joyce8/EMBER2024-capa huggingface dataset:
Function at 0x407f30
Capabilities:
Terminate process

Disassembly:
push edi
push esi
push ebx
sub esp, 0x20
mov eax, dword [sym.imp.cygwin1.dll___stack_chk_guard]
mov dword [esp + 0x1c], eax
xor eax, eax
mov esi, dword [esp + 0x34]
mov eax, 1
mov ebx, dword [esp + 0x30]
mov edi, dword [esp + 0x38]
test esi, esi
mov dword [ebx], esi
cmovne eax, esi
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [esp + 8], eax
lea eax, [ebx + 4]
mov dword [esp + 4], 0x10
mov dword [esp], eax
call sub.cygwin1.dll_posix_memalign
test eax, eax
jne 0x46cc60
mov eax, dword [ebx + 4]
test eax, eax
je 0x46cc60
mov dword [ebx + 8], eax
test edi, edi
je 0x407fc0
mov edx, dword [esp + 0x1c]
sub edx, dword [sym.imp.cygwin1.dll___stack_chk_guard]
jne 0x407fd3
mov dword [esp + 0x38], esi
mov dword [esp + 0x34], edi
mov dword [esp + 0x30], eax
add esp, 0x20
pop ebx
pop esi
pop edi
jmp fcn.004513c4
mov eax, dword [esp + 0x1c]
sub eax, dword [sym.imp.cygwin1.dll___stack_chk_guard]
jne 0x407fd3
add esp, 0x20
pop ebx
pop esi
pop edi
ret
call sub.cygwin1.dll___stack_chk_fail
lea esi, [esi]
nop
mov dword [esp], 4
call sub.cygstdc_6.dll___cxa_allocate_exception
mov dword [eax], sym.imp.cygstdc_6.dll_operator_delete___void_
mov dword [esp + 8], 0x451048
mov dword [esp + 4], 0x47df84
mov dword [esp], eax
call sub.cygstdc_6.dll___cxa_throw

Function at 0x407fe0
Capabilities:
Terminate process

Disassembly:
push ebx
sub esp, 0x38
mov ebx, dword [esp + 0x40]
mov eax, dword [sym.imp.cygwin1.dll___stack_chk_guard]
mov dword [esp + 0x2c], eax
mov eax, dword [ebx + 0x1c]
mov dword [esp], eax
call fcn.00409700
test eax, eax
jne 0x40803d
mov eax, dword [ebx + 0x44]
mov dword [esp], eax
call fcn.0045133c
mov eax, dword [ebx + 0x38]
mov dword [esp], eax
call fcn.0045133c
mov eax, dword [ebx + 0x2c]
mov dword [esp], eax
call fcn.0045133c
mov eax, dword [esp + 0x2c]
sub eax, dword [sym.imp.cygwin1.dll___stack_chk_guard]
jne 0x40807a
mov eax, dword [ebx + 0x14]
mov dword [esp + 0x40], eax
add esp, 0x38
pop ebx
jmp fcn.0045133c
call sub.cygwin1.dll___getreent
mov dword [esp + 0x14], str.ae_clear__ctx____AE_SUCCESS
mov dword [esp + 0x10], 0xad
mov dword [esp + 0xc], str.crypto.cc
mov dword [esp + 8], str.Session
mov dword [esp + 4], 0x477364
mov eax, dword [eax + 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_fprintf
call sub.cygwin1.dll_abort
call sub.cygwin1.dll___stack_chk_fail
nop

Function at 0x408080
Capabilities:
Terminate process

Disassembly:
sub esp, 0x1c
mov edx, dword [sym.imp.cygwin1.dll___stack_chk_guard]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x28]
mov dword [eax], 0
bswap ecx
mov dword [eax + 4], ecx
bswap edx
mov dword [eax + 8], edx
mov eax, dword [esp + 0xc]
sub eax, dword [sym.imp.cygwin1.dll___stack_chk_guard]
jne 0x4080b9
add esp, 0x1c
ret
call sub.cygwin1.dll___stack_chk_fail
nop
Function at 0x4080c0
Capabilities:
Terminate process

Disassembly:
sub esp, 0x1c
mov eax, dword [esp + 0x20]
mov edx, dword [sym.imp.cygwin1.dll___stack_chk_guard]
mov dword [esp + 0xc], edx
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov ecx, dword [esp + 0xc]
sub ecx, dword [sym.imp.cygwin1.dll___stack_chk_guard]
jne 0x4080eb
bswap edx
bswap eax
add esp, 0x1c
ret
call sub.cygwin1.dll___stack_chk_fail
Function at 0x409750
Capabilities:
Decode data using base64 via dword translation table
Encode data using base64
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x1c
mov eax, dword [sym.imp.cygwin1.dll___stack_chk_guard]
mov dword [esp + 0xc], eax
xor eax, eax
mov eax, dword [esp + 0xc]
sub eax, dword [sym.imp.cygwin1.dll___stack_chk_guard]
jne 0x409773
mov eax, 0x378
add esp, 0x1c
ret
call sub.cygwin1.dll___stack_chk_fail
lea esi, [esi]
nop
Function at 0x40b350
Capabilities:
Decode data using base64 via dword translation table
Encode data using base64

Disassembly:
push edi
mov edi, eax
push esi
mov esi, edx
push ebx
mov ebx, ecx
sub esp, 0x30
mov eax, dword [sym.imp.cygwin1.dll___stack_chk_guard]
mov dword [esp + 0x2c], eax
xor eax, eax
call sub.cygwin1.dll___getreent
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], str.base64.cc
mov dword [esp + 8], ebx
mov dword [esp + 4], 0x4776ec
mov eax, dword [eax + 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_fprintf
call sub.cygwin1.dll_abort
lea esi, [esi]
nop

Function at 0x40b3a0
Capabilities:
Decode data using base64 via dword translation table
Encode data using base64

Disassembly:
push esi
push ebx
sub esp, 0x14
mov edx, dword [sym.imp.cygwin1.dll___stack_chk_guard]
mov dword [esp + 0xc], edx
xor edx, edx
cmp dword [esp + 0x24], 0x18
mov ebx, dword [esp + 0x20]
mov esi, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
jne 0x40b45b
cmp dword [eax], 0x10
jne 0x40b447
xor ecx, ecx
xor eax, eax
jmp 0x40b404
shl eax, 6
or eax, edx
mov edx, ecx
and edx, 3
cmp edx, 3
jne 0x40b3fc
mov edx, eax
rol ax, 8
add esi, 3
shr edx, 0x10
mov word [esi - 2], ax
xor eax, eax
mov byte [esi - 3], dl
add ecx, 1
cmp ecx, 0x16
je 0x40b430
movzx edx, byte [ebx]
add ebx, 1
movzx edx, byte [edx + 0x477780]
cmp dl, 0x3f
jbe 0x40b3d8
xor eax, eax
mov edx, dword [esp + 0xc]
sub edx, dword [sym.imp.cygwin1.dll___stack_chk_guard]
jne 0x40b46f
add esp, 0x14
pop ebx
pop esi
ret
shr eax, 4
mov byte [esi], al
cmp byte [ebx], 0x3d
jne 0x40b416
cmp byte [ebx + 1], 0x3d
mov eax, 1
je 0x40b418
jmp 0x40b416
mov ecx, str.base64_decode
mov edx, 0x46
mov eax, 0x477749
call fcn.0040b350
mov ecx, str.base64_decode
mov edx, 0x45
mov eax, str.b64_len__24
call fcn.0040b350
call sub.cygwin1.dll___stack_chk_fail
lea esi, [esi]
lea esi, [esi]
nop
Function at 0x40b480
Capabilities:
Encode data using base64

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x2c
mov edx, dword [sym.imp.cygwin1.dll___stack_chk_guard]
mov dword [esp + 0x1c], edx
xor edx, edx
mov eax, dword [esp + 0x40]
cmp dword [esp + 0x4c], 0x18
mov ebp, dword [esp + 0x48]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x44]
jne 0x40b564
cmp eax, 0x10
jne 0x40b57d
mov ecx, dword [esp + 0xc]
mov ebx, ebp
lea edi, [ecx + 0xf]
movzx esi, byte [ecx]
movzx eax, byte [ecx + 1]
add ecx, 3
add ebx, 4
shl eax, 8
shl esi, 0x10
or esi, eax
movzx eax, byte [ecx - 1]
mov edx, esi
shr edx, 0x12
or eax, esi
shr esi, 0xc
movzx edx, byte [edx + 0x477880]
and esi, 0x3f
mov byte [ebx - 4], dl
movzx edx, byte [esi + 0x477880]
mov byte [ebx - 3], dl
mov edx, eax
and eax, 0x3f
shr edx, 6
movzx eax, byte [eax + 0x477880]
and edx, 0x3f
movzx edx, byte [edx + 0x477880]
mov byte [ebx - 1], al
mov byte [ebx - 2], dl
cmp ecx, edi
jne 0x40b4c0
mov eax, dword [esp + 0xc]
movzx eax, byte [eax + 0xf]
mov edx, eax
shl eax, 4
shr dl, 2
and eax, 0x30
movzx eax, byte [eax + 0x477880]
movzx edx, dl
movzx edx, byte [edx + 0x477880]
mov byte [ebp + 0x15], al
mov eax, 0x3d3d
mov byte [ebp + 0x14], dl
mov word [ebp + 0x16], ax
mov eax, dword [esp + 0x1c]
sub eax, dword [sym.imp.cygwin1.dll___stack_chk_guard]
jne 0x40b578
add esp, 0x2c
pop ebx
pop esi
pop edi
pop ebp
ret
mov ecx, str.base64_encode
mov edx, 0x64
mov eax, str.b64_len__24
call fcn.0040b350
call sub.cygwin1.dll___stack_chk_fail
mov ecx, str.base64_encode
mov edx, 0x65
mov eax, str.raw_len__16
call fcn.0040b350
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
Function at 0x40b890
Capabilities:
Get local ipv4 addresses
Get socket information
Resolve dns
Set socket configuration
Write file on windows

Disassembly:
push ebp
push edi
push esi
mov esi, 0xffffffff
push ebx
sub esp, 0x4c
mov eax, dword [sym.imp.cygwin1.dll___stack_chk_guard]
mov dword [esp + 0x3c], eax
xor eax, eax
mov edi, dword [esp + 0x64]
mov ebx, dword [esp + 0x60]
mov ebp, dword [esp + 0x68]
call fcn.0041ea90
mov ecx, dword [edi + 0x12c]
mov dword [esp + 0x2c], edx
mov edx, dword [edi + 0x128]
mov dword [esp + 0x24], ecx
mov ecx, 0x3e7
mov dword [esp + 0x20], edx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x28]
sub eax, dword [esp + 0x20]
sbb edx, dword [esp + 0x24]
mov dword [esp + 0x18], eax
xor eax, eax
cmp ecx, dword [esp + 0x18]
mov dword [esp + 0x1c], edx
sbb eax, dword [esp + 0x1c]
jb 0x40b92e
mov eax, 0xffffffff
movzx esi, word [edi + 0x124]
sub si, word [esp + 0x20]
mov dword [edi + 0x128], 0
mov word [edi + 0x124], ax
add si, word [esp + 0x28]
mov dword [edi + 0x12c], 0
call fcn.0041ea90
xor edx, edx
mov edi, dword [edi + 0x120]
cmp ax, 0xffff
cmovne edx, eax
mov ecx, edx
mov dword [esp + 0x18], ecx
call fcn.00408270
mov ecx, dword [esp + 0x18]
mov word [ebx + 0xe], si
mov dword [ebx], eax
mov eax, dword [ebp]
mov dword [ebx + 4], edx
mov dword [ebx + 8], edi
lea edx, [eax - 0xc]
lea esi, [eax - 4]
mov word [ebx + 0xc], cx
mov ecx, dword [eax - 4]
test ecx, ecx
js 0x40b998
cmp edx, sym.imp.cygstdc_6.dll_std::string::_Rep::_S_empty_rep_storage
jne 0x40b9b8
mov dword [ebx + 0x10], eax
mov eax, dword [esp + 0x3c]
sub eax, dword [sym.imp.cygwin1.dll___stack_chk_guard]
jne 0x40b9be
add esp, 0x4c
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret 4
lea eax, [esp + 0x3b]
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.00451178
jmp 0x40b979
lock add dword [esi], 1
jmp 0x40b979
call sub.cygwin1.dll___stack_chk_fail
nop
lea esi, [esi]
lea esi, [esi]
nop
Function at 0x40bc40
Capabilities:
Get local ipv4 addresses
Get socket information
Resolve dns
Set socket configuration
Write file on windows

Disassembly:
sub esp, 0x1c
mov eax, dword [sym.imp.cygwin1.dll___stack_chk_guard]
mov dword [esp + 0xc], eax
xor eax, eax
mov eax, dword [esp + 0xc]
sub eax, dword [sym.imp.cygwin1.dll___stack_chk_guard]
jne 0x40bc62
add esp, 0x1c
jmp fcn.0041ea90
call sub.cygwin1.dll___stack_chk_fail
lea esi, [esi]
nop
sub esp, 0x1c
mov eax, dword [sym.imp.cygwin1.dll___stack_chk_guard]
mov dword [esp + 0xc], eax
xor eax, eax
call fcn.0041ea90
xor edx, edx
cmp ax, 0xffff
cmove eax, edx
mov edx, dword [esp + 0xc]
sub edx, dword [sym.imp.cygwin1.dll___stack_chk_guard]
jne 0x40bc9c
add esp, 0x1c
ret
call sub.cygwin1.dll___stack_chk_fail
lea esi, [esi]
lea esi, [esi]
nop
sub esp, 0x1c
mov eax, dword [sym.imp.cygwin1.dll___stack_chk_guard]
mov dword [esp + 0xc], eax
xor eax, eax
movzx edx, word [esp + 0x20]
movzx eax, word [esp + 0x24]
sub edx, eax
lea eax, [edx + 0x10000]
cmovns eax, edx
mov edx, dword [esp + 0xc]
sub edx, dword [sym.imp.cygwin1.dll___stack_chk_guard]
jne 0x40bce3
add esp, 0x1c
ret
call sub.cygwin1.dll___stack_chk_fail
lea esi, [esi]
nop

Function at 0x40bcf0
Capabilities:
Get local ipv4 addresses
Get socket information
Resolve dns
Set socket configuration
Write file on windows

Disassembly:
push esi
push ebx
mov ebx, 0x3e8
sub esp, 0x34
fld dword [0x477f20]
mov edx, dword [sym.imp.cygwin1.dll___stack_chk_guard]
mov dword [esp + 0x2c], edx
xor edx, edx
mov eax, dword [esp + 0x40]
fmul qword [eax + 0x160]
fadd qword [eax + 0x158]
fnstcw word [esp + 0x1e]
movzx eax, word [esp + 0x1e]
and ah, 0xf3
or ah, 8
mov word [esp + 0x1c], ax
fldcw word [esp + 0x1c]
frndint
fldcw word [esp + 0x1e]
fstp qword [esp]
call sub.cygwin1.dll_lrint
xor ecx, ecx
cdq
mov esi, ecx
cmp ebx, eax
sbb esi, edx
cmovb eax, ebx
cmovb edx, ecx
mov ebx, 0x32
cmp eax, ebx
mov esi, edx
sbb esi, ecx
cmovb eax, ebx
cmovb edx, ecx
mov ecx, dword [esp + 0x2c]
sub ecx, dword [sym.imp.cygwin1.dll___stack_chk_guard]
jne 0x40bd74
add esp, 0x34
pop ebx
pop esi
ret
call sub.cygwin1.dll___stack_chk_fail
nop
lea esi, [esi]

Function at 0x40bd80
Capabilities:
Get local ipv4 addresses
Get socket information
Resolve dns
Set socket configuration
Write file on windows

Disassembly:
sub esp, 0x2c
mov eax, dword [sym.imp.cygwin1.dll___stack_chk_guard]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x30]
mov eax, dword [eax]
mov dword [esp], eax
call sub.cygwin1.dll_close
test eax, eax
jne 0x40bdae
mov eax, dword [esp + 0x1c]
sub eax, dword [sym.imp.cygwin1.dll___stack_chk_guard]
jne 0x40bdb3
add esp, 0x2c
ret
call fcn.0040b630
call sub.cygwin1.dll___stack_chk_fail
lea esi, [esi]
nop
Function at 0x40c000
Capabilities:
Create udp socket
Get local ipv4 addresses
Get socket information
Resolve dns
Set socket configuration

Disassembly:
push edi
push esi
push ebx
sub esp, 0x30
mov eax, dword [sym.imp.cygwin1.dll___stack_chk_guard]
mov dword [esp + 0x2c], eax
xor eax, eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], 0
mov dword [esp + 4], 2
mov ebx, dword [esp + 0x40]
mov dword [esp], eax
call sub.cygwin1.dll_socket
mov dword [ebx], eax
test eax, eax
js 0x46d5c2
lea edx, [esp + 0x28]
mov dword [esp + 0x10], 4
mov dword [esp + 0xc], edx
mov dword [esp + 8], 3
mov dword [esp + 4], 0
mov dword [esp], eax
mov dword [esp + 0x28], 2
call sub.cygwin1.dll_setsockopt
mov eax, dword [esp + 0x2c]
sub eax, dword [sym.imp.cygwin1.dll___stack_chk_guard]
jne 0x40c07e
add esp, 0x30
pop ebx
pop esi
pop edi
ret
call sub.cygwin1.dll___stack_chk_fail
nop
lea esi, [esi]
lea esi, [esi]
nop
mov dword [esp], 0x10
call sub.cygstdc_6.dll___cxa_allocate_exception
mov esi, eax
call sub.cygwin1.dll___errno
mov ebx, dword [eax]
lea edi, [esp + 0x28]
lea eax, [esp + 0x27]
mov dword [esp + 4], str.socket
mov dword [esp + 8], eax
mov dword [esp], edi
call fcn.00467290
mov dword [esp + 8], ebx
mov dword [esp + 4], edi
mov dword [esp], esi
call fcn.00462400
mov dword [esp], edi
call fcn.004510f0
mov dword [esp + 8], 0x462650
mov dword [esp + 4], 0x47df0c
mov dword [esp], esi
call sub.cygstdc_6.dll___cxa_throw
mov ebx, eax
jmp 0x46d631
mov dword [esp], esi
call sub.cygstdc_6.dll___cxa_free_exception
mov dword [esp], ebx
call sub.cyggcc_s_1.dll__Unwind_Resume
nop
Function at 0x40d590
Capabilities:
Create udp socket
Get local ipv4 addresses
Get socket information
Resolve dns
Set socket configuration
Write file on windows

Disassembly:
push ebx
sub esp, 0x28
mov eax, dword [sym.imp.cygwin1.dll___stack_chk_guard]
mov dword [esp + 0x1c], eax
xor eax, eax
mov ebx, dword [esp + 0x30]
cmp byte [ebx + 0xb4], 0
jne 0x40d60f
call fcn.0041ea90
mov dword [ebx + 0x140], eax
mov eax, dword [ebx + 0xb0]
mov dword [ebx + 0x144], edx
test eax, eax
je 0x40d63d
movzx eax, word [ebx + 0x30]
mov dword [esp + 4], eax
lea eax, [esp + 0x18]
mov dword [esp], eax
call fcn.0040c000
lea edx, [esp + 0x18]
mov eax, ebx
call fcn.0040cb50
mov eax, dword [esp + 0x18]
mov dword [esp], eax
call sub.cygwin1.dll_close
test eax, eax
jne 0x40d638
mov eax, dword [esp + 0x1c]
sub eax, dword [sym.imp.cygwin1.dll___stack_chk_guard]
jne 0x40d633
mov dword [esp + 0x30], ebx
add esp, 0x28
pop ebx
jmp fcn.0040b9d0
mov dword [esp + 0xc], str._server
mov dword [esp + 8], str.void_Network::Connection::hop_port__
mov dword [esp + 4], 0x78
mov dword [esp], str.network.cc
call sub.cygwin1.dll___assert_func
call sub.cygwin1.dll___stack_chk_fail
call fcn.0040b630
mov dword [esp + 0xc], str.remote_addr_len___0
mov dword [esp + 8], str.void_Network::Connection::hop_port__
mov dword [esp + 4], 0x7b
mov dword [esp], str.network.cc
call sub.cygwin1.dll___assert_func
mov ebx, eax
jmp 0x46dfb6
lea eax, [esp + 0x18]
mov dword [esp], eax
call fcn.0040bd80
mov dword [esp], ebx
call sub.cyggcc_s_1.dll__Unwind_Resume
lea eax, [ebp - 0x20]
mov dword [esp], eax
call fcn.004510f0
lea eax, [ebp - 0x38]
mov dword [esp], eax
call fcn.004510f0
mov dword [esp], ebx
call sub.cyggcc_s_1.dll__Unwind_Resume
lea eax, [ebp - 0x4c]
mov dword [esp], eax
call fcn.004510f0
jmp 0x46dfd5
Function at 0x40ef40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x2c
mov eax, dword [sym.imp.cygwin1.dll___stack_chk_guard]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x30]
cmp dword [esp + 0x38], eax
mov eax, dword [esp + 0x3c]
sbb eax, dword [esp + 0x34]
setb al
mov edx, dword [esp + 0x1c]
sub edx, dword [sym.imp.cygwin1.dll___stack_chk_guard]
jne 0x40ef6f
add esp, 0x2c
ret
call sub.cygwin1.dll___stack_chk_fail
lea esi, [esi]
lea esi, [esi]
nop
Function at 0x413880
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push edi
push esi
push ebx
sub esp, 0x20
mov ebx, dword [esp + 0x34]
mov esi, dword [esp + 0x30]
mov eax, dword [sym.imp.cygwin1.dll___stack_chk_guard]
mov dword [esp + 0x1c], eax
mov eax, dword [ebx + 0xb4]
mov ecx, dword [eax - 4]
lea edx, [eax - 0xc]
test ecx, ecx
js 0x413900
cmp edx, sym.imp.cygstdc_6.dll_std::string::_Rep::_S_empty_rep_storage
jne 0x413968
mov dword [esi], eax
mov eax, dword [ebx + 0xb4]
mov eax, dword [eax - 4]
test eax, eax
mov eax, dword [ebx + 0xb4]
jle 0x413920
lea edx, [eax - 0xc]
cmp eax, method.std::string.swap_std::string_
jne 0x413940
mov dword [ebx + 0xb4], method.std::string.swap_std::string_
mov eax, dword [esp + 0x1c]
sub eax, dword [sym.imp.cygwin1.dll___stack_chk_guard]
jne 0x413974
add esp, 0x20
mov eax, esi
pop ebx
pop esi
pop edi
ret 4
lea eax, [esp + 0x1b]
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.00451178
jmp 0x4138b3
cmp eax, method.std::string.swap_std::string_
je 0x4138dc
mov dword [eax - 4], 0
mov dword [eax - 0xc], 0
mov byte [eax], 0
jmp 0x4138dc
mov ecx, 0xffffffff
lock xadd dword [eax - 4], ecx
test ecx, ecx
jg 0x4138d2
lea eax, [esp + 0x1b]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.00451180
jmp 0x4138d2
lea edi, [eax - 4]
lock add dword [edi], 1
jmp 0x4138b3
call sub.cygwin1.dll___stack_chk_fail
nop
lea esi, [esi]

Function at 0x413c10
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
sub esp, 0x18
mov ebx, dword [sym.imp.cygwin1.dll___stack_chk_guard]
mov dword [esp + 0xc], ebx
xor ebx, ebx
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov ebx, dword [esp + 0xc]
sub ebx, dword [sym.imp.cygwin1.dll___stack_chk_guard]
jne 0x413c4d
mov dword [esp + 0x28], ecx
mov dword [esp + 0x24], edx
mov dword [esp + 0x20], eax
add esp, 0x18
pop ebx
jmp fcn.0041b8f0
call sub.cygwin1.dll___stack_chk_fail
lea esi, [esi]
lea esi, [esi]
Function at 0x413c60
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x3c
mov esi, dword [esp + 0x50]
mov ebx, dword [esp + 0x54]
mov eax, dword [sym.imp.cygwin1.dll___stack_chk_guard]
mov dword [esp + 0x2c], eax
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov edx, dword [ebx]
mov edi, dword [ebx + 4]
mov ebp, ecx
sub edi, edx
mov dword [esp + 0x1c], edi
xor edi, edi
sub ebp, eax
cmp ebp, dword [esp + 0x1c]
je 0x413cb0
mov eax, dword [esp + 0x2c]
sub eax, dword [sym.imp.cygwin1.dll___stack_chk_guard]
jne 0x413dd4
add esp, 0x3c
mov eax, edi
pop ebx
pop esi
pop edi
pop ebp
ret
cmp eax, ecx
jne 0x413cca
jmp 0x413cd8
add eax, 8
add edx, 8
cmp ecx, eax
je 0x413cd8
mov edi, dword [edx]
cmp dword [eax], edi
je 0x413cc0
xor edi, edi
jmp 0x413c94
mov edi, dword [esi + 0x18]
mov ecx, dword [ebx + 0x18]
mov eax, dword [esi + 0x1c]
mov edx, dword [ebx + 0x1c]
sub eax, edi
sub edx, ecx
cmp eax, edx
jne 0x413cd0
test eax, eax
je 0x413d10
mov dword [esp], edi
xor edi, edi
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
call sub.cygwin1.dll_memcmp
test eax, eax
jne 0x413c94
lea esi, [esi]
lea esi, [esi]
mov eax, dword [ebx + 0x24]
xor edi, edi
cmp dword [esi + 0x24], eax
jne 0x413c94
mov eax, dword [ebx + 0x2c]
cmp dword [esi + 0x2c], eax
jne 0x413c94
mov eax, dword [ebx + 0x30]
cmp dword [esi + 0x30], eax
jne 0x413c94
mov eax, dword [ebx + 0x34]
cmp dword [esi + 0x34], eax
jne 0x413c94
mov eax, dword [ebx + 0x38]
cmp dword [esi + 0x38], eax
jne 0x413c94
movzx eax, word [ebx + 0x7c]
cmp word [esi + 0x7c], ax
jne 0x413c94
movzx eax, byte [ebx + 0x67]
cmp byte [esi + 0x67], al
jne 0x413c94
movzx eax, word [esi + 0x64]
xor eax, dword [ebx + 0x64]
test ax, 0xfff
jne 0x413c94
mov eax, dword [esi + 0x64]
xor eax, dword [ebx + 0x64]
test eax, 0xfff000
jne 0x413c94
movzx eax, byte [ebx + 0x7e]
cmp byte [esi + 0x7e], al
jne 0x413c94
mov eax, dword [ebx + 0x80]
cmp dword [esi + 0x80], eax
jne 0x413c94
movzx eax, word [ebx + 0x84]
cmp word [esi + 0x84], ax
jne 0x413c94
mov eax, dword [ebx + 0x88]
cmp dword [esi + 0x88], eax
sete al
mov edi, eax
jmp 0x413c94
call sub.cygwin1.dll___stack_chk_fail
nop
lea esi, [esi]

Function at 0x4143b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push esi
push ebx
mov ebx, eax
sub esp, 0x24
mov eax, dword [sym.imp.cygwin1.dll___stack_chk_guard]
mov dword [esp + 0x1c], eax
xor eax, eax
test ebx, ebx
je 0x4143f4
mov eax, dword [ebx + 0xc]
mov esi, ebx
call fcn.004143b0
mov eax, dword [esi + 0x10]
mov ebx, dword [ebx + 8]
lea edx, [eax - 0xc]
cmp eax, method.std::string.swap_std::string_
jne 0x414410
mov dword [esp + 4], 0x1c
mov dword [esp], esi
call sub.cygstdc_6.dll_operator_delete_void__unsigned_int_
test ebx, ebx
jne 0x4143c6
mov eax, dword [esp + 0x1c]
sub eax, dword [sym.imp.cygwin1.dll___stack_chk_guard]
jne 0x414430
add esp, 0x24
pop ebx
pop esi
ret
mov ecx, 0xffffffff
lock xadd dword [eax - 4], ecx
test ecx, ecx
jg 0x4143e0
lea eax, [esp + 0x1b]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.00451180
jmp 0x4143e0
call sub.cygwin1.dll___stack_chk_fail
nop
lea esi, [esi]
lea esi, [esi]
Function at 0x414440
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x1c
mov edx, dword [sym.imp.cygwin1.dll___stack_chk_guard]
mov dword [esp + 0xc], edx
xor edx, edx
mov eax, dword [esp + 0x20]
mov dword [eax], method.std::string.swap_std::string_
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
mov byte [eax + 0x10], 0
mov dword [eax + 0x14], method.std::string.swap_std::string_
mov dword [eax + 0x18], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x20], 0
mov dword [eax + 0x24], method.std::string.swap_std::string_
mov eax, dword [esp + 0xc]
sub eax, dword [sym.imp.cygwin1.dll___stack_chk_guard]
jne 0x4144a5
add esp, 0x1c
ret
call sub.cygwin1.dll___stack_chk_fail
lea esi, [esi]
Function at 0x418360
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push esi
push ebx
sub esp, 0x34
mov ebx, dword [esp + 0x40]
mov eax, dword [esp + 0x44]
mov edx, dword [sym.imp.cygwin1.dll___stack_chk_guard]
mov dword [esp + 0x2c], edx
mov edx, dword [ebx]
mov edx, dword [edx - 4]
test edx, edx
mov edx, dword [ebx]
jle 0x4183b8
lea ecx, [edx - 0xc]
cmp edx, method.std::string.swap_std::string_
jne 0x4183d8
mov dword [ebx], method.std::string.swap_std::string_
and eax, 0xfff
and byte [ebx + 8], 0xf8
shl eax, 0xc
mov dword [ebx + 4], eax
mov eax, dword [esp + 0x2c]
sub eax, dword [sym.imp.cygwin1.dll___stack_chk_guard]
jne 0x418400
add esp, 0x34
pop ebx
pop esi
ret
cmp edx, method.std::string.swap_std::string_
je 0x418393
mov dword [edx - 4], 0
mov dword [edx - 0xc], 0
mov byte [edx], 0
jmp 0x418393
mov esi, 0xffffffff
lock xadd dword [edx - 4], esi
test esi, esi
jg 0x41838d
lea edx, [esp + 0x2b]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 0x1c], eax
call fcn.00451180
mov eax, dword [esp + 0x1c]
jmp 0x41838d
call sub.cygwin1.dll___stack_chk_fail
nop
lea esi, [esi]
lea esi, [esi]

Function at 0x418410
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x2c
mov ecx, dword [sym.imp.cygwin1.dll___stack_chk_guard]
mov dword [esp + 0x1c], ecx
xor ecx, ecx
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x44]
cmp byte [edx + 0x18], 0
je 0x4184a8
mov edi, dword [edx + 0x1c]
mov ebx, dword [edx + 0x24]
sub ebx, edi
sar ebx, 2
shl ebx, 5
add ebx, dword [edx + 0x28]
cmp eax, ebx
jae 0x418494
lea esi, [esi]
lea esi, [esi]
mov ebp, eax
lea edx, [eax + 0x1f]
and ebp, 7
test eax, eax
cmovns edx, eax
sar edx, 5
lea esi, [edi + edx*4]
cdq
shr edx, 0x1b
lea ecx, [eax + edx]
and ecx, 0x1f
sub ecx, edx
jns 0x418477
add ecx, 0x20
sub esi, 4
mov edx, 1
shl edx, cl
mov ecx, dword [esi]
or ecx, edx
not edx
and edx, dword [esi]
test ebp, ebp
cmove edx, ecx
add eax, 1
mov dword [esi], edx
cmp eax, ebx
jne 0x418450
mov eax, dword [esp + 0x1c]
sub eax, dword [sym.imp.cygwin1.dll___stack_chk_guard]
jne 0x4184cc
add esp, 0x2c
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 0xc], str.default_tabs
mov dword [esp + 8], str.void_Terminal::DrawState::reinitialize_tabs_unsigned_int_
mov dword [esp + 4], 0x45
mov dword [esp], str.terminalframebuffer.cc
call sub.cygwin1.dll___assert_func
call sub.cygwin1.dll___stack_chk_fail
nop
lea esi, [esi]
lea esi, [esi]