joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4156f0
Capabilities:
Read file on windows

Disassembly:
push 0xffffffffffffffff
push 0x4d1198
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push esi
push edi
mov eax, dword [0x553abc]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov eax, dword [esp + 0x34]
mov ecx, dword [0x557f98]
xor edi, edi
push edi
push eax
push ecx
call fcn.004b91a4
mov edx, dword [0x557f98]
push edx
push 1
lea eax, [esp + 0x20]
push 4
push eax
call fcn.004b9102
mov ecx, dword [0x557f98]
push ecx
push 1
lea edx, [esp + 0x58]
push 4
push edx
call fcn.004b9102
add esp, 0x2c
mov dword [esp + 0x10], vtable.yaneuraoGameSDK3rd::YTL::smart_ptr_char_.0
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], edi
mov eax, dword [esp + 0x34]
push eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x30], 4
call fcn.00414770
mov esi, dword [esp + 0x34]
push edi
lea ecx, [esp + 0x14]
call fcn.004438c0
mov ecx, dword [0x557f98]
push ecx
push 1
push esi
push eax
call fcn.004b9102
mov ecx, dword [esp + 0x48]
add esp, 0x10
lea edx, [esp + 0x10]
push edx
call fcn.0040f790
lea ecx, [esp + 0x10]
mov dword [esp + 0x2c], 0xffffffff
call fcn.0040f800
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x24
ret 8

Function at 0x4157e0
Capabilities:
Read file on windows

Disassembly:
push 0xffffffffffffffff
push 0x4d11c8
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push esi
push edi
mov eax, dword [0x553abc]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov eax, dword [esp + 0x34]
add eax, eax
add eax, eax
xor esi, esi
push esi
push eax
mov eax, dword [0x557fa4]
push eax
call fcn.004b91a4
mov ecx, dword [0x557fa4]
push ecx
push 1
lea edx, [esp + 0x20]
push 4
push edx
call fcn.004b9102
mov eax, dword [esp + 0x28]
add eax, 4
push esi
push eax
mov eax, dword [0x557f98]
push eax
call fcn.004b91a4
mov ecx, dword [0x557f98]
push ecx
push 1
lea edx, [esp + 0x64]
push 4
push edx
mov dword [esp + 0x6c], esi
call fcn.004b9102
add esp, 0x38
mov dword [esp + 0x10], vtable.yaneuraoGameSDK3rd::YTL::smart_ptr_char_.0
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], esi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], esi
mov eax, dword [esp + 0x34]
push eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x30], 4
call fcn.00414770
mov edi, dword [esp + 0x34]
push esi
lea ecx, [esp + 0x14]
call fcn.004438c0
mov ecx, dword [0x557f98]
push ecx
push 1
push edi
push eax
call fcn.004b9102
mov ecx, dword [esp + 0x48]
add esp, 0x10
lea edx, [esp + 0x10]
push edx
call fcn.0040f790
lea ecx, [esp + 0x10]
mov dword [esp + 0x2c], 0xffffffff
call fcn.0040f800
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x24
ret 8
Function at 0x415e90
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4d1318
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push esi
push edi
mov eax, dword [0x553abc]
xor eax, esp
push eax
lea eax, [esp + 0x20]
mov dword fs:[0], eax
mov esi, ecx
xor edi, edi
mov dword [esp + 0xc], vtable.yaneuraoGameSDK3rd::YTL::smart_ptr_char_.0
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], edi
mov ecx, dword [esp + 0x30]
lea eax, [esp + 0xc]
push eax
push ecx
mov ecx, esi
mov dword [esp + 0x30], edi
call fcn.004156f0
mov edx, dword [esp + 0x34]
push edx
push edi
lea ecx, [esp + 0x14]
call fcn.004438c0
push eax
mov ecx, esi
call fcn.00411430
lea ecx, [esp + 0xc]
mov dword [esp + 0x28], 0xffffffff
call fcn.0040f800
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x20
ret 8

Function at 0x417300
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x4d14d8
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push esi
push edi
mov eax, dword [0x553abc]
xor eax, esp
push eax
lea eax, [esp + 0x20]
mov dword fs:[0], eax
mov esi, ecx
xor eax, eax
mov dword [esp + 0xc], vtable.yaneuraoGameSDK3rd::YTL::smart_ptr_class_CSpriteLayer_.0
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x38]
push eax
lea ecx, [esp + 0x10]
call fcn.0040f790
mov eax, dword [esp + 0x34]
mov edx, dword [eax + 4]
mov eax, dword [eax]
mov edi, dword [esp + 0x30]
lea ecx, [esp + 0xc]
push ecx
push edx
push eax
push edi
mov ecx, esi
call fcn.004170f0
lea ecx, [esp + 0xc]
mov dword [esp + 0x28], 0xffffffff
call fcn.0040fc20
mov eax, edi
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x20
ret 0xc

Function at 0x4173a0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x4d1508
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push esi
push edi
mov eax, dword [0x553abc]
xor eax, esp
push eax
lea eax, [esp + 0x20]
mov dword fs:[0], eax
mov esi, ecx
xor eax, eax
mov dword [esp + 0xc], vtable.yaneuraoGameSDK3rd::YTL::smart_ptr_class_CSpriteObj_.0
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x38]
push eax
lea ecx, [esp + 0x10]
call fcn.0040f790
mov eax, dword [esp + 0x34]
mov edx, dword [eax + 4]
mov eax, dword [eax]
mov edi, dword [esp + 0x30]
lea ecx, [esp + 0xc]
push ecx
push edx
push eax
push edi
mov ecx, esi
call fcn.004171a0
lea ecx, [esp + 0xc]
mov dword [esp + 0x28], 0xffffffff
call fcn.0040fd60
mov eax, edi
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x20
ret 0xc
Function at 0x417ff0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4d1663
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push esi
mov eax, dword [0x553abc]
xor eax, esp
push eax
lea eax, [esp + 0x20]
mov dword fs:[0], eax
mov esi, ecx
push 0x60
call fcn.004b8b2d
add esp, 4
mov dword [esp + 8], eax
test eax, eax
mov dword [esp + 0x28], 0
je 0x418055
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
push ecx
mov ecx, dword [esi + 0x14]
push edx
mov edx, dword [esi + 0x10]
push ecx
mov ecx, dword [esp + 0x40]
push edx
mov edx, dword [esp + 0x40]
push ecx
push edx
mov ecx, eax
call fcn.00415050
jmp 0x418057
xor eax, eax
push 1
push eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x30], 0xffffffff
call fcn.00413f60
lea eax, [esp + 0xc]
push eax
mov ecx, esi
mov dword [esp + 0x2c], 1
call fcn.00417ca0
lea ecx, [esp + 0xc]
mov dword [esp + 0x28], 0xffffffff
call fcn.0040fc20
mov eax, 1
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x24
ret 0x10

Function at 0x4180b0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4d1693
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push esi
mov eax, dword [0x553abc]
xor eax, esp
push eax
lea eax, [esp + 0x20]
mov dword fs:[0], eax
mov esi, ecx
push 0xcc
call fcn.004b8b2d
add esp, 4
mov dword [esp + 8], eax
test eax, eax
mov dword [esp + 0x28], 0
je 0x4180fd
push esi
mov ecx, eax
call fcn.00417ac0
jmp 0x4180ff
xor eax, eax
push 1
push eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x30], 0xffffffff
call fcn.00414010
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x34]
push eax
mov eax, dword [esp + 0x34]
push ecx
push edx
push eax
push 0
lea ecx, [esp + 0x20]
mov dword [esp + 0x3c], 1
call fcn.004438c0
mov ecx, eax
call fcn.00412c70
lea ecx, [esp + 0xc]
push ecx
mov ecx, esi
call fcn.00417e60
lea ecx, [esp + 0xc]
mov dword [esp + 0x28], 0xffffffff
call fcn.0040fd60
mov eax, 1
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x24
ret 0x10
Function at 0x41dd50
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4d2156
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push ebp
push esi
push edi
mov eax, dword [0x553abc]
xor eax, esp
push eax
lea eax, [esp + 0x20]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x1c], esi
mov dword [esi], vtable.CCgEventCommon.0
mov ecx, dword [esi + 8]
push 0xffffffffffffffff
push 0xb0
mov dword [esp + 0x30], 0xa
call fcn.00412d00
mov ecx, dword [esi + 8]
push 0xffffffffffffffff
push 0xfc
call fcn.00412d00
mov ecx, dword [esi + 8]
push 0xffffffffffffffff
push 0xfb
call fcn.00412d00
mov ecx, dword [esi + 8]
push 0xffffffffffffffff
push 0xfa
call fcn.00412d00
mov ecx, dword [esi + 8]
push 0xffffffffffffffff
push 0xf9
call fcn.00412d00
mov eax, dword [esi + 0x48]
mov edx, dword [eax]
lea edi, [esi + 0x48]
mov ecx, edi
call edx
mov eax, dword [esi + 0x84]
mov edx, dword [eax]
lea ebx, [esi + 0x84]
mov ecx, ebx
call edx
mov eax, dword [esi + 0xe8]
mov edx, dword [eax]
lea ebp, [esi + 0xe8]
mov ecx, ebp
call edx
cmp dword [esi + 0xc], 0
jne 0x41de3c
lea ecx, [esi + 0x28c]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], 0x14
cmp dword [ecx + 4], 0
je 0x41de2e
mov eax, dword [ecx]
mov edx, dword [eax]
call edx
mov ecx, dword [esp + 0x14]
add ecx, 0x14
sub dword [esp + 0x18], 1
mov dword [esp + 0x14], ecx
jne 0x41de1e
lea ecx, [esi + 0xa5c]
mov byte [esp + 0x28], 9
call fcn.0041b740
push 0x41b6e0
push 0x50
push 0x14
lea eax, [esi + 0x41c]
push eax
mov byte [esp + 0x38], 8
call fcn.004b9cc9
push fcn.0041b450
push 0x14
push 0x14
lea ecx, [esi + 0x28c]
push ecx
mov byte [esp + 0x38], 7
call fcn.004b9cc9
push fcn.0041b390
push 0x14
push 0x14
lea edx, [esi + 0xfc]
push edx
mov byte [esp + 0x38], 6
call fcn.004b9cc9
mov ecx, ebp
mov byte [esp + 0x28], 5
call fcn.0041b2d0
push fcn.0041b390
push 4
push 0x14
lea eax, [esi + 0x98]
push eax
mov byte [esp + 0x38], 4
call fcn.004b9cc9
mov ecx, ebx
mov byte [esp + 0x28], 3
call fcn.0041b2d0
lea ecx, [esi + 0x70]
mov byte [esp + 0x28], 2
call fcn.0041b390
lea ecx, [esi + 0x5c]
mov byte [esp + 0x28], 1
call fcn.0041b390
mov ecx, edi
mov byte [esp + 0x28], 0
call fcn.0041b2d0
lea ecx, [esi + 0x34]
mov dword [esp + 0x28], 0xffffffff
call fcn.0041b230
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x18
ret
Function at 0x42d4a0
Capabilities:
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x4d60f3
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push ebp
push esi
push edi
mov eax, dword [0x553abc]
xor eax, esp
push eax
lea eax, [esp + 0x18]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x14], esi
mov dword [esi], vtable.CSaveLoadCommon.0
mov eax, dword [esi + 0x30]
mov edx, dword [eax]
lea ebp, [esi + 0x30]
mov ecx, ebp
mov dword [esp + 0x20], 0xc
call edx
mov eax, dword [esi + 0x210]
mov edx, dword [eax]
lea ecx, [esi + 0x210]
call edx
mov eax, dword [esi + 0x24c]
mov edx, dword [eax]
lea ecx, [esi + 0x24c]
call edx
lea edi, [esi + 0x260]
mov ebx, 0x64
mov eax, dword [edi]
mov edx, dword [eax]
mov ecx, edi
call edx
add edi, 0x14
sub ebx, 1
jne 0x42d510
xor edi, edi
lea ebx, [esi + 0xa30]
mov eax, dword [ebx]
mov edx, dword [eax]
mov ecx, ebx
call edx
mov ecx, dword [esi + 8]
push 0xffffffffffffffff
lea eax, [edi + 0x7b]
push eax
call fcn.00412d00
add edi, 1
add ebx, 0x14
cmp edi, 0xa
jl 0x42d528
mov ecx, dword [esi + 8]
push 0xffffffffffffffff
push 0x54
call fcn.00412d00
mov ecx, dword [esi + 8]
push 0xffffffffffffffff
push 0x89
call fcn.00412d00
mov ecx, dword [esi + 8]
push 0xffffffffffffffff
push 0x57
call fcn.00412d00
lea ecx, [esi + 0xaf8]
mov byte [esp + 0x20], 0xb
call fcn.0042c960
push fcn.0042c660
push 0xa
push 0x14
lea eax, [esi + 0xa30]
push eax
mov byte [esp + 0x30], 0xa
call fcn.004b9cc9
push fcn.0042c5a0
push 0x64
push 0x14
lea eax, [esi + 0x260]
push eax
mov byte [esp + 0x30], 9
call fcn.004b9cc9
lea ecx, [esi + 0x24c]
mov byte [esp + 0x20], 8
call fcn.0042c4e0
lea ecx, [esi + 0x238]
mov byte [esp + 0x20], 7
call fcn.0042c4e0
lea ecx, [esi + 0x224]
mov byte [esp + 0x20], 6
call fcn.0042c4e0
lea ecx, [esi + 0x210]
mov byte [esp + 0x20], 5
call fcn.0042c420
lea ecx, [esi + 0x1fc]
mov byte [esp + 0x20], 4
call fcn.0042c4e0
push fcn.0042c4e0
push 0xa
push 0x14
lea ecx, [esi + 0x134]
push ecx
mov byte [esp + 0x30], 3
call fcn.004b9cc9
push fcn.0042c4e0
push 0xa
push 0x14
lea edx, [esi + 0x6c]
push edx
mov byte [esp + 0x30], 2
call fcn.004b9cc9
lea ecx, [esi + 0x58]
mov byte [esp + 0x20], 1
call fcn.0042c4e0
lea ecx, [esi + 0x44]
mov byte [esp + 0x20], 0
call fcn.0042c4e0
mov ecx, ebp
mov dword [esp + 0x20], 0xffffffff
call fcn.0042c420
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret
Function at 0x42d558
Capabilities:
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x4d60f3
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push ebp
push esi
push edi
mov eax, dword [0x553abc]
xor eax, esp
push eax
lea eax, [esp + 0x18]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x14], esi
mov dword [esi], vtable.CSaveLoadCommon.0
mov eax, dword [esi + 0x30]
mov edx, dword [eax]
lea ebp, [esi + 0x30]
mov ecx, ebp
mov dword [esp + 0x20], 0xc
call edx
mov eax, dword [esi + 0x210]
mov edx, dword [eax]
lea ecx, [esi + 0x210]
call edx
mov eax, dword [esi + 0x24c]
mov edx, dword [eax]
lea ecx, [esi + 0x24c]
call edx
lea edi, [esi + 0x260]
mov ebx, 0x64
mov eax, dword [edi]
mov edx, dword [eax]
mov ecx, edi
call edx
add edi, 0x14
sub ebx, 1
jne 0x42d510
xor edi, edi
lea ebx, [esi + 0xa30]
mov eax, dword [ebx]
mov edx, dword [eax]
mov ecx, ebx
call edx
mov ecx, dword [esi + 8]
push 0xffffffffffffffff
lea eax, [edi + 0x7b]
push eax
call fcn.00412d00
add edi, 1
add ebx, 0x14
cmp edi, 0xa
jl 0x42d528
mov ecx, dword [esi + 8]
push 0xffffffffffffffff
push 0x54
call fcn.00412d00
mov ecx, dword [esi + 8]
push 0xffffffffffffffff
push 0x89
call fcn.00412d00
mov ecx, dword [esi + 8]
push 0xffffffffffffffff
push 0x57
call fcn.00412d00
lea ecx, [esi + 0xaf8]
mov byte [esp + 0x20], 0xb
call fcn.0042c960
push fcn.0042c660
push 0xa
push 0x14
lea eax, [esi + 0xa30]
push eax
mov byte [esp + 0x30], 0xa
call fcn.004b9cc9
push fcn.0042c5a0
push 0x64
push 0x14
lea eax, [esi + 0x260]
push eax
mov byte [esp + 0x30], 9
call fcn.004b9cc9
lea ecx, [esi + 0x24c]
mov byte [esp + 0x20], 8
call fcn.0042c4e0
lea ecx, [esi + 0x238]
mov byte [esp + 0x20], 7
call fcn.0042c4e0
lea ecx, [esi + 0x224]
mov byte [esp + 0x20], 6
call fcn.0042c4e0
lea ecx, [esi + 0x210]
mov byte [esp + 0x20], 5
call fcn.0042c420
lea ecx, [esi + 0x1fc]
mov byte [esp + 0x20], 4
call fcn.0042c4e0
push fcn.0042c4e0
push 0xa
push 0x14
lea ecx, [esi + 0x134]
push ecx
mov byte [esp + 0x30], 3
call fcn.004b9cc9
push fcn.0042c4e0
push 0xa
push 0x14
lea edx, [esi + 0x6c]
push edx
mov byte [esp + 0x30], 2
call fcn.004b9cc9
lea ecx, [esi + 0x58]
mov byte [esp + 0x20], 1
call fcn.0042c4e0
lea ecx, [esi + 0x44]
mov byte [esp + 0x20], 0
call fcn.0042c4e0
mov ecx, ebp
mov dword [esp + 0x20], 0xffffffff
call fcn.0042c420
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret
Function at 0x43c4b0
Capabilities:
Access peb ldr_data
Get kernel32 base address
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x4d7a22
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push ebp
push esi
push edi
mov eax, dword [0x553abc]
xor eax, esp
push eax
lea eax, [esp + 0x18]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x14], esi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
push eax
push ecx
push edx
mov ecx, esi
call fcn.00439110
xor ebx, ebx
mov dword [esi], vtable.COptionSheet.0
mov dword [esp + 0x20], ebx
mov dword [esi + 0x64], vtable.yaneuraoGameSDK3rd::YTL::smart_ptr_class_COptionPage1_.0
mov dword [esi + 0x68], ebx
mov dword [esi + 0x6c], ebx
mov dword [esi + 0x70], ebx
mov dword [esi + 0x74], ebx
lea edi, [esi + 0x78]
mov dword [edi], vtable.yaneuraoGameSDK3rd::YTL::smart_ptr_class_COptionPage2_.0
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
mov dword [edi + 0xc], ebx
mov dword [edi + 0x10], ebx
lea ebp, [esi + 0x8c]
mov dword [ebp], vtable.yaneuraoGameSDK3rd::YTL::smart_ptr_class_COptionPage3_.0
mov dword [ebp + 4], ebx
mov dword [ebp + 8], ebx
mov dword [ebp + 0xc], ebx
mov dword [ebp + 0x10], ebx
or dword [esi + 0x28], 0x80
push 0x84
mov byte [esp + 0x24], 3
call fcn.004b8b2d
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x20], 4
je 0x43c57a
push ecx
mov ecx, esp
mov dword [ecx], 0x4f0d88
mov ecx, eax
mov dword [esp + 0x30], esp
call fcn.0043bfa0
jmp 0x43c57c
xor eax, eax
push eax
lea ecx, [esi + 0x64]
mov byte [esp + 0x24], 3
call fcn.0043a540
push 0x90
call fcn.004b8b2d
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x20], 5
je 0x43c5ba
push ecx
mov ecx, esp
mov dword [ecx], 0x4f0d78
mov ecx, eax
mov dword [esp + 0x30], esp
call fcn.0043c220
jmp 0x43c5bc
xor eax, eax
push eax
mov ecx, edi
mov byte [esp + 0x24], 3
call fcn.0043a610
push 0x80
call fcn.004b8b2d
add esp, 4
cmp eax, ebx
mov dword [esp + 0x30], eax
je 0x43c5fc
push 0x4f0d68
mov ecx, eax
call fcn.004390a0
mov eax, dword [esp + 0x30]
mov dword [eax], vtable.COptionPage3.0
mov dword [eax + 0x78], ebx
mov dword [eax + 0x7c], ebx
jmp 0x43c5fe
xor eax, eax
push eax
mov ecx, ebp
call fcn.0043a6e0
push ebx
lea ecx, [esi + 0x64]
call fcn.004438c0
add eax, 0x20
push eax
mov ecx, esi
call fcn.00439190
push ebx
mov ecx, edi
call fcn.004438c0
add eax, 0x20
push eax
mov ecx, esi
call fcn.00439190
push ebx
mov ecx, ebp
call fcn.004438c0
add eax, 0x20
push eax
mov ecx, esi
call fcn.00439190
mov eax, esi
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 0xc
Function at 0x449130
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4d92c0
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x553abc]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x10], esi
mov dword [esi], vtable.CSceneMgr.0
mov dword [esp + 0x24], 0xb
call fcn.00448440
lea ecx, [esi + 0xe0]
mov byte [esp + 0x24], 0xa
call fcn.00444790
lea ecx, [esi + 0xb4]
mov byte [esp + 0x24], 9
call fcn.00444c40
lea ecx, [esi + 0x9c]
call fcn.004456e0
mov eax, dword [esi + 0x94]
mov ecx, dword [eax]
lea edi, [esi + 0x90]
push eax
push edi
push ecx
push edi
lea eax, [esp + 0x24]
push eax
mov ecx, edi
mov byte [esp + 0x38], 7
call fcn.00446890
mov eax, dword [edi + 4]
push eax
call fcn.004b7e19
xor ebx, ebx
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
mov eax, dword [esi + 0x84]
lea edi, [esi + 0x80]
add esp, 4
cmp eax, ebx
je 0x4491fd
mov edx, dword [esp + 0x10]
mov ecx, dword [edi + 8]
push edx
push edi
push ecx
push eax
call fcn.0040b140
mov eax, dword [edi + 4]
push eax
call fcn.004b7e19
add esp, 0x14
lea ecx, [esi + 0x6c]
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
mov dword [edi + 0xc], ebx
mov byte [esp + 0x24], 5
call fcn.004446f0
lea ecx, [esi + 0x58]
mov byte [esp + 0x24], 4
call fcn.00444650
lea ecx, [esi + 0x44]
mov byte [esp + 0x24], 3
call fcn.004445b0
lea ecx, [esi + 0x30]
mov byte [esp + 0x24], 2
call fcn.00444510
lea ecx, [esi + 0x14]
mov byte [esp + 0x24], 1
call fcn.00444470
lea ecx, [esi + 4]
mov byte [esp + 0x24], bl
call fcn.004541f0
mov dword [esi], vtable.IArchive.0
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add esp, 0x18
ret
Function at 0x453ec0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x4da0d8
mov eax, dword fs:[0]
push eax
push esi
mov eax, dword [0x553abc]
xor eax, esp
push eax
lea eax, [esp + 8]
mov dword fs:[0], eax
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x20]
push esi
mov dword [esp + 0x14], 0
call fcn.0040f790
mov eax, dword [esp + 0x38]
push eax
sub esp, 0x14
mov eax, esp
mov dword [eax], vtable.yaneuraoGameSDK3rd::YTL::smart_ptr_base.0
mov dword [eax], vtable.yaneuraoGameSDK3rd::YTL::smart_ptr_struct__devicemodeA_.0
mov ecx, dword [esp + 0x40]
mov dword [eax + 4], ecx
mov edx, dword [esp + 0x44]
mov dword [eax + 8], edx
mov ecx, dword [esp + 0x48]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x48]
test ecx, ecx
mov dword [esp + 0x30], esp
je 0x453f32
add dword [ecx + 4], 1
mov ecx, dword [esp + 0x34]
mov dword [eax + 0x10], 0
sub ecx, esi
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
push 0
push esi
call fcn.00453d00
add esp, 0x24
lea ecx, [esp + 0x24]
mov dword [esp + 0x10], 0xffffffff
call fcn.00453830
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0xc
ret
Function at 0x45c600
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4daa28
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push esi
mov eax, dword [0x553abc]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov esi, ecx
lea ecx, [esp + 8]
call fcn.0042fe20
mov eax, dword [esp + 0x34]
push eax
lea ecx, [esp + 0xc]
mov dword [esp + 0x30], 0
mov byte [esp + 0x20], 0
mov dword [esp + 0x24], 0
call fcn.0040e320
cmp eax, 1
jne 0x45c688
mov eax, dword [esp + 0x10]
test eax, eax
mov dword [esp + 8], vtable.CSerialize.0
je 0x45c670
push eax
call fcn.004b7e19
add esp, 4
mov eax, 1
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x28
ret 4
mov edx, dword [esp + 8]
mov eax, dword [edx + 0x5c]
push esi
lea ecx, [esp + 0xc]
call eax
mov eax, dword [esp + 0x10]
test eax, eax
mov dword [esp + 8], vtable.CSerialize.0
je 0x45c6af
push eax
call fcn.004b7e19
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x28
ret 4

Function at 0x45c6d0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4daa58
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push esi
mov eax, dword [0x553abc]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov esi, ecx
lea ecx, [esp + 8]
call fcn.0042fe20
mov eax, dword [esp + 8]
mov edx, dword [eax + 0x5c]
push esi
lea ecx, [esp + 0xc]
mov dword [esp + 0x30], 0
call edx
mov eax, dword [esp + 0x34]
push eax
lea ecx, [esp + 0xc]
call fcn.0040bb40
mov esi, eax
mov eax, dword [esp + 0x10]
test eax, eax
mov dword [esp + 8], vtable.CSerialize.0
je 0x45c73e
push eax
call fcn.004b7e19
add esp, 4
mov eax, esi
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x28
ret 4

Function at 0x460ce0
Capabilities:
Write file on windows

Disassembly:
push 0xffffffffffffffff
push 0x4dafe0
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push ebp
push esi
push edi
mov eax, dword [0x553abc]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov esi, ecx
lea ecx, [esp + 0x18]
call fcn.00403df0
push 0x4edf10
lea ecx, [esp + 0x18]
mov dword [esp + 0x30], 0
call fcn.00401db0
mov ebp, dword [esp + 0x34]
mov eax, dword [ebp]
mov edi, dword [esp + 0x14]
push edi
push eax
lea eax, [esp + 0x24]
push eax
mov byte [esp + 0x38], 1
call fcn.004b94f3
add esp, 0xc
test eax, eax
je 0x460d52
mov eax, 1
jmp 0x460d5e
push ebp
lea ecx, [esp + 0x24]
call fcn.00403d70
xor eax, eax
test eax, eax
lea ecx, [edi - 0xc]
sete bl
cmp ecx, dword [0x531020]
mov byte [esp + 0x2c], 0
je 0x460d8a
add edi, 0xfffffff4
push edi
call dword [0x4ed26c]
test eax, eax
jg 0x460d8a
push edi
call fcn.004b7e1e
add esp, 4
test bl, bl
je 0x460dce
push 0xab8
call fcn.004b7d96
mov ebx, eax
mov ecx, 0x2ae
mov edi, ebx
rep movsd dword es:[edi], dword [esi]
mov edx, dword [esp + 0x20]
push edx
push 1
push 0xab8
push ebx
call fcn.004b8cf6
push ebx
call fcn.004b7e1e
add esp, 0x18
lea ecx, [esp + 0x18]
call fcn.00403b90
mov eax, 1
jmp 0x460dd9
lea ecx, [esp + 0x18]
call fcn.00403b90
xor eax, eax
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret 4