joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5b9470
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x77eae8
mov eax, dword fs:[0]
push eax
sub esp, 0x38
push ebx
push ebp
push esi
push edi
mov eax, dword [0x84dea4]
xor eax, esp
push eax
lea eax, [esp + 0x4c]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [esp + 0x5c]
xor ebx, ebx
cmp eax, ebx
mov dword [esi + 0x18c], ebx
mov dword [esi + 0x190], ebx
mov dword [esi + 0x194], ebx
je 0x5b958b
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov ecx, 1
mov dword [esp + 0x2c], eax
mov eax, dword [esi + 0x4a4]
or ebp, 0xffffffff
mov dword [esp + 0x40], ecx
mov dword [esp + 0x28], ecx
lea edx, [esp + 0x18]
lea ecx, [esp + 0x28]
mov dword [esp + 0x54], ebx
mov byte [esp + 0x34], 0x3f
mov byte [esp + 0x35], bl
mov dword [esp + 0x38], ebp
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x48], ebx
mov dword [esp + 0x44], eax
mov dword [esp + 0x30], 0x27
call fcn.005f50d0
mov eax, dword [esp + 0x1c]
xor edi, edi
mov dword [esp + 0x14], eax
cmp eax, ebx
mov eax, dword [esp + 0x20]
mov dword [esp + 0x5c], ebx
jle 0x5b9575
lea ebp, [esi + 0x18c]
mov ecx, dword [esp + 0x5c]
mov edx, dword [eax + ecx*4]
mov ecx, dword [esi + 0x4a4]
push edx
call fcn.004ec530
test eax, eax
mov eax, dword [esp + 0x20]
jg 0x5b9561
mov ecx, dword [esp + 0x5c]
mov edx, dword [eax + ecx*4]
mov dword [ebp], edx
add edi, 1
add ebp, 4
cmp edi, 3
jge 0x5b9572
mov ecx, dword [esp + 0x5c]
add ecx, 1
cmp ecx, dword [esp + 0x14]
mov dword [esp + 0x5c], ecx
jl 0x5b9531
or ebp, 0xffffffff
cmp eax, ebx
mov dword [esp + 0x54], ebp
je 0x5b958b
push ebx
push 0xfffffffffffffffe
push 0x829be4
push eax
call sub.Storm.dll_Ordinal_403
mov eax, 0x11
mov ecx, 0x10
mov dword [esi + 0x198], eax
mov dword [esi + 0x19c], eax
mov dword [esi + 0x1a0], ecx
mov dword [esi + 0x1a4], eax
mov dword [esi + 0x1a8], eax
mov dword [esi + 0x1ac], ecx
lea edi, [esi + 0x18c]
lea ebx, [esi + 0x1b0]
lea ebp, [eax - 0xe]
jmp 0x5b95d0
mov eax, dword [esi + 0x4a8]
mov ecx, dword [esi + 0x4a4]
push eax
push ecx
mov ecx, dword [edi]
mov edx, ebx
call fcn.005b7020
add edi, 4
add ebx, 0x78
sub ebp, 1
jne 0x5b95d0
mov ecx, dword [esp + 0x4c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x44
ret 4
Function at 0x5c4120
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x77f064
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push ebp
push esi
push edi
mov eax, dword [0x84dea4]
xor eax, esp
push eax
lea eax, [esp + 0x18]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x14], esi
xor ebx, ebx
lea edi, [esi + 0x114]
mov dword [esi], vtable.CTriggerFunctionUndoable.0
mov dword [esp + 0x20], ebx
mov dword [edi], ebx
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
mov dword [edi + 0xc], ebx
lea ebp, [esi + 0x128]
mov dword [ebp], ebx
mov dword [ebp + 4], ebx
mov dword [ebp + 8], ebx
mov dword [ebp + 0xc], ebx
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
push Ordinal_2
add ecx, 0x4c
mov dword [esi + 4], eax
lea eax, [esi + 8]
push ecx
push eax
mov byte [esp + 0x2c], 2
mov dword [esi + 0x110], ebx
mov dword [esi + 0x124], ebx
mov dword [esi + 0x10c], 0xffffffff
mov byte [eax], bl
call sub.Storm.dll_Ordinal_501
mov ecx, dword [esp + 0x30]
cmp ecx, ebx
jne 0x5c41c4
mov dword [esi + 0x10c], ebx
jmp 0x5c41e5
push ebx
push 1
call fcn.005ca380
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
push edi
push edx
mov dword [esi + 0x110], eax
call fcn.005bfa20
mov ecx, dword [esp + 0x30]
mov edi, dword [esp + 0x34]
cmp edi, ebx
jne 0x5c41f9
mov dword [esi + 0x10c], 1
jmp 0x5c4218
push ebx
push 1
mov ecx, edi
call fcn.005ca380
mov ecx, dword [esp + 0x2c]
push ebp
push edi
mov dword [esi + 0x124], eax
call fcn.005bfa20
mov ecx, dword [esp + 0x30]
cmp ecx, ebx
je 0x5c4238
cmp edi, ebx
je 0x5c4238
push edi
call fcn.005c6c40
test eax, eax
mov eax, esi
jne 0x5c423a
mov dword [esi + 0x10c], 2
jmp 0x5c423a
mov eax, esi
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 0x10

Function at 0x5c56d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ecx
push esi
push edi
mov esi, ecx
call fcn.005c52f0
mov edi, dword [esi + 0x78]
add edi, 0x20
je 0x5c5782
cmp byte [edi], 0
je 0x5c5782
push ebx
mov ecx, esi
call fcn.005c5110
mov ecx, dword [esi + 0x78]
push 0
mov ebx, eax
call fcn.005cab60
cmp dword [esi + 0x40], 0
je 0x5c576d
mov ecx, dword [esi + 0x30]
lea eax, [esp + 0xc]
push eax
push edi
push ecx
mov ecx, ebx
call fcn.004f1660
test eax, eax
jne 0x5c5739
mov edx, dword [esi + 0x78]
add edx, 0x20
push edx
mov edx, str.WESTRING_ERROR_NOTRIGFUNC
mov ecx, str._s___s_
call fcn.004bd8a0
pop ebx
pop edi
pop esi
pop ecx
ret
mov ecx, dword [esi + 0x58]
or edi, 0xffffffff
xor eax, eax
test ecx, ecx
jbe 0x5c5762
mov edx, dword [esi + 0x5c]
mov ebx, dword [esp + 0xc]
lea esp, [esp]
cmp dword [edx], ebx
je 0x5c5760
add eax, 1
add edx, 4
cmp eax, ecx
jb 0x5c5750
jmp 0x5c5762
mov edi, eax
mov ecx, dword [esi + 0x40]
mov eax, dword [ecx]
mov edx, dword [eax + 0x58]
push edi
call edx
mov ecx, dword [esi + 0x74]
call fcn.0064fdd0
pop ebx
pop edi
mov ecx, esi
pop esi
add esp, 4
jmp fcn.005c55a0
mov ecx, dword [esi + 0x74]
pop edi
pop esi
add esp, 4
jmp fcn.0064fdd0
Function at 0x5ec420
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x7805d1
mov eax, dword fs:[0]
push eax
push ecx
push esi
mov eax, dword [0x84dea4]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 8], esi
fldz
xor eax, eax
fst dword [esi + 4]
fst dword [esi + 8]
fst dword [esi + 0xc]
fstp dword [esi + 0x10]
mov dword [esi + 0x14], eax
mov dword [esi + 0x18], eax
mov dword [esi + 0x1c], eax
mov dword [esi + 0x20], eax
mov dword [esp + 0x14], eax
mov dword [esi + 0x24], eax
mov dword [esi + 0x28], eax
mov dword [esi + 0x2c], eax
mov dword [esi + 0x30], eax
mov dword [esi + 0x34], eax
mov dword [esi + 0x38], eax
mov dword [esi + 0x3c], eax
mov dword [esi + 0x40], eax
mov eax, dword [esp + 0x1c]
mov dword [esi], eax
mov ecx, dword [eax + 0xc4]
mov dword [esi + 4], ecx
mov edx, dword [eax + 0xc8]
mov dword [esi + 8], edx
mov ecx, dword [eax + 0xcc]
mov dword [esi + 0xc], ecx
mov edx, dword [eax + 0xd0]
mov ecx, esi
mov byte [esp + 0x14], 2
mov dword [esi + 0x10], edx
mov dword [esi + 0x44], 1
call fcn.005eb910
mov eax, esi
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x10
ret 4
Function at 0x5ec680
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x7805f8
mov eax, dword fs:[0]
push eax
sub esp, 0x40
push esi
push edi
mov eax, dword [0x84dea4]
xor eax, esp
push eax
lea eax, [esp + 0x4c]
mov dword fs:[0], eax
mov esi, ecx
call fcn.004ba670
fldz
mov eax, dword [esp + 0x60]
fst dword [esp + 0x38]
mov cl, byte [esp + 0x63]
fst dword [esp + 0x3c]
mov dword [esp + 0xc], eax
fst dword [esp + 0x40]
mov dl, byte [esp + 0xe]
fstp dword [esp + 0x44]
xor edi, edi
mov byte [esp + 0xf], al
mov al, byte [esp + 0xd]
mov byte [esp + 0xc], cl
mov byte [esp + 0xd], dl
mov byte [esp + 0xe], al
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], edi
mov eax, dword [esp + 0xc]
mov ecx, esi
mov dword [esp + 0x54], edi
mov dword [esp + 0x24], eax
mov dword [esp + 0x48], edi
call fcn.005eb690
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x5c]
mov edx, dword [eax + 4]
mov ecx, dword [eax]
mov dword [esp + 0x14], edx
fld dword [esp + 0x14]
fld dword [esi + 0x10]
mov edx, dword [eax + 0xc]
fcompp
mov dword [esp + 0x10], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], edx
fnstsw ax
test ah, 0x41
je 0x5ec745
fld dword [esi + 0x10]
fstp dword [esp + 0x14]
fld dword [esp + 0x14]
fld dword [esi + 8]
fcompp
fnstsw ax
test ah, 5
jnp 0x5ec75c
fld dword [esi + 8]
fstp dword [esp + 0x14]
fld dword [esp + 0x1c]
fld dword [esi + 0x10]
fcompp
fnstsw ax
test ah, 0x41
je 0x5ec773
fld dword [esi + 0x10]
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fld dword [esi + 8]
fcompp
fnstsw ax
test ah, 5
jnp 0x5ec78a
fld dword [esi + 8]
fstp dword [esp + 0x1c]
fld dword [esp + 0x10]
fld dword [esi + 0xc]
fcompp
fnstsw ax
test ah, 0x41
je 0x5ec7a1
fld dword [esi + 0xc]
fstp dword [esp + 0x10]
fld dword [esp + 0x10]
fld dword [esi + 4]
fcompp
fnstsw ax
test ah, 5
jnp 0x5ec7b8
fld dword [esi + 4]
fstp dword [esp + 0x10]
fld dword [esp + 0x18]
fld dword [esi + 0xc]
fcompp
fnstsw ax
test ah, 0x41
je 0x5ec7cf
fld dword [esi + 0xc]
fstp dword [esp + 0x18]
fld dword [esp + 0x18]
fld dword [esi + 4]
fcompp
fnstsw ax
test ah, 5
jnp 0x5ec7e6
fld dword [esi + 4]
fstp dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x3c], ecx
lea ecx, [esp + 0x20]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x1c]
push ecx
mov ecx, esi
mov dword [esp + 0x44], edx
mov dword [esp + 0x48], eax
call fcn.005ebb80
lea edx, [esp + 0x20]
push edx
lea ecx, [esi + 0x34]
call fcn.005ec530
mov ecx, eax
call fcn.005ec260
mov eax, dword [esp + 0x30]
cmp eax, edi
je 0x5ec83c
push edi
push 0xfffffffffffffffe
push str..PAVCWeatherArea__
push eax
call sub.Storm.dll_Ordinal_403
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x4c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x4c
ret 8
Function at 0x5f05f0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x7809ef
mov eax, dword fs:[0]
push eax
sub esp, 0x114
mov eax, dword [0x84dea4]
xor eax, esp
mov dword [esp + 0x110], eax
push ebp
push esi
push edi
mov eax, dword [0x84dea4]
xor eax, esp
push eax
lea eax, [esp + 0x124]
mov dword fs:[0], eax
mov eax, dword [esp + 0x138]
push 4
mov esi, ecx
push eax
mov dword [esp + 0x20], esi
call fcn.004df260
xor ebp, ebp
mov dword [esi], vtable.CUnitPropertiesDialog.0
mov dword [esp + 0x12c], ebp
mov dword [esi + 0x34], ebp
mov dword [esi + 0x38], ebp
mov dword [esi + 0x3c], ebp
mov dword [esi + 0x40], ebp
mov dword [esi + 0x44], ebp
mov dword [esi + 0x48], ebp
mov dword [esi + 0x4c], ebp
mov dword [esi + 0x50], ebp
mov dword [esi + 0x9c], ebp
mov dword [esi + 0xa0], ebp
mov dword [esi + 0xa4], ebp
mov dword [esi + 0xa8], ebp
mov eax, dword [esp + 0x134]
mov dword [esi + 0x54], eax
xor eax, eax
mov dword [esi + 0x58], ebp
lea edi, [esi + 0x5c]
mov dword [edi], eax
mov dword [edi + 4], eax
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], eax
mov dword [edi + 0x18], eax
mov dword [edi + 0x1c], eax
mov dword [edi + 0x20], eax
mov dword [edi + 0x24], eax
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], eax
mov dword [edi + 0x30], eax
mov dword [edi + 0x34], eax
mov dword [edi + 0x38], eax
mov dword [edi + 0x3c], eax
mov ecx, dword [esi + 4]
push ebp
mov edx, str.UnitPropertiesDialog
mov byte [esp + 0x130], 3
call fcn.005b0170
mov ecx, dword [esi + 4]
call fcn.004bf860
push ebp
push 0x104
lea edx, [esp + 0x24]
mov ecx, str.WESTRING_UNITPROPS
call fcn.004da2f0
lea ecx, [esp + 0x1c]
push ecx
mov ecx, dword [esi + 4]
call fcn.004131e0
push 1
mov ecx, esi
call fcn.004df3f0
push ebp
push 0x2d
push str..CUnitPropertiesDialog.cpp
push 0x38
call sub.Storm.dll_Ordinal_401
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
cmp eax, ebp
mov byte [esp + 0x12c], 4
je 0x5f073a
mov edx, dword [esi + 4]
push ebp
push 0xc
push edx
mov ecx, eax
call fcn.00414830
jmp 0x5f073c
xor eax, eax
push str.Tabs
mov edx, str.UnitPropertiesDialog
mov ecx, eax
mov byte [esp + 0x130], 3
mov dword [esi + 0x30], eax
call fcn.005b0220
push ebp
mov ecx, esi
call fcn.005ef230
mov dword [edi], eax
add ebp, 1
add edi, 4
cmp ebp, 0x10
jl 0x5f0758
mov ecx, esi
call fcn.005ef180
mov eax, esi
mov ecx, dword [esp + 0x124]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x110]
xor ecx, esp
call fcn.00735f58
add esp, 0x120
ret 8
Function at 0x5f24e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x780b71
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push ebp
push esi
push edi
mov eax, dword [0x84dea4]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov esi, ecx
cmp dword [esi + 0x78], 0
jne 0x5f2681
mov ecx, dword [esi + 0x30]
mov eax, dword [ecx]
mov edx, dword [eax + 0x5c]
call edx
mov edi, eax
cmp edi, 0xffffffff
je 0x5f2681
mov ecx, dword [esi + 0x3c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x5c]
call edx
cmp eax, 0xffffffff
je 0x5f2681
push 0
xor ebx, ebx
test eax, eax
push 0x371
sete bl
push str..CRandomGroupsDialog.cpp
add eax, 0xffffffff
push 0x168
mov dword [esi + 0x7c], edi
mov dword [esi + 0x80], eax
call sub.Storm.dll_Ordinal_401
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
test eax, eax
mov dword [esp + 0x24], 0
je 0x5f2589
mov ecx, dword [esi + 4]
mov ecx, dword [ecx + 4]
push ebx
push ecx
mov ecx, eax
call fcn.00660730
jmp 0x5f258b
xor eax, eax
push esi
push 0x5f24d0
mov ecx, eax
mov dword [esp + 0x2c], 0xffffffff
mov dword [esi + 0x78], eax
call fcn.004df0b0
mov ecx, dword [esi + 0x78]
push esi
push 0x5f17d0
call fcn.004df0d0
mov ecx, dword [esi + 0x94]
call fcn.00510f50
mov ecx, eax
call fcn.00514cd0
mov ecx, dword [esi + 0x78]
neg eax
sbb eax, eax
add eax, 1
push eax
call fcn.00660640
mov edx, dword [esi + 0x94]
mov ecx, str.MaxUnitLevel
call fcn.00511c40
mov ecx, dword [esi + 0x78]
push eax
call fcn.00660650
mov ecx, dword [esi + 0x94]
call fcn.00510f60
movzx edx, byte [eax + 0x1d0]
mov ecx, dword [esi + 0x78]
push edx
call fcn.00660660
imul edi, edi, 0xa4
mov eax, dword [esi + 0x6c]
mov ebp, dword [eax + edi + 0x68]
add eax, edi
test ebx, ebx
je 0x5f2629
mov ecx, dword [esi + 0x78]
add eax, 0x6c
push eax
push ebp
call fcn.00660cd0
jmp 0x5f266b
mov ecx, dword [esi + 0x80]
mov edx, dword [eax + 0x9c]
imul ecx, ecx, 0x2c
mov eax, dword [ecx + edx]
mov ecx, dword [esi + 0x78]
push eax
call fcn.006606b0
mov ecx, dword [esi + 0x6c]
lea eax, [ecx + edi]
mov ecx, dword [esi + 0x80]
imul ecx, ecx, 0x2c
lea edx, [eax + 0x6c]
push edx
mov edx, dword [eax + 0x9c]
lea eax, [ecx + edx + 4]
mov ecx, dword [esi + 0x78]
push eax
push ebp
call fcn.00660fd0
mov esi, dword [esi + 0x78]
mov ecx, dword [esi + 4]
push 1
call fcn.0040a9d0
mov edx, dword [esi]
mov eax, dword [edx + 0x18]
mov ecx, esi
call eax
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x14
ret
Function at 0x5f65a0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x780e4a
mov eax, dword fs:[0]
push eax
push ecx
push esi
mov eax, dword [0x84dea4]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 8], esi
fldz
xor eax, eax
mov dword [esi], eax
mov dword [esi + 4], eax
mov dword [esi + 8], 1
mov dword [esi + 0xc], eax
fst dword [esi + 0x10]
fst dword [esi + 0x14]
mov ecx, 0xdeadbeef
fst dword [esi + 0x18]
or edx, 0xffffffff
fst dword [esi + 0x1c]
fst dword [esi + 0x20]
fst dword [esi + 0x24]
mov dword [esi + 0x28], eax
fld dword [0x83e994]
mov dword [esi + 0x2c], eax
mov dword [esi + 0x30], eax
mov dword [esi + 0x34], edx
mov dword [esi + 0x38], eax
mov dword [esi + 0x3c], 0xf
mov dword [esi + 0x44], eax
mov dword [esi + 0x48], eax
mov dword [esi + 0x4c], ecx
mov dword [esi + 0x50], ecx
mov dword [esi + 0x54], ecx
mov dword [esi + 0x58], ecx
mov dword [esi + 0x5c], ecx
fst dword [esi + 0x60]
fst dword [esi + 0x64]
fst dword [esi + 0x68]
fstp dword [esi + 0x6c]
mov dword [esi + 0x70], eax
fld1
mov dword [esi + 0x74], eax
fst dword [esi + 0x90]
mov dword [esi + 0x78], eax
mov dword [esi + 0x7c], eax
fxch st(1)
fst dword [esi + 0x94]
mov dword [esi + 0x80], eax
mov dword [esi + 0x84], eax
mov dword [esi + 0x88], eax
mov dword [esi + 0x98], eax
mov dword [esi + 0x9c], eax
mov dword [esi + 0xa0], eax
mov dword [esi + 0xa4], eax
mov dword [esi + 0xa8], eax
mov dword [esi + 0xac], eax
mov dword [esi + 0xb0], eax
mov dword [esi + 0xb4], eax
mov dword [esi + 0xb8], eax
mov dword [esi + 0xbc], eax
mov dword [esi + 0xc0], eax
mov dword [esi + 0xc4], eax
mov dword [esi + 0xc8], eax
mov dword [esi + 0xcc], eax
mov dword [esp + 0x14], eax
mov dword [esi + 0xd0], eax
mov dword [esi + 0xd4], eax
mov dword [esi + 0xd8], eax
mov dword [esi + 0xdc], eax
mov dword [esi + 0xe0], eax
mov dword [esi + 0xe4], eax
mov dword [esi + 0xe8], eax
mov dword [esi + 0xec], eax
fstp dword [esi + 0xf4]
mov dword [esi + 0xf0], eax
fst dword [esi + 0xf8]
mov byte [esp + 0x14], 2
fst dword [esi + 0xfc]
fstp dword [esi + 0x100]
mov dword [esi + 0x40], edx
call fcn.004ba550
mov dword [esi + 0x104], eax
call fcn.004ba430
mov dword [esi + 0x108], eax
call fcn.004ba3a0
mov dword [esi + 0x10c], eax
call fcn.004ba4c0
mov dword [esi + 0x110], eax
mov eax, esi
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x10
ret
Function at 0x5fc290
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x10
fld dword [esp + 0x14]
push edi
fmul qword [0x799e70]
mov edi, ecx
fnstcw word [esp + 0x18]
movzx eax, word [esp + 0x18]
or eax, 0xc00
mov dword [esp + 8], eax
fldcw word [esp + 8]
fistp qword [esp + 0xc]
mov eax, dword [esp + 0xc]
add dword [edi + 0x10], eax
xor eax, eax
cmp dword [edi + 4], eax
fldcw word [esp + 0x18]
mov dword [esp + 8], eax
jbe 0x5fc415
fld1
push ebx
push ebp
mov dword [esp + 0xc], eax
push esi
mov esi, dword [edi + 8]
add esi, dword [esp + 0x10]
cmp dword [esi + 4], 0
je 0x5fc3f7
mov eax, dword [edi + 0x10]
mov edx, dword [esi + 0x40]
mov ebx, dword [esi + 0x44]
mov ecx, eax
sub ecx, edx
test ebx, ebx
jbe 0x5fc310
mov ebp, dword [esi + 0x48]
cmp ebp, edx
jbe 0x5fc310
sub eax, ebp
cmp eax, ebx
jb 0x5fc3f7
mov eax, dword [esi + 0x3c]
fst dword [esp + 0x24]
test eax, eax
jbe 0x5fc3b2
mov dword [esp + 0x24], eax
fild dword [esp + 0x24]
jge 0x5fc32f
fadd dword [0x799d08]
test ecx, ecx
fstp dword [esp + 0x24]
mov dword [esp + 0x18], ecx
fild dword [esp + 0x18]
jge 0x5fc345
fadd dword [0x799d08]
fld dword [esp + 0x24]
fld st(0)
fdivp st(2)
fxch st(1)
fstp dword [esp + 0x24]
fld dword [esp + 0x24]
fcom st(2)
fnstsw ax
test ah, 0x41
jne 0x5fc3b8
mov ecx, dword [esi + 0x38]
fsub qword [0x798898]
add ecx, 1
fstp dword [esp + 0x24]
fld dword [esp + 0x24]
fcom st(2)
fnstsw ax
test ah, 0x41
je 0x5fc363
fnstcw word [esp + 0x24]
mov dword [esi + 0x38], ecx
movzx eax, word [esp + 0x24]
fld st(0)
mov edx, dword [edi + 0x10]
fmulp st(2)
or eax, 0xc00
fxch st(1)
mov dword [esp + 0x18], eax
fldcw word [esp + 0x18]
fistp qword [esp + 0x18]
mov ecx, dword [esp + 0x18]
sub edx, ecx
mov dword [esi + 0x40], edx
fldcw word [esp + 0x24]
jmp 0x5fc3ba
fld dword [esp + 0x24]
jmp 0x5fc3ba
fstp st(1)
cmp dword [esi + 0xc], 0
jne 0x5fc41c
mov eax, dword [esi + 0x38]
cmp eax, dword [esi + 0x34]
jl 0x5fc41c
fstp st(0)
mov ebx, 1
fstp dword [esp + 0x24]
fld dword [esp + 0x24]
push ecx
fstp dword [esp]
push esi
mov ecx, edi
call fcn.005fbd30
test ebx, ebx
mov ecx, dword [edi + 0x10]
mov dword [esi + 0x48], ecx
je 0x5fc3f5
push esi
mov ecx, edi
call fcn.005fbfd0
fld1
mov eax, dword [esp + 0x14]
add dword [esp + 0x10], 0x78
add eax, 1
cmp eax, dword [edi + 4]
mov dword [esp + 0x14], eax
jb 0x5fc2dd
pop esi
fstp st(0)
pop ebp
pop ebx
pop edi
add esp, 0x10
ret 4
fstp st(1)
xor ebx, ebx
jmp 0x5fc3d7
Function at 0x6038f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x781538
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x84dea4]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
mov esi, ecx
xor ebp, ebp
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], ebp
mov dword [esp + 0x28], ebp
mov dword [esp + 0x2c], ebp
lea eax, [esp + 0x20]
push eax
mov dword [esp + 0x3c], ebp
call fcn.00603830
mov ecx, dword [esi + 0x38]
mov edx, dword [ecx]
mov eax, dword [edx + 0x5c]
call eax
test eax, eax
je 0x6039fc
cmp dword [esp + 0x24], ebp
je 0x6039fc
cmp dword [esi + 0x74], ebp
mov dword [esp + 0x1c], ebp
jbe 0x603a2d
mov dword [esp + 0x14], ebp
mov edi, dword [esi + 0x78]
add edi, dword [esp + 0x14]
push 1
mov ecx, dword [edi + 0x10]
call fcn.0040ee40
mov ebp, dword [edi + 4]
mov eax, dword [edi]
mov ecx, dword [esp + 0x28]
mov edx, dword [ecx]
push ebp
push eax
push edx
mov ecx, esi
call fcn.00603170
mov ebx, 1
cmp dword [esp + 0x24], ebx
mov dword [esp + 0x18], eax
jbe 0x6039c2
jmp 0x6039a0
mov eax, dword [edi]
push ebp
push eax
mov eax, dword [esp + 0x30]
mov ecx, dword [eax + ebx*8]
push ecx
mov ecx, esi
call fcn.00603170
cmp eax, dword [esp + 0x18]
jne 0x6039d3
add ebx, 1
cmp ebx, dword [esp + 0x24]
jb 0x6039a0
mov edi, dword [edi + 0x10]
mov edx, dword [edi]
mov eax, dword [esp + 0x18]
mov edx, dword [edx + 0x58]
push eax
mov ecx, edi
jmp 0x6039dd
mov ecx, dword [edi + 0x10]
mov eax, dword [ecx]
mov edx, dword [eax + 0x58]
push 0xffffffffffffffff
call edx
mov eax, dword [esp + 0x1c]
add dword [esp + 0x14], 0x14
add eax, 1
cmp eax, dword [esi + 0x74]
mov dword [esp + 0x1c], eax
jb 0x603966
xor ebp, ebp
jmp 0x603a2d
xor ebx, ebx
cmp dword [esi + 0x74], ebp
jbe 0x603a2d
xor edi, edi
mov eax, dword [esi + 0x78]
mov ecx, dword [eax + edi + 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x58]
push 0xffffffffffffffff
call eax
mov ecx, dword [esi + 0x78]
mov ecx, dword [ecx + edi + 0x10]
push ebp
call fcn.0040ee40
add ebx, 1
add edi, 0x14
cmp ebx, dword [esi + 0x74]
jb 0x603a05
mov ecx, esi
call fcn.00603320
mov eax, dword [esp + 0x28]
cmp eax, ebp
je 0x603a4a
push ebp
push 0xfffffffffffffffe
push str.._AUUGP_PlayerInfo__
push eax
call sub.Storm.dll_Ordinal_403
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x28
ret

Function at 0x603a60
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push esi
mov esi, ecx
mov ecx, dword [esi + 0x38]
mov eax, dword [ecx]
mov edx, dword [eax + 0x5c]
call edx
test eax, eax
jne 0x603a9b
push eax
push eax
xor edx, edx
mov ecx, str.WESTRING_WARNING_REVERTINGUPGRADES
call fcn.004bd8f0
test eax, eax
jne 0x603a91
mov ecx, dword [esi + 0x38]
mov eax, dword [ecx]
mov edx, dword [eax + 0x58]
push 1
call edx
pop esi
ret
push 0
lea ecx, [esi + 0x28]
call fcn.004cb260
mov ecx, esi
pop esi
jmp fcn.006038f0
Function at 0x603ab0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push esi
mov esi, ecx
mov ecx, dword [esi + 0x38]
mov eax, dword [ecx]
mov edx, dword [eax + 0x5c]
call edx
test eax, eax
je 0x603ae1
push 0
push 0
xor edx, edx
mov ecx, str.WESTRING_WARNING_REVERTINGUPGRADES
call fcn.004bd8f0
test eax, eax
je 0x603af0
mov ecx, dword [esi + 0x38]
mov eax, dword [ecx]
mov edx, dword [eax + 0x58]
push 0
call edx
mov dword [esi + 0x2c], 0
mov ecx, esi
pop esi
jmp fcn.006038f0
pop esi
ret
Function at 0x604bc0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push esi
mov esi, ecx
call fcn.00604840
mov ecx, dword [esi + 0x48]
push 1
call fcn.0061c250
mov ecx, esi
pop esi
jmp fcn.006038f0

Function at 0x607560
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x781a68
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push ebp
push esi
push edi
mov eax, dword [0x84dea4]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov ebx, ecx
mov edi, dword [esp + 0x34]
xor esi, esi
shl edi, 4
add edi, dword [ebx + 0x8c]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], esi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], esi
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x30], esi
call fcn.00606470
mov ecx, dword [edi + 0xc]
call fcn.0040b7a0
test eax, eax
je 0x6075f2
mov ecx, dword [edi + 0xc]
mov edx, dword [ecx]
mov eax, dword [edx + 0x5c]
call eax
cmp dword [esp + 0x18], esi
mov ebp, eax
jbe 0x6075f0
mov ecx, dword [edi]
mov edx, dword [esp + 0x1c]
mov eax, dword [edx + esi*8]
push ebp
push ecx
push eax
mov ecx, ebx
call fcn.00607200
add esi, 1
cmp esi, dword [esp + 0x18]
jb 0x6075d4
xor esi, esi
mov ecx, ebx
call fcn.00606530
mov eax, dword [esp + 0x1c]
cmp eax, esi
je 0x60760f
push esi
push 0xfffffffffffffffe
push str.._AUTTP_PlayerInfo__
push eax
call sub.Storm.dll_Ordinal_403
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret 4