joyce8/EMBER2024-capa huggingface dataset:
Function at 0x49cce0
Capabilities:
Access peb ldr_data
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x631860
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x24
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0xc], esi
lea eax, [esi + 0x10]
mov dword [eax], esi
mov dword [esi + 0x14], eax
mov eax, dword [eax]
mov dword [esp + 0x38], 0
mov byte [eax], 0
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x28], esp
lea eax, [esp + 0x58]
push eax
push str.messagesFileName
mov byte [esp + 0x58], 1
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], 0
call fcn.00403db0
mov edi, dword [esp + 0x58]
lea ecx, [esp + 0x30]
push ecx
mov ecx, dword [edi + 4]
lea ecx, [esp + ecx + 0x5c]
mov byte [esp + 0x54], 1
call fcn.004304e0
mov ecx, eax
call fcn.0042b430
cmp eax, esi
mov byte [esp + 0x38], 3
je 0x49cd83
mov ebp, dword [eax + 0x14]
mov edx, dword [eax + 0x10]
lea ecx, [eax + 0x10]
cmp ebp, ecx
je 0x49cd7a
mov eax, dword [eax]
push edx
push eax
mov ecx, esi
call fcn.00403ff0
mov eax, dword [esp + 0x2c]
lea edx, [esp + 0x28]
cmp eax, edx
mov byte [esp + 0x38], 1
je 0x49cdba
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x49cdba
sub eax, ecx
cmp eax, 0x80
jbe 0x49cdb0
push ecx
call fcn.00611869
add esp, 4
jmp 0x49cdba
push eax
push ecx
call fcn.005d6970
add esp, 8
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x28], esp
lea eax, [esp + 0x58]
push eax
push str.textWidth
call fcn.00403db0
mov ecx, dword [edi + 4]
lea ecx, [esp + ecx + 0x58]
mov byte [esp + 0x50], 1
call fcn.004304e0
mov ecx, eax
call fcn.0042b350
lea ecx, [esp + 0x10]
push ecx
mov dword [esi + 0x18], eax
mov ecx, dword [edi + 4]
lea ecx, [esp + ecx + 0x44]
call fcn.004304e0
mov ecx, eax
call fcn.0042b9b0
mov edx, dword [eax]
sub esp, 0x18
mov dword [esi + 0x1c], edx
mov eax, dword [eax + 4]
mov ecx, esp
mov dword [esp + 0x28], esp
lea edx, [esp + 0x58]
push edx
push str.visibleTime
mov dword [esi + 0x20], eax
call fcn.00403db0
mov ecx, dword [edi + 4]
lea ecx, [esp + ecx + 0x58]
mov byte [esp + 0x50], 1
call fcn.004304e0
mov ecx, eax
call fcn.0045c590
fstp dword [esi + 0x24]
lea ecx, [esp + 0x40]
mov dword [esp + 0x38], 0xffffffff
call fcn.0042ce80
mov ecx, dword [esp + 0x30]
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
pop ebp
add esp, 0x30
ret 0xc
Function at 0x49ce70
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6318af
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
push ebx
push esi
mov esi, ecx
xor eax, eax
push edi
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], eax
cmp dword [esp + 0x30], eax
mov dword [esp + 0x1c], eax
mov ebx, 1
je 0x49cebc
lea ecx, [esi + 0x34]
mov dword [esi], 0x65efa4
call fcn.0040b080
mov byte [esp + 0x1c], bl
mov dword [esp + 0xc], ebx
mov eax, dword [esi]
mov ecx, dword [eax + 4]
mov dword [esi + ecx], vtable.Interface.0
mov edx, dword [esi]
mov eax, dword [edx + 4]
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x48], esp
lea edx, [esp + 0x48]
push edx
push str.receiver
mov dword [esi + eax], vtable.ReceiverAndMessage.0
call fcn.00403db0
mov edi, dword [esp + 0x3c]
mov ecx, dword [edi + 4]
lea eax, [esi + 4]
push eax
lea ecx, [esp + ecx + 0x40]
mov dword [esp + 0x38], ebx
call fcn.004304e0
mov ecx, eax
call fcn.0042b430
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x48], esp
lea edx, [esp + 0x48]
push edx
mov ebx, 3
push str.message
mov dword [esp + 0x3c], ebx
call fcn.00403db0
mov ecx, dword [edi + 4]
lea eax, [esi + 0x1c]
push eax
lea ecx, [esp + ecx + 0x40]
mov byte [esp + 0x38], bl
call fcn.004304e0
mov ecx, eax
call fcn.0042b430
lea ecx, [esp + 0x24]
mov dword [esp + 0x1c], 0xffffffff
call fcn.0042ce80
mov ecx, dword [esp + 0x14]
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
pop ebx
add esp, 0x14
ret 0x10
Function at 0x49e100
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x631ab0
push eax
mov eax, dword [esp + 0x14]
mov dword fs:[0], esp
sub esp, 0x24
test eax, eax
push esi
mov esi, ecx
jl 0x49e135
cmp eax, dword [esi + 0x14]
jg 0x49e135
mov eax, dword [esp + 0x40]
test eax, eax
jl 0x49e135
cmp eax, dword [esi + 0x18]
jle 0x49e187
push 0x80
push str.c:work_fishdom_aqua_gameTextureMesh.h
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x24], esp
lea eax, [esp + 0x60]
push eax
push str.0___i__i____columns__0___j__j____rows
call fcn.00403db0
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x40], esp
lea edx, [esp + 0x78]
push edx
push str.Assertion_failed
mov dword [esp + 0x70], 0
call fcn.00403db0
mov dword [esp + 0x68], 0xffffffff
call fcn.00405c50
add esp, 0x38
lea eax, [esp + 0xc]
push eax
lea ecx, [esi + 0x2c]
call fcn.0049aca0
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
add ecx, eax
mov dword [esp + 0x30], 1
call fcn.0044fa50
mov edx, dword [eax]
lea ecx, [esp + 0x18]
push ecx
mov ecx, eax
call dword [edx + 0x10]
lea ecx, [esp + 0xc]
mov dword [esp + 0x30], 0xffffffff
call fcn.00450980
fild dword [esp + 0x24]
sub esp, 8
fidiv dword [esi + 0x18]
fld dword [esi + 0x28]
fsub dword [esi + 0x20]
fmulp st(1)
fimul dword [esp + 0x48]
fstp dword [esp + 4]
fild dword [esp + 0x28]
fidiv dword [esi + 0x14]
fld dword [esi + 0x24]
fsub dword [esi + 0x1c]
mov esi, dword [esp + 0x40]
mov ecx, esi
fmulp st(1)
fimul dword [esp + 0x44]
fstp dword [esp]
call fcn.00406d90
mov ecx, dword [esp + 0x28]
mov eax, esi
mov dword fs:[0], ecx
pop esi
add esp, 0x30
ret 0xc

Function at 0x49e240
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x631af7
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x14
push ebx
push ebp
push esi
mov esi, ecx
xor ebp, ebp
push edi
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], ebp
cmp dword [esp + 0x40], ebp
mov dword [esp + 0x2c], ebp
mov ebx, 1
je 0x49e28d
lea ecx, [esi + 0x2c]
mov dword [esi], 0x65ef9c
call fcn.0040b080
mov byte [esp + 0x2c], bl
mov dword [esp + 0x10], ebx
mov eax, dword [esi]
mov ecx, dword [eax + 4]
mov dword [esi + ecx], vtable.Interface.0
mov edx, dword [esi]
mov eax, dword [edx + 4]
lea ecx, [esp + 0x34]
mov dword [esi + eax], vtable.AnimationService.0
lea edi, [esi + 0x20]
push ecx
mov ecx, edi
mov byte [esi + 0x14], bl
mov dword [esi + 0x18], 0x3ca3d70a
call fcn.0049ae20
lea edx, [esp + 0x18]
mov ebx, 2
push edx
mov ecx, edi
mov dword [esp + 0x30], ebx
mov dword [esi + 8], ebp
call fcn.0049afc0
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
add ecx, eax
mov byte [esp + 0x2c], 3
call fcn.004f2a00
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
dec eax
lea ecx, [esp + 0x18]
mov dword [esi + 0xc], eax
mov byte [esp + 0x2c], bl
call fcn.0048fd00
lea ecx, [esp + 0x34]
mov dword [esi + 4], ebp
mov dword [esp + 0x2c], 0xffffffff
call fcn.0049af30
mov ecx, dword [esp + 0x24]
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x20
ret 0x10
Function at 0x49e330
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x631b3f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
push ebx
push esi
push edi
mov esi, ecx
xor edi, edi
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], edi
cmp dword [esp + 0x30], edi
mov dword [esp + 0x1c], edi
je 0x49e377
lea ecx, [esi + 0x2c]
mov dword [esi], 0x65ef9c
call fcn.0040b080
mov dword [esp + 0xc], 1
mov eax, dword [esi]
mov ecx, dword [eax + 4]
mov dword [esi + ecx], vtable.Interface.0
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov dword [esi + eax], vtable.AnimationService.0
lea ebx, [esi + 0x20]
mov dword [ebx], 0x6580c8
mov dword [ebx + 4], edi
mov ecx, dword [ebx]
mov edx, dword [ecx + 4]
mov dword [edx + ebx + 4], edi
mov edi, dword [esp + 0x24]
mov ecx, dword [edi + 4]
lea ecx, [esp + ecx + 0x24]
mov dword [esp + 0x1c], 6
call fcn.0048ea80
mov eax, dword [eax + 4]
mov dword [esi + 4], eax
mov ecx, dword [edi + 4]
lea ecx, [esp + ecx + 0x24]
call fcn.0048ea80
mov ecx, dword [eax + 8]
mov dword [esi + 8], ecx
mov ecx, dword [edi + 4]
lea ecx, [esp + ecx + 0x24]
call fcn.0048ea80
mov edx, dword [eax + 0xc]
mov dword [esi + 0xc], edx
mov ecx, dword [edi + 4]
lea ecx, [esp + ecx + 0x24]
call fcn.0048ea80
mov eax, dword [eax + 0x10]
mov dword [esi + 0x10], eax
mov ecx, dword [edi + 4]
lea ecx, [esp + ecx + 0x24]
call fcn.0048ea80
mov cl, byte [eax + 0x14]
mov byte [esi + 0x14], cl
mov ecx, dword [edi + 4]
lea ecx, [esp + ecx + 0x24]
call fcn.0048ea80
mov edx, dword [eax + 0x18]
mov dword [esi + 0x18], edx
mov ecx, dword [edi + 4]
lea ecx, [esp + ecx + 0x24]
call fcn.0048ea80
mov al, byte [eax + 0x1c]
mov byte [esi + 0x1c], al
mov ecx, dword [edi + 4]
lea ecx, [esp + ecx + 0x24]
call fcn.0048ea80
mov cl, byte [eax + 0x1d]
mov byte [esi + 0x1d], cl
mov ecx, dword [edi + 4]
lea ecx, [esp + ecx + 0x24]
call fcn.0048ea80
mov dl, byte [eax + 0x1e]
mov byte [esi + 0x1e], dl
mov ecx, dword [edi + 4]
lea ecx, [esp + ecx + 0x24]
call fcn.0048ea80
add eax, 0x20
push eax
mov ecx, ebx
call fcn.0049aea0
lea ecx, [esp + 0x24]
mov dword [esp + 0x1c], 0xffffffff
call fcn.0048f9a0
mov ecx, dword [esp + 0x14]
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
pop ebx
add esp, 0x14
ret 0x10
Function at 0x49e670
Capabilities:
Access peb ldr_data
Get number of processors

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x631b97
push eax
mov dword fs:[0], esp
sub esp, 0xc
push esi
push edi
mov edi, dword [esp + 0x2c]
cmp edi, 2
mov esi, ecx
je 0x49e72b
mov ecx, dword [esi + 0x1c]
mov eax, dword [esp + 0x24]
mov edx, dword [ecx + 4]
push eax
lea ecx, [edx + esi + 0x1c]
call fcn.0048ea80
mov ecx, eax
call fcn.0049e490
mov ecx, dword [esi + 0x1c]
mov eax, dword [esp + 0x28]
mov edx, dword [ecx + 4]
push eax
lea ecx, [edx + esi + 0x1c]
call fcn.0048ea80
mov ecx, eax
call fcn.0049e580
mov eax, dword [esi + 0x1c]
mov ecx, dword [eax + 4]
push edi
lea ecx, [ecx + esi + 0x1c]
call fcn.0048ea80
mov ecx, eax
call fcn.0048e6e0
mov eax, dword [esi + 0x1c]
mov edx, dword [esp + 0x34]
mov ecx, dword [eax + 4]
push edx
lea ecx, [ecx + esi + 0x1c]
call fcn.0048ea80
mov ecx, eax
call fcn.0048e800
mov edx, dword [esi + 0x1c]
mov eax, dword [edx + 4]
lea ecx, [eax + esi + 0x1c]
call fcn.0048ea80
mov byte [eax + 0x14], 1
pop edi
mov byte [esi + 0x30], 1
pop esi
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
add esp, 0x18
ret 0x14
push 0x64
call fcn.004063f0
add esp, 4
mov dword [esp + 0x2c], eax
test eax, eax
mov dword [esp + 0x1c], 0
je 0x49e777
fld dword [esp + 0x30]
push 1
push 0
fchs
push ecx
fstp dword [esp]
push 0
push 1
push 0
push 0x3f800000
push 0x3f800000
push 0
push 0
push 0xba83126f
push 0
mov ecx, eax
call fcn.00492660
jmp 0x49e779
xor eax, eax
push 1
or edi, 0xffffffff
push eax
lea ecx, [esp + 0x10]
mov dword [esp + 0x24], edi
call fcn.0048eed0
lea ecx, [esp + 8]
push ecx
lea ecx, [esi + 0x10]
mov dword [esp + 0x20], 1
call fcn.00493570
lea ecx, [esp + 8]
mov dword [esp + 0x1c], edi
call fcn.0048f9a0
mov ecx, dword [esp + 0x14]
pop edi
pop esi
mov dword fs:[0], ecx
add esp, 0x18
ret 0x14
Function at 0x49e7d0
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x631bc0
push eax
mov dword fs:[0], esp
sub esp, 0xc
push ebx
push esi
mov esi, ecx
mov eax, dword [esi + 0x1c]
mov ecx, dword [eax + 4]
mov eax, dword [ecx + esi + 0x1c]
lea ecx, [ecx + esi + 0x1c]
xor ebx, ebx
cmp eax, ebx
je 0x49e84d
call fcn.0048ea80
mov byte [eax + 0x14], bl
mov edx, dword [esi + 0x1c]
mov eax, dword [edx + 4]
push ebx
lea ecx, [eax + esi + 0x1c]
call fcn.0048ea80
mov ecx, eax
call fcn.0049e490
mov ecx, dword [esi + 0x1c]
mov edx, dword [ecx + 4]
push ebx
lea ecx, [edx + esi + 0x1c]
call fcn.0048ea80
mov ecx, eax
call fcn.0049e580
mov eax, dword [esi + 0x1c]
mov ecx, dword [eax + 4]
push ebx
lea ecx, [ecx + esi + 0x1c]
call fcn.0048ea80
mov ecx, eax
call fcn.0048e650
mov byte [esi + 0x30], bl
mov dword [esp + 8], 0x6580c8
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebx
lea edx, [esp + 8]
push edx
lea ecx, [esi + 4]
mov dword [esp + 0x20], 4
call fcn.00493570
lea ecx, [esp + 8]
mov dword [esp + 0x1c], 0xffffffff
call fcn.0048f9a0
mov dword [esp + 8], 0x6580c8
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebx
lea eax, [esp + 8]
push eax
lea ecx, [esi + 0x10]
mov dword [esp + 0x20], 8
call fcn.00493570
lea ecx, [esp + 8]
mov dword [esp + 0x1c], 0xffffffff
call fcn.0048f9a0
mov ecx, dword [esp + 0x14]
pop esi
mov dword fs:[0], ecx
pop ebx
add esp, 0x18
ret

Function at 0x4a1650
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x6304a1
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push esi
push edi
mov edi, dword [esp + 0x1c]
mov eax, dword [edi]
mov esi, ecx
lea edx, [edi + 4]
lea ecx, [esi + 4]
push edx
mov dword [esp + 0xc], esi
mov dword [esi], eax
call fcn.0048c410
lea eax, [edi + 0x10]
lea ecx, [esi + 0x10]
push eax
mov dword [esp + 0x18], 0
call fcn.0048c410
lea edx, [edi + 0x1c]
lea ecx, [esi + 0x1c]
push edx
mov byte [esp + 0x18], 1
call fcn.0048c410
mov eax, dword [edi + 0x28]
mov dword [esi + 0x28], eax
mov ecx, dword [edi + 0x2c]
lea edx, [edi + 0x30]
mov dword [esi + 0x2c], ecx
push edx
lea ecx, [esi + 0x30]
mov byte [esp + 0x18], 2
call fcn.004945d0
mov al, byte [edi + 0x38]
mov ecx, dword [esp + 0xc]
mov byte [esi + 0x38], al
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0x10
ret 4
Function at 0x4a2780
Capabilities:
Get process heap flags

Disassembly:
push 0xffffffffffffffff
push 0x6321a8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push esi
mov eax, ecx
mov edx, dword [eax]
lea ecx, [esp + 4]
push ecx
mov ecx, dword [edx + 4]
add ecx, eax
mov dword [esp + 0x1c], 0
call fcn.00425ed0
mov ecx, eax
call fcn.00429900
mov esi, eax
mov eax, dword [esp + 0x38]
push eax
sub esp, 0x18
lea edx, [esp + 0x3c]
mov ecx, esp
mov dword [esp + 0x54], esp
push edx
mov byte [esp + 0x38], 1
call fcn.00403e10
mov eax, dword [esi]
mov ecx, dword [eax + 4]
add ecx, esi
mov byte [esp + 0x34], 1
call fcn.004304e0
mov ecx, eax
call fcn.0045c8d0
fstp dword [esp + 0x38]
lea ecx, [esp + 4]
mov byte [esp + 0x18], 0
call fcn.0042ce80
mov eax, dword [esp + 0x34]
lea ecx, [esp + 0x30]
cmp eax, ecx
mov dword [esp + 0x18], 0xffffffff
je 0x4a2852
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x4a2852
sub eax, ecx
cmp eax, 0x80
jbe 0x4a2848
push ecx
call fcn.00611869
fld dword [esp + 0x3c]
add esp, 4
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop esi
add esp, 0x18
ret 0x1c
push eax
push ecx
call fcn.005d6970
add esp, 8
mov ecx, dword [esp + 0x10]
fld dword [esp + 0x38]
mov dword fs:[0], ecx
pop esi
add esp, 0x18
ret 0x1c

Function at 0x4a2870
Capabilities:
Get process heap flags

Disassembly:
push 0xffffffffffffffff
push 0x6321a8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push esi
mov eax, ecx
mov edx, dword [eax]
lea ecx, [esp + 4]
push ecx
mov ecx, dword [edx + 4]
add ecx, eax
mov dword [esp + 0x1c], 0
call fcn.00425ed0
mov ecx, eax
call fcn.00429900
mov esi, eax
mov eax, dword [esp + 0x38]
push eax
sub esp, 0x18
lea edx, [esp + 0x3c]
mov ecx, esp
mov dword [esp + 0x54], esp
push edx
mov byte [esp + 0x38], 1
call fcn.00403e10
mov eax, dword [esi]
mov ecx, dword [eax + 4]
add ecx, esi
mov byte [esp + 0x34], 1
call fcn.004304e0
mov ecx, eax
call fcn.0045c680
lea ecx, [esp + 4]
mov esi, eax
mov byte [esp + 0x18], 0
call fcn.0042ce80
mov eax, dword [esp + 0x34]
lea ecx, [esp + 0x30]
cmp eax, ecx
mov dword [esp + 0x18], 0xffffffff
je 0x4a293e
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x4a293e
sub eax, ecx
cmp eax, 0x80
jbe 0x4a2934
push ecx
call fcn.00611869
add esp, 4
mov eax, esi
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop esi
add esp, 0x18
ret 0x1c
push eax
push ecx
call fcn.005d6970
add esp, 8
mov ecx, dword [esp + 0x10]
mov eax, esi
mov dword fs:[0], ecx
pop esi
add esp, 0x18
ret 0x1c
Function at 0x4a2960
Capabilities:
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x632218
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push ebx
push esi
mov esi, ecx
xor ebx, ebx
push edi
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], ebx
cmp dword [esp + 0x40], ebx
mov edi, 1
mov dword [esp + 0x20], edi
je 0x4a29bf
lea ecx, [esi + 0x80]
mov dword [esi + 4], 0x65c7a4
mov dword [esi + 0x20], 0x666cbc
mov dword [esi + 0x3c], 0x65efd4
call fcn.0040b080
mov byte [esp + 0x20], 2
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0x34]
push ebx
sub esp, 0xc
mov ecx, esp
mov dword [ecx], 0x6580c8
mov eax, dword [edi + 4]
lea edx, [esp + eax + 0x44]
mov dword [esp + 0x50], esp
push edx
call fcn.00420750
mov eax, dword [esp + 0x38]
sub esp, 0xc
mov ecx, esp
mov dword [ecx], 0x6580c8
mov edx, dword [eax + 4]
lea eax, [esp + edx + 0x44]
mov dword [esp + 0x30], esp
push eax
mov dword [esp + 0x40], 3
call fcn.00420750
mov ecx, esi
mov byte [esp + 0x3c], 2
call fcn.0042c9d0
push ebx
sub esp, 0xc
mov ecx, esp
mov dword [ecx], 0x6580c8
mov edx, dword [edi + 4]
lea eax, [esp + edx + 0x44]
mov dword [esp + 0x50], esp
push eax
mov dword [esp + 0x34], 4
call fcn.00420750
lea edi, [esi + 0x1c]
mov ecx, edi
call fcn.0056f4b0
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + 4]
mov dword [esi + edx + 0x3c], vtable.Interface.0
mov eax, dword [esi + 0x3c]
mov ecx, dword [eax + 4]
mov dword [esi + ecx + 0x3c], vtable.MousePosRememberer.0
mov dword [esi + 0x40], ebx
mov dword [esi + 0x44], ebx
mov byte [esi + 0x48], bl
mov edx, dword [esi + 4]
mov dword [esi], vtable.McMovableTextureControl.2.0
mov dword [edi], vtable.McMovableTextureControl.1.0
mov eax, dword [edx + 4]
mov dword [eax + esi + 4], vtable.McMovableTextureControl.0
mov dword [esi + 0x4c], 0x6580c8
mov dword [esi + 0x50], ebx
mov ecx, dword [esi + 0x4c]
mov edx, dword [ecx + 4]
mov dword [esp + 0x20], 5
mov dword [edx + esi + 0x50], ebx
lea eax, [esi + 0x64]
mov dword [esi + 0x58], ebx
mov dword [esi + 0x5c], ebx
lea ecx, [eax + 0x10]
mov dword [ecx], eax
mov dword [eax + 0x14], ecx
mov ecx, dword [ecx]
mov byte [ecx], bl
lea ecx, [esp + 0x28]
mov dword [esi + 0x7c], 0x40400000
mov byte [esp + 0x20], bl
call fcn.0042ce80
lea ecx, [esp + 0x34]
mov dword [esp + 0x20], 0xffffffff
call fcn.0042ce80
mov ecx, dword [esp + 0x18]
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
pop ebx
add esp, 0x18
ret 0x1c
Function at 0x4a831e
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6414b8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
fld dword [0x663214]
push esi
mov esi, ecx
fmul dword [esi + 0x28]
push edi
mov ecx, 0x6c3c60
fadd st(0), st(0)
fcos
fsubr dword [0x6532d8]
fmul dword [0x6532dc]
fld dword [esi + 0x34]
fsub dword [esi + 0x30]
fmulp st(1)
fadd dword [esi + 0x30]
fstp dword [esp + 8]
mov eax, dword [esp + 8]
push eax
call fcn.00443d70
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esi + 0x1c]
call fcn.0049aca0
mov edx, dword [eax]
mov ecx, dword [edx + 4]
add ecx, eax
mov dword [esp + 0x28], 0
call fcn.0044fa50
lea ecx, [esp + 0xc]
mov edi, eax
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 0x14]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov edx, dword [edi]
push ecx
push eax
mov ecx, edi
call dword [edx + 0x30]
lea ecx, [esp + 0x14]
mov dword [esp + 0x28], 0xffffffff
call fcn.00450980
mov ecx, 0x6c3c60
call fcn.004419c0
mov ecx, dword [esp + 0x20]
pop edi
pop esi
mov dword fs:[0], ecx
add esp, 0x24
ret

Function at 0x4a89d0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x632c3f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x14
push ebp
push esi
push edi
mov esi, ecx
push 0x40
mov dword [esp + 0x2c], 0
call fcn.004063f0
mov edi, eax
add esp, 4
mov dword [esp + 0xc], edi
test edi, edi
mov ebp, dword [esp + 0x30]
mov byte [esp + 0x28], 1
je 0x4a8a41
mov ecx, dword [ebp + 4]
push 1
lea ecx, [esp + ecx + 0x34]
call fcn.0048ea80
sub esp, 0xc
add eax, 0x1c
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
mov dword [ecx], 0x6580c8
call fcn.00490cf0
mov ecx, edi
call fcn.0049e330
jmp 0x4a8a43
xor eax, eax
push 1
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x30], 0
call fcn.0048eed0
lea eax, [esp + 0x14]
push eax
lea ecx, [esi + 0x1c]
mov byte [esp + 0x2c], 2
call fcn.00493570
lea ecx, [esp + 0x14]
mov byte [esp + 0x28], 0
call fcn.0048f9a0
mov ecx, dword [ebp + 4]
lea ecx, [esp + ecx + 0x30]
call fcn.0048ea80
mov ecx, dword [eax + 0x28]
mov dword [esi + 0x28], ecx
mov edx, dword [eax + 0x2c]
mov ecx, esi
mov dword [esi + 0x2c], edx
call fcn.0049e7d0
lea ecx, [esp + 0x30]
mov dword [esp + 0x28], 0xffffffff
call fcn.0048f9a0
mov ecx, dword [esp + 0x20]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebp
add esp, 0x20
ret 0xc
Function at 0x4aa7f0
Capabilities:
Get process heap flags

Disassembly:
push 0xffffffffffffffff
push 0x632f33
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1c
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x10], esi
xor eax, eax
mov dword [esi], eax
mov dword [esi + 4], eax
lea edi, [esi + 8]
mov dword [edi], 0x6580c8
mov dword [edi + 4], eax
mov ecx, dword [edi]
mov edx, dword [ecx + 4]
mov dword [esp + 0x30], eax
mov dword [edx + edi + 4], eax
mov ebp, dword [esp + 0x38]
mov ecx, dword [ebp + 4]
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + ecx + 0x3c]
mov byte [esp + 0x34], 5
call fcn.004304e0
mov ecx, eax
call fcn.0042b9b0
mov ecx, dword [eax]
sub esp, 0x18
mov dword [esi], ecx
mov edx, dword [eax + 4]
mov eax, esp
mov dword [esp + 0x24], esp
sub esp, 0x18
mov dword [esi + 4], edx
mov ecx, esp
mov dword [esp + 0x44], esp
lea edx, [esp + 0x68]
push edx
push str.textureId
mov dword [esp + 0x44], eax
call fcn.00403db0
mov eax, dword [esp + 0x3c]
mov ecx, dword [ebp + 4]
push eax
lea ecx, [esp + ecx + 0x6c]
mov byte [esp + 0x64], 5
call fcn.004304e0
mov ecx, eax
call fcn.0042b430
lea eax, [esp + 0x34]
push eax
mov ecx, 0x6bfa98
call fcn.004a1c40
push eax
mov ecx, edi
mov byte [esp + 0x34], 7
call fcn.0049ab80
lea ecx, [esp + 0x1c]
mov byte [esp + 0x30], 5
call fcn.0049ac10
lea ecx, [esp + 0x38]
mov dword [esp + 0x30], 0xffffffff
call fcn.0042ce80
mov ecx, dword [esp + 0x28]
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
pop ebp
add esp, 0x28
ret 0xc