joyce8/EMBER2024-capa huggingface dataset:
Function at 0x40ac20
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xb4
mov eax, dword [0x61de38]
xor eax, esp
mov dword [esp + 0xb0], eax
push ebx
mov ebx, ecx
mov dword [esp + 0xc], 0
push esi
mov esi, edx
push edi
mov eax, dword [ebx]
mov dword [ebx + 4], eax
mov eax, dword [esi]
mov dword [esp + 0x20], esi
test eax, eax
je 0x40ac7c
mov edi, dword [sym.imp.KERNEL32.dll_ReadFile]
lea ecx, [esp + 0x10]
push 0
push ecx
push 4
lea ecx, [esp + 0x20]
push ecx
push eax
call edi
test eax, eax
jne 0x40ac93
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 4], eax
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xb0]
xor ecx, esp
call fcn.0055c6fa
mov esp, ebp
pop ebp
ret
cmp dword [esp + 0x10], 0
je 0x40ac7c
mov eax, dword [esi]
mov dword [esp + 0x18], 0
test eax, eax
je 0x40ac7c
push 0
lea ecx, [esp + 0x14]
push ecx
push 4
lea ecx, [esp + 0x24]
push ecx
push eax
call edi
test eax, eax
je 0x40ac73
cmp dword [esp + 0x10], 0
je 0x40ac7c
push dword [esp + 0x14]
call fcn.0041a8fe
add esp, 4
mov dword [esp + 0x10], 0
cmp dword [esp + 0x18], 0
mov edi, eax
mov dword [esp + 0x24], edi
jbe 0x40ad7c
nop dword [eax]
mov ecx, dword [esi]
test ecx, ecx
je 0x40ac7c
push 0
lea eax, [esp + 0x20]
push eax
push dword [esp + 0x1c]
push edi
push ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x40ac73
cmp dword [esp + 0x1c], 0
je 0x40ac7c
mov eax, dword [esp + 0x14]
cmp eax, 0x90
ja 0x40ad69
push eax
lea eax, [esp + 0x2c]
push edi
push eax
call fcn.0055e7e0
mov eax, dword [ebx + 4]
add esp, 0xc
cmp dword [ebx + 8], eax
je 0x40ad5c
mov ecx, 0x24
lea esi, [esp + 0x28]
mov edi, eax
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x90
mov esi, dword [esp + 0x20]
mov edi, dword [esp + 0x24]
jmp 0x40ad69
lea ecx, [esp + 0x28]
push ecx
push eax
mov ecx, ebx
call fcn.00409a20
mov eax, dword [esp + 0x10]
inc eax
mov dword [esp + 0x10], eax
cmp eax, dword [esp + 0x18]
jb 0x40acf0
cmp dword [esp + 0x14], 0x90
jne 0x40ac7c
mov ecx, dword [esp + 0xbc]
mov eax, 1
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0055c6fa
mov esp, ebp
pop ebp
ret
Function at 0x40adb0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x58
mov eax, dword [0x61de38]
xor eax, esp
mov dword [esp + 0x54], eax
push esi
mov esi, ecx
mov dword [esp + 0xc], 0
push edi
mov edi, edx
mov dword [esp + 0x18], edi
mov eax, dword [esi]
mov dword [esi + 4], eax
mov eax, dword [edi]
test eax, eax
je 0x40ae03
push 0
lea ecx, [esp + 0x10]
push ecx
push 4
lea ecx, [esp + 0x1c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x40ae16
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [edi + 4], eax
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x54]
xor ecx, esp
call fcn.0055c6fa
mov esp, ebp
pop ebp
ret
cmp dword [esp + 0xc], 0
je 0x40ae03
mov eax, dword [edi]
mov dword [esp + 0x14], 0
test eax, eax
je 0x40ae03
push 0
lea ecx, [esp + 0x10]
push ecx
push 4
lea ecx, [esp + 0x20]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x40adfa
cmp dword [esp + 0xc], 0
je 0x40ae03
push dword [esp + 0x10]
call fcn.0041a8fe
xor edi, edi
add esp, 4
mov edx, eax
mov dword [esp + 0xc], edx
cmp dword [esp + 0x14], edi
jbe 0x40af1c
nop dword [eax]
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
test ecx, ecx
je 0x40ae03
push 0
lea eax, [esp + 0x20]
push eax
push dword [esp + 0x18]
push edx
push ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x40aefc
cmp dword [esp + 0x1c], 0
je 0x40ae03
mov eax, dword [esp + 0x10]
cmp eax, 0x30
ja 0x40aeec
push eax
push dword [esp + 0x10]
lea eax, [esp + 0x28]
push eax
call fcn.0055e7e0
mov eax, dword [esi + 4]
add esp, 0xc
cmp dword [esi + 8], eax
je 0x40aedf
movups xmm0, xmmword [esp + 0x20]
movups xmmword [eax], xmm0
movups xmm0, xmmword [esp + 0x30]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [esp + 0x40]
movups xmmword [eax + 0x20], xmm0
add dword [esi + 4], 0x30
jmp 0x40aeec
lea ecx, [esp + 0x20]
push ecx
push eax
mov ecx, esi
call fcn.00409860
inc edi
cmp edi, dword [esp + 0x14]
jae 0x40af1c
mov edx, dword [esp + 0xc]
jmp 0x40ae70
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [esp + 0x18]
mov dword [ecx + 4], eax
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x54]
xor ecx, esp
call fcn.0055c6fa
mov esp, ebp
pop ebp
ret
cmp dword [esp + 0x10], 0x30
jne 0x40ae03
mov ecx, dword [esp + 0x5c]
mov eax, 1
pop edi
pop esi
xor ecx, esp
call fcn.0055c6fa
mov esp, ebp
pop ebp
ret
Function at 0x40cfb0
Capabilities:
Read file on windows

Disassembly:
sub esp, 0x1c
push ebx
mov ebx, edx
mov dword [esp + 4], 0
push ebp
push esi
push edi
mov eax, dword [ebx]
mov esi, ecx
test eax, eax
je 0x40cfed
mov ebp, dword [sym.imp.KERNEL32.dll_ReadFile]
lea ecx, [esp + 0x14]
push 0
push ecx
push 4
lea ecx, [esp + 0x1c]
push ecx
push eax
call ebp
test eax, eax
jne 0x40cff7
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebx + 4], eax
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret
cmp dword [esp + 0x14], 0
je 0x40cfed
xor edi, edi
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
cmp dword [esp + 0x10], edi
jbe 0x40d072
mov eax, dword [ebx]
test eax, eax
je 0x40cfed
push 0
lea ecx, [esp + 0x18]
push ecx
push 0x10
lea ecx, [esp + 0x24]
push ecx
push eax
call ebp
test eax, eax
je 0x40cfe4
cmp dword [esp + 0x14], 0
je 0x40cfed
mov eax, dword [esi + 4]
cmp dword [esi + 8], eax
je 0x40d05e
movups xmm0, xmmword [esp + 0x18]
movups xmmword [eax], xmm0
add dword [esi + 4], 0x10
jmp 0x40d06b
lea ecx, [esp + 0x18]
push ecx
push eax
mov ecx, esi
call fcn.0040d160
inc edi
cmp edi, dword [esp + 0x10]
jb 0x40d026
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x1c
ret

Function at 0x40d390
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x24
push ebx
push esi
mov esi, ecx
mov dword [esp + 0xc], 0
mov ebx, edx
push edi
mov eax, dword [esi]
mov dword [esi + 4], eax
mov eax, dword [ebx]
test eax, eax
je 0x40d3d7
mov edi, dword [sym.imp.KERNEL32.dll_ReadFile]
lea ecx, [esp + 0x18]
push 0
push ecx
push 4
lea ecx, [esp + 0x1c]
push ecx
push eax
call edi
test eax, eax
jne 0x40d3e0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebx + 4], eax
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [esp + 0x18], 0
je 0x40d3d7
mov eax, dword [ebx]
mov dword [esp + 0x14], 0
test eax, eax
je 0x40d3d7
push 0
lea ecx, [esp + 0x1c]
push ecx
push 4
lea ecx, [esp + 0x20]
push ecx
push eax
call edi
test eax, eax
je 0x40d3ce
cmp dword [esp + 0x18], 0
je 0x40d3d7
push dword [esp + 0x10]
mov dword [esp + 0x30], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x24], 0
call fcn.0041a8fe
xor edi, edi
mov dword [esp + 0x1c], eax
add esp, 4
cmp dword [esp + 0x14], edi
jbe 0x40d4c7
nop dword [eax]
mov ecx, dword [ebx]
test ecx, ecx
je 0x40d3d7
push 0
lea edx, [esp + 0x20]
push edx
push dword [esp + 0x18]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x40d3ce
cmp dword [esp + 0x1c], 0
je 0x40d3d7
mov eax, dword [esp + 0x10]
cmp eax, 0x10
ja 0x40d4ba
push eax
push dword [esp + 0x1c]
lea eax, [esp + 0x28]
push eax
call fcn.0055e7e0
mov eax, dword [esi + 4]
add esp, 0xc
cmp dword [esi + 8], eax
je 0x40d4ad
movups xmm0, xmmword [esp + 0x20]
movups xmmword [eax], xmm0
add dword [esi + 4], 0x10
jmp 0x40d4ba
lea ecx, [esp + 0x20]
push ecx
push eax
mov ecx, esi
call fcn.0040d160
inc edi
cmp edi, dword [esp + 0x14]
jae 0x40d4c7
mov eax, dword [esp + 0x18]
jmp 0x40d450
cmp dword [esp + 0x10], 0x10
jne 0x40d3d7
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x40d510
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x13c
mov eax, dword [0x61de38]
xor eax, esp
mov dword [esp + 0x138], eax
push ebx
mov ebx, ecx
mov dword [esp + 0x10], edx
push esi
push edi
mov eax, dword [ebx]
mov edi, dword [eax]
mov dword [eax], eax
mov eax, dword [ebx]
mov dword [eax + 4], eax
mov dword [ebx + 4], 0
cmp edi, dword [ebx]
je 0x40d566
nop dword [eax]
mov esi, dword [edi]
push 0x120
push edi
call fcn.0055c9a5
add esp, 8
mov edi, esi
cmp esi, dword [ebx]
jne 0x40d550
mov edi, dword [esp + 0x18]
mov dword [esp + 0xc], 0
mov eax, dword [edi]
test eax, eax
je 0x40d59c
mov esi, dword [sym.imp.KERNEL32.dll_ReadFile]
lea ecx, [esp + 0x10]
push 0
push ecx
push 4
lea ecx, [esp + 0x18]
push ecx
push eax
call esi
test eax, eax
jne 0x40d5b3
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [edi + 4], eax
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x138]
xor ecx, esp
call fcn.0055c6fa
mov esp, ebp
pop ebp
ret
cmp dword [esp + 0x10], 0
je 0x40d59c
mov eax, dword [edi]
mov dword [esp + 0x14], 0
test eax, eax
je 0x40d59c
push 0
lea ecx, [esp + 0x14]
push ecx
push 4
lea ecx, [esp + 0x20]
push ecx
push eax
call esi
test eax, eax
je 0x40d593
cmp dword [esp + 0x10], 0
je 0x40d59c
push dword [esp + 0xc]
call fcn.0041a8fe
mov ecx, dword [esp + 0x10]
xor esi, esi
add esp, 4
mov edx, eax
mov dword [esp + 0x10], edx
cmp dword [esp + 0x14], esi
jbe 0x40d6a0
mov eax, dword [edi]
test eax, eax
je 0x40d59c
push 0
lea edi, [esp + 0x20]
push edi
push ecx
push edx
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov edi, dword [esp + 0x18]
test eax, eax
je 0x40d593
cmp dword [esp + 0x1c], 0
je 0x40d59c
mov ecx, dword [esp + 0xc]
cmp ecx, 0x118
ja 0x40d690
push ecx
push dword [esp + 0x14]
lea eax, [esp + 0x30]
push eax
call fcn.0055e7e0
mov eax, dword [ebx]
lea edx, [esp + 0x34]
add esp, 0xc
mov dword [esp + 0x20], eax
mov ecx, dword [eax + 4]
push edx
push ecx
push eax
mov dword [esp + 0x30], ecx
call fcn.0040d6e0
mov edx, dword [ebx + 4]
mov ecx, 0xe38e37
sub ecx, edx
cmp ecx, 1
jb 0x40d6c6
lea ecx, [edx + 1]
mov dword [ebx + 4], ecx
mov ecx, dword [esp + 0x20]
mov dword [ecx + 4], eax
mov ecx, dword [esp + 0x24]
mov dword [ecx], eax
mov ecx, dword [esp + 0xc]
inc esi
cmp esi, dword [esp + 0x14]
jae 0x40d6a0
mov edx, dword [esp + 0x10]
jmp 0x40d606
cmp ecx, 0x118
jne 0x40d59c
mov ecx, dword [esp + 0x144]
mov eax, 1
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0055c6fa
mov esp, ebp
pop ebp
ret
push str.list_T__too_long
call fcn.0055dbbe
int3
Function at 0x40da30
Capabilities:
Read file on windows

Disassembly:
push ebx
push ebp
push esi
push edi
push 0
push 0
mov ebx, ecx
push 3
push 0
push 1
mov dword [ebx], 1
lea edi, [ebx + 4]
mov dword [edi], 3
lea ebp, [ebx + 8]
mov eax, dword [str.Sound]
mov dword [ebp], eax
mov ax, word [0x5fba3c]
push 0xc0000000
push dword [esp + 0x2c]
mov word [ebp + 4], ax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
jne 0x40da98
xor esi, esi
call dword [sym.imp.KERNEL32.dll_GetLastError]
xor edi, edi
test esi, esi
je 0x40da8f
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
ret 4
test esi, esi
je 0x40da82
push 0
lea eax, [esp + 0x18]
push eax
push 4
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_ReadFile]
push esi
call ebx
test eax, eax
je 0x40da7c
cmp dword [esp + 0x14], 0
je 0x40da82
push 0
lea eax, [esp + 0x18]
push eax
push 4
push edi
push esi
call ebx
test eax, eax
je 0x40da7c
cmp dword [esp + 0x14], 0
je 0x40da82
push 0
lea eax, [esp + 0x18]
push eax
push 0x104
push ebp
push esi
call ebx
test eax, eax
je 0x40da7c
cmp dword [esp + 0x14], 0
je 0x40da82
cmp dword [edi], 0xa
jbe 0x40daf8
mov dword [edi], 0xa
mov edi, 1
jmp 0x40da84

Function at 0x40eee0
Capabilities:
Write file on windows

Disassembly:
sub esp, 8
push esi
mov esi, ecx
mov dword [esp + 4], 4
mov eax, dword [esi]
test eax, eax
je 0x40ef16
push 0
lea ecx, [esp + 0xc]
push ecx
push 4
lea ecx, [esp + 0x10]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x40ef1f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 4], eax
xor eax, eax
pop esi
add esp, 8
ret 4
cmp dword [esp + 8], 0
je 0x40ef16
mov eax, dword [esi]
test eax, eax
je 0x40ef16
push 0
lea ecx, [esp + 0xc]
push ecx
push dword [esp + 0xc]
push dword [esp + 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x40ef0d
mov eax, dword [esp + 8]
pop esi
add esp, 8
ret 4
Function at 0x40f000
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x6c
mov eax, dword [0x61de38]
xor eax, esp
mov dword [esp + 0x68], eax
push ebx
mov ebx, ecx
mov dword [esp + 0x10], edx
push esi
push edi
mov eax, dword [ebx]
mov edi, dword [eax]
mov dword [eax], eax
mov eax, dword [ebx]
mov dword [eax + 4], eax
mov dword [ebx + 4], 0
cmp edi, dword [ebx]
je 0x40f046
mov esi, dword [edi]
push 0x50
push edi
call fcn.0055c9a5
add esp, 8
mov edi, esi
cmp esi, dword [ebx]
jne 0x40f033
mov edi, dword [esp + 0x18]
mov dword [esp + 0xc], 0
mov eax, dword [edi]
test eax, eax
je 0x40f07c
mov esi, dword [sym.imp.KERNEL32.dll_ReadFile]
lea ecx, [esp + 0x10]
push 0
push ecx
push 4
lea ecx, [esp + 0x18]
push ecx
push eax
call esi
test eax, eax
jne 0x40f090
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [edi + 4], eax
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.0055c6fa
mov esp, ebp
pop ebp
ret
cmp dword [esp + 0x10], 0
je 0x40f07c
mov eax, dword [edi]
mov dword [esp + 0x14], 0
test eax, eax
je 0x40f07c
push 0
lea ecx, [esp + 0x14]
push ecx
push 4
lea ecx, [esp + 0x20]
push ecx
push eax
call esi
test eax, eax
je 0x40f073
cmp dword [esp + 0x10], 0
je 0x40f07c
lea ecx, [esp + 0x28]
call fcn.0040db00
push dword [esp + 0xc]
call fcn.0041a8fe
mov ecx, dword [esp + 0x10]
xor esi, esi
add esp, 4
mov edx, eax
mov dword [esp + 0x10], edx
cmp dword [esp + 0x14], esi
jbe 0x40f187
nop dword [eax]
mov eax, dword [edi]
test eax, eax
je 0x40f07c
push 0
lea edi, [esp + 0x20]
push edi
push ecx
push edx
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov edi, dword [esp + 0x18]
test eax, eax
je 0x40f073
cmp dword [esp + 0x1c], 0
je 0x40f07c
mov ecx, dword [esp + 0xc]
cmp ecx, 0x48
ja 0x40f177
push ecx
push dword [esp + 0x14]
lea eax, [esp + 0x30]
push eax
call fcn.0055e7e0
mov eax, dword [ebx]
lea edx, [esp + 0x34]
add esp, 0xc
mov dword [esp + 0x20], eax
mov ecx, dword [eax + 4]
push edx
push ecx
push eax
mov dword [esp + 0x30], ecx
call fcn.0040fe50
mov edx, dword [ebx + 4]
mov ecx, 0x3333332
sub ecx, edx
cmp ecx, 1
jb 0x40f1a5
lea ecx, [edx + 1]
mov dword [ebx + 4], ecx
mov ecx, dword [esp + 0x20]
mov dword [ecx + 4], eax
mov ecx, dword [esp + 0x24]
mov dword [ecx], eax
mov ecx, dword [esp + 0xc]
inc esi
cmp esi, dword [esp + 0x14]
jae 0x40f187
mov edx, dword [esp + 0x10]
jmp 0x40f0f0
cmp ecx, 0x48
jne 0x40f07c
pop edi
lea eax, [ecx - 0x47]
mov ecx, dword [esp + 0x70]
pop esi
pop ebx
xor ecx, esp
call fcn.0055c6fa
mov esp, ebp
pop ebp
ret
push str.list_T__too_long
call fcn.0055dbbe
int3
Function at 0x40f1b0
Capabilities:
Read file on windows

Disassembly:
sub esp, 0x10
push ebx
push ebp
push esi
mov esi, ecx
mov dword [esp + 0xc], 0
mov ebx, edx
push edi
mov eax, dword [esi]
mov dword [esi + 4], eax
mov eax, dword [ebx]
test eax, eax
je 0x40f1f2
mov ebp, dword [sym.imp.KERNEL32.dll_ReadFile]
lea ecx, [esp + 0x18]
push 0
push ecx
push 4
lea ecx, [esp + 0x1c]
push ecx
push eax
call ebp
test eax, eax
jne 0x40f1fc
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebx + 4], eax
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x10
ret
cmp dword [esp + 0x18], 0
je 0x40f1f2
mov eax, dword [ebx]
mov dword [esp + 0x14], 0
test eax, eax
je 0x40f1f2
push 0
lea ecx, [esp + 0x1c]
push ecx
push 4
lea ecx, [esp + 0x20]
push ecx
push eax
call ebp
test eax, eax
je 0x40f1e9
cmp dword [esp + 0x18], 0
je 0x40f1f2
push dword [esp + 0x10]
call fcn.0041a8fe
xor edi, edi
add esp, 4
mov ebp, eax
cmp dword [esp + 0x14], edi
jbe 0x40f2a7
mov ecx, dword [ebx]
test ecx, ecx
je 0x40f1f2
push 0
lea eax, [esp + 0x20]
push eax
push dword [esp + 0x18]
push ebp
push ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x40f1e9
cmp dword [esp + 0x1c], 0
je 0x40f1f2
mov eax, dword [esp + 0x10]
cmp eax, 4
ja 0x40f2a0
push eax
lea eax, [esp + 0x1c]
push ebp
push eax
call fcn.0055e7e0
mov ecx, dword [esi + 4]
add esp, 0xc
cmp dword [esi + 8], ecx
je 0x40f293
mov eax, dword [esp + 0x18]
mov dword [ecx], eax
add dword [esi + 4], 4
jmp 0x40f2a0
lea eax, [esp + 0x18]
push eax
push ecx
mov ecx, esi
call fcn.0040a410
inc edi
cmp edi, dword [esp + 0x14]
jb 0x40f243
cmp dword [esp + 0x10], 4
jne 0x40f1f2
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x10
ret
Function at 0x40f2c0
Capabilities:
Read file on windows

Disassembly:
sub esp, 0x24
mov eax, dword [0x61de38]
xor eax, esp
mov dword [esp + 0x1c], eax
push ebx
push ebp
push esi
mov esi, ecx
mov dword [esp + 0xc], 0
mov ebx, edx
push edi
mov eax, dword [esi]
mov dword [esi + 4], eax
mov eax, dword [ebx]
test eax, eax
je 0x40f30d
mov ebp, dword [sym.imp.KERNEL32.dll_ReadFile]
lea ecx, [esp + 0x14]
push 0
push ecx
push 4
lea ecx, [esp + 0x1c]
push ecx
push eax
call ebp
test eax, eax
jne 0x40f322
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebx + 4], eax
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x1c]
xor ecx, esp
call fcn.0055c6fa
add esp, 0x24
ret
cmp dword [esp + 0x14], 0
je 0x40f30d
mov eax, dword [ebx]
mov dword [esp + 0x18], 0
test eax, eax
je 0x40f30d
push 0
lea ecx, [esp + 0x18]
push ecx
push 4
lea ecx, [esp + 0x24]
push ecx
push eax
call ebp
test eax, eax
je 0x40f304
cmp dword [esp + 0x14], 0
je 0x40f30d
push dword [esp + 0x10]
mov dword [esp + 0x2c], 0
call fcn.0041a8fe
xor edi, edi
add esp, 4
mov ebp, eax
cmp dword [esp + 0x18], edi
jbe 0x40f3df
mov ecx, dword [ebx]
test ecx, ecx
je 0x40f30d
push 0
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
push ebp
push ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x40f304
cmp dword [esp + 0x14], 0
je 0x40f30d
mov eax, dword [esp + 0x10]
cmp eax, 0x10
ja 0x40f3d8
push eax
lea eax, [esp + 0x20]
push ebp
push eax
call fcn.0055e7e0
mov eax, dword [esi + 4]
add esp, 0xc
cmp dword [esi + 8], eax
je 0x40f3cb
movups xmm0, xmmword [esp + 0x1c]
movups xmmword [eax], xmm0
add dword [esi + 4], 0x10
jmp 0x40f3d8
lea ecx, [esp + 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.0040d160
inc edi
cmp edi, dword [esp + 0x18]
jb 0x40f371
cmp dword [esp + 0x10], 0x10
jne 0x40f30d
mov ecx, dword [esp + 0x2c]
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0055c6fa
add esp, 0x24
ret
Function at 0x40f410
Capabilities:
Read file on windows

Disassembly:
sub esp, 0x18
push ebx
push ebp
push esi
mov esi, ecx
mov dword [esp + 0xc], 0
mov ebx, edx
push edi
mov eax, dword [esi]
mov dword [esi + 4], eax
mov eax, dword [ebx]
test eax, eax
je 0x40f452
mov ebp, dword [sym.imp.KERNEL32.dll_ReadFile]
lea ecx, [esp + 0x18]
push 0
push ecx
push 4
lea ecx, [esp + 0x1c]
push ecx
push eax
call ebp
test eax, eax
jne 0x40f45c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebx + 4], eax
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x18
ret
cmp dword [esp + 0x18], 0
je 0x40f452
mov eax, dword [ebx]
mov dword [esp + 0x14], 0
test eax, eax
je 0x40f452
push 0
lea ecx, [esp + 0x1c]
push ecx
push 4
lea ecx, [esp + 0x20]
push ecx
push eax
call ebp
test eax, eax
je 0x40f449
cmp dword [esp + 0x18], 0
je 0x40f452
push dword [esp + 0x10]
call fcn.0041a8fe
xor edi, edi
add esp, 4
mov ebp, eax
cmp dword [esp + 0x14], edi
jbe 0x40f512
mov ecx, dword [ebx]
test ecx, ecx
je 0x40f452
push 0
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x18]
push ebp
push ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x40f449
cmp dword [esp + 0x18], 0
je 0x40f452
mov eax, dword [esp + 0x10]
cmp eax, 0xc
ja 0x40f50b
push eax
lea eax, [esp + 0x20]
push ebp
push eax
call fcn.0055e7e0
mov ecx, dword [esi + 4]
add esp, 0xc
cmp dword [esi + 8], ecx
je 0x40f4fe
movq xmm0, qword [esp + 0x1c]
mov eax, dword [esp + 0x24]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
add dword [esi + 4], 0xc
jmp 0x40f50b
lea eax, [esp + 0x1c]
push eax
push ecx
mov ecx, esi
call fcn.00409be0
inc edi
cmp edi, dword [esp + 0x14]
jb 0x40f4a3
cmp dword [esp + 0x10], 0xc
jne 0x40f452
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x18
ret
Function at 0x40f530
Capabilities:
Read file on windows

Disassembly:
sub esp, 0x10
push ebx
push ebp
push esi
mov esi, ecx
mov dword [esp + 0xc], 0
mov ebx, edx
push edi
mov eax, dword [esi]
mov dword [esi + 4], eax
mov eax, dword [ebx]
test eax, eax
je 0x40f572
mov ebp, dword [sym.imp.KERNEL32.dll_ReadFile]
lea ecx, [esp + 0x18]
push 0
push ecx
push 4
lea ecx, [esp + 0x1c]
push ecx
push eax
call ebp
test eax, eax
jne 0x40f57c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebx + 4], eax
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x10
ret
cmp dword [esp + 0x18], 0
je 0x40f572
mov eax, dword [ebx]
mov dword [esp + 0x14], 0
test eax, eax
je 0x40f572
push 0
lea ecx, [esp + 0x1c]
push ecx
push 4
lea ecx, [esp + 0x20]
push ecx
push eax
call ebp
test eax, eax
je 0x40f569
cmp dword [esp + 0x18], 0
je 0x40f572
push dword [esp + 0x10]
call fcn.0041a8fe
xor edi, edi
add esp, 4
mov ebp, eax
cmp dword [esp + 0x14], edi
jbe 0x40f627
mov ecx, dword [ebx]
test ecx, ecx
je 0x40f572
push 0
lea eax, [esp + 0x20]
push eax
push dword [esp + 0x18]
push ebp
push ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x40f569
cmp dword [esp + 0x1c], 0
je 0x40f572
mov eax, dword [esp + 0x10]
cmp eax, 4
ja 0x40f620
push eax
lea eax, [esp + 0x1c]
push ebp
push eax
call fcn.0055e7e0
mov ecx, dword [esi + 4]
add esp, 0xc
cmp dword [esi + 8], ecx
je 0x40f613
mov eax, dword [esp + 0x18]
mov dword [ecx], eax
add dword [esi + 4], 4
jmp 0x40f620
lea eax, [esp + 0x18]
push eax
push ecx
mov ecx, esi
call fcn.0040ffb0
inc edi
cmp edi, dword [esp + 0x14]
jb 0x40f5c3
cmp dword [esp + 0x10], 4
jne 0x40f572
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x10
ret
Function at 0x40f640
Capabilities:
Read file on windows

Disassembly:
sub esp, 0x20
push ebx
push ebp
push esi
mov esi, ecx
mov dword [esp + 0xc], 0
mov ebx, edx
push edi
mov eax, dword [esi]
mov dword [esi + 4], eax
mov eax, dword [ebx]
test eax, eax
je 0x40f682
mov ebp, dword [sym.imp.KERNEL32.dll_ReadFile]
lea ecx, [esp + 0x18]
push 0
push ecx
push 4
lea ecx, [esp + 0x1c]
push ecx
push eax
call ebp
test eax, eax
jne 0x40f68c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebx + 4], eax
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x20
ret
cmp dword [esp + 0x18], 0
je 0x40f682
mov eax, dword [ebx]
mov dword [esp + 0x14], 0
test eax, eax
je 0x40f682
push 0
lea ecx, [esp + 0x1c]
push ecx
push 4
lea ecx, [esp + 0x20]
push ecx
push eax
call ebp
test eax, eax
je 0x40f679
cmp dword [esp + 0x18], 0
je 0x40f682
push dword [esp + 0x10]
call fcn.0041a8fe
xor edi, edi
add esp, 4
mov ebp, eax
cmp dword [esp + 0x14], edi
jbe 0x40f740
mov ecx, dword [ebx]
test ecx, ecx
je 0x40f682
push 0
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x18]
push ebp
push ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x40f679
cmp dword [esp + 0x18], 0
je 0x40f682
mov eax, dword [esp + 0x10]
cmp eax, 0x14
ja 0x40f739
push eax
lea eax, [esp + 0x20]
push ebp
push eax
call fcn.0055e7e0
mov ecx, dword [esi + 4]
add esp, 0xc
cmp dword [esi + 8], ecx
je 0x40f72c
movups xmm0, xmmword [esp + 0x1c]
mov eax, dword [esp + 0x2c]
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], eax
add dword [esi + 4], 0x14
jmp 0x40f739
lea eax, [esp + 0x1c]
push eax
push ecx
mov ecx, esi
call fcn.00410100
inc edi
cmp edi, dword [esp + 0x14]
jb 0x40f6d3
cmp dword [esp + 0x10], 0x14
jne 0x40f682
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x20
ret