joyce8/EMBER2024-capa huggingface dataset:
Function at 0x41ca90
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
mov edi, dword [ebp + 0xc]
mov eax, dword [edi]
cmp eax, dword [edi + 4]
je 0x41cb24
push 0x46e280
push dword [ebp + 8]
lea eax, [ebp + 0xc]
push eax
call fcn.0043649b
add esp, 0xc
test eax, eax
je 0x41cad5
push 0
push str.ERROR_
push str.Could_not_open_save_file_
push dword [0x48f0a0]
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop ebp
ret
push esi
mov esi, dword [edi]
cmp esi, dword [edi + 4]
je 0x41cb00
nop dword [eax]
push 0x29
push esi
call fcn.004234c0
push dword [ebp + 0xc]
push 0x29
push 1
push esi
call fcn.00436e0a
add esi, 0x29
add esp, 0x18
cmp esi, dword [edi + 4]
jne 0x41cae0
push dword [ebp + 0xc]
call fcn.004365a5
add esp, 4
push 0
push str.NOTICE_
push str.File_saved_successfully_
push dword [0x48f0a0]
call dword [sym.imp.USER32.dll_MessageBoxA]
pop esi
pop edi
pop ebp
ret

Function at 0x41cdf0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x20208
call fcn.00424410
mov eax, dword [0x485310]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push eax
push 1
lea eax, [ebp - 0x20208]
push 0x20000
push eax
call fcn.004369f9
lea eax, [ebp - 0x20208]
push 0x20000
push eax
call fcn.004234c0
lea eax, [ebp - 0x208]
mov byte [ebp - 8], 0
push eax
call fcn.00404e40
add esp, 0x1c
test eax, eax
jne 0x41ce6b
push eax
push str.ERROR_
push str.Failed_to_save_the_file_
push dword [0x48f0a0]
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00424075
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x20208]
push eax
lea eax, [ebp - 0x208]
push eax
call fcn.0041d380
mov ecx, dword [ebp - 4]
add esp, 8
xor ecx, ebp
call fcn.00424075
mov esp, ebp
pop ebp
ret

Function at 0x41d450
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ecx
cmp dword [ebp + 0xc], 0
je 0x41d4c3
push 0x46e280
push dword [ebp + 8]
lea eax, [ebp - 4]
push eax
call fcn.0043649b
add esp, 0xc
test eax, eax
je 0x41d48e
push 0
push str.ERROR_
push str.Could_not_open_save_file_
push dword [0x48f0a0]
call dword [sym.imp.USER32.dll_MessageBoxA]
mov esp, ebp
pop ebp
ret
push dword [ebp - 4]
push 0x20000
push 1
push dword [ebp + 0xc]
call fcn.00436e0a
push dword [ebp - 4]
call fcn.004365a5
add esp, 0x14
push 0
push str.NOTICE_
push str.File_saved_successfully_
push dword [0x48f0a0]
call dword [sym.imp.USER32.dll_MessageBoxA]
mov esp, ebp
pop ebp
ret
Function at 0x41d4d0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20c
mov eax, dword [0x485310]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
push 0x3300
call fcn.00423c85
push 0x3300
mov esi, eax
push 0
push esi
mov dword [ebp - 0x20c], esi
call fcn.00425630
add esp, 0x10
mov edi, 0x80
push ebx
push 0x66
push 1
push esi
call fcn.004369f9
push 0x66
push esi
call fcn.004234c0
add esp, 0x18
add esi, 0x66
sub edi, 1
jne 0x41d510
lea eax, [ebp - 0x208]
mov byte [ebp - 8], 0
push eax
call fcn.00404e40
add esp, 4
test eax, eax
jne 0x41d56d
push eax
push str.ERROR_
push str.Failed_to_save_the_file_
push dword [0x48f0a0]
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00424075
mov esp, ebp
pop ebp
ret
mov esi, dword [ebp - 0x20c]
lea eax, [ebp - 0x208]
push esi
push eax
call fcn.0041da60
push esi
call fcn.00424407
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.00424075
mov esp, ebp
pop ebp
ret

Function at 0x41dc00
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
mov ebx, dword [ebp + 0xc]
test ebx, ebx
je 0x41dcba
push 0x46e280
push dword [ebp + 8]
lea eax, [ebp + 0xc]
push eax
call fcn.0043649b
add esp, 0xc
test eax, eax
je 0x41dc45
push 0
push str.ERROR_
push str.Could_not_open_save_file_
push dword [0x48f0a0]
call dword [sym.imp.USER32.dll_MessageBoxA]
pop ebx
mov esp, ebp
pop ebp
ret
push esi
push edi
mov esi, ebx
mov edi, 0x80
nop
push 0x66
push esi
call fcn.004234c0
add esp, 8
add esi, 0x66
sub edi, 1
jne 0x41dc50
push 0xe2f1
push 0x3300
push ebx
call fcn.00422bb0
push dword [ebp + 0xc]
mov dword [ebp - 4], eax
push 1
push 0x3300
push ebx
call fcn.00436e0a
push dword [ebp + 0xc]
lea eax, [ebp - 4]
push 1
push 4
push eax
call fcn.00436e0a
push dword [ebp + 0xc]
call fcn.004365a5
add esp, 0x30
push edi
push str.NOTICE_
push str.File_saved_successfully_
push dword [0x48f0a0]
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x41dcc0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20c
mov eax, dword [0x485310]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
push 0x41000
call fcn.00423c85
push 0x41000
mov esi, eax
push 0
push esi
mov dword [ebp - 0x20c], esi
call fcn.00425630
add esp, 0x10
mov edi, 0x400
push ebx
push 0x104
push 1
push esi
call fcn.004369f9
push 0x104
push esi
call fcn.004234c0
add esp, 0x18
add esi, 0x104
sub edi, 1
jne 0x41dd00
lea eax, [ebp - 0x208]
mov byte [ebp - 8], 0
push eax
call fcn.00404e40
add esp, 4
test eax, eax
jne 0x41dd66
push eax
push str.ERROR_
push str.Failed_to_save_the_file_
push dword [0x48f0a0]
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00424075
mov esp, ebp
pop ebp
ret
mov esi, dword [ebp - 0x20c]
lea eax, [ebp - 0x208]
push esi
push eax
call fcn.0041e230
push esi
call fcn.00424407
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.00424075
mov esp, ebp
pop ebp
ret

Function at 0x41e2f0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
mov esi, dword [ebp + 0xc]
test esi, esi
je 0x41e38b
push 0x46e280
push dword [ebp + 8]
lea eax, [ebp + 0xc]
push eax
call fcn.0043649b
add esp, 0xc
test eax, eax
je 0x41e335
push 0
push str.ERROR_
push str.Could_not_open_save_file_
push dword [0x48f0a0]
call dword [sym.imp.USER32.dll_MessageBoxA]
pop esi
mov esp, ebp
pop ebp
ret
push 0xe2f1
push 0x41000
push esi
call fcn.00422bb0
push dword [ebp + 0xc]
mov dword [ebp - 4], eax
push 1
push 0x41000
push esi
call fcn.00436e0a
push dword [ebp + 0xc]
lea eax, [ebp - 4]
push 1
push 4
push eax
call fcn.00436e0a
push dword [ebp + 0xc]
call fcn.004365a5
add esp, 0x30
push 0
push str.NOTICE_
push str.File_saved_successfully_
push dword [0x48f0a0]
call dword [sym.imp.USER32.dll_MessageBoxA]
pop esi
mov esp, ebp
pop ebp
ret

Function at 0x41e390
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20c
mov eax, dword [0x485310]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
push 0xf8000
call fcn.00423c85
push 0xf8000
mov esi, eax
push 0
push esi
mov dword [ebp - 0x20c], esi
call fcn.00425630
add esp, 0x10
mov edi, 0x2000
push ebx
push 0x7c
push 1
push esi
call fcn.004369f9
push 0x7c
push esi
call fcn.004234c0
add esp, 0x18
add esi, 0x7c
sub edi, 1
jne 0x41e3d0
lea eax, [ebp - 0x208]
mov byte [ebp - 8], 0
push eax
call fcn.00404e40
add esp, 4
test eax, eax
jne 0x41e42d
push eax
push str.ERROR_
push str.Failed_to_save_the_file_
push dword [0x48f0a0]
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00424075
mov esp, ebp
pop ebp
ret
mov esi, dword [ebp - 0x20c]
lea eax, [ebp - 0x208]
push esi
push eax
call fcn.0041e950
push esi
call fcn.00424407
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.00424075
mov esp, ebp
pop ebp
ret
Function at 0x41eb20
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
mov esi, dword [ebp + 0xc]
test esi, esi
je 0x41ebbb
push 0x46e280
push dword [ebp + 8]
lea eax, [ebp + 0xc]
push eax
call fcn.0043649b
add esp, 0xc
test eax, eax
je 0x41eb65
push 0
push str.ERROR_
push str.Could_not_open_save_file_
push dword [0x48f0a0]
call dword [sym.imp.USER32.dll_MessageBoxA]
pop esi
mov esp, ebp
pop ebp
ret
push 0xe2f1
push 0xf8000
push esi
call fcn.00422bb0
push dword [ebp + 0xc]
mov dword [ebp - 4], eax
push 1
push 0xf8000
push esi
call fcn.00436e0a
push dword [ebp + 0xc]
lea eax, [ebp - 4]
push 1
push 4
push eax
call fcn.00436e0a
push dword [ebp + 0xc]
call fcn.004365a5
add esp, 0x30
push 0
push str.NOTICE_
push str.File_saved_successfully_
push dword [0x48f0a0]
call dword [sym.imp.USER32.dll_MessageBoxA]
pop esi
mov esp, ebp
pop ebp
ret

Function at 0x41ebc0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20c
mov eax, dword [0x485310]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x20c]
push esi
push 1
push 4
push eax
mov dword [ebp - 0x20c], 0
call fcn.004369f9
mov eax, dword [ebp - 0x20c]
add esp, 0x10
test eax, eax
js 0x41ecb4
xor ecx, ecx
mov edx, 0x174
mul edx
push ebx
push edi
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00423c85
imul ecx, dword [ebp - 0x20c], 0x174
mov ebx, eax
push esi
push 1
push ecx
push ebx
call fcn.004369f9
xor edi, edi
add esp, 0x14
cmp dword [ebp - 0x20c], edi
jle 0x41ec5d
mov esi, ebx
push 0x174
push esi
call fcn.004234c0
inc edi
add esp, 8
add esi, 0x174
cmp edi, dword [ebp - 0x20c]
jl 0x41ec40
lea eax, [ebp - 0x208]
mov byte [ebp - 8], 0
push eax
call fcn.00404e40
add esp, 4
test eax, eax
jne 0x41ec9c
push eax
push str.ERROR_
push str.Failed_to_save_the_file_
push dword [0x48f0a0]
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop ebx
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00424075
mov esp, ebp
pop ebp
ret
push dword [ebp - 0x20c]
lea eax, [ebp - 0x208]
push ebx
push eax
call fcn.0041ecd0
add esp, 0xc
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.00424075
mov esp, ebp
pop ebp
ret
Function at 0x41f990
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x310
mov eax, dword [0x485310]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x48e058]
push ebx
mov ebx, dword [ebp + 8]
push 0x104
mov dword [0x48e05c], eax
lea eax, [ebp - 0x30c]
push 0
push eax
mov dword [ebp - 0x310], ebx
call fcn.00425630
push ebx
push 1
lea eax, [ebp - 0x30c]
push 0x104
push eax
call fcn.004369f9
add esp, 0x1c
test eax, eax
je 0x41fad8
push esi
push edi
nop dword [eax + eax]
lea eax, [ebp - 0x30c]
push 0x104
push eax
call fcn.004234c0
mov edi, dword [0x48e05c]
lea eax, [ebp - 0x30c]
add esp, 8
cmp eax, edi
jae 0x41fa7a
mov ebx, dword [0x48e058]
cmp ebx, eax
ja 0x41fa74
mov ecx, eax
mov eax, 0x7e07e07f
sub ecx, ebx
imul ecx
sar edx, 7
mov esi, edx
shr esi, 0x1f
add esi, edx
cmp edi, dword [0x48e060]
jne 0x41fa53
push 1
mov ecx, 0x48e058
call fcn.00420250
mov edi, dword [0x48e05c]
mov ebx, dword [0x48e058]
test edi, edi
je 0x41fa6c
imul esi, esi, 0x104
mov ecx, 0x41
add esi, ebx
rep movsd dword es:[edi], dword [esi]
mov edi, dword [0x48e05c]
mov ebx, dword [ebp - 0x310]
jmp 0x41faab
mov ebx, dword [ebp - 0x310]
cmp edi, dword [0x48e060]
jne 0x41fa94
push 1
mov ecx, 0x48e058
call fcn.00420250
mov edi, dword [0x48e05c]
test edi, edi
je 0x41faab
mov ecx, 0x41
lea esi, [ebp - 0x30c]
rep movsd dword es:[edi], dword [esi]
mov edi, dword [0x48e05c]
push ebx
push 1
lea eax, [ebp - 0x30c]
add edi, 0x104
push 0x104
push eax
mov dword [0x48e05c], edi
call fcn.004369f9
add esp, 0x10
test eax, eax
jne 0x41f9f0
pop edi
pop esi
lea eax, [ebp - 0x208]
mov byte [ebp - 8], 0
push eax
call fcn.00404e40
add esp, 4
pop ebx
test eax, eax
jne 0x41fb15
push eax
push str.ERROR_
push str.Failed_to_save_the_file_
push dword [0x48f0a0]
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00424075
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x208]
push 0x48e058
push eax
call fcn.00420060
mov ecx, dword [ebp - 4]
add esp, 8
xor ecx, ebp
call fcn.00424075
mov esp, ebp
pop ebp
ret

Function at 0x420110
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
mov edi, dword [ebp + 0xc]
mov eax, dword [edi]
cmp eax, dword [edi + 4]
je 0x4201a2
push 0x46e280
push dword [ebp + 8]
lea eax, [ebp + 0xc]
push eax
call fcn.0043649b
add esp, 0xc
test eax, eax
je 0x420155
push 0
push str.ERROR_
push str.Could_not_open_save_file_
push dword [0x48f0a0]
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop ebp
ret
push esi
mov esi, dword [edi]
cmp esi, dword [edi + 4]
je 0x42017e
nop dword [eax]
push dword [ebp + 0xc]
push 0x104
push 1
push esi
call fcn.00436e0a
add esi, 0x104
add esp, 0x10
cmp esi, dword [edi + 4]
jne 0x420160
push dword [ebp + 0xc]
call fcn.004365a5
add esp, 4
push 0
push str.NOTICE_
push str.File_saved_successfully_
push dword [0x48f0a0]
call dword [sym.imp.USER32.dll_MessageBoxA]
pop esi
pop edi
pop ebp
ret
Function at 0x420930
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x46db1b
mov eax, dword fs:[0]
push eax
sub esp, 0x32c
mov eax, dword [0x485310]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
xor esi, esi
xor edi, edi
mov dword [ebp - 0x334], eax
mov dword [ebp - 0x32c], 0
mov dword [ebp - 0x324], edi
mov dword [ebp - 0x328], esi
mov dword [ebp - 0x31c], esi
push eax
push 4
lea eax, [ebp - 0x32c]
mov dword [ebp - 4], esi
push 1
xor ebx, ebx
push eax
mov dword [ebp - 0x320], ebx
call fcn.004369f9
add esp, 0x10
mov dword [ebp - 0x330], ebx
cmp dword [ebp - 0x32c], ebx
jle 0x420acf
nop dword [eax + eax]
push 0x102
lea eax, [ebp - 0x318]
push 0
push eax
call fcn.00425630
push dword [ebp - 0x334]
lea eax, [ebp - 0x318]
push 0x102
push 1
push eax
call fcn.004369f9
lea eax, [ebp - 0x318]
push 0x102
push eax
call fcn.004234c0
lea eax, [ebp - 0x318]
add esp, 0x24
cmp eax, ebx
jae 0x420a66
cmp edi, eax
ja 0x420a66
mov ecx, eax
mov eax, 0xfe03f81
sub ecx, edi
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x338], eax
cmp ebx, esi
jne 0x420a58
push 1
lea ecx, [ebp - 0x324]
call fcn.00421390
mov eax, dword [ebp - 0x31c]
mov ebx, dword [ebp - 0x320]
mov edi, dword [ebp - 0x324]
mov dword [ebp - 0x328], eax
mov eax, dword [ebp - 0x338]
test ebx, ebx
je 0x420a9e
imul esi, eax, 0x102
add esi, edi
jmp 0x420a93
cmp ebx, esi
jne 0x420a89
push 1
lea ecx, [ebp - 0x324]
call fcn.00421390
mov eax, dword [ebp - 0x31c]
mov ebx, dword [ebp - 0x320]
mov dword [ebp - 0x328], eax
test ebx, ebx
je 0x420a9e
lea esi, [ebp - 0x318]
mov ecx, 0x40
mov edi, ebx
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, dword [ebp - 0x330]
add ebx, 0x102
mov edi, dword [ebp - 0x324]
inc eax
mov esi, dword [ebp - 0x328]
mov dword [ebp - 0x320], ebx
mov dword [ebp - 0x330], eax
cmp eax, dword [ebp - 0x32c]
jl 0x4209c0
lea eax, [ebp - 0x214]
mov byte [ebp - 0x14], 0
push eax
call fcn.00404e40
add esp, 4
test eax, eax
jne 0x420b18
push eax
push str.ERROR_
push str.Failed_to_save_the_file_
push dword [0x48f0a0]
call dword [sym.imp.USER32.dll_MessageBoxA]
test edi, edi
je 0x420b5e
sub esi, edi
mov eax, 0xfe03f81
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
push edi
jmp 0x420b53
lea eax, [ebp - 0x324]
push eax
lea eax, [ebp - 0x214]
push eax
call fcn.00421110
mov esi, dword [ebp - 0x324]
add esp, 8
test esi, esi
je 0x420b5e
mov ecx, dword [ebp - 0x31c]
mov eax, 0xfe03f81
sub ecx, esi
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
push esi
lea ecx, [ebp - 0x324]
call fcn.004214a0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00424075
mov esp, ebp
pop ebp
ret
Function at 0x4211c0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebx]
cmp eax, dword [ebx + 4]
je 0x4212fc
push 0x46e280
push dword [ebp + 8]
lea eax, [ebp - 4]
push eax
call fcn.0043649b
add esp, 0xc
test eax, eax
je 0x42120a
push 0
push str.ERROR_
push str.Could_not_open_save_file_
push dword [0x48f0a0]
call dword [sym.imp.USER32.dll_MessageBoxA]
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebx + 4]
mov eax, 0xfe03f81
sub ecx, dword [ebx]
imul ecx
xor ecx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, 0x102
mov dword [ebp - 8], eax
mul edx
push esi
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00423c85
mov esi, eax
add esp, 4
mov eax, dword [ebx]
mov dword [ebp - 0x10], esi
mov dword [ebp - 0xc], eax
cmp eax, dword [ebx + 4]
je 0x421288
mov ebx, esi
push edi
nop
mov esi, eax
mov ecx, 0x40
mov edi, ebx
rep movsd dword es:[edi], dword [esi]
push 0x102
push ebx
movsw word es:[edi], word [esi]
call fcn.004234c0
mov eax, dword [ebp - 0xc]
add esp, 8
mov ecx, dword [ebp + 0xc]
add eax, 0x102
add ebx, 0x102
mov dword [ebp - 0xc], eax
cmp eax, dword [ecx + 4]
jne 0x421250
mov esi, dword [ebp - 0x10]
pop edi
imul eax, dword [ebp - 8], 0x102
push 0xa4c6
push eax
push esi
call fcn.00422bb0
push dword [ebp - 4]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 8]
push 4
push 1
push eax
call fcn.00436e0a
push dword [ebp - 4]
push 0x102
push dword [ebp - 8]
push esi
call fcn.00436e0a
push dword [ebp - 4]
lea eax, [ebp - 0x14]
push 4
push 1
push eax
call fcn.00436e0a
push esi
call fcn.00424407
add esp, 0x40
push dword [ebp - 4]
call fcn.004365a5
add esp, 4
push 0
push str.NOTICE_
push str.File_saved_successfully_
push dword [0x48f0a0]
call dword [sym.imp.USER32.dll_MessageBoxA]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x421500
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20c
mov eax, dword [0x485310]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
push 0x11000
call fcn.00423c85
add esp, 4
mov dword [ebp - 0x20c], eax
mov esi, eax
mov edi, 0x200
push ebx
push 0x88
push 1
push esi
call fcn.004369f9
push 0x88
push esi
call fcn.004234c0
add esp, 0x18
add esi, 0x88
sub edi, 1
jne 0x421533
lea eax, [ebp - 0x208]
mov byte [ebp - 8], 0
push eax
call fcn.00404e40
add esp, 4
test eax, eax
jne 0x421599
push eax
push str.ERROR_
push str.Failed_to_save_the_file_
push dword [0x48f0a0]
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00424075
mov esp, ebp
pop ebp
ret
mov esi, dword [ebp - 0x20c]
lea eax, [ebp - 0x208]
push esi
push eax
call fcn.00421a60
push esi
call fcn.00424407
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.00424075
mov esp, ebp
pop ebp
ret
Function at 0x421b20
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
mov ebx, dword [ebp + 0xc]
test ebx, ebx
je 0x421be0
push 0x46e280
push dword [ebp + 8]
lea eax, [ebp + 0xc]
push eax
call fcn.0043649b
add esp, 0xc
test eax, eax
je 0x421b65
push 0
push str.ERROR_
push str.Could_not_open_save_file_
push dword [0x48f0a0]
call dword [sym.imp.USER32.dll_MessageBoxA]
pop ebx
mov esp, ebp
pop ebp
ret
push esi
push edi
mov esi, ebx
mov edi, 0x200
nop
push 0x88
push esi
call fcn.004234c0
add esp, 8
add esi, 0x88
sub edi, 1
jne 0x421b70
push 0xc4f7
push 0x11000
push ebx
call fcn.00422bb0
push dword [ebp + 0xc]
mov dword [ebp - 4], eax
push 0x11000
push 1
push ebx
call fcn.00436e0a
push dword [ebp + 0xc]
lea eax, [ebp - 4]
push 4
push 1
push eax
call fcn.00436e0a
push dword [ebp + 0xc]
call fcn.004365a5
add esp, 0x30
push edi
push str.NOTICE_
push str.File_saved_successfully_
push dword [0x48f0a0]
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x421c40
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x46db9b
mov eax, dword fs:[0]
push eax
sub esp, 0x224
mov eax, dword [0x485310]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
xor ebx, ebx
xor esi, esi
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x21c], esi
push eax
push 1
lea eax, [ebp - 0x218]
mov dword [ebp - 4], esi
push 4
push eax
mov dword [ebp - 0x220], esi
mov dword [ebp - 0x218], esi
call fcn.004369f9
mov eax, dword [ebp - 0x218]
add esp, 0x10
test eax, eax
jne 0x421cd0
push eax
push str.ERROR_
push str.ItemData_count___0_
push dword [0x48f0a0]
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x421e0f
xor ecx, ecx
mov edx, 0x74
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00423c85
imul ecx, dword [ebp - 0x218], 0x74
mov edi, eax
mov dword [ebp - 0x22c], edi
push ecx
push 0
push edi
call fcn.00425630
push dword [ebp - 0x228]
imul ecx, dword [ebp - 0x218], 0x74
push 1
push ecx
push edi
call fcn.004369f9
push dword [ebp - 0x228]
lea eax, [ebp - 0x230]
push 1
push 4
push eax
call fcn.004369f9
xor edi, edi
add esp, 0x30
cmp dword [ebp - 0x218], edi
jle 0x421d6f
mov esi, dword [ebp - 0x22c]
nop dword [eax]
push 0x74
push esi
call fcn.004234c0
add esp, 8
lea ecx, [ebp - 0x224]
push esi
call fcn.00422920
inc edi
add esi, 0x74
cmp edi, dword [ebp - 0x218]
jl 0x421d40
mov esi, dword [ebp - 0x21c]
mov ebx, dword [ebp - 0x224]
push 0x74
push dword [ebp - 0x22c]
call fcn.00423c77
lea eax, [ebp - 0x214]
mov byte [ebp - 0x14], 0
push eax
call fcn.00404e40
add esp, 0xc
test eax, eax
jne 0x421dc7
push eax
push str.ERROR_
push str.Failed_to_save_the_file_
push dword [0x48f0a0]
call dword [sym.imp.USER32.dll_MessageBoxA]
test ebx, ebx
je 0x421e0f
sub esi, ebx
mov eax, 0x8d3dcb09
imul esi
add edx, esi
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
push ebx
jmp 0x421e04
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x214]
push eax
call fcn.004224e0
mov esi, dword [ebp - 0x224]
add esp, 8
test esi, esi
je 0x421e0f
mov ecx, dword [ebp - 0x21c]
mov eax, 0x8d3dcb09
sub ecx, esi
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
push esi
lea ecx, [ebp - 0x224]
call fcn.004228c0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00424075
mov esp, ebp
pop ebp
ret