joyce8/EMBER2024-capa huggingface dataset:
Function at 0x401ffc
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
dec dword [ebx - 0x7b77b]
dec dword [ecx - 0x40f7b]
inc dword [ebx - 0x40f43]
sti
invalid
inc dword [eax]
je 0x402078
push ebx
add ebx, 0x540c
and ebx, 0x180e3
sub ebx, 0xc426
pop ebx
push edx
push ecx
add esp, 4
xor edx, 0xfd32
or edx, 0x2265
pop edx
push ecx
push ecx
add esp, 4
jmp 0x401fdb
pop ecx
mov ecx, dword [ebp - 0x410]
mov dword [ebp - 0x2034], ecx
push edi
push eax
add esp, 4
call 0x401ffc
add byte [0x3f4f4b3d], bh
xor al, 0x3c
dec esp
cmp al, 0x83
les eax, [ecx + eax*4]
out dx, eax
ror dl, 1
add byte [eax], al
or edi, 0x7ce0
add edi, 0x936e
pop edi
push ebx
jmp 0x402019
pop ebx
mov edx, dword [ebp - 0x2034]
mov dword [ebp - 0x2038], edx
lea eax, [ebp - 0x1894]
push eax
call dword [ebp - 0x2038]
test eax, eax
jne 0x402078
push edi
call 0x402047
add byte [eax + 0x4f], al
inc esi
aas
inc eax
inc eax
inc edi
inc ebp
add esp, 4
and edi, 0x14525
sub edi, 0x15c4d
call 0x402065
add byte [eax + 0x39], al
aas
dec eax
xor al, 0x32
inc edi
xor al, byte [ebp - 0x7d]
les eax, [edi + ebx*2]
mov dword [ebp - 0xb50], 0
jmp 0x402763
push edi
push ecx
add esp, 4
add edi, 0x1f1d
or edi, 0x6fe3
sub edi, 0xaee6
add edi, 0x115c4
pop edi
push edi
add edi, 0xbc0e
pop edi
push ebx
push eax
add esp, 4
or ebx, 0x153f3
pop ebx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x203c], ecx
mov edx, dword [ebp - 0x203c]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x2040], eax
mov ecx, dword [ebp - 0x2040]
mov dword [ebp - 0x16f8], ecx
push ecx
push edx
add esp, 4
jmp 0x4020dd
pop ecx
push edx
and edx, 0x6904
call 0x4020f5
add byte [esi + 0x44], cl
cmp esi, dword [esi]
xor eax, 0x3e484b36
dec ebx
dec eax
cmp eax, dword ds:[ebx + 0x515a04c4]
Function at 0x402047
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
dec dword [ebx - 0x7b77b]
dec dword [ecx - 0x40f7b]
inc dword [ebx - 0x40f43]
sti
invalid
inc dword [eax]
je 0x402078
push ebx
add ebx, 0x540c
and ebx, 0x180e3
sub ebx, 0xc426
pop ebx
push edx
push ecx
add esp, 4
xor edx, 0xfd32
or edx, 0x2265
pop edx
push ecx
push ecx
add esp, 4
jmp 0x401fdb
pop ecx
mov ecx, dword [ebp - 0x410]
mov dword [ebp - 0x2034], ecx
push edi
push eax
add esp, 4
call 0x401ffc
add byte [0x3f4f4b3d], bh
xor al, 0x3c
dec esp
cmp al, 0x83
les eax, [ecx + eax*4]
out dx, eax
ror dl, 1
add byte [eax], al
or edi, 0x7ce0
add edi, 0x936e
pop edi
push ebx
jmp 0x402019
pop ebx
mov edx, dword [ebp - 0x2034]
mov dword [ebp - 0x2038], edx
lea eax, [ebp - 0x1894]
push eax
call dword [ebp - 0x2038]
test eax, eax
jne 0x402078
push edi
call 0x402047
add byte [eax + 0x4f], al
inc esi
aas
inc eax
inc eax
inc edi
inc ebp
add esp, 4
and edi, 0x14525
sub edi, 0x15c4d
call 0x402065
add byte [eax + 0x39], al
aas
dec eax
xor al, 0x32
inc edi
xor al, byte [ebp - 0x7d]
les eax, [edi + ebx*2]
mov dword [ebp - 0xb50], 0
jmp 0x402763
push edi
push ecx
add esp, 4
add edi, 0x1f1d
or edi, 0x6fe3
sub edi, 0xaee6
add edi, 0x115c4
pop edi
push edi
add edi, 0xbc0e
pop edi
push ebx
push eax
add esp, 4
or ebx, 0x153f3
pop ebx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x203c], ecx
mov edx, dword [ebp - 0x203c]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x2040], eax
mov ecx, dword [ebp - 0x2040]
mov dword [ebp - 0x16f8], ecx
push ecx
push edx
add esp, 4
jmp 0x4020dd
pop ecx
push edx
and edx, 0x6904
call 0x4020f5
add byte [esi + 0x44], cl
cmp esi, dword [esi]
xor eax, 0x3e484b36
dec ebx
dec eax
cmp eax, dword ds:[ebx + 0x515a04c4]
Function at 0x402065
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
dec dword [ebx - 0x7b77b]
dec dword [ecx - 0x40f7b]
inc dword [ebx - 0x40f43]
sti
invalid
inc dword [eax]
je 0x402078
push ebx
add ebx, 0x540c
and ebx, 0x180e3
sub ebx, 0xc426
pop ebx
push edx
push ecx
add esp, 4
xor edx, 0xfd32
or edx, 0x2265
pop edx
push ecx
push ecx
add esp, 4
jmp 0x401fdb
pop ecx
mov ecx, dword [ebp - 0x410]
mov dword [ebp - 0x2034], ecx
push edi
push eax
add esp, 4
call 0x401ffc
add byte [0x3f4f4b3d], bh
xor al, 0x3c
dec esp
cmp al, 0x83
les eax, [ecx + eax*4]
out dx, eax
ror dl, 1
add byte [eax], al
or edi, 0x7ce0
add edi, 0x936e
pop edi
push ebx
jmp 0x402019
pop ebx
mov edx, dword [ebp - 0x2034]
mov dword [ebp - 0x2038], edx
lea eax, [ebp - 0x1894]
push eax
call dword [ebp - 0x2038]
test eax, eax
jne 0x402078
push edi
call 0x402047
add byte [eax + 0x4f], al
inc esi
aas
inc eax
inc eax
inc edi
inc ebp
add esp, 4
and edi, 0x14525
sub edi, 0x15c4d
call 0x402065
add byte [eax + 0x39], al
aas
dec eax
xor al, 0x32
inc edi
xor al, byte [ebp - 0x7d]
les eax, [edi + ebx*2]
mov dword [ebp - 0xb50], 0
jmp 0x402763
push edi
push ecx
add esp, 4
add edi, 0x1f1d
or edi, 0x6fe3
sub edi, 0xaee6
add edi, 0x115c4
pop edi
push edi
add edi, 0xbc0e
pop edi
push ebx
push eax
add esp, 4
or ebx, 0x153f3
pop ebx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x203c], ecx
mov edx, dword [ebp - 0x203c]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x2040], eax
mov ecx, dword [ebp - 0x2040]
mov dword [ebp - 0x16f8], ecx
push ecx
push edx
add esp, 4
jmp 0x4020dd
pop ecx
push edx
and edx, 0x6904
call 0x4020f5
add byte [esi + 0x44], cl
cmp esi, dword [esi]
xor eax, 0x3e484b36
dec ebx
dec eax
cmp eax, dword ds:[ebx + 0x515a04c4]
Function at 0x4020f5
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
dec ebx
dec eax
cmp eax, dword ds:[ebx + 0x515a04c4]
jmp 0x402103
pop ecx
cmp dword [ebp - 0x16f8], 0
jne 0x40211c
mov dword [ebp - 0x33c], 0
jmp 0x4023c3
mov edx, dword [ebp - 0x16f8]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xd78], ecx
push eax
push ebx
add esp, 4
xor eax, 0x117a9
pop eax
push esi
push eax
add esp, 4
and esi, 0x66a3
xor esi, 0x4280
pop esi
push ecx
xor ecx, 0x7931
xor ecx, 0x360d
xor ecx, 0x16b38
pop ecx
cmp dword [ebp - 0xd78], 0
jne 0x402178
mov dword [ebp - 0x33c], 0
jmp 0x4023c3
mov edx, dword [ebp - 0xd78]
mov dword [ebp - 0x540], edx
push edx
jmp 0x40218b
sub edx, 0x12f9c
or edx, 0xbd35
pop edx
push edx
push eax
add esp, 4
add edx, 0xe7dc
xor edx, 0x151d7
add edx, 0xbe85
xor edx, 0x2fef
pop edx
lea eax, [ebp - 0x1894]
mov dword [ebp - 0xd74], eax
mov ecx, dword [ebp - 0x540]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xd70], edx
xor eax, eax
mov word [ebp - 0x230], ax
xor ecx, ecx
mov word [ebp - 0x34], cx
push ecx
push eax
add esp, 4
add ecx, 0x5a77
call 0x4021f9
add byte [edx], dh
inc edx
aas
xor ecx, dword [edx + 0x37]
inc ecx
add esp, 4
call 0x402208
add byte [eax + 0x46], cl
dec edx
inc edx
inc esp
cmp byte [ebx - 0x3e7efb3c], al
fiadd dword cs:[eax]
add byte [ecx - 0x75], bl
xchg ebp, eax
nop
invalid
push esi
push edx
add esp, 4
or esi, 0x1691d
and esi, 0x1794f
dec edi
jns 0x4023d4
invalid

Function at 0x4021f9
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
dec ebx
dec eax
cmp eax, dword ds:[ebx + 0x515a04c4]
jmp 0x402103
pop ecx
cmp dword [ebp - 0x16f8], 0
jne 0x40211c
mov dword [ebp - 0x33c], 0
jmp 0x4023c3
mov edx, dword [ebp - 0x16f8]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xd78], ecx
push eax
push ebx
add esp, 4
xor eax, 0x117a9
pop eax
push esi
push eax
add esp, 4
and esi, 0x66a3
xor esi, 0x4280
pop esi
push ecx
xor ecx, 0x7931
xor ecx, 0x360d
xor ecx, 0x16b38
pop ecx
cmp dword [ebp - 0xd78], 0
jne 0x402178
mov dword [ebp - 0x33c], 0
jmp 0x4023c3
mov edx, dword [ebp - 0xd78]
mov dword [ebp - 0x540], edx
push edx
jmp 0x40218b
sub edx, 0x12f9c
or edx, 0xbd35
pop edx
push edx
push eax
add esp, 4
add edx, 0xe7dc
xor edx, 0x151d7
add edx, 0xbe85
xor edx, 0x2fef
pop edx
lea eax, [ebp - 0x1894]
mov dword [ebp - 0xd74], eax
mov ecx, dword [ebp - 0x540]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xd70], edx
xor eax, eax
mov word [ebp - 0x230], ax
xor ecx, ecx
mov word [ebp - 0x34], cx
push ecx
push eax
add esp, 4
add ecx, 0x5a77
call 0x4021f9
add byte [edx], dh
inc edx
aas
xor ecx, dword [edx + 0x37]
inc ecx
add esp, 4
call 0x402208
add byte [eax + 0x46], cl
dec edx
inc edx
inc esp
cmp byte [ebx - 0x3e7efb3c], al
fiadd dword cs:[eax]
add byte [ecx - 0x75], bl
xchg ebp, eax
nop
invalid
push esi
push edx
add esp, 4
or esi, 0x1691d
and esi, 0x1794f
dec edi
jns 0x4023d4
invalid
Function at 0x402208
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
dec ebx
dec eax
cmp eax, dword ds:[ebx + 0x515a04c4]
jmp 0x402103
pop ecx
cmp dword [ebp - 0x16f8], 0
jne 0x40211c
mov dword [ebp - 0x33c], 0
jmp 0x4023c3
mov edx, dword [ebp - 0x16f8]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xd78], ecx
push eax
push ebx
add esp, 4
xor eax, 0x117a9
pop eax
push esi
push eax
add esp, 4
and esi, 0x66a3
xor esi, 0x4280
pop esi
push ecx
xor ecx, 0x7931
xor ecx, 0x360d
xor ecx, 0x16b38
pop ecx
cmp dword [ebp - 0xd78], 0
jne 0x402178
mov dword [ebp - 0x33c], 0
jmp 0x4023c3
mov edx, dword [ebp - 0xd78]
mov dword [ebp - 0x540], edx
push edx
jmp 0x40218b
sub edx, 0x12f9c
or edx, 0xbd35
pop edx
push edx
push eax
add esp, 4
add edx, 0xe7dc
xor edx, 0x151d7
add edx, 0xbe85
xor edx, 0x2fef
pop edx
lea eax, [ebp - 0x1894]
mov dword [ebp - 0xd74], eax
mov ecx, dword [ebp - 0x540]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xd70], edx
xor eax, eax
mov word [ebp - 0x230], ax
xor ecx, ecx
mov word [ebp - 0x34], cx
push ecx
push eax
add esp, 4
add ecx, 0x5a77
call 0x4021f9
add byte [edx], dh
inc edx
aas
xor ecx, dword [edx + 0x37]
inc ecx
add esp, 4
call 0x402208
add byte [eax + 0x46], cl
dec edx
inc edx
inc esp
cmp byte [ebx - 0x3e7efb3c], al
fiadd dword cs:[eax]
add byte [ecx - 0x75], bl
xchg ebp, eax
nop
invalid
push esi
push edx
add esp, 4
or esi, 0x1691d
and esi, 0x1794f
dec edi
jns 0x4023d4
invalid

Function at 0x402368
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
add edi, 0x4683
add bl, ch
invalid
add edi, 0x14fdb
pop edi
push esi
or esi, 0x12c40
and esi, 0x8b2a
pop esi
mov eax, dword [ebp - 0x540]
mov ecx, dword [eax]
mov dword [ebp - 0x540], ecx
mov edx, dword [ebp - 0x540]
cmp edx, dword [ebp - 0xd78]
je 0x4023b9
mov eax, dword [ebp - 0x540]
cmp dword [eax + 0x30], 0
jne 0x402184
mov dword [ebp - 0x33c], 0
Function at 0x402432
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
dec edi
jns 0x4023d4
add byte [esi + 0x50], bl
pop esi
push eax
xor eax, 0x16324
add eax, 0x106dd
pop eax
push esi
push ecx
add esp, 4
or esi, 0xfec3
add esi, 0xd86f
pop esi
mov ecx, dword [ebp - 0x33c]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x348], edx
push edi
push edi
add esp, 4
and edi, 0xcb44
xor edi, 0x1fc3
sub edi, 0xac08
pop edi
push edx
sub edx, 0x1670
call 0x402432
add byte [ebp + 0x37], al
xor eax, 0x3540364a
dec eax
dec ebx
add esp, 4
pop edx
mov dword [ebp - 0x7c8], 0
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0x1704], eax
cmp dword [ebp - 0x1704], 0
jne 0x402466
mov ecx, dword [ebp - 0x7c8]
mov dword [ebp - 0x544], ecx
invalid
mov edx, dword [ebp - 0x1704]
mov eax, dword [ebp - 0x348]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1708], eax
jne 0x40248e
mov ecx, dword [ebp - 0x7c8]
mov dword [ebp - 0x544], ecx
jmp 0x402757
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1708]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x170c], edx
cmp dword [ebp - 0x170c], 0
jne 0x4024c0
mov eax, dword [ebp - 0x7c8]
mov dword [ebp - 0x544], eax
jmp 0x402757
mov ecx, dword [ebp - 0x348]
add ecx, dword [ebp - 0x170c]
mov dword [ebp - 0x7bc], ecx
jne 0x4024e5
mov edx, dword [ebp - 0x7c8]
mov dword [ebp - 0x544], edx
mov eax, dword [ebp - 0x7bc]
mov ecx, dword [ebp - 0x348]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x2044], ecx
mov edx, dword [ebp - 0x7bc]
mov eax, dword [ebp - 0x348]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x2048], eax
mov ecx, dword [ebp - 0x7bc]
mov edx, dword [ebp - 0x348]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x204c], edx
mov dword [ebp - 0x7c0], 0
jmp 0x40253f
mov eax, dword [ebp - 0x7c0]
add eax, 1
mov dword [ebp - 0x7c0], eax
mov ecx, dword [ebp - 0x7bc]
mov edx, dword [ebp - 0x7c0]
cmp edx, dword [ecx + 0x18]
jae 0x40274b
mov eax, dword [ebp - 0x7c0]
mov ecx, dword [ebp - 0x2044]
mov edx, dword [ebp - 0x348]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x7c4], edx
mov eax, dword [ebp - 0x7c0]
mov ecx, dword [ebp - 0x2048]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x204c]
mov ecx, dword [ebp - 0x348]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x2054], ecx
lodsb al, byte [esi]
invalid
invalid
inc edi
test dword [eax - 2], edx
invalid
inc dword [eax]
add byte [eax], al
add bl, ch
invalid
mov edx, dword [ebp - 0x1b0]
add edx, 1
mov dword [ebp - 0x1b0], edx
mov eax, dword [ebp - 0x7c4]
add eax, dword [ebp - 0x1b0]
movsx ecx, byte [eax]
test ecx, ecx
je 0x402661
mov edx, dword [ebp - 0x1b0]
movsx eax, byte [ebp + edx - 0x8dc]
test eax, eax
je 0x402661
push eax
push esi
add esp, 4
and eax, 0xfde2
sub eax, 0x1478c
sub eax, 0x13e2d
pop eax
push esi
sub esi, 0x1081f
add esi, 0x18151
add esi, 0xef04
sub esi, 0xa245
pop esi
mov ecx, dword [ebp - 0x7c4]
add ecx, dword [ebp - 0x1b0]
movsx edx, byte [ecx]
invalid
invalid
push eax
Function at 0x4024e0
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
jmp 0x402757
mov ecx, dword [ebp - 0x544]
mov dword [ebp - 0xb50], ecx
push 4
lea edx, [ebp - 0xcac]
push edx
lea eax, [ebp - 0xcdc]
push eax
push 0
call dword [ebp - 0xb50]
mov ecx, 0x4d
mov word [ebp - 0x21fc], cx
mov edx, 0x42
mov word [ebp - 0x21fa], dx
mov eax, 0x53
mov word [ebp - 0x21f8], ax
mov ecx, 0x65
mov word [ebp - 0x21f6], cx
mov edx, 0x72
mov word [ebp - 0x21f4], dx
mov eax, 0x76
mov word [ebp - 0x21f2], ax
mov ecx, 0x69
mov word [ebp - 0x21f0], cx
mov edx, 0x63
mov word [ebp - 0x21ee], dx
mov eax, 0x65
mov word [ebp - 0x21ec], ax
mov ecx, 0x2e
mov word [ebp - 0x21ea], cx
mov edx, 0x65
mov word [ebp - 0x21e8], dx
mov eax, 0x78
mov word [ebp - 0x21e6], ax
mov ecx, 0x65
mov word [ebp - 0x21e4], cx
xor edx, edx
mov word [ebp - 0x21e2], dx
mov dword [ebp - 0x1160], 1
push edi
push ebx
add esp, 4
add edi, 0xecff
sub edi, 0x109b8
or edi, 0xa9d9
pop edi
push edx
sub edx, 0x16cf3
add edx, 0x18625
and edx, 0x15a8f
and edx, 0x8283
pop edx
imul eax, dword [ebp - 0x1160], 0x70
add eax, 0x44f3663b
imul ecx, dword [ebp - 0x1160], 0x70
sub eax, ecx
xor eax, 0xaa6272
imul eax, dword [ebp - 0x1160]
imul edx, dword [ebp - 0x1160], 0x70
sub eax, edx
mov dword [ebp - 0x1164], eax
push ecx
add ecx, 0x7bca
add ecx, 0x2267
xor ecx, 0x8fe3
pop ecx
push edi
push ecx
add esp, 4
or edi, 0x11954
or edi, 0x124dd
sub edi, 0x8a7f
or edi, 0x16db6
pop edi
mov dword [ebp - 0x10], 1
push edx
push edi
add esp, 4
or edx, 0x14219
call 0x4028df
add byte [ebp + 0x34], al
push eax
inc eax
dec esi
dec edx
aas
dec ecx
add esp, 4
add edx, 0x11e08
and edx, 0x2df8
pop edx
push esi
xor esi, 0x11e35
pop esi
imul eax, dword [ebp - 0x10], 0x70
add eax, 0x44f3663b
imul ecx, dword [ebp - 0x10], 0x70
sub eax, ecx
xor eax, 0x153c
imul eax, dword [ebp - 0x10]
imul edx, dword [ebp - 0x10], 0x70
sub eax, edx
mov dword [ebp - 0x14], eax
push esi
push edx
add esp, 4
sub esi, 0xcb46
and esi, 0x11891
pop esi
push ecx
and ecx, 0x13d19
or ecx, 0xbcba
pop ecx
push ebx
push eax
add esp, 4
or ebx, 0x2fc
or ebx, 0x1bc2
pop ebx
push esi
and esi, 0x2c11
pop esi
push ebx
and ebx, 0x15931
xor ebx, 0xa41b
and ebx, 0x1fac
pop ebx
push edx
jmp 0x40296f
or edx, 0xbd83
sub edx, 0x7f4b
pop edx
mov dword [ebp - 0x2c], 1
push ebx
push esi
add esp, 4
xor ebx, 0x10097
and ebx, 0x323f
aas
xor al, byte [eax]
add bl, ch
push es
pop ebx
push ebx
push edi
add esp, 4
xor ebx, 0xcb3e
pop ebx
push ecx
push esi
add esp, 4
and ecx, 0x7e02
pop ecx
imul eax, dword [ebp - 0x2c], 0x70
add eax, 0x44f3663b
imul ecx, dword [ebp - 0x2c], 0x70
sub eax, ecx
xor eax, 0
imul eax, dword [ebp - 0x2c]
imul edx, dword [ebp - 0x2c], 0x70
sub eax, edx
mov dword [ebp - 0x30], eax
jmp 0x402b73
Function at 0x4028df
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
jmp 0x402757
mov ecx, dword [ebp - 0x544]
mov dword [ebp - 0xb50], ecx
push 4
lea edx, [ebp - 0xcac]
push edx
lea eax, [ebp - 0xcdc]
push eax
push 0
call dword [ebp - 0xb50]
mov ecx, 0x4d
mov word [ebp - 0x21fc], cx
mov edx, 0x42
mov word [ebp - 0x21fa], dx
mov eax, 0x53
mov word [ebp - 0x21f8], ax
mov ecx, 0x65
mov word [ebp - 0x21f6], cx
mov edx, 0x72
mov word [ebp - 0x21f4], dx
mov eax, 0x76
mov word [ebp - 0x21f2], ax
mov ecx, 0x69
mov word [ebp - 0x21f0], cx
mov edx, 0x63
mov word [ebp - 0x21ee], dx
mov eax, 0x65
mov word [ebp - 0x21ec], ax
mov ecx, 0x2e
mov word [ebp - 0x21ea], cx
mov edx, 0x65
mov word [ebp - 0x21e8], dx
mov eax, 0x78
mov word [ebp - 0x21e6], ax
mov ecx, 0x65
mov word [ebp - 0x21e4], cx
xor edx, edx
mov word [ebp - 0x21e2], dx
mov dword [ebp - 0x1160], 1
push edi
push ebx
add esp, 4
add edi, 0xecff
sub edi, 0x109b8
or edi, 0xa9d9
pop edi
push edx
sub edx, 0x16cf3
add edx, 0x18625
and edx, 0x15a8f
and edx, 0x8283
pop edx
imul eax, dword [ebp - 0x1160], 0x70
add eax, 0x44f3663b
imul ecx, dword [ebp - 0x1160], 0x70
sub eax, ecx
xor eax, 0xaa6272
imul eax, dword [ebp - 0x1160]
imul edx, dword [ebp - 0x1160], 0x70
sub eax, edx
mov dword [ebp - 0x1164], eax
push ecx
add ecx, 0x7bca
add ecx, 0x2267
xor ecx, 0x8fe3
pop ecx
push edi
push ecx
add esp, 4
or edi, 0x11954
or edi, 0x124dd
sub edi, 0x8a7f
or edi, 0x16db6
pop edi
mov dword [ebp - 0x10], 1
push edx
push edi
add esp, 4
or edx, 0x14219
call 0x4028df
add byte [ebp + 0x34], al
push eax
inc eax
dec esi
dec edx
aas
dec ecx
add esp, 4
add edx, 0x11e08
and edx, 0x2df8
pop edx
push esi
xor esi, 0x11e35
pop esi
imul eax, dword [ebp - 0x10], 0x70
add eax, 0x44f3663b
imul ecx, dword [ebp - 0x10], 0x70
sub eax, ecx
xor eax, 0x153c
imul eax, dword [ebp - 0x10]
imul edx, dword [ebp - 0x10], 0x70
sub eax, edx
mov dword [ebp - 0x14], eax
push esi
push edx
add esp, 4
sub esi, 0xcb46
and esi, 0x11891
pop esi
push ecx
and ecx, 0x13d19
or ecx, 0xbcba
pop ecx
push ebx
push eax
add esp, 4
or ebx, 0x2fc
or ebx, 0x1bc2
pop ebx
push esi
and esi, 0x2c11
pop esi
push ebx
and ebx, 0x15931
xor ebx, 0xa41b
and ebx, 0x1fac
pop ebx
push edx
jmp 0x40296f
or edx, 0xbd83
sub edx, 0x7f4b
pop edx
mov dword [ebp - 0x2c], 1
push ebx
push esi
add esp, 4
xor ebx, 0x10097
and ebx, 0x323f
aas
xor al, byte [eax]
add bl, ch
push es
pop ebx
push ebx
push edi
add esp, 4
xor ebx, 0xcb3e
pop ebx
push ecx
push esi
add esp, 4
and ecx, 0x7e02
pop ecx
imul eax, dword [ebp - 0x2c], 0x70
add eax, 0x44f3663b
imul ecx, dword [ebp - 0x2c], 0x70
sub eax, ecx
xor eax, 0
imul eax, dword [ebp - 0x2c]
imul edx, dword [ebp - 0x2c], 0x70
sub eax, edx
mov dword [ebp - 0x30], eax
jmp 0x402b73
Function at 0x402bb9
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
inc ecx
cmp byte [ebx - 0x7d], al
les eax, [ecx + eax*4]
call fcn.0041463b
add eax, 0x85ed
add eax, 0xa4d9
pop eax
push eax
sub eax, 0x16c2f
pop eax
imul edx, dword [ebp - 0x175c], 0x70
add edx, 0x44f3663b
imul eax, dword [ebp - 0x175c], 0x70
sub edx, eax
xor edx, dword [ebp - 0x205c]
imul edx, dword [ebp - 0x175c]
imul ecx, dword [ebp - 0x175c], 0x70
sub edx, ecx
mov dword [ebp - 0x1760], edx
mov edx, dword [ebp - 0x1164]
mov eax, dword [ebp - 0x1160]
mov dword [ebp - 0x1768], edx
mov dword [ebp - 0x1764], eax
push esi
jmp 0x402b93
xor esi, 0x15f6f
jmp 0x402b9e
pop esi
push edx
jmp 0x402ba7
pop edx
push edx
call 0x402bb9
add byte [edi], dh
inc esp
xor eax, 0x43483c3f
dec esi
xor al, 0x4a
add esp, 4
pop edx
push edi
push ecx
add esp, 4
xor edi, 0x162b6
pop edi
push esi
add esi, 0x4bed
sub esi, 0x2461
or esi, 0xcc33
call 0x402beb
add byte [eax + 0x3e], al
dec esi
push eax
inc ecx
inc esp
cmp dword [ecx + 0x36], ecx
add esp, 4
pop esi
mov ecx, dword [ebp - 0x30]
add ecx, 0x70
imul edx, dword [ebp - 0x2c], 0x70
add edx, 0x44f3663b
imul eax, dword [ebp - 0x2c], 0x70
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x2064], ecx
push ecx
push eax
add esp, 4
sub ecx, 0x4917
or ecx, 0xb53a
xor ecx, 0x97f
sub ecx, 0x1c64
pop ecx
push eax

Function at 0x402beb
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
inc ecx
cmp byte [ebx - 0x7d], al
les eax, [ecx + eax*4]
call fcn.0041463b
add eax, 0x85ed
add eax, 0xa4d9
pop eax
push eax
sub eax, 0x16c2f
pop eax
imul edx, dword [ebp - 0x175c], 0x70
add edx, 0x44f3663b
imul eax, dword [ebp - 0x175c], 0x70
sub edx, eax
xor edx, dword [ebp - 0x205c]
imul edx, dword [ebp - 0x175c]
imul ecx, dword [ebp - 0x175c], 0x70
sub edx, ecx
mov dword [ebp - 0x1760], edx
mov edx, dword [ebp - 0x1164]
mov eax, dword [ebp - 0x1160]
mov dword [ebp - 0x1768], edx
mov dword [ebp - 0x1764], eax
push esi
jmp 0x402b93
xor esi, 0x15f6f
jmp 0x402b9e
pop esi
push edx
jmp 0x402ba7
pop edx
push edx
call 0x402bb9
add byte [edi], dh
inc esp
xor eax, 0x43483c3f
dec esi
xor al, 0x4a
add esp, 4
pop edx
push edi
push ecx
add esp, 4
xor edi, 0x162b6
pop edi
push esi
add esi, 0x4bed
sub esi, 0x2461
or esi, 0xcc33
call 0x402beb
add byte [eax + 0x3e], al
dec esi
push eax
inc ecx
inc esp
cmp dword [ecx + 0x36], ecx
add esp, 4
pop esi
mov ecx, dword [ebp - 0x30]
add ecx, 0x70
imul edx, dword [ebp - 0x2c], 0x70
add edx, 0x44f3663b
imul eax, dword [ebp - 0x2c], 0x70
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x2064], ecx
push ecx
push eax
add esp, 4
sub ecx, 0x4917
or ecx, 0xb53a
xor ecx, 0x97f
sub ecx, 0x1c64
pop ecx
push eax
Function at 0x402c30
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
jmp 0x402c36
and eax, 0x14d01
or eax, 0xcd40
pop eax
mov ecx, dword [ebp - 0x1768]
add ecx, 0x70
imul edx, dword [ebp - 0x1764], 0x70
add edx, 0x44f3663b
imul eax, dword [ebp - 0x1764], 0x70
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x1764]
mov dword [ebp - 0x2060], ecx
mov ecx, dword [ebp - 0x2060]
mov dword [ebp - 0x2068], ecx
mov edx, dword [ebp - 0x2064]
cmp edx, dword [ebp - 0x2068]
jae 0x402c97
mov dword [ebp - 0x1710], 1
jmp 0x402ca1
invalid
test eax, esi
call 0x412c9e
invalid

Function at 0x405ca9
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
call 0x405cbc
add byte [esi], bh
xor al, 0x34
dec edi
inc ebp
aas
inc ecx
inc ecx
dec eax
add esp, 4
add edx, 0xb000
pop edx
mov dword [ebp - 0x22a0], 0xffffffff
push eax
add eax, 0x1346f
call 0x405ce4
add byte [edi], bh
dec esp
cmp dh, byte [eax*2 - 0x3b7cc8cb]
add al, 0x81
rol bh, 0x4b
add dword [eax], eax
pop eax
push edi
or edi, 0x12cb1
sub edi, 0xdcb2
add edi, 0xe46e
pop edi
mov edx, dword [ebp - 0x424]
mov dword [ebp - 0x548], edx
jmp 0x405d1f

Function at 0x405cbc
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
call 0x405cbc
add byte [esi], bh
xor al, 0x34
dec edi
inc ebp
aas
inc ecx
inc ecx
dec eax
add esp, 4
add edx, 0xb000
pop edx
mov dword [ebp - 0x22a0], 0xffffffff
push eax
add eax, 0x1346f
call 0x405ce4
add byte [edi], bh
dec esp
cmp dh, byte [eax*2 - 0x3b7cc8cb]
add al, 0x81
rol bh, 0x4b
add dword [eax], eax
pop eax
push edi
or edi, 0x12cb1
sub edi, 0xdcb2
add edi, 0xe46e
pop edi
mov edx, dword [ebp - 0x424]
mov dword [ebp - 0x548], edx
jmp 0x405d1f

Function at 0x405ce4
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
call 0x405cbc
add byte [esi], bh
xor al, 0x34
dec edi
inc ebp
aas
inc ecx
inc ecx
dec eax
add esp, 4
add edx, 0xb000
pop edx
mov dword [ebp - 0x22a0], 0xffffffff
push eax
add eax, 0x1346f
call 0x405ce4
add byte [edi], bh
dec esp
cmp dh, byte [eax*2 - 0x3b7cc8cb]
add al, 0x81
rol bh, 0x4b
add dword [eax], eax
pop eax
push edi
or edi, 0x12cb1
sub edi, 0xdcb2
add edi, 0xe46e
pop edi
mov edx, dword [ebp - 0x424]
mov dword [ebp - 0x548], edx
jmp 0x405d1f
Function at 0x405f10
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add edx, 0x2cb1
and edx, 0xf72c
xor edx, 0x24c0
pop edx
push eax
push edi
add esp, 4
or eax, 0xd532
and eax, 0x16a98
xor eax, 0x1872
pop eax
mov eax, dword [ebp - 0xd80]
sub eax, 1
mov dword [ebp - 0xd80], eax
mov ecx, dword [ebp - 0xae0]
add ecx, 1
mov dword [ebp - 0xae0], ecx
mov edx, dword [ebp - 0xb40]
add edx, 1
mov dword [ebp - 0xb40], edx
jmp 0x405e48