joyce8/EMBER2024-capa huggingface dataset:
Function at 0x6de95b10
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x2c
mov ebx, dword [ebp + 8]
movzx esi, word [ebx + 0xb72]
mov edi, dword [ebx + 0xbb0]
test byte [0x6dea2114], 8
jne 0x6de95be0
movzx eax, byte [ebx + 0xdb0]
test al, al
je 0x6de95bcd
mov edx, dword [ebx + 0xdb8]
test edx, edx
je 0x6de95bcd
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], edi
mov edx, dword [ebx + 0x954]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp], 1
call sym._HidP_InitializeReportForID_20
sub esp, 0x14
cmp eax, 0x110000
jne 0x6de95bcf
mov ecx, dword [ebp + 0xc]
movzx edx, word [ebx + 0xb72]
mov eax, dword [ebx + 0x954]
mov dword [esp + 4], ecx
mov ecx, dword [ebx + 0xdb8]
mov dword [esp], ecx
mov ecx, edi
call sym._set_report_value.isra.0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], esi
mov dword [esp + 4], edi
mov eax, dword [ebx + 0x93c]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_WriteFile]
sub esp, 0x14
test eax, eax
je 0x6de95c0d
xor eax, eax
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], str.iface__p._n
mov dword [esp + 8], str.hid_joystick_send_device_gain
mov dword [esp + 4], 0x6dea2114
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0_4
jmp 0x6de95b36
mov eax, 0x8007001e
jmp 0x6de95bcf
Function at 0x6de95c20
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x3c
mov ebx, dword [ebp + 8]
movzx edi, word [ebx + 0xb72]
mov esi, dword [ebx + 0xbb0]
test byte [0x6dea2114], 8
jne 0x6de95d90
cmp dword [ebp + 0xc], 0x20
ja case.0x6de95c4f.0
mov eax, dword [ebp + 0xc]
jmp dword [eax*4 + 0x6dea8164]
mov eax, 0x9c
mov word [ebp - 0x1e], ax
lea esi, [esi]
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], esi
mov eax, dword [ebx + 0x954]
mov dword [ebp - 0x1c], 1
mov dword [esp + 8], eax
movzx eax, byte [ebx + 0xcc8]
mov dword [esp], 1
mov dword [esp + 4], eax
call sym._HidP_InitializeReportForID_20
sub esp, 0x14
cmp eax, 0x110000
je 0x6de95cf0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, 0x9a
mov word [ebp - 0x1e], ax
mov eax, dword [ebx]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], sym._unload_effect_object_8
mov dword [esp], ebx
call dword [eax + 0x5c]
mov dword [ebx + 0x930], 3
sub esp, 0x10
jmp case.0x6de95c4f.0
mov dword [esp + 0x1c], edi
mov dword [esp + 0x18], esi
mov eax, dword [ebx + 0x954]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1c]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1e]
mov dword [esp + 0xc], eax
movzx eax, word [ebx + 0xcd0]
mov dword [esp + 4], 0xf
mov dword [esp + 8], eax
mov dword [esp], 1
call sym._HidP_SetUsages_32
sub esp, 0x20
cmp eax, 0x110000
jne 0x6de95caa
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], edi
mov dword [esp + 4], esi
mov eax, dword [ebx + 0x93c]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_WriteFile]
sub esp, 0x14
test eax, eax
je 0x6de95e29
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0x6de95d80
cmp dword [ebp + 0xc], 1
je 0x6de95e10
xor eax, eax
jmp 0x6de95caa
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], str.iface__p__command__lx._n
mov dword [esp + 0x14], eax
mov dword [esp + 8], str.hid_joystick_send_force_feedback_command
mov dword [esp + 4], 0x6dea2114
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0_4
jmp 0x6de95c46
mov eax, 0x99
mov word [ebp - 0x1e], ax
jmp case.0x6de95c4f.0
mov eax, 0x9b
mov word [ebp - 0x1e], ax
jmp case.0x6de95c4f.0
mov ecx, 0x97
mov word [ebp - 0x1e], cx
jmp case.0x6de95c4f.0
mov edx, 0x98
mov word [ebp - 0x1e], dx
jmp case.0x6de95c4f.0
mov eax, dword [ebx + 0x92c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call sym._hid_joystick_send_device_gain
xor eax, eax
jmp 0x6de95caa
mov eax, 0x8007001e
jmp 0x6de95caa
Function at 0x6de95c60
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x3c
mov ebx, dword [ebp + 8]
movzx edi, word [ebx + 0xb72]
mov esi, dword [ebx + 0xbb0]
test byte [0x6dea2114], 8
jne 0x6de95d90
cmp dword [ebp + 0xc], 0x20
ja case.0x6de95c4f.0
mov eax, dword [ebp + 0xc]
jmp dword [eax*4 + 0x6dea8164]
mov eax, 0x9c
mov word [ebp - 0x1e], ax
lea esi, [esi]
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], esi
mov eax, dword [ebx + 0x954]
mov dword [ebp - 0x1c], 1
mov dword [esp + 8], eax
movzx eax, byte [ebx + 0xcc8]
mov dword [esp], 1
mov dword [esp + 4], eax
call sym._HidP_InitializeReportForID_20
sub esp, 0x14
cmp eax, 0x110000
je 0x6de95cf0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, 0x9a
mov word [ebp - 0x1e], ax
mov eax, dword [ebx]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], sym._unload_effect_object_8
mov dword [esp], ebx
call dword [eax + 0x5c]
mov dword [ebx + 0x930], 3
sub esp, 0x10
jmp case.0x6de95c4f.0
mov dword [esp + 0x1c], edi
mov dword [esp + 0x18], esi
mov eax, dword [ebx + 0x954]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1c]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1e]
mov dword [esp + 0xc], eax
movzx eax, word [ebx + 0xcd0]
mov dword [esp + 4], 0xf
mov dword [esp + 8], eax
mov dword [esp], 1
call sym._HidP_SetUsages_32
sub esp, 0x20
cmp eax, 0x110000
jne 0x6de95caa
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], edi
mov dword [esp + 4], esi
mov eax, dword [ebx + 0x93c]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_WriteFile]
sub esp, 0x14
test eax, eax
je 0x6de95e29
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0x6de95d80
cmp dword [ebp + 0xc], 1
je 0x6de95e10
xor eax, eax
jmp 0x6de95caa
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], str.iface__p__command__lx._n
mov dword [esp + 0x14], eax
mov dword [esp + 8], str.hid_joystick_send_force_feedback_command
mov dword [esp + 4], 0x6dea2114
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0_4
jmp 0x6de95c46
mov eax, 0x99
mov word [ebp - 0x1e], ax
jmp case.0x6de95c4f.0
mov eax, 0x9b
mov word [ebp - 0x1e], ax
jmp case.0x6de95c4f.0
mov ecx, 0x97
mov word [ebp - 0x1e], cx
jmp case.0x6de95c4f.0
mov edx, 0x98
mov word [ebp - 0x1e], dx
jmp case.0x6de95c4f.0
mov eax, dword [ebx + 0x92c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call sym._hid_joystick_send_device_gain
xor eax, eax
jmp 0x6de95caa
mov eax, 0x8007001e
jmp 0x6de95caa
Function at 0x6de95c70
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x3c
mov ebx, dword [ebp + 8]
movzx edi, word [ebx + 0xb72]
mov esi, dword [ebx + 0xbb0]
test byte [0x6dea2114], 8
jne 0x6de95d90
cmp dword [ebp + 0xc], 0x20
ja case.0x6de95c4f.0
mov eax, dword [ebp + 0xc]
jmp dword [eax*4 + 0x6dea8164]
mov eax, 0x9c
mov word [ebp - 0x1e], ax
lea esi, [esi]
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], esi
mov eax, dword [ebx + 0x954]
mov dword [ebp - 0x1c], 1
mov dword [esp + 8], eax
movzx eax, byte [ebx + 0xcc8]
mov dword [esp], 1
mov dword [esp + 4], eax
call sym._HidP_InitializeReportForID_20
sub esp, 0x14
cmp eax, 0x110000
je 0x6de95cf0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, 0x9a
mov word [ebp - 0x1e], ax
mov eax, dword [ebx]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], sym._unload_effect_object_8
mov dword [esp], ebx
call dword [eax + 0x5c]
mov dword [ebx + 0x930], 3
sub esp, 0x10
jmp case.0x6de95c4f.0
mov dword [esp + 0x1c], edi
mov dword [esp + 0x18], esi
mov eax, dword [ebx + 0x954]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1c]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1e]
mov dword [esp + 0xc], eax
movzx eax, word [ebx + 0xcd0]
mov dword [esp + 4], 0xf
mov dword [esp + 8], eax
mov dword [esp], 1
call sym._HidP_SetUsages_32
sub esp, 0x20
cmp eax, 0x110000
jne 0x6de95caa
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], edi
mov dword [esp + 4], esi
mov eax, dword [ebx + 0x93c]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_WriteFile]
sub esp, 0x14
test eax, eax
je 0x6de95e29
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0x6de95d80
cmp dword [ebp + 0xc], 1
je 0x6de95e10
xor eax, eax
jmp 0x6de95caa
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], str.iface__p__command__lx._n
mov dword [esp + 0x14], eax
mov dword [esp + 8], str.hid_joystick_send_force_feedback_command
mov dword [esp + 4], 0x6dea2114
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0_4
jmp 0x6de95c46
mov eax, 0x99
mov word [ebp - 0x1e], ax
jmp case.0x6de95c4f.0
mov eax, 0x9b
mov word [ebp - 0x1e], ax
jmp case.0x6de95c4f.0
mov ecx, 0x97
mov word [ebp - 0x1e], cx
jmp case.0x6de95c4f.0
mov edx, 0x98
mov word [ebp - 0x1e], dx
jmp case.0x6de95c4f.0
mov eax, dword [ebx + 0x92c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call sym._hid_joystick_send_device_gain
xor eax, eax
jmp 0x6de95caa
mov eax, 0x8007001e
jmp 0x6de95caa
Function at 0x6de95cb8
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x3c
mov ebx, dword [ebp + 8]
movzx edi, word [ebx + 0xb72]
mov esi, dword [ebx + 0xbb0]
test byte [0x6dea2114], 8
jne 0x6de95d90
cmp dword [ebp + 0xc], 0x20
ja case.0x6de95c4f.0
mov eax, dword [ebp + 0xc]
jmp dword [eax*4 + 0x6dea8164]
mov eax, 0x9c
mov word [ebp - 0x1e], ax
lea esi, [esi]
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], esi
mov eax, dword [ebx + 0x954]
mov dword [ebp - 0x1c], 1
mov dword [esp + 8], eax
movzx eax, byte [ebx + 0xcc8]
mov dword [esp], 1
mov dword [esp + 4], eax
call sym._HidP_InitializeReportForID_20
sub esp, 0x14
cmp eax, 0x110000
je 0x6de95cf0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, 0x9a
mov word [ebp - 0x1e], ax
mov eax, dword [ebx]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], sym._unload_effect_object_8
mov dword [esp], ebx
call dword [eax + 0x5c]
mov dword [ebx + 0x930], 3
sub esp, 0x10
jmp case.0x6de95c4f.0
mov dword [esp + 0x1c], edi
mov dword [esp + 0x18], esi
mov eax, dword [ebx + 0x954]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1c]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1e]
mov dword [esp + 0xc], eax
movzx eax, word [ebx + 0xcd0]
mov dword [esp + 4], 0xf
mov dword [esp + 8], eax
mov dword [esp], 1
call sym._HidP_SetUsages_32
sub esp, 0x20
cmp eax, 0x110000
jne 0x6de95caa
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], edi
mov dword [esp + 4], esi
mov eax, dword [ebx + 0x93c]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_WriteFile]
sub esp, 0x14
test eax, eax
je 0x6de95e29
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0x6de95d80
cmp dword [ebp + 0xc], 1
je 0x6de95e10
xor eax, eax
jmp 0x6de95caa
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], str.iface__p__command__lx._n
mov dword [esp + 0x14], eax
mov dword [esp + 8], str.hid_joystick_send_force_feedback_command
mov dword [esp + 4], 0x6dea2114
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0_4
jmp 0x6de95c46
mov eax, 0x99
mov word [ebp - 0x1e], ax
jmp case.0x6de95c4f.0
mov eax, 0x9b
mov word [ebp - 0x1e], ax
jmp case.0x6de95c4f.0
mov ecx, 0x97
mov word [ebp - 0x1e], cx
jmp case.0x6de95c4f.0
mov edx, 0x98
mov word [ebp - 0x1e], dx
jmp case.0x6de95c4f.0
mov eax, dword [ebx + 0x92c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call sym._hid_joystick_send_device_gain
xor eax, eax
jmp 0x6de95caa
mov eax, 0x8007001e
jmp 0x6de95caa
Function at 0x6de95dc8
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x3c
mov ebx, dword [ebp + 8]
movzx edi, word [ebx + 0xb72]
mov esi, dword [ebx + 0xbb0]
test byte [0x6dea2114], 8
jne 0x6de95d90
cmp dword [ebp + 0xc], 0x20
ja case.0x6de95c4f.0
mov eax, dword [ebp + 0xc]
jmp dword [eax*4 + 0x6dea8164]
mov eax, 0x9c
mov word [ebp - 0x1e], ax
lea esi, [esi]
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], esi
mov eax, dword [ebx + 0x954]
mov dword [ebp - 0x1c], 1
mov dword [esp + 8], eax
movzx eax, byte [ebx + 0xcc8]
mov dword [esp], 1
mov dword [esp + 4], eax
call sym._HidP_InitializeReportForID_20
sub esp, 0x14
cmp eax, 0x110000
je 0x6de95cf0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, 0x9a
mov word [ebp - 0x1e], ax
mov eax, dword [ebx]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], sym._unload_effect_object_8
mov dword [esp], ebx
call dword [eax + 0x5c]
mov dword [ebx + 0x930], 3
sub esp, 0x10
jmp case.0x6de95c4f.0
mov dword [esp + 0x1c], edi
mov dword [esp + 0x18], esi
mov eax, dword [ebx + 0x954]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1c]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1e]
mov dword [esp + 0xc], eax
movzx eax, word [ebx + 0xcd0]
mov dword [esp + 4], 0xf
mov dword [esp + 8], eax
mov dword [esp], 1
call sym._HidP_SetUsages_32
sub esp, 0x20
cmp eax, 0x110000
jne 0x6de95caa
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], edi
mov dword [esp + 4], esi
mov eax, dword [ebx + 0x93c]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_WriteFile]
sub esp, 0x14
test eax, eax
je 0x6de95e29
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0x6de95d80
cmp dword [ebp + 0xc], 1
je 0x6de95e10
xor eax, eax
jmp 0x6de95caa
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], str.iface__p__command__lx._n
mov dword [esp + 0x14], eax
mov dword [esp + 8], str.hid_joystick_send_force_feedback_command
mov dword [esp + 4], 0x6dea2114
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0_4
jmp 0x6de95c46
mov eax, 0x99
mov word [ebp - 0x1e], ax
jmp case.0x6de95c4f.0
mov eax, 0x9b
mov word [ebp - 0x1e], ax
jmp case.0x6de95c4f.0
mov ecx, 0x97
mov word [ebp - 0x1e], cx
jmp case.0x6de95c4f.0
mov edx, 0x98
mov word [ebp - 0x1e], dx
jmp case.0x6de95c4f.0
mov eax, dword [ebx + 0x92c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call sym._hid_joystick_send_device_gain
xor eax, eax
jmp 0x6de95caa
mov eax, 0x8007001e
jmp 0x6de95caa
Function at 0x6de95de0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x3c
mov ebx, dword [ebp + 8]
movzx edi, word [ebx + 0xb72]
mov esi, dword [ebx + 0xbb0]
test byte [0x6dea2114], 8
jne 0x6de95d90
cmp dword [ebp + 0xc], 0x20
ja case.0x6de95c4f.0
mov eax, dword [ebp + 0xc]
jmp dword [eax*4 + 0x6dea8164]
mov eax, 0x9c
mov word [ebp - 0x1e], ax
lea esi, [esi]
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], esi
mov eax, dword [ebx + 0x954]
mov dword [ebp - 0x1c], 1
mov dword [esp + 8], eax
movzx eax, byte [ebx + 0xcc8]
mov dword [esp], 1
mov dword [esp + 4], eax
call sym._HidP_InitializeReportForID_20
sub esp, 0x14
cmp eax, 0x110000
je 0x6de95cf0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, 0x9a
mov word [ebp - 0x1e], ax
mov eax, dword [ebx]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], sym._unload_effect_object_8
mov dword [esp], ebx
call dword [eax + 0x5c]
mov dword [ebx + 0x930], 3
sub esp, 0x10
jmp case.0x6de95c4f.0
mov dword [esp + 0x1c], edi
mov dword [esp + 0x18], esi
mov eax, dword [ebx + 0x954]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1c]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1e]
mov dword [esp + 0xc], eax
movzx eax, word [ebx + 0xcd0]
mov dword [esp + 4], 0xf
mov dword [esp + 8], eax
mov dword [esp], 1
call sym._HidP_SetUsages_32
sub esp, 0x20
cmp eax, 0x110000
jne 0x6de95caa
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], edi
mov dword [esp + 4], esi
mov eax, dword [ebx + 0x93c]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_WriteFile]
sub esp, 0x14
test eax, eax
je 0x6de95e29
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0x6de95d80
cmp dword [ebp + 0xc], 1
je 0x6de95e10
xor eax, eax
jmp 0x6de95caa
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], str.iface__p__command__lx._n
mov dword [esp + 0x14], eax
mov dword [esp + 8], str.hid_joystick_send_force_feedback_command
mov dword [esp + 4], 0x6dea2114
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0_4
jmp 0x6de95c46
mov eax, 0x99
mov word [ebp - 0x1e], ax
jmp case.0x6de95c4f.0
mov eax, 0x9b
mov word [ebp - 0x1e], ax
jmp case.0x6de95c4f.0
mov ecx, 0x97
mov word [ebp - 0x1e], cx
jmp case.0x6de95c4f.0
mov edx, 0x98
mov word [ebp - 0x1e], dx
jmp case.0x6de95c4f.0
mov eax, dword [ebx + 0x92c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call sym._hid_joystick_send_device_gain
xor eax, eax
jmp 0x6de95caa
mov eax, 0x8007001e
jmp 0x6de95caa
Function at 0x6de95df0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x3c
mov ebx, dword [ebp + 8]
movzx edi, word [ebx + 0xb72]
mov esi, dword [ebx + 0xbb0]
test byte [0x6dea2114], 8
jne 0x6de95d90
cmp dword [ebp + 0xc], 0x20
ja case.0x6de95c4f.0
mov eax, dword [ebp + 0xc]
jmp dword [eax*4 + 0x6dea8164]
mov eax, 0x9c
mov word [ebp - 0x1e], ax
lea esi, [esi]
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], esi
mov eax, dword [ebx + 0x954]
mov dword [ebp - 0x1c], 1
mov dword [esp + 8], eax
movzx eax, byte [ebx + 0xcc8]
mov dword [esp], 1
mov dword [esp + 4], eax
call sym._HidP_InitializeReportForID_20
sub esp, 0x14
cmp eax, 0x110000
je 0x6de95cf0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, 0x9a
mov word [ebp - 0x1e], ax
mov eax, dword [ebx]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], sym._unload_effect_object_8
mov dword [esp], ebx
call dword [eax + 0x5c]
mov dword [ebx + 0x930], 3
sub esp, 0x10
jmp case.0x6de95c4f.0
mov dword [esp + 0x1c], edi
mov dword [esp + 0x18], esi
mov eax, dword [ebx + 0x954]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1c]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1e]
mov dword [esp + 0xc], eax
movzx eax, word [ebx + 0xcd0]
mov dword [esp + 4], 0xf
mov dword [esp + 8], eax
mov dword [esp], 1
call sym._HidP_SetUsages_32
sub esp, 0x20
cmp eax, 0x110000
jne 0x6de95caa
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], edi
mov dword [esp + 4], esi
mov eax, dword [ebx + 0x93c]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_WriteFile]
sub esp, 0x14
test eax, eax
je 0x6de95e29
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0x6de95d80
cmp dword [ebp + 0xc], 1
je 0x6de95e10
xor eax, eax
jmp 0x6de95caa
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], str.iface__p__command__lx._n
mov dword [esp + 0x14], eax
mov dword [esp + 8], str.hid_joystick_send_force_feedback_command
mov dword [esp + 4], 0x6dea2114
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0_4
jmp 0x6de95c46
mov eax, 0x99
mov word [ebp - 0x1e], ax
jmp case.0x6de95c4f.0
mov eax, 0x9b
mov word [ebp - 0x1e], ax
jmp case.0x6de95c4f.0
mov ecx, 0x97
mov word [ebp - 0x1e], cx
jmp case.0x6de95c4f.0
mov edx, 0x98
mov word [ebp - 0x1e], dx
jmp case.0x6de95c4f.0
mov eax, dword [ebx + 0x92c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call sym._hid_joystick_send_device_gain
xor eax, eax
jmp 0x6de95caa
mov eax, 0x8007001e
jmp 0x6de95caa
Function at 0x6de95e00
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x3c
mov ebx, dword [ebp + 8]
movzx edi, word [ebx + 0xb72]
mov esi, dword [ebx + 0xbb0]
test byte [0x6dea2114], 8
jne 0x6de95d90
cmp dword [ebp + 0xc], 0x20
ja case.0x6de95c4f.0
mov eax, dword [ebp + 0xc]
jmp dword [eax*4 + 0x6dea8164]
mov eax, 0x9c
mov word [ebp - 0x1e], ax
lea esi, [esi]
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], esi
mov eax, dword [ebx + 0x954]
mov dword [ebp - 0x1c], 1
mov dword [esp + 8], eax
movzx eax, byte [ebx + 0xcc8]
mov dword [esp], 1
mov dword [esp + 4], eax
call sym._HidP_InitializeReportForID_20
sub esp, 0x14
cmp eax, 0x110000
je 0x6de95cf0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, 0x9a
mov word [ebp - 0x1e], ax
mov eax, dword [ebx]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], sym._unload_effect_object_8
mov dword [esp], ebx
call dword [eax + 0x5c]
mov dword [ebx + 0x930], 3
sub esp, 0x10
jmp case.0x6de95c4f.0
mov dword [esp + 0x1c], edi
mov dword [esp + 0x18], esi
mov eax, dword [ebx + 0x954]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1c]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1e]
mov dword [esp + 0xc], eax
movzx eax, word [ebx + 0xcd0]
mov dword [esp + 4], 0xf
mov dword [esp + 8], eax
mov dword [esp], 1
call sym._HidP_SetUsages_32
sub esp, 0x20
cmp eax, 0x110000
jne 0x6de95caa
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], edi
mov dword [esp + 4], esi
mov eax, dword [ebx + 0x93c]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_WriteFile]
sub esp, 0x14
test eax, eax
je 0x6de95e29
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0x6de95d80
cmp dword [ebp + 0xc], 1
je 0x6de95e10
xor eax, eax
jmp 0x6de95caa
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], str.iface__p__command__lx._n
mov dword [esp + 0x14], eax
mov dword [esp + 8], str.hid_joystick_send_force_feedback_command
mov dword [esp + 4], 0x6dea2114
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0_4
jmp 0x6de95c46
mov eax, 0x99
mov word [ebp - 0x1e], ax
jmp case.0x6de95c4f.0
mov eax, 0x9b
mov word [ebp - 0x1e], ax
jmp case.0x6de95c4f.0
mov ecx, 0x97
mov word [ebp - 0x1e], cx
jmp case.0x6de95c4f.0
mov edx, 0x98
mov word [ebp - 0x1e], dx
jmp case.0x6de95c4f.0
mov eax, dword [ebx + 0x92c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call sym._hid_joystick_send_device_gain
xor eax, eax
jmp 0x6de95caa
mov eax, 0x8007001e
jmp 0x6de95caa