joyce8/EMBER2024-capa huggingface dataset:
Function at 0x598830
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e7d18
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x62fda0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x62fda0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f3a20
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fbcd0
push edi
lea edx, [esp + 0x30]
push esi
push edx
mov dword [esp + 0x54], 0
call fcn.005c4440
add esp, 0xc
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fc5f0
mov eax, esi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bd2c6
add esp, 0x40
ret

Function at 0x5988d0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e7d18
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x62fda0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x62fda0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f3a20
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fbcd0
push edi
lea edx, [esp + 0x30]
push esi
push edx
mov dword [esp + 0x54], 0
call fcn.005c4480
add esp, 0xc
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fc5f0
mov eax, esi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bd2c6
add esp, 0x40
ret

Function at 0x598970
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e7d18
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x62fda0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x62fda0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f3a20
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fbcd0
push edi
lea edx, [esp + 0x30]
push esi
push edx
mov dword [esp + 0x54], 0
call fcn.005c44c0
add esp, 0xc
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fc5f0
mov eax, esi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bd2c6
add esp, 0x40
ret
Function at 0x598a10
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e7d18
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x62fda0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x62fda0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f3a20
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fbcd0
push edi
lea edx, [esp + 0x30]
push esi
push edx
mov dword [esp + 0x54], 0
call fcn.005c4500
add esp, 0xc
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fc5f0
mov eax, esi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bd2c6
add esp, 0x40
ret

Function at 0x598ab0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e7d18
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x62fda0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x62fda0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f3a20
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fbcd0
push edi
lea edx, [esp + 0x30]
push esi
push edx
mov dword [esp + 0x54], 0
call fcn.005c4560
add esp, 0xc
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fc5f0
mov eax, esi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bd2c6
add esp, 0x40
ret

Function at 0x598b50
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e7d18
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x62fda0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x62fda0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f3a20
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fbcd0
push edi
lea edx, [esp + 0x30]
push esi
push edx
mov dword [esp + 0x54], 0
call fcn.005c45a0
add esp, 0xc
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fc5f0
mov eax, esi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bd2c6
add esp, 0x40
ret
Function at 0x598bf0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e7d18
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x62fda0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x62fda0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f3a20
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fbcd0
push edi
lea edx, [esp + 0x30]
push esi
push edx
mov dword [esp + 0x54], 0
call fcn.005c45e0
add esp, 0xc
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fc5f0
mov eax, esi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bd2c6
add esp, 0x40
ret

Function at 0x598c90
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e7d18
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x62fda0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x62fda0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f3a20
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fbcd0
push edi
lea edx, [esp + 0x30]
push esi
push edx
mov dword [esp + 0x54], 0
call fcn.005c46e0
add esp, 0xc
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fc5f0
mov eax, esi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bd2c6
add esp, 0x40
ret

Function at 0x598d30
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e7d18
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x62fda0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x62fda0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f3a20
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fbcd0
push edi
lea edx, [esp + 0x30]
push esi
push edx
mov dword [esp + 0x54], 0
call fcn.00596170
add esp, 0xc
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fc5f0
mov eax, esi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bd2c6
add esp, 0x40
ret
Function at 0x598dd0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e7d18
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x62fda0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x62fda0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f3a20
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fbcd0
push edi
lea edx, [esp + 0x30]
push esi
push edx
mov dword [esp + 0x54], 0
call fcn.00596340
add esp, 0xc
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fc5f0
mov eax, esi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bd2c6
add esp, 0x40
ret

Function at 0x598e70
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e7d18
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x62fda0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x62fda0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f3a20
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fbcd0
push edi
lea edx, [esp + 0x30]
push esi
push edx
mov dword [esp + 0x54], 0
call fcn.005a3880
add esp, 0xc
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fc5f0
mov eax, esi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bd2c6
add esp, 0x40
ret

Function at 0x598f10
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e7d18
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x62fda0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x62fda0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f3a20
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fbcd0
push edi
lea edx, [esp + 0x30]
push esi
push edx
mov dword [esp + 0x54], 0
call fcn.005a2840
add esp, 0xc
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fc5f0
mov eax, esi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bd2c6
add esp, 0x40
ret
Function at 0x598fb0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e7d18
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x62fda0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x62fda0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f3a20
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fbcd0
push edi
lea edx, [esp + 0x30]
push esi
push edx
mov dword [esp + 0x54], 0
call fcn.005a4cc0
add esp, 0xc
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fc5f0
mov eax, esi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bd2c6
add esp, 0x40
ret

Function at 0x599050
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e7d18
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x62fda0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x62fda0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f3a20
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fbcd0
mov ecx, esi
mov dword [esp + 0x48], 0
call fcn.005348a0
mov esi, eax
push edi
lea edx, [esp + 0x30]
push esi
push edx
call fcn.005a2840
add esp, 0xc
mov edi, eax
test esi, esi
je 0x5990d6
mov eax, dword [esi]
mov edx, dword [eax]
push 1
mov ecx, esi
call edx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x48], 0xffffffff
call fcn.004fc5f0
mov eax, edi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bd2c6
add esp, 0x40
ret

Function at 0x599110
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e7d18
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x62fda0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x62fda0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f3a20
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fbcd0
push edi
lea edx, [esp + 0x30]
push esi
push edx
mov dword [esp + 0x54], 0
call fcn.00596400
add esp, 0xc
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fc5f0
mov eax, esi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bd2c6
add esp, 0x40
ret
Function at 0x5991b0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e7d18
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x62fda0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x62fda0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f3a20
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fbcd0
push edi
lea edx, [esp + 0x30]
push esi
push edx
mov dword [esp + 0x54], 0
call fcn.005964b0
add esp, 0xc
lea ecx, [esp + 0x2c]
mov esi, eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fc5f0
mov eax, esi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bd2c6
add esp, 0x40
ret

Function at 0x599950
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e7bf8
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push esi
push edi
mov eax, dword [0x62fda0]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
lea ecx, [esp + 0xc]
call fcn.004f6d60
mov ecx, dword [esp + 0x34]
lea eax, [esp + 0xc]
push eax
mov dword [esp + 0x30], 0
call fcn.004f4f10
mov ecx, dword [esp + 0x38]
call fcn.005348a0
mov ecx, dword [esp + 0x3c]
push ecx
mov esi, eax
lea edx, [esp + 0x10]
push esi
push edx
call fcn.005a2750
add esp, 0xc
mov edi, eax
test esi, esi
je 0x5999c2
mov eax, dword [esi]
mov edx, dword [eax]
push 1
mov ecx, esi
call edx
lea ecx, [esp + 0xc]
mov dword [esp + 0x2c], 0xffffffff
call fcn.004f6e00
mov eax, edi
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x24
ret
Function at 0x59d590
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e5ed1
mov eax, dword fs:[0]
push eax
sub esp, 0x134
push esi
push edi
mov eax, dword [0x62fda0]
xor eax, esp
push eax
lea eax, [esp + 0x140]
mov dword fs:[0], eax
mov esi, dword [esp + 0x150]
mov eax, dword [esi + 0x24]
cmp eax, dword [esi + 0x28]
je 0x59d692
push fcn.0045c490
push fcn.00568b40
push 0x12
push 0x10
lea ecx, [esp + 0x30]
push ecx
call fcn.005bd55c
lea edx, [esp + 0x20]
push edx
mov ecx, esi
mov dword [esp + 0x14c], 0
call fcn.0051a8a0
push eax
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x14]
call fcn.00582c90
mov esi, dword [esp + 0x158]
mov edx, dword [esp + 0x154]
push esi
lea ecx, [esp + 0x10]
push ecx
push edx
mov byte [esp + 0x154], 1
call fcn.005a2d00
mov edx, dword [esi + 8]
mov ecx, dword [esi + 4]
mov edi, eax
mov eax, dword [esi]
mov dword [esi], edx
mov edx, dword [esi + 0xc]
mov dword [esi + 4], edx
mov dword [esi + 0xc], ecx
add esp, 0xc
lea ecx, [esp + 0xc]
mov dword [esi + 8], eax
mov byte [esp + 0x148], 0
call fcn.00582cc0
push fcn.0045c490
push 0x12
push 0x10
lea eax, [esp + 0x2c]
push eax
mov dword [esp + 0x158], 0xffffffff
call fcn.005bd4f9
mov eax, edi
mov ecx, dword [esp + 0x140]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x140
ret
mov ecx, dword [esp + 0x154]
call fcn.005348a0
mov ecx, dword [esp + 0x158]
push ecx
mov edi, eax
push edi
push esi
call fcn.005a2f80
add esp, 0xc
mov esi, eax
test edi, edi
je 0x59d6c2
mov edx, dword [edi]
mov eax, dword [edx]
push 1
mov ecx, edi
call eax
mov eax, esi
mov ecx, dword [esp + 0x140]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x140
ret

Function at 0x59e160
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e7d18
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x62fda0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x62fda0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov edi, dword [esp + 0x54]
mov esi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f3a20
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fbcd0
push esi
lea edx, [esp + 0x30]
push edx
push edi
mov dword [esp + 0x54], 0
call fcn.00598bf0
mov edx, dword [esi + 8]
mov ecx, dword [esi + 4]
mov edi, eax
mov eax, dword [esi]
mov dword [esi], edx
mov edx, dword [esi + 0xc]
mov dword [esi + 4], edx
mov dword [esi + 0xc], ecx
add esp, 0xc
lea ecx, [esp + 0x2c]
mov dword [esi + 8], eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fc5f0
mov eax, edi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bd2c6
add esp, 0x40
ret
Function at 0x59e220
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e7d18
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x62fda0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x62fda0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov edi, dword [esp + 0x54]
mov esi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f3a20
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fbcd0
push esi
lea edx, [esp + 0x30]
push edx
push edi
mov dword [esp + 0x54], 0
call fcn.005995d0
mov edx, dword [esi + 8]
mov ecx, dword [esi + 4]
mov edi, eax
mov eax, dword [esi]
mov dword [esi], edx
mov edx, dword [esi + 0xc]
mov dword [esi + 4], edx
mov dword [esi + 0xc], ecx
add esp, 0xc
lea ecx, [esp + 0x2c]
mov dword [esi + 8], eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fc5f0
mov eax, edi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bd2c6
add esp, 0x40
ret

Function at 0x59e2e0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e7d18
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x62fda0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x62fda0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov edi, dword [esp + 0x54]
mov esi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f3a20
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fbcd0
push esi
lea edx, [esp + 0x30]
push edx
push edi
mov dword [esp + 0x54], 0
call fcn.00599f50
mov edx, dword [esi + 8]
mov ecx, dword [esi + 4]
mov edi, eax
mov eax, dword [esi]
mov dword [esi], edx
mov edx, dword [esi + 0xc]
mov dword [esi + 4], edx
mov dword [esi + 0xc], ecx
add esp, 0xc
lea ecx, [esp + 0x2c]
mov dword [esi + 8], eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fc5f0
mov eax, edi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bd2c6
add esp, 0x40
ret
Function at 0x59e3a0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e7d18
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x62fda0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x62fda0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x50]
mov edi, dword [esp + 0x54]
mov esi, dword [esp + 0x58]
lea eax, [esp + 0xc]
push eax
call fcn.004f3a20
push 4
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x34]
call fcn.004fbcd0
push esi
lea edx, [esp + 0x30]
push edx
push edi
mov dword [esp + 0x54], 0
call fcn.0059a950
mov edx, dword [esi + 8]
mov ecx, dword [esi + 4]
mov edi, eax
mov eax, dword [esi]
mov dword [esi], edx
mov edx, dword [esi + 0xc]
mov dword [esi + 4], edx
mov dword [esi + 0xc], ecx
add esp, 0xc
lea ecx, [esp + 0x2c]
mov dword [esi + 8], eax
mov dword [esp + 0x48], 0xffffffff
call fcn.004fc5f0
mov eax, edi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.005bd2c6
add esp, 0x40
ret

Function at 0x59e460
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e7bf8
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push esi
push edi
mov eax, dword [0x62fda0]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
lea ecx, [esp + 0xc]
call fcn.004f6d60
mov ecx, dword [esp + 0x34]
lea eax, [esp + 0xc]
push eax
mov dword [esp + 0x30], 0
call fcn.004f4f10
mov esi, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
push esi
lea ecx, [esp + 0x10]
push ecx
push edx
call fcn.00598b50
mov edx, dword [esi + 8]
mov ecx, dword [esi + 4]
mov edi, eax
mov eax, dword [esi]
mov dword [esi], edx
mov edx, dword [esi + 0xc]
mov dword [esi + 4], edx
mov dword [esi + 0xc], ecx
add esp, 0xc
lea ecx, [esp + 0xc]
mov dword [esi + 8], eax
mov dword [esp + 0x2c], 0xffffffff
call fcn.004f6e00
mov eax, edi
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x24
ret

Function at 0x59e500
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5e7bf8
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push esi
push edi
mov eax, dword [0x62fda0]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
lea ecx, [esp + 0xc]
call fcn.004f6d60
mov ecx, dword [esp + 0x34]
lea eax, [esp + 0xc]
push eax
mov dword [esp + 0x30], 0
call fcn.004f4f10
mov esi, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
push esi
lea ecx, [esp + 0x10]
push ecx
push edx
call fcn.00599550
mov edx, dword [esi + 8]
mov ecx, dword [esi + 4]
mov edi, eax
mov eax, dword [esi]
mov dword [esi], edx
mov edx, dword [esi + 0xc]
mov dword [esi + 4], edx
mov dword [esi + 0xc], ecx
add esp, 0xc
lea ecx, [esp + 0xc]
mov dword [esi + 8], eax
mov dword [esp + 0x2c], 0xffffffff
call fcn.004f6e00
mov eax, edi
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x24
ret