joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5dfdf0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x5dff6f
sub esp, 0x74
mov eax, dword [esp + 0x78]
test eax, eax
je 0x5dff68
mov ecx, dword [eax]
lea eax, [0x81ebc0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
call fcn.0040a740
mov eax, dword [esp + 0xc]
mov dword [esp + 0x40], eax
lea edi, [esp + 0x44]
xor eax, eax
call fcn.0044ca84
lea eax, [0x81ebc0]
mov dword [esp], eax
mov ecx, dword [esp + 0x78]
mov dword [esp + 4], ecx
lea ecx, [esp + 0x44]
mov dword [esp + 8], ecx
call fcn.0040b7b0
jmp 0x5dfe70
lea eax, [esp + 0x44]
mov dword [esp], eax
call fcn.0040ba30
mov eax, dword [esp + 0x44]
test eax, eax
je 0x5dff5c
mov ecx, dword [esp + 0x48]
mov edx, dword [ecx + 4]
mov dword [esp + 0x28], edx
mov ebx, dword [ecx]
mov dword [esp + 0x38], ebx
mov ebp, dword [eax + 4]
mov dword [esp + 0x30], ebp
mov eax, dword [eax]
mov dword [esp + 0x3c], eax
mov ecx, dword [ecx + 8]
mov dword [esp + 0x2c], ecx
lea esi, [0x7b48a0]
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], edx
call fcn.00438a20
mov eax, dword [esp + 0x14]
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x20], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x34], edx
lea ebx, [0x7b48a0]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov ebp, dword [esp + 0x38]
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0x28]
mov dword [esp + 0x14], ebp
mov ebp, dword [esp + 0x2c]
mov dword [esp + 0x18], ebp
call fcn.0040f890
lea eax, [0x81ebc0]
mov dword [esp], eax
mov ecx, dword [esp + 0x40]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x3c]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x30]
mov dword [esp + 0xc], edx
call fcn.0040ec90
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0x20]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x24]
mov dword [edi + 8], eax
mov eax, dword [0xb92b90]
test eax, eax
jne 0x5dff4e
mov eax, dword [esp + 0x34]
mov dword [edi], eax
jmp 0x5dfe64
mov eax, dword [esp + 0x34]
call fcn.0044c990
jmp 0x5dfe64
mov eax, dword [esp + 0x40]
mov dword [esp + 0x7c], eax
add esp, 0x74
ret
xor ecx, ecx
jmp 0x5dfe17
call fcn.0044b230
jmp fcn.005dfdf0
Function at 0x5e0b70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x5e0cef
sub esp, 0x74
mov eax, dword [esp + 0x78]
test eax, eax
je 0x5e0ce8
mov ecx, dword [eax]
lea eax, [0x81ebc0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
call fcn.0040a740
mov eax, dword [esp + 0xc]
mov dword [esp + 0x40], eax
lea edi, [esp + 0x44]
xor eax, eax
call fcn.0044ca84
lea eax, [0x81ebc0]
mov dword [esp], eax
mov ecx, dword [esp + 0x78]
mov dword [esp + 4], ecx
lea ecx, [esp + 0x44]
mov dword [esp + 8], ecx
call fcn.0040b7b0
jmp 0x5e0bf0
lea eax, [esp + 0x44]
mov dword [esp], eax
call fcn.0040ba30
mov eax, dword [esp + 0x44]
test eax, eax
je 0x5e0cdc
mov ecx, dword [esp + 0x48]
mov edx, dword [ecx + 4]
mov dword [esp + 0x28], edx
mov ebx, dword [ecx]
mov dword [esp + 0x38], ebx
mov ebp, dword [eax + 4]
mov dword [esp + 0x30], ebp
mov eax, dword [eax]
mov dword [esp + 0x3c], eax
mov ecx, dword [ecx + 8]
mov dword [esp + 0x2c], ecx
lea esi, [0x7b48a0]
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], edx
call fcn.00438a20
mov eax, dword [esp + 0x14]
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x20], ecx
mov edx, dword [esp + 0xc]
mov dword [esp + 0x34], edx
lea ebx, [0x7b48a0]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov ebp, dword [esp + 0x38]
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0x28]
mov dword [esp + 0x14], ebp
mov ebp, dword [esp + 0x2c]
mov dword [esp + 0x18], ebp
call fcn.0040f890
lea eax, [0x81ebc0]
mov dword [esp], eax
mov ecx, dword [esp + 0x40]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x3c]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x30]
mov dword [esp + 0xc], edx
call fcn.0040ec90
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0x20]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x24]
mov dword [edi + 8], eax
mov eax, dword [0xb92b90]
test eax, eax
jne 0x5e0cce
mov eax, dword [esp + 0x34]
mov dword [edi], eax
jmp 0x5e0be4
mov eax, dword [esp + 0x34]
call fcn.0044c990
jmp 0x5e0be4
mov eax, dword [esp + 0x40]
mov dword [esp + 0x7c], eax
add esp, 0x74
ret
xor ecx, ecx
jmp 0x5e0b97
call fcn.0044b230
jmp fcn.005e0b70
Function at 0x5e3b30
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x5e3ca7
sub esp, 0x70
lea edi, [esp + 0x40]
xor eax, eax
call fcn.0044ca84
lea ecx, [0x80b320]
mov dword [esp], ecx
mov edx, dword [esp + 0x78]
mov dword [esp + 4], edx
lea edx, [esp + 0x40]
mov dword [esp + 8], edx
call fcn.0040b7b0
mov ecx, dword [esp + 0x74]
jmp 0x5e3c76
mov edi, dword [esp + 0x2c]
lea esi, [edi + 1]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x38]
mov ebp, dword [esp + 0x20]
cmp esi, ebp
jge 0x5e3c64
mov dword [esp + 0x2c], esi
lea ebp, [edx + esi*8]
mov edi, dword [ebp + 4]
mov dword [esp + 0x24], edi
mov ebp, dword [ebp]
mov dword [esp + 0x34], ebp
lea edx, [0x80b320]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
call fcn.0040ec90
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov edx, dword [eax]
mov ebx, dword [eax + 8]
lea ebp, [ecx + 1]
cmp ebp, ebx
jg 0x5e3c16
lea ebx, [ecx + 1]
mov dword [eax + 4], ebx
lea ebx, [edx + ecx*8 + 4]
mov ebp, dword [esp + 0x24]
mov dword [ebx], ebp
mov ebx, dword [0xb92b90]
lea edi, [edx + ecx*8]
test ebx, ebx
jne 0x5e3c08
mov eax, dword [esp + 0x34]
mov dword [edi], eax
jmp 0x5e3b7b
mov eax, dword [esp + 0x34]
call fcn.0044c990
jmp 0x5e3b7b
mov dword [esp + 0x3c], eax
lea eax, [0x7b48a0]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
call fcn.00438ba0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x3c]
mov dword [edi + 8], edx
mov edx, dword [0xb92b90]
test edx, edx
jne 0x5e3c5d
mov dword [edi], eax
mov edx, eax
mov eax, edi
jmp 0x5e3be0
call fcn.0044c990
jmp 0x5e3c57
lea eax, [esp + 0x40]
mov dword [esp], eax
call fcn.0040ba30
mov eax, dword [esp + 0x74]
mov ecx, eax
mov eax, dword [esp + 0x40]
test eax, eax
je 0x5e3ca3
mov edx, dword [esp + 0x44]
mov ebx, dword [eax]
mov dword [esp + 0x38], ebx
mov ebp, dword [edx + 4]
mov dword [esp + 0x20], ebp
mov eax, dword [eax + 4]
mov dword [esp + 0x28], eax
mov edx, dword [edx]
mov dword [esp + 0x30], edx
xor esi, esi
jmp 0x5e3b96
add esp, 0x70
ret
call fcn.0044b230
jmp fcn.005e3b30
Function at 0x645f70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x646149
sub esp, 0x28
mov eax, dword [esp + 0x34]
test eax, eax
je 0x646124
mov ecx, dword [esp + 0x2c]
test ecx, ecx
je 0x64612f
mov dword [esp + 0x34], eax
lea eax, [0x823f20]
mov dword [esp], eax
call fcn.00409c40
mov esi, dword [esp + 0x38]
test byte [esi], al
mov edi, dword [esp + 4]
mov dword [esp + 0x1c], edi
mov eax, dword [0xb92b90]
test eax, eax
jne 0x646109
call fcn.0044ce60
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x1c]
mov dword [edx + 0x78], ecx
mov ebx, dword [0xb92b90]
test ebx, ebx
jne 0x6460f8
mov eax, dword [esp + 0x30]
mov dword [edx + 0x7c], eax
mov ebx, dword [esp + 0x38]
mov ebp, dword [ebx + 8]
test ebp, ebp
jne 0x646090
mov eax, dword [esp + 0x34]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.005c6a30
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x10]
test eax, eax
jne 0x646033
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], edx
add esp, 0x28
ret
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
mov dword [esp + 0x24], edx
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax + 0x14]
mov edx, dword [esp + 0x30]
mov dword [esp], edx
call ecx
mov dword [esp], 0
call fcn.00404e90
movzx eax, byte [esp + 8]
test al, al
jne 0x646076
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
mov edx, eax
mov eax, ecx
mov ecx, dword [esp + 0x18]
jmp 0x646023
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 0x18]
mov ecx, dword [esp + 0x30]
mov dword [esp], ecx
call eax
mov ecx, dword [esp + 4]
mov eax, dword [esp + 8]
jmp 0x64606c
lea eax, [0x812b40]
mov dword [esp], eax
call fcn.00409c40
mov eax, dword [esp + 0x38]
mov esi, dword [eax + 8]
test byte [esi], al
mov edi, dword [esp + 4]
mov dword [esp + 0x20], edi
mov eax, dword [0xb92b90]
test eax, eax
jne 0x6460d0
call fcn.0044cf00
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
mov dword [ecx + 8], eax
mov edx, ecx
jmp 0x646003
lea eax, [0x812b40]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
call fcn.0040f640
mov ecx, dword [esp + 0x1c]
lea edi, [ecx + 8]
mov eax, dword [esp + 0x20]
call fcn.0044c990
jmp 0x6460c9
lea edi, [edx + 0x7c]
mov eax, dword [esp + 0x30]
call fcn.0044c990
jmp 0x645ff4
lea eax, [0x823f20]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
call fcn.0040f640
jmp 0x645fd4
mov eax, dword [0xb78434]
jmp 0x645f95
lea eax, [0x7b48a0]
mov dword [esp], eax
lea eax, [0x8b1000]
mov dword [esp + 4], eax
call fcn.004273c0
ud2
call fcn.0044b230
jmp fcn.00645f70
Function at 0x6d1b00
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x6d1d0a
sub esp, 0x5c
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x6c]
mov ebx, dword [esp + 0x68]
mov ebp, dword [esp + 0x64]
mov esi, dword [esp + 0x60]
mov edi, dword [esp + 0x84]
mov dword [esp + 0x54], eax
xor eax, eax
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x54]
jmp 0x6d1c29
lea eax, [edi + edx*8]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ecx
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
mov ecx, dword [0xb80cb8]
mov eax, dword [0xb80cbc]
mov ebx, dword [0xb80cc0]
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], ebx
mov eax, dword [esp + 0x70]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x40], eax
call fcn.006d1f20
mov eax, dword [esp + 0x50]
inc eax
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x48]
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x80]
mov esi, dword [esp + 0x7c]
mov edi, dword [esp + 0x6c]
mov ebp, dword [esp + 0x64]
mov esi, dword [esp + 0x60]
mov edi, dword [esp + 0x84]
mov dword [esp + 0x50], eax
mov dword [esp + 0x70], ecx
mov dword [esp + 0x78], ebx
mov dword [esp + 0x74], edx
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x6c]
mov ebx, dword [esp + 0x68]
mov eax, dword [esp + 0x88]
lea ecx, [eax - 1]
mov edx, dword [esp + 0x50]
cmp edx, ecx
jge 0x6d1c48
cmp edx, eax
jb 0x6d1b4e
jmp 0x6d1d03
lea eax, [edi + eax*8 - 8]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ecx
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x40], eax
call fcn.006d1f20
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], ecx
mov dword [esp + 0xb0], edx
add esp, 0x5c
ret
call fcn.004264e0
ud2
call fcn.0044b230
jmp fcn.006d1b00
Function at 0x6d1d20
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x6d1f07
sub esp, 0x74
lea ecx, [0x8b6180]
mov edx, dword [esp + 0x78]
mov dword [edx + 0xc], ecx
mov ecx, dword [0xb92b90]
test ecx, ecx
jne 0x6d1ef3
mov eax, dword [esp + 0x88]
mov dword [edx + 0x10], eax
mov ecx, dword [eax + 0x10]
mov dword [esp + 0x50], ecx
mov eax, dword [eax + 0xc]
mov dword [esp + 0x58], eax
mov ebx, dword [edx]
mov dword [esp + 8], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.006d6b80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
movzx ebx, byte [esp + 0x18]
test bl, bl
je 0x6d1e5a
mov ebx, dword [esp + 0x78]
mov dword [esp], ebx
mov ebx, dword [esp + 0x7c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x80]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x84]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x40], eax
call fcn.006d2bb0
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xb4], edx
add esp, 0x74
ret
mov dword [esp + 0x54], eax
mov dword [esp + 0x60], ecx
mov dword [esp + 0x5c], edx
mov eax, dword [esp + 0x58]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x68], ecx
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 0
lea edx, [0x7b48a0]
mov dword [esp], edx
lea edx, [esp + 0x64]
mov dword [esp + 4], edx
call fcn.004074b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x78]
mov dword [esp], eax
lea ecx, [0x8419a6]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1c
lea ecx, [esp + 0x6c]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
call fcn.006ce450
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x5c]
jmp 0x6d1d97
lea edi, [edx + 0x10]
mov eax, dword [esp + 0x88]
call fcn.0044c990
jmp 0x6d1d5e
call fcn.0044b230
jmp fcn.006d1d20
Function at 0x6e4a50
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x6e4c73
sub esp, 0x74
mov dword [esp + 0x8c], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 0
mov eax, dword [esp + 0x78]
mov dword [esp], eax
lea edi, [esp + 4]
mov dword [esp + 0x30], edi
lea esi, [esp + 0x7c]
call fcn.0044cf82
mov ecx, dword [esp + 0x88]
mov dword [esp + 0x10], ecx
call fcn.006e4c80
lea esi, [esp + 0x14]
mov dword [esp + 0x2c], esi
lea edi, [esp + 0x68]
call fcn.0044cf82
movzx eax, byte [esp + 0x20]
lea edi, [esp + 0x50]
lea esi, [esp + 0x68]
call fcn.0044cf82
test al, al
je 0x6e4bf7
mov eax, 1
test al, al
je 0x6e4b12
lea edi, [esp + 0x8c]
lea esi, [esp + 0x50]
call fcn.0044cf82
add esp, 0x74
ret
movzx eax, byte [esp + 0x50]
cmp al, 0x18
je 0x6e4afe
mov eax, dword [esp + 0x88]
mov ecx, dword [eax + 4]
mov edx, dword [eax]
mov dword [esp + 0x34], edx
mov dword [esp + 0x38], ecx
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], 0
lea ecx, [0x7b48a0]
mov dword [esp], ecx
lea ecx, [esp + 0x34]
mov dword [esp + 4], ecx
call fcn.004074b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x88]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x10]
lea ecx, [0x8b6200]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp], 6
mov dword [esp + 0xc], 0
lea eax, [0x84a450]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0x2d
lea eax, [esp + 0x3c]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], 1
mov dword [esp + 0x20], 1
call fcn.006e0c20
mov eax, dword [esp + 0x24]
mov dword [esp + 0x8c], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 0
mov byte [esp + 0x8c], 0x18
mov dword [esp + 0x94], eax
add esp, 0x74
ret
mov byte [esp + 0x2b], al
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov edi, dword [esp + 0x30]
lea esi, [esp + 0x50]
call fcn.0044cf82
mov eax, dword [esp + 0x88]
mov dword [esp + 0x10], eax
call fcn.006e4c80
lea edi, [esp + 0x5c]
mov esi, dword [esp + 0x2c]
call fcn.0044cf82
movzx eax, byte [esp + 0x20]
lea edi, [esp + 0x44]
lea esi, [esp + 0x5c]
call fcn.0044cf82
test al, al
je 0x6e4c67
lea edi, [esp + 0x50]
lea esi, [esp + 0x44]
call fcn.0044cf82
movzx ecx, byte [esp + 0x2b]
or eax, ecx
jmp 0x6e4afa
call fcn.0044b230
jmp fcn.006e4a50
Function at 0x6e4c80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x6e4dbc
sub esp, 0x54
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
lea edi, [esp + 0x40]
xor eax, eax
call fcn.0044ca8b
lea ecx, [0x6ed670]
mov dword [esp + 0x40], ecx
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x44], ecx
lea edi, [esp + 0x48]
lea esi, [esp + 0x5c]
call fcn.0044cf82
mov ecx, dword [esp + 0x58]
mov edx, dword [ecx + 4]
mov ebx, dword [esp + 0x68]
mov ebp, dword [ebx + 4]
mov ecx, dword [ebx]
mov dword [esp + 4], edx
lea edx, [0x7ba240]
mov dword [esp], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
call fcn.0040ec90
mov edi, dword [esp + 0x10]
test byte [edi], al
mov ecx, dword [0xb92b90]
test ecx, ecx
jne 0x6e4d9d
lea esi, [esp + 0x5c]
call fcn.0044cf82
mov dword [esp + 0x34], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 0
mov eax, dword [esp + 0x68]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x10]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x58]
mov dword [esp], eax
lea edi, [esp + 4]
lea esi, [esp + 0x5c]
call fcn.0044cf82
lea eax, [esp + 0x40]
mov dword [esp + 0x14], eax
call fcn.006e3c80
lea esi, [esp + 0x18]
lea edi, [esp + 0x34]
call fcn.0044cf82
movzx eax, byte [esp + 0x24]
lea edi, [esp + 0x28]
lea esi, [esp + 0x34]
call fcn.0044cf82
lea edi, [esp + 0x6c]
lea esi, [esp + 0x28]
call fcn.0044cf82
mov byte [esp + 0x78], al
add esp, 0x54
ret
lea eax, [0x8162e0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x5c]
mov dword [esp + 8], eax
call fcn.0040f640
jmp 0x6e4d22
call fcn.0044b230
jmp fcn.006e4c80
Function at 0x749f90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x74a091
sub esp, 0x70
mov eax, dword [esp + 0x74]
test byte [eax], al
lea ecx, [eax + 0x20]
mov dword [esp + 0x1c], ecx
mov dword [esp], ecx
call fcn.0045f6c0
lea edi, [esp + 0x48]
xor eax, eax
call fcn.0044ca86
mov eax, dword [esp + 0x74]
mov eax, dword [eax + 0x1c]
mov dword [esp + 4], eax
lea eax, [0x7b9f40]
mov dword [esp], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0xc], eax
call fcn.0040e910
mov esi, dword [esp + 0x10]
movzx eax, byte [esp + 0x14]
mov byte [esp + 0x1b], al
lea edi, [esp + 0x48]
call fcn.0044cf3c
lea edi, [esp + 0x20]
lea esi, [esp + 0x48]
call fcn.0044cf3c
mov ecx, dword [esp + 0x1c]
mov dword [esp], ecx
call fcn.0045f720
movzx eax, byte [esp + 0x1b]
test al, al
je 0x74a032
mov eax, dword [esp + 0x34]
test eax, eax
je 0x74a057
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
add esp, 0x70
ret
mov eax, dword [esp + 0x44]
mov dword [esp], eax
call fcn.00749f10
movzx eax, byte [esp + 4]
test al, al
jne 0x74a032
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x44]
mov dword [esp + 0x80], ecx
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], edx
add esp, 0x70
ret
call fcn.0044b230
jmp fcn.00749f90
Function at 0x408abc
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
cmp dword [0x4eb4b0], 0
mov al, 0xb4
dec esi
add byte [eax], al

Function at 0x40eed0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov dword [ebp - 4], 0
push 0
call fcn.00490879
add esp, 4
mov dword [0x4ec4c4], eax
mov eax, dword [0x50ace0]
cmp dword [eax + 0x27e8], 3
jne 0x40ef04
call fcn.0040f18d
jmp 0x40f0ef
push 0
push 0
push 0x40f65e
call fcn.00490624
add esp, 0xc
mov dword [0x4ec4d0], eax
cmp dword [0x4ec4d0], 0xffffffff
jne 0x40ef6e
lea ecx, [ebp - 8]
push ecx
call fcn.00490879
add esp, 4
push 0x82
push 0x4bc868
lea edx, [ebp - 8]
push edx
call fcn.00490860
add esp, 4
push eax
push 0x4bc884
call fcn.0048e4ce
add esp, 0x10
push 0x3f4
push 0x195
call fcn.004a3cd4
add esp, 8
mov dword [ebp - 4], 0x195
jmp 0x40ef99
push 0x19
mov eax, dword [0x4ec4d0]
add byte [eax - 1], dl
adc eax, sym.imp.RTX_RTSS.SYS_RtSetThreadPriority
test eax, eax
jne 0x40ef99
push 0x401
push 0x195
call fcn.004a3cd4
add esp, 8
mov dword [ebp - 4], 0x195
mov ecx, dword [0x50ace0]
cmp dword [ecx + 0x27e8], 2
jne 0x40efc2
invalid
invalid
loopne 0x40ef58

Function at 0x40f0f3
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [ebp + 8]
push eax
push 0
push 0x40f1dc
call fcn.00490624
add esp, 0xc
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0xffffffff
jne 0x40f15e
lea ecx, [ebp - 4]
push 0x32
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.RTX_RTSS.SYS_RtSetThreadPriority]
test eax, eax
jne 0x40f187
push 0x400
push 0x195
call fcn.004a3cd4
add esp, 8
mov eax, 0x195
jmp 0x40f189
xor eax, eax