joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5530cb
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
and ebx, 0x12225
xor ebx, 0x9eba
xor ebx, 0x5cdf
pop ebx
push edx
and edx, 0xfd0b
or edx, 0x12702
pop edx
mov ecx, dword [ebp - 0x210]
mov edx, dword [ebp - 0x210]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x2d0], edx
jne 0x5530a2
push edx
push esi
add esp, 4
and edx, 0x173d5
and edx, 0x91ab
sub edx, 0xa00d
and edx, 0x15729
pop edx
push edx
or edx, 0x760
xor edx, 0xdf83
sub edx, 0x15ab0
pop edx
jmp fcn.00555900
mov eax, dword [ebp - 0x2d0]
mov ecx, dword [eax + 0x50]
mov dword [ebp - 0x3f0], ecx
push eax
and eax, 0x8cd5
add eax, 0xbe3a
call 0x5530cb
add byte [ebx + 0x44], cl
dec ecx
cmp byte [edx + ecx*2 + 0x3e], cl
add esp, 4
pop eax
push ebx
sub ebx, 0x59d6
xor ebx, 0x16190
or ebx, 0x4ff5
pop ebx
mov edx, dword [ebp - 0x1b0]
mov dword [ebp - 0x218], edx
push esi
sub esi, 0xf3cb
add esi, 0x1099f
pop esi
push edx
push ebx
add esp, 4
and edx, 0x1640a
pop edx
push edi
push eax
add esp, 4
or edi, 0x5a4e
xor edi, 0x16aa9
xor edi, 0x5493
pop edi
mov eax, dword [ebp - 0x218]
add eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x218], 0
je 0x5558f1
cmp dword [ebp - 0x22c], 0
je 0x5558f1
push esi
call 0x55315c
add byte [ebx + 0x32], al
dec edi
xor al, 0x32
dec esp
dec ebx
add esp, 4
call 0x55316d
add byte [ebx], dh
aaa
dec esp
xor ecx, dword [edx + 0x43]
cmp al, 0x44
add esp, 4
or esi, 0xf1ac
pop esi
push esi
and esi, 0xcfb6
pop esi
mov byte [ebp - 0x285], 7
mov byte [ebp - 1], 2
jmp 0x553195

Function at 0x55315c
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
and ebx, 0x12225
xor ebx, 0x9eba
xor ebx, 0x5cdf
pop ebx
push edx
and edx, 0xfd0b
or edx, 0x12702
pop edx
mov ecx, dword [ebp - 0x210]
mov edx, dword [ebp - 0x210]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x2d0], edx
jne 0x5530a2
push edx
push esi
add esp, 4
and edx, 0x173d5
and edx, 0x91ab
sub edx, 0xa00d
and edx, 0x15729
pop edx
push edx
or edx, 0x760
xor edx, 0xdf83
sub edx, 0x15ab0
pop edx
jmp fcn.00555900
mov eax, dword [ebp - 0x2d0]
mov ecx, dword [eax + 0x50]
mov dword [ebp - 0x3f0], ecx
push eax
and eax, 0x8cd5
add eax, 0xbe3a
call 0x5530cb
add byte [ebx + 0x44], cl
dec ecx
cmp byte [edx + ecx*2 + 0x3e], cl
add esp, 4
pop eax
push ebx
sub ebx, 0x59d6
xor ebx, 0x16190
or ebx, 0x4ff5
pop ebx
mov edx, dword [ebp - 0x1b0]
mov dword [ebp - 0x218], edx
push esi
sub esi, 0xf3cb
add esi, 0x1099f
pop esi
push edx
push ebx
add esp, 4
and edx, 0x1640a
pop edx
push edi
push eax
add esp, 4
or edi, 0x5a4e
xor edi, 0x16aa9
xor edi, 0x5493
pop edi
mov eax, dword [ebp - 0x218]
add eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x218], 0
je 0x5558f1
cmp dword [ebp - 0x22c], 0
je 0x5558f1
push esi
call 0x55315c
add byte [ebx + 0x32], al
dec edi
xor al, 0x32
dec esp
dec ebx
add esp, 4
call 0x55316d
add byte [ebx], dh
aaa
dec esp
xor ecx, dword [edx + 0x43]
cmp al, 0x44
add esp, 4
or esi, 0xf1ac
pop esi
push esi
and esi, 0xcfb6
pop esi
mov byte [ebp - 0x285], 7
mov byte [ebp - 1], 2
jmp 0x553195
Function at 0x55316d
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
and ebx, 0x12225
xor ebx, 0x9eba
xor ebx, 0x5cdf
pop ebx
push edx
and edx, 0xfd0b
or edx, 0x12702
pop edx
mov ecx, dword [ebp - 0x210]
mov edx, dword [ebp - 0x210]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x2d0], edx
jne 0x5530a2
push edx
push esi
add esp, 4
and edx, 0x173d5
and edx, 0x91ab
sub edx, 0xa00d
and edx, 0x15729
pop edx
push edx
or edx, 0x760
xor edx, 0xdf83
sub edx, 0x15ab0
pop edx
jmp fcn.00555900
mov eax, dword [ebp - 0x2d0]
mov ecx, dword [eax + 0x50]
mov dword [ebp - 0x3f0], ecx
push eax
and eax, 0x8cd5
add eax, 0xbe3a
call 0x5530cb
add byte [ebx + 0x44], cl
dec ecx
cmp byte [edx + ecx*2 + 0x3e], cl
add esp, 4
pop eax
push ebx
sub ebx, 0x59d6
xor ebx, 0x16190
or ebx, 0x4ff5
pop ebx
mov edx, dword [ebp - 0x1b0]
mov dword [ebp - 0x218], edx
push esi
sub esi, 0xf3cb
add esi, 0x1099f
pop esi
push edx
push ebx
add esp, 4
and edx, 0x1640a
pop edx
push edi
push eax
add esp, 4
or edi, 0x5a4e
xor edi, 0x16aa9
xor edi, 0x5493
pop edi
mov eax, dword [ebp - 0x218]
add eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x218], 0
je 0x5558f1
cmp dword [ebp - 0x22c], 0
je 0x5558f1
push esi
call 0x55315c
add byte [ebx + 0x32], al
dec edi
xor al, 0x32
dec esp
dec ebx
add esp, 4
call 0x55316d
add byte [ebx], dh
aaa
dec esp
xor ecx, dword [edx + 0x43]
cmp al, 0x44
add esp, 4
or esi, 0xf1ac
pop esi
push esi
and esi, 0xcfb6
pop esi
mov byte [ebp - 0x285], 7
mov byte [ebp - 1], 2
jmp 0x553195
Function at 0x5537bf
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop eax
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x2e0]
jne 0x553811
push edi
push ebx
add esp, 4
and edi, 0x184d6
sub edi, 0x249c
add edi, 0x15383
pop edi
push edx
sub edx, 0x158a4
or edx, 0x17fb8
xor edx, 0xd1b8
add edx, 0x9082
pop edx
mov ecx, dword [ebp - 0x228]
mov dword [ebp - 0x2e8], ecx
jmp 0x5539a9
cmp dword [ebp - 0x224], 0
jle 0x55396b
push edx
push edi
add esp, 4
sub edx, 0x4eb9
jmp 0x55382e
pop edx
push edi
push ebx
add esp, 4
jmp 0x55383b
pop edi
push eax
xor eax, 0xb68
or eax, 0x3645
or eax, 0xad77
pop eax
mov edx, dword [ebp - 0x1a0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x19c]
movzx edx, byte [ecx]
cmp eax, edx
je 0x5538d5
push edx
xor edx, 0x11558
and edx, 0x13add
and edx, 0x4c21
or edx, 0x7c26
pop edx
push edi
sub edi, 0x12258
call 0x553894
add byte [esi + 0x36], al
dec ebx
inc edi
xor eax, 0xc4833436
add al, 0x5f
mov eax, dword [ebp - 0x1a0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x19c]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x5538ba
mov dword [ebp - 0x2e4], 1
jmp 0x5538c4
mov dword [ebp - 0x2e4], 0xffffffff
mov ecx, dword [ebp - 0x2e4]
mov dword [ebp - 0x228], ecx
jmp 0x55396b
push esi
push eax
add esp, 4
and esi, 0x7d75
add esi, 0xe1e6
add esi, 0xf632
call 0x5538fb
add byte [edx + 0x34], cl
dec edi
dec ebp
xor al, 0x4a
dec ecx
add esp, 4
pop esi
push ebx
and ebx, 0x10871
pop ebx
mov edx, dword [ebp - 0x224]
sub edx, 1
mov dword [ebp - 0x224], edx
mov eax, dword [ebp - 0x1a0]
add eax, 1
mov dword [ebp - 0x1a0], eax
push edx
push ecx
add esp, 4
add edx, 0x7593
call 0x553940
add byte [ebx + 0x3e], cl
cmp ecx, dword [ecx + 0x4b]
inc edx
xor al, byte [eax + 0x35]
dec edi
add esp, 4
call 0x553953
add byte [edx], dh
aaa
cmp dh, byte [0x414c3e3e]
xor cl, byte [esi - 0x7d]
les eax, [edx + ebx*2]
mov ecx, dword [ebp - 0x19c]
add ecx, 1
mov dword [ebp - 0x19c], ecx
jmp 0x553811
push ecx
add ecx, 0x1506f
or ecx, 0x3b78
pop ecx
push esi
push ebx
add esp, 4
jmp 0x553985
call 0x553993
add byte [edi + 0x3f], al
cmp eax, 0x444a354b
add esp, 4
and esi, 0xf70
pop esi
mov edx, dword [ebp - 0x228]
mov dword [ebp - 0x2e8], edx
cmp dword [ebp - 0x2e8], 0
je 0x553a24
push esi
push edi
add esp, 4
and esi, 0xf2ad
and esi, 0x62fd
or esi, 0x18238
and esi, 0xaed4
pop esi
push edx
add edx, 0xb05d
pop edx
push ebx
push edi
add esp, 4
xor ebx, 0x3fe6
pop ebx
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
push eax
add eax, 0x7d08
pop eax
push eax
add eax, 0xd6c1
jmp 0x553a04
call 0x553a14
add byte [edi + 0x47], cl
xor cl, byte [ebp + 0x50]
dec esi
cmp byte [esi], dh
inc ebx
add esp, 4
jmp 0x553a1e
pop eax
jmp 0x5536ef
push eax
xor eax, 0x7efb
and eax, 0xf18d
add eax, 0x3e85
add eax, 0x1374e
pop eax
push ecx
push ecx
add esp, 4
and ecx, 0x7070
pop ecx
push edx
push edx
add esp, 4
or edx, 0x73e5
pop edx
mov ecx, dword [ebp - 0x34]
add ecx, 4
mov dword [ebp - 0x328], ecx
jmp 0x553a69
Function at 0x553894
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop eax
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x2e0]
jne 0x553811
push edi
push ebx
add esp, 4
and edi, 0x184d6
sub edi, 0x249c
add edi, 0x15383
pop edi
push edx
sub edx, 0x158a4
or edx, 0x17fb8
xor edx, 0xd1b8
add edx, 0x9082
pop edx
mov ecx, dword [ebp - 0x228]
mov dword [ebp - 0x2e8], ecx
jmp 0x5539a9
cmp dword [ebp - 0x224], 0
jle 0x55396b
push edx
push edi
add esp, 4
sub edx, 0x4eb9
jmp 0x55382e
pop edx
push edi
push ebx
add esp, 4
jmp 0x55383b
pop edi
push eax
xor eax, 0xb68
or eax, 0x3645
or eax, 0xad77
pop eax
mov edx, dword [ebp - 0x1a0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x19c]
movzx edx, byte [ecx]
cmp eax, edx
je 0x5538d5
push edx
xor edx, 0x11558
and edx, 0x13add
and edx, 0x4c21
or edx, 0x7c26
pop edx
push edi
sub edi, 0x12258
call 0x553894
add byte [esi + 0x36], al
dec ebx
inc edi
xor eax, 0xc4833436
add al, 0x5f
mov eax, dword [ebp - 0x1a0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x19c]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x5538ba
mov dword [ebp - 0x2e4], 1
jmp 0x5538c4
mov dword [ebp - 0x2e4], 0xffffffff
mov ecx, dword [ebp - 0x2e4]
mov dword [ebp - 0x228], ecx
jmp 0x55396b
push esi
push eax
add esp, 4
and esi, 0x7d75
add esi, 0xe1e6
add esi, 0xf632
call 0x5538fb
add byte [edx + 0x34], cl
dec edi
dec ebp
xor al, 0x4a
dec ecx
add esp, 4
pop esi
push ebx
and ebx, 0x10871
pop ebx
mov edx, dword [ebp - 0x224]
sub edx, 1
mov dword [ebp - 0x224], edx
mov eax, dword [ebp - 0x1a0]
add eax, 1
mov dword [ebp - 0x1a0], eax
push edx
push ecx
add esp, 4
add edx, 0x7593
call 0x553940
add byte [ebx + 0x3e], cl
cmp ecx, dword [ecx + 0x4b]
inc edx
xor al, byte [eax + 0x35]
dec edi
add esp, 4
call 0x553953
add byte [edx], dh
aaa
cmp dh, byte [0x414c3e3e]
xor cl, byte [esi - 0x7d]
les eax, [edx + ebx*2]
mov ecx, dword [ebp - 0x19c]
add ecx, 1
mov dword [ebp - 0x19c], ecx
jmp 0x553811
push ecx
add ecx, 0x1506f
or ecx, 0x3b78
pop ecx
push esi
push ebx
add esp, 4
jmp 0x553985
call 0x553993
add byte [edi + 0x3f], al
cmp eax, 0x444a354b
add esp, 4
and esi, 0xf70
pop esi
mov edx, dword [ebp - 0x228]
mov dword [ebp - 0x2e8], edx
cmp dword [ebp - 0x2e8], 0
je 0x553a24
push esi
push edi
add esp, 4
and esi, 0xf2ad
and esi, 0x62fd
or esi, 0x18238
and esi, 0xaed4
pop esi
push edx
add edx, 0xb05d
pop edx
push ebx
push edi
add esp, 4
xor ebx, 0x3fe6
pop ebx
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
push eax
add eax, 0x7d08
pop eax
push eax
add eax, 0xd6c1
jmp 0x553a04
call 0x553a14
add byte [edi + 0x47], cl
xor cl, byte [ebp + 0x50]
dec esi
cmp byte [esi], dh
inc ebx
add esp, 4
jmp 0x553a1e
pop eax
jmp 0x5536ef
push eax
xor eax, 0x7efb
and eax, 0xf18d
add eax, 0x3e85
add eax, 0x1374e
pop eax
push ecx
push ecx
add esp, 4
and ecx, 0x7070
pop ecx
push edx
push edx
add esp, 4
or edx, 0x73e5
pop edx
mov ecx, dword [ebp - 0x34]
add ecx, 4
mov dword [ebp - 0x328], ecx
jmp 0x553a69
Function at 0x5538fb
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop eax
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x2e0]
jne 0x553811
push edi
push ebx
add esp, 4
and edi, 0x184d6
sub edi, 0x249c
add edi, 0x15383
pop edi
push edx
sub edx, 0x158a4
or edx, 0x17fb8
xor edx, 0xd1b8
add edx, 0x9082
pop edx
mov ecx, dword [ebp - 0x228]
mov dword [ebp - 0x2e8], ecx
jmp 0x5539a9
cmp dword [ebp - 0x224], 0
jle 0x55396b
push edx
push edi
add esp, 4
sub edx, 0x4eb9
jmp 0x55382e
pop edx
push edi
push ebx
add esp, 4
jmp 0x55383b
pop edi
push eax
xor eax, 0xb68
or eax, 0x3645
or eax, 0xad77
pop eax
mov edx, dword [ebp - 0x1a0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x19c]
movzx edx, byte [ecx]
cmp eax, edx
je 0x5538d5
push edx
xor edx, 0x11558
and edx, 0x13add
and edx, 0x4c21
or edx, 0x7c26
pop edx
push edi
sub edi, 0x12258
call 0x553894
add byte [esi + 0x36], al
dec ebx
inc edi
xor eax, 0xc4833436
add al, 0x5f
mov eax, dword [ebp - 0x1a0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x19c]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x5538ba
mov dword [ebp - 0x2e4], 1
jmp 0x5538c4
mov dword [ebp - 0x2e4], 0xffffffff
mov ecx, dword [ebp - 0x2e4]
mov dword [ebp - 0x228], ecx
jmp 0x55396b
push esi
push eax
add esp, 4
and esi, 0x7d75
add esi, 0xe1e6
add esi, 0xf632
call 0x5538fb
add byte [edx + 0x34], cl
dec edi
dec ebp
xor al, 0x4a
dec ecx
add esp, 4
pop esi
push ebx
and ebx, 0x10871
pop ebx
mov edx, dword [ebp - 0x224]
sub edx, 1
mov dword [ebp - 0x224], edx
mov eax, dword [ebp - 0x1a0]
add eax, 1
mov dword [ebp - 0x1a0], eax
push edx
push ecx
add esp, 4
add edx, 0x7593
call 0x553940
add byte [ebx + 0x3e], cl
cmp ecx, dword [ecx + 0x4b]
inc edx
xor al, byte [eax + 0x35]
dec edi
add esp, 4
call 0x553953
add byte [edx], dh
aaa
cmp dh, byte [0x414c3e3e]
xor cl, byte [esi - 0x7d]
les eax, [edx + ebx*2]
mov ecx, dword [ebp - 0x19c]
add ecx, 1
mov dword [ebp - 0x19c], ecx
jmp 0x553811
push ecx
add ecx, 0x1506f
or ecx, 0x3b78
pop ecx
push esi
push ebx
add esp, 4
jmp 0x553985
call 0x553993
add byte [edi + 0x3f], al
cmp eax, 0x444a354b
add esp, 4
and esi, 0xf70
pop esi
mov edx, dword [ebp - 0x228]
mov dword [ebp - 0x2e8], edx
cmp dword [ebp - 0x2e8], 0
je 0x553a24
push esi
push edi
add esp, 4
and esi, 0xf2ad
and esi, 0x62fd
or esi, 0x18238
and esi, 0xaed4
pop esi
push edx
add edx, 0xb05d
pop edx
push ebx
push edi
add esp, 4
xor ebx, 0x3fe6
pop ebx
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
push eax
add eax, 0x7d08
pop eax
push eax
add eax, 0xd6c1
jmp 0x553a04
call 0x553a14
add byte [edi + 0x47], cl
xor cl, byte [ebp + 0x50]
dec esi
cmp byte [esi], dh
inc ebx
add esp, 4
jmp 0x553a1e
pop eax
jmp 0x5536ef
push eax
xor eax, 0x7efb
and eax, 0xf18d
add eax, 0x3e85
add eax, 0x1374e
pop eax
push ecx
push ecx
add esp, 4
and ecx, 0x7070
pop ecx
push edx
push edx
add esp, 4
or edx, 0x73e5
pop edx
mov ecx, dword [ebp - 0x34]
add ecx, 4
mov dword [ebp - 0x328], ecx
jmp 0x553a69
Function at 0x553940
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop eax
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x2e0]
jne 0x553811
push edi
push ebx
add esp, 4
and edi, 0x184d6
sub edi, 0x249c
add edi, 0x15383
pop edi
push edx
sub edx, 0x158a4
or edx, 0x17fb8
xor edx, 0xd1b8
add edx, 0x9082
pop edx
mov ecx, dword [ebp - 0x228]
mov dword [ebp - 0x2e8], ecx
jmp 0x5539a9
cmp dword [ebp - 0x224], 0
jle 0x55396b
push edx
push edi
add esp, 4
sub edx, 0x4eb9
jmp 0x55382e
pop edx
push edi
push ebx
add esp, 4
jmp 0x55383b
pop edi
push eax
xor eax, 0xb68
or eax, 0x3645
or eax, 0xad77
pop eax
mov edx, dword [ebp - 0x1a0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x19c]
movzx edx, byte [ecx]
cmp eax, edx
je 0x5538d5
push edx
xor edx, 0x11558
and edx, 0x13add
and edx, 0x4c21
or edx, 0x7c26
pop edx
push edi
sub edi, 0x12258
call 0x553894
add byte [esi + 0x36], al
dec ebx
inc edi
xor eax, 0xc4833436
add al, 0x5f
mov eax, dword [ebp - 0x1a0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x19c]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x5538ba
mov dword [ebp - 0x2e4], 1
jmp 0x5538c4
mov dword [ebp - 0x2e4], 0xffffffff
mov ecx, dword [ebp - 0x2e4]
mov dword [ebp - 0x228], ecx
jmp 0x55396b
push esi
push eax
add esp, 4
and esi, 0x7d75
add esi, 0xe1e6
add esi, 0xf632
call 0x5538fb
add byte [edx + 0x34], cl
dec edi
dec ebp
xor al, 0x4a
dec ecx
add esp, 4
pop esi
push ebx
and ebx, 0x10871
pop ebx
mov edx, dword [ebp - 0x224]
sub edx, 1
mov dword [ebp - 0x224], edx
mov eax, dword [ebp - 0x1a0]
add eax, 1
mov dword [ebp - 0x1a0], eax
push edx
push ecx
add esp, 4
add edx, 0x7593
call 0x553940
add byte [ebx + 0x3e], cl
cmp ecx, dword [ecx + 0x4b]
inc edx
xor al, byte [eax + 0x35]
dec edi
add esp, 4
call 0x553953
add byte [edx], dh
aaa
cmp dh, byte [0x414c3e3e]
xor cl, byte [esi - 0x7d]
les eax, [edx + ebx*2]
mov ecx, dword [ebp - 0x19c]
add ecx, 1
mov dword [ebp - 0x19c], ecx
jmp 0x553811
push ecx
add ecx, 0x1506f
or ecx, 0x3b78
pop ecx
push esi
push ebx
add esp, 4
jmp 0x553985
call 0x553993
add byte [edi + 0x3f], al
cmp eax, 0x444a354b
add esp, 4
and esi, 0xf70
pop esi
mov edx, dword [ebp - 0x228]
mov dword [ebp - 0x2e8], edx
cmp dword [ebp - 0x2e8], 0
je 0x553a24
push esi
push edi
add esp, 4
and esi, 0xf2ad
and esi, 0x62fd
or esi, 0x18238
and esi, 0xaed4
pop esi
push edx
add edx, 0xb05d
pop edx
push ebx
push edi
add esp, 4
xor ebx, 0x3fe6
pop ebx
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
push eax
add eax, 0x7d08
pop eax
push eax
add eax, 0xd6c1
jmp 0x553a04
call 0x553a14
add byte [edi + 0x47], cl
xor cl, byte [ebp + 0x50]
dec esi
cmp byte [esi], dh
inc ebx
add esp, 4
jmp 0x553a1e
pop eax
jmp 0x5536ef
push eax
xor eax, 0x7efb
and eax, 0xf18d
add eax, 0x3e85
add eax, 0x1374e
pop eax
push ecx
push ecx
add esp, 4
and ecx, 0x7070
pop ecx
push edx
push edx
add esp, 4
or edx, 0x73e5
pop edx
mov ecx, dword [ebp - 0x34]
add ecx, 4
mov dword [ebp - 0x328], ecx
jmp 0x553a69
Function at 0x553953
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop eax
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x2e0]
jne 0x553811
push edi
push ebx
add esp, 4
and edi, 0x184d6
sub edi, 0x249c
add edi, 0x15383
pop edi
push edx
sub edx, 0x158a4
or edx, 0x17fb8
xor edx, 0xd1b8
add edx, 0x9082
pop edx
mov ecx, dword [ebp - 0x228]
mov dword [ebp - 0x2e8], ecx
jmp 0x5539a9
cmp dword [ebp - 0x224], 0
jle 0x55396b
push edx
push edi
add esp, 4
sub edx, 0x4eb9
jmp 0x55382e
pop edx
push edi
push ebx
add esp, 4
jmp 0x55383b
pop edi
push eax
xor eax, 0xb68
or eax, 0x3645
or eax, 0xad77
pop eax
mov edx, dword [ebp - 0x1a0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x19c]
movzx edx, byte [ecx]
cmp eax, edx
je 0x5538d5
push edx
xor edx, 0x11558
and edx, 0x13add
and edx, 0x4c21
or edx, 0x7c26
pop edx
push edi
sub edi, 0x12258
call 0x553894
add byte [esi + 0x36], al
dec ebx
inc edi
xor eax, 0xc4833436
add al, 0x5f
mov eax, dword [ebp - 0x1a0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x19c]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x5538ba
mov dword [ebp - 0x2e4], 1
jmp 0x5538c4
mov dword [ebp - 0x2e4], 0xffffffff
mov ecx, dword [ebp - 0x2e4]
mov dword [ebp - 0x228], ecx
jmp 0x55396b
push esi
push eax
add esp, 4
and esi, 0x7d75
add esi, 0xe1e6
add esi, 0xf632
call 0x5538fb
add byte [edx + 0x34], cl
dec edi
dec ebp
xor al, 0x4a
dec ecx
add esp, 4
pop esi
push ebx
and ebx, 0x10871
pop ebx
mov edx, dword [ebp - 0x224]
sub edx, 1
mov dword [ebp - 0x224], edx
mov eax, dword [ebp - 0x1a0]
add eax, 1
mov dword [ebp - 0x1a0], eax
push edx
push ecx
add esp, 4
add edx, 0x7593
call 0x553940
add byte [ebx + 0x3e], cl
cmp ecx, dword [ecx + 0x4b]
inc edx
xor al, byte [eax + 0x35]
dec edi
add esp, 4
call 0x553953
add byte [edx], dh
aaa
cmp dh, byte [0x414c3e3e]
xor cl, byte [esi - 0x7d]
les eax, [edx + ebx*2]
mov ecx, dword [ebp - 0x19c]
add ecx, 1
mov dword [ebp - 0x19c], ecx
jmp 0x553811
push ecx
add ecx, 0x1506f
or ecx, 0x3b78
pop ecx
push esi
push ebx
add esp, 4
jmp 0x553985
call 0x553993
add byte [edi + 0x3f], al
cmp eax, 0x444a354b
add esp, 4
and esi, 0xf70
pop esi
mov edx, dword [ebp - 0x228]
mov dword [ebp - 0x2e8], edx
cmp dword [ebp - 0x2e8], 0
je 0x553a24
push esi
push edi
add esp, 4
and esi, 0xf2ad
and esi, 0x62fd
or esi, 0x18238
and esi, 0xaed4
pop esi
push edx
add edx, 0xb05d
pop edx
push ebx
push edi
add esp, 4
xor ebx, 0x3fe6
pop ebx
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
push eax
add eax, 0x7d08
pop eax
push eax
add eax, 0xd6c1
jmp 0x553a04
call 0x553a14
add byte [edi + 0x47], cl
xor cl, byte [ebp + 0x50]
dec esi
cmp byte [esi], dh
inc ebx
add esp, 4
jmp 0x553a1e
pop eax
jmp 0x5536ef
push eax
xor eax, 0x7efb
and eax, 0xf18d
add eax, 0x3e85
add eax, 0x1374e
pop eax
push ecx
push ecx
add esp, 4
and ecx, 0x7070
pop ecx
push edx
push edx
add esp, 4
or edx, 0x73e5
pop edx
mov ecx, dword [ebp - 0x34]
add ecx, 4
mov dword [ebp - 0x328], ecx
jmp 0x553a69
Function at 0x553993
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop eax
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x2e0]
jne 0x553811
push edi
push ebx
add esp, 4
and edi, 0x184d6
sub edi, 0x249c
add edi, 0x15383
pop edi
push edx
sub edx, 0x158a4
or edx, 0x17fb8
xor edx, 0xd1b8
add edx, 0x9082
pop edx
mov ecx, dword [ebp - 0x228]
mov dword [ebp - 0x2e8], ecx
jmp 0x5539a9
cmp dword [ebp - 0x224], 0
jle 0x55396b
push edx
push edi
add esp, 4
sub edx, 0x4eb9
jmp 0x55382e
pop edx
push edi
push ebx
add esp, 4
jmp 0x55383b
pop edi
push eax
xor eax, 0xb68
or eax, 0x3645
or eax, 0xad77
pop eax
mov edx, dword [ebp - 0x1a0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x19c]
movzx edx, byte [ecx]
cmp eax, edx
je 0x5538d5
push edx
xor edx, 0x11558
and edx, 0x13add
and edx, 0x4c21
or edx, 0x7c26
pop edx
push edi
sub edi, 0x12258
call 0x553894
add byte [esi + 0x36], al
dec ebx
inc edi
xor eax, 0xc4833436
add al, 0x5f
mov eax, dword [ebp - 0x1a0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x19c]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x5538ba
mov dword [ebp - 0x2e4], 1
jmp 0x5538c4
mov dword [ebp - 0x2e4], 0xffffffff
mov ecx, dword [ebp - 0x2e4]
mov dword [ebp - 0x228], ecx
jmp 0x55396b
push esi
push eax
add esp, 4
and esi, 0x7d75
add esi, 0xe1e6
add esi, 0xf632
call 0x5538fb
add byte [edx + 0x34], cl
dec edi
dec ebp
xor al, 0x4a
dec ecx
add esp, 4
pop esi
push ebx
and ebx, 0x10871
pop ebx
mov edx, dword [ebp - 0x224]
sub edx, 1
mov dword [ebp - 0x224], edx
mov eax, dword [ebp - 0x1a0]
add eax, 1
mov dword [ebp - 0x1a0], eax
push edx
push ecx
add esp, 4
add edx, 0x7593
call 0x553940
add byte [ebx + 0x3e], cl
cmp ecx, dword [ecx + 0x4b]
inc edx
xor al, byte [eax + 0x35]
dec edi
add esp, 4
call 0x553953
add byte [edx], dh
aaa
cmp dh, byte [0x414c3e3e]
xor cl, byte [esi - 0x7d]
les eax, [edx + ebx*2]
mov ecx, dword [ebp - 0x19c]
add ecx, 1
mov dword [ebp - 0x19c], ecx
jmp 0x553811
push ecx
add ecx, 0x1506f
or ecx, 0x3b78
pop ecx
push esi
push ebx
add esp, 4
jmp 0x553985
call 0x553993
add byte [edi + 0x3f], al
cmp eax, 0x444a354b
add esp, 4
and esi, 0xf70
pop esi
mov edx, dword [ebp - 0x228]
mov dword [ebp - 0x2e8], edx
cmp dword [ebp - 0x2e8], 0
je 0x553a24
push esi
push edi
add esp, 4
and esi, 0xf2ad
and esi, 0x62fd
or esi, 0x18238
and esi, 0xaed4
pop esi
push edx
add edx, 0xb05d
pop edx
push ebx
push edi
add esp, 4
xor ebx, 0x3fe6
pop ebx
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
push eax
add eax, 0x7d08
pop eax
push eax
add eax, 0xd6c1
jmp 0x553a04
call 0x553a14
add byte [edi + 0x47], cl
xor cl, byte [ebp + 0x50]
dec esi
cmp byte [esi], dh
inc ebx
add esp, 4
jmp 0x553a1e
pop eax
jmp 0x5536ef
push eax
xor eax, 0x7efb
and eax, 0xf18d
add eax, 0x3e85
add eax, 0x1374e
pop eax
push ecx
push ecx
add esp, 4
and ecx, 0x7070
pop ecx
push edx
push edx
add esp, 4
or edx, 0x73e5
pop edx
mov ecx, dword [ebp - 0x34]
add ecx, 4
mov dword [ebp - 0x328], ecx
jmp 0x553a69