joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10006c68
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
call dword [ecx - 0x18]
or eax, dword [eax]
add byte [eax], al
add byte [esi], dh
xor eax, 0x383d343c
cmp al, 0x4a
dec edi
inc eax
add esp, 4
xor ecx, 0xdff2
add bl, ch
pop es
sub ecx, 0xc679
pop ecx
push edi
xor edi, 0xe61e
pop edi
mov edx, dword [ebp - 0x3f4]
mov dword [ebp - 0x4f8], edx
jmp 0x10006c04
push ecx
xor ecx, 0x2d72
jmp 0x10006c13
jmp 0x10006c18
pop ecx
push edi
push edi
add esp, 4
call 0x10006c2a
add byte [eax + 0x39], al
xor eax, 0x833f473c
les eax, [ebx + ebp*8]
push es
xor eax, 0x454c4747
pop edi
mov ecx, dword [ebp - 0x4f8]
sub ecx, dword [ebp - 0x3f4]
cmp ecx, 0xffffffff
jb 0x10006c7e
push eax
sub eax, 0xae62
call 0x10006c5d
add byte [ebx], dh
dec ebx
inc ecx
cmp dword [edx], esi
inc eax
inc ebp
push eax
aas
add esp, 4
jmp 0x10006c67
call 0x10006c75
add byte [esi], bh
inc edi
inc edi
cmp bh, byte [0x833e3f3b]
les eax, [eax + ebx*2]
jmp 0x10006e7a
mov dword [ebp - 0xc90], 7
mov edx, dword [ebp - 0x4f8]
mov dword [ebp - 0xa64], edx
push ebx
and ebx, 0xd4a
or ebx, 0xdb2b
add ebx, 0x14869
dec eax
add dword [eax], eax
pop ebx
push ecx
and ecx, 0x1258a
call 0x10006cbc
invalid
push edx
and edx, 0x16bb
sub edx, 0x98b
sub edx, 0x4345
pop edx
push ecx
push ebx
add esp, 4
add ecx, 0xce96
or ecx, 0x1161a
sub ecx, 0xb084
sub ecx, 0x6726
pop ecx
mov dword [ebp - 0x3fc], 0

Function at 0x10006c75
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
call dword [ecx - 0x18]
or eax, dword [eax]
add byte [eax], al
add byte [esi], dh
xor eax, 0x383d343c
cmp al, 0x4a
dec edi
inc eax
add esp, 4
xor ecx, 0xdff2
add bl, ch
pop es
sub ecx, 0xc679
pop ecx
push edi
xor edi, 0xe61e
pop edi
mov edx, dword [ebp - 0x3f4]
mov dword [ebp - 0x4f8], edx
jmp 0x10006c04
push ecx
xor ecx, 0x2d72
jmp 0x10006c13
jmp 0x10006c18
pop ecx
push edi
push edi
add esp, 4
call 0x10006c2a
add byte [eax + 0x39], al
xor eax, 0x833f473c
les eax, [ebx + ebp*8]
push es
xor eax, 0x454c4747
pop edi
mov ecx, dword [ebp - 0x4f8]
sub ecx, dword [ebp - 0x3f4]
cmp ecx, 0xffffffff
jb 0x10006c7e
push eax
sub eax, 0xae62
call 0x10006c5d
add byte [ebx], dh
dec ebx
inc ecx
cmp dword [edx], esi
inc eax
inc ebp
push eax
aas
add esp, 4
jmp 0x10006c67
call 0x10006c75
add byte [esi], bh
inc edi
inc edi
cmp bh, byte [0x833e3f3b]
les eax, [eax + ebx*2]
jmp 0x10006e7a
mov dword [ebp - 0xc90], 7
mov edx, dword [ebp - 0x4f8]
mov dword [ebp - 0xa64], edx
push ebx
and ebx, 0xd4a
or ebx, 0xdb2b
add ebx, 0x14869
dec eax
add dword [eax], eax
pop ebx
push ecx
and ecx, 0x1258a
call 0x10006cbc
invalid
push edx
and edx, 0x16bb
sub edx, 0x98b
sub edx, 0x4345
pop edx
push ecx
push ebx
add esp, 4
add ecx, 0xce96
or ecx, 0x1161a
sub ecx, 0xb084
sub ecx, 0x6726
pop ecx
mov dword [ebp - 0x3fc], 0
Function at 0x10006cb3
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
call dword [ecx - 0x18]
or eax, dword [eax]
add byte [eax], al
add byte [esi], dh
xor eax, 0x383d343c
cmp al, 0x4a
dec edi
inc eax
add esp, 4
xor ecx, 0xdff2
add bl, ch
pop es
sub ecx, 0xc679
pop ecx
push edi
xor edi, 0xe61e
pop edi
mov edx, dword [ebp - 0x3f4]
mov dword [ebp - 0x4f8], edx
jmp 0x10006c04
push ecx
xor ecx, 0x2d72
jmp 0x10006c13
jmp 0x10006c18
pop ecx
push edi
push edi
add esp, 4
call 0x10006c2a
add byte [eax + 0x39], al
xor eax, 0x833f473c
les eax, [ebx + ebp*8]
push es
xor eax, 0x454c4747
pop edi
mov ecx, dword [ebp - 0x4f8]
sub ecx, dword [ebp - 0x3f4]
cmp ecx, 0xffffffff
jb 0x10006c7e
push eax
sub eax, 0xae62
call 0x10006c5d
add byte [ebx], dh
dec ebx
inc ecx
cmp dword [edx], esi
inc eax
inc ebp
push eax
aas
add esp, 4
jmp 0x10006c67
call 0x10006c75
add byte [esi], bh
inc edi
inc edi
cmp bh, byte [0x833e3f3b]
les eax, [eax + ebx*2]
jmp 0x10006e7a
mov dword [ebp - 0xc90], 7
mov edx, dword [ebp - 0x4f8]
mov dword [ebp - 0xa64], edx
push ebx
and ebx, 0xd4a
or ebx, 0xdb2b
add ebx, 0x14869
dec eax
add dword [eax], eax
pop ebx
push ecx
and ecx, 0x1258a
call 0x10006cbc
invalid
push edx
and edx, 0x16bb
sub edx, 0x98b
sub edx, 0x4345
pop edx
push ecx
push ebx
add esp, 4
add ecx, 0xce96
or ecx, 0x1161a
sub ecx, 0xb084
sub ecx, 0x6726
pop ecx
mov dword [ebp - 0x3fc], 0

Function at 0x10006cbc
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
invalid
test dword [eax], ecx
sti
invalid
dec esi
cmp eax, 0x8104c483
ror ecx, 0x4c
add dword [eax], eax
pop ecx
invalid
test dword [eax - 0x16], eax
invalid
Function at 0x100083bf
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
xor al, byte [ebx - 0x1e7efb3c]
das
and eax, dword [eax]
add al, ch
or byte [eax], al
add byte [eax], al
add byte [edi + 0x45], al
dec esi
xor esi, dword [esi]
cmp ecx, dword [edi - 0x7d]
les eax, [ecx + eax*4]
jmp 0x1001fc2f

Function at 0x100083d5
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
xor al, byte [ebx - 0x1e7efb3c]
das
and eax, dword [eax]
add al, ch
or byte [eax], al
add byte [eax], al
add byte [edi + 0x45], al
dec esi
xor esi, dword [esi]
cmp ecx, dword [edi - 0x7d]
les eax, [ecx + eax*4]
jmp 0x1001fc2f

Function at 0x100085b3
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop ecx
mov ecx, dword [ebp - 0x774]
add ecx, dword [ebp - 0x1cc]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1cc]
movsx ecx, byte [ebp + eax - 0x880]
cmp edx, ecx

Function at 0x100085d6
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x1cc]
add edx, 1
mov dword [ebp - 0x1cc], edx
mov eax, dword [ebp - 0x774]
add eax, dword [ebp - 0x1cc]
movsx ecx, byte [eax]
test ecx, ecx
je 0x1000860a
mov edx, dword [ebp - 0x1cc]
movsx eax, byte [ebp + edx - 0x880]
test eax, eax
je 0x1000860a
push esi
and esi, 0xc24c
add esi, 0x8b80
add esi, 0xfc4c
pop esi
push ecx
push eax
add esp, 4
or ecx, 0x97fb
call fcn.100085b3
add byte [0x483a4132], dh
cmp ecx, dword [eax + 0x4e]
inc esi
je 0x100085fc
mov edx, dword [ebp - 0x774]
add edx, dword [ebp - 0x1cc]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1cc]
movsx edx, byte [ebp + ecx - 0x880]
jmp 0x10008549
push eax
Function at 0x1000860b
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x770]
add eax, 1
mov dword [ebp - 0x770], eax
mov ecx, dword [ebp - 0x76c]
mov edx, dword [ebp - 0x770]
cmp edx, dword [ecx + 0x18]
jae 0x100086f4
mov eax, dword [ebp - 0x770]
mov ecx, dword [ebp - 0x1a14]
mov edx, dword [ebp - 0x338]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x774], edx
mov eax, dword [ebp - 0x770]
mov ecx, dword [ebp - 0x1a18]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1a1c]
mov ecx, dword [ebp - 0x338]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x1a20], ecx
mov dword [ebp - 0x1cc], 0
jmp 0x10008558
sub eax, 0xd957
and eax, 0xf604
pop eax
push eax
push edi
add esp, 4
or eax, 0xb3e4
add eax, 0x5778
push edi
add byte [eax], al
call 0x10008638
add byte [eax + 0x4e], al
aaa
dec edx
inc edi
cmp al, 0x4d
dec ecx
inc esp
add esp, 4
pop eax
mov eax, dword [ebp - 0x774]
add eax, dword [ebp - 0x1cc]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1cc]
movsx eax, byte [ebp + edx - 0x880]
cmp ecx, eax
jne 0x10008669
mov dword [ebp - 0xcc8], 0
jmp 0x100086d8
push eax
push ebx
add esp, 4
and eax, 0x54d
jmp 0x1000867d
jmp 0x10008685
pop eax
push eax
push ecx
add esp, 4
call 0x10008697
add byte [edi + 0x3e], al
xor al, 0x42
dec eax
dec esi
add esp, 4
pop eax
mov ecx, dword [ebp - 0x774]
add ecx, dword [ebp - 0x1cc]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1cc]
movsx ecx, byte [ebp + eax - 0x880]
or ecx, 0x20
cmp edx, ecx
jge 0x100086ce
mov dword [ebp - 0xcc8], 0xffffffff
jmp 0x100086d8
mov dword [ebp - 0xcc8], 1
cmp dword [ebp - 0xcc8], 0
jne 0x100086ef
mov edx, dword [ebp - 0x1a20]
mov dword [ebp - 0x50c], edx
jmp 0x10008700
jmp 0x100084d9
mov eax, dword [ebp - 0x778]
mov dword [ebp - 0x50c], eax
mov ecx, dword [ebp - 0x50c]
mov dword [ebp - 0x7a4], ecx
push edi
push edi
add esp, 4
or edi, 0x217d
call 0x10008723
add byte [edi + 0x45], cl
inc esp
inc ecx
xor eax, 0x4c4833b
jmp 0x1000872b
or edi, 0x1e39
pop edi
push esi
push esi
add esp, 4
add esi, 0x847a
pop esi
mov edx, dword [ebp - 0x3fc]
add edx, 0xe
mov dword [ebp - 0x1a70], edx
push eax
xor eax, 0x137db
or eax, 0x12763
add eax, 0x16aba
pop eax
push edi
add edi, 0xace7
or edi, 0xd0ff
call 0x1000877b
add byte [esi + 0x34], al
dec edx
dec ebp
xor eax, 0xc4833345
add al, 0x5f
cmp dword [ebp - 0x3fc], 0
je 0x10008791
cmp dword [ebp - 0xad8], 0
jne 0x100087d7
push ecx
or ecx, 0xbe75
pop ecx
push ebx
push ebx
add esp, 4
add ebx, 0x528c
xor ebx, 0xb747
xor ebx, 0xff75
add ebx, 0xa1a5
pop ebx
push esi
push edx
add esp, 4
or esi, 0x10d57
pop esi
mov eax, dword [ebp - 0x7a4]
mov dword [ebp - 0x1a24], eax
push 0
call dword [ebp - 0x1a24]
mov dword [ebp - 0x20bc], 0xa
push eax
push edi
add esp, 4
xor eax, 0xddbf
add eax, 0xa5b8
pop eax
push edi
call 0x10008803
add byte [ebx + 0x49], cl
dec edx
dec ebx
inc edi
inc ebx
dec ecx
xor eax, 0x4c4834e
or edi, 0x7d35
or edi, 0x1bd4
pop edi
mov ecx, dword [ebp - 0x3fc]
invalid
push ecx
Function at 0x10008638
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x770]
add eax, 1
mov dword [ebp - 0x770], eax
mov ecx, dword [ebp - 0x76c]
mov edx, dword [ebp - 0x770]
cmp edx, dword [ecx + 0x18]
jae 0x100086f4
mov eax, dword [ebp - 0x770]
mov ecx, dword [ebp - 0x1a14]
mov edx, dword [ebp - 0x338]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x774], edx
mov eax, dword [ebp - 0x770]
mov ecx, dword [ebp - 0x1a18]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1a1c]
mov ecx, dword [ebp - 0x338]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x1a20], ecx
mov dword [ebp - 0x1cc], 0
jmp 0x10008558
sub eax, 0xd957
and eax, 0xf604
pop eax
push eax
push edi
add esp, 4
or eax, 0xb3e4
add eax, 0x5778
push edi
add byte [eax], al
call 0x10008638
add byte [eax + 0x4e], al
aaa
dec edx
inc edi
cmp al, 0x4d
dec ecx
inc esp
add esp, 4
pop eax
mov eax, dword [ebp - 0x774]
add eax, dword [ebp - 0x1cc]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1cc]
movsx eax, byte [ebp + edx - 0x880]
cmp ecx, eax
jne 0x10008669
mov dword [ebp - 0xcc8], 0
jmp 0x100086d8
push eax
push ebx
add esp, 4
and eax, 0x54d
jmp 0x1000867d
jmp 0x10008685
pop eax
push eax
push ecx
add esp, 4
call 0x10008697
add byte [edi + 0x3e], al
xor al, 0x42
dec eax
dec esi
add esp, 4
pop eax
mov ecx, dword [ebp - 0x774]
add ecx, dword [ebp - 0x1cc]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1cc]
movsx ecx, byte [ebp + eax - 0x880]
or ecx, 0x20
cmp edx, ecx
jge 0x100086ce
mov dword [ebp - 0xcc8], 0xffffffff
jmp 0x100086d8
mov dword [ebp - 0xcc8], 1
cmp dword [ebp - 0xcc8], 0
jne 0x100086ef
mov edx, dword [ebp - 0x1a20]
mov dword [ebp - 0x50c], edx
jmp 0x10008700
jmp 0x100084d9
mov eax, dword [ebp - 0x778]
mov dword [ebp - 0x50c], eax
mov ecx, dword [ebp - 0x50c]
mov dword [ebp - 0x7a4], ecx
push edi
push edi
add esp, 4
or edi, 0x217d
call 0x10008723
add byte [edi + 0x45], cl
inc esp
inc ecx
xor eax, 0x4c4833b
jmp 0x1000872b
or edi, 0x1e39
pop edi
push esi
push esi
add esp, 4
add esi, 0x847a
pop esi
mov edx, dword [ebp - 0x3fc]
add edx, 0xe
mov dword [ebp - 0x1a70], edx
push eax
xor eax, 0x137db
or eax, 0x12763
add eax, 0x16aba
pop eax
push edi
add edi, 0xace7
or edi, 0xd0ff
call 0x1000877b
add byte [esi + 0x34], al
dec edx
dec ebp
xor eax, 0xc4833345
add al, 0x5f
cmp dword [ebp - 0x3fc], 0
je 0x10008791
cmp dword [ebp - 0xad8], 0
jne 0x100087d7
push ecx
or ecx, 0xbe75
pop ecx
push ebx
push ebx
add esp, 4
add ebx, 0x528c
xor ebx, 0xb747
xor ebx, 0xff75
add ebx, 0xa1a5
pop ebx
push esi
push edx
add esp, 4
or esi, 0x10d57
pop esi
mov eax, dword [ebp - 0x7a4]
mov dword [ebp - 0x1a24], eax
push 0
call dword [ebp - 0x1a24]
mov dword [ebp - 0x20bc], 0xa
push eax
push edi
add esp, 4
xor eax, 0xddbf
add eax, 0xa5b8
pop eax
push edi
call 0x10008803
add byte [ebx + 0x49], cl
dec edx
dec ebx
inc edi
inc ebx
dec ecx
xor eax, 0x4c4834e
or edi, 0x7d35
or edi, 0x1bd4
pop edi
mov ecx, dword [ebp - 0x3fc]
invalid
push ecx
Function at 0x10008697
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x770]
add eax, 1
mov dword [ebp - 0x770], eax
mov ecx, dword [ebp - 0x76c]
mov edx, dword [ebp - 0x770]
cmp edx, dword [ecx + 0x18]
jae 0x100086f4
mov eax, dword [ebp - 0x770]
mov ecx, dword [ebp - 0x1a14]
mov edx, dword [ebp - 0x338]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x774], edx
mov eax, dword [ebp - 0x770]
mov ecx, dword [ebp - 0x1a18]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1a1c]
mov ecx, dword [ebp - 0x338]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x1a20], ecx
mov dword [ebp - 0x1cc], 0
jmp 0x10008558
sub eax, 0xd957
and eax, 0xf604
pop eax
push eax
push edi
add esp, 4
or eax, 0xb3e4
add eax, 0x5778
push edi
add byte [eax], al
call 0x10008638
add byte [eax + 0x4e], al
aaa
dec edx
inc edi
cmp al, 0x4d
dec ecx
inc esp
add esp, 4
pop eax
mov eax, dword [ebp - 0x774]
add eax, dword [ebp - 0x1cc]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1cc]
movsx eax, byte [ebp + edx - 0x880]
cmp ecx, eax
jne 0x10008669
mov dword [ebp - 0xcc8], 0
jmp 0x100086d8
push eax
push ebx
add esp, 4
and eax, 0x54d
jmp 0x1000867d
jmp 0x10008685
pop eax
push eax
push ecx
add esp, 4
call 0x10008697
add byte [edi + 0x3e], al
xor al, 0x42
dec eax
dec esi
add esp, 4
pop eax
mov ecx, dword [ebp - 0x774]
add ecx, dword [ebp - 0x1cc]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1cc]
movsx ecx, byte [ebp + eax - 0x880]
or ecx, 0x20
cmp edx, ecx
jge 0x100086ce
mov dword [ebp - 0xcc8], 0xffffffff
jmp 0x100086d8
mov dword [ebp - 0xcc8], 1
cmp dword [ebp - 0xcc8], 0
jne 0x100086ef
mov edx, dword [ebp - 0x1a20]
mov dword [ebp - 0x50c], edx
jmp 0x10008700
jmp 0x100084d9
mov eax, dword [ebp - 0x778]
mov dword [ebp - 0x50c], eax
mov ecx, dword [ebp - 0x50c]
mov dword [ebp - 0x7a4], ecx
push edi
push edi
add esp, 4
or edi, 0x217d
call 0x10008723
add byte [edi + 0x45], cl
inc esp
inc ecx
xor eax, 0x4c4833b
jmp 0x1000872b
or edi, 0x1e39
pop edi
push esi
push esi
add esp, 4
add esi, 0x847a
pop esi
mov edx, dword [ebp - 0x3fc]
add edx, 0xe
mov dword [ebp - 0x1a70], edx
push eax
xor eax, 0x137db
or eax, 0x12763
add eax, 0x16aba
pop eax
push edi
add edi, 0xace7
or edi, 0xd0ff
call 0x1000877b
add byte [esi + 0x34], al
dec edx
dec ebp
xor eax, 0xc4833345
add al, 0x5f
cmp dword [ebp - 0x3fc], 0
je 0x10008791
cmp dword [ebp - 0xad8], 0
jne 0x100087d7
push ecx
or ecx, 0xbe75
pop ecx
push ebx
push ebx
add esp, 4
add ebx, 0x528c
xor ebx, 0xb747
xor ebx, 0xff75
add ebx, 0xa1a5
pop ebx
push esi
push edx
add esp, 4
or esi, 0x10d57
pop esi
mov eax, dword [ebp - 0x7a4]
mov dword [ebp - 0x1a24], eax
push 0
call dword [ebp - 0x1a24]
mov dword [ebp - 0x20bc], 0xa
push eax
push edi
add esp, 4
xor eax, 0xddbf
add eax, 0xa5b8
pop eax
push edi
call 0x10008803
add byte [ebx + 0x49], cl
dec edx
dec ebx
inc edi
inc ebx
dec ecx
xor eax, 0x4c4834e
or edi, 0x7d35
or edi, 0x1bd4
pop edi
mov ecx, dword [ebp - 0x3fc]
invalid
push ecx
Function at 0x10008723
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x770]
add eax, 1
mov dword [ebp - 0x770], eax
mov ecx, dword [ebp - 0x76c]
mov edx, dword [ebp - 0x770]
cmp edx, dword [ecx + 0x18]
jae 0x100086f4
mov eax, dword [ebp - 0x770]
mov ecx, dword [ebp - 0x1a14]
mov edx, dword [ebp - 0x338]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x774], edx
mov eax, dword [ebp - 0x770]
mov ecx, dword [ebp - 0x1a18]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1a1c]
mov ecx, dword [ebp - 0x338]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x1a20], ecx
mov dword [ebp - 0x1cc], 0
jmp 0x10008558
sub eax, 0xd957
and eax, 0xf604
pop eax
push eax
push edi
add esp, 4
or eax, 0xb3e4
add eax, 0x5778
push edi
add byte [eax], al
call 0x10008638
add byte [eax + 0x4e], al
aaa
dec edx
inc edi
cmp al, 0x4d
dec ecx
inc esp
add esp, 4
pop eax
mov eax, dword [ebp - 0x774]
add eax, dword [ebp - 0x1cc]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1cc]
movsx eax, byte [ebp + edx - 0x880]
cmp ecx, eax
jne 0x10008669
mov dword [ebp - 0xcc8], 0
jmp 0x100086d8
push eax
push ebx
add esp, 4
and eax, 0x54d
jmp 0x1000867d
jmp 0x10008685
pop eax
push eax
push ecx
add esp, 4
call 0x10008697
add byte [edi + 0x3e], al
xor al, 0x42
dec eax
dec esi
add esp, 4
pop eax
mov ecx, dword [ebp - 0x774]
add ecx, dword [ebp - 0x1cc]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1cc]
movsx ecx, byte [ebp + eax - 0x880]
or ecx, 0x20
cmp edx, ecx
jge 0x100086ce
mov dword [ebp - 0xcc8], 0xffffffff
jmp 0x100086d8
mov dword [ebp - 0xcc8], 1
cmp dword [ebp - 0xcc8], 0
jne 0x100086ef
mov edx, dword [ebp - 0x1a20]
mov dword [ebp - 0x50c], edx
jmp 0x10008700
jmp 0x100084d9
mov eax, dword [ebp - 0x778]
mov dword [ebp - 0x50c], eax
mov ecx, dword [ebp - 0x50c]
mov dword [ebp - 0x7a4], ecx
push edi
push edi
add esp, 4
or edi, 0x217d
call 0x10008723
add byte [edi + 0x45], cl
inc esp
inc ecx
xor eax, 0x4c4833b
jmp 0x1000872b
or edi, 0x1e39
pop edi
push esi
push esi
add esp, 4
add esi, 0x847a
pop esi
mov edx, dword [ebp - 0x3fc]
add edx, 0xe
mov dword [ebp - 0x1a70], edx
push eax
xor eax, 0x137db
or eax, 0x12763
add eax, 0x16aba
pop eax
push edi
add edi, 0xace7
or edi, 0xd0ff
call 0x1000877b
add byte [esi + 0x34], al
dec edx
dec ebp
xor eax, 0xc4833345
add al, 0x5f
cmp dword [ebp - 0x3fc], 0
je 0x10008791
cmp dword [ebp - 0xad8], 0
jne 0x100087d7
push ecx
or ecx, 0xbe75
pop ecx
push ebx
push ebx
add esp, 4
add ebx, 0x528c
xor ebx, 0xb747
xor ebx, 0xff75
add ebx, 0xa1a5
pop ebx
push esi
push edx
add esp, 4
or esi, 0x10d57
pop esi
mov eax, dword [ebp - 0x7a4]
mov dword [ebp - 0x1a24], eax
push 0
call dword [ebp - 0x1a24]
mov dword [ebp - 0x20bc], 0xa
push eax
push edi
add esp, 4
xor eax, 0xddbf
add eax, 0xa5b8
pop eax
push edi
call 0x10008803
add byte [ebx + 0x49], cl
dec edx
dec ebx
inc edi
inc ebx
dec ecx
xor eax, 0x4c4834e
or edi, 0x7d35
or edi, 0x1bd4
pop edi
mov ecx, dword [ebp - 0x3fc]
invalid
push ecx
Function at 0x1000877b
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x770]
add eax, 1
mov dword [ebp - 0x770], eax
mov ecx, dword [ebp - 0x76c]
mov edx, dword [ebp - 0x770]
cmp edx, dword [ecx + 0x18]
jae 0x100086f4
mov eax, dword [ebp - 0x770]
mov ecx, dword [ebp - 0x1a14]
mov edx, dword [ebp - 0x338]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x774], edx
mov eax, dword [ebp - 0x770]
mov ecx, dword [ebp - 0x1a18]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1a1c]
mov ecx, dword [ebp - 0x338]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x1a20], ecx
mov dword [ebp - 0x1cc], 0
jmp 0x10008558
sub eax, 0xd957
and eax, 0xf604
pop eax
push eax
push edi
add esp, 4
or eax, 0xb3e4
add eax, 0x5778
push edi
add byte [eax], al
call 0x10008638
add byte [eax + 0x4e], al
aaa
dec edx
inc edi
cmp al, 0x4d
dec ecx
inc esp
add esp, 4
pop eax
mov eax, dword [ebp - 0x774]
add eax, dword [ebp - 0x1cc]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1cc]
movsx eax, byte [ebp + edx - 0x880]
cmp ecx, eax
jne 0x10008669
mov dword [ebp - 0xcc8], 0
jmp 0x100086d8
push eax
push ebx
add esp, 4
and eax, 0x54d
jmp 0x1000867d
jmp 0x10008685
pop eax
push eax
push ecx
add esp, 4
call 0x10008697
add byte [edi + 0x3e], al
xor al, 0x42
dec eax
dec esi
add esp, 4
pop eax
mov ecx, dword [ebp - 0x774]
add ecx, dword [ebp - 0x1cc]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1cc]
movsx ecx, byte [ebp + eax - 0x880]
or ecx, 0x20
cmp edx, ecx
jge 0x100086ce
mov dword [ebp - 0xcc8], 0xffffffff
jmp 0x100086d8
mov dword [ebp - 0xcc8], 1
cmp dword [ebp - 0xcc8], 0
jne 0x100086ef
mov edx, dword [ebp - 0x1a20]
mov dword [ebp - 0x50c], edx
jmp 0x10008700
jmp 0x100084d9
mov eax, dword [ebp - 0x778]
mov dword [ebp - 0x50c], eax
mov ecx, dword [ebp - 0x50c]
mov dword [ebp - 0x7a4], ecx
push edi
push edi
add esp, 4
or edi, 0x217d
call 0x10008723
add byte [edi + 0x45], cl
inc esp
inc ecx
xor eax, 0x4c4833b
jmp 0x1000872b
or edi, 0x1e39
pop edi
push esi
push esi
add esp, 4
add esi, 0x847a
pop esi
mov edx, dword [ebp - 0x3fc]
add edx, 0xe
mov dword [ebp - 0x1a70], edx
push eax
xor eax, 0x137db
or eax, 0x12763
add eax, 0x16aba
pop eax
push edi
add edi, 0xace7
or edi, 0xd0ff
call 0x1000877b
add byte [esi + 0x34], al
dec edx
dec ebp
xor eax, 0xc4833345
add al, 0x5f
cmp dword [ebp - 0x3fc], 0
je 0x10008791
cmp dword [ebp - 0xad8], 0
jne 0x100087d7
push ecx
or ecx, 0xbe75
pop ecx
push ebx
push ebx
add esp, 4
add ebx, 0x528c
xor ebx, 0xb747
xor ebx, 0xff75
add ebx, 0xa1a5
pop ebx
push esi
push edx
add esp, 4
or esi, 0x10d57
pop esi
mov eax, dword [ebp - 0x7a4]
mov dword [ebp - 0x1a24], eax
push 0
call dword [ebp - 0x1a24]
mov dword [ebp - 0x20bc], 0xa
push eax
push edi
add esp, 4
xor eax, 0xddbf
add eax, 0xa5b8
pop eax
push edi
call 0x10008803
add byte [ebx + 0x49], cl
dec edx
dec ebx
inc edi
inc ebx
dec ecx
xor eax, 0x4c4834e
or edi, 0x7d35
or edi, 0x1bd4
pop edi
mov ecx, dword [ebp - 0x3fc]
invalid
push ecx
Function at 0x10008803
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x770]
add eax, 1
mov dword [ebp - 0x770], eax
mov ecx, dword [ebp - 0x76c]
mov edx, dword [ebp - 0x770]
cmp edx, dword [ecx + 0x18]
jae 0x100086f4
mov eax, dword [ebp - 0x770]
mov ecx, dword [ebp - 0x1a14]
mov edx, dword [ebp - 0x338]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x774], edx
mov eax, dword [ebp - 0x770]
mov ecx, dword [ebp - 0x1a18]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1a1c]
mov ecx, dword [ebp - 0x338]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x1a20], ecx
mov dword [ebp - 0x1cc], 0
jmp 0x10008558
sub eax, 0xd957
and eax, 0xf604
pop eax
push eax
push edi
add esp, 4
or eax, 0xb3e4
add eax, 0x5778
push edi
add byte [eax], al
call 0x10008638
add byte [eax + 0x4e], al
aaa
dec edx
inc edi
cmp al, 0x4d
dec ecx
inc esp
add esp, 4
pop eax
mov eax, dword [ebp - 0x774]
add eax, dword [ebp - 0x1cc]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1cc]
movsx eax, byte [ebp + edx - 0x880]
cmp ecx, eax
jne 0x10008669
mov dword [ebp - 0xcc8], 0
jmp 0x100086d8
push eax
push ebx
add esp, 4
and eax, 0x54d
jmp 0x1000867d
jmp 0x10008685
pop eax
push eax
push ecx
add esp, 4
call 0x10008697
add byte [edi + 0x3e], al
xor al, 0x42
dec eax
dec esi
add esp, 4
pop eax
mov ecx, dword [ebp - 0x774]
add ecx, dword [ebp - 0x1cc]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1cc]
movsx ecx, byte [ebp + eax - 0x880]
or ecx, 0x20
cmp edx, ecx
jge 0x100086ce
mov dword [ebp - 0xcc8], 0xffffffff
jmp 0x100086d8
mov dword [ebp - 0xcc8], 1
cmp dword [ebp - 0xcc8], 0
jne 0x100086ef
mov edx, dword [ebp - 0x1a20]
mov dword [ebp - 0x50c], edx
jmp 0x10008700
jmp 0x100084d9
mov eax, dword [ebp - 0x778]
mov dword [ebp - 0x50c], eax
mov ecx, dword [ebp - 0x50c]
mov dword [ebp - 0x7a4], ecx
push edi
push edi
add esp, 4
or edi, 0x217d
call 0x10008723
add byte [edi + 0x45], cl
inc esp
inc ecx
xor eax, 0x4c4833b
jmp 0x1000872b
or edi, 0x1e39
pop edi
push esi
push esi
add esp, 4
add esi, 0x847a
pop esi
mov edx, dword [ebp - 0x3fc]
add edx, 0xe
mov dword [ebp - 0x1a70], edx
push eax
xor eax, 0x137db
or eax, 0x12763
add eax, 0x16aba
pop eax
push edi
add edi, 0xace7
or edi, 0xd0ff
call 0x1000877b
add byte [esi + 0x34], al
dec edx
dec ebp
xor eax, 0xc4833345
add al, 0x5f
cmp dword [ebp - 0x3fc], 0
je 0x10008791
cmp dword [ebp - 0xad8], 0
jne 0x100087d7
push ecx
or ecx, 0xbe75
pop ecx
push ebx
push ebx
add esp, 4
add ebx, 0x528c
xor ebx, 0xb747
xor ebx, 0xff75
add ebx, 0xa1a5
pop ebx
push esi
push edx
add esp, 4
or esi, 0x10d57
pop esi
mov eax, dword [ebp - 0x7a4]
mov dword [ebp - 0x1a24], eax
push 0
call dword [ebp - 0x1a24]
mov dword [ebp - 0x20bc], 0xa
push eax
push edi
add esp, 4
xor eax, 0xddbf
add eax, 0xa5b8
pop eax
push edi
call 0x10008803
add byte [ebx + 0x49], cl
dec edx
dec ebx
inc edi
inc ebx
dec ecx
xor eax, 0x4c4834e
or edi, 0x7d35
or edi, 0x1bd4
pop edi
mov ecx, dword [ebp - 0x3fc]
invalid
push ecx