joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140005390
Capabilities:
Terminate process

Disassembly:
jmp 0x140005390
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x30
mov r10, qword [0x1400294a0]
mov ebx, edx
movsxd rax, ecx
lea r8, [rax + rax*2]
mov edi, dword [r10 + r8*8 + 0xc]
cmp edx, 0xff
jle 0x140005400
mov dword [rsp + 0x20], edx
mov r8d, ecx
mov rcx, qword [0x140028110]
lea rdx, str.HINT_ERROR:_Outline__d__depth_level__d_to__d_out_of_range
mov r9d, edi
call fcn.1400015b4
mov rcx, qword [0x140028110]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
mov rcx, qword [0x140028110]
lea rdx, [0x14001cec4]
call fcn.1400015b4
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp ecx, dword [0x140025390]
jg 0x140005444
nop dword [rax + rax]
movsxd rax, ecx
lea rdx, [rax + rax*2]
cmp dword [r10 + rdx*8 + 0xc], edi
jne 0x140005427
mov dword [r10 + rdx*8 + 0xc], ebx
inc ecx
jmp 0x140005433
jle 0x140005444
lea edx, [rbx + 1]
call fcn.140001460
mov ecx, eax
cmp ecx, dword [0x140025390]
jg 0x140005444
mov r10, qword [0x1400294a0]
jmp 0x140005410
mov rbx, qword [rsp + 0x40]
mov eax, ecx
add rsp, 0x30
pop rdi
ret

Function at 0x1400055a0
Capabilities:
Terminate process

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x28], rdx
mov r8, rcx
mov rcx, qword [0x140028148]
lea rdx, str._s__d._d__s_n
mov r9d, 1
mov dword [rsp + 0x20], 4
call fcn.1400015b4
cdqe
cmp rax, 0x100
jbe 0x140005616
mov rcx, qword [0x140028110]
lea rdx, str.HINT_ERROR:_Banner_too_big
call fcn.1400015b4
mov rcx, qword [0x140028110]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
mov rcx, qword [0x140028110]
lea rdx, [0x14001cec4]
call fcn.1400015b4
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
add rsp, 0x38
ret

Function at 0x140005af0
Capabilities:
Terminate process
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x30
mov r9, qword [0x140028148]
mov rax, rdx
mov edi, r8d
mov edx, 1
movzx esi, cx
mov rcx, rax
mov r8d, r8d
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, rdi
je 0x140005b6e
mov rcx, qword [0x140028110]
lea rdx, str.HINT_ERROR:_short_write_0x_x____d_in_section__d
mov r9d, edi
mov dword [rsp + 0x20], esi
mov r8, rax
call fcn.1400015b4
mov rcx, qword [0x140028110]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
mov rcx, qword [0x140028110]
lea rdx, [0x14001cec4]
call fcn.1400015b4
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
Function at 0x1400066b0
Capabilities:
Terminate process

Disassembly:
jmp 0x1400066b0
sub rsp, 0x28
mov r9, qword [0x140028118]
cmp r9, qword [0x140028138]
jb 0x140006712
sub r9, qword [0x140028120]
lea rdx, str.HINT_ERROR:_HPUT_overrun_section__d_pos0x_x_n
movzx r8d, word [0x1400294c2]
mov rcx, qword [0x140028110]
call fcn.1400015b4
mov rcx, qword [0x140028110]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
mov rcx, qword [0x140028110]
lea rdx, [0x14001cec4]
call fcn.1400015b4
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
add rsp, 0x28
ret

Function at 0x140006c50
Capabilities:
Terminate process

Disassembly:
movsd qword [rsp + 0x10], xmm1
push rbx
sub rsp, 0x30
movaps xmmword [rsp + 0x20], xmm6
mov ebx, ecx
xorps xmm6, xmm6
ucomisd xmm1, xmm6
jp 0x140006cd1
jne 0x140006cd1
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x48]
call fcn.140005490
movsd xmm1, qword [rsp + 0x48]
ucomisd xmm1, xmm6
jp 0x140006cd1
jne 0x140006cd1
mov rcx, qword [0x140028110]
lea rdx, str.HINT_ERROR:_Unable_to_determine_aspect_ratio_of_image__d
mov r8d, ebx
call fcn.1400015b4
mov rcx, qword [0x140028110]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
mov rcx, qword [0x140028110]
lea rdx, [0x14001cec4]
call fcn.1400015b4
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm1
movaps xmm6, xmmword [rsp + 0x20]
add rsp, 0x30
pop rbx
jmp fcn.140001073
Function at 0x1400073e0
Capabilities:
Terminate process

Disassembly:
jmp 0x1400073e0
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
movzx eax, word [0x1400294c2]
xorps xmm0, xmm0
mov r10, qword [0x140028120]
mov r11d, ecx
mov rbp, qword [0x140028130]
mov r8, qword [0x140028118]
mov esi, dword [0x140028140]
lea r9, [rax + rax*2]
movsd xmm1, qword [0x14001dea0]
add r9, r9
mov edi, r8d
sub esi, r10d
sub edi, r10d
mov eax, dword [rbp + r9*8 + 0x28]
cvtsi2sd xmm0, rax
xor eax, eax
mulsd xmm0, qword [0x14001de60]
addsd xmm0, qword [0x14001de50]
comisd xmm0, xmm1
jb 0x14000746d
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x14000746d
movabs rcx, 0x8000000000000000
mov rax, rcx
cvttsd2si rcx, xmm0
add rcx, rax
lea eax, [rdi + r11]
mov edx, eax
cmp rcx, rdx
mov ebx, eax
mov eax, 0xffffffff
cmovae rbx, rcx
cmp rbx, rax
cmovae rbx, rax
cmp rbx, rdx
jae 0x1400074da
mov rcx, qword [0x140028110]
lea rdx, str.HINT_ERROR:_Unable_to_increase_buffer_size_0x_x_by_0x_x_byte
sub r8, r10
mov r9d, r11d
call fcn.1400015b4
mov rcx, qword [0x140028110]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
mov rcx, qword [0x140028110]
lea rdx, [0x14001cec4]
call fcn.1400015b4
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [rbp + r9*8 + 0x20]
mov rdx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
movzx ecx, word [0x1400294c2]
lea rdx, [rcx + rcx*2]
mov rcx, qword [0x140028130]
add rdx, rdx
mov qword [rcx + rdx*8 + 0x20], rax
movzx eax, word [0x1400294c2]
lea rcx, [rax + rax*2]
mov rax, qword [0x140028130]
add rcx, rcx
cmp qword [rax + rcx*8 + 0x20], 0
jne 0x14000755e
mov rcx, qword [0x140028110]
lea rdx, str.HINT_ERROR:_Out_of_memory_for_dir_section_no_.buffer
call fcn.1400015b4
mov rcx, qword [0x140028110]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
mov rcx, qword [0x140028110]
lea rdx, [0x14001cec4]
call fcn.1400015b4
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rbp, qword [rsp + 0x38]
mov dword [rax + rcx*8 + 0x28], ebx
movzx eax, word [0x1400294c2]
lea rcx, [rax + rax*2]
mov rax, qword [0x140028130]
add rcx, rcx
mov rdx, qword [rax + rcx*8 + 0x20]
mov qword [0x140028120], rdx
lea rax, [rdx + rbx]
mov rbx, qword [rsp + 0x30]
mov qword [0x140028138], rax
mov eax, esi
mov rsi, qword [rsp + 0x40]
add rax, rdx
mov qword [0x140028140], rax
mov eax, edi
add rax, rdx
mov qword [0x140028118], rax
add rsp, 0x20
pop rdi
ret
Function at 0x140007b50
Capabilities:
Terminate process

Disassembly:
jmp 0x140007b50
mov qword [rsp + 0x18], rbx
push rbp
push rdi
push r15
sub rsp, 0x20
mov rcx, qword [0x140028130]
xor ebp, ebp
mov r15d, 1
mov edi, ebp
mov word [0x1400294c2], r15w
mov rdx, qword [rcx + 0x50]
mov qword [0x140028120], rdx
mov eax, dword [rcx + 0x58]
add rax, rdx
mov qword [0x140028138], rax
mov eax, dword [rcx + 0x38]
add rax, rdx
cmp dword [0x140025380], ebp
mov qword [0x140028118], rax
jl 0x140007c6f
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], r14
mov r14d, ebp
nop dword [rax]
nop dword [rax + rax]
mov rsi, qword [0x1400294a8]
add rsi, r14
cmp dword [rsi + 8], ebp
je 0x140007c20
mov ebx, eax
mov rdx, rsi
sub ebx, dword [0x140028120]
inc rax
mov ecx, edi
mov qword [0x140028118], rax
call fcn.14000167c
movzx edx, al
mov ecx, ebx
call fcn.14000138e
cmp byte [rsi + 4], bpl
jne 0x140007c4c
mov rcx, qword [0x140028110]
lea rdx, str.HINT_WARNING:_Label__d_is_used_but_not_defined_n
mov r8d, edi
call fcn.1400015b4
mov rcx, qword [0x140028110]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
jmp 0x140007c4c
cmp byte [rsi + 4], bpl
je 0x140007c53
mov ebx, eax
mov rdx, rsi
sub ebx, dword [0x140028120]
inc rax
mov ecx, edi
mov qword [0x140028118], rax
call fcn.14000167c
movzx edx, al
mov ecx, ebx
call fcn.14000138e
mov rax, qword [0x140028118]
inc edi
add r14, 0x18
cmp edi, dword [0x140025380]
jle 0x140007bc0
mov r14, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x40]
mov edx, dword [0x140025390]
mov ecx, ebp
test edx, edx
js 0x140007d3e
nop
xor edx, edx
call fcn.140001460
mov edx, dword [0x140025390]
mov ecx, eax
cmp eax, edx
jle 0x140007c80
mov rax, qword [0x140028118]
test edx, edx
js 0x140007d3e
mov rdi, rbp
nop word [rax + rax]
mov rcx, qword [0x1400294a0]
mov ebx, eax
sub ebx, dword [0x140028120]
inc rax
add rcx, rdi
mov qword [0x140028118], rax
cmp dword [rcx + 8], 0
je 0x140007cfe
cmp qword [rcx], 0
je 0x140007cfe
call fcn.14000158c
movzx edx, al
mov ecx, ebx
call fcn.14000138e
inc ebp
add rdi, 0x18
cmp ebp, dword [0x140025390]
jg 0x140007d3e
mov rax, qword [0x140028118]
jmp 0x140007cb0
mov rcx, qword [0x140028110]
lea rdx, str.HINT_ERROR:_Definition_of_outline__d_has_an_empty_title
mov r8d, ebp
call fcn.1400015b4
mov rcx, qword [0x140028110]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
mov rcx, qword [0x140028110]
lea rdx, [0x14001cec4]
call fcn.1400015b4
mov ecx, r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rbx, qword [rsp + 0x50]
add rsp, 0x20
pop r15
pop rdi
pop rbp
jmp fcn.1400011cc
Function at 0x140007e70
Capabilities:
Terminate process

Disassembly:
jmp 0x140007e70
push rdi
sub rsp, 0x30
mov eax, dword [0x140025380]
movsxd rdi, ecx
cmp edi, eax
jle 0x140007ed0
mov r9, qword [str.label]
lea rdx, str.HINT_ERROR:_Reference__d_to__s_out_of_range__0____d_
mov rcx, qword [0x140028110]
mov r8d, edi
mov dword [rsp + 0x20], eax
call fcn.1400015b4
mov rcx, qword [0x140028110]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
mov rcx, qword [0x140028110]
lea rdx, [0x14001cec4]
call fcn.1400015b4
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, qword [0x1400294a8]
lea rcx, [rdi + rdi*2]
neg edx
mov qword [rsp + 0x40], rbx
sbb ebx, ebx
and ebx, 2
mov dword [rax + rcx*8 + 8], 1
cmp edi, 0xff
jle 0x140007f2f
or ebx, 1
call fcn.1400015c8
mov rax, qword [0x140028118]
mov ecx, edi
shr ecx, 8
mov byte [rax], cl
inc qword [0x140028118]
call fcn.1400015c8
mov rax, qword [0x140028118]
mov byte [rax], dil
mov rax, qword [0x140028118]
inc rax
jmp 0x140007f48
call fcn.1400015c8
mov rcx, qword [0x140028118]
mov byte [rcx], dil
mov rax, qword [0x140028118]
inc rax
or bl, 0xe0
mov qword [0x140028118], rax
movzx eax, bl
mov rbx, qword [rsp + 0x40]
add rsp, 0x30
pop rdi
ret
Function at 0x140008580
Capabilities:
Read file on windows
Terminate process
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r12
push r14
push r15
mov eax, 0x2030
call fcn.14000112c
sub rsp, rax
mov rax, qword [0x140027c40]
xor rax, rsp
mov qword [rsp + 0x2020], rax
xor r15d, r15d
mov r14d, 3
cmp r14w, word [0x1400294c0]
ja 0x140008692
mov rdx, qword [0x140028130]
mov ebp, 0x90
nop dword [rax]
mov r12, qword [rdx + rbp + 0x18]
lea rdx, [0x14001d0f4]
mov rcx, r12
call qword [sym.imp.MiKTeX221000_utf8wrap.dll_miktex_utf8_fopen]
mov rsi, rax
test rax, rax
je 0x14000875a
mov rcx, rax
xor ebx, ebx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_feof]
test eax, eax
jne 0x14000865b
mov r9, rsi
lea rcx, [rsp + 0x20]
mov edx, 1
mov r8d, 0x2000
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
mov r9, qword [0x140028148]
lea rcx, [rsp + 0x20]
mov r8, rax
mov edx, 1
mov rdi, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rdi, rax
jne 0x1400086c7
mov rcx, rsi
add rbx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_feof]
test eax, eax
je 0x140008610
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov rdx, qword [0x140028130]
mov eax, dword [rdx + rbp + 8]
cmp rbx, rax
jne 0x140008709
movzx eax, word [0x1400294c0]
add r15, rbx
inc r14d
add rbp, 0x30
cmp r14d, eax
jle 0x1400085e0
mov rax, r15
mov rcx, qword [rsp + 0x2020]
xor rcx, rsp
call fcn.140001334
lea r11, [rsp + 0x2030]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r12
ret
mov rcx, qword [0x140028110]
lea rdx, str.HINT_ERROR:_writing_file__s
mov r8, r12
call fcn.1400015b4
mov rcx, qword [0x140028110]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
mov rcx, qword [0x140028110]
lea rdx, [0x14001cec4]
call fcn.1400015b4
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movsxd rax, r14d
mov r8, rbx
lea rcx, [rax + rax*2]
add rcx, rcx
mov r9d, dword [rdx + rcx*8 + 8]
lea rdx, str.HINT_ERROR:_File_size_0x_x_does_not_match_section_0__size__u
mov rcx, qword [0x140028110]
call fcn.1400015b4
mov rcx, qword [0x140028110]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
mov rcx, qword [0x140028110]
lea rdx, [0x14001cec4]
call fcn.1400015b4
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movsxd rax, r14d
lea rdx, str.HINT_ERROR:_Unable_to_read_section__d__file__s
mov r9, r12
lea rcx, [rax + rax*2]
mov rax, qword [0x140028130]
add rcx, rcx
movzx r8d, word [rax + rcx*8 + 0x10]
mov rcx, qword [0x140028110]
call fcn.1400015b4
mov rcx, qword [0x140028110]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
mov rcx, qword [0x140028110]
lea rdx, [0x14001cec4]
call fcn.1400015b4
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x140008970
Capabilities:
Terminate process

Disassembly:
jmp 0x140008970
push rbx
sub rsp, 0x30
movsxd rbx, dword [section..data]
mov r11d, edx
mov r9d, dword [0x14002537c]
movzx r10d, cl
lea eax, [rbx - 1]
cdq
sub eax, edx
sar eax, 1
cmp eax, r9d
jle 0x1400089da
mov rcx, qword [0x140028110]
lea rdx, str.HINT_ERROR:_Page_range__d____d
mov r8d, eax
call fcn.1400015b4
mov rcx, qword [0x140028110]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
mov rcx, qword [0x140028110]
lea rdx, [0x14001cec4]
call fcn.1400015b4
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, qword [0x1400294b0]
test r11d, r11d
je 0x140008ac8
movsxd rcx, dword [rax + r10*4]
test ecx, ecx
je 0x140008a56
mov rax, qword [0x140028118]
lea rdx, str.HINT_ERROR:_Template__d_is_switched_on_at_0x_x_and_0x_x
sub rax, qword [0x140028120]
add rcx, rcx
mov qword [rsp + 0x20], rax
mov r8d, r10d
mov rax, qword [0x1400294b8]
mov r9d, dword [rax + rcx*8 + 4]
mov rcx, qword [0x140028110]
call fcn.1400015b4
mov rcx, qword [0x140028110]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
mov rcx, qword [0x140028110]
lea rdx, [0x14001cec4]
call fcn.1400015b4
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea r8, [r10*4]
mov rax, qword [0x1400294b8]
mov rcx, rbx
add rcx, rcx
mov byte [rax + rcx*8], r10b
movsxd rcx, dword [section..data]
mov rax, qword [0x1400294b8]
add rcx, rcx
mov edx, dword [0x140028118]
sub edx, dword [0x140028120]
mov dword [rax + rcx*8 + 4], edx
movsxd rcx, dword [section..data]
mov rax, qword [0x1400294b8]
add rcx, rcx
mov dword [rax + rcx*8 + 8], r11d
mov rax, qword [0x1400294b0]
test r11d, r11d
je 0x140008b27
mov ecx, dword [section..data]
mov dword [r8 + rax], ecx
inc dword [section..data]
add rsp, 0x30
pop rbx
ret
lea r8, [r10*4]
cmp dword [r8 + rax], 0
jne 0x140008a5e
mov r9, qword [0x140028118]
lea rdx, str.HINT_ERROR:_Template__d_is_switched_off_at_0x_x_but_was_not_on
sub r9, qword [0x140028120]
mov r8d, r10d
mov rcx, qword [0x140028110]
call fcn.1400015b4
mov rcx, qword [0x140028110]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
mov rcx, qword [0x140028110]
lea rdx, [0x14001cec4]
call fcn.1400015b4
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, dword [r8 + rax]
movsxd rdx, dword [section..data]
mov rax, qword [0x1400294b8]
add rdx, rdx
mov dword [rax + rdx*8 + 0xc], ecx
mov rax, qword [0x1400294b0]
mov ecx, dword [section..data]
movsxd rdx, dword [r8 + rax]
mov rax, qword [0x1400294b8]
add rdx, rdx
mov dword [rax + rdx*8 + 0xc], ecx
mov rax, qword [0x1400294b0]
mov dword [r8 + rax], 0
inc dword [section..data]
add rsp, 0x30
pop rbx
ret

Function at 0x140009160
Capabilities:
Terminate process
Write file on windows

Disassembly:
movzx eax, cx
lea rdx, [rax + rax*2]
mov rax, qword [0x140028130]
add rdx, rdx
mov r8d, dword [rax + rdx*8 + 8]
mov rdx, qword [rax + rdx*8 + 0x20]
jmp fcn.140005af0
Function at 0x140009190
Capabilities:
Terminate process

Disassembly:
jmp 0x140009190
push rbx
sub rsp, 0x20
mov ebx, ecx
test ecx, ecx
jne 0x1400091d9
mov rcx, qword [0x140028110]
lea rdx, str.HINT_ERROR:_Span_count_in_item_must_not_be_zero
call fcn.1400015b4
mov rcx, qword [0x140028110]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
mov rcx, qword [0x140028110]
lea rdx, [0x14001cec4]
call fcn.1400015b4
lea ecx, [rbx + 1]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp ebx, 7
jae 0x1400091e6
mov eax, ebx
add rsp, 0x20
pop rbx
ret
cmp ebx, 0xff
jbe 0x140009230
mov rcx, qword [0x140028110]
lea rdx, str.HINT_ERROR:_Span_count__d_must_be_less_than_255
mov r8d, ebx
call fcn.1400015b4
mov rcx, qword [0x140028110]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
mov rcx, qword [0x140028110]
lea rdx, [0x14001cec4]
call fcn.1400015b4
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.1400015c8
mov rax, qword [0x140028118]
mov byte [rax], bl
mov eax, 7
inc qword [0x140028118]
add rsp, 0x20
pop rbx
ret

Function at 0x140009450
Capabilities:
Terminate process

Disassembly:
jmp 0x140009450
push rbx
sub rsp, 0x20
mov rbx, rcx
test rcx, rcx
je 0x1400094d5
mov rdx, qword [0x140028118]
nop word [rax + rax]
mov rax, qword [0x140028138]
sub rax, rdx
cmp rax, 1
jge 0x14000948a
mov ecx, 1
call fcn.140001262
call fcn.1400015c8
mov rax, qword [0x140028118]
movzx ecx, byte [rbx]
mov byte [rax], cl
mov rdx, qword [0x140028118]
inc rdx
mov qword [0x140028118], rdx
movzx eax, byte [rbx]
inc rbx
test al, al
jne 0x140009470
mov rax, qword [0x140028138]
sub rax, rdx
cmp rax, 0x20
jge 0x1400094eb
mov ecx, 0x20
add rsp, 0x20
pop rbx
jmp fcn.140001262
call fcn.1400015c8
mov rax, qword [0x140028118]
mov byte [rax], 0
inc qword [0x140028118]
add rsp, 0x20
pop rbx
ret

Function at 0x140009590
Capabilities:
Terminate process

Disassembly:
jmp 0x140009590
push rbx
sub rsp, 0x20
mov ebx, ecx
cmp ecx, 0x20
ja 0x1400095ec
mov rax, qword [0x140028138]
sub rax, qword [0x140028118]
cmp rax, 2
jge 0x1400095bb
mov ecx, 2
call fcn.140001262
call fcn.1400015c8
mov rax, qword [0x140028118]
mov byte [rax], 0x1d
inc qword [0x140028118]
call fcn.1400015c8
mov rax, qword [0x140028118]
mov byte [rax], bl
inc qword [0x140028118]
add rsp, 0x20
pop rbx
ret
add rsp, 0x20
pop rbx
jmp fcn.1400015eb

Function at 0x140009610
Capabilities:
Terminate process

Disassembly:
jmp 0x140009610
push rbx
sub rsp, 0x30
movzx ebx, cl
cmp bl, 8
jae 0x140009657
mov rax, qword [0x140028138]
sub rax, qword [0x140028118]
cmp rax, 1
jge 0x14000963c
mov ecx, 1
call fcn.140001262
call fcn.1400015c8
mov rax, qword [0x140028118]
mov byte [rax], bl
inc qword [0x140028118]
add rsp, 0x30
pop rbx
ret
mov rcx, qword [0x140028110]
lea rdx, str.HINT_ERROR:_Use_F_d_instead_of__d_for_font__d_in_a_text
mov r8d, ebx
mov dword [rsp + 0x20], ebx
mov r9d, ebx
call fcn.1400015b4
mov rcx, qword [0x140028110]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
mov rcx, qword [0x140028110]
lea rdx, [0x14001cec4]
call fcn.1400015b4
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x1400096d0
Capabilities:
Terminate process

Disassembly:
jmp 0x1400096d0
push rbx
sub rsp, 0x20
mov rax, qword [0x140028138]
mov rbx, rcx
sub rax, qword [0x140028118]
cmp rax, 2
jge 0x1400096f7
mov ecx, 2
call fcn.140001262
mov r8d, dword [rbx]
lea rdx, [0x140000000]
lea eax, [r8 - 5]
cmp eax, 0x1a
ja case.0x140009722.14
cdqe
movzx eax, byte [rdx + rax + 0x9868]
mov ecx, dword [rdx + rax*4 + 0x9840]
add rcx, rdx
jmp rcx
call fcn.1400015c8
mov rax, qword [0x140028118]
mov byte [rax], 8
jmp 0x1400097be
call fcn.1400015c8
mov rax, qword [0x140028118]
mov byte [rax], 9
jmp 0x1400097be
call fcn.1400015c8
mov rax, qword [0x140028118]
mov byte [rax], 0xa
jmp 0x1400097be
call fcn.1400015c8
mov rax, qword [0x140028118]
mov byte [rax], 0xb
jmp 0x1400097be
call fcn.1400015c8
mov rax, qword [0x140028118]
mov byte [rax], 0xc
jmp 0x1400097be
call fcn.1400015c8
mov rax, qword [0x140028118]
mov byte [rax], 0xd
jmp 0x1400097be
call fcn.1400015c8
mov rax, qword [0x140028118]
mov byte [rax], 0xe
jmp 0x1400097be
call fcn.1400015c8
mov rax, qword [0x140028118]
mov byte [rax], 0xf
jmp 0x1400097be
call fcn.1400015c8
mov rax, qword [0x140028118]
mov byte [rax], 0x10
mov rax, qword [0x140028118]
inc rax
mov qword [0x140028118], rax
call fcn.1400015c8
mov rax, qword [0x140028118]
movzx ecx, byte [rbx + 4]
mov byte [rax], cl
inc qword [0x140028118]
add rsp, 0x20
pop rbx
ret
mov rcx, qword [0x140028110]
sar r8, 3
and r8d, 0x1f
mov r8, qword [rdx + r8*8 + 0x25010]
lea rdx, str.HINT_ERROR:_Kind__s_not_allowed_as_a_global_reference_in_a_text
call fcn.1400015b4
mov rcx, qword [0x140028110]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
mov rcx, qword [0x140028110]
lea rdx, [0x14001cec4]
call fcn.1400015b4
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x140009950
Capabilities:
Terminate process

Disassembly:
jmp 0x140009950
push rbx
sub rsp, 0x30
mov rax, qword [0x140028138]
mov ebx, ecx
sub rax, qword [0x140028118]
cmp rax, 4
jge 0x140009976
mov ecx, 4
call fcn.140001262
cmp ebx, 0x80
jae 0x140009988
call fcn.1400015c8
jmp 0x140009a26
cmp ebx, 0x800
jae 0x14000999f
call fcn.1400015c8
mov ecx, ebx
shr ecx, 6
or cl, 0xc0
jmp 0x140009a0b
cmp ebx, 0x10000
jae 0x1400099b6
call fcn.1400015c8
mov ecx, ebx
shr ecx, 0xc
or cl, 0xe0
jmp 0x1400099eb
cmp ebx, 0x200000
jae 0x140009a3c
call fcn.1400015c8
mov rax, qword [0x140028118]
mov ecx, ebx
shr ecx, 0x12
or cl, 0xf0
mov byte [rax], cl
inc qword [0x140028118]
call fcn.1400015c8
mov ecx, ebx
shr ecx, 0xc
and cl, 0x3f
or cl, 0x80
mov rax, qword [0x140028118]
mov byte [rax], cl
inc qword [0x140028118]
call fcn.1400015c8
mov ecx, ebx
shr ecx, 6
and cl, 0x3f
or cl, 0x80
mov rax, qword [0x140028118]
mov byte [rax], cl
inc qword [0x140028118]
call fcn.1400015c8
and bl, 0x3f
or bl, 0x80
mov rax, qword [0x140028118]
mov byte [rax], bl
inc qword [0x140028118]
add rsp, 0x30
pop rbx
ret
cmp ebx, 0x1fffff
jbe 0x140009a36
mov rcx, qword [0x140028110]
lea rdx, str.HINT_ERROR:_character_code__d_out_of_range___d____d_
xor r9d, r9d
mov dword [rsp + 0x20], 0x1fffff
mov r8d, ebx
call fcn.1400015b4
mov rcx, qword [0x140028110]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
mov rcx, qword [0x140028110]
lea rdx, [0x14001cec4]
call fcn.1400015b4
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3

Function at 0x140009d40
Capabilities:
Terminate process

Disassembly:
jmp 0x140009d40
mov qword [rsp + 0x10], rbx
push rsi
sub rsp, 0x30
mov eax, dword [0x140025380]
mov esi, edx
movsxd rbx, ecx
cmp ebx, eax
jle 0x140009da6
mov r9, qword [str.label]
lea rdx, str.HINT_ERROR:_Reference__d_to__s_out_of_range__0____d_
mov rcx, qword [0x140028110]
mov r8d, ebx
mov dword [rsp + 0x20], eax
call fcn.1400015b4
mov rcx, qword [0x140028110]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
mov rcx, qword [0x140028110]
lea rdx, [0x14001cec4]
call fcn.1400015b4
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, qword [0x1400294a8]
lea rcx, [rbx + rbx*2]
cmp byte [rax + rcx*8 + 4], 0
mov qword [rsp + 0x40], rdi
lea rdi, [rax + rcx*8]
je 0x140009de4
mov rcx, qword [0x140028110]
lea rdx, str.HINT_Duplicate_definition_of_label__d_n
mov r8d, ebx
call fcn.1400015b4
mov rcx, qword [0x140028110]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
mov byte [rdi + 4], sil
mov eax, dword [0x140028118]
sub eax, dword [0x140028120]
mov dword [rdi], eax
mov eax, dword [0x140028140]
sub eax, dword [0x140028120]
mov dword [rdi + 0x10], eax
mov eax, dword [0x140025004]
mov dword [rdi + 0xc], eax
mov rdi, qword [rsp + 0x40]
mov dword [0x140025004], ebx
mov rbx, qword [rsp + 0x48]
add rsp, 0x30
pop rsi
ret