joyce8/EMBER2024-capa huggingface dataset:
Function at 0x44eaa0
Capabilities:
Packed with generic packer

Disassembly:
push 0xffffffffffffffff
push 0x64d01d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x28
push ebx
push esi
mov esi, dword [esp + 0x40]
push edi
push esi
call fcn.005d0ef0
xor ebx, ebx
mov dword [esp + 0x3c], ebx
mov dword [esi], method.Sexy::ButtonListener.virtual_0
mov dword [esi + 4], 0x667d50
call fcn.00456280
mov dword [esi + 0x78c], eax
mov dword [esi + 0x790], ebx
mov byte [esp + 0x3c], 1
call fcn.00456280
mov dword [esi + 0x798], eax
mov dword [esi + 0x79c], ebx
mov edi, 0xf
mov dword [esi + 0x7b8], edi
mov dword [esi + 0x7b4], ebx
mov byte [esi + 0x7a4], bl
mov dword [esi + 0x7d4], edi
mov dword [esi + 0x7d0], ebx
mov byte [esi + 0x7c0], bl
mov dword [esi + 0x7f0], edi
mov dword [esi + 0x7ec], ebx
mov byte [esi + 0x7dc], bl
mov dword [esi + 0x86c], edi
mov dword [esi + 0x868], ebx
mov byte [esi + 0x858], bl
mov byte [esp + 0x3c], 6
push ebx
mov dword [esi + 0x768], ebx
mov dword [esi + 0x770], ebx
mov dword [esi + 0x780], ebx
mov dword [esi + 0x774], ebx
mov dword [esi + 0x778], ebx
mov dword [esi + 0x77c], ebx
mov dword [esi + 0x76c], ebx
mov dword [esi + 0x784], ebx
mov dword [esi + 0x890], ebx
mov dword [esi + 0x894], ebx
mov dword [esi + 0x898], ebx
mov dword [esi + 0x89c], ebx
mov dword [esi + 0x8a0], ebx
mov dword [esi + 0x8a4], ebx
mov dword [esi + 0x8a8], ebx
mov dword [esi + 0x8ac], ebx
mov dword [esi + 0x8b0], ebx
mov dword [esi + 0x8b4], ebx
mov byte [esi + 0x8b8], bl
mov byte [esi + 0x8b9], bl
mov byte [esi + 0x8ba], bl
mov byte [esi + 0x8bb], bl
mov byte [esi + 0x8bc], bl
mov byte [esi + 0x8bd], bl
mov byte [esi + 0x8be], bl
mov dword [esi + 0x7fc], ebx
mov dword [esi + 0x818], ebx
mov dword [esi + 0x81c], ebx
mov dword [esi + 0x820], ebx
mov dword [esi + 0x824], ebx
mov byte [esi + 0x834], bl
jmp fcn.00799411

Function at 0x44f5f0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x64f21b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push edi
mov edi, ecx
call fcn.0044f380
push 0x57b0
call fcn.0061c130
add esp, 4
mov dword [esp + 4], eax
test eax, eax
mov dword [esp + 0x10], 0
je 0x44f635
push eax
mov ecx, edi
call fcn.00407b50
jmp 0x44f637
xor eax, eax
mov dword [esp + 0x10], 0xffffffff
mov ecx, dword [edi + 0xc4]
push ecx
mov ecx, dword [edi + 0xc0]
push ecx
mov dword [edi + 0x768], eax
mov edx, dword [eax]
mov edx, dword [edx + 0xa0]
push 0
push 0
mov ecx, eax
call edx
mov ecx, dword [edi + 0x320]
mov eax, dword [ecx]
mov edx, dword [edi + 0x768]
mov eax, dword [eax + 0xc]
push edx
call eax
mov ecx, dword [edi + 0x320]
mov edx, dword [ecx]
mov eax, dword [edi + 0x768]
mov edx, dword [edx + 0x30]
push eax
call edx
mov ecx, dword [edi + 0x320]
mov eax, dword [ecx]
mov edx, dword [edi + 0x768]
mov eax, dword [eax + 0x20]
push edx
call eax
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
pop edi
add esp, 0x10
ret
Function at 0x44f8e0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x64f1fb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push edi
mov edi, ecx
call fcn.0044f380
mov eax, dword [edi + 0x770]
test eax, eax
je 0x44f929
mov ecx, dword [edi + 0x320]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x10]
call eax
mov edx, dword [edi]
mov eax, dword [edi + 0x770]
mov edx, dword [edx + 0x88]
push eax
mov ecx, edi
call edx
push 0x130
jmp loc.0079d2ea

Function at 0x44fa20
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x64ba7b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push 0x9c
mov dword [esi + 0x7fc], 5
call fcn.0061c130
add esp, 4
mov dword [esp], eax
test eax, eax
mov dword [esp + 0xc], 0
je 0x44fa6b
mov ecx, dword [esp + 0x14]
push ecx
push eax
mov ecx, esi
call fcn.00405780
jmp 0x44fa6d
xor eax, eax
mov dword [esp + 0xc], 0xffffffff
mov ecx, dword [esi + 0xc4]
push ecx
mov ecx, dword [esi + 0xc0]
push ecx
mov dword [esi + 0x778], eax
mov edx, dword [eax]
mov edx, dword [edx + 0xa0]
push 0
push 0
mov ecx, eax
call edx
mov ecx, dword [esi + 0x320]
mov eax, dword [ecx]
mov edx, dword [esi + 0x778]
mov eax, dword [eax + 0xc]
push edx
call eax
mov ecx, dword [esi + 0x320]
mov edx, dword [ecx]
mov eax, dword [esi + 0x778]
mov edx, dword [edx + 0x30]
push eax
call edx
mov ecx, dword [esi + 0x320]
mov eax, dword [ecx]
mov edx, dword [esi + 0x778]
mov eax, dword [eax + 0x20]
push edx
call eax
mov ecx, dword [esp + 4]
mov dword fs:[0], ecx
add esp, 0x10
ret 4

Function at 0x44fb30
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x64ba5b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push pe_nt_image_headers32
mov dword [esi + 0x7fc], 6
call fcn.0061c130
add esp, 4
mov dword [esp], eax
test eax, eax
mov dword [esp + 0xc], 0
je 0x44fb76
push eax
mov ecx, esi
call fcn.00433a70
jmp 0x44fb78
xor eax, eax
mov dword [esp + 0xc], 0xffffffff
mov ecx, dword [esi + 0xc4]
push ecx
mov ecx, dword [esi + 0xc0]
push ecx
mov dword [esi + 0x77c], eax
mov edx, dword [eax]
mov edx, dword [edx + 0xa0]
push 0
push 0
mov ecx, eax
call edx
mov ecx, dword [esi + 0x320]
mov eax, dword [ecx]
mov edx, dword [esi + 0x77c]
mov eax, dword [eax + 0xc]
push edx
call eax
mov ecx, dword [esi + 0x320]
mov edx, dword [ecx]
mov eax, dword [esi + 0x77c]
mov edx, dword [edx + 0x30]
push eax
call edx
mov ecx, dword [esi + 0x320]
mov eax, dword [ecx]
mov edx, dword [esi + 0x77c]
mov eax, dword [eax + 0x20]
push edx
call eax
mov ecx, dword [esp + 4]
mov dword fs:[0], ecx
add esp, 0x10
ret
Function at 0x44fc30
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x64ba3b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push 0x1e4
mov dword [esi + 0x7fc], 7
call fcn.0061c130
add esp, 4
mov dword [esp], eax
test eax, eax
mov dword [esp + 0xc], 0
je 0x44fc7a
mov ecx, dword [esp + 0x14]
push ecx
push esi
push eax
call fcn.0042dae0
jmp 0x44fc7c
xor eax, eax
mov dword [esp + 0xc], 0xffffffff
mov ecx, dword [esi + 0xc4]
push ecx
mov ecx, dword [esi + 0xc0]
push ecx
mov dword [esi + 0x780], eax
mov edx, dword [eax]
mov edx, dword [edx + 0xa0]
push 0
push 0
mov ecx, eax
call edx
mov ecx, dword [esi + 0x320]
mov eax, dword [ecx]
mov edx, dword [esi + 0x780]
mov eax, dword [eax + 0xc]
push edx
call eax
mov ecx, dword [esi + 0x320]
mov edx, dword [ecx]
mov eax, dword [esi + 0x780]
mov edx, dword [edx + 0x30]
push eax
call edx
mov ecx, dword [esi + 0x320]
mov eax, dword [ecx]
mov edx, dword [esi + 0x780]
mov eax, dword [eax + 0x20]
push edx
call eax
mov ecx, dword [esp + 4]
mov dword fs:[0], ecx
add esp, 0x10
ret 4
Function at 0x458000
Capabilities:
Packed with generic packer

Disassembly:
fld dword [0x679bf8]
push ebx
push ebp
mov ebp, dword [esp + 0xc]
push esi
mov esi, eax
mov eax, dword [0x6a9f38]
mov edx, esi
imul edx, edx, 0x2710
push edi
mov edi, eax
mov dword [ebp], eax
mov ecx, dword [edi + 0x768]
lea eax, [edx + 0x4ab50]
fstp dword [ebp + 8]
mov ebx, ecx
fld dword [0x679ba0]
push ecx
mov dword [ebp + 4], ecx
mov dword [esp + 0x18], eax
mov dword [ebp + 0x10], eax
fstp dword [esp]
mov ecx, esi
mov eax, ebx
mov dword [ebp + 0x14], esi
call fcn.0041c6c0
xor ecx, ecx
fadd qword [0x6795a0]
mov edx, 1
mov byte [ebp + 0x30], 0
mov dword [ebp + 0x2c], edx
fstp dword [ebp + 0xc]
mov byte [ebp + 0x31], dl
mov dword [ebp + 0x20], ecx
mov dword [ebp + 0x24], ecx
mov dword [ebp + 0x28], ecx
mov dword [ebp + 0x40], 0xffffffff
mov eax, dword [ebx + 0x554c]
cmp eax, 0x10
je 0x45808d
cmp eax, 5
jne 0x45809b
jmp 0x7960ea
cmp dword [ebx + esi*4 + 0x5d8], 2
jne 0x4580bd
mov eax, dword [edi + 0x82c]
cmp dword [eax + 0x218], ecx
je 0x4580bd
mov dword [ebp + 0x34], edx
mov ebx, 0x5a
jmp 0x4580c5
mov dword [ebp + 0x34], ecx
mov ebx, 8
mov ecx, dword [edi + 0x820]
mov esi, dword [ecx + 8]
call fcn.00474680
mov edx, dword [esp + 0x14]
mov edi, eax
push 0
push ebx
mov dword [edi + 0x60], esi
mov dword [edi + 0x68], edx
call fcn.004735e0
fld dword [0x6795c4]
fstp dword [esp + 4]
mov eax, ebx
fldz
shl eax, 4
add eax, dword [0x6a9ee8]
fstp dword [esp]
push edi
mov dword [edi], ebx
call fcn.00471b00
fldz
mov eax, dword [edi + 0x9c]
fst dword [edi + 8]
fld dword [0x679784]
mov dword [edi + 0x10], 0
fst dword [edi + 0x24]
mov byte [edi + 0x64], 1
fstp dword [edi + 0x34]
mov dword [ebp + 0x1c], eax
mov eax, dword [ebp + 0x34]
test eax, eax
jne 0x45816c
fcom dword [edi + 8]
fnstsw ax
test ah, 0x41
jnp 0x458147
fstp st(0)
fld dword [0x679538]
lea ecx, [edi + 0x1c]
fstp dword [edi + 4]
fld dword [0x679378]
push ecx
lea edx, [edi + 0x18]
fstp dword [edi + 0x94]
push edx
mov edx, str.anim_normal
mov eax, edi
call fcn.004731d0
jmp 0x4581b6
cmp eax, 1
fstp st(0)
jne 0x4581b6
fld dword [0x679664]
push str.anim_land
fst dword [edi + 0x24]
mov ecx, edi
fstp dword [edi + 0x34]
call fcn.00473280
mov ecx, dword [edi + 0xc]
xor eax, eax
cmp dword [ecx + 4], eax
jle 0x4581b6
xor ecx, ecx
jmp 0x4581a0
mov edx, dword [edi + 0x58]
mov byte [ecx + edx + 0x5d], 0
mov edx, dword [edi + 0xc]
add eax, 1
add ecx, 0x60
cmp eax, dword [edx + 4]
jl 0x4581a0
mov eax, dword [ebp + 4]
cmp byte [eax + 0x5762], 0
je 0x4581cf
cmp dword [ebp + 0x34], 0
jne 0x4581cf
mov eax, ebp
call fcn.00458f60
pop edi
pop esi
pop ebp
pop ebx
ret 4
Function at 0x45db60
Capabilities:
Packed with generic packer

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x1c
push ebx
mov ebx, dword [ebp + 8]
mov edx, dword [ebx + 4]
test edx, edx
push esi
push edi
mov esi, eax
mov edi, ecx
mov dword [ebx + 0x28], edi
mov dword [ebx + 0x1c], esi
je 0x45dbd3
mov ecx, dword [edx + 0x8c]
cmp dword [ecx + 0x7f8], 0x2b
jne 0x45dbb4
mov eax, dword [edx + 0x554c]
cmp eax, 6
je 0x45dba4
cmp eax, 8
je 0x45dba4
cmp eax, 7
jne 0x45dbb4
mov eax, dword [ecx + 0x81c]
call fcn.00521450
mov edx, dword [ebx + 4]
jmp 0x45dbbd
lea eax, [edi + edi*4]
shl eax, 4
add eax, 0x28
mov dword [ebx + 8], eax
mov eax, esi
mov ecx, edi
mov ebx, edx
call fcn.0041c740
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc], eax
mov ebx, ecx
xor edi, edi
lea eax, [edi + 7]
mov dword [ebx + 0x2c], edi
mov byte [ebx + 0x140], 1
mov dword [ebx + 0x30], edi
mov dword [ebx + 0x90], edi
call fcn.005af400
fldz
mov edx, dword [ebp + 0x10]
fst dword [ebx + 0xc0]
mov esi, dword [ebp + 0xc]
fstp dword [ebx + 0xc4]
add eax, 0xc
mov dword [ebx + 0x34], eax
or eax, 0xffffffff
mov dword [ebx + 0x80], eax
mov dword [ebx + 0x84], eax
mov eax, dword [ebx + 0x1c]
push 0x64
mov dword [ebx + 0x88], eax
mov eax, 0x50
lea ecx, [ebx + 0xc8]
push edi
push ecx
mov dword [ebx + 0x38], 5
mov dword [ebx + 0x3c], edi
mov byte [ebx + 0x141], 0
mov byte [ebx + 0x142], 0
mov dword [ebx + 0x24], esi
mov dword [ebx + 0x138], edx
jmp 0x794089
Function at 0x4679b0
Capabilities:
Packed with generic packer

Disassembly:
sub esp, 0x10
push ebx
push ebp
mov ebp, dword [esp + 0x1c]
cmp byte [ebp + 0x144], 0
push esi
push edi
je 0x4679fc
cmp dword [ebp + 0x24], 0x13
jne 0x4679fc
mov ecx, dword [ebp + 4]
mov edx, dword [ebp + 0x12c]
add ecx, 0x90
test edx, edx
je 0x4679fc
movzx eax, dx
cmp eax, dword [ecx + 8]
jae 0x4679fc
imul eax, eax, 0x15c
add eax, dword [ecx]
cmp dword [eax + 0x158], edx
jne 0x4679fc
mov ecx, eax
call fcn.005302f0
mov esi, ebp
jmp loc.0079aad3
Function at 0x525890
Capabilities:
Packed with generic packer

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14
mov eax, dword [ebp + 8]
mov edx, dword [eax + 4]
push ebx
push esi
xor ebx, ebx
push edi
lea esi, [esp + 0xc]
mov dword [esp + 0xc], ebx
call fcn.0041c950
test al, al
je 0x5259c0
lea esp, [esp]
mov eax, dword [esp + 0xc]
mov edi, dword [eax + 0x1c]
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x1c], edi
jne 0x5259a9
mov edx, dword [eax + 8]
add edx, 0x64
cmp dword [ecx + 8], edx
jl 0x5259a9
mov edx, dword [eax + 0x24]
cmp edx, 0x11
jne 0x525908
mov ecx, dword [eax + 0x3c]
cmp ecx, 5
je 0x5259a9
cmp ecx, 6
je 0x5259a9
cmp ecx, 7
je 0x5259a9
cmp byte [eax + 0x142], 0
jne 0x5259a9
cmp dword [eax + 0x134], 2
je 0x5259a9
cmp byte [eax + 0x141], 0
jne 0x5259a9
cmp edx, 0x15
je 0x5259a9
cmp edx, 0x2e
je 0x5259a9
test ebx, ebx
je 0x525941
mov ecx, dword [eax + 0x28]
jmp 0x795966
mov esi, dword [eax + 0x28]
cmp esi, 8
mov edx, dword [ebp + 8]
mov edx, dword [edx + 4]
ja 0x5259a7
cmp edi, 5
ja 0x5259a7
mov ecx, dword [edx + 0x8c]
call fcn.00453840
test al, al
je 0x525972
mov eax, dword [edx + 0x15c]
call fcn.0043c1e0
test al, al
je 0x5259a7
push edi
push esi
lea ebx, [esp + 0x18]
call fcn.0040d2a0
mov eax, dword [esp + 0x18]
test eax, eax
je 0x525989
mov ebx, eax
jmp 0x5259a9
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x525995
mov ebx, eax
jmp 0x5259a9
mov eax, dword [esp + 0x14]
test eax, eax
je 0x5259a1
mov ebx, eax
jmp 0x5259a9
mov ebx, dword [esp + 0x10]
jmp 0x5259a9
xor ebx, ebx
mov eax, dword [ebp + 8]
mov edx, dword [eax + 4]
lea esi, [esp + 0xc]
call fcn.0041c950
test al, al
jne 0x5258c0
pop edi
pop esi
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x529ef0
Capabilities:
Packed with generic packer

Disassembly:
sub esp, 0x24
push ebp
push esi
mov esi, dword [ebx + 0x24]
cmp esi, 0xc
push edi
je 0x52a45e
cmp esi, 0x14
je 0x52a45e
cmp esi, 0x16
je 0x52a45e
cmp esi, 0x17
je 0x52a45e
cmp esi, 0x20
je 0x52a45e
cmp esi, 0x19
je 0x52a45e
cmp dword [ebx + 0x64], 0xa
je 0x52a45e
mov eax, ebx
call fcn.00534680
test al, al
jne 0x52a45e
mov ecx, ebx
call fcn.005346a0
cmp eax, 0xffffffff
jne 0x52a45e
mov eax, dword [ebx + 0xd8]
cmp eax, 1
je 0x52a45e
cmp eax, 2
je 0x52a45e
mov eax, dword [ebx + 0x28]
cmp eax, 0x3a
je 0x52a45e
cmp eax, 0x33
je 0x52a45e
cmp eax, 0x34
je 0x52a45e
cmp eax, 0x35
je 0x52a45e
cmp eax, 0x36
je 0x52a45e
cmp eax, 0x1d
je 0x52a45e
cmp byte [ebx + 0xbb], 0
je 0x52a45e
jmp loc.007968db
pop edi
pop esi
pop ebp
add esp, 0x24
ret 4

Function at 0x52c310
Capabilities:
Packed with generic packer

Disassembly:
sub esp, 0x3c
push ebx
push ebp
push esi
push edi
mov edi, eax
mov eax, dword [edi]
mov esi, dword [edi + 0x118]
test esi, esi
mov ecx, dword [eax + 0x820]
mov ebx, dword [ecx + 8]
je 0x52c6be
movzx ebp, si
cmp ebp, dword [ebx + 8]
jae 0x52c6be
lea ebp, [ebp + ebp*4]
shl ebp, 5
add ebp, dword [ebx]
cmp dword [ebp + 0x9c], esi
jne 0x52c6be
cmp byte [ebp + 0x14], 0
jne 0x52c6be
cmp dword [edi + 0x24], 0x16
jne 0x52c3fe
cmp dword [edi + 0x114], 0
mov eax, edi
sete byte [esp + 0x17]
call fcn.0052d710
cmp eax, 2
je 0x52c3a1
cmp dword [edi + 0x28], 1
je 0x52c3a1
cmp byte [esp + 0x17], 0
je 0x52c3fe
mov edx, dword [0x6a7b00]
push edx
mov eax, str.Zombie_catapult_pole
mov ecx, ebp
call fcn.00473490
jmp 0x52c3fe
and esi, 0xffff
lea esi, [esi + esi*4]
shl esi, 5
add esi, dword [ebx]
call fcn.00472b70
cmp eax, dword [0x6a7254]
jne 0x52c3d7
cmp byte [esp + 0x17], 0
jne 0x52c3d7
mov eax, dword [0x6a7400]
push eax
mov eax, str.Zombie_catapult_pole
mov ecx, esi
call fcn.00473490
jmp 0x52c3fe
mov ecx, dword [0x6a75a0]
push str.Zombie_catapult_pole
mov ebx, esi
mov dword [esp + 0x28], ecx
call fcn.00472f30
mov ecx, dword [esp + 0x24]
lea edx, [eax + eax*2]
mov eax, dword [esi + 0x58]
shl edx, 5
mov dword [edx + eax + 0x44], ecx
lea esi, [esp + 0x28]
mov ecx, edi
call fcn.0052d9e0
fld dword [esp + 0x38]
jmp 0x79979c
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3c
ret
Function at 0x530170
Capabilities:
Packed with generic packer

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14
push ebx
mov ebx, eax
mov eax, dword [ebx + 0x6c]
cmp eax, 0xfffffffe
push esi
push edi
je 0x5302dd
cmp eax, 0xfffffffd
je 0x5302dd
mov eax, dword [ebx + 0x24]
mov byte [eax + 0x6a7178], 1
cmp dword [ebx + 0x24], 0x13
jne 0x5301ad
mov ecx, dword [ebx + 4]
mov byte [ecx + 0x5760], 1
push ebx
call fcn.0052fe50
cmp byte [ebx + 0x70], 0
jne 0x5302dd
mov edx, dword [ebx + 4]
cmp byte [edx + 0x560c], 0
jne 0x5302dd
cmp dword [edx + 0x5604], 0
jg 0x5302dd
cmp dword [edx + 0x5600], 0
jge 0x5302dd
call fcn.0041d2c0
test al, al
je 0x5302dd
mov eax, dword [ebx + 0x24]
mov ecx, dword [ebx]
lea edx, [eax*8]
sub edx, eax
mov byte [ebx + 0x70], 1
mov esi, dword [edx*4 + 0x69da88]
call fcn.004538c0
test al, al
je 0x530228
mov eax, 4
call fcn.005af400
test eax, eax
jne 0x5302dd
mov eax, dword [ebx]
cmp dword [eax + 0x7f8], 0x17
je 0x5302dd
call fcn.004537d0
test al, al
jne 0x5302dd
lea edi, [esp + 0x10]
call fcn.005320b0
mov eax, dword [esp + 0x18]
cdq
sub eax, edx
mov edi, eax
mov eax, dword [esp + 0x1c]
cdq
and edx, 3
add eax, edx
sar eax, 2
add eax, dword [esp + 0x14]
sar edi, 1
add edi, dword [esp + 0x10]
cmp dword [ebx + 0x24], 0x13
mov dword [esp + 0xc], eax
jne 0x5302d2
mov eax, dword [ebx]
mov esi, 4
call fcn.00453630
mov esi, dword [esp + 0xc]
mov ecx, dword [ebx + 4]
push 3
push 3
push esi
lea eax, [edi - 0x14]
push eax
call fcn.0040cb10
push 3
push 3
push esi
lea ecx, [edi - 0x1e]
push ecx
mov ecx, dword [ebx + 4]
call fcn.0040cb10
mov ecx, dword [ebx + 4]
push 3
push 3
push esi
lea edx, [edi - 0x28]
push edx
call fcn.0040cb10
mov ecx, dword [ebx + 4]
push 3
push 3
push esi
add edi, 0xffffffce
push edi
call fcn.0040cb10
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
jmp 0x79c9ce
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x530480
Capabilities:
Packed with generic packer

Disassembly:
push esi
mov esi, eax
call fcn.00530410
mov ecx, dword [esi + 4]
mov edx, dword [esi + 0x128]
add ecx, 0xac
test edx, edx
je 0x5304c3
movzx eax, dx
cmp eax, dword [ecx + 8]
jae 0x5304c3
imul eax, eax, 0x14c
add eax, dword [ecx]
cmp dword [eax + 0x148], edx
jne 0x5304c3
mov ecx, dword [esi + 4]
add dword [ecx + 0x5798], 1
push eax
call fcn.004679b0
mov edx, dword [esi + 0xf0]
mov esi, dword [esi + 4]
add esi, 0x90
test edx, edx
je 0x5304ff
movzx eax, dx
cmp eax, dword [esi + 8]
jae 0x5304ff
imul eax, eax, 0x15c
add eax, dword [esi]
cmp dword [eax + 0x158], edx
jne 0x5304ff
cmp byte [eax + 0xec], 0
jne 0x5304ff
mov ecx, eax
pop esi
jmp fcn.00530510
pop esi
ret
Function at 0x530510
Capabilities:
Packed with generic packer

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push ecx
push edi
mov edi, ecx
push edi
call fcn.00530850
mov ecx, dword [edi + 0x110]
test ecx, ecx
je 0x53056b
mov eax, dword [0x6a9eb8]
mov edx, dword [eax + 0xc]
movzx eax, cx
cmp eax, dword [edx + 8]
jb 0x53053e
xor ecx, ecx
jmp 0x530558
imul eax, eax, 0x30c
add eax, dword [edx]
xor edx, edx
cmp dword [eax + 0x308], ecx
setne dl
sub edx, 1
and edx, eax
mov ecx, edx
test ecx, ecx
mov dword [edi + 0x110], 0
je 0x53056b
call fcn.00404fc0
mov ecx, dword [edi]
mov eax, dword [edi + 0x118]
test eax, eax
mov edx, dword [ecx + 0x820]
mov edx, dword [edx + 8]
je 0x53059d
movzx ecx, ax
cmp ecx, dword [edx + 8]
jae 0x53059d
lea ecx, [ecx + ecx*4]
shl ecx, 5
add ecx, dword [edx]
cmp dword [ecx + 0x9c], eax
jne 0x53059d
call fcn.004733f0
mov ecx, dword [edi]
mov eax, dword [edi + 0x150]
test eax, eax
mov edx, dword [ecx + 0x820]
mov edx, dword [edx + 8]
je 0x5305cf
movzx ecx, ax
cmp ecx, dword [edx + 8]
jae 0x5305cf
lea ecx, [ecx + ecx*4]
shl ecx, 5
add ecx, dword [edx]
cmp dword [ecx + 0x9c], eax
jne 0x5305cf
call fcn.004733f0
mov ecx, dword [edi]
mov eax, dword [edi + 0x144]
test eax, eax
mov edx, dword [ecx + 0x820]
mov edx, dword [edx + 8]
je 0x530601
movzx ecx, ax
cmp ecx, dword [edx + 8]
jae 0x530601
lea ecx, [ecx + ecx*4]
shl ecx, 5
add ecx, dword [edx]
cmp dword [ecx + 0x9c], eax
jne 0x530601
call fcn.004733f0
push edi
jmp 0x79dabb

Function at 0x530fe0
Capabilities:
Packed with generic packer

Disassembly:
push ecx
test bl, 8
push ebp
mov ebp, dword [esp + 0xc]
push esi
push edi
mov esi, eax
jne 0x530ff6
mov dword [ebp + 0x54], 0x19
mov edi, dword [ebp + 0xd4]
mov ecx, dword [ebp + 0xd0]
mov eax, 0x55555556
imul edi
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ecx, eax
jge 0x53101e
mov dword [esp + 0x14], 2
jmp 0x53103a
lea edx, [edi + edi]
mov eax, 0x55555556
imul edx
mov eax, edx
shr eax, 0x1f
add eax, edx
xor edx, edx
cmp ecx, eax
setl dl
mov dword [esp + 0x14], edx
cmp ecx, esi
mov eax, ecx
jl 0x531042
mov eax, esi
sub esi, eax
sub ecx, eax
test bl, 4
mov dword [esp + 0xc], esi
jmp 0x794daf
Function at 0x532b70
Capabilities:
Packed with generic packer

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, ecx
xor ebx, ebx
cmp byte [esi + 0xec], bl
push edi
jne 0x532fea
cmp dword [esi + 0x28], 2
je 0x532fea
jmp loc.00795cf4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x538240
Capabilities:
Packed with generic packer

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x645d03
mov eax, dword fs:[0]
push eax
sub esp, 0x90
push ebx
push esi
push edi
mov eax, dword [0x699fe8]
xor eax, esp
push eax
lea eax, [esp + 0xa0]
mov dword fs:[0], eax
mov edi, ecx
mov dword [esp + 0x1c], edi
mov eax, dword [edi + 0x10]
mov ecx, dword [edi + 0x4c]
cmp ecx, dword [eax + 0x80]
jle 0x53828d
push ecx
push eax
call fcn.00538790
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
mov edx, dword [edi + 0x44]
mov ecx, dword [ebx + 4]
or edx, eax
mov dword [esp + 0x24], eax
mov eax, dword [edi + 0x48]
not eax
and edx, eax
mov dword [ebx], edx
mov edx, dword [edi + 0x48]
mov dword [esp + 0x28], ecx
mov ecx, dword [edi + 0x44]
or ecx, dword [ebx + 4]
not edx
and ecx, edx
mov dword [esp + 0x20], ebx
mov dword [ebx + 4], ecx
mov dword [esp + 0xa8], 0
cmp byte [edi + 0x41], 0
je 0x5382f4
cmp byte [ebx + 8], 0
je 0x5382da
mov eax, dword [ebx]
jmp 0x5382dc
mov eax, ecx
test al, 8
je 0x5382f4
mov eax, dword [edi + 0x3c]
mov ecx, dword [edi + 0x38]
mov esi, dword [ebp + 0xc]
push eax
push ecx
push 0
push 0
call fcn.00587840
cmp dword [edi + 0xc], 0
jne 0x53833d
cmp byte [ebx + 8], 0
je 0x538304
mov eax, dword [ebx]
jmp 0x538307
mov eax, dword [ebx + 4]
test al, 4
je 0x538318
mov edx, dword [edi]
mov eax, dword [ebp + 0xc]
mov edx, dword [edx + 0x68]
push eax
mov ecx, edi
call edx
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
mov dword [ebx + 4], ecx
mov dword [ebx], eax
mov ecx, dword [esp + 0xa0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
cmp byte [ebx + 8], 0
je 0x538347
mov eax, dword [ebx]
jmp 0x53834a
mov eax, dword [ebx + 4]
test al, 4
je 0x53836c
mov esi, dword [ebp + 0xc]
push esi
call fcn.00586b40
mov edx, dword [edi]
mov eax, dword [edx + 0x68]
push esi
mov ecx, edi
call eax
mov edi, esi
call fcn.00586bd0
mov edi, dword [esp + 0x1c]
mov eax, dword [edi + 8]
mov ecx, dword [eax]
lea esi, [edi + 4]
mov dword [esp + 0x18], ecx
jmp 0x538380
cmp esi, esi
mov edx, dword [esi + 4]
mov dword [esp + 0x30], edx
je 0x538390
call fcn.0061c63f
mov eax, dword [esp + 0x18]
cmp eax, dword [esp + 0x30]
je 0x538318
cmp eax, dword [esi + 4]
jne 0x5383a8
call fcn.0061c63f
mov eax, dword [esp + 0x18]
mov esi, dword [eax + 8]
jmp 0x799b89
Function at 0x539390
Capabilities:
Packed with generic packer

Disassembly:
push ecx
test ebx, ebx
push ebp
mov ebp, dword [esp + 0xc]
push esi
push edi
mov edi, ecx
mov esi, eax
mov eax, dword [edi + 0x28]
mov dword [edi + 0xf0], eax
jge 0x5393b2
or dword [edi + 0xec], 2
jmp 0x5393c7
cmp ebx, 3
jne 0x5393c0
or dword [edi + 0xec], 4
jmp 0x5393c7
or dword [edi + 0xec], 1
push esi
push ebp
call fcn.005391c0
mov ecx, dword [edi + 0x6c]
test ecx, ecx
je 0x5393ec
mov edx, dword [ecx]
mov eax, dword [edx + 0x110]
push esi
push ebp
call eax
test al, al
jne 0x5393ec
mov ecx, edi
call fcn.005391a0
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x10]
push edx
mov eax, esi
mov ecx, ebp
mov edx, edi
call fcn.00538730
mov esi, eax
mov eax, dword [edi + 0x8c]
test eax, eax
je 0x53940f
mov esi, eax
test ebx, ebx
jge 0x539426
or dword [edi + 0xe8], 2
jmp 0x79fbc9
cmp ebx, 3
jne 0x53943e
or dword [edi + 0xe8], 4
mov dword [edi + 0x1f4], 2
jmp 0x53944f
mov eax, 1
or dword [edi + 0xe8], eax
mov dword [edi + 0x1f4], eax
test esi, esi
mov dword [edi + 0x8c], esi
je 0x53948e
mov eax, dword [esi]
mov edx, dword [eax + 0xa8]
mov ecx, esi
call edx
test al, al
je 0x539473
mov eax, dword [edi]
mov edx, dword [eax + 0x20]
push esi
mov ecx, edi
call edx
mov eax, dword [esi]
mov eax, dword [eax + 0xd8]
mov byte [esi + 0x58], 1
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xc]
push ebx
push ecx
push edx
mov ecx, esi
call eax
pop edi
pop esi
mov al, 1
pop ebp
pop ecx
ret 4