joyce8/EMBER2024-capa huggingface dataset:
Function at 0x41e6dd
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x124
mov dword [ebp - 0x124], ecx
mov dword [ebp - 0x11c], 6
mov dword [ebp - 0x118], 6
mov dword [ebp - 0x114], 0x15
mov dword [ebp - 0x110], 0x44
mov dword [ebp - 0x10c], 0x44
mov dword [ebp - 0x108], 0x60
mov dword [ebp - 0x120], 0
jmp 0x41e743
mov eax, dword [ebp - 0x120]
add eax, 1
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 3
jge 0x41e831
push 0x104
push 0
lea ecx, [ebp - 0x104]
push ecx
call fcn.004be790
add esp, 0xc
mov edx, dword [ebp - 0x120]
add edx, 1
push edx
push 0x5215ac
lea eax, [ebp - 0x104]
push eax
call fcn.004bec9d
add esp, 0xc
mov ecx, dword [ebp - 0x124]
add ecx, 0xbc8
push ecx
mov edx, dword [ebp - 0x120]
mov eax, dword [ebp + edx*4 - 0x11c]
push eax
lea ecx, [ebp - 0x104]
push ecx
push 0x5215bc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov edx, dword [ebp - 0x120]
mov ecx, dword [ebp + 8]
mov dword [ecx + edx*4 + 0x5f], eax
push 0x104
push 0
lea edx, [ebp - 0x104]
push edx
call fcn.004be790
add esp, 0xc
mov eax, dword [ebp - 0x120]
add eax, 1
push eax
push 0x5215c0
lea ecx, [ebp - 0x104]
push ecx
call fcn.004bec9d
add esp, 0xc
mov edx, dword [ebp - 0x124]
add edx, 0xbc8
push edx
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp + eax*4 - 0x110]
push ecx
lea edx, [ebp - 0x104]
push edx
push 0x5215d0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x120]
mov edx, dword [ebp + 8]
mov dword [edx + ecx*4 + 0x6b], eax
jmp 0x41e734
mov esp, ebp
pop ebp
ret 4
Function at 0x41e837
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x104
mov dword [ebp - 0x104], ecx
mov eax, dword [ebp - 0x104]
add eax, 0xbc8
push eax
push 0
push 0x5215d4
push 0x5215dc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x104]
add edx, 0xbc8
push edx
push 0
push 0x5215e4
push 0x5215f4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp + 8]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x104]
add edx, 0xbc8
push edx
push 0
push 0x5215fc
push 0x52160c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp + 8]
mov dword [ecx + 8], eax
mov edx, dword [ebp - 0x104]
add edx, 0xbc8
push edx
push 0
push 0x521614
push 0x521620
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc], eax
mov edx, dword [ebp - 0x104]
add edx, 0xbc8
push edx
push 0
push 0x521628
push 0x521634
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x10], eax
mov edx, dword [ebp - 0x104]
add edx, 0xbc8
push edx
push 0
push 0x52163c
push 0x521648
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x14], eax
push 0x100
push 0
lea edx, [ebp - 0x100]
push edx
call fcn.004be790
add esp, 0xc
mov eax, dword [ebp - 0x104]
add eax, 0xbc8
push eax
push 0x100
lea ecx, [ebp - 0x100]
push ecx
push 0
push 0x521650
push 0x521660
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edx, [ebp - 0x100]
push edx
mov ecx, dword [ebp + 8]
add ecx, 0x58
call fcn.004e2faa
mov esp, ebp
pop ebp
ret 4

Function at 0x423083
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov dword [ebp - 0xc], ecx
push 0x50
push 0
mov eax, dword [ebp - 0xc]
add eax, 0x1354
push eax
call fcn.004be790
add esp, 0xc
mov ecx, dword [ebp - 0xc]
add ecx, 0xbc8
push ecx
push 0x50
mov edx, dword [ebp - 0xc]
add edx, 0x1354
push edx
push 0x5423e4
push 0x522850
push 0x52285c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov ecx, dword [ebp - 0xc]
call fcn.00423143
push 1
push 0
mov ecx, dword [ebp - 0xc]
call fcn.004232c9
mov ecx, dword [ebp - 0xc]
call fcn.00424065
mov ecx, dword [ebp - 0xc]
call fcn.004240e6
mov eax, dword [ebp - 0xc]
cmp dword [eax + 0x130c], 0
je 0x42311e
push 0x82d
mov ecx, dword [ebp - 0xc]
call fcn.004e2094
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ecx + 0x1310]
push edx
mov ecx, dword [ebp - 8]
call fcn.00405a10
push 0x818
mov ecx, dword [ebp - 0xc]
call fcn.004e2094
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0xc]
add eax, 0x1354
push eax
mov ecx, dword [ebp - 4]
call fcn.004e232b
mov esp, ebp
pop ebp
ret
Function at 0x423143
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f9f8e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x78
mov dword [ebp - 0x84], ecx
lea ecx, [ebp - 0x10]
call fcn.00404900
mov dword [ebp - 4], 0
mov dword [ebp - 0x80], 0
mov eax, dword [ebp - 0x84]
add eax, 0xbc8
push eax
push 0
push 0x522864
push 0x522878
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x84]
mov dword [ecx + 0x13ac], eax
push 6
push 0
mov edx, dword [ebp - 0x84]
add edx, 0x13b0
push edx
call fcn.004be790
add esp, 0xc
push 0x64
push 0
lea eax, [ebp - 0x7c]
push eax
call fcn.004be790
add esp, 0xc
mov ecx, dword [ebp - 0x84]
add ecx, 0xbc8
push ecx
push 0x64
lea edx, [ebp - 0x7c]
push edx
push 0x5423e8
push 0x522880
push 0x522890
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
movsx eax, byte [ebp - 0x7c]
test eax, eax
jne 0x423211
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.004e2e21
jmp 0x4232bb
push 0x522898
lea ecx, [ebp - 0x7c]
push ecx
call fcn.004bf476
add esp, 8
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x14]
push edx
push 0x52289c
lea eax, [ebp - 0x10]
push eax
call fcn.004d89f2
add esp, 0xc
lea ecx, [ebp - 0x10]
call fcn.0040bb00
test eax, eax
jne 0x4232ac
lea ecx, [ebp - 0x18]
push ecx
push 0x5228a0
lea ecx, [ebp - 0x10]
call fcn.00404920
push eax
call fcn.004bf70b
add esp, 0xc
mov edx, dword [ebp - 0x84]
add edx, dword [ebp - 0x80]
mov al, byte [ebp - 0x18]
mov byte [edx + 0x13b0], al
mov ecx, dword [ebp - 0x80]
add ecx, 1
mov dword [ebp - 0x80], ecx
cmp dword [ebp - 0x80], 6
jne 0x423283
jmp 0x4232ac
push 0x5228a4
push 0
call fcn.004bf476
add esp, 8
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x14]
push edx
push 0x5228a8
lea eax, [ebp - 0x10]
push eax
call fcn.004d89f2
add esp, 0xc
jmp 0x42323a
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.004e2e21
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
Function at 0x4263e7
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x240
mov dword [ebp - 0x240], ecx
mov dword [ebp - 0x238], 0
push 0x2d0
push 0
mov eax, dword [ebp - 0x240]
add eax, 0x2e0
push eax
call fcn.004be790
add esp, 0xc
push 0x208
push 0
lea ecx, [ebp - 0x208]
push ecx
call fcn.004be790
add esp, 0xc
mov edx, dword [ebp - 0x240]
add edx, 0x5b0
push edx
lea eax, [ebp - 0x208]
push eax
call fcn.004be9f0
add esp, 8
push 0x52343c
lea ecx, [ebp - 0x208]
push ecx
call fcn.004bea00
add esp, 8
mov dword [ebp - 0x23c], 0
jmp 0x42647c
mov edx, dword [ebp - 0x23c]
add edx, 1
mov dword [ebp - 0x23c], edx
cmp dword [ebp - 0x23c], 0xa
jge 0x4265c7
push 0xa
push 0
lea eax, [ebp - 0x234]
push eax
call fcn.004be790
add esp, 0xc
mov ecx, dword [ebp - 0x23c]
add ecx, 1
push ecx
push 0x523450
lea edx, [ebp - 0x234]
push edx
call fcn.004bec9d
add esp, 0xc
push 0x1e
push 0
lea eax, [ebp - 0x228]
push eax
call fcn.004be790
add esp, 0xc
lea ecx, [ebp - 0x208]
push ecx
push 0x1e
lea edx, [ebp - 0x228]
push edx
push 0x542404
lea eax, [ebp - 0x234]
push eax
push 0x523454
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
jne 0x4264fd
jmp 0x42646d
movsx ecx, byte [ebp - 0x228]
test ecx, ecx
jne 0x42650d
jmp 0x42646d
push 5
push str._END_
lea edx, [ebp - 0x228]
push edx
call fcn.004bed30
add esp, 0xc
test eax, eax
jne 0x42652c
jmp 0x4265c7
mov eax, dword [ebp - 0x23c]
add eax, 1
mov ecx, dword [ebp - 0x238]
imul ecx, ecx, 0x48
mov edx, dword [ebp - 0x240]
mov dword [edx + ecx + 0x2e0], eax
push 0x1e
lea eax, [ebp - 0x228]
push eax
mov ecx, dword [ebp - 0x238]
imul ecx, ecx, 0x48
mov edx, dword [ebp - 0x240]
lea eax, [edx + ecx + 0x2e4]
push eax
call fcn.004bee30
add esp, 0xc
mov ecx, dword [ebp - 0x238]
imul ecx, ecx, 0x48
mov edx, dword [ebp - 0x240]
mov byte [edx + ecx + 0x301], 0
lea eax, [ebp - 0x228]
push eax
mov ecx, dword [ebp - 0x238]
imul ecx, ecx, 0x48
mov edx, dword [ebp - 0x240]
lea eax, [edx + ecx + 0x302]
push eax
mov ecx, dword [ebp - 0x240]
call fcn.004265cb
mov ecx, dword [ebp - 0x238]
add ecx, 1
mov dword [ebp - 0x238], ecx
jmp 0x42646d
mov esp, ebp
pop ebp
ret
Function at 0x4265cb
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x284
mov dword [ebp - 0x284], ecx
push 0x208
push 0
lea eax, [ebp - 0x208]
push eax
call fcn.004be790
add esp, 0xc
mov ecx, dword [ebp - 0x284]
add ecx, 0x5b0
push ecx
lea edx, [ebp - 0x208]
push edx
call fcn.004be9f0
add esp, 8
push str.LayoutAdata.set
lea eax, [ebp - 0x208]
push eax
call fcn.004bea00
add esp, 8
lea ecx, [ebp - 0x208]
push ecx
push 4
push 0x523478
mov edx, dword [ebp + 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp + 8]
mov byte [ecx + 1], al
lea edx, [ebp - 0x208]
push edx
push 1
push 0x523484
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp + 8]
mov byte [ecx], al
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x280], 1
jmp 0x426680
mov edx, dword [ebp - 0x280]
add edx, 1
mov dword [ebp - 0x280], edx
cmp dword [ebp - 0x280], 0xc
jg 0x42674f
push 0xa
push 0
lea eax, [ebp - 0x278]
push eax
call fcn.004be790
add esp, 0xc
mov ecx, dword [ebp - 0x280]
push ecx
push 0x523494
lea edx, [ebp - 0x278]
push edx
call fcn.004bec9d
add esp, 0xc
push 0x64
push 0
lea eax, [ebp - 0x26c]
push eax
call fcn.004be790
add esp, 0xc
lea ecx, [ebp - 0x208]
push ecx
push 0x64
lea edx, [ebp - 0x26c]
push edx
push 0x542408
lea eax, [ebp - 0x278]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
jne 0x4266fd
jmp 0x426671
mov edx, dword [ebp - 0x27c]
imul edx, edx, 9
mov eax, dword [ebp + 8]
mov cl, byte [ebp - 0x280]
mov byte [eax + edx + 2], cl
lea edx, [ebp - 0x26c]
push edx
mov eax, dword [ebp - 0x27c]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x284]
call fcn.00426755
mov edx, dword [ebp - 0x27c]
add edx, 1
mov dword [ebp - 0x27c], edx
cmp dword [ebp - 0x27c], 4
jne 0x42674a
jmp 0x42674f
jmp 0x426671
mov esp, ebp
pop ebp
ret 8

Function at 0x428b22
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 8], ecx
push 0x15
push 0
mov eax, dword [ebp - 8]
add eax, 0x5c
push eax
call fcn.004be790
add esp, 0xc
cmp dword [0x543130], 0
je 0x428b6c
mov ecx, dword [ebp - 8]
add ecx, 0xbc8
push ecx
push 0x15
mov edx, dword [ebp - 8]
add edx, 0x5c
push edx
push 0
push 0x5234fc
push 0x523504
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov eax, dword [ebp - 8]
movsx ecx, byte [eax + 0x5c]
test ecx, ecx
jne 0x428b9c
mov edx, dword [ebp - 8]
add edx, 0xbc8
push edx
push 0x15
mov eax, dword [ebp - 8]
add eax, 0x5c
push eax
push 0
push 0x52350c
push 0x523514
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 0x569
mov ecx, dword [ebp - 8]
call fcn.004e2094
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
add ecx, 0x5c
push ecx
mov ecx, dword [ebp - 4]
call fcn.004e232b
mov esp, ebp
pop ebp
ret
Function at 0x43131b
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5c
mov dword [ebp - 0x5c], ecx
mov word [ebp - 0x2c], 0x64
mov word [ebp - 0x2a], 0xc8
mov word [ebp - 0x28], 0x32
mov word [ebp - 0x26], 0x7d
mov word [ebp - 0x24], 0x89
mov word [ebp - 0x22], 0x96
mov word [ebp - 0x20], 0xa2
mov word [ebp - 0x1e], 0xaf
mov word [ebp - 0x1c], 0xbb
mov word [ebp - 0x1a], 0x19
mov word [ebp - 0x18], 0x25
mov word [ebp - 0x16], 0x3e
mov word [ebp - 0x14], 0x4b
mov word [ebp - 0x12], 0x51
mov word [ebp - 0x10], 0x57
mov word [ebp - 0xe], 0xc1
mov word [ebp - 0xc], 0x38
mov word [ebp - 0xa], 0x44
mov word [ebp - 8], 0x5d
mov word [ebp - 6], 0x113
mov word [ebp - 4], 0x106
mov word [ebp - 0x58], 0xa0
mov word [ebp - 0x56], 0x20
mov word [ebp - 0x54], 0x120
mov word [ebp - 0x52], 0xa8
mov word [ebp - 0x50], 0xac
mov word [ebp - 0x4e], 0x18
mov word [ebp - 0x4c], 0x1a
mov word [ebp - 0x4a], 0x1c
mov word [ebp - 0x48], 0x1e
mov word [ebp - 0x46], 0x1a0
mov word [ebp - 0x44], 0x118
mov word [ebp - 0x42], 0x128
mov word [ebp - 0x40], 0x98
mov word [ebp - 0x3e], 0x9a
mov word [ebp - 0x3c], 0x9c
mov word [ebp - 0x3a], 0x1f
mov word [ebp - 0x38], 0x124
mov word [ebp - 0x36], 0x12c
mov word [ebp - 0x34], 0x9e
mov word [ebp - 0x32], 0x2c
mov word [ebp - 0x30], 0x2a
cmp dword [0x5425f4], 0
je 0x43144c
cmp dword [0x5425b8], 0
je 0x43144c
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax + 0x1215c]
mov edx, dword [ebp - 0x5c]
mov ax, word [ebp + ecx*2 - 0x58]
mov word [edx + 0x12164], ax
jmp 0x431464
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ecx + 0x1215c]
mov eax, dword [ebp - 0x5c]
mov cx, word [ebp + edx*2 - 0x2c]
mov word [eax + 0x12164], cx
mov esp, ebp
pop ebp
ret
Function at 0x431974
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4fa10d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x124
mov dword [ebp - 0x130], ecx
lea ecx, [ebp - 0x10]
call fcn.00404900
mov dword [ebp - 4], 0
mov dword [ebp - 0x120], 0
push 0x10
push 0
mov eax, dword [ebp - 0x130]
add eax, 0x11e09
push eax
call fcn.004be790
add esp, 0xc
mov ecx, dword [ebp - 0x130]
add ecx, 0x11f1d
push ecx
push 0x104
mov edx, dword [ebp - 0x130]
add edx, 0x11e19
push edx
push 0
push 0x524608
push 0x524610
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov eax, dword [ebp - 0x130]
movsx ecx, byte [eax + 0x11e19]
test ecx, ecx
jne 0x431a46
push 0
push 0x524614
push str.Please_Check_the_WWN.ini_file_
mov ecx, dword [ebp - 0x130]
call fcn.004e07ce
mov dword [ebp - 0x124], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.004e2e21
mov eax, dword [ebp - 0x124]
jmp 0x431b8e
push 0x104
push 0
lea edx, [ebp - 0x11c]
push edx
call fcn.004be790
add esp, 0xc
mov eax, dword [ebp - 0x130]
add eax, 0x11e19
push eax
lea ecx, [ebp - 0x11c]
push ecx
call fcn.004be9f0
add esp, 8
push 0x52463c
lea edx, [ebp - 0x11c]
push edx
call fcn.004bf476
add esp, 8
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
push eax
push 0x524640
lea ecx, [ebp - 0x10]
push ecx
call fcn.004d89f2
add esp, 0xc
lea ecx, [ebp - 0x10]
call fcn.0040bb00
test eax, eax
jne 0x431b2e
cmp dword [ebp - 0x120], 0x10
jae 0x431ae9
lea edx, [ebp - 0x18]
push edx
push 0x524644
lea ecx, [ebp - 0x10]
call fcn.00404920
push eax
call fcn.004bf70b
add esp, 0xc
mov eax, dword [ebp - 0x130]
add eax, dword [ebp - 0x120]
mov cl, byte [ebp - 0x18]
mov byte [eax + 0x11e09], cl
jmp 0x431aeb
jmp 0x431b2e
mov edx, dword [ebp - 0x120]
add edx, 1
mov dword [ebp - 0x120], edx
push 0x524648
push 0
call fcn.004bf476
add esp, 8
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x431b14
jmp 0x431b2e
mov eax, dword [ebp - 0x14]
push eax
push 0x52464c
lea ecx, [ebp - 0x10]
push ecx
call fcn.004d89f2
add esp, 0xc
jmp 0x431aa3
cmp dword [ebp - 0x120], 0x10
jae 0x431b6f
push 0
push 0x524650
push str.Cant_find_enough_16_bytes_WWN__please_check_WWN.ini_content.
mov ecx, dword [ebp - 0x130]
call fcn.004e07ce
mov dword [ebp - 0x128], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.004e2e21
mov eax, dword [ebp - 0x128]
jmp 0x431b8e
mov dword [ebp - 0x12c], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.004e2e21
mov eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
Function at 0x4322a8
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
mov dword [ebp - 0x24], ecx
mov dword [ebp - 4], 1
mov dword [ebp - 0x1c], 0
jmp 0x4322ca
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x20
jge 0x43231a
push 0x14
push 0
lea ecx, [ebp - 0x18]
push ecx
call fcn.004be790
add esp, 0xc
mov edx, dword [ebp - 0x1c]
push edx
push 0x524698
lea eax, [ebp - 0x18]
push eax
call fcn.004bec9d
add esp, 0xc
mov ecx, dword [ebp - 0x24]
add ecx, 0xbc8
push ecx
push 0
lea edx, [ebp - 0x18]
push edx
push 0x5246a0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 0x1c]
mov byte [ecx], al
jmp 0x4322c1
mov dword [ebp - 0x1c], 0
jmp 0x43232c
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
cmp dword [ebp - 0x1c], 0x20
jge 0x432381
mov dword [ebp - 0x20], 0
jmp 0x432344
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x20
jge 0x432377
mov ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 0x20]
jne 0x432354
jmp 0x43233b
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x1c]
xor eax, eax
mov al, byte [edx]
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 0x20]
xor edx, edx
mov dl, byte [ecx]
cmp eax, edx
jne 0x432375
mov dword [ebp - 4], 0
jmp 0x432377
jmp 0x43233b
cmp dword [ebp - 4], 0
jne 0x43237f
jmp 0x432381
jmp 0x432323
cmp dword [ebp - 4], 0
jne 0x4323ac
mov dword [ebp - 0x1c], 0
jmp 0x432399
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x20
jge 0x4323ac
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 0x1c]
mov dl, byte [ebp - 0x1c]
mov byte [ecx], dl
jmp 0x432390
mov esp, ebp
pop ebp
ret 4
Function at 0x440b28
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push str._SMIReadCIDTable
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x542570], eax
cmp dword [0x542570], 0
jne 0x440b77
mov ecx, 1
test ecx, ecx
je 0x440b5d
mov dword [ebp - 4], 0
jmp 0x440b6d
push str.Null_dll_SMIReadCIDTable_n
call fcn.00412500
add esp, 4
mov dword [ebp - 4], eax
mov eax, 0x28
jmp 0x440d29
push str._SMIReadFlashID
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x54256c], eax
cmp dword [0x54256c], 0
jne 0x440bc0
mov eax, 1
test eax, eax
je 0x440ba6
mov dword [ebp - 8], 0
jmp 0x440bb6
push str.Null_dll_SMIScanSMIDrive_n
call fcn.00412500
add esp, 4
mov dword [ebp - 8], eax
mov eax, 4
jmp 0x440d29
push str._SMIReadVndrCmd
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x542568], eax
cmp dword [0x542568], 0
jne 0x440c09
mov edx, 1
test edx, edx
je 0x440bef
mov dword [ebp - 0xc], 0
jmp 0x440bff
push str.Null_dll_SMIReadVndrCmd_n
call fcn.00412500
add esp, 4
mov dword [ebp - 0xc], eax
mov eax, 5
jmp 0x440d29
push str._SMIWriteVndrCmd
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x542564], eax
cmp dword [0x542564], 0
jne 0x440c52
mov ecx, 1
test ecx, ecx
je 0x440c38
mov dword [ebp - 0x10], 0
jmp 0x440c48
push str.Null_dll_SMIWriteVndrCmd_n
call fcn.00412500
add esp, 4
mov dword [ebp - 0x10], eax
mov eax, 6
jmp 0x440d29
push str._SMI_Read_Phy_Page
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x542560], eax
cmp dword [0x542560], 0
jne 0x440c9b
mov eax, 1
test eax, eax
je 0x440c81
mov dword [ebp - 0x14], 0
jmp 0x440c91
push str.Null_dll_SMI_Read_Phy_Page_n
call fcn.00412500
add esp, 4
mov dword [ebp - 0x14], eax
mov eax, 7
jmp 0x440d29
push str._SMI_Program_Phy_Page
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x54255c], eax
cmp dword [0x54255c], 0
jne 0x440ce1
mov edx, 1
test edx, edx
je 0x440cca
mov dword [ebp - 0x18], 0
jmp 0x440cda
push str.Null_dll_SMI_Program_Phy_Page_n
call fcn.00412500
add esp, 4
mov dword [ebp - 0x18], eax
mov eax, 8
jmp 0x440d29
push str._SMI_Erase_Phy_block
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x542558], eax
cmp dword [0x542558], 0
jne 0x440d27
mov ecx, 1
test ecx, ecx
je 0x440d10
mov dword [ebp - 0x1c], 0
jmp 0x440d20
push str.Null_dll_SMI_Erase_Phy_block_n
call fcn.00412500
add esp, 4
mov dword [ebp - 0x1c], eax
mov eax, 9
jmp 0x440d29
xor eax, eax
mov esp, ebp
pop ebp
ret
Function at 0x447a9b
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4fa4b3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x228
mov dword [ebp - 0x22c], 0
lea ecx, [ebp - 0x14]
call fcn.00404900
mov dword [ebp - 4], 0
mov dword [ebp - 0x224], 0
jmp 0x447aed
mov eax, dword [ebp - 0x224]
add eax, 1
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x18
jge 0x447b1f
mov ecx, dword [ebp - 0x224]
mov dword [ecx*8 + 0x5438f8], 0
mov edx, dword [ebp - 0x224]
add edx, 0x43
mov eax, dword [ebp - 0x224]
mov byte [eax*8 + 0x5438fc], dl
jmp 0x447ade
push 0x104
push 0
lea ecx, [ebp - 0x118]
push ecx
call fcn.004be790
add esp, 0xc
push 0x52bb9c
lea edx, [ebp - 0x118]
push edx
call fcn.004be9f0
add esp, 8
push 0x104
push 0
lea eax, [ebp - 0x220]
push eax
call fcn.004be790
add esp, 0xc
lea ecx, [ebp - 0x118]
push ecx
push 0x104
lea edx, [ebp - 0x220]
push edx
push 0x542640
push 0x52bbbc
push 0x52bbc0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
movsx eax, byte [ebp - 0x220]
test eax, eax
jne 0x447bb6
mov dword [ebp - 0x230], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.004e2e21
mov eax, dword [ebp - 0x230]
jmp 0x447cdf
push 0x52bbc4
lea ecx, [ebp - 0x220]
push ecx
call fcn.004bf476
add esp, 8
mov dword [ebp - 0x11c], eax
mov edx, dword [ebp - 0x11c]
push edx
push 0x52bbc8
lea eax, [ebp - 0x14]
push eax
call fcn.004d89f2
add esp, 0xc
mov dword [ebp - 0x10], 0
lea ecx, [ebp - 0x14]
call fcn.0040bb00
test eax, eax
jne 0x447cc1
lea ecx, [ebp - 0x228]
push ecx
push 0x52bbcc
lea ecx, [ebp - 0x14]
call fcn.00404920
push eax
call fcn.004bf70b
add esp, 0xc
mov dword [ebp - 0x224], 0
jmp 0x447c37
mov edx, dword [ebp - 0x224]
add edx, 1
mov dword [ebp - 0x224], edx
cmp dword [ebp - 0x224], 0x18
jge 0x447c75
movsx eax, byte [ebp - 0x228]
mov ecx, dword [ebp - 0x224]
movsx edx, byte [ecx*8 + 0x5438fc]
cmp eax, edx
jne 0x447c73
mov dword [ebp - 0x10], 1
mov eax, dword [ebp - 0x224]
mov dword [eax*8 + 0x5438f8], 1
jmp 0x447c75
jmp 0x447c28
mov ecx, dword [ebp - 0x22c]
add ecx, 1
mov dword [ebp - 0x22c], ecx
push 0x52bbd0
push 0
call fcn.004bf476
add esp, 8
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
jne 0x447ca4
jmp 0x447cc1
mov edx, dword [ebp - 0x11c]
push edx
push 0x52bbd4
lea eax, [ebp - 0x14]
push eax
call fcn.004d89f2
add esp, 0xc
jmp 0x447bef
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x234], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.004e2e21
mov eax, dword [ebp - 0x234]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret