joyce8/EMBER2024-capa huggingface dataset:
Function at 0x404b9c
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
call 0x404b9c
add byte [ecx*2 + 0x4f473b3a], bh
inc edi
cmp eax, dword [ebx + 0x7e804c4]
add byte [eax], al
add byte [eax], al
dec esi
aas
dec ebp
dec esp
add esp, 4
pop ecx
mov edx, dword [ebp - 0xac4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa60]
movzx edx, byte [ecx]
cmp eax, edx
je 0x404c31
push esi
push edi
add esp, 4
add esi, 0x18496
xor esi, 0x5b4c
pop esi
push edi
and edi, 0xce54
and edi, 0x155ad
and edi, 0xaaf5
pop edi
push esi
push eax
add esp, 4
add esi, 0x6ab0
pop esi
invalid
invalid
invalid

Function at 0x404bab
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
call 0x404b9c
add byte [ecx*2 + 0x4f473b3a], bh
inc edi
cmp eax, dword [ebx + 0x7e804c4]
add byte [eax], al
add byte [eax], al
dec esi
aas
dec ebp
dec esp
add esp, 4
pop ecx
mov edx, dword [ebp - 0xac4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa60]
movzx edx, byte [ecx]
cmp eax, edx
je 0x404c31
push esi
push edi
add esp, 4
add esi, 0x18496
xor esi, 0x5b4c
pop esi
push edi
and edi, 0xce54
and edi, 0x155ad
and edi, 0xaaf5
pop edi
push esi
push eax
add esp, 4
add esi, 0x6ab0
pop esi
invalid
invalid
invalid

Function at 0x404c32
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push esi
add esp, 4
or esi, 0x80e1
pop esi
push ecx
push ebx
add esp, 4
xor ecx, 0x180f9
and ecx, 0x177d4
pop ecx
push esi
jmp 0x404c56
and esi, 0x3f2c
xor esi, 0xba62
pop esi
mov edx, dword [ebp - 0xc80]
sub edx, 1
mov dword [ebp - 0xc80], edx
mov eax, dword [ebp - 0xac4]
add eax, 1

Function at 0x404c7b
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x4fc]
add edx, 1
mov dword [ebp - 0x4fc], edx
push eax
push esi
add esp, 4
call 0x404a58
add byte [eax], al
inc ebp
cmp byte [edx], bh
inc ebx
inc esi
inc ebp
add esp, 4
cmp dword [ebp - 0xc80], 0
jle 0x404c95
push ecx
push edx
add esp, 4
and ecx, 0xfde3
or ecx, 0x1045a
mov dword [ebp - 0xac4], eax
mov ecx, dword [ebp - 0xa60]
add ecx, 1
mov dword [ebp - 0xa60], ecx
jmp 0x404b70
mov edx, dword [ebp - 0xc84]
mov dword [ebp - 0x15cc], edx
cmp dword [ebp - 0x15cc], 0
jne 0x404cea
push edx
push eax
add esp, 4
call 0x404cbc
add byte [ebp + 0x41], al
xor eax, 0x83504445
les eax, [ecx + eax*4]
ljmp 0xca81
jmp 0x404a38

Function at 0x404cbc
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x4fc]
add edx, 1
mov dword [ebp - 0x4fc], edx
push eax
push esi
add esp, 4
call 0x404a58
add byte [eax], al
inc ebp
cmp byte [edx], bh
inc ebx
inc esi
inc ebp
add esp, 4
cmp dword [ebp - 0xc80], 0
jle 0x404c95
push ecx
push edx
add esp, 4
and ecx, 0xfde3
or ecx, 0x1045a
mov dword [ebp - 0xac4], eax
mov ecx, dword [ebp - 0xa60]
add ecx, 1
mov dword [ebp - 0xa60], ecx
jmp 0x404b70
mov edx, dword [ebp - 0xc84]
mov dword [ebp - 0x15cc], edx
cmp dword [ebp - 0x15cc], 0
jne 0x404cea
push edx
push eax
add esp, 4
call 0x404cbc
add byte [ebp + 0x41], al
xor eax, 0x83504445
les eax, [ecx + eax*4]
ljmp 0xca81
jmp 0x404a38
Function at 0x404dbb
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
call 0x404a69
add byte [esi], dh
aas
push eax
dec ebx
cmp dword [edi], edi
push eax
add esp, 4
sub eax, 0x378c
or eax, 0x8019
pop eax
mov eax, dword [ebp - 0x4fc]
sub eax, dword [ebp - 0x3f0]
cmp eax, 0xffffffff
jb 0x404ac1
push ecx
push esi
add esp, 4
call 0x404a9f
add byte [edx + edi], bh
inc esi
dec eax
aaa
dec esp
inc esi
inc ecx
cmp dword [ebp - 0x7d], eax
les eax, [ecx + eax*4]
leave
mov eax, 0x81000167
int1
xchg ebx, eax
int 0
add byte [ecx + 0x56], bl
jmp 0x404ab5
sub esi, 0x6041
pop esi
jmp 0x404cef
mov dword [ebp - 0xc80], 7
push esi
push edi
add esp, 4
or esi, 0x90a4
and esi, 0x17677
pop esi
push edx
or edx, 0x130e0
and edx, 0x1490a
pop edx
push edi
push ebx
add esp, 4
add edi, 0x42fc
sub edi, 0x4bf8
pop edi
mov dword [ebp - 0x3e8], 0
push esi
push edx
add esp, 4
or esi, 0x98ba
xor esi, 0x12089
or esi, 0x808e
and esi, 0xfbb6
pop esi
push ebx
push ecx
add esp, 4
or ebx, 0x7542
pop ebx
push edx
xor edx, 0x60ba
pop edx
push edi
push esi
add esp, 4
or edi, 0x237d
pop edi
push edx
push esi
add esp, 4
xor edx, 0x5cc6
pop edx
push ecx
add ecx, 0x7f60
or ecx, 0x15394
and ecx, 0xe186
add ecx, 0x18473
pop ecx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbe4]
mov dword [ebp - 0x15d0], eax
push edx
or edx, 0xb5d0
call 0x404dbb
add byte [eax + edx*2 + 0x40], cl
xor esi, dword [edi]
dec ebp
inc edx
dec esp
inc ebx
dec edi
add esp, 4
call 0x404dcc
add byte [esi + 0x3c], al
xor eax, 0x4b4f3539
xor eax, dword [ebx - 0x3d7efb3c]
push ds
loop 0x404dd4
add byte [edx - 0x39], bl
test dword [edi + ebx*8 - 1], ebx
Function at 0x404dcc
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
call 0x404a69
add byte [esi], dh
aas
push eax
dec ebx
cmp dword [edi], edi
push eax
add esp, 4
sub eax, 0x378c
or eax, 0x8019
pop eax
mov eax, dword [ebp - 0x4fc]
sub eax, dword [ebp - 0x3f0]
cmp eax, 0xffffffff
jb 0x404ac1
push ecx
push esi
add esp, 4
call 0x404a9f
add byte [edx + edi], bh
inc esi
dec eax
aaa
dec esp
inc esi
inc ecx
cmp dword [ebp - 0x7d], eax
les eax, [ecx + eax*4]
leave
mov eax, 0x81000167
int1
xchg ebx, eax
int 0
add byte [ecx + 0x56], bl
jmp 0x404ab5
sub esi, 0x6041
pop esi
jmp 0x404cef
mov dword [ebp - 0xc80], 7
push esi
push edi
add esp, 4
or esi, 0x90a4
and esi, 0x17677
pop esi
push edx
or edx, 0x130e0
and edx, 0x1490a
pop edx
push edi
push ebx
add esp, 4
add edi, 0x42fc
sub edi, 0x4bf8
pop edi
mov dword [ebp - 0x3e8], 0
push esi
push edx
add esp, 4
or esi, 0x98ba
xor esi, 0x12089
or esi, 0x808e
and esi, 0xfbb6
pop esi
push ebx
push ecx
add esp, 4
or ebx, 0x7542
pop ebx
push edx
xor edx, 0x60ba
pop edx
push edi
push esi
add esp, 4
or edi, 0x237d
pop edi
push edx
push esi
add esp, 4
xor edx, 0x5cc6
pop edx
push ecx
add ecx, 0x7f60
or ecx, 0x15394
and ecx, 0xe186
add ecx, 0x18473
pop ecx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbe4]
mov dword [ebp - 0x15d0], eax
push edx
or edx, 0xb5d0
call 0x404dbb
add byte [eax + edx*2 + 0x40], cl
xor esi, dword [edi]
dec ebp
inc edx
dec esp
inc ebx
dec edi
add esp, 4
call 0x404dcc
add byte [esi + 0x3c], al
xor eax, 0x4b4f3539
xor eax, dword [ebx - 0x3d7efb3c]
push ds
loop 0x404dd4
add byte [edx - 0x39], bl
test dword [edi + ebx*8 - 1], ebx
Function at 0x40530d
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
les eax, [ecx + eax*4]
ljmp 0x505a

Function at 0x405342
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
or al, 0x8b
push ecx
or al, 0x89
xchg ebp, eax
push 0x52fffff3

Function at 0x4055e1
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
inc dword [ebx + 0xf003079]
test dword [esi - 0x38000003], esi
invalid
test esp, esp
cld
invalid

Function at 0x4055ec
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
inc dword [ebx + 0xf003079]
test dword [esi - 0x38000003], esi
invalid
test esp, esp
cld
invalid

Function at 0x405ed1
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [eax], al
dec ebx
inc esp
dec ecx
aas
dec ecx
dec esi
add esp, 4
and eax, 0xf4e8
pop eax
mov ecx, dword [ebp - 0x1974]
mov dword [ebp - 0x1978], ecx
lea edx, [ebp - 0x1738]
push edx
call dword [ebp - 0x1978]
test eax, eax
jne 0x405f41
push edi
push ebx
add esp, 4
xor edi, 0x5e53
and edi, 0x692e
pop edi
push ebx
push edx
add esp, 4
xor ebx, 0xb92b
xor ebx, 0x7f83
jmp 0x405f2b
sub ebx, 0x123f7
pop ebx
mov dword [ebp - 0x79c], 0
jmp 0x40662b
push edi
push ebx
add esp, 4
and edi, 0x7c46
add edi, 0x17224
pop edi
push ecx
add ecx, 0xc23
jmp 0x405f60
call 0x405f6f
add byte [ebx + 0x40], cl
dec ecx
inc esi
cmp al, 0x43
dec esi
inc ebx
dec ebp
add esp, 4
pop ecx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x197c], eax
mov ecx, dword [ebp - 0x197c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1980], edx
mov eax, dword [ebp - 0x1980]
mov dword [ebp - 0x15fc], eax
push ecx
push edx
add esp, 4
or ecx, 0x7866
call 0x405fb2
add byte [edx], dh
cmp edx, dword [eax + 0x50]
dec ecx
inc ebx
inc ebp
add esp, 4
pop ecx
push edx
or edx, 0xf66f
pop edx
push eax
jmp 0x405fc5
or eax, 0x6c54
pop eax
cmp dword [ebp - 0x15fc], 0
jne 0x405fe4
mov dword [ebp - 0x31c], 0
jmp 0x40628b
mov ecx, dword [ebp - 0x15fc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcb4], eax
push eax
push eax
add esp, 4
call 0x40600b
add byte [ecx + 0x4d], cl
xor al, 0x34
inc edi
dec edi
cmp eax, 0x83494c46
les eax, [ecx + eax*4]
shr byte [ebp + 0x58], 0
add byte [eax + 0x50], bl
push esi
add esp, 4
jmp 0x406021
and eax, 0xe0d1
pop eax
cmp dword [ebp - 0xcb4], 0
jne 0x406040
mov dword [ebp - 0x31c], 0
jmp 0x40628b
mov ecx, dword [ebp - 0xcb4]
mov dword [ebp - 0x50c], ecx
Function at 0x405ed9
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [eax], al
dec ebx
inc esp
dec ecx
aas
dec ecx
dec esi
add esp, 4
and eax, 0xf4e8
pop eax
mov ecx, dword [ebp - 0x1974]
mov dword [ebp - 0x1978], ecx
lea edx, [ebp - 0x1738]
push edx
call dword [ebp - 0x1978]
test eax, eax
jne 0x405f41
push edi
push ebx
add esp, 4
xor edi, 0x5e53
and edi, 0x692e
pop edi
push ebx
push edx
add esp, 4
xor ebx, 0xb92b
xor ebx, 0x7f83
jmp 0x405f2b
sub ebx, 0x123f7
pop ebx
mov dword [ebp - 0x79c], 0
jmp 0x40662b
push edi
push ebx
add esp, 4
and edi, 0x7c46
add edi, 0x17224
pop edi
push ecx
add ecx, 0xc23
jmp 0x405f60
call 0x405f6f
add byte [ebx + 0x40], cl
dec ecx
inc esi
cmp al, 0x43
dec esi
inc ebx
dec ebp
add esp, 4
pop ecx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x197c], eax
mov ecx, dword [ebp - 0x197c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1980], edx
mov eax, dword [ebp - 0x1980]
mov dword [ebp - 0x15fc], eax
push ecx
push edx
add esp, 4
or ecx, 0x7866
call 0x405fb2
add byte [edx], dh
cmp edx, dword [eax + 0x50]
dec ecx
inc ebx
inc ebp
add esp, 4
pop ecx
push edx
or edx, 0xf66f
pop edx
push eax
jmp 0x405fc5
or eax, 0x6c54
pop eax
cmp dword [ebp - 0x15fc], 0
jne 0x405fe4
mov dword [ebp - 0x31c], 0
jmp 0x40628b
mov ecx, dword [ebp - 0x15fc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcb4], eax
push eax
push eax
add esp, 4
call 0x40600b
add byte [ecx + 0x4d], cl
xor al, 0x34
inc edi
dec edi
cmp eax, 0x83494c46
les eax, [ecx + eax*4]
shr byte [ebp + 0x58], 0
add byte [eax + 0x50], bl
push esi
add esp, 4
jmp 0x406021
and eax, 0xe0d1
pop eax
cmp dword [ebp - 0xcb4], 0
jne 0x406040
mov dword [ebp - 0x31c], 0
jmp 0x40628b
mov ecx, dword [ebp - 0xcb4]
mov dword [ebp - 0x50c], ecx
Function at 0x405f6f
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [eax], al
dec ebx
inc esp
dec ecx
aas
dec ecx
dec esi
add esp, 4
and eax, 0xf4e8
pop eax
mov ecx, dword [ebp - 0x1974]
mov dword [ebp - 0x1978], ecx
lea edx, [ebp - 0x1738]
push edx
call dword [ebp - 0x1978]
test eax, eax
jne 0x405f41
push edi
push ebx
add esp, 4
xor edi, 0x5e53
and edi, 0x692e
pop edi
push ebx
push edx
add esp, 4
xor ebx, 0xb92b
xor ebx, 0x7f83
jmp 0x405f2b
sub ebx, 0x123f7
pop ebx
mov dword [ebp - 0x79c], 0
jmp 0x40662b
push edi
push ebx
add esp, 4
and edi, 0x7c46
add edi, 0x17224
pop edi
push ecx
add ecx, 0xc23
jmp 0x405f60
call 0x405f6f
add byte [ebx + 0x40], cl
dec ecx
inc esi
cmp al, 0x43
dec esi
inc ebx
dec ebp
add esp, 4
pop ecx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x197c], eax
mov ecx, dword [ebp - 0x197c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1980], edx
mov eax, dword [ebp - 0x1980]
mov dword [ebp - 0x15fc], eax
push ecx
push edx
add esp, 4
or ecx, 0x7866
call 0x405fb2
add byte [edx], dh
cmp edx, dword [eax + 0x50]
dec ecx
inc ebx
inc ebp
add esp, 4
pop ecx
push edx
or edx, 0xf66f
pop edx
push eax
jmp 0x405fc5
or eax, 0x6c54
pop eax
cmp dword [ebp - 0x15fc], 0
jne 0x405fe4
mov dword [ebp - 0x31c], 0
jmp 0x40628b
mov ecx, dword [ebp - 0x15fc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcb4], eax
push eax
push eax
add esp, 4
call 0x40600b
add byte [ecx + 0x4d], cl
xor al, 0x34
inc edi
dec edi
cmp eax, 0x83494c46
les eax, [ecx + eax*4]
shr byte [ebp + 0x58], 0
add byte [eax + 0x50], bl
push esi
add esp, 4
jmp 0x406021
and eax, 0xe0d1
pop eax
cmp dword [ebp - 0xcb4], 0
jne 0x406040
mov dword [ebp - 0x31c], 0
jmp 0x40628b
mov ecx, dword [ebp - 0xcb4]
mov dword [ebp - 0x50c], ecx
Function at 0x405fb2
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [eax], al
dec ebx
inc esp
dec ecx
aas
dec ecx
dec esi
add esp, 4
and eax, 0xf4e8
pop eax
mov ecx, dword [ebp - 0x1974]
mov dword [ebp - 0x1978], ecx
lea edx, [ebp - 0x1738]
push edx
call dword [ebp - 0x1978]
test eax, eax
jne 0x405f41
push edi
push ebx
add esp, 4
xor edi, 0x5e53
and edi, 0x692e
pop edi
push ebx
push edx
add esp, 4
xor ebx, 0xb92b
xor ebx, 0x7f83
jmp 0x405f2b
sub ebx, 0x123f7
pop ebx
mov dword [ebp - 0x79c], 0
jmp 0x40662b
push edi
push ebx
add esp, 4
and edi, 0x7c46
add edi, 0x17224
pop edi
push ecx
add ecx, 0xc23
jmp 0x405f60
call 0x405f6f
add byte [ebx + 0x40], cl
dec ecx
inc esi
cmp al, 0x43
dec esi
inc ebx
dec ebp
add esp, 4
pop ecx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x197c], eax
mov ecx, dword [ebp - 0x197c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1980], edx
mov eax, dword [ebp - 0x1980]
mov dword [ebp - 0x15fc], eax
push ecx
push edx
add esp, 4
or ecx, 0x7866
call 0x405fb2
add byte [edx], dh
cmp edx, dword [eax + 0x50]
dec ecx
inc ebx
inc ebp
add esp, 4
pop ecx
push edx
or edx, 0xf66f
pop edx
push eax
jmp 0x405fc5
or eax, 0x6c54
pop eax
cmp dword [ebp - 0x15fc], 0
jne 0x405fe4
mov dword [ebp - 0x31c], 0
jmp 0x40628b
mov ecx, dword [ebp - 0x15fc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcb4], eax
push eax
push eax
add esp, 4
call 0x40600b
add byte [ecx + 0x4d], cl
xor al, 0x34
inc edi
dec edi
cmp eax, 0x83494c46
les eax, [ecx + eax*4]
shr byte [ebp + 0x58], 0
add byte [eax + 0x50], bl
push esi
add esp, 4
jmp 0x406021
and eax, 0xe0d1
pop eax
cmp dword [ebp - 0xcb4], 0
jne 0x406040
mov dword [ebp - 0x31c], 0
jmp 0x40628b
mov ecx, dword [ebp - 0xcb4]
mov dword [ebp - 0x50c], ecx
Function at 0x40600b
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [eax], al
dec ebx
inc esp
dec ecx
aas
dec ecx
dec esi
add esp, 4
and eax, 0xf4e8
pop eax
mov ecx, dword [ebp - 0x1974]
mov dword [ebp - 0x1978], ecx
lea edx, [ebp - 0x1738]
push edx
call dword [ebp - 0x1978]
test eax, eax
jne 0x405f41
push edi
push ebx
add esp, 4
xor edi, 0x5e53
and edi, 0x692e
pop edi
push ebx
push edx
add esp, 4
xor ebx, 0xb92b
xor ebx, 0x7f83
jmp 0x405f2b
sub ebx, 0x123f7
pop ebx
mov dword [ebp - 0x79c], 0
jmp 0x40662b
push edi
push ebx
add esp, 4
and edi, 0x7c46
add edi, 0x17224
pop edi
push ecx
add ecx, 0xc23
jmp 0x405f60
call 0x405f6f
add byte [ebx + 0x40], cl
dec ecx
inc esi
cmp al, 0x43
dec esi
inc ebx
dec ebp
add esp, 4
pop ecx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x197c], eax
mov ecx, dword [ebp - 0x197c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1980], edx
mov eax, dword [ebp - 0x1980]
mov dword [ebp - 0x15fc], eax
push ecx
push edx
add esp, 4
or ecx, 0x7866
call 0x405fb2
add byte [edx], dh
cmp edx, dword [eax + 0x50]
dec ecx
inc ebx
inc ebp
add esp, 4
pop ecx
push edx
or edx, 0xf66f
pop edx
push eax
jmp 0x405fc5
or eax, 0x6c54
pop eax
cmp dword [ebp - 0x15fc], 0
jne 0x405fe4
mov dword [ebp - 0x31c], 0
jmp 0x40628b
mov ecx, dword [ebp - 0x15fc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcb4], eax
push eax
push eax
add esp, 4
call 0x40600b
add byte [ecx + 0x4d], cl
xor al, 0x34
inc edi
dec edi
cmp eax, 0x83494c46
les eax, [ecx + eax*4]
shr byte [ebp + 0x58], 0
add byte [eax + 0x50], bl
push esi
add esp, 4
jmp 0x406021
and eax, 0xe0d1
pop eax
cmp dword [ebp - 0xcb4], 0
jne 0x406040
mov dword [ebp - 0x31c], 0
jmp 0x40628b
mov ecx, dword [ebp - 0xcb4]
mov dword [ebp - 0x50c], ecx
Function at 0x40633d
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov dword [ebp - 0x160c], edx
jne 0x406356
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x510], eax
jmp 0x40661f
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x160c]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1610], ecx
cmp dword [ebp - 0x1610], 0
jne 0x406388
mov edx, dword [ebp - 0x770]
mov dword [ebp - 0x510], edx
jmp 0x40661f
mov eax, dword [ebp - 0x324]
add eax, dword [ebp - 0x1610]
mov dword [ebp - 0x764], eax
jne 0x4063ad
mov ecx, dword [ebp - 0x770]
mov dword [ebp - 0x510], ecx
jmp 0x40661f
mov edx, dword [ebp - 0x764]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1984], eax
mov ecx, dword [ebp - 0x764]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1988], edx
mov eax, dword [ebp - 0x764]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x1d10], ecx
mov dword [ebp - 0x768], 0
jmp 0x406407
mov edx, dword [ebp - 0x768]
add edx, 1
mov dword [ebp - 0x768], edx
mov eax, dword [ebp - 0x764]
mov ecx, dword [ebp - 0x768]
cmp ecx, dword [eax + 0x18]
jae 0x406613
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x1984]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x76c], ecx
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x1988]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x1d10]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x198c], eax
mov dword [ebp - 0x19c], 0
jmp 0x406477
invalid
invalid
invalid
invalid
Function at 0x40665d
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [ebp - 0x3e8]
add ecx, 0xe
mov dword [ebp - 0x19dc], ecx
push ebx
and ebx, 0x16a7f
or ebx, 0x10a1f
add ebx, 0x13408
pop ebx
push ebx
push edx
add esp, 4
xor ebx, 0x17dd1
xor ebx, 0xc482
pop ebx
push edx
push edi
add esp, 4
add edx, 0x1876
pop edx
cmp dword [ebp - 0x3e8], 0
je 0x4066b0
cmp dword [ebp - 0xab8], 0
jne 0x4066f6
push ebx
call 0x4066bd
add byte [edi + 0x43], cl
inc edx
dec ebx
xor esi, dword [0xeb04c483]
add eax, dword [eax + 0x3d]
xor eax, 0x2641e381
add dword [eax], eax
pop ebx
push edx
push esi
add esp, 4
sub edx, 0x16c7c
pop edx
push eax
jmp 0x4066e1
pop eax
mov edx, dword [ebp - 0x79c]
mov dword [ebp - 0x1990], edx
push 0
call dword [ebp - 0x1990]
mov dword [ebp - 0x20a8], 0xa
push edx
or edx, 0x17b91
and edx, 0x1476c
sub edx, 0x4379
xor edx, 0x627a
pop edx
push edi
push edx
add esp, 4
or edi, 0x14e9f
or edi, 0xaed0
sub edi, 0xbeb7
pop edi
mov eax, dword [ebp - 0x3e8]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x3ae], cl
mov edx, dword [ebp - 0xab8]
sub edx, dword [ebp - 0x3e8]
mov dword [ebp - 0x1694], edx
mov dword [ebp - 0xce8], 0
push eax
push esi
add esp, 4
sub eax, 0x4c6d
pop eax
push ebx
push esi
add esp, 4
and ebx, 0x9638
pop ebx
push esi
xor esi, 0x18330
or esi, 0x8858
sub esi, 0x472c
invalid

Function at 0x4066bd
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [ebp - 0x3e8]
add ecx, 0xe
mov dword [ebp - 0x19dc], ecx
push ebx
and ebx, 0x16a7f
or ebx, 0x10a1f
add ebx, 0x13408
pop ebx
push ebx
push edx
add esp, 4
xor ebx, 0x17dd1
xor ebx, 0xc482
pop ebx
push edx
push edi
add esp, 4
add edx, 0x1876
pop edx
cmp dword [ebp - 0x3e8], 0
je 0x4066b0
cmp dword [ebp - 0xab8], 0
jne 0x4066f6
push ebx
call 0x4066bd
add byte [edi + 0x43], cl
inc edx
dec ebx
xor esi, dword [0xeb04c483]
add eax, dword [eax + 0x3d]
xor eax, 0x2641e381
add dword [eax], eax
pop ebx
push edx
push esi
add esp, 4
sub edx, 0x16c7c
pop edx
push eax
jmp 0x4066e1
pop eax
mov edx, dword [ebp - 0x79c]
mov dword [ebp - 0x1990], edx
push 0
call dword [ebp - 0x1990]
mov dword [ebp - 0x20a8], 0xa
push edx
or edx, 0x17b91
and edx, 0x1476c
sub edx, 0x4379
xor edx, 0x627a
pop edx
push edi
push edx
add esp, 4
or edi, 0x14e9f
or edi, 0xaed0
sub edi, 0xbeb7
pop edi
mov eax, dword [ebp - 0x3e8]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x3ae], cl
mov edx, dword [ebp - 0xab8]
sub edx, dword [ebp - 0x3e8]
mov dword [ebp - 0x1694], edx
mov dword [ebp - 0xce8], 0
push eax
push esi
add esp, 4
sub eax, 0x4c6d
pop eax
push ebx
push esi
add esp, 4
and ebx, 0x9638
pop ebx
push esi
xor esi, 0x18330
or esi, 0x8858
sub esi, 0x472c
invalid
Function at 0x406d8a
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push edx
push ebx
add esp, 4
add edx, 0x1cbc
add byte [eax], al
add byte [eax], al
pop edx
push ebx
or ebx, 0x15283
or ebx, 0x12332
xor ebx, 0x12681
and ebx, 0x16f3f
pop ebx
push ebx
push esi
add esp, 4
or ebx, 0xa00d
pop ebx
lea eax, [ebp - 0x1790]
mov dword [ebp - 0xccc], eax
mov ecx, dword [ebp - 0x518]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcc8], edx
xor eax, eax
mov word [ebp - 0x220], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx

Function at 0x406def
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push esi
add esp, 4
sub ebx, 0x113dd
pop ebx
push edi
push esi
add esp, 4
or edi, 0x13396
jmp 0x406e0e
pop edi
mov edx, dword [ebp - 0xcc8]
mov ax, word [edx]
mov word [ebp - 0x1042], ax
mov ecx, dword [ebp - 0xcc8]
add ecx, 2
mov dword [ebp - 0xcc8], ecx
mov dx, word [ebp - 0x1042]
mov word [ebp - 0x220], dx
mov eax, dword [ebp - 0xccc]
mov cx, word [eax]
mov word [ebp - 0x1044], cx
mov edx, dword [ebp - 0xccc]
add edx, 2
mov dword [ebp - 0xccc], edx

Function at 0x406e5b
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
push edi
add esp, 4
jmp 0x406de7
sub ebx, 0x10247
pop ebx
push ebx
mov ax, word [ebp - 0x1044]
mov word [ebp - 0x3c], ax
push edi
push eax
add esp, 4
or edi, 0x11d94
call 0x406e80
add byte [ecx + 0x38], cl
dec edx
inc edi
dec esi
inc eax
inc ebp
xor al, byte [ebx - 0x7d]
les eax, [edi + ebx*2]
push esi
add esi, 0x805f
pop esi
push ecx
push esi
add esp, 4
xor ecx, 0xafa1
pop ecx
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x406eb5
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1668], edx
jmp 0x406f0f
movzx ecx, word [ebp - 0x220]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x406ddd
movzx eax, word [ebp - 0x220]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x406ddd
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x406ef9
mov dword [ebp - 0x1624], 0xffffffff
jmp 0x406f03
mov dword [ebp - 0x1624], 1
mov ecx, dword [ebp - 0x1624]
mov dword [ebp - 0x1668], ecx
cmp dword [ebp - 0x1668], 0
jne 0x406f58
push ecx
sub ecx, 0x5d60
pop ecx
push edi
push ebx
add esp, 4
call 0x406f34
add byte [ebx + 0x3f], cl
push eax
aaa
dec ebx
cmp al, byte [ebx + 0x36]
add esp, 4
add edi, 0x13fa4
and edi, 0x3fcd
sub edi, 0x541c
pop edi
mov edx, dword [ebp - 0x518]
mov dword [ebp - 0x774], edx
jmp 0x406fc0
push edi
push edi
add esp, 4
call 0x406f6c
add byte [edx], bh
dec eax
inc ebx
push eax
cmp al, 0x46
cmp dword [ecx + 0x39], eax
add esp, 4
or edi, 0xe877
jmp 0x406f7b
xor edi, 0x93fe
pop edi
push ecx
xor ecx, 0x541b
pop ecx
mov eax, dword [ebp - 0x518]
mov ecx, dword [eax]
invalid