Function at 0x551670
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x59cd6f
mov eax, dword fs:[0]
push eax
sub esp, 0x194
mov eax, dword [0x5da084]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x168], edx
mov edi, ecx
mov dword [ebp - 0x17c], edi
mov dword [ebp - 0x174], 0
mov eax, dword [edi]
cmp dword [eax - 0x10], 0
je 0x552405
push pe_nt_image_headers32
lea eax, [ebp - 0x14c]
push 0
push eax
call fcn.00570cd0
add esp, 0xc
mov dword [ebp - 0x150], 0x114
lea eax, [ebp - 0x150]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x551cd1
cmp dword [ebp - 0x14c], 0xa
jb 0x551cd1
lea ecx, [ebp - 0x15c]
call fcn.00414d80
lea ecx, [ebp - 0x160]
mov dword [ebp - 4], 0
call fcn.00434820
test al, al
jne 0x55179e
mov ecx, dword [0x5dfbe0]
test ecx, ecx
je 0x551791
mov eax, dword [ecx]
push 3
mov eax, dword [eax + 0x10]
call eax
test al, al
je 0x551791
push ecx
lea ecx, [ebp - 0xec]
call fcn.00430ce0
mov dword [ebp - 0x54], str.CloudFolderCleanup
mov dword [ebp - 0x50], 3
mov dword [ebp - 0x4c], str.C:jenkins_slaveDailyhotfix7.1.2_metaDesktopWinmain_rebarcosy_srcCloudFolderCleanup.cpp
mov dword [ebp - 0x48], 0xd1
mov dword [ebp - 0x44], str.sibcrux::UpdateFavoritesItem
mov byte [ebp - 0x40], 1
mov edx, str.failed_to_obtain_current_user_HKCU_key___using_special_HKCU_name
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xec]
call fcn.00416960
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0
call fcn.00430bd0
mov eax, 0x80000001
mov dword [ebp - 0x160], eax
jmp 0x5517a4
mov eax, dword [ebp - 0x160]
push ecx
mov dword [ebp - 0x170], eax
lea ecx, [ebp - 0x170]
push edi
lea eax, [ebp - 0x1a0]
push eax
call fcn.00554e90
lea eax, [ebp - 0x15c]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x1a0]
call fcn.00554780
test al, al
jne 0x5518c1
mov ecx, dword [0x5dfbe0]
or edi, 0xffffffff
test ecx, ecx
je 0x5518b5
mov eax, dword [ecx]
push 3
mov eax, dword [eax + 0x10]
call eax
test al, al
je 0x5518b5
mov ecx, dword [ebp - 0x198]
add ecx, 0xfffffff0
call fcn.005447c0
add eax, 0x10
mov dword [ebp - 0x158], eax
push ecx
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 3
call fcn.00430ce0
mov dword [ebp - 0x54], str.CloudFolderCleanup
mov dword [ebp - 0x50], 3
mov dword [ebp - 0x4c], str.C:jenkins_slaveDailyhotfix7.1.2_metaDesktopWinmain_rebarcosy_srcCloudFolderCleanup.cpp
mov dword [ebp - 0x48], 0xd9
mov dword [ebp - 0x44], str.sibcrux::UpdateFavoritesItem
mov byte [ebp - 0x40], 1
mov edx, str.UpdateFavoritesItem:_No_entry_to_remove._ID:
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xec]
call fcn.00416960
lea edx, [ebp - 0x158]
mov ecx, eax
call fcn.005432e0
mov edx, str._err
mov ecx, eax
call fcn.00416960
lea edx, [ebp - 0x15c]
mov ecx, eax
call fcn.005432e0
lea ecx, [ebp - 0xec]
call fcn.00430bd0
mov ecx, dword [ebp - 0x158]
mov eax, edi
add ecx, 0xfffffff0
lock xadd dword [ecx + 8], eax
dec eax
test eax, eax
jg 0x5518b5
cmp dword [ecx + 4], 0
jle 0x5518b5
push ecx
call fcn.00577de8
add esp, 4
mov byte [ebp - 0x151], 1
jmp 0x551b73
lea ecx, [ebp - 0x180]
mov dword [ebp - 0x170], 0x80000001
call fcn.00552620
mov esi, eax
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 5
call fcn.0054a890
mov edx, eax
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 7
call fcn.00414d80
mov edx, dword [edx]
mov ecx, str..._sibresCloudSync_
mov dword [ebp - 0x174], 8
call fcn.00416660
push eax
push ecx
push dword [edx - 0x10]
lea ecx, [ebp - 0x168]
call fcn.00544610
add esp, 0xc
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 8
call fcn.00414d80
mov eax, dword [esi]
mov edx, dword [ebp - 0x168]
mov dword [ebp - 0x174], 0x18
push dword [eax - 0x10]
push eax
push dword [edx - 0x10]
call fcn.00544610
add esp, 0xc
lea ecx, [ebp - 0x178]
mov edx, edi
call fcn.005527a0
mov edx, edi
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x158]
call fcn.00548610
lea eax, [ebp - 0x170]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x178]
push eax
push edi
lea ecx, [ebp - 0x28]
call fcn.00553b90
mov ecx, dword [ebp - 0x158]
or edi, 0xffffffff
add ecx, 0xfffffff0
mov eax, edi
lock xadd dword [ecx + 8], eax
dec eax
test eax, eax
jg 0x5519bf
cmp dword [ecx + 4], 0
jle 0x5519bf
push ecx
call fcn.00577de8
add esp, 4
mov ecx, dword [ebp - 0x178]
mov eax, edi
add ecx, 0xfffffff0
lock xadd dword [ecx + 8], eax
dec eax
test eax, eax
jg 0x5519e3
cmp dword [ecx + 4], 0
jle 0x5519e3
push ecx
call fcn.00577de8
add esp, 4
mov ecx, dword [ebp - 0x16c]
mov eax, edi
add ecx, 0xfffffff0
lock xadd dword [ecx + 8], eax
dec eax
test eax, eax
jg 0x551a07
cmp dword [ecx + 4], 0
jle 0x551a07
push ecx
call fcn.00577de8
add esp, 4
mov ecx, dword [ebp - 0x168]
mov eax, edi
add ecx, 0xfffffff0
lock xadd dword [ecx + 8], eax
dec eax
test eax, eax
jg 0x551a2b
cmp dword [ecx + 4], 0
jle 0x551a2b
push ecx
call fcn.00577de8
add esp, 4
mov ecx, dword [ebp - 0x184]
mov eax, edi
add ecx, 0xfffffff0
lock xadd dword [ecx + 8], eax
dec eax
test eax, eax
jg 0x551a4f
cmp dword [ecx + 4], 0
jle 0x551a4f
push ecx
call fcn.00577de8
add esp, 4
mov byte [ebp - 4], 0xf
mov eax, edi
mov ecx, dword [ebp - 0x180]
add ecx, 0xfffffff0
lock xadd dword [ecx + 8], eax
dec eax
test eax, eax
jg 0x551a77
cmp dword [ecx + 4], 0
jle 0x551a77
push ecx
call fcn.00577de8
add esp, 4
lea eax, [ebp - 0x15c]
push eax
lea ecx, [ebp - 0x28]
call fcn.00553d80
test al, al
jne 0x551bab
mov ecx, dword [0x5dfbe0]
test ecx, ecx
je 0x551b64
mov eax, dword [ecx]
push 1
mov eax, dword [eax + 0x10]
call eax
test al, al
je 0x551b64
mov ecx, dword [ebp - 0x198]
add ecx, 0xfffffff0
call fcn.005447c0
add eax, 0x10
mov dword [ebp - 0x158], eax
push ecx
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0x10
call fcn.00430ce0
mov dword [ebp - 0x54], str.CloudFolderCleanup
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x4c], str.C:jenkins_slaveDailyhotfix7.1.2_metaDesktopWinmain_rebarcosy_srcCloudFolderCleanup.cpp
mov dword [ebp - 0x48], 0xe3
mov dword [ebp - 0x44], str.sibcrux::UpdateFavoritesItem
mov byte [ebp - 0x40], 1
mov edx, str.UpdateFavoritesItem:_failed_to_add_CloudStorageProviderEntry:_entry
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xec]
call fcn.00416960
lea edx, [ebp - 0x158]
mov ecx, eax
call fcn.005432e0
mov edx, str._err
mov ecx, eax
call fcn.00416960
lea edx, [ebp - 0x15c]
mov ecx, eax
call fcn.005432e0
lea ecx, [ebp - 0xec]
call fcn.00430bd0
mov ecx, dword [ebp - 0x158]
mov eax, edi
add ecx, 0xfffffff0
lock xadd dword [ecx + 8], eax
dec eax
test eax, eax
jg 0x551b64
cmp dword [ecx + 4], 0
jle 0x551b64
push ecx
call fcn.00577de8
add esp, 4
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x151], 0
call fcn.00550c30
lea ecx, [ebp - 0x1a0]
call fcn.00550c30
mov eax, dword [ebp - 0x15c]
add eax, 0xfffffff0
lock xadd dword [eax + 8], edi
dec edi
test edi, edi
jg 0x551ba0
cmp dword [eax + 4], 0
jle 0x551ba0
push eax
call fcn.00577de8
add esp, 4
mov al, byte [ebp - 0x151]
jmp 0x552407
mov eax, dword [ebp - 0x160]
cmp eax, 0x80000001
je 0x551c30
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
je 0x551c30
mov ecx, dword [0x5dfbe0]
test ecx, ecx
je 0x551c30
mov eax, dword [ecx]
push 1
mov eax, dword [eax + 0x10]
call eax
test al, al
je 0x551c30
push ecx
lea ecx, [ebp - 0xec]
call fcn.00430ce0
mov dword [ebp - 0x54], str.CloudFolderCleanup
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x4c], str.C:jenkins_slaveDailyhotfix7.1.2_metaDesktopWinmain_rebarcosy_srcCloudFolderCleanup.cpp
mov dword [ebp - 0x48], 0xea
mov dword [ebp - 0x44], str.sibcrux::UpdateFavoritesItem
mov byte [ebp - 0x40], 1
mov edx, str.failed_to_close_hkcu_handle
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xec]
call fcn.00416960
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0xf
call fcn.00430bd0
mov eax, dword [ebp - 0x17c]
mov ecx, dword [eax]
sub ecx, 0x10
call fcn.005447c0
add eax, 0x10
mov dword [ebp - 0x158], eax
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 0x13
call fcn.00548270
mov esi, dword [ebp - 0x158]
push 0
push esi
push 0x13005
push 0x1000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 8], eax
dec eax
test eax, eax
jg 0x551c8f
cmp dword [esi + 4], 0
jle 0x551c8f
push esi
call fcn.00577de8
add esp, 4
lea ecx, [ebp - 0x28]
call fcn.00550c30
lea ecx, [ebp - 0x1a0]
call fcn.00550c30
mov eax, dword [ebp - 0x15c]
add eax, 0xfffffff0
lock xadd dword [eax + 8], edi
dec edi
test edi, edi
jg 0x552405
cmp dword [eax + 4], 0
jle 0x552405
push eax
call fcn.00577de8
add esp, 4
jmp 0x552405
xorps xmm0, xmm0
mov dword [ebp - 0x3c], 0
mov esi, 0xf
mov dword [ebp - 0x38], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x18], 4
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x28], 0x656e6f4e
lea ecx, [ebp - 0x15c]
mov dword [ebp - 4], 0x14
call fcn.00414d80
mov byte [ebp - 4], 0x15
mov edi, dword [ebp - 0x168]
mov ecx, edi
call fcn.00414da0
push edi
lea edx, [ebp - 0x15c]
call fcn.0054ccc0
add esp, 4
lea ecx, [ebp - 0x15c]
or edi, 0xffffffff
test al, al
jne 0x551ddb
call fcn.00414da0
mov ecx, dword [0x5dfbe0]
test ecx, ecx
je 0x551dcf
mov eax, dword [ecx]
push 1
mov eax, dword [eax + 0x10]
call eax
test al, al
je 0x551dcf
push ecx
lea ecx, [ebp - 0xec]
call fcn.00430ce0
mov dword [ebp - 0x54], str.CloudFolderCleanup
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x4c], str.C:jenkins_slaveDailyhotfix7.1.2_metaDesktopWinmain_rebarcosy_srcCloudFolderCleanup.cpp
mov dword [ebp - 0x48], 0xf7
mov dword [ebp - 0x44], str.sibcrux::UpdateFavoritesItem
mov byte [ebp - 0x40], 1
mov edx, str.UpdateFavoritesItem:_cannot_get_favorites:
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0xec]
call fcn.00416960
mov edx, dword [ebp - 0x168]
mov ecx, eax
call fcn.005432e0
lea ecx, [ebp - 0xec]
call fcn.00430bd0
mov byte [ebp - 0x151], 0
jmp 0x552225
call fcn.00548270
mov ecx, str.Links
call fcn.00416660
push eax
push ecx
lea ecx, [ebp - 0x15c]
call fcn.00544af0
mov eax, dword [ebp - 0x17c]
mov ecx, dword [eax]
sub ecx, 0x10
call fcn.005447c0
add eax, 0x10
mov dword [ebp - 0x16c], eax
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0x17
call fcn.005482f0
lea edx, [ebp - 0x16c]
lea ecx, [ebp - 0x180]
call fcn.00548610
push eax
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0x18
call fcn.00544730
mov byte [ebp - 4], 0x17
mov eax, edi
mov ecx, dword [ebp - 0x180]
add ecx, 0xfffffff0
lock xadd dword [ecx + 8], eax
dec eax
test eax, eax
jg 0x551e68
cmp dword [ecx + 4], 0
jle 0x551e68
push ecx
call fcn.00577de8
add esp, 4
push 0x5cb408
lea edx, [ebp - 0x15c]
lea ecx, [ebp - 0x160]
call fcn.00545ce0
add esp, 4
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x160]
mov eax, dword [ebp - 0x16c]
push dword [eax - 0x10]
lea esi, [eax - 0x10]
push eax
mov dword [ebp - 0x170], esi
call fcn.00544af0
mov ecx, str..lnk
call fcn.00416660
push eax
push ecx
lea ecx, [ebp - 0x160]
call fcn.00544af0
push dword [ebp - 0x168]
lea edx, [ebp - 0x3c]
lea ecx, [ebp - 0x160]
call fcn.00548fb0
add esp, 4
mov byte [ebp - 0x164], al
test al, al
jne 0x551f8a
mov ecx, dword [0x5dfbe0]
test ecx, ecx
je 0x551f7e
mov eax, dword [ecx]
push 3
mov eax, dword [eax + 0x10]
call eax
test al, al
je 0x551f7e
push ecx
lea ecx, [ebp - 0xec]
call fcn.00430ce0
mov dword [ebp - 0x54], str.CloudFolderCleanup
mov dword [ebp - 0x50], 3
mov dword [ebp - 0x4c], str.C:jenkins_slaveDailyhotfix7.1.2_metaDesktopWinmain_rebarcosy_srcCloudFolderCleanup.cpp
mov dword [ebp - 0x48], 0x103
mov dword [ebp - 0x44], str.sibcrux::UpdateFavoritesItem
mov byte [ebp - 0x40], 1
push 0
mov edx, str.UpdateFavoritesItem:_Favorite_link_doesnt_exist_:
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0xec]
call fcn.00416960
mov ecx, eax
call fcn.00414bf0
mov edx, 0x5cc8d0
mov ecx, eax
call fcn.00416960
mov edx, dword [ebp - 0x168]
mov ecx, eax
call fcn.005432e0
mov edx, 0x5bc664
mov ecx, eax
call fcn.00416960
lea ecx, [ebp - 0xec]
call fcn.00430bd0
mov byte [ebp - 0x151], 1
jmp 0x5521e3
lea ecx, [ebp - 0x184]
call fcn.00552620
mov esi, eax
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0x1b
call fcn.0054a890
mov edx, eax
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x1d
call fcn.00414d80
mov edx, dword [edx]
mov ecx, str..._sibresCloudSync_
mov dword [ebp - 0x174], 0x40
call fcn.00416660
push eax
push ecx
push dword [edx - 0x10]
lea ecx, [ebp - 0x178]
call fcn.00544610
push esi
lea edx, [ebp - 0x178]
lea ecx, [ebp - 0x158]
call fcn.00545d60
add esp, 0x10
mov ecx, dword [ebp - 0x178]
mov eax, edi
add ecx, 0xfffffff0
lock xadd dword [ecx + 8], eax
dec eax
test eax, eax
jg 0x552016
cmp dword [ecx + 4], 0
jle 0x552016
push ecx
call fcn.00577de8
add esp, 4
mov ecx, dword [ebp - 0x180]
mov eax, edi
add ecx, 0xfffffff0
lock xadd dword [ecx + 8], eax
dec eax
test eax, eax
jg 0x55203a
cmp dword [ecx + 4], 0
jle 0x55203a
push ecx
call fcn.00577de8
add esp, 4
mov ecx, dword [ebp - 0x184]
mov eax, edi
add ecx, 0xfffffff0
lock xadd dword [ecx + 8], eax
dec eax
test eax, eax
jg 0x55205e
cmp dword [ecx + 4], 0
jle 0x55205e
push ecx
call fcn.00577de8
add esp, 4
lea ecx, [ebp - 0x174]
call fcn.00414d80
mov ecx, str.Adobe_Creative_Cloud
mov byte [ebp - 4], 0x22
call fcn.00416660
push eax
push ecx
lea ecx, [ebp - 0x174]
call fcn.004163d0
lea ecx, [ebp - 0x188]
call fcn.00414d80
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 0x24
push ecx
lea ecx, [ebp - 0x174]
push ecx
push eax
mov eax, dword [ebp - 0x17c]
lea ecx, [ebp - 0x160]
push eax
mov edx, eax
call fcn.00551400
mov edx, dword [ebp - 0x188]
add esp, 0x10
mov esi, eax
add edx, 0xfffffff0
mov ecx, edi
lock xadd dword [edx + 8], ecx
dec ecx
test ecx, ecx
jg 0x5520df
cmp dword [edx + 4], 0
jle 0x5520df
push edx
call fcn.00577de8
add esp, 4
mov byte [ebp - 4], 0x21
mov eax, edi
mov ecx, dword [ebp - 0x174]
add ecx, 0xfffffff0
lock xadd dword [ecx + 8], eax
dec eax
test eax, eax
jg 0x552107
cmp dword [ecx + 4], 0
jle 0x552107
push ecx
call fcn.00577de8
add esp, 4
mov ecx, dword [0x5dfbe0]
test esi, esi
jns 0x552283
test ecx, ecx
je 0x5521b2
mov eax, dword [ecx]
push 1
mov eax, dword [eax + 0x10]
call eax
test al, al
je 0x5521b2
push ecx
lea ecx, [ebp - 0xec]
call fcn.00430ce0
mov dword [ebp - 0x54], str.CloudFolderCleanup
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x4c], str.C:jenkins_slaveDailyhotfix7.1.2_metaDesktopWinmain_rebarcosy_srcCloudFolderCleanup.cpp
mov dword [ebp - 0x48], 0x10b
mov dword [ebp - 0x44], str.sibcrux::UpdateFavoritesItem
mov byte [ebp - 0x40], 1
push dword [ebp - 0x164]
mov edx, str.UpdateFavoritesItem:_add_to_favorites_failed_:
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0xec]
call fcn.00416960
mov ecx, eax
call fcn.00414bf0
mov edx, 0x5cc8d0
mov ecx, eax
call fcn.00416960
mov edx, dword [ebp - 0x168]
mov ecx, eax
call fcn.005432e0
mov edx, 0x5bc664
mov ecx, eax
call fcn.00416960
lea ecx, [ebp - 0xec]
call fcn.00430bd0
mov ecx, dword [ebp - 0x158]
mov eax, edi
mov byte [ebp - 0x151], 0
add ecx, 0xfffffff0
lock xadd dword [ecx + 8], eax
dec eax
test eax, eax
jg 0x5521dd
cmp dword [ecx + 4], 0
jle 0x5521dd
push ecx
call fcn.00577de8
add esp, 4
mov esi, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x160]
mov eax, edi
add ecx, 0xfffffff0
lock xadd dword [ecx + 8], eax
dec eax
test eax, eax
jg 0x552207
cmp dword [ecx + 4], 0
jle 0x552207
push ecx
call fcn.00577de8
add esp, 4
mov eax, edi
lock xadd dword [esi + 8], eax
dec eax
test eax, eax
jg 0x552222
cmp dword [esi + 4], 0
jle 0x552222
push esi
call fcn.00577de8
add esp, 4
mov esi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x15c]
add eax, 0xfffffff0
lock xadd dword [eax + 8], edi
dec edi
test edi, edi
jg 0x552247
cmp dword [eax + 4], 0
jle 0x552247
push eax
call fcn.00577de8
add esp, 4
cmp esi, 0x10
jb 0x552278
mov ecx, dword [ebp - 0x28]
inc esi
mov eax, ecx
cmp esi, 0x1000
jb 0x55226e
mov ecx, dword [eax - 4]
add esi, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x552422
push esi
push ecx
call fcn.0056ebaf
add esp, 8
mov al, byte [ebp - 0x151]
jmp 0x552407
test ecx, ecx
je 0x5522ea
mov eax, dword [ecx]
push 3
mov eax, dword [eax + 0x10]
call eax
test al, al
je 0x5522ea
push ecx
lea ecx, [ebp - 0xec]
call fcn.00430ce0
mov dword [ebp - 0x54], str.CloudFolderCleanup
mov dword [ebp - 0x50], 3
mov dword [ebp - 0x4c], str.C:jenkins_slaveDailyhotfix7.1.2_metaDesktopWinmain_rebarcosy_srcCloudFolderCleanup.cpp
mov dword [ebp - 0x48], 0x10f
mov dword [ebp - 0x44], str.sibcrux::UpdateFavoritesItem
mov byte [ebp - 0x40], 1
mov edx, str.UpdateFavoritesItem_successful
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0xec]
call fcn.00416960
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0x21
call fcn.00430bd0
mov ecx, dword [ebp - 0x15c]
add ecx, 0xfffffff0
mov dword [ebp - 0x164], ecx
call fcn.005447c0
add eax, 0x10
mov dword [ebp - 0x17c], eax
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], 0x27
call fcn.00548270
mov esi, dword [ebp - 0x17c]
push 0
push esi
push 0x13005
push 0x1000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 8], eax
dec eax
test eax, eax
jg 0x55234d
cmp dword [esi + 4], 0
jle 0x55234d
push esi
call fcn.00577de8
add esp, 4
mov ecx, dword [ebp - 0x158]
mov eax, edi
add ecx, 0xfffffff0
lock xadd dword [ecx + 8], eax
dec eax
test eax, eax
jg 0x552371
cmp dword [ecx + 4], 0
jle 0x552371
push ecx
call fcn.00577de8
add esp, 4
mov ecx, dword [ebp - 0x160]
mov eax, edi
add ecx, 0xfffffff0
lock xadd dword [ecx + 8], eax
dec eax
test eax, eax
jg 0x552395
cmp dword [ecx + 4], 0
jle 0x552395
push ecx
call fcn.00577de8
add esp, 4
mov ecx, dword [ebp - 0x170]
mov eax, edi
lock xadd dword [ecx + 8], eax
dec eax
test eax, eax
jg 0x5523b6
cmp dword [ecx + 4], 0
jle 0x5523b6
push ecx
call fcn.00577de8
add esp, 4
mov eax, dword [ebp - 0x164]
lock xadd dword [eax + 8], edi
dec edi
test edi, edi
jg 0x5523d5
cmp dword [eax + 4], 0
jle 0x5523d5
push eax
call fcn.00577de8
add esp, 4
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x552405
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x5523fb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x552427
push ecx
push edx
call fcn.0056ebaf
add esp, 8
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0056eb71
mov esp, ebp
pop ebp
ret
call fcn.00578112
call fcn.00578112
int3