Function at 0x100089b0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x1007c4a0
mov eax, dword fs:[0]
push eax
sub esp, 0x28
push esi
push edi
mov eax, dword [0x100d90a4]
xor eax, esp
push eax
lea eax, [esp + 0x34]
mov dword fs:[0], eax
push 0x100c2d07
push 0
push 0x36b
push str.FlashToolLib_sv5_common_interface_src_brom.cpp
lea ecx, [esp + 0x1c]
call fcn.10055020
mov ecx, dword [0x100da500]
push str.DumpBootArg__:_________________Boot_arguments________________
push ecx
push eax
mov dword [esp + 0x48], 0
call fcn.100555e0
or edi, 0xffffffff
add esp, 0xc
lea ecx, [esp + 0xc]
mov dword [esp + 0x3c], edi
call fcn.10055070
push 0x100c2d07
push 0
push 0x36c
push str.FlashToolLib_sv5_common_interface_src_brom.cpp
lea ecx, [esp + 0x1c]
call fcn.10055020
mov esi, dword [esp + 0x44]
mov edx, dword [esi]
mov ecx, dword [0x100da500]
push edx
push str.DumpBootArg__:_BBChip_type__u_
push ecx
push eax
mov dword [esp + 0x4c], 1
call fcn.100555e0
add esp, 0x10
lea ecx, [esp + 0xc]
mov dword [esp + 0x3c], edi
call fcn.10055070
push 0x100c2d07
push 0
push 0x36d
push str.FlashToolLib_sv5_common_interface_src_brom.cpp
lea ecx, [esp + 0x1c]
call fcn.10055020
mov edx, dword [esi + 4]
mov ecx, dword [0x100da500]
push edx
push str.DumpBootArg__:_Ext_clock__u_
push ecx
push eax
mov dword [esp + 0x4c], 2
call fcn.100555e0
add esp, 0x10
lea ecx, [esp + 0xc]
mov dword [esp + 0x3c], edi
call fcn.10055070
push 0x100c2d07
push 0
push 0x36e
push str.FlashToolLib_sv5_common_interface_src_brom.cpp
lea ecx, [esp + 0x1c]
call fcn.10055020
mov edx, dword [esi + 8]
mov ecx, dword [0x100da500]
push edx
push str.DumpBootArg__:_BROM_timeout_0x_x_
push ecx
push eax
mov dword [esp + 0x4c], 3
call fcn.100555e0
add esp, 0x10
lea ecx, [esp + 0xc]
mov dword [esp + 0x3c], edi
call fcn.10055070
push 0x100c2d07
push 0
push 0x36f
push str.FlashToolLib_sv5_common_interface_src_brom.cpp
lea ecx, [esp + 0x1c]
call fcn.10055020
mov edx, dword [esi + 0xc]
mov ecx, dword [0x100da500]
push edx
push str.DumpBootArg__:_BROM_retry_count__u_
push ecx
push eax
mov dword [esp + 0x4c], 4
call fcn.100555e0
add esp, 0x10
lea ecx, [esp + 0xc]
mov dword [esp + 0x3c], edi
call fcn.10055070
push 0x100c2d07
push 0
push 0x371
push str.FlashToolLib_sv5_common_interface_src_brom.cpp
lea ecx, [esp + 0x1c]
call fcn.10055020
mov edx, dword [esi + 0x10]
mov ecx, dword [0x100da500]
push edx
push str.DumpBootArg__:_Preloader_timeout__u_
push ecx
push eax
mov dword [esp + 0x4c], 5
call fcn.100555e0
add esp, 0x10
lea ecx, [esp + 0xc]
mov dword [esp + 0x3c], edi
call fcn.10055070
push 0x100c2d07
push 0
push 0x372
push str.FlashToolLib_sv5_common_interface_src_brom.cpp
lea ecx, [esp + 0x1c]
call fcn.10055020
mov edx, dword [esi + 0x14]
mov ecx, dword [0x100da500]
push edx
push str.DumpBootArg__:_Preloader_retry_time__u_
push ecx
push eax
mov dword [esp + 0x4c], 6
call fcn.100555e0
add esp, 0x10
lea ecx, [esp + 0xc]
mov dword [esp + 0x3c], edi
call fcn.10055070
push 0x100c2d07
push 0
push 0x373
push str.FlashToolLib_sv5_common_interface_src_brom.cpp
lea ecx, [esp + 0x1c]
call fcn.10055020
mov edx, dword [esi + 0x18]
mov ecx, dword [0x100da500]
push edx
push str.DumpBootArg__:_Preloader_retry_interval__u_
push ecx
push eax
mov dword [esp + 0x4c], 7
call fcn.100555e0
add esp, 0x10
lea ecx, [esp + 0xc]
mov dword [esp + 0x3c], edi
call fcn.10055070
push 0x100c2d07
push 0
push 0x374
push str.FlashToolLib_sv5_common_interface_src_brom.cpp
lea ecx, [esp + 0x1c]
call fcn.10055020
mov edx, dword [esi + 0x1c]
mov dword [esp + 0x3c], 8
push edx
mov ecx, dword [0x100da500]
push str.DumpBootArg__:_UART_port_baudrate__u_
push ecx
push eax
call fcn.100555e0
add esp, 0x10
lea ecx, [esp + 0xc]
mov dword [esp + 0x3c], edi
call fcn.10055070
push 0x100c2d07
push 0
push 0x375
push str.FlashToolLib_sv5_common_interface_src_brom.cpp
lea ecx, [esp + 0x1c]
call fcn.10055020
mov edx, dword [esi + 0x20]
mov ecx, dword [0x100da500]
push edx
push str.DumpBootArg__:_Stop_flag_addr_0x_p_
push ecx
push eax
mov dword [esp + 0x4c], 9
call fcn.100555e0
add esp, 0x10
lea ecx, [esp + 0xc]
mov dword [esp + 0x3c], edi
call fcn.10055070
push 0x100c2d07
push 0
push 0x377
push str.FlashToolLib_sv5_common_interface_src_brom.cpp
lea ecx, [esp + 0x1c]
call fcn.10055020
movzx edx, byte [esi + 0x24]
mov ecx, dword [0x100da500]
push edx
push str.DumpBootArg__:_USB_enable__u_
push ecx
push eax
mov dword [esp + 0x4c], 0xa
call fcn.100555e0
add esp, 0x10
lea ecx, [esp + 0xc]
mov dword [esp + 0x3c], edi
call fcn.10055070
push 0x100c2d07
push 0
push 0x378
push str.FlashToolLib_sv5_common_interface_src_brom.cpp
lea ecx, [esp + 0x1c]
call fcn.10055020
movzx edx, byte [esi + 0x25]
mov ecx, dword [0x100da500]
push edx
push str.DumpBootArg__:_Symbolic_name_enable__u_
push ecx
push eax
mov dword [esp + 0x4c], 0xb
call fcn.100555e0
add esp, 0x10
lea ecx, [esp + 0xc]
mov dword [esp + 0x3c], edi
call fcn.10055070
push 0x100c2d07
push 0
push 0x379
push str.FlashToolLib_sv5_common_interface_src_brom.cpp
lea ecx, [esp + 0x1c]
call fcn.10055020
movzx edx, byte [esi + 0x26]
mov ecx, dword [0x100da500]
push edx
push str.DumpBootArg__:_Composite_device_enable__u_
push ecx
push eax
mov dword [esp + 0x4c], 0xc
call fcn.100555e0
add esp, 0x10
lea ecx, [esp + 0xc]
mov dword [esp + 0x3c], edi
call fcn.10055070
push 0x100c2d07
push 0
push 0x37a
push str.FlashToolLib_sv5_common_interface_src_brom.cpp
lea ecx, [esp + 0x1c]
call fcn.10055020
mov edx, dword [esi + 0x28]
mov ecx, dword [0x100da500]
push edx
push str.DumpBootArg__:_Boot_mode_type__u_
push ecx
push eax
mov dword [esp + 0x4c], 0xd
call fcn.100555e0
add esp, 0x10
lea ecx, [esp + 0xc]
mov dword [esp + 0x3c], edi
call fcn.10055070
push 0x100c2d07
push 0
push 0x37b
push str.FlashToolLib_sv5_common_interface_src_brom.cpp
lea ecx, [esp + 0x1c]
call fcn.10055020
movzx edx, word [esi + 0x2c]
mov ecx, dword [0x100da500]
push edx
push str.DumpBootArg__:_MD_mode__0x_x_
push ecx
push eax
mov dword [esp + 0x4c], 0xe
call fcn.100555e0
add esp, 0x10
lea ecx, [esp + 0xc]
mov dword [esp + 0x3c], edi
call fcn.10055070
push 0x100c2d07
push 0
push 0x37c
push str.FlashToolLib_sv5_common_interface_src_brom.cpp
lea ecx, [esp + 0x1c]
call fcn.10055020
mov edx, dword [esi + 0x30]
mov ecx, dword [0x100da500]
push edx
push str.DumpBootArg__:_Port_number_COM_u_
push ecx
push eax
mov dword [esp + 0x4c], 0xf
call fcn.100555e0
add esp, 0x10
lea ecx, [esp + 0xc]
mov dword [esp + 0x3c], edi
call fcn.10055070
push 0x100c2d07
push 0
push 0x37d
push str.FlashToolLib_sv5_common_interface_src_brom.cpp
lea ecx, [esp + 0x1c]
call fcn.10055020
mov ecx, dword [0x100da500]
lea edx, [esi + 0x34]
push edx
push str.DumpBootArg__:_Symbolic_name__s_
push ecx
push eax
mov dword [esp + 0x4c], 0x10
call fcn.100555e0
add esp, 0x10
lea ecx, [esp + 0xc]
mov dword [esp + 0x3c], edi
call fcn.10055070
push 0x100c2d07
push 0
push 0x37f
push str.FlashToolLib_sv5_common_interface_src_brom.cpp
lea ecx, [esp + 0x1c]
call fcn.10055020
mov edx, dword [esi + 0x134]
mov ecx, dword [0x100da500]
push edx
push str.DumpBootArg__:_AUTH_file_handle_0x_p_
push ecx
push eax
mov dword [esp + 0x4c], 0x11
call fcn.100555e0
add esp, 0x10
lea ecx, [esp + 0xc]
mov dword [esp + 0x3c], edi
call fcn.10055070
push 0x100c2d07
push 0
push 0x380
push str.FlashToolLib_sv5_common_interface_src_brom.cpp
lea ecx, [esp + 0x1c]
call fcn.10055020
mov edx, dword [esi + 0x138]
mov ecx, dword [0x100da500]
push edx
push str.DumpBootArg__:_SCERT_file_handle_0x_p_
push ecx
push eax
mov dword [esp + 0x4c], 0x12
call fcn.100555e0
add esp, 0x10
lea ecx, [esp + 0xc]
mov dword [esp + 0x3c], edi
call fcn.10055070
push 0x100c2d07
push 0
push 0x381
push str.FlashToolLib_sv5_common_interface_src_brom.cpp
lea ecx, [esp + 0x1c]
call fcn.10055020
mov edx, dword [esi + 0x13c]
mov ecx, dword [0x100da500]
push edx
push str.DumpBootArg__:_SLA_challenge_callback_0x_p_
push ecx
push eax
mov dword [esp + 0x4c], 0x13
call fcn.100555e0
add esp, 0x10
lea ecx, [esp + 0xc]
mov dword [esp + 0x3c], edi
call fcn.10055070
push 0x100c2d07
push 0
push 0x382
push str.FlashToolLib_sv5_common_interface_src_brom.cpp
lea ecx, [esp + 0x1c]
call fcn.10055020
mov edx, dword [esi + 0x140]
mov ecx, dword [0x100da500]
push edx
push str.DumpBootArg__:_SLA_challenge_callback_arg_0x_p_
push ecx
push eax
mov dword [esp + 0x4c], 0x14
call fcn.100555e0
add esp, 0x10
lea ecx, [esp + 0xc]
mov dword [esp + 0x3c], edi
call fcn.10055070
push 0x100c2d07
push 0
push 0x383
push str.FlashToolLib_sv5_common_interface_src_brom.cpp
lea ecx, [esp + 0x1c]
call fcn.10055020
mov edx, dword [esi + 0x144]
mov ecx, dword [0x100da500]
push edx
push str.DumpBootArg__:_SLA_challenge_end_callback_0x_p_
push ecx
push eax
mov dword [esp + 0x4c], 0x15
call fcn.100555e0
add esp, 0x10
lea ecx, [esp + 0xc]
mov dword [esp + 0x3c], edi
call fcn.10055070
push 0x100c2d07
push 0
push 0x384
push str.FlashToolLib_sv5_common_interface_src_brom.cpp
lea ecx, [esp + 0x1c]
call fcn.10055020
mov edx, dword [esi + 0x148]
mov ecx, dword [0x100da500]
push edx
push str.DumpBootArg__:_SLA_challenge_end_callback_arg_0x_p_
push ecx
push eax
mov dword [esp + 0x4c], 0x16
call fcn.100555e0
add esp, 0x10
lea ecx, [esp + 0xc]
mov dword [esp + 0x3c], edi
call fcn.10055070
push 0x100c2d07
push 0
push 0x385
push str.FlashToolLib_sv5_common_interface_src_brom.cpp
lea ecx, [esp + 0x30]
call fcn.10055020
mov edx, dword [0x100da500]
push str.DumpBootArg__:_________________Boot_arguments________________
push edx
push eax
mov dword [esp + 0x48], 0x17
call fcn.100555e0
add esp, 0xc
lea ecx, [esp + 0x20]
mov dword [esp + 0x3c], edi
call fcn.10055070
mov ecx, dword [esp + 0x34]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x34
ret