joyce8/EMBER2024-capa huggingface dataset:
Function at 0x597ac0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e6018
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push esi
mov eax, dword [0x632da0]
xor eax, esp
push eax
lea eax, [esp + 0x20]
mov dword fs:[0], eax
mov eax, dword [esp + 0x34]
mov ecx, dword [eax + 0x14]
push ecx
push eax
lea ecx, [esp + 0x10]
call fcn.004f8bd0
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x30]
push eax
lea ecx, [esp + 0xc]
push ecx
push edx
mov dword [esp + 0x34], 0
call fcn.005c5e60
add esp, 0xc
lea ecx, [esp + 8]
mov esi, eax
mov dword [esp + 0x28], 0xffffffff
call fcn.004f8c20
mov eax, esi
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x24
ret

Function at 0x597ed0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e6018
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push esi
mov eax, dword [0x632da0]
xor eax, esp
push eax
lea eax, [esp + 0x20]
mov dword fs:[0], eax
mov eax, dword [esp + 0x34]
mov ecx, dword [eax + 0x14]
push ecx
push eax
lea ecx, [esp + 0x10]
call fcn.004f8bd0
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x30]
push eax
lea ecx, [esp + 0xc]
push ecx
push edx
mov dword [esp + 0x34], 0
call fcn.005c6100
add esp, 0xc
lea ecx, [esp + 8]
mov esi, eax
mov dword [esp + 0x28], 0xffffffff
call fcn.004f8c20
mov eax, esi
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x24
ret

Function at 0x5982f0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e6018
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push esi
mov eax, dword [0x632da0]
xor eax, esp
push eax
lea eax, [esp + 0x20]
mov dword fs:[0], eax
mov eax, dword [esp + 0x34]
mov ecx, dword [eax + 0x14]
push ecx
push eax
lea ecx, [esp + 0x10]
call fcn.004f8bd0
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x30]
push eax
lea ecx, [esp + 0xc]
push ecx
push edx
mov dword [esp + 0x34], 0
call fcn.005c6460
add esp, 0xc
lea ecx, [esp + 8]
mov esi, eax
mov dword [esp + 0x28], 0xffffffff
call fcn.004f8c20
mov eax, esi
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x24
ret

Function at 0x5986a0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e6018
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push esi
mov eax, dword [0x632da0]
xor eax, esp
push eax
lea eax, [esp + 0x20]
mov dword fs:[0], eax
mov eax, dword [esp + 0x34]
mov ecx, dword [eax + 0x14]
push ecx
push eax
lea ecx, [esp + 0x10]
call fcn.004f8bd0
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x30]
push eax
lea ecx, [esp + 0xc]
push ecx
push edx
mov dword [esp + 0x34], 0
call fcn.005c67b0
add esp, 0xc
lea ecx, [esp + 8]
mov esi, eax
mov dword [esp + 0x28], 0xffffffff
call fcn.004f8c20
mov eax, esi
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x24
ret
Function at 0x59a740
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e9d38
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x632da0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x632da0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f5140
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fdad0
push edi
lea edx, [esp + 0x30]
push esi
push edx
mov dword [esp + 0x54], 0
call fcn.005c62c0
add esp, 0xc
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fe3f0
mov eax, esi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bf276
add esp, 0x40
ret

Function at 0x59a7e0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e9d38
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x632da0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x632da0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f5140
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fdad0
push edi
lea edx, [esp + 0x30]
push esi
push edx
mov dword [esp + 0x54], 0
call fcn.005c6300
add esp, 0xc
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fe3f0
mov eax, esi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bf276
add esp, 0x40
ret

Function at 0x59a880
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e9d38
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x632da0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x632da0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f5140
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fdad0
push edi
lea edx, [esp + 0x30]
push esi
push edx
mov dword [esp + 0x54], 0
call fcn.005c6340
add esp, 0xc
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fe3f0
mov eax, esi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bf276
add esp, 0x40
ret
Function at 0x59a920
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e9d38
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x632da0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x632da0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f5140
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fdad0
push edi
lea edx, [esp + 0x30]
push esi
push edx
mov dword [esp + 0x54], 0
call fcn.005c6380
add esp, 0xc
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fe3f0
mov eax, esi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bf276
add esp, 0x40
ret

Function at 0x59a9c0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e9d38
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x632da0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x632da0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f5140
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fdad0
push edi
lea edx, [esp + 0x30]
push esi
push edx
mov dword [esp + 0x54], 0
call fcn.005c63c0
add esp, 0xc
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fe3f0
mov eax, esi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bf276
add esp, 0x40
ret

Function at 0x59aa60
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e9d38
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x632da0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x632da0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f5140
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fdad0
push edi
lea edx, [esp + 0x30]
push esi
push edx
mov dword [esp + 0x54], 0
call fcn.005c6420
add esp, 0xc
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fe3f0
mov eax, esi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bf276
add esp, 0x40
ret
Function at 0x59ab00
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e9d38
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x632da0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x632da0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f5140
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fdad0
push edi
lea edx, [esp + 0x30]
push esi
push edx
mov dword [esp + 0x54], 0
call fcn.005c6460
add esp, 0xc
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fe3f0
mov eax, esi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bf276
add esp, 0x40
ret

Function at 0x59aba0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e9d38
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x632da0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x632da0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f5140
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fdad0
push edi
lea edx, [esp + 0x30]
push esi
push edx
mov dword [esp + 0x54], 0
call fcn.005c64a0
add esp, 0xc
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fe3f0
mov eax, esi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bf276
add esp, 0x40
ret

Function at 0x59ac40
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e9d38
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x632da0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x632da0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f5140
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fdad0
push edi
lea edx, [esp + 0x30]
push esi
push edx
mov dword [esp + 0x54], 0
call fcn.005c65a0
add esp, 0xc
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fe3f0
mov eax, esi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bf276
add esp, 0x40
ret
Function at 0x59ace0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e9d38
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x632da0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x632da0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f5140
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fdad0
push edi
lea edx, [esp + 0x30]
push esi
push edx
mov dword [esp + 0x54], 0
call fcn.00598120
add esp, 0xc
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fe3f0
mov eax, esi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bf276
add esp, 0x40
ret

Function at 0x59ad80
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e9d38
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x632da0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x632da0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f5140
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fdad0
push edi
lea edx, [esp + 0x30]
push esi
push edx
mov dword [esp + 0x54], 0
call fcn.005982f0
add esp, 0xc
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fe3f0
mov eax, esi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bf276
add esp, 0x40
ret

Function at 0x59ae20
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e9d38
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x632da0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x632da0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f5140
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fdad0
push edi
lea edx, [esp + 0x30]
push esi
push edx
mov dword [esp + 0x54], 0
call fcn.005a5900
add esp, 0xc
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fe3f0
mov eax, esi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bf276
add esp, 0x40
ret
Function at 0x59aec0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e9d38
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x632da0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x632da0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f5140
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fdad0
push edi
lea edx, [esp + 0x30]
push esi
push edx
mov dword [esp + 0x54], 0
call fcn.005a47f0
add esp, 0xc
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fe3f0
mov eax, esi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bf276
add esp, 0x40
ret

Function at 0x59af60
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e9d38
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x632da0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x632da0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f5140
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fdad0
push edi
lea edx, [esp + 0x30]
push esi
push edx
mov dword [esp + 0x54], 0
call fcn.005a6c70
add esp, 0xc
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fe3f0
mov eax, esi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bf276
add esp, 0x40
ret

Function at 0x59b000
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e9d38
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x632da0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x632da0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f5140
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fdad0
mov ecx, esi
mov dword [esp + 0x48], 0
call fcn.00536660
mov esi, eax
push edi
lea edx, [esp + 0x30]
push esi
push edx
call fcn.005a47f0
add esp, 0xc
mov edi, eax
test esi, esi
je 0x59b086
mov eax, dword [esi]
mov edx, dword [eax]
push 1
mov ecx, esi
call edx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x48], 0xffffffff
call fcn.004fe3f0
mov eax, edi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bf276
add esp, 0x40
ret
Function at 0x59b0c0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e9d38
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x632da0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x632da0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f5140
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fdad0
push edi
lea edx, [esp + 0x30]
push esi
push edx
mov dword [esp + 0x54], 0
call fcn.005983b0
add esp, 0xc
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fe3f0
mov eax, esi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bf276
add esp, 0x40
ret

Function at 0x59b160
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e9d38
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x632da0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x632da0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f5140
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fdad0
push edi
lea edx, [esp + 0x30]
push esi
push edx
mov dword [esp + 0x54], 0
call fcn.00598460
add esp, 0xc
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fe3f0
mov eax, esi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bf276
add esp, 0x40
ret

Function at 0x59b900
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e9d68
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push esi
push edi
mov eax, dword [0x632da0]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
lea ecx, [esp + 0xc]
call fcn.004f8b80
mov ecx, dword [esp + 0x34]
lea eax, [esp + 0xc]
push eax
mov dword [esp + 0x30], 0
call fcn.004f6c80
mov ecx, dword [esp + 0x38]
call fcn.00536660
mov ecx, dword [esp + 0x3c]
push ecx
mov esi, eax
lea edx, [esp + 0x10]
push esi
push edx
call fcn.005a4700
add esp, 0xc
mov edi, eax
test esi, esi
je 0x59b972
mov eax, dword [esi]
mov edx, dword [eax]
push 1
mov ecx, esi
call edx
lea ecx, [esp + 0xc]
mov dword [esp + 0x2c], 0xffffffff
call fcn.004f8c20
mov eax, edi
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x24
ret
Function at 0x5a0110
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e9d38
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x632da0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x632da0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov edi, dword [esp + 0x54]
mov esi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f5140
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fdad0
push esi
lea edx, [esp + 0x30]
push edx
push edi
mov dword [esp + 0x54], 0
call fcn.0059aba0
mov edx, dword [esi + 8]
mov ecx, dword [esi + 4]
mov edi, eax
mov eax, dword [esi]
mov dword [esi], edx
mov edx, dword [esi + 0xc]
mov dword [esi + 4], edx
mov dword [esi + 0xc], ecx
add esp, 0xc
lea ecx, [esp + 0x2c]
mov dword [esi + 8], eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fe3f0
mov eax, edi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bf276
add esp, 0x40
ret

Function at 0x5a01d0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e9d38
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x632da0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x632da0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov edi, dword [esp + 0x54]
mov esi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f5140
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fdad0
push esi
lea edx, [esp + 0x30]
push edx
push edi
mov dword [esp + 0x54], 0
call fcn.0059b580
mov edx, dword [esi + 8]
mov ecx, dword [esi + 4]
mov edi, eax
mov eax, dword [esi]
mov dword [esi], edx
mov edx, dword [esi + 0xc]
mov dword [esi + 4], edx
mov dword [esi + 0xc], ecx
add esp, 0xc
lea ecx, [esp + 0x2c]
mov dword [esi + 8], eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fe3f0
mov eax, edi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bf276
add esp, 0x40
ret
Function at 0x5a0290
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e9d38
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x632da0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x632da0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov edi, dword [esp + 0x54]
mov esi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f5140
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fdad0
push esi
lea edx, [esp + 0x30]
push edx
push edi
mov dword [esp + 0x54], 0
call fcn.0059bf00
mov edx, dword [esi + 8]
mov ecx, dword [esi + 4]
mov edi, eax
mov eax, dword [esi]
mov dword [esi], edx
mov edx, dword [esi + 0xc]
mov dword [esi + 4], edx
mov dword [esi + 0xc], ecx
add esp, 0xc
lea ecx, [esp + 0x2c]
mov dword [esi + 8], eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fe3f0
mov eax, edi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bf276
add esp, 0x40
ret

Function at 0x5a0350
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e9d38
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x632da0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x632da0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov edi, dword [esp + 0x54]
mov esi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f5140
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fdad0
push esi
lea edx, [esp + 0x30]
push edx
push edi
mov dword [esp + 0x54], 0
call fcn.0059c900
mov edx, dword [esi + 8]
mov ecx, dword [esi + 4]
mov edi, eax
mov eax, dword [esi]
mov dword [esi], edx
mov edx, dword [esi + 0xc]
mov dword [esi + 4], edx
mov dword [esi + 0xc], ecx
add esp, 0xc
lea ecx, [esp + 0x2c]
mov dword [esi + 8], eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fe3f0
mov eax, edi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bf276
add esp, 0x40
ret

Function at 0x5a0410
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e9d68
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push esi
push edi
mov eax, dword [0x632da0]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
lea ecx, [esp + 0xc]
call fcn.004f8b80
mov ecx, dword [esp + 0x34]
lea eax, [esp + 0xc]
push eax
mov dword [esp + 0x30], 0
call fcn.004f6c80
mov esi, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
push esi
lea ecx, [esp + 0x10]
push ecx
push edx
call fcn.0059ab00
mov edx, dword [esi + 8]
mov ecx, dword [esi + 4]
mov edi, eax
mov eax, dword [esi]
mov dword [esi], edx
mov edx, dword [esi + 0xc]
mov dword [esi + 4], edx
mov dword [esi + 0xc], ecx
add esp, 0xc
lea ecx, [esp + 0xc]
mov dword [esi + 8], eax
mov dword [esp + 0x2c], 0xffffffff
call fcn.004f8c20
mov eax, edi
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x24
ret