joyce8/EMBER2024-capa huggingface dataset:
Function at 0x40a1c0
Capabilities:
Read file on windows

Disassembly:
mov eax, dword [0x4f7760]
sub esp, 0x244
push ebx
xor ebx, ebx
push esi
cmp eax, ebx
je 0x40a1e2
push eax
call fcn.004835c6
add esp, 4
mov dword [0x4f7760], ebx
lea edx, [esp + 0x140]
mov eax, edi
sub edx, edi
lea ecx, [ecx]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x40a1f0
lea eax, [esp + 0x140]
dec eax
mov cl, byte [eax + 1]
inc eax
cmp cl, bl
jne 0x40a202
mov ecx, dword [str..wsc]
mov dl, byte [0x4c70ec]
mov dword [eax], ecx
mov byte [eax + 4], dl
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x144]
push ecx
call fcn.00484b22
add esp, 8
cmp eax, 0xffffffff
jne 0x40a2aa
mov eax, 0x4c708c
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40a240
sub eax, edx
je 0x40a29f
push 1
lea edx, [esp + 0x3c]
push edx
lea eax, [esp + 0x148]
push eax
push str.RIO.ARC
mov dword [0x4f773c], 1
call fcn.004635c0
mov esi, eax
add esp, 0x10
cmp esi, ebx
jne 0x40a2d4
push 1
lea ecx, [esp + 0x3c]
push ecx
lea edx, [esp + 0x148]
push edx
push 0x4c708c
mov dword [0x4f773c], ebx
call fcn.004635c0
mov esi, eax
add esp, 0x10
cmp esi, ebx
jne 0x40a2d4
xor eax, eax
pop esi
pop ebx
add esp, 0x244
ret
push eax
call fcn.00484414
add esp, 4
lea eax, [esp + 0x140]
push 0x4c70fc
push eax
call fcn.0048466b
mov esi, eax
add esp, 8
cmp esi, ebx
je 0x40a29f
mov dword [0x4f773c], ebx
mov eax, dword [esp + 0x38]
sub eax, 8
push eax
mov dword [esp + 0x3c], eax
call fcn.004836a3
add esp, 4
mov dword [0x4f7760], eax
push esi
cmp eax, ebx
jne 0x40a305
call fcn.004854f7
add esp, 4
xor eax, eax
pop esi
pop ebx
add esp, 0x244
ret
mov ecx, dword [esp + 0x3c]
push ecx
push 1
push eax
call fcn.00484992
push esi
push 1
push 4
push 0x4f7744
call fcn.00484992
push esi
push 1
push 4
push 0x4f7748
call fcn.00484992
push esi
call fcn.004854f7
mov esi, dword [esp + 0x6c]
add esp, 0x34
xor edx, edx
cmp esi, ebx
jbe 0x40a371
mov eax, dword [0x4f7760]
mov cl, byte [eax + edx]
mov byte [esp + 0x10], cl
mov al, byte [esp + 0x10]
mov cl, 2
ror al, cl
mov byte [esp + 0xf], al
mov al, byte [esp + 0xf]
mov ecx, dword [0x4f7760]
mov byte [ecx + edx], al
mov esi, dword [esp + 0x38]
inc edx
cmp edx, esi
jb 0x40a343
mov edx, 0x4f774c
mov eax, edi
sub edx, edi
lea ebx, [ebx]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x40a380
mov edx, dword [0x4f7760]
mov dword [0x4f7740], esi
xor esi, esi
mov dword [0x4f7764], edx
mov dword [0x913070], ebx
cmp dword [0x4e5d90], ebx
je 0x40a3ee
mov eax, 0x4e5d90
mov eax, dword [eax]
push eax
push 0x4f774c
call fcn.0048398d
add esp, 8
test eax, eax
je 0x40a3e4
inc esi
cmp dword [esi*4 + 0x4e5d90], ebx
lea eax, [esi*4 + 0x4e5d90]
jne 0x40a3b1
mov eax, 1
pop esi
pop ebx
add esp, 0x244
ret
mov dword [0x913070], 1
pop esi
mov eax, 1
pop ebx
add esp, 0x244
ret
Function at 0x4166c0
Capabilities:
Read file on windows

Disassembly:
sub esp, 8
push ebx
push ebp
push esi
push edi
mov edi, eax
test edx, edx
je 0x416706
mov eax, edx
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4166d2
sub eax, esi
je 0x416706
xor eax, eax
cmp dword [0x912308], eax
lea ecx, [esp + 0x14]
setne al
push eax
push ecx
push edi
push edx
call fcn.004635c0
add esp, 0x10
mov esi, eax
test esi, esi
jne 0x416716
pop edi
pop esi
pop ebp
pop ebx
add esp, 8
ret
push 0x4c70fc
push edi
call fcn.0048466b
add esp, 8
jmp 0x4166f8
mov ebp, dword [esp + 0x1c]
imul ebp, ebp, 0x1ef70
push esi
push 0xd
lea edx, [ebp + 0x5ff4c8]
push 1
push edx
mov dword [esp + 0x24], ebp
call fcn.00484992
add esp, 0x10
lea ebp, [ebp + 0x5ff66c]
mov dword [esp + 0x10], 0x64
push esi
push 1
lea eax, [ebp - 0x194]
push 4
push eax
call fcn.00484992
add esp, 0x10
mov edi, ebp
mov ebx, 0x64
push esi
push 1
lea ecx, [edi - 0x190]
push 4
push ecx
call fcn.00484992
push esi
push 1
push 4
push edi
call fcn.00484992
push esi
push 1
lea edx, [edi + 0x190]
push 4
push edx
call fcn.00484992
add esp, 0x30
add edi, 4
sub ebx, 1
jne 0x416761
add ebp, 0x4b4
sub dword [esp + 0x10], 1
jne 0x416746
push esi
call fcn.004854f7
mov eax, dword [esp + 0x18]
add esp, 4
lea esi, [eax + 0x61d498]
lea edx, [eax + 0x5ff4dc]
lea edi, [ebx + 0x64]
xor eax, eax
mov ecx, edx
cmp dword [ecx], 0xffffffff
je 0x4167d6
inc eax
add ecx, 4
cmp eax, 0x64
jl 0x4167c6
jmp 0x4167d8
mov dword [esi], eax
cmp eax, 0x64
jne 0x4167df
mov dword [esi], eax
add edx, 0x4b4
add esi, 0x28
sub edi, 1
jne 0x4167c2
mov eax, dword [esp + 0x1c]
pop edi
pop esi
pop ebp
pop ebx
add esp, 8
jmp fcn.00416800
Function at 0x418f50
Capabilities:
Write file on windows

Disassembly:
sub esp, 0x104
push esi
push 0x912f68
lea eax, [esp + 8]
push str._s_save000
push eax
call fcn.00483a3c
lea ecx, [esp + 0x10]
push 0x4c7328
push ecx
call fcn.0048466b
mov esi, eax
add esp, 0x14
test esi, esi
jne 0x418f8b
pop esi
add esp, 0x104
ret
push esi
push 1
push 4
push 0x913114
call fcn.00484db4
push esi
push 0x7d0
push 2
push 0x6d88a8
call fcn.00484db4
push esi
push 0xf4240
push 1
push 0x502f68
call fcn.00484db4
push esi
push 0x3e8
push 4
push 0x4fddc8
call fcn.00484db4
add esp, 0x40
push esi
push 0x3e8
push 4
push 0x4f4ca8
call fcn.00484db4
push esi
push 0x101
push 1
push 0x7ec5d0
call fcn.00484db4
push esi
call fcn.004854f7
add esp, 0x24
mov eax, 1
pop esi
add esp, 0x104
ret

Function at 0x419010
Capabilities:
Read file on windows

Disassembly:
sub esp, 0x104
push esi
push 0x912f68
lea eax, [esp + 8]
push str._s_save000
push eax
call fcn.00483a3c
lea ecx, [esp + 0x10]
push 0x4c70fc
push ecx
call fcn.0048466b
mov esi, eax
add esp, 0x14
test esi, esi
jne 0x41904b
pop esi
add esp, 0x104
ret
push esi
push 1
push 4
push 0x913114
call fcn.00484992
push esi
push 0x7d0
push 2
push 0x6d88a8
call fcn.00484992
push esi
push 0xf4240
push 1
push 0x502f68
call fcn.00484992
push esi
push 0x3e8
push 4
push 0x4fddc8
call fcn.00484992
add esp, 0x40
push esi
push 0x3e8
push 4
push 0x4f4ca8
call fcn.00484992
push esi
push 0x101
push 1
push 0x7ec5d0
call fcn.00484992
push esi
call fcn.004854f7
add esp, 0x24
mov eax, 1
pop esi
add esp, 0x104
ret
Function at 0x41b740
Capabilities:
Read file on windows

Disassembly:
mov eax, dword [0x5fd070]
sub esp, 0x10c
push ebx
push ebp
mov ebp, dword [esp + 0x118]
xor ebx, ebx
push esi
cmp eax, ebx
je 0x41b7a2
mov ecx, dword [0x5fd078]
cmp ecx, ebx
je 0x41b773
push ecx
call fcn.004835c6
mov eax, dword [0x5fd070]
add esp, 4
mov dword [0x5fd078], ebx
cmp eax, ebx
je 0x41b786
push eax
call fcn.004835c6
add esp, 4
xor eax, eax
mov dword [0x5fd070], ebx
mov dword [0x5fd080], eax
mov dword [0x5fd084], eax
mov dword [0x5fd088], eax
mov byte [0x5fd08c], al
lea edx, [esp + 0x10]
mov eax, edi
sub edx, edi
lea ebx, [ebx]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x41b7b0
lea eax, [esp + 0x10]
dec eax
nop
mov cl, byte [eax + 1]
inc eax
cmp cl, bl
jne 0x41b7c0
mov ecx, dword [str..fil]
mov dl, byte [0x4c7348]
mov dword [eax], ecx
mov byte [eax + 4], dl
xor eax, eax
cmp dword [0x912308], ebx
lea ecx, [esp + 0xc]
setne al
lea edx, [esp + 0x10]
push eax
push ecx
push edx
push ebp
call fcn.004635c0
mov esi, eax
add esp, 0x10
cmp esi, ebx
je 0x41b8ad
push esi
push 1
push 4
push 0x5fd064
call fcn.00484992
push esi
push 1
push 4
push 0x5fd068
call fcn.00484992
push esi
call fcn.004854f7
mov eax, dword [0x5fd064]
mov ecx, dword [0x5fd068]
add eax, 7
sar eax, 3
imul ecx, eax
add ecx, 7
add esp, 0x24
push ecx
mov dword [0x5fd06c], eax
call fcn.004836a3
add esp, 4
mov dword [0x5fd070], eax
cmp eax, ebx
je 0x41b8ad
test al, 7
je 0x41b865
shr eax, 3
lea eax, [eax*8 + 8]
mov dword [0x5fd074], eax
push eax
lea eax, [esp + 0x14]
mov edx, ebp
call fcn.00467360
add esp, 4
test eax, eax
jne 0x41b8b9
mov eax, dword [0x5fd078]
cmp eax, ebx
je 0x41b88f
push eax
call fcn.004835c6
add esp, 4
mov eax, dword [0x5fd070]
mov dword [0x5fd078], ebx
cmp eax, ebx
je 0x41b8a7
push eax
call fcn.004835c6
add esp, 4
mov dword [0x5fd070], ebx
xor eax, eax
pop esi
pop ebp
pop ebx
add esp, 0x10c
ret
mov edx, 0x5fd080
mov eax, edi
sub edx, edi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x41b8c2
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x10c
ret
Function at 0x421610
Capabilities:
Read file on windows

Disassembly:
sub esp, 0x4c
cmp dword [0x4fed68], 0
push ebx
mov ebx, dword [esp + 0x54]
push esi
push edi
mov esi, eax
je 0x42164b
mov eax, dword [0x4ff194]
test eax, eax
je 0x421637
push eax
call fcn.004835c6
add esp, 4
push 0x5c4
push 0
push 0x4fed68
call fcn.00487bc0
add esp, 0xc
mov edx, 0x4fed6c
mov eax, esi
sub edx, esi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x421654
test ebx, ebx
je 0x42169a
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x421667
sub eax, edx
je 0x42169a
xor eax, eax
cmp dword [0x912308], eax
lea ecx, [esp + 0x5c]
setne al
push eax
push ecx
push esi
push ebx
call fcn.004635c0
mov esi, eax
add esp, 0x10
test esi, esi
jne 0x4216b7
pop edi
pop esi
pop ebx
add esp, 0x4c
ret
push 0x4c70fc
push esi
call fcn.0048466b
mov esi, eax
add esp, 8
test esi, esi
jne 0x4216b7
xor eax, eax
pop edi
pop esi
pop ebx
add esp, 0x4c
ret
push esi
push 1
push 4
push 0x4fed84
call fcn.00484992
push esi
push 0xd
lea edx, [esp + 0x2c]
push 1
push edx
call fcn.00484992
add esp, 0x20
mov edi, 0x4fed98
lea ecx, [ecx]
push esi
push 1
push 4
push edi
call fcn.00484992
add edi, 4
add esp, 0x10
cmp edi, 0x4ff194
jl 0x4216e0
mov edi, 0x4ff19c
mov edi, edi
push esi
push 0x10
push 1
push edi
call fcn.00484992
add edi, 0x10
add esp, 0x10
cmp edi, 0x4ff32c
jl 0x421700
push esi
call fcn.004854f7
lea eax, [esp + 0x18]
add esp, 4
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x421727
mov ecx, dword [str..msk]
mov dl, byte [0x4c6ef8]
mov dword [eax], ecx
push 1
mov byte [eax + 4], dl
push 1
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x4c]
push ecx
push ebx
lea eax, [esp + 0x28]
call fcn.004666e0
add esp, 0x14
test eax, eax
je 0x4216ae
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
mov dword [0x4fed8c], eax
lea eax, [esp + 0x14]
mov dword [0x4fed88], edx
call fcn.0043ac90
push 1
push 1
lea ecx, [esp + 0x64]
push ecx
lea edx, [esp + 0x34]
mov edi, eax
push edx
push edi
lea eax, [esp + 0x28]
call fcn.004666e0
add esp, 0x14
test eax, eax
je 0x4216ae
cmp dword [esp + 0x5c], 8
jne 0x4216ae
mov eax, dword [esp + 0x2c]
imul eax, dword [esp + 0x28]
add eax, 7
push eax
call fcn.004836a3
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x4216ae
test bl, 7
je 0x4217df
shr eax, 3
lea esi, [eax*8 + 8]
jmp 0x4217e1
mov esi, ebx
push 0
push 1
lea ecx, [esp + 0x30]
push esi
push ecx
lea eax, [esp + 0x24]
mov edx, edi
call fcn.00466950
add esp, 0x10
test eax, eax
jne 0x42180f
push ebx
call fcn.004835c6
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebx
add esp, 0x4c
ret
pop edi
mov dword [0x4ff198], esi
pop esi
mov dword [0x4ff194], ebx
mov dword [0x4fed68], 1
mov eax, 1
pop ebx
add esp, 0x4c
ret
Function at 0x422d80
Capabilities:
Read file on windows

Disassembly:
sub esp, 0x110
push ebx
push ebp
push esi
xor esi, esi
push edi
mov dword [0x4f5c7c], eax
cmp dword [esp + 0x124], esi
je 0x422dd7
mov ecx, dword [0x4f5c80]
add ecx, 0xfffffff5
cmp ecx, 9
ja 0x422dd7
cmp eax, 9
jge 0x422db8
lea edx, [eax + 1]
mov dword [0x4f5ca8], edx
jmp 0x422dbe
mov dword [0x4f5ca8], esi
cmp eax, 9
jge 0x422dcd
add eax, 0xc
mov dword [0x4f5c80], eax
jmp 0x422dd7
mov dword [0x4f5c80], 0xb
mov ebp, 0x4f6650
mov dword [esp + 0x10], 0x4f6904
mov dword [esp + 0x14], 0x872654
mov ebx, 0x7ef3fc
push 0x45
push 0
push ebp
call fcn.00487bc0
mov eax, dword [esp + 0x1c]
add esp, 0xc
push 0x16c
push 0
push eax
call fcn.00487bc0
mov eax, dword [esi*4 + 0x903944]
add esp, 0xc
test eax, eax
je 0x422e3d
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x14]
mov dword [ebx], 0
mov dword [esi*4 + 0x903944], 0
mov byte [eax], 0
mov eax, dword [0x4f5c7c]
cmp eax, 9
push 0x912e68
jge 0x422e65
lea ecx, [eax + eax*4]
lea edx, [esi + ecx*2 + 1]
push edx
push 0x912f68
push str._s_save_03d._s
lea eax, [esp + 0x28]
push eax
jmp 0x422e9a
cmp esi, 5
jge 0x422e83
mov ecx, dword [esi*4 + 0x4f6628]
push ecx
push 0x912f68
push str._s_asave_1d._s
lea edx, [esp + 0x28]
push edx
jmp 0x422e9a
mov eax, dword [esi*4 + 0x4f6628]
push eax
push 0x912f68
push str._s_save_03d._s
lea ecx, [esp + 0x28]
push ecx
call fcn.00483a3c
add esp, 0x14
push 0
push 0
lea edx, [esi + 0x3c3]
push 1
push edx
lea edi, [esp + 0x28]
call fcn.00401410
mov eax, edi
push 0x4c70fc
push eax
call fcn.0048466b
mov edi, eax
add esp, 0x18
test edi, edi
je 0x422efa
push 2
push 0xffffffffffffffbc
push edi
call fcn.004853aa
add esp, 0xc
push edi
push 0x44
push 1
push ebp
call fcn.00484992
push esi
mov ecx, edi
call fcn.004313b0
add esp, 0x14
push edi
call fcn.004854f7
add esp, 4
add dword [esp + 0x14], 0x220
add dword [esp + 0x10], 0x16c
add ebx, 0xc
inc esi
add ebp, 0x45
cmp ebx, 0x7ef474
jl 0x422df1
mov edi, 1
mov dword [0x4f5c88], edi
mov dword [0x4fdaac], edi
call fcn.00422fd0
xor esi, esi
mov dword [0x5ff4a8], edi
mov dword [0x5ff4ac], esi
mov dword [0x5ff4b0], esi
mov dword [0x5ff4c0], esi
call dword [0x4b939c]
cmp dword [0x5ff4b0], 0x2f
mov dword [0x5ff4bc], eax
jne 0x422f91
mov ecx, dword [0x904a44]
mov edx, dword [0x5ff4b8]
mov eax, dword [edx*4 + 0x902a38]
push ecx
mov ecx, dword [0x5ff4b4]
mov edx, dword [ecx*4 + 0x902a38]
push eax
mov eax, dword [0x5ff4c0]
push edx
push eax
push 0x2f
call fcn.0043eb70
cmp dword [0x9133f4], esi
je 0x422fc5
cmp dword [0x913404], esi
jne 0x422fc5
mov dword [0x913418], esi
mov dword [0x913408], esi
mov dword [0x91340c], esi
mov dword [0x913414], esi
mov dword [0x913400], esi
mov dword [0x913410], edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x110
ret
Function at 0x42dfd0
Capabilities:
Read file on windows

Disassembly:
sub esp, 0x134
push ebx
push ebp
push esi
push edi
push 0x3c04
xor ebx, ebx
push ebx
push 0x4ff360
call fcn.00487bc0
add esp, 0xc
lea eax, [esp + 0x18]
push eax
push str.txtcolor.def
call fcn.00484b22
add esp, 8
cmp eax, 0xffffffff
jne 0x42e047
mov eax, 0x4c708c
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x42e010
sub eax, edx
je 0x42e03a
push 1
lea ecx, [esp + 0x3c]
push ecx
push str.txtcolor.def
push 0x4c708c
call fcn.004635c0
mov esi, eax
add esp, 0x10
test esi, esi
jne 0x42e073
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x134
ret
push eax
call fcn.00484414
add esp, 4
push 0x4c70fc
push str.txtcolor.def
call fcn.0048466b
mov esi, eax
add esp, 8
test esi, esi
jne 0x42e073
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x134
ret
mov edx, dword [esp + 0x38]
inc edx
push edx
call fcn.00483cf2
mov ebp, eax
add esp, 4
test ebp, ebp
je 0x42e03a
mov eax, dword [esp + 0x38]
mov byte [eax + ebp], bl
mov ecx, dword [esp + 0x38]
push esi
push ecx
push 1
push ebp
call fcn.00484992
push esi
call fcn.004854f7
add esp, 0x14
push 0x4ff368
push 0x4ff364
push str._d__s
push ebp
mov edi, ebp
call fcn.00483cd0
add esp, 0x10
cmp eax, 2
jne 0x42e119
mov esi, 0x4ff368
lea esp, [esp]
push esi
push edi
call fcn.00483f10
mov edi, eax
mov eax, esi
add esp, 8
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x42e0e1
sub eax, edx
add edi, eax
inc ebx
mov eax, ebx
shl eax, 4
sub eax, ebx
add eax, eax
add eax, eax
lea esi, [eax + 0x4ff368]
push esi
lea edx, [eax + 0x4ff364]
push edx
push str._d__s
push edi
call fcn.00483cd0
add esp, 0x10
cmp eax, 2
je 0x42e0d0
push ebp
mov dword [0x4ff360], ebx
call fcn.004846e7
add esp, 4
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x134
ret

Function at 0x42e630
Capabilities:
Read file on windows

Disassembly:
sub esp, 0x130
push esi
push 0x912e68
push eax
push 0x912f68
lea ecx, [esp + 0x34]
push str._s_asave_1d._s
push ecx
call fcn.00483a3c
lea edx, [esp + 0x3c]
push 0x4c70fc
push edx
call fcn.0048466b
mov esi, eax
add esp, 0x1c
test esi, esi
jne 0x42e671
pop esi
add esp, 0x130
ret
push esi
push 1
lea eax, [esp + 0x10]
push 4
push eax
call fcn.00484992
add esp, 0x10
cmp dword [esp + 8], 0x46504957
push 0
jne 0x42e6b8
push 8
push esi
call fcn.004853aa
push esi
push 0x18
lea ecx, [esp + 0x24]
push 1
push ecx
call fcn.00484992
mov edx, dword [esp + 0x40]
push 1
push edx
push esi
call fcn.004853aa
add esp, 0x28
jmp 0x42e6c3
push 0
push esi
call fcn.004853aa
add esp, 0xc
push esi
push 1
lea eax, [esp + 0x14]
push 4
push eax
call fcn.00484992
mov ecx, dword [esp + 0x14c]
push esi
push 0x11
push 1
push ecx
call fcn.00484992
mov edx, dword [esp + 0x158]
push esi
push 1
push 4
push edx
call fcn.00484992
push esi
call fcn.004854f7
add esp, 0x34
mov eax, 1
pop esi
add esp, 0x130
ret
Function at 0x42e9c0
Capabilities:
Read file on windows

Disassembly:
sub esp, 0x124
cmp dword [esp + 0x128], 0
push esi
push 0x912e68
push eax
mov dword [edi], 0
push 0x912f68
je 0x42e9ee
push str._s_asave_1d._s
lea eax, [esp + 0x30]
push eax
jmp 0x42e9f8
push str._s_save_03d._s
lea ecx, [esp + 0x30]
push ecx
call fcn.00483a3c
add esp, 0x14
lea edx, [esp + 0x20]
push 0x4c70fc
push edx
call fcn.0048466b
mov esi, eax
add esp, 8
test esi, esi
jne 0x42ea20
pop esi
add esp, 0x124
ret
push esi
push 1
lea eax, [esp + 0xc]
push 4
push eax
call fcn.00484992
add esp, 0x10
cmp dword [esp + 4], 0x46504957
push 0
jne 0x42ea67
push 8
push esi
call fcn.004853aa
push esi
push 0x18
lea ecx, [esp + 0x1c]
push 1
push ecx
call fcn.00484992
mov edx, dword [esp + 0x38]
push 1
push edx
push esi
call fcn.004853aa
add esp, 0x28
jmp 0x42ea72
push 0
push esi
call fcn.004853aa
add esp, 0xc
push esi
push 1
push 4
push edi
call fcn.00484992
push esi
call fcn.004854f7
add esp, 0x14
mov eax, 1
pop esi
add esp, 0x124
ret
Function at 0x4313b0
Capabilities:
Read file on windows

Disassembly:
mov eax, 0x55f8
call fcn.00487230
push ebx
push ebp
mov ebp, dword [esp + 0x5604]
push esi
push edi
push 0
mov esi, ecx
push 0
push esi
call fcn.004853aa
push esi
mov edi, 1
push edi
lea eax, [esp + 0x28]
push 4
push eax
call fcn.00484992
add esp, 0x1c
cmp dword [esp + 0x14], 0x46504957
push 0
jne 0x43141a
push 8
push esi
call fcn.004853aa
push esi
push 0x18
lea ecx, [esp + 0x2c]
push edi
push ecx
call fcn.00484992
mov edx, dword [esp + 0x48]
push edi
push edx
push esi
call fcn.004853aa
add esp, 0x28
jmp 0x431425
push 0
push esi
call fcn.004853aa
add esp, 0xc
push edi
push 4
push esi
call fcn.004853aa
push edi
push 0x11
push esi
call fcn.004853aa
push edi
push 4
push esi
call fcn.004853aa
push edi
push 0xe4
push esi
call fcn.004853aa
push edi
push 4
push esi
call fcn.004853aa
push esi
push edi
lea eax, [esp + 0x1a2c]
push 0x3c1c
push eax
call fcn.00484992
add esp, 0x4c
push esi
push edi
lea ecx, [esp + 0x38]
push 0x19b4
push ecx
call fcn.00484992
add esp, 0x10
cmp dword [esp + 0x30], 0
je 0x4314f3
mov eax, dword [esp + 0x3c]
imul ebp, ebp, 0x16c
mov dword [ebp + 0x4f690c], edi
mov dword [ebp + 0x4f6910], eax
test eax, eax
jle 0x4314e2
lea edx, [esp + 0x5e]
lea ebx, [ebp + 0x4f695d]
lea edi, [ebp + 0x4f6914]
mov dword [esp + 0x14], eax
mov eax, dword [edx - 0x1a]
mov esi, ebx
mov dword [edi], eax
mov eax, edx
sub esi, edx
mov cl, byte [eax]
mov byte [esi + eax], cl
inc eax
test cl, cl
jne 0x4314c0
add edi, 4
add ebx, 0x37
add edx, 0x520
sub dword [esp + 0x14], 1
jne 0x4314b5
mov edi, 1
mov dword [ebp + 0x4f6904], edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x55f8
ret
cmp dword [esp + 0x1a04], 0
je 0x431554
mov eax, dword [esp + 0x1a08]
mov esi, ebp
imul esi, esi, 0x16c
mov dword [esi + 0x4f6908], eax
test eax, eax
je 0x431532
lea eax, [esp + 0x4e04]
lea edx, [esi + 0x4f6928]
mov ecx, eax
sub edx, ecx
mov cl, byte [eax]
mov byte [edx + eax], cl
add eax, edi
test cl, cl
jne 0x431527
lea eax, [esp + 0x5204]
lea edx, [esi + 0x4f695d]
mov ecx, eax
sub edx, ecx
mov cl, byte [eax]
mov byte [edx + eax], cl
add eax, edi
test cl, cl
jne 0x431543
mov dword [esi + 0x4f6904], edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x55f8
ret
Function at 0x43e3b0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b7380
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x140
mov eax, dword [ebp + 0xc]
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebx], 0
mov dword [ebx + 4], 0
test eax, eax
je 0x43e3ff
lea edx, [ebp - 0x148]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x43e3f3
jmp 0x43e411
lea eax, [ebp - 0x148]
push eax
push 0x104
call dword [0x4b9134]
lea eax, [ebp - 0x148]
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x43e420
sub eax, edx
je 0x43e462
lea eax, [ebp - 0x148]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x43e434
sub eax, edx
cmp byte [ebp + eax - 0x149], 0x5c
je 0x43e462
lea edi, [ebp - 0x148]
dec edi
mov edi, edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x43e450
mov cx, word [0x4c76dc]
mov word [edi], cx
lea eax, [ebp - 0x148]
dec eax
lea esp, [esp]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x43e470
mov edx, dword [0x4c708c]
mov ecx, dword [0x4c7090]
mov dword [eax], edx
lea edx, [ebp - 0x148]
push 0x4c70fc
xor edi, edi
push edx
mov dword [eax + 4], ecx
mov dword [ebp - 4], edi
call fcn.0048466b
mov esi, eax
add esp, 8
mov dword [ebp - 0x14], esi
cmp esi, edi
jne 0x43e4c0
push 0x4db988
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x28], 0xffffffff
call fcn.00486a6b
push esi
push 1
lea ecx, [ebp + 0xc]
push 4
push ecx
call fcn.00484992
add esp, 0x10
cmp edi, dword [ebp + 0xc]
jl 0x43e519
push 0x4db988
lea edx, [ebp - 0x24]
push edx
mov dword [ebp - 0x24], 0xffffffff
call fcn.00486a6b
mov eax, 0x43e4f1
ret
test esi, esi
je 0x43e504
push esi
call fcn.004854f7
add esp, 4
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov eax, ebx
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 8
push esi
push 4
lea eax, [ebp - 0x18]
push 1
push eax
call fcn.00484992
push esi
push 1
lea ecx, [ebp - 0x20]
push 4
push ecx
call fcn.00484992
push esi
push 1
lea edx, [ebp - 0x1c]
push 4
push edx
call fcn.00484992
lea eax, [ebp - 0x18]
push 0x4c76e0
push eax
inc edi
call fcn.0048398d
add esp, 0x38
test eax, eax
jne 0x43e4d1
xor edi, edi
nop
cmp edi, dword [ebp - 0x20]
jge 0x43e4f7
mov eax, 0x15
mov ecx, edi
imul ecx, eax
add ecx, dword [ebp - 0x1c]
push 0
push ecx
push esi
call fcn.004853aa
push esi
push 0xd
lea edx, [ebp - 0x38]
push 1
push edx
call fcn.00484992
push esi
push 1
lea eax, [ebp - 0x40]
push 4
push eax
call fcn.00484992
push esi
push 1
lea ecx, [ebp - 0x3c]
push 4
push ecx
call fcn.00484992
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x40]
push 0
lea ecx, [eax + edx - 8]
push ecx
push esi
call fcn.004853aa
add esp, 0x48
push esi
push 1
lea edx, [ebp + 8]
push 4
push edx
call fcn.00484992
push esi
push 1
lea eax, [ebp - 0x14]
push 4
push eax
call fcn.00484992
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x14]
add dword [ebx], ecx
add dword [ebx + 4], edx
add esp, 0x20
inc edi
jmp 0x43e560