joyce8/EMBER2024-capa huggingface dataset:
Function at 0x46ba00
Capabilities:
Initialize winsock library

Disassembly:
push rbx
sub rsp, 0x1c0
mov rbx, rcx
shl r8d, 8
movzx ecx, dl
lea r9, [rsp + 0x20]
or r8d, ecx
mov rdx, r9
movzx ecx, r8w
call qword [sym.imp.WS2_32.dll_WSAStartup]
xchg dword [rbx + 4], eax
add rsp, 0x1c0
pop rbx
ret

Function at 0x482ab0
Capabilities:
Move file

Disassembly:
push r14
push r13
push r12
push rsi
push rbx
sub rsp, 0x150
mov r8, 0xffffffffffffffff
mov rax, qword [rcx]
mov r14, qword [rdx]
mov r12, qword [rax]
lea rbx, [rsp + 0x40]
mov qword [rsp + 0x30], rbx
test r12, r12
je 0x482aea
mov rcx, r12
call sym.strlen
lea r8, [r12 + rax]
lea r13, [rsp + 0x30]
xor r9d, r9d
mov rdx, r12
mov rcx, r13
call method.void_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___._M_construct_char_const__char_const__char_const__std::forward_iterator_tag_
xor ecx, ecx
call qword [sym.imp.msvcrt.dll__time64]
lea rsi, [rsp + 0x50]
mov qword [rsp + 0x28], rax
lea rdx, [rsp + 0x28]
mov rcx, rsi
call qword [dbg._stub]
test eax, eax
jne 0x482c10
mov eax, dword [0x00a2f3e4]
lea r12, [rsp + 0x80]
mov edx, 0xc8
lea r8, str.part__u
mov rcx, r12
lea r9d, [rax + 1]
mov dword [0x00a2f3e4], r9d
call fcn.00482890
mov byte [rsp + 0x147], 0
movabs rax, 0x3fffffffffffffff
cmp qword [rsp + 0x38], rax
je 0x482c34
mov r8d, 1
lea rdx, [0x0087dedc]
mov rcx, r13
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___._M_append_char_const__unsigned_long_long_
mov r8, r12
mov edx, dword [r8]
add r8, 4
lea eax, [rdx - 0x1010101]
not edx
and eax, edx
and eax, 0x80808080
je 0x482b87
mov edx, eax
shr edx, 0x10
test eax, 0x8080
cmove eax, edx
lea rdx, [r8 + 2]
cmove r8, rdx
mov esi, eax
add sil, al
movabs rax, 0x3fffffffffffffff
sbb r8, 3
sub rax, qword [rsp + 0x38]
sub r8, r12
cmp r8, rax
ja 0x482c40
mov rdx, r12
mov rcx, r13
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___._M_append_char_const__unsigned_long_long_
mov rdx, qword [rsp + 0x30]
mov rcx, r14
call sym.rename
mov rcx, qword [rsp + 0x30]
cmp rcx, rbx
je 0x482bfc
call sym.operator_delete_void_
nop
add rsp, 0x150
pop rbx
pop rsi
pop r12
pop r13
pop r14
ret
lea r12, [rsp + 0x80]
mov r9, rsi
mov edx, 0xc8
lea r8, str._Y__m__d__H__M__S
mov rcx, r12
call sym.strftime
jmp 0x482b52
lea rcx, [0x0087de68]
call method.std.__throw_length_error_char_const_
lea rcx, [0x0087de68]
call method.std.__throw_length_error_char_const_
mov rcx, qword [rsp + 0x30]
mov r12, rax
cmp rcx, rbx
je 0x482c5e
call sym.operator_delete_void_
mov rcx, r12
call sym._Unwind_Resume
jmp 0x482c4c
Function at 0x4848e0
Capabilities:
Initialize winsock library

Disassembly:
push rbx
sub rsp, 0x1c0
mov rbx, rcx
shl r8d, 8
movzx ecx, dl
lea r9, [rsp + 0x20]
or r8d, ecx
mov rdx, r9
movzx ecx, r8w
call qword [sym.imp.WS2_32.dll_WSAStartup]
xchg dword [rbx + 4], eax
add rsp, 0x1c0
pop rbx
ret
Function at 0x488700
Capabilities:
Create directory

Disassembly:
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x60
mov rsi, rcx
mov rdi, rdx
mov rbx, r8
mov rdx, qword [rdx]
xor r8d, r8d
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryExW]
test eax, eax
je 0x488750
test rbx, rbx
je 0x48873e
mov dword [rbx], 0
call method.boost::system.system_category__
mov qword [rbx + 8], rax
add rsp, 0x60
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
test ebp, ebp
je 0x48872a
test rbx, rbx
je 0x48877b
call method.boost::system.system_category__
mov dword [rbx], ebp
mov qword [rbx + 8], rax
add rsp, 0x60
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
mov ecx, 0x50
lea r13, [rsp + 0x40]
call sym.__cxa_allocate_exception
mov r14, rax
call method.boost::system.system_category__
lea rdx, str.boost::filesystem::copy_directory
mov rcx, r13
mov r12, rax
call fcn.00856190
lea rax, [rsp + 0x30]
mov rcx, r14
mov r9, rdi
mov r8, rsi
mov qword [rsp + 0x20], rax
mov rdx, r13
mov qword [rsp + 0x30], rbp
mov qword [rsp + 0x38], r12
call sym._ZN5boost10filesystem16filesystem_errorC1ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERKNS0_4pathESC_NS_6system10err
mov rcx, qword [rsp + 0x40]
lea rax, [rsp + 0x50]
cmp rcx, rax
je 0x4887dd
call sym.operator_delete_void_
lea r8, [sym.boost::filesystem::filesystem_error::filesystem_error__]
lea rdx, [0x009a1b90]
mov rcx, r14
call sym.__cxa_throw
mov r12, rax
mov rcx, r14
call sym.__cxa_free_exception
mov rcx, r12
call sym._Unwind_Resume
nop
nop word [rax + rax]
Function at 0x488810
Capabilities:
Move file

Disassembly:
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x60
mov rsi, rcx
mov rdi, rdx
mov rbx, r8
mov rdx, qword [rdx]
mov rcx, qword [rcx]
mov r8d, 3
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
je 0x488860
test rbx, rbx
je 0x488851
mov dword [rbx], 0
call method.boost::system.system_category__
mov qword [rbx + 8], rax
add rsp, 0x60
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
test ebp, ebp
je 0x48883d
test rbx, rbx
je 0x48888b
call method.boost::system.system_category__
mov dword [rbx], ebp
mov qword [rbx + 8], rax
add rsp, 0x60
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
mov ecx, 0x50
lea r13, [rsp + 0x40]
call sym.__cxa_allocate_exception
mov r14, rax
call method.boost::system.system_category__
lea rdx, str.boost::filesystem::rename
mov rcx, r13
mov r12, rax
call fcn.00856190
lea rax, [rsp + 0x30]
mov rcx, r14
mov r9, rdi
mov r8, rsi
mov qword [rsp + 0x20], rax
mov rdx, r13
mov qword [rsp + 0x30], rbp
mov qword [rsp + 0x38], r12
call sym._ZN5boost10filesystem16filesystem_errorC1ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERKNS0_4pathESC_NS_6system10err
mov rcx, qword [rsp + 0x40]
lea rax, [rsp + 0x50]
cmp rcx, rax
je 0x4888ed
call sym.operator_delete_void_
lea r8, [sym.boost::filesystem::filesystem_error::filesystem_error__]
lea rdx, [0x009a1b90]
mov rcx, r14
call sym.__cxa_throw
mov r12, rax
mov rcx, r14
call sym.__cxa_free_exception
mov rcx, r12
call sym._Unwind_Resume
nop
nop word [rax + rax]
Function at 0x488920
Capabilities:
Copy file

Disassembly:
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x60
test r8d, r8d
mov rsi, rcx
mov rdi, rdx
mov rcx, qword [rcx]
sete r8b
mov rdx, qword [rdx]
mov rbx, r9
movzx r8d, r8b
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x488978
test rbx, rbx
je 0x488966
mov dword [rbx], 0
call method.boost::system.system_category__
mov qword [rbx + 8], rax
add rsp, 0x60
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
test ebp, ebp
je 0x488952
test rbx, rbx
je 0x4889a3
call method.boost::system.system_category__
mov dword [rbx], ebp
mov qword [rbx + 8], rax
add rsp, 0x60
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
mov ecx, 0x50
lea r13, [rsp + 0x40]
call sym.__cxa_allocate_exception
mov r14, rax
call method.boost::system.system_category__
lea rdx, str.boost::filesystem::copy_file
mov rcx, r13
mov r12, rax
call fcn.00856190
lea rax, [rsp + 0x30]
mov rcx, r14
mov r9, rdi
mov r8, rsi
mov qword [rsp + 0x20], rax
mov rdx, r13
mov qword [rsp + 0x30], rbp
mov qword [rsp + 0x38], r12
call sym._ZN5boost10filesystem16filesystem_errorC1ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERKNS0_4pathESC_NS_6system10err
mov rcx, qword [rsp + 0x40]
lea rax, [rsp + 0x50]
cmp rcx, rax
je 0x488a05
call sym.operator_delete_void_
lea r8, [sym.boost::filesystem::filesystem_error::filesystem_error__]
lea rdx, [0x009a1b90]
mov rcx, r14
call sym.__cxa_throw
mov r12, rax
mov rcx, r14
call sym.__cxa_free_exception
mov rcx, r12
call sym._Unwind_Resume
nop
nop
Function at 0x488be0
Capabilities:
Get common file path

Disassembly:
push r14
push r13
push r12
push rsi
push rbx
sub rsp, 0x50
mov rsi, qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
mov r13d, 1
mov r12, rcx
mov rbx, rdx
xor ecx, ecx
xor edx, edx
call rsi
test eax, eax
cmovne r13d, eax
mov ecx, r13d
add rcx, rcx
call sym.operator_new___unsigned_long_long_
mov ecx, r13d
mov r14, rax
mov rdx, rax
call rsi
test eax, eax
jne 0x488ca0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
je 0x488ca0
test rbx, rbx
je 0x488d0e
call method.boost::system.system_category__
mov dword [rbx], esi
mov qword [rbx + 8], rax
lea rax, [r12 + 0x10]
mov rcx, r14
mov qword [r12], rax
call sym.wcslen
lea r13, [rax + rax]
mov rdx, r13
sar rdx, 1
mov qword [rsp + 0x30], rdx
cmp rdx, 7
ja 0x488cd0
mov rcx, qword [r12]
cmp rdx, 1
jne 0x488cc0
movzx eax, word [r14]
mov word [rcx], ax
xor eax, eax
mov qword [r12 + 8], rdx
mov word [rcx + r13], ax
mov rcx, r14
call sym.operator_delete___void_
mov rax, r12
add rsp, 0x50
pop rbx
pop rsi
pop r12
pop r13
pop r14
ret
test rbx, rbx
je 0x488c45
mov dword [rbx], 0
call method.boost::system.system_category__
mov qword [rbx + 8], rax
jmp 0x488c45
test rdx, rdx
je 0x488c7c
jmp 0x488cf1
lea rdx, [rsp + 0x30]
xor r8d, r8d
mov rcx, r12
call method.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___._M_create_unsigned_long_long__unsigned_long_long_
mov qword [r12], rax
mov rcx, rax
mov rax, qword [rsp + 0x30]
mov qword [r12 + 0x10], rax
mov r8, r13
mov rdx, r14
call sym.memcpy
mov rdx, qword [rsp + 0x30]
mov rcx, qword [r12]
lea r13, [rdx + rdx]
jmp 0x488c7c
mov ecx, 0x50
lea r12, [rsp + 0x30]
call sym.__cxa_allocate_exception
mov r13, rax
call method.boost::system.system_category__
lea rdx, str.boost::filesystem::current_path
mov rcx, r12
mov rbx, rax
call fcn.00856190
mov rcx, r13
lea r8, [rsp + 0x20]
mov rdx, r12
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x28], rbx
call method.boost::filesystem::filesystem_error.filesystem_error_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const__boost::system::error_code_
mov rcx, qword [rsp + 0x30]
lea rax, [rsp + 0x40]
cmp rcx, rax
je 0x488d65
call sym.operator_delete_void_
lea r8, [sym.boost::filesystem::filesystem_error::filesystem_error__]
lea rdx, [0x009a1b90]
mov rcx, r13
call sym.__cxa_throw
mov r12, rax
mov rcx, r14
call sym.operator_delete___void_
mov rcx, r12
call sym._Unwind_Resume
mov rcx, r13
mov r12, rax
call sym.__cxa_free_exception
jmp 0x488d7e
Function at 0x48a0a0
Capabilities:
Delete directory
Delete file

Disassembly:
push r12
push rsi
push rbx
sub rsp, 0x20
mov r12, rcx
mov rbx, r8
cmp edx, 1
je 0x48a140
and edx, 0xfffffff7
mov rcx, qword [rcx]
cmp edx, 3
jne 0x48a0f8
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
test eax, eax
je 0x48a102
xor ecx, ecx
mov rdx, r12
lea r9, str.boost::filesystem::remove
mov r8, rbx
call sym._anonymous_namespace_::error_unsigned_long__boost::filesystem::path_const__boost::system::error_code__char_const_
xor eax, 1
mov r12d, eax
mov eax, r12d
add rsp, 0x20
pop rbx
pop rsi
pop r12
ret
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x48a0cc
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
call rsi
mov ecx, eax
xor eax, eax
cmp ecx, 0x35
ja 0x48a124
movabs rax, 0x2000000020800c
shr rax, cl
and eax, 1
cmp ecx, 0x7b
je 0x48a0cc
test al, al
jne 0x48a0cc
cmp ecx, 0x57
je 0x48a0cc
cmp ecx, 0xa1
je 0x48a0cc
call rsi
mov ecx, eax
jmp 0x48a0ce
xor r12d, r12d
test r8, r8
je 0x48a0e6
mov dword [r8], 0
call method.boost::system.system_category__
mov qword [rbx + 8], rax
mov eax, r12d
add rsp, 0x20
pop rbx
pop rsi
pop r12
ret

Function at 0x48ac80
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push r14
push r13
push r12
push rbx
sub rsp, 0x28
mov r13, rcx
mov r14, rdx
mov rcx, qword [rdx]
mov rbx, r8
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov r12d, eax
cmp eax, 0xffffffff
je 0x48ad58
test rbx, rbx
je 0x48acbd
mov dword [rbx], 0
call method.boost::system.system_category__
mov qword [rbx + 8], rax
test r12d, 0x400
jne 0x48ad20
mov edx, r12d
and r12d, 0x10
mov rcx, r14
jne 0x48acf8
call sym._anonymous_namespace_::make_permissions_boost::filesystem::path_const__unsigned_long_
mov dword [r13], 2
mov dword [r13 + 4], eax
mov rax, r13
add rsp, 0x28
pop rbx
pop r12
pop r13
pop r14
ret
call sym._anonymous_namespace_::make_permissions_boost::filesystem::path_const__unsigned_long_
mov dword [r13], 3
mov dword [r13 + 4], eax
mov rax, r13
add rsp, 0x28
pop rbx
pop r12
pop r13
pop r14
ret
mov rcx, r14
call sym._anonymous_namespace_::is_reparse_point_a_symlink_boost::filesystem::path_const_
mov edx, r12d
mov rcx, r14
test al, al
je 0x48ad78
call sym._anonymous_namespace_::make_permissions_boost::filesystem::path_const__unsigned_long_
mov dword [r13], 4
mov dword [r13 + 4], eax
mov rax, r13
add rsp, 0x28
pop rbx
pop r12
pop r13
pop r14
ret
mov r8, rbx
mov rdx, r14
mov rcx, r13
call sym._anonymous_namespace_::process_status_failure_boost::filesystem::path_const__boost::system::error_code_
mov rax, r13
add rsp, 0x28
pop rbx
pop r12
pop r13
pop r14
ret
call sym._anonymous_namespace_::make_permissions_boost::filesystem::path_const__unsigned_long_
mov dword [r13], 9
mov dword [r13 + 4], eax
mov rax, r13
add rsp, 0x28
pop rbx
pop r12
pop r13
pop r14
ret
Function at 0x48ada0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x78
mov r13, rcx
mov r14, rdx
mov rcx, qword [rdx]
mov rbx, r8
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov r12d, eax
cmp eax, 0xffffffff
je 0x48ae30
test ah, 4
jne 0x48ae40
test rbx, rbx
je 0x48ade3
mov dword [rbx], 0
call method.boost::system.system_category__
mov qword [rbx + 8], rax
mov edx, r12d
and r12d, 0x10
mov rcx, r14
jne 0x48ae18
call sym._anonymous_namespace_::make_permissions_boost::filesystem::path_const__unsigned_long_
mov dword [r13], 2
mov dword [r13 + 4], eax
mov rax, r13
add rsp, 0x78
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
call sym._anonymous_namespace_::make_permissions_boost::filesystem::path_const__unsigned_long_
mov dword [r13], 3
mov dword [r13 + 4], eax
jmp 0x48ae00
mov r8, rbx
mov rdx, r14
mov rcx, r13
call sym._anonymous_namespace_::process_status_failure_boost::filesystem::path_const__boost::system::error_code_
jmp 0x48ae00
mov rbp, qword [r14]
lea rsi, [rsp + 0x60]
lea r15, [rsp + 0x50]
mov qword [rsp + 0x50], rsi
test rbp, rbp
je 0x48af20
mov rcx, rbp
call sym.wcslen
lea rdi, [rax + rax]
mov rdx, rdi
sar rdx, 1
mov qword [rsp + 0x48], rdx
cmp rdx, 7
ja 0x48af30
mov rcx, qword [rsp + 0x50]
cmp rdx, 1
jne 0x48af80
movzx eax, word [rbp]
mov word [rcx], ax
xor eax, eax
mov qword [rsp + 0x58], rdx
xor r9d, r9d
mov r8d, 7
mov word [rcx + rdi], ax
xor edx, edx
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x2000000
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rcx, qword [rsp + 0x50]
mov r15, rax
cmp rcx, rsi
je 0x48aed9
call sym.operator_delete_void_
cmp r15, 0xffffffffffffffff
je 0x48ae30
mov rcx, r14
call sym._anonymous_namespace_::is_reparse_point_a_symlink_boost::filesystem::path_const_
test al, al
jne 0x48af70
mov edx, r12d
mov rcx, r14
call sym._anonymous_namespace_::make_permissions_boost::filesystem::path_const__unsigned_long_
mov dword [r13], 9
mov rcx, r15
mov dword [r13 + 4], eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x48ae00
lea rcx, [0x0087e568]
call method.std.__throw_logic_error_char_const_
nop dword [rax]
mov rcx, r15
lea rdx, [rsp + 0x48]
xor r8d, r8d
call method.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___._M_create_unsigned_long_long__unsigned_long_long_
mov qword [rsp + 0x50], rax
mov rcx, rax
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x60], rax
mov r8, rdi
mov rdx, rbp
call sym.memcpy
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x50]
lea rdi, [rdx + rdx]
jmp 0x48ae92
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x48adcf
test rdx, rdx
je 0x48ae92
jmp 0x48af52
Function at 0x48b6b0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push r13
push r12
push rsi
push rbx
sub rsp, 0x38
mov rbx, rdx
mov r12, rcx
mov edx, dword [rdx + 0x28]
mov rsi, r8
mov eax, dword [rbx + 0x2c]
cmp eax, 0xffff
je 0x48b6d4
test edx, edx
jne 0x48b740
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov r13d, eax
cmp eax, 0xffffffff
je 0x48b790
test rsi, rsi
je 0x48b6fd
mov dword [rsi], 0
call method.boost::system.system_category__
mov qword [rsi + 8], rax
test r13d, 0x400
jne 0x48b770
mov edx, r13d
and r13d, 0x10
mov rcx, rbx
jne 0x48b760
call sym._anonymous_namespace_::make_permissions_boost::filesystem::path_const__unsigned_long_
mov edx, 2
mov dword [rbx + 0x28], edx
mov dword [rbx + 0x2c], eax
mov dword [r12 + 4], eax
mov rax, r12
mov dword [r12], edx
add rsp, 0x38
pop rbx
pop rsi
pop r12
pop r13
ret
test r8, r8
je 0x48b722
mov dword [r8], 0
call method.boost::system.system_category__
mov edx, dword [rbx + 0x28]
mov qword [rsi + 8], rax
mov eax, dword [rbx + 0x2c]
jmp 0x48b722
call sym._anonymous_namespace_::make_permissions_boost::filesystem::path_const__unsigned_long_
mov edx, 3
jmp 0x48b71c
mov rcx, rbx
call sym._anonymous_namespace_::is_reparse_point_a_symlink_boost::filesystem::path_const_
mov edx, r13d
mov rcx, rbx
test al, al
je 0x48b7b0
call sym._anonymous_namespace_::make_permissions_boost::filesystem::path_const__unsigned_long_
mov edx, 4
jmp 0x48b71c
mov rdx, rbx
lea rcx, [rsp + 0x28]
mov r8, rsi
call sym._anonymous_namespace_::process_status_failure_boost::filesystem::path_const__boost::system::error_code_
mov edx, dword [rsp + 0x28]
mov eax, dword [rsp + 0x2c]
jmp 0x48b71c
call sym._anonymous_namespace_::make_permissions_boost::filesystem::path_const__unsigned_long_
mov edx, 9
jmp 0x48b71c
Function at 0x48d180
Capabilities:
Create directory

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x68
mov rsi, rcx
mov rbx, rdx
mov rcx, qword [rcx]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
je 0x48d1d0
mov r12d, 1
test rbx, rbx
je 0x48d1bb
mov dword [rbx], 0
call method.boost::system.system_category__
mov qword [rbx + 8], rax
mov eax, r12d
add rsp, 0x68
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r12, [rsp + 0x40]
mov dword [rsp + 0x30], 0
mov edi, eax
call method.boost::system.system_category__
lea r8, [rsp + 0x30]
mov rdx, rsi
mov rcx, r12
mov qword [rsp + 0x38], rax
call method.boost::filesystem::detail.status_boost::filesystem::path_const__boost::system::error_code_
cmp dword [rsp + 0x40], 3
je 0x48d230
test rbx, rbx
je 0x48d241
call method.boost::system.system_category__
xor r12d, r12d
mov dword [rbx], edi
mov qword [rbx + 8], rax
mov eax, r12d
add rsp, 0x68
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
xor r12d, r12d
test rbx, rbx
jne 0x48d1ac
jmp 0x48d1bb
mov ecx, 0x50
call sym.__cxa_allocate_exception
mov r13, rax
call method.boost::system.system_category__
lea rdx, str.boost::filesystem::create_directory
mov rcx, r12
mov rbp, rax
call fcn.00856190
mov rcx, r13
lea r9, [rsp + 0x20]
mov r8, rsi
mov rdx, r12
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rbp
call sym._ZN5boost10filesystem16filesystem_errorC1ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERKNS0_4pathENS_6system10error_
mov rcx, qword [rsp + 0x40]
lea rax, [rsp + 0x50]
cmp rcx, rax
je 0x48d296
call sym.operator_delete_void_
lea r8, [sym.boost::filesystem::filesystem_error::filesystem_error__]
lea rdx, [0x009a1b90]
mov rcx, r13
call sym.__cxa_throw
mov r12, rax
mov rcx, r13
call sym.__cxa_free_exception
mov rcx, r12
call sym._Unwind_Resume
nop
Function at 0x48d700
Capabilities:
Set current directory

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x58
mov rsi, rcx
mov rbx, rdx
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
test eax, eax
je 0x48d740
test rbx, rbx
je 0x48d733
mov dword [rbx], 0
call method.boost::system.system_category__
mov qword [rbx + 8], rax
add rsp, 0x58
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
test edi, edi
je 0x48d71f
test rbx, rbx
je 0x48d769
call method.boost::system.system_category__
mov dword [rbx], edi
mov qword [rbx + 8], rax
add rsp, 0x58
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
mov ecx, 0x50
lea r12, [rsp + 0x30]
call sym.__cxa_allocate_exception
mov r13, rax
call method.boost::system.system_category__
lea rdx, str.boost::filesystem::current_path
mov rcx, r12
mov rbp, rax
call fcn.00856190
mov rcx, r13
lea r9, [rsp + 0x20]
mov r8, rsi
mov rdx, r12
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rbp
call sym._ZN5boost10filesystem16filesystem_errorC1ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERKNS0_4pathENS_6system10error_
mov rcx, qword [rsp + 0x30]
lea rax, [rsp + 0x40]
cmp rcx, rax
je 0x48d7c3
call sym.operator_delete_void_
lea r8, [sym.boost::filesystem::filesystem_error::filesystem_error__]
lea rdx, [0x009a1b90]
mov rcx, r13
call sym.__cxa_throw
mov r12, rax
mov rcx, r13
call sym.__cxa_free_exception
mov rcx, r12
call sym._Unwind_Resume
nop
nop dword [rax]
Function at 0x48d7f0
Capabilities:
Clear file content

Disassembly:
push r14
push r13
push r12
push rsi
push rbx
sub rsp, 0x70
xor r9d, r9d
mov qword [rsp + 0x30], 0
mov rsi, rcx
mov r13, rdx
mov rbx, r8
mov dword [rsp + 0x28], pe_nt_image_headers64
xor r8d, r8d
mov edx, 0x40000000
mov dword [rsp + 0x20], 3
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r12, rax
cmp rax, 0xffffffffffffffff
je 0x48d85a
xor r9d, r9d
xor r8d, r8d
mov rdx, r13
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
mov rcx, r12
test eax, eax
jne 0x48d890
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r12d, eax
test r12d, r12d
je 0x48d8a7
test rbx, rbx
je 0x48d8c8
call method.boost::system.system_category__
mov dword [rbx], r12d
mov qword [rbx + 8], rax
add rsp, 0x70
pop rbx
pop rsi
pop r12
pop r13
pop r14
ret
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov r13d, eax
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test r13d, r13d
je 0x48d85a
test rbx, rbx
je 0x48d879
mov dword [rbx], 0
call method.boost::system.system_category__
mov qword [rbx + 8], rax
add rsp, 0x70
pop rbx
pop rsi
pop r12
pop r13
pop r14
ret
mov ecx, 0x50
lea r14, [rsp + 0x50]
call sym.__cxa_allocate_exception
mov r13, rax
call method.boost::system.system_category__
lea rdx, str.boost::filesystem::resize_file
mov rcx, r14
mov rbx, rax
call fcn.00856190
mov rcx, r13
lea r9, [rsp + 0x40]
mov r8, rsi
mov rdx, r14
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], rbx
call sym._ZN5boost10filesystem16filesystem_errorC1ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERKNS0_4pathENS_6system10error_
mov rcx, qword [rsp + 0x50]
lea rax, [rsp + 0x60]
cmp rcx, rax
je 0x48d922
call sym.operator_delete_void_
lea r8, [sym.boost::filesystem::filesystem_error::filesystem_error__]
lea rdx, [0x009a1b90]
mov rcx, r13
call sym.__cxa_throw
mov r13, rax
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, r13
call sym._Unwind_Resume
mov r12, rax
mov rcx, r13
call sym.__cxa_free_exception
mov rcx, r12
call sym._Unwind_Resume
nop