joyce8/EMBER2024-capa huggingface dataset:
Function at 0x47c0eb
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x68
mov eax, dword [0x56a5a0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, ecx
push edi
mov dword [ebp - 0x64], esi
call dword [0x51a394]
push eax
call fcn.00445d0a
test esi, esi
je 0x47c11b
add esi, 0x20
mov dword [ebp - 0x68], esi
jmp 0x47c11f
and dword [ebp - 0x68], 0
lea ecx, [ebp - 0x68]
push ecx
lea esi, [eax + 4]
call fcn.00445c42
mov edi, dword [0x51a654]
mov esi, dword [0x570484]
push 0
push 0xc
call edi
push eax
push 0xb
call edi
push eax
push 1
mov ebx, 0x80
push ebx
push esi
call dword [0x51a648]
mov esi, dword [ebp - 0x64]
push eax
push 1
mov dword [esi + 0x24], eax
push ebx
add esi, 4
push dword [esi]
call dword [0x51a504]
mov eax, dword [0x570484]
push 0
push 0x32
mov dword [ebp - 0x68], eax
call edi
push eax
push 0x31
call edi
push eax
push 1
push ebx
push dword [ebp - 0x68]
call dword [0x51a648]
mov edi, dword [ebp - 0x64]
push eax
push 0
push ebx
push dword [esi]
mov dword [edi + 0x28], eax
call dword [0x51a504]
mov ebx, dword [0x51a6f0]
push 0x4e8
push dword [esi]
call ebx
push eax
call dword [0x51a604]
lea eax, [edi + 0x2c]
push eax
call fcn.0044f895
and dword [ebp - 0x60], 0
push 0x58
lea eax, [ebp - 0x5c]
push 0
push eax
call fcn.004ce6f0
add esp, 0xc
call fcn.0044f80e
mov dword [ebp - 0x50], 0x2bc
mov byte [ebp - 0x49], 0x86
mov byte [ebp - 0x45], 0xa
test eax, eax
je 0x47c202
mov dword [ebp - 0x60], 0x12
xor eax, eax
movzx ecx, word [eax + 0x532428]
mov word [ebp + eax - 0x44], cx
inc eax
inc eax
test cx, cx
jne 0x47c1ed
jmp 0x47c21e
mov dword [ebp - 0x60], 0xc
xor eax, eax
movzx ecx, word [eax + 0x52f968]
mov word [ebp + eax - 0x44], cx
inc eax
inc eax
test cx, cx
jne 0x47c20b
lea eax, [ebp - 0x60]
push eax
call dword [0x51a0d4]
push 0x4e7
push dword [esi]
mov dword [ebp - 0x64], eax
call ebx
push 1
push dword [ebp - 0x64]
push 0x30
push eax
call dword [0x51a504]
and dword [edi + 0x54], 0
push esi
xor eax, eax
call fcn.0044ab76
mov ecx, dword [esi]
call fcn.0044f725
push 5
push dword [esi]
call dword [0x51a500]
mov ecx, dword [ebp - 4]
pop edi
xor eax, eax
pop esi
xor ecx, ebp
inc eax
pop ebx
call fcn.004c9b4d
leave
ret

Function at 0x47d355
Capabilities:
Create thread

Disassembly:
cmp dword [esi + 0x44], 0
jne 0x47d3b9
push str._kpauth_sendemail_
lea eax, [esi + 0x48]
push eax
call fcn.0040283d
push dword [esp + 4]
lea eax, [esi + 0x4c]
push eax
call fcn.0040283d
push 0
push 4
push esi
push 0x47d3bc
push 0
push 0
mov dword [esi + 0x58], 0xa
call fcn.004cd2bb
add esp, 0x18
mov dword [esi + 0x44], eax
test eax, eax
jne 0x47d3b0
push str.ASSERT:_m_hSendData
push 0x16f
push str..dlgqq_bindemaildlg.cpp
xor ecx, ecx
call fcn.0040ef48
push dword [esi + 0x44]
call dword [0x51a168]
ret 4
Function at 0x47dc50
Capabilities:
Create process on windows

Disassembly:
push 4
mov eax, 0x51481e
call fcn.004d02ab
push dword [ebp + 0xc]
lea eax, [ebp + 0xc]
push eax
call fcn.004025b6
xor ebx, ebx
mov dword [ebp - 4], ebx
push 0x53296c
xor ecx, ecx
lea esi, [ebp + 0xc]
call fcn.00446207
inc eax
push ebx
mov ecx, esi
call fcn.004178b6
push dword [ebp + 0xc]
lea eax, [ebp - 0x10]
push eax
call fcn.0044f4d5
pop ecx
pop ecx
mov byte [ebp - 4], 1
push 5
push ebx
push ebx
push dword [ebp - 0x10]
push 0x530958
push ebx
call dword [0x51a480]
mov ecx, dword [ebp + 8]
push ebx
push 0x532820
call fcn.0047db17
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x10]
call fcn.004028da
or dword [ebp - 4], 0xffffffff
mov ecx, esi
call fcn.004028da
call fcn.004d0383
ret 8
Function at 0x47e3fc
Capabilities:
Hide graphical window

Disassembly:
push esi
mov esi, ecx
push 0x459
push dword [esi + 4]
call dword [0x51a6f0]
push 0
push eax
call dword [0x51a500]
push dword [esi + 4]
call dword [0x51a5ec]
pop esi
ret

Function at 0x4816bc
Capabilities:
Hide graphical window

Disassembly:
push esi
mov esi, ecx
push 0x459
push dword [esi + 4]
call dword [0x51a6f0]
push 0
push eax
call dword [0x51a500]
push dword [esi + 4]
call dword [0x51a5ec]
pop esi
ret

Function at 0x481a6c
Capabilities:
Hide graphical window

Disassembly:
push 0xc
mov eax, 0x514753
call fcn.004d02ab
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x481a85
cmp word [eax], 0
jne 0x481a98
push str.ASSERT:__IsStrEmpty_szSid_
push 0x72
push str..dlg_sharesettingdlg.cpp
xor ecx, ecx
call fcn.0040ef48
push dword [esi + 4]
call dword [0x51a508]
test eax, eax
jne 0x481ab8
push str.ASSERT:_IsWindow__
push 0x73
push str..dlg_sharesettingdlg.cpp
xor ecx, ecx
call fcn.0040ef48
lea eax, [ebp - 0x14]
push eax
call fcn.004028b3
and dword [ebp - 4], 0
lea eax, [ebp - 0x10]
push eax
call fcn.004028b3
mov byte [ebp - 4], 1
lea eax, [ebp - 0x18]
push 0x81
push eax
call fcn.0040df84
mov byte [ebp - 4], 2
mov eax, dword [eax]
push dword [ebp + 0x10]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00402363
add esp, 0x14
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18]
call fcn.004028da
push dword [ebp - 0x14]
push dword [esi + 4]
call dword [0x51a6dc]
lea eax, [ebp - 0x18]
push eax
call fcn.00408bd7
pop ecx
mov byte [ebp - 4], 3
lea edi, [ebp - 0x10]
call fcn.00403a2e
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18]
call fcn.004028da
mov edi, str.res_share_sharefolder.html
mov eax, edi
call fcn.00402826
push eax
push edi
lea eax, [ebp - 0x10]
call fcn.0040cf64
mov edi, dword [ebp - 0x10]
push 1
mov ecx, esi
call fcn.00484a18
mov edi, eax
test edi, edi
jge 0x481b6b
push str.ASSERT:____HRESULT__hr_____0_
push 0x7e
push str..dlg_sharesettingdlg.cpp
xor ecx, ecx
call fcn.0040ef48
mov ecx, dword [esi + 4]
call fcn.0044f725
push 1
push dword [esi + 4]
call dword [0x51a500]
push dword [ebp + 0xc]
lea eax, [esi + 0xa0]
push eax
call fcn.0040283d
push dword [ebp + 8]
lea eax, [esi + 0x9c]
push eax
call fcn.0040283d
push dword [ebp + 0x10]
lea eax, [esi + 0xa4]
push eax
call fcn.0040283d
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x10]
call fcn.004028da
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.004028da
mov eax, edi
call fcn.004d0383
ret 0xc
Function at 0x484a18
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5146be
mov eax, dword fs:[0]
push eax
sub esp, 0x24
push ebx
push esi
mov eax, dword [0x56a5a0]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
mov ebx, ecx
and dword [esp + 0xc], 0
push edi
push str.szURL___s
lea esi, [esp + 0x18]
call fcn.00401fa5
pop ecx
pop ecx
and dword [esp + 0x38], 0
push dword [eax]
lea eax, [esp + 0x10]
push eax
push str.CIEWndBaseDlg::Navigate
push 0xbf
mov esi, str.d:code_sharecube_branches_branch_wps_release_srcclientxxliveshelldlgie_iewindowbase.h
push esi
lea eax, [esp + 0x28]
push eax
call fcn.004020c4
mov byte [esp + 0x38], 2
lea ecx, [esp + 0x10]
call fcn.004028da
test edi, edi
je 0x484a99
cmp word [edi], 0
jne 0x484aab
push str.ASSERT:__IsStrEmpty_szURL_
push 0xc0
push esi
xor ecx, ecx
call fcn.0040ef48
mov eax, dword [ebx]
and dword [ebx + 0x74], 0
mov ecx, ebx
call dword [eax + 0x18]
push dword [ebp + 8]
push edi
call fcn.00485300
mov dword [esp + 0xc], eax
test eax, eax
jge 0x484ade
push eax
push str.ERROR_CHECK_COM_hr___x:_hr
push 0xc6
push esi
push 5
pop esi
call fcn.0040f52f
add esp, 0x10
mov esi, dword [esp + 0xc]
or dword [esp + 0x38], 0xffffffff
lea eax, [esp + 0x14]
push eax
call fcn.0040201a
mov eax, esi
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x485ffb
Capabilities:
Find taskbar

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push esi
xor esi, esi
push esi
push str.Shell_TrayWnd
call dword [0x51a5e0]
cmp eax, esi
jne 0x486018
xor eax, eax
jmp 0x48606c
lea ecx, [ebp - 0x10]
push ecx
push eax
mov dword [ebp - 0x10], esi
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], esi
mov dword [ebp - 4], esi
call dword [0x51a658]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
sub ecx, dword [ebp - 0x10]
sub edx, dword [ebp - 0xc]
xor eax, eax
inc eax
cmp edx, ecx
jle 0x486058
cmp dword [ebp - 0xc], esi
jne 0x486050
cmp dword [ebp - 0x10], esi
jne 0x486050
mov dword [edi], esi
jmp 0x48606c
mov dword [edi], 3
jmp 0x48606c
cmp dword [ebp - 0xc], esi
jne 0x48606a
cmp dword [ebp - 0x10], esi
jne 0x48606a
mov dword [edi], 2
jmp 0x48606c
mov dword [edi], eax
pop esi
leave
ret

Function at 0x48606f
Capabilities:
Find taskbar

Disassembly:
push edi
xor edi, edi
push edi
push str.Shell_TrayWnd
call dword [0x51a5e0]
cmp eax, edi
je 0x4860b0
push esi
mov esi, dword [0x51a694]
push edi
push str.TrayNotifyWnd
push edi
push eax
call esi
cmp eax, edi
je 0x4860af
push edi
push str.SysPager
push edi
push eax
call esi
cmp eax, edi
je 0x4860af
push edi
push str.ToolbarWindow32
push edi
push eax
call esi
pop esi
pop edi
ret

Function at 0x48739c
Capabilities:
Hide graphical window

Disassembly:
push esi
mov esi, ecx
push 0x459
push dword [esi + 4]
call dword [0x51a6f0]
push 0
push eax
call dword [0x51a500]
push dword [esi + 4]
call dword [0x51a5ec]
pop esi
ret

Function at 0x4873c1
Capabilities:
Hide graphical window

Disassembly:
push edi
mov edi, dword [0x51a500]
push 6
push dword [esi + 4]
call edi
push 0
push dword [esi + 4]
call edi
pop edi
ret
Function at 0x48b49d
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
push ebx
push esi
push edi
mov edi, eax
test edi, edi
je 0x48b4b0
add edi, 0xffffffdc
jmp 0x48b4b2
xor edi, edi
push dword [ebp + 8]
mov dword [ebp - 8], 1
push dword [edi + 4]
call dword [0x51a6f0]
mov esi, eax
push esi
call dword [0x51a5f8]
or dword [ebp - 4], 0xffffffff
mov ebx, eax
mov eax, dword [ebp + 0xc]
push ebx
call fcn.00401c94
test eax, eax
je 0x48b4fb
lea ecx, [ebx + 1]
push ecx
push eax
push esi
call dword [0x51a66c]
mov esi, dword [ebp + 0xc]
mov dword [ebp - 4], eax
or eax, 0xffffffff
call fcn.004022c7
cmp dword [ebp - 4], ebx
jge 0x48b50f
push dword [ebp + 8]
and dword [ebp - 8], 0
lea esi, [edi + 0x24]
call fcn.0048ca45
mov eax, dword [ebp - 8]
pop edi
pop esi
pop ebx
leave
ret 8

Function at 0x48b9b1
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
push ebx
mov ebx, eax
push esi
test ebx, ebx
je 0x48b9c3
add ebx, 0xffffffdc
jmp 0x48b9c5
xor ebx, ebx
push edi
push 0x4a2
push dword [ebx + 4]
mov dword [ebp - 8], 1
call dword [0x51a6f0]
mov esi, eax
push esi
call dword [0x51a5f8]
or dword [ebp - 4], 0xffffffff
mov edi, eax
mov eax, dword [ebp + 8]
push edi
call fcn.00401c94
test eax, eax
je 0x48ba11
lea ecx, [edi + 1]
push ecx
push eax
push esi
call dword [0x51a66c]
mov esi, dword [ebp + 8]
mov dword [ebp - 4], eax
or eax, 0xffffffff
call fcn.004022c7
cmp dword [ebp - 4], edi
pop edi
jge 0x48ba23
and dword [ebp - 8], 0
lea esi, [ebx + 0x24]
call fcn.0048caf7
mov eax, dword [ebp - 8]
pop esi
pop ebx
leave
ret 4

Function at 0x48bec4
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
push ebx
push esi
push edi
mov edi, eax
test edi, edi
je 0x48bed7
add edi, 0xffffffdc
jmp 0x48bed9
xor edi, edi
push dword [ebp + 8]
mov dword [ebp - 8], 1
push dword [edi + 4]
call dword [0x51a6f0]
mov esi, eax
push esi
call dword [0x51a5f8]
or dword [ebp - 4], 0xffffffff
mov ebx, eax
mov eax, dword [ebp + 0xc]
push ebx
call fcn.00401c94
test eax, eax
je 0x48bf22
lea ecx, [ebx + 1]
push ecx
push eax
push esi
call dword [0x51a66c]
mov esi, dword [ebp + 0xc]
mov dword [ebp - 4], eax
or eax, 0xffffffff
call fcn.004022c7
cmp dword [ebp - 4], ebx
jge 0x48bf36
push dword [ebp + 8]
and dword [ebp - 8], 0
lea esi, [edi + 0x24]
call fcn.0048cba7
mov eax, dword [ebp - 8]
pop edi
pop esi
pop ebx
leave
ret 8
Function at 0x48cd65
Capabilities:
Hide graphical window

Disassembly:
mov eax, dword [esi]
push edi
push 0
push dword [ecx + 4]
mov ecx, esi
call dword [eax]
push dword [esi + 4]
call dword [0x51a508]
mov edi, str.d:code_sharecube_branches_branch_wps_release_srcclientxxliveshelldlgchangepasswordwizardCSimpleWizard.h
test eax, eax
jne 0x48cd95
push str.ASSERT:_pPageWindow__IsWindow__
push 0x132
push edi
xor ecx, ecx
call fcn.0040ef48
push ebx
push 0xfffffffffffffff0
push dword [esi + 4]
call dword [0x51a638]
mov ebx, eax
test ebx, 0x40000000
jne 0x48cdbd
push str.ASSERT:_0____dwStyle__0x40000000L_
push 0x134
push edi
xor ecx, ecx
call fcn.0040ef48
test ebx, 0x800000
pop ebx
je 0x48cdd8
push str.ASSERT:_0___dwStyle__0x00800000L_
push 0x135
push edi
xor ecx, ecx
call fcn.0040ef48
push 0
push dword [esi + 4]
call dword [0x51a500]
pop edi
ret

Function at 0x48d0f6
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x24
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
push dword [esi + 4]
call dword [0x51a508]
test eax, eax
jne 0x48d128
push str.ASSERT:_pT__IsWindow__
push 0xf9
push str.d:code_sharecube_branches_branch_wps_release_srcclientxxliveshelldlgchangepasswordwizardCSimpleWizard.h
xor ecx, ecx
call fcn.0040ef48
lea eax, [ebp + 0xc]
push eax
lea eax, [esp + 0x2c]
lea ebx, [esi + 0x20]
push eax
mov dword [esp + 0x18], ebx
call fcn.0048c939
lea eax, [esi + 0x50]
push eax
mov dword [esp + 0x18], eax
lea eax, [esp + 0x24]
push eax
call fcn.0048c939
mov eax, dword [ebx + 0x18]
mov dword [esp + 0x1c], eax
mov eax, dword [ebx]
lea edi, [esp + 0x28]
lea esi, [esp + 0x18]
mov dword [esp + 0x18], eax
call fcn.0048ce2f
test al, al
jne 0x48d258
mov eax, dword [ebx + 0x18]
mov dword [esp + 0x1c], eax
mov eax, dword [ebx]
lea edi, [esp + 0x20]
lea esi, [esp + 0x18]
mov dword [esp + 0x18], eax
call fcn.0048ce2f
test al, al
jne 0x48d1a6
mov esi, edi
call fcn.0048d6f6
mov esi, dword [eax + 4]
call fcn.004894ea
test eax, eax
je 0x48d258
mov eax, dword [ebx + 0x18]
mov eax, dword [eax]
mov dword [esp + 0x1c], eax
mov eax, dword [ebx]
mov ebx, dword [0x51a500]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0x18]
mov eax, dword [eax]
lea edi, [esp + 0x20]
lea esi, [esp + 0x18]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x20], eax
call fcn.0048ce2f
test al, al
jne 0x48d258
call fcn.0048d6f6
mov edi, dword [ebp + 0xc]
cmp dword [eax], edi
je 0x48d1fa
call fcn.0048d6f6
mov eax, dword [eax + 4]
push 0
push dword [eax + 4]
call ebx
jmp 0x48d24a
call fcn.0048d6f6
mov ecx, eax
mov ecx, dword [ecx + 4]
mov eax, dword [ebp + 8]
add ecx, 4
add eax, 0x40
push ecx
call fcn.004425e3
lea esi, [esp + 0x18]
call fcn.0048d6f6
mov esi, dword [eax + 4]
call fcn.0048951d
lea esi, [esp + 0x18]
call fcn.0048d6f6
mov eax, dword [eax + 4]
push 5
push dword [eax + 4]
call ebx
call fcn.0048d6f6
mov esi, dword [eax + 4]
call fcn.0048d6ab
mov eax, dword [esp + 0x14]
mov dword [eax], edi
lea esi, [esp + 0x18]
call fcn.0048dc0d
jmp 0x48d1bb
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x48f20a
Capabilities:
Create thread

Disassembly:
push ebx
push esi
xor ebx, ebx
mov esi, eax
inc ebx
call fcn.0048efa4
call fcn.0048f509
test eax, eax
jne 0x48f223
mov eax, ebx
jmp 0x48f263
call fcn.0048f7d2
push 0
push 4
push esi
push 0x48fb35
push 0
push 0
call fcn.004cd2bb
add esp, 0x18
mov dword [esi + 0x74], eax
test eax, eax
jne 0x48f258
push str.ASSERT:_0___m_hThreadCheckProxy
push 0x6c
push str..dlgoptiondlgoptpageproxy.cpp
xor ecx, ecx
call fcn.0040ef48
push dword [esi + 0x74]
call dword [0x51a168]
xor eax, eax
pop esi
pop ebx
ret

Function at 0x48fdc7
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
push ebx
push esi
push edi
mov edi, ecx
mov esi, eax
test edi, edi
je 0x48fddc
add edi, 0xffffffac
jmp 0x48fdde
xor edi, edi
cmp dword [ebp + 0xc], 0
mov dword [ebp - 4], 1
je 0x48fe37
push dword [ebp + 8]
push dword [edi + 4]
call dword [0x51a6f0]
push eax
mov dword [ebp - 8], eax
call dword [0x51a5f8]
or dword [ebp + 0xc], 0xffffffff
mov ebx, eax
push ebx
mov eax, esi
call fcn.00401c94
test eax, eax
je 0x48fe2c
lea ecx, [ebx + 1]
push ecx
push eax
push dword [ebp - 8]
call dword [0x51a66c]
mov dword [ebp + 0xc], eax
or eax, 0xffffffff
call fcn.004022c7
cmp dword [ebp + 0xc], ebx
jge 0x48fe57
and dword [ebp - 4], 0
jmp 0x48fe4c
push dword [esi]
push dword [ebp + 8]
push dword [edi + 4]
call dword [0x51a590]
mov dword [ebp - 4], eax
test eax, eax
jne 0x48fe57
push dword [ebp + 8]
lea esi, [edi + 0x54]
call fcn.0048ff0f
mov eax, dword [ebp - 4]
pop edi
pop esi
pop ebx
leave
ret 8

Function at 0x490843
Capabilities:
Hide graphical window

Disassembly:
push 4
mov eax, 0x512740
call fcn.004d02ab
call fcn.00446e6f
call fcn.00448b95
test eax, eax
je 0x49087f
call fcn.00409c5c
push 0x473
push dword [esi + 4]
test eax, eax
jne 0x4908b7
call dword [0x51a6f0]
push 1
push eax
call dword [0x51a594]
jmp 0x4908c6
lea eax, [ebp - 0x10]
push 0xbd
push eax
call fcn.0040df84
pop ecx
pop ecx
and dword [ebp - 4], 0
push dword [eax]
push 0x477
push dword [esi + 4]
call dword [0x51a590]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.004028da
push 0x473
push dword [esi + 4]
call dword [0x51a6f0]
push 0
push eax
call dword [0x51a500]
call fcn.004d0383
ret
Function at 0x4908cc
Capabilities:
Create thread

Disassembly:
call fcn.00446e6f
call fcn.00448b95
test eax, eax
jne 0x4908ee
push 0x527fec
push 0x477
push dword [esi + 4]
call dword [0x51a590]
ret
push ebx
push edi
xor edi, edi
mov ebx, str..dlgoptiondlgoptpagesync.cpp
cmp dword [esi + 0x68], edi
je 0x49090e
push str.ASSERT:_0__m_hThreadCalSize
push 0xd4
push ebx
xor ecx, ecx
call fcn.0040ef48
cmp dword [esi + 0x6c], edi
je 0x490925
push str.ASSERT:_0__m_hThreadUpdateUI
push 0xd5
push ebx
xor ecx, ecx
call fcn.0040ef48
push edi
push 4
push esi
push 0x491651
push edi
mov dword [esi + 0x5c], edi
push edi
mov dword [esi + 0x54], edi
call fcn.004cd2bb
add esp, 0x18
mov dword [esi + 0x68], eax
cmp eax, edi
jne 0x490957
push str.ASSERT:_0___m_hThreadCalSize
push 0xdc
push ebx
xor ecx, ecx
call fcn.0040ef48
cmp dword [esi + 0x68], edi
je 0x49099d
push edi
push 4
push esi
push 0x4916c0
push edi
push edi
call fcn.004cd2bb
add esp, 0x18
mov dword [esi + 0x6c], eax
cmp eax, edi
jne 0x490988
push str.ASSERT:_0___m_hThreadUpdateUI
push 0xe1
push ebx
xor ecx, ecx
call fcn.0040ef48
cmp dword [esi + 0x6c], edi
je 0x49099d
push dword [esi + 0x68]
mov edi, dword [0x51a168]
call edi
push dword [esi + 0x6c]
call edi
pop edi
pop ebx
ret
Function at 0x490a68
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5100f4
mov eax, dword fs:[0]
push eax
sub esp, 0x464
mov eax, dword [0x56a5a0]
xor eax, esp
mov dword [esp + 0x45c], eax
push ebx
push esi
mov eax, dword [0x56a5a0]
xor eax, esp
push eax
lea eax, [esp + 0x470]
mov dword fs:[0], eax
push 0x41
xor ebx, ebx
push ebx
push dword [edi + 4]
lea eax, [esp + 0x28]
push eax
mov dword [esp + 0x20], 1
call fcn.0047a6d7
mov dword [esp + 0x478], ebx
lea eax, [esp + 0x14]
push 0xb8
push eax
mov dword [esp + 0x14], ebx
call fcn.0040df84
pop ecx
pop ecx
mov byte [esp + 0x478], 1
push dword [eax]
lea esi, [esp + 0x1c]
call fcn.0040e1be
mov byte [esp + 0x478], 3
lea ecx, [esp + 0x14]
call fcn.004028da
push 2
push ebx
call dword [0x51a814]
lea eax, [esp + 0xc]
push eax
push 0x11
push ebx
call dword [0x51a49c]
cmp eax, ebx
jge 0x490b40
push eax
push str.ERROR_CHECK_COMEX_hr___x:_hr
push 0x112
push str..dlgoptiondlgoptpagesync.cpp
push 5
pop esi
mov dword [esp + 0x20], ebx
call fcn.0040f52f
add esp, 0x10
jmp 0x490bdd
mov eax, dword [esp + 0x18]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0xc]
mov dword [esp + 0x20], eax
mov dword [esp + 0x30], 0x490c37
mov dword [esp + 0x34], edi
call dword [0x51a51c]
lea esi, [esp + 0x1c]
call fcn.00478406
cmp eax, 1
jne 0x490bc9
push ecx
mov eax, esp
mov dword [esp + 0x18], esp
lea ecx, [esp + 0x252]
push ecx
push eax
call fcn.004022e5
mov byte [esp + 0x47c], 4
mov byte [esp + 0x47c], 3
mov ecx, edi
call fcn.00490d5a
cmp eax, ebx
je 0x490b5c
lea eax, [esp + 0x24e]
push eax
lea esi, [edi + 0x78]
push esi
call fcn.0040283d
push dword [edi + 0x74]
mov ecx, dword [esi]
call fcn.0048138d
neg eax
sbb eax, eax
inc eax
pop ecx
mov dword [edi + 0x80], eax
jmp 0x490bdd
lea eax, [edi + 0x78]
push 0x527fec
push eax
call fcn.0040283d
mov dword [edi + 0x80], ebx
cmp dword [esp + 0xc], ebx
je 0x490bed
push dword [esp + 0xc]
call dword [0x51a818]
mov byte [esp + 0x478], bl
push dword [esp + 0x18]
call dword [0x51a44c]
or dword [esp + 0x478], 0xffffffff
lea eax, [esp + 0x1c]
push eax
call fcn.00477c61
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x470]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
mov ecx, dword [esp + 0x45c]
xor ecx, esp
call fcn.004c9b4d
mov esp, ebp
pop ebp
ret
Function at 0x490d5a
Capabilities:
Check if file exists

Disassembly:
push 0x18
mov eax, 0x510075
call fcn.004d02ab
mov esi, ecx
xor ebx, ebx
mov dword [ebp - 4], ebx
mov eax, dword [esi + 0x74]
mov eax, dword [eax - 0xc]
mov edi, str..dlgoptiondlgoptpagesync.cpp
cmp eax, ebx
jne 0x490d8e
push str.ASSERT:__IsStrEmpty_m_strCurSyncPath_
push 0x16d
push edi
xor ecx, ecx
call fcn.0040ef48
mov eax, dword [ebp + 8]
cmp dword [eax - 0xc], ebx
je 0x490da1
push eax
call dword [0x51a4b0]
test eax, eax
jne 0x490dc4
push str._u7bg_t
push str.CHECK_BOOL:bCheckMSG:__s
push 0x172
push edi
push 4
pop esi
mov dword [ebp - 0x1c], ebx
call fcn.0040f52f
add esp, 0x10
jmp 0x490f40
push dword [esi + 0x74]
lea eax, [ebp - 0x14]
push eax
call fcn.004022e5
mov byte [ebp - 4], 1
lea eax, [ebp - 0x14]
call fcn.004707d9
lea eax, [ebp + 8]
call fcn.004707d9
push dword [ebp + 8]
push dword [ebp - 0x14]
call fcn.004ca0f8
neg eax
sbb eax, eax
neg eax
pop ecx
pop ecx
jne 0x490e05
mov dword [ebp - 0x1c], 1
jmp 0x490f34
push ebx
push dword [ebp - 0x14]
push dword [ebp + 8]
call fcn.00492e3b
add esp, 0xc
test eax, eax
jne 0x490edc
push ebx
push dword [ebp + 8]
push dword [ebp - 0x14]
call fcn.00492e3b
add esp, 0xc
test eax, eax
jne 0x490edc
mov byte [ebp - 4], bl
lea eax, [ebp - 0x14]
push eax
call fcn.004025f7
push ecx
mov eax, esp
mov dword [ebp - 0x24], esp
lea ecx, [ebp + 8]
push ecx
push eax
call fcn.0041792e
mov byte [ebp - 4], 4
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 4], bl
call fcn.00491851
push dword [ebp + 8]
mov dword [ebp - 0x1c], 1
call dword [0x51a4d8]
test eax, eax
jne 0x490f40
lea eax, [ebp - 0x24]
push 0x92
push eax
call fcn.0040df84
mov edi, eax
mov byte [ebp - 4], 9
lea eax, [ebp - 0x14]
push 0x110
push eax
call fcn.0040df84
add esp, 0x10
mov byte [ebp - 4], 0xa
mov edi, dword [edi]
mov eax, dword [eax]
push 0x50024
push edi
push eax
push dword [esi + 4]
call dword [0x51a518]
cmp eax, 6
setne byte [ebp - 0xd]
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x14]
call fcn.004028da
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x24]
call fcn.004028da
cmp byte [ebp - 0xd], bl
je 0x490f40
mov dword [ebp - 0x1c], ebx
jmp 0x490f40
lea eax, [ebp - 0x1c]
push 0x92
push eax
call fcn.0040df84
mov edi, eax
mov byte [ebp - 4], 2
lea eax, [ebp - 0x24]
push 0xc0
push eax
call fcn.0040df84
add esp, 0x10
mov byte [ebp - 4], 3
mov edi, dword [edi]
mov eax, dword [eax]
push 0x50030
push edi
push eax
push dword [esi + 4]
call dword [0x51a518]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x24]
call fcn.004028da
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1c]
call fcn.004028da
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 4], bl
lea eax, [ebp - 0x14]
push eax
call fcn.004025f7
or dword [ebp - 4], 0xffffffff
lea eax, [ebp + 8]
push eax
call fcn.004025f7
mov eax, dword [ebp - 0x1c]
call fcn.004d0383
ret 4