joyce8/EMBER2024-capa huggingface dataset:
Function at 0x44c340
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5438df
mov eax, dword fs:[0]
push eax
sub esp, 0x44
push esi
push edi
mov eax, dword [0x598c90]
xor eax, esp
push eax
lea eax, [esp + 0x50]
mov dword fs:[0], eax
mov edi, ecx
lea esi, [esp + 0x28]
call fcn.00489d40
mov dword [esp + 0x58], 0
mov eax, dword [edi + 0x1c]
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
sub esp, 0x10
fstp dword [esp + 0x20]
fld dword [esp + 0x20]
fsub qword [0x572eb0]
fstp dword [esp + 0x24]
fld dword [esp + 0x24]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fld dword [0x572d48]
fst dword [esp + 4]
fstp dword [esp]
call fcn.0048ad30
fld dword [esp + 0x10]
sub esp, 8
fld qword [0x572c90]
mov eax, esi
fmul st(1)
fstp dword [esp + 0x18]
fld dword [esp + 0x18]
fstp dword [esp + 4]
fsub qword [0x572c40]
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fstp dword [esp]
call fcn.0048a100
mov ecx, dword [edi + 0x18]
fld dword [esp + 0x10]
sub esp, 8
fstp dword [esp + 4]
mov dword [esp + 0x1c], ecx
fild dword [esp + 0x1c]
mov eax, esi
fstp dword [esp]
call fcn.0048a250
push 1
push 0x1000502
lea edx, [esp + 0x1c]
push edx
mov ecx, edi
call fcn.00434820
mov edi, dword [ebp + 8]
push eax
mov esi, edi
call fcn.00478940
fld dword [0x572d48]
push ecx
xor ecx, ecx
fstp dword [esp]
xor eax, eax
lea esi, [esp + 0x1c]
call fcn.0048dc30
push 0x59f59c
push eax
lea eax, [esp + 0x30]
push eax
push edi
mov byte [esp + 0x68], 1
call fcn.004790d0
call fcn.0048dca0
lea ecx, [esp + 0x28]
push ecx
call fcn.00489d90
mov ecx, dword [esp + 0x50]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x44ef00
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x548c84
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push edi
mov eax, dword [0x598c90]
xor eax, esp
push eax
lea eax, [esp + 0x20]
mov dword fs:[0], eax
lea eax, [esp + 0x14]
mov ecx, esi
call fcn.0044ec60
lea ecx, [esp + 0xc]
push ecx
mov edi, eax
mov dword [esp + 0x2c], 0
call fcn.00417c00
push eax
push esi
mov byte [esp + 0x30], 1
call fcn.0044ec80
call fcn.0040c720
or edx, 0xffffffff
lock xadd dword [eax], edx
lea ecx, [esp + 0xc]
call fcn.0041add0
call fcn.0040c720
or ecx, 0xffffffff
lock xadd dword [eax], ecx
lea ecx, [esp + 0x14]
call fcn.0041add0
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
pop ecx
pop edi
mov esp, ebp
pop ebp
ret
Function at 0x450c40
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x54a42c
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
push edi
mov eax, dword [0x598c90]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
push eax
lea ecx, [esp + 0x10]
push ecx
call fcn.00418a20
add esp, 8
mov dword [esp + 0x30], 0
mov edx, dword [esp + 0xc]
xor eax, eax
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], edx
call fcn.004031b0
lea eax, [esp + 0x10]
call fcn.00403100
test eax, eax
je 0x450d78
mov ecx, dword [esi + 0x100]
mov ecx, dword [ecx + 0x78]
lea eax, [esp + 0x1c]
call fcn.0044ec60
push ecx
mov byte [esp + 0x34], 1
lea ecx, [esp + 0x10]
mov eax, esp
mov dword [esp + 0x18], esp
call fcn.0041ae00
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x24]
push eax
call fcn.00417d00
mov ecx, eax
mov byte [esp + 0x30], 2
call fcn.00418060
test al, al
sete bl
mov byte [esp + 0x30], 1
call fcn.0040c720
or ecx, 0xffffffff
lock xadd dword [eax], ecx
lea ecx, [esp + 0x14]
call fcn.0041add0
test bl, bl
je 0x450d55
mov eax, str.Couldnt_create_the_folder_
lea ecx, [esp + 0x14]
call fcn.0041ace0
mov edi, eax
mov eax, str.New_Folder
lea ecx, [esp + 0x10]
mov byte [esp + 0x30], 3
call fcn.0041ace0
mov edx, edi
mov ecx, eax
mov byte [esp + 0x30], 4
call fcn.0046f190
lea ecx, [esp + 0x10]
call fcn.0041add0
lea ecx, [esp + 0x14]
mov byte [esp + 0x30], 1
call fcn.0041add0
mov edx, dword [esi + 0x100]
mov eax, dword [edx + 0x78]
call fcn.0044ef90
call fcn.0040c720
or ecx, 0xffffffff
lock xadd dword [eax], ecx
lea ecx, [esp + 0x1c]
call fcn.0041add0
lea ecx, [esp + 0xc]
call fcn.0041add0
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x451150
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
push ebp
push edi
mov edi, dword [esi + 0x98]
lea ebx, [esi + 0x78]
lea ebp, [esi + 0x88]
push ebx
mov dword [esi], vtable.juce::FileListItemComponent.0
mov dword [ebx], vtable.juce::FileListItemComponent.1.0
mov dword [ebp], vtable.juce::FileListItemComponent.2.0
call fcn.00421770
call fcn.004d7350
or ecx, 0xffffffff
lock xadd dword [eax], ecx
lea ecx, [esi + 0xac]
call fcn.0048ff10
lea ecx, [esi + 0xa8]
call fcn.0041add0
lea ecx, [esi + 0xa4]
call fcn.0041add0
call fcn.0040c720
or edx, 0xffffffff
lock xadd dword [eax], edx
lea ecx, [esi + 0x9c]
call fcn.0041add0
mov ecx, ebp
call fcn.004309d0
pop edi
pop ebp
mov dword [ebx], vtable.juce::TimeSliceClient.0
mov ecx, esi
pop ebx
jmp fcn.004320e0
Function at 0x452430
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x540b48
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push esi
push edi
mov eax, dword [0x598c90]
xor eax, esp
push eax
lea eax, [esp + 0x18]
mov dword fs:[0], eax
mov ebx, dword [esp + 0x2c]
mov eax, 0x566fc0
lea ecx, [esp + 0x10]
call fcn.0041ae90
mov eax, 0x566fc4
lea ecx, [esp + 0x2c]
mov dword [esp + 0x20], 0
call fcn.0041ae90
mov eax, dword [esp + 0x28]
push eax
lea edi, [esp + 0x18]
mov byte [esp + 0x24], 1
call fcn.0041ca00
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x30]
push edx
push ebx
mov byte [esp + 0x2c], 2
call fcn.0041dfb0
mov ecx, edi
call fcn.0041add0
lea ecx, [esp + 0x2c]
call fcn.0041add0
lea ecx, [esp + 0x10]
mov dword [esp + 0x20], 0xffffffff
call fcn.0041add0
push ebx
call fcn.0041dd30
mov edi, ebx
call fcn.0041dcf0
mov esi, dword [ebx + 0xc]
sub esi, 1
js 0x452521
lea esp, [esp]
mov eax, esi
mov ecx, ebx
call fcn.0041db80
mov ecx, 0x566fc8
mov edx, eax
call fcn.0041b450
test al, al
je 0x45251c
mov eax, 0x5663dc
lea ecx, [esp + 0x2c]
call fcn.0041ae90
push ebx
lea eax, [esp + 0x30]
mov ecx, esi
call fcn.0041dbf0
lea ecx, [esp + 0x2c]
call fcn.0041add0
sub esi, 1
jns 0x4524e0
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add esp, 0x14
ret

Function at 0x4533a0
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x542165
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
push esi
push edi
mov eax, dword [0x598c90]
xor eax, esp
push eax
lea eax, [esp + 0x38]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
lea edi, [esp + 0xc]
call fcn.00424ab0
mov al, byte [ebp + 0x14]
mov edi, dword [ebp + 0x10]
mov dword [esp + 0x40], 0
lea esi, [esp + 0x1c]
mov dword [esp + 0x14], 1
mov byte [esp + 0x2c], al
call fcn.00452a10
mov ecx, dword [ebp + 0x18]
mov edx, dword [ebp + 0x1c]
mov dword [esp + 0x30], ecx
mov ecx, dword [ebp + 8]
push 0
lea eax, [esp + 0x10]
mov dword [esp + 0x1c], edx
mov edx, dword [ecx + 0x2c]
push eax
push edx
call fcn.004242b0
call fcn.004d48c0
or ecx, 0xffffffff
lock xadd dword [eax], ecx
mov ecx, dword [esp + 0x38]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x18

Function at 0x4538e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
lea ecx, [esi + 0x78]
mov dword [esi], vtable.juce::CaretComponent.0
mov dword [ecx], vtable.juce::CaretComponent.1.0
call fcn.004317d0
mov ecx, esi
jmp fcn.004320e0
Function at 0x453e70
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x548b08
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x598c90]
xor eax, esp
push eax
lea eax, [esp + 0x20]
mov dword fs:[0], eax
mov ebx, dword [esp + 0x34]
mov edi, dword [esp + 0x30]
call fcn.00431fa0
mov dword [esp + 0x28], 0
push 1
lea eax, [esp + 0x14]
mov ecx, ebx
mov dword [edi], vtable.juce::ComponentAnimator::AnimationTask::ProxyComponent.0
call fcn.004349c0
push eax
lea eax, [edi + 0x78]
push eax
push ebx
call fcn.004345f0
call fcn.004d73d0
mov ecx, 1
lock xadd dword [eax], ecx
lea eax, [ebx + 0x10]
mov byte [esp + 0x28], 2
call fcn.004330c0
mov eax, ebx
call fcn.00433fc0
push ecx
mov eax, edi
fstp dword [esp]
call fcn.00433f40
xor al, al
mov ecx, edi
call fcn.00433370
mov eax, dword [ebx + 0xc]
test eax, eax
je 0x453f12
push 0xffffffffffffffff
push eax
mov esi, edi
call fcn.004335f0
jmp 0x453f35
mov eax, ebx
call fcn.00432890
test al, al
je 0x453f35
mov eax, ebx
call fcn.00436400
test eax, eax
je 0x453f35
mov edx, dword [eax + 8]
push 0
push edx
mov ecx, edi
call fcn.00432610
push 1
mov ecx, edi
call fcn.004323e0
push ebx
mov eax, edi
call fcn.00432a10
mov eax, edi
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add esp, 0x1c
ret 8
Function at 0x455ac0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov dword [esi], vtable.juce::ResizableBorderComponent.0
call fcn.004d5e90
or ecx, 0xffffffff
lock xadd dword [eax], ecx
call fcn.004d54d0
or edx, 0xffffffff
lock xadd dword [eax], edx
mov ecx, dword [esi + 0x78]
test ecx, ecx
je 0x455afd
lea eax, [ecx + 4]
or edx, 0xffffffff
lock xadd dword [eax], edx
jne 0x455afd
test ecx, ecx
je 0x455afd
mov eax, dword [ecx]
mov edx, dword [eax]
push 1
call edx
mov ecx, esi
jmp fcn.004320e0

Function at 0x455f40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov dword [esi], vtable.juce::ResizableCornerComponent.0
call fcn.004d5ed0
or ecx, 0xffffffff
lock xadd dword [eax], ecx
mov ecx, dword [esi + 0x78]
test ecx, ecx
je 0x455f71
lea eax, [ecx + 4]
or edx, 0xffffffff
lock xadd dword [eax], edx
jne 0x455f71
test ecx, ecx
je 0x455f71
mov eax, dword [ecx]
mov edx, dword [eax]
push 1
call edx
mov ecx, esi
jmp fcn.004320e0

Function at 0x458770
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x53e342
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push ebp
push esi
push edi
mov eax, dword [0x598c90]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov edi, dword [esp + 0x2c]
mov dword [edi], vtable.juce::LookAndFeel.0
xor ebx, ebx
mov dword [edi + 4], ebx
call fcn.0040e2e0
mov ecx, 1
lock xadd dword [eax], ecx
mov dword [edi + 0xc], ebx
mov dword [edi + 0x10], ebx
mov dword [esp + 0x24], ebx
mov dword [edi + 0x14], ebx
call fcn.004d9790
mov edx, 1
lock xadd dword [eax], edx
mov dword [edi + 0x1c], ebx
mov dword [edi + 0x20], ebx
lea esi, [edi + 0x24]
mov ecx, esi
call fcn.0041adc0
lea ebp, [edi + 0x28]
mov ecx, ebp
call fcn.0041adc0
lea ecx, [edi + 0x2c]
call fcn.0041adc0
mov dword [edi + 0x30], ebx
mov dword [edi + 0x34], ebx
mov byte [edi + 0x38], bl
call fcn.004d6330
mov ecx, 1
lock xadd dword [eax], ecx
mov byte [esp + 0x24], 7
mov ebx, 0x5670b0
mov ecx, dword [ebx + 4]
lea eax, [esp + 0x18]
call fcn.00453820
mov edx, dword [ebx]
push eax
push edx
push edi
call fcn.00458a70
add ebx, 8
cmp ebx, 0x567368
jl 0x458812
test byte [0x5a0640], 1
jne 0x45885a
or dword [0x5a0640], 1
mov ecx, 0x5a0624
call fcn.0041adc0
push 0x54f980
call fcn.0051f103
add esp, 4
mov eax, 2
test byte [0x5a0640], al
jne 0x458884
or dword [0x5a0640], eax
mov ecx, 0x5a0620
call fcn.0041adc0
push 0x54f970
call fcn.0051f103
add esp, 4
mov eax, 4
test byte [0x5a0640], al
jne 0x4588ae
or dword [0x5a0640], eax
mov ecx, 0x5a061c
call fcn.0041adc0
push 0x54f960
call fcn.0051f103
add esp, 4
test byte [0x5a0640], 8
jne 0x4588d5
or dword [0x5a0640], 8
mov ecx, 0x5a0618
call fcn.0041adc0
push 0x54f950
call fcn.0051f103
add esp, 4
mov eax, dword [0x5a0624]
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
call fcn.00403100
test eax, eax
jne 0x4588f0
call fcn.004bbda0
mov eax, 0x5a0624
call fcn.0041ae20
mov eax, 0x5a0620
mov esi, ebp
call fcn.0041ae20
mov eax, 0x5a061c
lea esi, [edi + 0x2c]
call fcn.0041ae20
call fcn.00485cb0
mov eax, edi
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x14
ret 4
Function at 0x45af30
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5420df
mov eax, dword fs:[0]
push eax
sub esp, 0x48
push ebx
push esi
push edi
mov eax, dword [0x598c90]
xor eax, esp
push eax
lea eax, [esp + 0x58]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [esp + 0x18], ebx
fld dword [ebp + 0xc]
xor edi, edi
fld dword [ebp + 0x14]
fcom st(1)
fnstsw ax
test ah, 0x41
jne 0x45af7e
fstp st(1)
mov edi, 1
fstp st(0)
jmp 0x45afa8
fadd dword [ebp + 0x1c]
fcompp
fnstsw ax
test ah, 5
jp 0x45af91
mov edi, 3
jmp 0x45afa8
fld dword [ebp + 0x10]
fld dword [ebp + 0x18]
fadd dword [ebp + 0x20]
fcompp
fnstsw ax
test ah, 5
jp 0x45afa8
mov edi, 2
lea esi, [esp + 0x30]
call fcn.00489d40
fld dword [ebp + 0x1c]
fld st(0)
mov dword [esp + 0x60], 0
fld qword [0x572de8]
fmul st(1), st(0)
fxch st(1)
fstp dword [esp + 0x14]
fld dword [ebp + 0x20]
fld st(0)
fmulp st(2)
fxch st(1)
fstp dword [esp + 0x10]
fld dword [esp + 0x14]
fld qword [0x5730c0]
fcom st(1)
fnstsw ax
test ah, 0x41
jne 0x45b003
fstp st(0)
fld dword [esp + 0x10]
fcom st(1)
fnstsw ax
test ah, 5
jp 0x45afff
fstp st(1)
jmp 0x45b01c
fstp st(0)
jmp 0x45b01c
fstp st(1)
fld dword [esp + 0x10]
fcom st(1)
fnstsw ax
fstp st(1)
test ah, 5
jnp 0x45b01c
fstp st(0)
fld dword [0x5730bc]
fstp dword [esp + 0x10]
sub esp, 0x24
fld dword [esp + 0x34]
lea esi, [esp + 0x54]
fstp dword [esp + 0x20]
fld dword [0x572f78]
fstp dword [esp + 0x1c]
fld dword [ebp + 0x10]
fstp dword [esp + 0x18]
fld dword [ebp + 0xc]
fstp dword [esp + 0x14]
fld dword [0x572d3c]
fstp dword [esp + 0x10]
fld qword [0x572eb0]
fsub st(1), st(0)
fxch st(1)
fstp dword [esp + 0x38]
fld dword [esp + 0x38]
fstp dword [esp + 0xc]
fsubp st(1)
fstp dword [esp + 0x38]
fld dword [esp + 0x38]
fstp dword [esp + 8]
fld dword [ebp + 0x18]
fld qword [0x572c40]
fadd st(1), st(0)
fxch st(1)
fstp dword [esp + 0x38]
fld dword [esp + 0x38]
fstp dword [esp + 4]
fadd dword [ebp + 0x14]
fstp dword [esp + 0x38]
fld dword [esp + 0x38]
fstp dword [esp]
call fcn.0048b5a0
fld dword [0x572fbc]
push ecx
fstp dword [esp]
push 0x1001b00
lea eax, [esp + 0x1c]
mov edi, ebx
call fcn.00458a20
lea edx, [esp + 0x14]
call fcn.00476380
mov ebx, dword [ebp + 8]
push eax
mov esi, ebx
call fcn.00478940
push 0x59f59c
lea edi, [esp + 0x34]
call fcn.004790a0
fld dword [0x572ed0]
mov edi, dword [esp + 0x18]
push ecx
fstp dword [esp]
push 0x1001c00
lea eax, [esp + 0x20]
call fcn.00458a20
lea edx, [esp + 0x20]
call fcn.00476380
push eax
call fcn.00478940
fld dword [0x5730b8]
push ecx
xor ecx, ecx
fstp dword [esp]
xor eax, eax
lea esi, [esp + 0x24]
call fcn.0048dc30
push 0x59f59c
push eax
lea eax, [esp + 0x38]
push eax
push ebx
mov byte [esp + 0x70], 1
call fcn.004790d0
call fcn.0048dca0
lea ecx, [esp + 0x30]
push ecx
call fcn.00489d90
mov ecx, dword [esp + 0x58]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x1c
Function at 0x45b380
Capabilities:
Access peb ldr_data
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x53f584
mov eax, dword fs:[0]
push eax
sub esp, 0x68
push ebx
push esi
push edi
mov eax, dword [0x598c90]
xor eax, esp
push eax
lea eax, [esp + 0x78]
mov dword fs:[0], eax
mov edi, ecx
push 0x1000700
lea eax, [esp + 0x1c]
call fcn.00458a20
fldz
cmp byte [ebp + 0x14], 0
je 0x45b3cd
fild dword [ebp + 0x10]
fstp dword [esp + 0x14]
jmp 0x45b3d1
fst dword [esp + 0x14]
fild dword [ebp + 0x10]
sub esp, 0xc
lea edx, [esp + 0x2c]
lea eax, [esp + 0x24]
fstp dword [esp + 0x28]
fld dword [esp + 0x20]
fstp dword [esp + 8]
fst dword [esp + 4]
fstp dword [esp]
call fcn.00476380
fld dword [esp + 0x24]
push eax
fmul qword [0x572c90]
sub esp, 8
lea eax, [esp + 0x2c]
lea ecx, [esp + 0x60]
fstp dword [esp + 0x28]
fld dword [esp + 0x28]
fstp dword [esp + 4]
fldz
fstp dword [esp]
push eax
push ecx
xor al, al
call fcn.00476b70
mov ebx, dword [ebp + 8]
push eax
mov esi, ebx
mov dword [esp + 0x84], 0
call fcn.004789d0
lea edx, [esp + 0x4c]
push edx
mov dword [esp + 0x84], 0xffffffff
call fcn.00476c70
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0xc]
add eax, 0xfffffffe
push eax
add ecx, 0xfffffffe
push ecx
mov ecx, 1
push ebx
mov eax, ecx
call fcn.00478ee0
fild dword [ebp + 0xc]
mov al, byte [ebp + 0x14]
fmul qword [0x572c90]
fstp dword [esp + 0x18]
fld dword [esp + 0x1c]
fld qword [0x572de8]
fmul st(1)
fstp dword [esp + 0x20]
fld dword [0x572d58]
fld dword [0x555b74]
test al, al
je 0x45b4a3
fst dword [esp + 0x1c]
jmp 0x45b4ab
fxch st(1)
fst dword [esp + 0x1c]
fxch st(1)
fld st(2)
fmul dword [esp + 0x1c]
fstp dword [esp + 0x14]
test al, al
je 0x45b4bd
fstp st(0)
jmp 0x45b4bf
fstp st(1)
fstp dword [esp + 0x1c]
lea esi, [esp + 0x28]
fmul dword [esp + 0x1c]
fstp dword [esp + 0x1c]
call fcn.00489d40
fld dword [esp + 0x1c]
mov dword [esp + 0x80], 1
sub esp, 0x18
fstp dword [esp + 0x14]
fld dword [esp + 0x30]
fst dword [esp + 0x10]
fld dword [esp + 0x2c]
fst dword [esp + 0xc]
fld dword [esp + 0x38]
fld st(0)
fadd st(3)
fstp dword [esp + 0x38]
fld dword [esp + 0x38]
fstp dword [esp + 8]
fxch st(1)
fstp dword [esp + 4]
fsubp st(1)
fstp dword [esp + 0x38]
fld dword [esp + 0x38]
fstp dword [esp]
call fcn.0048ac60
fld dword [0x572f78]
push ecx
fstp dword [esp]
push 0x1000600
lea eax, [esp + 0x20]
call fcn.00458a20
lea edx, [esp + 0x28]
call fcn.00476380
push eax
mov esi, ebx
call fcn.00478940
push 0x59f59c
lea edi, [esp + 0x2c]
call fcn.004790a0
mov edx, edi
push edx
call fcn.00489d90
mov ecx, dword [esp + 0x78]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
Function at 0x45e8d0
Capabilities:
Access peb ldr_data
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x53f54a
mov eax, dword fs:[0]
push eax
sub esp, 0x48
push esi
mov eax, dword [0x598c90]
xor eax, esp
push eax
lea eax, [esp + 0x50]
mov dword fs:[0], eax
cmp byte [ebp + 0x18], 0
fld dword [0x572f78]
mov esi, dword [ebp + 8]
fstp dword [esp + 0xc]
jne 0x45e913
cmp byte [ebp + 0x1c], 0
je 0x45e92e
mov ecx, 0x190000ff
lea eax, [esp + 0x1c]
call fcn.00453820
mov ecx, eax
call fcn.00478ff0
fld1
fstp dword [esp + 0xc]
fild dword [ebp + 0xc]
mov eax, dword [ebp + 0x10]
fld qword [0x572c90]
mov ecx, dword [ebp + 0xc]
cmp eax, ecx
fmul st(1), st(0)
mov dword [esp + 0x10], eax
fxch st(1)
fstp dword [esp + 0x18]
fimul dword [ebp + 0x10]
fstp dword [esp + 0x14]
jl 0x45e958
mov dword [esp + 0x10], ecx
fild dword [esp + 0x10]
sub esp, 0xc
lea edx, [esp + 0x2c]
mov eax, 0x59f898
fmul qword [0x573008]
fstp dword [esp + 0x1c]
fld dword [esp + 0x20]
fld dword [esp + 0x1c]
fmul qword [0x572eb0]
fsubp st(1)
fstp dword [esp + 0x28]
fld dword [esp + 0x28]
fstp dword [esp + 8]
fld dword [esp + 0x24]
fstp dword [esp + 4]
fld dword [esp + 0x18]
fstp dword [esp]
call fcn.00476380
fld dword [esp + 0x18]
push eax
fld st(0)
sub esp, 0xc
fadd dword [esp + 0x2c]
lea edx, [esp + 0x24]
mov eax, 0x59f750
fstp dword [esp + 0x34]
fld dword [esp + 0x34]
fstp dword [esp + 8]
fmul qword [0x572d10]
fadd dword [esp + 0x30]
fstp dword [esp + 0x34]
fld dword [esp + 0x34]
fstp dword [esp + 4]
fld dword [esp + 0x24]
fstp dword [esp]
call fcn.00476380
push eax
lea eax, [esp + 0x3c]
push eax
mov al, 1
call fcn.00476b70
push eax
mov dword [esp + 0x5c], 0
call fcn.004789d0
lea ecx, [esp + 0x24]
push ecx
mov dword [esp + 0x5c], 0xffffffff
call fcn.00476c70
fld dword [esp + 0x10]
fld st(0)
sub esp, 0x10
fadd st(1)
fstp dword [esp + 0x2c]
fld dword [esp + 0x2c]
fst dword [esp + 0xc]
fstp dword [esp + 8]
fld dword [esp + 0x24]
fsub st(1)
fstp dword [esp + 0x2c]
fld dword [esp + 0x2c]
fstp dword [esp + 4]
fsubr dword [esp + 0x28]
fstp dword [esp + 0x2c]
fld dword [esp + 0x2c]
fstp dword [esp]
push esi
call fcn.004796b0
mov ecx, dword [esp + 0x50]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
ret 0x18
Function at 0x460930
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x546044
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push esi
push edi
mov eax, dword [0x598c90]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
mov edi, dword [ebp + 0x10]
mov esi, edi
call fcn.004868c0
fld dword [0x573120]
push 1
push ecx
lea esi, [esp + 0x1c]
fstp dword [esp]
mov dword [esp + 0x18], 0x24
call fcn.004858f0
fild dword [ebp + 0x14]
mov dword [esp + 0x30], 0
lea ecx, [esp + 0x10]
fsub qword [0x573148]
push ecx
mov ecx, dword [ebp + 8]
sub esp, 0xc
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fstp dword [esp + 8]
fld dword [0x573140]
fstp dword [esp + 4]
fld dword [0x5730e8]
fstp dword [esp]
push eax
mov eax, edi
call fcn.00486e10
mov edx, esi
push edx
mov dword [esp + 0x34], 0xffffffff
call fcn.004859e0
fld dword [0x555b58]
push 0
push ecx
lea esi, [esp + 0x24]
fstp dword [esp]
mov dword [esp + 0x18], 0x24
call fcn.004858f0
fld dword [esp + 0xc]
lea ecx, [esp + 0x10]
push ecx
mov ecx, dword [ebp + 0xc]
mov dword [esp + 0x34], 1
sub esp, 0xc
fstp dword [esp + 8]
fld dword [0x57313c]
fstp dword [esp + 4]
fld dword [0x5730e8]
fstp dword [esp]
push eax
mov eax, edi
call fcn.00486e10
mov edx, esi
push edx
call fcn.004859e0
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10
Function at 0x468370
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x54
push ebx
mov ebx, dword [esp + 0x5c]
push esi
mov esi, eax
push edi
mov edi, ecx
test esi, esi
je 0x4683dc
movzx eax, byte [edi + 0x3c]
mov ecx, dword [edi + 0x38]
push eax
push ecx
lea edx, [edi + 0x30]
push edx
mov edx, dword [edi + 0xc]
sub esp, 8
mov eax, esp
mov dword [esp + 0x78], esp
push edx
lea ecx, [edi + 0x24]
push esi
call fcn.00432d30
mov ecx, dword [edi + 0x10]
lea eax, [edi + 0x18]
push eax
push ecx
push esi
lea edx, [edi + 8]
push edx
lea eax, [esp + 0x34]
mov ecx, edi
call fcn.004cdc90
mov ecx, dword [edi + 0xc]
push ecx
mov ecx, eax
push esi
lea eax, [esp + 0x44]
call fcn.00432d30
mov edx, dword [edi + 0x20]
push edx
lea esi, [esp + 0x48]
call fcn.00468300
mov edi, eax
mov esi, ebx
call fcn.004683f0
pop edi
pop esi
mov eax, ebx
pop ebx
add esp, 0x54
ret 4

Function at 0x4685d0
Capabilities:
Access peb ldr_data
Get ntdll base address
Get process heap flags

Disassembly:
push 0xffffffffffffffff
push 0x540a83
mov eax, dword fs:[0]
push eax
push esi
mov eax, dword [0x598c90]
xor eax, esp
push eax
lea eax, [esp + 8]
mov dword fs:[0], eax
mov esi, dword [esp + 0x18]
push esi
call fcn.00430910
xor edx, edx
mov dword [esp + 0x10], edx
mov dword [esi], vtable.juce::MouseInputSourceInternal.0
mov dword [esi + 0xc], edx
mov byte [esi + 0x10], 1
lea eax, [esi + 0x1c]
xor ecx, ecx
mov dword [esi + 0x14], edx
mov dword [esi + 0x18], edx
call fcn.00453820
mov eax, dword [esp + 0x1c]
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], edx
push fcn.004c5a50
mov byte [esp + 0x14], 1
push 0x469360
push 4
mov dword [esi + 0x28], edx
mov dword [esi + 0x2c], edx
mov dword [esi + 0x30], edx
push 0x18
lea ecx, [esi + 0x40]
push ecx
mov byte [esi + 0x34], dl
mov byte [esi + 0x35], dl
mov dword [esi + 0x38], edx
mov dword [esi + 0x3c], edx
call fcn.0051e9e3
lea eax, [esi + 0xa8]
call fcn.0040fa40
mov eax, esi
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0xc
ret 8