joyce8/EMBER2024-capa huggingface dataset:
Function at 0x420800
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5a9950
mov eax, dword fs:[0]
push eax
sub esp, 0x90
mov eax, dword [0x6e2f0c]
xor eax, esp
mov dword [esp + 0x8c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x6e2f0c]
xor eax, esp
push eax
lea eax, [esp + 0xa4]
mov dword fs:[0], eax
mov ecx, dword [esp + 0xbc]
xor ebx, ebx
mov eax, ecx
mov dword [esp + 0x40], 0xf
mov dword [esp + 0x3c], ebx
mov byte [esp + 0x2c], bl
lea esi, [eax + 1]
lea esp, [esp]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x420860
sub eax, esi
push eax
push ecx
lea ecx, [esp + 0x34]
call fcn.00421ae0
mov dword [esp + 0xac], ebx
cmp dword [esp + 0x3c], ebx
jbe 0x420a02
mov ebp, dword [esp + 0xb8]
xor esi, esi
cmp esi, dword [esp + 0x3c]
jae 0x420a02
push 1
push esi
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x20], 0x7c
call fcn.004210e0
mov esi, eax
cmp esi, ebx
jl 0x420a02
push 2
lea ecx, [esi + 1]
push ecx
lea edx, [esp + 0x6c]
push edx
lea ecx, [esp + 0x38]
call fcn.00421bd0
push esi
push ebx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0xb8], 1
call fcn.00421bd0
cmp dword [esp + 0x78], 0x10
mov eax, dword [esp + 0x64]
mov byte [esp + 0xac], 2
jae 0x4208fb
lea eax, [esp + 0x64]
push eax
call fcn.0058e95a
mov edi, eax
add esp, 4
cmp edi, 0x37
ja 0x4209b5
lea ecx, [esp + 0x80]
call fcn.00424f10
fld1
mov eax, dword [esp + 0x58]
fst dword [esp + 0x20]
lea ecx, [ebp - 2]
fstp dword [esp + 0x1c]
mov dword [esp + 0x18], ecx
fild dword [esp + 0x18]
lea edx, [eax + eax*2]
add edx, edx
mov dword [esp + 0x18], edx
fstp dword [esp + 0x28]
mov byte [esp + 0xac], 3
fild dword [esp + 0x18]
jns 0x420955
fadd dword [0x5b9d60]
fild dword [esp + 0xb4]
push ebx
lea eax, [esp + 0x84]
push eax
fadd qword [0x5bc138]
add edi, 0x94
push edi
mov ecx, 0x6f2ea0
faddp st(1)
fstp dword [esp + 0x30]
call fcn.0042a2f0
fldz
push 0xffffffffffffffff
lea ecx, [esp + 0x28]
push ecx
push ecx
fstp dword [esp]
push ebx
lea edx, [esp + 0x2c]
push edx
lea ecx, [esp + 0x94]
call fcn.00424f30
lea ecx, [esp + 0x80]
mov byte [esp + 0xac], 2
call fcn.00424f20
mov edi, 0x10
add esi, 2
cmp dword [esp + 0x5c], edi
jb 0x4209d0
mov eax, dword [esp + 0x48]
push eax
call fcn.0058e0a5
add esp, 4
mov dword [esp + 0x5c], 0xf
mov dword [esp + 0x58], ebx
mov byte [esp + 0x48], bl
mov byte [esp + 0xac], bl
cmp dword [esp + 0x78], edi
jb 0x4209fa
mov ecx, dword [esp + 0x64]
push ecx
call fcn.0058e0a5
add esp, 4
cmp esi, ebx
jge 0x42088e
cmp dword [esp + 0x40], 0x10
jb 0x420a16
mov edx, dword [esp + 0x2c]
push edx
call fcn.0058e0a5
add esp, 4
mov ecx, dword [esp + 0xa4]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x8c]
xor ecx, esp
call fcn.0058d3fe
add esp, 0x9c
ret 0xc
Function at 0x427ec0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5a9fee
mov eax, dword fs:[0]
push eax
sub esp, 0x90
mov eax, dword [0x6e2f0c]
xor eax, esp
mov dword [esp + 0x8c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x6e2f0c]
xor eax, esp
push eax
lea eax, [esp + 0xa4]
mov dword fs:[0], eax
mov ecx, dword [esp + 0xbc]
xor ebx, ebx
mov eax, ecx
mov dword [esp + 0x40], 0xf
mov dword [esp + 0x3c], ebx
mov byte [esp + 0x2c], bl
lea esi, [eax + 1]
lea esp, [esp]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x427f20
sub eax, esi
push eax
push ecx
lea ecx, [esp + 0x34]
call fcn.00421ae0
mov dword [esp + 0xac], ebx
cmp dword [esp + 0x3c], ebx
jbe 0x4280c2
mov ebp, dword [esp + 0xb8]
xor esi, esi
cmp esi, dword [esp + 0x3c]
jae 0x4280c2
push 1
push esi
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x20], 0x7c
call fcn.004210e0
mov esi, eax
cmp esi, ebx
jl 0x4280c2
push 2
lea ecx, [esi + 1]
push ecx
lea edx, [esp + 0x6c]
push edx
lea ecx, [esp + 0x38]
call fcn.00421bd0
push esi
push ebx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0xb8], 1
call fcn.00421bd0
cmp dword [esp + 0x78], 0x10
mov eax, dword [esp + 0x64]
mov byte [esp + 0xac], 2
jae 0x427fbb
lea eax, [esp + 0x64]
push eax
call fcn.0058e95a
mov edi, eax
add esp, 4
cmp edi, 0x37
ja 0x428075
lea ecx, [esp + 0x80]
call fcn.00424f10
fld1
mov eax, dword [esp + 0x58]
fst dword [esp + 0x20]
lea ecx, [ebp - 2]
fstp dword [esp + 0x1c]
mov dword [esp + 0x18], ecx
fild dword [esp + 0x18]
lea edx, [eax + eax*2]
add edx, edx
mov dword [esp + 0x18], edx
fstp dword [esp + 0x28]
mov byte [esp + 0xac], 3
fild dword [esp + 0x18]
jns 0x428015
fadd dword [0x5b9d60]
fild dword [esp + 0xb4]
push ebx
lea eax, [esp + 0x84]
push eax
fadd qword [0x5bc138]
add edi, 0x94
push edi
mov ecx, 0x6f2ea0
faddp st(1)
fstp dword [esp + 0x30]
call fcn.0042a2f0
fldz
push 0xffffffffffffffff
lea ecx, [esp + 0x28]
push ecx
push ecx
fstp dword [esp]
push ebx
lea edx, [esp + 0x2c]
push edx
lea ecx, [esp + 0x94]
call fcn.00424f30
lea ecx, [esp + 0x80]
mov byte [esp + 0xac], 2
call fcn.00424f20
mov edi, 0x10
add esi, 2
cmp dword [esp + 0x5c], edi
jb 0x428090
mov eax, dword [esp + 0x48]
push eax
call fcn.0058e0a5
add esp, 4
mov dword [esp + 0x5c], 0xf
mov dword [esp + 0x58], ebx
mov byte [esp + 0x48], bl
mov byte [esp + 0xac], bl
cmp dword [esp + 0x78], edi
jb 0x4280ba
mov ecx, dword [esp + 0x64]
push ecx
call fcn.0058e0a5
add esp, 4
cmp esi, ebx
jge 0x427f4e
cmp dword [esp + 0x40], 0x10
jb 0x4280d6
mov edx, dword [esp + 0x2c]
push edx
call fcn.0058e0a5
add esp, 4
mov ecx, dword [esp + 0xa4]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x8c]
xor ecx, esp
call fcn.0058d3fe
add esp, 0x9c
ret 0xc
Function at 0x436b60
Capabilities:
Access peb ldr_data
Get ntdll base address
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x5ab1c3
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x6e2f0c]
xor eax, esp
push eax
lea eax, [esp + 0x14]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x10], esi
call fcn.00429450
xor edi, edi
lea ecx, [esi + 0x50]
mov dword [esp + 0x1c], edi
mov dword [esi], vtable.cWindow.0
call fcn.00428750
mov ebx, 1
lea ecx, [esi + 0x194]
mov byte [esp + 0x1c], bl
call fcn.00424f10
fldz
fst dword [esi + 0x1e4]
xor eax, eax
fstp dword [esi + 0x1e8]
mov ecx, ebx
fld1
xor edx, edx
fst dword [esi + 0x1f0]
mov word [esi + 0x1c], ax
fstp dword [esi + 0x1f4]
mov dword [esi + 8], edi
mov word [esi + 0xc], cx
mov dword [esi + 0x10], ebx
mov dword [esi + 0x14], edi
mov dword [esi + 0x20], ebx
mov dword [esi + 0x24], edi
mov dword [esi + 0x1ec], edx
mov dword [esi + 0x1b4], edi
mov dword [esi + 0x38], edi
mov dword [esi + 0x28], edi
mov dword [esi + 4], edi
mov dword [esi + 0x44], edi
mov dword [esi + 0x40], edi
mov dword [esi + 0x1b8], 0xffffff
mov dword [esi + 0x1bc], 0xff
mov dword [esi + 0x1c0], 0x64
mov dword [esi + 0x18], 0x436b50
mov dword [esi + 0x30], edi
mov dword [esi + 0x2c], edi
mov dword [esi + 0x34], ebx
mov eax, esi
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add esp, 0x10
ret
Function at 0x438730
Capabilities:
Delete file

Disassembly:
push esi
push edi
push 0x5b9d48
push str.._image_InterfaceScript_AdvancedSetDlg.bin
mov edi, ecx
call fcn.004381f0
mov ecx, dword [edi + 0x18]
mov esi, eax
push esi
call fcn.005882d0
mov ecx, esi
call fcn.00508e50
pop edi
mov dword [0x6e5d3c], esi
mov ecx, esi
pop esi
jmp fcn.005099d0

Function at 0x439690
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 8
push ebx
push esi
push edi
push 0x5b9d48
push str.._image_InterfaceScript_21.bin
mov edi, ecx
call fcn.004381f0
fild dword [0x71ebe0]
mov esi, eax
mov eax, dword [0x71ebe0]
test eax, eax
jns 0x4396be
fadd dword [0x5b9d60]
movzx ecx, word [esi + 0x1ec]
mov ebx, dword [esi]
mov dword [esp + 0xc], ecx
fild dword [esp + 0xc]
fsubp st(1)
fsub qword [0x5ba188]
fstp dword [esp + 0xc]
fld dword [esi + 0x1c8]
fstp dword [esp + 0x10]
fld dword [esp + 0x10]
call fcn.0058e6e0
fld dword [esp + 0xc]
push eax
call fcn.0058e6e0
mov edx, dword [ebx + 0x24]
push eax
mov ecx, esi
call edx
mov ecx, dword [edi + 0x18]
push esi
call fcn.005882d0
mov ecx, esi
mov dword [0x6e5ac0], esi
call fcn.004c6e30
call fcn.0050d820
pop edi
pop esi
mov ecx, eax
pop ebx
add esp, 8
jmp fcn.0050d8a0

Function at 0x43ef10
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5ab48b
mov eax, dword fs:[0]
push eax
sub esp, 0xc4
mov eax, dword [0x6e2f0c]
xor eax, esp
mov dword [esp + 0xc0], eax
push esi
push edi
mov eax, dword [0x6e2f0c]
xor eax, esp
push eax
lea eax, [esp + 0xd0]
mov dword fs:[0], eax
mov esi, ecx
lea ecx, [esp + 0xc]
call fcn.00424f10
push 0
lea eax, [esp + 0x10]
push eax
push 0x3f
mov ecx, 0x6f2ea0
mov dword [esp + 0xe4], 0
call fcn.0042a2f0
push 0x166
mov ecx, 0x6f2e10
call fcn.00429a30
lea edx, [esp + 0x4c]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x43ef87
mov eax, dword [0x6f574c]
lea ecx, [eax + eax*4]
shl ecx, 7
add ecx, 0x6f4d0c
push ecx
mov ecx, dword [0x6e5ab8]
lea edx, [esp + 0x30]
push edx
call fcn.004c2dd0
mov edi, dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x50]
push ecx
mov edx, ecx
push str._s__s_
push edx
call edi
add esp, 0x10
push 0x33517d
lea eax, [esp + 0x10]
push eax
push 0xffffff
lea ecx, [esp + 0x58]
push ecx
mov ecx, dword [esi + 0x21c]
call fcn.00436ef0
push 0x168
mov ecx, 0x6f2e10
call fcn.00429a30
lea edx, [esp + 0x4c]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x43f004
mov eax, dword [0x6f574c]
mov ecx, dword [0x6e5ab8]
lea eax, [eax + eax*4]
shl eax, 7
add eax, 0x6f4d5c
push eax
lea edx, [esp + 0x30]
push edx
call fcn.004c2dd0
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x50]
push ecx
mov edx, ecx
push str._s__s_
push edx
call edi
add esp, 0x10
push 0x33517d
lea eax, [esp + 0x10]
push eax
push 0xffffff
lea ecx, [esp + 0x58]
push ecx
mov ecx, dword [esi + 0x224]
call fcn.00436ef0
lea ecx, [esp + 0xc]
mov dword [esp + 0xd8], 0xffffffff
call fcn.00424f20
mov ecx, dword [esp + 0xd0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0xc0]
xor ecx, esp
call fcn.0058d3fe
add esp, 0xd0
ret
Function at 0x440f10
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5ab673
mov eax, dword fs:[0]
push eax
sub esp, 0x104
mov eax, dword [0x6e2f0c]
xor eax, esp
mov dword [esp + 0x100], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x6e2f0c]
xor eax, esp
push eax
lea eax, [esp + 0x118]
mov dword fs:[0], eax
movzx esi, word [esp + 0x128]
mov eax, 0x74
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], eax
mov eax, 0x62
mov edi, ecx
xor ebp, ebp
mov ebx, 1
lea ecx, [esp + 0x38]
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], ebp
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], 2
mov dword [esp + 0x9c], 3
mov dword [esp + 0xa0], 4
mov dword [esp + 0xa4], 5
mov dword [esp + 0xa8], 6
mov dword [esp + 0xac], 7
mov dword [esp + 0xb0], 8
mov dword [esp + 0xb4], 9
mov dword [esp + 0xb8], 0xa
mov dword [esp + 0xbc], 0xb
mov dword [esp + 0xc0], 0xc
mov dword [esp + 0xc4], 0xd
mov dword [esp + 0xc8], 0xe
mov dword [esp + 0xcc], 0xf
mov dword [esp + 0xd0], 0x10
mov dword [esp + 0xd4], 0x11
mov dword [esp + 0xd8], 0x12
mov dword [esp + 0xdc], 0x13
mov dword [esp + 0xe0], 0x14
mov dword [esp + 0xe4], 0x15
mov dword [esp + 0xe8], 0x16
mov dword [esp + 0xec], 0x17
mov dword [esp + 0xf0], 0x18
mov dword [esp + 0xf4], 0x19
mov dword [esp + 0xf8], 0x1a
mov dword [esp + 0xfc], 0x1b
mov dword [esp + 0x100], 0x1c
mov dword [esp + 0x104], 0x1d
mov dword [esp + 0x108], 0x4d
mov dword [esp + 0x10c], 0x4e
mov dword [esp + 0x110], 0x4f
call fcn.00424f10
lea ecx, [esp + 0x18]
mov dword [esp + 0x120], ebp
call fcn.00424f10
lea ecx, [esp + 0x58]
mov byte [esp + 0x120], bl
call fcn.00424f10
mov eax, esi
lea esi, [eax + eax*2]
add esi, esi
push ebp
lea eax, [esp + 0x1c]
add esi, esi
mov ecx, dword [esp + esi + 0x7c]
push eax
push ecx
mov ecx, 0x6f2ea0
mov byte [esp + 0x12c], 2
call fcn.0042a2f0
mov eax, dword [esp + esi + 0x7c]
push ebp
lea edx, [esp + 0x5c]
push edx
push eax
mov ecx, 0x6f2ea0
call fcn.0042a2f0
mov edx, dword [esp + esi + 0x80]
push ebp
lea ecx, [esp + 0x3c]
push ecx
push edx
mov ecx, 0x6f2ea0
call fcn.0042a2f0
push 0x3d8
call fcn.0058e54b
add esp, 4
mov dword [esp + 0x14], eax
mov byte [esp + 0x120], 3
cmp eax, ebp
je 0x441191
mov ecx, eax
call fcn.0043cb70
mov esi, eax
jmp 0x441193
xor esi, esi
mov ebp, dword [esi]
lea ecx, [edi + 0x284]
mov byte [esp + 0x120], 2
call fcn.00588b10
push eax
push 0
lea eax, [esp + 0x60]
push eax
movzx eax, word [edi + 0x23e]
lea ecx, [esp + 0x24]
push ecx
movzx ecx, word [edi + 0x23c]
lea edx, [esp + 0x48]
push edx
mov edx, dword [ebp + 0x40]
push eax
push ecx
push 0
push 0
mov ecx, esi
call edx
lea ecx, [esp + 0x58]
mov dword [esi + 0x24], ebx
mov byte [esp + 0x120], bl
call fcn.00424f20
lea ecx, [esp + 0x18]
mov byte [esp + 0x120], 0
call fcn.00424f20
lea ecx, [esp + 0x38]
mov dword [esp + 0x120], 0xffffffff
call fcn.00424f20
mov eax, esi
mov ecx, dword [esp + 0x118]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x100]
xor ecx, esp
call fcn.0058d3fe
add esp, 0x110
ret 4
Function at 0x454ba0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5ac0f7
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
mov eax, dword [0x6e2f0c]
xor eax, esp
mov dword [esp + 0x18], eax
push ebp
push esi
push edi
mov eax, dword [0x6e2f0c]
xor eax, esp
push eax
lea eax, [esp + 0x2c]
mov dword fs:[0], eax
movzx ebp, word [esp + 0x3c]
push ebp
mov edi, ecx
call fcn.00453f70
mov esi, eax
test esi, esi
js 0x454db0
cmp esi, 3
jg 0x454db0
mov eax, dword [0x6f3914]
cmp byte [eax + 0x450], 0
je 0x454dc4
lea ecx, [esp + 0x10]
call fcn.00552d40
lea ecx, [esi + esi*4]
push ebp
lea ecx, [edi + ecx*4 + 0x2b8]
mov dword [esp + 0x38], 0
call fcn.004558f0
test eax, eax
je 0x454d9d
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x78]
call eax
movzx eax, ax
push eax
call fcn.00405f40
mov ecx, eax
call fcn.00548750
mov esi, eax
test esi, esi
je 0x454d9d
movzx eax, word [esi + 0x1c]
mov ecx, dword [0x6f3914]
push eax
call fcn.00491dd0
mov edi, eax
test edi, edi
je 0x454d9d
mov ecx, dword [0x6f3914]
cmp dword [ecx + 0x404], 0
je 0x454c8b
movzx eax, word [esi + 0x1c]
push eax
call fcn.00405f40
mov ecx, eax
call fcn.00548750
mov esi, eax
movzx eax, word [esi + 0x1c]
mov ecx, dword [0x6f3914]
push eax
call fcn.00491e20
movzx ecx, ax
xor eax, eax
test cx, cx
je 0x454cb2
push ecx
call fcn.00405f40
mov ecx, eax
call fcn.00455730
movzx ecx, word [esi + 0x86b]
test cx, cx
mov ecx, dword [0x6f3914]
jne 0x454cf1
cmp byte [ecx + 0x149], 0
je 0x454cf1
push 0x531
mov ecx, 0x6f58c8
call fcn.004c9d30
push eax
push 0x1d
push 0x6f58c8
call fcn.004cb0a0
add esp, 0xc
jmp 0x454d9d
push eax
push edi
push ecx
mov ecx, esi
call fcn.00547720
test eax, eax
jne 0x454d10
mov edx, dword [0x6f3914]
mov dword [edx + 0x978], eax
jmp 0x454d9d
movzx eax, word [esi + 0x41]
test ax, ax
jne 0x454d65
mov ecx, 0x6f3910
call fcn.004975d0
mov edi, eax
test edi, edi
je 0x454d5b
cmp dword [edi + 0x31c], 0
jne 0x454d9d
mov ecx, edi
call fcn.00495250
cmp al, 0x14
je 0x454d9d
push 0
push edi
lea ecx, [esp + 0x18]
call fcn.00552a50
mov ecx, dword [0x6f3914]
lea eax, [esp + 0x10]
push eax
call fcn.00453d10
jmp 0x454d7c
push 0x190
jmp 0x454cd2
cmp eax, 1
jne 0x454d7c
mov ecx, dword [0x6f3914]
push 0
push ecx
lea ecx, [esp + 0x18]
call fcn.00552a50
call fcn.00405f40
push 1
lea edx, [esp + 0x14]
mov dword [eax + 0x64], esi
mov eax, dword [0x6f3914]
push edx
push eax
call fcn.00405f40
mov ecx, eax
call fcn.0054af90
lea ecx, [esp + 0x10]
mov dword [esp + 0x34], 0xffffffff
call fcn.00552a40
jmp 0x454dc4
push 0
push 0x384
push str.MugongDialog.cpp
call fcn.00533d80
add esp, 0xc
mov ecx, dword [esp + 0x2c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x18]
xor ecx, esp
call fcn.0058d3fe
add esp, 0x28
ret 4
Function at 0x456dc0
Capabilities:
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x5ac225
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x6e2f0c]
xor eax, esp
push eax
lea eax, [esp + 0x14]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x10], esi
call fcn.0041f750
xor ebx, ebx
lea ecx, [esi + 0x218]
mov dword [esp + 0x1c], ebx
mov dword [esi], vtable.CBigMapDlg.0
call fcn.004595d0
mov dword [esi + 0x290], ebx
mov dword [esi + 0x294], ebx
mov dword [esi + 0x298], ebx
mov dword [esi + 0x29c], ebx
mov dword [esi + 0x2a0], ebx
mov dword [esi + 0x2a4], ebx
mov dword [esi + method.CMemoryPoolTempl_class_CMiniMapIcon_.virtual_0], vtable.CMemoryPoolTempl_class_CMiniMapIcon_.0
mov dword [esi + 0x2b8], ebx
mov dword [esi + 0x2bc], ebx
mov byte [esi + 0x2c4], bl
push 0x459740
push 0x41ba80
push 0x14
push 0xc
lea eax, [esi + 0x444]
push eax
mov byte [esp + 0x30], 3
call fcn.0058ebec
lea ecx, [esi + 0x538]
mov byte [esp + 0x1c], 4
call fcn.0043f200
lea ecx, [esi + 0x55c]
mov byte [esp + 0x1c], 5
call fcn.00424f10
push 0x40
lea ecx, [esi + 0x290]
mov byte [esp + 0x20], 6
call fcn.005763b0
push 0x80
lea ecx, [esi + 0x2c4]
push 0x5bfbc4
push ecx
call fcn.0058e820
lea edi, [esi + 0x2b8]
add esp, 0xc
mov dword [esi + 0x2c0], 0xa
cmp dword [edi], ebx
jne 0x456ed7
push 0x64
push edi
call fcn.004574c0
mov edx, dword [edi]
add esp, 8
mov dword [esi + 0x2bc], edx
mov eax, esi
mov dword [esi + 0x1b8], 0x78ffffff
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add esp, 0x10
ret
Function at 0x45a980
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x5ac590
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x6e2f0c]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0xc], esi
mov dword [esi], vtable.CMunpaMarkManager.0
mov dword [esp + 0x18], 1
call fcn.0045a900
lea ecx, [esi + 0x28]
call fcn.00417970
mov eax, dword [esi + 0x30]
test eax, eax
je 0x45a9db
push eax
call fcn.0058e677
add esp, 4
mov dword [esi + 0x30], 0
lea ecx, [esi + 4]
call fcn.00417970
mov eax, dword [esi + 0xc]
test eax, eax
je 0x45a9fa
push eax
call fcn.0058e677
add esp, 4
mov dword [esi + 0xc], 0
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x10
ret
Function at 0x463a00
Capabilities:
Get number of processors

Disassembly:
mov ecx, dword [ecx + 0x228]
jmp 0x463a00
push 0xffffffffffffffff
push 0x5acc58
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push ebp
push esi
push edi
mov eax, dword [0x6e2f0c]
xor eax, esp
push eax
lea eax, [esp + 0x20]
mov dword fs:[0], eax
mov ebp, ecx
mov dword [esp + 0x14], ebp
mov ebx, dword [esp + 0x30]
test ebx, ebx
je 0x463bba
cmp dword [ebx + 0x40], 0
lea ecx, [ebp + 0x2e4]
jne 0x463b34
call fcn.00588820
mov dword [esp + 0x30], eax
test eax, eax
je 0x463a85
jmp 0x463a60
lea eax, [esp + 0x30]
push eax
lea ecx, [ebp + 0x2e4]
call fcn.00588880
mov esi, dword [eax]
test esi, esi
je 0x463a85
mov eax, dword [ebx + 0x3c]
cmp dword [esi + 8], eax
je 0x463a92
cmp dword [esp + 0x30], 0
jne 0x463a60
push ebx
mov ecx, ebp
call fcn.004627c0
jmp 0x463bb3
lea ecx, [esi + 0x10]
call fcn.00588820
mov dword [esp + 0x18], eax
test eax, eax
je 0x463ac2
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esi + 0x10]
call fcn.00588880
mov eax, dword [eax]
cmp dword [eax + 0x40], 0
je 0x463bba
cmp dword [esp + 0x18], 0
jne 0x463aa2
mov ebp, 1
push ebx
lea ecx, [esi + 0x10]
mov dword [esi], ebp
call fcn.00588240
add dword [esi + 4], ebp
push 0x48
call fcn.0058e54b
add esp, 4
mov dword [esp + 0x1c], eax
mov dword [esp + 0x28], 0
test eax, eax
je 0x463af8
mov ecx, eax
call fcn.004ed810
jmp 0x463afa
xor eax, eax
mov edx, dword [ebx + 0x3c]
mov ecx, edx
imul ecx, ecx, 0x64
add ecx, 0x63
mov dword [eax + 0x44], ecx
push eax
lea ecx, [esi + 0x10]
mov dword [esp + 0x2c], 0xffffffff
mov dword [eax + 0x3c], edx
mov dword [eax + 0x40], 0x63
call fcn.005882d0
mov eax, dword [esp + 0x14]
add dword [esi + 4], ebp
add dword [eax + 0x2e0], ebp
mov ebp, eax
jmp 0x463bb3
call fcn.00588820
mov dword [esp + 0x1c], eax
test eax, eax
je 0x463bab
lea edx, [esp + 0x1c]
push edx
lea ecx, [ebp + 0x2e4]
call fcn.00588880
mov esi, dword [eax]
test esi, esi
je 0x463bab
mov eax, dword [esi + 8]
cmp eax, dword [ebx + 0x3c]
je 0x463b68
cmp dword [esp + 0x1c], 0
jne 0x463b41
jmp 0x463bab
lea ecx, [esi + 0x10]
call fcn.00588850
mov ebp, eax
test ebp, ebp
je 0x463ba7
lea ecx, [esi + 0x10]
call fcn.005887d0
mov eax, dword [eax]
cmp dword [eax + 0x40], 0x63
push ebx
lea ecx, [esi + 0x10]
jne 0x463b99
push ebp
call fcn.005884a0
inc dword [esi + 4]
mov ebp, dword [esp + 0x14]
jmp 0x463bb3
call fcn.005882d0
inc dword [esi + 4]
mov ebp, dword [esp + 0x14]
jmp 0x463bb3
mov ebp, dword [esp + 0x14]
push ebx
mov ecx, ebp
call fcn.004628c0
mov ecx, ebp
call fcn.004635a0
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x18
ret 4
mov ecx, dword [0x6e5bbc]
jmp 0x462310
Function at 0x46a370
Capabilities:
Print debug messages

Disassembly:
push ebx
mov ebx, dword [esp + 8]
mov eax, dword [ebx]
push edi
mov edi, ecx
test eax, eax
jne 0x46a390
push str.Item_DB_idx__0
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
pop edi
xor eax, eax
pop ebx
ret 4
push esi
push eax
mov ecx, 0x6f4518
call fcn.004a1f10
mov esi, eax
test esi, esi
je 0x46a3af
mov ax, word [ebx + 6]
mov word [esi + 0x28e], ax
jmp 0x46a3dd
push str.CItemShopGridDialog::AddItem
push ebx
mov ecx, 0x6f4518
call fcn.004a4f30
mov esi, eax
test esi, esi
jne 0x46a3cb
pop esi
pop edi
pop ebx
ret 4
push esi
mov ecx, 0x6f4518
mov dword [esi + 0x24], 1
call fcn.004ae4a0
mov edx, dword [esi]
mov eax, dword [edx + 0x7c]
mov ecx, esi
call eax
movzx ecx, ax
push ecx
mov ecx, edi
call fcn.0046a290
movzx eax, ax
push esi
push eax
mov ecx, edi
call fcn.00424b80
pop esi
pop edi
pop ebx
ret 4

Function at 0x46c650
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5ad09e
mov eax, dword fs:[0]
push eax
sub esp, 0x60
mov eax, dword [0x6e2f0c]
xor eax, esp
mov dword [esp + 0x5c], eax
push ebx
push esi
push edi
mov eax, dword [0x6e2f0c]
xor eax, esp
push eax
lea eax, [esp + 0x70]
mov dword fs:[0], eax
mov edi, dword [esp + 0x80]
push 0x3e
mov ebx, ecx
lea ecx, [esp + 0x32]
mov eax, 0x20
push 0
push ecx
mov word [esp + 0x38], ax
call fcn.0058dfb0
add esp, 0xc
push edi
lea ecx, [ebx + 0x234]
call fcn.0046d4a0
push 0x11
lea esi, [edi + 4]
lea edx, [esp + 0x1c]
push esi
push edx
call fcn.00534000
mov eax, esi
add esp, 0xc
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x46c6d0
sub eax, edx
cmp eax, 0x10
jge 0x46c6f5
mov edx, 0x10
sub edx, eax
push edx
lea ecx, [esp + eax + 0x1c]
push 0x20
push ecx
call fcn.0058dfb0
add esp, 0xc
test byte [0x6e5518], 1
jne 0x46c72c
or dword [0x6e5518], 1
mov ecx, 0x6e5390
mov dword [esp + 0x78], 0
call fcn.004f5800
push 0x5b7fe0
call fcn.0058e534
add esp, 4
mov dword [esp + 0x78], 0xffffffff
movzx eax, byte [edi + 0x17]
push 7
push eax
mov ecx, 0x6e5390
call fcn.004f71d0
push eax
lea ecx, [esp + 0x18]
push ecx
call fcn.00534000
lea eax, [esp + 0x1c]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x46c752
sub eax, edx
cmp eax, 6
jge 0x46c777
mov edx, 6
sub edx, eax
push edx
lea ecx, [esp + eax + 0x14]
push 0x20
push ecx
call fcn.0058dfb0
add esp, 0xc
movzx eax, word [edi + 0x15]
push eax
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0x38]
push str._s__10s__4d
push eax
call fcn.0058dd5f
mov ecx, dword [ebx + 0x230]
add esp, 0x14
cmp dword [edi + 0x18], 1
push 0
push 0
push 0xffffffffffffffff
jne 0x46c7ba
mov edx, dword [ecx]
mov edx, dword [edx + 0x6c]
push 0xffffffffffffffff
lea eax, [esp + 0x3c]
push eax
call edx
jmp 0x46c7cb
mov eax, dword [ecx]
mov eax, dword [eax + 0x6c]
push 0xffacb6c7
lea edx, [esp + 0x3c]
push edx
call eax
mov ecx, dword [esp + 0x70]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x5c]
xor ecx, esp
call fcn.0058d3fe
add esp, 0x6c
ret 4