joyce8/EMBER2024-capa huggingface dataset:
Function at 0x401f10
Capabilities:
Get disk information
Inspect load icon resource
Read file on windows

Disassembly:
mov eax, dword [esp + 4]
sub esp, 0x148
push ebx
push esi
push edi
push 0x65
push eax
call dword [sym.imp.USER32.dll_LoadIconA]
lea ecx, [esp + 0xc]
call fcn.00401000
lea ecx, [esp + 0x50]
push 0x104
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea edx, [esp + 0x50]
lea ecx, [esp + 0xc]
push edx
call fcn.004012b0
test eax, eax
je 0x402021
lea eax, [esp + 0x50]
push 0x404030
push eax
call dword [sym.imp.MSVCRT.dll_fopen]
mov esi, eax
add esp, 8
test esi, esi
je 0x402084
lea ecx, [esp + 0x50]
push ecx
lea ecx, [esp + 0x10]
call fcn.00401290
mov edi, dword [sym.imp.MSVCRT.dll_fseek]
sub eax, 8
push 0
push eax
push esi
call edi
mov ebx, dword [sym.imp.MSVCRT.dll_fread]
push esi
push 1
lea edx, [esp + 0x24]
push 8
push edx
call ebx
mov eax, dword [esp + 0x2c]
push 0
push eax
push esi
call edi
push esi
push 1
lea ecx, [esp + 0x48]
push 0x38
push ecx
call ebx
push esi
call dword [sym.imp.MSVCRT.dll_fclose]
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x50]
add esp, 0x3c
test eax, eax
mov eax, dword [esp + 0x10]
push edx
push eax
jne 0x401ffe
sub esp, 0x38
mov ecx, 0xe
lea esi, [esp + 0x58]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0x90]
push ecx
lea ecx, [esp + 0x50]
call fcn.00401800
jmp 0x402084
sub esp, 0x38
mov ecx, 0xe
lea esi, [esp + 0x58]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0x90]
push ecx
lea ecx, [esp + 0x50]
call fcn.00401a90
jmp 0x402084
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::CString_1
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov edi, eax
mov esi, 1
xor ebx, ebx
test edi, esi
je 0x40206a
mov dl, bl
lea ecx, [esp + 0x10]
add dl, 0x41
push edx
call sub.MFC42.DLL_CString::operator_1
push 0x40412c
lea ecx, [esp + 0x14]
call fcn.004020e2
lea ecx, [esp + 0xc]
mov eax, dword [esp + 0x10]
push eax
push 0
call fcn.00401cf0
add esi, esi
inc ebx
cmp ebx, 0x1a
jl 0x402039
lea ecx, [esp + 0xc]
call fcn.00401040
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xc]
call fcn.00401030
pop edi
pop esi
xor eax, eax
pop ebx
add esp, 0x148
ret 0x10

Function at 0x42e003
Capabilities:
Encode data using xor
Packed with generic packer

Disassembly:
pushal
nop
nop
mov eax, section..text
nop
mov ebx, 0x407ef8
nop
nop
mov ecx, 0x6fe56f83
nop
test eax, eax
nop
nop
nop
nop
nop
je 0x42e04e
nop
nop
nop
nop
nop
nop
xor dword [eax], ecx
nop
nop
nop
inc eax
nop
nop
inc eax
nop
nop
nop
nop
nop
nop
nop
inc eax
nop
nop
nop
nop
inc eax
nop
nop
nop
nop
nop
nop
nop
nop
cmp eax, ebx
jne 0x42e024
nop
nop
nop
nop
nop
mov eax, section..data
mov ebx, 0x42cd70
nop
mov ecx, 0x2c5d19ff
nop
nop
nop
test eax, eax
nop
nop
nop
nop
nop
nop
je 0x42e084
nop
nop
nop
nop
xor dword [eax], ecx
nop
add eax, 4
nop
nop
nop
cmp eax, ebx
nop
nop
nop
nop
nop
nop
nop
jne 0x42e06c
nop
popal
nop
nop
nop
nop
jmp 0x401219
Function at 0x4022d0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x467a17
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push esi
push edi
mov eax, dword [0x48c9dc]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov dword [esp + 0x1c], 0
mov esi, dword [esp + 0x38]
mov eax, dword [esi]
mov edx, dword [eax + 0x174]
mov ecx, esi
mov dword [esp + 0x2c], 0
call edx
lea ecx, [esp + 0x14]
mov edi, eax
call dword [sym.imp.MFC80.DLL_Ordinal_310]
lea ecx, [esp + 0x10]
mov dword [esp + 0x2c], 1
call dword [sym.imp.MFC80.DLL_Ordinal_310]
lea ecx, [esp + 0x20]
call dword [sym.imp.MFC80.DLL_Ordinal_310]
mov eax, dword [esi]
mov eax, dword [eax + 0x50]
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x1c]
push edx
mov ecx, esi
mov byte [esp + 0x34], 3
call eax
mov esi, dword [sym.imp.orDb_Dll.dll_public:_void___thiscall_DboState::destructor_void_]
lea ecx, [esp + 0x18]
call esi
mov edx, dword [edi]
mov edx, dword [edx + 0x50]
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x1c]
push ecx
mov ecx, edi
call edx
lea ecx, [esp + 0x18]
call esi
lea ecx, [esp + 0xc]
call dword [sym.imp.MFC80.DLL_Ordinal_310]
lea ecx, [esp + 0x38]
call dword [sym.imp.MFC80.DLL_Ordinal_310]
push 0x100
lea ecx, [esp + 0x3c]
mov byte [esp + 0x30], 5
call dword [sym.imp.MFC80.DLL_Ordinal_2468]
push eax
push 0x100
lea ecx, [esp + 0x14]
call dword [sym.imp.MFC80.DLL_Ordinal_2468]
push eax
push 0
push 0
lea ecx, [esp + 0x20]
call dword [sym.imp.MFC80.DLL_Ordinal_876]
push eax
call dword [sym.imp.MSVCR80.dll__splitpath]
add esp, 0x14
push 0xffffffffffffffff
lea ecx, [esp + 0x10]
call dword [sym.imp.MFC80.DLL_Ordinal_5403]
push 0xffffffffffffffff
lea ecx, [esp + 0x3c]
call dword [sym.imp.MFC80.DLL_Ordinal_5403]
mov esi, dword [esp + 0x34]
mov ecx, esi
call dword [sym.imp.MFC80.DLL_Ordinal_310]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0xc]
push eax
push ecx
push edx
push str._s_s_:__s
mov dword [esp + 0x2c], 1
push esi
call dword [sym.imp.MFC80.DLL_Ordinal_2322]
add esp, 0x14
lea ecx, [esp + 0x38]
call dword [sym.imp.MFC80.DLL_Ordinal_578]
lea ecx, [esp + 0xc]
call dword [sym.imp.MFC80.DLL_Ordinal_578]
lea ecx, [esp + 0x20]
call dword [sym.imp.MFC80.DLL_Ordinal_578]
lea ecx, [esp + 0x10]
call dword [sym.imp.MFC80.DLL_Ordinal_578]
lea ecx, [esp + 0x14]
call dword [sym.imp.MFC80.DLL_Ordinal_578]
mov eax, esi
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x24
ret 8
Function at 0x419000
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x469c09
mov eax, dword fs:[0]
push eax
mov eax, dword [0x48c9dc]
xor eax, esp
push eax
lea eax, [esp + 4]
mov dword fs:[0], eax
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
mov eax, dword [eax + 0x30]
push edx
mov edx, dword [esp + 0x1c]
push edx
lea edx, [esp + 0x1c]
push edx
call eax
lea ecx, [esp + 0x14]
mov dword [esp + 0xc], 0
call dword [sym.imp.orDb_Dll.dll_public:_int___thiscall_DboState::Succeeded_void_const]
test eax, eax
mov dword [esp + 0xc], 0xffffffff
lea ecx, [esp + 0x14]
je 0x419077
call dword [sym.imp.orDb_Dll.dll_public:_void___thiscall_DboState::destructor_void_]
mov eax, 1
mov ecx, dword [esp + 4]
mov dword fs:[0], ecx
pop ecx
add esp, 0xc
ret
call dword [sym.imp.orDb_Dll.dll_public:_void___thiscall_DboState::destructor_void_]
xor eax, eax
mov ecx, dword [esp + 4]
mov dword fs:[0], ecx
pop ecx
add esp, 0xc
ret
Function at 0x42f9c0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x46bf53
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push esi
push edi
mov eax, dword [0x48c9dc]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
lea ecx, [esp + 0x24]
mov dword [esp + 0x30], 1
call dword [sym.imp.orDb_Dll.dll_public:_void___thiscall_DboState::constructor_void_]
lea ecx, [esp + 0xc]
call dword [sym.imp.MFC80.DLL_Ordinal_310]
lea ecx, [esp + 0x10]
call dword [sym.imp.MFC80.DLL_Ordinal_310]
push 0xa
push 0xa
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 4
call dword [sym.imp.MFC80.DLL_Ordinal_2468]
mov esi, dword [sym.imp.MSVCR80.dll__itoa]
push eax
mov eax, dword [esp + 0x40]
push eax
call esi
add esp, 0xc
push 0xffffffffffffffff
lea ecx, [esp + 0x10]
call dword [sym.imp.MFC80.DLL_Ordinal_5403]
lea ecx, [esp + 0x48]
call dword [sym.imp.MFC80.DLL_Ordinal_3934]
test al, al
jne 0x42fa9e
push 0x475f28
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x24]
push edx
call fcn.00402500
lea ecx, [esp + 0x54]
push ecx
push eax
lea edx, [esp + 0x2c]
push edx
mov byte [esp + 0x48], 5
call fcn.00402460
add esp, 0x18
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x34], 6
call dword [sym.imp.MFC80.DLL_Ordinal_781]
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80.DLL_Ordinal_578]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x30], 4
call dword [sym.imp.MFC80.DLL_Ordinal_578]
push 0xa
push 0xa
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80.DLL_Ordinal_2468]
push eax
mov eax, dword [esp + 0x44]
push eax
call esi
add esp, 0xc
push 0xffffffffffffffff
lea ecx, [esp + 0x14]
call dword [sym.imp.MFC80.DLL_Ordinal_5403]
push 0x4761c0
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x28]
push edx
call fcn.00402500
lea ecx, [esp + 0x1c]
push ecx
push eax
lea edx, [esp + 0x2c]
push edx
mov byte [esp + 0x48], 7
call fcn.00402460
push 0x4761c0
push eax
lea eax, [esp + 0x3c]
push eax
mov byte [esp + 0x54], 8
call fcn.00402500
lea ecx, [esp + 0x64]
push ecx
push eax
lea edx, [esp + 0x40]
push edx
mov byte [esp + 0x60], 9
call fcn.00402460
add esp, 0x30
lea ecx, [esp + 0x1c]
call dword [sym.imp.MFC80.DLL_Ordinal_578]
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC80.DLL_Ordinal_578]
lea ecx, [esp + 0x20]
mov byte [esp + 0x30], 0xd
call dword [sym.imp.MFC80.DLL_Ordinal_578]
mov esi, dword [esp + 0x44]
mov edi, dword [esi]
lea ecx, [esp + 0x14]
call dword [sym.imp.MFC80.DLL_Ordinal_876]
push eax
mov eax, dword [edi + 0x5c]
mov ecx, esi
call eax
lea ecx, [esp + 0x14]
call dword [sym.imp.MFC80.DLL_Ordinal_578]
lea ecx, [esp + 0x10]
call dword [sym.imp.MFC80.DLL_Ordinal_578]
lea ecx, [esp + 0xc]
call dword [sym.imp.MFC80.DLL_Ordinal_578]
lea ecx, [esp + 0x24]
mov byte [esp + 0x30], 1
call dword [sym.imp.orDb_Dll.dll_public:_void___thiscall_DboState::destructor_void_]
lea ecx, [esp + 0x40]
call dword [sym.imp.MFC80.DLL_Ordinal_578]
lea ecx, [esp + 0x48]
call dword [sym.imp.MFC80.DLL_Ordinal_578]
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x28
ret
Function at 0x43f646
Capabilities:
Terminate process

Disassembly:
cmp ecx, dword [0x48c9dc]
jne 0x43f650
repz ret
jmp fcn.0043fe1c

Function at 0x440360
Capabilities:
Query environment variable

Disassembly:
push str.ORCAD_LOG_SMI_MESSAGES
call dword [sym.imp.MSVCR80.dll_getenv]
add esp, 4
test eax, eax
je 0x4403aa
push esi
push 0x4776bc
push eax
call dword [sym.imp.MSVCR80.dll_fopen]
mov esi, eax
add esp, 8
test esi, esi
je 0x4403a9
mov ecx, dword [esp + 8]
call dword [sym.imp.SBaseMD_sh.dll_public:_char____thiscall_SBString::getChar_void_const]
push eax
push 0x475f04
push esi
call dword [sym.imp.MSVCR80.dll_fprintf]
push esi
call dword [sym.imp.MSVCR80.dll_fclose]
add esp, 0x10
pop esi
ret

Function at 0x440750
Capabilities:
Query environment variable

Disassembly:
push 0xffffffffffffffff
push 0x46db09
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push ebp
push esi
push edi
mov eax, dword [0x48c9dc]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov ebx, dword [esp + 0x2c]
mov eax, dword [ebx]
mov edx, dword [eax + 0x30]
push 0
mov ecx, ebx
call edx
mov eax, dword [ebx]
mov edx, dword [eax + 0x18]
push 0
mov ecx, ebx
call edx
mov esi, eax
test esi, esi
je 0x440886
lea ecx, [esp + 0x14]
call dword [sym.imp.SBaseMD_sh.dll_public:_void___thiscall_SBString::constructor_void_]
push 1
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov dword [esp + 0x2c], 0
call dword [sym.imp.SMIMD_sh.dll_public:_void___thiscall_SBMessage::getSubstitutedDesc_class_SBString___bool_const]
mov ebp, dword [esp + 0x30]
test ebp, ebp
jne 0x440802
mov edi, dword [sym.imp.SMIMD_sh.dll_public:_enum_smi_msg_type___thiscall_SBMessage::getType_void_]
mov ecx, esi
call edi
cmp eax, 1
jne 0x4407d8
mov ebp, 0x10
mov ecx, esi
call edi
cmp eax, 4
jne 0x4407e6
mov ebp, 0x30
mov ecx, esi
call edi
cmp eax, 5
jne 0x4407f4
mov ebp, 0x40
mov ecx, esi
call edi
cmp eax, 7
jne 0x440802
mov ebp, 0x20
push 1
mov ecx, ebx
call dword [sym.imp.SMIMD_sh.dll_public:_void___thiscall_SBStatus::flushMessages_bool_]
push str.ORCAD_DUMP_MSGBOX_MESSAGES_IN_SESSION_LOG
call dword [sym.imp.MSVCR80.dll_getenv]
mov esi, dword [sym.imp.SBaseMD_sh.dll_public:_char____thiscall_SBString::getChar_void_const]
add esp, 4
test eax, eax
je 0x44083d
cmp dword [0x48d9ac], 0
je 0x44083d
lea ecx, [esp + 0x14]
call esi
push eax
call dword [0x48d9ac]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
call fcn.00440360
mov edx, dword [esp + 0x38]
add esp, 4
push edx
push ebp
lea ecx, [esp + 0x1c]
call esi
push eax
call sub.MFC80.DLL_Ordinal_1123
lea ecx, [esp + 0x14]
mov esi, eax
mov dword [esp + 0x24], 0xffffffff
call dword [sym.imp.SBaseMD_sh.dll_public_virtual:_void___thiscall_SBString::destructor_void_]
mov eax, esi
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x14
ret
or eax, 0xffffffff
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x14
ret
Function at 0x443350
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46e1e9
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
push edi
mov eax, dword [0x48c9dc]
xor eax, esp
push eax
lea eax, [esp + 0x14]
mov dword fs:[0], eax
mov esi, ecx
lea ecx, [esp + 0xc]
call dword [sym.imp.SMIMD_sh.dll_public:_void___thiscall_SBParamList::constructor_void_]
mov eax, dword [esp + 0x30]
mov edi, dword [sym.imp.SMIMD_sh.dll_public:_void___thiscall_SBParamList::addParameterToList_char_const__]
push eax
lea ecx, [esp + 0x10]
mov dword [esp + 0x20], 0
call edi
mov ecx, dword [esp + 0x34]
push ecx
lea ecx, [esp + 0x10]
call edi
lea ecx, [esp + 0xc]
call dword [sym.imp.SMIMD_sh.dll_public:_class_SBList_const____thiscall_SBParamList::getParameterList_void_const]
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
push eax
mov eax, dword [esp + 0x2c]
push edx
push eax
push ecx
mov ecx, esi
call dword [sym.imp.SMIMD_sh.dll_public:_enum_smi_error_code___thiscall_SBStatus::addMessage_char_const___unsigned_long_int__void___class_SBList_const__]
lea ecx, [esp + 0xc]
mov esi, eax
mov dword [esp + 0x1c], 0xffffffff
call dword [sym.imp.SMIMD_sh.dll_public_virtual:_void___thiscall_SBParamList::destructor_void_]
mov eax, esi
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x14
ret 0x14

Function at 0x443400
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x46e219
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
mov eax, dword [0x48c9dc]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
lea ecx, [esp + 8]
call dword [sym.imp.SMIMD_sh.dll_public:_void___thiscall_SBParamList::constructor_void_]
mov eax, dword [esp + 0x2c]
push eax
lea ecx, [esp + 0xc]
mov dword [esp + 0x1c], 0
call dword [sym.imp.SMIMD_sh.dll_public:_void___thiscall_SBParamList::addParameterToList_char_const__]
fld qword [esp + 0x30]
sub esp, 8
lea ecx, [esp + 0x10]
fstp qword [esp]
call dword [sym.imp.SMIMD_sh.dll_public:_void___thiscall_SBParamList::addParameterToList_double_]
lea ecx, [esp + 8]
call dword [sym.imp.SMIMD_sh.dll_public:_class_SBList_const____thiscall_SBParamList::getParameterList_void_const]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
push eax
mov eax, dword [esp + 0x24]
push ecx
push edx
push eax
mov ecx, esi
call dword [sym.imp.SMIMD_sh.dll_public:_enum_smi_error_code___thiscall_SBStatus::addMessage_char_const___unsigned_long_int__void___class_SBList_const__]
lea ecx, [esp + 8]
mov esi, eax
mov dword [esp + 0x18], 0xffffffff
call dword [sym.imp.SMIMD_sh.dll_public_virtual:_void___thiscall_SBParamList::destructor_void_]
mov eax, esi
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x14
ret 0x18
Function at 0x443560
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46e279
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
push edi
mov eax, dword [0x48c9dc]
xor eax, esp
push eax
lea eax, [esp + 0x14]
mov dword fs:[0], eax
mov esi, ecx
lea ecx, [esp + 0xc]
call dword [sym.imp.SMIMD_sh.dll_public:_void___thiscall_SBParamList::constructor_void_]
fld qword [esp + 0x30]
mov edi, dword [sym.imp.SMIMD_sh.dll_public:_void___thiscall_SBParamList::addParameterToList_double_]
sub esp, 8
lea ecx, [esp + 0x14]
fstp qword [esp]
mov dword [esp + 0x24], 0
call edi
fld qword [esp + 0x38]
sub esp, 8
lea ecx, [esp + 0x14]
fstp qword [esp]
call edi
lea ecx, [esp + 0xc]
call dword [sym.imp.SMIMD_sh.dll_public:_class_SBList_const____thiscall_SBParamList::getParameterList_void_const]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
push eax
mov eax, dword [esp + 0x30]
push eax
push ecx
push edx
mov ecx, esi
call dword [sym.imp.SMIMD_sh.dll_public:_enum_smi_error_code___thiscall_SBStatus::addMessage_char_const___unsigned_long_int__void___class_SBList_const__]
lea ecx, [esp + 0xc]
mov esi, eax
mov dword [esp + 0x1c], 0xffffffff
call dword [sym.imp.SMIMD_sh.dll_public_virtual:_void___thiscall_SBParamList::destructor_void_]
mov eax, esi
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x14
ret 0x1c

Function at 0x443610
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46e2a9
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
mov eax, dword [0x48c9dc]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
lea ecx, [esp + 8]
call dword [sym.imp.SMIMD_sh.dll_public:_void___thiscall_SBParamList::constructor_void_]
mov eax, dword [esp + 0x2c]
push eax
lea ecx, [esp + 0xc]
mov dword [esp + 0x1c], 0
call dword [sym.imp.SMIMD_sh.dll_public:_void___thiscall_SBParamList::addParameterToList_char_const__]
mov ecx, dword [esp + 0x30]
push ecx
lea ecx, [esp + 0xc]
call dword [sym.imp.SMIMD_sh.dll_public:_void___thiscall_SBParamList::addParameterToList_int_]
lea ecx, [esp + 8]
call dword [sym.imp.SMIMD_sh.dll_public:_class_SBList_const____thiscall_SBParamList::getParameterList_void_const]
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
push eax
mov eax, dword [esp + 0x28]
push edx
push eax
push ecx
mov ecx, esi
call dword [sym.imp.SMIMD_sh.dll_public:_enum_smi_error_code___thiscall_SBStatus::addMessage_char_const___unsigned_long_int__void___class_SBList_const__]
lea ecx, [esp + 8]
mov esi, eax
mov dword [esp + 0x18], 0xffffffff
call dword [sym.imp.SMIMD_sh.dll_public_virtual:_void___thiscall_SBParamList::destructor_void_]
mov eax, esi
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x14
ret 0x14
Function at 0x4436c0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46e2d9
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
push edi
mov eax, dword [0x48c9dc]
xor eax, esp
push eax
lea eax, [esp + 0x14]
mov dword fs:[0], eax
mov esi, ecx
lea ecx, [esp + 0xc]
call dword [sym.imp.SMIMD_sh.dll_public:_void___thiscall_SBParamList::constructor_void_]
mov eax, dword [esp + 0x30]
mov edi, dword [sym.imp.SMIMD_sh.dll_public:_void___thiscall_SBParamList::addParameterToList_long_int_]
push eax
lea ecx, [esp + 0x10]
mov dword [esp + 0x20], 0
call edi
mov ecx, dword [esp + 0x34]
push ecx
lea ecx, [esp + 0x10]
call edi
lea ecx, [esp + 0xc]
call dword [sym.imp.SMIMD_sh.dll_public:_class_SBList_const____thiscall_SBParamList::getParameterList_void_const]
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
push eax
mov eax, dword [esp + 0x2c]
push edx
push eax
push ecx
mov ecx, esi
call dword [sym.imp.SMIMD_sh.dll_public:_enum_smi_error_code___thiscall_SBStatus::addMessage_char_const___unsigned_long_int__void___class_SBList_const__]
lea ecx, [esp + 0xc]
mov esi, eax
mov dword [esp + 0x1c], 0xffffffff
call dword [sym.imp.SMIMD_sh.dll_public_virtual:_void___thiscall_SBParamList::destructor_void_]
mov eax, esi
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x14
ret 0x14

Function at 0x443770
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46e309
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
push edi
mov eax, dword [0x48c9dc]
xor eax, esp
push eax
lea eax, [esp + 0x14]
mov dword fs:[0], eax
mov esi, ecx
lea ecx, [esp + 0xc]
call dword [sym.imp.SMIMD_sh.dll_public:_void___thiscall_SBParamList::constructor_void_]
fld dword [esp + 0x30]
mov edi, dword [sym.imp.SMIMD_sh.dll_public:_void___thiscall_SBParamList::addParameterToList_double_]
sub esp, 8
lea ecx, [esp + 0x14]
fstp qword [esp]
mov dword [esp + 0x24], 0
call edi
fld dword [esp + 0x34]
sub esp, 8
lea ecx, [esp + 0x14]
fstp qword [esp]
call edi
lea ecx, [esp + 0xc]
call dword [sym.imp.SMIMD_sh.dll_public:_class_SBList_const____thiscall_SBParamList::getParameterList_void_const]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
push eax
mov eax, dword [esp + 0x30]
push eax
push ecx
push edx
mov ecx, esi
call dword [sym.imp.SMIMD_sh.dll_public:_enum_smi_error_code___thiscall_SBStatus::addMessage_char_const___unsigned_long_int__void___class_SBList_const__]
lea ecx, [esp + 0xc]
mov esi, eax
mov dword [esp + 0x1c], 0xffffffff
call dword [sym.imp.SMIMD_sh.dll_public_virtual:_void___thiscall_SBParamList::destructor_void_]
mov eax, esi
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x14
ret 0x14
Function at 0x443820
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46e339
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
push edi
mov eax, dword [0x48c9dc]
xor eax, esp
push eax
lea eax, [esp + 0x14]
mov dword fs:[0], eax
mov edi, ecx
lea ecx, [esp + 0xc]
call dword [sym.imp.SMIMD_sh.dll_public:_void___thiscall_SBParamList::constructor_void_]
mov eax, dword [esp + 0x30]
mov esi, dword [sym.imp.SMIMD_sh.dll_public:_void___thiscall_SBParamList::addParameterToList_char_const__]
push eax
lea ecx, [esp + 0x10]
mov dword [esp + 0x20], 0
call esi
mov ecx, dword [esp + 0x34]
push ecx
lea ecx, [esp + 0x10]
call esi
mov edx, dword [esp + 0x38]
push edx
lea ecx, [esp + 0x10]
call esi
lea ecx, [esp + 0xc]
call dword [sym.imp.SMIMD_sh.dll_public:_class_SBList_const____thiscall_SBParamList::getParameterList_void_const]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
push eax
mov eax, dword [esp + 0x30]
push eax
push ecx
push edx
mov ecx, edi
call dword [sym.imp.SMIMD_sh.dll_public:_enum_smi_error_code___thiscall_SBStatus::addMessage_char_const___unsigned_long_int__void___class_SBList_const__]
lea ecx, [esp + 0xc]
mov esi, eax
mov dword [esp + 0x1c], 0xffffffff
call dword [sym.imp.SMIMD_sh.dll_public_virtual:_void___thiscall_SBParamList::destructor_void_]
mov eax, esi
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x14
ret 0x18

Function at 0x4438d0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46e369
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
push edi
mov eax, dword [0x48c9dc]
xor eax, esp
push eax
lea eax, [esp + 0x14]
mov dword fs:[0], eax
mov esi, ecx
lea ecx, [esp + 0xc]
call dword [sym.imp.SMIMD_sh.dll_public:_void___thiscall_SBParamList::constructor_void_]
mov eax, dword [esp + 0x30]
mov edi, dword [sym.imp.SMIMD_sh.dll_public:_void___thiscall_SBParamList::addParameterToList_char_const__]
push eax
lea ecx, [esp + 0x10]
mov dword [esp + 0x20], 0
call edi
mov ecx, dword [esp + 0x34]
push ecx
lea ecx, [esp + 0x10]
call edi
fld qword [esp + 0x38]
sub esp, 8
lea ecx, [esp + 0x14]
fstp qword [esp]
call dword [sym.imp.SMIMD_sh.dll_public:_void___thiscall_SBParamList::addParameterToList_double_]
lea ecx, [esp + 0xc]
call dword [sym.imp.SMIMD_sh.dll_public:_class_SBList_const____thiscall_SBParamList::getParameterList_void_const]
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
push eax
mov eax, dword [esp + 0x2c]
push edx
push eax
push ecx
mov ecx, esi
call dword [sym.imp.SMIMD_sh.dll_public:_enum_smi_error_code___thiscall_SBStatus::addMessage_char_const___unsigned_long_int__void___class_SBList_const__]
lea ecx, [esp + 0xc]
mov esi, eax
mov dword [esp + 0x1c], 0xffffffff
call dword [sym.imp.SMIMD_sh.dll_public_virtual:_void___thiscall_SBParamList::destructor_void_]
mov eax, esi
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x14
ret 0x1c