joyce8/EMBER2024-capa huggingface dataset:
Function at 0x50858c
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x114
mov eax, dword [0x5f2e68]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x103
xor ebx, ebx
lea eax, [ebp - 0x10f]
push ebx
push eax
mov byte [ebp - 0x110], 0
call fcn.005306b0
add esp, 0xc
push str.regterms.dat
lea edi, [ebp - 0x110]
call fcn.00470e3d
pop ecx
call fcn.00508688
mov edi, eax
push edi
mov edx, edi
call fcn.004cf445
cmp edi, ebx
pop ecx
jne 0x5085f6
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005317e7
leave
ret
push 0x90c
push str..UpdatePAULA.c
mov edx, 0x54f4b4
lea ecx, [ebp - 0x110]
call fcn.00434df1
mov esi, eax
test esi, esi
pop ecx
pop ecx
jne 0x508647
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
inc ebx
cmp ebx, 3
jl 0x5085f6
lea eax, [ebp - 0x110]
push eax
push str.:4:SaveTamsRegisteredTerminals___FAILED:_fopen__s__FAILED.
call fcn.0042b70b
pop ecx
pop ecx
push edi
call fcn.0053061e
pop ecx
mov eax, esi
jmp 0x5085e7
push edi
mov eax, edi
call fcn.004cf535
pop ecx
push esi
push 1
push edi
call fcn.00530f70
pop ecx
push eax
push edi
call fcn.00531aad
add esp, 0x10
cmp eax, 1
je 0x50867c
lea eax, [ebp - 0x110]
push eax
push str.:4:SaveTamsRegisteredTerminals___FAILED:_fwrite__s__FAILED.
call fcn.0042b70b
pop ecx
pop ecx
mov ecx, esi
call fcn.00435239
xor esi, esi
inc esi
jmp 0x50863c

Function at 0x50af1c
Capabilities:
Write file on windows

Disassembly:
push ecx
cmp dword [esp + 8], 0
push esi
jne 0x50af3a
push str.LstFtpStmp.tim
push 0
call fcn.00493154
pop ecx
pop ecx
call fcn.004314ff
jmp 0x50af90
push 0xfa4
push str..UpdatePAULA.c
push str.LstFtpStmp.tim
push 0
call fcn.00493154
pop ecx
pop ecx
mov edx, 0x54f4b4
mov ecx, eax
call fcn.00434df1
mov esi, eax
test esi, esi
pop ecx
pop ecx
jne 0x50af75
push str.:3:SetLastTimeFTP___FAILED:_fopen___FAILED.
call fcn.0042b70b
pop ecx
xor eax, eax
jmp 0x50af90
push esi
push 1
push 0x10
push dword [esp + 0x18]
call fcn.00531aad
add esp, 0x10
mov ecx, esi
call fcn.00435239
xor eax, eax
inc eax
pop esi
pop ecx
ret

Function at 0x50af93
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
mov ebx, eax
push esi
push edi
xor eax, eax
xor esi, esi
cmp ebx, esi
mov word [ebp - 0x10], si
lea edi, [ebp - 0xe]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
jne 0x50afb5
lea ebx, [ebp - 0x10]
push 0x10
push esi
push ebx
call fcn.005306b0
add esp, 0xc
push 0xfbd
push str..UpdatePAULA.c
push str.LstFtpStmp.tim
push esi
call fcn.00493154
pop ecx
pop ecx
mov edx, 0x54f4b8
mov ecx, eax
call fcn.00434df1
mov esi, eax
test esi, esi
pop ecx
pop ecx
je 0x50b004
push esi
push 1
push 0x10
push ebx
call fcn.00530e93
add esp, 0x10
mov ecx, esi
call fcn.00435239
xor eax, eax
inc eax
pop edi
pop esi
pop ebx
leave
ret
Function at 0x50be06
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x128
mov eax, dword [0x5f2e68]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
push esi
push edi
push 0x103
xor esi, esi
lea eax, [ebp - 0x113]
push esi
push eax
mov byte [ebp - 0x114], 0
call fcn.005306b0
mov word [ebp - 0x128], si
xor eax, eax
lea edi, [ebp - 0x126]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0xc
stosd dword es:[edi], eax
push esi
push esi
mov dword [ebp - 0x118], esi
stosw word es:[edi], ax
call fcn.00493154
push eax
call fcn.00432310
add esp, 0xc
test eax, eax
jne 0x50be7a
push esi
push esi
push esi
call fcn.00493154
pop ecx
pop ecx
mov ecx, eax
call fcn.0043262d
pop ecx
push str.prcolmem.dat
push esi
push esi
call fcn.00493154
pop ecx
pop ecx
push eax
push 0x553c34
lea eax, [ebp - 0x114]
push 0x104
push eax
call fcn.004ce4e5
add esp, 0x14
cmp dword [ebp + 8], esi
jne 0x50beb7
lea eax, [ebp - 0x114]
call fcn.004314ff
jmp 0x50bf8f
lea eax, [ebp - 0x128]
push eax
lea ecx, [ebp - 0x118]
call fcn.0050bfa1
test eax, eax
pop ecx
je 0x50bed4
mov eax, dword [ebp - 0x118]
cmp dword [ebp + 8], 0x63
mov ebx, str..UpdatePAULA.c
jne 0x50bef7
cmp eax, 3
jne 0x50beed
mov dword [ebp + 8], 2
jmp 0x50bf18
xor ecx, ecx
inc ecx
cmp eax, ecx
je 0x50bee4
mov dword [ebp + 8], ecx
cmp dword [ebp + 8], eax
jne 0x50bf18
push esi
sub esp, 0x10
lea esi, [ebp - 0x128]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004f9794
add esp, 0x14
test eax, eax
jne 0x50bf2d
push 0x11cd
lea eax, [ebp - 0x128]
push ebx
push eax
call fcn.004fb92f
add esp, 0xc
push 0x11d0
push ebx
mov edx, 0x54f4b4
lea ecx, [ebp - 0x114]
call fcn.00434df1
mov esi, eax
test esi, esi
pop ecx
pop ecx
jne 0x50bf66
lea eax, [ebp - 0x114]
push eax
push dword [ebp + 8]
push str.:7:SetLastUpdateProtocol__ld__FAILED:_fopen___s____wb___FAILED.
call fcn.0042b70b
add esp, 0xc
xor eax, eax
jmp 0x50bf92
push esi
push 1
lea eax, [ebp + 8]
push 4
push eax
call fcn.00531aad
push esi
push 1
lea eax, [ebp - 0x128]
push 0x10
push eax
call fcn.00531aad
add esp, 0x20
mov ecx, esi
call fcn.00435239
xor eax, eax
inc eax
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005317e7
leave
ret
Function at 0x50bfa1
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x130
mov eax, dword [0x5f2e68]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
xor ebx, ebx
push 0x103
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x113]
push ebx
push eax
mov esi, ecx
mov byte [ebp - 0x114], bl
call fcn.005306b0
xor eax, eax
mov word [ebp - 0x12c], bx
lea edi, [ebp - 0x12a]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0xc
cmp esi, ebx
mov dword [ebp - 0x11c], ebx
stosw word es:[edi], ax
je 0x50bfff
mov dword [esi], ebx
cmp dword [ebp - 0x118], ebx
je 0x50c018
push 0x10
push ebx
push dword [ebp - 0x118]
call fcn.005306b0
add esp, 0xc
push str.prcolmem.dat
push ebx
push ebx
call fcn.00493154
pop ecx
pop ecx
push eax
push 0x553c34
lea eax, [ebp - 0x114]
push 0x104
push eax
call fcn.004ce4e5
push 0x1200
push str..UpdatePAULA.c
mov edx, 0x54f4b8
lea ecx, [ebp - 0x114]
call fcn.00434df1
mov edi, eax
add esp, 0x1c
cmp edi, ebx
jne 0x50c064
xor eax, eax
jmp 0x50c0b7
push edi
push 1
lea eax, [ebp - 0x11c]
push 4
push eax
call fcn.00530e93
push edi
push 1
lea eax, [ebp - 0x12c]
push 0x10
push eax
call fcn.00530e93
add esp, 0x20
mov ecx, edi
call fcn.00435239
cmp esi, ebx
je 0x50c09c
mov eax, dword [ebp - 0x11c]
mov dword [esi], eax
cmp dword [ebp - 0x118], ebx
je 0x50c0b4
mov edi, dword [ebp - 0x118]
lea esi, [ebp - 0x12c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
xor eax, eax
inc eax
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005317e7
leave
ret
Function at 0x50cfc3
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x13c
mov eax, dword [0x5f2e68]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
xor eax, eax
push esi
push edi
xor esi, esi
mov word [ebp - 0x128], si
lea edi, [ebp - 0x126]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
xor eax, eax
mov word [ebp - 0x138], si
lea edi, [ebp - 0x136]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push 0x103
stosw word es:[edi], ax
lea eax, [ebp - 0x10f]
push esi
push eax
mov byte [ebp - 0x110], 0
call fcn.005306b0
add esp, 0xc
push str.c_config.lcg
push str.ServerSync_
push esi
push esi
mov dword [ebp - 0x114], esi
call fcn.00493030
pop ecx
pop ecx
push eax
push 0x54f4c0
lea eax, [ebp - 0x110]
push 0x104
push eax
call fcn.004ce4e5
lea eax, [ebp - 0x128]
push eax
lea ecx, [ebp - 0x110]
call fcn.0042e906
add esp, 0x1c
test eax, eax
je 0x50d141
push 0x139b
push str..UpdatePAULA.c
mov ebx, str.CCArcMod.tim
push ebx
push esi
call fcn.00493154
pop ecx
pop ecx
mov edx, 0x54f4b8
mov ecx, eax
call fcn.00434df1
cmp eax, esi
pop ecx
pop ecx
mov dword [ebp - 0x118], eax
je 0x50d0ed
push eax
push 1
lea eax, [ebp - 0x138]
push 0x10
push eax
call fcn.00530e93
mov edi, esp
lea esi, [ebp - 0x128]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
lea esi, [ebp - 0x138]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004f989d
add esp, 0x20
test eax, eax
jne 0x50d0de
mov dword [ebp - 0x114], 1
mov ecx, dword [ebp - 0x118]
call fcn.00435239
xor esi, esi
jmp 0x50d0f7
mov dword [ebp - 0x114], 1
cmp dword [ebp - 0x114], esi
je 0x50d141
push 0x13a8
push str..UpdatePAULA.c
push ebx
push esi
call fcn.00493154
pop ecx
pop ecx
mov edx, 0x54f4b4
mov ecx, eax
call fcn.00434df1
mov edi, eax
cmp edi, esi
pop ecx
pop ecx
je 0x50d141
push edi
push 1
lea eax, [ebp - 0x128]
push 0x10
push eax
call fcn.00531aad
add esp, 0x10
mov ecx, edi
call fcn.00435239
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x114]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005317e7
leave
ret
Function at 0x5108f8
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x118
mov eax, dword [0x5f2e68]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push edi
xor ebx, ebx
push 0x103
lea eax, [ebp - 0x10f]
push ebx
push eax
mov byte [ebp - 0x110], bl
call fcn.005306b0
add esp, 0xc
push str.FcUpd.flg
lea edi, [ebp - 0x110]
mov dword [ebp - 0x114], ebx
call fcn.00470e3d
pop ecx
push ebx
push 0x80
push 3
push ebx
push 7
push 1
mov eax, edi
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
cmp edi, 0xffffffff
jne 0x510972
cmp esi, ebx
je 0x51096e
push 0x10
push ebx
push esi
call fcn.005306b0
add esp, 0xc
xor eax, eax
jmp 0x5109ce
cmp esi, ebx
je 0x510988
push ebx
lea eax, [ebp - 0x114]
push eax
push 0x10
push esi
push edi
call dword [sym.imp.KERNEL32.dll_ReadFile]
call fcn.00435716
lea eax, [ebp - 0x110]
call fcn.004314ff
test eax, eax
jne 0x5109ad
push str._GetLastError_
push str.:4:GetForceUpdateFlag___FAILED_to_delete_the_flag_file:__s
call fcn.0042b70b
pop ecx
pop ecx
cmp dword [ebp - 0x114], 0x10
je 0x5109cb
push 0x10
push dword [ebp - 0x114]
push str.:4:GetForceUpdateFlag___encountered_a_problem:_only__d_bytes_of__d_were_could_be_loaded.
call fcn.0042b70b
add esp, 0xc
xor eax, eax
inc eax
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop ebx
call fcn.005317e7
leave
ret
Function at 0x5117e1
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1a0
mov eax, dword [0x5f2e68]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
xor ebx, ebx
push 0x7f
mov dword [ebp - 0x1a0], eax
lea eax, [ebp - 0x8b]
mov esi, ecx
push ebx
push eax
mov dword [ebp - 0x19c], esi
mov byte [ebp - 0x8c], bl
call fcn.005306b0
add esp, 0xc
push 0x103
lea eax, [ebp - 0x193]
push ebx
push eax
mov byte [ebp - 0x194], bl
call fcn.005306b0
add esp, 0xc
cmp esi, ebx
mov dword [ebp - 0x198], ebx
je 0x5119ee
mov edi, 0x14c
push edi
push ebx
push esi
call fcn.005306b0
add esp, 0xc
push dword [ebp - 0x1a0]
mov ecx, 0x80
lea eax, [ebp - 0x8c]
call fcn.004ccc3f
pop ecx
mov esi, eax
call fcn.004ccecd
mov ecx, esi
call fcn.004ccfc5
mov ebx, esi
call fcn.0046fe16
mov edx, esi
call fcn.004ccc0d
test eax, eax
je 0x5118a2
push str.:7:GetLastFTPConnectTimeRemote___FAILED:_No_remote_ip_address_was_provided_
call fcn.0042b70b
pop ecx
jmp 0x5119ee
push str.FTPCRF.fat
push str.P2_DC001
push 0x5f5380
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x194]
push str._s_s_s_s
push eax
call fcn.00531b2f
push 0x3a98
lea ecx, [ebp - 0x194]
call fcn.0043232a
add esp, 0x1c
test eax, eax
je 0x5119ee
push 0
push 0x61a8
push 3
push 7
push 1
lea eax, [ebp - 0x194]
push eax
push 0x20
pop eax
call fcn.0042eb42
add esp, 0x18
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp esi, 0xffffffff
jne 0x511953
cmp eax, 2
je 0x5119ee
cmp eax, 3
je 0x5119ee
cmp eax, 0xf
je 0x5119ee
cmp eax, 0x35
je 0x5119ee
push eax
push str._GetLastError_
lea eax, [ebp - 0x194]
push eax
push str.:3:GetLastFTPConnectTimeRemote___FAILED:_CreateFile___s___FAILED:__s_ld
call fcn.0042bd38
add esp, 0x10
jmp 0x5119ee
push 0
lea eax, [ebp - 0x198]
push eax
push edi
push dword [ebp - 0x19c]
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x5119b1
cmp dword [ebp - 0x198], edi
jb 0x5119b1
mov eax, dword [ebp - 0x19c]
call fcn.005119ff
test eax, eax
je 0x5119a5
mov eax, dword [ebp - 0x19c]
call fcn.005119ff
push eax
lea eax, [ebp - 0x194]
push eax
push str.:7:GetLastFTPConnectTimeRemote___read_data_from___s__and_it_seems_to_be_corrupt:_IsFtpConnectTimeInvalid___returned__ld
call fcn.0042bd38
add esp, 0xc
mov edi, esi
call fcn.00435716
xor eax, eax
inc eax
jmp 0x5119f0
mov eax, dword [0x7101dc]
inc dword [0x7101dc]
cmp eax, 5
jae 0x5119e7
push str._GetLastError_
push dword [ebp - 0x198]
lea eax, [ebp - 0x194]
push edi
push eax
push dword [0x7101dc]
push str.:7:_d_of_5:_GetLastFTPConnectTimeRemote___FAILED:_ReadFile___s____ld__FAILED:_Could_only_read__ld_bytes:__s
call fcn.0042b70b
add esp, 0x18
mov edi, esi
call fcn.00435716
xor eax, eax
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005317e7
leave
ret
Function at 0x513955
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x124
mov eax, dword [0x5f2e68]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
xor ebx, ebx
push edi
push 0x103
lea eax, [ebp - 0x10f]
push ebx
push eax
mov dword [ebp - 0x124], ebx
mov dword [ebp - 0x120], ebx
mov dword [ebp - 0x118], ebx
mov dword [ebp - 0x11c], ebx
mov byte [ebp - 0x110], bl
call fcn.005306b0
add esp, 0xc
push str.Live.ark
lea edi, [ebp - 0x110]
call fcn.00470e3d
pop ecx
lea eax, [ebp - 0x120]
push eax
lea ecx, [ebp - 0x124]
mov edx, edi
call fcn.00406416
test eax, eax
pop ecx
jne 0x5139d1
xor eax, eax
jmp 0x513a56
call fcn.004fa8e4
push ebx
push ebx
mov esi, eax
call fcn.00493154
push eax
lea eax, [ebp - 0x110]
push str._sLUA.DAT
push eax
call fcn.00531b2f
add esp, 0x14
mov dword [ebp - 0x114], ebx
push 0x21c9
push str..UpdatePAULA.c
mov edx, 0x54f4b8
lea ecx, [ebp - 0x110]
call fcn.00434df1
mov edi, eax
cmp edi, ebx
pop ecx
pop ecx
jne 0x513a65
lea edi, [ebp - 0x110]
call fcn.00432263
test eax, eax
je 0x513a53
push 0x96
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.004fa8e4
sub eax, esi
cmp eax, 0x157c
ja 0x513a53
inc dword [ebp - 0x114]
cmp dword [ebp - 0x114], 0xf
jl 0x5139fa
xor eax, eax
inc eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005317e7
leave
ret
push edi
xor esi, esi
inc esi
push esi
lea eax, [ebp - 0x11c]
push 4
push eax
call fcn.00530e93
add esp, 0x10
cmp eax, esi
je 0x513a92
lea eax, [ebp - 0x110]
push eax
push str.:8:IsNewUpdateAvailable___encountered_a_problem:_fread___s___FAILED_to_read_the_archive_size_
call fcn.0042bd38
pop ecx
pop ecx
push edi
push esi
lea eax, [ebp - 0x118]
push 4
push eax
call fcn.00530e93
add esp, 0x10
cmp eax, esi
je 0x513abc
lea eax, [ebp - 0x110]
push eax
push str.:8:IsNewUpdateAvailable___encountered_a_problem:_fread___s___FAILED_to_read_the_archive_CheckSum_
call fcn.0042bd38
pop ecx
pop ecx
mov ecx, edi
call fcn.00435239
mov eax, dword [ebp - 0x124]
cmp eax, dword [ebp - 0x118]
jne 0x513ae3
mov eax, dword [ebp - 0x120]
cmp eax, dword [ebp - 0x11c]
je 0x5139ca
mov eax, esi
jmp 0x513a56
Function at 0x513aea
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x11c
mov eax, dword [0x5f2e68]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor ebx, ebx
push 0x103
lea eax, [ebp - 0x10f]
push ebx
push eax
mov esi, ecx
mov byte [ebp - 0x110], bl
call fcn.005306b0
add esp, 0xc
mov edx, esi
mov dword [ebp - 0x11c], ebx
mov dword [ebp - 0x118], ebx
call fcn.004ccc0d
test eax, eax
je 0x513b3d
xor eax, eax
jmp 0x513c59
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x11c]
mov edx, esi
call fcn.00406416
test eax, eax
pop ecx
jne 0x513b65
push esi
push str.:6:SetLastSuccessfulUpdate___FAILED:_GetArchiveCheckSum___s___FAILED.
call fcn.0042b70b
pop ecx
pop ecx
jmp 0x513b36
call fcn.004fa8e4
push ebx
push ebx
mov esi, eax
call fcn.00493154
push eax
lea eax, [ebp - 0x110]
push str._sLUA.DAT
push eax
call fcn.00531b2f
add esp, 0x14
mov dword [ebp - 0x114], ebx
push 0x220a
push str..UpdatePAULA.c
mov edx, 0x54f4b4
lea ecx, [ebp - 0x110]
call fcn.00434df1
mov edi, eax
cmp edi, ebx
pop ecx
pop ecx
jne 0x513bf9
push 0x96
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.004fa8e4
sub eax, esi
cmp eax, 0x157c
ja 0x513bd8
inc dword [ebp - 0x114]
cmp dword [ebp - 0x114], 0xf
jl 0x513b8e
call fcn.004fa8e4
sub eax, esi
push eax
lea eax, [ebp - 0x110]
push eax
push str.:8:SetLastSuccessfulUpdate___FAILED:_The_last_applied_update_file___s__could_not_be_opened_for_writing_after__ldms_
call fcn.0042b70b
add esp, 0xc
jmp 0x513b36
push edi
xor esi, esi
inc esi
push esi
lea eax, [ebp - 0x118]
push 4
push eax
call fcn.00531aad
add esp, 0x10
cmp eax, esi
je 0x513c26
lea eax, [ebp - 0x110]
push eax
push str.:8:SetLastSuccessfulUpdate___encountered_a_problem:_fwrite___s___FAILED_to_write_the_archive_size_
call fcn.0042bd38
pop ecx
pop ecx
push edi
push esi
lea eax, [ebp - 0x11c]
push 4
push eax
call fcn.00531aad
add esp, 0x10
cmp eax, esi
je 0x513c50
lea eax, [ebp - 0x110]
push eax
push str.:8:SetLastSuccessfulUpdate___encountered_a_problem:_fwrite___s___FAILED_to_write_the_archive_CheckSum_
call fcn.0042bd38
pop ecx
pop ecx
mov ecx, edi
call fcn.00435239
mov eax, esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005317e7
leave
ret
Function at 0x518d9a
Capabilities:
Move file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x234
mov eax, dword [0x5f2e68]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor ebx, ebx
push 0x207
lea eax, [ebp - 0x20f]
mov esi, ecx
push ebx
push eax
mov dword [ebp - 0x214], esi
mov byte [ebp - 0x210], bl
call fcn.005306b0
xor eax, eax
mov word [ebp - 0x234], bx
lea edi, [ebp - 0x232]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
xor eax, eax
mov word [ebp - 0x224], bx
lea edi, [ebp - 0x222]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0xc
stosw word es:[edi], ax
push ebx
lea eax, [ebp - 0x224]
push eax
push ebx
push esi
call fcn.00432c9a
add esp, 0x10
test eax, eax
jne 0x518e1a
xor eax, eax
jmp 0x518f84
push 0x2d2d
lea eax, [ebp - 0x234]
push str..UpdatePAULA.c
push eax
call fcn.004fb92f
push ecx
mov edi, esp
lea esi, [ebp - 0x224]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
lea esi, [ebp - 0x234]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004f9ee0
push eax
call fcn.0053146e
add esp, 0x24
cmp eax, 0x5265c00
jge 0x518eaf
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x224]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
lea esi, [ebp - 0x234]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004f9ee0
push eax
call fcn.0053146e
add esp, 0x24
cmp eax, 0x493e0
jle 0x518e13
mov ecx, dword [ebp - 0x214]
push ebx
xor edx, edx
call fcn.004328fa
test eax, eax
pop ecx
jne 0x518e13
push dword [ebp - 0x214]
mov esi, 0x208
mov ecx, esi
lea eax, [ebp - 0x210]
call fcn.004ccc3f
pop ecx
call fcn.004ccf84
mov eax, esi
push str.BAD_UPLOADS_
lea esi, [ebp - 0x210]
call fcn.004ccd0f
pop ecx
mov eax, esi
push eax
call fcn.00432310
test eax, eax
pop ecx
jne 0x518ef6
push ebx
mov ecx, esi
call fcn.0043262d
pop ecx
push dword [ebp - 0x214]
mov ecx, 0x104
lea eax, [ebp - 0x210]
call fcn.004ccc3f
mov ecx, eax
mov dword [esp], str.BAD_UPLOADS
call fcn.004cd0b7
mov esi, dword [sym.imp.KERNEL32.dll_MoveFileA]
pop ecx
lea eax, [ebp - 0x210]
push eax
push dword [ebp - 0x214]
call esi
test eax, eax
jne 0x518f81
lea edi, [ebp - 0x210]
call fcn.00432263
test eax, eax
je 0x518f57
mov eax, edi
call fcn.004314ff
mov eax, edi
push eax
push dword [ebp - 0x214]
call esi
jmp 0x518f81
mov eax, dword [ebp - 0x214]
call fcn.004314ff
push str._GetLastError_
lea eax, [ebp - 0x210]
push eax
push dword [ebp - 0x214]
push str.:3:HandleBadArchive___s___encountered_a_problem_moving_a_bad_upload:_MoveFile___s___FAILED:__s
call fcn.0042b70b
add esp, 0x10
xor eax, eax
inc eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005317e7
leave
ret
Function at 0x5206b7
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x114
mov eax, dword [0x5f2e68]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push 0x103
lea eax, [ebp - 0x10f]
mov esi, ecx
push 0
push eax
mov dword [ebp - 0x114], esi
mov byte [ebp - 0x110], 0
call fcn.005306b0
add esp, 0xc
mov edx, edi
call fcn.004ccc0d
test eax, eax
jne 0x520790
test esi, esi
je 0x520790
push str.Counting_DB_
push ecx
push 1
call fcn.004934c9
pop ecx
pop ecx
push eax
push str._s_sUpdtTimes_
mov esi, 0x104
lea eax, [ebp - 0x110]
push esi
push eax
call fcn.004ce4e5
lea eax, [ebp - 0x110]
add esp, 0x14
push eax
call fcn.00432310
test eax, eax
pop ecx
jne 0x52074f
push eax
lea ecx, [ebp - 0x110]
call fcn.0043262d
pop ecx
mov eax, esi
push edi
lea esi, [ebp - 0x110]
call fcn.004ccd0f
mov dword [esp], 0xbdf
push str..WebCreation.c
mov edx, 0x54f4b4
mov ecx, esi
call fcn.00434df1
mov esi, eax
test esi, esi
pop ecx
pop ecx
jne 0x52079f
lea eax, [ebp - 0x110]
push eax
push str.:5:SetHTMLUpdateTime___FAILED:___s__could_not_be_opened_for_writing_
call fcn.0042bd38
pop ecx
pop ecx
xor eax, eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.005317e7
leave
ret
push esi
push 1
push 0x10
push dword [ebp - 0x114]
call fcn.00531aad
add esp, 0x10
mov ecx, esi
call fcn.00435239
xor eax, eax
inc eax
jmp 0x520792