joyce8/EMBER2024-capa huggingface dataset:
Function at 0x40884d
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edi
call 0x40883b
add byte [edi + 0x33], cl
xor al, 0x36
xor eax, 0x83464448
les eax, [eax + ebp*8]
or al, byte [eax]
add byte [eax], al
add byte [0x483f3632], dh
dec ecx
inc ebp
xor eax, 0x4c4833c
add esp, 4
add edi, 0xec6b
sub edi, 0x14edf
pop edi
lea edx, [ebp - 0x1774]
mov dword [ebp - 0xca0], edx
mov eax, dword [ebp - 0x508]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc9c], ecx
xor edx, edx
mov word [ebp - 0x214], dx
xor eax, eax
mov word [ebp - 0x110], ax
push ecx
call 0x40889a
add byte [eax + 0x36], cl
cmp eax, dword [eax + 0x49]
dec ecx
inc ebp
xor al, byte [ebx + eax*4 - 0x3c]
add al, 0x81
loope 0x40884d
jns 0x4088a3
add byte [ecx + 0x16242e9], al
add byte [ecx + 0x4054c1], al
add byte [ecx + 0x53], bl
sub ecx, 0x16242
add ecx, 0x4054
pop ecx
push ebx
push eax
add esp, 4
sub ebx, 0x12b34
pop ebx
mov ecx, dword [ebp - 0xc9c]
mov dx, word [ecx]
mov word [ebp - 0x1036], dx
mov eax, dword [ebp - 0xc9c]
add eax, 2
mov dword [ebp - 0xc9c], eax
mov cx, word [ebp - 0x1036]
mov word [ebp - 0x214], cx
mov edx, dword [ebp - 0xca0]
mov ax, word [edx]
mov word [ebp - 0x1038], ax
mov ecx, dword [ebp - 0xca0]
add ecx, 2
mov dword [ebp - 0xca0], ecx
mov dx, word [ebp - 0x1038]
mov word [ebp - 0x110], dx
push eax
and eax, 0x8387
xor eax, 0x839e
and eax, 0x1463d
call 0x408938
add byte [esi], dh
cmp ecx, dword [ebx + 0x4c]
inc edi
inc ebx
push eax
cmp al, 0x50
add esp, 4
pop eax
push ebx
push ecx
add esp, 4
add ebx, 0xea7b
pop ebx
movzx eax, word [ebp - 0x110]
test eax, eax
jne 0x40896b
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
sub ecx, edx
retf 0x8d89
adc al, 0xea
invalid
invalid
jmp 0x4089ce
movzx eax, word [ebp - 0x214]
movzx ecx, word [ebp - 0x110]
cmp eax, ecx
je 0x40888a
movzx edx, word [ebp - 0x214]
xor edx, 0x20
movzx eax, word [ebp - 0x110]
cmp edx, eax
je 0x40888a
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
cmp ecx, edx
jge 0x4089b8
mov dword [ebp - 0x15e8], 0xffffffff
jmp 0x4089c2
mov dword [ebp - 0x15e8], 1
mov eax, dword [ebp - 0x15e8]
mov dword [ebp - 0x15ec], eax
cmp dword [ebp - 0x15ec], 0
jne 0x408a17
push ebx
xor ebx, 0x7b9e
sub ebx, 0x801f
sub ebx, 0x7d88
sub ebx, 0x17fa5
pop ebx
push edx
push ebx
add esp, 4
sub edx, 0xe439
or edx, 0xe78f
and edx, 0x2231
pop edx
mov ecx, dword [ebp - 0x508]
mov dword [ebp - 0x750], ecx
jmp 0x408a7f
push eax
push edi
add esp, 4
and eax, 0x14dc0
or eax, 0x1556b
or eax, 0x2ec2
pop eax
push ecx
or ecx, 0x77a4
pop ecx
push esi
push edx
add esp, 4
or esi, 0x707d
add esi, 0x6854
pop esi
mov edx, dword [ebp - 0x508]
mov eax, dword [edx]
mov dword [ebp - 0x508], eax
mov ecx, dword [ebp - 0x508]
cmp ecx, dword [ebp - 0xca4]
je 0x408a75
mov edx, dword [ebp - 0x508]
cmp dword [edx + 0x30], 0
jne 0x40882b
mov dword [ebp - 0x750], 0
push eax
xor eax, 0x16c04
or eax, 0xbcee
pop eax
push ecx
jmp 0x408a94
add ecx, 0xd9af
call 0x408aa7
Function at 0x40889a
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edi
call 0x40883b
add byte [edi + 0x33], cl
xor al, 0x36
xor eax, 0x83464448
les eax, [eax + ebp*8]
or al, byte [eax]
add byte [eax], al
add byte [0x483f3632], dh
dec ecx
inc ebp
xor eax, 0x4c4833c
add esp, 4
add edi, 0xec6b
sub edi, 0x14edf
pop edi
lea edx, [ebp - 0x1774]
mov dword [ebp - 0xca0], edx
mov eax, dword [ebp - 0x508]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc9c], ecx
xor edx, edx
mov word [ebp - 0x214], dx
xor eax, eax
mov word [ebp - 0x110], ax
push ecx
call 0x40889a
add byte [eax + 0x36], cl
cmp eax, dword [eax + 0x49]
dec ecx
inc ebp
xor al, byte [ebx + eax*4 - 0x3c]
add al, 0x81
loope 0x40884d
jns 0x4088a3
add byte [ecx + 0x16242e9], al
add byte [ecx + 0x4054c1], al
add byte [ecx + 0x53], bl
sub ecx, 0x16242
add ecx, 0x4054
pop ecx
push ebx
push eax
add esp, 4
sub ebx, 0x12b34
pop ebx
mov ecx, dword [ebp - 0xc9c]
mov dx, word [ecx]
mov word [ebp - 0x1036], dx
mov eax, dword [ebp - 0xc9c]
add eax, 2
mov dword [ebp - 0xc9c], eax
mov cx, word [ebp - 0x1036]
mov word [ebp - 0x214], cx
mov edx, dword [ebp - 0xca0]
mov ax, word [edx]
mov word [ebp - 0x1038], ax
mov ecx, dword [ebp - 0xca0]
add ecx, 2
mov dword [ebp - 0xca0], ecx
mov dx, word [ebp - 0x1038]
mov word [ebp - 0x110], dx
push eax
and eax, 0x8387
xor eax, 0x839e
and eax, 0x1463d
call 0x408938
add byte [esi], dh
cmp ecx, dword [ebx + 0x4c]
inc edi
inc ebx
push eax
cmp al, 0x50
add esp, 4
pop eax
push ebx
push ecx
add esp, 4
add ebx, 0xea7b
pop ebx
movzx eax, word [ebp - 0x110]
test eax, eax
jne 0x40896b
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
sub ecx, edx
retf 0x8d89
adc al, 0xea
invalid
invalid
jmp 0x4089ce
movzx eax, word [ebp - 0x214]
movzx ecx, word [ebp - 0x110]
cmp eax, ecx
je 0x40888a
movzx edx, word [ebp - 0x214]
xor edx, 0x20
movzx eax, word [ebp - 0x110]
cmp edx, eax
je 0x40888a
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
cmp ecx, edx
jge 0x4089b8
mov dword [ebp - 0x15e8], 0xffffffff
jmp 0x4089c2
mov dword [ebp - 0x15e8], 1
mov eax, dword [ebp - 0x15e8]
mov dword [ebp - 0x15ec], eax
cmp dword [ebp - 0x15ec], 0
jne 0x408a17
push ebx
xor ebx, 0x7b9e
sub ebx, 0x801f
sub ebx, 0x7d88
sub ebx, 0x17fa5
pop ebx
push edx
push ebx
add esp, 4
sub edx, 0xe439
or edx, 0xe78f
and edx, 0x2231
pop edx
mov ecx, dword [ebp - 0x508]
mov dword [ebp - 0x750], ecx
jmp 0x408a7f
push eax
push edi
add esp, 4
and eax, 0x14dc0
or eax, 0x1556b
or eax, 0x2ec2
pop eax
push ecx
or ecx, 0x77a4
pop ecx
push esi
push edx
add esp, 4
or esi, 0x707d
add esi, 0x6854
pop esi
mov edx, dword [ebp - 0x508]
mov eax, dword [edx]
mov dword [ebp - 0x508], eax
mov ecx, dword [ebp - 0x508]
cmp ecx, dword [ebp - 0xca4]
je 0x408a75
mov edx, dword [ebp - 0x508]
cmp dword [edx + 0x30], 0
jne 0x40882b
mov dword [ebp - 0x750], 0
push eax
xor eax, 0x16c04
or eax, 0xbcee
pop eax
push ecx
jmp 0x408a94
add ecx, 0xd9af
call 0x408aa7
Function at 0x408938
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edi
call 0x40883b
add byte [edi + 0x33], cl
xor al, 0x36
xor eax, 0x83464448
les eax, [eax + ebp*8]
or al, byte [eax]
add byte [eax], al
add byte [0x483f3632], dh
dec ecx
inc ebp
xor eax, 0x4c4833c
add esp, 4
add edi, 0xec6b
sub edi, 0x14edf
pop edi
lea edx, [ebp - 0x1774]
mov dword [ebp - 0xca0], edx
mov eax, dword [ebp - 0x508]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc9c], ecx
xor edx, edx
mov word [ebp - 0x214], dx
xor eax, eax
mov word [ebp - 0x110], ax
push ecx
call 0x40889a
add byte [eax + 0x36], cl
cmp eax, dword [eax + 0x49]
dec ecx
inc ebp
xor al, byte [ebx + eax*4 - 0x3c]
add al, 0x81
loope 0x40884d
jns 0x4088a3
add byte [ecx + 0x16242e9], al
add byte [ecx + 0x4054c1], al
add byte [ecx + 0x53], bl
sub ecx, 0x16242
add ecx, 0x4054
pop ecx
push ebx
push eax
add esp, 4
sub ebx, 0x12b34
pop ebx
mov ecx, dword [ebp - 0xc9c]
mov dx, word [ecx]
mov word [ebp - 0x1036], dx
mov eax, dword [ebp - 0xc9c]
add eax, 2
mov dword [ebp - 0xc9c], eax
mov cx, word [ebp - 0x1036]
mov word [ebp - 0x214], cx
mov edx, dword [ebp - 0xca0]
mov ax, word [edx]
mov word [ebp - 0x1038], ax
mov ecx, dword [ebp - 0xca0]
add ecx, 2
mov dword [ebp - 0xca0], ecx
mov dx, word [ebp - 0x1038]
mov word [ebp - 0x110], dx
push eax
and eax, 0x8387
xor eax, 0x839e
and eax, 0x1463d
call 0x408938
add byte [esi], dh
cmp ecx, dword [ebx + 0x4c]
inc edi
inc ebx
push eax
cmp al, 0x50
add esp, 4
pop eax
push ebx
push ecx
add esp, 4
add ebx, 0xea7b
pop ebx
movzx eax, word [ebp - 0x110]
test eax, eax
jne 0x40896b
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
sub ecx, edx
retf 0x8d89
adc al, 0xea
invalid
invalid
jmp 0x4089ce
movzx eax, word [ebp - 0x214]
movzx ecx, word [ebp - 0x110]
cmp eax, ecx
je 0x40888a
movzx edx, word [ebp - 0x214]
xor edx, 0x20
movzx eax, word [ebp - 0x110]
cmp edx, eax
je 0x40888a
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
cmp ecx, edx
jge 0x4089b8
mov dword [ebp - 0x15e8], 0xffffffff
jmp 0x4089c2
mov dword [ebp - 0x15e8], 1
mov eax, dword [ebp - 0x15e8]
mov dword [ebp - 0x15ec], eax
cmp dword [ebp - 0x15ec], 0
jne 0x408a17
push ebx
xor ebx, 0x7b9e
sub ebx, 0x801f
sub ebx, 0x7d88
sub ebx, 0x17fa5
pop ebx
push edx
push ebx
add esp, 4
sub edx, 0xe439
or edx, 0xe78f
and edx, 0x2231
pop edx
mov ecx, dword [ebp - 0x508]
mov dword [ebp - 0x750], ecx
jmp 0x408a7f
push eax
push edi
add esp, 4
and eax, 0x14dc0
or eax, 0x1556b
or eax, 0x2ec2
pop eax
push ecx
or ecx, 0x77a4
pop ecx
push esi
push edx
add esp, 4
or esi, 0x707d
add esi, 0x6854
pop esi
mov edx, dword [ebp - 0x508]
mov eax, dword [edx]
mov dword [ebp - 0x508], eax
mov ecx, dword [ebp - 0x508]
cmp ecx, dword [ebp - 0xca4]
je 0x408a75
mov edx, dword [ebp - 0x508]
cmp dword [edx + 0x30], 0
jne 0x40882b
mov dword [ebp - 0x750], 0
push eax
xor eax, 0x16c04
or eax, 0xbcee
pop eax
push ecx
jmp 0x408a94
add ecx, 0xd9af
call 0x408aa7
Function at 0x408a22
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edi
call 0x40883b
add byte [edi + 0x33], cl
xor al, 0x36
xor eax, 0x83464448
les eax, [eax + ebp*8]
or al, byte [eax]
add byte [eax], al
add byte [0x483f3632], dh
dec ecx
inc ebp
xor eax, 0x4c4833c
add esp, 4
add edi, 0xec6b
sub edi, 0x14edf
pop edi
lea edx, [ebp - 0x1774]
mov dword [ebp - 0xca0], edx
mov eax, dword [ebp - 0x508]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc9c], ecx
xor edx, edx
mov word [ebp - 0x214], dx
xor eax, eax
mov word [ebp - 0x110], ax
push ecx
call 0x40889a
add byte [eax + 0x36], cl
cmp eax, dword [eax + 0x49]
dec ecx
inc ebp
xor al, byte [ebx + eax*4 - 0x3c]
add al, 0x81
loope 0x40884d
jns 0x4088a3
add byte [ecx + 0x16242e9], al
add byte [ecx + 0x4054c1], al
add byte [ecx + 0x53], bl
sub ecx, 0x16242
add ecx, 0x4054
pop ecx
push ebx
push eax
add esp, 4
sub ebx, 0x12b34
pop ebx
mov ecx, dword [ebp - 0xc9c]
mov dx, word [ecx]
mov word [ebp - 0x1036], dx
mov eax, dword [ebp - 0xc9c]
add eax, 2
mov dword [ebp - 0xc9c], eax
mov cx, word [ebp - 0x1036]
mov word [ebp - 0x214], cx
mov edx, dword [ebp - 0xca0]
mov ax, word [edx]
mov word [ebp - 0x1038], ax
mov ecx, dword [ebp - 0xca0]
add ecx, 2
mov dword [ebp - 0xca0], ecx
mov dx, word [ebp - 0x1038]
mov word [ebp - 0x110], dx
push eax
and eax, 0x8387
xor eax, 0x839e
and eax, 0x1463d
call 0x408938
add byte [esi], dh
cmp ecx, dword [ebx + 0x4c]
inc edi
inc ebx
push eax
cmp al, 0x50
add esp, 4
pop eax
push ebx
push ecx
add esp, 4
add ebx, 0xea7b
pop ebx
movzx eax, word [ebp - 0x110]
test eax, eax
jne 0x40896b
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
sub ecx, edx
retf 0x8d89
adc al, 0xea
invalid
invalid
jmp 0x4089ce
movzx eax, word [ebp - 0x214]
movzx ecx, word [ebp - 0x110]
cmp eax, ecx
je 0x40888a
movzx edx, word [ebp - 0x214]
xor edx, 0x20
movzx eax, word [ebp - 0x110]
cmp edx, eax
je 0x40888a
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
cmp ecx, edx
jge 0x4089b8
mov dword [ebp - 0x15e8], 0xffffffff
jmp 0x4089c2
mov dword [ebp - 0x15e8], 1
mov eax, dword [ebp - 0x15e8]
mov dword [ebp - 0x15ec], eax
cmp dword [ebp - 0x15ec], 0
jne 0x408a17
push ebx
xor ebx, 0x7b9e
sub ebx, 0x801f
sub ebx, 0x7d88
sub ebx, 0x17fa5
pop ebx
push edx
push ebx
add esp, 4
sub edx, 0xe439
or edx, 0xe78f
and edx, 0x2231
pop edx
mov ecx, dword [ebp - 0x508]
mov dword [ebp - 0x750], ecx
jmp 0x408a7f
push eax
push edi
add esp, 4
and eax, 0x14dc0
or eax, 0x1556b
or eax, 0x2ec2
pop eax
push ecx
or ecx, 0x77a4
pop ecx
push esi
push edx
add esp, 4
or esi, 0x707d
add esi, 0x6854
pop esi
mov edx, dword [ebp - 0x508]
mov eax, dword [edx]
mov dword [ebp - 0x508], eax
mov ecx, dword [ebp - 0x508]
cmp ecx, dword [ebp - 0xca4]
je 0x408a75
mov edx, dword [ebp - 0x508]
cmp dword [edx + 0x30], 0
jne 0x40882b
mov dword [ebp - 0x750], 0
push eax
xor eax, 0x16c04
or eax, 0xbcee
pop eax
push ecx
jmp 0x408a94
add ecx, 0xd9af
call 0x408aa7
Function at 0x408a9f
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [edx], bh
dec edi
dec ebp
dec esp
xor ecx, dword ss:[edx - 0x7d]
les eax, [ecx + eax*4]
jmp 0x40f3da
mov dl, ah
push es
push es
push es
pop esp
xchg esp, edx
fnstcw word [ebx]
pop es
push es
xchg esp, ecx
cwde
and eax, dword [edi]
push es
xchg esp, edi
fisub dword [esi + 6]
push es
out dx, al
adc byte [esi], al
push es
push es
push es
push esi
inc edi
inc edi
push edx
cmp edi, dword [esi]
cmp byte [ebp + 0x3b], al
mov edx, ecx
or ah, byte [eax + ebx*2 + 0x59]
mov edx, ecx
or al, byte [edi + 0x63de5d0]
push es
pushal
xchg ecx, eax
mov eax, dword [edx]
add dword [0x7e8b8f05], eax
jmp 0x40f421
pop es
push es
pop edi
pop esp
pop ecx
mov edx, ecx
or dh, cl
or ecx, dword [edi + 0x45]
dec ebp
inc ebp
push ebp
int1
or dword [edx + 0x50], ecx
dec edi
xchg esp, ebp
inc edx
arpl word [esi], ax
push es
xchg esp, ebp
int3

Function at 0x408aa7
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [edx], bh
dec edi
dec ebp
dec esp
xor ecx, dword ss:[edx - 0x7d]
les eax, [ecx + eax*4]
jmp 0x40f3da
mov dl, ah
push es
push es
push es
pop esp
xchg esp, edx
fnstcw word [ebx]
pop es
push es
xchg esp, ecx
cwde
and eax, dword [edi]
push es
xchg esp, edi
fisub dword [esi + 6]
push es
out dx, al
adc byte [esi], al
push es
push es
push es
push esi
inc edi
inc edi
push edx
cmp edi, dword [esi]
cmp byte [ebp + 0x3b], al
mov edx, ecx
or ah, byte [eax + ebx*2 + 0x59]
mov edx, ecx
or al, byte [edi + 0x63de5d0]
push es
pushal
xchg ecx, eax
mov eax, dword [edx]
add dword [0x7e8b8f05], eax
jmp 0x40f421
pop es
push es
pop edi
pop esp
pop ecx
mov edx, ecx
or dh, cl
or ecx, dword [edi + 0x45]
dec ebp
inc ebp
push ebp
int1
or dword [edx + 0x50], ecx
dec edi
xchg esp, ebp
inc edx
arpl word [esi], ax
push es
xchg esp, ebp
int3

Function at 0x408ac9
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop esi
push edi
push ebx
add esp, 4
jmp 0x408ad9
sub edi, 0xe71f
pop edi
push esi
push edx
add esp, 4
xor esi, 0xcf72
pop esi
mov dword [ebp - 0x79c], 0
jmp 0x409622

Function at 0x408bf1
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x320]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1964], eax
mov ecx, dword [ebp - 0x754]
mov edx, dword [ebp - 0x320]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1968], edx
mov eax, dword [ebp - 0x754]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x196c], ecx
mov dword [ebp - 0x758], 0
jmp 0x408c45
Function at 0x408d31
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x758]
add edx, 1
mov dword [ebp - 0x758], edx
mov eax, dword [ebp - 0x754]
mov ecx, dword [ebp - 0x758]
cmp ecx, dword [eax + 0x18]
jae 0x408e51
mov edx, dword [ebp - 0x758]
mov eax, dword [ebp - 0x1964]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x75c], ecx
mov edx, dword [ebp - 0x758]
mov eax, dword [ebp - 0x1968]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x196c]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1970], eax
mov dword [ebp - 0x198], 0
jmp 0x408cb5
mov ecx, dword [ebp - 0x198]
add ecx, 1
mov dword [ebp - 0x198], ecx
mov edx, dword [ebp - 0x75c]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
test eax, eax
je 0x408d67
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x894]
test edx, edx
je 0x408d67
push edi
push ecx
add esp, 4
sub edi, 0x1526a
xor edi, 0x576a
xor edi, 0x45f5
pop edi
push edx
xor edx, 0x2637
pop edx
push edx
push ecx
add esp, 4
and edx, 0x10a0c
or edx, 0x32a9
pop edx
mov eax, dword [ebp - 0x75c]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x894]
cmp ecx, eax
je 0x408d59
mov ecx, dword [ebp - 0x75c]
add ecx, dword [ebp - 0x198]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x198]
movsx ecx, byte [ebp + eax - 0x894]
cmp edx, ecx
jne 0x408d60
jmp 0x408ca6
jmp 0x408d67
push eax
or eax, 0x1332c
add eax, 0xcb00
pop eax
push ebx
push ecx
add esp, 4
and ebx, 0x5650
pop ebx
push edx
push esi
add esp, 4
xor edx, 0x14b78
sub edx, 0x1e3a
or edx, 0xfee7
pop edx
mov edx, dword [ebp - 0x75c]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x198]
invalid
mov esi, 0xf76c0d94

Function at 0x408dd7
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
and ecx, 0x61d5
pop ecx
push eax
and eax, 0x2803
pop eax
push ebx
push esi
add esp, 4
and ebx, 0x12248
xor ebx, 0x12f3c
pop ebx
mov eax, dword [ebp - 0x75c]
test dword [eax + edi*8 - 0x7afc0001], esp
invalid
invalid
invalid
invalid

Function at 0x408e04
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
movsx ecx, byte [eax]
or ecx, 0x20
invalid
xchg ebp, eax
invalid
invalid
invalid
Function at 0x408f4d
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add edi, 0xd12e
jmp 0x408611
or edi, 0x13ff4
jmp 0x40861e
pop edi
cmp dword [ebp - 0x31c], 0
jne 0x408f38
mov edx, 0x6b
mov word [ebp - 0x1774], dx
mov eax, 0x65
mov word [ebp - 0x1772], ax
mov ecx, 0x72
mov word [ebp - 0x1770], cx
mov edx, 0x6e
mov word [ebp - 0x176e], dx
mov eax, 0x65
mov word [ebp - 0x176c], ax
mov ecx, 0x6c
mov word [ebp - 0x176a], cx
mov edx, 0x33
mov word [ebp - 0x1768], dx
mov eax, 0x32
mov word [ebp - 0x1766], ax
mov ecx, 0x2e
mov word [ebp - 0x1764], cx
mov edx, 0x64
mov word [ebp - 0x1762], dx
xchg ebp, eax
sahf
call 0x6cf986a5
add byte [eax], al
add byte [esi - 0x77], ah
test dword [eax - 0x46000018], esp
insb byte es:[edi], dx
add byte [eax], al
add byte [esi - 0x77], ah
lea esp, [edx + 0x33ffffe8]
shl byte [esi - 0x77], cl
xchg ebp, eax
movsb byte es:[edi], byte [esi]
call 0x509886c6
add esp, 4
xor edi, 0x15b8b
pop edi
push esi
push eax
add esp, 4
xor esi, 0x8505
pop esi
push esi
push edi
add esp, 4
jmp 0x4086e8
xor esi, 0xe349
pop esi
push ebx
or ebx, 0x15e6f
pop ebx
mov byte [ebp - 0x894], 0x4c
mov byte [ebp - 0x893], 0x6f
mov byte [ebp - 0x892], 0x61
mov byte [ebp - 0x891], 0x64
mov byte [ebp - 0x890], 0x4c
mov byte [ebp - 0x88f], 0x69
mov byte [ebp - 0x88e], 0x62
mov byte [ebp - 0x88d], 0x72
mov byte [ebp - 0x88c], 0x61
mov byte [ebp - 0x88b], 0x72
mov byte [ebp - 0x88a], 0x79
mov byte [ebp - 0x889], 0x57
mov byte [ebp - 0x888], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x195c], eax
mov ecx, dword [ebp - 0x195c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1960], edx
mov eax, dword [ebp - 0x1960]
mov dword [ebp - 0x15e4], eax
push eax
push ebx
add esp, 4
add eax, 0x1382a
call 0x408793
add byte [edi], bh
cmp byte [edi + 0x37], cl
xor eax, dword [esi + 0x4a]
dec ebx
cmp byte [ebx - 0x3f7efb3c], al
dec ecx
add byte [eax], al
add byte [eax + 0x50], bl
sub eax, 0xe151
and eax, 0x10f10
pop eax
cmp dword [ebp - 0x15e4], 0
jne 0x4087c3
mov dword [ebp - 0x750], 0
jmp 0x408a7f
mov ecx, dword [ebp - 0x15e4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xca4], eax
push ecx
push esi
add esp, 4
jmp 0x4087e1
or ecx, 0x16f7e
pop ecx
push esi
push edx
add esp, 4
jmp 0x4087f4
or esi, 0x17890
pop esi
push eax
push ecx
add esp, 4
or eax, 0xd595
pop eax
cmp dword [ebp - 0xca4], 0
jne 0x40881f
mov dword [ebp - 0x750], 0
jmp 0x408a7f
mov ecx, dword [ebp - 0xca4]
mov dword [ebp - 0x508], ecx
push esi
and esi, 0x8be9
call 0x408f4d
add byte [edi], dh
cmp byte [ecx + edi], bh
dec esi
xor eax, 0xc483443c
add al, 0x81
into
mov ah, 0x39

Function at 0x408f54
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add dword [eax], eax
call 0x408f66
add byte [ecx + 0x43], al
dec ecx
cmp al, 0x47
cmp eax, 0x464e424e
add esp, 4
pop esi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x197c], eax
mov ecx, dword [ebp - 0x197c]
Function at 0x408f66
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add dword [eax], eax
call 0x408f66
add byte [ecx + 0x43], al
dec ecx
cmp al, 0x47
cmp eax, 0x464e424e
add esp, 4
pop esi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x197c], eax
mov ecx, dword [ebp - 0x197c]

Function at 0x408f7c
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1980], edx
mov eax, dword [ebp - 0x1980]
mov dword [ebp - 0x15fc], eax
push ebx
push edx
add esp, 4
add ebx, 0x147a7
add ebx, 0x16a9
add byte [ebx + 0x57], bl
call 0x408fb2
add byte [ecx], bh

Function at 0x408fa1
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1980], edx
mov eax, dword [ebp - 0x1980]
mov dword [ebp - 0x15fc], eax
push ebx
push edx
add esp, 4
add ebx, 0x147a7
add ebx, 0x16a9
add byte [ebx + 0x57], bl
call 0x408fb2
add byte [ecx], bh

Function at 0x408fb2
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
aas
aas
inc eax
inc edx
add esp, 4
les eax, [ebx + ebp*8]
invalid
and edi, 0x77b4
pop edi

Function at 0x408fc3
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
cmp dword [ebp - 0x15fc], 0
jne 0x408fdb
mov dword [ebp - 0x31c], 0
jmp 0x409282
mov ecx, dword [ebp - 0x15fc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcb4], eax
push esi
or esi, 0xc647
pop esi
push eax
push edi
add esp, 4
sub eax, 0x13af1
pop eax
push edi
push edi
add esp, 4
add edi, 0x6cac
sub edi, 0x145f7
inc ebp
add dword [eax], eax
or edi, 0x15024
or edi, 0xabe9
pop edi
cmp dword [ebp - 0xcb4], 0
jne 0x409037
mov dword [ebp - 0x31c], 0
jmp 0x409282
mov ecx, dword [ebp - 0xcb4]
mov dword [ebp - 0x50c], ecx
push esi
xor esi, 0x46f5
pop esi
push edi
push edi
add esp, 4
sub edi, 0x4bb5
call 0x409063
add byte [ebx + eax*2 + 0x3a], cl
inc eax
dec esi
dec edi
inc ecx
add esp, 4
pop edi
push esi
sub esi, 0x1006b
add esi, 0x10c6d
pop esi
lea edx, [ebp - 0x1738]
mov dword [ebp - 0xcb0], edx
mov eax, dword [ebp - 0x50c]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcac], ecx
xor edx, edx
mov word [ebp - 0x218], dx
xor eax, eax