joyce8/EMBER2024-capa huggingface dataset:
Function at 0x670cb350
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x67231499
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push ebp
push esi
push edi
mov eax, dword [0x67463180]
xor eax, esp
push eax
lea eax, [esp + 0x20]
mov dword fs:[0], eax
mov dword [esp + 0x14], 0
lea ecx, [esp + 0x34]
mov ebx, dword [esp + 0x34]
push ebx
call sym.Qt5Core.dll_public:_void___thiscall_QDebugStateSaver::constructor_class_QDebug__
mov esi, dword [esp + 0x40]
mov edi, dword [esp + 0x3c]
mov ecx, edi
push esi
mov dword [esp + 0x2c], 1
call sym.Qt5Core.dll_public:_int___thiscall_QMetaObject::indexOfEnumerator_char_const__const
push eax
lea eax, [esp + 0x1c]
mov ecx, edi
push eax
call sym.Qt5Core.dll_public:_class_QMetaEnum___thiscall_QMetaObject::enumerator_int_
push dword [esp + 0x38]
lea ecx, [esp + 0x1c]
call sym.Qt5Core.dll_public:_char_const____thiscall_QMetaEnum::valueToKey_int_const
mov edx, dword [ebx]
mov ecx, edi
push esi
push 0x6728cab8
mov ebp, eax
mov byte [edx + 0x14], 0
call sym.Qt5Core.dll_public:_char_const____thiscall_QMetaObject::className_void_const
push eax
mov ecx, ebx
call sym.Qt5Core.dll_public:_class_QDebug____thiscall_QDebug::operator___char_const__
mov ecx, eax
call sym.Qt5Core.dll_public:_class_QDebug____thiscall_QDebug::operator___char_const__
mov ecx, eax
call sym.Qt5Core.dll_public:_class_QDebug____thiscall_QDebug::operator___char_const__
mov esi, eax
push 0x28
mov ecx, dword [esi]
call sym.Qt5Core.dll_public:_class_QTextStream____thiscall_QTextStream::operator___char_
mov ecx, dword [esi]
cmp byte [ecx + 0x14], 0
je 0x670cb404
push 0x20
call sym.Qt5Core.dll_public:_class_QTextStream____thiscall_QTextStream::operator___char_
test ebp, ebp
je 0x670cb412
push ebp
mov ecx, ebx
call sym.Qt5Core.dll_public:_class_QDebug____thiscall_QDebug::operator___char_const__
jmp 0x670cb42c
push dword [esp + 0x38]
mov ecx, dword [ebx]
call sym.Qt5Core.dll_public:_class_QTextStream____thiscall_QTextStream::operator___int_
mov ecx, dword [ebx]
cmp byte [ecx + 0x14], 0
je 0x670cb42c
push 0x20
call sym.Qt5Core.dll_public:_class_QTextStream____thiscall_QTextStream::operator___char_
mov ecx, dword [ebx]
push 0x29
call sym.Qt5Core.dll_public:_class_QTextStream____thiscall_QTextStream::operator___char_
mov ecx, dword [ebx]
cmp byte [ecx + 0x14], 0
je 0x670cb444
push 0x20
call sym.Qt5Core.dll_public:_class_QTextStream____thiscall_QTextStream::operator___char_
mov eax, dword [ebx]
mov edi, dword [esp + 0x30]
mov dword [edi], eax
inc dword [eax + 0xc]
mov dword [esp + 0x14], 1
mov esi, dword [esp + 0x34]
mov ecx, esi
mov dword [esp + 0x28], 2
call fcn.670cb690
push esi
call fcn.67226c38
add esp, 4
mov eax, edi
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x18
ret
Function at 0x670cf1a0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x67231cd8
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push esi
push edi
mov eax, dword [0x67463180]
xor eax, esp
push eax
lea eax, [esp + 0x20]
mov dword fs:[0], eax
lea eax, [esp + 0x10]
mov dword [esp + 0xc], 0
push eax
call fcn.6711f740
add esp, 4
mov esi, dword [esp + 0x30]
mov ecx, eax
push esi
mov dword [esp + 0x2c], 0
call fcn.67112890
mov ecx, dword [esp + 0x14]
or edi, 0xffffffff
mov eax, dword [ecx]
test eax, eax
je 0x670cf210
cmp eax, edi
je 0x670cf21d
mov eax, edi
lock xadd dword [ecx], eax
setne al
test al, al
jne 0x670cf21d
mov ecx, dword [esp + 0x14]
push 4
push 2
push ecx
call sym.Qt5Core.dll_public:_static_void___cdecl_QArrayData::deallocate_struct_QArrayData___unsigned_int__unsigned_int_
add esp, 0xc
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
je 0x670cf23c
cmp ecx, 0xffffffff
je 0x670cf249
lock xadd dword [eax], edi
dec edi
setne al
test al, al
jne 0x670cf249
mov eax, dword [esp + 0x10]
push 4
push 2
push eax
call sym.Qt5Core.dll_public:_static_void___cdecl_QArrayData::deallocate_struct_QArrayData___unsigned_int__unsigned_int_
add esp, 0xc
mov eax, esi
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x20
ret
Function at 0x670dac90
Capabilities:
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x67232f10
mov eax, dword fs:[0]
push eax
sub esp, 0x44
push ebx
push ebp
push esi
push edi
mov eax, dword [0x67463180]
xor eax, esp
push eax
lea eax, [esp + 0x58]
mov dword fs:[0], eax
mov edi, dword [esp + 0x6c]
lea eax, [esp + 0x24]
push 0xa
push edi
push eax
call fcn.670da670
mov ebp, eax
mov ecx, edi
mov dword [esp + 0x6c], 0
push 0xa
shr ecx, 8
lea eax, [esp + 0x30]
push ecx
push eax
call fcn.670da670
mov ebx, eax
mov ecx, edi
mov byte [esp + 0x78], 1
push 0xa
shr ecx, 0x10
lea eax, [esp + 0x38]
push ecx
push eax
call fcn.670da670
mov esi, eax
push 0xa
shr edi, 0x18
lea eax, [esp + 0x40]
push edi
push eax
mov byte [esp + 0x90], 2
call fcn.670da670
mov dword [esp + 0x58], eax
lea eax, [esp + 0x9c]
mov dword [esp + 0x5c], eax
lea eax, [esp + 0x58]
mov dword [esp + 0x60], eax
lea eax, [esp + 0x60]
mov dword [esp + 0x68], eax
lea eax, [esp + 0x46]
mov dword [esp + 0x6c], eax
lea eax, [esp + 0x68]
mov dword [esp + 0x70], eax
lea eax, [esp + 0x70]
mov dword [esp + 0x78], eax
lea eax, [esp + 0x47]
mov dword [esp + 0x7c], eax
lea eax, [esp + 0x78]
mov dword [esp + 0x80], eax
lea eax, [esp + 0x80]
push eax
push dword [esp + 0x9c]
mov byte [esp + 0x98], 3
mov byte [esp + 0x4f], 0x2e
mov byte [esp + 0x4e], 0x2e
mov byte [esp + 0xa4], 0x2e
mov dword [esp + 0x6c], esi
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x8c], ebp
call fcn.670da580
mov eax, dword [esp + 0x50]
add esp, 0x38
or esi, 0xffffffff
mov ecx, dword [eax]
test ecx, ecx
je 0x670dadc3
cmp ecx, esi
je 0x670dadd0
mov ecx, esi
lock xadd dword [eax], ecx
setne al
test al, al
jne 0x670dadd0
mov eax, dword [esp + 0x18]
push 4
push 2
push eax
call sym.Qt5Core.dll_public:_static_void___cdecl_QArrayData::deallocate_struct_QArrayData___unsigned_int__unsigned_int_
add esp, 0xc
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
test ecx, ecx
je 0x670dadf0
cmp ecx, 0xffffffff
je 0x670dadfd
mov ecx, esi
lock xadd dword [eax], ecx
setne al
test al, al
jne 0x670dadfd
mov eax, dword [esp + 0x1c]
push 4
push 2
push eax
call sym.Qt5Core.dll_public:_static_void___cdecl_QArrayData::deallocate_struct_QArrayData___unsigned_int__unsigned_int_
add esp, 0xc
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
test ecx, ecx
je 0x670dae1d
cmp ecx, 0xffffffff
je 0x670dae2a
mov ecx, esi
lock xadd dword [eax], ecx
setne al
test al, al
jne 0x670dae2a
mov eax, dword [esp + 0x20]
push 4
push 2
push eax
call sym.Qt5Core.dll_public:_static_void___cdecl_QArrayData::deallocate_struct_QArrayData___unsigned_int__unsigned_int_
add esp, 0xc
mov eax, dword [esp + 0x24]
mov ecx, dword [eax]
test ecx, ecx
je 0x670dae49
cmp ecx, 0xffffffff
je 0x670dae56
lock xadd dword [eax], esi
dec esi
setne al
test al, al
jne 0x670dae56
mov eax, dword [esp + 0x24]
push 4
push 2
push eax
call sym.Qt5Core.dll_public:_static_void___cdecl_QArrayData::deallocate_struct_QArrayData___unsigned_int__unsigned_int_
add esp, 0xc
mov ecx, dword [esp + 0x58]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x50
ret
Function at 0x670de1a0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x67233278
mov eax, dword fs:[0]
push eax
push ecx
push esi
mov eax, dword [0x67463180]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 8], esi
push 0
call sym.Qt5Core.dll_public:_void___thiscall_QObject::constructor_class_QObject__
mov ecx, dword [esp + 0x1c]
mov dword [esi], vtable.QNonContiguousByteDeviceIoDeviceImpl.0
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0x4000
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], 0
mov dword [esi + 0x24], 0
mov dword [esi + 0x28], 0
mov dword [esi + 0x2c], 0
mov byte [esi + 0x30], 0
mov dword [esi + 8], ecx
mov eax, dword [ecx]
mov dword [esp + 0x14], 0
mov eax, dword [eax + 0x38]
call eax
push 2
push 0x672e937c
push esi
push 0x672e937c
push dword [esi + 8]
mov dword [esi + 0x38], eax
lea eax, [esp + 0x30]
push eax
mov dword [esi + 0x3c], edx
call sym.Qt5Core.dll_public:_static_class_QMetaObject::Connection___cdecl_QObject::connect_class_QObject_const___char_const___class_QObject_const___char_const___enum_Qt::ConnectionType_
add esp, 0x18
lea ecx, [esp + 0x1c]
call sym.Qt5Core.dll_public:_void___thiscall_QMetaObject::Connection::destructor_void_
push 2
push 0x672e937c
push esi
push str.2readChannelFinished__
push dword [esi + 8]
lea eax, [esp + 0x30]
push eax
call sym.Qt5Core.dll_public:_static_class_QMetaObject::Connection___cdecl_QObject::connect_class_QObject_const___char_const___class_QObject_const___char_const___enum_Qt::ConnectionType_
add esp, 0x18
lea ecx, [esp + 0x1c]
call sym.Qt5Core.dll_public:_void___thiscall_QMetaObject::Connection::destructor_void_
mov eax, esi
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x10
ret 4
Function at 0x670df840
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x672334ba
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
push edi
mov eax, dword [0x67463180]
xor eax, esp
push eax
lea eax, [esp + 0x14]
mov dword fs:[0], eax
mov edi, ecx
mov dword [esp + 0xc], edi
call sym.Qt5Core.dll_public:_void___thiscall_QIODevicePrivate::constructor_void_
mov dword [edi], vtable.QProcessPrivate.0
mov dword [esp + 0x1c], 0
mov dword [edi + 0x8c], sym.Qt5Core.dll_struct_QArrayData_const__const_const_QArrayData::shared_null
lea esi, [edi + 0xa0]
mov dword [esi], sym.Qt5Core.dll_struct_QArrayData_const__const_const_QArrayData::shared_null
mov dword [esp + 0x10], esi
push 0x1000
lea ecx, [esi + 0x10]
mov byte [esp + 0x20], 2
mov dword [esi + 4], 0
mov dword [esi + 8], 0
call fcn.670d6a20
and dword [esi + 0x38], 0xfffffffc
and byte [esi + 0x3c], 0xfc
mov dword [esi + 0x30], 0xffffffff
mov dword [esi + 0x34], 0xffffffff
mov dword [esi + 0xc], 0
lea esi, [edi + 0xe0]
mov dword [esi], sym.Qt5Core.dll_struct_QArrayData_const__const_const_QArrayData::shared_null
mov dword [esp + 0x10], esi
push 0x1000
lea ecx, [esi + 0x10]
mov byte [esp + 0x20], 4
mov dword [esi + 4], 0
mov dword [esi + 8], 0
call fcn.670d6a20
and dword [esi + 0x38], 0xfffffffc
and byte [esi + 0x3c], 0xfc
mov dword [esi + 0x30], 0xffffffff
mov dword [esi + 0x34], 0xffffffff
mov dword [esi + 0xc], 0
lea esi, [edi + 0x120]
mov dword [esi], sym.Qt5Core.dll_struct_QArrayData_const__const_const_QArrayData::shared_null
mov dword [esp + 0x10], esi
push 0x1000
lea ecx, [esi + 0x10]
mov byte [esp + 0x20], 6
mov dword [esi + 4], 0
mov dword [esi + 8], 0
call fcn.670d6a20
and dword [esi + 0x38], 0xfffffffc
mov eax, edi
and byte [esi + 0x3c], 0xfc
mov dword [esi + 0x30], 0xffffffff
mov dword [esi + 0x34], 0xffffffff
mov dword [esi + 0xc], 0
mov dword [edi + 0x160], sym.Qt5Core.dll_struct_QArrayData_const__const_const_QArrayData::shared_null
mov dword [edi + 0x164], sym.Qt5Core.dll_struct_QListData::Data_const_QListData::shared_null
mov dword [edi + 0x168], sym.Qt5Core.dll_struct_QArrayData_const__const_const_QArrayData::shared_null
mov dword [edi + 0x16c], 0
mov dword [edi + 0x78], 0
mov dword [edi + 0x7c], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0x84], 5
mov dword [edi + 0x88], 0
mov dword [edi + 0x90], 0
mov dword [edi + 0x94], 0
mov dword [edi + 0x190], 0
mov dword [edi + 0x178], 0
mov dword [edi + 0x17c], 0
mov dword [edi + 0x170], 0xffffffff
mov dword [edi + 0x174], 0xffffffff
mov dword [edi + 0x180], 0xffffffff
mov dword [edi + 0x18c], 0
mov byte [edi + 0x194], 0
mov word [edi + 0x98], 0
mov byte [edi + 0x9a], 0
mov dword [edi + 0x184], 0
mov dword [edi + 0x188], 0
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x14
ret
Function at 0x670e12a0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x672336c9
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push ebp
push esi
push edi
mov eax, dword [0x67463180]
xor eax, esp
push eax
lea eax, [esp + 0x20]
mov dword fs:[0], eax
mov dword [esp + 0x18], 0
mov ebp, dword [esp + 0x30]
mov dword [ebp], 0
mov eax, dword [esp + 0x34]
mov dword [esp + 0x28], 0
mov dword [esp + 0x18], 1
mov ecx, dword [eax]
mov esi, dword [ecx + 8]
mov edi, dword [ecx + 0xc]
add esi, 4
add edi, 4
lea esi, [ecx + esi*4]
lea edi, [ecx + edi*4]
cmp esi, edi
je 0x670e13f1
mov ecx, 0x3d
nop
push 1
push 1
push ecx
mov eax, esp
mov word [eax], cx
mov ecx, esi
call sym.Qt5Core.dll_public:_int___thiscall_QString::indexOf_class_QChar__int__enum_Qt::CaseSensitivity_const
mov ebx, eax
cmp ebx, 1
jl 0x670e13e1
push 0xffffffffffffffff
lea eax, [ebx + 1]
mov ecx, esi
push eax
lea eax, [esp + 0x1c]
push eax
call sym.Qt5Core.dll_public:_class_QString___thiscall_QString::mid_int__int_
mov eax, dword [esi]
mov dword [esp + 0x34], eax
mov dword [esp + 0x28], 1
mov ecx, dword [eax]
test ecx, ecx
je 0x670e1360
cmp ecx, 0xffffffff
je 0x670e1360
mov ecx, 1
lock xadd dword [eax], ecx
push ebx
lea ecx, [esp + 0x38]
mov byte [esp + 0x2c], 2
call sym.Qt5Core.dll_public:_void___thiscall_QString::truncate_int_
lea eax, [esp + 0x14]
mov ecx, ebp
push eax
lea eax, [esp + 0x38]
push eax
call sym.Qt5Core.dll_public:_void___thiscall_QProcessEnvironment::insert_class_QString_const___class_QString_const__
mov eax, dword [esp + 0x34]
mov ecx, dword [eax]
test ecx, ecx
je 0x670e13a1
cmp ecx, 0xffffffff
je 0x670e13ae
or ecx, 0xffffffff
lock xadd dword [eax], ecx
setne al
test al, al
jne 0x670e13ae
mov eax, dword [esp + 0x34]
push 4
push 2
push eax
call sym.Qt5Core.dll_public:_static_void___cdecl_QArrayData::deallocate_struct_QArrayData___unsigned_int__unsigned_int_
add esp, 0xc
mov eax, dword [esp + 0x14]
mov byte [esp + 0x28], 0
mov ecx, dword [eax]
test ecx, ecx
je 0x670e13d4
cmp ecx, 0xffffffff
je 0x670e13e1
or ecx, 0xffffffff
lock xadd dword [eax], ecx
setne al
test al, al
jne 0x670e13e1
mov eax, dword [esp + 0x14]
push 4
push 2
push eax
call sym.Qt5Core.dll_public:_static_void___cdecl_QArrayData::deallocate_struct_QArrayData___unsigned_int__unsigned_int_
add esp, 0xc
add esi, 4
mov ecx, 0x3d
cmp esi, edi
jne 0x670e1310
mov eax, ebp
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x18
ret
Function at 0x670e1e70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x24
mov edx, dword [esp + 0x30]
push ebx
mov ebx, dword [ecx + 4]
mov ecx, dword [esp + 0x30]
mov eax, ecx
or eax, edx
mov dword [esp + 0x14], ebx
jne 0x670e1e92
xor edx, edx
pop ebx
add esp, 0x24
ret 0xc
cmp dword [ebx + 0x78], 1
push ebp
lea ebp, [ebx + 0x130]
je 0x670e1ea5
lea ebp, [ebx + 0xf0]
cmp ecx, 1
jne 0x670e1ee5
test edx, edx
jne 0x670e1ee5
mov eax, dword [ebp + 0x18]
or eax, dword [ebp + 0x1c]
je 0x670e1ee5
mov ecx, ebp
call fcn.670e1410
mov ecx, eax
cmp ecx, 0xffffffff
jne 0x670e1ed0
pop ebp
or eax, eax
or edx, ecx
pop ebx
add esp, 0x24
ret 0xc
mov eax, dword [esp + 0x30]
xor edx, edx
pop ebp
pop ebx
mov byte [eax], cl
mov eax, 1
add esp, 0x24
ret 0xc
mov eax, dword [ebp + 0x1c]
mov dword [esp + 0x14], eax
push esi
mov esi, dword [ebp + 0x18]
mov dword [esp + 0x14], esi
cmp eax, edx
jg 0x670e1f04
jl 0x670e1efe
cmp esi, ecx
jae 0x670e1f04
lea eax, [esp + 0x14]
jmp 0x670e1f08
lea eax, [esp + 0x38]
push edi
mov edi, dword [eax]
xorps xmm0, xmm0
mov eax, dword [eax + 4]
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], eax
movlpd qword [esp + 0x18], xmm0
test eax, eax
jl 0x670e1fce
jg 0x670e1f31
test edi, edi
je 0x670e1fce
mov esi, dword [esp + 0x1c]
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x3c], esi
lea ecx, [ecx]
mov ecx, ebp
call fcn.6707ae20
mov ecx, ebp
mov dword [esp + 0x18], eax
call fcn.6707a8a0
mov ecx, dword [esp + 0x10]
sub edi, ebx
mov dword [esp + 0x2c], eax
sbb ecx, esi
mov dword [esp + 0x30], edx
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], ecx
cmp ecx, edx
jg 0x670e1f7a
jl 0x670e1f74
cmp edi, eax
jae 0x670e1f7a
lea esi, [esp + 0x24]
jmp 0x670e1f7e
lea esi, [esp + 0x2c]
mov edi, dword [esi]
mov eax, dword [esp + 0x38]
mov esi, dword [esi + 4]
add eax, ebx
push edi
push dword [esp + 0x1c]
push eax
call fcn.67226d54
add esp, 0xc
mov ecx, ebp
add ebx, edi
adc dword [esp + 0x3c], esi
push esi
push edi
call sym.Qt5Core.dll_public:_void___thiscall_QRingBuffer::free_long_long___int64__
mov esi, dword [esp + 0x3c]
mov edi, dword [esp + 0x14]
cmp esi, dword [esp + 0x10]
jl 0x670e1f40
jg 0x670e1fba
cmp ebx, edi
jb 0x670e1f40
mov eax, ebx
or eax, esi
je 0x670e1fd6
pop edi
mov edx, esi
mov eax, ebx
pop esi
pop ebp
pop ebx
add esp, 0x24
ret 0xc
mov esi, dword [esp + 0x1c]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x20]
cmp dword [eax + 0x88], 0
jne 0x670e1fc0
pop edi
pop esi
or eax, 0xffffffff
pop ebp
or edx, eax
pop ebx
add esp, 0x24
ret 0xc
Function at 0x670e4280
Capabilities:
Get disk size

Disassembly:
push esi
mov esi, ecx
mov eax, dword [esi]
test eax, eax
je 0x670e4293
cmp dword [eax], 1
je 0x670e4293
call fcn.670e3ff0
mov ecx, dword [esi]
pop esi
jmp fcn.6712d5a0

Function at 0x670e4890
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x672339f5
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x67463180]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov edi, ecx
mov dword [esp + 0xc], edi
push 0
lea ecx, [edi + 4]
call sym.Qt5Core.dll_public:_void___thiscall_QObject::constructor_class_QObject__
mov dword [edi + 4], vtable.QDeviceClosedNotifier.0
mov dword [edi + 0x18], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x28], 0
mov dword [edi + 0x38], 0
mov dword [esp + 0x18], 0
mov dword [edi + 0x34], 0
mov dword [edi + 0x30], 0
mov dword [edi + 0x2c], 0
mov dword [edi + 0x3c], 0
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], 0
mov dword [edi + 0x54], 0
mov dword [edi + 0x50], 0
mov dword [edi + 0x4c], 0
mov dword [edi + 0x48], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x5c], sym.Qt5Core.dll_struct_QArrayData_const__const_const_QArrayData::shared_null
mov dword [edi + 0x60], sym.Qt5Core.dll_struct_QArrayData_const__const_const_QArrayData::shared_null
xor eax, eax
mov dword [edi + 0x68], 0
mov word [edi + 0x84], ax
mov dword [edi + 0x90], eax
lea eax, [edi + 0x98]
push eax
mov byte [esp + 0x1c], 4
call sym.Qt5Core.dll__c_QLocale__SA_AV1_XZ
add esp, 4
mov eax, dword [esp + 0x20]
mov ecx, edi
mov byte [esp + 0x18], 5
mov dword [edi + 0x9c], eax
call fcn.670e8670
mov eax, edi
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x10
ret 4
Function at 0x670f2ab0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x6722b791
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push esi
push edi
mov eax, dword [0x67463180]
xor eax, esp
push eax
lea eax, [esp + 0x18]
mov dword fs:[0], eax
mov dword [esp + 0x10], 0
lea eax, [esp + 0x2c]
mov dword [esp + 0x20], 1
push eax
lea ecx, [esp + 0x18]
call sym.Qt5Core.dll_public:_void___thiscall_QDebugStateSaver::constructor_class_QDebug__
mov ecx, dword [esp + 0x30]
lea eax, [esp + 0xc]
push 0
push eax
mov byte [esp + 0x28], 2
call sym.Qt5Core.dll_public:_class_QString___thiscall_QUrl::toDisplayString_class_QUrlTwoFlags_enum_QUrl::UrlFormattingOption__enum_QUrl::ComponentFormattingOption__
mov esi, eax
mov ecx, dword [esp + 0x2c]
push str.QUrl_
mov byte [esp + 0x24], 3
mov byte [ecx + 0x14], 0
lea ecx, [esp + 0x30]
call sym.Qt5Core.dll_public:_class_QDebug____thiscall_QDebug::operator___char_const__
mov edx, dword [esi]
mov edi, eax
mov ecx, dword [edx + 0xc]
push dword [edx + 4]
add ecx, edx
push ecx
mov ecx, edi
call sym.Qt5Core.dll_private:_void___thiscall_QDebug::putString_class_QChar_const___unsigned_int_
mov ecx, dword [edi]
cmp byte [ecx + 0x14], 0
je 0x670f2b48
push 0x20
call sym.Qt5Core.dll_public:_class_QTextStream____thiscall_QTextStream::operator___char_
mov ecx, dword [edi]
push 0x29
call sym.Qt5Core.dll_public:_class_QTextStream____thiscall_QTextStream::operator___char_
mov ecx, dword [edi]
cmp byte [ecx + 0x14], 0
je 0x670f2b60
push 0x20
call sym.Qt5Core.dll_public:_class_QTextStream____thiscall_QTextStream::operator___char_
mov eax, dword [esp + 0xc]
mov ecx, dword [eax]
test ecx, ecx
je 0x670f2b81
cmp ecx, 0xffffffff
je 0x670f2b8e
or ecx, 0xffffffff
lock xadd dword [eax], ecx
setne al
test al, al
jne 0x670f2b8e
mov eax, dword [esp + 0xc]
push 4
push 2
push eax
call sym.Qt5Core.dll_public:_static_void___cdecl_QArrayData::deallocate_struct_QArrayData___unsigned_int__unsigned_int_
add esp, 0xc
mov ecx, dword [esp + 0x2c]
mov esi, dword [esp + 0x28]
mov dword [esi], ecx
inc dword [ecx + 0xc]
lea ecx, [esp + 0x14]
mov dword [esp + 0x10], 1
mov byte [esp + 0x20], 1
call sym.Qt5Core.dll_public:_void___thiscall_QDebugStateSaver::destructor_void_
lea ecx, [esp + 0x2c]
mov byte [esp + 0x20], 0
call sym.Qt5Core.dll_public:_void___thiscall_QDebug::destructor_void_
mov eax, esi
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x18
ret
Function at 0x670f5330
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x67234f39
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push ebx
push ebp
push esi
push edi
mov eax, dword [0x67463180]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
mov dword [esp + 0x14], 0
mov edi, dword [esp + 0x38]
mov dword [edi], sym.Qt5Core.dll_struct_QListData::Data_const_QListData::shared_null
mov esi, dword [esp + 0x3c]
mov dword [esp + 0x30], 0
mov dword [esp + 0x14], 1
mov eax, dword [esi]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 8]
cmp dword [0x6724d0f8], ecx
jge 0x670f53ad
mov eax, dword [sym.Qt5Core.dll_struct_QListData::Data_const_QListData::shared_null]
cmp eax, 1
je 0x670f53a5
test eax, eax
je 0x670f53a5
push ecx
mov ecx, edi
call fcn.670f4220
jmp 0x670f53ad
push ecx
mov ecx, edi
call sym.Qt5Core.dll_public:_void___thiscall_QListData::realloc_int_
push esi
lea ecx, [esp + 0x1c]
call fcn.67033a10
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx + 8]
add eax, 4
lea edx, [ecx + eax*4]
mov dword [esp + 0x1c], edx
mov eax, dword [ecx + 0xc]
lea ecx, [ecx + eax*4]
mov eax, 1
add ecx, 0x10
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], ecx
mov ebp, dword [esp + 0x40]
or ebx, 0xffffffff
mov dword [esp + 0x30], eax
lea esp, [esp]
cmp edx, ecx
je 0x670f545b
test eax, eax
je 0x670f544b
push ebp
push edx
lea ecx, [esp + 0x44]
mov dword [esp + 0x44], 0
call sym.Qt5Core.dll_public:_void___thiscall_QUrl::setUrl_class_QString_const___enum_QUrl::ParsingMode_
lea eax, [esp + 0x3c]
mov byte [esp + 0x30], 2
push eax
mov ecx, edi
call fcn.670f3890
mov esi, dword [esp + 0x3c]
mov byte [esp + 0x30], 1
test esi, esi
je 0x670f5441
mov eax, ebx
lock xadd dword [esi], eax
jne 0x670f5441
mov ecx, esi
call fcn.670f26f0
push esi
call fcn.67226c38
add esp, 4
mov ecx, dword [esp + 0x20]
xor eax, eax
mov edx, dword [esp + 0x1c]
add edx, 4
xor eax, 1
mov dword [esp + 0x1c], edx
mov dword [esp + 0x24], eax
jne 0x670f53f0
mov esi, dword [esp + 0x18]
mov byte [esp + 0x30], 0
mov eax, dword [esi]
test eax, eax
je 0x670f547f
cmp eax, 0xffffffff
je 0x670f54a5
lock xadd dword [esi], ebx
dec ebx
setne al
test al, al
jne 0x670f54a5
mov esi, dword [esp + 0x18]
mov eax, dword [esi + 0xc]
lea ecx, [esp + 0x18]
add eax, 4
lea eax, [esi + eax*4]
push eax
mov eax, dword [esi + 8]
add eax, 4
lea eax, [esi + eax*4]
push eax
call fcn.6701cb20
push esi
call sym.Qt5Core.dll_public:_static_void___cdecl_QListData::dispose_struct_QListData::Data__
add esp, 4
mov eax, edi
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x20
ret