joyce8/EMBER2024-capa huggingface dataset:
Function at 0x47bb94
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x28
push ebp
push esi
mov esi, ecx
xor ebp, ebp
push edi
cmp dword [esi + 0x78], ebp
je 0x47bd4d
push ebx
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], ebp
mov dword [esp + 0x28], ebp
mov dword [esp + 0x2c], 1
mov dword [esp + 0x30], ebp
mov dword [esp + 0x34], ebp
mov dword [esp + 0x14], ebp
mov dword [esp + 0x10], ebp
mov eax, dword [esi + 0x90]
cmp eax, ebp
je 0x47bcc6
mov ecx, dword [esi + 0x94]
sub ecx, eax
mov eax, dword [esp + 0x14]
sar ecx, 4
cmp eax, ecx
jae 0x47bcc6
xor ebx, ebx
mov edx, dword [esi + 0x90]
mov eax, dword [esp + 0x10]
add eax, edx
mov ecx, dword [eax + 4]
cmp ecx, ebp
je 0x47bcad
mov edx, dword [eax + 8]
sub edx, ecx
sar edx, 2
cmp ebx, edx
jae 0x47bcad
mov eax, ecx
mov ecx, esi
mov edi, dword [eax + ebx*4]
push edi
call fcn.0047ce00
mov ebp, eax
test ebp, ebp
je 0x47bca5
push ebp
mov ecx, esi
call fcn.0047e2b0
test eax, eax
je 0x47bca5
mov edx, dword [esi + 0x74]
cmp edi, edx
je 0x47bca5
mov eax, dword [esp + 0x10]
xor ecx, ecx
test ebx, ebx
sete cl
mov dword [esp + 0x24], ecx
mov ecx, dword [esi + 0x90]
add eax, ecx
mov ecx, dword [eax + 4]
test ecx, ecx
jne 0x47bc66
xor eax, eax
jmp 0x47bc6e
mov eax, dword [eax + 8]
sub eax, ecx
sar eax, 2
dec eax
xor ecx, ecx
cmp ebx, eax
lea eax, [edi + 1]
sete cl
mov dword [esp + 0x28], ecx
xor ecx, ecx
cmp eax, edx
sete cl
dec edi
mov dword [esp + 0x30], ecx
xor eax, eax
cmp edi, edx
mov edx, dword [esp + 0x3c]
lea ecx, [esp + 0x18]
sete al
push ecx
push edx
mov ecx, ebp
mov dword [esp + 0x3c], eax
call fcn.0047ec50
inc ebx
xor ebp, ebp
jmp 0x47bbf7
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
inc ecx
add eax, 0x10
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], eax
jmp 0x47bbd0
mov eax, dword [esi + 0x74]
mov ecx, esi
push eax
call fcn.0047d110
test eax, eax
pop ebx
je 0x47bd4d
mov ecx, dword [esi + 0x74]
push ecx
mov ecx, esi
call fcn.0047ce00
mov edi, eax
cmp edi, ebp
je 0x47bd4d
push edi
mov ecx, esi
call fcn.0047e2b0
test eax, eax
je 0x47bd4d
mov eax, 1
lea edx, [esi + 0x1f8]
mov dword [esp + 0x28], eax
mov dword [esp + 0x18], eax
mov eax, dword [esi + 0x74]
mov ecx, esi
push eax
mov dword [esp + 0x18], ebp
mov dword [esp + 0x24], ebp
mov dword [esp + 0x28], ebp
mov dword [esp + 0x30], ebp
mov dword [esp + 0x34], ebp
mov dword [esp + 0x20], edx
call fcn.0047d350
mov ecx, dword [esi + 0x74]
mov dword [esp + 0x20], eax
push ecx
mov ecx, esi
call fcn.0047d3c0
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x38]
lea edx, [esp + 0x14]
mov ecx, edi
push edx
push eax
call fcn.0047ec50
pop edi
pop esi
pop ebp
add esp, 0x28
ret 4
Function at 0x480ff0
Capabilities:
Check http status code

Disassembly:
push esi
mov esi, ecx
push edi
lea edi, [esi + 0xa0]
test edi, edi
je 0x481031
mov eax, dword [edi + 4]
test eax, eax
je 0x481031
mov eax, dword [esi + 0xb8]
test eax, eax
je 0x48102a
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x48102a
test eax, eax
je 0x48101d
mov eax, dword [eax + 4]
push eax
mov eax, dword [esi + 0xa4]
push eax
call fcn.004b7f2c
mov ecx, edi
call fcn.004b7e53
lea ecx, [esi + 0xb0]
pop edi
test ecx, ecx
pop esi
je 0x481049
mov eax, dword [ecx + 4]
test eax, eax
je 0x481049
jmp fcn.004b8982
ret
Function at 0x49f64a
Capabilities:
Get number of processors

Disassembly:
popal
dec esp
imul esi, dword [ebx + 0x74], 0x4d4f4340
dec ecx
dec ebp
push eax
dec esp
inc eax
inc eax
and al, 0x31
aas
inc ebx
dec esp
push ebx
dec ecx
inc esp
pop edi
inc esp
push ebp
dec ecx
dec ecx
insd dword es:[edi], dx
popal
dec esp
imul esi, dword [ebx + 0x74], 0x55334040
pop edi
inc edi
push ebp
dec ecx
inc esp
inc eax
inc eax
inc edx
inc eax
inc ecx
push esp
dec esp
inc eax
inc eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax + 0x1800d6e], ch
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [esi], ch
aas
inc ecx
push esi
inc ebx
inc esp
push ebp
dec ecx
dec ecx
insd dword es:[edi], dx
popal
dec esp
imul esi, dword [ebx + 0x74], 0x4d4f4340
dec ecx
dec ebp
push eax
dec esp
inc eax
inc eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax + 0x1800d6e], ch
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [esi], ch
aas
inc ecx
push esi
aas
and al, 0x43
inc ebx
outsd dx, dword [esi]
insd dword es:[edi], dx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x56], si
inc ebx
inc esp
push ebp
dec ecx
dec ecx
insd dword es:[edi], dx
popal
dec esp
imul esi, dword [ebx + 0x74], 0x4d4f4340
dec ecx
dec ebp
push eax
dec esp
inc eax
inc eax
inc eax
inc ecx
push esp
dec esp
inc eax
inc eax
add byte [eax + 0x1800d6e], ch
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [esi], ch
aas
inc ecx
push esi
aas
and al, 0x43
inc ebx
outsd dx, dword [esi]
insd dword es:[edi], dx
inc ecx
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax*2 + 0x56], si
inc ebx
inc esp
push ebp
dec ecx
dec ecx
insd dword es:[edi], dx
popal
inc edx
popal
jae 0x49f798
inc ebx
outsd dx, dword [esi]
insd dword es:[edi], dx
inc eax
inc ebx
dec edi
dec ebp
dec ecx
dec ebp
push eax
dec esp
inc eax
inc eax
inc eax
inc ecx
push esp
dec esp
inc eax
inc eax
add byte [eax], al
add byte [eax + 0x1800d6e], ch
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [esi], ch
aas
inc ecx
push ebp
dec ecx
inc esp
push ebp
dec ecx
dec ecx
insd dword es:[edi], dx
popal
inc edx
popal
jae 0x49f7cf
inc eax
inc eax
add byte [eax], al
add byte [eax], al
add byte [eax + 0x1800d6e], ch
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [esi], ch
aas
inc ecx
push esi
aas
and al, 0x49
Function at 0x49fcd6
Capabilities:
Get number of processors

Disassembly:
inc eax
inc eax
inc eax
pop edx
push ebp
aas
and al, 0x6c
jae 0x49fd54
inc eax
dec edx
inc eax
jae 0x49fd5a
inc eax
inc eax
push esi
aas
and al, 0x61
insb byte es:[edi], dx
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [ecx + 0x74], sp
outsd dx, dword [esi]
jb 0x49fd36
push ebp
aas
and al, 0x70
popal
imul esi, dword [edx + 0x40], 0x42432424
dec edx
push eax
inc ecx
dec edx
push eax
inc ebp
inc ecx
push eax
inc ebp
inc ecx
push ebp
dec ecx
inc esp
imul esi, dword [ebx + 0x70], 0x68637461
inc eax
inc eax
inc eax
pop edx
inc eax
jae 0x49fd92
inc eax
inc eax
inc eax
xor eax, dword [eax + 0x24]
xor byte [ecx + 0x40], al
inc eax
jae 0x49fd9f
inc eax
inc eax
inc eax
jae 0x49fda5
inc eax
inc eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax + 0x1800d6e], ch
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [esi], ch
aas
inc ecx
push esi
aas
and al, 0x5f
push esp
jb 0x49fdc0
pop edi
pop edi
jbe 0x49fdc0
insb byte es:[edi], dx
inc eax
push esi
aas
and al, 0x5f
push esp
insd dword es:[edi], dx
popal
jo 0x49fdc9
je 0x49fdde
popal
imul esi, dword [ebx + esi*2 + 0x40], 0x4136504a
dec edx
push eax
inc ebp
inc ecx
push eax
inc ebp
inc ecx
push ebp
dec ecx
inc esp
imul esi, dword [ebx + 0x70], 0x68637461
inc eax
inc eax
inc eax
pop edx
push ebp
aas
and al, 0x6c
jae 0x49fe04
inc eax
dec edx
inc eax
jae 0x49fe0a
inc eax
inc eax
push esi
aas
and al, 0x61
insb byte es:[edi], dx
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [ecx + 0x74], sp
outsd dx, dword [esi]
jb 0x49fde6
inc eax
push ebp
aas
and al, 0x70
popal
imul esi, dword [edx + 0x40], 0x42432424
dec edx
push eax
inc ecx
dec edx
push eax
inc eax
Function at 0x49fdb8
Capabilities:
Get number of processors

Disassembly:
inc ebp
inc ecx
push eax
inc ebp
inc ecx
push ebp
dec ecx
inc esp
imul esi, dword [ebx + 0x70], 0x68637461
inc eax
inc eax
inc eax
pop edx
inc eax
jae 0x49fe42
inc eax
inc eax
inc eax
xor eax, dword [eax + 0x24]
xor byte [ecx + 0x40], al
inc eax
jae 0x49fe4f
inc eax
inc eax
inc eax
jae 0x49fe55
inc eax
inc eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax + 0x1800d6e], ch
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [esi], ch
aas
inc ecx
push esi
aas
and al, 0x5f
push esp
jb 0x49fe70
inc eax
push esi
aas
and al, 0x5f
push esp
insd dword es:[edi], dx
popal
jo 0x49fe75
je 0x49fe8a
popal
imul esi, dword [ebx + esi*2 + 0x40], 0x4136504a
dec edx
push eax
inc ebp
inc ecx
push eax
inc ebp
inc ecx
push ebp
dec ecx
inc esp
imul esi, dword [ebx + 0x70], 0x68637461
inc eax
inc eax
inc eax
pop edx
push ebp
aas
and al, 0x6c
jae 0x49feb0
inc eax
dec edx
inc eax
jae 0x49feb6
inc eax
inc eax
push esi
aas
and al, 0x61
insb byte es:[edi], dx
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [ecx + 0x74], sp
outsd dx, dword [esi]
jb 0x49fe92
push ebp
aas
and al, 0x70
popal
jo 0x49feb8
imul esi, dword [edx + 0x40], 0x42432424
dec edx
push eax
inc ecx
dec edx
push eax
inc ebp
inc ecx
push eax
inc ebp
inc ecx
push ebp
dec ecx
inc esp
imul esi, dword [ebx + 0x70], 0x68637461
inc eax
inc eax
je 0x49fed5
push 0x5a404040
inc eax
pop edx
inc eax
jae 0x49feee
inc eax
inc eax
inc eax
xor eax, dword [eax + 0x24]
xor byte [ecx + 0x40], al
inc eax
jae 0x49fefb
inc eax
inc eax
inc eax
jae 0x49ff01
inc eax
inc eax
add byte [eax + 0x1800d6e], ch
add byte [eax], al
outsb dx, byte [esi]
or eax, 0x180
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [esi], ch
aas
inc ecx
push esi
aas
and al, 0x6d
popal
jo 0x49feeb
dec edx
push eax
inc ecx
dec edx
push eax
inc ebp
inc ecx
push eax
inc ebp
inc ecx
push ebp
dec ecx
inc esp
imul esi, dword [ebx + 0x70], 0x68637461
inc eax
inc eax
inc eax
pop edx
push ebp
aas
and al, 0x6c
jae 0x49ff3e
inc eax
dec edx
inc eax
jae 0x49ff44
inc eax
inc eax
push esi
aas
and al, 0x61
insb byte es:[edi], dx
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [ecx + 0x74], sp
outsd dx, dword [esi]
jb 0x49ff20
push ebp
aas
and al, 0x70
inc edx
jae 0x49ff6d
popal
je 0x49ff63
push 0x5a404040
jae 0x49ff81
popal
Function at 0x49fdc3
Capabilities:
Get number of processors

Disassembly:
inc ebp
inc ecx
push eax
inc ebp
inc ecx
push ebp
dec ecx
inc esp
imul esi, dword [ebx + 0x70], 0x68637461
inc eax
inc eax
inc eax
pop edx
inc eax
jae 0x49fe42
inc eax
inc eax
inc eax
xor eax, dword [eax + 0x24]
xor byte [ecx + 0x40], al
inc eax
jae 0x49fe4f
inc eax
inc eax
inc eax
jae 0x49fe55
inc eax
inc eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax + 0x1800d6e], ch
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [esi], ch
aas
inc ecx
push esi
aas
and al, 0x5f
push esp
jb 0x49fe70
inc eax
push esi
aas
and al, 0x5f
push esp
insd dword es:[edi], dx
popal
jo 0x49fe75
je 0x49fe8a
popal
imul esi, dword [ebx + esi*2 + 0x40], 0x4136504a
dec edx
push eax
inc ebp
inc ecx
push eax
inc ebp
inc ecx
push ebp
dec ecx
inc esp
imul esi, dword [ebx + 0x70], 0x68637461
inc eax
inc eax
inc eax
pop edx
push ebp
aas
and al, 0x6c
jae 0x49feb0
inc eax
dec edx
inc eax
jae 0x49feb6
inc eax
inc eax
push esi
aas
and al, 0x61
insb byte es:[edi], dx
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [ecx + 0x74], sp
outsd dx, dword [esi]
jb 0x49fe92
push ebp
aas
and al, 0x70
popal
jo 0x49feb8
imul esi, dword [edx + 0x40], 0x42432424
dec edx
push eax
inc ecx
dec edx
push eax
inc ebp
inc ecx
push eax
inc ebp
inc ecx
push ebp
dec ecx
inc esp
imul esi, dword [ebx + 0x70], 0x68637461
inc eax
inc eax
je 0x49fed5
push 0x5a404040
inc eax
pop edx
inc eax
jae 0x49feee
inc eax
inc eax
inc eax
xor eax, dword [eax + 0x24]
xor byte [ecx + 0x40], al
inc eax
jae 0x49fefb
inc eax
inc eax
inc eax
jae 0x49ff01
inc eax
inc eax
add byte [eax + 0x1800d6e], ch
add byte [eax], al
outsb dx, byte [esi]
or eax, 0x180
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [esi], ch
aas
inc ecx
push esi
aas
and al, 0x6d
popal
jo 0x49feeb
dec edx
push eax
inc ecx
dec edx
push eax
inc ebp
inc ecx
push eax
inc ebp
inc ecx
push ebp
dec ecx
inc esp
imul esi, dword [ebx + 0x70], 0x68637461
inc eax
inc eax
inc eax
pop edx
push ebp
aas
and al, 0x6c
jae 0x49ff3e
inc eax
dec edx
inc eax
jae 0x49ff44
inc eax
inc eax
push esi
aas
and al, 0x61
insb byte es:[edi], dx
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [ecx + 0x74], sp
outsd dx, dword [esi]
jb 0x49ff20
push ebp
aas
and al, 0x70
inc edx
jae 0x49ff6d
popal
je 0x49ff63
push 0x5a404040
jae 0x49ff81
popal
Function at 0x4a02a0
Capabilities:
Get number of processors

Disassembly:
popal
jns 0x4a0308
jb 0x4a02ec
jb 0x4a0308
jo 0x4a0311
imul esp, dword [ebx + 0x73], 0x6e657645
outsb dx, byte [esi]
dec edi
bound ebp, qword [edx + 0x65]

Function at 0x4a07a0
Capabilities:
Get number of processors

Disassembly:
add byte [esi], ch
aas
inc ecx
push esi
aas
and al, 0x49
inc esp
imul esi, dword [ebx + 0x70], 0x68637461
dec ecx
insd dword es:[edi], dx
jo 0x4a0820
inc eax
push ebp
dec ecx
inc esp
push ebp
dec ecx
push edx
arpl word gs:[eax + eax*2 + 0x40], si
and al, 0x31
aas
dec ecx
dec ecx
inc esp
pop edi
dec ecx
inc esp
push ebp
dec ecx
push edx
arpl word gs:[eax + eax*2 + 0x40], si
inc eax
inc eax
xor edx, dword [ebp + 0x5f]
inc edi
push ebp
dec ecx
inc esp
inc eax
inc eax
inc edx
and al, 0x31
aas
dec esp
dec ecx
inc edx
dec ecx
inc esp
pop edi
inc esp
imul esi, dword [edx + 0x65], 0x49557463
inc ebx
outsd dx, dword [esi]
insd dword es:[edi], dx
dec esp
imul esp, dword [edx + 0x40], 0x33553340
inc eax
inc edx
and al, 0x30
xor ah, byte [eax + esi]
inc ecx
inc eax
push esi
inc ebx
inc ebx
outsd dx, dword [esi]
insd dword es:[edi], dx
push esp
jns 0x4a0878
dec ecx
outsb dx, byte [esi]
outsw dx, word [esi]
dec eax
outsd dx, dword [esi]
insb byte es:[edi], dx
jb 0x4a0854
inc ecx
push esp
dec esp
inc eax
inc eax
inc eax
inc ecx
push esp
dec esp
inc eax
inc eax
add byte [eax], al
test al, 0x6e
or eax, 0x180
add byte [eax + 0x1800d6e], ch
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [esi], ch
aas
inc ecx
push esi
aas
and al, 0x5f
dec ecx
inc ebx
push eax
dec esp
outsd dx, dword [esi]
arpl word [ecx + 0x74], sp
outsd dx, dword [esi]
jb 0x4a0883
and al, 0x31
aas
pop edi
inc edi
push ebp
dec ecx
inc esp
pop edi
aaa
cmp dword [esi], esi
arpl word [esi], si
xor esp, dword [edx + 0x5f]
pop edi
arpl word fs:[0x6332345f], si
cmp dword [edi + 0x38], ebx
cmp dword [ebx + 0x63], esp
pop edi
xor eax, 0x37386332
xor byte [edi], dh
xor eax, 0x66313063
inc eax
inc eax
xor edx, dword [ebp + 0x5f]
pop edi
jae 0x4a08d7
inc edi
push ebp
dec ecx
inc esp
inc eax
inc eax
inc edx
inc eax
inc ecx
push esp
dec esp
inc eax
inc eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
test al, 0x6e
or eax, 0x180
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [esi], ch
aas
inc ecx
push esi
aas
and al, 0x49
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
outsb dx, byte [esi]
arpl word gs:[ecx + ebp*2 + 0x6f], si
outsb dx, byte [esi]
push eax
outsd dx, dword [esi]
imul ebp, dword [esi + 0x74], 0x6c706d49
inc eax
push esi
inc ebx
inc esp
push ebp
bound ebx, qword [edi + 0x64]
arpl word [0x6332345f], si
Function at 0x4a07cf
Capabilities:
Get number of processors

Disassembly:
add byte [esi], ch
aas
inc ecx
push esi
aas
and al, 0x49
inc esp
imul esi, dword [ebx + 0x70], 0x68637461
dec ecx
insd dword es:[edi], dx
jo 0x4a0820
inc eax
push ebp
dec ecx
inc esp
push ebp
dec ecx
push edx
arpl word gs:[eax + eax*2 + 0x40], si
and al, 0x31
aas
dec ecx
dec ecx
inc esp
pop edi
dec ecx
inc esp
push ebp
dec ecx
push edx
arpl word gs:[eax + eax*2 + 0x40], si
inc eax
inc eax
xor edx, dword [ebp + 0x5f]
inc edi
push ebp
dec ecx
inc esp
inc eax
inc eax
inc edx
and al, 0x31
aas
dec esp
dec ecx
inc edx
dec ecx
inc esp
pop edi
inc esp
imul esi, dword [edx + 0x65], 0x49557463
inc ebx
outsd dx, dword [esi]
insd dword es:[edi], dx
dec esp
imul esp, dword [edx + 0x40], 0x33553340
inc eax
inc edx
and al, 0x30
xor ah, byte [eax + esi]
inc ecx
inc eax
push esi
inc ebx
inc ebx
outsd dx, dword [esi]
insd dword es:[edi], dx
push esp
jns 0x4a0878
dec ecx
outsb dx, byte [esi]
outsw dx, word [esi]
dec eax
outsd dx, dword [esi]
insb byte es:[edi], dx
jb 0x4a0854
inc ecx
push esp
dec esp
inc eax
inc eax
inc eax
inc ecx
push esp
dec esp
inc eax
inc eax
add byte [eax], al
test al, 0x6e
or eax, 0x180
add byte [eax + 0x1800d6e], ch
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [esi], ch
aas
inc ecx
push esi
aas
and al, 0x5f
dec ecx
inc ebx
push eax
dec esp
outsd dx, dword [esi]
arpl word [ecx + 0x74], sp
outsd dx, dword [esi]
jb 0x4a0883
and al, 0x31
aas
pop edi
inc edi
push ebp
dec ecx
inc esp
pop edi
aaa
cmp dword [esi], esi
arpl word [esi], si
xor esp, dword [edx + 0x5f]
pop edi
arpl word fs:[0x6332345f], si
cmp dword [edi + 0x38], ebx
cmp dword [ebx + 0x63], esp
pop edi
xor eax, 0x37386332
xor byte [edi], dh
xor eax, 0x66313063
inc eax
inc eax
xor edx, dword [ebp + 0x5f]
pop edi
jae 0x4a08d7
inc edi
push ebp
dec ecx
inc esp
inc eax
inc eax
inc edx
inc eax
inc ecx
push esp
dec esp
inc eax
inc eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
test al, 0x6e
or eax, 0x180
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [esi], ch
aas
inc ecx
push esi
aas
and al, 0x49
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
outsb dx, byte [esi]
arpl word gs:[ecx + ebp*2 + 0x6f], si
outsb dx, byte [esi]
push eax
outsd dx, dword [esi]
imul ebp, dword [esi + 0x74], 0x6c706d49
inc eax
push esi
inc ebx
inc esp
push ebp
bound ebx, qword [edi + 0x64]
arpl word [0x6332345f], si
Function at 0x4a09be
Capabilities:
Get number of processors

Disassembly:
add byte [eax], al
add byte [eax + 0x1800d6e], ch
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [esi], ch
aas

Function at 0x4a0dbf
Capabilities:
Get number of processors

Disassembly:
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
aas

Function at 0x4a1050
Capabilities:
Get number of processors

Disassembly:
imul ebp, dword [esi + 0x65], 0x6a624f64
arpl word gs:[eax + eax*2 + 0x56], si

Function at 0x4a11ce
Capabilities:
Get number of processors

Disassembly:
add byte [eax], al
add byte [esi], ch
aas
inc ecx
push esi
aas
and al, 0x43
inc ebx
outsd dx, dword [esi]
insd dword es:[edi], dx
inc ebx
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0x4a1241
imul ebp, dword [esi + 0x65], 0x6a624f64
arpl word gs:[eax + eax*2 + 0x56], si
inc ebx
inc esp
push ebp
dec ecx
push edx

Function at 0x4a1451
Capabilities:
Get number of processors

Disassembly:
push esp
dec esp
inc eax
inc eax
add byte [eax], al
add byte [eax], al
test al, 0x6e
or eax, 0x180
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [esi], ch

Function at 0x4ae012
Capabilities:
Encode data using xor

Disassembly:
jecxz 0x4ae024
add byte [eax - 0x2cfffd5f], ah
mov eax, dword [0xe1bc0002]
adc byte [eax], al
invalid
add byte [edi], al
mov byte [0x4ad80002], al
adc al, byte [eax]
pushal
movsd dword es:[edi], dword [esi]
add al, byte [eax]
test byte [ebp - 0x1e27fffe], ah
fsub st(1)
adc byte [eax], al
xor byte [ecx - 0x5692fffe], ch
add al, byte [eax]
fsub st(1)
adc byte [eax], al
shr byte [ecx - 0x55bcfffe], 1
add al, byte [eax]
sbb bl, ah
adc byte [eax], al
push eax
stosb byte es:[edi], al
add al, byte [eax]
cmpsb byte [esi], byte es:[edi]
stosb byte es:[edi], al
add al, byte [eax]
mov esp, 0xb00010e1
stosb byte es:[edi], al
add al, byte [eax]
in eax, dx
stosb byte es:[edi], al
add al, byte [eax]
fsub st(1)
adc byte [eax], al
adc byte [ebx - 0x5455fffe], ch
add al, byte [eax]
mov ah, 0xe1
adc byte [eax], al
mov al, 0xab
add al, byte [eax]
inc ecx
lodsb al, byte [esi]
add al, byte [eax]
mov ah, 0xe1
adc byte [eax], al
push eax
scasb al, byte es:[edi]
add al, byte [eax]
je 0x4ae035
add al, byte [eax]
fsub st(1)
adc byte [eax], al
sub byte [esi - 0x5137fffe], 2
add byte [ecx - 0x512ffff0], bh
loope 0x4ae0a8
add al, dl
scasb al, byte es:[edi]
Function at 0x4b7e69
Capabilities:
Encode data using xor

Disassembly:
cdq
or al, 0
wait
or al, 0
or byte [0x9b700011], bh
or al, 0
push es
popfd
or al, 0
xor byte [edi], cl
adc dword [eax], eax
adc byte [ebp - 0x62d7fff4], bl
or al, 0
xchg esp, eax
or byte [edx], dl
add byte [eax], dh
popfd
or al, 0
dec ebx
popfd
or al, 0
xchg esp, eax
or byte [edx], dl
add byte [eax - 0x63], dl
or al, 0
pushal
sahf
or al, 0
clc
cld
adc byte [eax], al
pushal
sahf
or al, 0
push es
lahf
or al, 0
in al, 0xfc
adc byte [eax], al
push es
lahf
or al, 0
and byte [edi - 0x32bfff4], bl
adc byte [eax], al
and byte [edi - 0x6020fff4], bl
or al, 0
fsub st(1)
adc byte [eax], al
loopne 0x4b7e56
or al, 0
sbb esp, dword [eax - 0x5553fff4]
lodsb al, byte [esi]
stosb byte es:[edi], al
adc dword [eax], eax
and byte [eax - 0x5fa4fff4], ah
or al, 0
lodsb al, byte [esi]
stosb byte es:[edi], al
adc dword [eax], eax
pushal
mov al, byte [0xa279000c]
or al, 0
push eax
jle 0x4b7ee9
add byte [eax - 0x63fff35e], al
mov byte [0x894000c], al
adc al, byte [eax]
mov al, byte [0xbc000ca2]
mov byte [0x894000c], al
or byte [edx], dl
add al, al
mov byte [0xa2df000c], al
or al, 0
xchg esp, eax
or byte [edx], dl
add al, ah
mov byte [0xa2ff000c], al
or al, 0
xchg esp, eax
invalid
mov esp, 0x94000ca2

Function at 0x4b8737
Capabilities:
Check http status code

Disassembly:
prefetch byte fs:[eax]
in al, 0xf
or eax, 0x10e40000
add ah, ah
prefetch byte [eax]
test byte [edi], 0xd
add al, dh
jecxz 0x4b871c
add dh, dh
prefetch byte [eax]
pop ds
adc byte [0x10e3e000], cl
add byte [eax], ah
adc byte [0xd104000], cl
add byte [edx + edx + 0x12], al
add byte [eax + 0x10], al
or eax, 0x12124400
add byte [eax + 0x10], al
or eax, 0xd108000
add ah, cl
jecxz 0x4b8740
add byte [eax - 0x57fff2f0], al
adc byte [0x10e3bc00], cl
or eax, 0x10e3bc00
add byte [eax - 0x62fff2f0], dh
adc dword [0x1143f800], ecx
add byte [eax - 0x47fff2ef], ah
add byte [ebp - 0x7fff2ef], bl
inc ebx
adc dword [eax], eax
mov al, byte [0xb8000d11]
adc dword [0x12089400], ecx
add al, al
adc dword [0xd12f400], ecx
add al, ah
inc ebx
adc dword [eax], eax
add byte [ebx], dl
or eax, 0xd147100
add byte [ebp + ecx + 0x11], ah
add byte [eax - 0x67fff2ec], al
adc al, 0xd
add byte [eax + ecx + 0x14a00012], dl
or eax, 0xd14b800
add byte [eax + ecx + 0x14c00012], dl
or eax, 0xd14d800
add byte [eax + ecx + 0x14e00012], dl
or eax, 0xd14f800
add byte [eax + ecx + 0x15000012], dl
or eax, 0xd153800
add byte [eax - 0xe], dl
adc dword [eax], eax