joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14000dbc0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x40
mov rax, qword [0x140213010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rdi, rcx
test edx, edx
je 0x14000dc6e
xor ecx, ecx
cmp edx, 0xc0
je 0x14000dc1c
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ebx, ebx
mov dword [rsp + 0x30], ebx
cmp rax, 0xffffffffffffffff
je 0x14000dd62
lea r8d, [rbx + 0x25]
lea rdx, str.PendingIO::Wait_over_result_is_error_n
jmp 0x14000dc48
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ebx, ebx
mov dword [rsp + 0x30], ebx
cmp rax, 0xffffffffffffffff
je 0x14000dd62
lea r8d, [rbx + 0x32]
lea rdx, str.PendingIO::Wait_over_result_is_WAIT_IO_COMPLETION_n
lea r9, [rsp + 0x30]
mov rcx, rax
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000dd62
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x14000dd62
lea rdx, [rcx + 0x38]
xor ebx, ebx
mov rcx, qword [rcx + 0x58]
lea r8, [rsp + 0x30]
xor r9d, r9d
mov dword [rsp + 0x30], ebx
call qword [sym.imp.KERNEL32.dll_GetOverlappedResult]
mov ecx, dword [rdi + 0x10]
test ecx, ecx
jne 0x14000dce4
test eax, eax
je 0x14000dcac
mov eax, dword [rsp + 0x30]
test eax, eax
je 0x14000dcac
mov dword [rdi + 8], eax
mov dword [rdi + 0x10], 1
jmp 0x14000dd62
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov dword [rsp + 0x34], ebx
cmp rax, 0xffffffffffffffff
je 0x14000dd62
lea r9, [rsp + 0x34]
mov r8d, 0x4e
lea rdx, str._kReading__Either_GetOverlappedResult_returned_false_or_bytesTransferred_is_0_n
jmp 0x14000dc4d
cmp ecx, 1
jne 0x14000dd27
test eax, eax
je 0x14000dcf3
cmp dword [rsp + 0x30], ebx
jne 0x14000dd5f
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov dword [rsp + 0x34], ebx
cmp rax, 0xffffffffffffffff
je 0x14000dd62
lea r9, [rsp + 0x34]
mov r8d, 0x4e
lea rdx, str._kWriting__Either_GetOverlappedResult_returned_false_or_bytesTransferred_is_0_n
jmp 0x14000dc4d
test eax, eax
jne 0x14000dd5f
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov dword [rsp + 0x34], ebx
cmp rax, 0xffffffffffffffff
je 0x14000dd62
lea r9, [rsp + 0x34]
mov r8d, 0x2f
lea rdx, str.GetOverlappedResult_failed_in_connecting_state_n
jmp 0x14000dc4d
mov dword [rdi + 0x10], ebx
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.14019ce50
mov rbx, qword [rsp + 0x58]
add rsp, 0x40
pop rdi
ret
Function at 0x14000dd80
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x48
mov rax, qword [0x140213010]
xor rax, rsp
mov qword [rsp + 0x38], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000ddda
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x1e]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.HandleUPVMMessage_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000ddda
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor al, al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.14019ce50
add rsp, 0x48
ret

Function at 0x14000ddf0
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x140213010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000de4f
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x1c]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.PulseVisualizer_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000de4f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword [rbx + 0x30]
lea r9, [rbx + 0x60]
mov r8d, 2
mov byte [rax], 0x4f
mov rax, qword [rbx + 0x30]
mov byte [rax + 1], 0x4b
lea rax, [rbx + 0x38]
mov rdx, qword [rbx + 0x30]
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 1
sete al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.14019ce50
add rsp, 0x40
pop rbx
ret

Function at 0x14000dea0
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x140213010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000deff
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x1f]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.KeyInputVisualizer_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000deff
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword [rbx + 0x30]
lea r9, [rbx + 0x60]
mov r8d, 2
mov byte [rax], 0x4f
mov rax, qword [rbx + 0x30]
mov byte [rax + 1], 0x4b
lea rax, [rbx + 0x38]
mov rdx, qword [rbx + 0x30]
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 1
sete al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.14019ce50
add rsp, 0x40
pop rbx
ret
Function at 0x14000df50
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x140213010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000dfaf
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x25]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.ActivateVisualizerWindow_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000dfaf
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword [rbx + 0x30]
lea r9, [rbx + 0x60]
mov r8d, 2
mov byte [rax], 0x4f
mov rax, qword [rbx + 0x30]
mov byte [rax + 1], 0x4b
lea rax, [rbx + 0x38]
mov rdx, qword [rbx + 0x30]
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 1
sete al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.14019ce50
add rsp, 0x40
pop rbx
ret

Function at 0x14000e000
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x140213010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000e05f
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x21]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.ShowVisualizerWindow_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000e05f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword [rbx + 0x30]
lea r9, [rbx + 0x60]
mov r8d, 2
mov byte [rax], 0x4f
mov rax, qword [rbx + 0x30]
mov byte [rax + 1], 0x4b
lea rax, [rbx + 0x38]
mov rdx, qword [rbx + 0x30]
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 1
sete al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.14019ce50
add rsp, 0x40
pop rbx
ret

Function at 0x14000e0b0
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x140213010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000e10f
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x34]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.ShowVisualizerWindowAndSelectVisualizer_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000e10f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword [rbx + 0x30]
lea r9, [rbx + 0x60]
mov r8d, 2
mov byte [rax], 0x4f
mov rax, qword [rbx + 0x30]
mov byte [rax + 1], 0x4b
lea rax, [rbx + 0x38]
mov rdx, qword [rbx + 0x30]
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 1
sete al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.14019ce50
add rsp, 0x40
pop rbx
ret
Function at 0x14000e160
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x140213010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000e1bf
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x21]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.HideVisualizerWindow_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000e1bf
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword [rbx + 0x30]
lea r9, [rbx + 0x60]
mov r8d, 2
mov byte [rax], 0x4f
mov rax, qword [rbx + 0x30]
mov byte [rax + 1], 0x4b
lea rax, [rbx + 0x38]
mov rdx, qword [rbx + 0x30]
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 1
sete al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.14019ce50
add rsp, 0x40
pop rbx
ret

Function at 0x14000e210
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x140213010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000e26f
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x1c]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.EnterFullscreen_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000e26f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword [rbx + 0x30]
lea r9, [rbx + 0x60]
mov r8d, 2
mov byte [rax], 0x4f
mov rax, qword [rbx + 0x30]
mov byte [rax + 1], 0x4b
lea rax, [rbx + 0x38]
mov rdx, qword [rbx + 0x30]
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 1
sete al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.14019ce50
add rsp, 0x40
pop rbx
ret

Function at 0x14000e2c0
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x140213010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000e31f
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x1b]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.ExitFullscreen_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000e31f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword [rbx + 0x30]
lea r9, [rbx + 0x60]
mov r8d, 2
mov byte [rax], 0x4f
mov rax, qword [rbx + 0x30]
mov byte [rax + 1], 0x4b
lea rax, [rbx + 0x38]
mov rdx, qword [rbx + 0x30]
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 1
sete al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.14019ce50
add rsp, 0x40
pop rbx
ret
Function at 0x14000e370
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x140213010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000e3cf
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x21]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.PostMessageToConsole_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000e3cf
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword [rbx + 0x30]
lea r9, [rbx + 0x60]
mov r8d, 2
mov byte [rax], 0x4f
mov rax, qword [rbx + 0x30]
mov byte [rax + 1], 0x4b
lea rax, [rbx + 0x38]
mov rdx, qword [rbx + 0x30]
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 1
sete al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.14019ce50
add rsp, 0x40
pop rbx
ret

Function at 0x14000e420
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x140213010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000e47f
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x21]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.DeactivateVisualizer_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000e47f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword [rbx + 0x30]
lea r9, [rbx + 0x60]
mov r8d, 2
mov byte [rax], 0x4f
mov rax, qword [rbx + 0x30]
mov byte [rax + 1], 0x4b
lea rax, [rbx + 0x38]
mov rdx, qword [rbx + 0x30]
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 1
sete al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.14019ce50
add rsp, 0x40
pop rbx
ret
Function at 0x14000e4d0
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x140213010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov dword [rsp + 0x30], 0
cmp rax, 0xffffffffffffffff
je 0x14000e537
lea r9, [rsp + 0x30]
mov qword [rsp + 0x20], 0
mov r8d, 0x32
lea rdx, str.StartVisualizerPlaybackWithTrackInfo:_override_me_n
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000e537
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword [rbx + 0x30]
lea r9, [rbx + 0x60]
mov r8d, 5
mov byte [rax], 0x53
mov rax, qword [rbx + 0x30]
mov byte [rax + 1], 0x74
mov rax, qword [rbx + 0x30]
mov byte [rax + 2], 0x61
mov rax, qword [rbx + 0x30]
mov byte [rax + 3], 0x72
mov rax, qword [rbx + 0x30]
mov byte [rax + 4], 0x74
lea rax, [rbx + 0x38]
mov rdx, qword [rbx + 0x30]
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x20], rax
mov dword [r9], 0
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 1
sete al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.14019ce50
add rsp, 0x40
pop rbx
ret

Function at 0x14000e5a0
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x38
mov rax, qword [rcx + 0x30]
lea r9, [rcx + 0x60]
mov r8d, 2
mov byte [rax], 0x4f
mov rax, qword [rcx + 0x30]
mov byte [rax + 1], 0x4b
lea rax, [rcx + 0x38]
mov rdx, qword [rcx + 0x30]
mov rcx, qword [rcx + 0x58]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 1
sete al
add rsp, 0x38
ret

Function at 0x14000e5e0
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x48
mov rax, qword [0x140213010]
xor rax, rsp
mov qword [rsp + 0x38], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000e63a
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x2d]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.DeactivateVisualizerOnMainThread_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000e63a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.14019ce50
add rsp, 0x48
ret
Function at 0x14000e650
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x140213010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000e6af
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x1b]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.MoveVisualizer_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000e6af
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword [rbx + 0x30]
lea r9, [rbx + 0x60]
mov r8d, 2
mov byte [rax], 0x4f
mov rax, qword [rbx + 0x30]
mov byte [rax + 1], 0x4b
lea rax, [rbx + 0x38]
mov rdx, qword [rbx + 0x30]
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 1
sete al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.14019ce50
add rsp, 0x40
pop rbx
ret

Function at 0x14000e700
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x140213010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000e75f
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x1e]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.ReshapeVisualizer_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000e75f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword [rbx + 0x30]
lea r9, [rbx + 0x60]
mov r8d, 2
mov byte [rax], 0x4f
mov rax, qword [rbx + 0x30]
mov byte [rax + 1], 0x4b
lea rax, [rbx + 0x38]
mov rdx, qword [rbx + 0x30]
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 1
sete al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.14019ce50
add rsp, 0x40
pop rbx
ret

Function at 0x14000e7b0
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x140213010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000e80f
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x1f]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.ActivateVisualizer_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000e80f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword [rbx + 0x30]
lea r9, [rbx + 0x60]
mov r8d, 2
mov byte [rax], 0x4f
mov rax, qword [rbx + 0x30]
mov byte [rax + 1], 0x4b
lea rax, [rbx + 0x38]
mov rdx, qword [rbx + 0x30]
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 1
sete al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.14019ce50
add rsp, 0x40
pop rbx
ret
Function at 0x14000e860
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x48
mov rax, qword [0x140213010]
xor rax, rsp
mov qword [rsp + 0x38], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000e8ba
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x2c]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.ActivateProxyWindowInMainThread_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000e8ba
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.14019ce50
add rsp, 0x48
ret

Function at 0x14000e8d0
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x48
mov rax, qword [0x140213010]
xor rax, rsp
mov qword [rsp + 0x38], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000e92a
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x23]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.SetArtworkInMainThread_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000e92a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.14019ce50
add rsp, 0x48
ret
Function at 0x14000f140
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rdi
sub rsp, 0x40
mov rax, qword [0x140213010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, rdx
mov rdi, rcx
mov rdx, rcx
mov rcx, rbx
call fcn.14000cc10
test al, al
je 0x14000f1d6
lea rdx, [rdi + 0x1660]
mov rcx, rbx
call fcn.14000c7c0
test al, al
je 0x14000f1d6
mov rcx, qword [rbx + 0x10]
lea rax, [rcx + 4]
cmp rax, qword [rbx + 8]
jbe 0x14000f1f0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000f1d6
lea r8d, [rcx + 0x20]
lea rdx, str.Buffer_underflow_reading_int32_t
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x30]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000f1d6
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor al, al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.14019ce50
mov rbx, qword [rsp + 0x60]
add rsp, 0x40
pop rdi
ret
mov rax, qword [rbx]
mov ecx, dword [rcx + rax]
mov dword [rdi + 0x1688], ecx
add qword [rbx + 0x10], 4
mov rcx, qword [rbx + 0x10]
lea rax, [rcx + 4]
cmp rax, qword [rbx + 8]
jbe 0x14000f23e
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000f1d6
lea r8d, [rcx + 0x21]
lea rdx, str.Buffer_underflow_reading_uint32_t
jmp 0x14000f1b9
mov rax, qword [rbx]
mov ecx, dword [rcx + rax]
mov al, 1
mov dword [rdi + 0x168c], ecx
add qword [rbx + 0x10], 4
jmp 0x14000f1d8

Function at 0x14000f450
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x48
mov rax, qword [0x140213010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rcx, qword [rcx + 0x68]
test rcx, rcx
je 0x14000f484
mov rax, qword [rcx]
call qword [rax + 0x30]
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.14019ce50
add rsp, 0x48
ret
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000f4c9
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x24]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.Current_plugin_is_null._Cannot_idle_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000f4c9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.14019ce50
add rsp, 0x48
ret