joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140006dc0
Capabilities:
Print debug messages

Disassembly:
push rdi
sub rsp, 0x130
mov qword [rsp + 0x58], 0xfffffffffffffffe
mov qword [rsp + 0x150], rbx
mov rax, qword [0x14012ce40]
xor rax, rsp
mov qword [rsp + 0x120], rax
mov rdi, rdx
mov rbx, rcx
cmp qword [rcx + 0x88], 0
jne 0x140006e46
mov rcx, qword [rcx + 8]
test rcx, rcx
je 0x140006e33
lea rdx, str.SendResource
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x88], rax
test rax, rax
jne 0x140006e46
mov dword [rbx], 0x7f
lea rcx, str.EWSIntf::send_resource:_Function_not_found_in_DLL:_SendResource_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x140006e46
mov dword [rbx], 6
lea rcx, str.EWSIntf::send_resource:_Attempting_to_lookup_SendResource_with_no_DLL_handle_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp qword [rbx + 0x88], 0
je 0x140006f05
mov r8, rdi
lea rdx, [rsp + 0x60]
mov rcx, rbx
call fcn.140007120
mov rdi, rax
lea r8, str.DELETE
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.140007120
nop
cmp qword [rdi + 0x20], 0x10
jb 0x140006e89
mov r8, qword [rdi + 8]
jmp 0x140006e8d
lea r8, [rdi + 8]
cmp qword [rax + 0x20], 0x10
jb 0x140006e9a
mov rdx, qword [rax + 8]
jmp 0x140006e9e
lea rdx, [rax + 8]
lea rax, [rsp + 0x90]
mov qword [rsp + 0x28], rax
xor edi, edi
mov dword [rsp + 0x20], edi
lea r9, [0x1400ea665]
mov rcx, qword [rbx + 0x10]
call qword [rbx + MsiSetInternalUI]
mov ebx, eax
cmp qword [rsp + 0x50], 0x10
jb 0x140006ed6
mov rcx, qword [rsp + 0x38]
call fcn.140084dcc
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x48], rdi
mov byte [rsp + 0x38], 0
cmp qword [rsp + 0x80], 0x10
jb 0x140006efe
mov rcx, qword [rsp + 0x68]
call fcn.140084dcc
test ebx, ebx
setne al
jmp 0x140006f07
xor al, al
mov rcx, qword [rsp + 0x120]
xor rcx, rsp
call fcn.1400b09d0
mov rbx, qword [rsp + 0x150]
add rsp, 0x130
pop rdi
ret
Function at 0x140007290
Capabilities:
Link many functions at runtime

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
lea rcx, str.mvhlewsi.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
mov qword [rbx + 8], rax
je 0x14000736f
lea rdx, str.OpenEWSPort_W
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbx + 8]
lea rdx, str.OpenEWSPort_A
mov qword [rbx + 0x18], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbx + 8]
lea rdx, str.OpenEWS_W
mov qword [rbx + 0x20], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbx + 8]
lea rdx, str.OpenEWS_A
mov qword [rbx + 0x28], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbx + 8]
lea rdx, str.CloseEWS
mov qword [rbx + 0x30], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbx + 8]
lea rdx, str.EWSLastError
mov qword [rbx + 0x38], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbx + 8]
lea rdx, str.WriteEWS
mov qword [rbx + 0x40], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbx + 8]
lea rdx, str.ReadEWS
mov qword [rbx + 0x48], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbx + 8]
lea rdx, str.WriteReadEWS
mov qword [rbx + 0x50], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x58], rax
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp fcn.140006b00
Function at 0x14000c230
Capabilities:
Print debug messages

Disassembly:
mov rax, rsp
push rdi
sub rsp, 0x220
mov qword [rsp + 0x28], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov rsi, r8
mov rbx, rdx
mov rdi, rcx
lea rcx, [rsp + 0x30]
call fcn.140006910
nop
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14000c29a
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x248], rax
test rax, rax
je 0x14000c291
mov rcx, rax
call fcn.140050830
jmp 0x14000c293
xor eax, eax
mov qword [0x1401370f0], rax
lea rdx, str.GetPrinterInfoOld__
mov rcx, rax
call fcn.140050c00
mov r8, rbx
lea rdx, [rsp + 0x30]
mov rcx, rdi
call fcn.140008580
test eax, eax
jne 0x14000c2ea
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14000c2d3
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x14000c2d3
call rax
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14000c2e3
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
xor eax, eax
jmp 0x14000c42f
mov rbx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x40]
test rdi, rdi
je 0x14000c394
mov rax, qword [rsp + 0x1f0]
test rax, rax
jne 0x14000c35c
test rbx, rbx
je 0x14000c344
lea rdx, str.GetPrinterInformationW
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x1f0], rax
test rax, rax
jne 0x14000c35c
mov esi, 0x7f
mov dword [rsp + 0x30], esi
lea rcx, str.EWSIntf::get_printer_info:_Function_not_found_in_DLL:_GetPrinterInformationW_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x14000c398
mov esi, 6
mov dword [rsp + 0x30], esi
lea rcx, str.EWSIntf::get_printer_info:_Attempting_to_lookup_GetPrinterInformationW_with_no_DLL_handle_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x14000c398
mov rdx, rsi
mov rcx, rdi
call rax
test eax, eax
setne al
test al, al
je 0x14000c394
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x14000c37c
mov rcx, rdi
call rax
test rbx, rbx
je 0x14000c38a
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, 1
jmp 0x14000c42f
mov esi, dword [rsp + 0x30]
or ebp, 0xffffffff
test rdi, rdi
je 0x14000c3c4
mov rax, qword [rsp + 0x70]
test rax, rax
je 0x14000c3c6
lea rdx, [rsp + 0x248]
mov rcx, rdi
call rax
test eax, eax
je 0x14000c3c6
mov ebp, dword [rsp + 0x248]
jmp 0x14000c3c6
mov ebp, esi
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14000c3f9
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x20], rax
test rax, rax
je 0x14000c3f0
mov rcx, rax
call fcn.140050830
jmp 0x14000c3f2
xor eax, eax
mov qword [0x1401370f0], rax
lea r8, str.ewsinfo.get_printer_info___failed
mov edx, ebp
mov rcx, rax
call fcn.140050e40
nop
test rdi, rdi
je 0x14000c41f
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x14000c41f
mov rcx, rdi
call rax
test rbx, rbx
je 0x14000c42d
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
xor eax, eax
lea r11, [rsp + 0x220]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x14000c4b0
Capabilities:
Print debug messages

Disassembly:
mov rax, rsp
push rdi
sub rsp, 0x220
mov qword [rsp + 0x28], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov rsi, r8
mov rbx, rdx
mov rdi, rcx
lea rcx, [rsp + 0x30]
call fcn.140006910
nop
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14000c51a
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x248], rax
test rax, rax
je 0x14000c511
mov rcx, rax
call fcn.140050830
jmp 0x14000c513
xor eax, eax
mov qword [0x1401370f0], rax
mov r9, rsi
mov r8, rbx
lea rdx, str.SetPrinterLangID__s___s_
mov rcx, rax
call fcn.140050c00
mov r8, rbx
lea rdx, [rsp + 0x30]
mov rcx, rdi
call fcn.140008580
test eax, eax
jne 0x14000c570
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14000c559
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x14000c559
call rax
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14000c569
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
xor eax, eax
jmp 0x14000c6b5
mov rbx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x40]
test rdi, rdi
je 0x14000c61a
mov rax, qword [rsp + 0x188]
test rax, rax
jne 0x14000c5e2
test rbx, rbx
je 0x14000c5ca
lea rdx, str.SetPrinterLanguageW
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x188], rax
test rax, rax
jne 0x14000c5e2
mov esi, 0x7f
mov dword [rsp + 0x30], esi
lea rcx, str.EWSIntf::set_printer_language:_Function_not_found_in_DLL:_SetPrinterLanguageW_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x14000c61e
mov esi, 6
mov dword [rsp + 0x30], esi
lea rcx, str.EWSIntf::set_printer_language:_Attempting_to_lookup_SetPrinterLanguageW_with_no_DLL_handle_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x14000c61e
mov rdx, rsi
mov rcx, rdi
call rax
test eax, eax
setne al
test al, al
je 0x14000c61a
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x14000c602
mov rcx, rdi
call rax
test rbx, rbx
je 0x14000c610
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, 1
jmp 0x14000c6b5
mov esi, dword [rsp + 0x30]
or ebp, 0xffffffff
test rdi, rdi
je 0x14000c64a
mov rax, qword [rsp + 0x70]
test rax, rax
je 0x14000c64c
lea rdx, [rsp + 0x248]
mov rcx, rdi
call rax
test eax, eax
je 0x14000c64c
mov ebp, dword [rsp + 0x248]
jmp 0x14000c64c
mov ebp, esi
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14000c67f
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x20], rax
test rax, rax
je 0x14000c676
mov rcx, rax
call fcn.140050830
jmp 0x14000c678
xor eax, eax
mov qword [0x1401370f0], rax
lea r8, str.ewsinfo.set_printer_language___failed
mov edx, ebp
mov rcx, rax
call fcn.140050e40
nop
test rdi, rdi
je 0x14000c6a5
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x14000c6a5
mov rcx, rdi
call rax
test rbx, rbx
je 0x14000c6b3
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
xor eax, eax
lea r11, [rsp + 0x220]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x14000c730
Capabilities:
Print debug messages

Disassembly:
mov rax, rsp
push rdi
sub rsp, 0x220
mov qword [rsp + 0x28], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov rsi, r8
mov rbx, rdx
mov rdi, rcx
lea rcx, [rsp + 0x30]
call fcn.140006910
nop
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14000c79a
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x248], rax
test rax, rax
je 0x14000c791
mov rcx, rax
call fcn.140050830
jmp 0x14000c793
xor eax, eax
mov qword [0x1401370f0], rax
mov r8, rbx
lea rdx, str.SetWifiCredentials__s_
mov rcx, rax
call fcn.140050c00
mov r8, rbx
lea rdx, [rsp + 0x30]
mov rcx, rdi
call fcn.140008580
test eax, eax
jne 0x14000c7ed
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14000c7d6
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x14000c7d6
call rax
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14000c7e6
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
xor eax, eax
jmp 0x14000c92d
mov rbx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x40]
test rdi, rdi
je 0x14000c892
mov rax, qword [rsp + 0x108]
test rax, rax
jne 0x14000c85f
test rbx, rbx
je 0x14000c847
lea rdx, str.SetCredentials
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x108], rax
test rax, rax
jne 0x14000c85f
mov esi, 0x7f
mov dword [rsp + 0x30], esi
lea rcx, str.EWSIntf::set_credentials:_Function_not_found_in_DLL:_SetCredentials_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x14000c896
mov esi, 6
mov dword [rsp + 0x30], esi
lea rcx, str.EWSIntf::set_credentials:_Attempting_to_lookup_SetCredentials_with_no_DLL_handle_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x14000c896
mov rdx, rsi
mov rcx, rdi
call rax
test eax, eax
je 0x14000c892
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x14000c87a
mov rcx, rdi
call rax
test rbx, rbx
je 0x14000c888
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, 1
jmp 0x14000c92d
mov esi, dword [rsp + 0x30]
or ebp, 0xffffffff
test rdi, rdi
je 0x14000c8c2
mov rax, qword [rsp + 0x70]
test rax, rax
je 0x14000c8c4
lea rdx, [rsp + 0x248]
mov rcx, rdi
call rax
test eax, eax
je 0x14000c8c4
mov ebp, dword [rsp + 0x248]
jmp 0x14000c8c4
mov ebp, esi
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14000c8f7
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x20], rax
test rax, rax
je 0x14000c8ee
mov rcx, rax
call fcn.140050830
jmp 0x14000c8f0
xor eax, eax
mov qword [0x1401370f0], rax
lea r8, str.ewsinfo.set_credentials___failed
mov edx, ebp
mov rcx, rax
call fcn.140050e40
nop
test rdi, rdi
je 0x14000c91d
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x14000c91d
mov rcx, rdi
call rax
test rbx, rbx
je 0x14000c92b
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
xor eax, eax
lea r11, [rsp + 0x220]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x14000e1a0
Capabilities:
Print debug messages

Disassembly:
mov rax, rsp
push rdi
sub rsp, 0x220
mov qword [rsp + 0x28], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov rdi, r8
mov rbx, rdx
mov rsi, rcx
lea rcx, [rsp + 0x30]
call fcn.140006910
nop
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14000e20a
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x248], rax
test rax, rax
je 0x14000e201
mov rcx, rax
call fcn.140050830
jmp 0x14000e203
xor eax, eax
mov qword [0x1401370f0], rax
mov r8, rbx
lea rdx, str.GetWifiScanResultsOld__s_
mov rcx, rax
call fcn.140050c00
mov r8, rbx
lea rdx, [rsp + 0x30]
mov rcx, rsi
call fcn.140008580
test eax, eax
jne 0x14000e25d
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14000e246
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x14000e246
call rax
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14000e256
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
xor eax, eax
jmp 0x14000e3ad
xor edx, edx
mov r8d, 0x1bde
mov rcx, rdi
call fcn.1400b57e0
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
test rsi, rsi
je 0x14000e312
mov rax, qword [rsp + 0x158]
test rax, rax
jne 0x14000e2df
test rbx, rbx
je 0x14000e2c7
lea rdx, str.GetWifiScanResults
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x158], rax
test rax, rax
jne 0x14000e2df
mov edi, 0x7f
mov dword [rsp + 0x30], edi
lea rcx, str.EWSIntf::get_wifi_scan_results:_Function_not_found_in_DLL:_GetWifiScanResults_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x14000e316
mov edi, 6
mov dword [rsp + 0x30], edi
lea rcx, str.EWSIntf::get_wifi_scan_results:_Attempting_to_lookup_GetWifiScanResults_with_no_DLL_handle_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x14000e316
mov rdx, rdi
mov rcx, rsi
call rax
test eax, eax
je 0x14000e312
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x14000e2fa
mov rcx, rsi
call rax
test rbx, rbx
je 0x14000e308
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, 1
jmp 0x14000e3ad
mov edi, dword [rsp + 0x30]
or ebp, 0xffffffff
test rsi, rsi
je 0x14000e342
mov rax, qword [rsp + 0x70]
test rax, rax
je 0x14000e344
lea rdx, [rsp + 0x248]
mov rcx, rsi
call rax
test eax, eax
je 0x14000e344
mov ebp, dword [rsp + 0x248]
jmp 0x14000e344
mov ebp, edi
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14000e377
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x20], rax
test rax, rax
je 0x14000e36e
mov rcx, rax
call fcn.140050830
jmp 0x14000e370
xor eax, eax
mov qword [0x1401370f0], rax
lea r8, str.get_wifi_scan_results_failed
mov edx, ebp
mov rcx, rax
call fcn.140050e40
nop
test rsi, rsi
je 0x14000e39d
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x14000e39d
mov rcx, rsi
call rax
test rbx, rbx
je 0x14000e3ab
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
xor eax, eax
lea r11, [rsp + 0x220]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x14000e430
Capabilities:
Print debug messages

Disassembly:
push rbp
push rsi
push rdi
sub rsp, 0x220
mov qword [rsp + 0x28], 0xfffffffffffffffe
mov qword [rsp + 0x240], rbx
mov rbx, rdx
mov rdi, rcx
lea rcx, [rsp + 0x30]
call fcn.140006910
nop
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14000e493
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x250], rax
test rax, rax
je 0x14000e48a
mov rcx, rax
call fcn.140050830
jmp 0x14000e48c
xor eax, eax
mov qword [0x1401370f0], rax
mov r8, rbx
lea rdx, str.WifiIsEnabled__s_
mov rcx, rax
call fcn.140050c00
mov r8, rbx
lea rdx, [rsp + 0x30]
mov rcx, rdi
call fcn.140008580
test eax, eax
jne 0x14000e4e6
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14000e4cf
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x14000e4cf
call rax
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14000e4df
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
xor eax, eax
jmp 0x14000e641
mov rbx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x40]
test rdi, rdi
je 0x14000e5a6
mov rax, qword [rsp + 0x1d0]
test rax, rax
jne 0x14000e558
test rbx, rbx
je 0x14000e540
lea rdx, str.IsWirelessBoardEnabled
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x1d0], rax
test rax, rax
jne 0x14000e558
mov esi, 0x7f
mov dword [rsp + 0x30], esi
lea rcx, str.EWSIntf::is_wireless_enabled:_Function_not_found_in_DLL:_IsWirelessBoardEnabled_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x14000e5aa
mov esi, 6
mov dword [rsp + 0x30], esi
lea rcx, str.EWSIntf::is_wireless_enabled:_Attempting_to_lookup_IsWirelessBoardEnabled_with_no_DLL_handle_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x14000e5aa
mov dword [rsp + 0x250], 0
lea rdx, [rsp + 0x250]
mov rcx, rdi
call rax
test eax, eax
je 0x14000e5a6
cmp dword [rsp + 0x250], 0
setne al
movzx esi, al
mov rdx, qword [rsp + 0x68]
test rdx, rdx
je 0x14000e591
mov rcx, rdi
call rdx
test rbx, rbx
je 0x14000e59f
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, esi
jmp 0x14000e641
mov esi, dword [rsp + 0x30]
or ebp, 0xffffffff
test rdi, rdi
je 0x14000e5d6
mov rax, qword [rsp + 0x70]
test rax, rax
je 0x14000e5d8
lea rdx, [rsp + 0x258]
mov rcx, rdi
call rax
test eax, eax
je 0x14000e5d8
mov ebp, dword [rsp + 0x258]
jmp 0x14000e5d8
mov ebp, esi
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14000e60b
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x20], rax
test rax, rax
je 0x14000e602
mov rcx, rax
call fcn.140050830
jmp 0x14000e604
xor eax, eax
mov qword [0x1401370f0], rax
lea r8, str.ewsinfo.is_wireless_enabled__
mov edx, ebp
mov rcx, rax
call fcn.140050e40
nop
test rdi, rdi
je 0x14000e631
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x14000e631
mov rcx, rdi
call rax
test rbx, rbx
je 0x14000e63f
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
xor eax, eax
mov rbx, qword [rsp + 0x240]
add rsp, 0x220
pop rdi
pop rsi
pop rbp
ret
Function at 0x14000e6c0
Capabilities:
Print debug messages

Disassembly:
push rbp
push rsi
push rdi
sub rsp, 0x220
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov qword [rsp + 0x240], rbx
mov rbx, rdx
mov rdi, rcx
lea rcx, [rsp + 0x30]
call fcn.140006910
nop
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14000e723
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x250], rax
test rax, rax
je 0x14000e71a
mov rcx, rax
call fcn.140050830
jmp 0x14000e71c
xor eax, eax
mov qword [0x1401370f0], rax
mov r8, rbx
lea rdx, str.EnableWifiOld__s_
mov rcx, rax
call fcn.140050c00
mov r8, rbx
lea rdx, [rsp + 0x30]
mov rcx, rdi
call fcn.140008580
test eax, eax
jne 0x14000e776
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14000e75f
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x14000e75f
call rax
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14000e76f
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
xor eax, eax
jmp 0x14000e8c0
mov rbx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x40]
test rdi, rdi
je 0x14000e822
mov rax, qword [rsp + 0x1d8]
test rax, rax
jne 0x14000e7e8
test rbx, rbx
je 0x14000e7d0
lea rdx, str.EnableWirelessBoard
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x1d8], rax
test rax, rax
jne 0x14000e7e8
mov esi, 0x7f
mov dword [rsp + 0x30], esi
lea rcx, str.EWSIntf::enable_wireless_board:_Function_not_found_in_DLL:_EnableWirelessBoard_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x14000e826
mov esi, 6
mov dword [rsp + 0x30], esi
lea rcx, str.EWSIntf::enable_wireless_board:_Attempting_to_lookup_EnableWirelessBoard_with_no_DLL_handle_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x14000e826
mov edx, 1
mov rcx, rdi
call rax
test eax, eax
setne al
test al, al
je 0x14000e822
mov rdx, qword [rsp + 0x68]
test rdx, rdx
je 0x14000e80a
mov rcx, rdi
call rdx
test rbx, rbx
je 0x14000e818
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, 1
jmp 0x14000e8c0
mov esi, dword [rsp + 0x30]
or ebp, 0xffffffff
test rdi, rdi
je 0x14000e852
mov rax, qword [rsp + 0x70]
test rax, rax
je 0x14000e854
lea rdx, [rsp + 0x250]
mov rcx, rdi
call rax
test eax, eax
je 0x14000e854
mov ebp, dword [rsp + 0x250]
jmp 0x14000e854
mov ebp, esi
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14000e88a
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x258], rax
test rax, rax
je 0x14000e881
mov rcx, rax
call fcn.140050830
jmp 0x14000e883
xor eax, eax
mov qword [0x1401370f0], rax
lea r8, str.ewsinfo.enable_wireless_board__
mov edx, ebp
mov rcx, rax
call fcn.140050e40
nop
test rdi, rdi
je 0x14000e8b0
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x14000e8b0
mov rcx, rdi
call rax
test rbx, rbx
je 0x14000e8be
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
xor eax, eax
mov rbx, qword [rsp + 0x240]
add rsp, 0x220
pop rdi
pop rsi
pop rbp
ret
Function at 0x140019330
Capabilities:
Set registry value

Disassembly:
push rdi
sub rsp, 0x40
mov qword [rsp + 0x30], 0xfffffffffffffffe
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], rsi
mov rbx, rcx
lea rdi, [rcx + 0x208]
movsxd rdx, dword [rdi]
test edx, edx
jns 0x140019364
mov eax, 0x12
jmp 0x1400194a3
mov esi, dword [rcx + rdx*4 + 0x20c]
lea eax, [rdx - 1]
mov dword [rdi], eax
mov r10, qword [0x1401370f0]
test r10, r10
jne 0x1400193a7
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x50], rax
test rax, rax
je 0x14001939d
mov rcx, rax
call fcn.140050830
mov r10, rax
jmp 0x1400193a0
xor r10d, r10d
mov qword [0x1401370f0], r10
mov edx, esi
mov rcx, rbx
call fcn.140019210
mov r8, rax
mov r9d, esi
lea rdx, str._____POP_step__s___d_
mov rcx, r10
call fcn.140050c00
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x1400193f9
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x50], rax
test rax, rax
je 0x1400193f0
mov rcx, rax
call fcn.140050830
jmp 0x1400193f2
xor eax, eax
mov qword [0x1401370f0], rax
lea r9, str.SeqStack
lea r8, [rbx + 8]
lea rdx, str.SaveValueToHKLM__s__s
mov rcx, rax
call fcn.140050c00
lea rdx, [rbx + 8]
lea rcx, [rsp + 0x50]
call fcn.140048010
mov rbx, rax
test rax, rax
je 0x14001945a
mov dword [rsp + 0x28], 0x404
mov qword [rsp + 0x20], rdi
mov r9d, 3
xor r8d, r8d
lea rdx, str.SeqStack
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x1400194a1
mov rax, qword [0x1401370f0]
test rax, rax
jne 0x14001948d
mov ecx, 0x310
call fcn.140084d88
mov qword [rsp + 0x50], rax
test rax, rax
je 0x140019484
mov rcx, rax
call fcn.140050830
jmp 0x140019486
xor eax, eax
mov qword [0x1401370f0], rax
lea r8, str.SaveValueToHKLM__RegCreateKeyEx_failed
mov edx, 0x3f3
mov rcx, rax
call fcn.140050e40
mov eax, esi
mov rbx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
add rsp, 0x40
pop rdi
ret