joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1015170
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
push edi
mov dword [ebp - 8], 0
cmp dword [ebp + 0x10], 0
ja 0x1015192
mov eax, dword [ebp - 8]
jmp 0x10152d5
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xc], eax
jmp 0x1015249
mov eax, dword [ebp + 0xc]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x18]
push eax
call dword [sym.imp.ole32.dll_OleSetContainedObject]
mov dword [ebp - 4], eax
jmp 0x1015270
mov eax, dword [ebp + 0xc]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x1c]
push eax
call dword [sym.imp.ole32.dll_OleSetContainedObject]
mov dword [ebp - 4], eax
jmp 0x1015270
mov eax, dword [ebp + 0xc]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x24]
push eax
call dword [sym.imp.ole32.dll_OleSetContainedObject]
mov dword [ebp - 4], eax
jmp 0x1015270
mov eax, dword [ebp + 0xc]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x20]
push eax
call dword [sym.imp.ole32.dll_OleSetContainedObject]
mov dword [ebp - 4], eax
jmp 0x1015270
push 0xe4a
push str.c:_ntprivatectoleuiole2.0_appscl2testchicago..citem.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1056c90
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Illegal_case
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x1015270
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
ja case.default.0x1015259
mov eax, dword [ebp - 0xc]
jmp dword [eax*4 + 0x1015260]
mov eax, dword [ebp - 4]
mov dword [ebp - 8], eax
cmp dword [ebp - 4], 0
je 0x10152c4
push 0xe51
push str.c:_ntprivatectoleuiole2.0_appscl2testchicago..citem.c
mov eax, dword [0x1056d98]
push eax
mov eax, dword [0x104ed80]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push str.OleSetContainedObject
mov eax, dword [0x104ed80]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov eax, dword [0x104ed80]
push eax
mov eax, dword [ebp - 8]
push eax
call fcn.0102e6d7
jmp 0x10152cd
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x34], eax
mov eax, dword [ebp - 8]
jmp 0x10152d5
pop edi
pop esi
pop ebx
leave
ret 0xc
Function at 0x1015340
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
push edi
call fcn.010152e0
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 0xc], eax
jmp 0x1015477
mov eax, dword [ebp + 8]
add eax, 0x18
push eax
push 0x1001958
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x1c]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x1c]
mov eax, dword [eax]
call dword [eax]
mov dword [ebp - 4], eax
jmp 0x101549e
mov eax, dword [ebp + 8]
add eax, 0x18
push eax
push 0x1001958
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x1c]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x1c]
mov eax, dword [eax]
call dword [eax]
mov dword [ebp - 4], eax
jmp 0x101549e
mov eax, dword [ebp + 8]
cmp dword [eax + 0x24], 0
je 0x10153d9
mov eax, dword [ebp + 8]
add eax, 0x18
push eax
push 0x1001958
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x24]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x24]
mov eax, dword [eax]
call dword [eax]
mov dword [ebp - 4], eax
jmp 0x10153f9
mov eax, dword [ebp + 8]
add eax, 0x18
push eax
push 0x1001958
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x1c]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x1c]
mov eax, dword [eax]
call dword [eax]
mov dword [ebp - 4], eax
jmp 0x101549e
mov eax, dword [ebp + 8]
add eax, 0x18
push eax
push 0x1001958
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x20]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x20]
mov eax, dword [eax]
call dword [eax]
mov dword [ebp - 4], eax
jmp 0x101549e
push 0xea5
push str.c:_ntprivatectoleuiole2.0_appscl2testchicago..citem.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1056c90
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Illegal_case
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov dword [ebp - 4], 0x80004005
jmp 0x101549e
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
ja case.default.0x1015487
mov eax, dword [ebp - 0xc]
jmp dword [eax*4 + 0x101548e]
mov eax, dword [ebp - 4]
jmp 0x10154a6
pop edi
pop esi
pop ebx
leave
ret 4

Function at 0x10154b0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x3f
push str.c:_ntprivatectoleuiole2.0_appscl2testchicago..cstubs.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1056c90
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Stub_Function
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
xor eax, eax
jmp 0x10154fd
pop edi
pop esi
pop ebx
leave
ret 0xc
Function at 0x1015510
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x46
push str.c:_ntprivatectoleuiole2.0_appscl2testchicago..cstubs.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1056c90
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Stub_Function
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
xor eax, eax
jmp 0x101555d
pop edi
pop esi
pop ebx
leave
ret 8

Function at 0x1015570
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x4d
push str.c:_ntprivatectoleuiole2.0_appscl2testchicago..cstubs.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1056c90
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Stub_Function
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
xor eax, eax
jmp 0x10155bd
pop edi
pop esi
pop ebx
leave
ret 8

Function at 0x10155d0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x54
push str.c:_ntprivatectoleuiole2.0_appscl2testchicago..cstubs.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1056c90
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Stub_Function
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
xor eax, eax
jmp 0x101561d
pop edi
pop esi
pop ebx
leave
ret 0xc

Function at 0x1015630
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x5b
push str.c:_ntprivatectoleuiole2.0_appscl2testchicago..cstubs.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1056c90
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Stub_Function
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
pop edi
pop esi
pop ebx
leave
ret 0x14

Function at 0x1015680
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x61
push str.c:_ntprivatectoleuiole2.0_appscl2testchicago..cstubs.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1056c90
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Stub_Function
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
xor eax, eax
jmp 0x10156cd
pop edi
pop esi
pop ebx
leave
ret 8
Function at 0x10156e0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x68
push str.c:_ntprivatectoleuiole2.0_appscl2testchicago..cstubs.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1056c90
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Stub_Function
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
xor eax, eax
jmp 0x101572d
pop edi
pop esi
pop ebx
leave
ret 8

Function at 0x1015740
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x97
push str.c:_ntprivatectoleuiole2.0_appscl2testchicago..cstubs.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1056c90
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Stub_Function
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
xor eax, eax
jmp 0x1015790
pop edi
pop esi
pop ebx
leave
ret 0x18

Function at 0x10157a0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0xae
push str.c:_ntprivatectoleuiole2.0_appscl2testchicago..cstubs.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1056c90
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Stub_Function
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
xor eax, eax
jmp 0x10157f0
pop edi
pop esi
pop ebx
leave
ret 0xc

Function at 0x1015800
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0xc9
push str.c:_ntprivatectoleuiole2.0_appscl2testchicago..cstubs.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1056c90
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Stub_Function
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
xor eax, eax
jmp 0x1015850
pop edi
pop esi
pop ebx
leave
ret 0xc

Function at 0x1015880
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0xf9
push str.c:_ntprivatectoleuiole2.0_appscl2testchicago..cstubs.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1056c90
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Stub_Function
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
xor eax, eax
jmp 0x10158d0
pop edi
pop esi
pop ebx
leave
ret 4
Function at 0x10158e0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x110
push str.c:_ntprivatectoleuiole2.0_appscl2testchicago..cstubs.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1056c90
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Stub_Function
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x101592e
pop edi
pop esi
pop ebx
leave
ret 8

Function at 0x1015940
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x128
push str.c:_ntprivatectoleuiole2.0_appscl2testchicago..cstubs.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1056c90
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Stub_Function
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
xor eax, eax
jmp 0x1015990
pop edi
pop esi
pop ebx
leave
ret 8

Function at 0x10159a0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x140
push str.c:_ntprivatectoleuiole2.0_appscl2testchicago..cstubs.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1056c90
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Stub_Function
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
xor eax, eax
jmp 0x10159f0
pop edi
pop esi
pop ebx
leave
ret 8

Function at 0x1015a00
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x158
push str.c:_ntprivatectoleuiole2.0_appscl2testchicago..cstubs.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1056c90
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Stub_Function
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x1015a4e
pop edi
pop esi
pop ebx
leave
ret 4

Function at 0x1015a70
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x167
push str.c:_ntprivatectoleuiole2.0_appscl2testchicago..cstubs.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1056c90
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Stub_Function
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x1015abe
pop edi
pop esi
pop ebx
leave
ret 8
Function at 0x1015ad0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x16d
push str.c:_ntprivatectoleuiole2.0_appscl2testchicago..cstubs.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1056c90
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Stub_Function
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x1015b1e
pop edi
pop esi
pop ebx
leave
ret 8

Function at 0x1015b30
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x179
push str.c:_ntprivatectoleuiole2.0_appscl2testchicago..cstubs.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1056c90
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Stub_Function
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
xor eax, eax
jmp 0x1015b80
pop edi
pop esi
pop ebx
leave
ret 0x10

Function at 0x1015b90
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x185
push str.c:_ntprivatectoleuiole2.0_appscl2testchicago..cstubs.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1056c90
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Stub_Function
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
pop edi
pop esi
pop ebx
leave
ret 4

Function at 0x1015c30
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x19b
push str.c:_ntprivatectoleuiole2.0_appscl2testchicago..cstubs.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1056c90
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Stub_Function
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, 1
jmp 0x1015c83
pop edi
pop esi
pop ebx
leave
ret

Function at 0x1015c90
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x1b4
push str.c:_ntprivatectoleuiole2.0_appscl2testchicago..cstubs.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1056c90
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Stub_Function
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, 0x80004005
jmp 0x1015ce3
pop edi
pop esi
pop ebx
leave
ret 4
Function at 0x1015cf0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x1be
push str.c:_ntprivatectoleuiole2.0_appscl2testchicago..cstubs.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1056c90
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Stub_Function
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, 3
jmp 0x1015d43
pop edi
pop esi
pop ebx
leave
ret 4

Function at 0x1015d50
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x1c4
push str.c:_ntprivatectoleuiole2.0_appscl2testchicago..cstubs.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1056c90
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Stub_Function
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x1015d9e
pop edi
pop esi
pop ebx
leave
ret 4
Function at 0x101a4b0
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x90
push ebx
push esi
push edi
lea eax, [ebp - 0x80]
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x88], 0x104c260
push str.OleTest.ini
push pe_nt_image_headers32
mov eax, dword [ebp - 0x8c]
push eax
mov eax, dword [ebp - 0x88]
push eax
push str.NeverRetry
push str.Cl32test
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
je 0x101a542
push 0x104c2a0
mov eax, dword [ebp - 0x8c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x101a542
mov dword [0x104dc2c], 1
push str.OleTest.ini
push pe_nt_image_headers32
mov eax, dword [ebp - 0x8c]
push eax
mov eax, dword [ebp - 0x88]
push eax
push str.SaveDialog
push str.Cl32test
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
je 0x101a5a1
push 0x104dc74
mov eax, dword [ebp - 0x8c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x101a5a1
mov dword [0x104dc30], 0
push str.OleTest.ini
push pe_nt_image_headers32
mov eax, dword [ebp - 0x8c]
push eax
mov eax, dword [ebp - 0x88]
push eax
push str.TestSetUp
push str.Cl32test
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
je 0x101a623
push 0x104c2a0
mov eax, dword [ebp - 0x8c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x101a623
mov dword [0x104dc34], 1
push str.ClTestMainMenu
push 0x1056300
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov word [0x104d93c], 6
mov dword [0x104dcd4], 0
push str.OleTest.ini
push pe_nt_image_headers32
mov eax, dword [ebp - 0x8c]
push eax
mov eax, dword [ebp - 0x88]
push eax
push str.ViewInfo
push str.Cl32test
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
je 0x101a682
push 0x104c2a0
mov eax, dword [ebp - 0x8c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x101a682
mov dword [0x104dc38], 1
push str.OleTest.ini
push pe_nt_image_headers32
mov eax, dword [ebp - 0x8c]
push eax
mov eax, dword [ebp - 0x88]
push eax
push str.UseClientCoDisconnObj
push str.Cl32test
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
je 0x101a6e3
push 0x104c2a0
mov eax, dword [ebp - 0x8c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x101a6e3
push 1
call fcn.01022780
jmp 0x101a6ea
push 0
call fcn.01022780
pop edi
pop esi
pop ebx
leave
ret
Function at 0x101a6f0
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x90
push ebx
push esi
push edi
lea eax, [ebp - 0x80]
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x88], 0x104c260
push str.OleTest.ini
push pe_nt_image_headers32
mov eax, dword [ebp - 0x8c]
push eax
mov eax, dword [ebp - 0x88]
push eax
push str.Watch
push str.Cl32test
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
je 0x101a794
push 0x104c2a0
mov eax, dword [ebp - 0x8c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x101a794
cmp dword [0x104f348], 0
jne 0x101a794
mov dword [0x104f358], 1
jmp 0x101a79e
mov dword [0x104f358], 0
push str.OleTest.ini
push pe_nt_image_headers32
mov eax, dword [ebp - 0x8c]
push eax
mov eax, dword [ebp - 0x88]
push eax
push str.Script
push str.Cl32test
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
je 0x101a802
push 0x104c2a0
mov eax, dword [ebp - 0x8c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x101a802
mov dword [0x104f350], 1
jmp 0x101a80c
mov dword [0x104f350], 0
cmp dword [0x104f358], 0
jne 0x101a826
cmp dword [0x104f350], 0
je 0x101a82b
call fcn.0101a830
pop edi
pop esi
pop ebx
leave
ret