joyce8/EMBER2024-capa huggingface dataset:
Function at 0x402f70
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x42b7b0
push 0x4179a0
mov eax, dword fs:[0]
push eax
sub esp, 0x49c
mov eax, dword [section..data]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
xor eax, eax
mov word [ebp - 0x258], ax
push 0x206
push eax
lea eax, [ebp - 0x256]
push eax
call fcn.00419530
mov dword [ebp - 0x4a8], 0
push 0x24c
push 0
lea eax, [ebp - 0x4a4]
push eax
call fcn.00419530
mov dword [ebp - 0x4ac], 0xffffffff
xor eax, eax
mov word [ebp - 0x50], ax
push 0x30
push eax
lea eax, [ebp - 0x4e]
push eax
call fcn.00419530
add esp, 0x24
mov dword [ebp - 4], 0
mov dword [ebp - 4], 1
push 0x42f1b8
push str._s
push 0x104
lea eax, [ebp - 0x258]
push eax
call fcn.00412a58
add esp, 0x10
lea eax, [ebp - 0x4a8]
push eax
lea eax, [ebp - 0x258]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
mov dword [ebp - 0x4ac], esi
cmp esi, 0xffffffff
jne 0x403104
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov ebx, eax
call esi
lea edi, [eax + 0x1e]
push 0x1000a
call fcn.00412ac8
add esp, 4
mov esi, eax
test esi, esi
jne 0x40308d
push str.Memory_allocation_error_in_log_file_n
call fcn.00412f3c
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x4030e9
push 0x4283c8
push 0xffff
push esi
call fcn.00412a74
add esp, 0xc
push edi
test eax, eax
jle 0x4030c8
mov byte [esi + 0xffff], 0
push esi
push str.GetMbaeVersion
push 1
mov edx, 0x98
mov ecx, str.....mbae_commonMbaeVersion.cpp
call fcn.00401280
add esp, 0x10
jmp 0x4030e0
push str.Error__d_in_swprintf_s_n
call fcn.00412f3c
add esp, 8
push str.Error_in_swprintf_s_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push esi
call fcn.00412a90
add esp, 4
push 0xfffffffffffffffe
lea eax, [ebp - 0x10]
push eax
push section..data
call fcn.0041dd90
add esp, 0xc
lea eax, [ebx + 0x1e]
jmp 0x4031f2
push str.0.0.0.0
push 0x19
push 0x42f180
call fcn.00412a58
add esp, 0xc
mov edi, dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov edi, edi
push 0x4285ac
lea eax, [ebp - 0x47c]
push eax
call fcn.00413ce8
add esp, 8
test eax, eax
je 0x4031ac
push 0x4285b0
lea eax, [ebp - 0x47c]
push eax
call fcn.00413ce8
add esp, 8
test eax, eax
je 0x4031ac
lea eax, [ebp - 0x47c]
push eax
push 0x42f1b8
push str._s_s
push 0x104
lea eax, [ebp - 0x258]
push eax
call fcn.00412a58
add esp, 0x14
lea edx, [ebp - 0x50]
lea ecx, [ebp - 0x258]
call fcn.00402a00
test eax, eax
jne 0x4031ac
lea edx, [ebp - 0x50]
call fcn.00402e10
cmp eax, 0xffffffff
jne 0x4031ac
lea eax, [ebp - 0x50]
push eax
push 0x42831c
push 0x19
push 0x42f180
call fcn.00412a58
add esp, 0x10
lea eax, [ebp - 0x4a8]
push eax
push esi
call edi
test eax, eax
jne 0x403120
mov dword [ebp - 4], eax
call fcn.004031ce
jmp 0x4031e9
mov dword [ebp - 4], 0xfffffffe
xor eax, eax
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.0041297c
mov esp, ebp
pop ebp
ret
Function at 0x403bd0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
cmp dword [0x433618], 0
push esi
push edi
je 0x403e56
call fcn.00404550
mov edi, eax
test edi, edi
je 0x403c9a
push 0x1000a
call fcn.00412ac8
mov esi, eax
add esp, 4
test esi, esi
jne 0x403c27
push str.Memory_allocation_error_in_log_file_n
call fcn.00412f3c
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov eax, edi
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push 0x4283c8
push 0xffff
push esi
call fcn.00412a74
add esp, 0xc
push edi
test eax, eax
jle 0x403c71
push esi
push str.SetSettingsInTabs
push 1
mov edx, 0xe8
mov byte [esi + 0xffff], 0
mov ecx, str...GuiSettings.cpp
call fcn.00401280
add esp, 0x10
push esi
call fcn.00412a90
add esp, 4
mov eax, edi
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push str.Error__d_in_swprintf_s_n
call fcn.00412f3c
add esp, 8
push str.Error_in_swprintf_s_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push esi
call fcn.00412a90
add esp, 4
mov eax, edi
pop edi
pop esi
mov esp, ebp
pop ebp
ret
call fcn.00404a10
mov edi, eax
test edi, edi
je 0x403d06
push 0x1000a
call fcn.00412ac8
mov esi, eax
add esp, 4
test esi, esi
je 0x403c07
push 0x4283c8
push 0xffff
push esi
call fcn.00412a74
add esp, 0xc
push edi
test eax, eax
jle 0x403c71
push esi
push str.SetSettingsInTabs
push 1
mov edx, 0xec
mov byte [esi + 0xffff], 0
mov ecx, str...GuiSettings.cpp
call fcn.00401280
add esp, 0x10
push esi
call fcn.00412a90
add esp, 4
mov eax, edi
pop edi
pop esi
mov esp, ebp
pop ebp
ret
call fcn.00404ed0
mov edi, eax
test edi, edi
je 0x403d76
push 0x1000a
call fcn.00412ac8
mov esi, eax
add esp, 4
test esi, esi
je 0x403c07
push 0x4283c8
push 0xffff
push esi
call fcn.00412a74
add esp, 0xc
push edi
test eax, eax
jle 0x403c71
push esi
push str.SetSettingsInTabs
push 1
mov edx, 0xf0
mov byte [esi + 0xffff], 0
mov ecx, str...GuiSettings.cpp
call fcn.00401280
add esp, 0x10
push esi
call fcn.00412a90
add esp, 4
mov eax, edi
pop edi
pop esi
mov esp, ebp
pop ebp
ret
call fcn.00405120
mov edi, eax
test edi, edi
je 0x403de6
push 0x1000a
call fcn.00412ac8
mov esi, eax
add esp, 4
test esi, esi
je 0x403c07
push 0x4283c8
push 0xffff
push esi
call fcn.00412a74
add esp, 0xc
push edi
test eax, eax
jle 0x403c71
push esi
push str.SetSettingsInTabs
push 1
mov edx, 0xf4
mov byte [esi + 0xffff], 0
mov ecx, str...GuiSettings.cpp
call fcn.00401280
add esp, 0x10
push esi
call fcn.00412a90
add esp, 4
mov eax, edi
pop edi
pop esi
mov esp, ebp
pop ebp
ret
call fcn.0040d930
mov edi, eax
test edi, edi
je 0x403e56
push 0x1000a
call fcn.00412ac8
mov esi, eax
add esp, 4
test esi, esi
je 0x403c07
push 0x4283c8
push 0xffff
push esi
call fcn.00412a74
add esp, 0xc
push edi
test eax, eax
jle 0x403c71
push esi
push str.SetSettingsInTabs
push 1
mov edx, 0xf8
mov byte [esi + 0xffff], 0
mov ecx, str...GuiSettings.cpp
call fcn.00401280
add esp, 0x10
push esi
call fcn.00412a90
add esp, 4
mov eax, edi
pop edi
pop esi
mov esp, ebp
pop ebp
ret
pop edi
xor eax, eax
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x404fb0
Capabilities:
Print debug messages

Disassembly:
mov eax, dword [0x42ef60]
push ebx
mov ebx, dword [sym.imp.USER32.dll_GetDlgItem]
push esi
push edi
mov dword [0x42ef68], eax
mov edi, 0x3c
mov esi, 0x4291c0
lea ecx, [ecx]
push 0
push dword [0x433610]
push dword [esi + 4]
push 0x8022
push dword [0x433614]
call ebx
push eax
push 0x14
push 0x15e
push edi
push 0xa
push 0x54010003
push dword [esi]
push str.Button
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x40506c
push 0
push dword [0x42f3d4]
push 0x30
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
add esi, 0x18
add edi, 0x14
cmp esi, 0x429250
jl 0x404fd0
mov esi, 0x4291c4
nop
mov eax, dword [esi + 0xc]
xor ecx, ecx
push 0
cmp dword [eax], ecx
setne cl
push ecx
push 0xf1
push dword [esi]
push 0x8022
push dword [0x433614]
call ebx
push eax
call ebx
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
add esi, 0x18
cmp esi, 0x429254
jl 0x405030
xor eax, eax
pop edi
pop esi
pop ebx
ret
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov ebx, eax
call esi
push 0x1000a
lea edi, [eax + 0x1e]
call fcn.00412ac8
mov esi, eax
add esp, 4
test esi, esi
jne 0x4050ad
push str.Memory_allocation_error_in_log_file_n
call fcn.00412f3c
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea eax, [ebx + 0x1e]
pop edi
pop esi
pop ebx
ret
push 0x4283c8
push 0xffff
push esi
call fcn.00412a74
add esp, 0xc
push edi
test eax, eax
jle 0x4050f6
push esi
push str.CreateSettingsTabLayer3
push 1
mov edx, 0x251
mov byte [esi + 0xffff], 0
mov ecx, str...GuiSettings.cpp
call fcn.00401280
add esp, 0x10
push esi
call fcn.00412a90
add esp, 4
lea eax, [ebx + 0x1e]
pop edi
pop esi
pop ebx
ret
push str.Error__d_in_swprintf_s_n
call fcn.00412f3c
add esp, 8
push str.Error_in_swprintf_s_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push esi
call fcn.00412a90
add esp, 4
lea eax, [ebx + 0x1e]
pop edi
pop esi
pop ebx
ret

Function at 0x4051d0
Capabilities:
Hide graphical window

Disassembly:
push ebx
push esi
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
mov ebx, ecx
push edi
push 0
push 0x801f
push dword [0x433614]
call esi
mov edi, dword [sym.imp.USER32.dll_ShowWindow]
push eax
call edi
push 0
push 0x8020
push dword [0x433614]
call esi
push eax
call edi
push 0
push 0x8021
push dword [0x433614]
call esi
push eax
call edi
push 0
push 0x8022
push dword [0x433614]
call esi
push eax
call edi
cmp ebx, 3
ja case.default.0x40522e
jmp dword [ebx*4 + 0x405298]
push 5
push 0x801f
push dword [0x433614]
call esi
push eax
call edi
pop edi
pop esi
xor eax, eax
pop ebx
ret
push 5
push 0x8020
push dword [0x433614]
call esi
push eax
call edi
pop edi
pop esi
xor eax, eax
pop ebx
ret
push 5
push 0x8021
push dword [0x433614]
call esi
push eax
call edi
pop edi
pop esi
xor eax, eax
pop ebx
ret
push 5
push 0x8022
push dword [0x433614]
call esi
push eax
call edi
pop edi
pop esi
xor eax, eax
pop ebx
ret
Function at 0x4067c0
Capabilities:
Delete file
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x42b878
push 0x4179a0
mov eax, dword fs:[0]
push eax
sub esp, 0x218
mov eax, dword [section..data]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
xor eax, eax
mov word [ebp - 0x228], ax
push 0x206
push eax
lea eax, [ebp - 0x226]
push eax
call fcn.00419530
add esp, 0xc
mov dword [ebp - 4], 0
push str.mbae_report.dat
push 0x42ef70
push 0x4281e8
lea eax, [ebp - 0x228]
push eax
call fcn.004029c0
add esp, 0x10
lea eax, [ebp - 0x228]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x406905
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov ebx, eax
call esi
lea edi, [eax + 0x1e]
push 0x1000a
call fcn.00412ac8
add esp, 4
mov esi, eax
test esi, esi
jne 0x40689a
push str.Memory_allocation_error_in_log_file_n
call fcn.00412f3c
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov dword [ebp - 4], 0xfffffffe
lea eax, [ebx + 0x1e]
jmp 0x406a37
push 0x4283c8
push 0xffff
push esi
call fcn.00412a74
add esp, 0xc
push edi
test eax, eax
jle 0x4068d5
mov byte [esi + 0xffff], 0
push esi
push str.DelFileLog
push 1
mov edx, 0x11a
mov ecx, str...MbaeGui.cpp
call fcn.00401280
add esp, 0x10
jmp 0x4068ed
push str.Error__d_in_swprintf_s_n
call fcn.00412f3c
add esp, 8
push str.Error_in_swprintf_s_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push esi
call fcn.00412a90
add esp, 4
mov dword [ebp - 4], 0xfffffffe
lea eax, [ebx + 0x1e]
jmp 0x406a37
mov dword [0x42f3c0], 0
imul eax, dword [0x42f3c8], 0x1908
push eax
push 0
push dword [0x42f3c4]
call fcn.00419530
add esp, 0xc
mov dword [0x433628], 0
push 0
call fcn.0040e6e0
add esp, 4
push 0xa
push 0x104
lea eax, [ebp - 0x228]
push eax
push dword [0x433628]
call fcn.00413e56
add esp, 0x10
lea eax, [ebp - 0x228]
push eax
push 0
push 0xc
push 0x8034
push 0x8009
push dword [0x433624]
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
call esi
push eax
call esi
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 4], 0xfffffffe
xor eax, eax
jmp 0x406a37
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.0041297c
mov esp, ebp
pop ebp
ret
Function at 0x408ff0
Capabilities:
Hide graphical window

Disassembly:
push ebx
push esi
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
mov ebx, ecx
push edi
push 0
push 0x8009
push dword [0x433624]
call esi
mov edi, dword [sym.imp.USER32.dll_ShowWindow]
push eax
call edi
push 0
push 0x800e
push dword [0x433624]
call esi
push eax
call edi
push 0
push 0x8014
push dword [0x433624]
call esi
push eax
call edi
push 0
push 0x8018
push dword [0x433624]
call esi
push eax
call edi
push 0
push 0x801b
push dword [0x433624]
call esi
push eax
call edi
push 0
push 0x802c
push dword [0x433624]
call esi
push eax
call edi
cmp ebx, 5
ja case.default.0x409076
jmp dword [ebx*4 + 0x409110]
push 5
push 0x8009
push dword [0x433624]
call esi
push eax
call edi
pop edi
pop esi
xor eax, eax
pop ebx
ret
push 5
push 0x800e
push dword [0x433624]
call esi
push eax
call edi
pop edi
pop esi
xor eax, eax
pop ebx
ret
push 5
push 0x8014
push dword [0x433624]
call esi
push eax
call edi
pop edi
pop esi
xor eax, eax
pop ebx
ret
push 5
push 0x8018
push dword [0x433624]
call esi
push eax
call edi
pop edi
pop esi
xor eax, eax
pop ebx
ret
push 5
push 0x801b
push dword [0x433624]
call esi
push eax
call edi
pop edi
pop esi
xor eax, eax
pop ebx
ret
push 5
push 0x802c
push dword [0x433624]
call esi
push eax
call edi
pop edi
pop esi
xor eax, eax
pop ebx
ret
Function at 0x40b290
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc40
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0xc3c], eax
push esi
push edi
xor eax, eax
push 0x206
push eax
mov word [esp + 0x10], ax
lea eax, [esp + 0x12]
push eax
call fcn.00419530
add esp, 0xc
lea eax, [esp + 0x210]
push 0x828
push 0
push eax
call fcn.00419530
mov esi, dword [sym.imp.USER32.dll_GetDlgItemTextW]
lea eax, [esp + 0x14]
add esp, 0xc
push 0xfa
push eax
push 0x3f3
push dword [0x434884]
call esi
push 0xfa
lea eax, [esp + 0x214]
push eax
push 0x3f4
push dword [0x434884]
call esi
push 0xfa
lea eax, [esp + 0xa3c]
push eax
push 0x3f5
push dword [0x434884]
call esi
cmp word [esp + 8], 0
je 0x40b504
cmp word [esp + 0x210], 0
je 0x40b504
push 4
lea eax, [esp + 0x214]
push 0x429ea0
push eax
call fcn.004140af
add esp, 0xc
test eax, eax
jne 0x40b374
push eax
push str.Error
push str.This_process_cannot_be_shielded.
jmp 0x40b510
push 0x434c50
lea eax, [esp + 0x41c]
push 0x104
push eax
call fcn.00413c8c
mov eax, dword [0x42e1d0]
add esp, 0xc
mov dword [esp + 0x624], eax
xor esi, esi
lea esp, [esp]
lea eax, [esp + 0xa38]
push eax
push dword [esi*8 + 0x4294a0]
call fcn.00413ce8
add esp, 8
test eax, eax
je 0x40b3c6
inc esi
cmp esi, 6
jl 0x40b3a0
jmp 0x40b518
mov eax, dword [esi*8 + 0x4294a4]
mov dword [esp + 0x620], eax
cmp esi, 6
jge 0x40b518
lea eax, [esp + 8]
mov dword [esp + 0x628], 0
push eax
push dword [0x42f1b4]
call dword [sym.imp.mbae_api.dll__MbaeModifyShieldApplication_8]
mov esi, eax
cmp esi, 2
jne 0x40b416
push 0
push str.Error
push str.The_application_you_are_trying_to_shield_is_already_shielded.
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x40b41e
test esi, esi
je 0x40b4ee
push 0x1000a
call fcn.00412ac8
mov edi, eax
add esp, 4
test edi, edi
jne 0x40b45f
push str.Memory_allocation_error_in_log_file_n
call fcn.00412f3c
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov eax, esi
pop edi
pop esi
mov ecx, dword [esp + 0xc3c]
xor ecx, esp
call fcn.0041297c
mov esp, ebp
pop ebp
ret
push 0x4283c8
push 0xffff
push edi
call fcn.00412a74
add esp, 0xc
push esi
test eax, eax
jle 0x40b4b7
push edi
push str.ModifyShieldApplication
push 1
mov edx, 0x381
mov byte [edi + 0xffff], 0
mov ecx, str...GuiTab.cpp
call fcn.00401280
add esp, 0x10
push edi
call fcn.00412a90
add esp, 4
mov eax, esi
pop edi
pop esi
mov ecx, dword [esp + 0xc3c]
xor ecx, esp
call fcn.0041297c
mov esp, ebp
pop ebp
ret
push str.Error__d_in_swprintf_s_n
call fcn.00412f3c
add esp, 8
push str.Error_in_swprintf_s_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push edi
call fcn.00412a90
add esp, 4
mov eax, esi
pop edi
pop esi
mov ecx, dword [esp + 0xc3c]
xor ecx, esp
call fcn.0041297c
mov esp, ebp
pop ebp
ret
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0xc3c]
xor ecx, esp
call fcn.0041297c
mov esp, ebp
pop ebp
ret
push 0
push str.Error
push str.The_application_cannot_have_any_blank_data_fields.
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [esp + 0xc44]
mov eax, 9
pop edi
pop esi
xor ecx, esp
call fcn.0041297c
mov esp, ebp
pop ebp
ret
Function at 0x40bcb0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push esi
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push edi
push 0
push 0
push 0x1009
push 0x8015
push 0x8014
push dword [0x433624]
call esi
push eax
call esi
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
call fcn.004067c0
mov edi, eax
test edi, edi
je 0x40bd4d
push 0x1000a
call fcn.00412ac8
mov esi, eax
add esp, 4
test esi, esi
je 0x40bd76
push 0x4283c8
push 0xffff
push esi
call fcn.00412a74
add esp, 0xc
push edi
test eax, eax
jle 0x40bddc
push esi
push str.DelLogList
push 1
mov edx, 0x401
mov byte [esi + 0xffff], 0
mov ecx, str...GuiTab.cpp
call fcn.00401280
add esp, 0x10
push esi
call fcn.00412a90
add esp, 4
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push dword [0x42f1b4]
call dword [sym.imp.mbae_api.dll__MbaeDelReports_4]
mov edi, eax
test edi, edi
je 0x40bdfd
push 0x1000a
call fcn.00412ac8
mov esi, eax
add esp, 4
test esi, esi
jne 0x40bd94
push str.Memory_allocation_error_in_log_file_n
call fcn.00412f3c
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push 0x4283c8
push 0xffff
push esi
call fcn.00412a74
add esp, 0xc
push edi
test eax, eax
jle 0x40bddc
push esi
push str.DelLogList
push 1
mov edx, 0x406
mov byte [esi + 0xffff], 0
mov ecx, str...GuiTab.cpp
call fcn.00401280
add esp, 0x10
push esi
call fcn.00412a90
add esp, 4
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push str.Error__d_in_swprintf_s_n
call fcn.00412f3c
add esp, 8
push str.Error_in_swprintf_s_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push esi
call fcn.00412a90
add esp, 4
pop edi
pop esi
mov esp, ebp
pop ebp
ret

Function at 0x40c2e0
Capabilities:
Print debug messages

Disassembly:
push ebx
push esi
xor esi, esi
push edi
cmp dword [0x42f3c0], esi
jle 0x40c313
xor edi, edi
nop
mov ecx, dword [0x42f3c4]
lea ecx, [edi + ecx]
call fcn.0040c3c0
mov ebx, eax
test ebx, ebx
jne 0x40c319
inc esi
add edi, 0x1908
cmp esi, dword [0x42f3c0]
jl 0x40c2f0
pop edi
pop esi
xor eax, eax
pop ebx
ret
push 0x1000a
call fcn.00412ac8
mov esi, eax
add esp, 4
test esi, esi
jne 0x40c34a
push str.Memory_allocation_error_in_log_file_n
call fcn.00412f3c
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
pop edi
pop esi
mov eax, ebx
pop ebx
ret
push 0x4283c8
push 0xffff
push esi
call fcn.00412a74
add esp, 0xc
push ebx
test eax, eax
jle 0x40c392
push esi
push str.CreateLogListView
push 1
mov edx, 0x489
mov byte [esi + 0xffff], 0
mov ecx, str...GuiTab.cpp
call fcn.00401280
add esp, 0x10
push esi
call fcn.00412a90
add esp, 4
mov eax, ebx
pop edi
pop esi
pop ebx
ret
push str.Error__d_in_swprintf_s_n
call fcn.00412f3c
add esp, 8
push str.Error_in_swprintf_s_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push esi
call fcn.00412a90
add esp, 4
mov eax, ebx
pop edi
pop esi
pop ebx
ret
Function at 0x40cf50
Capabilities:
Print debug messages

Disassembly:
mov edx, dword [0x43383c]
push ebx
push esi
xor esi, esi
push edi
test edx, edx
jle 0x40cf8a
xor edi, edi
mov ecx, dword [0x433844]
add ecx, edi
cmp dword [ecx], 0
je 0x40cf7f
call fcn.0040d030
mov ebx, eax
test ebx, ebx
jne 0x40cf90
mov edx, dword [0x43383c]
inc esi
add edi, 0x35c
cmp esi, edx
jl 0x40cf61
pop edi
pop esi
xor eax, eax
pop ebx
ret
push 0x1000a
call fcn.00412ac8
mov esi, eax
add esp, 4
test esi, esi
jne 0x40cfc1
push str.Memory_allocation_error_in_log_file_n
call fcn.00412f3c
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
pop edi
pop esi
mov eax, ebx
pop ebx
ret
push 0x4283c8
push 0xffff
push esi
call fcn.00412a74
add esp, 0xc
push ebx
test eax, eax
jle 0x40d009
push esi
push str.CreateExclusionListView
push 1
mov edx, 0x58e
mov byte [esi + 0xffff], 0
mov ecx, str...GuiTab.cpp
call fcn.00401280
add esp, 0x10
push esi
call fcn.00412a90
add esp, 4
mov eax, ebx
pop edi
pop esi
pop ebx
ret
push str.Error__d_in_swprintf_s_n
call fcn.00412f3c
add esp, 8
push str.Error_in_swprintf_s_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push esi
call fcn.00412a90
add esp, 4
mov eax, ebx
pop edi
pop esi
pop ebx
ret
Function at 0x40e310
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, dword [0x42f3c8]
push edi
test ecx, ecx
jle 0x40e328
lea edi, [ecx + 0x64]
add edi, esi
jmp 0x40e32b
lea edi, [esi + 0x64]
imul eax, edi, 0x1908
mov dword [ebp - 4], eax
add eax, 0xa
push eax
call fcn.00412ac8
mov ebx, eax
add esp, 4
test ebx, ebx
jne 0x40e3fb
push 0x1000a
call fcn.00412ac8
mov esi, eax
add esp, 4
test esi, esi
jne 0x40e37f
push str.Memory_allocation_error_in_log_file_n
call fcn.00412f3c
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
pop edi
pop esi
lea eax, [ebx + 5]
pop ebx
mov esp, ebp
pop ebp
ret
push 0x4283c8
push 0xffff
push esi
call fcn.00412a74
add esp, 0xc
push 5
test eax, eax
jle 0x40e3ce
push esi
push str.AllocateReport
push 1
mov edx, 0x5f
mov byte [esi + 0xffff], 0
mov ecx, str...GuiMisc.cpp
call fcn.00401280
add esp, 0x10
push esi
call fcn.00412a90
add esp, 4
mov eax, 5
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.Error__d_in_swprintf_s_n
call fcn.00412f3c
add esp, 8
push str.Error_in_swprintf_s_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push esi
call fcn.00412a90
add esp, 4
mov eax, 5
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push dword [ebp - 4]
push 0
push ebx
call fcn.00419530
imul eax, esi, 0x1908
push eax
push dword [0x42f3c4]
push eax
push ebx
call fcn.00413f72
mov eax, dword [0x42f3c4]
add esp, 0x1c
test eax, eax
je 0x40e42f
push eax
call fcn.00412a90
add esp, 4
mov dword [0x42f3c8], edi
xor eax, eax
pop edi
pop esi
mov dword [0x42f3c4], ebx
pop ebx
mov esp, ebp
pop ebp
ret