joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140023960
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x28
mov edx, 1
lea rcx, str._tHB_P_DIVIDE__n
mov r9, qword [r8 + 8]
mov r8d, 0xe
call sym.fwrite
mov eax, 1
add rsp, 0x28
ret

Function at 0x140023990
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x28
mov edx, 1
lea rcx, str._tHB_P_DEC__n
mov r9, qword [r8 + 8]
mov r8d, 0xb
call sym.fwrite
mov eax, 1
add rsp, 0x28
ret

Function at 0x1400239c0
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x28
mov edx, 1
lea rcx, str._tHB_P_GREATEREQUAL__n
mov r9, qword [r8 + 8]
mov r8d, 0x14
call sym.fwrite
mov eax, 1
add rsp, 0x28
ret

Function at 0x1400239f0
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x28
mov edx, 1
lea rcx, str._tHB_P_GREATER__n
mov r9, qword [r8 + 8]
mov r8d, 0xf
call sym.fwrite
mov eax, 1
add rsp, 0x28
ret

Function at 0x140023a20
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x28
mov edx, 1
lea rcx, str._tHB_P_FUNCPTR__n
mov r9, qword [r8 + 8]
mov r8d, 0xf
call sym.fwrite
mov eax, 1
add rsp, 0x28
ret

Function at 0x140023a50
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x28
mov edx, 1
lea rcx, str._tHB_P_FORTEST__n
mov r9, qword [r8 + 8]
mov r8d, 0xf
call sym.fwrite
mov eax, 1
add rsp, 0x28
ret

Function at 0x140023a80
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x28
mov edx, 1
lea rcx, str._tHB_P_FALSE__n
mov r9, qword [r8 + 8]
mov r8d, 0xd
call sym.fwrite
mov eax, 1
add rsp, 0x28
ret

Function at 0x140023ab0
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x28
mov edx, 1
lea rcx, str._tHB_P_EXACTLYEQUAL__n
mov r9, qword [r8 + 8]
mov r8d, 0x14
call sym.fwrite
mov eax, 1
add rsp, 0x28
ret

Function at 0x140023ae0
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x28
mov edx, 1
lea rcx, str._tHB_P_ENDBLOCK__n
mov r9, qword [r8 + 8]
mov r8d, 0x10
call sym.fwrite
mov eax, 1
add rsp, 0x28
ret

Function at 0x140023b10
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x28
mov edx, 1
lea rcx, str._tHB_P_EQUAL__n
mov r9, qword [r8 + 8]
mov r8d, 0xd
call sym.fwrite
mov eax, 1
add rsp, 0x28
ret

Function at 0x140023b40
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x28
mov edx, 1
lea rcx, str._tHB_P_ARRAYPOP__n
mov r9, qword [r8 + 8]
mov r8d, 0x10
call sym.fwrite
mov eax, 1
add rsp, 0x28
ret

Function at 0x140023b70
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x28
mov edx, 1
lea rcx, str._tHB_P_ARRAYPUSH__n
mov r9, qword [r8 + 8]
mov r8d, 0x11
call sym.fwrite
mov eax, 1
add rsp, 0x28
ret

Function at 0x140023ba0
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x28
mov edx, 1
lea rcx, str._tHB_P_AND__n
mov r9, qword [r8 + 8]
mov r8d, 0xb
call sym.fwrite
mov eax, 1
add rsp, 0x28
ret

Function at 0x140023c40
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x20
mov eax, dword [r8 + 0x10]
mov rcx, qword [r8 + 8]
mov rbx, r8
test eax, eax
je 0x140023c90
mov r8, rdx
lea rdx, str.___05I64u__
call sym.fprintf
mov r9, qword [rbx + 8]
mov r8d, 0x10
mov edx, 1
lea rcx, str.HB_P_ALWAYSEND__n
call sym.fwrite
mov eax, 1
add rsp, 0x20
pop rbx
ret
mov rdx, rcx
mov ecx, 9
call sym.fputc
jmp 0x140023c63
Function at 0x140023e40
Capabilities:
Write file on windows

Disassembly:
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x30
mov rax, qword [rcx + 0x40]
mov r14, rdx
lea rdx, [rax + rdx + 1]
mov r12, rcx
mov rsi, r8
movzx ebx, byte [rdx + 1]
movzx ecx, byte [rdx + 2]
movzx r9d, byte [rax + r14 + 2]
movzx eax, byte [rax + r14 + 3]
movzx r8d, byte [rdx]
shl ecx, 0x10
shl ebx, 8
lea rdx, str._tHB_P_PUSHSTRLARGE___u___u___u_
mov dword [rsp + 0x20], eax
or ebx, ecx
mov rcx, qword [rsi + 8]
or ebx, r8d
mov edi, ebx
call sym.fprintf
mov eax, dword [rsi + 0x10]
test eax, eax
jne 0x140023ec5
mov rdx, qword [rsi + 8]
test ebx, ebx
jne 0x140023ee0
mov ecx, 0xa
call sym.fputc
lea rax, [rdi + 4]
add rsp, 0x30
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
mov rcx, qword [rsi + 8]
lea rdx, str._t___I64u__
mov r8, rdi
call sym.fprintf
mov rdx, qword [rsi + 8]
test ebx, ebx
je 0x140023ea8
mov r9, rdx
mov r8d, 2
mov edx, 1
lea rcx, [0x1400ada05]
lea r13, str._i_
call sym.fwrite
add r14, qword [r12 + 0x40]
mov rbp, qword [rsi + 8]
lea r12, str._c_
lea rbx, [rdi + r14]
movzx r8d, byte [r14 + 4]
cmp r8b, 0x27
mov ecx, r8d
sete dl
cmp r8b, 0x5c
sete al
or dl, al
jne 0x140023f54
sub ecx, 0x20
cmp cl, 0x5e
ja 0x140023f54
mov rdx, r12
mov rcx, rbp
add r14, 1
call sym.fprintf
cmp r14, rbx
jne 0x140023f15
mov rdx, qword [rsi + 8]
jmp 0x140023ea8
mov rdx, r13
mov rcx, rbp
add r14, 1
call sym.fprintf
cmp rbx, r14
jne 0x140023f15
jmp 0x140023f4b

Function at 0x140023f70
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x30
mov rax, qword [rcx + 0x40]
movzx r9d, byte [rax + rdx + 2]
mov rbx, r8
movzx r8d, byte [rax + rdx + 1]
movzx eax, byte [rax + rdx + 3]
lea rdx, str._tHB_P_LARGEVFRAME___u___u___u_
mov rcx, qword [rbx + 8]
mov dword [rsp + 0x20], eax
call sym.fprintf
mov eax, dword [rbx + 0x10]
test eax, eax
jne 0x140023fc1
mov rdx, qword [rbx + 8]
mov ecx, 0xa
call sym.fputc
mov eax, 4
add rsp, 0x30
pop rbx
ret
mov r9, qword [rbx + 8]
mov r8d, 0x15
mov edx, 1
lea rcx, str._t__locals__params__
call sym.fwrite
jmp 0x140023fa8

Function at 0x140023fe0
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x30
mov rax, qword [rcx + 0x40]
movzx r9d, byte [rax + rdx + 2]
mov rbx, r8
movzx r8d, byte [rax + rdx + 1]
movzx eax, byte [rax + rdx + 3]
lea rdx, str._tHB_P_LARGEFRAME___u___u___u_
mov rcx, qword [rbx + 8]
mov dword [rsp + 0x20], eax
call sym.fprintf
mov eax, dword [rbx + 0x10]
test eax, eax
jne 0x140024031
mov rdx, qword [rbx + 8]
mov ecx, 0xa
call sym.fputc
mov eax, 4
add rsp, 0x30
pop rbx
ret
mov r9, qword [rbx + 8]
mov r8d, 0x15
mov edx, 1
lea rcx, str._t__locals__params__
call sym.fwrite
jmp 0x140024018
Function at 0x140024050
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword [rcx + 0x40]
mov rcx, qword [r8 + 8]
movzx r9d, byte [rax + rdx + 2]
mov rbx, r8
movzx r8d, byte [rax + rdx + 1]
lea rdx, str._tHB_P_VFRAME___u___u_
call sym.fprintf
mov eax, dword [rbx + 0x10]
test eax, eax
jne 0x1400240a0
mov rdx, qword [rbx + 8]
mov ecx, 0xa
call sym.fputc
mov eax, 3
add rsp, 0x20
pop rbx
ret
mov r9, qword [rbx + 8]
mov r8d, 0x15
mov edx, 1
lea rcx, str._t__locals__params__
call sym.fwrite
jmp 0x14002407f

Function at 0x140024160
Capabilities:
Write file on windows

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x38
mov rax, qword [rcx + 0x40]
movzx r9d, byte [rax + rdx + 2]
mov rsi, r8
movzx r8d, byte [rax + rdx + 1]
mov r13, rcx
mov rdi, rdx
movzx eax, byte [rax + rdx + 3]
mov rcx, qword [rsi + 8]
lea rdx, str._tHB_P_STATICNAME___u___u___u_
lea rbx, [rdi + 4]
mov dword [rsp + 0x20], eax
call sym.fprintf
mov eax, dword [rsi + 0x10]
test eax, eax
jne 0x140024240
mov rdx, qword [rsi + 8]
mov ecx, 0xa
call sym.fputc
mov rax, qword [r13 + 0x40]
mov rcx, qword [rsi + 8]
movzx eax, byte [rax + rdi + 4]
test al, al
je 0x140024210
lea r12, [0x1400adac7]
lea rbp, str.__c_
jmp 0x1400241f5
call sym.fprintf
mov rax, qword [r13 + 0x40]
mov rcx, qword [rsi + 8]
movzx eax, byte [rax + rbx]
test al, al
je 0x140024210
add rbx, 1
movsx r8d, al
cmp al, 0x27
je 0x140024208
mov rdx, rbp
cmp al, 0x5c
jne 0x1400241e0
mov rdx, r12
jmp 0x1400241e0
mov r9, rcx
mov r8d, 4
mov edx, 1
sub rbx, rdi
lea rcx, str._0__n
call sym.fwrite
lea rax, [rbx + 1]
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
mov r8, qword [r13 + 0x40]
mov rcx, qword [rsi + 8]
lea rdx, str._t___s__
add r8, rbx
call sym.fprintf
jmp 0x1400241ad

Function at 0x1400242e0
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword [rcx + 0x40]
mov rcx, qword [r8 + 8]
movzx r9d, byte [rax + rdx + 2]
mov rbx, r8
movzx r8d, byte [rax + rdx + 1]
lea rdx, str._tHB_P_SFRAME___u___u_
call sym.fprintf
mov eax, dword [rbx + 0x10]
test eax, eax
jne 0x140024330
mov rdx, qword [rbx + 8]
mov ecx, 0xa
call sym.fputc
mov eax, 3
add rsp, 0x20
pop rbx
ret
mov r9, qword [rbx + 8]
mov r8d, 0x1c
mov edx, 1
lea rcx, str._t__symbol___INITSTATICS___
call sym.fwrite
jmp 0x14002430f
Function at 0x1400244f0
Capabilities:
Write file on windows

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x38
lea rbp, str.__u_
mov r9, qword [r8 + 8]
mov r13, rdx
mov rdi, rcx
mov rsi, r8
mov edx, 1
mov r8d, 0x11
lea rcx, str._tHB_P_PUSHDOUBLE_
lea r12, [r13 + 0xb]
call sym.fwrite
lea rbx, [r13 + 1]
nop
mov rax, qword [rdi + 0x40]
mov rcx, qword [rsi + 8]
mov rdx, rbp
movzx r8d, byte [rax + rbx]
add rbx, 1
call sym.fprintf
cmp r12, rbx
jne 0x140024530
mov eax, dword [rsi + 0x10]
mov rcx, qword [rsi + 8]
test eax, eax
jne 0x140024580
mov rdx, rcx
mov ecx, 0xa
call sym.fputc
mov eax, 0xb
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
mov rax, qword [rdi + 0x40]
lea rdx, str._t___.f___u___u__
movzx r8d, byte [rax + r13 + 0xa]
movsd xmm0, qword [rax + r13 + 1]
mov dword [rsp + 0x28], r8d
movzx eax, byte [rax + r13 + 9]
movapd xmm3, xmm0
movq r9, xmm0
mov dword [rsp + 0x20], eax
call sym.fprintf
mov rcx, qword [rsi + 8]
jmp 0x140024559

Function at 0x1400247a0
Capabilities:
Write file on windows

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x28
mov r9, qword [r8 + 8]
mov r13, rdx
mov rsi, r8
mov rdi, rcx
mov r8d, 0x11
mov edx, 1
lea rcx, str._tHB_P_MODULENAME_
lea rbx, [r13 + 1]
call sym.fwrite
mov eax, dword [rsi + 0x10]
test eax, eax
jne 0x140024870
mov rdx, qword [rsi + 8]
mov ecx, 0xa
call sym.fputc
mov rax, qword [rdi + 0x40]
mov rcx, qword [rsi + 8]
movzx eax, byte [rax + r13 + 1]
test al, al
je 0x140024840
lea r12, [0x1400adac7]
lea rbp, str.__c_
jmp 0x140024825
call sym.fprintf
mov rax, qword [rdi + 0x40]
mov rcx, qword [rsi + 8]
movzx eax, byte [rax + rbx]
test al, al
je 0x140024840
add rbx, 1
movsx r8d, al
cmp al, 0x27
je 0x140024838
mov rdx, rbp
cmp al, 0x5c
jne 0x140024810
mov rdx, r12
jmp 0x140024810
mov r9, rcx
mov r8d, 4
mov edx, 1
sub rbx, r13
lea rcx, str._0__n
call sym.fwrite
lea rax, [rbx + 1]
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
mov r8, qword [rdi + 0x40]
mov rcx, qword [rsi + 8]
lea rdx, str._t___s__
add r8, rbx
call sym.fprintf
jmp 0x1400247df
Function at 0x140024890
Capabilities:
Write file on windows

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x28
mov rax, qword [rcx + 0x40]
movzx r9d, byte [rax + rdx + 2]
mov rsi, r8
mov r13, rcx
mov rcx, qword [r8 + 8]
movzx r8d, byte [rax + rdx + 1]
mov rdi, rdx
lea rdx, str._tHB_P_LOCALNAME___u___u_
call sym.fprintf
mov eax, dword [rsi + 0x10]
lea rbx, [rdi + 3]
test eax, eax
jne 0x140024960
mov rdx, qword [rsi + 8]
mov ecx, 0xa
call sym.fputc
mov rax, qword [r13 + 0x40]
mov rcx, qword [rsi + 8]
movzx eax, byte [rax + rdi + 3]
test al, al
je 0x140024930
lea r12, [0x1400adac7]
lea rbp, str.__c_
jmp 0x140024918
call sym.fprintf
mov rax, qword [r13 + 0x40]
mov rcx, qword [rsi + 8]
movzx eax, byte [rax + rbx]
test al, al
je 0x140024930
add rbx, 1
movsx r8d, al
cmp al, 0x27
je 0x14002492b
mov rdx, rbp
cmp al, 0x5c
jne 0x140024903
mov rdx, r12
jmp 0x140024903
mov r9, rcx
mov r8d, 4
mov edx, 1
sub rbx, rdi
lea rcx, str._0__n
call sym.fwrite
lea rax, [rbx + 1]
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
mov r8, qword [r13 + 0x40]
mov rcx, qword [rsi + 8]
lea rdx, str._t___s__
add r8, rbx
call sym.fprintf
jmp 0x1400248d4

Function at 0x140024f00
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword [rcx + 0x40]
mov rcx, qword [r8 + 8]
movzx r9d, byte [rax + rdx + 2]
mov rbx, r8
movzx r8d, byte [rax + rdx + 1]
lea rdx, str._tHB_P_FRAME___u___u_
call sym.fprintf
mov eax, dword [rbx + 0x10]
test eax, eax
jne 0x140024f50
mov rdx, qword [rbx + 8]
mov ecx, 0xa
call sym.fputc
mov eax, 3
add rsp, 0x20
pop rbx
ret
mov r9, qword [rbx + 8]
mov r8d, 0x15
mov edx, 1
lea rcx, str._t__locals__params__
call sym.fwrite
jmp 0x140024f2f

Function at 0x140025cc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x20
mov rdi, rcx
movzx ecx, byte [rdx]
mov rsi, rdx
mov r12, r8
test cl, cl
je 0x140025d12
xor r9d, 1
xor ebx, ebx
xor eax, eax
mov ebp, r9d
and ebp, 1
nop dword [rax]
cmp cl, 0x25
jne 0x140025cfc
cmp byte [rsi + rax + 1], 0x73
je 0x140025d21
mov rdx, rdi
add ebx, 1
call sym.fputc
movsxd rax, ebx
movzx ecx, byte [rsi + rax]
test cl, cl
jne 0x140025cf0
add rsp, 0x20
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
movzx ecx, byte [r12]
lea r14, [r12 + 1]
test cl, cl
je 0x140025d84
lea r13, str.x_02x
nop word cs:[rax + rax]
mov eax, ecx
and eax, 0xffffffdf
sub eax, 0x41
cmp al, 0x19
jbe 0x140025da0
cmp cl, 0x5f
je 0x140025da0
lea eax, [rcx - 0x30]
cmp al, 9
jbe 0x140025da0
test bpl, bpl
jne 0x140025d68
cmp cl, 0x24
jne 0x140025d68
cmp byte [r14], 0
je 0x140025d77
movzx r8d, cl
mov rdx, r13
mov rcx, rdi
call sym.fprintf
add r14, 1
movzx ecx, byte [r14 - 1]
test cl, cl
jne 0x140025d40
mov eax, dword [rsp + 0x80]
test eax, eax
jne 0x140025dc0
add ebx, 2
jmp 0x140025d07
mov rdx, rdi
add r14, 1
call sym.fputc
movzx ecx, byte [r14 - 1]
test cl, cl
jne 0x140025d40
jmp 0x140025d84
mov r8d, dword [rsp + 0x80]
lea rdx, [0x1400ae0c3]
mov rcx, rdi
add ebx, 2
call sym.fprintf
jmp 0x140025d07
Function at 0x140025de0
Capabilities:
Write file on windows

Disassembly:
sub rsp, 0x28
mov r9, qword [r8 + 8]
add rdx, 1
cmp rdx, qword [rcx + 0x50]
je 0x140025e13
mov r8d, 0xf
mov edx, 1
lea rcx, str._tHB_P_ENDPROC__n
call sym.fwrite
mov eax, 1
add rsp, 0x28
ret
mov r8d, 0xe
mov edx, 1
lea rcx, str._tHB_P_ENDPROC_n
call sym.fwrite
mov eax, 1
add rsp, 0x28
ret

Function at 0x1400261d0
Capabilities:
Write file on windows

Disassembly:
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x20
mov rax, qword [rcx + 0x40]
movzx esi, byte [rax + rdx + 1]
mov r12, rcx
mov rcx, qword [r8 + 8]
mov r14, r8
mov rbx, rdx
mov r8d, esi
lea rdx, str._tHB_P_PUSHSTRSHORT___u_
mov rdi, rsi
call sym.fprintf
mov eax, dword [r14 + 0x10]
test eax, eax
jne 0x140026235
mov rdx, qword [r14 + 8]
test dil, dil
jne 0x140026251
mov ecx, 0xa
call sym.fputc
lea eax, [rsi + 2]
cdqe
add rsp, 0x20
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
mov rcx, qword [r14 + 8]
lea rdx, str._t___u__
mov r8d, esi
call sym.fprintf
mov rdx, qword [r14 + 8]
test dil, dil
je 0x140026217
mov r9, rdx
mov r8d, 2
mov edx, 1
add rbx, 2
lea rcx, [0x1400ada05]
lea r13, str._i_
call sym.fwrite
add rbx, qword [r12 + 0x40]
mov rbp, qword [r14 + 8]
lea r12, str._c_
add rdi, rbx
nop dword [rax]
movzx r8d, byte [rbx]
cmp r8b, 0x27
mov eax, r8d
sete cl
cmp r8b, 0x5c
sete dl
or cl, dl
jne 0x1400262d0
sub eax, 0x20
cmp al, 0x5e
ja 0x1400262d0
mov rdx, r12
mov rcx, rbp
add rbx, 1
call sym.fprintf
cmp rbx, rdi
jne 0x140026290
mov rdx, qword [r14 + 8]
jmp 0x140026217
mov rdx, r13
mov rcx, rbp
add rbx, 1
call sym.fprintf
cmp rdi, rbx
jne 0x140026290
jmp 0x1400262c4

Function at 0x1400262f0
Capabilities:
Write file on windows

Disassembly:
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x20
mov rbx, rdx
mov rdx, qword [rcx + 0x40]
mov r14, r8
mov r12, rcx
mov rcx, qword [r8 + 8]
lea rax, [rdx + rbx + 1]
movzx r9d, byte [rdx + rbx + 2]
lea rdx, str._tHB_P_PUSHSTR___u___u_
movzx r8d, byte [rax]
movzx esi, word [rax]
call sym.fprintf
mov eax, dword [r14 + 0x10]
mov rdi, rsi
test eax, eax
jne 0x140026360
mov rdx, qword [r14 + 8]
test di, di
jne 0x14002637c
mov ecx, 0xa
call sym.fputc
lea eax, [rsi + 3]
cdqe
add rsp, 0x20
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
mov rcx, qword [r14 + 8]
lea rdx, str._t___u__
mov r8d, esi
call sym.fprintf
mov rdx, qword [r14 + 8]
test di, di
je 0x140026341
mov r9, rdx
mov r8d, 2
mov edx, 1
add rbx, 3
lea rcx, [0x1400ada05]
lea r13, str._i_
call sym.fwrite
add rbx, qword [r12 + 0x40]
mov rbp, qword [r14 + 8]
lea r12, str._c_
add rdi, rbx
movzx r8d, byte [rbx]
cmp r8b, 0x27
mov eax, r8d
sete cl
cmp r8b, 0x5c
sete dl
or cl, dl
jne 0x1400263f1
sub eax, 0x20
cmp al, 0x5e
ja 0x1400263f1
mov rdx, r12
mov rcx, rbp
add rbx, 1
call sym.fprintf
cmp rbx, rdi
jne 0x1400263b4
mov rdx, qword [r14 + 8]
jmp 0x140026341
mov rdx, r13
mov rcx, rbp
add rbx, 1
call sym.fprintf
cmp rdi, rbx
jne 0x1400263b4
jmp 0x1400263e8
Function at 0x140026410
Capabilities:
Write file on windows

Disassembly:
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x30
mov rax, qword [rcx + 0x40]
mov rbx, rdx
mov r14, r8
lea rdx, [rax + rdx + 2]
mov r12, rcx
movzx r8d, byte [rax + rbx + 1]
movzx eax, byte [rax + rbx + 3]
movzx esi, word [rdx]
movzx r9d, byte [rdx]
lea rdx, str._tHB_P_PUSHSTRHIDDEN___u___u___u_
mov dword [rsp + 0x20], eax
mov rcx, qword [r14 + 8]
mov rdi, rsi
call sym.fprintf
mov eax, dword [r14 + 0x10]
test eax, eax
jne 0x140026490
mov rdx, qword [r14 + 8]
test di, di
jne 0x1400264ac
mov ecx, 0xa
call sym.fputc
lea eax, [rsi + 4]
cdqe
add rsp, 0x30
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
mov rcx, qword [r14 + 8]
lea rdx, str._t___u__
mov r8d, esi
call sym.fprintf
mov rdx, qword [r14 + 8]
test di, di
je 0x14002646a
mov r9, rdx
mov r8d, 2
mov edx, 1
add rbx, 4
lea rcx, [0x1400ada05]
lea r13, str._i_
call sym.fwrite
add rbx, qword [r12 + 0x40]
mov rbp, qword [r14 + 8]
lea r12, str._c_
add rdi, rbx
movzx r8d, byte [rbx]
cmp r8b, 0x27
mov eax, r8d
sete cl
cmp r8b, 0x5c
sete dl
or cl, dl
jne 0x140026521
sub eax, 0x20
cmp al, 0x5e
ja 0x140026521
mov rdx, r12
mov rcx, rbp
add rbx, 1
call sym.fprintf
cmp rbx, rdi
jne 0x1400264e4
mov rdx, qword [r14 + 8]
jmp 0x14002646a
mov rdx, r13
mov rcx, rbp
add rbx, 1
call sym.fprintf
cmp rdi, rbx
jne 0x1400264e4
jmp 0x140026518
Function at 0x14002a680
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x20
mov r9, qword [r8]
mov rbx, r8
cmp qword [rcx + 0x50], rdx
jbe 0x14002a69e
mov rax, qword [r8 + 0x20]
mov r8, qword [rax + rdx*8]
test r8, r8
jne 0x14002a6c0
mov r8d, 0x16
mov edx, 1
lea rcx, str._thb_xvmPushAParams____n
call sym.fwrite
mov eax, 1
add rsp, 0x20
pop rbx
ret
mov rcx, r9
lea rdx, str.lab_05I64u:___n
call sym.fprintf
mov r9, qword [rbx]
jmp 0x14002a69e

Function at 0x14002a6e0
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x38
mov rbp, rcx
mov rdi, rdx
mov rsi, r8
mov rcx, qword [r8]
cmp qword [rbp + 0x50], rdx
jbe 0x14002a713
mov rax, qword [r8 + 0x20]
mov r8, qword [rax + rdx*8]
test r8, r8
jne 0x14002a7f0
mov rax, qword [rbp + 0x40]
lea rdx, str._t_n_t_tstatic_const_HB_BYTE_statics___I64u____
movzx ebx, word [rax + rdi + 1]
mov word [rsp + 0x2e], bx
add rbx, rbx
mov r8, rbx
call sym.fprintf
test rbx, rbx
je 0x14002a77c
lea r12, [rbx - 1]
add rdi, 3
xor r15d, r15d
lea r13, str._u_
lea r14, [0x1400afb5c]
mov rcx, qword [rsi]
test r15b, 0xf
je 0x14002a7ca
mov rax, qword [rbp + 0x40]
add rax, r15
movzx r8d, byte [rax + rdi]
cmp r15, r12
je 0x14002a7b0
mov rdx, r13
add r15, 1
call sym.fprintf
cmp rbx, r15
jne 0x14002a751
movzx r8d, word [rsp + 0x2e]
mov rcx, qword [rsi]
lea rdx, str.___n_t_thb_xvmThreadStatics___hu__statics____n_t_n
call sym.fprintf
lea rax, [rbx + 3]
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov rdx, r14
add r15, 1
call sym.fprintf
cmp rbx, r15
je 0x14002a77c
mov rcx, qword [rsi]
test r15b, 0xf
jne 0x14002a75a
mov r9, rcx
mov r8d, 4
mov edx, 1
lea rcx, str._n_t_t_t
call sym.fwrite
mov rcx, qword [rsi]
jmp 0x14002a75a
lea rdx, str.lab_05I64u:___n
call sym.fprintf
mov rcx, qword [rsi]
jmp 0x14002a713

Function at 0x14002a810
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x20
mov r9, qword [r8]
mov rbx, r8
cmp qword [rcx + 0x50], rdx
jbe 0x14002a82e
mov rax, qword [r8 + 0x20]
mov r8, qword [rax + rdx*8]
test r8, r8
jne 0x14002a850
mov r8d, 0x1f
mov edx, 1
lea rcx, str._tif__hb_xvmSeqBlock_____break__n
call sym.fwrite
mov eax, 1
add rsp, 0x20
pop rbx
ret
mov rcx, r9
lea rdx, str.lab_05I64u:___n
call sym.fprintf
mov r9, qword [rbx]
jmp 0x14002a82e

Function at 0x14002a870
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x20
mov r9, qword [r8]
mov rbx, r8
cmp qword [rcx + 0x50], rdx
jbe 0x14002a88e
mov rax, qword [r8 + 0x20]
mov r8, qword [rax + rdx*8]
test r8, r8
jne 0x14002a8b0
mov r8d, 0x1c
mov edx, 1
lea rcx, str._tif__hb_xvmIncEq_____break__n
call sym.fwrite
mov eax, 1
add rsp, 0x20
pop rbx
ret
mov rcx, r9
lea rdx, str.lab_05I64u:___n
call sym.fprintf
mov r9, qword [rbx]
jmp 0x14002a88e
Function at 0x14002a8d0
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x20
mov r9, qword [r8]
mov rbx, r8
cmp qword [rcx + 0x50], rdx
jbe 0x14002a8ee
mov rax, qword [r8 + 0x20]
mov r8, qword [rax + rdx*8]
test r8, r8
jne 0x14002a910
mov r8d, 0x1c
mov edx, 1
lea rcx, str._tif__hb_xvmDecEq_____break__n
call sym.fwrite
mov eax, 1
add rsp, 0x20
pop rbx
ret
mov rcx, r9
lea rdx, str.lab_05I64u:___n
call sym.fprintf
mov r9, qword [rbx]
jmp 0x14002a8ee

Function at 0x14002a930
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x20
mov r9, qword [r8]
mov rbx, r8
cmp qword [rcx + 0x50], rdx
jbe 0x14002a94e
mov rax, qword [r8 + 0x20]
mov r8, qword [rax + rdx*8]
test r8, r8
jne 0x14002a970
mov r8d, 0x1f
mov edx, 1
lea rcx, str._tif__hb_xvmIncEqPop_____break__n
call sym.fwrite
mov eax, 1
add rsp, 0x20
pop rbx
ret
mov rcx, r9
lea rdx, str.lab_05I64u:___n
call sym.fprintf
mov r9, qword [rbx]
jmp 0x14002a94e

Function at 0x14002a990
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x20
mov r9, qword [r8]
mov rbx, r8
cmp qword [rcx + 0x50], rdx
jbe 0x14002a9ae
mov rax, qword [r8 + 0x20]
mov r8, qword [rax + rdx*8]
test r8, r8
jne 0x14002a9d0
mov r8d, 0x1f
mov edx, 1
lea rcx, str._tif__hb_xvmDecEqPop_____break__n
call sym.fwrite
mov eax, 1
add rsp, 0x20
pop rbx
ret
mov rcx, r9
lea rdx, str.lab_05I64u:___n
call sym.fprintf
mov r9, qword [rbx]
jmp 0x14002a9ae

Function at 0x14002a9f0
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x20
mov r9, qword [r8]
mov rbx, r8
cmp qword [rcx + 0x50], rdx
jbe 0x14002aa0e
mov rax, qword [r8 + 0x20]
mov r8, qword [rax + rdx*8]
test r8, r8
jne 0x14002aa34
mov r8d, 0x2f
mov edx, 1
lea rcx, str._t_while__0____n_tif__hb_xvmAlwaysEnd_____break__n
call sym.fwrite
sub dword [rbx + 0x18], 1
mov eax, 1
add rsp, 0x20
pop rbx
ret
mov rcx, r9
lea rdx, str.lab_05I64u:___n
call sym.fprintf
mov r9, qword [rbx]
jmp 0x14002aa0e

Function at 0x14002aa50
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x20
mov r9, qword [r8]
mov rbx, r8
cmp qword [rcx + 0x50], rdx
jbe 0x14002aa6e
mov rax, qword [r8 + 0x20]
mov r8, qword [rax + rdx*8]
test r8, r8
jne 0x14002aa90
mov r8d, 0x37
mov edx, 1
lea rcx, str._t_while__0____n_tif__hb_xvmAlwaysBegin_____break__n_tdo__n
call sym.fwrite
mov eax, 4
add rsp, 0x20
pop rbx
ret
mov rcx, r9
lea rdx, str.lab_05I64u:___n
call sym.fprintf
mov r9, qword [rbx]
jmp 0x14002aa6e

Function at 0x14002aab0
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x20
mov r9, qword [r8]
mov rbx, r8
cmp qword [rcx + 0x50], rdx
jbe 0x14002aace
mov rax, qword [r8 + 0x20]
mov r8, qword [rax + rdx*8]
test r8, r8
jne 0x14002aaf4
mov r8d, 0x1a
mov edx, 1
lea rcx, str._thb_xvmSeqAlways____n_tdo__n
call sym.fwrite
add dword [rbx + 0x18], 1
mov eax, 4
add rsp, 0x20
pop rbx
ret
mov rcx, r9
lea rdx, str.lab_05I64u:___n
call sym.fprintf
mov r9, qword [rbx]
jmp 0x14002aace