joyce8/EMBER2024-capa huggingface dataset:
Function at 0x40b600
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov dword [ebp - 8], esi
mov esi, dword [ebp + 8]
mov dword [ebp - 4], edi
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0xc], ebx
test esi, esi
je 0x40b6a3
mov dword [esp + 8], esi
mov dword [esp + 4], str._s_0.IFO
mov dword [esp], 0x443220
call sub.cygwin1.dll_sprintf
mov dword [esp + 4], 0x41ad1b
mov dword [esp], 0x443220
call sub.cygwin1.dll__fopen64
mov edx, edi
mov ebx, eax
call fcn.0040aeb0
mov dword [esp], ebx
call sub.cygwin1.dll_fclose
mov dword [esp + 8], esi
mov dword [esp + 4], str._s_0.BUP
mov dword [esp], 0x443220
call sub.cygwin1.dll_sprintf
mov dword [esp + 4], 0x41ad1b
mov dword [esp], 0x443220
call sub.cygwin1.dll__fopen64
mov edx, edi
mov ebx, eax
call fcn.0040aeb0
mov esi, dword [ebp - 8]
mov dword [ebp + 8], ebx
mov edi, dword [ebp - 4]
mov ebx, dword [ebp - 0xc]
mov esp, ebp
pop ebp
jmp sub.cygwin1.dll_fclose
mov ebx, dword [ebp - 0xc]
mov edx, edi
xor eax, eax
mov esi, dword [ebp - 8]
mov edi, dword [ebp - 4]
mov esp, ebp
pop ebp
jmp fcn.0040aeb0

Function at 0x40b9c0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [ebp - 0xc], ebx
mov ebx, edx
mov dword [ebp - 4], edi
sar edx, 8
mov edi, 1
mov dword [ebp - 8], esi
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x10], ecx
mov esi, dword [eax + edx*4 - 4]
mov eax, dword [ebp + 8]
test eax, eax
je 0x40b9ed
mov edi, dword [esi + 0x10]
movzx eax, bl
cmp eax, edi
jne 0x40ba7b
mov eax, dword [ebp + 8]
test eax, eax
jne 0x40ba57
mov eax, dword [esi + 0x18]
mov ecx, dword [eax + 0x38]
mov ebx, dword [eax + 0x3c]
mov eax, 1
cmp edi, eax
jne 0x40ba9f
mov eax, dword [ebp + 8]
xor edi, edi
test eax, eax
je 0x40ba31
imul eax, dword [ebp - 0x10], 0x4c
mov eax, dword [esi + eax + 0x20]
lea eax, [eax + eax*2 - 3]
lea edi, [eax*8]
imul edx, dword [ebp - 0x10], 0x4c
mov eax, dword [ebp + 8]
shl eax, 3
add eax, dword [esi + edx + 0x1c]
mov esi, dword [ebp - 8]
sub ecx, dword [eax + edi]
sbb ebx, dword [eax + edi + 4]
mov edi, dword [ebp - 4]
mov eax, ecx
mov edx, ebx
mov ebx, dword [ebp - 0xc]
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp + 8]
mov edx, dword [esi + 4]
lea eax, [ecx*8 + 0x30]
add eax, dword [esi + 0x18]
lea edx, [edx + edx*8 - 9]
shl edx, 4
mov ecx, dword [edx + eax + 8]
mov ebx, dword [edx + eax + 0xc]
mov eax, dword [esi + 0x10]
jmp 0x40ba0d
mov dword [esp + 0xc], str._vcid255__w_v__numcells:1_
mov dword [esp + 8], str.getcellvideopts
mov dword [esp + 4], 0x6b6
mov dword [esp], str.dvdvob.c
call sub.cygwin1.dll___assert_func
mov dword [esp + 0xc], str._vcid255__w_v__numcells:1_
mov dword [esp + 8], str.getcellaudiopts
mov dword [esp + 4], 0x6a1
mov dword [esp], str.dvdvob.c
call sub.cygwin1.dll___assert_func
lea esi, [esi]
lea edi, [edi]
Function at 0x40bad0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov edx, dword [ebp + 0xc]
mov dword [ebp - 8], esi
mov esi, dword [ebp + 0x10]
mov dword [ebp - 0xc], ebx
mov dword [ebp - 4], edi
cmp edx, 0xffffffff
je 0x40bb60
cmp esi, 0xffffffff
je 0x40bb60
lea eax, [edx + 1]
cmp eax, esi
je 0x40bb60
mov eax, esi
sub al, 1
jne 0x40bb70
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x14]
mov eax, edx
sar eax, 8
mov edi, dword [ecx + eax*4 - 4]
movzx eax, dl
cmp dword [edi + 0x10], eax
jne 0x40bb7d
mov eax, esi
sar eax, 8
imul ebx, dword [ebp + 0x14], 0x4c
mov eax, dword [ecx + eax*4 - 4]
add eax, ebx
mov eax, dword [eax + 0x20]
test eax, eax
je 0x40bb60
mov eax, dword [edi + ebx + 0x20]
test eax, eax
jne 0x40bbaf
call sub.cygwin1.dll___getreent
mov eax, dword [eax + 0xc]
mov dword [esp + 8], 0x46
mov dword [esp + 4], 1
mov dword [esp], str.WARN:_Transition_from_non_audio_to_audio_VOB__assuming_discontinuity._n
mov dword [esp + 0xc], eax
call sub.cygwin1.dll_fwrite
mov eax, 1
jmp 0x40bb62
xor eax, eax
mov ebx, dword [ebp - 0xc]
mov esi, dword [ebp - 8]
mov edi, dword [ebp - 4]
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 8]
sar edx, 8
mov ecx, dword [eax + 0x14]
mov edi, dword [ecx + edx*4 - 4]
sar esi, 8
mov eax, dword [ecx + esi*4 - 4]
mov esi, dword [edi]
mov ebx, dword [eax]
call sub.cygwin1.dll___getreent
mov dword [esp + 8], esi
mov dword [esp + 4], str.WARN:_Do_not_know_how_to_compute_the_audio_gap_between__s_and__s__assuming_discontinuity._n
mov dword [esp + 0xc], ebx
mov eax, dword [eax + 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_fprintf
mov eax, 1
jmp 0x40bb62
mov ecx, dword [ebp + 0x14]
mov eax, dword [ebp + 8]
mov dword [esp], 1
call fcn.0040b9c0
mov ecx, dword [ebp + 0x14]
mov edx, esi
mov dword [esp], 0
mov ebx, eax
mov eax, dword [ebp + 8]
call fcn.0040b9c0
cmp ebx, eax
setne al
movzx eax, al
jmp 0x40bb62

Function at 0x40bbf0
Capabilities:
Terminate process
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push esi
mov esi, edx
push ebx
mov ebx, eax
sub esp, 0x10
mov eax, dword [eax + edx*4]
cmp eax, 0xf
jle 0x40bc6e
mov ecx, dword [ebx + 0x58]
mov edx, eax
xor eax, eax
and edx, 0xffffff
cmp dword [ecx + eax*4 + 4], edx
je 0x40bc6b
add eax, 1
cmp eax, 0x10
jne 0x40bc11
xor al, al
cmp dword [ecx + eax*4 + 4], 0x1000000
je 0x40bc67
add eax, 1
cmp eax, 0x10
jne 0x40bc21
call sub.cygwin1.dll___getreent
mov eax, dword [eax + 0xc]
mov dword [esp + 8], 0x34
mov dword [esp + 4], 1
mov dword [esp], str.ERR:_color_map_full__unable_to_allocate_new_colors._n
mov dword [esp + 0xc], eax
call sub.cygwin1.dll_fwrite
mov dword [esp], 1
call sub.cygwin1.dll_exit
mov dword [ecx + eax*4 + 4], edx
mov dword [ebx + esi*4], eax
add esp, 0x10
pop ebx
pop esi
pop ebp
ret
Function at 0x40bde0
Capabilities:
Terminate process
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov eax, dword [0x44ca20]
test eax, eax
je 0x40be20
mov edx, dword [0x417184]
cmp edx, 0xffffffff
je 0x40be16
mov dword [esp + 8], eax
mov dword [esp + 4], 0x44ca30
mov dword [esp], edx
call sub.cygwin1.dll_write
cmp eax, dword [0x44ca20]
jne 0x40be22
mov dword [0x44ca20], 0
leave
ret
call sub.cygwin1.dll___getreent
mov eax, dword [eax + 0xc]
mov dword [esp + 8], 0x19
mov dword [esp + 4], 1
mov dword [esp], str.ERR:__Error_writing_data_n
mov dword [esp + 0xc], eax
call sub.cygwin1.dll_fwrite
mov dword [esp], 1
call sub.cygwin1.dll_exit
lea esi, [esi]
lea edi, [edi]
Function at 0x40d8c0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x4c
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x34], edx
mov dword [esp], eax
call fcn.00401150
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x2c], edx
mov edx, edi
mov dword [ebp - 0x30], eax
mov eax, esi
shld edx, esi, 1
add eax, esi
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], edx
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x18], edx
mov edx, eax
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x18]
sbb ebx, dword [ebp - 0x14]
sar edx, 0x1f
mov eax, edx
xor edx, edx
shr eax, 0x1f
add eax, dword [ebp - 0x30]
adc edx, dword [ebp - 0x2c]
shrd eax, edx, 1
sar edx, 1
add ecx, eax
mov eax, dword [ebp - 0x30]
adc ebx, edx
mov edx, dword [ebp - 0x2c]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
call sub.cyggcc_s_1.dll___divdi3
mov edx, eax
mov ecx, eax
sar edx, 0x1f
mov ebx, edx
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x24], eax
imul edx, ebx
mov dword [ebp - 0x3c], edx
mov edx, dword [ebp - 0x2c]
imul edx, eax
mov eax, dword [ebp - 0x30]
add dword [ebp - 0x3c], edx
mul ecx
mov ecx, eax
mov ebx, edx
add ebx, dword [ebp - 0x3c]
add ecx, dword [ebp - 0x18]
adc ebx, dword [ebp - 0x14]
mov edx, ebx
sar edx, 0x1f
mov eax, edx
xor edx, edx
shr eax, 0x1f
add eax, ecx
adc edx, ebx
shrd eax, edx, 1
sar edx, 1
xor eax, esi
mov ecx, edx
xor ecx, edi
or ecx, eax
je 0x40da10
mov edx, dword [ebp - 0x38]
mov eax, dword [edx]
test eax, eax
jne 0x40d9af
mov edi, dword [ebp - 0x34]
test edi, edi
jne 0x40da18
mov ecx, dword [ebp - 0x38]
mov dword [ecx], 1
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
mov dword [ecx], eax
mov dword [ecx + 4], edx
mov eax, dword [ebp + 0x14]
mov esi, dword [ebp - 0x30]
mov edx, eax
mov ecx, eax
sar edx, 0x1f
imul esi, edx
mov edx, dword [ebp - 0x2c]
imul edx, eax
mov eax, dword [ebp - 0x30]
add esi, edx
mul ecx
lea ebx, [esi + edx]
mov ecx, eax
add ecx, dword [ebp - 0x18]
adc ebx, dword [ebp - 0x14]
mov edx, ebx
sar edx, 0x1f
mov eax, edx
xor edx, edx
shr eax, 0x1f
add eax, ecx
adc edx, ebx
add esp, 0x4c
shrd eax, edx, 1
pop ebx
sar edx, 1
pop esi
pop edi
pop ebp
ret
mov eax, dword [ebp - 0x24]
add dword [ebp + 0x14], eax
jmp 0x40d9c3
call sub.cygwin1.dll___getreent
mov eax, dword [eax + 0xc]
mov dword [esp + 8], 0x3b
mov dword [esp + 4], 1
mov dword [esp], str.WARN:_Video_PTS_does_not_line_up_on_a_multiple_of_a_field._n
mov dword [esp + 0xc], eax
call sub.cygwin1.dll_fwrite
jmp 0x40d9a6
Function at 0x4123c0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x1c
mov esi, dword [0x454a30]
test esi, esi
jne 0x41240d
mov eax, dword [0x454a30]
test eax, eax
jne 0x412560
mov dword [0x454a30], 0x20000
mov eax, dword [0x454a40]
test eax, eax
je 0x4123fb
mov dword [esp], eax
call sub.cygwin1.dll_free
mov eax, dword [0x454a30]
mov dword [esp], eax
call sub.cygwin1.dll_malloc
mov dword [0x454a40], eax
mov eax, dword [0x454a40]
mov dword [esp + 4], 0
mov dword [ebp - 0x14], eax
mov eax, dword [0x454a30]
mov edx, dword [ebp - 0x14]
mov dword [esp + 8], eax
mov dword [esp], edx
call sub.cygwin1.dll_memset
mov ebx, dword [ebp + 0x10]
test ebx, ebx
je 0x412540
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x14]
mov eax, dword [ecx + 4]
mov eax, dword [eax]
mov byte [edx + 1], al
mov edx, dword [ecx + 4]
mov eax, dword [edx]
lea ecx, [eax*8 + 8]
test eax, eax
mov dword [ebp - 0x10], ecx
jle 0x4124d0
mov esi, dword [ebp - 0x14]
xor edi, edi
add esi, 8
jmp 0x4124af
mov byte [esi + 3], pe_nt_image_headers32
mov eax, dword [ebp - 0x10]
mov dword [esp + 4], eax
lea eax, [esi + 4]
mov dword [esp], eax
call fcn.004013c0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x10]
mov ecx, dword [ebx + 4]
mov edx, dword [ebp + 0x10]
mov dword [esp], eax
mov eax, dword [ebp + 0xc]
call fcn.00411390
test eax, eax
js 0x4123d3
mov ecx, dword [ebp + 0xc]
add edi, 1
add esi, 8
add dword [ebp - 0x10], eax
mov edx, dword [ecx + 4]
cmp dword [edx], edi
jle 0x4124d0
lea ebx, [edi*8]
add ebx, dword [edx + 4]
movzx eax, word [ebx]
mov word [esi], ax
cmp dword [ebp + 0x10], 1
jne 0x412467
mov eax, dword [ebx + 4]
mov eax, dword [eax + 0xc]
mov byte [esi + 3], al
jmp 0x41246b
mov ebx, dword [ebp - 0x10]
lea eax, [ebx - 1]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x14]
add eax, 4
mov dword [esp], eax
call fcn.004013c0
cmp ebx, dword [0x454a30]
jg 0x41256c
mov ecx, dword [ebp + 8]
add ebx, 0x7ff
and ebx, 0xfffff800
test ecx, ecx
je 0x412521
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x14]
mov dword [esp + 8], ebx
mov dword [esp + 4], 1
mov dword [esp + 0xc], ecx
mov dword [esp], eax
call sub.cygwin1.dll_fwrite
test ebx, ebx
lea eax, [ebx + 0x7ff]
cmovs ebx, eax
add esp, 0x1c
sar ebx, 0xb
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x14]
mov ecx, dword [eax + 8]
mov dword [esp], edx
xor edx, edx
call fcn.00411390
test eax, eax
js 0x4123d3
mov ebx, eax
jmp 0x4124e8
add eax, eax
mov dword [0x454a30], eax
jmp 0x4123ea
mov dword [esp + 0xc], str.ph_bigwritebuflen
mov dword [esp + 8], str.CreatePGC
mov dword [esp + 4], 0x1c9
mov dword [esp], str.dvdpgc.c
call sub.cygwin1.dll___assert_func
push ebp
mov ebp, esp
mov dword [0x4175d4], 0xffffffff
mov dword [0x454a80], 0
pop ebp
ret
Function at 0x412ab0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov eax, dword [0x4171a0]
test eax, eax
je 0x412ad0
mov eax, dword [0x454a60]
test eax, eax
je 0x412ae0
leave
ret
mov dword [0x454a60], 0
leave
ret
mov dword [esp], str.WORKDIR
call fcn.004151d0
test eax, eax
mov dword [0x454a60], eax
jne 0x412ac8
call sub.cygwin1.dll___getreent
mov eax, dword [eax + 0xc]
mov dword [esp + 8], 0x25
mov dword [esp + 4], 1
mov dword [esp], str.ERR:__Must_specify_working_directory_n
mov dword [esp + 0xc], eax
call sub.cygwin1.dll_fwrite
mov dword [0x454bd0], 1
leave
ret
Function at 0x413220
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x3c
mov dword [ebp - 0x38], eax
movzx ebx, byte [eax]
test bl, bl
je 0x413337
mov eax, dword [sym.imp.cygwin1.dll___ctype_ptr__]
fldz
mov esi, dword [ebp - 0x38]
fst qword [ebp - 0x30]
mov edi, dword [ebp - 0x38]
mov eax, dword [eax]
add esi, 1
fstp qword [ebp - 0x28]
mov dword [ebp - 0x34], eax
jmp 0x413283
fld qword [ebp - 0x28]
movsx ax, bl
mov edi, esi
fmul dword [0x41d36c]
fstp qword [ebp - 0x28]
push eax
fild word [esp]
add esp, 4
fadd qword [ebp - 0x28]
fsub dword [0x41d370]
fstp qword [ebp - 0x28]
movzx ebx, byte [esi]
add esi, 1
test bl, bl
je 0x4132c9
mov dword [esp + 4], 0x3a
mov dword [esp], edi
call sub.cygwin1.dll_strchr
test eax, eax
je 0x4132e0
mov edx, dword [ebp - 0x34]
movsx eax, bl
test byte [edx + eax + 1], 4
jne 0x413254
cmp bl, 0x3a
jne 0x41330c
fld qword [ebp - 0x30]
mov edi, esi
fmul dword [0x41d368]
fadd qword [ebp - 0x28]
fstp qword [ebp - 0x30]
fldz
fstp qword [ebp - 0x28]
movzx ebx, byte [esi]
add esi, 1
test bl, bl
jne 0x413283
fld qword [ebp - 0x30]
fmul dword [0x41d368]
fadd qword [ebp - 0x28]
add esp, 0x3c
pop ebx
pop esi
pop edi
pop ebp
ret
lea eax, [ebp - 0x14]
mov dword [esp + 4], eax
mov dword [esp], edi
call sub.cygwin1.dll_strtod
mov eax, dword [ebp - 0x14]
cmp byte [eax], 0
jne 0x41330a
fld qword [ebp - 0x30]
fmul dword [0x41d368]
faddp st(1)
add esp, 0x3c
pop ebx
pop esi
pop edi
pop ebp
ret
fstp st(0)
call sub.cygwin1.dll___getreent
mov edx, dword [ebp - 0x38]
mov dword [esp + 4], str.ERR:__Cannot_parse_chapter_timestamp__s_n
mov dword [esp + 8], edx
mov eax, dword [eax + 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_fprintf
mov dword [esp], 1
call sub.cygwin1.dll_exit
fldz
jmp 0x413302
Function at 0x4147c0
Capabilities:
Terminate process
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push esi
push ebx
sub esp, 0x30
cmp dword [0x4175e0], 0xffffffff
je 0x414850
mov eax, dword [ebp + 8]
mov ebx, dword [0x4175e0]
mov dword [esp], eax
call sub.cygwin1.dll_strlen
mov dword [ebp - 0xc], eax
lea eax, [eax + eax*4]
mov dword [ebp - 0x10], eax
add eax, 1
mov dword [esp], eax
call sub.cygwin1.dll_malloc
mov dword [esp], ebx
mov dword [ebp - 0x14], eax
mov esi, eax
lea eax, [ebp - 0x10]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x14]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0xc]
mov dword [esp + 8], eax
lea eax, [ebp + 8]
mov dword [esp + 4], eax
call sub.cygiconv_2.dll_libiconv
add eax, 1
je 0x41493e
mov eax, dword [ebp - 0x14]
mov byte [eax], 0
mov dword [esp], esi
call sub.cygwin1.dll_strlen
mov dword [esp], esi
add eax, 1
mov dword [esp + 4], eax
call sub.cygwin1.dll_realloc
add esp, 0x30
pop ebx
pop esi
pop ebp
ret
call sub.cygwin1.dll___errno
mov dword [eax], 0
mov dword [esp + 4], 0x41d374
mov dword [esp], 0
call sub.cygwin1.dll_setlocale
test eax, eax
mov ebx, eax
je 0x414921
call sub.cygwin1.dll___getreent
mov dword [esp + 8], ebx
mov dword [esp + 4], str.INFO:_Locale_s_n
mov eax, dword [eax + 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_fprintf
mov dword [esp + 4], 0x41d386
mov dword [esp], 4
call sub.cygwin1.dll_setlocale
test eax, eax
je 0x41497e
mov dword [esp], 0
call sub.cygwin1.dll_nl_langinfo
mov ebx, eax
call sub.cygwin1.dll___getreent
mov dword [esp + 8], ebx
mov dword [esp + 4], str.INFO:_Converting_filenames_to__s_n
mov eax, dword [eax + 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_fprintf
mov dword [esp + 4], str.UTF_8
mov dword [esp], ebx
call fcn.00415590
mov dword [0x4175e0], eax
add eax, 1
jne 0x4147d1
call sub.cygwin1.dll___getreent
mov dword [esp + 8], ebx
mov dword [esp + 4], str.ERR:__Cannot_generate_charset_conversion_from_UTF8_to__s_n
mov eax, dword [eax + 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_fprintf
mov dword [esp], 1
call sub.cygwin1.dll_exit
call sub.cygwin1.dll___getreent
mov dword [esp + 4], str.WARN:_Error_reading_locale___m___assuming_C_n
mov eax, dword [eax + 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_fprintf
jmp 0x4148b1
call sub.cygwin1.dll___errno
mov eax, dword [eax]
mov dword [esp], eax
call sub.cygwin1.dll_strerror
mov esi, dword [ebp + 8]
mov ebx, eax
call sub.cygwin1.dll___getreent
mov dword [esp + 0xc], ebx
mov dword [esp + 8], esi
mov dword [esp + 4], str.ERR:__Cannot_convert_UTF8_string__s:__s_n
mov eax, dword [eax + 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_fprintf
mov dword [esp], 1
call sub.cygwin1.dll_exit
call sub.cygwin1.dll___getreent
mov eax, dword [eax + 0xc]
mov dword [esp + 8], 0x26
mov dword [esp + 4], 1
mov dword [esp], str.ERR:__Cannot_set_numeric_locale_to_C__n
mov dword [esp + 0xc], eax
call sub.cygwin1.dll_fwrite
mov dword [esp], 1
call sub.cygwin1.dll_exit
lea esi, [esi]
lea edi, [edi]
Function at 0x4151d0
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov dword [ebp - 8], esi
mov dword [ebp - 4], edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0xc], ebx
mov dword [esp], str.HOME
call sub.cygwin1.dll_getenv
test eax, eax
mov esi, eax
je 0x415243
mov dword [esp], eax
call sub.cygwin1.dll_strlen
add eax, 0x1e
mov dword [esp], eax
call sub.cygwin1.dll_malloc
mov dword [esp + 8], esi
mov dword [esp + 4], str._s_.dvdauthorrc
mov ebx, eax
mov dword [esp], eax
call sub.cygwin1.dll_sprintf
mov edx, ebx
mov eax, edi
call fcn.00415110
mov dword [esp], ebx
mov esi, eax
call sub.cygwin1.dll_free
test esi, esi
je 0x415243
mov eax, esi
mov ebx, dword [ebp - 0xc]
mov esi, dword [ebp - 8]
mov edi, dword [ebp - 4]
mov esp, ebp
pop ebp
ret
mov ebx, dword [ebp - 0xc]
mov eax, edi
mov edx, str._usr_local_etc_dvdauthor.conf
mov esi, dword [ebp - 8]
mov edi, dword [ebp - 4]
mov esp, ebp
pop ebp
jmp fcn.00415110

Function at 0x415260
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
cmp dword [ebp + 0x10], 1
mov dword [ebp - 8], ebx
mov ebx, dword [ebp + 8]
mov dword [ebp - 4], esi
mov esi, dword [ebp + 0xc]
je 0x4152b2
test esi, esi
je 0x415290
sub esi, 1
je 0x4152a1
mov ebx, dword [ebp - 8]
mov esi, dword [ebp - 4]
mov esp, ebp
pop ebp
ret
mov dword [ebp + 8], ebx
mov esi, dword [ebp - 4]
mov ebx, dword [ebp - 8]
mov esp, ebp
pop ebp
jmp sub.cygwin1.dll_fclose
mov dword [ebp + 8], ebx
mov esi, dword [ebp - 4]
mov ebx, dword [ebp - 8]
mov esp, ebp
pop ebp
jmp 0x4157e8
mov dword [esp], ebx
call sub.cygwin1.dll_fflush
test eax, eax
je 0x415278
call sub.cygwin1.dll___errno
mov eax, dword [eax]
mov dword [esp], eax
call sub.cygwin1.dll_strerror
mov esi, eax
call sub.cygwin1.dll___errno
mov ebx, dword [eax]
call sub.cygwin1.dll___getreent
mov dword [esp + 0xc], esi
mov dword [esp + 4], str.ERR:__d_on_fflush_____s_n
mov dword [esp + 8], ebx
mov eax, dword [eax + 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_fprintf
mov dword [esp], 1
call sub.cygwin1.dll_exit
lea esi, [esi]
lea edi, [edi]
jmp dword [sym.imp.cygwin1.dll_pclose]
Function at 0x415310
Capabilities:
Terminate process

Disassembly:
push ebp
mov ecx, 2
mov ebp, esp
sub esp, 0x28
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 8], esi
mov dword [ebp - 4], edi
mov edi, 0x41d661
mov esi, ebx
repe cmpsb byte [esi], byte es:[edi]
jne 0x415348
mov ecx, dword [ebp + 0x10]
test ecx, ecx
jne 0x4153a0
call sub.cygwin1.dll___getreent
mov esi, dword [eax + 4]
mov eax, 2
jmp 0x415376
movzx ecx, byte [ebx]
cmp cl, 0x26
je 0x4153c0
cmp dword [ebp + 0x10], 1
je 0x415456
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x4153b0
mov eax, 0x41d663
mov dword [esp + 4], eax
mov dword [esp], ebx
call sub.cygwin1.dll__fopen64
mov esi, eax
xor eax, eax
test esi, esi
je 0x41547e
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0x10]
mov dword [edx], esi
mov dword [edx + 4], eax
mov eax, edx
mov dword [edx + 8], ecx
mov ebx, dword [ebp - 0xc]
mov esi, dword [ebp - 8]
mov edi, dword [ebp - 4]
mov esp, ebp
pop ebp
ret 4
call sub.cygwin1.dll___getreent
mov esi, dword [eax + 8]
mov eax, 2
jmp 0x415376
test cl, cl
jne 0x415412
mov eax, 0x41d666
jmp 0x415366
mov edx, dword [sym.imp.cygwin1.dll___ctype_ptr__]
lea esi, [ebx + 1]
movsx eax, byte [ebx + 1]
mov edx, dword [edx]
test byte [edx + eax + 1], 4
je 0x415350
mov edx, dword [ebp + 0x10]
mov eax, 0x41d666
mov dword [ebp - 0x10], 0x41d663
mov dword [esp], esi
test edx, edx
cmovne eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
call sub.cygwin1.dll_atoi
mov edx, dword [ebp - 0x10]
mov dword [esp + 4], edx
mov dword [esp], eax
call sub.cygwin1.dll__fdopen64
mov esi, eax
xor eax, eax
jmp 0x415376
mov dword [esp], ebx
call sub.cygwin1.dll_strlen
cmp byte [ebx + eax - 1], 0x7c
lea edx, [eax - 1]
jne 0x4153b4
mov dword [esp + 4], edx
mov dword [esp], ebx
call sub.cygwin1.dll_strndup
mov dword [esp + 4], 0x41d66b
mov edi, eax
mov dword [esp], eax
call sub.cygwin1.dll_popen
mov dword [esp], edi
mov esi, eax
call sub.cygwin1.dll_free
mov eax, 1
jmp 0x415376
cmp cl, 0x7c
jne 0x415361
lea eax, [ebx + 1]
mov dword [esp + 4], 0x41d669
mov dword [esp], eax
call sub.cygwin1.dll_popen
mov esi, eax
mov eax, 1
jmp 0x415376
call sub.cygwin1.dll___errno
mov eax, dword [eax]
mov dword [esp], eax
call sub.cygwin1.dll_strerror
mov edi, eax
call sub.cygwin1.dll___errno
mov esi, dword [eax]
call sub.cygwin1.dll___getreent
mov ecx, dword [ebp + 0x14]
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ecx
mov dword [esp + 4], str.ERR:__d_opening__s___s______s_n
mov eax, dword [eax + 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_fprintf
mov dword [esp], 1
call sub.cygwin1.dll_exit
lea esi, [esi]
Function at 0x4154d0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
mov dword [ebp - 0xc], ebx
mov dword [ebp - 4], edi
mov edi, dword [ebp + 8]
mov dword [ebp - 8], esi
call sub.cygwin1.dll___errno
mov dword [eax], 0
lea eax, [ebp - 0x10]
mov dword [esp + 8], 0xa
mov dword [esp + 4], eax
mov dword [esp], edi
call sub.cygwin1.dll_strtoul
mov ebx, eax
call sub.cygwin1.dll___errno
mov eax, dword [eax]
test eax, eax
jne 0x415519
mov eax, dword [ebp - 0x10]
cmp byte [eax], 0
jne 0x415533
call sub.cygwin1.dll___errno
mov esi, dword [eax]
test esi, esi
jne 0x415540
mov eax, ebx
mov esi, dword [ebp - 8]
mov ebx, dword [ebp - 0xc]
mov edi, dword [ebp - 4]
mov esp, ebp
pop ebp
ret
call sub.cygwin1.dll___errno
mov dword [eax], 0x16
jmp 0x415519
call sub.cygwin1.dll___errno
mov eax, dword [eax]
mov dword [esp], eax
call sub.cygwin1.dll_strerror
mov ebx, eax
call sub.cygwin1.dll___errno
mov esi, dword [eax]
call sub.cygwin1.dll___getreent
mov edx, dword [ebp + 0xc]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 4], str.ERR:__d_converting__s___s______s_n
mov eax, dword [eax + 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_fprintf
mov dword [esp], 1
call sub.cygwin1.dll_exit
nop