joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400a5260
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rdi
sub rsp, 0x40
mov rax, qword [0x1402a83b0]
xor rax, rsp
mov qword [rsp + 0x30], rax
mov r9, qword [rcx]
mov rdi, rdx
mov edx, 0xe
mov rbx, rcx
lea rcx, [rsp + 0x20]
lea r8d, [rdx - 0xd]
call fcn.1401c1e14
test rax, rax
je 0x1400a5341
lea rdx, str.gimp_xcf
lea rcx, [rsp + 0x20]
mov r8d, 9
call fcn.1401c25f0
test eax, eax
jne 0x1400a5341
xor ecx, ecx
lea rdx, [rsp + 0x29]
lea r8, str.file
nop dword [rax + rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r8 + rcx - 1]
jne 0x1400a52ec
cmp rcx, 5
jne 0x1400a52d0
mov dword [rdi], 0
jmp 0x1400a52ff
cmp byte [rsp + 0x29], 0x76
jne 0x1400a5341
lea rcx, [rsp + 0x2a]
call fcn.1401bee6c
mov dword [rdi], eax
mov rcx, rbx
call fcn.140066b70
mov rcx, rbx
mov dword [rdi + 4], eax
call fcn.140066b70
mov rcx, rbx
mov dword [rdi + 8], eax
call fcn.140066b70
cmp dword [rdi], 4
mov dword [rdi + 0xc], eax
jl 0x1400a532d
mov rcx, rbx
call fcn.140066b70
mov rcx, qword [rbx]
call fcn.1401c1a94
neg eax
sbb ecx, ecx
and ecx, 4
movzx eax, cx
jmp 0x1400a5346
mov eax, 2
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.1401bd600
mov rbx, qword [rsp + 0x60]
add rsp, 0x40
pop rdi
ret

Function at 0x1400a5b00
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x20
xor r14d, r14d
mov rsi, rdx
mov rbx, rcx
mov dword [rdx + 0x14], r14d
call fcn.140066b70
mov rcx, rbx
mov edi, eax
call fcn.140066b70
mov ebp, eax
cmp edi, 0xffffffff
je 0x1400a5bfb
test edi, edi
je 0x1400a5c1b
cmp edi, 1
je 0x1400a5b99
cmp edi, 0x11
je 0x1400a5b8c
mov rcx, rbx
cmp edi, 0x13
je 0x1400a5b67
movsxd rdx, ebp
call fcn.140066ff0
test eax, eax
jmp 0x1400a5bdc
lea rdx, [rsi + 0x18]
call fcn.140066960
lea rdx, [rsi + 0x20]
mov rcx, rbx
call fcn.140066960
lea eax, [rbp - 8]
mov rcx, rbx
movsxd rdx, eax
call fcn.140066ff0
jmp 0x1400a5bde
mov rcx, qword [rbx]
call fcn.1401c3f28
mov dword [rsi + 0x10], eax
jmp 0x1400a5bde
mov rcx, rbx
call fcn.140066b70
movsxd rcx, eax
mov dword [rsi + 0x14], ecx
cmp dword [rsi], r14d
jne 0x1400a5bb9
mov rdx, rcx
mov rcx, rbx
call fcn.140066ff0
jmp 0x1400a5bde
mov r9, qword [rbx]
mov eax, 0x100
mov r8d, 3
cmp ecx, eax
cmovl eax, ecx
lea rcx, [rsi + 0x28]
movsxd rdx, eax
call fcn.1401c1e14
cmp rax, 3
jne 0x1400a5bfb
mov rcx, rbx
call fcn.140066b70
mov rcx, rbx
mov edi, eax
call fcn.140066b70
mov ebp, eax
cmp edi, 0xffffffff
jne 0x1400a5b41
mov eax, 4
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret
movzx eax, r14w
jmp 0x1400a5c00

Function at 0x1400a6400
Capabilities:
Read file on windows

Disassembly:
push rbx
sub rsp, 0x20
cmp dword [rcx], 4
mov rbx, rdx
jl 0x1400a6416
mov rcx, rdx
call fcn.140066b70
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp fcn.140066b70
Function at 0x1400a81e0
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
sub rsp, 0x40
mov rax, qword [0x1402a83b0]
xor rax, rsp
mov qword [rsp + 0x30], rax
mov r9, qword [rcx]
mov ebp, 2
mov rdi, r8
mov rbx, rcx
mov rsi, rdx
lea r8d, [rbp - 1]
lea rcx, [rsp + 0x20]
mov edx, ebp
call fcn.1401c1e14
test rax, rax
je 0x1400a82e7
cmp byte [rsp + 0x20], 1
jne 0x1400a82e7
cmp byte [rsp + 0x21], 0
jne 0x1400a82e7
lea edx, [rbp + 0x2e]
mov rcx, rbx
call fcn.140066ff0
mov r9, qword [rbx]
lea r8d, [rbp - 1]
lea rcx, [rsp + 0x20]
mov edx, ebp
call fcn.1401c1e14
test rax, rax
je 0x1400a82e7
cmp byte [rsp + 0x20], 1
jne 0x1400a82e7
cmp byte [rsp + 0x21], 0
jne 0x1400a82e7
mov rcx, rbx
call fcn.140066b70
cmp eax, 0x52000000
jne 0x1400a82e7
lea edx, [rbp + 6]
mov rcx, rbx
call fcn.140066ff0
mov rcx, rbx
call fcn.140066b70
cmp eax, 0x10000000
jne 0x1400a82e7
mov rcx, rbx
call fcn.140066b70
mov rcx, rbx
call fcn.140066b70
cmp eax, 0xa55a0000
jne 0x1400a82e7
mov rcx, rbx
call fcn.140066de0
mov rcx, rbx
call fcn.140066de0
mov rcx, rbx
call fcn.140066de0
mov rcx, rbx
movzx eax, ax
mov dword [rdi], eax
call fcn.140066de0
movzx eax, ax
mov dword [rsi], eax
test eax, eax
jle 0x1400a82e7
cmp dword [rdi], 0
jle 0x1400a82e7
xor eax, eax
jmp 0x1400a82ea
movzx eax, bp
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.1401bd600
mov rbx, qword [rsp + 0x78]
add rsp, 0x40
pop rdi
pop rsi
pop rbp
ret
Function at 0x1400a8d50
Capabilities:
Read file on windows

Disassembly:
push rbx
push rbp
push r14
sub rsp, 0x40
xor eax, eax
mov r14, rdx
mov rbx, rcx
mov ebp, eax
call fcn.140066de0
mov ecx, 0xffd8
cmp ax, cx
je 0x1400a8d80
mov eax, 2
add rsp, 0x40
pop r14
pop rbp
pop rbx
ret
mov rcx, rbx
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x20], r15
call fcn.140066de0
mov rcx, rbx
movzx edi, ax
call fcn.140066de0
movzx r15d, ax
mov eax, 0xffe1
sub r15d, 2
cmp di, ax
je 0x1400a8db9
mov eax, 2
jmp 0x1400a8fcc
mov qword [rsp + 0x60], rsi
test r15d, r15d
je 0x1400a8dff
movsxd rdi, r15d
mov rcx, rdi
call fcn.1401bee78
mov r9, qword [rbx]
mov r8, rdi
mov rcx, rax
mov edx, 1
mov rsi, rax
call fcn.1401c1e14
mov r9d, r15d
mov r8, rsi
mov edx, 1
mov rcx, r14
call fcn.14005a950
mov rcx, rsi
call fcn.1401be23c
mov rcx, qword [rbx]
mov qword [rsp + 0x30], r12
call fcn.1401c1a94
test eax, eax
jne 0x1400a8e72
mov r12d, 0xffe2
lea r15d, [r12 + 0x1c]
nop dword [rax + rax]
mov rcx, rbx
call fcn.140066de0
mov rcx, rbx
movzx esi, ax
call fcn.140066de0
movzx edi, ax
cmp si, r12w
je 0x1400a8e46
cmp si, r15w
jne 0x1400a8f38
mov rcx, rbx
call fcn.140066b70
cmp eax, 0x4d504600
je 0x1400a8e72
mov rcx, qword [rbx]
lea edx, [rdi - 6]
mov r8d, 1
call fcn.1401c1f88
mov rcx, qword [rbx]
call fcn.1401c1a94
test eax, eax
je 0x1400a8e20
mov rcx, qword [rbx]
mov qword [rsp + 0x28], r13
call fcn.1401c2310
mov rcx, rbx
mov r12d, eax
call fcn.140066b70
lea rcx, [fcn.140066b20]
cmp eax, 0x49492a00
lea rsi, [fcn.140066b70]
lea rdi, [fcn.140066de0]
cmove rsi, rcx
lea rcx, [fcn.140066da0]
cmove rdi, rcx
mov rcx, rbx
mov qword [rsp + 0x78], rdi
call rsi
cmp eax, 8
je 0x1400a8ed1
mov rcx, qword [rbx]
lea edx, [rax + r12]
xor r8d, r8d
call fcn.1401c1f88
mov rcx, rbx
call rdi
movzx r13d, ax
test r13d, r13d
je 0x1400a8fae
mov rcx, rbx
dec r13d
call rdi
mov rcx, rbx
movzx r15d, ax
call rdi
mov rcx, rbx
movzx edi, ax
call rsi
lea ecx, [rdi - 1]
movsxd rcx, ecx
cmp rcx, 0xd
jae 0x1400a8fa0
test eax, eax
je 0x1400a8fa0
mov rcx, rbx
call rsi
mov rcx, qword [rbx]
mov edi, eax
call fcn.1401c2310
mov dword [rsp + 0x70], eax
mov eax, 0xb001
cmp r15w, ax
jne 0x1400a8f42
mov dword [r14 + 0x6c], edi
jmp 0x1400a8f91
mov eax, 2
jmp 0x1400a8fc2
mov eax, 0xb002
cmp r15w, ax
jne 0x1400a8f91
mov rcx, qword [rbx]
lea edx, [rdi + r12]
xor r8d, r8d
call fcn.1401c1f88
xor edi, edi
cmp dword [r14 + 0x6c], edi
jle 0x1400a8f91
mov rcx, rbx
call rsi
mov rcx, rbx
call rsi
mov rcx, rbx
call rsi
test edi, edi
je 0x1400a8f7a
add eax, r12d
cmp dword [r14 + 0xc4], edi
mov rcx, rbx
cmove ebp, eax
call rsi
inc edi
cmp edi, dword [r14 + 0x6c]
jl 0x1400a8f64
mov edx, dword [rsp + 0x70]
mov rcx, qword [rbx]
xor r8d, r8d
call fcn.1401c1f88
mov rdi, qword [rsp + 0x78]
test r13d, r13d
jne 0x1400a8ee3
mov rcx, qword [rbx]
xor r8d, r8d
mov edx, ebp
call fcn.1401c1f88
mov r13, qword [rsp + 0x28]
xor eax, eax
mov r12, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x38]
mov r15, qword [rsp + 0x20]
add rsp, 0x40
pop r14
pop rbp
pop rbx
ret
Function at 0x1400a9d10
Capabilities:
Read file on windows

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x40
mov rax, qword [0x1402a83b0]
xor rax, rsp
mov qword [rsp + 0x30], rax
mov r9, qword [rcx]
mov rsi, rdx
mov edx, 4
mov rdi, r8
mov rbx, rcx
lea r8d, [rdx - 3]
lea rcx, [rsp + 0x20]
call fcn.1401c1e14
test rax, rax
je 0x1400a9da1
cmp byte [rsp + 0x20], 0xff
jne 0x1400a9da1
cmp byte [rsp + 0x21], 0x57
jne 0x1400a9da1
cmp byte [rsp + 0x22], 0x50
jne 0x1400a9da1
cmp byte [rsp + 0x23], 0x43
jne 0x1400a9da1
mov rcx, rbx
call fcn.140066b20
mov dword [rsi], eax
mov rcx, qword [rbx]
call fcn.1401c3f28
cmp eax, 1
jne 0x1400a9da1
mov rcx, qword [rbx]
call fcn.1401c3f28
cmp eax, 0x16
jne 0x1400a9da1
mov rcx, qword [rbx]
call fcn.1401c3f28
mov dword [rdi], eax
mov rcx, qword [rbx]
call fcn.1401c3f28
xor eax, eax
jmp 0x1400a9da6
mov eax, 2
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.1401bd600
add rsp, 0x40
pop rdi
pop rsi
pop rbx
ret

Function at 0x1400a9dc0
Capabilities:
Read file on windows

Disassembly:
push rdi
sub rsp, 0x20
mov r9, qword [rcx]
mov rdi, rcx
mov edx, 1
lea rcx, [rsp + 0x30]
mov r8d, edx
call fcn.1401c1e14
movzx eax, byte [rsp + 0x30]
cmp al, 0xff
jne 0x1400a9e2b
mov rcx, rdi
mov qword [rsp + 0x38], rbx
call fcn.140066da0
movzx ebx, ax
bt ebx, 0xf
jae 0x1400a9e1e
mov rcx, rdi
call fcn.140066da0
and ebx, 0x7fff
shl ebx, 0x10
movzx eax, ax
or eax, ebx
mov rbx, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
mov eax, ebx
mov rbx, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
movzx eax, al
add rsp, 0x20
pop rdi
ret

Function at 0x1400a9e40
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push r12
push r14
push r15
sub rsp, 0x20
xor r12d, r12d
mov r15, r9
mov ebp, r8d
mov rsi, rdx
mov r14, rcx
test r8d, r8d
jle 0x1400a9f42
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rdi
mov rcx, qword [r14]
call fcn.1401c3f28
movzx ecx, al
and cl, 0x80
je 0x1400a9ead
test al, 0x7f
je 0x1400a9ead
mov rcx, qword [r14]
movzx ebx, al
and ebx, 0x7f
call fcn.1401c3f28
test ebx, ebx
jle 0x1400a9f01
mov rdi, rsi
mov edx, ebx
movzx eax, al
mov ecx, ebx
add rsi, rdx
rep stosb byte [rdi], al
jmp 0x1400a9f01
test cl, cl
je 0x1400a9ed8
test al, 0x7f
jne 0x1400a9ed4
mov rcx, qword [r14]
call fcn.1401c3f28
mov ebx, eax
test eax, eax
jle 0x1400a9f01
mov rdi, rsi
mov eax, 0xff
mov ecx, ebx
rep stosb byte [rdi], al
add rsi, rbx
jmp 0x1400a9f01
test cl, cl
jne 0x1400a9f35
test al, 0x7f
je 0x1400a9f35
mov r9, qword [r14]
movzx ebx, al
mov r8d, 1
and ebx, 0x7f
mov rcx, rsi
movsxd rdi, ebx
mov rdx, rdi
call fcn.1401c1e14
test rax, rax
je 0x1400a9f2e
add rsi, rdi
sub ebp, ebx
test ebp, ebp
jg 0x1400a9e76
movzx eax, r12w
mov rbx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
add rsp, 0x20
pop r15
pop r14
pop r12
ret
mov eax, 4
jmp 0x1400a9f0f
mov rcx, qword [r14]
call fcn.1401c3f28
mov dword [r15], eax
jmp 0x1400a9f0b
movzx eax, r12w
jmp 0x1400a9f19
Function at 0x1400aad70
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push rdi
sub rsp, 0x20
mov rbx, rdx
mov rdi, rcx
call fcn.140066b20
mov ebp, 1
mov dword [rbx], eax
mov r9, qword [rdi]
lea rcx, [rbx + 4]
lea edx, [rbp + 0xb]
mov r8d, ebp
call fcn.1401c1e14
test rax, rax
jne 0x1400aadbb
movzx eax, bp
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
mov rcx, rdi
mov qword [rsp + 0x38], rsi
call fcn.140066b20
mov rcx, rdi
mov dword [rbx + 0x10], eax
call fcn.140066b20
mov rcx, rdi
mov dword [rbx + 0x14], eax
call fcn.140066b20
mov rcx, rdi
mov dword [rbx + 0x18], eax
call fcn.140066b20
mov rcx, rdi
mov dword [rbx + 0x1c], eax
call fcn.140066b20
mov rcx, rdi
mov dword [rbx + 0x20], eax
call fcn.140066b20
mov rcx, rdi
mov dword [rbx + 0x24], eax
call fcn.140066b20
lea r9, [rsp + 0x30]
lea rdx, [rbx + 0x38]
xor r8d, r8d
mov ecx, eax
mov dword [rbx + 0x28], eax
call fcn.1400aae90
test eax, eax
je 0x1400aae29
movzx eax, bp
jmp 0x1400aae6c
movsxd rax, dword [rbx + 0x38]
mov edx, dword [rbx + 0x10]
inc dword [rbx + 0x14]
inc edx
lea rcx, [0x14029f860]
mov ecx, dword [rcx + rax*4]
shl edx, 5
mov eax, 0x1f
sub eax, dword [rbx + 0x1c]
sar edx, cl
sar eax, cl
sub edx, eax
mov eax, dword [rbx + 0x18]
sar eax, cl
sub edx, eax
mov dword [rbx + 0x10], edx
mov rcx, qword [rdi]
call fcn.1401c1a94
xor ecx, ecx
test eax, eax
setne cl
movzx eax, cx
mov rsi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret

Function at 0x1400ac1b0
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov rdi, rdx
mov rbx, rcx
call fcn.140066de0
mov ecx, 0x4954
mov word [rdi], ax
cmp ax, cx
je 0x1400ac1e2
mov eax, 2
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov rcx, rbx
call fcn.140066de0
mov ecx, 0x3031
mov word [rdi + 2], ax
sub ax, cx
cmp ax, 1
ja 0x1400ac1d2
mov rcx, rbx
call fcn.140066b70
mov rcx, rbx
mov dword [rdi + 4], eax
call fcn.140066b70
mov rcx, rbx
mov dword [rdi + 8], eax
call fcn.140066b70
mov rcx, rbx
mov dword [rdi + 0xc], eax
call fcn.140066b70
mov rcx, rbx
mov dword [rdi + 0x10], eax
call fcn.140066b70
mov rcx, rbx
mov dword [rdi + 0x14], eax
call fcn.140066b70
mov rcx, rbx
mov dword [rdi + 0x18], eax
call fcn.140066b70
mov rcx, rbx
mov dword [rdi + 0x1c], eax
call fcn.140066b70
mov rcx, rbx
mov dword [rdi + 0x20], eax
call fcn.140066b70
mov rcx, rbx
mov dword [rdi + 0x24], eax
call fcn.140066b70
mov rcx, rbx
mov dword [rdi + 0x28], eax
call fcn.140066b70
mov rcx, rbx
mov dword [rdi + 0x2c], eax
call fcn.140066b70
mov dword [rdi + 0x30], eax
mov eax, 0x3032
cmp word [rdi + 2], ax
jne 0x1400ac2bd
mov r9, qword [rbx]
mov edx, 8
lea rcx, [rdi + 0x38]
lea r8d, [rdx - 7]
call fcn.1401c1e14
mov r9, qword [rbx]
mov edx, 8
lea r8d, [rdx - 7]
lea rcx, [rdi + 0x40]
call fcn.1401c1e14
mov rcx, rbx
call fcn.140066b70
mov rcx, rbx
call fcn.140066b70
mov dword [rdi + 0x48], eax
mov rcx, qword [rbx]
call fcn.1401c1a94
mov rbx, qword [rsp + 0x30]
neg eax
sbb ecx, ecx
and ecx, 2
movzx eax, cx
add rsp, 0x20
pop rdi
ret
Function at 0x1400b1580
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov rdi, rdx
mov rbx, rcx
call fcn.140066b20
mov rcx, rbx
mov dword [rdi], eax
call fcn.140066da0
mov rcx, rbx
mov word [rdi + 4], ax
call fcn.140066da0
mov edx, 8
mov word [rdi + 6], ax
mov r9, qword [rbx]
lea rcx, [rdi + 8]
lea r8d, [rdx - 7]
call fcn.1401c1e14
mov rcx, qword [rbx]
call fcn.1401c2310
mov ecx, dword [rdi]
mov rbx, qword [rsp + 0x30]
add ecx, 0xfffffff0
add eax, ecx
mov dword [rdi + 0x10], eax
xor eax, eax
add rsp, 0x20
pop rdi
ret

Function at 0x1400b15f0
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov rbx, rdx
mov rdi, rcx
call fcn.140066b20
mov rcx, rdi
mov dword [rbx], eax
call fcn.140066da0
mov ecx, 0x50ef
mov word [rbx + 4], ax
add ax, cx
cmp ax, 1
jbe 0x1400b1631
mov eax, 2
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov rcx, rdi
call fcn.140066da0
mov rcx, rdi
mov word [rbx + 6], ax
call fcn.140066da0
mov rcx, rdi
movzx eax, ax
mov dword [rbx + 8], eax
call fcn.140066da0
mov rcx, rdi
movzx eax, ax
mov dword [rbx + 0xc], eax
call fcn.140066da0
mov rcx, rdi
mov word [rbx + 0x10], ax
call fcn.140066da0
mov rcx, rdi
mov word [rbx + 0x12], ax
call fcn.140066b20
mov rcx, rdi
mov dword [rbx + 0x14], eax
call fcn.140066da0
mov rcx, rdi
mov word [rbx + 0x18], ax
call fcn.140066b20
mov rcx, rdi
mov dword [rbx + 0x1c], eax
call fcn.140066b20
mov rcx, rdi
mov dword [rbx + 0x20], eax
call fcn.140066b20
mov rcx, rdi
mov dword [rbx + 0x24], eax
call fcn.140066b20
mov rcx, rdi
mov dword [rbx + 0x28], eax
call fcn.140066da0
mov rcx, rdi
mov word [rbx + 0x2c], ax
call fcn.140066da0
mov edx, 0x26
mov word [rbx + 0x2e], ax
mov r9, qword [rdi]
lea rcx, [rbx + 0x30]
lea r8d, [rdx - 0x25]
call fcn.1401c1e14
test rax, rax
jne 0x1400b16f6
mov eax, 4
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov rcx, rdi
call fcn.140066b20
mov rcx, rdi
mov dword [rbx + 0x58], eax
call fcn.140066b20
mov edx, 0x28
mov dword [rbx + 0x5c], eax
mov r9, qword [rdi]
lea rcx, [rbx + 0x60]
lea r8d, [rdx - 0x27]
call fcn.1401c1e14
test rax, rax
je 0x1400b16e6
xor eax, eax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x1400b2560
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x20], rbx
mov qword [rsp + 8], rcx
push rsi
push r12
push r13
push r14
push r15
sub rsp, 0x20
xor ebx, ebx
mov rsi, r9
movsxd r15, r8d
mov r14, rdx
mov r13, rcx
mov r12d, ebx
cmp dword [r9 + 0xc], ebx
jbe 0x1400b2664
mov qword [rsp + 0x58], rbp
mov qword [rsp + 0x60], rdi
nop dword [rax]
movzx eax, byte [rsi + 1]
mov rdi, r13
cmp al, 4
ja 0x1400b25c4
test r15d, r15d
jne 0x1400b25c4
mov edx, dword [rsi + 8]
mov r9, qword [r14]
movzx r8d, al
mov rcx, r13
call fcn.1401c1e14
jmp 0x1400b261e
cmp dword [rsi + 8], 0
mov ebp, ebx
jbe 0x1400b261e
xor r13d, r13d
nop
mov ebx, r13d
cmp byte [rsi + 1], bl
jbe 0x1400b25f4
mov rcx, qword [r14]
call fcn.1401c3f28
cmp ebx, 4
jg 0x1400b25ea
mov byte [rdi], al
inc rdi
movzx eax, byte [rsi + 1]
inc ebx
cmp ebx, eax
jl 0x1400b25d8
test r15d, r15d
je 0x1400b2604
mov rdx, r15
mov rcx, r14
call fcn.140066ff0
mov rcx, qword [r14]
call fcn.1401c1a94
test eax, eax
jne 0x1400b2617
inc ebp
cmp ebp, dword [rsi + 8]
jb 0x1400b25d0
mov r13, qword [rsp + 0x50]
xor ebx, ebx
mov rcx, qword [rsp + 0x78]
or r8d, 0xffffffff
mov r9d, 1
or edx, r8d
call fcn.1400615b0
test ax, ax
jne 0x1400b2647
inc r12d
cmp r12d, dword [rsi + 0xc]
jb 0x1400b25a0
mov rbp, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x68]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rsi
ret
movzx eax, bx
mov rbx, qword [rsp + 0x68]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rsi
ret

Function at 0x1400b2ed0
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov rdi, rdx
mov rbx, rcx
call fcn.140066b70
mov dword [rdi], eax
cmp eax, 0x802a5fd7
je 0x1400b2efe
mov eax, 2
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov rcx, rbx
call fcn.140066b70
mov eax, eax
mov dword [rdi + 4], eax
cmp rax, qword [rbx + 0x108]
jge 0x1400b2eee
mov rcx, rbx
call fcn.140066b70
mov dword [rdi + 8], eax
cmp eax, 0x400
jb 0x1400b2eee
mov rcx, rbx
call fcn.140066b70
mov rcx, rbx
mov dword [rdi + 0xc], eax
call fcn.140066b70
mov rcx, rbx
mov dword [rdi + 0x10], eax
call fcn.140066b70
mov edx, 8
mov dword [rdi + 0x14], eax
mov r9, qword [rbx]
lea rcx, [rdi + 0x18]
lea r8d, [rdx - 7]
call fcn.1401c1e14
mov r9, qword [rbx]
mov edx, 0x64
lea r8d, [rdx - 0x63]
lea rcx, [rdi + 0x20]
call fcn.1401c1e14
mov r9, qword [rbx]
mov edx, 0xc
lea r8d, [rdx - 0xb]
lea rcx, [rdi + 0x84]
call fcn.1401c1e14
mov r9, qword [rbx]
mov edx, 0xc
lea r8d, [rdx - 0xb]
lea rcx, [rdi + 0x90]
call fcn.1401c1e14
mov r9, qword [rbx]
mov edx, 0x24
lea r8d, [rdx - 0x23]
lea rcx, [rdi + 0x9c]
call fcn.1401c1e14
mov rcx, qword [rbx]
call fcn.1401c1a94
mov rbx, qword [rsp + 0x30]
neg eax
sbb ecx, ecx
and ecx, 4
movzx eax, cx
add rsp, 0x20
pop rdi
ret
Function at 0x1400b2fe0
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov rdi, rcx
mov rcx, qword [rcx]
mov rbx, rdx
call fcn.1401c3f28
mov byte [rbx], al
mov rcx, qword [rdi]
call fcn.1401c3f28
mov byte [rbx + 1], al
mov rcx, qword [rdi]
call fcn.1401c3f28
mov byte [rbx + 2], al
mov rcx, qword [rdi]
call fcn.1401c3f28
mov rcx, rdi
mov byte [rbx + 3], al
call fcn.140066b70
mov rcx, rdi
mov dword [rbx + 4], eax
call fcn.140066b70
mov edx, 0x14
mov dword [rbx + 8], eax
mov r9, qword [rdi]
lea rcx, [rbx + 0xc]
lea r8d, [rdx - 0x13]
call fcn.1401c1e14
mov rcx, qword [rdi]
call fcn.1401c1a94
mov rbx, qword [rsp + 0x30]
xor ecx, ecx
test eax, eax
sete cl
movzx eax, cx
add rsp, 0x20
pop rdi
ret
Function at 0x1400b3070
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r14
push r15
mov rbp, rsp
sub rsp, 0x20
mov rbx, rcx
mov rcx, qword [rcx]
mov rsi, rdx
call fcn.1401c3f28
mov byte [rsi], al
mov rcx, qword [rbx]
call fcn.1401c3f28
mov byte [rsi + 1], al
mov rcx, qword [rbx]
call fcn.1401c3f28
mov byte [rsi + 2], al
mov rcx, qword [rbx]
call fcn.1401c3f28
lea rdi, [rsi + 7]
lea r14, [rsi + 4]
mov byte [rsi + 3], al
mov r15d, 8
nop word [rax + rax]
mov r9, qword [rbx]
mov edx, 2
mov rcx, r14
lea r8d, [rdx - 1]
call fcn.1401c1e14
mov rcx, qword [rbx]
call fcn.1401c3f28
mov byte [rdi - 1], al
mov rcx, qword [rbx]
call fcn.1401c3f28
mov rcx, rbx
mov byte [rdi], al
call fcn.140066b70
mov rcx, rbx
mov dword [rdi + 1], eax
call fcn.140066b70
lea rdx, [rbp + 0x20]
mov rcx, rbx
mov dword [rdi + 5], eax
call fcn.140066960
lea rdx, [rbp + 0x20]
mov rcx, rbx
movsd xmm0, qword [rbp + 0x20]
cvtpd2ps xmm0, xmm0
movss dword [rdi + 9], xmm0
call fcn.140066960
movsd xmm0, qword [rbp + 0x20]
lea rdx, [rbp + 0x20]
mov rcx, rbx
cvtpd2ps xmm0, xmm0
movss dword [rdi + 0xd], xmm0
call fcn.140066960
movsd xmm0, qword [rbp + 0x20]
lea rdx, [rbp + 0x20]
mov rcx, rbx
cvtpd2ps xmm0, xmm0
movss dword [rdi + 0x11], xmm0
call fcn.140066960
movsd xmm0, qword [rbp + 0x20]
add r14, 0x1c
lea rdi, [rdi + 0x1c]
cvtpd2ps xmm0, xmm0
movss dword [rdi - 7], xmm0
dec r15
jne 0x1400b30d0
lea rdx, [rbp + 0x20]
mov rcx, rbx
call fcn.140066960
lea rdx, [rbp + 0x20]
mov rcx, rbx
movsd xmm0, qword [rbp + 0x20]
cvtpd2ps xmm0, xmm0
movss dword [rsi + 0xe4], xmm0
call fcn.140066960
movsd xmm0, qword [rbp + 0x20]
lea rdx, [rbp + 0x20]
mov rcx, rbx
cvtpd2ps xmm0, xmm0
movss dword [rsi + 0xe8], xmm0
call fcn.140066960
movsd xmm0, qword [rbp + 0x20]
lea rdx, [rbp + 0x20]
mov rcx, rbx
cvtpd2ps xmm0, xmm0
movss dword [rsi + 0xec], xmm0
call fcn.140066960
movsd xmm0, qword [rbp + 0x20]
lea rdx, [rbp + 0x20]
mov rcx, rbx
cvtpd2ps xmm0, xmm0
movss dword [rsi + 0xf0], xmm0
call fcn.140066960
movsd xmm0, qword [rbp + 0x20]
lea rdx, [rbp + 0x20]
mov rcx, rbx
cvtpd2ps xmm0, xmm0
movss dword [rsi + 0xf4], xmm0
call fcn.140066960
movsd xmm0, qword [rbp + 0x20]
lea rdx, [rbp + 0x20]
mov rcx, rbx
cvtpd2ps xmm0, xmm0
movss dword [rsi + 0xf8], xmm0
call fcn.140066960
movsd xmm0, qword [rbp + 0x20]
lea rdx, [rbp + 0x20]
mov rcx, rbx
cvtpd2ps xmm0, xmm0
movss dword [rsi + 0xfc], xmm0
call fcn.140066960
movsd xmm0, qword [rbp + 0x20]
lea rcx, [rsi + 0x104]
lea r8d, [r15 + 1]
mov edx, 0xc8
cvtpd2ps xmm0, xmm0
movss dword [rsi + 0x100], xmm0
mov r9, qword [rbx]
call fcn.1401c1e14
mov r9, qword [rbx]
lea rcx, [rsi + 0x1cc]
lea edx, [r15 + 0x1c]
lea r8d, [r15 + 1]
call fcn.1401c1e14
mov rcx, qword [rbx]
call fcn.1401c1a94
mov rbx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x58]
xor ecx, ecx
test eax, eax
sete cl
movzx eax, cx
add rsp, 0x20
pop r15
pop r14
pop rbp
ret