joyce8/EMBER2024-capa huggingface dataset:
Function at 0x460110
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6d633d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x28
push ebx
push esi
push edi
push 0
push 0
push 0
lea ecx, [ebp - 0x34]
call fcn.004a8eb0
mov dword [ebp - 4], 0
lea eax, [ebp - 0x34]
mov ecx, dword [ebp + 8]
push 0
push 1
push eax
call fcn.004a8550
mov ebx, dword [ebp + 0xc]
push fcn.0055cab0
push 0x6e6280
push ebx
call fcn.0053e060
mov edi, eax
add esp, 0xc
test edi, edi
je 0x46019a
push edi
push 1
push dword [ebp - 0x20]
push dword [ebp - 0x30]
call fcn.0055eba3
push edi
mov esi, eax
call fcn.0055c8bf
add esp, 0x14
cmp esi, 1
je 0x4601cc
push ecx
mov eax, esp
mov dword [eax], ebx
call fcn.0049a8d0
add esp, 4
xor bl, bl
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x34]
mov dword [ebp + 8], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.004998e0
mov ecx, dword [ebp - 0xc]
mov al, bl
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 8
mov bl, 1
jmp 0x46019c
Function at 0x465d20
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x6d6605
push eax
mov dword fs:[0], esp
sub esp, 0x628
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, ecx
mov ebx, 0x6e2a60
test edi, edi
jne 0x465d6e
call fcn.0053c7d0
test al, al
je 0x465d5f
mov edi, str.steamdeck_stable
jmp 0x465d6e
call fcn.0053c6b0
test al, al
mov edi, str.chromeos_public_88ac3843c888c7adb9cd406fbac4ff7a7d2cde9b
cmove edi, ebx
mov ecx, dword [esi + 0xa8]
mov eax, ebx
test ecx, ecx
mov dword [ebp + 8], ecx
cmovne eax, ecx
mov ecx, edi
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x465da0
test dl, dl
je 0x465d9c
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x465da0
add ecx, 2
add eax, 2
test dl, dl
jne 0x465d80
xor eax, eax
jmp 0x465da5
sbb eax, eax
or eax, 1
test eax, eax
je 0x465dda
push 1
push esi
lea eax, [ebp - 0x634]
push 0x30a
push eax
call fcn.00461790
add esp, 0xc
lea ecx, [ebp - 0x634]
mov eax, esp
mov dword [eax], ecx
call fcn.0049a8d0
mov ecx, dword [esi + 0xa8]
add esp, 4
jmp 0x465ddd
mov ecx, dword [ebp + 8]
test ecx, ecx
mov eax, ebx
push edi
cmovne eax, ecx
push eax
lea eax, [ebp - 0x1c]
push str.Beta_changed_from__s_to__s_n
push eax
call fcn.0049eb00
add esp, 0x10
mov dword [ebp - 4], 0
cmp byte [eax + 0xf], 0
jge 0x465e06
mov eax, dword [eax]
test eax, eax
lea ecx, [esi + 0xd8]
cmovne ebx, eax
push ebx
call fcn.00464ac0
mov dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0xd], 0
jge 0x465e35
call fcn.00536730
push 0
push dword [ebp - 0x1c]
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
push edi
lea ecx, [esi + 0xa8]
call fcn.0049f660
push edi
lea ecx, [esi + 0xac]
call fcn.0049f660
push str.package
push str._s_beta
lea eax, [ebp - 0x328]
push 0x30a
push eax
call fcn.00547140
lea eax, [ebp - 0x328]
push 0x5c
push eax
call fcn.00545e90
mov eax, dword [esi + 0xa8]
add esp, 0x18
test eax, eax
je 0x465ede
cmp byte [eax], 0
je 0x465ede
push fcn.0055cab0
lea eax, [ebp - 0x328]
push 0x6e2c18
push eax
call fcn.0053e060
mov edi, eax
add esp, 0xc
test edi, edi
je 0x465ef1
mov edx, dword [esi + 0xa8]
test edx, edx
jne 0x465eba
xor ecx, ecx
mov edx, 0x6e2a60
jmp 0x465ec9
mov ecx, edx
lea ebx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x465ec0
sub ecx, ebx
push edi
push 1
push ecx
push edx
call fcn.0055eba3
push edi
call fcn.0055c8bf
add esp, 0x14
jmp 0x465ef1
push ecx
mov eax, esp
lea ecx, [ebp - 0x328]
mov dword [eax], ecx
call fcn.0049a8d0
add esp, 4
call fcn.0052fc70
fld qword [esi + 0x88]
fxch st(1)
fcompi st(1)
fstp st(0)
jbe 0x465f20
call fcn.0052fc70
fadd qword [0x6e7890]
fstp qword [esi + 0x88]
call fcn.0054a0e0
mov dword [esi + 0x80], eax
lea ecx, [esi + 0x90]
call fcn.0053d280
mov ecx, esi
call fcn.0053d030
test al, al
jne 0x465f44
cmp byte [esi + 0x57], al
jne 0x465f44
push 0
mov ecx, esi
call fcn.0053d330
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x46c310
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
dec edi
aaa
cmp dword [ecx - 0x7d], eax
les eax, [esi + ebx*2]
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x3f8], eax
jmp 0x46c367
push edx
push edi
add esp, 4
sub edx, 0xefa7
pop edx
push edi
and edi, 0x128
sub edi, 0x1609a
add edi, 0x18634
or edi, 0x3629
pop edi
push ecx
push ebx
add esp, 4
or ecx, 0x6a12
pop ecx
push edi
or edi, 0x8a81
add edi, 0x3087
or edi, 0xfc15
and edi, 0xde74
pop edi
push ecx
push ebx
add esp, 4
sub ecx, 0x13bfb
sub ecx, 0x16a77
or ecx, 0x4325
pop ecx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbe4]
mov dword [ebp - 0x15c8], eax
push edx
add edx, 0x5dc2
xor edx, 0x8427
add edx, 0x118ff
pop edx
push ecx
push edi
add esp, 4
sub ecx, 0x5484
sub ecx, 0x833d
or ecx, 0x112e1
xor ecx, 0xfa44
pop ecx
mov dword [ebp - 0x208c], 0xffffffff
push eax
add eax, 0x6764
xor eax, 0x61be
add eax, 0x3a8a
pop eax
push ebx
push ecx
add esp, 4
jmp 0x46c43a
jmp 0x46c441
add ebx, 0x10c3e
and ebx, 0x111d3
pop ebx
mov ecx, dword [ebp - 0x74c]
mov dword [ebp - 0x500], ecx
jmp 0x46c46b

Function at 0x46c314
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
dec edi
aaa
cmp dword [ecx - 0x7d], eax
les eax, [esi + ebx*2]
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x3f8], eax
jmp 0x46c367
push edx
push edi
add esp, 4
sub edx, 0xefa7
pop edx
push edi
and edi, 0x128
sub edi, 0x1609a
add edi, 0x18634
or edi, 0x3629
pop edi
push ecx
push ebx
add esp, 4
or ecx, 0x6a12
pop ecx
push edi
or edi, 0x8a81
add edi, 0x3087
or edi, 0xfc15
and edi, 0xde74
pop edi
push ecx
push ebx
add esp, 4
sub ecx, 0x13bfb
sub ecx, 0x16a77
or ecx, 0x4325
pop ecx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbe4]
mov dword [ebp - 0x15c8], eax
push edx
add edx, 0x5dc2
xor edx, 0x8427
add edx, 0x118ff
pop edx
push ecx
push edi
add esp, 4
sub ecx, 0x5484
sub ecx, 0x833d
or ecx, 0x112e1
xor ecx, 0xfa44
pop ecx
mov dword [ebp - 0x208c], 0xffffffff
push eax
add eax, 0x6764
xor eax, 0x61be
add eax, 0x3a8a
pop eax
push ebx
push ecx
add esp, 4
jmp 0x46c43a
jmp 0x46c441
add ebx, 0x10c3e
and ebx, 0x111d3
pop ebx
mov ecx, dword [ebp - 0x74c]
mov dword [ebp - 0x500], ecx
jmp 0x46c46b
Function at 0x46c485
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
aaa
dec ebp
inc edi
xor bh, byte [ebx]
add esp, 4
add eax, 0x70be
pop eax

Function at 0x46c5b4
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x500]
add edx, 1
mov dword [ebp - 0x500], edx
push eax
push ebx
add esp, 4
and eax, 0x1212f
call 0x46c485
add byte [esp + ecx*2 + 0x43], al
xor eax, 0x32474d37
aaa
dec ebp
inc edi
xor bh, byte [ebx]
add esp, 4
add eax, 0x70be
pop eax
push esi
jmp 0x46c496
and esi, 0x62c
pop esi
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x74c]
cmp eax, 0xffffffff
jb 0x46c4e5
push ecx
push ecx
add esp, 4
sub ecx, 0xbc85
pop ecx
push ebx
push edi
add esp, 4
or ebx, 0xcf82
and ebx, 0x7986
pop ebx
push edi
sub edi, 0xb594
or edi, 0x1d96
sub edi, 0x17c24
pop edi
jmp 0x46c713
mov dword [ebp - 0xc88], 7
mov ecx, dword [ebp - 0x500]
mov dword [ebp - 0xabc], ecx
push ecx
sub ecx, 0x124c5
pop ecx
push edi
or edi, 0xf96
add edi, 0x202e
add edi, 0x466
pop edi
push eax
add eax, 0x8836
or eax, 0x1191f
pop eax
push esi
add esi, 0x132e1
pop esi
mov edx, dword [ebp - 0x15c8]
mov dword [ebp - 0xab8], edx
mov dword [ebp - 0xc8c], 0
mov eax, dword [ebp - 0x500]
cmp eax, dword [ebp - 0x15c8]
jne 0x46c594
push eax
jmp 0x46c557
pop eax
push esi
push ebx
add esp, 4
sub esi, 0xdb4
and esi, 0x17e99
and esi, 0x10d5
jmp 0x46c574
pop esi
push ecx
xor ecx, 0x7f45
add ecx, 0x60d1
pop ecx
mov ecx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d0], ecx
jmp 0x46c6c5
cmp dword [ebp - 0xc88], 0
jle 0x46c6b9
push ebx
push esi
add esp, 4
call 0x46c5b4
add byte [0x34363e49], dh
dec eax
dec eax
inc esp
add esp, 4
call 0x46c5c3
add byte [esi + 0x3f], al
dec ebp
inc edi
cmp bh, byte [edi]
add esp, 4
or ebx, 0xac20
or ebx, 0x12667
pop ebx
mov edx, dword [ebp - 0xabc]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xab8]
movzx edx, byte [ecx]
cmp eax, edx
je 0x46c655
push ecx
push esi
add esp, 4
or ecx, 0xcf38
sub ecx, 0x17ddb
pop ecx
push eax
push eax
add esp, 4
and eax, 0xe518
pop eax
push eax
call 0x46c617
add byte [edi + 0x3f], al
inc ebp
dec edx
dec edi
inc ecx
dec esp
inc ebp
add esp, 4
pop eax
mov eax, dword [ebp - 0xabc]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xab8]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x46c63d
mov dword [ebp - 0x15cc], 1
jmp 0x46c647
mov dword [ebp - 0x15cc], 0xffffffff
mov ecx, dword [ebp - 0x15cc]
mov dword [ebp - 0xc8c], ecx
jmp 0x46c6b9
push ecx
jmp 0x46c65d
pop ecx
push ebx
xor ebx, 0xeebe
jmp 0x46c66b
jmp 0x46c671
jmp 0x46c677
pop ebx
push eax
xor eax, 0x15537
jmp 0x46c686
pop eax
mov edx, dword [ebp - 0xc88]
sub edx, 1
mov dword [ebp - 0xc88], edx
mov eax, dword [ebp - 0xabc]
add eax, 1
invalid
Function at 0x46c5c3
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x500]
add edx, 1
mov dword [ebp - 0x500], edx
push eax
push ebx
add esp, 4
and eax, 0x1212f
call 0x46c485
add byte [esp + ecx*2 + 0x43], al
xor eax, 0x32474d37
aaa
dec ebp
inc edi
xor bh, byte [ebx]
add esp, 4
add eax, 0x70be
pop eax
push esi
jmp 0x46c496
and esi, 0x62c
pop esi
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x74c]
cmp eax, 0xffffffff
jb 0x46c4e5
push ecx
push ecx
add esp, 4
sub ecx, 0xbc85
pop ecx
push ebx
push edi
add esp, 4
or ebx, 0xcf82
and ebx, 0x7986
pop ebx
push edi
sub edi, 0xb594
or edi, 0x1d96
sub edi, 0x17c24
pop edi
jmp 0x46c713
mov dword [ebp - 0xc88], 7
mov ecx, dword [ebp - 0x500]
mov dword [ebp - 0xabc], ecx
push ecx
sub ecx, 0x124c5
pop ecx
push edi
or edi, 0xf96
add edi, 0x202e
add edi, 0x466
pop edi
push eax
add eax, 0x8836
or eax, 0x1191f
pop eax
push esi
add esi, 0x132e1
pop esi
mov edx, dword [ebp - 0x15c8]
mov dword [ebp - 0xab8], edx
mov dword [ebp - 0xc8c], 0
mov eax, dword [ebp - 0x500]
cmp eax, dword [ebp - 0x15c8]
jne 0x46c594
push eax
jmp 0x46c557
pop eax
push esi
push ebx
add esp, 4
sub esi, 0xdb4
and esi, 0x17e99
and esi, 0x10d5
jmp 0x46c574
pop esi
push ecx
xor ecx, 0x7f45
add ecx, 0x60d1
pop ecx
mov ecx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d0], ecx
jmp 0x46c6c5
cmp dword [ebp - 0xc88], 0
jle 0x46c6b9
push ebx
push esi
add esp, 4
call 0x46c5b4
add byte [0x34363e49], dh
dec eax
dec eax
inc esp
add esp, 4
call 0x46c5c3
add byte [esi + 0x3f], al
dec ebp
inc edi
cmp bh, byte [edi]
add esp, 4
or ebx, 0xac20
or ebx, 0x12667
pop ebx
mov edx, dword [ebp - 0xabc]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xab8]
movzx edx, byte [ecx]
cmp eax, edx
je 0x46c655
push ecx
push esi
add esp, 4
or ecx, 0xcf38
sub ecx, 0x17ddb
pop ecx
push eax
push eax
add esp, 4
and eax, 0xe518
pop eax
push eax
call 0x46c617
add byte [edi + 0x3f], al
inc ebp
dec edx
dec edi
inc ecx
dec esp
inc ebp
add esp, 4
pop eax
mov eax, dword [ebp - 0xabc]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xab8]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x46c63d
mov dword [ebp - 0x15cc], 1
jmp 0x46c647
mov dword [ebp - 0x15cc], 0xffffffff
mov ecx, dword [ebp - 0x15cc]
mov dword [ebp - 0xc8c], ecx
jmp 0x46c6b9
push ecx
jmp 0x46c65d
pop ecx
push ebx
xor ebx, 0xeebe
jmp 0x46c66b
jmp 0x46c671
jmp 0x46c677
pop ebx
push eax
xor eax, 0x15537
jmp 0x46c686
pop eax
mov edx, dword [ebp - 0xc88]
sub edx, 1
mov dword [ebp - 0xc88], edx
mov eax, dword [ebp - 0xabc]
add eax, 1
invalid
Function at 0x46c600
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x500]
add edx, 1
mov dword [ebp - 0x500], edx
push eax
push ebx
add esp, 4
and eax, 0x1212f
call 0x46c485
add byte [esp + ecx*2 + 0x43], al
xor eax, 0x32474d37
aaa
dec ebp
inc edi
xor bh, byte [ebx]
add esp, 4
add eax, 0x70be
pop eax
push esi
jmp 0x46c496
and esi, 0x62c
pop esi
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x74c]
cmp eax, 0xffffffff
jb 0x46c4e5
push ecx
push ecx
add esp, 4
sub ecx, 0xbc85
pop ecx
push ebx
push edi
add esp, 4
or ebx, 0xcf82
and ebx, 0x7986
pop ebx
push edi
sub edi, 0xb594
or edi, 0x1d96
sub edi, 0x17c24
pop edi
jmp 0x46c713
mov dword [ebp - 0xc88], 7
mov ecx, dword [ebp - 0x500]
mov dword [ebp - 0xabc], ecx
push ecx
sub ecx, 0x124c5
pop ecx
push edi
or edi, 0xf96
add edi, 0x202e
add edi, 0x466
pop edi
push eax
add eax, 0x8836
or eax, 0x1191f
pop eax
push esi
add esi, 0x132e1
pop esi
mov edx, dword [ebp - 0x15c8]
mov dword [ebp - 0xab8], edx
mov dword [ebp - 0xc8c], 0
mov eax, dword [ebp - 0x500]
cmp eax, dword [ebp - 0x15c8]
jne 0x46c594
push eax
jmp 0x46c557
pop eax
push esi
push ebx
add esp, 4
sub esi, 0xdb4
and esi, 0x17e99
and esi, 0x10d5
jmp 0x46c574
pop esi
push ecx
xor ecx, 0x7f45
add ecx, 0x60d1
pop ecx
mov ecx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d0], ecx
jmp 0x46c6c5
cmp dword [ebp - 0xc88], 0
jle 0x46c6b9
push ebx
push esi
add esp, 4
call 0x46c5b4
add byte [0x34363e49], dh
dec eax
dec eax
inc esp
add esp, 4
call 0x46c5c3
add byte [esi + 0x3f], al
dec ebp
inc edi
cmp bh, byte [edi]
add esp, 4
or ebx, 0xac20
or ebx, 0x12667
pop ebx
mov edx, dword [ebp - 0xabc]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xab8]
movzx edx, byte [ecx]
cmp eax, edx
je 0x46c655
push ecx
push esi
add esp, 4
or ecx, 0xcf38
sub ecx, 0x17ddb
pop ecx
push eax
push eax
add esp, 4
and eax, 0xe518
pop eax
push eax
call 0x46c617
add byte [edi + 0x3f], al
inc ebp
dec edx
dec edi
inc ecx
dec esp
inc ebp
add esp, 4
pop eax
mov eax, dword [ebp - 0xabc]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xab8]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x46c63d
mov dword [ebp - 0x15cc], 1
jmp 0x46c647
mov dword [ebp - 0x15cc], 0xffffffff
mov ecx, dword [ebp - 0x15cc]
mov dword [ebp - 0xc8c], ecx
jmp 0x46c6b9
push ecx
jmp 0x46c65d
pop ecx
push ebx
xor ebx, 0xeebe
jmp 0x46c66b
jmp 0x46c671
jmp 0x46c677
pop ebx
push eax
xor eax, 0x15537
jmp 0x46c686
pop eax
mov edx, dword [ebp - 0xc88]
sub edx, 1
mov dword [ebp - 0xc88], edx
mov eax, dword [ebp - 0xabc]
add eax, 1
invalid
Function at 0x46c617
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x500]
add edx, 1
mov dword [ebp - 0x500], edx
push eax
push ebx
add esp, 4
and eax, 0x1212f
call 0x46c485
add byte [esp + ecx*2 + 0x43], al
xor eax, 0x32474d37
aaa
dec ebp
inc edi
xor bh, byte [ebx]
add esp, 4
add eax, 0x70be
pop eax
push esi
jmp 0x46c496
and esi, 0x62c
pop esi
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x74c]
cmp eax, 0xffffffff
jb 0x46c4e5
push ecx
push ecx
add esp, 4
sub ecx, 0xbc85
pop ecx
push ebx
push edi
add esp, 4
or ebx, 0xcf82
and ebx, 0x7986
pop ebx
push edi
sub edi, 0xb594
or edi, 0x1d96
sub edi, 0x17c24
pop edi
jmp 0x46c713
mov dword [ebp - 0xc88], 7
mov ecx, dword [ebp - 0x500]
mov dword [ebp - 0xabc], ecx
push ecx
sub ecx, 0x124c5
pop ecx
push edi
or edi, 0xf96
add edi, 0x202e
add edi, 0x466
pop edi
push eax
add eax, 0x8836
or eax, 0x1191f
pop eax
push esi
add esi, 0x132e1
pop esi
mov edx, dword [ebp - 0x15c8]
mov dword [ebp - 0xab8], edx
mov dword [ebp - 0xc8c], 0
mov eax, dword [ebp - 0x500]
cmp eax, dword [ebp - 0x15c8]
jne 0x46c594
push eax
jmp 0x46c557
pop eax
push esi
push ebx
add esp, 4
sub esi, 0xdb4
and esi, 0x17e99
and esi, 0x10d5
jmp 0x46c574
pop esi
push ecx
xor ecx, 0x7f45
add ecx, 0x60d1
pop ecx
mov ecx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d0], ecx
jmp 0x46c6c5
cmp dword [ebp - 0xc88], 0
jle 0x46c6b9
push ebx
push esi
add esp, 4
call 0x46c5b4
add byte [0x34363e49], dh
dec eax
dec eax
inc esp
add esp, 4
call 0x46c5c3
add byte [esi + 0x3f], al
dec ebp
inc edi
cmp bh, byte [edi]
add esp, 4
or ebx, 0xac20
or ebx, 0x12667
pop ebx
mov edx, dword [ebp - 0xabc]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xab8]
movzx edx, byte [ecx]
cmp eax, edx
je 0x46c655
push ecx
push esi
add esp, 4
or ecx, 0xcf38
sub ecx, 0x17ddb
pop ecx
push eax
push eax
add esp, 4
and eax, 0xe518
pop eax
push eax
call 0x46c617
add byte [edi + 0x3f], al
inc ebp
dec edx
dec edi
inc ecx
dec esp
inc ebp
add esp, 4
pop eax
mov eax, dword [ebp - 0xabc]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xab8]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x46c63d
mov dword [ebp - 0x15cc], 1
jmp 0x46c647
mov dword [ebp - 0x15cc], 0xffffffff
mov ecx, dword [ebp - 0x15cc]
mov dword [ebp - 0xc8c], ecx
jmp 0x46c6b9
push ecx
jmp 0x46c65d
pop ecx
push ebx
xor ebx, 0xeebe
jmp 0x46c66b
jmp 0x46c671
jmp 0x46c677
pop ebx
push eax
xor eax, 0x15537
jmp 0x46c686
pop eax
mov edx, dword [ebp - 0xc88]
sub edx, 1
mov dword [ebp - 0xc88], edx
mov eax, dword [ebp - 0xabc]
add eax, 1
invalid
Function at 0x46c830
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov word [ebp - 0x172e], cx
mov edx, 0x65
mov word [ebp - 0x172c], dx
mov eax, 0x6c
mov word [ebp - 0x172a], ax
mov ecx, 0x33
xor eax, dword [eax]
add byte [eax], al
mov word [ebp - 0x1728], cx
mov edx, 0x32
mov word [ebp - 0x1726], dx
mov eax, 0x2e
mov word [ebp - 0x1724], ax
mov ecx, 0x64
mov word [ebp - 0x1722], cx
mov edx, 0x6c
mov word [ebp - 0x1720], dx
mov eax, 0x6c
mov word [ebp - 0x171e], ax
xor ecx, ecx
mov word [ebp - 0x171c], cx
push eax
push edx
add esp, 4
sub eax, 0x4abe
pop eax
push edi
add edi, 0xae34
pop edi
push ecx
push edx
add esp, 4
xor ecx, 0x163b3
add ecx, 0x16bf6
add ecx, 0x348e
or ecx, 0x8d68
pop ecx
push ecx
push ecx
add esp, 4
or ecx, 0x16019
add ecx, 0x107e8
and ecx, 0x9148
xor ecx, 0xf118
pop ecx
push ebx
or ebx, 0x10c54
and ebx, 0x15d07
and ebx, 0x2bcf
pop ebx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1ff4], edx
mov eax, dword [ebp - 0x1ff4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1950], ecx
mov edx, dword [ebp - 0x1950]
mov dword [ebp - 0x159c], edx
push edi
and edi, 0x18345
add edi, 0x78c1
or edi, 0x13672
pop edi
push ecx
xor ecx, 0xbc0c
xor ecx, 0x61e8
call 0x46c95a
add byte [esi], dh
xor al, byte [esi + 0x4c]
aaa
inc ecx
xor eax, 0x5904c483
cmp dword [ebp - 0x159c], 0
jne 0x46c976
mov dword [ebp - 0x318], 0
jmp 0x46cc32
mov eax, dword [ebp - 0x159c]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc98], edx
push esi
push ecx
add esp, 4
add esi, 0xc31d
call 0x46c9a2
add byte [ebx], bh
cmp dword [ecx + 0x32], ecx
inc ebx
cmp esi, dword [edi]
inc esi
add esp, 4
add esi, 0x971b
pop esi
push edx
or edx, 0xc625
sub edx, 0x126cf
pop edx
cmp dword [ebp - 0xc98], 0
jne 0x46c9d2
mov dword [ebp - 0x318], 0
jmp 0x46cc32
mov eax, dword [ebp - 0xc98]
mov dword [ebp - 0x504], eax
push eax
jmp 0x46c9e6
xor eax, 0x77c8
xor eax, 0x12383
and eax, 0x1424b
pop eax
push eax
call 0x46ca06
add byte [ebx], bh
dec esi
inc edi
cmp edi, dword [ebx]
cmp al, 0x83
les eax, [ecx + eax*4]
enter 0x5f79, 1
add byte [eax - 0x73], bl
invalid
push ecx
jmp 0x46cc39
pop ecx
push esi
push edx
add esp, 4
jmp 0x46cc48
xor esi, 0x13185
call 0x46cc5a
add byte [0x383d3548], dh
cmp eax, dword [ebx - 0x397efb3c]
retf 0xb
Function at 0x46c95a
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov word [ebp - 0x172e], cx
mov edx, 0x65
mov word [ebp - 0x172c], dx
mov eax, 0x6c
mov word [ebp - 0x172a], ax
mov ecx, 0x33
xor eax, dword [eax]
add byte [eax], al
mov word [ebp - 0x1728], cx
mov edx, 0x32
mov word [ebp - 0x1726], dx
mov eax, 0x2e
mov word [ebp - 0x1724], ax
mov ecx, 0x64
mov word [ebp - 0x1722], cx
mov edx, 0x6c
mov word [ebp - 0x1720], dx
mov eax, 0x6c
mov word [ebp - 0x171e], ax
xor ecx, ecx
mov word [ebp - 0x171c], cx
push eax
push edx
add esp, 4
sub eax, 0x4abe
pop eax
push edi
add edi, 0xae34
pop edi
push ecx
push edx
add esp, 4
xor ecx, 0x163b3
add ecx, 0x16bf6
add ecx, 0x348e
or ecx, 0x8d68
pop ecx
push ecx
push ecx
add esp, 4
or ecx, 0x16019
add ecx, 0x107e8
and ecx, 0x9148
xor ecx, 0xf118
pop ecx
push ebx
or ebx, 0x10c54
and ebx, 0x15d07
and ebx, 0x2bcf
pop ebx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1ff4], edx
mov eax, dword [ebp - 0x1ff4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1950], ecx
mov edx, dword [ebp - 0x1950]
mov dword [ebp - 0x159c], edx
push edi
and edi, 0x18345
add edi, 0x78c1
or edi, 0x13672
pop edi
push ecx
xor ecx, 0xbc0c
xor ecx, 0x61e8
call 0x46c95a
add byte [esi], dh
xor al, byte [esi + 0x4c]
aaa
inc ecx
xor eax, 0x5904c483
cmp dword [ebp - 0x159c], 0
jne 0x46c976
mov dword [ebp - 0x318], 0
jmp 0x46cc32
mov eax, dword [ebp - 0x159c]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc98], edx
push esi
push ecx
add esp, 4
add esi, 0xc31d
call 0x46c9a2
add byte [ebx], bh
cmp dword [ecx + 0x32], ecx
inc ebx
cmp esi, dword [edi]
inc esi
add esp, 4
add esi, 0x971b
pop esi
push edx
or edx, 0xc625
sub edx, 0x126cf
pop edx
cmp dword [ebp - 0xc98], 0
jne 0x46c9d2
mov dword [ebp - 0x318], 0
jmp 0x46cc32
mov eax, dword [ebp - 0xc98]
mov dword [ebp - 0x504], eax
push eax
jmp 0x46c9e6
xor eax, 0x77c8
xor eax, 0x12383
and eax, 0x1424b
pop eax
push eax
call 0x46ca06
add byte [ebx], bh
dec esi
inc edi
cmp edi, dword [ebx]
cmp al, 0x83
les eax, [ecx + eax*4]
enter 0x5f79, 1
add byte [eax - 0x73], bl
invalid
push ecx
jmp 0x46cc39
pop ecx
push esi
push edx
add esp, 4
jmp 0x46cc48
xor esi, 0x13185
call 0x46cc5a
add byte [0x383d3548], dh
cmp eax, dword [ebx - 0x397efb3c]
retf 0xb
Function at 0x46c9a2
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov word [ebp - 0x172e], cx
mov edx, 0x65
mov word [ebp - 0x172c], dx
mov eax, 0x6c
mov word [ebp - 0x172a], ax
mov ecx, 0x33
xor eax, dword [eax]
add byte [eax], al
mov word [ebp - 0x1728], cx
mov edx, 0x32
mov word [ebp - 0x1726], dx
mov eax, 0x2e
mov word [ebp - 0x1724], ax
mov ecx, 0x64
mov word [ebp - 0x1722], cx
mov edx, 0x6c
mov word [ebp - 0x1720], dx
mov eax, 0x6c
mov word [ebp - 0x171e], ax
xor ecx, ecx
mov word [ebp - 0x171c], cx
push eax
push edx
add esp, 4
sub eax, 0x4abe
pop eax
push edi
add edi, 0xae34
pop edi
push ecx
push edx
add esp, 4
xor ecx, 0x163b3
add ecx, 0x16bf6
add ecx, 0x348e
or ecx, 0x8d68
pop ecx
push ecx
push ecx
add esp, 4
or ecx, 0x16019
add ecx, 0x107e8
and ecx, 0x9148
xor ecx, 0xf118
pop ecx
push ebx
or ebx, 0x10c54
and ebx, 0x15d07
and ebx, 0x2bcf
pop ebx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1ff4], edx
mov eax, dword [ebp - 0x1ff4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1950], ecx
mov edx, dword [ebp - 0x1950]
mov dword [ebp - 0x159c], edx
push edi
and edi, 0x18345
add edi, 0x78c1
or edi, 0x13672
pop edi
push ecx
xor ecx, 0xbc0c
xor ecx, 0x61e8
call 0x46c95a
add byte [esi], dh
xor al, byte [esi + 0x4c]
aaa
inc ecx
xor eax, 0x5904c483
cmp dword [ebp - 0x159c], 0
jne 0x46c976
mov dword [ebp - 0x318], 0
jmp 0x46cc32
mov eax, dword [ebp - 0x159c]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc98], edx
push esi
push ecx
add esp, 4
add esi, 0xc31d
call 0x46c9a2
add byte [ebx], bh
cmp dword [ecx + 0x32], ecx
inc ebx
cmp esi, dword [edi]
inc esi
add esp, 4
add esi, 0x971b
pop esi
push edx
or edx, 0xc625
sub edx, 0x126cf
pop edx
cmp dword [ebp - 0xc98], 0
jne 0x46c9d2
mov dword [ebp - 0x318], 0
jmp 0x46cc32
mov eax, dword [ebp - 0xc98]
mov dword [ebp - 0x504], eax
push eax
jmp 0x46c9e6
xor eax, 0x77c8
xor eax, 0x12383
and eax, 0x1424b
pop eax
push eax
call 0x46ca06
add byte [ebx], bh
dec esi
inc edi
cmp edi, dword [ebx]
cmp al, 0x83
les eax, [ecx + eax*4]
enter 0x5f79, 1
add byte [eax - 0x73], bl
invalid
push ecx
jmp 0x46cc39
pop ecx
push esi
push edx
add esp, 4
jmp 0x46cc48
xor esi, 0x13185
call 0x46cc5a
add byte [0x383d3548], dh
cmp eax, dword [ebx - 0x397efb3c]
retf 0xb