joyce8/EMBER2024-capa huggingface dataset:
Function at 0x100c7c36
Capabilities:
Get number of processors

Disassembly:
cmp dword [ebp - 0xc88], 0
jle 0x100c7cf6
push ecx
xor ecx, 0x12b3c
or ecx, 0x10de4
and ecx, 0x177f5
jmp 0x100c7bf7
pop ecx
push esi
push edx
add esp, 4
or esi, 0xa74a
dec edx
cmpsd dword [esi], dword es:[edi]
add byte [eax], al
dec edx
cmpsd dword [esi], dword es:[edi]
add byte [eax], al
sub esi, 0x3096
sub esi, 0x14c55
pop esi
mov edx, dword [ebp - 0xac0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xabc]
movzx edx, byte [ecx]
cmp eax, edx
je 0x100c7c92
push esi
call 0x100c7c36
add byte [edx], bh
dec edx
cmp dword [edx + 0x3f], eax
cmp byte [edi + 0x3c], al
xor eax, 0xeb04c483
add edi, dword [ebx]
inc ebx
xor ebx, dword [esi + 0x52]
call 0x100c7c4d
add byte [esi], bh
dec ebx
cmp eax, 0x3e453339
add esp, 4
jmp 0x100c7c57
pop edx
mov eax, dword [ebp - 0xac0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xabc]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x100c7c7a
mov dword [ebp - 0x15a0], 1
jmp 0x100c7c84
mov dword [ebp - 0x15a0], 0xffffffff
mov ecx, dword [ebp - 0x15a0]
mov dword [ebp - 0xc8c], ecx
jmp 0x100c7cf6
push edi
call 0x100c7ca0
add byte [edx + 0x4e], al
xor edi, dword [eax]
dec ecx
dec ebx
dec esi
add esp, 4
sub edi, 0xba3a
pop edi
push ebx
xor ebx, 0x11ebc
and ebx, 0x146c8
or ebx, 0x10bd9
sub ebx, 0x9476
pop ebx
mov edx, dword [ebp - 0xc88]
sub edx, 1
mov dword [ebp - 0xc88], edx
mov eax, dword [ebp - 0xac0]
add eax, 1
mov dword [ebp - 0xac0], eax
mov ecx, dword [ebp - 0xabc]
add ecx, 1
mov dword [ebp - 0xabc], ecx
jmp 0x100c7bd1
mov edx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d4], edx
cmp dword [ebp - 0x15d4], 0
jne 0x100c7d4b
push esi
push eax
add esp, 4
add esi, 0xc7f7
pop esi
push eax
push eax
add esp, 4
add eax, 0x98a6
or eax, 0x16ea6
and eax, 0x13a69
pop eax
push edi
and edi, 0x2545
xor edi, 0x12194
pop edi
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0xab8], eax
jmp 0x100c7d8c
jmp 0x100c7a99
Function at 0x100c7c4d
Capabilities:
Get number of processors

Disassembly:
cmp dword [ebp - 0xc88], 0
jle 0x100c7cf6
push ecx
xor ecx, 0x12b3c
or ecx, 0x10de4
and ecx, 0x177f5
jmp 0x100c7bf7
pop ecx
push esi
push edx
add esp, 4
or esi, 0xa74a
dec edx
cmpsd dword [esi], dword es:[edi]
add byte [eax], al
dec edx
cmpsd dword [esi], dword es:[edi]
add byte [eax], al
sub esi, 0x3096
sub esi, 0x14c55
pop esi
mov edx, dword [ebp - 0xac0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xabc]
movzx edx, byte [ecx]
cmp eax, edx
je 0x100c7c92
push esi
call 0x100c7c36
add byte [edx], bh
dec edx
cmp dword [edx + 0x3f], eax
cmp byte [edi + 0x3c], al
xor eax, 0xeb04c483
add edi, dword [ebx]
inc ebx
xor ebx, dword [esi + 0x52]
call 0x100c7c4d
add byte [esi], bh
dec ebx
cmp eax, 0x3e453339
add esp, 4
jmp 0x100c7c57
pop edx
mov eax, dword [ebp - 0xac0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xabc]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x100c7c7a
mov dword [ebp - 0x15a0], 1
jmp 0x100c7c84
mov dword [ebp - 0x15a0], 0xffffffff
mov ecx, dword [ebp - 0x15a0]
mov dword [ebp - 0xc8c], ecx
jmp 0x100c7cf6
push edi
call 0x100c7ca0
add byte [edx + 0x4e], al
xor edi, dword [eax]
dec ecx
dec ebx
dec esi
add esp, 4
sub edi, 0xba3a
pop edi
push ebx
xor ebx, 0x11ebc
and ebx, 0x146c8
or ebx, 0x10bd9
sub ebx, 0x9476
pop ebx
mov edx, dword [ebp - 0xc88]
sub edx, 1
mov dword [ebp - 0xc88], edx
mov eax, dword [ebp - 0xac0]
add eax, 1
mov dword [ebp - 0xac0], eax
mov ecx, dword [ebp - 0xabc]
add ecx, 1
mov dword [ebp - 0xabc], ecx
jmp 0x100c7bd1
mov edx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d4], edx
cmp dword [ebp - 0x15d4], 0
jne 0x100c7d4b
push esi
push eax
add esp, 4
add esi, 0xc7f7
pop esi
push eax
push eax
add esp, 4
add eax, 0x98a6
or eax, 0x16ea6
and eax, 0x13a69
pop eax
push edi
and edi, 0x2545
xor edi, 0x12194
pop edi
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0xab8], eax
jmp 0x100c7d8c
jmp 0x100c7a99
Function at 0x100c7ca0
Capabilities:
Get number of processors

Disassembly:
cmp dword [ebp - 0xc88], 0
jle 0x100c7cf6
push ecx
xor ecx, 0x12b3c
or ecx, 0x10de4
and ecx, 0x177f5
jmp 0x100c7bf7
pop ecx
push esi
push edx
add esp, 4
or esi, 0xa74a
dec edx
cmpsd dword [esi], dword es:[edi]
add byte [eax], al
dec edx
cmpsd dword [esi], dword es:[edi]
add byte [eax], al
sub esi, 0x3096
sub esi, 0x14c55
pop esi
mov edx, dword [ebp - 0xac0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xabc]
movzx edx, byte [ecx]
cmp eax, edx
je 0x100c7c92
push esi
call 0x100c7c36
add byte [edx], bh
dec edx
cmp dword [edx + 0x3f], eax
cmp byte [edi + 0x3c], al
xor eax, 0xeb04c483
add edi, dword [ebx]
inc ebx
xor ebx, dword [esi + 0x52]
call 0x100c7c4d
add byte [esi], bh
dec ebx
cmp eax, 0x3e453339
add esp, 4
jmp 0x100c7c57
pop edx
mov eax, dword [ebp - 0xac0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xabc]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x100c7c7a
mov dword [ebp - 0x15a0], 1
jmp 0x100c7c84
mov dword [ebp - 0x15a0], 0xffffffff
mov ecx, dword [ebp - 0x15a0]
mov dword [ebp - 0xc8c], ecx
jmp 0x100c7cf6
push edi
call 0x100c7ca0
add byte [edx + 0x4e], al
xor edi, dword [eax]
dec ecx
dec ebx
dec esi
add esp, 4
sub edi, 0xba3a
pop edi
push ebx
xor ebx, 0x11ebc
and ebx, 0x146c8
or ebx, 0x10bd9
sub ebx, 0x9476
pop ebx
mov edx, dword [ebp - 0xc88]
sub edx, 1
mov dword [ebp - 0xc88], edx
mov eax, dword [ebp - 0xac0]
add eax, 1
mov dword [ebp - 0xac0], eax
mov ecx, dword [ebp - 0xabc]
add ecx, 1
mov dword [ebp - 0xabc], ecx
jmp 0x100c7bd1
mov edx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d4], edx
cmp dword [ebp - 0x15d4], 0
jne 0x100c7d4b
push esi
push eax
add esp, 4
add esi, 0xc7f7
pop esi
push eax
push eax
add esp, 4
add eax, 0x98a6
or eax, 0x16ea6
and eax, 0x13a69
pop eax
push edi
and edi, 0x2545
xor edi, 0x12194
pop edi
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0xab8], eax
jmp 0x100c7d8c
jmp 0x100c7a99
Function at 0x100c8482
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
sub esi, 0x14588
pop esi
cmp dword [ebp - 0xca4], 0
jne 0x100c84a1
mov dword [ebp - 0x750], 0
jmp 0x100c8701
mov ecx, dword [ebp - 0xca4]
mov dword [ebp - 0x508], ecx
push esi
jmp 0x100c84b5
pop esi
push edi
push esi
add esp, 4
call 0x100c84c9
add byte [0x47364550], dh
cmp esi, dword [edx]
inc esp
add esp, 4
sub edi, 0xa3a8
pop edi
push ebx
push esi
add esp, 4
sub ebx, 0xb346
add byte [eax], al
pop ebx
lea edx, [ebp - 0x1774]
mov dword [ebp - 0xca0], edx
mov eax, dword [ebp - 0x508]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc9c], ecx
xor edx, edx
mov word [ebp - 0x214], dx
xor eax, eax
mov word [ebp - 0x110], ax
push edx
add edx, 0x12f18
call 0x100c8521
add byte [edx + 0x43], cl
inc ecx
dec esi
aas
cmp byte [esi], dh
add esp, 4
call 0x100c8532
add byte [esi + edi], dh
inc ebp
inc eax
xor cl, byte [ecx + 0x3b]
xor al, byte [ebx + 0x575a04c4]
push edi
or edi, 0xa18d
pop edi
mov ecx, dword [ebp - 0xc9c]
mov dx, word [ecx]
mov word [ebp - 0x1036], dx
mov eax, dword [ebp - 0xc9c]
add eax, 2
mov dword [ebp - 0xc9c], eax
mov cx, word [ebp - 0x1036]
mov word [ebp - 0x214], cx
mov edx, dword [ebp - 0xca0]
mov ax, word [edx]
mov word [ebp - 0x1038], ax
mov ecx, dword [ebp - 0xca0]
add ecx, 2
mov dword [ebp - 0xca0], ecx
mov dx, word [ebp - 0x1038]
mov word [ebp - 0x110], dx
call dword [ebx + 0x53]
add esp, 4
jmp 0x100c85a3
sub ebx, 0x2abe
add ebx, 0x13ce5
add ebx, 0x14a81
pop ebx
push ebx
add ebx, 0x17580
xor ebx, 0xd7da
sub ebx, 0xccf9
pop ebx
movzx eax, word [ebp - 0x110]
test eax, eax
jne 0x100c85ed
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
sub ecx, edx
mov dword [ebp - 0x15ec], ecx
jmp 0x100c8650
movzx eax, word [ebp - 0x214]
cmp dword [ebp - 0x15ec], 0
jne 0x100c8699
push edx
push esi
add esp, 4
sub edx, 0x60a9
jmp 0x100c866d
xor edx, 0x113f2
call 0x100c867f
add byte [ebp + 0x50], al
inc esp
dec esi
inc esi
inc esp
add esp, 4
pop edx
push edx
xor edx, 0xb63e
pop edx
mov ecx, dword [ebp - 0x508]
mov dword [ebp - 0x750], ecx
jmp 0x100c8701
push edx
jmp 0x100c86a2
add edx, 0x15615
Function at 0x100c84c9
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
sub esi, 0x14588
pop esi
cmp dword [ebp - 0xca4], 0
jne 0x100c84a1
mov dword [ebp - 0x750], 0
jmp 0x100c8701
mov ecx, dword [ebp - 0xca4]
mov dword [ebp - 0x508], ecx
push esi
jmp 0x100c84b5
pop esi
push edi
push esi
add esp, 4
call 0x100c84c9
add byte [0x47364550], dh
cmp esi, dword [edx]
inc esp
add esp, 4
sub edi, 0xa3a8
pop edi
push ebx
push esi
add esp, 4
sub ebx, 0xb346
add byte [eax], al
pop ebx
lea edx, [ebp - 0x1774]
mov dword [ebp - 0xca0], edx
mov eax, dword [ebp - 0x508]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc9c], ecx
xor edx, edx
mov word [ebp - 0x214], dx
xor eax, eax
mov word [ebp - 0x110], ax
push edx
add edx, 0x12f18
call 0x100c8521
add byte [edx + 0x43], cl
inc ecx
dec esi
aas
cmp byte [esi], dh
add esp, 4
call 0x100c8532
add byte [esi + edi], dh
inc ebp
inc eax
xor cl, byte [ecx + 0x3b]
xor al, byte [ebx + 0x575a04c4]
push edi
or edi, 0xa18d
pop edi
mov ecx, dword [ebp - 0xc9c]
mov dx, word [ecx]
mov word [ebp - 0x1036], dx
mov eax, dword [ebp - 0xc9c]
add eax, 2
mov dword [ebp - 0xc9c], eax
mov cx, word [ebp - 0x1036]
mov word [ebp - 0x214], cx
mov edx, dword [ebp - 0xca0]
mov ax, word [edx]
mov word [ebp - 0x1038], ax
mov ecx, dword [ebp - 0xca0]
add ecx, 2
mov dword [ebp - 0xca0], ecx
mov dx, word [ebp - 0x1038]
mov word [ebp - 0x110], dx
call dword [ebx + 0x53]
add esp, 4
jmp 0x100c85a3
sub ebx, 0x2abe
add ebx, 0x13ce5
add ebx, 0x14a81
pop ebx
push ebx
add ebx, 0x17580
xor ebx, 0xd7da
sub ebx, 0xccf9
pop ebx
movzx eax, word [ebp - 0x110]
test eax, eax
jne 0x100c85ed
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
sub ecx, edx
mov dword [ebp - 0x15ec], ecx
jmp 0x100c8650
movzx eax, word [ebp - 0x214]
cmp dword [ebp - 0x15ec], 0
jne 0x100c8699
push edx
push esi
add esp, 4
sub edx, 0x60a9
jmp 0x100c866d
xor edx, 0x113f2
call 0x100c867f
add byte [ebp + 0x50], al
inc esp
dec esi
inc esi
inc esp
add esp, 4
pop edx
push edx
xor edx, 0xb63e
pop edx
mov ecx, dword [ebp - 0x508]
mov dword [ebp - 0x750], ecx
jmp 0x100c8701
push edx
jmp 0x100c86a2
add edx, 0x15615
Function at 0x100c8521
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
sub esi, 0x14588
pop esi
cmp dword [ebp - 0xca4], 0
jne 0x100c84a1
mov dword [ebp - 0x750], 0
jmp 0x100c8701
mov ecx, dword [ebp - 0xca4]
mov dword [ebp - 0x508], ecx
push esi
jmp 0x100c84b5
pop esi
push edi
push esi
add esp, 4
call 0x100c84c9
add byte [0x47364550], dh
cmp esi, dword [edx]
inc esp
add esp, 4
sub edi, 0xa3a8
pop edi
push ebx
push esi
add esp, 4
sub ebx, 0xb346
add byte [eax], al
pop ebx
lea edx, [ebp - 0x1774]
mov dword [ebp - 0xca0], edx
mov eax, dword [ebp - 0x508]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc9c], ecx
xor edx, edx
mov word [ebp - 0x214], dx
xor eax, eax
mov word [ebp - 0x110], ax
push edx
add edx, 0x12f18
call 0x100c8521
add byte [edx + 0x43], cl
inc ecx
dec esi
aas
cmp byte [esi], dh
add esp, 4
call 0x100c8532
add byte [esi + edi], dh
inc ebp
inc eax
xor cl, byte [ecx + 0x3b]
xor al, byte [ebx + 0x575a04c4]
push edi
or edi, 0xa18d
pop edi
mov ecx, dword [ebp - 0xc9c]
mov dx, word [ecx]
mov word [ebp - 0x1036], dx
mov eax, dword [ebp - 0xc9c]
add eax, 2
mov dword [ebp - 0xc9c], eax
mov cx, word [ebp - 0x1036]
mov word [ebp - 0x214], cx
mov edx, dword [ebp - 0xca0]
mov ax, word [edx]
mov word [ebp - 0x1038], ax
mov ecx, dword [ebp - 0xca0]
add ecx, 2
mov dword [ebp - 0xca0], ecx
mov dx, word [ebp - 0x1038]
mov word [ebp - 0x110], dx
call dword [ebx + 0x53]
add esp, 4
jmp 0x100c85a3
sub ebx, 0x2abe
add ebx, 0x13ce5
add ebx, 0x14a81
pop ebx
push ebx
add ebx, 0x17580
xor ebx, 0xd7da
sub ebx, 0xccf9
pop ebx
movzx eax, word [ebp - 0x110]
test eax, eax
jne 0x100c85ed
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
sub ecx, edx
mov dword [ebp - 0x15ec], ecx
jmp 0x100c8650
movzx eax, word [ebp - 0x214]
cmp dword [ebp - 0x15ec], 0
jne 0x100c8699
push edx
push esi
add esp, 4
sub edx, 0x60a9
jmp 0x100c866d
xor edx, 0x113f2
call 0x100c867f
add byte [ebp + 0x50], al
inc esp
dec esi
inc esi
inc esp
add esp, 4
pop edx
push edx
xor edx, 0xb63e
pop edx
mov ecx, dword [ebp - 0x508]
mov dword [ebp - 0x750], ecx
jmp 0x100c8701
push edx
jmp 0x100c86a2
add edx, 0x15615
Function at 0x100c8532
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
sub esi, 0x14588
pop esi
cmp dword [ebp - 0xca4], 0
jne 0x100c84a1
mov dword [ebp - 0x750], 0
jmp 0x100c8701
mov ecx, dword [ebp - 0xca4]
mov dword [ebp - 0x508], ecx
push esi
jmp 0x100c84b5
pop esi
push edi
push esi
add esp, 4
call 0x100c84c9
add byte [0x47364550], dh
cmp esi, dword [edx]
inc esp
add esp, 4
sub edi, 0xa3a8
pop edi
push ebx
push esi
add esp, 4
sub ebx, 0xb346
add byte [eax], al
pop ebx
lea edx, [ebp - 0x1774]
mov dword [ebp - 0xca0], edx
mov eax, dword [ebp - 0x508]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc9c], ecx
xor edx, edx
mov word [ebp - 0x214], dx
xor eax, eax
mov word [ebp - 0x110], ax
push edx
add edx, 0x12f18
call 0x100c8521
add byte [edx + 0x43], cl
inc ecx
dec esi
aas
cmp byte [esi], dh
add esp, 4
call 0x100c8532
add byte [esi + edi], dh
inc ebp
inc eax
xor cl, byte [ecx + 0x3b]
xor al, byte [ebx + 0x575a04c4]
push edi
or edi, 0xa18d
pop edi
mov ecx, dword [ebp - 0xc9c]
mov dx, word [ecx]
mov word [ebp - 0x1036], dx
mov eax, dword [ebp - 0xc9c]
add eax, 2
mov dword [ebp - 0xc9c], eax
mov cx, word [ebp - 0x1036]
mov word [ebp - 0x214], cx
mov edx, dword [ebp - 0xca0]
mov ax, word [edx]
mov word [ebp - 0x1038], ax
mov ecx, dword [ebp - 0xca0]
add ecx, 2
mov dword [ebp - 0xca0], ecx
mov dx, word [ebp - 0x1038]
mov word [ebp - 0x110], dx
call dword [ebx + 0x53]
add esp, 4
jmp 0x100c85a3
sub ebx, 0x2abe
add ebx, 0x13ce5
add ebx, 0x14a81
pop ebx
push ebx
add ebx, 0x17580
xor ebx, 0xd7da
sub ebx, 0xccf9
pop ebx
movzx eax, word [ebp - 0x110]
test eax, eax
jne 0x100c85ed
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
sub ecx, edx
mov dword [ebp - 0x15ec], ecx
jmp 0x100c8650
movzx eax, word [ebp - 0x214]
cmp dword [ebp - 0x15ec], 0
jne 0x100c8699
push edx
push esi
add esp, 4
sub edx, 0x60a9
jmp 0x100c866d
xor edx, 0x113f2
call 0x100c867f
add byte [ebp + 0x50], al
inc esp
dec esi
inc esi
inc esp
add esp, 4
pop edx
push edx
xor edx, 0xb63e
pop edx
mov ecx, dword [ebp - 0x508]
mov dword [ebp - 0x750], ecx
jmp 0x100c8701
push edx
jmp 0x100c86a2
add edx, 0x15615

Function at 0x100c85f4
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
movzx ecx, word [ebp - 0x110]
cmp eax, ecx
je 0x100c850c
movzx edx, word [ebp - 0x214]
xor edx, 0x20
movzx eax, word [ebp - 0x110]
cmp edx, eax
je 0x100c850c
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
cmp ecx, edx
jge 0x100c863a
mov dword [ebp - 0x15e8], 0xffffffff
jmp 0x100c8644
mov dword [ebp - 0x15e8], 1
mov eax, dword [ebp - 0x15e8]
mov dword [ebp - 0x15ec], eax
invalid
Function at 0x100c867f
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
sub esi, 0x14588
pop esi
cmp dword [ebp - 0xca4], 0
jne 0x100c84a1
mov dword [ebp - 0x750], 0
jmp 0x100c8701
mov ecx, dword [ebp - 0xca4]
mov dword [ebp - 0x508], ecx
push esi
jmp 0x100c84b5
pop esi
push edi
push esi
add esp, 4
call 0x100c84c9
add byte [0x47364550], dh
cmp esi, dword [edx]
inc esp
add esp, 4
sub edi, 0xa3a8
pop edi
push ebx
push esi
add esp, 4
sub ebx, 0xb346
add byte [eax], al
pop ebx
lea edx, [ebp - 0x1774]
mov dword [ebp - 0xca0], edx
mov eax, dword [ebp - 0x508]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc9c], ecx
xor edx, edx
mov word [ebp - 0x214], dx
xor eax, eax
mov word [ebp - 0x110], ax
push edx
add edx, 0x12f18
call 0x100c8521
add byte [edx + 0x43], cl
inc ecx
dec esi
aas
cmp byte [esi], dh
add esp, 4
call 0x100c8532
add byte [esi + edi], dh
inc ebp
inc eax
xor cl, byte [ecx + 0x3b]
xor al, byte [ebx + 0x575a04c4]
push edi
or edi, 0xa18d
pop edi
mov ecx, dword [ebp - 0xc9c]
mov dx, word [ecx]
mov word [ebp - 0x1036], dx
mov eax, dword [ebp - 0xc9c]
add eax, 2
mov dword [ebp - 0xc9c], eax
mov cx, word [ebp - 0x1036]
mov word [ebp - 0x214], cx
mov edx, dword [ebp - 0xca0]
mov ax, word [edx]
mov word [ebp - 0x1038], ax
mov ecx, dword [ebp - 0xca0]
add ecx, 2
mov dword [ebp - 0xca0], ecx
mov dx, word [ebp - 0x1038]
mov word [ebp - 0x110], dx
call dword [ebx + 0x53]
add esp, 4
jmp 0x100c85a3
sub ebx, 0x2abe
add ebx, 0x13ce5
add ebx, 0x14a81
pop ebx
push ebx
add ebx, 0x17580
xor ebx, 0xd7da
sub ebx, 0xccf9
pop ebx
movzx eax, word [ebp - 0x110]
test eax, eax
jne 0x100c85ed
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
sub ecx, edx
mov dword [ebp - 0x15ec], ecx
jmp 0x100c8650
movzx eax, word [ebp - 0x214]
cmp dword [ebp - 0x15ec], 0
jne 0x100c8699
push edx
push esi
add esp, 4
sub edx, 0x60a9
jmp 0x100c866d
xor edx, 0x113f2
call 0x100c867f
add byte [ebp + 0x50], al
inc esp
dec esi
inc esi
inc esp
add esp, 4
pop edx
push edx
xor edx, 0xb63e
pop edx
mov ecx, dword [ebp - 0x508]
mov dword [ebp - 0x750], ecx
jmp 0x100c8701
push edx
jmp 0x100c86a2
add edx, 0x15615

Function at 0x100c86a8
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
sub edx, 0x25a5
pop edx
push eax
push edi
add esp, 4
add eax, 0xb533
pop eax
push esi
add esi, 0xa1e2
jmp 0x100c86ca
pop esi
mov edx, dword [ebp - 0x508]
mov eax, dword [edx]
mov dword [ebp - 0x508], eax
mov ecx, dword [ebp - 0x508]
cmp ecx, dword [ebp - 0xca4]
je 0x100c86f7
mov edx, dword [ebp - 0x508]
cmp dword [edx + 0x30], 0
jne 0x100c84ad
mov dword [ebp - 0x750], 0
Function at 0x100c92e6
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
call 0x100c92f3
add byte [edi], dh
xor eax, 0x354c4342
add esp, 4
xor edx, 0xbf15
pop edx
push esi
jmp 0x100c9304
xor esi, 0x104a7
xor esi, 0x44e8
or esi, 0x2fce
pop esi
cmp dword [ebp - 0x3e8], 0
je 0x100c9329
cmp dword [ebp - 0xab8], 0
jne 0x100c936f
push esi

Function at 0x100c92f3
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
call 0x100c92f3
add byte [edi], dh
xor eax, 0x354c4342
add esp, 4
xor edx, 0xbf15
pop edx
push esi
jmp 0x100c9304
xor esi, 0x104a7
xor esi, 0x44e8
or esi, 0x2fce
pop esi
cmp dword [ebp - 0x3e8], 0
je 0x100c9329
cmp dword [ebp - 0xab8], 0
jne 0x100c936f
push esi

Function at 0x100c932a
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push esi
add esp, 4
or esi, 0x875f
jmp 0x100c933b
call 0x100c934b
add byte [eax + 0x39], al
cmp eax, 0x49383e37
inc edi
cmp byte [edx], bh
add esp, 4
pop esi
push esi
push edi
add esp, 4
xor esi, 0x96d8
pop esi
mov edx, dword [ebp - 0x79c]
mov dword [ebp - 0x1990], edx
push 0
invalid
xchg ebp, eax
jo 0x100c9353
invalid

Function at 0x100c934b
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push esi
add esp, 4
or esi, 0x875f
jmp 0x100c933b
call 0x100c934b
add byte [eax + 0x39], al
cmp eax, 0x49383e37
inc edi
cmp byte [edx], bh
add esp, 4
pop esi
push esi
push edi
add esp, 4
xor esi, 0x96d8
pop esi
mov edx, dword [ebp - 0x79c]
mov dword [ebp - 0x1990], edx
push 0
invalid
xchg ebp, eax
jo 0x100c9353
invalid
Function at 0x100c9958
Capabilities:
Resolve function by parsing pe exports

Disassembly:
xor al, 0x39
inc ebp
pop esi
push edx
and edx, 0x5df8
loop 0x100c9952
pop ebp
add byte [eax], al
loop 0x100c9952
pop ebp
add byte [eax], al
pop edx
push edx
add edx, 0x9aae
pop edx
push ebx
push edx
add esp, 4
sub ebx, 0x11c20
pop ebx
push esi
xor esi, 0xec8f

Function at 0x100c9979
Capabilities:
Resolve function by parsing pe exports

Disassembly:
pop esi
cmp dword [ebp - 0x1620], 0
jne 0x100c9992
mov dword [ebp - 0x774], 0
jmp 0x100c9c39
mov edx, dword [ebp - 0x1620]
mov eax, dword [edx + 0xc]
or al, 0x8b
dec eax
or al, 0x89
lea esi, [eax]
invalid
invalid
call dword [ecx - 0x7f]
loope 0x100c993f
mov cl, 0
add byte [ecx + 0x9e36e9], al
add byte [ecx + 0xae29f1], al
add bl, ch
push es
pop ecx

Function at 0x100c99bb
Capabilities:
Resolve function by parsing pe exports

Disassembly:
inc ecx
dec edi
aas
pop ecx
push edx
sub edx, 0x5eec
sub edx, 0xe3d3
pop edx
push edx
and edx, 0x7cc4
pop edx
cmp dword [ebp - 0xcd0], 0
jne 0x100c99ee
mov dword [ebp - 0x774], 0
jmp 0x100c9c39
mov edx, dword [ebp - 0xcd0]
mov dword [ebp - 0x518], edx
Function at 0x100c9a27
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
or ebx, 0xfa09
and ebx, 0xc38a
xor ebx, 0x2090
pop ebx
push edi
jmp 0x100c9a18
jmp 0x100c9a1f
sub edi, 0x1173
sub edi, 0xd6cd
int 0xd6
add byte [eax], al
pop edi
lea eax, [ebp - 0x1790]
mov dword [ebp - 0xccc], eax
mov ecx, dword [ebp - 0x518]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcc8], edx
xor eax, eax
mov word [ebp - 0x220], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push edi
xor edi, 0xedfc
and edi, 0xb7db
add edi, 0x18283
sub edi, 0x178ee
pop edi
push edi
push ecx
add esp, 4
sub edi, 0x1381
xor edi, 0x1500
xor edi, 0xdb2c
pop edi
mov edx, dword [ebp - 0xcc8]
mov ax, word [edx]
mov word [ebp - 0x1042], ax
test dword [esi - 0x74000011], edi
lea edi, [eax]
invalid
invalid
inc dword [ebx - 0x7276fd3f]
cmp bl, dh
invalid
jmp dword [esi - 0x75]
xchg ebp, eax
mov esi, 0x66ffffef
mov dword [ebp - 0x220], edx
mov eax, dword [ebp - 0xccc]
mov cx, word [eax]
mov word [ebp - 0x1044], cx
mov edx, dword [ebp - 0xccc]
add edx, 2
mov dword [ebp - 0xccc], edx
mov ax, word [ebp - 0x1044]
mov word [ebp - 0x3c], ax
push edi
or edi, 0xdc1d
and edi, 0xe081
sub edi, 0xfde8
sub edi, 0x3636
pop edi
push edi
push eax
add esp, 4
or edi, 0x35bd
push esi
add esp, 4
call 0x100c9beb
add byte [edi + 0x40], cl
xor eax, 0x43364b33
add esp, 4
or esi, 0x70ad
pop esi
push ebx
xor ebx, 0x149d7
and ebx, 0x14e64
pop ebx
mov eax, dword [ebp - 0x518]
mov ecx, dword [eax]
mov dword [ebp - 0x518], ecx
mov edx, dword [ebp - 0x518]
cmp edx, dword [ebp - 0xcd0]
je 0x100c9c2f
mov eax, dword [ebp - 0x518]
cmp dword [eax + 0x30], 0
jne 0x100c99fa
mov dword [ebp - 0x774], 0
push edx
jmp 0x100c9c3f
jmp 0x100c9c46
add edx, 0xe714
pop edx
push ecx
add ecx, 0x6396
and ecx, 0xc18
pop ecx
push ebx
add ebx, 0x1200c
pop ebx
push ecx
and ecx, 0x91f0
pop ecx
cmp dword [ebp - 0x774], 0
jne 0x100c9cb5
push ebx
call 0x100c9c82
add byte [esi + 0x44], cl
dec ebx
inc edx
aas
aas
cmp eax, 0x8104c483
inc ebp
inc ecx
add dword [eax], eax
pop ebx
push edi
jmp 0x100c9c93
add edi, 0xc2bf
xor edi, 0x346
add edi, 0x72a4
pop edi
mov dword [ebp - 0xab4], 0
add byte [eax], al
add byte [eax], al
jmp 0x100ca7dd
push esi
push edx
add esp, 4
jmp 0x100c9cc0
sub esi, 0x12f4e
or esi, 0xd8df
pop esi
push edx
xor edx, 0xdee3
add edx, 0xdd4e
pop edx
push ecx
push edx
add esp, 4
sub ecx, 0xa79e
pop ecx
mov ecx, dword [ebp - 0x774]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3a4], edx
mov dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x166c], eax
cmp dword [ebp - 0x166c], 0
jne 0x100c9d26
invalid
lea edi, [eax + edi*8 - 1]