joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4c620f
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
inc edi
inc edx
inc ebx
inc ecx
xor eax, 0x3b3f3f42

Function at 0x4c6218
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
jmp 0x4c6220
add ecx, 0x9cef
call 0x4c6236
add byte [ecx + 0x46], cl
inc ebp
inc eax
dec ebp
aaa
inc esi
xor al, 0x83
les eax, [ecx + ebx*2]
mov ecx, dword [ebp - 0x138]
mov dword [ebp - 0x9c], ecx
jmp 0x4c65f3
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x1b4], eax
lea ecx, [ebp - 0x1b0]
push ecx
mov edx, dword [ebp + 4]
push edx
push 6
call dword [ebp - 0x1b4]
test eax, eax
jne 0x4c664d
push edx
push edi
add esp, 4
sub edx, 0x15545
pop edx
push ecx
xor ecx, 0x12119
add ecx, 0x7afd
push edi
push ebx
add esp, 4
jmp 0x4c6658
call 0x4c6667
add byte [0x47414133], bh
inc edi
cmp edi, dword [0x4c48340]
and edi, 0xb21d
pop edi
push ebx
add ebx, 0x12e18
sub ebx, 0xe670
pop ebx
cmp dword [ebp - 0x1b0], 0
je 0x4c900b

Function at 0x4c6236
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
jmp 0x4c6220
add ecx, 0x9cef
call 0x4c6236
add byte [ecx + 0x46], cl
inc ebp
inc eax
dec ebp
aaa
inc esi
xor al, 0x83
les eax, [ecx + ebx*2]
mov ecx, dword [ebp - 0x138]
mov dword [ebp - 0x9c], ecx
jmp 0x4c65f3
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x1b4], eax
lea ecx, [ebp - 0x1b0]
push ecx
mov edx, dword [ebp + 4]
push edx
push 6
call dword [ebp - 0x1b4]
test eax, eax
jne 0x4c664d
push edx
push edi
add esp, 4
sub edx, 0x15545
pop edx
push ecx
xor ecx, 0x12119
add ecx, 0x7afd
push edi
push ebx
add esp, 4
jmp 0x4c6658
call 0x4c6667
add byte [0x47414133], bh
inc edi
cmp edi, dword [0x4c48340]
and edi, 0xb21d
pop edi
push ebx
add ebx, 0x12e18
sub ebx, 0xe670
pop ebx
cmp dword [ebp - 0x1b0], 0
je 0x4c900b
Function at 0x4c662f
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
call 0x4c663e
add byte [eax + 0x40], dl
inc ebp
dec eax
dec esp
aas
inc ebp
add esp, 4
add ecx, 0x1506a
pop ecx
jmp 0x4c901a

Function at 0x4c663e
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
call 0x4c663e
add byte [eax + 0x40], dl
inc ebp
dec eax
dec esp
aas
inc ebp
add esp, 4
add ecx, 0x1506a
pop ecx
jmp 0x4c901a

Function at 0x4c6667
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
jmp 0x4c6220
add ecx, 0x9cef
call 0x4c6236
add byte [ecx + 0x46], cl
inc ebp
inc eax
dec ebp
aaa
inc esi
xor al, 0x83
les eax, [ecx + ebx*2]
mov ecx, dword [ebp - 0x138]
mov dword [ebp - 0x9c], ecx
jmp 0x4c65f3
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x1b4], eax
lea ecx, [ebp - 0x1b0]
push ecx
mov edx, dword [ebp + 4]
push edx
push 6
call dword [ebp - 0x1b4]
test eax, eax
jne 0x4c664d
push edx
push edi
add esp, 4
sub edx, 0x15545
pop edx
push ecx
xor ecx, 0x12119
add ecx, 0x7afd
push edi
push ebx
add esp, 4
jmp 0x4c6658
call 0x4c6667
add byte [0x47414133], bh
inc edi
cmp edi, dword [0x4c48340]
and edi, 0xb21d
pop edi
push ebx
add ebx, 0x12e18
sub ebx, 0xe670
pop ebx
cmp dword [ebp - 0x1b0], 0
je 0x4c900b
Function at 0x4c668c
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ebx
add ebx, 0x681b
pop ebx
push esi
push ebx
add esp, 4
sub esi, 0x9abc
pop esi
push eax
push ecx
add esp, 4
sub eax, 0xf7fd
sub eax, 0x5176
add eax, 0xda30
or eax, 0x15889
pop eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x210], eax
push eax
push edi
add esp, 4
jmp 0x4c66d6
xor eax, 0xfc01
and eax, 0x4f7f
pop eax
push eax
and eax, 0xa4b
jmp 0x4c66ef
or eax, 0x57b7
or eax, 0x1287a
pop eax
cmp dword [ebp - 0x210], 0
jne 0x4c673c
push ecx
xor ecx, 0xcc7d
or ecx, 0x9c41
sub ecx, 0x113b1
pop ecx
push ebx
push esi
add esp, 4
sub ebx, 0x145
add ebx, 0x5083
add ebx, 0x561d
sub ebx, 0xe3b1
pop ebx
jmp 0x4c901a
push eax
call 0x4c674b
add byte [ebx], bh
dec edx
dec esi
aas
cmp al, byte [ebx + 0x4b]
add esp, 4
xor eax, 0x7dc5
jmp 0x4c675b
and eax, 0x15ec6
pop eax
push edx
push edx
add esp, 4
and edx, 0x77b3
pop edx
mov ecx, dword [ebp - 0x210]
mov edx, dword [ebp - 0x210]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x2d0], edx
jne 0x4c67bc
push ebx
push ebx
add esp, 4
sub ebx, 0x4ce6
pop ebx
push edx
push ecx
add esp, 4
sub edx, 0xe9d0
call 0x4c67a8
add byte [0x4c354d44], bh
inc esi
add esp, 4
jmp 0x4c67b0
xor edx, 0x3d5c
pop edx
jmp 0x4c901a
mov eax, dword [ebp - 0x2d0]
mov ecx, dword [eax + 0x50]
mov dword [ebp - 0x3f0], ecx
push eax
push edi
add esp, 4
xor eax, 0xaec6
call 0x4c67e2
add byte [ebx + 0x32], cl
cmp eax, 0x834f4536
les eax, [eax + ebx*2]
push ebx
jmp 0x4c67ef
jmp 0x4c67f6
xor ebx, 0x11311
pop ebx
mov edx, dword [ebp - 0x1b0]
mov dword [ebp - 0x218], edx
push edx
push esi
add esp, 4
or edx, 0x6a10
and edx, 0xfddc
sub edx, 0x23b7
pop edx
push esi
push eax
add esp, 4
or esi, 0x51d0
pop esi
push ebx
sub ebx, 0xe82f
or ebx, 0x179cb
pop ebx
mov eax, dword [ebp - 0x218]
add eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x218], 0
je 0x4c900b
cmp dword [ebp - 0x22c], 0
je 0x4c900b
push edx
or edx, 0x12e33
pop edx
push edi
jmp 0x4c6877
or edi, 0x148d5
pop edi
push ebx
push edx
add esp, 4
jmp 0x4c688c
sub ebx, 0x95f8
add ebx, 0x17a09
pop ebx
mov byte [ebp - 0x285], 7
mov byte [ebp - 1], 2
jmp 0x4c68af
Function at 0x4c674b
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ebx
add ebx, 0x681b
pop ebx
push esi
push ebx
add esp, 4
sub esi, 0x9abc
pop esi
push eax
push ecx
add esp, 4
sub eax, 0xf7fd
sub eax, 0x5176
add eax, 0xda30
or eax, 0x15889
pop eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x210], eax
push eax
push edi
add esp, 4
jmp 0x4c66d6
xor eax, 0xfc01
and eax, 0x4f7f
pop eax
push eax
and eax, 0xa4b
jmp 0x4c66ef
or eax, 0x57b7
or eax, 0x1287a
pop eax
cmp dword [ebp - 0x210], 0
jne 0x4c673c
push ecx
xor ecx, 0xcc7d
or ecx, 0x9c41
sub ecx, 0x113b1
pop ecx
push ebx
push esi
add esp, 4
sub ebx, 0x145
add ebx, 0x5083
add ebx, 0x561d
sub ebx, 0xe3b1
pop ebx
jmp 0x4c901a
push eax
call 0x4c674b
add byte [ebx], bh
dec edx
dec esi
aas
cmp al, byte [ebx + 0x4b]
add esp, 4
xor eax, 0x7dc5
jmp 0x4c675b
and eax, 0x15ec6
pop eax
push edx
push edx
add esp, 4
and edx, 0x77b3
pop edx
mov ecx, dword [ebp - 0x210]
mov edx, dword [ebp - 0x210]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x2d0], edx
jne 0x4c67bc
push ebx
push ebx
add esp, 4
sub ebx, 0x4ce6
pop ebx
push edx
push ecx
add esp, 4
sub edx, 0xe9d0
call 0x4c67a8
add byte [0x4c354d44], bh
inc esi
add esp, 4
jmp 0x4c67b0
xor edx, 0x3d5c
pop edx
jmp 0x4c901a
mov eax, dword [ebp - 0x2d0]
mov ecx, dword [eax + 0x50]
mov dword [ebp - 0x3f0], ecx
push eax
push edi
add esp, 4
xor eax, 0xaec6
call 0x4c67e2
add byte [ebx + 0x32], cl
cmp eax, 0x834f4536
les eax, [eax + ebx*2]
push ebx
jmp 0x4c67ef
jmp 0x4c67f6
xor ebx, 0x11311
pop ebx
mov edx, dword [ebp - 0x1b0]
mov dword [ebp - 0x218], edx
push edx
push esi
add esp, 4
or edx, 0x6a10
and edx, 0xfddc
sub edx, 0x23b7
pop edx
push esi
push eax
add esp, 4
or esi, 0x51d0
pop esi
push ebx
sub ebx, 0xe82f
or ebx, 0x179cb
pop ebx
mov eax, dword [ebp - 0x218]
add eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x218], 0
je 0x4c900b
cmp dword [ebp - 0x22c], 0
je 0x4c900b
push edx
or edx, 0x12e33
pop edx
push edi
jmp 0x4c6877
or edi, 0x148d5
pop edi
push ebx
push edx
add esp, 4
jmp 0x4c688c
sub ebx, 0x95f8
add ebx, 0x17a09
pop ebx
mov byte [ebp - 0x285], 7
mov byte [ebp - 1], 2
jmp 0x4c68af
Function at 0x4c67a8
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ebx
add ebx, 0x681b
pop ebx
push esi
push ebx
add esp, 4
sub esi, 0x9abc
pop esi
push eax
push ecx
add esp, 4
sub eax, 0xf7fd
sub eax, 0x5176
add eax, 0xda30
or eax, 0x15889
pop eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x210], eax
push eax
push edi
add esp, 4
jmp 0x4c66d6
xor eax, 0xfc01
and eax, 0x4f7f
pop eax
push eax
and eax, 0xa4b
jmp 0x4c66ef
or eax, 0x57b7
or eax, 0x1287a
pop eax
cmp dword [ebp - 0x210], 0
jne 0x4c673c
push ecx
xor ecx, 0xcc7d
or ecx, 0x9c41
sub ecx, 0x113b1
pop ecx
push ebx
push esi
add esp, 4
sub ebx, 0x145
add ebx, 0x5083
add ebx, 0x561d
sub ebx, 0xe3b1
pop ebx
jmp 0x4c901a
push eax
call 0x4c674b
add byte [ebx], bh
dec edx
dec esi
aas
cmp al, byte [ebx + 0x4b]
add esp, 4
xor eax, 0x7dc5
jmp 0x4c675b
and eax, 0x15ec6
pop eax
push edx
push edx
add esp, 4
and edx, 0x77b3
pop edx
mov ecx, dword [ebp - 0x210]
mov edx, dword [ebp - 0x210]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x2d0], edx
jne 0x4c67bc
push ebx
push ebx
add esp, 4
sub ebx, 0x4ce6
pop ebx
push edx
push ecx
add esp, 4
sub edx, 0xe9d0
call 0x4c67a8
add byte [0x4c354d44], bh
inc esi
add esp, 4
jmp 0x4c67b0
xor edx, 0x3d5c
pop edx
jmp 0x4c901a
mov eax, dword [ebp - 0x2d0]
mov ecx, dword [eax + 0x50]
mov dword [ebp - 0x3f0], ecx
push eax
push edi
add esp, 4
xor eax, 0xaec6
call 0x4c67e2
add byte [ebx + 0x32], cl
cmp eax, 0x834f4536
les eax, [eax + ebx*2]
push ebx
jmp 0x4c67ef
jmp 0x4c67f6
xor ebx, 0x11311
pop ebx
mov edx, dword [ebp - 0x1b0]
mov dword [ebp - 0x218], edx
push edx
push esi
add esp, 4
or edx, 0x6a10
and edx, 0xfddc
sub edx, 0x23b7
pop edx
push esi
push eax
add esp, 4
or esi, 0x51d0
pop esi
push ebx
sub ebx, 0xe82f
or ebx, 0x179cb
pop ebx
mov eax, dword [ebp - 0x218]
add eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x218], 0
je 0x4c900b
cmp dword [ebp - 0x22c], 0
je 0x4c900b
push edx
or edx, 0x12e33
pop edx
push edi
jmp 0x4c6877
or edi, 0x148d5
pop edi
push ebx
push edx
add esp, 4
jmp 0x4c688c
sub ebx, 0x95f8
add ebx, 0x17a09
pop ebx
mov byte [ebp - 0x285], 7
mov byte [ebp - 1], 2
jmp 0x4c68af
Function at 0x4c67e2
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ebx
add ebx, 0x681b
pop ebx
push esi
push ebx
add esp, 4
sub esi, 0x9abc
pop esi
push eax
push ecx
add esp, 4
sub eax, 0xf7fd
sub eax, 0x5176
add eax, 0xda30
or eax, 0x15889
pop eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x210], eax
push eax
push edi
add esp, 4
jmp 0x4c66d6
xor eax, 0xfc01
and eax, 0x4f7f
pop eax
push eax
and eax, 0xa4b
jmp 0x4c66ef
or eax, 0x57b7
or eax, 0x1287a
pop eax
cmp dword [ebp - 0x210], 0
jne 0x4c673c
push ecx
xor ecx, 0xcc7d
or ecx, 0x9c41
sub ecx, 0x113b1
pop ecx
push ebx
push esi
add esp, 4
sub ebx, 0x145
add ebx, 0x5083
add ebx, 0x561d
sub ebx, 0xe3b1
pop ebx
jmp 0x4c901a
push eax
call 0x4c674b
add byte [ebx], bh
dec edx
dec esi
aas
cmp al, byte [ebx + 0x4b]
add esp, 4
xor eax, 0x7dc5
jmp 0x4c675b
and eax, 0x15ec6
pop eax
push edx
push edx
add esp, 4
and edx, 0x77b3
pop edx
mov ecx, dword [ebp - 0x210]
mov edx, dword [ebp - 0x210]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x2d0], edx
jne 0x4c67bc
push ebx
push ebx
add esp, 4
sub ebx, 0x4ce6
pop ebx
push edx
push ecx
add esp, 4
sub edx, 0xe9d0
call 0x4c67a8
add byte [0x4c354d44], bh
inc esi
add esp, 4
jmp 0x4c67b0
xor edx, 0x3d5c
pop edx
jmp 0x4c901a
mov eax, dword [ebp - 0x2d0]
mov ecx, dword [eax + 0x50]
mov dword [ebp - 0x3f0], ecx
push eax
push edi
add esp, 4
xor eax, 0xaec6
call 0x4c67e2
add byte [ebx + 0x32], cl
cmp eax, 0x834f4536
les eax, [eax + ebx*2]
push ebx
jmp 0x4c67ef
jmp 0x4c67f6
xor ebx, 0x11311
pop ebx
mov edx, dword [ebp - 0x1b0]
mov dword [ebp - 0x218], edx
push edx
push esi
add esp, 4
or edx, 0x6a10
and edx, 0xfddc
sub edx, 0x23b7
pop edx
push esi
push eax
add esp, 4
or esi, 0x51d0
pop esi
push ebx
sub ebx, 0xe82f
or ebx, 0x179cb
pop ebx
mov eax, dword [ebp - 0x218]
add eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x218], 0
je 0x4c900b
cmp dword [ebp - 0x22c], 0
je 0x4c900b
push edx
or edx, 0x12e33
pop edx
push edi
jmp 0x4c6877
or edi, 0x148d5
pop edi
push ebx
push edx
add esp, 4
jmp 0x4c688c
sub ebx, 0x95f8
add ebx, 0x17a09
pop ebx
mov byte [ebp - 0x285], 7
mov byte [ebp - 1], 2
jmp 0x4c68af
Function at 0x4c754a
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edx
xor edx, 0x11ad2
pop edx
push eax
push ecx
add esp, 4
and eax, 0xc8c4
add eax, 0x13af0
add eax, 0x18d1
or eax, 0x13d
pop eax
push ecx
push ecx
add esp, 4
sub ecx, 0x15171
pop ecx
mov edx, dword [ebp - 0x230]
mov ax, word [edx]
mov word [ebp - 0x1ca], ax
mov ecx, dword [ebp - 0x230]
add ecx, 2
mov dword [ebp - 0x230], ecx
mov dx, word [ebp - 0x1ca]
mov word [ebp - 0x60], dx
push edi
push edx
add esp, 4
sub edi, 0x30b2
pop edi
push eax
call fcn.004c754a
add byte [esi + 0x4a], al
dec edi
xor eax, 0x4732353f
inc ebx
inc ebp
add esp, 4
call 0x4c755b
add byte [ecx], bh
push eax
dec ebx
inc eax
dec esp
cmp eax, 0xc4834132
add al, 0x58
mov eax, dword [ebp - 0x234]
mov cx, word [eax]
mov word [ebp - 0x1cc], cx
mov edx, dword [ebp - 0x234]
add edx, 2
mov dword [ebp - 0x234], edx
mov ax, word [ebp - 0x1cc]
mov word [ebp - 0x14], ax
push edi
call 0x4c7599
add byte [ebp + 0x35], cl
inc esi
dec esp
xor al, 0x3f
xor eax, 0x4c48342
xor edi, 0x117fc
add edi, 0x8bfc
pop edi
push eax
push edx
add esp, 4
xor eax, 0x13332
xor eax, 0x12831
pop eax
movzx ecx, word [ebp - 0x14]
test ecx, ecx
jne 0x4c75d8
movzx edx, word [ebp - 0x60]
movzx eax, word [ebp - 0x14]
sub edx, eax
mov dword [ebp - 0x2f4], edx
jmp 0x4c765b
movzx ecx, word [ebp - 0x60]
movzx edx, word [ebp - 0x14]
cmp ecx, edx
je 0x4c74d1
movzx eax, word [ebp - 0x60]
xor eax, 0x20
movzx ecx, word [ebp - 0x14]
cmp eax, ecx
je 0x4c74d1
push ecx
call 0x4c760b
add byte [eax + 0x44], al
dec eax
aaa
xor cl, byte [ebp + 0x4a]
inc ebp
add esp, 4
add ecx, 0x1bb9
xor ecx, 0x183c4
call 0x4c7629
add byte [esi], dh
push eax
inc ecx
cmp al, 0x43
inc edx
dec esi
inc edi
xor al, 0x83
les eax, [ecx + ebx*2]
movzx edx, word [ebp - 0x60]
movzx eax, word [ebp - 0x14]
cmp edx, eax
jge 0x4c7645
mov dword [ebp - 0x2f0], 0xffffffff
jmp 0x4c764f
mov dword [ebp - 0x2f0], 1
mov ecx, dword [ebp - 0x2f0]
mov dword [ebp - 0x2f4], ecx
cmp dword [ebp - 0x2f4], 0
jne 0x4c76a4
push eax
add eax, 0x12a74
xor eax, 0xa4e6
jmp 0x4c7677
pop eax
push ebx
push ebx
add esp, 4
add ebx, 0x1390c
sub ebx, 0x16bf3
pop ebx
push eax
push esi
add esp, 4
add eax, 0x13781
pop eax
mov edx, dword [ebp - 0xa0]
mov dword [ebp - 0x70], edx
jmp 0x4c773b
mov eax, dword [ebp - 0xa0]
mov ecx, dword [eax]
mov dword [ebp - 0xa0], ecx
push edi
or edi, 0x992b
sub edi, 0x4c89
add edi, 0x26cb
or edi, 0xd5fb
pop edi
push edi
push ecx
add esp, 4
xor edi, 0x101fa
sub edi, 0x102e4
sub edi, 0x132c6
pop edi
mov edx, dword [ebp - 0xa0]
cmp edx, dword [ebp - 0x238]
je 0x4c7702
mov eax, dword [ebp - 0xa0]
cmp dword [eax + 0x30], 0
jne 0x4c7446
push ebx
push ecx
add esp, 4
sub ebx, 0xa9f3
pop ebx
push edx
or edx, 0x5feb
sub edx, 0x9c3e
xor edx, 0xdbc0
xor edx, 0x6797
pop edx
push esi
push esi
add esp, 4
or esi, 0x15423
pop esi
mov dword [ebp - 0x70], 0
Function at 0x4c755b
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edx
xor edx, 0x11ad2
pop edx
push eax
push ecx
add esp, 4
and eax, 0xc8c4
add eax, 0x13af0
add eax, 0x18d1
or eax, 0x13d
pop eax
push ecx
push ecx
add esp, 4
sub ecx, 0x15171
pop ecx
mov edx, dword [ebp - 0x230]
mov ax, word [edx]
mov word [ebp - 0x1ca], ax
mov ecx, dword [ebp - 0x230]
add ecx, 2
mov dword [ebp - 0x230], ecx
mov dx, word [ebp - 0x1ca]
mov word [ebp - 0x60], dx
push edi
push edx
add esp, 4
sub edi, 0x30b2
pop edi
push eax
call fcn.004c754a
add byte [esi + 0x4a], al
dec edi
xor eax, 0x4732353f
inc ebx
inc ebp
add esp, 4
call 0x4c755b
add byte [ecx], bh
push eax
dec ebx
inc eax
dec esp
cmp eax, 0xc4834132
add al, 0x58
mov eax, dword [ebp - 0x234]
mov cx, word [eax]
mov word [ebp - 0x1cc], cx
mov edx, dword [ebp - 0x234]
add edx, 2
mov dword [ebp - 0x234], edx
mov ax, word [ebp - 0x1cc]
mov word [ebp - 0x14], ax
push edi
call 0x4c7599
add byte [ebp + 0x35], cl
inc esi
dec esp
xor al, 0x3f
xor eax, 0x4c48342
xor edi, 0x117fc
add edi, 0x8bfc
pop edi
push eax
push edx
add esp, 4
xor eax, 0x13332
xor eax, 0x12831
pop eax
movzx ecx, word [ebp - 0x14]
test ecx, ecx
jne 0x4c75d8
movzx edx, word [ebp - 0x60]
movzx eax, word [ebp - 0x14]
sub edx, eax
mov dword [ebp - 0x2f4], edx
jmp 0x4c765b
movzx ecx, word [ebp - 0x60]
movzx edx, word [ebp - 0x14]
cmp ecx, edx
je 0x4c74d1
movzx eax, word [ebp - 0x60]
xor eax, 0x20
movzx ecx, word [ebp - 0x14]
cmp eax, ecx
je 0x4c74d1
push ecx
call 0x4c760b
add byte [eax + 0x44], al
dec eax
aaa
xor cl, byte [ebp + 0x4a]
inc ebp
add esp, 4
add ecx, 0x1bb9
xor ecx, 0x183c4
call 0x4c7629
add byte [esi], dh
push eax
inc ecx
cmp al, 0x43
inc edx
dec esi
inc edi
xor al, 0x83
les eax, [ecx + ebx*2]
movzx edx, word [ebp - 0x60]
movzx eax, word [ebp - 0x14]
cmp edx, eax
jge 0x4c7645
mov dword [ebp - 0x2f0], 0xffffffff
jmp 0x4c764f
mov dword [ebp - 0x2f0], 1
mov ecx, dword [ebp - 0x2f0]
mov dword [ebp - 0x2f4], ecx
cmp dword [ebp - 0x2f4], 0
jne 0x4c76a4
push eax
add eax, 0x12a74
xor eax, 0xa4e6
jmp 0x4c7677
pop eax
push ebx
push ebx
add esp, 4
add ebx, 0x1390c
sub ebx, 0x16bf3
pop ebx
push eax
push esi
add esp, 4
add eax, 0x13781
pop eax
mov edx, dword [ebp - 0xa0]
mov dword [ebp - 0x70], edx
jmp 0x4c773b
mov eax, dword [ebp - 0xa0]
mov ecx, dword [eax]
mov dword [ebp - 0xa0], ecx
push edi
or edi, 0x992b
sub edi, 0x4c89
add edi, 0x26cb
or edi, 0xd5fb
pop edi
push edi
push ecx
add esp, 4
xor edi, 0x101fa
sub edi, 0x102e4
sub edi, 0x132c6
pop edi
mov edx, dword [ebp - 0xa0]
cmp edx, dword [ebp - 0x238]
je 0x4c7702
mov eax, dword [ebp - 0xa0]
cmp dword [eax + 0x30], 0
jne 0x4c7446
push ebx
push ecx
add esp, 4
sub ebx, 0xa9f3
pop ebx
push edx
or edx, 0x5feb
sub edx, 0x9c3e
xor edx, 0xdbc0
xor edx, 0x6797
pop edx
push esi
push esi
add esp, 4
or esi, 0x15423
pop esi
mov dword [ebp - 0x70], 0
Function at 0x4c7599
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edx
xor edx, 0x11ad2
pop edx
push eax
push ecx
add esp, 4
and eax, 0xc8c4
add eax, 0x13af0
add eax, 0x18d1
or eax, 0x13d
pop eax
push ecx
push ecx
add esp, 4
sub ecx, 0x15171
pop ecx
mov edx, dword [ebp - 0x230]
mov ax, word [edx]
mov word [ebp - 0x1ca], ax
mov ecx, dword [ebp - 0x230]
add ecx, 2
mov dword [ebp - 0x230], ecx
mov dx, word [ebp - 0x1ca]
mov word [ebp - 0x60], dx
push edi
push edx
add esp, 4
sub edi, 0x30b2
pop edi
push eax
call fcn.004c754a
add byte [esi + 0x4a], al
dec edi
xor eax, 0x4732353f
inc ebx
inc ebp
add esp, 4
call 0x4c755b
add byte [ecx], bh
push eax
dec ebx
inc eax
dec esp
cmp eax, 0xc4834132
add al, 0x58
mov eax, dword [ebp - 0x234]
mov cx, word [eax]
mov word [ebp - 0x1cc], cx
mov edx, dword [ebp - 0x234]
add edx, 2
mov dword [ebp - 0x234], edx
mov ax, word [ebp - 0x1cc]
mov word [ebp - 0x14], ax
push edi
call 0x4c7599
add byte [ebp + 0x35], cl
inc esi
dec esp
xor al, 0x3f
xor eax, 0x4c48342
xor edi, 0x117fc
add edi, 0x8bfc
pop edi
push eax
push edx
add esp, 4
xor eax, 0x13332
xor eax, 0x12831
pop eax
movzx ecx, word [ebp - 0x14]
test ecx, ecx
jne 0x4c75d8
movzx edx, word [ebp - 0x60]
movzx eax, word [ebp - 0x14]
sub edx, eax
mov dword [ebp - 0x2f4], edx
jmp 0x4c765b
movzx ecx, word [ebp - 0x60]
movzx edx, word [ebp - 0x14]
cmp ecx, edx
je 0x4c74d1
movzx eax, word [ebp - 0x60]
xor eax, 0x20
movzx ecx, word [ebp - 0x14]
cmp eax, ecx
je 0x4c74d1
push ecx
call 0x4c760b
add byte [eax + 0x44], al
dec eax
aaa
xor cl, byte [ebp + 0x4a]
inc ebp
add esp, 4
add ecx, 0x1bb9
xor ecx, 0x183c4
call 0x4c7629
add byte [esi], dh
push eax
inc ecx
cmp al, 0x43
inc edx
dec esi
inc edi
xor al, 0x83
les eax, [ecx + ebx*2]
movzx edx, word [ebp - 0x60]
movzx eax, word [ebp - 0x14]
cmp edx, eax
jge 0x4c7645
mov dword [ebp - 0x2f0], 0xffffffff
jmp 0x4c764f
mov dword [ebp - 0x2f0], 1
mov ecx, dword [ebp - 0x2f0]
mov dword [ebp - 0x2f4], ecx
cmp dword [ebp - 0x2f4], 0
jne 0x4c76a4
push eax
add eax, 0x12a74
xor eax, 0xa4e6
jmp 0x4c7677
pop eax
push ebx
push ebx
add esp, 4
add ebx, 0x1390c
sub ebx, 0x16bf3
pop ebx
push eax
push esi
add esp, 4
add eax, 0x13781
pop eax
mov edx, dword [ebp - 0xa0]
mov dword [ebp - 0x70], edx
jmp 0x4c773b
mov eax, dword [ebp - 0xa0]
mov ecx, dword [eax]
mov dword [ebp - 0xa0], ecx
push edi
or edi, 0x992b
sub edi, 0x4c89
add edi, 0x26cb
or edi, 0xd5fb
pop edi
push edi
push ecx
add esp, 4
xor edi, 0x101fa
sub edi, 0x102e4
sub edi, 0x132c6
pop edi
mov edx, dword [ebp - 0xa0]
cmp edx, dword [ebp - 0x238]
je 0x4c7702
mov eax, dword [ebp - 0xa0]
cmp dword [eax + 0x30], 0
jne 0x4c7446
push ebx
push ecx
add esp, 4
sub ebx, 0xa9f3
pop ebx
push edx
or edx, 0x5feb
sub edx, 0x9c3e
xor edx, 0xdbc0
xor edx, 0x6797
pop edx
push esi
push esi
add esp, 4
or esi, 0x15423
pop esi
mov dword [ebp - 0x70], 0
Function at 0x4c760b
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edx
xor edx, 0x11ad2
pop edx
push eax
push ecx
add esp, 4
and eax, 0xc8c4
add eax, 0x13af0
add eax, 0x18d1
or eax, 0x13d
pop eax
push ecx
push ecx
add esp, 4
sub ecx, 0x15171
pop ecx
mov edx, dword [ebp - 0x230]
mov ax, word [edx]
mov word [ebp - 0x1ca], ax
mov ecx, dword [ebp - 0x230]
add ecx, 2
mov dword [ebp - 0x230], ecx
mov dx, word [ebp - 0x1ca]
mov word [ebp - 0x60], dx
push edi
push edx
add esp, 4
sub edi, 0x30b2
pop edi
push eax
call fcn.004c754a
add byte [esi + 0x4a], al
dec edi
xor eax, 0x4732353f
inc ebx
inc ebp
add esp, 4
call 0x4c755b
add byte [ecx], bh
push eax
dec ebx
inc eax
dec esp
cmp eax, 0xc4834132
add al, 0x58
mov eax, dword [ebp - 0x234]
mov cx, word [eax]
mov word [ebp - 0x1cc], cx
mov edx, dword [ebp - 0x234]
add edx, 2
mov dword [ebp - 0x234], edx
mov ax, word [ebp - 0x1cc]
mov word [ebp - 0x14], ax
push edi
call 0x4c7599
add byte [ebp + 0x35], cl
inc esi
dec esp
xor al, 0x3f
xor eax, 0x4c48342
xor edi, 0x117fc
add edi, 0x8bfc
pop edi
push eax
push edx
add esp, 4
xor eax, 0x13332
xor eax, 0x12831
pop eax
movzx ecx, word [ebp - 0x14]
test ecx, ecx
jne 0x4c75d8
movzx edx, word [ebp - 0x60]
movzx eax, word [ebp - 0x14]
sub edx, eax
mov dword [ebp - 0x2f4], edx
jmp 0x4c765b
movzx ecx, word [ebp - 0x60]
movzx edx, word [ebp - 0x14]
cmp ecx, edx
je 0x4c74d1
movzx eax, word [ebp - 0x60]
xor eax, 0x20
movzx ecx, word [ebp - 0x14]
cmp eax, ecx
je 0x4c74d1
push ecx
call 0x4c760b
add byte [eax + 0x44], al
dec eax
aaa
xor cl, byte [ebp + 0x4a]
inc ebp
add esp, 4
add ecx, 0x1bb9
xor ecx, 0x183c4
call 0x4c7629
add byte [esi], dh
push eax
inc ecx
cmp al, 0x43
inc edx
dec esi
inc edi
xor al, 0x83
les eax, [ecx + ebx*2]
movzx edx, word [ebp - 0x60]
movzx eax, word [ebp - 0x14]
cmp edx, eax
jge 0x4c7645
mov dword [ebp - 0x2f0], 0xffffffff
jmp 0x4c764f
mov dword [ebp - 0x2f0], 1
mov ecx, dword [ebp - 0x2f0]
mov dword [ebp - 0x2f4], ecx
cmp dword [ebp - 0x2f4], 0
jne 0x4c76a4
push eax
add eax, 0x12a74
xor eax, 0xa4e6
jmp 0x4c7677
pop eax
push ebx
push ebx
add esp, 4
add ebx, 0x1390c
sub ebx, 0x16bf3
pop ebx
push eax
push esi
add esp, 4
add eax, 0x13781
pop eax
mov edx, dword [ebp - 0xa0]
mov dword [ebp - 0x70], edx
jmp 0x4c773b
mov eax, dword [ebp - 0xa0]
mov ecx, dword [eax]
mov dword [ebp - 0xa0], ecx
push edi
or edi, 0x992b
sub edi, 0x4c89
add edi, 0x26cb
or edi, 0xd5fb
pop edi
push edi
push ecx
add esp, 4
xor edi, 0x101fa
sub edi, 0x102e4
sub edi, 0x132c6
pop edi
mov edx, dword [ebp - 0xa0]
cmp edx, dword [ebp - 0x238]
je 0x4c7702
mov eax, dword [ebp - 0xa0]
cmp dword [eax + 0x30], 0
jne 0x4c7446
push ebx
push ecx
add esp, 4
sub ebx, 0xa9f3
pop ebx
push edx
or edx, 0x5feb
sub edx, 0x9c3e
xor edx, 0xdbc0
xor edx, 0x6797
pop edx
push esi
push esi
add esp, 4
or esi, 0x15423
pop esi
mov dword [ebp - 0x70], 0