joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4259ec
Capabilities:
Check if file exists
Create directory

Disassembly:
mov eax, 0x4dcabc
call fcn.004d0500
sub esp, 0x38
mov eax, dword [0x52d320]
push edi
mov edi, dword [ebp + 8]
xor eax, ebp
mov dword [ebp - 0x38], ecx
push str.Skin_
add ecx, 0x48
mov dword [ebp - 0x10], eax
push ecx
lea eax, [ebp - 0x2c]
push eax
call fcn.00407770
add esp, 0xc
and dword [ebp - 4], 0
lea ecx, [ebp - 0x2c]
call dword [0x4ea6a4]
push eax
call dword [0x4eaadc]
test eax, eax
jne 0x425a48
lea ecx, [ebp - 0x2c]
call dword [0x4ea6a4]
push eax
call dword [0x4ea860]
pop ecx
lea ecx, [edi + 0x80]
call fcn.0045fdf8
and dword [ebp - 0x34], 0
test eax, eax
mov dword [ebp - 0x40], eax
jbe 0x425afa
push ebx
push esi
push dword [ebp - 0x34]
mov ecx, edi
call fcn.0040e6ef
mov ebx, eax
mov dword [ebp - 0x44], ebx
push 0xa4
mov byte [ebp - 4], 1
call fcn.004d00ba
pop ecx
mov dword [ebp - 0x30], eax
test eax, eax
mov byte [ebp - 4], 2
je 0x425aa3
lea ecx, [ebp - 0x2c]
call dword [0x4ea6a4]
mov ecx, dword [ebp - 0x30]
push eax
call fcn.00424b50
mov esi, eax
jmp 0x425aa5
xor esi, esi
mov dword [ebp - 0x30], esi
push ebx
mov ecx, esi
mov byte [ebp - 4], 3
call fcn.00425568
test al, al
je 0x425ace
mov ecx, dword [ebp - 0x38]
and dword [ebp - 0x30], 0
lea eax, [ebp - 0x3c]
push eax
add ecx, 0x20
mov dword [ebp - 0x3c], esi
call fcn.004252a5
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.004252fc
test ebx, ebx
mov byte [ebp - 4], 0
je 0x425ae9
mov ecx, ebx
call fcn.0040d957
inc dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x40]
jb 0x425a64
pop esi
pop ebx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call dword [0x4ea4f8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
mov al, 1
pop edi
call fcn.004d0557
leave
ret 4
Function at 0x425b22
Capabilities:
Check if file exists
Create directory

Disassembly:
mov eax, 0x4dcae9
call fcn.004d0500
sub esp, 0x38
mov eax, dword [0x52d320]
push edi
mov edi, dword [ebp + 8]
xor eax, ebp
mov dword [ebp - 0x38], ecx
push str.Site_
add ecx, 0x48
mov dword [ebp - 0x10], eax
push ecx
lea eax, [ebp - 0x2c]
push eax
call fcn.00407770
add esp, 0xc
and dword [ebp - 4], 0
lea ecx, [ebp - 0x2c]
call dword [0x4ea6a4]
push eax
call dword [0x4eaadc]
test eax, eax
jne 0x425b7e
lea ecx, [ebp - 0x2c]
call dword [0x4ea6a4]
push eax
call dword [0x4ea860]
pop ecx
lea ecx, [edi + 0x80]
call fcn.0045fdf8
and dword [ebp - 0x34], 0
test eax, eax
mov dword [ebp - 0x40], eax
jbe 0x425c30
push ebx
push esi
push dword [ebp - 0x34]
mov ecx, edi
call fcn.0040e6ef
mov ebx, eax
mov dword [ebp - 0x44], ebx
push 0xd4
mov byte [ebp - 4], 1
call fcn.004d00ba
pop ecx
mov dword [ebp - 0x30], eax
test eax, eax
mov byte [ebp - 4], 2
je 0x425bd9
lea ecx, [ebp - 0x2c]
call dword [0x4ea6a4]
mov ecx, dword [ebp - 0x30]
push eax
call fcn.00424e8d
mov esi, eax
jmp 0x425bdb
xor esi, esi
mov dword [ebp - 0x30], esi
push ebx
mov ecx, esi
mov byte [ebp - 4], 3
call fcn.0042567d
test al, al
je 0x425c04
mov ecx, dword [ebp - 0x38]
and dword [ebp - 0x30], 0
lea eax, [ebp - 0x3c]
push eax
add ecx, 0x30
mov dword [ebp - 0x3c], esi
call fcn.004252a5
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.00425313
test ebx, ebx
mov byte [ebp - 4], 0
je 0x425c1f
mov ecx, ebx
call fcn.0040d957
inc dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x40]
jb 0x425b9a
pop esi
pop ebx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call dword [0x4ea4f8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
mov al, 1
pop edi
call fcn.004d0557
leave
ret 4

Function at 0x425c58
Capabilities:
Check if file exists
Create directory

Disassembly:
mov eax, 0x4dcb06
call fcn.004d0500
sub esp, 0x24
mov eax, dword [0x52d320]
push esi
xor eax, ebp
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x10], eax
mov esi, ecx
push str.NetTest_
lea eax, [esi + 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00407770
add esp, 0xc
and dword [ebp - 4], 0
lea ecx, [ebp - 0x2c]
call dword [0x4ea6a4]
push eax
call dword [0x4eaadc]
test eax, eax
jne 0x425cb4
lea ecx, [ebp - 0x2c]
call dword [0x4ea6a4]
push eax
call dword [0x4ea860]
pop ecx
push 0x64
call fcn.004d00ba
pop ecx
mov dword [ebp - 0x30], eax
test eax, eax
mov byte [ebp - 4], 1
je 0x425cdb
lea ecx, [ebp - 0x2c]
call dword [0x4ea6a4]
mov ecx, dword [ebp - 0x30]
push eax
call fcn.00424d1e
jmp 0x425cdd
xor eax, eax
mov ecx, edi
mov byte [ebp - 4], 0
mov dword [esi + 0x40], eax
call fcn.0040e9e6
mov esi, dword [esi + 0x40]
push eax
lea ecx, [esi + 0x14]
call dword [0x4ea768]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call dword [0x4ea4f8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop edi
xor ecx, ebp
mov al, 1
pop esi
call fcn.004d0557
leave
ret 4
Function at 0x42627d
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x808
mov eax, dword [0x52d320]
xor eax, ebp
push ebx
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
test eax, eax
push esi
push edi
mov esi, ecx
mov dword [ebp - 0x808], eax
je 0x4262b4
lea eax, [ebp - 0x808]
push eax
lea ecx, [esi + 0xd0]
call fcn.004252a5
and word [ebp - 0x804], 0
xor eax, eax
mov ecx, 0x1ff
lea edi, [ebp - 0x802]
rep stosd dword es:[edi], eax
push str.logo.png
lea ecx, [esi + 0xac]
stosw word es:[edi], ax
call dword [0x4ea6a4]
push eax
lea eax, [ebp - 0x804]
push eax
call dword [0x4eaad8]
lea eax, [ebp - 0x804]
push eax
call dword [0x4eaadc]
xor ebx, ebx
push 2
inc ebx
test eax, eax
pop ecx
jne 0x42630f
lea eax, [esi + 0xcc]
cmp dword [eax], ecx
je 0x42630f
mov dword [eax], ebx
mov eax, dword [esi + 0xcc]
cmp eax, 3
jne 0x42632b
mov eax, dword [esi]
push ebx
lea ecx, [ebp - 0x804]
push ecx
push ebx
mov ecx, esi
call dword [eax]
jmp 0x426354
cmp eax, ebx
jne 0x426354
push ebx
push esi
lea eax, [ebp - 0x804]
mov dword [esi + 0xcc], ecx
push eax
lea ecx, [esi + 0x74]
call dword [0x4ea6a4]
push eax
call fcn.00423d44
mov ecx, eax
call fcn.004261ea
mov ecx, dword [ebp - 4]
pop edi
pop esi
mov al, bl
xor ecx, ebp
pop ebx
call fcn.004d0557
leave
ret 4

Function at 0x426367
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x808
mov eax, dword [0x52d320]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
test eax, eax
push esi
mov esi, ecx
mov dword [ebp - 0x808], eax
je 0x42639c
lea eax, [ebp - 0x808]
push eax
lea ecx, [esi + 0xe4]
call fcn.004252a5
and word [ebp - 0x804], 0
push edi
xor eax, eax
mov ecx, 0x1ff
lea edi, [ebp - 0x802]
rep stosd dword es:[edi], eax
push str.demo.png
lea ecx, [esi + 0xac]
stosw word es:[edi], ax
call dword [0x4ea6a4]
push eax
lea eax, [ebp - 0x804]
push eax
call dword [0x4eaad8]
lea eax, [ebp - 0x804]
push eax
call dword [0x4eaadc]
test eax, eax
push 2
pop ecx
pop edi
jne 0x4263fa
lea eax, [esi + 0xe0]
cmp dword [eax], ecx
je 0x4263fa
mov dword [eax], 1
mov eax, dword [esi + 0xe0]
cmp eax, 3
jne 0x426417
mov eax, dword [esi]
push ecx
lea ecx, [ebp - 0x804]
push ecx
push 1
mov ecx, esi
call dword [eax]
jmp 0x426444
cmp eax, 1
jne 0x426444
push ecx
push esi
lea eax, [ebp - 0x804]
mov dword [esi + 0xe0], ecx
push eax
lea ecx, [esi + 0x90]
call dword [0x4ea6a4]
push eax
call fcn.00423d44
mov ecx, eax
call fcn.004261ea
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov al, 1
pop esi
call fcn.004d0557
leave
ret 4
Function at 0x426455
Capabilities:
Check if file exists

Disassembly:
mov eax, 0x4dcc31
call fcn.004d0500
sub esp, 0x824
mov eax, dword [0x52d320]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 8]
test eax, eax
push esi
mov esi, ecx
mov dword [ebp - 0x830], eax
je 0x426491
lea eax, [ebp - 0x830]
push eax
lea ecx, [esi + 0x94]
call fcn.004252a5
push edi
lea ecx, [ebp - 0x82c]
call dword [0x4ea6b0]
mov eax, dword [esi + 0x6c]
and dword [ebp - 4], 0
lea ecx, [ebp - 0x82c]
push ecx
push eax
lea ecx, [esi + 0x58]
call dword [0x4ea4e0]
push eax
call fcn.0044f5c2
add esp, 0xc
push str..png
lea ecx, [ebp - 0x82c]
call dword [0x4ea734]
and word [ebp - 0x810], 0
xor eax, eax
mov ecx, 0x1ff
lea edi, [ebp - 0x80e]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x82c]
stosw word es:[edi], ax
call dword [0x4ea6a4]
push eax
lea ecx, [esi + 4]
call dword [0x4ea6a4]
push eax
lea eax, [ebp - 0x810]
push eax
call dword [0x4eaad8]
lea eax, [ebp - 0x810]
push eax
call dword [0x4eaadc]
test eax, eax
push 2
pop ecx
pop edi
jne 0x426532
lea eax, [esi + 0x90]
cmp dword [eax], ecx
je 0x426532
mov dword [eax], 1
mov eax, dword [esi + 0x90]
cmp eax, 3
jne 0x426550
mov eax, dword [esi]
push 0
lea ecx, [ebp - 0x810]
push ecx
push 1
mov ecx, esi
call dword [eax]
jmp 0x42657b
cmp eax, 1
jne 0x42657b
push 0
push esi
lea eax, [ebp - 0x810]
mov dword [esi + 0x90], ecx
push eax
lea ecx, [esi + 0x3c]
call dword [0x4ea6a4]
push eax
call fcn.00423d44
mov ecx, eax
call fcn.004261ea
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x82c]
call dword [0x4ea4f8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
mov al, 1
pop esi
call fcn.004d0557
leave
ret 4
Function at 0x4265a6
Capabilities:
Check if file exists

Disassembly:
mov eax, 0x4dcc1b
call fcn.004d0500
sub esp, 0x840
mov eax, dword [0x52d320]
mov edx, dword [ebp + 8]
xor eax, ebp
push ebx
mov ebx, ecx
mov ecx, dword [ebp + 0xc]
test ecx, ecx
mov dword [ebp - 0x10], eax
mov eax, dword [ebx + 8]
lea eax, [eax + edx*4]
push esi
mov esi, dword [eax]
mov dword [ebp - 0x84c], ecx
je 0x4265ee
lea eax, [ebp - 0x84c]
push eax
lea ecx, [esi + 0xb8]
call fcn.004252a5
push edi
lea ecx, [ebp - 0x82c]
call dword [0x4ea6b0]
mov eax, dword [esi + 0x84]
and dword [ebp - 4], 0
lea ecx, [ebp - 0x82c]
push ecx
push eax
lea ecx, [esi + 0x70]
call dword [0x4ea4e0]
push eax
call fcn.0044f5c2
add esp, 0xc
push str..png
lea ecx, [ebp - 0x82c]
call dword [0x4ea734]
and word [ebp - 0x810], 0
xor eax, eax
mov ecx, 0x1ff
lea edi, [ebp - 0x80e]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x82c]
stosw word es:[edi], ax
call dword [0x4ea6a4]
push eax
lea ecx, [ebx + 0x48]
call dword [0x4ea6a4]
push eax
lea eax, [ebp - 0x810]
push eax
call dword [0x4eaad8]
lea eax, [ebp - 0x810]
push eax
call dword [0x4eaadc]
test eax, eax
push 2
pop ecx
pop edi
jne 0x426692
lea eax, [esi + 0xb4]
cmp dword [eax], ecx
je 0x426692
mov dword [eax], 1
mov eax, dword [esi + 0xb4]
cmp eax, 3
jne 0x4266b1
push dword [ebp + 8]
mov eax, dword [ebx]
lea ecx, [ebp - 0x810]
push ecx
push 1
mov ecx, ebx
call dword [eax]
jmp 0x42671c
cmp eax, 1
jne 0x42671c
mov dword [esi + 0xb4], ecx
lea ecx, [ebp - 0x848]
call dword [0x4ea6b0]
mov eax, dword [esi + 0x14]
lea ecx, [ebp - 0x848]
push ecx
push eax
mov ecx, esi
mov byte [ebp - 4], 1
call dword [0x4ea4e0]
push eax
call fcn.0044f5c2
add esp, 0xc
push dword [ebp + 8]
lea eax, [ebp - 0x810]
push ebx
push eax
lea ecx, [ebp - 0x848]
call dword [0x4ea6a4]
push eax
call fcn.00423d44
mov ecx, eax
call fcn.004261ea
lea ecx, [ebp - 0x848]
mov byte [ebp - 4], 0
call dword [0x4ea4f8]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x82c]
call dword [0x4ea4f8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop esi
xor ecx, ebp
mov al, 1
pop ebx
call fcn.004d0557
leave
ret 8
Function at 0x426748
Capabilities:
Check if file exists

Disassembly:
mov eax, 0x4dcc31
call fcn.004d0500
sub esp, 0x824
mov eax, dword [0x52d320]
xor eax, ebp
push ebx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 8]
test eax, eax
push esi
push edi
mov esi, ecx
mov dword [ebp - 0x830], eax
je 0x426786
lea eax, [ebp - 0x830]
push eax
lea ecx, [esi + 0xb0]
call fcn.004252a5
lea ecx, [ebp - 0x82c]
call dword [0x4ea6b0]
mov eax, dword [esi + 0x18]
and dword [ebp - 4], 0
lea ecx, [ebp - 0x82c]
push ecx
push eax
lea ecx, [esi + 4]
call dword [0x4ea4e0]
push eax
call fcn.0044f5c2
add esp, 0xc
push str._logo.png
lea ecx, [ebp - 0x82c]
call dword [0x4ea734]
and word [ebp - 0x810], 0
xor eax, eax
mov ecx, 0x1ff
lea edi, [ebp - 0x80e]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x82c]
stosw word es:[edi], ax
call dword [0x4ea6a4]
push eax
lea ecx, [esi + 0x90]
call dword [0x4ea6a4]
push eax
lea eax, [ebp - 0x810]
push eax
call dword [0x4eaad8]
lea eax, [ebp - 0x810]
push eax
call dword [0x4eaadc]
xor ebx, ebx
push 2
inc ebx
test eax, eax
pop ecx
jne 0x426827
lea eax, [esi + 0xac]
cmp dword [eax], ecx
je 0x426827
mov dword [eax], ebx
mov eax, dword [esi + 0xac]
cmp eax, 3
jne 0x426843
mov eax, dword [esi]
push ebx
lea ecx, [ebp - 0x810]
push ecx
push ebx
mov ecx, esi
call dword [eax]
jmp 0x42686c
cmp eax, ebx
jne 0x42686c
push ebx
push esi
lea eax, [ebp - 0x810]
mov dword [esi + 0xac], ecx
push eax
lea ecx, [esi + 0x58]
call dword [0x4ea6a4]
push eax
call fcn.00423d44
mov ecx, eax
call fcn.004261ea
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x82c]
call dword [0x4ea4f8]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop esi
mov al, bl
xor ecx, ebp
pop ebx
call fcn.004d0557
leave
ret 4
Function at 0x426899
Capabilities:
Check if file exists

Disassembly:
mov eax, 0x4dcc31
call fcn.004d0500
sub esp, 0x824
mov eax, dword [0x52d320]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 8]
test eax, eax
push esi
mov esi, ecx
mov dword [ebp - 0x830], eax
je 0x4268d5
lea eax, [ebp - 0x830]
push eax
lea ecx, [esi + 0xc4]
call fcn.004252a5
push edi
lea ecx, [ebp - 0x82c]
call dword [0x4ea6b0]
mov eax, dword [esi + 0x18]
and dword [ebp - 4], 0
lea ecx, [ebp - 0x82c]
push ecx
push eax
lea ecx, [esi + 4]
call dword [0x4ea4e0]
push eax
call fcn.0044f5c2
add esp, 0xc
push str._demo.png
lea ecx, [ebp - 0x82c]
call dword [0x4ea734]
and word [ebp - 0x810], 0
xor eax, eax
mov ecx, 0x1ff
lea edi, [ebp - 0x80e]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x82c]
stosw word es:[edi], ax
call dword [0x4ea6a4]
push eax
lea ecx, [esi + 0x90]
call dword [0x4ea6a4]
push eax
lea eax, [ebp - 0x810]
push eax
call dword [0x4eaad8]
lea eax, [ebp - 0x810]
push eax
call dword [0x4eaadc]
test eax, eax
push 2
pop ecx
pop edi
jne 0x426979
lea eax, [esi + 0xc0]
cmp dword [eax], ecx
je 0x426979
mov dword [eax], 1
mov eax, dword [esi + 0xc0]
cmp eax, 3
jne 0x426996
mov eax, dword [esi]
push ecx
lea ecx, [ebp - 0x810]
push ecx
push 1
mov ecx, esi
call dword [eax]
jmp 0x4269c0
cmp eax, 1
jne 0x4269c0
push ecx
push esi
lea eax, [ebp - 0x810]
mov dword [esi + 0xc0], ecx
push eax
lea ecx, [esi + 0x74]
call dword [0x4ea6a4]
push eax
call fcn.00423d44
mov ecx, eax
call fcn.004261ea
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x82c]
call dword [0x4ea4f8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
mov al, 1
pop esi
call fcn.004d0557
leave
ret 4
Function at 0x4269eb
Capabilities:
Check if file exists

Disassembly:
mov eax, 0x4dcc53
call fcn.004d0500
sub esp, 0x34
push dword [ebp + 8]
mov dword [ebp - 0x10], ecx
call dword [0x4eaadc]
test eax, eax
jne 0x426a0f
xor al, al
jmp 0x426b0a
push ebx
lea ecx, [ebp - 0x40]
call fcn.0040ef83
xor ebx, ebx
push ebx
push ebx
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], ebx
call fcn.0040f4aa
push dword [ebp + 8]
lea ecx, [ebp - 0x40]
call fcn.0040f500
test al, al
lea ecx, [ebp - 0x3c]
jne 0x426a45
call fcn.0040dea8
xor bl, bl
jmp 0x426afb
push edi
call fcn.0040dea8
lea ecx, [ebp - 0x40]
call fcn.00446d5c
mov edi, eax
mov dword [ebp - 0x14], edi
cmp edi, ebx
mov byte [ebp - 4], 1
jne 0x426a67
xor bl, bl
jmp 0x426afa
lea ecx, [edi + 0x30]
call dword [0x4ea4e0]
cmp eax, ebx
je 0x426aed
push str.net_test_list
push eax
call fcn.004d06fe
test eax, eax
pop ecx
pop ecx
jne 0x426aed
lea ecx, [edi + 0x80]
call fcn.0045fdf8
cmp eax, ebx
mov dword [ebp + 8], eax
jbe 0x426ae2
push esi
push ebx
mov ecx, edi
call fcn.0040e6ef
mov esi, eax
mov dword [ebp - 0x18], esi
lea ecx, [esi + 0x30]
mov byte [ebp - 4], 2
call dword [0x4ea4e0]
push str.netrankpush
push eax
call fcn.004d06fe
test eax, eax
pop ecx
pop ecx
jne 0x426acc
mov ecx, dword [ebp - 0x10]
push esi
call fcn.00425dc3
test esi, esi
mov byte [ebp - 4], 1
je 0x426adb
mov ecx, esi
call fcn.0040d957
inc ebx
cmp ebx, dword [ebp + 8]
jb 0x426a98
pop esi
mov eax, dword [ebp - 0x10]
mov byte [eax + 0x44], 1
mov bl, 1
jmp 0x426aef
xor bl, bl
mov ecx, edi
mov byte [ebp - 4], 0
call fcn.0040d957
pop edi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.0040ea10
mov al, bl
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4
Function at 0x426c81
Capabilities:
Check if file exists

Disassembly:
mov eax, 0x4dcc75
call fcn.004d0500
sub esp, 0x38
push dword [ebp + 8]
mov dword [ebp - 0x10], ecx
call dword [0x4eaadc]
test eax, eax
jne 0x426ca5
xor al, al
jmp 0x426e19
push esi
lea ecx, [ebp - 0x44]
call fcn.0040ef83
xor esi, esi
push esi
push esi
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], esi
call fcn.0040f4aa
push dword [ebp + 8]
lea ecx, [ebp - 0x44]
call fcn.0040f500
test al, al
lea ecx, [ebp - 0x40]
jne 0x426cdd
call fcn.0040dea8
mov byte [ebp + 0xb], 0
jmp 0x426e09
push ebx
call fcn.0040dea8
lea ecx, [ebp - 0x44]
call fcn.00446d5c
mov ebx, eax
mov dword [ebp - 0x18], ebx
cmp ebx, esi
mov byte [ebp - 4], 1
jne 0x426d01
mov byte [ebp + 0xb], 0
jmp 0x426e08
lea ecx, [ebx + 0x30]
call dword [0x4ea4e0]
cmp eax, esi
je 0x426df9
push str.wizard
push eax
call fcn.004d06fe
test eax, eax
pop ecx
pop ecx
jne 0x426df9
lea ecx, [ebx + 0x80]
call fcn.0045fdf8
cmp eax, esi
mov dword [ebp - 0x14], eax
mov dword [ebp + 8], esi
jbe 0x426dec
push edi
push dword [ebp + 8]
mov ecx, ebx
call fcn.0040e6ef
mov esi, eax
mov dword [ebp - 0x1c], esi
lea ecx, [esi + 0x30]
mov byte [ebp - 4], 2
call dword [0x4ea4e0]
mov edi, eax
push str.app_list
push edi
call fcn.004d06fe
test eax, eax
pop ecx
pop ecx
jne 0x426d7b
mov ecx, dword [ebp - 0x10]
push esi
call fcn.00425873
jmp 0x426dcd
push str.skin_list
push edi
call fcn.004d06fe
test eax, eax
pop ecx
pop ecx
jne 0x426d97
mov ecx, dword [ebp - 0x10]
push esi
call fcn.004259ec
jmp 0x426dcd
push str.site_list
push edi
call fcn.004d06fe
test eax, eax
pop ecx
pop ecx
jne 0x426db3
mov ecx, dword [ebp - 0x10]
push esi
call fcn.00425b22
jmp 0x426dcd
push str.net_test_url
push edi
call fcn.004d06fe
test eax, eax
pop ecx
pop ecx
jne 0x426dcd
mov ecx, dword [ebp - 0x10]
push esi
call fcn.00425c58
test esi, esi
mov byte [ebp - 4], 1
je 0x426ddc
mov ecx, esi
call fcn.0040d957
inc dword [ebp + 8]
mov eax, dword [ebp + 8]
cmp eax, dword [ebp - 0x14]
jb 0x426d41
pop edi
mov eax, dword [ebp - 0x10]
mov byte [eax + 0x44], 1
mov byte [ebp + 0xb], 1
jmp 0x426dfd
mov byte [ebp + 0xb], 0
mov ecx, ebx
mov byte [ebp - 4], 0
call fcn.0040d957
pop ebx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44]
call fcn.0040ea10
mov al, byte [ebp + 0xb]
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4

Function at 0x428c85
Capabilities:
Compare security identifiers

Disassembly:
push ebx
push esi
push edi
mov edi, ecx
mov eax, dword [edi + 4]
test eax, eax
je 0x428cc5
mov esi, dword [esp + 0x10]
cmp dword [esi + 4], 0
je 0x428cc5
mov ebx, dword [0x4ea028]
push eax
call ebx
test eax, eax
je 0x428cc5
push dword [esi + 4]
call ebx
test eax, eax
je 0x428cc5
push dword [esi + 4]
push dword [edi + 4]
call dword [0x4ea040]
neg eax
sbb eax, eax
neg eax
jmp 0x428cc7
xor al, al
pop edi
pop esi
pop ebx
ret 4
Function at 0x42d0ab
Capabilities:
Open clipboard
Read clipboard data

Disassembly:
mov eax, 0x4dd5bc
call fcn.004d0500
sub esp, 0xf0
mov eax, dword [0x52d320]
push ebx
xor eax, ebp
push esi
xor ebx, ebx
cmp dword [ebp + 8], ebx
mov esi, ecx
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x5c], esi
jne 0x42d0f2
push 0xd
call dword [0x4eab88]
test eax, eax
je 0x42d285
mov ecx, esi
call fcn.0042cf17
test al, al
jne 0x42d285
push dword [esi + 4]
call dword [0x4eaba0]
test eax, eax
je 0x42d285
push edi
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x4c], ebx
push 0xd
mov dword [ebp - 4], ebx
call dword [0x4eab8c]
mov edi, eax
cmp edi, ebx
je 0x42d251
xor ebx, ebx
inc ebx
test byte [0x5318b0], bl
mov esi, 0x531894
jne 0x42d152
or dword [0x5318b0], ebx
mov ecx, esi
mov byte [ebp - 4], bl
call dword [0x4ea6b0]
push 0x4e9850
call fcn.004d060c
pop ecx
mov byte [ebp - 4], 0
push edi
call dword [0x4ea224]
push eax
lea ecx, [ebp - 0x48]
call dword [0x4ea6a8]
push edi
mov byte [ebp - 4], 2
call dword [0x4ea228]
cmp dword [ebp + 8], 0
jne 0x42d18d
lea eax, [ebp - 0x48]
push eax
push 0x531894
call dword [0x4ea3f4]
test al, al
pop ecx
pop ecx
je 0x42d23f
lea eax, [ebp - 0x48]
push eax
mov ecx, esi
call dword [0x4ea4e8]
push ebx
push ebx
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0xfc]
call dword [0x4ea3f8]
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call dword [0x4ea6b0]
mov byte [ebp - 4], 4
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0xfc]
push eax
call fcn.0041806d
test eax, eax
pop ecx
pop ecx
jne 0x42d1d6
xor ecx, ecx
jmp 0x42d1dd
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
add ecx, eax
call dword [0x4ea3fc]
test eax, eax
je 0x42d222
push 0xd
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.0042cea6
add esp, 0xc
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call dword [0x4ea4e8]
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 4
call dword [0x4ea4f8]
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x58]
call fcn.00402b27
jmp 0x42d1bc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call dword [0x4ea4f8]
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 2
call dword [0x4ea400]
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0
call dword [0x4ea4f8]
mov esi, dword [ebp - 0x5c]
xor ebx, ebx
call dword [0x4eab90]
cmp dword [esi + 0x28], ebx
pop edi
lea ecx, [ebp - 0x58]
je 0x42d27c
call fcn.00401220
test eax, eax
je 0x42d279
cmp dword [esi + 0x2c], ebx
je 0x42d279
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx]
lea edx, [ebp - 0x58]
push edx
call dword [eax]
lea ecx, [ebp - 0x58]
or dword [ebp - 4], 0xffffffff
call fcn.0040287c
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop esi
xor ecx, ebp
xor eax, eax
pop ebx
call fcn.004d0557
leave
ret 4