joyce8/EMBER2024-capa huggingface dataset:
Function at 0x408e60
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov ecx, 0x65
mov word [ebp - 0xca6], cx
mov edx, 0x72
mov word [ebp - 0xca4], dx
mov eax, 0x6e
mov word [ebp - 0xca2], ax
mov ecx, 0x65
mov word [ebp - 0xca0], cx
mov edx, 0x6c
mov word [ebp - 0xc9e], dx
mov eax, 0x33
mov word [ebp - 0xc9c], ax
mov ecx, 0x32
mov word [ebp - 0xc9a], cx
mov edx, 0x2e
mov word [ebp - 0xc98], dx
mov eax, 0x64
mov word [ebp - 0xc96], ax
mov ecx, 0x6c
mov word [ebp - 0xc94], cx
mov edx, 0x6c
mov word [ebp - 0xc92], dx
xor eax, eax
mov word [ebp - 0xc90], ax
push eax
push ebx
add esp, 4
jmp 0x408da1
xor eax, 0xac61
jmp 0x408db0
sub eax, 0x10113
pop eax
push eax
add eax, 0x97f8
pop eax
push ebx
xor ebx, 0xab02
pop ebx
mov byte [ebp - 0x4c0], 0x4c
mov byte [ebp - 0x4bf], 0x6f
mov byte [ebp - 0x4be], 0x61
mov byte [ebp - 0x4bd], 0x64
mov byte [ebp - 0x4bc], 0x4c
mov byte [ebp - 0x4bb], 0x69
mov byte [ebp - 0x4ba], 0x62
mov byte [ebp - 0x4b9], 0x72
mov byte [ebp - 0x4b8], 0x61
mov byte [ebp - 0x4b7], 0x72
mov byte [ebp - 0x4b6], 0x79
mov byte [ebp - 0x4b5], 0x57
mov byte [ebp - 0x4b4], 0
mov ecx, dword fs:[0x18]
or eax, 0x18
mov dword [ebp - 0xe30], ecx
mov edx, dword [ebp - 0xe30]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xe34], eax
mov ecx, dword [ebp - 0xe34]
mov dword [ebp - 0xb60], ecx
push edi
add edi, 0xa33e
pop edi
push ecx
call 0x408e60
add byte [edx + 0x4a], cl
xor eax, 0x423c3343
add esp, 4
pop ecx
push esi
push ecx
add esp, 4
sub esi, 0x53d2
xor esi, 0x9421
sub esi, 0x767f
pop esi
cmp dword [ebp - 0xb60], 0
jne 0x408e94
mov dword [ebp - 0x3cc], 0
jmp 0x40913b
mov edx, dword [ebp - 0xb60]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x6bc], ecx
push edx
or edx, 0xcdff
pop edx
push edi
jmp 0x408eb5
jmp 0x408ebb
pop edi
push edi
add edi, 0x128fa
add edi, 0x712d
pop edi
push esi
or esi, 0x92d7
add esi, 0x6c31
pop esi
cmp dword [ebp - 0x6bc], 0
jne 0x408ef0
mov dword [ebp - 0x3cc], 0
jmp 0x40913b
mov edx, dword [ebp - 0x6bc]
mov dword [ebp - 0x258], edx
push edi
sub edi, 0x173a0
xor edi, 0xd178
call 0x408f19
add byte [ebx + 0x3f], cl
aaa
dec esi
xor eax, 0x4b34414c
dec edi
add esp, 4
call 0x408f2a
add byte [ebx], dh
push eax
cmp byte [esi + 0x3e], cl
dec eax
dec esp
aaa
add esp, 4
pop edi
lea eax, [ebp - 0xca8]
mov dword [ebp - 0x6b8], eax
mov ecx, dword [ebp - 0x258]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x6b4], edx
xor eax, eax
mov word [ebp - 0x118], ax
xor ecx, ecx
mov word [ebp - 0x2c], cx
push edi
invalid
out dx, eax
invalid
Function at 0x408f19
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov ecx, 0x65
mov word [ebp - 0xca6], cx
mov edx, 0x72
mov word [ebp - 0xca4], dx
mov eax, 0x6e
mov word [ebp - 0xca2], ax
mov ecx, 0x65
mov word [ebp - 0xca0], cx
mov edx, 0x6c
mov word [ebp - 0xc9e], dx
mov eax, 0x33
mov word [ebp - 0xc9c], ax
mov ecx, 0x32
mov word [ebp - 0xc9a], cx
mov edx, 0x2e
mov word [ebp - 0xc98], dx
mov eax, 0x64
mov word [ebp - 0xc96], ax
mov ecx, 0x6c
mov word [ebp - 0xc94], cx
mov edx, 0x6c
mov word [ebp - 0xc92], dx
xor eax, eax
mov word [ebp - 0xc90], ax
push eax
push ebx
add esp, 4
jmp 0x408da1
xor eax, 0xac61
jmp 0x408db0
sub eax, 0x10113
pop eax
push eax
add eax, 0x97f8
pop eax
push ebx
xor ebx, 0xab02
pop ebx
mov byte [ebp - 0x4c0], 0x4c
mov byte [ebp - 0x4bf], 0x6f
mov byte [ebp - 0x4be], 0x61
mov byte [ebp - 0x4bd], 0x64
mov byte [ebp - 0x4bc], 0x4c
mov byte [ebp - 0x4bb], 0x69
mov byte [ebp - 0x4ba], 0x62
mov byte [ebp - 0x4b9], 0x72
mov byte [ebp - 0x4b8], 0x61
mov byte [ebp - 0x4b7], 0x72
mov byte [ebp - 0x4b6], 0x79
mov byte [ebp - 0x4b5], 0x57
mov byte [ebp - 0x4b4], 0
mov ecx, dword fs:[0x18]
or eax, 0x18
mov dword [ebp - 0xe30], ecx
mov edx, dword [ebp - 0xe30]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xe34], eax
mov ecx, dword [ebp - 0xe34]
mov dword [ebp - 0xb60], ecx
push edi
add edi, 0xa33e
pop edi
push ecx
call 0x408e60
add byte [edx + 0x4a], cl
xor eax, 0x423c3343
add esp, 4
pop ecx
push esi
push ecx
add esp, 4
sub esi, 0x53d2
xor esi, 0x9421
sub esi, 0x767f
pop esi
cmp dword [ebp - 0xb60], 0
jne 0x408e94
mov dword [ebp - 0x3cc], 0
jmp 0x40913b
mov edx, dword [ebp - 0xb60]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x6bc], ecx
push edx
or edx, 0xcdff
pop edx
push edi
jmp 0x408eb5
jmp 0x408ebb
pop edi
push edi
add edi, 0x128fa
add edi, 0x712d
pop edi
push esi
or esi, 0x92d7
add esi, 0x6c31
pop esi
cmp dword [ebp - 0x6bc], 0
jne 0x408ef0
mov dword [ebp - 0x3cc], 0
jmp 0x40913b
mov edx, dword [ebp - 0x6bc]
mov dword [ebp - 0x258], edx
push edi
sub edi, 0x173a0
xor edi, 0xd178
call 0x408f19
add byte [ebx + 0x3f], cl
aaa
dec esi
xor eax, 0x4b34414c
dec edi
add esp, 4
call 0x408f2a
add byte [ebx], dh
push eax
cmp byte [esi + 0x3e], cl
dec eax
dec esp
aaa
add esp, 4
pop edi
lea eax, [ebp - 0xca8]
mov dword [ebp - 0x6b8], eax
mov ecx, dword [ebp - 0x258]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x6b4], edx
xor eax, eax
mov word [ebp - 0x118], ax
xor ecx, ecx
mov word [ebp - 0x2c], cx
push edi
invalid
out dx, eax
invalid
Function at 0x408f2a
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov ecx, 0x65
mov word [ebp - 0xca6], cx
mov edx, 0x72
mov word [ebp - 0xca4], dx
mov eax, 0x6e
mov word [ebp - 0xca2], ax
mov ecx, 0x65
mov word [ebp - 0xca0], cx
mov edx, 0x6c
mov word [ebp - 0xc9e], dx
mov eax, 0x33
mov word [ebp - 0xc9c], ax
mov ecx, 0x32
mov word [ebp - 0xc9a], cx
mov edx, 0x2e
mov word [ebp - 0xc98], dx
mov eax, 0x64
mov word [ebp - 0xc96], ax
mov ecx, 0x6c
mov word [ebp - 0xc94], cx
mov edx, 0x6c
mov word [ebp - 0xc92], dx
xor eax, eax
mov word [ebp - 0xc90], ax
push eax
push ebx
add esp, 4
jmp 0x408da1
xor eax, 0xac61
jmp 0x408db0
sub eax, 0x10113
pop eax
push eax
add eax, 0x97f8
pop eax
push ebx
xor ebx, 0xab02
pop ebx
mov byte [ebp - 0x4c0], 0x4c
mov byte [ebp - 0x4bf], 0x6f
mov byte [ebp - 0x4be], 0x61
mov byte [ebp - 0x4bd], 0x64
mov byte [ebp - 0x4bc], 0x4c
mov byte [ebp - 0x4bb], 0x69
mov byte [ebp - 0x4ba], 0x62
mov byte [ebp - 0x4b9], 0x72
mov byte [ebp - 0x4b8], 0x61
mov byte [ebp - 0x4b7], 0x72
mov byte [ebp - 0x4b6], 0x79
mov byte [ebp - 0x4b5], 0x57
mov byte [ebp - 0x4b4], 0
mov ecx, dword fs:[0x18]
or eax, 0x18
mov dword [ebp - 0xe30], ecx
mov edx, dword [ebp - 0xe30]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xe34], eax
mov ecx, dword [ebp - 0xe34]
mov dword [ebp - 0xb60], ecx
push edi
add edi, 0xa33e
pop edi
push ecx
call 0x408e60
add byte [edx + 0x4a], cl
xor eax, 0x423c3343
add esp, 4
pop ecx
push esi
push ecx
add esp, 4
sub esi, 0x53d2
xor esi, 0x9421
sub esi, 0x767f
pop esi
cmp dword [ebp - 0xb60], 0
jne 0x408e94
mov dword [ebp - 0x3cc], 0
jmp 0x40913b
mov edx, dword [ebp - 0xb60]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x6bc], ecx
push edx
or edx, 0xcdff
pop edx
push edi
jmp 0x408eb5
jmp 0x408ebb
pop edi
push edi
add edi, 0x128fa
add edi, 0x712d
pop edi
push esi
or esi, 0x92d7
add esi, 0x6c31
pop esi
cmp dword [ebp - 0x6bc], 0
jne 0x408ef0
mov dword [ebp - 0x3cc], 0
jmp 0x40913b
mov edx, dword [ebp - 0x6bc]
mov dword [ebp - 0x258], edx
push edi
sub edi, 0x173a0
xor edi, 0xd178
call 0x408f19
add byte [ebx + 0x3f], cl
aaa
dec esi
xor eax, 0x4b34414c
dec edi
add esp, 4
call 0x408f2a
add byte [ebx], dh
push eax
cmp byte [esi + 0x3e], cl
dec eax
dec esp
aaa
add esp, 4
pop edi
lea eax, [ebp - 0xca8]
mov dword [ebp - 0x6b8], eax
mov ecx, dword [ebp - 0x258]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x6b4], edx
xor eax, eax
mov word [ebp - 0x118], ax
xor ecx, ecx
mov word [ebp - 0x2c], cx
push edi
invalid
out dx, eax
invalid

Function at 0x408f5c
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
ret

Function at 0x409554
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ecx
add esp, 4
jmp 0x40955d
and ebx, 0x3a11
pop ebx
mov edx, dword [ebp - 0xe48]
invalid
dec dword [ecx - 0xe4b6b]
dec dword [ebp - 0xc4f7b]
call dword [eax - 1]
xchg ebp, eax
mov ah, 0xf1
invalid
invalid
test eax, eax
jne 0x4095c2
push eax
push eax
add esp, 4
add eax, 0x13567
and eax, 0x6c60
add byte [eax], al
Function at 0x4095ea
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [eax], al
movzx eax, word [ebp - 0x114]
movzx ecx, word [ebp - 0x28]
cmp eax, ecx
je 0x408ada
movzx edx, word [ebp - 0x114]
xor edx, 0x20
movzx eax, word [ebp - 0x28]
cmp edx, eax
je 0x408ada
movzx ecx, word [ebp - 0x114]
movzx edx, word [ebp - 0x28]
cmp ecx, edx
jge 0x408bf6
mov dword [ebp - 0xb58], 0xffffffff
jmp 0x408c00
mov dword [ebp - 0xb58], 1
mov eax, dword [ebp - 0xb58]
mov dword [ebp - 0xb5c], eax
cmp dword [ebp - 0xb5c], 0
jne 0x408c55
push esi
push edx
add esp, 4
or esi, 0x3b17
pop esi
push edi
jmp 0x408c29
jmp 0x408c32
sub edi, 0x6ae4
pop edi
push edx
or edx, 0x404b
xor edx, 0x116d4
pop edx
mov ecx, dword [ebp - 0x25c]
mov dword [ebp - 0x188], ecx
jmp 0x408cbd
push ebx
xor ebx, 0x1431c
sub ebx, 0x8dca
and ebx, 0x338a
pop ebx
push ecx
push edi
add esp, 4
and ecx, 0x10e8b
pop ecx
push ebx
push ebx
add esp, 4
and ebx, 0xfce8
xor ebx, 0x542f
pop ebx
mov edx, dword [ebp - 0x25c]
mov eax, dword [edx]
mov dword [ebp - 0x25c], eax
test dword [ebp + edi*8 - 0x72740001], esp
movsb byte es:[edi], byte [esi]
std
invalid
invalid
cmp ecx, dword [ebp - 0x6b0]
je 0x408cb3
mov edx, dword [ebp - 0x25c]
cmp dword [edx + 0x30], 0
jne 0x408a7e
mov dword [ebp - 0x188], 0
push ebx
sub ebx, 0xf748
xor ebx, 0x94eb
pop ebx
push ebx
call 0x408cd9
add byte [esi + 0x35], al
dec edx
inc ebx
dec esi
dec ebx
add esp, 4
pop ebx
push ecx
call 0x408ceb
add byte [edi], bh
dec edx
inc ebp
inc ecx
inc edx
dec ebp
inc eax
add esp, 4
pop ecx
cmp dword [ebp - 0x188], 0
jne 0x4095c2
mov eax, 0x6b
mov word [ebp - 0xca8], ax
push edi
sub edi, 0x17cc1
xor edi, 0x8303
add dword [eax], 0
pop edi
push edi
push ecx
add esp, 4
sub edi, 0xa184
call 0x4095ea
add byte [ebx], dh
dec edi
inc ebp
inc ebx
cmp byte [esi], dh
cmp al, 0x39
cmp al, 0x83
les eax, [ecx + eax*4]
iretd
Function at 0x409639
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
call 0x40964a
add byte [ebx], dh
xor eax, 0x4e4e4a3a
inc eax
dec esi
add esp, 4
pop esi
cmp dword [ebp - 0xb78], 0
jne 0x409666
mov dword [ebp - 0x188], 0
jmp 0x40990d
mov edx, dword [ebp - 0xb78]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x6cc], ecx
push esi
xor esi, 0x16259
xor esi, 0x108f4
pop esi
push ebx
push eax
add esp, 4
xor ebx, 0x962c
pop ebx
push esi
push esi
add esp, 4
or esi, 0xaab2
add esi, 0xc2d0
add esi, 0xc30
pop esi
cmp dword [ebp - 0x6cc], 0
jne 0x4096c2
mov dword [ebp - 0x188], 0
jmp 0x40990d
mov edx, dword [ebp - 0x6cc]
mov dword [ebp - 0x254], edx
push edi
push ecx
add esp, 4
xor edi, 0x14d6f
pop edi
push edx
jmp 0x4096e0
call 0x4096f0
add byte [eax], bh
cmp eax, dword [ebp + 0x4e]
dec ebx
inc ecx
cmp dh, byte [edi]
cmp eax, 0x8104c483
ret 0xc5af
push edi
push ebx
add esp, 4
and edi, 0xcbc
add edi, 0xd390
pop edi
push eax
call 0x40992f
add byte [edx], dh
push eax
dec ebp
inc edi
dec esi
dec ecx
dec edi
dec eax
push eax
add esp, 4
pop eax
push edx
push esi
add esp, 4
and edx, 0x12d2e
pop edx
mov ecx, dword [ebp - 0x188]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x1b8], edx
push ecx
add ecx, 0xcc01
call 0x409964
add byte [eax], al
add byte [0x38384038], dh
inc edx
inc ebx
inc edi
xor al, 0x83
les eax, [ecx + eax*4]
leave
movsb byte es:[edi], byte ss:[esi]
add byte [eax], al
sub ecx, 0x15fda
pop ecx
push edi
push esi
add esp, 4
sub edi, 0x12170
pop edi
mov dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0xb84], eax
cmp dword [ebp - 0xb84], 0
jne 0x4099b0
mov ecx, dword [ebp - 0x3ec]
mov dword [ebp - 0x250], ecx
jmp 0x409ca1
mov edx, dword [ebp - 0xb84]
mov eax, dword [ebp - 0x1b8]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0xb88], eax
jne 0x4099d8
mov ecx, dword [ebp - 0x3ec]
mov dword [ebp - 0x250], ecx
jmp 0x409ca1
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0xb88]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0xb8c], edx
cmp dword [ebp - 0xb8c], 0
jne 0x409a0a
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x250], eax
jmp 0x409ca1
mov ecx, dword [ebp - 0x1b8]
add ecx, dword [ebp - 0xb8c]
mov dword [ebp - 0x3e0], ecx
jne 0x409a2f
mov edx, dword [ebp - 0x3ec]
mov dword [ebp - 0x250], edx
jmp 0x409ca1
mov eax, dword [ebp - 0x3e0]
mov ecx, dword [ebp - 0x1b8]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0xe58], ecx
mov edx, dword [ebp - 0x3e0]
mov eax, dword [ebp - 0x1b8]
add eax, dword [edx + 0x24]
mov dword [ebp - 0xe5c], eax
mov ecx, dword [ebp - 0x3e0]
mov edx, dword [ebp - 0x1b8]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0xe60], edx
mov dword [ebp - 0x3e4], 0
jmp 0x409a89
Function at 0x40964a
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
call 0x40964a
add byte [ebx], dh
xor eax, 0x4e4e4a3a
inc eax
dec esi
add esp, 4
pop esi
cmp dword [ebp - 0xb78], 0
jne 0x409666
mov dword [ebp - 0x188], 0
jmp 0x40990d
mov edx, dword [ebp - 0xb78]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x6cc], ecx
push esi
xor esi, 0x16259
xor esi, 0x108f4
pop esi
push ebx
push eax
add esp, 4
xor ebx, 0x962c
pop ebx
push esi
push esi
add esp, 4
or esi, 0xaab2
add esi, 0xc2d0
add esi, 0xc30
pop esi
cmp dword [ebp - 0x6cc], 0
jne 0x4096c2
mov dword [ebp - 0x188], 0
jmp 0x40990d
mov edx, dword [ebp - 0x6cc]
mov dword [ebp - 0x254], edx
push edi
push ecx
add esp, 4
xor edi, 0x14d6f
pop edi
push edx
jmp 0x4096e0
call 0x4096f0
add byte [eax], bh
cmp eax, dword [ebp + 0x4e]
dec ebx
inc ecx
cmp dh, byte [edi]
cmp eax, 0x8104c483
ret 0xc5af
push edi
push ebx
add esp, 4
and edi, 0xcbc
add edi, 0xd390
pop edi
push eax
call 0x40992f
add byte [edx], dh
push eax
dec ebp
inc edi
dec esi
dec ecx
dec edi
dec eax
push eax
add esp, 4
pop eax
push edx
push esi
add esp, 4
and edx, 0x12d2e
pop edx
mov ecx, dword [ebp - 0x188]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x1b8], edx
push ecx
add ecx, 0xcc01
call 0x409964
add byte [eax], al
add byte [0x38384038], dh
inc edx
inc ebx
inc edi
xor al, 0x83
les eax, [ecx + eax*4]
leave
movsb byte es:[edi], byte ss:[esi]
add byte [eax], al
sub ecx, 0x15fda
pop ecx
push edi
push esi
add esp, 4
sub edi, 0x12170
pop edi
mov dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0xb84], eax
cmp dword [ebp - 0xb84], 0
jne 0x4099b0
mov ecx, dword [ebp - 0x3ec]
mov dword [ebp - 0x250], ecx
jmp 0x409ca1
mov edx, dword [ebp - 0xb84]
mov eax, dword [ebp - 0x1b8]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0xb88], eax
jne 0x4099d8
mov ecx, dword [ebp - 0x3ec]
mov dword [ebp - 0x250], ecx
jmp 0x409ca1
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0xb88]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0xb8c], edx
cmp dword [ebp - 0xb8c], 0
jne 0x409a0a
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x250], eax
jmp 0x409ca1
mov ecx, dword [ebp - 0x1b8]
add ecx, dword [ebp - 0xb8c]
mov dword [ebp - 0x3e0], ecx
jne 0x409a2f
mov edx, dword [ebp - 0x3ec]
mov dword [ebp - 0x250], edx
jmp 0x409ca1
mov eax, dword [ebp - 0x3e0]
mov ecx, dword [ebp - 0x1b8]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0xe58], ecx
mov edx, dword [ebp - 0x3e0]
mov eax, dword [ebp - 0x1b8]
add eax, dword [edx + 0x24]
mov dword [ebp - 0xe5c], eax
mov ecx, dword [ebp - 0x3e0]
mov edx, dword [ebp - 0x1b8]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0xe60], edx
mov dword [ebp - 0x3e4], 0
jmp 0x409a89
Function at 0x4096f0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
call 0x40964a
add byte [ebx], dh
xor eax, 0x4e4e4a3a
inc eax
dec esi
add esp, 4
pop esi
cmp dword [ebp - 0xb78], 0
jne 0x409666
mov dword [ebp - 0x188], 0
jmp 0x40990d
mov edx, dword [ebp - 0xb78]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x6cc], ecx
push esi
xor esi, 0x16259
xor esi, 0x108f4
pop esi
push ebx
push eax
add esp, 4
xor ebx, 0x962c
pop ebx
push esi
push esi
add esp, 4
or esi, 0xaab2
add esi, 0xc2d0
add esi, 0xc30
pop esi
cmp dword [ebp - 0x6cc], 0
jne 0x4096c2
mov dword [ebp - 0x188], 0
jmp 0x40990d
mov edx, dword [ebp - 0x6cc]
mov dword [ebp - 0x254], edx
push edi
push ecx
add esp, 4
xor edi, 0x14d6f
pop edi
push edx
jmp 0x4096e0
call 0x4096f0
add byte [eax], bh
cmp eax, dword [ebp + 0x4e]
dec ebx
inc ecx
cmp dh, byte [edi]
cmp eax, 0x8104c483
ret 0xc5af
push edi
push ebx
add esp, 4
and edi, 0xcbc
add edi, 0xd390
pop edi
push eax
call 0x40992f
add byte [edx], dh
push eax
dec ebp
inc edi
dec esi
dec ecx
dec edi
dec eax
push eax
add esp, 4
pop eax
push edx
push esi
add esp, 4
and edx, 0x12d2e
pop edx
mov ecx, dword [ebp - 0x188]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x1b8], edx
push ecx
add ecx, 0xcc01
call 0x409964
add byte [eax], al
add byte [0x38384038], dh
inc edx
inc ebx
inc edi
xor al, 0x83
les eax, [ecx + eax*4]
leave
movsb byte es:[edi], byte ss:[esi]
add byte [eax], al
sub ecx, 0x15fda
pop ecx
push edi
push esi
add esp, 4
sub edi, 0x12170
pop edi
mov dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0xb84], eax
cmp dword [ebp - 0xb84], 0
jne 0x4099b0
mov ecx, dword [ebp - 0x3ec]
mov dword [ebp - 0x250], ecx
jmp 0x409ca1
mov edx, dword [ebp - 0xb84]
mov eax, dword [ebp - 0x1b8]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0xb88], eax
jne 0x4099d8
mov ecx, dword [ebp - 0x3ec]
mov dword [ebp - 0x250], ecx
jmp 0x409ca1
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0xb88]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0xb8c], edx
cmp dword [ebp - 0xb8c], 0
jne 0x409a0a
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x250], eax
jmp 0x409ca1
mov ecx, dword [ebp - 0x1b8]
add ecx, dword [ebp - 0xb8c]
mov dword [ebp - 0x3e0], ecx
jne 0x409a2f
mov edx, dword [ebp - 0x3ec]
mov dword [ebp - 0x250], edx
jmp 0x409ca1
mov eax, dword [ebp - 0x3e0]
mov ecx, dword [ebp - 0x1b8]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0xe58], ecx
mov edx, dword [ebp - 0x3e0]
mov eax, dword [ebp - 0x1b8]
add eax, dword [edx + 0x24]
mov dword [ebp - 0xe5c], eax
mov ecx, dword [ebp - 0x3e0]
mov edx, dword [ebp - 0x1b8]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0xe60], edx
mov dword [ebp - 0x3e4], 0
jmp 0x409a89

Function at 0x40988b
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edx
push ecx
add ecx, 0xa315
pop ecx
mov edx, dword [ebp - 0x254]
mov dword [ebp - 0x188], edx
jmp 0x40990d
Function at 0x4098ce
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
jmp 0x4098d6
pop ebx
mov eax, dword [ebp - 0x254]
mov ecx, dword [eax]
mov dword [ebp - 0x254], ecx
mov edx, dword [ebp - 0x254]
cmp edx, dword [ebp - 0x6cc]
je 0x409903
mov eax, dword [ebp - 0x254]
cmp dword [eax + 0x30], 0
jne 0x4096ce
mov dword [ebp - 0x188], 0

Function at 0x40992f
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
call 0x40964a
add byte [ebx], dh
xor eax, 0x4e4e4a3a
inc eax
dec esi
add esp, 4
pop esi
cmp dword [ebp - 0xb78], 0
jne 0x409666
mov dword [ebp - 0x188], 0
jmp 0x40990d
mov edx, dword [ebp - 0xb78]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x6cc], ecx
push esi
xor esi, 0x16259
xor esi, 0x108f4
pop esi
push ebx
push eax
add esp, 4
xor ebx, 0x962c
pop ebx
push esi
push esi
add esp, 4
or esi, 0xaab2
add esi, 0xc2d0
add esi, 0xc30
pop esi
cmp dword [ebp - 0x6cc], 0
jne 0x4096c2
mov dword [ebp - 0x188], 0
jmp 0x40990d
mov edx, dword [ebp - 0x6cc]
mov dword [ebp - 0x254], edx
push edi
push ecx
add esp, 4
xor edi, 0x14d6f
pop edi
push edx
jmp 0x4096e0
call 0x4096f0
add byte [eax], bh
cmp eax, dword [ebp + 0x4e]
dec ebx
inc ecx
cmp dh, byte [edi]
cmp eax, 0x8104c483
ret 0xc5af
push edi
push ebx
add esp, 4
and edi, 0xcbc
add edi, 0xd390
pop edi
push eax
call 0x40992f
add byte [edx], dh
push eax
dec ebp
inc edi
dec esi
dec ecx
dec edi
dec eax
push eax
add esp, 4
pop eax
push edx
push esi
add esp, 4
and edx, 0x12d2e
pop edx
mov ecx, dword [ebp - 0x188]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x1b8], edx
push ecx
add ecx, 0xcc01
call 0x409964
add byte [eax], al
add byte [0x38384038], dh
inc edx
inc ebx
inc edi
xor al, 0x83
les eax, [ecx + eax*4]
leave
movsb byte es:[edi], byte ss:[esi]
add byte [eax], al
sub ecx, 0x15fda
pop ecx
push edi
push esi
add esp, 4
sub edi, 0x12170
pop edi
mov dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0xb84], eax
cmp dword [ebp - 0xb84], 0
jne 0x4099b0
mov ecx, dword [ebp - 0x3ec]
mov dword [ebp - 0x250], ecx
jmp 0x409ca1
mov edx, dword [ebp - 0xb84]
mov eax, dword [ebp - 0x1b8]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0xb88], eax
jne 0x4099d8
mov ecx, dword [ebp - 0x3ec]
mov dword [ebp - 0x250], ecx
jmp 0x409ca1
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0xb88]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0xb8c], edx
cmp dword [ebp - 0xb8c], 0
jne 0x409a0a
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x250], eax
jmp 0x409ca1
mov ecx, dword [ebp - 0x1b8]
add ecx, dword [ebp - 0xb8c]
mov dword [ebp - 0x3e0], ecx
jne 0x409a2f
mov edx, dword [ebp - 0x3ec]
mov dword [ebp - 0x250], edx
jmp 0x409ca1
mov eax, dword [ebp - 0x3e0]
mov ecx, dword [ebp - 0x1b8]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0xe58], ecx
mov edx, dword [ebp - 0x3e0]
mov eax, dword [ebp - 0x1b8]
add eax, dword [edx + 0x24]
mov dword [ebp - 0xe5c], eax
mov ecx, dword [ebp - 0x3e0]
mov edx, dword [ebp - 0x1b8]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0xe60], edx
mov dword [ebp - 0x3e4], 0
jmp 0x409a89
Function at 0x409958
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
call 0x40964a
add byte [ebx], dh
xor eax, 0x4e4e4a3a
inc eax
dec esi
add esp, 4
pop esi
cmp dword [ebp - 0xb78], 0
jne 0x409666
mov dword [ebp - 0x188], 0
jmp 0x40990d
mov edx, dword [ebp - 0xb78]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x6cc], ecx
push esi
xor esi, 0x16259
xor esi, 0x108f4
pop esi
push ebx
push eax
add esp, 4
xor ebx, 0x962c
pop ebx
push esi
push esi
add esp, 4
or esi, 0xaab2
add esi, 0xc2d0
add esi, 0xc30
pop esi
cmp dword [ebp - 0x6cc], 0
jne 0x4096c2
mov dword [ebp - 0x188], 0
jmp 0x40990d
mov edx, dword [ebp - 0x6cc]
mov dword [ebp - 0x254], edx
push edi
push ecx
add esp, 4
xor edi, 0x14d6f
pop edi
push edx
jmp 0x4096e0
call 0x4096f0
add byte [eax], bh
cmp eax, dword [ebp + 0x4e]
dec ebx
inc ecx
cmp dh, byte [edi]
cmp eax, 0x8104c483
ret 0xc5af
push edi
push ebx
add esp, 4
and edi, 0xcbc
add edi, 0xd390
pop edi
push eax
call 0x40992f
add byte [edx], dh
push eax
dec ebp
inc edi
dec esi
dec ecx
dec edi
dec eax
push eax
add esp, 4
pop eax
push edx
push esi
add esp, 4
and edx, 0x12d2e
pop edx
mov ecx, dword [ebp - 0x188]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x1b8], edx
push ecx
add ecx, 0xcc01
call 0x409964
add byte [eax], al
add byte [0x38384038], dh
inc edx
inc ebx
inc edi
xor al, 0x83
les eax, [ecx + eax*4]
leave
movsb byte es:[edi], byte ss:[esi]
add byte [eax], al
sub ecx, 0x15fda
pop ecx
push edi
push esi
add esp, 4
sub edi, 0x12170
pop edi
mov dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0xb84], eax
cmp dword [ebp - 0xb84], 0
jne 0x4099b0
mov ecx, dword [ebp - 0x3ec]
mov dword [ebp - 0x250], ecx
jmp 0x409ca1
mov edx, dword [ebp - 0xb84]
mov eax, dword [ebp - 0x1b8]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0xb88], eax
jne 0x4099d8
mov ecx, dword [ebp - 0x3ec]
mov dword [ebp - 0x250], ecx
jmp 0x409ca1
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0xb88]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0xb8c], edx
cmp dword [ebp - 0xb8c], 0
jne 0x409a0a
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x250], eax
jmp 0x409ca1
mov ecx, dword [ebp - 0x1b8]
add ecx, dword [ebp - 0xb8c]
mov dword [ebp - 0x3e0], ecx
jne 0x409a2f
mov edx, dword [ebp - 0x3ec]
mov dword [ebp - 0x250], edx
jmp 0x409ca1
mov eax, dword [ebp - 0x3e0]
mov ecx, dword [ebp - 0x1b8]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0xe58], ecx
mov edx, dword [ebp - 0x3e0]
mov eax, dword [ebp - 0x1b8]
add eax, dword [edx + 0x24]
mov dword [ebp - 0xe5c], eax
mov ecx, dword [ebp - 0x3e0]
mov edx, dword [ebp - 0x1b8]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0xe60], edx
mov dword [ebp - 0x3e4], 0
jmp 0x409a89