joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140062150
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x40
mov rsi, rcx
mov rdi, qword [rdx]
add dword [rcx], 2
mov r15, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call r15
lea rdx, [0x14008cdcf]
lea r8, str.FunctionType
mov rcx, rax
call dbg.fprintf
mov r14, qword [rdi + 0x18]
movups xmm0, xmmword [rdi + 0x20]
movaps xmmword [rsp + 0x20], xmm0
mov ebp, dword [rdi + 0x30]
movzx ebx, byte [rdi + 0x34]
mov rdi, qword [rdi + 0x38]
mov ecx, 2
call r15
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x1400621ed
xor r12d, r12d
nop word cs:[rax + rax]
mov ecx, 2
call r15
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc r12d
cmp r12d, dword [rsi]
jne 0x1400621d0
mov byte [rsi + 4], 0
test r14, r14
je 0x140062203
mov rcx, r14
mov rdx, rsi
call sym.void__anonymous_namespace_::itanium_demangle::Node::visit_std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor____std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor___const
jmp 0x140062228
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sym.fwrite
mov byte [rsi + 4], 1
movaps xmm0, xmmword [rsp + 0x20]
movaps xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
mov rcx, rsi
call sym.void__anonymous_namespace_::DumpVisitor::printWithComma__anonymous_namespace_::itanium_demangle::NodeArray___anonymous_namespace_::itanium_demangle::NodeArray_
mov rcx, rsi
mov edx, ebp
call sym.void__anonymous_namespace_::DumpVisitor::printWithComma__anonymous_namespace_::itanium_demangle::Qualifiers___anonymous_namespace_::itanium_demangle::Qualifiers_
mov rcx, rsi
mov edx, ebx
call sym.void__anonymous_namespace_::DumpVisitor::printWithComma__anonymous_namespace_::itanium_demangle::FunctionRefQual___anonymous_namespace_::itanium_demangle::FunctionRefQual_
mov rcx, rsi
mov rdx, rdi
call sym.void__anonymous_namespace_::DumpVisitor::printWithComma__anonymous_namespace_::itanium_demangle::Node_const___anonymous_namespace_::itanium_demangle::Node_const_
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x29
mov rdx, rax
call sym.fputc
add dword [rsi], 0xfffffffe
add rsp, 0x40
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
Function at 0x140062290
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rdi, rdx
mov rsi, rcx
cmp byte [rcx + 4], 0
jne 0x1400622b3
cmp qword [rdi + 8], 0
je 0x140062318
mov rbx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call rbx
mov ecx, 0x2c
mov rdx, rax
call sym.fputc
mov ecx, 2
call rbx
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x140062310
xor ebp, ebp
nop dword [rax]
mov ecx, 2
call rbx
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebp
cmp ebp, dword [rsi]
jne 0x1400622f0
mov byte [rsi + 4], 0
jmp 0x14006233f
xor ebp, ebp
mov byte [rsi + 4], 0
jmp 0x14006233f
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, [0x14008cde8]
mov edx, 2
mov r8d, 1
mov r9, rax
call sym.fwrite
mov ebp, dword [rsi]
mov r15, qword [rdi]
mov r14, qword [rdi + 8]
inc ebp
mov dword [rsi], ebp
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x7b
mov rdx, rax
call sym.fputc
test r14, r14
je 0x140062490
lea r12, [r15 + r14*8]
mov al, 1
mov r13, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rdi, str._null_
jmp 0x1400623b2
mov ecx, 2
call r13
mov edx, 6
mov r8d, 1
mov rcx, rdi
mov r9, rax
call sym.fwrite
mov byte [rsi + 4], 1
add r15, 8
xor eax, eax
cmp r15, r12
je 0x14006246b
mov rbx, qword [r15]
test al, 1
je 0x1400623d0
test rbx, rbx
je 0x140062448
mov rcx, rbx
mov rdx, rsi
call sym.void__anonymous_namespace_::itanium_demangle::Node::visit_std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor____std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor___const
jmp 0x1400623a3
mov ecx, 2
call r13
mov ecx, 0x2c
mov rdx, rax
call sym.fputc
mov ecx, 2
call r13
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x14006242b
xor ebp, ebp
nop word cs:[rax + rax]
mov ecx, 2
call r13
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebp
cmp ebp, dword [rsi]
jne 0x140062410
mov byte [rsi + 4], 0
test rbx, rbx
je 0x140062381
mov rcx, rbx
mov rdx, rsi
call sym.void__anonymous_namespace_::itanium_demangle::Node::visit_std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor____std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor___const
jmp 0x14006239f
mov ecx, 2
call r13
mov edx, 6
mov r8d, 1
mov rcx, rdi
mov r9, rax
call sym.fwrite
jmp 0x1400623a3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x7d
mov rdx, rax
call sym.fputc
dec dword [rsi]
test r14, r14
je 0x1400624aa
mov byte [rsi + 4], 1
jmp 0x1400624aa
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x7d
mov rdx, rax
call sym.fputc
dec dword [rsi]
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x1400624c0
Capabilities:
Write file on windows

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x28
mov ebx, edx
mov rsi, rcx
movzx edi, byte [rcx + 4]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
test dil, dil
je 0x140062569
mov ecx, 0x2c
mov rdx, rax
call sym.fputc
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x14006253b
xor edi, edi
mov r14, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
nop dword [rax]
mov ecx, 2
call r14
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc edi
cmp edi, dword [rsi]
jne 0x140062520
mov byte [rsi + 4], 0
cmp bl, 2
je 0x140062588
movzx eax, bl
cmp eax, 1
je 0x14006259c
test eax, eax
jne 0x1400625ca
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str.FunctionRefQual::FrefQualNone
mov edx, 0x1d
jmp 0x1400625b3
lea rcx, [0x14008cde8]
mov edx, 2
mov r8d, 1
mov r9, rax
call sym.fwrite
cmp bl, 2
jne 0x140062544
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str.FunctionRefQual::FrefQualRValue
jmp 0x1400625ae
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str.FunctionRefQual::FrefQualLValue
mov edx, 0x1f
mov r8d, 1
mov r9, rax
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
jmp sym.fwrite
nop
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
ret

Function at 0x1400625e0
Capabilities:
Write file on windows

Disassembly:
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rcx
mov rdi, qword [rdx]
add dword [rcx], 2
mov rbx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call rbx
lea rdx, [0x14008cdcf]
lea r8, str.NoexceptSpec
mov rcx, rax
call dbg.fprintf
mov rdi, qword [rdi + 0x18]
mov ecx, 2
call rbx
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x14006265a
xor ebp, ebp
nop word cs:[rax + rax]
mov ecx, 2
call rbx
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebp
cmp ebp, dword [rsi]
jne 0x140062640
mov byte [rsi + 4], 0
test rdi, rdi
je 0x140062670
mov rcx, rdi
mov rdx, rsi
call sym.void__anonymous_namespace_::itanium_demangle::Node::visit_std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor____std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor___const
jmp 0x140062695
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sym.fwrite
mov byte [rsi + 4], 1
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x29
mov rdx, rax
call sym.fputc
add dword [rsi], 0xfffffffe
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
ret
Function at 0x140062790
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x48
mov rsi, rcx
mov rbx, qword [rdx]
add dword [rcx], 2
mov r13, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call r13
lea rdx, [0x14008cdcf]
lea r8, str.FunctionEncoding
mov rcx, rax
call dbg.fprintf
mov r12, qword [rbx + 0x18]
mov r15, qword [rbx + 0x20]
movups xmm0, xmmword [rbx + 0x28]
movaps xmmword [rsp + 0x20], xmm0
mov r14, qword [rbx + 0x38]
mov edi, dword [rbx + 0x40]
movzx ebx, byte [rbx + 0x44]
mov ecx, 2
call r13
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x14006282b
xor ebp, ebp
nop word cs:[rax + rax]
mov ecx, 2
call r13
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebp
cmp ebp, dword [rsi]
jne 0x140062810
mov byte [rsi + 4], 0
test r12, r12
je 0x140062841
mov rcx, r12
mov rdx, rsi
call sym.void__anonymous_namespace_::itanium_demangle::Node::visit_std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor____std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor___const
jmp 0x140062866
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sym.fwrite
mov byte [rsi + 4], 1
mov rcx, rsi
mov rdx, r15
call sym.void__anonymous_namespace_::DumpVisitor::printWithComma__anonymous_namespace_::itanium_demangle::Node_const___anonymous_namespace_::itanium_demangle::Node_const_
movaps xmm0, xmmword [rsp + 0x20]
movaps xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
mov rcx, rsi
call sym.void__anonymous_namespace_::DumpVisitor::printWithComma__anonymous_namespace_::itanium_demangle::NodeArray___anonymous_namespace_::itanium_demangle::NodeArray_
mov rcx, rsi
mov rdx, r14
call sym.void__anonymous_namespace_::DumpVisitor::printWithComma__anonymous_namespace_::itanium_demangle::Node_const___anonymous_namespace_::itanium_demangle::Node_const_
mov rcx, rsi
mov edx, edi
call sym.void__anonymous_namespace_::DumpVisitor::printWithComma__anonymous_namespace_::itanium_demangle::Qualifiers___anonymous_namespace_::itanium_demangle::Qualifiers_
mov rcx, rsi
mov edx, ebx
call sym.void__anonymous_namespace_::DumpVisitor::printWithComma__anonymous_namespace_::itanium_demangle::FunctionRefQual___anonymous_namespace_::itanium_demangle::FunctionRefQual_
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x29
mov rdx, rax
call sym.fputc
add dword [rsi], 0xfffffffe
add rsp, 0x48
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x1400628e0
Capabilities:
Write file on windows

Disassembly:
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rcx
mov rdi, qword [rdx]
add dword [rcx], 2
mov rbx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call rbx
lea rdx, [0x14008cdcf]
lea r8, str.LiteralOperator
mov rcx, rax
call dbg.fprintf
mov rdi, qword [rdi + 0x18]
mov ecx, 2
call rbx
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x14006295a
xor ebp, ebp
nop word cs:[rax + rax]
mov ecx, 2
call rbx
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebp
cmp ebp, dword [rsi]
jne 0x140062940
mov byte [rsi + 4], 0
test rdi, rdi
je 0x140062970
mov rcx, rdi
mov rdx, rsi
call sym.void__anonymous_namespace_::itanium_demangle::Node::visit_std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor____std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor___const
jmp 0x140062995
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sym.fwrite
mov byte [rsi + 4], 1
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x29
mov rdx, rax
call sym.fputc
add dword [rsi], 0xfffffffe
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
ret

Function at 0x140062aa0
Capabilities:
Write file on windows

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov rsi, rcx
mov rdi, qword [rdx]
add dword [rcx], 2
mov r14, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call r14
lea rdx, [0x14008cdcf]
lea r8, str.CtorVtableSpecialName
mov rcx, rax
call dbg.fprintf
mov rbx, qword [rdi + 0x18]
mov rdi, qword [rdi + 0x20]
mov ecx, 2
call r14
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x140062b1b
xor ebp, ebp
nop dword [rax]
mov ecx, 2
call r14
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebp
cmp ebp, dword [rsi]
jne 0x140062b00
mov byte [rsi + 4], 0
test rbx, rbx
je 0x140062b31
mov rcx, rbx
mov rdx, rsi
call sym.void__anonymous_namespace_::itanium_demangle::Node::visit_std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor____std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor___const
jmp 0x140062b56
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sym.fwrite
mov byte [rsi + 4], 1
mov rcx, rsi
mov rdx, rdi
call sym.void__anonymous_namespace_::DumpVisitor::printWithComma__anonymous_namespace_::itanium_demangle::Node_const___anonymous_namespace_::itanium_demangle::Node_const_
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x29
mov rdx, rax
call sym.fputc
add dword [rsi], 0xfffffffe
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
Function at 0x140062b90
Capabilities:
Write file on windows

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov rsi, rcx
mov rdi, qword [rdx]
add dword [rcx], 2
mov r14, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call r14
lea rdx, [0x14008cdcf]
lea r8, str.QualifiedName
mov rcx, rax
call dbg.fprintf
mov rbx, qword [rdi + 0x18]
mov rdi, qword [rdi + 0x20]
mov ecx, 2
call r14
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x140062c0b
xor ebp, ebp
nop dword [rax]
mov ecx, 2
call r14
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebp
cmp ebp, dword [rsi]
jne 0x140062bf0
mov byte [rsi + 4], 0
test rbx, rbx
je 0x140062c21
mov rcx, rbx
mov rdx, rsi
call sym.void__anonymous_namespace_::itanium_demangle::Node::visit_std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor____std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor___const
jmp 0x140062c46
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sym.fwrite
mov byte [rsi + 4], 1
mov rcx, rsi
mov rdx, rdi
call sym.void__anonymous_namespace_::DumpVisitor::printWithComma__anonymous_namespace_::itanium_demangle::Node_const___anonymous_namespace_::itanium_demangle::Node_const_
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x29
mov rdx, rax
call sym.fputc
add dword [rsi], 0xfffffffe
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret

Function at 0x140062c80
Capabilities:
Write file on windows

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov rsi, rcx
mov rdi, qword [rdx]
add dword [rcx], 2
mov r14, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call r14
lea rdx, [0x14008cdcf]
lea r8, str.NestedName
mov rcx, rax
call dbg.fprintf
mov rbx, qword [rdi + 0x18]
mov rdi, qword [rdi + 0x20]
mov ecx, 2
call r14
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x140062cfb
xor ebp, ebp
nop dword [rax]
mov ecx, 2
call r14
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebp
cmp ebp, dword [rsi]
jne 0x140062ce0
mov byte [rsi + 4], 0
test rbx, rbx
je 0x140062d11
mov rcx, rbx
mov rdx, rsi
call sym.void__anonymous_namespace_::itanium_demangle::Node::visit_std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor____std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor___const
jmp 0x140062d36
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sym.fwrite
mov byte [rsi + 4], 1
mov rcx, rsi
mov rdx, rdi
call sym.void__anonymous_namespace_::DumpVisitor::printWithComma__anonymous_namespace_::itanium_demangle::Node___anonymous_namespace_::itanium_demangle::Node_
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x29
mov rdx, rax
call sym.fputc
add dword [rsi], 0xfffffffe
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
Function at 0x140062d70
Capabilities:
Write file on windows

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov rsi, rcx
mov rdi, qword [rdx]
add dword [rcx], 2
mov r14, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call r14
lea rdx, [0x14008cdcf]
lea r8, str.LocalName
mov rcx, rax
call dbg.fprintf
mov rbx, qword [rdi + 0x18]
mov rdi, qword [rdi + 0x20]
mov ecx, 2
call r14
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x140062deb
xor ebp, ebp
nop dword [rax]
mov ecx, 2
call r14
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebp
cmp ebp, dword [rsi]
jne 0x140062dd0
mov byte [rsi + 4], 0
test rbx, rbx
je 0x140062e01
mov rcx, rbx
mov rdx, rsi
call sym.void__anonymous_namespace_::itanium_demangle::Node::visit_std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor____std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor___const
jmp 0x140062e26
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sym.fwrite
mov byte [rsi + 4], 1
mov rcx, rsi
mov rdx, rdi
call sym.void__anonymous_namespace_::DumpVisitor::printWithComma__anonymous_namespace_::itanium_demangle::Node___anonymous_namespace_::itanium_demangle::Node_
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x29
mov rdx, rax
call sym.fputc
add dword [rsi], 0xfffffffe
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret

Function at 0x140062e60
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rcx
mov rbx, qword [rdx]
add dword [rcx], 2
mov r15, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call r15
lea rdx, [0x14008cdcf]
lea r8, str.ModuleName
mov rcx, rax
call dbg.fprintf
mov r14, qword [rbx + 0x18]
mov rdi, qword [rbx + 0x20]
movzx ebx, byte [rbx + 0x28]
mov ecx, 2
call r15
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x140062eeb
xor ebp, ebp
nop word cs:[rax + rax]
mov ecx, 2
call r15
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebp
cmp ebp, dword [rsi]
jne 0x140062ed0
mov byte [rsi + 4], 0
test r14, r14
je 0x140062f01
mov rcx, r14
mov rdx, rsi
call sym.void__anonymous_namespace_::itanium_demangle::Node::visit_std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor____std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor___const
jmp 0x140062f26
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sym.fwrite
mov byte [rsi + 4], 1
mov rcx, rsi
mov rdx, rdi
call sym.void__anonymous_namespace_::DumpVisitor::printWithComma__anonymous_namespace_::itanium_demangle::Node___anonymous_namespace_::itanium_demangle::Node_
mov rcx, rsi
mov edx, ebx
call sym.void__anonymous_namespace_::DumpVisitor::printWithComma_bool__bool_
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x29
mov rdx, rax
call sym.fputc
add dword [rsi], 0xfffffffe
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
ret
Function at 0x140062f70
Capabilities:
Write file on windows

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x28
mov ebx, edx
mov rsi, rcx
movzx edi, byte [rcx + 4]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
test dil, dil
je 0x140062ff1
mov ecx, 0x2c
mov rdx, rax
call sym.fputc
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x140062feb
xor edi, edi
mov r14, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
nop word cs:[rax + rax]
mov ecx, 2
call r14
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc edi
cmp edi, dword [rsi]
jne 0x140062fd0
mov byte [rsi + 4], 0
jmp 0x14006300b
lea rcx, [0x14008cde8]
mov edx, 2
mov r8d, 1
mov r9, rax
call sym.fwrite
lea rax, str.true
lea rsi, str.false
test bl, bl
cmovne rsi, rax
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rsi
mov rdx, rax
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
jmp sym.fputs

Function at 0x140063040
Capabilities:
Write file on windows

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov rsi, rcx
mov rdi, qword [rdx]
add dword [rcx], 2
mov r14, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 2
call r14
lea rdx, [0x14008cdcf]
lea r8, str.ModuleEntity
mov rcx, rax
call dbg.fprintf
mov rbx, qword [rdi + 0x18]
mov rdi, qword [rdi + 0x20]
mov ecx, 2
call r14
mov ecx, 0xa
mov rdx, rax
call sym.fputc
cmp dword [rsi], 0
je 0x1400630bb
xor ebp, ebp
nop dword [rax]
mov ecx, 2
call r14
mov ecx, 0x20
mov rdx, rax
call sym.fputc
inc ebp
cmp ebp, dword [rsi]
jne 0x1400630a0
mov byte [rsi + 4], 0
test rbx, rbx
je 0x1400630d1
mov rcx, rbx
mov rdx, rsi
call sym.void__anonymous_namespace_::itanium_demangle::Node::visit_std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor____std::__1::reference_wrapper__anonymous_namespace_::DumpVisitor___const
jmp 0x1400630f6
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str._null_
mov edx, 6
mov r8d, 1
mov r9, rax
call sym.fwrite
mov byte [rsi + 4], 1
mov rcx, rsi
mov rdx, rdi
call sym.void__anonymous_namespace_::DumpVisitor::printWithComma__anonymous_namespace_::itanium_demangle::Node___anonymous_namespace_::itanium_demangle::Node_
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 0x29
mov rdx, rax
call sym.fputc
add dword [rsi], 0xfffffffe
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret