joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4c7629
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edx
xor edx, 0x11ad2
pop edx
push eax
push ecx
add esp, 4
and eax, 0xc8c4
add eax, 0x13af0
add eax, 0x18d1
or eax, 0x13d
pop eax
push ecx
push ecx
add esp, 4
sub ecx, 0x15171
pop ecx
mov edx, dword [ebp - 0x230]
mov ax, word [edx]
mov word [ebp - 0x1ca], ax
mov ecx, dword [ebp - 0x230]
add ecx, 2
mov dword [ebp - 0x230], ecx
mov dx, word [ebp - 0x1ca]
mov word [ebp - 0x60], dx
push edi
push edx
add esp, 4
sub edi, 0x30b2
pop edi
push eax
call fcn.004c754a
add byte [esi + 0x4a], al
dec edi
xor eax, 0x4732353f
inc ebx
inc ebp
add esp, 4
call 0x4c755b
add byte [ecx], bh
push eax
dec ebx
inc eax
dec esp
cmp eax, 0xc4834132
add al, 0x58
mov eax, dword [ebp - 0x234]
mov cx, word [eax]
mov word [ebp - 0x1cc], cx
mov edx, dword [ebp - 0x234]
add edx, 2
mov dword [ebp - 0x234], edx
mov ax, word [ebp - 0x1cc]
mov word [ebp - 0x14], ax
push edi
call 0x4c7599
add byte [ebp + 0x35], cl
inc esi
dec esp
xor al, 0x3f
xor eax, 0x4c48342
xor edi, 0x117fc
add edi, 0x8bfc
pop edi
push eax
push edx
add esp, 4
xor eax, 0x13332
xor eax, 0x12831
pop eax
movzx ecx, word [ebp - 0x14]
test ecx, ecx
jne 0x4c75d8
movzx edx, word [ebp - 0x60]
movzx eax, word [ebp - 0x14]
sub edx, eax
mov dword [ebp - 0x2f4], edx
jmp 0x4c765b
movzx ecx, word [ebp - 0x60]
movzx edx, word [ebp - 0x14]
cmp ecx, edx
je 0x4c74d1
movzx eax, word [ebp - 0x60]
xor eax, 0x20
movzx ecx, word [ebp - 0x14]
cmp eax, ecx
je 0x4c74d1
push ecx
call 0x4c760b
add byte [eax + 0x44], al
dec eax
aaa
xor cl, byte [ebp + 0x4a]
inc ebp
add esp, 4
add ecx, 0x1bb9
xor ecx, 0x183c4
call 0x4c7629
add byte [esi], dh
push eax
inc ecx
cmp al, 0x43
inc edx
dec esi
inc edi
xor al, 0x83
les eax, [ecx + ebx*2]
movzx edx, word [ebp - 0x60]
movzx eax, word [ebp - 0x14]
cmp edx, eax
jge 0x4c7645
mov dword [ebp - 0x2f0], 0xffffffff
jmp 0x4c764f
mov dword [ebp - 0x2f0], 1
mov ecx, dword [ebp - 0x2f0]
mov dword [ebp - 0x2f4], ecx
cmp dword [ebp - 0x2f4], 0
jne 0x4c76a4
push eax
add eax, 0x12a74
xor eax, 0xa4e6
jmp 0x4c7677
pop eax
push ebx
push ebx
add esp, 4
add ebx, 0x1390c
sub ebx, 0x16bf3
pop ebx
push eax
push esi
add esp, 4
add eax, 0x13781
pop eax
mov edx, dword [ebp - 0xa0]
mov dword [ebp - 0x70], edx
jmp 0x4c773b
mov eax, dword [ebp - 0xa0]
mov ecx, dword [eax]
mov dword [ebp - 0xa0], ecx
push edi
or edi, 0x992b
sub edi, 0x4c89
add edi, 0x26cb
or edi, 0xd5fb
pop edi
push edi
push ecx
add esp, 4
xor edi, 0x101fa
sub edi, 0x102e4
sub edi, 0x132c6
pop edi
mov edx, dword [ebp - 0xa0]
cmp edx, dword [ebp - 0x238]
je 0x4c7702
mov eax, dword [ebp - 0xa0]
cmp dword [eax + 0x30], 0
jne 0x4c7446
push ebx
push ecx
add esp, 4
sub ebx, 0xa9f3
pop ebx
push edx
or edx, 0x5feb
sub edx, 0x9c3e
xor edx, 0xdbc0
xor edx, 0x6797
pop edx
push esi
push esi
add esp, 4
or esi, 0x15423
pop esi
mov dword [ebp - 0x70], 0
Function at 0x4c7eee
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
or eax, 0x7bf9
pop eax
push edx
sub edx, 0xa7c4
sub edx, 0x806a
pop edx
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x94], ecx
jmp 0x4c8348

Function at 0x4c7f6e
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov cl, byte [ebp + 0x6eb0000]
inc ecx
aaa
dec edi
dec edi
xor esi, dword [ebx]
or edi, 0x173bc
pop edi
push ebx
push ecx
add esp, 4
xor ebx, 0x4232
add ebx, 0x685f
pop ebx
mov edx, dword [ebp - 0x84]
add edx, dword [ebp - 0x30c]
mov dword [ebp - 0xf0], edx
jne 0x4c7fa0
push ecx
call 0x4c7f6e
add byte [ebx + 0x38], cl
dec ebx
inc ebx
dec ebp
inc edi
dec ebp
dec ebp
dec esi
inc eax
add esp, 4
add al, 0xe8
pop es
add byte [eax], al
add byte [eax], al
dec edi
dec eax
inc ecx
push eax
dec edx
add esp, 4
add ecx, 0x11ffc
pop ecx
push eax
or eax, 0xe172
pop eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x94], eax
jmp 0x4c8348
mov ecx, dword [ebp - 0xf0]
mov edx, dword [ebp - 0x84]
add edx, dword [ecx + 0x20]
mov dword [ebp - 0x404], edx
push eax
and eax, 0x1200a
add eax, 0x2466
and al, 0
add byte [ecx + 0x4b8fc8], al
add byte [eax + 0x56], bl
push edi
add esp, 4
add esi, 0xa505
and esi, 0xd062
add esi, 0x1858d
or esi, 0xb418
pop esi
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x84]
add ecx, dword [eax + 0x24]
mov dword [ebp - 0x408], ecx
push edi
push esi
add esp, 4
and edi, 0xd59e
pop edi
push eax
add eax, 0x132ae
xor eax, 0xfad2
xor eax, 0x2650
call 0x4c802a
add byte [ebp + 0x4e], cl
dec edi
cmp al, 0x37
aas
dec ebx
inc eax
inc edx
add esp, 4
pop eax
mov edx, dword [ebp - 0xf0]
mov eax, dword [ebp - 0x84]
add eax, dword [edx + 0x1c]
mov dword [ebp - 0x40c], eax
mov dword [ebp - 0xf4], 0
jmp 0x4c805e
mov edx, dword [ebp - 0xf0]
mov eax, dword [ebp - 0xf4]
cmp eax, dword [edx + 0x18]
jae 0x4c833c
push edx
call 0x4c8083
add byte [esi + ecx*2 + 0x34], cl
dec edi
dec ebp
aaa
dec edi
cmp dword [ebp - 0x7d], ecx
les eax, [ecx + eax*4]
loop 0x4c8084
cmp dword [ecx], eax
add byte [ecx + 0x154d3f2], al
add al, ch
or al, byte [eax]
add byte [eax], al
add byte [edx + edi], dh
dec esi
dec edx
dec edi
cmp dword [ecx], edi
inc ebx
dec edx
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x94], ecx
cmp dword [ebp - 0x94], 0
je 0x4c83f1
push edi
push ebx
add esp, 4
call 0x4c8367
add byte [ebx + eax*2 + 0x3f], cl
xor eax, 0x83495043
les eax, [ecx + eax*4]
out dx, eax
mov edi, 0x5f0000e5
push esi
jmp 0x4c8377
jmp 0x4c8380
and esi, 0xfe10
pop esi
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x414], edx
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x418], eax
lea ecx, [ebp - 0x2b0]
push ecx
call dword [ebp - 0x418]
test eax, eax
jne 0x4c83f1
push esi
push ebx
add esp, 4
add esi, 0xdd74
sub esi, 0x1a58
xor esi, 0x17159
pop esi
push ebx
and ebx, 0x13420
add ebx, 0x16cc6
add ebx, 0x1a8c
or ebx, 0x14c07
pop ebx
mov dword [ebp - 0x1bc], 0
jmp 0x4c8e98

Function at 0x4c7f70
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add al, 0xe8
pop es
add byte [eax], al
add byte [eax], al
dec edi
Function at 0x4c7f7d
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov cl, byte [ebp + 0x6eb0000]
inc ecx
aaa
dec edi
dec edi
xor esi, dword [ebx]
or edi, 0x173bc
pop edi
push ebx
push ecx
add esp, 4
xor ebx, 0x4232
add ebx, 0x685f
pop ebx
mov edx, dword [ebp - 0x84]
add edx, dword [ebp - 0x30c]
mov dword [ebp - 0xf0], edx
jne 0x4c7fa0
push ecx
call 0x4c7f6e
add byte [ebx + 0x38], cl
dec ebx
inc ebx
dec ebp
inc edi
dec ebp
dec ebp
dec esi
inc eax
add esp, 4
add al, 0xe8
pop es
add byte [eax], al
add byte [eax], al
dec edi
dec eax
inc ecx
push eax
dec edx
add esp, 4
add ecx, 0x11ffc
pop ecx
push eax
or eax, 0xe172
pop eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x94], eax
jmp 0x4c8348
mov ecx, dword [ebp - 0xf0]
mov edx, dword [ebp - 0x84]
add edx, dword [ecx + 0x20]
mov dword [ebp - 0x404], edx
push eax
and eax, 0x1200a
add eax, 0x2466
and al, 0
add byte [ecx + 0x4b8fc8], al
add byte [eax + 0x56], bl
push edi
add esp, 4
add esi, 0xa505
and esi, 0xd062
add esi, 0x1858d
or esi, 0xb418
pop esi
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x84]
add ecx, dword [eax + 0x24]
mov dword [ebp - 0x408], ecx
push edi
push esi
add esp, 4
and edi, 0xd59e
pop edi
push eax
add eax, 0x132ae
xor eax, 0xfad2
xor eax, 0x2650
call 0x4c802a
add byte [ebp + 0x4e], cl
dec edi
cmp al, 0x37
aas
dec ebx
inc eax
inc edx
add esp, 4
pop eax
mov edx, dword [ebp - 0xf0]
mov eax, dword [ebp - 0x84]
add eax, dword [edx + 0x1c]
mov dword [ebp - 0x40c], eax
mov dword [ebp - 0xf4], 0
jmp 0x4c805e
mov edx, dword [ebp - 0xf0]
mov eax, dword [ebp - 0xf4]
cmp eax, dword [edx + 0x18]
jae 0x4c833c
push edx
call 0x4c8083
add byte [esi + ecx*2 + 0x34], cl
dec edi
dec ebp
aaa
dec edi
cmp dword [ebp - 0x7d], ecx
les eax, [ecx + eax*4]
loop 0x4c8084
cmp dword [ecx], eax
add byte [ecx + 0x154d3f2], al
add al, ch
or al, byte [eax]
add byte [eax], al
add byte [edx + edi], dh
dec esi
dec edx
dec edi
cmp dword [ecx], edi
inc ebx
dec edx
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x94], ecx
cmp dword [ebp - 0x94], 0
je 0x4c83f1
push edi
push ebx
add esp, 4
call 0x4c8367
add byte [ebx + eax*2 + 0x3f], cl
xor eax, 0x83495043
les eax, [ecx + eax*4]
out dx, eax
mov edi, 0x5f0000e5
push esi
jmp 0x4c8377
jmp 0x4c8380
and esi, 0xfe10
pop esi
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x414], edx
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x418], eax
lea ecx, [ebp - 0x2b0]
push ecx
call dword [ebp - 0x418]
test eax, eax
jne 0x4c83f1
push esi
push ebx
add esp, 4
add esi, 0xdd74
sub esi, 0x1a58
xor esi, 0x17159
pop esi
push ebx
and ebx, 0x13420
add ebx, 0x16cc6
add ebx, 0x1a8c
or ebx, 0x14c07
pop ebx
mov dword [ebp - 0x1bc], 0
jmp 0x4c8e98
Function at 0x4c802a
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov cl, byte [ebp + 0x6eb0000]
inc ecx
aaa
dec edi
dec edi
xor esi, dword [ebx]
or edi, 0x173bc
pop edi
push ebx
push ecx
add esp, 4
xor ebx, 0x4232
add ebx, 0x685f
pop ebx
mov edx, dword [ebp - 0x84]
add edx, dword [ebp - 0x30c]
mov dword [ebp - 0xf0], edx
jne 0x4c7fa0
push ecx
call 0x4c7f6e
add byte [ebx + 0x38], cl
dec ebx
inc ebx
dec ebp
inc edi
dec ebp
dec ebp
dec esi
inc eax
add esp, 4
add al, 0xe8
pop es
add byte [eax], al
add byte [eax], al
dec edi
dec eax
inc ecx
push eax
dec edx
add esp, 4
add ecx, 0x11ffc
pop ecx
push eax
or eax, 0xe172
pop eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x94], eax
jmp 0x4c8348
mov ecx, dword [ebp - 0xf0]
mov edx, dword [ebp - 0x84]
add edx, dword [ecx + 0x20]
mov dword [ebp - 0x404], edx
push eax
and eax, 0x1200a
add eax, 0x2466
and al, 0
add byte [ecx + 0x4b8fc8], al
add byte [eax + 0x56], bl
push edi
add esp, 4
add esi, 0xa505
and esi, 0xd062
add esi, 0x1858d
or esi, 0xb418
pop esi
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x84]
add ecx, dword [eax + 0x24]
mov dword [ebp - 0x408], ecx
push edi
push esi
add esp, 4
and edi, 0xd59e
pop edi
push eax
add eax, 0x132ae
xor eax, 0xfad2
xor eax, 0x2650
call 0x4c802a
add byte [ebp + 0x4e], cl
dec edi
cmp al, 0x37
aas
dec ebx
inc eax
inc edx
add esp, 4
pop eax
mov edx, dword [ebp - 0xf0]
mov eax, dword [ebp - 0x84]
add eax, dword [edx + 0x1c]
mov dword [ebp - 0x40c], eax
mov dword [ebp - 0xf4], 0
jmp 0x4c805e
mov edx, dword [ebp - 0xf0]
mov eax, dword [ebp - 0xf4]
cmp eax, dword [edx + 0x18]
jae 0x4c833c
push edx
call 0x4c8083
add byte [esi + ecx*2 + 0x34], cl
dec edi
dec ebp
aaa
dec edi
cmp dword [ebp - 0x7d], ecx
les eax, [ecx + eax*4]
loop 0x4c8084
cmp dword [ecx], eax
add byte [ecx + 0x154d3f2], al
add al, ch
or al, byte [eax]
add byte [eax], al
add byte [edx + edi], dh
dec esi
dec edx
dec edi
cmp dword [ecx], edi
inc ebx
dec edx
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x94], ecx
cmp dword [ebp - 0x94], 0
je 0x4c83f1
push edi
push ebx
add esp, 4
call 0x4c8367
add byte [ebx + eax*2 + 0x3f], cl
xor eax, 0x83495043
les eax, [ecx + eax*4]
out dx, eax
mov edi, 0x5f0000e5
push esi
jmp 0x4c8377
jmp 0x4c8380
and esi, 0xfe10
pop esi
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x414], edx
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x418], eax
lea ecx, [ebp - 0x2b0]
push ecx
call dword [ebp - 0x418]
test eax, eax
jne 0x4c83f1
push esi
push ebx
add esp, 4
add esi, 0xdd74
sub esi, 0x1a58
xor esi, 0x17159
pop esi
push ebx
and ebx, 0x13420
add ebx, 0x16cc6
add ebx, 0x1a8c
or ebx, 0x14c07
pop ebx
mov dword [ebp - 0x1bc], 0
jmp 0x4c8e98
Function at 0x4c8083
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov cl, byte [ebp + 0x6eb0000]
inc ecx
aaa
dec edi
dec edi
xor esi, dword [ebx]
or edi, 0x173bc
pop edi
push ebx
push ecx
add esp, 4
xor ebx, 0x4232
add ebx, 0x685f
pop ebx
mov edx, dword [ebp - 0x84]
add edx, dword [ebp - 0x30c]
mov dword [ebp - 0xf0], edx
jne 0x4c7fa0
push ecx
call 0x4c7f6e
add byte [ebx + 0x38], cl
dec ebx
inc ebx
dec ebp
inc edi
dec ebp
dec ebp
dec esi
inc eax
add esp, 4
add al, 0xe8
pop es
add byte [eax], al
add byte [eax], al
dec edi
dec eax
inc ecx
push eax
dec edx
add esp, 4
add ecx, 0x11ffc
pop ecx
push eax
or eax, 0xe172
pop eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x94], eax
jmp 0x4c8348
mov ecx, dword [ebp - 0xf0]
mov edx, dword [ebp - 0x84]
add edx, dword [ecx + 0x20]
mov dword [ebp - 0x404], edx
push eax
and eax, 0x1200a
add eax, 0x2466
and al, 0
add byte [ecx + 0x4b8fc8], al
add byte [eax + 0x56], bl
push edi
add esp, 4
add esi, 0xa505
and esi, 0xd062
add esi, 0x1858d
or esi, 0xb418
pop esi
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x84]
add ecx, dword [eax + 0x24]
mov dword [ebp - 0x408], ecx
push edi
push esi
add esp, 4
and edi, 0xd59e
pop edi
push eax
add eax, 0x132ae
xor eax, 0xfad2
xor eax, 0x2650
call 0x4c802a
add byte [ebp + 0x4e], cl
dec edi
cmp al, 0x37
aas
dec ebx
inc eax
inc edx
add esp, 4
pop eax
mov edx, dword [ebp - 0xf0]
mov eax, dword [ebp - 0x84]
add eax, dword [edx + 0x1c]
mov dword [ebp - 0x40c], eax
mov dword [ebp - 0xf4], 0
jmp 0x4c805e
mov edx, dword [ebp - 0xf0]
mov eax, dword [ebp - 0xf4]
cmp eax, dword [edx + 0x18]
jae 0x4c833c
push edx
call 0x4c8083
add byte [esi + ecx*2 + 0x34], cl
dec edi
dec ebp
aaa
dec edi
cmp dword [ebp - 0x7d], ecx
les eax, [ecx + eax*4]
loop 0x4c8084
cmp dword [ecx], eax
add byte [ecx + 0x154d3f2], al
add al, ch
or al, byte [eax]
add byte [eax], al
add byte [edx + edi], dh
dec esi
dec edx
dec edi
cmp dword [ecx], edi
inc ebx
dec edx
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x94], ecx
cmp dword [ebp - 0x94], 0
je 0x4c83f1
push edi
push ebx
add esp, 4
call 0x4c8367
add byte [ebx + eax*2 + 0x3f], cl
xor eax, 0x83495043
les eax, [ecx + eax*4]
out dx, eax
mov edi, 0x5f0000e5
push esi
jmp 0x4c8377
jmp 0x4c8380
and esi, 0xfe10
pop esi
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x414], edx
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x418], eax
lea ecx, [ebp - 0x2b0]
push ecx
call dword [ebp - 0x418]
test eax, eax
jne 0x4c83f1
push esi
push ebx
add esp, 4
add esi, 0xdd74
sub esi, 0x1a58
xor esi, 0x17159
pop esi
push ebx
and ebx, 0x13420
add ebx, 0x16cc6
add ebx, 0x1a8c
or ebx, 0x14c07
pop ebx
mov dword [ebp - 0x1bc], 0
jmp 0x4c8e98
Function at 0x4c80a1
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edx
mov ecx, dword [ebp - 0xf4]
mov edx, dword [ebp - 0x404]
mov eax, dword [ebp - 0x84]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0xf8], eax
push ecx
push ebx
add esp, 4
call 0x4c80d2
add byte [ebx + 0x4a], al
aaa
aas
xor eax, 0xc4833233
add al, 0x81
sar dword [eax], 0xb5
add byte [eax], al
xor ecx, 0x3e20
pop ecx
push eax
add eax, 0x674a
jmp 0x4c80f1
pop eax
mov ecx, dword [ebp - 0xf4]
mov edx, dword [ebp - 0x408]
movzx eax, word [edx + ecx*2]
mov ecx, dword [ebp - 0x40c]
mov edx, dword [ebp - 0x84]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x410], edx
push ecx
push ebx
add esp, 4
add ecx, 0xae6a
and ecx, 0xe448
add ecx, 0x1569a
pop ecx
push edi
push ebx
add esp, 4
xor edi, 0x165aa
or edi, 0x6af1
pop edi
push eax
xor eax, 0xee17
pop eax
mov dword [ebp - 0x38], 0
jmp 0x4c815b
mov ecx, dword [ebp - 0xf8]
add ecx, dword [ebp - 0x38]
movsx edx, byte [ecx]
test edx, edx
je 0x4c81f7
mov eax, dword [ebp - 0x38]
movsx ecx, byte [ebp + eax - 0x164]
test ecx, ecx
je 0x4c81f7
push ebx
jmp 0x4c8185
call 0x4c8192
add byte [eax + 0x3f], cl
xor dh, byte [edi]
dec esi
inc edi
dec edx
add esp, 4
pop ebx
push ebx
push esi
add esp, 4
xor ebx, 0x106df
add ebx, 0xaff8
pop ebx
push eax
invalid
invalid

Function at 0x4c80d2
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edx
mov ecx, dword [ebp - 0xf4]
mov edx, dword [ebp - 0x404]
mov eax, dword [ebp - 0x84]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0xf8], eax
push ecx
push ebx
add esp, 4
call 0x4c80d2
add byte [ebx + 0x4a], al
aaa
aas
xor eax, 0xc4833233
add al, 0x81
sar dword [eax], 0xb5
add byte [eax], al
xor ecx, 0x3e20
pop ecx
push eax
add eax, 0x674a
jmp 0x4c80f1
pop eax
mov ecx, dword [ebp - 0xf4]
mov edx, dword [ebp - 0x408]
movzx eax, word [edx + ecx*2]
mov ecx, dword [ebp - 0x40c]
mov edx, dword [ebp - 0x84]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x410], edx
push ecx
push ebx
add esp, 4
add ecx, 0xae6a
and ecx, 0xe448
add ecx, 0x1569a
pop ecx
push edi
push ebx
add esp, 4
xor edi, 0x165aa
or edi, 0x6af1
pop edi
push eax
xor eax, 0xee17
pop eax
mov dword [ebp - 0x38], 0
jmp 0x4c815b
mov ecx, dword [ebp - 0xf8]
add ecx, dword [ebp - 0x38]
movsx edx, byte [ecx]
test edx, edx
je 0x4c81f7
mov eax, dword [ebp - 0x38]
movsx ecx, byte [ebp + eax - 0x164]
test ecx, ecx
je 0x4c81f7
push ebx
jmp 0x4c8185
call 0x4c8192
add byte [eax + 0x3f], cl
xor dh, byte [edi]
dec esi
inc edi
dec edx
add esp, 4
pop ebx
push ebx
push esi
add esp, 4
xor ebx, 0x106df
add ebx, 0xaff8
pop ebx
push eax
invalid
invalid
Function at 0x4c8192
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edx
mov ecx, dword [ebp - 0xf4]
mov edx, dword [ebp - 0x404]
mov eax, dword [ebp - 0x84]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0xf8], eax
push ecx
push ebx
add esp, 4
call 0x4c80d2
add byte [ebx + 0x4a], al
aaa
aas
xor eax, 0xc4833233
add al, 0x81
sar dword [eax], 0xb5
add byte [eax], al
xor ecx, 0x3e20
pop ecx
push eax
add eax, 0x674a
jmp 0x4c80f1
pop eax
mov ecx, dword [ebp - 0xf4]
mov edx, dword [ebp - 0x408]
movzx eax, word [edx + ecx*2]
mov ecx, dword [ebp - 0x40c]
mov edx, dword [ebp - 0x84]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x410], edx
push ecx
push ebx
add esp, 4
add ecx, 0xae6a
and ecx, 0xe448
add ecx, 0x1569a
pop ecx
push edi
push ebx
add esp, 4
xor edi, 0x165aa
or edi, 0x6af1
pop edi
push eax
xor eax, 0xee17
pop eax
mov dword [ebp - 0x38], 0
jmp 0x4c815b
mov ecx, dword [ebp - 0xf8]
add ecx, dword [ebp - 0x38]
movsx edx, byte [ecx]
test edx, edx
je 0x4c81f7
mov eax, dword [ebp - 0x38]
movsx ecx, byte [ebp + eax - 0x164]
test ecx, ecx
je 0x4c81f7
push ebx
jmp 0x4c8185
call 0x4c8192
add byte [eax + 0x3f], cl
xor dh, byte [edi]
dec esi
inc edi
dec edx
add esp, 4
pop ebx
push ebx
push esi
add esp, 4
xor ebx, 0x106df
add ebx, 0xaff8
pop ebx
push eax
invalid
invalid

Function at 0x4c8262
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [ebp - 0xf4]
add ecx, 1
mov dword [ebp - 0xf4], ecx
add esp, 4
call 0x4c8275
add byte [0x364e3935], bh
inc edi
xor bh, byte [edi]
dec esp
cmp eax, dword [ebx + 0x505f04c4]
push esi
add esp, 4
xor eax, 0x89d9
pop eax
mov edx, dword [ebp - 0xf8]
add edx, dword [ebp - 0x38]
movsx eax, byte [edx]
or eax, 0x20
mov ecx, dword [ebp - 0x38]
movsx edx, byte [ebp + ecx - 0x164]
or edx, 0x20
cmp eax, edx
jge 0x4c82b2
mov dword [ebp - 0x248], 0xffffffff
jmp 0x4c82ee
push edi
sub edi, 0xcc82
xor edi, 0xbdb
add edi, 0xf76c
pop edi
push eax
push edi
add esp, 4
jmp 0x4c82d1
add eax, 0x15c3
xor eax, 0x16191
jmp 0x4c82e3
pop eax
mov dword [ebp - 0x248], 1
cmp dword [ebp - 0x248], 0
jne 0x4c8337
push edi
push eax
add esp, 4
jmp 0x4c8301
pop edi
push edi
push esi
add esp, 4
jmp 0x4c830e
pop edi
push ecx
xor ecx, 0x1515c
or ecx, 0x150c
and ecx, 0x7d20
xor ecx, 0x7a47
inc edi
jp 0x4c8327
add byte [ecx - 0x75], bl
test eax, esi
sti
invalid
dec dword [ecx - 0x937b]
invalid
jmp 0x4c8348
jmp 0x4c804f
Function at 0x4c8275
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [ebp - 0xf4]
add ecx, 1
mov dword [ebp - 0xf4], ecx
add esp, 4
call 0x4c8275
add byte [0x364e3935], bh
inc edi
xor bh, byte [edi]
dec esp
cmp eax, dword [ebx + 0x505f04c4]
push esi
add esp, 4
xor eax, 0x89d9
pop eax
mov edx, dword [ebp - 0xf8]
add edx, dword [ebp - 0x38]
movsx eax, byte [edx]
or eax, 0x20
mov ecx, dword [ebp - 0x38]
movsx edx, byte [ebp + ecx - 0x164]
or edx, 0x20
cmp eax, edx
jge 0x4c82b2
mov dword [ebp - 0x248], 0xffffffff
jmp 0x4c82ee
push edi
sub edi, 0xcc82
xor edi, 0xbdb
add edi, 0xf76c
pop edi
push eax
push edi
add esp, 4
jmp 0x4c82d1
add eax, 0x15c3
xor eax, 0x16191
jmp 0x4c82e3
pop eax
mov dword [ebp - 0x248], 1
cmp dword [ebp - 0x248], 0
jne 0x4c8337
push edi
push eax
add esp, 4
jmp 0x4c8301
pop edi
push edi
push esi
add esp, 4
jmp 0x4c830e
pop edi
push ecx
xor ecx, 0x1515c
or ecx, 0x150c
and ecx, 0x7d20
xor ecx, 0x7a47
inc edi
jp 0x4c8327
add byte [ecx - 0x75], bl
test eax, esi
sti
invalid
dec dword [ecx - 0x937b]
invalid
jmp 0x4c8348
jmp 0x4c804f
Function at 0x4c8367
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov cl, byte [ebp + 0x6eb0000]
inc ecx
aaa
dec edi
dec edi
xor esi, dword [ebx]
or edi, 0x173bc
pop edi
push ebx
push ecx
add esp, 4
xor ebx, 0x4232
add ebx, 0x685f
pop ebx
mov edx, dword [ebp - 0x84]
add edx, dword [ebp - 0x30c]
mov dword [ebp - 0xf0], edx
jne 0x4c7fa0
push ecx
call 0x4c7f6e
add byte [ebx + 0x38], cl
dec ebx
inc ebx
dec ebp
inc edi
dec ebp
dec ebp
dec esi
inc eax
add esp, 4
add al, 0xe8
pop es
add byte [eax], al
add byte [eax], al
dec edi
dec eax
inc ecx
push eax
dec edx
add esp, 4
add ecx, 0x11ffc
pop ecx
push eax
or eax, 0xe172
pop eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x94], eax
jmp 0x4c8348
mov ecx, dword [ebp - 0xf0]
mov edx, dword [ebp - 0x84]
add edx, dword [ecx + 0x20]
mov dword [ebp - 0x404], edx
push eax
and eax, 0x1200a
add eax, 0x2466
and al, 0
add byte [ecx + 0x4b8fc8], al
add byte [eax + 0x56], bl
push edi
add esp, 4
add esi, 0xa505
and esi, 0xd062
add esi, 0x1858d
or esi, 0xb418
pop esi
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x84]
add ecx, dword [eax + 0x24]
mov dword [ebp - 0x408], ecx
push edi
push esi
add esp, 4
and edi, 0xd59e
pop edi
push eax
add eax, 0x132ae
xor eax, 0xfad2
xor eax, 0x2650
call 0x4c802a
add byte [ebp + 0x4e], cl
dec edi
cmp al, 0x37
aas
dec ebx
inc eax
inc edx
add esp, 4
pop eax
mov edx, dword [ebp - 0xf0]
mov eax, dword [ebp - 0x84]
add eax, dword [edx + 0x1c]
mov dword [ebp - 0x40c], eax
mov dword [ebp - 0xf4], 0
jmp 0x4c805e
mov edx, dword [ebp - 0xf0]
mov eax, dword [ebp - 0xf4]
cmp eax, dword [edx + 0x18]
jae 0x4c833c
push edx
call 0x4c8083
add byte [esi + ecx*2 + 0x34], cl
dec edi
dec ebp
aaa
dec edi
cmp dword [ebp - 0x7d], ecx
les eax, [ecx + eax*4]
loop 0x4c8084
cmp dword [ecx], eax
add byte [ecx + 0x154d3f2], al
add al, ch
or al, byte [eax]
add byte [eax], al
add byte [edx + edi], dh
dec esi
dec edx
dec edi
cmp dword [ecx], edi
inc ebx
dec edx
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x94], ecx
cmp dword [ebp - 0x94], 0
je 0x4c83f1
push edi
push ebx
add esp, 4
call 0x4c8367
add byte [ebx + eax*2 + 0x3f], cl
xor eax, 0x83495043
les eax, [ecx + eax*4]
out dx, eax
mov edi, 0x5f0000e5
push esi
jmp 0x4c8377
jmp 0x4c8380
and esi, 0xfe10
pop esi
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x414], edx
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x418], eax
lea ecx, [ebp - 0x2b0]
push ecx
call dword [ebp - 0x418]
test eax, eax
jne 0x4c83f1
push esi
push ebx
add esp, 4
add esi, 0xdd74
sub esi, 0x1a58
xor esi, 0x17159
pop esi
push ebx
and ebx, 0x13420
add ebx, 0x16cc6
add ebx, 0x1a8c
or ebx, 0x14c07
pop ebx
mov dword [ebp - 0x1bc], 0
jmp 0x4c8e98

Function at 0x4c845b
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [ecx - 0x41b6b], cl
call dword [edi + 0x51]
Function at 0x4c858a
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
xor edi, 0x4839
add edi, 0x137aa
pop edi
push esi
jmp 0x4c85a0
and esi, 0xbf3b
pop esi
mov dword [ebp - 0x70], 0
jmp 0x4c88b4
Function at 0x4c8f12
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
lcall 0x121c, 0xf2810000
add dword [eax], eax