joyce8/EMBER2024-capa huggingface dataset:
Function at 0x60059c0
Capabilities:
Read file on windows

Disassembly:
sub esp, 0x10
push ebx
push ebp
push esi
push edi
lea eax, [esp + 0x18]
xor ebx, ebx
mov ebp, str.E:_svneboot_dll_trunk_android_download.cpp
push str.Get_secured_mark_length...
mov esi, ecx
push eax
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], 0x487
call fcn.060010c0
add esp, 8
lea ecx, [esp + 0x10]
push ecx
call dword [esi + 0x8c]
test eax, eax
je 0x6005a26
mov dword [esi + 0x28], 0x36bf
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], 0x48c
push str.Get_secured_mark_len_callback_function_fail_
lea edx, [esp + 0x1c]
jmp 0x6005bdb
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x18]
push eax
push str.Read_image_header_0x_x_bytes__from_file_begin...
push ecx
mov dword [esp + 0x24], ebp
mov dword [esp + 0x28], 0x491
call fcn.060010c0
mov edx, dword [esp + 0x1c]
push edx
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
mov edi, eax
add esp, 0x10
cmp edi, ebx
je 0x6005bb6
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x24]
lea eax, [esp + 0x14]
push ebx
push eax
push ecx
push edi
push edx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x6005b7c
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
cmp eax, ecx
jne 0x6005b7c
lea ecx, [esp + 0x18]
push str.Check_secured_mark...
push ecx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], 0x4a7
call fcn.060010c0
mov edx, dword [esp + 0x18]
add esp, 8
push edx
push edi
call dword [esi + 0x90]
cmp eax, 2
jne 0x6005afa
lea eax, [esp + 0x18]
push str.No_secured_mark_found__common_image.
push eax
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], 0x4ab
call fcn.060010c0
add esp, 8
mov byte [esi + 0x84], bl
mov dword [esi + 0x88], ebx
push edi
call fcn.06017907
add esp, 4
mov al, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 4
cmp eax, ebx
jne 0x6005b42
lea ecx, [esp + 0x18]
push str.Secured_mark_matched__Secured_download.
push ecx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], 0x4b1
call fcn.060010c0
mov edx, dword [esp + 0x18]
add esp, 8
mov byte [esi + 0x84], 1
mov dword [esi + 0x88], edx
push edi
call fcn.06017907
add esp, 4
mov al, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 4
push edi
mov dword [esi + 0x28], 0x36bf
call fcn.06017907
add esp, 4
lea eax, [esp + 0x18]
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], 0x4b9
push str.Check_secured_mark_fail_
push eax
call fcn.060010c0
add esp, 8
xor al, al
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 4
push edi
mov dword [esi + 0x28], 0x36b8
call fcn.06017907
add esp, 4
lea ecx, [esp + 0x18]
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], 0x49a
push str.Read_image_file_fail_
push ecx
call fcn.060010c0
add esp, 8
xor al, al
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 4
push ebx
mov dword [esi + 0x28], 0x4e22
call fcn.06017907
add esp, 4
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], 0x4a2
lea edx, [esp + 0x18]
push str.Allocate_memory_fail_
push edx
call fcn.060010c0
add esp, 8
xor al, al
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 4
Function at 0x600ae00
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6017ed0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x20
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, ecx
mov dword [ebp - 0x10], esp
lea eax, [edi + edi*2]
mov dword [ebp - 0x14], esi
mov dword [ebp - 4], 0
mov dword [ebp - 0x2c], 0x444d4350
mov cl, byte [esi + eax*8 + 0xe1]
lea eax, [esi + eax*8]
cmp cl, 1
mov dword [ebp - 0x28], 0x5613a8c3
mov ebx, str.E:_svneboot_dll_trunk_android_download.cpp
jne 0x600ae7d
mov ecx, dword [eax + 0xcc]
lea edx, [ebp - 0x20]
push ecx
push str._s_need_verify_
push edx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], 0xd55
call fcn.060010c0
add esp, 0xc
mov byte [ebp - 0x24], 1
jmp 0x600aea3
mov eax, dword [eax + 0xcc]
lea ecx, [ebp - 0x20]
push eax
push str._s_neednt_verify_
push ecx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], 0xd5a
call fcn.060010c0
add esp, 0xc
mov byte [ebp - 0x24], 0
mov ecx, dword [esi + 0x68]
lea edx, [ebp + 8]
push 0
push edx
lea eax, [ebp - 0x2c]
push 0xc
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x600aefc
mov dword [esi + 0x28], 0x32cb
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], 0xd61
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push edi
lea edx, [ebp - 0x20]
push str.Write_DM_PATCH_CMD_PACKET_image__d___windows_error_Code_:__d__
push edx
call fcn.060010c0
add esp, 0x10
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp dword [ebp + 8], 0xc
je 0x600af26
mov dword [esi + 0x28], 0x32cd
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], 0xd68
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push edi
lea eax, [ebp - 0x20]
push str.Write_DM_PATCH_CMD_PACKET_image__d__length_is_not_correct__Windows_error_Code_:__d
push eax
jmp 0x600aedf
lea ecx, [ebp - 0x20]
push str.Send_patch_cmd_complete_
push ecx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], 0xd6c
call fcn.060010c0
mov ecx, dword [ebp - 0xc]
add esp, 8
mov al, 1
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x600b1a0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
sub esp, 0xa4
push esi
push edi
mov esi, ecx
call fcn.06011ca0
lea eax, [esp + 8]
mov edi, str.E:_svneboot_dll_trunk_android_download.cpp
push str.Read_sign_info_from_image_file
push eax
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], 0xdc4
call fcn.060010c0
mov eax, dword [esp + 0xb8]
add esp, 8
lea ecx, [esp + 0x10]
lea edx, [esp + 0x2c]
push 0
push ecx
push 0x80
push edx
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x600b239
mov dword [esi + 0x28], 0x36b8
mov dword [esp + 8], edi
mov dword [esp + 0xc], 0xdc9
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [esp + 0xc]
push str.Read_image_file_error_sign____error_Code_:__d__
push ecx
call fcn.060010c0
add esp, 0xc
lea ecx, [esp + 0x18]
call fcn.0600b340
lea edx, [esp + 0x18]
push 0x6019338
push edx
call sub.MSVCRT.dll__CxxThrowException
cmp dword [esp + 0x10], 0x80
jae 0x600b279
lea eax, [esp + 8]
push str.Read_image_file_error_sign____the_data_in_the_sign_part_error__
push eax
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], 0xdce
call fcn.060010c0
add esp, 8
lea ecx, [esp + 0x18]
call fcn.0600b340
lea ecx, [esp + 0x18]
push 0x6019338
push ecx
call sub.MSVCRT.dll__CxxThrowException
lea edx, [esp + 8]
push str.Write_the_signature_to_the_target
push edx
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], 0xdd2
call fcn.060010c0
mov edx, dword [esi + 0x68]
add esp, 8
lea eax, [esp + 0x14]
lea ecx, [esp + 0x2c]
push 0
push eax
push 0x80
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x600b2ef
mov dword [esi + 0x28], 0x36b9
mov dword [esp + 8], edi
mov dword [esp + 0xc], 0xdd8
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [esp + 0xc]
push str.WriteFile_Error_sign____Error_Code__d
push eax
call fcn.060010c0
add esp, 0xc
xor al, al
pop edi
pop esi
add esp, 0xa4
ret 4
cmp dword [esp + 0x14], 0x80
je 0x600b324
lea ecx, [esp + 8]
push str.The_length_of_WriteFile_data_Error_sign___
push ecx
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], 0xdde
call fcn.060010c0
add esp, 8
xor al, al
pop edi
pop esi
add esp, 0xa4
ret 4
pop edi
mov al, 1
pop esi
add esp, 0xa4
ret 4
Function at 0x600cf30
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6017f50
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x4c
push ebx
mov ebx, ecx
push esi
push edi
mov al, byte [ebx + 0x81]
mov dword [ebp - 0x10], esp
test al, al
mov dword [ebp - 0x18], ebx
mov dword [ebp - 4], 0
je 0x600d03f
mov edx, dword [ebx + 0x68]
mov ecx, 6
lea esi, [ebp - 0x58]
lea edi, [ebp - 0x3c]
mov dword [ebp - 0x54], 9
mov dword [ebp - 0x40], 0x50474d49
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x14]
push 0
push eax
lea ecx, [ebp - 0x40]
push 0x1c
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x600cfc7
mov dword [ebx + 0x28], 0x32cb
mov dword [ebp - 0x24], str.E:_svneboot_dll_trunk_android_download.cpp
mov dword [ebp - 0x20], 0x114b
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x24]
push str.Write_DM_IMAGE_INFO_PACKET_BC_lock___windows_error_Code_:__d__
push eax
jmp 0x600cff2
cmp dword [ebp - 0x14], 0x1c
je 0x600d00d
mov dword [ebx + 0x28], 0x32cd
mov dword [ebp - 0x24], str.E:_svneboot_dll_trunk_android_download.cpp
mov dword [ebp - 0x20], 0x1152
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Write_DM_IMAGE_INFO_PACKET_BC_lock__length_is_not_correct__Windows_error_Code_:__d
lea ecx, [ebp - 0x24]
push ecx
call fcn.060010c0
add esp, 0xc
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea edx, [ebp - 0x24]
push str.Send_lock_image_info_with_boundary_check_complete_
push edx
mov dword [ebp - 0x24], str.E:_svneboot_dll_trunk_android_download.cpp
mov dword [ebp - 0x20], 0x1156
call fcn.060010c0
add esp, 8
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [ebx + 0x68]
mov ecx, 5
lea esi, [ebp - 0x38]
lea edi, [ebp - 0x54]
mov dword [ebp - 0x34], 9
mov dword [ebp - 0x58], 0x50474d49
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x14]
push 0
push eax
lea ecx, [ebp - 0x58]
push 0x18
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x600d09e
mov dword [ebx + 0x28], 0x32cb
mov dword [ebp - 0x24], str.E:_svneboot_dll_trunk_android_download.cpp
mov dword [ebp - 0x20], 0x1163
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x24]
push str.Write_DM_IMAGE_INFO_PACKET_lock___windows_error_Code_:__d__
push eax
jmp 0x600cff2
cmp dword [ebp - 0x14], 0x18
je 0x600d0cd
mov dword [ebx + 0x28], 0x32cd
mov dword [ebp - 0x24], str.E:_svneboot_dll_trunk_android_download.cpp
mov dword [ebp - 0x20], 0x116a
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Write_DM_IMAGE_INFO_PACKET_lock__length_is_not_correct__Windows_error_Code_:__d
lea ecx, [ebp - 0x24]
jmp 0x600cff1
lea edx, [ebp - 0x24]
push str.Send_lock_image_info_complete_
push edx
mov dword [ebp - 0x24], str.E:_svneboot_dll_trunk_android_download.cpp
mov dword [ebp - 0x20], 0x116e
call fcn.060010c0
mov ecx, dword [ebp - 0xc]
add esp, 8
mov al, 1
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x600d130
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6017f60
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
push ebx
push esi
push edi
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], esp
mov dword [ebp + 8], 0x561c652d
lea esi, [ebp + 0x10]
mov edi, 0xd
mov ebx, str.E:_svneboot_dll_trunk_android_download.cpp
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push eax
push ecx
lea edx, [ebp - 0x24]
push str._d__d
push edx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], 0x1183
call fcn.060010c0
add esp, 0x10
add esi, 8
dec edi
jne 0x600d168
push 0x70
lea eax, [ebp - 0x24]
push str.sizeof:__d
push eax
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], 0x1185
call fcn.060010c0
mov esi, dword [ebp - 0x14]
add esp, 0xc
lea ecx, [ebp - 0x1c]
lea edx, [ebp + 8]
mov eax, dword [esi + 0x68]
push 0
push ecx
push 0x70
push edx
push eax
mov dword [ebp - 4], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x600d20f
mov dword [esi + 0x28], 0x32cb
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], 0x118b
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp - 0x24]
push str.Write_SecurityBitCtrl_YuSu_T__windows_error_Code_:__d__
push ecx
call fcn.060010c0
add esp, 0xc
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x70
cmp dword [ebp - 0x1c], 0x70
je 0x600d238
mov dword [esi + 0x28], 0x32cd
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], 0x1192
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea edx, [ebp - 0x24]
push str.Write_SecurityBitCtrl_YuSu_T_length_is_not_correct__Windows_error_Code_:__d
push edx
jmp 0x600d1f2
lea eax, [ebp - 0x24]
push str.Send_security_pkt_complete_
push eax
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], 0x1196
call fcn.060010c0
mov ecx, dword [ebp - 0xc]
add esp, 8
mov al, 1
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x70
Function at 0x600d2a0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6017f70
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x20
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
push edi
mov esi, ecx
xor edi, edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x18], esi
mov dword [ebp - 4], edi
push 0x28
inc edi
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, esi
call fcn.06011ca0
mov edx, dword [esi + 0x68]
lea eax, [ebp - 0x14]
push 0
push eax
lea ecx, [ebp - 0x24]
push 8
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x600d337
mov dword [esi + 0x28], 0x32c9
mov dword [ebp - 0x2c], str.E:_svneboot_dll_trunk_android_download.cpp
mov dword [ebp - 0x28], 0x11b5
call ebx
push eax
push str.Read_target_response_info_fail__windows_error_Code_:__d__
lea eax, [ebp - 0x2c]
push eax
call fcn.060010c0
add esp, 0xc
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [ebp - 0x14], 8
jne 0x600d3c2
cmp dword [ebp - 0x24], 0x50525245
je 0x600d38a
mov dword [esi + 0x28], 0x36b3
mov dword [ebp - 0x2c], str.E:_svneboot_dll_trunk_android_download.cpp
mov dword [ebp - 0x28], 0x11be
call ebx
mov ecx, dword [ebp - 0x24]
push eax
push ecx
lea edx, [ebp - 0x2c]
push str.Read_TARGET_RESP_INFO_error__0x_x__not_target_response_info_packet__Windows_error_Code_:__d
push edx
call fcn.060010c0
add esp, 0x10
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x600d3a4
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push eax
mov ecx, esi
call fcn.060066b0
mov dword [esi + 0x28], eax
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [ebp - 0x2c], str.E:_svneboot_dll_trunk_android_download.cpp
mov dword [ebp - 0x28], 0x11d3
call ebx
push eax
mov eax, dword [ebp - 0x14]
push eax
lea ecx, [ebp - 0x2c]
push str.Read_target_response_info_length__d_is_not_correct__Windows_error_Code_:__d
push ecx
call fcn.060010c0
add esp, 0x10
call ebx
test eax, eax
jne 0x600d433
cmp edi, 0x3e8
jl 0x600d2d1
lea edx, [ebp - 0x2c]
push str.Cannot_receive_target_response_info_
push edx
mov dword [esi + 0x28], 0x36b4
mov dword [ebp - 0x2c], str.E:_svneboot_dll_trunk_android_download.cpp
mov dword [ebp - 0x28], 0x11e4
call fcn.060010c0
mov ecx, dword [ebp - 0xc]
add esp, 8
xor al, al
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [esi + 0x28], 0x32c9
mov dword [ebp - 0x2c], str.E:_svneboot_dll_trunk_android_download.cpp
mov dword [ebp - 0x28], 0x11dc
call ebx
push eax
push str.Read_target_response_info_fail__windows_error_Code_:__d__
lea eax, [ebp - 0x2c]
jmp 0x600d31b
Function at 0x600d580
Capabilities:
Encode data using xor

Disassembly:
mov edx, dword [esp + 8]
xor ecx, ecx
test edx, edx
jle 0x600d5a3
mov al, byte [esp + 0xc]
push ebx
push esi
mov esi, dword [esp + 0xc]
mov bl, byte [ecx + esi]
xor al, bl
inc ecx
cmp ecx, edx
jl 0x600d594
pop esi
pop ebx
ret 0xc
mov al, byte [esp + 0xc]
ret 0xc
Function at 0x600d640
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6017f80
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x614
push ebx
push esi
mov esi, ecx
push edi
mov ecx, 0x17e
xor eax, eax
lea edi, [ebp - 0x620]
mov dword [ebp - 0x10], esp
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x618]
mov ecx, esi
push eax
mov dword [ebp - 0x1c], esi
call fcn.0600d5c0
mov ecx, dword [esi + 0x7c4]
lea edx, [ebp - 0x18]
mov ebx, str.E:_svneboot_dll_trunk_android_download.cpp
push 0x601d21c
push edx
mov dword [ebp - 0x61c], ecx
mov dword [ebp - 0x620], 0x504e5450
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0x126c
call fcn.060010c0
add esp, 8
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0x126d
push str._Partition_table_info_
push eax
call fcn.060010c0
mov eax, dword [ebp - 0x61c]
add esp, 8
xor edi, edi
test eax, eax
jbe 0x600d72c
lea esi, [ebp - 0x5d0]
mov eax, dword [esi - 4]
xor ecx, ecx
mov cl, byte [esi + 1]
xor edx, edx
mov dl, byte [esi]
push ecx
mov ecx, dword [esi - 8]
push edx
push eax
lea edx, [esi - 0x48]
push ecx
push edx
lea eax, [ebp - 0x18]
push str.Name:__s__Address:_0x_x__Length:_0x_x__Visibilty:__d__Selection:__d
push eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0x1270
call fcn.060010c0
mov eax, dword [ebp - 0x61c]
add esp, 0x1c
inc edi
add esi, 0x4c
cmp edi, eax
jb 0x600d6e9
mov esi, dword [ebp - 0x1c]
lea ecx, [ebp - 0x18]
push 0x602056c
push ecx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0x1274
call fcn.060010c0
add esp, 8
lea edx, [ebp - 0x18]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0x1275
push 0x601d21c
push edx
call fcn.060010c0
mov edx, dword [esi + 0x68]
add esp, 8
lea eax, [ebp - 0x20]
lea ecx, [ebp - 0x620]
push 0
push eax
push 0x5f8
push ecx
push edx
mov dword [ebp - 4], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x600d7c5
mov dword [esi + 0x28], 0x32cb
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0x127d
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x18]
push str.Write_DM_PARTITION_INFO_PACKET__windows_error_Code_:__d__
push eax
call fcn.060010c0
add esp, 0xc
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [ebp - 0x20], 0x5f8
je 0x600d7f1
mov dword [esi + 0x28], 0x32cd
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0x1284
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp - 0x18]
push str.Write_DM_PARTITION_INFO_PACKET_length_is_not_correct__Windows_error_Code_:__d
push ecx
jmp 0x600d7aa
lea edx, [ebp - 0x18]
push str.Send_DM_PARTITION_INFO_PACKET_completely_
push edx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0x1288
call fcn.060010c0
mov ecx, dword [ebp - 0xc]
add esp, 8
mov al, 1
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x600d850
Capabilities:
Write file on windows

Disassembly:
sub esp, 8
lea eax, [esp + 0xc]
push ebx
push esi
mov esi, dword [esp + 0x14]
push edi
mov ebx, ecx
push 0
push eax
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
mov ecx, dword [ebx + 0x68]
push esi
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x600d8bb
mov dword [ebx + 0x28], 0x36bc
mov dword [esp + 0xc], str.E:_svneboot_dll_trunk_android_download.cpp
mov dword [esp + 0x10], 0x129c
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push esi
lea edx, [esp + 0x14]
push str.Send_pattern__s_error___error_Code_:__d__
push edx
call fcn.060010c0
add esp, 0x10
xor al, al
pop edi
pop esi
pop ebx
add esp, 8
ret 4
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
mov edx, dword [esp + 0x18]
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp edx, ecx
je 0x600d90f
mov edi, esi
or ecx, 0xffffffff
mov dword [ebx + 0x28], 0x36bd
mov dword [esp + 0xc], str.E:_svneboot_dll_trunk_android_download.cpp
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0xc]
push ecx
push edx
push str.Send_pattern_size_error___actual_size:__d__expected_size:__d__
push eax
mov dword [esp + 0x20], 0x12a3
call fcn.060010c0
add esp, 0x10
xor al, al
pop edi
pop esi
pop ebx
add esp, 8
ret 4
pop edi
pop esi
mov al, 1
pop ebx
add esp, 8
ret 4

Function at 0x600e170
Capabilities:
Create process on windows

Disassembly:
push 0xffffffffffffffff
push 0x6017fa0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x7c
push esi
push edi
mov ecx, 0x11
xor eax, eax
lea edi, [esp + 0x40]
mov esi, dword [esp + 0x94]
rep stosd dword es:[edi], eax
mov ecx, 0x11
lea edi, [esp + 0x40]
mov dword [esp + 0x6c], 1
mov word [esp + 0x70], ax
rep stosd dword es:[edi], eax
mov dword [esp + 8], eax
lea ecx, [esp + 8]
mov dword [esp + 0xc], eax
lea edx, [esp + 0x40]
mov dword [esp + 0x10], eax
push ecx
push edx
push eax
push eax
push 0x8000000
push eax
push eax
push eax
push esi
push eax
mov dword [esp + 0x68], 0x44
mov dword [esp + 0x3c], eax
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
push 0x6022228
push 0
jne 0x600e237
push 0x47
push str.E:_svneboot_dll_trunkeboot.cpp
lea ecx, [esp + 0x28]
call fcn.06013920
mov ecx, dword [0x6022278]
push esi
push str.Create_Process__s_Fail
push ecx
push eax
mov dword [esp + 0x9c], 0
call fcn.060139a0
add esp, 0x10
mov dword [esp + 0x8c], 0xffffffff
lea ecx, [esp + 0x18]
jmp 0x600e277
push 0x4b
push str.E:_svneboot_dll_trunkeboot.cpp
lea ecx, [esp + 0x3c]
call fcn.06013920
mov edx, dword [0x6022278]
push esi
push str.Create_Process__s_Successful
push edx
push eax
mov dword [esp + 0x9c], 1
call fcn.060139a0
add esp, 0x10
mov dword [esp + 0x8c], 0xffffffff
lea ecx, [esp + 0x2c]
call fcn.06013990
mov ecx, dword [esp + 0x84]
pop edi
mov eax, 1
pop esi
mov dword fs:[0], ecx
add esp, 0x88
ret