joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400078b0
Capabilities:
Terminate process
Write file on windows

Disassembly:
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x20
movzx eax, byte [rcx]
mov rbx, rcx
cmp al, 0x2d
jne 0x1400079e0
nop dword [rax]
movzx eax, byte [rbx + 1]
add rbx, 1
cmp al, 0x2d
je 0x1400078d0
mov ebp, 1
movzx edx, al
xor r12d, r12d
sub edx, 0x30
cmp edx, 9
ja 0x140007920
nop word cs:[rax + rax]
nop word [rax + rax]
sub eax, 0x30
lea rdx, [r12 + r12*4]
add rbx, 1
movsx rax, al
lea r12, [rax + rdx*2]
movzx edx, byte [rbx]
mov eax, edx
sub edx, 0x30
cmp edx, 9
jbe 0x140007900
mov r13, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_ispunct]
mov r14, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isspace]
jmp 0x140007934
add rbx, 1
movsx esi, byte [rbx]
mov ecx, esi
call r13
test eax, eax
jne 0x140007930
mov ecx, esi
call r14
test eax, eax
jne 0x140007930
mov ecx, esi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isalpha]
test r12, r12
mov edx, eax
mov eax, 1
cmovne rax, r12
test edx, edx
cmovne r12, rax
test sil, sil
je 0x1400079a8
mov ecx, esi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
sub eax, 0x64
cmp eax, 0x13
ja case.0x140007988.101
lea rdx, [0x1400586a8]
movsxd rax, dword [rdx + rax*4]
add rax, rdx
jmp rax
imul r12, r12, 0x15180
cmp r12, 0x1517f
ja 0x140007a16
mov eax, 0x15180
sub rax, r12
test ebp, ebp
cmovne r12, rax
mov rax, r12
add rsp, 0x20
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
imul r12, r12, 0x93a80
jmp case.0x140007988.115
mov rax, r12
shl rax, 4
sub rax, r12
lea r12, [rax*4]
jmp case.0x140007988.115
imul r12, r12, 0xe10
jmp case.0x140007988.115
xor ebp, ebp
jmp 0x1400078e1
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, 0x23
mov edx, 1
lea rcx, str.__rotate_offset:_unknown_character_n
mov r9, rax
call sym.fwrite
mov ecx, 1
call sym.exit
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, 0x2d
mov edx, 1
lea rcx, str.__rotate_offset:_value_is_greater_than_1_day_n
mov r9, rax
call sym.fwrite
mov ecx, 1
call sym.exit
nop
nop word cs:[rax + rax]
Function at 0x140007ee0
Capabilities:
Write file on windows

Disassembly:
push rsi
push rbx
sub rsp, 0x28
mov r9, qword [rcx + 0x10]
mov rbx, rcx
mov rsi, r8
test r9, r9
je 0x140007f38
movzx eax, byte [rcx + 0xce6]
test al, 2
jne 0x140007f18
test al, 4
jne 0x140007fa0
test al, 8
jne 0x140007f58
xor eax, eax
add rsp, 0x28
pop rbx
pop rsi
ret
mov r8d, 0xc
mov edx, 1
lea rcx, str.hello__ssl_n
call sym.fwrite
jmp 0x140007f0c
mov rdx, r8
lea rcx, [0x14005883c]
call dbg.EQUALS
test eax, eax
je 0x140007f78
or byte [rbx + 0xce6], 2
jmp 0x140007f0c
mov r8d, 0xd
mov edx, 1
lea rcx, str.hello__http_n
call sym.fwrite
jmp 0x140007f0c
mov rdx, rsi
lea rcx, [0x140058840]
call dbg.EQUALS
test eax, eax
je 0x140007fc0
or byte [rbx + 0xce6], 4
jmp 0x140007f0c
mov r8d, 0xe
mov edx, 1
lea rcx, str.hello__smbv1_n
call sym.fwrite
jmp 0x140007f0c
mov rdx, rsi
lea rcx, [0x140058846]
call dbg.EQUALS
test eax, eax
je 0x140007fdf
or byte [rbx + 0xce6], 8
jmp 0x140007f0c
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rsi
lea rdx, str.FAIL:__s:_unknown_hello_type_n
mov rcx, rax
call sym.fprintf_1
mov eax, 2
jmp 0x140007f0e

Function at 0x1400080c0
Capabilities:
Terminate process

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x38
lea r12, [0x140058895]
lea r13, [0x14005889a]
lea r14, [0x1400588a1]
mov rbp, rcx
mov rcx, qword [rcx + 0x10]
mov r15, r8
test rcx, rcx
je 0x14000818c
mov eax, dword [rbp + 0x18]
test eax, eax
je 0x140008148
movzx edx, byte [rbp + 0xf34]
lea rdi, [0x140058719]
lea rax, str.host_
lea r9, str.closed_
lea r8, str.open_
test dl, 4
cmovne rax, rdi
test dl, 2
cmovne r9, rdi
and edx, 1
mov qword [rsp + 0x20], rax
cmovne r8, rdi
lea rdx, str.output_noshow___s_s_s_n
call sym.fprintf_1
xor eax, eax
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
test esi, esi
je 0x140008148
mov r8, rdi
mov rdx, r15
mov rcx, r12
call dbg.EQUALSx
test eax, eax
je 0x1400081c0
and byte [rbp + 0xf34], 0xfe
jmp 0x140008184
add rbx, 1
cmp byte [rbx], 0x2c
je 0x140008180
mov r15, rbx
movzx eax, byte [r15]
cmp al, 0x2c
je 0x140008148
test al, al
je 0x140008148
xor esi, esi
jmp 0x1400081a4
test al, al
je 0x140008160
lea edi, [rsi + 1]
lea rbx, [r15 + rdi]
mov rsi, rdi
movzx eax, byte [rbx]
cmp al, 0x2c
jne 0x1400081a0
jmp 0x140008160
mov r8, rdi
mov rdx, r15
mov rcx, r13
call dbg.EQUALSx
test eax, eax
je 0x1400081e0
and byte [rbp + 0xf34], 0xfd
jmp 0x140008184
mov r8, rdi
mov rdx, r15
mov rcx, r14
call dbg.EQUALSx
test eax, eax
jne 0x1400081d2
mov r8, rdi
mov rdx, r15
lea rcx, [0x1400588a7]
call dbg.EQUALSx
test eax, eax
je 0x140008214
and byte [rbp + 0xf34], 0xf8
jmp 0x140008184
xor ecx, ecx
mov r9, r15
lea rdx, str.FAIL:_unknown_noshow_spec:__.s_n
mov r8d, esi
call dbg.LOG
mov ecx, 1
call sym.exit
nop
nop word cs:[rax + rax]
nop
Function at 0x140008240
Capabilities:
Terminate process

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x38
lea r12, [0x140058895]
lea r13, [0x14005889a]
lea r14, [0x1400588a1]
mov rbp, rcx
mov rcx, qword [rcx + 0x10]
mov r15, r8
test rcx, rcx
je 0x14000830c
mov eax, dword [rbp + 0x18]
test eax, eax
je 0x1400082c8
movzx edx, byte [rbp + 0xf34]
lea rdi, [0x140058719]
lea rax, str.host_
lea r9, str.closed_
lea r8, str.open_
test dl, 4
cmove rax, rdi
test dl, 2
cmove r9, rdi
and edx, 1
mov qword [rsp + 0x20], rax
cmove r8, rdi
lea rdx, str.output_show___s_s_s_n
call sym.fprintf_1
xor eax, eax
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
test esi, esi
je 0x1400082c8
mov r8, rdi
mov rdx, r15
mov rcx, r12
call dbg.EQUALSx
test eax, eax
je 0x140008340
or byte [rbp + 0xf34], 1
jmp 0x140008304
add rbx, 1
cmp byte [rbx], 0x2c
je 0x140008300
mov r15, rbx
movzx eax, byte [r15]
cmp al, 0x2c
je 0x1400082c8
test al, al
je 0x1400082c8
xor esi, esi
jmp 0x140008324
test al, al
je 0x1400082e0
lea edi, [rsi + 1]
lea rbx, [r15 + rdi]
mov rsi, rdi
movzx eax, byte [rbx]
cmp al, 0x2c
jne 0x140008320
jmp 0x1400082e0
mov r8, rdi
mov rdx, r15
mov rcx, r13
call dbg.EQUALSx
test eax, eax
je 0x140008360
or byte [rbp + 0xf34], 2
jmp 0x140008304
mov r8, rdi
mov rdx, r15
mov rcx, r14
call dbg.EQUALSx
test eax, eax
jne 0x140008352
mov r8, rdi
mov rdx, r15
lea rcx, [0x1400588a7]
call dbg.EQUALSx
test eax, eax
je 0x140008394
or byte [rbp + 0xf34], 7
jmp 0x140008304
xor ecx, ecx
mov r9, r15
lea rdx, str.FAIL:_unknown_show_spec:__.s_n
mov r8d, esi
call dbg.LOG
mov ecx, 1
call sym.exit
nop
nop word cs:[rax + rax]
nop
Function at 0x140008e80
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x20
xor eax, eax
cmp qword [rcx + 0x10], 0
je 0x140008e98
add rsp, 0x20
pop rbx
ret
mov qword [rsp + 0x38], rdx
mov rbx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call rbx
mov r8, qword [rsp + 0x38]
lea rdx, str.____FAIL:__s_not_supported__use___status_ndjson_n
mov rcx, rax
call sym.fprintf_1
mov ecx, 2
call rbx
mov r8d, 0x38
mov edx, 1
lea rcx, str.____hint:_new_line_delimited_JSON_status_is_what_we_use_n
mov r9, rax
call sym.fwrite
mov eax, 2
add rsp, 0x20
pop rbx
ret

Function at 0x140009070
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov rcx, r8
mov rax, qword [rbx + 0x10]
test rax, rax
je 0x1400090b0
mov r8d, dword [rbx + 0xce0]
test r8d, r8d
jne 0x140009097
mov edx, dword [rbx + 0x18]
test edx, edx
je 0x1400090a6
lea rdx, str.retries___u_n
mov rcx, rax
call sym.fprintf_1
xor eax, eax
add rsp, 0x20
pop rbx
ret
xor r8d, r8d
xor edx, edx
call sym.strtoul
cmp eax, 0x3e7
ja 0x1400090d0
mov dword [rbx + 0xce0], eax
jmp 0x1400090a6
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, 0x32
mov edx, 1
lea rcx, str.FAIL:_retries_n_:_expected_number_less_than_1000_n
mov r9, rax
call sym.fwrite
mov eax, 2
jmp 0x1400090a8

Function at 0x140009f80
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x20
mov r9, qword [rcx + 0x10]
mov rbx, rcx
test r9, r9
je 0x140009fe0
cmp qword [rcx + 0xcf8], 0
jne 0x140009fa2
mov eax, dword [rcx + 0x18]
test eax, eax
je 0x140009fd0
mov r8d, 0x16
mov edx, 1
lea rcx, str._n_resume_information_n
call sym.fwrite
mov rcx, qword [rbx + 0x10]
mov r8, qword [rbx + 0xcf8]
lea rdx, str.resume_index___llu_n
call sym.fprintf_1
xor eax, eax
add rsp, 0x20
pop rbx
ret
movzx eax, byte [r8]
xor ecx, ecx
test al, al
jne 0x14000a01a
jmp 0x14000a028
sub edx, 0x30
lea rax, [rcx + rcx*4]
add r8, 1
movsxd rdx, edx
lea rcx, [rdx + rax*2]
movzx eax, byte [r8]
test al, al
je 0x14000a028
movsx edx, al
movzx eax, al
sub eax, 0x30
cmp eax, 9
jbe 0x14000a000
xor eax, eax
mov qword [rbx + 0xcf8], rcx
add rsp, 0x20
pop rbx
ret
Function at 0x14000a120
Capabilities:
Terminate process

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x28
mov rsi, rcx
mov rcx, qword [rcx + 0x10]
mov rbx, rdx
mov rdi, r8
test rcx, rcx
je 0x14000a180
mov rbx, qword [rsi + 0x1288]
lea rdi, str.hello_string__u____s_n
test rbx, rbx
jne 0x14000a154
jmp 0x14000a16c
mov rcx, qword [rsi + 0x10]
mov r9, qword [rbx]
mov r8d, dword [rbx + 8]
mov rdx, rdi
call sym.fprintf_1
mov rbx, qword [rbx + 0x10]
test rbx, rbx
jne 0x14000a150
xor eax, eax
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
ret
mov edx, 0x5b
mov rcx, rbx
call sym.strchr
test rax, rax
je 0x14000a1a0
lea r9, [rax + 1]
movzx eax, byte [rax + 1]
xor ecx, ecx
test al, al
jne 0x14000a1da
xor ebp, ebp
jmp 0x14000a1f2
sub edx, 0x30
lea rax, [rcx + rcx*4]
add r9, 1
movsxd rdx, edx
lea rcx, [rdx + rax*2]
movzx eax, byte [r9]
test al, al
je 0x14000a1e8
movsx edx, al
movzx eax, al
sub eax, 0x30
cmp eax, 9
jbe 0x14000a1c0
mov ebp, ecx
cmp ecx, 0xffff
ja 0x14000a22a
mov rcx, rdi
call dbg.STRDUP
mov ecx, 0x18
mov rbx, rax
call dbg.MALLOC
mov rdx, qword [rsi + 0x1288]
mov qword [rax], rbx
mov dword [rax + 8], ebp
mov qword [rax + 0x10], rdx
mov qword [rsi + 0x1288], rax
xor eax, eax
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
ret
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rbx
lea rdx, str._s:_bad_index_n
mov rcx, rax
call sym.fprintf_1
mov ecx, 1
call sym.exit
nop
nop word cs:[rax + rax]
nop dword [rax]

Function at 0x14000ace0
Capabilities:
Write file on windows

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x28
mov rsi, qword [rcx + 0x1260]
mov rbx, rcx
test rsi, rsi
je 0x14000ad24
cmp qword [rcx + 0x1278], 0
je 0x14000ae18
mov r8, qword [rbx + 0x1280]
test r8, r8
je 0x14000ae00
mov rdx, qword [rbx + 0x1278]
mov rcx, rsi
call dbg.payloads_read_pcap
mov rsi, qword [rbx + 0x1268]
test rsi, rsi
je 0x14000ad6a
lea rdx, [0x140059232]
mov rcx, rsi
call sym.fopen
mov rdi, rax
test rax, rax
je 0x14000ada0
mov r8, qword [rbx + 0x1278]
test r8, r8
je 0x14000ae30
mov rcx, rdi
mov rdx, rsi
call dbg.payloads_udp_readfile
mov rcx, rdi
call sym.fclose
mov rsi, qword [rbx + 0x1270]
test rsi, rsi
je 0x14000ad96
mov rcx, qword [rbx + 0x1290]
test rcx, rcx
je 0x14000ad87
call dbg.nmapserviceprobes_free
mov rcx, rsi
call dbg.nmapserviceprobes_read_file
mov qword [rbx + 0x1290], rax
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
ret
mov rbp, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call rbp
mov r8d, 0x1a
mov edx, 1
lea rcx, str.____FAIL:___nmap_payloads_n
mov r9, rax
call sym.fwrite
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov ecx, dword [rax]
call sym.strerror
mov ecx, 2
mov rdi, rax
call rbp
mov r9, rdi
mov r8, rsi
lea rdx, str._____s:_s_n
mov rcx, rax
call sym.fprintf_1
jmp 0x14000ad6a
call dbg.payloads_udp_create
mov qword [rbx + 0x1280], rax
mov r8, rax
jmp 0x14000ad15
call dbg.payloads_udp_create
mov qword [rbx + 0x1278], rax
jmp 0x14000ad05
call dbg.payloads_udp_create
mov qword [rbx + 0x1278], rax
mov r8, rax
jmp 0x14000ad57
Function at 0x14000b490
Capabilities:
Write file on windows

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x228
lea r8, str.paused.conf
mov edx, 0x200
lea rsi, [rsp + 0x20]
mov rdi, rcx
mov rcx, rsi
call dbg.safe_strcpy
mov rbp, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call rbp
mov r8d, 0x47
mov edx, 1
lea rcx, str._______________________________________________________________________r
mov r9, rax
call sym.fwrite
mov ecx, 2
call rbp
mov r8, rsi
lea rdx, str.saving_resume_file_to:__s_n
mov rcx, rax
call sym.fprintf_1
lea rdx, [0x14005938b]
mov rcx, rsi
call sym.fopen
mov rbx, rax
test rax, rax
je 0x14000b538
xor r8d, r8d
mov rdx, rax
mov rcx, rdi
call dbg.masscan_echo
mov rcx, rbx
call sym.fclose
nop
add rsp, 0x228
pop rbx
pop rsi
pop rdi
pop rbp
ret
mov ecx, 2
call rbp
mov r8d, 0x1d
mov edx, 1
lea rcx, str.____FAIL:_saving_resume_file_n
mov r9, rax
call sym.fwrite
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov ecx, dword [rax]
call sym.strerror
mov ecx, 2
mov rbx, rax
call rbp
mov r9, rbx
mov r8, rsi
lea rdx, [0x1400593ac]
mov rcx, rax
call sym.fprintf_1
nop
add rsp, 0x228
pop rbx
pop rsi
pop rdi
pop rbp
ret
Function at 0x14000b5a0
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xe8
movaps xmmword [rsp + 0xc0], xmm6
movaps xmmword [rsp + 0xd0], xmm7
lea r12, [0x1400593b8]
movabs r13, 0xffffffff00000000
mov eax, dword [rcx + 0xbb0]
mov qword [rcx + 0x10], rdx
mov rbx, rdx
lea rsi, [rsp + 0x90]
mov qword [rsp + 0x130], rcx
mov qword [rsp + 0x40], 0
test eax, eax
je 0x14000b6c6
nop word cs:[rax + rax]
nop dword [rax]
mov rax, qword [rsp + 0x130]
mov rdi, qword [rsp + 0x40]
mov rax, qword [rax + 0xba8]
lea rax, [rax + rdi*8]
mov edi, dword [rax + 4]
mov r10, qword [rax]
mov rbp, rdi
shl rbp, 0x20
jmp 0x14000b64d
mov r10, r14
lea eax, [r15 + 1]
and r10, r13
or r10, rax
mov r10d, r10d
mov rdx, rsi
mov r14, r10
or r14, rbp
mov rcx, r14
call dbg.range_first_cidr
mov rdx, r12
mov rcx, rbx
mov r8, rax
mov r15, rax
mov r9d, eax
mov eax, dword [rsp + 0x90]
shr r9d, 0x10
shr r15, 0x20
mov dword [rsp + 0x30], eax
movzx eax, r8b
movzx r9d, r9b
mov dword [rsp + 0x28], eax
mov eax, r8d
shr r8d, 0x18
movzx eax, ah
mov dword [rsp + 0x20], eax
call sym.fprintf_1
cmp r15d, edi
jb 0x14000b640
mov rdi, qword [rsp + 0x130]
add qword [rsp + 0x40], 1
mov rax, qword [rsp + 0x40]
cmp eax, dword [rdi + 0xbb0]
jb 0x14000b610
mov rax, qword [rsp + 0x130]
cmp qword [rax + 0xbd0], 0
je 0x14000b800
mov dword [rsp + 0x4c], 0
xor eax, eax
lea rsi, [rsp + 0x90]
lea r13, [rsp + 0x50]
lea r15, [0x140059313]
nop word [rax + rax]
shl rax, 5
mov byte [rsp + 0x6f], 0
lea r12, [rsp + 0x6f]
mov rdi, qword [rsp + 0x130]
lea rbp, [rsp + 0x70]
add rax, qword [rdi + 0xbc8]
movdqu xmm7, xmmword [rax + 0x10]
movdqu xmm6, xmmword [rax]
movhps qword [rsp + 0x40], xmm7
movq rdi, xmm7
jmp 0x14000b77f
mov rdx, r12
mov rcx, rbp
movaps xmmword [rsp + 0x80], xmm7
call dbg.count_cidr6_bits
mov rdx, r15
mov rcx, rbx
movdqa xmm6, xmmword [rsp + 0x70]
mov r8d, eax
call sym.fprintf_1
movzx r14d, byte [rsp + 0x6f]
mov rdx, rbx
mov ecx, 0xa
call sym.fputc
test r14b, r14b
jne 0x14000b7e2
mov rdx, r13
mov rcx, rsi
movaps xmmword [rsp + 0x70], xmm6
movaps xmmword [rsp + 0x50], xmm6
call dbg.ipv6address_fmt
mov rdx, rbx
mov rcx, rsi
call sym.fputs
movq rax, xmm6
cmp rax, rdi
jne 0x14000b740
movhlps xmm0, xmm6
mov rdx, qword [rsp + 0x40]
movq rax, xmm0
cmp rax, rdx
jne 0x14000b740
mov edx, 1
lea rcx, str._128
mov r9, rbx
mov r8d, 4
call sym.fwrite
mov rdx, rbx
mov ecx, 0xa
call sym.fputc
mov rdi, qword [rsp + 0x130]
add dword [rsp + 0x4c], 1
mov eax, dword [rsp + 0x4c]
cmp rax, qword [rdi + 0xbd0]
jb 0x14000b700
movaps xmm6, xmmword [rsp + 0xc0]
movaps xmm7, xmmword [rsp + 0xd0]
add rsp, 0xe8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x14000b830
Capabilities:
Write file on windows

Disassembly:
push r12
mov eax, 0x10020
push rbp
push rdi
push rsi
push rbx
call fcn.140048f80
sub rsp, rax
mov rbx, rdx
mov r12, rcx
lea rdx, [0x140059232]
mov rcx, rbx
lea rsi, [rsp + 0x20]
call sym.fopen
mov rbp, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_ispunct]
mov rdi, rax
test rax, rax
je 0x14000b910
mov r8, rdi
mov edx, 0x10000
mov rcx, rsi
call sym.fgets
test rax, rax
je 0x14000b8f0
mov rcx, rsi
mov edx, 0x10000
call dbg.trim
movzx ecx, byte [rsp + 0x20]
mov ebx, ecx
call rbp
test bl, bl
je 0x14000b870
test eax, eax
jne 0x14000b870
mov edx, 0x3d
mov rcx, rsi
call sym.strchr
test rax, rax
je 0x14000b870
mov byte [rax], 0
lea rbx, [rax + 1]
mov rcx, rsi
mov edx, 0x10000
call dbg.trim
mov rcx, rbx
mov edx, 0x10000
call dbg.trim
mov r8, rbx
mov rdx, rsi
mov rcx, r12
call dbg.masscan_set_parameter
jmp 0x14000b870
mov rcx, rdi
call sym.fclose
nop
add rsp, 0x10020
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret
mov rbp, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call rbp
mov r8d, 0x25
mov edx, 1
lea rcx, str.____FAIL:_reading_configuration_file_n
mov r9, rax
call sym.fwrite
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov ecx, dword [rax]
call sym.strerror
mov ecx, 2
mov rdi, rax
call rbp
lea rdx, [0x1400593ac]
mov r9, rdi
mov r8, rbx
mov rcx, rax
call sym.fprintf_1
mov edx, 0x200
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__getcwd]
test rax, rax
je 0x14000b8f9
mov ecx, 2
call rbp
mov r8, rsi
lea rdx, str.____cwd___s_n
mov rcx, rax
call sym.fprintf_1
jmp 0x14000b8f9
Function at 0x14000dab0
Capabilities:
Read file on windows

Disassembly:
push r13
mov eax, 0x8068
push r12
push rbp
push rdi
push rsi
push rbx
call fcn.140048f80
sub rsp, rax
cmp qword [rcx + 0x10], 0
mov rsi, rcx
mov rdi, rdx
mov rbx, r8
je 0x14000daf0
xor eax, eax
add rsp, 0x8068
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
mov edx, 0x5b
mov rcx, rdi
call sym.strchr
test rax, rax
je 0x14000db20
lea rcx, [rax + 1]
movzx eax, byte [rax + 1]
xor r9d, r9d
test al, al
jne 0x14000db59
nop word cs:[rax + rax]
nop dword [rax]
xor r12d, r12d
jmp 0x14000db77
sub edx, 0x30
lea rax, [r9 + r9*4]
add rcx, 1
movsxd rdx, edx
lea r9, [rdx + rax*2]
movzx eax, byte [rcx]
test al, al
je 0x14000db67
movsx edx, al
movzx eax, al
sub eax, 0x30
cmp eax, 9
jbe 0x14000db40
mov r12d, r9d
cmp r9d, 0xffff
ja 0x14000dc18
lea rdx, [0x14005ae2c]
mov rcx, rbx
call sym.fopen
mov rdi, rax
test rax, rax
je 0x14000dc70
lea r13, [rsp + 0x60]
mov r9, rax
mov r8d, 0x4000
mov edx, 1
mov rcx, r13
call sym.fread
mov rbp, rax
test rax, rax
je 0x14000dc50
mov rcx, rdi
lea rdi, [rsp + 0x4060]
lea rbx, [rsp + 0x20]
call sym.fclose
mov r9, rbp
mov r8, r13
mov rcx, rdi
mov edx, 0x3fff
call dbg.base64_encode
mov rcx, rbx
mov r9d, r12d
mov edx, 0x40
lea r8, [0x14005ae74]
mov byte [rsp + rax + 0x4060], 0
call sym.snprintf
mov r8, rdi
mov rdx, rbx
mov rcx, rsi
call dbg.masscan_set_parameter
jmp 0x14000dad5
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rdi
lea rdx, str._s:_bad_index_n
mov rcx, rax
call sym.fprintf_1
mov eax, 2
add rsp, 0x8068
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
lea rdx, str._FAILED__could_not_read_hello_file_n
xor ecx, ecx
call dbg.LOG
mov rcx, rbx
call sym.perror
mov rcx, rdi
call sym.fclose
jmp 0x14000dc35
lea rdx, str._____FAILED____hello_file_n
xor ecx, ecx
call dbg.LOG
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov ecx, dword [rax]
call sym.strerror
mov r8, rbx
lea rdx, [0x1400593ac]
xor ecx, ecx
mov r9, rax
call dbg.LOG
jmp 0x14000dc35
Function at 0x14000efd0
Capabilities:
Write file on windows

Disassembly:
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x60
mov edx, 9
movabs rax, 0x2031207473657420
lea rbx, [rsp + 0x27]
mov qword [rsp + 0x27], rax
mov rcx, rbx
mov byte [rsp + 0x2f], 0
call dbg.trim
lea rdx, str.test_1
mov rcx, rbx
call sym.strcmp
test eax, eax
jne 0x14000f0c8
lea rax, [0x14005bcf3]
lea r12, [0x14005bcfc]
movq xmm0, qword [0x14005caf0]
movq xmm1, rax
movq xmm2, r12
lea rsi, [rsp + 0x30]
punpcklqdq xmm0, xmm1
lea rax, str.__something
lea rdi, [rsp + 0x60]
mov rbx, rsi
movaps xmmword [rsp + 0x30], xmm0
movq xmm3, rax
movq xmm0, qword [str._ddd]
lea rbp, str.__nothing
punpcklqdq xmm0, xmm2
movaps xmmword [rsp + 0x40], xmm0
movq xmm0, qword [0x14005cb00]
punpcklqdq xmm0, xmm3
movaps xmmword [rsp + 0x50], xmm0
jmp 0x14000f097
mov rcx, qword [rbx]
mov rdx, rbp
call sym.strcmp
test eax, eax
je 0x14000f0c8
add rbx, 8
cmp rbx, rdi
jne 0x14000f088
mov eax, 1
jmp 0x14000f0bb
mov rcx, qword [rsi]
mov rdx, r12
call sym.strcmp
test eax, eax
je 0x14000f0f2
add rsi, 8
cmp rsi, rdi
jne 0x14000f0b0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, 0x27
mov edx, 1
lea rcx, str.___selftest_failure:_config_subsystem_n
mov r9, rax
call sym.fwrite
mov eax, 1
add rsp, 0x60
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret
Function at 0x14000f200
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x30
mov rsi, qword [rsp + 0x90]
mov rdi, qword [rsp + 0x98]
mov ebx, dword [rsp + 0xa0]
mov qword [rsp + 0x28], rdx
mov rbp, rdx
lea rdx, [rsp + 0x28]
mov r10, rcx
mov r13d, r9d
mov r12, r8
mov rax, rdx
mov ecx, 0x811c9dc5
lea r9, [rsp + 0x30]
nop word cs:[rax + rax]
nop word cs:[rax + rax]
nop
movzx r8d, byte [rax]
add rax, 1
xor ecx, r8d
imul ecx, ecx, 0x1000193
cmp r9, rax
jne 0x14000f260
mov qword [rsp + 0x28], r12
mov rax, rdx
lea r9, [rsp + 0x30]
nop word cs:[rax + rax]
nop word cs:[rax + rax]
nop dword [rax]
movzx r8d, byte [rax]
add rax, 1
xor ecx, r8d
imul ecx, ecx, 0x1000193
cmp r9, rax
jne 0x14000f2a0
movzx eax, r13b
mov qword [rsp + 0x28], rsi
lea r9, [rsp + 0x30]
xor eax, ecx
mov ecx, r13d
imul eax, eax, 0x1000193
movzx ecx, ch
xor eax, ecx
mov rcx, rdx
imul eax, eax, 0x1000193
nop dword [rax]
movzx r8d, byte [rcx]
add rcx, 1
xor eax, r8d
imul eax, eax, 0x1000193
cmp r9, rcx
jne 0x14000f2e0
mov qword [rsp + 0x28], rdi
lea r8, [rsp + 0x30]
movzx ecx, byte [rdx]
add rdx, 1
xor eax, ecx
imul eax, eax, 0x1000193
cmp r8, rdx
jne 0x14000f300
movzx edx, bl
xor eax, edx
movzx edx, bh
imul eax, eax, 0x1000193
xor eax, edx
xor edx, edx
imul eax, eax, 0x1000193
movzx eax, ax
lea rax, [rax + rax*4]
shl rax, 5
lea r14, [r10 + rax + 0x400000]
mov rax, r14
mov rcx, qword [rax]
mov r8, qword [rax + 8]
cmp rcx, rbp
jne 0x14000f353
cmp r8, r12
je 0x14000f3a0
add edx, 1
add rax, 0x28
cmp edx, 4
jne 0x14000f342
lea rdx, [r14 + 0x4c]
lea rcx, [r14 + 0x24]
mov r8d, 0x54
call sym.memmove
mov qword [r14], rbp
xor eax, eax
mov qword [r14 + 8], r12
mov word [r14 + 0x20], r13w
mov qword [r14 + 0x10], rsi
mov qword [r14 + 0x18], rdi
mov word [r14 + 0x22], bx
add rsp, 0x30
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
movzx r9d, word [rax + 0x20]
cmp r13d, r9d
jne 0x14000f353
mov r9, qword [rax + 0x10]
mov r10, qword [rax + 0x18]
cmp r9, rsi
jne 0x14000f353
cmp r10, rdi
jne 0x14000f353
movzx r11d, word [rax + 0x22]
cmp ebx, r11d
jne 0x14000f353
test edx, edx
jne 0x14000f3d1
mov eax, 1
jmp 0x14000f38d
mov rdx, qword [r14]
shl ebx, 0x10
movd xmm2, dword [r14 + 0x20]
xor r9, qword [r14 + 0x10]
xor r10, qword [r14 + 0x18]
xor rdx, rcx
mov rcx, qword [r14 + 8]
mov qword [r14 + 0x10], r9
mov qword [r14], rdx
xor rdx, qword [rax]
xor rcx, r8
mov r8d, ebx
mov qword [r14 + 0x18], r10
or r8d, r13d
mov qword [r14 + 8], rcx
xor rcx, qword [rax + 8]
movd xmm0, r8d
mov r8, r9
mov r9, r10
xor r8, qword [rax + 0x10]
pxor xmm0, xmm2
xor r9, qword [rax + 0x18]
movd dword [r14 + 0x20], xmm0
movd xmm3, dword [rax + 0x20]
mov qword [rax], rdx
pxor xmm0, xmm3
mov qword [rax + 8], rcx
movd dword [rax + 0x20], xmm0
movd xmm1, dword [r14 + 0x20]
mov qword [rax + 0x10], r8
pxor xmm1, xmm0
mov qword [rax + 0x18], r9
xor qword [r14], rdx
xor qword [r14 + 8], rcx
xor qword [r14 + 0x10], r8
xor qword [r14 + 0x18], r9
movd dword [r14 + 0x20], xmm1
jmp 0x14000f3ca

Function at 0x14000f470
Capabilities:
Write file on windows

Disassembly:
mov edx, 0xe00000
mov ecx, 1
jmp dbg.CALLOC
Function at 0x1400114c0
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x28
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, 0x4e
mov edx, 1
lea rcx, str.______________________________________________________________________________r
mov r9, rax
add rsp, 0x28
jmp sym.fwrite