joyce8/EMBER2024-capa huggingface dataset:
Function at 0x414e16
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x50
push ebx
push esi
push edi
lea ecx, [ebp - 0x20]
call fcn.0066b08d
lea ecx, [ebp - 0x20]
call fcn.0066c325
lea ecx, [ebp - 0x20]
call fcn.00675b81
push 0x6dd830
lea ecx, [ebp - 0x20]
call fcn.0066c033
lea ecx, [ebp - 0x20]
call fcn.0066c54d
push eax
lea eax, [ebp - 2]
push 2
push eax
mov ecx, 0x6dd900
call fcn.0066c54d
push eax
mov ecx, 0x6dd930
call fcn.0066c54d
mov ebx, 0x6dd948
push eax
mov ecx, ebx
call fcn.0066c54d
mov edi, dword [sym.imp.kernel32.dll_GetPrivateProfileStringA]
push eax
call edi
lea eax, [ebp - 2]
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.0066b0d0
pop ecx
pop ecx
lea ecx, [ebp - 0x50]
call fcn.0066b7d3
test eax, eax
jne 0x414ff7
push 0x6dd900
lea ecx, [ebp - 0x50]
call fcn.0066c518
test eax, eax
jne 0x414ff7
movsx ax, byte [ebp - 2]
mov esi, 0x6de2f0
push eax
mov ecx, esi
call fcn.00417081
lea ecx, [ebp - 0x20]
call fcn.0066c54d
push eax
lea eax, [ebp - 8]
push 4
push eax
mov ecx, 0x6dd8e8
call fcn.0066c54d
push eax
mov ecx, 0x6dd918
call fcn.0066c54d
push eax
mov ecx, ebx
call fcn.0066c54d
push eax
call edi
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.0066b0d0
pop ecx
pop ecx
lea ecx, [ebp - 0x38]
call fcn.0066b7d3
test eax, eax
jne 0x414fef
push 0x6dd8e8
lea ecx, [ebp - 0x38]
call fcn.0066c518
test eax, eax
jne 0x414fef
lea eax, [ebp - 0x38]
mov ecx, esi
push eax
call fcn.00417092
lea ecx, [ebp - 0x20]
call fcn.0066c54d
push eax
push 1
mov ecx, 0x6dd8b8
call fcn.0066c54d
mov ebx, 0x6dd8d0
push eax
mov ecx, ebx
call fcn.0066c54d
mov esi, dword [sym.imp.kernel32.dll_GetPrivateProfileIntA]
push eax
call esi
mov edi, 0x6de088
push eax
mov ecx, edi
call fcn.00534b4f
lea ecx, [ebp - 0x20]
call fcn.0066c54d
push eax
push 0x10
mov ecx, 0x6dd8a0
call fcn.0066c54d
push eax
mov ecx, ebx
call fcn.0066c54d
push eax
call esi
push eax
mov ecx, edi
call sym.Battle_Realms_F.exe_public:_void___thiscall_BattleScriptInterface::SetEventFunction_void____cdecl___class_BattleScriptInterface___enum_BSEvent__unsigned_int__unsigned_int__
lea ecx, [ebp - 0x20]
call fcn.0066c54d
push eax
push 0x28
mov ecx, 0x6dd888
call fcn.0066c54d
push eax
mov ecx, ebx
call fcn.0066c54d
push eax
call esi
push eax
mov ecx, edi
call fcn.00534b7e
lea ecx, [ebp - 0x20]
call fcn.0066c54d
push eax
push 5
mov ecx, 0x6dd870
call fcn.0066c54d
push eax
mov ecx, ebx
call fcn.0066c54d
push eax
call esi
push eax
mov ecx, edi
call fcn.00534b99
lea ecx, [ebp - 0x38]
call fcn.0066b24c
push 1
pop esi
jmp 0x414ff9
lea ecx, [ebp - 0x38]
call fcn.0066b24c
xor esi, esi
lea ecx, [ebp - 0x50]
call fcn.0066b24c
lea ecx, [ebp - 0x20]
call fcn.0066b24c
mov eax, esi
pop edi
pop esi
pop ebx
leave
ret
Function at 0x416067
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x74
push ebx
push esi
push edi
push 1
pop ebx
mov ecx, 0x73cac8
push ebx
call fcn.004481f7
lea ecx, [ebp - 0x74]
mov dword [ebp - 8], eax
call fcn.005df9e1
push dword [ebp - 8]
lea ecx, [ebp - 0x74]
call fcn.005dfa15
push dword [ebp - 8]
call fcn.005e12db
pop ecx
mov ecx, eax
push ebx
mov dword [ebp - 4], ecx
call fcn.005da578
fld dword [0x6b2558]
push ecx
mov esi, eax
fstp dword [esp]
push ebx
lea edi, [esi + 0x174]
call dword [0x858638]
push 6
push 5
push ebx
mov dword [ebp - 0x1c], eax
call dword [0x858630]
add esp, 0x14
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x20], eax
call fcn.0066d0aa
fld dword [0x6b24c0]
mov ecx, dword [ebp - 4]
and dword [esi + 0x380], 0
and dword [esi + 0x378], 0
fstp dword [esi + 0x37c]
call fcn.005da649
call sub.kernel32.dll_GetTickCount
mov esi, eax
push ebx
push esi
mov ecx, edi
mov dword [ebp - 0x10], esi
call fcn.00598cb7
fldz
push ecx
fstp dword [esp]
fld dword [0x6b2538]
push ecx
mov ecx, 0x72c2f0
fstp dword [esp]
push 0x16a
call fcn.005367c1
and dword [ebp - 0xc], 0
mov ecx, edi
call fcn.005990b6
test eax, eax
jne 0x416175
cmp dword [ebp - 0xc], eax
jne 0x416175
mov eax, dword [ebp - 0x10]
sub eax, esi
cmp eax, 0x157c
jae 0x416175
cmp dword [ebp + 8], 0
push dword [ebp - 4]
je 0x416165
call fcn.00415434
pop ecx
mov dword [ebp - 0xc], eax
jmp 0x41616b
call fcn.00415434
pop ecx
call sub.kernel32.dll_GetTickCount
mov dword [ebp - 0x10], eax
jmp 0x416135
call sub.kernel32.dll_GetTickCount
xor ecx, ecx
mov dword [ebp - 0x18], eax
cmp ecx, 0x1f4
jae 0x416220
and dword [ebp - 0x10], ecx
mov dword [ebp - 0x14], eax
fild qword [ebp - 0x14]
fstp dword [ebp - 0x10]
xor esi, esi
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], esi
push ecx
fild qword [ebp - 0x28]
mov ecx, edi
fstp dword [ebp + 8]
fld dword [ebp + 8]
fsub dword [ebp - 0x10]
fdiv dword [0x6b2564]
fsubr dword [0x6b2420]
fstp dword [ebp + 8]
fld dword [ebp + 8]
fstp dword [esp]
push ebx
call fcn.0059a36b
mov ecx, edi
call fcn.0059a5d6
test eax, eax
jbe 0x416201
cmp esi, 0x1a
je 0x4161f5
cmp esi, 0x1b
je 0x4161f5
push esi
mov ecx, edi
call fcn.0059a1dc
fld dword [ebp + 8]
push ecx
mov ecx, eax
fstp dword [esp]
push ebx
call fcn.0059a36b
mov ecx, edi
inc esi
call fcn.0059a5d6
cmp esi, eax
jb 0x4161d4
push dword [ebp - 4]
call fcn.00415434
pop ecx
call sub.kernel32.dll_GetTickCount
mov ecx, eax
sub ecx, dword [ebp - 0x18]
cmp ecx, 0x1f4
jb 0x416197
fld dword [0x6b24c0]
push ecx
fstp dword [esp]
push dword [ebp - 0x1c]
call dword [0x858638]
push 6
push 5
push dword [ebp - 0x20]
call dword [0x858630]
add esp, 0x14
lea ecx, [ebp - 0x74]
call fcn.005dfa7e
push dword [ebp - 8]
call fcn.005e1245
cmp dword [ebp - 0xc], 0
pop ecx
je 0x41625c
xor ebx, ebx
lea ecx, [ebp - 0x74]
call fcn.005df9ff
pop edi
mov eax, ebx
pop esi
pop ebx
leave
ret
Function at 0x4173d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ecx
push edi
mov dword [ebp - 4], ecx
call fcn.00417504
push 0xa80
call fcn.00668826
mov edi, eax
pop ecx
test edi, edi
je 0x417501
push ebx
push esi
xor ebx, ebx
lea esi, [edi + 0x10]
push ebx
mov ecx, 0x73fea0
call fcn.00556fcb
mov ecx, dword [eax]
mov dword [esi - 0x10], ecx
fld dword [eax + 0x44]
fstp dword [esi - 8]
fld dword [eax + 0x48]
fstp dword [esi]
fld dword [eax + 0x4c]
fstp dword [esi - 4]
fld dword [eax + 0x50]
fstp dword [esi + 4]
fld dword [eax + 0x34]
fstp dword [esi + 8]
mov ecx, dword [eax + 0x2c]
mov dword [esi + 0xc], ecx
fld dword [eax + 0x54]
fstp dword [esi + 0x10]
fld dword [eax + 0x58]
fstp dword [esi + 0x14]
fld dword [eax + 0x5c]
fstp dword [esi + 0x18]
fld dword [eax + 0x38]
fstp dword [esi + 0x20]
fld dword [eax + 0x60]
fstp dword [esi + 0x1c]
mov ecx, dword [eax + 0x30]
mov dword [esi + 0x24], ecx
fld dword [eax + 0x64]
fstp dword [esi + 0x28]
fld dword [eax + 0x68]
fstp dword [esi + 0x2c]
fld dword [eax + 0x6c]
fstp dword [esi + 0x30]
fld dword [eax + 0x3c]
fstp dword [esi + 0x38]
fld dword [eax + 0x70]
fstp dword [esi + 0x34]
fld dword [eax + 0x74]
fstp dword [esi + 0x3c]
fld dword [eax + 0x78]
fstp dword [esi + 0x40]
fld dword [eax + 0x7c]
fstp dword [esi + 0x44]
fld dword [eax + 0x80]
fstp dword [esi + 0x48]
fld dword [eax + 0x40]
fstp dword [esi + 0x4c]
mov ecx, dword [eax + 0x84]
mov dword [esi + 0x5c], ecx
mov ecx, dword [eax + 0x88]
mov dword [esi + 0x50], ecx
fld dword [eax + 0x90]
fstp dword [esi + 0x54]
mov ecx, dword [eax + 0x8c]
sub ecx, 0
je 0x4174be
dec ecx
jne 0x4174c5
and dword [esi + 0x58], 0
jmp 0x4174c5
mov dword [esi + 0x58], 1
mov eax, dword [eax + 4]
sub eax, 0
je 0x4174d6
dec eax
jne 0x4174dd
and dword [esi - 0xc], 0
jmp 0x4174dd
mov dword [esi - 0xc], 1
inc ebx
add esi, 0x70
cmp ebx, 0x18
jb 0x4173f9
mov ecx, dword [ebp - 4]
push 0x18
push edi
call fcn.005a0ccd
push edi
call fcn.00668898
pop ecx
push 1
pop eax
pop esi
pop ebx
pop edi
leave
ret
Function at 0x43dc24
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
and dword [0x73cba4], 0
push ebx
push esi
mov esi, 0x73e890
push edi
mov ecx, esi
call fcn.0046fc63
push eax
mov ecx, esi
call fcn.0046fc1a
mov ecx, eax
call fcn.00533142
push 1
sub eax, 0
pop ebx
mov esi, 0x73cac8
je 0x43dc76
dec eax
dec eax
je 0x43dc71
dec eax
je 0x43dc6c
dec eax
dec eax
jne 0x43dc7f
push ebx
push 4
jmp 0x43dc78
push ebx
push 2
jmp 0x43dc78
push ebx
push 3
jmp 0x43dc78
push ebx
push ebx
mov ecx, esi
call fcn.00447ae7
mov ecx, 0x71871c
call fcn.0066b7d3
test eax, eax
jne 0x43dcf7
cmp dword [0x795564], 8
jb 0x43dcf7
call fcn.00548277
test eax, eax
jne 0x43dcf7
call fcn.0067f5ad
sub esp, 0x18
mov ecx, esp
push 0x806
call fcn.0066b1cd
sub esp, 0x18
mov eax, esp
push str.C:ProjectsSamuraiCodeGameInit.cpp
push eax
call fcn.0066b0d0
pop ecx
lea eax, [ebp - 0x18]
pop ecx
push str.SaveGame_Load_Failed:_Interface2D__r_n
push eax
call fcn.0066b0d0
pop ecx
pop ecx
mov ecx, eax
call fcn.0066c552
push eax
call fcn.0067f4fe
add esp, 0x34
lea ecx, [ebp - 0x18]
call fcn.0066b24c
call sub.kernel32.dll_IsDebuggerPresent
test eax, eax
je 0x43dd5a
int3
mov edi, 0x6de0e0
mov ecx, edi
call fcn.0046fc63
test eax, eax
je 0x43dd12
mov ecx, edi
call fcn.0046fc63
cmp eax, ebx
jne 0x43dd4e
mov ecx, 0x71871c
call fcn.0066b7d3
test eax, eax
je 0x43dd4e
cmp dword [0x73caf0], 0
jne 0x43dd4e
fldz
push ecx
mov ecx, esi
fstp dword [esp]
call fcn.00447d1f
mov ecx, 0x73f470
call fcn.005986cc
push eax
mov ecx, esi
call fcn.004472bf
mov dword [0x73e35c], ebx
push ebx
call fcn.004cf824
pop ecx
pop edi
pop esi
pop ebx
leave
ret
push ebx
call fcn.006a16bc

Function at 0x442d88
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x104
lea eax, [ebp + 0xc]
push esi
push eax
push 1
push 0
push dword [ebp + 0xc]
push dword [ebp + 8]
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
mov esi, eax
test esi, esi
jne 0x442de1
lea eax, [ebp + 8]
mov dword [ebp + 8], 0x104
push eax
lea eax, [ebp - 0x104]
push eax
push esi
push dword [ebp + 0xc]
call dword [sym.imp.advapi32.dll_RegQueryValueA]
lea eax, [ebp - 0x104]
push eax
push dword [ebp + 0x10]
call dword [sym.imp.kernel32.dll_lstrcpyA]
push dword [ebp + 0xc]
call dword [sym.imp.advapi32.dll_RegCloseKey]
mov eax, esi
pop esi
leave
ret
Function at 0x442de6
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20c
push ebx
push esi
push edi
xor ebx, ebx
push dword [ebp + 0xc]
mov dword [ebp - 4], ebx
push ebx
push ebx
push dword [ebp + 8]
push str.open
push ebx
call dword [sym.imp.shell32.dll_ShellExecuteA]
cmp eax, 0x20
jg 0x442ed2
lea eax, [ebp - 0x20c]
mov esi, closesocket
push eax
push str..htm
push esi
call fcn.00442d88
add esp, 0xc
test eax, eax
jne 0x442ed9
mov edi, dword [sym.imp.kernel32.dll_lstrcatA]
lea eax, [ebp - 0x20c]
push str._shellopencommand
push eax
call edi
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x20c]
push eax
push esi
call fcn.00442d88
add esp, 0xc
test eax, eax
jne 0x442ed9
lea eax, [ebp - 0x20c]
push str.__1_
push eax
call fcn.006a1c40
mov esi, eax
pop ecx
cmp esi, ebx
pop ecx
jne 0x442ead
lea eax, [ebp - 0x20c]
push 0x6c79ec
push eax
call fcn.006a1c40
mov esi, eax
pop ecx
cmp esi, ebx
pop ecx
jne 0x442ead
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.kernel32.dll_lstrlenA]
lea esi, [ebp + eax - 0x20d]
jmp 0x442eaf
mov byte [esi], bl
push 0x6c79e8
push esi
call edi
push dword [ebp + 8]
push esi
call edi
push dword [ebp + 0xc]
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.kernel32.dll_WinExec]
cmp eax, 0x1f
jbe 0x442ed9
mov dword [ebp - 4], 1
mov eax, dword [ebp - 4]
pop edi
pop esi
pop ebx
leave
ret 8

Function at 0x44488f
Capabilities:
Log keystrokes via input method manager

Disassembly:
sub esp, 0x1c
push ebx
push ebp
push esi
push edi
push dword [esp + 0x30]
call sub.imm32.dll_ImmGetContext
xor ebx, ebx
mov esi, eax
cmp dword [0x740690], ebx
mov dword [esp + 0x10], esi
mov dword [0x740658], ebx
mov word [0x740330], bx
mov byte [0x740550], bl
mov word [0x740348], bx
jne 0x4448f9
test byte [esp + 0x39], 8
jne 0x4448f9
lea eax, [esp + 0x14]
push eax
call fcn.004447f3
pop ecx
push eax
mov ecx, 0x740678
call fcn.0066c4be
lea ecx, [esp + 0x14]
call fcn.0066b24c
call fcn.0044482d
mov dword [0x74033c], eax
test byte [esp + 0x38], 8
mov ebp, dword [sym.imp.kernel32.dll_MultiByteToWideChar]
push 1
pop edi
je 0x44494e
push 4
push 0x740658
push 8
push esi
call sub.imm32.dll_ImmGetCompositionStringA
push edi
mov dword [0x740344], eax
mov eax, dword [0x740658]
push 0x740330
xor ecx, ecx
push 2
push 0x7406a4
mov cl, ah
push ebx
push 0x3b5
mov byte [0x7406a5], cl
mov byte [0x7406a4], al
call ebp
mov word [eax*2 + 0x740330], bx
test byte [esp + 0x39], 8
je 0x4449a5
mov edi, 0x104
mov esi, 0x740550
push edi
push esi
push 0x800
push dword [esp + 0x1c]
call sub.imm32.dll_ImmGetCompositionStringA
push edi
push 0x740348
push eax
push esi
push ebx
push 0x3b5
mov dword [0x740340], eax
mov byte [eax + 0x740550], bl
call ebp
mov word [eax*2 + 0x740348], bx
mov dword [0x740690], ebx
call fcn.00444a06
push dword [0x740690]
jmp 0x4449c3
cmp dword [0x740344], ebx
jbe 0x4449cb
call fcn.00444a89
push esi
push dword [esp + 0x34]
call sub.imm32.dll_ImmReleaseContext
mov dword [0x740690], edi
push edi
call fcn.00444cb9
pop ecx
jmp 0x4449d5
push esi
push dword [esp + 0x34]
call sub.imm32.dll_ImmReleaseContext
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret
Function at 0x44fa29
Capabilities:
Terminate process

Disassembly:
xor eax, eax
cmp dword [ecx + 0x34], eax
je 0x44fa80
cmp dword [ecx + 0x40], eax
jne 0x44fa3a
cmp dword [ecx + 0x3c], eax
je 0x44fa80
call fcn.006744c1
test eax, eax
jne 0x44fa80
call fcn.0067f5ad
sub esp, 0x18
mov ecx, esp
push 0x192
call fcn.0066b1cd
sub esp, 0x18
mov eax, esp
push str.C:ProjectsSamuraiCodeLog.cpp
push eax
call fcn.0066b0d0
pop ecx
pop ecx
push str.Error_closing_Log_File__
call fcn.0067f4fe
add esp, 0x34
call sub.kernel32.dll_IsDebuggerPresent
test eax, eax
je 0x44fa81
int3
ret
push 1
call fcn.006a16bc
Function at 0x450a02
Capabilities:
Accept command line arguments
Check mutex on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
push ebx
push esi
push edi
xor edi, edi
push dword [0x6c7dc4]
push edi
push edi
call dword [sym.imp.kernel32.dll_CreateMutexA]
cmp eax, edi
mov dword [0x6de374], eax
je 0x450bc0
call dword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0xb7
je 0x450bc0
mov eax, dword [0x6c7dc0]
mov ebx, dword [sym.imp.user32.dll_FindWindowA]
push eax
push eax
call ebx
cmp eax, edi
je 0x450a58
push eax
call dword [sym.imp.user32.dll_SetForegroundWindow]
jmp 0x450bc0
mov esi, dword [sym.imp.user32.dll_RegisterWindowMessageA]
push str.Close_Previous_Battle_Realms_Autoplay_instance
call esi
push edi
push str.Battle_Realms_Autoplay
mov dword [ebp - 4], eax
call ebx
cmp eax, edi
je 0x450a80
push edi
push edi
push dword [ebp - 4]
push eax
call dword [sym.imp.user32.dll_SendMessageA]
push dword [ebp + 8]
call fcn.00450bc9
cmp eax, edi
pop ecx
mov dword [0x740724], eax
je 0x450bc0
push str.QueryCancelAutoPlay
call esi
mov dword [0x6de370], eax
call dword [sym.imp.kernel32.dll_GetCommandLineA]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.0066b0d0
pop ecx
mov esi, 0x6c7dec
pop ecx
lea eax, [ebp - 0x1c]
push esi
push eax
call fcn.0066b0d0
pop ecx
lea eax, [ebp - 0x1c]
pop ecx
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0x34]
call fcn.0066bada
mov ebx, eax
lea ecx, [ebp - 0x1c]
neg ebx
sbb bl, bl
inc bl
call fcn.0066b24c
test bl, bl
je 0x450af4
push 1
push edi
lea ecx, [ebp - 0x34]
call fcn.0066bf79
jmp 0x450ab9
lea ecx, [ebp - 0x4c]
call fcn.0066b08d
lea eax, [ebp - 0x4c]
push edi
push eax
lea ecx, [ebp - 0x34]
call fcn.00675a9d
lea ecx, [ebp - 0x4c]
call fcn.0066c552
push eax
call fcn.00674d1d
pop ecx
call fcn.0066b267
push dword [0x740724]
call dword [sym.imp.user32.dll_SetForegroundWindow]
push dword [0x740724]
call dword [sym.imp.user32.dll_SetActiveWindow]
push dword [0x740724]
call dword [sym.imp.user32.dll_BringWindowToTop]
push dword [0x740724]
mov dword [0x74072c], edi
push dword [ebp + 8]
call fcn.0041626b
mov esi, dword [sym.imp.user32.dll_SystemParametersInfoA]
pop ecx
test eax, eax
pop ecx
je 0x450b85
push edi
push edi
push edi
push 0x11
call esi
call fcn.0043b445
mov ebx, 0x6de2f0
mov ecx, ebx
call fcn.00464616
cmp eax, 0xc
je 0x450b85
call fcn.004bf472
jmp 0x450b72
call fcn.00436c14
call fcn.004169a3
push 2
push dword [0x740724]
call dword [sym.imp.user32.dll_GetWindow]
cmp eax, edi
je 0x450ba8
push eax
call dword [sym.imp.user32.dll_BringWindowToTop]
push edi
push edi
push 1
push 0x11
call esi
lea ecx, [ebp - 0x4c]
call fcn.0066b24c
lea ecx, [ebp - 0x34]
call fcn.0066b24c
pop edi
pop esi
xor eax, eax
pop ebx
leave
ret 0x10
Function at 0x451ee1
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, ecx
push edi
call fcn.00451e01
test eax, eax
jne 0x451f5e
push edi
mov ecx, esi
call fcn.00451e14
test eax, eax
jne 0x451f5e
cmp dword [ebp + 0xc], eax
je 0x451f5e
push edi
lea eax, [ebp - 0x18]
push str.MaterialManager::GetMaterialData___failed_to_load_Material:__d.
push eax
call fcn.0066b125
call fcn.0067f5ad
sub esp, 0xc
mov ecx, esp
push 0x5d
call fcn.0066b1cd
sub esp, 0x18
mov eax, esp
push str.C:ProjectsSamuraiCodeMaterialManager.cpp
push eax
call fcn.0066b0d0
pop ecx
pop ecx
lea ecx, [ebp - 0x18]
call fcn.0066c552
push eax
call fcn.0067f4fe
add esp, 0x34
call sub.kernel32.dll_IsDebuggerPresent
test eax, eax
je 0x451f6b
int3
mov eax, dword [esi + edi*4 + 0x700]
pop edi
pop esi
leave
ret 8
push 1
call fcn.006a16bc
push ebx
push esi
lea esi, [ecx + 0x380]
mov ebx, 0xe0
mov eax, dword [esi - 0x380]
test eax, eax
je 0x451f90
push eax
call fcn.0063ace6
pop ecx
mov eax, dword [esi]
test eax, eax
je 0x451f9d
push eax
call fcn.0063557b
pop ecx
and dword [esi - 0x380], 0
and dword [esi], 0
and dword [esi + 0x380], 0
add esi, 4
dec ebx
jne 0x451f7f
pop esi
pop ebx
ret
Function at 0x465b42
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ecx + 0x20]
mov ecx, dword [ebp + 8]
xor edx, edx
lea ecx, [eax + ecx*4]
mov eax, dword [ecx]
test eax, eax
je 0x465b7f
cmp eax, dword [ebp + 0xc]
je 0x465b62
mov edx, eax
mov eax, dword [eax + 0x10]
jmp 0x465b52
test edx, edx
jne 0x465b6d
mov edx, dword [eax + 0x10]
mov dword [ecx], edx
jmp 0x465b73
mov ecx, dword [eax + 0x10]
mov dword [edx + 0x10], ecx
and dword [eax + 0x10], 0
or dword [eax + 0xc], 0xffffffff
pop ebp
ret 8
call fcn.0067f5ad
sub esp, 0x18
mov ecx, esp
push 0xf6
call fcn.0066b1cd
sub esp, 0x18
mov eax, esp
push str.C:ProjectsSamuraiCodeObjectGridTree.cpp
push eax
call fcn.0066b0d0
pop ecx
pop ecx
push str.ObjectGridTree::RemoveObject___failed.
call fcn.0067f4fe
add esp, 0x34
call sub.kernel32.dll_IsDebuggerPresent
test eax, eax
je 0x465bbe
int3
push 1
call fcn.006a16bc
Function at 0x4668bf
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
push ebx
xor ebx, ebx
push esi
push edi
mov dword [ebp - 8], ecx
mov dword [ebp - 4], ebx
push 0x38
mov ecx, 0x73fea0
call fcn.0055720f
mov eax, dword [eax + 0x1c]
cmp eax, 0xffffffff
mov dword [ebp - 0xc], eax
je 0x466a1a
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov edi, dword [eax + ecx*4 + 0x160]
lea esi, [eax + ecx*4 + 0x160]
cmp edi, ebx
je 0x466913
mov ecx, edi
call fcn.005975ee
push edi
call fcn.00668898
pop ecx
mov dword [esi], ebx
push 0x1a8
call fcn.00668826
cmp eax, ebx
pop ecx
je 0x46692b
mov ecx, eax
call fcn.005973c4
jmp 0x46692d
xor eax, eax
push dword [ebp - 0xc]
mov ecx, 0x73fea0
mov dword [esi], eax
call fcn.005571da
lea ecx, [ebp - 0x40]
mov edi, eax
call fcn.0066b08d
add edi, 0x1c
lea ecx, [ebp - 0x40]
push edi
call fcn.0066c4be
mov ecx, 0x6de0e0
call fcn.005b32ca
mov ecx, dword [esi]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x44]
mov dword [ebp - 0x44], 0x70d290
push eax
call fcn.0059769a
test eax, eax
je 0x466a2c
mov eax, dword [ebp - 4]
sub eax, ebx
je 0x4669b6
dec eax
je 0x46699c
dec eax
jne 0x4669cf
mov eax, dword [ebp - 8]
push 1
push 1
push ebx
fld1
push ecx
mov ecx, dword [eax + 0x168]
fstp dword [esp]
jmp 0x4669ca
fld dword [0x6b23b4]
mov eax, dword [ebp - 8]
push 1
push 1
push ebx
push ecx
mov ecx, dword [eax + 0x164]
fstp dword [esp]
jmp 0x4669ca
mov eax, dword [ebp - 8]
push 1
push 1
push ebx
fldz
push ecx
mov ecx, dword [eax + 0x160]
fstp dword [esp]
call fcn.00598a98
mov ecx, dword [esi]
call fcn.00599d19
mov ecx, dword [esi]
mov dword [ebp - 0xc], eax
call fcn.0059a58c
cmp dword [ebp - 0xc], eax
jae 0x466a12
mov edi, 0x73f470
push 1
push ebx
mov ecx, edi
call fcn.006418a4
mov ecx, dword [esi]
push eax
push dword [ebp - 0xc]
call fcn.00598740
push 0xffffffffffffffff
push ebx
push ebx
mov ecx, edi
call fcn.006418a4
mov ecx, dword [esi]
push eax
call fcn.00597df6
lea ecx, [ebp - 0x40]
call fcn.0066b24c
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jb 0x4668d0
pop edi
pop esi
pop ebx
leave
ret
lea ecx, [ebp - 0x40]
call fcn.0066b279
push eax
lea eax, [ebp - 0x24]
push str.Rice_Model_Initialization_Failed_:___s_
push eax
call fcn.0066b0d0
call fcn.0067f5ad
sub esp, 0xc
mov ecx, esp
push 0xb2
call fcn.0066b1cd
sub esp, 0x18
mov eax, esp
push str.C:ProjectsSamuraiCodeObjectManager.cpp
push eax
call fcn.0066b0d0
pop ecx
pop ecx
lea ecx, [ebp - 0x24]
call fcn.0066c552
push eax
call fcn.0067f4fe
add esp, 0x34
call sub.kernel32.dll_IsDebuggerPresent
test eax, eax
je 0x466a96
int3
push 1
call fcn.006a16bc
Function at 0x46bccd
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, ecx
push edi
call fcn.0046bb2c
cmp eax, 1
jb 0x46bdfb
push edi
mov ecx, esi
call fcn.0046bc13
mov ecx, eax
test ecx, ecx
mov dword [ebp - 4], ecx
je 0x46bdfb
call fcn.0041a0a1
test eax, eax
jne 0x46bdfb
mov ebx, 0x73e890
push edi
mov ecx, ebx
call fcn.0046fc1a
mov ecx, eax
call fcn.00533142
sub eax, 0
je 0x46bd91
dec eax
dec eax
je 0x46bd8a
dec eax
je 0x46bd83
dec eax
dec eax
je 0x46bd7c
call fcn.0067f5ad
sub esp, 0x18
mov ecx, esp
push 0x595
call fcn.0066b1cd
sub esp, 0x18
mov eax, esp
push str.C:ProjectsSamuraiCodePeasantManager.cpp
push eax
call fcn.0066b0d0
pop ecx
pop ecx
push str.Invalid_Clan_Type.
call fcn.0067f4fe
add esp, 0x34
call sub.kernel32.dll_IsDebuggerPresent
test eax, eax
je 0x46bd75
int3
push 1
call fcn.006a16bc
push 0x33
pop eax
push 0x3b
jmp 0x46bd96
push 0x18
pop eax
push 0x20
jmp 0x46bd96
push 0x28
pop eax
push 0x2e
jmp 0x46bd96
push 5
pop eax
push 6
pop esi
mov ecx, dword [ebp - 4]
push edi
push eax
call fcn.0041cc7d
test eax, eax
je 0x46bdfb
push esi
push edi
mov ecx, 0x6f7e38
call fcn.004221d2
mov esi, dword [ebp - 4]
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
mov ecx, esi
push eax
call fcn.0041ac8b
mov ecx, ebx
call fcn.0046fc63
cmp edi, eax
jne 0x46bdee
add esi, 0x28
lea edi, [ebp - 0x14]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
fld dword [ebp - 0x10]
push ecx
fstp dword [esp]
fld dword [ebp - 0x14]
push ecx
fstp dword [esp]
call fcn.004d26b3
mov edi, dword [ebp + 8]
pop ecx
pop ecx
push edi
mov ecx, ebx
call fcn.004703eb
push 1
pop eax
jmp 0x46bdfd
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 4