joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4682d6
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x58]
mov edx, dword [ebp + 8]
and edx, 0xff
cmp ecx, edx
je 0x468311
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x50]
push ecx
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x468311
push 0
mov ecx, 0x4b69b0
call fcn.004746ad
mov dl, byte [ebp + 8]
mov byte [ebp - 8], dl
cmp byte [ebp - 8], 0
je 0x468325
cmp byte [ebp - 8], 1
je 0x468352
jmp 0x46837d
push 0
mov ecx, dword [ebp - 4]
add ecx, 0x3ad8
call fcn.004d0286
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 5
mov ecx, dword [ebp - 4]
add ecx, 0x5c
call fcn.004d0286
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x46837d
push 0
mov ecx, dword [ebp - 4]
add ecx, 0x5c
call fcn.004d0286
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 5
mov ecx, dword [ebp - 4]
add ecx, 0x3ad8
call fcn.004d0286
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [ebp - 4]
mov cl, byte [ebp + 8]
mov byte [eax + 0x58], cl
mov esp, ebp
pop ebp
ret 4

Function at 0x468e67
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
mov eax, dword [ebp + 0xc]
push eax
call fcn.0047fc5a
add esp, 4
mov dword [ebp - 0x44], eax
push 0x40
lea ecx, [ebp - 0x40]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetWindowTextA]
cmp eax, dword [ebp - 0x44]
jne 0x468ea5
lea eax, [ebp - 0x40]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.0047fcc3
add esp, 8
test eax, eax
je 0x468eb5
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
jmp 0x468eba
mov eax, 1
mov esp, ebp
pop ebp
ret
Function at 0x4698dd
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0
push 0x37
push ecx
sub esp, 0xc
jmp 0x4698ed
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
cmp al, byte [ebp - 8]
jae 0x46992f
cmp al, 0x32
jae 0x469902
mov eax, dword [eax*4 + 0x486998]
jmp 0x469915
cmp al, 0x32
jne 0x46990d
mov eax, 0x407
jmp 0x469915
sub eax, 0x33
add eax, 0x590
push eax
mov edx, dword [ebp - 0xc]
push dword [edx + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
push dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x4698ea
cmp dword [ebp + 8], 0
je 0x469a14
push 5
mov ecx, dword [0x4b600c]
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [ebp - 0xc]
call fcn.00469a5e
push 0x44a
mov edx, dword [ebp - 0xc]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [ebp - 0x18], eax
push 0
push 0
push 0x147
mov ecx, dword [ebp - 0x18]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 0x14], eax
push 0
push 0
push 0x146
mov edx, dword [ebp - 0x18]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x14], 0
jle 0x4699b4
push 1
push 0x403
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x4699cf
push 1
push 0x403
mov edx, dword [ebp - 0xc]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov ecx, dword [ebp - 0x10]
sub ecx, 1
cmp dword [ebp - 0x14], ecx
jge 0x4699f7
push 1
push 0x404
mov edx, dword [ebp - 0xc]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x469a12
push 1
push 0x404
mov ecx, dword [ebp - 0xc]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x469a58
push 0
mov eax, dword [0x4b600c]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 1
push 0x403
mov ecx, dword [ebp - 0xc]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push 1
push 0x404
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov esp, ebp
pop ebp
ret 4

Function at 0x469e86
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0
push dword [0x4b600c]
call dword [sym.imp.USER32.dll_ShowWindow]
push 0x10
call fcn.0047cae3
add esp, 4
call fcn.0047d340
push 0
call fcn.00401692
push 0
call fcn.0047cae3
add esp, 4
push dword [0x4b6a68]
push dword [0x4b600c]
call dword [sym.imp.USER32.dll_SetParent]
pop ebp
ret
Function at 0x46af6e
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 8]
mov edx, dword [ebp + 8]
and edx, 0xff
cmp ecx, edx
je 0x46afa8
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x46afa8
push 0
mov ecx, 0x4b69b0
call fcn.004746ad
mov dl, byte [ebp + 8]
mov byte [ebp - 8], dl
cmp byte [ebp - 8], 0
je 0x46afbc
cmp byte [ebp - 8], 1
je 0x46aff9
jmp 0x46b034
push 1
mov ecx, dword [ebp - 4]
add ecx, 0x278
call fcn.004698dd
push 0
mov ecx, dword [ebp - 4]
add ecx, 0xe0
call fcn.004d0286
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 5
mov ecx, dword [ebp - 4]
add ecx, 0xc
call fcn.004d0286
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x46b034
push 1
mov ecx, dword [ebp - 4]
add ecx, 0x278
call fcn.004698dd
push 0
mov ecx, dword [ebp - 4]
add ecx, 0xc
call fcn.004d0286
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 5
mov ecx, dword [ebp - 4]
add ecx, 0xe0
call fcn.004d0286
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [ebp - 4]
mov cl, byte [ebp + 8]
mov byte [eax + 8], cl
mov esp, ebp
pop ebp
ret 4

Function at 0x46b9dc
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 8]
mov edx, dword [ebp + 8]
and edx, 0xff
cmp ecx, edx
je 0x46ba16
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x46ba16
push 0
mov ecx, 0x4b69b0
call fcn.004746ad
mov dl, byte [ebp + 8]
mov byte [ebp - 8], dl
cmp byte [ebp - 8], 0
je 0x46ba2a
cmp byte [ebp - 8], 1
je 0x46ba57
jmp 0x46ba82
push 0
mov ecx, dword [ebp - 4]
add ecx, 0x1fa0
call fcn.004d0286
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 5
mov ecx, dword [ebp - 4]
add ecx, 0xc
call fcn.004d0286
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x46ba82
push 0
mov ecx, dword [ebp - 4]
add ecx, 0xc
call fcn.004d0286
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 5
mov ecx, dword [ebp - 4]
add ecx, 0x1fa0
call fcn.004d0286
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [ebp - 4]
mov cl, byte [ebp + 8]
mov byte [eax + 8], cl
mov esp, ebp
pop ebp
ret 4
Function at 0x46fc40
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x485990
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10c
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x110]
call fcn.004032b0
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x118]
xor ecx, ecx
mov cl, byte [eax + 0x2024]
call fcn.00484002
nop
nop
nop
nop
call fcn.00418c90
mov byte [ebp - 0x114], al
mov edx, dword [ebp - 0x114]
and edx, 0xff
cmp edx, 0xff
jne 0x46fcb3
mov byte [ebp - 0x114], 0x10
push str.HITAREA.E5
lea ecx, [ebp - 0x110]
call fcn.0041fb35
mov eax, dword [ebp - 0x118]
add eax, 0x24
push eax
mov ecx, dword [ebp - 0x114]
and ecx, 0xff
push ecx
lea ecx, [ebp - 0x110]
call fcn.0041fc89
lea ecx, [ebp - 0x110]
call fcn.004192c5
push 0
mov edx, dword [0x4b5ff8]
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
push 0xb
call fcn.0047cae3
add esp, 4
push 7
call fcn.0047d1ca
add esp, 4
push 0
push 0
push 0
call fcn.0047d1f1
add esp, 0xc
mov eax, dword [ebp - 0x118]
add eax, 0x24
push eax
mov ecx, dword [0x48689c]
push ecx
mov edx, dword [0x486898]
push edx
push 0
push 0
call fcn.0047e09b
nop
nop
nop
push 0
call fcn.0047cae3
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x110]
call fcn.004192c5
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret

Function at 0x46fd6f
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4859a6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10c
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x114]
call fcn.004032b0
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x118]
xor ecx, ecx
mov cl, byte [eax + 0x2024]
call fcn.00484002
nop
nop
nop
nop
call fcn.00484e27
mov byte [ebp - 0x10], al
mov edx, dword [ebp - 0x10]
and edx, 0xff
cmp edx, 0xff
jne 0x46fdd9
mov byte [ebp - 0x10], 1
push str.EFFAREA.E5
lea ecx, [ebp - 0x114]
call fcn.0041fb35
mov eax, dword [ebp - 0x118]
add eax, 0x1024
push eax
mov ecx, dword [ebp - 0x10]
and ecx, 0xff
push ecx
lea ecx, [ebp - 0x114]
call fcn.0041fc89
lea ecx, [ebp - 0x114]
call fcn.004192c5
push 0
mov edx, dword [0x4b5ffc]
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
push 0xc
call fcn.0047cae3
add esp, 4
push 7
call fcn.0047d1ca
add esp, 4
push 0
push 0
push 0
call fcn.0047d1f1
add esp, 0xc
mov eax, dword [ebp - 0x118]
add eax, 0x1024
push eax
mov ecx, dword [0x4868ac]
push ecx
mov edx, dword [0x4868a8]
push edx
push 0
push 0
call fcn.0047e09b
nop
nop
nop
push 0
call fcn.0047cae3
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x114]
call fcn.004192c5
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
Function at 0x46fe96
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov dword [ebp - 0x14], ecx
lea eax, [ebp - 0x10]
push eax
push 0x527
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call fcn.00461b6a
add esp, 8
push 0xc
mov eax, dword [0x48689c]
add eax, 2
push eax
mov ecx, dword [0x486898]
add ecx, 2
push ecx
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
lea eax, [eax + edx - 2]
sub eax, dword [0x48689c]
cdq
sub eax, edx
sar eax, 1
push eax
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x10]
lea eax, [edx + ecx - 2]
sub eax, dword [0x486898]
cdq
sub eax, edx
sar eax, 1
push eax
push 0
push 0x527
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
push 0x527
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
mov ecx, dword [0x4b5ff8]
push ecx
call dword [sym.imp.USER32.dll_SetParent]
push 0
mov edx, dword [0x48689c]
push edx
mov eax, dword [0x486898]
push eax
push 0
push 0
mov ecx, dword [0x4b5ff8]
push ecx
call dword [sym.imp.USER32.dll_MoveWindow]
lea edx, [ebp - 0x10]
push edx
push 0x528
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call fcn.00461b6a
add esp, 8
push 0xc
mov edx, dword [0x4868ac]
add edx, 2
push edx
mov eax, dword [0x4868a8]
add eax, 2
push eax
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0xc]
lea eax, [edx + ecx - 2]
sub eax, dword [0x4868ac]
cdq
sub eax, edx
sar eax, 1
push eax
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x10]
lea eax, [ecx + eax - 2]
sub eax, dword [0x4868a8]
cdq
sub eax, edx
sar eax, 1
push eax
push 0
push 0x528
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
push 0x528
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
mov eax, dword [0x4b5ffc]
push eax
call dword [sym.imp.USER32.dll_SetParent]
push 0
mov ecx, dword [0x4868ac]
push ecx
mov edx, dword [0x4868a8]
push edx
push 0
push 0
mov eax, dword [0x4b5ffc]
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
push 5
mov ecx, dword [0x4b5ff8]
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
push 5
mov edx, dword [0x4b5ffc]
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
mov esp, ebp
pop ebp
ret
Function at 0x4714e4
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1014
cmp dword [ebp + 0x18], 0
jne 0x471503
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call dword [sym.imp.USER32.dll_GetClientRect]
jmp 0x47151d
mov edx, dword [ebp + 0x18]
mov eax, dword [edx]
mov dword [ebp - 0x10], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0xc], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 8], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 4], ecx
push 0x1000
lea edx, [ebp - 0x1010]
push edx
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov dword [ebp - 0x1014], eax
mov ecx, dword [ebp + 0xc]
push ecx
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
jne 0x471559
push 0x10
call dword [sym.imp.USER32.dll_GetSysColor]
mov dword [ebp + 0x14], eax
mov dword [ebp + 0x20], 1
mov edx, dword [ebp + 0x20]
push edx
mov eax, dword [ebp + 0x1c]
push eax
lea ecx, [ebp - 0x10]
push ecx
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp - 0x1014]
push ecx
lea edx, [ebp - 0x1010]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00471411
add esp, 0x20
mov esp, ebp
pop ebp
ret

Function at 0x474e0c
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0
call fcn.00426b52
add esp, 4
push 0
push dword [0x4b7508]
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [ebp + 8]
push 1
call fcn.0041de80
push 0x3fe
push 0x58b290
call fcn.0058b310
cmp al, 3
je 0x474e50
inc al
mov ecx, dword [ebp + 0xc]
mov byte [ecx], al
call fcn.0053dbfd
mov ecx, dword [ebp + 8]
mov byte [ecx], 2
xor eax, eax
mov ecx, dword [ebp + 0xc]
mov byte [ecx], al
call fcn.00426ba3
mov esp, ebp
pop ebp
ret 8
Function at 0x47645e
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0
mov eax, dword [0x4b6a8c]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [0x4b6a8c]
push ecx
call dword [sym.imp.USER32.dll_DestroyWindow]
mov edx, dword [0x4b6a68]
push edx
call fcn.004761d9
add esp, 4
push 0
push 0
push 5
mov eax, dword [0x4b6a8c]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push 5
mov ecx, dword [0x4b6a8c]
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
call fcn.004759bc
add esp, 4
pop ebp
ret

Function at 0x4764b8
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0
mov eax, dword [0x4b6a8c]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 0x4b6bc0
call fcn.0046364f
mov ecx, dword [0x4b6a68]
push ecx
call fcn.00476203
add esp, 4
push 0
push 0
push 5
mov edx, dword [0x4b6a8c]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
push 5
mov eax, dword [0x4b6a8c]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
call fcn.004759bc
add esp, 4
pop ebp
ret
Function at 0x477b6f
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x485d4c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x204
mov dword [ebp - 0x20c], ecx
push 0x5a6
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x478160
mov ecx, dword [ebp - 0x20c]
movzx eax, byte [ecx + 0x2b]
call fcn.0040111a
push eax
push 0x3f8
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
mov dword [ebp - 0x130], 0
jmp 0x477bd9
inc dword [ebp - 0x130]
mov eax, dword [ebp - 0x130]
cmp eax, 0xa
jae 0x477c1a
shl eax, 1
push eax
mov ecx, dword [ebp - 0x20c]
movzx ecx, byte [ecx + 0x2b]
call fcn.0041b781
call fcn.00466bb9
test al, al
je 0x477bd3
mov eax, dword [ebp - 0x130]
push dword [eax*4 + 0x48bc04]
push 0x5a8
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
cmp dword [ebp - 0x130], 0xa
jne 0x477c36
push 0x48ebcc
push 0x5a8
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
mov dword [ebp - 0x130], 0xa
jmp 0x477c48
inc dword [ebp - 0x130]
mov eax, dword [ebp - 0x130]
cmp eax, 0xd
jae 0x477c89
shl eax, 1
push eax
mov ecx, dword [ebp - 0x20c]
movzx ecx, byte [ecx + 0x2b]
call fcn.0041b781
call fcn.00466bb9
test al, al
je 0x477c42
mov eax, dword [ebp - 0x130]
push dword [eax*4 + 0x48bc04]
push 0x5a7
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
cmp dword [ebp - 0x130], 0xd
jne 0x477ca5
push 0x48ebd0
push 0x5a7
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
push 0x474
push dword [ebp + 8]
push 0
mov eax, dword [ebp - 0x20c]
call fcn.0047816e
push 0x561
push dword [ebp + 8]
push 2
mov eax, dword [ebp - 0x20c]
call fcn.0047816e
push 0x3f1
push dword [ebp + 8]
push 1
mov eax, dword [ebp - 0x20c]
call fcn.0047816e
push 0x562
push dword [ebp + 8]
push 3
mov eax, dword [ebp - 0x20c]
call fcn.0047816e
push 0x563
push dword [ebp + 8]
push 4
mov eax, dword [ebp - 0x20c]
call fcn.0047816e
push 0
mov edx, dword [ebp - 0x20c]
movzx ecx, byte [edx + 0x2b]
call fcn.0041b781
push dword [ebp + 8]
call fcn.0058c673
push eax
push 0x564
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SetDlgItemInt]
mov edx, dword [ebp - 0x20c]
movzx eax, byte [edx + 0x2b]
push eax
lea ecx, [ebp - 0x1fc]
push ecx
call fcn.00457140
add esp, 8
call fcn.00585f08
push ecx
nop
push 0x5a6
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
mov ecx, dword [ebp - 0x20c]
call fcn.00482715
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x20c]
call fcn.0040685a
and eax, 0xffff
mov dword [ebp - 0x114], eax
mov ecx, dword [ebp - 0x20c]
call fcn.00477adc
mov byte [ebp - 0x200], al
jmp 0x585d63
Function at 0x47805a
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0
push dword [ebp + 0xc]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
mov eax, dword [ebp + 0x14]
dec eax
push dword [eax*4 + 0x4b5fd0]
shl eax, 4
push dword [eax + 0x4867fc]
push dword [eax + 0x4867f8]
sub esp, 0x100
push 0
mov dword [ebp - 4], esp
push dword [ebp + 0x18]
mov ecx, dword [ebp - 4]
call fcn.0041fb35
push dword [ebp + 0x10]
push dword [ebp + 0x1c]
mov ecx, dword [ebp - 4]
call fcn.0041fc89
mov ecx, dword [ebp - 4]
call fcn.004192c5
push 0
push dword [ebp - 0xc]
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [ebp + 0x14]
call fcn.0047cae3
add esp, 4
push 7
call fcn.0047d1ca
add esp, 4
push 0
push 0
push 0
call fcn.0047d1f1
add esp, 0xc
push dword [ebp + 0x10]
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push 0
push 0
call fcn.0047e09b
push dword [ebp - 4]
push dword [ebp - 8]
call fcn.00461b6a
add esp, 8
push 0xc
mov eax, dword [ebp - 0x14]
add eax, 2
push eax
mov eax, dword [ebp - 0x10]
add eax, 2
push eax
mov ecx, dword [ebp - 4]
mov eax, dword [ecx + 0xc]
mov edx, dword [ecx + 4]
lea eax, [eax + edx - 2]
sub eax, dword [ebp - 0x14]
sar eax, 1
push eax
mov eax, dword [ecx + 8]
mov edx, dword [ecx]
lea eax, [eax + edx - 2]
sub eax, dword [ebp - 0x10]
sar eax, 1
push eax
push 0
push dword [ebp - 8]
call dword [sym.imp.USER32.dll_SetWindowPos]
push dword [ebp - 8]
push dword [ebp - 0xc]
call dword [sym.imp.USER32.dll_SetParent]
push 0
push dword [ebp - 0x14]
push dword [ebp - 0x10]
push 0
push 0
push dword [ebp - 0xc]
call dword [sym.imp.USER32.dll_MoveWindow]
push 5
push dword [ebp - 0xc]
call dword [sym.imp.USER32.dll_ShowWindow]
leave
ret 0x18
Function at 0x4790da
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
cmp dword [0x48e9a8], 0xffffffff
je 0x47912a
mov eax, dword [ebp + 8]
cmp eax, dword [0x48e9a8]
je 0x479115
mov ecx, dword [0x48e9a8]
mov edx, dword [ecx*4 + 0x4b6ba8]
push edx
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x479115
push 0
mov ecx, 0x4b69b0
call fcn.004746ad
push 0
mov eax, dword [0x48e9a8]
mov ecx, dword [eax*4 + 0x4b6ba8]
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
cmp dword [ebp + 8], 0xffffffff
jne 0x479137
mov dword [ebp + 8], 0
push 5
mov edx, dword [ebp + 8]
mov eax, dword [edx*4 + 0x4b6ba8]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [ebp + 8]
mov dword [0x48e9a8], ecx
pop ebp
ret

Function at 0x479728
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
cmp dword [ebp + 8], 0x400
jb 0x479736
jmp 0x479793
mov eax, dword [0x4b7508]
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x479754
push 1
push 0
mov ecx, 0x4b69b0
call fcn.0047467a
mov ecx, dword [0x4b7508]
push ecx
push dword [ebp + 8]
call fcn.004061e4
nop
nop
nop
nop
call fcn.00478664
mov edx, dword [0x4b7508]
push edx
call fcn.00479647
add esp, 4
push 9
mov eax, dword [0x4b7508]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
call fcn.0047cae3
add esp, 4
pop ebp
ret

Function at 0x479b59
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
mov dword [0x4b7504], 0
mov eax, dword [0x4b7508]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x479ba8
push 0
push 0x479164
mov ecx, dword [0x4b6a68]
push ecx
push 0xa6
mov edx, dword [0x4b6a60]
push edx
call dword [sym.imp.USER32.dll_CreateDialogParamA]
mov dword [0x4b7508], eax
cmp dword [0x4b7508], 0
jne 0x479ba8
xor eax, eax
jmp 0x479bbb
push 0
mov eax, dword [0x4b7508]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, 1
pop ebp
ret

Function at 0x479bd9
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0
mov eax, dword [0x4b7508]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
call fcn.0047645e
pop ebp
ret

Function at 0x479bf1
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0
push dword [0x4b5fd8]
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
push dword [0x4b5fdc]
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
push dword [0x4b7508]
call dword [sym.imp.USER32.dll_ShowWindow]
call fcn.00584eeb
xor ecx, ecx
dec cx
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
push 0
push dword [0x4ffa70]
call dword [sym.imp.USER32.dll_ShowWindow]
nop
call fcn.00426c32
pop ebp
ret