joyce8/EMBER2024-capa huggingface dataset:
Function at 0x406574
Capabilities:
Get number of processors

Disassembly:
and ecx, 0x630b
sub ecx, 0xa708
jmp 0x4064e6
pop ecx
push ebx
add ebx, 0x11b31
pop ebx
mov edx, dword [ebp - 0x4d8]
mov eax, dword [edx]
mov dword [ebp - 0x4d8], eax
mov ecx, dword [ebp - 0x4d8]
cmp ecx, dword [ebp - 0xc2c]
je 0x40651b
mov edx, dword [ebp - 0x4d8]
cmp dword [edx + 0x30], 0
jne 0x4062d1
mov dword [ebp - 0x6ec], 0
push eax
call 0x406536
add byte [ecx + ecx*2], bh
aas
dec ebx
aas
cmp cl, byte ss:[eax + 0x41]
add esp, 4
and eax, 0xb3f2
and eax, 0x174fc
jmp 0x40654a
pop eax
push ebx
push ecx
add esp, 4
xor ebx, 0x28a9
pop ebx
cmp dword [ebp - 0x6ec], 0
jne 0x4065a1
push edi
push edx
add esp, 4
jmp 0x40656b
add edi, 0x1692f
pop edi
push esi
sub esi, 0xc8d1
out dx, al
ror eax, 1
add byte [eax], al
or esi, 0xea0e
sub esi, 0x6372
add byte [esi + 0x52], bl
push ecx
add esp, 4
or edx, 0xb396
pop edx
mov dword [ebp - 0x738], 0
jmp 0x4070c8
push eax
call 0x4065ae
add byte [esi], dh
inc edx
inc eax
inc edi
dec edi
dec edi
add esp, 4
jmp 0x4065b8
and eax, 0xc907
pop eax
push ebx
or ebx, 0xc335
add byte [eax], al
xor ebx, 0x11a1c
and ebx, 0x12dfe
pop ebx
invalid

Function at 0x4065ae
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
and ecx, 0x630b
sub ecx, 0xa708
jmp 0x4064e6
pop ecx
push ebx
add ebx, 0x11b31
pop ebx
mov edx, dword [ebp - 0x4d8]
mov eax, dword [edx]
mov dword [ebp - 0x4d8], eax
mov ecx, dword [ebp - 0x4d8]
cmp ecx, dword [ebp - 0xc2c]
je 0x40651b
mov edx, dword [ebp - 0x4d8]
cmp dword [edx + 0x30], 0
jne 0x4062d1
mov dword [ebp - 0x6ec], 0
push eax
call 0x406536
add byte [ecx + ecx*2], bh
aas
dec ebx
aas
cmp cl, byte ss:[eax + 0x41]
add esp, 4
and eax, 0xb3f2
and eax, 0x174fc
jmp 0x40654a
pop eax
push ebx
push ecx
add esp, 4
xor ebx, 0x28a9
pop ebx
cmp dword [ebp - 0x6ec], 0
jne 0x4065a1
push edi
push edx
add esp, 4
jmp 0x40656b
add edi, 0x1692f
pop edi
push esi
sub esi, 0xc8d1
out dx, al
ror eax, 1
add byte [eax], al
or esi, 0xea0e
sub esi, 0x6372
add byte [esi + 0x52], bl
push ecx
add esp, 4
or edx, 0xb396
pop edx
mov dword [ebp - 0x738], 0
jmp 0x4070c8
push eax
call 0x4065ae
add byte [esi], dh
inc edx
inc eax
inc edi
dec edi
dec edi
add esp, 4
jmp 0x4065b8
and eax, 0xc907
pop eax
push ebx
or ebx, 0xc335
add byte [eax], al
xor ebx, 0x11a1c
and ebx, 0x12dfe
pop ebx
invalid
Function at 0x4065b4
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
cmp dword [ebx + 0x34], eax
inc esi
mov ecx, dword [ebp - 0x14e8]
mov edx, dword [ebp - 0x2f8]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x14ec], edx
jne 0x40663a
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], eax
jmp 0x406903
mov ecx, 8
imul edx, ecx, 0
rol dword [eax], 1
mov eax, dword [ebp - 0x2f8]
add eax, dword [ebp - 0x14f0]
mov dword [ebp - 0x6f0], eax
jne 0x406691
mov ecx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], ecx
jmp 0x406903
mov edx, dword [ebp - 0x6f0]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x18a0], eax
mov ecx, dword [ebp - 0x6f0]
adc cl, bh
invalid
dec dword [ebx - 0x2f76b]
inc dword [ebx]
push ecx
and al, 0x89
xchg ebp, eax
pop esp
out 0xff, eax
dec dword [ebx - 0x6ef7b]
test dword [eax], edx
stc
invalid
dec dword [ebx - 0x2f773]
inc dword [ebx]
dec eax
sbb al, 0x89
lea ebx, [eax - 0x19]
invalid
inc edi
test dword [ecx + edi*8], ecx
invalid
inc dword [eax]
add byte [eax], al
add bl, ch
invalid

Function at 0x4065c4
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
and ecx, 0x630b
sub ecx, 0xa708
jmp 0x4064e6
pop ecx
push ebx
add ebx, 0x11b31
pop ebx
mov edx, dword [ebp - 0x4d8]
mov eax, dword [edx]
mov dword [ebp - 0x4d8], eax
mov ecx, dword [ebp - 0x4d8]
cmp ecx, dword [ebp - 0xc2c]
je 0x40651b
mov edx, dword [ebp - 0x4d8]
cmp dword [edx + 0x30], 0
jne 0x4062d1
mov dword [ebp - 0x6ec], 0
push eax
call 0x406536
add byte [ecx + ecx*2], bh
aas
dec ebx
aas
cmp cl, byte ss:[eax + 0x41]
add esp, 4
and eax, 0xb3f2
and eax, 0x174fc
jmp 0x40654a
pop eax
push ebx
push ecx
add esp, 4
xor ebx, 0x28a9
pop ebx
cmp dword [ebp - 0x6ec], 0
jne 0x4065a1
push edi
push edx
add esp, 4
jmp 0x40656b
add edi, 0x1692f
pop edi
push esi
sub esi, 0xc8d1
out dx, al
ror eax, 1
add byte [eax], al
or esi, 0xea0e
sub esi, 0x6372
add byte [esi + 0x52], bl
push ecx
add esp, 4
or edx, 0xb396
pop edx
mov dword [ebp - 0x738], 0
jmp 0x4070c8
push eax
call 0x4065ae
add byte [esi], dh
inc edx
inc eax
inc edi
dec edi
dec edi
add esp, 4
jmp 0x4065b8
and eax, 0xc907
pop eax
push ebx
or ebx, 0xc335
add byte [eax], al
xor ebx, 0x11a1c
and ebx, 0x12dfe
pop ebx
invalid

Function at 0x4067a4
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
and ebx, 0x6314
pop ebx
push ebx
push eax
Function at 0x4067b0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [ebp - 0x180]
add ecx, 1
mov dword [ebp - 0x180], ecx
mov edx, dword [ebp - 0x6f8]
add edx, dword [ebp - 0x180]
movsx eax, byte [edx]
test eax, eax
je 0x40680d
mov ecx, dword [ebp - 0x180]
movsx edx, byte [ebp + ecx - 0x820]
test edx, edx
je 0x40680d
push ebx
jmp 0x40678e
add ebx, 0x1123d
xor ebx, 0x14c4c
jmp 0x4067a1
pop ebx
push ebx
push eax
add esp, 4
add ebx, 0xce0c
pop ebx
mov eax, dword [ebp - 0x6f8]
or cl, bh
invalid
inc dword [ebx]
test dword [eax + 0xffffffe], eax
mov esi, 0x80958b08
invalid
invalid
dec dword [edi]
mov esi, 0xf7e01584
invalid
invalid
cmp ecx, eax
je 0x4067ff
mov ecx, dword [ebp - 0x6f8]
add ecx, dword [ebp - 0x180]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x180]
movsx ecx, byte [ebp + eax - 0x820]
cmp edx, ecx
jne 0x406806
jmp 0x40674c
jmp 0x40680d
push ecx
push edx
add esp, 4
sub ecx, 0x1d51
xor ecx, 0xfbe3
xor ecx, 0x36eb
pop ecx
push ecx
push edx
add esp, 4
and ecx, 0x1074e
or ecx, 0x11c62
pop ecx
push edx
and edx, 0xe0cd
pop edx
mov edx, dword [ebp - 0x6f8]
add edx, dword [ebp - 0x180]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x180]

Function at 0x406854
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x6f4]
add edx, 1
mov dword [ebp - 0x6f4], edx
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x6f4]
cmp ecx, dword [eax + 0x18]
jae 0x4068f7
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a0]
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x6f8], ecx
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18a8]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18ac], eax
mov dword [ebp - 0x180], 0
jmp 0x40675b
movsx edx, byte [ebp + ecx - 0x820]
cmp eax, edx
jne 0x40686c
mov dword [ebp - 0xc30], 0
jmp 0x4068db
push edi
or edi, 0x126ed
pop edi
push ebx
push ecx
add esp, 4
add ebx, 0x1682f
xor ebx, 0xa59b
add ebx, 0xe2db
call 0x40689a
add byte [edx + edi + 0x46], al
cmp bh, byte [0x333c5044]
add esp, 4
pop ebx
mov eax, dword [ebp - 0x6f8]
add eax, dword [ebp - 0x180]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x180]
movsx eax, byte [ebp + edx - 0x820]
or eax, 0x20
cmp ecx, eax
jge 0x4068d1
mov dword [ebp - 0xc30], 0xffffffff
jmp 0x4068db
mov dword [ebp - 0xc30], 1
cmp dword [ebp - 0xc30], 0
jne 0x4068f2
mov ecx, dword [ebp - 0x18ac]
mov dword [ebp - 0x3c4], ecx
jmp 0x406903
jmp 0x4066dc
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], edx
cmp dword [ebp - 0x3c4], 0
je 0x4069de
push edx
push ebx
add esp, 4
add al, 0xeb
invalid
call fcn.0040692b
add byte [edi], dh
xor al, 0x33
inc ebp
inc esp
dec esp
cmp eax, dword [edx + 0x4c]
push edi
xor edi, 0xc4da
call 0x4069f4
add byte [esi + 0x48], cl
dec ebp
inc edi
dec ecx
inc esi
dec esi
aaa
add esp, 4
pop edi
Function at 0x40689a
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x6f4]
add edx, 1
mov dword [ebp - 0x6f4], edx
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x6f4]
cmp ecx, dword [eax + 0x18]
jae 0x4068f7
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a0]
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x6f8], ecx
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18a8]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18ac], eax
mov dword [ebp - 0x180], 0
jmp 0x40675b
movsx edx, byte [ebp + ecx - 0x820]
cmp eax, edx
jne 0x40686c
mov dword [ebp - 0xc30], 0
jmp 0x4068db
push edi
or edi, 0x126ed
pop edi
push ebx
push ecx
add esp, 4
add ebx, 0x1682f
xor ebx, 0xa59b
add ebx, 0xe2db
call 0x40689a
add byte [edx + edi + 0x46], al
cmp bh, byte [0x333c5044]
add esp, 4
pop ebx
mov eax, dword [ebp - 0x6f8]
add eax, dword [ebp - 0x180]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x180]
movsx eax, byte [ebp + edx - 0x820]
or eax, 0x20
cmp ecx, eax
jge 0x4068d1
mov dword [ebp - 0xc30], 0xffffffff
jmp 0x4068db
mov dword [ebp - 0xc30], 1
cmp dword [ebp - 0xc30], 0
jne 0x4068f2
mov ecx, dword [ebp - 0x18ac]
mov dword [ebp - 0x3c4], ecx
jmp 0x406903
jmp 0x4066dc
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], edx
cmp dword [ebp - 0x3c4], 0
je 0x4069de
push edx
push ebx
add esp, 4
add al, 0xeb
invalid
call fcn.0040692b
add byte [edi], dh
xor al, 0x33
inc ebp
inc esp
dec esp
cmp eax, dword [edx + 0x4c]
push edi
xor edi, 0xc4da
call 0x4069f4
add byte [esi + 0x48], cl
dec ebp
inc edi
dec ecx
inc esi
dec esi
aaa
add esp, 4
pop edi

Function at 0x40692b
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
call 0x40693e
add byte [0x4d4d463f], dh
xor al, byte [edi + eax*2 + 0x44]
aaa
add esp, 4
pop edx
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x18b0], eax
push edi
push edi
add esp, 4
add edi, 0x113f
or edi, 0x17935
pop edi
push esi
add esi, 0x6545
call 0x406976
add byte [edi + 0x4b], cl
inc ebp
inc ebx
inc ebp
xor bh, byte [ecx]
dec ebp
add esp, 4
sub esi, 0x12abb
pop esi
mov ecx, dword [ebp - 0x18b0]
mov dword [ebp - 0x18b4], ecx
lea edx, [ebp - 0x1628]
push edx
call dword [ebp - 0x18b4]
test eax, eax
jne 0x4069de
push edi
and edi, 0xeaae
xor edi, 0x9a71
pop edi
push edi
and edi, 0x860c
pop edi
push eax
push eax
add esp, 4
call 0x4069c5
add byte [ecx + 0x42], al
inc edi
push eax
xor eax, 0xc4834043
add al, 0x81
invalid
Function at 0x40693e
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
call 0x40693e
add byte [0x4d4d463f], dh
xor al, byte [edi + eax*2 + 0x44]
aaa
add esp, 4
pop edx
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x18b0], eax
push edi
push edi
add esp, 4
add edi, 0x113f
or edi, 0x17935
pop edi
push esi
add esi, 0x6545
call 0x406976
add byte [edi + 0x4b], cl
inc ebp
inc ebx
inc ebp
xor bh, byte [ecx]
dec ebp
add esp, 4
sub esi, 0x12abb
pop esi
mov ecx, dword [ebp - 0x18b0]
mov dword [ebp - 0x18b4], ecx
lea edx, [ebp - 0x1628]
push edx
call dword [ebp - 0x18b4]
test eax, eax
jne 0x4069de
push edi
and edi, 0xeaae
xor edi, 0x9a71
pop edi
push edi
and edi, 0x860c
pop edi
push eax
push eax
add esp, 4
call 0x4069c5
add byte [ecx + 0x42], al
inc edi
push eax
xor eax, 0xc4834043
add al, 0x81
invalid

Function at 0x406976
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
call 0x40693e
add byte [0x4d4d463f], dh
xor al, byte [edi + eax*2 + 0x44]
aaa
add esp, 4
pop edx
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x18b0], eax
push edi
push edi
add esp, 4
add edi, 0x113f
or edi, 0x17935
pop edi
push esi
add esi, 0x6545
call 0x406976
add byte [edi + 0x4b], cl
inc ebp
inc ebx
inc ebp
xor bh, byte [ecx]
dec ebp
add esp, 4
sub esi, 0x12abb
pop esi
mov ecx, dword [ebp - 0x18b0]
mov dword [ebp - 0x18b4], ecx
lea edx, [ebp - 0x1628]
push edx
call dword [ebp - 0x18b4]
test eax, eax
jne 0x4069de
push edi
and edi, 0xeaae
xor edi, 0x9a71
pop edi
push edi
and edi, 0x860c
pop edi
push eax
push eax
add esp, 4
call 0x4069c5
add byte [ecx + 0x42], al
inc edi
push eax
xor eax, 0xc4834043
add al, 0x81
invalid

Function at 0x4069c5
Capabilities:
Get number of processors

Disassembly:
add esp, 4
call 0x40693e
add byte [0x4d4d463f], dh
xor al, byte [edi + eax*2 + 0x44]
aaa
add esp, 4
pop edx
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x18b0], eax
push edi
push edi
add esp, 4
add edi, 0x113f
or edi, 0x17935
pop edi
push esi
add esi, 0x6545
call 0x406976
add byte [edi + 0x4b], cl
inc ebp
inc ebx
inc ebp
xor bh, byte [ecx]
dec ebp
add esp, 4
sub esi, 0x12abb
pop esi
mov ecx, dword [ebp - 0x18b0]
mov dword [ebp - 0x18b4], ecx
lea edx, [ebp - 0x1628]
push edx
call dword [ebp - 0x18b4]
test eax, eax
jne 0x4069de
push edi
and edi, 0xeaae
xor edi, 0x9a71
pop edi
push edi
and edi, 0x860c
pop edi
push eax
push eax
add esp, 4
call 0x4069c5
add byte [ecx + 0x42], al
inc edi
push eax
xor eax, 0xc4834043
add al, 0x81
invalid
Function at 0x4069f4
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x6f4]
add edx, 1
mov dword [ebp - 0x6f4], edx
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x6f4]
cmp ecx, dword [eax + 0x18]
jae 0x4068f7
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a0]
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x6f8], ecx
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18a8]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18ac], eax
mov dword [ebp - 0x180], 0
jmp 0x40675b
movsx edx, byte [ebp + ecx - 0x820]
cmp eax, edx
jne 0x40686c
mov dword [ebp - 0xc30], 0
jmp 0x4068db
push edi
or edi, 0x126ed
pop edi
push ebx
push ecx
add esp, 4
add ebx, 0x1682f
xor ebx, 0xa59b
add ebx, 0xe2db
call 0x40689a
add byte [edx + edi + 0x46], al
cmp bh, byte [0x333c5044]
add esp, 4
pop ebx
mov eax, dword [ebp - 0x6f8]
add eax, dword [ebp - 0x180]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x180]
movsx eax, byte [ebp + edx - 0x820]
or eax, 0x20
cmp ecx, eax
jge 0x4068d1
mov dword [ebp - 0xc30], 0xffffffff
jmp 0x4068db
mov dword [ebp - 0xc30], 1
cmp dword [ebp - 0xc30], 0
jne 0x4068f2
mov ecx, dword [ebp - 0x18ac]
mov dword [ebp - 0x3c4], ecx
jmp 0x406903
jmp 0x4066dc
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], edx
cmp dword [ebp - 0x3c4], 0
je 0x4069de
push edx
push ebx
add esp, 4
add al, 0xeb
invalid
call fcn.0040692b
add byte [edi], dh
xor al, 0x33
inc ebp
inc esp
dec esp
cmp eax, dword [edx + 0x4c]
push edi
xor edi, 0xc4da
call 0x4069f4
add byte [esi + 0x48], cl
dec ebp
inc edi
dec ecx
inc esi
dec esi
aaa
add esp, 4
pop edi

Function at 0x4069f8
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push esi
push edi
add esp, 4
call 0x406a0c
add byte [esi + 0x43], al
dec esp
dec esp
xor al, byte [ebp + 0x4d]
cmp edi, dword [ecx]
add esp, 4
pop esi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x18b8], eax
mov ecx, dword [ebp - 0x18b8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18bc], edx
mov eax, dword [ebp - 0x18bc]
mov dword [ebp - 0x14f4], eax
push edi
or edi, 0x1274b
call 0x406a4b
add byte [eax + ecx*2 + 0x3d], al
xor eax, 0x83394d35
les eax, [edi + ebx*2]
push eax
sub eax, 0x10d07
add eax, 0x3006
xor eax, 0x31ec
add eax, 0x3446
pop eax
cmp dword [ebp - 0x14f4], 0
jne 0x406a81
mov dword [ebp - 0x2e0], 0
jmp 0x406d28
mov ecx, dword [ebp - 0x14f4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc3c], eax
push ebx
xor ebx, 0x3fbf
and ebx, 0x2167
pop ebx
push edi
push edx
add esp, 4
jmp 0x406aaf
jmp 0x406ab8
and edi, 0x185d7
add edi, 0xaa23
pop edi
cmp dword [ebp - 0xc3c], 0
jne 0x406add
mov dword [ebp - 0x2e0], 0
jmp 0x406d28
mov ecx, dword [ebp - 0xc3c]
mov dword [ebp - 0x4dc], ecx
Function at 0x406a0c
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push esi
push edi
add esp, 4
call 0x406a0c
add byte [esi + 0x43], al
dec esp
dec esp
xor al, byte [ebp + 0x4d]
cmp edi, dword [ecx]
add esp, 4
pop esi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x18b8], eax
mov ecx, dword [ebp - 0x18b8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18bc], edx
mov eax, dword [ebp - 0x18bc]
mov dword [ebp - 0x14f4], eax
push edi
or edi, 0x1274b
call 0x406a4b
add byte [eax + ecx*2 + 0x3d], al
xor eax, 0x83394d35
les eax, [edi + ebx*2]
push eax
sub eax, 0x10d07
add eax, 0x3006
xor eax, 0x31ec
add eax, 0x3446
pop eax
cmp dword [ebp - 0x14f4], 0
jne 0x406a81
mov dword [ebp - 0x2e0], 0
jmp 0x406d28
mov ecx, dword [ebp - 0x14f4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc3c], eax
push ebx
xor ebx, 0x3fbf
and ebx, 0x2167
pop ebx
push edi
push edx
add esp, 4
jmp 0x406aaf
jmp 0x406ab8
and edi, 0x185d7
add edi, 0xaa23
pop edi
cmp dword [ebp - 0xc3c], 0
jne 0x406add
mov dword [ebp - 0x2e0], 0
jmp 0x406d28
mov ecx, dword [ebp - 0xc3c]
mov dword [ebp - 0x4dc], ecx

Function at 0x406a4b
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push esi
push edi
add esp, 4
call 0x406a0c
add byte [esi + 0x43], al
dec esp
dec esp
xor al, byte [ebp + 0x4d]
cmp edi, dword [ecx]
add esp, 4
pop esi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x18b8], eax
mov ecx, dword [ebp - 0x18b8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18bc], edx
mov eax, dword [ebp - 0x18bc]
mov dword [ebp - 0x14f4], eax
push edi
or edi, 0x1274b
call 0x406a4b
add byte [eax + ecx*2 + 0x3d], al
xor eax, 0x83394d35
les eax, [edi + ebx*2]
push eax
sub eax, 0x10d07
add eax, 0x3006
xor eax, 0x31ec
add eax, 0x3446
pop eax
cmp dword [ebp - 0x14f4], 0
jne 0x406a81
mov dword [ebp - 0x2e0], 0
jmp 0x406d28
mov ecx, dword [ebp - 0x14f4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc3c], eax
push ebx
xor ebx, 0x3fbf
and ebx, 0x2167
pop ebx
push edi
push edx
add esp, 4
jmp 0x406aaf
jmp 0x406ab8
and edi, 0x185d7
add edi, 0xaa23
pop edi
cmp dword [ebp - 0xc3c], 0
jne 0x406add
mov dword [ebp - 0x2e0], 0
jmp 0x406d28
mov ecx, dword [ebp - 0xc3c]
mov dword [ebp - 0x4dc], ecx
Function at 0x406be4
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edi
push esi
add esp, 4
xor edi, 0x25c
add edi, 0xb
jmp 0x406b03
pop edi
push eax
and eax, 0x21b
jmp 0x406b13
jmp 0x406b1a
pop eax
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc38], edx
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc34], ecx
xor edx, edx
mov word [ebp - 0x200], dx
xor eax, eax
mov word [ebp - 0x34], ax
push edx
push ecx
add esp, 4
xor edx, 0xbaeb
xor edx, 0xc6ab
pop edx
push eax
push ebx
add esp, 4
xor eax, 0xc5a4
pop eax
push ecx
push edi
add esp, 4
sub ecx, 0x3074
jmp 0x406b76
pop ecx
mov ecx, dword [ebp - 0xc34]
mov dx, word [ecx]
mov word [ebp - 0xf86], dx
mov eax, dword [ebp - 0xc34]
add eax, 2
mov dword [ebp - 0xc34], eax
mov cx, word [ebp - 0xf86]
mov word [ebp - 0x200], cx
mov edx, dword [ebp - 0xc38]
mov ax, word [edx]
mov word [ebp - 0xf88], ax
mov ecx, dword [ebp - 0xc38]
add ecx, 2
mov dword [ebp - 0xc38], ecx
mov dx, word [ebp - 0xf88]
mov word [ebp - 0x34], dx
push edx
push ebx
add esp, 4
jmp 0x406bd8
call fcn.00406be4
add byte [ebx], dh
xor esi, dword [edx]
cmp al, 0x37
dec edi
add esp, 4
pop edx
push eax
push edi
add esp, 4
add al, 0xe8
or al, byte [eax]
add byte [eax], al
add byte [ecx + 0x3b], cl
dec edi
push eax
cmp ecx, dword [eax + 0x47]
dec edx
dec eax
add esp, 4
pop eax
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x406c1d
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x14fc], ecx
jmp 0x406c77
movzx eax, word [ebp - 0x200]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x406b45
movzx edx, word [ebp - 0x200]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x406b45
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x406c61
mov dword [ebp - 0x14f8], 0xffffffff
jmp 0x406c6b
mov dword [ebp - 0x14f8], 1
mov eax, dword [ebp - 0x14f8]
mov dword [ebp - 0x14fc], eax
cmp dword [ebp - 0x14fc], 0
jne 0x406cc0
push edx
xor edx, 0x12777
call 0x406c97
add byte [ebp + esi + 0x3b], cl
xor al, 0x3e
dec eax
xor eax, 0x833c3432
les eax, [eax + ebp*8]
or dword [eax], eax
add byte [eax], al
add byte [ebx + 0x34], cl
inc esi
cmp al, 0x3d
aas
dec edx
add esp, 4
and edx, 0x9b40
pop edx
mov ecx, dword [ebp - 0x4dc]
invalid
lea esp, [eax]
std
Function at 0x406bec
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edi
push esi
add esp, 4
xor edi, 0x25c
add edi, 0xb
jmp 0x406b03
pop edi
push eax
and eax, 0x21b
jmp 0x406b13
jmp 0x406b1a
pop eax
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc38], edx
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc34], ecx
xor edx, edx
mov word [ebp - 0x200], dx
xor eax, eax
mov word [ebp - 0x34], ax
push edx
push ecx
add esp, 4
xor edx, 0xbaeb
xor edx, 0xc6ab
pop edx
push eax
push ebx
add esp, 4
xor eax, 0xc5a4
pop eax
push ecx
push edi
add esp, 4
sub ecx, 0x3074
jmp 0x406b76
pop ecx
mov ecx, dword [ebp - 0xc34]
mov dx, word [ecx]
mov word [ebp - 0xf86], dx
mov eax, dword [ebp - 0xc34]
add eax, 2
mov dword [ebp - 0xc34], eax
mov cx, word [ebp - 0xf86]
mov word [ebp - 0x200], cx
mov edx, dword [ebp - 0xc38]
mov ax, word [edx]
mov word [ebp - 0xf88], ax
mov ecx, dword [ebp - 0xc38]
add ecx, 2
mov dword [ebp - 0xc38], ecx
mov dx, word [ebp - 0xf88]
mov word [ebp - 0x34], dx
push edx
push ebx
add esp, 4
jmp 0x406bd8
call fcn.00406be4
add byte [ebx], dh
xor esi, dword [edx]
cmp al, 0x37
dec edi
add esp, 4
pop edx
push eax
push edi
add esp, 4
add al, 0xe8
or al, byte [eax]
add byte [eax], al
add byte [ecx + 0x3b], cl
dec edi
push eax
cmp ecx, dword [eax + 0x47]
dec edx
dec eax
add esp, 4
pop eax
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x406c1d
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x14fc], ecx
jmp 0x406c77
movzx eax, word [ebp - 0x200]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x406b45
movzx edx, word [ebp - 0x200]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x406b45
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x406c61
mov dword [ebp - 0x14f8], 0xffffffff
jmp 0x406c6b
mov dword [ebp - 0x14f8], 1
mov eax, dword [ebp - 0x14f8]
mov dword [ebp - 0x14fc], eax
cmp dword [ebp - 0x14fc], 0
jne 0x406cc0
push edx
xor edx, 0x12777
call 0x406c97
add byte [ebp + esi + 0x3b], cl
xor al, 0x3e
dec eax
xor eax, 0x833c3432
les eax, [eax + ebp*8]
or dword [eax], eax
add byte [eax], al
add byte [ebx + 0x34], cl
inc esi
cmp al, 0x3d
aas
dec edx
add esp, 4
and edx, 0x9b40
pop edx
mov ecx, dword [ebp - 0x4dc]
invalid
lea esp, [eax]
std