joyce8/EMBER2024-capa huggingface dataset:
Function at 0x656dd0
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffc4
xor edx, edx
push ebx
push esi
push edi
mov ebx, eax
mov dword [ebp - 0x34], 0x702f34
mov dword [ebp - 0x30], esp
mov eax, 0x56498f
mov dword [ebp - 0x38], eax
mov word [ebp - 0x2c], 0
mov dword [ebp - 0x20], edx
mov ecx, dword fs:[0]
mov dword [ebp - 0x3c], ecx
lea eax, [ebp - 0x3c]
mov dword fs:[0], eax
call fcn.0065a2b0
mov esi, eax
cmp byte [0x702d75], 0
jne 0x656e3c
mov word [ebp - 0x2c], 8
mov edx, str.script_editor
mov eax, 0x7bfad0
call fcn.0069669c
inc dword [ebp - 0x20]
dec dword [ebp - 0x20]
inc byte [0x702d75]
mov ecx, dword [ebx + 0x30]
mov edx, 0x702d8e
push ecx
lea eax, [ebp - 4]
mov word [ebp - 0x2c], 0x14
call fcn.0069669c
inc dword [ebp - 0x20]
mov edx, dword [0x7bfad0]
mov ecx, dword [eax]
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
dec dword [ebp - 0x20]
lea eax, [ebp - 4]
mov edx, 2
call fcn.00696870
mov ecx, dword [ebx + 0x34]
mov edx, 0x702d93
push ecx
lea eax, [ebp - 8]
mov word [ebp - 0x2c], 0x20
call fcn.0069669c
inc dword [ebp - 0x20]
mov edx, dword [0x7bfad0]
mov ecx, dword [eax]
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
dec dword [ebp - 0x20]
lea eax, [ebp - 8]
mov edx, 2
call fcn.00696870
mov ecx, dword [ebx + 0x38]
mov edx, 0x702d97
push ecx
lea eax, [ebp - 0xc]
mov word [ebp - 0x2c], 0x2c
call fcn.0069669c
inc dword [ebp - 0x20]
mov edx, dword [0x7bfad0]
mov ecx, dword [eax]
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
dec dword [ebp - 0x20]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.00696870
mov ecx, dword [ebx + 0x3c]
mov edx, 0x702d9d
push ecx
lea eax, [ebp - 0x10]
mov word [ebp - 0x2c], 0x38
call fcn.0069669c
inc dword [ebp - 0x20]
mov edx, dword [0x7bfad0]
mov ecx, dword [eax]
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
dec dword [ebp - 0x20]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.00696870
mov ecx, dword [ebx + 0x304]
mov edx, str.content
mov eax, dword [ecx + 0x230]
push eax
lea eax, [ebp - 0x14]
mov word [ebp - 0x2c], 0x44
call fcn.0069669c
inc dword [ebp - 0x20]
lea ecx, [ebp - 0x14]
mov edx, 0x7bfad0
mov eax, esi
call fcn.0065a2bc
dec dword [ebp - 0x20]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.00696870
cmp byte [ebx + 0x217], 3
sete cl
and ecx, 1
mov edx, 0x702da4
push ecx
lea eax, [ebp - 0x18]
mov word [ebp - 0x2c], 0x50
call fcn.0069669c
inc dword [ebp - 0x20]
mov edx, dword [0x7bfad0]
mov ecx, dword [eax]
mov eax, esi
mov ebx, dword [eax]
call dword [ebx + 0xc]
dec dword [ebp - 0x20]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.00696870
mov ecx, dword [ebp - 0x3c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x5ec5c9
Capabilities:
Encode data using xor

Disassembly:
xor ch, ch
invalid
sti
fcmovnbe st(0), st(2)
add al, 0x66
mov bh, 0xaf
and edx, dword [0x41277865]
daa
inc ecx
ja 0x5ec57c
outsb dx, byte [esi]
je 0x5ec574
pushfd
imul ebp, dword [ecx + 0x77], 0xffffffa3
out dx, al
dec esp
mov dword [0xef724cee], eax
jb 0x5ec5d4
lodsb al, byte [esi]
sti
ror byte [ecx + 0x56573555], cl
jno 0x5ec655
ja 0x5ec5e3
arpl word [edi], ax
test dword [eax - 0x5c8899b2], 0x86d7e763
push ebp
xor eax, 0xdf5ce82f
cmc
dec edi
xor eax, 0x30a81bf9
popal
mov ebx, ds
pop esi
or byte [eax], bl
out 0x35, eax
adc dword [ecx - 0x4bae02ab], 0xffffffa9
cwde
push 0xf3652f22
aad 0xef
and ch, byte [edi]
aad 0xef
bound esi, qword [edi - 0xc]
push ecx
mov bh, 0xa7
mov ebx, ds
pop edx
or byte [eax], bl
pop ecx
xor eax, 0xa03a0321
movsd dword es:[edi], dword [esi]
in al, dx
and ch, byte [bx + di + 0x2127]
ja 0x5ec5e0
push ebp
mov bh, 1
jge 0x5ec6ac
xor eax, 0xb75589f9
std
jl 0x5ec61c
xor eax, 0x35fd89f9
add dword [ebp - 0x75fe48ab], 0xffffffbd
push esp
mov eax, dword [0xf2d441d8]
mov ebp, 0x41d8a154
aam 0xf2
in eax, 0xe6
and byte [ebx + 0x63c662ee], 0x87
ja 0x5ec60c
out dx, al
ljmp 0x5eee:0x62eea376
arpl word [edi], ax
cmc
sub dl, 0x82
xchg dword cs:[ecx - 0x49], ebp
scasd eax, dword es:[edi]
and edx, dword [0xed277865]
bound esi, qword [edi - 0x5d]
lodsb al, byte [esi]
sti
push es
mov dl, byte [ebp + 0x35]
clc
retf 0x65f2
Function at 0x5ec76c
Capabilities:
Encode data using xor

Disassembly:
mov dword [0x7d01b755], eax
push 0x35
stc
mov dword [ebp - 0x49], edx
arpl word [edi - 0x115c8899], ax
xchg ch, bh
jp 0x5ec6b5
lahf
out dx, al
bound ecx, qword [eax]
sbb byte [esi + 0x35], dl
arpl word [ebx - 0x6648180b], bx
cdq
push 0x64
ja 0x5ec63c
out dx, al
xor eax, 0xb755b383
stosd dword es:[edi], eax
mov ebx, ds
xor dword [eax], edx
fst qword [ecx + 0x35]
stc
pop ebx
jo 0x5ec63d
ja 0x5ec69f
arpl word [edi], ax
imul esi, dword [edi + 0x651523af], 0x62ed2778
ja 0x5ec664
mov dword [0x8a06fbac], eax
push ebp
xor eax, 0x65f2caf8
rep lodsb al, byte [esi]
out dx, al
bound esi, qword [edi + 0x23]
adc eax, 0xe2277844
bound esi, qword [edi - 0x5d]
sbb dword [esi - 0x73956351], esi
ja 0x5ec684
mov dword [0x6a0ea4ee], eax
push ebp
out dx, al
movsb byte es:[edi], byte [esi]
push cs
push 0x55
xor eax, 0xd11524f9
js 0x5ec714
in al, 0x62
ja 0x5ec694
outsb dx, byte [esi]
je 0x5ec68c
pushfd
imul esp, dword [ebx + 0x77], 0xffffffa3
out dx, al
int3
mov dword [0x102cccee], eax
jecxz 0x5ec6e1
enter 0xffffffffffffe5a3, 0xffffffffffffffe6
jno 0x5ec6a8
out dx, al
bound eax, qword [eax + 0x7c]
pop edi
xor eax, 0x756e89f9
pop ebx
jne 0x5ec76b
pushfd
push 0xffffffffffffff8a
ja 0x5ec6b8
mov dword [0xbcc8e2ee], eax
out dx, al
loop 0x5ec6e0
mov esp, 0xa378e6e5
in eax, 0xe6
js 0x5ec6c0
out dx, al
bound edi, qword [edx + ecx - 0x5d0c9a1d]
out dx, al
bound esi, qword [edi - 0x24]
adc dword [ebp - 7], 0xffffff89
push ebp
loop 0x5ec6f8
mov dword [ebp - 0x1e], edx
enter 0xffffffffffffe1ef, 0xffffffffffffffe6
out dx, eax
loope 0x5ec719
scasb al, byte es:[edi]
mov dword [0xc9f762ee], eax
inc ebp
mov dword fs:[0xe47762ee], eax
stc
mov esp, 0x7d752f08
insb byte es:[edi], dx
lodsd eax, dword [esi]
imul esp, dword [edx], 0xffffffa9
and ah, bl
bound esi, qword [edi - 0x5d]
sub eax, 0xeea3fba7
bound esi, qword [edi + 0x76]
in eax, dx
bound esi, qword [edi - 0x5d]
sub eax, 0xeea4fba7
sti
movsb byte es:[edi], byte [esi]
out dx, al
bound esi, qword [edi - 2]
cmpsd dword gs:[esi], dword es:[edi]
sti
pop ebx
jo 0x5ec7c5
ja 0x5ec75f
arpl word [edi], ax
arpl word [edi], ax
test dword [eax - 0x5c8899ba], 0x70f34d0e
pop eax
xor eax, 0x62eea4f9
ja 0x5ec7e5
imul eax, dword [edx], 0xfffffffe
mov dword [ebp + 0x62], edx
ja 0x5ec72c
out dx, al
loope 0x5ec70e
wait
arpl di, bp
or eax, dword [edi - 0x3507caab]
out dx, al
repz ret
invalid
ljmp 0xf930:0x8f4ff4a3
Function at 0x5f4622
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2bc
push esi
mov esi, dword [ebp + 8]
test esi, esi
je 0x5f463d
add esi, 0x1000
lea eax, [ebp - 0x2bc]
push edx
push 0x1c
push eax
push esi
call dword [edx + 0x124b9862]
pop edx
test eax, eax
je 0x5f470f
cmp dword [ebp - 0x2ac], 0x1000
jne 0x5f46fe
test dword [ebp - 0x2a8], 1
jne 0x5f46fe
and dword [ebp - 0x2a8], 0x100
jne 0x5f46fe
push esi
push edx
push 4
push esi
call dword [edx + 0x122d2c46]
pop edx
pop esi
test eax, eax
je 0x5f46a1
jmp 0x5f46fe
cmp word [esi], 0x5a4d
jne 0x5f46fe
mov eax, esi
push ebx
mov ebx, dword [esi + 0x3c]
add eax, ebx
pop ebx
cmp dword [eax], 0x4550
jne 0x5f46fe
lea eax, [ebp - 0x28c]
push edx
push 0x28a
push eax
push esi
call dword [edx + 0x122d2b5a]
pop edx
test eax, eax
je 0x5f46fe
lea eax, [ebp - 0x28c]
push eax
call fcn.005f457e
test eax, eax
jne 0x5f46f7
jmp 0x5f46fe
mov eax, esi
jmp 0x5f470f
mov esi, dword [ebp - 0x2b0]
add esi, dword [ebp - 0x2bc]
jmp 0x5f463d
pop esi
leave
ret 4
Function at 0x402650
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, edx
test cl, cl
je 0x402664
mov edx, dword [ebp + 8]
mov ecx, eax
pop ebp
jmp fcn.004c4d70
pop ebp
ret

Function at 0x403260
Capabilities:
Terminate process

Disassembly:
push esi
mov esi, ecx
mov ecx, dword [0x5d8004]
mov eax, dword [esi + 8]
mov edx, dword [ecx]
push dword [eax]
call dword [edx + 4]
cmp eax, 4
je 0x403284
xor edx, edx
mov ecx, str.CmvCapillaryRise::Initialize:CapillaryRise_must_come_from_soil_unit
call fcn.004c4d70
mov ecx, dword [0x5d8004]
mov eax, dword [esi + 0xc]
mov edx, dword [ecx]
push dword [eax]
call dword [edx + 4]
pop esi
cmp eax, 4
je 0x4032a6
xor edx, edx
mov ecx, str.CmvCapillaryRise::Initialize:CapillaryRise_must_go_to_soil_or_groundwater_unit
jmp fcn.004c4d70
ret
Function at 0x40dd50
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x1c
cmp dword [ecx + 0x38], 0
push ebx
push esi
push edi
mov dword [esp + 0xc], ecx
je 0x40de36
mov esi, dword [ebp + 0x10]
mov ebx, esi
mov edx, dword [ebp + 0xc]
mov edi, edx
mov eax, dword [ebp + 8]
mov dword [esp + 0x10], eax
test esi, esi
jl 0x40de25
jg 0x40dd90
test edx, edx
je 0x40de25
nop dword [eax]
call fcn.0040ff70
mov esi, eax
mov eax, edx
mov dword [esp + 0x14], eax
test eax, eax
jl 0x40dde4
jg 0x40dda7
test esi, esi
je 0x40dde4
cmp ebx, eax
jg 0x40ddb7
jl 0x40ddb1
cmp edi, esi
jae 0x40ddb7
mov esi, edi
mov dword [esp + 0x14], ebx
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
push esi
push eax
mov eax, dword [ecx + 0x20]
push dword [eax]
call fcn.00521e70
mov ecx, dword [esp + 0x18]
add esp, 0xc
sub edi, esi
sbb ebx, dword [esp + 0x14]
mov eax, dword [ecx + 0x30]
sub dword [eax], esi
mov eax, dword [ecx + 0x20]
add dword [eax], esi
jmp 0x40de09
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov edx, dword [ecx]
movzx eax, byte [eax]
push eax
call dword [edx + 0xc]
cmp eax, 0xffffffff
je 0x40de1f
mov ecx, dword [esp + 0xc]
add edi, 0xffffffff
mov esi, 1
adc ebx, 0xffffffff
add dword [esp + 0x10], esi
test ebx, ebx
jg 0x40dd90
jl 0x40de1f
test edi, edi
jne 0x40dd90
mov edx, dword [ebp + 0xc]
mov esi, dword [ebp + 0x10]
sub edx, edi
mov eax, edx
sbb esi, ebx
mov edx, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [ecx + 0x20]
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 0x10]
mov dword [esp + 0x20], esi
mov edx, dword [eax]
lea eax, [ecx + 0x30]
mov dword [esp + 0x24], edi
mov dword [esp + 0x1c], edx
mov dword [esp + 0x18], eax
test edx, edx
je 0x40de5e
mov eax, dword [eax]
mov edx, dword [eax]
jmp 0x40de64
xor edx, edx
mov dword [esp + 0x18], eax
mov eax, edx
cdq
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], edx
test edi, edi
jl 0x40decc
jg 0x40de79
test esi, esi
je 0x40decc
test edx, edx
jl 0x40dec7
jg 0x40de83
test eax, eax
je 0x40dec7
cmp edi, edx
jg 0x40de97
jl 0x40de8d
cmp esi, eax
jae 0x40de97
mov eax, esi
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], edi
mov ebx, dword [ebp + 8]
push eax
push ebx
push dword [esp + 0x24]
call fcn.00521e70
mov eax, dword [esp + 0x24]
add esp, 0xc
mov edx, dword [esp + 0x14]
add ebx, edx
mov ecx, dword [esp + 0xc]
sub esi, edx
mov eax, dword [eax]
sbb edi, dword [esp + 0x10]
sub dword [eax], edx
mov eax, dword [ecx + 0x20]
add dword [eax], edx
jmp 0x40decf
mov ebx, dword [ebp + 8]
jmp 0x40ded9
mov ebx, dword [ebp + 8]
test edi, edi
jl 0x40def2
jg 0x40ded9
test esi, esi
je 0x40def2
mov eax, dword [ecx + 0x4c]
test eax, eax
je 0x40def2
push eax
push esi
push 1
push ebx
call fcn.005411d3
add esp, 0x10
sub esi, eax
sbb edi, 0
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
sub eax, esi
sbb edx, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
Function at 0x40e540
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
mov eax, dword [0x5d4090]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
mov esi, ecx
cmp ebx, 0xffffffff
jne 0x40e570
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0051fa69
mov esp, ebp
pop ebp
ret 4
mov eax, dword [esi + 0x20]
push edi
mov ecx, dword [eax]
test ecx, ecx
je 0x40e5ac
mov edx, dword [esi + 0x30]
mov edi, dword [edx]
lea eax, [edi + ecx]
cmp ecx, eax
jae 0x40e5ac
lea ecx, [edi - 1]
mov dword [edx], ecx
mov edx, dword [esi + 0x20]
mov esi, dword [edx]
lea ecx, [esi + 1]
mov dword [edx], ecx
mov byte [esi], bl
pop edi
pop esi
mov eax, ebx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0051fa69
mov esp, ebp
pop ebp
ret 4
cmp dword [esi + 0x4c], 0
je 0x40e692
mov edi, dword [esi + 0xc]
lea eax, [esi + 0x3c]
cmp dword [edi], eax
jne 0x40e5d4
mov edx, dword [esi + 0x54]
mov ecx, dword [esi + 0x50]
sub edx, ecx
mov dword [edi], ecx
mov eax, dword [esi + 0x1c]
mov dword [eax], ecx
mov eax, dword [esi + 0x2c]
mov dword [eax], edx
mov ecx, dword [esi + 0x38]
test ecx, ecx
jne 0x40e607
push dword [esi + 0x4c]
movsx eax, bl
push eax
call fcn.0052ec43
add esp, 8
or ecx, 0xffffffff
cmp eax, ecx
cmovne ecx, ebx
pop edi
pop esi
mov eax, ecx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0051fa69
mov esp, ebp
pop ebp
ret 4
lea eax, [ebp - 0x2c]
mov byte [ebp - 0x28], bl
mov edx, dword [ecx]
push eax
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x27]
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [esi + 0x40]
push eax
call dword [edx + 0x1c]
sub eax, 0
je 0x40e665
sub eax, 1
je 0x40e665
sub eax, 2
jne 0x40e692
push dword [esi + 0x4c]
push dword [ebp - 0x28]
call fcn.00405430
add esp, 8
or ecx, 0xffffffff
test al, al
cmovne ecx, ebx
pop edi
pop esi
mov eax, ecx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0051fa69
mov esp, ebp
pop ebp
ret 4
mov edi, dword [ebp - 0x2c]
lea eax, [ebp - 0x24]
sub edi, eax
je 0x40e682
push dword [esi + 0x4c]
push edi
push 1
push eax
call fcn.005411d3
add esp, 0x10
cmp edi, eax
jne 0x40e692
lea eax, [ebp - 0x28]
mov byte [esi + 0x3d], 1
cmp dword [ebp - 0x30], eax
jne 0x40e597
mov ecx, dword [ebp - 4]
or eax, 0xffffffff
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0051fa69
mov esp, ebp
pop ebp
ret 4
Function at 0x40ef70
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x57b570
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push esi
push edi
mov eax, dword [0x5d4090]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0x10], eax
push 8
mov dword [eax], vtable.std::basic_streambuf_char__struct_std::char_traits_char__.0
call fcn.0051fa77
mov esi, eax
push 1
mov dword [ebp - 4], 0
call fcn.00506466
mov dword [esi + 4], eax
add esp, 8
mov eax, dword [ebp - 0x10]
lea edi, [eax + 0x14]
lea ecx, [eax + 0x18]
lea edx, [eax + 0x24]
mov dword [eax + 0x34], esi
lea ebx, [eax + 4]
mov dword [eax + 0xc], ebx
lea esi, [eax + 8]
mov dword [eax + 0x10], esi
mov dword [eax + 0x1c], edi
mov dword [eax + 0x20], ecx
mov dword [eax + 0x2c], edx
add eax, 0x28
mov dword [ebp - 0x14], ebx
mov ebx, dword [ebp - 0x10]
mov dword [ebx + 0x30], eax
mov ebx, dword [ebp - 0x14]
mov dword [esi], 0
mov dword [ecx], 0
mov dword [eax], 0
mov eax, dword [ebp - 0x10]
mov dword [ebx], 0
mov dword [edi], 0
mov dword [edx], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x40f980
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [0x5d4090]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, ecx
cmp dword [esi + 0x38], 0
je 0x40fa3a
cmp byte [esi + 0x3d], 0
je 0x40fa3a
mov eax, dword [esi]
push edi
push 0xffffffffffffffff
call dword [eax + 0xc]
cmp eax, 0xffffffff
je 0x40fa28
mov ecx, dword [esi + 0x38]
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 4]
push eax
mov edx, dword [ecx]
lea eax, [ebp - 0x24]
push eax
lea eax, [esi + 0x40]
push eax
call dword [edx + 0x20]
sub eax, 0
je 0x40f9f0
sub eax, 1
je 0x40f9f4
sub eax, 2
jne 0x40fa28
mov byte [esi + 0x3d], al
mov al, 1
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0051fa69
mov esp, ebp
pop ebp
ret
mov byte [esi + 0x3d], 0
mov edi, dword [ebp - 0x28]
lea eax, [ebp - 0x24]
sub edi, eax
je 0x40fa11
push dword [esi + 0x4c]
push edi
push 1
push eax
call fcn.005411d3
add esp, 0x10
cmp edi, eax
jne 0x40fa28
cmp byte [esi + 0x3d], 0
pop edi
sete al
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0051fa69
mov esp, ebp
pop ebp
ret
pop edi
xor al, al
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0051fa69
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
mov al, 1
xor ecx, ebp
pop esi
call fcn.0051fa69
mov esp, ebp
pop ebp
ret

Function at 0x418930
Capabilities:
Terminate process

Disassembly:
push esi
mov esi, ecx
mov ecx, dword [0x5d8004]
mov eax, dword [esi + 0xc]
mov edx, dword [ecx]
push dword [eax]
call dword [edx + 4]
cmp eax, 4
je 0x41896a
mov ecx, dword [0x5d8004]
mov eax, dword [esi + 0xc]
mov edx, dword [ecx]
push dword [eax]
call dword [edx + 4]
cmp eax, 9
je 0x41896a
xor edx, edx
mov ecx, str.CmvSeepage::Initialize:_seepage_must_move_water_to_soil_or_groundwater_unit
pop esi
jmp fcn.004c4d70
pop esi
ret
Function at 0x427200
Capabilities:
Terminate process

Disassembly:
mov edx, 2
mov ecx, str.CGWRiverConnection::Initialize_PBJ_connection:_PBJ_can_only_be_used_in_Raven_w_Modflow_USG
jmp fcn.004c4d70
Function at 0x4394a0
Capabilities:
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x57d36d
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x5d4090]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
sub esp, 0x18
mov dword [ebp - 4], 0
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.00402f10
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x30]
sub esp, 0x18
mov esi, eax
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.00402f10
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0x24]
mov edx, dword [edi]
mov ecx, edi
push eax
call dword [edx + 0x68]
mov ecx, dword [ebp + 0x1c]
mov edi, eax
imul edi, esi
cmp ecx, 0x10
jb 0x439537
mov edx, dword [ebp + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43952d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43954c
push ecx
push edx
call fcn.0051faa7
add esp, 8
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x18
call fcn.0052eb21
int3
Function at 0x43c170
Capabilities:
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x57d53d
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push esi
mov eax, dword [0x5d4090]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
movsd qword [ebp - 0x20], xmm3
movsd qword [ebp - 0x18], xmm2
mov esi, ecx
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x10], esi
sub esp, 0x18
mov dword [ebp - 4], 0
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.00402f10
mov ecx, esi
call fcn.0043be30
movsd xmm0, qword [ebp - 0x18]
mov ecx, dword [ebp + 0x1c]
movsd qword [esi + 0x20], xmm0
movsd xmm0, qword [ebp - 0x20]
movsd qword [esi + 0x28], xmm0
movsd xmm0, qword [ebp + 0x20]
mov dword [esi], vtable.CBasicWeir.0
movsd qword [esi + 0x30], xmm0
cmp ecx, 0x10
jb 0x43c218
mov edx, dword [ebp + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43c20e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43c22c
push ecx
push edx
call fcn.0051faa7
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
ret 0x20
call fcn.0052eb21
int3

Function at 0x43c2d0
Capabilities:
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x57d56d
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push esi
mov eax, dword [0x5d4090]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
movsd qword [ebp - 0x20], xmm3
movsd qword [ebp - 0x18], xmm2
mov esi, ecx
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x10], esi
sub esp, 0x18
mov dword [ebp - 4], 0
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.00402f10
mov ecx, esi
call fcn.0043be30
movsd xmm0, qword [ebp - 0x18]
mov ecx, dword [ebp + 0x1c]
mov eax, dword [ebp + 0x30]
movsd qword [esi + 0x20], xmm0
movsd xmm0, qword [ebp - 0x20]
movsd qword [esi + 0x28], xmm0
movsd xmm0, qword [ebp + 0x20]
movsd qword [esi + 0x30], xmm0
movsd xmm0, qword [ebp + 0x28]
mov dword [esi], vtable.CSluiceGate.0
movsd qword [esi + 0x38], xmm0
mov dword [esi + 0x40], eax
cmp ecx, 0x10
jb 0x43c388
mov edx, dword [ebp + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43c37e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43c39c
push ecx
push edx
call fcn.0051faa7
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
ret 0x2c
call fcn.0052eb21
int3
Function at 0x43c430
Capabilities:
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x57d59d
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push esi
mov eax, dword [0x5d4090]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
movsd qword [ebp - 0x20], xmm3
movsd qword [ebp - 0x18], xmm2
mov esi, ecx
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x10], esi
sub esp, 0x18
mov dword [ebp - 4], 0
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.00402f10
mov ecx, esi
call fcn.0043be30
movsd xmm0, qword [ebp - 0x18]
mov ecx, dword [ebp + 0x1c]
mov eax, dword [ebp + 0x28]
movsd qword [esi + 0x20], xmm0
movsd xmm0, qword [ebp - 0x20]
movsd qword [esi + 0x28], xmm0
movsd xmm0, qword [ebp + 0x20]
mov dword [esi], vtable.COrifice.0
movsd qword [esi + 0x30], xmm0
mov dword [esi + 0x38], eax
cmp ecx, 0x10
jb 0x43c4de
mov edx, dword [ebp + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43c4d4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43c4f2
push ecx
push edx
call fcn.0051faa7
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
ret 0x24
call fcn.0052eb21
int3

Function at 0x43c5a0
Capabilities:
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x57d5cd
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push esi
mov eax, dword [0x5d4090]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
movsd qword [ebp - 0x20], xmm3
movsd qword [ebp - 0x18], xmm2
mov esi, ecx
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x10], esi
sub esp, 0x18
mov dword [ebp - 4], 0
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.00402f10
mov ecx, esi
call fcn.0043be30
movsd xmm0, qword [ebp - 0x18]
mov ecx, dword [ebp + 0x1c]
movsd qword [esi + 0x20], xmm0
movsd xmm0, qword [ebp - 0x20]
movsd qword [esi + 0x28], xmm0
movsd xmm0, qword [ebp + 0x20]
mov dword [esi], vtable.CBasicPump.0
movsd qword [esi + 0x30], xmm0
cmp ecx, 0x10
jb 0x43c648
mov edx, dword [ebp + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43c63e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43c65c
push ecx
push edx
call fcn.0051faa7
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
ret 0x20
call fcn.0052eb21
int3