joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10001200
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1d5c
push ebx
push esi
push edi
push ebx
push ecx
add esp, 4
add ebx, 0x168e8
jmp 0x100010ba
pop ebx
push eax
push esi
add esp, 4
jmp 0x100010c6
add eax, 0x182eb
add eax, 0x4274
pop eax
push ecx
add ecx, 0xcc50
pop ecx
mov dword [ebp - 0x724], 0
call 0x100010ea
mov eax, 0x13379797
pop eax
mov dword [ebp - 0x724], eax
push ecx
or ecx, 0x1313a
pop ecx
push esi
push edx
add esp, 4
and esi, 0xa561
and esi, 0x132d2
xor esi, 0x10492
call 0x10001124
add byte [esi + 0x33], al
aaa
inc esi
dec edx
aas
inc eax
cmp byte [edx - 0x7d], al
les eax, [esi + ebx*2]
push edi
sub edi, 0x184ae
pop edi
push ecx
push esi
add esp, 4
xor ecx, 0x1377d
and ecx, 0x5149
sub ecx, 0xf5ac
pop ecx
push esi
push edx
add esp, 4
xor esi, 0xdd91
sub esi, 0x10b91
pop esi
mov byte [ebp - 0xb48], 0x52
mov byte [ebp - 0xb47], 0xb9
mov byte [ebp - 0xb46], 0x10
mov byte [ebp - 0xb45], 0x10
mov byte [ebp - 0xb44], 0x10
mov byte [ebp - 0xb43], 0x10
mov byte [ebp - 0xb42], 0x5a
push edx
jmp 0x10001193
pop edx
push esi
push edx
add esp, 4
jmp 0x100011a1
or esi, 0x10027
and esi, 0xc810
pop esi
push ebx
push eax
add esp, 4
jmp 0x100011bc
pop ebx
mov byte [ebp - 0xb50], 0x52
mov byte [ebp - 0xb4f], 0xb9
mov byte [ebp - 0xb4e], 0x20
mov byte [ebp - 0xb4d], 0x20
mov byte [ebp - 0xb4c], 0x20
mov byte [ebp - 0xb4b], 0x20
mov byte [ebp - 0xb4a], 0x5a
push eax
push ecx
add esp, 4
call 0x10001200
add byte [edi], bh
cmp al, 0x40
xor eax, 0x833b364d
les eax, [ecx + eax*4]
call fcn.1000be90
jmp 0x10001211
pop eax
push edi
jmp 0x10001219
and edi, 0xb644
pop edi
mov dword [ebp - 0x1d08], 0xe
push eax
call 0x1000123a
add byte [esi + 0x49], al
cmp byte [esi], bh
inc edx
dec esp
cmp dword [eax + 0x3b], edx
add esp, 4
xor eax, 0x13bcf
xor eax, 0x2171
pop eax
push ebx
push ecx
add esp, 4
xor ebx, 0xf99
or ebx, 0x4f97
pop ebx
mov eax, 1
imul ecx, eax, 0
lea edx, [ebp + ecx - 0xb48]
mov dword [ebp - 0x14ec], edx
push edx
push ecx
add esp, 4
add edx, 0x17ab4
pop edx
push esi
or esi, 0x9d5c
xor esi, 0xa2a8
or esi, 0x887d
pop esi
push esi
push eax
add esp, 4
or esi, 0x15345
and esi, 0x1415b
pop esi
mov dword [ebp - 0x1d30], 0xffffffff
push edi
push ecx
add esp, 4
add edi, 0x13ca3
or edi, 0xa071
and edi, 0x1819b
wait
add dword [ecx], 0x92f78100
outsd dx, dword [esi]
add dword [eax], eax
pop edi
push ebx
or ebx, 0x8b0
sub ebx, 0x17347
add ebx, 0xe2a7
pop ebx
mov eax, dword [ebp - 0x724]
mov dword [ebp - 0x4b4], eax
jmp 0x100012fc
Function at 0x1000123a
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1d5c
push ebx
push esi
push edi
push ebx
push ecx
add esp, 4
add ebx, 0x168e8
jmp 0x100010ba
pop ebx
push eax
push esi
add esp, 4
jmp 0x100010c6
add eax, 0x182eb
add eax, 0x4274
pop eax
push ecx
add ecx, 0xcc50
pop ecx
mov dword [ebp - 0x724], 0
call 0x100010ea
mov eax, 0x13379797
pop eax
mov dword [ebp - 0x724], eax
push ecx
or ecx, 0x1313a
pop ecx
push esi
push edx
add esp, 4
and esi, 0xa561
and esi, 0x132d2
xor esi, 0x10492
call 0x10001124
add byte [esi + 0x33], al
aaa
inc esi
dec edx
aas
inc eax
cmp byte [edx - 0x7d], al
les eax, [esi + ebx*2]
push edi
sub edi, 0x184ae
pop edi
push ecx
push esi
add esp, 4
xor ecx, 0x1377d
and ecx, 0x5149
sub ecx, 0xf5ac
pop ecx
push esi
push edx
add esp, 4
xor esi, 0xdd91
sub esi, 0x10b91
pop esi
mov byte [ebp - 0xb48], 0x52
mov byte [ebp - 0xb47], 0xb9
mov byte [ebp - 0xb46], 0x10
mov byte [ebp - 0xb45], 0x10
mov byte [ebp - 0xb44], 0x10
mov byte [ebp - 0xb43], 0x10
mov byte [ebp - 0xb42], 0x5a
push edx
jmp 0x10001193
pop edx
push esi
push edx
add esp, 4
jmp 0x100011a1
or esi, 0x10027
and esi, 0xc810
pop esi
push ebx
push eax
add esp, 4
jmp 0x100011bc
pop ebx
mov byte [ebp - 0xb50], 0x52
mov byte [ebp - 0xb4f], 0xb9
mov byte [ebp - 0xb4e], 0x20
mov byte [ebp - 0xb4d], 0x20
mov byte [ebp - 0xb4c], 0x20
mov byte [ebp - 0xb4b], 0x20
mov byte [ebp - 0xb4a], 0x5a
push eax
push ecx
add esp, 4
call 0x10001200
add byte [edi], bh
cmp al, 0x40
xor eax, 0x833b364d
les eax, [ecx + eax*4]
call fcn.1000be90
jmp 0x10001211
pop eax
push edi
jmp 0x10001219
and edi, 0xb644
pop edi
mov dword [ebp - 0x1d08], 0xe
push eax
call 0x1000123a
add byte [esi + 0x49], al
cmp byte [esi], bh
inc edx
dec esp
cmp dword [eax + 0x3b], edx
add esp, 4
xor eax, 0x13bcf
xor eax, 0x2171
pop eax
push ebx
push ecx
add esp, 4
xor ebx, 0xf99
or ebx, 0x4f97
pop ebx
mov eax, 1
imul ecx, eax, 0
lea edx, [ebp + ecx - 0xb48]
mov dword [ebp - 0x14ec], edx
push edx
push ecx
add esp, 4
add edx, 0x17ab4
pop edx
push esi
or esi, 0x9d5c
xor esi, 0xa2a8
or esi, 0x887d
pop esi
push esi
push eax
add esp, 4
or esi, 0x15345
and esi, 0x1415b
pop esi
mov dword [ebp - 0x1d30], 0xffffffff
push edi
push ecx
add esp, 4
add edi, 0x13ca3
or edi, 0xa071
and edi, 0x1819b
wait
add dword [ecx], 0x92f78100
outsd dx, dword [esi]
add dword [eax], eax
pop edi
push ebx
or ebx, 0x8b0
sub ebx, 0x17347
add ebx, 0xe2a7
pop ebx
mov eax, dword [ebp - 0x724]
mov dword [ebp - 0x4b4], eax
jmp 0x100012fc
Function at 0x100012c0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1d5c
push ebx
push esi
push edi
push ebx
push ecx
add esp, 4
add ebx, 0x168e8
jmp 0x100010ba
pop ebx
push eax
push esi
add esp, 4
jmp 0x100010c6
add eax, 0x182eb
add eax, 0x4274
pop eax
push ecx
add ecx, 0xcc50
pop ecx
mov dword [ebp - 0x724], 0
call 0x100010ea
mov eax, 0x13379797
pop eax
mov dword [ebp - 0x724], eax
push ecx
or ecx, 0x1313a
pop ecx
push esi
push edx
add esp, 4
and esi, 0xa561
and esi, 0x132d2
xor esi, 0x10492
call 0x10001124
add byte [esi + 0x33], al
aaa
inc esi
dec edx
aas
inc eax
cmp byte [edx - 0x7d], al
les eax, [esi + ebx*2]
push edi
sub edi, 0x184ae
pop edi
push ecx
push esi
add esp, 4
xor ecx, 0x1377d
and ecx, 0x5149
sub ecx, 0xf5ac
pop ecx
push esi
push edx
add esp, 4
xor esi, 0xdd91
sub esi, 0x10b91
pop esi
mov byte [ebp - 0xb48], 0x52
mov byte [ebp - 0xb47], 0xb9
mov byte [ebp - 0xb46], 0x10
mov byte [ebp - 0xb45], 0x10
mov byte [ebp - 0xb44], 0x10
mov byte [ebp - 0xb43], 0x10
mov byte [ebp - 0xb42], 0x5a
push edx
jmp 0x10001193
pop edx
push esi
push edx
add esp, 4
jmp 0x100011a1
or esi, 0x10027
and esi, 0xc810
pop esi
push ebx
push eax
add esp, 4
jmp 0x100011bc
pop ebx
mov byte [ebp - 0xb50], 0x52
mov byte [ebp - 0xb4f], 0xb9
mov byte [ebp - 0xb4e], 0x20
mov byte [ebp - 0xb4d], 0x20
mov byte [ebp - 0xb4c], 0x20
mov byte [ebp - 0xb4b], 0x20
mov byte [ebp - 0xb4a], 0x5a
push eax
push ecx
add esp, 4
call 0x10001200
add byte [edi], bh
cmp al, 0x40
xor eax, 0x833b364d
les eax, [ecx + eax*4]
call fcn.1000be90
jmp 0x10001211
pop eax
push edi
jmp 0x10001219
and edi, 0xb644
pop edi
mov dword [ebp - 0x1d08], 0xe
push eax
call 0x1000123a
add byte [esi + 0x49], al
cmp byte [esi], bh
inc edx
dec esp
cmp dword [eax + 0x3b], edx
add esp, 4
xor eax, 0x13bcf
xor eax, 0x2171
pop eax
push ebx
push ecx
add esp, 4
xor ebx, 0xf99
or ebx, 0x4f97
pop ebx
mov eax, 1
imul ecx, eax, 0
lea edx, [ebp + ecx - 0xb48]
mov dword [ebp - 0x14ec], edx
push edx
push ecx
add esp, 4
add edx, 0x17ab4
pop edx
push esi
or esi, 0x9d5c
xor esi, 0xa2a8
or esi, 0x887d
pop esi
push esi
push eax
add esp, 4
or esi, 0x15345
and esi, 0x1415b
pop esi
mov dword [ebp - 0x1d30], 0xffffffff
push edi
push ecx
add esp, 4
add edi, 0x13ca3
or edi, 0xa071
and edi, 0x1819b
wait
add dword [ecx], 0x92f78100
outsd dx, dword [esi]
add dword [eax], eax
pop edi
push ebx
or ebx, 0x8b0
sub ebx, 0x17347
add ebx, 0xe2a7
pop ebx
mov eax, dword [ebp - 0x724]
mov dword [ebp - 0x4b4], eax
jmp 0x100012fc
Function at 0x10001370
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
pop eax
jmp 0x100015a4
push ecx
push esi
add esp, 4
jmp 0x100015b2
pop ecx
push ecx
push esi
add esp, 4
sub ecx, 0x1581a
pop ecx
push ebx
push esi
add esp, 4
jmp 0x100015ca
and ebx, 0x11087
jmp 0x100015d5
pop ebx
mov dword [ebp - 0x378], 0
Function at 0x10001460
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
or al, byte [eax]
add byte [ebx - 0x75], bl
lea edx, [ebp + esi*8 - 0x49f00001]
adc dword [ebx - 0xa637b], ecx
dec dword [edi]
mov dh, 8
Function at 0x100017f8
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [ebp - 0x4b8]
add ecx, 1
mov dword [ebp - 0x4b8], ecx
push ebx
sub ebx, 0x171e7
xor ebx, 0x4bf0
or ebx, 0x5665
add ebx, 0xe7e3
pop ebx
push ecx
push esi
add esp, 4
add ecx, 0x95b4
sub ecx, 0x41c2
sub ecx, 0x16b21
pop ecx
mov edx, dword [ebp - 0x4b8]
sub edx, dword [ebp - 0x724]
cmp edx, 0xffffffff
jb 0x1000175e
push edi
sub edi, 0x85b3
and edi, 0x12805
add eax, 0x5f000128
mov dword [ebp - 0xc0c], 7
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0xa60], eax
push esi
sub esi, 0x740d
sub esi, 0x2724
and esi, 0xc12
pop esi
push edi
push ecx
add esp, 4
xor edi, 0x16317
sub edi, 0x3afd
sub edi, 0x4d93
add edi, 0x11aa3
pop edi
mov ecx, dword [ebp - 0x14f8]
mov dword [ebp - 0xa58], ecx
mov dword [ebp - 0xc10], 0
mov edx, dword [ebp - 0x4b8]
cmp edx, dword [ebp - 0x14f8]
jne 0x1000180d
push eax
push eax
add esp, 4
add eax, 0x18670
pop eax
push esi
and esi, 0xa289
and esi, 0x115d3
and esi, 0xaadb
call fcn.100017f8
add byte [ebx], bh
cmp eax, 0x50373d46
inc ebp
cmp dword [eax - 0x7d], eax
add esp, 4
pop esi
add esp, 4
pop esi
mov eax, dword [ebp - 0xc10]
mov dword [ebp - 0x1500], eax
jmp 0x1000193e
cmp dword [ebp - 0xc0c], 0
jle 0x10001932
push edx
push ebx
add esp, 4
add edx, 0x153a9
or edx, 0x7cf5
pop edx
push ecx
xor ecx, 0x1272b
or ecx, 0xad5e
or ecx, 0xc24d
pop ecx
push ebx
push ecx
add esp, 4
add ebx, 0x9de5
pop ebx
mov ecx, dword [ebp - 0xa60]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0xa58]
movzx ecx, byte [eax]
cmp edx, ecx
je 0x100018ce
push ecx
push ecx
add esp, 4
or ecx, 0x10b3f
or ecx, 0x1246e
jmp 0x1000187b
pop ecx
push esi
push edx
add esp, 4
xor esi, 0xeb9c
add esi, 0x6acb
and esi, 0xadf7
pop esi
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa58]
movzx edx, byte [ecx]
cmp eax, edx
jle 0x100018b6
mov dword [ebp - 0x14fc], 1
jmp 0x100018c0
mov dword [ebp - 0x14fc], 0xffffffff
mov eax, dword [ebp - 0x14fc]
mov dword [ebp - 0xc10], eax
jmp 0x10001932
push edi
add edi, 0x675d
add edi, 0xd619
or edi, 0x6cde
pop edi
push eax
push eax
add esp, 4
and eax, 0x124ad
call 0x100018fc
add byte [ecx], bh
xor eax, 0x32333736
dec edi
aas
cmp al, byte [ebx - 0x74a7fb3c]
invalid
mov ecx, dword [ebp - 0xc10]
mov dword [ebp - 0x1500], ecx
cmp dword [ebp - 0x1500], 0
jne 0x10001987
push esi
add esi, 0x1028e
sub esi, 0x2e07
and esi, 0xfcbb
xor esi, 0xcf41
pop esi
push edi
push ecx
add esp, 4
add edi, 0xd552
pop edi
push ecx
push edi
add esp, 4
or ecx, 0x73b4
pop ecx
mov edx, dword [ebp - 0x4b8]
mov dword [ebp - 0xa50], edx
jmp 0x100019c8
jmp 0x100016d5

Function at 0x10001b10
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
xor eax, eax
mov word [ebp - 0x15b8], ax
push esi
push eax
add esp, 4
or esi, 0x171b
sub esi, 0xf56d
sub esi, 0x133cc
pop esi
push ebx
push esi
add esp, 4
and ebx, 0xd0d0
pop ebx
push ecx
or ecx, 0xab63
arpl word [ebx + 0x4eb0000], bp
pop ecx
push eax
push edx
add esp, 4
Function at 0x10001b50
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
call 0x10001b5e
add byte [ebx], dh
inc esi
inc edi
aaa
cmp edi, dword ds:[edx]
inc esi
add esp, 4
call 0x10001b6d
add byte [0x32453f45], dh
push eax
add esp, 4
add eax, 0x108cf
xor eax, 0x6222
pop eax
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1a30], ecx
mov edx, dword [ebp - 0x1a30]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1be0], eax
mov ecx, dword [ebp - 0x1be0]
invalid

Function at 0x10001b5e
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
call 0x10001b5e
add byte [ebx], dh
inc esi
inc edi
aaa
cmp edi, dword ds:[edx]
inc esi
add esp, 4
call 0x10001b6d
add byte [0x32453f45], dh
push eax
add esp, 4
add eax, 0x108cf
xor eax, 0x6222
pop eax
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1a30], ecx
mov edx, dword [ebp - 0x1a30]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1be0], eax
mov ecx, dword [ebp - 0x1be0]
invalid

Function at 0x10001b6d
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
call 0x10001b5e
add byte [ebx], dh
inc esi
inc edi
aaa
cmp edi, dword ds:[edx]
inc esi
add esp, 4
call 0x10001b6d
add byte [0x32453f45], dh
push eax
add esp, 4
add eax, 0x108cf
xor eax, 0x6222
pop eax
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1a30], ecx
mov edx, dword [ebp - 0x1a30]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1be0], eax
mov ecx, dword [ebp - 0x1be0]
invalid
Function at 0x10001c20
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
and eax, 0xb562
sub eax, 0x4ab8
add eax, 0x39e
pop eax
cmp dword [ebp - 0xc1c], 0
jne 0x10001c4b
mov dword [ebp - 0x29c], 0
jmp 0x10001eab
mov edx, dword [ebp - 0xc1c]
mov dword [ebp - 0x4bc], edx
push ecx
push edx
add esp, 4
xor ecx, 0x1240d
pop ecx
push ebx
push edx
add esp, 4
call 0x10001c77
add byte [esi + 0x42], cl
xor cl, byte [esi + 0x50]
inc edi
dec esp
inc esp
dec eax
add esp, 4
pop ebx
push ebx
and ebx, 0x11980
xor ebx, 0xbd25
pop ebx
lea eax, [ebp - 0x15d0]
mov dword [ebp - 0xc18], eax
mov ecx, dword [ebp - 0x4bc]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc14], edx
xor eax, eax
mov word [ebp - 0x1ac], ax
xor ecx, ecx
mov word [ebp - 0x100], cx
push edi
push esi
add esp, 4
sub edi, 0x14147
pop edi
push ecx
add ecx, 0x10360
pop ecx
push ecx
push edi
add esp, 4
xor ecx, 0x5473
jmp 0x10001cdb
xor ecx, 0x9832
and ecx, 0xf10e
pop ecx
mov edx, dword [ebp - 0xc14]
mov ax, word [edx]
mov word [ebp - 0xfb6], ax
mov ecx, dword [ebp - 0xc14]
add ecx, 2
mov dword [ebp - 0xc14], ecx
mov dx, word [ebp - 0xfb6]
mov word [ebp - 0x1ac], dx
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xfb8], cx
mov edx, dword [ebp - 0xc18]
add edx, 2
mov dword [ebp - 0xc18], edx
call 0x77001d28
mov eax, dword [ebp - 0xfb8]
mov word [ebp - 0x100], ax
push ebx
push ebx
add esp, 4
jmp 0x10001d50
pop ebx
push edx
or edx, 0x68d1
call 0x10001d64
add byte [edx], bh
dec esp
cmp al, byte [ecx + edi + 0x3e]
add esp, 4
xor edx, 0x134c9
and edx, 0x2d44
pop edx
movzx ecx, word [ebp - 0x100]
test ecx, ecx
jne 0x10001d97
movzx edx, word [ebp - 0x1ac]
movzx eax, word [ebp - 0x100]
sub edx, eax
mov dword [ebp - 0x1510], edx
jmp 0x10001dfa
movzx ecx, word [ebp - 0x1ac]
movzx edx, word [ebp - 0x100]
cmp ecx, edx
je 0x10001cb6
movzx eax, word [ebp - 0x1ac]
xor eax, 0x20
movzx ecx, word [ebp - 0x100]
cmp eax, ecx
je 0x10001cb6
movzx edx, word [ebp - 0x1ac]
movzx eax, word [ebp - 0x100]
cmp edx, eax
jge 0x10001de4
mov dword [ebp - 0x1508], 0xffffffff
jmp 0x10001dee
mov dword [ebp - 0x1508], 1
mov ecx, dword [ebp - 0x1508]
mov dword [ebp - 0x1510], ecx
cmp dword [ebp - 0x1510], 0
jne 0x10001e43
push ebx
push ebx
add esp, 4
xor ebx, 0x125af
call 0x10001e1c
add byte [ebp + 0x33], al
inc edx
xor al, 0x44
xor al, 0x4a
cmp byte [ebx - 0x3c7efb3c], al
imul esi, dword [edx], 0
add al, ch
pop es
add byte [eax], al
add byte [eax], al
dec ecx
cmp eax, dword [ebx + esi + 0x50]
xor al, 0x83
les eax, [ebx + ebx*2]
mov edx, dword [ebp - 0x4bc]
mov dword [ebp - 0x29c], edx
jmp 0x10001eab
push ebx
push eax
add esp, 4
add ebx, 0xbe28
or ebx, 0xd013
call 0x10001e62
add byte [edi], bh
xor al, 0x39
cmp al, 0x4b
xor al, 0x45
dec edi
add esp, 4
pop ebx
push ecx
push ecx
add esp, 4
jmp 0x10001e74
pop ecx
mov eax, dword [ebp - 0x4bc]
mov ecx, dword [eax]
mov dword [ebp - 0x4bc], ecx
mov edx, dword [ebp - 0x4bc]
cmp edx, dword [ebp - 0xc1c]
je 0x10001ea1
mov eax, dword [ebp - 0x4bc]
cmp dword [eax + 0x30], 0
jne 0x10001c57
mov dword [ebp - 0x29c], 0
push edx
push eax
add esp, 4
Function at 0x10001c77
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
and eax, 0xb562
sub eax, 0x4ab8
add eax, 0x39e
pop eax
cmp dword [ebp - 0xc1c], 0
jne 0x10001c4b
mov dword [ebp - 0x29c], 0
jmp 0x10001eab
mov edx, dword [ebp - 0xc1c]
mov dword [ebp - 0x4bc], edx
push ecx
push edx
add esp, 4
xor ecx, 0x1240d
pop ecx
push ebx
push edx
add esp, 4
call 0x10001c77
add byte [esi + 0x42], cl
xor cl, byte [esi + 0x50]
inc edi
dec esp
inc esp
dec eax
add esp, 4
pop ebx
push ebx
and ebx, 0x11980
xor ebx, 0xbd25
pop ebx
lea eax, [ebp - 0x15d0]
mov dword [ebp - 0xc18], eax
mov ecx, dword [ebp - 0x4bc]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc14], edx
xor eax, eax
mov word [ebp - 0x1ac], ax
xor ecx, ecx
mov word [ebp - 0x100], cx
push edi
push esi
add esp, 4
sub edi, 0x14147
pop edi
push ecx
add ecx, 0x10360
pop ecx
push ecx
push edi
add esp, 4
xor ecx, 0x5473
jmp 0x10001cdb
xor ecx, 0x9832
and ecx, 0xf10e
pop ecx
mov edx, dword [ebp - 0xc14]
mov ax, word [edx]
mov word [ebp - 0xfb6], ax
mov ecx, dword [ebp - 0xc14]
add ecx, 2
mov dword [ebp - 0xc14], ecx
mov dx, word [ebp - 0xfb6]
mov word [ebp - 0x1ac], dx
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xfb8], cx
mov edx, dword [ebp - 0xc18]
add edx, 2
mov dword [ebp - 0xc18], edx
call 0x77001d28
mov eax, dword [ebp - 0xfb8]
mov word [ebp - 0x100], ax
push ebx
push ebx
add esp, 4
jmp 0x10001d50
pop ebx
push edx
or edx, 0x68d1
call 0x10001d64
add byte [edx], bh
dec esp
cmp al, byte [ecx + edi + 0x3e]
add esp, 4
xor edx, 0x134c9
and edx, 0x2d44
pop edx
movzx ecx, word [ebp - 0x100]
test ecx, ecx
jne 0x10001d97
movzx edx, word [ebp - 0x1ac]
movzx eax, word [ebp - 0x100]
sub edx, eax
mov dword [ebp - 0x1510], edx
jmp 0x10001dfa
movzx ecx, word [ebp - 0x1ac]
movzx edx, word [ebp - 0x100]
cmp ecx, edx
je 0x10001cb6
movzx eax, word [ebp - 0x1ac]
xor eax, 0x20
movzx ecx, word [ebp - 0x100]
cmp eax, ecx
je 0x10001cb6
movzx edx, word [ebp - 0x1ac]
movzx eax, word [ebp - 0x100]
cmp edx, eax
jge 0x10001de4
mov dword [ebp - 0x1508], 0xffffffff
jmp 0x10001dee
mov dword [ebp - 0x1508], 1
mov ecx, dword [ebp - 0x1508]
mov dword [ebp - 0x1510], ecx
cmp dword [ebp - 0x1510], 0
jne 0x10001e43
push ebx
push ebx
add esp, 4
xor ebx, 0x125af
call 0x10001e1c
add byte [ebp + 0x33], al
inc edx
xor al, 0x44
xor al, 0x4a
cmp byte [ebx - 0x3c7efb3c], al
imul esi, dword [edx], 0
add al, ch
pop es
add byte [eax], al
add byte [eax], al
dec ecx
cmp eax, dword [ebx + esi + 0x50]
xor al, 0x83
les eax, [ebx + ebx*2]
mov edx, dword [ebp - 0x4bc]
mov dword [ebp - 0x29c], edx
jmp 0x10001eab
push ebx
push eax
add esp, 4
add ebx, 0xbe28
or ebx, 0xd013
call 0x10001e62
add byte [edi], bh
xor al, 0x39
cmp al, 0x4b
xor al, 0x45
dec edi
add esp, 4
pop ebx
push ecx
push ecx
add esp, 4
jmp 0x10001e74
pop ecx
mov eax, dword [ebp - 0x4bc]
mov ecx, dword [eax]
mov dword [ebp - 0x4bc], ecx
mov edx, dword [ebp - 0x4bc]
cmp edx, dword [ebp - 0xc1c]
je 0x10001ea1
mov eax, dword [ebp - 0x4bc]
cmp dword [eax + 0x30], 0
jne 0x10001c57
mov dword [ebp - 0x29c], 0
push edx
push eax
add esp, 4
Function at 0x10001d30
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
and eax, 0xb562
sub eax, 0x4ab8
add eax, 0x39e
pop eax
cmp dword [ebp - 0xc1c], 0
jne 0x10001c4b
mov dword [ebp - 0x29c], 0
jmp 0x10001eab
mov edx, dword [ebp - 0xc1c]
mov dword [ebp - 0x4bc], edx
push ecx
push edx
add esp, 4
xor ecx, 0x1240d
pop ecx
push ebx
push edx
add esp, 4
call 0x10001c77
add byte [esi + 0x42], cl
xor cl, byte [esi + 0x50]
inc edi
dec esp
inc esp
dec eax
add esp, 4
pop ebx
push ebx
and ebx, 0x11980
xor ebx, 0xbd25
pop ebx
lea eax, [ebp - 0x15d0]
mov dword [ebp - 0xc18], eax
mov ecx, dword [ebp - 0x4bc]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc14], edx
xor eax, eax
mov word [ebp - 0x1ac], ax
xor ecx, ecx
mov word [ebp - 0x100], cx
push edi
push esi
add esp, 4
sub edi, 0x14147
pop edi
push ecx
add ecx, 0x10360
pop ecx
push ecx
push edi
add esp, 4
xor ecx, 0x5473
jmp 0x10001cdb
xor ecx, 0x9832
and ecx, 0xf10e
pop ecx
mov edx, dword [ebp - 0xc14]
mov ax, word [edx]
mov word [ebp - 0xfb6], ax
mov ecx, dword [ebp - 0xc14]
add ecx, 2
mov dword [ebp - 0xc14], ecx
mov dx, word [ebp - 0xfb6]
mov word [ebp - 0x1ac], dx
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xfb8], cx
mov edx, dword [ebp - 0xc18]
add edx, 2
mov dword [ebp - 0xc18], edx
call 0x77001d28
mov eax, dword [ebp - 0xfb8]
mov word [ebp - 0x100], ax
push ebx
push ebx
add esp, 4
jmp 0x10001d50
pop ebx
push edx
or edx, 0x68d1
call 0x10001d64
add byte [edx], bh
dec esp
cmp al, byte [ecx + edi + 0x3e]
add esp, 4
xor edx, 0x134c9
and edx, 0x2d44
pop edx
movzx ecx, word [ebp - 0x100]
test ecx, ecx
jne 0x10001d97
movzx edx, word [ebp - 0x1ac]
movzx eax, word [ebp - 0x100]
sub edx, eax
mov dword [ebp - 0x1510], edx
jmp 0x10001dfa
movzx ecx, word [ebp - 0x1ac]
movzx edx, word [ebp - 0x100]
cmp ecx, edx
je 0x10001cb6
movzx eax, word [ebp - 0x1ac]
xor eax, 0x20
movzx ecx, word [ebp - 0x100]
cmp eax, ecx
je 0x10001cb6
movzx edx, word [ebp - 0x1ac]
movzx eax, word [ebp - 0x100]
cmp edx, eax
jge 0x10001de4
mov dword [ebp - 0x1508], 0xffffffff
jmp 0x10001dee
mov dword [ebp - 0x1508], 1
mov ecx, dword [ebp - 0x1508]
mov dword [ebp - 0x1510], ecx
cmp dword [ebp - 0x1510], 0
jne 0x10001e43
push ebx
push ebx
add esp, 4
xor ebx, 0x125af
call 0x10001e1c
add byte [ebp + 0x33], al
inc edx
xor al, 0x44
xor al, 0x4a
cmp byte [ebx - 0x3c7efb3c], al
imul esi, dword [edx], 0
add al, ch
pop es
add byte [eax], al
add byte [eax], al
dec ecx
cmp eax, dword [ebx + esi + 0x50]
xor al, 0x83
les eax, [ebx + ebx*2]
mov edx, dword [ebp - 0x4bc]
mov dword [ebp - 0x29c], edx
jmp 0x10001eab
push ebx
push eax
add esp, 4
add ebx, 0xbe28
or ebx, 0xd013
call 0x10001e62
add byte [edi], bh
xor al, 0x39
cmp al, 0x4b
xor al, 0x45
dec edi
add esp, 4
pop ebx
push ecx
push ecx
add esp, 4
jmp 0x10001e74
pop ecx
mov eax, dword [ebp - 0x4bc]
mov ecx, dword [eax]
mov dword [ebp - 0x4bc], ecx
mov edx, dword [ebp - 0x4bc]
cmp edx, dword [ebp - 0xc1c]
je 0x10001ea1
mov eax, dword [ebp - 0x4bc]
cmp dword [eax + 0x30], 0
jne 0x10001c57
mov dword [ebp - 0x29c], 0
push edx
push eax
add esp, 4