0xbf8], 0xffffffff
jmp 0x41758a
mov dword [ebp - 0xbf8], 1
mov edx, dword [ebp - 0xbf8]
mov dword [ebp - 0xbfc], edx
cmp dword [ebp - 0xbfc], 0
jne 0x4175df
push edi
call 0x4175b0
add byte [esi], bh
dec esp
cmp dh, byte [0x4835433c]
dec esp
push eax
add esp, 4
call 0x4175c2
add byte [edi + 0x4d], al
inc eax
xor al, 0x46
dec ebp
push eax
add esp, 4
add edi, 0x100f3
jmp 0x4175d0
pop edi
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x18c], eax
jmp 0x417647
push esi
push eax
add esp, 4
add esi, 0xd2f7
call 0x4175f8
add byte [edx + esi], bh
inc ebx
inc edx
aas
aas
inc edx
aas
add esp, 4
and esi, 0x1178b
call 0x41760d
add byte [edi], dh
cmp byte [0x834e4345], dh
les eax, [esi + ebx*2]
mov ecx, dword [ebp - 0x244]
mov edx, dword [ecx]
mov dword [ebp - 0x244], edx
mov eax, dword [ebp - 0x244]
cmp eax, dword [ebp - 0x6f8]
je 0x41763d
mov ecx, dword [ebp - 0x244]
cmp dword [ecx + 0x30], 0
jne 0x417408
mov dword [ebp - 0x18c], 0