joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4103d0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x47c350
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push esi
mov esi, ecx
push edi
mov dword [esp + 0xc], esi
call fcn.00453340
xor edi, edi
lea ecx, [esi + 0xd8]
mov dword [esp + 0x18], edi
mov dword [esi], 0x47f340
call fcn.00454760
lea ecx, [esi + 0xe8]
mov byte [esp + 0x18], 1
call fcn.00454760
lea ecx, [esi + 0xf8]
mov byte [esp + 0x18], 2
call fcn.00454760
lea ecx, [esi + 0x108]
mov byte [esp + 0x18], 3
call fcn.00454760
push 0xd
push 0x47f360
lea ecx, [esi + 0x14]
mov byte [esp + 0x20], 4
call fcn.00403fa0
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x38]
mov ebx, dword [esp + 0x28]
mov edx, dword [esp + 0x44]
mov dword [esi + 0x128], ecx
mov ecx, dword [esp + 0x40]
mov dword [esi + 0x98], eax
mov eax, dword [esp + 0x3c]
mov dword [esi + 0xd0], edi
mov dword [esi + 0xc4], edi
mov dword [esi + 0xd4], edi
mov dword [esi + 0x80], ecx
mov dword [esi + 0x30], 0x410090
mov dword [esi + 0x34], 0x40fde0
mov dword [esi + 0xcc], ebx
mov dword [esi + 0x7c], eax
mov dword [esi + 0x84], edx
fld dword [ecx]
fmul dword [0x47f348]
mov ecx, 8
cmp ebx, ecx
mov edi, 6
fchs
fstp dword [esi + 0x88]
fld dword [eax]
fmul dword [0x47f348]
fstp dword [esi + 0x8c]
fld dword [edx]
fmul dword [0x47f348]
fstp dword [esi + 0x90]
ja case.default.0x4104e6
jmp dword [ebx*4 + 0x410604]
mov eax, 0x30
mov dword [esi + 0xb0], eax
mov dword [esi + 0xb4], eax
jmp 0x410527
mov eax, 0x30
mov dword [esi + 0xb0], eax
mov dword [esi + 0xb4], eax
jmp 0x410560
mov dword [esi + 0xb0], 0x50
mov dword [esi + 0xb4], 0x40
mov dword [esi + 0xb8], edi
mov dword [esi + 0xa4], 0x1f4
jmp case.default.0x4104e6
mov eax, 0x50
mov dword [esi + 0xb0], eax
mov dword [esi + 0xb4], eax
jmp 0x410560
mov dword [esi + 0xb0], 0x70
mov dword [esi + 0xb4], 0x30
mov dword [esi + 0xb8], ecx
mov dword [esi + 0xa4], 0x32
call fcn.0045be0e
cdq
idiv edi
add edx, 2
mov dword [esi + 0xac], edx
call fcn.0045be0e
cdq
idiv dword [esi + 0xb8]
mov dword [esi + 0x9c], edx
call fcn.0045be0e
cdq
mov ecx, 3
idiv ecx
mov dword [esi + 0xa0], edx
call fcn.0045be0e
cdq
mov ecx, 0xa
idiv ecx
mov dword [esi + 0xa8], edx
call fcn.0045be0e
and eax, 0x800003ff
jns 0x4105cc
dec eax
or eax, 0xfffffc00
inc eax
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x24]
push edx
mov edx, dword [esp + 0x24]
mov dword [esi + 0xac], eax
mov eax, dword [esp + 0x30]
push eax
push ebx
push ecx
push edx
mov ecx, esi
call fcn.0040ffa0
mov ecx, dword [esp + 0x10]
pop edi
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret 0x28
Function at 0x4182a0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x47c61d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push esi
mov esi, ecx
push edi
mov dword [esp + 8], esi
call fcn.00453340
lea edi, [esi + 0x7c]
mov ecx, edi
mov dword [esp + 0x14], 0
call fcn.00453230
lea ecx, [esi + 0xac]
mov byte [esp + 0x14], 1
call fcn.004217b0
push fcn.00446e60
push fcn.004474e0
push 2
push 0x23c
lea eax, [esi + 0x2a0f04]
push eax
mov byte [esp + 0x28], 2
mov dword [esi], 0x47f440
mov dword [edi], 0x47f438
call fcn.0045bcf3
push fcn.00446e60
push fcn.004474e0
push 1
push 0x23c
lea ecx, [esi + 0x2a137c]
push ecx
mov byte [esp + 0x28], 3
call fcn.0045bcf3
push fcn.00446e60
push fcn.004474e0
push 3
push 0x23c
lea edx, [esi + 0x2a15b8]
push edx
mov byte [esp + 0x28], 4
call fcn.0045bcf3
lea ecx, [esi + 0x2a1c6c]
mov byte [esp + 0x14], 5
call fcn.004474e0
lea ecx, [esi + 0x2a1ea8]
mov byte [esp + 0x14], 6
call fcn.004474e0
lea ecx, [esi + 0x2a20e4]
mov byte [esp + 0x14], 7
call fcn.004474e0
lea ecx, [esi + 0x2a2320]
mov byte [esp + 0x14], 8
call fcn.004474e0
push fcn.00446e60
push fcn.004474e0
push 6
push 0x23c
lea eax, [esi + 0x2a255c]
push eax
mov byte [esp + 0x28], 9
call fcn.0045bcf3
lea ecx, [esi + 0x2a32c4]
mov byte [esp + 0x14], 0xa
call fcn.0043aa20
lea ecx, [esi + 0x2b24f4]
mov byte [esp + 0x14], 0xb
call fcn.0041c600
lea ecx, [esi + 0x2b2738]
mov byte [esp + 0x14], 0xc
call fcn.00436fb0
lea ecx, [esi + 0x2b2ae8]
mov byte [esp + 0x14], 0xd
call fcn.0041b2d0
push 0x14
push str.CGameMain::EventProc
lea ecx, [esi + 0x14]
mov byte [esp + 0x1c], 0xe
call fcn.00403fa0
mov ecx, dword [esp + 0xc]
mov dword [esi + 0x34], 0x4179b0
mov dword [esi + 0x30], 0x412c90
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0x10
ret

Function at 0x41a1b0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x47c6ec
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push esi
mov esi, ecx
push edi
mov dword [esp + 8], esi
call fcn.00453340
lea edi, [esi + 0x7c]
mov ecx, edi
mov dword [esp + 0x14], 0
call fcn.00453230
lea ecx, [esi + 0xac]
mov byte [esp + 0x14], 1
call fcn.004217b0
push fcn.00446e60
push fcn.004474e0
push 4
push 0x23c
lea eax, [esi + 0xc8]
push eax
mov byte [esp + 0x28], 2
mov dword [esi], 0x47f8a8
mov dword [edi], 0x47f8a0
call fcn.0045bcf3
push 0x15
push str.CGameTitle::EventProc
lea ecx, [esi + 0x14]
mov byte [esp + 0x1c], 3
call fcn.00403fa0
mov ecx, dword [esp + 0xc]
mov dword [esi + 0x34], 0x419370
mov dword [esi + 0x30], fcn.0041b530
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0x10
ret
Function at 0x41b2d0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x47c7e5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push esi
mov esi, ecx
push edi
mov dword [esp + 8], esi
call fcn.00453340
lea edi, [esi + 0x7c]
mov ecx, edi
mov dword [esp + 0x14], 0
call fcn.00453230
lea ecx, [esi + 0xac]
mov byte [esp + 0x14], 1
mov dword [esi], 0x47f9b4
mov dword [edi], 0x47f9ac
call fcn.004474e0
push fcn.00446e60
push fcn.004474e0
push 8
push 0x23c
lea eax, [esi + 0x2e8]
push eax
mov byte [esp + 0x28], 2
call fcn.0045bcf3
push fcn.0041c610
push fcn.0041c600
push 8
push 0x244
lea ecx, [esi + 0x168c]
push ecx
mov byte [esp + 0x28], 3
call fcn.0045bcf3
lea ecx, [esi + 0x28b0]
mov byte [esp + 0x14], 4
call fcn.0043a6e0
push 0x13
push 0x47f9d8
lea ecx, [esi + 0x14]
mov byte [esp + 0x1c], 5
call fcn.00403fa0
mov ecx, dword [esp + 0xc]
mov dword [esi + 0x30], 0x41af30
mov dword [esi + 0x34], 0x41b170
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0x10
ret

Function at 0x41bc70
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x47c813
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push esi
mov esi, ecx
push edi
mov dword [esp + 8], esi
call fcn.00439800
push fcn.00446e60
push fcn.004474e0
push 9
push 0x23c
lea eax, [esi + 0x45c]
xor edi, edi
push eax
mov dword [esp + 0x28], edi
mov dword [esi], 0x47fb48
call fcn.0045bcf3
mov eax, 1
push 0xb
push str.CLeafEffect
lea ecx, [esi + 0x14]
mov byte [esp + 0x1c], al
mov dword [esi + 0x458], eax
call fcn.00403fa0
mov ecx, dword [esp + 0xc]
mov eax, 0x41200000
mov dword [esi + 0x1a0], edi
mov dword [esi + 0x1a4], edi
mov dword [esi + 0x44c], edi
mov dword [esi + 0x454], edi
mov dword [esi + 0x80], edi
mov dword [esi + 0x84], eax
mov dword [esi + 0x88], eax
mov dword [esi + 0x8c], eax
mov dword [esi + 0x30], 0x41bb60
mov dword [esi + 0x1a8], 0xc0000000
mov dword [esi + 0x450], 0x20
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0x10
ret
Function at 0x41d0c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x184
mov eax, dword [0x48b114]
mov edx, dword [ebp + 0xc]
mov dword [esp + 0x180], eax
mov eax, dword [0x4938c0]
mov eax, dword [eax + 0xd7c]
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0x24
push esi
push edi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
jle 0x41d12b
cmp edx, 0x20d
jle 0x41d12b
cmp ebx, 0xd4
jge 0x41d12b
cmp edx, 0x225
jge 0x41d12b
mov eax, 1
mov ecx, dword [esp + 0x18c]
call fcn.0045a5f9
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
cmp ebx, 0x19c
jle 0x41d15f
cmp edx, 0x28
jle 0x41d15f
cmp ebx, 0x1c0
jge 0x41d15f
cmp edx, 0x36
jge 0x41d15f
mov eax, 2
mov ecx, dword [esp + 0x18c]
call fcn.0045a5f9
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
cmp ebx, 0x2c0
jle 0x41d193
cmp edx, 0x28
jle 0x41d193
cmp ebx, 0x2e4
jge 0x41d193
cmp edx, 0x36
jge 0x41d193
mov eax, 3
mov ecx, dword [esp + 0x18c]
call fcn.0045a5f9
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov eax, 0x197
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], 0x6f
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], 0xa1
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], 0xd3
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], 0x105
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], 0x137
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], 0x169
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], 0x19b
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], 0x1cd
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], 0x1ff
mov dword [esp + 0x14], 4
mov dword [esp + 0x18], 5
mov dword [esp + 0x1c], 6
mov dword [esp + 0x20], 7
mov dword [esp + 0x24], 8
mov dword [esp + 0x28], 9
mov dword [esp + 0x2c], 0xa
mov dword [esp + 0x30], 0xb
mov dword [esp + 0x34], 0xc
xor esi, esi
mov edi, edi
mov ecx, dword [esp + esi*8 + 0x38]
cmp ebx, ecx
jle 0x41d2aa
mov eax, dword [esp + esi*8 + 0x3c]
cmp edx, eax
jle 0x41d2aa
add ecx, 0x159
cmp ebx, ecx
jge 0x41d2aa
add eax, 0x2d
cmp edx, eax
jge 0x41d2aa
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0xe28]
lea edx, [esi + eax*8]
add edx, eax
xor eax, eax
mov ecx, 0x41
lea edi, [esp + 0x80]
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x80]
push eax
push edx
call fcn.00432850
cmp eax, 1
je 0x41d2c7
mov edx, dword [ebp + 0xc]
inc esi
cmp esi, 9
jl 0x41d250
xor eax, eax
mov ecx, dword [esp + 0x18c]
call fcn.0045a5f9
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [esp + 0x18c]
mov eax, dword [esp + esi*4 + 0x14]
call fcn.0045a5f9
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x41e300
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x47c97a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push esi
mov esi, ecx
push edi
mov dword [esp + 8], esi
call fcn.00453340
lea edi, [esi + 0x7c]
mov ecx, edi
mov dword [esp + 0x14], 0
call fcn.00453230
lea ecx, [esi + 0xac]
mov byte [esp + 0x14], 1
call fcn.004217b0
push fcn.00446e60
push fcn.004474e0
push 6
push 0x23c
lea eax, [esi + 0xb4]
push eax
mov byte [esp + 0x28], 2
mov dword [esi], 0x47fca0
mov dword [edi], 0x47fc98
call fcn.0045bcf3
lea ecx, [esi + 0xe38]
mov byte [esp + 0x14], 3
call fcn.0043a6e0
push 0x13
push str.CModeBgm::EventProc
lea ecx, [esi + 0x14]
mov byte [esp + 0x1c], 4
call fcn.00403fa0
mov ecx, dword [esp + 0xc]
mov dword [esi + 0x34], 0x41db20
mov dword [esi + 0x30], fcn.0041b530
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0x10
ret
Function at 0x41e470
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x190
mov eax, dword [0x48b114]
mov dword [esp + 0x18c], eax
mov eax, dword [0x4938c0]
mov eax, dword [eax + 0xd7c]
mov dword [esp], ecx
mov ecx, dword [ebp + 8]
cmp ecx, 0x24
push esi
mov dword [esp + 8], eax
mov eax, dword [ebp + 0xc]
push edi
jle 0x41e4d6
cmp eax, 0x20d
jle 0x41e4d6
cmp ecx, 0xd4
jge 0x41e4d6
cmp eax, 0x225
jge 0x41e4d6
mov eax, 1
mov ecx, dword [esp + 0x194]
call fcn.0045a5f9
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
cmp ecx, 0x19c
jle 0x41e509
cmp eax, 0x28
jle 0x41e509
cmp ecx, 0x1c0
jge 0x41e509
cmp eax, 0x36
jge 0x41e509
mov eax, 2
mov ecx, dword [esp + 0x194]
call fcn.0045a5f9
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
cmp ecx, 0x2c0
jle 0x41e53c
cmp eax, 0x28
jle 0x41e53c
cmp ecx, 0x2e4
jge 0x41e53c
cmp eax, 0x36
jge 0x41e53c
mov eax, 3
mov ecx, dword [esp + 0x194]
call fcn.0045a5f9
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
mov eax, 0x1a0
mov esi, 0x112
mov dword [esp + 0x38], eax
mov dword [esp + 0x40], eax
mov edi, 0xae
mov dword [esp + 0x48], eax
mov dword [esp + 0x50], eax
mov edx, 0x176
mov dword [esp + 0x58], eax
mov eax, 0x268
mov ecx, 0x1da
mov dword [esp + 0x4c], esi
mov dword [esp + 0x74], esi
mov dword [esp + 0x3c], 0x4a
mov dword [esp + 0x44], edi
mov dword [esp + 0x54], edx
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], 0x4a
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], edi
mov dword [esp + 0x70], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], edx
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], ecx
mov dword [esp + 0x10], 4
mov dword [esp + 0x14], 5
mov dword [esp + 0x18], 6
mov dword [esp + 0x1c], 7
mov dword [esp + 0x20], 8
mov dword [esp + 0x24], 9
mov dword [esp + 0x28], 0xa
mov dword [esp + 0x2c], 0xb
mov dword [esp + 0x30], 0xc
mov dword [esp + 0x34], 0xd
xor esi, esi
lea ebx, [ebx]
mov ecx, dword [esp + esi*8 + 0x38]
mov edi, dword [ebp + 8]
cmp edi, ecx
jle 0x41e686
mov eax, dword [esp + esi*8 + 0x3c]
mov edx, dword [ebp + 0xc]
cmp edx, eax
jle 0x41e686
add ecx, 0x7e
cmp edi, ecx
jge 0x41e686
add eax, 0x60
cmp edx, eax
jge 0x41e686
mov ecx, dword [esp + 8]
mov eax, dword [ecx + 0xe28]
lea edx, [eax + eax*4]
xor eax, eax
mov ecx, 0x41
lea edi, [esp + 0x88]
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0xc]
lea eax, [esp + 0x88]
lea edx, [esi + edx*2]
push eax
push edx
call fcn.00433090
cmp eax, 1
jne 0x41e686
push 5
lea ecx, [esp + 0x8c]
push str.noflg
push ecx
call fcn.0045c12a
add esp, 0xc
test eax, eax
jne 0x41e6a2
inc esi
cmp esi, 0xa
jl 0x41e610
xor eax, eax
mov ecx, dword [esp + 0x194]
call fcn.0045a5f9
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [esp + 0x194]
mov eax, dword [esp + esi*4 + 0x10]
call fcn.0045a5f9
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
Function at 0x41f930
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x47ca4c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push esi
mov esi, ecx
push edi
mov dword [esp + 8], esi
call fcn.00453340
lea edi, [esi + 0x7c]
mov ecx, edi
mov dword [esp + 0x14], 0
call fcn.00453230
lea ecx, [esi + 0xac]
mov byte [esp + 0x14], 1
call fcn.004217b0
push fcn.00446e60
push fcn.004474e0
push 6
push 0x23c
lea eax, [esi + 0xb4]
push eax
mov byte [esp + 0x28], 2
mov dword [esi], 0x47fd54
mov dword [edi], 0x47fd4c
call fcn.0045bcf3
push 0x12
push str.CModeCG::EventProc
lea ecx, [esi + 0x14]
mov byte [esp + 0x1c], 3
call fcn.00403fa0
mov ecx, dword [esp + 0xc]
mov dword [esi + 0x34], 0x41ede0
mov dword [esi + 0x30], fcn.0041b530
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0x10
ret
Function at 0x420b20
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x47cb1c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push esi
mov esi, ecx
push edi
mov dword [esp + 8], esi
call fcn.00453340
lea edi, [esi + 0x7c]
mov ecx, edi
mov dword [esp + 0x14], 0
call fcn.00453230
lea ecx, [esi + 0xac]
mov byte [esp + 0x14], 1
call fcn.004217b0
push fcn.00446e60
push fcn.004474e0
push 6
push 0x23c
lea eax, [esi + 0xb4]
push eax
mov byte [esp + 0x28], 2
mov dword [esi], 0x47fdcc
mov dword [edi], 0x47fdc4
call fcn.0045bcf3
push 0x15
push str.CModeScene::EventProc
lea ecx, [esi + 0x14]
mov byte [esp + 0x1c], 3
call fcn.00403fa0
mov ecx, dword [esp + 0xc]
mov dword [esi + 0x34], 0x4202d0
mov dword [esi + 0x30], fcn.0041b530
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0x10
ret

Function at 0x421080
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x47cbcf
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push esi
mov esi, ecx
push edi
mov dword [esp + 8], esi
call fcn.00453340
lea edi, [esi + 0x7c]
mov ecx, edi
mov dword [esp + 0x14], 0
call fcn.00453230
lea ecx, [esi + 0xac]
mov byte [esp + 0x14], 1
call fcn.004217b0
lea ecx, [esi + 0xc0]
mov byte [esp + 0x14], 2
mov dword [esi], 0x47fe48
mov dword [edi], 0x47fe40
call fcn.00406860
lea ecx, [esi + 0x240]
mov byte [esp + 0x14], 3
call fcn.00407130
mov ecx, dword [esp + 0xc]
mov dword [esi + 0xbc], 1
mov dword [esi + 0x30], 0x420d70
mov dword [esi + 0xb8], 0
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0x10
ret

Function at 0x4211c0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x47cc0f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
push esi
mov esi, ecx
push edi
lea edi, [esi + 0x7c]
mov dword [esp + 0xc], esi
mov dword [esi], 0x47fee0
mov dword [edi], 0x47fed8
lea ecx, [esi + 0xac]
mov dword [esp + 0x18], 1
mov dword [esi + 0x30], 0
call fcn.0041b530
mov ecx, edi
mov byte [esp + 0x18], 0
call fcn.004531e0
mov ecx, esi
mov dword [esp + 0x18], 0xffffffff
call fcn.004532f0
mov ecx, dword [esp + 0x10]
pop edi
pop esi
mov dword fs:[0], ecx
add esp, 0x14
ret

Function at 0x4211d8
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x47cc0f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
push esi
mov esi, ecx
push edi
lea edi, [esi + 0x7c]
mov dword [esp + 0xc], esi
mov dword [esi], 0x47fee0
mov dword [edi], 0x47fed8
lea ecx, [esi + 0xac]
mov dword [esp + 0x18], 1
mov dword [esi + 0x30], 0
call fcn.0041b530
mov ecx, edi
mov byte [esp + 0x18], 0
call fcn.004531e0
mov ecx, esi
mov dword [esp + 0x18], 0xffffffff
call fcn.004532f0
mov ecx, dword [esp + 0x10]
pop edi
pop esi
mov dword fs:[0], ecx
add esp, 0x14
ret
Function at 0x421720
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x47cc33
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push esi
mov esi, ecx
push edi
mov dword [esp + 8], esi
call fcn.00453340
lea edi, [esi + 0x7c]
mov ecx, edi
mov dword [esp + 0x14], 0
call fcn.00453230
lea ecx, [esi + 0xac]
mov byte [esp + 0x14], 1
call fcn.004217b0
mov ecx, dword [esp + 0xc]
mov dword [edi], 0x47fed8
mov dword [esi], 0x47fee0
mov dword [esi + 0x30], 0x421470
mov dword [esi + 0xb4], 0
mov dword [esi + 0xe0], 0
mov dword [esi + 0xb8], 1
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0x10
ret

Function at 0x421d30
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x47ccf0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push esi
mov esi, ecx
push edi
mov dword [esp + 8], esi
call fcn.00453340
xor edi, edi
lea ecx, [esi + 0x9c]
mov dword [esp + 0x14], edi
mov dword [esi], 0x47ff34
call fcn.00454760
lea ecx, [esi + 0xac]
mov byte [esp + 0x14], 1
call fcn.00454760
lea ecx, [esi + 0xbc]
mov byte [esp + 0x14], 2
call fcn.00454760
lea ecx, [esi + 0xcc]
mov byte [esp + 0x14], 3
call fcn.00454760
push 4
push 0x47ff48
lea ecx, [esi + 0x14]
mov byte [esp + 0x1c], 4
call fcn.00403fa0
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x34]
mov dword [esi + 0x88], eax
mov eax, dword [esp + 0x30]
mov dword [esi + 0x7c], ecx
mov ecx, dword [esp + 0x20]
mov dword [esi + 0x80], eax
mov dword [esi + 0x84], edx
mov edx, dword [esp + 0x1c]
mov dword [esi + 0x30], 0x4219c0
mov dword [esi + 0x34], 0x421bd0
mov dword [esi + 0x98], edi
mov dword [esi + 0x94], edi
mov dword [esi + 0x90], edi
fld dword [eax]
fmul dword [0x47f348]
mov eax, dword [esp + 0x24]
push eax
push ecx
fchs
push edx
fstp dword [esi + 0x8c]
mov ecx, esi
call fcn.00421c80
mov ecx, dword [esp + 0xc]
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0x10
ret 0x1c

Function at 0x421e30
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x47cd74
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push esi
mov esi, ecx
push edi
mov dword [esp + 8], esi
mov dword [esi], 0x47ff70
lea edi, [esi + 0x88]
mov ecx, edi
mov dword [esp + 0x14], 7
mov dword [esi + 0x30], 0
call fcn.0044e0e0
push fcn.004546f0
push 8
push 0x10
lea eax, [esi + 0x22c]
push eax
mov byte [esp + 0x24], 6
call fcn.0045bc93
lea ecx, [esi + 0x21c]
mov byte [esp + 0x14], 5
call fcn.004546f0
lea ecx, [esi + 0x20c]
mov byte [esp + 0x14], 4
call fcn.004546f0
lea ecx, [esi + 0x1a4]
mov byte [esp + 0x14], 3
call fcn.004548a0
lea ecx, [esi + 0x194]
mov byte [esp + 0x14], 2
call fcn.004546f0
lea ecx, [esi + 0x184]
mov byte [esp + 0x14], 1
call fcn.004546f0
mov ecx, edi
mov byte [esp + 0x14], 0
call fcn.0044dff0
mov ecx, esi
mov dword [esp + 0x14], 0xffffffff
call fcn.004532f0
mov ecx, dword [esp + 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
add esp, 0x10
ret
Function at 0x421e46
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x47cd74
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push esi
mov esi, ecx
push edi
mov dword [esp + 8], esi
mov dword [esi], 0x47ff70
lea edi, [esi + 0x88]
mov ecx, edi
mov dword [esp + 0x14], 7
mov dword [esi + 0x30], 0
call fcn.0044e0e0
push fcn.004546f0
push 8
push 0x10
lea eax, [esi + 0x22c]
push eax
mov byte [esp + 0x24], 6
call fcn.0045bc93
lea ecx, [esi + 0x21c]
mov byte [esp + 0x14], 5
call fcn.004546f0
lea ecx, [esi + 0x20c]
mov byte [esp + 0x14], 4
call fcn.004546f0
lea ecx, [esi + 0x1a4]
mov byte [esp + 0x14], 3
call fcn.004548a0
lea ecx, [esi + 0x194]
mov byte [esp + 0x14], 2
call fcn.004546f0
lea ecx, [esi + 0x184]
mov byte [esp + 0x14], 1
call fcn.004546f0
mov ecx, edi
mov byte [esp + 0x14], 0
call fcn.0044dff0
mov ecx, esi
mov dword [esp + 0x14], 0xffffffff
call fcn.004532f0
mov ecx, dword [esp + 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
add esp, 0x10
ret

Function at 0x422440
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x47cd74
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push esi
mov esi, ecx
push edi
mov dword [esp + 8], esi
call fcn.00453340
xor edi, edi
lea ecx, [esi + 0x88]
mov dword [esp + 0x14], edi
mov dword [esi], 0x47ff70
call fcn.0044e250
lea ecx, [esi + 0x184]
mov byte [esp + 0x14], 1
call fcn.00454760
lea ecx, [esi + 0x194]
mov byte [esp + 0x14], 2
call fcn.00454760
lea ecx, [esi + 0x1a4]
mov byte [esp + 0x14], 3
call fcn.00454c70
lea ecx, [esi + 0x20c]
mov byte [esp + 0x14], 4
call fcn.00454760
lea ecx, [esi + 0x21c]
mov byte [esp + 0x14], 5
call fcn.00454760
push fcn.004546f0
push fcn.00454760
push 8
push 0x10
lea eax, [esi + 0x22c]
push eax
mov byte [esp + 0x28], 6
call fcn.0045bcf3
push 0xb
push 0x47ff80
lea ecx, [esi + 0x14]
mov byte [esp + 0x1c], 7
mov dword [esi + 0x7c], 1
mov dword [esi + 0x1f4], edi
call fcn.00403fa0
mov ecx, dword [esp + 0xc]
mov eax, 0x41200000
mov dword [esi + 0x188], edi
mov dword [esi + 0x18c], edi
mov dword [esi + 0x1f8], edi
mov dword [esi + 0x84], edi
mov dword [esi + 0x200], eax
mov dword [esi + 0x204], eax
mov dword [esi + 0x208], eax
mov dword [esi + 0x30], 0x422330
mov dword [esi + 0x190], 0xc0000000
mov dword [esi + 0x1fc], 0x40
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0x10
ret