joyce8/EMBER2024-capa huggingface dataset:
Function at 0x40b89f
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x214
mov eax, dword [0x4a4cf0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
xor ebx, ebx
cmp byte [0x4a6428], bl
je 0x40ba58
mov ecx, dword [0x4a65d8]
dec ecx
mov al, 0x7e
cmp ecx, 4
ja case.default.0x40b890
jmp dword [ecx*4 + 0x40ba68]
mov al, 0x7f
jmp case.default.0x40b890
mov al, 0x80
jmp case.default.0x40b890
mov al, 0x81
jmp case.default.0x40b890
mov al, 0x82
jmp case.default.0x40b890
mov al, 0x83
mov ecx, dword [ebp + 8]
cmp ecx, 0x74
jne 0x40b8c1
cmp byte [0x4a92f6], bl
je 0x40b8c1
cmp byte [0x49b051], bl
je 0x40b8cc
movzx eax, al
cmp ecx, eax
jne 0x40ba4d
mov eax, dword [0x4a93e8]
mov ecx, 1
add eax, ecx
mov dword [0x4a93e8], eax
cmp eax, 0x14
jle 0x40b8e8
mov dword [0x4a93e8], ebx
fld qword [0x48c210]
push esi
push edi
mov dword [0x4a93dc], ebx
mov dword [0x4a93d8], ebx
mov edi, ecx
mov esi, 0x4a65e0
mov dword [ebp - 0x20c], 0x14
mov eax, dword [esi - 4]
sub eax, ecx
je 0x40b9b2
sub eax, ecx
jne 0x40ba0c
cmp edi, dword [0x4a93e8]
jne 0x40ba0c
cmp dword [esi + 4], ebx
jle 0x40ba0c
fstp st(0)
mov dword [0x4a93ec], ebx
mov dword [0x4a93e0], ebx
call fcn.0045c5cc
mov edx, dword [esi + 4]
mov dword [ebp - 0x208], eax
fild dword [ebp - 0x208]
fnstcw word [ebp - 0x206]
movzx eax, word [ebp - 0x206]
fmul qword [0x48c208]
or eax, 0xc00
mov dword [ebp - 0x210], eax
mov eax, dword [esi]
fmul qword [0x48bd20]
mov dword [0x4a93d8], eax
fldcw word [ebp - 0x210]
fistp qword [ebp - 0x214]
mov ecx, dword [ebp - 0x214]
add ecx, 5
dec edx
fldcw word [ebp - 0x206]
mov dword [0x4a93d4], ecx
mov dword [0x4a93dc], edx
fld qword [0x48c210]
jmp 0x40ba0c
cmp edi, dword [0x4a93e8]
jne 0x40ba0c
mov eax, dword [esi]
mov dword [ebp - 0x208], eax
cmp eax, ebx
jle 0x40ba0c
mov edx, dword [0x4a9a2c]
fild dword [ebp - 0x208]
mov dword [0x4a93d4], ebx
mov dword [0x4a93e0], ebx
mov dword [0x4a93dc], ebx
mov dword [0x4a93d8], ebx
cmp dword [edx + 0xa4], ecx
jne 0x40b9fa
fidiv dword [0x4a93fc]
jmp 0x40ba00
fidiv dword [0x4a3b64]
fmul st(1)
call fcn.0045c160
mov dword [0x4a93ec], eax
mov ecx, 1
add edi, ecx
add esi, 0xc
sub dword [ebp - 0x20c], ecx
jne 0x40b90d
mov eax, dword [0x4a93e8]
fstp st(0)
push eax
lea ecx, [ebp - 0x204]
push str.g_nCallBtnCounter:_d_n
push ecx
call fcn.00409630
add esp, 0xc
lea edx, [ebp - 0x204]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
pop edi
pop esi
call dword [sym.imp.WINMM.dll_timeGetTime]
mov dword [0x4a93d0], eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop ebx
call fcn.0045bfe1
mov esp, ebp
pop ebp
ret
Function at 0x40b8a3
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x214
mov eax, dword [0x4a4cf0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
xor ebx, ebx
cmp byte [0x4a6428], bl
je 0x40ba58
mov ecx, dword [0x4a65d8]
dec ecx
mov al, 0x7e
cmp ecx, 4
ja case.default.0x40b890
jmp dword [ecx*4 + 0x40ba68]
mov al, 0x7f
jmp case.default.0x40b890
mov al, 0x80
jmp case.default.0x40b890
mov al, 0x81
jmp case.default.0x40b890
mov al, 0x82
jmp case.default.0x40b890
mov al, 0x83
mov ecx, dword [ebp + 8]
cmp ecx, 0x74
jne 0x40b8c1
cmp byte [0x4a92f6], bl
je 0x40b8c1
cmp byte [0x49b051], bl
je 0x40b8cc
movzx eax, al
cmp ecx, eax
jne 0x40ba4d
mov eax, dword [0x4a93e8]
mov ecx, 1
add eax, ecx
mov dword [0x4a93e8], eax
cmp eax, 0x14
jle 0x40b8e8
mov dword [0x4a93e8], ebx
fld qword [0x48c210]
push esi
push edi
mov dword [0x4a93dc], ebx
mov dword [0x4a93d8], ebx
mov edi, ecx
mov esi, 0x4a65e0
mov dword [ebp - 0x20c], 0x14
mov eax, dword [esi - 4]
sub eax, ecx
je 0x40b9b2
sub eax, ecx
jne 0x40ba0c
cmp edi, dword [0x4a93e8]
jne 0x40ba0c
cmp dword [esi + 4], ebx
jle 0x40ba0c
fstp st(0)
mov dword [0x4a93ec], ebx
mov dword [0x4a93e0], ebx
call fcn.0045c5cc
mov edx, dword [esi + 4]
mov dword [ebp - 0x208], eax
fild dword [ebp - 0x208]
fnstcw word [ebp - 0x206]
movzx eax, word [ebp - 0x206]
fmul qword [0x48c208]
or eax, 0xc00
mov dword [ebp - 0x210], eax
mov eax, dword [esi]
fmul qword [0x48bd20]
mov dword [0x4a93d8], eax
fldcw word [ebp - 0x210]
fistp qword [ebp - 0x214]
mov ecx, dword [ebp - 0x214]
add ecx, 5
dec edx
fldcw word [ebp - 0x206]
mov dword [0x4a93d4], ecx
mov dword [0x4a93dc], edx
fld qword [0x48c210]
jmp 0x40ba0c
cmp edi, dword [0x4a93e8]
jne 0x40ba0c
mov eax, dword [esi]
mov dword [ebp - 0x208], eax
cmp eax, ebx
jle 0x40ba0c
mov edx, dword [0x4a9a2c]
fild dword [ebp - 0x208]
mov dword [0x4a93d4], ebx
mov dword [0x4a93e0], ebx
mov dword [0x4a93dc], ebx
mov dword [0x4a93d8], ebx
cmp dword [edx + 0xa4], ecx
jne 0x40b9fa
fidiv dword [0x4a93fc]
jmp 0x40ba00
fidiv dword [0x4a3b64]
fmul st(1)
call fcn.0045c160
mov dword [0x4a93ec], eax
mov ecx, 1
add edi, ecx
add esi, 0xc
sub dword [ebp - 0x20c], ecx
jne 0x40b90d
mov eax, dword [0x4a93e8]
fstp st(0)
push eax
lea ecx, [ebp - 0x204]
push str.g_nCallBtnCounter:_d_n
push ecx
call fcn.00409630
add esp, 0xc
lea edx, [ebp - 0x204]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
pop edi
pop esi
call dword [sym.imp.WINMM.dll_timeGetTime]
mov dword [0x4a93d0], eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop ebx
call fcn.0045bfe1
mov esp, ebp
pop ebp
ret
Function at 0x40b8a7
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x214
mov eax, dword [0x4a4cf0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
xor ebx, ebx
cmp byte [0x4a6428], bl
je 0x40ba58
mov ecx, dword [0x4a65d8]
dec ecx
mov al, 0x7e
cmp ecx, 4
ja case.default.0x40b890
jmp dword [ecx*4 + 0x40ba68]
mov al, 0x7f
jmp case.default.0x40b890
mov al, 0x80
jmp case.default.0x40b890
mov al, 0x81
jmp case.default.0x40b890
mov al, 0x82
jmp case.default.0x40b890
mov al, 0x83
mov ecx, dword [ebp + 8]
cmp ecx, 0x74
jne 0x40b8c1
cmp byte [0x4a92f6], bl
je 0x40b8c1
cmp byte [0x49b051], bl
je 0x40b8cc
movzx eax, al
cmp ecx, eax
jne 0x40ba4d
mov eax, dword [0x4a93e8]
mov ecx, 1
add eax, ecx
mov dword [0x4a93e8], eax
cmp eax, 0x14
jle 0x40b8e8
mov dword [0x4a93e8], ebx
fld qword [0x48c210]
push esi
push edi
mov dword [0x4a93dc], ebx
mov dword [0x4a93d8], ebx
mov edi, ecx
mov esi, 0x4a65e0
mov dword [ebp - 0x20c], 0x14
mov eax, dword [esi - 4]
sub eax, ecx
je 0x40b9b2
sub eax, ecx
jne 0x40ba0c
cmp edi, dword [0x4a93e8]
jne 0x40ba0c
cmp dword [esi + 4], ebx
jle 0x40ba0c
fstp st(0)
mov dword [0x4a93ec], ebx
mov dword [0x4a93e0], ebx
call fcn.0045c5cc
mov edx, dword [esi + 4]
mov dword [ebp - 0x208], eax
fild dword [ebp - 0x208]
fnstcw word [ebp - 0x206]
movzx eax, word [ebp - 0x206]
fmul qword [0x48c208]
or eax, 0xc00
mov dword [ebp - 0x210], eax
mov eax, dword [esi]
fmul qword [0x48bd20]
mov dword [0x4a93d8], eax
fldcw word [ebp - 0x210]
fistp qword [ebp - 0x214]
mov ecx, dword [ebp - 0x214]
add ecx, 5
dec edx
fldcw word [ebp - 0x206]
mov dword [0x4a93d4], ecx
mov dword [0x4a93dc], edx
fld qword [0x48c210]
jmp 0x40ba0c
cmp edi, dword [0x4a93e8]
jne 0x40ba0c
mov eax, dword [esi]
mov dword [ebp - 0x208], eax
cmp eax, ebx
jle 0x40ba0c
mov edx, dword [0x4a9a2c]
fild dword [ebp - 0x208]
mov dword [0x4a93d4], ebx
mov dword [0x4a93e0], ebx
mov dword [0x4a93dc], ebx
mov dword [0x4a93d8], ebx
cmp dword [edx + 0xa4], ecx
jne 0x40b9fa
fidiv dword [0x4a93fc]
jmp 0x40ba00
fidiv dword [0x4a3b64]
fmul st(1)
call fcn.0045c160
mov dword [0x4a93ec], eax
mov ecx, 1
add edi, ecx
add esi, 0xc
sub dword [ebp - 0x20c], ecx
jne 0x40b90d
mov eax, dword [0x4a93e8]
fstp st(0)
push eax
lea ecx, [ebp - 0x204]
push str.g_nCallBtnCounter:_d_n
push ecx
call fcn.00409630
add esp, 0xc
lea edx, [ebp - 0x204]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
pop edi
pop esi
call dword [sym.imp.WINMM.dll_timeGetTime]
mov dword [0x4a93d0], eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop ebx
call fcn.0045bfe1
mov esp, ebp
pop ebp
ret
Function at 0x41f680
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x210
mov eax, dword [0x4a4cf0]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x4a91d9], 0
push esi
je 0x41f6a4
mov byte [0x4a91d9], 0
mov ecx, dword [0x4a3af4]
cmp dword [0x4a3af0], ecx
jg 0x41f7b3
mov eax, dword [0x4a91f8]
inc eax
mov dword [0x4a91f8], eax
cmp eax, 1
jge 0x41f72b
cmp ecx, 0x64
jge 0x41f72b
cmp byte [0x4a91a8], 0
jne 0x41f70b
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x20c], esp
push str.Witch_In
mov byte [0x4a91a8], 1
call fcn.00414af0
mov ecx, dword [0x4a63f8]
call fcn.004018e0
push 0
push 1
push 0x3e
call fcn.004095f0
add esp, 0xc
lea eax, [ebp - 0x204]
push str.bong_in_start_n
push eax
call fcn.00409630
add esp, 8
lea ecx, [ebp - 0x204]
push ecx
jmp 0x41f821
call fcn.0045c5cc
mov edx, dword [0x4a6948]
mov dword [ebp - 0x208], eax
fild dword [ebp - 0x208]
push 0x4a4
fnstcw word [ebp - 0x206]
push edx
movzx eax, word [ebp - 0x206]
fmul qword [0x48c978]
or eax, 0xc00
mov dword [ebp - 0x20c], eax
fmul qword [0x48bd20]
fldcw word [ebp - 0x20c]
fistp qword [ebp - 0x210]
mov esi, dword [ebp - 0x210]
add esi, 0xa
fldcw word [ebp - 0x206]
imul esi, esi, 0x64
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [0x4a6948]
push 0
push esi
push 0x4a4
push eax
call dword [sym.imp.USER32.dll_SetTimer]
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0045bfe1
mov esp, ebp
pop ebp
ret
cmp byte [0x4a91a8], 0
jne 0x41f806
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x20c], esp
mov byte [0x4a91a8], 1
push 8
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push str.Witch_In
mov byte [ecx], 0
call fcn.004141d0
mov ecx, dword [0x4a63f8]
call fcn.004018e0
push 0
push 1
push 0x3e
call fcn.004095f0
add esp, 0xc
lea ecx, [ebp - 0x204]
push str.Witch_In_start_n
push ecx
call fcn.00409630
add esp, 8
lea edx, [ebp - 0x204]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.0045bfe1
mov esp, ebp
pop ebp
ret
Function at 0x4233d0
Capabilities:
Get common file path
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x408
mov eax, dword [0x4a4cf0]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x408], esp
push 7
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push str.Thunder
mov byte [ecx], 0
call fcn.004141d0
mov ecx, dword [0x4a63f8]
call fcn.00402760
lea eax, [ebp - 0x404]
push str.DatamoviesThunder.bik
push eax
call fcn.00409630
lea ecx, [ebp - 0x404]
push 0x48c130
push ecx
call fcn.0045cbc7
mov esi, eax
add esp, 0x10
test esi, esi
je 0x42346b
push 0
push 0x3a1be
push esi
call fcn.0045d25f
push esi
push 1
push 0x308
push 0x4a6400
call fcn.0045d432
push esi
call fcn.0045ca7a
add esp, 0x20
lea edx, [ebp - 0x104]
push edx
push 0x100
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x204]
push 0x48c8e0
push eax
call fcn.0045bff0
lea eax, [ebp - 0x204]
add esp, 8
mov esi, eax
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4234a0
lea edi, [ebp - 0x104]
sub eax, esi
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4234b0
fld1
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push ecx
lea ecx, [ebp - 0x104]
fst dword [esp]
push 1
sub esp, 0x10
fst dword [esp + 0xc]
fstp dword [esp + 8]
fldz
fst dword [esp + 4]
fstp dword [esp]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x408], esp
push 7
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push str.Thunder
mov byte [ecx], 0
call fcn.004141d0
mov ecx, dword [0x4a63f8]
call fcn.00402bd0
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.0045bfe1
mov esp, ebp
pop ebp
ret
Function at 0x423860
Capabilities:
Get common file path
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x408
mov eax, dword [0x4a4cf0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x408], esp
xor ebx, ebx
push 7
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
push str.Thunder
mov byte [ecx], bl
call fcn.004141d0
mov ecx, dword [0x4a63f8]
call fcn.00402760
lea eax, [ebp - 0x404]
push str.DatamoviesThunder.bik
push eax
call fcn.00409630
lea ecx, [ebp - 0x404]
push 0x48c09c
push ecx
call fcn.0045cbc7
mov esi, eax
add esp, 0x10
cmp esi, ebx
je 0x423961
push 2
push ebx
push esi
call fcn.0045d25f
push esi
call fcn.0045d170
add esp, 0x10
cmp eax, 0x399c8
jle 0x42394c
push ebx
push 0x3aaa0
push esi
call fcn.0045d25f
push esi
push 1
push 4
push 0x4a6740
call fcn.0045cfbf
mov eax, dword [0x4a6740]
inc eax
add esp, 0x1c
mov dword [0x4a6740], eax
cmp eax, ebx
jle 0x42394c
xor ecx, ecx
mov edx, 0x14
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0045b23e
mov ebx, eax
mov eax, dword [0x4a6740]
lea eax, [eax + eax*4]
push esi
add eax, eax
push 1
add eax, eax
push eax
push ebx
call fcn.0045cfbf
add esp, 0x14
push esi
call fcn.0045ca7a
lea ecx, [ebp - 0x404]
push ecx
call fcn.00408fa0
add esp, 8
lea edx, [ebp - 0x104]
push edx
push 0x100
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x204]
push 0x48c8e0
push eax
call fcn.0045bff0
lea eax, [ebp - 0x204]
add esp, 8
mov esi, eax
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x423990
lea edi, [ebp - 0x104]
sub eax, esi
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4239a0
fld1
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push ecx
lea ecx, [ebp - 0x104]
fst dword [esp]
push 1
sub esp, 0x10
fst dword [esp + 0xc]
fstp dword [esp + 8]
fldz
fst dword [esp + 4]
fstp dword [esp]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x408], esp
push 7
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push str.Thunder
mov byte [ecx], 0
call fcn.004141d0
mov ecx, dword [0x4a63f8]
call fcn.00402bd0
test ebx, ebx
je 0x423a19
push ebx
call fcn.0045d4ac
add esp, 4
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0045bfe1
mov esp, ebp
pop ebp
ret
Function at 0x423a30
Capabilities:
Get common file path
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x418
mov eax, dword [0x4a4cf0]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx ecx, word [ebp - 0x414]
movzx edx, word [ebp - 0x40e]
mov ax, word [ebp - 0x40c]
mov word [0x4a6378], cx
movzx ecx, word [ebp - 0x40a]
mov word [0x4a637a], dx
movzx edx, word [ebp - 0x408]
sub esp, 0x1c
mov word [0x4a637c], ax
mov al, byte [0x4a9204]
mov word [0x4a637e], cx
mov ecx, esp
mov dword [ebp - 0x418], esp
mov word [0x4a6380], dx
mov byte [0x4a6383], al
push 7
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push str.Thunder
mov byte [ecx], 0
call fcn.004141d0
mov ecx, dword [0x4a63f8]
call fcn.00402760
lea ecx, [ebp - 0x404]
push str.DatamoviesThunder.bik
push ecx
call fcn.00409630
lea edx, [ebp - 0x404]
push 0x48c130
push edx
call fcn.0045cbc7
mov esi, eax
add esp, 0x10
test esi, esi
je 0x423b94
push 2
push 0
push esi
call fcn.0045d25f
push esi
call fcn.0045d170
add esp, 0x10
cmp eax, 0x399c8
jle 0x423b7f
push 0
push 0x3aaa0
push esi
call fcn.0045d25f
push esi
push 1
push 4
push 0x4a6740
call fcn.0045d432
mov eax, dword [0x4a6740]
lea eax, [eax + eax*4]
push 0
lea ecx, [eax*4 + 0x3aaa4]
push ecx
push esi
call fcn.0045d25f
push esi
push 1
push 0x14
push 0x4a6378
call fcn.0045d432
mov eax, dword [0x4a6740]
inc eax
add esp, 0x38
mov dword [0x4a6740], eax
cmp eax, 0x2710
jle 0x423b7f
mov dword [0x4a6740], 0
push esi
call fcn.0045ca7a
lea edx, [ebp - 0x404]
push edx
call fcn.00408fa0
add esp, 8
lea eax, [ebp - 0x104]
push eax
push 0x100
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea ecx, [ebp - 0x204]
push 0x48c8e0
push ecx
call fcn.0045bff0
lea eax, [ebp - 0x204]
add esp, 8
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x423bc2
lea edi, [ebp - 0x104]
sub eax, esi
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x423bd2
fld1
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push ecx
lea edx, [ebp - 0x104]
fst dword [esp]
push 1
sub esp, 0x10
fst dword [esp + 0xc]
fstp dword [esp + 8]
fldz
fst dword [esp + 4]
fstp dword [esp]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x418], esp
push 7
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push str.Thunder
mov byte [ecx], 0
call fcn.004141d0
mov ecx, dword [0x4a63f8]
call fcn.00402bd0
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.0045bfe1
mov esp, ebp
pop ebp
ret
Function at 0x425e70
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x208
mov eax, dword [0x4a4cf0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, 1
sub dword [0x4a3d10], ebx
cmp byte [0x4a92f5], 0
push esi
jne 0x426036
cmp dword [0x4a3d10], 0
jg 0x426036
mov eax, dword [0x4a9290]
mov esi, dword [sym.imp.USER32.dll_KillTimer]
add eax, 0xffffffe8
cmp eax, 0x16
ja case.default.0x425ec8
movzx eax, byte [eax + 0x426054]
jmp dword [eax*4 + 0x426048]
mov ecx, dword [0x4a3b14]
cmp ecx, dword [0x4a9200]
jge case.default.0x425ec8
cmp dword [0x4a3af0], ebx
jne case.default.0x425ec8
call fcn.00423d50
mov byte [0x4a91ce], bl
mov dword [0x4a3b00], 0
mov edx, dword [0x4a6948]
push 0x4af
push edx
call esi
mov eax, dword [0x4a6948]
push 0
push 0xc8
push 0x4af
push eax
call dword [sym.imp.USER32.dll_SetTimer]
push ebx
push ebx
push 0x1b
call fcn.004095f0
add esp, 0xc
jmp case.default.0x425ec8
mov ecx, dword [0x4a3b14]
cmp ecx, dword [0x4a9200]
jge 0x425f5e
call fcn.00423d50
mov byte [0x4a6782], bl
mov dword [0x4a6868], 0
jmp 0x425f02
call fcn.0041e2b0
push str._ShakePreResultTH_:_EndWithGamewin_n
lea ecx, [ebp - 0x204]
push 0x100
push ecx
call fcn.0045c9ef
add esp, 0xc
lea edx, [ebp - 0x204]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea eax, [ebp - 0x204]
push eax
push ebx
jmp 0x426016
cmp dword [0x4a3af0], ebx
jle 0x425fe2
cmp byte [0x4a91b1], 0
jne 0x425fdb
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x208], esp
push str.Multi_before_eft
mov byte [0x4a91b1], bl
call fcn.00414af0
mov ecx, dword [0x4a63f8]
call fcn.004018e0
push 0
push ebx
push 0x26
call fcn.004095f0
add esp, 0xc
push str._ShakePreResultTH_:_Multi_before_eft_n
jmp 0x425fec
call fcn.0041e2b0
push str._ShakePreResultTH_:_EndWithGamewin_n
lea ecx, [ebp - 0x204]
push 0x100
push ecx
call fcn.0045c9ef
add esp, 0xc
lea edx, [ebp - 0x204]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea eax, [ebp - 0x204]
push eax
push 0
call fcn.00408ed0
add esp, 8
mov ecx, dword [0x4a6948]
push 0x49c
push ecx
mov dword [0x4a3d10], 0x64
call esi
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
pop ebx
call fcn.0045bfe1
mov esp, ebp
pop ebp
ret
Function at 0x425f39
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x208
mov eax, dword [0x4a4cf0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, 1
sub dword [0x4a3d10], ebx
cmp byte [0x4a92f5], 0
push esi
jne 0x426036
cmp dword [0x4a3d10], 0
jg 0x426036
mov eax, dword [0x4a9290]
mov esi, dword [sym.imp.USER32.dll_KillTimer]
add eax, 0xffffffe8
cmp eax, 0x16
ja case.default.0x425ec8
movzx eax, byte [eax + 0x426054]
jmp dword [eax*4 + 0x426048]
mov ecx, dword [0x4a3b14]
cmp ecx, dword [0x4a9200]
jge case.default.0x425ec8
cmp dword [0x4a3af0], ebx
jne case.default.0x425ec8
call fcn.00423d50
mov byte [0x4a91ce], bl
mov dword [0x4a3b00], 0
mov edx, dword [0x4a6948]
push 0x4af
push edx
call esi
mov eax, dword [0x4a6948]
push 0
push 0xc8
push 0x4af
push eax
call dword [sym.imp.USER32.dll_SetTimer]
push ebx
push ebx
push 0x1b
call fcn.004095f0
add esp, 0xc
jmp case.default.0x425ec8
mov ecx, dword [0x4a3b14]
cmp ecx, dword [0x4a9200]
jge 0x425f5e
call fcn.00423d50
mov byte [0x4a6782], bl
mov dword [0x4a6868], 0
jmp 0x425f02
call fcn.0041e2b0
push str._ShakePreResultTH_:_EndWithGamewin_n
lea ecx, [ebp - 0x204]
push 0x100
push ecx
call fcn.0045c9ef
add esp, 0xc
lea edx, [ebp - 0x204]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea eax, [ebp - 0x204]
push eax
push ebx
jmp 0x426016
cmp dword [0x4a3af0], ebx
jle 0x425fe2
cmp byte [0x4a91b1], 0
jne 0x425fdb
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x208], esp
push str.Multi_before_eft
mov byte [0x4a91b1], bl
call fcn.00414af0
mov ecx, dword [0x4a63f8]
call fcn.004018e0
push 0
push ebx
push 0x26
call fcn.004095f0
add esp, 0xc
push str._ShakePreResultTH_:_Multi_before_eft_n
jmp 0x425fec
call fcn.0041e2b0
push str._ShakePreResultTH_:_EndWithGamewin_n
lea ecx, [ebp - 0x204]
push 0x100
push ecx
call fcn.0045c9ef
add esp, 0xc
lea edx, [ebp - 0x204]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea eax, [ebp - 0x204]
push eax
push 0
call fcn.00408ed0
add esp, 8
mov ecx, dword [0x4a6948]
push 0x49c
push ecx
mov dword [0x4a3d10], 0x64
call esi
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
pop ebx
call fcn.0045bfe1
mov esp, ebp
pop ebp
ret
Function at 0x425f96
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x208
mov eax, dword [0x4a4cf0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, 1
sub dword [0x4a3d10], ebx
cmp byte [0x4a92f5], 0
push esi
jne 0x426036
cmp dword [0x4a3d10], 0
jg 0x426036
mov eax, dword [0x4a9290]
mov esi, dword [sym.imp.USER32.dll_KillTimer]
add eax, 0xffffffe8
cmp eax, 0x16
ja case.default.0x425ec8
movzx eax, byte [eax + 0x426054]
jmp dword [eax*4 + 0x426048]
mov ecx, dword [0x4a3b14]
cmp ecx, dword [0x4a9200]
jge case.default.0x425ec8
cmp dword [0x4a3af0], ebx
jne case.default.0x425ec8
call fcn.00423d50
mov byte [0x4a91ce], bl
mov dword [0x4a3b00], 0
mov edx, dword [0x4a6948]
push 0x4af
push edx
call esi
mov eax, dword [0x4a6948]
push 0
push 0xc8
push 0x4af
push eax
call dword [sym.imp.USER32.dll_SetTimer]
push ebx
push ebx
push 0x1b
call fcn.004095f0
add esp, 0xc
jmp case.default.0x425ec8
mov ecx, dword [0x4a3b14]
cmp ecx, dword [0x4a9200]
jge 0x425f5e
call fcn.00423d50
mov byte [0x4a6782], bl
mov dword [0x4a6868], 0
jmp 0x425f02
call fcn.0041e2b0
push str._ShakePreResultTH_:_EndWithGamewin_n
lea ecx, [ebp - 0x204]
push 0x100
push ecx
call fcn.0045c9ef
add esp, 0xc
lea edx, [ebp - 0x204]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea eax, [ebp - 0x204]
push eax
push ebx
jmp 0x426016
cmp dword [0x4a3af0], ebx
jle 0x425fe2
cmp byte [0x4a91b1], 0
jne 0x425fdb
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x208], esp
push str.Multi_before_eft
mov byte [0x4a91b1], bl
call fcn.00414af0
mov ecx, dword [0x4a63f8]
call fcn.004018e0
push 0
push ebx
push 0x26
call fcn.004095f0
add esp, 0xc
push str._ShakePreResultTH_:_Multi_before_eft_n
jmp 0x425fec
call fcn.0041e2b0
push str._ShakePreResultTH_:_EndWithGamewin_n
lea ecx, [ebp - 0x204]
push 0x100
push ecx
call fcn.0045c9ef
add esp, 0xc
lea edx, [ebp - 0x204]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea eax, [ebp - 0x204]
push eax
push 0
call fcn.00408ed0
add esp, 8
mov ecx, dword [0x4a6948]
push 0x49c
push ecx
mov dword [0x4a3d10], 0x64
call esi
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
pop ebx
call fcn.0045bfe1
mov esp, ebp
pop ebp
ret