joyce8/EMBER2024-capa huggingface dataset:
Function at 0x566133
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x19c]
add eax, 1
mov dword [ebp - 0x19c], eax
invalid
invalid
invalid
dec dword [ebx - 0x19773]
push 0x8bfffffe
xchg ebp, eax
invalid
invalid
invalid
invalid
cmp edx, dword [ecx + 0x18]
jae 0x5661f5
mov eax, dword [ebp - 0x19c]
mov ecx, dword [ebp - 0x6e0]
mov edx, dword [ebp - 0xbc]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x1a0], edx
mov eax, dword [ebp - 0x19c]
mov ecx, dword [ebp - 0x6e4]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x6e8]
mov ecx, dword [ebp - 0xbc]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x6ec], ecx
mov dword [ebp - 0x14], 0
jmp 0x56607b
mov edx, dword [ebp - 0x14]
add edx, 1
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x1a0]
add eax, dword [ebp - 0x14]
movsx ecx, byte [eax]
test ecx, ecx
je 0x566117
mov edx, dword [ebp - 0x14]
movsx eax, byte [ebp + edx - 0x214]
test eax, eax
je 0x566117
push ecx
call 0x5660ac
add byte [eax + 0x41], dl
cmp al, 0x44
dec edi
inc eax
dec eax
add esp, 4
pop ecx
push ebx
push ecx
add esp, 4
sub ebx, 0x6417
pop ebx
push edx
or edx, 0x1bf9
or edx, 0x9633
add edx, 0xfdc3
pop edx
mov ecx, dword [ebp - 0x1a0]
add ecx, dword [ebp - 0x14]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x14]
movsx ecx, byte [ebp + eax - 0x214]
cmp edx, ecx
je 0x566109
mov edx, dword [ebp - 0x1a0]
add edx, dword [ebp - 0x14]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x14]
movsx edx, byte [ebp + ecx - 0x214]
cmp eax, edx
jne 0x566110
jmp 0x566072
jmp 0x566117
push edi
jmp 0x56611f
sub edi, 0x6fe7
pop edi
push eax
call 0x566133
add byte [eax], bh
dec esp
cmp al, 0x33
add esp, 4
invalid

Function at 0x56627d
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
xor eax, 0x859c
and eax, 0x16bb4
pop eax
push edx
xor edx, 0xf7ce
xor edx, 0xdf09
pop edx
mov dword [ebp - 0x1e0], 0
jmp 0x566922
Function at 0x5663a0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
sub ebx, 0x3a91
call 0x565a3f
add byte [ebx + 0x43], cl
aas
cmp al, 0x40
add esp, 4
pop ebx
push esi
or esi, 0x11374
pop esi
cmp dword [ebp - 0xa8], 0
jne 0x5662aa
mov edx, 0x6b
mov word [ebp - 0x5c8], dx
mov eax, 0x65
mov word [ebp - 0x5c6], ax
mov ecx, 0x72
mov word [ebp - 0x5c4], cx
mov edx, 0x6e
mov word [ebp - 0x5c2], dx
mov eax, 0x65
mov word [ebp - 0x5c0], ax
mov ecx, 0x6c
mov word [ebp - 0x5be], cx
mov edx, 0x33
mov word [ebp - 0x5bc], dx
mov eax, 0x32
xor al, byte [eax]
add byte [eax], al
xor edx, 0xadbc
jmp 0x565bc4
pop edx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x6f8], ecx
mov edx, dword [ebp - 0x6f8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x6fc], eax
mov ecx, dword [ebp - 0x6fc]
mov dword [ebp - 0x4d8], ecx
push ebx
push edi
add esp, 4
jmp 0x5662dd
xor ebx, 0xe016
pop ebx
push edi
push ecx
add esp, 4
sub edi, 0x10f6e
or edi, 0x8d7e
add edi, 0x129d1
pop edi
push edi
or edi, 0x14679
pop edi
cmp dword [ebp - 0x4d8], 0
jne 0x56631c
mov dword [ebp - 0xa8], 0
jmp 0x5665ad
mov edx, dword [ebp - 0x4d8]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x2f0], ecx
push ebx
push ecx
add esp, 4
or ebx, 0x1e3b
add ebx, 0x7c7
sub ebx, 0x185eb
or ebx, 0xabeb
pop ebx
push edx
jmp 0x566353
add edx, 0x10633
and edx, 0x128aa
pop edx
cmp dword [ebp - 0x2f0], 0
jne 0x566378
mov dword [ebp - 0xa8], 0
jmp 0x5665ad
mov edx, dword [ebp - 0x2f0]
mov dword [ebp - 0xf4], edx
push eax
xor eax, 0x42bd
and eax, 0x5d1c
pop eax
push ebx
call 0x5663a0
add byte [ebx + 0x41], al
aas
inc esi
xor eax, 0x4c4834f
pop ebx
push edi
push edx
add esp, 4
add edi, 0x29bb
add edi, 0x128a3
pop edi
lea eax, [ebp - 0x55c]
mov dword [ebp - 0x2ec], eax
push esi
call 0x5665ba
add byte [edi + 0x33], cl
inc edi
dec ebp
xor eax, 0x5e04c483
push ebx
jmp 0x5665c4
sub ebx, 0xe925
pop ebx
push esi
sub esi, 0xf5e4
xor esi, 0x1334f
xor esi, 0x15a5
pop esi
mov edx, dword [ebp - 0xa8]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0xb8], eax
push ecx
push edx
add esp, 4
call 0x566602
add byte [eax + edx*2 + 0x48], al
inc esp
push eax
dec ebx
inc ebx
inc eax
cmp eax, dword [ebx + 0x535904c4]
push ebx
add esp, 4
add ebx, 0x13b7c
pop ebx
push esi
jmp 0x566619
sub esi, 0x9225
pop esi
mov dword [ebp - 0x1b4], 0
mov ecx, dword [ebp - 0xb8]
mov dword [ebp - 0x4e4], ecx
cmp dword [ebp - 0x4e4], 0
jne 0x566650
mov edx, dword [ebp - 0x1b4]
mov dword [ebp - 0xf0], edx
jmp 0x566916
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [ebp - 0xb8]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x4e8], ecx
jne 0x566678
mov edx, dword [ebp - 0x1b4]
mov dword [ebp - 0xf0], edx
jmp 0x566916
mov eax, 8
imul ecx, eax, 0
mov edx, dword [ebp - 0x4e8]
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp - 0xf0], ecx
Function at 0x566402
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edx
push eax
add esp, 4
xor edx, 0xac2e
pop edx
push edx
xor edx, 0x1074a
call 0x566402
add byte [edi + eax*2], bh
cmp eax, dword [ebp + 0x41]
dec ebx
dec esi
dec eax
dec ecx
add esp, 4
sub edx, 0x1380
xor edx, 0x1781d
pop edx
mov edx, dword [ebp - 0x2e8]
mov ax, word [edx]
mov word [ebp - 0x392], ax
mov ecx, dword [ebp - 0x2e8]
add ecx, 2
mov dword [ebp - 0x2e8], ecx
mov dx, word [ebp - 0x392]
mov word [ebp - 0x88], dx
mov eax, dword [ebp - 0x2ec]
mov cx, word [eax]
mov word [ebp - 0x394], cx
mov edx, dword [ebp - 0x2ec]
add edx, 2
mov dword [ebp - 0x2ec], edx
mov ax, word [ebp - 0x394]
mov word [ebp - 0x4c], ax
push ebx
call fcn.0056647a
add byte [eax], al
add byte [eax], al
inc ebx
inc esi
add esp, 4
and ebx, 0xa417
and ebx, 0x1159c
pop ebx
push edx
jmp 0x56649a
pop edx
movzx ecx, word [ebp - 0x4c]
test ecx, ecx
leave
jne 0x5664b8
movzx edx, word [ebp - 0x88]
movzx eax, word [ebp - 0x4c]
sub edx, eax
mov dword [ebp - 0x4e0], edx
jmp 0x5664fc
movzx ecx, word [ebp - 0x88]
movzx edx, word [ebp - 0x4c]
cmp ecx, edx
je 0x5663e0
movzx eax, word [ebp - 0x88]
movzx ecx, word [ebp - 0x4c]
cmp eax, ecx
jge 0x5664e6
mov dword [ebp - 0x4dc], 0xffffffff
jmp 0x5664f0
mov dword [ebp - 0x4dc], 1
mov edx, dword [ebp - 0x4dc]
mov dword [ebp - 0x4e0], edx
cmp dword [ebp - 0x4e0], 0
jne 0x566545
push ebx
call 0x566515
add byte [edi], bh
inc ecx
dec esp
dec edi
inc edi
dec eax
dec edx
inc esp
add esp, 4
add ebx, 0x989c
add ebx, 0x90eb
call 0x566533
add byte [ebx + 0x50], cl
push eax
aaa
aas
inc esp
cmp edi, dword [ebx]
add esp, 4
pop ebx
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xa8], eax
jmp 0x5665ad
push ebx
push edx
add esp, 4
add ebx, 0x1296d
and ebx, 0xa255
jmp 0x56655c
xor ebx, 0xb02c
pop ebx
push esi
or esi, 0x11ca3
add esi, 0x1c8b
xor esi, 0x7b27
pop esi
mov ecx, dword [ebp - 0xf4]
mov edx, dword [ecx]
mov dword [ebp - 0xf4], edx
mov eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0x2f0]
je 0x5665a3
mov ecx, dword [ebp - 0xf4]
cmp dword [ecx + 0x30], 0
jne 0x566384
mov dword [ebp - 0xa8], 0

Function at 0x566478
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
cmp dword [edi], esi
dec ebx
dec ebp
xor eax, 0x83383446
xor al, 0x38
add esp, 4
pop ebx

Function at 0x56647a
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
cmp dword [edi], esi
dec ebx
dec ebp
xor eax, 0x83383446
xor al, 0x38
add esp, 4
pop ebx
Function at 0x566480
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edx
push eax
add esp, 4
xor edx, 0xac2e
pop edx
push edx
xor edx, 0x1074a
call 0x566402
add byte [edi + eax*2], bh
cmp eax, dword [ebp + 0x41]
dec ebx
dec esi
dec eax
dec ecx
add esp, 4
sub edx, 0x1380
xor edx, 0x1781d
pop edx
mov edx, dword [ebp - 0x2e8]
mov ax, word [edx]
mov word [ebp - 0x392], ax
mov ecx, dword [ebp - 0x2e8]
add ecx, 2
mov dword [ebp - 0x2e8], ecx
mov dx, word [ebp - 0x392]
mov word [ebp - 0x88], dx
mov eax, dword [ebp - 0x2ec]
mov cx, word [eax]
mov word [ebp - 0x394], cx
mov edx, dword [ebp - 0x2ec]
add edx, 2
mov dword [ebp - 0x2ec], edx
mov ax, word [ebp - 0x394]
mov word [ebp - 0x4c], ax
push ebx
call fcn.0056647a
add byte [eax], al
add byte [eax], al
inc ebx
inc esi
add esp, 4
and ebx, 0xa417
and ebx, 0x1159c
pop ebx
push edx
jmp 0x56649a
pop edx
movzx ecx, word [ebp - 0x4c]
test ecx, ecx
leave
jne 0x5664b8
movzx edx, word [ebp - 0x88]
movzx eax, word [ebp - 0x4c]
sub edx, eax
mov dword [ebp - 0x4e0], edx
jmp 0x5664fc
movzx ecx, word [ebp - 0x88]
movzx edx, word [ebp - 0x4c]
cmp ecx, edx
je 0x5663e0
movzx eax, word [ebp - 0x88]
movzx ecx, word [ebp - 0x4c]
cmp eax, ecx
jge 0x5664e6
mov dword [ebp - 0x4dc], 0xffffffff
jmp 0x5664f0
mov dword [ebp - 0x4dc], 1
mov edx, dword [ebp - 0x4dc]
mov dword [ebp - 0x4e0], edx
cmp dword [ebp - 0x4e0], 0
jne 0x566545
push ebx
call 0x566515
add byte [edi], bh
inc ecx
dec esp
dec edi
inc edi
dec eax
dec edx
inc esp
add esp, 4
add ebx, 0x989c
add ebx, 0x90eb
call 0x566533
add byte [ebx + 0x50], cl
push eax
aaa
aas
inc esp
cmp edi, dword [ebx]
add esp, 4
pop ebx
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xa8], eax
jmp 0x5665ad
push ebx
push edx
add esp, 4
add ebx, 0x1296d
and ebx, 0xa255
jmp 0x56655c
xor ebx, 0xb02c
pop ebx
push esi
or esi, 0x11ca3
add esi, 0x1c8b
xor esi, 0x7b27
pop esi
mov ecx, dword [ebp - 0xf4]
mov edx, dword [ecx]
mov dword [ebp - 0xf4], edx
mov eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0x2f0]
je 0x5665a3
mov ecx, dword [ebp - 0xf4]
cmp dword [ecx + 0x30], 0
jne 0x566384
mov dword [ebp - 0xa8], 0
Function at 0x566515
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edx
push eax
add esp, 4
xor edx, 0xac2e
pop edx
push edx
xor edx, 0x1074a
call 0x566402
add byte [edi + eax*2], bh
cmp eax, dword [ebp + 0x41]
dec ebx
dec esi
dec eax
dec ecx
add esp, 4
sub edx, 0x1380
xor edx, 0x1781d
pop edx
mov edx, dword [ebp - 0x2e8]
mov ax, word [edx]
mov word [ebp - 0x392], ax
mov ecx, dword [ebp - 0x2e8]
add ecx, 2
mov dword [ebp - 0x2e8], ecx
mov dx, word [ebp - 0x392]
mov word [ebp - 0x88], dx
mov eax, dword [ebp - 0x2ec]
mov cx, word [eax]
mov word [ebp - 0x394], cx
mov edx, dword [ebp - 0x2ec]
add edx, 2
mov dword [ebp - 0x2ec], edx
mov ax, word [ebp - 0x394]
mov word [ebp - 0x4c], ax
push ebx
call fcn.0056647a
add byte [eax], al
add byte [eax], al
inc ebx
inc esi
add esp, 4
and ebx, 0xa417
and ebx, 0x1159c
pop ebx
push edx
jmp 0x56649a
pop edx
movzx ecx, word [ebp - 0x4c]
test ecx, ecx
leave
jne 0x5664b8
movzx edx, word [ebp - 0x88]
movzx eax, word [ebp - 0x4c]
sub edx, eax
mov dword [ebp - 0x4e0], edx
jmp 0x5664fc
movzx ecx, word [ebp - 0x88]
movzx edx, word [ebp - 0x4c]
cmp ecx, edx
je 0x5663e0
movzx eax, word [ebp - 0x88]
movzx ecx, word [ebp - 0x4c]
cmp eax, ecx
jge 0x5664e6
mov dword [ebp - 0x4dc], 0xffffffff
jmp 0x5664f0
mov dword [ebp - 0x4dc], 1
mov edx, dword [ebp - 0x4dc]
mov dword [ebp - 0x4e0], edx
cmp dword [ebp - 0x4e0], 0
jne 0x566545
push ebx
call 0x566515
add byte [edi], bh
inc ecx
dec esp
dec edi
inc edi
dec eax
dec edx
inc esp
add esp, 4
add ebx, 0x989c
add ebx, 0x90eb
call 0x566533
add byte [ebx + 0x50], cl
push eax
aaa
aas
inc esp
cmp edi, dword [ebx]
add esp, 4
pop ebx
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xa8], eax
jmp 0x5665ad
push ebx
push edx
add esp, 4
add ebx, 0x1296d
and ebx, 0xa255
jmp 0x56655c
xor ebx, 0xb02c
pop ebx
push esi
or esi, 0x11ca3
add esi, 0x1c8b
xor esi, 0x7b27
pop esi
mov ecx, dword [ebp - 0xf4]
mov edx, dword [ecx]
mov dword [ebp - 0xf4], edx
mov eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0x2f0]
je 0x5665a3
mov ecx, dword [ebp - 0xf4]
cmp dword [ecx + 0x30], 0
jne 0x566384
mov dword [ebp - 0xa8], 0
Function at 0x566533
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edx
push eax
add esp, 4
xor edx, 0xac2e
pop edx
push edx
xor edx, 0x1074a
call 0x566402
add byte [edi + eax*2], bh
cmp eax, dword [ebp + 0x41]
dec ebx
dec esi
dec eax
dec ecx
add esp, 4
sub edx, 0x1380
xor edx, 0x1781d
pop edx
mov edx, dword [ebp - 0x2e8]
mov ax, word [edx]
mov word [ebp - 0x392], ax
mov ecx, dword [ebp - 0x2e8]
add ecx, 2
mov dword [ebp - 0x2e8], ecx
mov dx, word [ebp - 0x392]
mov word [ebp - 0x88], dx
mov eax, dword [ebp - 0x2ec]
mov cx, word [eax]
mov word [ebp - 0x394], cx
mov edx, dword [ebp - 0x2ec]
add edx, 2
mov dword [ebp - 0x2ec], edx
mov ax, word [ebp - 0x394]
mov word [ebp - 0x4c], ax
push ebx
call fcn.0056647a
add byte [eax], al
add byte [eax], al
inc ebx
inc esi
add esp, 4
and ebx, 0xa417
and ebx, 0x1159c
pop ebx
push edx
jmp 0x56649a
pop edx
movzx ecx, word [ebp - 0x4c]
test ecx, ecx
leave
jne 0x5664b8
movzx edx, word [ebp - 0x88]
movzx eax, word [ebp - 0x4c]
sub edx, eax
mov dword [ebp - 0x4e0], edx
jmp 0x5664fc
movzx ecx, word [ebp - 0x88]
movzx edx, word [ebp - 0x4c]
cmp ecx, edx
je 0x5663e0
movzx eax, word [ebp - 0x88]
movzx ecx, word [ebp - 0x4c]
cmp eax, ecx
jge 0x5664e6
mov dword [ebp - 0x4dc], 0xffffffff
jmp 0x5664f0
mov dword [ebp - 0x4dc], 1
mov edx, dword [ebp - 0x4dc]
mov dword [ebp - 0x4e0], edx
cmp dword [ebp - 0x4e0], 0
jne 0x566545
push ebx
call 0x566515
add byte [edi], bh
inc ecx
dec esp
dec edi
inc edi
dec eax
dec edx
inc esp
add esp, 4
add ebx, 0x989c
add ebx, 0x90eb
call 0x566533
add byte [ebx + 0x50], cl
push eax
aaa
aas
inc esp
cmp edi, dword [ebx]
add esp, 4
pop ebx
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xa8], eax
jmp 0x5665ad
push ebx
push edx
add esp, 4
add ebx, 0x1296d
and ebx, 0xa255
jmp 0x56655c
xor ebx, 0xb02c
pop ebx
push esi
or esi, 0x11ca3
add esi, 0x1c8b
xor esi, 0x7b27
pop esi
mov ecx, dword [ebp - 0xf4]
mov edx, dword [ecx]
mov dword [ebp - 0xf4], edx
mov eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0x2f0]
je 0x5665a3
mov ecx, dword [ebp - 0xf4]
cmp dword [ecx + 0x30], 0
jne 0x566384
mov dword [ebp - 0xa8], 0
Function at 0x5665ba
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
sub ebx, 0x3a91
call 0x565a3f
add byte [ebx + 0x43], cl
aas
cmp al, 0x40
add esp, 4
pop ebx
push esi
or esi, 0x11374
pop esi
cmp dword [ebp - 0xa8], 0
jne 0x5662aa
mov edx, 0x6b
mov word [ebp - 0x5c8], dx
mov eax, 0x65
mov word [ebp - 0x5c6], ax
mov ecx, 0x72
mov word [ebp - 0x5c4], cx
mov edx, 0x6e
mov word [ebp - 0x5c2], dx
mov eax, 0x65
mov word [ebp - 0x5c0], ax
mov ecx, 0x6c
mov word [ebp - 0x5be], cx
mov edx, 0x33
mov word [ebp - 0x5bc], dx
mov eax, 0x32
xor al, byte [eax]
add byte [eax], al
xor edx, 0xadbc
jmp 0x565bc4
pop edx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x6f8], ecx
mov edx, dword [ebp - 0x6f8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x6fc], eax
mov ecx, dword [ebp - 0x6fc]
mov dword [ebp - 0x4d8], ecx
push ebx
push edi
add esp, 4
jmp 0x5662dd
xor ebx, 0xe016
pop ebx
push edi
push ecx
add esp, 4
sub edi, 0x10f6e
or edi, 0x8d7e
add edi, 0x129d1
pop edi
push edi
or edi, 0x14679
pop edi
cmp dword [ebp - 0x4d8], 0
jne 0x56631c
mov dword [ebp - 0xa8], 0
jmp 0x5665ad
mov edx, dword [ebp - 0x4d8]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x2f0], ecx
push ebx
push ecx
add esp, 4
or ebx, 0x1e3b
add ebx, 0x7c7
sub ebx, 0x185eb
or ebx, 0xabeb
pop ebx
push edx
jmp 0x566353
add edx, 0x10633
and edx, 0x128aa
pop edx
cmp dword [ebp - 0x2f0], 0
jne 0x566378
mov dword [ebp - 0xa8], 0
jmp 0x5665ad
mov edx, dword [ebp - 0x2f0]
mov dword [ebp - 0xf4], edx
push eax
xor eax, 0x42bd
and eax, 0x5d1c
pop eax
push ebx
call 0x5663a0
add byte [ebx + 0x41], al
aas
inc esi
xor eax, 0x4c4834f
pop ebx
push edi
push edx
add esp, 4
add edi, 0x29bb
add edi, 0x128a3
pop edi
lea eax, [ebp - 0x55c]
mov dword [ebp - 0x2ec], eax
push esi
call 0x5665ba
add byte [edi + 0x33], cl
inc edi
dec ebp
xor eax, 0x5e04c483
push ebx
jmp 0x5665c4
sub ebx, 0xe925
pop ebx
push esi
sub esi, 0xf5e4
xor esi, 0x1334f
xor esi, 0x15a5
pop esi
mov edx, dword [ebp - 0xa8]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0xb8], eax
push ecx
push edx
add esp, 4
call 0x566602
add byte [eax + edx*2 + 0x48], al
inc esp
push eax
dec ebx
inc ebx
inc eax
cmp eax, dword [ebx + 0x535904c4]
push ebx
add esp, 4
add ebx, 0x13b7c
pop ebx
push esi
jmp 0x566619
sub esi, 0x9225
pop esi
mov dword [ebp - 0x1b4], 0
mov ecx, dword [ebp - 0xb8]
mov dword [ebp - 0x4e4], ecx
cmp dword [ebp - 0x4e4], 0
jne 0x566650
mov edx, dword [ebp - 0x1b4]
mov dword [ebp - 0xf0], edx
jmp 0x566916
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [ebp - 0xb8]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x4e8], ecx
jne 0x566678
mov edx, dword [ebp - 0x1b4]
mov dword [ebp - 0xf0], edx
jmp 0x566916
mov eax, 8
imul ecx, eax, 0
mov edx, dword [ebp - 0x4e8]
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp - 0xf0], ecx
Function at 0x566602
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
sub ebx, 0x3a91
call 0x565a3f
add byte [ebx + 0x43], cl
aas
cmp al, 0x40
add esp, 4
pop ebx
push esi
or esi, 0x11374
pop esi
cmp dword [ebp - 0xa8], 0
jne 0x5662aa
mov edx, 0x6b
mov word [ebp - 0x5c8], dx
mov eax, 0x65
mov word [ebp - 0x5c6], ax
mov ecx, 0x72
mov word [ebp - 0x5c4], cx
mov edx, 0x6e
mov word [ebp - 0x5c2], dx
mov eax, 0x65
mov word [ebp - 0x5c0], ax
mov ecx, 0x6c
mov word [ebp - 0x5be], cx
mov edx, 0x33
mov word [ebp - 0x5bc], dx
mov eax, 0x32
xor al, byte [eax]
add byte [eax], al
xor edx, 0xadbc
jmp 0x565bc4
pop edx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x6f8], ecx
mov edx, dword [ebp - 0x6f8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x6fc], eax
mov ecx, dword [ebp - 0x6fc]
mov dword [ebp - 0x4d8], ecx
push ebx
push edi
add esp, 4
jmp 0x5662dd
xor ebx, 0xe016
pop ebx
push edi
push ecx
add esp, 4
sub edi, 0x10f6e
or edi, 0x8d7e
add edi, 0x129d1
pop edi
push edi
or edi, 0x14679
pop edi
cmp dword [ebp - 0x4d8], 0
jne 0x56631c
mov dword [ebp - 0xa8], 0
jmp 0x5665ad
mov edx, dword [ebp - 0x4d8]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x2f0], ecx
push ebx
push ecx
add esp, 4
or ebx, 0x1e3b
add ebx, 0x7c7
sub ebx, 0x185eb
or ebx, 0xabeb
pop ebx
push edx
jmp 0x566353
add edx, 0x10633
and edx, 0x128aa
pop edx
cmp dword [ebp - 0x2f0], 0
jne 0x566378
mov dword [ebp - 0xa8], 0
jmp 0x5665ad
mov edx, dword [ebp - 0x2f0]
mov dword [ebp - 0xf4], edx
push eax
xor eax, 0x42bd
and eax, 0x5d1c
pop eax
push ebx
call 0x5663a0
add byte [ebx + 0x41], al
aas
inc esi
xor eax, 0x4c4834f
pop ebx
push edi
push edx
add esp, 4
add edi, 0x29bb
add edi, 0x128a3
pop edi
lea eax, [ebp - 0x55c]
mov dword [ebp - 0x2ec], eax
push esi
call 0x5665ba
add byte [edi + 0x33], cl
inc edi
dec ebp
xor eax, 0x5e04c483
push ebx
jmp 0x5665c4
sub ebx, 0xe925
pop ebx
push esi
sub esi, 0xf5e4
xor esi, 0x1334f
xor esi, 0x15a5
pop esi
mov edx, dword [ebp - 0xa8]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0xb8], eax
push ecx
push edx
add esp, 4
call 0x566602
add byte [eax + edx*2 + 0x48], al
inc esp
push eax
dec ebx
inc ebx
inc eax
cmp eax, dword [ebx + 0x535904c4]
push ebx
add esp, 4
add ebx, 0x13b7c
pop ebx
push esi
jmp 0x566619
sub esi, 0x9225
pop esi
mov dword [ebp - 0x1b4], 0
mov ecx, dword [ebp - 0xb8]
mov dword [ebp - 0x4e4], ecx
cmp dword [ebp - 0x4e4], 0
jne 0x566650
mov edx, dword [ebp - 0x1b4]
mov dword [ebp - 0xf0], edx
jmp 0x566916
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [ebp - 0xb8]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x4e8], ecx
jne 0x566678
mov edx, dword [ebp - 0x1b4]
mov dword [ebp - 0xf0], edx
jmp 0x566916
mov eax, 8
imul ecx, eax, 0
mov edx, dword [ebp - 0x4e8]
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp - 0xf0], ecx

Function at 0x5666aa
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0x1a8]
mov edx, dword [ebp - 0xb8]
inc dword [ebx]
push ecx
invalid
invalid
xchg ebp, eax
Function at 0x5666da
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0x1a8]
mov edx, dword [ebp - 0xb8]
inc dword [ebx]
push ecx
invalid
invalid
xchg ebp, eax

Function at 0x5666e0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
inc dword [ebx]
push ecx
and byte [ecx - 0x6ff6b], cl
add cl, bh
invalid
dec dword [ebx - 0x1a77b]
pop eax
invalid
invalid
dec dword [ebx - 0xb773]
dec eax
invalid
invalid
inc dword [ebx]
dec eax

Function at 0x5666e6
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
inc dword [ebx]
push ecx
and byte [ecx - 0x6ff6b], cl
add cl, bh
invalid
dec dword [ebx - 0x1a77b]
pop eax
invalid
invalid
dec dword [ebx - 0xb773]
dec eax
invalid
invalid
inc dword [ebx]
dec eax

Function at 0x5666ec
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
inc dword [ebx]
push ecx
and byte [ecx - 0x6ff6b], cl
add cl, bh
invalid
dec dword [ebx - 0x1a77b]
pop eax
invalid
invalid
dec dword [ebx - 0xb773]
dec eax
invalid
invalid
inc dword [ebx]
dec eax

Function at 0x566716
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [eax], al
jmp 0x566729
mov edx, dword [ebp - 0x1a8]
mov eax, dword [ebp - 0x1ac]
invalid
cmp eax, dword [edx + 0x18]
jae 0x56690a
int3
add dword [eax], eax
invalid
mov ecx, dword [ebp - 0x1ac]
mov edx, dword [ebp - 0x700]
mov eax, dword [ebp - 0xb8]
add eax, dword [edx + ecx*4]
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp - 0xf0], ecx
Function at 0x5670e7
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add esp, 4
xor eax, 0x143bc
pop eax
mov edx, dword [ebp - 0x304]
mov ax, word [edx]
mov word [ebp - 0x39a], ax
mov ecx, dword [ebp - 0x304]
add ecx, 2
mov dword [ebp - 0x304], ecx
mov dx, word [ebp - 0x39a]
mov word [ebp - 0x90], dx
mov eax, dword [ebp - 0x308]
mov cx, word [eax]
mov word [ebp - 0x39c], cx
mov edx, dword [ebp - 0x308]
add edx, 2
mov dword [ebp - 0x308], edx
mov ax, word [ebp - 0x39c]
mov word [ebp - 0x54], ax
push ecx
and ecx, 0x3329
and ecx, 0xa4af
pop ecx
push esi
or esi, 0x16e26
or esi, 0x118fd
pop esi
push edx
push eax
add esp, 4
call 0x567176
add byte [ebx + 0x39], cl
cmp dword [eax], edi
push eax
inc esi
add esp, 4
pop edx
movzx ecx, word [ebp - 0x54]
test ecx, ecx
jne 0x567197
movzx edx, word [ebp - 0x90]
movzx eax, word [ebp - 0x54]
sub edx, eax
mov dword [ebp - 0x534], edx
jmp 0x5671db
movzx ecx, word [ebp - 0x90]
movzx edx, word [ebp - 0x54]
cmp ecx, edx
je 0x5670bf
movzx eax, word [ebp - 0x90]
movzx ecx, word [ebp - 0x54]
cmp eax, ecx
jge 0x5671c5
mov dword [ebp - 0x530], 0xffffffff
jmp 0x5671cf
mov dword [ebp - 0x530], 1
mov edx, dword [ebp - 0x530]
mov dword [ebp - 0x534], edx
cmp dword [ebp - 0x534], 0
jne 0x567224
push edi
push esi
add esp, 4
call 0x5671f8
add byte [edi + 0x38], al
cmp dword [esi], edi
dec ebx
inc esp
dec edx
dec esi
inc ebx
add esp, 4
xor edi, 0xbd86
add edi, 0x12ee4
pop edi
push eax
add eax, 0x155d7
sub eax, 0x49e
pop eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x1b8], eax
jmp 0x56728c
push esi
xor esi, 0x1a99
pop esi
push edi
push ecx
add esp, 4
add edi, 0x17e32
jmp 0x56723d
call fcn.0056724c
add byte [edi + 0x35], al
dec edx
inc ecx
cmp dword [ebx + 0x3f], eax
cmp byte [ebp - 0x7d], al
add esp, 4
sub edi, 0x111d3
pop edi
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ecx]
mov dword [ebp - 0x11c], edx
mov eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0x30c]
je 0x567282
mov ecx, dword [ebp - 0x11c]
cmp dword [ecx + 0x30], 0
jne 0x567063
mov dword [ebp - 0x1b8], 0