joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10006ad7
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
out 0xff, al
inc dword [ecx]
add byte [eax], al
add byte [ebx - 0x19337b], cl
dec dword [ecx - 0x19377b]
inc dword [ebx - 0x193743]
inc dword [eax]
jne 0x10006a4d
push esi
push eax
add esp, 4
or esi, 0x9689
add esi, 0xad54
add esi, 0xee5f
xor esi, 0x11b5e
pop esi
push edx
call fcn.10006a3b
add byte [0x3848463b], bh
xor al, 0x36
dec ebp
inc ebx
push ecx
push edx
add esp, 4
sub ecx, 0x18248
add ecx, 0x1021a
jmp 0x10006a66
pop ecx
push ecx
push edx
add esp, 4
sub ecx, 0x9071
add ecx, 0xff57
or ecx, 0x9030
pop ecx
mov edx, dword [ebp - 0x5d8]
mov eax, dword [edx]
mov dword [ebp - 0x5d8], eax
mov ecx, dword [ebp - 0x5d8]
cli
invalid
invalid
cmp ecx, dword [ebp - 0xecc]
je 0x10006aab
mov edx, dword [ebp - 0x5d8]
cmp dword [edx + 0x30], 0
jne 0x10006861
mov dword [ebp - 0x37c], 0
push edi
sub edi, 0xc5fd
xor edi, 0x17497
pop edi
push edi
push eax
add esp, 4
call 0x10006ad7
add byte [edx], bh
push eax
cmp dword [eax], edi
inc esi
xor esi, dword [edi]
dec edx
inc edi
add esp, 4
xor edi, 0x124c6
sub edi, 0x58b5
pop edi
mov eax, dword [ebp - 0x37c]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x3d4], ecx
push edi
push edi
add esp, 4
call 0x10006b0a
add byte [0x50413b4b], bh
inc edx
aaa
inc esp
cmp eax, 0x5f04c483
push edx
xor edx, 0x2f05
add edx, 0x2af6
add edx, 0x94a9
or edx, 0xe372
pop edx
mov dword [ebp - 0x8a8], 0
mov edx, dword [ebp - 0x3d4]
mov dword [ebp - 0x193c], edx
cmp dword [ebp - 0x193c], 0
jne 0x10006b58
mov eax, dword [ebp - 0x8a8]
mov dword [ebp - 0x5dc], eax
jmp 0x10006e49
mov ecx, dword [ebp - 0x193c]
mov edx, dword [ebp - 0x3d4]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1940], edx
jne 0x10006b80
mov eax, dword [ebp - 0x8a8]
mov dword [ebp - 0x5dc], eax
jmp 0x10006e49
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1940]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1944], ecx
cmp dword [ebp - 0x1944], 0
jne 0x10006bb2
invalid
mov edx, dword [ebp - 0x8a8]
mov dword [ebp - 0x5dc], edx
jmp 0x10006e49
mov eax, dword [ebp - 0x3d4]
add eax, dword [ebp - 0x1944]
mov dword [ebp - 0x89c], eax
jne 0x10006bd7
mov ecx, dword [ebp - 0x8a8]
mov dword [ebp - 0x5dc], ecx
jmp 0x10006e49
mov edx, dword [ebp - 0x89c]
mov eax, dword [ebp - 0x3d4]
cld
invalid
inc dword [ebx]
inc edx
and byte [ecx - 0x26f37b], cl
dec dword [ebx - 0x89b73]
dec dword [ebx - 0x3d36b]
inc dword [ebx]
push ecx
and al, 0x89
xchg ebp, eax
or cl, bl
invalid
dec dword [ebx - 0x89b7b]
dec dword [ebx - 0x3d373]
inc dword [ebx]
dec eax
sbb al, 0x89
lea eax, [ecx + ebx*8]
invalid
inc edi
test dword [eax - 9], esp
invalid
inc dword [eax]
add byte [eax], al
add bl, ch
invalid
Function at 0x10006b0a
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
out 0xff, al
inc dword [ecx]
add byte [eax], al
add byte [ebx - 0x19337b], cl
dec dword [ecx - 0x19377b]
inc dword [ebx - 0x193743]
inc dword [eax]
jne 0x10006a4d
push esi
push eax
add esp, 4
or esi, 0x9689
add esi, 0xad54
add esi, 0xee5f
xor esi, 0x11b5e
pop esi
push edx
call fcn.10006a3b
add byte [0x3848463b], bh
xor al, 0x36
dec ebp
inc ebx
push ecx
push edx
add esp, 4
sub ecx, 0x18248
add ecx, 0x1021a
jmp 0x10006a66
pop ecx
push ecx
push edx
add esp, 4
sub ecx, 0x9071
add ecx, 0xff57
or ecx, 0x9030
pop ecx
mov edx, dword [ebp - 0x5d8]
mov eax, dword [edx]
mov dword [ebp - 0x5d8], eax
mov ecx, dword [ebp - 0x5d8]
cli
invalid
invalid
cmp ecx, dword [ebp - 0xecc]
je 0x10006aab
mov edx, dword [ebp - 0x5d8]
cmp dword [edx + 0x30], 0
jne 0x10006861
mov dword [ebp - 0x37c], 0
push edi
sub edi, 0xc5fd
xor edi, 0x17497
pop edi
push edi
push eax
add esp, 4
call 0x10006ad7
add byte [edx], bh
push eax
cmp dword [eax], edi
inc esi
xor esi, dword [edi]
dec edx
inc edi
add esp, 4
xor edi, 0x124c6
sub edi, 0x58b5
pop edi
mov eax, dword [ebp - 0x37c]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x3d4], ecx
push edi
push edi
add esp, 4
call 0x10006b0a
add byte [0x50413b4b], bh
inc edx
aaa
inc esp
cmp eax, 0x5f04c483
push edx
xor edx, 0x2f05
add edx, 0x2af6
add edx, 0x94a9
or edx, 0xe372
pop edx
mov dword [ebp - 0x8a8], 0
mov edx, dword [ebp - 0x3d4]
mov dword [ebp - 0x193c], edx
cmp dword [ebp - 0x193c], 0
jne 0x10006b58
mov eax, dword [ebp - 0x8a8]
mov dword [ebp - 0x5dc], eax
jmp 0x10006e49
mov ecx, dword [ebp - 0x193c]
mov edx, dword [ebp - 0x3d4]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1940], edx
jne 0x10006b80
mov eax, dword [ebp - 0x8a8]
mov dword [ebp - 0x5dc], eax
jmp 0x10006e49
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1940]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1944], ecx
cmp dword [ebp - 0x1944], 0
jne 0x10006bb2
invalid
mov edx, dword [ebp - 0x8a8]
mov dword [ebp - 0x5dc], edx
jmp 0x10006e49
mov eax, dword [ebp - 0x3d4]
add eax, dword [ebp - 0x1944]
mov dword [ebp - 0x89c], eax
jne 0x10006bd7
mov ecx, dword [ebp - 0x8a8]
mov dword [ebp - 0x5dc], ecx
jmp 0x10006e49
mov edx, dword [ebp - 0x89c]
mov eax, dword [ebp - 0x3d4]
cld
invalid
inc dword [ebx]
inc edx
and byte [ecx - 0x26f37b], cl
dec dword [ebx - 0x89b73]
dec dword [ebx - 0x3d36b]
inc dword [ebx]
push ecx
and al, 0x89
xchg ebp, eax
or cl, bl
invalid
dec dword [ebx - 0x89b7b]
dec dword [ebx - 0x3d373]
inc dword [ebx]
dec eax
sbb al, 0x89
lea eax, [ecx + ebx*8]
invalid
inc edi
test dword [eax - 9], esp
invalid
inc dword [eax]
add byte [eax], al
add bl, ch
invalid

Function at 0x10006c00
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
dec dword [ebx - 0x89b7b]
dec dword [ebx - 0x3d373]
inc dword [ebx]
dec eax
sbb al, 0x89
lea eax, [ecx + ebx*8]
invalid
Function at 0x10006ce1
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [ebp - 0x1e4]
add ecx, 1
mov dword [ebp - 0x1e4], ecx
mov edx, dword [ebp - 0x8a4]
add edx, dword [ebp - 0x1e4]
movsx eax, byte [edx]
test eax, eax
je 0x10006d53
mov ecx, dword [ebp - 0x1e4]
movsx edx, byte [ebp + ecx - 0x9d8]
test edx, edx
je 0x10006d53
push edx
push ebx
add esp, 4
call 0x10006ce1
add byte [ebx], dh
dec ebp
push eax
dec edx
aas
cmp cl, byte [ebp + 0x50]
add esp, 4
sub edx, 0x8355
or edx, 0x3a4e
pop edx
push ebx
jmp 0x10006cf7
jmp 0x10006cff
pop ebx
mov eax, dword [ebp - 0x8a4]
add eax, dword [ebp - 0x1e4]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1e4]
movsx eax, byte [ebp + edx - 0x9d8]
cmp ecx, eax
invalid

Function at 0x10006cf0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [ebp - 0x1e4]
add ecx, 1
mov dword [ebp - 0x1e4], ecx
mov edx, dword [ebp - 0x8a4]
add edx, dword [ebp - 0x1e4]
movsx eax, byte [edx]
test eax, eax
je 0x10006d53
mov ecx, dword [ebp - 0x1e4]
movsx edx, byte [ebp + ecx - 0x9d8]
test edx, edx
je 0x10006d53
push edx
push ebx
add esp, 4
call 0x10006ce1
add byte [ebx], dh
dec ebp
push eax
dec edx
aas
cmp cl, byte [ebp + 0x50]
add esp, 4
sub edx, 0x8355
or edx, 0x3a4e
pop edx
push ebx
jmp 0x10006cf7
jmp 0x10006cff
pop ebx
mov eax, dword [ebp - 0x8a4]
add eax, dword [ebp - 0x1e4]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1e4]
movsx eax, byte [ebp + edx - 0x9d8]
cmp ecx, eax
invalid

Function at 0x10006dd2
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x8a0]
add edx, 1
mov dword [ebp - 0x8a0], edx
mov eax, dword [ebp - 0x89c]
mov ecx, dword [ebp - 0x8a0]
cmp ecx, dword [eax + 0x18]
jae 0x10006e3d
mov edx, dword [ebp - 0x8a0]
mov eax, dword [ebp - 0x26f4]
mov ecx, dword [ebp - 0x3d4]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x8a4], ecx
mov edx, dword [ebp - 0x8a0]
mov eax, dword [ebp - 0x26f8]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x26fc]
mov eax, dword [ebp - 0x3d4]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1f74], eax
mov dword [ebp - 0x1e4], 0
jmp 0x10006ca1
cmp eax, edx
jne 0x10006db2
mov dword [ebp - 0xed0], 0
jmp 0x10006e21
push edi
push eax
add esp, 4
sub edi, 0x4ca9
xor edi, 0x13278
call 0x10006dd2
add byte [ecx + 0x37], cl
inc ebx
dec edx
xor edi, dword [ecx]
inc edi
dec edi
add esp, 4
or edi, 0x63fb
pop edi
push eax
and eax, 0x182ee
add byte [ecx], 0
pop eax
mov eax, dword [ebp - 0x8a4]
add eax, dword [ebp - 0x1e4]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x1e4]
movsx eax, byte [ebp + edx - 0x9d8]
or eax, 0x20
cmp ecx, eax
jge 0x10006e17
mov dword [ebp - 0xed0], 0xffffffff
jmp 0x10006e21
mov dword [ebp - 0xed0], 1
cmp dword [ebp - 0xed0], 0
jne 0x10006e38
mov ecx, dword [ebp - 0x1f74]
mov dword [ebp - 0x5dc], ecx
jmp 0x10006e49
jmp 0x10006c22
mov edx, dword [ebp - 0x8a8]
mov dword [ebp - 0x5dc], edx
mov eax, dword [ebp - 0x5dc]
mov dword [ebp - 0x8d4], eax
Function at 0x10006ea0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
xor edi, 0x4dd1
and edi, 0x3c25
pop edi
push edi
push edx
add esp, 4
sub edi, 0x1032b
sub edi, 0x29bc
or edi, 0x5b32
pop edi
cmp dword [ebp - 0x494], 0
je 0x10006eda
cmp dword [ebp - 0xc20], 0
jne 0x10006f20
push edi
push edi
add esp, 4
add edi, 0xcc3f
or edi, 0x4d5
pop edi
push esi
xor esi, 0x1682b
xor esi, 0x97c6
call 0x10006f08
add byte [edi + 0x4e], al
inc esi
xor esi, dword [0x44504e43]
add esp, 4
pop esi
mov edx, dword [ebp - 0x8d4]
mov dword [ebp - 0x1f78], edx
push 0
call dword [ebp - 0x1f78]
mov dword [ebp - 0x27a4], 0xa
push eax
add eax, 0x16977
add eax, 0x14998
sub eax, 0xb35f
add eax, 0x3844
pop eax
push ecx
push edi
add esp, 4
and ecx, 0x884b
xor ecx, 0x6e44
xor ecx, 0x122ff
pop ecx
mov eax, dword [ebp - 0x494]
invalid
dec dword [edx - 0x7277f5b8]
cmpsd dword [esi], dword es:[edi]
sti
invalid
dec dword [ebx - 0xc1f6b]
jmp [ebx]
xchg ebp, eax
insb byte es:[edi], dx
sti
invalid
dec dword [ecx - 0x19c76b]
inc edi
test dword [eax], eax
int1
invalid
inc dword [eax]
add byte [eax], al
add byte [edi - 0x18], dl
or al, byte [eax]
add byte [eax], al
add byte [0x3b40424c], bh
dec ecx
cmp dword [edi], edi
dec ecx
add esp, 4
add edi, 0x1519
pop edi
push esi
sub esi, 0xc116
call 0x10006fb5
add byte [ecx], bh
inc esi

Function at 0x10006f08
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
xor edi, 0x4dd1
and edi, 0x3c25
pop edi
push edi
push edx
add esp, 4
sub edi, 0x1032b
sub edi, 0x29bc
or edi, 0x5b32
pop edi
cmp dword [ebp - 0x494], 0
je 0x10006eda
cmp dword [ebp - 0xc20], 0
jne 0x10006f20
push edi
push edi
add esp, 4
add edi, 0xcc3f
or edi, 0x4d5
pop edi
push esi
xor esi, 0x1682b
xor esi, 0x97c6
call 0x10006f08
add byte [edi + 0x4e], al
inc esi
xor esi, dword [0x44504e43]
add esp, 4
pop esi
mov edx, dword [ebp - 0x8d4]
mov dword [ebp - 0x1f78], edx
push 0
call dword [ebp - 0x1f78]
mov dword [ebp - 0x27a4], 0xa
push eax
add eax, 0x16977
add eax, 0x14998
sub eax, 0xb35f
add eax, 0x3844
pop eax
push ecx
push edi
add esp, 4
and ecx, 0x884b
xor ecx, 0x6e44
xor ecx, 0x122ff
pop ecx
mov eax, dword [ebp - 0x494]
invalid
dec dword [edx - 0x7277f5b8]
cmpsd dword [esi], dword es:[edi]
sti
invalid
dec dword [ebx - 0xc1f6b]
jmp [ebx]
xchg ebp, eax
insb byte es:[edi], dx
sti
invalid
dec dword [ecx - 0x19c76b]
inc edi
test dword [eax], eax
int1
invalid
inc dword [eax]
add byte [eax], al
add byte [edi - 0x18], dl
or al, byte [eax]
add byte [eax], al
add byte [0x3b40424c], bh
dec ecx
cmp dword [edi], edi
dec ecx
add esp, 4
add edi, 0x1519
pop edi
push esi
sub esi, 0xc116
call 0x10006fb5
add byte [ecx], bh
inc esi
Function at 0x10006f97
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
xor edi, 0x4dd1
and edi, 0x3c25
pop edi
push edi
push edx
add esp, 4
sub edi, 0x1032b
sub edi, 0x29bc
or edi, 0x5b32
pop edi
cmp dword [ebp - 0x494], 0
je 0x10006eda
cmp dword [ebp - 0xc20], 0
jne 0x10006f20
push edi
push edi
add esp, 4
add edi, 0xcc3f
or edi, 0x4d5
pop edi
push esi
xor esi, 0x1682b
xor esi, 0x97c6
call 0x10006f08
add byte [edi + 0x4e], al
inc esi
xor esi, dword [0x44504e43]
add esp, 4
pop esi
mov edx, dword [ebp - 0x8d4]
mov dword [ebp - 0x1f78], edx
push 0
call dword [ebp - 0x1f78]
mov dword [ebp - 0x27a4], 0xa
push eax
add eax, 0x16977
add eax, 0x14998
sub eax, 0xb35f
add eax, 0x3844
pop eax
push ecx
push edi
add esp, 4
and ecx, 0x884b
xor ecx, 0x6e44
xor ecx, 0x122ff
pop ecx
mov eax, dword [ebp - 0x494]
invalid
dec dword [edx - 0x7277f5b8]
cmpsd dword [esi], dword es:[edi]
sti
invalid
dec dword [ebx - 0xc1f6b]
jmp [ebx]
xchg ebp, eax
insb byte es:[edi], dx
sti
invalid
dec dword [ecx - 0x19c76b]
inc edi
test dword [eax], eax
int1
invalid
inc dword [eax]
add byte [eax], al
add byte [edi - 0x18], dl
or al, byte [eax]
add byte [eax], al
add byte [0x3b40424c], bh
dec ecx
cmp dword [edi], edi
dec ecx
add esp, 4
add edi, 0x1519
pop edi
push esi
sub esi, 0xc116
call 0x10006fb5
add byte [ecx], bh
inc esi

Function at 0x10006fb0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
xor eax, 0x33453a44
add esp, 4
pop esi
mov byte [ebp - 0xb74], 0x56
mov byte [ebp - 0xb73], 0x69
mov byte [ebp - 0xb72], 0x72
mov byte [ebp - 0xb71], 0x74
mov byte [ebp - 0xb70], 0x75
mov byte [ebp - 0xb6f], 0x61
invalid
jmp dword [ecx - 0x3a]
test dword [edx + 0x6cfffff4], edx
mov byte [ebp - 0xb6d], 0x50
mov byte [ebp - 0xb6c], 0x72
mov byte [ebp - 0xb6b], 0x6f
mov byte [ebp - 0xb6a], 0x74
mov byte [ebp - 0xb69], 0x65
mov byte [ebp - 0xb68], 0x63
mov byte [ebp - 0xb67], 0x74
mov byte [ebp - 0xb66], 0
push edi
push edx
add esp, 4
add edi, 0x1854d
and edi, 0x9063
call 0x10007041
add byte [ebp + 0x4f], al
inc ebp
dec edi
push eax
aaa
inc esp
aas
add esp, 4
call 0x10007050
add byte [edx], bh
dec esp
cmp eax, 0x834b393e
les eax, [edi + ebx*2]
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1f7c], eax
mov ecx, dword [ebp - 0x1f7c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1f80], edx
mov eax, dword [ebp - 0x1f80]
test dword [eax - 0x76000020], eax
test dword [eax + 0x57ffffe6], edi
push esi
add esp, 4
or edi, 0x3db1
call 0x10007095
add byte [edi], bh
cmp eax, 0x3d3a4942
inc esi
cmp al, 0x4c
add esp, 4
pop edi
push eax
call 0x100070a9
add byte [ecx + 0x40], cl
dec ebp
dec edi
xor al, 0x3c
inc ebp
xor ecx, dword [ebx - 0x7d]
les eax, [eax + ebx*2]
cmp dword [ebp - 0x1948], 0
jne 0x100070c5
mov dword [ebp - 0x378], 0
jmp 0x10007381
mov ecx, dword [ebp - 0x1948]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xedc], eax
push edx
call 0x100070e4
add byte [esi], dh
dec ebx
dec ebp
inc edi
inc esp
push eax
add esp, 4
pop edx
push ecx
push ebx
add esp, 4
invalid
invalid
stosd dword es:[edi], eax
Function at 0x10006fb5
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
xor eax, 0x33453a44
add esp, 4
pop esi
mov byte [ebp - 0xb74], 0x56
mov byte [ebp - 0xb73], 0x69
mov byte [ebp - 0xb72], 0x72
mov byte [ebp - 0xb71], 0x74
mov byte [ebp - 0xb70], 0x75
mov byte [ebp - 0xb6f], 0x61
invalid
jmp dword [ecx - 0x3a]
test dword [edx + 0x6cfffff4], edx
mov byte [ebp - 0xb6d], 0x50
mov byte [ebp - 0xb6c], 0x72
mov byte [ebp - 0xb6b], 0x6f
mov byte [ebp - 0xb6a], 0x74
mov byte [ebp - 0xb69], 0x65
mov byte [ebp - 0xb68], 0x63
mov byte [ebp - 0xb67], 0x74
mov byte [ebp - 0xb66], 0
push edi
push edx
add esp, 4
add edi, 0x1854d
and edi, 0x9063
call 0x10007041
add byte [ebp + 0x4f], al
inc ebp
dec edi
push eax
aaa
inc esp
aas
add esp, 4
call 0x10007050
add byte [edx], bh
dec esp
cmp eax, 0x834b393e
les eax, [edi + ebx*2]
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1f7c], eax
mov ecx, dword [ebp - 0x1f7c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1f80], edx
mov eax, dword [ebp - 0x1f80]
test dword [eax - 0x76000020], eax
test dword [eax + 0x57ffffe6], edi
push esi
add esp, 4
or edi, 0x3db1
call 0x10007095
add byte [edi], bh
cmp eax, 0x3d3a4942
inc esi
cmp al, 0x4c
add esp, 4
pop edi
push eax
call 0x100070a9
add byte [ecx + 0x40], cl
dec ebp
dec edi
xor al, 0x3c
inc ebp
xor ecx, dword [ebx - 0x7d]
les eax, [eax + ebx*2]
cmp dword [ebp - 0x1948], 0
jne 0x100070c5
mov dword [ebp - 0x378], 0
jmp 0x10007381
mov ecx, dword [ebp - 0x1948]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xedc], eax
push edx
call 0x100070e4
add byte [esi], dh
dec ebx
dec ebp
inc edi
inc esp
push eax
add esp, 4
pop edx
push ecx
push ebx
add esp, 4
invalid
invalid
stosd dword es:[edi], eax
Function at 0x10007041
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
xor eax, 0x33453a44
add esp, 4
pop esi
mov byte [ebp - 0xb74], 0x56
mov byte [ebp - 0xb73], 0x69
mov byte [ebp - 0xb72], 0x72
mov byte [ebp - 0xb71], 0x74
mov byte [ebp - 0xb70], 0x75
mov byte [ebp - 0xb6f], 0x61
invalid
jmp dword [ecx - 0x3a]
test dword [edx + 0x6cfffff4], edx
mov byte [ebp - 0xb6d], 0x50
mov byte [ebp - 0xb6c], 0x72
mov byte [ebp - 0xb6b], 0x6f
mov byte [ebp - 0xb6a], 0x74
mov byte [ebp - 0xb69], 0x65
mov byte [ebp - 0xb68], 0x63
mov byte [ebp - 0xb67], 0x74
mov byte [ebp - 0xb66], 0
push edi
push edx
add esp, 4
add edi, 0x1854d
and edi, 0x9063
call 0x10007041
add byte [ebp + 0x4f], al
inc ebp
dec edi
push eax
aaa
inc esp
aas
add esp, 4
call 0x10007050
add byte [edx], bh
dec esp
cmp eax, 0x834b393e
les eax, [edi + ebx*2]
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1f7c], eax
mov ecx, dword [ebp - 0x1f7c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1f80], edx
mov eax, dword [ebp - 0x1f80]
test dword [eax - 0x76000020], eax
test dword [eax + 0x57ffffe6], edi
push esi
add esp, 4
or edi, 0x3db1
call 0x10007095
add byte [edi], bh
cmp eax, 0x3d3a4942
inc esi
cmp al, 0x4c
add esp, 4
pop edi
push eax
call 0x100070a9
add byte [ecx + 0x40], cl
dec ebp
dec edi
xor al, 0x3c
inc ebp
xor ecx, dword [ebx - 0x7d]
les eax, [eax + ebx*2]
cmp dword [ebp - 0x1948], 0
jne 0x100070c5
mov dword [ebp - 0x378], 0
jmp 0x10007381
mov ecx, dword [ebp - 0x1948]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xedc], eax
push edx
call 0x100070e4
add byte [esi], dh
dec ebx
dec ebp
inc edi
inc esp
push eax
add esp, 4
pop edx
push ecx
push ebx
add esp, 4
invalid
invalid
stosd dword es:[edi], eax
Function at 0x10007050
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
xor eax, 0x33453a44
add esp, 4
pop esi
mov byte [ebp - 0xb74], 0x56
mov byte [ebp - 0xb73], 0x69
mov byte [ebp - 0xb72], 0x72
mov byte [ebp - 0xb71], 0x74
mov byte [ebp - 0xb70], 0x75
mov byte [ebp - 0xb6f], 0x61
invalid
jmp dword [ecx - 0x3a]
test dword [edx + 0x6cfffff4], edx
mov byte [ebp - 0xb6d], 0x50
mov byte [ebp - 0xb6c], 0x72
mov byte [ebp - 0xb6b], 0x6f
mov byte [ebp - 0xb6a], 0x74
mov byte [ebp - 0xb69], 0x65
mov byte [ebp - 0xb68], 0x63
mov byte [ebp - 0xb67], 0x74
mov byte [ebp - 0xb66], 0
push edi
push edx
add esp, 4
add edi, 0x1854d
and edi, 0x9063
call 0x10007041
add byte [ebp + 0x4f], al
inc ebp
dec edi
push eax
aaa
inc esp
aas
add esp, 4
call 0x10007050
add byte [edx], bh
dec esp
cmp eax, 0x834b393e
les eax, [edi + ebx*2]
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1f7c], eax
mov ecx, dword [ebp - 0x1f7c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1f80], edx
mov eax, dword [ebp - 0x1f80]
test dword [eax - 0x76000020], eax
test dword [eax + 0x57ffffe6], edi
push esi
add esp, 4
or edi, 0x3db1
call 0x10007095
add byte [edi], bh
cmp eax, 0x3d3a4942
inc esi
cmp al, 0x4c
add esp, 4
pop edi
push eax
call 0x100070a9
add byte [ecx + 0x40], cl
dec ebp
dec edi
xor al, 0x3c
inc ebp
xor ecx, dword [ebx - 0x7d]
les eax, [eax + ebx*2]
cmp dword [ebp - 0x1948], 0
jne 0x100070c5
mov dword [ebp - 0x378], 0
jmp 0x10007381
mov ecx, dword [ebp - 0x1948]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xedc], eax
push edx
call 0x100070e4
add byte [esi], dh
dec ebx
dec ebp
inc edi
inc esp
push eax
add esp, 4
pop edx
push ecx
push ebx
add esp, 4
invalid
invalid
stosd dword es:[edi], eax

Function at 0x10007070
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
test dword [eax - 0x76000020], eax
test dword [eax + 0x57ffffe6], edi
Function at 0x10007095
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
xor eax, 0x33453a44
add esp, 4
pop esi
mov byte [ebp - 0xb74], 0x56
mov byte [ebp - 0xb73], 0x69
mov byte [ebp - 0xb72], 0x72
mov byte [ebp - 0xb71], 0x74
mov byte [ebp - 0xb70], 0x75
mov byte [ebp - 0xb6f], 0x61
invalid
jmp dword [ecx - 0x3a]
test dword [edx + 0x6cfffff4], edx
mov byte [ebp - 0xb6d], 0x50
mov byte [ebp - 0xb6c], 0x72
mov byte [ebp - 0xb6b], 0x6f
mov byte [ebp - 0xb6a], 0x74
mov byte [ebp - 0xb69], 0x65
mov byte [ebp - 0xb68], 0x63
mov byte [ebp - 0xb67], 0x74
mov byte [ebp - 0xb66], 0
push edi
push edx
add esp, 4
add edi, 0x1854d
and edi, 0x9063
call 0x10007041
add byte [ebp + 0x4f], al
inc ebp
dec edi
push eax
aaa
inc esp
aas
add esp, 4
call 0x10007050
add byte [edx], bh
dec esp
cmp eax, 0x834b393e
les eax, [edi + ebx*2]
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1f7c], eax
mov ecx, dword [ebp - 0x1f7c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1f80], edx
mov eax, dword [ebp - 0x1f80]
test dword [eax - 0x76000020], eax
test dword [eax + 0x57ffffe6], edi
push esi
add esp, 4
or edi, 0x3db1
call 0x10007095
add byte [edi], bh
cmp eax, 0x3d3a4942
inc esi
cmp al, 0x4c
add esp, 4
pop edi
push eax
call 0x100070a9
add byte [ecx + 0x40], cl
dec ebp
dec edi
xor al, 0x3c
inc ebp
xor ecx, dword [ebx - 0x7d]
les eax, [eax + ebx*2]
cmp dword [ebp - 0x1948], 0
jne 0x100070c5
mov dword [ebp - 0x378], 0
jmp 0x10007381
mov ecx, dword [ebp - 0x1948]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xedc], eax
push edx
call 0x100070e4
add byte [esi], dh
dec ebx
dec ebp
inc edi
inc esp
push eax
add esp, 4
pop edx
push ecx
push ebx
add esp, 4
invalid
invalid
stosd dword es:[edi], eax
Function at 0x100070a9
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
xor eax, 0x33453a44
add esp, 4
pop esi
mov byte [ebp - 0xb74], 0x56
mov byte [ebp - 0xb73], 0x69
mov byte [ebp - 0xb72], 0x72
mov byte [ebp - 0xb71], 0x74
mov byte [ebp - 0xb70], 0x75
mov byte [ebp - 0xb6f], 0x61
invalid
jmp dword [ecx - 0x3a]
test dword [edx + 0x6cfffff4], edx
mov byte [ebp - 0xb6d], 0x50
mov byte [ebp - 0xb6c], 0x72
mov byte [ebp - 0xb6b], 0x6f
mov byte [ebp - 0xb6a], 0x74
mov byte [ebp - 0xb69], 0x65
mov byte [ebp - 0xb68], 0x63
mov byte [ebp - 0xb67], 0x74
mov byte [ebp - 0xb66], 0
push edi
push edx
add esp, 4
add edi, 0x1854d
and edi, 0x9063
call 0x10007041
add byte [ebp + 0x4f], al
inc ebp
dec edi
push eax
aaa
inc esp
aas
add esp, 4
call 0x10007050
add byte [edx], bh
dec esp
cmp eax, 0x834b393e
les eax, [edi + ebx*2]
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1f7c], eax
mov ecx, dword [ebp - 0x1f7c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1f80], edx
mov eax, dword [ebp - 0x1f80]
test dword [eax - 0x76000020], eax
test dword [eax + 0x57ffffe6], edi
push esi
add esp, 4
or edi, 0x3db1
call 0x10007095
add byte [edi], bh
cmp eax, 0x3d3a4942
inc esi
cmp al, 0x4c
add esp, 4
pop edi
push eax
call 0x100070a9
add byte [ecx + 0x40], cl
dec ebp
dec edi
xor al, 0x3c
inc ebp
xor ecx, dword [ebx - 0x7d]
les eax, [eax + ebx*2]
cmp dword [ebp - 0x1948], 0
jne 0x100070c5
mov dword [ebp - 0x378], 0
jmp 0x10007381
mov ecx, dword [ebp - 0x1948]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xedc], eax
push edx
call 0x100070e4
add byte [esi], dh
dec ebx
dec ebp
inc edi
inc esp
push eax
add esp, 4
pop edx
push ecx
push ebx
add esp, 4
invalid
invalid
stosd dword es:[edi], eax