joyce8/EMBER2024-capa huggingface dataset:
Function at 0x432fd0
Capabilities:
Get geographical location

Disassembly:
mov ecx, dword [0x1a1afe0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 0xc]
jbe 0x43322a
sub esp, 0x24
mov edx, dword [esp + 0x28]
mov eax, dword [edx + 0x34]
mov ebx, eax
shr ebx, 0x16
cmp dword [edx + 0x3c], ebx
jbe 0x43311b
and eax, 0x3fffff
shr eax, 0xd
lea ebp, [eax - 0x200]
xchg ebp, ebx
neg ebx
xchg ebp, ebx
mov esi, dword [esp + 0x2c]
cmp esi, ebp
ja 0x433095
mov ecx, dword [edx + 0x28]
cmp ecx, ebx
jbe 0x433222
mov ecx, dword [edx + 0x24]
lea ecx, [ecx + ebx*8]
mov ebp, dword [ecx + 4]
test ebp, 0x80000000
je 0x43303b
mov ecx, 0x40000
jmp 0x43304b
mov ecx, dword [ecx]
shl ebp, 0xe
shr ecx, 0x12
or ecx, ebp
and ecx, 0x3ffff
cmp esi, ecx
ja 0x433095
mov dword [esp + 0x20], ebx
mov dword [esp + 0x14], ecx
mov ecx, dword [edx + 0x30]
test byte [ecx], al
shl ebx, 7
add ecx, ebx
mov dword [esp], ecx
mov dword [esp + 4], esi
mov dword [esp + 8], eax
call fcn.004354a0
mov eax, dword [esp + 0xc]
cmp eax, 0xffffffff
je 0x43312f
mov ecx, dword [esp + 0x10]
shl eax, 0xd
shl ecx, 0xd
mov edx, dword [esp + 0x20]
shl edx, 0x16
add eax, edx
add ecx, edx
jmp 0x4330d7
mov dword [esp], edx
mov dword [esp + 4], esi
call fcn.004322b0
mov eax, dword [esp + 8]
test eax, eax
jne 0x4330d3
mov eax, dword [esp + 0x2c]
cmp eax, 1
jne 0x4330bf
mov eax, dword [0x18e0c14]
mov ecx, dword [esp + 0x28]
mov dword [ecx + 0x34], eax
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
add esp, 0x24
ret
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x20], eax
mov dword [esp + 0x18], ecx
mov edx, dword [esp + 0x28]
mov dword [esp], edx
mov dword [esp + 4], eax
mov ebx, dword [esp + 0x2c]
mov dword [esp + 8], ebx
call fcn.00431ef0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x28]
cmp dword [edx + 0x34], ecx
jae 0x43310b
mov dword [edx + 0x34], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x30], ecx
mov dword [esp + 0x34], eax
add esp, 0x24
ret
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
add esp, 0x24
ret
call fcn.00442780
lea eax, [0xdd397a]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00442ff0
mov eax, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00442ce0
lea eax, [0xdce302]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.00442ff0
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00442ce0
call fcn.00442990
call fcn.004427e0
mov eax, dword [esp + 0x28]
mov eax, dword [eax + 0x34]
mov dword [esp + 0x20], eax
and eax, 0x3fffff
shr eax, 0xd
mov dword [esp + 0x1c], eax
call fcn.00442780
lea eax, [0xddbe51]
mov dword [esp], eax
mov dword [esp + 4], 0x15
call fcn.00442ff0
mov eax, dword [esp + 0x1c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00442ce0
lea eax, [0xdd62f4]
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.00442ff0
mov eax, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00442e80
call fcn.00442990
call fcn.004427e0
lea eax, [0xdd4ee3]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.00440950
mov eax, ebx
call fcn.004740c0
nop
call fcn.004714f0
jmp fcn.00432fd0
Function at 0x436fa0
Capabilities:
Access peb ldr_data

Disassembly:
mov ecx, dword [0x1a1afe0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x437086
sub esp, 0x2c
mov eax, dword [esp + 0x30]
mov dword [eax + 0x88], 0
lea ecx, [0x1a1bab0]
mov dword [esp], ecx
call fcn.00406990
mov eax, dword [esp + 4]
test eax, eax
je 0x437062
mov dword [esp + 8], 0
mov ecx, dword [0x1a1afe0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
mov dword [esp + 0xc], ecx
lea edx, [esp + 0x30]
lea edi, [esp + 0x10]
xor eax, eax
call fcn.004742d9
lea ecx, [0x437090]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1c], ecx
lea ecx, [esp + 8]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], 3
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x28], ecx
lea edx, [esp + 0x10]
mov dword [esp], edx
call fcn.00472b40
mov eax, dword [esp + 8]
cmp eax, 0x20
jge 0x43705e
jae 0x43707b
mov ecx, dword [esp + 0x30]
mov dword [ecx + eax*4 + 8], 0
add esp, 0x2c
ret
lea eax, [fcn.0044da80]
inc eax
mov ecx, dword [esp + 0x30]
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], 0
add esp, 0x2c
ret
mov ecx, 0x20
call fcn.004740b0
nop
call fcn.00472c30
jmp fcn.00436fa0
Function at 0x440330
Capabilities:
Get geographical location

Disassembly:
mov ecx, dword [0x1a1afe0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x440520
sub esp, 0x10
mov eax, dword [esp + 0x14]
movzx edx, byte [eax + 0x32]
mov ebx, dword [0x1a1afe0]
mov ebx, dword fs:[ebx]
mov ebx, dword [ebx]
test dl, dl
jne 0x440373
cmp dword [ebx + 0x10], eax
jne 0x440509
movzx edx, byte [eax + 0x30]
test dl, dl
jne 0x4404e5
mov edx, dword [0x1a1b1d8]
mov ebp, dword [eax + 0x14]
test edx, edx
je 0x44038c
call fcn.00474040
mov dword [edi], ebp
mov edx, dword [eax]
mov dword [edi + 4], edx
mov dword [esp + 8], ebx
mov dword [eax], ebp
jmp 0x44039c
mov ebx, dword [esp + 8]
mov eax, dword [esp + 0x14]
mov edx, dword [eax + 0x28]
test edx, edx
je 0x440430
movzx ebp, byte [edx]
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x4403e3
mov ecx, dword [0x1a1b1d8]
test ecx, ecx
je 0x4403c4
mov ecx, dword [eax + 0x28]
call fcn.00474030
mov dword [edi], ecx
mov dword [eax + 0x28], 0
jmp 0x440430
mov dword [esp], eax
call fcn.00440530
movzx eax, byte [esp + 4]
test al, al
jne 0x440394
jmp 0x4404d4
xchg ebp, eax
movzx ebx, al
xchg ebp, eax
lea esi, [0xe380ee]
movzx ebx, byte [esi + ebx]
add ebx, 0xfffffff8
neg ebx
lea ecx, [ebx - 7]
neg ecx
mov ebx, 1
shl ebx, cl
cmp ecx, 0x20
sbb esi, esi
and ebx, esi
not ebx
and ebx, ebp
mov byte [edx], bl
mov eax, dword [eax + 0x2c]
mov eax, dword [eax + ecx*4]
mov dword [esp + 0x18], eax
mov byte [esp + 0x1c], 1
add esp, 0x10
ret
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x14]
mov eax, ecx
mov ebx, dword [esp + 8]
mov ecx, dword [ebx + 0x14]
test ecx, ecx
je 0x4403cd
mov edx, dword [eax + 0x18]
cmp dword [ecx + 4], edx
jne 0x4403cd
movzx edx, byte [ecx + 1]
test dl, dl
je 0x440476
mov dword [esp], ecx
call fcn.0043f5d0
mov eax, dword [0x1a1b1d8]
mov ecx, dword [esp + 4]
test eax, eax
jne 0x440463
mov eax, dword [esp + 8]
jmp 0x440423
call fcn.00474040
mov dword [edi], ecx
mov eax, dword [esp + 8]
mov edx, dword [eax + 0x14]
mov dword [edi + 4], edx
jmp 0x440423
mov edx, dword [0x1a1b1d8]
mov ebp, dword [ecx + 0xc]
test edx, edx
je 0x44048d
mov edx, dword [ecx + 0xc]
call fcn.00474030
mov dword [edi], edx
mov dword [esp + 0xc], ebp
mov dword [ecx + 0xc], 0
mov edx, dword [ecx + 8]
mov dword [eax + 0x24], edx
mov eax, dword [0x1a1b1d8]
mov edx, dword [ecx + 0x10]
test eax, eax
je 0x4404b8
call fcn.00474040
mov dword [edi], edx
mov eax, dword [ebx + 0x14]
mov dword [edi + 4], eax
mov dword [ebx + 0x14], edx
mov dword [esp], ecx
call fcn.0043f920
mov eax, dword [esp + 0xc]
mov dword [esp + 0x18], eax
mov byte [esp + 0x1c], 1
add esp, 0x10
ret
mov dword [esp + 0x18], 0
mov byte [esp + 0x1c], 0
add esp, 0x10
ret
lea eax, [0xe458c4]
mov dword [esp], eax
call fcn.00472ae0
lea eax, [0xdd3998]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00440950
lea eax, [0xdd3989]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00440950
nop
call fcn.00472c30
jmp fcn.00440330
Function at 0x4449f0
Capabilities:
Get geographical location

Disassembly:
mov ecx, dword [0x1a1afe0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x444ac3
sub esp, 0x14
mov eax, dword [0x19dd2a8]
mov dword [esp + 0x10], eax
mov ecx, dword [0x19dd2b8]
mov dword [esp + 0xc], ecx
lea edx, [0x1a1ae80]
mov dword [esp], edx
call fcn.004068b0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
sub eax, ecx
sub eax, dword [esp + 4]
mov dword [esp + 8], eax
lea ecx, [0x1a1ae78]
mov dword [esp], ecx
call fcn.004068b0
mov eax, dword [esp + 8]
sub eax, dword [esp + 4]
mov ecx, dword [0x19dd2b0]
cmp ecx, eax
jl 0x444a5f
add esp, 0x14
ret
mov dword [esp + 8], ecx
call fcn.00442780
lea eax, [0xde1c77]
mov dword [esp], eax
mov dword [esp + 4], 0x19
call fcn.00442ff0
mov eax, dword [esp + 8]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.00442e10
lea eax, [0xdd23bd]
mov dword [esp], eax
mov dword [esp + 4], 0xe
call fcn.00442ff0
call fcn.004427e0
lea eax, [0xdd6338]
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.00440950
nop
call fcn.00472c30
jmp fcn.004449f0
Function at 0x447cb0
Capabilities:
Get geographical location

Disassembly:
mov ecx, dword [0x1a1afe0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x447dc8
sub esp, 0x10
mov eax, dword [0x1a1afe0]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
mov edx, dword [ecx + 0x7c]
test edx, edx
jne 0x447db1
mov edx, dword [ecx + 0x58]
test edx, edx
jne 0x447d9b
movzx ecx, byte [ecx + 0x88]
test cl, cl
jne 0x447d85
mov dword [esp + 0xc], eax
nop
nop
lea eax, [0x19dd298]
mov dword [esp], eax
call fcn.0040ee90
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0x18]
mov dword [esp], ecx
call fcn.00450820
nop
nop
lea eax, [0x19dd298]
mov dword [esp], eax
call fcn.0040f0b0
mov eax, dword [0x1a1afe0]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov dword [esp + 8], eax
mov ecx, dword [eax + 0x18]
test byte [ecx], al
add ecx, 0xac
nop
mov dword [esp], ecx
call fcn.0040f230
mov eax, dword [esp + 8]
mov eax, dword [eax + 0x18]
mov dword [eax + 0xac], 0
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0x18]
mov ecx, dword [ecx + 0x5c]
mov dword [esp], ecx
call fcn.0044e890
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 0x18]
mov dword [eax + 0x5c], 0
add esp, 0x10
ret
lea eax, [0xdd23cb]
mov dword [esp], eax
mov dword [esp + 4], 0xe
call fcn.00440950
lea eax, [0xdd39a7]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00440950
lea eax, [0xdd90b2]
mov dword [esp], eax
mov dword [esp + 4], 0x13
call fcn.00440950
nop
call fcn.00472c30
jmp fcn.00447cb0
Function at 0x44b260
Capabilities:
Get geographical location

Disassembly:
mov ecx, dword [0x1a1afe0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x44b3d0
sub esp, 0x14
call fcn.004628a0
mov eax, dword [esp + 0x18]
test byte [eax], al
lea ecx, [eax + 0x48]
mov edx, dword [esp]
mov dword [esp + 0x10], edx
mov ebx, dword [esp + 4]
mov dword [esp + 0xc], ebx
nop
mov dword [esp], ecx
call fcn.004068b0
mov eax, dword [esp + 4]
and eax, 0xffffefff
cmp eax, 2
jne 0x44b3ad
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], 2
mov dword [esp + 8], 1
call fcn.004455a0
mov eax, dword [esp + 0xc]
test eax, eax
je 0x44b31d
movzx ecx, byte [esp + 0x1c]
test cl, cl
je 0x44b2f3
mov ecx, dword [esp + 0x10]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov byte [esp + 8], 2
call fcn.00463770
jmp 0x44b309
nop
mov ecx, dword [esp + 0x10]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov byte [esp + 8], 1
call fcn.00463770
mov eax, dword [esp + 0x10]
mov dword [esp], eax
mov eax, dword [esp + 0xc]
mov dword [esp + 4], eax
call fcn.004629b0
mov eax, dword [0x1a1afe0]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
mov ecx, dword [ecx + 0x50]
xor edx, edx
nop
nop
mov dword [ecx + 0x18], edx
mov eax, dword [eax + 0x18]
xor ecx, ecx
nop
mov dword [eax + 0x50], ecx
nop
nop
lea eax, [0x19dd298]
mov dword [esp], eax
call fcn.0040ee90
nop
nop
mov eax, dword [esp + 0x18]
mov dword [eax + 0x58], 0
mov ecx, dword [0x19dd2d8]
test ecx, ecx
je 0x44b36c
mov edx, eax
mov dword [ecx + 0x58], eax
jmp 0x44b377
mov ecx, eax
nop
mov dword [0x19dd2d4], eax
mov edx, ecx
nop
mov dword [0x19dd2d8], edx
inc dword [0x19dd2dc]
nop
nop
lea eax, [0x19dd298]
mov dword [esp], eax
call fcn.0040f0b0
movzx eax, byte [0x1a1ad77]
test al, al
je 0x44b3a4
call fcn.00448450
call fcn.0044aa60
add esp, 0x14
ret
mov eax, dword [esp + 0x18]
mov dword [esp], eax
call fcn.00444850
lea eax, [0xdcf8b6]
mov dword [esp], eax
mov dword [esp + 4], 0xc
call fcn.00440950
nop
call fcn.00472c30
jmp fcn.0044b260
Function at 0x44b4a0
Capabilities:
Get geographical location

Disassembly:
mov ecx, dword [0x1a1afe0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 0xc]
jbe 0x44b66b
sub esp, 0x20
mov eax, dword [esp + 0x24]
test byte [eax], al
lea ecx, [eax + 0x48]
nop
mov dword [esp], ecx
call fcn.004068b0
mov eax, dword [esp + 4]
and eax, 0xffffefff
cmp eax, 2
jne 0x44b648
mov eax, dword [esp + 0x24]
movzx ecx, byte [eax + 0x68]
test cl, cl
je 0x44b50f
mov ecx, dword [eax + 0x20]
mov dword [esp], ecx
call fcn.0045d730
mov eax, dword [esp + 4]
test eax, eax
je 0x44b632
movzx ecx, byte [eax + 0x29]
test cl, 2
jne 0x44b5af
mov eax, dword [esp + 0x24]
mov dword [esp], eax
mov dword [esp + 4], 2
mov dword [esp + 8], 0x1009
call fcn.00445a10
mov eax, dword [0x1a1afe0]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
mov ecx, dword [ecx + 0x50]
xor edx, edx
nop
nop
mov dword [ecx + 0x18], edx
mov eax, dword [eax + 0x18]
xor ecx, ecx
nop
mov dword [eax + 0x50], ecx
call fcn.004628a0
mov eax, dword [esp + 4]
mov dword [esp + 0x14], eax
mov ecx, dword [esp]
mov dword [esp + 0x1c], ecx
test eax, eax
je 0x44b572
mov byte [esp + 8], 0xb
mov dword [esp + 0xc], 0
call fcn.004638a0
mov eax, dword [esp + 0x24]
mov dword [esp], eax
mov dword [esp + 4], 0x1009
mov dword [esp + 8], 9
call fcn.00445300
mov eax, dword [esp + 0x14]
test eax, eax
je 0x44b5a6
mov ecx, dword [esp + 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004629b0
call fcn.0044aa60
add esp, 0x20
ret
mov ecx, dword [esp + 8]
mov eax, dword [eax + 4]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0045d280
mov eax, dword [esp + 8]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x10], ecx
call fcn.00442780
lea eax, [0xdfa028]
mov dword [esp], eax
mov dword [esp + 4], 0x25
call fcn.00442ff0
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 4], eax
call fcn.00442ff0
lea eax, [0xdd79ca]
mov dword [esp], eax
mov dword [esp + 4], 0x12
call fcn.00442ff0
call fcn.004427e0
lea eax, [0xdd39c5]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00440950
lea eax, [0xddbf0e]
mov dword [esp], eax
mov dword [esp + 4], 0x15
call fcn.00440950
mov eax, dword [esp + 0x24]
mov dword [esp], eax
call fcn.00444850
lea eax, [0xdcf8b6]
mov dword [esp], eax
mov dword [esp + 4], 0xc
call fcn.00440950
nop
call fcn.004714f0
jmp fcn.0044b4a0
Function at 0x44bb60
Capabilities:
Access peb ldr_data

Disassembly:
sub esp, 0x2c
call fcn.004628a0
mov eax, dword [0x1a1afe0]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov dword [esp + 0x10], eax
mov ecx, dword [eax + 0x18]
mov edx, dword [esp]
mov dword [esp + 0x14], edx
mov ebx, dword [esp + 4]
mov dword [esp + 0xc], ebx
inc dword [ecx + 0x7c]
mov dword [eax + 8], 0xfffffade
mov byte [eax + 0x6b], 1
mov ecx, dword [esp + 0x30]
mov dword [esp], ecx
mov ebp, dword [esp + 0x34]
mov dword [esp + 4], ebp
call fcn.0044bb00
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x10]
mov dword [ecx + 0x38], eax
mov edx, dword [esp + 0x30]
mov dword [ecx + 0x3c], edx
mov dword [esp], ecx
mov dword [esp + 4], 2
mov dword [esp + 8], 3
call fcn.004455a0
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0x38]
cmp dword [eax], ecx
ja 0x44bbe5
cmp dword [eax + 4], ecx
jae 0x44bc13
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
lea ecx, [0x44bdc0]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], eax
lea ecx, [esp + 0x24]
mov dword [esp], ecx
call fcn.00472b40
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
test ecx, ecx
je 0x44bc69
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0
lea eax, [0x44bd70]
mov dword [esp + 0x18], eax
mov dword [esp + 0x20], ecx
mov eax, dword [esp + 0x14]
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x18]
mov dword [esp], eax
call fcn.00472b40
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov ecx, dword [esp + 0x34]
mov dword [esp + 4], ecx
call fcn.0044bb00
lea eax, [0x19dd320]
mov dword [esp], eax
call fcn.004062a0
movzx eax, byte [esp + 4]
test al, al
je 0x44bca2
lea eax, [0xe4571c]
mov dword [esp], eax
call fcn.00472b40
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov ecx, dword [esp + 0x34]
mov dword [esp + 4], ecx
call fcn.0044bb00
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0x18]
mov ecx, dword [ecx + 0x58]
test byte [ecx], al
mov ecx, dword [ecx + 0x11a0]
test ecx, ecx
je 0x44bcde
lea eax, [0xe458d0]
mov dword [esp], eax
call fcn.00472b40
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov ecx, dword [esp + 0x34]
mov dword [esp + 4], ecx
call fcn.0044bb00
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0x18]
mov edx, dword [ecx + 0x58]
mov edx, dword [edx + 0x10]
mov dword [ecx + 0x1f8], edx
mov ecx, dword [eax + 0x18]
mov ecx, dword [ecx + 0x58]
lea edx, [ecx + 4]
mov dword [ecx + 0x2c], 0
mov ebx, dword [eax + 0x18]
mov dword [ebx + 0x60], ecx
mov ecx, dword [eax + 0x18]
mov dword [ecx + 0x58], 0
mov dword [esp], edx
mov dword [esp + 4], 2
call fcn.00406af0
lea eax, [0x19dd314]
mov dword [esp], eax
call fcn.004062a0
movzx eax, byte [esp + 4]
test al, al
je 0x44bd56
lea eax, [0xe45718]
mov dword [esp], eax
call fcn.00472b40
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
call fcn.0044bb00
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 0x18]
dec dword [eax + 0x7c]
add esp, 0x2c
ret
Function at 0x44daa0
Capabilities:
Get geographical location

Disassembly:
mov ecx, dword [0x1a1afe0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x44dc07
sub esp, 0x10
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [ecx], eax
mov dword [ecx + 4], 3
mov dword [ecx + 0x500], 0
mov dword [ecx + 0x504], 0x80
mov edx, dword [0x1a1b1d8]
lea ebx, [ecx + 0x508]
lea ebp, [ecx + 0x58]
test edx, edx
je 0x44db08
call fcn.00474060
mov dword [edi], ebx
mov edx, dword [ecx + 0x4fc]
mov dword [edi + 4], edx
mov dword [edi + 8], ebp
mov edx, dword [ecx + 0x4c]
mov dword [edi + 0xc], edx
mov dword [ecx + 0x4fc], ebx
mov dword [ecx + 0x50], 0
mov dword [ecx + 0x54], 0x20
mov dword [ecx + 0x4c], ebp
lea eax, [ecx + 0x998]
mov dword [esp], eax
call fcn.0043af20
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x44db3e
mov ecx, dword [esp + 0x18]
jmp 0x44db6c
mov ecx, dword [esp + 0x18]
test ecx, ecx
jne 0x44db59
mov edx, dword [0x1a1ae68]
test edx, edx
je 0x44dbf0
mov dword [eax + 0x30], edx
jmp 0x44db6c
call fcn.00418c30
mov eax, dword [esp]
mov ecx, dword [esp + 0x14]
mov dword [ecx + 0x30], eax
mov ecx, dword [esp + 0x18]
mov edx, ecx
sar edx, 0x1f
shr edx, 0x1b
lea eax, [ecx + edx]
mov edx, eax
and edx, 0xffffffe0
mov ebx, ecx
sub ebx, edx
test ebx, ebx
jl 0x44dbeb
mov edx, dword [0x19d7b8c]
sar eax, 5
mov ecx, ebx
mov esi, 1
shl esi, cl
cmp ecx, 0x20
sbb ebx, ebx
and esi, ebx
cmp edx, eax
jbe 0x44dbe4
mov ecx, dword [0x19d7b88]
lea eax, [ecx + eax*4]
mov dword [esp], eax
mov dword [esp + 4], esi
call fcn.00406ba0
mov eax, dword [0x19d7b78]
mov ecx, dword [0x19d7b7c]
mov edx, dword [0x19d7b80]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov eax, dword [esp + 0x18]
mov dword [esp + 0xc], eax
call fcn.004509d0
add esp, 0x10
ret
mov ecx, edx
call fcn.004740b0
call fcn.0043f460
lea eax, [0xdd39d4]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00440950
nop
call fcn.00472c30
jmp fcn.0044daa0
Function at 0x44eb00
Capabilities:
Get geographical location

Disassembly:
mov ecx, dword [0x1a1afe0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x44ec42
sub esp, 0x18
mov eax, dword [0x1a1afe0]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov ecx, dword [eax + 0x58]
test ecx, ecx
je 0x44ec2b
mov dword [esp + 0x14], eax
mov edx, dword [ecx + 0x2c]
mov dword [esp + 8], edx
nop
cmp edx, eax
jne 0x44eb63
cmp dword [ecx + 4], 1
jne 0x44eb63
mov dword [eax + 0x58], 0
mov dword [ecx + 0x2c], 0
mov dword [ecx + 4], 0
mov dword [esp + 0x1c], ecx
add esp, 0x18
ret
mov dword [esp + 0x10], ecx
mov eax, dword [ecx + 4]
mov dword [esp + 0xc], eax
call fcn.00442780
lea eax, [0xdcf8e6]
mov dword [esp], eax
mov dword [esp + 4], 0xc
call fcn.00442ff0
mov eax, dword [esp + 0x14]
mov dword [esp], eax
call fcn.00442f70
lea eax, [0xdc7f61]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.00442ff0
mov eax, dword [esp + 0x10]
mov dword [esp], eax
call fcn.00442f70
lea eax, [0xdc7f67]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.00442ff0
mov eax, dword [esp + 8]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00442e80
lea eax, [0xdce318]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.00442ff0
mov eax, dword [esp + 0xc]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00442ce0
call fcn.00442990
call fcn.004427e0
lea eax, [0xde1cc2]
mov dword [esp], eax
mov dword [esp + 4], 0x19
call fcn.00440950
lea eax, [0xddbf23]
mov dword [esp], eax
mov dword [esp + 4], 0x15
call fcn.00440950
nop
call fcn.00472c30
jmp fcn.0044eb00
Function at 0x451ec0
Capabilities:
Get geographical location

Disassembly:
mov ecx, dword [0x1a1afe0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x452051
sub esp, 0x44
nop
nop
lea eax, [0x1a1cb80]
mov dword [esp], eax
call fcn.0040ee90
movzx eax, byte [0x1a1ccd0]
test al, al
je 0x451f08
lea eax, [0xdd23f5]
mov dword [esp], eax
mov dword [esp + 4], 0xe
call fcn.00440a20
mov edx, dword [0x19d7b28]
test edx, edx
je 0x451f1f
mov ebx, dword [0x19d7b2c]
xor eax, eax
jmp 0x451fd6
lea eax, [0x1a1cb84]
mov dword [esp], eax
mov dword [esp + 4], 0x20
mov dword [esp + 8], 0x20
call fcn.0043cf10
cmp dword [esp + 0xc], 0x20
je 0x451f69
mov byte [0x1a1ad7a], 1
lea eax, [0x1a1cb84]
mov dword [esp], eax
mov dword [esp + 4], 0x20
mov dword [esp + 8], 0x20
call fcn.00452060
lea edi, [esp + 0x24]
lea esi, [0x1a1cb84]
call fcn.004747a0
lea eax, [0x1a1cba4]
mov dword [esp], eax
lea edi, [esp + 4]
lea esi, [esp + 0x24]
call fcn.004747a0
call fcn.00406f50
lea eax, [0x1a1cb84]
mov dword [esp], eax
mov dword [esp + 4], 0x20
call fcn.00474800
mov byte [0x1a1ccd0], 1
nop
nop
lea eax, [0x1a1cb80]
mov dword [esp], eax
call fcn.0040f0b0
add esp, 0x44
ret
lea esi, [0x1a1cb84]
movzx edi, byte [ecx + esi]
xor edi, ebp
xchg edi, eax
mov byte [esi + ecx], al
xchg edi, eax
inc eax
cmp eax, ebx
jge 0x451fee
mov ebp, eax
and ebp, 0xffffffe0
mov ecx, eax
sub ecx, ebp
movzx ebp, byte [eax + edx]
cmp ecx, 0x20
jb 0x451fc4
jmp 0x452044
mov eax, dword [0x19d7b2c]
test eax, eax
je 0x45200a
mov ecx, dword [0x19d7b28]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00474800
mov dword [0x19d7b2c], 0
mov dword [0x19d7b30], 0
mov eax, dword [0x1a1b1d8]
test eax, eax
je 0x452035
mov eax, dword [0x19d7b28]
call fcn.00474030
mov dword [edi], eax
mov dword [0x19d7b28], 0
jmp 0x451f69
mov eax, ecx
mov ecx, 0x20
call fcn.004740b0
nop
call fcn.00472c30
jmp fcn.00451ec0

Function at 0x4521b0
Capabilities:
Get geographical location

Disassembly:
mov ecx, dword [0x1a1afe0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x45225d
sub esp, 0x10
nop
nop
lea eax, [0x1a1cb80]
mov dword [esp], eax
call fcn.0040ee90
movzx eax, byte [0x1a1ccd0]
test al, al
jne 0x452208
lea eax, [0xdd39f2]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00440a20
jmp 0x452208
lea eax, [0x1a1cba4]
mov dword [esp], eax
call fcn.00407230
mov eax, dword [0x1a1ccc4]
nop
cmp dword [0x1a1ccc8], eax
jbe 0x4521fa
lea ecx, [eax + 1]
mov dword [0x1a1ccc4], ecx
and eax, 0x1f
lea ecx, [0x1a1cba4]
lea eax, [ecx + eax*8]
mov ecx, dword [eax]
mov dword [esp + 8], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0xc], eax
nop
nop
lea edx, [0x1a1cb80]
mov dword [esp], edx
call fcn.0040f0b0
mov eax, dword [esp + 8]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xc]
mov dword [esp + 0x18], eax
add esp, 0x10
ret
call fcn.00472c30
jmp fcn.004521b0