joyce8/EMBER2024-capa huggingface dataset:
Function at 0x18007fae0
Capabilities:
Hash data using djb2

Disassembly:
push rdi
sub rsp, 0x30
mov rdi, rcx
test rcx, rcx
je 0x18007faf8
call sym.glib_2.0.dll_g_variant_get_type_string
movsx ecx, byte [rax]
jmp 0x18007fb25
lea rax, str.value___NULL
mov edx, 8
lea r9, [0x1800fb9f8]
mov qword [rsp + 0x20], rax
lea r8, str._s:_assertion__s_failed
lea rcx, [0x18009cbc8]
call sym.glib_2.0.dll_g_log
xor ecx, ecx
sub ecx, 0x62
cmp ecx, 0x17
ja case.0x18007fb4d.99
movsxd rax, ecx
lea rdx, [0x180000000]
movzx eax, byte [rdx + rax + 0x7fc74]
mov ecx, dword [rdx + rax*4 + 0x7fc58]
add rcx, rdx
jmp rcx
mov qword [rsp + 0x40], rbx
xor edx, edx
mov rcx, rdi
mov ebx, 0x1505
call sym.glib_2.0.dll_g_variant_get_string
movzx ecx, byte [rax]
test cl, cl
je 0x18007fb83
nop word [rax + rax]
imul ebx, ebx, 0x21
lea rax, [rax + 1]
movsx ecx, cl
add ebx, ecx
movzx ecx, byte [rax]
test cl, cl
jne 0x18007fb70
mov eax, ebx
mov rbx, qword [rsp + 0x40]
add rsp, 0x30
pop rdi
ret
mov rcx, rdi
add rsp, 0x30
pop rdi
jmp sym.glib_2.0.dll_g_variant_get_boolean
mov rcx, rdi
call sym.glib_2.0.dll_g_variant_get_byte
movzx eax, al
add rsp, 0x30
pop rdi
ret
mov rcx, rdi
call sym.glib_2.0.dll_g_variant_get_data
test rax, rax
je 0x18007fc33
movzx eax, word [rax]
add rsp, 0x30
pop rdi
ret
mov rcx, rdi
call sym.glib_2.0.dll_g_variant_get_data
test rax, rax
je 0x18007fc33
mov eax, dword [rax]
add rsp, 0x30
pop rdi
ret
mov rcx, rdi
call sym.glib_2.0.dll_g_variant_get_data
mov rcx, rax
test rax, rax
je 0x18007fc33
mov eax, dword [rax + 4]
add eax, dword [rcx]
add rsp, 0x30
pop rdi
ret
mov rcx, rdi
call sym.glib_2.0.dll_g_variant_get_type
mov rcx, rax
call sym.glib_2.0.dll_g_variant_type_is_container
lea r9, [0x1800fbb00]
lea rcx, [0x18009cbc8]
test eax, eax
je 0x18007fc3b
lea rax, str._g_variant_is_container__value_
mov edx, 8
lea r8, str._s:_assertion__s_failed
mov qword [rsp + 0x20], rax
call sym.glib_2.0.dll_g_log
xor eax, eax
add rsp, 0x30
pop rdi
ret
mov r8d, 0xa92
mov qword [rsp + 0x20], 0
lea rdx, str.d:_buildob_bora_15653658cayman_glibglib_srcglibgvariant.c
call sym.glib_2.0.dll_g_assertion_message_expr
int3
Function at 0x180081060
Capabilities:
Reference absolute stream path on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
push r14
sub rsp, 0xb0
mov rdi, rcx
mov r14, rdx
mov ecx, 0x58
call sym.glib_2.0.dll_g_slice_alloc
mov rbx, rax
xor ebp, ebp
mov dword [rax], 8
mov dword [rax + 4], 7
lea edx, [rbp + 0x40]
mov qword [rax + 8], 7
lea ecx, [rbp + 1]
mov dword [rax + 0x10], ebp
lea rax, [sym.glib_2.0.dll_g_str_hash]
mov qword [rbx + 0x30], rax
lea rax, [sym.glib_2.0.dll_g_str_equal]
mov qword [rbx + 0x38], rax
lea rax, [sym.glib_2.0.dll_g_free]
mov qword [rbx + 0x48], rax
lea rax, [sym.glib_2.0.dll_g_variant_unref]
mov qword [rbx + 0x50], rax
mov qword [rbx + 0x40], 1
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
test rax, rax
je 0x180081239
mov qword [rbx + 0x18], rax
movabs rcx, 0x3fffffffffffffff
mov qword [rbx + 0x28], rax
movsxd rax, dword [rbx]
cmp rax, rcx
jbe 0x180081132
mov qword [rsp + 0x28], 4
lea r9, str.d:_buildob_bora_15653658cayman_glibglib_srcglibgmem.c:357
lea r8, str._s:_overflow_allocating__I64u_I64u_bytes
mov qword [rsp + 0x20], rax
lea edx, [rbp + 4]
lea rcx, [0x18009cbc8]
call sym.glib_2.0.dll_g_log
jmp 0x180081130
lea rsi, [rax*4]
test rsi, rsi
je 0x180081179
mov rdx, rsi
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov rbp, rax
test rax, rax
jne 0x180081179
lea r9, str.d:_buildob_bora_15653658cayman_glibglib_srcglibgmem.c:135
mov qword [rsp + 0x20], rsi
lea r8, str._s:_failed_to_allocate__I64u_bytes
lea edx, [rax + 4]
lea rcx, [0x18009cbc8]
call sym.glib_2.0.dll_g_log
jmp 0x180081177
mov qword [rbx + 0x20], rbp
mov eax, 0x99c02a26
mov qword [rdi + 8], rax
mov qword [rdi], rbx
test r14, r14
je 0x180081221
mov eax, 0xd55af426
mov qword [rsp + 0x30], r14
mov rcx, r14
mov qword [rsp + 0x68], rax
call sym.glib_2.0.dll_g_variant_n_children
movdqa xmm0, xmmword [0x180100450]
lea r9, [rsp + 0xd0]
lea r8, [rsp + 0xd8]
movdqa xmmword [rsp + 0x40], xmm0
lea rdx, str.sv
mov qword [rsp + 0x38], rax
lea rcx, [rsp + 0x30]
call sym.glib_2.0.dll_g_variant_iter_next
test eax, eax
je 0x180081221
mov r8, qword [rsp + 0xd0]
xor r9d, r9d
mov rdx, qword [rsp + 0xd8]
mov rcx, qword [rdi]
call fcn.18002ba90
lea r9, [rsp + 0xd0]
lea r8, [rsp + 0xd8]
lea rdx, str.sv
lea rcx, [rsp + 0x30]
call sym.glib_2.0.dll_g_variant_iter_next
test eax, eax
jne 0x1800811e1
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret
lea r9, str.d:_buildob_bora_15653658cayman_glibglib_srcglibgmem.c:135
mov qword [rsp + 0x20], 0x40
lea r8, str._s:_failed_to_allocate__I64u_bytes
mov edx, 4
lea rcx, [0x18009cbc8]
call sym.glib_2.0.dll_g_log
jmp 0x180081261
Function at 0x1800820e0
Capabilities:
Reference absolute stream path on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rsi
sub rsp, 0x30
test r8, r8
lea rsi, [rsp + 0x50]
mov rbx, rcx
cmovne rsi, r8
mov r8, rsi
call sym.glib_2.0.dll_g_variant_format_string_scan
test eax, eax
jne 0x180082112
xor eax, eax
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rsi
ret
mov rax, qword [rsi]
mov qword [rsp + 0x40], rdi
mov rdi, rax
sub rdi, rbx
add rdi, 1
je 0x180082162
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rcx, rax
test rax, rax
je 0x18008213c
mov rax, qword [rsi]
jmp 0x180082164
lea r9, str.d:_buildob_bora_15653658cayman_glibglib_srcglibgmem.c:105
mov qword [rsp + 0x20], rdi
lea r8, str._s:_failed_to_allocate__I64u_bytes
mov edx, 4
lea rcx, [0x18009cbc8]
call sym.glib_2.0.dll_g_log
jmp 0x180082160
xor ecx, ecx
mov rdi, qword [rsp + 0x40]
mov rdx, rcx
cmp rbx, rax
je 0x1800821a4
movabs r9, 0x100000004000001
nop dword [rax + rax]
movzx r8d, byte [rbx]
lea eax, [r8 - 0x26]
cmp al, 0x38
ja 0x180082196
movsx rax, al
bt r9, rax
jb 0x18008219c
mov byte [rdx], r8b
inc rdx
inc rbx
cmp rbx, qword [rsi]
jne 0x180082180
mov byte [rdx], 0
call sym.glib_2.0.dll_g_variant_type_checked_
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rsi
ret
Function at 0x1800821c0
Capabilities:
Reference absolute stream path on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
sub rsp, 0x30
mov r14, r8
mov r15d, edx
lea r8, [rsp + 0x50]
xor edx, edx
mov rbp, rcx
mov rbx, rcx
call sym.glib_2.0.dll_g_variant_format_string_scan
test eax, eax
jne 0x180082248
xor edi, edi
lea rax, str._s_does_not_have_a_valid_GVariant_format_string_as_a_prefix
test r15d, r15d
lea r8, str._s_is_not_a_valid_GVariant_format_string
mov r9, rbp
cmove r8, rax
lea rcx, [0x18009cbc8]
mov edx, 8
call sym.glib_2.0.dll_g_log
test rdi, rdi
je 0x18008222d
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor eax, eax
mov rbx, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x30
pop r15
pop r14
pop rdi
ret
mov rcx, qword [rsp + 0x50]
mov rsi, rcx
sub rsi, rbp
add rsi, 1
je 0x180082297
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
test rax, rax
je 0x180082271
mov rcx, qword [rsp + 0x50]
jmp 0x180082299
lea r9, str.d:_buildob_bora_15653658cayman_glibglib_srcglibgmem.c:105
mov qword [rsp + 0x20], rsi
lea r8, str._s:_failed_to_allocate__I64u_bytes
mov edx, 4
lea rcx, [0x18009cbc8]
call sym.glib_2.0.dll_g_log
jmp 0x180082295
xor edi, edi
mov rdx, rdi
cmp rbp, rcx
je 0x1800822d9
movabs r9, 0x100000004000001
nop dword [rax + rax]
movzx r8d, byte [rbx]
lea eax, [r8 - 0x26]
cmp al, 0x38
ja 0x1800822c6
movsx rax, al
bt r9, rax
jb 0x1800822d1
mov byte [rdx], r8b
inc rdx
mov rcx, qword [rsp + 0x50]
inc rbx
cmp rbx, rcx
jne 0x1800822b0
mov rcx, rdi
mov byte [rdx], 0
call sym.glib_2.0.dll_g_variant_type_checked_
mov rdi, rax
test rax, rax
je 0x1800821f6
test r15d, r15d
je 0x180082303
mov rax, qword [rsp + 0x50]
cmp byte [rax], 0
jne 0x1800821f6
test r14, r14
je 0x180082396
mov rcx, r14
call sym.glib_2.0.dll_g_variant_get_type
mov rcx, rax
mov rdx, rdi
call sym.glib_2.0.dll_g_variant_type_is_subtype_of
test eax, eax
jne 0x180082396
mov rdx, qword [rsp + 0x50]
mov rcx, rbp
sub rdx, rbp
call sym.glib_2.0.dll_g_strndup
mov rcx, rdi
mov rsi, rax
call sym.glib_2.0.dll_g_variant_type_dup_string
mov rcx, r14
mov rbx, rax
call sym.glib_2.0.dll_g_variant_get_type_string
mov qword [rsp + 0x28], rax
lea r8, str.the_GVariant_format_string__s_has_a_type_of__s_but_the_given_value_has_a_type_of__s
mov r9, rsi
mov qword [rsp + 0x20], rbx
mov edx, 8
lea rcx, [0x18009cbc8]
call sym.glib_2.0.dll_g_log
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
test rsi, rsi
je 0x180082385
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
test rbx, rbx
je 0x18008222d
mov rcx, rbx
jmp 0x180082227
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov eax, 1
jmp 0x18008222f
Function at 0x1800827a0
Capabilities:
Reference absolute stream path on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rsi
sub rsp, 0x30
mov rax, qword [rcx]
mov r8, rcx
mov rbx, rdx
movsx ecx, byte [rax]
lea r9, [rax + 1]
sub ecx, 0x26
mov qword [r8], r9
cmp ecx, 0x50
ja case.0x1800827e5.39
movsxd rax, ecx
lea rdx, [0x180000000]
movzx eax, byte [rdx + rax + 0x829d0]
mov ecx, dword [rdx + rax*4 + 0x829b0]
add rcx, rdx
jmp rcx
xor edx, edx
mov rcx, r9
call sym.glib_2.0.dll_g_variant_type_string_scan
mov rcx, rbx
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rsi
jmp sym.glib_2.0.dll_g_variant_iter_new
lea rax, [r9 + 1]
xor edx, edx
mov rcx, rbx
mov qword [r8], rax
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rsi
jmp sym.glib_2.0.dll_g_variant_get_string
xor edx, edx
mov rcx, rbx
call sym.glib_2.0.dll_g_variant_get_string
mov rcx, rax
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rsi
jmp sym.glib_2.0.dll_g_strdup
xor esi, esi
mov qword [rsp + 0x40], rdi
mov edi, esi
mov edx, esi
nop word [rax + rax]
mov rax, qword [r8]
movzx ecx, byte [rax]
inc rax
mov qword [r8], rax
cmp cl, 0x26
jne 0x180082868
mov edi, 1
jmp 0x180082850
cmp cl, 0x61
jne 0x180082871
inc edx
jmp 0x180082850
cmp cl, 0x73
jne 0x1800828a8
xor edx, edx
mov rcx, rbx
test edi, edi
je 0x180082894
call sym.glib_2.0.dll_g_variant_get_strv
mov rdi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rsi
ret
mov rdi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rsi
jmp sym.glib_2.0.dll_g_variant_dup_strv
cmp cl, 0x6f
mov rcx, rbx
jne 0x1800828de
xor edx, edx
test edi, edi
je 0x1800828ca
mov rdi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rsi
jmp sym.glib_2.0.dll_g_variant_get_objv
mov rdi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rsi
jmp sym.glib_2.0.dll_g_variant_dup_objv
cmp edx, 1
jbe 0x180082911
xor edx, edx
test edi, edi
je 0x1800828fd
mov rdi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rsi
jmp sym.glib_2.0.dll_g_variant_get_bytestring_array
mov rdi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rsi
jmp sym.glib_2.0.dll_g_variant_dup_bytestring_array
call sym.glib_2.0.dll_g_variant_get_bytestring
mov rcx, rax
test edi, edi
jne 0x180082884
test rax, rax
je 0x180082946
mov rax, 0xffffffffffffffff
nop dword [rax]
cmp byte [rcx + rax + 1], sil
lea rax, [rax + 1]
jne 0x180082930
lea edx, [rax + 1]
call sym.glib_2.0.dll_g_memdup
mov rsi, rax
mov rdi, qword [rsp + 0x40]
mov rax, rsi
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rsi
ret
xor edx, edx
mov rcx, r9
call sym.glib_2.0.dll_g_variant_type_string_scan
mov rcx, rbx
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rsi
jmp sym.glib_2.0.dll_g_variant_ref
mov rcx, rbx
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rsi
jmp sym.glib_2.0.dll_g_variant_get_variant
xor esi, esi
lea r9, str.g_variant_valist_get_nnp
mov r8d, 0x1333
mov qword [rsp + 0x20], rsi
lea rdx, str.d:_buildob_bora_15653658cayman_glibglib_srcglibgvariant.c
lea rcx, [0x18009cbc8]
call sym.glib_2.0.dll_g_assertion_message_expr
int3
Function at 0x180084340
Capabilities:
Reference absolute stream path on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push r14
sub rsp, 0x70
mov rbx, qword [rcx]
mov rsi, rcx
mov rcx, rbx
xor edx, edx
call fcn.18008c6b0
cmp byte [rbx + 8], 0
je 0x18008446d
mov rcx, rsi
call sym.glib_2.0.dll_g_variant_get_normal_form
mov r14, rax
mov rcx, qword [rax]
mov qword [rsp + 0x30], rcx
mov rcx, rax
call sym.glib_2.0.dll_g_variant_get_size
mov qword [rsp + 0x40], rax
mov rdi, rax
test rax, rax
je 0x1800843d5
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
test rax, rax
je 0x1800843af
mov qword [rsp + 0x38], rax
jmp 0x1800843dc
lea r9, str.d:_buildob_bora_15653658cayman_glibglib_srcglibgmem.c:105
mov qword [rsp + 0x20], rdi
lea r8, str._s:_failed_to_allocate__I64u_bytes
mov edx, 4
lea rcx, [0x18009cbc8]
call sym.glib_2.0.dll_g_log
jmp 0x1800843d3
xor ebx, ebx
mov qword [rsp + 0x38], rbx
mov rdx, rbx
mov rcx, r14
call sym.glib_2.0.dll_g_variant_store
mov rcx, r14
call sym.glib_2.0.dll_g_variant_unref
movups xmm0, xmmword [rsp + 0x30]
lea rcx, [rsp + 0x50]
movsd xmm1, qword [rsp + 0x40]
movaps xmmword [rsp + 0x50], xmm0
movsd qword [rsp + 0x60], xmm1
call sym.glib_2.0.dll_g_variant_serialised_byteswap
mov rdx, rdi
mov rcx, rbx
call sym.glib_2.0.dll_g_bytes_new_take
mov rcx, rsi
mov rbx, rax
call sym.glib_2.0.dll_g_variant_get_type
mov rcx, rax
mov r8d, 1
mov rdx, rbx
call sym.glib_2.0.dll_g_variant_new_from_bytes
mov rsi, rax
test rbx, rbx
je 0x18008446d
mov ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
cmp ecx, 1
jne 0x18008446d
mov rax, qword [rbx + 0x18]
test rax, rax
je 0x180084460
mov rcx, qword [rbx + 0x20]
call qword [case.0x180005f92.0]
mov rdx, rbx
mov ecx, 0x28
call sym.glib_2.0.dll_g_slice_free1
mov rcx, rsi
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop r14
jmp sym.glib_2.0.dll_g_variant_ref_sink
Function at 0x1800848f0
Capabilities:
Reference absolute stream path on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x30
mov eax, dword [rcx + 0x20]
mov rbx, rcx
test al, 1
je 0x1800849dd
not eax
test al, 2
je 0x1800849cd
mov qword [rsp + 0x40], rbp
call fcn.1800846b0
mov rsi, qword [rbx + 8]
xor edi, edi
test rsi, rsi
je 0x180084962
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbp, rax
test rax, rax
jne 0x180084965
lea r9, str.d:_buildob_bora_15653658cayman_glibglib_srcglibgmem.c:105
mov qword [rsp + 0x20], rsi
lea r8, str._s:_failed_to_allocate__I64u_bytes
lea edx, [rdi + 4]
lea rcx, [0x18009cbc8]
call sym.glib_2.0.dll_g_log
nop
jmp 0x180084960
mov rbp, rdi
mov rdx, rbp
mov rcx, rbx
call fcn.180084720
mov rcx, rbx
call fcn.1800845f0
mov rdx, qword [rbx + 8]
mov rcx, rbp
call sym.glib_2.0.dll_g_bytes_new_take
mov rsi, rax
test rax, rax
je 0x180084991
mov rdi, qword [rax]
jmp 0x1800849bc
lea rax, str.bytes___NULL
mov edx, 8
lea r9, [0x1800eb438]
mov qword [rsp + 0x20], rax
lea r8, str._s:_assertion__s_failed
lea rcx, [0x18009cbc8]
call sym.glib_2.0.dll_g_log
or dword [rbx + 0x20], 2
mov rbp, qword [rsp + 0x40]
mov qword [rbx + 0x18], rdi
mov qword [rbx + 0x10], rsi
mov rbx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
ret
lea rax, str.value__state__STATE_LOCKED
mov r8d, 0x1b5
lea r9, str.g_variant_ensure_serialised
mov qword [rsp + 0x20], rax
lea rdx, str.d:_buildob_bora_15653658cayman_glibglib_srcglibgvariant_core.c
lea rcx, [0x18009cbc8]
call sym.glib_2.0.dll_g_assertion_message_expr
int3
Function at 0x1800861a0
Capabilities:
Reference absolute stream path on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
sub rsp, 0x30
mov r9d, dword [rdx]
mov rbp, r8
mov rbx, rdx
mov rsi, rcx
lea eax, [r9 - 1]
test r9d, eax
jne 0x180086277
mov qword [rsp + 0x40], rdi
test r9d, r9d
je 0x1800861d7
add r9d, r9d
jmp 0x1800861dd
mov r9d, 1
mov rcx, qword [rcx]
movabs rdx, 0x1fffffffffffffff
movsxd rax, r9d
cmp rax, rdx
jbe 0x180086222
mov qword [rsp + 0x28], 8
lea r9, str.d:_buildob_bora_15653658cayman_glibglib_srcglibgmem.c:383
lea r8, str._s:_overflow_allocating__I64u_I64u_bytes
mov qword [rsp + 0x20], rax
mov edx, 4
lea rcx, [0x18009cbc8]
call sym.glib_2.0.dll_g_log
nop
jmp 0x180086220
lea rdi, [rax*8]
test rdi, rdi
je 0x180086262
mov rdx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
jne 0x18008626f
lea r9, str.d:_buildob_bora_15653658cayman_glibglib_srcglibgmem.c:170
mov qword [rsp + 0x20], rdi
lea r8, str._s:_failed_to_allocate__I64u_bytes
lea edx, [rax + 4]
lea rcx, [0x18009cbc8]
call sym.glib_2.0.dll_g_log
nop
jmp 0x180086260
test rcx, rcx
je 0x18008626d
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor eax, eax
mov rdi, qword [rsp + 0x40]
mov qword [rsi], rax
movsxd rcx, dword [rbx]
mov rax, qword [rsi]
mov qword [rax + rcx*8], rbp
inc dword [rbx]
mov rbx, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x50]
add rsp, 0x30
pop rsi
ret
Function at 0x18008d580
Capabilities:
Reference absolute stream path on windows

Disassembly:
sub rsp, 0x38
test rcx, rcx
je 0x18008d59a
call sym.glib_2.0.dll_g_variant_type_checked_
mov rcx, rax
add rsp, 0x38
jmp sym.glib_2.0.dll_g_variant_type_copy
lea rax, str.type_string___NULL
mov edx, 8
lea r9, [0x1800fdc58]
mov qword [rsp + 0x20], rax
lea r8, str._s:_assertion__s_failed
lea rcx, [0x18009cbc8]
call sym.glib_2.0.dll_g_log
xor eax, eax
add rsp, 0x38
ret

Function at 0x18008d6a0
Capabilities:
Reference absolute stream path on windows

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rcx
test rcx, rcx
je 0x18008d6c3
call sym.glib_2.0.dll_g_variant_type_get_string_length
mov rdx, rax
mov rcx, rbx
add rsp, 0x30
pop rbx
jmp sym.glib_2.0.dll_g_strndup
lea rax, str.g_variant_type_check__type_
mov edx, 8
lea r9, [0x1800fdcb8]
mov qword [rsp + 0x20], rax
lea r8, str._s:_assertion__s_failed
lea rcx, [0x18009cbc8]
call sym.glib_2.0.dll_g_log
xor eax, eax
add rsp, 0x30
pop rbx
ret
Function at 0x18008e340
Capabilities:
Reference absolute stream path on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rdi
sub rsp, 0x30
mov rdi, rcx
test rcx, rcx
je 0x18008e3ce
mov qword [rsp + 0x40], rsi
call sym.glib_2.0.dll_g_variant_type_get_string_length
mov rbp, rax
lea rsi, [rax + 1]
test rsi, rsi
je 0x18008e3a2
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
test rax, rax
jne 0x18008e3a4
lea r9, str.d:_buildob_bora_15653658cayman_glibglib_srcglibgmem.c:105
mov qword [rsp + 0x20], rsi
lea r8, str._s:_failed_to_allocate__I64u_bytes
lea edx, [rax + 4]
lea rcx, [0x18009cbc8]
call sym.glib_2.0.dll_g_log
jmp 0x18008e3a0
xor ebx, ebx
lea rcx, [rbx + 1]
mov byte [rbx], 0x61
mov r8, rbp
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov rsi, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
ret
lea rax, str.g_variant_type_check__element_
mov edx, 8
lea r9, [0x1800fe080]
mov qword [rsp + 0x20], rax
lea r8, str._s:_assertion__s_failed
lea rcx, [0x18009cbc8]
call sym.glib_2.0.dll_g_log
mov rbx, qword [rsp + 0x48]
xor eax, eax
mov rbp, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
ret

Function at 0x18008e410
Capabilities:
Reference absolute stream path on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rdi
sub rsp, 0x30
mov rdi, rcx
test rcx, rcx
je 0x18008e49e
mov qword [rsp + 0x40], rsi
call sym.glib_2.0.dll_g_variant_type_get_string_length
mov rbp, rax
lea rsi, [rax + 1]
test rsi, rsi
je 0x18008e472
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
test rax, rax
jne 0x18008e474
lea r9, str.d:_buildob_bora_15653658cayman_glibglib_srcglibgmem.c:105
mov qword [rsp + 0x20], rsi
lea r8, str._s:_failed_to_allocate__I64u_bytes
lea edx, [rax + 4]
lea rcx, [0x18009cbc8]
call sym.glib_2.0.dll_g_log
jmp 0x18008e470
xor ebx, ebx
lea rcx, [rbx + 1]
mov byte [rbx], WSAGetLastError
mov r8, rbp
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov rsi, qword [rsp + 0x40]
mov rax, rbx
mov rbx, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
ret
lea rax, str.g_variant_type_check__element_
mov edx, 8
lea r9, [0x1800fe0a0]
mov qword [rsp + 0x20], rax
lea r8, str._s:_assertion__s_failed
lea rcx, [0x18009cbc8]
call sym.glib_2.0.dll_g_log
mov rbx, qword [rsp + 0x48]
xor eax, eax
mov rbp, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
ret
Function at 0x18008e4e0
Capabilities:
Reference absolute stream path on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x30
mov rdi, rdx
mov rsi, rcx
test rcx, rcx
je 0x18008e5a5
test rdx, rdx
je 0x18008e59c
mov qword [rsp + 0x50], rbp
call sym.glib_2.0.dll_g_variant_type_get_string_length
mov rcx, rdi
mov r14, rax
call sym.glib_2.0.dll_g_variant_type_get_string_length
mov r15, rax
lea rbp, [rax + 2]
add rbp, r14
je 0x18008e562
mov rcx, rbp
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
test rax, rax
jne 0x18008e564
lea r9, str.d:_buildob_bora_15653658cayman_glibglib_srcglibgmem.c:105
mov qword [rsp + 0x20], rbp
lea r8, str._s:_failed_to_allocate__I64u_bytes
lea edx, [rax + 4]
lea rcx, [0x18009cbc8]
call sym.glib_2.0.dll_g_log
nop
jmp 0x18008e560
xor ebx, ebx
lea rcx, [rbx + 1]
mov byte [rbx], 0x7b
mov r8, r14
mov rdx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [r14 + 1]
mov r8, r15
add rcx, rbx
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov rbp, qword [rsp + 0x50]
lea rcx, [rbx + r15]
mov byte [rcx + r14 + 1], 0x7d
mov rax, rbx
jmp 0x18008e5d2
lea rax, str.g_variant_type_check__value_
jmp 0x18008e5ac
lea rax, str.g_variant_type_check__key_
lea r9, [0x1800fe0e0]
mov qword [rsp + 0x20], rax
lea r8, str._s:_assertion__s_failed
mov edx, 8
lea rcx, [0x18009cbc8]
call sym.glib_2.0.dll_g_log
xor eax, eax
mov rbx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
add rsp, 0x30
pop r15
pop r14
pop rdi
ret

Function at 0x18008e8c0
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x38
test rcx, rcx
je 0x18008e8d2
add rsp, 0x38
jmp fcn.180097260
lea rax, str.format___NULL
mov edx, 8
lea r9, [0x1800fe230]
mov qword [rsp + 0x20], rax
lea r8, str._s:_assertion__s_failed
lea rcx, [0x18009cbc8]
call sym.glib_2.0.dll_g_log
mov eax, 0xffffffff
add rsp, 0x38
ret

Function at 0x18008e910
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rcx
test rdx, rdx
je 0x18008e97c
mov r9, r8
mov qword [rsp + 0x40], rdi
mov r8, rdx
lea rdx, [rsp + 0x48]
call fcn.180097600
mov rdi, rax
test rax, rax
jne 0x18008e94d
mov rdi, qword [rsp + 0x40]
mov ebx, 0xffffffff
mov eax, ebx
add rsp, 0x30
pop rbx
ret
mov r8, qword [rsp + 0x48]
mov r9, rbx
mov edx, 1
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
mov rcx, rdi
mov rbx, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rdi, qword [rsp + 0x40]
mov eax, ebx
add rsp, 0x30
pop rbx
ret
lea rax, str.format___NULL
mov edx, 8
lea r9, [0x1800fe240]
mov qword [rsp + 0x20], rax
lea r8, str._s:_assertion__s_failed
lea rcx, [0x18009cbc8]
call sym.glib_2.0.dll_g_log
mov eax, 0xffffffff
add rsp, 0x30
pop rbx
ret