joyce8/EMBER2024-capa huggingface dataset:
Function at 0x51ab70
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x55d87b
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x6397d4]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0xc], esi
lea ecx, [esi + 8]
xor edi, edi
mov dword [esi], vtable.CSkillObjectTargetList.0
mov dword [ecx], edi
mov dword [ecx + 4], edi
mov dword [ecx + 8], edi
mov dword [ecx + 0xc], edi
mov dword [ecx + 0x10], edi
mov dword [ecx + 0x14], edi
push 1
mov dword [esp + 0x1c], edi
call fcn.0044c4f0
mov eax, dword [esp + 0x20]
movzx ecx, word [eax + 0xb7]
mov word [esi + 0x30], cx
movzx edx, word [eax + 0xad]
mov word [esi + 0x32], dx
mov dword [esi + 0x2c], edi
movzx ecx, word [eax + 0x27]
mov word [esi + 0x34], cx
movzx edx, word [eax + 0x29]
mov word [esi + 0x36], dx
mov eax, esi
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x10
ret 4

Function at 0x51aff0
Capabilities:
Print debug messages

Disassembly:
push esi
mov esi, ecx
mov eax, dword [esi + 8]
test eax, eax
jne 0x51affc
pop esi
ret
mov ecx, dword [eax + 0x10]
test ecx, ecx
je 0x51b017
add ecx, 0xffffffff
mov dword [eax + 0x10], ecx
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
test eax, eax
jne 0x51b100
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x14]
test eax, eax
push ebx
push ebp
push edi
jne 0x51b091
mov edx, dword [esi + 0xc]
push edx
lea edi, [esi + 4]
push edi
call fcn.005159d0
mov eax, dword [edi]
mov ecx, dword [esi + 0x14]
mov edx, dword [esi + 0xc]
add dword [esi + 0x10], 1
mov ebp, dword [sym.imp.MSVCR80.dll_sprintf]
push ecx
push edx
mov dword [esi + 8], eax
mov eax, dword [esi + 0x10]
push eax
lea ebx, [esi + 0x18]
push ebx
lea edi, [esi + 0x9c]
push str.___s_alloc_Band
push edi
call ebp
add esp, 0x20
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0xc]
add dword [esi + 0x98], eax
mov ecx, dword [esi + 0x98]
lea edx, [ecx*4]
push edx
mov edx, dword [esi + 0x10]
push ecx
mov ecx, dword [esi + 0x14]
push ecx
push eax
push edx
push ebx
push str.__s__Increse_t_d_t_d_t_d_t_d_t_d_n
jmp 0x51b0e9
mov ecx, dword [esi + 0xc]
mov edx, dword [esi + 0x10]
mov ebp, dword [sym.imp.MSVCR80.dll_sprintf]
mov dword [esi + 8], eax
mov eax, dword [esi + 0x14]
push eax
push ecx
push edx
lea ebx, [esi + 0x18]
push ebx
lea edi, [esi + 0x9c]
push 0x5640ac
push edi
call ebp
add esp, 0x18
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0xc]
sub dword [esi + 0x98], eax
mov ecx, dword [esi + 0x98]
lea edx, [ecx*4]
push edx
mov edx, dword [esi + 0x10]
push ecx
mov ecx, dword [esi + 0x14]
push ecx
push eax
push edx
push ebx
push str.__s__Decrese_t_d_t_d_t_d_t_d_t_d_n
push edi
call ebp
push edi
call fcn.004135c0
add esp, 0x24
pop edi
pop ebp
pop ebx
mov ecx, esi
pop esi
jmp fcn.0051aff0
add dword [esi + 0x14], 1
pop esi
ret
Function at 0x51ee70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x648a5c]
sub esp, 0x10
call fcn.00488c70
cmp al, 9
je 0x4cdd56
mov eax, dword [0x63af14]
cmp dword [eax + 0x10], 0
jne 0x4cdd56
mov ecx, dword [0x648a5c]
push 9
push ecx
mov ecx, 0x62dbc8
call fcn.004b7410
mov edx, dword [0x648a50]
mov eax, dword [esp + 0x14]
push 0x10
lea ecx, [esp + 4]
push ecx
mov ecx, 0x636dc0
mov byte [esp + 9], 0
mov word [esp + 0xa], 0x219
mov word [esp + 0xc], 0x213
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], eax
call fcn.00508f50
add esp, 0x10
ret 4
sub esp, 0x14
push esi
mov esi, ecx
mov eax, dword [esi]
add eax, 0xffffffff
cmp eax, 6
ja case.default.0x51ee81
push edi
jmp dword [eax*4 + 0x51f074]
mov edi, dword [esi + 0x20]
movzx eax, word [edi + 0x1c]
mov ecx, dword [0x648a5c]
push eax
call fcn.00485860
movzx ecx, ax
xor eax, eax
test cx, cx
je 0x51eeb2
push ecx
call fcn.00402a90
mov ecx, eax
call fcn.0044eb30
push ebx
mov ebx, dword [esp + 0x24]
push eax
add esi, 8
push esi
push ebx
mov ecx, edi
call fcn.00514370
cmp eax, 1
jne 0x51eee1
push edi
push esi
push ebx
call fcn.00402a90
mov ecx, eax
call fcn.005177d0
pop ebx
pop edi
pop esi
add esp, 0x14
ret 4
xor eax, eax
cmp word [edi + 0x5b], 0x64
sete al
push eax
push esi
push ebx
call fcn.00402a90
mov ecx, eax
call fcn.00517c20
pop ebx
pop edi
pop esi
add esp, 0x14
ret 4
mov eax, dword [esi + 0x20]
mov ecx, dword [esp + 0x20]
push eax
add esi, 8
push esi
push ecx
call fcn.00402a90
mov ecx, eax
call fcn.005173f0
pop edi
pop esi
add esp, 0x14
ret 4
lea edi, [esi + 8]
mov ecx, edi
call fcn.0051e8e0
push eax
mov ecx, 0x648a58
call fcn.0048b300
mov esi, eax
test esi, esi
je 0x51eed9
cmp word [esi + 0x38c], 0x17
jne 0x51ef7b
mov ecx, esi
call fcn.00488c70
cmp al, 0x14
jne 0x51ef7b
push 0x396
mov ecx, 0x64aa48
call fcn.004bcff0
push eax
push 0x17
push 0x64aa48
call fcn.004be450
add esp, 0xc
pop edi
pop esi
add esp, 0x14
ret 4
mov edx, dword [0x648a5c]
mov byte [esp + 9], 0
mov word [esp + 0xa], 0x221
mov word [esp + 0xc], 0x1f4
mov eax, dword [edx + 0x135]
mov ecx, edi
mov dword [esp + 0x10], eax
call fcn.0051e8e0
mov edx, dword [0x648a5c]
mov dword [esp + 0x14], eax
movzx ecx, word [esi + 0x38a]
push 6
mov dword [esp + 0x1c], ecx
push edx
mov ecx, 0x62dbc8
call fcn.004b7410
push 0x14
lea eax, [esp + 0xc]
push eax
mov ecx, 0x636dc0
call fcn.00508f50
mov ecx, esi
call fcn.00488a20
pop edi
pop esi
add esp, 0x14
ret 4
lea ecx, [esi + 8]
call fcn.0051e8e0
pop edi
pop esi
add esp, 0x14
mov dword [esp + 4], eax
mov ecx, 0x64e2c8
jmp 0x4cdcf0
push 1
lea ecx, [esi + 8]
call fcn.0051e810
push eax
mov ecx, 0x62d0e4
call fcn.004a9f10
pop edi
pop esi
add esp, 0x14
ret 4
mov ecx, dword [esi + 0x20]
push ecx
mov ecx, 0x649790
call fcn.00497140
test eax, eax
je 0x51eed9
pop edi
pop esi
add esp, 0x14
mov dword [esp + 4], eax
mov ecx, dword [0x63aec8]
jmp fcn.00444c70
lea ecx, [esi + 8]
call fcn.0051e8e0
push eax
mov ecx, 0x648a58
call fcn.0048b300
test eax, eax
je 0x51eed9
mov ecx, eax
call fcn.004135c0
pop edi
pop esi
add esp, 0x14
ret 4
Function at 0x5239c0
Capabilities:
Print debug messages

Disassembly:
push esi
push edi
mov esi, ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
mov eax, dword [esi + 0x4c]
add eax, 0x493e0
cmp edi, eax
jbe 0x5239ed
mov ecx, esi
call fcn.00523970
push 0x571828
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov dword [esi + 0x4c], edi
pop edi
pop esi
ret

Function at 0x5239f0
Capabilities:
Print debug messages

Disassembly:
sub esp, 0x410
mov eax, dword [0x6397d4]
xor eax, esp
mov dword [esp + 0x40c], eax
mov eax, dword [esp + 0x418]
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x424]
push 0x400
mov esi, ecx
mov ecx, dword [esp + 0x430]
lea edx, [esp + 0x20]
push 0
push edx
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], ecx
call sub.MSVCR80.dll_memset
mov eax, edi
add esp, 0xc
mov dword [esp + 0x10], 0
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x523a48
sub eax, edx
mov edx, eax
xor eax, eax
xor ecx, ecx
test edx, edx
jle 0x523a6d
lea ecx, [ecx]
movsx ebx, byte [edi + ecx]
add ecx, 1
add eax, ebx
cmp ecx, edx
jl 0x523a60
xor edx, edx
div dword [esi + 0x48]
lea ebp, [esi + 0x20]
mov ebx, edx
xor edx, edx
mov eax, ebx
div dword [ebp + 4]
mov eax, dword [ebp + 8]
mov edx, dword [eax + edx*4]
test edx, edx
je 0x523a9f
cmp dword [edx], ebx
je 0x523a95
mov edx, dword [edx + 0xc]
test edx, edx
jne 0x523a88
jmp 0x523a9f
cmp dword [edx + 4], 0
jne 0x523b36
cmp dword [ebp], 0xcd
jb 0x523acf
push 0x33
mov ecx, esi
call fcn.00523910
lea ecx, [esp + 0x1c]
push str.____delete_from_Cache__n
push ecx
call dword [sym.imp.MSVCR80.dll_sprintf]
add esp, 8
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x18c]
push 0
push 0
push 0
push edi
push eax
call edx
test eax, eax
mov dword [esp + 0x10], eax
je 0x523b36
mov ecx, dword [esi]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x114]
push ecx
call eax
mov eax, dword [esi]
mov edx, dword [esp + 0x10]
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x10c]
call eax
mov ecx, esi
call fcn.005237b0
test eax, eax
je 0x523b20
mov ecx, dword [esp + 0x10]
mov dword [eax + 8], ecx
mov dword [eax + 4], ebx
push eax
lea ecx, [esi + 4]
call fcn.0054ea60
push ebx
lea edx, [esp + 0x14]
push edx
mov ecx, ebp
call fcn.00547bc0
mov ecx, dword [esp + 0x430]
mov edx, dword [esp + 0x14]
mov esi, dword [esi]
mov eax, dword [esi]
push ecx
mov ecx, dword [esp + 0x1c]
push edx
mov edx, dword [eax + 0x18c]
push ecx
push edi
push esi
call edx
mov ecx, dword [esp + 0x41c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0055160d
add esp, 0x410
ret 0x10
Function at 0x5277a0
Capabilities:
Print debug messages

Disassembly:
mov ecx, dword [ecx + 0x1f4]
test ecx, ecx
jne 0x5277af
xor eax, eax
ret 8
jmp 0x52d280
fld dword [0x571d48]
mov edx, dword [esp + 4]
fcom dword [edx]
sub esp, 8
fnstsw ax
test ah, 0x41
jnp 0x52d37e
fldz
fcom dword [edx]
fnstsw ax
test ah, 0x41
je 0x52d37c
fxch st(1)
fcomp dword [edx + 8]
fnstsw ax
test ah, 0x41
jnp 0x52d37e
fcomp dword [edx + 8]
fnstsw ax
test ah, 0x41
je 0x52d380
push esi
fnstcw word [esp + 0x10]
mov esi, dword [esp + 0x14]
fld dword [esi + 8]
fld qword [0x567d80]
movzx eax, word [esp + 0x10]
fdiv st(1), st(0)
or eax, 0xc00
mov dword [esp + 0x14], eax
fldcw word [esp + 0x14]
fxch st(1)
fistp qword [esp + 4]
mov eax, dword [esp + 4]
push eax
fldcw word [esp + 0x14]
fld dword [esi]
fdiv st(1)
fnstcw word [esp + 0x14]
movzx eax, word [esp + 0x14]
or eax, 0xc00
mov dword [esp + 0x18], eax
fldcw word [esp + 0x18]
fistp qword [esp + 8]
mov eax, dword [esp + 8]
push eax
fldcw word [esp + 0x18]
fld dword [edx + 8]
fdiv st(1)
fnstcw word [esp + 0x18]
movzx eax, word [esp + 0x18]
or eax, 0xc00
mov dword [esp + 0x1c], eax
fldcw word [esp + 0x1c]
fistp qword [esp + 0xc]
mov eax, dword [esp + 0xc]
push eax
fldcw word [esp + 0x1c]
fdivr dword [edx]
fnstcw word [esp + 0x1c]
movzx eax, word [esp + 0x1c]
or eax, 0xc00
mov dword [esp + 0x20], eax
fldcw word [esp + 0x20]
fistp qword [esp + 0x10]
mov edx, dword [esp + 0x10]
push edx
fldcw word [esp + 0x20]
call fcn.0052c7f0
pop esi
add esp, 8
ret 8
fstp st(0)
fstp st(0)
push str._____
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
xor eax, eax
add esp, 8
ret 8
Function at 0x52a9e0
Capabilities:
Create thread

Disassembly:
push esi
mov esi, ecx
cmp dword [esi + 0x1f4], 0
push edi
je 0x52aab8
mov edi, dword [esp + 0x14]
test edi, edi
je 0x52aab8
mov eax, dword [0x648a5c]
push eax
call fcn.0040f6f0
mov ecx, eax
call fcn.0053f360
cmp byte [eax + 8], 0
jne 0x52aab8
cmp dword [0x6391ec], 0
jne 0x52aab8
push 0
push 1
push 0x66d528
call dword [sym.imp.KERNEL32.dll_InterlockedCompareExchange]
cmp eax, 1
je 0x52aab8
mov eax, dword [esp + 0xc]
mov ecx, dword [eax]
mov dword [0x66d4d4], ecx
mov edx, dword [eax + 4]
mov dword [0x66d4d8], edx
mov eax, dword [eax + 8]
mov dword [0x66d4dc], eax
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov dword [0x66d4c8], ecx
mov edx, dword [eax + 4]
mov dword [0x66d4cc], edx
mov eax, dword [eax + 8]
mov edx, dword [esp + 0x18]
mov dword [0x66d4d0], eax
mov ecx, dword [esi + 0x1f4]
lea eax, [esp + 0x14]
push eax
push 0
push 0
push 0x52a950
push 0
push 0
mov dword [0x66d520], ecx
mov dword [0x66d524], edi
mov dword [0x6382a0], edx
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
jne 0x52aabf
push eax
push 0x66d528
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
pop edi
xor eax, eax
pop esi
ret 0x10
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 1
pop esi
ret 0x10
Function at 0x52f670
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x55e55c
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x6397d4]
xor eax, esp
push eax
lea eax, [esp + 0x14]
mov dword fs:[0], eax
mov esi, ecx
xor edi, edi
lea ebx, [esi + 0x38]
mov ecx, ebx
mov dword [esi], vtable.CTileManager.0
mov dword [esi + 0x2c], edi
mov dword [esi + 0x30], edi
mov dword [esi + 0x34], edi
call fcn.0052d640
mov dword [ebx + 4], eax
mov byte [eax + 0x15], 1
mov eax, dword [ebx + 4]
mov dword [eax + 4], eax
mov eax, dword [ebx + 4]
mov dword [eax], eax
mov eax, dword [ebx + 4]
mov dword [eax + 8], eax
mov dword [ebx + 8], edi
mov dword [esi + 0x48], edi
mov dword [esi + 0x4c], edi
mov dword [esi + 0x50], edi
mov dword [esi + 0x64], edi
mov dword [esi + 0x68], edi
mov dword [esi + 0x6c], edi
mov dword [esi + 0x70], edi
mov dword [esi + 0x78], edi
mov dword [esi + 0x7c], edi
mov dword [esi + 0x80], edi
mov dword [esi + 0x84], edi
mov dword [esi + 0x8c], edi
mov dword [esi + 0x90], edi
mov dword [esi + 0x94], edi
mov dword [esi + 0x9c], edi
mov dword [esi + 0xa0], edi
mov dword [esi + 0xa4], edi
mov dword [esi + 0xa8], edi
mov dword [esi + 0xc], edi
mov eax, esi
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add esp, 0x10
ret

Function at 0x5349e0
Capabilities:
Print debug messages

Disassembly:
mov eax, dword [esp + 0xc]
push ebx
push ebp
push esi
push edi
mov esi, ecx
push 0x80
push eax
lea ebp, [esi + 0x18]
push ebp
call dword [sym.imp.MSVCR80.dll_strncpy]
mov ecx, dword [esp + 0x24]
mov ebx, dword [esp + 0x20]
lea edi, [esi + 4]
add esp, 0xc
cmp dword [edi], 0
mov dword [esi + 0xc], ecx
jne 0x534a1f
push ebx
push edi
call fcn.005343f0
mov edx, dword [edi]
add esp, 8
mov dword [esi + 8], edx
mov eax, dword [esp + 0x18]
push eax
push ebx
push ebp
lea edi, [esi + 0x9c]
push str._MemoryPooltempl__s_
push edi
mov dword [esi + 0x98], ebx
call dword [sym.imp.MSVCR80.dll_sprintf]
add esp, 0x14
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0x98]
mov edx, dword [esi + 0x14]
lea ecx, [eax*4]
push ecx
push eax
mov eax, dword [esi + 0xc]
push edx
push eax
push ebx
push ebp
push str.__s__Init_t_d_t_d_t_d_t_d_t_d_n
push edi
call dword [sym.imp.MSVCR80.dll_sprintf]
push edi
call fcn.004135c0
add esp, 0x24
pop edi
pop esi
pop ebp
pop ebx
ret 0xc
Function at 0x534a80
Capabilities:
Print debug messages

Disassembly:
push esi
mov esi, ecx
mov eax, dword [esi + 8]
test eax, eax
jne 0x534a8c
pop esi
ret
mov ecx, dword [eax + 0x10]
test ecx, ecx
je 0x534aa7
add ecx, 0xffffffff
mov dword [eax + 0x10], ecx
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
test eax, eax
jne 0x534b90
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x14]
test eax, eax
push ebx
push ebp
push edi
jne 0x534b21
mov edx, dword [esi + 0xc]
push edx
lea edi, [esi + 4]
push edi
call fcn.005343f0
mov eax, dword [edi]
mov ecx, dword [esi + 0x14]
mov edx, dword [esi + 0xc]
add dword [esi + 0x10], 1
mov ebp, dword [sym.imp.MSVCR80.dll_sprintf]
push ecx
push edx
mov dword [esi + 8], eax
mov eax, dword [esi + 0x10]
push eax
lea ebx, [esi + 0x18]
push ebx
lea edi, [esi + 0x9c]
push str.___s_alloc_Band
push edi
call ebp
add esp, 0x20
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0xc]
add dword [esi + 0x98], eax
mov ecx, dword [esi + 0x98]
lea edx, [ecx*4]
push edx
mov edx, dword [esi + 0x10]
push ecx
mov ecx, dword [esi + 0x14]
push ecx
push eax
push edx
push ebx
push str.__s__Increse_t_d_t_d_t_d_t_d_t_d_n
jmp 0x534b79
mov ecx, dword [esi + 0xc]
mov edx, dword [esi + 0x10]
mov ebp, dword [sym.imp.MSVCR80.dll_sprintf]
mov dword [esi + 8], eax
mov eax, dword [esi + 0x14]
push eax
push ecx
push edx
lea ebx, [esi + 0x18]
push ebx
lea edi, [esi + 0x9c]
push 0x5640ac
push edi
call ebp
add esp, 0x18
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0xc]
sub dword [esi + 0x98], eax
mov ecx, dword [esi + 0x98]
lea edx, [ecx*4]
push edx
mov edx, dword [esi + 0x10]
push ecx
mov ecx, dword [esi + 0x14]
push ecx
push eax
push edx
push ebx
push str.__s__Decrese_t_d_t_d_t_d_t_d_t_d_n
push edi
call ebp
push edi
call fcn.004135c0
add esp, 0x24
pop edi
pop ebp
pop ebx
mov ecx, esi
pop esi
jmp fcn.00534a80
add dword [esi + 0x14], 1
pop esi
ret

Function at 0x534ba0
Capabilities:
Print debug messages

Disassembly:
mov eax, dword [esp + 0xc]
push ebx
push ebp
push esi
push edi
mov esi, ecx
push 0x80
push eax
lea ebp, [esi + 0x18]
push ebp
call dword [sym.imp.MSVCR80.dll_strncpy]
mov ecx, dword [esp + 0x24]
mov ebx, dword [esp + 0x20]
lea edi, [esi + 4]
add esp, 0xc
cmp dword [edi], 0
mov dword [esi + 0xc], ecx
jne 0x534bdf
push ebx
push edi
call fcn.00534520
mov edx, dword [edi]
add esp, 8
mov dword [esi + 8], edx
mov eax, dword [esp + 0x18]
push eax
push ebx
push ebp
lea edi, [esi + 0x9c]
push str._MemoryPooltempl__s_
push edi
mov dword [esi + 0x98], ebx
call dword [sym.imp.MSVCR80.dll_sprintf]
add esp, 0x14
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0x98]
mov edx, dword [esi + 0x14]
lea ecx, [eax*4]
push ecx
push eax
mov eax, dword [esi + 0xc]
push edx
push eax
push ebx
push ebp
push str.__s__Init_t_d_t_d_t_d_t_d_t_d_n
push edi
call dword [sym.imp.MSVCR80.dll_sprintf]
push edi
call fcn.004135c0
add esp, 0x24
pop edi
pop esi
pop ebp
pop ebx
ret 0xc
Function at 0x534c40
Capabilities:
Print debug messages

Disassembly:
push esi
mov esi, ecx
mov eax, dword [esi + 8]
test eax, eax
jne 0x534c4c
pop esi
ret
mov ecx, dword [eax + 0x10]
test ecx, ecx
je 0x534c67
add ecx, 0xffffffff
mov dword [eax + 0x10], ecx
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
test eax, eax
jne 0x534d50
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x14]
test eax, eax
push ebx
push ebp
push edi
jne 0x534ce1
mov edx, dword [esi + 0xc]
push edx
lea edi, [esi + 4]
push edi
call fcn.00534520
mov eax, dword [edi]
mov ecx, dword [esi + 0x14]
mov edx, dword [esi + 0xc]
add dword [esi + 0x10], 1
mov ebp, dword [sym.imp.MSVCR80.dll_sprintf]
push ecx
push edx
mov dword [esi + 8], eax
mov eax, dword [esi + 0x10]
push eax
lea ebx, [esi + 0x18]
push ebx
lea edi, [esi + 0x9c]
push str.___s_alloc_Band
push edi
call ebp
add esp, 0x20
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0xc]
add dword [esi + 0x98], eax
mov ecx, dword [esi + 0x98]
lea edx, [ecx*4]
push edx
mov edx, dword [esi + 0x10]
push ecx
mov ecx, dword [esi + 0x14]
push ecx
push eax
push edx
push ebx
push str.__s__Increse_t_d_t_d_t_d_t_d_t_d_n
jmp 0x534d39
mov ecx, dword [esi + 0xc]
mov edx, dword [esi + 0x10]
mov ebp, dword [sym.imp.MSVCR80.dll_sprintf]
mov dword [esi + 8], eax
mov eax, dword [esi + 0x14]
push eax
push ecx
push edx
lea ebx, [esi + 0x18]
push ebx
lea edi, [esi + 0x9c]
push 0x5640ac
push edi
call ebp
add esp, 0x18
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0xc]
sub dword [esi + 0x98], eax
mov ecx, dword [esi + 0x98]
lea edx, [ecx*4]
push edx
mov edx, dword [esi + 0x10]
push ecx
mov ecx, dword [esi + 0x14]
push ecx
push eax
push edx
push ebx
push str.__s__Decrese_t_d_t_d_t_d_t_d_t_d_n
push edi
call ebp
push edi
call fcn.004135c0
add esp, 0x24
pop edi
pop ebp
pop ebx
mov ecx, esi
pop esi
jmp fcn.00534c40
add dword [esi + 0x14], 1
pop esi
ret

Function at 0x536db0
Capabilities:
Print debug messages

Disassembly:
mov eax, dword [esp + 0xc]
push ebx
push ebp
push esi
push edi
mov esi, ecx
push 0x80
push eax
lea ebp, [esi + 0x18]
push ebp
call dword [sym.imp.MSVCR80.dll_strncpy]
mov ecx, dword [esp + 0x24]
mov ebx, dword [esp + 0x20]
lea edi, [esi + 4]
add esp, 0xc
cmp dword [edi], 0
mov dword [esi + 0xc], ecx
jne 0x536def
push ebx
push edi
call fcn.00536be0
mov edx, dword [edi]
add esp, 8
mov dword [esi + 8], edx
mov eax, dword [esp + 0x18]
push eax
push ebx
push ebp
lea edi, [esi + 0x9c]
push str._MemoryPooltempl__s_
push edi
mov dword [esi + 0x98], ebx
call dword [sym.imp.MSVCR80.dll_sprintf]
add esp, 0x14
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0x98]
mov edx, dword [esi + 0x14]
lea ecx, [eax*4]
push ecx
push eax
mov eax, dword [esi + 0xc]
push edx
push eax
push ebx
push ebp
push str.__s__Init_t_d_t_d_t_d_t_d_t_d_n
push edi
call dword [sym.imp.MSVCR80.dll_sprintf]
push edi
call fcn.004135c0
add esp, 0x24
pop edi
pop esi
pop ebp
pop ebx
ret 0xc
Function at 0x5376a0
Capabilities:
Print debug messages

Disassembly:
mov eax, dword [esp + 0xc]
push ebx
push ebp
push esi
push edi
mov esi, ecx
push 0x80
push eax
lea ebp, [esi + 0x18]
push ebp
call dword [sym.imp.MSVCR80.dll_strncpy]
mov ecx, dword [esp + 0x24]
mov ebx, dword [esp + 0x20]
lea edi, [esi + 4]
add esp, 0xc
cmp dword [edi], 0
mov dword [esi + 0xc], ecx
jne 0x5376df
push ebx
push edi
call fcn.005374d0
mov edx, dword [edi]
add esp, 8
mov dword [esi + 8], edx
mov eax, dword [esp + 0x18]
push eax
push ebx
push ebp
lea edi, [esi + 0x9c]
push str._MemoryPooltempl__s_
push edi
mov dword [esi + 0x98], ebx
call dword [sym.imp.MSVCR80.dll_sprintf]
add esp, 0x14
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0x98]
mov edx, dword [esi + 0x14]
lea ecx, [eax*4]
push ecx
push eax
mov eax, dword [esi + 0xc]
push edx
push eax
push ebx
push ebp
push str.__s__Init_t_d_t_d_t_d_t_d_t_d_n
push edi
call dword [sym.imp.MSVCR80.dll_sprintf]
push edi
call fcn.004135c0
add esp, 0x24
pop edi
pop esi
pop ebp
pop ebx
ret 0xc

Function at 0x538440
Capabilities:
Print debug messages

Disassembly:
mov eax, dword [esp + 0xc]
push ebx
push ebp
push esi
push edi
mov esi, ecx
push 0x80
push eax
lea ebp, [esi + 0x18]
push ebp
call dword [sym.imp.MSVCR80.dll_strncpy]
mov ecx, dword [esp + 0x24]
mov ebx, dword [esp + 0x20]
lea edi, [esi + 4]
add esp, 0xc
cmp dword [edi], 0
mov dword [esi + 0xc], ecx
jne 0x53847f
push ebx
push edi
call fcn.00538270
mov edx, dword [edi]
add esp, 8
mov dword [esi + 8], edx
mov eax, dword [esp + 0x18]
push eax
push ebx
push ebp
lea edi, [esi + 0x9c]
push str._MemoryPooltempl__s_
push edi
mov dword [esi + 0x98], ebx
call dword [sym.imp.MSVCR80.dll_sprintf]
add esp, 0x14
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0x98]
mov edx, dword [esi + 0x14]
lea ecx, [eax*4]
push ecx
push eax
mov eax, dword [esi + 0xc]
push edx
push eax
push ebx
push ebp
push str.__s__Init_t_d_t_d_t_d_t_d_t_d_n
push edi
call dword [sym.imp.MSVCR80.dll_sprintf]
push edi
call fcn.004135c0
add esp, 0x24
pop edi
pop esi
pop ebp
pop ebx
ret 0xc

Function at 0x538e90
Capabilities:
Print debug messages

Disassembly:
mov eax, dword [esp + 0xc]
push ebx
push ebp
push esi
push edi
mov esi, ecx
push 0x80
push eax
lea ebp, [esi + 0x18]
push ebp
call dword [sym.imp.MSVCR80.dll_strncpy]
mov ecx, dword [esp + 0x24]
mov ebx, dword [esp + 0x20]
lea edi, [esi + 4]
add esp, 0xc
cmp dword [edi], 0
mov dword [esi + 0xc], ecx
jne 0x538ecf
push ebx
push edi
call fcn.00538cc0
mov edx, dword [edi]
add esp, 8
mov dword [esi + 8], edx
mov eax, dword [esp + 0x18]
push eax
push ebx
push ebp
lea edi, [esi + 0x9c]
push str._MemoryPooltempl__s_
push edi
mov dword [esi + 0x98], ebx
call dword [sym.imp.MSVCR80.dll_sprintf]
add esp, 0x14
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0x98]
mov edx, dword [esi + 0x14]
lea ecx, [eax*4]
push ecx
push eax
mov eax, dword [esi + 0xc]
push edx
push eax
push ebx
push ebp
push str.__s__Init_t_d_t_d_t_d_t_d_t_d_n
push edi
call dword [sym.imp.MSVCR80.dll_sprintf]
push edi
call fcn.004135c0
add esp, 0x24
pop edi
pop esi
pop ebp
pop ebx
ret 0xc