joyce8/EMBER2024-capa huggingface dataset:
Function at 0x472576
Capabilities:
Get geographical location
Print debug messages

Disassembly:
mov ecx, 0x505ca8
jmp 0x472570
mov eax, dword fs:[0]
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4726ee
push eax
mov dword fs:[0], esp
sub esp, 4
push ebx
push esi
mov dword [ebp - 0x10], ecx
push edi
mov ebx, ecx
xor esi, esi
call fcn.00464c00
lea ecx, [ebx + 0x624]
mov dword [ebp - 4], esi
call fcn.00427ef0
mov byte [ebp - 4], 1
lea ecx, [ebx + 0x12d4]
call fcn.00450ba0
lea ecx, [ebx + 0x12e8]
call fcn.00450ba0
lea ecx, [ebx + 0x12fc]
call fcn.00450ba0
mov dword [ebx], vtable.TrackGame.0
mov dword [ebx + 0x5f8], esi
mov dword [ebx + 0x5fc], esi
mov dword [ebx + 0x600], esi
mov dword [ebx + 0x604], esi
mov dword [ebx + 0x608], esi
mov dword [ebx + 0x60c], esi
mov dword [ebx + 0x610], esi
mov dword [ebx + 0x614], esi
mov dword [ebx + 0x618], esi
mov dword [ebx + 0x61c], esi
mov dword [ebx + 0x620], esi
mov dword [ebx + 0x12c8], esi
mov dword [ebx + 0x12cc], esi
mov dword [ebx + 0x12d0], esi
mov dword [ebx + 0x1310], esi
mov dword [ebx + 0x1314], esi
mov dword [ebx + 0x1318], esi
push str.lang.dll
mov dword [ebx + 0x131c], esi
mov dword [ebx + 0x132c], esi
mov dword [ebx + 0x1330], esi
mov dword [ebx + 0x14], esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebx + 0x1334], eax
test eax, eax
je 0x47266b
mov dword [ebx + 0x46c], eax
jmp 0x472676
push str.RESOURCE_LIBRARY_not_loaded_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 8
lea eax, [ebx + 0x1320]
push eax
push 0xe
push 0x400
mov edi, str.SOFTWAREMicrosoftMicrosoft_GamesMotocross_Madness_Trial1.0
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
push 0x4e2ee0
push 0xe
push 0x400
call dword [sym.imp.KERNEL32.dll_SetLocaleInfoA]
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
shr ecx, 2
mov esi, edi
lea edi, [ebx + 0x574]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, ebx
pop edi
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x4733a0
Capabilities:
Print debug messages

Disassembly:
sub esp, 0x80
mov eax, dword [ecx + 0x46c]
test eax, eax
nop
push ebx
push esi
push edi
push ebp
jne 0x4733db
mov edi, str.Resource_String_Unavailable
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
shr ecx, 2
mov esi, edi
mov edi, dword [esp + 0x98]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
jmp 0x473440
mov ebx, dword [esp + 0x98]
push pe_nt_image_headers32
mov esi, dword [esp + 0x98]
push ebx
push esi
push eax
call dword [sym.imp.USER32.dll_LoadStringA]
test eax, eax
mov eax, 1
jne 0x473447
lea eax, [esp + 0x10]
push esi
push str.Resource_string__d_load_fail_n
push eax
mov edi, str.Resource_String_Unavailable
call fcn.004bd200
lea eax, [esp + 0x1c]
add esp, 0xc
mov ebp, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
nop
push eax
call ebp
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
shr ecx, 2
mov esi, edi
mov edi, ebx
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
xor eax, eax
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x80
ret 8
Function at 0x476426
Capabilities:
Print debug messages

Disassembly:
mov eax, dword fs:[0]
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x476605
push eax
mov dword fs:[0], esp
sub esp, 0x298
push ebx
push esi
push edi
mov esi, ecx
push 0x50
call fcn.0045b6b0
mov dword [ebp - 0x10], eax
add esp, 4
mov dword [ebp - 4], 0
mov edi, eax
mov eax, 0
test edi, edi
je 0x476475
mov eax, dword [0x4e2fdc]
mov ecx, dword [eax + 0x6d4]
push ecx
mov ecx, edi
call fcn.0043b3b0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [esi + 0x48]
mov edx, dword [esi + 0x34]
push ecx
mov ebx, dword [esi + 0x74]
push edx
mov ecx, dword [esi + 0x1c]
push ebx
push ecx
mov ecx, eax
call fcn.0043b4a0
push eax
mov ecx, esi
mov dword [esi + 0x7c], eax
call fcn.004203b0
cmp eax, 1
sbb eax, eax
neg eax
test eax, eax
je 0x4764dd
push str.Runway_Lights_not_loaded._n
lea eax, [ebp - 0x9c]
push eax
call fcn.004bd200
add esp, 8
lea eax, [ebp - 0x9c]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.viscue.slt
lea eax, [ebp - 0x2a4]
push str.geometry
push 0x4df954
push eax
call fcn.004bd200
add esp, 0x10
lea eax, [ebp - 0x1a0]
lea ecx, [ebp - 0x2a4]
nop
push eax
push ecx
mov ecx, dword [0x4e2fdc]
add ecx, 0x624
call fcn.00429340
push 0xb4
call fcn.0045b6b0
mov dword [ebp - 0x10], eax
add esp, 4
mov edi, eax
mov ecx, 0
mov dword [ebp - 4], 1
test edi, edi
je 0x476552
mov eax, dword [0x4e2fdc]
mov ecx, dword [eax + 0x6d4]
push ecx
mov ecx, edi
call fcn.0043ba10
mov ecx, eax
xor eax, eax
push 0x3f59999a
push 0x3dcccccd
mov dword [ebp - 0x1c], eax
push 0x40400000
mov dword [ebp - 0x18], eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [esi + 0x3c]
mov dword [ebp - 0x14], eax
mov eax, dword [esi + 0x44]
mov ebx, dword [ebp - 0x14]
push eax
push 0x2d
push edx
mov eax, dword [ebp - 0x18]
push ebx
mov edx, dword [ebp - 0x1c]
push eax
mov ebx, dword [0x4e2fdc]
push edx
lea edx, [ebp - 0x1a0]
mov eax, dword [ebx + 0x2e0]
mov ebx, dword [esi + 0x48]
push eax
push edx
mov eax, dword [ebx + 0x38]
mov edx, dword [esi + 0x74]
push eax
mov ebx, dword [esi + 0x1c]
push edx
push ebx
call fcn.0043baf0
push eax
mov ecx, esi
mov dword [esi + 0x78], eax
call fcn.004203b0
cmp eax, 1
sbb eax, eax
neg eax
test eax, eax
je 0x4765ee
lea eax, [ebp - 0x1a0]
lea ecx, [ebp - 0x9c]
push eax
push str.Visual_Cue___s__not_loaded._n
push ecx
call fcn.004bd200
add esp, 0xc
lea ecx, [ebp - 0x9c]
push ecx
jmp 0x4764c4
mov eax, 1
jmp 0x4764cc
Function at 0x479520
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xec
mov eax, dword [0x4e5a28]
push ebx
push esi
push edi
mov esi, ecx
lea ecx, [esp + 0x78]
push eax
push str.C:TEMPDMP_05d.TGA
push ecx
call fcn.004bd200
lea eax, [esp + 0x84]
add esp, 0xc
push 0x4df950
push eax
call fcn.004bd1c0
add esp, 8
test eax, eax
je 0x479572
push eax
call fcn.004bd0c0
add esp, 4
mov eax, dword [0x4e5a28]
inc eax
mov dword [0x4e5a28], eax
jmp 0x479530
lea edi, [esp + 0xc]
xor eax, eax
mov ecx, 0x1b
push 0
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x10]
push 0x11
mov eax, dword [esi + 0x1c]
push ecx
mov dword [esp + 0x18], 0x6c
mov eax, dword [eax + 8]
push 0
push eax
mov ebx, dword [eax]
call dword [ebx + 0x64]
test eax, eax
je 0x4795bf
push 0x2b5
push str.C:_aardvark_vc_trkviewCamera.cpp
push eax
call fcn.0048f750
add esp, 0xc
pop edi
pop esi
pop ebx
add esp, 0xec
ret
mov eax, dword [esp + 0x60]
cmp eax, 0x10
jne 0x4795f0
lea eax, [esp + 0x78]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x1c]
push eax
mov eax, dword [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x20]
push edx
mov edx, dword [esp + 0x3c]
push eax
push ecx
push edx
call fcn.00477ce0
add esp, 0x18
jmp 0x47961a
mov eax, dword [esp + 0x60]
cmp eax, 0x18
jne 0x47961a
lea eax, [esp + 0x78]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
push eax
mov eax, dword [esp + 0x1c]
push ecx
mov ecx, dword [esp + 0x38]
push edx
push eax
push ecx
call fcn.00477c20
add esp, 0x14
mov eax, dword [esi + 0x1c]
push 0
mov eax, dword [eax + 8]
push eax
mov ebx, dword [eax]
call dword [ebx + pe_nt_image_headers32]
test eax, eax
je 0x479642
push 0x2c0
push str.C:_aardvark_vc_trkviewCamera.cpp
push eax
call fcn.0048f750
add esp, 0xc
pop edi
pop esi
pop ebx
add esp, 0xec
ret
Function at 0x480b90
Capabilities:
Print debug messages

Disassembly:
mov eax, dword fs:[0]
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x480dca
push eax
mov dword fs:[0], esp
sub esp, 0x134
push ebx
push esi
push edi
mov esi, ecx
push 0x158
call fcn.0045b6b0
mov dword [ebp - 0x10], eax
add esp, 4
mov dword [ebp - 4], 0
mov edi, eax
mov eax, 0
test edi, edi
je 0x480be8
mov eax, dword [0x4e2fdc]
mov ecx, dword [eax + 0x6f0]
push ecx
mov ecx, edi
call fcn.00422300
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [esi + 0x44]
mov edx, dword [esi + 0x34]
push ecx
mov ebx, dword [esi + 0x1c]
push edx
mov ecx, eax
push ebx
call fcn.004223b0
push eax
mov ecx, esi
mov dword [esi + 0x60], eax
call fcn.004203b0
cmp eax, 1
sbb eax, eax
neg eax
test eax, eax
je 0x480c3e
push str.Instrument_Overlay_not_created._n
lea eax, [ebp - 0x140]
push eax
call fcn.004bd200
add esp, 8
lea eax, [ebp - 0x140]
mov ebx, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
nop
push eax
call ebx
jmp 0x480c44
mov ebx, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x290
call fcn.0045b6b0
mov dword [ebp - 0x10], eax
add esp, 4
mov dword [ebp - 4], 1
mov edi, eax
mov eax, 0
test edi, edi
je 0x480c6f
push 1
mov ecx, edi
call fcn.00422f10
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [esi + 0x44]
mov edx, dword [esi + 0x34]
push ecx
push edx
mov ecx, dword [esi + 0x1c]
push ecx
mov ecx, eax
call fcn.004230b0
push eax
mov ecx, esi
mov dword [esi + 0x5c], eax
call fcn.004203b0
cmp eax, 1
sbb eax, eax
neg eax
test eax, eax
je 0x480cbc
push str.Stats_Overlay_not_created._n
lea eax, [ebp - 0x140]
push eax
call fcn.004bd200
add esp, 8
lea eax, [ebp - 0x140]
push eax
call ebx
mov dword [ebp - 0x44], 0xa
mov eax, dword [0x4e2fdc]
push 0x5c
mov dword [ebp - 0x3c], 0x100
mov eax, dword [eax + 0x2fc]
lea ecx, [eax - 0x14]
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x38], eax
call fcn.0045b6b0
mov dword [ebp - 0x10], eax
add esp, 4
mov edi, eax
mov ecx, 0
mov dword [ebp - 4], 2
test edi, edi
je 0x480d08
push 0
mov ecx, edi
call fcn.00425070
mov ecx, eax
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x3c]
push eax
push edx
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x44]
push eax
push edx
mov eax, dword [esi + 0x1c]
push eax
call fcn.00425180
push eax
mov ecx, esi
mov dword [esi + 0x64], eax
call fcn.004203b0
cmp eax, 1
sbb eax, eax
neg eax
test eax, eax
je 0x480d5b
push str.TextQueueOverlay_not_created._n
lea eax, [ebp - 0x140]
push eax
call fcn.004bd200
add esp, 8
lea eax, [ebp - 0x140]
push eax
call ebx
mov eax, dword [esi + 0x64]
test eax, eax
je 0x480da0
mov eax, dword [0x4e2fdc]
mov ecx, dword [eax + 0x620]
lea eax, [ebp - 0x34]
lea edx, [ecx + 0x104]
push edx
push eax
call fcn.00407dd0
push 0x40500000
lea ecx, [ebp - 0x34]
push ecx
lea ecx, [ebp - 0xc0]
call fcn.00424fd0
lea ecx, [ebp - 0xc0]
push ecx
mov ecx, dword [esi + 0x64]
call fcn.00425380
mov eax, dword [ebp - 0xc]
pop edi
mov dword fs:[0], eax
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x48e420
Capabilities:
Print debug messages

Disassembly:
mov eax, dword fs:[0]
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x48e600
push eax
mov dword fs:[0], esp
mov eax, dword [ebp + 8]
sub esp, 4
push ebx
push esi
push edi
mov ebx, ecx
push eax
call fcn.00420480
mov esi, dword [ebp + 0x1c]
mov eax, dword [ebp + 0x18]
mov dword [ebx + 0x4c], esi
test eax, eax
je 0x48e4a0
push 0x10
mov eax, dword [0x4e2fdc]
mov ecx, dword [eax + 4]
push 1
push 0x5622
mov edx, dword [ecx + 0x14]
mov ecx, dword [eax + 0x30c]
push edx
call fcn.00403690
test eax, eax
jne 0x48e495
push 0x10
mov eax, dword [0x4e2fdc]
push 1
push 0x5622
mov ecx, dword [eax + 0x30c]
call fcn.004037e0
jmp 0x48e4a0
push str.GUIObject.CPP_:_Error_initializing_sound_interface._n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
test esi, esi
jne 0x48e4db
push 0x1c
call fcn.0045b6b0
mov dword [ebp - 0x10], eax
add esp, 4
mov dword [ebp - 4], 0
mov esi, eax
mov eax, 0
test esi, esi
je 0x48e4ca
mov ecx, esi
call fcn.00401b30
mov dword [ebp - 4], 0xffffffff
mov dword [ebx + 0x50], 1
mov dword [ebx + 0x4c], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
push 0x18
mov dword [ebx + 0x38], eax
mov dword [ebx + 0x3c], ecx
call fcn.004bd170
add esp, 4
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], 1
test eax, eax
je 0x48e515
mov ecx, eax
call fcn.0045b860
jmp 0x48e517
xor eax, eax
mov edi, dword [ebp + 0x20]
mov ecx, 0xffffffff
mov dword [ebp - 4], 0xffffffff
mov dword [ebx + 0x40], eax
mov eax, dword [ebp + 0x14]
mov dword [ebx + 0x44], eax
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
shr ecx, 2
mov esi, edi
lea edi, [ebx + 0x54]
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ax, word [ebp + 0x24]
mov edi, dword [ebp + 0x28]
mov word [ebx + 0xd4], ax
test edi, edi
je 0x48e57f
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
shr ecx, 2
mov esi, edi
lea edi, [ebx + 0xe4]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebx + 0xe0]
test eax, eax
jne 0x48e5bc
push 0x28
call fcn.0045b6b0
mov dword [ebp - 0x10], eax
add esp, 4
mov dword [ebp - 4], 2
mov esi, eax
mov eax, 0
test esi, esi
je 0x48e5af
mov ecx, esi
call fcn.004405b0
mov dword [ebp - 4], 0xffffffff
mov dword [ebx + 0xe0], eax
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x38]
mov ecx, ebx
call fcn.0048ebd0
push 1
mov ecx, ebx
push 0
call fcn.0048eca0
mov eax, dword [ebp + 0x2c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov dword [ebx + 0xd8], eax
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret 0x28
Function at 0x4908c0
Capabilities:
Hide graphical window

Disassembly:
sub esp, 0x20
push ebx
push esi
mov eax, dword [ecx]
push edi
push ebp
mov esi, ecx
push 8
mov ebx, dword [eax]
mov ecx, dword [esi + 0x14]
push ecx
push eax
call dword [ebx + 0x50]
test eax, eax
je 0x4908fa
push 0x2bc
push str.C:_aardvark_vc_trkviewDd_d3d.cpp
push eax
call fcn.0048f750
add esp, 0xc
xor eax, eax
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x20
ret 0x10
mov dword [esi + 0x308], 8
push 0
call dword [sym.imp.USER32.dll_GetDC]
mov edi, eax
push 0xe
push edi
mov ebx, dword [sym.imp.GDI32.dll_GetDeviceCaps]
call ebx
push 0xc
push edi
call ebx
push edi
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
push 0xfffffffffffffff0
mov eax, dword [esi + 0x14]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
and eax, 0x7fffffff
mov ecx, dword [esi + 0x14]
or eax, 0xc60000
push eax
push 0xfffffffffffffff0
push ecx
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov ebx, dword [esp + 0x40]
mov edi, dword [esp + 0x3c]
mov eax, dword [esp + 0x38]
push ebx
mov ecx, dword [esp + 0x38]
push edi
lea edx, [esp + 0x18]
push eax
push ecx
push edx
call dword [sym.imp.USER32.dll_SetRect]
mov ebp, dword [esi + 0x14]
push 0xffffffffffffffec
push ebp
call dword [sym.imp.USER32.dll_GetWindowLongA]
push eax
push ebp
call dword [sym.imp.USER32.dll_GetMenu]
cmp eax, 1
sbb eax, eax
inc eax
push eax
push 0xfffffffffffffff0
push ebp
call dword [sym.imp.USER32.dll_GetWindowLongA]
lea ecx, [esp + 0x18]
push eax
push ecx
mov ebp, dword [sym.imp.USER32.dll_AdjustWindowRectEx]
call ebp
mov eax, dword [esp + 0x1c]
push 0x16
sub eax, dword [esp + 0x18]
push eax
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
mov ecx, dword [esi + 0x14]
sub eax, edx
mov ebp, dword [sym.imp.USER32.dll_SetWindowPos]
push eax
push 0
push 0
push 0
push ecx
call ebp
push 0x13
mov ecx, dword [esi + 0x14]
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
push ecx
call ebp
lea eax, [esp + 0x20]
push 0
push eax
push 0
push 0x30
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
lea ecx, [esp + 0x10]
mov edx, dword [esi + 0x14]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetWindowRect]
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x10]
cmp eax, ecx
jge 0x490a05
mov dword [esp + 0x10], ecx
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
cmp ecx, eax
jge 0x490a15
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
push 0x15
mov ecx, dword [esp + 0x14]
push 0
push 0
mov edx, dword [esi + 0x14]
push eax
push ecx
push 0
push edx
call ebp
test edi, edi
jne 0x490a41
test ebx, ebx
jne 0x490a41
push 0
mov eax, dword [esi + 0x14]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, 1
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x20
ret 0x10
Function at 0x493860
Capabilities:
Print debug messages

Disassembly:
mov eax, dword [esp + 0xc]
sub esp, 0x100
mov dword [ecx], 0
mov dword [ecx + 4], eax
mov edx, dword [esp + 0x110]
push ebx
mov ebx, dword [esp + 0x118]
push esi
mov eax, dword [esp + 0x110]
push edi
lea edi, [ecx + 0x14]
mov esi, dword [esp + 0x110]
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], ebx
mov dword [ecx + 0x10], eax
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
cmp eax, 0x278
jb 0x4938d1
push eax
push str.dwMsgSize___d_MAX_GENERIC_MSG_SIZE_not_large_enough_n
lea eax, [esp + 0x14]
push eax
call fcn.004bd200
lea eax, [esp + 0x18]
add esp, 0xc
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
pop edi
pop esi
pop ebx
add esp, 0x100
ret 0x14

Function at 0x493f70
Capabilities:
Print debug messages

Disassembly:
mov eax, dword fs:[0]
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x494071
push eax
mov dword fs:[0], esp
sub esp, 0x84
push ebx
push esi
lea eax, [ecx + 0x64]
push edi
mov ebx, ecx
mov esi, dword [ebp + 8]
xor ecx, ecx
mov edx, dword [eax]
cmp edx, esi
je 0x49405f
add eax, 4
inc ecx
cmp ecx, 8
jl 0x493f9b
mov eax, dword [ebx + 0x10]
test eax, eax
jne 0x493ff9
push 0x20
call fcn.004bd170
mov dword [ebp - 0x10], eax
add esp, 4
mov dword [ebp - 4], 0
mov edi, eax
mov eax, 0
test edi, edi
je 0x493fe0
mov eax, dword [ebp + 0xc]
mov ecx, edi
push eax
push esi
call fcn.00493be0
mov dword [ebp - 4], 0xffffffff
mov dword [ebx + 0x10], eax
jmp 0x49403d
mov ecx, dword [eax]
cmp ecx, esi
je 0x49405f
mov ebx, eax
mov eax, dword [eax + 0x1c]
test eax, eax
jne 0x493ff9
push 0x20
call fcn.004bd170
mov dword [ebp - 0x10], eax
add esp, 4
mov dword [ebp - 4], 1
mov edi, eax
mov eax, 0
test edi, edi
je 0x494033
mov eax, dword [ebp + 0xc]
mov ecx, edi
push eax
push esi
call fcn.00493be0
mov dword [ebp - 4], 0xffffffff
mov dword [ebx + 0x1c], eax
push esi
lea eax, [ebp - 0x90]
push str.New_player__d_added_n
push eax
call fcn.004bd200
add esp, 0xc
lea eax, [ebp - 0x90]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [ebp - 0xc]
pop edi
mov dword fs:[0], eax
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x497940
Capabilities:
Print debug messages

Disassembly:
push ebx
mov eax, dword [0x4e2fdc]
mov ecx, dword [eax + 0x610]
test ecx, ecx
je 0x4979f1
mov ecx, dword [eax + 0x6fc]
test ecx, ecx
jne 0x497965
mov ecx, eax
call fcn.004735a0
mov eax, dword [0x4e2fdc]
mov ecx, dword [eax + 4]
mov eax, dword [eax + 0x710]
mov edx, dword [ecx + 0x310]
mov ecx, eax
shl eax, 3
sub eax, ecx
mov ebx, dword [edx + eax*4]
lea eax, [edx + eax*4]
cmp ebx, 0x280
jne 0x4979a1
mov ecx, dword [eax + 4]
cmp ecx, 0x1e0
jne 0x4979a1
mov ecx, dword [eax + 8]
cmp ecx, 0x10
je 0x4979c1
push 1
push 1
push 0
mov eax, dword [0x4e2fdc]
push 8
mov ecx, eax
push 0x10
mov ebx, dword [eax]
push 0x1e0
push 0x280
call dword [ebx + 0x6c]
push str.ReturnToUI_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [0x4e2fdc]
mov ecx, dword [eax + 0x610]
mov ebx, dword [ecx]
call dword [ebx + 0x14]
mov ecx, dword [esp + 8]
mov eax, dword [0x4e2fdc]
push ecx
mov ecx, dword [eax + 0x610]
call fcn.00462b40
pop ebx
ret 4

Function at 0x4986d0
Capabilities:
Print debug messages

Disassembly:
sub esp, 0x1c
mov eax, dword [0x4e2fdc]
push ebx
push esi
push edi
mov esi, ecx
mov ecx, dword [eax + 0x318]
test ecx, ecx
je 0x4987af
mov eax, dword [esi + 0x3c]
test eax, eax
jne 0x4987af
mov ecx, esi
call fcn.00496820
mov edi, eax
mov eax, dword [eax + 0x30]
mov ecx, dword [eax + 0xc7c]
mov dword [esp + 0x10], ecx
mov eax, dword [edi + 0x30]
mov edx, dword [eax + 0xc04]
mov dword [esp + 0x14], edx
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 0xc00]
mov dword [esp + 0x18], ecx
mov eax, dword [edi + 0x30]
mov edx, dword [eax + 0xbdc]
mov dword [esp + 0x20], edx
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 0xbfc]
push 0
mov dword [esp + 0x20], ecx
mov ecx, dword [0x4e2fdc]
mov eax, dword [edi + 0x30]
mov edx, dword [eax + 0xbe0]
mov dword [esp + 0x28], edx
mov ebx, dword [ecx + 0x318]
mov ecx, ebx
call fcn.00494c60
lea ecx, [esp + 0x10]
push eax
push 0x1c
push ecx
push 0x86
mov ecx, ebx
call fcn.00494740
mov dword [esi + 0x3c], 1
push str.EventManager::BeginEndGameNetSync_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi + 0x34]
mov ecx, dword [esi + 0x30]
push eax
mov edx, dword [0x4e2fdc]
push ecx
mov ecx, dword [edx + 0x318]
call fcn.00495280
mov ebx, dword [edi]
mov ecx, edi
call dword [ebx + 0x10]
mov dword [esi + 0x38], 1
pop edi
pop esi
pop ebx
add esp, 0x1c
ret
Function at 0x49bc40
Capabilities:
Print debug messages

Disassembly:
sub esp, 0x80
push ebx
push esi
push edi
push ebp
mov eax, dword [ecx]
mov edi, ecx
test eax, eax
je 0x49bc9b
mov esi, dword [esp + 0x94]
test esi, esi
je 0x49bc9b
lea eax, [esp + 0x10]
push esi
push str.Destroy_player_id__d_n
push eax
call fcn.004bd200
lea eax, [esp + 0x1c]
add esp, 0xc
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [edi]
push esi
push eax
mov ebp, dword [eax]
call dword [ebp + 0x24]
test eax, eax
je 0x49bcaa
push 0x267
push str.C:_aardvark_vc_trkviewuidp.cpp
push eax
call fcn.00494c70
add esp, 0xc
xor eax, eax
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x80
ret 4
mov eax, 1
jmp 0x49bc9d
Function at 0x4b8c60
Capabilities:
Print debug messages

Disassembly:
mov eax, dword fs:[0]
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b8e7f
push eax
mov dword fs:[0], esp
mov eax, dword [ebp + 8]
sub esp, 0x20c
push ebx
push esi
push edi
mov ebx, ecx
push eax
call fcn.00420480
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp + 0xc]
mov dword [ebx + 0x140], eax
mov dword [ebx + 0x138], ecx
mov edi, dword [0x4e2fdc]
mov ecx, 0xffffffff
add edi, 0x117f
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
shr ecx, 2
mov esi, edi
lea edi, [ebx + 0x34]
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push 0x4df418
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebx + 0x34]
push ecx
call fcn.004bdf70
add esp, 8
test eax, eax
jne 0x4b8d06
push str.Stadium_file_not_specified_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 8]
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
fld dword [ebx + 0x140]
fmul dword [0x4d7b68]
lea edi, [ebx + 0x144]
lea eax, [ebx + 0x34]
push eax
lea ecx, [ebp - 0x218]
mov dword [ebx + 0x148], 0
fst dword [edi]
fstp dword [ebx + 0x14c]
push str.stadiums
push str._s_s.slt
push ecx
call fcn.004bd200
add esp, 0x10
lea ecx, [ebp - 0x114]
lea edx, [ebp - 0x218]
nop
push ecx
push edx
mov ecx, dword [0x4e2fdc]
add ecx, 0x624
call fcn.00429340
test eax, eax
je 0x4b8cf1
push 0x278
call fcn.0045b6b0
mov dword [ebp - 0x10], eax
add esp, 4
mov dword [ebp - 4], 0
mov esi, eax
mov eax, 0
test esi, esi
je 0x4b8d96
push 1
mov ecx, esi
call fcn.00442b60
push 1
mov ecx, dword [ebp + 0x1c]
push ecx
mov edx, dword [ebp + 0x14]
push edx
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 0x10]
push edx
lea ecx, [ebp - 0x114]
mov dword [ebp - 4], 0xffffffff
push ecx
mov edx, dword [ebx + 0x1c]
push edx
mov ecx, eax
mov dword [ebx + 0x30], eax
mov edx, dword [eax]
call dword [edx + 0x44]
push eax
mov ecx, ebx
call fcn.004203b0
cmp eax, 1
sbb eax, eax
neg eax
test eax, eax
jne 0x4b8cea
mov eax, dword [ebx + 0x140]
mov ecx, dword [ebx + 0x30]
push eax
push eax
push eax
call fcn.004b6a80
mov ecx, dword [edi + 8]
mov eax, dword [edi + 4]
push ecx
mov edx, dword [edi]
push eax
mov ecx, dword [ebx + 0x30]
push edx
call fcn.004b5fd0
mov ecx, dword [ebx + 0x30]
lea edx, [ebx + 0x34]
push edx
lea eax, [ebp - 0x218]
mov dword [ecx + 0x18c], 1
push str.stadiums
push str._s_s.scn
push eax
call fcn.004bd200
add esp, 0x10
lea ecx, [ebp - 0x114]
lea edx, [ebp - 0x218]
nop
push ecx
push edx
mov ecx, dword [0x4e2fdc]
add ecx, 0x624
call fcn.00429340
test eax, eax
je 0x4b8cf1
lea eax, [ebp - 0x114]
push eax
push 1
push str.AllowCrowdSound
push str.Crowd
call fcn.00470450
add esp, 0x10
mov ecx, dword [0x4e2fdc]
mov dword [ecx + 0xe2c], eax
mov eax, ebx
jmp 0x4b8cf3