joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14000d270
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x48
mov rax, qword [0x1401fa010]
xor rax, rsp
mov qword [rsp + 0x38], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000d2ca
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x1e]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.HandleUPVMMessage_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000d2ca
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor al, al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.140183d70
add rsp, 0x48
ret

Function at 0x14000d2e0
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x1401fa010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000d33f
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x1c]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.PulseVisualizer_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000d33f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword [rbx + 0x30]
lea r9, [rbx + 0x60]
mov r8d, 2
mov byte [rax], 0x4f
mov rax, qword [rbx + 0x30]
mov byte [rax + 1], 0x4b
lea rax, [rbx + 0x38]
mov rdx, qword [rbx + 0x30]
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 1
sete al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.140183d70
add rsp, 0x40
pop rbx
ret

Function at 0x14000d390
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x1401fa010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000d3ef
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x1f]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.KeyInputVisualizer_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000d3ef
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword [rbx + 0x30]
lea r9, [rbx + 0x60]
mov r8d, 2
mov byte [rax], 0x4f
mov rax, qword [rbx + 0x30]
mov byte [rax + 1], 0x4b
lea rax, [rbx + 0x38]
mov rdx, qword [rbx + 0x30]
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 1
sete al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.140183d70
add rsp, 0x40
pop rbx
ret
Function at 0x14000d440
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x1401fa010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000d49f
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x25]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.ActivateVisualizerWindow_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000d49f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword [rbx + 0x30]
lea r9, [rbx + 0x60]
mov r8d, 2
mov byte [rax], 0x4f
mov rax, qword [rbx + 0x30]
mov byte [rax + 1], 0x4b
lea rax, [rbx + 0x38]
mov rdx, qword [rbx + 0x30]
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 1
sete al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.140183d70
add rsp, 0x40
pop rbx
ret

Function at 0x14000d4f0
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x1401fa010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000d54f
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x21]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.ShowVisualizerWindow_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000d54f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword [rbx + 0x30]
lea r9, [rbx + 0x60]
mov r8d, 2
mov byte [rax], 0x4f
mov rax, qword [rbx + 0x30]
mov byte [rax + 1], 0x4b
lea rax, [rbx + 0x38]
mov rdx, qword [rbx + 0x30]
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 1
sete al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.140183d70
add rsp, 0x40
pop rbx
ret

Function at 0x14000d5a0
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x1401fa010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000d5ff
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x34]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.ShowVisualizerWindowAndSelectVisualizer_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000d5ff
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword [rbx + 0x30]
lea r9, [rbx + 0x60]
mov r8d, 2
mov byte [rax], 0x4f
mov rax, qword [rbx + 0x30]
mov byte [rax + 1], 0x4b
lea rax, [rbx + 0x38]
mov rdx, qword [rbx + 0x30]
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 1
sete al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.140183d70
add rsp, 0x40
pop rbx
ret
Function at 0x14000d650
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x1401fa010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000d6af
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x21]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.HideVisualizerWindow_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000d6af
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword [rbx + 0x30]
lea r9, [rbx + 0x60]
mov r8d, 2
mov byte [rax], 0x4f
mov rax, qword [rbx + 0x30]
mov byte [rax + 1], 0x4b
lea rax, [rbx + 0x38]
mov rdx, qword [rbx + 0x30]
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 1
sete al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.140183d70
add rsp, 0x40
pop rbx
ret

Function at 0x14000d700
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x1401fa010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000d75f
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x1c]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.EnterFullscreen_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000d75f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword [rbx + 0x30]
lea r9, [rbx + 0x60]
mov r8d, 2
mov byte [rax], 0x4f
mov rax, qword [rbx + 0x30]
mov byte [rax + 1], 0x4b
lea rax, [rbx + 0x38]
mov rdx, qword [rbx + 0x30]
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 1
sete al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.140183d70
add rsp, 0x40
pop rbx
ret

Function at 0x14000d7b0
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x1401fa010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000d80f
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x1b]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.ExitFullscreen_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000d80f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword [rbx + 0x30]
lea r9, [rbx + 0x60]
mov r8d, 2
mov byte [rax], 0x4f
mov rax, qword [rbx + 0x30]
mov byte [rax + 1], 0x4b
lea rax, [rbx + 0x38]
mov rdx, qword [rbx + 0x30]
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 1
sete al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.140183d70
add rsp, 0x40
pop rbx
ret
Function at 0x14000d860
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x1401fa010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000d8bf
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x21]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.PostMessageToConsole_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000d8bf
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword [rbx + 0x30]
lea r9, [rbx + 0x60]
mov r8d, 2
mov byte [rax], 0x4f
mov rax, qword [rbx + 0x30]
mov byte [rax + 1], 0x4b
lea rax, [rbx + 0x38]
mov rdx, qword [rbx + 0x30]
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 1
sete al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.140183d70
add rsp, 0x40
pop rbx
ret

Function at 0x14000d910
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x1401fa010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000d96f
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x21]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.DeactivateVisualizer_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000d96f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword [rbx + 0x30]
lea r9, [rbx + 0x60]
mov r8d, 2
mov byte [rax], 0x4f
mov rax, qword [rbx + 0x30]
mov byte [rax + 1], 0x4b
lea rax, [rbx + 0x38]
mov rdx, qword [rbx + 0x30]
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 1
sete al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.140183d70
add rsp, 0x40
pop rbx
ret
Function at 0x14000d9c0
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x1401fa010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov dword [rsp + 0x30], 0
cmp rax, 0xffffffffffffffff
je 0x14000da27
lea r9, [rsp + 0x30]
mov qword [rsp + 0x20], 0
mov r8d, 0x32
lea rdx, str.StartVisualizerPlaybackWithTrackInfo:_override_me_n
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000da27
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword [rbx + 0x30]
lea r9, [rbx + 0x60]
mov r8d, 5
mov byte [rax], 0x53
mov rax, qword [rbx + 0x30]
mov byte [rax + 1], 0x74
mov rax, qword [rbx + 0x30]
mov byte [rax + 2], 0x61
mov rax, qword [rbx + 0x30]
mov byte [rax + 3], 0x72
mov rax, qword [rbx + 0x30]
mov byte [rax + 4], 0x74
lea rax, [rbx + 0x38]
mov rdx, qword [rbx + 0x30]
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x20], rax
mov dword [r9], 0
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 1
sete al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.140183d70
add rsp, 0x40
pop rbx
ret

Function at 0x14000da90
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x38
mov rax, qword [rcx + 0x30]
lea r9, [rcx + 0x60]
mov r8d, 2
mov byte [rax], 0x4f
mov rax, qword [rcx + 0x30]
mov byte [rax + 1], 0x4b
lea rax, [rcx + 0x38]
mov rdx, qword [rcx + 0x30]
mov rcx, qword [rcx + 0x58]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 1
sete al
add rsp, 0x38
ret

Function at 0x14000dad0
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x48
mov rax, qword [0x1401fa010]
xor rax, rsp
mov qword [rsp + 0x38], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000db2a
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x2d]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.DeactivateVisualizerOnMainThread_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000db2a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.140183d70
add rsp, 0x48
ret
Function at 0x14000db40
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x1401fa010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000db9f
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x1b]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.MoveVisualizer_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000db9f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword [rbx + 0x30]
lea r9, [rbx + 0x60]
mov r8d, 2
mov byte [rax], 0x4f
mov rax, qword [rbx + 0x30]
mov byte [rax + 1], 0x4b
lea rax, [rbx + 0x38]
mov rdx, qword [rbx + 0x30]
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 1
sete al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.140183d70
add rsp, 0x40
pop rbx
ret

Function at 0x14000dbf0
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x1401fa010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000dc4f
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x1e]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.ReshapeVisualizer_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000dc4f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword [rbx + 0x30]
lea r9, [rbx + 0x60]
mov r8d, 2
mov byte [rax], 0x4f
mov rax, qword [rbx + 0x30]
mov byte [rax + 1], 0x4b
lea rax, [rbx + 0x38]
mov rdx, qword [rbx + 0x30]
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 1
sete al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.140183d70
add rsp, 0x40
pop rbx
ret

Function at 0x14000dca0
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x1401fa010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, rcx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000dcff
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x1f]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.ActivateVisualizer_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000dcff
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword [rbx + 0x30]
lea r9, [rbx + 0x60]
mov r8d, 2
mov byte [rax], 0x4f
mov rax, qword [rbx + 0x30]
mov byte [rax + 1], 0x4b
lea rax, [rbx + 0x38]
mov rdx, qword [rbx + 0x30]
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 1
sete al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.140183d70
add rsp, 0x40
pop rbx
ret
Function at 0x14000dd50
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x48
mov rax, qword [0x1401fa010]
xor rax, rsp
mov qword [rsp + 0x38], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000ddaa
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x2c]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.ActivateProxyWindowInMainThread_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000ddaa
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.140183d70
add rsp, 0x48
ret

Function at 0x14000ddc0
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x48
mov rax, qword [0x1401fa010]
xor rax, rsp
mov qword [rsp + 0x38], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000de1a
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x23]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.SetArtworkInMainThread_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000de1a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.140183d70
add rsp, 0x48
ret
Function at 0x14000e630
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rdi
sub rsp, 0x40
mov rax, qword [0x1401fa010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, rdx
mov rdi, rcx
mov rdx, rcx
mov rcx, rbx
call fcn.14000c100
test al, al
je 0x14000e6c6
lea rdx, [rdi + 0x1660]
mov rcx, rbx
call fcn.14000bcb0
test al, al
je 0x14000e6c6
mov rcx, qword [rbx + 0x10]
lea rax, [rcx + 4]
cmp rax, qword [rbx + 8]
jbe 0x14000e6e0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000e6c6
lea r8d, [rcx + 0x20]
lea rdx, str.Buffer_underflow_reading_int32_t
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x30]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000e6c6
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor al, al
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.140183d70
mov rbx, qword [rsp + 0x60]
add rsp, 0x40
pop rdi
ret
mov rax, qword [rbx]
mov ecx, dword [rcx + rax]
mov dword [rdi + 0x1688], ecx
add qword [rbx + 0x10], 4
mov rcx, qword [rbx + 0x10]
lea rax, [rcx + 4]
cmp rax, qword [rbx + 8]
jbe 0x14000e72e
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000e6c6
lea r8d, [rcx + 0x21]
lea rdx, str.Buffer_underflow_reading_uint32_t
jmp 0x14000e6a9
mov rax, qword [rbx]
mov ecx, dword [rcx + rax]
mov al, 1
mov dword [rdi + 0x168c], ecx
add qword [rbx + 0x10], 4
jmp 0x14000e6c8

Function at 0x14000e930
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x48
mov rax, qword [0x1401fa010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rcx, qword [rcx + 0x68]
test rcx, rcx
je 0x14000e964
mov rax, qword [rcx]
call qword [rax + 0x30]
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.140183d70
add rsp, 0x48
ret
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000e9a9
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x24]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.Current_plugin_is_null._Cannot_idle_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000e9a9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.140183d70
add rsp, 0x48
ret
Function at 0x14000e9c0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x40
mov rax, qword [0x1401fa010]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, rcx
add rcx, 0x78
call qword [sym.imp.MSVCP140.dll__Mtx_lock]
test eax, eax
je 0x14000e9f3
mov ecx, eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
int3
mov rcx, qword [rbx + 0x68]
test rcx, rcx
je 0x14000ea04
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x14000ea49
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000ea49
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x2a]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.Current_plugin_is_null._Cannot_deactivate_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000ea49
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rbx + 0x78]
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.140183d70
mov rbx, qword [rsp + 0x58]
add rsp, 0x40
pop rdi
ret

Function at 0x14000ea90
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x48
mov rax, qword [0x1401fa010]
xor rax, rsp
mov qword [rsp + 0x38], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ecx, ecx
mov dword [rsp + 0x30], ecx
cmp rax, 0xffffffffffffffff
je 0x14000eaea
mov qword [rsp + 0x20], rcx
lea r8d, [rcx + 0x31]
mov rcx, rax
lea r9, [rsp + 0x30]
lea rdx, str.PluginPipeServer::ResizeRenderTarget_override_me_n
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14000eaea
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.140183d70
add rsp, 0x48
ret