joyce8/EMBER2024-capa huggingface dataset:
Function at 0x79d94b70
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push edi
mov edi, eax
push esi
lea eax, [ebp - 0x14]
mov esi, ecx
push ebx
xor ebx, ebx
sub esp, 0x2c
mov dword [ebp - 0x1c], edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], edx
mov dword [esp], edi
call sym._RegQueryValueExW_24
sub esp, 0x18
test eax, eax
jne 0x79d94bb6
cmp dword [ebp - 0x14], 1
je 0x79d94bc0
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
mov ebx, dword [esi]
call sym._GetProcessHeap_0
mov dword [esp + 4], 0
mov dword [esp + 8], ebx
mov dword [esp], eax
call sym._HeapAlloc_12
sub esp, 0xc
mov ebx, eax
test eax, eax
je 0x79d94bb6
mov edx, dword [ebp - 0x1c]
mov dword [esp + 0x14], esi
mov dword [esp], edi
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], edx
call sym._RegQueryValueExW_24
mov eax, ebx
sub esp, 0x18
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
Function at 0x79d97b40
Capabilities:
Delete registry key

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x24
mov eax, dword [section..bss]
test eax, eax
je 0x79d97c80
mov edx, dword [eax + 8]
test edx, edx
je 0x79d97c80
xor edi, edi
mov ebx, 0x4c6
jmp 0x79d97b9c
mov eax, dword [ebp + 0x10]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call ecx
sub esp, 8
mov ebx, eax
test eax, eax
je 0x79d97be0
cmp eax, 0x961
je 0x79d97be0
mov eax, dword [section..bss]
add edi, 1
cmp dword [eax + 8], edi
jbe 0x79d97bcb
imul esi, edi, 0x38
mov dword [esp], 6
call dword [eax + esi + 0x14]
sub esp, 4
test al, 2
mov eax, dword [section..bss]
je 0x79d97b94
mov ecx, dword [eax + esi + 0x3c]
test ecx, ecx
jne 0x79d97b70
mov ebx, 0x4c6
add edi, 1
cmp dword [eax + 8], edi
ja 0x79d97b9c
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret 0xc
test ebx, ebx
jne 0x79d97bcb
test byte [ebp + 0xc], 1
je 0x79d97bcb
mov eax, dword [ebp + 8]
mov dword [esp + 4], 0x103
movzx eax, word [eax]
mov dword [esp], eax
call dword [sym.imp.msvcrt.dll_iswctype]
test eax, eax
je 0x79d97bcb
mov eax, dword [ebp + 8]
cmp word [eax + 2], 0x3a
jne 0x79d97bcb
lea eax, [ebp - 0x28]
mov dword [esp], 0xf003f
mov dword [esp + 4], eax
call sym._RegOpenCurrentUser_8
sub esp, 8
test eax, eax
jne 0x79d97bcb
mov eax, dword [ebp + 8]
mov dword [ebp - 0x24], 0x65004e
mov dword [ebp - 0x20], 0x770074
movzx eax, word [eax]
mov dword [ebp - 0x1c], 0x72006f
mov dword [ebp - 0x18], 0x5c006b
mov word [ebp - 0x14], ax
xor eax, eax
mov word [ebp - 0x12], ax
lea eax, [ebp - 0x24]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x28]
mov dword [esp], eax
call sym._RegDeleteKeyW_8
mov eax, dword [ebp - 0x28]
sub esp, 8
mov dword [esp], eax
call sym._RegCloseKey_4
sub esp, 4
jmp 0x79d97bcb
lea esp, [ebp - 0xc]
mov ebx, 0x4c6
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret 0xc
Function at 0x79d97e90
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x3c
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 0x10]
test byte [0x79d9e050], 8
jne 0x79d97f75
test esi, esi
je 0x79d97f50
test edi, edi
je 0x79d97f50
mov ebx, dword [ebp + 0xc]
test ebx, ebx
je 0x79d97f40
cmp word [esi], 0
mov ebx, 0x4b0
je 0x79d97f55
cmp word [esi + 2], 0x3a
jne 0x79d97f55
mov dword [esp], esi
call sym._GetDriveTypeW_4
sub esp, 4
cmp eax, 4
je 0x79d98022
ja 0x79d98014
cmp eax, 2
jb 0x79d97f55
mov ebx, 0x8ca
test byte [0x79d9e050], 8
je 0x79d97f55
mov dword [esp + 0x14], str.file_is_local_n
mov dword [esp + 0x10], 0xa81
mov dword [esp + 0xc], str.WNetGetConnectionW
mov dword [esp + 8], 0x79d9f71d
mov dword [esp + 4], 0x79d9e050
mov dword [esp], 3
call sym._ros_dbg_log
jmp 0x79d97f55
mov ecx, dword [edi]
test ecx, ecx
je 0x79d97ec3
lea esi, [esi]
mov ebx, 0x1e7
mov dword [esp], ebx
call sym._SetLastError_4
sub esp, 4
test byte [0x79d9e050], 8
jne 0x79d97fd0
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret 0xc
mov dword [esp + 4], 0xffffffff
mov dword [esp], esi
call sym._wine_dbgstr_wn
mov edx, dword [ebp + 0xc]
mov dword [esp + 0x20], edi
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], edx
mov dword [esp + 0x14], str.__s___p___p__n
mov dword [esp + 0x10], 0xa6a
mov dword [esp + 0xc], str.WNetGetConnectionW
mov dword [esp + 8], 0x79d9f71d
mov dword [esp + 4], 0x79d9e050
mov dword [esp], 3
call sym._ros_dbg_log
jmp 0x79d97eac
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], str.Returning__d_n
mov dword [esp + 0x10], 0xa8d
mov dword [esp + 0xc], str.WNetGetConnectionW
mov dword [esp + 8], 0x79d9f71d
mov dword [esp + 4], 0x79d9e050
mov dword [esp], 3
call sym._ros_dbg_log
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret 0xc
cmp eax, 5
je 0x79d97ef8
jmp 0x79d97f55
movzx eax, word [esi]
mov dword [ebp - 0x14], 0x3a
mov word [ebp - 0x16], ax
mov eax, dword [section..bss]
test eax, eax
je 0x79d980c7
mov edx, dword [eax + 8]
mov ebx, 0x4c6
xor esi, esi
test edx, edx
jne 0x79d98080
jmp 0x79d980b7
mov eax, dword [ebp + 0xc]
mov dword [esp + 8], edi
mov dword [esp + 4], eax
lea eax, [ebp - 0x16]
mov dword [esp], eax
call ecx
sub esp, 0xc
mov ebx, eax
test eax, eax
je 0x79d980af
cmp eax, 0xea
je 0x79d980af
mov eax, dword [section..bss]
add esi, 1
cmp esi, dword [eax + 8]
jae 0x79d980b7
imul ecx, esi, 0x38
mov dword [esp], 6
mov dword [ebp - 0x1c], ecx
call dword [eax + ecx + 0x14]
mov ecx, dword [ebp - 0x1c]
sub esp, 4
test al, 4
mov eax, dword [section..bss]
je 0x79d98078
mov ecx, dword [eax + ecx + 0x40]
test ecx, ecx
jne 0x79d98050
mov ebx, 0x4c6
jmp 0x79d98078
test ebx, ebx
je 0x79d97f60
mov dword [esp], ebx
call sym._SetLastError_4
sub esp, 4
jmp 0x79d97f55
mov dword [esp], 0x4c6
mov ebx, 0x4c6
call sym._SetLastError_4
sub esp, 4
jmp 0x79d97f55
Function at 0x79d98650
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
push ebx
sub esp, 0x2c
mov ebx, dword [ebp + 0xc]
test byte [0x79d9e050], 1
jne 0x79d98700
cmp ebx, 1
je 0x79d986a0
cmp ebx, 2
sete bl
movzx ebx, bl
sub ebx, 1
and ebx, 0xfffff78d
add ebx, 0x8ca
mov dword [esp], ebx
call sym._SetLastError_4
mov eax, ebx
mov ebx, dword [ebp - 4]
sub esp, 4
leave
ret 0x10
mov eax, dword [ebp + 8]
mov ebx, 0x8ca
mov dword [esp], eax
call sym._GetDriveTypeA_4
sub esp, 4
cmp eax, 4
jne 0x79d98684
mov eax, dword [ebp + 8]
mov ebx, 0xea
mov dword [esp], eax
call sym._lstrlenA_4
mov edx, dword [ebp + 0x14]
sub esp, 4
add eax, 5
cmp dword [edx], eax
jb 0x79d98684
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x10]
xor ebx, ebx
add eax, 4
mov dword [ecx], eax
mov ecx, dword [ebp + 8]
mov dword [esp], eax
mov dword [esp + 4], ecx
call sym._lstrcpyA_8
sub esp, 8
jmp 0x79d98684
mov eax, dword [ebp + 8]
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call sym._wine_dbgstr_an
mov edx, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x24], edx
mov dword [esp + 0x20], ecx
mov dword [esp + 0x14], str.__s__0x_08X___p___p_:_stub_n
mov dword [esp + 0x10], 0xab1
mov dword [esp + 0xc], str.WNetGetUniversalNameA
mov dword [esp + 8], 0x79d9f71d
mov dword [esp + 4], 0x79d9e050
mov dword [esp], 0
call sym._ros_dbg_log
jmp 0x79d98667

Function at 0x79d98770
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
push ebx
sub esp, 0x2c
mov ebx, dword [ebp + 0xc]
test byte [0x79d9e050], 1
jne 0x79d987f0
cmp ebx, 1
je 0x79d987b4
cmp ebx, 2
sete bl
movzx ebx, bl
sub ebx, 1
and ebx, 0xfffffb91
add ebx, 0x4c6
mov dword [esp], ebx
call sym._SetLastError_4
sub esp, 4
mov eax, ebx
mov ebx, dword [ebp - 4]
leave
ret 0x10
mov eax, dword [ebp + 8]
mov ebx, 0x8ca
mov dword [esp], eax
call sym._GetDriveTypeW_4
sub esp, 4
cmp eax, 4
jne 0x79d987a0
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym._lstrlenW_4
mov edx, dword [ebp + 0x14]
sub esp, 4
lea eax, [eax + eax + 6]
cmp dword [edx], eax
jae 0x79d98852
mov dword [edx], eax
mov ebx, 0xea
jmp 0x79d987a0
mov eax, dword [ebp + 8]
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call sym._wine_dbgstr_wn
mov edx, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x24], edx
mov dword [esp + 0x20], ecx
mov dword [esp + 0x14], str.__s__0x_08X___p___p_:_stub_n
mov dword [esp + 0x10], 0xae0
mov dword [esp + 0xc], str.WNetGetUniversalNameW
mov dword [esp + 8], 0x79d9f71d
mov dword [esp + 4], 0x79d9e050
mov dword [esp], 0
call sym._ros_dbg_log
jmp 0x79d98783
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x10]
xor ebx, ebx
mov edx, dword [ebp + 8]
add eax, 4
mov dword [ecx], eax
mov dword [esp + 4], edx
mov dword [esp], eax
call sym._lstrcpyW_8
sub esp, 8
jmp 0x79d987ab
Function at 0x79d99500
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_MPR_1___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x79da027f
mov dword [ebp - 0x40], str.MPR_1
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79d99560
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_MPR_2___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x79da027f
mov dword [ebp - 0x40], str.MPR_2
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79d995c0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_MPR_3___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x79da027f
mov dword [ebp - 0x40], str.MPR_3
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79d99620
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_MPR_4___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x79da027f
mov dword [ebp - 0x40], str.MPR_4
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79d99680
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_MPR_5___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x79da027f
mov dword [ebp - 0x40], str.MPR_5
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79d996e0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_MPR_6___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x79da027f
mov dword [ebp - 0x40], str.MPR_6
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4
Function at 0x79d99740
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_MPR_7___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x79da027f
mov dword [ebp - 0x40], str.MPR_7
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79d997a0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_MPR_8___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x79da027f
mov dword [ebp - 0x40], str.MPR_8
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79d99800
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_MPR_9___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x79da027f
mov dword [ebp - 0x40], str.MPR_9
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79d99860
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_MPR_12___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x79da027f
mov dword [ebp - 0x40], str.MPR_12
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79d998c0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_MPR_13___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x79da027f
mov dword [ebp - 0x40], str.MPR_13
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79d99920
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_MPR_14___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x79da027f
mov dword [ebp - 0x40], str.MPR_14
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4
Function at 0x79d99980
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_MPR_15___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x79da027f
mov dword [ebp - 0x40], str.MPR_15
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79d999e0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_MPR_16___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x79da027f
mov dword [ebp - 0x40], str.MPR_16
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79d99a40
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_MPR_17___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x79da027f
mov dword [ebp - 0x40], str.MPR_17
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79d99aa0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_MPR_18___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x79da027f
mov dword [ebp - 0x40], str.MPR_18
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79d99b00
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_MPR_19___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x79da027f
mov dword [ebp - 0x40], str.MPR_19
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79d99b60
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_MPR_20___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x79da027f
mov dword [ebp - 0x40], str.MPR_20
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4
Function at 0x79d99bc0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_MPR_21___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x79da027f
mov dword [ebp - 0x40], str.MPR_21
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79d99c20
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_I_MprSaveConn___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x79da027f
mov dword [ebp - 0x40], str.I_MprSaveConn
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79d99c80
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_RestoreConnectionA0___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x79da027f
mov dword [ebp - 0x40], str.RestoreConnectionA0
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79d99ce0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_WNetConnectionDialog2___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x79da027f
mov dword [ebp - 0x40], str.WNetConnectionDialog2
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79d99d40
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_WNetDirectoryNotifyA___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x79da027f
mov dword [ebp - 0x40], str.WNetDirectoryNotifyA
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79d99da0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_WNetDirectoryNotifyW___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x79da027f
mov dword [ebp - 0x40], str.WNetDirectoryNotifyW
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4
Function at 0x79d99e00
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_WNetDisconnectDialog2___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x79da027f
mov dword [ebp - 0x40], str.WNetDisconnectDialog2
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79d99e60
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_WNetFMXEditPerm___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x79da027f
mov dword [ebp - 0x40], str.WNetFMXEditPerm
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79d99ec0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_WNetFMXGetPermCaps___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x79da027f
mov dword [ebp - 0x40], str.WNetFMXGetPermCaps
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79d99f20
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_WNetFMXGetPermHelp___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x79da027f
mov dword [ebp - 0x40], str.WNetFMXGetPermHelp
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79d99f80
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_WNetFormatNetworkNameA___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x79da027f
mov dword [ebp - 0x40], str.WNetFormatNetworkNameA
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4

Function at 0x79d99fe0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x50]
sub esp, 0x5c
mov dword [esp], str.WARNING:_calling_stub_WNetFormatNetworkNameW___n
call sym._DbgPrint
xor eax, eax
mov ecx, 0x12
mov dword [ebp - 0x58], 0x80000100
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x54], 1
mov dword [esp], eax
mov dword [ebp - 0x44], 0x79da027f
mov dword [ebp - 0x40], str.WNetFormatNetworkNameW
mov dword [ebp - 0x48], 2
call sym._RtlRaiseException_4