joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5e4a40
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x716764
mov eax, dword [ebp + 8]
push eax
call fcn.00401720
add esp, 8
mov dword [ebp - 8], eax
mov ecx, 4
imul edx, ecx, 0
mov dword [edx + 0x1586430], 0x11d725c
cmp dword [ebp - 8], 0
jne 0x5e4a83
push str.Could_not_open_palette_file._n
call fcn.004017c0
add esp, 4
jmp 0x5e4acd
mov eax, dword [ebp - 8]
push eax
push 0x300
push 1
push 0x11d725c
call fcn.006b7750
add esp, 0x10
cmp eax, 0x300
je 0x5e4abf
push str.Error_reading_palette_file._n
call fcn.004017c0
add esp, 4
mov ecx, dword [ebp - 8]
push ecx
call fcn.00401700
add esp, 4
jmp 0x5e4acd
mov edx, dword [ebp - 8]
push edx
call fcn.00401700
add esp, 4
jmp 0x5e4b17
mov dword [ebp - 4], 0
jmp 0x5e4adf
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0x100
jge 0x5e4b17
call fcn.006b7a10
imul ecx, dword [ebp - 4], 3
mov byte [ecx + 0x11d725c], al
call fcn.006b7a10
imul edx, dword [ebp - 4], 3
mov byte [edx + 0x11d725d], al
call fcn.006b7a10
imul ecx, dword [ebp - 4], 3
mov byte [ecx + 0x11d725e], al
jmp 0x5e4ad6
mov esp, ebp
pop ebp
ret

Function at 0x5e6a70
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x717b43
call fcn.00401600
add esp, 4
push 0x7283bc
call fcn.005b4400
add esp, 4
call fcn.00494ab0
call fcn.0041a060
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
cwde
mov dword [ebp - 4], eax
push 0x7b
call dword [sym.imp.USER32.dll_GetKeyState]
movsx ecx, ax
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
and edx, 0xfffffffe
je 0x5e6ada
call fcn.00401b80
test eax, eax
jne 0x5e6acc
mov eax, 1
jmp 0x5e6b1e
call fcn.005f11b0
call fcn.00569180
xor eax, eax
jmp 0x5e6b1e
xor eax, eax
jne 0x5e6ae6
mov ecx, dword [ebp - 8]
and ecx, 0xfffffffe
je 0x5e6b04
call fcn.00401b80
test eax, eax
jne 0x5e6af6
mov eax, 1
jmp 0x5e6b1e
call fcn.005f11b0
call fcn.00556670
xor eax, eax
jmp 0x5e6b1e
push 1
call fcn.0049ba00
add esp, 4
test eax, eax
je 0x5e6b17
call fcn.004d1240
call fcn.0049b9d0
xor eax, eax
mov esp, ebp
pop ebp
ret
Function at 0x5f5030
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
cmp dword [0x11d7650], 0
je 0x5f509e
mov eax, dword [ebp + 8]
push eax
call fcn.0065bea0
add esp, 4
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 4]
push edx
push str.c:levels_d_d.nad
lea eax, [ebp - 0x24]
push eax
call fcn.0041e320
add esp, 0x10
mov ecx, dword [ebp + 8]
push ecx
call fcn.006b6c40
add esp, 4
mov edx, dword [ebp + 8]
mov byte [edx + eax - 3], 0x6e
push 1
lea eax, [ebp - 0x24]
push eax
call fcn.005f50b0
add esp, 8
push 0
mov ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0x24]
push edx
call dword [sym.imp.KERNEL32.dll_CopyFileA]
call fcn.005f0c70
mov esp, ebp
pop ebp
ret
Function at 0x64c130
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 0xc]
push eax
push str._read___d___n
call fcn.00495230
add esp, 8
mov ecx, dword [0x2797f10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
push 1
mov eax, dword [ebp + 8]
push eax
call fcn.006b7750
add esp, 0x10
cmp eax, dword [ebp + 0xc]
je 0x64c168
xor eax, eax
jmp 0x64c16d
mov eax, 1
pop ebp
ret

Function at 0x64cc50
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x2797f10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
push 1
mov edx, dword [ebp + 8]
push edx
call fcn.006cf670
add esp, 0x10
cmp eax, dword [ebp + 0xc]
je 0x64cc76
xor eax, eax
jmp 0x64cc7b
mov eax, 1
pop ebp
ret
Function at 0x64f7f0
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x118
push 0x8000
call fcn.0067ac30
add esp, 4
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
mov byte [ebp - 1], 0
mov ecx, dword [ebp + 8]
push ecx
push 0x7fff
mov edx, dword [ebp - 0x10]
push edx
push str.Groups
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileSectionA]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
movsx edx, byte [ecx]
test edx, edx
je 0x64f9cd
push 0x3d
mov eax, dword [ebp - 0xc]
push eax
call fcn.0067f450
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x64f9b2
mov ecx, dword [ebp - 8]
mov byte [ecx], 0
mov edx, dword [ebp - 0xc]
push edx
lea eax, [ebp - 0x98]
push eax
call fcn.006b6b40
add esp, 8
mov ecx, dword [ebp - 8]
add ecx, 1
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
push edx
lea eax, [ebp - 0x118]
push eax
call fcn.006b6b40
add esp, 8
push 0x2c
lea ecx, [ebp - 0x118]
push ecx
call fcn.0067d790
add esp, 8
add eax, 1
mov dword [ebp - 8], eax
push 0x2c
mov edx, dword [ebp - 8]
push edx
call fcn.0067d790
add esp, 8
add eax, 1
mov dword [ebp - 8], eax
push 0x2c
mov eax, dword [ebp - 8]
push eax
call fcn.0067d790
add esp, 8
add eax, 1
mov dword [ebp - 8], eax
push 0x2c
mov ecx, dword [ebp - 8]
push ecx
call fcn.0067d790
add esp, 8
add eax, 1
mov dword [ebp - 8], eax
mov edx, dword [ebp - 8]
push edx
lea eax, [ebp - 0x98]
push eax
call fcn.006b6b40
add esp, 8
push 0x2c
lea ecx, [ebp - 0x98]
push ecx
call fcn.0067d790
add esp, 8
mov dword [ebp - 8], eax
mov edx, dword [ebp - 8]
mov byte [edx], 0
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
lea ecx, [ebp - 0x98]
push ecx
call fcn.006cc110
add esp, 4
movsx edx, byte [ebp - 1]
mov ecx, dword [0x27a20b0]
lea edx, [ecx + edx*4]
mov ecx, 2
imul ecx, ecx, 0
mov word [edx + ecx], ax
mov edx, dword [ebp - 8]
push edx
call fcn.006cc110
add esp, 4
movsx ecx, byte [ebp - 1]
mov edx, dword [0x27a20b0]
lea ecx, [edx + ecx*4]
mov edx, 2
shl edx, 0
mov word [ecx + edx], ax
movsx eax, byte [ebp - 1]
mov ecx, dword [0x27a20b0]
lea edx, [ecx + eax*4]
mov eax, 2
shl eax, 0
movzx ecx, word [edx + eax]
push ecx
movsx edx, byte [ebp - 1]
mov eax, dword [0x27a20b0]
lea ecx, [eax + edx*4]
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ecx + eax]
push ecx
movsx edx, byte [ebp - 1]
push edx
push str.Group__d_goes_from__d_to__d_n
call fcn.004017c0
add esp, 0x10
mov al, byte [ebp - 1]
add al, 1
mov byte [ebp - 1], al
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.006b6c40
add esp, 4
mov edx, dword [ebp - 0xc]
lea eax, [edx + eax + 1]
mov dword [ebp - 0xc], eax
jmp 0x64f831
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x18]
push edx
call fcn.0067ac50
add esp, 4
mov esp, ebp
pop ebp
ret
Function at 0x651950
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push ecx
mov eax, dword [ebp + 8]
movzx ecx, byte [eax]
cmp ecx, 2
jne 0x6519d7
mov edx, dword [ebp + 8]
movzx eax, word [edx + 6]
imul ecx, eax, 0x3c
add ecx, dword [0x11d7258]
mov dword [ebp - 4], ecx
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
movzx eax, word [edx + 8]
push eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x20]
mov eax, dword [edx + 0x14]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.004dc610
add esp, 0x18
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x10]
sar eax, 8
mov ecx, dword [ebp + 0xc]
add eax, dword [ecx]
mov edx, dword [ebp + 0xc]
mov dword [edx], eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x14]
sar ecx, 8
mov edx, dword [ebp + 0x10]
add ecx, dword [edx]
mov eax, dword [ebp + 0x10]
mov dword [eax], ecx
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x18]
sar edx, 8
mov eax, dword [ebp + 0x14]
add edx, dword [eax]
mov ecx, dword [ebp + 0x14]
mov dword [ecx], edx
jmp 0x651a23
mov edx, dword [ebp + 8]
movzx eax, word [edx + 6]
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
mov edx, dword [ebp + 8]
movzx eax, word [edx + 8]
mov ecx, dword [ebp + 0x10]
mov dword [ecx], eax
mov edx, dword [ebp + 8]
movzx eax, word [edx + 0xa]
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
mov edx, dword [ebp + 8]
movzx eax, byte [edx]
cmp eax, 3
jne 0x651a23
mov ecx, dword [ebp + 8]
movzx edx, word [ecx + 0xa]
push edx
mov eax, dword [ebp + 8]
movzx ecx, word [eax + 6]
push ecx
call fcn.0060a440
add esp, 8
mov edx, dword [ebp + 0x10]
mov dword [edx], eax
mov esp, ebp
pop ebp
ret

Function at 0x658db0
Capabilities:
Create directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10c
movzx eax, word [0x27a42e0]
add eax, 1
mov dword [ebp - 8], eax
push 0
push str.saves
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov ecx, dword [ebp - 8]
push ecx
push str.saves_slot_d.wag
lea edx, [ebp - 0x10c]
push edx
call fcn.0041e320
add esp, 0xc
push 1
lea eax, [ebp - 0x10c]
push eax
call fcn.00401390
add esp, 8
mov dword [ebp - 4], eax
push 0x27a42f0
lea ecx, [ebp - 4]
push ecx
call fcn.00658d60
add esp, 8
push 1
push 0x27a42dc
mov edx, dword [ebp - 4]
push edx
call fcn.004016d0
add esp, 0xc
push 1
push 0x27a42e8
mov eax, dword [ebp - 4]
push eax
call fcn.004016d0
add esp, 0xc
mov ecx, dword [ebp - 4]
push ecx
call fcn.00401380
add esp, 4
mov esp, ebp
pop ebp
ret
Function at 0x65bde0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x104
push 0x8000
push 0xff
push 0x27f02e8
call fcn.0067d630
add esp, 0xc
mov eax, dword [0x76a340]
push eax
push str.servergary16world_d_tex16.tim
lea ecx, [ebp - 0x104]
push ecx
call fcn.0041e320
add esp, 0xc
call fcn.0065b990
call fcn.0065c660
push 0x80
push 0
push 0xf
lea edx, [ebp - 0x104]
push edx
call fcn.0065ff90
add esp, 0x10
mov eax, dword [0x76a340]
push eax
push str.servergary16world_dpages.dat
lea ecx, [ebp - 0x104]
push ecx
call fcn.0041e320
add esp, 0xc
push 0x717e54
lea edx, [ebp - 0x104]
push edx
call fcn.00401720
add esp, 8
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
push eax
push 2
push 1
lea ecx, [ebp + 8]
push ecx
call fcn.006cf670
add esp, 0x10
mov edx, dword [ebp - 4]
push edx
call fcn.00401700
add esp, 4
lea eax, [ebp - 0x104]
push eax
call fcn.0065cbc0
add esp, 4
mov esp, ebp
pop ebp
ret
Function at 0x65cbc0
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x74
mov dword [ebp - 8], 0
mov eax, dword [ebp + 8]
push eax
call fcn.006b6c40
add esp, 4
mov dword [ebp - 4], eax
jmp 0x65cbe7
mov ecx, dword [ebp - 4]
sub ecx, 1
mov dword [ebp - 4], ecx
cmp dword [ebp - 4], 0
jl 0x65cc11
mov edx, dword [ebp + 8]
add edx, dword [ebp - 4]
movsx eax, byte [edx]
cmp eax, 0x5c
jne 0x65cc06
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 0xc], ecx
jmp 0x65cc11
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
jmp 0x65cbde
mov dword [ebp - 4], 0
mov eax, dword [ebp - 4]
shl eax, 4
movzx ecx, word [eax + 0x774488]
test ecx, ecx
je 0x65cccd
push 0xe940a2
mov edx, dword [ebp - 4]
shl edx, 4
mov eax, dword [edx + 0x774484]
push eax
call fcn.006cc170
add esp, 8
test eax, eax
jne 0x65ccbf
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 4]
shl edx, 4
movzx eax, word [edx + 0x774488]
push eax
push str.c:levels_d_s
lea ecx, [ebp - 0x74]
push ecx
call fcn.0041e320
add esp, 0x10
push 0
lea edx, [ebp - 0x74]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
jne 0x65ccbf
mov ecx, 1
test ecx, ecx
je 0x65cca5
push 0xb92
push str.C:devworkspaces_repo_clonesClean_UrbanChaosMuckyFoot_UrbanChaos_fallenSource_supermap.cpp
push str.ASSERT_TRIGGERED
call fcn.0049b8f0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x10], eax
mov edx, dword [ebp - 0x10]
push edx
push str.ret__d__n
call fcn.00495230
add esp, 8
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
jmp 0x65cc18
mov esp, ebp
pop ebp
ret
Function at 0x65e990
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x414
push 0x716764
mov eax, dword [ebp + 8]
push eax
call fcn.00401720
add esp, 8
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x65e9bd
jmp 0x65eb18
mov ecx, dword [ebp - 0xc]
push ecx
push 0x18
push 1
mov edx, 1
imul eax, edx, 0
add eax, dword [ebp + 0xc]
push eax
call fcn.006b7750
add esp, 0x10
cmp eax, 0x18
je 0x65e9e8
jmp 0x65eb18
mov ecx, dword [ebp - 0xc]
push ecx
push 0x400
push 1
mov edx, 1
imul eax, edx, 0
lea ecx, [ebp + eax - 0x414]
push ecx
call fcn.006b7750
add esp, 0x10
cmp eax, 0x400
je 0x65ea1c
jmp 0x65eb18
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 4], 0
jmp 0x65ea3c
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
cmp dword [ebp - 4], 0x40
jge 0x65ea55
mov eax, dword [ebp - 4]
movzx ecx, byte [ebp + eax - 0x414]
add ecx, dword [ebp - 0x14]
mov dword [ebp - 0x14], ecx
jmp 0x65ea33
mov dword [ebp - 4], 0x3c0
jmp 0x65ea67
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
cmp dword [ebp - 4], 0x400
jge 0x65ea83
mov eax, dword [ebp - 4]
movzx ecx, byte [ebp + eax - 0x414]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0x10], ecx
jmp 0x65ea5e
mov edx, dword [ebp - 0x10]
cmp edx, dword [ebp - 0x14]
jle 0x65eab6
mov dword [ebp - 4], 0
jmp 0x65ea9d
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0x40
jge 0x65eab6
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 4]
mov al, byte [ebp + edx - 0x54]
mov byte [ebp + ecx - 0x414], al
jmp 0x65ea94
mov dword [ebp - 8], 0
jmp 0x65eac8
mov ecx, dword [ebp - 8]
add ecx, 1
mov dword [ebp - 8], ecx
cmp dword [ebp - 8], 0x100
jge 0x65eb11
imul edx, dword [ebp - 8], 3
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 8]
mov cl, byte [ebp + ecx*4 - 0x414]
mov byte [eax + edx], cl
imul edx, dword [ebp - 8], 3
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 8]
mov cl, byte [ebp + ecx*4 - 0x413]
mov byte [eax + edx + 1], cl
imul edx, dword [ebp - 8], 3
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 8]
mov cl, byte [ebp + ecx*4 - 0x412]
mov byte [eax + edx + 2], cl
jmp 0x65eabf
mov eax, 1
jmp 0x65eb1a
xor eax, eax
mov esp, ebp
pop ebp
ret
Function at 0x65ef40
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x70
mov dword [ebp - 4], 0
mov dword [ebp - 0xc], 0
mov dword [0xdc80f0], 1
push str.Doing_front_end_n
call fcn.004017c0
add esp, 4
push 0x28
push 0x100
push 0
push str.levels_frontend.ucm
call fcn.004884a0
add esp, 0x10
mov dword [ebp - 8], 0x774480
mov eax, dword [ebp - 4]
shl eax, 4
mov ecx, dword [ebp - 8]
movzx edx, word [ecx + eax + 8]
test edx, edx
je 0x65f037
mov eax, dword [ebp - 4]
shl eax, 4
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + eax]
push edx
push str.Doing_level__s_n
call fcn.004017c0
add esp, 8
mov eax, dword [ebp - 4]
shl eax, 4
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + eax]
push edx
push str.levels_s.ucm
lea eax, [ebp - 0x70]
push eax
call fcn.0041e320
add esp, 0xc
lea ecx, [ebp - 0x70]
push ecx
call fcn.004d2350
add esp, 4
mov edx, dword [0x25936cc]
push edx
lea eax, [ebp - 0x70]
push eax
push str._level__s_mav_opt__d_n
call fcn.00495230
add esp, 0xc
mov ecx, dword [0x25936cc]
cmp ecx, dword [ebp - 0xc]
jle 0x65f029
mov edx, dword [0x25936cc]
mov dword [ebp - 0xc], edx
mov eax, dword [0x25936cc]
push eax
lea ecx, [ebp - 0x70]
push ecx
mov edx, dword [ebp - 0xc]
push edx
push str.HIGHEST__d_level__s_mav_opt__d_n
call fcn.00495230
add esp, 0x10
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
jmp 0x65ef88
push 0
call fcn.006ce8b0
mov esp, ebp
pop ebp
ret
Function at 0x65fd90
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov eax, dword [ebp + 8]
push eax
call fcn.006b6c40
add esp, 4
mov ecx, dword [ebp + 8]
mov byte [ecx + eax - 2], 0x6f
push 0x717e54
mov edx, dword [ebp + 8]
push edx
call fcn.00401720
add esp, 8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x65fe0b
mov eax, dword [ebp - 4]
push eax
push 0x8000
push 1
mov ecx, 0x80
imul edx, ecx, 0
add edx, dword [ebp + 0xc]
mov eax, 1
imul ecx, eax, 0
add edx, ecx
push edx
call fcn.006cf670
add esp, 0x10
mov edx, dword [ebp - 4]
push edx
call fcn.00401700
add esp, 4
cmp dword [ebp + 0x14], 0
je 0x65fe0b
mov eax, dword [ebp + 8]
push eax
call fcn.0065cbc0
add esp, 4
mov ecx, dword [ebp + 8]
push ecx
call fcn.006b6c40
add esp, 4
mov edx, dword [ebp + 8]
mov byte [edx + eax - 2], 0x69
push 0x717e54
mov eax, dword [ebp + 8]
push eax
call fcn.00401720
add esp, 8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x65ff85
mov dword [ebp - 0x1c], 0x10
mov dword [ebp - 0x18], 0
mov ecx, dword [ebp - 4]
push ecx
push 8
push 1
lea edx, [ebp - 0x1c]
push edx
call fcn.006cf670
add esp, 0x10
mov dword [ebp - 0x10], 0x1000c
mov eax, dword [ebp - 4]
push eax
push 4
push 1
lea ecx, [ebp - 0x10]
push ecx
call fcn.006cf670
add esp, 0x10
imul edx, dword [ebp + 0x10], 0x14
mov eax, dword [edx + 0x7746c0]
shl eax, 0x10
imul ecx, dword [ebp + 0x10], 0x14
add eax, dword [ecx + 0x7746bc]
mov dword [ebp - 0x10], eax
mov edx, dword [ebp - 4]
push edx
push 4
push 1
lea eax, [ebp - 0x10]
push eax
call fcn.006cf670
add esp, 0x10
mov dword [ebp - 0x10], 0x1000040
mov ecx, dword [ebp - 4]
push ecx
push 4
push 1
lea edx, [ebp - 0x10]
push edx
call fcn.006cf670
add esp, 0x10
mov dword [ebp - 8], 0
jmp 0x65fed5
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0x100
jge 0x65ff6d
mov dword [ebp - 0xc], 0
jmp 0x65fef4
mov ecx, dword [ebp - 0xc]
add ecx, 4
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], 0x80
jge 0x65ff68
mov edx, dword [ebp - 8]
shl edx, 7
add edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0xc]
movzx ecx, byte [edx + eax + 3]
shl ecx, 0x18
mov edx, dword [ebp - 8]
shl edx, 7
add edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0xc]
movzx edx, byte [edx + eax + 2]
shl edx, 0x10
add ecx, edx
mov eax, dword [ebp - 8]
shl eax, 7
add eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0xc]
movzx eax, byte [eax + edx + 1]
shl eax, 8
add ecx, eax
mov edx, dword [ebp - 8]
shl edx, 7
add edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0xc]
movzx edx, byte [edx + eax]
add ecx, edx
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 4]
push eax
push 4
push 1
lea ecx, [ebp - 0x14]
push ecx
call fcn.006cf670
add esp, 0x10
jmp 0x65feeb
jmp 0x65fecc
mov edx, dword [ebp - 4]
push edx
call fcn.00401700
add esp, 4
mov eax, dword [ebp + 8]
push eax
call fcn.0065cbc0
add esp, 4
mov esp, ebp
pop ebp
ret
Function at 0x65ff90
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
cmp dword [ebp + 0x14], 0x100
jl 0x65ffb6
push 0xaf7
push str.C:devworkspaces_repo_clonesClean_UrbanChaosMuckyFoot_UrbanChaos_fallenSource_supermap.cpp
push str.ASSERT_TRIGGERED
call fcn.0049b8f0
add esp, 0xc
push 0x717e54
mov eax, dword [ebp + 8]
push eax
call fcn.00401720
add esp, 8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x660109
mov dword [ebp - 0x1c], 0x10
mov dword [ebp - 0x18], 2
mov ecx, dword [ebp - 4]
push ecx
push 8
push 1
lea edx, [ebp - 0x1c]
push edx
call fcn.006cf670
add esp, 0x10
mov eax, dword [ebp + 0x14]
shl eax, 8
add eax, 0xc
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
push ecx
push 4
push 1
lea edx, [ebp - 8]
push edx
call fcn.006cf670
add esp, 0x10
movzx eax, word [ebp + 0xc]
imul ecx, eax, 0x14
mov edx, dword [ecx + 0x7746c0]
add edx, dword [ebp + 0x10]
shl edx, 0x10
movzx eax, word [ebp + 0xc]
imul ecx, eax, 0x14
add edx, dword [ecx + 0x7746bc]
mov dword [ebp - 8], edx
mov edx, dword [ebp - 4]
push edx
push 4
push 1
lea eax, [ebp - 8]
push eax
call fcn.006cf670
add esp, 0x10
mov ecx, dword [ebp + 0x14]
shl ecx, 0x10
add ecx, 0x40
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
push edx
push 4
push 1
lea eax, [ebp - 8]
push eax
call fcn.006cf670
add esp, 0x10
mov dword [ebp - 0xc], 0
jmp 0x66007f
mov ecx, dword [ebp - 0xc]
add ecx, 1
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
cmp edx, dword [ebp + 0x14]
jge 0x6600f1
mov dword [ebp - 0x10], 0
jmp 0x660099
mov eax, dword [ebp - 0x10]
add eax, 4
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x80
jge 0x6600ef
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp + 0x10]
shl ecx, 7
mov edx, dword [ebp - 0x10]
add edx, 2
sar edx, 1
movzx eax, word [ecx + edx*2 + 0x27f02e8]
shl eax, 0x10
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp + 0x10]
shl ecx, 7
mov edx, dword [ebp - 0x10]
sar edx, 1
movzx ecx, word [ecx + edx*2 + 0x27f02e8]
add eax, ecx
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 4]
push edx
push 4
push 1
lea eax, [ebp - 0x14]
push eax
call fcn.006cf670
add esp, 0x10
jmp 0x660090
jmp 0x660076
mov ecx, dword [ebp - 4]
push ecx
call fcn.00401700
add esp, 4
mov edx, dword [ebp + 8]
push edx
call fcn.0065cbc0
add esp, 4
mov eax, dword [ebp + 8]
push eax
call fcn.006b6c40
add esp, 4
mov ecx, dword [ebp + 8]
mov byte [ecx + eax - 2], 0x6f
push 0x717e54
mov edx, dword [ebp + 8]
push edx
call fcn.00401720
add esp, 8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x66016e
mov eax, dword [ebp - 4]
push eax
push 0x4000
push 2
mov ecx, 0x80
imul edx, ecx, 0
mov eax, 2
imul ecx, eax, 0
lea edx, [edx + ecx + 0x27f02e8]
push edx
call fcn.006cf670
add esp, 0x10
mov eax, dword [ebp - 4]
push eax
call fcn.00401700
add esp, 4
mov ecx, dword [ebp + 8]
push ecx
call fcn.0065cbc0
add esp, 4
mov esp, ebp
pop ebp
ret
Function at 0x666750
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x24]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
movzx eax, word [edx + 0x6e]
imul ecx, eax, 0x3c
add ecx, 0x774958
mov dword [ebp - 0x10], ecx
push 0
push 0
mov edx, dword [ebp - 8]
mov eax, dword [edx + 0x88]
imul eax, dword [0x119f218]
sar eax, 8
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x54]
add edx, eax
and edx, 0x7ff
push edx
call fcn.0066e2e0
add esp, 0xc
mov byte [ebp - 1], 0
mov dword [ebp - 0xc], 0
jmp 0x6667b6
mov eax, dword [ebp - 0xc]
add eax, 1
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 4
jge 0x666846
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x10]
movsx eax, word [edx + ecx*2]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x20], 0
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x10]
movsx eax, word [edx + ecx*2 + 8]
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x18]
push ecx
lea edx, [ebp - 0x20]
push edx
lea eax, [ebp - 0x14]
push eax
call fcn.00668d70
add esp, 0xc
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
sar edx, 8
add edx, dword [ebp - 0x14]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x18]
sar ecx, 8
add ecx, dword [ebp - 0x18]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x24]
sar edx, 8
push edx
mov eax, dword [ebp - 0x28]
sar eax, 8
push eax
call fcn.0064ae10
add esp, 8
test eax, eax
je 0x666841
mov edx, 1
mov ecx, dword [ebp - 0xc]
shl edx, cl
movzx eax, byte [ebp - 1]
or eax, edx
mov byte [ebp - 1], al
jmp 0x6667ad
movzx ecx, byte [ebp - 1]
mov edx, dword [ebp - 8]
movzx eax, byte [edx + 0x95]
xor ecx, eax
mov byte [ebp - 2], cl
movzx ecx, byte [ebp - 2]
test ecx, ecx
je 0x6668dd
mov edx, dword [ebp - 8]
movzx eax, byte [edx + 0x62]
test eax, eax
jne 0x6668dd
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x54]
sar edx, 8
mov eax, dword [edx*4 + 0x774c04]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x1c]
sub edx, dword [ecx + 0x54]
mov eax, dword [0x119f218]
shl eax, 4
neg eax
sar eax, 8
cmp edx, eax
jge 0x6668b0
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x88]
sub edx, 0x10
mov eax, dword [ebp - 8]
mov dword [eax + 0x88], edx
jmp 0x6668dd
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x1c]
sub edx, dword [ecx + 0x54]
mov eax, dword [0x119f218]
shl eax, 4
sar eax, 8
cmp edx, eax
jle 0x6668dd
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x88]
add edx, 0x10
mov eax, dword [ebp - 8]
mov dword [eax + 0x88], edx
mov ecx, dword [ebp - 8]
mov dl, byte [ebp - 1]
mov byte [ecx + 0x95], dl
mov esp, ebp
pop ebp
ret
Function at 0x68f420
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
call fcn.0068f040
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x68f452
mov eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0xc]
mov dword [ebp - 8], edx
mov ecx, dword [ebp - 8]
call dword [0x716498]
call dword [ebp - 8]
jmp 0x68f45c
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esp, ebp
pop ebp
ret

Function at 0x6fe4ca
Capabilities:
Set environment variable

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
pop ebp
jmp fcn.006fdd31