joyce8/EMBER2024-capa huggingface dataset:
Function at 0x408a36
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add dword [eax], eax
pop ebx
push edx
call 0x408907
add byte [ecx + 0x33], cl
aas
dec esp
inc edx
inc ebp
dec eax
inc ebx
dec ebx
add esp, 4
pop edx
cmp dword [ebp - 0xcb8], 0
jne 0x408923
mov dword [ebp - 0x754], 0
jmp 0x408b6e
mov edx, dword [ebp - 0xcb8]
mov dword [ebp - 0x504], edx
push edx
call 0x40893c
add byte [esi], dh
inc esp
dec ebp
dec esp
inc esp
aaa
add esp, 4
xor edx, 0x2c0
jmp 0x40894a
pop edx
push ebx
and ebx, 0x3bdd
add byte [eax], al
xor ebx, 0xdd4f
pop ebx
push ecx
xor ecx, 0x16077
pop ecx
lea eax, [ebp - 0x1790]
mov dword [ebp - 0xcb4], eax
mov ecx, dword [ebp - 0x504]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcb0], edx
xor eax, eax
mov word [ebp - 0x230], ax
xor ecx, ecx
mov word [ebp - 0x44], cx
push edi
push ebx
add esp, 4
or edi, 0x6c3
xor edi, 0x4450
pop edi
push edi
and edi, 0x3133
pop edi
push edi
push edi
add esp, 4
xor edi, 0x131b9
or edi, 0x8046
and edi, 0x9227
pop edi
mov edx, dword [ebp - 0xcb0]
mov ax, word [edx]
mov word [ebp - 0x104a], ax
mov ecx, dword [ebp - 0xcb0]
add ecx, 2
mov dword [ebp - 0xcb0], ecx
mov dx, word [ebp - 0x104a]
mov word [ebp - 0x230], dx
mov eax, dword [ebp - 0xcb4]
mov cx, word [eax]
mov word [ebp - 0x104c], cx
mov edx, dword [ebp - 0xcb4]
add edx, 2
mov dword [ebp - 0xcb4], edx
mov ax, word [ebp - 0x104c]
mov word [ebp - 0x44], ax
push esi
push ecx
add esp, 4
jmp 0x408a1e
xor esi, 0x1834c
pop esi
push ebx
push ecx
add esp, 4
call 0x408a36
add byte [edx + 0x4d], cl
inc edi
inc edx
xor edi, dword [ebx + eax*4]
les eax, [ebx + ebx*2]
push edx
push edx
add esp, 4
sub edx, 0x123f6
pop edx
movzx ecx, word [ebp - 0x44]
test ecx, ecx
jne 0x408a63
movzx edx, word [ebp - 0x230]
movzx eax, word [ebp - 0x44]
sub edx, eax
mov dword [ebp - 0x15fc], edx
jmp 0x408abd
movzx ecx, word [ebp - 0x230]
movzx edx, word [ebp - 0x44]
cmp ecx, edx
je 0x40898b
movzx eax, word [ebp - 0x230]
xor eax, 0x20
movzx ecx, word [ebp - 0x44]
cmp eax, ecx
je 0x40898b
movzx edx, word [ebp - 0x230]
movzx eax, word [ebp - 0x44]
cmp edx, eax
jge 0x408aa7
mov dword [ebp - 0x15f8], 0xffffffff
jmp 0x408ab1
mov dword [ebp - 0x15f8], 1
mov ecx, dword [ebp - 0x15f8]
mov dword [ebp - 0x15fc], ecx
invalid
cmp dword [ebp - 0x15fc], 0
jne 0x408b06
push edi
push edx
add esp, 4
jmp 0x408ad2
pop edi
push esi
sub esi, 0x16aec
call 0x408ae8
add byte [esi], dh
aaa
dec edx
dec esi
inc ebp
dec esp
inc ebp
inc esi
add esp, 4
add esi, 0xf525
xor esi, 0x540f
pop esi
mov edx, dword [ebp - 0x504]
mov dword [ebp - 0x754], edx
jmp 0x408b6e
push ecx
push ecx
add esp, 4
or ecx, 0x18c
sub ecx, 0xefa6
xor ecx, 0xb193
xor ecx, 0xbaab
pop ecx
push esi
or esi, 0x15653
sub esi, 0x79b0
sub esi, 0x145e8
pop esi
mov eax, dword [ebp - 0x504]
mov ecx, dword [eax]
mov dword [ebp - 0x504], ecx
mov edx, dword [ebp - 0x504]
cmp edx, dword [ebp - 0xcb8]
je 0x408b64
mov eax, dword [ebp - 0x504]
cmp dword [eax + 0x30], 0
jne 0x40892f
mov dword [ebp - 0x754], 0
push ecx
or ecx, 0xf22c
call 0x408b82
add byte [ebx + eax*2], dh
xor ecx, dword [edx + 0x41]
dec esi
cmp dword [ebx - 0xe7efb3c], eax
fnstcw word [0x57590000]
push edi
Function at 0x408ae8
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add dword [eax], eax
pop ebx
push edx
call 0x408907
add byte [ecx + 0x33], cl
aas
dec esp
inc edx
inc ebp
dec eax
inc ebx
dec ebx
add esp, 4
pop edx
cmp dword [ebp - 0xcb8], 0
jne 0x408923
mov dword [ebp - 0x754], 0
jmp 0x408b6e
mov edx, dword [ebp - 0xcb8]
mov dword [ebp - 0x504], edx
push edx
call 0x40893c
add byte [esi], dh
inc esp
dec ebp
dec esp
inc esp
aaa
add esp, 4
xor edx, 0x2c0
jmp 0x40894a
pop edx
push ebx
and ebx, 0x3bdd
add byte [eax], al
xor ebx, 0xdd4f
pop ebx
push ecx
xor ecx, 0x16077
pop ecx
lea eax, [ebp - 0x1790]
mov dword [ebp - 0xcb4], eax
mov ecx, dword [ebp - 0x504]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcb0], edx
xor eax, eax
mov word [ebp - 0x230], ax
xor ecx, ecx
mov word [ebp - 0x44], cx
push edi
push ebx
add esp, 4
or edi, 0x6c3
xor edi, 0x4450
pop edi
push edi
and edi, 0x3133
pop edi
push edi
push edi
add esp, 4
xor edi, 0x131b9
or edi, 0x8046
and edi, 0x9227
pop edi
mov edx, dword [ebp - 0xcb0]
mov ax, word [edx]
mov word [ebp - 0x104a], ax
mov ecx, dword [ebp - 0xcb0]
add ecx, 2
mov dword [ebp - 0xcb0], ecx
mov dx, word [ebp - 0x104a]
mov word [ebp - 0x230], dx
mov eax, dword [ebp - 0xcb4]
mov cx, word [eax]
mov word [ebp - 0x104c], cx
mov edx, dword [ebp - 0xcb4]
add edx, 2
mov dword [ebp - 0xcb4], edx
mov ax, word [ebp - 0x104c]
mov word [ebp - 0x44], ax
push esi
push ecx
add esp, 4
jmp 0x408a1e
xor esi, 0x1834c
pop esi
push ebx
push ecx
add esp, 4
call 0x408a36
add byte [edx + 0x4d], cl
inc edi
inc edx
xor edi, dword [ebx + eax*4]
les eax, [ebx + ebx*2]
push edx
push edx
add esp, 4
sub edx, 0x123f6
pop edx
movzx ecx, word [ebp - 0x44]
test ecx, ecx
jne 0x408a63
movzx edx, word [ebp - 0x230]
movzx eax, word [ebp - 0x44]
sub edx, eax
mov dword [ebp - 0x15fc], edx
jmp 0x408abd
movzx ecx, word [ebp - 0x230]
movzx edx, word [ebp - 0x44]
cmp ecx, edx
je 0x40898b
movzx eax, word [ebp - 0x230]
xor eax, 0x20
movzx ecx, word [ebp - 0x44]
cmp eax, ecx
je 0x40898b
movzx edx, word [ebp - 0x230]
movzx eax, word [ebp - 0x44]
cmp edx, eax
jge 0x408aa7
mov dword [ebp - 0x15f8], 0xffffffff
jmp 0x408ab1
mov dword [ebp - 0x15f8], 1
mov ecx, dword [ebp - 0x15f8]
mov dword [ebp - 0x15fc], ecx
invalid
cmp dword [ebp - 0x15fc], 0
jne 0x408b06
push edi
push edx
add esp, 4
jmp 0x408ad2
pop edi
push esi
sub esi, 0x16aec
call 0x408ae8
add byte [esi], dh
aaa
dec edx
dec esi
inc ebp
dec esp
inc ebp
inc esi
add esp, 4
add esi, 0xf525
xor esi, 0x540f
pop esi
mov edx, dword [ebp - 0x504]
mov dword [ebp - 0x754], edx
jmp 0x408b6e
push ecx
push ecx
add esp, 4
or ecx, 0x18c
sub ecx, 0xefa6
xor ecx, 0xb193
xor ecx, 0xbaab
pop ecx
push esi
or esi, 0x15653
sub esi, 0x79b0
sub esi, 0x145e8
pop esi
mov eax, dword [ebp - 0x504]
mov ecx, dword [eax]
mov dword [ebp - 0x504], ecx
mov edx, dword [ebp - 0x504]
cmp edx, dword [ebp - 0xcb8]
je 0x408b64
mov eax, dword [ebp - 0x504]
cmp dword [eax + 0x30], 0
jne 0x40892f
mov dword [ebp - 0x754], 0
push ecx
or ecx, 0xf22c
call 0x408b82
add byte [ebx + eax*2], dh
xor ecx, dword [edx + 0x41]
dec esi
cmp dword [ebx - 0xe7efb3c], eax
fnstcw word [0x57590000]
push edi
Function at 0x408b82
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add dword [eax], eax
pop ebx
push edx
call 0x408907
add byte [ecx + 0x33], cl
aas
dec esp
inc edx
inc ebp
dec eax
inc ebx
dec ebx
add esp, 4
pop edx
cmp dword [ebp - 0xcb8], 0
jne 0x408923
mov dword [ebp - 0x754], 0
jmp 0x408b6e
mov edx, dword [ebp - 0xcb8]
mov dword [ebp - 0x504], edx
push edx
call 0x40893c
add byte [esi], dh
inc esp
dec ebp
dec esp
inc esp
aaa
add esp, 4
xor edx, 0x2c0
jmp 0x40894a
pop edx
push ebx
and ebx, 0x3bdd
add byte [eax], al
xor ebx, 0xdd4f
pop ebx
push ecx
xor ecx, 0x16077
pop ecx
lea eax, [ebp - 0x1790]
mov dword [ebp - 0xcb4], eax
mov ecx, dword [ebp - 0x504]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcb0], edx
xor eax, eax
mov word [ebp - 0x230], ax
xor ecx, ecx
mov word [ebp - 0x44], cx
push edi
push ebx
add esp, 4
or edi, 0x6c3
xor edi, 0x4450
pop edi
push edi
and edi, 0x3133
pop edi
push edi
push edi
add esp, 4
xor edi, 0x131b9
or edi, 0x8046
and edi, 0x9227
pop edi
mov edx, dword [ebp - 0xcb0]
mov ax, word [edx]
mov word [ebp - 0x104a], ax
mov ecx, dword [ebp - 0xcb0]
add ecx, 2
mov dword [ebp - 0xcb0], ecx
mov dx, word [ebp - 0x104a]
mov word [ebp - 0x230], dx
mov eax, dword [ebp - 0xcb4]
mov cx, word [eax]
mov word [ebp - 0x104c], cx
mov edx, dword [ebp - 0xcb4]
add edx, 2
mov dword [ebp - 0xcb4], edx
mov ax, word [ebp - 0x104c]
mov word [ebp - 0x44], ax
push esi
push ecx
add esp, 4
jmp 0x408a1e
xor esi, 0x1834c
pop esi
push ebx
push ecx
add esp, 4
call 0x408a36
add byte [edx + 0x4d], cl
inc edi
inc edx
xor edi, dword [ebx + eax*4]
les eax, [ebx + ebx*2]
push edx
push edx
add esp, 4
sub edx, 0x123f6
pop edx
movzx ecx, word [ebp - 0x44]
test ecx, ecx
jne 0x408a63
movzx edx, word [ebp - 0x230]
movzx eax, word [ebp - 0x44]
sub edx, eax
mov dword [ebp - 0x15fc], edx
jmp 0x408abd
movzx ecx, word [ebp - 0x230]
movzx edx, word [ebp - 0x44]
cmp ecx, edx
je 0x40898b
movzx eax, word [ebp - 0x230]
xor eax, 0x20
movzx ecx, word [ebp - 0x44]
cmp eax, ecx
je 0x40898b
movzx edx, word [ebp - 0x230]
movzx eax, word [ebp - 0x44]
cmp edx, eax
jge 0x408aa7
mov dword [ebp - 0x15f8], 0xffffffff
jmp 0x408ab1
mov dword [ebp - 0x15f8], 1
mov ecx, dword [ebp - 0x15f8]
mov dword [ebp - 0x15fc], ecx
invalid
cmp dword [ebp - 0x15fc], 0
jne 0x408b06
push edi
push edx
add esp, 4
jmp 0x408ad2
pop edi
push esi
sub esi, 0x16aec
call 0x408ae8
add byte [esi], dh
aaa
dec edx
dec esi
inc ebp
dec esp
inc ebp
inc esi
add esp, 4
add esi, 0xf525
xor esi, 0x540f
pop esi
mov edx, dword [ebp - 0x504]
mov dword [ebp - 0x754], edx
jmp 0x408b6e
push ecx
push ecx
add esp, 4
or ecx, 0x18c
sub ecx, 0xefa6
xor ecx, 0xb193
xor ecx, 0xbaab
pop ecx
push esi
or esi, 0x15653
sub esi, 0x79b0
sub esi, 0x145e8
pop esi
mov eax, dword [ebp - 0x504]
mov ecx, dword [eax]
mov dword [ebp - 0x504], ecx
mov edx, dword [ebp - 0x504]
cmp edx, dword [ebp - 0xcb8]
je 0x408b64
mov eax, dword [ebp - 0x504]
cmp dword [eax + 0x30], 0
jne 0x40892f
mov dword [ebp - 0x754], 0
push ecx
or ecx, 0xf22c
call 0x408b82
add byte [ebx + eax*2], dh
xor ecx, dword [edx + 0x41]
dec esi
cmp dword [ebx - 0xe7efb3c], eax
fnstcw word [0x57590000]
push edi
Function at 0x408b8c
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edi
sub edi, 0x5adf
xor edi, 0x9ad5
sub edi, 0x9314
pop edi

Function at 0x408ba0
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
cmp dword [ebp - 0x754], 0
jne 0x408bea
push edx
add edx, 0xb4dd
or edx, 0x16b2c
add dword [eax], eax
pop edx
push esi
push edx
add esp, 4
add esi, 0x6a95
and esi, 0x1e5b
xor esi, 0x630d
pop esi
push edi
push edx
add esp, 4
add edi, 0xc3d7
pop edi
mov dword [ebp - 0x7a0], 0
jmp 0x409712
push ebx
push eax
add esp, 4
sub ebx, 0x22ab
and ebx, 0xcead
or ebx, 0x3f71
and ebx, 0x5099
pop ebx
push edx
and edx, 0x6073
add edx, 0x17b7c
sub edx, 0xb44b
pop edx
mov ecx, dword [ebp - 0x754]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3a8], edx
mov dword [ebp - 0x764], 0
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0x1600], eax
cmp dword [ebp - 0x1600], 0
jne 0x408c5b
mov ecx, dword [ebp - 0x764]
mov dword [ebp - 0x3e0], ecx
jmp 0x408f4c
mov edx, dword [ebp - 0x1600]
mov eax, dword [ebp - 0x3a8]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1604], eax
jne 0x408c83
mov ecx, dword [ebp - 0x764]
mov dword [ebp - 0x3e0], ecx
jmp 0x408f4c
mov edx, 8
imul eax, edx, 0
invalid
invalid
cld
invalid
invalid

Function at 0x408bb4
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
cmp dword [ebp - 0x754], 0
jne 0x408bea
push edx
add edx, 0xb4dd
or edx, 0x16b2c
add dword [eax], eax
pop edx
push esi
push edx
add esp, 4
add esi, 0x6a95
and esi, 0x1e5b
xor esi, 0x630d
pop esi
push edi
push edx
add esp, 4
add edi, 0xc3d7
pop edi
mov dword [ebp - 0x7a0], 0
jmp 0x409712
push ebx
push eax
add esp, 4
sub ebx, 0x22ab
and ebx, 0xcead
or ebx, 0x3f71
and ebx, 0x5099
pop ebx
push edx
and edx, 0x6073
add edx, 0x17b7c
sub edx, 0xb44b
pop edx
mov ecx, dword [ebp - 0x754]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3a8], edx
mov dword [ebp - 0x764], 0
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0x1600], eax
cmp dword [ebp - 0x1600], 0
jne 0x408c5b
mov ecx, dword [ebp - 0x764]
mov dword [ebp - 0x3e0], ecx
jmp 0x408f4c
mov edx, dword [ebp - 0x1600]
mov eax, dword [ebp - 0x3a8]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1604], eax
jne 0x408c83
mov ecx, dword [ebp - 0x764]
mov dword [ebp - 0x3e0], ecx
jmp 0x408f4c
mov edx, 8
imul eax, edx, 0
invalid
invalid
cld
invalid
invalid
Function at 0x408df3
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x75c]
add eax, 1
mov dword [ebp - 0x75c], eax
mov ecx, dword [ebp - 0x758]
mov edx, dword [ebp - 0x75c]
cmp edx, dword [ecx + 0x18]
jae 0x408f40
mov eax, dword [ebp - 0x75c]
mov ecx, dword [ebp - 0x198c]
mov edx, dword [ebp - 0x3a8]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x760], edx
mov eax, dword [ebp - 0x75c]
mov ecx, dword [ebp - 0x1990]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1994]
mov ecx, dword [ebp - 0x3a8]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x1998], ecx
mov dword [ebp - 0x1c8], 0
jmp 0x408da4
mov edx, dword [ebp - 0x1c8]
add edx, 1
mov dword [ebp - 0x1c8], edx
mov eax, dword [ebp - 0x760]
add eax, dword [ebp - 0x1c8]
movsx ecx, byte [eax]
test ecx, ecx
je 0x408e56
mov edx, dword [ebp - 0x1c8]
movsx eax, byte [ebp + edx - 0x898]
test eax, eax
je 0x408e56
push eax
xor eax, 0x9faf
add eax, 0x10be2
sub eax, 0x14515
pop eax
push edi
call 0x408df3
add byte [edx], bh
xor eax, 0x40323b38
add esp, 4
and edi, 0x16fd3
xor edi, 0xad73
pop edi
mov ecx, dword [ebp - 0x760]
add ecx, dword [ebp - 0x1c8]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1c8]
movsx ecx, byte [ebp + eax - 0x898]
cmp edx, ecx
je 0x408e48
mov edx, dword [ebp - 0x760]
add edx, dword [ebp - 0x1c8]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1c8]
movsx edx, byte [ebp + ecx - 0x898]
cmp eax, edx
jne 0x408e4f
jmp 0x408d95
jmp 0x408e56
push edi
add edi, 0x1311d
jmp 0x408e62
call 0x408e70
add byte [ebx], bh
inc ebx
xor bh, byte [esi]
dec edx
xor edi, dword [ecx]
inc esp
add esp, 4
pop edi
push edi
add edi, 0x1748b
or edi, 0x138ef
or edi, 0x5fd9
pop edi
mov eax, dword [ebp - 0x760]
add eax, dword [ebp - 0x1c8]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1c8]
movsx eax, byte [ebp + edx - 0x898]
cmp ecx, eax
jne 0x408eb5
mov dword [ebp - 0xcbc], 0
jmp 0x408f24
push esi
jmp 0x408ebb
add esi, 0x16bac
sub esi, 0x5288
sub esi, 0xa785
pop esi
push eax
and eax, 0x15123
sub eax, 0x11a53
jmp 0x408ee0
add eax, 0x927a
pop eax
mov ecx, dword [ebp - 0x760]
add ecx, dword [ebp - 0x1c8]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1c8]
movsx ecx, byte [ebp + eax - 0x898]
or ecx, 0x20
cmp edx, ecx
jge 0x408f1a
mov dword [ebp - 0xcbc], 0xffffffff
jmp 0x408f24
mov dword [ebp - 0xcbc], 1
cmp dword [ebp - 0xcbc], 0
jne 0x408f3b
mov edx, dword [ebp - 0x1998]
mov dword [ebp - 0x3e0], edx
jmp 0x408f4c
jmp 0x408d25
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0x3e0], eax
cmp dword [ebp - 0x3e0], 0
je 0x409027
push edx
sub edx, 0xa06
push es
or al, byte [eax]
add byte [ecx + 0x1323fe2], al
add byte [ecx + 0x1274cf2], al
add bl, ch
push es
pop edx
Function at 0x408e24
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x75c]
add eax, 1
mov dword [ebp - 0x75c], eax
mov ecx, dword [ebp - 0x758]
mov edx, dword [ebp - 0x75c]
cmp edx, dword [ecx + 0x18]
jae 0x408f40
mov eax, dword [ebp - 0x75c]
mov ecx, dword [ebp - 0x198c]
mov edx, dword [ebp - 0x3a8]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x760], edx
mov eax, dword [ebp - 0x75c]
mov ecx, dword [ebp - 0x1990]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1994]
mov ecx, dword [ebp - 0x3a8]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x1998], ecx
mov dword [ebp - 0x1c8], 0
jmp 0x408da4
mov edx, dword [ebp - 0x1c8]
add edx, 1
mov dword [ebp - 0x1c8], edx
mov eax, dword [ebp - 0x760]
add eax, dword [ebp - 0x1c8]
movsx ecx, byte [eax]
test ecx, ecx
je 0x408e56
mov edx, dword [ebp - 0x1c8]
movsx eax, byte [ebp + edx - 0x898]
test eax, eax
je 0x408e56
push eax
xor eax, 0x9faf
add eax, 0x10be2
sub eax, 0x14515
pop eax
push edi
call 0x408df3
add byte [edx], bh
xor eax, 0x40323b38
add esp, 4
and edi, 0x16fd3
xor edi, 0xad73
pop edi
mov ecx, dword [ebp - 0x760]
add ecx, dword [ebp - 0x1c8]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1c8]
movsx ecx, byte [ebp + eax - 0x898]
cmp edx, ecx
je 0x408e48
mov edx, dword [ebp - 0x760]
add edx, dword [ebp - 0x1c8]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1c8]
movsx edx, byte [ebp + ecx - 0x898]
cmp eax, edx
jne 0x408e4f
jmp 0x408d95
jmp 0x408e56
push edi
add edi, 0x1311d
jmp 0x408e62
call 0x408e70
add byte [ebx], bh
inc ebx
xor bh, byte [esi]
dec edx
xor edi, dword [ecx]
inc esp
add esp, 4
pop edi
push edi
add edi, 0x1748b
or edi, 0x138ef
or edi, 0x5fd9
pop edi
mov eax, dword [ebp - 0x760]
add eax, dword [ebp - 0x1c8]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1c8]
movsx eax, byte [ebp + edx - 0x898]
cmp ecx, eax
jne 0x408eb5
mov dword [ebp - 0xcbc], 0
jmp 0x408f24
push esi
jmp 0x408ebb
add esi, 0x16bac
sub esi, 0x5288
sub esi, 0xa785
pop esi
push eax
and eax, 0x15123
sub eax, 0x11a53
jmp 0x408ee0
add eax, 0x927a
pop eax
mov ecx, dword [ebp - 0x760]
add ecx, dword [ebp - 0x1c8]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1c8]
movsx ecx, byte [ebp + eax - 0x898]
or ecx, 0x20
cmp edx, ecx
jge 0x408f1a
mov dword [ebp - 0xcbc], 0xffffffff
jmp 0x408f24
mov dword [ebp - 0xcbc], 1
cmp dword [ebp - 0xcbc], 0
jne 0x408f3b
mov edx, dword [ebp - 0x1998]
mov dword [ebp - 0x3e0], edx
jmp 0x408f4c
jmp 0x408d25
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0x3e0], eax
cmp dword [ebp - 0x3e0], 0
je 0x409027
push edx
sub edx, 0xa06
push es
or al, byte [eax]
add byte [ecx + 0x1323fe2], al
add byte [ecx + 0x1274cf2], al
add bl, ch
push es
pop edx
Function at 0x408e70
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x75c]
add eax, 1
mov dword [ebp - 0x75c], eax
mov ecx, dword [ebp - 0x758]
mov edx, dword [ebp - 0x75c]
cmp edx, dword [ecx + 0x18]
jae 0x408f40
mov eax, dword [ebp - 0x75c]
mov ecx, dword [ebp - 0x198c]
mov edx, dword [ebp - 0x3a8]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x760], edx
mov eax, dword [ebp - 0x75c]
mov ecx, dword [ebp - 0x1990]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1994]
mov ecx, dword [ebp - 0x3a8]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x1998], ecx
mov dword [ebp - 0x1c8], 0
jmp 0x408da4
mov edx, dword [ebp - 0x1c8]
add edx, 1
mov dword [ebp - 0x1c8], edx
mov eax, dword [ebp - 0x760]
add eax, dword [ebp - 0x1c8]
movsx ecx, byte [eax]
test ecx, ecx
je 0x408e56
mov edx, dword [ebp - 0x1c8]
movsx eax, byte [ebp + edx - 0x898]
test eax, eax
je 0x408e56
push eax
xor eax, 0x9faf
add eax, 0x10be2
sub eax, 0x14515
pop eax
push edi
call 0x408df3
add byte [edx], bh
xor eax, 0x40323b38
add esp, 4
and edi, 0x16fd3
xor edi, 0xad73
pop edi
mov ecx, dword [ebp - 0x760]
add ecx, dword [ebp - 0x1c8]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1c8]
movsx ecx, byte [ebp + eax - 0x898]
cmp edx, ecx
je 0x408e48
mov edx, dword [ebp - 0x760]
add edx, dword [ebp - 0x1c8]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1c8]
movsx edx, byte [ebp + ecx - 0x898]
cmp eax, edx
jne 0x408e4f
jmp 0x408d95
jmp 0x408e56
push edi
add edi, 0x1311d
jmp 0x408e62
call 0x408e70
add byte [ebx], bh
inc ebx
xor bh, byte [esi]
dec edx
xor edi, dword [ecx]
inc esp
add esp, 4
pop edi
push edi
add edi, 0x1748b
or edi, 0x138ef
or edi, 0x5fd9
pop edi
mov eax, dword [ebp - 0x760]
add eax, dword [ebp - 0x1c8]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1c8]
movsx eax, byte [ebp + edx - 0x898]
cmp ecx, eax
jne 0x408eb5
mov dword [ebp - 0xcbc], 0
jmp 0x408f24
push esi
jmp 0x408ebb
add esi, 0x16bac
sub esi, 0x5288
sub esi, 0xa785
pop esi
push eax
and eax, 0x15123
sub eax, 0x11a53
jmp 0x408ee0
add eax, 0x927a
pop eax
mov ecx, dword [ebp - 0x760]
add ecx, dword [ebp - 0x1c8]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1c8]
movsx ecx, byte [ebp + eax - 0x898]
or ecx, 0x20
cmp edx, ecx
jge 0x408f1a
mov dword [ebp - 0xcbc], 0xffffffff
jmp 0x408f24
mov dword [ebp - 0xcbc], 1
cmp dword [ebp - 0xcbc], 0
jne 0x408f3b
mov edx, dword [ebp - 0x1998]
mov dword [ebp - 0x3e0], edx
jmp 0x408f4c
jmp 0x408d25
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0x3e0], eax
cmp dword [ebp - 0x3e0], 0
je 0x409027
push edx
sub edx, 0xa06
push es
or al, byte [eax]
add byte [ecx + 0x1323fe2], al
add byte [ecx + 0x1274cf2], al
add bl, ch
push es
pop edx
Function at 0x408fae
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push es
or al, byte [eax]
add byte [ecx + 0x1323fe2], al
add byte [ecx + 0x1274cf2], al
add bl, ch
push es
inc edi
cmp eax, dword [esi + edi + 0x4e]
pop edx
push ecx
or ecx, 0x15c5c
pop ecx
push ecx
and ecx, 0x17a58
add ecx, 0xc49
pop ecx
mov ecx, dword [ebp - 0x3e0]
mov dword [ebp - 0x1d24], ecx
push esi
push edx
add esp, 4
and esi, 0x14bc5
call 0x408fae
add byte [ebx + eax*2], dh
xor eax, 0x8350364b
les eax, [ecx + eax*4]
test byte [0x5e0000c2], 0x50
call 0x408fc5
add byte [edi], dh
inc esi
cmp ecx, dword [ebx + 0x40]
add esp, 4
pop eax
mov edx, dword [ebp - 0x1d24]
mov dword [ebp - 0x199c], edx
lea eax, [ebp - 0x1754]
push eax
call dword [ebp - 0x199c]
test eax, eax
jne 0x409027
push ebx
call 0x408ff6
add byte [eax + 0x46], dl
cmp edi, dword [edi]
dec esp
xor edi, dword [edi]
cmp cl, byte [ebp - 0x7d]
les eax, [ecx + eax*4]
je 0x409011
add byte [eax], al
pop ebx
push ecx
push eax
add esp, 4
and ecx, 0xea49
sub ecx, 0x7c6c
sub ecx, 0x8186
pop ecx
mov dword [ebp - 0x7a0], 0
jmp 0x409712
push eax
xor eax, 0xc90c
pop eax
push esi
push edi
add esp, 4
or esi, 0xce29
jmp 0x409041
and esi, 0x12f9c
pop esi
push ebx
push edx
add esp, 4
and ebx, 0x6910
jmp 0x409058
pop ebx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x19a0], ecx
mov edx, dword [ebp - 0x19a0]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19a4], eax
mov ecx, dword [ebp - 0x19a4]
mov dword [ebp - 0x160c], ecx
push edx
and edx, 0x16c8a
pop edx
push edi
call 0x409096
add byte [edx], bh
inc esp
xor eax, 0x83433b48
les eax, [ecx + eax*4]
iretd
Function at 0x408fc5
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push es
or al, byte [eax]
add byte [ecx + 0x1323fe2], al
add byte [ecx + 0x1274cf2], al
add bl, ch
push es
inc edi
cmp eax, dword [esi + edi + 0x4e]
pop edx
push ecx
or ecx, 0x15c5c
pop ecx
push ecx
and ecx, 0x17a58
add ecx, 0xc49
pop ecx
mov ecx, dword [ebp - 0x3e0]
mov dword [ebp - 0x1d24], ecx
push esi
push edx
add esp, 4
and esi, 0x14bc5
call 0x408fae
add byte [ebx + eax*2], dh
xor eax, 0x8350364b
les eax, [ecx + eax*4]
test byte [0x5e0000c2], 0x50
call 0x408fc5
add byte [edi], dh
inc esi
cmp ecx, dword [ebx + 0x40]
add esp, 4
pop eax
mov edx, dword [ebp - 0x1d24]
mov dword [ebp - 0x199c], edx
lea eax, [ebp - 0x1754]
push eax
call dword [ebp - 0x199c]
test eax, eax
jne 0x409027
push ebx
call 0x408ff6
add byte [eax + 0x46], dl
cmp edi, dword [edi]
dec esp
xor edi, dword [edi]
cmp cl, byte [ebp - 0x7d]
les eax, [ecx + eax*4]
je 0x409011
add byte [eax], al
pop ebx
push ecx
push eax
add esp, 4
and ecx, 0xea49
sub ecx, 0x7c6c
sub ecx, 0x8186
pop ecx
mov dword [ebp - 0x7a0], 0
jmp 0x409712
push eax
xor eax, 0xc90c
pop eax
push esi
push edi
add esp, 4
or esi, 0xce29
jmp 0x409041
and esi, 0x12f9c
pop esi
push ebx
push edx
add esp, 4
and ebx, 0x6910
jmp 0x409058
pop ebx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x19a0], ecx
mov edx, dword [ebp - 0x19a0]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19a4], eax
mov ecx, dword [ebp - 0x19a4]
mov dword [ebp - 0x160c], ecx
push edx
and edx, 0x16c8a
pop edx
push edi
call 0x409096
add byte [edx], bh
inc esp
xor eax, 0x83433b48
les eax, [ecx + eax*4]
iretd