joyce8/EMBER2024-capa huggingface dataset:
Function at 0x409ece
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edi
add esp, 4
jmp 0x409d84
xor edi, 0x48a6
or edi, 0x20e6
pop edi
cmp dword [ebp - 0xc98], 0
jne 0x409da9
mov dword [ebp - 0x31c], 0
jmp 0x40a009
mov eax, dword [ebp - 0xc98]
mov dword [ebp - 0x504], eax
push esi
sub esi, 0x28bf
xor esi, 0xb8f0
xor esi, 0x641b
and esi, 0x1152e
pop esi
push esi
push edx
add esp, 4
and esi, 0x9db8
pop esi
push edx
push edi
add esp, 4
and edx, 0x4b88
pop edx
lea ecx, [ebp - 0x173c]
mov dword [ebp - 0xc94], ecx
mov edx, dword [ebp - 0x504]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc90], eax
xor ecx, ecx
mov word [ebp - 0x210], cx
xor edx, edx
mov word [ebp - 0x10c], dx
push eax
push ebx
add esp, 4
jmp 0x409e21
sub eax, 0x13595
sub eax, 0x35d6
xor eax, 0x146c2
pop eax
push edx
push ebx
add esp, 4
and edx, 0xe3d4
sub edx, 0xacdc
pop edx
mov eax, dword [ebp - 0xc90]
mov cx, word [eax]
mov word [ebp - 0x1032], cx
mov edx, dword [ebp - 0xc90]
add edx, 2
mov dword [ebp - 0xc90], edx
mov ax, word [ebp - 0x1032]
mov word [ebp - 0x210], ax
mov ecx, dword [ebp - 0xc94]
mov dx, word [ecx]
mov word [ebp - 0x1034], dx
mov eax, dword [ebp - 0xc94]
add eax, 2
mov dword [ebp - 0xc94], eax
mov cx, word [ebp - 0x1034]
mov word [ebp - 0x10c], cx
push edx
add edx, 0xb5f7
and edx, 0xdb29
pop edx
push eax
add eax, 0x10beb
and eax, 0x8617
jmp 0x409ec2
call 0x409ece
add byte [esi + 0x39], cl
dec edi
inc ebp
dec edi
cmp al, 0x83
les eax, [eax + ebx*2]
movzx edx, word [ebp - 0x10c]
test edx, edx
jne 0x409ef5
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
sub eax, ecx
mov dword [ebp - 0x15e4], eax
jmp 0x409f58
invalid
mov bh, 0x95

Function at 0x409f79
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edx
push esi
xor esi, 0x12e34
and esi, 0xcdd8
pop esi
push eax
xor eax, 0x161f6
pop eax
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x31c], eax
jmp 0x40a009
push esi
xor esi, 0x11ac4
pop esi
push edx
push ecx
add esp, 4
and edx, 0x253a
or edx, 0x13edf
call 0x40a031
add byte [eax + 0x3a], al
inc eax
cmp dh, byte [0x4e324938]
inc ebp
dec ebx
add esp, 4
xor edx, 0x18621
pop edx
cmp dword [ebp - 0x31c], 0
jne 0x40a954
mov edx, 0x6b
mov word [ebp - 0x1758], dx
mov eax, 0x65
mov word [ebp - 0x1756], ax
mov ecx, 0x72
mov word [ebp - 0x1754], cx
mov edx, 0x6e
mov word [ebp - 0x1752], dx
mov eax, 0x65
mov word [ebp - 0x1750], ax
invalid
insb byte es:[edi], dx
add byte [eax], al
Function at 0x40a031
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edx
push esi
xor esi, 0x12e34
and esi, 0xcdd8
pop esi
push eax
xor eax, 0x161f6
pop eax
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x31c], eax
jmp 0x40a009
push esi
xor esi, 0x11ac4
pop esi
push edx
push ecx
add esp, 4
and edx, 0x253a
or edx, 0x13edf
call 0x40a031
add byte [eax + 0x3a], al
inc eax
cmp dh, byte [0x4e324938]
inc ebp
dec ebx
add esp, 4
xor edx, 0x18621
pop edx
cmp dword [ebp - 0x31c], 0
jne 0x40a954
mov edx, 0x6b
mov word [ebp - 0x1758], dx
mov eax, 0x65
mov word [ebp - 0x1756], ax
mov ecx, 0x72
mov word [ebp - 0x1754], cx
mov edx, 0x6e
mov word [ebp - 0x1752], dx
mov eax, 0x65
mov word [ebp - 0x1750], ax
invalid
insb byte es:[edi], dx
add byte [eax], al

Function at 0x40a1ec
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
test dword [ebx + esi*8 - 1], ebx
call dword [edi - 0x15]
add eax, 0x38354240
dec ebp
jmp 0x40a200
pop edi
push esi
call fcn.0040a211
add byte [ebp + 0x39], cl
xor eax, 0x4747384c
dec esp

Function at 0x40a211
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
and esi, 0x3e4d
pop esi
push ebx
or ebx, 0x12680
pop ebx
cmp dword [ebp - 0xca4], 0
inc dword [eax]
jne 0x40a23b
mov dword [ebp - 0x750], 0
jmp 0x40a49b
mov ecx, dword [ebp - 0xca4]
mov dword [ebp - 0x508], ecx
Function at 0x40a268
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push esi
or esi, 0xdbef
and esi, 0xb054
pop esi
push edi
push esi
add esp, 4
les eax, [eax + ebp*8]
or dword [eax], eax
add byte [eax], al
add byte [eax*2 + 0x404d4748], dh
cmp eax, 0x4c48345
jmp 0x40a272
add edi, 0x15da0
pop edi
lea edx, [ebp - 0x1758]
mov dword [ebp - 0xca0], edx
invalid
test eax, edi
push edi
jmp 0x40a2ad
xor edi, 0xc7f9
pop edi
push eax
jmp 0x40a2ba
pop eax
push eax
xor eax, 0x17017
sub eax, 0x7578
sub eax, 0x4894
add byte [eax], al
jmp 0x40a2d7
pop eax
mov ecx, dword [ebp - 0xc9c]
mov dx, word [ecx]
mov word [ebp - 0x1036], dx
mov eax, dword [ebp - 0xc9c]
add eax, 2
mov dword [ebp - 0xc9c], eax
mov cx, word [ebp - 0x1036]
mov word [ebp - 0x214], cx
mov edx, dword [ebp - 0xca0]
mov ax, word [edx]
mov word [ebp - 0x1038], ax
mov ecx, dword [ebp - 0xca0]
add ecx, 2
mov dword [ebp - 0xca0], ecx
mov dx, word [ebp - 0x1038]
mov word [ebp - 0x110], dx
push eax
push edx
add esp, 4
add eax, 0x14a08
xor eax, 0x90f6
and eax, 0x2920
pop eax
push edi
and edi, 0x18299
add byte [ecx + 0x13c83c7], al
add byte [ecx + 0xaf99c7], al
add byte [ecx + 0x1298be7], al
add byte [edi + 0xf], bl
mov bh, 0x85
invalid
invalid
invalid
invalid
test eax, eax
jne 0x40a387
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
sub ecx, edx
mov dword [ebp - 0x15f0], ecx
jmp 0x40a3ea
movzx eax, word [ebp - 0x214]
movzx ecx, word [ebp - 0x110]
cmp eax, ecx
je 0x40a2a6
movzx edx, word [ebp - 0x214]
cmp dword [ebp - 0x15f0], 0
jne 0x40a433
push edx
add edx, 0x9969
or edx, 0x10c42
call 0x40a40e
add byte [ebp + 0x40], al
cmp dword [ebp + 0x3b], ecx
xor al, 0x4b
inc ebp
add esp, 4
pop edx
push ecx
call 0x40a421
add byte [edi + 0x4d], cl
dec eax
inc ebp
inc ebx
inc edx
dec ecx
add esp, 4
pop ecx
mov ecx, dword [ebp - 0x508]
mov dword [ebp - 0x750], ecx
jmp 0x40a49b
push esi
and esi, 0xbc02
add esi, 0x16c2
and esi, 0x12302
call 0x40a455
add byte [0x384a4c36], bh
inc ecx
dec esi
inc ebp
inc eax
add esp, 4
pop esi
push ebx
push edi
add esp, 4
xor ebx, 0xe318
pop ebx
mov edx, dword [ebp - 0x508]
mov eax, dword [edx]
invalid
test eax, edi
Function at 0x40a2bc
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push esi
or esi, 0xdbef
and esi, 0xb054
pop esi
push edi
push esi
add esp, 4
les eax, [eax + ebp*8]
or dword [eax], eax
add byte [eax], al
add byte [eax*2 + 0x404d4748], dh
cmp eax, 0x4c48345
jmp 0x40a272
add edi, 0x15da0
pop edi
lea edx, [ebp - 0x1758]
mov dword [ebp - 0xca0], edx
invalid
test eax, edi
push edi
jmp 0x40a2ad
xor edi, 0xc7f9
pop edi
push eax
jmp 0x40a2ba
pop eax
push eax
xor eax, 0x17017
sub eax, 0x7578
sub eax, 0x4894
add byte [eax], al
jmp 0x40a2d7
pop eax
mov ecx, dword [ebp - 0xc9c]
mov dx, word [ecx]
mov word [ebp - 0x1036], dx
mov eax, dword [ebp - 0xc9c]
add eax, 2
mov dword [ebp - 0xc9c], eax
mov cx, word [ebp - 0x1036]
mov word [ebp - 0x214], cx
mov edx, dword [ebp - 0xca0]
mov ax, word [edx]
mov word [ebp - 0x1038], ax
mov ecx, dword [ebp - 0xca0]
add ecx, 2
mov dword [ebp - 0xca0], ecx
mov dx, word [ebp - 0x1038]
mov word [ebp - 0x110], dx
push eax
push edx
add esp, 4
add eax, 0x14a08
xor eax, 0x90f6
and eax, 0x2920
pop eax
push edi
and edi, 0x18299
add byte [ecx + 0x13c83c7], al
add byte [ecx + 0xaf99c7], al
add byte [ecx + 0x1298be7], al
add byte [edi + 0xf], bl
mov bh, 0x85
invalid
invalid
invalid
invalid
test eax, eax
jne 0x40a387
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
sub ecx, edx
mov dword [ebp - 0x15f0], ecx
jmp 0x40a3ea
movzx eax, word [ebp - 0x214]
movzx ecx, word [ebp - 0x110]
cmp eax, ecx
je 0x40a2a6
movzx edx, word [ebp - 0x214]
cmp dword [ebp - 0x15f0], 0
jne 0x40a433
push edx
add edx, 0x9969
or edx, 0x10c42
call 0x40a40e
add byte [ebp + 0x40], al
cmp dword [ebp + 0x3b], ecx
xor al, 0x4b
inc ebp
add esp, 4
pop edx
push ecx
call 0x40a421
add byte [edi + 0x4d], cl
dec eax
inc ebp
inc ebx
inc edx
dec ecx
add esp, 4
pop ecx
mov ecx, dword [ebp - 0x508]
mov dword [ebp - 0x750], ecx
jmp 0x40a49b
push esi
and esi, 0xbc02
add esi, 0x16c2
and esi, 0x12302
call 0x40a455
add byte [0x384a4c36], bh
inc ecx
dec esi
inc ebp
inc eax
add esp, 4
pop esi
push ebx
push edi
add esp, 4
xor ebx, 0xe318
pop ebx
mov edx, dword [ebp - 0x508]
mov eax, dword [edx]
invalid
test eax, edi

Function at 0x40a3a4
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
xor edx, 0x20
movzx eax, word [ebp - 0x110]
cmp edx, eax
je 0x40a2a6
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
cmp ecx, edx
jge 0x40a3d4
mov dword [ebp - 0x15ec], 0xffffffff
jmp 0x40a3de
mov dword [ebp - 0x15ec], 1
mov eax, dword [ebp - 0x15ec]
mov dword [ebp - 0x15f0], eax
Function at 0x40a40e
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push esi
or esi, 0xdbef
and esi, 0xb054
pop esi
push edi
push esi
add esp, 4
les eax, [eax + ebp*8]
or dword [eax], eax
add byte [eax], al
add byte [eax*2 + 0x404d4748], dh
cmp eax, 0x4c48345
jmp 0x40a272
add edi, 0x15da0
pop edi
lea edx, [ebp - 0x1758]
mov dword [ebp - 0xca0], edx
invalid
test eax, edi
push edi
jmp 0x40a2ad
xor edi, 0xc7f9
pop edi
push eax
jmp 0x40a2ba
pop eax
push eax
xor eax, 0x17017
sub eax, 0x7578
sub eax, 0x4894
add byte [eax], al
jmp 0x40a2d7
pop eax
mov ecx, dword [ebp - 0xc9c]
mov dx, word [ecx]
mov word [ebp - 0x1036], dx
mov eax, dword [ebp - 0xc9c]
add eax, 2
mov dword [ebp - 0xc9c], eax
mov cx, word [ebp - 0x1036]
mov word [ebp - 0x214], cx
mov edx, dword [ebp - 0xca0]
mov ax, word [edx]
mov word [ebp - 0x1038], ax
mov ecx, dword [ebp - 0xca0]
add ecx, 2
mov dword [ebp - 0xca0], ecx
mov dx, word [ebp - 0x1038]
mov word [ebp - 0x110], dx
push eax
push edx
add esp, 4
add eax, 0x14a08
xor eax, 0x90f6
and eax, 0x2920
pop eax
push edi
and edi, 0x18299
add byte [ecx + 0x13c83c7], al
add byte [ecx + 0xaf99c7], al
add byte [ecx + 0x1298be7], al
add byte [edi + 0xf], bl
mov bh, 0x85
invalid
invalid
invalid
invalid
test eax, eax
jne 0x40a387
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
sub ecx, edx
mov dword [ebp - 0x15f0], ecx
jmp 0x40a3ea
movzx eax, word [ebp - 0x214]
movzx ecx, word [ebp - 0x110]
cmp eax, ecx
je 0x40a2a6
movzx edx, word [ebp - 0x214]
cmp dword [ebp - 0x15f0], 0
jne 0x40a433
push edx
add edx, 0x9969
or edx, 0x10c42
call 0x40a40e
add byte [ebp + 0x40], al
cmp dword [ebp + 0x3b], ecx
xor al, 0x4b
inc ebp
add esp, 4
pop edx
push ecx
call 0x40a421
add byte [edi + 0x4d], cl
dec eax
inc ebp
inc ebx
inc edx
dec ecx
add esp, 4
pop ecx
mov ecx, dword [ebp - 0x508]
mov dword [ebp - 0x750], ecx
jmp 0x40a49b
push esi
and esi, 0xbc02
add esi, 0x16c2
and esi, 0x12302
call 0x40a455
add byte [0x384a4c36], bh
inc ecx
dec esi
inc ebp
inc eax
add esp, 4
pop esi
push ebx
push edi
add esp, 4
xor ebx, 0xe318
pop ebx
mov edx, dword [ebp - 0x508]
mov eax, dword [edx]
invalid
test eax, edi
Function at 0x40a421
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push esi
or esi, 0xdbef
and esi, 0xb054
pop esi
push edi
push esi
add esp, 4
les eax, [eax + ebp*8]
or dword [eax], eax
add byte [eax], al
add byte [eax*2 + 0x404d4748], dh
cmp eax, 0x4c48345
jmp 0x40a272
add edi, 0x15da0
pop edi
lea edx, [ebp - 0x1758]
mov dword [ebp - 0xca0], edx
invalid
test eax, edi
push edi
jmp 0x40a2ad
xor edi, 0xc7f9
pop edi
push eax
jmp 0x40a2ba
pop eax
push eax
xor eax, 0x17017
sub eax, 0x7578
sub eax, 0x4894
add byte [eax], al
jmp 0x40a2d7
pop eax
mov ecx, dword [ebp - 0xc9c]
mov dx, word [ecx]
mov word [ebp - 0x1036], dx
mov eax, dword [ebp - 0xc9c]
add eax, 2
mov dword [ebp - 0xc9c], eax
mov cx, word [ebp - 0x1036]
mov word [ebp - 0x214], cx
mov edx, dword [ebp - 0xca0]
mov ax, word [edx]
mov word [ebp - 0x1038], ax
mov ecx, dword [ebp - 0xca0]
add ecx, 2
mov dword [ebp - 0xca0], ecx
mov dx, word [ebp - 0x1038]
mov word [ebp - 0x110], dx
push eax
push edx
add esp, 4
add eax, 0x14a08
xor eax, 0x90f6
and eax, 0x2920
pop eax
push edi
and edi, 0x18299
add byte [ecx + 0x13c83c7], al
add byte [ecx + 0xaf99c7], al
add byte [ecx + 0x1298be7], al
add byte [edi + 0xf], bl
mov bh, 0x85
invalid
invalid
invalid
invalid
test eax, eax
jne 0x40a387
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
sub ecx, edx
mov dword [ebp - 0x15f0], ecx
jmp 0x40a3ea
movzx eax, word [ebp - 0x214]
movzx ecx, word [ebp - 0x110]
cmp eax, ecx
je 0x40a2a6
movzx edx, word [ebp - 0x214]
cmp dword [ebp - 0x15f0], 0
jne 0x40a433
push edx
add edx, 0x9969
or edx, 0x10c42
call 0x40a40e
add byte [ebp + 0x40], al
cmp dword [ebp + 0x3b], ecx
xor al, 0x4b
inc ebp
add esp, 4
pop edx
push ecx
call 0x40a421
add byte [edi + 0x4d], cl
dec eax
inc ebp
inc ebx
inc edx
dec ecx
add esp, 4
pop ecx
mov ecx, dword [ebp - 0x508]
mov dword [ebp - 0x750], ecx
jmp 0x40a49b
push esi
and esi, 0xbc02
add esi, 0x16c2
and esi, 0x12302
call 0x40a455
add byte [0x384a4c36], bh
inc ecx
dec esi
inc ebp
inc eax
add esp, 4
pop esi
push ebx
push edi
add esp, 4
xor ebx, 0xe318
pop ebx
mov edx, dword [ebp - 0x508]
mov eax, dword [edx]
invalid
test eax, edi
Function at 0x40a455
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push esi
or esi, 0xdbef
and esi, 0xb054
pop esi
push edi
push esi
add esp, 4
les eax, [eax + ebp*8]
or dword [eax], eax
add byte [eax], al
add byte [eax*2 + 0x404d4748], dh
cmp eax, 0x4c48345
jmp 0x40a272
add edi, 0x15da0
pop edi
lea edx, [ebp - 0x1758]
mov dword [ebp - 0xca0], edx
invalid
test eax, edi
push edi
jmp 0x40a2ad
xor edi, 0xc7f9
pop edi
push eax
jmp 0x40a2ba
pop eax
push eax
xor eax, 0x17017
sub eax, 0x7578
sub eax, 0x4894
add byte [eax], al
jmp 0x40a2d7
pop eax
mov ecx, dword [ebp - 0xc9c]
mov dx, word [ecx]
mov word [ebp - 0x1036], dx
mov eax, dword [ebp - 0xc9c]
add eax, 2
mov dword [ebp - 0xc9c], eax
mov cx, word [ebp - 0x1036]
mov word [ebp - 0x214], cx
mov edx, dword [ebp - 0xca0]
mov ax, word [edx]
mov word [ebp - 0x1038], ax
mov ecx, dword [ebp - 0xca0]
add ecx, 2
mov dword [ebp - 0xca0], ecx
mov dx, word [ebp - 0x1038]
mov word [ebp - 0x110], dx
push eax
push edx
add esp, 4
add eax, 0x14a08
xor eax, 0x90f6
and eax, 0x2920
pop eax
push edi
and edi, 0x18299
add byte [ecx + 0x13c83c7], al
add byte [ecx + 0xaf99c7], al
add byte [ecx + 0x1298be7], al
add byte [edi + 0xf], bl
mov bh, 0x85
invalid
invalid
invalid
invalid
test eax, eax
jne 0x40a387
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
sub ecx, edx
mov dword [ebp - 0x15f0], ecx
jmp 0x40a3ea
movzx eax, word [ebp - 0x214]
movzx ecx, word [ebp - 0x110]
cmp eax, ecx
je 0x40a2a6
movzx edx, word [ebp - 0x214]
cmp dword [ebp - 0x15f0], 0
jne 0x40a433
push edx
add edx, 0x9969
or edx, 0x10c42
call 0x40a40e
add byte [ebp + 0x40], al
cmp dword [ebp + 0x3b], ecx
xor al, 0x4b
inc ebp
add esp, 4
pop edx
push ecx
call 0x40a421
add byte [edi + 0x4d], cl
dec eax
inc ebp
inc ebx
inc edx
dec ecx
add esp, 4
pop ecx
mov ecx, dword [ebp - 0x508]
mov dword [ebp - 0x750], ecx
jmp 0x40a49b
push esi
and esi, 0xbc02
add esi, 0x16c2
and esi, 0x12302
call 0x40a455
add byte [0x384a4c36], bh
inc ecx
dec esi
inc ebp
inc eax
add esp, 4
pop esi
push ebx
push edi
add esp, 4
xor ebx, 0xe318
pop ebx
mov edx, dword [ebp - 0x508]
mov eax, dword [edx]
invalid
test eax, edi

Function at 0x40a53d
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
jmp 0x40a548
pop edi
mov eax, dword [ebp - 0x750]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x320], ecx
mov dword [ebp - 0x760], 0
mov edx, dword [ebp - 0x320]
mov dword [ebp - 0x15f4], edx
cmp dword [ebp - 0x15f4], 0
jne 0x40a588
mov eax, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], eax
jmp 0x40a879
mov ecx, dword [ebp - 0x15f4]
mov edx, dword [ebp - 0x320]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x15f8], edx
jne 0x40a5b0
mov eax, dword [ebp - 0x760]
invalid
invalid
invalid

Function at 0x40a61c
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [ebp - 0x754]
mov edx, dword [ebp - 0x320]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x19cc], edx
mov eax, dword [ebp - 0x754]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + 0x1c]
invalid
lea esi, [eax]
invalid
Function at 0x40a6c4
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x758]
add edx, 1
mov dword [ebp - 0x758], edx
mov eax, dword [ebp - 0x754]
mov ecx, dword [ebp - 0x758]
cmp ecx, dword [eax + 0x18]
jae 0x40a86d
mov edx, dword [ebp - 0x758]
mov eax, dword [ebp - 0x19c8]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x75c], ecx
lea esp, [eax + edi*8 - 0x6a740001]
test al, 0xf8
invalid
dec dword [ebx - 0x19cb7b]
dec dword [edi]
mov bh, 0xc
push eax
mov edx, dword [ebp - 0x19d0]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x19d4], eax
mov dword [ebp - 0x198], 0
jmp 0x40a6d1
mov ecx, dword [ebp - 0x198]
add ecx, 1
mov dword [ebp - 0x198], ecx
mov edx, dword [ebp - 0x75c]
add edx, dword [ebp - 0x198]
xchg ebp, eax
push 0xffffffe
mov esi, 0xfc08502
invalid
wait
add byte [eax], al
invalid
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x894]
test edx, edx
je 0x40a783
push edi
push edx
add esp, 4
add edi, 0x10a1b
pop edi
push esi
sub esi, 0x37cf
pop esi
push edi
push eax
add esp, 4
sub edi, 0x404f
jmp 0x40a723
pop edi
push eax
push edi
add esp, 4
sub eax, 0x706a
pop eax
mov eax, dword [ebp - 0x75c]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x894]
cmp ecx, eax
je 0x40a775
mov ecx, dword [ebp - 0x75c]
add ecx, dword [ebp - 0x198]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x198]
movsx ecx, byte [ebp + eax - 0x894]
cmp edx, ecx
jne fcn.0040a77c
pop es
jmp 0x40a6c2
push edx
add esp, 4
add edx, 0x8504
add byte [eax], al
xor edx, 0xd64f
pop edx
push esi
push esi
add esp, 4
jmp 0x40a7a2
xor esi, 0x8cab
or esi, 0x633a
add esi, 0x157e9
pop esi
mov edx, dword [ebp - 0x75c]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x894]
cmp eax, edx
jne 0x40a7e2
mov dword [ebp - 0xca8], 0
jmp 0x40a851
push eax
push eax
add esp, 4
or eax, 0x2139
pop eax
push edx
xor edx, 0x9bc7
xor edx, 0xf30d
or edx, 0x18617
pop edx
push ecx
call fcn.0040a810
add byte [eax + 0x38], cl
aaa
cmp edi, dword [0xc4834839]
add esp, 4
pop ecx
mov eax, dword [ebp - 0x75c]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x894]
or eax, 0x20
cmp ecx, eax
jge 0x40a847
mov dword [ebp - 0xca8], 0xffffffff
jmp 0x40a851
mov dword [ebp - 0xca8], 1
cmp dword [ebp - 0xca8], 0
jne 0x40a868
mov ecx, dword [ebp - 0x19d4]
mov dword [ebp - 0x3f4], ecx
jmp 0x40a879
jmp 0x40a652
mov edx, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], edx
cmp dword [ebp - 0x3f4], 0

Function at 0x40a6d8
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
xchg ebp, eax
push 0xffffffe
mov esi, 0xfc08502
test byte [ebx - 0x75000000], bl
lea ebp, [eax - 2]
invalid
Function at 0x40a784
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x758]
add edx, 1
mov dword [ebp - 0x758], edx
mov eax, dword [ebp - 0x754]
mov ecx, dword [ebp - 0x758]
cmp ecx, dword [eax + 0x18]
jae 0x40a86d
mov edx, dword [ebp - 0x758]
mov eax, dword [ebp - 0x19c8]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x75c], ecx
lea esp, [eax + edi*8 - 0x6a740001]
test al, 0xf8
invalid
dec dword [ebx - 0x19cb7b]
dec dword [edi]
mov bh, 0xc
push eax
mov edx, dword [ebp - 0x19d0]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x19d4], eax
mov dword [ebp - 0x198], 0
jmp 0x40a6d1
mov ecx, dword [ebp - 0x198]
add ecx, 1
mov dword [ebp - 0x198], ecx
mov edx, dword [ebp - 0x75c]
add edx, dword [ebp - 0x198]
xchg ebp, eax
push 0xffffffe
mov esi, 0xfc08502
invalid
wait
add byte [eax], al
invalid
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x894]
test edx, edx
je 0x40a783
push edi
push edx
add esp, 4
add edi, 0x10a1b
pop edi
push esi
sub esi, 0x37cf
pop esi
push edi
push eax
add esp, 4
sub edi, 0x404f
jmp 0x40a723
pop edi
push eax
push edi
add esp, 4
sub eax, 0x706a
pop eax
mov eax, dword [ebp - 0x75c]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x894]
cmp ecx, eax
je 0x40a775
mov ecx, dword [ebp - 0x75c]
add ecx, dword [ebp - 0x198]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x198]
movsx ecx, byte [ebp + eax - 0x894]
cmp edx, ecx
jne fcn.0040a77c
pop es
jmp 0x40a6c2
push edx
add esp, 4
add edx, 0x8504
add byte [eax], al
xor edx, 0xd64f
pop edx
push esi
push esi
add esp, 4
jmp 0x40a7a2
xor esi, 0x8cab
or esi, 0x633a
add esi, 0x157e9
pop esi
mov edx, dword [ebp - 0x75c]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x894]
cmp eax, edx
jne 0x40a7e2
mov dword [ebp - 0xca8], 0
jmp 0x40a851
push eax
push eax
add esp, 4
or eax, 0x2139
pop eax
push edx
xor edx, 0x9bc7
xor edx, 0xf30d
or edx, 0x18617
pop edx
push ecx
call fcn.0040a810
add byte [eax + 0x38], cl
aaa
cmp edi, dword [0xc4834839]
add esp, 4
pop ecx
mov eax, dword [ebp - 0x75c]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x894]
or eax, 0x20
cmp ecx, eax
jge 0x40a847
mov dword [ebp - 0xca8], 0xffffffff
jmp 0x40a851
mov dword [ebp - 0xca8], 1
cmp dword [ebp - 0xca8], 0
jne 0x40a868
mov ecx, dword [ebp - 0x19d4]
mov dword [ebp - 0x3f4], ecx
jmp 0x40a879
jmp 0x40a652
mov edx, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], edx
cmp dword [ebp - 0x3f4], 0
Function at 0x40a810
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x758]
add edx, 1
mov dword [ebp - 0x758], edx
mov eax, dword [ebp - 0x754]
mov ecx, dword [ebp - 0x758]
cmp ecx, dword [eax + 0x18]
jae 0x40a86d
mov edx, dword [ebp - 0x758]
mov eax, dword [ebp - 0x19c8]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x75c], ecx
lea esp, [eax + edi*8 - 0x6a740001]
test al, 0xf8
invalid
dec dword [ebx - 0x19cb7b]
dec dword [edi]
mov bh, 0xc
push eax
mov edx, dword [ebp - 0x19d0]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x19d4], eax
mov dword [ebp - 0x198], 0
jmp 0x40a6d1
mov ecx, dword [ebp - 0x198]
add ecx, 1
mov dword [ebp - 0x198], ecx
mov edx, dword [ebp - 0x75c]
add edx, dword [ebp - 0x198]
xchg ebp, eax
push 0xffffffe
mov esi, 0xfc08502
invalid
wait
add byte [eax], al
invalid
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x894]
test edx, edx
je 0x40a783
push edi
push edx
add esp, 4
add edi, 0x10a1b
pop edi
push esi
sub esi, 0x37cf
pop esi
push edi
push eax
add esp, 4
sub edi, 0x404f
jmp 0x40a723
pop edi
push eax
push edi
add esp, 4
sub eax, 0x706a
pop eax
mov eax, dword [ebp - 0x75c]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x894]
cmp ecx, eax
je 0x40a775
mov ecx, dword [ebp - 0x75c]
add ecx, dword [ebp - 0x198]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x198]
movsx ecx, byte [ebp + eax - 0x894]
cmp edx, ecx
jne fcn.0040a77c
pop es
jmp 0x40a6c2
push edx
add esp, 4
add edx, 0x8504
add byte [eax], al
xor edx, 0xd64f
pop edx
push esi
push esi
add esp, 4
jmp 0x40a7a2
xor esi, 0x8cab
or esi, 0x633a
add esi, 0x157e9
pop esi
mov edx, dword [ebp - 0x75c]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x894]
cmp eax, edx
jne 0x40a7e2
mov dword [ebp - 0xca8], 0
jmp 0x40a851
push eax
push eax
add esp, 4
or eax, 0x2139
pop eax
push edx
xor edx, 0x9bc7
xor edx, 0xf30d
or edx, 0x18617
pop edx
push ecx
call fcn.0040a810
add byte [eax + 0x38], cl
aaa
cmp edi, dword [0xc4834839]
add esp, 4
pop ecx
mov eax, dword [ebp - 0x75c]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x894]
or eax, 0x20
cmp ecx, eax
jge 0x40a847
mov dword [ebp - 0xca8], 0xffffffff
jmp 0x40a851
mov dword [ebp - 0xca8], 1
cmp dword [ebp - 0xca8], 0
jne 0x40a868
mov ecx, dword [ebp - 0x19d4]
mov dword [ebp - 0x3f4], ecx
jmp 0x40a879
jmp 0x40a652
mov edx, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], edx
cmp dword [ebp - 0x3f4], 0