joyce8/EMBER2024-capa huggingface dataset:
Function at 0x430005
Capabilities:
Encode data using xor

Disassembly:
pushal
mov eax, section..text
nop
mov ebx, 0x408ecc
nop
mov ecx, 0x76b84d18
nop
nop
test eax, eax
nop
nop
nop
nop
nop
je 0x43004e
nop
nop
nop
xor dword [eax], ecx
nop
nop
nop
inc eax
nop
nop
nop
nop
nop
nop
nop
inc eax
nop
nop
nop
nop
nop
nop
nop
nop
inc eax
nop
inc eax
nop
nop
nop
nop
nop
nop
nop
nop
cmp eax, ebx
nop
jne 0x430024
nop
nop
nop
mov eax, section..rdata
nop
mov ebx, 0x42e1d0
nop
mov ecx, 0x25da2d80
nop
nop
nop
nop
nop
test eax, eax
nop
je 0x430084
nop
nop
nop
xor dword [eax], ecx
nop
nop
nop
nop
nop
nop
nop
add eax, 4
nop
nop
nop
nop
cmp eax, ebx
jne 0x43006c
nop
nop
nop
nop
nop
nop
popal
nop
nop
nop
jmp 0x401219
Function at 0x10008a10
Capabilities:
Access peb ldr_data
Get process heap flags

Disassembly:
push 0xffffffffffffffff
push 0x100f4ccb
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push esi
push edi
mov eax, dword [0x1012fdf0]
xor eax, esp
push eax
lea eax, [esp + 0x18]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x14], esi
lea ecx, [esi + 4]
mov dword [esi], vtable.std::basic_streambuf_char__struct_std::char_traits_char__.0
call fcn.100581a0
push 4
mov dword [esp + 0x24], 0
call fcn.100b31e6
mov edi, eax
add esp, 4
test edi, edi
je 0x10008a92
call fcn.10057d79
mov dword [edi], eax
call fcn.10057b7d
push 0
lea ecx, [esp + 0x14]
mov ebx, eax
call fcn.10057fcc
mov eax, dword [ebx + 4]
cmp eax, 0xffffffff
jae 0x10008a87
inc eax
mov dword [ebx + 4], eax
lea ecx, [esp + 0x10]
call fcn.10057ff5
jmp 0x10008a94
xor edi, edi
lea eax, [esi + 8]
mov dword [esi + 0x10], eax
lea ecx, [esi + 0x18]
mov dword [esi + 0x20], ecx
lea edx, [esi + 0x1c]
mov dword [esi + 0x24], edx
mov dword [esi + 0x38], edi
lea eax, [esi + 0xc]
mov dword [esi + 0x14], eax
lea ecx, [esi + 0x28]
mov dword [esi + 0x30], ecx
lea edx, [esi + 0x2c]
mov dword [esi + 0x34], edx
mov dword [eax], 0
mov eax, dword [esi + 0x24]
mov dword [eax], 0
mov ecx, dword [esi + 0x34]
mov dword [ecx], 0
mov edx, dword [esi + 0x10]
mov dword [edx], 0
mov eax, dword [esi + 0x20]
mov dword [eax], 0
mov ecx, dword [esi + 0x30]
mov dword [ecx], 0
mov eax, esi
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add esp, 0x14
ret

Function at 0x10008c20
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x100f5da4
mov eax, dword fs:[0]
push eax
push ecx
push esi
mov eax, dword [0x1012fdf0]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
mov esi, dword [esp + 0x1c]
mov dword [esp + 8], 0
mov dword [esi + 0x28], 0x10108c14
mov dword [esi + 0x30], vtable.boost::exception_detail::clone_base.0
mov dword [esp + 0x14], 0
push edi
mov ecx, esi
mov dword [esp + 0xc], 1
call fcn.10007fb0
mov dword [esp + 0x14], 1
mov eax, dword [esi + 0x28]
mov dword [esi], vtable.boost::exception_detail::clone_impl_struct_boost::exception_detail::error_info_injector_class_boost::io::bad_format_string__.0
mov dword [esi + 0x14], vtable.boost::exception_detail::clone_impl_struct_boost::exception_detail::error_info_injector_class_boost::io::bad_format_string__.1.0
mov edx, dword [eax + 4]
lea ecx, [esi + 0x14]
mov dword [edx + esi + 0x28], vtable.boost::exception_detail::clone_impl_struct_boost::exception_detail::error_info_injector_class_boost::io::bad_format_string__.2.0
mov eax, dword [esi + 0x28]
mov eax, dword [eax + 4]
lea edx, [eax - 8]
mov dword [eax + esi + 0x24], edx
test edi, edi
je 0x10008cb0
lea eax, [edi + 0x14]
jmp 0x10008cb2
xor eax, eax
push eax
push ecx
call fcn.10002730
add esp, 8
mov eax, esi
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x10
ret 8
Function at 0x1000c730
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x100f5c04
mov eax, dword fs:[0]
push eax
push ecx
push esi
mov eax, dword [0x1012fdf0]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
mov esi, dword [esp + 0x1c]
mov dword [esp + 8], 0
mov dword [esi + 0x28], 0x10108c14
mov dword [esi + 0x30], vtable.boost::exception_detail::clone_base.0
mov dword [esp + 0x14], 0
push edi
mov ecx, esi
mov dword [esp + 0xc], 1
call fcn.10007fb0
mov dword [esp + 0x14], 1
mov eax, dword [esi + 0x28]
mov dword [esi], vtable.boost::exception_detail::clone_impl_struct_boost::exception_detail::error_info_injector_class_boost::io::bad_format_string__.0
mov dword [esi + 0x14], vtable.boost::exception_detail::clone_impl_struct_boost::exception_detail::error_info_injector_class_boost::io::bad_format_string__.1.0
mov edx, dword [eax + 4]
lea ecx, [esi + 0x14]
mov dword [edx + esi + 0x28], vtable.boost::exception_detail::clone_impl_struct_boost::exception_detail::error_info_injector_class_boost::io::bad_format_string__.2.0
mov eax, dword [esi + 0x28]
mov eax, dword [eax + 4]
lea edx, [eax - 8]
mov dword [eax + esi + 0x24], edx
test edi, edi
je 0x1000c7c0
lea eax, [edi + 0x14]
jmp 0x1000c7c2
xor eax, eax
push eax
push ecx
call fcn.10002730
add esp, 8
mov eax, esi
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x10
ret 4

Function at 0x1000d680
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x100f5ac4
mov eax, dword fs:[0]
push eax
push ecx
push esi
mov eax, dword [0x1012fdf0]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
mov esi, dword [esp + 0x1c]
mov dword [esp + 8], 0
mov dword [esi + 0x28], 0x10108c54
mov dword [esi + 0x30], vtable.boost::exception_detail::clone_base.0
mov dword [esp + 0x14], 0
push edi
mov ecx, esi
mov dword [esp + 0xc], 1
call fcn.1000c050
mov dword [esp + 0x14], 1
mov eax, dword [esi + 0x28]
mov dword [esi], vtable.boost::exception_detail::clone_impl_struct_boost::exception_detail::error_info_injector_class_boost::io::too_few_args__.0
mov dword [esi + 0x14], vtable.boost::exception_detail::clone_impl_struct_boost::exception_detail::error_info_injector_class_boost::io::too_few_args__.1.0
mov edx, dword [eax + 4]
lea ecx, [esi + 0x14]
mov dword [edx + esi + 0x28], vtable.boost::exception_detail::clone_impl_struct_boost::exception_detail::error_info_injector_class_boost::io::too_few_args__.2.0
mov eax, dword [esi + 0x28]
mov eax, dword [eax + 4]
lea edx, [eax - 8]
mov dword [eax + esi + 0x24], edx
test edi, edi
je 0x1000d710
lea eax, [edi + 0x14]
jmp 0x1000d712
xor eax, eax
push eax
push ecx
call fcn.10002730
add esp, 8
mov eax, esi
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x10
ret 8
Function at 0x1000e300
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x100f8a00
mov eax, dword fs:[0]
push eax
sub esp, 0x6c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x1012fdf0]
xor eax, esp
push eax
lea eax, [esp + 0x80]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x90]
lea eax, [esp + 0x14]
push eax
mov eax, ebp
call fcn.1000e220
xor ebx, ebx
push eax
mov dword [esp + 0x8c], ebx
call fcn.10006e50
mov edx, dword [eax]
add esp, 4
mov ecx, eax
mov eax, dword [edx + 0x18]
push 0x20
call eax
mov dword [esp + 0x88], 0xffffffff
mov edi, dword [esp + 0x14]
mov byte [esp + 0x90], al
cmp edi, ebx
je 0x1000e3b0
push ebx
lea ecx, [esp + 0x1c]
call fcn.10057fcc
mov eax, dword [edi + 4]
cmp eax, ebx
jbe 0x1000e38e
cmp eax, 0xffffffff
jae 0x1000e38e
dec eax
mov dword [edi + 4], eax
mov esi, dword [edi + 4]
neg esi
sbb esi, esi
not esi
lea ecx, [esp + 0x18]
and esi, edi
call fcn.10057ff5
cmp esi, ebx
je 0x1000e3b0
mov edx, dword [esi]
mov eax, dword [edx]
push 1
mov ecx, esi
call eax
mov ecx, dword [ebp + 0x10]
sub ecx, dword [ebp + 0xc]
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x1000e45c
mov cl, byte [esp + 0x90]
mov eax, 0xf
or esi, 0xffffffff
mov dword [esp + 0x1c], esi
mov dword [esp + 0x38], eax
mov dword [esp + 0x34], ebx
mov byte [esp + 0x24], bl
mov dword [esp + 0x54], eax
mov dword [esp + 0x50], ebx
mov byte [esp + 0x40], bl
mov byte [esp + 0x70], bl
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], 6
mov byte [esp + 0x60], cl
mov dword [esp + 0x64], 0x201
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x78], 0x7fffffff
mov dword [esp + 0x7c], ebx
mov eax, dword [esp + 0x94]
lea edx, [esp + 0x1c]
push edx
push eax
mov ecx, ebp
mov dword [esp + 0x90], 1
call fcn.10010da0
mov dword [esp + 0x88], esi
lea esi, [esp + 0x1c]
call fcn.1000bf10
jmp 0x1000e519
mov esi, dword [esp + 0x94]
cmp esi, eax
jbe 0x1000e486
mov ecx, dword [esp + 0x90]
sub esp, 0x64
mov eax, esp
mov dword [esp + 0x7c], esp
push ecx
call fcn.1000c690
mov ecx, esi
mov edx, ebp
call fcn.1000c440
lea edi, [ebp + 0x18]
call fcn.100101e0
xor edi, edi
cmp esi, ebx
jbe 0x1000e519
mov dword [esp + 0x14], ebx
mov ecx, dword [ebp + 0x10]
sub ecx, dword [ebp + 0xc]
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x1000e4bc
call fcn.100b308d
mov esi, dword [ebp + 0xc]
add esi, dword [esp + 0x14]
push 0xffffffffffffffff
push ebx
lea ecx, [esi + 4]
mov dword [esi], 0xffffffff
mov dword [esi + 0x5c], 0x7fffffff
mov dword [esi + 0x60], ebx
call fcn.10005db0
push 0xffffffffffffffff
push ebx
lea ecx, [esi + 0x20]
call fcn.10005db0
mov cl, byte [esp + 0x90]
add dword [esp + 0x14], 0x64
inc edi
mov dword [esi + 0x3c], ebx
mov dword [esi + 0x40], 6
mov byte [esi + 0x44], cl
mov dword [esi + 0x48], 0x201
mov dword [esi + 0x50], ebx
mov dword [esi + 0x4c], ebx
cmp edi, dword [esp + 0x94]
jb 0x1000e49c
push 0xffffffffffffffff
push ebx
lea ecx, [ebp + 0x4c]
call fcn.10005db0
mov ecx, dword [esp + 0x80]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x78
ret 8
Function at 0x10010360
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x100f5a14
mov eax, dword fs:[0]
push eax
push ecx
push esi
mov eax, dword [0x1012fdf0]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
mov esi, dword [esp + 0x1c]
mov dword [esp + 8], 0
mov dword [esi + 0x28], 0x10108c54
mov dword [esi + 0x30], vtable.boost::exception_detail::clone_base.0
mov dword [esp + 0x14], 0
push edi
mov ecx, esi
mov dword [esp + 0xc], 1
call fcn.1000c050
mov dword [esp + 0x14], 1
mov eax, dword [esi + 0x28]
mov dword [esi], vtable.boost::exception_detail::clone_impl_struct_boost::exception_detail::error_info_injector_class_boost::io::too_few_args__.0
mov dword [esi + 0x14], vtable.boost::exception_detail::clone_impl_struct_boost::exception_detail::error_info_injector_class_boost::io::too_few_args__.1.0
mov edx, dword [eax + 4]
lea ecx, [esi + 0x14]
mov dword [edx + esi + 0x28], vtable.boost::exception_detail::clone_impl_struct_boost::exception_detail::error_info_injector_class_boost::io::too_few_args__.2.0
mov eax, dword [esi + 0x28]
mov eax, dword [eax + 4]
lea edx, [eax - 8]
mov dword [eax + esi + 0x24], edx
test edi, edi
je 0x100103f0
lea eax, [edi + 0x14]
jmp 0x100103f2
xor eax, eax
push eax
push ecx
call fcn.10002730
add esp, 8
mov eax, esi
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x10
ret 4

Function at 0x10010f70
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x100f59a4
mov eax, dword fs:[0]
push eax
push ecx
push esi
mov eax, dword [0x1012fdf0]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
mov esi, dword [esp + 0x1c]
mov dword [esp + 8], 0
mov dword [esi + 0x28], 0x10108c94
mov dword [esi + 0x30], vtable.boost::exception_detail::clone_base.0
mov dword [esp + 0x14], 0
push edi
mov ecx, esi
mov dword [esp + 0xc], 1
call fcn.1000ff60
mov dword [esp + 0x14], 1
mov eax, dword [esi + 0x28]
mov dword [esi], vtable.boost::exception_detail::clone_impl_struct_boost::exception_detail::error_info_injector_class_boost::bad_lexical_cast__.0
mov dword [esi + 0x14], vtable.boost::exception_detail::clone_impl_struct_boost::exception_detail::error_info_injector_class_boost::bad_lexical_cast__.1.0
mov edx, dword [eax + 4]
lea ecx, [esi + 0x14]
mov dword [edx + esi + 0x28], vtable.boost::exception_detail::clone_impl_struct_boost::exception_detail::error_info_injector_class_boost::bad_lexical_cast__.2.0
mov eax, dword [esi + 0x28]
mov eax, dword [eax + 4]
lea edx, [eax - 8]
mov dword [eax + esi + 0x24], edx
test edi, edi
je 0x10011000
lea eax, [edi + 0x14]
jmp 0x10011002
xor eax, eax
push eax
push ecx
call fcn.10002730
add esp, 8
mov eax, esi
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x10
ret 8
Function at 0x10012330
Capabilities:
Get number of processors

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x100f8988
mov eax, dword fs:[0]
push eax
sub esp, 0x24
push ebx
push edi
mov eax, dword [0x1012fdf0]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
mov edi, dword [esi + 0x40]
mov ebx, dword [esi + 0x44]
cmp edi, ebx
jl 0x10012399
test byte [esi + 0x68], 4
je 0x1001247e
lea ecx, [esp + 0x18]
call fcn.100b26fd
mov dword [esp + 0x18], vtable.boost::io::too_many_args.0
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], ebx
lea ecx, [esp + 0x18]
mov dword [esp + 0x38], 0
call fcn.100137b0
mov ecx, dword [esi + 0x10]
sub ecx, dword [esi + 0xc]
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
xor edi, edi
add eax, edx
je 0x1001247e
mov dword [esp + 0x10], edi
cmp edi, eax
jb 0x100123c5
call fcn.100b308d
mov eax, dword [esi + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [ecx + eax]
cmp edx, dword [esi + 0x40]
jne 0x10012459
cmp byte [esi + 0xb8], 0
je 0x100123ed
lea ecx, [esi + 0xbc]
mov dword [esp + 0x14], ecx
jmp 0x100123f5
mov dword [esp + 0x14], 0
mov ecx, dword [esi + 0x10]
sub ecx, eax
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x10012414
call fcn.100b308d
mov ebx, dword [esi + 0xc]
mov ecx, dword [esi + 0x10]
sub ecx, ebx
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp edi, ecx
jb 0x10012436
call fcn.100b308d
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
push edx
lea edx, [eax + ebx + 4]
push edx
mov edx, dword [esi + 0xc]
add edx, eax
mov eax, dword [ebp + 8]
push edx
lea ecx, [esi + 0x6c]
push eax
call fcn.10013820
add esp, 0x10
mov ecx, dword [esi + 0x10]
sub ecx, dword [esi + 0xc]
add dword [esp + 0x10], 0x64
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
inc edi
add eax, edx
cmp edi, eax
jb 0x100123c5
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop edi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x100131c0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x100f5918
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x1012fdf0]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0xc], esi
mov edi, dword [esp + 0x20]
push edi
call fcn.10001830
mov dword [esi], vtable.boost::bad_function_call.0
mov dword [esp + 0x18], 0
test edi, edi
je 0x1001320a
add edi, 0x28
jmp 0x1001320c
xor edi, edi
mov dword [esi + 0x28], vtable.boost::exception.0
mov ecx, dword [edi + 4]
mov dword [esi + 0x2c], ecx
test ecx, ecx
je 0x10013224
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
call edx
mov eax, dword [edi + 8]
mov dword [esi + 0x30], eax
mov ecx, dword [edi + 0xc]
mov dword [esi + 0x34], ecx
mov edx, dword [edi + 0x10]
mov dword [esi + 0x38], edx
mov dword [esi], vtable.boost::exception_detail::error_info_injector_class_boost::bad_function_call_.0
mov dword [esi + 0x28], vtable.boost::exception_detail::error_info_injector_class_boost::bad_function_call_.1.0
mov eax, esi
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x10
ret 4

Function at 0x10013400
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x100f58f4
mov eax, dword fs:[0]
push eax
push ecx
push esi
mov eax, dword [0x1012fdf0]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
mov esi, dword [esp + 0x1c]
mov dword [esp + 8], 0
mov dword [esi + 0x28], 0x10108c94
mov dword [esi + 0x30], vtable.boost::exception_detail::clone_base.0
mov dword [esp + 0x14], 0
push edi
mov ecx, esi
mov dword [esp + 0xc], 1
call fcn.1000ff60
mov dword [esp + 0x14], 1
mov eax, dword [esi + 0x28]
mov dword [esi], vtable.boost::exception_detail::clone_impl_struct_boost::exception_detail::error_info_injector_class_boost::bad_lexical_cast__.0
mov dword [esi + 0x14], vtable.boost::exception_detail::clone_impl_struct_boost::exception_detail::error_info_injector_class_boost::bad_lexical_cast__.1.0
mov edx, dword [eax + 4]
lea ecx, [esi + 0x14]
mov dword [edx + esi + 0x28], vtable.boost::exception_detail::clone_impl_struct_boost::exception_detail::error_info_injector_class_boost::bad_lexical_cast__.2.0
mov eax, dword [esi + 0x28]
mov eax, dword [eax + 4]
lea edx, [eax - 8]
mov dword [eax + esi + 0x24], edx
test edi, edi
je 0x10013490
lea eax, [edi + 0x14]
jmp 0x10013492
xor eax, eax
push eax
push ecx
call fcn.10002730
add esp, 8
mov eax, esi
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x10
ret 4
Function at 0x10015340
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x100f8924
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push ebp
push esi
push edi
mov eax, dword [0x1012fdf0]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov esi, ecx
mov edi, dword [esp + 0x34]
xor ebx, ebx
mov dword [esp + 0x18], ebx
lea ebp, [edi + 8]
mov dword [ebp], 0x10108d24
mov dword [edi + 0xc], vtable.std::basic_ios_char__struct_std::char_traits_char__.0
mov dword [esp + 0x2c], ebx
mov byte [esp + 0x1c], bl
mov eax, dword [esp + 0x1c]
push eax
push esi
lea ecx, [edi + 4]
mov dword [esp + 0x20], 1
mov dword [edi], esi
call fcn.100179d0
push esi
push esi
push edi
call fcn.10002910
add esp, 0xc
mov dword [esp + 0x2c], 1
mov ecx, dword [edi]
mov eax, ebp
mov edx, dword [eax]
mov dword [esp + 0x1c], ecx
mov ecx, dword [edx + 4]
mov dword [eax + ecx], vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov edx, dword [eax]
mov esi, dword [edx + 4]
add esi, eax
mov ecx, esi
mov dword [esp + 0x20], eax
call fcn.10002560
mov eax, dword [esp + 0x1c]
push 0x20
mov ecx, esi
mov dword [esi + 0x28], eax
mov dword [esi + 0x2c], ebx
call fcn.100083d0
mov byte [esi + 0x30], al
cmp dword [esi + 0x28], ebx
jne 0x10015407
mov eax, dword [esi + 8]
or eax, 4
push ebx
push eax
mov ecx, esi
call fcn.10002240
mov dword [esi + 4], ebx
mov ecx, dword [ebp]
mov edx, dword [ecx + 4]
mov dword [edx + edi + 8], vtable.boost::io::basic_oaltstringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov eax, edi
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret 4

Function at 0x100154b0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x100f5824
mov eax, dword fs:[0]
push eax
push ecx
push esi
mov eax, dword [0x1012fdf0]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
mov esi, dword [esp + 0x1c]
mov dword [esp + 8], 0
mov dword [esi + 0x28], 0x10108d14
mov dword [esi + 0x30], vtable.boost::exception_detail::clone_base.0
mov dword [esp + 0x14], 0
push edi
mov ecx, esi
mov dword [esp + 0xc], 1
call fcn.10014bd0
mov dword [esp + 0x14], 1
mov eax, dword [esi + 0x28]
mov dword [esi], vtable.boost::exception_detail::clone_impl_struct_boost::exception_detail::error_info_injector_class_boost::io::too_many_args__.0
mov dword [esi + 0x14], vtable.boost::exception_detail::clone_impl_struct_boost::exception_detail::error_info_injector_class_boost::io::too_many_args__.1.0
mov edx, dword [eax + 4]
lea ecx, [esi + 0x14]
mov dword [edx + esi + 0x28], vtable.boost::exception_detail::clone_impl_struct_boost::exception_detail::error_info_injector_class_boost::io::too_many_args__.2.0
mov eax, dword [esi + 0x28]
mov eax, dword [eax + 4]
lea edx, [eax - 8]
mov dword [eax + esi + 0x24], edx
test edi, edi
je 0x10015540
lea eax, [edi + 0x14]
jmp 0x10015542
xor eax, eax
push eax
push ecx
call fcn.10002730
add esp, 8
mov eax, esi
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x10
ret 8
Function at 0x10016e60
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x100f57b4
mov eax, dword fs:[0]
push eax
push ecx
push esi
mov eax, dword [0x1012fdf0]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
mov esi, dword [esp + 0x1c]
mov dword [esp + 8], 0
mov dword [esi + 0x28], 0x10108d14
mov dword [esi + 0x30], vtable.boost::exception_detail::clone_base.0
mov dword [esp + 0x14], 0
push edi
mov ecx, esi
mov dword [esp + 0xc], 1
call fcn.10014bd0
mov dword [esp + 0x14], 1
mov eax, dword [esi + 0x28]
mov dword [esi], vtable.boost::exception_detail::clone_impl_struct_boost::exception_detail::error_info_injector_class_boost::io::too_many_args__.0
mov dword [esi + 0x14], vtable.boost::exception_detail::clone_impl_struct_boost::exception_detail::error_info_injector_class_boost::io::too_many_args__.1.0
mov edx, dword [eax + 4]
lea ecx, [esi + 0x14]
mov dword [edx + esi + 0x28], vtable.boost::exception_detail::clone_impl_struct_boost::exception_detail::error_info_injector_class_boost::io::too_many_args__.2.0
mov eax, dword [esi + 0x28]
mov eax, dword [eax + 4]
lea edx, [eax - 8]
mov dword [eax + esi + 0x24], edx
test edi, edi
je 0x10016ef0
lea eax, [edi + 0x14]
jmp 0x10016ef2
xor eax, eax
push eax
push ecx
call fcn.10002730
add esp, 8
mov eax, esi
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x10
ret 4
Function at 0x10018b40
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x100fadf1
mov eax, dword fs:[0]
push eax
sub esp, 0xa0
mov eax, dword [0x1012fdf0]
xor eax, esp
mov dword [esp + 0x9c], eax
push ebx
push ebp
push esi
mov eax, dword [0x1012fdf0]
xor eax, esp
push eax
lea eax, [esp + 0xb0]
mov dword fs:[0], eax
push 2
xor ebx, ebx
mov ebp, 0xf
push 0x101085f8
lea ecx, [esp + 0x18]
mov esi, 1
mov dword [esp + 0x30], ebp
mov dword [esp + 0x2c], ebx
mov byte [esp + 0x1c], bl
call fcn.10005cd0
push str.._adaptor_cflashtool_api.cpp
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x58]
push ecx
mov dword [esp + 0xc4], ebx
call fcn.10007a10
add esp, 0xc
push str.__line:
push eax
lea edx, [esp + 0x74]
push edx
mov byte [esp + 0xc4], 1
call fcn.10007a10
add esp, 0xc
push 0x10108d74
push eax
lea eax, [esp + 0x3c]
push eax
mov byte [esp + 0xc4], 2
call fcn.10007a10
sub esp, 0x10
mov ecx, esp
mov byte [esp + 0xd4], 3
mov dword [esp + 0x4c], esp
push 0x101085d0
push eax
push ecx
call fcn.10007a10
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x64], esp
mov byte [esp + 0xf0], 4
push 0x24
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push str.cflashtool_api::FlashTool_Disconnect
mov byte [ecx + 4], bl
call fcn.10005cd0
mov ecx, esi
lea edx, [esp + 0xc0]
mov byte [esp + 0xf0], 3
call fcn.1003be80
mov esi, 0x10
cmp dword [esp + 0x4c], esi
jb 0x10018c64
mov edx, dword [esp + 0x38]
push edx
call fcn.100b3111
add esp, 4
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x48], ebx
mov byte [esp + 0x38], bl
cmp dword [esp + 0x84], esi
jb 0x10018c86
mov eax, dword [esp + 0x70]
push eax
call fcn.100b3111
add esp, 4
mov dword [esp + 0x84], ebp
mov dword [esp + 0x80], ebx
mov byte [esp + 0x70], bl
cmp dword [esp + 0x68], esi
jb 0x10018cab
mov ecx, dword [esp + 0x54]
push ecx
call fcn.100b3111
add esp, 4
mov dword [esp + 0xb8], 0xffffffff
mov dword [esp + 0x68], ebp
mov dword [esp + 0x64], ebx
mov byte [esp + 0x54], bl
cmp dword [esp + 0x28], esi
jb 0x10018cd5
mov edx, dword [esp + 0x14]
push edx
call fcn.100b3111
add esp, 4
sub esp, 0x18
mov eax, esp
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov dword [eax + 0x14], ebx
mov eax, dword [edi]
push eax
mov dword [esp + 0x44], ebp
mov dword [esp + 0x40], ebx
mov byte [esp + 0x30], bl
call dword [sym.imp.FlashtoollibEx.dll_flashtool_shutdown_device]
mov ecx, dword [edi]
push ecx
mov esi, eax
call dword [sym.imp.FlashtoollibEx.dll_flashtool_destroy_session]
lea edx, [esp + 0x88]
push edx
call fcn.1003c130
mov eax, esi
mov ecx, dword [esp + 0xb0]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x9c]
xor ecx, esp
call fcn.100b2691
add esp, 0xac
ret