joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14002bde0
Capabilities:
Read file on windows

Disassembly:
jmp 0x14002bde0
push rbx
push rsi
push rdi
sub rsp, 0x140
mov rax, qword [0x1400c3648]
xor rax, rsp
mov qword [rsp + 0x130], rax
mov rsi, r8
mov rdi, rdx
mov rbx, rcx
call qword [sym.imp.MiKTeX221000_app.dll_public:_static_class_MiKTeX::App::Application____ptr64___cdecl_MiKTeX::App::Application::GetApplication_void_]
and dword [rbx + 8], 0xfffeffff
mov r9, qword [rbx]
mov r8, rsi
mov edx, 1
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
cmp rax, rsi
je 0x14002bed3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov esi, dword [rax]
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
movups xmmword [rsp + 0x30], xmm0
movups xmmword [rsp + 0x40], xmm0
movups xmmword [rsp + 0x50], xmm0
lea rdx, str.C:jenkinsworkspacemiktexwindows_build_sourceLibrariesMiKTeXTeXAndFriendsincludemiktexTeXAndFriendsTeXMFApp.h
lea rcx, [rsp + 0x60]
call fcn.1400023ec
nop
lea rdx, str.Undump
lea rcx, [rsp + 0x80]
call fcn.1400023ec
nop
mov r9d, 0xd5
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.MiKTeX221000_core.dll_public:_void___cdecl_MiKTeX::Core::SourceLocation::constructor_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const____ptr64__class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const____ptr64__int____ptr64]
mov rdi, rax
lea rcx, [rsp + 0x20]
call fcn.140001bc2
mov rbx, rax
lea rdx, str.fread
lea rcx, [rsp + 0xa0]
call fcn.1400023ec
nop
mov r9, rdi
mov r8, rbx
mov edx, esi
lea rcx, [rsp + 0xa0]
call qword [sym.imp.MiKTeX221000_core.dll_public:_static_void___cdecl_MiKTeX::Core::Session::FatalCrtError_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const____ptr64__int__class_MiKTeX::Core::MiKTeXException::KVMAP_const____ptr64__struct_MiKTeX::Core::SourceLocation_const____ptr64_]
nop
mov rcx, qword [rsp + 0x130]
xor rcx, rsp
call fcn.14000259f
add rsp, 0x140
pop rdi
pop rsi
pop rbx
ret

Function at 0x14002bf40
Capabilities:
Read file on windows

Disassembly:
jmp 0x14002bf40
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov rbx, r8
mov rdi, rdx
mov rsi, rcx
call qword [sym.imp.MiKTeX221000_app.dll_public:_static_class_MiKTeX::App::Application____ptr64___cdecl_MiKTeX::App::Application::GetApplication_void_]
mov r9, rbx
mov r8, rdi
mov rcx, rax
mov rdx, rsi
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp fcn.1400031e8

Function at 0x14002bfe0
Capabilities:
Read file on windows

Disassembly:
jmp 0x14002bfe0
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov rbx, r8
mov rdi, rdx
mov rsi, rcx
call qword [sym.imp.MiKTeX221000_app.dll_public:_static_class_MiKTeX::App::Application____ptr64___cdecl_MiKTeX::App::Application::GetApplication_void_]
mov r9, rbx
mov r8, rdi
mov rcx, rax
mov rdx, rsi
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp fcn.140002748
Function at 0x14002c640
Capabilities:
Read file on windows

Disassembly:
jmp 0x14002c640
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov rbx, r8
mov rdi, rdx
mov rsi, rcx
call qword [sym.imp.MiKTeX221000_app.dll_public:_static_class_MiKTeX::App::Application____ptr64___cdecl_MiKTeX::App::Application::GetApplication_void_]
mov r9, rbx
mov r8, rdi
mov rcx, rax
mov rdx, rsi
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp fcn.14000269e

Function at 0x14002c690
Capabilities:
Read file on windows

Disassembly:
jmp 0x14002c690
push rbx
push rsi
push rdi
sub rsp, 0x140
mov rax, qword [0x1400c3648]
xor rax, rsp
mov qword [rsp + 0x130], rax
mov rsi, r8
mov rdi, rdx
mov rbx, rcx
call qword [sym.imp.MiKTeX221000_app.dll_public:_static_class_MiKTeX::App::Application____ptr64___cdecl_MiKTeX::App::Application::GetApplication_void_]
and dword [rbx + 8], 0xfffeffff
mov r9, qword [rbx]
mov r8, rsi
mov edx, 8
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
cmp rax, rsi
je 0x14002c783
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov esi, dword [rax]
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
movups xmmword [rsp + 0x30], xmm0
movups xmmword [rsp + 0x40], xmm0
movups xmmword [rsp + 0x50], xmm0
lea rdx, str.C:jenkinsworkspacemiktexwindows_build_sourceLibrariesMiKTeXTeXAndFriendsincludemiktexTeXAndFriendsTeXMFApp.h
lea rcx, [rsp + 0x60]
call fcn.1400023ec
nop
lea rdx, str.Undump
lea rcx, [rsp + 0x80]
call fcn.1400023ec
nop
mov r9d, 0xd5
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.MiKTeX221000_core.dll_public:_void___cdecl_MiKTeX::Core::SourceLocation::constructor_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const____ptr64__class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const____ptr64__int____ptr64]
mov rdi, rax
lea rcx, [rsp + 0x20]
call fcn.140001bc2
mov rbx, rax
lea rdx, str.fread
lea rcx, [rsp + 0xa0]
call fcn.1400023ec
nop
mov r9, rdi
mov r8, rbx
mov edx, esi
lea rcx, [rsp + 0xa0]
call qword [sym.imp.MiKTeX221000_core.dll_public:_static_void___cdecl_MiKTeX::Core::Session::FatalCrtError_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const____ptr64__int__class_MiKTeX::Core::MiKTeXException::KVMAP_const____ptr64__struct_MiKTeX::Core::SourceLocation_const____ptr64_]
nop
mov rcx, qword [rsp + 0x130]
xor rcx, rsp
call fcn.14000259f
add rsp, 0x140
pop rdi
pop rsi
pop rbx
ret
Function at 0x14002c7f0
Capabilities:
Read file on windows

Disassembly:
jmp 0x14002c7f0
jmp 0x1400263a0
push rbx
push rsi
push rdi
sub rsp, 0x140
mov rax, qword [0x1400c3648]
xor rax, rsp
mov qword [rsp + 0x130], rax
mov rbx, r9
mov rcx, r8
and dword [rdx + 8], 0xfffeffff
mov r9, qword [rdx]
mov r8, rbx
mov edx, 8
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
cmp rax, rbx
je 0x140026487
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov esi, dword [rax]
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
movups xmmword [rsp + 0x30], xmm0
movups xmmword [rsp + 0x40], xmm0
movups xmmword [rsp + 0x50], xmm0
lea rdx, str.C:jenkinsworkspacemiktexwindows_build_sourceLibrariesMiKTeXTeXAndFriendsincludemiktexTeXAndFriendsTeXMFApp.h
lea rcx, [rsp + 0x60]
call fcn.1400023ec
nop
lea rdx, str.Undump
lea rcx, [rsp + 0x80]
call fcn.1400023ec
nop
mov r9d, 0xd5
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.MiKTeX221000_core.dll_public:_void___cdecl_MiKTeX::Core::SourceLocation::constructor_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const____ptr64__class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const____ptr64__int____ptr64]
mov rdi, rax
lea rcx, [rsp + 0x20]
call fcn.140001bc2
mov rbx, rax
lea rdx, str.fread
lea rcx, [rsp + 0xa0]
call fcn.1400023ec
nop
mov r9, rdi
mov r8, rbx
mov edx, esi
lea rcx, [rsp + 0xa0]
call qword [sym.imp.MiKTeX221000_core.dll_public:_static_void___cdecl_MiKTeX::Core::Session::FatalCrtError_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const____ptr64__int__class_MiKTeX::Core::MiKTeXException::KVMAP_const____ptr64__struct_MiKTeX::Core::SourceLocation_const____ptr64_]
nop
mov rcx, qword [rsp + 0x130]
xor rcx, rsp
call fcn.14000259f
add rsp, 0x140
pop rdi
pop rsi
pop rbx
ret
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov rbx, rdx
mov rdi, rcx
call qword [sym.imp.MiKTeX221000_app.dll_public:_static_class_MiKTeX::App::Application____ptr64___cdecl_MiKTeX::App::Application::GetApplication_void_]
mov r9d, 1
mov r8, rbx
mov rcx, rax
mov rdx, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp 0x140003f58

Function at 0x14002c840
Capabilities:
Read file on windows

Disassembly:
jmp 0x14002c840
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov rbx, r8
mov rdi, rdx
mov rsi, rcx
call qword [sym.imp.MiKTeX221000_app.dll_public:_static_class_MiKTeX::App::Application____ptr64___cdecl_MiKTeX::App::Application::GetApplication_void_]
mov r9, rbx
mov r8, rdi
mov rcx, rax
mov rdx, rsi
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp 0x140003f58

Function at 0x14002c890
Capabilities:
Read file on windows

Disassembly:
jmp 0x14002c890
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov rbx, rdx
mov rdi, rcx
call qword [sym.imp.MiKTeX221000_app.dll_public:_static_class_MiKTeX::App::Application____ptr64___cdecl_MiKTeX::App::Application::GetApplication_void_]
mov r9d, 1
mov r8, rbx
mov rcx, rax
mov rdx, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp fcn.140002748
Function at 0x140032310
Capabilities:
Encode data using xor

Disassembly:
jmp 0x140032310
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x20
movsx esi, byte [rcx + 0x15630]
mov rbx, rcx
call fcn.140001f32
movsxd r8, dword [rbx + 0x15700]
cmp r8d, 0x100
jge 0x14003234f
mov rax, qword [rbx + 0x10b60]
mov edi, dword [rax + r8*8 + 0x35948]
jmp 0x1400323a0
xor r9d, r9d
mov dl, 4
mov rcx, rbx
call fcn.1400036fc
movsxd rax, dword [rbx + 0x875dc]
cmp eax, 0xf0000001
jne 0x140032392
mov rcx, rbx
call fcn.1400035f8
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.140003067
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
mov rcx, rax
mov rax, qword [rbx + 0x10ac8]
mov edi, dword [rax + rcx*8 + 8]
mov rcx, rbx
call fcn.1400035f8
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.140003067
cmp edi, 0xf0000001
je 0x1400324bf
mov r10, qword [rbx + 0x10ac8]
mov qword [rsp + 0x30], rbp
movsxd rax, edi
mov qword [rsp + 0x38], r14
lea r14, [rax*8]
mov ebp, dword [r14 + r10]
mov r8d, ebp
cmp ebp, 0xf0000001
je 0x14003242b
movsx eax, byte [rbx + 0x10b0a]
cdq
mov r9d, eax
xor r9d, edx
sub r9d, edx
movsxd rcx, r8d
movzx eax, word [r10 + rcx*8 + 6]
and eax, 0xf
sub eax, 5
cdq
xor eax, edx
sub eax, edx
cmp r9d, eax
cmovne r8d, edi
mov edi, r8d
mov r8d, dword [r10 + rcx*8]
cmp r8d, 0xf0000001
jne 0x140032400
movsxd rax, edi
movzx eax, word [r10 + rax*8 + 6]
and eax, 0xf
sub eax, 5
cdq
mov ecx, eax
movsx eax, byte [rbx + 0x10b0a]
xor ecx, edx
sub ecx, edx
cdq
xor eax, edx
sub eax, edx
cmp ecx, eax
je 0x14003249f
mov dword [r14 + r10], 0xf0000001
mov rcx, rbx
movsx eax, byte [rbx + 0x10b0a]
cdq
xor eax, edx
sub eax, edx
mov edx, edi
movzx r8d, al
call fcn.140002441
movsxd rdi, eax
lea eax, [rdi + 5]
movsxd rcx, eax
mov rax, qword [rbx + 0x10ac8]
mov dword [rax + rcx*8], 0xf0000001
mov rax, qword [rbx + 0x10ac8]
mov dword [rax + rdi*8], ebp
mov rax, qword [rbx + 0x10ac8]
mov dword [r14 + rax], edi
mov rcx, qword [rbx + 0x10ac8]
lea eax, [rdi + rsi]
mov r14, qword [rsp + 0x38]
mov rbp, qword [rsp + 0x30]
movsxd rdx, eax
mov eax, dword [rbx + 0x15700]
mov dword [rcx + rdx*8], eax
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x1400326c0
Capabilities:
Encode data using xor

Disassembly:
jmp 0x1400326c0
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
movsx rax, word [rcx + 0x10b00]
mov rbx, rcx
imul rcx, rax, 0x38
movups xmm0, xmmword [rbx + 0x10b08]
mov rax, qword [rbx + 0x10af8]
movups xmmword [rcx + rax], xmm0
movups xmm1, xmmword [rbx + 0x10b18]
movups xmmword [rcx + rax + 0x10], xmm1
movups xmm0, xmmword [rbx + 0x10b28]
movups xmmword [rcx + rax + 0x20], xmm0
movsd xmm1, qword [rbx + 0x10b38]
movsd qword [rcx + rax + 0x30], xmm1
movsx rdi, word [rbx + 0x10b00]
mov r8, qword [rbx + 0x10af8]
imul rcx, rdi, 0x38
movsx eax, word [rcx + r8]
cdq
xor eax, edx
sub eax, edx
cmp eax, 1
je 0x14003275a
nop dword [rax]
nop word [rax + rax]
dec di
movsx rax, di
imul rcx, rax, 0x38
movsx eax, word [rcx + r8]
cdq
xor eax, edx
sub eax, edx
cmp eax, 1
jne 0x140032740
mov rcx, rbx
call fcn.1400035f8
mov rcx, rbx
call fcn.140003b6b
mov edx, dword [rbx + 0x15700]
test edx, edx
jns 0x1400327df
call qword [sym.imp.MiKTeX221000_app.dll_public:_static_class_MiKTeX::App::Application____ptr64___cdecl_MiKTeX::App::Application::GetApplication_void_]
mov rcx, rax
call qword [sym.imp.MiKTeX221000_texmf.dll_public:_bool___cdecl_MiKTeX::TeXAndFriends::TeXMFApp::CStyleErrorMessagesP_void_const___ptr64]
mov rcx, rbx
test al, al
je 0x140032791
call fcn.140001055
jmp 0x14003279b
mov edx, 0x108
call fcn.14000143d
mov edx, 0x443
mov rcx, rbx
call fcn.140004011
mov edx, 0x257
mov rcx, rbx
call fcn.140003193
mov dword [rbx + 0x108bc], 0x575
mov rcx, rbx
mov edx, dword [rbx + 0x15700]
mov byte [rbx + 0x108d4], 1
call fcn.1400013b1
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
movsx rax, di
imul rcx, rax, 0x38
mov rax, qword [rbx + 0x10af8]
mov dword [rcx + rax + 0x24], edx
movsx rax, word [rbx + 0x10b00]
imul rcx, rax, 0x38
mov rax, qword [rbx + 0x10af8]
movups xmm0, xmmword [rcx + rax]
movups xmmword [rbx + 0x10b08], xmm0
movups xmm1, xmmword [rcx + rax + 0x10]
movups xmmword [rbx + 0x10b18], xmm1
movups xmm0, xmmword [rcx + rax + 0x20]
movups xmmword [rbx + 0x10b28], xmm0
movsd xmm1, qword [rcx + rax + 0x30]
movsd qword [rbx + 0x10b38], xmm1
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x140069210
Capabilities:
Encrypt data using rc4 prga

Disassembly:
jmp 0x140069210
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
movzx ebx, byte [rcx + 0x2725c]
movsx ebp, dl
movzx edi, r9w
movsx esi, r8b
imul eax, ebx, 0x3f1
imul r11d, edi, 0x169
add eax, r11d
imul r11d, ebp, 0x139
add eax, r11d
add eax, esi
cdq
mov r9d, eax
mov eax, 0xeeeab3d9
xor r9d, edx
sub r9d, edx
imul r9d
add edx, r9d
sar edx, 0x10
mov r8d, edx
shr r8d, 0x1f
add edx, r8d
mov r8d, 0x8927
imul eax, edx, 0x1124e
sub r9d, eax
movsxd rax, r9d
lea r10d, [r9 - 0x8927]
movzx edx, word [rcx + rax*2 + 0x499b0]
test dx, dx
je 0x1400692ed
movsxd rax, r10d
nop dword [rax]
movzx edx, dx
cmp byte [rdx + rcx + 0x272ef], bpl
jne 0x1400692ca
cmp byte [rdx + rcx + 0x2fc16], sil
jne 0x1400692ca
cmp word [rcx + rdx*2 + 0x3853c], di
jne 0x1400692ca
cmp byte [rdx + rcx + 0x6c04d], bl
je 0x140069300
cmp rax, 0xffffffffffff76d9
jle 0x1400692da
dec r10d
dec rax
jmp 0x1400692e0
mov r10d, r8d
mov rax, r8
movzx edx, word [rcx + rax*2 + 0x5abfe]
test dx, dx
jne 0x1400692a0
movzx edx, word [rcx + 0x85bc4]
cmp dx, r8w
je 0x1400693d2
jmp 0x14006930e
movzx r9d, word [rcx + rdx*2 + 0x74974]
jmp 0x1400693b9
lea r11, [rcx + rbx*2]
mov r8d, 0xffff
movzx r9d, word [r11 + 0x6be4e]
cmp r9w, r8w
je 0x1400693dd
inc dx
inc r9w
mov word [rcx + 0x85bc4], dx
mov word [r11 + 0x6be4e], r9w
cmp r9w, word [rcx + 0x85bc6]
jbe 0x140069352
mov word [rcx + 0x85bc6], r9w
movzx eax, word [rcx + 0x85bc4]
mov byte [rax + rcx + 0x272ef], bpl
movzx eax, word [rcx + 0x85bc4]
mov byte [rax + rcx + 0x2fc16], sil
movzx edx, word [rcx + 0x85bc4]
mov word [rcx + rdx*2 + 0x3853c], di
movzx edx, byte [rcx + 0x2725c]
movzx r8d, word [rcx + 0x85bc4]
mov byte [r8 + rcx + 0x6c04d], dl
movzx edx, word [rcx + 0x85bc4]
movsxd r8, r10d
mov word [rcx + r8*2 + 0x5abfe], dx
movzx edx, word [rcx + 0x85bc4]
mov word [rcx + rdx*2 + 0x74974], r9w
mov rbx, qword [rsp + 0x30]
movzx eax, r9w
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret
mov edx, 0x43d
call fcn.14000103c
int3
mov edx, 0x43e
call fcn.14000103c
int3
Function at 0x140091d40
Capabilities:
Write file on windows

Disassembly:
jmp 0x140091d40
push rbx
push rsi
push rdi
sub rsp, 0x140
mov rax, qword [0x1400c3648]
xor rax, rsp
mov qword [rsp + 0x130], rax
movsxd rax, edx
mov r9, rcx
sub r8d, eax
inc r8d
movsxd rdx, r8d
lea rcx, [rax + 0x16f80]
add rcx, r9
mov r9, qword [r9 + 0x16be0]
mov r8d, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 1
je 0x140091e36
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov esi, dword [rax]
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
movups xmmword [rsp + 0x30], xmm0
movups xmmword [rsp + 0x40], xmm0
movups xmmword [rsp + 0x50], xmm0
lea rdx, str.C:jenkinsworkspacemiktexwindows_build_sourceLibrariesMiKTeXTeXAndFriendsincludemiktex_C4P_C4P.h
lea rcx, [rsp + 0x60]
call fcn.1400023ec
nop
lea rdx, str.c4pbufwrite
lea rcx, [rsp + 0x80]
call fcn.1400023ec
nop
mov r9d, 0x213
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.MiKTeX221000_core.dll_public:_void___cdecl_MiKTeX::Core::SourceLocation::constructor_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const____ptr64__class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const____ptr64__int____ptr64]
mov rdi, rax
lea rcx, [rsp + 0x20]
call fcn.140001bc2
mov rbx, rax
lea rdx, str.fwrite
lea rcx, [rsp + 0xa0]
call fcn.1400023ec
nop
mov r9, rdi
mov r8, rbx
mov edx, esi
lea rcx, [rsp + 0xa0]
call qword [sym.imp.MiKTeX221000_core.dll_public:_static_void___cdecl_MiKTeX::Core::Session::FatalCrtError_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const____ptr64__int__class_MiKTeX::Core::MiKTeXException::KVMAP_const____ptr64__struct_MiKTeX::Core::SourceLocation_const____ptr64_]
nop
mov rcx, qword [rsp + 0x130]
xor rcx, rsp
call fcn.14000259f
add rsp, 0x140
pop rdi
pop rsi
pop rbx
ret
Function at 0x140092ee0
Capabilities:
Read file on windows

Disassembly:
jmp 0x140092ee0
test r8d, r8d
je 0x140093063
mov qword [rsp + 0x20], rbx
push rsi
sub rsp, 0x20
mov r11, qword [0x1400c35b0]
mov esi, edx
mov rax, qword [0x1400c35b8]
movsxd rbx, r8d
mov r10d, dword [rax]
lea r9d, [rbx*2 + 1]
add r9d, dword [r11]
cmp r9d, r10d
jl 0x140092f27
mov dword [r11], r10d
mov rbx, qword [rsp + 0x48]
add rsp, 0x20
pop rsi
ret
mov qword [rsp + 0x30], rbp
call fcn.140002022
mov rbp, rax
test rax, rax
je 0x140093054
lea rdx, [0x1400a75c8]
mov qword [rsp + 0x38], rdi
mov rcx, rax
call qword [sym.imp.MiKTeX221000_utf8wrap.dll_miktex_utf8_fopen]
mov rdi, rax
test rax, rax
je 0x140093046
mov edx, 1
mov rcx, rbp
call qword [sym.imp.MiKTeX221000_web2c.dll_void___cdecl_MiKTeX::Web2C::RecordFileName_char_const____ptr64__enum_MiKTeX::Core::FileAccess_]
xor r8d, r8d
mov edx, esi
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
test eax, eax
jne 0x140093046
lea rcx, [rbx + 1]
mov r8d, 0xeb8
lea rdx, str.C:jenkinsworkspacemiktexwindows_build_sourceLibraries3rdweb2c_sourcelib_texmfmp.c
call qword [sym.imp.MiKTeX221000_core.dll_miktex_core_malloc]
mov r9, rdi
mov r8, rbx
mov rcx, rax
mov edx, 1
mov rsi, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
mov rcx, rdi
mov rbx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
movsxd rdi, ebx
test ebx, ebx
jle 0x140093038
xor ebx, ebx
nop word [rax + rax]
movzx r9d, byte [rbx + rsi]
lea r8, str._.2X
mov edx, 3
lea rcx, [rsp + 0x40]
call fcn.140002e73
cmp eax, 3
jae 0x140093064
xor ecx, ecx
movsxd r10, eax
test eax, eax
jle 0x140093030
nop dword [rax]
mov rax, qword [0x1400c35b0]
movzx r9d, byte [rsp + rcx + 0x40]
inc rcx
movsxd r8, dword [rax]
mov rax, qword [0x1400c35d8]
mov rdx, qword [rax]
mov word [rdx + r8*2], r9w
mov rax, qword [0x1400c35b0]
inc dword [rax]
cmp rcx, r10
jl 0x140093000
inc rbx
cmp rbx, rdi
jl 0x140092fd0
test rsi, rsi
je 0x140093046
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, rbp
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rdi, qword [rsp + 0x38]
mov rbp, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x48]
add rsp, 0x20
pop rsi
ret
mov r8d, 0xebd
lea rdx, str.C:jenkinsworkspacemiktexwindows_build_sourceLibraries3rdweb2c_sourcelib_texmfmp.c
lea rcx, str.snprintf_failed:_file__s__line__d
call fcn.140002630
int3
Function at 0x140094330
Capabilities:
Terminate process

Disassembly:
jmp 0x140094330
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x20], r9
push rbx
sub rsp, 0x30
lea rcx, [0x1400c48b0]
lea rbx, [rsp + 0x48]
call fcn.140002144
lea rcx, str._error:
call fcn.140094470
call fcn.1400011bd
mov r9, qword [rsp + 0x40]
lea rdx, [0x140167210]
mov qword [rsp + 0x28], rbx
mov r8d, 0x400
mov qword [rsp + 0x20], 0
mov rcx, qword [rax]
or rcx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___stdio_common_vsprintf]
lea rcx, [0x140167210]
call fcn.140094470
lea rcx, [0x1400c48b0]
call fcn.140002144
lea rcx, str.___Fatal_error_occurred__output_file_will_be_damaged_
call fcn.140094470
lea rcx, [0x1400c48b0]
call fcn.140002144
mov rax, qword [sym.imp.MiKTeX221000_kpathsea.dll_miktex_kpse_def_inst]
cmp dword [rax + 0x10], 0
je 0x1400943ed
lea rcx, str.kpathsea_debug_enabled__calling_abort__...
call fcn.140094470
call fcn.140003855
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3

Function at 0x140098880
Capabilities:
Write file on windows

Disassembly:
jmp 0x140098880
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x40
mov rax, qword [0x1400c3648]
xor rax, rsp
mov qword [rsp + 0x30], rax
mov rdi, rcx
call qword [sym.imp.MiKTeX221000_ptexenc.dll_get_enc_string]
mov rbx, rax
mov rcx, 0xffffffffffffffff
nop dword [rax]
inc rcx
cmp byte [rax + rcx], 0
jne 0x1400988b0
cmp rcx, 0xb
ja 0x140098933
lea rdx, [rsp + 0x20]
sub rdx, rbx
nop word [rax + rax]
movzx eax, byte [rbx]
mov byte [rdx + rbx], al
lea rbx, [rbx + 1]
test al, al
jne 0x1400988d0
inc rcx
cmp rcx, 0xc
jae 0x1400988fe
nop word [rax + rax]
mov byte [rsp + rcx + 0x20], 0
inc rcx
cmp rcx, 0xc
jb 0x1400988f0
mov edx, 1
lea rcx, [rsp + 0x20]
mov r9, rdi
lea r8d, [rdx + 0xb]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 0xc
jne 0x14009895b
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.14000259f
mov rbx, qword [rsp + 0x58]
add rsp, 0x40
pop rdi
ret
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rbx
lea rdx, str.Kanji_encoding_string___s__exceeds_11_bytes._n
mov rcx, rax
call fcn.140003602
mov ecx, 1
call fcn.1400039a4
int3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.__Could_not_dump_kanji._n
call fcn.140003602
mov ecx, 1
call fcn.1400039a4
int3
Function at 0x1400989d0
Capabilities:
Read file on windows

Disassembly:
jmp 0x1400989d0
sub rsp, 0x48
mov rax, qword [0x1400c3648]
xor rax, rsp
mov qword [rsp + 0x30], rax
mov edx, 1
mov r9, rcx
lea rcx, [rsp + 0x20]
lea r8d, [rdx + 0xb]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
cmp rax, 0xc
jne 0x140098ab5
mov qword [rsp + 0x58], rbx
lea edx, [rax + 0x22]
lea rcx, [rsp + 0x20]
mov qword [rsp + 0x40], rdi
mov byte [rsp + 0x2b], 0
call sub.VCRUNTIME140.dll_strchr
mov rdi, rax
test rax, rax
je 0x140098a30
mov byte [rax], 0
inc rdi
jmp 0x140098a35
lea rdi, [rsp + 0x20]
call qword [sym.imp.MiKTeX221000_ptexenc.dll_get_internal_enc]
mov rdx, rdi
xor ecx, ecx
mov ebx, eax
call fcn.140001c53
call qword [sym.imp.MiKTeX221000_ptexenc.dll_get_internal_enc]
mov rdi, qword [rsp + 0x40]
cmp eax, ebx
je 0x140098a9e
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Kanji_internal_encoding_incompatible_with_the_preloaded_format._n
call fcn.140003602
call qword [sym.imp.MiKTeX221000_ptexenc.dll_get_internal_enc]
mov ecx, eax
call qword [sym.imp.MiKTeX221000_ptexenc.dll_enc_to_string]
mov ecx, 2
mov rbx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rbx
lea rdx, str.Ill_stick_to__s._n
mov rcx, rax
call fcn.140003602
mov rbx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.14000259f
add rsp, 0x48
ret
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.__Could_not_undump_kanji._n
call fcn.140003602
mov ecx, 1
call fcn.1400039a4
int3

Function at 0x14009a5fc
Capabilities:
Parse pe header

Disassembly:
jmp 0x14009a5fc
sub rsp, 0x28
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test rax, rax
je 0x14009a646
mov ecx, 0x5a4d
cmp word [rax], cx
jne 0x14009a646
movsxd rcx, dword [rax + 0x3c]
add rcx, rax
cmp dword [rcx], 0x4550
jne 0x14009a646
mov eax, 0x20b
cmp word [rcx + 0x18], ax
jne 0x14009a646
cmp dword [rcx + 0x84], 0xe
jbe 0x14009a646
cmp dword [rcx + 0xf8], 0
setne al
jmp 0x14009a648
xor al, al
add rsp, 0x28
ret