joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4a0d11
Capabilities:
Encrypt data using rc4 prga

Disassembly:
shl ebx, 6
or edx, ebx
shl edx, 6
loop 0x4a0d1f
or edx, eax
movzx eax, byte [ecx + 3]
shl edx, 6
and eax, 0x3f
or edx, eax
movzx eax, byte [ecx + 4]
shl edx, 6
and eax, 0x3f
or edx, eax
movzx eax, byte [ecx + 5]
shl edx, 6
and eax, 0x3f
or edx, eax
mov dword [esi + 0x80], edx
add dword [esi + 0x88], 5
xchg byte [eax + 0x5000000], cl

Function at 0x4a0de9
Capabilities:
Encrypt data using rc4 prga

Disassembly:
jecxz 0x4a0cb4
shl ebx, 6
or edx, ebx
shl edx, 6
push es
or edx, eax
movzx eax, byte [ecx + 3]
shl edx, 6
and eax, 0x3f
or edx, eax
mov dword [esi + 0x80], edx
add dword [esi + 0x88], 3
mov byte [eax], al
add byte [eax], al
add ebp, ecx
ja 0x4a0cd3
add byte [eax], al
mov eax, dword [esi + 8]
mov edi, dword [esi + 0x80]
movzx ecx, byte [eax]
cmp edi, 0x80
add byte [eax], 0
add byte [ebx + 0x1a], dh
mov edx, dword [ebp + 0x38]
mov al, byte [edx + edi]
cmp al, byte [ecx + edx]
jne fcn.004a8687
add byte [eax], al
inc dword [esi + 0xc]
lea edx, [eax + 1]
mov edi, ecx
mov dword [esi + 8], edx
cmp ecx, 0xc0
add byte [eax], al
jb 0x4a0e6d
movzx eax, byte [edx]
and eax, 0x3f
test cl, 0x20
jne 0x4a0da9
and ecx, 0x1f
shl ecx, 6
or ecx, eax
lea eax, [edx + 1]
jmp 0x4a0e68
test cl, 0x10
jne 0x4a0dca
and ecx, 0xf
test cl, 8
jne 0x4a0df7
and ecx, 7
shl ecx, 6
or ecx, eax
movzx eax, byte [edx + 1]
and eax, 0x3f
aas
shl ecx, 6
or ecx, eax
movzx eax, byte [edx + 2]
and eax, 0x3f
loopne 0x4a0e29
shl ecx, 6
or ecx, eax
lea eax, [edx + 3]
inc edx
add ebp, ecx
jno 0x4a0df5
add byte [eax], al
test cl, 4
jne 0x4a0e2d
and ecx, 3
shl ecx, 6
or ecx, eax
movzx eax, byte [edx + 1]
and eax, 0x3f
shl ecx, 6
loope 0x4a0e14
or ecx, eax
movzx eax, byte [edx + 2]
and eax, 0x3f
shl ecx, 6
loope 0x4a0e20
or ecx, eax
movzx eax, byte [edx + 3]
and eax, 0x3f
shl ecx, 6
or ecx, eax
lea eax, [edx + 4]
jmp 0x4a0e68
and ecx, 1
shl ecx, 6

Function at 0x4a6ec4
Capabilities:
Encrypt data using rc4 prga

Disassembly:
xchg byte [eax - 0x77000000], ah
test dword [eax - 0x75000000], edx
xchg byte [eax + eax - 0x77c30000], bl
add byte [eax], al
add byte [edi], cl
sub dword [eax + eax - 0x7ec30000], 0
add byte [eax], al

Function at 0x4a860d
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov dh, 0x41
add dword [ebx - 0x1c3ec020], eax
aas
shl ebx, 6

Function at 0x4a9732
Capabilities:
Encrypt data using rc4 prga

Disassembly:
add byte [eax], al
add byte [eax + 0xf227510], ch
mov dh, 2
and ecx, 0xf
and eax, 0x3f
shl ecx, 6
or ecx, eax
movzx eax, byte [edx + 1]
and eax, 0x3f
shl ecx, 6
push es
or ecx, eax
lea eax, [edx + 2]
jmp fcn.004a9806

Function at 0x4a9775
Capabilities:
Encrypt data using rc4 prga

Disassembly:
loope 0x4a977d
or ecx, eax
movzx eax, byte [edx + 2]
and eax, 0x3f

Function at 0x4a97fb
Capabilities:
Encrypt data using rc4 prga

Disassembly:
and eax, 0x3f
shl ecx, 6
or ecx, eax
lea eax, [edx + 5]

Function at 0x4a9c66
Capabilities:
Encrypt data using rc4 prga

Disassembly:
add byte [eax], al
add cl, al
loop 0x4a9c65
ror byte [edi], 1
mov dh, 0x47
inc edi
add eax, dword [ebx - 0x1d3ec020]
push es
Function at 0x4aa125
Capabilities:
Encrypt data using rc4 prga

Disassembly:
add al, byte [ebx - 0x1e3ec020]
push es
or ecx, eax
movzx eax, byte [edx + 3]
and eax, 0x3f
shl ecx, 6
or ecx, eax
movzx eax, byte [edx + 4]
and eax, 0x3f
shl ecx, 6
or ecx, eax
lea eax, [edx + 5]
mov dword [esi + 8], eax
mov edi, ecx
shr ecx, 7
and edi, 0x7f
movzx eax, byte [ecx + 0x55b200]
shl eax, 7
add eax, edi
movzx eax, word [eax*2 + 0x55d400]
movzx eax, byte [eax*8 + 0x559b81]
mov eax, dword [eax*4 + 0x559550]
cmp eax, 1
je 0x4aa185
cmp eax, 3
je 0x4aa185
xor eax, eax
jmp 0x4aa18a
mov eax, 1
cmp eax, dword [esi + 0x68]
je case.default.0x4a4388
inc dword [esi + 0x84]

Function at 0x4befc4
Capabilities:
Resolve function by parsing pe exports

Disassembly:
movss xmm0, dword [0x5500c8]
xor eax, eax
movss dword [esi + 0x74], xmm0
je 0x4bf025
pop esi
mov esp, ebp
pop ebp
ret

Function at 0x4bf4e5
Capabilities:
Resolve function by parsing pe exports

Disassembly:
test byte [esi - 0x7d000000], dh
cli
add al, 0x72
push edi
mov eax, edx
and eax, 0xfffffffc
nop
add ecx, 4
cmp ecx, eax
jb 0x4bf520
shr eax, 2
shl eax, 4
shr eax, 2
mov dword [esp + 0xc], ecx
mov ecx, eax
mov eax, edi
mov edi, dword [esp + 0x38]

Function at 0x4bf4ea
Capabilities:
Resolve function by parsing pe exports

Disassembly:
test byte [esi - 0x7d000000], dh
cli
add al, 0x72
push edi
mov eax, edx
and eax, 0xfffffffc
nop
add ecx, 4
cmp ecx, eax
jb 0x4bf520
shr eax, 2
shl eax, 4
shr eax, 2
mov dword [esp + 0xc], ecx
mov ecx, eax
mov eax, edi
mov edi, dword [esp + 0x38]

Function at 0x4bf53e
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [esp + 0xc]
cmp ecx, edx
jae 0x4bf5a0
mov eax, edx
sub eax, ecx
cmp eax, 4
jb 0x4bf588
lea edi, [edx - 3]
mov eax, dword [esi + 0x9c]
movss dword [eax + ecx*4], xmm1
movups xmmword [eax + ecx*4], xmm1
mov eax, dword [esi + 0x9c]
movss dword [eax + ecx*4 + 4], xmm1
mov eax, dword [esi + 0x9c]
movss dword [eax + ecx*4 + 8], xmm1
mov eax, dword [esi + 0x9c]
movss dword [eax + ecx*4 + 0xc], xmm1
add ecx, 4
cmp ecx, edi
invalid

Function at 0x4bf5a4
Capabilities:
Resolve function by parsing pe exports

Disassembly:
js fcn.004bf5fe
add byte [edi + 0x6a], dh
add byte [edx], ch
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
mov ecx, dword [esp + 0x34]
test ecx, ecx
jne 0x4bf609
push 0xc55a
push str.C:PureBasicSvn_v6.10LibrariesSoundMiniAudiominiaudiominiaudio.h
add eax, 0x8680058
ficom word [edi]
call str._nVe_
lds ebp, [eax]
adc dword [eax], eax
mov ecx, dword [esp + 0x40]

Function at 0x4bf5e3
Capabilities:
Resolve function by parsing pe exports

Disassembly:
adc al, ch
mov word [ebx + 0xc], fs
add byte [ebx + 0x4c8b14c4], al
add esp, 0x14
invalid
dec esp
and al, 0x34

Function at 0x4bf63a
Capabilities:
Resolve function by parsing pe exports

Disassembly:
ret
Function at 0x4bf6a4
Capabilities:
Resolve function by parsing pe exports

Disassembly:
test ecx, ecx
jne 0x4bf697
push edi
push eax
push ecx
call 0x59c5c8
add esp, 0xc
mov byte [esp + 0x17], al
mov cl, al
jmp 0x4bf69e
mov cl, byte [edi + ecx]
mov byte [esp + 0x17], cl
test cl, cl
je 0x4bf6e1
cmp cl, 1
je 0x4bf6e1
cmp cl, 5
je 0x4bf6e1
mov al, cl
sub al, 0x14
cmp al, 0x1f
jbe 0x4bf6e1
movzx eax, cl
xor edx, edx
mov dword [esp + 0x2c], eax
lea eax, [eax + eax*2]
lea ecx, [eax*8 + 0xc5dd58]
movss xmm0, dword [ecx]
ucomiss xmm0, xmm2
lahf
cmp edx, 6
jl 0x4bf6c7
movaps xmm0, xmm1
movss xmm3, dword [esi + 0x78]
addss xmm0, xmm1
mulss xmm0, xmm7
comiss xmm0, xmm3
ja 0x4bf6f9
mov eax, dword [esi + 0x9c]
mov ecx, dword [esp + 0x34]
mulss xmm0, dword [eax + edi*4]
movss dword [eax + edi*4], xmm0
inc edi
mov eax, dword [esp + 0x30]
cmp edi, eax
jb 0x4bf680
and byte [esi - 1], 0xff
invalid
lea edx, [esi + 0x7c]
test edx, edx
je 0x4bf868
test byte [ebx + 1], al
add byte [eax], al
mov eax, dword [esi + 0x9c]
mov dword [esp + 0x2c], eax
test eax, eax
je 0x4bf84d
xor edi, edi
cmp dword [edx], edi
jbe 0x4bf7ad
mov esi, eax
nop

Function at 0x4bf6cf
Capabilities:
Resolve function by parsing pe exports

Disassembly:
test ah, 0x44
jp 0x4bf7c2
inc edx
add ecx, 4
cmp byte [esp + 0x17], 0x34
jb 0x4bf7d9
movss xmm4, dword [0x552fc4]
movaps xmm3, xmm2
movaps xmm0, xmm2
invalid

Function at 0x4bf6dc
Capabilities:
Resolve function by parsing pe exports

Disassembly:
test ecx, ecx
jne 0x4bf697
push edi
push eax
push ecx
call 0x59c5c8
add esp, 0xc
mov byte [esp + 0x17], al
mov cl, al
jmp 0x4bf69e
mov cl, byte [edi + ecx]
mov byte [esp + 0x17], cl
test cl, cl
je 0x4bf6e1
cmp cl, 1
je 0x4bf6e1
cmp cl, 5
je 0x4bf6e1
mov al, cl
sub al, 0x14
cmp al, 0x1f
jbe 0x4bf6e1
movzx eax, cl
xor edx, edx
mov dword [esp + 0x2c], eax
lea eax, [eax + eax*2]
lea ecx, [eax*8 + 0xc5dd58]
movss xmm0, dword [ecx]
ucomiss xmm0, xmm2
lahf
cmp edx, 6
jl 0x4bf6c7
movaps xmm0, xmm1
movss xmm3, dword [esi + 0x78]
addss xmm0, xmm1
mulss xmm0, xmm7
comiss xmm0, xmm3
ja 0x4bf6f9
mov eax, dword [esi + 0x9c]
mov ecx, dword [esp + 0x34]
mulss xmm0, dword [eax + edi*4]
movss dword [eax + edi*4], xmm0
inc edi
mov eax, dword [esp + 0x30]
cmp edi, eax
jb 0x4bf680
and byte [esi - 1], 0xff
invalid
lea edx, [esi + 0x7c]
test edx, edx
je 0x4bf868
test byte [ebx + 1], al
add byte [eax], al
mov eax, dword [esi + 0x9c]
mov dword [esp + 0x2c], eax
test eax, eax
je 0x4bf84d
xor edi, edi
cmp dword [edx], edi
jbe 0x4bf7ad
mov esi, eax
nop

Function at 0x4c56db
Capabilities:
Resolve function by parsing pe exports

Disassembly:
test ecx, ecx
je fcn.004c56dc
mov ebx, dword [ebp + 0x54]
nop dword [eax + eax]
test eax, eax
je 0x4c56d5
push esi
push ebx
push 0
call 0x5a25f9
mov byte [esp + esi + 0x174], al
add esp, 0xc
mov eax, dword [esp + 0x10]
inc esi
dec eax
mov dword [esp + 0x10], eax
inc esp
and al, 0x10
cmp esi, ebx
jb 0x4c56b0
mov ebx, dword [esp + 0x1490]
Function at 0x4ce9e7
Capabilities:
Resolve function by parsing pe exports

Disassembly:
or al, 0xdf
push edi
add al, ch
lds ebp, [eax]
adc dword [eax], eax
add esp, 0xc
mov ebp, dword [esp + 0x188]
test ebp, ebp
jne 0x4cea15
push 0x530b
push str.C:PureBasicSvn_v6.10LibrariesSoundMiniAudiominiaudiominiaudio.h
push str.pInfo_____void__0_
call 0x5e12d7
add esp, 0xc
mov eax, dword [ebx]
lea ecx, [esp + 0x10]
push ecx
push ebx
mov eax, dword [eax + 0x20]
call eax
mov esi, eax
test esi, esi
js 0x4cee67
mov esi, dword [esp + 0x10]
test esi, esi
jne 0x4cea4b
push 0x52f7
push str.C:PureBasicSvn_v6.10LibrariesSoundMiniAudiominiaudiominiaudio.h
push str.pWF_____void__0_
call 0x5e130d
add esp, 0xc
test ebp, ebp
jne 0x4cea66
push 0x52f8
push str.C:PureBasicSvn_v6.10LibrariesSoundMiniAudiominiaudiominiaudio.h
push str.pInfo_____void__0_
call 0x5e1328
add esp, 0xc
cmp dword [ebp + 0x204], 0x40
jae 0x4ceac5
push esi
call 0x59c201
add byte [ebx + 0x2048d], cl
add byte [ebx - 0x36fcfb3c], al
mov eax, dword [esp + 0x17c]
test eax, eax
je 0x4cee75
mov eax, dword [eax + 0x38]
push str._WASAPI__Failed_to_retrieve_mix_format_for_device_info_retrieval.
push 1

Function at 0x4ceaf4
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push edx
movq qword [esp + 0x78], xmm0
mov ecx, dword [eax]
push 0x552e7c
push eax
mov eax, dword [ecx + 0x14]
call eax
test eax, eax
js 0x4cedfe
mov eax, dword [esp + 0x70]
mov ecx, dword [ebx]
push 0
push eax
push 1
mov dword [esp + 0x20], eax
mov eax, dword [ecx + 0x1c]
push ebx
call eax
test eax, eax
js 0x4cebc8
wait
add byte [eax], al
invalid
mov esi, dword [esp + 0x14]
test esi, esi
jne 0x4ceb4c
push 0x52f7
push str.C:PureBasicSvn_v6.10LibrariesSoundMiniAudiominiaudiominiaudio.h
push str.pWF_____void__0_
call 0x5e140e
add esp, 0xc
cmp dword [ebp + 0x204], 0x40
jae 0x4cee20
push esi
call 0x59c2eb
or al, 0
mov eax, dword [esp + 0x14]
movzx edi, word [eax + 2]
mov dword [esp + 0x1c], edi
cmp edi, 0xfe
jbe 0x4cebef
mov edi, 0xfe
xor esi, esi
mov eax, edi
mov dword [esp + 0x1c], edi
mov dword [esp + 0x10], eax
jmp 0x4cec10
mov dword [esp + 0x18], edi
mov ecx, edi
test edi, edi
je 0x4cec35
xor esi, esi
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], edi
mov eax, 0xfe
add byte [eax], al
mov esi, dword [esp + 0x180]
test esi, esi
jne 0x4cee0d
xor eax, eax
jmp 0x4cee10
mov eax, dword [esi + 0x38]
push str._WASAPI__Failed_to_retrieve_device_format_for_device_info_retrieval.
push 2
push eax
Function at 0x4cfacc
Capabilities:
Resolve function by parsing pe exports

Disassembly:
in al, dx
pushfd
add byte [eax], al
add byte [ebx - 0x75], dl
pushfd
and al, 0xb0
add byte [eax], al
add byte [eax], al
xor eax, eax
push ebp
push edi
mov edi, dword [esp + 0xac]
mov ebp, 0x577848
mov dword [esp + 0x28], eax
mov dword [esp + 0x20], eax
test edi, edi
jne 0x4cfb01
push 0x561f
push str.C:PureBasicSvn_v6.10LibrariesSoundMiniAudiominiaudiominiaudio.h
push str.pContext_____void__0_
call 0x5e23c3
add esp, 0xc
test ebx, ebx
jne 0x4cfb1c
push 0x5620
push str.C:PureBasicSvn_v6.10LibrariesSoundMiniAudiominiaudiominiaudio.h
push str.pData_____void__0_
call 0x5e23de
add esp, 0xc
mov eax, dword [esp + 0xb0]
cmp eax, 3
jne 0x4cfb37
pop edi
pop ebp
mov eax, 0xfffffffe
pop ebx
add esp, 0x9c
ret
mov edx, dword [esp + 0xb4]
cmp eax, 4
jne 0x4cfb58
cmp dword [ebx + 0x12c], 0
je 0x4cfb58
mov dword [esp + 0x3c], 1
test edx, edx
je fcn.004cfb60
invalid
mov dword [esp + 0x3c], 0

Function at 0x4cfb60
Capabilities:
Resolve function by parsing pe exports

Disassembly:
cmp dword [ebx + 0x120], 0
lea ecx, [ebx + 0x134]
xor al, 1
add byte [eax], al
push esi
mov dword [ecx], 0
add dword [eax], eax
add byte [eax], al
add byte [eax + 0x40000], bh
invalid
mov dword [ebx + 0x138], 0
mov dword [ebx + 0x13c], 0
jne 0x4cfba4
cmp dword [ebx + 8], 0
cmp dword [ebx + 0x124], 0
jne 0x4cfbbc
cmp dword [ebx + 8], 0
je 0x4cfbbc
test eax, eax
jns 0x4cfbbc
or eax, 0x8000000
mov esi, eax
invalid
into
add byte [eax], al
invalid

Function at 0x4cfb6f
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add dword [eax], eax
add byte [eax], al
add byte [eax + 0x40000], bh
invalid

Function at 0x4cfc23
Capabilities:
Resolve function by parsing pe exports

Disassembly:
lea edx, [esp + 0x34]
push edx
push 0x552eb0

Function at 0x4d2f0c
Capabilities:
Resolve function by parsing pe exports

Disassembly:
pop edi
add byte [eax], al
push str.C:PureBasicSvn_v6.10LibrariesSoundMiniAudiominiaudiominiaudio.h
push str.pDevice_____void__0_
call 0x5e57e3
mov ebp, esi
mov dword [esp + 0x1c], esi
add esp, 0xc
mov dword [esp + 0x1c], ebp
xorps xmm0, xmm0
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0

Function at 0x4d3aaf
Capabilities:
Resolve function by parsing pe exports

Disassembly:
xchg dword [eax + 0xb], edx
add byte [eax], al
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x20a0
mov dword [esp + 4], eax
jmp 0x4caa70

Function at 0x4d3ebd
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add eax, ecx
push eax
lea eax, [edi + 0x4f8]
push eax
call 0x5944a8
mov ebx, eax
add esp, 0x14
mov dword [esp + 0x14], ebx
test ebx, ebx
jne 0x4d4007
mov esi, dword [esp + 0x94]
add dword [esp + 0x34], esi

Function at 0x4d3f66
Capabilities:
Resolve function by parsing pe exports

Disassembly:
xchg dword [eax + 0xb], ecx
add byte [eax], al
mov eax, dword [edi + 0xb50]
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x28]
call eax
mov eax, dword [edi]
test eax, eax
jne 0x4d453f
push str._DirectSound__IDirectSoundBuffer_Play___failed.
jmp 0x4d3a54
mov eax, dword [eax + 0x38]
push str._DirectSound__IDirectSoundBuffer_Play___failed.
jmp 0x4d3a54
Function at 0x4d40cc
Capabilities:
Resolve function by parsing pe exports

Disassembly:
lea ecx, [esp + 0xb4]
mov dword [esp + 0x78], eax
xor edx, edx
mov eax, dword [esp + 0x24]
div dword [esp + 0x40]
push ecx
sub eax, ebx
lea ecx, [esp + 0x8c]
imul ebx, dword [esp + 0x44]
push ecx
mov dword [esp + 0x90], eax
add byte [eax], al
lea eax, [edi + 0xa40]
add ebx, dword [esp + 0x44]
push ebx
push eax
call 0x5946e5
mov ebp, dword [esp + 0x44]
mov ebx, eax
add esp, 0x14
mov dword [esp + 0x14], ebx
test ebx, ebx
je 0x4d3c60
jmp 0x4d4124

Function at 0x4d40d1
Capabilities:
Resolve function by parsing pe exports

Disassembly:
lea ecx, [esp + 0xb4]
mov dword [esp + 0x78], eax
xor edx, edx
mov eax, dword [esp + 0x24]
div dword [esp + 0x40]
push ecx
sub eax, ebx
lea ecx, [esp + 0x8c]
imul ebx, dword [esp + 0x44]
push ecx
mov dword [esp + 0x90], eax
add byte [eax], al
lea eax, [edi + 0xa40]
add ebx, dword [esp + 0x44]
push ebx
push eax
call 0x5946e5
mov ebp, dword [esp + 0x44]
mov ebx, eax
add esp, 0x14
mov dword [esp + 0x14], ebx
test ebx, ebx
je 0x4d3c60
jmp 0x4d4124

Function at 0x4d40f6
Capabilities:
Resolve function by parsing pe exports

Disassembly:
lea ecx, [esp + 0xb4]
mov dword [esp + 0x78], eax
xor edx, edx
mov eax, dword [esp + 0x24]
div dword [esp + 0x40]
push ecx
sub eax, ebx
lea ecx, [esp + 0x8c]
imul ebx, dword [esp + 0x44]
push ecx
mov dword [esp + 0x90], eax
add byte [eax], al
lea eax, [edi + 0xa40]
add ebx, dword [esp + 0x44]
push ebx
push eax
call 0x5946e5
mov ebp, dword [esp + 0x44]
mov ebx, eax
add esp, 0x14
mov dword [esp + 0x14], ebx
test ebx, ebx
je 0x4d3c60
jmp 0x4d4124

Function at 0x4d40fd
Capabilities:
Resolve function by parsing pe exports

Disassembly:
lea ecx, [esp + 0xb4]
mov dword [esp + 0x78], eax
xor edx, edx
mov eax, dword [esp + 0x24]
div dword [esp + 0x40]
push ecx
sub eax, ebx
lea ecx, [esp + 0x8c]
imul ebx, dword [esp + 0x44]
push ecx
mov dword [esp + 0x90], eax
add byte [eax], al
lea eax, [edi + 0xa40]
add ebx, dword [esp + 0x44]
push ebx
push eax
call 0x5946e5
mov ebp, dword [esp + 0x44]
mov ebx, eax
add esp, 0x14
mov dword [esp + 0x14], ebx
test ebx, ebx
je 0x4d3c60
jmp 0x4d4124

Function at 0x4d4317
Capabilities:
Resolve function by parsing pe exports

Disassembly:
imul eax, ebx
sub eax, ebp
add eax, ecx
jmp 0x4d4369

Function at 0x4d438e
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add byte [ebx + 0x418b5008], cl
xor bh, bh
ror byte [ebx + 0xfdb85d8], 1
mov byte [esi - 0x74ffffff], cl
invalid
mov edx, dword [esp + 0x6c]

Function at 0x4d43a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add byte [ebx - 0x3893dbac], cl
inc esp
and al, 0x1c
add dword [eax], eax
add byte [eax], al
invalid

Function at 0x4d43a5
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add byte [ebx - 0x3893dbac], cl
inc esp
and al, 0x1c
add dword [eax], eax
add byte [eax], al
invalid

Function at 0x4d43aa
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add byte [ebx - 0x3893dbac], cl
inc esp
and al, 0x1c
add dword [eax], eax
add byte [eax], al
invalid
Function at 0x4d43d9
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [eax]
sub edx, ebp
push ebx
lea ebx, [esp + 0x50]
and al, 0x50
push ebx
push edx
push ebp
push eax
mov eax, dword [ecx + 0x2c]
call eax
mov ebx, eax
test ebx, ebx
jns 0x4d4419
mov ecx, dword [edi]
test ecx, ecx
je 0x4d43fa
mov ecx, dword [ecx + 0x38]
push str._DirectSound__Failed_to_map_buffer_from_playback_device_in_preparation_for_writing_to_the_device.
push 1
push ecx
call 0x58ff53
push ebx
call 0x59e279
add esp, 0x10
mov dword [esp + 0x14], eax
jmp 0x4d450a
mov eax, dword [esp + 0x2c]
xor edx, edx
div dword [esp + 0x10]
push dword [esp + 0x40]
push eax
push edi
call 0x59ecda
mov eax, dword [edi + 0xb48]
add esp, 0xc

Function at 0x4d4443
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [eax]
push 0
push 0
push dword [esp + 0x34]
push dword [esp + 0x4c]
and al, 0x4c
push eax
mov eax, dword [ecx + 0x4c]
Function at 0x4d44c4
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [esp + 4]
cmp eax, 0x8000ffff
jg 0x4caa9a
je case.0x4cab45.2004287465
add eax, 0x7fffbfff
cmp eax, 4
clc
add al, 0x77
inc eax
jmp dword [eax*4 + 0x4cabc8]
mov eax, 0xffffffe3
ret
mov eax, 0xffffff33
ret
cmp eax, 0x88890001
jg 0x4cab2a
add byte [eax], al
je case.0x4cab05.2005401430
cmp eax, 0x8878000a
jg 0x4caae9
je 0x4caae3
cmp eax, 0x80070006
jg 0x4caacb
je case.0x4cab45.2004287485
cmp eax, 0x80040110
je case.0x4cab45.2004287465
cmp eax, 0x80070005
je case.0x4cab05.2005401440
or eax, 0xffffffff
ret
cmp eax, 0x8007000e
je case.0x4cab45.2004287453
cmp eax, 0x80070057
jne case.0x4cab45.2004287465
mov eax, 0xfffffffe
ret
mov eax, 0xffffffe9
ret
cmp eax, 0x88781161
jg case.0x4cab45.2004287465
je 0x4cab1e
add eax, 0x7787ffe2
cmp eax, 0xbe
ja case.0x4cab45.2004287465
movzx eax, byte [eax + 0x4cac08]
jmp dword [eax*4 + 0x4cabdc]
mov eax, 0xfffffe70
ret
mov eax, 0xfffffffa
ret
mov eax, 0xffffffe5
ret
mov eax, 0xffffff34
ret
test eax, eax
jg 0x4cab9a
je 0x4cabbf
add eax, 0x7776fffe
cmp eax, 0x3e
ja case.0x4cab45.2004287465
movzx eax, byte [eax + 0x4cad08]
jmp dword [eax*4 + 0x4cacc8]
mov eax, 0xfffffed3
ret
mov eax, 0xffffffea
ret
mov eax, 0xfffffff5
ret
mov eax, 0xffffff38
ret
mov eax, 0xffffffed
ret
mov eax, 0xfffffff9
ret
mov eax, 0xfffffe6f
ret
mov eax, 0xffffffd1
ret
mov eax, 0xffffff36
ret
mov eax, 0xfffffffc
ret
mov eax, 0xffffffdf
ret
mov eax, 0xfffffffd
ret
cmp eax, 0x8890002
jg case.0x4cab45.2004287465
and bh, bh
invalid
invalid
je 0x4cabc2
cmp eax, 0x878000a
je 0x4cabbf
cmp eax, 0x8890001
jne case.0x4cab45.2004287465
invalid
mov eax, 0xffffffee
ret
xor eax, eax
ret
mov eax, 0xfffffff8
ret
push 1
push eax
call 0x58f5a8
push ebx
call 0x59d8ce
add esp, 0x10
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x20a0
ret
imul edx, ecx
add eax, ebp
imul edx, dword [esp + 0x10]
cmp eax, edx
jne 0x4d44aa
xor ecx, ecx
cmp dword [esp + 0x24], ecx
sete cl
mov dword [esp + 0x24], ecx
mov ecx, dword [edi + 0x4e4]
xor ebp, ebp
cmp eax, edx
cmovne ebp, eax
mov eax, dword [esp + 0x2c]
xor edx, edx
mov dword [esp + 0x30], ebp
div dword [esp + 0x10]
mov edx, dword [esp + 0x70]
push esp
and al, 0x70
mov ebx, ebp
add edx, eax
cmp dword [esp + 0x1c], 0
mov dword [esp + 0x70], edx
jne 0x4d4506
mov dword [esp + 0x30], ebp
cmp edx, ecx
jb 0x4d4506
mov eax, dword [edi + 0xb48]
push 1
push 0
push 0
mov ecx, dword [eax]
push eax
mov eax, dword [ecx + 0x30]
call eax
mov ebp, eax
test ebp, ebp
js 0x4d4634
mov ebp, ebx
mov dword [esp + 0x1c], 1
mov dword [esp + 0x30], ebp
Function at 0x4d956b
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edi, dword [esi + 0x4c]
mov ebx, 0x4000
add edi, eax
xor edx, edx
mov eax, dword [edi + 8]
sub ebx, eax
mov ebp, dword [edi + 4]
mov dword [esp + 0x30], eax
test ebp, ebp
je 0x4d9521
mov esi, dword [esp + 0x84]
mov eax, dword [edi + 0xc]
movsx ecx, word [esi + edx*2]
imul ecx, ebx
mov eax, dword [eax + edx*4]
imul eax, dword [esp + 0x30]
add ecx, eax
sar ecx, 0xe
mov word [esi + edx*2], cx
mov eax, dword [edi + 0xc]
mov dword [eax + edx*4], ecx
inc edx
cmp edx, ebp
jb 0x4d94f3
mov esi, dword [esp + 0x78]
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x24]
inc ecx
add eax, 0x18
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
cmp ecx, dword [esi + 0x44]
jb 0x4d94d0
mov ebx, dword [esp + 0x84]
xor eax, eax
mov dword [esp + 0x24], eax
cmp dword [esi + 0x48], eax
jbe 0x4d963b
xor ecx, ecx
mov dword [esp + 0x20], ecx
mov ebp, dword [esi + 0x50]
add ebp, ecx
mov dword [esp + 0x30], 0
mov ebx, dword [ebp + 0xc]
mov edx, dword [ebp + 4]
mov edi, dword [ebp + 8]
mov dword [esp + 0x38], ebx
cmp byte [ebx + 0x5c89105d], cl
and al, 0x40
mov ebx, dword [ebp + 0x14]
mov dword [esp + 0x34], ebx
mov ebx, dword [ebp + 0x18]
mov dword [esp + 0x3c], ebx
mov ebx, dword [esp + 0x84]
mov dword [esp + 0x44], edx
mov dword [esp + 0x4c], edi
test edx, edx
je 0x4d961f
mov esi, dword [esp + 0x30]
nop dword [eax]
movsx ebx, word [ebx + esi*2]
mov eax, dword [ebp + 0x1c]
mov edx, ebx
imul edx, edi
add edx, dword [eax + esi*4]
mov eax, dword [ebp + 0x20]
sar edx, 0xe
mov ecx, edx
imul ecx, dword [esp + 0x34]
mov edi, dword [eax + esi*4]
mov eax, ebx
imul eax, dword [esp + 0x38]
imul ebx, dword [esp + 0x40]
sub edi, ecx
mov ecx, 0xffff8000
add edi, eax
mov eax, edx
imul eax, dword [esp + 0x3c]
sub ebx, eax
mov eax, 0x7fff
cmp edx, eax
cmovl eax, edx
cmp eax, 0xffff8000
cmovl eax, ecx
mov ecx, dword [esp + 0x84]
mov word [ecx + esi*2], ax
mov eax, dword [ebp + 0x1c]
mov dword [eax + esi*4], edi
mov eax, dword [ebp + 0x20]
mov edi, dword [esp + 0x4c]
mov dword [eax + esi*4], ebx
inc esi
mov ebx, ecx
cmp esi, dword [esp + 0x44]
jb 0x4d95a0
mov esi, dword [esp + 0x78]
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
inc eax
add ecx, 0x2c
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], ecx
cmp eax, dword [esi + 0x48]
jb 0x4d9552
mov ebx, dword [esp + 0x84]
mov eax, dword [esi + 4]
mov ebp, dword [esp + 0x28]
mov edi, dword [esp + 0x2c]
lea ebx, [ebx + eax*2]