joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1401077f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rbx
sub rsp, 0x50
mov rbx, qword [0x140207460]
mov rax, qword [rbx]
mov qword [rsp + 0x48], rax
xor eax, eax
mov eax, dword [rsp + 0x80]
cmp qword [rcx + 0x230], 0
mov dword [rsp + 0x3c], edx
mov qword [rsp + 0x30], 0
lea rdx, [rsp + 0x20]
mov dword [rsp + 0x38], 0
mov qword [rsp + 0x20], r8
mov dword [rsp + 0x28], r9d
mov dword [rsp + 0x2c], eax
je 0x140107858
call fcn.1401032d0
mov rax, qword [rsp + 0x48]
sub rax, qword [rbx]
jne 0x14010785f
add rsp, 0x50
pop rbx
ret
call fcn.140106bd0
jmp 0x140107844
call fcn.1401be670
nop
nop word cs:[rax + rax]
push r13
push r12
push rbp
push rdi
push rbx
sub rsp, 0x50
mov r13, qword [0x140207460]
mov ebp, dword [rcx + 4]
mov r12d, ebp
or r12d, 0x1000
mov rax, qword [r13]
mov qword [rsp + 0x48], rax
xor eax, eax
mov rbx, rcx
mov rdi, rdx
test ebp, 0x400
je 0x1401078e8
mov eax, dword [rcx + 8]
test eax, eax
je 0x1401078e8
mov edx, dword [rcx + 0xc]
test edx, edx
je 0x1401078e8
cmp eax, dword [rcx + 0x10]
jg 0x1401078e8
cmp edx, dword [rcx + 0x14]
jg 0x1401078e8
mov edx, r8d
mov rcx, rdi
mov dword [rsp + 0x90], r8d
call fcn.1400a8070
mov r8d, dword [rsp + 0x90]
test eax, eax
je 0x1401078e8
or ebp, 0x11000
mov r12d, ebp
mov rcx, qword [rbx + 0x28]
mov qword [rsp + 0x20], rdi
lea rdx, [rsp + 0x20]
mov qword [rsp + 0x30], 0
cmp qword [rcx + 0x230], 0
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x28], r8d
mov dword [rsp + 0x2c], r12d
mov dword [rsp + 0x3c], 0x1c
je 0x140107940
call fcn.1401032d0
mov rax, qword [rsp + 0x48]
sub rax, qword [r13]
jne 0x140107947
add rsp, 0x50
pop rbx
pop rdi
pop rbp
pop r12
pop r13
ret
call fcn.140106bd0
jmp 0x140107928
call fcn.1401be670
nop
nop dword [rax]
Function at 0x140107950
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x78
mov rbp, qword [0x140207460]
movzx r9d, word [r8 + 0x4c]
mov rax, qword [rbp]
mov qword [rsp + 0x68], rax
xor eax, eax
mov rax, qword [0x140207c90]
mov rsi, r8
mov rbx, rcx
mov qword [rsp + 0x20], 0
lea rdi, [rsp + 0x20]
mov r8, rdx
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x30], rax
test r9w, r9w
je 0x140107a90
lea rdx, str.__s_mode__06o
mov rcx, rdi
call fcn.14007ed40
mov rcx, qword [rsi + 0x28]
mov rdx, rdi
xor r9d, r9d
xor r8d, r8d
call fcn.1400437c0
mov rdx, qword [rsp + 0x20]
test rdx, rdx
je 0x140107a70
mov rax, qword [rsp + 0x28]
sub rdx, rax
cmp rdx, 1
je 0x140107a70
lea rdx, [rax + 1]
mov rcx, rbx
mov qword [rsp + 0x28], rdx
mov rdx, qword [rsp + 0x30]
mov byte [rdx + rax], 0xa
mov rdx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x28]
mov byte [rdx + rax], 0
mov rax, qword [rsp + 0x30]
lea rdx, [rsp + 0x40]
cmp qword [rbx + 0x230], 0
mov dword [rsp + 0x58], 0
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x50], 0
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x4c], 0
mov dword [rsp + 0x5c], 0xb
je 0x140107aa8
call fcn.1401032d0
mov rcx, rdi
call fcn.14007d7e0
mov rax, qword [rsp + 0x68]
sub rax, qword [rbp]
jne 0x140107aaf
add rsp, 0x78
pop rbx
pop rsi
pop rdi
pop rbp
ret
mov edx, 1
mov rcx, rdi
call fcn.14007da40
mov rax, qword [rsp + 0x28]
jmp 0x1401079e6
lea rdx, [0x1401e9b23]
mov rcx, rdi
call fcn.14007ed40
jmp 0x1401079b4
call fcn.140106bd0
jmp 0x140107a51
call fcn.1401be670
nop
nop word cs:[rax + rax]
Function at 0x140107ac0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x70
mov rbp, qword [0x140207460]
mov rax, qword [rbp]
mov qword [rsp + 0x68], rax
xor eax, eax
mov rax, qword [0x140207c90]
mov rsi, rcx
mov edi, r8d
mov qword [rsp + 0x20], 0
mov ebx, r9d
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x30], rax
test edx, edx
jne 0x140107b70
or ebx, r8d
jne 0x140107cca
cmp qword [rcx + 0x230], 0
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x50], 0
mov dword [rsp + 0x58], 0
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x48], 0
mov dword [rsp + 0x5c], 5
je 0x140107cc0
call fcn.1401032d0
mov rax, qword [rsp + 0x68]
sub rax, qword [rbp]
jne 0x140107ce4
add rsp, 0x70
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret
cmp edx, 1
lea rcx, str.__d_file_changed
lea r12, [rsp + 0x20]
mov r8d, edx
lea rax, str.__d_files_changed
cmove rax, rcx
mov rcx, r12
mov rdx, rax
call fcn.14007ed40
test edi, edi
jne 0x140107c60
test ebx, ebx
je 0x140107c60
cmp ebx, 1
lea rax, str.___d_deletion___
mov r8d, ebx
mov rcx, r12
lea rdx, str.___d_deletions___
cmove rdx, rax
call fcn.14007ed40
mov rdx, qword [rsp + 0x20]
test rdx, rdx
je 0x140107c9e
mov rax, qword [rsp + 0x28]
sub rdx, rax
cmp rdx, 1
je 0x140107c9e
lea rdx, [rax + 1]
mov rcx, rsi
mov qword [rsp + 0x28], rdx
mov rdx, qword [rsp + 0x30]
mov byte [rdx + rax], 0xa
mov rdx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x28]
mov byte [rdx + rax], 0
mov rax, qword [rsp + 0x30]
lea rdx, [rsp + 0x40]
cmp qword [rsi + 0x230], 0
mov dword [rsp + 0x58], 0
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x50], 0
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x4c], 0
mov dword [rsp + 0x5c], 7
je 0x140107cb8
call fcn.1401032d0
mov rcx, r12
call fcn.14007d7e0
jmp 0x140107b53
cmp edi, 1
lea rdx, str.___d_insertions__
mov r8d, edi
mov rcx, r12
lea rax, str.___d_insertion__
cmove rdx, rax
call fcn.14007ed40
test ebx, ebx
jne 0x140107ba8
test edi, edi
je 0x140107ba8
mov rdx, qword [rsp + 0x20]
test rdx, rdx
jne 0x140107bd6
mov edx, 1
mov rcx, r12
call fcn.14007da40
mov rax, qword [rsp + 0x28]
jmp 0x140107be8
call fcn.140106bd0
jmp 0x140107c53
call fcn.140106bd0
jmp 0x140107b53
mov r8d, 0xa05
lea rdx, str.diff.c
lea rcx, str.insertions__0__deletions__0
call qword [sym.imp.msvcrt.dll__assert]
call fcn.1401be670
nop
nop word [rax + rax]
Function at 0x140116b30
Capabilities:
Encode data using base64

Disassembly:
test r9d, r9d
jne 0x140116b40
ret
jmp fcn.1401167c0

Function at 0x140116b50
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rdi
push rsi
push rbx
sub rsp, 0x20
mov rbx, qword [0x1402077b0]
mov r8d, dword [rbx + 0xc]
mov rdi, rcx
test r8d, r8d
je 0x140116c20
movsxd rcx, r8d
mov rax, rcx
shr rax, 0x3c
jne 0x140116c28
shl rcx, 4
call fcn.1400a5fa0
mov r9d, dword [rbx + 0xc]
mov rsi, rax
test r9d, r9d
jle 0x140116c08
mov rax, qword [rbx]
movsxd rcx, r9d
mov rdx, rsi
lea rcx, [rax + rcx*8]
mov r10, qword [rax]
add rax, 8
add rdx, 0x10
mov qword [rdx - 0x10], r10
cmp rax, rcx
jne 0x140116ba0
mov r8, rsi
lea rdx, [0x1401167b0]
mov rcx, rdi
call fcn.1401167c0
movsxd r10, dword [rbx + 0xc]
test r10d, r10d
jle 0x140116bf4
shl r10, 4
mov rdx, qword [rbx]
mov rax, rsi
add r10, rsi
nop dword [rax]
mov r9, qword [rax]
add rax, 0x10
add rdx, 8
mov qword [rdx - 8], r9
cmp rax, r10
jne 0x140116be0
mov rcx, rsi
add rsp, 0x20
pop rbx
pop rsi
pop rdi
jmp fcn.1400d2670
jne 0x140116bb4
mov rcx, rsi
add rsp, 0x20
pop rbx
pop rsi
pop rdi
jmp fcn.1400d2670
add rsp, 0x20
pop rbx
pop rsi
pop rdi
ret
mov r8, rcx
mov edx, 0x10
lea rcx, [0x1401ebe50]
call fcn.1400a08a0
nop
nop
nop
nop
push rsi
push rbx
sub rsp, 0x48
mov rsi, qword [0x140207460]
mov rax, qword [rsi]
mov qword [rsp + 0x38], rax
xor eax, eax
movzx eax, byte [rdx]
mov rbx, rcx
sub eax, 0x2b
test al, 0xfd
jne 0x140116c9f
mov eax, dword [rcx + 8]
test eax, eax
jne 0x140116ccb
mov rcx, qword [rcx]
sub r8d, 1
add rdx, 1
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], 4
mov dword [rsp + 0x34], r8d
mov r8d, 1
mov dword [rsp + 0x30], 0
call fcn.1400d1a70
test eax, eax
je 0x140116cb8
xor eax, eax
mov rdx, qword [rsp + 0x38]
sub rdx, qword [rsi]
jne 0x140116cc6
add rsp, 0x48
pop rbx
pop rsi
ret
mov dword [rbx + 8], 1
mov eax, 1
jmp 0x140116ca1
call fcn.1401be670
lea r8, str.Already_matched_in_diffgrep_consume__Broken_xdiff_emit_line_fn_
mov edx, 0x1f
lea rcx, str.diffcore_pickaxe.c
call fcn.1400a0ca0
nop
nop word cs:[rax + rax]
nop
push rbx
sub rsp, 0xb0
mov rbx, qword [0x140207460]
pxor xmm0, xmm0
mov r8, qword [r8 + 0x100]
mov rax, qword [rbx]
mov qword [rsp + 0xa8], rax
xor eax, eax
lea rax, [rsp + 0x50]
lea r10, [rsp + 0x80]
mov qword [rsp + 0x40], r9
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x40]
lea r9, [0x140116c40]
mov qword [rsp + 0x30], r10
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x80], r8
xor r8d, r8d
movups xmmword [rsp + 0x8c], xmm0
mov qword [rsp + 0x70], 0
mov dword [rsp + 0x48], 0
mov dword [rsp + 0x88], 2
movups xmmword [rsp + 0x50], xmm0
movups xmmword [rsp + 0x60], xmm0
movups xmmword [rsp + 0x98], xmm0
call fcn.1401872f0
mov edx, dword [rsp + 0x48]
test edx, edx
mov edx, 1
cmovne eax, edx
mov rdx, qword [rsp + 0xa8]
sub rdx, qword [rbx]
jne 0x140116dae
add rsp, 0xb0
pop rbx
ret
call fcn.1401be670
nop
nop word cs:[rax + rax]
nop
Function at 0x14011d430
Capabilities:
Encode data using base64

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x38
lea rdi, [0x1401ec9ad]
mov qword [rsp + 0x20], rcx
mov rcx, rdx
call fcn.1400a5f80
mov rsi, qword [str._________AA__A__________________]
mov qword [rsp + 0x28], rax
mov r13, rax
jmp 0x14011d475
add r13, 1
test r15b, r15b
je 0x14011d52e
mov rdx, rdi
mov rcx, r13
call sub.msvcrt.dll_strcspn
movsxd r14, eax
mov r12, rax
lea rax, [r13 + r14]
movzx r15d, byte [rax]
test r12d, r12d
je 0x14011d468
mov byte [rax], 0
mov rdx, r13
lea r11d, [r12 - 1]
mov ebp, 0
jg 0x14011d4e2
jmp 0x14011d589
cmp al, 0x3a
je 0x14011d4ec
mov ecx, eax
movzx r8d, al
and ecx, 0xdf
or ecx, 0x20
test byte [rsi + r8], 4
cmovne eax, ecx
add rdx, 1
mov byte [rdx - 1], al
lea rax, [rbp + 1]
cmp rbp, r11
je 0x14011d578
mov rbp, rax
movzx eax, byte [rdx]
mov r10d, ebp
cmp al, 0x3d
jne 0x14011d4b0
mov ebx, ebp
mov byte [rdx], 0
mov rcx, r13
lea rdx, str.skiplist
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x14011d550
cmp r12d, ebx
je 0x14011d59f
mov rax, qword [rsp + 0x20]
lea rdx, [r13 + rbp + 1]
lea r13, [r13 + r14 + 1]
lea rcx, [rax + 0x20]
call fcn.1401537b0
test r15b, r15b
jne 0x14011d475
mov rcx, qword [rsp + 0x28]
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp fcn.1400d2670
cmp r12d, ebx
je 0x14011d590
mov rcx, qword [rsp + 0x20]
lea r8, [r13 + rbp + 1]
mov rdx, r13
lea r13, [r13 + r14 + 1]
call fcn.14011d380
jmp 0x14011d46c
lea ebx, [r10 + 1]
movsxd rbp, ebx
lea rdx, [r13 + rbp]
jmp 0x14011d4ee
mov byte [r13], 0
jmp 0x14011d555
mov rdx, r13
lea rcx, str.Missing_:__s
call fcn.1400a08a0
lea rcx, str.skiplist_requires_a_path
call fcn.1400a08a0
nop
nop dword [rax]
push rbx
sub rsp, 0x20
cmp qword [rcx + 0xe8], 0
mov rbx, rcx
je 0x14011d5d0
add rsp, 0x20
pop rbx
ret
mov edx, 0x28
mov ecx, 1
call fcn.1400a6220
mov qword [rbx + 0xe8], rax
add rsp, 0x20
pop rbx
ret
Function at 0x140121730
Capabilities:
Write file on windows

Disassembly:
push r12
push rbp
push rdi
push rsi
push rbx
add rsp, 0xffffffffffffff80
mov rbp, qword [0x140207460]
mov rax, qword [rbp]
mov qword [rsp + 0x78], rax
xor eax, eax
mov eax, dword [0x1402882d0]
mov rbx, rcx
mov rdi, rdx
mov r12, r8
test eax, eax
jne 0x140121777
xor edx, edx
lea rcx, [0x140121360]
mov dword [0x1402882d0], 1
call fcn.14000bbb0
mov byte [rbx + 0x30], 0x4e
mov rcx, rdi
mov dword [rbx + 0x58], 0
call fcn.14011f9a0
mov rsi, rax
test rax, rax
je 0x1401218a8
mov eax, dword [rbx + 0x10]
cmp eax, 2
je 0x140121838
ja 0x1401217f0
lea rdx, [0x1401ed8f2]
test eax, eax
je 0x1401217f9
mov rcx, qword [rbx]
lea r8, [rsp + 0x28]
call fcn.1400f8c00
test rax, rax
je 0x1401217cb
mov r8, qword [rsp + 0x28]
test r8, r8
jne 0x140121848
mov eax, 1
mov rdx, qword [rsp + 0x78]
sub rdx, qword [rbp]
jne 0x1401218bf
sub rsp, 0xffffffffffffff80
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret
cmp eax, 3
jne 0x140121890
mov r9, r12
mov r8, rdi
mov rdx, rsi
mov rcx, rbx
call qword [rsi + 0x20]
test eax, eax
je 0x140121813
cmp qword [rbx + 0x20], 0
je 0x1401217cb
mov edi, dword [0x1402882e8]
cmp dword [rbx + 0x58], edi
setb dl
cmp byte [rbx + 0x30], 0x47
setne cl
or ecx, edx
movzx edx, cl
or edx, eax
setne al
movzx eax, al
jmp 0x1401217d0
lea rdx, str.tagger
jmp 0x1401217af
lea rcx, [rsp + 0x30]
mov rdx, rax
call fcn.140020b90
test eax, eax
jne 0x1401217cb
cmp qword [rbx + 0x18], 0
jne 0x1401217f9
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x1401217f9
cmp qword [rsp + 0x58], 0
je 0x1401217f9
mov r8d, 0xa
xor edx, edx
call fcn.1400c61e0
mov qword [rbx + 0x18], rax
jmp 0x1401217f9
lea r8, str.invalid_value_for_sigc__payload_type
mov edx, 0x277
lea rcx, str.gpg_interface.c
call fcn.1400a0ca0
lea rcx, str.bad_incompatible_signature__s
call fcn.14011fad0
mov rdx, rdi
mov rcx, rax
call fcn.1400a08a0
call fcn.1401be670
nop
nop word cs:[rax + rax]

Function at 0x1401218d0
Capabilities:
Write file on windows

Disassembly:
push rsi
push rbx
sub rsp, 0x28
mov rsi, qword [rcx + 0x28]
test dl, 2
cmove rsi, qword [rcx + 0x20]
and edx, 1
mov rbx, rcx
je 0x14012190f
cmp qword [rcx], 0
je 0x14012190f
mov ecx, 1
call qword [fcn.1401bee20]
mov rcx, qword [rbx]
mov r8, qword [rbx + 8]
mov edx, 1
mov r9, rax
call sub.msvcrt.dll_fwrite
test rsi, rsi
je 0x140121930
mov ecx, 2
call qword [fcn.1401bee20]
mov rcx, rsi
mov rdx, rax
add rsp, 0x28
pop rbx
pop rsi
jmp fcn.1401bf070
add rsp, 0x28
pop rbx
pop rsi
ret
Function at 0x140123940
Capabilities:
Write file on windows

Disassembly:
push rdi
push rsi
push rbx
sub rsp, 0x40
mov rsi, qword [0x140207460]
mov rax, qword [rsi]
mov qword [rsp + 0x38], rax
xor eax, eax
mov rax, qword [0x140207c90]
mov rbx, rcx
mov qword [rsp + 0x20], 0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x30], rax
mov rax, qword [0x140288310]
test rax, rax
je 0x1401239a3
mov rcx, qword [rax + 0x58]
test rcx, rcx
je 0x1401239a3
mov r9, qword [rax + 0x1c0]
mov r8, qword [rax + 0x60]
mov edx, 1
call sub.msvcrt.dll_fwrite
test rbx, rbx
je 0x1401239df
lea rdi, [rsp + 0x20]
mov rcx, rbx
mov rdx, rdi
call fcn.140122800
mov rax, qword [rbx + 8]
mov rcx, qword [rsp + 0x30]
mov edx, 1
mov r8, qword [rsp + 0x28]
mov r9, qword [rax + 0x778]
call sub.msvcrt.dll_fwrite
mov rcx, rdi
call fcn.14007d7e0
mov rax, qword [rsp + 0x38]
sub rax, qword [rsi]
jne 0x1401239f1
add rsp, 0x40
pop rbx
pop rsi
pop rdi
ret
call fcn.1401be670
nop
nop word [rax + rax]

Function at 0x140123a00
Capabilities:
Write file on windows

Disassembly:
push rdi
push rsi
push rbx
sub rsp, 0x40
mov rsi, qword [0x140207460]
mov rax, qword [rsi]
mov qword [rsp + 0x38], rax
xor eax, eax
mov rax, qword [0x140207c90]
mov rbx, rcx
mov qword [rsp + 0x20], 0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x30], rax
mov rax, qword [0x140288310]
test rax, rax
je 0x140123a63
mov rcx, qword [rax + 0x58]
test rcx, rcx
je 0x140123a63
mov r9, qword [rax + 0x1c0]
mov r8, qword [rax + 0x60]
mov edx, 1
call sub.msvcrt.dll_fwrite
test rbx, rbx
je 0x140123a9f
lea rdi, [rsp + 0x20]
mov rcx, rbx
mov rdx, rdi
call fcn.140123700
mov rax, qword [rbx + 8]
mov rcx, qword [rsp + 0x30]
mov edx, 1
mov r8, qword [rsp + 0x28]
mov r9, qword [rax + 0x778]
call sub.msvcrt.dll_fwrite
mov rcx, rdi
call fcn.14007d7e0
mov rax, qword [rsp + 0x38]
sub rax, qword [rsi]
jne 0x140123ab1
add rsp, 0x40
pop rbx
pop rsi
pop rdi
ret
call fcn.1401be670
nop
nop word [rax + rax]
Function at 0x140123ac0
Capabilities:
Write file on windows

Disassembly:
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x40
mov r12, qword [0x140207460]
mov rdi, qword [0x140207c90]
mov rax, qword [r12]
mov qword [rsp + 0x38], rax
xor eax, eax
mov rax, qword [0x140288310]
mov qword [rsp + 0x30], rdi
mov rbx, rcx
mov qword [rsp + 0x20], 0
mov qword [rsp + 0x28], 0
test rax, rax
je 0x140123b27
mov rcx, qword [rax + 0x58]
test rcx, rcx
je 0x140123b27
mov r9, qword [rax + 0x1c0]
mov r8, qword [rax + 0x60]
mov edx, 1
call sub.msvcrt.dll_fwrite
test rbx, rbx
je 0x140123b92
mov edx, dword [rbx + 0x1c]
lea rbp, [rsp + 0x20]
test edx, edx
je 0x140123c40
nop dword [rax]
mov rdx, rbp
mov rcx, rbx
call fcn.140122800
mov r8, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
mov edx, 1
mov esi, eax
mov rax, qword [rbx + 8]
mov r9, qword [rax + 0x778]
call sub.msvcrt.dll_fwrite
test esi, esi
je 0x140123bb0
mov qword [rsp + 0x28], 0
mov rax, qword [rsp + 0x30]
cmp rax, rdi
je 0x140123c18
mov byte [rax], 0
mov rcx, rbp
call fcn.14007d7e0
mov rax, qword [rsp + 0x38]
sub rax, qword [r12]
jne 0x140123c4d
add rsp, 0x40
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret
mov rax, qword [rbx + 8]
mov ecx, 0xa
mov rdx, qword [rax + 0x778]
call fcn.1401bf150
mov rax, qword [rbx + 8]
mov rcx, qword [rax + 0x610]
test rcx, rcx
je 0x140123bed
mov r9, qword [rax + 0x778]
mov r8, qword [rax + 0x618]
mov edx, 1
call sub.msvcrt.dll_fwrite
mov qword [rsp + 0x28], 0
mov rax, qword [rsp + 0x30]
cmp rax, rdi
je 0x140123c30
mov byte [rax], 0
mov eax, dword [rbx + 0x1c]
test eax, eax
jne 0x140123b40
jmp 0x140123b8a
cmp byte [rdi], 0
je 0x140123b8a
call fcn.140121fa0
nop word cs:[rax + rax]
cmp byte [rdi], 0
je 0x140123c03
jmp 0x140123c21
mov rcx, rbx
call fcn.140123a00
jmp 0x140123b8a
call fcn.1401be670
nop
nop word cs:[rax + rax]
nop
Function at 0x140123c60
Capabilities:
Write file on windows

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x48
mov rbp, qword [0x140207460]
mov rsi, qword [0x140207c90]
mov rax, qword [rbp]
mov qword [rsp + 0x38], rax
xor eax, eax
mov rax, qword [0x140288310]
mov qword [rsp + 0x30], rsi
mov rbx, rcx
mov qword [rsp + 0x20], 0
mov qword [rsp + 0x28], 0
test rax, rax
je 0x140123cc5
mov rcx, qword [rax + 0x58]
test rcx, rcx
je 0x140123cc5
mov r9, qword [rax + 0x1c0]
mov r8, qword [rax + 0x60]
mov edx, 1
call sub.msvcrt.dll_fwrite
test rbx, rbx
je 0x140123da8
mov edx, dword [rbx + 0x1c]
test edx, edx
je 0x140123da8
lea rdi, [rsp + 0x20]
nop
mov rdx, rdi
mov rcx, rbx
call fcn.140122800
mov rax, qword [rbx + 8]
mov r8, qword [rsp + 0x28]
mov edx, 1
mov rcx, qword [rsp + 0x30]
mov r9, qword [rax + 0x778]
call sub.msvcrt.dll_fwrite
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x28], 0
cmp rax, rsi
je 0x140123d70
mov byte [rax], 0
mov eax, dword [rbx + 0x1c]
test eax, eax
je 0x140123d80
mov rax, qword [rbx + 8]
mov ecx, 0xa
mov rdx, qword [rax + 0x778]
call fcn.1401bf150
mov rax, qword [rbx + 8]
mov rcx, qword [rax + 0x610]
test rcx, rcx
je 0x140123ce0
mov r9, qword [rax + 0x778]
mov r8, qword [rax + 0x618]
mov edx, 1
call sub.msvcrt.dll_fwrite
jmp 0x140123ce0
cmp byte [rsi], 0
je 0x140123d20
call fcn.140121fa0
nop word [rax + rax]
mov rcx, rdi
call fcn.14007d7e0
mov eax, 1
mov rdx, qword [rsp + 0x38]
sub rdx, qword [rbp]
jne 0x140123dac
add rsp, 0x48
pop rbx
pop rsi
pop rdi
pop rbp
ret
xor eax, eax
jmp 0x140123d8d
call fcn.1401be670
nop
nop word cs:[rax + rax]
nop dword [rax]

Function at 0x140123dc0
Capabilities:
Write file on windows

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x28
mov rsi, qword [r8 + 0x10]
mov r13, rcx
mov rbp, rdx
mov r12, r8
test rsi, rsi
je 0x140123e3d
nop
mov edx, 0xa
mov rcx, rsi
call sub.msvcrt.dll_strchr
mov rbx, rax
test rax, rax
je 0x140123e20
lea rdi, [rax + 1]
mov r9, rbp
mov edx, 1
mov rcx, rsi
mov r8, rdi
sub r8, rsi
call sub.msvcrt.dll_fwrite
cmp byte [rbx + 1], 0
jne 0x140123e98
mov rsi, rdi
jmp 0x140123de0
mov r8, qword [r12 + 8]
add r8, qword [r12 + 0x10]
mov r9, rbp
mov rcx, rsi
sub r8, rsi
mov edx, 1
call sub.msvcrt.dll_fwrite
test r13, r13
je 0x140123e88
mov rax, qword [r12 + 8]
mov edx, dword [r13 + 0x1c]
test rax, rax
je 0x140123e5c
mov rcx, qword [r12 + 0x10]
cmp byte [rcx + rax - 1], 0xa
je 0x140123ea8
test edx, edx
je 0x140123e88
mov rdx, rbp
mov ecx, 0xa
call fcn.1401bf150
mov rcx, r13
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
jmp fcn.140123c60
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
mov rcx, r13
call fcn.140123940
jmp 0x140123e19
test edx, edx
je 0x140123e88
mov rcx, r13
call fcn.140123c60
mov rdx, rbp
mov ecx, 0xa
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
jmp fcn.1401bf150
Function at 0x14012cec0
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x28
test rcx, rcx
je 0x14012cf05
mov edx, dword [rcx + 4]
test edx, edx
je 0x14012cf05
mov rcx, qword [rcx + 8]
mov eax, dword [rcx + 4]
cmp dword [rcx], eax
jge 0x14012cf3e
cmp edx, 1
je 0x14012cf05
sub edx, 2
lea rax, [rcx + 4]
lea rcx, [rcx + rdx*8 + 0xc]
nop dword [rax]
mov edx, dword [rax + 4]
cmp dword [rax], edx
jge 0x14012cf0a
cmp edx, dword [rax + 8]
jge 0x14012cf24
add rax, 8
cmp rax, rcx
jne 0x14012cef0
add rsp, 0x28
ret
mov r8d, 0x6a
lea rdx, str.line_log.c
lea rcx, str.rs__ranges_i_1_.end___rs__ranges_i_.start
call qword [sym.imp.msvcrt.dll__assert]
mov r8d, 0x6b
lea rdx, str.line_log.c
lea rcx, str.rs__ranges_i_.start___rs__ranges_i_.end
call qword [sym.imp.msvcrt.dll__assert]
mov r8d, 0x67
lea rdx, str.line_log.c
lea rcx, str.rs__ranges_0_.start___rs__ranges_0_.end
call qword [sym.imp.msvcrt.dll__assert]
nop
nop dword [rax]
sub rsp, 0x28
test rcx, rcx
je 0x14012cfbe
cmp dword [rcx + 8], edx
jl 0x14012cfbe
mov rax, qword [rcx]
test rax, rax
je 0x14012cfa4
mov rax, qword [rax + 0x30]
test rax, rax
je 0x14012cfa4
test edx, edx
jne 0x14012cf90
add rsp, 0x28
ret
mov rcx, qword [rcx + 0x10]
movsxd rdx, edx
mov edx, dword [rcx + rdx*4]
lea rax, [rax + rdx + 1]
add rsp, 0x28
ret
mov r8d, 0x22c
lea rdx, str.line_log.c
lea rcx, str.d__spec__d__spec__data
call qword [sym.imp.msvcrt.dll__assert]
mov r8d, 0x22b
lea rdx, str.line_log.c
lea rcx, str.d__line___d__lines
call qword [sym.imp.msvcrt.dll__assert]
nop
nop dword [rax]

Function at 0x14012cf60
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x28
test rcx, rcx
je 0x14012cf05
mov edx, dword [rcx + 4]
test edx, edx
je 0x14012cf05
mov rcx, qword [rcx + 8]
mov eax, dword [rcx + 4]
cmp dword [rcx], eax
jge 0x14012cf3e
cmp edx, 1
je 0x14012cf05
sub edx, 2
lea rax, [rcx + 4]
lea rcx, [rcx + rdx*8 + 0xc]
nop dword [rax]
mov edx, dword [rax + 4]
cmp dword [rax], edx
jge 0x14012cf0a
cmp edx, dword [rax + 8]
jge 0x14012cf24
add rax, 8
cmp rax, rcx
jne 0x14012cef0
add rsp, 0x28
ret
mov r8d, 0x6a
lea rdx, str.line_log.c
lea rcx, str.rs__ranges_i_1_.end___rs__ranges_i_.start
call qword [sym.imp.msvcrt.dll__assert]
mov r8d, 0x6b
lea rdx, str.line_log.c
lea rcx, str.rs__ranges_i_.start___rs__ranges_i_.end
call qword [sym.imp.msvcrt.dll__assert]
mov r8d, 0x67
lea rdx, str.line_log.c
lea rcx, str.rs__ranges_0_.start___rs__ranges_0_.end
call qword [sym.imp.msvcrt.dll__assert]
nop
nop dword [rax]
sub rsp, 0x28
test rcx, rcx
je 0x14012cfbe
cmp dword [rcx + 8], edx
jl 0x14012cfbe
mov rax, qword [rcx]
test rax, rax
je 0x14012cfa4
mov rax, qword [rax + 0x30]
test rax, rax
je 0x14012cfa4
test edx, edx
jne 0x14012cf90
add rsp, 0x28
ret
mov rcx, qword [rcx + 0x10]
movsxd rdx, edx
mov edx, dword [rcx + rdx*4]
lea rax, [rax + rdx + 1]
add rsp, 0x28
ret
mov r8d, 0x22c
lea rdx, str.line_log.c
lea rcx, str.d__spec__d__spec__data
call qword [sym.imp.msvcrt.dll__assert]
mov r8d, 0x22b
lea rdx, str.line_log.c
lea rcx, str.d__line___d__lines
call qword [sym.imp.msvcrt.dll__assert]
nop
nop dword [rax]