joyce8/EMBER2024-capa huggingface dataset:
Function at 0x610c72e0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
sub esp, 0x24
mov ebx, dword [ebp + 8]
mov eax, dword [ebx + 8]
test eax, eax
je 0x610c7337
inc eax
je 0x610c7360
cmp byte [ebx + 0xd], 0
jne 0x610c7390
xor eax, eax
mov dword [esp + 0x10], eax
lea eax, [ebp - 8]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 8], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebx + 8]
mov dword [esp], eax
call sub.KERNEL32.dll_WriteFile
sub esp, 0x14
test eax, eax
je 0x610c73b3
mov eax, dword [ebp - 8]
mov ebx, dword [ebp - 4]
leave
ret
mov dword [esp], str._ext_build_netrel_src_cygwin_1.5.24_2_winsup_cygserver_transport_pipes.cc
mov eax, str._hPipe
mov dword [esp + 8], eax
mov eax, 0xeb
mov dword [esp + 4], eax
call sym.___assert
mov eax, dword [ebx + 8]
inc eax
jne 0x610c72f4
nop
lea esi, [esi]
mov dword [esp], str._ext_build_netrel_src_cygwin_1.5.24_2_winsup_cygserver_transport_pipes.cc
mov ecx, str._hPipe___INVALID_HANDLE_VALUE
mov edx, 0xec
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
call sym.___assert
cmp byte [ebx + 0xd], 0
je 0x610c72fe
nop
lea esi, [esi]
mov dword [esp], str._ext_build_netrel_src_cygwin_1.5.24_2_winsup_cygserver_transport_pipes.cc
mov eax, str.__is_listening_endpoint
mov dword [esp + 8], eax
mov eax, 0xed
mov dword [esp + 4], eax
call sym.___assert
jmp 0x610c72fe
movzx eax, byte [0x6110a820]
test al, 1
jne 0x610c73e3
test al, 1
jne 0x610c741c
call sym.cygwin1.dll___errno
mov edx, dword [sym.cygwin1.dll__impure_ptr]
mov dword [edx], 0x16
mov dword [eax], 0x16
mov ebx, dword [ebp - 4]
mov eax, 0xffffffff
leave
ret
call sub.KERNEL32.dll_GetLastError
mov dword [esp + 0x10], eax
mov eax, str.error_writing_to_pipe__error___lu
mov dword [esp + 0xc], eax
mov eax, str.virtual_ssize_t_transport_layer_pipes::write_void__size_t_
mov dword [esp + 8], eax
mov eax, 0x40
mov dword [esp + 4], eax
mov dword [esp], 0x6110a820
call method.strace.prntf_unsigned_int__char_const__char_const__..._
movzx eax, byte [0x6110a820]
jmp 0x610c73be
mov dword [esp], 0x6110a820
mov eax, str._s:_d_val__d
mov ebx, 0x16
mov dword [esp + 0xc], eax
mov eax, str.int___set_errno_const_char__int__int_
mov ecx, 0xf3
mov dword [esp + 8], eax
mov edx, str.virtual_ssize_t_transport_layer_pipes::write_void__size_t_
mov eax, 0x40
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 4], eax
call method.strace.prntf_unsigned_int__char_const__char_const__..._
jmp 0x610c73c2
Function at 0x40c080
Capabilities:
Decompress data using quicklz

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x40c253
sub esp, 0x34
mov eax, dword [esp + 0x38]
cmp eax, 0x7000000
jle 0x40c226
mov eax, 0x7000000
mov dword [esp + 0x38], eax
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x18]
mov edx, dword [ecx + 0x90]
mov ebx, dword [ecx + 0x94]
mov dword [ecx + 0x90], ebx
mov ebp, edx
shl edx, 0x11
xor edx, ebp
mov ebp, ebx
xor ebx, edx
shr edx, 7
xor edx, ebx
mov ebx, ebp
shr ebp, 0x10
xor ebp, edx
mov dword [ecx + 0x94], ebp
lea ecx, [ebp + ebx]
and ecx, 0x3ffffff
inc ecx
mov dword [esp], ecx
call fcn.0045fc90
movsd xmm0, qword [esp + 4]
movsd qword [esp + 0x24], xmm0
mov eax, dword [esp + 0x28]
mov ecx, eax
shr eax, 0x14
and eax, 0x7ff
mov edx, eax
add eax, 0xfffffc01
mov ebx, ecx
shr ecx, 0xf
and ecx, 0x1f
mov ebp, ecx
add ecx, 1
mov esi, 0
adc esi, 0
shl ebx, 5
mov edi, dword [esp + 0x24]
shr edi, 0x1b
or edi, ebx
test esi, esi
jne 0x40c246
cmp ecx, 0x21
jae 0x40c23a
mov dword [esp + 0x10], edi
lea ebx, [0x9d4480]
movsd xmm0, qword [ebx + ebp*8]
movsd qword [esp + 0x14], xmm0
movsd xmm1, qword [ebx + ecx*8]
movsd qword [esp + 0x1c], xmm1
mov dword [esp], eax
add edx, 0xfffffc01
mov eax, 0xffffffff
adc eax, 0
mov dword [esp + 4], eax
call fcn.00456850
mov eax, dword [esp + 0x10]
and eax, 0xfffff
movsd xmm0, qword [esp + 8]
movsd qword [esp + 0x2c], xmm0
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00456940
movsd xmm0, qword [esp + 0x2c]
movsd xmm1, qword [esp + 0x14]
addsd xmm0, xmm1
movsd xmm2, qword [esp + 0x1c]
subsd xmm2, xmm1
movsd xmm1, qword [esp + 8]
mulsd xmm1, xmm2
movsd xmm2, qword [0x832ac0]
mulsd xmm2, xmm1
addsd xmm0, xmm2
movsd xmm1, qword [0x832ff0]
subsd xmm0, xmm1
xorps xmm1, xmm1
ucomisd xmm0, xmm1
jbe 0x40c201
xorps xmm0, xmm0
mov eax, dword [esp + 0x38]
cvtsi2sd xmm1, eax
movsd xmm2, qword [0x833358]
mulsd xmm1, xmm2
mulsd xmm0, xmm1
cvttsd2si eax, xmm0
inc eax
mov dword [esp + 0x3c], eax
add esp, 0x34
ret
test eax, eax
jne 0x40c0ad
mov dword [esp + 0x3c], 0
add esp, 0x34
ret
mov eax, ecx
mov ecx, 0x21
call fcn.0045fd70
mov eax, ecx
mov ecx, 0x21
call fcn.0045fe50
nop
call fcn.0045e790
jmp fcn.0040c080
Function at 0x414e60
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 8]
cmp eax, dword [ecx + 8]
jbe 0x4150cb
sub esp, 0x88
mov eax, dword [0x9cc038]
mov dword [esp], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x1000
mov dword [esp + 0x10], 4
call fcn.004304a0
mov eax, dword [esp + 0x8c]
mov ecx, eax
cmp dword [esp + 0x14], eax
je 0x414f58
mov eax, dword [esp + 0x90]
mov edx, eax
jmp 0x414ef9
shr eax, 1
and eax, 0xfffff000
mov dword [esp + 0x18], eax
cmp eax, 0x1000
jae 0x414f09
xor ebp, ebp
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x414ed2
cmp eax, 0x1000
jb 0x414f5f
sub ebx, eax
add ecx, eax
mov eax, ebx
test eax, eax
jbe 0x414f51
mov dword [esp + 0x1c], eax
mov dword [esp + 0x34], ecx
mov ebx, eax
jmp 0x414ed9
mov edx, dword [0x9cc038]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x1000
mov dword [esp + 0x10], 4
call fcn.004304a0
mov eax, dword [esp + 0x14]
test eax, eax
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x90]
mov ebx, dword [esp + 0x1c]
jmp 0x414ee6
add esp, 0x88
ret
add esp, 0x88
ret
call fcn.00460ab0
mov eax, dword [esp]
mov dword [esp + 0x20], eax
cmp eax, 8
je 0x415020
cmp eax, 0x5af
je 0x415020
lea edi, [esp + 0x38]
xor eax, eax
call fcn.0045ff86
lea ecx, [0x7739a0]
mov dword [esp + 0x38], ecx
lea edx, [0x834880]
mov dword [esp + 0x3c], edx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x28], edx
lea edx, [0x773be0]
mov dword [esp + 0x40], edx
lea edx, [esp + 0x28]
mov dword [esp + 0x44], edx
mov dword [esp + 0x48], ecx
lea edx, [0x834888]
mov dword [esp + 0x4c], edx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x24], edx
lea edx, [0x773b20]
mov dword [esp + 0x50], edx
lea edx, [esp + 0x24]
mov dword [esp + 0x54], edx
mov dword [esp + 0x58], ecx
lea ecx, [0x834890]
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x38]
mov dword [esp], ecx
mov dword [esp + 4], 5
mov dword [esp + 8], 5
call fcn.00408350
lea ecx, [0x7d2965]
mov dword [esp], ecx
mov dword [esp + 4], 0x1f
call fcn.004333f0
lea edi, [esp + 0x60]
xor eax, eax
call fcn.0045ff86
lea ecx, [0x7739a0]
mov dword [esp + 0x60], ecx
lea edx, [0x834868]
mov dword [esp + 0x64], edx
mov edx, dword [esp + 0x90]
mov dword [esp + 0x30], edx
lea edx, [0x773be0]
mov dword [esp + 0x68], edx
lea edx, [esp + 0x30]
mov dword [esp + 0x6c], edx
mov dword [esp + 0x70], ecx
lea edx, [0x834870]
mov dword [esp + 0x74], edx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x2c], edx
lea edx, [0x773b20]
mov dword [esp + 0x78], edx
lea edx, [esp + 0x2c]
mov dword [esp + 0x7c], edx
mov dword [esp + 0x80], ecx
lea ecx, [0x834878]
mov dword [esp + 0x84], ecx
lea ecx, [esp + 0x60]
mov dword [esp], ecx
mov dword [esp + 4], 5
mov dword [esp + 8], 5
call fcn.00408350
lea ecx, [0x7c9dd4]
mov dword [esp], ecx
mov dword [esp + 4], 0xd
call fcn.004333f0
nop
call fcn.0045e790
jmp fcn.00414e60
Function at 0x415300
Capabilities:
Check for software breakpoints

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x41551f
sub esp, 0x18
mov eax, dword [0xa932ec]
test eax, eax
jne 0x415508
nop
nop
lea eax, [0xa932d8]
mov dword [esp], eax
call fcn.00409c80
mov eax, dword [0xa7be24]
test eax, eax
je 0x41534e
cmp dword [eax + 8], 0xcc
jne 0x415416
mov edx, dword [0xa7be1c]
test edx, edx
jne 0x4153f8
mov dword [esp], 0x1000
mov dword [esp + 4], 0
lea eax, [0xa956d8]
mov dword [esp + 8], eax
call fcn.0040c260
mov eax, dword [esp + 0xc]
mov dword [0xa7be1c], eax
mov ecx, dword [0xa7bdf8]
mov dword [eax], ecx
mov eax, dword [0xa7be1c]
mov dword [0xa7bdf8], eax
movzx eax, byte [0xa937a0]
test al, al
jne 0x4153f8
xor eax, eax
jmp 0x4153b5
lea esi, [0xa937a0]
xchg ebp, eax
mov byte [esi + ebx], al
xchg ebp, eax
lea eax, [ebx + 1]
cmp eax, 0x80
jge 0x4153f8
mov ecx, eax
mov eax, 0xcccccccd
imul ecx
add edx, ecx
sar edx, 2
mov eax, ecx
sar ecx, 0x1f
sub edx, ecx
lea edx, [edx + edx*4]
mov ebx, eax
sub eax, edx
cmp eax, 5
jae 0x4154fe
lea edx, [0x9cc25c]
movzx ebp, byte [edx + eax]
cmp ebx, 0x80
jb 0x4153a7
jmp 0x4154f2
mov edx, dword [0xa7be1c]
mov ebx, dword [edx + 4]
mov dword [0xa7be1c], ebx
mov ebx, dword [0xa7be24]
mov dword [edx + 4], ebx
mov dword [0xa7be24], edx
mov edx, dword [0xa7be24]
mov eax, dword [edx + 8]
cmp eax, 0xcc
jae 0x4154e8
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], eax
lea eax, [edx + 8]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00401fb0
mov eax, dword [esp + 0x10]
lea eax, [eax + eax*4]
mov ecx, dword [esp + 0x14]
lea edi, [ecx + eax*4 + 0x10]
mov edx, dword [0xa93590]
lea ebx, [ecx + eax*4 + 0x1c]
lea ebp, [ecx + eax*4 + 0x20]
lea esi, [ecx + eax*4 + 0x14]
test edx, edx
jne 0x4154d9
mov edx, dword [esp + 0x20]
mov dword [ecx + eax*4 + 0x10], edx
mov edx, dword [esp + 0x24]
mov dword [ecx + eax*4 + 0x18], edx
mov edx, dword [0xa93590]
test edx, edx
jne 0x4154b6
mov edx, dword [esp + 0x28]
mov dword [ecx + eax*4 + 0x1c], edx
mov edx, dword [esp + 0x2c]
mov dword [ecx + eax*4 + 0x20], edx
mov edx, dword [esp + 0x1c]
mov dword [ecx + eax*4 + 0x14], edx
mov byte [0xa93237], 1
nop
lea eax, [0xa932d8]
mov dword [esp], eax
call fcn.00409e90
add esp, 0x18
ret
mov edi, ebx
mov eax, dword [esp + 0x28]
call fcn.0045fce0
mov edi, ebp
mov eax, dword [esp + 0x2c]
call fcn.0045fce0
mov edi, esi
mov eax, dword [esp + 0x1c]
call fcn.0045fce0
jmp 0x41549c
mov edx, eax
mov eax, dword [esp + 0x20]
call fcn.0045fce0
mov eax, edx
jmp 0x415472
mov ecx, 0xcc
call fcn.0045fd70
mov eax, ebx
mov ecx, pe_nt_image_headers32
call fcn.0045fd60
mov ecx, 5
call fcn.0045fd60
lea eax, [0x7cf1f4]
mov dword [esp], eax
mov dword [esp + 4], 0x18
call fcn.004333f0
nop
call fcn.0045e790
jmp fcn.00415300
Function at 0x425fe0
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4260f0
sub esp, 0x14
mov eax, dword [esp + 0x18]
movzx ecx, byte [eax + 6]
cmp cl, 1
je 0x42606b
cmp cl, 2
jne 0x4260d9
mov ecx, dword [eax + 8]
mov dword [esp], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 4], ecx
call fcn.0042b140
nop
nop
lea eax, [0xa8b140]
mov dword [esp], eax
call fcn.00409c80
nop
mov eax, dword [0xa8b134]
sub eax, dword [0xa8b11c]
mov dword [0xa8b134], eax
mov eax, dword [0xa8b128]
mov ecx, dword [esp + 0x18]
mov dword [ecx], eax
mov dword [0xa8b128], ecx
nop
nop
lea eax, [0xa8b140]
mov dword [esp], eax
call fcn.00409e90
add esp, 0x14
ret
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov ebx, dword [eax + 0x10]
mov ebp, dword [eax + 0x14]
mov esi, dword [esp + 0x1c]
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
call fcn.00415300
nop
nop
lea eax, [0xa8b140]
mov dword [esp], eax
call fcn.00409c80
nop
mov eax, dword [0xa8b110]
sub eax, dword [0xa8b0f8]
mov dword [0xa8b110], eax
mov eax, dword [0xa8b104]
mov ecx, dword [esp + 0x18]
mov dword [ecx], eax
mov dword [0xa8b104], ecx
nop
lea eax, [0xa8b140]
mov dword [esp], eax
call fcn.00409e90
jmp 0x426067
lea eax, [0x7cb025]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.004333f0
nop
call fcn.0045e790
jmp fcn.00425fe0
Function at 0x42b940
Capabilities:
Access peb ldr_data

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x42bac9
sub esp, 0x58
nop
lea eax, [0xa93350]
mov dword [esp], eax
call fcn.00409c80
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov dword [esp + 0x14], eax
mov ecx, dword [eax + 0x18]
mov byte [ecx + 0x99], 2
lea edi, [esp + 0x30]
xor eax, eax
call fcn.0045ff86
lea eax, [0x7739a0]
mov dword [esp + 0x30], eax
lea ecx, [0x8350d8]
mov dword [esp + 0x34], ecx
lea ecx, [0x773c20]
mov dword [esp + 0x38], ecx
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], eax
lea ecx, [0x8350e0]
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 0
lea ecx, [0x7736a0]
mov dword [esp + 0x48], ecx
lea ecx, [esp + 0xc]
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], eax
lea ecx, [0x8350e8]
mov dword [esp + 0x54], ecx
lea ecx, [esp + 0x30]
mov dword [esp], ecx
mov dword [esp + 4], 5
mov dword [esp + 8], 5
call fcn.00408350
mov eax, dword [esp + 0x14]
mov dword [esp], eax
call fcn.004531e0
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
lea eax, [0x4589b0]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x24], eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x2c], eax
lea ecx, [esp + 0x20]
mov dword [esp], ecx
call fcn.0045e670
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
lea eax, [0x7739a0]
mov dword [esp + 0x18], eax
lea eax, [0x8350f0]
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.00408350
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0x18]
mov byte [eax + 0x99], 0
nop
lea eax, [0xa93350]
mov dword [esp], eax
call fcn.00409e90
add esp, 0x58
ret
call fcn.0045e790
jmp fcn.0042b940
Function at 0x436be0
Capabilities:
Access peb ldr_data

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x436da2
sub esp, 0x68
mov eax, dword [esp + 0x6c]
test byte [eax], al
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
mov dword [esp + 0x2c], ecx
lea edx, [eax + 0x48]
mov dword [esp], edx
call fcn.00401ea0
mov eax, dword [esp + 4]
mov dword [esp + 0xc], eax
lea edi, [esp + 0x30]
xor eax, eax
call fcn.0045ff82
lea ecx, [0x7739a0]
mov dword [esp + 0x30], ecx
lea edx, [0x8353e8]
mov dword [esp + 0x34], edx
lea edx, [0x760b60]
mov dword [esp + 0x38], edx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ecx
lea ebp, [0x8353f0]
mov dword [esp + 0x44], ebp
mov ebp, dword [ebx + 0x50]
mov ebx, dword [ebx + 0x54]
mov dword [esp + 0x24], ebp
mov dword [esp + 0x28], ebx
lea ebx, [0x773060]
mov dword [esp + 0x48], ebx
lea ebp, [esp + 0x24]
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x50], ecx
lea ebp, [0x8353f8]
mov dword [esp + 0x54], ebp
mov ebp, dword [esp + 0xc]
mov dword [esp + 0x18], ebp
lea ebp, [0x773b20]
mov dword [esp + 0x58], ebp
lea esi, [esp + 0x18]
mov dword [esp + 0x5c], esi
mov dword [esp + 0x60], ecx
lea esi, [0x835400]
mov dword [esp + 0x64], esi
lea esi, [esp + 0x30]
mov dword [esp], esi
mov dword [esp + 4], 7
mov dword [esp + 8], 7
call fcn.00408350
mov eax, dword [esp + 0x2c]
test byte [eax], al
lea ecx, [eax + 0x48]
mov dword [esp], ecx
call fcn.00401ea0
mov eax, dword [esp + 4]
mov dword [esp + 0x10], eax
lea edi, [esp + 0x30]
xor eax, eax
call fcn.0045ff82
lea eax, [0x7739a0]
mov dword [esp + 0x30], eax
lea ecx, [0x835408]
mov dword [esp + 0x34], ecx
lea ecx, [0x760b60]
mov dword [esp + 0x38], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], eax
lea edx, [0x835410]
mov dword [esp + 0x44], edx
mov edx, dword [ecx + 0x50]
mov ecx, dword [ecx + 0x54]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ecx
lea ecx, [0x773060]
mov dword [esp + 0x48], ecx
lea ecx, [esp + 0x1c]
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], eax
lea ecx, [0x835418]
mov dword [esp + 0x54], ecx
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x14], ecx
lea ecx, [0x773b20]
mov dword [esp + 0x58], ecx
lea ecx, [esp + 0x14]
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x60], eax
lea eax, [0x835420]
mov dword [esp + 0x64], eax
lea eax, [esp + 0x30]
mov dword [esp], eax
mov dword [esp + 4], 7
mov dword [esp + 8], 7
call fcn.00408350
add esp, 0x68
ret
call fcn.0045e790
jmp fcn.00436be0
Function at 0x443bd0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x443dde
sub esp, 0x30
mov eax, dword [esp + 0x34]
mov ecx, eax
mov dword [esp + 0x20], eax
mov dword [esp], ecx
mov dword [esp + 4], 1
call fcn.00401fb0
mov eax, dword [esp + 0x20]
shr eax, 3
mov ecx, eax
mov eax, 0x828cbfbf
mul ecx
shr edx, 7
imul eax, edx, 0xfb
sub ecx, eax
shl ecx, 6
mov dword [esp + 0x1c], ecx
lea eax, [0xa809e0]
lea edx, [eax + ecx + 8]
mov dword [esp + 0x2c], edx
mov dword [esp], edx
call fcn.00401ea0
mov eax, dword [esp + 4]
test eax, eax
je 0x443dc3
mov eax, dword [esp + 0x1c]
lea ecx, [0xa809e0]
lea edx, [ecx + eax]
mov dword [esp + 0x28], edx
mov dword [esp], edx
call fcn.00409c80
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
call fcn.00401ea0
mov eax, dword [esp + 4]
test eax, eax
je 0x443db1
mov eax, dword [esp + 0x1c]
lea ecx, [0xa809e0]
add eax, ecx
mov dword [esp], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
call fcn.00444230
mov eax, dword [esp + 8]
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x14], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x18], edx
test eax, eax
jne 0x443d98
nop
nop
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call fcn.00409e90
mov eax, dword [esp + 0x24]
test eax, eax
je 0x443d30
mov ecx, dword [eax + 0x14]
test ecx, ecx
setne dl
mov ebx, dword [eax + 0x10]
test ebx, ebx
xchg ebp, ebx
setne bl
xchg ebp, ebx
or edx, ebp
test dl, dl
jne 0x443d6c
mov ecx, dword [eax + 0x20]
test ecx, ecx
jne 0x443dc7
movzx ecx, byte [esp + 0x38]
test cl, cl
jne 0x443d44
mov dword [esp], eax
mov ecx, dword [esp + 0x3c]
add ecx, 5
mov dword [esp + 4], ecx
call fcn.00443850
mov eax, dword [esp + 0x24]
cmp dword [eax + 0x20], 1
jne 0x443d30
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov eax, dword [eax + 0x78]
test eax, eax
je 0x443d34
add esp, 0x30
ret
lea eax, [0x7e69b0]
mov dword [esp], eax
call fcn.0045e610
jmp 0x443d30
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call fcn.00443df0
movzx eax, byte [esp + 4]
test al, al
je 0x443d66
mov eax, dword [esp + 0x24]
mov dword [eax + 0x20], 1
jmp 0x443cfc
mov eax, dword [esp + 0x24]
jmp 0x443cfc
mov eax, dword [esp + 0x14]
sub eax, ebx
mov dword [esp], eax
mov eax, dword [esp + 0x18]
sbb eax, ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
lea ecx, [eax + 3]
mov dword [esp + 8], ecx
call fcn.0045af80
mov eax, dword [esp + 0x24]
jmp 0x443ce8
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call fcn.00401fb0
jmp 0x443cb4
nop
nop
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call fcn.00409e90
add esp, 0x30
ret
add esp, 0x30
ret
lea eax, [0x7cff9f]
mov dword [esp], eax
mov dword [esp + 4], 0x1a
call fcn.004333f0
nop
call fcn.0045e790
jmp fcn.00443bd0
Function at 0x44bbf0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x24]
cmp eax, dword [ecx + 8]
jbe 0x44bdc8
sub esp, 0xa4
mov eax, dword [esp + 0xa8]
mov ecx, dword [eax + 0x10]
mov dword [esp], eax
mov edx, dword [esp + 0xac]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0xc], ecx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 0x10], ebx
mov byte [esp + 0x14], 1
call fcn.0044b2c0
mov eax, dword [esp + 0x18]
test eax, 3
jne 0x44bc65
mov dword [esp + 0xb8], eax
add esp, 0xa4
ret
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0xa8]
mov dword [esp], eax
mov ecx, dword [esp + 0xac]
mov dword [esp + 4], ecx
call fcn.0044b920
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x24], ecx
lea edi, [esp + 0x4c]
mov edx, eax
xor eax, eax
call fcn.0045ff7a
lea eax, [0x7739a0]
mov dword [esp + 0x4c], eax
lea ecx, [0x835a70]
mov dword [esp + 0x50], ecx
mov dword [esp + 0x44], edx
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x48], ecx
mov dword [esp + 0x54], eax
lea ecx, [esp + 0x44]
mov dword [esp + 0x58], ecx
mov dword [esp + 0x5c], eax
lea ecx, [0x835a78]
mov dword [esp + 0x60], ecx
mov ecx, dword [esp + 0xa8]
mov edx, dword [ecx]
mov dword [esp + 0x3c], edx
mov dword [esp + 0x40], 0
lea edx, [0x7736a0]
mov dword [esp + 0x64], edx
lea ebx, [esp + 0x3c]
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], eax
lea ebx, [0x835a80]
mov dword [esp + 0x70], ebx
mov ebx, dword [esp + 0xb0]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], 0
mov dword [esp + 0x74], edx
lea ebx, [esp + 0x34]
mov dword [esp + 0x78], ebx
mov dword [esp + 0x7c], eax
lea ebx, [0x835a88]
mov dword [esp + 0x80], ebx
mov ecx, dword [ecx + 0x10]
mov dword [esp + 0x2c], ecx
sar ecx, 0x1f
mov dword [esp + 0x30], ecx
mov dword [esp + 0x84], edx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x88], ecx
mov dword [esp + 0x8c], eax
lea ecx, [0x835a90]
mov dword [esp + 0x90], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x28], ecx
lea edx, [0x773020]
mov dword [esp + 0x94], edx
lea edx, [esp + 0x28]
mov dword [esp + 0x98], edx
mov dword [esp + 0x9c], eax
lea eax, [0x835aa0]
mov dword [esp + 0xa0], eax
lea eax, [esp + 0x4c]
mov dword [esp], eax
mov dword [esp + 4], 0xb
mov dword [esp + 8], 0xb
call fcn.00408350
mov eax, dword [esp + 0x20]
jmp 0x44bc57
call fcn.0045e790
jmp fcn.0044bbf0
Function at 0x44fa90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x44fc31
sub esp, 0x48
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x18]
mov ecx, dword [ecx + 0x4c]
mov edx, dword [ecx + 0x18]
mov ebx, dword [ecx + 0x78]
add ebx, 1
mov edx, dword [edx + 0x54]
mov ebp, dword [ecx + 0x7c]
mov dword [ecx + 0x78], ebx
adc ebp, 0
mov dword [ecx + 0x7c], ebp
mov ebx, edx
mov ebp, dword [edx + 0xb70]
cmp ecx, ebp
jne 0x44fb65
mov dword [esp + 0x44], ecx
lea edi, [esp + 0x2c]
xor eax, eax
call fcn.0045ff8a
mov ecx, dword [esp + 0x44]
mov ebx, dword [ecx + 0x50]
mov ebp, dword [ecx + 0x54]
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebp
mov ebx, dword [ecx + 0x78]
mov ecx, dword [ecx + 0x7c]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ecx
mov eax, dword [edx + 0xb74]
cmp eax, 3
jae 0x44fc26
lea ecx, [0xa931f4]
lea eax, [ecx + eax*8]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], eax
mov byte [esp], 0x29
mov dword [esp + 4], 0xffffffff
lea eax, [esp + 0x2c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 3
mov dword [esp + 0x10], 3
call fcn.0044eb00
add esp, 0x48
ret
cmp dword [ecx + 0x80], ebx
jne 0x44fbb6
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov eax, dword [ecx + 0x50]
mov ecx, dword [ecx + 0x54]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
mov byte [esp], 0x26
mov dword [esp + 4], 0xffffffff
lea eax, [esp + 0x14]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.0044eb00
jmp 0x44fb61
mov dword [ecx + 0x80], ebx
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
mov eax, dword [ecx + 0x50]
mov edx, dword [ecx + 0x54]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], edx
mov eax, dword [ecx + 0x78]
mov ecx, dword [ecx + 0x7c]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ecx
mov byte [esp], 0xe
mov dword [esp + 4], 0xffffffff
lea eax, [esp + 0x1c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.0044eb00
jmp 0x44fb61
mov ecx, 3
call fcn.0045fd60
nop
call fcn.0045e790
jmp fcn.0044fa90