joyce8/EMBER2024-capa huggingface dataset:
Function at 0x50deef
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edi
push ecx
call 0x50deef
add byte [ebx], dh
cmp dword [0x3f464c33], esi
inc edx
inc ebp
xor al, byte [ebx - 0x167efb3c]
mov edx, 0x59000034
mov ecx, dword [ebp - 0x1fa0]
mov dword [ebp - 0x14b8], ecx
push ecx
or ecx, 0xb771
or ecx, 0x260c
pop ecx
push esi
jmp 0x50df1c
pop esi
push eax
and eax, 0x73ee
call 0x50df33
add byte [ecx], bh
dec ebx
dec ebx
inc ecx
cmp byte [edx + 0x46], al
aas
cmp al, byte [ebx - 0x74a7fb3c]
push ebp
in al, dx
add edx, 0x138
imul eax, dword [ebp - 0x10], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x10], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x14b8], edx
mov edx, dword [ebp - 0x3c0]
mov dword [ebp - 0x1ef8], edx
mov eax, dword [ebp - 0x1ef8]
add eax, dword [ebp - 0x14b8]
mov dword [ebp - 0x3c0], eax
push esi
push ebx
add esp, 4
xor esi, 0x1411f
or esi, 0x9a9d
pop esi
push ecx
call 0x50dfa1
add byte [eax], bh
dec ecx
dec eax
inc ecx
dec esp
cmp dword [ebx], edi
cmp dword [eax], edi
add esp, 4
or ecx, 0xe651
add ecx, 0x10e72
pop ecx
mov byte [ebp - 0xb78], 0x52
mov byte [ebp - 0xb77], 0xb9
mov byte [ebp - 0xb76], 0x10
mov byte [ebp - 0xb75], 0x10
mov byte [ebp - 0xb74], 0x10
mov byte [ebp - 0xb73], 0x10
mov byte [ebp - 0xb72], 0x5a
push ebx
xor ebx, 0x11549
sub ebx, 0x18245
xor ebx, 0x6316
pop ebx
push eax
push esi
add esp, 4
sub eax, 0xa48b
or eax, 0xa349
sub eax, 0x3aa3
xor eax, 0x15624
pop eax
mov byte [ebp - 0xb80], 0x52
mov byte [ebp - 0xb7f], 0xb9
mov byte [ebp - 0xb7e], 0x20
mov byte [ebp - 0xb7d], 0x20
mov byte [ebp - 0xb7c], 0x20
mov byte [ebp - 0xb7b], 0x20
mov byte [ebp - 0xb7a], 0x5a
push ebx
jmp 0x50e04c
add ebx, 0x15a56
add ebx, 0x18092
pop ebx
push eax
push ecx
add esp, 4
jmp 0x50e064
add al, 0xeb
add al, 0x42
inc eax
dec edi
cmp byte [eax + 0x53], bl
pop eax
push ebx
push edx
add esp, 4
add ebx, 0xdefe
sub ebx, 0xbd72
pop ebx
mov dword [ebp - 0x1fa4], 0xe
push ebx
and ebx, 0x12dd6
and ebx, 0x73eb
pop ebx
push ecx
xor ecx, 0xfea8
and ecx, 0xdf41
call 0x50e0a9
add byte [esi + 0x50], cl
xor dh, byte [ebx]
cmp eax, 0xc4834741
add al, 0x81
int1
jae 0x50e05d
add byte [eax], al
pop ecx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb78]
mov dword [ebp - 0x14bc], eax
push ecx
xor ecx, 0xdcbb
pop ecx
push edx
xor edx, 0x5dff
add edx, 0x134bd
pop edx
push edx
push edx
add esp, 4
call 0x50e0f0
add byte [eax + 0x4a], dl
inc eax
cmp eax, 0x83324449
les eax, [ecx + eax*4]
dec edi
add dword [bx + si], eax
pop edx
mov dword [ebp - 0x1fa8], 0xffffffff
push edx
xor edx, 0x109f2
sub edx, 0xa81
or edx, 0x131f9
pop edx
push ebx
push edi
add esp, 4
call 0x50e12c
add byte [edx + 0x4f], al
dec eax
dec edx
inc eax
dec ecx
inc ebp
cmp byte [ecx - 0x7d], cl
les eax, [ecx + eax*4]
retf
Function at 0x50df33
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edi
push ecx
call 0x50deef
add byte [ebx], dh
cmp dword [0x3f464c33], esi
inc edx
inc ebp
xor al, byte [ebx - 0x167efb3c]
mov edx, 0x59000034
mov ecx, dword [ebp - 0x1fa0]
mov dword [ebp - 0x14b8], ecx
push ecx
or ecx, 0xb771
or ecx, 0x260c
pop ecx
push esi
jmp 0x50df1c
pop esi
push eax
and eax, 0x73ee
call 0x50df33
add byte [ecx], bh
dec ebx
dec ebx
inc ecx
cmp byte [edx + 0x46], al
aas
cmp al, byte [ebx - 0x74a7fb3c]
push ebp
in al, dx
add edx, 0x138
imul eax, dword [ebp - 0x10], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x10], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x14b8], edx
mov edx, dword [ebp - 0x3c0]
mov dword [ebp - 0x1ef8], edx
mov eax, dword [ebp - 0x1ef8]
add eax, dword [ebp - 0x14b8]
mov dword [ebp - 0x3c0], eax
push esi
push ebx
add esp, 4
xor esi, 0x1411f
or esi, 0x9a9d
pop esi
push ecx
call 0x50dfa1
add byte [eax], bh
dec ecx
dec eax
inc ecx
dec esp
cmp dword [ebx], edi
cmp dword [eax], edi
add esp, 4
or ecx, 0xe651
add ecx, 0x10e72
pop ecx
mov byte [ebp - 0xb78], 0x52
mov byte [ebp - 0xb77], 0xb9
mov byte [ebp - 0xb76], 0x10
mov byte [ebp - 0xb75], 0x10
mov byte [ebp - 0xb74], 0x10
mov byte [ebp - 0xb73], 0x10
mov byte [ebp - 0xb72], 0x5a
push ebx
xor ebx, 0x11549
sub ebx, 0x18245
xor ebx, 0x6316
pop ebx
push eax
push esi
add esp, 4
sub eax, 0xa48b
or eax, 0xa349
sub eax, 0x3aa3
xor eax, 0x15624
pop eax
mov byte [ebp - 0xb80], 0x52
mov byte [ebp - 0xb7f], 0xb9
mov byte [ebp - 0xb7e], 0x20
mov byte [ebp - 0xb7d], 0x20
mov byte [ebp - 0xb7c], 0x20
mov byte [ebp - 0xb7b], 0x20
mov byte [ebp - 0xb7a], 0x5a
push ebx
jmp 0x50e04c
add ebx, 0x15a56
add ebx, 0x18092
pop ebx
push eax
push ecx
add esp, 4
jmp 0x50e064
add al, 0xeb
add al, 0x42
inc eax
dec edi
cmp byte [eax + 0x53], bl
pop eax
push ebx
push edx
add esp, 4
add ebx, 0xdefe
sub ebx, 0xbd72
pop ebx
mov dword [ebp - 0x1fa4], 0xe
push ebx
and ebx, 0x12dd6
and ebx, 0x73eb
pop ebx
push ecx
xor ecx, 0xfea8
and ecx, 0xdf41
call 0x50e0a9
add byte [esi + 0x50], cl
xor dh, byte [ebx]
cmp eax, 0xc4834741
add al, 0x81
int1
jae 0x50e05d
add byte [eax], al
pop ecx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb78]
mov dword [ebp - 0x14bc], eax
push ecx
xor ecx, 0xdcbb
pop ecx
push edx
xor edx, 0x5dff
add edx, 0x134bd
pop edx
push edx
push edx
add esp, 4
call 0x50e0f0
add byte [eax + 0x4a], dl
inc eax
cmp eax, 0x83324449
les eax, [ecx + eax*4]
dec edi
add dword [bx + si], eax
pop edx
mov dword [ebp - 0x1fa8], 0xffffffff
push edx
xor edx, 0x109f2
sub edx, 0xa81
or edx, 0x131f9
pop edx
push ebx
push edi
add esp, 4
call 0x50e12c
add byte [edx + 0x4f], al
dec eax
dec edx
inc eax
dec ecx
inc ebp
cmp byte [ecx - 0x7d], cl
les eax, [ecx + eax*4]
retf
Function at 0x50dfa1
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edi
push ecx
call 0x50deef
add byte [ebx], dh
cmp dword [0x3f464c33], esi
inc edx
inc ebp
xor al, byte [ebx - 0x167efb3c]
mov edx, 0x59000034
mov ecx, dword [ebp - 0x1fa0]
mov dword [ebp - 0x14b8], ecx
push ecx
or ecx, 0xb771
or ecx, 0x260c
pop ecx
push esi
jmp 0x50df1c
pop esi
push eax
and eax, 0x73ee
call 0x50df33
add byte [ecx], bh
dec ebx
dec ebx
inc ecx
cmp byte [edx + 0x46], al
aas
cmp al, byte [ebx - 0x74a7fb3c]
push ebp
in al, dx
add edx, 0x138
imul eax, dword [ebp - 0x10], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x10], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x14b8], edx
mov edx, dword [ebp - 0x3c0]
mov dword [ebp - 0x1ef8], edx
mov eax, dword [ebp - 0x1ef8]
add eax, dword [ebp - 0x14b8]
mov dword [ebp - 0x3c0], eax
push esi
push ebx
add esp, 4
xor esi, 0x1411f
or esi, 0x9a9d
pop esi
push ecx
call 0x50dfa1
add byte [eax], bh
dec ecx
dec eax
inc ecx
dec esp
cmp dword [ebx], edi
cmp dword [eax], edi
add esp, 4
or ecx, 0xe651
add ecx, 0x10e72
pop ecx
mov byte [ebp - 0xb78], 0x52
mov byte [ebp - 0xb77], 0xb9
mov byte [ebp - 0xb76], 0x10
mov byte [ebp - 0xb75], 0x10
mov byte [ebp - 0xb74], 0x10
mov byte [ebp - 0xb73], 0x10
mov byte [ebp - 0xb72], 0x5a
push ebx
xor ebx, 0x11549
sub ebx, 0x18245
xor ebx, 0x6316
pop ebx
push eax
push esi
add esp, 4
sub eax, 0xa48b
or eax, 0xa349
sub eax, 0x3aa3
xor eax, 0x15624
pop eax
mov byte [ebp - 0xb80], 0x52
mov byte [ebp - 0xb7f], 0xb9
mov byte [ebp - 0xb7e], 0x20
mov byte [ebp - 0xb7d], 0x20
mov byte [ebp - 0xb7c], 0x20
mov byte [ebp - 0xb7b], 0x20
mov byte [ebp - 0xb7a], 0x5a
push ebx
jmp 0x50e04c
add ebx, 0x15a56
add ebx, 0x18092
pop ebx
push eax
push ecx
add esp, 4
jmp 0x50e064
add al, 0xeb
add al, 0x42
inc eax
dec edi
cmp byte [eax + 0x53], bl
pop eax
push ebx
push edx
add esp, 4
add ebx, 0xdefe
sub ebx, 0xbd72
pop ebx
mov dword [ebp - 0x1fa4], 0xe
push ebx
and ebx, 0x12dd6
and ebx, 0x73eb
pop ebx
push ecx
xor ecx, 0xfea8
and ecx, 0xdf41
call 0x50e0a9
add byte [esi + 0x50], cl
xor dh, byte [ebx]
cmp eax, 0xc4834741
add al, 0x81
int1
jae 0x50e05d
add byte [eax], al
pop ecx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb78]
mov dword [ebp - 0x14bc], eax
push ecx
xor ecx, 0xdcbb
pop ecx
push edx
xor edx, 0x5dff
add edx, 0x134bd
pop edx
push edx
push edx
add esp, 4
call 0x50e0f0
add byte [eax + 0x4a], dl
inc eax
cmp eax, 0x83324449
les eax, [ecx + eax*4]
dec edi
add dword [bx + si], eax
pop edx
mov dword [ebp - 0x1fa8], 0xffffffff
push edx
xor edx, 0x109f2
sub edx, 0xa81
or edx, 0x131f9
pop edx
push ebx
push edi
add esp, 4
call 0x50e12c
add byte [edx + 0x4f], al
dec eax
dec edx
inc eax
dec ecx
inc ebp
cmp byte [ecx - 0x7d], cl
les eax, [ecx + eax*4]
retf
Function at 0x50e0a9
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edi
push ecx
call 0x50deef
add byte [ebx], dh
cmp dword [0x3f464c33], esi
inc edx
inc ebp
xor al, byte [ebx - 0x167efb3c]
mov edx, 0x59000034
mov ecx, dword [ebp - 0x1fa0]
mov dword [ebp - 0x14b8], ecx
push ecx
or ecx, 0xb771
or ecx, 0x260c
pop ecx
push esi
jmp 0x50df1c
pop esi
push eax
and eax, 0x73ee
call 0x50df33
add byte [ecx], bh
dec ebx
dec ebx
inc ecx
cmp byte [edx + 0x46], al
aas
cmp al, byte [ebx - 0x74a7fb3c]
push ebp
in al, dx
add edx, 0x138
imul eax, dword [ebp - 0x10], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x10], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x14b8], edx
mov edx, dword [ebp - 0x3c0]
mov dword [ebp - 0x1ef8], edx
mov eax, dword [ebp - 0x1ef8]
add eax, dword [ebp - 0x14b8]
mov dword [ebp - 0x3c0], eax
push esi
push ebx
add esp, 4
xor esi, 0x1411f
or esi, 0x9a9d
pop esi
push ecx
call 0x50dfa1
add byte [eax], bh
dec ecx
dec eax
inc ecx
dec esp
cmp dword [ebx], edi
cmp dword [eax], edi
add esp, 4
or ecx, 0xe651
add ecx, 0x10e72
pop ecx
mov byte [ebp - 0xb78], 0x52
mov byte [ebp - 0xb77], 0xb9
mov byte [ebp - 0xb76], 0x10
mov byte [ebp - 0xb75], 0x10
mov byte [ebp - 0xb74], 0x10
mov byte [ebp - 0xb73], 0x10
mov byte [ebp - 0xb72], 0x5a
push ebx
xor ebx, 0x11549
sub ebx, 0x18245
xor ebx, 0x6316
pop ebx
push eax
push esi
add esp, 4
sub eax, 0xa48b
or eax, 0xa349
sub eax, 0x3aa3
xor eax, 0x15624
pop eax
mov byte [ebp - 0xb80], 0x52
mov byte [ebp - 0xb7f], 0xb9
mov byte [ebp - 0xb7e], 0x20
mov byte [ebp - 0xb7d], 0x20
mov byte [ebp - 0xb7c], 0x20
mov byte [ebp - 0xb7b], 0x20
mov byte [ebp - 0xb7a], 0x5a
push ebx
jmp 0x50e04c
add ebx, 0x15a56
add ebx, 0x18092
pop ebx
push eax
push ecx
add esp, 4
jmp 0x50e064
add al, 0xeb
add al, 0x42
inc eax
dec edi
cmp byte [eax + 0x53], bl
pop eax
push ebx
push edx
add esp, 4
add ebx, 0xdefe
sub ebx, 0xbd72
pop ebx
mov dword [ebp - 0x1fa4], 0xe
push ebx
and ebx, 0x12dd6
and ebx, 0x73eb
pop ebx
push ecx
xor ecx, 0xfea8
and ecx, 0xdf41
call 0x50e0a9
add byte [esi + 0x50], cl
xor dh, byte [ebx]
cmp eax, 0xc4834741
add al, 0x81
int1
jae 0x50e05d
add byte [eax], al
pop ecx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb78]
mov dword [ebp - 0x14bc], eax
push ecx
xor ecx, 0xdcbb
pop ecx
push edx
xor edx, 0x5dff
add edx, 0x134bd
pop edx
push edx
push edx
add esp, 4
call 0x50e0f0
add byte [eax + 0x4a], dl
inc eax
cmp eax, 0x83324449
les eax, [ecx + eax*4]
dec edi
add dword [bx + si], eax
pop edx
mov dword [ebp - 0x1fa8], 0xffffffff
push edx
xor edx, 0x109f2
sub edx, 0xa81
or edx, 0x131f9
pop edx
push ebx
push edi
add esp, 4
call 0x50e12c
add byte [edx + 0x4f], al
dec eax
dec edx
inc eax
dec ecx
inc ebp
cmp byte [ecx - 0x7d], cl
les eax, [ecx + eax*4]
retf
Function at 0x50e0f0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edi
push ecx
call 0x50deef
add byte [ebx], dh
cmp dword [0x3f464c33], esi
inc edx
inc ebp
xor al, byte [ebx - 0x167efb3c]
mov edx, 0x59000034
mov ecx, dword [ebp - 0x1fa0]
mov dword [ebp - 0x14b8], ecx
push ecx
or ecx, 0xb771
or ecx, 0x260c
pop ecx
push esi
jmp 0x50df1c
pop esi
push eax
and eax, 0x73ee
call 0x50df33
add byte [ecx], bh
dec ebx
dec ebx
inc ecx
cmp byte [edx + 0x46], al
aas
cmp al, byte [ebx - 0x74a7fb3c]
push ebp
in al, dx
add edx, 0x138
imul eax, dword [ebp - 0x10], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x10], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x14b8], edx
mov edx, dword [ebp - 0x3c0]
mov dword [ebp - 0x1ef8], edx
mov eax, dword [ebp - 0x1ef8]
add eax, dword [ebp - 0x14b8]
mov dword [ebp - 0x3c0], eax
push esi
push ebx
add esp, 4
xor esi, 0x1411f
or esi, 0x9a9d
pop esi
push ecx
call 0x50dfa1
add byte [eax], bh
dec ecx
dec eax
inc ecx
dec esp
cmp dword [ebx], edi
cmp dword [eax], edi
add esp, 4
or ecx, 0xe651
add ecx, 0x10e72
pop ecx
mov byte [ebp - 0xb78], 0x52
mov byte [ebp - 0xb77], 0xb9
mov byte [ebp - 0xb76], 0x10
mov byte [ebp - 0xb75], 0x10
mov byte [ebp - 0xb74], 0x10
mov byte [ebp - 0xb73], 0x10
mov byte [ebp - 0xb72], 0x5a
push ebx
xor ebx, 0x11549
sub ebx, 0x18245
xor ebx, 0x6316
pop ebx
push eax
push esi
add esp, 4
sub eax, 0xa48b
or eax, 0xa349
sub eax, 0x3aa3
xor eax, 0x15624
pop eax
mov byte [ebp - 0xb80], 0x52
mov byte [ebp - 0xb7f], 0xb9
mov byte [ebp - 0xb7e], 0x20
mov byte [ebp - 0xb7d], 0x20
mov byte [ebp - 0xb7c], 0x20
mov byte [ebp - 0xb7b], 0x20
mov byte [ebp - 0xb7a], 0x5a
push ebx
jmp 0x50e04c
add ebx, 0x15a56
add ebx, 0x18092
pop ebx
push eax
push ecx
add esp, 4
jmp 0x50e064
add al, 0xeb
add al, 0x42
inc eax
dec edi
cmp byte [eax + 0x53], bl
pop eax
push ebx
push edx
add esp, 4
add ebx, 0xdefe
sub ebx, 0xbd72
pop ebx
mov dword [ebp - 0x1fa4], 0xe
push ebx
and ebx, 0x12dd6
and ebx, 0x73eb
pop ebx
push ecx
xor ecx, 0xfea8
and ecx, 0xdf41
call 0x50e0a9
add byte [esi + 0x50], cl
xor dh, byte [ebx]
cmp eax, 0xc4834741
add al, 0x81
int1
jae 0x50e05d
add byte [eax], al
pop ecx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb78]
mov dword [ebp - 0x14bc], eax
push ecx
xor ecx, 0xdcbb
pop ecx
push edx
xor edx, 0x5dff
add edx, 0x134bd
pop edx
push edx
push edx
add esp, 4
call 0x50e0f0
add byte [eax + 0x4a], dl
inc eax
cmp eax, 0x83324449
les eax, [ecx + eax*4]
dec edi
add dword [bx + si], eax
pop edx
mov dword [ebp - 0x1fa8], 0xffffffff
push edx
xor edx, 0x109f2
sub edx, 0xa81
or edx, 0x131f9
pop edx
push ebx
push edi
add esp, 4
call 0x50e12c
add byte [edx + 0x4f], al
dec eax
dec edx
inc eax
dec ecx
inc ebp
cmp byte [ecx - 0x7d], cl
les eax, [ecx + eax*4]
retf
Function at 0x50e12c
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edi
push ecx
call 0x50deef
add byte [ebx], dh
cmp dword [0x3f464c33], esi
inc edx
inc ebp
xor al, byte [ebx - 0x167efb3c]
mov edx, 0x59000034
mov ecx, dword [ebp - 0x1fa0]
mov dword [ebp - 0x14b8], ecx
push ecx
or ecx, 0xb771
or ecx, 0x260c
pop ecx
push esi
jmp 0x50df1c
pop esi
push eax
and eax, 0x73ee
call 0x50df33
add byte [ecx], bh
dec ebx
dec ebx
inc ecx
cmp byte [edx + 0x46], al
aas
cmp al, byte [ebx - 0x74a7fb3c]
push ebp
in al, dx
add edx, 0x138
imul eax, dword [ebp - 0x10], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x10], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x14b8], edx
mov edx, dword [ebp - 0x3c0]
mov dword [ebp - 0x1ef8], edx
mov eax, dword [ebp - 0x1ef8]
add eax, dword [ebp - 0x14b8]
mov dword [ebp - 0x3c0], eax
push esi
push ebx
add esp, 4
xor esi, 0x1411f
or esi, 0x9a9d
pop esi
push ecx
call 0x50dfa1
add byte [eax], bh
dec ecx
dec eax
inc ecx
dec esp
cmp dword [ebx], edi
cmp dword [eax], edi
add esp, 4
or ecx, 0xe651
add ecx, 0x10e72
pop ecx
mov byte [ebp - 0xb78], 0x52
mov byte [ebp - 0xb77], 0xb9
mov byte [ebp - 0xb76], 0x10
mov byte [ebp - 0xb75], 0x10
mov byte [ebp - 0xb74], 0x10
mov byte [ebp - 0xb73], 0x10
mov byte [ebp - 0xb72], 0x5a
push ebx
xor ebx, 0x11549
sub ebx, 0x18245
xor ebx, 0x6316
pop ebx
push eax
push esi
add esp, 4
sub eax, 0xa48b
or eax, 0xa349
sub eax, 0x3aa3
xor eax, 0x15624
pop eax
mov byte [ebp - 0xb80], 0x52
mov byte [ebp - 0xb7f], 0xb9
mov byte [ebp - 0xb7e], 0x20
mov byte [ebp - 0xb7d], 0x20
mov byte [ebp - 0xb7c], 0x20
mov byte [ebp - 0xb7b], 0x20
mov byte [ebp - 0xb7a], 0x5a
push ebx
jmp 0x50e04c
add ebx, 0x15a56
add ebx, 0x18092
pop ebx
push eax
push ecx
add esp, 4
jmp 0x50e064
add al, 0xeb
add al, 0x42
inc eax
dec edi
cmp byte [eax + 0x53], bl
pop eax
push ebx
push edx
add esp, 4
add ebx, 0xdefe
sub ebx, 0xbd72
pop ebx
mov dword [ebp - 0x1fa4], 0xe
push ebx
and ebx, 0x12dd6
and ebx, 0x73eb
pop ebx
push ecx
xor ecx, 0xfea8
and ecx, 0xdf41
call 0x50e0a9
add byte [esi + 0x50], cl
xor dh, byte [ebx]
cmp eax, 0xc4834741
add al, 0x81
int1
jae 0x50e05d
add byte [eax], al
pop ecx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb78]
mov dword [ebp - 0x14bc], eax
push ecx
xor ecx, 0xdcbb
pop ecx
push edx
xor edx, 0x5dff
add edx, 0x134bd
pop edx
push edx
push edx
add esp, 4
call 0x50e0f0
add byte [eax + 0x4a], dl
inc eax
cmp eax, 0x83324449
les eax, [ecx + eax*4]
dec edi
add dword [bx + si], eax
pop edx
mov dword [ebp - 0x1fa8], 0xffffffff
push edx
xor edx, 0x109f2
sub edx, 0xa81
or edx, 0x131f9
pop edx
push ebx
push edi
add esp, 4
call 0x50e12c
add byte [edx + 0x4f], al
dec eax
dec edx
inc eax
dec ecx
inc ebp
cmp byte [ecx - 0x7d], cl
les eax, [ecx + eax*4]
retf
Function at 0x50ef78
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edi
push esi
add esp, 4
xor edi, 0xfb02
or edi, 0x2a51
pop edi
push esi
push eax
add esp, 4
and esi, 0xa7b7
or esi, 0xacd8
xor esi, 0x62e
pop esi
push edi
and edi, 0xada0
pop edi
lea edx, [ebp - 0x16cc]
mov dword [ebp - 0xc28], edx
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc24], ecx
xor edx, edx
mov word [ebp - 0x1fc], dx
xor eax, eax
mov word [ebp - 0x104], ax
push edi
add edi, 0x7c5b
and edi, 0xd21f
pop edi
push ebx
push esi
add esp, 4
or ebx, 0x1541f
pop ebx
push ebx
push eax
add esp, 4
or ebx, 0x4db
and ebx, 0x9e5c
and ebx, 0x11ff6
pop ebx
mov ecx, dword [ebp - 0xc24]
mov dx, word [ecx]
mov word [ebp - 0xf82], dx
mov eax, dword [ebp - 0xc24]
add eax, 2
mov dword [ebp - 0xc24], eax
mov cx, word [ebp - 0xf82]
mov word [ebp - 0x1fc], cx
mov edx, dword [ebp - 0xc28]
mov ax, word [edx]
mov word [ebp - 0xf84], ax
mov ecx, dword [ebp - 0xc28]
add ecx, 2
mov dword [ebp - 0xc28], ecx
mov dx, word [ebp - 0xf84]
mov word [ebp - 0x104], dx
push ecx
push eax
add esp, 4
add ecx, 0x14e58
or ecx, 0x7547
or ecx, 0x10f31
add ecx, 0x7529
pop ecx
push ecx
push ebx
add esp, 4
jmp 0x50f056
and ecx, 0x35ee
pop ecx
movzx eax, word [ebp - 0x104]
test eax, eax
jne 0x50f080
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
sub ecx, edx
mov dword [ebp - 0x14e4], ecx
jmp 0x50f0e3
movzx eax, word [ebp - 0x1fc]
movzx ecx, word [ebp - 0x104]
cmp eax, ecx
je 0x50ef9f
movzx edx, word [ebp - 0x1fc]
xor edx, 0x20
movzx eax, word [ebp - 0x104]
cmp edx, eax
je 0x50ef9f
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
cmp ecx, edx
jge 0x50f0cd
mov dword [ebp - 0x14e0], 0xffffffff
jmp 0x50f0d7
mov dword [ebp - 0x14e0], 1
mov eax, dword [ebp - 0x14e0]
mov dword [ebp - 0x14e4], eax
cmp dword [ebp - 0x14e4], 0
jne 0x50f12c
push eax
push ecx
add esp, 4
jmp 0x50f0f7
or eax, 0x7a3b
pop eax
push eax
or eax, 0xbc2
jmp 0x50f10b
pop eax
push esi
push ebx
add esp, 4
and esi, 0x625f
or esi, 0x7402
pop esi
mov ecx, dword [ebp - 0x4d8]
mov dword [ebp - 0x6ec], ecx
jmp 0x50f194
push eax
push edx
add esp, 4
jmp 0x50f136
pop eax
push esi
sub esi, 0x143cb
pop esi
push edx
call 0x50f14c
add byte [0x3d383e3a], bh
dec edx
add esp, 4
xor edx, 0x185e4
jmp 0x50f15d
pop edx
mov edx, dword [ebp - 0x4d8]
mov eax, dword [edx]
mov dword [ebp - 0x4d8], eax
mov ecx, dword [ebp - 0x4d8]
cmp ecx, dword [ebp - 0xc2c]
je 0x50f18a
mov edx, dword [ebp - 0x4d8]
cmp dword [edx + 0x30], 0
jne 0x50ef40
mov dword [ebp - 0x6ec], 0
Function at 0x50f14c
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edi
push esi
add esp, 4
xor edi, 0xfb02
or edi, 0x2a51
pop edi
push esi
push eax
add esp, 4
and esi, 0xa7b7
or esi, 0xacd8
xor esi, 0x62e
pop esi
push edi
and edi, 0xada0
pop edi
lea edx, [ebp - 0x16cc]
mov dword [ebp - 0xc28], edx
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc24], ecx
xor edx, edx
mov word [ebp - 0x1fc], dx
xor eax, eax
mov word [ebp - 0x104], ax
push edi
add edi, 0x7c5b
and edi, 0xd21f
pop edi
push ebx
push esi
add esp, 4
or ebx, 0x1541f
pop ebx
push ebx
push eax
add esp, 4
or ebx, 0x4db
and ebx, 0x9e5c
and ebx, 0x11ff6
pop ebx
mov ecx, dword [ebp - 0xc24]
mov dx, word [ecx]
mov word [ebp - 0xf82], dx
mov eax, dword [ebp - 0xc24]
add eax, 2
mov dword [ebp - 0xc24], eax
mov cx, word [ebp - 0xf82]
mov word [ebp - 0x1fc], cx
mov edx, dword [ebp - 0xc28]
mov ax, word [edx]
mov word [ebp - 0xf84], ax
mov ecx, dword [ebp - 0xc28]
add ecx, 2
mov dword [ebp - 0xc28], ecx
mov dx, word [ebp - 0xf84]
mov word [ebp - 0x104], dx
push ecx
push eax
add esp, 4
add ecx, 0x14e58
or ecx, 0x7547
or ecx, 0x10f31
add ecx, 0x7529
pop ecx
push ecx
push ebx
add esp, 4
jmp 0x50f056
and ecx, 0x35ee
pop ecx
movzx eax, word [ebp - 0x104]
test eax, eax
jne 0x50f080
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
sub ecx, edx
mov dword [ebp - 0x14e4], ecx
jmp 0x50f0e3
movzx eax, word [ebp - 0x1fc]
movzx ecx, word [ebp - 0x104]
cmp eax, ecx
je 0x50ef9f
movzx edx, word [ebp - 0x1fc]
xor edx, 0x20
movzx eax, word [ebp - 0x104]
cmp edx, eax
je 0x50ef9f
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
cmp ecx, edx
jge 0x50f0cd
mov dword [ebp - 0x14e0], 0xffffffff
jmp 0x50f0d7
mov dword [ebp - 0x14e0], 1
mov eax, dword [ebp - 0x14e0]
mov dword [ebp - 0x14e4], eax
cmp dword [ebp - 0x14e4], 0
jne 0x50f12c
push eax
push ecx
add esp, 4
jmp 0x50f0f7
or eax, 0x7a3b
pop eax
push eax
or eax, 0xbc2
jmp 0x50f10b
pop eax
push esi
push ebx
add esp, 4
and esi, 0x625f
or esi, 0x7402
pop esi
mov ecx, dword [ebp - 0x4d8]
mov dword [ebp - 0x6ec], ecx
jmp 0x50f194
push eax
push edx
add esp, 4
jmp 0x50f136
pop eax
push esi
sub esi, 0x143cb
pop esi
push edx
call 0x50f14c
add byte [0x3d383e3a], bh
dec edx
add esp, 4
xor edx, 0x185e4
jmp 0x50f15d
pop edx
mov edx, dword [ebp - 0x4d8]
mov eax, dword [edx]
mov dword [ebp - 0x4d8], eax
mov ecx, dword [ebp - 0x4d8]
cmp ecx, dword [ebp - 0xc2c]
je 0x50f18a
mov edx, dword [ebp - 0x4d8]
cmp dword [edx + 0x30], 0
jne 0x50ef40
mov dword [ebp - 0x6ec], 0
Function at 0x5101bd
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop eax
push ebx
push ecx
add esp, 4
add ebx, 0x10e43
sub ebx, 0x10ce8
jmp 0x5101d7
pop ebx
mov ecx, dword [ebp - 0x4e4]
mov dword [ebp - 0x2a8], ecx
jmp 0x51024e

Function at 0x51020a
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop ecx
push esi
jmp 0x510217
pop esi
mov edx, dword [ebp - 0x4e4]
mov eax, dword [edx]
mov dword [ebp - 0x4e4], eax
mov ecx, dword [ebp - 0x4e4]
cmp ecx, dword [ebp - 0xc4c]
je 0x510244
mov edx, dword [ebp - 0x4e4]
cmp dword [edx + 0x30], 0
jne 0x51000f
mov dword [ebp - 0x2a8], 0