joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4aa8f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x632f68
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push esi
mov esi, ecx
mov dword [esp + 4], esi
mov dword [esi], 0
mov dword [esi + 4], 0
mov dword [esp + 0x50], 0
mov dword [esi + 8], 0
mov eax, dword [esp + 0x58]
mov ecx, dword [eax + 4]
mov eax, dword [esp + ecx + 0x58]
test eax, eax
lea ecx, [esp + ecx + 0x58]
mov byte [esp + 0x50], 1
je 0x4aaaf2
lea edx, [esp + 0x20]
push edx
call fcn.004304e0
mov ecx, eax
call fcn.00428ab0
mov byte [esp + 0x50], 3
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
lea ecx, [ecx]
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 4]
mov edx, dword [esp + ecx + 0x20]
test edx, edx
lea ecx, [esp + ecx + 0x20]
je 0x4aaa40
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [eax + 4]
lea ecx, [esp + ecx + 0x24]
call fcn.004304e0
mov ecx, eax
call fcn.0042b9b0
mov edx, dword [eax + 4]
mov eax, dword [eax]
push edx
push eax
lea ecx, [esp + 0x10]
call fcn.0041f190
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
mov eax, dword [esi + 4]
cmp eax, dword [esi + 8]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x38], ecx
mov dword [esp + 0x3c], edx
mov dword [esp + 0x40], ecx
mov dword [esp + 0x44], edx
je 0x4aa9ec
test eax, eax
je 0x4aa9e6
mov dword [eax], ecx
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
add dword [esi + 4], 0x10
jmp 0x4aaa02
push 1
push 1
lea ecx, [esp + 0x60]
push ecx
lea edx, [esp + 0x44]
push edx
push eax
mov ecx, esi
call fcn.00490980
mov ecx, dword [esp + 0x20]
mov ecx, dword [ecx + 4]
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + ecx + 0x24]
call fcn.004304e0
mov ecx, eax
call fcn.00428c50
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x54], 7
call fcn.00422700
lea ecx, [esp + 0x2c]
mov byte [esp + 0x50], 3
call fcn.0042ce80
jmp 0x4aa970
mov edx, dword [esi + 4]
sub edx, dword [esi]
sar edx, 4
cmp edx, 2
jb 0x4aaa89
push 0
push 0
lea ecx, [esp + 0x20]
call fcn.00406d90
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 8], ecx
fld dword [esp + 8]
fld dword [esp + 0x10]
mov dword [esp + 0xc], edx
fucompp
fnstsw ax
test ah, 0x44
jp 0x4aaa89
fld dword [esp + 0xc]
fld dword [esp + 0x14]
fucompp
fnstsw ax
test ah, 0x44
jnp 0x4aaadb
push 0x19
push str.c:work_fishdom_aqua_gamePathMover.h
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x28], esp
lea eax, [esp + 0x78]
push eax
push str._path.keys.size_____2__p__FPoint_0__0_
call fcn.00403db0
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x48], esp
lea edx, [esp + 0x90]
push edx
push str.Assertion_failed
mov byte [esp + 0x90], 8
call fcn.00403db0
mov byte [esp + 0x88], 3
call fcn.00405c50
add esp, 0x38
push 0
mov ecx, esi
call fcn.004a07e0
lea ecx, [esp + 0x20]
mov byte [esp + 0x50], 1
call fcn.0042ce80
lea ecx, [esp + 0x58]
mov dword [esp + 0x50], 0xffffffff
call fcn.0042ce80
mov ecx, dword [esp + 0x48]
mov eax, esi
mov dword fs:[0], ecx
pop esi
add esp, 0x50
ret 0xc
Function at 0x4ab470
Capabilities:
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x633202
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
push ebx
push ebp
push esi
mov esi, ecx
xor ebx, ebx
push edi
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], ebx
cmp dword [esp + 0x44], ebx
mov dword [esp + 0x30], ebx
je 0x4ab4b8
lea ecx, [esi + 0x34]
mov dword [esi], 0x65efa4
call fcn.0040b080
mov dword [esp + 0x10], 1
mov eax, dword [esi]
mov ecx, dword [eax + 4]
mov dword [esi + ecx], vtable.Interface.0
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov dword [esi + eax], vtable.DirectArrow.0
mov dword [esi + 4], 0x41f00000
lea edi, [esi + 8]
mov dword [edi], 0x6580c8
mov dword [edi + 4], ebx
mov ecx, dword [edi]
mov edx, dword [ecx + 4]
mov dword [edx + edi + 4], ebx
lea ebp, [esi + 0x14]
mov dword [ebp], 0x6580c8
mov dword [ebp + 4], ebx
mov eax, dword [ebp]
mov ecx, dword [eax + 4]
mov dword [esp + 0x30], 6
mov dword [ecx + ebp + 4], ebx
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x5c], esp
lea edx, [esp + 0x5c]
push edx
mov dword [esi + 0x20], 0x3f800000
mov dword [esi + 0x24], ebx
push 0x655da0
mov byte [esp + 0x50], 0xb
mov dword [esi + 0x2c], ebx
mov dword [esi + 0x30], ebx
call fcn.00403db0
mov ebx, dword [esp + 0x50]
mov ecx, dword [ebx + 4]
lea ecx, [esp + ecx + 0x50]
mov byte [esp + 0x48], 0xb
call fcn.004304e0
mov ecx, eax
call fcn.0042b350
sub esp, 0x18
mov dword [esp + 0x5c], eax
mov ecx, esp
mov dword [esp + 0x30], esp
lea eax, [esp + 0x5c]
push eax
push 0x655d9c
call fcn.00403db0
mov ecx, dword [ebx + 4]
lea ecx, [esp + ecx + 0x50]
mov byte [esp + 0x48], 0xb
call fcn.004304e0
mov ecx, eax
call fcn.0042b350
mov ecx, dword [esp + 0x44]
sub esp, 0x18
mov dword [esi + 0x30], ecx
mov ecx, esp
mov dword [esp + 0x5c], esp
lea edx, [esp + 0x5c]
push edx
push str.angle
mov dword [esi + 0x2c], eax
call fcn.00403db0
mov ecx, dword [ebx + 4]
lea ecx, [esp + ecx + 0x50]
mov byte [esp + 0x48], 0xb
call fcn.004304e0
mov ecx, eax
call fcn.0045c590
fstp dword [esi + 0x28]
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x5c], esp
lea eax, [esp + 0x5c]
push eax
push str.direct_arrow
call fcn.00403db0
lea ecx, [esp + 0x34]
push ecx
mov ecx, 0x6bfa98
call fcn.004a1c40
push eax
mov ecx, edi
mov byte [esp + 0x34], 0xf
call fcn.0049ab80
lea ecx, [esp + 0x1c]
mov byte [esp + 0x30], 0xb
call fcn.0049ac10
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x5c], esp
lea edx, [esp + 0x5c]
push edx
push str.direct_arrow_shadow
call fcn.00403db0
lea eax, [esp + 0x34]
push eax
mov ecx, 0x6bfa98
call fcn.004a1c40
push eax
mov ecx, ebp
mov byte [esp + 0x34], 0x10
call fcn.0049ab80
lea ecx, [esp + 0x1c]
mov byte [esp + 0x30], 0xb
call fcn.0049ac10
lea ecx, [esp + 0x38]
mov dword [esp + 0x30], 0xffffffff
call fcn.0042ce80
mov ecx, dword [esp + 0x28]
pop edi
mov eax, esi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x24
ret 0x10
Function at 0x4acbc0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x633460
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10
push ebx
push ebp
push esi
push edi
mov esi, ecx
mov ebp, dword [esp + 0x3c]
test ebp, ebp
mov ebx, dword [esp + 0x40]
mov dword [esp + 0x28], 0
jle 0x4acbf6
test ebx, ebx
jg 0x4acc3f
push 0x36
push str.c:work_fishdom_aqua_gameTextureMesh.h
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x5c], esp
lea eax, [esp + 0x5c]
push eax
push str.columns___0__rows___0
call fcn.00403db0
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x78], esp
lea edx, [esp + 0x74]
push edx
push str.Assertion_failed
mov byte [esp + 0x68], 1
call fcn.00403db0
mov byte [esp + 0x60], 0
call fcn.00405c50
add esp, 0x38
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x48]
mov dword [esi + 0x20], ecx
lea ecx, [esp + 0x30]
mov dword [esi + 0x1c], eax
mov eax, dword [esp + 0x50]
push ecx
lea ecx, [esi + 0x2c]
mov dword [esi + 0x24], edx
mov dword [esi + 0x28], eax
mov dword [esi + 0x14], ebp
mov dword [esi + 0x18], ebx
call fcn.0049ab80
push 0
push 0
lea ecx, [esp + 0x18]
call fcn.00406d90
mov edx, dword [eax + 4]
mov eax, dword [eax]
push edx
push eax
inc ebx
push ebx
lea edi, [esi + 4]
inc ebp
push ebp
mov ecx, edi
call fcn.0048fea0
mov ecx, esi
call fcn.004a83c0
mov ecx, dword [esi + 0x18]
mov edx, dword [esi + 0x14]
inc ecx
push 0xff
push ecx
inc edx
push edx
lea ecx, [esi + 0xc]
call fcn.00493450
mov eax, dword [esi + 0x18]
mov ecx, dword [esi + 0x14]
push eax
push ecx
mov ecx, edi
call fcn.0048f820
mov ecx, eax
call fcn.0048f450
fld dword [eax]
fld dword [eax + 4]
call fcn.00611c14
push eax
call fcn.00611c14
push eax
push 0
push 0
lea ecx, [esp + 0x20]
call fcn.004062d0
mov edx, dword [eax]
add esi, 0x38
mov dword [esi], edx
mov ecx, dword [eax + 4]
mov dword [esi + 4], ecx
mov edx, dword [eax + 8]
mov dword [esi + 8], edx
mov eax, dword [eax + 0xc]
lea ecx, [esp + 0x30]
mov dword [esi + 0xc], eax
mov dword [esp + 0x28], 0xffffffff
call fcn.0049ac10
mov ecx, dword [esp + 0x20]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x1c
ret 0x24
Function at 0x4acd30
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6334b5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
push esi
push edi
mov esi, ecx
xor edi, edi
mov dword [esp + 0xc], esi
mov dword [esp + 8], edi
cmp dword [esp + 0x3c], edi
mov dword [esp + 0x18], edi
je 0x4acd76
lea ecx, [esi + 0x48]
mov dword [esi], 0x65de48
call fcn.0040b080
mov dword [esp + 8], 1
mov eax, dword [esi]
mov ecx, dword [eax + 4]
mov dword [esi + ecx], vtable.Interface.0
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov dword [esi + eax], vtable.TextureMesh.0
mov dword [esi + 4], edi
mov dword [esi + 8], edi
mov dword [esp + 0x18], 2
mov dword [esi + 0xc], edi
mov dword [esi + 0x10], edi
mov dword [esi + 0x2c], 0x6580c8
mov dword [esi + 0x30], edi
mov ecx, dword [esi + 0x2c]
mov edx, dword [ecx + 4]
mov dword [edx + esi + 0x30], edi
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x30]
push eax
mov eax, dword [esp + 0x30]
push edi
push ecx
push edi
push edx
push eax
sub esp, 0xc
lea edx, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0x60], esp
push edx
mov byte [esp + 0x40], 8
mov dword [esi + 0x38], edi
mov dword [esi + 0x3c], edi
mov dword [esi + 0x40], edi
mov dword [esi + 0x44], edi
call fcn.0049aa50
mov ecx, esi
call fcn.004acbc0
lea ecx, [esp + 0x20]
mov dword [esp + 0x18], 0xffffffff
call fcn.0049ac10
mov ecx, dword [esp + 0x10]
pop edi
mov eax, esi
mov dword fs:[0], ecx
pop esi
add esp, 0x14
ret 0x20

Function at 0x4ace20
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6334b5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
push esi
push edi
mov esi, ecx
xor edi, edi
mov dword [esp + 0xc], esi
mov dword [esp + 8], edi
cmp dword [esp + 0x44], edi
mov dword [esp + 0x18], edi
je 0x4ace66
lea ecx, [esi + 0x48]
mov dword [esi], 0x65de48
call fcn.0040b080
mov dword [esp + 8], 1
mov eax, dword [esi]
mov ecx, dword [eax + 4]
mov dword [esi + ecx], vtable.Interface.0
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov dword [esi + eax], vtable.TextureMesh.0
mov dword [esi + 4], edi
mov dword [esi + 8], edi
mov dword [esp + 0x18], 2
mov dword [esi + 0xc], edi
mov dword [esi + 0x10], edi
mov dword [esi + 0x2c], 0x6580c8
mov dword [esi + 0x30], edi
mov ecx, dword [esi + 0x2c]
mov edx, dword [ecx + 4]
mov dword [edx + esi + 0x30], edi
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
push eax
mov eax, dword [esp + 0x38]
push ecx
mov ecx, dword [esp + 0x38]
push edx
mov edx, dword [esp + 0x38]
push eax
push ecx
push edx
sub esp, 0xc
lea eax, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0x68], esp
push eax
mov byte [esp + 0x40], 8
mov dword [esi + 0x38], edi
mov dword [esi + 0x3c], edi
mov dword [esi + 0x40], edi
mov dword [esi + 0x44], edi
call fcn.0049aa50
mov ecx, esi
call fcn.004acbc0
lea ecx, [esp + 0x20]
mov dword [esp + 0x18], 0xffffffff
call fcn.0049ac10
mov ecx, dword [esp + 0x10]
pop edi
mov eax, esi
mov dword fs:[0], ecx
pop esi
add esp, 0x14
ret 0x28
Function at 0x4ae2a0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x633700
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x50
push ebx
push ebp
push esi
push edi
mov edi, ecx
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x74]
mov dword [esp + 0x6c], 0
call fcn.0049aca0
mov esi, eax
lea ecx, [esp + 0x18]
lea ebp, [edi + 0x2c]
push ecx
mov ecx, ebp
mov byte [esp + 0x6c], 1
call fcn.0049aca0
mov edi, eax
mov edx, dword [esi]
mov ecx, dword [edx + 4]
add ecx, esi
mov byte [esp + 0x68], 2
call fcn.0044fa50
mov esi, eax
mov eax, dword [edi]
mov ecx, dword [eax + 4]
add ecx, edi
call fcn.0044fa50
mov edx, dword [esi]
mov edi, eax
lea eax, [esp + 0x40]
push eax
mov ecx, esi
call dword [edx + 0x10]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov esi, dword [eax + 8]
mov ebx, dword [eax + 0xc]
mov eax, dword [edi]
mov dword [esp + 0x30], ecx
lea ecx, [esp + 0x50]
push ecx
mov ecx, edi
mov dword [esp + 0x38], edx
call dword [eax + 0x10]
cmp dword [eax + 8], esi
jne 0x4ae349
cmp dword [eax + 0xc], ebx
jne 0x4ae349
mov eax, 1
jmp 0x4ae34b
xor eax, eax
test al, al
lea ecx, [esp + 0x18]
sete bl
mov byte [esp + 0x68], 1
call fcn.00450980
lea ecx, [esp + 0x24]
mov byte [esp + 0x68], 0
call fcn.00450980
test bl, bl
je 0x4ae3c8
push 0x95
push str.c:work_fishdom_aqua_gameTextureMesh.h
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x30], esp
lea edx, [esp + 0x90]
push edx
push str._texture__GetRectangle__.IsEqualToHW_texture__GetRectangle___
call fcn.00403db0
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x4c], esp
lea eax, [esp + 0xa8]
push eax
push str.Assertion_failed
mov byte [esp + 0xa8], 3
call fcn.00403db0
mov byte [esp + 0xa0], 0
call fcn.00405c50
add esp, 0x38
lea ecx, [esp + 0x70]
push ecx
mov ecx, ebp
call fcn.0049ab80
lea ecx, [esp + 0x70]
mov dword [esp + 0x68], 0xffffffff
call fcn.0049ac10
mov ecx, dword [esp + 0x60]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x5c
ret 0xc
Function at 0x4b2078
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x633be8
push eax
mov dword fs:[0], esp
sub esp, 0x2c
push esi
mov esi, ecx
fld dword [esi + 0x64]
fcomp dword [esi + 0x60]
fnstsw ax
test ah, 0x41
jp 0x4b20a9
fld dword [esi + 0x60]
fcomp dword [esi + 0x68]
fnstsw ax
test ah, 5
jp 0x4b20a9
fld dword [esi + 0x68]
fsub dword [esi + 0x64]
fdivr dword [esi + 0x60]
fst dword [esp + 0x10]
mov eax, dword [esp + 0x10]
push eax
jmp 0x4b210e
fld dword [esi + 0x68]
fcomp dword [esi + 0x60]
fnstsw ax
test ah, 0x41
jp 0x4b20d5
fld dword [esi + 0x60]
fcomp dword [esi + 0x6c]
fnstsw ax
test ah, 0x41
jp 0x4b20d5
mov dword [esp + 8], 0x3f800000
mov dword [esp + 0xc], 0x3f800000
jmp 0x4b211e
fld dword [esi + 0x6c]
fcomp dword [esi + 0x60]
fnstsw ax
test ah, 5
jp 0x4b220c
fld dword [esi + 0x60]
fcomp dword [esi + 0x70]
fnstsw ax
test ah, 5
jp 0x4b220c
fld dword [esi + 0x70]
fsub dword [esi + 0x60]
fld dword [esi + 0x70]
fsub dword [esi + 0x6c]
fdivp st(1)
fst dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esi + 0x74]
fstp dword [esp + 0xc]
call fcn.00448480
fstp dword [esp + 0xc]
mov edx, dword [esp + 8]
push edx
mov ecx, 0x6c3c60
call fcn.00443d70
lea eax, [esp + 0x20]
push eax
mov ecx, esi
call fcn.004b2280
mov edx, dword [esi]
lea eax, [esp + 0x18]
push eax
mov ecx, esi
call dword [edx + 0x14]
fild dword [esp + 0x28]
mov ecx, 0x6c3c60
fmul dword [0x6532dc]
fiadd dword [esp + 0x18]
fstp dword [esp + 8]
fild dword [esp + 0x2c]
fmul dword [0x6532dc]
fiadd dword [esp + 0x1c]
fstp dword [esp + 0x10]
call fcn.004441f0
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x10]
sub esp, 0xc
mov eax, esp
mov dword [eax], ecx
mov ecx, 0x6c3c60
mov dword [esp + 0x20], esp
mov dword [eax + 4], edx
mov dword [eax + 8], 0
call fcn.00440b50
mov eax, dword [esp + 0xc]
push 0x3f800000
push eax
push eax
mov ecx, 0x6c3c60
call fcn.00441120
fld dword [esp + 8]
sub esp, 0xc
fchs
mov eax, esp
fstp dword [eax]
mov ecx, 0x6c3c60
fld dword [esp + 0x1c]
mov dword [esp + 0x20], esp
fchs
mov dword [eax + 8], 0
fstp dword [eax + 4]
call fcn.00440b50
mov ecx, esi
call fcn.004b22f0
mov ecx, esi
call fcn.004b1510
mov ecx, 0x6c3c60
call fcn.004412b0
mov ecx, 0x6c3c60
call fcn.004419c0
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop esi
add esp, 0x38
ret
fld dword [esi + 0x60]
fcomp dword [esi + 0x70]
fnstsw ax
test ah, 1
je 0x4b2268
push 0x5b
push str.c:work_fishdom_aqua_gameExpandingTextureControl.h
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x34], esp
lea eax, [esp + 0x27]
push eax
push str._time____shrinkingFinishTime
call fcn.00403db0
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x48], esp
lea edx, [esp + 0x3f]
push edx
push str.Assertion_failed
mov dword [esp + 0x78], 0
call fcn.00403db0
mov dword [esp + 0x70], 0xffffffff
call fcn.00405c50
add esp, 0x38
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop esi
add esp, 0x38
ret
Function at 0x4b3f50
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x633f8c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push esi
mov esi, ecx
push edi
mov edi, dword [esp + 0x1c]
mov eax, dword [edi]
mov dword [esi], eax
mov ecx, dword [edi + 4]
mov dword [esi + 4], ecx
mov edx, dword [edi + 8]
lea ecx, [edi + 0x10]
mov dword [esi + 8], edx
mov eax, dword [edi + 0xc]
push ecx
lea ecx, [esi + 0x10]
mov dword [esp + 0xc], esi
mov dword [esi + 0xc], eax
call fcn.0049aa50
lea edx, [edi + 0x1c]
push edx
lea ecx, [esi + 0x1c]
mov dword [esp + 0x18], 0
call fcn.0049aa50
mov eax, dword [edi + 0x28]
mov dword [esi + 0x28], eax
mov ecx, dword [edi + 0x2c]
lea edx, [edi + 0x30]
mov dword [esi + 0x2c], ecx
push edx
lea ecx, [esi + 0x30]
mov byte [esp + 0x18], 1
call fcn.0049aa50
lea eax, [edi + 0x3c]
lea ecx, [esi + 0x3c]
push eax
mov byte [esp + 0x18], 2
mov dword [ecx], 0x6580c8
call fcn.00490cf0
lea ecx, [edi + 0x48]
push ecx
lea ecx, [esi + 0x48]
mov byte [esp + 0x18], 3
call fcn.004b0990
add edi, 0x54
mov eax, dword [edi]
lea edx, [esi + 0x54]
mov dword [edx], eax
mov ecx, dword [edi + 4]
mov dword [edx + 4], ecx
mov eax, dword [edi + 8]
mov dword [edx + 8], eax
mov ecx, dword [edi + 0xc]
mov dword [edx + 0xc], ecx
mov eax, dword [edi + 0x10]
mov dword [edx + 0x10], eax
mov ecx, dword [edi + 0x14]
mov dword [edx + 0x14], ecx
mov ecx, dword [esp + 0xc]
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0x10
ret 4
Function at 0x4bf8b0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x63539e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x14
push ebx
mov dword [esp + 4], 0
mov eax, dword [esp + 0x30]
test eax, eax
push esi
mov esi, ecx
mov dword [esp + 0xc], esi
mov ebx, 1
je 0x4bf8ff
lea ecx, [esi + 0x34]
mov dword [esi], 0x65efa4
call fcn.0040b080
mov dword [esp + 0x24], 0
mov dword [esp + 8], ebx
push 0
mov ecx, esi
call fcn.00429700
mov eax, dword [esi]
mov ecx, dword [eax + 4]
push 0x48
mov dword [esp + 0x28], ebx
mov dword [esi + ecx], vtable.XmlDocumentRead.0
call fcn.004063f0
add esp, 4
mov dword [esp + 0x34], eax
test eax, eax
mov byte [esp + 0x24], 2
je 0x4bf943
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
push ebx
push edx
push ecx
mov ecx, eax
call fcn.00491ed0
jmp 0x4bf945
xor eax, eax
push ebx
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x2c], bl
call fcn.0041f650
mov edx, dword [esp + 0x10]
mov eax, dword [edx + 4]
sub esp, 0xc
lea eax, [esp + eax + 0x1c]
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
mov byte [esp + 0x34], 3
mov dword [ecx], 0x6580c8
call fcn.00420750
mov ecx, esi
call fcn.00432110
lea ecx, [esp + 0x10]
mov byte [esp + 0x24], bl
call fcn.0041fff0
mov ecx, dword [esp + 0x1c]
mov eax, esi
pop esi
mov dword fs:[0], ecx
pop ebx
add esp, 0x20
ret 0xc
Function at 0x4c8090
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x63653f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
push ebx
push esi
mov esi, ecx
push edi
mov dword [esp + 0xc], esi
mov dword [esi], 0x6580c8
mov dword [esi + 4], 0
mov eax, dword [esi]
mov ecx, dword [eax + 4]
mov dword [esp + 0x2c], 0
mov dword [ecx + esi + 4], 0
mov ebx, 1
push 0x48
mov byte [esp + 0x30], bl
call fcn.004063f0
mov edi, eax
add esp, 4
mov dword [esp + 0x10], edi
test edi, edi
mov byte [esp + 0x2c], 2
je 0x4c8112
push ebx
sub esp, 0x18
lea edx, [esp + 0x50]
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
call fcn.00403e10
mov ecx, edi
call fcn.004326e0
jmp 0x4c8114
xor eax, eax
push ebx
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x34], bl
call fcn.0041f650
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov byte [esp + 0x30], 3
call fcn.00493150
lea ecx, [esp + 0x18]
mov byte [esp + 0x2c], bl
call fcn.0041fff0
mov edx, dword [esi]
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [edx + 4]
add ecx, esi
call fcn.00425ed0
mov ecx, eax
call fcn.00429900
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
add ecx, eax
mov byte [esp + 0x2c], 4
call fcn.004304e0
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x14]
lea ecx, [esp + 0x18]
mov byte [esp + 0x2c], bl
call fcn.0042ce80
mov eax, dword [esp + 0x48]
lea ecx, [esp + 0x44]
cmp eax, ecx
mov dword [esp + 0x2c], 0xffffffff
je 0x4c81b8
mov ecx, dword [esp + 0x34]
test ecx, ecx
je 0x4c81b8
sub eax, ecx
cmp eax, 0x80
jbe 0x4c81ae
push ecx
call fcn.00611869
add esp, 4
jmp 0x4c81b8
push eax
push ecx
call fcn.005d6970
add esp, 8
mov ecx, dword [esp + 0x24]
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
pop ebx
add esp, 0x24
ret 0x18
Function at 0x4cad20
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, dword fs:[0]
fld dword [esp + 0xc]
fcomp dword [esp + 8]
push 0xffffffffffffffff
push 0x636848
push eax
mov dword fs:[0], esp
fnstsw ax
sub esp, 0x18
push esi
test ah, 5
mov esi, ecx
lea eax, [esp + 0x30]
jnp 0x4cad52
lea eax, [esp + 0x34]
mov eax, dword [eax]
mov edx, dword [esp + 0x30]
mov ecx, eax
push ecx
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x30]
push edx
push eax
lea ecx, [esp + 0x10]
call fcn.0049a760
mov ecx, dword [esi + 4]
cmp ecx, dword [esi + 8]
mov dword [esp + 0x24], 0
je 0x4cad93
push eax
push ecx
call fcn.00494eb0
mov eax, dword [esi + 4]
add esp, 8
add eax, 0x18
mov dword [esi + 4], eax
jmp 0x4cada5
push 1
push 1
lea edx, [esp + 0x3c]
push edx
push eax
push ecx
mov ecx, esi
call fcn.004bd110
lea ecx, [esp + 8]
mov dword [esp + 0x24], 0xffffffff
call fcn.0048f9a0
mov ecx, dword [esp + 0x1c]
pop esi
mov dword fs:[0], ecx
add esp, 0x24
ret 0xc
Function at 0x4cb9b8
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x630a37
push eax
mov dword fs:[0], esp
sub esp, 0x14
push esi
mov esi, ecx
mov eax, dword [esi + 0xc]
mov ecx, dword [esi]
lea eax, [eax + eax*2]
lea eax, [ecx + eax*8 + 4]
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
add ecx, eax
call fcn.0048ea80
fld dword [0x654e5c]
mov ecx, eax
fcomp dword [ecx + 0x10]
fnstsw ax
test ah, 0x41
jp 0x4cba23
fld dword [ecx + 0x10]
fcomp dword [ecx + 0xc]
fnstsw ax
test ah, 0x41
jp 0x4cba23
fld dword [ecx + 0xc]
fcomp dword [0x654e5c]
fnstsw ax
test ah, 0x41
jne 0x4cba23
fld dword [ecx + 0x10]
fdiv dword [ecx + 0xc]
fsubr dword [0x6532d8]
fld dword [0x6532d8]
fxch st(1)
fucompp
fnstsw ax
test ah, 0x44
jp 0x4cbb0b
mov edx, dword [esi]
mov ecx, dword [esi + 4]
sub ecx, edx
mov eax, 0x2aaaaaab
imul ecx
mov eax, dword [esi + 0xc]
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
inc eax
xor edx, edx
div ecx
push ebp
push edi
push 0x48
mov dword [esi + 0xc], edx
call fcn.004063f0
mov ebp, eax
add esp, 4
mov dword [esp + 0x10], ebp
test ebp, ebp
mov dword [esp + 0x28], 0
je 0x4cbab7
mov eax, dword [esi + 0xc]
push ebx
mov ebx, dword [esi]
push 1
lea edi, [eax + eax*2]
shl edi, 3
fld dword [edi + ebx + 0x14]
push 0
fsub dword [edi + ebx + 0x10]
push 0
push 0
push 1
fstp dword [esp + 0x24]
call fcn.006122e1
mov dword [esp + 0x48], eax
fild dword [esp + 0x48]
push ecx
fld dword [esp + 0x28]
mov ecx, ebp
fsub dword [0x653bc4]
fmulp st(1)
fmul dword [0x656298]
fadd dword [edi + ebx + 0x10]
fstp dword [esp]
call fcn.00492180
pop ebx
jmp 0x4cbab9
xor eax, eax
push 1
or edi, 0xffffffff
push eax
lea ecx, [esp + 0x1c]
mov dword [esp + 0x30], edi
call fcn.0048eed0
mov eax, dword [esi]
mov esi, dword [esi + 0xc]
lea edx, [esp + 0x14]
lea ecx, [esi + esi*2]
push edx
lea ecx, [eax + ecx*8 + 4]
mov dword [esp + 0x2c], 1
call fcn.00493570
lea ecx, [esp + 0x14]
mov dword [esp + 0x28], edi
call fcn.0048f9a0
pop edi
pop ebp
pop esi
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
add esp, 0x20
ret 4
mov eax, dword [esi + 0xc]
mov ecx, dword [esp + 0x28]
lea edx, [eax + eax*2]
mov eax, dword [esi]
lea eax, [eax + edx*8 + 4]
mov edx, dword [eax]
push ecx
mov ecx, dword [edx + 4]
add ecx, eax
call fcn.0048ea80
mov ecx, eax
call fcn.004ac640
mov ecx, dword [esp + 0x18]
pop esi
mov dword fs:[0], ecx
add esp, 0x20
ret 4