joyce8/EMBER2024-capa huggingface dataset:
Function at 0x558330
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6469ec
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
push ebp
push esi
push edi
mov esi, ecx
xor edi, edi
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], edi
cmp dword [esp + 0x30], edi
mov dword [esp + 0x1c], edi
je 0x55837c
lea ecx, [esi + 4]
mov dword [esi], 0x6580c8
call fcn.0040b080
mov byte [esp + 0x1c], 1
mov dword [esp + 0xc], 1
push edi
mov edi, dword [esp + 0x28]
sub esp, 0xc
mov ecx, esp
mov dword [ecx], 0x6580c8
mov eax, dword [edi + 4]
lea edx, [esp + eax + 0x34]
mov dword [esp + 0x40], esp
push edx
call fcn.00420750
mov ecx, esi
call fcn.004237c0
mov eax, dword [esi]
mov ecx, dword [eax + 4]
sub esp, 0x18
mov dword [esp + 0x48], esp
mov ebp, esp
sub esp, 0x18
mov dword [esi + ecx], vtable.PlaySampleDefinition.0
mov ecx, esp
mov dword [esp + 0x60], esp
lea edx, [esp + 0x60]
push edx
push 0x65623c
call fcn.00403db0
mov ecx, dword [edi + 4]
push ebp
lea ecx, [esp + ecx + 0x58]
mov dword [esp + 0x50], 1
call fcn.004304e0
mov ecx, eax
call fcn.0042b430
mov ecx, 0x16c7860
call fcn.0046b7c0
lea ecx, [esp + 0x24]
mov dword [esp + 0x1c], 0xffffffff
call fcn.0042ce80
mov ecx, dword [esp + 0x14]
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
pop ebp
add esp, 0x14
ret 0x10

Function at 0x5589f0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x646b74
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
push esi
mov esi, ecx
mov dword [esp + 8], esi
mov dword [esp + 4], 0
mov eax, dword [esp + 0x38]
test eax, eax
mov dword [esp + 0x14], 1
je 0x558a43
lea ecx, [esi + 0x34]
mov dword [esi + 4], 0x6546f0
call fcn.0040b080
mov byte [esp + 0x14], 2
mov dword [esp + 4], 1
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x28]
push 0
push eax
sub esp, 0xc
mov ecx, esp
mov dword [ecx], 0x6580c8
mov eax, dword [edx + 4]
lea edx, [esp + eax + 0x3c]
mov dword [esp + 0x4c], esp
push edx
call fcn.0054dea0
mov eax, dword [esp + 0x30]
sub esp, 0xc
mov ecx, esp
mov dword [ecx], 0x6580c8
mov edx, dword [eax + 4]
lea eax, [esp + edx + 0x3c]
mov dword [esp + 0x54], esp
push eax
mov dword [esp + 0x38], 3
call fcn.00420750
mov ecx, esi
mov byte [esp + 0x34], 2
call fcn.00558730
mov ecx, dword [esi + 4]
mov dword [esi], vtable.NativeTextureReverseMemoryStorage.1.0
mov edx, dword [ecx + 4]
lea ecx, [esp + 0x1c]
mov dword [edx + esi + 4], vtable.NativeTextureReverseMemoryStorage.0
mov dword [esp + 0x14], 0
call fcn.0042ce80
lea ecx, [esp + 0x28]
mov dword [esp + 0x14], 0xffffffff
call fcn.0054dc10
mov ecx, dword [esp + 0xc]
mov eax, esi
mov dword fs:[0], ecx
pop esi
add esp, 0x14
ret 0x20
Function at 0x55ab10
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6470ab
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push ebx
push esi
mov esi, ecx
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0
mov eax, dword [esp + 0x30]
test eax, eax
mov dword [esp + 0x1c], 0
mov ebx, 1
je 0x55ab64
lea ecx, [esi + 0x44]
mov dword [esi + 4], 0x655c58
call fcn.0040b080
mov byte [esp + 0x1c], bl
mov dword [esp + 8], ebx
push 0x28
call fcn.004063f0
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
mov dword [esp + 0x1c], 2
je 0x55ab8d
push ebx
push 0x6c3cb4
mov ecx, eax
call fcn.0054f5c0
jmp 0x55ab8f
xor eax, eax
push 0
sub esp, 0xc
mov ecx, esp
mov dword [esp + 0x40], esp
push ebx
push eax
mov byte [esp + 0x34], bl
call fcn.0054d5f0
mov eax, dword [esp + 0x34]
sub esp, 0xc
mov ecx, esp
mov dword [ecx], 0x6580c8
mov edx, dword [eax + 4]
lea eax, [esp + edx + 0x40]
mov dword [esp + 0x2c], esp
push eax
mov dword [esp + 0x3c], 3
call fcn.00420750
mov ecx, esi
mov byte [esp + 0x38], bl
call fcn.00559f20
mov ecx, dword [esi + 4]
mov dword [esi], vtable.AsIsNativeTexture.0
mov edx, dword [ecx + 4]
lea ecx, [esp + 0x24]
mov dword [edx + esi + 4], vtable.AsIsNativeTexture.1.0
mov dword [esp + 0x1c], 0xffffffff
call fcn.0042ce80
mov ecx, dword [esp + 0x14]
mov eax, esi
pop esi
mov dword fs:[0], ecx
pop ebx
add esp, 0x18
ret 0x10

Function at 0x55ac20
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6470fb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push ebx
push esi
mov esi, ecx
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0
mov eax, dword [esp + 0x30]
test eax, eax
mov dword [esp + 0x1c], 0
mov ebx, 1
je 0x55ac74
lea ecx, [esi + 0x44]
mov dword [esi + 4], 0x655c58
call fcn.0040b080
mov byte [esp + 0x1c], bl
mov dword [esp + 8], ebx
push 0x30
call fcn.004063f0
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
mov dword [esp + 0x1c], 2
je 0x55ac9d
push ebx
push 0x6c3cb4
mov ecx, eax
call fcn.0054f900
jmp 0x55ac9f
xor eax, eax
push 0
sub esp, 0xc
mov ecx, esp
mov dword [esp + 0x40], esp
push ebx
push eax
mov byte [esp + 0x34], bl
call fcn.0054d5f0
mov eax, dword [esp + 0x34]
sub esp, 0xc
mov ecx, esp
mov dword [ecx], 0x6580c8
mov edx, dword [eax + 4]
lea eax, [esp + edx + 0x40]
mov dword [esp + 0x2c], esp
push eax
mov dword [esp + 0x3c], 3
call fcn.00420750
mov ecx, esi
mov byte [esp + 0x38], bl
call fcn.00559f20
mov ecx, dword [esi + 4]
mov dword [esi], vtable.Pow2NativeTexture.0
mov edx, dword [ecx + 4]
lea ecx, [esp + 0x24]
mov dword [edx + esi + 4], vtable.Pow2NativeTexture.1.0
mov dword [esp + 0x1c], 0xffffffff
call fcn.0042ce80
mov ecx, dword [esp + 0x14]
mov eax, esi
pop esi
mov dword fs:[0], ecx
pop ebx
add esp, 0x18
ret 0x10
Function at 0x568168
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x648788
push eax
mov dword fs:[0], esp
sub esp, 0x24
push esi
mov esi, ecx
mov eax, dword [esi + 0x50]
mov ecx, dword [esi + 0x40]
cmp eax, ecx
push edi
lea edi, [esi + 0x40]
jne 0x5681cb
push 0xa2
push str.c:work_fishdom_aqua_gameMouseMoveEvent.h
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x2c], esp
lea edx, [esp + 0x2b]
push edx
push str.__mousePosStack.empty__
call fcn.00403db0
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x48], esp
lea eax, [esp + 0x43]
push eax
push str.Assertion_failed
mov dword [esp + 0x74], 0
call fcn.00403db0
mov dword [esp + 0x6c], 0xffffffff
call fcn.00405c50
add esp, 0x38
lea ecx, [esi + 0x50]
mov edx, dword [ecx]
mov eax, dword [ecx + 4]
mov dword [esp + 0x1c], edx
mov edx, dword [ecx + 8]
mov dword [esp + 0x20], eax
mov eax, dword [ecx + 0xc]
lea ecx, [esp + 0x1c]
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], eax
call fcn.00568290
mov eax, dword [esp + 0x1c]
mov edx, dword [eax]
lea ecx, [esi + 0x38]
mov dword [ecx], edx
mov eax, dword [eax + 4]
lea edx, [esp + 0x14]
push edx
mov dword [ecx + 4], eax
call fcn.00567ff0
mov ecx, dword [eax]
mov dword [esi + 0x30], ecx
mov edx, dword [eax + 4]
mov ecx, edi
mov dword [esi + 0x34], edx
call fcn.00568230
mov ecx, dword [esp + 0x2c]
pop edi
mov dword fs:[0], ecx
pop esi
add esp, 0x30
ret
Function at 0x568460
Capabilities:
Get process heap flags

Disassembly:
push 0xffffffffffffffff
push 0x64884f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push ebx
push esi
mov esi, ecx
xor ebx, ebx
push edi
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], ebx
cmp dword [esp + 0x40], ebx
mov edi, 1
mov dword [esp + 0x20], edi
je 0x5684b5
lea ecx, [esi + 0x3c]
mov dword [esi + 4], 0x65c090
mov dword [esi + 0x24], 0x65437c
call fcn.0040b080
mov byte [esp + 0x20], 2
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0x34]
push ebx
sub esp, 0xc
mov ecx, esp
mov dword [ecx], 0x6580c8
mov eax, dword [edi + 4]
lea edx, [esp + eax + 0x44]
mov dword [esp + 0x50], esp
push edx
call fcn.00420750
mov eax, dword [esp + 0x38]
sub esp, 0xc
mov ecx, esp
mov dword [ecx], 0x6580c8
mov edx, dword [eax + 4]
lea eax, [esp + edx + 0x44]
mov dword [esp + 0x30], esp
push eax
mov dword [esp + 0x40], 3
call fcn.00420750
mov ecx, esi
mov byte [esp + 0x3c], 2
call fcn.004b12a0
mov ecx, dword [esi + 0x24]
mov edx, dword [ecx + 4]
mov dword [esi + edx + 0x24], vtable.Interface.0
mov eax, dword [esi + 0x24]
mov ecx, dword [eax + 4]
mov dword [esi + ecx + 0x24], vtable.MousePosRememberer.0
mov dword [esi + 0x28], ebx
mov dword [esi + 0x2c], ebx
mov byte [esi + 0x30], bl
mov edx, dword [esi + 4]
sub esp, 0x18
mov dword [esi], vtable.RectangleFrameControl.1.0
mov eax, dword [edx + 4]
mov ecx, esp
mov dword [esp + 0x58], esp
lea edx, [esp + 0x58]
push edx
push str.width
mov dword [esp + 0x40], 4
mov dword [eax + esi + 4], vtable.RectangleFrameControl.0
call fcn.00403db0
mov ecx, dword [edi + 4]
lea ecx, [esp + ecx + 0x4c]
mov byte [esp + 0x38], 4
call fcn.004304e0
mov ecx, eax
call fcn.0042b350
sub esp, 0x18
mov dword [esi + 0x34], eax
mov ecx, esp
mov dword [esp + 0x58], esp
lea eax, [esp + 0x58]
push eax
push str.height
call fcn.00403db0
mov ecx, dword [edi + 4]
lea ecx, [esp + ecx + 0x4c]
mov byte [esp + 0x38], 4
call fcn.004304e0
mov ecx, eax
call fcn.0042b350
lea ecx, [esp + 0x28]
mov dword [esi + 0x38], eax
mov byte [esp + 0x20], bl
call fcn.0042ce80
lea ecx, [esp + 0x34]
mov dword [esp + 0x20], 0xffffffff
call fcn.0042ce80
mov ecx, dword [esp + 0x18]
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
pop ebx
add esp, 0x18
ret 0x1c
Function at 0x56b830
Capabilities:
Access peb ldr_data
Get process heap flags

Disassembly:
push 0xffffffffffffffff
push 0x648cff
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x28
push ebx
push esi
mov esi, ecx
xor ebx, ebx
push edi
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], ebx
cmp dword [esp + 0x5c], ebx
mov edi, 1
mov dword [esp + 0x3c], edi
je 0x56b885
lea ecx, [esi + 0x44]
mov dword [esi + 4], 0x655c58
mov dword [esi + 0x24], 0x65579c
call fcn.0040b080
mov byte [esp + 0x3c], 2
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0x50]
push ebx
sub esp, 0xc
mov ecx, esp
mov dword [ecx], 0x6580c8
mov eax, dword [edi + 4]
lea edx, [esp + eax + 0x60]
mov dword [esp + 0x6c], esp
push edx
call fcn.00420750
mov eax, dword [esp + 0x54]
sub esp, 0xc
mov ecx, esp
mov dword [ecx], 0x6580c8
mov edx, dword [eax + 4]
lea eax, [esp + edx + 0x60]
mov dword [esp + 0x30], esp
push eax
mov dword [esp + 0x5c], 3
call fcn.00420750
mov ecx, esi
mov byte [esp + 0x58], 2
call fcn.0056b510
mov ecx, dword [esi + 4]
mov dword [esi], vtable.RectangleChildrenMaskControl.1.0
mov edx, dword [ecx + 4]
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x74], esp
lea eax, [esp + 0x74]
mov dword [edx + esi + 4], vtable.RectangleChildrenMaskControl.0
push eax
push str.mask
mov dword [esp + 0x5c], 4
mov dword [esi + 0x34], ebx
mov dword [esi + 0x38], ebx
mov dword [esi + 0x3c], ebx
mov dword [esi + 0x40], ebx
call fcn.00403db0
lea ecx, [esp + 0x30]
push ecx
mov ecx, dword [edi + 4]
lea ecx, [esp + ecx + 0x6c]
mov byte [esp + 0x58], 4
call fcn.004304e0
mov ecx, eax
call fcn.00428b50
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 4]
lea edx, [esp + 0x24]
push edx
lea ecx, [esp + ecx + 0x1c]
mov byte [esp + 0x40], 6
call fcn.004304e0
mov ecx, eax
call fcn.00557e60
mov ecx, dword [eax]
mov dword [esi + 0x34], ecx
mov edx, dword [eax + 4]
mov dword [esi + 0x38], edx
mov ecx, dword [eax + 8]
mov dword [esi + 0x3c], ecx
mov edx, dword [eax + 0xc]
lea ecx, [esp + 0x18]
mov dword [esi + 0x40], edx
mov byte [esp + 0x3c], 4
call fcn.0042ce80
lea ecx, [esp + 0x44]
mov byte [esp + 0x3c], bl
call fcn.0042ce80
lea ecx, [esp + 0x50]
mov dword [esp + 0x3c], 0xffffffff
call fcn.0042ce80
mov ecx, dword [esp + 0x34]
mov eax, esi
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add esp, 0x34
ret 0x1c
Function at 0x585740
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x64c0f8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
push esi
push edi
mov edi, ecx
lea eax, [esp + 0x30]
push eax
mov ecx, 0x16c772c
mov dword [esp + 0x2c], 0
call fcn.00478c70
lea ecx, [esp + 8]
mov esi, eax
push ecx
mov ecx, esi
mov dword [esp + 0xc], edi
call fcn.00551330
cmp eax, esi
je 0x5857d2
push 0x5e
push str.c:work_fishdom_aqua_gameTexture.h
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x28], esp
lea edx, [esp + 0x50]
push edx
push str.memberSet.find_this___memberSet.end__
call fcn.00403db0
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x44], esp
lea eax, [esp + 0x68]
push eax
push str.Assertion_failed
mov byte [esp + 0x68], 1
call fcn.00403db0
mov byte [esp + 0x60], 0
call fcn.00405c50
add esp, 0x38
push 1
push edi
lea ecx, [esp + 0x1c]
call fcn.00491180
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x10]
push edx
mov ecx, esi
mov byte [esp + 0x30], 2
call fcn.00560030
lea ecx, [esp + 0x14]
mov byte [esp + 0x28], 0
call fcn.00450980
mov eax, dword [esp + 0x44]
lea ecx, [esp + 0x40]
cmp eax, ecx
mov dword [esp + 0x28], 0xffffffff
je 0x58584d
mov ecx, dword [esp + 0x30]
test ecx, ecx
je 0x58584d
sub eax, ecx
cmp eax, 0x80
jbe 0x585843
push ecx
call fcn.00611869
add esp, 4
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
pop edi
pop esi
add esp, 0x24
ret 0x18
push eax
push ecx
call fcn.005d6970
add esp, 8
mov ecx, dword [esp + 0x20]
pop edi
mov dword fs:[0], ecx
pop esi
add esp, 0x24
ret 0x18
Function at 0x5a43e0
Capabilities:
Terminate process

Disassembly:
mov eax, dword [esp + 4]
mov ecx, dword [eax + 0x58]
test ecx, ecx
je 0x5a4400
mov edx, dword [esp + 8]
mov dword [ecx + 0x44], edx
mov eax, dword [eax + 0x58]
push 1
add eax, 4
push eax
call fcn.00614d34
mov ecx, dword [eax + 0x10]
push eax
call dword [ecx + 0x28]
add esp, 4
push 1
call fcn.006131aa
int3

Function at 0x5a4930
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
push esi
mov esi, dword [esp + 0xc]
mov ecx, dword [esi + 0x1c]
push edi
mov edi, dword [esp + 0x14]
mov eax, dword [edi]
mov ebp, edi
sub ebp, ecx
cmp eax, 6
je 0x5a4950
call fcn.005a48a0
mov edi, eax
mov eax, dword [esi + 0x14]
mov ecx, dword [esi + 0x24]
add eax, 0x18
cmp eax, ecx
jne 0x5a4994
mov ax, word [esi + 0x2c]
cmp ax, 0x1000
jbe 0x5a496f
push 5
push esi
call fcn.005a43e0
movzx ecx, ax
shl ecx, 1
push ecx
push esi
call fcn.005a4550
add esp, 8
cmp word [esi + 0x2c], 0x1000
jbe 0x5a4994
push str.stack_overflow
push esi
call fcn.005aa690
add esp, 8
mov eax, dword [edi + 8]
mov cl, byte [eax + 6]
test cl, cl
jne 0x5a4a57
push ebx
mov ebx, dword [eax + 0xc]
mov al, byte [ebx + 0x46]
test al, al
je 0x5a49bd
movzx eax, byte [ebx + 0x45]
lea edx, [edi + 0x10]
push eax
call fcn.005a4760
add esp, 4
movzx eax, byte [ebx + 0x47]
mov edx, dword [esi + 8]
mov ecx, dword [esi + 0x18]
sub ecx, edx
mov edx, eax
shl edx, 4
cmp ecx, edx
jg 0x5a49dc
push eax
push esi
call fcn.005a45c0
add esp, 8
mov eax, dword [esi + 0x14]
mov ecx, dword [esi + 0x1c]
add eax, 0x18
mov dword [esi + 0x14], eax
lea edx, [ecx + ebp + 0x10]
mov dword [eax], edx
mov ecx, dword [esi + 0x14]
mov ecx, dword [ecx]
mov dword [esi + 0xc], ecx
movzx edx, byte [ebx + 0x47]
shl edx, 4
add edx, ecx
mov dword [eax + 4], edx
mov ecx, dword [ebx + 0xc]
mov dword [eax + 0xc], ecx
mov ecx, dword [eax + 4]
mov dword [eax + 0x14], 0
mov dword [eax + 8], 8
mov edx, dword [esi + 8]
cmp edx, ecx
jae 0x5a4a4a
mov ecx, 0x10
jmp 0x5a4a30
mov edx, dword [esi + 8]
mov dword [edx], 0
mov ebx, dword [esi + 8]
add ebx, ecx
mov dword [esi + 8], ebx
mov edi, dword [eax + 4]
mov edx, ebx
cmp edx, edi
jb 0x5a4a30
mov eax, dword [eax + 4]
pop ebx
pop edi
mov dword [esi + 8], eax
pop esi
xor eax, eax
pop ebp
ret
mov ecx, dword [esi + 0x18]
sub ecx, dword [esi + 8]
cmp ecx, 0x140
jg 0x5a4a70
push 0x14
push esi
call fcn.005a45c0
add esp, 8
mov edx, dword [esi + 0x14]
add edx, 0x18
mov dword [esi + 0x14], edx
mov eax, edx
mov edx, dword [esi + 0x1c]
lea ecx, [edx + ebp + 0x10]
mov dword [eax], ecx
mov edx, dword [esi + 0x14]
mov ecx, dword [edx]
mov edx, dword [esi + 8]
mov dword [esi + 0xc], ecx
add edx, 0x140
mov ecx, 1
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
test byte [esi + 0x30], cl
je 0x5a4ab2
push 0xffffffffffffffff
push 0
push esi
call fcn.005a4680
add esp, 0xc
mov eax, dword [esi + 0xc]
mov ecx, dword [eax - 8]
push esi
call dword [ecx + 0xc]
add esp, 4
shl eax, 4
mov edx, eax
mov eax, dword [esi + 8]
pop edi
pop esi
sub eax, edx
pop ebp
ret
Function at 0x5a82b0
Capabilities:
Encode data using xor

Disassembly:
push ebx
mov ebx, dword [esp + 0x10]
mov ecx, ebx
shr ecx, 5
push ebp
push esi
mov esi, dword [esp + 0x14]
inc ecx
cmp ebx, ecx
push edi
mov edx, ebx
mov eax, ebx
jb 0x5a82eb
lea ebx, [ebx]
movzx edi, byte [esi + eax - 1]
mov ebp, edx
shl ebp, 5
add edi, ebp
mov ebp, edx
shr ebp, 2
add edi, ebp
sub eax, ecx
xor edx, edi
cmp eax, ecx
jae 0x5a82d0
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0x10]
mov ecx, dword [eax + 8]
mov eax, dword [eax]
dec ecx
and ecx, edx
mov eax, dword [eax + ecx*4]
test eax, eax
je 0x5a831b
cmp dword [eax + 0xc], ebx
jne 0x5a8315
mov ecx, ebx
lea edi, [eax + 0x10]
xor ebp, ebp
repe cmpsb byte [esi], byte es:[edi]
je 0x5a832c
mov esi, dword [esp + 0x18]
mov eax, dword [eax]
test eax, eax
jne 0x5a8301
mov ecx, dword [esp + 0x14]
push ebx
push esi
push ecx
mov eax, edx
call fcn.005a8210
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
ret

Function at 0x5b1e00
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x64fa90
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x20
push esi
lea eax, [esp + 7]
mov esi, ecx
push eax
push str.call_to_empty_boost::function
lea ecx, [esp + 0x14]
mov dword [esp + 0x10], esi
call fcn.00403db0
lea ecx, [esp + 0xc]
push ecx
mov ecx, esi
mov dword [esp + 0x30], 0
call fcn.005f16e0
mov dword [esi], vtable.stlpmtx_std::runtime_error.0
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x1c]
cmp eax, edx
mov byte [esp + 0x2c], 2
je 0x5b1e83
mov ecx, dword [esp + 0xc]
test ecx, ecx
je 0x5b1e83
sub eax, ecx
cmp eax, 0x80
jbe 0x5b1e79
push ecx
call fcn.00611869
add esp, 4
jmp 0x5b1e83
push eax
push ecx
call fcn.005d6970
add esp, 8
mov ecx, dword [esp + 0x24]
mov dword [esi], 0x66a9bc
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0x2c
ret
Function at 0x5b1f10
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x64faf1
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x20
mov eax, dword [0x6bd8a0]
push esi
mov dword [esp + 0x20], eax
push edi
mov dword [esp + 8], 0
lea eax, [esp + 0xc]
lea ecx, [esp + 0x1c]
mov dword [esp + 0x30], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
mov byte [esp + 0xc], 0
mov esi, dword [esp + 0x40]
mov edi, dword [esp + 0x44]
cmp esi, edi
mov byte [esp + 0x30], 2
je 0x5b1fb9
push ebp
mov ebp, dword [esp + 0x40]
mov edi, edi
mov eax, dword [esp + 0x60]
lea edx, [esp + 0x5c]
cmp eax, edx
lea eax, [esp + 0x4c]
je 0x5b1f84
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x5c]
push ecx
push eax
lea ecx, [esp + 0x18]
call fcn.00403e70
lea edx, [esp + 0x10]
push edx
push ebp
call dword [esi]
add esp, 8
push 0x653e11
push 0x653e10
lea ecx, [esp + 0x18]
call fcn.00403e70
add esi, 0x10
cmp esi, edi
jne 0x5b1f70
pop ebp
mov esi, dword [esp + 0x38]
lea eax, [esi + 0x10]
mov dword [eax], esi
mov dword [esi + 0x14], eax
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0x1c]
cmp ecx, eax
mov byte [esp + 0x30], 3
lea eax, [esp + 0xc]
je 0x5b1fde
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.00403b50
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x1c]
cmp eax, edx
mov dword [esp + 8], 1
mov byte [esp + 0x30], 1
je 0x5b202a
mov ecx, dword [esp + 0xc]
test ecx, ecx
je 0x5b202a
sub eax, ecx
cmp eax, 0x80
jbe 0x5b2020
push ecx
call fcn.00611869
add esp, 4
jmp 0x5b202a
push eax
push ecx
call fcn.005d6970
add esp, 8
mov eax, dword [esp + 0x5c]
lea ecx, [esp + 0x58]
cmp eax, ecx
mov byte [esp + 0x30], 0
je 0x5b2061
mov ecx, dword [esp + 0x48]
test ecx, ecx
je 0x5b2061
sub eax, ecx
cmp eax, 0x80
jbe 0x5b2057
push ecx
call fcn.00611869
add esp, 4
jmp 0x5b2061
push eax
push ecx
call fcn.005d6970
add esp, 8
mov ecx, dword [esp + 0x28]
pop edi
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x20]
mov eax, esi
pop esi
call fcn.006122a5
add esp, 0x2c
ret
Function at 0x5b2080
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x64faf1
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x20
mov eax, dword [0x6bd8a0]
push esi
mov dword [esp + 0x20], eax
push edi
mov dword [esp + 8], 0
lea eax, [esp + 0xc]
lea ecx, [esp + 0x1c]
mov dword [esp + 0x30], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
mov byte [esp + 0xc], 0
mov esi, dword [esp + 0x40]
mov edi, dword [esp + 0x44]
cmp esi, edi
mov byte [esp + 0x30], 2
je 0x5b2129
push ebp
mov ebp, dword [esp + 0x40]
mov edi, edi
mov eax, dword [esp + 0x60]
lea edx, [esp + 0x5c]
cmp eax, edx
lea eax, [esp + 0x4c]
je 0x5b20f4
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x5c]
push ecx
push eax
lea ecx, [esp + 0x18]
call fcn.00403e70
lea edx, [esp + 0x10]
push edx
push ebp
call dword [esi]
add esp, 8
push 0x653e11
push 0x653e10
lea ecx, [esp + 0x18]
call fcn.00403e70
add esi, 0x14
cmp esi, edi
jne 0x5b20e0
pop ebp
mov esi, dword [esp + 0x38]
lea eax, [esi + 0x10]
mov dword [eax], esi
mov dword [esi + 0x14], eax
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0x1c]
cmp ecx, eax
mov byte [esp + 0x30], 3
lea eax, [esp + 0xc]
je 0x5b214e
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.00403b50
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x1c]
cmp eax, edx
mov dword [esp + 8], 1
mov byte [esp + 0x30], 1
je 0x5b219a
mov ecx, dword [esp + 0xc]
test ecx, ecx
je 0x5b219a
sub eax, ecx
cmp eax, 0x80
jbe 0x5b2190
push ecx
call fcn.00611869
add esp, 4
jmp 0x5b219a
push eax
push ecx
call fcn.005d6970
add esp, 8
mov eax, dword [esp + 0x5c]
lea ecx, [esp + 0x58]
cmp eax, ecx
mov byte [esp + 0x30], 0
je 0x5b21d1
mov ecx, dword [esp + 0x48]
test ecx, ecx
je 0x5b21d1
sub eax, ecx
cmp eax, 0x80
jbe 0x5b21c7
push ecx
call fcn.00611869
add esp, 4
jmp 0x5b21d1
push eax
push ecx
call fcn.005d6970
add esp, 8
mov ecx, dword [esp + 0x28]
pop edi
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x20]
mov eax, esi
pop esi
call fcn.006122a5
add esp, 0x2c
ret
Function at 0x5b21f0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x64faf1
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x20
mov eax, dword [0x6bd8a0]
push esi
mov dword [esp + 0x20], eax
push edi
mov dword [esp + 8], 0
lea eax, [esp + 0xc]
lea ecx, [esp + 0x1c]
mov dword [esp + 0x30], 1
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
mov byte [esp + 0xc], 0
mov esi, dword [esp + 0x40]
mov edi, dword [esp + 0x44]
cmp esi, edi
mov byte [esp + 0x30], 2
je 0x5b2299
push ebp
mov ebp, dword [esp + 0x40]
mov edi, edi
mov eax, dword [esp + 0x60]
lea edx, [esp + 0x5c]
cmp eax, edx
lea eax, [esp + 0x4c]
je 0x5b2264
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x5c]
push ecx
push eax
lea ecx, [esp + 0x18]
call fcn.00403e70
lea edx, [esp + 0x10]
push edx
push ebp
call dword [esi]
add esp, 8
push 0x653e11
push 0x653e10
lea ecx, [esp + 0x18]
call fcn.00403e70
add esi, 0x38
cmp esi, edi
jne 0x5b2250
pop ebp
mov esi, dword [esp + 0x38]
lea eax, [esi + 0x10]
mov dword [eax], esi
mov dword [esi + 0x14], eax
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0x1c]
cmp ecx, eax
mov byte [esp + 0x30], 3
lea eax, [esp + 0xc]
je 0x5b22be
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.00403b50
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x1c]
cmp eax, edx
mov dword [esp + 8], 1
mov byte [esp + 0x30], 1
je 0x5b230a
mov ecx, dword [esp + 0xc]
test ecx, ecx
je 0x5b230a
sub eax, ecx
cmp eax, 0x80
jbe 0x5b2300
push ecx
call fcn.00611869
add esp, 4
jmp 0x5b230a
push eax
push ecx
call fcn.005d6970
add esp, 8
mov eax, dword [esp + 0x5c]
lea ecx, [esp + 0x58]
cmp eax, ecx
mov byte [esp + 0x30], 0
je 0x5b2341
mov ecx, dword [esp + 0x48]
test ecx, ecx
je 0x5b2341
sub eax, ecx
cmp eax, 0x80
jbe 0x5b2337
push ecx
call fcn.00611869
add esp, 4
jmp 0x5b2341
push eax
push ecx
call fcn.005d6970
add esp, 8
mov ecx, dword [esp + 0x28]
pop edi
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x20]
mov eax, esi
pop esi
call fcn.006122a5
add esp, 0x2c
ret