joyce8/EMBER2024-capa huggingface dataset:
Function at 0x50f5b0
Capabilities:
Check for unmoving mouse cursor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push esi
mov esi, dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x10]
push eax
call esi
lea ecx, [ebp - 8]
push ecx
call esi
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x10]
mov esi, 1
cdq
xor eax, edx
sub eax, edx
cmp eax, 5
jg 0x50f5ee
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0xc]
cdq
xor eax, edx
sub eax, edx
cmp eax, 5
jle 0x50f615
mov ecx, dword [0x6d44ec]
push 0x5d97fc
call fcn.0044b950
mov ecx, dword [0x6d44ec]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push esi
call eax
mov ecx, dword [0x6d44ec]
mov dword [ecx + 0x30], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp eax, 0x3e8
sbb eax, eax
neg eax
cmp eax, 0xa
jle 0x50f678
push 0
mov ecx, 0x6d8f58
call fcn.0052feb0
mov eax, dword [0x6d8f5c]
push 0
lea ecx, [eax + 0xa74]
mov dword [eax + 0xa70], 0
call fcn.00424970
mov ecx, dword [0x6d44ec]
push 0x5d97fc
call fcn.0044b950
mov ecx, dword [0x6d44ec]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push esi
call eax
mov ecx, dword [0x6d44ec]
mov dword [ecx + 0x30], esi
pop esi
mov esp, ebp
pop ebp
ret

Function at 0x515760
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov esi, ecx
mov ecx, dword [ebp + 0x10]
push 0x80
lea eax, [esi + 0x18]
push ecx
push eax
mov dword [ebp - 4], eax
call fcn.0059a570
mov edx, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
lea edi, [esi + 4]
add esp, 0xc
cmp dword [edi], 0
mov dword [esi + 0xc], edx
jne 0x5157a1
push ebx
push edi
call fcn.00515580
mov eax, dword [edi]
add esp, 8
mov dword [esi + 8], eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 4]
push ecx
push ebx
push edx
lea edi, [esi + 0x9c]
push str._MemoryPooltempl__s_
push edi
mov dword [esi + 0x98], ebx
call fcn.0059a4c2
add esp, 0x14
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0x98]
mov edx, dword [esi + 0x14]
lea ecx, [eax*4]
push ecx
mov ecx, dword [ebp - 4]
push eax
mov eax, dword [esi + 0xc]
push edx
push eax
push ebx
push ecx
push str.__s__Init_t_d_t_d_t_d_t_d_t_d_n
push edi
call fcn.0059a4c2
push edi
call fcn.00594970
add esp, 0x24
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
Function at 0x515810
Capabilities:
Print debug messages

Disassembly:
push esi
mov esi, ecx
mov eax, dword [esi + 8]
test eax, eax
jne 0x51581c
pop esi
ret
mov ecx, dword [eax + 0x10]
test ecx, ecx
je 0x515835
dec ecx
mov dword [eax + 0x10], ecx
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
test eax, eax
jne 0x515918
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x14]
push ebx
push edi
test eax, eax
jne 0x5158aa
mov edx, dword [esi + 0xc]
push edx
lea edi, [esi + 4]
push edi
call fcn.00515580
mov eax, dword [edi]
mov ecx, dword [esi + 0x14]
mov edx, dword [esi + 0xc]
inc dword [esi + 0x10]
push ecx
push edx
mov dword [esi + 8], eax
mov eax, dword [esi + 0x10]
push eax
lea ebx, [esi + 0x18]
push ebx
lea edi, [esi + 0x9c]
push str.___s_alloc_Band
push edi
call fcn.0059a4c2
add esp, 0x20
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0xc]
add dword [esi + 0x98], eax
mov ecx, dword [esi + 0x98]
lea edx, [ecx*4]
push edx
mov edx, dword [esi + 0x10]
push ecx
mov ecx, dword [esi + 0x14]
push ecx
push eax
push edx
push ebx
push str.__s__Increse_t_d_t_d_t_d_t_d_t_d_n
jmp 0x5158ff
mov ecx, dword [esi + 0xc]
mov edx, dword [esi + 0x10]
mov dword [esi + 8], eax
mov eax, dword [esi + 0x14]
push eax
push ecx
push edx
lea ebx, [esi + 0x18]
push ebx
lea edi, [esi + 0x9c]
push 0x5c791c
push edi
call fcn.0059a4c2
add esp, 0x18
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0xc]
sub dword [esi + 0x98], eax
mov ecx, dword [esi + 0x98]
lea edx, [ecx*4]
push edx
mov edx, dword [esi + 0x10]
push ecx
mov ecx, dword [esi + 0x14]
push ecx
push eax
push edx
push ebx
push str.__s__Decrese_t_d_t_d_t_d_t_d_t_d_n
push edi
call fcn.0059a4c2
push edi
call fcn.00594970
add esp, 0x24
pop edi
pop ebx
mov ecx, esi
pop esi
jmp fcn.00515810
inc dword [esi + 0x14]
pop esi
ret

Function at 0x5254c0
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5b5feb
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x6ac30c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x10], esi
lea ecx, [esi + 4]
xor edi, edi
mov dword [esi], vtable.CNewbieGuide.0
mov dword [ecx], edi
mov dword [ecx + 4], edi
mov dword [ecx + 8], edi
mov dword [ecx + 0xc], edi
mov dword [ecx + 0x10], edi
mov dword [ecx + 0x14], edi
push 0x60
mov dword [ebp - 4], edi
call fcn.004d6390
mov dword [esi + 0x30], edi
mov dword [esi + 0x2c], edi
mov dword [esi + 0x28], edi
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x532fe0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov esi, ecx
mov ecx, dword [ebp + 0x10]
push 0x80
lea eax, [esi + 0x18]
push ecx
push eax
mov dword [ebp - 4], eax
call fcn.0059a570
mov edx, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
lea edi, [esi + 4]
add esp, 0xc
cmp dword [edi], 0
mov dword [esi + 0xc], edx
jne 0x533021
push ebx
push edi
call fcn.00531ae0
mov eax, dword [edi]
add esp, 8
mov dword [esi + 8], eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 4]
push ecx
push ebx
push edx
lea edi, [esi + 0x9c]
push str._MemoryPooltempl__s_
push edi
mov dword [esi + 0x98], ebx
call fcn.0059a4c2
add esp, 0x14
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0x98]
mov edx, dword [esi + 0x14]
lea ecx, [eax*4]
push ecx
mov ecx, dword [ebp - 4]
push eax
mov eax, dword [esi + 0xc]
push edx
push eax
push ebx
push ecx
push str.__s__Init_t_d_t_d_t_d_t_d_t_d_n
push edi
call fcn.0059a4c2
push edi
call fcn.00594970
add esp, 0x24
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc

Function at 0x533090
Capabilities:
Print debug messages

Disassembly:
push esi
mov esi, ecx
mov eax, dword [esi + 8]
test eax, eax
jne 0x53309c
pop esi
ret
mov ecx, dword [eax + 0x10]
test ecx, ecx
je 0x5330b5
dec ecx
mov dword [eax + 0x10], ecx
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
test eax, eax
jne 0x533198
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x14]
push ebx
push edi
test eax, eax
jne 0x53312a
mov edx, dword [esi + 0xc]
push edx
lea edi, [esi + 4]
push edi
call fcn.00531ae0
mov eax, dword [edi]
mov ecx, dword [esi + 0x14]
mov edx, dword [esi + 0xc]
inc dword [esi + 0x10]
push ecx
push edx
mov dword [esi + 8], eax
mov eax, dword [esi + 0x10]
push eax
lea ebx, [esi + 0x18]
push ebx
lea edi, [esi + 0x9c]
push str.___s_alloc_Band
push edi
call fcn.0059a4c2
add esp, 0x20
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0xc]
add dword [esi + 0x98], eax
mov ecx, dword [esi + 0x98]
lea edx, [ecx*4]
push edx
mov edx, dword [esi + 0x10]
push ecx
mov ecx, dword [esi + 0x14]
push ecx
push eax
push edx
push ebx
push str.__s__Increse_t_d_t_d_t_d_t_d_t_d_n
jmp 0x53317f
mov ecx, dword [esi + 0xc]
mov edx, dword [esi + 0x10]
mov dword [esi + 8], eax
mov eax, dword [esi + 0x14]
push eax
push ecx
push edx
lea ebx, [esi + 0x18]
push ebx
lea edi, [esi + 0x9c]
push 0x5c791c
push edi
call fcn.0059a4c2
add esp, 0x18
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0xc]
sub dword [esi + 0x98], eax
mov ecx, dword [esi + 0x98]
lea edx, [ecx*4]
push edx
mov edx, dword [esi + 0x10]
push ecx
mov ecx, dword [esi + 0x14]
push ecx
push eax
push edx
push ebx
push str.__s__Decrese_t_d_t_d_t_d_t_d_t_d_n
push edi
call fcn.0059a4c2
push edi
call fcn.00594970
add esp, 0x24
pop edi
pop ebx
mov ecx, esi
pop esi
jmp fcn.00533090
inc dword [esi + 0x14]
pop esi
ret
Function at 0x5331d0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov esi, ecx
mov ecx, dword [ebp + 0x10]
push 0x80
lea eax, [esi + 0x18]
push ecx
push eax
mov dword [ebp - 4], eax
call fcn.0059a570
mov edx, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
lea edi, [esi + 4]
add esp, 0xc
cmp dword [edi], 0
mov dword [esi + 0xc], edx
jne 0x533211
push ebx
push edi
call fcn.00531c00
mov eax, dword [edi]
add esp, 8
mov dword [esi + 8], eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 4]
push ecx
push ebx
push edx
lea edi, [esi + 0x9c]
push str._MemoryPooltempl__s_
push edi
mov dword [esi + 0x98], ebx
call fcn.0059a4c2
add esp, 0x14
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0x98]
mov edx, dword [esi + 0x14]
lea ecx, [eax*4]
push ecx
mov ecx, dword [ebp - 4]
push eax
mov eax, dword [esi + 0xc]
push edx
push eax
push ebx
push ecx
push str.__s__Init_t_d_t_d_t_d_t_d_t_d_n
push edi
call fcn.0059a4c2
push edi
call fcn.00594970
add esp, 0x24
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc

Function at 0x533280
Capabilities:
Print debug messages

Disassembly:
push esi
mov esi, ecx
mov eax, dword [esi + 8]
test eax, eax
jne 0x53328c
pop esi
ret
mov ecx, dword [eax + 0x10]
test ecx, ecx
je 0x5332a5
dec ecx
mov dword [eax + 0x10], ecx
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
test eax, eax
jne 0x533388
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x14]
push ebx
push edi
test eax, eax
jne 0x53331a
mov edx, dword [esi + 0xc]
push edx
lea edi, [esi + 4]
push edi
call fcn.00531c00
mov eax, dword [edi]
mov ecx, dword [esi + 0x14]
mov edx, dword [esi + 0xc]
inc dword [esi + 0x10]
push ecx
push edx
mov dword [esi + 8], eax
mov eax, dword [esi + 0x10]
push eax
lea ebx, [esi + 0x18]
push ebx
lea edi, [esi + 0x9c]
push str.___s_alloc_Band
push edi
call fcn.0059a4c2
add esp, 0x20
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0xc]
add dword [esi + 0x98], eax
mov ecx, dword [esi + 0x98]
lea edx, [ecx*4]
push edx
mov edx, dword [esi + 0x10]
push ecx
mov ecx, dword [esi + 0x14]
push ecx
push eax
push edx
push ebx
push str.__s__Increse_t_d_t_d_t_d_t_d_t_d_n
jmp 0x53336f
mov ecx, dword [esi + 0xc]
mov edx, dword [esi + 0x10]
mov dword [esi + 8], eax
mov eax, dword [esi + 0x14]
push eax
push ecx
push edx
lea ebx, [esi + 0x18]
push ebx
lea edi, [esi + 0x9c]
push 0x5c791c
push edi
call fcn.0059a4c2
add esp, 0x18
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0xc]
sub dword [esi + 0x98], eax
mov ecx, dword [esi + 0x98]
lea edx, [ecx*4]
push edx
mov edx, dword [esi + 0x10]
push ecx
mov ecx, dword [esi + 0x14]
push ecx
push eax
push edx
push ebx
push str.__s__Decrese_t_d_t_d_t_d_t_d_t_d_n
push edi
call fcn.0059a4c2
push edi
call fcn.00594970
add esp, 0x24
pop edi
pop ebx
mov ecx, esi
pop esi
jmp fcn.00533280
inc dword [esi + 0x14]
pop esi
ret
Function at 0x5333c0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov esi, ecx
mov ecx, dword [ebp + 0x10]
push 0x80
lea eax, [esi + 0x18]
push ecx
push eax
mov dword [ebp - 4], eax
call fcn.0059a570
mov edx, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
lea edi, [esi + 4]
add esp, 0xc
cmp dword [edi], 0
mov dword [esi + 0xc], edx
jne 0x533401
push ebx
push edi
call fcn.00531d20
mov eax, dword [edi]
add esp, 8
mov dword [esi + 8], eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 4]
push ecx
push ebx
push edx
lea edi, [esi + 0x9c]
push str._MemoryPooltempl__s_
push edi
mov dword [esi + 0x98], ebx
call fcn.0059a4c2
add esp, 0x14
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0x98]
mov edx, dword [esi + 0x14]
lea ecx, [eax*4]
push ecx
mov ecx, dword [ebp - 4]
push eax
mov eax, dword [esi + 0xc]
push edx
push eax
push ebx
push ecx
push str.__s__Init_t_d_t_d_t_d_t_d_t_d_n
push edi
call fcn.0059a4c2
push edi
call fcn.00594970
add esp, 0x24
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc

Function at 0x533470
Capabilities:
Print debug messages

Disassembly:
push esi
mov esi, ecx
mov eax, dword [esi + 8]
test eax, eax
jne 0x53347c
pop esi
ret
mov ecx, dword [eax + 0x10]
test ecx, ecx
je 0x533495
dec ecx
mov dword [eax + 0x10], ecx
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
test eax, eax
jne 0x533578
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x14]
push ebx
push edi
test eax, eax
jne 0x53350a
mov edx, dword [esi + 0xc]
push edx
lea edi, [esi + 4]
push edi
call fcn.00531d20
mov eax, dword [edi]
mov ecx, dword [esi + 0x14]
mov edx, dword [esi + 0xc]
inc dword [esi + 0x10]
push ecx
push edx
mov dword [esi + 8], eax
mov eax, dword [esi + 0x10]
push eax
lea ebx, [esi + 0x18]
push ebx
lea edi, [esi + 0x9c]
push str.___s_alloc_Band
push edi
call fcn.0059a4c2
add esp, 0x20
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0xc]
add dword [esi + 0x98], eax
mov ecx, dword [esi + 0x98]
lea edx, [ecx*4]
push edx
mov edx, dword [esi + 0x10]
push ecx
mov ecx, dword [esi + 0x14]
push ecx
push eax
push edx
push ebx
push str.__s__Increse_t_d_t_d_t_d_t_d_t_d_n
jmp 0x53355f
mov ecx, dword [esi + 0xc]
mov edx, dword [esi + 0x10]
mov dword [esi + 8], eax
mov eax, dword [esi + 0x14]
push eax
push ecx
push edx
lea ebx, [esi + 0x18]
push ebx
lea edi, [esi + 0x9c]
push 0x5c791c
push edi
call fcn.0059a4c2
add esp, 0x18
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0xc]
sub dword [esi + 0x98], eax
mov ecx, dword [esi + 0x98]
lea edx, [ecx*4]
push edx
mov edx, dword [esi + 0x10]
push ecx
mov ecx, dword [esi + 0x14]
push ecx
push eax
push edx
push ebx
push str.__s__Decrese_t_d_t_d_t_d_t_d_t_d_n
push edi
call fcn.0059a4c2
push edi
call fcn.00594970
add esp, 0x24
pop edi
pop ebx
mov ecx, esi
pop esi
jmp fcn.00533470
inc dword [esi + 0x14]
pop esi
ret
Function at 0x5335b0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov esi, ecx
mov ecx, dword [ebp + 0x10]
push 0x80
lea eax, [esi + 0x18]
push ecx
push eax
mov dword [ebp - 4], eax
call fcn.0059a570
mov edx, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
lea edi, [esi + 4]
add esp, 0xc
cmp dword [edi], 0
mov dword [esi + 0xc], edx
jne 0x5335f1
push ebx
push edi
call fcn.00531e40
mov eax, dword [edi]
add esp, 8
mov dword [esi + 8], eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 4]
push ecx
push ebx
push edx
lea edi, [esi + 0x9c]
push str._MemoryPooltempl__s_
push edi
mov dword [esi + 0x98], ebx
call fcn.0059a4c2
add esp, 0x14
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0x98]
mov edx, dword [esi + 0x14]
lea ecx, [eax*4]
push ecx
mov ecx, dword [ebp - 4]
push eax
mov eax, dword [esi + 0xc]
push edx
push eax
push ebx
push ecx
push str.__s__Init_t_d_t_d_t_d_t_d_t_d_n
push edi
call fcn.0059a4c2
push edi
call fcn.00594970
add esp, 0x24
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc

Function at 0x533660
Capabilities:
Print debug messages

Disassembly:
push esi
mov esi, ecx
mov eax, dword [esi + 8]
test eax, eax
jne 0x53366c
pop esi
ret
mov ecx, dword [eax + 0x10]
test ecx, ecx
je 0x533685
dec ecx
mov dword [eax + 0x10], ecx
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
test eax, eax
jne 0x533768
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x14]
push ebx
push edi
test eax, eax
jne 0x5336fa
mov edx, dword [esi + 0xc]
push edx
lea edi, [esi + 4]
push edi
call fcn.00531e40
mov eax, dword [edi]
mov ecx, dword [esi + 0x14]
mov edx, dword [esi + 0xc]
inc dword [esi + 0x10]
push ecx
push edx
mov dword [esi + 8], eax
mov eax, dword [esi + 0x10]
push eax
lea ebx, [esi + 0x18]
push ebx
lea edi, [esi + 0x9c]
push str.___s_alloc_Band
push edi
call fcn.0059a4c2
add esp, 0x20
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0xc]
add dword [esi + 0x98], eax
mov ecx, dword [esi + 0x98]
lea edx, [ecx*4]
push edx
mov edx, dword [esi + 0x10]
push ecx
mov ecx, dword [esi + 0x14]
push ecx
push eax
push edx
push ebx
push str.__s__Increse_t_d_t_d_t_d_t_d_t_d_n
jmp 0x53374f
mov ecx, dword [esi + 0xc]
mov edx, dword [esi + 0x10]
mov dword [esi + 8], eax
mov eax, dword [esi + 0x14]
push eax
push ecx
push edx
lea ebx, [esi + 0x18]
push ebx
lea edi, [esi + 0x9c]
push 0x5c791c
push edi
call fcn.0059a4c2
add esp, 0x18
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0xc]
sub dword [esi + 0x98], eax
mov ecx, dword [esi + 0x98]
lea edx, [ecx*4]
push edx
mov edx, dword [esi + 0x10]
push ecx
mov ecx, dword [esi + 0x14]
push ecx
push eax
push edx
push ebx
push str.__s__Decrese_t_d_t_d_t_d_t_d_t_d_n
push edi
call fcn.0059a4c2
push edi
call fcn.00594970
add esp, 0x24
pop edi
pop ebx
mov ecx, esi
pop esi
jmp fcn.00533660
inc dword [esi + 0x14]
pop esi
ret
Function at 0x5337a0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov esi, ecx
mov ecx, dword [ebp + 0x10]
push 0x80
lea eax, [esi + 0x18]
push ecx
push eax
mov dword [ebp - 4], eax
call fcn.0059a570
mov edx, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
lea edi, [esi + 4]
add esp, 0xc
cmp dword [edi], 0
mov dword [esi + 0xc], edx
jne 0x5337e1
push ebx
push edi
call fcn.00531f60
mov eax, dword [edi]
add esp, 8
mov dword [esi + 8], eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 4]
push ecx
push ebx
push edx
lea edi, [esi + 0x9c]
push str._MemoryPooltempl__s_
push edi
mov dword [esi + 0x98], ebx
call fcn.0059a4c2
add esp, 0x14
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0x98]
mov edx, dword [esi + 0x14]
lea ecx, [eax*4]
push ecx
mov ecx, dword [ebp - 4]
push eax
mov eax, dword [esi + 0xc]
push edx
push eax
push ebx
push ecx
push str.__s__Init_t_d_t_d_t_d_t_d_t_d_n
push edi
call fcn.0059a4c2
push edi
call fcn.00594970
add esp, 0x24
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc

Function at 0x533850
Capabilities:
Print debug messages

Disassembly:
push esi
mov esi, ecx
mov eax, dword [esi + 8]
test eax, eax
jne 0x53385c
pop esi
ret
mov ecx, dword [eax + 0x10]
test ecx, ecx
je 0x533875
dec ecx
mov dword [eax + 0x10], ecx
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
test eax, eax
jne 0x533958
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x14]
push ebx
push edi
test eax, eax
jne 0x5338ea
mov edx, dword [esi + 0xc]
push edx
lea edi, [esi + 4]
push edi
call fcn.00531f60
mov eax, dword [edi]
mov ecx, dword [esi + 0x14]
mov edx, dword [esi + 0xc]
inc dword [esi + 0x10]
push ecx
push edx
mov dword [esi + 8], eax
mov eax, dword [esi + 0x10]
push eax
lea ebx, [esi + 0x18]
push ebx
lea edi, [esi + 0x9c]
push str.___s_alloc_Band
push edi
call fcn.0059a4c2
add esp, 0x20
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0xc]
add dword [esi + 0x98], eax
mov ecx, dword [esi + 0x98]
lea edx, [ecx*4]
push edx
mov edx, dword [esi + 0x10]
push ecx
mov ecx, dword [esi + 0x14]
push ecx
push eax
push edx
push ebx
push str.__s__Increse_t_d_t_d_t_d_t_d_t_d_n
jmp 0x53393f
mov ecx, dword [esi + 0xc]
mov edx, dword [esi + 0x10]
mov dword [esi + 8], eax
mov eax, dword [esi + 0x14]
push eax
push ecx
push edx
lea ebx, [esi + 0x18]
push ebx
lea edi, [esi + 0x9c]
push 0x5c791c
push edi
call fcn.0059a4c2
add esp, 0x18
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0xc]
sub dword [esi + 0x98], eax
mov ecx, dword [esi + 0x98]
lea edx, [ecx*4]
push edx
mov edx, dword [esi + 0x10]
push ecx
mov ecx, dword [esi + 0x14]
push ecx
push eax
push edx
push ebx
push str.__s__Decrese_t_d_t_d_t_d_t_d_t_d_n
push edi
call fcn.0059a4c2
push edi
call fcn.00594970
add esp, 0x24
pop edi
pop ebx
mov ecx, esi
pop esi
jmp fcn.00533850
inc dword [esi + 0x14]
pop esi
ret
Function at 0x533990
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov esi, ecx
mov ecx, dword [ebp + 0x10]
push 0x80
lea eax, [esi + 0x18]
push ecx
push eax
mov dword [ebp - 4], eax
call fcn.0059a570
mov edx, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
lea edi, [esi + 4]
add esp, 0xc
cmp dword [edi], 0
mov dword [esi + 0xc], edx
jne 0x5339d1
push ebx
push edi
call fcn.00532080
mov eax, dword [edi]
add esp, 8
mov dword [esi + 8], eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 4]
push ecx
push ebx
push edx
lea edi, [esi + 0x9c]
push str._MemoryPooltempl__s_
push edi
mov dword [esi + 0x98], ebx
call fcn.0059a4c2
add esp, 0x14
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0x98]
mov edx, dword [esi + 0x14]
lea ecx, [eax*4]
push ecx
mov ecx, dword [ebp - 4]
push eax
mov eax, dword [esi + 0xc]
push edx
push eax
push ebx
push ecx
push str.__s__Init_t_d_t_d_t_d_t_d_t_d_n
push edi
call fcn.0059a4c2
push edi
call fcn.00594970
add esp, 0x24
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc

Function at 0x533a40
Capabilities:
Print debug messages

Disassembly:
push esi
mov esi, ecx
mov eax, dword [esi + 8]
test eax, eax
jne 0x533a4c
pop esi
ret
mov ecx, dword [eax + 0x10]
test ecx, ecx
je 0x533a65
dec ecx
mov dword [eax + 0x10], ecx
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
test eax, eax
jne 0x533b48
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x14]
push ebx
push edi
test eax, eax
jne 0x533ada
mov edx, dword [esi + 0xc]
push edx
lea edi, [esi + 4]
push edi
call fcn.00532080
mov eax, dword [edi]
mov ecx, dword [esi + 0x14]
mov edx, dword [esi + 0xc]
inc dword [esi + 0x10]
push ecx
push edx
mov dword [esi + 8], eax
mov eax, dword [esi + 0x10]
push eax
lea ebx, [esi + 0x18]
push ebx
lea edi, [esi + 0x9c]
push str.___s_alloc_Band
push edi
call fcn.0059a4c2
add esp, 0x20
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0xc]
add dword [esi + 0x98], eax
mov ecx, dword [esi + 0x98]
lea edx, [ecx*4]
push edx
mov edx, dword [esi + 0x10]
push ecx
mov ecx, dword [esi + 0x14]
push ecx
push eax
push edx
push ebx
push str.__s__Increse_t_d_t_d_t_d_t_d_t_d_n
jmp 0x533b2f
mov ecx, dword [esi + 0xc]
mov edx, dword [esi + 0x10]
mov dword [esi + 8], eax
mov eax, dword [esi + 0x14]
push eax
push ecx
push edx
lea ebx, [esi + 0x18]
push ebx
lea edi, [esi + 0x9c]
push 0x5c791c
push edi
call fcn.0059a4c2
add esp, 0x18
push edi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0xc]
sub dword [esi + 0x98], eax
mov ecx, dword [esi + 0x98]
lea edx, [ecx*4]
push edx
mov edx, dword [esi + 0x10]
push ecx
mov ecx, dword [esi + 0x14]
push ecx
push eax
push edx
push ebx
push str.__s__Decrese_t_d_t_d_t_d_t_d_t_d_n
push edi
call fcn.0059a4c2
push edi
call fcn.00594970
add esp, 0x24
pop edi
pop ebx
mov ecx, esi
pop esi
jmp fcn.00533a40
inc dword [esi + 0x14]
pop esi
ret