joyce8/EMBER2024-capa huggingface dataset:
Function at 0x454a70
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x572768
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x28
push ebx
push esi
lea eax, [esp + 0xb]
push eax
mov esi, ecx
push str.adveffect024_
lea ecx, [esp + 0x14]
call fcn.00402250
lea ecx, [esp + 0xc]
push ecx
xor ebx, ebx
lea ecx, [esi + 4]
mov dword [esp + 0x3c], ebx
call fcn.004a77e0
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x14]
sub eax, ecx
cmp ecx, ebx
mov dword [esp + 0x38], 0xffffffff
je 0x454ae4
cmp eax, 0x80
jbe 0x454ada
push ecx
call fcn.0052b8dd
add esp, 4
jmp 0x454ae4
push eax
push ecx
call fcn.0050e390
add esp, 8
mov dword [esi + 0x48], ebx
mov eax, 0x3f060a92
mov dword [esi + 0x3c], eax
mov dword [esi + 0x40], eax
mov ecx, 4
mov dword [esi + 0x44], ecx
mov byte [esi + 0x4c], 1
mov dword [esi + 0x38], ebx
mov eax, 0x3e32b8c3
mov dword [esi + 0x5c], ecx
mov dword [esi + 0x54], eax
mov dword [esi + 0x58], eax
mov dword [esi + 0x60], ebx
lea ecx, [esi + 0x68]
mov byte [esi + 0x64], bl
mov dword [esi + 0x50], ebx
call fcn.004540f0
lea ecx, [esi + 0x100]
call fcn.004547d0
push 1
push ebx
push 0xbedf66f3
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x38]
push ecx
lea ecx, [esi + 0x130]
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0xbf800000
mov dword [esp + 0x38], 0x3f800000
mov dword [esp + 0x24], 0x43960000
mov dword [esp + 0x28], 0x41200000
mov dword [esp + 0x3c], 0x43960000
mov dword [esp + 0x40], 0x433e0000
mov dword [esp + 0x44], 0
call fcn.00454260
push ebx
push 1
push 0x3f860a92
lea edx, [esp + 0x30]
push edx
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esi + 0x13c0]
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], 0x3f000000
mov dword [esp + 0x44], 0x3f800000
mov dword [esp + 0x24], 0x437a0000
mov dword [esp + 0x28], 0x41a00000
mov dword [esp + 0x30], 0x43e10000
mov dword [esp + 0x34], 0x43160000
mov dword [esp + 0x38], 0
call fcn.00454260
push ebx
push 1
push 0x3f1c61aa
lea edx, [esp + 0x30]
push edx
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esi + 0x2650]
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0x3f800000
mov dword [esp + 0x24], 0x43960000
mov dword [esp + 0x28], 0x41c80000
mov dword [esp + 0x30], 0x43a00000
mov dword [esp + 0x34], 0x43700000
mov dword [esp + 0x38], 0
call fcn.00454260
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0x3f800000
mov dword [esp + 0xc], 0x43af0000
mov dword [esp + 0x10], 0x41700000
push 1
push ebx
push 0xbdb2b8c3
lea edx, [esp + 0x30]
push edx
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esi + 0x38e0]
mov dword [esp + 0x30], 0x43a00000
mov dword [esp + 0x34], 0x43700000
mov dword [esp + 0x38], 0
call fcn.00454260
mov ecx, dword [esp + 0x30]
mov dword [esi + 0x24], ebx
mov dword [esi + 0x34], ebx
mov dword [esi + 0x28], 0xc3480000
mov dword [esi + 0x2c], 0xc2c80000
mov dword [esi + 0x30], 0x19
pop esi
xor eax, eax
pop ebx
mov dword fs:[0], ecx
add esp, 0x34
ret
Function at 0x457760
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5729a0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1c
push ebx
push esi
lea eax, [esp + 0xb]
push eax
mov esi, ecx
push str.adveffect030parts01.png
lea ecx, [esp + 0x14]
call fcn.00402250
lea ecx, [esp + 0xc]
push ecx
xor ebx, ebx
lea ecx, [esi + 4]
mov dword [esp + 0x30], ebx
call fcn.004a77e0
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x14]
sub eax, ecx
cmp ecx, ebx
mov dword [esp + 0x2c], 0xffffffff
je 0x4577d4
cmp eax, 0x80
jbe 0x4577ca
push ecx
call fcn.0052b8dd
add esp, 4
jmp 0x4577d4
push eax
push ecx
call fcn.0050e390
add esp, 8
lea edx, [esp + 0xb]
push edx
push 0x5823ac
lea ecx, [esp + 0x20]
call fcn.00402250
lea eax, [esp + 0x18]
push eax
lea ecx, [esi + 0x24]
mov dword [esp + 0x30], 1
call fcn.004a77e0
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x20]
sub eax, ecx
cmp ecx, ebx
mov dword [esp + 0x2c], 0xffffffff
je 0x45782e
cmp eax, 0x80
jbe 0x457824
push ecx
call fcn.0052b8dd
add esp, 4
jmp 0x45782e
push eax
push ecx
call fcn.0050e390
add esp, 8
mov ecx, dword [esp + 0x24]
mov dword [esi + 0x44], ebx
mov dword [esi + 0x50], ebx
mov dword [esi + 0x54], ebx
mov dword [esi + 0x48], 0xc
mov dword [esi + 0x4c], 0x1a
pop esi
xor eax, eax
pop ebx
mov dword fs:[0], ecx
add esp, 0x28
ret

Function at 0x457920
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5729c8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1c
push ebx
push esi
lea eax, [esp + 0xb]
push eax
mov esi, ecx
push str.adveffect031parts01.png
lea ecx, [esp + 0x14]
call fcn.00402250
lea ecx, [esp + 0xc]
push ecx
xor ebx, ebx
lea ecx, [esi + 4]
mov dword [esp + 0x30], ebx
call fcn.004a77e0
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x14]
sub eax, ecx
cmp ecx, ebx
mov dword [esp + 0x2c], 0xffffffff
je 0x457994
cmp eax, 0x80
jbe 0x45798a
push ecx
call fcn.0052b8dd
add esp, 4
jmp 0x457994
push eax
push ecx
call fcn.0050e390
add esp, 8
lea edx, [esp + 0xb]
push edx
push str.adveffect031parts02.png
lea ecx, [esp + 0x14]
call fcn.00402250
lea eax, [esp + 0xc]
push eax
lea ecx, [esi + 0x24]
mov dword [esp + 0x30], 1
call fcn.004a77e0
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x14]
sub eax, ecx
cmp ecx, ebx
mov dword [esp + 0x2c], 0xffffffff
je 0x4579ee
cmp eax, 0x80
jbe 0x4579e4
push ecx
call fcn.0052b8dd
add esp, 4
jmp 0x4579ee
push eax
push ecx
call fcn.0050e390
add esp, 8
lea ecx, [esp + 0xb]
push ecx
push 0x5823e8
lea ecx, [esp + 0x20]
call fcn.00402250
lea edx, [esp + 0x18]
push edx
lea ecx, [esi + 0x44]
mov dword [esp + 0x30], 2
call fcn.004a77e0
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x20]
sub eax, ecx
cmp ecx, ebx
mov dword [esp + 0x2c], 0xffffffff
je 0x457a48
cmp eax, 0x80
jbe 0x457a3e
push ecx
call fcn.0052b8dd
add esp, 4
jmp 0x457a48
push eax
push ecx
call fcn.0050e390
add esp, 8
mov ecx, dword [esp + 0x24]
mov dword [esi + 0x64], ebx
pop esi
xor eax, eax
pop ebx
mov dword fs:[0], ecx
add esp, 0x28
ret
Function at 0x45de60
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x572e63
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push esi
push edi
mov edi, dword [esp + 0x1c]
mov esi, ecx
push edi
mov dword [esp + 0xc], esi
call fcn.004055f0
mov eax, dword [edi + 0x20]
mov dword [esi + 0x20], eax
lea ecx, [edi + 0x24]
mov eax, dword [ecx]
lea edx, [esi + 0x24]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov ecx, dword [ecx + 8]
mov dword [edx + 8], ecx
mov dl, byte [edi + 0x30]
lea ecx, [edi + 0x34]
mov byte [esi + 0x30], dl
mov al, byte [edi + 0x31]
push ecx
lea ecx, [esi + 0x34]
mov dword [esp + 0x18], 0
mov byte [esi + 0x31], al
call fcn.004055f0
lea edx, [edi + 0x54]
mov ecx, dword [edx]
lea eax, [esi + 0x54]
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
mov edx, dword [edx + 8]
add edi, 0x60
push edi
lea ecx, [esi + 0x60]
mov byte [esp + 0x18], 1
mov dword [eax + 8], edx
call fcn.0045dcc0
mov ecx, dword [esp + 0xc]
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0x10
ret 4
Function at 0x461860
Capabilities:
Access peb ldr_data
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x573060
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1c
push esi
push edi
lea eax, [esp + 0xb]
push eax
mov esi, ecx
push str.adveffect050_face.png
lea ecx, [esp + 0x14]
call fcn.00402250
lea ecx, [esp + 0xc]
push ecx
lea ecx, [esi + 4]
mov dword [esp + 0x30], 0
call fcn.004a77e0
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x14]
or edi, 0xffffffff
sub eax, ecx
test ecx, ecx
mov dword [esp + 0x2c], edi
je 0x4618d5
cmp eax, 0x80
jbe 0x4618cb
push ecx
call fcn.0052b8dd
add esp, 4
jmp 0x4618d5
push eax
push ecx
call fcn.0050e390
add esp, 8
lea edx, [esp + 0xb]
push edx
push str.adveffect050wa.png
lea ecx, [esp + 0x14]
call fcn.00402250
lea eax, [esp + 0xc]
push eax
lea ecx, [esi + 0x24]
mov dword [esp + 0x30], 1
call fcn.004a77e0
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x14]
sub eax, ecx
test ecx, ecx
mov dword [esp + 0x2c], edi
je 0x46192b
cmp eax, 0x80
jbe 0x461921
push ecx
call fcn.0052b8dd
add esp, 4
jmp 0x46192b
push eax
push ecx
call fcn.0050e390
add esp, 8
lea ecx, [esp + 0xb]
push ecx
push str.adveffect050Parts01.png
lea ecx, [esp + 0x14]
call fcn.00402250
lea edx, [esp + 0xc]
push edx
lea ecx, [esi + 0x44]
mov dword [esp + 0x30], 2
call fcn.004a77e0
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x14]
sub eax, ecx
test ecx, ecx
mov dword [esp + 0x2c], edi
je 0x461981
cmp eax, 0x80
jbe 0x461977
push ecx
call fcn.0052b8dd
add esp, 4
jmp 0x461981
push eax
push ecx
call fcn.0050e390
add esp, 8
lea eax, [esp + 0xb]
push eax
push 0x582d08
lea ecx, [esp + 0x20]
call fcn.00402250
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esi + 0x64]
mov dword [esp + 0x30], 3
call fcn.004a77e0
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x20]
sub eax, ecx
test ecx, ecx
mov dword [esp + 0x2c], edi
je 0x4619d7
cmp eax, 0x80
jbe 0x4619cd
push ecx
call fcn.0052b8dd
add esp, 4
jmp 0x4619d7
push eax
push ecx
call fcn.0050e390
add esp, 8
push 5
push 0x582ca4
lea ecx, [esi + 0x84]
mov dword [esi + 0xc4], 0
call fcn.00451d00
push 7
push 0x582ccc
lea ecx, [esi + 0xa4]
call fcn.00451d00
mov ecx, dword [esp + 0x24]
pop edi
xor eax, eax
pop esi
mov dword fs:[0], ecx
add esp, 0x28
ret
Function at 0x464c10
Capabilities:
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x573130
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1c
push ebx
push esi
push edi
lea eax, [esp + 0xf]
push eax
mov esi, ecx
push str.adveffect055Parts01.png
lea ecx, [esp + 0x18]
call fcn.00402250
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esi + 4]
mov dword [esp + 0x34], 0
call fcn.004a77e0
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
or ebx, 0xffffffff
sub eax, ecx
test ecx, ecx
mov dword [esp + 0x30], ebx
je 0x464c86
cmp eax, 0x80
jbe 0x464c7c
push ecx
call fcn.0052b8dd
add esp, 4
jmp 0x464c86
push eax
push ecx
call fcn.0050e390
add esp, 8
lea edx, [esp + 0xf]
push edx
push str.adveffect055BG01.png
lea ecx, [esp + 0x18]
call fcn.00402250
lea eax, [esp + 0x10]
push eax
lea ecx, [esi + 0x24]
mov dword [esp + 0x34], 1
call fcn.004a77e0
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
sub eax, ecx
test ecx, ecx
mov dword [esp + 0x30], ebx
je 0x464cdc
cmp eax, 0x80
jbe 0x464cd2
push ecx
call fcn.0052b8dd
add esp, 4
jmp 0x464cdc
push eax
push ecx
call fcn.0050e390
add esp, 8
lea ecx, [esp + 0xf]
push ecx
push 0x581100
lea ecx, [esp + 0x18]
call fcn.00402250
lea edx, [esp + 0x10]
push edx
lea ecx, [esi + 0x44]
mov dword [esp + 0x34], 2
call fcn.004a77e0
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
sub eax, ecx
test ecx, ecx
mov dword [esp + 0x30], ebx
je 0x464d32
cmp eax, 0x80
jbe 0x464d28
push ecx
call fcn.0052b8dd
add esp, 4
jmp 0x464d32
push eax
push ecx
call fcn.0050e390
add esp, 8
push 2
push 0x5830a8
lea ecx, [esi + 0x64]
call fcn.00451d00
push 3
push 0x5830b8
lea ecx, [esi + 0x84]
call fcn.00451d00
push 3
push 0x5830d0
lea ecx, [esi + 0xa4]
call fcn.00451d00
push 3
push 0x5830e8
lea ecx, [esi + 0xc4]
call fcn.00451d00
push 4
push 0x583100
lea ecx, [esi + 0xe4]
call fcn.00405300
push 3
push 0x583120
lea ecx, [esi + 0x100]
call fcn.00451d00
push 4
push 0x583138
lea ecx, [esi + 0x120]
call fcn.00405300
push 2
push 0x583158
lea ecx, [esi + 0x13c]
call fcn.00451d00
push 2
push 0x583168
lea ecx, [esi + 0x15c]
call fcn.00451d00
push 2
push 0x583178
lea ecx, [esi + 0x17c]
call fcn.00451d00
lea eax, [esp + 0xf]
push eax
push 0x583214
lea ecx, [esp + 0x24]
call fcn.00402250
lea ecx, [esp + 0x1c]
lea edi, [esi + 0x19c]
push ecx
mov ecx, edi
mov dword [esp + 0x34], 3
call fcn.004b0060
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x24]
sub eax, ecx
test ecx, ecx
mov dword [esp + 0x30], ebx
je 0x464e3e
cmp eax, 0x80
jbe 0x464e34
push ecx
call fcn.0052b8dd
add esp, 4
jmp 0x464e3e
push eax
push ecx
call fcn.0050e390
add esp, 8
push 1
mov ecx, edi
call fcn.004ad2c0
push 3
push 0x583188
lea ecx, [esi + 0x1c8]
call fcn.00451d00
push 3
push 0x5831a0
lea ecx, [esi + 0x1e8]
call fcn.00451d00
push 2
push 0x5831d0
lea ecx, [esi + 0x208]
call fcn.00451d00
push 4
push 0x5831e0
lea ecx, [esi + 0x228]
call fcn.00405300
push 3
push 0x5831b8
lea ecx, [esi + 0x244]
call fcn.00405300
mov ecx, dword [esp + 0x28]
pop edi
mov dword [esi + 0x260], 0
pop esi
xor eax, eax
pop ebx
mov dword fs:[0], ecx
add esp, 0x28
ret
Function at 0x469860
Capabilities:
Get number of processors

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x573350
push eax
mov eax, dword [esp + 0x10]
mov dword fs:[0], esp
sub esp, 0x30
push esi
mov esi, ecx
mov dword [esi + 0xc8], eax
sub eax, 0
je 0x469929
dec eax
jne 0x469a69
lea eax, [esp + 0x44]
push eax
push str.adveffect008_009_sprite.txt
lea ecx, [esp + 0xc]
call fcn.00402250
lea ecx, [esp + 4]
add esi, 0x64
push ecx
mov ecx, esi
mov dword [esp + 0x40], 3
call fcn.004b0060
mov ecx, dword [esp + 4]
mov eax, dword [esp + 0xc]
sub eax, ecx
test ecx, ecx
mov dword [esp + 0x3c], 0xffffffff
je 0x46990c
cmp eax, 0x80
jbe 0x469902
push ecx
call fcn.0052b8dd
add esp, 4
push 0
mov ecx, esi
call fcn.004ad2c0
xor eax, eax
pop esi
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
add esp, 0x3c
ret 4
push eax
push ecx
call fcn.0050e390
add esp, 8
push 0
mov ecx, esi
call fcn.004ad2c0
xor eax, eax
pop esi
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
add esp, 0x3c
ret 4
lea edx, [esp + 0x44]
push edx
push str.adveffect064_bg01.png
lea ecx, [esp + 0x18]
call fcn.00402250
lea eax, [esp + 0x10]
push eax
lea ecx, [esi + 4]
mov dword [esp + 0x40], 0
call fcn.004a77e0
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
sub eax, ecx
test ecx, ecx
mov dword [esp + 0x3c], 0xffffffff
je 0x469983
cmp eax, 0x80
jbe 0x469979
push ecx
call fcn.0052b8dd
add esp, 4
jmp 0x469983
push eax
push ecx
call fcn.0050e390
add esp, 8
lea ecx, [esp + 0x44]
push ecx
push 0x5834fc
lea ecx, [esp + 0x24]
call fcn.00402250
lea edx, [esp + 0x1c]
push edx
lea ecx, [esi + 0x24]
mov dword [esp + 0x40], 1
call fcn.004a77e0
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x24]
sub eax, ecx
test ecx, ecx
mov dword [esp + 0x3c], 0xffffffff
je 0x4699dd
cmp eax, 0x80
jbe 0x4699d3
push ecx
call fcn.0052b8dd
add esp, 4
jmp 0x4699dd
push eax
push ecx
call fcn.0050e390
add esp, 8
push edi
lea eax, [esp + 0x48]
push eax
push str.adveffect008_009_sprite.txt
lea ecx, [esp + 0x34]
call fcn.00402250
lea ecx, [esp + 0x2c]
lea edi, [esi + 0x90]
push ecx
mov ecx, edi
mov dword [esp + 0x44], 2
call fcn.004b0060
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x34]
sub eax, ecx
test ecx, ecx
mov dword [esp + 0x40], 0xffffffff
je 0x469a3d
cmp eax, 0x80
jbe 0x469a33
push ecx
call fcn.0052b8dd
add esp, 4
jmp 0x469a3d
push eax
push ecx
call fcn.0050e390
add esp, 8
push 1
mov ecx, edi
call fcn.004ad2c0
mov byte [esi + 0xbc], 0x33
mov byte [esi + 0xbd], 0
mov dword [esi + 0xc0], 6
mov dword [esi + 0xc4], 0
pop edi
mov ecx, dword [esp + 0x34]
xor eax, eax
pop esi
mov dword fs:[0], ecx
add esp, 0x3c
ret 4
Function at 0x469f90
Capabilities:
Get number of processors

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x573380
push eax
mov eax, dword [esp + 0x10]
mov dword fs:[0], esp
sub esp, 0x30
push esi
mov esi, ecx
mov dword [esi + 0xc8], eax
sub eax, 0
je 0x46a059
dec eax
jne 0x46a199
lea eax, [esp + 0x44]
push eax
push str.adveffect008_009_sprite.txt
lea ecx, [esp + 0xc]
call fcn.00402250
lea ecx, [esp + 4]
add esi, 0x64
push ecx
mov ecx, esi
mov dword [esp + 0x40], 3
call fcn.004b0060
mov ecx, dword [esp + 4]
mov eax, dword [esp + 0xc]
sub eax, ecx
test ecx, ecx
mov dword [esp + 0x3c], 0xffffffff
je 0x46a03c
cmp eax, 0x80
jbe 0x46a032
push ecx
call fcn.0052b8dd
add esp, 4
push 0
mov ecx, esi
call fcn.004ad2c0
xor eax, eax
pop esi
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
add esp, 0x3c
ret 4
push eax
push ecx
call fcn.0050e390
add esp, 8
push 0
mov ecx, esi
call fcn.004ad2c0
xor eax, eax
pop esi
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
add esp, 0x3c
ret 4
lea edx, [esp + 0x44]
push edx
push str.adveffect065_bg01.png
lea ecx, [esp + 0x18]
call fcn.00402250
lea eax, [esp + 0x10]
push eax
lea ecx, [esi + 4]
mov dword [esp + 0x40], 0
call fcn.004a77e0
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
sub eax, ecx
test ecx, ecx
mov dword [esp + 0x3c], 0xffffffff
je 0x46a0b3
cmp eax, 0x80
jbe 0x46a0a9
push ecx
call fcn.0052b8dd
add esp, 4
jmp 0x46a0b3
push eax
push ecx
call fcn.0050e390
add esp, 8
lea ecx, [esp + 0x44]
push ecx
push 0x583530
lea ecx, [esp + 0x24]
call fcn.00402250
lea edx, [esp + 0x1c]
push edx
lea ecx, [esi + 0x24]
mov dword [esp + 0x40], 1
call fcn.004a77e0
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x24]
sub eax, ecx
test ecx, ecx
mov dword [esp + 0x3c], 0xffffffff
je 0x46a10d
cmp eax, 0x80
jbe 0x46a103
push ecx
call fcn.0052b8dd
add esp, 4
jmp 0x46a10d
push eax
push ecx
call fcn.0050e390
add esp, 8
push edi
lea eax, [esp + 0x48]
push eax
push str.adveffect008_009_sprite.txt
lea ecx, [esp + 0x34]
call fcn.00402250
lea ecx, [esp + 0x2c]
lea edi, [esi + 0x90]
push ecx
mov ecx, edi
mov dword [esp + 0x44], 2
call fcn.004b0060
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x34]
sub eax, ecx
test ecx, ecx
mov dword [esp + 0x40], 0xffffffff
je 0x46a16d
cmp eax, 0x80
jbe 0x46a163
push ecx
call fcn.0052b8dd
add esp, 4
jmp 0x46a16d
push eax
push ecx
call fcn.0050e390
add esp, 8
push 1
mov ecx, edi
call fcn.004ad2c0
mov byte [esi + 0xbc], 0x33
mov byte [esi + 0xbd], 0
mov dword [esi + 0xc0], 6
mov dword [esi + 0xc4], 0
pop edi
mov ecx, dword [esp + 0x34]
xor eax, eax
pop esi
mov dword fs:[0], ecx
add esp, 0x3c
ret 4
Function at 0x46b070
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x573420
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1c
push ebx
push esi
lea eax, [esp + 0xb]
push eax
mov esi, ecx
push str.advevent0707_329_56.bmp
lea ecx, [esp + 0x14]
call fcn.00402250
lea ecx, [esp + 0xc]
push ecx
xor ebx, ebx
lea ecx, [esi + 0x24]
mov dword [esp + 0x30], ebx
call fcn.004a77e0
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x14]
sub eax, ecx
cmp ecx, ebx
mov dword [esp + 0x2c], 0xffffffff
je 0x46b0e4
cmp eax, 0x80
jbe 0x46b0da
push ecx
call fcn.0052b8dd
add esp, 4
jmp 0x46b0e4
push eax
push ecx
call fcn.0050e390
add esp, 8
lea edx, [esp + 0xb]
push edx
push str.advevent0707_329_58.bmp
lea ecx, [esp + 0x20]
call fcn.00402250
lea eax, [esp + 0x18]
push eax
lea ecx, [esi + 4]
mov dword [esp + 0x30], 1
call fcn.004a77e0
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x20]
sub eax, ecx
cmp ecx, ebx
mov dword [esp + 0x2c], 0xffffffff
je 0x46b13e
cmp eax, 0x80
jbe 0x46b134
push ecx
call fcn.0052b8dd
add esp, 4
jmp 0x46b13e
push eax
push ecx
call fcn.0050e390
add esp, 8
mov ecx, dword [esp + 0x24]
mov dword [esi + 0x44], ebx
mov dword [esi + 0x50], ebx
mov dword [esi + 0x54], ebx
mov dword [esi + 0x48], 0x17
mov dword [esi + 0x4c], 0x2e
pop esi
xor eax, eax
pop ebx
mov dword fs:[0], ecx
add esp, 0x28
ret
Function at 0x46c010
Capabilities:
Access peb ldr_data
Get process heap flags

Disassembly:
push 0xffffffffffffffff
push 0x573490
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
push esi
push edi
lea eax, [esp + 0x30]
push eax
mov esi, ecx
push str.advevent0606_203_55.bmp
lea ecx, [esp + 0x10]
call fcn.00402250
lea ecx, [esp + 8]
push ecx
lea ecx, [esi + 0xc]
mov dword [esp + 0x2c], 0
call fcn.004a77e0
mov ecx, dword [esp + 8]
mov eax, dword [esp + 0x10]
or edi, 0xffffffff
sub eax, ecx
test ecx, ecx
mov dword [esp + 0x28], edi
je 0x46c085
cmp eax, 0x80
jbe 0x46c07b
push ecx
call fcn.0052b8dd
add esp, 4
jmp 0x46c085
push eax
push ecx
call fcn.0050e390
add esp, 8
lea edx, [esp + 0x30]
push edx
push str.advevent0606_203_56.bmp
lea ecx, [esp + 0x10]
call fcn.00402250
lea eax, [esp + 8]
push eax
lea ecx, [esi + 0x2c]
mov dword [esp + 0x2c], 1
call fcn.004a77e0
mov ecx, dword [esp + 8]
mov eax, dword [esp + 0x10]
sub eax, ecx
test ecx, ecx
mov dword [esp + 0x28], edi
je 0x46c0db
cmp eax, 0x80
jbe 0x46c0d1
push ecx
call fcn.0052b8dd
add esp, 4
jmp 0x46c0db
push eax
push ecx
call fcn.0050e390
add esp, 8
lea ecx, [esp + 0x30]
push ecx
push str.advevent0606_203_57.bmp
lea ecx, [esp + 0x10]
call fcn.00402250
lea edx, [esp + 8]
push edx
lea ecx, [esi + 0x4c]
mov dword [esp + 0x2c], 2
call fcn.004a77e0
mov ecx, dword [esp + 8]
mov eax, dword [esp + 0x10]
sub eax, ecx
test ecx, ecx
mov dword [esp + 0x28], edi
je 0x46c131
cmp eax, 0x80
jbe 0x46c127
push ecx
call fcn.0052b8dd
add esp, 4
jmp 0x46c131
push eax
push ecx
call fcn.0050e390
add esp, 8
lea eax, [esp + 0x30]
push eax
push str.advevent0606_203_58.bmp
lea ecx, [esp + 0x1c]
call fcn.00402250
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esi + 0x6c]
mov dword [esp + 0x2c], 3
call fcn.004a77e0
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
sub eax, ecx
test ecx, ecx
mov dword [esp + 0x28], edi
je 0x46c187
cmp eax, 0x80
jbe 0x46c17d
push ecx
call fcn.0052b8dd
add esp, 4
jmp 0x46c187
push eax
push ecx
call fcn.0050e390
add esp, 8
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x20]
mov dword [esi + 8], edx
mov dword [esi + 4], 0
pop edi
xor eax, eax
pop esi
mov dword fs:[0], ecx
add esp, 0x24
ret 4
Function at 0x488bf0
Capabilities:
Check http status code

Disassembly:
call fcn.0048d290
cmp eax, 0xa
jge 0x488bfd
xor eax, eax
ret
cmp eax, 0x14
jge 0x488c08
mov eax, 1
ret
cmp eax, 0x28
jge 0x488c13
mov eax, 2
ret
cmp eax, 0x32
jge 0x488c1e
mov eax, 3
ret
cmp eax, 0x3c
jge 0x488c29
mov eax, 4
ret
cmp eax, 0x46
jge 0x488c34
mov eax, 5
ret
cmp eax, 0x50
jge 0x488c3f
mov eax, 6
ret
cmp eax, 0x5a
jge 0x488c4a
mov eax, 7
ret
cmp eax, 0x64
jge 0x488c55
mov eax, 8
ret
cmp eax, 0x6e
jge 0x488c60
mov eax, 9
ret
cmp eax, 0x78
jge 0x488c6b
mov eax, 0xa
ret
cmp eax, 0x82
jge 0x488c78
mov eax, 0xb
ret
cmp eax, 0x8c
jge 0x488c85
mov eax, 0xc
ret
cmp eax, 0x96
jge 0x488c92
mov eax, 0xd
ret
cmp eax, 0xa0
jge 0x488c9f
mov eax, 0xe
ret
cmp eax, 0xaa
jge 0x488cac
mov eax, 0xf
ret
cmp eax, 0xb4
jge 0x488cb9
mov eax, 0x10
ret
cmp eax, 0xbe
jge 0x488cc6
mov eax, 0x11
ret
cmp eax, 0xc8
jge 0x488cd3
mov eax, 0x12
ret
xor ecx, ecx
cmp eax, 0xd2
setge cl
dec ecx
and ecx, 0x13
mov eax, ecx
ret
Function at 0x48f9c0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x575fd8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x28
push esi
xor esi, esi
push edi
mov edi, ecx
push esi
lea ecx, [esp + 0xc]
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], esi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], esi
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], esi
mov dword [esp + 0x30], esi
call fcn.004383c0
lea eax, [esp + 8]
lea ecx, [edi + 0x80]
push eax
mov dword [esp + 0x3c], esi
call fcn.0048f7c0
mov edi, dword [esp + 0x28]
cmp edi, esi
mov dword [esp + 0x38], 0xffffffff
je 0x48fa7c
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x14]
add ecx, 4
push ecx
push edx
lea ecx, [esp + 0x10]
call fcn.0040feb0
mov eax, dword [esp + 0x2c]
shl eax, 2
cmp eax, 0x80
jbe 0x48fa72
push edi
call fcn.0052b8dd
add esp, 4
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop edi
pop esi
add esp, 0x34
ret
push eax
push edi
call fcn.0050e390
add esp, 8
mov ecx, dword [esp + 0x30]
pop edi
mov dword fs:[0], ecx
pop esi
add esp, 0x34
ret