joyce8/EMBER2024-capa huggingface dataset:
Function at 0x60e6f0
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
mov eax, dword [esp + 8]
cmp eax, 3
je 0x60e6fd
test eax, eax
jne 0x60e72d
cmp byte [0x74cb04], 0
je 0x60e72d
push dword [0x74cb08]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x60e72d
push eax
call fcn.005d6690
add esp, 4
push 0
push dword [0x74cb08]
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
ret 0xc

Function at 0x60e730
Capabilities:
Allocate thread local storage
Get thread local storage value

Disassembly:
push 0xffffffffffffffff
push 0x6b0258
mov eax, dword fs:[0]
push eax
push esi
mov eax, dword [0x73d6e0]
xor eax, esp
push eax
lea eax, [esp + 8]
mov dword fs:[0], eax
cmp byte [esp + 0x18], 0
jne 0x60e774
cmp byte [0x74cb04], 0
jne 0x60e7dd
xor eax, eax
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0xc
ret
cmp byte [0x74cb04], 0
jne 0x60e7dd
mov dword [esp + 0x18], 0x73ecb8
or eax, 0xffffffff
mov esi, 0x73ecb8
lock xadd dword [esi], eax
test eax, eax
jg 0x60e79c
mov ecx, esi
call fcn.005a8b40
mov dword [esp + 0x10], 0
cmp byte [0x74cb04], 0
jne 0x60e7bf
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
mov dword [0x74cb08], eax
mov byte [0x74cb04], 1
mov dword [esp + 0x10], 0xffffffff
mov eax, 1
lock xadd dword [esi], eax
test eax, eax
jns 0x60e7dd
push 1
mov ecx, esi
call fcn.005a8af0
push dword [0x74cb08]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0xc
ret

Function at 0x615010
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6b0ab9
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push ebp
push esi
push edi
mov eax, dword [0x73d6e0]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x14], esi
mov dword [esi], vtable.SkBitmapController::State.0
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], 0
mov dword [esp + 0x24], 0
lea ebp, [esi + 0x50]
mov ecx, ebp
mov dword [esi], vtable.SkDefaultBitmapControllerState.0
call fcn.00570330
mov byte [esp + 0x24], 1
lea eax, [esi + 0x84]
mov dword [esp + 0x18], eax
mov dword [eax], 0
mov byte [esp + 0x24], 3
mov ecx, esi
mov eax, dword [esp + 0x30]
mov ebx, dword [esp + 0x2c]
push ebx
movdqu xmm0, xmmword [eax]
movdqu xmmword [esi + 0x24], xmm0
movdqu xmm0, xmmword [eax + 0x10]
movdqu xmmword [esi + 0x34], xmm0
movq xmm0, qword [eax + 0x20]
mov eax, dword [esp + 0x38]
movq qword [esi + 0x44], xmm0
mov dword [esi + 0x4c], eax
call fcn.00615350
test al, al
jne 0x615100
push ebx
mov ecx, esi
call fcn.00615760
test al, al
jne 0x615100
push ebp
mov ecx, ebx
call fcn.00661690
mov ecx, ebp
call fcn.00571760
push dword [esi + 0x5c]
lea eax, [esi + 0x68]
push dword [esi + 0x7c]
lea ecx, [esi + 4]
push dword [esi + 0x58]
push eax
call fcn.005927e0
mov dword [esp + 0x24], 0xffffffff
mov eax, esi
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x14
ret 0xc
Function at 0x618540
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x6b0d93
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
mov eax, dword [0x73d6e0]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 8], esi
lea ecx, [esi + 4]
mov dword [esi], vtable.SkPictureData.0
call fcn.00570330
mov dword [esp + 0x18], 0
mov dword [esi + 0x3c], 0
mov dword [esi + 0x38], 8
mov dword [esi + 0x40], 0
mov dword [esi + 0x48], 0
mov dword [esi + 0x44], 0
mov byte [esp + 0x18], 1
mov dword [esi + 0x50], 0
mov dword [esi + 0x4c], 8
mov dword [esi + 0x54], 0
mov dword [esi + 0x5c], 0
mov dword [esi + 0x58], 0
mov byte [esp + 0x18], 2
mov dword [esi + 0x64], 0
mov dword [esi + 0x60], 8
mov dword [esi + 0x68], 0
mov dword [esi + 0x70], 0
mov dword [esi + 0x6c], 0
mov byte [esp + 0x18], 3
lea ecx, [esi + 0x90]
mov dword [esp + 0xc], ecx
mov dword [ecx + 0x30], 0
mov dword [ecx + 0x2c], 0
mov dword [ecx + 0x28], 0
mov byte [esp + 0x18], 4
call fcn.00667220
mov byte [esp + 0x18], 5
lea ecx, [esi + 0xc4]
call fcn.006672c0
mov byte [esp + 0x18], 6
mov eax, dword [esp + 0x20]
movdqu xmm0, xmmword [eax]
movdqu xmmword [esi + 0xd4], xmm0
movdqu xmm0, xmmword [eax + 0x10]
mov dword [esi + 0x78], 0
mov dword [esi + 0x7c], 0
movdqu xmmword [esi + 0xe4], xmm0
mov dword [esi + 0x80], 0
mov dword [esi + 0x84], 0
mov dword [esi + 0x88], 0
mov dword [esi + 0x8c], 0
mov dword [esi + 0x74], 0
mov dword [esi + 0xd0], 0
mov dword [esp + 0x18], 0xffffffff
mov eax, esi
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x14
ret 4
Function at 0x618b00
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x6b0ea3
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push esi
push edi
mov eax, dword [0x73d6e0]
xor eax, esp
push eax
lea eax, [esp + 0x18]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x10], esi
mov dword [esi], vtable.SkPictureData.0
mov dword [esp + 0x20], 5
mov ecx, dword [esi + 0x74]
test ecx, ecx
je 0x618b55
lea eax, [ecx + 4]
or edx, 0xffffffff
lock xadd dword [eax], edx
cmp edx, 1
jne 0x618b55
mov eax, dword [ecx]
call dword [eax + 4]
xor edi, edi
cmp dword [esi + 0x7c], edi
jle 0x618b80
lea esp, [esp]
mov eax, dword [esi + 0x78]
or edx, 0xffffffff
mov ecx, dword [eax + edi*4]
lea eax, [ecx + 4]
lock xadd dword [eax], edx
cmp edx, 1
jne 0x618b7a
mov eax, dword [ecx]
call dword [eax + 4]
inc edi
cmp edi, dword [esi + 0x7c]
jl 0x618b60
push dword [esi + 0x78]
call fcn.005ad770
xor edi, edi
add esp, 4
cmp dword [esi + 0x84], edi
jle 0x618bc6
jmp 0x618ba0
mov eax, dword [esi + 0x80]
or edx, 0xffffffff
mov ecx, dword [eax + edi*4]
lea eax, [ecx + 4]
lock xadd dword [eax], edx
cmp edx, 1
jne 0x618bbd
mov eax, dword [ecx]
call dword [eax + 4]
inc edi
cmp edi, dword [esi + 0x84]
jl 0x618ba0
push dword [esi + 0x80]
call fcn.005ad770
xor edi, edi
add esp, 4
cmp dword [esi + 0x8c], edi
jle 0x618c06
mov edi, edi
mov eax, dword [esi + 0x88]
or edx, 0xffffffff
mov ecx, dword [eax + edi*4]
lea eax, [ecx + 4]
lock xadd dword [eax], edx
cmp edx, 1
jne 0x618bfd
mov eax, dword [ecx]
call dword [eax + 4]
inc edi
cmp edi, dword [esi + 0x8c]
jl 0x618be0
push dword [esi + 0x88]
call fcn.005ad770
mov edi, dword [esi + 0xd0]
add esp, 4
test edi, edi
je 0x618c2f
push dword [edi + 4]
call fcn.005ad770
push edi
call fcn.005472b4
add esp, 8
mov byte [esp + 0x20], 4
lea ecx, [esi + 0xc4]
call fcn.006672e0
mov byte [esp + 0x20], 3
lea eax, [esi + 0x90]
mov dword [esp + 0x14], eax
mov byte [esp + 0x20], 3
push dword [eax + 0x28]
call fcn.005701e0
add esp, 4
mov byte [esp + 0x20], 2
xor ebx, ebx
cmp dword [esi + 0x64], ebx
jle 0x618c83
xor edi, edi
lea esp, [esp]
mov ecx, dword [esi + 0x70]
add ecx, edi
call fcn.00633560
inc ebx
add edi, 0xc
cmp ebx, dword [esi + 0x64]
jl 0x618c70
mov eax, dword [esi + 0x70]
cmp eax, dword [esi + 0x6c]
je 0x618c94
push eax
call fcn.005701e0
add esp, 4
mov byte [esp + 0x20], 1
xor edi, edi
cmp dword [esi + 0x50], edi
jle 0x618cb5
xor ebx, ebx
mov ecx, dword [esi + 0x5c]
add ecx, ebx
call fcn.00575e00
inc edi
add ebx, 0x44
cmp edi, dword [esi + 0x50]
jl 0x618ca2
mov eax, dword [esi + 0x5c]
cmp eax, dword [esi + 0x58]
je 0x618cc6
push eax
call fcn.005701e0
add esp, 4
mov byte [esp + 0x20], 0
xor edi, edi
cmp dword [esi + 0x3c], edi
jle 0x618ce7
xor ebx, ebx
mov ecx, dword [esi + 0x48]
add ecx, ebx
call fcn.005703a0
inc edi
add ebx, 0x34
cmp edi, dword [esi + 0x3c]
jl 0x618cd4
mov eax, dword [esi + 0x48]
cmp eax, dword [esi + 0x44]
je 0x618cf8
push eax
call fcn.005701e0
add esp, 4
mov dword [esp + 0x20], 0xffffffff
lea ecx, [esi + 4]
call fcn.005703a0
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add esp, 0x14
ret
Function at 0x61aae0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6b118a
mov eax, dword fs:[0]
push eax
push ecx
push esi
mov eax, dword [0x73d6e0]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 8], esi
mov eax, dword [esp + 0x1c]
push 0
push dword [eax + 4]
push dword [eax]
call fcn.0057a1a0
mov dword [esp + 0x14], 0
mov dword [esi], vtable.SkPictureRecord.0
mov dword [esi + 0x4ec], 0
mov dword [esi + 0x4e8], 0
mov dword [esi + 0x4e4], 0
mov byte [esp + 0x14], 1
mov dword [esi + 0x4f8], 0
mov dword [esi + 0x4f4], 0
mov dword [esi + 0x4f0], 0
mov byte [esp + 0x14], 2
lea ecx, [esi + 0x4fc]
mov dword [esp + 0x1c], ecx
mov dword [ecx + 0x30], 0
mov dword [ecx + 0x2c], 0
mov dword [ecx + 0x28], 0
mov byte [esp + 0x14], 3
call fcn.00667220
mov byte [esp + 0x14], 4
mov dword [esi + 0x534], 0
mov dword [esi + 0x530], 8
mov dword [esi + 0x538], 0
mov dword [esi + 0x540], 0
mov dword [esi + 0x53c], 0
mov byte [esp + 0x14], 5
mov dword [esi + 0x548], 0
mov dword [esi + 0x544], 8
mov dword [esi + 0x54c], 0
mov dword [esi + 0x554], 0
mov dword [esi + 0x550], 0
mov byte [esp + 0x14], 6
mov dword [esi + 0x55c], 0
mov dword [esi + 0x558], 8
mov dword [esi + 0x560], 0
mov dword [esi + 0x568], 0
mov dword [esi + 0x564], 0
mov byte [esp + 0x14], 7
lea eax, [esi + 0x56c]
mov dword [esp + 0x1c], eax
mov dword [eax + 0x10], 0
mov byte [esp + 0x14], 8
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
mov byte [esp + 0x14], 9
mov dword [esi + 0x588], 0
mov dword [esi + 0x584], 0
mov dword [esi + 0x580], 0
mov byte [esp + 0x14], 0xa
mov dword [esi + 0x594], 0
mov dword [esi + 0x590], 0
mov dword [esi + 0x58c], 0
mov byte [esp + 0x14], 0xb
mov dword [esi + 0x5a0], 0
mov dword [esi + 0x59c], 0
mov dword [esi + 0x598], 0
mov byte [esp + 0x14], 0xc
mov eax, dword [esp + 0x20]
mov dword [esi + 0x5a4], eax
mov dword [esi + 0x5a8], 0xffffffff
mov dword [esp + 0x14], 0xffffffff
mov eax, esi
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x10
ret 8

Function at 0x61fa80
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x6b1dd3
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
mov eax, dword [0x73d6e0]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
push 0x34
call fcn.00547bd8
mov esi, eax
add esp, 4
mov dword [esp + 0xc], esi
mov dword [esp + 0x18], 0
test esi, esi
je 0x61fb1b
mov eax, dword [esp + 0x28]
mov ecx, esi
push dword [esp + 0x2c]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xc]
push eax
push 1
call fcn.005a7260
mov byte [esp + 0x18], 1
movss xmm0, dword [esp + 0x20]
mov dword [esi], vtable.SkBlurImageFilter.0
movss dword [esi + 0x2c], xmm0
movss xmm0, dword [esp + 0x24]
movss dword [esi + 0x30], xmm0
mov byte [esp + 0x18], 0
mov dword [esp + 0x18], 0xffffffff
mov eax, esi
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x14
ret
mov dword [esp + 0x18], 0xffffffff
xor eax, eax
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x14
ret
Function at 0x622970
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x6b1bfb
mov eax, dword fs:[0]
push eax
sub esp, 0xb8
mov eax, dword [0x73d6e0]
xor eax, esp
mov dword [esp + 0xb4], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x73d6e0]
xor eax, esp
push eax
lea eax, [esp + 0xcc]
mov dword fs:[0], eax
mov eax, dword [esp + 0xdc]
mov edi, dword [esp + 0xe0]
mov ebp, dword [esp + 0xe4]
mov ebx, dword [esp + 0xec]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0xe8]
mov dword [esp + 0x24], eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax]
mov esi, dword [eax + 4]
mov dword [esp + 0x28], ecx
lea ecx, [esp + 0x30]
call fcn.00570330
mov dword [esp + 0xd4], 0
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x34]
mov dword [esp + 0x18], 0
push eax
push ebp
push edi
mov edi, dword [esp + 0x3c]
mov ecx, esi
push edi
mov dword [esp + 0x2c], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
call fcn.005a7df0
test al, al
je 0x622b10
movdqu xmm0, xmmword [ebp]
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x64]
neg eax
sub esp, 8
movdqu xmmword [esp + 0x6c], xmm0
movdqu xmm0, xmmword [ebp + 0x10]
movdqu xmmword [esp + 0x7c], xmm0
movq xmm0, qword [ebp + 0x20]
movq qword [esp + 0x8c], xmm0
movd xmm0, eax
mov eax, dword [esp + 0x1c]
cvtdq2ps xmm0, xmm0
neg eax
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
call fcn.005743f0
movdqu xmm0, xmmword [esp + 0x64]
mov eax, dword [ebp + 0x38]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0xc4], eax
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x28]
movdqu xmmword [esp + 0x94], xmm0
lea eax, [esp + 0x94]
movdqu xmm0, xmmword [esp + 0x7c]
push eax
lea eax, [esp + 0x3c]
movdqu xmmword [esp + 0xa8], xmm0
push eax
movq xmm0, qword [esp + 0x94]
movq qword [esp + 0xbc], xmm0
movdqu xmm0, xmmword [ebp + 0x28]
push edi
movdqu xmmword [esp + 0xc8], xmm0
call fcn.005a7df0
test al, al
je 0x622b10
mov edx, dword [esp + 0x20]
add edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
add eax, dword [esp + 0x14]
mov dword [ebx], eax
mov dword [ebx + 4], edx
mov bl, 1
jmp 0x622b12
xor bl, bl
mov dword [esp + 0xd4], 0xffffffff
lea ecx, [esp + 0x30]
call fcn.005703a0
mov al, bl
mov ecx, dword [esp + 0xcc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xb4]
xor ecx, esp
call fcn.005472b9
add esp, 0xc4
ret 0x14
Function at 0x625ce0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x6b1dd3
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
mov eax, dword [0x73d6e0]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
push 0x44
call fcn.00547bd8
mov esi, eax
add esp, 4
mov dword [esp + 0xc], esi
mov dword [esp + 0x18], 0
test esi, esi
je 0x625d9f
mov eax, dword [esp + 0x38]
mov ecx, esi
push dword [esp + 0x3c]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xc]
push eax
push 1
call fcn.005a7260
mov byte [esp + 0x18], 1
movss xmm0, dword [esp + 0x20]
mov ecx, dword [esp + 0x30]
movss dword [esi + 0x2c], xmm0
movss xmm0, dword [esp + 0x24]
movss dword [esi + 0x30], xmm0
movss xmm0, dword [esp + 0x28]
movss dword [esi + 0x34], xmm0
movss xmm0, dword [esp + 0x2c]
mov dword [esi + 0x3c], ecx
mov ecx, dword [esp + 0x34]
mov dword [esi], vtable.SkDropShadowImageFilter.0
movss dword [esi + 0x38], xmm0
mov dword [esi + 0x40], ecx
mov byte [esp + 0x18], 0
mov dword [esp + 0x18], 0xffffffff
mov eax, esi
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x14
ret
mov dword [esp + 0x18], 0xffffffff
xor eax, eax
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x14
ret

Function at 0x626c30
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6b1f8b
mov eax, dword fs:[0]
push eax
push ecx
push esi
mov eax, dword [0x73d6e0]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 8], esi
push 0
push 0
push 0
call fcn.005a7260
mov dword [esp + 0x14], 0
mov eax, 1
mov edx, dword [esp + 0x1c]
mov dword [esi], vtable.SkImageSource.0
lea ecx, [edx + 4]
lock xadd dword [ecx], eax
lea eax, [esi + 0x2c]
mov dword [eax], edx
mov dword [esp + 0x1c], eax
mov byte [esp + 0x14], 2
mov eax, dword [esp + 0x20]
movdqu xmm0, xmmword [eax]
mov eax, dword [esp + 0x24]
movdqu xmmword [esi + 0x30], xmm0
movdqu xmm0, xmmword [eax]
mov eax, dword [esp + 0x28]
mov dword [esi + 0x50], eax
movdqu xmmword [esi + 0x40], xmm0
mov dword [esp + 0x14], 0xffffffff
mov eax, esi
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x10
ret 0x10
Function at 0x630cc0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6b23b3
mov eax, dword fs:[0]
push eax
push ecx
push esi
mov eax, dword [0x73d6e0]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 8], esi
mov eax, dword [esp + 0x24]
push dword [esp + 0x28]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x28]
push eax
push 1
call fcn.005a7260
mov dword [esp + 0x14], 0
mov eax, 1
mov edx, dword [esp + 0x1c]
mov dword [esi], vtable.SkLightingImageFilter.0
lea ecx, [edx + 4]
lock xadd dword [ecx], eax
lea eax, [esi + 0x2c]
mov dword [eax], edx
mov dword [esp + 0x28], eax
mov byte [esp + 0x14], 2
movss xmm0, dword [esp + 0x20]
divss xmm0, dword [0x6b9d34]
movss dword [esi + 0x30], xmm0
mov dword [esp + 0x14], 3
mov dword [esi], vtable.SkLightingImageFilterInternal.0
mov dword [esp + 0x14], 0xffffffff
mov eax, esi
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x10
ret 0x10

Function at 0x630f00
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6b23d8
mov eax, dword fs:[0]
push eax
push ecx
push esi
mov eax, dword [0x73d6e0]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 8], esi
push dword [esp + 0x30]
movss xmm0, dword [esp + 0x24]
push dword [esp + 0x30]
push ecx
movss dword [esp], xmm0
push dword [esp + 0x28]
call fcn.00630cc0
mov dword [esp + 0x14], 0
movss xmm0, dword [esp + 0x24]
movss dword [esi + 0x34], xmm0
movss xmm0, dword [esp + 0x28]
mov dword [esi], vtable.SkSpecularLightingImageFilter.0
movss dword [esi + 0x38], xmm0
mov dword [esp + 0x14], 0xffffffff
mov eax, esi
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x10
ret 0x18
Function at 0x633460
Capabilities:
Access peb ldr_data
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x6b2774
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x73d6e0]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov edi, ecx
mov dword [esp + 0xc], edi
push dword [esp + 0x30]
call fcn.00589920
mov dword [esp + 0x18], 0
lea ecx, [edi + 0x30]
push dword [esp + 0x20]
mov dword [edi], vtable.SkLightingShaderImpl.0
call fcn.005702e0
mov byte [esp + 0x18], 1
lea ecx, [edi + 0x64]
push dword [esp + 0x24]
call fcn.005702e0
mov byte [esp + 0x18], 2
mov eax, 1
mov edx, dword [esp + 0x28]
lea ecx, [edx + 4]
lock xadd dword [ecx], eax
lea eax, [edi + 0x98]
mov dword [eax], edx
mov dword [esp + 0x30], eax
mov byte [esp + 0x18], 4
lea esi, [edi + 0x9c]
mov ecx, dword [esp + 0x2c]
mov eax, dword [ecx]
mov dword [edi + 0xc4], eax
mov eax, dword [ecx + 4]
mov dword [edi + 0xc8], eax
mov eax, dword [esp + 0x34]
test eax, eax
je 0x633524
movdqu xmm0, xmmword [eax]
movdqu xmmword [esi], xmm0
movdqu xmm0, xmmword [eax + 0x10]
movdqu xmmword [esi + 0x10], xmm0
movq xmm0, qword [eax + 0x20]
movq qword [esi + 0x20], xmm0
jmp 0x63352b
mov ecx, esi
call fcn.00574710
test byte [esi + 0x24], 0x80
je 0x63353e
mov ecx, esi
call fcn.00573320
movzx eax, al
mov dword [esi + 0x24], eax
mov dword [esp + 0x18], 0xffffffff
mov eax, edi
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x10
ret 0x18

Function at 0x6335d0
Capabilities:
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x6b27f4
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
push edi
mov eax, dword [0x73d6e0]
xor eax, esp
push eax
lea eax, [esp + 0x14]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0xc], esi
mov dword [esp + 0x1c], 2
lea edi, [esi + 0x98]
mov dword [esp + 0x10], edi
mov byte [esp + 0x1c], 2
mov ecx, dword [edi]
test ecx, ecx
je 0x63362c
lea eax, [ecx + 4]
or edx, 0xffffffff
lock xadd dword [eax], edx
cmp edx, 1
jne 0x63362c
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [edi], 0
mov byte [esp + 0x1c], 1
lea ecx, [esi + 0x64]
call fcn.005703a0
mov byte [esp + 0x1c], 0
lea ecx, [esi + 0x30]
call fcn.005703a0
mov dword [esp + 0x1c], 0xffffffff
mov ecx, esi
call fcn.00589a00
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x14
ret

Function at 0x634320
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6b296b
mov eax, dword fs:[0]
push eax
push ecx
push esi
mov eax, dword [0x73d6e0]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 8], esi
push dword [esp + 0x20]
call fcn.00589920
mov dword [esp + 0x14], 0
mov eax, 1
mov edx, dword [esp + 0x1c]
mov dword [esi], vtable.SkLocalMatrixShader.0
lea ecx, [edx + 4]
lock xadd dword [ecx], eax
lea eax, [esi + 0x30]
mov dword [eax], edx
mov dword [esp + 0x20], eax
mov dword [esp + 0x14], 0xffffffff
mov eax, esi
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x10
ret 8
Function at 0x636d10
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6b2a98
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x73d6e0]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov edi, ecx
mov dword [esp + 0xc], edi
push dword [esp + 0x40]
lea eax, [esp + 0x40]
push eax
push 1
call fcn.005a7260
mov dword [esp + 0x18], 0
mov edx, 4
mov ecx, dword [esp + 0x20]
movss xmm0, dword [esp + 0x28]
mov dword [edi], vtable.SkMatrixConvolutionImageFilter.0
mov eax, dword [ecx]
mov dword [edi + 0x2c], eax
mov eax, dword [ecx + 4]
mov ecx, dword [esp + 0x30]
mov esi, dword [edi + 0x2c]
mov dword [edi + 0x30], eax
imul esi, dword [edi + 0x30]
movss dword [edi + 0x38], xmm0
movss xmm0, dword [esp + 0x2c]
movss dword [edi + 0x3c], xmm0
mov eax, dword [ecx]
mov dword [edi + 0x40], eax
mov eax, dword [ecx + 4]
xor ecx, ecx
mov dword [edi + 0x44], eax
mov eax, dword [esp + 0x34]
mov dword [edi + 0x48], eax
mov al, byte [esp + 0x38]
mov byte [edi + 0x4c], al
mov eax, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004ca65e
lea ecx, [esi*4]
mov dword [edi + 0x34], eax
push ecx
push dword [esp + 0x2c]
push eax
call fcn.00549620
add esp, 0x10
mov dword [esp + 0x18], 0xffffffff
mov eax, edi
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x10
ret 0x24
Function at 0x637a30
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6b3278
mov eax, dword fs:[0]
push eax
push ecx
push esi
mov eax, dword [0x73d6e0]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 8], esi
mov dword [esi], vtable.SkMergeImageFilter.0
mov dword [esp + 0x14], 0
lea eax, [esi + 0x30]
mov ecx, dword [esi + 0x2c]
cmp ecx, eax
je 0x637a79
push ecx
call fcn.005701e0
add esp, 4
mov dword [esp + 0x14], 0xffffffff
mov ecx, esi
call fcn.005a76b0
test byte [esp + 0x1c], 1
je 0x637a98
push esi
call fcn.005472b4
add esp, 4
mov eax, esi
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x10
ret 4

Function at 0x638200
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6b2cb0
mov eax, dword fs:[0]
push eax
push ecx
push esi
mov eax, dword [0x73d6e0]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 8], esi
mov eax, dword [esp + 0x24]
push dword [esp + 0x28]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x28]
push eax
push 1
call fcn.005a7260
mov dword [esp + 0x14], 0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esi], vtable.SkMorphologyImageFilter.0
mov dword [esi + 0x2c], eax
mov dword [esi + 0x30], ecx
mov dword [esp + 0x14], 1
mov dword [esi], vtable.SkDilateImageFilter.0
mov dword [esp + 0x14], 0xffffffff
mov eax, esi
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x10
ret 0x10

Function at 0x638290
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6b2cb0
mov eax, dword fs:[0]
push eax
push ecx
push esi
mov eax, dword [0x73d6e0]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 8], esi
mov eax, dword [esp + 0x24]
push dword [esp + 0x28]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x28]
push eax
push 1
call fcn.005a7260
mov dword [esp + 0x14], 0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esi], vtable.SkMorphologyImageFilter.0
mov dword [esi + 0x2c], eax
mov dword [esi + 0x30], ecx
mov dword [esp + 0x14], 1
mov dword [esi], vtable.SkErodeImageFilter.0
mov dword [esp + 0x14], 0xffffffff
mov eax, esi
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x10
ret 0x10