joyce8/EMBER2024-capa huggingface dataset:
Function at 0x64054190
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6408ae72
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push esi
push edi
mov eax, dword [0x640ca240]
xor eax, esp
push eax
lea eax, [esp + 0x18]
mov dword fs:[0], eax
mov esi, ecx
cmp dword [esi + 0x10], 4
jne 0x6405427f
push 1
push 0
push 0x6409775c
lea ecx, [esp + 0x20]
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QLatin1String::constructor_char_const__]
push eax
mov ecx, esi
call dword [sym.imp.QtCore4.dll_public:_int___thiscall_QString::indexOf_class_QLatin1String_const___int__enum_Qt::CaseSensitivity_const]
mov edi, eax
cmp edi, 0xffffffff
je 0x6405426c
lea ecx, [esi + 0x14]
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::clear_void_]
push edi
lea eax, [esp + 0x10]
mov ecx, esi
push eax
call dword [sym.imp.QtCore4.dll_public:_class_QString___thiscall_QString::left_int_]
push eax
lea ecx, [esi + 0x30]
mov dword [esp + 0x24], 0
call dword [sym.imp.QtCore4.dll_public:_class_QString____thiscall_QString::operator_class_QString__]
lea ecx, [esp + 0xc]
mov dword [esp + 0x20], 0xffffffff
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::destructor_void_]
push 0xffffffffffffffff
lea eax, [edi + 1]
mov ecx, esi
push eax
lea eax, [esp + 0x18]
push eax
call dword [sym.imp.QtCore4.dll_public:_class_QString___thiscall_QString::mid_int__int_]
push eax
lea ecx, [esi + 4]
mov dword [esp + 0x24], 1
call dword [sym.imp.QtCore4.dll_public:_class_QString____thiscall_QString::operator_class_QString__]
lea ecx, [esp + 0x10]
mov dword [esp + 0x20], 0xffffffff
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::destructor_void_]
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x18
ret
push esi
lea ecx, [esi + 4]
call dword [sym.imp.QtCore4.dll_public:_class_QString____thiscall_QString::operator_class_QString_const__]
lea ecx, [esi + 0x14]
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::clear_void_]
lea ecx, [esi + 0x30]
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::clear_void_]
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x18
ret
Function at 0x640573c0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x6408b597
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x640ca240]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov edi, ecx
mov dword [esp + 0xc], edi
call fcn.64057220
mov dword [edi], vtable.QHostInfoLookupManager.0
mov eax, dword [sym.imp.QtCore4.dll_struct_QListData::Data_QListData::shared_null]
mov ecx, eax
mov dword [esp + 0x18], 0
mov dword [edi + 0x2c], eax
call dword [sym.imp.QtCore4.dll_public:_bool___thiscall_QBasicAtomicInt::ref_void_]
mov eax, dword [sym.imp.QtCore4.dll_struct_QListData::Data_QListData::shared_null]
mov ecx, eax
mov byte [esp + 0x18], 1
mov dword [edi + 0x30], eax
call dword [sym.imp.QtCore4.dll_public:_bool___thiscall_QBasicAtomicInt::ref_void_]
mov eax, dword [sym.imp.QtCore4.dll_struct_QListData::Data_QListData::shared_null]
mov ecx, eax
mov byte [esp + 0x18], 2
mov dword [edi + 0x34], eax
call dword [sym.imp.QtCore4.dll_public:_bool___thiscall_QBasicAtomicInt::ref_void_]
mov eax, dword [sym.imp.QtCore4.dll_struct_QListData::Data_QListData::shared_null]
mov ecx, eax
mov byte [esp + 0x18], 3
mov dword [edi + 0x38], eax
call dword [sym.imp.QtCore4.dll_public:_bool___thiscall_QBasicAtomicInt::ref_void_]
mov eax, dword [sym.imp.QtCore4.dll_struct_QListData::Data_QListData::shared_null]
mov ecx, eax
mov byte [esp + 0x18], 4
mov dword [edi + 0x3c], eax
call dword [sym.imp.QtCore4.dll_public:_bool___thiscall_QBasicAtomicInt::ref_void_]
push 0
lea ecx, [edi + 0x40]
mov byte [esp + 0x1c], 5
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QThreadPool::constructor_class_QObject__]
push 1
lea ecx, [edi + 0x48]
mov byte [esp + 0x1c], 6
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QMutex::constructor_enum_QMutex::RecursionMode_]
mov byte [esp + 0x18], 7
mov byte [edi + 0x4c], 0
call dword [sym.imp.QtCore4.dll_public:_static_class_QThread____cdecl_QCoreApplicationPrivate::mainThread_void_]
push eax
mov ecx, edi
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QObject::moveToThread_class_QThread__]
push 1
push str.1waitForThreadPoolDone__
push str.2destroyed__
call dword [sym.imp.QtCore4.dll_public:_static_class_QCoreApplication____cdecl_QCoreApplication::instance_void_]
push eax
mov ecx, edi
call dword [sym.imp.QtCore4.dll_public:_bool___thiscall_QObject::connect_class_QObject_const___char_const___char_const___enum_Qt::ConnectionType_const]
push 5
lea ecx, [edi + 0x40]
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QThreadPool::setMaxThreadCount_int_]
mov eax, edi
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x10
ret
Function at 0x64058060
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6408b661
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
push edi
mov eax, dword [0x640ca240]
xor eax, esp
push eax
lea eax, [esp + 0x14]
mov dword fs:[0], eax
mov edi, ecx
mov ecx, dword [edi]
push 4
call dword [sym.imp.QtCore4.dll_public:_void____thiscall_QHashData::allocateNode_int_]
mov esi, eax
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], esi
mov dword [esp + 0x1c], 1
test esi, esi
je 0x640580c9
push dword [esp + 0x28]
lea ecx, [esi + 8]
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::constructor_class_QString_const__]
mov eax, dword [esp + 0x2c]
movdqu xmm0, xmmword [eax]
movdqu xmmword [esi + 0xc], xmm0
mov eax, dword [eax + 0x10]
mov dword [esi + 0x1c], eax
jmp 0x640580cb
xor esi, esi
mov edx, dword [esp + 0x30]
mov eax, esi
mov ecx, dword [esp + 0x24]
mov dword [esi + 4], ecx
mov ecx, dword [edx]
mov dword [esi], ecx
mov dword [edx], esi
mov ecx, dword [edi]
inc dword [ecx + 0xc]
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x14
ret 0x10

Function at 0x64058f90
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6408b8f3
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x640ca240]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0x34]
mov dword [esp + 0xc], 0
mov byte [esi], 0
mov dword [edi], 0xffffffff
call fcn.64059720
test eax, eax
je 0x64059041
mov cl, byte [eax + 0xc]
test cl, cl
je 0x64059041
push esi
push dword [esp + 0x28]
lea ecx, [esp + 0x38]
push ecx
lea ecx, [eax + 8]
call fcn.640586e0
cmp byte [esi], 0
mov dword [esp + 0x18], 0
je 0x64059030
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0x30]
push eax
call sym.QtNetwork4.dll_public:_void___thiscall_QHostInfo::constructor_class_QHostInfo_const__
lea ecx, [esp + 0x30]
mov dword [esp + 0x18], 0xffffffff
call fcn.64057780
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x10
ret
lea ecx, [esp + 0x30]
mov dword [esp + 0x18], 0xffffffff
call fcn.64057780
push dword [esp + 0x2c]
push dword [esp + 0x2c]
push dword [esp + 0x2c]
call sym.QtNetwork4.dll_public:_static_int___cdecl_QHostInfo::lookupHost_class_QString_const___class_QObject___char_const__
push 0x14
mov dword [edi], eax
call sub.MSVCR120.dll_void____cdecl_operator_new_unsigned_int_
add esp, 0x10
mov dword [esp + 0x30], eax
mov dword [esp + 0x18], 1
test eax, eax
je 0x64059079
mov ecx, eax
call fcn.64057580
mov ecx, eax
jmp 0x6405907b
xor ecx, ecx
mov eax, dword [esp + 0x20]
mov dword [eax], ecx
mov dword [ecx + 0x10], 0xffffffff
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x10
ret
Function at 0x64059e40
Capabilities:
Access peb ldr_data
Get process heap flags

Disassembly:
push 0xffffffffffffffff
push 0x6408811b
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x640ca240]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov edi, ecx
push 0x28
mov dword [edi], vtable.QUrlInfo.0
call sub.MSVCR120.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [esp + 0xc], eax
mov dword [esp + 0x18], 0
test eax, eax
je 0x64059e8e
mov ecx, eax
call fcn.6405a0e0
jmp 0x64059e90
xor eax, eax
push dword [esp + 0x20]
mov esi, dword [sym.imp.QtCore4.dll_public:_class_QString____thiscall_QString::operator_class_QString_const__]
mov ecx, eax
mov dword [esp + 0x1c], 0xffffffff
mov dword [edi + 4], eax
call esi
mov ecx, dword [edi + 4]
mov eax, dword [esp + 0x24]
push dword [esp + 0x28]
mov dword [ecx + 4], eax
mov ecx, dword [edi + 4]
add ecx, 8
call esi
mov ecx, dword [edi + 4]
push dword [esp + 0x2c]
add ecx, 0xc
call esi
mov ecx, dword [edi + 4]
mov eax, dword [esp + 0x30]
push dword [esp + 0x38]
mov esi, dword [sym.imp.QtCore4.dll_public:_class_QDateTime____thiscall_QDateTime::operator_class_QDateTime_const__]
mov dword [ecx + 0x10], eax
mov eax, dword [esp + 0x38]
mov dword [ecx + 0x14], eax
mov ecx, dword [edi + 4]
add ecx, 0x18
call esi
mov ecx, dword [edi + 4]
push dword [esp + 0x3c]
add ecx, 0x1c
call esi
mov ecx, dword [edi + 4]
mov al, byte [esp + 0x40]
mov byte [ecx + 0x20], al
mov ecx, dword [edi + 4]
mov al, byte [esp + 0x44]
mov byte [ecx + 0x21], al
mov ecx, dword [edi + 4]
mov al, byte [esp + 0x48]
mov byte [ecx + 0x22], al
mov ecx, dword [edi + 4]
mov al, byte [esp + 0x4c]
mov byte [ecx + 0x23], al
mov ecx, dword [edi + 4]
mov al, byte [esp + 0x50]
mov byte [ecx + 0x24], al
mov ecx, dword [edi + 4]
mov al, byte [esp + 0x54]
mov byte [ecx + 0x25], al
mov eax, edi
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x10
ret 0x38
Function at 0x64059f50
Capabilities:
Access peb ldr_data
Get process heap flags

Disassembly:
push 0xffffffffffffffff
push 0x6408ba76
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
push edi
mov eax, dword [0x640ca240]
xor eax, esp
push eax
lea eax, [esp + 0x14]
mov dword fs:[0], eax
mov edi, ecx
push 0x28
mov dword [edi], vtable.QUrlInfo.0
call sub.MSVCR120.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], 0
test eax, eax
je 0x64059fa0
mov ecx, eax
call fcn.6405a0e0
jmp 0x64059fa2
xor eax, eax
mov ecx, dword [esp + 0x24]
mov dword [edi + 4], eax
lea eax, [esp + 0x10]
push eax
mov dword [esp + 0x20], 0xffffffff
call dword [sym.imp.QtCore4.dll_public:_class_QString___thiscall_QUrl::path_void_]
push eax
lea ecx, [esp + 0x10]
mov dword [esp + 0x20], 1
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QFileInfo::constructor_class_QString_const__]
lea ecx, [esp + 0x24]
mov byte [esp + 0x1c], 2
push ecx
mov ecx, eax
call dword [sym.imp.QtCore4.dll_public:_class_QString___thiscall_QFileInfo::fileName_void_]
mov ecx, dword [edi + 4]
push eax
mov byte [esp + 0x20], 3
call dword [sym.imp.QtCore4.dll_public:_class_QString____thiscall_QString::operator_class_QString__]
lea ecx, [esp + 0x24]
mov byte [esp + 0x1c], 2
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [esp + 0xc]
mov byte [esp + 0x1c], 1
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QFileInfo::destructor_void_]
lea ecx, [esp + 0x10]
mov dword [esp + 0x1c], 0xffffffff
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::destructor_void_]
mov ecx, dword [edi + 4]
mov eax, dword [esp + 0x28]
push dword [esp + 0x2c]
mov esi, dword [sym.imp.QtCore4.dll_public:_class_QString____thiscall_QString::operator_class_QString_const__]
mov dword [ecx + 4], eax
mov ecx, dword [edi + 4]
add ecx, 8
call esi
mov ecx, dword [edi + 4]
push dword [esp + 0x30]
add ecx, 0xc
call esi
mov ecx, dword [edi + 4]
mov eax, dword [esp + 0x34]
push dword [esp + 0x3c]
mov esi, dword [sym.imp.QtCore4.dll_public:_class_QDateTime____thiscall_QDateTime::operator_class_QDateTime_const__]
mov dword [ecx + 0x10], eax
mov eax, dword [esp + 0x3c]
mov dword [ecx + 0x14], eax
mov ecx, dword [edi + 4]
add ecx, 0x18
call esi
mov ecx, dword [edi + 4]
push dword [esp + 0x40]
add ecx, 0x1c
call esi
mov ecx, dword [edi + 4]
mov al, byte [esp + 0x44]
mov byte [ecx + 0x20], al
mov ecx, dword [edi + 4]
mov al, byte [esp + 0x48]
mov byte [ecx + 0x21], al
mov ecx, dword [edi + 4]
mov al, byte [esp + 0x4c]
mov byte [ecx + 0x22], al
mov ecx, dword [edi + 4]
mov al, byte [esp + 0x50]
mov byte [ecx + 0x23], al
mov ecx, dword [edi + 4]
mov al, byte [esp + 0x54]
mov byte [ecx + 0x24], al
mov ecx, dword [edi + 4]
mov al, byte [esp + 0x58]
mov byte [ecx + 0x25], al
mov eax, edi
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x14
ret 0x38
Function at 0x6405a4f0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6408bb74
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
mov eax, dword [0x640ca240]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov eax, dword [esp + 0x34]
sub eax, 0
je 0x6405a624
dec eax
je 0x6405a5bb
dec eax
je 0x6405a540
xor al, al
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x1c
ret
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 4]
test eax, eax
jne 0x6405a55e
xorps xmm0, xmm0
movlpd qword [esp + 0x14], xmm0
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
jmp 0x6405a564
mov edx, dword [eax + 0x10]
mov ecx, dword [eax + 0x14]
mov eax, dword [esp + 0x30]
mov eax, dword [eax + 4]
test eax, eax
jne 0x6405a582
xorps xmm0, xmm0
movlpd qword [esp + 0x14], xmm0
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
jmp 0x6405a588
mov esi, dword [eax + 0x10]
mov eax, dword [eax + 0x14]
cmp edx, esi
jne 0x6405a5a7
cmp ecx, eax
jne 0x6405a5a7
mov eax, 1
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x1c
ret
xor eax, eax
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x1c
ret
mov ecx, dword [esp + 0x30]
lea eax, [esp + 0xc]
push eax
call sym.QtNetwork4.dll_public:_class_QDateTime___thiscall_QUrlInfo::lastModified_void_
mov esi, eax
mov ecx, dword [esp + 0x2c]
lea eax, [esp + 0x34]
push eax
mov dword [esp + 0x28], 2
call sym.QtNetwork4.dll_public:_class_QDateTime___thiscall_QUrlInfo::lastModified_void_
push esi
mov ecx, eax
mov byte [esp + 0x28], 3
call dword [sym.imp.QtCore4.dll_public:_bool___thiscall_QDateTime::operator_class_QDateTime_const__const]
mov esi, dword [sym.imp.QtCore4.dll_public:_void___thiscall_QDateTime::destructor_void_]
lea ecx, [esp + 0x34]
mov bl, al
mov byte [esp + 0x24], 2
call esi
lea ecx, [esp + 0xc]
mov dword [esp + 0x24], 0xffffffff
call esi
mov al, bl
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x1c
ret
mov ecx, dword [esp + 0x30]
lea eax, [esp + 0x14]
push eax
call sym.QtNetwork4.dll_public:_class_QString___thiscall_QUrlInfo::name_void_
mov esi, eax
mov ecx, dword [esp + 0x2c]
lea eax, [esp + 0x10]
push eax
mov dword [esp + 0x28], 0
call sym.QtNetwork4.dll_public:_class_QString___thiscall_QUrlInfo::name_void_
push esi
mov ecx, eax
mov byte [esp + 0x28], 1
call dword [sym.imp.QtCore4.dll_public:_bool___thiscall_QString::operator_class_QString_const__const]
lea ecx, [esp + 0x10]
mov byte [esp + 0x24], 0
mov bl, al
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [esp + 0x14]
mov dword [esp + 0x24], 0xffffffff
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::destructor_void_]
mov al, bl
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x1c
ret
Function at 0x6405a690
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6408bb74
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
mov eax, dword [0x640ca240]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov eax, dword [esp + 0x34]
sub eax, 0
je 0x6405a7c6
dec eax
je 0x6405a75d
dec eax
je 0x6405a6e0
xor al, al
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x1c
ret
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 4]
test eax, eax
jne 0x6405a6fe
xorps xmm0, xmm0
movlpd qword [esp + 0x14], xmm0
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
jmp 0x6405a704
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 0x14]
mov eax, dword [esp + 0x30]
mov eax, dword [eax + 4]
test eax, eax
jne 0x6405a722
xorps xmm0, xmm0
movlpd qword [esp + 0x14], xmm0
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
jmp 0x6405a728
mov esi, dword [eax + 0x10]
mov eax, dword [eax + 0x14]
cmp edx, eax
jl 0x6405a749
jg 0x6405a732
cmp ecx, esi
jbe 0x6405a749
mov eax, 1
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x1c
ret
xor eax, eax
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x1c
ret
mov ecx, dword [esp + 0x30]
lea eax, [esp + 0xc]
push eax
call sym.QtNetwork4.dll_public:_class_QDateTime___thiscall_QUrlInfo::lastModified_void_
mov esi, eax
mov ecx, dword [esp + 0x2c]
lea eax, [esp + 0x34]
push eax
mov dword [esp + 0x28], 2
call sym.QtNetwork4.dll_public:_class_QDateTime___thiscall_QUrlInfo::lastModified_void_
push eax
mov ecx, esi
mov byte [esp + 0x28], 3
call dword [sym.imp.QtCore4.dll_public:_bool___thiscall_QDateTime::operator__class_QDateTime_const__const]
mov esi, dword [sym.imp.QtCore4.dll_public:_void___thiscall_QDateTime::destructor_void_]
lea ecx, [esp + 0x34]
mov bl, al
mov byte [esp + 0x24], 2
call esi
lea ecx, [esp + 0xc]
mov dword [esp + 0x24], 0xffffffff
call esi
mov al, bl
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x1c
ret
mov ecx, dword [esp + 0x30]
lea eax, [esp + 0x14]
push eax
call sym.QtNetwork4.dll_public:_class_QString___thiscall_QUrlInfo::name_void_
mov esi, eax
mov ecx, dword [esp + 0x2c]
lea eax, [esp + 0x10]
push eax
mov dword [esp + 0x28], 0
call sym.QtNetwork4.dll_public:_class_QString___thiscall_QUrlInfo::name_void_
push esi
mov ecx, eax
mov byte [esp + 0x28], 1
call dword [sym.imp.QtCore4.dll_public:_bool___thiscall_QString::operator__class_QString_const__const]
lea ecx, [esp + 0x10]
mov byte [esp + 0x24], 0
mov bl, al
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [esp + 0x14]
mov dword [esp + 0x24], 0xffffffff
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::destructor_void_]
mov al, bl
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x1c
ret
Function at 0x6405b2d0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6408bc94
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x640ca240]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0xc], esi
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QSharedData::constructor_void_]
push dword [esp + 0x24]
lea ecx, [esi + 4]
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::constructor_class_QString_const__]
push dword [esp + 0x2c]
lea ecx, [esi + 8]
mov dword [esp + 0x1c], 0
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::constructor_class_QString_const__]
push dword [esp + 0x30]
lea ecx, [esi + 0xc]
mov byte [esp + 0x1c], 1
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::constructor_class_QString_const__]
mov edi, dword [esp + 0x20]
mov eax, edi
mov byte [esp + 0x18], 2
test edi, edi
js 0x6405b347
cmp edi, 5
jle 0x6405b349
xor eax, eax
push dword [eax*4 + 0x64097ac4]
lea ecx, [esp + 0x28]
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QFlag::constructor_int_]
lea ecx, [esp + 0x24]
call dword [sym.imp.QtCore4.dll_public:_int___thiscall_QFlag::operator_int_void_const]
mov dword [esi + 0x10], eax
mov ax, word [esp + 0x28]
mov word [esi + 0x14], ax
mov eax, esi
mov dword [esi + 0x18], edi
mov byte [esi + 0x1c], 0
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x10
ret 0x14
Function at 0x64060850
Capabilities:
Get hostname

Disassembly:
push 0xffffffffffffffff
push 0x6408ce3e
mov eax, dword fs:[0]
push eax
sub esp, 0x210
mov eax, dword [0x640ca240]
xor eax, esp
mov dword [esp + 0x20c], eax
push esi
mov eax, dword [0x640ca240]
xor eax, esp
push eax
lea eax, [esp + 0x218]
mov dword fs:[0], eax
mov esi, dword [esp + 0x228]
lea ecx, [esp + 8]
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], 0
call fcn.640775f0
push 0x200
lea eax, [esp + 0x18]
mov dword [esp + 0x224], 1
push eax
call dword [sym.imp.WS2_32.dll_gethostname]
cmp eax, 0xffffffff
jne 0x640608ce
mov ecx, esi
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::constructor_void_]
jmp 0x640608e7
push 0xffffffffffffffff
lea eax, [esp + 0x18]
mov byte [esp + 0x217], 0
push eax
push esi
call dword [sym.imp.QtCore4.dll_public:_static_class_QString___cdecl_QString::fromLocal8Bit_char_const___int_]
add esp, 0xc
lea ecx, [esp + 8]
mov dword [esp + 0xc], 1
mov byte [esp + 0x220], 0
call sub.WS2_32.dll_WSACleanup
mov eax, esi
mov ecx, dword [esp + 0x218]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [esp + 0x20c]
xor ecx, esp
call fcn.6407f184
add esp, 0x21c
ret

Function at 0x64060fa0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6408cf7c
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
push edi
mov eax, dword [0x640ca240]
xor eax, esp
push eax
lea eax, [esp + 0x14]
mov dword fs:[0], eax
mov edi, ecx
mov ecx, dword [edi]
push 4
call dword [sym.imp.QtCore4.dll_public:_void____thiscall_QHashData::allocateNode_int_]
mov esi, eax
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], esi
mov dword [esp + 0x1c], 1
test esi, esi
je 0x64061006
push dword [esp + 0x28]
lea ecx, [esi + 8]
call sym.QtNetwork4.dll_public:_void___thiscall_QHostAddress::constructor_class_QHostAddress_const__
push dword [esp + 0x2c]
lea ecx, [esi + 0xc]
mov byte [esp + 0x20], 2
call sym.QtNetwork4.dll_public:_void___thiscall_QHostAddress::constructor_class_QHostAddress_const__
jmp 0x64061008
xor esi, esi
mov edx, dword [esp + 0x30]
mov eax, esi
mov ecx, dword [esp + 0x24]
mov dword [esi + 4], ecx
mov ecx, dword [edx]
mov dword [esi], ecx
mov dword [edx], esi
mov ecx, dword [edi]
inc dword [ecx + 0xc]
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x14
ret 0x10
Function at 0x640626b0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6408a5cd
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
push edi
mov eax, dword [0x640ca240]
xor eax, esp
push eax
lea eax, [esp + 0x14]
mov dword fs:[0], eax
mov edi, ecx
mov ecx, dword [edi]
push 4
call dword [sym.imp.QtCore4.dll_public:_void____thiscall_QHashData::allocateNode_int_]
mov esi, eax
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], esi
mov dword [esp + 0x1c], 1
test esi, esi
je 0x64062717
push dword [esp + 0x28]
lea ecx, [esi + 8]
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::constructor_class_QString_const__]
push dword [esp + 0x2c]
lea ecx, [esi + 0xc]
mov byte [esp + 0x20], 2
call sym.QtNetwork4.dll_public:_void___thiscall_QHttpPart::constructor_class_QHttpPart_const__
jmp 0x64062719
xor esi, esi
mov edx, dword [esp + 0x30]
mov eax, esi
mov ecx, dword [esp + 0x24]
mov dword [esi + 4], ecx
mov ecx, dword [edx]
mov dword [esi], ecx
mov dword [edx], esi
mov ecx, dword [edi]
inc dword [ecx + 0xc]
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x14
ret 0x10