joyce8/EMBER2024-capa huggingface dataset:
Function at 0x499c20
Capabilities:
Read .ini file

Disassembly:
sub esp, 0x10
mov eax, dword [0x5d72e0]
xor eax, esp
mov dword [esp + 0xc], eax
mov ecx, dword [ecx + 4]
push esi
xor eax, eax
push ecx
push 0xa
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], eax
mov word [esp + 0x14], ax
lea eax, [esp + 0xc]
push eax
push 0x57e9e8
push str.VideoWndTotal
push str.Monitor_note
xor esi, esi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
jbe 0x499c81
lea ecx, [esp + 4]
push ecx
call fcn.00531b2c
add esp, 4
pop esi
mov ecx, dword [esp + 0xc]
xor ecx, esp
call fcn.0053042b
add esp, 0x10
ret
mov ecx, dword [esp + 0x10]
mov eax, esi
pop esi
xor ecx, esp
call fcn.0053042b
add esp, 0x10
ret

Function at 0x499d30
Capabilities:
Read .ini file

Disassembly:
sub esp, 0x14
mov eax, dword [0x5d72e0]
xor eax, esp
mov dword [esp + 0x10], eax
push esi
mov esi, dword [esp + 0x20]
test esi, esi
push edi
mov edi, ecx
jne 0x499d5f
pop edi
xor al, al
pop esi
mov ecx, dword [esp + 0x10]
xor ecx, esp
call fcn.0053042b
add esp, 0x14
ret 0x10
mov ecx, dword [esp + 0x20]
xor eax, eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], eax
mov word [esp + 0x14], ax
mov eax, dword [esp + 0x2c]
push eax
push ecx
lea edx, [esp + 0x14]
push str.Wnd__d__d
push edx
call fcn.00530c72
mov eax, dword [edi + 4]
add esp, 0x10
push eax
mov eax, dword [esp + 0x2c]
push eax
push esi
lea ecx, [esp + 0x18]
push ecx
push str.Monitor_note
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStructA]
mov ecx, dword [esp + 0x18]
test eax, eax
mov al, byte [esi]
setne dl
neg al
sbb al, al
pop edi
pop esi
mov byte [esp], dl
xor ecx, esp
and eax, dword [esp]
call fcn.0053042b
add esp, 0x14
ret 0x10

Function at 0x499ef0
Capabilities:
Read .ini file

Disassembly:
sub esp, 0x104
mov eax, dword [0x5d72e0]
xor eax, esp
mov dword [esp + 0x100], eax
push esi
push 0x100
lea eax, [esp + 8]
push 0
push eax
mov esi, ecx
call fcn.00530d30
mov ecx, dword [esp + 0x118]
push ecx
lea edx, [esp + 0x14]
push str.Wnd__d_Sound
push edx
call fcn.00530c72
mov esi, dword [esi + 4]
add esp, 0x18
push esi
push 0
lea eax, [esp + 0xc]
push eax
push str.Monitor_note
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [esp + 0x104]
test eax, eax
setne al
pop esi
xor ecx, esp
call fcn.0053042b
add esp, 0x104
ret 4

Function at 0x49a170
Capabilities:
Read .ini file

Disassembly:
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov esi, ecx
mov eax, dword [esi + 4]
push eax
push 0
push str.AlarmShow
push str.Log_note
call edi
mov ecx, dword [esp + 0xc]
test eax, eax
setne al
mov byte [ecx], al
mov eax, dword [esi + 4]
push eax
push 0xf
push str.AlarmKeepDays
push str.Log_note
call edi
mov edx, dword [esp + 0x10]
mov dword [edx], eax
mov esi, dword [esi + 4]
push esi
push 7
push str.OperationKeepDays
push str.Log_note
call edi
mov ecx, dword [esp + 0x14]
pop edi
mov dword [ecx], eax
mov al, 1
pop esi
ret 0xc
Function at 0x49a230
Capabilities:
Read .ini file

Disassembly:
sub esp, 0x10
mov eax, dword [0x5d72e0]
xor eax, esp
mov dword [esp + 0xc], eax
push esi
xor eax, eax
push edi
mov esi, ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], eax
mov word [esp + 0x10], ax
mov eax, dword [esi + 4]
push eax
push 0xa
lea eax, [esp + 0x10]
push eax
push 0x57e9e8
push str.ToAvi
push str.ChangeRecPicPath
xor edi, edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
je 0x49a295
lea ecx, [esp + 8]
push ecx
call fcn.00531b2c
add esp, 4
pop edi
pop esi
mov ecx, dword [esp + 0xc]
xor ecx, esp
call fcn.0053042b
add esp, 0x10
ret
mov edx, dword [esi + 4]
push edx
push 0x58278c
push str.ToAvi
push str.ChangeRecPicPath
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [esp + 0x14]
mov eax, edi
pop edi
pop esi
xor ecx, esp
call fcn.0053042b
add esp, 0x10
ret

Function at 0x49a2d0
Capabilities:
Read .ini file

Disassembly:
sub esp, 0x10
mov eax, dword [0x5d72e0]
xor eax, esp
mov dword [esp + 0xc], eax
push esi
xor eax, eax
push edi
mov esi, ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], eax
mov word [esp + 0x10], ax
mov eax, dword [esi + 4]
push eax
push 0xa
lea eax, [esp + 0x10]
push eax
push 0x5814a0
push str.ExpandTree
push str.ChangeRecPicPath
xor edi, edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
je 0x49a328
lea ecx, [esp + 8]
push ecx
call fcn.00531b2c
add esp, 4
mov edi, eax
jmp 0x49a341
mov edx, dword [esi + 4]
push edx
push 0x5814a0
push str.ExpandTree
push str.ChangeRecPicPath
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [esp + 0x14]
test edi, edi
pop edi
setne al
pop esi
xor ecx, esp
call fcn.0053042b
add esp, 0x10
ret

Function at 0x49a360
Capabilities:
Read .ini file

Disassembly:
sub esp, 0x10
mov eax, dword [0x5d72e0]
xor eax, esp
mov dword [esp + 0xc], eax
push esi
xor eax, eax
push edi
mov esi, ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], eax
mov word [esp + 0x10], ax
mov eax, dword [esi + 4]
push eax
push 0xa
lea eax, [esp + 0x10]
push eax
push 0x58278c
push str.AutoLogin
push str.SystemLogin_Info
xor edi, edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
je 0x49a3b8
lea ecx, [esp + 8]
push ecx
call fcn.00531b2c
add esp, 4
mov edi, eax
jmp 0x49a3d1
mov edx, dword [esi + 4]
push edx
push 0x58278c
push str.AutoLogin
push str.SystemLogin_Info
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [esp + 0x14]
test edi, edi
pop edi
setne al
pop esi
xor ecx, esp
call fcn.0053042b
add esp, 0x10
ret
Function at 0x49a3f0
Capabilities:
Read .ini file

Disassembly:
sub esp, 0x10
mov eax, dword [0x5d72e0]
xor eax, esp
mov dword [esp + 0xc], eax
push esi
xor eax, eax
push edi
mov esi, ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], eax
mov word [esp + 0x10], ax
mov eax, dword [esi + 4]
push eax
push 0xa
lea eax, [esp + 0x10]
push eax
push 0x57e9e8
push str.ToPicture
push str.ChangeRecPicPath
xor edi, edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
je 0x49a455
lea ecx, [esp + 8]
push ecx
call fcn.00531b2c
add esp, 4
pop edi
pop esi
mov ecx, dword [esp + 0xc]
xor ecx, esp
call fcn.0053042b
add esp, 0x10
ret
mov edx, dword [esi + 4]
push edx
push 0x58278c
push str.ToPicture
push str.ChangeRecPicPath
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [esp + 0x14]
mov eax, edi
pop edi
pop esi
xor ecx, esp
call fcn.0053042b
add esp, 0x10
ret

Function at 0x49a490
Capabilities:
Read .ini file

Disassembly:
sub esp, 0x10
mov eax, dword [0x5d72e0]
xor eax, esp
mov dword [esp + 0xc], eax
push esi
xor eax, eax
push edi
mov esi, ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], eax
mov word [esp + 0x10], ax
mov eax, dword [esi + 4]
push eax
push 0xa
lea eax, [esp + 0x10]
push eax
push 0x57e9e8
push str.Try_Times
push str.ReConnect
xor edi, edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
je 0x49a4f5
lea ecx, [esp + 8]
push ecx
call fcn.00531b2c
add esp, 4
pop edi
pop esi
mov ecx, dword [esp + 0xc]
xor ecx, esp
call fcn.0053042b
add esp, 0x10
ret
mov edx, dword [esi + 4]
push edx
push 0x58278c
push str.Try_Times
push str.ReConnect
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [esp + 0x14]
mov eax, edi
pop edi
pop esi
xor ecx, esp
call fcn.0053042b
add esp, 0x10
ret

Function at 0x49a530
Capabilities:
Read .ini file

Disassembly:
sub esp, 0x10
mov eax, dword [0x5d72e0]
xor eax, esp
mov dword [esp + 0xc], eax
mov ecx, dword [ecx + 4]
push ebx
xor eax, eax
push ecx
push 0xa
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], eax
mov word [esp + 0x14], ax
lea eax, [esp + 0xc]
push eax
push 0x57e9e8
push str.bSupport
push str.Lock_Screen
xor bl, bl
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
je 0x49a596
lea ecx, [esp + 4]
push ecx
call fcn.00531b2c
add esp, 4
test eax, eax
setne al
pop ebx
mov ecx, dword [esp + 0xc]
xor ecx, esp
call fcn.0053042b
add esp, 0x10
ret
mov ecx, dword [esp + 0x10]
mov al, bl
pop ebx
xor ecx, esp
call fcn.0053042b
add esp, 0x10
ret
Function at 0x49a5b0
Capabilities:
Read .ini file

Disassembly:
sub esp, 0x10
mov eax, dword [0x5d72e0]
xor eax, esp
mov dword [esp + 0xc], eax
push ebx
push ebp
push esi
xor eax, eax
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov esi, ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
mov word [esp + 0x18], ax
mov eax, dword [esi + 4]
push eax
push 0xa
lea eax, [esp + 0x18]
push eax
push 0x57e9e8
push str.bEnable
push str.Lock_Screen
xor ebx, ebx
xor ebp, ebp
call edi
test eax, eax
je 0x49a60e
lea ecx, [esp + 0x10]
push ecx
call fcn.00531b2c
add esp, 4
mov ebp, eax
jmp 0x49a627
mov edx, dword [esi + 4]
push edx
push 0x58278c
push str.bEnable
push str.Lock_Screen
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
xor eax, eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
mov word [esp + 0x18], ax
mov eax, dword [esi + 4]
push eax
push 0xa
lea eax, [esp + 0x18]
push eax
push 0x57e9e8
push str.Lock_Min
push str.Lock_Screen
call edi
test eax, eax
je 0x49a667
lea ecx, [esp + 0x10]
push ecx
call fcn.00531b2c
add esp, 4
mov ebx, eax
jmp 0x49a680
mov edx, dword [esi + 4]
push edx
push 0x5814a0
push str.Lock_Min
push str.Lock_Screen
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [esp + 0x1c]
mov eax, ebp
pop edi
neg eax
sbb eax, eax
pop esi
and eax, ebx
pop ebp
pop ebx
xor ecx, esp
call fcn.0053042b
add esp, 0x10
ret

Function at 0x49a6d0
Capabilities:
Read .ini file

Disassembly:
sub esp, 0x10
mov eax, dword [0x5d72e0]
xor eax, esp
mov dword [esp + 0xc], eax
push esi
xor eax, eax
push edi
mov esi, ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], eax
mov word [esp + 0x10], ax
mov eax, dword [esi + 4]
push eax
push 0xa
lea eax, [esp + 0x10]
push eax
push 0x57e9e8
push str.bEnable
push str.AutoStream
xor edi, edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
je 0x49a735
lea ecx, [esp + 8]
push ecx
call fcn.00531b2c
add esp, 4
pop edi
pop esi
mov ecx, dword [esp + 0xc]
xor ecx, esp
call fcn.0053042b
add esp, 0x10
ret
mov edx, dword [esi + 4]
push edx
push 0x58278c
push str.bEnable
push str.AutoStream
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov ecx, dword [esp + 0x14]
mov eax, edi
pop edi
pop esi
xor ecx, esp
call fcn.0053042b
add esp, 0x10
ret

Function at 0x49a790
Capabilities:
Read .ini file

Disassembly:
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov esi, ecx
mov eax, dword [esi + 4]
push eax
push 0
push str.SyncType
push str.AutoSync
call edi
mov ecx, dword [esp + 0xc]
mov dword [ecx], eax
mov eax, dword [esi + 4]
push eax
push 0
push str.SyncTime
push str.AutoSync
call edi
mov edx, dword [esp + 0x10]
mov dword [edx], eax
mov esi, dword [esi + 4]
push esi
push 0
push str.SyncCheckType
push str.AutoSync
call edi
mov ecx, dword [esp + 0x14]
pop edi
mov dword [ecx], eax
pop esi
ret 0xc
Function at 0x49ab80
Capabilities:
Read .ini file

Disassembly:
push 0xffffffffffffffff
push 0x5724cb
mov eax, dword fs:[0]
push eax
sub esp, 0x10c
mov eax, dword [0x5d72e0]
xor eax, esp
mov dword [esp + 0x108], eax
push ebx
push esi
push edi
mov eax, dword [0x5d72e0]
xor eax, esp
push eax
lea eax, [esp + 0x11c]
mov dword fs:[0], eax
mov edi, dword [esp + 0x12c]
push str.Picture
mov esi, ecx
call fcn.00406b70
add eax, 4
push eax
lea eax, [esp + 0x18]
push eax
call fcn.00402100
add esp, 0xc
mov esi, dword [esi + 4]
push esi
push 0x104
lea ecx, [esp + 0x1c]
push ecx
push 0x57e9e8
push str.PicPath
push str.ChangeRecPicPath
mov dword [esp + 0x13c], 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [esp + 0x14]
test eax, eax
push 0x57e9e8
push edx
setne bl
call fcn.00530c5f
add esp, 8
test eax, eax
jne 0x49ac35
lea eax, [esp + 0x10]
push eax
mov ecx, edi
call fcn.00402060
jmp 0x49ac58
lea eax, [esp + 0x14]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x49ac40
sub eax, edx
push eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, edi
call fcn.00401840
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
mov dword [esp + 0x124], 0xffffffff
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x49ac83
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov al, bl
mov ecx, dword [esp + 0x11c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x108]
xor ecx, esp
call fcn.0053042b
add esp, 0x118
ret 4

Function at 0x49acb0
Capabilities:
Read .ini file

Disassembly:
push 0xffffffffffffffff
push 0x5724cb
mov eax, dword fs:[0]
push eax
sub esp, 0x10c
mov eax, dword [0x5d72e0]
xor eax, esp
mov dword [esp + 0x108], eax
push ebx
push esi
push edi
mov eax, dword [0x5d72e0]
xor eax, esp
push eax
lea eax, [esp + 0x11c]
mov dword fs:[0], eax
mov edi, dword [esp + 0x12c]
push str.Record
mov esi, ecx
call fcn.00406b70
add eax, 4
push eax
lea eax, [esp + 0x18]
push eax
call fcn.00402100
add esp, 0xc
mov esi, dword [esi + 4]
mov edx, dword [esp + 0x10]
push esi
push 0x104
lea ecx, [esp + 0x1c]
push ecx
push edx
push str.RecPath
push str.ChangeRecPicPath
mov dword [esp + 0x13c], 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
lea eax, [esp + 0x14]
push 0x57e9e8
push eax
setne bl
call fcn.00530c5f
add esp, 8
test eax, eax
jne 0x49ad65
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
call fcn.00402060
jmp 0x49ad88
lea eax, [esp + 0x14]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x49ad70
sub eax, edx
push eax
lea edx, [esp + 0x18]
push edx
mov ecx, edi
call fcn.00401840
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
mov dword [esp + 0x124], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x49adb3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov al, bl
mov ecx, dword [esp + 0x11c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x108]
xor ecx, esp
call fcn.0053042b
add esp, 0x118
ret 4
Function at 0x49ade0
Capabilities:
Read .ini file

Disassembly:
sub esp, 0x204
mov eax, dword [0x5d72e0]
xor eax, esp
mov dword [esp + 0x200], eax
push ebx
push ebp
mov ebp, dword [esp + 0x214]
push esi
push edi
mov edi, dword [esp + 0x218]
push 0x100
lea eax, [esp + 0x14]
push 0
push eax
mov esi, ecx
call fcn.00530d30
mov eax, dword [esi + 4]
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
add esp, 0xc
push eax
push 0x100
lea ecx, [esp + 0x18]
push ecx
push 0x57e9e8
push str.Domain
push str.DDNS
call ebx
test eax, eax
jne 0x49ae4c
mov eax, 0xfffffffd
jmp 0x49aec7
lea eax, [esp + 0x10]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x49ae53
sub eax, edx
push eax
lea edx, [esp + 0x14]
push edx
mov ecx, edi
call fcn.00401840
push 0x100
lea eax, [esp + 0x114]
push 0
push eax
call fcn.00530d30
mov esi, dword [esi + 4]
add esp, 0xc
push esi
push 0x100
lea ecx, [esp + 0x118]
push ecx
push 0x57e9e8
push str.Port
push str.DDNS
call ebx
test eax, eax
jne 0x49aeaf
mov eax, 0xfffffffc
jmp 0x49aec7
lea edx, [esp + 0x110]
push edx
call fcn.00531b2c
mov dword [ebp], eax
add esp, 4
mov eax, 1
mov ecx, dword [esp + 0x210]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0053042b
add esp, 0x204
ret 8

Function at 0x49aef0
Capabilities:
Read .ini file

Disassembly:
push 0xffffffffffffffff
push 0x5724cb
mov eax, dword fs:[0]
push eax
sub esp, 0x10c
mov eax, dword [0x5d72e0]
xor eax, esp
mov dword [esp + 0x108], eax
push ebx
push esi
push edi
mov eax, dword [0x5d72e0]
xor eax, esp
push eax
lea eax, [esp + 0x11c]
mov dword fs:[0], eax
mov edi, dword [esp + 0x12c]
push str.Download
mov esi, ecx
call fcn.00406b70
add eax, 4
push eax
lea eax, [esp + 0x18]
push eax
call fcn.00402100
add esp, 0xc
mov esi, dword [esi + 4]
mov edx, dword [esp + 0x10]
push esi
push 0x104
lea ecx, [esp + 0x1c]
push ecx
push edx
push str.Path
push str.Time_Download
mov dword [esp + 0x13c], 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
lea eax, [esp + 0x14]
push 0x57e9e8
push eax
setne bl
call fcn.00530c5f
add esp, 8
test eax, eax
jne 0x49afa5
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
call fcn.00402060
jmp 0x49afc8
lea eax, [esp + 0x14]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x49afb0
sub eax, edx
push eax
lea edx, [esp + 0x18]
push edx
mov ecx, edi
call fcn.00401840
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
mov dword [esp + 0x124], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x49aff3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov al, bl
mov ecx, dword [esp + 0x11c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x108]
xor ecx, esp
call fcn.0053042b
add esp, 0x118
ret 4

Function at 0x49eec0
Capabilities:
Hide graphical window

Disassembly:
mov eax, dword [ecx + 0xec]
mov dword [ecx + 0xf0], eax
mov dword [ecx + 0xec], 2
mov ecx, dword [ecx + 4]
push 0
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, 1
ret
Function at 0x49f2b0
Capabilities:
Read .ini file

Disassembly:
sub esp, 0x18
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push ebp
push esi
push edi
mov edi, dword [esp + 0x2c]
mov eax, dword [edi]
push eax
push 0
push str.Dlg_TopTopHeight
push str.Personality
mov esi, ecx
call ebx
mov ecx, dword [esi + 0x24]
mov ebp, dword [sym.imp.GDI32.dll_GetObjectA]
mov dword [esi + 0x5c], eax
xor eax, eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
lea eax, [esp + 0x10]
push eax
push 0x18
push ecx
call ebp
mov eax, dword [edi]
mov edx, dword [esp + 0x14]
push eax
push 0
push str.Dlg_TopBotHeight
push str.Personality
mov dword [esp + 0x3c], edx
call ebx
mov ecx, dword [esp + 0x2c]
sub ecx, eax
mov eax, dword [esi + 0x5c]
cmp ecx, eax
mov dword [esi + 0x60], ecx
jg 0x49f333
add eax, 1
mov dword [esi + 0x60], eax
mov eax, dword [edi]
push eax
push 0
push str.Dlg_LeftTopHeight
push str.Personality
call ebx
mov ecx, dword [esi + 0x2c]
mov dword [esi + 0x64], eax
xor eax, eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
lea eax, [esp + 0x10]
push eax
push 0x18
push ecx
call ebp
mov eax, dword [edi]
mov edx, dword [esp + 0x18]
push eax
push 0
push str.Dlg_LeftBotHeight
push str.Personality
mov dword [esp + 0x3c], edx
call ebx
mov ecx, dword [esp + 0x2c]
sub ecx, eax
mov eax, dword [esi + 0x64]
cmp ecx, eax
mov dword [esi + 0x68], ecx
jg 0x49f39d
add eax, 1
mov dword [esi + 0x68], eax
mov eax, dword [edi]
push eax
push 0
push str.Dlg_RightTopHeight
push str.Personality
call ebx
mov ecx, dword [esi + 0x34]
mov dword [esi + 0x6c], eax
xor eax, eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
lea eax, [esp + 0x10]
push eax
push 0x18
push ecx
call ebp
mov eax, dword [edi]
mov edx, dword [esp + 0x18]
push eax
push 0
push str.Dlg_RightBotHeight
push str.Personality
mov dword [esp + 0x3c], edx
call ebx
mov ecx, dword [esp + 0x2c]
sub ecx, eax
mov eax, dword [esi + 0x6c]
cmp ecx, eax
mov dword [esi + 0x70], ecx
jg 0x49f407
add eax, 1
mov dword [esi + 0x70], eax
mov eax, dword [edi]
push eax
push 0
push str.Dlg_BottomTopHeight
push str.Personality
call ebx
mov ecx, dword [esi + 0x3c]
mov dword [esi + 0x74], eax
xor eax, eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
lea eax, [esp + 0x10]
push eax
push 0x18
push ecx
call ebp
mov edi, dword [edi]
mov ebp, dword [esp + 0x14]
push edi
push 0
push str.Dlg_BottomBotHeight
push str.Personality
call ebx
mov ecx, ebp
sub ecx, eax
mov eax, dword [esi + 0x74]
cmp ecx, eax
mov dword [esi + 0x78], ecx
jg 0x49f46b
add eax, 1
mov dword [esi + 0x78], eax
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x18
ret 4
Function at 0x49f620
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x28
push ebx
xor eax, eax
push ebp
push esi
push edi
mov edi, dword [esp + 0x40]
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
lea eax, [esp + 0x20]
push eax
mov esi, ecx
mov ecx, dword [esi + 0x3c]
push 0x18
push ecx
mov dword [esp + 0x4c], edi
call dword [sym.imp.GDI32.dll_GetObjectA]
mov eax, dword [esp + 0x48]
sub eax, dword [esp + 0x24]
mov ecx, dword [esi + 0x74]
mov ebx, dword [esi + 0x78]
sub ebx, ecx
cdq
idiv ebx
mov ebx, eax
add ebx, 1
jns 0x49f678
xor ebx, ebx
mov ebp, dword [esi + 0x110]
xor edx, edx
xor eax, eax
mov dword [esp + 0x14], edx
lea edx, [esp + 0x10]
push edx
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x48]
push eax
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x24], ebp
push edi
lea ebp, [esi + 0x38]
push ecx
mov ecx, ebp
call fcn.004a3810
mov ecx, dword [esi + 0x74]
mov eax, dword [esi + 0x78]
xor edx, edx
mov dword [esp + 0x14], edx
mov edx, dword [esi + 0x110]
add edi, ecx
test ebx, ebx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], edx
jl 0x49f70b
sub eax, ecx
add ebx, 1
sub eax, dword [esp + 0x40]
sub eax, dword [esp + 0x48]
add eax, edi
test eax, eax
jle 0x49f6e7
sub dword [esp + 0x18], eax
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x3c]
lea edx, [esp + 0x10]
push edx
push eax
push edi
push ecx
mov ecx, ebp
call fcn.004a3810
mov eax, dword [esi + 0x78]
sub eax, dword [esi + 0x74]
add edi, eax
sub ebx, 1
jne 0x49f6d5
mov ebx, dword [sym.imp.GDI32.dll_GetObjectA]
xor eax, eax
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov eax, dword [esi + 0x3c]
push 0x18
push eax
call ebx
mov edi, dword [esi + 0x78]
sub edi, dword [esp + 0x24]
mov edx, dword [esi + 0x3c]
add edi, dword [esp + 0x40]
xor eax, eax
add edi, dword [esp + 0x48]
lea ecx, [esp + 0x20]
push ecx
push 0x18
push edx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
call ebx
mov eax, dword [esi + 0x78]
mov edx, dword [esp + 0x24]
mov esi, dword [esi + 0x110]
xor ecx, ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x44]
lea eax, [esp + 0x10]
push eax
add edx, 0xffffffff
push ecx
mov dword [esp + 0x20], edx
mov edx, dword [esp + 0x44]
push edi
push edx
mov ecx, ebp
mov dword [esp + 0x2c], esi
call fcn.004a3810
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x28
ret 0x14