joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10001551
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
xor ecx, 0x9c09
sub ecx, 0x756b
pop ecx
mov edx, dword [ebp - 0x23c8]
add edx, 1
mov dword [ebp - 0x18b4], edx
push eax
push ecx
add esp, 4
xor eax, 0xe2ab
pop eax
push edx
push eax
add esp, 4
jmp 0x10001586
pop edx
push ecx
add ecx, 0x4ae1
jmp 0x10001593
pop ecx
push ebx
xor ebx, 0x16648
xor ebx, 0x76f2
pop ebx
push ebx
push esi
add esp, 4
call 0x100015b7
add byte [edx + 0x40], al
cmp byte [ebx], dh
inc edi
inc edx
inc esp
cmp dh, byte [edx + eax*2]
add esp, 4
pop ebx
push ecx
jmp 0x100015c1
call 0x100015d0
add byte [edx], bh
dec ebx
inc esp
xor eax, 0x3c3d473f
add esp, 4
pop ecx
imul eax, dword [ebp - 0x34], 0xfe
add eax, 0x56f3663b
imul ecx, dword [ebp - 0x34], 0xfe
sub eax, ecx
xor eax, dword [ebp - 0x18b4]
imul eax, dword [ebp - 0x34]
imul edx, dword [ebp - 0x34], 0xfe
sub eax, edx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x18b4]
imul eax, dword [ebp - 0x34]
mov dword [ebp - 0x24b4], eax
mov dword [ebp - 0x1940], 1
push ebx
sub ebx, 0xc8a6
xor ebx, 0x1663f
pop ebx
push edi
jmp 0x1000162f
add edi, 0x1416
pop edi
push esi
xor esi, 0xad9
xor esi, 0x31b3
jmp 0x1000164a
pop esi
imul ecx, dword [ebp - 0x1940], 0xfe
add ecx, 0x56f3663b
imul edx, dword [ebp - 0x1940], 0xfe
sub ecx, edx
xor ecx, dword [ebp - 0x24b4]
imul ecx, dword [ebp - 0x1940]
imul eax, dword [ebp - 0x1940], 0xfe
sub ecx, eax
mov dword [ebp - 0x1944], ecx

Function at 0x100015b7
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
xor ecx, 0x9c09
sub ecx, 0x756b
pop ecx
mov edx, dword [ebp - 0x23c8]
add edx, 1
mov dword [ebp - 0x18b4], edx
push eax
push ecx
add esp, 4
xor eax, 0xe2ab
pop eax
push edx
push eax
add esp, 4
jmp 0x10001586
pop edx
push ecx
add ecx, 0x4ae1
jmp 0x10001593
pop ecx
push ebx
xor ebx, 0x16648
xor ebx, 0x76f2
pop ebx
push ebx
push esi
add esp, 4
call 0x100015b7
add byte [edx + 0x40], al
cmp byte [ebx], dh
inc edi
inc edx
inc esp
cmp dh, byte [edx + eax*2]
add esp, 4
pop ebx
push ecx
jmp 0x100015c1
call 0x100015d0
add byte [edx], bh
dec ebx
inc esp
xor eax, 0x3c3d473f
add esp, 4
pop ecx
imul eax, dword [ebp - 0x34], 0xfe
add eax, 0x56f3663b
imul ecx, dword [ebp - 0x34], 0xfe
sub eax, ecx
xor eax, dword [ebp - 0x18b4]
imul eax, dword [ebp - 0x34]
imul edx, dword [ebp - 0x34], 0xfe
sub eax, edx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x18b4]
imul eax, dword [ebp - 0x34]
mov dword [ebp - 0x24b4], eax
mov dword [ebp - 0x1940], 1
push ebx
sub ebx, 0xc8a6
xor ebx, 0x1663f
pop ebx
push edi
jmp 0x1000162f
add edi, 0x1416
pop edi
push esi
xor esi, 0xad9
xor esi, 0x31b3
jmp 0x1000164a
pop esi
imul ecx, dword [ebp - 0x1940], 0xfe
add ecx, 0x56f3663b
imul edx, dword [ebp - 0x1940], 0xfe
sub ecx, edx
xor ecx, dword [ebp - 0x24b4]
imul ecx, dword [ebp - 0x1940]
imul eax, dword [ebp - 0x1940], 0xfe
sub ecx, eax
mov dword [ebp - 0x1944], ecx
Function at 0x100015d0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
xor ecx, 0x9c09
sub ecx, 0x756b
pop ecx
mov edx, dword [ebp - 0x23c8]
add edx, 1
mov dword [ebp - 0x18b4], edx
push eax
push ecx
add esp, 4
xor eax, 0xe2ab
pop eax
push edx
push eax
add esp, 4
jmp 0x10001586
pop edx
push ecx
add ecx, 0x4ae1
jmp 0x10001593
pop ecx
push ebx
xor ebx, 0x16648
xor ebx, 0x76f2
pop ebx
push ebx
push esi
add esp, 4
call 0x100015b7
add byte [edx + 0x40], al
cmp byte [ebx], dh
inc edi
inc edx
inc esp
cmp dh, byte [edx + eax*2]
add esp, 4
pop ebx
push ecx
jmp 0x100015c1
call 0x100015d0
add byte [edx], bh
dec ebx
inc esp
xor eax, 0x3c3d473f
add esp, 4
pop ecx
imul eax, dword [ebp - 0x34], 0xfe
add eax, 0x56f3663b
imul ecx, dword [ebp - 0x34], 0xfe
sub eax, ecx
xor eax, dword [ebp - 0x18b4]
imul eax, dword [ebp - 0x34]
imul edx, dword [ebp - 0x34], 0xfe
sub eax, edx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x18b4]
imul eax, dword [ebp - 0x34]
mov dword [ebp - 0x24b4], eax
mov dword [ebp - 0x1940], 1
push ebx
sub ebx, 0xc8a6
xor ebx, 0x1663f
pop ebx
push edi
jmp 0x1000162f
add edi, 0x1416
pop edi
push esi
xor esi, 0xad9
xor esi, 0x31b3
jmp 0x1000164a
pop esi
imul ecx, dword [ebp - 0x1940], 0xfe
add ecx, 0x56f3663b
imul edx, dword [ebp - 0x1940], 0xfe
sub ecx, edx
xor ecx, dword [ebp - 0x24b4]
imul ecx, dword [ebp - 0x1940]
imul eax, dword [ebp - 0x1940], 0xfe
sub ecx, eax
mov dword [ebp - 0x1944], ecx
Function at 0x10003850
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
xor eax, ecx
imul eax, dword [ebp - 0x18]
mov dword [ebp - 0x25d4], eax
mov eax, dword [ebp - 0x25d4]
mov dword [ebp - 0x25d8], eax
mov ecx, dword [ebp - 0x25d8]
sub ecx, 0xbb8
mov dword [ebp - 0x25dc], ecx
mov dword [ebp - 0x1320], 1
push ecx
push ebx
add esp, 4
sub ecx, 0x150ea
add ecx, 0x9951
pop ecx
push edi
push esi
add esp, 4
jmp 0x10003790
jmp 0x10003799
and edi, 0x1087f
or edi, 0x4b
pop edi
imul edx, dword [ebp - 0x1320], 0xfe
add edx, 0x56f3663b
imul eax, dword [ebp - 0x1320], 0xfe
sub edx, eax
xor edx, dword [ebp - 0x25dc]
imul edx, dword [ebp - 0x1320]
imul ecx, dword [ebp - 0x1320], 0xfe
sub edx, ecx
mov dword [ebp - 0x1324], edx
mov edx, dword [ebp - 0x1324]
mov eax, dword [ebp - 0x1320]
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x18], eax
push ebx
jmp 0x100037fb
pop ebx
push edx
push esi
add esp, 4
and edx, 0x3425
add edx, 0xafa7
or edx, 0x416
or edx, 0x13c0b
pop edx
push eax
jmp 0x10003824
pop eax
push edi
push ebx
add esp, 4
and edi, 0x8745
add edi, 0x15727
and edi, 0x101df
pop edi
push ecx
and ecx, 0x5719
call 0x10003853
add byte [0x3c4c4834], bh
cmp al, 0x49
dec ecx
dec edi
inc eax
add esp, 4
pop ecx
mov ecx, dword [ebp - 0x38]
add ecx, 0xfe
imul edx, dword [ebp - 0x34], 0xfe
add edx, 0x56f3663b
imul eax, dword [ebp - 0x34], 0xfe
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x34]
mov dword [ebp - 0x25e0], ecx
mov ecx, dword [ebp - 0x25e0]
mov dword [ebp - 0x25e4], ecx
cmp dword [ebp - 0x25e4], 0x9e7
jne 0x10004832
push eax
xor eax, 0x128b2
sub eax, 0xa65
add eax, 0x27a0
pop eax
push edx
push eax
add esp, 4
add edx, 0x1200b
pop edx
push ecx
push edi
add esp, 4
xor ecx, 0xde53
add ecx, 0x14bc4
pop ecx
push edi
add edi, 0x14801
pop edi
push eax
push ecx
add esp, 4
jmp 0x100038e5
pop eax
push ecx
jmp 0x100038ef
or ecx, 0xf47f
pop ecx
push edi
push ecx
add esp, 4
or edi, 0x9c86
pop edi
mov edx, dword [ebp - 0x1c]
add edx, 0xfe
imul eax, dword [ebp - 0x18], 0xfe
add eax, 0x56f3663b
imul ecx, dword [ebp - 0x18], 0xfe
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x18]
mov dword [ebp - 0x25e8], edx
mov edx, dword [ebp - 0x25e8]
mov dword [ebp - 0x25ec], edx
mov eax, dword [ebp - 0x25ec]
sub eax, 0xec
mov dword [ebp - 0x25f0], eax
mov dword [ebp - 0x1328], 1
push edi
call 0x10003961
add byte [edi + 0x4c], cl
dec ebx
xor al, 0x4a
cmp al, 0x34
add esp, 4
pop edi
push ecx
push ebx
add esp, 4
sub ecx, 0x16493
Function at 0x10003fc4
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
call 0x10003fd3
add byte [edi + 0x44], al
aas
cmp cl, byte [edx + edi - 0x7d]
les eax, [eax + ebx*2]
mov edx, dword [ebp - 0x2610]
sub edx, 1
mov dword [ebp - 0x18cc], edx
push edi
push eax
add esp, 4
and edi, 0x564b
and edi, 0x98c5
or edi, 0x14719
pop edi
push edi
or edi, 0x17626
pop edi
push ebx
push edx
add esp, 4
xor ebx, 0x15dcc
or ebx, 0x9bb8
pop ebx
push esi
push eax
add esp, 4
sub esi, 0xc9db
pop esi
push eax
add eax, 0x10ec8
add eax, 0xd57b
pop eax
push edi
push edx
add esp, 4
or edi, 0x13ad1
add edi, 0x1360d
add edi, 0xbd5b
pop edi
imul eax, dword [ebp - 0x2c4], 0xfe
add eax, 0x56f3663b
imul ecx, dword [ebp - 0x2c4], 0xfe
sub eax, ecx
xor eax, dword [ebp - 0x18cc]
imul eax, dword [ebp - 0x2c4]
imul edx, dword [ebp - 0x2c4], 0xfe
sub eax, edx
mov dword [ebp - 0x2c8], eax
mov eax, dword [ebp - 0x18cc]
imul eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x2614], eax
mov dword [ebp - 0x1978], 1
push ecx
push edx
add esp, 4
add ecx, 0x145d9
and ecx, 0x67d4
and ecx, 0x14bda
or ecx, 0x87fc
pop ecx
push edx
jmp 0x100040c6
and edx, 0x11a9e
add edx, 0xb155
pop edx
imul ecx, dword [ebp - 0x1978], 0xfe
add ecx, 0x56f3663b
imul edx, dword [ebp - 0x1978], 0xfe
sub ecx, edx
xor ecx, dword [ebp - 0x2614]
imul ecx, dword [ebp - 0x1978]
imul eax, dword [ebp - 0x1978], 0xfe
sub ecx, eax
mov dword [ebp - 0x197c], ecx

Function at 0x10003fd3
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
call 0x10003fd3
add byte [edi + 0x44], al
aas
cmp cl, byte [edx + edi - 0x7d]
les eax, [eax + ebx*2]
mov edx, dword [ebp - 0x2610]
sub edx, 1
mov dword [ebp - 0x18cc], edx
push edi
push eax
add esp, 4
and edi, 0x564b
and edi, 0x98c5
or edi, 0x14719
pop edi
push edi
or edi, 0x17626
pop edi
push ebx
push edx
add esp, 4
xor ebx, 0x15dcc
or ebx, 0x9bb8
pop ebx
push esi
push eax
add esp, 4
sub esi, 0xc9db
pop esi
push eax
add eax, 0x10ec8
add eax, 0xd57b
pop eax
push edi
push edx
add esp, 4
or edi, 0x13ad1
add edi, 0x1360d
add edi, 0xbd5b
pop edi
imul eax, dword [ebp - 0x2c4], 0xfe
add eax, 0x56f3663b
imul ecx, dword [ebp - 0x2c4], 0xfe
sub eax, ecx
xor eax, dword [ebp - 0x18cc]
imul eax, dword [ebp - 0x2c4]
imul edx, dword [ebp - 0x2c4], 0xfe
sub eax, edx
mov dword [ebp - 0x2c8], eax
mov eax, dword [ebp - 0x18cc]
imul eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x2614], eax
mov dword [ebp - 0x1978], 1
push ecx
push edx
add esp, 4
add ecx, 0x145d9
and ecx, 0x67d4
and ecx, 0x14bda
or ecx, 0x87fc
pop ecx
push edx
jmp 0x100040c6
and edx, 0x11a9e
add edx, 0xb155
pop edx
imul ecx, dword [ebp - 0x1978], 0xfe
add ecx, 0x56f3663b
imul edx, dword [ebp - 0x1978], 0xfe
sub ecx, edx
xor ecx, dword [ebp - 0x2614]
imul ecx, dword [ebp - 0x1978]
imul eax, dword [ebp - 0x1978], 0xfe
sub ecx, eax
mov dword [ebp - 0x197c], ecx
Function at 0x1000466f
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
or edx, 0x16e14
add edx, 0x16fd1
xor edx, 0x7fa5
pop edx
push edi
push eax
add esp, 4
sub edi, 0x4396
pop edi
push ecx
push edi
add esp, 4
and ecx, 0x11e3
pop ecx
push ebx
push ecx
add esp, 4
or ebx, 0x7f78
jmp 0x1000454e
xor ebx, 0x1516f
pop ebx
push edx
push ecx
add esp, 4
xor edx, 0x9461
or edx, 0x5a4a
or edx, 0x474f
pop edx
mov eax, dword [ebp - 0x348]
add eax, 0xfe
imul ecx, dword [ebp - 0x344], 0xfe
add ecx, 0x56f3663b
imul edx, dword [ebp - 0x344], 0xfe
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x344]
mov dword [ebp - 0x2664], eax
mov eax, dword [ebp - 0x2664]
mov dword [ebp - 0x2668], eax
mov ecx, dword [ebp - 0x2668]
sub ecx, 1
mov dword [ebp - 0x266c], ecx
mov dword [ebp - 0x1338], 1
push edi
call 0x100045d8
add byte [ebx], bh
xor al, byte ss:[edx + 0x47]
cmp dword [0xc4834a3e], edi
add al, 0x81
div dword [edi]
pop edi
add dword [eax], eax
call 0x100045f0
add byte [ebp + esi + 0x39], al
xor dh, byte ds:[0x83363433]
les eax, [ecx + eax*4]
out dx, eax
into
sub eax, dword [ecx]
add byte [edi + 0x69], bl
xchg ebp, eax
enter 0xffffffffffffffec, 0xffffffffffffffff
inc byte [eax]
add byte [eax], al
add edx, 0x56f3663b
imul eax, dword [ebp - 0x1338], 0xfe
sub edx, eax
xor edx, dword [ebp - 0x266c]
imul edx, dword [ebp - 0x1338]
imul ecx, dword [ebp - 0x1338], 0xfe
sub edx, ecx
mov dword [ebp - 0x133c], edx
mov edx, dword [ebp - 0x133c]
mov eax, dword [ebp - 0x1338]
mov dword [ebp - 0x348], edx
mov dword [ebp - 0x344], eax
push edx
sub edx, 0xc766
xor edx, 0x5b17
sub edx, 0x11f59
pop edx
push ecx
call 0x1000466f
add byte [ebp + 0x40], al
dec ebx
dec edx
dec edx
dec edx
cmp eax, dword [ebx - 0x3e7efb3c]
cld
rol dword [eax], 1
add byte [ecx + 0x39e7c1], al
add byte [ecx - 0x17], bl
mov ecx, 0x53fffff8
Function at 0x100048e0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
xor edx, eax
imul edx, dword [ebp - 0x18]
mov dword [ebp - 0x18d4], edx
mov edx, dword [ebp - 0x488]
mov dword [ebp - 0x2684], edx
mov eax, dword [ebp - 0x2684]
add eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x488], eax
push eax
and eax, 0x12ca6
and eax, 0x11f87
and eax, 0x2906
jmp 0x10004924
pop eax
push eax
push ebx
add esp, 4
and eax, 0x10660
sub eax, 0x1017d
jmp 0x1000493b
pop eax
mov byte [ebp - 0xddc], 0x52
mov byte [ebp - 0xddb], 0xb9
mov byte [ebp - 0xdda], 0x10
mov byte [ebp - 0xdd9], 0x10
mov byte [ebp - 0xdd8], 0x10
mov byte [ebp - 0xdd7], 0x10
mov byte [ebp - 0xdd6], 0x5a
push ebx
push esi
add esp, 4
or ebx, 0x171ca
sub ebx, 0x87f
pop ebx
push edi
xor edi, 0x177e1
and edi, 0xd4ea
pop edi
push ecx
push ebx
add esp, 4
sub ecx, 0x2914
xor ecx, 0xb447
pop ecx
mov byte [ebp - 0xdd4], 0x52
mov byte [ebp - 0xdd3], 0xb9
mov byte [ebp - 0xdd2], 0x20
mov byte [ebp - 0xdd1], 0x20
mov byte [ebp - 0xdd0], 0x20
mov byte [ebp - 0xdcf], 0x20
mov byte [ebp - 0xdce], 0x5a
push edx
push ecx
add esp, 4
add edx, 0x79dd
and edx, 0xa1d4
or edx, 0x11e11
sub edx, 0x16281
pop edx
push esi
jmp 0x100049f5
and esi, 0x182f2
sub esi, 0x161a
pop esi
mov dword [ebp - 0x2774], 0xe
push edx
call 0x10004a1d
add byte [edx], dh
dec esp
xor ecx, dword [esi + 0x49]
dec ebp
cmp byte [eax], bh
cmp al, byte [esi - 0x7d]
les eax, [eax + ebp*8]
or dword [eax], eax
add byte [eax], al
add byte [edx], dh
dec esi
cmp eax, 0x50334434
add esp, 4
xor edx, 0xccae
sub edx, 0x16cb3
pop edx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xddc]
mov dword [ebp - 0x18d8], eax
push edi
push eax
add esp, 4
and edi, 0x1554e
add edi, 0x4323
and edi, 0x120cc
xor edi, 0x106db
pop edi
push edi
or edi, 0xda2e
sub edi, 0x563d
and edi, 0xec3
pop edi
mov dword [ebp - 0x2778], 0xffffffff
push ebx
push eax
add esp, 4
add ebx, 0xcb5f
pop ebx
push edx
and edx, 0xd1d7
call 0x10004aae
add byte [ebp + 0x4d], cl
inc ebp
inc edx
inc edi
add esp, 4
call 0x10004abd
add byte [esi + edi + 0x3b], cl
inc eax
inc ebp
add esp, 4
Function at 0x10004a1d
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
xor edx, eax
imul edx, dword [ebp - 0x18]
mov dword [ebp - 0x18d4], edx
mov edx, dword [ebp - 0x488]
mov dword [ebp - 0x2684], edx
mov eax, dword [ebp - 0x2684]
add eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x488], eax
push eax
and eax, 0x12ca6
and eax, 0x11f87
and eax, 0x2906
jmp 0x10004924
pop eax
push eax
push ebx
add esp, 4
and eax, 0x10660
sub eax, 0x1017d
jmp 0x1000493b
pop eax
mov byte [ebp - 0xddc], 0x52
mov byte [ebp - 0xddb], 0xb9
mov byte [ebp - 0xdda], 0x10
mov byte [ebp - 0xdd9], 0x10
mov byte [ebp - 0xdd8], 0x10
mov byte [ebp - 0xdd7], 0x10
mov byte [ebp - 0xdd6], 0x5a
push ebx
push esi
add esp, 4
or ebx, 0x171ca
sub ebx, 0x87f
pop ebx
push edi
xor edi, 0x177e1
and edi, 0xd4ea
pop edi
push ecx
push ebx
add esp, 4
sub ecx, 0x2914
xor ecx, 0xb447
pop ecx
mov byte [ebp - 0xdd4], 0x52
mov byte [ebp - 0xdd3], 0xb9
mov byte [ebp - 0xdd2], 0x20
mov byte [ebp - 0xdd1], 0x20
mov byte [ebp - 0xdd0], 0x20
mov byte [ebp - 0xdcf], 0x20
mov byte [ebp - 0xdce], 0x5a
push edx
push ecx
add esp, 4
add edx, 0x79dd
and edx, 0xa1d4
or edx, 0x11e11
sub edx, 0x16281
pop edx
push esi
jmp 0x100049f5
and esi, 0x182f2
sub esi, 0x161a
pop esi
mov dword [ebp - 0x2774], 0xe
push edx
call 0x10004a1d
add byte [edx], dh
dec esp
xor ecx, dword [esi + 0x49]
dec ebp
cmp byte [eax], bh
cmp al, byte [esi - 0x7d]
les eax, [eax + ebp*8]
or dword [eax], eax
add byte [eax], al
add byte [edx], dh
dec esi
cmp eax, 0x50334434
add esp, 4
xor edx, 0xccae
sub edx, 0x16cb3
pop edx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xddc]
mov dword [ebp - 0x18d8], eax
push edi
push eax
add esp, 4
and edi, 0x1554e
add edi, 0x4323
and edi, 0x120cc
xor edi, 0x106db
pop edi
push edi
or edi, 0xda2e
sub edi, 0x563d
and edi, 0xec3
pop edi
mov dword [ebp - 0x2778], 0xffffffff
push ebx
push eax
add esp, 4
add ebx, 0xcb5f
pop ebx
push edx
and edx, 0xd1d7
call 0x10004aae
add byte [ebp + 0x4d], cl
inc ebp
inc edx
inc edi
add esp, 4
call 0x10004abd
add byte [esi + edi + 0x3b], cl
inc eax
inc ebp
add esp, 4
Function at 0x10004a2e
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
xor edx, eax
imul edx, dword [ebp - 0x18]
mov dword [ebp - 0x18d4], edx
mov edx, dword [ebp - 0x488]
mov dword [ebp - 0x2684], edx
mov eax, dword [ebp - 0x2684]
add eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x488], eax
push eax
and eax, 0x12ca6
and eax, 0x11f87
and eax, 0x2906
jmp 0x10004924
pop eax
push eax
push ebx
add esp, 4
and eax, 0x10660
sub eax, 0x1017d
jmp 0x1000493b
pop eax
mov byte [ebp - 0xddc], 0x52
mov byte [ebp - 0xddb], 0xb9
mov byte [ebp - 0xdda], 0x10
mov byte [ebp - 0xdd9], 0x10
mov byte [ebp - 0xdd8], 0x10
mov byte [ebp - 0xdd7], 0x10
mov byte [ebp - 0xdd6], 0x5a
push ebx
push esi
add esp, 4
or ebx, 0x171ca
sub ebx, 0x87f
pop ebx
push edi
xor edi, 0x177e1
and edi, 0xd4ea
pop edi
push ecx
push ebx
add esp, 4
sub ecx, 0x2914
xor ecx, 0xb447
pop ecx
mov byte [ebp - 0xdd4], 0x52
mov byte [ebp - 0xdd3], 0xb9
mov byte [ebp - 0xdd2], 0x20
mov byte [ebp - 0xdd1], 0x20
mov byte [ebp - 0xdd0], 0x20
mov byte [ebp - 0xdcf], 0x20
mov byte [ebp - 0xdce], 0x5a
push edx
push ecx
add esp, 4
add edx, 0x79dd
and edx, 0xa1d4
or edx, 0x11e11
sub edx, 0x16281
pop edx
push esi
jmp 0x100049f5
and esi, 0x182f2
sub esi, 0x161a
pop esi
mov dword [ebp - 0x2774], 0xe
push edx
call 0x10004a1d
add byte [edx], dh
dec esp
xor ecx, dword [esi + 0x49]
dec ebp
cmp byte [eax], bh
cmp al, byte [esi - 0x7d]
les eax, [eax + ebp*8]
or dword [eax], eax
add byte [eax], al
add byte [edx], dh
dec esi
cmp eax, 0x50334434
add esp, 4
xor edx, 0xccae
sub edx, 0x16cb3
pop edx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xddc]
mov dword [ebp - 0x18d8], eax
push edi
push eax
add esp, 4
and edi, 0x1554e
add edi, 0x4323
and edi, 0x120cc
xor edi, 0x106db
pop edi
push edi
or edi, 0xda2e
sub edi, 0x563d
and edi, 0xec3
pop edi
mov dword [ebp - 0x2778], 0xffffffff
push ebx
push eax
add esp, 4
add ebx, 0xcb5f
pop ebx
push edx
and edx, 0xd1d7
call 0x10004aae
add byte [ebp + 0x4d], cl
inc ebp
inc edx
inc edi
add esp, 4
call 0x10004abd
add byte [esi + edi + 0x3b], cl
inc eax
inc ebp
add esp, 4
Function at 0x10004aae
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
xor edx, eax
imul edx, dword [ebp - 0x18]
mov dword [ebp - 0x18d4], edx
mov edx, dword [ebp - 0x488]
mov dword [ebp - 0x2684], edx
mov eax, dword [ebp - 0x2684]
add eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x488], eax
push eax
and eax, 0x12ca6
and eax, 0x11f87
and eax, 0x2906
jmp 0x10004924
pop eax
push eax
push ebx
add esp, 4
and eax, 0x10660
sub eax, 0x1017d
jmp 0x1000493b
pop eax
mov byte [ebp - 0xddc], 0x52
mov byte [ebp - 0xddb], 0xb9
mov byte [ebp - 0xdda], 0x10
mov byte [ebp - 0xdd9], 0x10
mov byte [ebp - 0xdd8], 0x10
mov byte [ebp - 0xdd7], 0x10
mov byte [ebp - 0xdd6], 0x5a
push ebx
push esi
add esp, 4
or ebx, 0x171ca
sub ebx, 0x87f
pop ebx
push edi
xor edi, 0x177e1
and edi, 0xd4ea
pop edi
push ecx
push ebx
add esp, 4
sub ecx, 0x2914
xor ecx, 0xb447
pop ecx
mov byte [ebp - 0xdd4], 0x52
mov byte [ebp - 0xdd3], 0xb9
mov byte [ebp - 0xdd2], 0x20
mov byte [ebp - 0xdd1], 0x20
mov byte [ebp - 0xdd0], 0x20
mov byte [ebp - 0xdcf], 0x20
mov byte [ebp - 0xdce], 0x5a
push edx
push ecx
add esp, 4
add edx, 0x79dd
and edx, 0xa1d4
or edx, 0x11e11
sub edx, 0x16281
pop edx
push esi
jmp 0x100049f5
and esi, 0x182f2
sub esi, 0x161a
pop esi
mov dword [ebp - 0x2774], 0xe
push edx
call 0x10004a1d
add byte [edx], dh
dec esp
xor ecx, dword [esi + 0x49]
dec ebp
cmp byte [eax], bh
cmp al, byte [esi - 0x7d]
les eax, [eax + ebp*8]
or dword [eax], eax
add byte [eax], al
add byte [edx], dh
dec esi
cmp eax, 0x50334434
add esp, 4
xor edx, 0xccae
sub edx, 0x16cb3
pop edx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xddc]
mov dword [ebp - 0x18d8], eax
push edi
push eax
add esp, 4
and edi, 0x1554e
add edi, 0x4323
and edi, 0x120cc
xor edi, 0x106db
pop edi
push edi
or edi, 0xda2e
sub edi, 0x563d
and edi, 0xec3
pop edi
mov dword [ebp - 0x2778], 0xffffffff
push ebx
push eax
add esp, 4
add ebx, 0xcb5f
pop ebx
push edx
and edx, 0xd1d7
call 0x10004aae
add byte [ebp + 0x4d], cl
inc ebp
inc edx
inc edi
add esp, 4
call 0x10004abd
add byte [esi + edi + 0x3b], cl
inc eax
inc ebp
add esp, 4
Function at 0x10004abd
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
xor edx, eax
imul edx, dword [ebp - 0x18]
mov dword [ebp - 0x18d4], edx
mov edx, dword [ebp - 0x488]
mov dword [ebp - 0x2684], edx
mov eax, dword [ebp - 0x2684]
add eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x488], eax
push eax
and eax, 0x12ca6
and eax, 0x11f87
and eax, 0x2906
jmp 0x10004924
pop eax
push eax
push ebx
add esp, 4
and eax, 0x10660
sub eax, 0x1017d
jmp 0x1000493b
pop eax
mov byte [ebp - 0xddc], 0x52
mov byte [ebp - 0xddb], 0xb9
mov byte [ebp - 0xdda], 0x10
mov byte [ebp - 0xdd9], 0x10
mov byte [ebp - 0xdd8], 0x10
mov byte [ebp - 0xdd7], 0x10
mov byte [ebp - 0xdd6], 0x5a
push ebx
push esi
add esp, 4
or ebx, 0x171ca
sub ebx, 0x87f
pop ebx
push edi
xor edi, 0x177e1
and edi, 0xd4ea
pop edi
push ecx
push ebx
add esp, 4
sub ecx, 0x2914
xor ecx, 0xb447
pop ecx
mov byte [ebp - 0xdd4], 0x52
mov byte [ebp - 0xdd3], 0xb9
mov byte [ebp - 0xdd2], 0x20
mov byte [ebp - 0xdd1], 0x20
mov byte [ebp - 0xdd0], 0x20
mov byte [ebp - 0xdcf], 0x20
mov byte [ebp - 0xdce], 0x5a
push edx
push ecx
add esp, 4
add edx, 0x79dd
and edx, 0xa1d4
or edx, 0x11e11
sub edx, 0x16281
pop edx
push esi
jmp 0x100049f5
and esi, 0x182f2
sub esi, 0x161a
pop esi
mov dword [ebp - 0x2774], 0xe
push edx
call 0x10004a1d
add byte [edx], dh
dec esp
xor ecx, dword [esi + 0x49]
dec ebp
cmp byte [eax], bh
cmp al, byte [esi - 0x7d]
les eax, [eax + ebp*8]
or dword [eax], eax
add byte [eax], al
add byte [edx], dh
dec esi
cmp eax, 0x50334434
add esp, 4
xor edx, 0xccae
sub edx, 0x16cb3
pop edx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xddc]
mov dword [ebp - 0x18d8], eax
push edi
push eax
add esp, 4
and edi, 0x1554e
add edi, 0x4323
and edi, 0x120cc
xor edi, 0x106db
pop edi
push edi
or edi, 0xda2e
sub edi, 0x563d
and edi, 0xec3
pop edi
mov dword [ebp - 0x2778], 0xffffffff
push ebx
push eax
add esp, 4
add ebx, 0xcb5f
pop ebx
push edx
and edx, 0xd1d7
call 0x10004aae
add byte [ebp + 0x4d], cl
inc ebp
inc edx
inc edi
add esp, 4
call 0x10004abd
add byte [esi + edi + 0x3b], cl
inc eax
inc ebp
add esp, 4

Function at 0x10004ac0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
pop edx
mov ecx, dword [ebp - 0x488]
mov dword [ebp - 0x5bc], ecx
jmp 0x10004ade
push eax
push ecx
add esp, 4
and eax, 0x11dfe
or eax, 0x102f0
pop eax
push edx
call 0x10004b00
add byte [ebx + eax*2 + 0x47], al
dec esi
push eax
inc ebp
inc edi
inc esp
cmp al, byte [ebx - 0x157efb3c]
hlt

Function at 0x10004b00
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
pop edx
mov ecx, dword [ebp - 0x488]
mov dword [ebp - 0x5bc], ecx
jmp 0x10004ade
push eax
push ecx
add esp, 4
and eax, 0x11dfe
or eax, 0x102f0
pop eax
push edx
call 0x10004b00
add byte [ebx + eax*2 + 0x47], al
dec esi
push eax
inc ebp
inc edi
inc esp
cmp al, byte [ebx - 0x157efb3c]
hlt