joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4828d0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x170
mov eax, dword [0x641a90]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0x170], eax
lea eax, [ebp - 0x16c]
push edi
push eax
call fcn.00457d90
mov al, byte [0x5d9108]
movq xmm0, qword [str.Raw_Grey]
mov ecx, dword [ebx + 0xe8]
mov byte [ebp - 0x7e], al
mov eax, dword [ebx + 0xec]
mov dword [ebp - 0x158], eax
lea eax, [ebp - 0x16c]
push eax
push ebx
movq qword [ebp - 0x86], xmm0
mov dword [ebp - 0x154], 0x80001
mov dword [ebp - 0x15c], ecx
mov dword [ebp - 0x14c], ecx
call fcn.00456000
movzx edi, ax
add esp, 0xc
test di, di
jne 0x4829b9
push esi
xor esi, esi
cmp dword [ebp - 0x158], esi
jle 0x4829a9
mov eax, dword [ebp - 0x170]
push dword [eax]
push 1
push dword [ebp - 0x14c]
push dword [ebp - 0x160]
call fcn.00595b79
add esp, 0x10
test eax, eax
je 0x4829a4
push 1
push 0xffffffffffffffff
push 0xffffffffffffffff
push ebx
call fcn.004585b0
movzx edi, ax
add esp, 0x10
test di, di
jne 0x4829a9
inc esi
cmp esi, dword [ebp - 0x158]
jl 0x482960
jmp 0x4829a9
mov edi, 4
push 0
push 0
push 0
push ebx
call fcn.00453f80
add esp, 0x10
pop esi
mov ecx, dword [ebp - 4]
mov ax, di
pop edi
xor ecx, ebp
pop ebx
call fcn.005920c1
mov esp, ebp
pop ebp
ret
Function at 0x483520
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x641a90]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 0xc]
lea eax, [ebp - 0x10]
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, dword [ebp + 0x10]
push dword [esi]
push 1
push 2
push eax
call fcn.00595b79
add esp, 0x10
test eax, eax
je 0x48361b
cmp byte [ebp - 0x10], 1
jne 0x48361b
cmp byte [ebp - 0xf], 0
jne 0x48361b
push 0x30
push esi
call fcn.0045d3f0
push dword [esi]
lea eax, [ebp - 0x10]
push 1
push 2
push eax
call fcn.00595b79
add esp, 0x18
test eax, eax
je 0x48361b
cmp byte [ebp - 0x10], 1
jne 0x48361b
cmp byte [ebp - 0xf], 0
jne 0x48361b
push esi
call fcn.0045d070
add esp, 4
cmp eax, 0x52000000
jne 0x48361b
push 8
push esi
call fcn.0045d3f0
push esi
call fcn.0045d070
add esp, 0xc
cmp eax, 0x10000000
jne 0x48361b
push esi
call fcn.0045d070
push esi
call fcn.0045d070
add esp, 8
cmp eax, 0xa55a0000
jne 0x48361b
push esi
call fcn.0045d240
push esi
call fcn.0045d240
push esi
call fcn.0045d240
movzx eax, ax
push esi
mov dword [edi], eax
call fcn.0045d240
movzx eax, ax
add esp, 0x10
mov dword [ebx], eax
test eax, eax
jle 0x48361b
cmp dword [edi], 0
jle 0x48361b
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005920c1
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
mov eax, 2
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005920c1
mov esp, ebp
pop ebp
ret
Function at 0x4840d0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push esi
mov esi, dword [ebp + 8]
push esi
mov dword [ebp - 4], 0
call fcn.0045d240
mov ecx, 0xffd8
add esp, 4
cmp ax, cx
je 0x4840fe
mov eax, 2
pop esi
mov esp, ebp
pop ebp
ret
push ebx
push edi
push esi
call fcn.0045d240
push esi
movzx edi, ax
call fcn.0045d240
movzx ebx, ax
add esp, 8
mov eax, 0xffe1
sub ebx, 2
cmp di, ax
jne 0x484274
test ebx, ebx
je 0x484153
push ebx
call fcn.00593e38
push dword [esi]
mov edi, eax
push ebx
push 1
push edi
call fcn.00595b79
mov edx, dword [ebp + 0xc]
push ebx
push edi
push 1
push edx
call fcn.00452460
push edi
call fcn.00592c4b
add esp, 0x28
push dword [esi]
call fcn.00595867
add esp, 4
test eax, eax
jne 0x4841b9
push esi
call fcn.0045d240
push esi
movzx ebx, ax
call fcn.0045d240
movzx edi, ax
add esp, 8
mov eax, 0xffe2
cmp bx, ax
je 0x48418e
mov eax, 0xfffe
cmp bx, ax
jne 0x484274
push esi
call fcn.0045d070
add esp, 4
cmp eax, 0x4d504600
je 0x4841b9
push 1
lea eax, [edi - 6]
push eax
push dword [esi]
call fcn.00595cb4
push dword [esi]
call fcn.00595867
add esp, 0x10
test eax, eax
je 0x484161
push dword [esi]
call fcn.005960c7
mov edi, eax
push esi
mov dword [ebp - 8], edi
call fcn.0045d070
cmp eax, 0x49492a00
mov ecx, fcn.0045d030
mov ebx, fcn.0045d070
mov edx, fcn.0045d210
cmove ebx, ecx
mov ecx, fcn.0045d240
cmove ecx, edx
push esi
mov dword [ebp - 0xc], ecx
call ebx
add esp, 0xc
cmp eax, 8
je 0x484207
push 0
add eax, edi
push eax
push dword [esi]
call fcn.00595cb4
add esp, 0xc
mov edi, dword [ebp - 0xc]
push esi
call edi
movzx eax, ax
add esp, 4
test eax, eax
je 0x4842f7
jmp 0x484220
dec eax
push esi
mov dword [ebp - 0x18], eax
call edi
movzx eax, ax
push esi
mov dword [ebp - 0x10], eax
call edi
push esi
movzx edi, ax
call ebx
lea ecx, [edi - 1]
add esp, 0xc
cmp ecx, 0xd
jae 0x4842e9
test eax, eax
je 0x4842e9
push esi
call ebx
push dword [esi]
mov edi, eax
call fcn.005960c7
mov dword [ebp - 0x14], eax
mov ecx, 0xb001
mov eax, dword [ebp - 0x10]
add esp, 8
cmp ax, cx
jne 0x484280
mov eax, dword [ebp + 0xc]
mov dword [eax + 0x3c], edi
jmp 0x4842da
pop edi
pop ebx
mov eax, 2
pop esi
mov esp, ebp
pop ebp
ret
mov ecx, 0xb002
cmp ax, cx
jne 0x4842da
mov eax, dword [ebp - 8]
push 0
add eax, edi
push eax
push dword [esi]
call fcn.00595cb4
mov eax, dword [ebp + 0xc]
xor edi, edi
add esp, 0xc
cmp dword [eax + 0x3c], edi
jle 0x4842da
push esi
call ebx
push esi
call ebx
push esi
call ebx
add esp, 0xc
test edi, edi
je 0x4842b9
add eax, dword [ebp - 8]
mov edx, dword [ebp + 0xc]
mov ecx, dword [ebp - 4]
push esi
cmp dword [edx + 0x90], edi
cmove ecx, eax
mov dword [ebp - 4], ecx
call ebx
mov eax, dword [ebp + 0xc]
inc edi
add esp, 4
cmp edi, dword [eax + 0x3c]
jl 0x4842a6
push 0
push dword [ebp - 0x14]
push dword [esi]
call fcn.00595cb4
add esp, 0xc
mov eax, dword [ebp - 0x18]
mov edi, dword [ebp - 0xc]
test eax, eax
jne 0x484220
push 0
push dword [ebp - 4]
push dword [esi]
call fcn.00595cb4
add esp, 0xc
xor eax, eax
pop edi
pop ebx
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x485d60
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x641a90]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 0x10]
lea eax, [ebp - 0x10]
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, dword [ebp + 0xc]
push dword [esi]
push 1
push 4
push eax
call fcn.00595b79
add esp, 0x10
test eax, eax
je 0x485df6
cmp byte [ebp - 0x10], 0xff
jne 0x485df6
cmp byte [ebp - 0xf], 0x57
jne 0x485df6
cmp byte [ebp - 0xe], 0x50
jne 0x485df6
cmp byte [ebp - 0xd], 0x43
jne 0x485df6
push esi
call fcn.0045d030
mov dword [edi], eax
push dword [esi]
call fcn.00597fff
add esp, 8
cmp eax, 1
jne 0x485df6
push dword [esi]
call fcn.00597fff
add esp, 4
cmp eax, 0x16
jne 0x485df6
push dword [esi]
call fcn.00597fff
mov dword [ebx], eax
push dword [esi]
call fcn.00597fff
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005920c1
mov esp, ebp
pop ebp
mov ecx, dword [ebp - 4]
mov eax, 2
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005920c1
mov esp, ebp
pop ebp
ret

Function at 0x485e10
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
mov edi, dword [ebp + 8]
lea eax, [ebp + 0xb]
push dword [edi]
push 1
push 1
push eax
call fcn.00595b79
mov al, byte [ebp + 0xb]
add esp, 0x10
cmp al, 0xff
jne 0x485e66
push esi
push edi
call fcn.0045d210
movzx esi, ax
add esp, 4
test esi, 0x8000
je 0x485e60
push edi
call fcn.0045d210
add esp, 4
movzx eax, ax
and esi, 0x7fff
shl esi, 0x10
or eax, esi
pop esi
pop edi
pop ebp
ret
mov eax, esi
pop esi
pop edi
pop ebp
ret
movzx eax, al
pop edi
pop ebp
ret
Function at 0x485e70
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push esi
xor esi, esi
cmp dword [ebp + 0x10], esi
jle 0x485f62
push ebx
mov ebx, dword [ebp + 8]
push edi
push dword [ebx]
call fcn.00597fff
mov cl, al
add esp, 4
and cl, 0x80
je 0x485ece
test al, 0x7f
je 0x485ece
push dword [ebx]
movzx esi, al
and esi, 0x7f
call fcn.00597fff
add esp, 4
test esi, esi
jle 0x485f2b
mov edi, dword [ebp + 0xc]
mov ecx, esi
movzx eax, al
mov ebx, ecx
imul eax, eax, 0x1010101
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, ebx
and ecx, 3
add dword [ebp + 0xc], esi
rep stosb byte es:[edi], al
jmp 0x485f28
test cl, cl
je 0x485f04
test al, 0x7f
jne 0x485f00
push dword [ebx]
call fcn.00597fff
mov esi, eax
add esp, 4
test esi, esi
jle 0x485f2b
mov ebx, dword [ebp + 0xc]
mov ecx, esi
mov edx, ecx
or eax, 0xffffffff
shr ecx, 2
mov edi, ebx
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
jmp 0x485f23
test cl, cl
jne 0x485f4c
test al, 0x7f
je 0x485f4c
push dword [ebx]
mov ebx, dword [ebp + 0xc]
movzx esi, al
push 1
and esi, 0x7f
push esi
push ebx
call fcn.00595b79
add esp, 0x10
test eax, eax
je 0x485f42
add ebx, esi
mov dword [ebp + 0xc], ebx
mov ebx, dword [ebp + 8]
mov eax, dword [ebp + 0x10]
sub eax, esi
mov dword [ebp + 0x10], eax
test eax, eax
jg 0x485e84
pop edi
pop ebx
xor eax, eax
pop esi
pop ebp
ret
pop edi
pop ebx
mov eax, 4
pop esi
pop ebp
ret
push dword [ebx]
call fcn.00597fff
mov ecx, dword [ebp + 0x14]
add esp, 4
pop edi
pop ebx
mov dword [ecx], eax
xor eax, eax
pop esi
pop ebp
ret
mov ax, si
pop esi
pop ebp
ret
Function at 0x487a40
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push esi
push edi
mov edi, dword [ebp + 8]
push edi
call fcn.0045d030
mov esi, dword [ebp + 0xc]
mov dword [esi], eax
lea eax, [esi + 4]
push dword [edi]
push 1
push 0xc
push eax
call fcn.00595b79
add esp, 0x14
test eax, eax
jne 0x487a72
pop edi
mov eax, 1
pop esi
pop ebp
ret
push ebx
push edi
call fcn.0045d030
push edi
mov dword [esi + 0x10], eax
call fcn.0045d030
push edi
mov dword [esi + 0x14], eax
call fcn.0045d030
push edi
mov dword [esi + 0x18], eax
call fcn.0045d030
push edi
mov dword [esi + 0x1c], eax
call fcn.0045d030
push edi
mov dword [esi + 0x20], eax
call fcn.0045d030
push edi
mov dword [esi + 0x24], eax
call fcn.0045d030
lea ecx, [ebp + 8]
mov dword [esi + 0x28], eax
push ecx
push 0
lea ebx, [esi + 0x30]
push ebx
push eax
call fcn.00487b20
add esp, 0x2c
test eax, eax
je 0x487ad3
pop ebx
pop edi
mov eax, 1
pop esi
pop ebp
ret
mov eax, dword [ebx]
mov edx, dword [esi + 0x10]
inc dword [esi + 0x14]
inc edx
shl edx, 5
mov ecx, dword [eax*4 + 0x6393c0]
mov eax, 0x1f
sub eax, dword [esi + 0x1c]
sar eax, cl
sar edx, cl
sub edx, eax
mov eax, dword [esi + 0x18]
sar eax, cl
sub edx, eax
mov dword [esi + 0x10], edx
push dword [edi]
call fcn.00595867
add esp, 4
neg eax
sbb eax, eax
neg eax
pop ebx
pop edi
pop esi
pop ebp
ret

Function at 0x489040
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push esi
mov esi, dword [ebp + 8]
push edi
push esi
call fcn.0045d240
mov edi, dword [ebp + 0xc]
mov ecx, 0x4954
add esp, 4
mov word [edi], ax
cmp ax, cx
je 0x48906a
pop edi
mov eax, 2
pop esi
pop ebp
ret
push ebx
push esi
call fcn.0045d240
mov ebx, 0x3032
mov word [edi + 2], ax
add esp, 4
cmp ax, bx
je 0x489096
mov ecx, 0x3031
cmp ax, cx
je 0x489096
pop ebx
pop edi
mov eax, 2
pop esi
pop ebp
push esi
call fcn.0045d070
push esi
mov dword [edi + 4], eax
call fcn.0045d070
push esi
mov dword [edi + 8], eax
call fcn.0045d070
push esi
mov dword [edi + 0xc], eax
call fcn.0045d070
push esi
mov dword [edi + 0x10], eax
call fcn.0045d070
push esi
mov dword [edi + 0x14], eax
call fcn.0045d070
push esi
mov dword [edi + 0x18], eax
call fcn.0045d070
push esi
mov dword [edi + 0x1c], eax
call fcn.0045d070
push esi
mov dword [edi + 0x20], eax
call fcn.0045d070
push esi
mov dword [edi + 0x24], eax
call fcn.0045d070
push esi
mov dword [edi + 0x28], eax
call fcn.0045d070
push esi
mov dword [edi + 0x2c], eax
call fcn.0045d070
add esp, 0x30
mov dword [edi + 0x30], eax
cmp word [edi + 2], bx
jne 0x489132
push dword [esi]
lea eax, [edi + 0x38]
push 1
push 8
push eax
call fcn.00595b79
push dword [esi]
lea eax, [edi + 0x40]
push 1
push 8
push eax
call fcn.00595b79
push esi
call fcn.0045d070
add esp, 0x24
push esi
call fcn.0045d070
mov dword [edi + 0x48], eax
push dword [esi]
call fcn.00595867
add esp, 8
neg eax
sbb eax, eax
and eax, 2
pop ebx
pop edi
pop esi
pop ebp
ret
Function at 0x48b390
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
mov ebx, dword [ebp + 0x18]
push esi
push edi
push ebx
xor edi, edi
call fcn.0045d070
push ebx
call fcn.0045d070
push dword [ebx]
call fcn.005960c7
push ebx
call fcn.0045d070
push ebx
call fcn.0045d070
push ebx
mov dword [ebp - 0xc], eax
call fcn.0045d070
push ebx
mov dword [ebp - 0x10], eax
call fcn.0045d070
push ebx
mov dword [ebp - 8], eax
call fcn.0045d070
push ebx
mov dword [ebp - 4], eax
call fcn.0045d240
push dword [ebx]
movzx esi, ax
call fcn.00597fff
add esp, 0x28
mov dword [ebp - 0x14], eax
cmp esi, 8
je 0x48b400
lea eax, [edi + 2]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x10]
mov esi, dword [ebp - 8]
sub esi, dword [ebp - 0xc]
mov eax, dword [ebp + 0x10]
cmp ecx, eax
mov dword [ebp - 8], esi
cmovg eax, ecx
mov dword [ebp - 4], ecx
add eax, 0x400
push eax
call fcn.00593e38
add esp, 4
mov ecx, eax
xor ebx, ebx
mov dword [ebp - 0xc], ecx
test esi, esi
mov esi, dword [ebp + 0x14]
jle 0x48b4b4
jmp 0x48b443
mov ecx, dword [ebp - 0xc]
cmp dword [ebp - 0x14], 0
jne 0x48b468
mov eax, dword [ebp + 0x18]
push dword [eax]
push 1
push dword [ebp - 4]
push ecx
call fcn.00595b79
add esp, 0x10
cmp eax, 1
je 0x48b47a
mov edi, 4
jmp 0x48b47a
push dword [ebp - 4]
push ecx
push dword [ebp + 0x18]
call fcn.0051dbf0
add esp, 0xc
movzx edi, ax
cmp ebx, esi
jge 0x48b4ae
push dword [ebp + 0x10]
push dword [ebp - 0xc]
push dword [ebp + 8]
call fcn.00592150
add esp, 0xc
test di, di
jne 0x48b4b4
push 1
push 0xffffffffffffffff
push dword [ebp + 0xc]
push dword [ebp + 0x1c]
call fcn.004585b0
movzx edi, ax
add esp, 0x10
test di, di
jne 0x48b4b4
inc ebx
cmp ebx, dword [ebp - 8]
jl 0x48b440
push dword [ebp + 0x10]
push 0
push dword [ebp + 8]
call fcn.00595760
add esp, 0xc
cmp ebx, esi
jge 0x48b4e5
sub esi, ebx
lea ebx, [ebx]
push 1
push 0xffffffffffffffff
push dword [ebp + 0xc]
push dword [ebp + 0x1c]
call fcn.004585b0
add esp, 0x10
dec esi
jne 0x48b4d0
push dword [ebp - 0xc]
call fcn.00592c4b
add esp, 4
mov ax, di
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x48e140
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push esi
mov esi, dword [ebp + 8]
push edi
push esi
call fcn.0045d030
mov edi, dword [ebp + 0xc]
push esi
mov dword [edi], eax
call fcn.0045d210
push esi
mov word [edi + 4], ax
call fcn.0045d210
mov word [edi + 6], ax
lea eax, [edi + 8]
push dword [esi]
push 1
push 8
push eax
call fcn.00595b79
push dword [esi]
call fcn.005960c7
mov ecx, dword [edi]
add esp, 0x20
add ecx, 0xfffffff0
add eax, ecx
mov dword [edi + 0x10], eax
xor eax, eax
pop edi
pop esi
pop ebp
ret

Function at 0x48e190
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push esi
mov esi, dword [ebp + 8]
push edi
push esi
call fcn.0045d030
mov edi, dword [ebp + 0xc]
push esi
mov dword [edi], eax
call fcn.0045d210
mov ecx, 0xaf11
mov word [edi + 4], ax
add esp, 8
cmp ax, cx
je 0x48e1cd
mov ecx, 0xaf12
cmp ax, cx
je 0x48e1cd
pop edi
mov eax, 2
pop esi
pop ebp
ret
push esi
call fcn.0045d210
push esi
mov word [edi + 6], ax
call fcn.0045d210
movzx eax, ax
push esi
mov dword [edi + 8], eax
call fcn.0045d210
movzx eax, ax
push esi
mov dword [edi + 0xc], eax
call fcn.0045d210
push esi
mov word [edi + 0x10], ax
call fcn.0045d210
push esi
mov word [edi + 0x12], ax
call fcn.0045d030
push esi
mov dword [edi + 0x14], eax
call fcn.0045d210
push esi
mov word [edi + 0x18], ax
call fcn.0045d030
push esi
mov dword [edi + 0x1c], eax
call fcn.0045d030
push esi
mov dword [edi + 0x20], eax
call fcn.0045d030
push esi
mov dword [edi + 0x24], eax
call fcn.0045d030
push esi
mov dword [edi + 0x28], eax
call fcn.0045d210
push esi
mov word [edi + 0x2c], ax
call fcn.0045d210
mov word [edi + 0x2e], ax
lea eax, [edi + 0x30]
push dword [esi]
push 1
push 0x26
push eax
call fcn.00595b79
add esp, 0x44
test eax, eax
jne 0x48e26d
pop edi
mov eax, 4
pop esi
pop ebp
ret
push esi
call fcn.0045d030
push esi
mov dword [edi + 0x58], eax
call fcn.0045d030
mov dword [edi + 0x5c], eax
lea eax, [edi + 0x60]
push dword [esi]
push 1
push 0x28
push eax
call fcn.00595b79
add esp, 0x18
test eax, eax
je 0x48e264
pop edi
xor eax, eax
pop esi
pop ebp
ret
Function at 0x48ec00
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
mov ebx, dword [ebp + 0x14]
xor eax, eax
mov dword [ebp - 4], eax
cmp dword [ebx + 0xc], eax
jbe 0x48ece5
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
push esi
mov esi, dword [ebp + 0xc]
push edi
mov al, byte [ebx + 1]
mov edi, edx
cmp al, 4
ja 0x48ec42
test ecx, ecx
jne 0x48ec42
push dword [esi]
movzx eax, al
push eax
push dword [ebx + 8]
push edx
call fcn.00595b79
add esp, 0x10
jmp 0x48ecb4
cmp dword [ebx + 8], 0
mov dword [ebp + 0x14], 0
jbe 0x48ecb4
nop
xor esi, esi
cmp byte [ebx + 1], 0
jbe 0x48ec81
jmp 0x48ec60
mov eax, dword [ebp + 0xc]
push dword [eax]
call fcn.00597fff
add esp, 4
cmp esi, 4
jg 0x48ec75
mov byte [edi], al
inc edi
movzx eax, byte [ebx + 1]
inc esi
cmp esi, eax
jl 0x48ec60
mov ecx, dword [ebp + 0x10]
test ecx, ecx
je 0x48ec91
push ecx
push dword [ebp + 0xc]
call fcn.0045d3f0
add esp, 8
mov eax, dword [ebp + 0xc]
push dword [eax]
call fcn.00595867
add esp, 4
test eax, eax
jne 0x48ecb1
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
inc eax
mov dword [ebp + 0x14], eax
cmp eax, dword [ebx + 8]
jb 0x48ec50
mov esi, dword [ebp + 0xc]
push 1
push 0xffffffffffffffff
push 0xffffffffffffffff
push dword [ebp + 0x1c]
call fcn.004585b0
movzx eax, ax
add esp, 0x10
test ax, ax
jne 0x48ece3
mov edx, dword [ebp - 4]
mov ecx, dword [ebp + 0x10]
inc edx
cmp edx, dword [ebx + 0xc]
mov dword [ebp - 4], edx
mov edx, dword [ebp + 8]
jb 0x48ec21
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x48f5d0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push esi
mov esi, dword [ebp + 8]
push edi
push esi
call fcn.0045d070
mov edi, dword [ebp + 0xc]
add esp, 4
mov dword [edi], eax
cmp eax, 0x802a5fd7
je 0x48f5f6
pop edi
mov eax, 2
pop esi
pop ebp
ret
push esi
call fcn.0045d070
add esp, 4
mov dword [edi + 4], eax
cmp eax, dword [esi + 4]
jae 0x48f5ed
push esi
call fcn.0045d070
add esp, 4
mov dword [edi + 8], eax
cmp eax, 0x400
jb 0x48f5ed
push esi
call fcn.0045d070
push esi
mov dword [edi + 0xc], eax
call fcn.0045d070
push esi
mov dword [edi + 0x10], eax
call fcn.0045d070
mov dword [edi + 0x14], eax
lea eax, [edi + 0x18]
push dword [esi]
push 1
push 8
push eax
call fcn.00595b79
push dword [esi]
lea eax, [edi + 0x20]
push 1
push 0x64
push eax
call fcn.00595b79
push dword [esi]
lea eax, [edi + 0x84]
push 1
push 0xc
push eax
call fcn.00595b79
push dword [esi]
lea eax, [edi + 0x90]
push 1
push 0xc
push eax
call fcn.00595b79
add esp, 0x4c
lea eax, [edi + 0x9c]
push dword [esi]
push 1
push 0x24
push eax
call fcn.00595b79
push dword [esi]
call fcn.00595867
add esp, 0x14
neg eax
sbb eax, eax
and eax, 4
pop edi
pop esi
pop ebp
ret
Function at 0x48f6b0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push esi
push edi
mov edi, dword [ebp + 8]
push dword [edi]
call fcn.00597fff
mov esi, dword [ebp + 0xc]
mov byte [esi], al
push dword [edi]
call fcn.00597fff
mov byte [esi + 1], al
push dword [edi]
call fcn.00597fff
mov byte [esi + 2], al
push dword [edi]
call fcn.00597fff
push edi
mov byte [esi + 3], al
call fcn.0045d070
push edi
mov dword [esi + 4], eax
call fcn.0045d070
mov dword [esi + 8], eax
lea eax, [esi + 0xc]
push dword [edi]
push 1
push 0x14
push eax
call fcn.00595b79
push dword [edi]
call fcn.00595867
add esp, 0x2c
neg eax
sbb eax, eax
inc eax
pop edi
pop esi
pop ebp
ret
Function at 0x48f720
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
push dword [esi]
call fcn.00597fff
mov ebx, dword [ebp + 0xc]
mov byte [ebx], al
push dword [esi]
call fcn.00597fff
mov byte [ebx + 1], al
push dword [esi]
call fcn.00597fff
mov byte [ebx + 2], al
push dword [esi]
call fcn.00597fff
mov byte [ebx + 3], al
lea edi, [ebx + 6]
add esp, 0x10
mov ebx, 8
push dword [esi]
lea eax, [edi - 2]
push 1
push 2
push eax
call fcn.00595b79
push dword [esi]
call fcn.00597fff
mov byte [edi], al
push dword [esi]
call fcn.00597fff
push esi
mov byte [edi + 1], al
call fcn.0045d070
push esi
mov dword [edi + 2], eax
call fcn.0045d070
mov dword [edi + 6], eax
lea eax, [ebp - 8]
push eax
push esi
call fcn.0045cf30
movsd xmm0, qword [ebp - 8]
lea eax, [ebp - 8]
cvtpd2ps xmm0, xmm0
push eax
push esi
movss dword [edi + 0xa], xmm0
call fcn.0045cf30
movsd xmm0, qword [ebp - 8]
lea eax, [ebp - 8]
cvtpd2ps xmm0, xmm0
push eax
push esi
movss dword [edi + 0xe], xmm0
call fcn.0045cf30
movsd xmm0, qword [ebp - 8]
lea eax, [ebp - 8]
cvtpd2ps xmm0, xmm0
push eax
push esi
movss dword [edi + 0x12], xmm0
call fcn.0045cf30
movsd xmm0, qword [ebp - 8]
lea edi, [edi + 0x1c]
cvtpd2ps xmm0, xmm0
add esp, 0x40
movss dword [edi - 6], xmm0
dec ebx
jne 0x48f761
lea eax, [ebp - 8]
push eax
push esi
call fcn.0045cf30
movsd xmm0, qword [ebp - 8]
lea eax, [ebp - 8]
mov ebx, dword [ebp + 0xc]
cvtpd2ps xmm0, xmm0
push eax
push esi
movss dword [ebx + 0xe4], xmm0
call fcn.0045cf30
movsd xmm0, qword [ebp - 8]
lea eax, [ebp - 8]
cvtpd2ps xmm0, xmm0
push eax
push esi
movss dword [ebx + 0xe8], xmm0
call fcn.0045cf30
movsd xmm0, qword [ebp - 8]
lea eax, [ebp - 8]
cvtpd2ps xmm0, xmm0
push eax
push esi
movss dword [ebx + 0xec], xmm0
call fcn.0045cf30
movsd xmm0, qword [ebp - 8]
lea eax, [ebp - 8]
cvtpd2ps xmm0, xmm0
push eax
push esi
movss dword [ebx + 0xf0], xmm0
call fcn.0045cf30
movsd xmm0, qword [ebp - 8]
lea eax, [ebp - 8]
cvtpd2ps xmm0, xmm0
push eax
push esi
movss dword [ebx + 0xf4], xmm0
call fcn.0045cf30
movsd xmm0, qword [ebp - 8]
lea eax, [ebp - 8]
cvtpd2ps xmm0, xmm0
push eax
push esi
movss dword [ebx + 0xf8], xmm0
call fcn.0045cf30
movsd xmm0, qword [ebp - 8]
lea eax, [ebp - 8]
cvtpd2ps xmm0, xmm0
push eax
push esi
movss dword [ebx + 0xfc], xmm0
call fcn.0045cf30
movsd xmm0, qword [ebp - 8]
lea eax, [ebx + 0x104]
cvtpd2ps xmm0, xmm0
add esp, 0x40
movss dword [ebx + 0x100], xmm0
push dword [esi]
push 1
push 0xc8
push eax
call fcn.00595b79
push dword [esi]
lea eax, [ebx + 0x1cc]
push 1
push 0x1c
push eax
call fcn.00595b79
push dword [esi]
call fcn.00595867
add esp, 0x24
neg eax
sbb eax, eax
inc eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret