joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14005e390
Capabilities:
Query environment variable

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x78
mov rbx, r8
mov edi, edx
mov rsi, rcx
cmp byte [0x1400a8d03], 1
jne 0x14005e3b5
cmp byte [0x1400a8d02], 0
jne 0x14005e3d4
jmp 0x14005e40d
lea rcx, str.LIBUNWIND_PRINT_APIS
call sym.getenv
mov byte [0x1400a8d03], 1
test rax, rax
setne byte [0x1400a8d02]
je 0x14005e40d
mov r14, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call r14
mov qword [rsp + 0x20], rbx
lea rdx, str.libunwind:___unw_set_reg_cursor_p__regNum_d__value0x_llx__n
mov rcx, rax
mov r8, rsi
mov r9d, edi
call dbg.fprintf
mov ecx, 2
call r14
mov rcx, rax
call sym.fflush
mov rax, qword [rsi]
mov rax, qword [rax + 0x10]
mov rcx, rsi
mov edx, edi
call qword [0x140091d00]
mov ecx, eax
mov eax, 0xffffe672
test cl, cl
je 0x14005e4b0
mov rax, qword [rsi]
mov rax, qword [rax + 0x20]
mov rcx, rsi
mov edx, edi
mov r8, rbx
call qword [0x140091d00]
xor eax, eax
cmp edi, 0xffffffff
jne 0x14005e4b0
mov rax, qword [rsi]
mov rax, qword [rax + 0x48]
lea rdx, [rsp + 0x30]
mov rcx, rsi
call qword [0x140091d00]
mov rax, qword [rsi]
mov rax, qword [rax + 0x68]
mov rcx, rsi
xor edx, edx
call qword [0x140091d00]
cmp qword [rsp + 0x50], 0
je 0x14005e4ae
mov rax, qword [rsi]
mov rax, qword [rax + 0x18]
mov rcx, rsi
mov edx, 0xfffffffe
call qword [0x140091d00]
add rax, qword [rsp + 0x50]
mov rcx, qword [rsi]
mov r9, qword [rcx + 0x20]
mov rcx, rsi
mov edx, 0xfffffffe
mov r8, rax
mov rax, r9
call qword [0x140091d00]
xor eax, eax
add rsp, 0x78
pop rbx
pop rdi
pop rsi
pop r14
ret

Function at 0x14005e4c0
Capabilities:
Query environment variable

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x28
mov rsi, r8
mov edi, edx
mov rbx, rcx
cmp byte [0x1400a8d03], 1
jne 0x14005e4e5
cmp byte [0x1400a8d02], 0
jne 0x14005e504
jmp 0x14005e53d
lea rcx, str.LIBUNWIND_PRINT_APIS
call sym.getenv
mov byte [0x1400a8d03], 1
test rax, rax
setne byte [0x1400a8d02]
je 0x14005e53d
mov r14, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call r14
mov qword [rsp + 0x20], rsi
lea rdx, str.libunwind:___unw_get_fpreg_cursor_p__regNum_d__value_p__n
mov rcx, rax
mov r8, rbx
mov r9d, edi
call dbg.fprintf
mov ecx, 2
call r14
mov rcx, rax
call sym.fflush
mov rax, qword [rbx]
mov rax, qword [rax + 0x28]
mov rcx, rbx
mov edx, edi
call qword [0x140091d00]
mov ecx, eax
mov eax, 0xffffe672
test cl, cl
je 0x14005e572
mov rax, qword [rbx]
mov rax, qword [rax + 0x30]
mov rcx, rbx
mov edx, edi
call qword [0x140091d00]
movsd qword [rsi], xmm0
xor eax, eax
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
ret
Function at 0x14005e580
Capabilities:
Query environment variable

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x40
movaps xmmword [rsp + 0x30], xmm6
movaps xmm6, xmm2
mov esi, edx
mov rdi, rcx
cmp byte [0x1400a8d03], 1
jne 0x14005e5a8
cmp byte [0x1400a8d02], 0
jne 0x14005e5c7
jmp 0x14005e5ff
lea rcx, str.LIBUNWIND_PRINT_APIS
call sym.getenv
mov byte [0x1400a8d03], 1
test rax, rax
setne byte [0x1400a8d02]
je 0x14005e5ff
mov rbx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call rbx
movsd qword [rsp + 0x20], xmm6
lea rdx, str.libunwind:___unw_set_fpreg_cursor_p__regNum_d__value_g__n
mov rcx, rax
mov r8, rdi
mov r9d, esi
call dbg.fprintf
mov ecx, 2
call rbx
mov rcx, rax
call sym.fflush
mov rax, qword [rdi]
mov rax, qword [rax + 0x28]
mov rcx, rdi
mov edx, esi
call qword [0x140091d00]
mov ecx, eax
mov eax, 0xffffe672
test cl, cl
je 0x14005e633
mov rax, qword [rdi]
mov rax, qword [rax + 0x38]
mov rcx, rdi
mov edx, esi
movaps xmm2, xmm6
call qword [0x140091d00]
xor eax, eax
movaps xmm6, xmmword [rsp + 0x30]
add rsp, 0x40
pop rbx
pop rdi
pop rsi
ret

Function at 0x14005e640
Capabilities:
Query environment variable

Disassembly:
push rsi
push rdi
sub rsp, 0x28
mov rsi, rcx
cmp byte [0x1400a8d03], 1
jne 0x14005e65d
cmp byte [0x1400a8d02], 0
jne 0x14005e67c
jmp 0x14005e6ab
lea rcx, str.LIBUNWIND_PRINT_APIS
call sym.getenv
mov byte [0x1400a8d03], 1
test rax, rax
setne byte [0x1400a8d02]
je 0x14005e6ab
mov rdi, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call rdi
lea rdx, str.libunwind:___unw_step_cursor_p__n
mov rcx, rax
mov r8, rsi
call dbg.fprintf
mov ecx, 2
call rdi
mov rcx, rax
call sym.fflush
mov rax, qword [rsi]
mov rax, qword [rax + 0x40]
mov r8, qword [0x140091d00]
mov rcx, rsi
xor edx, edx
add rsp, 0x28
pop rdi
pop rsi
jmp r8

Function at 0x14005e6d0
Capabilities:
Query environment variable

Disassembly:
push rsi
push rdi
sub rsp, 0x28
mov rsi, rcx
cmp byte [0x1400a8d03], 1
jne 0x14005e6ed
cmp byte [0x1400a8d02], 0
jne 0x14005e70c
jmp 0x14005e73b
lea rcx, str.LIBUNWIND_PRINT_APIS
call sym.getenv
mov byte [0x1400a8d03], 1
test rax, rax
setne byte [0x1400a8d02]
je 0x14005e73b
mov rdi, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call rdi
lea rdx, str.libunwind:___unw_step_stage2_cursor_p__n
mov rcx, rax
mov r8, rsi
call dbg.fprintf
mov ecx, 2
call rdi
mov rcx, rax
call sym.fflush
mov rax, qword [rsi]
mov rax, qword [rax + 0x40]
mov r8, qword [0x140091d00]
mov rcx, rsi
mov dl, 1
add rsp, 0x28
pop rdi
pop rsi
jmp r8
Function at 0x14005e760
Capabilities:
Query environment variable

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rsi, rdx
mov rdi, rcx
cmp byte [0x1400a8d03], 1
jne 0x14005e781
cmp byte [0x1400a8d02], 0
jne 0x14005e7a0
jmp 0x14005e7d2
lea rcx, str.LIBUNWIND_PRINT_APIS
call sym.getenv
mov byte [0x1400a8d03], 1
test rax, rax
setne byte [0x1400a8d02]
je 0x14005e7d2
mov rbx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call rbx
lea rdx, str.libunwind:___unw_get_proc_info_cursor_p__info_p__n
mov rcx, rax
mov r8, rdi
mov r9, rsi
call dbg.fprintf
mov ecx, 2
call rbx
mov rcx, rax
call sym.fflush
mov rax, qword [rdi]
mov rax, qword [rax + 0x48]
mov rcx, rdi
mov rdx, rsi
call qword [0x140091d00]
xor ecx, ecx
cmp qword [rsi + 8], 0
mov eax, 0xffffe66b
cmovne eax, ecx
add rsp, 0x20
pop rbx
pop rdi
pop rsi
ret

Function at 0x14005e800
Capabilities:
Query environment variable

Disassembly:
push rsi
push rdi
sub rsp, 0x28
mov rsi, rcx
cmp byte [0x1400a8d03], 1
jne 0x14005e81d
cmp byte [0x1400a8d02], 0
jne 0x14005e83c
jmp 0x14005e86b
lea rcx, str.LIBUNWIND_PRINT_APIS
call sym.getenv
mov byte [0x1400a8d03], 1
test rax, rax
setne byte [0x1400a8d02]
je 0x14005e86b
mov rdi, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call rdi
lea rdx, str.libunwind:___unw_resume_cursor_p__n
mov rcx, rax
mov r8, rsi
call dbg.fprintf
mov ecx, 2
call rdi
mov rcx, rax
call sym.fflush
mov rax, qword [rsi]
mov rax, qword [rax + 0x50]
mov rcx, rsi
call qword [0x140091d00]
mov eax, 0xffffe674
add rsp, 0x28
pop rdi
pop rsi
ret

Function at 0x14005e890
Capabilities:
Query environment variable

Disassembly:
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x30
mov rsi, r9
mov rdi, r8
mov rbx, rdx
mov r14, rcx
cmp byte [0x1400a8d03], 1
jne 0x14005e8bb
cmp byte [0x1400a8d02], 0
jne 0x14005e8da
jmp 0x14005e912
lea rcx, str.LIBUNWIND_PRINT_APIS
call sym.getenv
mov byte [0x1400a8d03], 1
test rax, rax
setne byte [0x1400a8d02]
je 0x14005e912
mov r15, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call r15
mov dword [rsp + 0x20], edi
lea rdx, str.libunwind:___unw_get_proc_name_cursor_p__buf_p__bufLen_lu__n
mov rcx, rax
mov r8, r14
mov r9, rbx
call dbg.fprintf
mov ecx, 2
call r15
mov rcx, rax
call sym.fflush
mov rax, qword [r14]
mov rax, qword [rax + 0x60]
mov rcx, r14
mov rdx, rbx
mov r8, rdi
mov r9, rsi
call qword [0x140091d00]
xor ecx, ecx
test al, al
mov eax, 0xffffe674
cmovne eax, ecx
add rsp, 0x30
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret
Function at 0x14005e950
Capabilities:
Query environment variable

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x20
mov esi, edx
mov rdi, rcx
cmp byte [0x1400a8d03], 1
jne 0x14005e970
cmp byte [0x1400a8d02], 0
jne 0x14005e98f
jmp 0x14005e9c1
lea rcx, str.LIBUNWIND_PRINT_APIS
call sym.getenv
mov byte [0x1400a8d03], 1
test rax, rax
setne byte [0x1400a8d02]
je 0x14005e9c1
mov rbx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call rbx
lea rdx, str.libunwind:___unw_is_fpreg_cursor_p__regNum_d__n
mov rcx, rax
mov r8, rdi
mov r9d, esi
call dbg.fprintf
mov ecx, 2
call rbx
mov rcx, rax
call sym.fflush
mov rax, qword [rdi]
mov rax, qword [rax + 0x28]
mov rcx, rdi
mov edx, esi
call qword [0x140091d00]
movzx eax, al
add rsp, 0x20
pop rbx
pop rdi
pop rsi
ret

Function at 0x14005e9e0
Capabilities:
Query environment variable

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x20
mov esi, edx
mov rdi, rcx
cmp byte [0x1400a8d03], 1
jne 0x14005ea00
cmp byte [0x1400a8d02], 0
jne 0x14005ea1f
jmp 0x14005ea51
lea rcx, str.LIBUNWIND_PRINT_APIS
call sym.getenv
mov byte [0x1400a8d03], 1
test rax, rax
setne byte [0x1400a8d02]
je 0x14005ea51
mov rbx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call rbx
lea rdx, str.libunwind:___unw_regname_cursor_p__regNum_d__n
mov rcx, rax
mov r8, rdi
mov r9d, esi
call dbg.fprintf
mov ecx, 2
call rbx
mov rcx, rax
call sym.fflush
mov rax, qword [rdi]
mov rax, qword [rax + 0x70]
mov r8, qword [0x140091d00]
mov rcx, rdi
mov edx, esi
add rsp, 0x20
pop rbx
pop rdi
pop rsi
jmp r8

Function at 0x14005ea70
Capabilities:
Query environment variable

Disassembly:
push rsi
push rdi
sub rsp, 0x28
mov rsi, rcx
cmp byte [0x1400a8d03], 1
jne 0x14005ea8d
cmp byte [0x1400a8d02], 0
jne 0x14005eaac
jmp 0x14005eadb
lea rcx, str.LIBUNWIND_PRINT_APIS
call sym.getenv
mov byte [0x1400a8d03], 1
test rax, rax
setne byte [0x1400a8d02]
je 0x14005eadb
mov rdi, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call rdi
lea rdx, str.libunwind:___unw_is_signal_frame_cursor_p__n
mov rcx, rax
mov r8, rsi
call dbg.fprintf
mov ecx, 2
call rdi
mov rcx, rax
call sym.fflush
mov rax, qword [rsi]
mov rax, qword [rax + 0x58]
mov rcx, rsi
call qword [0x140091d00]
movzx eax, al
add rsp, 0x28
pop rdi
pop rsi
ret

Function at 0x14005eb00
Capabilities:
Query environment variable

Disassembly:
sub rsp, 0x28
cmp byte [0x1400a8d01], 1
jne 0x14005eb1c
cmp byte [0x1400a8d00], 0
setne al
add rsp, 0x28
ret
lea rcx, str.LIBUNWIND_PRINT_UNWINDING
call sym.getenv
test rax, rax
setne al
setne byte [0x1400a8d00]
mov byte [0x1400a8d01], 1
add rsp, 0x28
ret

Function at 0x14005eb50
Capabilities:
Query environment variable

Disassembly:
sub rsp, 0x28
cmp byte [0x1400a8d05], 1
jne 0x14005eb6c
cmp byte [0x1400a8d04], 0
setne al
add rsp, 0x28
ret
lea rcx, str.LIBUNWIND_PRINT_DWARF
call sym.getenv
test rax, rax
setne al
setne byte [0x1400a8d04]
mov byte [0x1400a8d05], 1
add rsp, 0x28
ret
Function at 0x14005eef0
Capabilities:
Create thread

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x30
mov rsi, r8
mov rdi, rdx
mov rbx, rcx
mov ecx, 0x10
call sym..weak._Znwy.default.__clang_call_terminate
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
lea r8, [method.std::__1.__libcpp_beginthreadex_thunk_abi:ne180100__void_]
xor ecx, ecx
xor edx, edx
mov r9, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbx], rax
test rax, rax
je 0x14005ef48
xor eax, eax
add rsp, 0x30
pop rbx
pop rdi
pop rsi
ret
add rsp, 0x30
pop rbx
pop rdi
pop rsi
jmp qword [sym.imp.KERNEL32.dll_GetLastError]

Function at 0x140060340
Capabilities:
Write file on windows

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x28
mov rdi, rdx
mov rsi, rcx
add dword [rcx], 2
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rdx, [0x14008c206]
lea r8, str.SyntheticTemplateParamName
mov rcx, rax
call dbg.fprintf
mov eax, dword [rdi + 0x14]
mov edi, dword [rdi + 0x18]
cmp eax, 2
je 0x1400603b9
cmp eax, 1
je 0x1400603a0
test eax, eax
jne 0x1400603de
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str.TemplateParamKind::Type
mov edx, 0x17
jmp 0x1400603d0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str.TemplateParamKind::NonType
mov edx, 0x1a
jmp 0x1400603d0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str.TemplateParamKind::Template
mov edx, 0x1b
mov r8d, 1
mov r9, rax
call sym.fwrite
movzx ebx, byte [rsi + 4]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
test bl, bl
je 0x140060451
mov ecx, 0x2c
mov rdx, rax
call sym.fputc
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x14006044b
xor ebx, ebx
mov r14, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
nop word cs:[rax + rax]
mov ecx, 2
call r14
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebx
cmp ebx, dword [rsi]
jne 0x140060430
mov byte [rsi + 4], 0
jmp 0x14006046b
lea rcx, [0x14008c21f]
mov edx, 2
mov r8d, 1
mov r9, rax
call sym.fwrite
mov rbx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call rbx
lea rdx, str._llu
mov rcx, rax
mov r8, rdi
call dbg.fprintf
mov ecx, 2
call rbx
mov ecx, 0x29
mov rdx, rax
call sym.fputc
add dword [rsi], 0xfffffffe
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
ret
Function at 0x1400609e0
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rdi, rdx
mov rsi, rcx
mov rbx, qword [rdx]
mov r14, qword [rdx + 8]
inc dword [rcx]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x7b
mov rdx, rax
call sym.fputc
test r14, r14
je 0x140060a85
mov rcx, qword [rbx]
test rcx, rcx
je 0x140060a2f
mov rdx, rsi
call sym.void__anonymous_namespace_::itanium_demangle::Node::visit_std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor____std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor___const
cmp r14, 1
jne 0x140060a5a
jmp 0x140060a85
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sym.fwrite
cmp r14, 1
je 0x140060a85
shl r14, 3
mov r15d, 8
nop word cs:[rax + rax]
mov rdx, qword [rbx + r15]
mov rcx, rsi
call sym.void__anonymous_namespace_::DumpVisitor::printWithComma__anonymous_namespace_::itanium_demangle::Node_const___anonymous_namespace_::itanium_demangle::Node_const_
add r15, 8
cmp r14, r15
jne 0x140060a70
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x7d
mov rdx, rax
call sym.fputc
dec dword [rsi]
cmp qword [rdi + 8], 0
je 0x140060aaa
mov byte [rsi + 4], 1
add rsp, 0x20
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret

Function at 0x140060ac0
Capabilities:
Write file on windows

Disassembly:
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rdi, rdx
mov rsi, rcx
mov rbx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call rbx
mov ecx, 0x2c
mov rdx, rax
call sym.fputc
mov ecx, 2
call rbx
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x140060b2a
xor ebp, ebp
nop word cs:[rax + rax]
mov ecx, 2
call rbx
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebp
cmp ebp, dword [rsi]
jne 0x140060b10
mov byte [rsi + 4], 0
test rdi, rdi
je 0x140060b40
mov rcx, rdi
mov rdx, rsi
call sym.void__anonymous_namespace_::itanium_demangle::Node::visit_std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor____std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor___const
jmp 0x140060b65
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sym.fwrite
mov byte [rsi + 4], 1
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
ret
Function at 0x140060b80
Capabilities:
Write file on windows

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x30
mov rsi, rcx
mov r14, qword [rdx]
add dword [rcx], 2
mov rbx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call rbx
lea rdx, [0x14008c206]
lea r8, str.DotSuffix
mov rcx, rax
call dbg.fprintf
mov rdi, qword [r14 + 0x18]
movups xmm0, xmmword [r14 + 0x20]
movaps xmmword [rsp + 0x20], xmm0
mov ecx, 2
call rbx
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x140060bfa
xor ebp, ebp
mov ecx, 2
call rbx
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebp
cmp ebp, dword [rsi]
jne 0x140060be0
mov byte [rsi + 4], 0
test rdi, rdi
je 0x140060c10
mov rcx, rdi
mov rdx, rsi
call sym.void__anonymous_namespace_::itanium_demangle::Node::visit_std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor____std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor___const
jmp 0x140060c35
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sym.fwrite
mov byte [rsi + 4], 1
lea rdx, [rsp + 0x20]
mov rcx, rsi
call sym.void__anonymous_namespace_::DumpVisitor::printWithComma_std::__1::basic_string_view_char__std::__1::char_traits_char______std::__1::basic_string_view_char__std::__1::char_traits_char____
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x29
mov rdx, rax
call sym.fputc
add dword [rsi], 0xfffffffe
add rsp, 0x30
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret

Function at 0x140060c70
Capabilities:
Write file on windows

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x28
mov rsi, rdx
mov rdi, rcx
movzx ebx, byte [rcx + 4]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
test bl, bl
je 0x140060cf1
mov ecx, 0x2c
mov rdx, rax
call sym.fputc
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rdi], 0
je 0x140060ceb
xor ebx, ebx
mov r14, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
nop word cs:[rax + rax]
mov ecx, 2
call r14
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebx
cmp ebx, dword [rdi]
jne 0x140060cd0
mov byte [rdi + 4], 0
jmp 0x140060d0b
lea rcx, [0x14008c21f]
mov edx, 2
mov r8d, 1
mov r9, rax
call sym.fwrite
mov rdi, qword [rsi]
mov esi, dword [rsi + 8]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rdx, str.__.s_
mov rcx, rax
mov r8d, esi
mov r9, rdi
call dbg.fprintf
nop
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
ret
Function at 0x140060d40
Capabilities:
Write file on windows

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x30
mov rsi, rcx
mov rdi, qword [rdx]
add dword [rcx], 2
mov r14, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call r14
lea rdx, [0x14008c206]
lea r8, str.VendorExtQualType
mov rcx, rax
call dbg.fprintf
mov rbx, qword [rdi + 0x18]
movups xmm0, xmmword [rdi + 0x20]
movaps xmmword [rsp + 0x20], xmm0
mov rdi, qword [rdi + 0x30]
mov ecx, 2
call r14
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x140060dcb
xor ebp, ebp
nop word cs:[rax + rax]
mov ecx, 2
call r14
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebp
cmp ebp, dword [rsi]
jne 0x140060db0
mov byte [rsi + 4], 0
test rbx, rbx
je 0x140060de1
mov rcx, rbx
mov rdx, rsi
call sym.void__anonymous_namespace_::itanium_demangle::Node::visit_std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor____std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor___const
jmp 0x140060e06
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sym.fwrite
mov byte [rsi + 4], 1
lea rdx, [rsp + 0x20]
mov rcx, rsi
call sym.void__anonymous_namespace_::DumpVisitor::printWithComma_std::__1::basic_string_view_char__std::__1::char_traits_char______std::__1::basic_string_view_char__std::__1::char_traits_char____
mov rcx, rsi
mov rdx, rdi
call sym.void__anonymous_namespace_::DumpVisitor::printWithComma__anonymous_namespace_::itanium_demangle::Node_const___anonymous_namespace_::itanium_demangle::Node_const_
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x29
mov rdx, rax
call sym.fputc
add dword [rsi], 0xfffffffe
add rsp, 0x30
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
Function at 0x140060e50
Capabilities:
Write file on windows

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov rsi, rcx
mov rdi, qword [rdx]
add dword [rcx], 2
mov r14, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call r14
lea rdx, [0x14008c206]
lea r8, str.QualType
mov rcx, rax
call dbg.fprintf
mov rbx, qword [rdi + 0x18]
mov edi, dword [rdi + 0x14]
mov ecx, 2
call r14
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x140060ecb
xor ebp, ebp
nop dword [rax + rax]
mov ecx, 2
call r14
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebp
cmp ebp, dword [rsi]
jne 0x140060eb0
mov byte [rsi + 4], 0
test rbx, rbx
je 0x140060ee1
mov rcx, rbx
mov rdx, rsi
call sym.void__anonymous_namespace_::itanium_demangle::Node::visit_std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor____std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor___const
jmp 0x140060f06
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sym.fwrite
mov byte [rsi + 4], 1
mov rcx, rsi
mov edx, edi
call sym.void__anonymous_namespace_::DumpVisitor::printWithComma__anonymous_namespace_::itanium_demangle::Qualifiers___anonymous_namespace_::itanium_demangle::Qualifiers_
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x29
mov rdx, rax
call sym.fputc
add dword [rsi], 0xfffffffe
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
Function at 0x140060f40
Capabilities:
Write file on windows

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x28
mov esi, edx
mov rdi, rcx
movzx ebx, byte [rcx + 4]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
test bl, bl
je 0x1400610cb
mov ecx, 0x2c
mov rdx, rax
call sym.fputc
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rdi], 0
je 0x140060fbb
xor ebx, ebx
mov r14, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
nop dword [rax + rax]
mov ecx, 2
call r14
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebx
cmp ebx, dword [rdi]
jne 0x140060fa0
mov byte [rdi + 4], 0
test esi, esi
je 0x1400610ed
test sil, 1
je 0x140061020
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str.QualConst
mov edx, 9
mov r8d, 1
mov r9, rax
call sym.fwrite
and esi, 0xfffffffe
je 0x1400610c1
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, [0x14008c27b]
mov edx, 3
mov r8d, 1
mov r9, rax
call sym.fwrite
test sil, 2
je 0x140061075
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str.QualVolatile
mov edx, 0xc
mov r8d, 1
mov r9, rax
call sym.fwrite
and esi, 0xfffffffd
je 0x1400610c1
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, [0x14008c27b]
mov edx, 3
mov r8d, 1
mov r9, rax
call sym.fwrite
test sil, 4
je 0x1400610c1
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str.QualRestrict
mov edx, 0xc
mov r8d, 1
mov r9, rax
call sym.fwrite
test esi, 0xfffffffb
je 0x1400610c1
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, [0x14008c27b]
mov edx, 3
jmp 0x140061104
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
ret
lea rcx, [0x14008c21f]
mov edx, 2
mov r8d, 1
mov r9, rax
call sym.fwrite
test esi, esi
jne 0x140060fc7
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str.QualNone
mov edx, 8
mov r8d, 1
mov r9, rax
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
jmp sym.fwrite