joyce8/EMBER2024-capa huggingface dataset:
Function at 0x67032610
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x6722a9d8
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push esi
push edi
mov eax, dword [0x67463180]
xor eax, esp
push eax
lea eax, [esp + 0x18]
mov dword fs:[0], eax
lea eax, [esp + 0xc]
push eax
call sym.Qt5Core.dll_private:_class_QByteArray___thiscall_QByteArray::nulTerminated_void_
mov eax, dword [eax]
mov edi, dword [esp + 0x28]
push edi
push dword [esp + 0x30]
mov ecx, dword [eax + 0xc]
add ecx, eax
mov dword [esp + 0x28], 0
push ecx
call sym.Qt5Core.dll_public:_static_unsigned_long_long_unsigned___int64____cdecl_QLocaleData::bytearrayToUnsLongLong_char_const___int__bool__
mov esi, eax
add esp, 0xc
xor eax, eax
cmp esi, esi
jne 0x6703266c
cmp eax, edx
je 0x6703267f
test edi, edi
je 0x67032672
mov byte [edi], al
xorps xmm0, xmm0
movlpd qword [esp + 0x10], xmm0
mov esi, dword [esp + 0x10]
mov eax, dword [esp + 0xc]
mov ecx, dword [eax]
test ecx, ecx
je 0x670326a0
cmp ecx, 0xffffffff
je 0x670326ad
or ecx, 0xffffffff
lock xadd dword [eax], ecx
setne al
test al, al
jne 0x670326ad
mov eax, dword [esp + 0xc]
push 4
push 1
push eax
call sym.Qt5Core.dll_public:_static_void___cdecl_QArrayData::deallocate_struct_QArrayData___unsigned_int__unsigned_int_
add esp, 0xc
mov eax, esi
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x18
ret 8

Function at 0x67032770
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x6722a9d8
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push esi
push edi
mov eax, dword [0x67463180]
xor eax, esp
push eax
lea eax, [esp + 0x18]
mov dword fs:[0], eax
lea eax, [esp + 0xc]
push eax
call sym.Qt5Core.dll_private:_class_QByteArray___thiscall_QByteArray::nulTerminated_void_
mov eax, dword [eax]
mov edi, dword [esp + 0x28]
push edi
push dword [esp + 0x30]
mov ecx, dword [eax + 0xc]
add ecx, eax
mov dword [esp + 0x28], 0
push ecx
call sym.Qt5Core.dll_public:_static_unsigned_long_long_unsigned___int64____cdecl_QLocaleData::bytearrayToUnsLongLong_char_const___int__bool__
mov esi, eax
mov ecx, edx
movzx eax, si
add esp, 0xc
cdq
cmp eax, esi
jne 0x670327d0
cmp edx, ecx
je 0x670327e4
test edi, edi
je 0x670327d7
mov byte [edi], 0
xorps xmm0, xmm0
movlpd qword [esp + 0x10], xmm0
mov esi, dword [esp + 0x10]
mov eax, dword [esp + 0xc]
mov ecx, dword [eax]
test ecx, ecx
je 0x67032805
cmp ecx, 0xffffffff
je 0x67032812
or ecx, 0xffffffff
lock xadd dword [eax], ecx
setne al
test al, al
jne 0x67032812
mov eax, dword [esp + 0xc]
push 4
push 1
push eax
call sym.Qt5Core.dll_public:_static_void___cdecl_QArrayData::deallocate_struct_QArrayData___unsigned_int__unsigned_int_
add esp, 0xc
mov ax, si
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x18
ret 8
Function at 0x67039280
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6722b3c8
mov eax, dword fs:[0]
push eax
sub esp, 0x28
push esi
mov eax, dword [0x67463180]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
lea eax, [esp + 0x14]
push eax
call sym.Qt5Core.dll_public:_static_class_QString___cdecl_QCoreApplication::applicationVersion_void_
mov esi, eax
lea eax, [esp + 0x14]
mov dword [esp + 0x3c], 0
push eax
call sym.Qt5Core.dll_public:_static_class_QString___cdecl_QCoreApplication::applicationName_void_
add esp, 8
mov dword [esp + 0x18], eax
lea ecx, [esp + 0x28]
lea eax, [esp + 0xa]
mov byte [esp + 0x38], 1
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x18]
mov dword [esp + 0x20], eax
lea eax, [esp + 0x20]
mov dword [esp + 0x28], eax
lea eax, [esp + 0xb]
mov dword [esp + 0x2c], eax
lea eax, [esp + 0xc]
push eax
mov byte [esp + 0xf], 0xa
mov byte [esp + 0xe], 0x20
mov dword [esp + 0x28], esi
call fcn.670355f0
lea eax, [esp + 0xc]
mov byte [esp + 0x38], 2
push 0
push eax
call fcn.67039040
mov eax, dword [esp + 0x14]
add esp, 8
or esi, 0xffffffff
mov ecx, dword [eax]
test ecx, ecx
je 0x67039340
cmp ecx, esi
je 0x6703934d
mov ecx, esi
lock xadd dword [eax], ecx
setne al
test al, al
jne 0x6703934d
mov eax, dword [esp + 0xc]
push 4
push 2
push eax
call sym.Qt5Core.dll_public:_static_void___cdecl_QArrayData::deallocate_struct_QArrayData___unsigned_int__unsigned_int_
add esp, 0xc
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
test ecx, ecx
je 0x6703936d
cmp ecx, 0xffffffff
je 0x6703937a
mov ecx, esi
lock xadd dword [eax], ecx
setne al
test al, al
jne 0x6703937a
mov eax, dword [esp + 0x10]
push 4
push 2
push eax
call sym.Qt5Core.dll_public:_static_void___cdecl_QArrayData::deallocate_struct_QArrayData___unsigned_int__unsigned_int_
add esp, 0xc
mov eax, dword [esp + 0x14]
mov dword [esp + 0x38], 0xffffffff
mov ecx, dword [eax]
test ecx, ecx
je 0x670393a1
cmp ecx, 0xffffffff
je 0x670393ae
lock xadd dword [eax], esi
dec esi
setne al
test al, al
jne 0x670393ae
mov eax, dword [esp + 0x14]
push 4
push 2
push eax
call sym.Qt5Core.dll_public:_static_void___cdecl_QArrayData::deallocate_struct_QArrayData___unsigned_int__unsigned_int_
add esp, 0xc
call sym.Qt5Core.dll_void___cdecl_qt_call_post_routines_void_
push 0
call dword [0x67248344]
int3
Function at 0x67045b10
Capabilities:
Encode data using xor
Hash data using murmur3

Disassembly:
sub esp, 0x124
mov eax, dword [0x67463180]
xor eax, esp
mov dword [esp + 0x120], eax
push ebx
mov ebx, dword [esp + 0x12c]
push ebp
push esi
push edi
mov dword [esp + 0x2c], ebx
lea edx, [ebx + 0x2b]
xor esi, esi
jmp 0x67045b40
movzx ecx, byte [edx - 1]
lea edx, [edx + 4]
movzx eax, byte [edx - 4]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx - 3]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx - 2]
shl ecx, 8
or ecx, eax
mov dword [esp + esi*4 + 0x30], ecx
inc esi
cmp esi, 0x10
jl 0x67045b40
lea eax, [esp + 0x68]
mov ebp, 0x30
mov edx, dword [eax - 0x34]
lea eax, [eax + 4]
mov esi, dword [eax - 4]
mov edi, edx
mov ecx, edx
rol edi, 0xe
ror ecx, 7
xor edi, ecx
shr edx, 3
xor edi, edx
mov ecx, esi
mov edx, esi
rol ecx, 0xd
rol edx, 0xf
xor edx, ecx
shr esi, 0xa
xor edx, esi
add edi, edx
add edi, dword [eax - 0x3c]
add edi, dword [eax - 0x18]
mov dword [eax + 4], edi
dec ebp
jne 0x67045b75
mov eax, dword [ebx]
mov edi, eax
mov edx, dword [ebx + 0x14]
mov ebp, dword [ebx + 0x10]
mov dword [esp + 0x28], eax
mov eax, dword [ebx + 4]
mov dword [esp + 0x20], eax
mov eax, dword [ebx + 8]
mov dword [esp + 0x14], eax
mov eax, dword [ebx + 0xc]
mov dword [esp + 0x1c], eax
mov eax, dword [ebx + 0x18]
mov dword [esp + 0x18], eax
mov eax, dword [ebx + 0x1c]
xor ebx, ebx
mov dword [esp + 0x10], edx
mov dword [esp + 0x24], eax
jmp 0x67045beb
mov edx, dword [esp + 0x10]
mov esi, ebp
mov eax, ebp
rol eax, 7
and edx, ebp
ror esi, 0xb
mov ecx, ebp
xor esi, eax
not ecx
and ecx, dword [esp + 0x18]
mov eax, ebp
ror eax, 6
xor ecx, edx
xor esi, eax
mov edx, edi
ror edx, 0xd
mov eax, edi
rol eax, 0xa
add esi, ecx
add esi, dword [ebx + 0x6724c090]
xor edx, eax
add esi, dword [esp + ebx + 0x30]
mov eax, edi
add esi, dword [esp + 0x24]
add ebx, 4
ror eax, 2
xor edx, eax
mov eax, dword [esp + 0x20]
mov ecx, eax
and eax, edi
xor ecx, edi
and ecx, dword [esp + 0x14]
xor ecx, eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x24], eax
add edx, ecx
mov eax, dword [esp + 0x10]
mov ecx, edi
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0x1c]
mov dword [esp + 0x18], eax
lea edi, [edx + esi]
mov eax, dword [esp + 0x14]
add ebp, esi
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x14], eax
mov dword [esp + 0x20], ecx
cmp ebx, 0x100
jl 0x67045be7
mov ebx, dword [esp + 0x2c]
mov eax, dword [esp + 0x28]
add eax, edi
pop edi
add dword [ebx + 0x10], ebp
add dword [ebx + 4], ecx
mov ecx, dword [esp + 0x12c]
mov dword [ebx], eax
mov eax, dword [esp + 0x10]
add dword [ebx + 8], eax
mov eax, dword [esp + 0x18]
add dword [ebx + 0xc], eax
mov eax, dword [esp + 0xc]
add dword [ebx + 0x14], eax
mov eax, dword [esp + 0x14]
add dword [ebx + 0x18], eax
mov eax, dword [esp + 0x20]
add dword [ebx + 0x1c], eax
xor eax, eax
pop esi
pop ebp
mov word [ebx + 0x28], ax
pop ebx
xor ecx, esp
call fcn.67226d38
add esp, 0x124
ret
Function at 0x67047740
Capabilities:
Hash data using sha256
Hash data using sha384
Hash data using sha512

Disassembly:
push esi
mov esi, ecx
mov eax, dword [esi]
mov edx, dword [eax]
cmp edx, 0xa
ja case.default.0x67047750
jmp dword [edx*4 + 0x670478b8]
mov dword [eax + 8], 0x67452301
mov dword [eax + 0xc], 0xefcdab89
mov dword [eax + 0x10], 0x98badcfe
mov dword [eax + 0x14], 0x10325476
mov dword [eax + 0x18], 0xc3d2e1f0
mov dword [eax + 0x20], 0
mov dword [eax + 0x24], 0
mov ecx, dword [esi]
add ecx, 0x1a8
pop esi
jmp sym.Qt5Core.dll_public:_void___thiscall_QByteArray::clear_void_
mov dword [eax + 0x10], 0x67452301
mov dword [eax + 0x14], 0xefcdab89
mov dword [eax + 0x18], 0x98badcfe
mov dword [eax + 0x1c], 0x10325476
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
mov ecx, dword [esi]
add ecx, 0x1a8
pop esi
jmp sym.Qt5Core.dll_public:_void___thiscall_QByteArray::clear_void_
mov dword [eax + 8], 0x67452301
mov dword [eax + 0xc], 0xefcdab89
mov dword [eax + 0x10], 0x98badcfe
mov dword [eax + 0x14], 0x10325476
mov dword [eax + 0x18], 0
mov dword [eax + 0x1c], 0
mov ecx, dword [esi]
add ecx, 0x1a8
pop esi
jmp sym.Qt5Core.dll_public:_void___thiscall_QByteArray::clear_void_
add eax, 8
push 0x67462040
push eax
call fcn.67045ce0
mov ecx, dword [esi]
add esp, 8
add ecx, 0x1a8
pop esi
jmp sym.Qt5Core.dll_public:_void___thiscall_QByteArray::clear_void_
add eax, 8
push 0x67462060
push eax
call fcn.67045ce0
mov ecx, dword [esi]
add esp, 8
add ecx, 0x1a8
pop esi
jmp sym.Qt5Core.dll_public:_void___thiscall_QByteArray::clear_void_
add eax, 8
push 0x67462080
push eax
call fcn.670465e0
mov ecx, dword [esi]
add esp, 8
add ecx, 0x1a8
pop esi
jmp sym.Qt5Core.dll_public:_void___thiscall_QByteArray::clear_void_
add eax, 8
push 0x674620c0
push eax
call fcn.670465e0
mov ecx, dword [esi]
add esp, 8
add ecx, 0x1a8
pop esi
jmp sym.Qt5Core.dll_public:_void___thiscall_QByteArray::clear_void_
push 0xe0
jmp 0x6704789c
push 0x100
jmp 0x6704789c
push 0x180
jmp 0x6704789c
push 0x200
add eax, 8
push eax
call dword [0x6724c080]
add esp, 8
mov ecx, dword [esi]
add ecx, 0x1a8
pop esi
jmp sym.Qt5Core.dll_public:_void___thiscall_QByteArray::clear_void_
Function at 0x670490d0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6722acc9
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push ebp
push esi
push edi
mov eax, dword [0x67463180]
xor eax, esp
push eax
lea eax, [esp + 0x18]
mov dword fs:[0], eax
mov ebp, ecx
mov dword [esp + 0x14], 0
mov eax, dword [ebp]
push 0
mov dword [esp + 0x24], 0
mov edi, dword [eax]
mov eax, dword [edi]
mov edx, dword [eax]
mov eax, dword [edx]
mov eax, dword [eax]
mov eax, dword [eax]
mov ebx, dword [eax + 4]
mov eax, dword [edx + 4]
mov eax, dword [eax]
mov esi, dword [eax + 4]
mov eax, dword [edi + 4]
mov eax, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [ebp + 4]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea eax, [ebx + esi]
mov esi, dword [esp + 0x2c]
add ecx, 3
add eax, edx
add eax, ecx
mov ecx, esi
push eax
call sym.Qt5Core.dll_public:_void___thiscall_QString::constructor_int__enum_Qt::Initialization_
mov ecx, dword [esi]
lea eax, [esp + 0x28]
push eax
push ebp
mov edx, dword [ecx + 0xc]
add edx, ecx
mov dword [esp + 0x30], edx
call fcn.67049060
add esp, 8
mov eax, esi
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 4
Function at 0x670496c0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x6722b66f
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x67463180]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov edi, ecx
mov dword [esp + 0xc], edi
mov dword [edi], vtable.QDateTimeParser.0
mov dword [edi + 4], 0xffffffff
mov dword [edi + 8], 0
mov dword [edi + 0xc], 0xffffffff
mov dword [edi + 0x10], sym.Qt5Core.dll_struct_QArrayData_const__const_const_QArrayData::shared_null
mov dword [esp + 0x18], 0
mov dword [edi + 0x14], sym.Qt5Core.dll_struct_QArrayData_const__const_const_QArrayData::shared_null
mov dword [edi + 0x58], sym.Qt5Core.dll_struct_QListData::Data_const_QListData::shared_null
mov dword [edi + 0x5c], sym.Qt5Core.dll_struct_QArrayData_const__const_const_QArrayData::shared_null
lea ecx, [edi + 0x60]
mov byte [esp + 0x18], 3
call sym.Qt5Core.dll_public:_void___thiscall_QLocale::constructor_void_
mov eax, dword [esp + 0x20]
mov dword [edi + 0x64], eax
mov eax, dword [esp + 0x24]
mov dword [edi + 0x70], eax
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x1c], 4
mov byte [edi + 0x68], 0
mov dword [edi + 0x6c], 0
call sym.Qt5Core.dll_public:_static_class_QLocale___cdecl_QLocale::system_void_
add esp, 4
push eax
lea ecx, [edi + 0x60]
mov byte [esp + 0x1c], 5
call sym.Qt5Core.dll_public:_class_QLocale____thiscall_QLocale::operator_class_QLocale_const__
lea ecx, [esp + 0x20]
mov byte [esp + 0x18], 4
call sym.Qt5Core.dll_public:_void___thiscall_QLocale::destructor_void_
mov dword [edi + 0x18], 0x30000
mov eax, edi
mov dword [edi + 0x1c], 0xffffffff
mov dword [edi + 0x20], 0xffffffff
mov dword [edi + 0x24], 0
mov dword [edi + 0x28], 0x50000
mov dword [edi + 0x2c], 0xffffffff
mov dword [edi + 0x30], 0xffffffff
mov dword [edi + 0x34], 0
mov dword [edi + 0x38], 0
mov dword [edi + 0x3c], 0xffffffff
mov dword [edi + 0x40], 0xffffffff
mov dword [edi + 0x44], 0
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x10
ret 8
Function at 0x6704a040
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x6722b791
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push esi
push edi
mov eax, dword [0x67463180]
xor eax, esp
push eax
lea eax, [esp + 0x18]
mov dword fs:[0], eax
mov dword [esp + 0x10], 0
lea eax, [esp + 0x2c]
mov dword [esp + 0x20], 1
push eax
lea ecx, [esp + 0x18]
call sym.Qt5Core.dll_public:_void___thiscall_QDebugStateSaver::constructor_class_QDebug__
mov ecx, dword [esp + 0x30]
lea eax, [esp + 0xc]
push 1
push eax
mov byte [esp + 0x28], 2
call sym.Qt5Core.dll_public:_class_QString___thiscall_QDate::toString_enum_Qt::DateFormat_
mov esi, eax
mov ecx, dword [esp + 0x2c]
push str.QDate_
mov byte [esp + 0x24], 3
mov byte [ecx + 0x14], 0
lea ecx, [esp + 0x30]
call sym.Qt5Core.dll_public:_class_QDebug____thiscall_QDebug::operator___char_const__
mov edx, dword [esi]
mov edi, eax
mov ecx, dword [edx + 0xc]
push dword [edx + 4]
add ecx, edx
push ecx
mov ecx, edi
call sym.Qt5Core.dll_private:_void___thiscall_QDebug::putString_class_QChar_const___unsigned_int_
mov ecx, dword [edi]
cmp byte [ecx + 0x14], 0
je 0x6704a0d8
push 0x20
call sym.Qt5Core.dll_public:_class_QTextStream____thiscall_QTextStream::operator___char_
mov ecx, dword [edi]
push 0x29
call sym.Qt5Core.dll_public:_class_QTextStream____thiscall_QTextStream::operator___char_
mov ecx, dword [edi]
cmp byte [ecx + 0x14], 0
je 0x6704a0f0
push 0x20
call sym.Qt5Core.dll_public:_class_QTextStream____thiscall_QTextStream::operator___char_
mov eax, dword [esp + 0xc]
mov ecx, dword [eax]
test ecx, ecx
je 0x6704a111
cmp ecx, 0xffffffff
je 0x6704a11e
or ecx, 0xffffffff
lock xadd dword [eax], ecx
setne al
test al, al
jne 0x6704a11e
mov eax, dword [esp + 0xc]
push 4
push 2
push eax
call sym.Qt5Core.dll_public:_static_void___cdecl_QArrayData::deallocate_struct_QArrayData___unsigned_int__unsigned_int_
add esp, 0xc
mov ecx, dword [esp + 0x2c]
mov esi, dword [esp + 0x28]
mov dword [esi], ecx
inc dword [ecx + 0xc]
lea ecx, [esp + 0x14]
mov dword [esp + 0x10], 1
mov byte [esp + 0x20], 1
call sym.Qt5Core.dll_public:_void___thiscall_QDebugStateSaver::destructor_void_
lea ecx, [esp + 0x2c]
mov byte [esp + 0x20], 0
call sym.Qt5Core.dll_public:_void___thiscall_QDebug::destructor_void_
mov eax, esi
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x18
ret
Function at 0x6704a450
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x6722b859
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push esi
push edi
mov eax, dword [0x67463180]
xor eax, esp
push eax
lea eax, [esp + 0x20]
mov dword fs:[0], eax
mov dword [esp + 0x18], 0
lea eax, [esp + 0x34]
mov dword [esp + 0x28], 1
push eax
lea ecx, [esp + 0x20]
call sym.Qt5Core.dll_public:_void___thiscall_QDebugStateSaver::constructor_class_QDebug__
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x13]
call fcn.6704abc0
mov ecx, dword [esp + 0x38]
push eax
lea eax, [esp + 0x14]
mov byte [esp + 0x2c], 3
push eax
call sym.Qt5Core.dll_public:_class_QString___thiscall_QTime::toString_class_QString_const__
mov esi, eax
mov ecx, dword [esp + 0x34]
push str.QTime_
mov byte [esp + 0x2c], 4
mov byte [ecx + 0x14], 0
lea ecx, [esp + 0x38]
call sym.Qt5Core.dll_public:_class_QDebug____thiscall_QDebug::operator___char_const__
mov edx, dword [esi]
mov edi, eax
mov ecx, dword [edx + 0xc]
push dword [edx + 4]
add ecx, edx
push ecx
mov ecx, edi
call sym.Qt5Core.dll_private:_void___thiscall_QDebug::putString_class_QChar_const___unsigned_int_
mov ecx, dword [edi]
cmp byte [ecx + 0x14], 0
je 0x6704a4f5
push 0x20
call sym.Qt5Core.dll_public:_class_QTextStream____thiscall_QTextStream::operator___char_
mov ecx, dword [edi]
push 0x29
call sym.Qt5Core.dll_public:_class_QTextStream____thiscall_QTextStream::operator___char_
mov ecx, dword [edi]
cmp byte [ecx + 0x14], 0
je 0x6704a50d
push 0x20
call sym.Qt5Core.dll_public:_class_QTextStream____thiscall_QTextStream::operator___char_
mov eax, dword [esp + 0x10]
or esi, 0xffffffff
mov ecx, dword [eax]
test ecx, ecx
je 0x6704a52f
cmp ecx, esi
je 0x6704a53c
mov ecx, esi
lock xadd dword [eax], ecx
setne al
test al, al
jne 0x6704a53c
mov eax, dword [esp + 0x10]
push 4
push 2
push eax
call sym.Qt5Core.dll_public:_static_void___cdecl_QArrayData::deallocate_struct_QArrayData___unsigned_int__unsigned_int_
add esp, 0xc
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
test ecx, ecx
je 0x6704a55b
cmp ecx, 0xffffffff
je 0x6704a568
lock xadd dword [eax], esi
dec esi
setne al
test al, al
jne 0x6704a568
mov eax, dword [esp + 0x14]
push 4
push 2
push eax
call sym.Qt5Core.dll_public:_static_void___cdecl_QArrayData::deallocate_struct_QArrayData___unsigned_int__unsigned_int_
add esp, 0xc
mov ecx, dword [esp + 0x34]
mov esi, dword [esp + 0x30]
mov dword [esi], ecx
inc dword [ecx + 0xc]
lea ecx, [esp + 0x1c]
mov dword [esp + 0x18], 1
mov byte [esp + 0x28], 1
call sym.Qt5Core.dll_public:_void___thiscall_QDebugStateSaver::destructor_void_
lea ecx, [esp + 0x34]
mov byte [esp + 0x28], 0
call sym.Qt5Core.dll_public:_void___thiscall_QDebug::destructor_void_
mov eax, esi
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x20
ret
Function at 0x6704b660
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6722b996
mov eax, dword fs:[0]
push eax
sub esp, 0x30
mov eax, dword [0x67463180]
xor eax, esp
mov dword [esp + 0x2c], eax
push esi
push edi
mov eax, dword [0x67463180]
xor eax, esp
push eax
lea eax, [esp + 0x3c]
mov dword fs:[0], eax
mov esi, dword [esp + 0x4c]
lea eax, [esp + 0x28]
xorps xmm0, xmm0
mov dword [esp + 0x24], esi
push eax
mov dword [esp + 0x14], 0
movdqu xmmword [esp + 0x2c], xmm0
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [esp + 0x2e]
push eax
movzx eax, word [esp + 0x2e]
push eax
movzx eax, word [esp + 0x30]
push eax
call fcn.6704e250
mov dword [esp + 0x20], eax
movzx eax, word [esp + 0x3c]
mov ecx, eax
mov dword [esp + 0x24], edx
shl ecx, 4
sub ecx, eax
movzx eax, word [esp + 0x3e]
push 0x20
lea eax, [eax + ecx*4]
mov ecx, eax
shl ecx, 4
sub ecx, eax
movzx eax, word [esp + 0x44]
lea eax, [eax + ecx*4]
imul ecx, eax, 0x3e8
movzx eax, word [esp + 0x46]
add ecx, eax
mov dword [esp + 0x2c], ecx
call fcn.67226c32
mov edi, eax
add esp, 0x10
mov dword [esp + 0xc], edi
mov dword [esp + 0x44], 0
test edi, edi
je 0x6704b79f
mov dword [edi], 0
lea ecx, [edi + 0x18]
mov dword [edi + 8], 0
mov dword [edi + 0xc], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
call sym.Qt5Core.dll_public:_void___thiscall_QMetaObject::Connection::constructor_void_
mov dword [edi + 0x1c], 0
lea ecx, [esp + 0x20]
and dword [edi + 0x1c], 0xffffff2f
mov byte [esp + 0x44], 1
call sym.Qt5Core.dll_public:_void___thiscall_QMetaObject::Connection::constructor_void_
mov ecx, dword [edi + 0x18]
mov edx, eax
mov eax, dword [edx]
mov dword [edi + 0x18], eax
mov dword [edx], ecx
lea ecx, [esp + 0x20]
call sym.Qt5Core.dll_public:_void___thiscall_QTimeZone::destructor_void_
lea eax, [esp + 0x1c]
mov dword [edi + 0x10], 0
push eax
lea eax, [esp + 0x18]
mov dword [edi + 0x14], 0
push eax
mov ecx, edi
call fcn.6704fb80
jmp 0x6704b7a1
xor edi, edi
mov dword [esi], edi
test edi, edi
je 0x6704b7b0
mov ecx, 1
lock xadd dword [edi], ecx
mov eax, esi
mov ecx, dword [esp + 0x3c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x2c]
xor ecx, esp
call fcn.67226d38
add esp, 0x3c
ret
Function at 0x6704b7d0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6722b996
mov eax, dword fs:[0]
push eax
sub esp, 0x30
mov eax, dword [0x67463180]
xor eax, esp
mov dword [esp + 0x2c], eax
push esi
push edi
mov eax, dword [0x67463180]
xor eax, esp
push eax
lea eax, [esp + 0x3c]
mov dword fs:[0], eax
mov esi, dword [esp + 0x4c]
lea eax, [esp + 0x28]
xorps xmm0, xmm0
mov dword [esp + 0x24], esi
push eax
mov dword [esp + 0x14], 0
movdqu xmmword [esp + 0x2c], xmm0
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
movzx eax, word [esp + 0x2e]
push eax
movzx eax, word [esp + 0x2e]
push eax
movzx eax, word [esp + 0x30]
push eax
call fcn.6704e250
mov dword [esp + 0x20], eax
movzx eax, word [esp + 0x3c]
mov ecx, eax
mov dword [esp + 0x24], edx
shl ecx, 4
sub ecx, eax
movzx eax, word [esp + 0x3e]
push 0x20
lea eax, [eax + ecx*4]
mov ecx, eax
shl ecx, 4
sub ecx, eax
movzx eax, word [esp + 0x44]
lea eax, [eax + ecx*4]
imul ecx, eax, 0x3e8
movzx eax, word [esp + 0x46]
add ecx, eax
mov dword [esp + 0x2c], ecx
call fcn.67226c32
mov edi, eax
add esp, 0x10
mov dword [esp + 0xc], edi
mov dword [esp + 0x44], 0
test edi, edi
je 0x6704b90f
mov dword [edi], 0
lea ecx, [edi + 0x18]
mov dword [edi + 8], 0
mov dword [edi + 0xc], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
call sym.Qt5Core.dll_public:_void___thiscall_QMetaObject::Connection::constructor_void_
mov dword [edi + 0x1c], 0
lea ecx, [esp + 0x20]
and dword [edi + 0x1c], 0xffffff2f
mov byte [esp + 0x44], 1
call sym.Qt5Core.dll_public:_void___thiscall_QMetaObject::Connection::constructor_void_
mov ecx, dword [edi + 0x18]
mov edx, eax
mov eax, dword [edx]
mov dword [edi + 0x18], eax
mov dword [edx], ecx
lea ecx, [esp + 0x20]
call sym.Qt5Core.dll_public:_void___thiscall_QTimeZone::destructor_void_
lea eax, [esp + 0x1c]
mov dword [edi + 0x10], 1
push eax
lea eax, [esp + 0x18]
mov dword [edi + 0x14], 0
push eax
mov ecx, edi
call fcn.6704fb80
jmp 0x6704b911
xor edi, edi
mov dword [esi], edi
test edi, edi
je 0x6704b920
mov ecx, 1
lock xadd dword [edi], ecx
mov eax, esi
mov ecx, dword [esp + 0x3c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x2c]
xor ecx, esp
call fcn.67226d38
add esp, 0x3c
ret