joyce8/EMBER2024-capa huggingface dataset:
Function at 0x425cf0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46f1a0
mov eax, dword fs:[0]
push eax
push esi
push edi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x20]
mov dword [esp + 0x18], 1
call fcn.00425770
mov esi, dword [esp + 0x24]
mov edi, dword [esp + 0x30]
cmp esi, edi
je 0x425d5e
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x2c]
call fcn.00425770
cmp edi, esi
jae 0x425d5e
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
push edx
push eax
push str.invalid_iterator_range
call dword [0x4751e8]
add esp, 0xc
lea ecx, [esp + 0x1c]
mov byte [esp + 0x14], 0
call fcn.00402a70
lea ecx, [esp + 0x28]
mov dword [esp + 0x14], 0xffffffff
call fcn.00402a70
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0xc
ret

Function at 0x426070
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x46f251
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov esi, ecx
xor ebx, ebx
mov dword [esp + 0xc], ebx
push esi
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
call fcn.004037b0
mov eax, dword [esi + 8]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x30]
neg ecx
push ecx
lea ecx, [esp + 0x14]
mov dword [esp + 0x28], 1
call fcn.004256c0
mov esi, dword [esp + 0x2c]
lea edx, [esp + 0x10]
push edx
mov ecx, esi
mov dword [esi], ebx
mov dword [esi + 4], ebx
call fcn.004037b0
mov eax, dword [esp + 0x18]
mov dword [esi + 8], eax
lea ecx, [esp + 0x10]
mov dword [esp + 0xc], 1
mov byte [esp + 0x24], bl
call fcn.00402a70
mov eax, esi
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x1c
ret 8

Function at 0x4266d0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x46f371
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov esi, ecx
xor ebx, ebx
mov dword [esp + 0xc], ebx
push esi
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
call fcn.004037b0
mov eax, dword [esi + 8]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x30]
push ecx
lea ecx, [esp + 0x14]
mov dword [esp + 0x28], 1
call fcn.004256c0
mov esi, dword [esp + 0x2c]
lea edx, [esp + 0x10]
push edx
mov ecx, esi
mov dword [esi], ebx
mov dword [esi + 4], ebx
call fcn.004037b0
mov eax, dword [esp + 0x18]
mov dword [esi + 8], eax
lea ecx, [esp + 0x10]
mov dword [esp + 0xc], 1
mov byte [esp + 0x24], bl
call fcn.00402a70
mov eax, esi
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x1c
ret 8
Function at 0x42a3b0
Capabilities:
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x46fb71
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x48]
mov dword [esp + 0x34], 1
call fcn.00425770
mov ecx, dword [esp + 0x4c]
sub ecx, dword [esp + 0x40]
mov eax, 0xd20d20d3
imul ecx
add edx, ecx
sar edx, 8
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov eax, ebx
cdq
sub eax, edx
mov ebp, eax
sar ebp, 1
test ebp, ebp
jle 0x42a55f
sub ebp, 1
push ebp
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x40]
call fcn.004266d0
mov esi, eax
mov eax, dword [esi]
test eax, eax
mov byte [esp + 0x30], 2
je 0x42a445
mov ecx, dword [esi + 8]
cmp ecx, dword [eax + 8]
jb 0x42a445
cmp dword [eax + 0xc], ecx
ja 0x42a492
push 0x63
push str.C:Program_FilesMicrosoft_Visual_Studio_8VCinclude_vector
push str.vector_iterator_not_dereferencable
call dword [0x4751e8]
push str.__Standard_C_Libraries_Out_of_Range___0_
push 0
push 0x64
push str.C:Program_FilesMicrosoft_Visual_Studio_8VCinclude_vector
push 2
call dword [0x4752e8]
add esp, 0x20
cmp eax, 1
jne 0x42a476
int3
push 0
push 0x64
push str.C:Program_FilesMicrosoft_Visual_Studio_8VCinclude_vector
push 0x47a278
push str._out_of_range_
call dword [0x4752ec]
add esp, 0x14
mov edx, dword [esp + 0x50]
mov esi, dword [esi + 8]
push edx
sub esp, 0x138
mov edi, esp
push ebx
push ebp
sub esp, 0xc
mov ecx, 0x4e
rep movsd dword es:[edi], dword [esi]
mov esi, esp
lea eax, [esp + 0x188]
mov dword [esp + 0x168], esp
xor edi, edi
push eax
mov ecx, esi
mov dword [esi], edi
mov dword [esi + 4], edi
call fcn.004037b0
mov ecx, dword [esp + 0x190]
mov dword [esi + 8], ecx
call fcn.00429b80
add esp, 0x150
push 3
lea ecx, [esp + 0x18]
mov byte [esp + 0x34], 1
call dword [0x4751fc]
mov esi, dword [esp + 0x1c]
cmp esi, edi
mov byte [esp + 0x30], 3
je 0x42a548
cmp dword [esi], 0xfffffffd
je 0x42a548
cmp dword [esi], edi
je 0x42a526
lea esp, [esp]
mov eax, dword [esi]
lea edx, [esp + 0x1c]
cmp eax, edx
je 0x42a522
cmp dword [eax + 4], edi
lea esi, [eax + 4]
jne 0x42a510
cmp dword [esi], edi
jne 0x42a53e
push 0xb2
push str.C:Program_FilesMicrosoft_Visual_Studio_8VCincludexutility
push str.ITERATOR_LIST_CORRUPTED_
call dword [0x4751e8]
add esp, 0xc
mov eax, dword [esp + 0x20]
mov dword [esi], eax
mov dword [esp + 0x1c], edi
lea ecx, [esp + 0x14]
mov byte [esp + 0x30], 1
call dword [0x4751f8]
cmp ebp, edi
jg 0x42a419
lea ecx, [esp + 0x38]
mov byte [esp + 0x30], 0
call fcn.00402a70
lea ecx, [esp + 0x44]
mov dword [esp + 0x30], 0xffffffff
call fcn.00402a70
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x20
ret
Function at 0x42d640
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46ff60
mov eax, dword fs:[0]
push eax
push esi
push edi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x20]
mov dword [esp + 0x18], 1
call fcn.0042c520
mov esi, dword [esp + 0x24]
mov edi, dword [esp + 0x30]
cmp esi, edi
je 0x42d6ae
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x2c]
call fcn.0042c520
cmp edi, esi
jae 0x42d6ae
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
push edx
push eax
push str.invalid_iterator_range
call dword [0x4751e8]
add esp, 0xc
lea ecx, [esp + 0x1c]
mov byte [esp + 0x14], 0
call fcn.00402a70
lea ecx, [esp + 0x28]
mov dword [esp + 0x14], 0xffffffff
call fcn.00402a70
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0xc
ret

Function at 0x42d9e0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x470051
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov esi, ecx
xor ebx, ebx
mov dword [esp + 0xc], ebx
push esi
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
call fcn.004037b0
mov eax, dword [esi + 8]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x30]
push ecx
lea ecx, [esp + 0x14]
mov dword [esp + 0x28], 1
call fcn.0042c590
mov esi, dword [esp + 0x2c]
lea edx, [esp + 0x10]
push edx
mov ecx, esi
mov dword [esi], ebx
mov dword [esi + 4], ebx
call fcn.004037b0
mov eax, dword [esp + 0x18]
mov dword [esi + 8], eax
lea ecx, [esp + 0x10]
mov dword [esp + 0xc], 1
mov byte [esp + 0x24], bl
call fcn.00402a70
mov eax, esi
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x1c
ret 8
Function at 0x434a00
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x470a11
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov esi, ecx
xor ebx, ebx
mov dword [esp + 0xc], ebx
push esi
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
call fcn.004037b0
mov eax, dword [esi + 8]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x30]
push ecx
lea ecx, [esp + 0x14]
mov dword [esp + 0x28], 1
call fcn.00433fd0
mov esi, dword [esp + 0x2c]
lea edx, [esp + 0x10]
push edx
mov ecx, esi
mov dword [esi], ebx
mov dword [esi + 4], ebx
call fcn.004037b0
mov eax, dword [esp + 0x18]
mov dword [esi + 8], eax
lea ecx, [esp + 0x10]
mov dword [esp + 0xc], 1
mov byte [esp + 0x24], bl
call fcn.00402a70
mov eax, esi
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x1c
ret 8
Function at 0x438230
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x470ec0
mov eax, dword fs:[0]
push eax
push esi
push edi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x20]
mov dword [esp + 0x18], 1
call fcn.00437780
mov esi, dword [esp + 0x24]
mov edi, dword [esp + 0x30]
cmp esi, edi
je 0x43829e
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x2c]
call fcn.00437780
cmp edi, esi
jae 0x43829e
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
push edx
push eax
push str.invalid_iterator_range
call dword [0x4751e8]
add esp, 0xc
lea ecx, [esp + 0x1c]
mov byte [esp + 0x14], 0
call fcn.00402a70
lea ecx, [esp + 0x28]
mov dword [esp + 0x14], 0xffffffff
call fcn.00402a70
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0xc
ret

Function at 0x438680
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x470f71
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov esi, ecx
xor ebx, ebx
mov dword [esp + 0xc], ebx
push esi
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
call fcn.004037b0
mov eax, dword [esi + 8]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x30]
neg ecx
push ecx
lea ecx, [esp + 0x14]
mov dword [esp + 0x28], 1
call fcn.004376d0
mov esi, dword [esp + 0x2c]
lea edx, [esp + 0x10]
push edx
mov ecx, esi
mov dword [esi], ebx
mov dword [esi + 4], ebx
call fcn.004037b0
mov eax, dword [esp + 0x18]
mov dword [esi + 8], eax
lea ecx, [esp + 0x10]
mov dword [esp + 0xc], 1
mov byte [esp + 0x24], bl
call fcn.00402a70
mov eax, esi
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x1c
ret 8

Function at 0x438ce0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x471091
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov esi, ecx
xor ebx, ebx
mov dword [esp + 0xc], ebx
push esi
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
call fcn.004037b0
mov eax, dword [esi + 8]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x30]
push ecx
lea ecx, [esp + 0x14]
mov dword [esp + 0x28], 1
call fcn.004376d0
mov esi, dword [esp + 0x2c]
lea edx, [esp + 0x10]
push edx
mov ecx, esi
mov dword [esi], ebx
mov dword [esi + 4], ebx
call fcn.004037b0
mov eax, dword [esp + 0x18]
mov dword [esi + 8], eax
lea ecx, [esp + 0x10]
mov dword [esp + 0xc], 1
mov byte [esp + 0x24], bl
call fcn.00402a70
mov eax, esi
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x1c
ret 8
Function at 0x43d120
Capabilities:
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x4719e1
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x48]
mov dword [esp + 0x34], 1
call fcn.00437780
mov ecx, dword [esp + 0x4c]
sub ecx, dword [esp + 0x40]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 6
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov eax, ebx
cdq
sub eax, edx
mov ebp, eax
sar ebp, 1
test ebp, ebp
jle 0x43d2c6
sub ebp, 1
push ebp
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x40]
call fcn.00438ce0
mov esi, eax
mov eax, dword [esi]
test eax, eax
mov byte [esp + 0x30], 2
je 0x43d1b3
mov ecx, dword [esi + 8]
cmp ecx, dword [eax + 8]
jb 0x43d1b3
cmp dword [eax + 0xc], ecx
ja 0x43d200
push 0x63
push str.C:Program_FilesMicrosoft_Visual_Studio_8VCinclude_vector
push str.vector_iterator_not_dereferencable
call dword [0x4751e8]
push str.__Standard_C_Libraries_Out_of_Range___0_
push 0
push 0x64
push str.C:Program_FilesMicrosoft_Visual_Studio_8VCinclude_vector
push 2
call dword [0x4752e8]
add esp, 0x20
cmp eax, 1
jne 0x43d1e4
int3
push 0
push 0x64
push str.C:Program_FilesMicrosoft_Visual_Studio_8VCinclude_vector
push 0x47b5b0
push str._out_of_range_
call dword [0x4752ec]
add esp, 0x14
mov edx, dword [esp + 0x50]
mov esi, dword [esi + 8]
push edx
sub esp, 0x180
mov edi, esp
push ebx
push ebp
sub esp, 0xc
mov ecx, 0x60
rep movsd dword es:[edi], dword [esi]
mov esi, esp
lea eax, [esp + 0x1d0]
mov dword [esp + 0x1b0], esp
xor edi, edi
push eax
mov ecx, esi
mov dword [esi], edi
mov dword [esi + 4], edi
call fcn.004037b0
mov ecx, dword [esp + 0x1d8]
mov dword [esi + 8], ecx
call fcn.0043c790
add esp, 0x198
push 3
lea ecx, [esp + 0x18]
mov byte [esp + 0x34], 1
call dword [0x4751fc]
mov esi, dword [esp + 0x1c]
cmp esi, edi
mov byte [esp + 0x30], 3
je 0x43d2af
cmp dword [esi], 0xfffffffd
je 0x43d2af
cmp dword [esi], edi
je 0x43d28d
mov eax, dword [esi]
lea edx, [esp + 0x1c]
cmp eax, edx
je 0x43d289
cmp dword [eax + 4], edi
lea esi, [eax + 4]
jne 0x43d277
cmp dword [esi], edi
jne 0x43d2a5
push 0xb2
push str.C:Program_FilesMicrosoft_Visual_Studio_8VCincludexutility
push str.ITERATOR_LIST_CORRUPTED_
call dword [0x4751e8]
add esp, 0xc
mov eax, dword [esp + 0x20]
mov dword [esi], eax
mov dword [esp + 0x1c], edi
lea ecx, [esp + 0x14]
mov byte [esp + 0x30], 1
call dword [0x4751f8]
cmp ebp, edi
jg 0x43d187
lea ecx, [esp + 0x38]
mov byte [esp + 0x30], 0
call fcn.00402a70
lea ecx, [esp + 0x44]
mov dword [esp + 0x30], 0xffffffff
call fcn.00402a70
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x20
ret
Function at 0x44d650
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x472460
mov eax, dword fs:[0]
push eax
push esi
push edi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x20]
mov dword [esp + 0x18], 1
call fcn.00441d80
mov esi, dword [esp + 0x24]
mov edi, dword [esp + 0x30]
cmp esi, edi
je 0x44d6be
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x2c]
call fcn.00441d80
cmp edi, esi
jae 0x44d6be
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
push edx
push eax
push str.invalid_iterator_range
call dword [0x4751e8]
add esp, 0xc
lea ecx, [esp + 0x1c]
mov byte [esp + 0x14], 0
call fcn.00402a70
lea ecx, [esp + 0x28]
mov dword [esp + 0x14], 0xffffffff
call fcn.00402a70
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0xc
ret

Function at 0x44d890
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x472501
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov esi, ecx
xor ebx, ebx
mov dword [esp + 0xc], ebx
push esi
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
call fcn.004037b0
mov eax, dword [esi + 8]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x30]
push ecx
lea ecx, [esp + 0x14]
mov dword [esp + 0x28], 1
call fcn.0044b110
mov esi, dword [esp + 0x2c]
lea edx, [esp + 0x10]
push edx
mov ecx, esi
mov dword [esi], ebx
mov dword [esi + 4], ebx
call fcn.004037b0
mov eax, dword [esp + 0x18]
mov dword [esi + 8], eax
lea ecx, [esp + 0x10]
mov dword [esp + 0xc], 1
mov byte [esp + 0x24], bl
call fcn.00402a70
mov eax, esi
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x1c
ret 8

Function at 0x44da80
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x472581
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov esi, ecx
xor ebx, ebx
mov dword [esp + 0xc], ebx
push esi
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
call fcn.004037b0
mov eax, dword [esi + 8]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x30]
neg ecx
push ecx
lea ecx, [esp + 0x14]
mov dword [esp + 0x28], 1
call fcn.0044b110
mov esi, dword [esp + 0x2c]
lea edx, [esp + 0x10]
push edx
mov ecx, esi
mov dword [esi], ebx
mov dword [esi + 4], ebx
call fcn.004037b0
mov eax, dword [esp + 0x18]
mov dword [esi + 8], eax
lea ecx, [esp + 0x10]
mov dword [esp + 0xc], 1
mov byte [esp + 0x24], bl
call fcn.00402a70
mov eax, esi
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x1c
ret 8
Function at 0x4521e0
Capabilities:
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x472e81
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x48]
mov dword [esp + 0x34], 1
call fcn.00441d80
mov ecx, dword [esp + 0x4c]
sub ecx, dword [esp + 0x40]
mov eax, 0xa0a0a0a1
imul ecx
add edx, ecx
sar edx, 9
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov eax, ebx
cdq
sub eax, edx
mov ebp, eax
sar ebp, 1
test ebp, ebp
jle 0x45238f
sub ebp, 1
push ebp
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x40]
call fcn.0044d890
mov esi, eax
mov eax, dword [esi]
test eax, eax
mov byte [esp + 0x30], 2
je 0x452275
mov ecx, dword [esi + 8]
cmp ecx, dword [eax + 8]
jb 0x452275
cmp dword [eax + 0xc], ecx
ja 0x4522c2
push 0x63
push str.C:Program_FilesMicrosoft_Visual_Studio_8VCinclude_vector
push str.vector_iterator_not_dereferencable
call dword [0x4751e8]
push str.__Standard_C_Libraries_Out_of_Range___0_
push 0
push 0x64
push str.C:Program_FilesMicrosoft_Visual_Studio_8VCinclude_vector
push 2
call dword [0x4752e8]
add esp, 0x20
cmp eax, 1
jne 0x4522a6
int3
push 0
push 0x64
push str.C:Program_FilesMicrosoft_Visual_Studio_8VCinclude_vector
push 0x47c9c8
push str._out_of_range_
call dword [0x4752ec]
add esp, 0x14
mov edx, dword [esp + 0x50]
mov esi, dword [esi + 8]
push edx
sub esp, 0x330
mov edi, esp
push ebx
push ebp
sub esp, 0xc
mov ecx, 0xcc
rep movsd dword es:[edi], dword [esi]
mov esi, esp
lea eax, [esp + 0x380]
mov dword [esp + 0x360], esp
xor edi, edi
push eax
mov ecx, esi
mov dword [esi], edi
mov dword [esi + 4], edi
call fcn.004037b0
mov ecx, dword [esp + 0x388]
mov dword [esi + 8], ecx
call fcn.0044f1f0
add esp, 0x348
push 3
lea ecx, [esp + 0x18]
mov byte [esp + 0x34], 1
call dword [0x4751fc]
mov esi, dword [esp + 0x1c]
cmp esi, edi
mov byte [esp + 0x30], 3
je 0x452378
cmp dword [esi], 0xfffffffd
je 0x452378
cmp dword [esi], edi
je 0x452356
lea esp, [esp]
mov eax, dword [esi]
lea edx, [esp + 0x1c]
cmp eax, edx
je 0x452352
cmp dword [eax + 4], edi
lea esi, [eax + 4]
jne 0x452340
cmp dword [esi], edi
jne 0x45236e
push 0xb2
push str.C:Program_FilesMicrosoft_Visual_Studio_8VCincludexutility
push str.ITERATOR_LIST_CORRUPTED_
call dword [0x4751e8]
add esp, 0xc
mov eax, dword [esp + 0x20]
mov dword [esi], eax
mov dword [esp + 0x1c], edi
lea ecx, [esp + 0x14]
mov byte [esp + 0x30], 1
call dword [0x4751f8]
cmp ebp, edi
jg 0x452249
lea ecx, [esp + 0x38]
mov byte [esp + 0x30], 0
call fcn.00402a70
lea ecx, [esp + 0x44]
mov dword [esp + 0x30], 0xffffffff
call fcn.00402a70
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x20
ret
Function at 0x456c10
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x473340
mov eax, dword fs:[0]
push eax
push esi
push edi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x20]
mov dword [esp + 0x18], 1
call fcn.00454ca0
mov esi, dword [esp + 0x24]
mov edi, dword [esp + 0x30]
cmp esi, edi
je 0x456c7e
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x2c]
call fcn.00454ca0
cmp edi, esi
jae 0x456c7e
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
push edx
push eax
push str.invalid_iterator_range
call dword [0x4751e8]
add esp, 0xc
lea ecx, [esp + 0x1c]
mov byte [esp + 0x14], 0
call fcn.00402a70
lea ecx, [esp + 0x28]
mov dword [esp + 0x14], 0xffffffff
call fcn.00402a70
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0xc
ret

Function at 0x457320
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x473421
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov esi, ecx
xor ebx, ebx
mov dword [esp + 0xc], ebx
push esi
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
call fcn.004037b0
mov eax, dword [esi + 8]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x30]
push ecx
lea ecx, [esp + 0x14]
mov dword [esp + 0x28], 1
call fcn.00454bf0
mov esi, dword [esp + 0x2c]
lea edx, [esp + 0x10]
push edx
mov ecx, esi
mov dword [esi], ebx
mov dword [esi + 4], ebx
call fcn.004037b0
mov eax, dword [esp + 0x18]
mov dword [esi + 8], eax
lea ecx, [esp + 0x10]
mov dword [esp + 0xc], 1
mov byte [esp + 0x24], bl
call fcn.00402a70
mov eax, esi
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x1c
ret 8

Function at 0x457540
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x4734a1
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov esi, ecx
xor ebx, ebx
mov dword [esp + 0xc], ebx
push esi
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
call fcn.004037b0
mov eax, dword [esi + 8]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x30]
neg ecx
push ecx
lea ecx, [esp + 0x14]
mov dword [esp + 0x28], 1
call fcn.00454bf0
mov esi, dword [esp + 0x2c]
lea edx, [esp + 0x10]
push edx
mov ecx, esi
mov dword [esi], ebx
mov dword [esi + 4], ebx
call fcn.004037b0
mov eax, dword [esp + 0x18]
mov dword [esi + 8], eax
lea ecx, [esp + 0x10]
mov dword [esp + 0xc], 1
mov byte [esp + 0x24], bl
call fcn.00402a70
mov eax, esi
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x1c
ret 8
Function at 0x459680
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x473a9b
mov eax, dword fs:[0]
push eax
push ecx
push esi
mov eax, dword [0x4905d8]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 8], esi
mov eax, dword [esi + 0x18]
push eax
mov dword [esp + 0x18], 0
call dword [0x475038]
lea ecx, [esi + 0x30]
mov dword [esi + 0x18], 0
call fcn.00458930
lea ecx, [esi + 0x1c]
mov dword [esp + 0x14], 0xffffffff
call fcn.004572a0
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x10
ret