joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4082b6
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov byte [ebp - 0x87c], 0x45
mov byte [ebp - 0x87b], 0x78
mov byte [ebp - 0x87a], 0x69
imul eax, esi, 0xfff78785
push dword [esi + eax*8 - 0x7b]
mov bh, dh
invalid
call dword [eax - 0x3a]
test dword [ecx + 0x72fffff7], ecx
mov byte [ebp - 0x876], 0x6f
mov byte [ebp - 0x875], 0x63
mov byte [ebp - 0x874], 0x65
mov byte [ebp - 0x873], 0x73
mov byte [ebp - 0x872], 0x73
mov byte [ebp - 0x871], 0
push eax
push ecx
add esp, 4
xor eax, 0xe73
jmp 0x4082a5
pop eax
push ebx
call 0x4082b6
add byte [edi + 0x4c], cl
inc ebx
inc edx
aas
inc esi
aaa
inc esp
add esp, 4
sub ebx, 0x124b9
and ebx, 0x13b90
pop ebx
mov edx, 0x6b
mov word [ebp - 0x1754], dx
mov dword [ebp - 0x1754], edx
mov eax, 0x65
mov word [ebp - 0x1752], ax
mov ecx, 0x72
mov word [ebp - 0x1750], cx
mov edx, 0x6e
mov word [ebp - 0x174e], dx

Function at 0x4082cc
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov dword [ebp - 0x1754], edx
jmp 0x40837e
add edi, 0x12b97
pop edi
push edx
push eax
add esp, 4
les eax, [ecx + eax*4]
add byte [ecx], ch
add byte [eax], al
pop edx
push ecx
push eax
add esp, 4
or ecx, 0xc83a
pop ecx
push eax
sub eax, 0x103c6
or eax, 0x42eb
add byte [eax], al
add eax, 0x1c22
and eax, 0x1222e
pop eax
push eax
push eax
add esp, 4

Function at 0x40831c
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [eax], al
add byte [esi - 0x77], ah
test dword [edx - 0x46000018], edi
add byte cs:[eax], al
add byte [esi - 0x77], ah
lea edi, [eax + ebp*8 + 0x64baffff]
add byte [eax], al
add byte [esi - 0x77], ah
xchg ebp, eax
mov esi, 0xb8ffffe8
insb byte es:[edi], dx
add byte [eax], al
add byte [esi - 0x77], ah
test eax, eax
call 0x6cfa834b

Function at 0x4083a8
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov dword [ebp - 0x1754], edx
jmp 0x40837e
add edi, 0x12b97
pop edi
push edx
push eax
add esp, 4
les eax, [ecx + eax*4]
add byte [ecx], ch
add byte [eax], al
pop edx
push ecx
push eax
add esp, 4
or ecx, 0xc83a
pop ecx
push eax
sub eax, 0x103c6
or eax, 0x42eb
add byte [eax], al
add eax, 0x1c22
and eax, 0x1222e
pop eax
push eax
push eax
add esp, 4

Function at 0x4083bc
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
and eax, 0x11448
pop eax
mov eax, dword fs:[0x18]
mov dword [ebp - 0x197c], eax
mov ecx, dword [ebp - 0x197c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1980], edx
mov eax, dword [ebp - 0x1980]
mov dword [ebp - 0x15ec], eax
push edx
and edx, 0x4250
pop edx
push edi
jmp 0x4083fa
or edi, 0x95e8
xor edi, 0x53ca
pop edi
push edx
jmp 0x40840f
and edx, 0x5bea
xor edx, 0x2b94
pop edx
cmp dword [ebp - 0x15ec], 0
jne 0x408434
mov dword [ebp - 0x2f0], 0
jmp 0x4086f0
mov ecx, dword [ebp - 0x15ec]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
Function at 0x408440
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov dword [ebp - 0xcac], eax
push ecx
push ecx
add esp, 4
and ecx, 0x98c0
and ecx, 0x6b2c
or ecx, 0xe0d5
pop ecx
push esi
sub esi, 0x5c97
or esi, 0x335b
sub esi, 0x167a1
add esi, 0x103d
pop esi
cmp dword [ebp - 0xcac], 0
jne 0x408490
mov dword [ebp - 0x2f0], 0
jmp 0x4086f0
mov ecx, dword [ebp - 0xcac]
mov dword [ebp - 0x500], ecx
push eax
sub eax, 0x16314
sub eax, 0x6608
and eax, 0x796
jmp 0x4084b6
pop eax
push ecx
call 0x4084c4
add byte [eax + eax*2 + 0x49], cl
xor al, byte [ebp + 0x3e]
add esp, 4
and ecx, 0xbb36
pop ecx
lea edx, [ebp - 0x1754]
mov dword [ebp - 0xca8], edx
mov eax, dword [ebp - 0x500]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xca4], ecx
xor edx, edx
mov word [ebp - 0x22c], dx
mov dword [ebp - 0x22c], edx
xor eax, eax
mov word [ebp - 0x128], ax
push ecx
push ebx
add esp, 4
push edi
add edi, 0x53eb
or edi, 0xcc4c
and edi, 0x87c8
pop edi
push eax
push esi
add esp, 4
or eax, 0xcf1f
jmp 0x408715
sub eax, 0xd93
sub eax, 0xa81f
pop eax
cmp dword [ebp - 0x2f0], 0
jne 0x409027
mov eax, 0x6b
mov word [ebp - 0x1790], ax
invalid

Function at 0x4084c4
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov dword [ebp - 0xcac], eax
push ecx
push ecx
add esp, 4
and ecx, 0x98c0
and ecx, 0x6b2c
or ecx, 0xe0d5
pop ecx
push esi
sub esi, 0x5c97
or esi, 0x335b
sub esi, 0x167a1
add esi, 0x103d
pop esi
cmp dword [ebp - 0xcac], 0
jne 0x408490
mov dword [ebp - 0x2f0], 0
jmp 0x4086f0
mov ecx, dword [ebp - 0xcac]
mov dword [ebp - 0x500], ecx
push eax
sub eax, 0x16314
sub eax, 0x6608
and eax, 0x796
jmp 0x4084b6
pop eax
push ecx
call 0x4084c4
add byte [eax + eax*2 + 0x49], cl
xor al, byte [ebp + 0x3e]
add esp, 4
and ecx, 0xbb36
pop ecx
lea edx, [ebp - 0x1754]
mov dword [ebp - 0xca8], edx
mov eax, dword [ebp - 0x500]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xca4], ecx
xor edx, edx
mov word [ebp - 0x22c], dx
mov dword [ebp - 0x22c], edx
xor eax, eax
mov word [ebp - 0x128], ax
push ecx
push ebx
add esp, 4
push edi
add edi, 0x53eb
or edi, 0xcc4c
and edi, 0x87c8
pop edi
push eax
push esi
add esp, 4
or eax, 0xcf1f
jmp 0x408715
sub eax, 0xd93
sub eax, 0xa81f
pop eax
cmp dword [ebp - 0x2f0], 0
jne 0x409027
mov eax, 0x6b
mov word [ebp - 0x1790], ax
invalid
Function at 0x408500
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
or ecx, 0x14f8f
add ecx, 0x28e6
pop ecx
push eax
push ebx
add esp, 4
les eax, [ecx + eax*4]
enter 0x5c0a, 1
add byte [ecx + 0x2e55e8], al
add byte [ecx + 0x35eff0], al
add byte [eax + 0x57], bl
add edi, 0x13687
pop edi
mov ecx, dword [ebp - 0xca4]
mov dx, word [ecx]
mov word [ebp - 0x1046], dx
mov eax, dword [ebp - 0xca4]
add eax, 2
mov dword [ebp - 0xca4], eax
mov cx, word [ebp - 0x1046]
out dx, eax
invalid
jmp dword [esi - 0x77]
invalid
aam 0xfd
invalid
dec dword [ebx - 0xca76b]
jmp dword [esi - 0x75]
add ah, byte [esi - 0x77]
test dword [eax - 0x74000011], edi
lea ebx, [eax - 0xd]
invalid
inc dword [ebx - 0x7276fd3f]
pop eax
invalid
invalid
jmp dword [esi - 0x75]
xchg ebp, eax
mov eax, 0x66ffffef
mov dword [ebp - 0x128], edx
push esi
sub esi, 0x66f
and esi, 0x679
pop esi
push edx
call 0x4085a3
add byte [edi], dh
dec ecx
cmp cl, byte [eax + 0x4e]
dec ebp
xor al, 0x83
les eax, [ecx + eax*4]
cmp byte [esi + 1], dh
cmp byte [esi + 1], dh
add byte [edx + 0x56], bl
push esi
add esp, 4
add esi, 0x154fa
pop esi
movzx eax, word [ebp - 0x128]
test eax, eax
jne fcn.004085dc
movzx ecx, word [ebp - 0x22c]
movzx edx, word [ebp - 0x128]
sub ecx, edx
mov dword [ebp - 0x15f0], ecx
jmp 0x40863f

Function at 0x408510
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
or ecx, 0x14f8f
add ecx, 0x28e6
pop ecx
push eax
push ebx
add esp, 4
les eax, [ecx + eax*4]
enter 0x5c0a, 1
add byte [ecx + 0x2e55e8], al
add byte [ecx + 0x35eff0], al
add byte [eax + 0x57], bl
add edi, 0x13687
pop edi
mov ecx, dword [ebp - 0xca4]
mov dx, word [ecx]
mov word [ebp - 0x1046], dx
mov eax, dword [ebp - 0xca4]
add eax, 2
mov dword [ebp - 0xca4], eax
mov cx, word [ebp - 0x1046]
out dx, eax
invalid
jmp dword [esi - 0x77]
invalid
aam 0xfd
invalid
dec dword [ebx - 0xca76b]
jmp dword [esi - 0x75]
add ah, byte [esi - 0x77]
test dword [eax - 0x74000011], edi
lea ebx, [eax - 0xd]
invalid
inc dword [ebx - 0x7276fd3f]
pop eax
invalid
invalid
jmp dword [esi - 0x75]
xchg ebp, eax
mov eax, 0x66ffffef
mov dword [ebp - 0x128], edx
push esi
sub esi, 0x66f
and esi, 0x679
pop esi
push edx
call 0x4085a3
add byte [edi], dh
dec ecx
cmp cl, byte [eax + 0x4e]
dec ebp
xor al, 0x83
les eax, [ecx + eax*4]
cmp byte [esi + 1], dh
cmp byte [esi + 1], dh
add byte [edx + 0x56], bl
push esi
add esp, 4
add esi, 0x154fa
pop esi
movzx eax, word [ebp - 0x128]
test eax, eax
jne fcn.004085dc
movzx ecx, word [ebp - 0x22c]
movzx edx, word [ebp - 0x128]
sub ecx, edx
mov dword [ebp - 0x15f0], ecx
jmp 0x40863f
Function at 0x4085a3
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
or ecx, 0x14f8f
add ecx, 0x28e6
pop ecx
push eax
push ebx
add esp, 4
les eax, [ecx + eax*4]
enter 0x5c0a, 1
add byte [ecx + 0x2e55e8], al
add byte [ecx + 0x35eff0], al
add byte [eax + 0x57], bl
add edi, 0x13687
pop edi
mov ecx, dword [ebp - 0xca4]
mov dx, word [ecx]
mov word [ebp - 0x1046], dx
mov eax, dword [ebp - 0xca4]
add eax, 2
mov dword [ebp - 0xca4], eax
mov cx, word [ebp - 0x1046]
out dx, eax
invalid
jmp dword [esi - 0x77]
invalid
aam 0xfd
invalid
dec dword [ebx - 0xca76b]
jmp dword [esi - 0x75]
add ah, byte [esi - 0x77]
test dword [eax - 0x74000011], edi
lea ebx, [eax - 0xd]
invalid
inc dword [ebx - 0x7276fd3f]
pop eax
invalid
invalid
jmp dword [esi - 0x75]
xchg ebp, eax
mov eax, 0x66ffffef
mov dword [ebp - 0x128], edx
push esi
sub esi, 0x66f
and esi, 0x679
pop esi
push edx
call 0x4085a3
add byte [edi], dh
dec ecx
cmp cl, byte [eax + 0x4e]
dec ebp
xor al, 0x83
les eax, [ecx + eax*4]
cmp byte [esi + 1], dh
cmp byte [esi + 1], dh
add byte [edx + 0x56], bl
push esi
add esp, 4
add esi, 0x154fa
pop esi
movzx eax, word [ebp - 0x128]
test eax, eax
jne fcn.004085dc
movzx ecx, word [ebp - 0x22c]
movzx edx, word [ebp - 0x128]
sub ecx, edx
mov dword [ebp - 0x15f0], ecx
jmp 0x40863f

Function at 0x4085dc
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
movzx eax, word [ebp - 0x22c]
movzx ecx, word [ebp - 0x128]
cmp eax, ecx

Function at 0x4085ec
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
je 0x4084fb
movzx edx, word [ebp - 0x22c]
xor edx, 0x20
movzx eax, word [ebp - 0x128]
cmp edx, eax
je 0x4084fb
movzx ecx, word [ebp - 0x22c]
movzx edx, word [ebp - 0x128]
cmp ecx, edx
jge 0x408629
mov dword [ebp - 0x15b0], 0xffffffff
jmp 0x408633
mov dword [ebp - 0x15b0], 1
mov eax, dword [ebp - 0x15b0]
mov dword [ebp - 0x15f0], eax
cmp dword [ebp - 0x15f0], 0
jne 0x408688
push edi
push edx
add esp, 4
call 0x40865a
add byte [esi + ecx*2 + 0x4f], al
cmp ecx, dword [ebp + 0x43]
inc ebx
dec esp
add esp, 4
pop edi
push eax
and eax, 0x88dd
add byte [eax + 0x51], bl
jmp 0x40866d
add ecx, 0x16af3
xor ecx, 0xe3b0
pop ecx
mov ecx, dword [ebp - 0x500]
mov dword [ebp - 0x2f0], ecx
jmp 0x4086f0
push edi
push edx
add esp, 4
add edi, 0x222a
add edi, 0xfd4
and edi, 0x11090
or edi, 0x89a1
pop edi
push edx
call 0x4086b6
add byte [edi + 0x3a39474d], bh
cmp al, 0x4f
dec ebp
add esp, 4
pop edx
mov edx, dword [ebp - 0x500]
mov eax, dword [edx]
mov dword [ebp - 0x500], eax
mov ecx, dword [ebp - 0x500]
cmp ecx, dword [ebp - 0xcac]
je 0x4086e6
mov edx, dword [ebp - 0x500]
cmp dword [edx + 0x30], 0
jne 0x40849c
invalid
invalid
mov dword [ebp - 0x2f0], 0
Function at 0x40865a
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
je 0x4084fb
movzx edx, word [ebp - 0x22c]
xor edx, 0x20
movzx eax, word [ebp - 0x128]
cmp edx, eax
je 0x4084fb
movzx ecx, word [ebp - 0x22c]
movzx edx, word [ebp - 0x128]
cmp ecx, edx
jge 0x408629
mov dword [ebp - 0x15b0], 0xffffffff
jmp 0x408633
mov dword [ebp - 0x15b0], 1
mov eax, dword [ebp - 0x15b0]
mov dword [ebp - 0x15f0], eax
cmp dword [ebp - 0x15f0], 0
jne 0x408688
push edi
push edx
add esp, 4
call 0x40865a
add byte [esi + ecx*2 + 0x4f], al
cmp ecx, dword [ebp + 0x43]
inc ebx
dec esp
add esp, 4
pop edi
push eax
and eax, 0x88dd
add byte [eax + 0x51], bl
jmp 0x40866d
add ecx, 0x16af3
xor ecx, 0xe3b0
pop ecx
mov ecx, dword [ebp - 0x500]
mov dword [ebp - 0x2f0], ecx
jmp 0x4086f0
push edi
push edx
add esp, 4
add edi, 0x222a
add edi, 0xfd4
and edi, 0x11090
or edi, 0x89a1
pop edi
push edx
call 0x4086b6
add byte [edi + 0x3a39474d], bh
cmp al, 0x4f
dec ebp
add esp, 4
pop edx
mov edx, dword [ebp - 0x500]
mov eax, dword [edx]
mov dword [ebp - 0x500], eax
mov ecx, dword [ebp - 0x500]
cmp ecx, dword [ebp - 0xcac]
je 0x4086e6
mov edx, dword [ebp - 0x500]
cmp dword [edx + 0x30], 0
jne 0x40849c
invalid
invalid
mov dword [ebp - 0x2f0], 0

Function at 0x4086b6
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
je 0x4084fb
movzx edx, word [ebp - 0x22c]
xor edx, 0x20
movzx eax, word [ebp - 0x128]
cmp edx, eax
je 0x4084fb
movzx ecx, word [ebp - 0x22c]
movzx edx, word [ebp - 0x128]
cmp ecx, edx
jge 0x408629
mov dword [ebp - 0x15b0], 0xffffffff
jmp 0x408633
mov dword [ebp - 0x15b0], 1
mov eax, dword [ebp - 0x15b0]
mov dword [ebp - 0x15f0], eax
cmp dword [ebp - 0x15f0], 0
jne 0x408688
push edi
push edx
add esp, 4
call 0x40865a
add byte [esi + ecx*2 + 0x4f], al
cmp ecx, dword [ebp + 0x43]
inc ebx
dec esp
add esp, 4
pop edi
push eax
and eax, 0x88dd
add byte [eax + 0x51], bl
jmp 0x40866d
add ecx, 0x16af3
xor ecx, 0xe3b0
pop ecx
mov ecx, dword [ebp - 0x500]
mov dword [ebp - 0x2f0], ecx
jmp 0x4086f0
push edi
push edx
add esp, 4
add edi, 0x222a
add edi, 0xfd4
and edi, 0x11090
or edi, 0x89a1
pop edi
push edx
call 0x4086b6
add byte [edi + 0x3a39474d], bh
cmp al, 0x4f
dec ebp
add esp, 4
pop edx
mov edx, dword [ebp - 0x500]
mov eax, dword [edx]
mov dword [ebp - 0x500], eax
mov ecx, dword [ebp - 0x500]
cmp ecx, dword [ebp - 0xcac]
je 0x4086e6
mov edx, dword [ebp - 0x500]
cmp dword [edx + 0x30], 0
jne 0x40849c
invalid
invalid
mov dword [ebp - 0x2f0], 0

Function at 0x40873c
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte gs:[eax], al
add byte [esi - 0x77], ah
lea esi, [edx - 0x18]
invalid

Function at 0x408874
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
out 0xff, al
dec dword [ecx - 0x15f373]
call dword [esi + 0x53]
Function at 0x408907
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add dword [eax], eax
pop ebx
push edx
call 0x408907
add byte [ecx + 0x33], cl
aas
dec esp
inc edx
inc ebp
dec eax
inc ebx
dec ebx
add esp, 4
pop edx
cmp dword [ebp - 0xcb8], 0
jne 0x408923
mov dword [ebp - 0x754], 0
jmp 0x408b6e
mov edx, dword [ebp - 0xcb8]
mov dword [ebp - 0x504], edx
push edx
call 0x40893c
add byte [esi], dh
inc esp
dec ebp
dec esp
inc esp
aaa
add esp, 4
xor edx, 0x2c0
jmp 0x40894a
pop edx
push ebx
and ebx, 0x3bdd
add byte [eax], al
xor ebx, 0xdd4f
pop ebx
push ecx
xor ecx, 0x16077
pop ecx
lea eax, [ebp - 0x1790]
mov dword [ebp - 0xcb4], eax
mov ecx, dword [ebp - 0x504]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcb0], edx
xor eax, eax
mov word [ebp - 0x230], ax
xor ecx, ecx
mov word [ebp - 0x44], cx
push edi
push ebx
add esp, 4
or edi, 0x6c3
xor edi, 0x4450
pop edi
push edi
and edi, 0x3133
pop edi
push edi
push edi
add esp, 4
xor edi, 0x131b9
or edi, 0x8046
and edi, 0x9227
pop edi
mov edx, dword [ebp - 0xcb0]
mov ax, word [edx]
mov word [ebp - 0x104a], ax
mov ecx, dword [ebp - 0xcb0]
add ecx, 2
mov dword [ebp - 0xcb0], ecx
mov dx, word [ebp - 0x104a]
mov word [ebp - 0x230], dx
mov eax, dword [ebp - 0xcb4]
mov cx, word [eax]
mov word [ebp - 0x104c], cx
mov edx, dword [ebp - 0xcb4]
add edx, 2
mov dword [ebp - 0xcb4], edx
mov ax, word [ebp - 0x104c]
mov word [ebp - 0x44], ax
push esi
push ecx
add esp, 4
jmp 0x408a1e
xor esi, 0x1834c
pop esi
push ebx
push ecx
add esp, 4
call 0x408a36
add byte [edx + 0x4d], cl
inc edi
inc edx
xor edi, dword [ebx + eax*4]
les eax, [ebx + ebx*2]
push edx
push edx
add esp, 4
sub edx, 0x123f6
pop edx
movzx ecx, word [ebp - 0x44]
test ecx, ecx
jne 0x408a63
movzx edx, word [ebp - 0x230]
movzx eax, word [ebp - 0x44]
sub edx, eax
mov dword [ebp - 0x15fc], edx
jmp 0x408abd
movzx ecx, word [ebp - 0x230]
movzx edx, word [ebp - 0x44]
cmp ecx, edx
je 0x40898b
movzx eax, word [ebp - 0x230]
xor eax, 0x20
movzx ecx, word [ebp - 0x44]
cmp eax, ecx
je 0x40898b
movzx edx, word [ebp - 0x230]
movzx eax, word [ebp - 0x44]
cmp edx, eax
jge 0x408aa7
mov dword [ebp - 0x15f8], 0xffffffff
jmp 0x408ab1
mov dword [ebp - 0x15f8], 1
mov ecx, dword [ebp - 0x15f8]
mov dword [ebp - 0x15fc], ecx
invalid
cmp dword [ebp - 0x15fc], 0
jne 0x408b06
push edi
push edx
add esp, 4
jmp 0x408ad2
pop edi
push esi
sub esi, 0x16aec
call 0x408ae8
add byte [esi], dh
aaa
dec edx
dec esi
inc ebp
dec esp
inc ebp
inc esi
add esp, 4
add esi, 0xf525
xor esi, 0x540f
pop esi
mov edx, dword [ebp - 0x504]
mov dword [ebp - 0x754], edx
jmp 0x408b6e
push ecx
push ecx
add esp, 4
or ecx, 0x18c
sub ecx, 0xefa6
xor ecx, 0xb193
xor ecx, 0xbaab
pop ecx
push esi
or esi, 0x15653
sub esi, 0x79b0
sub esi, 0x145e8
pop esi
mov eax, dword [ebp - 0x504]
mov ecx, dword [eax]
mov dword [ebp - 0x504], ecx
mov edx, dword [ebp - 0x504]
cmp edx, dword [ebp - 0xcb8]
je 0x408b64
mov eax, dword [ebp - 0x504]
cmp dword [eax + 0x30], 0
jne 0x40892f
mov dword [ebp - 0x754], 0
push ecx
or ecx, 0xf22c
call 0x408b82
add byte [ebx + eax*2], dh
xor ecx, dword [edx + 0x41]
dec esi
cmp dword [ebx - 0xe7efb3c], eax
fnstcw word [0x57590000]
push edi
Function at 0x40893c
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add dword [eax], eax
pop ebx
push edx
call 0x408907
add byte [ecx + 0x33], cl
aas
dec esp
inc edx
inc ebp
dec eax
inc ebx
dec ebx
add esp, 4
pop edx
cmp dword [ebp - 0xcb8], 0
jne 0x408923
mov dword [ebp - 0x754], 0
jmp 0x408b6e
mov edx, dword [ebp - 0xcb8]
mov dword [ebp - 0x504], edx
push edx
call 0x40893c
add byte [esi], dh
inc esp
dec ebp
dec esp
inc esp
aaa
add esp, 4
xor edx, 0x2c0
jmp 0x40894a
pop edx
push ebx
and ebx, 0x3bdd
add byte [eax], al
xor ebx, 0xdd4f
pop ebx
push ecx
xor ecx, 0x16077
pop ecx
lea eax, [ebp - 0x1790]
mov dword [ebp - 0xcb4], eax
mov ecx, dword [ebp - 0x504]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcb0], edx
xor eax, eax
mov word [ebp - 0x230], ax
xor ecx, ecx
mov word [ebp - 0x44], cx
push edi
push ebx
add esp, 4
or edi, 0x6c3
xor edi, 0x4450
pop edi
push edi
and edi, 0x3133
pop edi
push edi
push edi
add esp, 4
xor edi, 0x131b9
or edi, 0x8046
and edi, 0x9227
pop edi
mov edx, dword [ebp - 0xcb0]
mov ax, word [edx]
mov word [ebp - 0x104a], ax
mov ecx, dword [ebp - 0xcb0]
add ecx, 2
mov dword [ebp - 0xcb0], ecx
mov dx, word [ebp - 0x104a]
mov word [ebp - 0x230], dx
mov eax, dword [ebp - 0xcb4]
mov cx, word [eax]
mov word [ebp - 0x104c], cx
mov edx, dword [ebp - 0xcb4]
add edx, 2
mov dword [ebp - 0xcb4], edx
mov ax, word [ebp - 0x104c]
mov word [ebp - 0x44], ax
push esi
push ecx
add esp, 4
jmp 0x408a1e
xor esi, 0x1834c
pop esi
push ebx
push ecx
add esp, 4
call 0x408a36
add byte [edx + 0x4d], cl
inc edi
inc edx
xor edi, dword [ebx + eax*4]
les eax, [ebx + ebx*2]
push edx
push edx
add esp, 4
sub edx, 0x123f6
pop edx
movzx ecx, word [ebp - 0x44]
test ecx, ecx
jne 0x408a63
movzx edx, word [ebp - 0x230]
movzx eax, word [ebp - 0x44]
sub edx, eax
mov dword [ebp - 0x15fc], edx
jmp 0x408abd
movzx ecx, word [ebp - 0x230]
movzx edx, word [ebp - 0x44]
cmp ecx, edx
je 0x40898b
movzx eax, word [ebp - 0x230]
xor eax, 0x20
movzx ecx, word [ebp - 0x44]
cmp eax, ecx
je 0x40898b
movzx edx, word [ebp - 0x230]
movzx eax, word [ebp - 0x44]
cmp edx, eax
jge 0x408aa7
mov dword [ebp - 0x15f8], 0xffffffff
jmp 0x408ab1
mov dword [ebp - 0x15f8], 1
mov ecx, dword [ebp - 0x15f8]
mov dword [ebp - 0x15fc], ecx
invalid
cmp dword [ebp - 0x15fc], 0
jne 0x408b06
push edi
push edx
add esp, 4
jmp 0x408ad2
pop edi
push esi
sub esi, 0x16aec
call 0x408ae8
add byte [esi], dh
aaa
dec edx
dec esi
inc ebp
dec esp
inc ebp
inc esi
add esp, 4
add esi, 0xf525
xor esi, 0x540f
pop esi
mov edx, dword [ebp - 0x504]
mov dword [ebp - 0x754], edx
jmp 0x408b6e
push ecx
push ecx
add esp, 4
or ecx, 0x18c
sub ecx, 0xefa6
xor ecx, 0xb193
xor ecx, 0xbaab
pop ecx
push esi
or esi, 0x15653
sub esi, 0x79b0
sub esi, 0x145e8
pop esi
mov eax, dword [ebp - 0x504]
mov ecx, dword [eax]
mov dword [ebp - 0x504], ecx
mov edx, dword [ebp - 0x504]
cmp edx, dword [ebp - 0xcb8]
je 0x408b64
mov eax, dword [ebp - 0x504]
cmp dword [eax + 0x30], 0
jne 0x40892f
mov dword [ebp - 0x754], 0
push ecx
or ecx, 0xf22c
call 0x408b82
add byte [ebx + eax*2], dh
xor ecx, dword [edx + 0x41]
dec esi
cmp dword [ebx - 0xe7efb3c], eax
fnstcw word [0x57590000]
push edi
Function at 0x408950
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add dword [eax], eax
pop ebx
push edx
call 0x408907
add byte [ecx + 0x33], cl
aas
dec esp
inc edx
inc ebp
dec eax
inc ebx
dec ebx
add esp, 4
pop edx
cmp dword [ebp - 0xcb8], 0
jne 0x408923
mov dword [ebp - 0x754], 0
jmp 0x408b6e
mov edx, dword [ebp - 0xcb8]
mov dword [ebp - 0x504], edx
push edx
call 0x40893c
add byte [esi], dh
inc esp
dec ebp
dec esp
inc esp
aaa
add esp, 4
xor edx, 0x2c0
jmp 0x40894a
pop edx
push ebx
and ebx, 0x3bdd
add byte [eax], al
xor ebx, 0xdd4f
pop ebx
push ecx
xor ecx, 0x16077
pop ecx
lea eax, [ebp - 0x1790]
mov dword [ebp - 0xcb4], eax
mov ecx, dword [ebp - 0x504]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcb0], edx
xor eax, eax
mov word [ebp - 0x230], ax
xor ecx, ecx
mov word [ebp - 0x44], cx
push edi
push ebx
add esp, 4
or edi, 0x6c3
xor edi, 0x4450
pop edi
push edi
and edi, 0x3133
pop edi
push edi
push edi
add esp, 4
xor edi, 0x131b9
or edi, 0x8046
and edi, 0x9227
pop edi
mov edx, dword [ebp - 0xcb0]
mov ax, word [edx]
mov word [ebp - 0x104a], ax
mov ecx, dword [ebp - 0xcb0]
add ecx, 2
mov dword [ebp - 0xcb0], ecx
mov dx, word [ebp - 0x104a]
mov word [ebp - 0x230], dx
mov eax, dword [ebp - 0xcb4]
mov cx, word [eax]
mov word [ebp - 0x104c], cx
mov edx, dword [ebp - 0xcb4]
add edx, 2
mov dword [ebp - 0xcb4], edx
mov ax, word [ebp - 0x104c]
mov word [ebp - 0x44], ax
push esi
push ecx
add esp, 4
jmp 0x408a1e
xor esi, 0x1834c
pop esi
push ebx
push ecx
add esp, 4
call 0x408a36
add byte [edx + 0x4d], cl
inc edi
inc edx
xor edi, dword [ebx + eax*4]
les eax, [ebx + ebx*2]
push edx
push edx
add esp, 4
sub edx, 0x123f6
pop edx
movzx ecx, word [ebp - 0x44]
test ecx, ecx
jne 0x408a63
movzx edx, word [ebp - 0x230]
movzx eax, word [ebp - 0x44]
sub edx, eax
mov dword [ebp - 0x15fc], edx
jmp 0x408abd
movzx ecx, word [ebp - 0x230]
movzx edx, word [ebp - 0x44]
cmp ecx, edx
je 0x40898b
movzx eax, word [ebp - 0x230]
xor eax, 0x20
movzx ecx, word [ebp - 0x44]
cmp eax, ecx
je 0x40898b
movzx edx, word [ebp - 0x230]
movzx eax, word [ebp - 0x44]
cmp edx, eax
jge 0x408aa7
mov dword [ebp - 0x15f8], 0xffffffff
jmp 0x408ab1
mov dword [ebp - 0x15f8], 1
mov ecx, dword [ebp - 0x15f8]
mov dword [ebp - 0x15fc], ecx
invalid
cmp dword [ebp - 0x15fc], 0
jne 0x408b06
push edi
push edx
add esp, 4
jmp 0x408ad2
pop edi
push esi
sub esi, 0x16aec
call 0x408ae8
add byte [esi], dh
aaa
dec edx
dec esi
inc ebp
dec esp
inc ebp
inc esi
add esp, 4
add esi, 0xf525
xor esi, 0x540f
pop esi
mov edx, dword [ebp - 0x504]
mov dword [ebp - 0x754], edx
jmp 0x408b6e
push ecx
push ecx
add esp, 4
or ecx, 0x18c
sub ecx, 0xefa6
xor ecx, 0xb193
xor ecx, 0xbaab
pop ecx
push esi
or esi, 0x15653
sub esi, 0x79b0
sub esi, 0x145e8
pop esi
mov eax, dword [ebp - 0x504]
mov ecx, dword [eax]
mov dword [ebp - 0x504], ecx
mov edx, dword [ebp - 0x504]
cmp edx, dword [ebp - 0xcb8]
je 0x408b64
mov eax, dword [ebp - 0x504]
cmp dword [eax + 0x30], 0
jne 0x40892f
mov dword [ebp - 0x754], 0
push ecx
or ecx, 0xf22c
call 0x408b82
add byte [ebx + eax*2], dh
xor ecx, dword [edx + 0x41]
dec esi
cmp dword [ebx - 0xe7efb3c], eax
fnstcw word [0x57590000]
push edi