joyce8/EMBER2024-capa huggingface dataset:
Function at 0x6acc37
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x75580b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push esi
mov esi, ecx
push edi
mov edi, dword [esp + 0x20]
mov eax, dword [edi]
mov dword [esi], eax
mov ecx, dword [edi + 4]
mov dword [esi + 4], ecx
mov edx, dword [edi + 8]
lea eax, [edi + 0xc]
push eax
lea ecx, [esi + 0xc]
mov dword [esp + 0x10], esi
mov dword [esi + 8], edx
call fcn.00455f20
mov ecx, dword [edi + 0x48]
push fcn.004553d0
push fcn.00455f20
push 0xa
push 0x3c
lea edx, [edi + 0x4c]
push edx
lea eax, [esi + 0x4c]
push eax
mov dword [esp + 0x30], 0
mov dword [esi + 0x48], ecx
call fcn.0072068a
lea eax, [edi + 0x2a4]
lea ecx, [esi + 0x2a4]
mov edx, eax
mov ebx, dword [edx]
mov edi, ecx
mov dword [edi], ebx
mov ebx, dword [edx + 4]
mov dword [edi + 4], ebx
mov edx, dword [edx + 8]
mov dword [edi + 8], edx
mov eax, dword [eax]
mov dword [ecx], eax
mov ecx, dword [esp + 0x10]
pop edi
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret 4

Function at 0x6afe30
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x755efb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push esi
mov esi, ecx
push edi
mov edi, dword [esp + 0x20]
mov eax, dword [edi]
mov dword [esi], eax
mov ecx, dword [edi + 4]
mov dword [esi + 4], ecx
mov edx, dword [edi + 8]
lea eax, [edi + 0xc]
push eax
lea ecx, [esi + 0xc]
mov dword [esp + 0x10], esi
mov dword [esi + 8], edx
call fcn.00455f20
mov ecx, dword [edi + 0x48]
push fcn.004553d0
push fcn.00455f20
push 0xa
push 0x3c
lea edx, [edi + 0x4c]
push edx
lea eax, [esi + 0x4c]
push eax
mov dword [esp + 0x30], 0
mov dword [esi + 0x48], ecx
call fcn.0072068a
lea eax, [edi + 0x2a4]
lea ecx, [esi + 0x2a4]
mov edx, eax
mov ebx, dword [edx]
mov edi, ecx
mov dword [edi], ebx
mov ebx, dword [edx + 4]
mov dword [edi + 4], ebx
mov edx, dword [edx + 8]
mov dword [edi + 8], edx
mov eax, dword [eax]
mov dword [ecx], eax
mov ecx, dword [esp + 0x10]
pop edi
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret 4

Function at 0x6afe47
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x755efb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push esi
mov esi, ecx
push edi
mov edi, dword [esp + 0x20]
mov eax, dword [edi]
mov dword [esi], eax
mov ecx, dword [edi + 4]
mov dword [esi + 4], ecx
mov edx, dword [edi + 8]
lea eax, [edi + 0xc]
push eax
lea ecx, [esi + 0xc]
mov dword [esp + 0x10], esi
mov dword [esi + 8], edx
call fcn.00455f20
mov ecx, dword [edi + 0x48]
push fcn.004553d0
push fcn.00455f20
push 0xa
push 0x3c
lea edx, [edi + 0x4c]
push edx
lea eax, [esi + 0x4c]
push eax
mov dword [esp + 0x30], 0
mov dword [esi + 0x48], ecx
call fcn.0072068a
lea eax, [edi + 0x2a4]
lea ecx, [esi + 0x2a4]
mov edx, eax
mov ebx, dword [edx]
mov edi, ecx
mov dword [edi], ebx
mov ebx, dword [edx + 4]
mov dword [edi + 4], ebx
mov edx, dword [edx + 8]
mov dword [edi + 8], edx
mov eax, dword [eax]
mov dword [ecx], eax
mov ecx, dword [esp + 0x10]
pop edi
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret 4
Function at 0x6b2560
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x7564bb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push esi
mov esi, ecx
push edi
mov edi, dword [esp + 0x20]
mov eax, dword [edi]
mov dword [esi], eax
mov ecx, dword [edi + 4]
mov dword [esi + 4], ecx
mov edx, dword [edi + 8]
lea eax, [edi + 0xc]
push eax
lea ecx, [esi + 0xc]
mov dword [esp + 0x10], esi
mov dword [esi + 8], edx
call fcn.00455f20
mov ecx, dword [edi + 0x48]
push fcn.004553d0
push fcn.00455f20
push 0xa
push 0x3c
lea edx, [edi + 0x4c]
push edx
lea eax, [esi + 0x4c]
push eax
mov dword [esp + 0x30], 0
mov dword [esi + 0x48], ecx
call fcn.0072068a
lea eax, [edi + 0x2a4]
lea ecx, [esi + 0x2a4]
mov edx, eax
mov ebx, dword [edx]
mov edi, ecx
mov dword [edi], ebx
mov ebx, dword [edx + 4]
mov dword [edi + 4], ebx
mov edx, dword [edx + 8]
mov dword [edi + 8], edx
mov eax, dword [eax]
mov dword [ecx], eax
mov ecx, dword [esp + 0x10]
pop edi
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret 4

Function at 0x6b2577
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x7564bb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push esi
mov esi, ecx
push edi
mov edi, dword [esp + 0x20]
mov eax, dword [edi]
mov dword [esi], eax
mov ecx, dword [edi + 4]
mov dword [esi + 4], ecx
mov edx, dword [edi + 8]
lea eax, [edi + 0xc]
push eax
lea ecx, [esi + 0xc]
mov dword [esp + 0x10], esi
mov dword [esi + 8], edx
call fcn.00455f20
mov ecx, dword [edi + 0x48]
push fcn.004553d0
push fcn.00455f20
push 0xa
push 0x3c
lea edx, [edi + 0x4c]
push edx
lea eax, [esi + 0x4c]
push eax
mov dword [esp + 0x30], 0
mov dword [esi + 0x48], ecx
call fcn.0072068a
lea eax, [edi + 0x2a4]
lea ecx, [esi + 0x2a4]
mov edx, eax
mov ebx, dword [edx]
mov edi, ecx
mov dword [edi], ebx
mov ebx, dword [edx + 4]
mov dword [edi + 4], ebx
mov edx, dword [edx + 8]
mov dword [edi + 8], edx
mov eax, dword [eax]
mov dword [ecx], eax
mov ecx, dword [esp + 0x10]
pop edi
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret 4

Function at 0x6b3ec0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x75683b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push esi
mov esi, ecx
push edi
mov edi, dword [esp + 0x20]
mov eax, dword [edi]
mov dword [esi], eax
mov ecx, dword [edi + 4]
mov dword [esi + 4], ecx
mov edx, dword [edi + 8]
lea eax, [edi + 0xc]
push eax
lea ecx, [esi + 0xc]
mov dword [esp + 0x10], esi
mov dword [esi + 8], edx
call fcn.00455f20
mov ecx, dword [edi + 0x48]
push fcn.004553d0
push fcn.00455f20
push 0xa
push 0x3c
lea edx, [edi + 0x4c]
push edx
lea eax, [esi + 0x4c]
push eax
mov dword [esp + 0x30], 0
mov dword [esi + 0x48], ecx
call fcn.0072068a
lea eax, [edi + 0x2a4]
lea ecx, [esi + 0x2a4]
mov edx, eax
mov ebx, dword [edx]
mov edi, ecx
mov dword [edi], ebx
mov ebx, dword [edx + 4]
mov dword [edi + 4], ebx
mov edx, dword [edx + 8]
mov dword [edi + 8], edx
mov eax, dword [eax]
mov dword [ecx], eax
mov ecx, dword [esp + 0x10]
pop edi
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret 4
Function at 0x6b3ed7
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x75683b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push esi
mov esi, ecx
push edi
mov edi, dword [esp + 0x20]
mov eax, dword [edi]
mov dword [esi], eax
mov ecx, dword [edi + 4]
mov dword [esi + 4], ecx
mov edx, dword [edi + 8]
lea eax, [edi + 0xc]
push eax
lea ecx, [esi + 0xc]
mov dword [esp + 0x10], esi
mov dword [esi + 8], edx
call fcn.00455f20
mov ecx, dword [edi + 0x48]
push fcn.004553d0
push fcn.00455f20
push 0xa
push 0x3c
lea edx, [edi + 0x4c]
push edx
lea eax, [esi + 0x4c]
push eax
mov dword [esp + 0x30], 0
mov dword [esi + 0x48], ecx
call fcn.0072068a
lea eax, [edi + 0x2a4]
lea ecx, [esi + 0x2a4]
mov edx, eax
mov ebx, dword [edx]
mov edi, ecx
mov dword [edi], ebx
mov ebx, dword [edx + 4]
mov dword [edi + 4], ebx
mov edx, dword [edx + 8]
mov dword [edi + 8], edx
mov eax, dword [eax]
mov dword [ecx], eax
mov ecx, dword [esp + 0x10]
pop edi
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret 4

Function at 0x6b5227
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x756b8b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push esi
mov esi, ecx
push edi
mov edi, dword [esp + 0x20]
mov eax, dword [edi]
mov dword [esi], eax
mov ecx, dword [edi + 4]
mov dword [esi + 4], ecx
mov edx, dword [edi + 8]
lea eax, [edi + 0xc]
push eax
lea ecx, [esi + 0xc]
mov dword [esp + 0x10], esi
mov dword [esi + 8], edx
call fcn.00455f20
mov ecx, dword [edi + 0x48]
push fcn.004553d0
push fcn.00455f20
push 0xa
push 0x3c
lea edx, [edi + 0x4c]
push edx
lea eax, [esi + 0x4c]
push eax
mov dword [esp + 0x30], 0
mov dword [esi + 0x48], ecx
call fcn.0072068a
lea eax, [edi + 0x2a4]
lea ecx, [esi + 0x2a4]
mov edx, eax
mov ebx, dword [edx]
mov edi, ecx
mov dword [edi], ebx
mov ebx, dword [edx + 4]
mov dword [edi + 4], ebx
mov edx, dword [edx + 8]
mov dword [edi + 8], edx
mov eax, dword [eax]
mov dword [ecx], eax
mov ecx, dword [esp + 0x10]
pop edi
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret 4

Function at 0x6b6ad0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x756e2b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push esi
mov esi, ecx
push edi
mov edi, dword [esp + 0x20]
mov eax, dword [edi]
mov dword [esi], eax
mov ecx, dword [edi + 4]
mov dword [esi + 4], ecx
mov edx, dword [edi + 8]
lea eax, [edi + 0xc]
push eax
lea ecx, [esi + 0xc]
mov dword [esp + 0x10], esi
mov dword [esi + 8], edx
call fcn.00455f20
mov ecx, dword [edi + 0x48]
push fcn.004553d0
push fcn.00455f20
push 0xa
push 0x3c
lea edx, [edi + 0x4c]
push edx
lea eax, [esi + 0x4c]
push eax
mov dword [esp + 0x30], 0
mov dword [esi + 0x48], ecx
call fcn.0072068a
lea eax, [edi + 0x2a4]
lea ecx, [esi + 0x2a4]
mov edx, eax
mov ebx, dword [edx]
mov edi, ecx
mov dword [edi], ebx
mov ebx, dword [edx + 4]
mov dword [edi + 4], ebx
mov edx, dword [edx + 8]
mov dword [edi + 8], edx
mov eax, dword [eax]
mov dword [ecx], eax
mov ecx, dword [esp + 0x10]
pop edi
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret 4
Function at 0x6b6ae7
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x756e2b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push esi
mov esi, ecx
push edi
mov edi, dword [esp + 0x20]
mov eax, dword [edi]
mov dword [esi], eax
mov ecx, dword [edi + 4]
mov dword [esi + 4], ecx
mov edx, dword [edi + 8]
lea eax, [edi + 0xc]
push eax
lea ecx, [esi + 0xc]
mov dword [esp + 0x10], esi
mov dword [esi + 8], edx
call fcn.00455f20
mov ecx, dword [edi + 0x48]
push fcn.004553d0
push fcn.00455f20
push 0xa
push 0x3c
lea edx, [edi + 0x4c]
push edx
lea eax, [esi + 0x4c]
push eax
mov dword [esp + 0x30], 0
mov dword [esi + 0x48], ecx
call fcn.0072068a
lea eax, [edi + 0x2a4]
lea ecx, [esi + 0x2a4]
mov edx, eax
mov ebx, dword [edx]
mov edi, ecx
mov dword [edi], ebx
mov ebx, dword [edx + 4]
mov dword [edi + 4], ebx
mov edx, dword [edx + 8]
mov dword [edi + 8], edx
mov eax, dword [eax]
mov dword [ecx], eax
mov ecx, dword [esp + 0x10]
pop edi
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret 4

Function at 0x6b9f00
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x7571eb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push esi
mov esi, ecx
push edi
mov edi, dword [esp + 0x20]
mov eax, dword [edi]
mov dword [esi], eax
mov ecx, dword [edi + 4]
mov dword [esi + 4], ecx
mov edx, dword [edi + 8]
lea eax, [edi + 0xc]
push eax
lea ecx, [esi + 0xc]
mov dword [esp + 0x10], esi
mov dword [esi + 8], edx
call fcn.00455f20
mov ecx, dword [edi + 0x48]
push fcn.004553d0
push fcn.00455f20
push 0xa
push 0x3c
lea edx, [edi + 0x4c]
push edx
lea eax, [esi + 0x4c]
push eax
mov dword [esp + 0x30], 0
mov dword [esi + 0x48], ecx
call fcn.0072068a
lea eax, [edi + 0x2a4]
lea ecx, [esi + 0x2a4]
mov edx, eax
mov ebx, dword [edx]
mov edi, ecx
mov dword [edi], ebx
mov ebx, dword [edx + 4]
mov dword [edi + 4], ebx
mov edx, dword [edx + 8]
mov dword [edi + 8], edx
mov eax, dword [eax]
mov dword [ecx], eax
mov ecx, dword [esp + 0x10]
pop edi
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret 4

Function at 0x6b9f17
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x7571eb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push esi
mov esi, ecx
push edi
mov edi, dword [esp + 0x20]
mov eax, dword [edi]
mov dword [esi], eax
mov ecx, dword [edi + 4]
mov dword [esi + 4], ecx
mov edx, dword [edi + 8]
lea eax, [edi + 0xc]
push eax
lea ecx, [esi + 0xc]
mov dword [esp + 0x10], esi
mov dword [esi + 8], edx
call fcn.00455f20
mov ecx, dword [edi + 0x48]
push fcn.004553d0
push fcn.00455f20
push 0xa
push 0x3c
lea edx, [edi + 0x4c]
push edx
lea eax, [esi + 0x4c]
push eax
mov dword [esp + 0x30], 0
mov dword [esi + 0x48], ecx
call fcn.0072068a
lea eax, [edi + 0x2a4]
lea ecx, [esi + 0x2a4]
mov edx, eax
mov ebx, dword [edx]
mov edi, ecx
mov dword [edi], ebx
mov ebx, dword [edx + 4]
mov dword [edi + 4], ebx
mov edx, dword [edx + 8]
mov dword [edi + 8], edx
mov eax, dword [eax]
mov dword [ecx], eax
mov ecx, dword [esp + 0x10]
pop edi
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret 4
Function at 0x6cbfe0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x758c2b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push esi
push 0x1c4
call fcn.0040fa60
add esp, 4
mov dword [esp + 4], eax
test eax, eax
mov dword [esp + 0x10], 0
je 0x6cc021
push 1
mov ecx, eax
call fcn.006cb850
mov esi, eax
jmp 0x6cc023
xor esi, esi
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x18]
push edi
push ecx
lea ecx, [esi + 0xbc]
mov dword [esp + 0x18], 0xffffffff
mov dword [esi + 8], eax
call fcn.00413310
mov edx, dword [esp + 0x24]
push edx
lea ecx, [esi + 0xc4]
call fcn.00413310
mov edi, dword [esp + 0x38]
push edi
lea ecx, [esi + 0xe0]
mov dword [esi + 0xcc], 0x1d4c0
call fcn.00413310
test edi, edi
pop edi
mov eax, str.Defs_Screens_PlayWnd_message_pic_dlg.in2
jne 0x6cc07c
mov eax, 0x7fd6a0
push eax
lea ecx, [esi + 0xc]
call fcn.00413310
mov eax, dword [esp + 0x28]
push eax
lea ecx, [esi + 0xd8]
call fcn.00413310
mov ecx, dword [esp + 0x2c]
push ecx
lea ecx, [esi + 0xec]
call fcn.00413310
mov edx, dword [esp + 0x38]
push edx
lea ecx, [esi + 0x19c]
call fcn.00413310
mov eax, dword [esp + 0x30]
push eax
mov ecx, esi
call fcn.006c3800
mov ecx, dword [esp + 0x24]
push ecx
mov ecx, esi
mov dword [esi + 0x14], 0
call fcn.006c4a70
mov ecx, dword [esp + 8]
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0x10
ret
Function at 0x6cc240
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x758aab
push eax
mov dword fs:[0], esp
push ebx
mov ebx, dword [esp + 0x28]
test ebx, ebx
push esi
push edi
je 0x6cc3a2
mov eax, dword [0x912e94]
test eax, eax
je 0x6cc3a2
mov ax, word [eax + 0x1ac]
mov cx, word [ebx + 0x20]
push eax
push ecx
call fcn.006590f0
mov ecx, eax
call fcn.00658990
mov edi, eax
test edi, edi
je 0x6cc3a2
push 0x1c4
call fcn.0040fa60
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
mov dword [esp + 0x14], 0
je 0x6cc2be
push 1
mov ecx, eax
call fcn.006cb850
mov esi, eax
jmp 0x6cc2c0
xor esi, esi
mov edx, dword [esp + 0x1c]
push str.Defs_Screens_PlayWnd_message_diplnotify.in2
lea ecx, [esi + 0xc]
mov dword [esp + 0x18], 0xffffffff
mov dword [esi + 8], edx
call fcn.00413310
mov dword [esi + 0xcc], 0x1d4c0
mov dword [esi + 0x198], 3
mov eax, dword [edi + 0x10]
mov dword [esi + 0x28], eax
mov eax, dword [esp + 0x20]
mov dword [esi + 0x30], 1
mov ecx, dword [edi + 0x1c]
mov dword [esi + 0x2c], ecx
mov dx, word [ebx + 0x20]
push eax
lea ecx, [esi + 0xbc]
mov word [esi + 0xe8], dx
call fcn.00413310
mov ecx, dword [esp + 0x24]
push ecx
lea ecx, [esi + 0xc4]
call fcn.00413310
mov edx, dword [esp + 0x28]
push edx
lea ecx, [esi + 0xd8]
call fcn.00413310
mov eax, dword [esp + 0x2c]
push eax
lea ecx, [esi + 0xec]
call fcn.00413310
mov dword [esi + 0x34], 0
mov dword [esi + 0x38], 0
mov cx, word [ebx + 0x20]
mov word [esi + 0x3c], cx
mov edx, dword [0x912e94]
mov ax, word [edx + 0x1ac]
push 0
push 0
push 0xca
mov word [esi + 0x3e], ax
mov ecx, dword [0x9a49f4]
push str.voice_messages_diplomatic_message_
call fcn.006dc180
mov eax, esi
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add esp, 0xc
ret
mov ecx, dword [esp + 0xc]
pop edi
pop esi
xor eax, eax
mov dword fs:[0], ecx
pop ebx
add esp, 0xc
ret
Function at 0x6cc3c0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x758c2b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push esi
xor esi, esi
cmp dword [0x912e94], esi
push edi
je 0x6cc52d
mov edi, dword [esp + 0x30]
cmp edi, esi
je 0x6cc52d
mov ax, word [edi + 6]
push ebp
push eax
call fcn.00659140
mov ebp, eax
add esp, 4
cmp ebp, esi
jne 0x6cc41a
pop ebp
pop edi
xor eax, eax
pop esi
mov ecx, dword [esp + 4]
mov dword fs:[0], ecx
add esp, 0x10
ret
mov cx, word [edi + 4]
mov dx, word [ebp + 0x20]
push ebx
push ecx
push edx
call fcn.006590f0
mov ecx, eax
call fcn.00658990
mov ebx, eax
cmp ebx, esi
jne 0x6cc44c
pop ebx
pop ebp
pop edi
xor eax, eax
pop esi
mov ecx, dword [esp + 4]
mov dword fs:[0], ecx
add esp, 0x10
ret
push 0x1c4
call fcn.0040fa60
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, esi
mov dword [esp + 0x1c], esi
je 0x6cc470
push 1
mov ecx, eax
call fcn.006cb850
mov esi, eax
mov eax, dword [esp + 0x24]
push str.Defs_Screens_PlayWnd_message_audience.in2
lea ecx, [esi + 0xc]
mov dword [esp + 0x20], 0xffffffff
mov dword [esi + 8], eax
call fcn.00413310
mov dword [esi + 0xcc], 0x1d4c0
mov dword [esi + 0x198], 3
mov ecx, dword [ebx + 0x10]
mov dword [esi + 0x28], ecx
mov ecx, dword [esp + 0x28]
mov dword [esi + 0x30], 1
mov edx, dword [ebx + 0x1c]
mov dword [esi + 0x2c], edx
movzx eax, word [ebp + 0x20]
push ecx
lea ecx, [esi + 0xbc]
mov word [esi + 0xe8], ax
call fcn.00413310
mov edx, dword [esp + 0x2c]
push edx
lea ecx, [esi + 0xc4]
call fcn.00413310
mov eax, dword [esp + 0x30]
push eax
lea ecx, [esi + 0xd8]
call fcn.00413310
mov ecx, dword [esp + 0x34]
push ecx
lea ecx, [esi + 0xec]
call fcn.00413310
mov edx, dword [esp + 0x3c]
mov dword [esi + 0x34], edi
mov dword [esi + 0x38], edx
movzx eax, word [edi + 4]
pop ebx
mov word [esi + 0x3c], ax
mov cx, word [edi + 6]
pop ebp
pop edi
mov word [esi + 0x3e], cx
mov eax, esi
pop esi
mov ecx, dword [esp + 4]
mov dword fs:[0], ecx
add esp, 0x10
ret
mov ecx, dword [esp + 0xc]
pop edi
xor eax, eax
pop esi
mov dword fs:[0], ecx
add esp, 0x10
ret
Function at 0x6cc540
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x758c2b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
xor ebx, ebx
cmp dword [0x912e94], ebx
push esi
je 0x6cc6a4
mov esi, dword [esp + 0x30]
cmp esi, ebx
je 0x6cc6a4
mov ax, word [esi]
push ebp
push eax
call fcn.00659140
mov ebp, eax
add esp, 4
cmp ebp, ebx
jne 0x6cc599
pop ebp
pop esi
xor eax, eax
pop ebx
mov ecx, dword [esp + 4]
mov dword fs:[0], ecx
add esp, 0x10
ret
mov cx, word [esi + 2]
mov dx, word [ebp + 0x20]
push edi
push ecx
push edx
call fcn.006590f0
mov ecx, eax
call fcn.00658990
mov edi, eax
cmp edi, ebx
jne 0x6cc5cb
pop edi
pop ebp
pop esi
xor eax, eax
pop ebx
mov ecx, dword [esp + 4]
mov dword fs:[0], ecx
add esp, 0x10
ret
push 0x1c4
call fcn.0040fa60
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x1c], ebx
je 0x6cc5ef
push 1
mov ecx, eax
call fcn.006cb850
mov ebx, eax
mov eax, dword [esp + 0x24]
push str.Defs_Screens_PlayWnd_message_diploffer.in2
lea ecx, [ebx + 0xc]
mov dword [esp + 0x20], 0xffffffff
mov dword [ebx + 8], eax
call fcn.00413310
mov dword [ebx + 0xcc], 0x1d4c0
mov dword [ebx + 0x198], 3
mov ecx, dword [edi + 0x10]
mov dword [ebx + 0x28], ecx
mov ecx, dword [esp + 0x28]
mov dword [ebx + 0x30], 1
mov edx, dword [edi + 0x1c]
mov dword [ebx + 0x2c], edx
mov ax, word [ebp + 0x20]
push ecx
lea ecx, [ebx + 0xbc]
mov word [ebx + 0xe8], ax
call fcn.00413310
mov edx, dword [esp + 0x2c]
push edx
lea ecx, [ebx + 0xc4]
call fcn.00413310
mov eax, dword [esp + 0x30]
push eax
lea ecx, [ebx + 0xd8]
call fcn.00413310
mov ecx, dword [esp + 0x34]
push ecx
lea ecx, [ebx + 0xec]
call fcn.00413310
xor eax, eax
mov dword [ebx + 0x34], eax
mov dword [ebx + 0x38], eax
lea edi, [ebx + 0x3c]
mov ecx, 0x13
rep movsd dword es:[edi], dword [esi]
pop edi
pop ebp
pop esi
mov eax, ebx
pop ebx
mov ecx, dword [esp + 4]
mov dword fs:[0], ecx
add esp, 0x10
ret
mov ecx, dword [esp + 0xc]
pop esi
xor eax, eax
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret
Function at 0x6cf8a0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x758c93
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x10], esi
xor edi, edi
mov dword [esi], vtable.CViewObject.0
mov dword [esi + 4], edi
mov dword [esi + 8], edi
mov dword [esi + 0xc], edi
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov dword [esi + 0x18], edi
lea ebp, [esi + 4]
mov dword [esi + 0x1c], edi
mov dword [esi + 0x20], edi
mov dword [esp + 0x1c], edi
mov dword [esi + 0x4c], edi
mov dword [esi + 0x48], vtable.CBSList_struct_TViewObjPos_.0
mov dword [esi + 0x54], edi
mov dword [esi + 0x50], edi
mov dword [esi + 0x58], edi
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x24]
push 0xffffffffffffffff
sub esp, 8
mov eax, esp
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x20], edx
mov dword [esp + 0x34], esp
mov dword [eax], ecx
mov dword [eax + 4], edx
mov ecx, dword [ebx + 0x118]
push ebp
mov byte [esp + 0x2c], 1
call fcn.00701640
mov ecx, dword [esp + 0x30]
sub dword [esi + 8], ecx
mov eax, dword [ebp]
mov dword [esi + 0x14], eax
mov edx, dword [ebp + 4]
or eax, 0xffffffff
mov dword [esi + 0x18], edx
mov dword [esi + 0xc], eax
mov dword [esi + 0x10], eax
mov eax, dword [0x914138]
cmp eax, edi
je 0x6cf95a
mov eax, dword [eax + 0x304]
jmp 0x6cf963
mov edx, dword [0x912e94]
mov eax, dword [edx + 8]
mov eax, dword [eax + 0xc]
mov dword [esi + 0x34], edi
mov dword [esi + 0x64], edi
mov dword [esi + 0x3c], edi
mov dword [esi + 0x40], edi
mov dword [esi + 0x44], edi
mov dword [esi + 0x5c], edi
mov dword [esi + 0x24], eax
mov dword [esi + 0x2c], eax
mov dword [esi + 0x28], eax
pop edi
mov word [esi + 0x30], cx
mov ecx, dword [esp + 0x10]
mov dword [esi + 0x38], ebx
mov dword [esi + 0x60], 1
mov eax, esi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x10
ret 0x10