joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10045d820
Capabilities:
Set current directory

Disassembly:
push r14
push r13
push r12
push rdi
push rsi
push rbx
sub rsp, 0x28
mov rsi, qword [sym.bash.exe_the_current_working_directory]
mov ebx, edx
mov rdx, qword [rsi]
mov r13, rcx
test rdx, rdx
je 0x10045d9f0
mov rcx, r13
call sym.bash.exe_make_absolute
mov r12, rax
test ebx, ebx
je 0x10045d9c0
xor edx, edx
mov rcx, rax
call sym.bash.exe_sh_physpath
mov r14, rax
mov rcx, r13
call sub.msys_2.0.dll_strlen
mov rdi, rax
test r14, r14
je 0x10045d887
cmp byte [r14], 0
jne 0x10045d950
mov rcx, r14
call fcn.1004d2c80
mov rax, qword [sym.bash.exe_posixly_correct]
mov eax, dword [rax]
test eax, eax
jne 0x10045d908
mov edi, 1
test ebx, ebx
jne 0x10045d965
mov rcx, r12
call sub.msys_2.0.dll_chdir
test eax, eax
je 0x10045d971
call sub.msys_2.0.dll___errno
mov rcx, r13
mov ebx, dword [rax]
call sub.msys_2.0.dll_chdir
test eax, eax
jne 0x10045d9d8
mov rcx, qword [rsi]
test rcx, rcx
je 0x10045d8d5
call fcn.1004d2c80
lea rcx, [0x1004f43aa]
mov qword [rsi], 0
call sym.bash.exe_get_working_directory
mov rcx, rax
test rax, rax
je 0x10045da50
call fcn.1004d2c80
mov r13d, 1
jmp 0x10045d9e2
test ebx, ebx
je 0x10045da18
mov rcx, r13
call sub.msys_2.0.dll_chdir
test eax, eax
jne 0x10045d9a0
mov rcx, qword [rsi]
test rcx, rcx
je 0x10045d92d
call fcn.1004d2c80
lea rcx, [0x1004f43aa]
mov qword [rsi], 0
call sym.bash.exe_get_working_directory
mov rcx, rax
test rax, rax
je 0x10045d975
call fcn.1004d2c80
jmp 0x10045d97d
mov rcx, r12
xor edi, edi
mov r12, r14
call fcn.1004d2c80
test ebx, ebx
je 0x10045d8a1
mov rcx, r13
call sub.msys_2.0.dll_chdir
test eax, eax
jne 0x10045d9a0
test edi, edi
jne 0x10045d920
mov rcx, r12
call sym.bash.exe_set_working_directory
mov rcx, r12
mov r13d, 1
call fcn.1004d2c80
jmp 0x10045d9ab
call sub.msys_2.0.dll___errno
cmp dword [rax], 2
jne 0x10045da60
nop
mov rcx, r12
xor r13d, r13d
call fcn.1004d2c80
mov eax, r13d
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop r12
pop r13
pop r14
ret
mov edx, 3
mov rcx, rax
call sym.bash.exe_sh_canonpath
mov r14, rax
jmp 0x10045d865
call sub.msys_2.0.dll___errno
xor r13d, r13d
mov dword [rax], ebx
mov rcx, r12
call fcn.1004d2c80
jmp 0x10045d9ab
lea rcx, str.chdir
call sym.bash.exe_get_working_directory
mov rcx, rax
test rax, rax
je 0x10045da09
call fcn.1004d2c80
mov rdx, qword [rsi]
jmp 0x10045d845
call sub.msys_2.0.dll___errno
cmp dword [rax], 0x5b
jne 0x10045d990
cmp edi, 0x1000
jg 0x10045d990
mov rcx, r12
call sub.msys_2.0.dll_chdir
test eax, eax
jne 0x10045d8b1
jmp 0x10045d920
mov rcx, r12
mov r13d, 1
call sym.bash.exe_set_working_directory
jmp 0x10045d9e2
call sub.msys_2.0.dll___errno
cmp dword [rax], 0x5b
je 0x10045d9a0
call sub.msys_2.0.dll___errno
mov dword [rax], 0x14
jmp 0x10045d9a0

Function at 0x100461d80
Capabilities:
Get file attributes

Disassembly:
mov edx, 0xa3
jmp fcn.100461560
Function at 0x100473dd0
Capabilities:
Get file attributes

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xc8
mov rdi, rcx
mov r12, rdx
mov r15d, r8d
call sub.msys_2.0.dll_strlen
mov rsi, rax
mov ebx, eax
test eax, eax
jne 0x100473e90
and r15d, 1
je 0x100473fb8
mov rcx, qword [r12]
test rcx, rcx
je 0x100473fb8
mov rsi, r12
lea rdi, [rsp + 0x40]
jmp 0x100473e36
lea eax, [rbx + 1]
lea rsi, [r12 + rax*8]
mov rbx, rax
mov rcx, qword [rsi]
test rcx, rcx
je 0x100473fb8
mov rdx, rdi
call sub.msys_2.0.dll_stat
test eax, eax
jne 0x100473e20
mov eax, dword [rsp + 0x50]
and eax, 0xf000
cmp eax, 0x4000
jne 0x100473e20
mov r13, qword [rsi]
mov rcx, r13
call sub.msys_2.0.dll_strlen
mov rcx, r13
lea edx, [rax + 2]
mov rbp, rax
call fcn.1004d31e0
test rax, rax
je 0x100474020
mov edx, ebp
mov byte [rax + rdx], 0x2f
lea edx, [rbp + 1]
mov byte [rax + rdx], 0
mov qword [rsi], rax
jmp 0x100473e20
lea eax, [rax - 1]
mov r14, qword [r12]
movzx eax, byte [rdi + rax]
cmp al, 0x2f
mov byte [rsp + 0x33], al
setne bpl
test r14, r14
je 0x10047400e
xor eax, eax
lea edx, [rax + 1]
mov ecx, eax
cmp qword [r12 + rdx*8], 0
mov rax, rdx
jne 0x100473eb0
add ecx, 2
shl rcx, 3
call fcn.1004d2f30
mov r13, rax
test rax, rax
je 0x100474020
mov eax, esi
movzx ebp, bpl
and r15d, 1
xor ebx, ebx
lea rsi, [rax + 3]
mov qword [rsp + 0x38], rax
add rbp, rax
mov qword [rsp + 0x28], rsi
xor esi, esi
mov dword [rsp + 0x34], r15d
jmp 0x100473f1b
lea eax, [rsi + 1]
mov r14, qword [r12 + rax*8]
mov rsi, rax
lea rbx, [rax*8]
test r14, r14
je 0x100473fd8
mov rcx, r14
add rbx, r13
call sub.msys_2.0.dll_strlen
mov rdx, qword [rsp + 0x28]
lea rcx, [rax + rdx]
call fcn.1004d2f30
mov qword [rbx], rax
mov r15, rax
test rax, rax
je 0x10047402e
mov rdx, rdi
mov rcx, rax
call fcn.1004d3420
cmp byte [rsp + 0x33], 0x2f
je 0x100473f5f
mov rax, qword [rsp + 0x38]
mov byte [r15 + rax], 0x2f
lea rcx, [r15 + rbp]
mov rdx, r14
call fcn.1004d3420
mov eax, dword [rsp + 0x34]
test eax, eax
je 0x100473f00
lea rdx, [rsp + 0x40]
mov rcx, r15
call sub.msys_2.0.dll_stat
test eax, eax
jne 0x100473f00
mov eax, dword [rsp + 0x50]
and eax, 0xf000
cmp eax, 0x4000
jne 0x100473f00
mov rbx, qword [rbx]
mov rcx, rbx
call sub.msys_2.0.dll_strlen
mov byte [rbx + rax], 0x2f
mov byte [rbx + rax + 1], 0
jmp 0x100473f00
mov r13, r12
mov rax, r13
add rsp, 0xc8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, qword [r12]
mov qword [r13 + rbx], 0
xor ebx, ebx
test rcx, rcx
je 0x100474004
nop dword [rax]
call fcn.1004d2c80
lea eax, [rbx + 1]
mov rcx, qword [r12 + rax*8]
mov rbx, rax
test rcx, rcx
jne 0x100473ff0
mov rcx, r12
call fcn.1004d2c80
jmp 0x100473fbb
mov ecx, 8
call fcn.1004d2f30
mov r13, rax
test rax, rax
jne 0x100474025
xor r13d, r13d
jmp 0x100473fbb
mov qword [rax], 0
jmp 0x100474004
test esi, esi
je 0x10047404e
lea eax, [rsi - 1]
mov rbx, r13
lea rsi, [r13 + rax*8 + 8]
mov rcx, qword [rbx]
add rbx, 8
call fcn.1004d2c80
cmp rsi, rbx
jne 0x10047403d
mov rcx, r13
call fcn.1004d2c80
jmp 0x100474020
Function at 0x10047ae70
Capabilities:
Get file attributes

Disassembly:
push r14
push r13
push r12
sub rsp, 0x30
movzx eax, byte [rcx]
mov r13, rdx
test al, al
je 0x10047af0f
cmp al, 0x2f
jne 0x10047ae92
cmp byte [rcx + 1], 0x64
je 0x10047aea8
mov rdx, r13
add rsp, 0x30
pop r12
pop r13
pop r14
jmp sub.msys_2.0.dll_stat
mov r8d, 8
lea rdx, str._dev_fd_
mov qword [rsp + 0x28], rcx
call sub.msys_2.0.dll_strncmp
mov rcx, qword [rsp + 0x28]
test eax, eax
jne 0x10047ae92
lea r12, [rcx + 8]
mov rcx, r12
call sub.msys_2.0.dll_strlen
mov rcx, qword [0x100600680]
lea rdx, [rax + 9]
call sym.bash.exe_xrealloc
mov rdx, r12
mov r14, rax
mov qword [0x100600680], rax
movabs rax, 0x2f64662f7665642f
mov qword [r14], rax
lea rcx, [r14 + 8]
call fcn.1004d3420
mov rdx, r13
mov rcx, r14
jmp 0x10047ae95
call sub.msys_2.0.dll___errno
mov dword [rax], 2
mov eax, 0xffffffff
add rsp, 0x30
pop r12
pop r13
pop r14
ret
Function at 0x10047b120
Capabilities:
Connect socket
Resolve dns

Disassembly:
push r15
push r14
push r13
push r12
push rbx
sub rsp, 0x60
mov r14, rcx
call sub.msys_2.0.dll_strlen
lea rcx, [rax + 1]
call sym.bash.exe_xmalloc
mov rdx, r14
mov r13, rax
mov rcx, rax
call fcn.1004d3420
lea rbx, [r13 + 9]
mov edx, 0x2f
mov rcx, rbx
call sub.msys_2.0.dll_strchr
test rax, rax
je 0x10047b2ef
mov byte [rax], 0
lea r15, [rax + 1]
xor eax, eax
cmp byte [r14 + 5], 0x74
setne al
lea r9, [rsp + 0x28]
lea r8, [rsp + 0x30]
mov rdx, r15
mov qword [rsp + 0x38], 0
add eax, 1
mov rcx, rbx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x58], 0
mov dword [rsp + 0x38], eax
call sub.msys_2.0.dll_getaddrinfo
test eax, eax
jne 0x10047b2bb
mov rbx, qword [rsp + 0x28]
test rbx, rbx
je 0x10047b220
nop dword [rax + rax]
mov edx, dword [rbx + 8]
mov ecx, dword [rbx + 4]
mov r8d, dword [rbx + 0xc]
call sub.msys_2.0.dll_socket
mov r12d, eax
test eax, eax
jns 0x10047b240
mov rbx, qword [rbx + 0x28]
test rbx, rbx
jne 0x10047b1e0
lea rcx, str.socket
mov r12d, 0xffffffff
call sym.bash.exe_sys_error
mov rcx, qword [rsp + 0x28]
call sub.msys_2.0.dll_freeaddrinfo
nop dword [rax + rax]
mov rcx, r13
call fcn.1004d2c80
mov eax, r12d
add rsp, 0x60
pop rbx
pop r12
pop r13
pop r14
pop r15
ret
mov rdx, qword [rbx + 0x20]
mov r8d, dword [rbx + 0x10]
mov ecx, eax
call sub.msys_2.0.dll_connect
test eax, eax
jns 0x10047b278
cmp qword [rbx + 0x28], 0
je 0x10047b284
mov ecx, r12d
call fcn.1004d2aa0
mov rbx, qword [rbx + 0x28]
test rbx, rbx
jne 0x10047b1e0
jmp 0x10047b220
mov rcx, qword [rsp + 0x28]
call sub.msys_2.0.dll_freeaddrinfo
jmp 0x10047b220
call sub.msys_2.0.dll___errno
lea rcx, str.connect
mov ebx, dword [rax]
call sym.bash.exe_sys_error
mov ecx, r12d
mov r12d, 0xffffffff
call fcn.1004d2aa0
mov rcx, qword [rsp + 0x28]
call sub.msys_2.0.dll_freeaddrinfo
call sub.msys_2.0.dll___errno
mov dword [rax], ebx
jmp 0x10047b220
cmp eax, 9
je 0x10047b319
mov ecx, eax
call sub.msys_2.0.dll_gai_strerror
mov rdx, rbx
lea rcx, str._s:__s
mov r8, rax
call sym.bash.exe_internal_error
call sub.msys_2.0.dll___errno
mov r12d, 0xffffffff
mov dword [rax], 0x16
jmp 0x10047b220
lea rcx, str._s:_bad_network_path_specification
mov r12d, 0xffffffff
call sym.bash.exe_libintl_gettext
mov rdx, r14
mov rcx, rax
call sym.bash.exe_internal_error
mov rcx, r13
call fcn.1004d2c80
jmp 0x10047b228
mov ecx, 9
call sub.msys_2.0.dll_gai_strerror
mov rdx, r15
lea rcx, str._s:__s
mov r8, rax
call sym.bash.exe_internal_error
jmp 0x10047b2d9
Function at 0x10047f5e0
Capabilities:
Get socket status

Disassembly:
sub rsp, 0x48
xor r9d, r9d
xor r8d, r8d
mov eax, ecx
xor ecx, ecx
mov qword [rsp + 0x30], rax
mov eax, edx
xor edx, edx
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
call sub.msys_2.0.dll_select
add rsp, 0x48
ret

Function at 0x10047fde0
Capabilities:
Get socket status

Disassembly:
sub rsp, 0x58
mov eax, 0xffffffff
test ecx, ecx
jns 0x10047fdf8
add rsp, 0x58
ret
mov eax, ecx
mov edx, 1
lea r9, [rsp + 0x38]
xor r8d, r8d
mov qword [rsp + 0x40], 0
sar eax, 6
shl rdx, cl
add ecx, 1
mov qword [rsp + 0x48], 0
cdqe
mov qword [rsp + rax*8 + 0x30], rdx
mov qword [rsp + rax*8 + 0x38], rdx
lea rax, [rsp + 0x40]
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x20], rax
call sub.msys_2.0.dll_select
test eax, eax
setg al
movzx eax, al
add rsp, 0x58
ret

Function at 0x100488580
Capabilities:
Write file on windows

Disassembly:
push rbp
push rsi
push rbx
mov rbp, rsp
sub rsp, 0x20
mov ecx, dword [0x100602c80]
test ecx, ecx
jne 0x1004885a0
add rsp, 0x20
pop rbx
pop rsi
pop rbp
ret
call sym.bash.exe__rl_block_sigint
mov rax, qword [sym.bash.exe_rl_instream]
mov rcx, qword [rax]
test rcx, rcx
je 0x100488698
call sub.msys_2.0.dll_fileno
mov rsi, qword [sym.bash.exe_rl_outstream]
mov ebx, eax
test byte [0x100602c80], 2
jne 0x100488648
mov rax, qword [sym.bash.exe__rl_enable_keypad]
mov eax, dword [rax]
test eax, eax
jne 0x100488688
mov rcx, qword [rsi]
lea rsi, [0x100602c40]
call fcn.1004d2bc0
jmp 0x10048860d
call sub.msys_2.0.dll___errno
cmp dword [rax], 4
jne 0x100488635
call sub.msys_2.0.dll___errno
mov dword [rax], 0
mov r8, rsi
mov edx, 3
mov ecx, ebx
call sub.msys_2.0.dll_tcsetattr
test eax, eax
js 0x1004885f8
mov rax, qword [sym.bash.exe_rl_readline_state]
mov dword [0x100602c80], 0
and qword [rax], 0xfffffffffffffffb
add rsp, 0x20
pop rbx
pop rsi
pop rbp
jmp sym.bash.exe__rl_release_sigint
mov r9, qword [rsi]
mov edx, 1
mov r8d, 9
lea rcx, str.e__2004l_r
call sub.msys_2.0.dll_fwrite
mov rax, qword [sym.bash.exe__rl_eof_found]
mov edx, dword [rax]
test edx, edx
je 0x1004885cf
mov rdx, qword [rsi]
mov ecx, 0xa
call fcn.1004d2c50
jmp 0x1004885cf
xor ecx, ecx
call sym.bash.exe__rl_control_keypad
jmp 0x1004885e0
call sub.msys_2.0.dll___getreent
mov rcx, qword [rax + 8]
jmp 0x1004885b8
Function at 0x100488e90
Capabilities:
Get file attributes

Disassembly:
push rbp
push r13
push r12
mov rbp, rsp
sub rsp, 0xb0
cmp byte [rcx], 0x2f
mov r12, rcx
je 0x100488f90
cmp qword [sym.bash.exe_rl_filename_stat_hook], 0
mov rcx, r12
mov qword [rbp - 0x88], 0
je 0x100488ef7
call sub.msys_2.0.dll_strlen
lea rcx, [rax + 1]
call sym.bash.exe_xmalloc
mov rdx, r12
mov rcx, rax
call fcn.1004d3420
lea rcx, [rbp - 0x88]
mov qword [rbp - 0x88], rax
call qword [sym.bash.exe_rl_filename_stat_hook]
mov rcx, qword [rbp - 0x88]
lea rdx, [rbp - 0x80]
call sub.msys_2.0.dll_lstat
cmp eax, 0xffffffff
je 0x100488fc0
mov eax, dword [rbp - 0x70]
mov r13d, 0x2f
and eax, 0xf000
cmp eax, 0x4000
je 0x100488f70
mov r13d, 0x25
cmp eax, 0x2000
je 0x100488f70
mov r13d, 0x23
cmp eax, 0x6000
je 0x100488f70
mov r13d, 0x40
cmp eax, 0xa000
je 0x100488f70
mov r13d, 0x3d
cmp eax, 0xc000
je 0x100488f70
mov r13d, 0x7c
cmp eax, 0x1000
je 0x100488f70
cmp eax, 0x8000
je 0x100488fe0
xor r13d, r13d
nop dword [rax]
mov rcx, qword [rbp - 0x88]
call sym.bash.exe_xfree
mov eax, r13d
add rsp, 0xb0
pop r12
pop r13
pop rbp
ret
cmp byte [rcx + 1], 0x2f
jne 0x100488eab
lea rcx, [rcx + 2]
mov edx, 0x2f
call sub.msys_2.0.dll_strchr
test rax, rax
jne 0x100488eab
mov r13d, 0x2f
jmp 0x100488f7c
mov rcx, qword [rbp - 0x88]
xor r13d, r13d
call sym.bash.exe_xfree
mov eax, r13d
add rsp, 0xb0
pop r12
pop r13
pop rbp
ret
mov edx, 1
mov rcx, r12
call sub.msys_2.0.dll_access
test eax, eax
jne 0x100488f66
mov r13d, 0x2a
jmp 0x100488f70
Function at 0x10048a9a0
Capabilities:
Write file on windows

Disassembly:
push rbp
push rsi
push rbx
mov rbp, rsp
sub rsp, 0x20
mov rsi, qword [sym.bash.exe_rl_outstream]
mov r8d, 8
mov edx, 1
mov r9, qword [rsi]
mov ebx, ecx
lea rcx, str.__More__
call sub.msys_2.0.dll_fwrite
mov rcx, qword [rsi]
call fcn.1004d2bc0
mov rax, qword [sym.bash.exe_rl_readline_state]
mov rax, qword [rax]
test eax, 0x80000
jne 0x10048aa18
mov ecx, 1
call fcn.10048a1b0
mov esi, eax
call sym.bash.exe__rl_erase_entire_line
test esi, esi
je 0x10048aa30
lea ecx, [rbx - 1]
cmp esi, 2
mov eax, 0
cmove eax, ecx
add rsp, 0x20
pop rbx
pop rsi
pop rbp
ret
call sym.bash.exe__rl_erase_entire_line
xor eax, eax
add rsp, 0x20
pop rbx
pop rsi
pop rbp
ret
mov eax, 0xffffffff
jmp 0x10048aa09
Function at 0x10048afc0
Capabilities:
Get file attributes

Disassembly:
push rbp
push r12
push rbx
sub rsp, 0x130
lea rbp, [rsp + 0x80]
mov ebx, r9d
test r8d, r8d
je 0x10048b018
mov rax, qword [sym.bash.exe_rl_point]
movsxd rax, dword [rax]
test eax, eax
je 0x10048b060
mov r11d, dword [sym.bash.exe_rl_completion_suppress_quote]
test r11d, r11d
jne 0x10048b060
mov r9, qword [sym.bash.exe_rl_line_buffer]
mov r9, qword [r9]
movsx eax, byte [r9 + rax - 1]
cmp r8d, eax
je 0x10048b060
mov byte [rbp - 0x5c], r8b
mov r8d, 1
nop dword [rax]
test edx, edx
je 0x10048b067
movsxd rax, r8d
add r8d, 1
mov byte [rbp + rax - 0x5c], dl
mov r9d, dword [sym.bash.exe_rl_filename_completion_desired]
movsxd r8, r8d
mov byte [rbp + r8 - 0x5c], 0
test r9d, r9d
jne 0x10048b090
mov rax, qword [sym.bash.exe_rl_end]
mov rdx, qword [sym.bash.exe_rl_point]
mov eax, dword [rax]
cmp dword [rdx], eax
je 0x10048b150
add rsp, 0x130
pop rbx
pop r12
pop rbp
ret
xor r8d, r8d
test edx, edx
jne 0x10048b01c
mov r10d, dword [sym.bash.exe_rl_completion_suppress_append]
test r10d, r10d
jne 0x10048b027
mov eax, dword [sym.bash.exe_rl_completion_append_character]
test eax, eax
je 0x10048b027
movsxd rdx, r8d
add r8d, 1
mov byte [rbp + rdx - 0x5c], al
jmp 0x10048b027
call sym.bash.exe_tilde_expand
cmp qword [sym.bash.exe_rl_filename_stat_hook], 0
mov r12, rax
je 0x10048b0d8
mov rcx, rax
call sub.msys_2.0.dll_strlen
lea rcx, [rax + 1]
call sym.bash.exe_xmalloc
mov rdx, r12
mov rcx, rax
call fcn.1004d3420
lea rcx, [rbp - 0x58]
mov qword [rbp - 0x58], rax
call qword [sym.bash.exe_rl_filename_stat_hook]
mov rcx, r12
call sym.bash.exe_xfree
mov r12, qword [rbp - 0x58]
lea rdx, [rbp - 0x50]
mov rcx, r12
test ebx, ebx
je 0x10048b0ef
mov r8d, dword [sym.bash.exe_rl_completion_mark_symlink_dirs]
test r8d, r8d
je 0x10048b140
call sub.msys_2.0.dll_stat
test eax, eax
jne 0x10048b112
mov eax, dword [rbp - 0x40]
and eax, 0xf000
cmp eax, 0x4000
je 0x10048b170
cmp eax, 0xa000
je 0x10048b1d0
mov rax, qword [sym.bash.exe_rl_end]
mov rdx, qword [sym.bash.exe_rl_point]
mov eax, dword [rax]
cmp dword [rdx], eax
je 0x10048b1c0
mov rcx, r12
call sym.bash.exe_xfree
nop
add rsp, 0x130
pop rbx
pop r12
pop rbp
ret
call sub.msys_2.0.dll_lstat
jmp 0x10048b0f4
lea rcx, [rbp - 0x5c]
call sym.bash.exe_rl_insert_text
nop
add rsp, 0x130
pop rbx
pop r12
pop rbp
ret
mov eax, dword [sym.bash.exe__rl_complete_mark_directories]
test eax, eax
je 0x10048b12a
mov rdx, qword [sym.bash.exe_rl_line_buffer]
mov rax, qword [sym.bash.exe_rl_point]
mov r8, qword [rdx]
movsxd rcx, dword [rax]
movzx edx, byte [r8 + rcx]
test ecx, ecx
je 0x10048b200
test dl, dl
jne 0x10048b200
cmp byte [r8 + rcx - 1], 0x2f
je 0x10048b12a
lea rcx, [0x1004f9afb]
call sym.bash.exe_rl_insert_text
jmp 0x10048b12a
lea rcx, [rbp - 0x5c]
call sym.bash.exe_rl_insert_text
jmp 0x10048b12a
lea rdx, [rbp + 0x30]
mov rcx, r12
call sub.msys_2.0.dll_stat
test eax, eax
jne 0x10048b112
mov eax, dword [rbp + 0x40]
and eax, 0xf000
cmp eax, 0x4000
jne 0x10048b112
jmp 0x10048b12a
cmp dl, 0x2f
je 0x10048b12a
jmp 0x10048b1a7
Function at 0x10048d8d0
Capabilities:
Write file on windows

Disassembly:
push rbp
push r12
push rsi
push rbx
sub rsp, 0x38
lea rbp, [rsp + 0x80]
lea rax, [rbp - 0x18]
mov qword [rbp - 0x18], rdx
mov r12, rcx
mov qword [rbp - 0x10], r8
mov qword [rbp - 8], r9
mov qword [rbp - 0x58], rax
call sub.msys_2.0.dll___getreent
mov r8d, 0xa
mov edx, 1
lea rcx, [0x1004f9b80]
mov r9, qword [rax + 0x18]
call sub.msys_2.0.dll_fwrite
mov eax, dword [0x100602eb8]
test eax, eax
jne 0x10048d970
mov rbx, qword [rbp - 0x58]
call sub.msys_2.0.dll___getreent
mov rdx, r12
mov rcx, qword [rax + 0x18]
mov r8, rbx
call sub.msys_2.0.dll_vfprintf
call sub.msys_2.0.dll___getreent
mov ecx, 0xa
mov rdx, qword [rax + 0x18]
call fcn.1004d2c50
call sub.msys_2.0.dll___getreent
mov rcx, qword [rax + 0x18]
call fcn.1004d2bc0
nop
add rsp, 0x38
pop rbx
pop rsi
pop r12
pop rbp
ret
mov esi, dword [0x100602ea0]
mov rbx, qword [0x100602ea8]
call sub.msys_2.0.dll___getreent
lea rdx, str._s:_line__d:
mov rcx, qword [rax + 0x18]
mov r9d, esi
mov r8, rbx
call sub.msys_2.0.dll_fprintf
jmp 0x10048d922

Function at 0x1004911c0
Capabilities:
Get file attributes

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x20
test rcx, rcx
je 0x100491200
cmp byte [rcx], 0
jne 0x1004911eb
lea rcx, str._.inputrc
xor edx, edx
call fcn.100490f30
lea rcx, str._etc_inputrc
test eax, eax
je 0x100491228
xor edx, edx
add rsp, 0x20
pop rbp
jmp fcn.100490f30
mov rcx, qword [0x100602eb0]
test rcx, rcx
jne 0x1004911cd
lea rcx, str.INPUTRC
call sym.bash.exe_sh_get_env_value
mov rcx, rax
test rax, rax
je 0x1004911d2
jmp 0x1004911cd
xor eax, eax
add rsp, 0x20
pop rbp
ret

Function at 0x100491d40
Capabilities:
Write file on windows

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x20
mov rax, qword [sym.bash.exe_rl_dispatching]
mov eax, dword [rax]
test eax, eax
jne 0x100491d70
mov rax, qword [sym.bash.exe_rl_explicit_arg]
mov ecx, dword [rax]
call sym.bash.exe_rl_function_dumper
call sym.bash.exe_rl_on_new_line
xor eax, eax
add rsp, 0x20
pop rbp
ret
mov rax, qword [sym.bash.exe_rl_outstream]
mov r8d, 2
mov edx, 1
lea rcx, [0x1004fa175]
mov r9, qword [rax]
call sub.msys_2.0.dll_fwrite
jmp 0x100491d55

Function at 0x100491dc0
Capabilities:
Write file on windows

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x20
mov rax, qword [sym.bash.exe_rl_dispatching]
mov eax, dword [rax]
test eax, eax
jne 0x100491e00
mov rax, qword [sym.bash.exe__rl_keymap]
xor r8d, r8d
mov rdx, qword [rax]
mov rax, qword [sym.bash.exe_rl_explicit_arg]
mov ecx, dword [rax]
call fcn.10048f390
call sym.bash.exe_rl_on_new_line
xor eax, eax
add rsp, 0x20
pop rbp
ret
mov rax, qword [sym.bash.exe_rl_outstream]
mov r8d, 2
mov edx, 1
lea rcx, [0x1004fa175]
mov r9, qword [rax]
call sub.msys_2.0.dll_fwrite
jmp 0x100491dd5
Function at 0x100491fa0
Capabilities:
Write file on windows

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x20
mov rax, qword [sym.bash.exe_rl_dispatching]
mov eax, dword [rax]
test eax, eax
jne 0x100491fd0
mov rax, qword [sym.bash.exe_rl_explicit_arg]
mov ecx, dword [rax]
call sym.bash.exe_rl_variable_dumper
call sym.bash.exe_rl_on_new_line
xor eax, eax
add rsp, 0x20
pop rbp
ret
mov rax, qword [sym.bash.exe_rl_outstream]
mov r8d, 2
mov edx, 1
lea rcx, [0x1004fa175]
mov r9, qword [rax]
call sub.msys_2.0.dll_fwrite
jmp 0x100491fb5

Function at 0x100494d90
Capabilities:
Write file on windows

Disassembly:
push rbp
push r13
push r12
push rsi
push rbx
mov rbp, rsp
sub rsp, 0x20
lea eax, [rcx - 0x80]
mov r12d, ecx
cmp eax, 0x7f
ja 0x100494de8
mov rax, qword [sym.bash.exe__rl_output_meta_chars]
mov rbx, qword [sym.bash.exe_rl_outstream]
mov r13d, 1
mov eax, dword [rax]
mov rdx, qword [rbx]
test eax, eax
je 0x100494e10
mov ecx, r12d
call sub.msys_2.0.dll_putc
mov rcx, qword [rbx]
call fcn.1004d2bc0
mov eax, r13d
add rsp, 0x20
pop rbx
pop rsi
pop r12
pop r13
pop rbp
ret
cmp ecx, 0x1f
jg 0x100494e48
test cl, 0x80
je 0x100494e90
mov rbx, qword [sym.bash.exe_rl_outstream]
mov r13d, 1
mov rdx, qword [rbx]
jmp 0x100494dc6
mov r9, rdx
mov r8d, 2
mov edx, 1
and r12b, 0x7f
lea rcx, [0x1004faae0]
mov r13d, 3
call sub.msys_2.0.dll_fwrite
cmp r12d, 0x1f
jg 0x100494e55
cmp r12d, 9
jne 0x100494ea0
mov rdx, qword [rbx]
jmp 0x100494dc6
mov rbx, qword [sym.bash.exe_rl_outstream]
mov r13d, 1
mov rdx, qword [rbx]
cmp r12d, 0x7f
jne 0x100494dc6
mov r9, rdx
mov r8d, 2
mov edx, 1
add r13d, 2
lea rcx, [0x1004faae3]
mov r12d, 0x3f
call sub.msys_2.0.dll_fwrite
mov rdx, qword [rbx]
jmp 0x100494dc6
mov rbx, qword [sym.bash.exe_rl_outstream]
mov r13d, 1
jmp 0x100494e3a
mov r9, qword [rbx]
mov esi, r12d
mov edx, 1
add r13d, 2
mov r8d, 2
lea rcx, [0x1004faae3]
or esi, 0x40
call sub.msys_2.0.dll_fwrite
call sub.msys_2.0.dll___locale_ctype_ptr
movzx edx, sil
movzx eax, byte [rdx + rax + 1]
and eax, 3
cmp al, 2
je 0x100494ee8
mov rdx, qword [rbx]
or r12d, 0x40
jmp 0x100494dc6
call sub.msys_2.0.dll___locale_ctype_ptr
movzx ecx, sil
call fcn.1004d35f0
mov rdx, qword [rbx]
mov r12d, eax
jmp 0x100494dc6

Function at 0x10049b4d0
Capabilities:
Write file on windows

Disassembly:
push rbp
push r12
push rbx
mov rbp, rsp
sub rsp, 0x30
lea rax, [rbp + 0x28]
mov r12, rcx
mov qword [rbp + 0x28], rdx
mov qword [rbp + 0x30], r8
mov qword [rbp + 0x38], r9
mov qword [rbp - 8], rax
call sub.msys_2.0.dll___getreent
mov r8d, 0xa
mov edx, 1
lea rcx, str.readline:
mov r9, qword [rax + 0x18]
call sub.msys_2.0.dll_fwrite
mov rbx, qword [rbp - 8]
call sub.msys_2.0.dll___getreent
mov rdx, r12
mov rcx, qword [rax + 0x18]
mov r8, rbx
call sub.msys_2.0.dll_vfprintf
call sub.msys_2.0.dll___getreent
mov ecx, 0xa
mov rdx, qword [rax + 0x18]
call fcn.1004d2c50
call sub.msys_2.0.dll___getreent
mov rcx, qword [rax + 0x18]
call fcn.1004d2bc0
call sym.bash.exe_rl_forced_update_display
nop
add rsp, 0x30
pop rbx
pop r12
pop rbp
ret