joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140085d40
Capabilities:
Write file on windows

Disassembly:
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rcx
mov rdi, qword [rdx]
add dword [rcx], 2
mov rbx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call rbx
lea rdx, [0x1400b36b6]
lea r8, str.ConversionOperatorType
mov rcx, rax
call dbg.fprintf
mov rdi, qword [rdi + 0x18]
mov ecx, 2
call rbx
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x140085dba
xor ebp, ebp
nop word cs:[rax + rax]
mov ecx, 2
call rbx
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebp
cmp ebp, dword [rsi]
jne 0x140085da0
mov byte [rsi + 4], 0
test rdi, rdi
je 0x140085dd0
mov rcx, rdi
mov rdx, rsi
call sym.unk_3721
jmp 0x140085df5
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sym.fwrite
mov byte [rsi + 4], 1
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x29
mov rdx, rax
call sym.fputc
add dword [rsi], 0xfffffffe
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
ret

Function at 0x140085e20
Capabilities:
Write file on windows

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x30
mov rsi, rcx
mov r14, qword [rdx]
add dword [rcx], 2
mov rbx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call rbx
lea rdx, [0x1400b36b6]
lea r8, str.PostfixQualifiedType
mov rcx, rax
call dbg.fprintf
mov rdi, qword [r14 + 0x18]
movups xmm0, xmmword [r14 + 0x20]
movaps xmmword [rsp + 0x20], xmm0
mov ecx, 2
call rbx
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x140085e9a
xor ebp, ebp
mov ecx, 2
call rbx
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebp
cmp ebp, dword [rsi]
jne 0x140085e80
mov byte [rsi + 4], 0
test rdi, rdi
je 0x140085eb0
mov rcx, rdi
mov rdx, rsi
call sym.unk_3721
jmp 0x140085ed5
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sym.fwrite
mov byte [rsi + 4], 1
lea rdx, [rsp + 0x20]
mov rcx, rsi
call sym.unk_3738
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x29
mov rdx, rax
call sym.fputc
add dword [rsi], 0xfffffffe
add rsp, 0x30
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret

Function at 0x140085ff0
Capabilities:
Write file on windows

Disassembly:
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rdi, rdx
mov rsi, rcx
mov rbx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call rbx
mov ecx, 0x2c
mov rdx, rax
call sym.fputc
mov ecx, 2
call rbx
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x14008605a
xor ebp, ebp
nop word cs:[rax + rax]
mov ecx, 2
call rbx
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebp
cmp ebp, dword [rsi]
jne 0x140086040
mov byte [rsi + 4], 0
test rdi, rdi
je 0x140086070
mov rcx, rdi
mov rdx, rsi
call sym.unk_3721
jmp 0x140086095
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sym.fwrite
mov byte [rsi + 4], 1
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
ret
Function at 0x140086190
Capabilities:
Write file on windows

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x30
mov rsi, rcx
mov r14, qword [rdx]
add dword [rcx], 2
mov rbx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call rbx
lea rdx, [0x1400b36b6]
lea r8, str.AbiTagAttr
mov rcx, rax
call dbg.fprintf
mov rdi, qword [r14 + 0x18]
movups xmm0, xmmword [r14 + 0x20]
movaps xmmword [rsp + 0x20], xmm0
mov ecx, 2
call rbx
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x14008620a
xor ebp, ebp
mov ecx, 2
call rbx
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebp
cmp ebp, dword [rsi]
jne 0x1400861f0
mov byte [rsi + 4], 0
test rdi, rdi
je 0x140086220
mov rcx, rdi
mov rdx, rsi
call sym.unk_3721
jmp 0x140086245
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sym.fwrite
mov byte [rsi + 4], 1
lea rdx, [rsp + 0x20]
mov rcx, rsi
call sym.unk_3738
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x29
mov rdx, rax
call sym.fputc
add dword [rsi], 0xfffffffe
add rsp, 0x30
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret

Function at 0x140086350
Capabilities:
Write file on windows

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x30
mov rsi, rcx
mov r14, qword [rdx]
add dword [rcx], 2
mov rbx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call rbx
lea rdx, [0x1400b36b6]
lea r8, str.ObjCProtoName
mov rcx, rax
call dbg.fprintf
mov rdi, qword [r14 + 0x18]
movups xmm0, xmmword [r14 + 0x20]
movaps xmmword [rsp + 0x20], xmm0
mov ecx, 2
call rbx
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x1400863ca
xor ebp, ebp
mov ecx, 2
call rbx
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebp
cmp ebp, dword [rsi]
jne 0x1400863b0
mov byte [rsi + 4], 0
test rdi, rdi
je 0x1400863e0
mov rcx, rdi
mov rdx, rsi
call sym.unk_3721
jmp 0x140086405
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sym.fwrite
mov byte [rsi + 4], 1
lea rdx, [rsp + 0x20]
mov rcx, rsi
call sym.unk_3738
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x29
mov rdx, rax
call sym.fputc
add dword [rsi], 0xfffffffe
add rsp, 0x30
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
Function at 0x140086440
Capabilities:
Write file on windows

Disassembly:
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rcx
mov rdi, qword [rdx]
add dword [rcx], 2
mov rbx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call rbx
lea rdx, [0x1400b36b6]
lea r8, str.PointerType
mov rcx, rax
call dbg.fprintf
mov rdi, qword [rdi + 0x18]
mov ecx, 2
call rbx
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x1400864ba
xor ebp, ebp
nop word cs:[rax + rax]
mov ecx, 2
call rbx
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebp
cmp ebp, dword [rsi]
jne 0x1400864a0
mov byte [rsi + 4], 0
test rdi, rdi
je 0x1400864d0
mov rcx, rdi
mov rdx, rsi
call sym.unk_3721
jmp 0x1400864f5
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sym.fwrite
mov byte [rsi + 4], 1
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x29
mov rdx, rax
call sym.fputc
add dword [rsi], 0xfffffffe
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
ret

Function at 0x140086520
Capabilities:
Write file on windows

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov rsi, rcx
mov r14, qword [rdx]
add dword [rcx], 2
mov rbx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call rbx
lea rdx, [0x1400b36b6]
lea r8, str.ReferenceType
mov rcx, rax
call dbg.fprintf
mov rdi, qword [r14 + 0x18]
mov ebp, dword [r14 + 0x20]
mov ecx, 2
call rbx
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x14008659c
xor r14d, r14d
nop dword [rax + rax]
mov ecx, 2
call rbx
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc r14d
cmp r14d, dword [rsi]
jne 0x140086580
mov byte [rsi + 4], 0
test rdi, rdi
je 0x1400865b2
mov rcx, rdi
mov rdx, rsi
call sym.unk_3721
jmp 0x1400865d7
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sym.fwrite
mov byte [rsi + 4], 1
mov ecx, 2
call rbx
mov ecx, 0x2c
mov rdx, rax
call sym.fputc
mov ecx, 2
call rbx
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x14008662a
xor edi, edi
nop word [rax + rax]
mov ecx, 2
call rbx
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc edi
cmp edi, dword [rsi]
jne 0x140086610
mov byte [rsi + 4], 0
test ebp, ebp
je 0x140086640
cmp ebp, 1
jne 0x140086668
lea rdi, str.ReferenceKind::RValue
jmp 0x140086647
lea rdi, str.ReferenceKind::LValue
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov edx, 0x15
mov r8d, 1
mov rcx, rdi
mov r9, rax
call sym.fwrite
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x29
mov rdx, rax
call sym.fputc
add dword [rsi], 0xfffffffe
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
Function at 0x140086690
Capabilities:
Write file on windows

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov rsi, rcx
mov rdi, qword [rdx]
add dword [rcx], 2
mov r14, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call r14
lea rdx, [0x1400b36b6]
lea r8, str.PointerToMemberType
mov rcx, rax
call dbg.fprintf
mov rbx, qword [rdi + 0x18]
mov rdi, qword [rdi + 0x20]
mov ecx, 2
call r14
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x14008670b
xor ebp, ebp
nop dword [rax]
mov ecx, 2
call r14
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebp
cmp ebp, dword [rsi]
jne 0x1400866f0
mov byte [rsi + 4], 0
test rbx, rbx
je 0x140086721
mov rcx, rbx
mov rdx, rsi
call sym.unk_3721
jmp 0x140086746
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sym.fwrite
mov byte [rsi + 4], 1
mov rcx, rsi
mov rdx, rdi
call sym.unk_3736
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x29
mov rdx, rax
call sym.fputc
add dword [rsi], 0xfffffffe
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret

Function at 0x140086780
Capabilities:
Write file on windows

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov rsi, rcx
mov rdi, qword [rdx]
add dword [rcx], 2
mov r14, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call r14
lea rdx, [0x1400b36b6]
lea r8, str.ArrayType
mov rcx, rax
call dbg.fprintf
mov rbx, qword [rdi + 0x18]
mov rdi, qword [rdi + 0x20]
mov ecx, 2
call r14
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x1400867fb
xor ebp, ebp
nop dword [rax]
mov ecx, 2
call r14
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebp
cmp ebp, dword [rsi]
jne 0x1400867e0
mov byte [rsi + 4], 0
test rbx, rbx
je 0x140086811
mov rcx, rbx
mov rdx, rsi
call sym.unk_3721
jmp 0x140086836
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sym.fwrite
mov byte [rsi + 4], 1
mov rcx, rsi
mov rdx, rdi
call sym.unk_3745
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x29
mov rdx, rax
call sym.fputc
add dword [rsi], 0xfffffffe
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
Function at 0x140086870
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x30
mov rsi, rcx
mov rdi, qword [rdx]
add dword [rcx], 2
mov r15, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call r15
lea rdx, [0x1400b36b6]
lea r8, str.FunctionType
mov rcx, rax
call dbg.fprintf
mov r14, qword [rdi + 0x18]
movups xmm0, xmmword [rdi + 0x20]
movaps xmmword [rsp + 0x20], xmm0
mov ebp, dword [rdi + 0x30]
movzx ebx, byte [rdi + 0x34]
mov rdi, qword [rdi + 0x38]
mov ecx, 2
call r15
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x14008690d
xor r12d, r12d
nop word cs:[rax + rax]
mov ecx, 2
call r15
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc r12d
cmp r12d, dword [rsi]
jne 0x1400868f0
mov byte [rsi + 4], 0
test r14, r14
je 0x140086923
mov rcx, r14
mov rdx, rsi
call sym.unk_3721
jmp 0x140086948
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sym.fwrite
mov byte [rsi + 4], 1
lea rdx, [rsp + 0x20]
mov rcx, rsi
call sym.unk_3755
mov rcx, rsi
mov edx, ebp
call sym.unk_3741
mov rcx, rsi
mov edx, ebx
call sym.unk_3756
mov rcx, rsi
mov rdx, rdi
call sym.unk_3736
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x29
mov rdx, rax
call sym.fputc
add dword [rsi], 0xfffffffe
add rsp, 0x30
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
Function at 0x1400869b0
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rdi, rdx
mov rsi, rcx
cmp byte [rcx + 4], 0
jne 0x1400869d3
cmp qword [rdi + 8], 0
je 0x140086a38
mov rbx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call rbx
mov ecx, 0x2c
mov rdx, rax
call sym.fputc
mov ecx, 2
call rbx
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x140086a30
xor ebp, ebp
nop dword [rax]
mov ecx, 2
call rbx
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebp
cmp ebp, dword [rsi]
jne 0x140086a10
mov byte [rsi + 4], 0
jmp 0x140086a5f
xor ebp, ebp
mov byte [rsi + 4], 0
jmp 0x140086a5f
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, [0x1400b36cf]
mov edx, 2
mov r8d, 1
mov r9, rax
call sym.fwrite
mov ebp, dword [rsi]
mov r15, qword [rdi]
mov r14, qword [rdi + 8]
inc ebp
mov dword [rsi], ebp
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x7b
mov rdx, rax
call sym.fputc
test r14, r14
je 0x140086bb0
lea r12, [r15 + r14*8]
mov al, 1
mov r13, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rdi, str._null_
jmp 0x140086ad3
test rbx, rbx
je 0x140086b41
mov rcx, rbx
mov rdx, rsi
call sym.unk_3721
add r15, 8
xor eax, eax
cmp r15, r12
je 0x140086b8b
mov rbx, qword [r15]
test al, 1
jne 0x140086ab0
mov ecx, 2
call r13
mov ecx, 0x2c
mov rdx, rax
call sym.fputc
mov ecx, 2
call r13
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x140086b2b
xor ebp, ebp
nop dword [rax + rax]
mov ecx, 2
call r13
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebp
cmp ebp, dword [rsi]
jne 0x140086b10
mov byte [rsi + 4], 0
test rbx, rbx
je 0x140086b64
mov rcx, rbx
mov rdx, rsi
call sym.unk_3721
jmp 0x140086b82
mov ecx, 2
call r13
mov edx, 6
mov r8d, 1
mov rcx, rdi
mov r9, rax
call sym.fwrite
jmp 0x140086ac4
mov ecx, 2
call r13
mov edx, 6
mov r8d, 1
mov rcx, rdi
mov r9, rax
call sym.fwrite
mov byte [rsi + 4], 1
jmp 0x140086ac4
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x7d
mov rdx, rax
call sym.fputc
dec dword [rsi]
test r14, r14
je 0x140086bca
mov byte [rsi + 4], 1
jmp 0x140086bca
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x7d
mov rdx, rax
call sym.fputc
dec dword [rsi]
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x140086be0
Capabilities:
Write file on windows

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x28
mov ebx, edx
mov rsi, rcx
movzx edi, byte [rcx + 4]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
test dil, dil
je 0x140086c89
mov ecx, 0x2c
mov rdx, rax
call sym.fputc
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x140086c5b
xor edi, edi
mov r14, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
nop dword [rax]
mov ecx, 2
call r14
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc edi
cmp edi, dword [rsi]
jne 0x140086c40
mov byte [rsi + 4], 0
cmp bl, 2
je 0x140086ca8
movzx eax, bl
cmp eax, 1
je 0x140086cbc
test eax, eax
jne 0x140086cea
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str.FunctionRefQual::FrefQualNone
mov edx, 0x1d
jmp 0x140086cd3
lea rcx, [0x1400b36cf]
mov edx, 2
mov r8d, 1
mov r9, rax
call sym.fwrite
cmp bl, 2
jne 0x140086c64
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str.FunctionRefQual::FrefQualRValue
jmp 0x140086cce
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str.FunctionRefQual::FrefQualLValue
mov edx, 0x1f
mov r8d, 1
mov r9, rax
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
jmp sym.fwrite
nop
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
ret

Function at 0x140086d00
Capabilities:
Write file on windows

Disassembly:
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rcx
mov rdi, qword [rdx]
add dword [rcx], 2
mov rbx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call rbx
lea rdx, [0x1400b36b6]
lea r8, str.NoexceptSpec
mov rcx, rax
call dbg.fprintf
mov rdi, qword [rdi + 0x18]
mov ecx, 2
call rbx
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x140086d7a
xor ebp, ebp
nop word cs:[rax + rax]
mov ecx, 2
call rbx
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebp
cmp ebp, dword [rsi]
jne 0x140086d60
mov byte [rsi + 4], 0
test rdi, rdi
je 0x140086d90
mov rcx, rdi
mov rdx, rsi
call sym.unk_3721
jmp 0x140086db5
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sym.fwrite
mov byte [rsi + 4], 1
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x29
mov rdx, rax
call sym.fputc
add dword [rsi], 0xfffffffe
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
ret
Function at 0x140086eb0
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x48
mov rsi, rcx
mov rbx, qword [rdx]
add dword [rcx], 2
mov rbp, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call rbp
lea rdx, [0x1400b36b6]
lea r8, str.FunctionEncoding
mov rcx, rax
call dbg.fprintf
mov r13, qword [rbx + 0x18]
mov r12, qword [rbx + 0x20]
movups xmm0, xmmword [rbx + 0x28]
movaps xmmword [rsp + 0x30], xmm0
mov r15, qword [rbx + 0x38]
mov r14, qword [rbx + 0x40]
mov edi, dword [rbx + 0x48]
movzx eax, byte [rbx + 0x4c]
mov byte [rsp + 0x2f], al
mov ecx, 2
call rbp
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x140086f4a
xor ebx, ebx
nop dword [rax]
mov ecx, 2
call rbp
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebx
cmp ebx, dword [rsi]
jne 0x140086f30
mov byte [rsi + 4], 0
test r13, r13
je 0x140086f60
mov rcx, r13
mov rdx, rsi
call sym.unk_3721
jmp 0x140086f85
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sym.fwrite
mov byte [rsi + 4], 1
mov rcx, rsi
mov rdx, r12
call sym.unk_3736
lea rdx, [rsp + 0x30]
mov rcx, rsi
call sym.unk_3755
mov rcx, rsi
mov rdx, r15
call sym.unk_3736
mov rcx, rsi
mov rdx, r14
call sym.unk_3736
mov rcx, rsi
mov edx, edi
call sym.unk_3741
mov rcx, rsi
movzx edx, byte [rsp + 0x2f]
call sym.unk_3756
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x29
mov rdx, rax
call sym.fputc
add dword [rsi], 0xfffffffe
add rsp, 0x48
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret

Function at 0x140087000
Capabilities:
Write file on windows

Disassembly:
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rcx
mov rdi, qword [rdx]
add dword [rcx], 2
mov rbx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call rbx
lea rdx, [0x1400b36b6]
lea r8, str.LiteralOperator
mov rcx, rax
call dbg.fprintf
mov rdi, qword [rdi + 0x18]
mov ecx, 2
call rbx
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x14008707a
xor ebp, ebp
nop word cs:[rax + rax]
mov ecx, 2
call rbx
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebp
cmp ebp, dword [rsi]
jne 0x140087060
mov byte [rsi + 4], 0
test rdi, rdi
je 0x140087090
mov rcx, rdi
mov rdx, rsi
call sym.unk_3721
jmp 0x1400870b5
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sym.fwrite
mov byte [rsi + 4], 1
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x29
mov rdx, rax
call sym.fputc
add dword [rsi], 0xfffffffe
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
ret
Function at 0x1400871c0
Capabilities:
Write file on windows

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov rsi, rcx
mov rdi, qword [rdx]
add dword [rcx], 2
mov r14, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call r14
lea rdx, [0x1400b36b6]
lea r8, str.CtorVtableSpecialName
mov rcx, rax
call dbg.fprintf
mov rbx, qword [rdi + 0x18]
mov rdi, qword [rdi + 0x20]
mov ecx, 2
call r14
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x14008723b
xor ebp, ebp
nop dword [rax]
mov ecx, 2
call r14
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebp
cmp ebp, dword [rsi]
jne 0x140087220
mov byte [rsi + 4], 0
test rbx, rbx
je 0x140087251
mov rcx, rbx
mov rdx, rsi
call sym.unk_3721
jmp 0x140087276
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sym.fwrite
mov byte [rsi + 4], 1
mov rcx, rsi
mov rdx, rdi
call sym.unk_3736
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x29
mov rdx, rax
call sym.fputc
add dword [rsi], 0xfffffffe
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret

Function at 0x1400872b0
Capabilities:
Write file on windows

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov rsi, rcx
mov rdi, qword [rdx]
add dword [rcx], 2
mov r14, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call r14
lea rdx, [0x1400b36b6]
lea r8, str.QualifiedName
mov rcx, rax
call dbg.fprintf
mov rbx, qword [rdi + 0x18]
mov rdi, qword [rdi + 0x20]
mov ecx, 2
call r14
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x14008732b
xor ebp, ebp
nop dword [rax]
mov ecx, 2
call r14
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebp
cmp ebp, dword [rsi]
jne 0x140087310
mov byte [rsi + 4], 0
test rbx, rbx
je 0x140087341
mov rcx, rbx
mov rdx, rsi
call sym.unk_3721
jmp 0x140087366
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sym.fwrite
mov byte [rsi + 4], 1
mov rcx, rsi
mov rdx, rdi
call sym.unk_3736
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x29
mov rdx, rax
call sym.fputc
add dword [rsi], 0xfffffffe
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret