joyce8/EMBER2024-capa huggingface dataset:
Function at 0x671277b0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6715eadc
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
push edi
mov eax, dword [0x67258980]
xor eax, esp
push eax
lea eax, [esp + 0x14]
mov dword fs:[0], eax
mov edi, ecx
mov ecx, dword [edi]
push 8
call sym.QtCore_Ad_4.dll_public:_void____thiscall_QHashData::allocateNode_int_
mov esi, eax
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], esi
xor eax, eax
mov dword [esp + 0x1c], eax
cmp esi, eax
je 0x67127820
mov eax, dword [esp + 0x28]
mov ecx, dword [eax]
mov dword [esi + 8], ecx
mov eax, dword [eax + 4]
mov dword [esi + 0xc], eax
mov edx, 1
lock xadd dword [eax], edx
mov eax, dword [esp + 0x2c]
push eax
lea ecx, [esi + 0x10]
mov byte [esp + 0x20], 1
call sym.QtCore_Ad_4.dll_public:_void___thiscall_QVariant::constructor_class_QVariant_const__
mov eax, esi
mov ecx, dword [esp + 0x24]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x30]
mov edx, dword [ecx]
mov dword [eax], edx
mov dword [ecx], eax
mov ecx, dword [edi]
inc dword [ecx + 0xc]
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x14
ret 0x10

Function at 0x67129470
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x67152899
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x67258980]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
xor eax, eax
mov dword [esp + 0xc], eax
mov esi, dword [esp + 0x20]
mov dword [esi], sym.QtCore_Ad_4.dll_struct_QListData::Data_QListData::shared_null
mov edx, sym.QtCore_Ad_4.dll_struct_QListData::Data_QListData::shared_null
mov edi, 1
lock xadd dword [edx], edi
push esi
push sym.QtCore_Ad_4.dll_struct_QMetaObject_const_QVariantAnimation::staticMetaObject
push eax
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x30]
push eax
push ecx
mov dword [esp + 0x20], 1
call sym.QtCore_Ad_4.dll_void___cdecl_qt_qFindChildren_helper_class_QObject_const___class_QString_const___class_QRegExp_const___struct_QMetaObject_const___class_QList_void____
add esp, 0x14
mov eax, esi
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x10
ret 8
Function at 0x671294f0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x67152899
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x67258980]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
xor eax, eax
mov dword [esp + 0xc], eax
mov esi, dword [esp + 0x20]
mov dword [esi], sym.QtCore_Ad_4.dll_struct_QListData::Data_QListData::shared_null
mov edx, sym.QtCore_Ad_4.dll_struct_QListData::Data_QListData::shared_null
mov edi, 1
lock xadd dword [edx], edi
push esi
push sym.QtCore_Ad_4.dll_struct_QMetaObject_const_QHistoryState::staticMetaObject
push eax
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x30]
push eax
push ecx
mov dword [esp + 0x20], 1
call sym.QtCore_Ad_4.dll_void___cdecl_qt_qFindChildren_helper_class_QObject_const___class_QString_const___class_QRegExp_const___struct_QMetaObject_const___class_QList_void____
add esp, 0x14
mov eax, esi
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x10
ret 8

Function at 0x67129570
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x67152899
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x67258980]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
xor eax, eax
mov dword [esp + 0xc], eax
mov esi, dword [esp + 0x20]
mov dword [esi], sym.QtCore_Ad_4.dll_struct_QListData::Data_QListData::shared_null
mov edx, sym.QtCore_Ad_4.dll_struct_QListData::Data_QListData::shared_null
mov edi, 1
lock xadd dword [edx], edi
push esi
push sym.QtCore_Ad_4.dll_struct_QMetaObject_const_QSignalTransition::staticMetaObject
push eax
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x30]
push eax
push ecx
mov dword [esp + 0x20], 1
call sym.QtCore_Ad_4.dll_void___cdecl_qt_qFindChildren_helper_class_QObject_const___class_QString_const___class_QRegExp_const___struct_QMetaObject_const___class_QList_void____
add esp, 0x14
mov eax, esi
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x10
ret 8

Function at 0x671295f0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x67152899
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x67258980]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
xor eax, eax
mov dword [esp + 0xc], eax
mov esi, dword [esp + 0x20]
mov dword [esi], sym.QtCore_Ad_4.dll_struct_QListData::Data_QListData::shared_null
mov edx, sym.QtCore_Ad_4.dll_struct_QListData::Data_QListData::shared_null
mov edi, 1
lock xadd dword [edx], edi
push esi
push sym.QtCore_Ad_4.dll_struct_QMetaObject_const_QEventTransition::staticMetaObject
push eax
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x30]
push eax
push ecx
mov dword [esp + 0x20], 1
call sym.QtCore_Ad_4.dll_void___cdecl_qt_qFindChildren_helper_class_QObject_const___class_QString_const___class_QRegExp_const___struct_QMetaObject_const___class_QList_void____
add esp, 0x14
mov eax, esi
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x10
ret 8
Function at 0x6712a820
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6715ef21
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
push edi
mov eax, dword [0x67258980]
xor eax, esp
push eax
lea eax, [esp + 0x14]
mov dword fs:[0], eax
mov edi, ecx
mov ecx, dword [edi]
push 4
call sym.QtCore_Ad_4.dll_public:_void____thiscall_QHashData::allocateNode_int_
mov esi, eax
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], esi
xor eax, eax
mov dword [esp + 0x1c], eax
cmp esi, eax
je 0x6712a894
mov eax, dword [esp + 0x28]
mov ecx, dword [eax]
mov edx, dword [esp + 0x2c]
mov dword [esi + 8], ecx
mov eax, dword [edx]
lea ecx, [esi + 0xc]
mov dword [ecx], eax
mov edx, 1
lock xadd dword [eax], edx
mov eax, dword [ecx]
test byte [eax + 0x10], 1
jne 0x6712a892
mov eax, dword [eax + 4]
push eax
call fcn.6700f7f0
mov eax, esi
mov ecx, dword [esp + 0x24]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x30]
mov edx, dword [ecx]
mov dword [eax], edx
mov dword [ecx], eax
mov ecx, dword [edi]
inc dword [ecx + 0xc]
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x14
ret 0x10

Function at 0x6712a8c0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6715ef21
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
push edi
mov eax, dword [0x67258980]
xor eax, esp
push eax
lea eax, [esp + 0x14]
mov dword fs:[0], eax
mov edi, ecx
mov ecx, dword [edi]
push 4
call sym.QtCore_Ad_4.dll_public:_void____thiscall_QHashData::allocateNode_int_
mov esi, eax
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], esi
xor eax, eax
mov dword [esp + 0x1c], eax
cmp esi, eax
je 0x6712a938
mov eax, dword [esp + 0x28]
mov ecx, dword [eax]
mov edx, dword [esp + 0x2c]
mov dword [esi + 8], ecx
mov eax, dword [edx]
lea ecx, [esi + 0xc]
mov dword [ecx], eax
mov edx, 1
lock xadd dword [eax], edx
mov eax, dword [ecx]
test byte [eax + 0xc], 1
jne 0x6712a936
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
push edx
push eax
call fcn.67105eb0
mov eax, esi
mov ecx, dword [esp + 0x24]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x30]
mov edx, dword [ecx]
mov dword [eax], edx
mov dword [ecx], eax
mov ecx, dword [edi]
inc dword [ecx + 0xc]
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x14
ret 0x10
Function at 0x6712a970
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6715ef21
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
push edi
mov eax, dword [0x67258980]
xor eax, esp
push eax
lea eax, [esp + 0x14]
mov dword fs:[0], eax
mov edi, ecx
mov ecx, dword [edi]
push 4
call sym.QtCore_Ad_4.dll_public:_void____thiscall_QHashData::allocateNode_int_
mov esi, eax
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], esi
xor eax, eax
mov dword [esp + 0x1c], eax
cmp esi, eax
je 0x6712a9e4
mov eax, dword [esp + 0x28]
mov ecx, dword [eax]
mov edx, dword [esp + 0x2c]
mov dword [esi + 8], ecx
mov eax, dword [edx]
lea ecx, [esi + 0xc]
mov dword [ecx], eax
mov edx, 1
lock xadd dword [eax], edx
mov eax, dword [ecx]
test byte [eax + 0x10], 1
jne 0x6712a9e2
mov eax, dword [eax + 4]
push eax
call fcn.671276e0
mov eax, esi
mov ecx, dword [esp + 0x24]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x30]
mov edx, dword [ecx]
mov dword [eax], edx
mov dword [ecx], eax
mov ecx, dword [edi]
inc dword [ecx + 0xc]
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x14
ret 0x10
Function at 0x67131240
Capabilities:
Resolve function by parsing pe exports

Disassembly:
cmp dword [esp + 8], 0
jne case.default.0x67131250
mov eax, dword [esp + 0xc]
cmp eax, 6
ja case.default.0x67131250
jmp dword [eax*4 + 0x671312a0]
mov ecx, dword [esp + 4]
jmp sym.QtCore_Ad_4.dll_protected:_void___thiscall_QStateMachine::started_void_
mov ecx, dword [esp + 4]
jmp sym.QtCore_Ad_4.dll_protected:_void___thiscall_QStateMachine::stopped_void_
mov ecx, dword [esp + 4]
jmp sym.QtCore_Ad_4.dll_public:_void___thiscall_QStateMachine::start_void_
mov ecx, dword [esp + 4]
jmp sym.QtCore_Ad_4.dll_public:_void___thiscall_QStateMachine::stop_void_
mov eax, dword [esp + 4]
mov ecx, dword [eax + 4]
jmp sym.QtCore_Ad_4.dll_public:_void___thiscall_QStateMachinePrivate::_q_start_void_
mov ecx, dword [esp + 4]
mov ecx, dword [ecx + 4]
jmp sym.QtCore_Ad_4.dll_public:_void___thiscall_QStateMachinePrivate::_q_process_void_
mov edx, dword [esp + 4]
mov ecx, dword [edx + 4]
jmp sym.QtCore_Ad_4.dll_public:_void___thiscall_QStateMachinePrivate::_q_animationFinished_void_
ret
Function at 0x67134990
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6715fd73
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebp
push esi
push edi
mov eax, dword [0x67258980]
xor eax, esp
push eax
lea eax, [esp + 0x20]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x10], esi
mov dword [esi], sym.QtCore_Ad_4.dll_struct_QString::Data_QString::shared_null
mov eax, sym.QtCore_Ad_4.dll_struct_QString::Data_QString::shared_null
mov ecx, 1
lock xadd dword [eax], ecx
xor ebp, ebp
mov dword [esi + 4], ebp
mov dword [esi + 8], ebp
mov dword [esi + 0xc], eax
mov edx, eax
mov dword [esp + 0x28], ebp
mov eax, 1
lock xadd dword [edx], eax
mov dword [esi + 0x10], ebp
mov dword [esi + 0x14], ebp
mov eax, dword [esp + 0x30]
mov ecx, dword [eax]
mov dword [esp + 0x14], ecx
mov edx, 1
lock xadd dword [ecx], edx
mov eax, dword [eax]
mov dword [esp + 0x18], ebp
mov ecx, dword [eax + 8]
mov dword [esp + 0x1c], ecx
lea edx, [esp + 0x14]
push edx
mov ecx, esi
mov byte [esp + 0x2c], 2
call fcn.6705d580
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
mov dword [esi + 4], eax
mov dword [esi + 8], ecx
mov byte [esp + 0x28], 1
or eax, 0xffffffff
lock xadd dword [edx], eax
jne 0x67134a4e
mov ecx, dword [esp + 0x14]
push ecx
call sym.QtCore_Ad_4.dll_private:_static_void___cdecl_QString::free_struct_QString::Data__
add esp, 4
mov eax, dword [esp + 0x34]
mov ecx, dword [eax]
mov dword [esp + 0x14], ecx
mov edx, 1
lock xadd dword [ecx], edx
mov eax, dword [eax]
mov dword [esp + 0x18], ebp
mov ecx, dword [eax + 8]
mov dword [esp + 0x1c], ecx
lea edx, [esp + 0x14]
push edx
lea ecx, [esi + 0xc]
mov byte [esp + 0x2c], 3
call fcn.6705d580
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], ecx
mov byte [esp + 0x28], 1
or eax, 0xffffffff
lock xadd dword [edx], eax
jne 0x67134aad
mov ecx, dword [esp + 0x14]
push ecx
call sym.QtCore_Ad_4.dll_private:_static_void___cdecl_QString::free_struct_QString::Data__
add esp, 4
mov eax, esi
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
add esp, 0x1c
ret 8
Function at 0x67134c80
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6715fdf4
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x67258980]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0xc], esi
mov ecx, sym.QtCore_Ad_4.dll_struct_QString::Data_QString::shared_null
mov dword [esi], ecx
mov eax, ecx
mov edx, 1
lock xadd dword [eax], edx
xor eax, eax
mov dword [esi + 4], eax
mov dword [esi + 8], eax
mov dword [esp + 0x18], eax
mov dword [esi + 0xc], ecx
mov edx, ecx
mov edi, 1
lock xadd dword [edx], edi
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], eax
mov dword [esi + 0x18], ecx
mov edi, 1
lock xadd dword [edx], edi
mov dword [esi + 0x1c], eax
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], ecx
mov edi, 1
lock xadd dword [edx], edi
mov dword [esi + 0x28], eax
mov dword [esi + 0x2c], eax
mov dword [esi + 0x30], ecx
mov edx, 1
lock xadd dword [ecx], edx
mov dword [esi + 0x34], eax
mov dword [esi + 0x38], eax
mov eax, dword [esp + 0x20]
push eax
mov ecx, esi
mov byte [esp + 0x1c], 4
call sym.QtCore_Ad_4.dll_public:_class_QXmlStreamEntityDeclaration____thiscall_QXmlStreamEntityDeclaration::operator_class_QXmlStreamEntityDeclaration_const__
mov eax, esi
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x10
ret 4

Function at 0x67134d40
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6715fe39
mov eax, dword fs:[0]
push eax
push ecx
push esi
mov eax, dword [0x67258980]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 8], esi
mov eax, dword [esi + 0x30]
mov dword [esp + 0x14], 3
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x67134d88
mov edx, dword [esi + 0x30]
push edx
call sym.QtCore_Ad_4.dll_private:_static_void___cdecl_QString::free_struct_QString::Data__
add esp, 4
mov eax, dword [esi + 0x24]
mov byte [esp + 0x14], 2
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x67134da5
mov edx, dword [esi + 0x24]
push edx
call sym.QtCore_Ad_4.dll_private:_static_void___cdecl_QString::free_struct_QString::Data__
add esp, 4
mov eax, dword [esi + 0x18]
mov byte [esp + 0x14], 1
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x67134dc2
mov edx, dword [esi + 0x18]
push edx
call sym.QtCore_Ad_4.dll_private:_static_void___cdecl_QString::free_struct_QString::Data__
add esp, 4
mov eax, dword [esi + 0xc]
mov byte [esp + 0x14], 0
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x67134ddf
mov edx, dword [esi + 0xc]
push edx
call sym.QtCore_Ad_4.dll_private:_static_void___cdecl_QString::free_struct_QString::Data__
add esp, 4
mov eax, dword [esi]
mov dword [esp + 0x14], 0xffffffff
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x67134dfd
mov edx, dword [esi]
push edx
call sym.QtCore_Ad_4.dll_private:_static_void___cdecl_QString::free_struct_QString::Data__
add esp, 4
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x10
ret
Function at 0x671360c0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6715fee6
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x67258980]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0xc], esi
mov eax, 1
mov dword [esp + 0x18], eax
test byte [esi + 0x30], al
je 0x67136106
mov ecx, dword [esi + 0x28]
test ecx, ecx
je 0x67136106
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0xc]
call eax
mov edi, dword [esi + 0x58]
test edi, edi
je 0x6713611d
mov ecx, edi
call sym.QtCore_Ad_4.dll_public:_void___thiscall_QTextDecoder::destructor_void_
push edi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
add esp, 4
mov ecx, dword [esi + 0x34]
mov byte [esp + 0x18], 0
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x6713613a
mov eax, dword [esi + 0x34]
push eax
call sym.QtCore_Ad_4.dll_void___cdecl_qFree_void__
add esp, 4
mov eax, dword [esi + 0x18]
mov dword [esp + 0x18], 3
test eax, eax
je 0x67136152
push eax
call sym.QtCore_Ad_4.dll_void___cdecl_qFree_void__
add esp, 4
mov ecx, dword [esi + 0xc]
mov byte [esp + 0x18], 2
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x6713616f
mov eax, dword [esi + 0xc]
push eax
call sym.QtCore_Ad_4.dll_private:_static_void___cdecl_QString::free_struct_QString::Data__
add esp, 4
mov esi, dword [esi]
mov dword [esp + 0x18], 0xffffffff
test esi, esi
je 0x67136186
push esi
call sym.QtCore_Ad_4.dll_void___cdecl_qFree_void__
add esp, 4
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x10
ret

Function at 0x671379b0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x67160073
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x67258980]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0xc], esi
call fcn.67137690
push 0x20
xor edi, edi
push 4
lea ecx, [esi + 0x34]
mov dword [esp + 0x20], edi
call sym.QtCore_Ad_4.dll_public:_void___thiscall_QByteArray::constructor_int__char_
mov eax, dword [esp + 0x20]
mov dword [esi + 0x38], edi
mov dword [esi + 0x3c], edi
mov dword [esi + 0x40], edi
mov dword [esi + 0x44], edi
mov dword [esi + 0x48], edi
mov dword [esi + 0x4c], edi
and dword [esi + 0x30], 0xfffffffe
push 0x6a
mov byte [esp + 0x1c], 1
mov dword [esi + 0x24], eax
mov dword [esi + 0x28], edi
mov dword [esi + 0x2c], edi
call sym.QtCore_Ad_4.dll_public:_static_class_QTextCodec____cdecl_QTextCodec::codecForMib_int_
mov dword [esi + 0x54], eax
mov eax, esp
mov dword [eax], 1
mov ecx, dword [esi + 0x54]
mov dword [esp + 0x24], esp
call sym.QtCore_Ad_4.dll_public:_class_QTextDecoder____thiscall_QTextCodec::makeDecoder_class_QFlags_enum_QTextCodec::ConversionFlag__const
and dword [esi + 0x30], 0xffffff81
mov dword [esi + 0x58], eax
mov dword [esi + 0x50], 1
mov dword [esi + 0x5c], edi
mov eax, esi
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x10
ret 4
Function at 0x67138c70
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x67153428
mov eax, dword fs:[0]
push eax
push ecx
push esi
mov eax, dword [0x67258980]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
mov esi, dword [ecx]
mov dword [esp + 8], sym.QtCore_Ad_4.dll_struct_QString::Data_QString::shared_null
mov eax, sym.QtCore_Ad_4.dll_struct_QString::Data_QString::shared_null
mov ecx, 1
lock xadd dword [eax], ecx
mov edx, dword [esp + 0x1c]
push edx
lea eax, [esp + 0xc]
push eax
mov ecx, esi
mov dword [esp + 0x1c], 0
call fcn.67138330
mov ecx, dword [esp + 8]
mov dword [esp + 0x14], 0xffffffff
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x67138ce5
mov eax, dword [esp + 8]
push eax
call sym.QtCore_Ad_4.dll_private:_static_void___cdecl_QString::free_struct_QString::Data__
add esp, 4
or dword [esi + 0x30], 4
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x10
ret 4
Function at 0x67142380
Capabilities:
Terminate thread

Disassembly:
cmp dword [esp + 8], 0
jne case.default.0x67142390
mov eax, dword [esp + 0xc]
cmp eax, 6
ja case.default.0x67142390
jmp dword [eax*4 + 0x671423e4]
mov ecx, dword [esp + 4]
jmp sym.QtCore_Ad_4.dll_protected:_void___thiscall_QThread::started_void_
mov ecx, dword [esp + 4]
jmp sym.QtCore_Ad_4.dll_protected:_void___thiscall_QThread::finished_void_
mov ecx, dword [esp + 4]
jmp sym.QtCore_Ad_4.dll_protected:_void___thiscall_QThread::terminated_void_
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov edx, dword [ecx]
mov ecx, dword [esp + 4]
push edx
call sym.QtCore_Ad_4.dll_public:_void___thiscall_QThread::start_enum_QThread::Priority_
ret
mov ecx, dword [esp + 4]
push 7
call sym.QtCore_Ad_4.dll_public:_void___thiscall_QThread::start_enum_QThread::Priority_
ret
mov ecx, dword [esp + 4]
jmp sym.QtCore_Ad_4.dll_public:_void___thiscall_QThread::terminate_void_
mov ecx, dword [esp + 4]
jmp sym.QtCore_Ad_4.dll_public:_void___thiscall_QThread::quit_void_

Function at 0x67149782
Capabilities:
Terminate process

Disassembly:
cmp ecx, dword [0x67258980]
jne 0x6714978c
repz ret
jmp fcn.67149ff9

Function at 0x43b65e
Capabilities:
Encode data using xor

Disassembly:
push 0x43b3c1
pop ebx
mov ecx, 0x3acd0274
and ecx, ecx
or edx, edx
call fcn.0043b693
add edx, ecx
xor dword [eax], ebx
inc edx
or edx, ecx
inc eax
push edx
pop ecx
add edx, ecx
dec edx
cmp eax, esi
jne fcn.0043b65e
add ecx, 0xc0e0c221
or ecx, edx
add edx, 0x4874d0b7
ret
Function at 0x401180
Capabilities:
Encode data using xor
Encrypt data using blowfish

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
movups xmm0, xmmword [0x404130]
push ebx
push esi
mov esi, ecx
push edi
push 0x1000
push 0x404178
movups xmmword [esi], xmm0
lea eax, [esi + 0x48]
mov dword [ebp - 0x10], esi
movups xmm0, xmmword [0x404140]
push eax
movups xmmword [esi + 0x10], xmm0
movups xmm0, xmmword [0x404150]
movups xmmword [esi + 0x20], xmm0
movups xmm0, xmmword [0x404160]
movups xmmword [esi + 0x30], xmm0
movq xmm0, qword [0x404170]
movq qword [esi + 0x40], xmm0
call sub.ucrtbase.dll_memcpy
mov edi, dword [ebp + 0xc]
add esp, 0xc
mov ecx, edi
mov ebx, 4
and ecx, 0x80000003
jns 0x4011f5
dec ecx
or ecx, 0xfffffffc
add ecx, 1
je 0x401204
mov eax, ebx
mov ebx, ecx
cdq
idiv ecx
mov ecx, edx
test ecx, ecx
jne 0x4011f7
mov eax, edi
mov ecx, 4
cdq
idiv ebx
mov dword [ebp - 0xc], eax
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
push eax
call fcn.00402d4e
mov ebx, eax
add esp, 4
mov eax, dword [ebp - 0xc]
mov dword [ebp - 8], ebx
test eax, eax
jle 0x401289
mov ebx, dword [ebp + 8]
mov ecx, 2
mov esi, dword [ebp - 8]
mov dword [ebp - 4], eax
nop
lea eax, [ecx - 2]
cdq
idiv edi
movzx eax, byte [edx + ebx]
mov byte [ebp + 0xf], al
lea eax, [ecx - 1]
cdq
idiv edi
movzx eax, byte [edx + ebx]
mov byte [ebp + 0xe], al
mov eax, ecx
cdq
idiv edi
movzx eax, byte [edx + ebx]
mov byte [ebp + 0xd], al
lea eax, [ecx + 1]
cdq
idiv edi
movzx eax, byte [edx + ebx]
mov byte [ebp + 0xc], al
mov eax, dword [ebp + 0xc]
mov dword [ecx + esi - 2], eax
add ecx, 4
sub dword [ebp - 4], 1
jne 0x401240
mov esi, dword [ebp - 0x10]
mov ebx, dword [ebp - 8]
mov edi, dword [ebp - 0xc]
lea ecx, [esi + 8]
mov esi, 2
lea eax, [esi - 2]
cdq
lea ecx, [ecx + 0x18]
idiv edi
mov eax, dword [ebx + edx*4]
xor dword [ecx - 0x20], eax
lea eax, [esi - 1]
cdq
idiv edi
mov eax, dword [ebx + edx*4]
xor dword [ecx - 0x1c], eax
mov eax, esi
cdq
idiv edi
mov eax, dword [ebx + edx*4]
xor dword [ecx - 0x18], eax
lea eax, [esi + 1]
cdq
idiv edi
mov eax, dword [ebx + edx*4]
xor dword [ecx - 0x14], eax
lea eax, [esi + 2]
cdq
idiv edi
mov eax, dword [ebx + edx*4]
xor dword [ecx - 0x10], eax
lea eax, [esi + 3]
cdq
add esi, 6
idiv edi
mov eax, dword [ebx + edx*4]
xor dword [ecx - 0xc], eax
lea eax, [esi - 2]
cmp eax, 0x12
jl 0x401294
push ebx
call fcn.00402d57
mov esi, dword [ebp - 0x10]
add esp, 4
mov dword [ebp + 0xc], 0
xor edi, edi
mov dword [ebp + 8], 0
lea eax, [ebp + 8]
mov ecx, esi
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.00401100
mov eax, dword [ebp + 0xc]
mov dword [esi + edi*8], eax
mov eax, dword [ebp + 8]
mov dword [esi + edi*8 + 4], eax
inc edi
cmp edi, 9
jl 0x401305
lea edi, [esi + 0x4c]
mov ebx, 0x200
nop
lea eax, [ebp + 8]
mov ecx, esi
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.00401100
mov eax, dword [ebp + 0xc]
lea edi, [edi + 8]
mov dword [edi - 0xc], eax
mov eax, dword [ebp + 8]
mov dword [edi - 8], eax
sub ebx, 1
jne 0x401330
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8