joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14002a2d0
Capabilities:
Write file on windows

Disassembly:
mov rax, qword [rdx + 0x190]
test rax, rax
je 0x14002a2fb
test byte [rax + 0x168], 4
jne 0x14002a30e
lea r8, str.Bad_dvfAssemblySetAssemblyInstance_n
mov edx, 1
mov ecx, 0x2af8
jmp fcn.140001480
test byte [rdx + 0x168], 4
je 0x14002a2e5
cmp qword [rdx + 0x178], 0
jne 0x14002a2e5
mov qword [rcx + 0x170], rdx
inc dword [rdx + 0x1e8]
ret

Function at 0x14002b100
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x320
mov rbx, rcx
xor esi, esi
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rcx + rax], sil
jne 0x14002b120
cmp rax, 0x3ff
jbe 0x14002b149
mov r8d, 0x3ff
lea rcx, [0x1401baa20]
mov rdx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp 0x14002b16f
lea r9, [0x1401baa20]
sub r9, rbx
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rcx]
mov byte [r9 + rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x14002b160
lea r9, reloc.WS2_32.dll_accept
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.140022a80
mov rdi, rax
test rax, rax
jne 0x14002b1a7
mov r9, rbx
lea r8, str.dvconjobDoJob_unable_to_parse_XML_file__s_n
lea edx, [rax + 1]
mov ecx, 0x32eb
call fcn.140001480
jmp 0x14002b2df
lea rcx, [0x140181970]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x14002b21e
lea rcx, str.PVIEW_WNC_CLIENTID
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x14002b21e
lea rcx, str.PVIEW_WNC_APPID
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
lea r8, str.Using_Configuration_files_with_Application_Id___s__for_Publishing
mov edx, 0x100
mov r9, rax
lea rcx, [rsp + 0x20]
call fcn.140002af0
lea r9, [rsp + 0x20]
mov edx, 0x200
lea r8, str._MSG____s_n
lea rcx, [rsp + 0x120]
call fcn.140002af0
lea rdx, [rsp + 0x120]
mov ecx, eax
call fcn.140010080
mov rcx, rdi
call fcn.1400232a0
cmp eax, 1
je 0x14002b247
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.140022b70
mov rcx, rdi
call fcn.140063360
xor eax, eax
jmp 0x14002b2df
mov ecx, dword [rdi + 0x9c]
sub ecx, 1
je 0x14002b2a9
sub ecx, 1
je 0x14002b280
cmp ecx, 1
je 0x14002b26b
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.140022b70
jmp 0x14002b2d5
mov rax, qword [0x1401baa08]
test rax, rax
je 0x14002b2d5
mov rcx, rdi
call rax
mov esi, eax
jmp 0x14002b2d5
call fcn.140006820
mov rcx, rax
call fcn.1400095c0
mov rax, qword [0x1401ba9f8]
test rax, rax
je 0x14002b2a0
mov rcx, rbx
call rax
mov esi, eax
lea rcx, str.Clash
jmp 0x14002b2d0
call fcn.140006820
mov rcx, rax
call fcn.1400095c0
mov rax, qword [0x1401baa00]
test rax, rax
je 0x14002b2c9
mov rcx, rbx
call rax
mov esi, eax
lea rcx, str.Print
call fcn.1400094f0
mov rcx, rdi
call fcn.140063360
mov eax, esi
lea r11, [rsp + 0x320]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rsp, r11
pop rdi
ret
Function at 0x14002b7a0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov rbx, rdx
lea r9, reloc.WS2_32.dll_accept
mov rsi, rcx
xor r8d, r8d
mov rcx, rbx
xor edx, edx
call fcn.140022a80
mov rdi, rax
test rax, rax
jne 0x14002b7f7
mov r9, rbx
lea r8, str.dvconXmlAddAttributes_unable_to_parse_XML_file__s_n
lea edx, [rax + 1]
mov ecx, 0x32eb
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp fcn.140001480
mov rcx, rdi
call fcn.1400232a0
cmp eax, 1
je 0x14002b82b
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.140022b70
mov rcx, rdi
call fcn.140063360
xor eax, eax
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
cmp dword [rdi + 0x9c], 4
je 0x14002b85c
mov r9, rbx
lea r8, str.First_token_is_not_start_of_pvs_properties_in_XML_file__s_n
mov edx, 1
mov ecx, 0x32eb
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp fcn.140001480
mov rdx, rdi
mov rcx, rsi
call fcn.14002bb90
mov rcx, rdi
mov ebx, eax
call fcn.140063360
mov rsi, qword [rsp + 0x38]
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret

Function at 0x14002b890
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov rbx, rdx
lea r9, reloc.WS2_32.dll_accept
mov rsi, rcx
xor r8d, r8d
mov rcx, rbx
xor edx, edx
call fcn.140022a80
mov rdi, rax
test rax, rax
jne 0x14002b8e7
mov r9, rbx
lea r8, str.dvconXmlFilterComp_unable_to_parse_XML_file__s_n
lea edx, [rax + 1]
mov ecx, 0x32f6
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp fcn.140001480
mov rcx, rdi
call fcn.1400232a0
cmp eax, 1
je 0x14002b91b
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.140022b70
mov rcx, rdi
call fcn.140063360
xor eax, eax
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
mov r8, rdi
mov rdx, rsi
xor ecx, ecx
call fcn.14002c2c0
mov rcx, rdi
mov ebx, eax
call fcn.140063360
mov rsi, qword [rsp + 0x38]
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x14002d390
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
test rcx, rcx
je 0x14000bf8d
cmp byte [0x1401b98a1], 1
jne 0x14000bf21
mov r9, qword [0x1401b98b8]
test r9, r9
je 0x14000bf21
movsxd rax, dword [0x1401ba7d4]
imul rdx, rax, 0x38
mov rax, qword [0x140175020]
test byte [rdx + rax + 0x18], 1
je 0x14000bf11
mov r8, qword [rdx + rax]
lea rcx, str._s_MONITOR:_s:
mov rdx, qword [section..data]
call fcn.140002310
mov rdx, qword [0x1401b98b8]
lea rcx, str.Reading_PVI_for_texture_info_from_Input_xmlpath:__s__n
call fcn.140001fb0
mov r9, qword [0x1401b98b8]
mov rdx, r9
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp 0x14002d390
cmp byte [0x1401b98a2], 1
jne 0x14000bf8d
mov rdx, qword [0x1401b98c0]
test rdx, rdx
je 0x14000bf8d
movsxd rax, dword [0x1401ba7d4]
imul rcx, rax, 0x38
mov rax, qword [0x140175020]
test byte [rcx + rax + 0x18], 1
je 0x14000bf80
mov r8, qword [rcx + rax]
lea rcx, str._s_MONITOR:_s:
mov rdx, qword [section..data]
call fcn.140002310
mov rdx, qword [0x1401b98c0]
lea rcx, str.Reading_update_info_from_Input_xmlpath:__s__n
call fcn.140001fb0
mov rdx, qword [0x1401b98c0]
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp 0x14002d390
mov eax, 0xffffffff
add rsp, 0x20
pop rbx
ret
mov qword [rsp + 0x10], rbx
push rsi
push rdi
push r14
sub rsp, 0x20
mov rdi, rdx
lea r9, reloc.WS2_32.dll_accept
mov r14, rcx
xor r8d, r8d
mov rcx, rdi
xor edx, edx
mov esi, 0xffffffff
call fcn.140022a80
mov rbx, rax
test rax, rax
jne 0x14002d3e8
mov r9, rdi
lea r8, str.dvconXmlReadUpdateXMLFile_unable_to_parse_XML_file__s_n
lea edx, [rsi + 2]
mov ecx, 0x32f6
mov rbx, qword [rsp + 0x48]
add rsp, 0x20
pop r14
pop rdi
pop rsi
jmp fcn.140001480
mov rcx, rbx
call fcn.1400232a0
cmp eax, 1
jne 0x14002d405
mov eax, dword [rbx + 0x9c]
cmp eax, 0x24
je 0x14002d429
cmp eax, 0x37
je 0x14002d417
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.140022b70
jmp 0x14002d4f3
mov rdx, rbx
mov rcx, r14
call fcn.14002c070
mov esi, eax
jmp 0x14002d4f3
mov rdx, rbx
mov qword [rsp + 0x40], rbp
mov rcx, r14
call fcn.14002b950
test al, al
je 0x14002d4ee
lea r8, [0x14015711c]
mov ecx, 0x607
lea rdx, [0x140021670]
mov bpl, 1
call fcn.1400215e0
mov qword [r14 + 0x330], rax
movsxd rax, dword [0x1401ba7d4]
imul rcx, rax, 0x38
mov rax, qword [0x140175020]
test byte [rcx + rax + 0x18], 4
je 0x14002d4a2
mov r8, qword [rcx + rax]
lea rcx, str._s_MONITOR:_s:
mov rdx, qword [section..data]
call fcn.140002310
mov rdx, qword [rbx]
lea rcx, str.Parsing_global__textures__tag___input_xml_file___s__is_in_legacy_format_n
call fcn.140001fb0
mov edi, dword [rsp + 0x50]
test bpl, bpl
jne 0x14002d4ba
mov rcx, rbx
call fcn.1400232a0
mov edi, eax
cmp eax, 0xfffffffe
je 0x14002d4ee
mov ecx, dword [rbx + 0x9c]
xor bpl, bpl
cmp ecx, 0x1c
je 0x14002d4e7
cmp ecx, 0x25
je 0x14002d4d2
cmp ecx, 0x2e
jne 0x14002d50b
mov rcx, qword [r14 + 0x330]
mov rdx, rbx
call fcn.14002c550
test eax, eax
je 0x14002d4a6
jmp 0x14002d4ee
cmp edi, 2
jne 0x14002d4a6
xor esi, esi
mov rbp, qword [rsp + 0x40]
mov rcx, rbx
call fcn.140063360
mov rbx, qword [rsp + 0x48]
mov eax, esi
add rsp, 0x20
pop r14
pop rdi
pop rsi
ret
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.140022b70
jmp 0x14002d4ee
Function at 0x14002dae0
Capabilities:
Write file on windows

Disassembly:
push rbx
push rbp
push rsi
push r14
push r15
sub rsp, 0x50
mov r15, rcx
mov rbp, r9
mov rcx, rdx
mov r14, r8
mov rsi, rdx
call fcn.14002dd30
mov rbx, rax
test rax, rax
jne 0x14002db32
lea ecx, [rax - 1]
call fcn.140004580
mov r9, rsi
lea r8, str.Failed_to_parse_DPL_XML_file___s__n
lea edx, [rbx + 1]
mov ecx, 0x2ee4
add rsp, 0x50
pop r15
pop r14
pop rsi
pop rbp
pop rbx
jmp fcn.140001480
mov qword [rsp + 0x88], r12
mov rcx, rbx
mov r12, qword [rsp + 0xa0]
mov qword [rax], r15
mov qword [rax + 8], rsi
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], r12
mov qword [rsp + 0x90], r13
mov r13, qword [rsp + 0xa8]
mov qword [rax + 0x28], r13
mov rax, qword [rsp + 0xb0]
mov qword [rbx + 0x30], rax
call qword [0x1401bae28]
mov rcx, qword [rbx + 0x70]
cmp eax, 0xffffffff
jne 0x14002dbdd
test rcx, rcx
je 0x14002db91
call fcn.140063360
mov rdx, qword [rbx + 0x48]
mov rcx, rbx
call fcn.14002d5b0
mov rcx, qword [rbx + 0x38]
test rcx, rcx
je 0x14002dbac
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov ecx, 0xffffffff
call fcn.140004580
mov r9, rsi
lea r8, str.Failed_to_convert_DPL_file___s__n
mov edx, 1
mov ecx, 0x2ee5
call fcn.140001480
jmp 0x14002dcb7
mov eax, dword [rbx + 0x54]
mov qword [rsp + 0x80], rdi
mov edi, dword [rbx + 0x68]
add edi, dword [rbx + 0x64]
add edi, dword [rbx + 0x60]
add edi, dword [rbx + 0x5c]
add edi, dword [rbx + 0x58]
add edi, dword [rbx + 0x50]
add edi, eax
mov dword [rsp + 0x40], eax
test rcx, rcx
je 0x14002dc0a
call fcn.140063360
mov rdx, qword [rbx + 0x48]
mov rcx, rbx
call fcn.14002d5b0
mov rcx, qword [rbx + 0x38]
test rcx, rcx
je 0x14002dc25
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
test edi, edi
jne 0x14002dc36
xor eax, eax
jmp 0x14002dcaf
cmp dword [rsp + 0x40], 0
jne 0x14002dcaa
xor ecx, ecx
call fcn.1400094f0
mov rax, qword [rsp + 0xb0]
mov r9, rbp
mov qword [rsp + 0x30], rax
mov r8, r14
mov qword [rsp + 0x28], r13
mov rdx, rsi
mov rcx, r15
mov qword [rsp + 0x20], r12
call fcn.140018590
mov rdi, rax
test rax, rax
jne 0x14002dc9a
mov rcx, rbx
call fcn.14002dce0
lea ecx, [rdi - 1]
call fcn.140004580
lea r8, str.Failed_to_create_dummy_ed_file_n
mov ecx, 0x2ee6
lea edx, [rdi + 1]
call fcn.140001480
jmp 0x14002dcaf
mov rcx, rdi
call fcn.140028980
mov rcx, rdi
call fcn.1400178f0
mov eax, 1
mov rdi, qword [rsp + 0x80]
mov r12, qword [rsp + 0x88]
mov r13, qword [rsp + 0x90]
add rsp, 0x50
pop r15
pop r14
pop rsi
pop rbp
pop rbx
ret
Function at 0x14002fc70
Capabilities:
Query environment variable

Disassembly:
sub rsp, 0x138
movss xmm0, dword [0x1401758c8]
movaps xmmword [rsp + 0x120], xmm6
xorps xmm6, xmm6
comiss xmm6, xmm0
jbe 0x14002fcd5
lea rcx, str.PVIEW_COMPLETE_SLEEP
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x14002fcbb
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atof]
cvtsd2ss xmm0, xmm0
comiss xmm6, xmm0
movss dword [0x1401758c8], xmm0
jbe 0x14002fcd5
mov dword [0x1401758c8], 0
movaps xmm6, xmmword [rsp + 0x120]
add rsp, 0x138
ret
comiss xmm0, xmm6
jbe 0x14002fd12
movzx eax, byte [0x1401bae40]
lea rcx, [rsp + 0x21]
xor edx, edx
mov byte [rsp + 0x20], al
mov r8d, 0xff
call sub.VCRUNTIME140.dll_memset
lea rdx, str.PVIEW_COMPLETE_SLEEP0.0
lea rcx, [rsp + 0x20]
call fcn.140002a20
lea rcx, [rsp + 0x20]
call fcn.14001ca90
movaps xmm6, xmmword [rsp + 0x120]
add rsp, 0x138
ret

Function at 0x140031a30
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x28
xorps xmm1, xmm1
comisd xmm0, xmm1
jbe 0x140031a46
movaps xmm1, xmm0
mulsd xmm1, xmm0
jmp 0x140031a51
movsd xmm1, qword [0x1401587f8]
movaps xmm0, xmm1
movsxd rax, dword [0x1401bb004]
imul r8, rax, 0x38
movsd qword [0x140183680], xmm0
movsd qword [0x1401836a0], xmm1
mov rax, qword [0x140175020]
test byte [r8 + rax + 0x18], 0x80
je 0x140031aaf
mov r8, qword [r8 + rax]
lea rcx, str._s_MONITOR:_s:
mov rdx, qword [section..data]
call fcn.140002310
movsd xmm1, qword [0x140183680]
lea rcx, str.MaxChordHeight_set_to__g_n
movq rdx, xmm1
add rsp, 0x28
jmp fcn.140001fb0
add rsp, 0x28
ret

Function at 0x140031ac0
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x28
xorps xmm1, xmm1
comisd xmm0, xmm1
ja 0x140031ad5
movsd xmm0, qword [0x140158858]
movsd qword [0x140183688], xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll_cos
movsxd rax, dword [0x1401bb004]
imul r8, rax, 0x38
movsd qword [0x1401836a8], xmm0
mov rax, qword [0x140175020]
test byte [r8 + rax + 0x18], 0x80
je 0x140031b38
mov r8, qword [r8 + rax]
lea rcx, str._s_MONITOR:_s:
mov rdx, qword [section..data]
call fcn.140002310
movsd xmm1, qword [0x140183688]
lea rcx, str.MaxEdgeAngle_set_to__g_n
movq rdx, xmm1
add rsp, 0x28
jmp fcn.140001fb0
add rsp, 0x28
ret

Function at 0x140031b40
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x28
movsxd rax, dword [0x1401bb004]
imul r8, rax, 0x38
movsd qword [0x140183690], xmm0
mov rax, qword [0x140175020]
test byte [r8 + rax + 0x18], 0x80
je 0x140031b9a
mov r8, qword [r8 + rax]
lea rcx, str._s_MONITOR:_s:
mov rdx, qword [section..data]
call fcn.140002310
movsd xmm1, qword [0x140183690]
lea rcx, str.MaxEdgeLength_set_to__g_n
movq rdx, xmm1
add rsp, 0x28
jmp fcn.140001fb0
add rsp, 0x28
ret
Function at 0x140031ba0
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x28
xorps xmm1, xmm1
comisd xmm0, xmm1
jbe 0x140031bbe
mulsd xmm0, qword [0x140158808]
movaps xmm1, xmm0
mulsd xmm1, xmm0
jmp 0x140031bc9
movsd xmm1, qword [0x1401587f8]
movaps xmm0, xmm1
movsxd rax, dword [0x1401bb004]
imul r8, rax, 0x38
movsd qword [0x140183678], xmm0
movsd qword [0x140183698], xmm1
mov rax, qword [0x140175020]
test byte [r8 + rax + 0x18], 0x80
je 0x140031c27
mov r8, qword [r8 + rax]
lea rcx, str._s_MONITOR:_s:
mov rdx, qword [section..data]
call fcn.140002310
movsd xmm1, qword [0x140183678]
lea rcx, [0x1401836b0]
movq rdx, xmm1
add rsp, 0x28
jmp fcn.140001fb0
add rsp, 0x28
ret

Function at 0x14003f610
Capabilities:
Write file on windows

Disassembly:
push rbx
push rsi
sub rsp, 0x48
mov qword [rsp + 0x70], rbp
test rdx, rdx
mov qword [rsp + 0x40], rdi
lea rbp, str.assemblyAttr
cmovne rbp, rdx
mov qword [rsp + 0x38], r12
xor esi, esi
mov r12, r8
mov rbx, rcx
mov edi, esi
cmp dword [rcx + 8], esi
jle 0x14003f655
mov rcx, qword [rbx + 0x10]
mov dl, 0x20
call fcn.14007d370
inc edi
cmp edi, dword [rbx + 8]
jl 0x14003f643
mov rcx, qword [rbx + 0x10]
lea rdx, str.UserData_Name_
call fcn.14007da10
mov rdx, rbp
mov rcx, rbx
call fcn.14003f3a0
mov rcx, qword [rbx + 0x10]
lea rdx, [0x1401865b4]
call fcn.14007da10
add dword [rbx + 8], 2
mov edx, esi
mov eax, dword [rbx + 8]
mov dword [rsp + 0x60], edx
cmp dword [r12 + 8], edx
jle 0x14003f782
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r15
mov r15, rsi
nop word [rax + rax]
mov rax, qword [r12]
mov rcx, qword [r15 + rax]
mov rax, qword [rcx]
mov rax, qword [rax]
mov qword [rsp + 0x68], rax
cmp byte [rax], sil
je 0x14003f75b
movsxd r13, dword [rcx + 0x18]
cmp r13, 1
jl 0x14003f75b
mov r14d, 0x20
mov edi, esi
mov rax, qword [r12]
mov rcx, qword [r15 + rax]
mov rbp, qword [r14 + rcx]
cmp dword [rbx + 8], esi
jle 0x14003f705
mov rcx, qword [rbx + 0x10]
mov dl, 0x20
call fcn.14007d370
inc edi
cmp edi, dword [rbx + 8]
jl 0x14003f6f3
mov rcx, qword [rbx + 0x10]
lea rdx, str.dfString__
call fcn.14007da10
mov rdx, qword [rsp + 0x68]
mov rcx, rbx
call fcn.14003f3a0
mov rcx, qword [rbx + 0x10]
lea rdx, [0x1401865ec]
call fcn.14007da10
mov rdx, rbp
mov rcx, rbx
call fcn.14003f3a0
mov rcx, qword [rbx + 0x10]
lea rdx, [0x1401865bc]
call fcn.14007da10
add r14, 8
sub r13, 1
jne 0x14003f6e0
mov edx, dword [rsp + 0x60]
inc edx
add r15, 8
mov dword [rsp + 0x60], edx
cmp edx, dword [r12 + 8]
jl 0x14003f6b0
mov eax, dword [rbx + 8]
mov r15, qword [rsp + 0x20]
mov r14, qword [rsp + 0x28]
mov r13, qword [rsp + 0x30]
mov r12, qword [rsp + 0x38]
add eax, 0xfffffffe
mov rdi, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x70]
mov dword [rbx + 8], eax
test eax, eax
jle 0x14003f7b2
nop dword [rax + rax]
mov rcx, qword [rbx + 0x10]
mov dl, 0x20
call fcn.14007d370
inc esi
cmp esi, dword [rbx + 8]
jl 0x14003f7a0
mov rcx, qword [rbx + 0x10]
lea rdx, [0x1401865f4]
add rsp, 0x48
pop rsi
pop rbx
jmp fcn.14007da10
Function at 0x14004a770
Capabilities:
Write file on windows

Disassembly:
mov r11, rsp
push rsi
push rdi
push r14
sub rsp, 0xa0
mov rax, qword [rcx + 8]
mov r14d, r9d
mov esi, r8d
mov rdi, rcx
test dword [rax + 0x68], 0x800
je 0x14004a836
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rbp
movzx ebp, dl
mov qword [r11 + 0x18], r15
lea r15, [0x140000000]
movsxd rbx, dword [r15 + rbp*4 + 0x189e40]
test ebx, ebx
je 0x14004a7cc
mov r8, rbx
lea rcx, [rsp + 0x20]
mov edx, 0x20
call sub.VCRUNTIME140.dll_memset
mov r8, qword [r15 + rbp*8 + 0x189b90]
lea rcx, [rsp + 0x20]
add rcx, rbx
lea rdx, [0x140189fdc]
mov r9d, esi
call fcn.140002a20
mov r15, qword [rsp + 0xd0]
add ebx, eax
mov rbp, qword [rsp + 0xc8]
test r14d, r14d
je 0x14004a80c
movsxd rax, ebx
inc ebx
mov byte [rsp + rax + 0x20], 0xa
mov rcx, qword [rdi + 0x28]
lea r9, [rsp + 0x20]
mov r8d, 1
mov edx, ebx
call fcn.14007db70
mov rbx, qword [rsp + 0xc0]
add rsp, 0xa0
pop r14
pop rdi
pop rsi
ret
mov rcx, qword [rcx + 0x28]
mov edx, esi
add rsp, 0xa0
pop r14
pop rdi
pop rsi
jmp fcn.14007d4c0
Function at 0x14004b4f0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x18], rbp
push rdi
sub rsp, 0x50
mov rax, qword [rcx + 8]
mov rdi, r8
movsxd r10, edx
mov rbp, rcx
test dword [rax + 0x68], 0x800
je 0x14004b57e
mov qword [rsp + 0x68], rsi
mov rsi, r10
test edx, edx
jle 0x14004b557
mov qword [rsp + 0x60], rbx
xor ebx, ebx
nop dword [rax]
nop word [rax + rax]
movsd xmm2, qword [rdi + rbx*8]
lea rdx, [0x140189ffc]
mov rcx, qword [rbp + 0x28]
movq r8, xmm2
call fcn.14007da90
inc rbx
cmp rbx, rsi
jl 0x14004b530
mov rbx, qword [rsp + 0x60]
mov rcx, qword [rbp + 0x28]
lea r9, [0x14018a000]
mov edx, 1
mov r8d, edx
mov rsi, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x70]
add rsp, 0x50
pop rdi
jmp fcn.14007db70
lea eax, [r10 - 1]
movsxd rcx, eax
test eax, eax
js 0x14004b624
cmp rcx, 3
jl 0x14004b60f
lea r9, [rcx + 1]
add r8, 0xfffffffffffffff0
shr r9, 2
lea rdx, [rsp + rcx*4 + 0x18]
lea r8, [r8 + rcx*8]
lea rax, [r9*4]
sub rcx, rax
nop dword [rax]
nop word [rax + rax]
movsd xmm0, qword [r8 + 0x10]
lea rdx, [rdx - 0x10]
movsd xmm1, qword [r8 + 8]
lea r8, [r8 - 0x20]
cvtpd2ps xmm0, xmm0
cvtpd2ps xmm1, xmm1
movss dword [rdx + 0x18], xmm0
movsd xmm0, qword [r8 + 0x20]
movss dword [rdx + 0x14], xmm1
movsd xmm1, qword [r8 + 0x18]
cvtpd2ps xmm0, xmm0
cvtpd2ps xmm1, xmm1
movss dword [rdx + 0x10], xmm0
movss dword [rdx + 0xc], xmm1
sub r9, 1
jne 0x14004b5c0
test rcx, rcx
js 0x14004b624
movsd xmm0, qword [rdi + rcx*8]
cvtpd2ps xmm0, xmm0
movss dword [rsp + rcx*4 + 0x20], xmm0
sub rcx, 1
jns 0x14004b60f
mov rcx, qword [rbp + 0x28]
lea r9, [rsp + 0x20]
mov r8d, 4
mov edx, r10d
call fcn.14007db70
mov rbp, qword [rsp + 0x70]
add rsp, 0x50
pop rdi
ret

Function at 0x14004bcc0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x18], rbp
push rsi
sub rsp, 0x20
mov rax, qword [rcx + 8]
mov rsi, r8
mov rbp, rcx
test dword [rax + 0x68], 0x800
je 0x14004bd30
mov qword [rsp + 0x38], rdi
movsxd rdi, edx
test edx, edx
jle 0x14004bd1a
mov qword [rsp + 0x30], rbx
xor ebx, ebx
movss xmm2, dword [rsi + rbx*4]
lea rdx, [0x140189ff4]
mov rcx, qword [rbp + 0x28]
cvtps2pd xmm2, xmm2
movq r8, xmm2
call fcn.14007da90
inc rbx
cmp rbx, rdi
jl 0x14004bcf0
mov rbx, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
lea rsi, [0x140189ff8]
mov edx, 1
mov r8d, edx
jmp 0x14004bd36
mov r8d, 4
mov rcx, qword [rbp + 0x28]
mov r9, rsi
mov rbp, qword [rsp + 0x40]
add rsp, 0x20
pop rsi
jmp fcn.14007db70
Function at 0x14004bd50
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x30
xorps xmm0, xmm0
mov r10, rdx
movups xmmword [rcx], xmm0
mov rbx, rcx
movups xmmword [rcx + 0x10], xmm0
movups xmmword [rcx + 0x20], xmm0
movups xmmword [rcx + 0x30], xmm0
movups xmmword [rcx + 0x40], xmm0
movups xmmword [rcx + 0x50], xmm0
mov rax, qword [r8 + 0x88]
mov qword [rcx + 0x18], rax
test rax, rax
je 0x14004beeb
cmp qword [rax + 0x10], 0
je 0x14004bdac
lea r8, str.Attempt_to_write_copyrighted_OL_file_to_unsupported_format_n
mov edx, 1
mov ecx, 0x2b99
add rsp, 0x30
pop rbx
jmp fcn.140001480
mov qword [rcx + 8], r10
mov qword [rcx + 0x10], r8
mov rax, qword [r8 + 0x88]
test rax, rax
je 0x14004bdc4
mov rax, qword [rax + 8]
mov qword [rcx + 0x20], rax
mov r9, qword [r8 + 0x80]
mov r8, qword [rdx + 0x38]
mov edx, dword [rdx + 0x50]
mov rcx, qword [r10 + 0x30]
mov qword [rsp + 0x20], 0
call fcn.140013360
mov r8, rax
mov qword [rbx], rax
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], 0
jne 0x14004bdf5
lea eax, [rcx - 4]
test eax, eax
js 0x14004be43
movsxd rax, ecx
lea r10, [r8 - 4]
add r10, rax
lea r9, [0x14018a0a4]
mov rax, r10
sub r9, r10
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r9]
sub edx, ecx
jne 0x14004be33
inc rax
test ecx, ecx
jne 0x14004be20
test edx, edx
jne 0x14004be43
mov eax, dword [0x14018a00c]
mov dword [r10], eax
mov r8, qword [rbx]
mov rax, qword [rbx + 8]
mov rcx, r8
mov edx, dword [rax + 0x68]
shr edx, 5
not edx
and edx, 0x40
bts edx, 7
call fcn.14007d590
mov qword [rbx + 0x28], rax
mov rcx, rax
test rax, rax
jne 0x14004be78
mov ecx, 0x2b62
lea r8, [0x140189e18]
jmp 0x14004bed1
mov rax, qword [rbx + 8]
test dword [rax + 0x68], 0x800
jne 0x14004beac
mov dl, 0xff
call fcn.14007d370
mov rcx, qword [rbx + 0x28]
mov dl, reloc.WS2_32.dll_send
call fcn.14007d370
cmp eax, 0xffffffff
je 0x14004bec1
mov rcx, qword [rbx + 0x28]
mov edx, 4
call fcn.14007d4c0
jmp 0x14004bec1
mov edx, send
lea r9, str.Measure_Unit_M_n
lea r8d, [rdx - 0xe]
call fcn.14007db70
test eax, eax
je 0x14004bef6
mov ecx, 0x2b63
lea r8, str.Failed_to_write_to_output_file___s__n
mov r9, qword [rbx]
mov edx, 1
call fcn.140001480
test eax, eax
je 0x14004bef6
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov eax, 0xffffffff
add rsp, 0x30
pop rbx
ret
movss xmm1, dword [0x1401588d0]
mov rcx, qword [rbx + 0x20]
call fcn.140084a20
xor eax, eax
mov dword [rbx + 0x40], 0xbf800000
add rsp, 0x30
pop rbx
ret