joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4076e1
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x4fc]
add edx, 1
mov dword [ebp - 0x4fc], edx
add esp, 4
pop ebx
push edx
jmp 0x407632
xor edx, 0x5a30
and edx, 0x160b8
xor edx, 0x61ed
pop edx
mov edx, dword [ebp - 0x15c4]
mov dword [ebp - 0xa60], edx
mov dword [ebp - 0xc84], 0
mov eax, dword [ebp - 0x4fc]
cmp eax, dword [ebp - 0x15c4]
jne 0x4076ac
push ebx
push edi
add esp, 4
xor ebx, 0x131b2
sub ebx, 0x2ede
pop ebx
push esi
jmp 0x407685
or esi, 0x9392
call 0x407697
add byte [edx], dh
dec esi
push eax
inc edx
add esp, 4
pop esi
mov ecx, dword [ebp - 0xc84]
mov dword [ebp - 0x15cc], ecx
jmp 0x4077dd
cmp dword [ebp - 0xc80], 0
jle 0x4077d1
push edx
add edx, 0x366b
call 0x4076ce
add byte [edi], dh
aas
dec edi
cmp byte [eax], bh
cmp byte [esi + 0x47], al
add esp, 4
call 0x4076e1
add byte [eax + 0x46], dl
xor eax, dword [eax + 0x48]
dec ebx
xor ecx, dword [edi + 0x34]
add esp, 4
xor edx, 0x1f7c
pop edx
mov edx, dword [ebp - 0xac4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa60]
movzx edx, byte [ecx]
cmp eax, edx
je 0x40776d
push ecx
xor ecx, 0xb3cc
sub ecx, 0x6d0e
pop ecx
push ecx
push esi
add esp, 4
add ecx, 0x4582
add ecx, 0x9ab4
sub ecx, 0x16407
add dword [eax], eax
pop ecx
push eax
push eax
add esp, 4
or eax, 0xbdb0
pop eax
mov eax, dword [ebp - 0xac4]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x407755
mov dword [ebp - 0x15c8], 1
jmp 0x40775f
mov dword [ebp - 0x15c8], 0xffffffff
mov ecx, dword [ebp - 0x15c8]
mov dword [ebp - 0xc84], ecx
jmp 0x4077d1
push edx
add edx, 0x103db
pop edx
push eax
jmp 0x40777f
pop eax
push edx
sub edx, 0xcaa3
call 0x407795
add byte [esi], dh
inc edi
inc ebx
aas
dec edi
dec eax
dec edi
add esp, 4
sub edx, 0x15e31
pop edx
mov edx, dword [ebp - 0xc80]
sub edx, 1
mov dword [ebp - 0xc80], edx
mov eax, dword [ebp - 0xac4]
add eax, 1
mov dword [ebp - 0xac4], eax
mov ecx, dword [ebp - 0xa60]
add ecx, 1
mov dword [ebp - 0xa60], ecx
jmp 0x4076ac
mov edx, dword [ebp - 0xc84]
mov dword [ebp - 0x15cc], edx
cmp dword [ebp - 0x15cc], 0
jne 0x407826
push esi
push ebx
add esp, 4
xor esi, 0x14352
or esi, 0x169f3
sub esi, 0x7906
pop esi
push edi
sub edi, 0x2d53
or edi, 0xc214
and edi, 0x9be9
xor edi, 0x10253
pop edi
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x3e8], eax
jmp 0x407867
jmp 0x407574
Function at 0x407795
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x4fc]
add edx, 1
mov dword [ebp - 0x4fc], edx
add esp, 4
pop ebx
push edx
jmp 0x407632
xor edx, 0x5a30
and edx, 0x160b8
xor edx, 0x61ed
pop edx
mov edx, dword [ebp - 0x15c4]
mov dword [ebp - 0xa60], edx
mov dword [ebp - 0xc84], 0
mov eax, dword [ebp - 0x4fc]
cmp eax, dword [ebp - 0x15c4]
jne 0x4076ac
push ebx
push edi
add esp, 4
xor ebx, 0x131b2
sub ebx, 0x2ede
pop ebx
push esi
jmp 0x407685
or esi, 0x9392
call 0x407697
add byte [edx], dh
dec esi
push eax
inc edx
add esp, 4
pop esi
mov ecx, dword [ebp - 0xc84]
mov dword [ebp - 0x15cc], ecx
jmp 0x4077dd
cmp dword [ebp - 0xc80], 0
jle 0x4077d1
push edx
add edx, 0x366b
call 0x4076ce
add byte [edi], dh
aas
dec edi
cmp byte [eax], bh
cmp byte [esi + 0x47], al
add esp, 4
call 0x4076e1
add byte [eax + 0x46], dl
xor eax, dword [eax + 0x48]
dec ebx
xor ecx, dword [edi + 0x34]
add esp, 4
xor edx, 0x1f7c
pop edx
mov edx, dword [ebp - 0xac4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa60]
movzx edx, byte [ecx]
cmp eax, edx
je 0x40776d
push ecx
xor ecx, 0xb3cc
sub ecx, 0x6d0e
pop ecx
push ecx
push esi
add esp, 4
add ecx, 0x4582
add ecx, 0x9ab4
sub ecx, 0x16407
add dword [eax], eax
pop ecx
push eax
push eax
add esp, 4
or eax, 0xbdb0
pop eax
mov eax, dword [ebp - 0xac4]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x407755
mov dword [ebp - 0x15c8], 1
jmp 0x40775f
mov dword [ebp - 0x15c8], 0xffffffff
mov ecx, dword [ebp - 0x15c8]
mov dword [ebp - 0xc84], ecx
jmp 0x4077d1
push edx
add edx, 0x103db
pop edx
push eax
jmp 0x40777f
pop eax
push edx
sub edx, 0xcaa3
call 0x407795
add byte [esi], dh
inc edi
inc ebx
aas
dec edi
dec eax
dec edi
add esp, 4
sub edx, 0x15e31
pop edx
mov edx, dword [ebp - 0xc80]
sub edx, 1
mov dword [ebp - 0xc80], edx
mov eax, dword [ebp - 0xac4]
add eax, 1
mov dword [ebp - 0xac4], eax
mov ecx, dword [ebp - 0xa60]
add ecx, 1
mov dword [ebp - 0xa60], ecx
jmp 0x4076ac
mov edx, dword [ebp - 0xc84]
mov dword [ebp - 0x15cc], edx
cmp dword [ebp - 0x15cc], 0
jne 0x407826
push esi
push ebx
add esp, 4
xor esi, 0x14352
or esi, 0x169f3
sub esi, 0x7906
pop esi
push edi
sub edi, 0x2d53
or edi, 0xc214
and edi, 0x9be9
xor edi, 0x10253
pop edi
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x3e8], eax
jmp 0x407867
jmp 0x407574
Function at 0x407859
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
sub edx, 0x10211
and edx, 0x77d8
pop edx
push esi
sub esi, 0x7cb3
add esi, 0x88b9
pop esi
jmp 0x40782b
push esi
xor esi, 0xf7e6
sub esi, 0x1606d
and esi, 0xfd4a
and esi, 0x11d69
pop esi
push ebx
push ecx
add esp, 4
call 0x407859
add byte [ebp + 0x3d], al
cmp byte [esi + 0x3d], cl
cmp eax, 0x3c3f4832
add esp, 4
pop ebx
mov dword [ebp - 0x3e8], 0
push ebx
or ebx, 0xf373
pop ebx
push edi
xor edi, 0x6477
call 0x407882
add byte [esi], dh
cmp al, 0x49
push eax
dec edi
inc edx
add esp, 4
call 0x407895
add byte [ecx], bh
dec edi
xor eax, 0x3a474f4f
dec ebx
aas
add esp, 4
pop edi
push ebx
push ebx
add esp, 4
and ebx, 0xcc91
add ebx, 0x1212f
sub ebx, 0x118ac
pop ebx
push edi
add edi, 0x13021
and dword [eax], esi
add dword [eax], eax
xor edi, 0x11551
xor edi, 0x141b
xor edi, 0x2a35
pop edi
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbe4]
mov dword [ebp - 0x15d0], eax
push ecx
sub ecx, 0x42d0
jmp 0x4078ef
sub ecx, 0x8cab
pop ecx
push ebx
push edi
add esp, 4
sub ebx, 0x57b6
call 0x40790e
add byte [0x35384f47], bh
cmp dword [edi - 0x7d], eax
les eax, [ebx + ebx*2]
mov dword [ebp - 0x20f4], 0xffffffff
push ecx
push eax
add esp, 4
jmp 0x40792a
add ecx, 0xbf83
pop ecx
push ecx
push esi
add esp, 4
jmp 0x40793e
call 0x40794a
add byte [esi + 0x49], cl
dec eax
dec esi
cmp al, 0x83
les eax, [ecx + ebx*2]
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp - 0x500], ecx
jmp 0x40796b

Function at 0x407882
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
sub edx, 0x10211
and edx, 0x77d8
pop edx
push esi
sub esi, 0x7cb3
add esi, 0x88b9
pop esi
jmp 0x40782b
push esi
xor esi, 0xf7e6
sub esi, 0x1606d
and esi, 0xfd4a
and esi, 0x11d69
pop esi
push ebx
push ecx
add esp, 4
call 0x407859
add byte [ebp + 0x3d], al
cmp byte [esi + 0x3d], cl
cmp eax, 0x3c3f4832
add esp, 4
pop ebx
mov dword [ebp - 0x3e8], 0
push ebx
or ebx, 0xf373
pop ebx
push edi
xor edi, 0x6477
call 0x407882
add byte [esi], dh
cmp al, 0x49
push eax
dec edi
inc edx
add esp, 4
call 0x407895
add byte [ecx], bh
dec edi
xor eax, 0x3a474f4f
dec ebx
aas
add esp, 4
pop edi
push ebx
push ebx
add esp, 4
and ebx, 0xcc91
add ebx, 0x1212f
sub ebx, 0x118ac
pop ebx
push edi
add edi, 0x13021
and dword [eax], esi
add dword [eax], eax
xor edi, 0x11551
xor edi, 0x141b
xor edi, 0x2a35
pop edi
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbe4]
mov dword [ebp - 0x15d0], eax
push ecx
sub ecx, 0x42d0
jmp 0x4078ef
sub ecx, 0x8cab
pop ecx
push ebx
push edi
add esp, 4
sub ebx, 0x57b6
call 0x40790e
add byte [0x35384f47], bh
cmp dword [edi - 0x7d], eax
les eax, [ebx + ebx*2]
mov dword [ebp - 0x20f4], 0xffffffff
push ecx
push eax
add esp, 4
jmp 0x40792a
add ecx, 0xbf83
pop ecx
push ecx
push esi
add esp, 4
jmp 0x40793e
call 0x40794a
add byte [esi + 0x49], cl
dec eax
dec esi
cmp al, 0x83
les eax, [ecx + ebx*2]
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp - 0x500], ecx
jmp 0x40796b
Function at 0x407895
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
sub edx, 0x10211
and edx, 0x77d8
pop edx
push esi
sub esi, 0x7cb3
add esi, 0x88b9
pop esi
jmp 0x40782b
push esi
xor esi, 0xf7e6
sub esi, 0x1606d
and esi, 0xfd4a
and esi, 0x11d69
pop esi
push ebx
push ecx
add esp, 4
call 0x407859
add byte [ebp + 0x3d], al
cmp byte [esi + 0x3d], cl
cmp eax, 0x3c3f4832
add esp, 4
pop ebx
mov dword [ebp - 0x3e8], 0
push ebx
or ebx, 0xf373
pop ebx
push edi
xor edi, 0x6477
call 0x407882
add byte [esi], dh
cmp al, 0x49
push eax
dec edi
inc edx
add esp, 4
call 0x407895
add byte [ecx], bh
dec edi
xor eax, 0x3a474f4f
dec ebx
aas
add esp, 4
pop edi
push ebx
push ebx
add esp, 4
and ebx, 0xcc91
add ebx, 0x1212f
sub ebx, 0x118ac
pop ebx
push edi
add edi, 0x13021
and dword [eax], esi
add dword [eax], eax
xor edi, 0x11551
xor edi, 0x141b
xor edi, 0x2a35
pop edi
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbe4]
mov dword [ebp - 0x15d0], eax
push ecx
sub ecx, 0x42d0
jmp 0x4078ef
sub ecx, 0x8cab
pop ecx
push ebx
push edi
add esp, 4
sub ebx, 0x57b6
call 0x40790e
add byte [0x35384f47], bh
cmp dword [edi - 0x7d], eax
les eax, [ebx + ebx*2]
mov dword [ebp - 0x20f4], 0xffffffff
push ecx
push eax
add esp, 4
jmp 0x40792a
add ecx, 0xbf83
pop ecx
push ecx
push esi
add esp, 4
jmp 0x40793e
call 0x40794a
add byte [esi + 0x49], cl
dec eax
dec esi
cmp al, 0x83
les eax, [ecx + ebx*2]
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp - 0x500], ecx
jmp 0x40796b

Function at 0x40790e
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
sub edx, 0x10211
and edx, 0x77d8
pop edx
push esi
sub esi, 0x7cb3
add esi, 0x88b9
pop esi
jmp 0x40782b
push esi
xor esi, 0xf7e6
sub esi, 0x1606d
and esi, 0xfd4a
and esi, 0x11d69
pop esi
push ebx
push ecx
add esp, 4
call 0x407859
add byte [ebp + 0x3d], al
cmp byte [esi + 0x3d], cl
cmp eax, 0x3c3f4832
add esp, 4
pop ebx
mov dword [ebp - 0x3e8], 0
push ebx
or ebx, 0xf373
pop ebx
push edi
xor edi, 0x6477
call 0x407882
add byte [esi], dh
cmp al, 0x49
push eax
dec edi
inc edx
add esp, 4
call 0x407895
add byte [ecx], bh
dec edi
xor eax, 0x3a474f4f
dec ebx
aas
add esp, 4
pop edi
push ebx
push ebx
add esp, 4
and ebx, 0xcc91
add ebx, 0x1212f
sub ebx, 0x118ac
pop ebx
push edi
add edi, 0x13021
and dword [eax], esi
add dword [eax], eax
xor edi, 0x11551
xor edi, 0x141b
xor edi, 0x2a35
pop edi
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbe4]
mov dword [ebp - 0x15d0], eax
push ecx
sub ecx, 0x42d0
jmp 0x4078ef
sub ecx, 0x8cab
pop ecx
push ebx
push edi
add esp, 4
sub ebx, 0x57b6
call 0x40790e
add byte [0x35384f47], bh
cmp dword [edi - 0x7d], eax
les eax, [ebx + ebx*2]
mov dword [ebp - 0x20f4], 0xffffffff
push ecx
push eax
add esp, 4
jmp 0x40792a
add ecx, 0xbf83
pop ecx
push ecx
push esi
add esp, 4
jmp 0x40793e
call 0x40794a
add byte [esi + 0x49], cl
dec eax
dec esi
cmp al, 0x83
les eax, [ecx + ebx*2]
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp - 0x500], ecx
jmp 0x40796b
Function at 0x40794a
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
sub edx, 0x10211
and edx, 0x77d8
pop edx
push esi
sub esi, 0x7cb3
add esi, 0x88b9
pop esi
jmp 0x40782b
push esi
xor esi, 0xf7e6
sub esi, 0x1606d
and esi, 0xfd4a
and esi, 0x11d69
pop esi
push ebx
push ecx
add esp, 4
call 0x407859
add byte [ebp + 0x3d], al
cmp byte [esi + 0x3d], cl
cmp eax, 0x3c3f4832
add esp, 4
pop ebx
mov dword [ebp - 0x3e8], 0
push ebx
or ebx, 0xf373
pop ebx
push edi
xor edi, 0x6477
call 0x407882
add byte [esi], dh
cmp al, 0x49
push eax
dec edi
inc edx
add esp, 4
call 0x407895
add byte [ecx], bh
dec edi
xor eax, 0x3a474f4f
dec ebx
aas
add esp, 4
pop edi
push ebx
push ebx
add esp, 4
and ebx, 0xcc91
add ebx, 0x1212f
sub ebx, 0x118ac
pop ebx
push edi
add edi, 0x13021
and dword [eax], esi
add dword [eax], eax
xor edi, 0x11551
xor edi, 0x141b
xor edi, 0x2a35
pop edi
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbe4]
mov dword [ebp - 0x15d0], eax
push ecx
sub ecx, 0x42d0
jmp 0x4078ef
sub ecx, 0x8cab
pop ecx
push ebx
push edi
add esp, 4
sub ebx, 0x57b6
call 0x40790e
add byte [0x35384f47], bh
cmp dword [edi - 0x7d], eax
les eax, [ebx + ebx*2]
mov dword [ebp - 0x20f4], 0xffffffff
push ecx
push eax
add esp, 4
jmp 0x40792a
add ecx, 0xbf83
pop ecx
push ecx
push esi
add esp, 4
jmp 0x40793e
call 0x40794a
add byte [esi + 0x49], cl
dec eax
dec esi
cmp al, 0x83
les eax, [ecx + ebx*2]
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp - 0x500], ecx
jmp 0x40796b

Function at 0x4079f4
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
dec dword [ecx - 0xabf73]
call dword [esi + 0x52]

Function at 0x407a18
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x500]
add edx, 1
mov dword [ebp - 0x500], edx
push ecx
push edx
add esp, 4
xor ecx, 0x9027
sub ecx, 0x179f7
or ecx, 0x123a5
pop ecx
push edi
sub edi, 0x4e63
and edi, 0x174a3
xor edi, 0xf93e
or edi, 0xee75
pop edi
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x3f0]
cmp eax, 0xffffffff
jb 0x4079e5
push edi
push edi
add esp, 4
or edi, 0xfa4d
add edi, 0x53c2
pop edi
push eax
sub eax, 0x1683
xor eax, 0xb26e
pop eax
push ebx
push edx
add esp, 4
jmp 0x4079d9
and ebx, 0x173cf
pop ebx
jmp 0x407c13
mov dword [ebp - 0xc88], 7
mov ecx, dword [ebp - 0x500]
dec dword [ecx - 0xabf73]
call dword [esi + 0x52]
add esp, 4
or esi, 0x15f11
pop esi
push eax
push edi
add esp, 4
call 0x407a1c
add byte [eax + 0x3d], al
aaa
push eax
cmp al, 0x4f
inc ebp
dec edx
dec esi
inc eax
add esp, 4
jmp 0x407a25
jmp 0x407a2c
pop eax
mov edx, dword [ebp - 0x15d0]
mov dword [ebp - 0xabc], edx
invalid
invalid
invalid
Function at 0x407a1c
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x500]
add edx, 1
mov dword [ebp - 0x500], edx
push ecx
push edx
add esp, 4
xor ecx, 0x9027
sub ecx, 0x179f7
or ecx, 0x123a5
pop ecx
push edi
sub edi, 0x4e63
and edi, 0x174a3
xor edi, 0xf93e
or edi, 0xee75
pop edi
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x3f0]
cmp eax, 0xffffffff
jb 0x4079e5
push edi
push edi
add esp, 4
or edi, 0xfa4d
add edi, 0x53c2
pop edi
push eax
sub eax, 0x1683
xor eax, 0xb26e
pop eax
push ebx
push edx
add esp, 4
jmp 0x4079d9
and ebx, 0x173cf
pop ebx
jmp 0x407c13
mov dword [ebp - 0xc88], 7
mov ecx, dword [ebp - 0x500]
dec dword [ecx - 0xabf73]
call dword [esi + 0x52]
add esp, 4
or esi, 0x15f11
pop esi
push eax
push edi
add esp, 4
call 0x407a1c
add byte [eax + 0x3d], al
aaa
push eax
cmp al, 0x4f
inc ebp
dec edx
dec esi
inc eax
add esp, 4
jmp 0x407a25
jmp 0x407a2c
pop eax
mov edx, dword [ebp - 0x15d0]
mov dword [ebp - 0xabc], edx
invalid
invalid
invalid

Function at 0x407ab4
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
in al, dx
xor al, byte [eax]
add byte [ecx + 0xca3bc0], al
add byte [ecx + 0xf7f6e8], al
add byte [eax + 0x56], bl
or esi, 0x3b58
sub esi, 0x1710f
pop esi
mov edx, dword [ebp - 0xac0]
dec dword [edi]
mov dh, 2
mov ecx, dword [ebp - 0xabc]
movzx edx, byte [ecx]
cmp eax, edx
je 0x407b55
push edi
xor edi, 0x3f9a
jmp 0x407af9
jmp 0x407aff
pop edi
push eax
push eax
add esp, 4
jmp 0x407b0e
sub eax, 0x813f
or eax, 0x1127
pop eax
mov eax, dword [ebp - 0xac0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xabc]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x407b3d
mov dword [ebp - 0x15a0], 1
jmp 0x407b47
mov dword [ebp - 0x15a0], 0xffffffff
mov ecx, dword [ebp - 0x15a0]
mov dword [ebp - 0xc8c], ecx
jmp 0x407bb9
push edx
call 0x407b66
add byte [0x3e3b3946], dh
inc ecx
inc ecx
aaa
xor eax, dword [ebx - 0x1d7efb3c]
invalid
mov edx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d4], edx
cmp dword [ebp - 0x15d4], 0
jne 0x407c0e
push ebx
invalid

Function at 0x407ad8
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
in al, dx
xor al, byte [eax]
add byte [ecx + 0xca3bc0], al
add byte [ecx + 0xf7f6e8], al
add byte [eax + 0x56], bl
or esi, 0x3b58
sub esi, 0x1710f
pop esi
mov edx, dword [ebp - 0xac0]
dec dword [edi]
mov dh, 2
mov ecx, dword [ebp - 0xabc]
movzx edx, byte [ecx]
cmp eax, edx
je 0x407b55
push edi
xor edi, 0x3f9a
jmp 0x407af9
jmp 0x407aff
pop edi
push eax
push eax
add esp, 4
jmp 0x407b0e
sub eax, 0x813f
or eax, 0x1127
pop eax
mov eax, dword [ebp - 0xac0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xabc]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x407b3d
mov dword [ebp - 0x15a0], 1
jmp 0x407b47
mov dword [ebp - 0x15a0], 0xffffffff
mov ecx, dword [ebp - 0x15a0]
mov dword [ebp - 0xc8c], ecx
jmp 0x407bb9
push edx
call 0x407b66
add byte [0x3e3b3946], dh
inc ecx
inc ecx
aaa
xor eax, dword [ebx - 0x1d7efb3c]
invalid
mov edx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d4], edx
cmp dword [ebp - 0x15d4], 0
jne 0x407c0e
push ebx
invalid
Function at 0x407b66
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
in al, dx
xor al, byte [eax]
add byte [ecx + 0xca3bc0], al
add byte [ecx + 0xf7f6e8], al
add byte [eax + 0x56], bl
or esi, 0x3b58
sub esi, 0x1710f
pop esi
mov edx, dword [ebp - 0xac0]
dec dword [edi]
mov dh, 2
mov ecx, dword [ebp - 0xabc]
movzx edx, byte [ecx]
cmp eax, edx
je 0x407b55
push edi
xor edi, 0x3f9a
jmp 0x407af9
jmp 0x407aff
pop edi
push eax
push eax
add esp, 4
jmp 0x407b0e
sub eax, 0x813f
or eax, 0x1127
pop eax
mov eax, dword [ebp - 0xac0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xabc]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x407b3d
mov dword [ebp - 0x15a0], 1
jmp 0x407b47
mov dword [ebp - 0x15a0], 0xffffffff
mov ecx, dword [ebp - 0x15a0]
mov dword [ebp - 0xc8c], ecx
jmp 0x407bb9
push edx
call 0x407b66
add byte [0x3e3b3946], dh
inc ecx
inc ecx
aaa
xor eax, dword [ebx - 0x1d7efb3c]
invalid
mov edx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d4], edx
cmp dword [ebp - 0x15d4], 0
jne 0x407c0e
push ebx
invalid

Function at 0x407e1c
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
call fcn.00413e77
pop eax
out 0xff, al
dec dword [ebx - 0x19a76b]
dec dword [ecx - 0x15d76b]
call dword [edx - 0x7f]
loop 0x407dda
cmp eax, 0xbe80001
add byte [eax], al
add byte [eax], al
dec esi
xor al, 0x38
aaa

Function at 0x407e5a
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edx
cmp dword [ebp - 0x15d8], 0
jne 0x407e76
invalid
test esp, esp
cld
invalid
inc dword [eax]
add byte [eax], al
Function at 0x408080
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push esi
push edx
add esp, 4
sub esi, 0x277f
and esi, 0x6409
add esi, 0xabdd
sub esi, 0x1912
pop esi
push eax
or eax, 0x149ef
add eax, 0x12154
and eax, 0x4728
pop eax
lea ecx, [ebp - 0x1738]
mov dword [ebp - 0xc94], ecx
mov edx, dword [ebp - 0x504]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc90], eax
xor ecx, ecx
mov word [ebp - 0x210], cx
xor edx, edx
mov word [ebp - 0x10c], dx
push esi
push edi
add esp, 4
or esi, 0x2819
xor esi, 0x1410f
or esi, 0xf565
pop esi
push eax
push eax
add esp, 4
and eax, 0x14524
pop eax
push edx
or edx, 0x11a0c
or edx, 0x6838
pop edx
mov eax, dword [ebp - 0xc90]
jmp dword [esi - 0x75]
or byte [esi - 0x77], ah
invalid
into
out dx, eax
invalid
dec dword [ebx - 0xc8f6b]
inc dword [ebx - 0x6a76fd3e]
jo 0x407f7f
invalid
jmp dword [esi - 0x75]
test esi, ecx
out dx, eax
invalid
jmp dword [esi - 0x77]
test eax, esi
std
invalid
dec dword [ebx - 0xc9373]
jmp dword [esi - 0x75]
adc dword [esi - 0x77], esp
xchg ebp, eax
int3
out dx, eax
invalid
dec dword [ebx - 0xc937b]
inc dword [ebx - 0x7a76fd40]
insb byte es:[edi], dx
invalid
invalid
jmp dword [esi - 0x75]
invalid
int3
out dx, eax
invalid
jmp dword [esi - 0x77]
invalid
hlt
invalid
invalid
call dword [esi + 0x50]
add esp, 4
or esi, 0x105ee
or esi, 0xd8c0
add esi, 0xf075
and esi, 0x1606e
pop esi
push eax
push eax
add esp, 4
add eax, 0x1724
pop eax
push edx
or edx, 0x15145
pop edx
movzx edx, word [ebp - 0x10c]
test edx, edx
jne 0x40801e
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
hlt
invalid
invalid
jmp [ebx]
ror dword [ecx - 0x15df7b], 0xff
jmp 0x408081
movzx edx, word [ebp - 0x210]
movzx eax, word [ebp - 0x10c]
cmp edx, eax
je 0x407f3d
movzx ecx, word [ebp - 0x210]
xor ecx, 0x20
movzx edx, word [ebp - 0x10c]
cmp ecx, edx
je 0x407f3d
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
cmp eax, ecx
jge 0x40806b
mov dword [ebp - 0x15dc], 0xffffffff
jmp 0x408075
mov dword [ebp - 0x15dc], 1
mov edx, dword [ebp - 0x15dc]
mov dword [ebp - 0x15e0], edx
invalid
cmp dword [ebp - 0x15e0], 0
jne 0x4080ca
push edi
push ebx
add esp, 4
add edi, 0x12e3d
sub edi, 0x6ec6
add edi, 0x13a19
xor edi, 0x16777
pop edi
push eax
xor eax, 0x5a3e
sub eax, 0x972a
sub eax, 0x59b2
pop eax
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x31c], eax
jmp 0x408132
push ecx
sub ecx, 0x414a
add byte [ecx + 0xeff6e1], al
add byte [ecx + 0x56], bl
sub esi, 0x9882
xor esi, 0xce2e
sub esi, 0x19aa
pop esi
push esi
add esi, 0x12b5b
jmp 0x4080fb
pop esi
mov ecx, dword [ebp - 0x504]
mov edx, dword [ecx]
mov dword [ebp - 0x504], edx
mov eax, dword [ebp - 0x504]
cmp eax, dword [ebp - 0xc98]
je 0x408128
mov ecx, dword [ebp - 0x504]
cmp dword [ecx + 0x30], 0
jne 0x407ede
mov dword [ebp - 0x31c], 0
push esi
xor esi, 0xfef0
jmp 0x40813e
pop esi
push ecx
jmp 0x408149
sub ecx, 0x12772
pop ecx
push ecx
xor ecx, 0xf528
invalid
Function at 0x408104
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push esi
push edx
add esp, 4
sub esi, 0x277f
and esi, 0x6409
add esi, 0xabdd
sub esi, 0x1912
pop esi
push eax
or eax, 0x149ef
add eax, 0x12154
and eax, 0x4728
pop eax
lea ecx, [ebp - 0x1738]
mov dword [ebp - 0xc94], ecx
mov edx, dword [ebp - 0x504]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc90], eax
xor ecx, ecx
mov word [ebp - 0x210], cx
xor edx, edx
mov word [ebp - 0x10c], dx
push esi
push edi
add esp, 4
or esi, 0x2819
xor esi, 0x1410f
or esi, 0xf565
pop esi
push eax
push eax
add esp, 4
and eax, 0x14524
pop eax
push edx
or edx, 0x11a0c
or edx, 0x6838
pop edx
mov eax, dword [ebp - 0xc90]
jmp dword [esi - 0x75]
or byte [esi - 0x77], ah
invalid
into
out dx, eax
invalid
dec dword [ebx - 0xc8f6b]
inc dword [ebx - 0x6a76fd3e]
jo 0x407f7f
invalid
jmp dword [esi - 0x75]
test esi, ecx
out dx, eax
invalid
jmp dword [esi - 0x77]
test eax, esi
std
invalid
dec dword [ebx - 0xc9373]
jmp dword [esi - 0x75]
adc dword [esi - 0x77], esp
xchg ebp, eax
int3
out dx, eax
invalid
dec dword [ebx - 0xc937b]
inc dword [ebx - 0x7a76fd40]
insb byte es:[edi], dx
invalid
invalid
jmp dword [esi - 0x75]
invalid
int3
out dx, eax
invalid
jmp dword [esi - 0x77]
invalid
hlt
invalid
invalid
call dword [esi + 0x50]
add esp, 4
or esi, 0x105ee
or esi, 0xd8c0
add esi, 0xf075
and esi, 0x1606e
pop esi
push eax
push eax
add esp, 4
add eax, 0x1724
pop eax
push edx
or edx, 0x15145
pop edx
movzx edx, word [ebp - 0x10c]
test edx, edx
jne 0x40801e
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
hlt
invalid
invalid
jmp [ebx]
ror dword [ecx - 0x15df7b], 0xff
jmp 0x408081
movzx edx, word [ebp - 0x210]
movzx eax, word [ebp - 0x10c]
cmp edx, eax
je 0x407f3d
movzx ecx, word [ebp - 0x210]
xor ecx, 0x20
movzx edx, word [ebp - 0x10c]
cmp ecx, edx
je 0x407f3d
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
cmp eax, ecx
jge 0x40806b
mov dword [ebp - 0x15dc], 0xffffffff
jmp 0x408075
mov dword [ebp - 0x15dc], 1
mov edx, dword [ebp - 0x15dc]
mov dword [ebp - 0x15e0], edx
invalid
cmp dword [ebp - 0x15e0], 0
jne 0x4080ca
push edi
push ebx
add esp, 4
add edi, 0x12e3d
sub edi, 0x6ec6
add edi, 0x13a19
xor edi, 0x16777
pop edi
push eax
xor eax, 0x5a3e
sub eax, 0x972a
sub eax, 0x59b2
pop eax
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x31c], eax
jmp 0x408132
push ecx
sub ecx, 0x414a
add byte [ecx + 0xeff6e1], al
add byte [ecx + 0x56], bl
sub esi, 0x9882
xor esi, 0xce2e
sub esi, 0x19aa
pop esi
push esi
add esi, 0x12b5b
jmp 0x4080fb
pop esi
mov ecx, dword [ebp - 0x504]
mov edx, dword [ecx]
mov dword [ebp - 0x504], edx
mov eax, dword [ebp - 0x504]
cmp eax, dword [ebp - 0xc98]
je 0x408128
mov ecx, dword [ebp - 0x504]
cmp dword [ecx + 0x30], 0
jne 0x407ede
mov dword [ebp - 0x31c], 0
push esi
xor esi, 0xfef0
jmp 0x40813e
pop esi
push ecx
jmp 0x408149
sub ecx, 0x12772
pop ecx
push ecx
xor ecx, 0xf528
invalid