joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4049a0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, 0xcccccccc
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], eax
mov dword [ebp - 4], eax
call fcn.00405330
call fcn.004051e0
call fcn.004056b0
test eax, eax
je 0x4049e2
push str.load_ped_detector_table_config_error_n
call fcn.0048c1d0
add esp, 4
or eax, 0xffffffff
jmp 0x404be4
call fcn.00404fb0
call fcn.004054f0
test eax, eax
je 0x404a05
push str.load_veh_detector_table_config_error_n
call fcn.0048c1d0
add esp, 4
or eax, 0xffffffff
jmp 0x404be4
call fcn.00405110
mov dword [ebp - 4], 0
jmp 0x404a1c
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0x40
jg 0x404abc
mov ecx, dword [ebp - 4]
mov dword [ecx*4 + 0x50e3c8], 0xffffffff
mov edx, dword [ebp - 4]
mov dword [edx*4 + 0x50e2c0], 0xffffffff
mov eax, dword [ebp - 4]
mov dword [eax*4 + 0x50dd00], 0xffffffff
mov ecx, dword [ebp - 4]
mov dword [ecx*4 + 0x50e1a8], 0xffffffff
push 0x1c
push 0
mov edx, dword [ebp - 4]
imul edx, edx, 0x1c
add edx, 0x50d4a0
push edx
call fcn.00493230
add esp, 0xc
mov eax, dword [ebp - 4]
imul eax, eax, 0x1c
mov byte [eax + 0x50d4a0], 0
push 8
push 0
mov ecx, dword [ebp - 4]
imul ecx, ecx, 0x1c
add ecx, 0x50d4b0
push ecx
call fcn.00493230
add esp, 0xc
mov edx, dword [ebp - 4]
imul edx, edx, 0x1c
mov dword [edx + 0x50d4b8], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0x50e130], 0
jmp 0x404a13
call fcn.0040a720
push 0xea60
call fcn.00484550
add esp, 4
mov dword [0x4f6fb8], eax
cmp dword [0x4f6fb8], 0xffffffff
jne 0x404af3
push 0x4d8
push 0x4f71e0
push str.m_diagnoseTimer___TIMER_NULL
call fcn.00492630
add esp, 0xc
push 0x493e0
call fcn.00484550
add esp, 4
mov dword [0x4f6fc4], eax
cmp dword [0x4f6fc4], 0xffffffff
jne 0x404b25
push 0x4da
push 0x4f7238
push str.m_detectorRecvTimer___TIMER_NULL
call fcn.00492630
add esp, 0xc
movzx eax, byte [0x4f6f79]
imul eax, eax, 0x3c
imul eax, eax, 0x3e8
push eax
call fcn.00484550
add esp, 4
mov dword [0x4f6fb4], eax
cmp dword [0x4f6fb4], 0xffffffff
jne 0x404b63
push 0x4e2
push 0x4f729c
push str.m_volOccTimer___TIMER_NULL
call fcn.00492630
add esp, 0xc
mov byte [0x50e4cd], 0
push 0x4f72f0
mov edx, dword [str.volocc.dat]
push edx
call fcn.004943f0
add esp, 8
test eax, eax
jne 0x404bc8
push 0x4f72f4
mov eax, dword [str.volocc.dat]
push eax
call fcn.004943f0
add esp, 8
mov dword [ebp - 8], eax
push 4
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.00493230
add esp, 0xc
mov edx, dword [ebp - 8]
push edx
push 1
push 4
lea eax, [ebp - 0x10]
push eax
call fcn.00493d00
add esp, 0x10
mov ecx, dword [ebp - 8]
push ecx
call fcn.00493af0
add esp, 4
call fcn.00404c20
test eax, eax
jl 0x404bd8
mov byte [0x50e4ce], 1
call fcn.00404e10
call fcn.00404e80
xor eax, eax
push edx
mov ecx, ebp
push eax
lea edx, [0x404c04]
call fcn.00492460
pop eax
pop edx
add esp, 0x14
cmp ebp, esp
call fcn.00492430
mov esp, ebp
pop ebp
ret
Function at 0x405430
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov dword [ebp - 0xc], 0xcccccccc
mov dword [ebp - 8], 0xcccccccc
mov dword [ebp - 4], 0xcccccccc
mov dword [ebp - 4], 0
push 0x4f766c
mov eax, dword [str.vehicleDete.dat]
push eax
call fcn.004943f0
add esp, 8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x405480
push str.The_file_vehicleDetectorTable.dat_was_not_opened_n
call fcn.0048c1d0
add esp, 4
or eax, 0xffffffff
jmp 0x4054e0
mov dword [ebp - 8], 0
jmp 0x405492
mov ecx, dword [ebp - 8]
add ecx, 1
mov dword [ebp - 8], ecx
movsx edx, word [0x50dbc6]
cmp dword [ebp - 8], edx
jge 0x4054c3
mov eax, dword [ebp - 8]
shl eax, 4
add eax, dword [0x50dbcc]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 4]
push ecx
push 1
push 0x10
mov edx, dword [ebp - 0xc]
push edx
call fcn.00493d00
add esp, 0x10
jmp 0x405489
mov eax, dword [ebp - 4]
push eax
call fcn.00493af0
add esp, 4
mov ecx, dword [str.vehicleDete.dat]
push ecx
call fcn.004307b0
add esp, 4
xor eax, eax
add esp, 0xc
cmp ebp, esp
call fcn.00492430
mov esp, ebp
pop ebp
ret

Function at 0x4054f0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov dword [ebp - 0xc], 0xcccccccc
mov dword [ebp - 8], 0xcccccccc
mov dword [ebp - 4], 0xcccccccc
mov dword [ebp - 8], 0
push 0x4f76a4
mov eax, dword [str.vehicleDete.dat]
push eax
call fcn.004943f0
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x405543
push str.The_file_vehicleDetectorTable.dat_was_not_opened__n
call fcn.0048c1d0
add esp, 4
or eax, 0xffffffff
jmp 0x4055d5
push 2
push 0
mov ecx, dword [ebp - 8]
push ecx
call fcn.00494fe0
add esp, 0xc
mov edx, dword [ebp - 8]
push edx
call fcn.00494c20
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jg 0x40557a
push str.The_file_vehicleDetectorTable.dat_is_empty_n
call fcn.0048c1d0
add esp, 4
or eax, 0xffffffff
jmp 0x4055d5
push 0
push 0
mov eax, dword [ebp - 8]
push eax
call fcn.00494fe0
add esp, 0xc
mov dword [ebp - 4], 0
jmp 0x40559c
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 4], ecx
movsx edx, word [0x50dbc6]
cmp dword [ebp - 4], edx
jge 0x4055c7
mov eax, dword [ebp - 8]
push eax
push 1
push 0x10
mov ecx, dword [ebp - 4]
shl ecx, 4
add ecx, dword [0x50dbcc]
push ecx
call fcn.00494bc0
add esp, 0x10
jmp 0x405593
mov edx, dword [ebp - 8]
push edx
call fcn.00493af0
add esp, 4
xor eax, eax
add esp, 0xc
cmp ebp, esp
call fcn.00492430
mov esp, ebp
pop ebp
ret
Function at 0x4056b0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov dword [ebp - 0xc], 0xcccccccc
mov dword [ebp - 8], 0xcccccccc
mov dword [ebp - 4], 0xcccccccc
mov dword [ebp - 8], 0
push 0x4f774c
mov eax, dword [str.pedDetec.dat]
push eax
call fcn.004943f0
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x405703
push str.The_file_pedestrianDetectorTable.dat_was_not_opened__n
call fcn.0048c1d0
add esp, 4
or eax, 0xffffffff
jmp 0x4057a7
push 2
push 0
mov ecx, dword [ebp - 8]
push ecx
call fcn.00494fe0
add esp, 0xc
mov edx, dword [ebp - 8]
push edx
call fcn.00494c20
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jg 0x40573a
push str.The_file_pedestrianDetectorTable.dat_is_empty_n
call fcn.0048c1d0
add esp, 4
or eax, 0xffffffff
jmp 0x4057a7
mov eax, dword [ebp - 0xc]
xor edx, edx
mov ecx, 6
div ecx
mov word [0x50dcf6], ax
push 0
push 0
mov edx, dword [ebp - 8]
push edx
call fcn.00494fe0
add esp, 0xc
mov dword [ebp - 4], 0
jmp 0x40576e
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
movsx ecx, word [0x50dcf6]
cmp dword [ebp - 4], ecx
jge 0x405799
mov edx, dword [ebp - 8]
push edx
push 1
push 6
mov eax, dword [ebp - 4]
imul eax, eax, 6
add eax, dword [0x50dcfc]
push eax
call fcn.00494bc0
add esp, 0x10
jmp 0x405765
mov ecx, dword [ebp - 8]
push ecx
call fcn.00493af0
add esp, 4
xor eax, eax
add esp, 0xc
cmp ebp, esp
call fcn.00492430
mov esp, ebp
pop ebp
ret

Function at 0x4144e0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 8], 0xcccccccc
mov dword [ebp - 4], 0xcccccccc
mov dword [ebp - 8], 0
push 0x4f938c
mov eax, dword [str.AscActionTable.dat]
push eax
call fcn.004943f0
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x414529
push str.The_file_AscActionTable.dat_was_not_opened__n
call fcn.0048c1d0
add esp, 4
or eax, 0xffffffff
jmp 0x414574
mov dword [ebp - 4], 0
jmp 0x41453b
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 4], ecx
movsx edx, word [0x618fea]
cmp dword [ebp - 4], edx
jge 0x414566
mov eax, dword [ebp - 8]
push eax
push 1
push 4
mov ecx, dword [ebp - 4]
mov edx, dword [0x618ff0]
lea eax, [edx + ecx*4]
push eax
call fcn.00494bc0
add esp, 0x10
jmp 0x414532
mov ecx, dword [ebp - 8]
push ecx
call fcn.00493af0
add esp, 4
xor eax, eax
add esp, 8
cmp ebp, esp
call fcn.00492430
mov esp, ebp
pop ebp
ret
Function at 0x41a600
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov dword [ebp - 0xc], 0xcccccccc
mov dword [ebp - 8], 0xcccccccc
mov dword [ebp - 4], 0xcccccccc
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
push 0x4f9e4c
mov eax, dword [str.ChannelTable.dat]
push eax
call fcn.004943f0
add esp, 8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x41a65e
push str.The_file_ChannelTable.dat_was_not_opened_n
call fcn.0048c1d0
add esp, 4
or eax, 0xffffffff
jmp 0x41a6b7
mov dword [ebp - 8], 0
jmp 0x41a670
mov ecx, dword [ebp - 8]
add ecx, 1
mov dword [ebp - 8], ecx
cmp dword [ebp - 8], 0x20
jge 0x41a69b
mov edx, dword [ebp - 8]
imul edx, edx, 5
add edx, dword [0x50efd8]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
push eax
push 1
push 5
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.00493d00
add esp, 0x10
jmp 0x41a667
mov edx, dword [ebp - 4]
push edx
call fcn.00493af0
add esp, 4
mov eax, dword [str.ChannelTable.dat]
push eax
call fcn.004307b0
add esp, 4
xor eax, eax
add esp, 0xc
cmp ebp, esp
call fcn.00492430
mov esp, ebp
pop ebp
ret

Function at 0x41a6d0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 8], 0xcccccccc
mov dword [ebp - 4], 0xcccccccc
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
push 0x4f9e7c
mov eax, dword [str.ChannelTable.dat]
push eax
call fcn.004943f0
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x41a720
push str.The_file_ChannelTable.dat_was_not_opened__n
call fcn.0048c1d0
add esp, 4
or eax, 0xffffffff
jmp 0x41a765
mov dword [ebp - 4], 0
jmp 0x41a732
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 4], ecx
cmp dword [ebp - 4], 0x20
jge 0x41a757
mov edx, dword [ebp - 8]
push edx
push 1
push 5
mov eax, dword [ebp - 4]
imul eax, eax, 5
add eax, dword [0x50efd8]
push eax
call fcn.00494bc0
add esp, 0x10
jmp 0x41a729
mov ecx, dword [ebp - 8]
push ecx
call fcn.00493af0
add esp, 4
xor eax, eax
add esp, 8
cmp ebp, esp
call fcn.00492430
mov esp, ebp
pop ebp
ret
Function at 0x423df0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, 0xcccccccc
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], eax
mov dword [ebp - 4], eax
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov byte [ebp - 0x11], 0
push 0x4fb404
mov eax, dword [str.patternTable.dat]
push eax
call fcn.004943f0
add esp, 8
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x423e4d
push str.The_file_pattern.dat_was_not_opened__n
call fcn.0048c1d0
add esp, 4
or eax, 0xffffffff
jmp 0x423fb6
push 2
push 0
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.00494fe0
add esp, 0xc
mov edx, dword [ebp - 0xc]
push edx
call fcn.00494c20
add esp, 4
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jg 0x423e93
mov eax, dword [ebp - 0xc]
push eax
call fcn.00493af0
add esp, 4
push str.pattern_table_no_entrys_n
call fcn.0048c1d0
add esp, 4
or eax, 0xffffffff
jmp 0x423fb6
push 0
push 0
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.00494fe0
add esp, 0xc
mov edx, dword [ebp - 0xc]
push edx
push 1
push 1
push 0x50f1f5
call fcn.00494bc0
add esp, 0x10
mov eax, dword [ebp - 0xc]
push eax
push 1
push 1
push 0x4fb072
call fcn.00494bc0
add esp, 0x10
mov ecx, dword [ebp - 0xc]
push ecx
push 1
push 1
push 0x4fb073
call fcn.00494bc0
add esp, 0x10
mov edx, dword [ebp - 0xc]
push edx
push 1
push 1
push 0x4fb087
call fcn.00494bc0
add esp, 0x10
mov eax, 1
mov word [0x618ee8], ax
mov ecx, 0xff
mov word [0x618eea], cx
xor edx, edx
mov word [0x618eec], dx
xor eax, eax
mov word [0x618eee], ax
mov ecx, 1
mov word [0x50f1c4], cx
mov edx, 0xff
mov word [0x50f1c6], dx
xor eax, eax
mov word [0x50f1c8], ax
xor ecx, ecx
mov word [0x50f1ca], cx
push 0
push 4
mov edx, dword [ebp - 0xc]
push edx
call fcn.00494fe0
add esp, 0xc
mov dword [ebp - 4], 0
jmp 0x423f6a
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0xff
jge 0x423fa8
mov ecx, dword [ebp - 0xc]
push ecx
push 1
push 5
mov edx, dword [ebp - 4]
imul edx, edx, 5
add edx, dword [0x618ef0]
push edx
call fcn.00494bc0
add esp, 0x10
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
je 0x423fa6
push str.debug___Pattern
call fcn.0048c1d0
add esp, 4
jmp 0x423f61
mov eax, dword [ebp - 0xc]
push eax
call fcn.00493af0
add esp, 4
xor eax, eax
add esp, 0x14
cmp ebp, esp
call fcn.00492430
mov esp, ebp
pop ebp
ret
Function at 0x428810
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, 0xcccccccc
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], eax
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], 0
push 0x4fc210
mov eax, dword [str.splitTable.dat]
push eax
call fcn.004943f0
add esp, 8
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x42885f
push str.The_file_splitTable.dat_was_not_opened__n
call fcn.0048c1d0
add esp, 4
or eax, 0xffffffff
jmp 0x42891d
push 2
push 0
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.00494fe0
add esp, 0xc
mov edx, dword [ebp - 0xc]
push edx
call fcn.00494c20
add esp, 4
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jg 0x4288a2
mov eax, dword [ebp - 0xc]
push eax
call fcn.00493af0
add esp, 4
push str.split_table_is_empty_n
call fcn.0048c1d0
add esp, 4
or eax, 0xffffffff
jmp 0x42891d
push 0
push 0
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.00494fe0
add esp, 0xc
mov dword [ebp - 4], 0
jmp 0x4288c4
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
movsx eax, word [0x618f0a]
cmp dword [ebp - 4], eax
jge 0x42890f
mov dword [ebp - 8], 0
jmp 0x4288e2
mov ecx, dword [ebp - 8]
add ecx, 1
mov dword [ebp - 8], ecx
cmp dword [ebp - 8], 0x10
jge 0x42890d
mov edx, dword [ebp - 0xc]
push edx
push 1
push 5
mov eax, dword [ebp - 4]
shl eax, 4
add eax, dword [ebp - 8]
imul eax, eax, 5
add eax, dword [0x618f10]
push eax
call fcn.00494bc0
add esp, 0x10
jmp 0x4288d9
jmp 0x4288bb
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.00493af0
add esp, 4
xor eax, eax
add esp, 0x10
cmp ebp, esp
call fcn.00492430
mov esp, ebp
pop ebp
ret

Function at 0x42c190
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov dword [ebp - 0xc], 0xcccccccc
mov dword [ebp - 8], 0xcccccccc
mov dword [ebp - 4], 0xcccccccc
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
push 0x4fc788
mov eax, dword [str.quenceInfo.dat]
push eax
call fcn.004943f0
add esp, 8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x42c1e3
or al, 0xff
jmp 0x42c292
push 2
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.00494fe0
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
call fcn.00494c20
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jg 0x42c225
mov eax, dword [ebp - 4]
push eax
call fcn.00493af0
add esp, 4
push str.The_file_quenceInfo.dat_is_empty__n
call fcn.0048c1d0
add esp, 4
or al, 0xff
jmp 0x42c292
mov eax, dword [ebp - 0xc]
xor edx, edx
mov ecx, 3
div ecx
mov word [0x618eaa], ax
push 0
push 0
mov edx, dword [ebp - 4]
push edx
call fcn.00494fe0
add esp, 0xc
mov dword [ebp - 8], 0
jmp 0x42c259
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
movsx ecx, word [0x618eaa]
cmp dword [ebp - 8], ecx
jge 0x42c284
mov edx, dword [ebp - 4]
push edx
push 1
push 3
mov eax, dword [ebp - 8]
imul eax, eax, 3
add eax, dword [0x618eb0]
push eax
call fcn.00494bc0
add esp, 0x10
jmp 0x42c250
mov ecx, dword [ebp - 4]
push ecx
call fcn.00493af0
add esp, 4
xor al, al
add esp, 0xc
cmp ebp, esp
call fcn.00492430
mov esp, ebp
pop ebp
ret
Function at 0x430760
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push esi
mov esi, esp
push 0
push 0
push 0
push str.flashinit.bat
push 0x4fce94
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp esi, esp
call fcn.00492430
mov esi, esp
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, esp
call fcn.00492430
call fcn.004847b0
xor eax, eax
pop esi
cmp ebp, esp
call fcn.00492430
pop ebp
ret

Function at 0x4307b0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push esi
mov esi, esp
push 0
push 0
push 0
push str.flashsave.bat
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp esi, esp
call fcn.00492430
xor eax, eax
pop esi
cmp ebp, esp
call fcn.00492430
pop ebp
ret
Function at 0x4332b0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
push edi
lea edi, [ebp - 0x2c]
mov ecx, 0xb
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x50beb0]
xor eax, ebp
mov dword [ebp - 4], eax
push 0x4fdc44
mov eax, dword [str.eventClassTable.dat]
push eax
call fcn.004943f0
add esp, 8
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x433301
push str.The_file_eventClasstTable.dat_was_not_opened__n
call fcn.0048c1d0
add esp, 4
or eax, 0xffffffff
jmp 0x43343a
push 2
push 0
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.00494fe0
add esp, 0xc
mov edx, dword [ebp - 0x10]
push edx
call fcn.00494c20
add esp, 4
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jg 0x433347
mov eax, dword [ebp - 0x10]
push eax
call fcn.00493af0
add esp, 4
push str.The_file_eventClasstTable.dat_is_empty_n
call fcn.0048c1d0
add esp, 4
or eax, 0xffffffff
jmp 0x43343a
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x24
div ecx
mov word [0x50f272], ax
push 0
push 0
mov edx, dword [ebp - 0x10]
push edx
call fcn.00494fe0
add esp, 0xc
mov dword [ebp - 8], 0
jmp 0x43337b
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
movsx ecx, word [0x50f272]
cmp dword [ebp - 8], ecx
jge 0x43342c
mov edx, dword [ebp - 0x10]
push edx
push 1
push 0x14
mov eax, dword [ebp - 8]
imul eax, eax, 0x14
add eax, dword [0x50f278]
push eax
call fcn.00494bc0
add esp, 0x10
mov ecx, dword [ebp - 0x10]
push ecx
push 1
push 0x10
lea edx, [ebp - 0x28]
push edx
call fcn.00494bc0
add esp, 0x10
mov eax, dword [ebp - 8]
imul eax, eax, 0x14
mov ecx, dword [0x50f278]
movsx edx, word [ecx + eax + 0xc]
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0xc], 0
jle 0x433414
mov eax, dword [ebp - 0xc]
push eax
call fcn.00493ac0
add esp, 4
mov ecx, dword [ebp - 8]
imul ecx, ecx, 0x14
mov edx, dword [0x50f278]
mov dword [edx + ecx + 8], eax
mov eax, dword [ebp - 0xc]
push eax
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 8]
imul edx, edx, 0x14
mov eax, dword [0x50f278]
mov ecx, dword [eax + edx + 8]
push ecx
call fcn.004952a0
add esp, 0xc
jmp 0x433427
mov edx, dword [ebp - 8]
imul edx, edx, 0x14
mov eax, dword [0x50f278]
mov dword [eax + edx + 8], 0
jmp 0x433372
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.00493af0
add esp, 4
xor eax, eax
push edx
mov ecx, ebp
push eax
lea edx, [0x433464]
call fcn.00492460
pop eax
pop edx
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004932b0
add esp, 0x2c
cmp ebp, esp
call fcn.00492430
mov esp, ebp
pop ebp
ret
Function at 0x448c20
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push ecx
mov dword [ebp - 4], 0xcccccccc
mov dword [ebp - 4], 0
push 0x50159c
mov eax, dword [str.LaneTunes.dat]
push eax
call fcn.004943f0
add esp, 8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x448c52
or al, 0xff
jmp 0x448c75
mov ecx, dword [ebp - 4]
push ecx
push 1
push 0x29
push 0x618e20
call fcn.00494bc0
add esp, 0x10
mov edx, dword [ebp - 4]
push edx
call fcn.00493af0
add esp, 4
xor al, al
add esp, 4
cmp ebp, esp
call fcn.00492430
mov esp, ebp
pop ebp
ret

Function at 0x448c90
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ecx
mov dword [ebp - 4], 0xcccccccc
mov dword [ebp - 4], 0
push 0x5015a0
mov eax, dword [str.LaneTunes.dat]
push eax
call fcn.004943f0
add esp, 8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x448cc2
or al, 0xff
jmp 0x448ce5
mov ecx, dword [ebp - 4]
push ecx
push 1
push 0x29
push 0x618e20
call fcn.00493d00
add esp, 0x10
mov edx, dword [ebp - 4]
push edx
call fcn.00493af0
add esp, 4
xor al, al
add esp, 4
cmp ebp, esp
call fcn.00492430
mov esp, ebp
pop ebp
ret

Function at 0x448d00
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push ecx
mov dword [ebp - 4], 0xcccccccc
mov dword [ebp - 4], 0
push 0x5015a4
mov eax, dword [str.LaneSignals.dat]
push eax
call fcn.004943f0
add esp, 8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x448d3f
push str.open_laneSignal_file_failed__n
call fcn.0048c1d0
add esp, 4
or al, 0xff
jmp 0x448d62
mov ecx, dword [ebp - 4]
push ecx
push 1
push 0x51
push 0x618d60
call fcn.00494bc0
add esp, 0x10
mov edx, dword [ebp - 4]
push edx
call fcn.00493af0
add esp, 4
xor al, al
add esp, 4
cmp ebp, esp
call fcn.00492430
mov esp, ebp
pop ebp
ret

Function at 0x448d70
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ecx
mov dword [ebp - 4], 0xcccccccc
mov dword [ebp - 4], 0
push 0x5015c8
mov eax, dword [str.LaneTunes.dat]
push eax
call fcn.004943f0
add esp, 8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x448da2
or al, 0xff
jmp 0x448dc5
mov ecx, dword [ebp - 4]
push ecx
push 1
push 0x29
push 0x618e20
call fcn.00493d00
add esp, 0x10
mov edx, dword [ebp - 4]
push edx
call fcn.00493af0
add esp, 4
xor al, al
add esp, 4
cmp ebp, esp
call fcn.00492430
mov esp, ebp
pop ebp
ret

Function at 0x448de0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push ecx
mov dword [ebp - 4], 0xcccccccc
mov dword [ebp - 4], 0
push 0x5015cc
mov eax, dword [str.LaneCotes.dat]
push eax
call fcn.004943f0
add esp, 8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x448e1f
push 0x5015d0
call fcn.0048c1d0
add esp, 4
or al, 0xff
jmp 0x448e42
mov ecx, dword [ebp - 4]
push ecx
push 1
push 0x49
push 0x618dc0
call fcn.00494bc0
add esp, 0x10
mov edx, dword [ebp - 4]
push edx
call fcn.00493af0
add esp, 4
xor al, al
add esp, 4
cmp ebp, esp
call fcn.00492430
mov esp, ebp
pop ebp
ret
Function at 0x448e50
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ecx
mov dword [ebp - 4], 0xcccccccc
mov dword [ebp - 4], 0
push 0x5015ec
mov eax, dword [str.LaneCotes.dat]
push eax
call fcn.004943f0
add esp, 8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x448e8f
push str.open_laneCote_file_failed__n
call fcn.0048c1d0
add esp, 4
or al, 0xff
jmp 0x448eb2
mov ecx, dword [ebp - 4]
push ecx
push 1
push 0x49
push 0x618dc0
call fcn.00493d00
add esp, 0x10
mov edx, dword [ebp - 4]
push edx
call fcn.00493af0
add esp, 4
xor al, al
add esp, 4
cmp ebp, esp
call fcn.00492430
mov esp, ebp
pop ebp
ret

Function at 0x449770
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ecx
mov dword [ebp - 4], 0xcccccccc
push str.20240308_ver_6.0.9.10
push 0x501624
call fcn.0048c1d0
add esp, 8
call fcn.00413d60
test eax, eax
je 0x4497c0
push str.AscInit_init_failed__n
call fcn.0048c1d0
add esp, 4
push 0x501640
push 4
push 1
call fcn.00434110
add esp, 0xc
call fcn.00434b00
push 1
call fcn.00497ed0
movzx eax, byte [0x50f24d]
or eax, 1
mov byte [0x50f24d], al
push str.bootting_success__n
call fcn.0048c1d0
add esp, 4
push 0x501660
push 1
push 4
call fcn.00434110
add esp, 0xc
mov ecx, 1
test ecx, ecx
je 0x44981b
call fcn.00417f50
call fcn.00490460
call fcn.00438c90
movsx edx, ax
mov dword [ebp - 4], edx
cmp dword [ebp - 4], 0x11
je 0x449817
cmp dword [ebp - 4], 0x12
jne 0x449819
jmp 0x44981b
jmp 0x4497ed
call fcn.00490460
call fcn.0048ceb0
call fcn.00413e00
xor eax, eax
add esp, 4
cmp ebp, esp
call fcn.00492430
mov esp, ebp
pop ebp
ret