joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140056b00
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov rbx, rcx
call fcn.140056d50
mov rcx, qword [rbx + 0x40]
lea rdx, str.OBJECT
call fcn.14007da10
mov rcx, qword [rbx + 0x40]
lea rdx, [0x14018a67c]
xor esi, esi
mov dword [rbx + 0x304], esi
call fcn.14007da10
mov eax, dword [rbx + 0x300]
cmp dword [rbx + 0x304], esi
jne 0x140056b7c
mov edi, esi
test eax, eax
jle 0x140056b7c
nop dword [rax]
nop word [rax + rax]
mov rcx, qword [rbx + 0x40]
lea rdx, [0x14018a5c4]
call fcn.14007da10
mov eax, dword [rbx + 0x300]
inc edi
cmp edi, eax
jl 0x140056b60
mov rcx, qword [rbx + 0x40]
lea rdx, [0x14018a688]
add eax, 2
mov dword [rbx + 0x304], esi
mov dword [rbx + 0x300], eax
call fcn.14007da10
mov eax, dword [rbx + 0x300]
add eax, 0xfffffffe
mov dword [rbx + 0x300], eax
cmp dword [rbx + 0x304], esi
jne 0x140056bda
mov edi, esi
test eax, eax
jle 0x140056bda
nop dword [rax + rax]
mov rcx, qword [rbx + 0x40]
lea rdx, [0x14018a5c4]
call fcn.14007da10
inc edi
cmp edi, dword [rbx + 0x300]
jl 0x140056bc0
mov rcx, qword [rbx + 0x40]
lea rdx, [0x14018a68c]
mov dword [rbx + 0x304], esi
call fcn.14007da10
mov eax, dword [rbx + 0x300]
cmp dword [rbx + 0x304], esi
jne 0x140056c2c
mov edi, esi
test eax, eax
jle 0x140056c2c
nop dword [rax]
nop dword [rax + rax]
mov rcx, qword [rbx + 0x40]
lea rdx, [0x14018a5c4]
call fcn.14007da10
mov eax, dword [rbx + 0x300]
inc edi
cmp edi, eax
jl 0x140056c10
mov rcx, qword [rbx + 0x40]
lea rdx, [0x14018a680]
add eax, 2
mov dword [rbx + 0x304], esi
mov dword [rbx + 0x300], eax
call fcn.14007da10
mov edi, esi
cmp dword [rbx + 0x48], esi
jle 0x140056c67
mov edx, edi
mov rcx, rbx
call fcn.140055150
test eax, eax
jne 0x140056ccf
inc edi
cmp edi, dword [rbx + 0x48]
jl 0x140056c52
mov eax, dword [rbx + 0x300]
add eax, 0xfffffffe
mov dword [rbx + 0x300], eax
cmp dword [rbx + 0x304], esi
jne 0x140056caa
mov edi, esi
test eax, eax
jle 0x140056caa
nop dword [rax]
nop dword [rax + rax]
mov rcx, qword [rbx + 0x40]
lea rdx, [0x14018a5c4]
call fcn.14007da10
inc edi
cmp edi, dword [rbx + 0x300]
jl 0x140056c90
mov rcx, qword [rbx + 0x40]
lea rdx, [0x14018a684]
mov dword [rbx + 0x304], esi
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp fcn.14007da10
mov rbx, qword [rsp + 0x30]
mov eax, 0xffffffff
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
Function at 0x140064350
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov rdi, rdx
mov rsi, rcx
test rcx, rcx
jne 0x140064383
lea edx, [rcx + 1]
mov ecx, 0xbbf
lea r8, [0x14018c420]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp fcn.140001480
movsxd rax, dword [0x1401bb164]
imul rcx, rax, 0x38
mov rax, qword [0x140175020]
test byte [rcx + rax + 0x18], 4
je 0x1400643d4
mov r8, qword [rcx + rax]
lea rcx, str._s_MONITOR:_s:
mov rdx, qword [section..data]
call fcn.140002310
test rdi, rdi
lea rax, str.stdout
mov r8, rdi
lea rdx, [rsi + 0x29]
cmove r8, rax
lea rcx, str.Appending_added_registry_values_of___s__to_file___s__n
call fcn.140001fb0
mov qword [rsp + 0x30], rbx
test rdi, rdi
jne 0x14006445c
lea ecx, [rdi + 1]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rbx, rax
mov rdx, rbx
mov rcx, rsi
call fcn.140064a10
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
cmp rbx, rax
je 0x14006440e
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
movsxd rax, dword [0x1401bb164]
imul rdx, rax, 0x38
mov rax, qword [0x140175020]
test byte [rdx + rax + 0x18], 4
je 0x14006444a
mov r8, qword [rdx + rax]
lea rcx, str._s_MONITOR:_s:
mov rdx, qword [section..data]
call fcn.140002310
lea rcx, str.Done_appending_n
call fcn.140001fb0
mov rbx, qword [rsp + 0x30]
xor eax, eax
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
lea rdx, [0x14018c314]
mov rcx, rdi
call fcn.14001ccc0
mov rbx, rax
test rax, rax
jne 0x1400643ea
mov r9, rdi
lea r8, str.Failed_to_open_file___s__for_appending._n
lea edx, [rax + 1]
mov ecx, 0xbc0
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp fcn.140001480

Function at 0x1400644e0
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x28
test rcx, rcx
je 0x140064537
cmp qword [rcx + 0x18], rcx
jne 0x140064537
call fcn.1400a1130
movsxd rax, dword [0x1401bb164]
imul rcx, rax, 0x38
mov rax, qword [0x140175020]
test byte [rcx + rax + 0x18], 0x20
je 0x140064530
mov r8, qword [rcx + rax]
lea rcx, str._s_MONITOR:_s:
mov rdx, qword [section..data]
call fcn.140002310
lea rcx, str.dregClose___finished_n
call fcn.140001fb0
xor eax, eax
add rsp, 0x28
ret
lea r8, [0x14018c2f0]
mov edx, 1
mov ecx, 0xbba
add rsp, 0x28
jmp fcn.140001480
Function at 0x1400739f0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
cmp qword [rdx + 0x18], 0
mov rdi, rdx
mov rbx, rcx
jne 0x140073a69
cmp byte [rcx + 0x50], 0
je 0x140073a34
cmp qword [rcx + 0x30], 0
je 0x140073a34
lea r8, str.Internal_dglFaceAddLoop:_Second_default_loop_added_n
mov edx, 1
mov ecx, 0x2342
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp fcn.140001480
mov rax, qword [rcx + 0x20]
test rax, rax
je 0x140073a6d
test byte [rax + 0x38], 2
je 0x140073a6d
cmp byte [rax + 0x3c], 5
jne 0x140073a6d
lea r8, str.Internal_dglFaceAddLoop:_Cannot_use_Default_MS_trim_when_calculating_info_n
mov edx, 1
mov ecx, 0x2343
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp fcn.140001480
mov byte [rcx + 0x50], 0
mov rcx, rdi
call fcn.140073970
mov rcx, qword [rbx + 0x30]
test rcx, rcx
jne 0x140073a84
mov qword [rbx + 0x30], rdi
jmp 0x140073aa0
mov rax, qword [rcx + 8]
test rax, rax
je 0x140073a9c
nop dword [rax]
mov rcx, rax
mov rax, qword [rax + 8]
test rax, rax
jne 0x140073a90
mov qword [rcx + 8], rdi
mov qword [rdi + 0x10], rbx
mov rbx, qword [rsp + 0x30]
mov qword [rdi + 8], 0
add rsp, 0x20
pop rdi
ret
Function at 0x1400792b0
Capabilities:
Query environment variable

Disassembly:
sub rsp, 0x38
cmp dword [0x1401bb004], 0
jne 0x14007932f
mov qword [rsp + 0x30], rbx
call fcn.1400b5f10
call fcn.1400a1ff0
call fcn.1400a1260
call fcn.1400a0c50
lea rcx, [0x1401a09a0]
call fcn.140001c50
xor ebx, ebx
mov dword [0x1401bb004], eax
xor r9d, r9d
mov qword [rsp + 0x20], rbx
lea r8, [0x1401a09a8]
mov ecx, eax
lea rdx, str.Analytical_Geometry_Library
call fcn.140001f70
lea rcx, str.dgl_USE_PSLIST
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x140079324
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov ebx, eax
mov dword [0x1401bb178], ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x38
ret
Function at 0x14007d370
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov byte [rsp + 0x10], dl
push rdi
sub rsp, 0x20
inc dword [rcx + 0x48]
mov rdi, rcx
test byte [rcx + 8], 0x40
mov ebx, 1
je 0x14007d3a2
mov rcx, qword [rcx + 0x30]
lea rdx, [rsp + 0x38]
mov r8d, ebx
call fcn.1400f7a40
jmp 0x14007d3b7
mov r9, qword [rcx + 0x20]
mov r8, rbx
lea rcx, [rsp + 0x38]
mov rdx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
sub ebx, eax
test ebx, ebx
je 0x14007d3d0
sub dword [rdi + 0x48], ebx
mov eax, 0xffffffff
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov rbx, qword [rsp + 0x30]
xor eax, eax
add rsp, 0x20
pop rdi
ret

Function at 0x14007d3e0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
movss dword [rsp + 0x10], xmm1
push rdi
sub rsp, 0x20
mov rdi, rcx
mov ebx, 4
lea rcx, [rsp + 0x38]
test dword [rdi + 8], 0x20000
je 0x14007d45f
cmp dword [0x1401bb020], ebx
mov rcx, qword [0x1401bb018]
jge 0x14007d440
test rcx, rcx
je 0x14007d420
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, rbx
mov dword [0x1401bb020], ebx
call fcn.140001bb0
mov rcx, rax
mov qword [0x1401bb018], rax
nop dword [rax + rax]
movzx eax, byte [rsp + 0x38]
mov byte [rcx + 3], al
movzx eax, byte [rsp + 0x39]
mov byte [rcx + 2], al
movzx eax, byte [rsp + 0x3a]
mov byte [rcx + 1], al
movzx eax, byte [rsp + 0x3b]
mov byte [rcx], al
add dword [rdi + 0x48], ebx
test byte [rdi + 8], 0x40
je 0x14007d479
mov rdx, rcx
mov r8d, ebx
mov rcx, qword [rdi + 0x30]
call fcn.1400f7a40
jmp 0x14007d48b
mov r9, qword [rdi + 0x20]
mov r8, rbx
mov edx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
sub ebx, eax
test ebx, ebx
je 0x14007d4a4
sub dword [rdi + 0x48], ebx
mov eax, 0xffffffff
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov rbx, qword [rsp + 0x30]
xor eax, eax
add rsp, 0x20
pop rdi
ret

Function at 0x14007d4c0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov dword [rsp + 0x10], edx
push rdi
sub rsp, 0x20
mov rdi, rcx
mov ebx, 4
lea rcx, [rsp + 0x38]
test dword [rdi + 8], 0x20000
je 0x14007d53a
cmp dword [0x1401bb020], ebx
mov rcx, qword [0x1401bb018]
jge 0x14007d520
test rcx, rcx
je 0x14007d4fe
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, rbx
mov dword [0x1401bb020], ebx
call fcn.140001bb0
mov edx, dword [rsp + 0x38]
mov rcx, rax
mov qword [0x1401bb018], rax
nop word [rax + rax]
mov byte [rcx + 3], dl
movzx eax, byte [rsp + 0x39]
mov byte [rcx + 2], al
movzx eax, byte [rsp + 0x3a]
mov byte [rcx + 1], al
movzx eax, byte [rsp + 0x3b]
mov byte [rcx], al
add dword [rdi + 0x48], ebx
test byte [rdi + 8], 0x40
je 0x14007d554
mov rdx, rcx
mov r8d, ebx
mov rcx, qword [rdi + 0x30]
call fcn.1400f7a40
jmp 0x14007d566
mov r9, qword [rdi + 0x20]
mov r8, rbx
mov edx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
sub ebx, eax
test ebx, ebx
je 0x14007d57f
sub dword [rdi + 0x48], ebx
mov eax, 0xffffffff
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov rbx, qword [rsp + 0x30]
xor eax, eax
add rsp, 0x20
pop rdi
ret
Function at 0x14007da10
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov r10, rdx
mov rdi, rcx
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rdx + rbx], 0
jne 0x14007da27
test ebx, ebx
js 0x14007da6b
je 0x14007da7b
add dword [rcx + 0x48], ebx
test byte [rcx + 8], 0x40
je 0x14007da4d
mov rcx, qword [rcx + 0x30]
mov r8d, ebx
call fcn.1400f7a40
jmp 0x14007da62
mov r9, qword [rcx + 0x20]
mov edx, 1
mov rcx, r10
movsxd r8, ebx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
sub ebx, eax
test ebx, ebx
je 0x14007da7b
sub dword [rdi + 0x48], ebx
mov eax, 0xffffffff
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov rbx, qword [rsp + 0x30]
xor eax, eax
add rsp, 0x20
pop rdi
ret

Function at 0x14007da90
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x20], r9
push rbx
push rbp
push rsi
push rdi
sub rsp, 0x38
mov rbx, qword [rcx + 0xb8]
mov rsi, rdx
mov rdi, rcx
test rbx, rbx
jne 0x14007dad2
mov ecx, 0x2000
call fcn.140001bb0
mov rsi, qword [rsp + 0x68]
mov rbx, rax
mov qword [rdi + 0xb8], rax
lea rbp, [rsp + 0x70]
call fcn.140001240
mov r9, rsi
mov qword [rsp + 0x28], rbp
mov rsi, 0xffffffffffffffff
mov qword [rsp + 0x20], 0
mov r8, rsi
mov rdx, rbx
mov rcx, qword [rax]
or rcx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___stdio_common_vsprintf]
mov rcx, qword [rdi + 0xb8]
test eax, eax
mov ebx, eax
cmovs ebx, esi
test ebx, ebx
js 0x14007db50
je 0x14007db5b
add dword [rdi + 0x48], ebx
test byte [rdi + 8], 0x40
je 0x14007db35
mov rdx, rcx
mov r8d, ebx
mov rcx, qword [rdi + 0x30]
call fcn.1400f7a40
jmp 0x14007db47
mov r9, qword [rdi + 0x20]
mov edx, 1
movsxd r8, ebx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
sub ebx, eax
test ebx, ebx
je 0x14007db5b
sub dword [rdi + 0x48], ebx
mov eax, esi
add rsp, 0x38
pop rdi
pop rsi
pop rbp
pop rbx
ret
xor eax, eax
add rsp, 0x38
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x14007db70
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x20
mov edi, edx
mov r10, r9
imul edi, r8d
mov ebp, r8d
mov r14d, edx
mov rsi, rcx
test edi, edi
js 0x14007dd01
je 0x14007dd08
cmp r8d, 1
jle 0x14007dcc9
test dword [rcx + 8], 0x20000
je 0x14007dcc9
cmp edi, dword [0x1401bb020]
mov qword [rsp + 0x30], rbx
mov rbx, r9
jle 0x14007dbf8
mov rcx, qword [0x1401bb018]
test rcx, rcx
je 0x14007dbde
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
movsxd rcx, edi
mov dword [0x1401bb020], edi
call fcn.140001bb0
mov r10, rax
mov qword [0x1401bb018], rax
jmp 0x14007dbff
mov r10, qword [0x1401bb018]
lea ecx, [r14 - 1]
mov rdx, r10
cmp ebp, 2
jne 0x14007dc32
test ecx, ecx
js 0x14007dcc4
sub ecx, 1
movzx eax, byte [rbx]
mov byte [rdx + 1], al
lea rdx, [rdx + 2]
movzx eax, byte [rbx + 1]
lea rbx, [rbx + 2]
mov byte [rdx - 2], al
jns 0x14007dc13
jmp 0x14007dcc4
cmp ebp, 4
jne 0x14007dc6d
test ecx, ecx
js 0x14007dcc4
add rdx, 2
sub ecx, 1
movzx eax, byte [rbx]
mov byte [rdx + 1], al
lea rdx, [rdx + 4]
movzx eax, byte [rbx + 1]
lea rbx, [rbx + 4]
mov byte [rdx - 4], al
movzx eax, byte [rbx - 2]
mov byte [rdx - 5], al
movzx eax, byte [rbx - 1]
mov byte [rdx - 6], al
jns 0x14007dc43
jmp 0x14007dcc4
test ecx, ecx
js 0x14007dcc4
add rdx, 6
nop word [rax + rax]
sub ecx, 1
movzx eax, byte [rbx]
mov byte [rdx + 1], al
lea rdx, [rdx + 8]
movzx eax, byte [rbx + 1]
lea rbx, [rbx + 8]
mov byte [rdx - 8], al
movzx eax, byte [rbx - 6]
mov byte [rdx - 9], al
movzx eax, byte [rbx - 5]
mov byte [rdx - 0xa], al
movzx eax, byte [rbx - 4]
mov byte [rdx - 0xb], al
movzx eax, byte [rbx - 3]
mov byte [rdx - 0xc], al
movzx eax, byte [rbx - 2]
mov byte [rdx - 0xd], al
movzx eax, byte [rbx - 1]
mov byte [rdx - 0xe], al
jns 0x14007dc80
mov rbx, qword [rsp + 0x30]
add dword [rsi + 0x48], edi
test byte [rsi + 8], 0x40
je 0x14007dce3
mov rcx, qword [rsi + 0x30]
mov r8d, edi
mov rdx, r10
call fcn.1400f7a40
jmp 0x14007dcf8
mov r9, qword [rsi + 0x20]
mov edx, 1
movsxd r8, edi
mov rcx, r10
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
sub edi, eax
test edi, edi
je 0x14007dd08
sub dword [rsi + 0x48], edi
mov eax, 0xffffffff
jmp 0x14007dd0a
xor eax, eax
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret

Function at 0x14007e6f0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov rsi, r8
mov r9, r8
mov r8, rdx
mov rdi, rcx
mov rcx, qword [rcx + 8]
lea rdx, [0x1401a1844]
call fcn.14007da90
xor ebx, ebx
test eax, eax
mov ecx, ebx
sete cl
test eax, eax
jne 0x14007e768
mov rdx, rsi
mov rcx, rdi
call fcn.1400812c0
test eax, eax
sete bl
test eax, eax
jne 0x14007e756
mov rcx, qword [rdi + 8]
mov dl, 0x22
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp fcn.14007d370
mov eax, ebx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
mov rbx, qword [rsp + 0x30]
mov eax, ecx
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
Function at 0x140082720
Capabilities:
Query environment variable
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x30
cmp dword [0x1401bb028], 0
mov ebx, edx
mov rdi, rcx
mov esi, edx
jne 0x14008276c
lea rcx, str.dglDUMP_FLAGS
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x140082762
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov dword [0x1401bb028], eax
jmp 0x14008276c
mov dword [0x1401bb028], 0x1f
mov r8d, 0x20
lea rcx, str._n_cdatumAxis__n
mov edx, ebx
call fcn.140001fb0
movups xmm0, xmmword [rdi + 0x18]
lea rcx, [0x1401a3690]
add ebx, 2
movsd xmm3, qword [rdi + 0x10]
mov r8d, 0x20
movq r9, xmm3
mov edx, ebx
movups xmmword [rsp + 0x20], xmm0
call fcn.140001fb0
movups xmm0, xmmword [rdi + 0x30]
lea rcx, str._caxis_______:__0.16g___0.16g___0.16g_n
mov r8d, 0x20
movsd xmm3, qword [rdi + 0x28]
mov edx, ebx
movq r9, xmm3
movups xmmword [rsp + 0x20], xmm0
call fcn.140001fb0
mov rax, qword [rdi + 0x50]
test rax, rax
je 0x140082820
mov rax, qword [rax + 0x18]
test rax, rax
je 0x140082820
movss xmm0, dword [rax + 0x18]
lea rcx, [0x1401a36e0]
movss xmm3, dword [rax + 0x10]
mov r8d, 0x20
movss xmm1, dword [rax + 0x14]
mov edx, ebx
cvtps2pd xmm0, xmm0
cvtps2pd xmm3, xmm3
cvtps2pd xmm1, xmm1
movsd qword [rsp + 0x28], xmm0
movq r9, xmm3
movsd qword [rsp + 0x20], xmm1
call fcn.140001fb0
cmp dword [rdi + 0x48], 0
jle 0x140082831
lea rcx, [rdi + 0x40]
mov edx, ebx
call fcn.140083a50
mov r8d, 0x20
lea rcx, [0x1401a3684]
mov edx, esi
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
jmp fcn.140001fb0
Function at 0x140082860
Capabilities:
Query environment variable
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x30
cmp dword [0x1401bb028], 0
mov ebx, edx
mov rdi, rcx
mov esi, edx
jne 0x1400828ac
lea rcx, str.dglDUMP_FLAGS
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x1400828a2
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov dword [0x1401bb028], eax
jmp 0x1400828ac
mov dword [0x1401bb028], 0x1f
mov r8d, 0x20
lea rcx, str._n_cdatumCsys__n
mov edx, ebx
call fcn.140001fb0
movups xmm0, xmmword [rdi + 0x18]
lea rcx, str._cpoint______:__0.16g___0.16g___0.16g_n
add ebx, 2
movsd xmm3, qword [rdi + 0x10]
mov r8d, 0x20
movq r9, xmm3
mov edx, ebx
movups xmmword [rsp + 0x20], xmm0
call fcn.140001fb0
movups xmm0, xmmword [rdi + 0x30]
lea rcx, str._caxisX______:__0.16g___0.16g___0.16g_n
mov r8d, 0x20
movsd xmm3, qword [rdi + 0x28]
mov edx, ebx
movq r9, xmm3
movups xmmword [rsp + 0x20], xmm0
call fcn.140001fb0
movups xmm0, xmmword [rdi + 0x48]
lea rcx, str._caxisZ______:__0.16g___0.16g___0.16g_n
mov r8d, 0x20
movsd xmm3, qword [rdi + 0x40]
mov edx, ebx
movq r9, xmm3
movups xmmword [rsp + 0x20], xmm0
call fcn.140001fb0
mov rax, qword [rdi + 0x68]
test rax, rax
je 0x140082987
mov rax, qword [rax + 0x18]
test rax, rax
je 0x140082987
movss xmm0, dword [rax + 0x18]
lea rcx, str._ccolor______:__g___g___g_n
movss xmm3, dword [rax + 0x10]
mov r8d, 0x20
movss xmm1, dword [rax + 0x14]
mov edx, ebx
cvtps2pd xmm0, xmm0
cvtps2pd xmm3, xmm3
cvtps2pd xmm1, xmm1
movsd qword [rsp + 0x28], xmm0
movq r9, xmm3
movsd qword [rsp + 0x20], xmm1
call fcn.140001fb0
cmp dword [rdi + 0x60], 0
jle 0x140082998
lea rcx, [rdi + 0x58]
mov edx, ebx
call fcn.140083a50
mov r8d, 0x20
lea rcx, [0x1401a3714]
mov edx, esi
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
jmp fcn.140001fb0
Function at 0x1400829c0
Capabilities:
Query environment variable
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x30
cmp dword [0x1401bb028], 0
mov ebx, edx
mov rdi, rcx
mov esi, edx
jne 0x140082a0c
lea rcx, str.dglDUMP_FLAGS
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x140082a02
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov dword [0x1401bb028], eax
jmp 0x140082a0c
mov dword [0x1401bb028], 0x1f
mov r8d, 0x20
lea rcx, str._n_cdatumPoint__n
mov edx, ebx
call fcn.140001fb0
movups xmm0, xmmword [rdi + 0x18]
lea rcx, [0x1401a3620]
add ebx, 2
movsd xmm3, qword [rdi + 0x10]
mov r8d, 0x20
movq r9, xmm3
mov edx, ebx
movups xmmword [rsp + 0x20], xmm0
call fcn.140001fb0
mov rax, qword [rdi + 0x38]
test rax, rax
je 0x140082a99
mov rax, qword [rax + 0x18]
test rax, rax
je 0x140082a99
movss xmm0, dword [rax + 0x18]
lea rcx, [0x1401a3648]
movss xmm3, dword [rax + 0x10]
mov r8d, 0x20
movss xmm1, dword [rax + 0x14]
mov edx, ebx
cvtps2pd xmm0, xmm0
cvtps2pd xmm3, xmm3
cvtps2pd xmm1, xmm1
movsd qword [rsp + 0x28], xmm0
movq r9, xmm3
movsd qword [rsp + 0x20], xmm1
call fcn.140001fb0
cmp dword [rdi + 0x30], 0
jle 0x140082aaa
lea rcx, [rdi + 0x28]
mov edx, ebx
call fcn.140083a50
mov r8d, 0x20
lea rcx, [0x1401a3664]
mov edx, esi
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
jmp fcn.140001fb0

Function at 0x140082ad0
Capabilities:
Query environment variable
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
cmp dword [0x1401bb028], 0
mov ebx, edx
mov rdi, rcx
jne 0x140082b15
lea rcx, str.dglDUMP_FLAGS
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x140082b0b
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov dword [0x1401bb028], eax
jmp 0x140082b15
mov dword [0x1401bb028], 0x1f
mov r8d, 0x20
lea rcx, str._n_cedge__n
mov edx, ebx
call fcn.140001fb0
mov edx, ebx
mov rcx, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp fcn.140083ee0
Function at 0x140082b40
Capabilities:
Query environment variable
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x40
cmp dword [0x1401bb028], 0
mov edi, edx
mov rsi, rcx
mov ebp, edx
jne 0x140082b91
lea rcx, str.dglDUMP_FLAGS
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x140082b87
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov dword [0x1401bb028], eax
jmp 0x140082b91
mov dword [0x1401bb028], 0x1f
mov r8d, 0x20
lea rcx, str._n_cface__n
mov edx, edi
call fcn.140001fb0
movsd xmm0, qword [0x1401587f8]
add edi, 2
movsd xmm2, qword [0x140183680]
comisd xmm0, xmm2
ja 0x140082bc1
xorps xmm2, xmm2
movsd xmm3, qword [0x140183678]
comisd xmm0, xmm3
jbe 0x140082bd9
mulsd xmm3, qword [0x1401587a0]
jmp 0x140082bdc
xorps xmm3, xmm3
movsd xmm0, qword [0x140183690]
lea rcx, str._cresolution_:__0.16g___0.16g___0.16g___0.16g_n
movsd xmm1, qword [0x140183688]
movq r9, xmm3
movsd qword [rsp + 0x30], xmm0
mov r8d, 0x20
movsd qword [rsp + 0x28], xmm1
mov edx, edi
movsd qword [rsp + 0x20], xmm2
call fcn.140001fb0
cmp qword [rsi + 0x20], 0
je 0x140082cbe
mov rax, qword [rsi + 0x18]
test rax, rax
je 0x140082c71
mov rax, qword [rax + 0x18]
test rax, rax
je 0x140082c71
movss xmm0, dword [rax + 0x18]
lea rcx, [0x1401a3288]
movss xmm3, dword [rax + 0x10]
mov r8d, 0x20
movss xmm1, dword [rax + 0x14]
mov edx, edi
cvtps2pd xmm0, xmm0
cvtps2pd xmm3, xmm3
cvtps2pd xmm1, xmm1
movsd qword [rsp + 0x28], xmm0
movq r9, xmm3
movsd qword [rsp + 0x20], xmm1
call fcn.140001fb0
movzx r9d, byte [rsi + 0x50]
lea rcx, str._cdefaultLoop__:__d_n
mov r8d, 0x20
mov edx, edi
call fcn.140001fb0
mov rcx, qword [rsi + 0x20]
lea rdx, [0x1401a32c0]
mov r8d, edi
call fcn.140084040
mov rcx, qword [rsi + 0x28]
test rcx, rcx
je 0x140082cbe
test byte [0x1401bb028], 1
je 0x140082cbe
mov r8d, edi
lea rdx, [0x1401a32c8]
call fcn.140084040
mov rbx, qword [rsi + 0x30]
test rbx, rbx
je 0x140082ce3
nop word [rax + rax]
mov edx, edi
mov rcx, rbx
call fcn.140082e30
mov rbx, qword [rbx + 8]
test rbx, rbx
jne 0x140082cd0
cmp dword [rsi + 0x48], 0
jle 0x140082cf4
lea rcx, [rsi + 0x40]
mov edx, edi
call fcn.140083a50
mov r8d, 0x20
lea rcx, [0x1401a32dc]
mov edx, ebp
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
add rsp, 0x40
pop rdi
jmp fcn.140001fb0
Function at 0x140082d20
Capabilities:
Query environment variable
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
cmp dword [0x1401bb028], 0
mov edi, edx
mov rbx, rcx
mov esi, edx
jne 0x140082d6c
lea rcx, str.dglDUMP_FLAGS
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x140082d62
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov dword [0x1401bb028], eax
jmp 0x140082d6c
mov dword [0x1401bb028], 0x1f
mov r8d, 0x20
lea rcx, str._n_cfeature__n
mov edx, edi
call fcn.140001fb0
movzx r9d, byte [rbx + 0x38]
lea rcx, str._ctype_______:___d__n
add edi, 2
mov r8d, 0x20
mov edx, edi
call fcn.140001fb0
mov r9, qword [rbx + 0x18]
test r9, r9
je 0x140082db9
mov r8d, 0x20
lea rcx, str._cid_________:___s__n
mov edx, edi
call fcn.140001fb0
mov r9, qword [rbx + 0x20]
test r9, r9
je 0x140082dd6
mov r8d, 0x20
lea rcx, str._cname_______:___s__n
mov edx, edi
call fcn.140001fb0
cmp dword [rbx + 0x30], 0
jle 0x140082de7
lea rcx, [rbx + 0x28]
mov edx, edi
call fcn.140083a50
mov rbx, qword [rbx + 0x10]
test rbx, rbx
je 0x140082e02
mov edx, edi
mov rcx, rbx
call fcn.140082d20
mov rbx, qword [rbx]
test rbx, rbx
jne 0x140082df0
mov r8d, 0x20
lea rcx, str._c_n
mov edx, esi
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp fcn.140001fb0