joyce8/EMBER2024-capa huggingface dataset:
Function at 0x466320
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x499348
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push esi
mov eax, dword [0x4cc99c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push str.SoftwareHuofengHuofengGameWorld
lea ecx, [ebp - 0x10]
call fcn.004022c0
push 8
push str._setting
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], 0
call fcn.00402ab0
lea eax, [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x14]
push ecx
lea edx, [ebp - 0x1c]
push edx
push str.bossotherwKey
push eax
mov esi, 4
push SysReAllocString
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], esi
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
je 0x4663b9
mov edx, dword [ebp - 0x10]
push esi
lea ecx, [ebp - 0x14]
push ecx
push esi
push str.bossotherwKey
push edx
push SysReAllocString
mov dword [ebp - 0x14], 0x51
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov eax, dword [ebp - 0x10]
mov esi, dword [ebp - 0x14]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4663e2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
ret

Function at 0x466400
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x499348
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push esi
mov eax, dword [0x4cc99c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push str.SoftwareHuofengHuofengGameWorld
lea ecx, [ebp - 0x10]
call fcn.004022c0
push 8
push str._setting
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], 0
call fcn.00402ab0
lea eax, [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x14]
push ecx
lea edx, [ebp - 0x1c]
push edx
push str.bossotherlKey
push eax
mov esi, 4
push SysReAllocString
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], esi
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
je 0x466499
mov edx, dword [ebp - 0x10]
push esi
lea ecx, [ebp - 0x14]
push ecx
push esi
push str.bossotherlKey
push edx
push SysReAllocString
mov dword [ebp - 0x14], 0x100001
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov eax, dword [ebp - 0x10]
mov esi, dword [ebp - 0x14]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4664c2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x4664e0
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x499348
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push esi
mov eax, dword [0x4cc99c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push str.SoftwareHuofengHuofengGameWorld
lea ecx, [ebp - 0x10]
call fcn.004022c0
push 8
push str._setting
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], 0
call fcn.00402ab0
lea eax, [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x14]
push ecx
lea edx, [ebp - 0x1c]
push edx
push str.bosscontrollKey
push eax
mov esi, 4
push SysReAllocString
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], esi
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
je 0x466579
mov edx, dword [ebp - 0x10]
push esi
lea ecx, [ebp - 0x14]
push ecx
push esi
push str.bosscontrollKey
push edx
push SysReAllocString
mov dword [ebp - 0x14], 0x1d0001
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov eax, dword [ebp - 0x10]
mov esi, dword [ebp - 0x14]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4665a2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
ret

Function at 0x4665c0
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x499348
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push esi
mov eax, dword [0x4cc99c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push str.SoftwareHuofengHuofengGameWorld
lea ecx, [ebp - 0x10]
call fcn.004022c0
push 8
push str._setting
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], 0
call fcn.00402ab0
lea eax, [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x14]
push ecx
lea edx, [ebp - 0x1c]
push edx
push str.accelcontrolwKey
push eax
mov esi, 4
push SysReAllocString
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], esi
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
je 0x466659
mov edx, dword [ebp - 0x10]
push esi
lea ecx, [ebp - 0x14]
push ecx
push esi
push str.accelcontrolwKey
push edx
push SysReAllocString
mov dword [ebp - 0x14], 2
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov eax, dword [ebp - 0x10]
mov esi, dword [ebp - 0x14]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x466682
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x4666a0
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x499348
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push esi
mov eax, dword [0x4cc99c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push str.SoftwareHuofengHuofengGameWorld
lea ecx, [ebp - 0x10]
call fcn.004022c0
push 8
push str._setting
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], 0
call fcn.00402ab0
lea eax, [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x14]
push ecx
lea edx, [ebp - 0x1c]
push edx
push str.accelotherwKey
push eax
mov esi, 4
push SysReAllocString
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], esi
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
je 0x466739
mov edx, dword [ebp - 0x10]
push esi
lea ecx, [ebp - 0x14]
push ecx
push esi
push str.accelotherwKey
push edx
push SysReAllocString
mov dword [ebp - 0x14], 0x57
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov eax, dword [ebp - 0x10]
mov esi, dword [ebp - 0x14]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x466762
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
ret

Function at 0x466780
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x499348
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push esi
mov eax, dword [0x4cc99c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push str.SoftwareHuofengHuofengGameWorld
lea ecx, [ebp - 0x10]
call fcn.004022c0
push 8
push str._setting
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], 0
call fcn.00402ab0
lea eax, [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x14]
push ecx
lea edx, [ebp - 0x1c]
push edx
push str.accelotherlKey
push eax
mov esi, 4
push SysReAllocString
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], esi
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
je 0x466819
mov edx, dword [ebp - 0x10]
push esi
lea ecx, [ebp - 0x14]
push ecx
push esi
push str.accelotherlKey
push edx
push SysReAllocString
mov dword [ebp - 0x14], 0x110001
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov eax, dword [ebp - 0x10]
mov esi, dword [ebp - 0x14]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x466842
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x466860
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x499348
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push esi
mov eax, dword [0x4cc99c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push str.SoftwareHuofengHuofengGameWorld
lea ecx, [ebp - 0x10]
call fcn.004022c0
push 8
push str._setting
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], 0
call fcn.00402ab0
lea eax, [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x14]
push ecx
lea edx, [ebp - 0x1c]
push edx
push str.accelcontrollKey
push eax
mov esi, 4
push SysReAllocString
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], esi
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
je 0x4668f9
mov edx, dword [ebp - 0x10]
push esi
lea ecx, [ebp - 0x14]
push ecx
push esi
push str.accelcontrollKey
push edx
push SysReAllocString
mov dword [ebp - 0x14], 0x1d0001
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov eax, dword [ebp - 0x10]
mov esi, dword [ebp - 0x14]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x466922
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
ret

Function at 0x466940
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x499348
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push esi
mov eax, dword [0x4cc99c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push str.SoftwareHuofengHuofengGameWorld
lea ecx, [ebp - 0x10]
call fcn.004022c0
push 8
push str._setting
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], 0
call fcn.00402ab0
lea eax, [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x14]
push ecx
lea edx, [ebp - 0x1c]
push edx
push str.accelflag
push eax
mov esi, 4
push SysReAllocString
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], esi
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
je 0x4669d9
mov edx, dword [ebp - 0x10]
push esi
lea ecx, [ebp - 0x14]
push ecx
push esi
push str.accelflag
push edx
push SysReAllocString
mov dword [ebp - 0x14], 0
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov eax, dword [ebp - 0x10]
mov esi, dword [ebp - 0x14]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x466a02
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x466a20
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49937b
mov eax, dword fs:[0]
push eax
sub esp, 0x410
mov eax, dword [0x4cc99c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor edi, edi
push str.SoftwareHuofengHuofengGameWorld
lea ecx, [ebp - 0x414]
mov dword [ebp - 0x418], edi
call fcn.004022c0
push 8
push str._setting
lea ecx, [ebp - 0x414]
mov dword [ebp - 4], edi
call fcn.00402ab0
push 0x3fe
lea ecx, [ebp - 0x40e]
xor eax, eax
push edi
push ecx
mov dword [ebp - 0x418], 1
mov word [ebp - 0x410], ax
call sub.MSVCR100.dll_memset
add esp, 0xc
lea edx, [ebp - 0x41c]
push edx
mov edx, dword [ebp - 0x414]
lea eax, [ebp - 0x410]
push eax
lea ecx, [ebp - 0x418]
push ecx
push str.accelkey
push edx
push SysReAllocString
mov dword [ebp - 0x41c], 0x400
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], edi
cmp eax, edi
je 0x466af7
xor eax, eax
push 6
mov word [esi], ax
push str.CtrlW
jmp 0x466b1c
xor ecx, ecx
lea eax, [ebp - 0x410]
mov word [esi], cx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x466b05
sub eax, edx
sar eax, 1
push eax
lea edx, [ebp - 0x410]
push edx
mov ecx, esi
call fcn.004027c0
mov eax, dword [ebp - 0x414]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov dword [ebp - 4], edx
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x466b48
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00497792
mov esp, ebp
pop ebp
ret
Function at 0x466b70
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4993bb
mov eax, dword fs:[0]
push eax
sub esp, 0x410
mov eax, dword [0x4cc99c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
xor ebx, ebx
push str.SoftwareHuofengHuofengGameWorld
lea ecx, [ebp - 0x414]
mov dword [ebp - 0x418], ebx
call fcn.004022c0
push 7
push str._setup_
lea ecx, [ebp - 0x414]
mov dword [ebp - 4], ebx
call fcn.00402ab0
cmp edi, ebx
jne 0x466bd9
xor eax, eax
jmp 0x466bef
mov eax, edi
lea edx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x466be0
sub eax, edx
sar eax, 1
push eax
push edi
lea ecx, [ebp - 0x414]
call fcn.00402ab0
push 0x3fe
lea ecx, [ebp - 0x40e]
xor eax, eax
push ebx
push ecx
mov dword [ebp - 0x418], 1
mov word [ebp - 0x410], ax
call sub.MSVCR100.dll_memset
add esp, 0xc
lea edx, [ebp - 0x41c]
push edx
mov edx, dword [ebp - 0x414]
lea eax, [ebp - 0x410]
push eax
lea ecx, [ebp - 0x418]
push ecx
push 0x4b1b9c
push edx
push SysReAllocString
mov dword [ebp - 0x41c], 0x400
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], ebx
cmp eax, ebx
je 0x466c75
xor eax, eax
push ebx
mov word [esi], ax
push 0x4ab248
jmp 0x466c9a
xor ecx, ecx
lea eax, [ebp - 0x410]
mov word [esi], cx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x466c83
sub eax, edx
sar eax, 1
push eax
lea edx, [ebp - 0x410]
push edx
mov ecx, esi
call fcn.004027c0
mov eax, dword [ebp - 0x414]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov dword [ebp - 4], edx
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x466cc6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00497792
mov esp, ebp
pop ebp
ret
Function at 0x466cf0
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4993bb
mov eax, dword fs:[0]
push eax
sub esp, 0x410
mov eax, dword [0x4cc99c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
xor ebx, ebx
push str.SoftwareHuofengHuofengGameWorld
lea ecx, [ebp - 0x414]
mov dword [ebp - 0x418], ebx
call fcn.004022c0
push 7
push str._setup_
lea ecx, [ebp - 0x414]
mov dword [ebp - 4], ebx
call fcn.00402ab0
cmp edi, ebx
jne 0x466d59
xor eax, eax
jmp 0x466d6f
mov eax, edi
lea edx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x466d60
sub eax, edx
sar eax, 1
push eax
push edi
lea ecx, [ebp - 0x414]
call fcn.00402ab0
push 0x3fe
lea ecx, [ebp - 0x40e]
xor eax, eax
push ebx
push ecx
mov dword [ebp - 0x418], 1
mov word [ebp - 0x410], ax
call sub.MSVCR100.dll_memset
add esp, 0xc
lea edx, [ebp - 0x41c]
push edx
mov edx, dword [ebp - 0x414]
lea eax, [ebp - 0x410]
push eax
lea ecx, [ebp - 0x418]
push ecx
push str.ExePath
push edx
push SysReAllocString
mov dword [ebp - 0x41c], 0x400
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], ebx
cmp eax, ebx
je 0x466df5
xor eax, eax
push ebx
mov word [esi], ax
push 0x4ab248
jmp 0x466e1a
xor ecx, ecx
lea eax, [ebp - 0x410]
mov word [esi], cx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x466e03
sub eax, edx
sar eax, 1
push eax
lea edx, [ebp - 0x410]
push edx
mov ecx, esi
call fcn.004027c0
mov eax, dword [ebp - 0x414]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov dword [ebp - 4], edx
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x466e46
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00497792
mov esp, ebp
pop ebp
ret
Function at 0x466e70
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4993bb
mov eax, dword fs:[0]
push eax
sub esp, 0x410
mov eax, dword [0x4cc99c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
xor ebx, ebx
push str.SoftwareHuofengHuofengGameWorld
lea ecx, [ebp - 0x414]
mov dword [ebp - 0x418], ebx
call fcn.004022c0
push 7
push str._setup_
lea ecx, [ebp - 0x414]
mov dword [ebp - 4], ebx
call fcn.00402ab0
cmp edi, ebx
jne 0x466ed9
xor eax, eax
jmp 0x466eef
mov eax, edi
lea edx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x466ee0
sub eax, edx
sar eax, 1
push eax
push edi
lea ecx, [ebp - 0x414]
call fcn.00402ab0
push 0x3fe
lea ecx, [ebp - 0x40e]
xor eax, eax
push ebx
push ecx
mov dword [ebp - 0x418], 1
mov word [ebp - 0x410], ax
call sub.MSVCR100.dll_memset
add esp, 0xc
lea edx, [ebp - 0x41c]
push edx
mov edx, dword [ebp - 0x414]
lea eax, [ebp - 0x410]
push eax
lea ecx, [ebp - 0x418]
push ecx
push 0x4ab248
push edx
push SysReAllocString
mov dword [ebp - 0x41c], 0x400
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], ebx
cmp eax, ebx
je 0x466f75
xor eax, eax
push ebx
mov word [esi], ax
push 0x4ab248
jmp 0x466f9a
xor ecx, ecx
lea eax, [ebp - 0x410]
mov word [esi], cx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x466f83
sub eax, edx
sar eax, 1
push eax
lea edx, [ebp - 0x410]
push edx
mov ecx, esi
call fcn.004027c0
mov eax, dword [ebp - 0x414]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov dword [ebp - 4], edx
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x466fc6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00497792
mov esp, ebp
pop ebp
ret
Function at 0x466ff0
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4993bb
mov eax, dword fs:[0]
push eax
sub esp, 0x410
mov eax, dword [0x4cc99c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
xor ebx, ebx
push str.SoftwareHuofengHuofengGameWorld
lea ecx, [ebp - 0x414]
mov dword [ebp - 0x418], ebx
call fcn.004022c0
push 8
push str._setting
lea ecx, [ebp - 0x414]
mov dword [ebp - 4], ebx
call fcn.00402ab0
push 0x3fe
lea ecx, [ebp - 0x40e]
xor eax, eax
push ebx
push ecx
mov dword [ebp - 0x418], 1
mov word [ebp - 0x410], ax
call sub.MSVCR100.dll_memset
add esp, 0xc
lea edx, [ebp - 0x41c]
push edx
mov edx, dword [ebp - 0x414]
lea eax, [ebp - 0x410]
push eax
lea ecx, [ebp - 0x418]
push ecx
push edi
push edx
push SysReAllocString
mov dword [ebp - 0x41c], 0x400
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], ebx
cmp eax, ebx
je 0x4670c7
xor eax, eax
push 1
mov word [esi], ax
push 0x4b1a24
jmp 0x4670ec
xor ecx, ecx
lea eax, [ebp - 0x410]
mov word [esi], cx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4670d5
sub eax, edx
sar eax, 1
push eax
lea edx, [ebp - 0x410]
push edx
mov ecx, esi
call fcn.004027c0
mov eax, dword [ebp - 0x414]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov dword [ebp - 4], edx
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x467118
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00497792
mov esp, ebp
pop ebp
ret
Function at 0x467140
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4993f8
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push esi
mov eax, dword [0x4cc99c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
test esi, esi
jne 0x46717f
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
ret
push str.SoftwareHuofengHuofengGameWorld
lea ecx, [ebp + 8]
call fcn.004022c0
push 9
push str._setting_
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0
call fcn.00402ab0
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x10]
push ecx
lea edx, [ebp - 0x18]
push edx
push esi
push eax
push SysReAllocString
mov dword [ebp - 0x18], 4
mov dword [ebp - 0x14], 4
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
je 0x4671ef
mov edx, dword [ebp + 8]
push 4
lea ecx, [ebp - 0x10]
push ecx
push 4
push esi
push edx
push SysReAllocString
mov dword [ebp - 0x10], 0
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov eax, dword [ebp + 8]
mov esi, dword [ebp - 0x10]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x467218
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x467230
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x499428
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push esi
push edi
mov eax, dword [0x4cc99c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
test esi, esi
je 0x467339
mov edi, dword [ebp + 0xc]
test edi, edi
je 0x467339
push str.SoftwareHuofengHuofengGameWorld
lea ecx, [ebp + 8]
call fcn.004022c0
push 7
push str._setup_
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0
call fcn.00402ab0
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x467295
sub eax, edx
sar eax, 1
push eax
push esi
lea ecx, [ebp + 8]
call fcn.00402ab0
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x10]
push ecx
lea edx, [ebp - 0x18]
push edx
push edi
push eax
mov esi, 4
push SysReAllocString
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], esi
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
je 0x4672fd
mov edx, dword [ebp + 8]
push esi
lea ecx, [ebp - 0x10]
push ecx
push esi
push edi
push edx
push SysReAllocString
mov dword [ebp - 0x10], 0
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
mov eax, dword [ebp + 8]
mov esi, dword [ebp - 0x10]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x467326
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret