joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4dc1b0
Capabilities:
Access peb ldr_data
Get process heap flags

Disassembly:
push 0xffffffffffffffff
push 0x638f88
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x88
push ebx
push ebp
push esi
push edi
mov edi, ecx
mov dword [esp + 0x2c], edi
xor ebx, ebx
lea esi, [edi + 0xc]
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
mov dword [esi], ebx
mov dword [esi + 4], ebx
mov dword [esp + 0xa0], ebx
mov dword [esi + 8], ebx
mov ebp, dword [esp + 0xa8]
mov ecx, dword [ebp + 4]
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + ecx + 0xac]
mov byte [esp + 0xa4], 1
call fcn.004304e0
mov ecx, eax
call fcn.0042b9b0
mov ecx, dword [eax]
sub esp, 0x18
mov dword [edi + 4], ecx
mov edx, dword [eax + 4]
mov ecx, esp
mov dword [esp + 0x2c], esp
lea eax, [esp + 0x2b]
push eax
push str.startTime
mov dword [edi + 8], edx
call fcn.00403db0
mov ecx, dword [ebp + 4]
lea ecx, [esp + ecx + 0xc0]
mov byte [esp + 0xb8], 1
call fcn.004304e0
mov ecx, eax
call fcn.0045c590
fstp dword [edi]
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x2c], esp
lea edx, [esp + 0x2b]
push edx
push str.line
call fcn.00403db0
mov ecx, dword [ebp + 4]
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + ecx + 0xc4]
mov byte [esp + 0xbc], 1
call fcn.004304e0
mov ecx, eax
call fcn.00428b50
mov byte [esp + 0xa0], 4
mov ebp, 0x5c
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx + 4]
mov ecx, dword [esp + eax + 0x18]
cmp ecx, ebx
lea eax, [esp + eax + 0x18]
je 0x4dc37a
sub esp, 0xc
mov ecx, esp
mov dword [ecx], 0x6580c8
mov edx, dword [esp + 0x24]
mov eax, dword [edx + 4]
lea edx, [esp + eax + 0x24]
mov dword [esp + 0x20], esp
push edx
call fcn.00420750
lea ecx, [esp + 0x48]
call fcn.004bc6e0
mov ecx, dword [esi + 4]
cmp ecx, dword [esi + 8]
mov byte [esp + 0xa0], 8
je 0x4dc313
mov dword [esp + 0x14], ecx
mov dword [esp + 0x24], ecx
cmp ecx, ebx
mov byte [esp + 0xa0], 9
je 0x4dc30e
push eax
call fcn.004bebf0
add dword [esi + 4], ebp
jmp 0x4dc325
push 1
push 1
lea edx, [esp + 0x1b]
push edx
push eax
push ecx
mov ecx, esi
call fcn.004d6b20
lea ecx, [esp + 0x3c]
mov byte [esp + 0xa0], 4
call fcn.004bcac0
mov ecx, dword [esp + 0x18]
mov ecx, dword [ecx + 4]
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + ecx + 0x1c]
call fcn.004304e0
mov ecx, eax
call fcn.00428c50
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0xa4], 0xa
call fcn.00422700
lea ecx, [esp + 0x30]
mov byte [esp + 0xa0], 4
call fcn.0042ce80
jmp 0x4dc2a4
lea ecx, [esp + 0x18]
mov byte [esp + 0xa0], 1
call fcn.0042ce80
lea ecx, [esp + 0xa8]
mov dword [esp + 0xa0], 0xffffffff
call fcn.0042ce80
mov ecx, dword [esp + 0x98]
mov eax, edi
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x94
ret 0xc
Function at 0x4fe5f0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x63d6b0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x10], esi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
mov edx, eax
mov dword [esi], 0x3e99999a
mov dword [esp + 0x14], eax
mov eax, ecx
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x38]
mov dword [esi + 4], edx
mov edx, dword [esp + 0x3c]
mov dword [esi + 8], eax
mov eax, ecx
mov dword [esp + 0x30], ecx
mov ecx, edx
mov dword [esp + 0x34], edx
lea edx, [esp + 0x40]
mov dword [esi + 0x10], ecx
xor ebx, ebx
push edx
lea ecx, [esi + 0x14]
mov dword [esp + 0x2c], ebx
mov dword [esi + 0xc], eax
call fcn.0049aa50
lea ebp, [esi + 0x20]
mov dword [ebp], 0x6580c8
mov dword [ebp + 4], ebx
mov eax, dword [ebp]
mov ecx, dword [eax + 4]
mov dword [ecx + ebp + 4], ebx
lea edi, [esi + 0x2c]
mov dword [edi], ebx
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
mov byte [esi + 0x38], bl
fld dword [0x663214]
fmul dword [0x6532dc]
sub esp, 8
lea ecx, [esi + 0x3c]
mov byte [esp + 0x30], 3
fstp dword [esp + 4]
fld dword [0x663214]
fmul dword [0x65cd50]
fstp dword [esp]
push ebx
push 0x40200000
call fcn.0048a010
push 0x48
call fcn.004063f0
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x28], 4
je 0x4fe6e7
mov edx, dword [esp + 0x4c]
mov ecx, dword [esi]
push 1
push edx
push ebx
push ebx
push 1
push ecx
mov ecx, eax
call fcn.00492180
jmp 0x4fe6e9
xor eax, eax
push 1
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x30], 3
call fcn.0048eed0
lea edx, [esp + 0x14]
push edx
mov ecx, ebp
mov byte [esp + 0x2c], 5
call fcn.00493570
lea ecx, [esp + 0x14]
mov byte [esp + 0x28], 3
call fcn.0048f9a0
lea eax, [esp + 0x4c]
push eax
mov ecx, edi
mov dword [esp + 0x50], 0x3f000000
call fcn.00455120
lea ecx, [esp + 0x4c]
push ecx
mov ecx, edi
mov dword [esp + 0x50], 0x3f800000
call fcn.00455120
lea edx, [esp + 0x4c]
push edx
mov ecx, edi
mov dword [esp + 0x50], 0x3f800000
call fcn.00455120
push ebx
mov ecx, edi
call fcn.00455180
lea ecx, [esp + 0x40]
mov dword [esp + 0x28], 0xffffffff
call fcn.0049ac10
mov ecx, dword [esp + 0x20]
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x1c
ret 0x20
Function at 0x50d800
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push esi
mov esi, ecx
mov al, byte [esi + 0x48]
test al, al
je 0x50d9b1
mov eax, dword [esi + 0x164]
mov ecx, dword [eax + 4]
push 0
lea ecx, [ecx + esi + 0x164]
call fcn.0048ebd0
test al, al
je 0x50d8cc
mov edx, dword [esi + 0x164]
mov eax, dword [edx + 4]
lea ecx, [eax + esi + 0x164]
call fcn.0048ea80
fld dword [0x654e5c]
mov ecx, eax
fcomp dword [ecx + 0x10]
fnstsw ax
test ah, 0x41
jp 0x50d8cc
fld dword [ecx + 0x10]
fcomp dword [ecx + 0xc]
fnstsw ax
test ah, 0x41
jp 0x50d8cc
mov ecx, dword [esi + 0x164]
mov edx, dword [ecx + 4]
lea ecx, [edx + esi + 0x164]
call fcn.0048ea80
mov ecx, eax
call fcn.00488f90
fcomp dword [0x6532dc]
fnstsw ax
test ah, 5
jp 0x50d9a9
mov eax, dword [esi + 0x164]
mov ecx, dword [eax + 4]
lea ecx, [ecx + esi + 0x164]
call fcn.0048ea80
mov ecx, eax
call fcn.00488f90
fadd st(0), st(0)
push ecx
mov ecx, 0x6c3c60
fstp dword [esp]
call fcn.00443d70
mov ecx, esi
call fcn.0050d9c0
mov ecx, 0x6c3c60
pop esi
jmp fcn.004419c0
mov edx, dword [esi + 0x170]
mov eax, dword [edx + 4]
push 0
lea ecx, [eax + esi + 0x170]
call fcn.0048ebd0
test al, al
je 0x50d98d
mov ecx, dword [esi + 0x170]
mov edx, dword [ecx + 4]
lea ecx, [edx + esi + 0x170]
call fcn.0048ea80
fld dword [0x654e5c]
mov ecx, eax
fcomp dword [ecx + 0x10]
fnstsw ax
test ah, 0x41
jp 0x50d98d
fld dword [ecx + 0x10]
fcomp dword [ecx + 0xc]
fnstsw ax
test ah, 0x41
jp 0x50d98d
mov ecx, esi
call fcn.0050d9c0
mov eax, dword [esi + 0x170]
mov ecx, dword [eax + 4]
lea ecx, [ecx + esi + 0x170]
call fcn.0048ea80
mov ecx, eax
call fcn.00488f90
fcomp dword [0x6532dc]
fnstsw ax
test ah, 5
jp 0x50d9a1
mov edx, dword [esi + 0x170]
mov eax, dword [edx + 4]
lea ecx, [eax + esi + 0x170]
call fcn.0048ea80
mov ecx, eax
call fcn.00488f90
fadd st(0), st(0)
push ecx
mov ecx, 0x6c3c60
fstp dword [esp]
call fcn.00443d70
mov ecx, esi
call fcn.0050da90
mov ecx, 0x6c3c60
pop esi
jmp fcn.004419c0
mov al, byte [esi + 0x48]
test al, al
je 0x50d9a9
cmp dword [esi + 0x4c], 1
jne 0x50d9a9
mov ecx, esi
call fcn.0050d9c0
mov ecx, esi
pop esi
jmp fcn.0050da90
mov ecx, esi
pop esi
jmp fcn.0050d9c0
pop esi
ret
Function at 0x50d9c0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6414b8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x24
push esi
mov esi, ecx
push edi
mov ecx, 0x6c3c60
call fcn.004441f0
mov eax, dword [esi]
lea ecx, [esp + 0x10]
push ecx
mov ecx, esi
call dword [eax + 0x14]
fild dword [eax + 4]
mov edx, dword [esi]
lea eax, [esp + 0x18]
push eax
fstp dword [esp + 0xc]
mov ecx, esi
call dword [edx + 0x14]
fild dword [eax]
mov ecx, dword [esp + 8]
sub esp, 0xc
mov eax, esp
mov dword [eax + 4], ecx
fstp dword [eax]
xor edi, edi
mov ecx, 0x6c3c60
mov dword [esp + 0x18], esp
mov dword [eax + 8], edi
call fcn.00440b50
mov ecx, dword [esi + 0x158]
lea edx, [esp + 0x20]
push edx
call fcn.0049aca0
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
add ecx, eax
mov dword [esp + 0x34], edi
call fcn.0044fa50
mov edi, dword [eax]
xor edx, edx
xor ecx, ecx
push edx
push ecx
mov ecx, eax
call dword [edi + 0x30]
lea ecx, [esp + 0x20]
mov dword [esp + 0x34], 0xffffffff
call fcn.00450980
lea ecx, [esi + 0x134]
call fcn.00415590
mov ecx, 0x6c3c60
call fcn.004412b0
mov ecx, dword [esp + 0x2c]
pop edi
mov dword fs:[0], ecx
pop esi
add esp, 0x30
ret

Function at 0x50da90
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6414b8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10
push esi
mov esi, ecx
push edi
mov ecx, 0x6c3c60
call fcn.004441f0
fild dword [esi + 0x148]
fild dword [esi + 0x144]
sub esp, 0xc
mov eax, esp
xor edi, edi
fstp dword [eax]
mov ecx, 0x6c3c60
mov dword [esp + 0x14], esp
fstp dword [eax + 4]
mov dword [eax + 8], edi
call fcn.00440b50
mov eax, dword [esi + 0x158]
lea ecx, [esp + 0xc]
push ecx
lea ecx, [eax + 0xc]
call fcn.0049aca0
mov edx, dword [eax]
mov ecx, dword [edx + 4]
add ecx, eax
mov dword [esp + 0x20], edi
call fcn.0044fa50
mov edi, dword [eax]
xor edx, edx
xor ecx, ecx
push edx
push ecx
mov ecx, eax
call dword [edi + 0x30]
lea ecx, [esp + 0xc]
mov dword [esp + 0x20], 0xffffffff
call fcn.00450980
lea ecx, [esi + 0x13c]
call fcn.00415590
mov ecx, 0x6c3c60
call fcn.004412b0
mov ecx, dword [esp + 0x18]
pop edi
mov dword fs:[0], ecx
pop esi
add esp, 0x1c
ret
Function at 0x51578a
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x63cfd8
push eax
mov dword fs:[0], esp
sub esp, 0x4c
push ebx
push ebp
push esi
mov esi, ecx
mov eax, dword [esi + 0x90]
mov ecx, dword [eax + 4]
push edi
lea ecx, [ecx + esi + 0x90]
call fcn.0048ea80
fld dword [0x654e5c]
mov ecx, eax
fcomp dword [ecx + 0x10]
fnstsw ax
test ah, 0x41
jp 0x5157e4
fld dword [ecx + 0x10]
fcomp dword [ecx + 0xc]
fnstsw ax
test ah, 0x41
jp 0x5157e4
fld dword [ecx + 0xc]
fcomp dword [0x654e5c]
fnstsw ax
test ah, 0x41
jne 0x5157e4
fld dword [ecx + 0x10]
fdiv dword [ecx + 0xc]
fsubr dword [0x6532d8]
fstp dword [esp + 0x10]
jmp 0x5157ec
mov dword [esp + 0x10], 0x3f800000
mov ecx, 0x6c3c60
call fcn.004441f0
mov edi, dword [esp + 0x10]
push edi
lea ecx, [esi + 0x78]
call fcn.004343f0
fiadd dword [esi + 0x68]
sub esp, 0xc
fild dword [esi + 0x64]
mov eax, esp
xor ebx, ebx
mov ecx, 0x6c3c60
mov dword [esp + 0x20], esp
mov dword [eax + 8], ebx
fstp dword [eax]
fstp dword [eax + 4]
call fcn.00440b50
push edi
lea ecx, [esi + 0x84]
call fcn.004343f0
push ecx
mov ecx, 0x6c3c60
fstp dword [esp]
call fcn.00440f00
push edi
lea ecx, [esi + 0x6c]
mov dword [esp + 0x18], 0x3f800000
call fcn.004343f0
fstp dword [esp + 0x10]
fld dword [0x6532d8]
fcomp dword [esp + 0x10]
fnstsw ax
test ah, 5
lea eax, [esp + 0x14]
jnp 0x51586e
lea eax, [esp + 0x10]
mov edx, dword [eax]
push edx
mov ecx, 0x6c3c60
call fcn.00443d70
lea eax, [esp + 0x30]
lea edi, [esi + 0x58]
push eax
mov ecx, edi
call fcn.0049aca0
mov ebp, eax
lea ecx, [esp + 0x24]
push ecx
mov ecx, edi
mov dword [esp + 0x68], ebx
call fcn.0049aca0
mov ebx, eax
lea edx, [esp + 0x18]
push edx
mov ecx, edi
mov byte [esp + 0x68], 1
call fcn.0049aca0
mov edi, eax
mov eax, dword [ebp]
mov ecx, dword [eax + 4]
add ecx, ebp
mov byte [esp + 0x64], 2
call fcn.0044fa50
mov ecx, dword [ebx]
mov ecx, dword [ecx + 4]
add ecx, ebx
mov ebp, eax
call fcn.0044fa50
mov edx, dword [edi]
mov ecx, dword [edx + 4]
add ecx, edi
mov ebx, eax
call fcn.0044fa50
lea ecx, [esp + 0x3c]
mov dword [esp + 0x14], eax
mov eax, dword [ebp]
push ecx
mov ecx, ebp
call dword [eax + 0x10]
mov eax, dword [eax + 0xc]
cdq
sub eax, edx
mov edx, dword [ebx]
sar eax, 1
mov edi, eax
lea eax, [esp + 0x4c]
push eax
mov ecx, ebx
neg edi
call dword [edx + 0x10]
mov eax, dword [eax + 8]
mov ecx, dword [esp + 0x14]
cdq
sub eax, edx
mov edx, dword [ecx]
sar eax, 1
neg eax
push edi
push eax
call dword [edx + 0x30]
lea ecx, [esp + 0x18]
mov byte [esp + 0x64], 1
call fcn.00450980
lea ecx, [esp + 0x24]
mov byte [esp + 0x64], 0
call fcn.00450980
lea ecx, [esp + 0x30]
mov dword [esp + 0x64], 0xffffffff
call fcn.00450980
mov ecx, 0x6c3c60
call fcn.004419c0
mov ecx, 0x6c3c60
call fcn.004412b0
lea ecx, [esi + 0xb8]
call fcn.00415590
lea ecx, [esi + 0x3c]
call fcn.005159a0
push 1
lea ecx, [esi + 0xc0]
call fcn.004bb6f0
mov ecx, dword [esp + 0x5c]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x58
ret
Function at 0x52055b
Capabilities:
Hide graphical window

Disassembly:
sub esp, 0xb4
mov eax, dword [0x6bd8a0]
push esi
mov esi, ecx
mov dword [esp + 0xb4], eax
mov al, byte [esi + 0xc]
test al, al
je 0x5206c8
mov eax, dword [esi + 8]
push ebx
push ebp
push edi
mov edi, dword [sym.imp.USER32.dll_SetWindowLongA]
push 0x10ca0000
push 0xfffffffffffffff0
push eax
mov byte [esi + 0xc], 0
call edi
mov ecx, dword [esi + 8]
push 0
push 0xffffffffffffffec
push ecx
call edi
mov edx, dword [esi + 8]
push 0x20
push 0x258
push 0x320
push 0x96
push 0x96
push 0xfffffffffffffffe
push edx
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [esi + 8]
push 1
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 8]
push ecx
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov edx, dword [esi + 8]
push edx
call dword [sym.imp.USER32.dll_SetFocus]
mov eax, dword [esi + 8]
mov edi, dword [sym.imp.USER32.dll_UpdateWindow]
push eax
call edi
push 1
mov ecx, 0x6c3c60
call fcn.004465b0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call edi
mov edx, dword [esi + 8]
lea ecx, [esp + 0x14]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetClientRect]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
mov edi, ecx
sub edi, edx
mov edx, dword [esp + 0x14]
mov ebx, edx
sub ebx, eax
sub eax, edx
cdq
sub eax, edx
sar eax, 1
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0x10]
cdq
sub eax, edx
mov ebp, eax
mov eax, dword [esp + 0x10]
sar ebp, 1
sub ebp, eax
mov eax, dword [esp + 0x20]
sub eax, ecx
cdq
sub eax, edx
mov ecx, eax
mov eax, dword [esi + 0x14]
cdq
sub eax, edx
add edi, 0x258
add ebx, 0x320
sar ecx, 1
sar eax, 1
lea edx, [esp + 0x24]
push edx
push 0xffffffffffffffff
sub eax, ecx
push 0
mov dword [esp + 0x1c], eax
mov word [esp + 0x54], 0x9c
call dword [sym.imp.USER32.dll_EnumDisplaySettingsA]
mov eax, dword [esp + 0x90]
add ebx, 0x320
cmp eax, 0x320
push 0x20
jne 0x5206a1
mov ecx, dword [esi + 8]
lea eax, [edi + 0x258]
push eax
push ebx
neg edi
push edi
push 0
push 0xfffffffffffffffe
push ecx
jmp 0x5206b5
mov edx, dword [esp + 0x14]
mov eax, dword [esi + 8]
add edi, 0x258
push edi
push ebx
push edx
push ebp
push 0xfffffffffffffffe
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
mov ecx, dword [esi + 8]
push ecx
call dword [sym.imp.USER32.dll_UpdateWindow]
pop edi
pop ebp
pop ebx
mov ecx, dword [esp + 0xb4]
pop esi
call fcn.006122a5
add esp, 0xb4
ret
Function at 0x52c328
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6431f0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push esi
mov esi, ecx
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 4]
lea edx, [esp + ecx + 0x20]
push edx
lea ecx, [esp + 8]
mov dword [esp + 0x1c], 0
mov dword [esp + 8], 0x6580c8
call fcn.0045eac0
mov eax, dword [esp + 4]
mov ecx, dword [eax + 4]
lea ecx, [esp + ecx + 4]
mov byte [esp + 0x18], 1
call fcn.0045e7c0
mov ecx, dword [eax + 0x30]
mov dword [esi + 4], ecx
mov edx, dword [eax + 0x34]
lea ecx, [esp + 4]
mov dword [esi + 8], edx
mov byte [esi + 0xc], 1
mov byte [esp + 0x18], 0
call fcn.0042ce80
lea ecx, [esp + 0x20]
mov dword [esp + 0x18], 0xffffffff
call fcn.0042ce80
mov ecx, dword [esp + 0x10]
pop esi
mov dword fs:[0], ecx
add esp, 0x18
ret 0xc
Function at 0x531830
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x64399f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
push ebx
push esi
mov esi, ecx
xor ebx, ebx
push edi
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], ebx
cmp dword [esp + 0x30], ebx
mov dword [esp + 0x1c], ebx
je 0x531878
lea ecx, [esi + 0x14]
mov dword [esi + 4], 0x671378
call fcn.0040b080
mov dword [esp + 0xc], 1
mov eax, dword [esi + 4]
mov ecx, dword [eax + 4]
mov dword [esi + ecx + 4], vtable.Interface.0
mov edx, dword [esi + 4]
mov dword [esi], vtable.XmlMisc.1.0
mov eax, dword [edx + 4]
lea edi, [esi + 8]
mov dword [eax + esi + 4], vtable.XmlMisc.0
mov dword [edi], ebx
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
mov ecx, dword [esp + 0x24]
mov ecx, dword [ecx + 4]
lea ecx, [esp + ecx + 0x24]
mov dword [esp + 0x1c], 2
call fcn.0044fa50
add eax, 8
push eax
mov ecx, edi
call fcn.005318f0
lea ecx, [esp + 0x24]
mov dword [esp + 0x1c], 0xffffffff
call fcn.0048fd00
mov ecx, dword [esp + 0x14]
pop edi
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x14
ret 0x10
Function at 0x539f50
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6446ec
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
mov eax, dword [esp + 0x44]
push esi
push edi
xor edi, edi
cmp eax, edi
mov esi, ecx
mov dword [esp + 0xc], edi
je 0x539f88
lea ecx, [esi + 0x60]
mov dword [esi], 0x666cbc
call fcn.0040b080
mov eax, dword [esi]
mov ecx, dword [eax + 4]
mov dword [esi + ecx], vtable.Interface.0
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, dword [esp + 0x20]
mov dword [esi + eax], vtable.WaterTransporter.0
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x28]
mov dword [esi + 4], 0x3d4ccccd
mov dword [esi + 8], 0x3f19999a
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov dword [esi + 0x18], edi
mov dword [esi + 0x1c], edi
mov dword [esi + 0x44], edi
mov dword [esi + 0x48], edi
mov dword [esi + 0x10], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esi + 0x18], edx
mov edx, dword [esp + 0x38]
mov dword [esi + 0x1c], ecx
mov ecx, dword [esp + 0x48]
mov dword [esi + 0x14], eax
mov eax, dword [esp + 0x3c]
mov dword [esi + 0x34], edx
mov dword [esi + 0xc], ecx
mov ecx, dword [esp + 0x40]
mov dword [esi + 0x30], eax
mov dword [esi + 0x3c], edi
mov edx, dword [esi + 0x10]
mov dword [esi + 0x20], edx
mov eax, dword [esi + 0x18]
mov edx, dword [esp + 0x44]
mov dword [esi + 0x24], eax
mov eax, dword [esp + 0x30]
mov dword [esi + 0x28], ecx
mov ecx, dword [esp + 0x34]
mov dword [esi + 0x2c], edx
mov dword [esi + 0x38], edi
mov dword [esi + 0x44], eax
mov edx, eax
mov dword [esi + 0x48], ecx
mov dword [esi + 0x4c], edx
call fcn.006122e1
mov dword [esp + 0x30], eax
fild dword [esp + 0x30]
fmul dword [0x656298]
fmul dword [0x662668]
call fcn.00611c14
mov ecx, dword [esp + 0x10]
shl eax, 1
mov dword [esp + 0x30], eax
fild dword [esp + 0x30]
mov dword [esi + 0x58], edi
mov dword [esi + 0x54], edi
mov dword [esi + 0x5c], edi
fsubr dword [0x6532d8]
pop edi
mov eax, esi
fstp dword [esi + 0x50]
mov dword fs:[0], ecx
pop esi
add esp, 0x14
ret 0x30
Function at 0x53e200
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x644b78
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x30]
mov esi, ecx
lea eax, [esp + 0x30]
push eax
mov ecx, edi
mov dword [esp + 0x18], esi
call fcn.005e2e40
xor ebx, ebx
mov dword [esi], ebx
mov dword [esi + 4], ebx
mov dword [esi + 8], ebx
mov dword [esi + 0xc], ebx
mov dword [esi + 0x10], ebx
mov ecx, dword [edi]
mov eax, dword [edi + 8]
mov edx, dword [edi + 4]
mov ebp, dword [edi + 0xc]
sub eax, ecx
sar eax, 2
shl eax, 5
sub eax, edx
add eax, ebp
push eax
mov ecx, esi
mov dword [esp + 0x2c], ebx
call fcn.0048bee0
mov edx, dword [edi + 0xc]
mov ecx, dword [edi + 8]
mov ebp, dword [edi]
mov edi, dword [edi + 4]
push ebx
mov ebx, dword [esi]
lea eax, [esp + 0x17]
push eax
sub esp, 8
mov eax, esp
push edx
push ecx
push edi
mov dword [eax], ebx
mov ebx, dword [esi + 4]
lea ecx, [esp + 0x34]
push ebp
push ecx
mov dword [eax + 4], ebx
call fcn.0053e2b0
mov ecx, dword [esp + 0x44]
add esp, 0x24
pop edi
mov eax, esi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x1c
ret 4
Function at 0x54a510
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x645d08
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1c
push ebx
xor ebx, ebx
push esi
mov esi, ecx
mov byte [esp + 8], bl
mov byte [esp + 9], bl
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
lea eax, [esi + 0x28]
push eax
lea ecx, [esp + 0xc]
mov dword [esp + 0x30], ebx
call fcn.00419ab0
mov eax, dword [esp + 0xc]
cmp eax, ebx
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esi + 0x20], ecx
mov dword [esi + 0x24], edx
je 0x54a584
cmp byte [esp + 8], bl
je 0x54a584
push eax
call fcn.00611c89
add esp, 4
mov ecx, dword [esp + 0x24]
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x28
ret
Function at 0x553930
Capabilities:
Access peb ldr_data

Disassembly:
fld dword [0x654e5c]
mov eax, dword fs:[0]
fcomp dword [esp + 8]
push 0xffffffffffffffff
push 0x646700
push eax
mov dword fs:[0], esp
sub esp, 0x1c
fnstsw ax
push esi
test ah, 0x41
mov esi, ecx
jp 0x55397c
fld dword [esp + 0x34]
fcomp dword [esp + 0x38]
fnstsw ax
test ah, 0x41
jp 0x55397c
fld dword [esp + 0x38]
fcomp dword [0x6532d8]
fnstsw ax
test ah, 0x41
jnp 0x5539cb
push 0x71
push str.c:work_fishdom_aqua_gamePartialTexture.h
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x2c], esp
lea eax, [esp + 0x50]
push eax
push str.0.0f___src.xStart__src.xStart___src.xEnd__src.xEnd___1.0f
call fcn.00403db0
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x40], esp
lea edx, [esp + 0x68]
push edx
push str.Assertion_failed
mov dword [esp + 0x68], 0
call fcn.00403db0
mov dword [esp + 0x60], 0xffffffff
call fcn.00405c50
add esp, 0x38
fld dword [0x654e5c]
fcomp dword [esp + 0x3c]
fnstsw ax
test ah, 0x41
jp 0x5539fc
fld dword [esp + 0x3c]
fcomp dword [esp + 0x40]
fnstsw ax
test ah, 0x41
jp 0x5539fc
fld dword [esp + 0x40]
fcomp dword [0x6532d8]
fnstsw ax
test ah, 0x41
jnp 0x553a4b
push 0x72
push str.c:work_fishdom_aqua_gamePartialTexture.h
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x2c], esp
lea eax, [esp + 0x50]
push eax
push str.0.0f___src.yStart__src.yStart___src.yEnd__src.yEnd___1.0f
call fcn.00403db0
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x40], esp
lea edx, [esp + 0x68]
push edx
push str.Assertion_failed
mov dword [esp + 0x68], 1
call fcn.00403db0
mov dword [esp + 0x60], 0xffffffff
call fcn.00405c50
add esp, 0x38
mov eax, dword [esi + 8]
mov ecx, dword [eax + 4]
lea ecx, [ecx + esi + 8]
call fcn.0044fa50
mov edx, dword [eax]
lea ecx, [esp + 0x10]
push ecx
mov ecx, eax
call dword [edx + 0x10]
fild dword [esi + 0x30]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x20]
fstp dword [esp + 4]
fild dword [esi + 0x28]
fstp dword [esp + 8]
fild dword [esp + 0x1c]
fstp dword [esp + 0xc]
fld dword [esp + 4]
fmul dword [esp + 0x40]
fadd dword [esp + 8]
fdiv dword [esp + 0xc]
fld dword [esp + 4]
fmul dword [esp + 0x3c]
fadd dword [esp + 8]
fdiv dword [esp + 0xc]
fild dword [esi + 0x2c]
fild dword [esi + 0x24]
pop esi
fstp dword [esp + 8]
fild dword [esp + 0x14]
fstp dword [esp + 4]
fld dword [esp + 0x34]
fmul st(1)
fadd dword [esp + 8]
fdiv dword [esp + 4]
fxch st(1)
fmul dword [esp + 0x30]
fadd dword [esp + 8]
fdiv dword [esp + 4]
fstp dword [eax]
fstp dword [eax + 4]
fstp dword [eax + 8]
fstp dword [eax + 0xc]
mov dword fs:[0], ecx
add esp, 0x28
ret 0x14