joyce8/EMBER2024-capa huggingface dataset:
Function at 0x40368d
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
pushal
call 0x40369c
pop dword [ebp - 0x24]
mov eax, 0xf47417bb
add eax, 0xbcc1ee1
sub dword [ebp - 0x24], eax
mov dword [ebp - 0x34], 0xc00c435f
sub dword [ebp - 0x34], 0x71b9fe14
mov dword [ebp - 0x30], 0x4401ae00
add dword [ebp - 0x30], 0xee319e45
mov dword [ebp - 0x2c], 0x11c4082c
add dword [ebp - 0x2c], 0x3a883c02
mov dword [ebp - 0x28], 0x5ea9e9d5
add dword [ebp - 0x28], 0xa156162b
lea eax, [ebp - 0x34]
push eax
mov eax, 0xb415b893
add eax, 0x4c2ab789
add eax, dword [ebp - 0x24]
call dword [eax]
mov dword [ebp - 0x34], 0x7de39bef
sub dword [ebp - 0x34], 0x9713299
mov dword [ebp - 0x30], 0xc06117a9
add dword [ebp - 0x30], 0x810b49cc
mov dword [ebp - 0x2c], 0xa0d6143e
sub dword [ebp - 0x2c], 0x3d66a7d2
mov dword [ebp - 0x28], 0x53809616
sub dword [ebp - 0x28], 0x53809616
lea ebx, [ebp - 0x34]
push ebx
push eax
mov eax, 0x5fe1ee74
sub eax, 0x5fa17e54
add eax, dword [ebp - 0x24]
call dword [eax]
push 0x40
push 0x1000
push 0x35941
push 0
call eax
mov ecx, 0xabe2dec9
add ecx, 0x541d60ae
xor edi, edi
add edi, eax
mov esi, 0x40c800
add esi, dword [ebp - 0x24]
mov ebx, 0x2166d797
sub dword [ebp - 0x18], edx
mov edx, dword [esi]
sub dword [ebp - 0x1c], 0x79308993
add edx, ebx
xor dword [ebp - 4], 0xe1094350
mov dword [edi], edx
mov dword [ebp - 0x1c], 0x19640d10
add edi, 0x1c8e512e
sub edi, 0x1c8e512a
add esi, 4
loop 0x4037b4
add eax, 0xb9322999
sub eax, 0xb93138ea
mov ebx, eax
add eax, 5
mov ecx, 0x400000
add ecx, dword [ebp - 0x24]
call ebx
leave
ret

Function at 0x404635
Capabilities:
Check if file exists

Disassembly:
push 0x1c
mov eax, 0x4069e0
call fcn.004054fb
cmp dword [0x40a010], 0
mov esi, dword [ebp + 8]
jne 0x404654
mov al, 1
jmp 0x40471d
test esi, esi
je 0x40471b
xor ebx, ebx
cmp word [esi], bx
je 0x40471b
push esi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x40471b
push esi
call dword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
test eax, eax
jne 0x40471b
lea eax, [ebp - 0x28]
push esi
push eax
call fcn.0040368d
pop ecx
pop ecx
mov esi, dword [0x40a010]
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x18], ebx
je 0x40470f
lea eax, [ebp - 0x28]
push eax
call fcn.0040368d
pop ecx
test al, al
jne 0x40470f
cmp dword [ebp - 0x18], esi
jbe 0x40470f
cmp dword [0x40a014], 8
lea eax, [ebp - 0x28]
mov ecx, section..data
cmovae ecx, dword [section..data]
cmp dword [ebp - 0x14], 8
push esi
cmovae eax, dword [ebp - 0x28]
push ecx
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
add esp, 0xc
test eax, eax
jne 0x40470f
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindExtensionW]
test eax, eax
je 0x40470f
push 0x407620
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
xor edx, edx
movzx ebx, bl
inc edx
test eax, eax
pop ecx
pop ecx
cmovne ebx, edx
lea ecx, [ebp - 0x28]
call fcn.00401788
mov al, bl
jmp 0x40471d
xor al, al
call fcn.004054b6
ret
Function at 0x401140
Capabilities:
Delete directory
Inspect load icon resource

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
push ebx
push esi
push edi
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0x20], 0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x28], eax
push 0
push 0x13
push 4
push 0x15
push 0
call dword [sym.imp.GDI32.dll_CreateBitmap]
mov dword [ebp - 4], 0
mov dword [ebp - 0x18], 0
jmp 0x4011a9
mov ecx, dword [ebp - 0x18]
add ecx, 1
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], 0x143
jge 0x4011bd
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
jmp 0x4011a0
cmp dword [ebp - 4], 0
jbe 0x401209
push 0x40
mov eax, 0x1000
push eax
mov ecx, 0x1400
push ecx
push 0
push 0x4010e0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
mov dword [ebp - 0x2c], 0
mov edx, dword [ebp - 0x28]
push 0
push 0
call dword [sym.imp.USER32.dll_LoadIconA]
test eax, eax
jne 0x401202
push 0
call fcn.00401609
mov dword [0x417c88], eax
mov dword [ebp + 8], 0x27
mov eax, 0x14
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x402579
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1a4
mov edx, dword [ebp + 8]
xor ecx, ecx
mov eax, 0x417888
cmp edx, dword [eax]
je 0x40259b
add eax, 8
inc ecx
cmp eax, 0x417918
jl 0x40258c
push esi
mov esi, ecx
shl esi, 3
cmp edx, dword [esi + 0x417888]
jne 0x4026c9
mov eax, dword [0x417c94]
cmp eax, 1
je 0x4026a3
test eax, eax
jne 0x4025cc
cmp dword [0x4177d8], 1
je 0x4026a3
cmp edx, 0xfc
je 0x4026c9
lea eax, [ebp - 0x1a4]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
jne 0x402603
lea eax, [ebp - 0x1a4]
push str._program_name_unknown_
push eax
call fcn.004039c0
pop ecx
pop ecx
lea eax, [ebp - 0x1a4]
push edi
push eax
lea edi, [ebp - 0x1a4]
call fcn.00403ab0
inc eax
pop ecx
cmp eax, 0x3c
jbe 0x402646
lea eax, [ebp - 0x1a4]
push eax
call fcn.00403ab0
mov edi, eax
lea eax, [ebp - 0x1a4]
sub eax, 0x3b
push 3
add edi, eax
push 0x406978
push edi
call fcn.00403bc0
add esp, 0x10
lea eax, [ebp - 0xa0]
push str.Runtime_Error__n_nProgram:
push eax
call fcn.004039c0
lea eax, [ebp - 0xa0]
push edi
push eax
call fcn.004039d0
lea eax, [ebp - 0xa0]
push 0x406958
push eax
call fcn.004039d0
push dword [esi + 0x41788c]
lea eax, [ebp - 0xa0]
push eax
call fcn.004039d0
push 0x12010
lea eax, [ebp - 0xa0]
push str.Microsoft_Visual_C_Runtime_Library
push eax
call fcn.00403b2b
add esp, 0x2c
pop edi
jmp 0x4026c9
lea eax, [ebp + 8]
lea esi, [esi + 0x41788c]
push 0
push eax
push dword [esi]
call fcn.00403ab0
pop ecx
push eax
push dword [esi]
push 0xfffffffffffffff4
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
pop esi
leave
ret
Function at 0x40333c
Capabilities:
Accept command line arguments
Parse pe header

Disassembly:
push 0x14
push 0x410aa0
call fcn.00406024
mov eax, 0x5a4d
cmp word [0x400000], ax
jne 0x40323d
mov eax, dword [0x40003c]
cmp dword [eax + 0x400000], 0x4550
jne 0x40323d
mov ecx, 0x10b
cmp word [eax + 0x400018], cx
jne 0x40323d
cmp dword [eax + 0x400074], 0xe
jbe 0x40323d
xor ecx, ecx
cmp dword [eax + 0x4000e8], ecx
setne cl
mov dword [ebp - 0x1c], ecx
jmp 0x403241
and dword [ebp - 0x1c], 0
push 1
call main
pop ecx
test eax, eax
jne 0x403255
push 0x1c
call main
pop ecx
call fcn.00407199
test eax, eax
jne 0x403266
push 0x10
call main
pop ecx
call fcn.00406d3d
and dword [ebp - 4], 0
call fcn.00403bed
test eax, eax
jge 0x403280
push 0x1b
call main
pop ecx
call sub.kernel32.dll_GetCommandLineW
mov dword [0x413d00], eax
call fcn.00406ce0
mov dword [0x412ff8], eax
call main
test eax, eax
jge 0x4032a5
push 8
call main
pop ecx
call fcn.00406a03
test eax, eax
jge 0x4032b6
push 9
call main
pop ecx
push 1
call main
pop ecx
test eax, eax
je 0x4032c9
push eax
call main
pop ecx
mov eax, dword [0x413340]
mov dword [0x413344], eax
push eax
push dword [0x413334]
push dword [0x41332c]
call main
add esp, 0xc
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x1c], 0
jne 0x4032f7
push eax
call main
call fcn.0040428b
jmp 0x40332c
mov dword [ebp - 4], 0xfffffffe
mov eax, dword [ebp - 0x20]
call fcn.00406069
ret
call main
jmp 0x4031eb

Function at 0x407550
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
pushal
call 0x40755f
pop dword [ebp - 0x28]
mov eax, 0xdcc166c1
sub eax, 0xdc80f162
sub dword [ebp - 0x28], eax
push 0x40
push 0x1000
push 0x39d52
push 0
mov eax, 0x379e7772
add eax, 0xc8a269ae
add eax, dword [ebp - 0x28]
call dword [eax]
mov ecx, 0x638b940a
sub ecx, 0x638b4b6c
mov ebx, eax
mov esi, 0x417800
add esi, dword [ebp - 0x28]
mov edi, 0x90f81261
add dword [ebp - 0x18], edx
mov edx, dword [esi]
sub dword [ebp - 0xc], ecx
add edx, edi
mov dword [ebx], edx
xor dword [ebp - 0xc], eax
add ebx, 0xf20d7071
add ebx, 0xdf28f93
add esi, 4
loop 0x4075b2
add eax, 0x72a85693
sub eax, 0x72a74148
mov ebx, eax
add eax, 0x6c2bb33
add eax, 0xf93d44d2
mov ecx, 0x400000
add ecx, dword [ebp - 0x28]
call ebx
leave
ret
Function at 0x401080
Capabilities:
Accept command line arguments

Disassembly:
sub esp, 0x108
mov eax, dword [0x4afca0]
push esi
push edi
mov dword [esp + 0x10c], eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov esi, eax
cmp byte [esi], 0x22
jne 0x4010a9
lea edi, [esi + 1]
push 0x22
push edi
jmp 0x4010ae
push 0x20
mov edi, esi
push esi
call fcn.00478740
add esp, 8
test eax, eax
jne 0x4010cd
mov eax, esi
lea edx, [eax + 1]
nop
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x4010c0
sub eax, edx
add eax, esi
mov esi, eax
sub esi, edi
push esi
lea eax, [esp + 0xc]
push edi
push eax
mov byte [esp + 0x14], 0
call fcn.00478600
mov ecx, dword [esp + 0x120]
push ecx
lea edx, [esp + 0x18]
push edx
mov byte [esp + esi + 0x1c], 0
call fcn.00412e90
mov ecx, dword [esp + 0x120]
add esp, 0x14
pop edi
pop esi
call fcn.0047882f
add esp, 0x108
ret
Function at 0x412dd0
Capabilities:
Get common file path
Set current directory

Disassembly:
sub esp, 0x108
cmp dword [esp + 0x110], 0
mov eax, dword [0x4afca0]
mov dword [esp + 0x104], eax
je 0x412e15
mov eax, dword [0x15d426c]
test eax, eax
jne 0x412dff
mov eax, 0x15d4270
mov dword [0x15d426c], eax
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
add dword [0x15d426c], 0x104
mov eax, dword [esp + 0x10c]
cmp byte [eax], 0x5c
push eax
jne 0x412e3d
push 0x15d4168
lea eax, [esp + 8]
push str._s_s
push eax
call fcn.004788cf
add esp, 0x10
lea ecx, [esp]
push ecx
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
mov ecx, dword [esp + 0x104]
call fcn.0047882f
add esp, 0x108
ret

Function at 0x412e60
Capabilities:
Set current directory

Disassembly:
mov eax, dword [0x15d426c]
sub eax, 0x104
cmp eax, 0x15d4270
mov dword [0x15d426c], eax
jae 0x412e80
mov eax, 0x15d4270
mov dword [0x15d426c], eax
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
ret

Function at 0x413120
Capabilities:
Read file on windows

Disassembly:
mov edx, dword [esp + 4]
push esi
mov esi, dword [esp + 0xc]
push 0
lea eax, [esp + 0x10]
push eax
mov eax, dword [ecx + 4]
push esi
push edx
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
cmp dword [esp + 0xc], esi
pop esi
sete al
ret 8

Function at 0x413150
Capabilities:
Write file on windows

Disassembly:
mov edx, dword [esp + 4]
push esi
mov esi, dword [esp + 0xc]
push 0
lea eax, [esp + 0x10]
push eax
mov eax, dword [ecx + 4]
push esi
push edx
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
xor eax, eax
cmp dword [esp + 0xc], esi
pop esi
sete al
ret 8
Function at 0x413bc0
Capabilities:
Delete file

Disassembly:
push 0xffffffffffffffff
push 0x48425b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x40c
mov eax, dword [0x4afca0]
push ebx
push ebp
push esi
push edi
mov edi, ecx
lea ecx, [esp + 0x10]
mov dword [esp + 0x418], eax
call fcn.00413080
mov esi, dword [esp + 0x42c]
xor ebx, ebx
lea edx, [esp + 0x218]
mov dword [esp + 0x424], ebx
mov eax, esi
sub edx, esi
mov cl, byte [eax]
mov byte [edx + eax], cl
add eax, 1
test cl, cl
jne 0x413c11
lea ebp, [esp + 0x18]
xor eax, eax
mov ecx, esi
sub ebp, esi
mov dl, byte [ecx]
cmp dl, 0x2e
mov byte [ecx + ebp], dl
je 0x413c40
add eax, 1
add ecx, 1
cmp eax, 0x80
jl 0x413c27
jmp 0x413ca2
mov cl, 0x69
cmp byte [eax + esi + 1], cl
jne 0x413ca2
mov dl, 0x6e
cmp byte [eax + esi + 2], dl
jne 0x413ca2
cmp byte [eax + esi + 3], cl
jne 0x413ca2
mov byte [esp + eax + 0x19], cl
push esi
mov ecx, edi
mov ebx, 1
mov byte [esp + eax + 0x1e], dl
mov byte [esp + eax + 0x1f], 0x74
mov byte [esp + eax + 0x20], 0
call fcn.004135f0
cmp eax, 0xffffffff
jne 0x413c8d
push esi
push str.KParser__s_cannot_open
call fcn.00402880
add esp, 8
jmp 0x413d11
xor eax, eax
nop
mov cl, byte [esp + eax + 0x18]
mov byte [esp + eax + 0x218], cl
add eax, 1
test cl, cl
jne 0x413c90
push 1
lea eax, [esp + 0x21c]
push eax
lea ecx, [esp + 0x18]
call fcn.00413090
test eax, eax
jne 0x413cd0
lea ecx, [esp + 0x218]
push ecx
push str.KParser__s_cannot_open
call fcn.00402880
add esp, 8
jmp 0x413d11
lea ecx, [esp + 0x10]
call fcn.00413180
mov ebp, eax
cmp ebp, dword [edi + 0x4018]
jbe 0x413d29
push 0x4000
push esi
push str.KParser__s_buffer_size_exceed__d
call fcn.00402880
add esp, 0xc
lea ecx, [esp + 0x10]
call fcn.00413100
test ebx, ebx
je 0x413d11
lea edx, [esp + 0x218]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea ecx, [esp + 0x10]
mov dword [esp + 0x424], 0xffffffff
call fcn.00413200
xor eax, eax
jmp 0x413d8c
mov eax, dword [edi + 8]
push ebp
push eax
lea ecx, [esp + 0x18]
call fcn.00413120
mov ecx, dword [edi + 8]
mov byte [ecx + ebp], 0
lea ecx, [esp + 0x10]
call fcn.00413100
test ebx, ebx
mov edx, dword [edi + 8]
mov dword [edi + 4], edx
mov dword [edi + 0x401c], 1
mov dword [edi + 0x4020], 0
je 0x413d73
lea eax, [esp + 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea ecx, [esp + 0x10]
mov dword [esp + 0x424], 0xffffffff
call fcn.00413200
mov eax, 1
mov ecx, dword [esp + 0x41c]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x40c]
pop ebx
call fcn.0047882f
add esp, 0x418
ret 4

Function at 0x414dc4
Capabilities:
Create thread

Disassembly:
mov eax, dword [esp + 4]
push esi
mov esi, ecx
mov ecx, dword [esi + 0x11c]
push ecx
mov dword [esi + 0x104], eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov eax, dword [esp + 0xc]
test eax, eax
mov dword [esi + 0x120], eax
je 0x414e24
cmp dword [esi + 0x10c], 0
jne 0x414e24
lea edx, [esp + 8]
push edx
push 0
push esi
push 0x414da0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
mov dword [esi + 0x10c], eax
jne 0x414e16
pop esi
ret 8
mov ecx, dword [esi + 0x108]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov eax, 1
pop esi
ret 8
Function at 0x414ec0
Capabilities:
Get common file path

Disassembly:
push 0xffffffffffffffff
push 0x48434c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10c
mov eax, dword [0x4afca0]
push esi
mov esi, ecx
mov dword [esp + 0x10c], eax
mov dword [esp + 4], esi
call fcn.00401000
lea ecx, [esi + 0x6d93c]
mov dword [esp + 0x118], 0
mov dword [esi], 0x48cf34
call fcn.00402860
lea eax, [esp + 8]
push eax
push 0x104
mov byte [esp + 0x120], 1
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea ecx, [esp + 8]
push ecx
call fcn.00412db0
push 0
call fcn.0047a032
push eax
call fcn.00479282
mov ecx, dword [esp + 0x11c]
add esp, 0xc
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x10c]
mov eax, esi
pop esi
call fcn.0047882f
add esp, 0x118
ret
Function at 0x415a40
Capabilities:
Read .ini file

Disassembly:
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push str..EZ2DJ1st_bookkeeping.ini
push 0
push str.Coins
push str.GAMEASSIGNMENTS
call esi
mov ecx, dword [0x1b2e710]
push str..EZ2DJ1st_bookkeeping.ini
push 0
push str.TOTALCOIN
push str.STATISTICS
mov dword [ecx + 0x420284], eax
call esi
add dword [0x16963dc], eax
push str..EZ2DJ1st_bookkeeping.ini
push 0
push str.SERVICECOIN
push str.STATISTICS
call esi
add dword [0x16963e8], eax
mov eax, 1
pop esi
ret
push esi
push 0x4a8d74
mov esi, ecx
mov ecx, dword [0x530b64]
push str.GameLevel
call fcn.00413f40
mov ecx, dword [0x530b64]
push 0x4a8d78
push str.GameVolume
call fcn.00413f40
mov ecx, dword [0x530b64]
push 0x16963f8
push str.AdvSound
call fcn.00413f40
mov ecx, dword [0x530b64]
push 0x1696404
push str.EventMode
call fcn.00413f40
mov ecx, dword [0x530b64]
push 0x1696408
push str.EventModeMixName
call fcn.00413f40
mov ecx, dword [0x530b64]
push 0x169640c
push str.EventModeSongNameIdx
call fcn.00413f40
mov ecx, dword [0x530b64]
push 0x1696330
push str.EventModeSongName
call fcn.00413f70
mov ecx, dword [0x530b64]
push 0x1696420
push str.1PlayerOnly
call fcn.00413f40
mov ecx, dword [0x530b64]
push 0x1696424
push str.AutoScratchL
call fcn.00413f40
mov ecx, dword [0x530b64]
push 0x1696428
push str.AutoScratchR
call fcn.00413f40
mov ecx, dword [0x530b64]
push 0x169642c
push str.AutoPedal
call fcn.00413f40
mov ecx, dword [0x530b64]
push 0x16963e4
push str.Wide
call fcn.00413f40
mov ecx, dword [0x530b68]
push 0x16963c8
push str.RestartSystem
call fcn.00413f40
mov ecx, dword [0x530b68]
push 0x1696320
push str.ResetTime
call fcn.00413f40
mov ecx, dword [0x530b68]
push 0x16963f0
push str.RemainPatch
call fcn.00413f40
mov ecx, dword [0x530b68]
push 0x16963d8
push str.InitializePatch
call fcn.00413f40
mov ecx, dword [0x530b68]
push 0x16963d0
push str.AllRankingFileDelete
call fcn.00413f40
mov ecx, dword [0x530b68]
push 0x16963b4
push str.DelTurntableRanking
call fcn.00413f40
mov ecx, dword [0x530b68]
push 0x16963b0
push str.DelStreetMixRanking
call fcn.00413f40
mov ecx, dword [0x530b68]
push 0x16963c0
push str.DelSpaceMixRanking
call fcn.00413f40
mov ecx, dword [0x530b68]
push 0x16963d4
push str.DelRubyMixRanking
call fcn.00413f40
mov ecx, dword [0x530b68]
push 0x1696328
push str.DelEz2CatchRanking
call fcn.00413f40
mov ecx, dword [0x530b68]
push 0x16963b8
push str.DelClubMixRanking
call fcn.00413f40
mov ecx, dword [0x530b68]
push 0x16963e0
push str.Del7StreetMixRanking
call fcn.00413f40
mov ecx, dword [0x530b68]
push 0x16963ec
push str.Del5keymixRanking
call fcn.00413f40
mov ecx, dword [0x530b6c]
push 0x16963bc
push str.GameVersion
call fcn.00413f40
mov eax, dword [0x16963bc]
push eax
push str.Game_Version___d
mov dword [0x1b2f088], eax
call fcn.00402880
add esp, 8
cmp dword [0x16963c8], 0
jne 0x415c8d
mov dword [esi + 0x1c], 1
mov ecx, esi
call fcn.004156c0
mov ecx, esi
call fcn.00415900
cmp dword [0x530b70], 0
je 0x415cac
mov ecx, esi
pop esi
jmp 0x415070
pop esi
ret
Function at 0x41b4f0
Capabilities:
Get common file path

Disassembly:
push 0xffffffffffffffff
push 0x48448a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10c
mov eax, dword [0x4afca0]
push ebx
push esi
mov esi, ecx
push edi
mov dword [esp + 0x114], eax
mov dword [esp + 0xc], esi
call fcn.00401690
xor ebx, ebx
lea ecx, [esi + 0x1c0]
mov dword [esp + 0x120], ebx
mov dword [esi], 0x48e1b8
call fcn.0040b180
push fcn.00402880
push fcn.00402860
push 0xa
push 0x21c
lea eax, [esi + 0x1006a0]
push eax
mov byte [esp + 0x134], 1
call fcn.0047a06b
mov dword [esi + 0x102118], ebx
mov dword [esi + 0x24], ebx
mov dword [esi + 0x698], ebx
mov dword [esi + 0x20], ebx
mov dword [0x1b2ea14], ebx
mov dword [esi + 0x10], ebx
mov dword [esi + 0x14], ebx
xor eax, eax
push 0x38fba882
mov ecx, 0x28
lea edi, [esi + 0x102078]
rep stosd dword es:[edi], eax
push 0x3e99999a
lea ecx, [esi + 0x101bb8]
mov dword [esi + 0xa8], ebx
push ecx
mov ecx, dword [0x1b2f054]
mov byte [esp + 0x12c], 2
call fcn.00406620
mov dword [esi + 0x102074], ebx
mov ecx, dword [0x1b2f054]
push ebx
call fcn.0040a470
lea edx, [esp + 0x10]
push edx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
cmp dword [0x1b2eb6c], ebx
jne 0x41b608
mov ecx, esi
call fcn.0041add0
push eax
mov ecx, esi
call fcn.0041add0
push eax
lea eax, [esp + 0x18]
push eax
push str._sVideo_s_s.spv
lea ecx, [esi + 0xb8]
push ecx
jmp 0x41b623
push 0x1b2eb80
push 0x1b2eb80
lea edx, [esp + 0x18]
push edx
push str._sVideo_s_s.spv
lea eax, [esi + 0xb8]
push eax
call fcn.004788cf
mov ecx, dword [esp + 0x12c]
add esp, 0x14
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x10c]
pop ebx
call fcn.0047882f
add esp, 0x118
ret
Function at 0x41b511
Capabilities:
Get common file path

Disassembly:
push 0xffffffffffffffff
push 0x48448a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10c
mov eax, dword [0x4afca0]
push ebx
push esi
mov esi, ecx
push edi
mov dword [esp + 0x114], eax
mov dword [esp + 0xc], esi
call fcn.00401690
xor ebx, ebx
lea ecx, [esi + 0x1c0]
mov dword [esp + 0x120], ebx
mov dword [esi], 0x48e1b8
call fcn.0040b180
push fcn.00402880
push fcn.00402860
push 0xa
push 0x21c
lea eax, [esi + 0x1006a0]
push eax
mov byte [esp + 0x134], 1
call fcn.0047a06b
mov dword [esi + 0x102118], ebx
mov dword [esi + 0x24], ebx
mov dword [esi + 0x698], ebx
mov dword [esi + 0x20], ebx
mov dword [0x1b2ea14], ebx
mov dword [esi + 0x10], ebx
mov dword [esi + 0x14], ebx
xor eax, eax
push 0x38fba882
mov ecx, 0x28
lea edi, [esi + 0x102078]
rep stosd dword es:[edi], eax
push 0x3e99999a
lea ecx, [esi + 0x101bb8]
mov dword [esi + 0xa8], ebx
push ecx
mov ecx, dword [0x1b2f054]
mov byte [esp + 0x12c], 2
call fcn.00406620
mov dword [esi + 0x102074], ebx
mov ecx, dword [0x1b2f054]
push ebx
call fcn.0040a470
lea edx, [esp + 0x10]
push edx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
cmp dword [0x1b2eb6c], ebx
jne 0x41b608
mov ecx, esi
call fcn.0041add0
push eax
mov ecx, esi
call fcn.0041add0
push eax
lea eax, [esp + 0x18]
push eax
push str._sVideo_s_s.spv
lea ecx, [esi + 0xb8]
push ecx
jmp 0x41b623
push 0x1b2eb80
push 0x1b2eb80
lea edx, [esp + 0x18]
push edx
push str._sVideo_s_s.spv
lea eax, [esi + 0xb8]
push eax
call fcn.004788cf
mov ecx, dword [esp + 0x12c]
add esp, 0x14
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x10c]
pop ebx
call fcn.0047882f
add esp, 0x118
ret
Function at 0x4280a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push esi
mov esi, ecx
cmp dword [esi + 0x1410], 0
je 0x428137
call fcn.00418310
cmp eax, 2
je case.default.0x4280d4
mov ecx, 1
cmp dword [esi + 0x1444], ecx
jne case.default.0x4280d4
mov eax, dword [0x1b2efb0]
add eax, 0xffffffff
cmp eax, 4
ja case.default.0x4280d4
jmp dword [eax*4 + 0x42813c]
mov eax, dword [esi + 0x145c]
push eax
jmp 0x42811d
mov edx, dword [esi + 0x1458]
jmp 0x42811c
mov eax, dword [esi + 0x1454]
push eax
jmp 0x42811d
cmp dword [0x1b2ea1c], ecx
jne 0x428105
mov edx, dword [esi + 0x1450]
jmp 0x42811c
cmp dword [0x1b2ef3c], ecx
jne case.default.0x4280d4
mov eax, dword [esi + 0x144c]
push eax
jmp 0x42811d
mov edx, dword [esi + 0x1448]
push edx
push 0
push ecx
mov ecx, dword [esi + 0x1440]
call fcn.00402910
mov ecx, dword [esi + 0x1440]
pop esi
jmp fcn.00403940
pop esi
ret