joyce8/EMBER2024-capa huggingface dataset:
Function at 0x488590
Capabilities:
Packed with generic packer

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x64f7f8
push eax
mov dword fs:[0], esp
sub esp, 0x54
push ebx
push ebp
mov ebp, dword [esp + 0x6c]
mov ecx, dword [ebp]
cmp dword [ecx + 0x7fc], 3
push esi
push edi
jne fcn.00488ea6
jmp loc.0079b038

Function at 0x488f90
Capabilities:
Packed with generic packer

Disassembly:
cmp dword [eax + 0x3c], 0
jg fcn.00488fe3
jmp loc.007af2e8
Function at 0x489630
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x64ede0
push eax
mov dword fs:[0], esp
sub esp, 0x58
push ebx
push ebp
mov ebp, dword [esp + 0x74]
push esi
push edi
mov edi, dword [esp + 0x78]
mov eax, dword [edi + 4]
mov eax, dword [eax + 0x15c]
test eax, eax
je 0x48967b
mov ecx, dword [eax]
cmp dword [ecx + 0x7fc], 2
jne 0x48967b
cmp byte [eax + 0x34], 0
sete al
test al, al
jne 0x489956
mov edx, dword [edi]
cmp dword [edx + 0x7fc], 3
je 0x48969e
mov eax, dword [edi + 4]
fld dword [ebp + 8]
fisub dword [eax + 0x30]
fstp dword [ebp + 8]
mov ecx, dword [edi + 4]
fld dword [ebp + 0xc]
fisub dword [ecx + 0x34]
fstp dword [ebp + 0xc]
mov eax, dword [edi]
cmp dword [eax + 0x768], 0
je 0x4896c8
cmp dword [eax + 0x7f8], 0x12
jne 0x4896c8
mov ebx, dword [0x6a77f4]
push 0
push 0
mov eax, ebp
call fcn.00587150
jmp 0x489781
mov esi, dword [edi + 4]
mov eax, esi
call fcn.0041be50
test al, al
je 0x48972d
mov ebx, dword [0x6a7668]
push 0
push 0x53
mov eax, ebp
call fcn.00587150
mov eax, dword [edi + 0x34c]
cdq
and edx, 3
add eax, edx
sar eax, 2
cdq
mov ecx, 6
idiv ecx
mov ecx, dword [0x6a73c8]
push 0
push 0x3f
push 0x5a
push ebp
mov edi, edx
call fcn.00587e80
push 0x258
push 0x1f5
push 0
push 0x5a
mov esi, ebp
call fcn.00587790
mov edi, dword [esp + 0x78]
jmp 0x489781
mov eax, esi
call fcn.0041c290
mov ebx, dword [0x6a7950]
mov edx, dword [ebx + 0x24]
mov ecx, dword [ebx + 0x28]
sub edx, eax
add eax, 0xc
push 0
sub edx, 0xc
mov dword [esp + 0x1c], eax
push 0
mov eax, ebp
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], 0
mov dword [esp + 0x24], ecx
call fcn.00587150
mov eax, dword [0x6a7950]
mov ecx, dword [eax + 0x24]
push 0
sub ecx, 0xc
push ecx
push eax
lea eax, [esp + 0x1c]
mov ecx, ebp
call fcn.00587270
xor ebx, ebx
cmp dword [edi + 0x24], ebx
jle 0x4897d3
lea esi, [edi + 0x30]
jmp 0x489790
jmp 0x7b2577
mov ecx, ebp
call fcn.00587760
mov eax, dword [edi]
cmp dword [eax + 0x768], 0
je 0x489813
cmp dword [eax + 0x7f8], 0x12
jne 0x489813
mov eax, dword [0x6a7950]
call fcn.00588a20
neg eax
cmp dword [edi + 0xc], eax
jle 0x489813
mov ebx, dword [0x6a7880]
push 0xfffffffffffffffe
push 0xbd
mov eax, ebp
call fcn.00587150
mov esi, dword [edi + 4]
mov eax, esi
call fcn.0041be50
test al, al
jne 0x489933
mov eax, dword [esi + 0x5560]
xor ecx, ecx
test eax, eax
setle cl
jmp 0x7ce44e
mov eax, dword [edi]
cmp dword [eax + 0x7fc], 3
je 0x489956
mov ecx, dword [edi + 4]
fild dword [ecx + 0x30]
fadd dword [ebp + 8]
fstp dword [ebp + 8]
mov edx, dword [edi + 4]
fild dword [edx + 0x34]
fadd dword [ebp + 0xc]
fstp dword [ebp + 0xc]
mov ecx, dword [esp + 0x68]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x64
ret 8
Function at 0x51c470
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x642183
push eax
mov dword fs:[0], esp
push ebx
mov ebx, dword [esp + 0x14]
xor eax, eax
mov ecx, 0xf
mov dword [ebx + 0x18], ecx
mov dword [ebx + 0x14], eax
mov byte [ebx + 4], al
mov dword [esp + 0xc], eax
mov dword [ebx + 0x34], ecx
mov dword [ebx + 0x30], eax
mov byte [ebx + 0x20], al
mov byte [esp + 0xc], 1
call fcn.0051c4d0
mov ecx, dword [esp + 4]
mov eax, ebx
mov dword fs:[0], ecx
pop ebx
add esp, 0xc
ret 4

Function at 0x51d5c0
Capabilities:
Packed with generic packer

Disassembly:
sub esp, 0x14
push ebx
push esi
push edi
mov esi, eax
push esi
call fcn.004679b0
mov edi, dword [esi + 0x1c]
mov esi, dword [esi + 0x28]
cmp esi, 8
mov eax, dword [esp + 0x24]
mov edx, dword [eax + 4]
ja 0x51d625
cmp edi, 5
ja 0x51d625
mov ecx, dword [edx + 0x8c]
call fcn.00453840
test al, al
je 0x51d603
mov eax, dword [edx + 0x15c]
call fcn.0043c1e0
test al, al
je 0x51d625
push edi
push esi
lea ebx, [esp + 0x18]
call fcn.0040d2a0
mov eax, dword [esp + 0x10]
test eax, eax
je 0x51d625
pop edi
pop esi
pop ebx
add esp, 0x14
mov dword [esp + 4], eax
jmp fcn.004679b0
pop edi
pop esi
pop ebx
add esp, 0x14
ret 4
Function at 0x526ae0
Capabilities:
Packed with generic packer

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov esi, dword [ebp + 8]
mov eax, dword [esi + 0x28]
cmp eax, 0xf
push edi
jne 0x526b58
cmp dword [esi + 0x68], 0
jg 0x526d02
cmp byte [esi + 0xba], 0
je 0x526d02
push esi
mov dword [esi + 0x68], 0x6e
mov dword [esi + 0x28], 0x10
call fcn.00530850
mov ecx, dword [esi]
mov eax, dword [ecx]
mov edx, dword [0x6a7274]
mov eax, dword [eax + 0xd8]
push edx
call eax
fld dword [0x6796f0]
push ecx
fstp dword [esp]
push 0x14
push 3
push str.anim_pop
mov edi, esi
call fcn.00528b00
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp eax, 0x10
jne 0x526d02
cmp dword [esi + 0x68], 0x50
fldz
jne 0x526bbd
mov eax, dword [esi]
cmp byte [eax + 0x8c5], 0
jne 0x526bbd
mov ecx, dword [0x6a9f00]
fst dword [esp + 0x10]
fcomp dword [ecx + 0x6ec]
mov edi, dword [eax + 0x784]
fnstsw ax
test ah, 0x44
jnp 0x526ba7
fld dword [ecx + 0x6ec]
push ecx
fstp dword [esp]
call fcn.005af410
fstp dword [esp + 0x14]
add esp, 4
fld dword [esp + 0x10]
push ecx
mov eax, 0x22
fstp dword [esp]
mov ecx, edi
call fcn.00515020
fldz
cmp dword [esi + 0x68], 0
jg 0x526d00
mov eax, dword [esi]
cmp byte [eax + 0x8c5], 0
jne 0x526c1b
mov ecx, dword [0x6a9f00]
fst dword [esp + 0x10]
fcomp dword [ecx + 0x4b0]
mov edi, dword [eax + 0x784]
fnstsw ax
test ah, 0x44
jnp 0x526c05
fld dword [ecx + 0x4b0]
push ecx
fstp dword [esp]
call fcn.005af410
fstp dword [esp + 0x14]
add esp, 4
fld dword [esp + 0x10]
push ecx
mov eax, 0x17
fstp dword [esp]
mov ecx, edi
call fcn.00515020
jmp 0x526c1d
fstp st(0)
mov eax, dword [esi + 0x10]
cdq
sub eax, edx
mov edi, eax
mov eax, dword [esi + 0x14]
cdq
sub eax, edx
mov ebx, eax
sar edi, 1
add edi, dword [esi + 8]
sar ebx, 1
add ebx, dword [esi + 0xc]
cmp byte [esi + 0xb8], 0
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], ebx
je 0x526c61
mov ecx, dword [esi + 0x1c]
mov edx, dword [esi + 4]
push 0x7f
push 1
push 1
push 0x73
push ebx
push edi
push ecx
push edx
call fcn.0041d8a0
jmp 0x526c84
mov eax, dword [esi + 0x1c]
mov ecx, dword [esi + 4]
push 0xff
push 1
push 1
push 0x73
push ebx
push edi
push eax
push ecx
jmp fcn.007d714f
fild dword [esp + 0x14]
mov edx, dword [esi]
mov eax, dword [edx + 0x820]
mov esi, dword [eax]
push 5
push 0x61a80
sub esp, 8
fstp dword [esp + 4]
fild dword [esp + 0x20]
fstp dword [esp]
call fcn.00518a70
mov esi, dword [ebp + 8]
mov eax, dword [esi + 4]
mov ecx, esi
mov dword [eax + 0x5540], 0xc
mov dword [eax + 0x5544], 4
mov dword [eax + 0x5548], 0xfffffffa
call fcn.00530510
mov ecx, dword [esi]
call fcn.004538f0
test al, al
je 0x526d02
mov ecx, dword [esi + 4]
mov edx, dword [ecx + 0x160]
mov ecx, dword [esp + 0x10]
push edx
mov eax, ebx
call fcn.00429db0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
fstp st(0)
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x528310
Capabilities:
Packed with generic packer

Disassembly:
sub esp, 8
push ebx
push esi
push edi
mov edi, eax
mov eax, dword [edi + 0x28]
cmp eax, 0x20
jne 0x5284a5
fld dword [0x679678]
fcomp dword [edi + 0x2c]
fnstsw ax
test ah, 0x41
jmp loc.007af6fd
cmp eax, 0x21
jne 0x52854b
mov esi, dword [edi + 0x68]
cmp esi, 0x28
mov eax, esi
jle 0x5284d5
push 3
mov ecx, 0x28
push 0x14
push 0xffffffffffffff88
lea edx, [ecx + 0x5a]
call fcn.00511c40
mov dword [esp + 0x1c], eax
fild dword [esp + 0x1c]
jmp 0x5284ed
push 2
xor ecx, ecx
push 0
push 0x14
lea edx, [ecx + 0x1e]
call fcn.00511c40
mov dword [esp + 0x1c], eax
fild dword [esp + 0x1c]
add esp, 0xc
fstp dword [edi + 0x84]
cmp esi, 0x1e
jne 0x528513
fld dword [0x679388]
push ecx
fstp dword [esp]
push 0
push 3
push str.anim_landing
call fcn.00528b00
cmp dword [edi + 0x68], 0
jne 0x528757
fldz
push ecx
fstp dword [edi + 0x84]
mov dword [edi + 0x28], 0x24
fld dword [0x679388]
fstp dword [esp]
push 0xa
push 0
push str.anim_dizzy
call fcn.00528b00
pop edi
pop esi
pop ebx
add esp, 8
ret
cmp eax, 0x22
jne 0x528684
cmp dword [edi + 0x68], 0x96
jne 0x52856b
push 0x5d
push 0x17
lea edx, [eax + 0x53]
mov esi, edi
call fcn.005322c0
cmp dword [edi + 0x68], 0
jne 0x528757
cmp eax, 0x23
jne 0x52871a
mov esi, dword [edi + 0x68]
cmp esi, 0x28
mov eax, esi
jle 0x5286b4
push 3
mov ecx, 0x28
push 0x14
push 0xffffffffffffff88
lea edx, [ecx + 0x5a]
call fcn.00511c40
mov dword [esp + 0x1c], eax
fild dword [esp + 0x1c]
jmp 0x5286cc
push 2
xor ecx, ecx
push 0
push 0x14
lea edx, [ecx + 0x1e]
call fcn.00511c40
mov dword [esp + 0x1c], eax
fild dword [esp + 0x1c]
add esp, 0xc
fstp dword [edi + 0x84]
cmp esi, 0x1e
jne 0x5286f2
fld dword [0x679388]
push ecx
fstp dword [esp]
push 0x14
push 3
push str.anim_landing
call fcn.00528b00
cmp dword [edi + 0x68], 0
jne 0x528757
fldz
mov esi, 0x14
mov eax, edi
fstp dword [edi + 0x84]
mov dword [edi + 0x28], 0x26
call fcn.0052f2e0
pop edi
pop esi
pop ebx
add esp, 8
ret
cmp eax, 0x24
jne 0x528757
mov edx, dword [edi]
mov eax, dword [edx + 0x820]
mov ecx, dword [eax + 8]
mov eax, dword [edi + 0x118]
and eax, 0xffff
lea edx, [eax + eax*4]
mov eax, dword [ecx]
shl edx, 5
cmp dword [eax + edx + 0x5c], 1
jle 0x528757
mov esi, 0x14
mov eax, edi
mov dword [edi + 0x28], 0x25
call fcn.0052f2e0
pop edi
pop esi
pop ebx
add esp, 8
ret

Function at 0x529a30
Capabilities:
Check http status code

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2c
push ebx
mov ebx, dword [ebp + 8]
mov eax, dword [ebx + 0x24]
cmp eax, 0xc
push esi
push edi
je 0x529edc
cmp eax, 0x14
jmp fcn.007ae316
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x52a470
Capabilities:
Packed with generic packer

Disassembly:
push ecx
push ebx
mov ebx, eax
mov eax, dword [ebx + 0x24]
cmp eax, 0xc
push esi
je 0x52a576
cmp eax, 0x14
je 0x52a576
cmp eax, 0x16
je 0x52a576
cmp eax, 0x17
je 0x52a576
cmp eax, 0x20
je 0x52a576
jmp loc.007bba85
pop esi
pop ebx
pop ecx
ret

Function at 0x52aa40
Capabilities:
Packed with generic packer

Disassembly:
push ecx
push ebx
push edi
mov eax, esi
call fcn.0052a610
test al, al
jne 0x52ad26
mov ecx, dword [esi]
mov eax, dword [esi + 0x118]
test eax, eax
mov edx, dword [ecx + 0x820]
mov edx, dword [edx + 8]
je 0x52ac94
movzx ecx, ax
cmp ecx, dword [edx + 8]
jae 0x52ac94
lea ebx, [ecx + ecx*4]
shl ebx, 5
add ebx, dword [edx]
cmp dword [ebx + 0x9c], eax
jne 0x52ac94
mov edi, dword [esi + 0x28]
cmp edi, 0x14
jl 0x52aa98
cmp edi, 0x1c
jle 0x52aaf6
cmp edi, 0x49
je 0x52aaf6
cmp edi, 0x35
je 0x52aaf6
cmp edi, 0x3b
je 0x52aaf6
mov eax, dword [esi + 0x24]
cmp eax, 0x16
je 0x52aaf6
cmp eax, 0xc
je 0x52aaf1
cmp edi, 0x20
je 0x52aaf1
cmp edi, 0x36
je 0x52aaf1
mov ecx, esi
call fcn.005346a0
cmp eax, 0xffffffff
jne 0x52aaf1
cmp edi, 0xc
je 0x52aaf1
cmp edi, 0x3a
je 0x52aaf1
push str._ground
call fcn.004732c0
test al, al
je 0x52aaf6
mov eax, ebx
call fcn.004738d0
fmul dword [esi + 0x11c]
jmp 0x52ab12
fld dword [esi + 0x34]
jmp 0x52ab12
fld dword [esi + 0x34]
mov eax, esi
fstp dword [esp + 8]
call fcn.0052ef10
test al, al
je 0x52ab16
fld dword [esp + 8]
fmul qword [0x679630]
fstp dword [esp + 8]
mov ecx, esi
call fcn.0052bee0
test al, al
jne 0x52ab30
cmp dword [esi + 0x28], 0x28
je 0x52ab30
fld dword [esi + 0x2c]
fsub dword [esp + 8]
jmp 0x52ab37
fld dword [esi + 0x2c]
fadd dword [esp + 8]
jmp 0x79f132
mov eax, dword [esi + 0x28]
cmp eax, 0xc
je 0x52ace6
cmp eax, 0x20
je 0x52ace6
mov eax, dword [esi + 0x24]
cmp eax, 8
je 0x52ace6
cmp eax, 9
je 0x52ace6
cmp eax, 0xd
je 0x52ace6
cmp eax, 0x12
je 0x52ace6
cmp eax, 0xe
je 0x52ace6
cmp eax, 0x10
je 0x52ace6
cmp eax, 0xb
jne 0x52acd0
cmp byte [esi + 0xbd], 0
jne 0x52ace6
mov eax, dword [esi + 0x48]
test eax, eax
jl 0x52acdc
cmp eax, 2
jle 0x52ace6
cmp eax, 6
jl 0x52ad26
cmp eax, 8
jg 0x52ad26
fld dword [esi + 0x34]
mov eax, esi
fstp dword [esp + 8]
call fcn.0052ef10
test al, al
je 0x52ad06
fld dword [esp + 8]
fmul qword [0x679630]
fstp dword [esp + 8]
mov ecx, esi
call fcn.0052bee0
fld dword [esi + 0x2c]
test al, al
je 0x52ad1f
fadd dword [esp + 8]
fstp dword [esi + 0x2c]
pop edi
pop ebx
pop ecx
ret
fsub dword [esp + 8]
fstp dword [esi + 0x2c]
pop edi
pop ebx
pop ecx
ret
Function at 0x52b340
Capabilities:
Check http status code

Disassembly:
mov eax, dword [edi + 4]
sub esp, 8
add dword [edi + 0x3c], 0xffffffff
mov eax, dword [eax + 0xa0]
push esi
jne 0x52b415
call fcn.005af400
test eax, eax
jne 0x52b415
cmp byte [edi + 0xba], al
je 0x52b415
cmp dword [edi + 0x24], 0x19
je 0x52b415
mov eax, dword [edi + 4]
call fcn.00413a40
test al, al
jne 0x52b415
fldz
mov ecx, dword [edi]
fstp dword [esp + 8]
call fcn.004538c0
test al, al
je 0x52b3bd
fld dword [0x679800]
sub esp, 8
fstp dword [esp + 4]
fld dword [0x67959c]
fstp dword [esp]
call fcn.00511cb0
fstp dword [esp + 0x10]
add esp, 8
cmp dword [edi + 0x24], 0x17
jne 0x52b3d1
mov eax, dword [edi]
mov esi, 0x46
call fcn.00453630
jmp 0x52b403
cmp byte [edi + 0x50], 0
je 0x52b3e1
push ecx
mov ecx, dword [edi]
mov eax, 0xc
jmp 0x52b3f7
mov ecx, dword [edi]
cmp byte [ecx + 0x8be], 0
push ecx
mov eax, 0xd
jne 0x52b3f7
mov eax, 0xb
fld dword [esp + 0xc]
fstp dword [esp]
call fcn.00453650
mov eax, 0x3e8
call fcn.005af400
add eax, 0x1f4
mov dword [edi + 0x3c], eax
mov eax, dword [edi + 0xb4]
test eax, eax
jle 0x52b43e
add eax, 0xffffffff
mov dword [edi + 0xb4], eax
jne 0x52b43e
mov eax, edi
call fcn.00532350
push 0x3a
push 0x6a
push 0x4b
mov eax, edi
call fcn.005321f0
mov eax, dword [edi + 0xac]
test eax, eax
jle 0x52b45a
add eax, 0xffffffff
mov dword [edi + 0xac], eax
jne 0x52b45a
mov esi, edi
call fcn.0052f050
mov eax, dword [edi + 0xb0]
test eax, eax
jle 0x52b476
add eax, 0xffffffff
mov dword [edi + 0xb0], eax
jne 0x52b476
mov eax, edi
call fcn.00532570
cmp dword [edi + 0x28], 0xe
jne 0x52b488
mov esi, edi
call fcn.00528ec0
pop esi
add esp, 8
ret
cmp dword [edi + 0xb4], 0
jg 0x52b4c3
cmp dword [edi + 0xb0], 0
jg 0x52b4c3
mov eax, edi
call fcn.0052b110
mov eax, edi
call fcn.0052ad30
mov eax, edi
call fcn.0052f4c0
push edi
call fcn.0052f870
mov esi, edi
call fcn.0052fa20
mov eax, edi
call fcn.0052b280
cmp dword [edi + 0x24], 0x19
jne 0x52b4d0
mov eax, edi
call fcn.00536080
cmp byte [edi + 0xec], 0
jne 0x52b551
mov eax, dword [edi + 0x28]
cmp eax, 1
je 0x52b551
cmp eax, 2
je 0x52b551
cmp eax, 3
je 0x52b551
cmp dword [edi + 0x6c], 0xfffffffc
je 0x52b551
cmp byte [edi + 0xba], 0
mov eax, dword [edi + 0x24]
sete cl
cmp eax, 0xc
je 0x52b508
cmp eax, 0x16
jne 0x52b514
cmp dword [edi + 0xc8], 0xc8
jl 0x52b518
test cl, cl
je 0x52b551
cmp eax, 0x13
mov esi, 1
jne 0x52b525
lea esi, [eax - 9]
cmp dword [edi + 0xcc], 0x1f4
jl 0x52b536
mov esi, 0x14
mov eax, 5
call fcn.005af400
test eax, eax
jne 0x52b551
push esi
mov eax, 9
mov esi, edi
call fcn.005317c0
pop esi
add esp, 8
ret
Function at 0x52fb40
Capabilities:
Packed with generic packer

Disassembly:
push 0xffffffffffffffff
push 0x64f598
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1c
push ebx
push ebp
mov ebp, dword [esp + 0x34]
cmp dword [ebp + 0x28], 0x28
push esi
push edi
mov esi, ecx
jne 0x52fb84
mov dword [ebp + 0x68], 1
mov ecx, dword [esp + 0x2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x28
ret 4
cmp byte [ebp + 0xbf], 0
jne 0x52fdee
mov edi, dword [esi + 0x1c]
mov ebx, dword [esi + 0x28]
mov edx, dword [ebp + 4]
push 3
call fcn.00408e40
test eax, eax
je 0x52fbea
cmp dword [ebp + 0x24], 0x11
je 0x52fbea
mov edi, ebp
call fcn.0052f440
cmp dword [ebp + 0x64], 0
jne 0x52fdee
mov eax, dword [ebp + 0x7c]
cmp eax, dword [esi + 0x28]
je 0x52fdee
mov dword [ebp + 0x64], 6
mov ecx, dword [esi + 0x28]
mov dword [ebp + 0x7c], ecx
mov ecx, dword [esp + 0x2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x28
ret 4
mov eax, ebp
call fcn.0052f250
mov ecx, dword [esi + 0x24]
cmp ecx, 0x14
je 0x52fc24
cmp ecx, 2
je 0x52fc24
cmp ecx, 0xf
je 0x52fc24
cmp ecx, 0xe
je 0x52fc24
cmp ecx, 0xc
je 0x52fc24
mov eax, dword [esi + 0x3c]
cmp eax, 0x2f
je 0x52fc24
cmp eax, 0x30
je 0x52fc24
cmp eax, 3
je 0x52fc24
cmp eax, 4
jne 0x52fc31
cmp byte [esi + 0x143], 0
je 0x52fdee
cmp ecx, 4
jne 0x52fc40
cmp dword [esi + 0x3c], 0
jne 0x52fdee
xor al, al
cmp ecx, 0x1b
mov ebx, 1
jne 0x52fc4e
mov al, bl
cmp ecx, 0xe
jne 0x52fc5c
cmp byte [esi + 0x143], 0
je 0x52fc60
test al, al
je 0x52fc7b
push esi
call fcn.004666a0
mov ecx, dword [esp + 0x2c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x28
ret 4
cmp dword [ebp + 0xac], 0
jle 0x52fc9c
mov edx, dword [ebp + 0x60]
and edx, 0x80000001
jns 0x52fc94
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, ebx
je 0x52fdee
jmp fcn.007a03e6
mov ecx, dword [esp + 0x2c]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x28
ret 4
Function at 0x530e30
Capabilities:
Packed with generic packer

Disassembly:
sub esp, 0x24
push ebx
push esi
mov ebx, eax
push edi
mov edi, dword [ebx + 0xc4]
test edi, edi
je 0x530fce
lea esi, [esp + 0x14]
mov ecx, ebx
call fcn.0052d9e0
fld dword [ebx + 0x2c]
fadd dword [esp + 0x24]
or esi, 0xffffffff
cmp edi, 1
fiadd dword [esp + 0x14]
fadd qword [0x6794d0]
fstp dword [esp + 0x10]
fld dword [ebx + 0x30]
fadd dword [esp + 0x28]
fiadd dword [esp + 0x18]
fadd dword [esp + 0x20]
fadd qword [0x679340]
fstp dword [esp + 0xc]
jne 0x530ec2
lea eax, [esp + 0x10]
push eax
push str.anim_cone
lea edi, [esp + 0x14]
mov esi, ebx
call fcn.005345f0
push 0xffffffffffffffff
push str.anim_cone
mov eax, ebx
call fcn.005331c0
push 0
push str.anim_hair
mov eax, ebx
call fcn.005331c0
mov esi, 8
jmp 0x530f7a
cmp edi, 2
jne 0x530eff
lea ecx, [esp + 0x10]
push ecx
push str.anim_bucket
lea edi, [esp + 0x14]
mov esi, ebx
call fcn.005345f0
push 0xffffffffffffffff
push str.anim_bucket
mov eax, ebx
call fcn.005331c0
push 0
push str.anim_hair
mov eax, ebx
call fcn.005331c0
mov esi, 9
jmp 0x530f7a
cmp edi, 3
jne 0x530f3c
lea edx, [esp + 0x10]
push edx
push str.zombie_football_helmet
lea edi, [esp + 0x14]
mov esi, ebx
call fcn.005345f0
push 0xffffffffffffffff
push str.zombie_football_helmet
mov eax, ebx
call fcn.005331c0
push 0
push str.anim_hair
mov eax, ebx
call fcn.005331c0
mov esi, 0xa
jmp 0x530f7a
cmp edi, 4
jne 0x530f69
lea eax, [esp + 0x10]
push eax
push str.Zombie_digger_hardhat
lea edi, [esp + 0x14]
mov esi, ebx
call fcn.005345f0
push str.Zombie_digger_hardhat
mov ecx, ebx
call fcn.00533200
mov esi, 0xe
jmp 0x530f7a
cmp edi, 7
jne 0x530f7a
test byte [esp + 0x34], 0x10
jne 0x530fc4
call fcn.00527f20
test byte [esp + 0x34], 0x10
jne 0x530fc4
cmp esi, 0xffffffff
je 0x530fc4
mov eax, dword [ebx + 0x20]
fld dword [esp + 0xc]
mov ecx, dword [ebx]
mov ecx, dword [ecx + 0x820]
push esi
mov esi, dword [ecx]
add eax, 1
push eax
sub esp, 8
fstp dword [esp + 4]
fld dword [esp + 0x20]
fstp dword [esp]
jmp 0x7a5326
mov dword [ebx + 0xc4], 0
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4
Function at 0x79a020
Capabilities:
Packed with generic packer

Disassembly:
pushal
mov ecx, dword [esp + 0x24]
mov dword [0x79a01c], ecx
push 2
push 4
mov ecx, dword [esp + 0x34]
push ecx
mov ecx, dword [esp + 0x34]
push ecx
mov ecx, dword [0x6a9ec0]
mov ecx, dword [ecx + 0x768]
call fcn.0040cb10
mov dword [eax + 0x10], 0xffffff00
mov dword [eax + 0x14], 0xffffff00
mov ecx, dword [esp + 0x24]
mov dword [eax + 0x68], ecx
popal
ret 0xc

Function at 0x79c214
Capabilities:
Packed with generic packer

Disassembly:
pushal
mov dword [0x79a01c], 3
push 0
push 4
push 0x3c
mov eax, 0x1c2
call fcn.005af400
add eax, 0x50
push eax
mov ecx, dword [0x6a9ec0]
mov ecx, dword [ecx + 0x768]
call fcn.0040cb10
mov dword [eax + 0x10], 0xffffff00
mov dword [eax + 0x14], 0xffffff00
mov dword [eax + 0x68], 3
popal
ret

Function at 0x79c300
Capabilities:
Packed with generic packer

Disassembly:
mov dword [0x7aa008], 0x78
mov dword [0x7aa00c], 0x6e
mov dword [0x7aa014], 0x6a7498
mov dword [0x7aa010], 0x79c530
call fcn.007aa130
mov edi, 0
mov eax, edi
xor ebx, ebx
cmp eax, 0xe
jl 0x79c343
sub eax, 0xe
add ebx, 1
jmp 0x79c336
imul eax, eax, 0x20
imul ebx, ebx, 0x78
sub eax, 5
mov dword [0x7c4ffc], eax
mov dword [0x7c4ff8], ebx
add eax, 0x8c
add ebx, 0x3c
mov dword [0x7aa008], ebx
mov dword [0x7aa00c], eax
mov dword [0x7aa014], 0x6a7498
mov ecx, edi
cmp ecx, dword [0x79c53e]
jge 0x79c396
imul ecx, ecx, 0xc
add ecx, 0x79c542
mov dword [0x7aa010], ecx
jmp 0x79c3d0
mov eax, 0
sub ecx, dword [0x79c53e]
mov ebx, eax
imul ebx, ebx, 0x20
cmp byte [ebx + 0x7bf006], 1
je 0x79c3bf
sub ecx, 1
cmp ecx, 0
jl 0x79c3c4
add eax, 1
jmp 0x79c3a1
mov ecx, dword [ebx + 0x7bf000]
mov dword [0x7aa010], ecx
call fcn.007aa130
pushal
cmp dword [0x7c4fe8], 1
jne 0x79c43d
mov edx, dword [0x6a9ec0]
mov edx, dword [edx + 0x320]
mov eax, dword [0x7c4ffc]
add eax, 0x7d
mov ebx, dword [0x7c4ff8]
add ebx, 0x16
cmp dword [edx + 0xe4], eax
jl 0x79c43d
add eax, 0x1e
cmp dword [edx + 0xe4], eax
jg 0x79c43d
cmp dword [edx + 0xe0], ebx
jl 0x79c43d
add ebx, 0x1e
cmp dword [edx + 0xe0], ebx
jg 0x79c43d
xor byte [edi + 0x7c5100], 1
push dword [0x7c4ffc]
add dword [esp], 0x7b
push dword [0x7c4ff8]
add dword [esp], 0x14
mov eax, dword [0x7aa004]
mov ebx, dword [0x6a7b4c]
cmp byte [edi + 0x7c5100], 1
jne 0x79c46b
mov ebx, dword [0x6a71b4]
call fcn.00587150
popal
mov eax, 0xffffffff
mov ecx, 0
add eax, 1
mov ebx, eax
imul ebx, ebx, 0x20
cmp dword [ebx + 0x7bf000], 0
je 0x79c49e
cmp byte [ebx + 0x7bf006], 0
jne 0x79c47b
add ecx, 1
jmp 0x79c47b
add ecx, dword [0x79c53e]
add edi, 1
cmp edi, ecx
jl 0x79c332
ret