joyce8/EMBER2024-capa huggingface dataset:
Function at 0x401370
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4cc870
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push esi
push edi
mov esi, ecx
sub esp, 0x14
mov eax, esp
mov dword [eax], 0x4d3300
mov ecx, dword [esp + 0x5c]
mov dword [eax + 4], ecx
mov edx, dword [esp + 0x60]
mov dword [eax + 8], edx
mov ecx, dword [esp + 0x64]
mov dword [eax + 0xc], ecx
mov edx, dword [esp + 0x68]
mov dword [eax + 0x10], edx
mov edi, dword [esp + 0x30]
mov dword [esp + 0x1c], esp
sub esp, 0x14
mov eax, esp
mov dword [eax], 0x4d3300
mov ecx, dword [esp + 0x5c]
mov dword [eax + 4], ecx
mov edx, dword [esp + 0x60]
mov dword [eax + 8], edx
mov ecx, dword [esp + 0x64]
mov dword [eax + 0xc], ecx
mov edx, dword [esp + 0x68]
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x30], esp
mov dword [eax + 0x10], edx
mov eax, dword [esp + 0x54]
mov edx, dword [esp + 0x4c]
push eax
push ecx
push edx
push edi
mov ecx, esi
mov dword [esp + 0x4c], 1
call fcn.0045a540
mov ecx, dword [esp + 0x54]
cdq
sub eax, edx
sar eax, 1
sub ecx, eax
push ecx
push edi
mov ecx, esi
call fcn.00401290
lea ecx, [esp + 0x30]
mov byte [esp + 0x14], 0
call fcn.00456920
lea ecx, [esp + 0x44]
mov dword [esp + 0x14], 0xffffffff
call fcn.00456920
mov ecx, dword [esp + 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
add esp, 0x10
ret 0x3c

Function at 0x403870
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x4cca00
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x28
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x40]
mov dword [ecx + 0x2ac], eax
mov eax, dword [esp + 0x44]
mov dword [ecx + 0x2b0], edx
mov edx, dword [esp + 0x48]
mov dword [ecx + 0x2b4], eax
mov eax, 0x4d3300
mov dword [esp + 0x30], 0
mov dword [ecx + 0x2b8], edx
mov dword [esp], eax
fld dword [esp + 0x3c]
fmul qword [0x4d3448]
mov dword [esp + 0x14], eax
mov byte [esp + 0x30], 1
fst dword [esp + 4]
fld dword [esp + 0x40]
fmul qword [0x4d3448]
fst dword [esp + 8]
fld dword [esp + 0x44]
fmul qword [0x4d3448]
fst dword [esp + 0xc]
mov edx, dword [esp + 0xc]
fld dword [esp + 0x48]
mov dword [ecx + 0x1c4], edx
fmul qword [0x4d3440]
fstp dword [esp + 0x10]
mov eax, dword [esp + 0x10]
fld st(2)
mov dword [esp + 0x24], eax
fstp dword [esp + 0x18]
fld st(1)
fstp dword [esp + 0x1c]
fstp dword [esp + 0x20]
fxch st(1)
fstp dword [ecx + 0x1bc]
fstp dword [ecx + 0x1c0]
fld dword [esp + 0x10]
fst dword [ecx + 0x1c8]
fcomp qword [0x4d33b0]
fnstsw ax
test ah, 0x44
jnp 0x403950
mov eax, 1
jmp 0x403952
xor eax, eax
mov byte [ecx + 0x204], al
lea ecx, [esp + 0x14]
call fcn.00456920
lea ecx, [esp]
mov byte [esp + 0x30], 0
call fcn.00456920
lea ecx, [esp + 0x38]
mov dword [esp + 0x30], 0xffffffff
call fcn.00456920
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
add esp, 0x34
ret 0x14
Function at 0x409ba0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4ccc18
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x14
mov eax, esp
mov dword [eax], 0x4d3300
mov edx, dword [esp + 0x38]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x3c]
mov dword [eax + 8], edx
mov edx, dword [esp + 0x40]
mov dword [eax + 0xc], edx
mov edx, dword [esp + 0x44]
mov dword [eax + 0x10], edx
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x14], esp
push eax
mov eax, dword [esp + 0x2c]
push edx
push eax
mov dword [esp + 0x2c], 0
call fcn.0045ab60
lea ecx, [esp + 0x20]
mov dword [esp + 0xc], 0xffffffff
call fcn.00456920
mov ecx, dword [esp + 4]
mov dword fs:[0], ecx
add esp, 0x10
ret 0x20

Function at 0x409c20
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4ccc18
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push esi
push edi
mov esi, ecx
mov edi, dword [esp + 0x1c]
sub esp, 0x14
mov eax, esp
mov dword [eax], 0x4d3300
mov ecx, dword [esp + 0x40]
mov dword [eax + 4], ecx
mov edx, dword [esp + 0x44]
mov dword [eax + 8], edx
mov ecx, dword [esp + 0x48]
mov dword [eax + 0xc], ecx
mov edx, dword [esp + 0x4c]
mov dword [eax + 0x10], edx
mov eax, dword [esp + 0x38]
mov dword [esp + 0x1c], esp
push eax
push edi
mov ecx, esi
mov dword [esp + 0x30], 0
call fcn.0045a540
mov ecx, dword [esp + 0x38]
cdq
sub eax, edx
sar eax, 1
sub ecx, eax
push ecx
push edi
mov ecx, esi
call fcn.0045ab60
lea ecx, [esp + 0x28]
mov dword [esp + 0x14], 0xffffffff
call fcn.00456920
mov ecx, dword [esp + 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
add esp, 0x10
ret 0x20

Function at 0x409cc0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4ccc18
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push esi
push edi
mov esi, ecx
mov edi, dword [esp + 0x1c]
sub esp, 0x14
mov eax, esp
mov dword [eax], 0x4d3300
mov ecx, dword [esp + 0x40]
mov dword [eax + 4], ecx
mov edx, dword [esp + 0x44]
mov dword [eax + 8], edx
mov ecx, dword [esp + 0x48]
mov dword [eax + 0xc], ecx
mov edx, dword [esp + 0x4c]
mov dword [eax + 0x10], edx
mov eax, dword [esp + 0x38]
mov dword [esp + 0x1c], esp
push eax
push edi
mov ecx, esi
mov dword [esp + 0x30], 0
call fcn.0045a540
mov ecx, dword [esp + 0x38]
sub ecx, eax
push ecx
push edi
mov ecx, esi
call fcn.0045ab60
lea ecx, [esp + 0x28]
mov dword [esp + 0x14], 0xffffffff
call fcn.00456920
mov ecx, dword [esp + 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
add esp, 0x10
ret 0x20
Function at 0x409d60
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4ccc40
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push esi
push edi
mov esi, ecx
sub esp, 0x14
mov eax, esp
mov dword [eax], 0x4d3300
mov ecx, dword [esp + 0x5c]
mov dword [eax + 4], ecx
mov edx, dword [esp + 0x60]
mov dword [eax + 8], edx
mov ecx, dword [esp + 0x64]
mov dword [eax + 0xc], ecx
mov edx, dword [esp + 0x68]
mov dword [eax + 0x10], edx
mov edi, dword [esp + 0x30]
mov dword [esp + 0x1c], esp
sub esp, 0x14
mov eax, esp
mov dword [eax], 0x4d3300
mov ecx, dword [esp + 0x5c]
mov dword [eax + 4], ecx
mov edx, dword [esp + 0x60]
mov dword [eax + 8], edx
mov ecx, dword [esp + 0x64]
mov dword [eax + 0xc], ecx
mov edx, dword [esp + 0x68]
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x30], esp
mov dword [eax + 0x10], edx
mov eax, dword [esp + 0x54]
mov edx, dword [esp + 0x4c]
push eax
push ecx
push edx
push edi
mov ecx, esi
mov dword [esp + 0x4c], 1
call fcn.0045a540
mov ecx, dword [esp + 0x54]
sub ecx, eax
push ecx
push edi
mov ecx, esi
call fcn.00401290
lea ecx, [esp + 0x30]
mov byte [esp + 0x14], 0
call fcn.00456920
lea ecx, [esp + 0x44]
mov dword [esp + 0x14], 0xffffffff
call fcn.00456920
mov ecx, dword [esp + 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
add esp, 0x10
ret 0x3c

Function at 0x40b250
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4cccb8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x14
mov eax, esp
mov dword [eax], 0x4d3300
mov edx, dword [esp + 0x34]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x38]
mov dword [eax + 8], edx
mov edx, dword [esp + 0x3c]
mov dword [eax + 0xc], edx
mov edx, dword [esp + 0x40]
mov dword [eax + 0x10], edx
mov eax, dword [ecx + 0xcc]
cdq
sub eax, edx
sar eax, 1
mov dword [esp + 0x14], esp
mov dword [esp + 0x14], eax
mov eax, dword [ecx + 0xc8]
fild dword [esp + 0x14]
cdq
sub eax, edx
sub esp, 8
fsubr dword [esp + 0x34]
sar eax, 1
mov dword [esp + 0x34], eax
mov dword [esp + 0x28], 0
fstp dword [esp + 4]
fild dword [esp + 0x34]
fsubr dword [esp + 0x30]
fstp dword [esp]
call fcn.00460a20
lea ecx, [esp + 0x1c]
mov dword [esp + 0xc], 0xffffffff
call fcn.00456920
mov ecx, dword [esp + 4]
mov dword fs:[0], ecx
add esp, 0x10
ret 0x1c

Function at 0x40b300
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x4cccb8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
fild dword [esp + 0x18]
sub esp, 0x14
mov eax, esp
mov dword [eax], 0x4d3300
mov edx, dword [esp + 0x34]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x38]
mov dword [esp + 0x14], esp
sub esp, 8
mov dword [eax + 8], edx
fstp dword [esp + 4]
mov edx, dword [esp + 0x44]
fild dword [esp + 0x30]
mov dword [eax + 0xc], edx
mov edx, dword [esp + 0x48]
fstp dword [esp]
mov dword [esp + 0x28], 0
mov dword [eax + 0x10], edx
call fcn.0040b250
lea ecx, [esp + 0x1c]
mov dword [esp + 0xc], 0xffffffff
call fcn.00456920
mov ecx, dword [esp + 4]
mov dword fs:[0], ecx
add esp, 0x10
ret 0x1c
Function at 0x41d640
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4ce323
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
mov eax, dword [esp + 0x28]
push esi
mov esi, ecx
push eax
mov dword [esp + 8], esi
call fcn.00419230
push 0xd4
mov dword [esp + 0x28], 0
mov dword [esi], 0x4d44a0
mov dword [esi + 0x868], 0x4d4490
call fcn.004bdcbb
add esp, 4
mov dword [esp + 0x2c], eax
test eax, eax
mov byte [esp + 0x24], 1
je 0x41d6b6
mov ecx, dword [esi + 0x87c]
mov edx, dword [ecx + 0x174]
push str.textures_racetext1.png
push edx
mov ecx, eax
call fcn.004607e0
jmp 0x41d6b8
xor eax, eax
push 0x3f72f2f3
push 0
push 0x3f6aeaeb
lea ecx, [esp + 0x14]
mov byte [esp + 0x30], 0
mov dword [esi + 0x29cc], eax
mov dword [esi + 0x29d0], 0x4d4470
call fcn.004568d0
mov ecx, dword [eax + 4]
mov dword [esi + 0x29f0], ecx
mov edx, dword [eax + 8]
mov dword [esi + 0x29f4], edx
mov ecx, dword [eax + 0xc]
mov dword [esi + 0x29f8], ecx
mov edx, dword [eax + 0x10]
mov eax, dword [esi + 0x29f0]
mov dword [esi + 0x29fc], edx
mov dword [esi + 0x29dc], eax
mov ecx, dword [esi + 0x29f4]
mov dword [esi + 0x29e0], ecx
mov edx, dword [esi + 0x29f8]
mov dword [esi + 0x29e4], edx
mov eax, dword [esi + 0x29fc]
lea ecx, [esp + 8]
mov dword [esi + 0x29e8], eax
call fcn.00456920
push 0x3f800000
push 0x3f48c8c9
push 0x3f800000
lea ecx, [esp + 0x14]
call fcn.004568d0
mov ecx, dword [eax + 4]
mov dword [esi + 0x1520], ecx
mov edx, dword [eax + 8]
mov dword [esi + 0x1524], edx
mov ecx, dword [eax + 0xc]
mov dword [esi + 0x1528], ecx
mov edx, dword [eax + 0x10]
lea ecx, [esp + 8]
mov dword [esi + 0x152c], edx
call fcn.00456920
push 0x3f2eaeaf
push 0
push 0x3f28a8a9
lea ecx, [esp + 0x14]
call fcn.004568d0
mov ecx, dword [eax + 4]
mov dword [esi + 0x29dc], ecx
mov edx, dword [eax + 8]
mov dword [esi + 0x29e0], edx
mov ecx, dword [eax + 0xc]
mov dword [esi + 0x29e4], ecx
mov edx, dword [eax + 0x10]
lea ecx, [esp + 8]
mov dword [esi + 0x29e8], edx
call fcn.00456920
mov eax, dword [esi + 0x14]
mov ecx, dword [eax + 0x1dc]
push 0x3f800000
push 0
mov dword [esi + 0x870], ecx
push 0x3f800000
lea ecx, [esp + 0x14]
call fcn.004568d0
mov edx, dword [eax + 4]
mov dword [esi + 0x150c], edx
mov ecx, dword [eax + 8]
mov dword [esi + 0x1510], ecx
mov edx, dword [eax + 0xc]
mov dword [esi + 0x1514], edx
mov eax, dword [eax + 0x10]
lea ecx, [esp + 8]
mov dword [esi + 0x1518], eax
call fcn.00456920
push str.BEGINNERRACE
mov ecx, esi
call fcn.0040a220
mov ecx, dword [esp + 0x1c]
mov dword [esi + 0x4388], 0x4d4450
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0x24
ret 4
Function at 0x41d860
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4cd8c9
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
mov eax, dword [esp + 0x28]
push ebx
push esi
mov esi, ecx
push eax
mov dword [esp + 0xc], esi
call fcn.00419230
xor ebx, ebx
push 0xd4
mov dword [esp + 0x2c], ebx
mov dword [esi], 0x4d45a8
mov dword [esi + 0x868], 0x4d4590
call fcn.004bdcbb
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x28], 1
je 0x41d8d5
mov ecx, dword [esi + 0x87c]
mov edx, dword [ecx + 0x174]
push str.textures_racetext3.png
push edx
mov ecx, eax
call fcn.004607e0
jmp 0x41d8d7
xor eax, eax
push 0x3f2dadae
push 0x3e848485
push 0x3e048485
lea ecx, [esp + 0x18]
mov byte [esp + 0x34], bl
mov dword [esi + 0x29cc], eax
mov dword [esi + 0x29d0], 0x4d456c
call fcn.004568d0
mov ecx, dword [eax + 4]
mov dword [esi + 0x29f0], ecx
mov edx, dword [eax + 8]
mov dword [esi + 0x29f4], edx
mov ecx, dword [eax + 0xc]
mov dword [esi + 0x29f8], ecx
mov edx, dword [eax + 0x10]
mov eax, dword [esi + 0x29f0]
mov dword [esi + 0x29fc], edx
mov dword [esi + 0x29dc], eax
mov ecx, dword [esi + 0x29f4]
mov dword [esi + 0x29e0], ecx
mov edx, dword [esi + 0x29f8]
mov dword [esi + 0x29e4], edx
mov eax, dword [esi + 0x29fc]
lea ecx, [esp + 0xc]
mov dword [esi + 0x29e8], eax
call fcn.00456920
push 0x3f800000
push 0x3f43c3c4
push 0x3f058586
lea ecx, [esp + 0x18]
call fcn.004568d0
mov ecx, dword [eax + 4]
mov dword [esi + 0x1520], ecx
mov edx, dword [eax + 8]
mov dword [esi + 0x1524], edx
mov ecx, dword [eax + 0xc]
mov dword [esi + 0x1528], ecx
mov edx, dword [eax + 0x10]
lea ecx, [esp + 0xc]
mov dword [esi + 0x152c], edx
call fcn.00456920
push 0x10d0
call fcn.004bdcbb
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x28], 2
je 0x41d9da
mov ecx, dword [esi + 0x87c]
mov edx, dword [ecx + 0x174]
push str.LevelsLevel2_Bridge
push edx
mov ecx, eax
call fcn.00464c30
jmp 0x41d9dc
xor eax, eax
push 0x10d0
mov byte [esp + 0x2c], bl
mov dword [esi + 0x43b0], eax
call fcn.004bdcbb
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x28], 3
je 0x41da10
mov ecx, dword [esi + 0x43b0]
push ecx
mov ecx, eax
call fcn.004687a0
jmp 0x41da12
xor eax, eax
mov edx, dword [esi + 0x43b0]
push edx
mov ecx, eax
mov byte [esp + 0x2c], bl
mov dword [esi + 0x43b4], eax
call fcn.00468920
push 0x3f800000
push ebx
push ebx
lea ecx, [esp + 0x18]
mov dword [esi + 0x43c4], 0x42340000
mov dword [esi + 0x43c8], ebx
mov dword [esi + 0x43cc], 0x32
call fcn.004568d0
mov ecx, dword [eax + 4]
mov dword [esi + 0x150c], ecx
mov edx, dword [eax + 8]
mov dword [esi + 0x1510], edx
mov ecx, dword [eax + 0xc]
mov dword [esi + 0x1514], ecx
mov edx, dword [eax + 0x10]
lea ecx, [esp + 0xc]
mov dword [esi + 0x1518], edx
call fcn.00456920
push str.INTERMEDIATERACE
mov ecx, esi
call fcn.0040a220
mov ecx, dword [esp + 0x20]
mov dword [esi + 0x4388], 0x4d4530
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x24
ret 4
Function at 0x4216f0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4cddde
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
mov eax, dword [esp + 0x28]
push esi
mov esi, ecx
push eax
mov dword [esp + 8], esi
call fcn.00419230
push fcn.00456970
push 0x40a970
push 8
push 0x418
lea ecx, [esi + 0x43b0]
push ecx
mov dword [esp + 0x38], 0
mov dword [esi], 0x4d5140
call fcn.004be699
push 0xd4
mov byte [esp + 0x28], 1
mov dword [esi + 0x868], 0x4d512c
call fcn.004bdcbb
add esp, 4
mov dword [esp + 0x2c], eax
test eax, eax
mov byte [esp + 0x24], 2
je 0x421788
mov edx, dword [esi + 0x87c]
mov ecx, dword [edx + 0x174]
push str.textures_racetext2.png
push ecx
mov ecx, eax
call fcn.004607e0
jmp 0x42178a
xor eax, eax
push 0
push 0x3ef4f4f5
push 0x3f73f3f4
lea ecx, [esp + 0x14]
mov byte [esp + 0x30], 1
mov dword [esi + 0x29cc], eax
mov dword [esi + 0x29d0], 0x4d510c
call fcn.004568d0
mov edx, dword [eax + 4]
mov dword [esi + 0x29f0], edx
mov ecx, dword [eax + 8]
mov dword [esi + 0x29f4], ecx
mov edx, dword [eax + 0xc]
mov ecx, dword [esi + 0x29f0]
mov dword [esi + 0x29f8], edx
mov eax, dword [eax + 0x10]
mov dword [esi + 0x29fc], eax
mov dword [esi + 0x29dc], ecx
mov edx, dword [esi + 0x29f4]
mov dword [esi + 0x29e0], edx
mov eax, dword [esi + 0x29f8]
mov dword [esi + 0x29e4], eax
mov ecx, dword [esi + 0x29fc]
mov dword [esi + 0x29e8], ecx
lea ecx, [esp + 8]
call fcn.00456920
push 0x3ef8f8f9
push 0x3f3dbdbe
push 0x3f800000
lea ecx, [esp + 0x14]
call fcn.004568d0
mov edx, dword [eax + 4]
mov dword [esi + 0x1520], edx
mov ecx, dword [eax + 8]
mov dword [esi + 0x1524], ecx
mov edx, dword [eax + 0xc]
mov dword [esi + 0x1528], edx
mov eax, dword [eax + 0x10]
lea ecx, [esp + 8]
mov dword [esi + 0x152c], eax
call fcn.00456920
mov ecx, dword [esi + 0x14]
mov edx, dword [ecx + 0x1dc]
push 0x3e800000
push 0x3f400000
push 0x3f800000
lea ecx, [esp + 0x14]
mov dword [esi + 0x870], edx
call fcn.004568d0
mov ecx, dword [eax + 4]
mov dword [esi + 0x150c], ecx
mov edx, dword [eax + 8]
mov dword [esi + 0x1510], edx
mov ecx, dword [eax + 0xc]
mov dword [esi + 0x1514], ecx
mov edx, dword [eax + 0x10]
lea ecx, [esp + 8]
mov dword [esi + 0x1518], edx
call fcn.00456920
push str.CASCADERACE
mov ecx, esi
call fcn.0040a220
mov ecx, dword [esp + 0x1c]
mov dword [esi + 0x4388], 0x4d50f0
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0x24
ret 4
Function at 0x4245f0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4ce0c8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
mov eax, dword [esp + 0x28]
push esi
mov esi, ecx
push eax
mov dword [esp + 8], esi
call fcn.004230d0
push 0x3f72f2f3
push 0
push 0x3f6aeaeb
lea ecx, [esp + 0x14]
mov dword [esp + 0x30], 0
mov dword [esi], 0x4d5518
mov dword [esi + 0x868], 0x4d54fc
mov dword [esi + 0x4388], 0x4d4450
call fcn.004568d0
mov ecx, dword [eax + 4]
mov dword [esi + 0x29f0], ecx
mov edx, dword [eax + 8]
mov dword [esi + 0x29f4], edx
mov ecx, dword [eax + 0xc]
mov dword [esi + 0x29f8], ecx
mov edx, dword [eax + 0x10]
mov eax, dword [esi + 0x29f0]
mov dword [esi + 0x29fc], edx
mov dword [esi + 0x29dc], eax
mov ecx, dword [esi + 0x29f4]
mov dword [esi + 0x29e0], ecx
mov edx, dword [esi + 0x29f8]
mov dword [esi + 0x29e4], edx
mov eax, dword [esi + 0x29fc]
lea ecx, [esp + 8]
mov dword [esi + 0x29e8], eax
call fcn.00456920
push 0x3f800000
push 0x3f48c8c9
push 0x3f800000
lea ecx, [esp + 0x14]
call fcn.004568d0
mov ecx, dword [eax + 4]
mov dword [esi + 0x1520], ecx
mov edx, dword [eax + 8]
mov dword [esi + 0x1524], edx
mov ecx, dword [eax + 0xc]
mov dword [esi + 0x1528], ecx
mov edx, dword [eax + 0x10]
lea ecx, [esp + 8]
mov dword [esi + 0x152c], edx
call fcn.00456920
push 0x3f2eaeaf
push 0
push 0x3f28a8a9
lea ecx, [esp + 0x14]
call fcn.004568d0
mov ecx, dword [eax + 4]
mov dword [esi + 0x29dc], ecx
mov edx, dword [eax + 8]
mov dword [esi + 0x29e0], edx
mov ecx, dword [eax + 0xc]
mov dword [esi + 0x29e4], ecx
mov edx, dword [eax + 0x10]
lea ecx, [esp + 8]
mov dword [esi + 0x29e8], edx
call fcn.00456920
push 0x3f800000
push 0
push 0x3f800000
lea ecx, [esp + 0x14]
mov byte [esi + 0x438c], 0
call fcn.004568d0
mov ecx, dword [eax + 4]
mov dword [esi + 0x150c], ecx
mov edx, dword [eax + 8]
mov dword [esi + 0x1510], edx
mov ecx, dword [eax + 0xc]
mov dword [esi + 0x1514], ecx
mov edx, dword [eax + 0x10]
lea ecx, [esp + 8]
mov dword [esi + 0x1518], edx
call fcn.00456920
mov eax, esi
mov ecx, dword [esp + 0x1c]
pop esi
mov dword fs:[0], ecx
add esp, 0x24
ret 4
Function at 0x4247a0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4ce103
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
mov eax, dword [esp + 0x28]
push esi
mov esi, ecx
push eax
mov dword [esp + 8], esi
call fcn.004230d0
push fcn.00456970
push 0x40a970
push 4
push 0x418
lea ecx, [esi + 0x4834]
push ecx
mov dword [esp + 0x38], 0
mov dword [esi], 0x4d55d0
call fcn.004be699
push 0
push 0x3ef4f4f5
push 0x3f73f3f4
lea ecx, [esp + 0x14]
mov byte [esp + 0x30], 1
mov dword [esi + 0x868], 0x4d55ac
mov dword [esi + 0x4388], 0x4d50f0
call fcn.004568d0
mov edx, dword [eax + 4]
mov dword [esi + 0x29f0], edx
mov ecx, dword [eax + 8]
mov dword [esi + 0x29f4], ecx
mov edx, dword [eax + 0xc]
mov ecx, dword [esi + 0x29f0]
mov dword [esi + 0x29f8], edx
mov eax, dword [eax + 0x10]
mov dword [esi + 0x29fc], eax
mov dword [esi + 0x29dc], ecx
mov edx, dword [esi + 0x29f4]
mov dword [esi + 0x29e0], edx
mov eax, dword [esi + 0x29f8]
mov dword [esi + 0x29e4], eax
mov ecx, dword [esi + 0x29fc]
mov dword [esi + 0x29e8], ecx
lea ecx, [esp + 8]
call fcn.00456920
push 0x3ef8f8f9
push 0x3f3dbdbe
push 0x3f800000
lea ecx, [esp + 0x14]
call fcn.004568d0
mov edx, dword [eax + 4]
mov dword [esi + 0x1520], edx
mov ecx, dword [eax + 8]
mov dword [esi + 0x1524], ecx
mov edx, dword [eax + 0xc]
mov dword [esi + 0x1528], edx
mov eax, dword [eax + 0x10]
lea ecx, [esp + 8]
mov dword [esi + 0x152c], eax
call fcn.00456920
push 0x3e800000
push 0x3f400000
push 0x3f800000
lea ecx, [esp + 0x14]
call fcn.004568d0
mov ecx, dword [eax + 4]
mov dword [esi + 0x150c], ecx
mov edx, dword [eax + 8]
mov dword [esi + 0x1510], edx
mov ecx, dword [eax + 0xc]
mov dword [esi + 0x1514], ecx
mov edx, dword [eax + 0x10]
lea ecx, [esp + 8]
mov dword [esi + 0x1518], edx
call fcn.00456920
mov ecx, dword [esp + 0x1c]
mov byte [esi + 0x438c], 0
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0x24
ret 4
Function at 0x4249e0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4ce0c8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
mov eax, dword [esp + 0x28]
push esi
mov esi, ecx
push eax
mov dword [esp + 8], esi
call fcn.004230d0
push 0x3f2dadae
push 0x3e848485
push 0x3e048485
lea ecx, [esp + 0x14]
mov dword [esp + 0x30], 0
mov dword [esi], 0x4d5688
mov dword [esi + 0x868], 0x4d5664
mov dword [esi + 0x4388], 0x4d4530
call fcn.004568d0
mov ecx, dword [eax + 4]
mov dword [esi + 0x29f0], ecx
mov edx, dword [eax + 8]
mov dword [esi + 0x29f4], edx
mov ecx, dword [eax + 0xc]
mov dword [esi + 0x29f8], ecx
mov edx, dword [eax + 0x10]
mov eax, dword [esi + 0x29f0]
mov dword [esi + 0x29fc], edx
mov dword [esi + 0x29dc], eax
mov ecx, dword [esi + 0x29f4]
mov dword [esi + 0x29e0], ecx
mov edx, dword [esi + 0x29f8]
mov dword [esi + 0x29e4], edx
mov eax, dword [esi + 0x29fc]
lea ecx, [esp + 8]
mov dword [esi + 0x29e8], eax
call fcn.00456920
push 0x3f800000
push 0x3f43c3c4
push 0x3f058586
lea ecx, [esp + 0x14]
call fcn.004568d0
mov ecx, dword [eax + 4]
mov dword [esi + 0x1520], ecx
mov edx, dword [eax + 8]
mov dword [esi + 0x1524], edx
mov ecx, dword [eax + 0xc]
mov dword [esi + 0x1528], ecx
mov edx, dword [eax + 0x10]
lea ecx, [esp + 8]
mov dword [esi + 0x152c], edx
call fcn.00456920
push 0x3f800000
push 0
push 0
lea ecx, [esp + 0x14]
mov byte [esi + 0x438c], 0
call fcn.004568d0
mov ecx, dword [eax + 4]
mov dword [esi + 0x150c], ecx
mov edx, dword [eax + 8]
mov dword [esi + 0x1510], edx
mov ecx, dword [eax + 0xc]
mov dword [esi + 0x1514], ecx
mov edx, dword [eax + 0x10]
lea ecx, [esp + 8]
mov dword [esi + 0x1518], edx
call fcn.00456920
mov ecx, dword [esp + 0x1c]
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0x24
ret 4
Function at 0x424b40
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4ce0c8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
mov eax, dword [esp + 0x28]
push esi
mov esi, ecx
push eax
mov dword [esp + 8], esi
call fcn.004230d0
push 0x3e40c0c1
push 0x3e868687
push 0x3e2cacad
lea ecx, [esp + 0x14]
mov dword [esp + 0x30], 0
mov dword [esi], 0x4d5738
mov dword [esi + 0x868], 0x4d571c
mov dword [esi + 0x4388], 0x4d465c
call fcn.004568d0
mov ecx, dword [eax + 4]
mov dword [esi + 0x29f0], ecx
mov edx, dword [eax + 8]
mov dword [esi + 0x29f4], edx
mov ecx, dword [eax + 0xc]
mov dword [esi + 0x29f8], ecx
mov edx, dword [eax + 0x10]
mov eax, dword [esi + 0x29f0]
mov dword [esi + 0x29fc], edx
mov dword [esi + 0x29dc], eax
mov ecx, dword [esi + 0x29f4]
mov dword [esi + 0x29e0], ecx
mov edx, dword [esi + 0x29f8]
mov dword [esi + 0x29e4], edx
mov eax, dword [esi + 0x29fc]
lea ecx, [esp + 8]
mov dword [esi + 0x29e8], eax
call fcn.00456920
push 0x3f20a0a1
push 0x3f62e2e3
push 0x3f129293
lea ecx, [esp + 0x14]
call fcn.004568d0
mov ecx, dword [eax + 4]
mov dword [esi + 0x1520], ecx
mov edx, dword [eax + 8]
mov dword [esi + 0x1524], edx
mov ecx, dword [eax + 0xc]
mov dword [esi + 0x1528], ecx
mov edx, dword [eax + 0x10]
lea ecx, [esp + 8]
mov dword [esi + 0x152c], edx
call fcn.00456920
push 0
push 0x3f800000
push 0
lea ecx, [esp + 0x14]
mov byte [esi + 0x438c], 0
call fcn.004568d0
mov ecx, dword [eax + 4]
mov dword [esi + 0x150c], ecx
mov edx, dword [eax + 8]
mov dword [esi + 0x1510], edx
mov ecx, dword [eax + 0xc]
mov dword [esi + 0x1514], ecx
mov edx, dword [eax + 0x10]
lea ecx, [esp + 8]
mov dword [esi + 0x1518], edx
call fcn.00456920
mov ecx, dword [esp + 0x1c]
mov dword [esi + 0x4834], 0
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0x24
ret 4