joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4322a0
Capabilities:
Access peb ldr_data
Get geographical location

Disassembly:
mov ecx, dword [0x1652dc4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x432422
sub esp, 0x24
mov eax, dword [0x165381c]
test eax, eax
je 0x4323cd
mov eax, dword [esp + 0x38]
cmp eax, 5
jg 0x4323d8
mov ecx, dword [0x1652dc4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
mov edx, dword [ecx + 0x18]
nop
inc dword [edx + 0x7c]
mov edx, dword [ecx + 0x18]
mov dword [esp + 0x20], edx
mov ebx, dword [edx + 0x50]
test ebx, ebx
je 0x432326
cmp ecx, ebx
je 0x432326
mov ecx, dword [edx + 0x17c]
mov ebp, dword [edx + 0x180]
mov esi, dword [edx + 0x178]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], esi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
call fcn.0045e0a0
mov eax, dword [esp + 0x14]
jmp 0x432350
mov ecx, dword [edx + 0x178]
mov ebx, dword [edx + 0x17c]
mov ebp, dword [edx + 0x180]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
call fcn.00475170
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x20]
mov edx, dword [ebx + 0x180]
cmp eax, edx
ja 0x4323d1
mov ecx, dword [ebx + 0x178]
mov ebp, dword [esp + 0x28]
mov dword [esp], ebp
mov ebp, dword [esp + 0x2c]
mov dword [esp + 4], ebp
mov ebp, dword [esp + 0x30]
mov dword [esp + 8], ebp
mov ebp, dword [esp + 0x34]
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], edx
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x1c], eax
call fcn.00432ce0
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0x7c]
lea edx, [ecx - 1]
nop
mov ebx, dword [0x1652dc4]
mov ebx, dword fs:[ebx]
mov ebx, dword [ebx]
mov dword [eax + 0x7c], edx
cmp ecx, 1
jne 0x4323c9
movzx eax, byte [ebx + 0x69]
test al, al
je 0x4323c9
mov dword [ebx + 8], 0xfffffade
add esp, 0x24
ret
add esp, 0x24
ret
mov ecx, eax
call fcn.00477380
call fcn.0043c260
lea eax, [0xd79264]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.0043cac0
mov eax, dword [esp + 0x38]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.0043c8e0
call fcn.0043c2c0
lea eax, [0xd7cd6b]
mov dword [esp], eax
mov dword [esp + 4], 0x12
call fcn.00470130
nop
call fcn.00475ec0
jmp fcn.004322a0
Function at 0x4384f0
Capabilities:
Access peb ldr_data

Disassembly:
sub esp, 8
mov dword [esp + 0x30], 0
mov eax, dword [0x1652dc4]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [eax + 0x1b0], 8
lea ecx, [esp + 0x10]
mov dword [eax + 0x1b4], ecx
mov eax, dword [esp + 0xc]
mov dword [esp], eax
call fcn.004381d0
mov eax, dword [esp + 4]
mov dword [esp + 0x30], eax
add esp, 8
ret
Function at 0x43a000
Capabilities:
Get geographical location

Disassembly:
mov ecx, dword [0x1652dc4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x43a1ac
sub esp, 0x10
mov eax, dword [esp + 0x14]
movzx edx, byte [eax + 0x32]
mov ebx, dword [0x1652dc4]
mov ebx, dword fs:[ebx]
mov ebx, dword [ebx]
test dl, dl
jne 0x43a043
cmp dword [ebx + 0x10], eax
jne 0x43a195
movzx edx, byte [eax + 0x30]
test dl, dl
jne 0x43a171
mov edx, dword [0x1653268]
mov ebp, dword [eax + 0x14]
test edx, edx
je 0x43a05c
call fcn.004772d0
mov dword [edi], ebp
mov edx, dword [eax]
mov dword [edi + 4], edx
mov dword [esp + 8], ebx
mov dword [eax], ebp
jmp 0x43a06c
mov ebx, dword [esp + 8]
mov eax, dword [esp + 0x14]
mov edx, dword [eax + 0x28]
test edx, edx
je 0x43a11b
movzx ebp, byte [edx]
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x43a0b3
mov ecx, dword [0x1653268]
test ecx, ecx
je 0x43a094
mov ecx, dword [eax + 0x28]
call fcn.004772c0
mov dword [edi], ecx
mov dword [eax + 0x28], 0
jmp 0x43a11b
mov dword [esp], eax
call fcn.0043a1c0
movzx eax, byte [esp + 4]
test al, al
jne 0x43a064
jmp 0x43a160
xchg ebp, eax
movzx ebx, al
xchg ebp, eax
lea esi, [0xddb6a2]
movzx ebx, byte [esi + ebx]
add ebx, 0xfffffff8
neg ebx
lea ecx, [ebx - 7]
neg ecx
mov ebx, 1
shl ebx, cl
cmp ecx, 0x20
sbb esi, esi
and esi, ebx
xchg esi, ebx
not ebx
xchg esi, ebx
and esi, ebp
xchg esi, eax
mov byte [edx], al
xchg esi, eax
mov eax, dword [eax + 0x2c]
mov eax, dword [eax + ecx*4]
mov dword [esp + 0x18], eax
mov byte [esp + 0x1c], 1
add esp, 0x10
ret
mov dword [esp], ecx
call fcn.004395d0
mov eax, dword [esp + 8]
mov dword [esp], eax
call fcn.00439900
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x14]
mov eax, ecx
mov ebx, dword [esp + 8]
mov ecx, dword [ebx + 0x14]
test ecx, ecx
je 0x43a09d
mov edx, dword [eax + 0x18]
cmp dword [ecx + 4], edx
jne 0x43a09d
movzx edx, byte [ecx + 1]
test dl, dl
jne 0x43a0f9
mov edx, dword [ecx + 0xc]
mov dword [esp + 0xc], edx
mov ecx, dword [ecx + 8]
mov dword [eax + 0x24], ecx
mov dword [esp], ebx
call fcn.00439900
mov eax, dword [esp + 0xc]
mov dword [esp + 0x18], eax
mov byte [esp + 0x1c], 1
add esp, 0x10
ret
mov dword [esp + 0x18], 0
mov byte [esp + 0x1c], 0
add esp, 0x10
ret
lea eax, [0xde4c5c]
mov dword [esp], eax
call fcn.00475d70
lea eax, [0xd79282]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00470130
lea eax, [0xd79273]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00470130
nop
call fcn.00475ec0
jmp fcn.0043a000
Function at 0x43e4d0
Capabilities:
Get geographical location

Disassembly:
mov ecx, dword [0x1652dc4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x43e5a3
sub esp, 0x14
mov eax, dword [0x16352e8]
mov dword [esp + 0x10], eax
mov ecx, dword [0x16352f8]
mov dword [esp + 0xc], ecx
lea edx, [0x1652dc0]
mov dword [esp], edx
call fcn.0047d670
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
sub eax, ecx
sub eax, dword [esp + 4]
mov dword [esp + 8], eax
lea ecx, [0x1652c64]
mov dword [esp], ecx
call fcn.0047d670
mov eax, dword [esp + 8]
sub eax, dword [esp + 4]
mov ecx, dword [0x16352f0]
cmp ecx, eax
jl 0x43e53f
add esp, 0x14
ret
mov dword [esp + 8], ecx
call fcn.0043c260
lea eax, [0xd870d9]
mov dword [esp], eax
mov dword [esp + 4], 0x19
call fcn.0043cac0
mov eax, dword [esp + 8]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.0043c8e0
lea eax, [0xd77f6c]
mov dword [esp], eax
mov dword [esp + 4], 0xe
call fcn.0043cac0
call fcn.0043c2c0
lea eax, [0xd7b96c]
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.00470130
nop
call fcn.00475ec0
jmp fcn.0043e4d0
Function at 0x441a40
Capabilities:
Get geographical location

Disassembly:
mov ecx, dword [0x1652dc4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x441b58
sub esp, 0x10
mov eax, dword [0x1652dc4]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
mov edx, dword [ecx + 0x7c]
test edx, edx
jne 0x441b41
mov edx, dword [ecx + 0x58]
test edx, edx
jne 0x441b2b
movzx ecx, byte [ecx + 0x88]
test cl, cl
jne 0x441b15
mov dword [esp + 0xc], eax
nop
nop
lea eax, [0x16352d8]
mov dword [esp], eax
call fcn.0040df30
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0x18]
mov dword [esp], ecx
call fcn.0044a370
nop
nop
lea eax, [0x16352d8]
mov dword [esp], eax
call fcn.0040e150
mov eax, dword [0x1652dc4]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov dword [esp + 8], eax
mov ecx, dword [eax + 0x18]
test byte [ecx], al
add ecx, 0xac
nop
mov dword [esp], ecx
call fcn.0040e2d0
mov eax, dword [esp + 8]
mov eax, dword [eax + 0x18]
mov dword [eax + 0xac], 0
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0x18]
mov ecx, dword [ecx + 0x5c]
mov dword [esp], ecx
call fcn.004483c0
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 0x18]
mov dword [eax + 0x5c], 0
add esp, 0x10
ret
lea eax, [0xd77f7a]
mov dword [esp], eax
mov dword [esp + 4], 0xe
call fcn.00470130
lea eax, [0xd79291]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00470130
lea eax, [0xd7e3fe]
mov dword [esp], eax
mov dword [esp + 4], 0x13
call fcn.00470130
nop
call fcn.00475ec0
jmp fcn.00441a40
Function at 0x444c90
Capabilities:
Get geographical location

Disassembly:
mov ecx, dword [0x1652dc4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x444e15
sub esp, 0x14
movzx eax, byte [0x16330f0]
test al, al
jne 0x444cb8
xor ecx, ecx
xor eax, eax
jmp 0x444cc4
call fcn.00460f90
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov edx, dword [esp + 0x18]
test byte [edx], al
lea ebx, [edx + 0x4c]
nop
mov dword [esp], ebx
call fcn.0047d670
mov eax, dword [esp + 4]
and eax, 0xffffefff
cmp eax, 2
jne 0x444df2
mov eax, dword [esp + 0xc]
test eax, eax
je 0x444d2e
movzx ecx, byte [esp + 0x1c]
test cl, cl
je 0x444d18
mov ecx, dword [esp + 0x10]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov byte [esp + 8], 2
call fcn.00461f00
jmp 0x444d2e
nop
mov ecx, dword [esp + 0x10]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov byte [esp + 8], 1
call fcn.00461f00
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], 2
mov dword [esp + 8], 1
call fcn.0043f160
mov eax, dword [esp + 0xc]
test eax, eax
je 0x444d62
mov ecx, dword [esp + 0x10]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004610c0
mov eax, dword [0x1652dc4]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
mov ecx, dword [ecx + 0x50]
xor edx, edx
nop
nop
mov dword [ecx + 0x18], edx
mov eax, dword [eax + 0x18]
xor ecx, ecx
nop
mov dword [eax + 0x50], ecx
nop
nop
lea eax, [0x16352d8]
mov dword [esp], eax
call fcn.0040df30
nop
nop
mov eax, dword [esp + 0x18]
mov dword [eax + 0x5c], 0
mov ecx, dword [0x1635318]
test ecx, ecx
je 0x444db1
mov edx, eax
mov dword [ecx + 0x5c], eax
jmp 0x444dbc
mov ecx, eax
nop
mov dword [0x1635314], eax
mov edx, ecx
nop
mov dword [0x1635318], edx
inc dword [0x163531c]
nop
nop
lea eax, [0x16352d8]
mov dword [esp], eax
call fcn.0040e150
movzx eax, byte [0x1652b73]
test al, al
je 0x444de9
call fcn.004702d0
call fcn.00444790
add esp, 0x14
ret
mov eax, dword [esp + 0x18]
mov dword [esp], eax
call fcn.0043e330
lea eax, [0xd757c9]
mov dword [esp], eax
mov dword [esp + 4], 0xc
call fcn.00470130
nop
call fcn.00475ec0
jmp fcn.00444c90
Function at 0x444ee0
Capabilities:
Get geographical location

Disassembly:
mov ecx, dword [0x1652dc4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 0xc]
jbe 0x4450c3
sub esp, 0x20
mov eax, dword [esp + 0x24]
test byte [eax], al
lea ecx, [eax + 0x4c]
nop
mov dword [esp], ecx
call fcn.0047d670
mov eax, dword [esp + 4]
and eax, 0xffffefff
cmp eax, 2
jne 0x4450a0
mov eax, dword [esp + 0x24]
movzx ecx, byte [eax + 0x6c]
test cl, cl
je 0x444f4f
mov ecx, dword [eax + 0x20]
mov dword [esp], ecx
call fcn.004734a0
mov eax, dword [esp + 4]
test eax, eax
je 0x44508a
movzx ecx, byte [eax + 0x29]
test cl, 2
jne 0x445007
mov eax, dword [esp + 0x24]
mov dword [esp], eax
mov dword [esp + 4], 2
mov dword [esp + 8], 0x1009
call fcn.0043f5f0
mov eax, dword [0x1652dc4]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
mov ecx, dword [ecx + 0x50]
xor edx, edx
nop
nop
mov dword [ecx + 0x18], edx
mov eax, dword [eax + 0x18]
xor ecx, ecx
nop
mov dword [eax + 0x50], ecx
movzx eax, byte [0x16330f0]
test al, al
jne 0x444f99
xor ecx, ecx
xor eax, eax
jmp 0x444fa5
call fcn.00460f90
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], eax
test ecx, ecx
je 0x444fca
mov dword [esp], eax
mov dword [esp + 4], ecx
mov byte [esp + 8], 0xb
mov dword [esp + 0xc], 0
call fcn.00462030
mov eax, dword [esp + 0x24]
mov dword [esp], eax
mov dword [esp + 4], 0x1009
mov dword [esp + 8], 9
call fcn.0043ee70
mov eax, dword [esp + 0x14]
test eax, eax
je 0x444ffe
mov ecx, dword [esp + 0x18]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004610c0
call fcn.00444790
add esp, 0x20
ret
mov ecx, dword [esp + 8]
mov eax, dword [eax + 4]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00456aa0
mov eax, dword [esp + 8]
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x10], ecx
call fcn.0043c260
lea eax, [0xda01f2]
mov dword [esp], eax
mov dword [esp + 4], 0x25
call fcn.0043cac0
mov eax, dword [esp + 0x1c]
mov dword [esp], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 4], eax
call fcn.0043cac0
lea eax, [0xd7cdd7]
mov dword [esp], eax
mov dword [esp + 4], 0x12
call fcn.0043cac0
call fcn.0043c2c0
lea eax, [0xd792af]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00470130
lea eax, [0xd810eb]
mov dword [esp], eax
mov dword [esp + 4], 0x15
call fcn.00470130
mov eax, dword [esp + 0x24]
mov dword [esp], eax
call fcn.0043e330
lea eax, [0xd757c9]
mov dword [esp], eax
mov dword [esp + 4], 0xc
call fcn.00470130
nop
call fcn.00472930
jmp fcn.00444ee0
Function at 0x447680
Capabilities:
Get geographical location

Disassembly:
mov ecx, dword [0x1652dc4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4477e7
sub esp, 0x10
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [ecx], eax
mov dword [ecx + 4], 3
mov dword [ecx + 0x500], 0
mov dword [ecx + 0x504], 0x80
mov edx, dword [0x1653268]
lea ebx, [ecx + 0x508]
lea ebp, [ecx + 0x58]
test edx, edx
je 0x4476e8
call fcn.004772f0
mov dword [edi], ebx
mov edx, dword [ecx + 0x4fc]
mov dword [edi + 4], edx
mov dword [edi + 8], ebp
mov edx, dword [ecx + 0x4c]
mov dword [edi + 0xc], edx
mov dword [ecx + 0x4fc], ebx
mov dword [ecx + 0x50], 0
mov dword [ecx + 0x54], 0x20
mov dword [ecx + 0x4c], ebp
lea eax, [ecx + 0x988]
mov dword [esp], eax
call fcn.00434c70
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x44771e
mov ecx, dword [esp + 0x18]
jmp 0x44774c
mov ecx, dword [esp + 0x18]
test ecx, ecx
jne 0x447739
mov edx, dword [0x1652c54]
test edx, edx
je 0x4477d0
mov dword [eax + 0x30], edx
jmp 0x44774c
call fcn.00414630
mov eax, dword [esp]
mov ecx, dword [esp + 0x14]
mov dword [ecx + 0x30], eax
mov ecx, dword [esp + 0x18]
mov edx, ecx
sar edx, 0x1f
shr edx, 0x1b
lea eax, [ecx + edx]
mov edx, eax
and edx, 0xffffffe0
mov ebx, ecx
sub ebx, edx
test ebx, ebx
jl 0x4477cb
mov edx, dword [0x162f304]
sar eax, 5
mov ecx, ebx
mov esi, 1
shl esi, cl
cmp ecx, 0x20
sbb ebx, ebx
and esi, ebx
cmp edx, eax
jbe 0x4477c4
mov ecx, dword [0x162f300]
lea eax, [ecx + eax*4]
mov dword [esp], eax
mov dword [esp + 4], esi
call fcn.0047d980
mov eax, dword [0x162f2f0]
mov ecx, dword [0x162f2f4]
mov edx, dword [0x162f2f8]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov eax, dword [esp + 0x18]
mov dword [esp + 0xc], eax
call fcn.0044a520
add esp, 0x10
ret
mov ecx, edx
call fcn.00477340
call fcn.00439460
lea eax, [0xd792be]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00470130
nop
call fcn.00475ec0
jmp fcn.00447680
Function at 0x448660
Capabilities:
Get geographical location

Disassembly:
mov ecx, dword [0x1652dc4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4487a2
sub esp, 0x18
mov eax, dword [0x1652dc4]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov ecx, dword [eax + 0x58]
test ecx, ecx
je 0x44878b
mov dword [esp + 0x14], eax
mov edx, dword [ecx + 0x2c]
mov dword [esp + 8], edx
nop
cmp edx, eax
jne 0x4486c3
cmp dword [ecx + 4], 1
jne 0x4486c3
mov dword [eax + 0x58], 0
mov dword [ecx + 0x2c], 0
mov dword [ecx + 4], 0
mov dword [esp + 0x1c], ecx
add esp, 0x18
ret
mov dword [esp + 0x10], ecx
mov eax, dword [ecx + 4]
mov dword [esp + 0xc], eax
call fcn.0043c260
lea eax, [0xd757f9]
mov dword [esp], eax
mov dword [esp + 4], 0xc
call fcn.0043cac0
mov eax, dword [esp + 0x14]
mov dword [esp], eax
call fcn.0043ca40
lea eax, [0xd70464]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.0043cac0
mov eax, dword [esp + 0x10]
mov dword [esp], eax
call fcn.0043ca40
lea eax, [0xd7046a]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.0043cac0
mov eax, dword [esp + 8]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0043c950
lea eax, [0xd7454c]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.0043cac0
mov eax, dword [esp + 0xc]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0043c7b0
call fcn.0043c460
call fcn.0043c2c0
lea eax, [0xd87124]
mov dword [esp], eax
mov dword [esp + 4], 0x19
call fcn.00470130
lea eax, [0xd81100]
mov dword [esp], eax
mov dword [esp + 4], 0x15
call fcn.00470130
nop
call fcn.00475ec0
jmp fcn.00448660
Function at 0x44c220
Capabilities:
Get geographical location

Disassembly:
mov ecx, dword [0x1652dc4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x44c3b1
sub esp, 0x44
nop
nop
lea eax, [0x1654a80]
mov dword [esp], eax
call fcn.0040df30
movzx eax, byte [0x1654bd0]
test al, al
je 0x44c268
lea eax, [0xd77fa4]
mov dword [esp], eax
mov dword [esp + 4], 0xe
call fcn.0043a630
mov edx, dword [0x162f2a0]
test edx, edx
je 0x44c27f
mov ebx, dword [0x162f2a4]
xor eax, eax
jmp 0x44c336
lea eax, [0x1654a84]
mov dword [esp], eax
mov dword [esp + 4], 0x20
mov dword [esp + 8], 0x20
call fcn.00436ef0
cmp dword [esp + 0xc], 0x20
je 0x44c2c9
mov byte [0x1652b76], 1
lea eax, [0x1654a84]
mov dword [esp], eax
mov dword [esp + 4], 0x20
mov dword [esp + 8], 0x20
call fcn.0044c3c0
lea edi, [esp + 0x24]
lea esi, [0x1654a84]
call fcn.00477a30
lea eax, [0x1654aa4]
mov dword [esp], eax
lea edi, [esp + 4]
lea esi, [esp + 0x24]
call fcn.00477a30
call fcn.004067b0
lea eax, [0x1654a84]
mov dword [esp], eax
mov dword [esp + 4], 0x20
call fcn.00477a90
mov byte [0x1654bd0], 1
nop
nop
lea eax, [0x1654a80]
mov dword [esp], eax
call fcn.0040e150
add esp, 0x44
ret
lea esi, [0x1654a84]
movzx edi, byte [ecx + esi]
xor edi, ebp
xchg edi, eax
mov byte [esi + ecx], al
xchg edi, eax
inc eax
cmp eax, ebx
jge 0x44c34e
mov ebp, eax
and ebp, 0xffffffe0
mov ecx, eax
sub ecx, ebp
movzx ebp, byte [eax + edx]
cmp ecx, 0x20
jb 0x44c324
jmp 0x44c3a4
mov eax, dword [0x162f2a4]
test eax, eax
je 0x44c36a
mov ecx, dword [0x162f2a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00477a90
mov dword [0x162f2a4], 0
mov dword [0x162f2a8], 0
mov eax, dword [0x1653268]
test eax, eax
je 0x44c395
mov eax, dword [0x162f2a0]
call fcn.004772c0
mov dword [edi], eax
mov dword [0x162f2a0], 0
jmp 0x44c2c9
mov eax, ecx
mov ecx, 0x20
call fcn.00477340
nop
call fcn.00475ec0
jmp fcn.0044c220

Function at 0x44c510
Capabilities:
Get geographical location

Disassembly:
mov ecx, dword [0x1652dc4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x44c5bd
sub esp, 0x10
nop
nop
lea eax, [0x1654a80]
mov dword [esp], eax
call fcn.0040df30
movzx eax, byte [0x1654bd0]
test al, al
jne 0x44c568
lea eax, [0xd792dc]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.0043a630
jmp 0x44c568
lea eax, [0x1654aa4]
mov dword [esp], eax
call fcn.00406a70
mov eax, dword [0x1654bc4]
nop
cmp dword [0x1654bc8], eax
jbe 0x44c55a
lea ecx, [eax + 1]
mov dword [0x1654bc4], ecx
and eax, 0x1f
lea ecx, [0x1654aa4]
lea eax, [ecx + eax*8]
mov ecx, dword [eax]
mov dword [esp + 8], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0xc], eax
nop
nop
lea edx, [0x1654a80]
mov dword [esp], edx
call fcn.0040e150
mov eax, dword [esp + 8]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xc]
mov dword [esp + 0x18], eax
add esp, 0x10
ret
call fcn.00475ec0
jmp fcn.0044c510
Function at 0x44c5d0
Capabilities:
Get geographical location

Disassembly:
mov ecx, dword [0x1652dc4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x44c636
sub esp, 8
nop
nop
lea eax, [0x1654a80]
mov dword [esp], eax
call fcn.0040df30
movzx eax, byte [0x1654bd0]
test al, al
jne 0x44c614
lea eax, [0xd792dc]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.0043a630
lea eax, [0x1654aa4]
mov dword [esp], eax
call fcn.00406b60
nop
nop
lea eax, [0x1654a80]
mov dword [esp], eax
call fcn.0040e150
add esp, 8
ret
call fcn.00475ec0
jmp fcn.0044c5d0
Function at 0x4517b0
Capabilities:
Get geographical location

Disassembly:
mov ecx, dword [0x1652dc4]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x45191d
sub esp, 0x1c
movzx edx, byte [esp + 0x20]
movzx eax, dl
cmp eax, 3
jae 0x451912
shl eax, 6
lea ecx, [0x1653dc0]
mov ebx, dword [ecx + eax + 4]
lea eax, [ecx + eax + 4]
test ebx, ebx
jne 0x451843
mov dword [esp + 0x14], eax
lea eax, [0x163abc0]
mov dword [esp], eax
mov dword [esp + 4], 4
mov byte [esp + 8], 1
call fcn.0042a9b0
mov eax, dword [esp + 0xc]
test eax, eax
je 0x4518fc
movzx edx, word [eax + 0x3c]
test dx, dx
jne 0x4518e6
mov edx, dword [eax + 0x14]
test edx, edx
jne 0x4518d0
movzx ecx, byte [esp + 0x20]
mov edx, 0x1000
shl edx, cl
mov dword [eax + 0x44], edx
xor ecx, ecx
jmp 0x4518a7
mov ecx, dword [ebx + 0x14]
mov edx, ecx
test ecx, ecx
je 0x45187d
mov ecx, dword [ecx]
mov dword [ebx + 0x14], ecx
movzx ecx, word [ebx + 0x3c]
inc ecx
mov word [ebx + 0x3c], cx
mov ecx, dword [ebx + 0x14]
test ecx, ecx
jne 0x451875
mov dword [esp + 0x18], edx
mov dword [esp], eax
mov dword [esp + 4], ebx
call fcn.0042bfb0
mov edx, dword [esp + 0x18]
mov dword [esp + 0x24], edx
add esp, 0x1c
ret
lea eax, [0xd84267]
mov dword [esp], eax
mov dword [esp + 4], 0x17
call fcn.00470130
mov edx, dword [eax + 0x14]
mov ebx, dword [eax + 0xc]
add ebx, ecx
mov ebp, ebx
mov dword [ebx], edx
mov dword [eax + 0x14], ebp
mov edx, dword [eax + 0x44]
add ecx, edx
cmp ecx, 0x8000
jb 0x451893
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x14]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0042c110
mov eax, dword [esp + 0x14]
mov ebx, dword [esp + 0x10]
jmp 0x451843
lea eax, [0xd7cde9]
mov dword [esp], eax
mov dword [esp + 4], 0x12
call fcn.00470130
lea eax, [0xd77fdc]
mov dword [esp], eax
mov dword [esp + 4], 0xe
call fcn.00470130
lea eax, [0xd76b90]
mov dword [esp], eax
mov dword [esp + 4], 0xd
call fcn.00470130
mov ecx, 3
call fcn.00477340
nop
call fcn.00475ec0
jmp fcn.004517b0
Function at 0x456970
Capabilities:
Get geographical location

Disassembly:
sub esp, 0x18
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax + 0x58]
mov edx, dword [eax + 0xa8]
mov ebx, dword [esp + 0x20]
lea ebp, [ecx + ebx]
cmp edx, 1
jle 0x45699e
mov dword [esp + 0x14], ecx
mov dword [esp + 8], ebp
mov esi, dword [eax + 0xa4]
xor edi, edi
jmp 0x4569ba
mov dword [esp + 0x24], ebp
add esp, 0x18
ret
mov eax, dword [esp + 0x10]
lea esi, [eax + 0xc]
inc edi
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov ebp, dword [esp + 8]
cmp edi, edx
jge 0x4569ea
mov dword [esp + 0x10], esi
mov ecx, dword [esi]
mov ebp, dword [esi + 4]
cmp ebx, ecx
jb 0x4569cf
cmp ebx, ebp
jb 0x4569de
lea eax, [edx - 1]
cmp edi, eax
jne 0x4569a6
cmp ebx, ebp
jne 0x4569a6
mov eax, dword [esp + 0x1c]
mov edx, dword [esi + 8]
lea ebp, [edx + ebx]
sub ebp, ecx
mov ecx, dword [esp + 0x14]
mov eax, dword [eax + 0x5c]
cmp ebp, eax
jbe 0x45699e
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], eax
call fcn.0043c260
lea eax, [0xd7cdfb]
mov dword [esp], eax
mov dword [esp + 4], 0x12
call fcn.0043cac0
mov eax, dword [esp + 0xc]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0043c950
lea eax, [0xd78014]
mov dword [esp], eax
mov dword [esp + 4], 0xe
call fcn.0043cac0
mov eax, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0043c950
lea eax, [0xd6ecc0]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.0043cac0
mov eax, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0043c950
call fcn.0043c460
call fcn.0043c2c0
lea eax, [0xd95d49]
mov dword [esp], eax
mov dword [esp + 4], 0x21
call fcn.00470130
nop
int3