joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140006a60
Capabilities:
Terminate process

Disassembly:
sub rsp, 0x28
mov rax, qword [0x140034120]
test rax, rax
je 0x140006a72
call rax
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rdx, str.out_of_memory_n
mov rcx, rax
call sym.rawWrite
mov ecx, 1
call sym.exit
nop
nop word [rax + rax]

Function at 0x140008690
Capabilities:
Terminate process

Disassembly:
sub rsp, 0x28
mov r10, qword [rdx + 8]
mov r9, rdx
sar rdx, 0x15
mov r8, rcx
movzx eax, dl
mov rax, qword [rcx + rax*8 + 0x20a0]
test rax, rax
jne 0x1400086c0
jmp 0x1400086ea
mov rax, qword [rax]
test rax, rax
je 0x1400086ea
cmp rdx, qword [rax + 8]
jne 0x1400086b8
mov rcx, r9
mov edx, 1
sar rcx, 0xc
and ecx, 0x1ff
mov r11, rcx
shl rdx, cl
sar r11, 6
not rdx
and qword [rax + r11*8 + 0x10], rdx
mov rax, qword [r8 + 0x2070]
mov rdx, qword [r8 + 0x2078]
mov rcx, rax
sub rcx, r10
cmp rax, rdx
cmovl rax, rdx
movq xmm0, rcx
xor edx, edx
mov rcx, r9
movq xmm1, rax
punpcklqdq xmm0, xmm1
movups xmmword [r8 + 0x2070], xmm0
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
je 0x140008735
add rsp, 0x28
ret
lea rcx, str.virtualFree_failing_
call sym.printf.constprop.0
mov ecx, 1
call sym.exit
nop
nop dword [rax]

Function at 0x140008750
Capabilities:
Terminate process

Disassembly:
sub rsp, 0x28
mov rax, qword [rdx + 8]
sub qword [rcx + 0x2088], rax
mov r10, qword [rdx + 8]
mov r8, rcx
mov r9, rdx
cmp r10, 0x3f000000
jg 0x140008780
add rsp, 0x28
jmp sym.freeBigChunk__system_u6571
sar rdx, 0x15
movzx eax, dl
mov rax, qword [rcx + rax*8 + 0x20a0]
test rax, rax
jne 0x1400087f0
nop dword [rax]
mov rax, qword [r8 + 0x2070]
mov rdx, qword [r8 + 0x2078]
mov rcx, rax
sub rcx, r10
cmp rax, rdx
cmovl rax, rdx
movq xmm0, rcx
xor edx, edx
mov rcx, r9
movq xmm1, rax
punpcklqdq xmm0, xmm1
movups xmmword [r8 + 0x2070], xmm0
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
je 0x14000881f
add rsp, 0x28
ret
mov rax, qword [rax]
test rax, rax
je 0x140008798
cmp rdx, qword [rax + 8]
jne 0x1400087e8
mov rcx, r9
mov edx, 1
sar rcx, 0xc
and ecx, 0x1ff
mov r11, rcx
shl rdx, cl
sar r11, 6
not rdx
and qword [rax + r11*8 + 0x10], rdx
jmp 0x140008798
lea rcx, str.virtualFree_failing_
call sym.printf.constprop.0
mov ecx, 1
call sym.exit
nop
nop word cs:[rax + rax]
Function at 0x140008840
Capabilities:
Terminate process

Disassembly:
sub rsp, 0x28
mov r9, rdx
and r9, 0xfffffffffffff000
mov r8, qword [r9 + 8]
mov rax, qword [r9 + 0x10]
cmp r8, 0xfb0
jle 0x140008890
lea rdx, [rax + 0x2098]
cmp rcx, rax
lea r10, [r9 + 0x18]
je 0x140008910
mov rax, qword [rdx]
mov qword [r10], rax
mov rax, qword [r10]
lock cmpxchg qword [rdx], r9
jne 0x140008900
add rsp, 0x28
ret
cmp rcx, rax
je 0x1400088b0
lea rcx, [r9 + 0x40]
mov rax, qword [rcx]
mov qword [rdx], rax
mov rax, qword [rdx]
lock cmpxchg qword [rcx], rdx
je 0x140008883
mov qword [rdx], rax
jmp 0x140008899
sub qword [rax + 0x2088], r8
mov rcx, qword [r9 + 0x28]
mov qword [rdx], rcx
mov qword [r9 + 0x28], rdx
mov rdx, qword [r9 + 0x30]
cmp rdx, r8
jge 0x140008930
lea rdx, [r8 + 0xf]
test r8, r8
cmovns rdx, r8
sar rdx, 4
mov rcx, qword [rax + rdx*8]
test rcx, rcx
mov qword [r9 + 0x18], rcx
je 0x1400088eb
mov qword [rcx + 0x20], r9
mov qword [rax + rdx*8], r9
add qword [r9 + 0x30], r8
add rsp, 0x28
ret
mov qword [r10], rax
jmp 0x140008873
sub qword [rcx + 0x2088], r8
mov r8, qword [r9 + 8]
cmp r8, 0x3f000000
jg 0x1400089a0
mov rdx, r9
add rsp, 0x28
jmp sym.freeBigChunk__system_u6571
add rdx, r8
cmp rdx, 0xfb0
mov qword [r9 + 0x30], rdx
jne 0x140008883
lea rdx, [r8 + 0xf]
test r8, r8
mov rcx, qword [r9 + 0x18]
cmovns rdx, r8
sar rdx, 4
cmp r9, qword [rax + rdx*8]
je 0x140008a58
mov rdx, qword [r9 + 0x20]
test rcx, rcx
mov qword [rdx + 0x18], rcx
je 0x140008976
mov rdx, qword [r9 + 0x20]
mov qword [rcx + 0x20], rdx
mov rdx, r9
mov rcx, rax
pxor xmm0, xmm0
mov qword [r9 + 8], 0x1000
movups xmmword [r9 + 0x18], xmm0
add rsp, 0x28
jmp sym.freeBigChunk__system_u6571
mov rcx, r9
sar rcx, 0x15
movzx edx, cl
mov rdx, qword [rax + rdx*8 + 0x20a0]
test rdx, rdx
jne 0x1400089c8
jmp 0x1400089f3
mov rdx, qword [rdx]
test rdx, rdx
je 0x1400089f3
cmp rcx, qword [rdx + 8]
jne 0x1400089c0
mov rcx, r9
mov r10d, 1
sar rcx, 0xc
and ecx, 0x1ff
mov r11, rcx
shl r10, cl
sar r11, 6
not r10
and qword [rdx + r11*8 + 0x10], r10
mov rdx, qword [rax + 0x2070]
mov rcx, rdx
sub rcx, r8
mov r8d, 0x8000
movq xmm0, rcx
mov rcx, qword [rax + 0x2078]
cmp rdx, rcx
cmovl rdx, rcx
mov rcx, r9
movq xmm1, rdx
xor edx, edx
punpcklqdq xmm0, xmm1
movups xmmword [rax + 0x2070], xmm0
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
jne 0x140008883
lea rcx, str.virtualFree_failing_
call sym.printf.constprop.0
mov ecx, 1
call sym.exit
nop word [rax + rax]
test rcx, rcx
mov qword [rax + rdx*8], rcx
je 0x140008976
mov qword [rcx + 0x20], 0
jmp 0x140008976
Function at 0x140008a80
Capabilities:
Terminate process

Disassembly:
sub rsp, 0x28
mov r9, rdx
and r9, 0xfffffffffffff000
mov r8, qword [r9 + 8]
mov rax, qword [r9 + 0x10]
cmp r8, 0xfb0
jle 0x140008ad0
lea rdx, [rax + 0x2098]
cmp rcx, rax
lea r10, [r9 + 0x18]
je 0x140008b50
mov rax, qword [rdx]
mov qword [r10], rax
mov rax, qword [r10]
lock cmpxchg qword [rdx], r9
jne 0x140008b40
add rsp, 0x28
ret
cmp rcx, rax
je 0x140008af0
lea rcx, [r9 + 0x40]
mov rax, qword [rcx]
mov qword [rdx], rax
mov rax, qword [rdx]
lock cmpxchg qword [rcx], rdx
je 0x140008ac3
mov qword [rdx], rax
jmp 0x140008ad9
sub qword [rax + 0x2088], r8
mov rcx, qword [r9 + 0x28]
mov qword [rdx], rcx
mov qword [r9 + 0x28], rdx
mov rdx, qword [r9 + 0x30]
cmp r8, rdx
jle 0x140008b70
lea rdx, [r8 + 0xf]
test r8, r8
cmovns rdx, r8
sar rdx, 4
mov rcx, qword [rax + rdx*8]
test rcx, rcx
mov qword [r9 + 0x18], rcx
je 0x140008b2b
mov qword [rcx + 0x20], r9
mov qword [rax + rdx*8], r9
add qword [r9 + 0x30], r8
add rsp, 0x28
ret
mov qword [r10], rax
jmp 0x140008ab3
sub qword [rcx + 0x2088], r8
mov r8, qword [r9 + 8]
cmp r8, 0x3f000000
jg 0x140008be0
mov rdx, r9
add rsp, 0x28
jmp sym.freeBigChunk__system_u6571
add rdx, r8
cmp rdx, 0xfb0
mov qword [r9 + 0x30], rdx
jne 0x140008ac3
lea rdx, [r8 + 0xf]
test r8, r8
mov rcx, qword [r9 + 0x18]
cmovns rdx, r8
sar rdx, 4
cmp r9, qword [rax + rdx*8]
je 0x140008c98
mov rdx, qword [r9 + 0x20]
test rcx, rcx
mov qword [rdx + 0x18], rcx
je 0x140008bb6
mov rdx, qword [r9 + 0x20]
mov qword [rcx + 0x20], rdx
mov rdx, r9
mov rcx, rax
pxor xmm0, xmm0
mov qword [r9 + 8], 0x1000
movups xmmword [r9 + 0x18], xmm0
add rsp, 0x28
jmp sym.freeBigChunk__system_u6571
mov rcx, r9
sar rcx, 0x15
movzx edx, cl
mov rdx, qword [rax + rdx*8 + 0x20a0]
test rdx, rdx
jne 0x140008c08
jmp 0x140008c33
mov rdx, qword [rdx]
test rdx, rdx
je 0x140008c33
cmp rcx, qword [rdx + 8]
jne 0x140008c00
mov rcx, r9
mov r10d, 1
sar rcx, 0xc
and ecx, 0x1ff
mov r11, rcx
shl r10, cl
sar r11, 6
not r10
and qword [rdx + r11*8 + 0x10], r10
mov rdx, qword [rax + 0x2070]
mov rcx, rdx
sub rcx, r8
mov r8d, 0x8000
movq xmm0, rcx
mov rcx, qword [rax + 0x2078]
cmp rdx, rcx
cmovl rdx, rcx
mov rcx, r9
movq xmm1, rdx
xor edx, edx
punpcklqdq xmm0, xmm1
movups xmmword [rax + 0x2070], xmm0
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
jne 0x140008ac3
lea rcx, str.virtualFree_failing_
call sym.printf.constprop.0
mov ecx, 1
call sym.exit
nop word [rax + rax]
test rcx, rcx
mov qword [rax + rdx*8], rcx
je 0x140008bb6
mov qword [rcx + 0x20], 0
jmp 0x140008bb6
Function at 0x140009080
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
lea rcx, [0x14002a380]
call dbg.__emutls_get_address
mov r9, rbx
and r9, 0xfffffffffffff000
mov rdx, qword [r9 + 8]
mov r8, qword [r9 + 0x10]
cmp rdx, 0xfb0
jle 0x1400090e0
lea rcx, [r8 + 0x2098]
cmp rax, r8
lea r10, [r9 + 0x18]
je 0x140009160
mov rax, qword [rcx]
mov qword [r10], rax
mov rax, qword [r10]
lock cmpxchg qword [rcx], r9
jne 0x140009150
add rsp, 0x20
pop rbx
ret
cmp rax, r8
je 0x140009100
lea rdx, [r9 + 0x40]
mov rax, qword [rdx]
mov qword [rbx], rax
mov rax, qword [rbx]
lock cmpxchg qword [rdx], rbx
je 0x1400090d3
mov qword [rbx], rax
jmp 0x1400090e9
sub qword [r8 + 0x2088], rdx
mov rax, qword [r9 + 0x28]
mov qword [rbx], rax
mov rax, qword [r9 + 0x30]
mov qword [r9 + 0x28], rbx
cmp rdx, rax
jle 0x140009188
lea rax, [rdx + 0xf]
test rdx, rdx
cmovns rax, rdx
sar rax, 4
mov rcx, qword [r8 + rax*8]
test rcx, rcx
mov qword [r9 + 0x18], rcx
je 0x14000913b
mov qword [rcx + 0x20], r9
mov qword [r8 + rax*8], r9
add qword [r9 + 0x30], rdx
add rsp, 0x20
pop rbx
ret
mov qword [r10], rax
jmp 0x1400090c3
sub qword [rax + 0x2088], rdx
mov rdx, r9
mov r10, qword [r9 + 8]
cmp r10, 0x3f000000
jg 0x1400091f0
mov rcx, rax
add rsp, 0x20
pop rbx
jmp sym.freeBigChunk__system_u6571
add rax, rdx
cmp rax, 0xfb0
mov qword [r9 + 0x30], rax
jne 0x1400090d3
lea rax, [rdx + 0xf]
test rdx, rdx
cmovns rax, rdx
mov rdx, qword [r9 + 0x18]
sar rax, 4
cmp r9, qword [r8 + rax*8]
je 0x1400092a8
mov rax, qword [r9 + 0x20]
test rdx, rdx
mov qword [rax + 0x18], rdx
je 0x1400091cd
mov rax, qword [r9 + 0x20]
mov qword [rdx + 0x20], rax
mov rdx, r9
mov rcx, r8
pxor xmm0, xmm0
mov qword [r9 + 8], 0x1000
movups xmmword [r9 + 0x18], xmm0
add rsp, 0x20
pop rbx
jmp sym.freeBigChunk__system_u6571
sar rdx, 0x15
movzx eax, dl
mov rax, qword [r8 + rax*8 + 0x20a0]
test rax, rax
jne 0x140009218
jmp 0x140009242
mov rax, qword [rax]
test rax, rax
je 0x140009242
cmp rdx, qword [rax + 8]
jne 0x140009210
mov rcx, r9
mov edx, 1
sar rcx, 0xc
and ecx, 0x1ff
mov r11, rcx
shl rdx, cl
sar r11, 6
not rdx
and qword [rax + r11*8 + 0x10], rdx
mov rax, qword [r8 + 0x2070]
mov rcx, r9
mov rdx, qword [r8 + 0x2078]
mov rbx, rax
sub rbx, r10
cmp rax, rdx
cmovl rax, rdx
movq xmm0, rbx
xor edx, edx
movq xmm1, rax
punpcklqdq xmm0, xmm1
movups xmmword [r8 + 0x2070], xmm0
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
jne 0x1400090d3
lea rcx, str.virtualFree_failing_
call sym.printf.constprop.0
mov ecx, 1
call sym.exit
nop word [rax + rax]
test rdx, rdx
mov qword [r8 + rax*8], rdx
je 0x1400091cd
mov qword [rdx + 0x20], 0
jmp 0x1400091cd
Function at 0x1400092d0
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
lea rcx, [0x14002a380]
call dbg.__emutls_get_address
mov r9, rbx
and r9, 0xfffffffffffff000
mov rdx, qword [r9 + 8]
mov r8, qword [r9 + 0x10]
cmp rdx, 0xfb0
jle 0x140009330
lea rcx, [r8 + 0x2098]
cmp rax, r8
lea r10, [r9 + 0x18]
je 0x1400093b0
mov rax, qword [rcx]
mov qword [r10], rax
mov rax, qword [r10]
lock cmpxchg qword [rcx], r9
jne 0x1400093a0
add rsp, 0x20
pop rbx
ret
cmp rax, r8
je 0x140009350
lea rdx, [r9 + 0x40]
mov rax, qword [rdx]
mov qword [rbx], rax
mov rax, qword [rbx]
lock cmpxchg qword [rdx], rbx
je 0x140009323
mov qword [rbx], rax
jmp 0x140009339
sub qword [r8 + 0x2088], rdx
mov rax, qword [r9 + 0x28]
mov qword [rbx], rax
mov rax, qword [r9 + 0x30]
mov qword [r9 + 0x28], rbx
cmp rdx, rax
jle 0x1400093d8
lea rax, [rdx + 0xf]
test rdx, rdx
cmovns rax, rdx
sar rax, 4
mov rcx, qword [r8 + rax*8]
test rcx, rcx
mov qword [r9 + 0x18], rcx
je 0x14000938b
mov qword [rcx + 0x20], r9
mov qword [r8 + rax*8], r9
add qword [r9 + 0x30], rdx
add rsp, 0x20
pop rbx
ret
mov qword [r10], rax
jmp 0x140009313
sub qword [rax + 0x2088], rdx
mov rdx, r9
mov r10, qword [r9 + 8]
cmp r10, 0x3f000000
jg 0x140009440
mov rcx, rax
add rsp, 0x20
pop rbx
jmp sym.freeBigChunk__system_u6571
add rax, rdx
cmp rax, 0xfb0
mov qword [r9 + 0x30], rax
jne 0x140009323
lea rax, [rdx + 0xf]
test rdx, rdx
cmovns rax, rdx
mov rdx, qword [r9 + 0x18]
sar rax, 4
cmp r9, qword [r8 + rax*8]
je 0x1400094f8
mov rax, qword [r9 + 0x20]
test rdx, rdx
mov qword [rax + 0x18], rdx
je 0x14000941d
mov rax, qword [r9 + 0x20]
mov qword [rdx + 0x20], rax
mov rdx, r9
mov rcx, r8
pxor xmm0, xmm0
mov qword [r9 + 8], 0x1000
movups xmmword [r9 + 0x18], xmm0
add rsp, 0x20
pop rbx
jmp sym.freeBigChunk__system_u6571
sar rdx, 0x15
movzx eax, dl
mov rax, qword [r8 + rax*8 + 0x20a0]
test rax, rax
jne 0x140009468
jmp 0x140009492
mov rax, qword [rax]
test rax, rax
je 0x140009492
cmp rdx, qword [rax + 8]
jne 0x140009460
mov rcx, r9
mov edx, 1
sar rcx, 0xc
and ecx, 0x1ff
mov r11, rcx
shl rdx, cl
sar r11, 6
not rdx
and qword [rax + r11*8 + 0x10], rdx
mov rax, qword [r8 + 0x2070]
mov rcx, r9
mov rdx, qword [r8 + 0x2078]
mov rbx, rax
sub rbx, r10
cmp rax, rdx
cmovl rax, rdx
movq xmm0, rbx
xor edx, edx
movq xmm1, rax
punpcklqdq xmm0, xmm1
movups xmmword [r8 + 0x2070], xmm0
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
jne 0x140009323
lea rcx, str.virtualFree_failing_
call sym.printf.constprop.0
mov ecx, 1
call sym.exit
nop word [rax + rax]
test rdx, rdx
mov qword [r8 + rax*8], rdx
je 0x14000941d
mov qword [rdx + 0x20], 0
jmp 0x14000941d
Function at 0x140009520
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
lea rcx, [0x14002a380]
call dbg.__emutls_get_address
mov r9, rbx
and r9, 0xfffffffffffff000
mov rdx, qword [r9 + 8]
mov r8, qword [r9 + 0x10]
cmp rdx, 0xfb0
jle 0x140009580
lea rcx, [r8 + 0x2098]
cmp rax, r8
lea r10, [r9 + 0x18]
je 0x140009600
mov rax, qword [rcx]
mov qword [r10], rax
mov rax, qword [r10]
lock cmpxchg qword [rcx], r9
jne 0x1400095f0
add rsp, 0x20
pop rbx
ret
cmp rax, r8
je 0x1400095a0
lea rdx, [r9 + 0x40]
mov rax, qword [rdx]
mov qword [rbx], rax
mov rax, qword [rbx]
lock cmpxchg qword [rdx], rbx
je 0x140009573
mov qword [rbx], rax
jmp 0x140009589
sub qword [r8 + 0x2088], rdx
mov rax, qword [r9 + 0x28]
mov qword [rbx], rax
mov rax, qword [r9 + 0x30]
mov qword [r9 + 0x28], rbx
cmp rdx, rax
jle 0x140009628
lea rax, [rdx + 0xf]
test rdx, rdx
cmovns rax, rdx
sar rax, 4
mov rcx, qword [r8 + rax*8]
test rcx, rcx
mov qword [r9 + 0x18], rcx
je 0x1400095db
mov qword [rcx + 0x20], r9
mov qword [r8 + rax*8], r9
add qword [r9 + 0x30], rdx
add rsp, 0x20
pop rbx
ret
mov qword [r10], rax
jmp 0x140009563
sub qword [rax + 0x2088], rdx
mov rdx, r9
mov r10, qword [r9 + 8]
cmp r10, 0x3f000000
jg 0x140009690
mov rcx, rax
add rsp, 0x20
pop rbx
jmp sym.freeBigChunk__system_u6571
add rax, rdx
cmp rax, 0xfb0
mov qword [r9 + 0x30], rax
jne 0x140009573
lea rax, [rdx + 0xf]
test rdx, rdx
cmovns rax, rdx
mov rdx, qword [r9 + 0x18]
sar rax, 4
cmp r9, qword [r8 + rax*8]
je 0x140009748
mov rax, qword [r9 + 0x20]
test rdx, rdx
mov qword [rax + 0x18], rdx
je 0x14000966d
mov rax, qword [r9 + 0x20]
mov qword [rdx + 0x20], rax
mov rdx, r9
mov rcx, r8
pxor xmm0, xmm0
mov qword [r9 + 8], 0x1000
movups xmmword [r9 + 0x18], xmm0
add rsp, 0x20
pop rbx
jmp sym.freeBigChunk__system_u6571
sar rdx, 0x15
movzx eax, dl
mov rax, qword [r8 + rax*8 + 0x20a0]
test rax, rax
jne 0x1400096b8
jmp 0x1400096e2
mov rax, qword [rax]
test rax, rax
je 0x1400096e2
cmp rdx, qword [rax + 8]
jne 0x1400096b0
mov rcx, r9
mov edx, 1
sar rcx, 0xc
and ecx, 0x1ff
mov r11, rcx
shl rdx, cl
sar r11, 6
not rdx
and qword [rax + r11*8 + 0x10], rdx
mov rax, qword [r8 + 0x2070]
mov rcx, r9
mov rdx, qword [r8 + 0x2078]
mov rbx, rax
sub rbx, r10
cmp rax, rdx
cmovl rax, rdx
movq xmm0, rbx
xor edx, edx
movq xmm1, rax
punpcklqdq xmm0, xmm1
movups xmmword [r8 + 0x2070], xmm0
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
jne 0x140009573
lea rcx, str.virtualFree_failing_
call sym.printf.constprop.0
mov ecx, 1
call sym.exit
nop word [rax + rax]
test rdx, rdx
mov qword [r8 + rax*8], rdx
je 0x14000966d
mov qword [rdx + 0x20], 0
jmp 0x14000966d

Function at 0x140009770
Capabilities:
Terminate process

Disassembly:
push rsi
push rbx
sub rsp, 0x28
mov rsi, rdx
mov rbx, rcx
lea rcx, [0x14002a380]
call dbg.__emutls_get_address
cmp rsi, 0x10
mov rcx, rax
jle 0x140009798
movzx eax, word [rbx - 2]
sub rbx, rax
mov rdx, rbx
add rsp, 0x28
pop rbx
pop rsi
jmp sym.rawDealloc__system_u6959
Function at 0x1400097b0
Capabilities:
Terminate process

Disassembly:
push rsi
push rbx
sub rsp, 0x28
mov rsi, qword [rcx + 0x10]
test rsi, rsi
mov rbx, rcx
je 0x140009819
lea rcx, [0x14002a380]
call dbg.__emutls_get_address
mov r9, rsi
and r9, 0xfffffffffffff000
mov rdx, qword [r9 + 8]
mov r8, qword [r9 + 0x10]
cmp rdx, 0xfb0
jle 0x140009830
lea rcx, [r8 + 0x2098]
cmp rax, r8
lea r10, [r9 + 0x18]
je 0x1400098e0
mov rax, qword [rcx]
mov qword [r10], rax
mov rax, qword [r10]
lock cmpxchg qword [rcx], r9
jne 0x1400098d8
mov qword [rbx + 0x10], 0
pxor xmm0, xmm0
movups xmmword [rbx], xmm0
add rsp, 0x28
pop rbx
pop rsi
ret
cmp rax, r8
je 0x140009850
lea rdx, [r9 + 0x40]
mov rax, qword [rdx]
mov qword [rsi], rax
mov rax, qword [rsi]
lock cmpxchg qword [rdx], rsi
je 0x140009811
mov qword [rsi], rax
jmp 0x140009839
sub qword [r8 + 0x2088], rdx
mov rax, qword [r9 + 0x28]
mov qword [rsi], rax
mov rax, qword [r9 + 0x30]
mov qword [r9 + 0x28], rsi
cmp rdx, rax
jg 0x140009908
add rax, rdx
cmp rax, 0xfb0
mov qword [r9 + 0x30], rax
jne 0x140009811
lea rax, [rdx + 0xf]
test rdx, rdx
cmovns rax, rdx
mov rdx, qword [r9 + 0x18]
sar rax, 4
cmp r9, qword [r8 + rax*8]
je 0x1400099f0
mov rax, qword [r9 + 0x20]
test rdx, rdx
mov qword [rax + 0x18], rdx
je 0x1400098b0
mov rax, qword [r9 + 0x20]
mov qword [rdx + 0x20], rax
pxor xmm0, xmm0
mov rdx, r9
movups xmmword [r9 + 0x18], xmm0
mov rcx, r8
mov qword [r9 + 8], 0x1000
call sym.freeBigChunk__system_u6571
jmp 0x140009811
mov qword [r10], rax
jmp 0x1400097fd
sub qword [rax + 0x2088], rdx
mov rdx, r9
mov r10, qword [r9 + 8]
cmp r10, 0x3f000000
jg 0x140009938
mov rcx, rax
call sym.freeBigChunk__system_u6571
jmp 0x140009811
lea rax, [rdx + 0xf]
test rdx, rdx
cmovns rax, rdx
sar rax, 4
mov rcx, qword [r8 + rax*8]
test rcx, rcx
mov qword [r9 + 0x18], rcx
je 0x140009928
mov qword [rcx + 0x20], r9
mov qword [r8 + rax*8], r9
add qword [r9 + 0x30], rdx
jmp 0x140009811
sar rdx, 0x15
movzx eax, dl
mov rax, qword [r8 + rax*8 + 0x20a0]
test rax, rax
jne 0x1400099b8
nop dword [rax]
mov rax, qword [r8 + 0x2070]
mov rcx, r9
mov rdx, qword [r8 + 0x2078]
mov rsi, rax
sub rsi, r10
cmp rax, rdx
cmovl rax, rdx
movq xmm0, rsi
xor edx, edx
movq xmm1, rax
punpcklqdq xmm0, xmm1
movups xmmword [r8 + 0x2070], xmm0
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
jne 0x140009811
lea rcx, str.virtualFree_failing_
call sym.printf.constprop.0
mov ecx, 1
call sym.exit
mov rax, qword [rax]
test rax, rax
je 0x140009950
cmp rdx, qword [rax + 8]
jne 0x1400099b0
mov rcx, r9
mov edx, 1
sar rcx, 0xc
and ecx, 0x1ff
mov r11, rcx
shl rdx, cl
sar r11, 6
not rdx
and qword [rax + r11*8 + 0x10], rdx
jmp 0x140009950
test rdx, rdx
mov qword [r8 + rax*8], rdx
je 0x1400098b0
mov qword [rdx + 0x20], 0
jmp 0x1400098b0
Function at 0x140009a10
Capabilities:
Terminate process

Disassembly:
push rsi
push rbx
sub rsp, 0x28
mov rsi, qword [rcx + 0x10]
test rsi, rsi
mov rbx, rcx
je 0x140009a79
lea rcx, [0x14002a380]
call dbg.__emutls_get_address
mov r9, rsi
and r9, 0xfffffffffffff000
mov rdx, qword [r9 + 8]
mov r8, qword [r9 + 0x10]
cmp rdx, 0xfb0
jle 0x140009a90
lea rcx, [r8 + 0x2098]
cmp rax, r8
lea r10, [r9 + 0x18]
je 0x140009b40
mov rax, qword [rcx]
mov qword [r10], rax
mov rax, qword [r10]
lock cmpxchg qword [rcx], r9
jne 0x140009b38
mov qword [rbx + 0x10], 0
pxor xmm0, xmm0
movups xmmword [rbx], xmm0
add rsp, 0x28
pop rbx
pop rsi
ret
cmp rax, r8
je 0x140009ab0
lea rdx, [r9 + 0x40]
mov rax, qword [rdx]
mov qword [rsi], rax
mov rax, qword [rsi]
lock cmpxchg qword [rdx], rsi
je 0x140009a71
mov qword [rsi], rax
jmp 0x140009a99
sub qword [r8 + 0x2088], rdx
mov rax, qword [r9 + 0x28]
mov qword [rsi], rax
mov rax, qword [r9 + 0x30]
mov qword [r9 + 0x28], rsi
cmp rdx, rax
jg 0x140009b68
add rax, rdx
cmp rax, 0xfb0
mov qword [r9 + 0x30], rax
jne 0x140009a71
lea rax, [rdx + 0xf]
test rdx, rdx
cmovns rax, rdx
mov rdx, qword [r9 + 0x18]
sar rax, 4
cmp r9, qword [r8 + rax*8]
je 0x140009c50
mov rax, qword [r9 + 0x20]
test rdx, rdx
mov qword [rax + 0x18], rdx
je 0x140009b10
mov rax, qword [r9 + 0x20]
mov qword [rdx + 0x20], rax
pxor xmm0, xmm0
mov rdx, r9
movups xmmword [r9 + 0x18], xmm0
mov rcx, r8
mov qword [r9 + 8], 0x1000
call sym.freeBigChunk__system_u6571
jmp 0x140009a71
mov qword [r10], rax
jmp 0x140009a5d
sub qword [rax + 0x2088], rdx
mov rdx, r9
mov r10, qword [r9 + 8]
cmp r10, 0x3f000000
jg 0x140009b98
mov rcx, rax
call sym.freeBigChunk__system_u6571
jmp 0x140009a71
lea rax, [rdx + 0xf]
test rdx, rdx
cmovns rax, rdx
sar rax, 4
mov rcx, qword [r8 + rax*8]
test rcx, rcx
mov qword [r9 + 0x18], rcx
je 0x140009b88
mov qword [rcx + 0x20], r9
mov qword [r8 + rax*8], r9
add qword [r9 + 0x30], rdx
jmp 0x140009a71
sar rdx, 0x15
movzx eax, dl
mov rax, qword [r8 + rax*8 + 0x20a0]
test rax, rax
jne 0x140009c18
nop dword [rax]
mov rax, qword [r8 + 0x2070]
mov rcx, r9
mov rdx, qword [r8 + 0x2078]
mov rsi, rax
sub rsi, r10
cmp rax, rdx
cmovl rax, rdx
movq xmm0, rsi
xor edx, edx
movq xmm1, rax
punpcklqdq xmm0, xmm1
movups xmmword [r8 + 0x2070], xmm0
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
jne 0x140009a71
lea rcx, str.virtualFree_failing_
call sym.printf.constprop.0
mov ecx, 1
call sym.exit
mov rax, qword [rax]
test rax, rax
je 0x140009bb0
cmp rdx, qword [rax + 8]
jne 0x140009c10
mov rcx, r9
mov edx, 1
sar rcx, 0xc
and ecx, 0x1ff
mov r11, rcx
shl rdx, cl
sar r11, 6
not rdx
and qword [rax + r11*8 + 0x10], rdx
jmp 0x140009bb0
test rdx, rdx
mov qword [r8 + rax*8], rdx
je 0x140009b10
mov qword [rdx + 0x20], 0
jmp 0x140009b10

Function at 0x140009c70
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, qword [rcx + 8]
test rbx, rbx
je 0x140009c84
test byte [rbx + 7], 0x40
je 0x140009c90
add rsp, 0x20
pop rbx
ret
lea rcx, [0x14002a380]
call dbg.__emutls_get_address
mov rdx, rbx
mov rcx, rax
add rsp, 0x20
pop rbx
jmp sym.rawDealloc__system_u6959
Function at 0x14000a330
Capabilities:
Terminate process

Disassembly:
push rdi
push rsi
push rbx
sub rsp, 0x20
test rdx, rdx
mov rbx, rcx
mov rsi, rdx
jne 0x14000a370
lea rdi, [0x14002a380]
sub rbx, 0x10
mov rcx, rdi
call dbg.__emutls_get_address
mov rdx, rbx
mov rcx, rax
add rsp, 0x20
pop rbx
pop rsi
pop rdi
jmp sym.rawDealloc__system_u6959
mov rax, rdx
sub rax, 1
jo 0x14000a3bc
mov rdx, rax
add rdx, 0x10
jo 0x14000a3bc
not rax
and rax, rdx
mov rdi, rax
sub rbx, rdi
lea rdi, [0x14002a380]
mov rcx, rdi
call dbg.__emutls_get_address
cmp rsi, 0x10
mov rcx, rax
jle 0x14000a34d
movzx eax, word [rbx - 2]
sub rbx, rax
mov rdx, rbx
add rsp, 0x20
pop rbx
pop rsi
pop rdi
jmp sym.rawDealloc__system_u6959
call sym.raiseOverflow
jmp 0x14000a38b

Function at 0x14000a3d0
Capabilities:
Terminate process

Disassembly:
push rsi
push rbx
sub rsp, 0x28
mov rax, qword [rcx]
mov rdx, qword [rax]
mov rbx, rcx
test rdx, rdx
je 0x14000a3fa
call rdx
lea rcx, [0x14002a360]
call dbg.__emutls_get_address
cmp byte [rax], 0
jne 0x14000a448
mov rax, qword [rbx]
movsx rsi, word [rax + 0x10]
lea rcx, [0x14002a380]
call dbg.__emutls_get_address
lea rdx, [rbx - 0x10]
mov rcx, rax
test rsi, rsi
je 0x14000a437
lea rdx, [rsi + 0xf]
mov rax, rsi
neg rax
and rax, rdx
sub rbx, rax
cmp rsi, 0x10
jle 0x14000a434
movzx eax, word [rbx - 2]
sub rbx, rax
mov rdx, rbx
add rsp, 0x28
pop rbx
pop rsi
jmp sym.rawDealloc__system_u6959
add rsp, 0x28
pop rbx
pop rsi
ret