joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4010c5
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x210c
push ebx
push esi
push edi
push ecx
push ecx
add esp, 4
or ecx, 0x86f5
pop ecx
push ecx
and ecx, 0x16257
and ecx, 0xff00
call fcn.004010f6
add byte [eax + 0x37], dl
xor ecx, dword [esi + 0x39]
cmp al, byte [ebx + 0x7eb04c4]
add esp, 4
jmp 0x401102
cmp edi, dword [0x3a364e39]
cmp al, 0x59

Function at 0x4010f6
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
jmp 0x401102
pop ecx
mov eax, 0x4d
mov word [ebp - 0x2048], ax
mov ecx, 0x42
mov word [ebp - 0x2046], cx
mov edx, 0x53
mov word [ebp - 0x2044], dx
mov eax, 0x65
mov word [ebp - 0x2042], ax
mov ecx, 0x72
mov word [ebp - 0x2040], cx
mov edx, 0x76
mov word [ebp - 0x203e], dx
mov eax, 0x69
mov word [ebp - 0x203c], ax
mov ecx, 0x63
mov word [ebp - 0x203a], cx
mov edx, 0x65
mov word [ebp - 0x2038], dx
mov eax, 0x2e
mov word [ebp - 0x2036], ax
mov ecx, 0x65
mov word [ebp - 0x2034], cx
mov edx, 0x78
mov word [ebp - 0x2032], dx
mov eax, 0x65
mov word [ebp - 0x2030], ax
xor ecx, ecx
mov word [ebp - 0x202e], cx
mov dword [ebp - 0x1060], 1
push ebx
push edi
add esp, 4
add ebx, 0x56e5
pop ebx
push eax
xor eax, 0x12474
pop eax
push esi
push edx
add esp, 4
sub esi, 0x8d6f
sub esi, 0x130e0
pop esi
push ebx
push esi
add esp, 4
or ebx, 0x14657
pop ebx
imul edx, dword [ebp - 0x1060], 0x70
add edx, 0x44f3663b
inc esp
imul eax, dword [ebp - 0x1060], 0x70
sub edx, eax
xor edx, 0xaa6272
imul edx, dword [ebp - 0x1060]
imul ecx, dword [ebp - 0x1060], 0x70
sub edx, ecx
mov dword [ebp - 0x1064], edx
push eax
and eax, 0x2b9b
or eax, 0xb4e2
pop eax
push eax
push ecx
add esp, 4
add eax, 0x7b5d
and eax, 0xbcea
xor eax, 0x13961
pop eax
push eax
push ecx
add esp, 4
add eax, 0x14478
pop eax
mov dword [ebp - 0x10], 1
push ecx
xor ecx, 0x10657
and ecx, 0x7b3b
sub ecx, 0x8319
pop ecx
push esi
push edi
add esp, 4
jmp 0x40126e
xor esi, 0x16d6b
and esi, 0x112e6
add esi, 0x2b9e
pop esi
imul edx, dword [ebp - 0x10], 0x70
add edx, 0x44f3663b
imul eax, dword [ebp - 0x10], 0x70
sub edx, eax
xor edx, 0x153c
imul edx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x10], 0x70
sub edx, ecx
mov dword [ebp - 0x14], edx
push edi
jmp 0x4012ae
call 0x4012bb
add byte [edx], dh
dec ebx
dec esi
inc esi
dec edx
cmp byte [ebx + 0x9e804c4], al
add byte [eax], al
add byte [eax], al
xor eax, 0x33454d3a
dec esi
aaa
add esp, 4
sub edi, 0xf029
pop edi
push ebx
call 0x4012e4
add byte [ebx], dh
cmp eax, 0x4f34424b
cmp eax, 0x8104c483
retf
Function at 0x4011f0
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
jmp 0x401102
pop ecx
mov eax, 0x4d
mov word [ebp - 0x2048], ax
mov ecx, 0x42
mov word [ebp - 0x2046], cx
mov edx, 0x53
mov word [ebp - 0x2044], dx
mov eax, 0x65
mov word [ebp - 0x2042], ax
mov ecx, 0x72
mov word [ebp - 0x2040], cx
mov edx, 0x76
mov word [ebp - 0x203e], dx
mov eax, 0x69
mov word [ebp - 0x203c], ax
mov ecx, 0x63
mov word [ebp - 0x203a], cx
mov edx, 0x65
mov word [ebp - 0x2038], dx
mov eax, 0x2e
mov word [ebp - 0x2036], ax
mov ecx, 0x65
mov word [ebp - 0x2034], cx
mov edx, 0x78
mov word [ebp - 0x2032], dx
mov eax, 0x65
mov word [ebp - 0x2030], ax
xor ecx, ecx
mov word [ebp - 0x202e], cx
mov dword [ebp - 0x1060], 1
push ebx
push edi
add esp, 4
add ebx, 0x56e5
pop ebx
push eax
xor eax, 0x12474
pop eax
push esi
push edx
add esp, 4
sub esi, 0x8d6f
sub esi, 0x130e0
pop esi
push ebx
push esi
add esp, 4
or ebx, 0x14657
pop ebx
imul edx, dword [ebp - 0x1060], 0x70
add edx, 0x44f3663b
inc esp
imul eax, dword [ebp - 0x1060], 0x70
sub edx, eax
xor edx, 0xaa6272
imul edx, dword [ebp - 0x1060]
imul ecx, dword [ebp - 0x1060], 0x70
sub edx, ecx
mov dword [ebp - 0x1064], edx
push eax
and eax, 0x2b9b
or eax, 0xb4e2
pop eax
push eax
push ecx
add esp, 4
add eax, 0x7b5d
and eax, 0xbcea
xor eax, 0x13961
pop eax
push eax
push ecx
add esp, 4
add eax, 0x14478
pop eax
mov dword [ebp - 0x10], 1
push ecx
xor ecx, 0x10657
and ecx, 0x7b3b
sub ecx, 0x8319
pop ecx
push esi
push edi
add esp, 4
jmp 0x40126e
xor esi, 0x16d6b
and esi, 0x112e6
add esi, 0x2b9e
pop esi
imul edx, dword [ebp - 0x10], 0x70
add edx, 0x44f3663b
imul eax, dword [ebp - 0x10], 0x70
sub edx, eax
xor edx, 0x153c
imul edx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x10], 0x70
sub edx, ecx
mov dword [ebp - 0x14], edx
push edi
jmp 0x4012ae
call 0x4012bb
add byte [edx], dh
dec ebx
dec esi
inc esi
dec edx
cmp byte [ebx + 0x9e804c4], al
add byte [eax], al
add byte [eax], al
xor eax, 0x33454d3a
dec esi
aaa
add esp, 4
sub edi, 0xf029
pop edi
push ebx
call 0x4012e4
add byte [ebx], dh
cmp eax, 0x4f34424b
cmp eax, 0x8104c483
retf
Function at 0x4012bb
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
jmp 0x401102
pop ecx
mov eax, 0x4d
mov word [ebp - 0x2048], ax
mov ecx, 0x42
mov word [ebp - 0x2046], cx
mov edx, 0x53
mov word [ebp - 0x2044], dx
mov eax, 0x65
mov word [ebp - 0x2042], ax
mov ecx, 0x72
mov word [ebp - 0x2040], cx
mov edx, 0x76
mov word [ebp - 0x203e], dx
mov eax, 0x69
mov word [ebp - 0x203c], ax
mov ecx, 0x63
mov word [ebp - 0x203a], cx
mov edx, 0x65
mov word [ebp - 0x2038], dx
mov eax, 0x2e
mov word [ebp - 0x2036], ax
mov ecx, 0x65
mov word [ebp - 0x2034], cx
mov edx, 0x78
mov word [ebp - 0x2032], dx
mov eax, 0x65
mov word [ebp - 0x2030], ax
xor ecx, ecx
mov word [ebp - 0x202e], cx
mov dword [ebp - 0x1060], 1
push ebx
push edi
add esp, 4
add ebx, 0x56e5
pop ebx
push eax
xor eax, 0x12474
pop eax
push esi
push edx
add esp, 4
sub esi, 0x8d6f
sub esi, 0x130e0
pop esi
push ebx
push esi
add esp, 4
or ebx, 0x14657
pop ebx
imul edx, dword [ebp - 0x1060], 0x70
add edx, 0x44f3663b
inc esp
imul eax, dword [ebp - 0x1060], 0x70
sub edx, eax
xor edx, 0xaa6272
imul edx, dword [ebp - 0x1060]
imul ecx, dword [ebp - 0x1060], 0x70
sub edx, ecx
mov dword [ebp - 0x1064], edx
push eax
and eax, 0x2b9b
or eax, 0xb4e2
pop eax
push eax
push ecx
add esp, 4
add eax, 0x7b5d
and eax, 0xbcea
xor eax, 0x13961
pop eax
push eax
push ecx
add esp, 4
add eax, 0x14478
pop eax
mov dword [ebp - 0x10], 1
push ecx
xor ecx, 0x10657
and ecx, 0x7b3b
sub ecx, 0x8319
pop ecx
push esi
push edi
add esp, 4
jmp 0x40126e
xor esi, 0x16d6b
and esi, 0x112e6
add esi, 0x2b9e
pop esi
imul edx, dword [ebp - 0x10], 0x70
add edx, 0x44f3663b
imul eax, dword [ebp - 0x10], 0x70
sub edx, eax
xor edx, 0x153c
imul edx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x10], 0x70
sub edx, ecx
mov dword [ebp - 0x14], edx
push edi
jmp 0x4012ae
call 0x4012bb
add byte [edx], dh
dec ebx
dec esi
inc esi
dec edx
cmp byte [ebx + 0x9e804c4], al
add byte [eax], al
add byte [eax], al
xor eax, 0x33454d3a
dec esi
aaa
add esp, 4
sub edi, 0xf029
pop edi
push ebx
call 0x4012e4
add byte [ebx], dh
cmp eax, 0x4f34424b
cmp eax, 0x8104c483
retf
Function at 0x4012cc
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
jmp 0x401102
pop ecx
mov eax, 0x4d
mov word [ebp - 0x2048], ax
mov ecx, 0x42
mov word [ebp - 0x2046], cx
mov edx, 0x53
mov word [ebp - 0x2044], dx
mov eax, 0x65
mov word [ebp - 0x2042], ax
mov ecx, 0x72
mov word [ebp - 0x2040], cx
mov edx, 0x76
mov word [ebp - 0x203e], dx
mov eax, 0x69
mov word [ebp - 0x203c], ax
mov ecx, 0x63
mov word [ebp - 0x203a], cx
mov edx, 0x65
mov word [ebp - 0x2038], dx
mov eax, 0x2e
mov word [ebp - 0x2036], ax
mov ecx, 0x65
mov word [ebp - 0x2034], cx
mov edx, 0x78
mov word [ebp - 0x2032], dx
mov eax, 0x65
mov word [ebp - 0x2030], ax
xor ecx, ecx
mov word [ebp - 0x202e], cx
mov dword [ebp - 0x1060], 1
push ebx
push edi
add esp, 4
add ebx, 0x56e5
pop ebx
push eax
xor eax, 0x12474
pop eax
push esi
push edx
add esp, 4
sub esi, 0x8d6f
sub esi, 0x130e0
pop esi
push ebx
push esi
add esp, 4
or ebx, 0x14657
pop ebx
imul edx, dword [ebp - 0x1060], 0x70
add edx, 0x44f3663b
inc esp
imul eax, dword [ebp - 0x1060], 0x70
sub edx, eax
xor edx, 0xaa6272
imul edx, dword [ebp - 0x1060]
imul ecx, dword [ebp - 0x1060], 0x70
sub edx, ecx
mov dword [ebp - 0x1064], edx
push eax
and eax, 0x2b9b
or eax, 0xb4e2
pop eax
push eax
push ecx
add esp, 4
add eax, 0x7b5d
and eax, 0xbcea
xor eax, 0x13961
pop eax
push eax
push ecx
add esp, 4
add eax, 0x14478
pop eax
mov dword [ebp - 0x10], 1
push ecx
xor ecx, 0x10657
and ecx, 0x7b3b
sub ecx, 0x8319
pop ecx
push esi
push edi
add esp, 4
jmp 0x40126e
xor esi, 0x16d6b
and esi, 0x112e6
add esi, 0x2b9e
pop esi
imul edx, dword [ebp - 0x10], 0x70
add edx, 0x44f3663b
imul eax, dword [ebp - 0x10], 0x70
sub edx, eax
xor edx, 0x153c
imul edx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x10], 0x70
sub edx, ecx
mov dword [ebp - 0x14], edx
push edi
jmp 0x4012ae
call 0x4012bb
add byte [edx], dh
dec ebx
dec esi
inc esi
dec edx
cmp byte [ebx + 0x9e804c4], al
add byte [eax], al
add byte [eax], al
xor eax, 0x33454d3a
dec esi
aaa
add esp, 4
sub edi, 0xf029
pop edi
push ebx
call 0x4012e4
add byte [ebx], dh
cmp eax, 0x4f34424b
cmp eax, 0x8104c483
retf
Function at 0x4012e4
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
jmp 0x401102
pop ecx
mov eax, 0x4d
mov word [ebp - 0x2048], ax
mov ecx, 0x42
mov word [ebp - 0x2046], cx
mov edx, 0x53
mov word [ebp - 0x2044], dx
mov eax, 0x65
mov word [ebp - 0x2042], ax
mov ecx, 0x72
mov word [ebp - 0x2040], cx
mov edx, 0x76
mov word [ebp - 0x203e], dx
mov eax, 0x69
mov word [ebp - 0x203c], ax
mov ecx, 0x63
mov word [ebp - 0x203a], cx
mov edx, 0x65
mov word [ebp - 0x2038], dx
mov eax, 0x2e
mov word [ebp - 0x2036], ax
mov ecx, 0x65
mov word [ebp - 0x2034], cx
mov edx, 0x78
mov word [ebp - 0x2032], dx
mov eax, 0x65
mov word [ebp - 0x2030], ax
xor ecx, ecx
mov word [ebp - 0x202e], cx
mov dword [ebp - 0x1060], 1
push ebx
push edi
add esp, 4
add ebx, 0x56e5
pop ebx
push eax
xor eax, 0x12474
pop eax
push esi
push edx
add esp, 4
sub esi, 0x8d6f
sub esi, 0x130e0
pop esi
push ebx
push esi
add esp, 4
or ebx, 0x14657
pop ebx
imul edx, dword [ebp - 0x1060], 0x70
add edx, 0x44f3663b
inc esp
imul eax, dword [ebp - 0x1060], 0x70
sub edx, eax
xor edx, 0xaa6272
imul edx, dword [ebp - 0x1060]
imul ecx, dword [ebp - 0x1060], 0x70
sub edx, ecx
mov dword [ebp - 0x1064], edx
push eax
and eax, 0x2b9b
or eax, 0xb4e2
pop eax
push eax
push ecx
add esp, 4
add eax, 0x7b5d
and eax, 0xbcea
xor eax, 0x13961
pop eax
push eax
push ecx
add esp, 4
add eax, 0x14478
pop eax
mov dword [ebp - 0x10], 1
push ecx
xor ecx, 0x10657
and ecx, 0x7b3b
sub ecx, 0x8319
pop ecx
push esi
push edi
add esp, 4
jmp 0x40126e
xor esi, 0x16d6b
and esi, 0x112e6
add esi, 0x2b9e
pop esi
imul edx, dword [ebp - 0x10], 0x70
add edx, 0x44f3663b
imul eax, dword [ebp - 0x10], 0x70
sub edx, eax
xor edx, 0x153c
imul edx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x10], 0x70
sub edx, ecx
mov dword [ebp - 0x14], edx
push edi
jmp 0x4012ae
call 0x4012bb
add byte [edx], dh
dec ebx
dec esi
inc esi
dec edx
cmp byte [ebx + 0x9e804c4], al
add byte [eax], al
add byte [eax], al
xor eax, 0x33454d3a
dec esi
aaa
add esp, 4
sub edi, 0xf029
pop edi
push ebx
call 0x4012e4
add byte [ebx], dh
cmp eax, 0x4f34424b
cmp eax, 0x8104c483
retf
Function at 0x404fb0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
sub edi, 0x6de1
sub edi, 0x11c7e
pop edi
push esi
push edi
add esp, 4
and esi, 0xd7e
and esi, 0xab9e
pop esi
push edi
sub edi, 0x8baf
sub edi, 0x14029
pop edi
cmp dword [ebp - 0xc98], 0
jne 0x404ff8
mov dword [ebp - 0x31c], 0
jmp 0x405258
mov eax, dword [ebp - 0xc98]
mov dword [ebp - 0x504], eax
push ebx
push ecx
add esp, 4
xor ebx, 0x16b08
add ebx, 0xf55
and ebx, 0x67e2
pop ebx
push ecx
sub ecx, 0x11ed2
and ecx, 0x170c0
pop ecx
push edx
push ecx
add esp, 4
add edx, 0x4a3a
pop edx
lea ecx, [ebp - 0x1738]
mov dword [ebp - 0xc94], ecx
mov edx, dword [ebp - 0x504]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc90], eax
xor ecx, ecx
mov word [ebp - 0x210], cx
xor edx, edx
mov word [ebp - 0x10c], dx
push edi
push edx
add esp, 4
jmp 0x405070
sub edi, 0x15155
add edi, 0x1527e
pop edi
push esi
and esi, 0x145ca
call 0x405091
add byte [eax + 0x3f], al
dec ecx
cmp esi, dword [edx]
add esp, 4
pop esi
mov eax, dword [ebp - 0xc90]
mov cx, word [eax]
mov word [ebp - 0x1032], cx
mov edx, dword [ebp - 0xc90]
add edx, 2
mov dword [ebp - 0xc90], edx
mov ax, word [ebp - 0x1032]
mov word [ebp - 0x210], ax
mov ecx, dword [ebp - 0xc94]
mov dx, word [ecx]
mov word [ebp - 0x1034], dx
invalid
dec dword [ebx - 0xc937b]
inc dword [ebx - 0x7a76fd40]
insb byte es:[edi], dx
invalid
invalid

Function at 0x405091
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
sub edi, 0x6de1
sub edi, 0x11c7e
pop edi
push esi
push edi
add esp, 4
and esi, 0xd7e
and esi, 0xab9e
pop esi
push edi
sub edi, 0x8baf
sub edi, 0x14029
pop edi
cmp dword [ebp - 0xc98], 0
jne 0x404ff8
mov dword [ebp - 0x31c], 0
jmp 0x405258
mov eax, dword [ebp - 0xc98]
mov dword [ebp - 0x504], eax
push ebx
push ecx
add esp, 4
xor ebx, 0x16b08
add ebx, 0xf55
and ebx, 0x67e2
pop ebx
push ecx
sub ecx, 0x11ed2
and ecx, 0x170c0
pop ecx
push edx
push ecx
add esp, 4
add edx, 0x4a3a
pop edx
lea ecx, [ebp - 0x1738]
mov dword [ebp - 0xc94], ecx
mov edx, dword [ebp - 0x504]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc90], eax
xor ecx, ecx
mov word [ebp - 0x210], cx
xor edx, edx
mov word [ebp - 0x10c], dx
push edi
push edx
add esp, 4
jmp 0x405070
sub edi, 0x15155
add edi, 0x1527e
pop edi
push esi
and esi, 0x145ca
call 0x405091
add byte [eax + 0x3f], al
dec ecx
cmp esi, dword [edx]
add esp, 4
pop esi
mov eax, dword [ebp - 0xc90]
mov cx, word [eax]
mov word [ebp - 0x1032], cx
mov edx, dword [ebp - 0xc90]
add edx, 2
mov dword [ebp - 0xc90], edx
mov ax, word [ebp - 0x1032]
mov word [ebp - 0x210], ax
mov ecx, dword [ebp - 0xc94]
mov dx, word [ecx]
mov word [ebp - 0x1034], dx
invalid
dec dword [ebx - 0xc937b]
inc dword [ebx - 0x7a76fd40]
insb byte es:[edi], dx
invalid
invalid
Function at 0x406060
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add edx, 1
mov dword [ebp - 0x768], edx
mov eax, dword [ebp - 0x764]
mov ecx, dword [ebp - 0x768]
cmp ecx, dword [eax + 0x18]
jae 0x406275
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x19d4]
mov ecx, dword [ebp - 0x324]
mov edx, dword [ebp - 0x770]
mov dword [ebp - 0x510], edx

Function at 0x406090
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x768]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x76c], ecx
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x19d8]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x1d60]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x19dc], eax
mov dword [ebp - 0x19c], 0
jmp 0x4060d9
mov edx, dword [ebp - 0x76c]
add edx, dword [ebp - 0x19c]
movsx eax, byte [edx]
test eax, eax
je 0x40618b
mov ecx, dword [ebp - 0x19c]
movsx edx, byte [ebp + ecx - 0x878]
test edx, edx
je 0x40618b
push ecx
add ecx, 0x125b4
jmp 0x406114
pop ecx
push edx
push esi
add esp, 4
sub edx, 0x5bf4
jmp 0x406126
call 0x406134
add byte [esi], bh
xor bh, byte [eax + eax*2]
dec ebx
dec edx
inc edi
cmp al, byte [ebx - 0x74a5fb3c]
test dword [eax + edi*8 - 0x7afc0001], edx
invalid
push esi
push eax
add esp, 4
call 0x40619c
add byte [eax + 0x3b], al
dec ebp
xor edi, dword [edx + esi]
add esp, 4
or esi, 0xab41
pop esi
push ecx
push edi
add esp, 4
jmp 0x4061b0
sub ecx, 0xab8f
and ecx, 0x16f9d
pop ecx
mov edx, dword [ebp - 0x76c]
add edx, dword [ebp - 0x19c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x19c]
movsx edx, byte [ebp + ecx - 0x878]
cmp eax, edx
jne 0x4061ea
mov dword [ebp - 0xcb8], 0
jmp 0x406259
push ecx
jmp 0x4061f4
or ecx, 0x11bb4
pop ecx
push edx
push esi
add esp, 4
sub edx, 0xad54
add edx, 0x100c3
call 0x406218
add byte [ebp + 0x34], cl
dec edx
dec esp
inc ebp
inc ebp
add esp, 4
pop edx
mov eax, dword [ebp - 0x76c]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x878]
or eax, 0x20
cmp ecx, eax
jge 0x40624f
mov dword [ebp - 0xcb8], 0xffffffff
jmp 0x406259
mov dword [ebp - 0xcb8], 1
cmp dword [ebp - 0xcb8], 0
jne 0x406270
mov ecx, dword [ebp - 0x19dc]
mov dword [ebp - 0x510], ecx
jmp 0x406281
jmp 0x40605a
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x79c], eax
push edi
or edi, 0xaec
pop edi
push eax
push ebx
add esp, 4
add eax, 0x45b5
or eax, 0x9160
and eax, 0xb647
call 0x4062bb
add byte [esi + 0x45], cl
xor al, byte [edx + 0x36]
inc esi
inc esi
inc esi
cmp al, byte [ebx - 0x74a7fb3c]
lea ebx, [eax]
cld
invalid
Function at 0x406134
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x768]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x76c], ecx
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x19d8]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x1d60]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x19dc], eax
mov dword [ebp - 0x19c], 0
jmp 0x4060d9
mov edx, dword [ebp - 0x76c]
add edx, dword [ebp - 0x19c]
movsx eax, byte [edx]
test eax, eax
je 0x40618b
mov ecx, dword [ebp - 0x19c]
movsx edx, byte [ebp + ecx - 0x878]
test edx, edx
je 0x40618b
push ecx
add ecx, 0x125b4
jmp 0x406114
pop ecx
push edx
push esi
add esp, 4
sub edx, 0x5bf4
jmp 0x406126
call 0x406134
add byte [esi], bh
xor bh, byte [eax + eax*2]
dec ebx
dec edx
inc edi
cmp al, byte [ebx - 0x74a5fb3c]
test dword [eax + edi*8 - 0x7afc0001], edx
invalid
push esi
push eax
add esp, 4
call 0x40619c
add byte [eax + 0x3b], al
dec ebp
xor edi, dword [edx + esi]
add esp, 4
or esi, 0xab41
pop esi
push ecx
push edi
add esp, 4
jmp 0x4061b0
sub ecx, 0xab8f
and ecx, 0x16f9d
pop ecx
mov edx, dword [ebp - 0x76c]
add edx, dword [ebp - 0x19c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x19c]
movsx edx, byte [ebp + ecx - 0x878]
cmp eax, edx
jne 0x4061ea
mov dword [ebp - 0xcb8], 0
jmp 0x406259
push ecx
jmp 0x4061f4
or ecx, 0x11bb4
pop ecx
push edx
push esi
add esp, 4
sub edx, 0xad54
add edx, 0x100c3
call 0x406218
add byte [ebp + 0x34], cl
dec edx
dec esp
inc ebp
inc ebp
add esp, 4
pop edx
mov eax, dword [ebp - 0x76c]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x878]
or eax, 0x20
cmp ecx, eax
jge 0x40624f
mov dword [ebp - 0xcb8], 0xffffffff
jmp 0x406259
mov dword [ebp - 0xcb8], 1
cmp dword [ebp - 0xcb8], 0
jne 0x406270
mov ecx, dword [ebp - 0x19dc]
mov dword [ebp - 0x510], ecx
jmp 0x406281
jmp 0x40605a
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x79c], eax
push edi
or edi, 0xaec
pop edi
push eax
push ebx
add esp, 4
add eax, 0x45b5
or eax, 0x9160
and eax, 0xb647
call 0x4062bb
add byte [esi + 0x45], cl
xor al, byte [edx + 0x36]
inc esi
inc esi
inc esi
cmp al, byte [ebx - 0x74a7fb3c]
lea ebx, [eax]
cld
invalid
Function at 0x40619c
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x768]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x76c], ecx
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x19d8]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x1d60]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x19dc], eax
mov dword [ebp - 0x19c], 0
jmp 0x4060d9
mov edx, dword [ebp - 0x76c]
add edx, dword [ebp - 0x19c]
movsx eax, byte [edx]
test eax, eax
je 0x40618b
mov ecx, dword [ebp - 0x19c]
movsx edx, byte [ebp + ecx - 0x878]
test edx, edx
je 0x40618b
push ecx
add ecx, 0x125b4
jmp 0x406114
pop ecx
push edx
push esi
add esp, 4
sub edx, 0x5bf4
jmp 0x406126
call 0x406134
add byte [esi], bh
xor bh, byte [eax + eax*2]
dec ebx
dec edx
inc edi
cmp al, byte [ebx - 0x74a5fb3c]
test dword [eax + edi*8 - 0x7afc0001], edx
invalid
push esi
push eax
add esp, 4
call 0x40619c
add byte [eax + 0x3b], al
dec ebp
xor edi, dword [edx + esi]
add esp, 4
or esi, 0xab41
pop esi
push ecx
push edi
add esp, 4
jmp 0x4061b0
sub ecx, 0xab8f
and ecx, 0x16f9d
pop ecx
mov edx, dword [ebp - 0x76c]
add edx, dword [ebp - 0x19c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x19c]
movsx edx, byte [ebp + ecx - 0x878]
cmp eax, edx
jne 0x4061ea
mov dword [ebp - 0xcb8], 0
jmp 0x406259
push ecx
jmp 0x4061f4
or ecx, 0x11bb4
pop ecx
push edx
push esi
add esp, 4
sub edx, 0xad54
add edx, 0x100c3
call 0x406218
add byte [ebp + 0x34], cl
dec edx
dec esp
inc ebp
inc ebp
add esp, 4
pop edx
mov eax, dword [ebp - 0x76c]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x878]
or eax, 0x20
cmp ecx, eax
jge 0x40624f
mov dword [ebp - 0xcb8], 0xffffffff
jmp 0x406259
mov dword [ebp - 0xcb8], 1
cmp dword [ebp - 0xcb8], 0
jne 0x406270
mov ecx, dword [ebp - 0x19dc]
mov dword [ebp - 0x510], ecx
jmp 0x406281
jmp 0x40605a
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x79c], eax
push edi
or edi, 0xaec
pop edi
push eax
push ebx
add esp, 4
add eax, 0x45b5
or eax, 0x9160
and eax, 0xb647
call 0x4062bb
add byte [esi + 0x45], cl
xor al, byte [edx + 0x36]
inc esi
inc esi
inc esi
cmp al, byte [ebx - 0x74a7fb3c]
lea ebx, [eax]
cld
invalid
Function at 0x406218
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x768]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x76c], ecx
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x19d8]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x1d60]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x19dc], eax
mov dword [ebp - 0x19c], 0
jmp 0x4060d9
mov edx, dword [ebp - 0x76c]
add edx, dword [ebp - 0x19c]
movsx eax, byte [edx]
test eax, eax
je 0x40618b
mov ecx, dword [ebp - 0x19c]
movsx edx, byte [ebp + ecx - 0x878]
test edx, edx
je 0x40618b
push ecx
add ecx, 0x125b4
jmp 0x406114
pop ecx
push edx
push esi
add esp, 4
sub edx, 0x5bf4
jmp 0x406126
call 0x406134
add byte [esi], bh
xor bh, byte [eax + eax*2]
dec ebx
dec edx
inc edi
cmp al, byte [ebx - 0x74a5fb3c]
test dword [eax + edi*8 - 0x7afc0001], edx
invalid
push esi
push eax
add esp, 4
call 0x40619c
add byte [eax + 0x3b], al
dec ebp
xor edi, dword [edx + esi]
add esp, 4
or esi, 0xab41
pop esi
push ecx
push edi
add esp, 4
jmp 0x4061b0
sub ecx, 0xab8f
and ecx, 0x16f9d
pop ecx
mov edx, dword [ebp - 0x76c]
add edx, dword [ebp - 0x19c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x19c]
movsx edx, byte [ebp + ecx - 0x878]
cmp eax, edx
jne 0x4061ea
mov dword [ebp - 0xcb8], 0
jmp 0x406259
push ecx
jmp 0x4061f4
or ecx, 0x11bb4
pop ecx
push edx
push esi
add esp, 4
sub edx, 0xad54
add edx, 0x100c3
call 0x406218
add byte [ebp + 0x34], cl
dec edx
dec esp
inc ebp
inc ebp
add esp, 4
pop edx
mov eax, dword [ebp - 0x76c]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x878]
or eax, 0x20
cmp ecx, eax
jge 0x40624f
mov dword [ebp - 0xcb8], 0xffffffff
jmp 0x406259
mov dword [ebp - 0xcb8], 1
cmp dword [ebp - 0xcb8], 0
jne 0x406270
mov ecx, dword [ebp - 0x19dc]
mov dword [ebp - 0x510], ecx
jmp 0x406281
jmp 0x40605a
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x79c], eax
push edi
or edi, 0xaec
pop edi
push eax
push ebx
add esp, 4
add eax, 0x45b5
or eax, 0x9160
and eax, 0xb647
call 0x4062bb
add byte [esi + 0x45], cl
xor al, byte [edx + 0x36]
inc esi
inc esi
inc esi
cmp al, byte [ebx - 0x74a7fb3c]
lea ebx, [eax]
cld
invalid