joyce8/EMBER2024-capa huggingface dataset:
Function at 0x432d9d
Capabilities:
Check http status code

Disassembly:
push ebp
mov ebp, esp
push 0
add ecx, 0x13
jmp 0x432daa
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
cmp ax, 0xc8
jae 0x432dc0
imul edx, eax, 3
mov edx, dword [ecx + edx]
cmp byte [ebp + 8], dl
jne 0x432da7
jmp 0x432dc2
mov al, 0xff
mov esp, ebp
pop ebp
ret 4

Function at 0x437250
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0
push dword [0x4b5fe8]
call dword [sym.imp.USER32.dll_ShowWindow]
push 7
call fcn.0047cae3
add esp, 4
call fcn.0047d340
push 0
push 0xa
push 0
call fcn.0047d1f1
add esp, 0xc
push 0
call fcn.0047cae3
add esp, 4
push dword [0x4b6a68]
push dword [0x4b5fe8]
call dword [sym.imp.USER32.dll_SetParent]
pop ebp
ret

Function at 0x439fa6
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push ecx
movzx eax, byte [ebp + 0x10]
cmp al, 0
je 0x439fcd
cmp al, 1
jne 0x439fc3
dec eax
mov dword [ebp - 4], eax
push eax
push 0x5d
push 0x2b
push 0x44
jmp 0x439ff6
mov dword [ebp - 4], eax
sub al, 6
push eax
push 0x5e
jmp 0x439ff2
mov byte [ebp - 4], 6
cmp byte [0x505fcc], 1
je 0x439fe3
sub byte [ebp - 4], 2
jmp 0x439fe3
inc dword [ebp + 0x10]
mov al, byte [ebp - 4]
cmp byte [ebp + 0x10], al
jae 0x43a055
push 0xff
push 0x10
push 0x1a
push 0x48
push 0
push dword [ebp + 0x14]
call fcn.00450b93
push eax
push 1
push dword [ebp + 0x18]
call fcn.00450b93
push eax
push dword [ebp + 0x10]
push dword [ebp + 0xc]
call fcn.00435116
cmp dword [ebp + 8], 0
jne 0x43a055
push 5
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0xc]
push dword [ecx + eax*4]
call dword [sym.imp.USER32.dll_ShowWindow]
push 0x101
push 0
push 0
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0xc]
push dword [ecx + eax*4]
call dword [sym.imp.USER32.dll_RedrawWindow]
cmp dword [ebp + 8], 0
jne 0x43a053
push 0
call fcn.00423971
jmp 0x439fe0
call fcn.004768c0
mov esp, ebp
pop ebp
ret 0x14
Function at 0x44a3f6
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
xor eax, eax
mov byte [ecx + 0x18], al
inc eax
mov dword [ecx + 0x14], eax
push 0
push dword [0x4b5fdc]
call dword [sym.imp.USER32.dll_ShowWindow]
mov esp, ebp
pop ebp
ret

Function at 0x44f058
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 8], ecx
mov eax, dword [0x497738]
mov dword [ebp - 4], eax
test eax, eax
je 0x44f077
mov ecx, dword [ebp - 8]
call fcn.0044d092
jmp 0x44f07f
mov ecx, dword [ebp - 8]
call fcn.0044d2ca
xor ecx, ecx
mov byte [0x4aab94], cl
mov dword [0x497738], ecx
mov ecx, dword [ebp - 8]
call fcn.0044a3f6
mov ecx, dword [ebp - 8]
call fcn.0044a971
mov ecx, dword [ebp - 8]
cmp byte [ecx + 1], 0
jne 0x44f0cd
cmp dword [ebp - 4], 0
jne 0x44f0cd
mov ecx, 0x492f90
call fcn.0044f7b0
test eax, eax
je 0x44f0cd
push 0
mov ecx, 0x492f90
call fcn.004180c1
call fcn.0047eac4
jmp 0x44f0ac
mov ecx, dword [ebp - 8]
call fcn.00449ef0
mov ecx, dword [ebp - 8]
call fcn.0044a36f
mov ecx, dword [ebp - 8]
call fcn.00449eca
mov ecx, dword [ebp - 8]
call fcn.00449ea4
push 1
mov ecx, 0x4b6bc0
call fcn.00476176
mov ecx, 0x4b0770
call fcn.00482938
and eax, 0x8000
test eax, eax
je 0x44f134
mov ecx, dword [ebp - 8]
call fcn.0044a88a
push 8
push dword [0x4b5fd8]
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [ebp - 8]
mov dword [ecx + 0x51c], 0
call fcn.0044a6db
push dword [ebp - 4]
mov ecx, dword [ebp - 8]
call fcn.0044eec5
mov eax, dword [ebp - 8]
movzx eax, byte [eax + 1]
mov esp, ebp
pop ebp
ret
Function at 0x452fba
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0
cmp dword [ebp + 0xc], 2
jne 0x452fdc
push 0xfa
push 0x17d
push dword [ebp + 8]
call fcn.0040bdf3
jmp 0x4530e6
push 0x155
push 0x17d
push dword [ebp + 8]
call fcn.0040bdf3
jmp 0x452ff3
inc dword [ebp - 4]
cmp dword [ebp - 4], 0x1a
je 0x453016
mov eax, 0x551
add eax, dword [ebp - 4]
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push 5
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x452ff0
mov byte [ebp - 4], 0
jmp 0x45301f
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
cmp al, 2
je 0x453061
push 0
push 0xa0
push 0x90
push 0x9a
cmp al, 0
je 0x45303f
push 1
jmp 0x453044
push 0x97
mov ecx, 0x557
imul eax, eax, 3
add ecx, eax
push ecx
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
jmp 0x45301c
mov byte [ebp - 4], 0
jmp 0x45306a
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
cmp al, 2
je 0x453089
mov ecx, 0x553
add ecx, eax
push 0x486adc
push ecx
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
jmp 0x453067
mov byte [ebp - 4], 0
jmp 0x453092
inc dword [ebp - 4]
cmp dword [ebp - 4], 4
je 0x4530cf
mov ecx, 0x507
cmp dword [ebp - 4], 3
jne 0x4530a4
inc ecx
add ecx, dword [ebp - 4]
push ecx
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push 0
push 0x16
push 0x48
mov ecx, dword [ebp - 4]
imul ecx, ecx, 0x36
add ecx, 0x7f
push ecx
push 0x12c
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
jmp 0x45308f
push 0x50a
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push 0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0x4c3
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push 0
push 0x96
push 0x126
push 2
push 2
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
cmp dword [ebp + 0x10], 0
je 0x45311f
push 0x48e0e6
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov esp, ebp
pop ebp
ret 0x10

Function at 0x45a579
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0
push eax
sub esp, 0xc
mov edx, dword [ebp + 0xc]
shr edx, 0x10
cmp dx, 0x300
jne 0x45a606
mov ecx, 0x500e27
cmp byte [ecx], 0xff
jne 0x45a5ff
inc byte [ecx]
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [ebp - 0xc], eax
push 6
lea ecx, [ebp - 0x14]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
jmp 0x45a5ba
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
cmp al, 4
jae 0x45a5d6
lea ecx, [ebp - 0x14]
movzx eax, byte [eax + ecx]
test eax, eax
je 0x45a5ff
push eax
call fcn.004014ca
test eax, eax
jne 0x45a5b7
lea ecx, [ebp - 0x14]
mov edx, dword [ebp - 4]
mov byte [ecx + edx], 0
push ecx
push dword [ebp - 0xc]
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 4
push 4
push 0xb1
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
mov byte [0x500e27], 0xff
mov esp, ebp
pop ebp
ret 8
Function at 0x45f0e0
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0
mov eax, dword [0x4b5fe8]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 7
call fcn.0047cae3
add esp, 4
call fcn.0047d340
push 0
push 0x1f
push 0
call fcn.0047d1f1
add esp, 0xc
push 0
call fcn.0047cae3
add esp, 4
mov ecx, dword [0x4b6a68]
push ecx
mov edx, dword [0x4b5fe8]
push edx
call dword [sym.imp.USER32.dll_SetParent]
push 0
mov eax, dword [0x4b5fec]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 8
call fcn.0047cae3
add esp, 4
call fcn.0047d340
push 0
push 0x1f
push 0
call fcn.0047d1f1
add esp, 0xc
push 0
call fcn.0047cae3
add esp, 4
mov ecx, dword [0x4b6a68]
push ecx
mov edx, dword [0x4b5fec]
push edx
call dword [sym.imp.USER32.dll_SetParent]
push 0
mov eax, dword [0x4b600c]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0x10
call fcn.0047cae3
add esp, 4
call fcn.0047d340
push 0
push 0x1f
push 0
call fcn.0047d1f1
add esp, 0xc
push 0
call fcn.0047cae3
add esp, 4
mov ecx, dword [0x4b6a68]
push ecx
mov edx, dword [0x4b600c]
push edx
call dword [sym.imp.USER32.dll_SetParent]
mov ecx, 0x4b4250
call fcn.00455e6b
add eax, 7
cdq
mov ecx, 0x30
idiv ecx
imul eax, eax, 0x30
add eax, 0x28
push eax
mov ecx, 0x4b4250
call fcn.00455e44
add eax, 0x2f
cdq
mov ecx, 0x30
idiv ecx
imul eax, eax, 0x30
push eax
push 0x28
push 0
call fcn.0047d281
add esp, 0x10
pop ebp
ret

Function at 0x4607ff
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push ecx
mov dword [ebp - 4], 0
jmp 0x460815
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0x15
jge 0x460855
cmp dword [ebp - 4], 2
je 0x460836
push 0
mov ecx, dword [ebp - 4]
mov edx, dword [ecx*4 + 0x4b5fd0]
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x460853
push 0
push 0x9cbd
push 0x111
mov eax, dword [ebp - 4]
mov ecx, dword [eax*4 + 0x4b5fd0]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x46080c
push 0
call fcn.0047cae3
add esp, 4
mov esp, ebp
pop ebp
ret
Function at 0x460b9e
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push ecx
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 4]
cmp dword [eax + 8], 0
jne 0x460bc7
push 0
mov ecx, dword [0x4b5ff0]
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
mov edx, dword [ebp - 4]
mov dword [edx + 8], 1
mov esp, ebp
pop ebp
ret

Function at 0x462af9
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push ecx
mov dword [ebp - 4], ecx
push 0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0xc]
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0xc]
push eax
call dword [sym.imp.USER32.dll_SetParent]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc], 0
mov esp, ebp
pop ebp
ret

Function at 0x462b2c
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push ecx
mov dword [ebp - 4], ecx
cmp dword [ebp + 8], 0
je 0x462b5d
mov eax, dword [ebp - 4]
cmp dword [eax + 0x14], 0
jne 0x462b53
push 5
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0xc]
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x462b5b
mov ecx, dword [ebp - 4]
call fcn.00462bde
jmp 0x462bd8
push 0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0xc]
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
mov edx, dword [ebp - 4]
cmp dword [edx + 0x14], 0
jle 0x462bd8
push 0
push 0
push 0x173
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 8]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
je 0x462bd8
push 0
push 0
push 0x172
mov edx, dword [ebp - 4]
mov eax, dword [edx + 8]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x26
mov ecx, dword [ebp - 4]
add ecx, 0x18
call fcn.00432cbc
add eax, 2
push eax
mov ecx, dword [ebp - 4]
add ecx, 0x18
call fcn.00409c0d
add eax, 2
push eax
push 0
push 0
push 0
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 8]
push edx
call dword [sym.imp.USER32.dll_SetWindowPos]
mov esp, ebp
pop ebp
ret 4
Function at 0x462bde
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
mov dword [ebp - 0x24], ecx
lea eax, [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ecx + 8]
push edx
call dword [sym.imp.USER32.dll_GetClientRect]
push 0
call fcn.00480ff0
add esp, 4
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x10]
imul eax, ecx
push eax
call fcn.00480fe0
add esp, 4
mov dword [ebp - 0x18], eax
mov edx, dword [ebp - 4]
push edx
call fcn.00480ff0
add esp, 4
cmp dword [ebp - 0x18], 0
je 0x462cf0
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax + 0x10]
push ecx
call fcn.0047cae3
add esp, 4
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x14]
push ecx
push 0
push 0
call fcn.0047e239
nop
nop
nop
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
mov ecx, dword [ebp - 0x24]
add ecx, 0x18
call fcn.004096f2
mov edx, dword [ebp - 0x24]
mov eax, dword [edx + 8]
push eax
call dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
push ecx
mov ecx, dword [ebp - 0x24]
add ecx, 0x18
call fcn.004098f3
push eax
push 0
push 0x172
mov edx, dword [ebp - 0x24]
mov eax, dword [edx + 8]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x24]
mov eax, dword [edx + 8]
push eax
call dword [sym.imp.USER32.dll_ReleaseDC]
push 0
mov ecx, dword [ebp - 0x24]
mov edx, dword [ecx + 0xc]
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
call fcn.0047cae3
add esp, 4
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
push ecx
call fcn.00481020
add esp, 4
mov esp, ebp
pop ebp
ret

Function at 0x462cf4
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push ecx
mov dword [ebp - 4], ecx
push 0
push 0
push 0x173
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 8]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
je 0x462d6d
push 5
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0xc]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
push 0
push 0x172
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 8]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x26
mov ecx, dword [ebp - 4]
add ecx, 0x18
call fcn.00432cbc
add eax, 2
push eax
mov ecx, dword [ebp - 4]
add ecx, 0x18
call fcn.00409c0d
add eax, 2
push eax
push 0
push 0
push 0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 8]
push ecx
call dword [sym.imp.USER32.dll_SetWindowPos]
mov ecx, dword [ebp - 4]
add ecx, 0x18
call fcn.00409c64
mov esp, ebp
pop ebp
ret
Function at 0x462e1a
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
cmp dword [eax + 0x14], 0
jle 0x462f39
lea ecx, [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x24]
mov eax, dword [edx + 8]
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
push 0
call fcn.00480ff0
add esp, 4
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x10]
imul ecx, edx
push ecx
call fcn.00480fe0
add esp, 4
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 4]
push eax
call fcn.00480ff0
add esp, 4
cmp dword [ebp - 0x18], 0
je 0x462f39
mov ecx, dword [ebp - 0x24]
mov edx, dword [ecx + 0x10]
push edx
call fcn.0047cae3
add esp, 4
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x14]
push edx
push 0
push 0
call fcn.0047e239
nop
nop
nop
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x18]
push edx
mov ecx, dword [ebp - 0x24]
add ecx, 0x18
call fcn.00427042
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax + 8]
push ecx
call dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0x1c]
push edx
mov ecx, dword [ebp - 0x24]
add ecx, 0x18
call fcn.004098f3
push eax
push 0
push 0x172
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax + 8]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax + 8]
push ecx
call dword [sym.imp.USER32.dll_ReleaseDC]
push 0
mov edx, dword [ebp - 0x24]
mov eax, dword [edx + 0xc]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
call fcn.0047cae3
add esp, 4
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x20]
push edx
call fcn.00481020
add esp, 4
mov esp, ebp
pop ebp
ret

Function at 0x46305a
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push ecx
mov dword [ebp - 4], ecx
cmp dword [ebp + 8], 0
je 0x463078
push 5
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 8]
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x463087
push 0
mov edx, dword [ebp - 4]
mov eax, dword [edx + 8]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov esp, ebp
pop ebp
ret 4
Function at 0x4682d6
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 0x58]
mov edx, dword [ebp + 8]
and edx, 0xff
cmp ecx, edx
je 0x468311
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x50]
push ecx
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x468311
push 0
mov ecx, 0x4b69b0
call fcn.004746ad
mov dl, byte [ebp + 8]
mov byte [ebp - 8], dl
cmp byte [ebp - 8], 0
je 0x468325
cmp byte [ebp - 8], 1
je 0x468352
jmp 0x46837d
push 0
mov ecx, dword [ebp - 4]
add ecx, 0xdc0
call fcn.004d0286
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 5
mov ecx, dword [ebp - 4]
add ecx, 0x5c
call fcn.004d0286
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x46837d
push 0
mov ecx, dword [ebp - 4]
add ecx, 0x5c
call fcn.004d0286
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 5
mov ecx, dword [ebp - 4]
add ecx, 0xdc0
call fcn.004d0286
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [ebp - 4]
mov cl, byte [ebp + 8]
mov byte [eax + 0x58], cl
mov esp, ebp
pop ebp
ret 4

Function at 0x468e67
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
mov eax, dword [ebp + 0xc]
push eax
call fcn.0047fc5a
add esp, 4
mov dword [ebp - 0x44], eax
push 0x40
lea ecx, [ebp - 0x40]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetWindowTextA]
cmp eax, dword [ebp - 0x44]
jne 0x468ea5
lea eax, [ebp - 0x40]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.0047fcc3
add esp, 8
test eax, eax
je 0x468eb5
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
jmp 0x468eba
mov eax, 1
mov esp, ebp
pop ebp
ret
Function at 0x4698dd
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0
push 0x33
push ecx
sub esp, 0xc
jmp 0x4698ed
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
cmp al, byte [ebp - 8]
jge 0x469920
cmp al, 0x32
je 0x469902
mov eax, dword [eax*4 + 0x486998]
jmp 0x469907
mov eax, 0x407
push eax
mov edx, dword [ebp - 0xc]
push dword [edx + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
push dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x4698ea
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [ebp + 8], 0
je 0x469a14
push 5
mov ecx, dword [0x4b600c]
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [ebp - 0xc]
call fcn.00469a5e
push 0x44a
mov edx, dword [ebp - 0xc]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [ebp - 0x18], eax
push 0
push 0
push 0x147
mov ecx, dword [ebp - 0x18]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 0x14], eax
push 0
push 0
push 0x146
mov edx, dword [ebp - 0x18]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x14], 0
jle 0x4699b4
push 1
push 0x403
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x4699cf
push 0
push 0x403
mov edx, dword [ebp - 0xc]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov ecx, dword [ebp - 0x10]
sub ecx, 1
cmp dword [ebp - 0x14], ecx
jge 0x4699f7
push 1
push 0x404
mov edx, dword [ebp - 0xc]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x469a12
push 0
push 0x404
mov ecx, dword [ebp - 0xc]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x469a58
push 0
mov eax, dword [0x4b600c]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
push 0x403
mov ecx, dword [ebp - 0xc]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push 0
push 0x404
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov esp, ebp
pop ebp
ret 4

Function at 0x469e86
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0
push dword [0x4b600c]
call dword [sym.imp.USER32.dll_ShowWindow]
push 0x10
call fcn.0047cae3
add esp, 4
call fcn.0047d340
push 0
call fcn.00401692
push 0
call fcn.0047cae3
add esp, 4
push dword [0x4b6a68]
push dword [0x4b600c]
call dword [sym.imp.USER32.dll_SetParent]
pop ebp
ret
Function at 0x46af6e
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 8]
mov edx, dword [ebp + 8]
and edx, 0xff
cmp ecx, edx
je 0x46afa8
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x46afa8
push 0
mov ecx, 0x4b69b0
call fcn.004746ad
mov dl, byte [ebp + 8]
mov byte [ebp - 8], dl
cmp byte [ebp - 8], 0
je 0x46afbc
cmp byte [ebp - 8], 1
je 0x46aff9
jmp 0x46b034
push 1
mov ecx, dword [ebp - 4]
add ecx, 0x278
call fcn.004698dd
push 0
mov ecx, dword [ebp - 4]
add ecx, 0xe0
call fcn.004d0286
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 5
mov ecx, dword [ebp - 4]
add ecx, 0xc
call fcn.004d0286
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x46b034
push 0
mov ecx, dword [ebp - 4]
add ecx, 0x278
call fcn.004698dd
push 0
mov ecx, dword [ebp - 4]
add ecx, 0xc
call fcn.004d0286
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 5
mov ecx, dword [ebp - 4]
add ecx, 0xe0
call fcn.004d0286
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [ebp - 4]
mov cl, byte [ebp + 8]
mov byte [eax + 8], cl
mov esp, ebp
pop ebp
ret 4

Function at 0x46b9dc
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 4]
xor ecx, ecx
mov cl, byte [eax + 8]
mov edx, dword [ebp + 8]
and edx, 0xff
cmp ecx, edx
je 0x46ba16
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x46ba16
push 0
mov ecx, 0x4b69b0
call fcn.004746ad
mov dl, byte [ebp + 8]
mov byte [ebp - 8], dl
cmp byte [ebp - 8], 0
je 0x46ba2a
cmp byte [ebp - 8], 1
je 0x46ba57
jmp 0x46ba82
push 0
mov ecx, dword [ebp - 4]
add ecx, 0x6a0
call fcn.004d0286
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 5
mov ecx, dword [ebp - 4]
add ecx, 0xc
call fcn.004d0286
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x46ba82
push 0
mov ecx, dword [ebp - 4]
add ecx, 0xc
call fcn.004d0286
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 5
mov ecx, dword [ebp - 4]
add ecx, 0x6a0
call fcn.004d0286
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [ebp - 4]
mov cl, byte [ebp + 8]
mov byte [eax + 8], cl
mov esp, ebp
pop ebp
ret 4