joyce8/EMBER2024-capa huggingface dataset:
Function at 0x45b4d0
Capabilities:
Encode data using xor

Disassembly:
mov al, byte [0x4ce538]
push ebx
push ebp
push esi
cmp al, 0x1a
push edi
jae 0x45b687
mov bl, al
inc bl
mov byte [0x4ce538], bl
call fcn.00479950
mov ebp, dword [esp + 0x14]
and al, 0x7f
mov esi, ebp
mov byte [ebp + 7], al
mov cl, byte [0x4ce54e]
and cl, 0x7f
xor cl, al
mov byte [ebp + 7], cl
mov al, byte [0x4cde7c]
or cl, al
mov byte [ebp + 7], cl
mov al, byte [0x4cde98]
mov byte [0x4cde7c], 0
mov byte [ebp + 3], al
mov bl, byte [0x4cde98]
mov cl, byte [0x4ce539]
inc bl
mov eax, 0x144
mov byte [0x4cde98], bl
mov byte [ebp + 1], cl
mov dl, byte [0x4ce539]
mov cl, byte [ebp]
mov byte [ebp + 2], dl
mov dl, cl
mov bl, dl
dec dl
test bl, bl
mov word [ebp + 4], 0
mov byte [esp + 0x14], dl
je 0x45b57d
mov edi, dword [esp + 0x14]
and edi, 0xff
inc edi
xor edx, edx
mov dl, byte [esi]
xor eax, edx
inc esi
mov edx, eax
shr edx, 0x1d
shl eax, 3
or eax, edx
dec edi
jne 0x45b569
mov edx, eax
shr edx, 0x10
xor eax, edx
mov edx, dword [0x4ae21c]
test edx, edx
je 0x45b593
xor eax, 0xaa55
mov word [ebp + 4], ax
xor eax, eax
mov al, byte [0x4ce539]
lea edx, [eax + eax*2]
lea edx, [eax + edx*4]
shl edx, 5
add edx, eax
lea eax, [eax + edx*4]
mov dl, byte [ebp + 3]
lea ebx, [eax*4 + 0x4c0ddc]
mov al, dl
and eax, 0x1f
lea esi, [eax + eax*2]
lea eax, [eax + esi*4]
shl eax, 4
add eax, ebx
cmp byte [eax + 3], dl
jne 0x45b5d5
cmp byte [eax + 6], 0
je 0x45b5d5
test eax, eax
jne 0x45b5f9
and edx, 0x1f
and ecx, 0xff
mov esi, ebp
lea eax, [edx + edx*2]
lea edi, [edx + eax*4]
mov edx, ecx
shl edi, 4
add edi, ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 1
call dword [0x4ce574]
add esp, 4
test eax, eax
je 0x45b635
xor eax, eax
xor esi, esi
mov al, byte [0x4cde71]
inc eax
test eax, eax
jle 0x45b687
push 0
push ebp
call dword [0x4ce570]
xor ecx, ecx
add esp, 8
mov cl, byte [0x4cde71]
inc esi
inc ecx
cmp esi, ecx
jl 0x45b616
pop edi
pop esi
pop ebp
pop ebx
ret
mov al, byte [0x4cde71]
xor ebx, ebx
mov edi, 0x4c0dcc
cmp byte [edi - 4], 2
jne 0x45b678
xor edx, edx
mov dl, byte [0x4ce539]
cmp ebx, edx
je 0x45b678
xor ecx, ecx
xor esi, esi
mov cl, al
inc ecx
test ecx, ecx
jle 0x45b678
push edi
push ebp
call dword [0x4ce570]
mov al, byte [0x4cde71]
xor edx, edx
add esp, 8
mov dl, al
inc esi
inc edx
cmp esi, edx
jl 0x45b65e
add edi, 0x1a14
inc ebx
cmp edi, 0x4cde6c
jl 0x45b641
pop edi
pop esi
pop ebp
pop ebx
ret
Function at 0x45b690
Capabilities:
Encode data using xor

Disassembly:
mov cl, byte [0x4ce53a]
sub esp, 0xd4
mov al, 2
cmp cl, al
push ebp
jne 0x45b896
cmp byte [0x4ce538], al
jae 0x45b6b6
mov byte [0x4cde7c], 0x80
mov eax, dword [0x4ce538]
mov ebp, dword [esp + 0xdc]
and eax, 0xff
cmp eax, ebp
jge 0x45b896
push ebx
push esi
push edi
mov al, byte [0x4ce538]
mov byte [esp + 0x1a], 1
cmp al, 0x1a
mov byte [esp + 0x14], 8
jae 0x45b87f
mov bl, al
inc bl
mov byte [0x4ce538], bl
call fcn.00479950
mov cl, byte [0x4ce54e]
mov dl, byte [esp + 0x14]
and al, 0x7f
and cl, 0x7f
xor cl, al
mov al, byte [0x4cde7c]
or cl, al
mov al, byte [0x4cde98]
mov byte [esp + 0x17], al
mov bl, dl
mov byte [esp + 0x1b], cl
mov cl, byte [0x4ce539]
inc al
dec bl
mov byte [0x4cde98], al
mov byte [0x4cde7c], 0
test dl, dl
mov byte [esp + 0x15], cl
mov byte [esp + 0x16], cl
mov word [esp + 0x18], 0
mov eax, 0x144
lea esi, [esp + 0x14]
mov byte [esp + 0x10], bl
je 0x45b774
mov edi, dword [esp + 0x10]
and edi, 0xff
inc edi
xor edx, edx
mov dl, byte [esi]
xor eax, edx
inc esi
mov edx, eax
shr edx, 0x1d
shl eax, 3
or eax, edx
dec edi
jne 0x45b760
mov edx, eax
shr edx, 0x10
xor eax, edx
mov edx, dword [0x4ae21c]
test edx, edx
je 0x45b78a
xor eax, 0xaa55
mov word [esp + 0x18], ax
xor eax, eax
mov al, cl
lea ecx, [eax + eax*2]
lea edx, [eax + ecx*4]
shl edx, 5
add edx, eax
lea eax, [eax + edx*4]
mov dl, byte [esp + 0x17]
lea ecx, [eax*4 + 0x4c0ddc]
mov al, dl
and eax, 0x1f
lea esi, [eax + eax*2]
lea eax, [eax + esi*4]
shl eax, 4
lea edi, [eax + ecx]
mov al, byte [eax + ecx + 3]
cmp al, dl
jne 0x45b7d0
mov al, byte [edi + 6]
test al, al
je 0x45b7d0
test edi, edi
jne 0x45b7ec
mov ecx, dword [esp + 0x14]
lea esi, [esp + 0x14]
and ecx, 0xff
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 1
call dword [0x4ce574]
add esp, 4
test eax, eax
je 0x45b829
xor eax, eax
xor esi, esi
mov al, byte [0x4cde71]
inc eax
test eax, eax
jle 0x45b87f
lea ecx, [esp + 0x14]
push 0
push ecx
call dword [0x4ce570]
xor edx, edx
add esp, 8
mov dl, byte [0x4cde71]
inc esi
inc edx
cmp esi, edx
jl 0x45b809
jmp 0x45b87f
mov al, byte [0x4cde71]
xor ebx, ebx
mov edi, 0x4c0dcc
cmp byte [edi - 4], 2
jne 0x45b870
xor ecx, ecx
mov cl, byte [0x4ce539]
cmp ebx, ecx
je 0x45b870
xor edx, edx
xor esi, esi
mov dl, al
inc edx
test edx, edx
jle 0x45b870
lea eax, [esp + 0x14]
push edi
push eax
call dword [0x4ce570]
mov al, byte [0x4cde71]
xor ecx, ecx
add esp, 8
mov cl, al
inc esi
inc ecx
cmp esi, ecx
jl 0x45b852
add edi, 0x1a14
inc ebx
cmp edi, 0x4cde6c
jl 0x45b835
mov edx, dword [0x4ce538]
and edx, 0xff
cmp edx, ebp
jl 0x45b6d2
pop edi
pop esi
pop ebx
pop ebp
add esp, 0xd4
ret
Function at 0x45b8a0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, dword [esp + 0xc]
push esi
push edi
mov ecx, 4
mov edi, 0x4cdea0
mov esi, ebp
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
je 0x45b94c
mov esi, dword [esp + 0x10]
push ebx
mov al, 8
xor edx, edx
mov cl, byte [esi]
mov byte [esi + 1], al
mov bl, cl
dec cl
mov byte [esi + 2], al
mov byte [esi + 7], dl
test bl, bl
mov byte [esi + 3], dl
mov word [esi + 4], dx
mov eax, 0x144
mov edi, esi
mov byte [esp + 0x18], cl
je 0x45b90a
mov ecx, dword [esp + 0x18]
and ecx, 0xff
inc ecx
xor ebx, ebx
mov bl, byte [edi]
xor eax, ebx
inc edi
mov ebx, eax
shr ebx, 0x1d
shl eax, 3
or eax, ebx
dec ecx
jne 0x45b8f6
mov ecx, eax
pop ebx
shr ecx, 0x10
xor eax, ecx
mov ecx, dword [0x4ae21c]
cmp ecx, edx
je 0x45b921
xor eax, 0xaa55
xor edx, edx
mov word [esi + 4], ax
mov dl, byte [0x4cde71]
xor edi, edi
inc edx
test edx, edx
jle 0x45b94c
push ebp
push esi
call dword [0x4ce570]
xor eax, eax
add esp, 8
mov al, byte [0x4cde71]
inc edi
inc eax
cmp edi, eax
jl 0x45b934
pop edi
pop esi
pop ebp
ret
Function at 0x45bde0
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, dword [esp + 8]
mov eax, 0x144
mov cl, byte [esi]
mov word [esi + 4], 0
mov dl, cl
dec cl
test dl, dl
mov byte [esp + 8], cl
je 0x45be1d
mov ecx, dword [esp + 8]
and ecx, 0xff
inc ecx
xor edx, edx
mov dl, byte [esi]
xor eax, edx
inc esi
mov edx, eax
shr edx, 0x1d
shl eax, 3
or eax, edx
dec ecx
jne 0x45be09
mov ecx, eax
pop esi
shr ecx, 0x10
xor eax, ecx
mov ecx, dword [0x4ae21c]
test ecx, ecx
je 0x45be34
xor eax, 0xaa55
ret

Function at 0x45be40
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [esp + 4]
mov cl, byte [esp + 8]
xor edx, edx
push ebx
mov byte [eax + 6], 3
mov byte [eax], 8
mov byte [eax + 7], dl
mov byte [eax + 1], cl
mov cl, byte [0x4ce539]
push esi
mov byte [eax + 2], cl
mov cl, byte [esp + 0x14]
push edi
mov byte [eax + 3], cl
mov word [eax + 4], dx
mov ecx, 0x144
mov esi, eax
mov edi, 8
xor ebx, ebx
mov bl, byte [esi]
xor ecx, ebx
inc esi
mov ebx, ecx
shr ebx, 0x1d
shl ecx, 3
or ecx, ebx
dec edi
jne 0x45be7a
mov esi, ecx
pop edi
shr esi, 0x10
xor ecx, esi
mov esi, dword [0x4ae21c]
cmp esi, edx
pop esi
pop ebx
je 0x45bea8
xor ecx, 0xaa55
mov word [eax + 4], cx
ret

Function at 0x45bf90
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, dword [esp + 8]
push esi
mov esi, dword [esp + 0x10]
xor ecx, ecx
push edi
mov cl, byte [esi]
mov edi, ebp
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, 0x144
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov cl, byte [0x4ce539]
mov word [ebp + 4], 0
mov byte [ebp + 2], cl
mov cl, byte [ebp]
mov dl, cl
dec cl
test dl, dl
mov esi, ebp
mov byte [esp + 0x14], cl
je 0x45bff3
mov ecx, dword [esp + 0x14]
and ecx, 0xff
inc ecx
xor edx, edx
mov dl, byte [esi]
xor eax, edx
inc esi
mov edx, eax
shr edx, 0x1d
shl eax, 3
or eax, edx
dec ecx
jne 0x45bfdf
mov ecx, eax
shr ecx, 0x10
xor eax, ecx
mov ecx, dword [0x4ae21c]
test ecx, ecx
je 0x45c009
xor eax, 0xaa55
pop edi
mov word [ebp + 4], ax
pop esi
pop ebp
ret
Function at 0x45c4d0
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
push ebx
push esi
mov byte [eax + 6], 4
mov byte [eax], 0x18
mov byte [eax + 1], cl
mov dl, byte [0x4ce539]
and ecx, 0xff
mov byte [eax + 2], dl
push edi
lea esi, [eax + 8]
lea edx, [ecx + ecx*2]
lea edx, [ecx + edx*4]
shl edx, 5
add edx, ecx
lea ecx, [ecx + edx*4]
shl ecx, 2
mov dl, byte [ecx + 0x4c0dc9]
lea ecx, [ecx + 0x4c0dcc]
mov byte [eax + 3], dl
xor edx, edx
mov byte [eax + 7], dl
mov edi, dword [ecx]
mov dword [esi], edi
mov edi, dword [ecx + 4]
mov dword [esi + 4], edi
mov edi, dword [ecx + 8]
mov dword [esi + 8], edi
mov edi, 0x18
mov ecx, dword [ecx + 0xc]
mov word [eax + 4], dx
mov dword [esi + 0xc], ecx
mov ecx, 0x144
mov esi, eax
xor ebx, ebx
mov bl, byte [esi]
xor ecx, ebx
inc esi
mov ebx, ecx
shr ebx, 0x1d
shl ecx, 3
or ecx, ebx
dec edi
jne 0x45c542
mov esi, ecx
pop edi
shr esi, 0x10
xor ecx, esi
mov esi, dword [0x4ae21c]
cmp esi, edx
pop esi
pop ebx
je 0x45c570
xor ecx, 0xaa55
mov word [eax + 4], cx
ret
Function at 0x45c580
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [esp + 8]
sub esp, 0xd0
and eax, 0xff
push ebx
push ebp
lea ecx, [eax + eax*2]
push esi
push edi
lea edx, [eax + ecx*4]
shl edx, 5
add edx, eax
lea esi, [eax + edx*4]
shl esi, 2
mov al, byte [esi + 0x4c0dca]
test al, al
je 0x45c622
mov cl, byte [esi + 0x4c0dc9]
mov al, cl
and eax, 0x1f
lea edx, [eax + eax*2]
lea edx, [eax + edx*4]
xor eax, eax
mov al, byte [0x4ce539]
shl edx, 4
lea edi, [eax + eax*2]
lea edi, [eax + edi*4]
shl edi, 5
add edi, eax
lea eax, [eax + edi*4]
lea edi, [edx + eax*4 + 0x4c0ddc]
mov al, byte [edx + eax*4 + 0x4c0ddf]
cmp al, cl
jne 0x45c622
mov al, byte [edi + 6]
test al, al
je 0x45c622
test edi, edi
je 0x45c622
xor ecx, ecx
xor ebp, ebp
mov cl, byte [0x4cde71]
inc ecx
test ecx, ecx
jle 0x45c622
lea ebx, [esi + 0x4c0dcc]
push ebx
push edi
call dword [0x4ce570]
xor edx, edx
add esp, 8
mov dl, byte [0x4cde71]
inc ebp
inc edx
cmp ebp, edx
jl 0x45c609
mov al, byte [0x4ce539]
mov cl, byte [esp + 0xe8]
mov dl, byte [esi + 0x4c0dc9]
mov bl, 2
xor edi, edi
mov byte [esp + 0x11], al
mov byte [esp + 0x12], cl
mov byte [esp + 0x16], bl
mov byte [esp + 0x10], 8
mov byte [esp + 0x13], dl
mov byte [esp + 0x17], 0
mov word [esp + 0x14], di
mov eax, 0x144
lea ecx, [esp + 0x10]
mov esi, 8
xor edx, edx
mov dl, byte [ecx]
xor eax, edx
inc ecx
mov edx, eax
shr edx, 0x1d
shl eax, 3
or eax, edx
dec esi
jne 0x45c665
mov ecx, eax
shr ecx, 0x10
xor eax, ecx
mov ecx, dword [0x4ae21c]
cmp ecx, edi
je 0x45c68f
xor eax, 0xaa55
mov word [esp + 0x14], ax
mov eax, dword [esp + 0xe4]
cmp al, 8
jne 0x45c74e
push 1
call dword [0x4ce574]
add esp, 4
test eax, eax
je 0x45c6ee
xor edx, edx
xor esi, esi
mov dl, byte [0x4cde71]
inc edx
test edx, edx
jle 0x45c792
lea eax, [esp + 0x10]
push 0
push eax
call dword [0x4ce570]
xor ecx, ecx
add esp, 8
mov cl, byte [0x4cde71]
inc esi
inc ecx
cmp esi, ecx
jl 0x45c6c5
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xd0
ret
mov al, byte [0x4cde71]
xor ebp, ebp
mov edi, 0x4c0dcc
cmp byte [edi - 4], bl
jne 0x45c734
xor edx, edx
mov dl, byte [0x4ce539]
cmp ebp, edx
je 0x45c734
xor ecx, ecx
xor esi, esi
mov cl, al
inc ecx
test ecx, ecx
jle 0x45c734
lea edx, [esp + 0x10]
push edi
push edx
call dword [0x4ce570]
mov al, byte [0x4cde71]
xor ecx, ecx
add esp, 8
mov cl, al
inc esi
inc ecx
cmp esi, ecx
jl 0x45c716
add edi, 0x1a14
inc ebp
cmp edi, 0x4cde6c
jl 0x45c6fa
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xd0
ret
xor edx, edx
mov dl, byte [0x4cde71]
inc edx
test edx, edx
jle 0x45c792
and eax, 0xff
lea ecx, [eax + eax*2]
lea edx, [eax + ecx*4]
shl edx, 5
add edx, eax
lea eax, [eax + edx*4]
lea esi, [eax*4 + 0x4c0dcc]
lea eax, [esp + 0x10]
push esi
push eax
call dword [0x4ce570]
xor ecx, ecx
add esp, 8
mov cl, byte [0x4cde71]
inc edi
inc ecx
cmp edi, ecx
jl 0x45c775
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xd0
ret
Function at 0x45c7a0
Capabilities:
Encode data using xor

Disassembly:
sub esp, 0xd4
push ebx
xor ebx, ebx
push ebp
xor al, al
push esi
push edi
mov byte [esp + 0x13], al
mov ebp, 0x4cde80
mov edx, 0x4c0dc9
cmp byte [edx - 1], 2
jne 0x45c880
cmp byte [ebp], bl
jne 0x45c880
mov byte [esp + 0x15], al
mov al, byte [0x4ce539]
mov byte [esp + 0x16], al
lea eax, [edx + 3]
mov cl, byte [edx]
mov byte [esp + 0x1a], 4
mov esi, dword [eax]
mov byte [esp + 0x14], 0x18
mov dword [esp + 0x1c], esi
mov byte [esp + 0x17], cl
mov esi, dword [eax + 4]
mov byte [esp + 0x1b], bl
mov dword [esp + 0x20], esi
mov word [esp + 0x18], bx
mov esi, dword [eax + 8]
mov edi, 0x18
mov dword [esp + 0x24], esi
lea esi, [esp + 0x14]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x28], eax
mov eax, 0x144
xor ebx, ebx
mov bl, byte [esi]
xor eax, ebx
inc esi
mov ebx, eax
shr ebx, 0x1d
shl eax, 3
or eax, ebx
dec edi
jne 0x45c821
mov esi, eax
xor ebx, ebx
shr esi, 0x10
xor eax, esi
mov esi, dword [0x4ae21c]
cmp esi, ebx
je 0x45c84d
xor eax, 0xaa55
mov word [esp + 0x18], ax
mov al, cl
and eax, 0x1f
lea esi, [eax + eax*2]
lea eax, [eax + esi*4]
shl eax, 4
lea edi, [eax + edx + 0x13]
mov al, byte [eax + edx + 0x16]
cmp al, cl
jne 0x45c875
cmp byte [edi + 6], bl
je 0x45c875
cmp edi, ebx
jne 0x45c880
mov ecx, 6
lea esi, [esp + 0x14]
rep movsd dword es:[edi], dword [esi]
mov al, byte [esp + 0x13]
add edx, 0x1a14
inc al
inc ebp
cmp al, 8
mov byte [esp + 0x13], al
jb 0x45c7bc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xd4
ret
Function at 0x45c8b0
Capabilities:
Encode data using xor

Disassembly:
push ecx
mov al, byte [0x4ce54c]
test al, al
jne 0x45c9fb
xor eax, eax
push ebx
mov al, byte [0x4ce539]
push ebp
push esi
push edi
lea ecx, [eax + eax*2]
mov edi, 0x4c0dc8
lea eax, [eax + ecx*4]
shl eax, 4
mov dl, byte [eax + 0x4cdebb]
mov bl, byte [eax + 0x4cdebf]
mov byte [esp + 0x12], dl
mov byte [esp + 0x13], bl
xor edx, edx
mov eax, 0x4cdeb9
cmp byte [edi], 2
jne 0x45c9df
mov cl, byte [esp + 0x12]
cmp byte [eax + 2], cl
jne 0x45c921
mov cl, byte [eax + 6]
test cl, 0x80
je 0x45c9df
cmp cl, bl
je 0x45c9df
test bl, 0x80
je 0x45c9df
mov cl, byte [0x4a49b0]
test cl, cl
je 0x45c9d8
mov cl, byte [esp + 0x12]
lea esi, [eax - 1]
mov byte [edi + 1], cl
mov cl, byte [0x4ce539]
mov byte [eax + 1], cl
mov ecx, edx
and ecx, 0xff
mov byte [eax + 5], 4
mov byte [esi], 0x18
mov byte [eax], dl
lea ebx, [ecx + ecx*2]
mov byte [eax + 6], 0
mov word [eax + 3], 0
lea ebx, [ecx + ebx*4]
shl ebx, 5
add ebx, ecx
lea ecx, [ecx + ebx*4]
shl ecx, 2
mov bl, byte [ecx + 0x4c0dc9]
lea ecx, [ecx + 0x4c0dcc]
mov byte [eax + 2], bl
lea ebx, [eax + 7]
mov ebp, dword [ecx]
mov dword [ebx], ebp
mov ebp, dword [ecx + 4]
mov dword [ebx + 4], ebp
mov ebp, dword [ecx + 8]
mov dword [ebx + 8], ebp
mov ebp, 0x18
mov ecx, dword [ecx + 0xc]
mov dword [ebx + 0xc], ecx
mov ecx, 0x144
xor ebx, ebx
mov bl, byte [esi]
xor ecx, ebx
inc esi
mov ebx, ecx
shr ebx, 0x1d
shl ecx, 3
or ecx, ebx
dec ebp
jne 0x45c9a0
mov esi, ecx
shr esi, 0x10
xor ecx, esi
mov esi, dword [0x4ae21c]
test esi, esi
je 0x45c9cb
xor ecx, 0xaa55
mov bl, byte [esp + 0x13]
mov word [eax + 3], cx
mov byte [edi], 1
jmp 0x45c9df
mov byte [0x4ce54c], 1
add edi, 0x1a14
inc edx
add eax, 0xd0
cmp edi, 0x4cde68
jl 0x45c8f2
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret
Function at 0x460fc0
Capabilities:
Encode data using xor

Disassembly:
sub esp, 0xc4
push edi
mov edi, dword [esp + 0xd0]
test edi, edi
jne 0x460fe1
push 0x57
call sub.Storm.dll_Ordinal_465
pop edi
add esp, 0xc4
ret
push ebx
push esi
push 0x4fa7
call fcn.0047cd00
add esp, 4
lea esi, [esp + 0x20]
mov ebx, 0x70
call fcn.0047cd0d
mov byte [esi], al
inc esi
dec ebx
jne 0x460ff9
push 0
call fcn.0047cd2f
push eax
call fcn.0047cd00
add esp, 8
xor eax, eax
xor ecx, ecx
cmp byte [eax + edi], 0
jne 0x461020
xor eax, eax
mov dl, byte [eax + edi]
inc eax
mov byte [esp + ecx + 0x90], dl
inc ecx
cmp ecx, 0x40
jl 0x461018
push 0
call fcn.0047ba00
lea eax, [esp + 0x10]
lea ecx, [esp + 0x94]
push eax
push ecx
push 0
call fcn.0047b780
add esp, 0x10
call fcn.0047b730
xor ecx, ecx
mov eax, ecx
mov esi, 0x14
cdq
idiv esi
mov bl, byte [esp + ecx + 0x20]
mov dl, byte [esp + edx + 0xc]
xor bl, dl
mov byte [esp + ecx + 0x20], bl
inc ecx
cmp ecx, 0x70
jb 0x461056
mov ebx, dword [esp + 0xd4]
xor esi, esi
lea edi, [esp + 0x20]
push edi
push ebx
push esi
call fcn.00473260
push esi
call fcn.0047ba00
lea eax, [esp + 0x60]
push 0
push eax
push esi
call fcn.0047b780
add esp, 0x1c
inc esi
add edi, 0x10
cmp esi, 3
jl 0x461081
pop esi
pop ebx
pop edi
add esp, 0xc4
ret
Function at 0x4668d0
Capabilities:
Hide graphical window

Disassembly:
mov eax, dword [0x4d0acc]
push ebx
push ebp
push esi
push edi
push eax
call dword [sym.imp.USER32.dll_GetParent]
mov esi, eax
call dword [sym.imp.USER32.dll_GetFocus]
mov ebp, eax
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4669ca
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0
push 0x419
push esi
call edi
mov ebx, dword [sym.imp.USER32.dll_ShowWindow]
push eax
call ebx
push 0
push 0x4b1
push esi
call edi
push eax
call ebx
push 0
push 0x3ed
push esi
call edi
push eax
call ebx
push 0
push 0x402
push esi
call edi
push eax
call ebx
push 0
push 0x5dc
push esi
call edi
push eax
call ebx
push 0
push 0x5dd
push esi
call edi
push eax
call ebx
push 0
push 0x5df
push esi
call edi
push eax
call ebx
push 0
push 0x5de
push esi
call edi
push eax
call ebx
push 0
push 0x409
push esi
call edi
push eax
call ebx
push 0
push 0x40a
push esi
call edi
push eax
call ebx
push 0
push 0x41a
push esi
call edi
push eax
call ebx
push 0
push 0x5e3
push esi
call edi
push eax
call ebx
push 0
push 0x5e2
push esi
call edi
push eax
call ebx
push 0
push 0x5e1
push esi
call edi
push eax
call ebx
push 0
push 0x5e0
push esi
call edi
push eax
call ebx
jmp 0x466a7e
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 5
push 0x419
push esi
call edi
mov ebx, dword [sym.imp.USER32.dll_ShowWindow]
push eax
call ebx
push 5
push 0x4b1
push esi
call edi
push eax
call ebx
push 5
push 0x3ed
push esi
call edi
push eax
call ebx
push 5
push 0x402
push esi
call edi
push eax
call ebx
push 5
push 0x5dc
push esi
call edi
push eax
call ebx
push 5
push 0x5dd
push esi
call edi
push eax
call ebx
push 5
push 0x5df
push esi
call edi
push eax
call ebx
push 5
push 0x5de
push esi
call edi
push eax
call ebx
push 5
push 0x409
push esi
call edi
push eax
call ebx
push 5
push 0x40a
push esi
call edi
push eax
call ebx
push 5
push 0x41a
push esi
call edi
push eax
call ebx
mov ecx, dword [0x4d0938]
mov edx, dword [0x4d0930]
push 1
push ecx
push edx
push esi
call fcn.00466ab0
add esp, 0x10
push ebp
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x466a95
push ebp
call dword [sym.imp.USER32.dll_SetFocus]
pop edi
pop esi
pop ebp
pop ebx
ret
mov eax, dword [0x4d0a5c]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
pop edi
pop esi
pop ebp
pop ebx
ret
Function at 0x466ab0
Capabilities:
Hide graphical window

Disassembly:
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
push ebx
push ebp
push esi
push edi
push eax
push ecx
call fcn.00463f10
mov esi, dword [esp + 0x1c]
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
add esp, 8
mov ebx, eax
push 0x409
push esi
call edi
test ebx, ebx
mov ebp, eax
jmp 0x466b12
push 1
push ebp
call dword [sym.imp.USER32.dll_EnableWindow]
mov dx, word [0x4d0938]
mov ax, word [0x4d0930]
push edx
push eax
call fcn.00464130
add esp, 8
test eax, eax
je 0x466b4d
push 5
push 0x3f9
push esi
call edi
mov ebp, dword [sym.imp.USER32.dll_ShowWindow]
push eax
call ebp
push 5
jmp 0x466b62
push 0
push 0x3f9
push esi
call edi
mov ebp, dword [sym.imp.USER32.dll_ShowWindow]
push eax
call ebp
push 0
push 0x406
push esi
call edi
push eax
call ebp
test ebx, ebx
je 0x466bd3
cmp word [ebx], 0x10
jne 0x466b95
push 0
push 0x418
push esi
call edi
push eax
call ebp
push 0
push 0x3f1
push esi
call edi
push eax
call ebp
push 0
jmp 0x466bb1
push 5
push 0x418
push esi
call edi
push eax
call ebp
push 5
push 0x3f1
push esi
call edi
push eax
call ebp
push 5
push 0x3f0
push esi
call edi
push eax
call ebp
cmp word [ebx], 0xf
jne 0x466bd3
push 5
push 0x5e1
push esi
call edi
push eax
call ebp
push 5
jmp 0x466be2
push 0
push 0x5e1
push esi
call edi
push eax
call ebp
push 0
push 0x5e0
push esi
call edi
push eax
call ebp
test ebx, ebx
je 0x466c17
cmp byte [ebx + 0x12], 1
je 0x466c17
mov ax, word [ebx]
cmp ax, 0xe
je 0x466c17
cmp ax, 0xa
je 0x466c17
push 5
push 0x5e3
push esi
call edi
push eax
call ebp
push 5
jmp 0x466c26
push 0
push 0x5e3
push esi
call edi
push eax
call ebp
push 0
push 0x5e2
push esi
call edi
push eax
call ebp
test ebx, ebx
je 0x466c46
cmp word [ebx], 0x10
jne 0x466c46
mov ecx, dword [0x4d082c]
push 2
push ecx
jmp 0x466c4f
mov edx, dword [0x4d082c]
push 0xffffffffffffffff
push edx
call fcn.00466ca0
add esp, 8
test ebx, ebx
je 0x466c98
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x466c98
mov edi, dword [sym.imp.USER32.dll_SendDlgItemMessageA]
push 0
push 0
push 0x147
push 0x3f1
push esi
call edi
cmp eax, 0xffffffff
je 0x466c98
push 0
push eax
push 0x150
push 0x3f1
push esi
call edi
push eax
call fcn.00470ba0
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
ret
Function at 0x466ca0
Capabilities:
Get graphical window text

Disassembly:
sub esp, 0x24
push esi
mov esi, dword [esp + 0x2c]
push edi
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0x146
push esi
mov dword [esp + 0x1c], 0xb
mov dword [esp + 0x20], 0x12
mov dword [esp + 0x24], 0xc
mov dword [esp + 0x28], 0xd
mov dword [esp + 0x2c], 0xe
call edi
cmp eax, 1
jne 0x466cf6
mov eax, dword [esp + 0x34]
test eax, eax
jge 0x466e1f
jmp 0x466d06
cmp eax, 4
jne 0x466d06
cmp dword [esp + 0x34], 0xffffffff
je 0x466e1f
push ebx
push ebp
push 0x2c4
push str.C:war2bneBattle.netgluBNCreate.cpp
push fcn.00462d30
push str.rezchatroom.tbl
call fcn.00409930
add esp, 0x10
mov dword [esp + 0x10], eax
push 0
push 0
push 0xb
push esi
call edi
push 0
push 0
push 0x14b
push esi
call edi
lea eax, [esp + 0x14]
xor ebx, ebx
xor ebp, ebp
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x3c]
cmp eax, 0xffffffff
jmp 0x466d56
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x10]
mov dx, word [ecx]
push edx
push eax
call fcn.00409950
add esp, 8
push eax
push 0
push 0x143
push esi
call edi
push ebx
push ebp
push 0x151
push esi
call edi
inc ebp
mov ecx, dword [esp + 0x38]
inc ebx
add ecx, 4
cmp ebx, 5
mov dword [esp + 0x38], ecx
jb 0x466d49
push 0
push 0
push 0x14e
push esi
call edi
mov edx, dword [str.Resources]
lea ecx, [esp + 0x14]
push 0x20
push ecx
push 0
push edx
push 0x49dc0c
call fcn.004ebc42
mov al, byte [esp + 0x14]
pop ebp
test al, al
pop ebx
je 0x466dd1
lea eax, [esp + 0xc]
push eax
push 0xffffffffffffffff
push 0x14d
push esi
call edi
push esi
push 0x105dd
push 0x111
push esi
mov ebp, eax
call dword [sym.imp.USER32.dll_GetParent]
push eax
call edi
push 0
push 1
push 0xb
push esi
call edi
jmp 0x466dfb
mov edx, dword [esp + 8]
mov ecx, dword [ebp*4 + 0x4a5f04]
push 0x2da
push str.C:war2bneBattle.netgluBNCreate.cpp
push edx
mov dword [0x4d0ac8], ecx
call fcn.00462f80
add esp, 0xc
pop edi
pop esi
add esp, 0x24
ret

Function at 0x467900
Capabilities:
Get graphical window text

Disassembly:
sub esp, 0x20
push esi
mov esi, dword [esp + 0x28]
push edi
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0x147
push esi
call edi
cmp eax, 0xffffffff
je 0x467942
lea eax, [esp + 8]
push eax
push 0x20
push 0xd
push esi
call edi
mov edx, dword [esp + 0x30]
lea ecx, [esp + 8]
push ecx
push 0
push edx
push 0x49dc0c
call sub.Storm.dll_Ordinal_425
pop edi
pop esi
add esp, 0x20
ret