joyce8/EMBER2024-capa huggingface dataset:
Function at 0x421c10
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56b6db
mov eax, dword fs:[0]
push eax
sub esp, 0x114
push ebx
push esi
push edi
mov eax, dword [0x5e2500]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
call fcn.00511e8b
mov edi, dword [sym.imp.USER32.dll_GetParent]
mov dword [ebp - 0x14], eax
mov eax, dword [esi + 0x20]
push eax
call edi
push eax
call fcn.0045a881
mov ecx, eax
call fcn.0041f4d0
cmp eax, 1
jne 0x421dc8
push 0x580060
lea ecx, [ebp - 0x10]
call fcn.00404670
lea ecx, [ebp - 0x18]
push ecx
xor ebx, ebx
mov ecx, 0x5e3c90
mov dword [ebp - 4], ebx
call fcn.004261a0
mov esi, dword [eax]
mov edx, dword [ebp - 0x10]
mov eax, dword [edx - 8]
mov ecx, 1
sub ecx, dword [edx - 4]
mov edi, 0x400
sub eax, edi
or eax, ecx
mov byte [ebp - 4], 1
jge 0x421cb2
push edi
lea ecx, [ebp - 0x10]
call fcn.00401de0
mov edx, dword [ebp - 0x10]
mov eax, edx
cmp dword [edx - 8], edi
jge 0x421cc3
push 0x80070057
call fcn.00401330
push esi
push edi
push eax
push 0x580060
mov dword [edx - 0xc], edi
mov ecx, dword [ebp - 0x10]
push str.LanguageDialog
xor edx, edx
push str.Dialogs
mov word [ecx + 0x800], dx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
or esi, 0xffffffff
mov byte [ebp - 4], bl
lea edx, [eax + 0xc]
mov ecx, esi
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x421d0e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax - 8]
push ecx
push eax
call fcn.0054d87f
add esp, 8
cmp eax, ebx
jl 0x421cb9
mov ecx, dword [ebp - 0x10]
cmp eax, dword [ecx - 8]
jg 0x421cb9
mov dword [ecx - 0xc], eax
mov edx, dword [ebp - 0x10]
xor ecx, ecx
mov word [edx + eax*2], cx
lea eax, [ebp - 0x10]
push eax
push 0x580348
call fcn.00401b60
add esp, 8
test al, al
je 0x421da7
push 0x5e3b74
push 0x580348
call fcn.00401b00
add esp, 8
test al, al
je 0x421da7
cmp dword [0x5e3a7c], ebx
jne 0x421da7
push ebx
lea ecx, [ebp - 0x120]
call fcn.00409970
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 2
call fcn.0045332b
cmp eax, 1
jne 0x421d90
mov dword [0x5e3a7c], eax
jmp 0x421d99
mov dword [0x5e3a7c], ebx
mov dword [ebp - 0x14], esi
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], bl
call fcn.004098a0
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
mov dword [ebp - 4], esi
lea ecx, [eax + 0xc]
lock xadd dword [ecx], esi
dec esi
test esi, esi
jg 0x421deb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x421deb
mov ecx, dword [esi + 0x20]
push ecx
call edi
push eax
call fcn.0045a881
mov edx, dword [0x5e3a58]
add edx, 0xa44
push edx
mov ecx, eax
call fcn.0044d5b0
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x4220b0
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56b798
mov eax, dword fs:[0]
push eax
sub esp, 0x10
mov eax, dword [0x5e2500]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp + 8]
call fcn.00401f20
movzx eax, al
test eax, eax
jne 0x4222d8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
push edx
push str.Command_line_parameter_for_Autolaunch_:__s
push 0x585a28
push 8
push 0x5e3e78
call fcn.0042b490
add esp, 0x14
push 0x585a58
lea ecx, [ebp - 0x14]
call fcn.00404670
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x1c]
add ecx, 0x1c
call fcn.004018f0
push eax
push 0x400
push 0x400
lea ecx, [ebp - 0x14]
call fcn.004025f0
push eax
push 0x585a5c
push 0x585a60
push 0x585a78
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov dword [ebp - 0x10], eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x14]
call fcn.00401cf0
push 0x585a88
lea ecx, [ebp - 0x18]
call fcn.00404670
mov byte [ebp - 4], 1
lea eax, [ebp - 0x14]
push eax
push 0x585a8c
call fcn.00401b00
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x4221c8
mov ecx, dword [ebp - 0x1c]
add ecx, 0x1c
call fcn.004018f0
push eax
push 0x400
push 0x400
lea ecx, [ebp - 0x18]
call fcn.004025f0
push eax
push 0x585a90
push 0x585a94
push 0x585aac
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x18]
call fcn.00401cf0
jmp 0x422206
mov ecx, dword [ebp - 0x1c]
add ecx, 0x1c
call fcn.004018f0
push eax
push 0x400
push 0x400
lea ecx, [ebp - 0x18]
call fcn.004025f0
push eax
push 0x585abc
push str.AutoLaunch
push 0x585ad8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x18]
call fcn.00401cf0
lea ecx, [ebp - 0x18]
call fcn.00401f20
movzx edx, al
test edx, edx
jne 0x4222a4
push 0x585ae8
mov ecx, dword [ebp + 8]
call fcn.00401ad0
test eax, eax
jne 0x422251
push 0
mov ecx, 0x5e3c90
call fcn.00425aa0
push str.Autolaunch_disabled
push 0x585b18
push 8
push 0x5e3e78
call fcn.0042b490
add esp, 0x10
jmp 0x4222a2
push 0x585b68
mov ecx, dword [ebp + 8]
call fcn.00401ad0
test eax, eax
jne 0x42227d
push str.Autolaunch_enabled
push 0x585b98
push 8
push 0x5e3e78
call fcn.0042b490
add esp, 0x10
jmp 0x422296
push str.Invalid_value_for_Autolaunch._Autolaunch_is_enabled_by_default
push 0x585c68
push 8
push 0x5e3e78
call fcn.0042b490
add esp, 0x10
push 1
mov ecx, 0x5e3c90
call fcn.00425aa0
jmp 0x4222bd
push str.Autolaunch_is_not_enabled_for_the_Web_Package
push str.ValidateAndSetAutolaunchFromCommandLine
push 8
push 0x5e3e78
call fcn.0042b490
add esp, 0x10
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x18]
call fcn.00402000
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00402000
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret 4
Function at 0x423570
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56b9a2
mov eax, dword fs:[0]
push eax
sub esp, 0x120
mov eax, dword [0x5e2500]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x14], 1
lea ecx, [ebp - 0x1c]
call fcn.00401fd0
mov dword [ebp - 4], 0
mov byte [ebp - 0x15], 0
mov ecx, dword [ebp - 0x11c]
add ecx, 0x1c
call fcn.004018f0
push eax
push 0x400
push 0x400
lea ecx, [ebp - 0x1c]
call fcn.004025f0
push eax
push 0x586454
push 0x5864ac
push 0x5864d0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov dword [ebp - 0x10], eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x1c]
call fcn.00401cf0
lea ecx, [ebp - 0x1c]
call fcn.00401ce0
test eax, eax
jle 0x423721
mov eax, dword [ebp - 0x11c]
add eax, 0x1c
push ecx
mov ecx, esp
mov dword [ebp - 0x110], esp
push eax
call fcn.004025c0
mov dword [ebp - 0x120], eax
lea ecx, [ebp - 0x10c]
call fcn.00441250
mov dword [ebp - 0x124], eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp + 8]
push ecx
lea ecx, [ebp - 0x10c]
call fcn.00441360
lea ecx, [ebp - 0x10c]
call fcn.004418f0
movzx edx, byte [ebp - 0x15]
push edx
lea ecx, [ebp - 0x10c]
call fcn.00441b00
mov byte [ebp - 0x15], 1
movzx eax, byte [ebp - 0x15]
push eax
lea ecx, [ebp - 0x10c]
call fcn.00441b00
lea ecx, [ebp - 0x10c]
call fcn.00441dc0
lea ecx, [ebp - 0x10c]
call fcn.004421c0
lea ecx, [ebp - 0x10c]
call fcn.004422f0
lea ecx, [ebp - 0x10c]
call fcn.00443ae0
lea ecx, [ebp - 0x10c]
call fcn.00443b40
mov ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0x114]
push edx
lea ecx, [ebp - 0x10c]
call fcn.00443d90
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x12c], eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x12c]
push ecx
mov ecx, dword [ebp - 0x11c]
add ecx, 0xc
call fcn.00403d00
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x114]
call fcn.00402000
lea ecx, [ebp - 0x10c]
call fcn.00443ca0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x10c]
call fcn.00444df0
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x118], edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c]
call fcn.00402000
mov eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret 4
Function at 0x423750
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56b9d0
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
mov eax, dword [0x5e2500]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], ecx
lea ecx, [ebp - 0x10]
call fcn.00401fd0
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x1c]
add ecx, 0x1c
call fcn.004018f0
push eax
push 0x400
push 0x400
lea ecx, [ebp - 0x10]
call fcn.004025f0
push eax
push 0x5864e8
push str.SetupLanguages
push str.Languages
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x10]
call fcn.00401cf0
lea ecx, [ebp - 0x10]
call fcn.00401f20
movzx eax, al
test eax, eax
je 0x4237e8
push str.SetupLanguages_not_found.
push 8
push 0x5e3e78
call fcn.0042b840
add esp, 0xc
mov ecx, dword [ebp + 8]
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x586554
call fcn.00404670
mov dword [ebp - 0x20], eax
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x24], edx
mov byte [ebp - 4], 1
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
lea eax, [ebp - 0x10]
push eax
call fcn.004025c0
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 0
mov ecx, 0x5e3e60
call fcn.0042eac0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.00402000
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret 4
Function at 0x425280
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56bd9f
mov eax, dword fs:[0]
push eax
push ecx
mov eax, dword [0x5e2500]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x10]
mov dword [eax], vtable.CSiWAInitalizer.0
mov ecx, dword [ebp - 0x10]
add ecx, 8
call fcn.00401fd0
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x10]
add ecx, 0xc
call fcn.00401fd0
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x10]
add ecx, 0x10
call fcn.00401fd0
mov byte [ebp - 4], 2
push 0xa
mov ecx, dword [ebp - 0x10]
add ecx, 0x14
call fcn.00455312
mov byte [ebp - 4], 3
push 0xa
mov ecx, dword [ebp - 0x10]
add ecx, 0x30
call fcn.00455312
mov byte [ebp - 4], 4
push 0xa
mov ecx, dword [ebp - 0x10]
add ecx, 0x4c
call fcn.00455312
mov byte [ebp - 4], 5
push 0xa
mov ecx, dword [ebp - 0x10]
add ecx, 0x68
call fcn.00455312
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x10]
add ecx, 0x88
call fcn.00402060
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x10]
add ecx, 0x9c
call fcn.00401fd0
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x10]
add ecx, 0xa0
call fcn.00401fd0
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x10]
add ecx, 0xa4
call fcn.00401fd0
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x10]
add ecx, 0xa8
call fcn.00401fd0
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x10]
add ecx, 0xac
call fcn.00401fd0
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x10]
add ecx, 0xb0
call fcn.00401fd0
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0xf0], 0
mov edx, dword [ebp - 0x10]
mov eax, dword [0x5dd658]
mov dword [edx + 0xd8], eax
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0xbc], 0
push 0x586cd0
mov ecx, dword [ebp - 0x10]
add ecx, 0x10
call fcn.00403fc0
push 0x586cd4
mov ecx, dword [ebp - 0x10]
add ecx, 0xa4
call fcn.00403fc0
mov edx, dword [ebp - 0x10]
mov dword [edx + 0xb4], 0
push 0x586cd8
mov ecx, dword [ebp - 0x10]
add ecx, 0x9c
call fcn.00403fc0
mov eax, dword [ebp - 0x10]
mov dword [eax + 0xd0], 0
mov dword [eax + 0xd4], 1
mov ecx, dword [ebp - 0x10]
mov edx, dword [0x5dd660]
mov dword [ecx + 0xe0], edx
mov eax, dword [ebp - 0x10]
mov dword [eax + 0xf4], 0
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0xec], 0
mov edx, dword [ebp - 0x10]
mov dword [edx + 0xc0], 0
mov eax, dword [ebp - 0x10]
mov dword [eax + 0xe4], 0
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0xfc], 1
mov edx, dword [ebp - 0x10]
mov dword [edx + 0x98], 0x1fe
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret
Function at 0x4254a0
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56bdd2
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
mov eax, dword [0x5e2500]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x20], ecx
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp + 0x20]
mov dword [eax + 0x98], ecx
push str.CSiWAInitalizer::Init
lea ecx, [ebp - 0x14]
call fcn.00404670
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x20]
call fcn.00426110
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0x20]
add eax, 0xa4
push eax
mov ecx, dword [ebp - 0x20]
call fcn.00427710
push 0x586d08
lea ecx, [ebp - 0x10]
call fcn.00404670
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x20]
add ecx, 0xa0
call fcn.004018f0
push eax
push 0x400
push 0x400
lea ecx, [ebp - 0x10]
call fcn.004025f0
push eax
push 0x586d0c
push str.FrameVersion
push 0x586d2c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x10]
call fcn.00401cf0
push 0x586d38
lea ecx, [ebp - 0x10]
call fcn.004018f0
push eax
push str.SiWA_Masterframe_Version
push 8
push 0x5e3e78
call fcn.0042b490
add esp, 0x14
mov ecx, dword [ebp - 0x20]
cmp dword [ecx + 0x98], 0x212
jne 0x4255ac
push 0x586d70
push str.Silent
push 0x586d84
push 8
push 0x5e3e78
call fcn.0042b490
add esp, 0x14
jmp 0x4255f9
mov edx, dword [ebp - 0x20]
cmp dword [edx + 0x98], 0x208
jne 0x4255db
push 0x586d98
push str.Unattended
push 0x586db4
push 8
push 0x5e3e78
call fcn.0042b490
add esp, 0x14
jmp 0x4255f9
push 0x586dc8
push str.Full_GUI
push str.GUI_Mode
push 8
push 0x5e3e78
call fcn.0042b490
add esp, 0x14
push str.Initializing_the_package_settings
lea ecx, [ebp - 0x14]
call fcn.004018f0
push eax
push 8
push 0x5e3e78
call fcn.0042b490
add esp, 0x10
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp - 0x20]
call fcn.00425dd0
mov ecx, dword [ebp - 0x20]
call fcn.00426050
mov ecx, dword [ebp - 0x20]
add ecx, 0xa0
push ecx
mov ecx, 0x5e3c6c
call fcn.00421ec0
mov ecx, dword [ebp - 0x20]
call fcn.00428000
mov ecx, dword [ebp - 0x20]
call fcn.00426ff0
mov ecx, dword [ebp - 0x20]
call fcn.00425bc0
mov ecx, dword [ebp - 0x20]
call fcn.00425ae0
mov ecx, dword [ebp - 0x20]
call fcn.00425890
mov edx, dword [ebp - 0x20]
cmp dword [edx + 0xbc], 1
jne 0x42567e
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp - 0x20]
call fcn.00425c20
mov ecx, dword [ebp - 0x20]
call fcn.00425f00
mov ecx, dword [ebp - 0x20]
call fcn.0042a520
mov ecx, dword [ebp - 0x20]
call fcn.004261e0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1c], esp
lea edx, [ebp + 8]
push edx
call fcn.004029d0
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x20]
call fcn.0042a910
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10]
call fcn.00402000
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x14]
call fcn.00402000
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.004021b0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret 0x1c
Function at 0x425700
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56bdfd
mov eax, dword fs:[0]
push eax
sub esp, 0xc
mov eax, dword [0x5e2500]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x18], ecx
push str.SetWaitForAutoLaunchParam
lea ecx, [ebp - 0x14]
call fcn.00404670
mov dword [ebp - 4], 0
push 0x586e6c
lea ecx, [ebp - 0x10]
call fcn.00404670
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x18]
add ecx, 0xa0
call fcn.004018f0
push eax
push 0x400
push 0x400
lea ecx, [ebp - 0x10]
call fcn.004025f0
push eax
push 0x586e70
push str.WaitForAutolaunchFinish
push 0x586ea4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x10]
push eax
push 0x586eb4
call fcn.00401b00
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x4257cb
mov edx, dword [ebp - 0x18]
mov dword [edx + 0xfc], 0
push 0x586eb8
lea ecx, [ebp - 0x14]
call fcn.004018f0
push eax
push 8
push 0x5e3e78
call fcn.0042b490
add esp, 0x10
jmp 0x425857
lea eax, [ebp - 0x10]
push eax
push 0x586f08
call fcn.00401b00
add esp, 8
movzx ecx, al
test ecx, ecx
jne 0x4257f2
lea ecx, [ebp - 0x10]
call fcn.00401f20
movzx edx, al
test edx, edx
je 0x42581e
mov eax, dword [ebp - 0x18]
mov dword [eax + 0xfc], 1
push str.WaitForAutolaunchFinish_is_enabled
lea ecx, [ebp - 0x14]
call fcn.004018f0
push eax
push 8
push 0x5e3e78
call fcn.0042b490
add esp, 0x10
jmp 0x425857
lea ecx, [ebp - 0x10]
call fcn.00401f20
movzx ecx, al
test ecx, ecx
jne 0x425857
mov edx, dword [ebp - 0x18]
mov dword [edx + 0xfc], 1
push str.Invalid_value_for_WaitForAutolaunchFinish._WaitForAutolaunchFinish_is_enabled_by_default
lea ecx, [ebp - 0x14]
call fcn.004018f0
push eax
push 8
push 0x5e3e78
call fcn.0042b490
add esp, 0x10
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x10]
call fcn.00402000
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00402000
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret
Function at 0x425890
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56be40
mov eax, dword fs:[0]
push eax
sub esp, 0x24
mov eax, dword [0x5e2500]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x28], ecx
push str.InitAutolaunch
lea ecx, [ebp - 0x1c]
call fcn.00404670
mov dword [ebp - 4], 0
push 0x586f0c
lea ecx, [ebp - 0x20]
call fcn.00404670
mov byte [ebp - 4], 1
push 0x58702c
lea ecx, [ebp - 0x18]
call fcn.00404670
mov byte [ebp - 4], 2
push 0x587030
lea ecx, [ebp - 0x14]
call fcn.00404670
mov byte [ebp - 4], 3
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x5e3c90
call fcn.004261a0
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], ecx
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x30]
call fcn.004018f0
push eax
push 0x400
push 0x400
lea ecx, [ebp - 0x14]
call fcn.004025f0
push eax
push 0x587034
push str.Multilaunch
push 0x587050
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x24]
call fcn.00402000
push 0xffffffffffffffff
lea ecx, [ebp - 0x14]
call fcn.00401cf0
lea edx, [ebp - 0x14]
push edx
push 0x587060
call fcn.00401b60
add esp, 8
movzx eax, al
test eax, eax
je 0x42598b
push 0x587064
lea ecx, [ebp - 0x18]
call fcn.00403fc0
jmp 0x425998
push str.AutoLaunch1
lea ecx, [ebp - 0x18]
call fcn.00403fc0
mov ecx, dword [ebp - 0x28]
add ecx, 0xa0
call fcn.004018f0
push eax
push 0x400
push 0x400
lea ecx, [ebp - 0x20]
call fcn.004025f0
push eax
push 0x587094
lea ecx, [ebp - 0x18]
call fcn.004018f0
push eax
push 0x587098
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x20]
call fcn.00401cf0
lea ecx, [ebp - 0x20]
call fcn.00401f20
movzx ecx, al
test ecx, ecx
jne 0x425a20
mov edx, dword [ebp - 0x28]
mov dword [edx + 0xbc], 1
push str.AutoLaunch_is_enabled
lea ecx, [ebp - 0x1c]
call fcn.004018f0
push eax
push 8
push 0x5e3e78
call fcn.0042b490
add esp, 0x10
mov ecx, dword [ebp - 0x28]
call fcn.00425700
jmp 0x425a3d
push str.AutoLaunch_is_not_enabled
lea ecx, [ebp - 0x1c]
call fcn.004018f0
push eax
push 8
push 0x5e3e78
call fcn.0042b490
add esp, 0x10
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x14]
call fcn.00402000
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18]
call fcn.00402000
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00402000
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c]
call fcn.00402000
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret
Function at 0x425ae0
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56be63
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, dword [0x5e2500]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], ecx
lea ecx, [ebp - 0x10]
call fcn.00401fd0
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x14]
add ecx, 0xa0
call fcn.004018f0
push eax
push 0x400
push 0x400
lea ecx, [ebp - 0x10]
call fcn.004025f0
push eax
push 0x587108
push str.AllowChangeTarget
push 0x587130
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x10]
call fcn.00401cf0
push 0x587140
lea ecx, [ebp - 0x10]
call fcn.00401ad0
test eax, eax
jne 0x425b76
mov eax, dword [ebp - 0x14]
mov dword [eax + 0xb8], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.00402000
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret

Function at 0x425bc0
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push ecx
mov dword [ebp - 4], ecx
mov ecx, dword [ebp - 4]
add ecx, 0xa0
call fcn.004018f0
push eax
push 0
push 0x587144
push str.FileCount
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xb4], eax
mov esp, ebp
pop ebp
ret
Function at 0x425c20
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56be8e
mov eax, dword fs:[0]
push eax
sub esp, 0xc
mov eax, dword [0x5e2500]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x18], ecx
push str.InitCommandLineForNoOSCheck
lea ecx, [ebp - 0x14]
call fcn.00404670
mov dword [ebp - 4], 0
push 0x58719c
lea ecx, [ebp - 0x10]
call fcn.00404670
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x18]
add ecx, 0xa0
call fcn.004018f0
push eax
push 0x400
push 0x400
lea ecx, [ebp - 0x10]
call fcn.004025f0
push eax
push 0x5871a0
push str.CheckOs
push 0x5871b4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x10]
call fcn.00401cf0
lea eax, [ebp - 0x10]
push eax
push 0x5871c4
call fcn.00401b60
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x425d5c
cmp dword [ebp + 8], 1
jne 0x425cf7
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp + 8]
mov dword [edx + 0xf4], eax
push 0x5871c8
push 0x587210
push 8
push 0x5e3e78
call fcn.0042b490
add esp, 0x10
jmp 0x425d31
mov ecx, dword [ebp - 0x18]
call fcn.00425e30
mov ecx, dword [ebp - 0x18]
mov dword [ecx + 0xf4], eax
mov edx, dword [ebp - 0x18]
cmp dword [edx + 0xf4], 0
je 0x425d31
push str.Setting_NoOSCheck_from_INI_file.
lea ecx, [ebp - 0x14]
call fcn.004018f0
push eax
push 8
push 0x5e3e78
call fcn.0042b490
add esp, 0x10
mov eax, dword [ebp - 0x18]
cmp dword [eax + 0xf4], 1
jne 0x425d5a
push 0x5872b8
lea ecx, [ebp - 0x14]
call fcn.004018f0
push eax
push 8
push 0x5e3e78
call fcn.0042b490
add esp, 0x10
jmp 0x425d79
push str.CheckOs_is_set.OS_check_will_be_done_before_extraction_in_GUI_mode
lea ecx, [ebp - 0x14]
call fcn.004018f0
push eax
push 8
push 0x5e3e78
call fcn.0042b490
add esp, 0x10
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x10]
call fcn.00402000
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00402000
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret 4

Function at 0x425e30
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56beb1
mov eax, dword fs:[0]
push eax
sub esp, 0x10
mov eax, dword [0x5e2500]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x10], 0
push 0x5872b4
lea ecx, [ebp - 0x14]
call fcn.00404670
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x1c]
add ecx, 0xa0
call fcn.004018f0
push eax
push 0x400
push 0x400
lea ecx, [ebp - 0x14]
call fcn.004025f0
push eax
push 0x58731c
push 0x587460
push 0x587474
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x14]
call fcn.00401cf0
lea eax, [ebp - 0x14]
push eax
push 0x58747c
call fcn.00401b00
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x425ed3
mov dword [ebp - 0x10], 1
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x18], edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00402000
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret