joyce8/EMBER2024-capa huggingface dataset:
Function at 0x40d4f0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [ebx], dh
push eax
xor al, byte [ecx + 0x3c]
inc ebp
inc ebp
add esp, 4
and ecx, 0xfd94
xor ecx, 0x1186
pop ecx
mov ecx, dword [ebp - 0x38c]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3f0], edx
push ebx
push edx
add esp, 4
or ebx, 0xb373
add byte [eax], al
and ebx, 0x1795a
and ebx, 0x8bd4
pop ebx
push ecx
sub ecx, 0x48e
pop ecx
push ebx
push esi
add esp, 4
xor ebx, 0x10d7b
add ebx, 0x306f
pop ebx
mov dword [ebp - 0x8d0], 0
mov eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x1a08], eax
cmp dword [ebp - 0x1a08], 0
mov ebp, 0xffffe5f8
add byte [ebp + 0x11], dh
mov ecx, dword [ebp - 0x8d0]
mov dword [ebp - 0x5f4], ecx
jmp 0x40d83a
mov edx, dword [ebp - 0x1a08]
mov eax, dword [ebp - 0x3f0]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1a0c], eax
jne 0x40d571
mov ecx, dword [ebp - 0x8d0]
mov dword [ebp - 0x5f4], ecx
jmp 0x40d83a
invalid
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1a0c]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x19d4], edx
cmp dword [ebp - 0x19d4], 0
jne 0x40d5a3
mov eax, dword [ebp - 0x8d0]
mov dword [ebp - 0x5f4], eax
jmp 0x40d83a
mov ecx, dword [ebp - 0x3f0]
add ecx, dword [ebp - 0x19d4]
mov dword [ebp - 0x8c4], ecx
jne 0x40d5c8
mov edx, dword [ebp - 0x8d0]
mov dword [ebp - 0x5f4], edx
jmp 0x40d83a
mov eax, dword [ebp - 0x8c4]
mov ecx, dword [ebp - 0x3f0]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x2424], ecx
mov edx, dword [ebp - 0x8c4]
mov eax, dword [ebp - 0x3f0]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x2428], eax
mov ecx, dword [ebp - 0x8c4]
mov edx, dword [ebp - 0x3f0]
add edx, dword [ecx + 0x1c]
sbb al, 0x89
xchg ebp, eax
rcr bl, 1
invalid
inc edi
test dword [eax], edi
idiv edi
inc dword [eax]
add byte [eax], al
add bl, ch
invalid
Function at 0x40d6f0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x8c8]
add eax, 1
mov dword [ebp - 0x8c8], eax
mov ecx, dword [ebp - 0x8c4]
mov edx, dword [ebp - 0x8c8]
cmp edx, dword [ecx + 0x18]
jae 0x40d82e
mov eax, dword [ebp - 0x8c8]
mov ecx, dword [ebp - 0x2424]
mov edx, dword [ebp - 0x3f0]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x8cc], edx
mov eax, dword [ebp - 0x8c8]
mov ecx, dword [ebp - 0x2428]
movzx edx, word [ecx + eax*2]
adc al, 0x41
mov eax, dword [ebp - 0x2430]
mov ecx, dword [ebp - 0x3f0]
add ecx, dword [eax + edx*4]
nop
mov dword [ebp - 0x2434], ecx
mov dword [ebp - 0x1fc], 0
jmp 0x40d692
mov edx, dword [ebp - 0x1fc]
add edx, 1
mov dword [ebp - 0x1fc], edx
mov eax, dword [ebp - 0x8cc]
add eax, dword [ebp - 0x1fc]
movsx ecx, byte [eax]
test ecx, ecx
je 0x40d744
mov edx, dword [ebp - 0x1fc]
movsx eax, byte [ebp + edx - 0xdec]
test eax, eax
je 0x40d744
push ebx
or ebx, 0xc515
add ebx, 0x334f
pop ebx
push edi
jmp 0x40d6d5
jmp 0x40d6de
pop edi
push edx
push ebx
add esp, 4
or edx, 0x8c05
xor edx, 0x1b32
pop edx
mov ecx, dword [ebp - 0x8cc]
add ecx, dword [ebp - 0x1fc]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1fc]
movsx ecx, byte [ebp + eax - 0xdec]
cmp edx, ecx
je 0x40d736
mov edx, dword [ebp - 0x8cc]
add edx, dword [ebp - 0x1fc]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1fc]
invalid
mov esi, 0xf2140d94

Function at 0x40d8c0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
loope 0x40d896
mov eax, dword [eax]
add byte [ecx + 0x64], bl
mov eax, dword [0x18]
Function at 0x40db50
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [ecx + 0xbc7c8], al
add byte [eax + 0x56], bl
Function at 0x40e357
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x8dc]
add eax, 1
mov dword [ebp - 0x8dc], eax
mov ecx, dword [ebp - 0x8d8]
mov edx, dword [ebp - 0x8dc]
cmp edx, dword [ecx + 0x18]
jae 0x40e42e
mov eax, dword [ebp - 0x8dc]
mov ecx, dword [ebp - 0x2448]
invalid
invalid
dec dword [ebx - 0x3eb6b]
inc dword [ebx]
adc al, 0x81
dec dword [ebx - 0x3eb6b]
inc dword [ebx]
adc al, 0x81
mov dword [ebp - 0x8e0], edx
mov eax, dword [ebp - 0x8dc]
mov ecx, dword [ebp - 0x244c]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x2450]
mov ecx, dword [ebp - 0x3ec]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x2454], ecx
mov dword [ebp - 0x200], 0
jmp 0x40e292
mov edx, dword [ebp - 0x200]
add edx, 1
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x8e0]
add eax, dword [ebp - 0x200]
movsx ecx, byte [eax]
test ecx, ecx
je 0x40e344
mov edx, dword [ebp - 0x200]
movsx eax, byte [ebp + edx - 0xb3c]
test eax, eax
je 0x40e344
push edi
push eax
add esp, 4
sub edi, 0x1763d
sub edi, 0x8117
add edi, 0xf034
pop edi
push edi
sub edi, 0x10978
or edi, 0x12e74
jmp 0x40e2ea
or edi, 0xc75c
pop edi
mov ecx, dword [ebp - 0x8e0]
add ecx, dword [ebp - 0x200]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x200]
movsx ecx, byte [ebp + eax - 0xb3c]
cmp edx, ecx
je 0x40e336
mov edx, dword [ebp - 0x8e0]
add edx, dword [ebp - 0x200]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x200]
movsx edx, byte [ebp + ecx - 0xb3c]
cmp eax, edx
jne 0x40e33d
jmp 0x40e283
jmp 0x40e344
push eax
push ecx
add esp, 4
call 0x40e357
add byte [ecx], bh
dec ebp
cmp dword ds:[edi + 0x43], ecx
cmp al, byte [ebp - 0x7d]
les eax, [eax + ebp*8]
pop es
add byte [eax], al
add byte [eax], al
cmp edi, dword [edx]
inc edi
inc ebp
dec ebx
add esp, 4
pop eax
push edx
push edx
add esp, 4
sub edx, 0x13b08
pop edx
mov eax, dword [ebp - 0x8e0]
add eax, dword [ebp - 0x200]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x200]
movsx eax, byte [ebp + edx - 0xb3c]
cmp ecx, eax
jne 0x40e3a3
mov dword [ebp - 0xf3c], 0
jmp 0x40e412
push eax
push edi
add esp, 4
call 0x40e3b8
add byte [ecx + 0x38], al
aaa
push eax
cmp eax, 0x344b3439
dec edx
add esp, 4
call 0x40e3cb
add byte [ebp + 0x4d], al
dec ebp
dec esp
cmp esi, dword [edx]
dec ebx
dec edi
inc ebx
cmp dword [ebx - 0xf7efb3c], eax
push esp
sbb dword [ecx], eax
add byte [eax - 0x75], bl
lea esp, [eax]
idiv edi
inc dword [ebx]
lea eax, [eax]
invalid
cmp dword [ebp - 0xf3c], 0
jne 0x40e429
mov edx, dword [ebp - 0x2454]
mov dword [ebp - 0x4b0], edx
jmp 0x40e43a
jmp 0x40e213
mov eax, dword [ebp - 0x8e4]
mov dword [ebp - 0x4b0], eax
Function at 0x40e366
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x8dc]
add eax, 1
mov dword [ebp - 0x8dc], eax
mov ecx, dword [ebp - 0x8d8]
mov edx, dword [ebp - 0x8dc]
cmp edx, dword [ecx + 0x18]
jae 0x40e42e
mov eax, dword [ebp - 0x8dc]
mov ecx, dword [ebp - 0x2448]
invalid
invalid
dec dword [ebx - 0x3eb6b]
inc dword [ebx]
adc al, 0x81
dec dword [ebx - 0x3eb6b]
inc dword [ebx]
adc al, 0x81
mov dword [ebp - 0x8e0], edx
mov eax, dword [ebp - 0x8dc]
mov ecx, dword [ebp - 0x244c]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x2450]
mov ecx, dword [ebp - 0x3ec]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x2454], ecx
mov dword [ebp - 0x200], 0
jmp 0x40e292
mov edx, dword [ebp - 0x200]
add edx, 1
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x8e0]
add eax, dword [ebp - 0x200]
movsx ecx, byte [eax]
test ecx, ecx
je 0x40e344
mov edx, dword [ebp - 0x200]
movsx eax, byte [ebp + edx - 0xb3c]
test eax, eax
je 0x40e344
push edi
push eax
add esp, 4
sub edi, 0x1763d
sub edi, 0x8117
add edi, 0xf034
pop edi
push edi
sub edi, 0x10978
or edi, 0x12e74
jmp 0x40e2ea
or edi, 0xc75c
pop edi
mov ecx, dword [ebp - 0x8e0]
add ecx, dword [ebp - 0x200]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x200]
movsx ecx, byte [ebp + eax - 0xb3c]
cmp edx, ecx
je 0x40e336
mov edx, dword [ebp - 0x8e0]
add edx, dword [ebp - 0x200]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x200]
movsx edx, byte [ebp + ecx - 0xb3c]
cmp eax, edx
jne 0x40e33d
jmp 0x40e283
jmp 0x40e344
push eax
push ecx
add esp, 4
call 0x40e357
add byte [ecx], bh
dec ebp
cmp dword ds:[edi + 0x43], ecx
cmp al, byte [ebp - 0x7d]
les eax, [eax + ebp*8]
pop es
add byte [eax], al
add byte [eax], al
cmp edi, dword [edx]
inc edi
inc ebp
dec ebx
add esp, 4
pop eax
push edx
push edx
add esp, 4
sub edx, 0x13b08
pop edx
mov eax, dword [ebp - 0x8e0]
add eax, dword [ebp - 0x200]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x200]
movsx eax, byte [ebp + edx - 0xb3c]
cmp ecx, eax
jne 0x40e3a3
mov dword [ebp - 0xf3c], 0
jmp 0x40e412
push eax
push edi
add esp, 4
call 0x40e3b8
add byte [ecx + 0x38], al
aaa
push eax
cmp eax, 0x344b3439
dec edx
add esp, 4
call 0x40e3cb
add byte [ebp + 0x4d], al
dec ebp
dec esp
cmp esi, dword [edx]
dec ebx
dec edi
inc ebx
cmp dword [ebx - 0xf7efb3c], eax
push esp
sbb dword [ecx], eax
add byte [eax - 0x75], bl
lea esp, [eax]
idiv edi
inc dword [ebx]
lea eax, [eax]
invalid
cmp dword [ebp - 0xf3c], 0
jne 0x40e429
mov edx, dword [ebp - 0x2454]
mov dword [ebp - 0x4b0], edx
jmp 0x40e43a
jmp 0x40e213
mov eax, dword [ebp - 0x8e4]
mov dword [ebp - 0x4b0], eax
Function at 0x40e3cb
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x8dc]
add eax, 1
mov dword [ebp - 0x8dc], eax
mov ecx, dword [ebp - 0x8d8]
mov edx, dword [ebp - 0x8dc]
cmp edx, dword [ecx + 0x18]
jae 0x40e42e
mov eax, dword [ebp - 0x8dc]
mov ecx, dword [ebp - 0x2448]
invalid
invalid
dec dword [ebx - 0x3eb6b]
inc dword [ebx]
adc al, 0x81
dec dword [ebx - 0x3eb6b]
inc dword [ebx]
adc al, 0x81
mov dword [ebp - 0x8e0], edx
mov eax, dword [ebp - 0x8dc]
mov ecx, dword [ebp - 0x244c]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x2450]
mov ecx, dword [ebp - 0x3ec]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x2454], ecx
mov dword [ebp - 0x200], 0
jmp 0x40e292
mov edx, dword [ebp - 0x200]
add edx, 1
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x8e0]
add eax, dword [ebp - 0x200]
movsx ecx, byte [eax]
test ecx, ecx
je 0x40e344
mov edx, dword [ebp - 0x200]
movsx eax, byte [ebp + edx - 0xb3c]
test eax, eax
je 0x40e344
push edi
push eax
add esp, 4
sub edi, 0x1763d
sub edi, 0x8117
add edi, 0xf034
pop edi
push edi
sub edi, 0x10978
or edi, 0x12e74
jmp 0x40e2ea
or edi, 0xc75c
pop edi
mov ecx, dword [ebp - 0x8e0]
add ecx, dword [ebp - 0x200]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x200]
movsx ecx, byte [ebp + eax - 0xb3c]
cmp edx, ecx
je 0x40e336
mov edx, dword [ebp - 0x8e0]
add edx, dword [ebp - 0x200]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x200]
movsx edx, byte [ebp + ecx - 0xb3c]
cmp eax, edx
jne 0x40e33d
jmp 0x40e283
jmp 0x40e344
push eax
push ecx
add esp, 4
call 0x40e357
add byte [ecx], bh
dec ebp
cmp dword ds:[edi + 0x43], ecx
cmp al, byte [ebp - 0x7d]
les eax, [eax + ebp*8]
pop es
add byte [eax], al
add byte [eax], al
cmp edi, dword [edx]
inc edi
inc ebp
dec ebx
add esp, 4
pop eax
push edx
push edx
add esp, 4
sub edx, 0x13b08
pop edx
mov eax, dword [ebp - 0x8e0]
add eax, dword [ebp - 0x200]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x200]
movsx eax, byte [ebp + edx - 0xb3c]
cmp ecx, eax
jne 0x40e3a3
mov dword [ebp - 0xf3c], 0
jmp 0x40e412
push eax
push edi
add esp, 4
call 0x40e3b8
add byte [ecx + 0x38], al
aaa
push eax
cmp eax, 0x344b3439
dec edx
add esp, 4
call 0x40e3cb
add byte [ebp + 0x4d], al
dec ebp
dec esp
cmp esi, dword [edx]
dec ebx
dec edi
inc ebx
cmp dword [ebx - 0xf7efb3c], eax
push esp
sbb dword [ecx], eax
add byte [eax - 0x75], bl
lea esp, [eax]
idiv edi
inc dword [ebx]
lea eax, [eax]
invalid
cmp dword [ebp - 0xf3c], 0
jne 0x40e429
mov edx, dword [ebp - 0x2454]
mov dword [ebp - 0x4b0], edx
jmp 0x40e43a
jmp 0x40e213
mov eax, dword [ebp - 0x8e4]
mov dword [ebp - 0x4b0], eax
Function at 0x40e649
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
add edi, 0x1771f
pop edi
lea eax, [ebp - 0x14d4]
mov dword [ebp - 0xf44], eax
mov ecx, dword [ebp - 0x600]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xf40], edx
xor eax, eax
mov word [ebp - 0x284], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push eax
push edi
invalid

Function at 0x40e6a0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [eax], al
dec esp
inc edi
push eax
dec ebp
cmp eax, 0x484b4240
add esp, 4
pop edi
mov edx, dword [ebp - 0xf40]
mov ax, word [edx]
mov word [ebp - 0x137e], ax
mov ecx, dword [ebp - 0xf40]
add ecx, 2
mov dword [ebp - 0xf40], ecx
mov dx, word [ebp - 0x137e]
mov word [ebp - 0x284], dx
mov eax, dword [ebp - 0xf44]
mov cx, word [eax]
mov word [ebp - 0x1380], cx
mov edx, dword [ebp - 0xf44]
add edx, 2
mov dword [ebp - 0xf44], edx
mov ax, word [ebp - 0x1380]
mov word [ebp - 0x40], ax
push eax
push edx
add esp, 4
sub eax, 0xd822
add eax, 0x41e2
add eax, 0x9161
pop eax
push edx
push eax
add esp, 4
add edx, 0xa160
add edx, 0x7eaf
pop edx
push ecx
xor ecx, 0x17dbc
pop ecx
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x40e755
movzx edx, word [ebp - 0x284]
movzx eax, word [ebp - 0x40]
sub edx, eax
invalid
xchg ebp, eax
invalid

Function at 0x40e6ab
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [eax], al
dec esp
inc edi
push eax
dec ebp
cmp eax, 0x484b4240
add esp, 4
pop edi
mov edx, dword [ebp - 0xf40]
mov ax, word [edx]
mov word [ebp - 0x137e], ax
mov ecx, dword [ebp - 0xf40]
add ecx, 2
mov dword [ebp - 0xf40], ecx
mov dx, word [ebp - 0x137e]
mov word [ebp - 0x284], dx
mov eax, dword [ebp - 0xf44]
mov cx, word [eax]
mov word [ebp - 0x1380], cx
mov edx, dword [ebp - 0xf44]
add edx, 2
mov dword [ebp - 0xf44], edx
mov ax, word [ebp - 0x1380]
mov word [ebp - 0x40], ax
push eax
push edx
add esp, 4
sub eax, 0xd822
add eax, 0x41e2
add eax, 0x9161
pop eax
push edx
push eax
add esp, 4
add edx, 0xa160
add edx, 0x7eaf
pop edx
push ecx
xor ecx, 0x17dbc
pop ecx
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x40e755
movzx edx, word [ebp - 0x284]
movzx eax, word [ebp - 0x40]
sub edx, eax
invalid
xchg ebp, eax
invalid

Function at 0x40e7d0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
loop 0x40e821
int 0
add byte [edx + 0x50], bl
push ecx
add esp, 4
jmp 0x40e7e3
and eax, 0x14a34
pop eax
mov edx, dword [ebp - 0x600]
mov dword [ebp - 0x3b0], edx
jmp 0x40e860
add dword [eax], eax
or ecx, 0xd1fd
pop ecx
mov eax, dword [ebp - 0x600]
mov ecx, dword [eax]
mov dword [ebp - 0x600], ecx
mov edx, dword [ebp - 0x600]
cmp edx, dword [ebp - 0xf48]
je 0x40e856
mov eax, dword [ebp - 0x600]
cmp dword [eax + 0x30], 0
jne 0x40e621
mov dword [ebp - 0x3b0], 0
Function at 0x40e810
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edx
xor edx, 0x15e7e
jmp 0x40e62e
pop edx
push edi
sub edi, 0x108ec
sub edi, 0x16ce8
call fcn.0040e649
add byte [eax], bh
dec esp
dec ebx
cmp dword [ecx], edi
inc esi
inc ecx
push ecx
sub ecx, 0x13f13
sub ecx, 0x7b6f
invalid
leave
invalid

Function at 0x40e820
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add dword [ecx], 0xfdc98100
rol dword [eax], 1
add byte [ecx - 0x75], bl
test dword [eax], eax
cli
invalid
Function at 0x40f470
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
test dword [eax], 0x52515a00
add esp, 4
and ecx, 0xfcd6
xor ecx, 0xe1af
pop ecx
push ebx
push edi
add esp, 4
jmp 0x40f491
add ebx, 0x15aad
sub ebx, 0xf997
pop ebx
mov eax, dword [ebp - 0x8f8]
or bh, dh
invalid
dec dword [ebx - 0x7276e7b8]
sbb al, 0xfc
invalid
inc edi
test eax, edi
idiv bh
inc dword [eax]
add byte [eax], al
add byte [ebx - 0x3e36b], cl
dec dword [ecx - 0x1aab6b]
in eax, 0xff
inc dword [ebx - 0x1aab43]
inc dword [eax]
jne 0x40f4dd
mov eax, dword [ebp - 0x908]
mov dword [ebp - 0x4b4], eax
jmp 0x40f7ce
mov ecx, dword [ebp - 0x1aac]
mov edx, dword [ebp - 0x3e4]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1ab0], edx
invalid
push dword [ebp + 0x11]
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1ab0]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1ab4], ecx
cmp dword [ebp - 0x1ab4], 0
jne 0x40f537
mov edx, dword [ebp - 0x908]
mov dword [ebp - 0x4b4], edx
jmp 0x40f7ce
mov eax, dword [ebp - 0x3e4]
add eax, dword [ebp - 0x1ab4]
mov dword [ebp - 0x8fc], eax
jne 0x40f55c
mov ecx, dword [ebp - 0x908]
mov dword [ebp - 0x4b4], ecx
jmp 0x40f7ce
mov edx, dword [ebp - 0x8fc]
mov eax, dword [ebp - 0x3e4]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x2488], eax
mov ecx, dword [ebp - 0x8fc]
mov edx, dword [ebp - 0x3e4]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x248c], edx
mov eax, dword [ebp - 0x8fc]
mov ecx, dword [ebp - 0x3e4]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x2490], ecx
mov dword [ebp - 0x900], 0
jmp 0x40f5b6
Function at 0x40f668
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x900]
add edx, 1
mov dword [ebp - 0x900], edx
mov eax, dword [ebp - 0x8fc]
mov ecx, dword [ebp - 0x900]
invalid
cmp ecx, dword [eax + 0x18]
jae 0x40f7c2
mov edx, dword [ebp - 0x900]
mov eax, dword [ebp - 0x2488]
mov ecx, dword [ebp - 0x3e4]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x904], ecx
mov edx, dword [ebp - 0x900]
mov eax, dword [ebp - 0x248c]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x2490]
mov eax, dword [ebp - 0x3e4]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x2494], eax
mov dword [ebp - 0x14c], 0
jmp 0x40f626
mov ecx, dword [ebp - 0x14c]
add ecx, 1
mov dword [ebp - 0x14c], ecx
mov edx, dword [ebp - 0x904]
add edx, dword [ebp - 0x14c]
movsx eax, byte [edx]
test eax, eax
je 0x40f6d8
mov ecx, dword [ebp - 0x14c]
movsx edx, byte [ebp + ecx - 0xb2c]
test edx, edx
je 0x40f6d8
push ebx
push edi
add esp, 4
call 0x40f668
add byte [esi], dh
xor al, 0x4f
cmp dword [eax + 0x32], edx
push eax
aas
xor eax, 0x4c48337
pop ebx
push ecx
jmp 0x40f676
jmp 0x40f67e
and ecx, 0xf4df
pop ecx
mov eax, dword [ebp - 0x904]
add eax, dword [ebp - 0x14c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x14c]
movsx eax, byte [ebp + edx - 0xb2c]
cmp ecx, eax
je 0x40f6ca
mov ecx, dword [ebp - 0x904]
add ecx, dword [ebp - 0x14c]
invalid
dec dword [edi]
mov esi, 0x20f28311
mov eax, dword [ebp - 0x14c]
movsx ecx, byte [ebp + eax - 0xb2c]
cmp edx, ecx
jne 0x40f6d1
jmp 0x40f617
jmp 0x40f6d8
push esi
jmp 0x40f6de
jmp 0x40f6e6
pop esi
push ebx
push edi
add esp, 4
add ebx, 0x1429e
xor ebx, 0xd209
pop ebx
push eax
jmp 0x40f703
and eax, 0xf628
pop eax
mov edx, dword [ebp - 0x904]
mov dword [ebp - 0xf68], 0xffffffff
jmp 0x40f7a6
cmp dword [ebp - 0xf68], 0
jne 0x40f7bd
mov ecx, dword [ebp - 0x2494]
mov dword [ebp - 0x4b4], ecx
jmp 0x40f7ce
invalid
in eax, 0xfd

Function at 0x40f710
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add edx, dword [ebp - 0x14c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x14c]
movsx edx, byte [ebp + ecx - 0xb2c]
cmp eax, edx
jne 0x40f737
mov dword [ebp - 0xf68], 0
jmp 0x40f7a6
push ecx
add ecx, 0x11551
and ecx, 0x17352
pop ecx
push eax
push esi
add esp, 4
add eax, 0xd21c
add eax, 0x380b
pop eax
push ecx
push ecx
add esp, 4
sub ecx, 0xf4b5
add byte [eax], al
or ecx, 0xce0a
pop ecx
mov eax, dword [ebp - 0x904]
add eax, dword [ebp - 0x14c]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x14c]
movsx eax, byte [ebp + edx - 0xb2c]
or eax, 0x20
cmp ecx, eax
jge 0x40f79c
mov dword [ebp - 0xf68], 1

Function at 0x40f8a0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add byte [eax], al
add byte [eax], al
jmp 0x40ff93
Function at 0x410ef3
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop eax
push eax
or eax, 0x8771
pop eax
cmp dword [ebp - 0x1b00], 0
jne 0x410f17
mov dword [ebp - 0x398], 0
jmp 0x4111be
mov ecx, dword [ebp - 0x1b00]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xfa8], eax
push eax
and eax, 0x1290b
sub eax, 0x34d3
or eax, 0x16c1d
pop eax
push ebx
push ebx
add esp, 4
or ebx, 0x7552
pop ebx
push edi
push esi
add esp, 4
and edi, 0xa8ba
add edi, 0x276c
pop edi
cmp dword [ebp - 0xfa8], 0
jne 0x410f73
mov dword [ebp - 0x398], 0
jmp 0x4111be
mov ecx, dword [ebp - 0xfa8]
mov dword [ebp - 0x620], ecx
push eax
push eax
add esp, 4
jmp 0x410f89
or eax, 0x710d
pop eax
push esi
xor esi, 0x12568
pop esi
push edi
xor edi, 0x1804e
jmp 0x410fa4
and edi, 0x8e1e
xor edi, 0xf0c7
pop edi
lea edx, [ebp - 0x14d4]
mov dword [ebp - 0xfa4], edx
mov eax, dword [ebp - 0x620]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xfa0], ecx
xor edx, edx
mov word [ebp - 0x2a0], dx
xor eax, eax
mov word [ebp - 0x5c], ax
push ebx
push esi
add esp, 4
or ebx, 0x158f
and ebx, 0x17691
or ebx, 0x17682
pop ebx
push esi
add esi, 0x20a0
pop esi
push ebx
push edx
add esp, 4
and ebx, 0x17b92
or ebx, 0x9cc4
pop ebx
mov ecx, dword [ebp - 0xfa0]
mov dx, word [ecx]
mov word [ebp - 0x140a], dx
mov eax, dword [ebp - 0xfa0]
add eax, 2
mov dword [ebp - 0xfa0], eax
invalid
invalid
invalid
invalid

Function at 0x41112c
Capabilities:
Resolve function by parsing pe exports

Disassembly:
je 0x410fdb
movzx edx, word [ebp - 0x2a0]
xor edx, 0x20
movzx eax, word [ebp - 0x5c]
cmp edx, eax
ror byte [edi], 1
test bh, bh
invalid
invalid
invalid
movzx ecx, word [ebp - 0x2a0]
movzx edx, word [ebp - 0x5c]
cmp ecx, edx
jge 0x4110f7
mov dword [ebp - 0x1b04], 0xffffffff
jmp 0x411101
mov dword [ebp - 0x1b04], 1
mov eax, dword [ebp - 0x1b04]
mov dword [ebp - 0x1b08], eax
cmp dword [ebp - 0x1b08], 0
jne 0x411156
push eax
jmp 0x41111c
call 0x41112c
add byte [0x3f3a3d43], bh
inc edi
dec ebx
aas
inc ecx
add esp, 4
and eax, 0x8fb
add eax, 0xb6c8
pop eax
push esi
push ecx
add esp, 4
sub esi, 0x3eb6
pop esi
mov ecx, dword [ebp - 0x620]
mov dword [ebp - 0x398], ecx
jmp 0x4111be
push edi
and edi, 0x13fe6
and edi, 0xc507
sub edi, 0x180aa
pop edi
push edi
add edi, 0x15daa
call 0x41117e
add byte [edx + 0x4f], cl
xor al, 0x3e
dec esp
xor bh, byte [edx]
invalid
invalid
Function at 0x41117e
Capabilities:
Resolve function by parsing pe exports

Disassembly:
je 0x410fdb
movzx edx, word [ebp - 0x2a0]
xor edx, 0x20
movzx eax, word [ebp - 0x5c]
cmp edx, eax
ror byte [edi], 1
test bh, bh
invalid
invalid
invalid
movzx ecx, word [ebp - 0x2a0]
movzx edx, word [ebp - 0x5c]
cmp ecx, edx
jge 0x4110f7
mov dword [ebp - 0x1b04], 0xffffffff
jmp 0x411101
mov dword [ebp - 0x1b04], 1
mov eax, dword [ebp - 0x1b04]
mov dword [ebp - 0x1b08], eax
cmp dword [ebp - 0x1b08], 0
jne 0x411156
push eax
jmp 0x41111c
call 0x41112c
add byte [0x3f3a3d43], bh
inc edi
dec ebx
aas
inc ecx
add esp, 4
and eax, 0x8fb
add eax, 0xb6c8
pop eax
push esi
push ecx
add esp, 4
sub esi, 0x3eb6
pop esi
mov ecx, dword [ebp - 0x620]
mov dword [ebp - 0x398], ecx
jmp 0x4111be
push edi
and edi, 0x13fe6
and edi, 0xc507
sub edi, 0x180aa
pop edi
push edi
add edi, 0x15daa
call 0x41117e
add byte [edx + 0x4f], cl
xor al, 0x3e
dec esp
xor bh, byte [edx]
invalid
invalid