joyce8/EMBER2024-capa huggingface dataset:
Function at 0x407e74
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [ebx - 0x3e], ch
add byte [ebp - 0xbf3fa74], cl
invalid

Function at 0x407edd
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [ecx + 0x14d25ef], al
add byte [edi + 0x52], bl
push ebx
add esp, 4
and edx, 0x111c1
pop edx
mov dword [ebp - 0x2054], 0xffffffff
push eax
sub eax, 0x1178c
pop eax
push eax
push esi
add esp, 4
call 0x407edd
add byte [edx + 0x36], al
dec esp
xor edi, dword [esi]
xor eax, 0x83323f49
les eax, [ecx + eax*4]
invalid

Function at 0x407f6a
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edx
push eax
and eax, 0xf677
call 0x407f81
add byte [ebp + 0x4e], cl
dec ebx
inc ecx
aaa
aaa
add esp, 4
pop eax
jmp 0x4081b8
push esi
push esi
add esp, 4
add esi, 0x5d03
pop ebp
add byte [eax], al
sub esi, 0x69c6
jmp 0x4081d1
pop esi
push edx
push esi
add esp, 4
xor edx, 0x171a9
add edx, 0x12bae
and edx, 0x7106
pop edx
mov dword [ebp - 0xae4], 0
push edi
push esi
add esp, 4
or edi, 0x636e
call 0x40820e
add byte [ebx + 0x37], cl
xor eax, 0x47334750
xor ecx, dword [edx - 0x7d]
les eax, [edi + ebx*2]
push edx
xor edx, 0x11a8e
and edx, 0x4a5
or edx, 0x15a99
pop edx
mov byte [ebp - 0x87c], 0x45
mov byte [ebp - 0x87b], 0x78
mov byte [ebp - 0x87a], 0x69
invalid
invalid
xchg edi, esi
invalid

Function at 0x407f81
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edx
push eax
and eax, 0xf677
call 0x407f81
add byte [ebp + 0x4e], cl
dec ebx
inc ecx
aaa
aaa
add esp, 4
pop eax
jmp 0x4081b8
push esi
push esi
add esp, 4
add esi, 0x5d03
pop ebp
add byte [eax], al
sub esi, 0x69c6
jmp 0x4081d1
pop esi
push edx
push esi
add esp, 4
xor edx, 0x171a9
add edx, 0x12bae
and edx, 0x7106
pop edx
mov dword [ebp - 0xae4], 0
push edi
push esi
add esp, 4
or edi, 0x636e
call 0x40820e
add byte [ebx + 0x37], cl
xor eax, 0x47334750
xor ecx, dword [edx - 0x7d]
les eax, [edi + ebx*2]
push edx
xor edx, 0x11a8e
and edx, 0x4a5
or edx, 0x15a99
pop edx
mov byte [ebp - 0x87c], 0x45
mov byte [ebp - 0x87b], 0x78
mov byte [ebp - 0x87a], 0x69
invalid
invalid
xchg edi, esi
invalid

Function at 0x407fa0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edx
push edi
add esp, 4
call fcn.00407fb1
add byte [eax], al
add byte [edx + 0x47], al
aas
inc ebx
dec esp

Function at 0x407fa8
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edx
push edi
add esp, 4
call fcn.00407fb1
add byte [eax], al
add byte [edx + 0x47], al
aas
inc ebx
dec esp
Function at 0x407fb1
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x4fc]
add eax, 1
mov dword [ebp - 0x4fc], eax
push edx
push edx
add esp, 4
or edx, 0xf933
xor edx, 0xa12a
pop edx
push esi
sub esi, 0x171ce
xor esi, 0x7e87
pop esi
push ebx
push ecx
add esp, 4
or ebx, 0xb474
and ebx, 0xf2b
pop ebx
mov ecx, dword [ebp - 0x4fc]
sub ecx, dword [ebp - 0x3f4]
cmp ecx, 0xffffffff
jb 0x407f8a
push edx
or edx, 0x8155
call fcn.00407f6a
add byte [eax + 0x42], cl
inc esp
xor al, 0x43
push eax
xor al, 0x41
cmp dword ss:[ebx + 0x505a04c4], eax
add esp, 4
pop edx
push eax
mov dword [ebp - 0xc9c], 7
mov edx, dword [ebp - 0x4fc]
mov dword [ebp - 0xae8], edx
add esp, 4
pop edx
push edx
push ecx
invalid

Function at 0x408170
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [ebp + 0x40], dh
push edx
push eax
add esp, 4
and edx, 0x14bc9
pop edx
push edi
xor edi, 0x708f
add byte [eax], al
and edi, 0xd608
add edi, 0x13470
pop edi
push esi
push edx
add esp, 4
add esi, 0x3ab5
add byte [eax], al
or esi, 0x10c4c
pop esi
mov ecx, dword [ebp - 0x4fc]
mov dword [ebp - 0xae4], ecx
jmp 0x4081f4

Function at 0x40820e
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edx
push eax
and eax, 0xf677
call 0x407f81
add byte [ebp + 0x4e], cl
dec ebx
inc ecx
aaa
aaa
add esp, 4
pop eax
jmp 0x4081b8
push esi
push esi
add esp, 4
add esi, 0x5d03
pop ebp
add byte [eax], al
sub esi, 0x69c6
jmp 0x4081d1
pop esi
push edx
push esi
add esp, 4
xor edx, 0x171a9
add edx, 0x12bae
and edx, 0x7106
pop edx
mov dword [ebp - 0xae4], 0
push edi
push esi
add esp, 4
or edi, 0x636e
call 0x40820e
add byte [ebx + 0x37], cl
xor eax, 0x47334750
xor ecx, dword [edx - 0x7d]
les eax, [edi + ebx*2]
push edx
xor edx, 0x11a8e
and edx, 0x4a5
or edx, 0x15a99
pop edx
mov byte [ebp - 0x87c], 0x45
mov byte [ebp - 0x87b], 0x78
mov byte [ebp - 0x87a], 0x69
invalid
invalid
xchg edi, esi
invalid

Function at 0x4082f4
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, 0x33
mov word [ebp - 0x1748], dx
mov eax, 0x32
mov word [ebp - 0x1746], ax

Function at 0x40830c
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov ecx, 0x2e
mov word [ebp - 0x1744], cx
mov edx, 0x64
add byte [esi - 0x77], ah
xchg ebp, eax
mov esi, 0xb8ffffe8
insb byte es:[edi], dx
add byte [eax], al
add byte [esi - 0x77], ah
test eax, eax
call 0x6cfa8331
add byte [eax], al
add byte [esi - 0x77], ah
invalid
ret 0xffe8
push dword [ebx]
shl byte [esi - 0x77], cl
xchg ebp, eax
invalid
call 0x81988346
neg dword [ecx + edx]
invalid

Function at 0x40831c
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [esi - 0x77], ah
xchg ebp, eax
mov esi, 0xb8ffffe8
insb byte es:[edi], dx
add byte [eax], al
add byte [esi - 0x77], ah
test eax, eax
call 0x6cfa8331
add byte [eax], al
add byte [esi - 0x77], ah
invalid
Function at 0x40834c
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
call 0x408358
add byte [edx + eax*2 + 0x47], cl
dec ebp
inc esi
dec ebp
add esp, 4
jmp 0x408364
sub edi, 0x2162
pop edi
push edx
push edx
add esp, 4
sub edx, 0x421b
pop edx
push edx
sub edx, 0x18252
sub edx, 0x1240d
xor edx, 0x1363e
add dword [eax], eax

Function at 0x408358
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
call 0x408358
add byte [edx + eax*2 + 0x47], cl
dec ebp
inc esi
dec ebp
add esp, 4
jmp 0x408364
sub edi, 0x2162
pop edi
push edx
push edx
add esp, 4
sub edx, 0x421b
pop edx
push edx
sub edx, 0x18252
sub edx, 0x1240d
xor edx, 0x1363e
add dword [eax], eax

Function at 0x4083a8
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
pop edx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x197c], eax
mov ecx, dword [ebp - 0x197c]
mov edx, dword [ecx + 0x30]
push ecx
xor byte [ecx - 0x197f6b], cl
dec dword [ebx - 0x197f7b]
dec dword [ecx - 0x15eb7b]
call dword [edi - 0x15]
push es
call 0x4083e9
add byte [ecx], bh
cmp dword [edi + 0x41], ecx
push eax
xor al, 0x49
aaa
cmp ecx, dword [ebx - 0x7d]
les eax, [edi + ebx*2]
push ebx
push ebx
add esp, 4
add ebx, 0xe63a
jmp 0x408401
pop ebx
cmp dword [ebp - 0x15ec], 0
jne 0x40841a
mov dword [ebp - 0x2f0], 0
jmp 0x4086d6
mov ecx, dword [ebp - 0x15ec]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcac], eax
push eax
push ebx
add esp, 4
call fcn.00408440
add byte [eax + eax*2], bh
inc edi
inc esi
inc eax
aaa
inc eax
inc ebp

Function at 0x4083bc
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
pop edx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x197c], eax
mov ecx, dword [ebp - 0x197c]
mov edx, dword [ecx + 0x30]
push ecx
xor byte [ecx - 0x197f6b], cl
dec dword [ebx - 0x197f7b]
dec dword [ecx - 0x15eb7b]
call dword [edi - 0x15]
push es
call 0x4083e9
add byte [ecx], bh
cmp dword [edi + 0x41], ecx
push eax
xor al, 0x49
aaa
cmp ecx, dword [ebx - 0x7d]
les eax, [edi + ebx*2]
push ebx
push ebx
add esp, 4
add ebx, 0xe63a
jmp 0x408401
pop ebx
cmp dword [ebp - 0x15ec], 0
jne 0x40841a
mov dword [ebp - 0x2f0], 0
jmp 0x4086d6
mov ecx, dword [ebp - 0x15ec]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcac], eax
push eax
push ebx
add esp, 4
call fcn.00408440
add byte [eax + eax*2], bh
inc edi
inc esi
inc eax
aaa
inc eax
inc ebp
Function at 0x4083e9
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
pop edx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x197c], eax
mov ecx, dword [ebp - 0x197c]
mov edx, dword [ecx + 0x30]
push ecx
xor byte [ecx - 0x197f6b], cl
dec dword [ebx - 0x197f7b]
dec dword [ecx - 0x15eb7b]
call dword [edi - 0x15]
push es
call 0x4083e9
add byte [ecx], bh
cmp dword [edi + 0x41], ecx
push eax
xor al, 0x49
aaa
cmp ecx, dword [ebx - 0x7d]
les eax, [edi + ebx*2]
push ebx
push ebx
add esp, 4
add ebx, 0xe63a
jmp 0x408401
pop ebx
cmp dword [ebp - 0x15ec], 0
jne 0x40841a
mov dword [ebp - 0x2f0], 0
jmp 0x4086d6
mov ecx, dword [ebp - 0x15ec]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcac], eax
push eax
push ebx
add esp, 4
call fcn.00408440
add byte [eax + eax*2], bh
inc edi
inc esi
inc eax
aaa
inc eax
inc ebp
Function at 0x408440
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
or eax, 0x9020
or eax, 0xcd08
pop eax
push eax
or eax, 0x2f7a
or eax, 0x14c4d
pop eax
cmp dword [ebp - 0xcac], 0
jne 0x408476
mov dword [ebp - 0x2f0], 0
jmp 0x4086d6
mov ecx, dword [ebp - 0xcac]
mov dword [ebp - 0x500], ecx
push esi
or esi, 0x8bc4
xor esi, 0xc2b6
and esi, 0x17c81
pop esi
push esi
push edi
add esp, 4
or esi, 0x15d36
sub esi, 0x2d5c
xor esi, 0x4b34
sub esi, 0xb1d5
pop esi
lea edx, [ebp - 0x1754]
mov dword [ebp - 0xca8], edx
mov eax, dword [ebp - 0x500]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xca4], ecx
xor edx, edx
mov word [ebp - 0x22c], dx
xor eax, eax
mov word [ebp - 0x128], ax
push edx
add edx, 0x1540d
add edx, 0xed64
add byte [eax], al
add edx, 0x27cf
add edx, 0x11c31
pop edx
push edi
push esi
add esp, 4
push edi
add edi, 0x36a2
pop edi
push ebx
push ecx
add esp, 4
add ebx, 0xec95
ret
xchg ebp, eax
in al, dx
add byte [eax], al
or ebx, 0xd4eb
pop ebx
push ecx
push eax
add esp, 4
xor ecx, 0x1d5
add ecx, 0x18038
add ecx, 0x9098
pop ecx
cmp dword [ebp - 0x2f0], 0
jne 0x40900d
mov eax, 0x6b
mov word [ebp - 0x1790], ax
mov ecx, 0x65
mov word [ebp - 0x178e], cx
mov edx, 0x72
mov word [ebp - 0x178c], dx
mov eax, 0x6e
add byte [eax], al
mov word [ebp - 0x178a], ax
mov ecx, 0x65
mov word [ebp - 0x1788], cx
mov edx, 0x6c
mov word [ebp - 0x1786], dx
mov eax, 0x33
mov word [ebp - 0x1784], ax
mov ecx, 0x32
mov word [ebp - 0x1782], cx
mov edx, 0x2e
mov word [ebp - 0x1780], dx
mov eax, 0x64
mov word [ebp - 0x177e], ax
mov ecx, 0x6c
mov word [ebp - 0x177c], cx
mov edx, 0x6c
mov word [ebp - 0x177a], dx
xor eax, eax
mov word [ebp - 0x1778], ax
push ebx
sub ebx, 0x151b0
or ebx, 0x7b0d
pop ebx
push ebx
jmp 0x4087c3
and ebx, 0xa207
call 0x4087d6
add byte [ebp + 0x38], cl
inc ebp
xor edx, dword [eax + 0x50]
dec esp
add esp, 4
add ebx, 0x15f0
pop ebx
mov byte [ebp - 0x898], 0x4c
mov byte [ebp - 0x897], 0x6f
mov byte [ebp - 0x896], 0x61
mov byte [ebp - 0x895], 0x64
mov byte [ebp - 0x894], 0x4c
mov byte [ebp - 0x893], 0x69
mov byte [ebp - 0x892], 0x62
mov byte [ebp - 0x891], 0x72
mov byte [ebp - 0x890], 0x61
mov byte [ebp - 0x88f], 0x72
mov byte [ebp - 0x88e], 0x79
mov byte [ebp - 0x88d], 0x57
mov byte [ebp - 0x88c], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1984], ecx
mov edx, dword [ebp - 0x1984]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1988], eax
mov ecx, dword [ebp - 0x1988]
mov dword [ebp - 0x15f4], ecx
push ecx
push edx
add esp, 4
jmp 0x408870
add ecx, 0x9140
sub ecx, 8
pop ecx
push ecx
push edx
add esp, 4
xor ecx, 0x16ce7
sub ecx, 0x2d04
sub ecx, 0x120a8
pop ecx
cmp dword [ebp - 0x15f4], 0
jne 0x4088ad
mov dword [ebp - 0x754], 0
invalid
cmpsd dword [esi], dword es:[edi]
add al, byte [eax]
Function at 0x408500
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
and edi, 0x13849
sub edi, 0x15853
or edi, 0xba22
add byte [eax], al
pop edi
mov ecx, dword [ebp - 0xca4]
mov dx, word [ecx]
mov word [ebp - 0x1046], dx
mov eax, dword [ebp - 0xca4]
add eax, 2
mov dword [ebp - 0xca4], eax
mov cx, word [ebp - 0x1046]
mov word [ebp - 0x22c], cx
mov edx, dword [ebp - 0xca8]
mov ax, word [edx]
mov word [ebp - 0x1048], ax

Function at 0x408550
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [ebp - 0xca8]
add ecx, 2
mov dword [ebp - 0xca8], ecx
mov dx, word [ebp - 0x1048]
mov word [ebp - 0x128], dx
push eax
push eax
add esp, 4
call 0x408581
add byte [esi + 0x34], al
inc ebp
aas
cmp byte ss:[ecx], bh
cmp bh, byte [edx]
add esp, 4
xor eax, 0x10558
sub eax, 0x181fc
pop eax
push ebx
or ebx, 0x52c8
sub ebx, 0x12cd8
pop ebx
movzx eax, word [ebp - 0x128]
test eax, eax

Function at 0x408581
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [ebp - 0xca8]
add ecx, 2
mov dword [ebp - 0xca8], ecx
mov dx, word [ebp - 0x1048]
mov word [ebp - 0x128], dx
push eax
push eax
add esp, 4
call 0x408581
add byte [esi + 0x34], al
inc ebp
aas
cmp byte ss:[ecx], bh
cmp bh, byte [edx]
add esp, 4
xor eax, 0x10558
sub eax, 0x181fc
pop eax
push ebx
or ebx, 0x52c8
sub ebx, 0x12cd8
pop ebx
movzx eax, word [ebp - 0x128]
test eax, eax

Function at 0x4085a8
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
jne 0x4085c2
movzx ecx, word [ebp - 0x22c]
movzx edx, word [ebp - 0x128]
sub ecx, edx
mov dword [ebp - 0x15f0], ecx
jmp 0x408625
invalid
mov bh, 0x85
aam 0xfd
invalid

Function at 0x408658
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
jmp 0x40865f
pop ebx
mov ecx, dword [ebp - 0x500]
dec dword [ecx - 0x2ef73]
invalid
jmp 0x4086d6

Function at 0x4086e4
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
ret

Function at 0x4087c4
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
jecxz 0x4087cd
mov byte [0x8e80000], al
add byte [eax], al
add byte [eax], al
dec ebp
cmp byte [ebp + 0x33], al
push eax
push eax
Function at 0x4087d6
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
or eax, 0x9020
or eax, 0xcd08
pop eax
push eax
or eax, 0x2f7a
or eax, 0x14c4d
pop eax
cmp dword [ebp - 0xcac], 0
jne 0x408476
mov dword [ebp - 0x2f0], 0
jmp 0x4086d6
mov ecx, dword [ebp - 0xcac]
mov dword [ebp - 0x500], ecx
push esi
or esi, 0x8bc4
xor esi, 0xc2b6
and esi, 0x17c81
pop esi
push esi
push edi
add esp, 4
or esi, 0x15d36
sub esi, 0x2d5c
xor esi, 0x4b34
sub esi, 0xb1d5
pop esi
lea edx, [ebp - 0x1754]
mov dword [ebp - 0xca8], edx
mov eax, dword [ebp - 0x500]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xca4], ecx
xor edx, edx
mov word [ebp - 0x22c], dx
xor eax, eax
mov word [ebp - 0x128], ax
push edx
add edx, 0x1540d
add edx, 0xed64
add byte [eax], al
add edx, 0x27cf
add edx, 0x11c31
pop edx
push edi
push esi
add esp, 4
push edi
add edi, 0x36a2
pop edi
push ebx
push ecx
add esp, 4
add ebx, 0xec95
ret
xchg ebp, eax
in al, dx
add byte [eax], al
or ebx, 0xd4eb
pop ebx
push ecx
push eax
add esp, 4
xor ecx, 0x1d5
add ecx, 0x18038
add ecx, 0x9098
pop ecx
cmp dword [ebp - 0x2f0], 0
jne 0x40900d
mov eax, 0x6b
mov word [ebp - 0x1790], ax
mov ecx, 0x65
mov word [ebp - 0x178e], cx
mov edx, 0x72
mov word [ebp - 0x178c], dx
mov eax, 0x6e
add byte [eax], al
mov word [ebp - 0x178a], ax
mov ecx, 0x65
mov word [ebp - 0x1788], cx
mov edx, 0x6c
mov word [ebp - 0x1786], dx
mov eax, 0x33
mov word [ebp - 0x1784], ax
mov ecx, 0x32
mov word [ebp - 0x1782], cx
mov edx, 0x2e
mov word [ebp - 0x1780], dx
mov eax, 0x64
mov word [ebp - 0x177e], ax
mov ecx, 0x6c
mov word [ebp - 0x177c], cx
mov edx, 0x6c
mov word [ebp - 0x177a], dx
xor eax, eax
mov word [ebp - 0x1778], ax
push ebx
sub ebx, 0x151b0
or ebx, 0x7b0d
pop ebx
push ebx
jmp 0x4087c3
and ebx, 0xa207
call 0x4087d6
add byte [ebp + 0x38], cl
inc ebp
xor edx, dword [eax + 0x50]
dec esp
add esp, 4
add ebx, 0x15f0
pop ebx
mov byte [ebp - 0x898], 0x4c
mov byte [ebp - 0x897], 0x6f
mov byte [ebp - 0x896], 0x61
mov byte [ebp - 0x895], 0x64
mov byte [ebp - 0x894], 0x4c
mov byte [ebp - 0x893], 0x69
mov byte [ebp - 0x892], 0x62
mov byte [ebp - 0x891], 0x72
mov byte [ebp - 0x890], 0x61
mov byte [ebp - 0x88f], 0x72
mov byte [ebp - 0x88e], 0x79
mov byte [ebp - 0x88d], 0x57
mov byte [ebp - 0x88c], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1984], ecx
mov edx, dword [ebp - 0x1984]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1988], eax
mov ecx, dword [ebp - 0x1988]
mov dword [ebp - 0x15f4], ecx
push ecx
push edx
add esp, 4
jmp 0x408870
add ecx, 0x9140
sub ecx, 8
pop ecx
push ecx
push edx
add esp, 4
xor ecx, 0x16ce7
sub ecx, 0x2d04
sub ecx, 0x120a8
pop ecx
cmp dword [ebp - 0x15f4], 0
jne 0x4088ad
mov dword [ebp - 0x754], 0
invalid
cmpsd dword [esi], dword es:[edi]
add al, byte [eax]
Function at 0x40892b
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
inc dword [eax]
jne 0x408909
mov dword [ebp - 0x754], 0
jmp 0x408b54
mov edx, dword [ebp - 0xcb8]
mov dword [ebp - 0x504], edx
push ebx
or ebx, 0x139d2
call 0x40892b
add byte [ebx], bh
dec eax
aaa
dec esp
dec edx
cmp edi, dword [edi]
xor al, 0x83
les eax, [ebx + ebx*2]
push esi
push edi
add esp, 4
sub esi, 0xebd
add esi, 0x8b6b
xor esi, 0xc42
pop esi
lea eax, [ebp - 0x1790]
invalid
invalid
dec esp

Function at 0x408abc
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [ecx + 0x6f35cf], al
add byte [edi + 0x50], bl

Function at 0x408ba0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
sal byte [edi - 0x7efffe98], 0xe0
sbb byte [ecx + eax], 0

Function at 0x408bb4
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
aaa
inc edx
dec esp
aas
inc esi
inc ebp
and ecx, 0xea88
pop ecx
mov dword [ebp - 0x7a0], 0
jmp 0x4096f8

Function at 0x408c90
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov dword [ebp - 0x3e0], eax
jmp 0x408f32
cmp dword [ebp - 0x3e0], 0
je 0x40900d
push ecx
push ecx
add esp, 4
and ecx, 0x16589
sub ecx, 0xb2a6
pop ecx
push edi
push edx
add esp, 4
or edi, 0xd91c
Function at 0x408de5
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x75c]
add eax, 1
mov dword [ebp - 0x75c], eax
mov ecx, dword [ebp - 0x758]
mov edx, dword [ebp - 0x75c]
cmp edx, dword [ecx + 0x18]
jae 0x408f26
mov eax, dword [ebp - 0x75c]
mov ecx, dword [ebp - 0x198c]
mov edx, dword [ebp - 0x3a8]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x760], edx
mov eax, dword [ebp - 0x75c]
mov ecx, dword [ebp - 0x1990]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1994]
mov ecx, dword [ebp - 0x3a8]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x1998], ecx
mov dword [ebp - 0x1c8], 0
jmp 0x408d8a
mov edx, dword [ebp - 0x1c8]
add edx, 1
mov dword [ebp - 0x1c8], edx
mov eax, dword [ebp - 0x760]
add eax, dword [ebp - 0x1c8]
movsx ecx, byte [eax]
test ecx, ecx
je 0x408e3c
mov edx, dword [ebp - 0x1c8]
movsx eax, byte [ebp + edx - 0x898]
test eax, eax
je 0x408e3c
push eax
jmp 0x408dbf
or eax, 0x14678
sub eax, 0x7d0c
add eax, 0x10f27
pop eax
push eax
add eax, 0x17cc0
call 0x408de5
add byte [edi], dh
cmp eax, 0x434f3e35
add esp, 4
pop eax
mov ecx, dword [ebp - 0x760]
add ecx, dword [ebp - 0x1c8]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1c8]
movsx ecx, byte [ebp + eax - 0x898]
cmp edx, ecx
je 0x408e2e
mov edx, dword [ebp - 0x760]
add edx, dword [ebp - 0x1c8]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1c8]
movsx edx, byte [ebp + ecx - 0x898]
xchg esp, eax
or eax, 0xfffff768
xchg esp, eax
or eax, 0xfffff768
cmp eax, edx
jne 0x408e35
jmp 0x408d7b
jmp 0x408e3c
push edi
sub edi, 0xc85a
xor edi, 0x5b3f
sub edi, 0x9fef
pop edi
push edx
push esi
add esp, 4
call 0x408e64
add byte [esi + 0x3a], cl
cmp al, byte [eax + 0x34]
inc esp
cmp esi, dword [esi]
dec esp
add esp, 4
or edx, 0x174d3
pop edx
mov eax, dword [ebp - 0x760]
add eax, dword [ebp - 0x1c8]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1c8]
movsx eax, byte [ebp + edx - 0x898]
cmp ecx, eax
jne 0x408e9b
mov dword [ebp - 0xcbc], 0
jmp 0x408f0a
push ebx
xor ebx, 0x17e4d
jmp 0x408eaa
pop ebx
push ecx
jmp 0x408eb2
pop ecx
push ecx
and ecx, 0x10c6a
add ecx, 0x58ce
xor ecx, 0x14509
or ecx, 0x12ee0
pop ecx
mov ecx, dword [ebp - 0x760]
add ecx, dword [ebp - 0x1c8]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1c8]
movsx ecx, byte [ebp + eax - 0x898]
or ecx, 0x20
cmp edx, ecx
jge 0x408f00
mov dword [ebp - 0xcbc], 0xffffffff
jmp 0x408f0a
mov dword [ebp - 0xcbc], 1
cmp dword [ebp - 0xcbc], 0
jne 0x408f21
mov edx, dword [ebp - 0x1998]
mov dword [ebp - 0x3e0], edx
jmp 0x408f32
jmp 0x408d0b
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0x3e0], eax
Function at 0x408e24
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x75c]
add eax, 1
mov dword [ebp - 0x75c], eax
mov ecx, dword [ebp - 0x758]
mov edx, dword [ebp - 0x75c]
cmp edx, dword [ecx + 0x18]
jae 0x408f26
mov eax, dword [ebp - 0x75c]
mov ecx, dword [ebp - 0x198c]
mov edx, dword [ebp - 0x3a8]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x760], edx
mov eax, dword [ebp - 0x75c]
mov ecx, dword [ebp - 0x1990]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1994]
mov ecx, dword [ebp - 0x3a8]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x1998], ecx
mov dword [ebp - 0x1c8], 0
jmp 0x408d8a
mov edx, dword [ebp - 0x1c8]
add edx, 1
mov dword [ebp - 0x1c8], edx
mov eax, dword [ebp - 0x760]
add eax, dword [ebp - 0x1c8]
movsx ecx, byte [eax]
test ecx, ecx
je 0x408e3c
mov edx, dword [ebp - 0x1c8]
movsx eax, byte [ebp + edx - 0x898]
test eax, eax
je 0x408e3c
push eax
jmp 0x408dbf
or eax, 0x14678
sub eax, 0x7d0c
add eax, 0x10f27
pop eax
push eax
add eax, 0x17cc0
call 0x408de5
add byte [edi], dh
cmp eax, 0x434f3e35
add esp, 4
pop eax
mov ecx, dword [ebp - 0x760]
add ecx, dword [ebp - 0x1c8]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1c8]
movsx ecx, byte [ebp + eax - 0x898]
cmp edx, ecx
je 0x408e2e
mov edx, dword [ebp - 0x760]
add edx, dword [ebp - 0x1c8]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1c8]
movsx edx, byte [ebp + ecx - 0x898]
xchg esp, eax
or eax, 0xfffff768
xchg esp, eax
or eax, 0xfffff768
cmp eax, edx
jne 0x408e35
jmp 0x408d7b
jmp 0x408e3c
push edi
sub edi, 0xc85a
xor edi, 0x5b3f
sub edi, 0x9fef
pop edi
push edx
push esi
add esp, 4
call 0x408e64
add byte [esi + 0x3a], cl
cmp al, byte [eax + 0x34]
inc esp
cmp esi, dword [esi]
dec esp
add esp, 4
or edx, 0x174d3
pop edx
mov eax, dword [ebp - 0x760]
add eax, dword [ebp - 0x1c8]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1c8]
movsx eax, byte [ebp + edx - 0x898]
cmp ecx, eax
jne 0x408e9b
mov dword [ebp - 0xcbc], 0
jmp 0x408f0a
push ebx
xor ebx, 0x17e4d
jmp 0x408eaa
pop ebx
push ecx
jmp 0x408eb2
pop ecx
push ecx
and ecx, 0x10c6a
add ecx, 0x58ce
xor ecx, 0x14509
or ecx, 0x12ee0
pop ecx
mov ecx, dword [ebp - 0x760]
add ecx, dword [ebp - 0x1c8]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1c8]
movsx ecx, byte [ebp + eax - 0x898]
or ecx, 0x20
cmp edx, ecx
jge 0x408f00
mov dword [ebp - 0xcbc], 0xffffffff
jmp 0x408f0a
mov dword [ebp - 0xcbc], 1
cmp dword [ebp - 0xcbc], 0
jne 0x408f21
mov edx, dword [ebp - 0x1998]
mov dword [ebp - 0x3e0], edx
jmp 0x408f32
jmp 0x408d0b
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0x3e0], eax