joyce8/EMBER2024-capa huggingface dataset:
Function at 0x42ae10
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x48c3c1
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x64468c]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov edi, ecx
mov dword [esp + 0xc], edi
push dword [esp + 0x20]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QObject::constructor_class_QObject__]
lea ecx, [edi + 8]
mov dword [esp + 0x18], 0
mov dword [edi], vtable.NetModule.0
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::constructor_void_]
lea ecx, [edi + 0xc]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::constructor_void_]
lea ecx, [edi + 0x10]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::constructor_void_]
lea ecx, [edi + 0x14]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::constructor_void_]
lea esi, [edi + 0x1c]
mov dword [edi + 0x18], 0
mov ecx, esi
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QByteArray::constructor_void_]
push 0xffffffffffffffff
push 0
lea eax, [edi + 0x20]
mov byte [esp + 0x20], 5
push str.6_16_
push eax
call fcn.0042ece0
push 0xffffffffffffffff
push 0
lea eax, [edi + 0x24]
mov byte [esp + 0x30], 6
push 0x49adac
push eax
call fcn.0042ece0
push 0x42d760
push esi
push 0x42d7d0
push str.http:__cloud.av380.net:8002_
call sub.NetworkDLL.dll_NetworkerAllocate
mov dword [edi + 0x18], eax
add esp, 0x30
mov dword [0x645f44], edi
mov eax, edi
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x10
ret 4
Function at 0x42ec00
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x48cc22
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
push esi
mov eax, dword [0x64468c]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
mov ebx, ecx
lea eax, [esp + 0xc]
push eax
push 0
push 0
push 0
lea ecx, [esp + 0x24]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QMessageLogger::constructor_char_const___int__char_const__]
mov ecx, eax
call dword [sym.imp.Qt5Core.dll_public:_class_QDebug___thiscall_QMessageLogger::debug_void_]
push dword [esp + 0x38]
mov ecx, eax
mov dword [esp + 0x34], 0
push 0x49b078
call dword [sym.imp.Qt5Core.dll_public:_class_QDebug____thiscall_QDebug::operator___char_const__]
mov ecx, eax
call dword [sym.imp.Qt5Core.dll_public:_class_QDebug____thiscall_QDebug::operator___int_]
lea ecx, [esp + 0xc]
mov dword [esp + 0x30], 0xffffffff
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QDebug::destructor_void_]
lea ecx, [ebx + 0x1c]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QByteArray::clear_void_]
lea eax, [esp + 0x10]
mov ecx, 0x645f50
push eax
call dword [sym.imp.Qt5Core.dll_public:_class_QByteArray___thiscall_QString::toLatin1_void_]
mov ecx, dword [ebx + 0x18]
push dword [esp + 0x38]
mov dword [esp + 0x34], 1
mov esi, dword [ecx]
mov ecx, eax
call dword [sym.imp.Qt5Core.dll_public:_char____thiscall_QByteArray::data_void_]
mov ecx, dword [ebx + 0x18]
push eax
call dword [esi + 0x50]
lea ecx, [esp + 0x10]
mov dword [esp + 0x30], 0xffffffff
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QByteArray::destructor_void_]
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x28
ret 4
Function at 0x431520
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x48d039
mov eax, dword fs:[0]
push eax
sub esp, 0x20
push esi
mov eax, dword [0x64468c]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [esp + 0x38]
lea ecx, [esi + 0xc4]
mov dword [esi + 0xc0], eax
lea eax, [esp + 0x3c]
push eax
mov dword [esp + 0x34], 0
call dword [sym.imp.Qt5Core.dll_public:_class_QString____thiscall_QString::operator_class_QString_const__]
mov eax, dword [esp + 0x40]
mov ecx, esi
mov dword [esi + 0xc8], eax
mov byte [esi + 8], 1
call fcn.0047b760
lea ecx, [esp + 0x10]
call dword [sym.imp.MSVCP120.dll_public:_void___thiscall_std::_Pad::constructor_void_]
mov dword [esp + 0x10], vtable.._AV___LaunchPad_V___Bind__0A_XV_lambda_2be8480d86c3d19b4babcd98a19ad128______V_std___std__.0
mov dword [esp + 0x20], esi
lea eax, [esp + 8]
mov byte [esp + 0x30], 1
push eax
lea ecx, [esp + 0x14]
call dword [sym.imp.MSVCP120.dll_public:_void___thiscall_std::_Pad::_Launch_struct__Thrd_imp_t__]
lea ecx, [esp + 0x10]
call dword [sym.imp.MSVCP120.dll_public:_void___thiscall_std::_Pad::destructor_void_]
mov eax, dword [esp + 0xc]
mov byte [esp + 0x30], 2
test eax, eax
jne 0x4315ce
push 1
call dword [sym.imp.MSVCP120.dll_void___cdecl_std::_Throw_Cpp_error_int_]
mov eax, dword [esp + 0x10]
add esp, 4
push eax
push dword [esp + 0xc]
call dword [sym.imp.MSVCP120.dll__Thrd_detach]
add esp, 8
test eax, eax
je 0x4315ea
push eax
call dword [sym.imp.MSVCP120.dll_void___cdecl_std::_Throw_C_error_int_]
add esp, 4
lea ecx, [esp + 0x3c]
mov dword [esp + 0xc], 0
mov dword [esp + 0x30], 0xffffffff
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x2c
ret 0xc
Function at 0x434e10
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x48d80b
mov eax, dword fs:[0]
push eax
push ecx
push esi
mov eax, dword [0x64468c]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
push ecx
lea eax, [esp + 0x30]
mov dword [esp + 0x18], 2
mov ecx, esp
push eax
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::constructor_class_QString_const__]
push ecx
lea eax, [esp + 0x30]
mov ecx, esp
push eax
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::constructor_class_QString_const__]
push dword [esp + 0x2c]
lea eax, [esp + 0x2c]
push ecx
mov ecx, esp
push eax
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::constructor_class_QString_const__]
push dword [esp + 0x2c]
call fcn.00433b30
add esp, 0x14
mov byte [esp + 0x14], 1
lea ecx, [esp + 0x20]
mov esi, eax
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [esp + 0x28]
mov byte [esp + 0x14], 0
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [esp + 0x2c]
mov dword [esp + 0x14], 0xffffffff
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
mov eax, esi
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x10
ret 0x14
Function at 0x435100
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x48d869
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
mov eax, dword [0x64468c]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0xc], esi
push 0
call dword [sym.imp.Qt5Quick.dll_public:_void___thiscall_QQuickItem::constructor_class_QQuickItem__]
push 0
push 0
push fcn.004352b0
push esi
push 0
push dword [sym.imp.Qt5Quick.dll_public:_void___thiscall_QQuickItem::windowChanged_class_QQuickWindow__]
xorps xmm0, xmm0
mov dword [esp + 0x30], 0
lea eax, [esp + 0x20]
mov dword [esi], vtable.Squircle.1.0
push esi
push eax
mov dword [esi + 8], vtable.Squircle.0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
movups xmmword [esi + 0x18], xmm0
mov dword [esi + 0x38], 0
movups xmmword [esi + 0x28], xmm0
mov dword [esi + 0x3c], 0
call fcn.00434fb0
add esp, 0x20
lea ecx, [esp + 8]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QMetaObject::Connection::destructor_void_]
mov eax, esi
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x14
ret
Function at 0x439300
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x48deb9
mov eax, dword fs:[0]
push eax
push esi
push edi
mov eax, dword [0x64468c]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov esi, dword [esp + 0x1c]
mov eax, dword [esi]
mov dword [edi + 8], eax
call fcn.00482120
mov eax, dword [esi + 4]
mov ecx, edi
mov dword [edi + 0x10], eax
call fcn.00482500
push 0xffffffffffffffff
lea eax, [esi + 8]
push eax
lea eax, [esp + 0x24]
push eax
call dword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::fromLocal8Bit_char_const___int_]
add esp, 0xc
lea eax, [esp + 0x1c]
mov dword [esp + 0x14], 0
push eax
lea ecx, [edi + 0x14]
call dword [sym.imp.Qt5Core.dll_public:_class_QString____thiscall_QString::operator_class_QString_const__]
mov ecx, edi
call fcn.00482160
lea ecx, [esp + 0x1c]
mov dword [esp + 0x14], 0xffffffff
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
mov eax, dword [esi + 0x28]
mov ecx, edi
mov dword [edi + 0x18], eax
call fcn.00482520
mov eax, dword [esi + 0x2c]
mov ecx, edi
mov dword [edi + 0x1c], eax
call fcn.00482540
mov eax, dword [esi + 0x30]
mov ecx, edi
mov dword [edi + 0x20], eax
call fcn.00482560
mov eax, dword [esi + 0x34]
mov ecx, edi
mov dword [edi + 0x24], eax
call fcn.00482100
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0xc
ret 4
Function at 0x4411e0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x48edf1
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push esi
mov eax, dword [0x64468c]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov esi, ecx
mov ecx, dword [esi + 0x1c]
lea eax, [esp + 8]
push eax
call fcn.0043fe20
push ecx
lea eax, [esp + 0xc]
mov dword [esp + 0x30], 0
mov ecx, esp
push eax
call fcn.00454b40
mov ecx, dword [esi + 0x10]
call fcn.0043fa20
lea eax, [esp + 0xc]
push eax
push 0
push 0
push 0
lea ecx, [esp + 0x20]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QMessageLogger::constructor_char_const___int__char_const__]
mov ecx, eax
call dword [sym.imp.Qt5Core.dll_public:_class_QDebug___thiscall_QMessageLogger::debug_void_]
push str.FileDownloadManager::clearFinished
push 0x15e
mov ecx, eax
mov byte [esp + 0x34], 1
call dword [sym.imp.Qt5Core.dll_public:_class_QDebug____thiscall_QDebug::operator___int_]
mov ecx, eax
call dword [sym.imp.Qt5Core.dll_public:_class_QDebug____thiscall_QDebug::operator___char_const__]
lea ecx, [esp + 0xc]
mov byte [esp + 0x2c], 0
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QDebug::destructor_void_]
mov ecx, dword [esi + 0x1c]
call fcn.0043f220
mov eax, dword [esp + 8]
mov dword [esp + 0x2c], 0xffffffff
mov ecx, dword [eax]
test ecx, ecx
je 0x4412ac
cmp ecx, 0xffffffff
je 0x4412b6
or ecx, 0xffffffff
lock xadd dword [eax], ecx
setne al
test al, al
jne 0x4412b6
mov eax, dword [esp + 8]
push eax
call dword [sym.imp.Qt5Core.dll_public:_static_void___cdecl_QListData::dispose_struct_QListData::Data__]
add esp, 4
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x28
ret
Function at 0x442ea0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x48f137
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push esi
push edi
mov eax, dword [0x64468c]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
push ecx
mov eax, esp
mov dword [esp + 0x1c], 0
mov esi, dword [esp + 0x34]
mov edi, 0x2f
push 0xffffffffffffffff
push 0xffffffffffffffff
push ecx
mov dword [eax], 0
mov ecx, esi
mov eax, esp
mov word [eax], di
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.Qt5Core.dll_public:_class_QString___thiscall_QString::section_class_QChar__int__int__class_QFlags_enum_QString::SectionFlag__]
lea eax, [esp + 0x14]
mov dword [esp + 0x24], 1
push eax
lea ecx, [esp + 0x10]
call dword [sym.imp.Qt5Core.dll_public:_class_QByteArray___thiscall_QString::toLatin1_void_]
push 1
push eax
lea eax, [esp + 0x18]
mov byte [esp + 0x2c], 2
push eax
call dword [sym.imp.Qt5Core.dll_public:_static_class_QByteArray___cdecl_QCryptographicHash::hash_class_QByteArray_const___enum_QCryptographicHash::Algorithm_]
add esp, 0xc
lea ecx, [esp + 0x30]
mov byte [esp + 0x24], 3
push ecx
mov ecx, eax
call dword [sym.imp.Qt5Core.dll_public:_class_QByteArray___thiscall_QByteArray::toHex_void_]
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x28], 4
call dword [sym.imp.Qt5Core.dll_public:_class_QString____thiscall_QString::operator_class_QByteArray_const__]
lea ecx, [esp + 0x30]
mov byte [esp + 0x24], 3
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QByteArray::destructor_void_]
lea ecx, [esp + 0x10]
mov byte [esp + 0x24], 2
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QByteArray::destructor_void_]
lea ecx, [esp + 0x14]
mov byte [esp + 0x24], 1
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QByteArray::destructor_void_]
push ecx
mov eax, esp
push 0xfffffffffffffffe
push 0
push ecx
mov dword [eax], 4
mov ecx, esi
mov eax, esp
mov word [eax], di
lea eax, [esp + 0x40]
push eax
call dword [sym.imp.Qt5Core.dll_public:_class_QString___thiscall_QString::section_class_QChar__int__int__class_QFlags_enum_QString::SectionFlag__]
mov esi, dword [esp + 0x2c]
lea ecx, [esp + 0xc]
push ecx
push eax
push esi
mov byte [esp + 0x30], 5
call fcn.0040d440
add esp, 0xc
lea ecx, [esp + 0x30]
mov dword [esp + 0x18], 1
mov byte [esp + 0x24], 1
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [esp + 0xc]
mov byte [esp + 0x24], 0
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
mov eax, esi
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x1c
ret 8
Function at 0x445650
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x48f678
mov eax, dword fs:[0]
push eax
push ecx
push esi
mov eax, dword [0x64468c]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 8], esi
push dword [esp + 0x1c]
call fcn.004456e0
push 2
push fcn.00446ea0
push esi
push fcn.00479220
lea eax, [esi + 8]
mov dword [esi], vtable.CloudFileDownloader.0
push eax
lea eax, [esp + 0x30]
mov dword [0x645fd4], esi
push eax
mov dword [esp + 0x2c], 0
mov dword [esi + 0x20], 0x15
call fcn.00445550
add esp, 0x18
lea ecx, [esp + 0x1c]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QMetaObject::Connection::destructor_void_]
mov eax, esi
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x10
ret 4

Function at 0x4456e0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x48f64a
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x64468c]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov edi, ecx
mov dword [esp + 0xc], edi
push dword [esp + 0x20]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QObject::constructor_class_QObject__]
push 0
lea ecx, [edi + 8]
mov dword [esp + 0x1c], 0
mov dword [edi], vtable.FileDownloader.0
call fcn.0041d980
mov esi, dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QMutex::constructor_enum_QMutex::RecursionMode_]
lea ecx, [edi + 0x24]
push 0
mov byte [esp + 0x1c], 1
mov dword [edi + 0x20], 0
call esi
push 0
lea ecx, [edi + 0x28]
mov byte [esp + 0x1c], 2
call esi
push 0
lea ecx, [edi + 0x3c]
mov byte [esp + 0x1c], 3
call esi
mov eax, dword [sym.imp.Qt5Core.dll_struct_QMapDataBase_const_QMapDataBase::shared_null]
mov dword [edi + 0x40], eax
push 0
lea ecx, [edi + 0x44]
mov byte [esp + 0x1c], 5
call esi
mov eax, dword [sym.imp.Qt5Core.dll_struct_QMapDataBase_const_QMapDataBase::shared_null]
mov dword [edi + 0x48], eax
mov byte [esp + 0x18], 7
mov dword [edi + 0x4c], 0
call sub.ACodec.dll_ADPCMCodecAllocate
mov dword [edi + 0x2c], eax
lea eax, [edi + 0x38]
push eax
lea eax, [edi + 0x34]
push eax
push 1
push 0x1f40
push 1
push 0
push 1
push 0x32
push 2
call sub.ACodec.dll_AACEncodecAllocate
push 0x400000
mov dword [edi + 0x30], eax
call dword [sym.imp.MSVCR120.dll_malloc]
push 0x400000
push 0
push eax
mov dword [edi + 0x1c], eax
call sub.MSVCR120.dll_memset
push 2
push 0x41f048
push edi
push fcn.00480040
lea eax, [esp + 0x64]
push edi
push eax
call fcn.004455b0
add esp, 0x4c
lea ecx, [esp + 0x20]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QMetaObject::Connection::destructor_void_]
mov eax, edi
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x10
ret 4
Function at 0x445810
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x48f678
mov eax, dword fs:[0]
push eax
push ecx
push esi
mov eax, dword [0x64468c]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 8], esi
push dword [esp + 0x1c]
call fcn.004456e0
push 2
push fcn.00446f20
push esi
push fcn.00479220
lea eax, [esi + 8]
mov dword [esi], vtable.TfFileDownloader.0
push eax
lea eax, [esp + 0x30]
mov dword [0x645fd0], esi
push eax
mov dword [esp + 0x2c], 0
mov dword [esi + 0x20], 0xc
call fcn.00445550
add esp, 0x18
lea ecx, [esp + 0x1c]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QMetaObject::Connection::destructor_void_]
mov eax, esi
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x10
ret 4
Function at 0x447870
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x48fb62
mov eax, dword fs:[0]
push eax
sub esp, 0x24
push esi
push edi
mov eax, dword [0x64468c]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
mov esi, ecx
mov edi, dword [esp + 0x40]
lea ecx, [esi + 0x44]
mov byte [esp + 0xc], 1
mov dword [esp + 0x10], edi
mov dword [esp + 0x40], ecx
test ecx, ecx
je 0x4478ba
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QMutex::lock_void_]
or dword [esp + 0x40], 1
lea ecx, [esp + 0x40]
mov dword [esp + 0x38], 0
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QMutexLocker::relock_void_]
lea eax, [esp + 0xc]
push eax
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x20]
push eax
lea ecx, [esi + 0x48]
call fcn.00446cd0
lea ecx, [esp + 0x40]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QMutexLocker::unlock_void_]
lea ecx, [esp + 0x40]
mov dword [esp + 0x38], 0xffffffff
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QMutexLocker::unlock_void_]
mov eax, dword [esi]
mov ecx, esi
push edi
call dword [eax + 0x3c]
mov eax, dword [esi]
mov ecx, esi
push edi
call dword [eax + 0x34]
lea eax, [esp + 0x14]
push eax
push 0
push 0
push 0
lea ecx, [esp + 0x2c]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QMessageLogger::constructor_char_const___int__char_const__]
mov ecx, eax
call dword [sym.imp.Qt5Core.dll_public:_class_QDebug___thiscall_QMessageLogger::debug_void_]
push dword [esi + 0x4c]
mov ecx, eax
mov dword [esp + 0x3c], 1
push str.Frame_count:
push str.FileDownloader::stop
push 0x54
call dword [sym.imp.Qt5Core.dll_public:_class_QDebug____thiscall_QDebug::operator___int_]
mov ecx, eax
call dword [sym.imp.Qt5Core.dll_public:_class_QDebug____thiscall_QDebug::operator___char_const__]
mov ecx, eax
call dword [sym.imp.Qt5Core.dll_public:_class_QDebug____thiscall_QDebug::operator___char_const__]
mov ecx, eax
call dword [sym.imp.Qt5Core.dll_public:_class_QDebug____thiscall_QDebug::operator___unsigned_int_]
lea ecx, [esp + 0x14]
mov dword [esp + 0x38], 0xffffffff
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QDebug::destructor_void_]
mov dword [esi + 0x4c], 0
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x30
ret 4
Function at 0x44d440
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x48deb9
mov eax, dword fs:[0]
push eax
push esi
push edi
mov eax, dword [0x64468c]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
mov edi, ecx
push 0xa
push dword [esp + 0x20]
lea eax, [esp + 0x24]
push eax
call dword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::number_unsigned_int__int_]
add esp, 0xc
mov esi, dword [esp + 0x28]
mov edx, 0x497ad5
mov ecx, 0x49ccdc
mov dword [esp + 0x14], 0
mov eax, dword [esi]
cmp dword [eax + 4], 0
cmovne ecx, edx
push ecx
lea ecx, [esp + 0x20]
call dword [0x496500]
push dword [esp + 0x30]
lea eax, [esp + 0x20]
push dword [esp + 0x30]
lea ecx, [edi + 0xa0]
push esi
push dword [esp + 0x30]
push dword [esp + 0x30]
push eax
call fcn.0041dfa0
lea ecx, [esp + 0x1c]
mov dword [esp + 0x14], 0xffffffff
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0xc
ret 0x18
Function at 0x44e7f0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x490949
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x64468c]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov edi, ecx
push 6
push str.Search
call dword [sym.imp.Qt5Core.dll_private:_static_struct_QTypedArrayData_unsigned_short_int_____cdecl_QString::fromAscii_helper_char_const___int_]
add esp, 8
mov dword [esp + 0xc], eax
mov esi, dword [esp + 0x28]
mov edx, 0x497ad5
mov ecx, 0x49ccdc
mov dword [esp + 0x18], 0
mov eax, dword [esi]
cmp dword [eax + 4], 0
cmovne ecx, edx
push ecx
lea ecx, [esp + 0x10]
call dword [0x496500]
push dword [esp + 0x30]
lea eax, [esp + 0x10]
push dword [esp + 0x30]
lea ecx, [edi + 0xa0]
push esi
push dword [esp + 0x30]
push dword [esp + 0x30]
push eax
call fcn.0041dfa0
lea ecx, [esp + 0xc]
mov dword [esp + 0x18], 0xffffffff
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x10
ret 0x14
Function at 0x44ed00
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x4909f1
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
push esi
push edi
mov eax, dword [0x64468c]
xor eax, esp
push eax
lea eax, [esp + 0x38]
mov dword fs:[0], eax
mov edx, dword [esp + 0x4c]
mov dword [esp + 0xc], 0
test edx, edx
js 0x44ed6d
mov ecx, dword [ecx]
mov eax, dword [ecx + 0xc]
mov esi, dword [ecx + 8]
sub eax, esi
cmp edx, eax
jge 0x44ed6d
push 0
lea eax, [esi + edx]
push dword [ecx + eax*4 + 0x10]
mov ecx, dword [esp + 0x50]
call fcn.004374d0
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x38]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x38
ret 8
mov esi, dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QObject::constructor_class_QObject__]
lea ecx, [esp + 0x10]
push 0
call esi
lea ecx, [esp + 0x24]
mov dword [esp + 0x10], vtable.PlaybackFileInfo.0
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::constructor_void_]
mov edi, dword [esp + 0x48]
mov ecx, edi
push 0
mov dword [esp + 0x44], 0
call esi
mov eax, dword [esp + 0x18]
lea ecx, [edi + 0x14]
mov dword [edi + 8], eax
mov eax, dword [esp + 0x1c]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x20]
mov dword [edi + 0x10], eax
lea eax, [esp + 0x24]
push eax
mov dword [edi], vtable.PlaybackFileInfo.0
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::constructor_class_QString_const__]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x34]
mov dword [edi + 0x18], eax
mov eax, dword [esp + 0x2c]
mov dword [edi + 0x1c], eax
mov eax, dword [esp + 0x30]
mov dword [edi + 0x20], eax
mov dword [edi + 0x24], ecx
mov dword [esp + 0x10], vtable.PlaybackFileInfo.0
lea ecx, [esp + 0x24]
mov dword [esp + 0x40], 1
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [esp + 0x10]
mov dword [esp + 0x40], 0xffffffff
call dword [sym.imp.Qt5Core.dll_public_virtual:_void___thiscall_QObject::destructor_void_]
mov eax, edi
mov ecx, dword [esp + 0x38]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x38
ret 8