joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4357f0
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x494abc
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x128
push ebx
push esi
push edi
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov cl, byte [eax + 0x14]
test ecx, ecx
je 0x435826
call dword [sym.imp.Eqm.dll_int___cdecl_eqm_EndAll_void_]
lea ecx, [ebp - 0xcc]
call fcn.00468810
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xcc]
call fcn.00468ae0
push 5
lea ecx, [ebp - 0xcc]
call sub.MFC42.DLL_CWnd::ShowWindow
lea ecx, [ebp - 0xcc]
call fcn.00435a40
push eax
push 0
push 0
call dword [sym.imp.Eqm.dll_int___cdecl_eqm_LoadAll_int__int__class_CListCtrl__]
add esp, 0xc
push 1
lea ecx, [ebp - 0xcc]
call fcn.00412020
lea ecx, [ebp - 0xcc]
call fcn.0040db60
push 0x4a9e34
push 0
push str.Delay
push str.EQMTraceList
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
jl 0x4358b3
cmp dword [ebp - 0xd0], 0xe10
jle 0x4358bd
mov dword [ebp - 0xd0], 0xa
lea ecx, [ebp - 0xcc]
call fcn.00435a40
mov ecx, eax
call fcn.004391c0
test eax, eax
jle 0x435962
mov edx, dword [ebp - 0xd0]
push edx
lea ecx, [ebp - 0xcc]
call fcn.00468c90
lea ecx, [ebp - 0xcc]
call fcn.00468da0
cmp eax, 2
jne 0x435960
mov eax, dword [ebp + 8]
mov dword [ebp - 0xd8], eax
mov ecx, dword [ebp - 0xd8]
mov dword [ebp - 0xd4], ecx
cmp dword [ebp - 0xd4], 0
je 0x435932
push 1
mov edx, dword [ebp - 0xd4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xd4]
call dword [eax + 4]
mov dword [ebp - 0xf0], eax
jmp 0x43593c
mov dword [ebp - 0xf0], 0
mov byte [ebp - 0xdc], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcc]
call fcn.00435a60
mov al, byte [ebp - 0xdc]
jmp 0x435a22
jmp 0x43596d
lea ecx, [ebp - 0xcc]
call sub.MFC42.DLL_CWnd::DestroyWindow
mov ecx, dword [ebp - 0x10]
mov byte [ecx + 0x14], 1
mov ecx, dword [ebp + 8]
call fcn.004074c0
cmp dword [eax + 0x10], 0
jne 0x4359f4
mov ecx, dword [ebp + 8]
call fcn.004074c0
cmp dword [eax + 0x14], 0
jne 0x4359f4
mov edx, dword [ebp + 8]
mov dword [ebp - 0xe4], edx
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
je 0x4359c9
push 1
mov ecx, dword [ebp - 0xe0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xe0]
call dword [edx + 4]
mov dword [ebp - 0xf4], eax
jmp 0x4359d3
mov dword [ebp - 0xf4], 0
mov byte [ebp - 0xe8], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcc]
call fcn.00435a60
mov al, byte [ebp - 0xe8]
jmp 0x435a22
lea eax, [ebp + 8]
push eax
mov ecx, dword [ebp - 0x10]
add ecx, 4
call fcn.004383b0
mov byte [ebp - 0xec], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcc]
call fcn.00435a60
mov al, byte [ebp - 0xec]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x43d740
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc0
push ebx
push esi
push edi
push 0
push 4
call sub.WINDCS32.dll_Ordinal_69
push eax
push str._s_recipe_basicrec.001_basicrec.ini
lea eax, [ebp - 0x80]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0x80]
push ecx
push 1
push str.MaxRec
push str.Global
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov word [0x4aa858], ax
mov dx, word [0x4aa864]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.0043d990
add esp, 8
mov word [0x4aa864], ax
mov word [0x4aa880], 1
mov ecx, dword [0x4aa800]
mov edx, dword [ecx]
mov ecx, dword [0x4aa800]
call dword [edx + 0xb8]
mov dword [0x4aa88c], eax
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x43df50
Capabilities:
Hide graphical window
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd0
push ebx
push esi
push edi
mov dword [ebp - 0x90], 0x190
mov dword [ebp - 0x8c], 0x1f4
mov dword [ebp - 0x88], 0
push 0
mov eax, dword [0x4aaab4]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0048e710
add esp, 0xc
push 0
push 4
call sub.WINDCS32.dll_Ordinal_69
push eax
push str._s_recipeprojectplant.ini
lea edx, [ebp - 0x80]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x80]
push eax
push 1
push str.WriteToFile
push str.Version3
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [0x4aaaba], eax
lea ecx, [ebp - 0x80]
push ecx
push 1
push str.ShowResult
push str.Version3
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [0x4aaabe], eax
lea edx, [ebp - 0x80]
push edx
push 0
push str.IgnoreDepWarnings
push str.Version3
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
push eax
call fcn.0042f960
add esp, 4
mov ecx, dword [0x4aa24c]
mov edx, dword [ecx + 0x59c]
push edx
push 1
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov ecx, dword [0x4aa24c]
mov edx, dword [ecx + 0x5a0]
push edx
push 2
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 0
push 1
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push 0
push 2
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push 0
push 0x450
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [0x4aa24c]
mov edx, dword [ecx + 0x5dc]
push edx
push 0x450
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
lea ecx, [ebp - 0x90]
push ecx
push 2
push 0x192
push 0x409
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [0x4aa24c]
mov ecx, dword [eax + 0x5a4]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 0
push 0x1267
push 0x111
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x43f430
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x250
push ebx
push esi
push edi
mov dword [ebp - 0x1ac], 0
push 0
push 8
call sub.WINDCS32.dll_Ordinal_69
push eax
push 0x498f5c
lea eax, [ebp - 0x100]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
movsx ecx, word [0x4aaad2]
push ecx
push str.lin__d.txt
lea edx, [ebp - 0x1a4]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x1a4]
push eax
lea ecx, [ebp - 0x100]
push ecx
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x498ee8
lea edx, [ebp - 0x100]
push edx
call dword [sym.imp.MSVCRT.dll_fopen]
add esp, 8
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0
jne 0x43f4f3
lea eax, [ebp - 0x100]
push eax
push str.Fatal_Error___No_Access_To___s_
lea ecx, [ebp - 0x210]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0x10
push str.BrEdit___Parlines
lea edx, [ebp - 0x210]
push edx
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x43f5ce
mov eax, 1
test eax, eax
je 0x43f5be
lea ecx, [ebp - 0x1a4]
push ecx
mov edx, dword [ebp - 0x1ac]
push edx
push 0x189
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp eax, 0xffffffff
jne 0x43f527
jmp 0x43f5be
push 0x49cb68
lea ecx, [ebp - 0x1a4]
push ecx
call dword [sym.imp.MSVCRT.dll_strtok]
add esp, 8
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
jne 0x43f55c
mov edx, dword [ebp - 0x1ac]
add edx, 1
mov dword [ebp - 0x1ac], edx
jmp 0x43f4f3
push 0x100
mov eax, dword [ebp - 0x104]
push eax
push 0x4aa9ac
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
push 0x498f18
push 0x4aa9ac
call sub.MSVCRT.dll_strcat
add esp, 8
mov ecx, dword [ebp - 0x1a8]
push ecx
push 0x4aa9ac
call sub.MSVCRT.dll_strlen
add esp, 4
push eax
push 1
push 0x4aa9ac
call dword [sym.imp.MSVCRT.dll_fwrite]
add esp, 0x10
mov edx, dword [ebp - 0x1ac]
add edx, 1
mov dword [ebp - 0x1ac], edx
jmp 0x43f4f3
mov eax, dword [ebp - 0x1a8]
push eax
call dword [sym.imp.MSVCRT.dll_fclose]
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x445b40
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x158
push ebx
push esi
push edi
mov dword [ebp - 4], ecx
cmp dword [ebp + 0x10], 0
je 0x445b5b
cmp dword [ebp + 8], 0
jg 0x445b62
xor al, al
jmp 0x445cff
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp - 4]
call fcn.00446f50
mov byte [ebp - 0x10c], 1
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
push 0
push 4
call sub.WINDCS32.dll_Ordinal_69
push eax
push str._s_recipeproject_trp_3.3d_3.3d_3.3d.bck
lea edx, [ebp - 0x108]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
mov dword [ebp - 0x110], 0
push 0x49d32c
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.MSVCRT.dll_fopen]
add esp, 8
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jne 0x445bdc
mov byte [ebp - 0x10c], 0
jmp 0x445ce9
mov ecx, dword [ebp - 0x110]
push ecx
push 1
push 4
mov edx, dword [ebp + 0x10]
push edx
call dword [sym.imp.MSVCRT.dll_fwrite]
add esp, 0x10
mov eax, dword [ebp - 0x110]
push eax
push 1
push 4
mov ecx, dword [ebp + 0x10]
add ecx, 4
push ecx
call dword [sym.imp.MSVCRT.dll_fwrite]
add esp, 0x10
mov edx, dword [ebp - 0x110]
push edx
push 1
push 4
mov eax, dword [ebp + 0x10]
add eax, 8
push eax
call dword [sym.imp.MSVCRT.dll_fwrite]
add esp, 0x10
mov ecx, dword [ebp - 0x110]
push ecx
push 0x11
push 1
mov edx, dword [ebp + 0x10]
add edx, 0xc
push edx
call dword [sym.imp.MSVCRT.dll_fwrite]
add esp, 0x10
mov eax, dword [ebp - 0x110]
push eax
push 1
push 4
mov ecx, dword [ebp + 0x10]
add ecx, 0x1d
push ecx
call dword [sym.imp.MSVCRT.dll_fwrite]
add esp, 0x10
mov dword [ebp - 0x114], 0
jmp 0x445c7b
mov edx, dword [ebp - 0x114]
add edx, 1
mov dword [ebp - 0x114], edx
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp - 0x114]
cmp ecx, dword [eax + 4]
jge 0x445ce9
mov edx, dword [ebp - 0x10c]
and edx, 0xff
test edx, edx
je 0x445cd1
mov eax, dword [ebp - 0x114]
imul eax, eax, 0x118
mov ecx, dword [ebp + 0x10]
lea edx, [ecx + eax + 0x21]
push edx
mov eax, dword [ebp - 0x110]
push eax
mov ecx, dword [ebp - 4]
call fcn.00445d10
and eax, 0xff
test eax, eax
je 0x445cd1
mov dword [ebp - 0x118], 1
jmp 0x445cdb
mov dword [ebp - 0x118], 0
mov cl, byte [ebp - 0x118]
mov byte [ebp - 0x10c], cl
jmp 0x445c6c
mov edx, dword [ebp - 0x110]
push edx
call dword [sym.imp.MSVCRT.dll_fclose]
add esp, 4
mov al, byte [ebp - 0x10c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
Function at 0x445d10
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x50
push ebx
push esi
push edi
mov dword [ebp - 4], ecx
mov byte [ebp - 8], 1
cmp dword [ebp + 0xc], 0
je 0x445d2c
cmp dword [ebp + 8], 0
jne 0x445d33
xor al, al
jmp 0x445e40
mov eax, dword [ebp + 8]
push eax
push 0x12
push 1
mov ecx, dword [ebp + 0xc]
add ecx, 6
push ecx
call dword [sym.imp.MSVCRT.dll_fwrite]
add esp, 0x10
mov edx, dword [ebp + 8]
push edx
push 1
push 2
mov eax, dword [ebp + 0xc]
add eax, 0x18
push eax
call dword [sym.imp.MSVCRT.dll_fwrite]
add esp, 0x10
mov ecx, dword [ebp + 8]
push ecx
push 1
push 4
mov edx, dword [ebp + 0xc]
add edx, 0x1a
push edx
call dword [sym.imp.MSVCRT.dll_fwrite]
add esp, 0x10
mov eax, dword [ebp + 8]
push eax
push 1
push 4
mov ecx, dword [ebp + 0xc]
add ecx, 0x1e
push ecx
call dword [sym.imp.MSVCRT.dll_fwrite]
add esp, 0x10
mov edx, dword [ebp + 8]
push edx
push 1
push 4
mov eax, dword [ebp + 0xc]
add eax, 0x22
push eax
call dword [sym.imp.MSVCRT.dll_fwrite]
add esp, 0x10
mov ecx, dword [ebp + 8]
push ecx
push 1
push 2
mov edx, dword [ebp + 0xc]
add edx, 4
push edx
call dword [sym.imp.MSVCRT.dll_fwrite]
add esp, 0x10
mov eax, dword [ebp + 8]
push eax
push 1
push 4
mov ecx, dword [ebp + 0xc]
push ecx
call dword [sym.imp.MSVCRT.dll_fwrite]
add esp, 0x10
mov dword [ebp - 0xc], 0
jmp 0x445dea
mov edx, dword [ebp - 0xc]
add edx, 1
mov dword [ebp - 0xc], edx
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0xc]
cmp ecx, dword [eax + 0x22]
jge 0x445e3d
mov edx, dword [ebp - 8]
and edx, 0xff
test edx, edx
je 0x445e2e
mov eax, dword [ebp - 0xc]
imul eax, eax, 0x12
mov ecx, dword [ebp + 0xc]
lea edx, [ecx + eax + 0x26]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 4]
call fcn.00445e50
and eax, 0xff
test eax, eax
je 0x445e2e
mov dword [ebp - 0x10], 1
jmp 0x445e35
mov dword [ebp - 0x10], 0
mov cl, byte [ebp - 0x10]
mov byte [ebp - 8], cl
jmp 0x445de1
mov al, byte [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8

Function at 0x445e50
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
push ebx
push esi
push edi
mov dword [ebp - 4], ecx
mov byte [ebp - 8], 1
cmp dword [ebp + 0xc], 0
je 0x445e6c
cmp dword [ebp + 8], 0
jne 0x445e70
xor al, al
jmp 0x445eeb
mov eax, dword [ebp + 8]
push eax
push 4
push 1
mov ecx, dword [ebp + 0xc]
add ecx, 0xd
push ecx
call dword [sym.imp.MSVCRT.dll_fwrite]
add esp, 0x10
mov edx, dword [ebp + 8]
push edx
push 1
push 4
mov eax, dword [ebp + 0xc]
add eax, 4
push eax
call dword [sym.imp.MSVCRT.dll_fwrite]
add esp, 0x10
mov ecx, dword [ebp + 8]
push ecx
push 1
push 4
mov edx, dword [ebp + 0xc]
add edx, 8
push edx
call dword [sym.imp.MSVCRT.dll_fwrite]
add esp, 0x10
mov eax, dword [ebp + 8]
push eax
push 1
push 1
mov ecx, dword [ebp + 0xc]
add ecx, 0x11
push ecx
call dword [sym.imp.MSVCRT.dll_fwrite]
add esp, 0x10
mov edx, dword [ebp + 8]
push edx
push 1
push 1
mov eax, dword [ebp + 0xc]
add eax, 0xc
push eax
call dword [sym.imp.MSVCRT.dll_fwrite]
add esp, 0x10
mov al, byte [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x445f00
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x158
push ebx
push esi
push edi
mov dword [ebp - 4], ecx
cmp dword [ebp + 0x14], 0
je 0x445f1b
cmp dword [ebp + 8], 0
jg 0x445f22
xor al, al
jmp 0x4460b0
mov byte [ebp - 0x10c], 1
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
push 0
push 4
call sub.WINDCS32.dll_Ordinal_69
push eax
push str._s_recipeproject_trp_3.3d_3.3d_3.3d.bck
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
mov dword [ebp - 0x110], 0
push 0x49d330
lea ecx, [ebp - 0x108]
push ecx
call dword [sym.imp.MSVCRT.dll_fopen]
add esp, 8
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jne 0x445f8e
mov byte [ebp - 0x10c], 0
jmp 0x4460aa
mov edx, dword [ebp - 0x110]
push edx
push 1
push 4
mov eax, dword [ebp + 0x14]
push eax
call dword [sym.imp.MSVCRT.dll_fread]
add esp, 0x10
mov ecx, dword [ebp - 0x110]
push ecx
push 1
push 4
mov edx, dword [ebp + 0x14]
add edx, 4
push edx
call dword [sym.imp.MSVCRT.dll_fread]
add esp, 0x10
mov eax, dword [ebp - 0x110]
push eax
push 1
push 4
mov ecx, dword [ebp + 0x14]
add ecx, 8
push ecx
call dword [sym.imp.MSVCRT.dll_fread]
add esp, 0x10
mov edx, dword [ebp - 0x110]
push edx
push 0x11
push 1
mov eax, dword [ebp + 0x14]
add eax, 0xc
push eax
call dword [sym.imp.MSVCRT.dll_fread]
add esp, 0x10
mov ecx, dword [ebp - 0x110]
push ecx
push 1
push 4
mov edx, dword [ebp + 0x14]
add edx, 0x1d
push edx
call dword [sym.imp.MSVCRT.dll_fread]
add esp, 0x10
mov dword [ebp - 0x114], 0
jmp 0x44602d
mov eax, dword [ebp - 0x114]
add eax, 1
mov dword [ebp - 0x114], eax
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp - 0x114]
cmp edx, dword [ecx + 4]
jge 0x44609a
mov eax, dword [ebp - 0x10c]
and eax, 0xff
test eax, eax
je 0x446082
mov ecx, dword [ebp - 0x114]
imul ecx, ecx, 0x118
mov edx, dword [ebp + 0x14]
lea eax, [edx + ecx + 0x21]
push eax
mov ecx, dword [ebp - 0x110]
push ecx
mov ecx, dword [ebp - 4]
call fcn.004460c0
and eax, 0xff
test eax, eax
je 0x446082
mov dword [ebp - 0x118], 1
jmp 0x44608c
mov dword [ebp - 0x118], 0
mov dl, byte [ebp - 0x118]
mov byte [ebp - 0x10c], dl
jmp 0x44601e
mov eax, dword [ebp - 0x110]
push eax
call dword [sym.imp.MSVCRT.dll_fclose]
add esp, 4
mov al, byte [ebp - 0x10c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
Function at 0x4460c0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x50
push ebx
push esi
push edi
mov dword [ebp - 4], ecx
mov byte [ebp - 8], 1
cmp dword [ebp + 0xc], 0
je 0x4460dc
cmp dword [ebp + 8], 0
jne 0x4460e3
xor al, al
jmp 0x4461f0
mov eax, dword [ebp + 8]
push eax
push 0x12
push 1
mov ecx, dword [ebp + 0xc]
add ecx, 6
push ecx
call dword [sym.imp.MSVCRT.dll_fread]
add esp, 0x10
mov edx, dword [ebp + 8]
push edx
push 1
push 2
mov eax, dword [ebp + 0xc]
add eax, 0x18
push eax
call dword [sym.imp.MSVCRT.dll_fread]
add esp, 0x10
mov ecx, dword [ebp + 8]
push ecx
push 1
push 4
mov edx, dword [ebp + 0xc]
add edx, 0x1a
push edx
call dword [sym.imp.MSVCRT.dll_fread]
add esp, 0x10
mov eax, dword [ebp + 8]
push eax
push 1
push 4
mov ecx, dword [ebp + 0xc]
add ecx, 0x1e
push ecx
call dword [sym.imp.MSVCRT.dll_fread]
add esp, 0x10
mov edx, dword [ebp + 8]
push edx
push 1
push 4
mov eax, dword [ebp + 0xc]
add eax, 0x22
push eax
call dword [sym.imp.MSVCRT.dll_fread]
add esp, 0x10
mov ecx, dword [ebp + 8]
push ecx
push 1
push 2
mov edx, dword [ebp + 0xc]
add edx, 4
push edx
call dword [sym.imp.MSVCRT.dll_fread]
add esp, 0x10
mov eax, dword [ebp + 8]
push eax
push 1
push 4
mov ecx, dword [ebp + 0xc]
push ecx
call dword [sym.imp.MSVCRT.dll_fread]
add esp, 0x10
mov dword [ebp - 0xc], 0
jmp 0x44619a
mov edx, dword [ebp - 0xc]
add edx, 1
mov dword [ebp - 0xc], edx
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0xc]
cmp ecx, dword [eax + 0x22]
jge 0x4461ed
mov edx, dword [ebp - 8]
and edx, 0xff
test edx, edx
je 0x4461de
mov eax, dword [ebp - 0xc]
imul eax, eax, 0x12
mov ecx, dword [ebp + 0xc]
lea edx, [ecx + eax + 0x26]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 4]
call fcn.00446200
and eax, 0xff
test eax, eax
je 0x4461de
mov dword [ebp - 0x10], 1
jmp 0x4461e5
mov dword [ebp - 0x10], 0
mov cl, byte [ebp - 0x10]
mov byte [ebp - 8], cl
jmp 0x446191
mov al, byte [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8

Function at 0x446200
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
push ebx
push esi
push edi
mov dword [ebp - 4], ecx
mov byte [ebp - 8], 1
cmp dword [ebp + 0xc], 0
je 0x44621c
cmp dword [ebp + 8], 0
jne 0x446220
xor al, al
jmp 0x44629b
mov eax, dword [ebp + 8]
push eax
push 4
push 1
mov ecx, dword [ebp + 0xc]
add ecx, 0xd
push ecx
call dword [sym.imp.MSVCRT.dll_fread]
add esp, 0x10
mov edx, dword [ebp + 8]
push edx
push 1
push 4
mov eax, dword [ebp + 0xc]
add eax, 4
push eax
call dword [sym.imp.MSVCRT.dll_fread]
add esp, 0x10
mov ecx, dword [ebp + 8]
push ecx
push 1
push 4
mov edx, dword [ebp + 0xc]
add edx, 8
push edx
call dword [sym.imp.MSVCRT.dll_fread]
add esp, 0x10
mov eax, dword [ebp + 8]
push eax
push 1
push 1
mov ecx, dword [ebp + 0xc]
add ecx, 0x11
push ecx
call dword [sym.imp.MSVCRT.dll_fread]
add esp, 0x10
mov edx, dword [ebp + 8]
push edx
push 1
push 1
mov eax, dword [ebp + 0xc]
add eax, 0xc
push eax
call dword [sym.imp.MSVCRT.dll_fread]
add esp, 0x10
mov al, byte [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x44a240
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18c
push ebx
push esi
push edi
mov dword [ebp - 4], ecx
mov ecx, dword [ebp - 4]
call fcn.00413aa0
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x14c]
mov ecx, dword [eax + 0xbd9f]
push ecx
push 4
call sub.WINDCS32.dll_Ordinal_69
push eax
push str._s_recipemainrecmainrec.ini
lea edx, [ebp - 0x104]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
mov eax, dword [ebp - 0x14c]
movsx ecx, word [eax + 0x60]
push ecx
push str.RecType_3.3d
lea edx, [ebp - 0x144]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
lea eax, [ebp - 0x104]
push eax
push 0
push str.MaxRec
lea ecx, [ebp - 0x144]
push ecx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0
jne 0x44a2e1
mov ecx, dword [ebp - 4]
add ecx, 0xc0
call fcn.0040b940
jmp 0x44a357
push 0
mov ecx, dword [ebp - 4]
add ecx, 0xc0
call sub.MFC42.DLL_CWnd::EnableWindow
mov edx, dword [ebp - 0x14c]
movsx eax, word [edx + 0x60]
push eax
push 2
call sub.WINDCS32.dll_sysini_GetSprache
push eax
mov ecx, dword [ebp - 0x14c]
mov edx, dword [ecx + 0xbd9f]
push edx
push 4
call sub.WINDCS32.dll_Ordinal_69
push eax
push str._s_texte._dmainr_d.txt
lea eax, [ebp - 0x104]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x14
push 2
lea ecx, [ebp - 0x104]
push ecx
mov edx, dword [ebp - 0x148]
push edx
push 1
mov ecx, dword [ebp - 4]
add ecx, 0xc0
call fcn.0040d9c0
push eax
call fcn.0041e500
add esp, 0x14
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x454f60
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x495849
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x10]
call fcn.00453190
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x10]
add ecx, 0x58
call fcn.00492b66
mov eax, dword [ebp - 0x10]
mov dword [eax], 0x49f704
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0x4c], 0
mov edx, dword [ebp - 0x10]
mov dword [edx + 0x50], 0
mov eax, dword [ebp - 0x10]
mov byte [eax + 0x60], 0
push 0x4a9e34
push 0
push str.ShowIDs
push str.RecipeBrowser
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
cmp eax, 1
jne 0x454fe2
mov ecx, dword [ebp - 0x10]
mov byte [ecx + 0x60], 1
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret