joyce8/EMBER2024-capa huggingface dataset:
Function at 0x6471e74e
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x424
mov eax, dword [0x6475a360]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
lea esi, [ecx + 0x1c]
mov dword [ebp - 0x420], 7
xor ebx, ebx
mov ecx, esi
mov dword [ebp - 0x41c], ebx
mov dword [ebp - 0x418], ebx
call fcn.64721ad0
test eax, eax
jle 0x6471e7f4
push edi
push ebx
mov ecx, esi
call fcn.6472134e
push ebx
mov ecx, esi
mov edi, eax
call fcn.647229d4
test edi, edi
jne 0x6471e7d3
push 0x587
push 0x6474aee8
push str.pSap
lea eax, [ebp - 0x404]
push str.ASSERT__s_failed_at_file__s__line__d_r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [ebp - 0x404]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x6471e7e8
lea eax, [ebp - 0x424]
mov ecx, edi
push eax
call fcn.6471f64c
push edi
call fcn.647239ab
pop ecx
mov ecx, esi
call fcn.64721ad0
test eax, eax
jg 0x6471e78a
pop edi
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
pop ebx
call fcn.647263d1
mov esp, ebp
pop ebp
ret

Function at 0x6471e864
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x404
mov eax, dword [0x6475a360]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, dword [sym.imp.USER32.dll_wsprintfA]
test esi, esi
jne 0x6471e8b6
push 0x739
push 0x6474aee8
push str.hWnd
lea eax, [ebp - 0x404]
push str.ASSERT__s_failed_at_file__s__line__d_r_n
push eax
call edi
add esp, 0x14
lea eax, [ebp - 0x404]
push eax
call ebx
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x6471e8ea
push 0x73a
push 0x6474aee8
push str.::IsWindow__HWND_hWnd_
lea eax, [ebp - 0x404]
push str.ASSERT__s_failed_at_file__s__line__d_r_n
push eax
call edi
add esp, 0x14
lea eax, [ebp - 0x404]
push eax
call ebx
test esi, esi
je 0x6471e940
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x6471e940
push esi
call fcn.6471eaed
pop ecx
test eax, eax
je 0x6471e940
push 0
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov esi, eax
test esi, esi
jne 0x6471e93c
push 0x747
push 0x6474aee8
push str.pGpcWindow
lea eax, [ebp - 0x404]
push str.ASSERT__s_failed_at_file__s__line__d_r_n
push eax
call edi
add esp, 0x14
lea eax, [ebp - 0x404]
push eax
call ebx
mov eax, esi
jmp 0x6471e942
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.647263d1
mov esp, ebp
pop ebp
ret
Function at 0x6471e953
Capabilities:
Print debug messages

Disassembly:
push 0x410
mov eax, 0x64744303
call fcn.647264a8
mov edi, ecx
mov esi, dword [ebp + 8]
test esi, esi
jne 0x6471e99c
push 0x518
push 0x6474aee8
push str.hGpc
lea eax, [ebp - 0x410]
push str.ASSERT__s_failed_at_file__s__line__d_r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [ebp - 0x410]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [edi]
mov ecx, edi
mov dword [ebp - method.CGpcLock.virtual_0], vtable.CGpcLock.0
mov dword [ebp - 0x418], edi
call dword [eax]
and dword [ebp - 4], 0
lea ecx, [edi + 0x1c]
xor ebx, ebx
call fcn.64721ad0
test eax, eax
jle 0x6471ea1f
push ebx
lea ecx, [edi + 0x1c]
call fcn.6472134e
mov dword [ebp - 0x414], eax
test eax, eax
jne 0x6471ea0e
push 0x521
push 0x6474aee8
push str.pSapCur
lea eax, [ebp - 0x410]
push str.ASSERT__s_failed_at_file__s__line__d_r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [ebp - 0x410]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [ebp - 0x414]
cmp eax, esi
je 0x6471ea21
lea ecx, [edi + 0x1c]
inc ebx
call fcn.64721ad0
cmp ebx, eax
jl 0x6471e9c4
xor esi, esi
or dword [ebp - 4], 0xffffffff
mov ecx, edi
mov edx, dword [edi]
mov dword [ebp - method.CGpcLock.virtual_0], vtable.CGpcLock.0
call dword [edx + 4]
mov eax, esi
call fcn.64726457
ret 4

Function at 0x6471ea7a
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x404
mov eax, dword [0x6475a360]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push esi
mov esi, dword [ebp + 0xc]
push eax
call fcn.6471e864
pop ecx
test eax, eax
jne 0x6471ead4
push 0x8bf
push 0x6474aee8
push str.pGpcWindow
lea eax, [ebp - 0x404]
push str.ASSERT__s_failed_at_file__s__line__d_r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [ebp - 0x404]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
xor eax, eax
jmp 0x6471eadc
push esi
mov ecx, eax
call fcn.6471acd7
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.647263d1
mov esp, ebp
pop ebp
ret 8
Function at 0x6471eaed
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40c
mov eax, dword [0x6475a360]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x6471eb41
push 0x71a
push 0x6474aee8
push str.::IsWindow_hWnd_
lea eax, [ebp - 0x404]
push str.ASSERT__s_failed_at_file__s__line__d_r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [ebp - 0x404]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push str.WM_AT_INDENTIFY_MSG
mov ebx, eax
call dword [sym.imp.USER32.dll_RegisterWindowMessageA]
mov dword [ebp - 0x40c], eax
jmp 0x6471eba2
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x6471eba6
and dword [ebp - 0x408], 0
lea eax, [ebp - 0x408]
push eax
push esi
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
cmp dword [ebp - 0x408], ebx
jne 0x6471eb99
push 0
push 0
push dword [ebp - 0x40c]
push esi
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
jne 0x6471ebb8
push esi
call dword [sym.imp.USER32.dll_GetParent]
mov esi, eax
test esi, esi
jne 0x6471eb5c
xor eax, eax
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
pop ebx
call fcn.647263d1
mov esp, ebp
pop ebp
ret
mov eax, esi
jmp 0x6471eba8
Function at 0x6471eec5
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x448
mov eax, dword [0x6475a360]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [0x6475a144], 1
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov ebx, ecx
jne 0x6471ef87
test edi, edi
jne 0x6471ef27
push 0x439
push 0x6474aee8
push str.stream
lea eax, [ebp - 0x404]
push str.ASSERT__s_failed_at_file__s__line__d_r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [ebp - 0x404]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x6471f06c
mov esi, dword [edi]
push esi
push str.NPATGPC_:_Destroy_stream_0x_lx...
call fcn.64721861
pop ecx
pop ecx
test esi, esi
je 0x6471f06c
push dword [esi + 0x20]
mov ecx, ebx
call fcn.6471e953
test eax, eax
je 0x6471f06c
mov eax, dword [edi + 8]
mov ecx, dword [esi + 0x20]
mov dword [ebp - 0x41c], eax
mov eax, dword [ebp + 0xc]
cwde
mov dword [ebp - 0x418], eax
lea eax, [ebp - 0x428]
push eax
mov dword [ebp - 0x424], 4
mov dword [ebp - 0x420], esi
call fcn.6471f64c
jmp 0x6471f06c
test edi, edi
jne 0x6471efbc
push 0x44f
push 0x6474aee8
push str.stream
lea eax, [ebp - 0x404]
push str.ASSERT__s_failed_at_file__s__line__d_r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [ebp - 0x404]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov esi, dword [edi]
test esi, esi
je 0x6471f064
push dword [esi + 0x20]
mov ecx, ebx
call fcn.6471e953
test eax, eax
je 0x6471f064
mov eax, dword [edi + 8]
mov ecx, dword [esi + 0x20]
mov dword [ebp - 0x41c], eax
mov eax, dword [ebp + 0xc]
cwde
mov dword [ebp - 0x408], eax
mov dword [ebp - 0x418], eax
lea eax, [ebp - 0x428]
push eax
mov dword [ebp - 0x424], 4
mov dword [ebp - 0x420], esi
call fcn.6471f64c
cmp dword [esi + 0x30], 0
jne 0x6471f04a
mov eax, dword [edi + 8]
mov ecx, dword [esi + 0x20]
mov dword [ebp - 0x43c], eax
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0x438], eax
lea eax, [ebp - 0x448]
push eax
mov dword [ebp - 0x444], 5
mov dword [ebp - 0x440], esi
call fcn.6471f64c
cmp dword [ebx + 0x28], esi
jne 0x6471f056
mov ecx, ebx
call fcn.6471f40b
mov ecx, esi
call fcn.6471e4da
push esi
call fcn.647239ab
pop ecx
mov ecx, dword [ebx + 0x34]
call fcn.6471d1a4
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.647263d1
mov esp, ebp
pop ebp
ret 8
Function at 0x6471f081
Capabilities:
Print debug messages

Disassembly:
push 0x40c
mov eax, 0x647442ad
call fcn.647264a8
mov esi, ecx
mov edi, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x14]
test edi, edi
jne 0x6471f0cd
push 0x3af
push 0x6474aee8
push str.stream
lea eax, [ebp - 0x410]
push str.ASSERT__s_failed_at_file__s__line__d_r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [ebp - 0x410]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [esi]
mov ecx, esi
mov dword [ebp - method.CGpcLock.virtual_0], vtable.CGpcLock.0
mov dword [ebp - 0x414], esi
call dword [eax]
and dword [ebp - 4], 0
test edi, edi
je 0x6471f119
mov eax, dword [esi + 0x28]
test eax, eax
je 0x6471f116
cmp eax, dword [edi + 0x14]
jne 0x6471f116
cmp dword [eax + 0x2c], 0
je 0x6471f102
push 4
pop eax
jmp 0x6471f105
xor eax, eax
inc eax
mov word [ebx], ax
mov ecx, esi
mov eax, dword [esi + 0x28]
mov dword [edi], eax
call fcn.6471f40b
jmp 0x6471f119
and dword [edi], 0
or dword [ebp - 4], 0xffffffff
mov ecx, esi
mov eax, dword [esi]
mov dword [ebp - method.CGpcLock.virtual_0], vtable.CGpcLock.0
call dword [eax + 4]
xor eax, eax
call fcn.64726457
ret 0x10

Function at 0x6471f138
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x424
mov eax, dword [0x6475a360]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push esi
mov esi, dword [ebp + 0xc]
test eax, eax
jne 0x6471f189
push 0x476
push 0x6474aee8
push str.stream
lea eax, [ebp - 0x404]
push str.ASSERT__s_failed_at_file__s__line__d_r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [ebp - 0x404]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x6471f1c1
mov edx, dword [eax]
test edx, edx
je 0x6471f1c1
mov ecx, dword [edx + 0x20]
test ecx, ecx
je 0x6471f1c1
mov eax, dword [eax + 8]
mov dword [ebp - 0x418], eax
lea eax, [ebp - 0x424]
push eax
mov dword [ebp - 0x420], 3
mov dword [ebp - 0x41c], edx
mov dword [ebp - 0x414], esi
call fcn.6471f64c
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.647263d1
mov esp, ebp
pop ebp
ret 8
Function at 0x6471f271
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x424
mov eax, dword [0x6475a360]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 8]
push esi
mov esi, dword [ebp + 0x14]
test ecx, ecx
jne 0x6471f2c5
push 0x414
push 0x6474aee8
push str.stream
lea eax, [ebp - 0x404]
push str.ASSERT__s_failed_at_file__s__line__d_r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [ebp - 0x404]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
or eax, 0xffffffff
jmp 0x6471f335
mov eax, dword [ecx]
test eax, eax
je 0x6471f332
mov edx, dword [eax + 0x20]
test edx, edx
je 0x6471f332
cmp dword [eax + 0x30], 0
je 0x6471f2e5
push str.NPATGPC_:_OnNppWirte_stream_abort_return__1
call fcn.64721861
pop ecx
jmp 0x6471f2c0
mov dword [ebp - 0x41c], eax
mov eax, dword [ecx + 8]
mov ecx, edx
mov dword [ebp - 0x418], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x414], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x410], eax
mov dword [ebp - 0x408], eax
lea eax, [ebp - 0x424]
push eax
mov dword [ebp - 0x420], 2
mov dword [ebp - 0x40c], esi
call fcn.6471f64c
mov eax, dword [ebp - 0x408]
jmp 0x6471f335
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.647263d1
mov esp, ebp
pop ebp
ret 0x10

Function at 0x6471f346
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x424
mov eax, dword [0x6475a360]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [ebp + 8]
test esi, esi
jne 0x6471f397
push 0x3ea
push 0x6474aee8
push str.stream
lea eax, [ebp - 0x404]
push str.ASSERT__s_failed_at_file__s__line__d_r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [ebp - 0x404]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
or eax, 0xffffffff
jmp 0x6471f3fa
mov eax, dword [esi]
test eax, eax
je 0x6471f3f5
mov ecx, dword [eax + 0x20]
test ecx, ecx
je 0x6471f3f5
cmp dword [eax + 0x30], 0
je 0x6471f3be
push dword [esi + 0xc]
push str.NPATGPC_:_onNppWriteReady_stream_abort_return__d
call fcn.64721861
mov eax, dword [esi + 0xc]
pop ecx
pop ecx
jmp 0x6471f3fa
mov dword [ebp - 0x41c], eax
mov eax, dword [esi + 8]
mov dword [ebp - 0x418], eax
lea eax, [ebp - 0x424]
push eax
mov dword [ebp - 0x420], 1
mov dword [ebp - 0x414], 0xfffffff
call fcn.6471f64c
mov eax, dword [ebp - 0x414]
jmp 0x6471f3fa
mov eax, 0xfffffff
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.647263d1
mov esp, ebp
pop ebp
ret 4
Function at 0x6471f40b
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x424
mov eax, dword [0x6475a360]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, ecx
push edi
mov eax, dword [esi]
call dword [eax]
mov eax, dword [esi]
xor edi, edi
mov ecx, esi
mov dword [esi + 0x28], edi
call dword [eax + 4]
add esi, 0x1c
mov dword [ebp - 0x420], 6
mov ecx, esi
mov dword [ebp - 0x41c], edi
mov dword [ebp - 0x418], edi
call fcn.64721ad0
test eax, eax
jle 0x6471f4af
push edi
mov ecx, esi
call fcn.6472134e
test eax, eax
jne 0x6471f495
push 0x574
push 0x6474aee8
push str.pSap
lea eax, [ebp - 0x404]
push str.ASSERT__s_failed_at_file__s__line__d_r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [ebp - 0x404]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x6471f4a3
lea ecx, [ebp - 0x424]
push ecx
mov ecx, eax
call fcn.6471f64c
mov ecx, esi
inc edi
call fcn.64721ad0
cmp edi, eax
jl 0x6471f456
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.647263d1
mov esp, ebp
pop ebp
ret

Function at 0x6471f4bf
Capabilities:
Print debug messages

Disassembly:
push 0x40c
mov eax, 0x647444d1
call fcn.647264a8
mov edi, ecx
mov ebx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x414], eax
test ebx, ebx
jne 0x6471f511
push 0xb8
push 0x6474aee8
push str.pfnCallback
lea eax, [ebp - 0x410]
push str.ASSERT__s_failed_at_file__s__line__d_r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [ebp - 0x410]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0xc
call fcn.647239d2
pop ecx
mov dword [ebp - 0x418], eax
xor esi, esi
mov dword [ebp - 4], esi
test eax, eax
je 0x6471f539
push dword [ebp - 0x414]
mov ecx, eax
push ebx
push edi
call fcn.6471e2ea
mov esi, eax
or dword [ebp - 4], 0xffffffff
test esi, esi
je 0x6471f54d
push esi
mov ecx, edi
call fcn.6471e6c3
mov eax, esi
jmp 0x6471f54f
xor eax, eax
call fcn.64726457
ret 8
Function at 0x6471f557
Capabilities:
Print debug messages

Disassembly:
push 0x410
mov eax, 0x64744303
call fcn.647264a8
mov edi, ecx
mov esi, dword [ebp + 8]
test esi, esi
jne 0x6471f5a0
push 0x505
push 0x6474aee8
push str.pSap
lea eax, [ebp - 0x410]
push str.ASSERT__s_failed_at_file__s__line__d_r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [ebp - 0x410]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [edi]
mov ecx, edi
mov dword [ebp - method.CGpcLock.virtual_0], vtable.CGpcLock.0
mov dword [ebp - 0x418], edi
call dword [eax]
and dword [ebp - 4], 0
lea ecx, [edi + 0x1c]
xor ebx, ebx
call fcn.64721ad0
test eax, eax
jle 0x6471f623
push ebx
lea ecx, [edi + 0x1c]
call fcn.6472134e
mov dword [ebp - 0x414], eax
test eax, eax
jne 0x6471f612
push 0x50b
push 0x6474aee8
push str.pSapCur
lea eax, [ebp - 0x410]
push str.ASSERT__s_failed_at_file__s__line__d_r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [ebp - 0x410]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [ebp - 0x414]
lea ecx, [edi + 0x1c]
cmp eax, esi
je 0x6471f644
inc ebx
call fcn.64721ad0
cmp ebx, eax
jl 0x6471f5c8
xor esi, esi
or dword [ebp - 4], 0xffffffff
mov ecx, edi
mov edx, dword [edi]
mov dword [ebp - method.CGpcLock.virtual_0], vtable.CGpcLock.0
call dword [edx + 4]
mov eax, esi
call fcn.64726457
ret 4
push ebx
call fcn.647229d4
jmp 0x6471f625

Function at 0x6471f64c
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x404
mov eax, dword [0x6475a360]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, ecx
test esi, esi
jne 0x6471f69b
push 0x5d5
push 0x6474aee8
push str.pMessage
lea eax, [ebp - 0x404]
push str.ASSERT__s_failed_at_file__s__line__d_r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [ebp - 0x404]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp dword [edi + 4], 0
jne 0x6471f6d2
push 0x5d6
push 0x6474aee8
push str.m_pfnCallback
lea eax, [ebp - 0x404]
push str.ASSERT__s_failed_at_file__s__line__d_r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [ebp - 0x404]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
test esi, esi
je 0x6471f6db
mov eax, dword [edi + 8]
mov dword [esi], eax
mov eax, dword [edi + 4]
test eax, eax
je 0x6471f6e7
push esi
call eax
jmp 0x6471f6ea
xor eax, eax
inc eax
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.647263d1
mov esp, ebp
pop ebp
ret 4
Function at 0x6471f71b
Capabilities:
Print debug messages

Disassembly:
push 0x410
mov eax, 0x64744338
call fcn.647264a8
mov esi, ecx
mov eax, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x14]
mov edi, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov dword [ebp - 0x414], eax
test eax, eax
jne 0x6471f76f
push 0xde
push 0x6474aee8
push str.lpszUrl
lea eax, [ebp - 0x410]
push str.ASSERT__s_failed_at_file__s__line__d_r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [ebp - 0x410]
push eax
call edi
test ebx, ebx
jne 0x6471f7aa
push 0xdf
push 0x6474aee8
push str.phGpcStream
lea eax, [ebp - 0x410]
push str.ASSERT__s_failed_at_file__s__line__d_r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [ebp - 0x410]
push eax
call edi
mov eax, 0x4e28
jmp 0x6471f8c0
xor edi, edi
mov dword [ebx], edi
cmp dword [esi + 0x38], edi
jne 0x6471f7bd
mov eax, 0x4e21
jmp 0x6471f8c0
push dword [ebp + 8]
mov ecx, esi
call fcn.6471e953
mov dword [ebp - 0x418], eax
test eax, eax
jne 0x6471f7db
mov eax, 0x4e22
jmp 0x6471f8c0
mov ecx, esi
call fcn.6471edad
test eax, eax
je 0x6471f7fb
push str.NPATGPC_:_pending_in_StreamGet__
call fcn.64721861
pop ecx
mov eax, 0x4e23
jmp 0x6471f8c0
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
push 0x34
call fcn.647239d2
pop ecx
mov dword [ebp - 0x41c], eax
mov dword [ebp - 4], edi
test eax, eax
je 0x6471f82e
push dword [ebp + 0x10]
mov ecx, eax
push dword [ebp - 0x414]
push dword [ebp - 0x418]
call fcn.6471e392
jmp 0x6471f830
mov eax, edi
or dword [ebp - 4], 0xffffffff
mov dword [esi + 0x28], eax
test eax, eax
jne 0x6471f86c
push 0xfa
push 0x6474aee8
push str.m_pPendingStream
lea eax, [ebp - 0x410]
push str.ASSERT__s_failed_at_file__s__line__d_r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [ebp - 0x410]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp dword [esi + 0x28], 0
jne 0x6471f879
mov edi, 0x4e25
jmp 0x6471f8b7
push dword [esi + 0x28]
push edi
push dword [ebp - 0x414]
push dword [esi + 0x38]
call fcn.64722d60
add esp, 0x10
test ax, ax
jne 0x6471f89a
mov eax, dword [esi + 0x28]
mov dword [ebx], eax
jmp 0x6471f8b7
mov ebx, dword [esi + 0x28]
test ebx, ebx
je 0x6471f8af
mov ecx, ebx
call fcn.6471e4da
push ebx
call fcn.647239ab
pop ecx
mov dword [esi + 0x28], edi
mov edi, 0x4e24
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 4]
mov eax, edi
call fcn.64726457
ret 0x10
Function at 0x6471ffc0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x404
mov eax, dword [0x6475a360]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, dword [ebp + 0xc]
test esi, esi
jne 0x6471ffe6
mov eax, 0x4e28
jmp 0x64720031
mov ecx, dword [esi]
test ecx, ecx
jne 0x6472002a
push 0x7d7
push 0x6474aee8
push str.pSap__GetProvider__
lea eax, [ebp - 0x404]
push str.ASSERT__s_failed_at_file__s__line__d_r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [ebp - 0x404]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov ecx, dword [esi]
test ecx, ecx
jne 0x6472002a
mov eax, 0x4e84
jmp 0x64720031
push edi
push esi
call fcn.6471e523
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.647263d1
mov esp, ebp
pop ebp
ret 8

Function at 0x64720043
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x404
mov eax, dword [0x6475a360]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push esi
mov esi, dword [ebp + 0xc]
push edi
mov edi, dword [ebp + 0x10]
push eax
call fcn.6471e864
pop ecx
test eax, eax
jne 0x647200a4
push 0x81e
push 0x6474aee8
push str.pGpcWindow
lea eax, [ebp - 0x404]
push str.ASSERT__s_failed_at_file__s__line__d_r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [ebp - 0x404]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, 0x4e27
jmp 0x647200af
push edi
push esi
mov ecx, eax
call fcn.6471acb1
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.647263d1
mov esp, ebp
pop ebp
ret 0xc

Function at 0x647200c1
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x404
mov eax, dword [0x6475a360]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [ebp + 0x10]
push esi
mov esi, dword [ebp + 0x14]
push edi
mov edi, dword [ebp + 0xc]
push eax
call fcn.6471e864
pop ecx
test eax, eax
jne 0x64720126
push 0x82c
push 0x6474aee8
push str.pGpcWindow
lea eax, [ebp - 0x404]
push str.ASSERT__s_failed_at_file__s__line__d_r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [ebp - 0x404]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, 0x4e27
jmp 0x6472014d
test esi, esi
je 0x6472013d
cmp byte [esi], 0
je 0x6472013d
push esi
push ebx
push edi
mov ecx, eax
call fcn.6471bb29
xor eax, eax
jmp 0x6472014d
push str.Invoke_GpcGetFileAtUrl_with_an_empty_URL
call fcn.64713cdf
pop ecx
mov eax, 0x4e28
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.647263d1
mov esp, ebp
pop ebp
ret 0x10