joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1036489
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov esi, dword [ebp + 8]
test esi, esi
je 0x1036513
mov edi, dword [ebp + 0x18]
test edi, edi
je 0x1036513
cmp dword [esi], 0
jne 0x10364df
push 0x4a4
push str.c:_ntprivatectoleuiole2.0_appscommonchicago.._storage.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov ebx, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x1056c90
call ebx
push str.pStg_is_Null
call ebx
push 0x104c08c
call ebx
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x1036500
mov ecx, dword [ebp + 0x14]
test ecx, ecx
je 0x1036500
push 0
push ecx
push eax
push 0x104f4d0
push esi
call fcn.010360d3
test eax, eax
jne 0x1036518
push edi
push dword [ebp + 0xc]
push 0x1001958
push dword [esi]
call dword [sym.imp.ole32.dll_OleLoad]
jmp 0x1036518
mov eax, 0x80030057
pop edi
pop esi
pop ebx
pop ebp
ret 0x14

Function at 0x1036539
Capabilities:
Print debug messages

Disassembly:
push ebp
mov eax, dword [esp + 0xc]
mov ebp, esp
cmp eax, 1
push esi
je 0x103658a
cmp eax, 2
je 0x10365a1
push 0x64b
push str.c:_ntprivatectoleuiole2.0_appscommonchicago.._storage.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov esi, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x1056c90
call esi
push str.Invalid_Storage_Type_Specified
call esi
push 0x104c08c
call esi
jmp 0x10365a9
cmp dword [ebp + 0x10], 0
mov eax, dword [ebp + 8]
je 0x103659a
mov dword [0x104f4a0], eax
jmp 0x10365a9
mov dword [0x104f4a4], eax
jmp 0x10365a9
mov eax, dword [ebp + 8]
mov dword [0x104f4a8], eax
pop esi
pop ebp
ret 0xc

Function at 0x10369ee
Capabilities:
Print debug messages

Disassembly:
cmp dword [0x104f5a0], 0
push esi
je 0x1036a32
push 0x57
push str.c:_ntprivatectoleuiole2.0_appscommonchicago..ole2_c.cpp
push str.Misc_Test_App
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x10549f8
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov esi, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x10549f8
call esi
push str.InitStringFunctions_Called_more_than_once
call esi
push 0x104c08c
call esi
push 0x104f5a0
push 1
call dword [sym.imp.ole32.dll_CoGetMalloc]
pop esi
ret

Function at 0x1036a41
Capabilities:
Print debug messages

Disassembly:
cmp dword [0x104f5a0], 0
push esi
jne 0x1036a87
push 0x67
push str.c:_ntprivatectoleuiole2.0_appscommonchicago..ole2_c.cpp
push str.Misc_Test_App
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x10549f8
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov esi, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x10549f8
call esi
push str.Invalid_Malloc_Pointer
call esi
push 0x104c08c
call esi
jmp 0x1036a9c
mov eax, dword [0x104f5a0]
push eax
mov esi, dword [eax]
call dword [esi + 8]
mov dword [0x104f5a0], 0
pop esi
ret
Function at 0x1036a9e
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push esi
cmp dword [ebp + 0xc], 1
jne 0x1036ac7
cmp dword [0x104f5a0], 0
je 0x1036ac7
push dword [ebp + 8]
mov ecx, dword [0x104f5a0]
push dword [0x104f5a0]
mov eax, dword [ecx]
call dword [eax + 0x14]
jmp 0x1036b01
push 0x7f
push str.c:_ntprivatectoleuiole2.0_appscommonchicago..ole2_c.cpp
push str.Misc_Test_App
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x10549f8
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov esi, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x10549f8
call esi
push str.Invalid_Call
call esi
push 0x104c08c
call esi
pop esi
pop ebp
ret 8

Function at 0x1036b06
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push esi
cmp dword [ebp + 0xc], 1
jne 0x1036b2f
cmp dword [0x104f5a0], 0
je 0x1036b2f
push dword [ebp + 8]
mov ecx, dword [0x104f5a0]
push dword [0x104f5a0]
mov eax, dword [ecx]
call dword [eax + 0x14]
jmp 0x1036b6c
push 0x92
push str.c:_ntprivatectoleuiole2.0_appscommonchicago..ole2_c.cpp
push str.Misc_Test_App
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x10549f8
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov esi, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x10549f8
call esi
push str.Invalid_Call
call esi
push 0x104c08c
call esi
pop esi
pop ebp
ret 8

Function at 0x1036b71
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push esi
cmp dword [ebp + 0xc], 1
jne 0x1036b9a
cmp dword [0x104f5a0], 0
je 0x1036b9a
push dword [ebp + 8]
mov ecx, dword [0x104f5a0]
push dword [0x104f5a0]
mov eax, dword [ecx]
call dword [eax + 0x14]
jmp 0x1036bd7
push 0xa5
push str.c:_ntprivatectoleuiole2.0_appscommonchicago..ole2_c.cpp
push str.Misc_Test_App
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x10549f8
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov esi, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x10549f8
call esi
push str.Invalid_Call
call esi
push 0x104c08c
call esi
pop esi
pop ebp
ret 8
Function at 0x1036bdc
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov esi, dword [ebp + 8]
test esi, esi
jne 0x1036bf3
mov eax, 0x80004005
jmp 0x1036cc7
mov edi, dword [ebp + 0xc]
test edi, edi
je 0x1036cc2
cmp word [edi], 0
je 0x1036cc2
push edi
call fcn.010465cc
add esp, 4
mov ebx, eax
test ebx, ebx
jg 0x1036c5a
push 0xda
push str.c:_ntprivatectoleuiole2.0_appscommonchicago..ole2_c.cpp
push str.Misc_Test_App
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x10549f8
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x10549f8
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Invalid_String_Length
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp ebx, 0x258
jl 0x1036ca5
push 0xdb
push str.c:_ntprivatectoleuiole2.0_appscommonchicago..ole2_c.cpp
push str.Misc_Test_App
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x10549f8
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x10549f8
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Invalid_String_Length
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push ebx
push edi
push esi
call fcn.0104685a
add esp, 0xc
cmp eax, 0xffffffff
jne 0x1036cbc
mov eax, 0x80004005
jmp 0x1036cc7
mov byte [esi + ebx], 0
jmp 0x1036cc5
mov byte [esi], 0
xor eax, eax
pop edi
pop esi
pop ebx
pop ebp
ret 8

Function at 0x1036d1a
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov esi, dword [ebp + 8]
test esi, esi
jne 0x1036d31
mov eax, 0x80004005
jmp 0x1036e0d
mov ebx, dword [ebp + 0xc]
test ebx, ebx
je 0x1036e06
cmp byte [ebx], 0
je 0x1036e06
mov edi, ebx
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
lea edi, [ecx - 1]
test edi, edi
jg 0x1036d9c
push 0x16a
push str.c:_ntprivatectoleuiole2.0_appscommonchicago..ole2_c.cpp
push str.Misc_Test_App
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x10549f8
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x10549f8
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Invalid_String_Length
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp edi, 0x258
jl 0x1036de7
push 0x16b
push str.c:_ntprivatectoleuiole2.0_appscommonchicago..ole2_c.cpp
push str.Misc_Test_App
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x10549f8
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x10549f8
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Invalid_String_Length
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push edi
push ebx
push esi
call fcn.01046a23
add esp, 0xc
cmp eax, 0xffffffff
jne 0x1036dfe
mov eax, 0x80004005
jmp 0x1036e0d
mov word [esi + edi*2], 0
jmp 0x1036e0b
mov word [esi], 0
xor eax, eax
pop edi
pop esi
pop ebx
pop ebp
ret 8
Function at 0x1036e14
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov esi, dword [ebp + 8]
test esi, esi
jne 0x1036e2b
mov eax, 0x80004005
jmp 0x1036f07
mov ebx, dword [ebp + 0xc]
test ebx, ebx
je 0x1036f00
cmp byte [ebx], 0
je 0x1036f00
mov edi, ebx
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
lea edi, [ecx - 1]
test edi, edi
jg 0x1036e96
push 0x19e
push str.c:_ntprivatectoleuiole2.0_appscommonchicago..ole2_c.cpp
push str.Misc_Test_App
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x10549f8
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x10549f8
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Invalid_String_Length
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp edi, 0x258
jl 0x1036ee1
push 0x19f
push str.c:_ntprivatectoleuiole2.0_appscommonchicago..ole2_c.cpp
push str.Misc_Test_App
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x10549f8
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x10549f8
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Invalid_String_Length
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push edi
push ebx
push esi
call fcn.01046a23
add esp, 0xc
cmp eax, 0xffffffff
jne 0x1036ef8
mov eax, 0x80004005
jmp 0x1036f07
mov word [esi + edi*2], 0
jmp 0x1036f05
mov word [esi], 0
xor eax, eax
pop edi
pop esi
pop ebx
pop ebp
ret 8

Function at 0x1036f0e
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
cmp dword [ebp + 8], 0
jne 0x1036f24
mov eax, 0x80004005
jmp 0x1036ffc
mov ebx, dword [ebp + 0xc]
test ebx, ebx
je 0x1036ff4
cmp byte [ebx], 0
je 0x1036ff4
mov edi, ebx
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
lea esi, [ecx - 1]
test esi, esi
jg 0x1036f8b
push 0x1cd
push str.c:_ntprivatectoleuiole2.0_appscommonchicago..ole2_c.cpp
push str.Misc_Test_App
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x10549f8
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov edi, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x10549f8
call edi
push str.Invalid_String_Length
call edi
push 0x104c08c
call edi
jmp 0x1036f91
mov edi, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp esi, 0x258
jl 0x1036fd0
push 0x1ce
push str.c:_ntprivatectoleuiole2.0_appscommonchicago..ole2_c.cpp
push str.Misc_Test_App
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x10549f8
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x10549f8
call edi
push str.Invalid_String_Length
call edi
push 0x104c08c
call edi
mov edi, ebx
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
shr ecx, 2
mov esi, edi
mov edi, dword [ebp + 8]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x1036ffa
mov eax, dword [ebp + 8]
mov byte [eax], 0
xor eax, eax
pop edi
pop esi
pop ebx
pop ebp
ret 8
Function at 0x1037003
Capabilities:
Print debug messages

Disassembly:
push ebp
mov eax, dword [esp + 8]
mov ebp, esp
cmp eax, 1
push esi
push edi
jge 0x103704a
push 0x1f1
push str.c:_ntprivatectoleuiole2.0_appscommonchicago..ole2_c.cpp
push str.Misc_Test_App
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x10549f8
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov esi, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x10549f8
call esi
push str.Invalid_String_Length
jmp 0x10370e9
cmp dword [ebp + 0xc], 1
jne 0x10370b5
cmp dword [0x104f5a0], 0
je 0x10370b5
add eax, 2
mov ecx, dword [0x104f5a0]
push eax
mov eax, dword [ecx]
push dword [0x104f5a0]
call dword [eax + 0xc]
mov edi, eax
test edi, edi
jne 0x10370b1
push 0x1f7
push str.c:_ntprivatectoleuiole2.0_appscommonchicago..ole2_c.cpp
push str.Misc_Test_App
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x10549f8
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov esi, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x10549f8
call esi
push str.Alloc_Failed
call esi
push 0x104c08c
call esi
mov eax, edi
jmp 0x10370f4
push 0x1fa
push str.c:_ntprivatectoleuiole2.0_appscommonchicago..ole2_c.cpp
push str.Misc_Test_App
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x10549f8
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov esi, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x10549f8
call esi
push str.Invalid_Call
call esi
push 0x104c08c
call esi
xor eax, eax
pop edi
pop esi
pop ebp
ret 8

Function at 0x10370fa
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov esi, dword [ebp + 0xc]
test esi, esi
jne 0x1037114
mov ecx, dword [ebp + 8]
xor eax, eax
mov dword [ecx], 0
jmp 0x1037184
push esi
call fcn.010465cc
add esp, 4
mov edi, eax
cmp edi, 0x258
jl 0x1037164
push 0x221
push str.c:_ntprivatectoleuiole2.0_appscommonchicago..ole2_c.cpp
push str.Misc_Test_App
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x10549f8
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov ebx, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x10549f8
call ebx
push str.Invalid_String_Length
call ebx
push 0x104c08c
call ebx
push dword [ebp + 0x10]
push edi
call fcn.01037003
mov ecx, dword [ebp + 8]
test eax, eax
mov dword [ecx], eax
jne 0x103717d
mov eax, 0x8007000e
jmp 0x1037184
push esi
push eax
call fcn.01036bdc
pop edi
pop esi
pop ebx
pop ebp
ret 0xc
Function at 0x103718b
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov esi, dword [ebp + 0xc]
test esi, esi
jne 0x10371a5
mov ecx, dword [ebp + 8]
xor eax, eax
mov dword [ecx], 0
jmp 0x103721a
mov edi, esi
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
lea edi, [ecx - 1]
cmp edi, 0x258
jl 0x10371fa
push 0x24f
push str.c:_ntprivatectoleuiole2.0_appscommonchicago..ole2_c.cpp
push str.Misc_Test_App
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x10549f8
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov ebx, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x10549f8
call ebx
push str.Invalid_String_Length
call ebx
push 0x104c08c
call ebx
push dword [ebp + 0x10]
push edi
call fcn.01037003
mov ecx, dword [ebp + 8]
test eax, eax
mov dword [ecx], eax
jne 0x1037213
mov eax, 0x8007000e
jmp 0x103721a
push esi
push eax
call fcn.01036cce
pop edi
pop esi
pop ebx
pop ebp
ret 0xc

Function at 0x1037221
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov esi, dword [ebp + 0xc]
test esi, esi
jne 0x103723b
mov ecx, dword [ebp + 8]
xor eax, eax
mov dword [ecx], 0
jmp 0x10372b4
mov edi, esi
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
lea edi, [ecx*2 - 2]
cmp edi, 0x258
jl 0x1037294
push 0x277
push str.c:_ntprivatectoleuiole2.0_appscommonchicago..ole2_c.cpp
push str.Misc_Test_App
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x10549f8
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov ebx, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x10549f8
call ebx
push str.Invalid_String_Length
call ebx
push 0x104c08c
call ebx
push dword [ebp + 0x10]
push edi
call fcn.01037003
mov ecx, dword [ebp + 8]
test eax, eax
mov dword [ecx], eax
jne 0x10372ad
mov eax, 0x8007000e
jmp 0x10372b4
push esi
push eax
call fcn.01036d1a
pop edi
pop esi
pop ebx
pop ebp
ret 0xc

Function at 0x10372bb
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov esi, dword [ebp + 0xc]
test esi, esi
jne 0x10372d5
mov ecx, dword [ebp + 8]
xor eax, eax
mov dword [ecx], 0
jmp 0x103734e
mov edi, esi
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
lea edi, [ecx*2 - 2]
cmp edi, 0x258
jl 0x103732e
push 0x2a1
push str.c:_ntprivatectoleuiole2.0_appscommonchicago..ole2_c.cpp
push str.Misc_Test_App
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x10549f8
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov ebx, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x10549f8
call ebx
push str.Invalid_String_Length
call ebx
push 0x104c08c
call ebx
push dword [ebp + 0x10]
push edi
call fcn.01037003
mov ecx, dword [ebp + 8]
test eax, eax
mov dword [ecx], eax
jne 0x1037347
mov eax, 0x8007000e
jmp 0x103734e
push esi
push eax
call fcn.01036e14
pop edi
pop esi
pop ebx
pop ebp
ret 0xc
Function at 0x1037355
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov esi, dword [ebp + 0xc]
test esi, esi
jne 0x103736f
mov ecx, dword [ebp + 8]
xor eax, eax
mov dword [ecx], 0
jmp 0x10373e4
mov edi, esi
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
lea edi, [ecx - 1]
cmp edi, 0x258
jl 0x10373c4
push 0x2cb
push str.c:_ntprivatectoleuiole2.0_appscommonchicago..ole2_c.cpp
push str.Misc_Test_App
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x10549f8
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov ebx, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x10549f8
call ebx
push str.Invalid_String_Length
call ebx
push 0x104c08c
call ebx
push dword [ebp + 0x10]
push edi
call fcn.01037003
mov ecx, dword [ebp + 8]
test eax, eax
mov dword [ecx], eax
jne 0x10373dd
mov eax, 0x8007000e
jmp 0x10373e4
push esi
push eax
call fcn.01036f0e
pop edi
pop esi
pop ebx
pop ebp
ret 0xc

Function at 0x1038126
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 4
push esi
lea eax, [ebp - 4]
push eax
call fcn.0103ebf4
test eax, eax
je 0x103817b
push 0x15a
push str.c:_ntprivatectoleuiole2.0_appscommonchicago.._targdev.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov esi, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x1056c90
call esi
push str.GlobalAlloc_Failed
call esi
push 0x104c08c
call esi
xor eax, eax
jmp 0x103819e
push dword [ebp + 8]
mov ecx, dword [ebp - 4]
push dword [ebp - 4]
mov eax, dword [ecx]
call dword [eax + 0xc]
cmp dword [ebp - 4], 0
mov esi, eax
je 0x103819c
mov eax, dword [ebp - 4]
push dword [ebp - 4]
mov eax, dword [eax]
call dword [eax + 8]
mov eax, esi
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10381a5
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 4
push esi
lea eax, [ebp - 4]
push eax
call fcn.0103ebf4
test eax, eax
je 0x10381f8
push 0x189
push str.c:_ntprivatectoleuiole2.0_appscommonchicago.._targdev.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov esi, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x1056c90
call esi
push str.GlobalAlloc_Failed
call esi
push 0x104c08c
call esi
jmp 0x1038217
push dword [ebp + 8]
mov ecx, dword [ebp - 4]
push dword [ebp - 4]
mov eax, dword [ecx]
call dword [eax + 0x14]
cmp dword [ebp - 4], 0
je 0x1038217
mov eax, dword [ebp - 4]
push dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 8]
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x10386b7
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
xor edi, edi
mov esi, 1
mov ebx, dword [ebp + 8]
cmp ebx, edi
jne 0x103870e
push 0x211
push str.c:_ntprivatectoleuiole2.0_appscommonchicago..ipdoc.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1056c90
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Null_Window_Id
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push ebx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1038724
push 0
push ebx
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov edi, eax
test edi, edi
jne 0x103872c
xor eax, eax
jmp 0x10387a8
mov eax, dword [edi + 8]
test eax, eax
je 0x103873f
cmp eax, 1
je 0x1038746
cmp eax, 2
je 0x103874d
jmp 0x103875f
push str.Cs2Test
jmp 0x1038752
push str.Cl2Test
jmp 0x1038752
push str.Sr2Test
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x103875f
xor esi, esi
test esi, esi
je 0x10387a6
push 0x235
push str.c:_ntprivatectoleuiole2.0_appscommonchicago..ipdoc.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1056c90
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.Invalid_Document_Signature
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x104c08c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, edi
pop edi
pop esi
pop ebx
pop ebp
ret 4
Function at 0x103ac2d
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push edi
push 5
mov edi, dword [ebp + 8]
push edi
call dword [sym.imp.USER32.dll_GetWindow]
mov esi, eax
lea ecx, [ebp - 0x10]
push dword [ebp + 0xc]
push ecx
call dword [sym.imp.USER32.dll_CopyRect]
lea ecx, [ebp - 0x10]
mov ebx, dword [sym.imp.USER32.dll_ScreenToClient]
push ecx
push edi
call ebx
lea eax, [ebp - 8]
push eax
push edi
call ebx
test esi, esi
jne 0x103aca6
push 0x5ac
push str.c:_ntprivatectoleuiole2.0_appscommonchicago..dragdrop.c
push str.Cl32Test___ansi
push str.Assert_Failure__Module:__s__file__s__line__d_r_n
push 0x1056c90
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov edi, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x1056c90
call edi
push str.NULL_window_in_ChangeWndPos__.
call edi
push 0x104c08c
call edi
push 1
lea eax, [ebp - 0x10]
push eax
call fcn.0103ab19
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0103ab2a
push eax
push dword [ebp - 0xc]
push dword [ebp - 0x10]
push esi
call dword [sym.imp.USER32.dll_MoveWindow]
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8

Function at 0x103af08
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 4
push ebx
push esi
push edi
mov edi, dword [ebp + 0xc]
test edi, edi
je 0x103b057
mov esi, dword [ebp + 8]
push str.OleTest.ini
push 4
lea eax, [ebp - 4]
push eax
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 0x104dc74
mov dword [esi], 0
push str.DisableDropTarget
push edi
call ebx
test eax, eax
je 0x103af5d
push 0x104c2a0
lea eax, [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x103af5d
or byte [esi], 0x20
push str.OleTest.ini
lea eax, [ebp - 4]
push 4
push eax
push 0x104dc74
push str.FailTargetQI
push edi
call ebx
test eax, eax
je 0x103af8f
push 0x104c2a0
lea eax, [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x103af8f
or byte [esi], 1
push str.OleTest.ini
lea eax, [ebp - 4]
push 4
push eax
push 0x104dc74
push str.FailDragEnter
push edi
call ebx
test eax, eax
je 0x103afc1
push 0x104c2a0
lea eax, [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x103afc1
or byte [esi], 2
push str.OleTest.ini
lea eax, [ebp - 4]
push 4
push eax
push 0x104dc74
push str.FailDragOver
push edi
call ebx
test eax, eax
je 0x103aff3
push 0x104c2a0
lea eax, [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x103aff3
or byte [esi], 4
push str.OleTest.ini
lea eax, [ebp - 4]
push 4
push eax
push 0x104dc74
push str.FailDragLeave
push edi
call ebx
test eax, eax
je 0x103b025
push 0x104c2a0
lea eax, [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x103b025
or byte [esi], 8
push str.OleTest.ini
lea eax, [ebp - 4]
push 4
push eax
push 0x104dc74
push str.FailDrop
push edi
call ebx
test eax, eax
je 0x103b057
push 0x104c2a0
lea eax, [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x103b057
or byte [esi], 0x10
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8