joyce8/EMBER2024-capa huggingface dataset:
Function at 0x419750
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5eafab
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65b4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
cmp dword [0x661de8], 0
jne 0x41982a
mov ecx, 0x662080
call fcn.00408890
cmp dword [0x661de8], 0
jne 0x419820
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x58
call fcn.00594e6d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x4197d2
mov ecx, dword [ebp - 0x1c]
call fcn.004abd80
mov dword [ebp - 0x20], eax
jmp 0x4197d9
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x4197ff
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x419817
push 0x62997c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
mov dword [0x661de8], edx
mov ecx, 0x662080
call fcn.00408850
mov eax, dword [0x661de8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x419850
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d718b
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65b4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
cmp dword [0x661dec], 0
jne 0x41992a
mov ecx, 0x662064
call fcn.00408890
cmp dword [0x661dec], 0
jne 0x419920
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x58
call fcn.00594e6d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x4198d2
mov ecx, dword [ebp - 0x1c]
call fcn.00416d50
mov dword [ebp - 0x20], eax
jmp 0x4198d9
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x4198ff
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x419917
push 0x62997c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
mov dword [0x661dec], edx
mov ecx, 0x662064
call fcn.00408850
mov eax, dword [0x661dec]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x419950
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d62fb
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65b4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
cmp dword [0x661df0], 0
jne 0x419a2a
mov ecx, 0x662048
call fcn.00408890
cmp dword [0x661df0], 0
jne 0x419a20
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x44
call fcn.00594e6d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x4199d2
mov ecx, dword [ebp - 0x1c]
call fcn.00416e10
mov dword [ebp - 0x20], eax
jmp 0x4199d9
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x4199ff
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x419a17
push 0x62997c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
mov dword [0x661df0], edx
mov ecx, 0x662048
call fcn.00408850
mov eax, dword [0x661df0]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x419a50
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5e7e3b
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65b4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
cmp dword [0x661df4], 0
jne 0x419b2a
mov ecx, 0x66202c
call fcn.00408890
cmp dword [0x661df4], 0
jne 0x419b20
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x74
call fcn.00594e6d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x419ad2
mov ecx, dword [ebp - 0x1c]
call fcn.004b8370
mov dword [ebp - 0x20], eax
jmp 0x419ad9
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x419aff
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x419b17
push 0x62997c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
mov dword [0x661df4], edx
mov ecx, 0x66202c
call fcn.00408850
mov eax, dword [0x661df4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x419b50
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d6dcb
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65b4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
cmp dword [0x661df8], 0
jne 0x419c2a
mov ecx, 0x662010
call fcn.00408890
cmp dword [0x661df8], 0
jne 0x419c20
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x3c
call fcn.00594e6d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x419bd2
mov ecx, dword [ebp - 0x1c]
call fcn.00415600
mov dword [ebp - 0x20], eax
jmp 0x419bd9
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x419bff
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x419c17
push 0x62997c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
mov dword [0x661df8], edx
mov ecx, 0x662010
call fcn.00408850
mov eax, dword [0x661df8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x419c50
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5e444b
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65b4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
cmp dword [0x661dfc], 0
jne 0x419d2d
mov ecx, 0x661ff4
call fcn.00408890
cmp dword [0x661dfc], 0
jne 0x419d23
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x11c
call fcn.00594e6d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x419cd5
mov ecx, dword [ebp - 0x1c]
call fcn.0046c510
mov dword [ebp - 0x20], eax
jmp 0x419cdc
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x419d02
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x419d1a
push 0x62997c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
mov dword [0x661dfc], edx
mov ecx, 0x661ff4
call fcn.00408850
mov eax, dword [0x661dfc]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x419d50
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d62cb
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65b4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
cmp dword [0x661e00], 0
jne 0x419e2a
mov ecx, 0x661fd8
call fcn.00408890
cmp dword [0x661e00], 0
jne 0x419e20
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x3c
call fcn.00594e6d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x419dd2
mov ecx, dword [ebp - 0x1c]
call fcn.0041a0a0
mov dword [ebp - 0x20], eax
jmp 0x419dd9
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x419dff
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x419e17
push 0x62997c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
mov dword [0x661e00], edx
mov ecx, 0x661fd8
call fcn.00408850
mov eax, dword [0x661e00]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x419e50
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d6d9b
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65b4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
cmp dword [0x661e04], 0
jne 0x419f2a
mov ecx, 0x661fbc
call fcn.00408890
cmp dword [0x661e04], 0
jne 0x419f20
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x70
call fcn.00594e6d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x419ed2
mov ecx, dword [ebp - 0x1c]
call fcn.0041a110
mov dword [ebp - 0x20], eax
jmp 0x419ed9
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x419eff
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x419f17
push 0x62997c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
mov dword [0x661e04], edx
mov ecx, 0x661fbc
call fcn.00408850
mov eax, dword [0x661e04]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x419f50
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5dba1b
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65b4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
cmp dword [0x661e08], 0
jne 0x41a02d
mov ecx, 0x661fa0
call fcn.00408890
cmp dword [0x661e08], 0
jne 0x41a023
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x160
call fcn.00594e6d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x419fd5
mov ecx, dword [ebp - 0x1c]
call fcn.004ac4c0
mov dword [ebp - 0x20], eax
jmp 0x419fdc
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x41a002
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x41a01a
push 0x62997c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
mov dword [0x661e08], edx
mov ecx, 0x661fa0
call fcn.00408850
mov eax, dword [0x661e08]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x41a460
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d553b
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65b4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ecx, 0x661f9c
call fcn.0041b290
test eax, eax
jne 0x41a526
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x1e4
call fcn.00594e6d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x41a4d3
mov ecx, dword [ebp - 0x1c]
call fcn.00523d60
mov dword [ebp - 0x20], eax
jmp 0x41a4da
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x41a500
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x41a518
push 0x6282fc
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
push edx
mov ecx, 0x661f9c
call fcn.0041b2a0
mov ecx, 0x661f9c
call fcn.0041b290
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x41a550
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5eaf7b
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65b4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ecx, 0x661f98
call fcn.0041b290
test eax, eax
jne 0x41a616
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x138
call fcn.00594e6d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x41a5c3
mov ecx, dword [ebp - 0x1c]
call fcn.004df9d0
mov dword [ebp - 0x20], eax
jmp 0x41a5ca
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x41a5f0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x41a608
push 0x628314
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
push edx
mov ecx, 0x661f98
call fcn.0041b2e0
mov ecx, 0x661f98
call fcn.0041b290
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x41a640
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ec86b
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65b4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ecx, 0x661f94
call fcn.0041b290
test eax, eax
jne 0x41a706
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x214
call fcn.00594e6d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x41a6b3
mov ecx, dword [ebp - 0x1c]
call fcn.004e58a0
mov dword [ebp - 0x20], eax
jmp 0x41a6ba
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x41a6e0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x41a6f8
push 0x62832c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
push edx
mov ecx, 0x661f94
call fcn.0041b2e0
mov ecx, 0x661f94
call fcn.0041b290
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x41a730
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d629b
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65b4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ecx, 0x661f90
call fcn.0041b290
test eax, eax
jne 0x41a7f6
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x90
call fcn.00594e6d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x41a7a3
mov ecx, dword [ebp - 0x1c]
call fcn.004db430
mov dword [ebp - 0x20], eax
jmp 0x41a7aa
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x41a7d0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x41a7e8
push 0x628344
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
push edx
mov ecx, 0x661f90
call fcn.0041b2e0
mov ecx, 0x661f90
call fcn.0041b290
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x41a820
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d6cab
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65b4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ecx, 0x661f8c
call fcn.0041b290
test eax, eax
jne 0x41a8e6
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x90
call fcn.00594e6d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x41a893
mov ecx, dword [ebp - 0x1c]
call fcn.0041b1a0
mov dword [ebp - 0x20], eax
jmp 0x41a89a
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x41a8c0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x41a8d8
push 0x62835c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
push edx
mov ecx, 0x661f8c
call fcn.0041b2e0
mov ecx, 0x661f8c
call fcn.0041b290
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x41a910
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d626b
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65b4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ecx, 0x661f88
call fcn.0041b290
test eax, eax
jne 0x41a9d3
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x40
call fcn.00594e6d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x41a980
mov ecx, dword [ebp - 0x1c]
call fcn.004dc090
mov dword [ebp - 0x20], eax
jmp 0x41a987
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x41a9ad
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x41a9c5
push 0x628374
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
push edx
mov ecx, 0x661f88
call fcn.0041b2e0
mov ecx, 0x661f88
call fcn.0041b290
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x41a9f0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5dcd5b
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65b4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ecx, 0x661f84
call fcn.0041b290
test eax, eax
jne 0x41aab6
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0xc8
call fcn.00594e6d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x41aa63
mov ecx, dword [ebp - 0x1c]
call fcn.0049c010
mov dword [ebp - 0x20], eax
jmp 0x41aa6a
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x41aa90
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x41aaa8
push 0x62838c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
push edx
mov ecx, 0x661f84
call fcn.0041b2e0
mov ecx, 0x661f84
call fcn.0041b290
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x41aae0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d6c7b
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65b4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ecx, 0x661f80
call fcn.0041b290
test eax, eax
jne 0x41aba3
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x74
call fcn.00594e6d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x41ab50
mov ecx, dword [ebp - 0x1c]
call fcn.0042b7b0
mov dword [ebp - 0x20], eax
jmp 0x41ab57
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x41ab7d
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x41ab95
push 0x6283a4
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
push edx
mov ecx, 0x661f80
call fcn.0041b2e0
mov ecx, 0x661f80
call fcn.0041b290
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x41abc0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d623b
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65b4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ecx, 0x661f7c
call fcn.0041b290
test eax, eax
jne 0x41ac83
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x3c
call fcn.00594e6d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x41ac30
mov ecx, dword [ebp - 0x1c]
call fcn.0042a190
mov dword [ebp - 0x20], eax
jmp 0x41ac37
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x41ac5d
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x41ac75
push 0x6283bc
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
push edx
mov ecx, 0x661f7c
call fcn.0041b2e0
mov ecx, 0x661f7c
call fcn.0041b290
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x41aca0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d550b
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65b4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ecx, 0x661f78
call fcn.0041b290
test eax, eax
jne 0x41ad63
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x48
call fcn.00594e6d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x41ad10
mov ecx, dword [ebp - 0x1c]
call fcn.0042ab70
mov dword [ebp - 0x20], eax
jmp 0x41ad17
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x41ad3d
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x41ad55
push 0x6283d4
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
push edx
mov ecx, 0x661f78
call fcn.0041b2e0
mov ecx, 0x661f78
call fcn.0041b290
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x41ad80
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d620b
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x65b4e4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ecx, 0x661f74
call fcn.0041b290
test eax, eax
jne 0x41ae43
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 0
push 0x78
call fcn.00594e6d
add esp, 4
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x41adf0
mov ecx, dword [ebp - 0x1c]
call fcn.0042bc40
mov dword [ebp - 0x20], eax
jmp 0x41adf7
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
jmp 0x41ae1d
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 0
jne 0x41ae35
push 0x6283ec
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x14]
push edx
mov ecx, 0x661f74
call fcn.0041b2e0
mov ecx, 0x661f74
call fcn.0041b290
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret