joyce8/EMBER2024-capa huggingface dataset:
Function at 0x462560
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5973e8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x40
push ebx
push esi
mov esi, ecx
push edi
lea ecx, [esp + 0x1c]
call fcn.0041c480
mov eax, dword [esi + 0x2c]
add eax, 0x10
mov ecx, dword [eax]
mov dword [esp + 0x1c], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0x20], edx
mov ecx, dword [eax + 8]
mov dword [esp + 0x24], ecx
mov edx, dword [eax + 0xc]
mov ecx, esi
mov dword [esp + 0x28], edx
call fcn.00461090
test eax, eax
jne 0x4625ed
mov ecx, dword [esp + 0x1c]
mov eax, dword [ebp + 8]
mov edx, dword [esp + 0x20]
mov dword [eax], ecx
mov ecx, dword [esp + 0x24]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x28]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov eax, dword [esi + 0x30]
mov ecx, dword [esp + 0x4c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea ecx, [esp + 0x2c]
call fcn.00460910
lea eax, [esp + 0x2c]
xor edi, edi
push eax
mov ecx, esi
mov dword [esp + 0x58], edi
call fcn.00461250
mov eax, dword [esi + 0x14]
mov ecx, dword [esi + 0x2c]
push eax
push ecx
call fcn.00461eb0
mov edx, dword [ebp + 8]
mov ecx, dword [esp + 0x28]
mov ebx, eax
mov eax, dword [esp + 0x24]
mov dword [edx], eax
mov eax, dword [esp + 0x2c]
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x30]
mov dword [edx + 8], eax
mov eax, dword [esp + 0x40]
add esp, 8
cmp eax, edi
mov dword [esp + 0x10], edi
mov dword [edx + 0xc], ecx
je 0x4626d6
jmp 0x462650
lea ecx, [esp + 0x2c]
call fcn.0056fd90
lea ecx, [esp + 0x14]
mov edi, eax
call fcn.0041c440
movzx edx, word [edi]
push edx
lea eax, [esp + 0x18]
push eax
mov ecx, esi
call fcn.004620d0
push 0xf
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x24]
call fcn.0040efc0
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x10]
push eax
mov ecx, esi
mov dword [esp + 0x14], 0
call fcn.00462190
test eax, eax
jne 0x4626ce
sub ebx, 0xa
mov edx, dword [esp + 0x1c]
mov ecx, dword [ebp + 8]
mov eax, dword [esp + 0x20]
mov dword [ecx], edx
mov edx, dword [esp + 0x24]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x28]
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
js 0x4626d6
mov eax, dword [esp + 0x38]
test eax, eax
jne 0x462650
jmp 0x4626d6
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x10], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], 0xffffffff
call fcn.0056dc70
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0x10]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x467f40
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x597688
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push esi
push edi
lea ecx, [esp + 0xc]
call fcn.0056bc10
mov esi, dword [esp + 0x20]
mov eax, dword [esi]
mov ecx, esi
mov dword [esp + 0x18], 0
call dword [eax + 0x30]
mov edi, dword [esi + 0xf4]
push edi
mov ebx, eax
call fcn.00404810
add esp, 4
test eax, eax
je 0x467f98
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0xb8]
mov edi, eax
jmp 0x467f9a
xor edi, edi
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x40]
test eax, eax
je 0x467ff4
push ebp
mov ebp, dword [esp + 0x28]
push 0x1b
push 5
push ebp
push esi
push 2
push 0x1be2
call fcn.0053f010
add esp, 0x10
push eax
call fcn.00421f30
push ebp
push esi
push 2
push 0x25fe
call fcn.0053f010
add esp, 0x1c
push eax
lea ecx, [esp + 0x14]
call fcn.0056bec0
push ebx
push edi
lea ecx, [esp + 0x18]
push 1
push ecx
call fcn.00422780
add esp, 0x10
pop ebp
jmp 0x468024
mov edx, dword [esp + 0x24]
push edx
push esi
push 2
push 0x25ff
call fcn.0053f010
add esp, 0x10
push eax
lea ecx, [esp + 0x10]
call fcn.0056bec0
push ebx
push edi
lea eax, [esp + 0x14]
push 2
push eax
call fcn.00422780
add esp, 0x10
lea ecx, [esp + 0xc]
mov dword [esp + 0x18], 0xffffffff
call fcn.0056bd20
mov ecx, dword [esp + 0x10]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret

Function at 0x4687b0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5976e8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x20
push ebx
mov ebx, ecx
push esi
lea ecx, [esp + 8]
call fcn.00456ac0
lea ecx, [esp + 8]
mov dword [esp + 0x30], 0
call fcn.00458010
mov esi, dword [esp + 0xc]
test esi, esi
je 0x46882b
push ebp
mov ebp, dword [esp + 0x3c]
push edi
mov eax, esi
mov edi, dword [eax + 8]
test edi, edi
mov esi, dword [esi]
je 0x46881a
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x10]
test eax, eax
je 0x46881a
push 0x5b390c
mov ecx, edi
call fcn.00591e20
test eax, eax
jne 0x46881c
xor edi, edi
push edi
push ebp
mov ecx, ebx
call fcn.00468470
test esi, esi
jne 0x4687f4
pop edi
pop ebp
lea ecx, [esp + 8]
mov dword [esp + 0x30], 0xffffffff
call fcn.00456ae0
mov ecx, dword [esp + 0x28]
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x2c
ret 4
Function at 0x469f90
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x597810
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x40
push ebp
push esi
push edi
lea ecx, [esp + 0xc]
call fcn.00459e30
lea ecx, [esp + 0x2c]
mov dword [esp + 0x54], 0
call fcn.0045cd50
push 0
push 0x45cf40
lea ecx, [esp + 0x34]
mov byte [esp + 0x5c], 1
call fcn.004580e0
mov eax, dword [esp + 0x30]
test eax, eax
mov ebp, eax
je 0x46a088
mov eax, ebp
mov esi, dword [eax + 8]
test esi, esi
mov ebp, dword [ebp]
je 0x46a00f
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x10]
test eax, eax
je 0x46a00f
push 0x5b4074
mov ecx, esi
call fcn.00591e20
test eax, eax
jne 0x46a011
xor esi, esi
lea ecx, [esp + 0xc]
push ecx
mov ecx, esi
call fcn.0044a990
mov eax, dword [esp + 0x18]
test eax, eax
je 0x46a080
mov edx, dword [esp + 0x10]
mov edi, dword [edx + 8]
test edi, edi
je 0x46a04b
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x10]
test eax, eax
je 0x46a04b
push 0x5b3d3c
mov ecx, edi
call fcn.00591e20
test eax, eax
jne 0x46a04d
xor edi, edi
push edi
call fcn.00404810
add esp, 4
test eax, eax
je 0x46a080
mov eax, dword [edi + 0xe8]
test ah, ah
jns 0x46a080
mov ecx, esi
call fcn.004479c0
mov ecx, dword [esp + 0x5c]
cmp eax, ecx
jne 0x46a080
push ecx
call fcn.00404810
add esp, 4
test eax, eax
jne 0x46a0bb
test ebp, ebp
jne 0x469fe8
lea ecx, [esp + 0x2c]
mov byte [esp + 0x54], 0
call fcn.0045cd70
lea ecx, [esp + 0xc]
mov dword [esp + 0x54], 0xffffffff
call fcn.00459e50
pop edi
pop esi
xor eax, eax
pop ebp
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
add esp, 0x4c
ret
lea ecx, [esp + 0x2c]
mov byte [esp + 0x54], 0
call fcn.0045cd70
lea ecx, [esp + 0xc]
mov dword [esp + 0x54], 0xffffffff
call fcn.00459e50
mov ecx, dword [esp + 0x4c]
pop edi
pop esi
mov eax, 1
pop ebp
mov dword fs:[0], ecx
add esp, 0x4c
ret
Function at 0x46b170
Capabilities:
Access peb ldr_data
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x5978f8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x28
lea ecx, [esp + 8]
call fcn.0045cd50
lea ecx, [esp + 8]
mov dword [esp + 0x30], 0
call fcn.00458010
mov eax, dword [esp + 0xc]
test eax, eax
je 0x46b2ad
push ebx
push ebp
push esi
push edi
jmp 0x46b1b8
mov eax, dword [esp + 0x10]
mov ebx, dword [eax + 8]
test ebx, ebx
mov ecx, dword [eax]
mov dword [esp + 0x10], ecx
je 0x46b1e0
mov edx, dword [ebx]
mov ecx, ebx
call dword [edx + 0x10]
test eax, eax
je 0x46b1e0
push 0x5b4074
mov ecx, ebx
call fcn.00591e20
test eax, eax
jne 0x46b1e2
xor ebx, ebx
test byte [ebx + 0x20], 1
je 0x46b29d
mov eax, dword [ebx + 0x34]
test eax, eax
jle 0x46b29d
mov ecx, ebx
call fcn.004479b0
mov esi, dword [ebx + 0x34]
mov ebp, eax
mov ecx, ebp
mov dword [esp + 0x14], esi
call fcn.00424d20
mov edi, eax
mov eax, 0x66666667
imul esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
push edx
push 0x3e8
call dword [sym.imp.SanCalc.dll_int___cdecl_min_int__int_]
push 1
push 0xb
push 0x64
mov esi, eax
call dword [sym.imp.SanCalc.dll_int___cdecl_rnd_int__enum_RANDOM_KIND__int_]
imul edi, edi, 0x64
mov edx, dword [ebp]
add esi, eax
add esp, 0x14
mov ecx, ebp
add esi, edi
call dword [edx + 0x90]
test eax, eax
jne 0x46b256
add esi, esi
mov eax, dword [esp + 0x14]
push eax
push esi
call dword [sym.imp.SanCalc.dll_int___cdecl_min_int__int_]
mov edx, dword [ebx]
add esp, 8
mov ecx, ebx
mov edi, eax
call dword [edx + 0x30]
mov esi, eax
push esi
call fcn.00404810
add esp, 4
test eax, eax
je 0x46b28d
mov ecx, esi
call fcn.0042d620
push edi
push eax
mov ecx, ebx
call fcn.00447b10
push edi
mov ecx, ebp
call fcn.00423fa0
push edi
mov ecx, ebp
call fcn.00425d40
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x46b1b4
pop edi
pop esi
pop ebp
pop ebx
lea ecx, [esp + 8]
mov dword [esp + 0x30], 0xffffffff
call fcn.0045cd70
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
add esp, 0x34
ret
Function at 0x46da10
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x597be8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, dword [esp + 0x14]
push esi
push edi
mov esi, ecx
push eax
mov dword [esp + 0xc], esi
call fcn.004e6a40
mov ecx, 0x148af18
mov dword [esp + 0x14], 0
mov dword [esi], 0x5b51e0
call fcn.00424820
mov eax, dword [esp + 0x28]
cmp eax, 3
mov ecx, dword [esp + 0x20]
mov dword [esi + 0x30], 0x3e8
mov dword [esi + 0x34], ecx
mov dword [esi + 0x3c], eax
je 0x46da8a
mov edi, dword [esp + 0x24]
push edi
mov dword [esi + 0x38], edi
call fcn.00404810
add esp, 4
test eax, eax
je 0x46da8a
push 0x148af18
mov ecx, edi
call fcn.0044a990
mov ecx, dword [esp + 0xc]
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0x10
ret 0x10

Function at 0x47c270
Capabilities:
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x598818
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x20
lea ecx, [esp]
call fcn.00459e30
mov ecx, dword [esp + 0x34]
lea eax, [esp]
push eax
mov dword [esp + 0x2c], 0
call fcn.004246d0
test eax, eax
jg 0x47c2cd
lea ecx, [esp]
mov dword [esp + 0x28], 0xffffffff
call fcn.00459e50
xor eax, eax
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
add esp, 0x2c
ret
mov ecx, dword [esp + 0x30]
imul eax, eax, 0x64
push esi
push edi
mov edi, dword [ecx + 0x60]
push eax
call dword [sym.imp.SanCalc.dll_int___cdecl_sqr_int_]
push edi
mov esi, eax
call fcn.004109b0
imul esi, eax
shl esi, 1
mov eax, 0x88888889
imul esi
add edx, esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
add esp, 8
lea ecx, [esp + 8]
mov esi, edx
mov dword [esp + 0x30], 0xffffffff
call fcn.00459e50
mov ecx, dword [esp + 0x28]
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0x2c
ret

Function at 0x47c3e0
Capabilities:
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x598838
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x20
lea ecx, [esp]
call fcn.00458ba0
mov eax, dword [esp + 0x34]
push 0
push eax
lea ecx, [esp + 8]
push ecx
mov dword [esp + 0x34], 0
call fcn.0043ed60
add esp, 0xc
test eax, eax
jg 0x47c443
lea ecx, [esp]
mov dword [esp + 0x28], 0xffffffff
call fcn.00458bc0
xor eax, eax
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
add esp, 0x2c
ret
mov edx, dword [esp + 0x30]
imul eax, eax, 0x64
push esi
push edi
mov edi, dword [edx + 0x60]
push eax
call dword [sym.imp.SanCalc.dll_int___cdecl_sqr_int_]
push edi
mov esi, eax
call fcn.004109b0
imul esi, eax
mov eax, 0xb60b60b7
imul esi
add edx, esi
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
add esp, 8
lea ecx, [esp + 8]
mov esi, edx
mov dword [esp + 0x30], 0xffffffff
call fcn.00458bc0
mov ecx, dword [esp + 0x28]
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0x2c
ret
Function at 0x4875f0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x599268
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x20
push esi
mov esi, dword [esp + 0x34]
push edi
mov edi, ecx
mov ecx, esi
call fcn.00424820
lea ecx, [esp + 8]
call fcn.00459e30
mov eax, dword [esp + 0x3c]
push eax
lea ecx, [esp + 0xc]
push ecx
mov ecx, edi
mov dword [esp + 0x38], 0
call fcn.004934c0
mov eax, dword [esp + 0x14]
test eax, eax
je 0x48765b
push 0
push 0x459f30
lea edx, [esp + 0x10]
push edx
mov ecx, esi
call fcn.004581a0
mov eax, dword [esi + 0xc]
test eax, eax
jne 0x487681
lea ecx, [esp + 8]
mov dword [esp + 0x30], 0xffffffff
call fcn.00459e50
pop edi
xor eax, eax
pop esi
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
add esp, 0x2c
ret 8
push 0
push 0x4875c0
mov ecx, esi
call fcn.004583f0
mov esi, dword [esi + 0xc]
lea ecx, [esp + 8]
mov dword [esp + 0x30], 0xffffffff
call fcn.00459e50
mov ecx, dword [esp + 0x28]
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0x2c
ret 8

Function at 0x4876c0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x599268
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x20
push esi
push edi
mov edi, ecx
lea ecx, [esp + 8]
call fcn.00459e30
mov esi, dword [esp + 0x3c]
push esi
lea eax, [esp + 0xc]
push eax
mov ecx, edi
mov dword [esp + 0x38], 0
call fcn.004875f0
mov eax, dword [esp + 0x14]
test eax, eax
je 0x487737
mov edx, dword [esi]
push 0x2710
mov ecx, esi
call dword [edx + 0x80]
push eax
call dword [sym.imp.SanCalc.dll_int___cdecl_limsub_int__int_]
mov edi, dword [sym.imp.SanCalc.dll_int___cdecl_min_int__int_]
push 0x2710
push eax
call edi
mov esi, eax
add esp, 0x10
cmp esi, 0x2710
jge 0x48775d
lea ecx, [esp + 8]
mov dword [esp + 0x30], 0xffffffff
call fcn.00459e50
pop edi
xor eax, eax
pop esi
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
add esp, 0x2c
ret 8
mov eax, dword [esp + 0x14]
push 1
push 0xb
push eax
call dword [sym.imp.SanCalc.dll_int___cdecl_rnd_int__enum_RANDOM_KIND__int_]
inc eax
push 5
push eax
call edi
add esp, 0x14
push eax
lea ecx, [esp + 0xc]
call fcn.00457c60
mov edi, dword [esp + 0x38]
lea ecx, [esp + 8]
push ecx
lea ecx, [edi + 0x40]
call fcn.00457fe0
lea ecx, [esp + 8]
mov dword [edi + 0x38], esi
mov dword [esp + 0x30], 0xffffffff
call fcn.00459e50
mov ecx, dword [esp + 0x28]
pop edi
mov eax, 1
pop esi
mov dword fs:[0], ecx
add esp, 0x2c
ret 8

Function at 0x48b616
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x599778
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push esi
mov esi, ecx
push edi
mov dword [esp + 8], esi
xor edi, edi
lea ecx, [esi + 0xc]
mov dword [esp + 0x14], edi
mov dword [esi], 0x5b6dec
call fcn.004562c0
mov ecx, dword [esp + 0xc]
or eax, 0xffffffff
mov dword [esi + 4], edi
mov dword [esi + 8], edi
mov dword [esi + 0x2c], edi
mov dword [esi + 0x38], edi
mov dword [esi + 0x3c], edi
mov dword [esi + 0x30], eax
mov dword [esi + 0x34], eax
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0x10
ret
Function at 0x48ded6
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x599ab8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push esi
mov esi, ecx
push edi
mov dword [esp + 8], esi
xor edi, edi
lea ecx, [esi + 0x10]
mov dword [esp + 0x14], edi
mov dword [esi], 0x5b6eac
call fcn.004562c0
mov ecx, dword [esp + 0xc]
or eax, 0xffffffff
mov dword [esi + 4], edi
mov dword [esi + 8], edi
mov dword [esi + 0xc], edi
mov dword [esi + 0x30], edi
mov dword [esi + 0x3c], edi
mov dword [esi + 0x40], edi
mov dword [esi + 0x34], eax
mov dword [esi + 0x38], eax
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0x10
ret

Function at 0x48ed00
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x599be8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x20
push esi
mov esi, dword [esp + 0x34]
push edi
mov edi, ecx
mov ecx, esi
call fcn.00424820
lea ecx, [esp + 8]
call fcn.004562c0
push 0
lea eax, [esp + 0xc]
push eax
mov ecx, edi
mov dword [esp + 0x38], 0
call fcn.00494030
mov eax, dword [esp + 0x14]
test eax, eax
je 0x48ed68
push 0
push 0x48eba0
lea ecx, [esp + 0x10]
push ecx
mov ecx, esi
call fcn.004581a0
mov eax, dword [esi + 0xc]
test eax, eax
jne 0x48ed8e
lea ecx, [esp + 8]
mov dword [esp + 0x30], 0xffffffff
call fcn.004562e0
pop edi
xor eax, eax
pop esi
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
add esp, 0x2c
ret 4
push 0
push 0x48eb40
mov ecx, esi
call fcn.004583f0
mov esi, dword [esi + 0xc]
lea ecx, [esp + 8]
mov dword [esp + 0x30], 0xffffffff
call fcn.004562e0
mov ecx, dword [esp + 0x28]
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0x2c
ret 4

Function at 0x48f5c0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x599cd8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x20
push esi
mov esi, dword [esp + 0x34]
push edi
mov edi, ecx
mov ecx, esi
call fcn.00424820
lea ecx, [esp + 8]
call fcn.004562c0
push 0
lea eax, [esp + 0xc]
push eax
mov ecx, edi
mov dword [esp + 0x38], 0
call fcn.00494030
mov eax, dword [esp + 0x14]
test eax, eax
je 0x48f628
push 0
push 0x48f460
lea ecx, [esp + 0x10]
push ecx
mov ecx, esi
call fcn.004581a0
mov eax, dword [esi + 0xc]
test eax, eax
jne 0x48f64e
lea ecx, [esp + 8]
mov dword [esp + 0x30], 0xffffffff
call fcn.004562e0
pop edi
xor eax, eax
pop esi
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
add esp, 0x2c
ret 4
push 0
push 0x48f400
mov ecx, esi
call fcn.004583f0
mov esi, dword [esi + 0xc]
lea ecx, [esp + 8]
mov dword [esp + 0x30], 0xffffffff
call fcn.004562e0
mov ecx, dword [esp + 0x28]
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0x2c
ret 4
Function at 0x491360
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x599f28
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x4c
push esi
call fcn.00493260
mov esi, dword [esp + 0x64]
push eax
push 0
lea eax, [esp + 0xc]
push eax
mov ecx, esi
call fcn.004384f0
push eax
lea ecx, [esp + 0x28]
call fcn.00457610
lea ecx, [esp + 0x30]
call fcn.0045c540
mov edx, dword [esp + 0x68]
push 0
lea ecx, [esp + 0x20]
push ecx
push 0x45c6d0
push edx
lea ecx, [esp + 0x40]
mov dword [esp + 0x68], 0
call fcn.00458110
mov eax, dword [esp + 0x3c]
test eax, eax
jne 0x4913f3
lea ecx, [esp + 0x30]
mov dword [esp + 0x58], 0xffffffff
call fcn.0045c560
xor eax, eax
pop esi
mov ecx, dword [esp + 0x4c]
mov dword fs:[0], ecx
add esp, 0x58
ret 0xc
push esi
lea ecx, [esp + 0x10]
call fcn.0045c140
push 0
lea eax, [esp + 0x10]
push eax
push 0x4910b0
lea ecx, [esp + 0x3c]
call fcn.00458210
mov ecx, dword [esp + 0x34]
mov esi, dword [ecx + 8]
test esi, esi
je 0x491438
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x10]
test eax, eax
je 0x491438
push 0x5b3f54
mov ecx, esi
call fcn.00591e20
test eax, eax
jne 0x49143a
xor esi, esi
mov ecx, dword [esp + 0x60]
mov eax, dword [ecx]
push esi
call dword [eax + 8]
lea ecx, [esp + 0x30]
mov dword [esp + 0x58], 0xffffffff
call fcn.0045c560
mov ecx, dword [esp + 0x50]
mov eax, 1
pop esi
mov dword fs:[0], ecx
add esp, 0x58
ret 0xc

Function at 0x497210
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x59a6d8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x20
push esi
mov esi, dword [esp + 0x34]
push edi
mov edi, ecx
mov ecx, esi
call fcn.00424820
lea ecx, [esp + 8]
call fcn.004562c0
push 0
lea eax, [esp + 0xc]
push eax
mov ecx, edi
mov dword [esp + 0x38], 0
call fcn.00494030
mov eax, dword [esp + 0x14]
test eax, eax
je 0x497278
push 0
push 0x4970b0
lea ecx, [esp + 0x10]
push ecx
mov ecx, esi
call fcn.004581a0
mov eax, dword [esi + 0xc]
test eax, eax
jne 0x49729e
lea ecx, [esp + 8]
mov dword [esp + 0x30], 0xffffffff
call fcn.004562e0
pop edi
xor eax, eax
pop esi
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
add esp, 0x2c
ret 4
push 0
push 0x497050
mov ecx, esi
call fcn.004583f0
mov esi, dword [esi + 0xc]
lea ecx, [esp + 8]
mov dword [esp + 0x30], 0xffffffff
call fcn.004562e0
mov ecx, dword [esp + 0x28]
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0x2c
ret 4
Function at 0x499e00
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x59aa68
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x3c
push esi
mov esi, dword [esp + 0x50]
push edi
mov edi, ecx
mov ecx, esi
call fcn.00424820
push 1
push 0x30
lea ecx, [esp + 0x10]
call fcn.00456a00
lea ecx, [esp + 0x24]
call fcn.00459e30
push 0
lea eax, [esp + 0xc]
push eax
push 0x459ea0
lea ecx, [esp + 0x30]
mov dword [esp + 0x58], 0
call fcn.00458060
mov eax, dword [esp + 0x30]
test eax, eax
je 0x499e8e
mov eax, dword [edi + 0x38]
push eax
lea ecx, [esp + 0x18]
call fcn.0045c140
push 0
lea ecx, [esp + 0x18]
push ecx
push 0x45bec0
lea edx, [esp + 0x30]
push edx
mov ecx, esi
call fcn.00458110
mov eax, dword [esi + 0xc]
test eax, eax
jne 0x499eb4
lea ecx, [esp + 0x24]
mov dword [esp + 0x4c], 0xffffffff
call fcn.00459e50
pop edi
xor eax, eax
pop esi
mov ecx, dword [esp + 0x3c]
mov dword fs:[0], ecx
add esp, 0x48
ret 4
push 0
push 0x493840
mov ecx, esi
call fcn.004583f0
mov esi, dword [esi + 0xc]
lea ecx, [esp + 0x24]
mov dword [esp + 0x4c], 0xffffffff
call fcn.00459e50
mov ecx, dword [esp + 0x44]
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0x48
ret 4
Function at 0x49c630
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x59ada8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x20
push esi
push edi
mov edi, ecx
lea ecx, [esp + 8]
call fcn.00459e30
mov esi, dword [esp + 0x3c]
push esi
lea eax, [esp + 0xc]
push eax
mov ecx, edi
mov dword [esp + 0x38], 0
call fcn.0049c5f0
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x49c69c
lea ecx, [esp + 8]
mov dword [esp + 0x30], 0xffffffff
call fcn.00459e50
pop edi
xor eax, eax
pop esi
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
add esp, 0x2c
ret 8
mov edx, dword [esi]
push 0xbb8
mov ecx, esi
call dword [edx + 0x80]
push eax
call dword [sym.imp.SanCalc.dll_int___cdecl_limsub_int__int_]
push 0x2710
push eax
call dword [sym.imp.SanCalc.dll_int___cdecl_min_int__int_]
mov esi, eax
add esp, 0x10
cmp esi, 0xbb8
lea ecx, [esp + 8]
jge 0x49c6f1
mov dword [esp + 0x30], 0xffffffff
call fcn.00459e50
pop edi
xor eax, eax
pop esi
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
add esp, 0x2c
ret 8
push 1
call fcn.00457c60
mov edi, dword [esp + 0x38]
lea eax, [esp + 8]
push eax
lea ecx, [edi + 0x20]
call fcn.00457fe0
mov ecx, dword [esp + 0xc]
mov dword [edi + 0x18], esi
mov esi, dword [ecx + 8]
test esi, esi
je 0x49c732
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x10]
test eax, eax
je 0x49c732
push 0x5b3d3c
mov ecx, esi
call fcn.00591e20
test eax, eax
jne 0x49c734
xor esi, esi
push 4
push esi
lea ecx, [edi + 0xc]
call fcn.004736e0
lea ecx, [esp + 8]
mov dword [esp + 0x30], 0xffffffff
call fcn.00459e50
mov ecx, dword [esp + 0x28]
pop edi
mov eax, 1
pop esi
mov dword fs:[0], ecx
add esp, 0x2c
ret 8

Function at 0x49e350
Capabilities:
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x59b128
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x64
mov ecx, dword [ecx + 0x30]
push ecx
push 0
lea ecx, [esp + 8]
call fcn.0048b020
lea ecx, [esp]
mov dword [esp + 0x6c], 0
call fcn.004678a0
lea ecx, [esp]
mov dword [esp + 0x6c], 0xffffffff
call fcn.0048b080
mov ecx, dword [esp + 0x64]
mov dword fs:[0], ecx
add esp, 0x70
ret
Function at 0x4ab980
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x59c57b
push eax
mov eax, 0x14d0
mov dword fs:[0], esp
call fcn.00587e30
push ebx
push esi
mov esi, dword [esp + 0x14e8]
push edi
sub esp, 0x24
mov edi, esp
mov ecx, 9
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0x30]
xor ebx, ebx
call fcn.00403480
lea ecx, [esp + 0xc]
mov dword [esp + 0x14e4], ebx
call fcn.00413210
cmp eax, 1
jne 0x4ab9ea
mov eax, dword [esp + 0x14f0]
mov ecx, dword [esp + 0x146c]
mov dword [eax], ecx
mov ebx, 1
lea ecx, [esp + 0xc]
mov dword [esp + 0x14e4], 0xffffffff
call fcn.00403120
mov ecx, dword [esp + 0x14dc]
pop edi
pop esi
mov eax, ebx
mov dword fs:[0], ecx
pop ebx
add esp, 0x14dc
ret 8