joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4442e0
Capabilities:
Write file on windows

Disassembly:
push rsi
push rdi
sub rsp, 0x38
mov rsi, rdx
mov rdi, rcx
mov ecx, 0xfffffff4
call qword [sym.imp.kernel32.dll_GetStdHandle]
test rax, rax
je 0x444323
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x34]
mov rcx, rax
mov rdx, rdi
mov r8d, esi
call qword [sym.imp.kernel32.dll_WriteFile]
test eax, eax
jne 0x444323
call qword [sym.imp.kernel32.dll_GetLastError]
nop
add rsp, 0x38
pop rdi
pop rsi
ret
Function at 0x4464f0
Capabilities:
Check for time delay via queryperformancecounter

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x40
cmp dword [0x01149024], 0
jle 0x446542
cmp qword [0x01173350], 0
je 0x44664f
lea rcx, [rsp + 0x30]
call qword [sym.imp.kernel32.dll_QueryPerformanceCounter]
imul rax, qword [rsp + 0x30], 0x3b9aca00
mov rcx, qword [0x01173350]
mov rdx, rax
or rdx, rcx
shr rdx, 0x20
je 0x446547
cqo
idiv rcx
mov r14, rax
jmp 0x44654e
xor r14d, r14d
jmp 0x44654e
xor edx, edx
div ecx
mov r14d, eax
mov eax, dword [0x006b2450]
mov ebp, eax
neg ebp
cmovs ebp, eax
mov ebx, 0x10
xor edi, edi
lea rsi, [0x011b3360]
nop dword [rax]
lea rcx, [rsi + rbx]
mov edx, ebp
mov r8, rsi
call method.__sanitizer::StackStore::BlockInfo.Pack___sanitizer::StackStore::Compression____sanitizer::StackStore_
add rdi, rax
add rbx, 0x10
cmp rbx, 0x10010
jne 0x446570
test rdi, rdi
je 0x446643
cmp dword [0x01149024], 0
jle 0x446643
cmp qword [0x01173350], 0
je 0x44666c
lea rcx, [rsp + 0x30]
call qword [sym.imp.kernel32.dll_QueryPerformanceCounter]
mov rbx, qword [rsp + 0x30]
mov rsi, qword [0x01173350]
lea rdx, [0x011c3370]
lea rcx, [rsp + 0x30]
call method.__sanitizer::StackDepotBase___sanitizer::StackDepotNode__1__20_.GetStats___const
mov r9, qword [rsp + 0x38]
cmp dword [0x01149024], 0
je 0x446643
imul rax, rbx, 0x3b9aca00
mov rcx, rax
or rcx, rsi
shr rcx, 0x20
je 0x446602
cqo
idiv rsi
jmp 0x446606
xor edx, edx
div esi
sub rax, r14
add r9, rdi
mov rbx, qword [str.SanitizerTool]
shr rdi, 0xa
shr r9, 0xa
movabs rcx, 0x431bde82d7b634db
mul rcx
shr rdx, 0x12
mov qword [rsp + 0x20], rdx
lea rcx, str._s:_StackDepot_released__zu_KiB_out_of__zu_KiB_in__llu_ms_n
mov rdx, rbx
mov r8, rdi
call method.__sanitizer.Printf_char_const__..._
nop
add rsp, 0x40
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
lea rcx, [0x01173350]
call qword [sym.imp.kernel32.dll_QueryPerformanceFrequency]
cmp qword [0x01173350], 0
jne 0x446511
jmp 0x446687
lea rcx, [0x01173350]
call qword [sym.imp.kernel32.dll_QueryPerformanceFrequency]
cmp qword [0x01173350], 0
jne 0x4465b2
mov qword [rsp + 0x20], 0
lea rcx, str.gotsan.cpp
lea r8, str.__frequency.QuadPart_______0__
mov edx, 0x2430
xor r9d, r9d
call method.__sanitizer.CheckFailed_char_const__int__char_const__unsigned_long_long__unsigned_long_long_
int3
Function at 0x446c40
Capabilities:
Print debug messages
Write file on windows

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x30
lea rax, [rdx - 1]
test rdx, rax
jne 0x446c69
lea rax, [rcx + rdx]
add rax, 0xffffffffffffffff
neg rdx
and rdx, rax
mov rax, rdx
add rsp, 0x30
pop rbx
pop rdi
pop rsi
ret
mov rsi, qword [0x00613d80]
mov al, 1
xchg byte [rsi], al
test al, al
jne 0x446cff
lea rcx, [0x00613d80]
call method.__sanitizer::ReportFile.ReopenIfNecessary__
mov rcx, qword [0x00613d88]
cmp rcx, 0xffffffffffffffff
je 0x446d46
lea rax, [rcx - 1]
cmp rax, 1
ja 0x446cbf
xor eax, eax
cmp rcx, 1
sete al
or eax, 0xfffffff4
mov ecx, eax
call qword [sym.imp.kernel32.dll_GetStdHandle]
mov rcx, rax
test rax, rax
je 0x446cea
mov qword [rsp + 0x20], 0
lea rdx, str.IsPowerOfTwo_boundary__n
lea r9, [rsp + 0x2c]
mov r8d, 0x17
call qword [sym.imp.kernel32.dll_WriteFile]
test eax, eax
jne 0x446cf7
call qword [sym.imp.kernel32.dll_GetLastError]
lea rcx, str.IsPowerOfTwo_boundary__n
call qword [sym.imp.kernel32.dll_OutputDebugStringA]
mov byte [rsi], 0
call method.__sanitizer.Die__
xor edi, edi
mov rbx, qword [sym.imp.kernel32.dll_Sleep]
jmp 0x446d13
add edi, 1
cmp edi, 0x63
ja 0x446d30
pause
cmp byte [rsi], 0
jne 0x446d10
jmp 0x446d39
xor ecx, ecx
call rbx
cmp byte [rsi], 0
jne 0x446d10
mov al, 1
xchg byte [rsi], al
test al, al
jne 0x446d10
jmp 0x446c7c
mov qword [rsp + 0x20], 0
lea rcx, str.gotsan.cpp
lea r8, str.__fd_____fd_t__1_______0_
mov edx, 0x250a
xor r9d, r9d
call method.__sanitizer.CheckFailed_char_const__int__char_const__unsigned_long_long__unsigned_long_long_
int3
Function at 0x448280
Capabilities:
Get system information on windows

Disassembly:
push rsi
sub rsp, 0x60
mov byte [rcx + 0x81008], 0
mov byte [rcx + 0x81009], 0
mov byte [rcx + 0x8100a], 0
mov byte [rcx + 0x8100b], 0
mov byte [rcx + 0x8100c], 0
mov byte [rcx + 0x8100d], 0
mov byte [rcx + 0x8100e], 0
mov byte [rcx + 0x8100f], 0
mov byte [rcx + 0x81010], 0
mov byte [rcx + 0x81011], 0
mov byte [rcx + 0x81012], 0
mov byte [rcx + 0x81013], 0
mov byte [rcx + 0x81014], 0
mov byte [rcx + 0x81015], 0
mov byte [rcx + 0x81016], 0
mov byte [rcx + 0x81017], 0
mov byte [rcx + 0x81018], 0
mov byte [rcx + 0x81019], 0
mov byte [rcx + 0x8101a], 0
mov byte [rcx + 0x8101b], 0
mov byte [rcx + 0x8101c], 0
mov byte [rcx + 0x8101d], 0
mov byte [rcx + 0x8101e], 0
mov byte [rcx + 0x8101f], 0
mov byte [rcx + 0x81020], 0
mov byte [rcx + 0x81021], 0
mov byte [rcx + 0x81022], 0
mov byte [rcx + 0x81023], 0
mov byte [rcx + 0x81024], 0
mov byte [rcx + 0x81025], 0
mov byte [rcx + 0x81026], 0
mov byte [rcx + 0x81027], 0
mov byte [rcx + 0x81028], 0
mov byte [rcx + 0x81029], 0
mov byte [rcx + 0x8102a], 0
mov byte [rcx + 0x8102b], 0
mov byte [rcx + 0x8102c], 0
mov byte [rcx + 0x8102d], 0
mov byte [rcx + 0x8102e], 0
mov byte [rcx + 0x8102f], 0
test r8, r8
jne 0x4484c3
mov rsi, rcx
mov byte [rcx], 0
xor eax, eax
nop
mov byte [rsi + rax + 8], 0
mov byte [rsi + rax + 9], 0
mov byte [rsi + rax + 0xa], 0
mov byte [rsi + rax + 0xb], 0
mov byte [rsi + rax + 0xc], 0
mov byte [rsi + rax + 0xd], 0
mov byte [rsi + rax + 0xe], 0
mov byte [rsi + rax + 0xf], 0
add rax, 8
cmp rax, 0x40000
jne 0x4483b0
lea rax, [rsi + 0x40dc0]
lea r8, [rsi + 0x40050]
cmp rax, r8
cmova r8, rax
lea rcx, [rsi + 0x40040]
sub r8, rsi
add r8, 0xfffffffffffbffcf
and r8, 0xffffffffffffffd0
xor edx, edx
call sym..rel
mov rax, 0xfffffffffffbfdb8
nop dword [rax]
mov byte [rsi + rax + 0x81008], 0
mov byte [rsi + rax + 0x81009], 0
mov byte [rsi + rax + 0x8100a], 0
mov byte [rsi + rax + 0x8100b], 0
mov byte [rsi + rax + 0x8100c], 0
mov byte [rsi + rax + 0x8100d], 0
mov byte [rsi + rax + 0x8100e], 0
mov byte [rsi + rax + 0x8100f], 0
mov byte [rsi + rax + 0x81010], 0
mov byte [rsi + rax + 0x81011], 0
mov byte [rsi + rax + 0x81012], 0
mov byte [rsi + rax + 0x81013], 0
add rax, 0xc
jne 0x448420
mov rax, qword [0x01149028]
test rax, rax
jne 0x4484a8
lea rcx, [rsp + 0x30]
call qword [sym.imp.kernel32.dll_GetSystemInfo]
mov eax, dword [rsp + 0x34]
mov qword [0x01149028], rax
mov qword [rsi + 0x40dc0], rax
lea rax, [rsi + 0x40dd0]
mov qword [rsi + 0x40dc8], rax
add rsp, 0x60
pop rsi
ret
mov qword [rsp + 0x20], 0
lea rcx, str....._sanitizer_common_sanitizer_allocator_primary32.h
lea r8, str.___heap_start______0_
mov edx, 0x7b
xor r9d, r9d
call method.__sanitizer.CheckFailed_char_const__int__char_const__unsigned_long_long__unsigned_long_long_
int3
Function at 0x448740
Capabilities:
Enumerate pe sections

Disassembly:
push rsi
push rdi
sub rsp, 0x28
mov rsi, rdx
mov rdi, rcx
mov rax, qword [rcx + 8]
mov r9, qword [rcx + 0x10]
shr rax, 5
cmp r9, rax
jae 0x448875
mov rax, qword [rdi]
lea rcx, [r9 + 1]
mov qword [rdi + 0x10], rcx
shl r9, 5
mov cl, byte [rsi]
mov byte [rax + r9], cl
mov cl, byte [rsi + 1]
mov byte [rax + r9 + 1], cl
mov cl, byte [rsi + 2]
mov byte [rax + r9 + 2], cl
mov cl, byte [rsi + 3]
mov byte [rax + r9 + 3], cl
mov cl, byte [rsi + 4]
mov byte [rax + r9 + 4], cl
mov cl, byte [rsi + 5]
mov byte [rax + r9 + 5], cl
mov cl, byte [rsi + 6]
mov byte [rax + r9 + 6], cl
mov cl, byte [rsi + 7]
mov byte [rax + r9 + 7], cl
mov cl, byte [rsi + 8]
mov byte [rax + r9 + 8], cl
mov cl, byte [rsi + 9]
mov byte [rax + r9 + 9], cl
mov cl, byte [rsi + 0xa]
mov byte [rax + r9 + 0xa], cl
mov cl, byte [rsi + 0xb]
mov byte [rax + r9 + 0xb], cl
mov cl, byte [rsi + 0xc]
mov byte [rax + r9 + 0xc], cl
mov cl, byte [rsi + 0xd]
mov byte [rax + r9 + 0xd], cl
mov cl, byte [rsi + 0xe]
mov byte [rax + r9 + 0xe], cl
mov cl, byte [rsi + 0xf]
mov byte [rax + r9 + 0xf], cl
mov cl, byte [rsi + 0x10]
mov byte [rax + r9 + 0x10], cl
mov cl, byte [rsi + 0x11]
mov byte [rax + r9 + 0x11], cl
mov cl, byte [rsi + 0x12]
mov byte [rax + r9 + 0x12], cl
mov cl, byte [rsi + 0x13]
mov byte [rax + r9 + 0x13], cl
mov cl, byte [rsi + 0x14]
mov byte [rax + r9 + 0x14], cl
mov cl, byte [rsi + 0x15]
mov byte [rax + r9 + 0x15], cl
mov cl, byte [rsi + 0x16]
mov byte [rax + r9 + 0x16], cl
mov cl, byte [rsi + 0x17]
mov byte [rax + r9 + 0x17], cl
mov cl, byte [rsi + 0x18]
mov byte [rax + r9 + 0x18], cl
mov cl, byte [rsi + 0x19]
mov byte [rax + r9 + 0x19], cl
mov cl, byte [rsi + 0x1a]
mov byte [rax + r9 + 0x1a], cl
mov cl, byte [rsi + 0x1b]
mov byte [rax + r9 + 0x1b], cl
mov cl, byte [rsi + 0x1c]
mov byte [rax + r9 + 0x1c], cl
mov cl, byte [rsi + 0x1d]
mov byte [rax + r9 + 0x1d], cl
mov cl, byte [rsi + 0x1e]
mov byte [rax + r9 + 0x1e], cl
mov cl, byte [rsi + 0x1f]
mov byte [rax + r9 + 0x1f], cl
add rsp, 0x28
pop rdi
pop rsi
ret
jne 0x448897
add r9, 1
mov rcx, r9
call method.__sanitizer.RoundUpToPowerOfTwo_unsigned_long_long_
mov rcx, rdi
mov rdx, rax
call sym.runtime_race_internal_amd64v1_.text__ZN11__sanitizer24InternalMmapVectorNoCtorINS_11SuppressionEE7ReallocEy_
mov r9, qword [rdi + 0x10]
jmp 0x448761
mov qword [rsp + 0x20], rax
lea rcx, str....._sanitizer_common_sanitizer_common.h
lea r8, str.__size_______capacity____
mov edx, 0x213
call method.__sanitizer.CheckFailed_char_const__int__char_const__unsigned_long_long__unsigned_long_long_
int3
Function at 0x449600
Capabilities:
Get system information on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x58
mov rdi, rdx
mov r14, rcx
mov eax, dword [rdx + 0x400000]
mov qword [rcx], rax
xor esi, esi
lea r15, [rsp + 0x28]
mov r13, qword [sym.imp.kernel32.dll_GetSystemInfo]
xor ebx, ebx
jmp 0x44965a
mov ecx, 0x100000
call method.__sanitizer.RoundUpTo_unsigned_long_long__unsigned_long_long_
add rsi, rax
add rbx, 1
cmp rbx, 0x8000
je 0x449686
mov rax, qword [rdi + rbx*8 + 0x400010]
test rax, rax
je 0x44964d
mov rdx, qword [0x01149028]
test rdx, rdx
jne 0x449640
mov rcx, r15
call r13
mov edx, dword [rsp + 0x2c]
mov qword [0x01149028], rdx
jmp 0x449640
mov r15, qword [0x011b3368]
xor edi, edi
lea rbx, [0x01173358]
lea r12, [rsp + 0x28]
xor ebp, ebp
jmp 0x4496ba
mov ecx, 0x40000
call method.__sanitizer.RoundUpTo_unsigned_long_long__unsigned_long_long_
add rdi, rax
add rbp, 1
cmp rbp, 0x8000
je 0x4496e3
mov rax, qword [rbx + rbp*8 + 8]
test rax, rax
je 0x4496ad
mov rdx, qword [0x01149028]
test rdx, rdx
jne 0x4496a0
mov rcx, r12
call r13
mov edx, dword [rsp + 0x2c]
mov qword [0x01149028], rdx
jmp 0x4496a0
add rsi, r15
lea rax, [rdi + rsi]
add rax, 0x10010
mov qword [r14 + 8], rax
mov rax, r14
add rsp, 0x58
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x449f00
Capabilities:
Encode data using base64

Disassembly:
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x30
mov rsi, r9
test r8, r8
mov edi, 1
cmovne rdi, r8
mov rax, rdi
add rax, r9
jae 0x449f42
mov rdx, qword [str.SanitizerTool]
lea rcx, str.WARNING:__s:_CombinedAllocator_allocation_overflow:_0x_zx_bytes_with_0x_zx_alignment_requested_n
mov r8, rdi
mov r9, rsi
call method.__sanitizer.Report_char_const__..._
xor eax, eax
jmp 0x44a036
mov r14, rdx
mov r15, rcx
mov rax, rdi
cmp rsi, 9
jb 0x449f5c
mov rcx, rdi
mov rdx, rsi
call method.__sanitizer.RoundUpTo_unsigned_long_long__unsigned_long_long_
cmp rsi, 0x20000
ja 0x449f7f
cmp rax, 0x20000
ja 0x449f7f
cmp rax, 0x100
ja 0x449faa
add rax, 0xf
shr rax, 4
jmp 0x449fe3
lea rcx, [r15 + 0x40dc0]
add r15, 0x81008
mov rdx, r15
mov r8, rdi
mov r9, rsi
call fcn.0044a0e0
cmp rsi, 9
jae 0x44a02d
jmp 0x44a036
bsr rdx, rax
xor rdx, 0x3f
mov cl, 0x3d
sub cl, dl
mov rbx, rax
shr rbx, cl
and ebx, 3
mov edi, 0xffffffff
shl edi, cl
not edi
and eax, edi
xor rdx, 0x3f
shl rdx, 2
or rdx, rbx
cmp eax, 1
sbb rdx, 0xffffffffffffffff
add rdx, 0xfffffffffffffff0
mov rax, rdx
test rax, rax
je 0x44a042
cmp rax, 0x36
jae 0x44a066
mov rbx, rax
shl rbx, 0xa
lea rdi, [r14 + rbx]
mov rcx, qword [r14 + rbx]
test rcx, rcx
je 0x44a0ae
lea rax, [rcx - 1]
mov qword [rdi], rax
mov rdx, qword [rdi + rcx*8 + 0x10]
mov rax, qword [rdi + rcx*8 + 0x18]
prefetchnta byte [rdx]
mov rcx, qword [r14 + rbx + 0x10]
lock add qword [r14 + 0xd810], rcx
cmp rsi, 9
jb 0x44a036
add rsi, 0xffffffffffffffff
and rsi, rax
jne 0x44a08a
add rsp, 0x30
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret
mov qword [rsp + 0x20], 0
lea rcx, str....._sanitizer_common_sanitizer_allocator_local_cache.h
lea r8, str.__class_id_______0UL__
mov edx, 0xa0
xor r9d, r9d
call method.__sanitizer.CheckFailed_char_const__int__char_const__unsigned_long_long__unsigned_long_long_
mov qword [rsp + 0x20], 0x36
lea rcx, str....._sanitizer_common_sanitizer_allocator_local_cache.h
lea r8, str.__class_id_______kNumClasses__
mov edx, 0xa1
mov r9, rax
call method.__sanitizer.CheckFailed_char_const__int__char_const__unsigned_long_long__unsigned_long_long_
mov qword [rsp + 0x20], 0
lea rcx, str....._sanitizer_common_sanitizer_allocator_combined.h
lea r8, str.__reinterpret_cast_uptr__res____alignment___1_______0__
mov edx, 0x49
mov r9, rsi
call method.__sanitizer.CheckFailed_char_const__int__char_const__unsigned_long_long__unsigned_long_long_
mov rcx, r14
mov rdx, rdi
mov r8, r15
mov r9, rax
call method.__sanitizer::SizeClassAllocator32LocalCache___sanitizer::SizeClassAllocator32___sanitizer::AP32___.Refill___sanitizer::SizeClassAllocator32LocalCache___sanitizer::SizeClassAllocator32___sanitizer::AP32___::PerClass____sanitizer::SizeClassAllocator
test al, al
je 0x44a0cb
mov rcx, qword [rdi]
jmp 0x44a006
xor eax, eax
cmp rsi, 9
jae 0x44a02d
jmp 0x44a036
Function at 0x44b1e0
Capabilities:
Get system information on windows

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x58
mov rdi, rdx
mov rsi, rcx
mov al, 1
xchg byte [rcx], al
test al, al
jne 0x44b25e
mov rax, qword [rsi + rdi*8 + 8]
test rax, rax
jne 0x44b251
mov rdx, qword [0x01149028]
test rdx, rdx
jne 0x44b223
lea rcx, [rsp + 0x28]
call qword [sym.imp.kernel32.dll_GetSystemInfo]
mov edx, dword [rsp + 0x2c]
mov qword [0x01149028], rdx
mov ecx, 0x1000
call method.__sanitizer.RoundUpTo_unsigned_long_long__unsigned_long_long_
mov rbx, rax
xor ecx, ecx
mov rdx, rax
mov r8d, 0x3000
mov r9d, 4
call qword [sym.imp.kernel32.dll_VirtualAlloc]
test rax, rax
je 0x44b28c
mov qword [rsi + rdi*8 + 8], rax
mov byte [rsi], 0
add rsp, 0x58
pop rbx
pop rdi
pop rsi
pop r14
ret
xor ebx, ebx
mov r14, qword [sym.imp.kernel32.dll_Sleep]
jmp 0x44b26c
add ebx, 1
cmp ebx, 0x63
ja 0x44b275
pause
jmp 0x44b27a
xor ecx, ecx
call r14
cmp byte [rsi], 0
jne 0x44b269
mov al, 1
xchg byte [rsi], al
test al, al
jne 0x44b269
jmp 0x44b1f7
call qword [sym.imp.kernel32.dll_GetLastError]
mov byte [rsp + 0x20], 0
lea rdx, str.TwoLevelMap
lea r8, str.allocate
mov rcx, rbx
mov r9d, eax
call method.__sanitizer.ReportMmapFailureAndDie_unsigned_long_long__char_const__char_const__unsigned_int__bool_
int3
Function at 0x44bd60
Capabilities:
Print debug messages
Write file on windows

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x30
mov rsi, rdx
mov rdi, rcx
mov rax, rdx
shr rax, 0x2f
jne 0x44bdca
mov rdx, rsi
shr rdx, 0x20
mov rax, qword [rdi + rdx*8 + 8]
test rax, rax
je 0x44bdca
mov rbx, rsi
shr rbx, 0x14
mov rax, qword [rdi + rdx*8 + 8]
test rax, rax
je 0x44bdb6
and ebx, 0xfff
cmp byte [rax + rbx], 0
je 0x44bdca
mov rcx, rdi
mov rdx, rsi
add rsp, 0x30
pop rbx
pop rdi
pop rsi
jmp method.__sanitizer::SizeClassAllocator32___sanitizer::AP32_.GetActuallyAllocatedSize_void_
mov rcx, rdi
call method.__sanitizer::TwoLevelMap_unsigned_char__32768ull__4096ull____sanitizer::LocalAddressSpaceView_.Create_unsigned_long_long__const
and ebx, 0xfff
cmp byte [rax + rbx], 0
jne 0x44bda4
mov rdx, qword [rdi + 0x40dc0]
lea rax, [rdx - 1]
test rax, rsi
jne 0x44bded
sub rsi, rdx
mov rcx, qword [rsi + 0x10]
add rsp, 0x30
pop rbx
pop rdi
pop rsi
jmp method.__sanitizer.RoundUpTo_unsigned_long_long__unsigned_long_long_
mov qword [rsp + 0x20], 0
lea rcx, str....._sanitizer_common_sanitizer_allocator_secondary.h
lea r8, str.__IsAligned_p__page_size________0_
mov edx, 0x129
xor r9d, r9d
call method.__sanitizer.CheckFailed_char_const__int__char_const__unsigned_long_long__unsigned_long_long_
int3
Function at 0x44dbc0
Capabilities:
Get system information on windows

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x58
mov rdi, rcx
mov ebx, dword [rcx + 0x10]
mov r14, qword [rcx]
cmp edx, 0x41
mov r9d, 0x40
cmovae r9d, edx
lea eax, [r9 - 1]
test r9d, eax
jne 0x44dbed
mov rdx, r9
jmp 0x44dc1f
bsr rax, r9
xor rax, 0x3f
mov ecx, eax
neg cl
mov esi, 1
mov edx, 1
shl rdx, cl
cmp rdx, r9
jbe 0x44dcf5
xor al, 0x3f
mov ecx, eax
shl rsi, cl
cmp rsi, r9
jae 0x44dd12
mov rcx, rdi
call method.__sanitizer::DenseMap___sanitizer::detail::DenseMapPair_unsigned_int__unsigned_long_long___unsigned_int____sanitizer::DenseMapInfo___sanitizer::detail::DenseMapPair_unsigned_int__unsigned_long_long_______sanitizer::detail::DenseMapPair___sanitizer:
mov rax, qword [rdi]
test rax, rax
je 0x44dcd1
test r14, r14
je 0x44dc86
shl rbx, 3
lea rbx, [rbx + rbx*2]
lea r8, [r14 + rbx]
mov rcx, rdi
mov rdx, r14
call sym.runtime_race_internal_amd64v1_.text__ZN11__sanitizer12DenseMapBaseINS_8DenseMapINS_6detail12DenseMapPairIjyEEjNS_12DenseMapInf
mov rdx, qword [0x01149028]
test rdx, rdx
jne 0x44dc71
lea rcx, [rsp + 0x28]
call qword [sym.imp.kernel32.dll_GetSystemInfo]
mov edx, dword [rsp + 0x2c]
mov qword [0x01149028], rdx
mov rcx, rbx
call method.__sanitizer.RoundUpTo_unsigned_long_long__unsigned_long_long_
mov rcx, r14
mov rdx, rax
call method.__sanitizer.UnmapOrDie_void__unsigned_long_long_
jmp 0x44dcc7
mov qword [rdi + 8], 0
mov ecx, dword [rdi + 0x10]
lea r9d, [rcx - 1]
and r9d, ecx
jne 0x44dd2f
test rcx, rcx
je 0x44dcc7
lea rcx, [rcx + rcx*2]
lea rcx, [rax + rcx*8]
nop dword [rax + rax]
mov dword [rax], 0xffffffff
mov qword [rax + 8], 0xffffffffffffffff
add rax, 0x18
cmp rax, rcx
jne 0x44dcb0
add rsp, 0x58
pop rbx
pop rdi
pop rsi
pop r14
ret
mov qword [rsp + 0x20], 0
lea rcx, str....._sanitizer_common_sanitizer_dense_map.h
lea r8, str.__Buckets______0_
mov edx, 0x289
xor r9d, r9d
call method.__sanitizer.CheckFailed_char_const__int__char_const__unsigned_long_long__unsigned_long_long_
mov qword [rsp + 0x20], rdx
lea rcx, str....._sanitizer_common_sanitizer_common.h
lea r8, str.__size________1ULL_____up__1____
mov edx, 0x1c4
call method.__sanitizer.CheckFailed_char_const__int__char_const__unsigned_long_long__unsigned_long_long_
mov qword [rsp + 0x20], rsi
lea rcx, str....._sanitizer_common_sanitizer_common.h
lea r8, str.__size________1ULL____up___
mov edx, 0x1c5
call method.__sanitizer.CheckFailed_char_const__int__char_const__unsigned_long_long__unsigned_long_long_
mov qword [rsp + 0x20], 0
lea rcx, str....._sanitizer_common_sanitizer_dense_map.h
lea r8, str.___getNumBuckets_____getNumBuckets_____1________0__
mov edx, 0x10f
call method.__sanitizer.CheckFailed_char_const__int__char_const__unsigned_long_long__unsigned_long_long_
int3
Function at 0x44dd60
Capabilities:
Get system information on windows

Disassembly:
push r15
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x58
mov ebp, edx
mov r14, rcx
mov dword [rcx + 0x10], edx
test edx, edx
je 0x44dda4
mov eax, ebp
lea rbx, [rax*8]
shl rax, 4
lea rsi, [rax + rax*2]
mov rdi, qword [0x01149028]
test rdi, rdi
je 0x44ddb0
lea rbx, [rbx + rbx*2]
cmp rsi, rdi
jbe 0x44ddd3
jmp 0x44de5d
mov qword [r14], 0
jmp 0x44dea5
lea rcx, [rsp + 0x28]
call qword [sym.imp.kernel32.dll_GetSystemInfo]
mov edi, dword [rsp + 0x2c]
mov qword [0x01149028], rdi
lea rbx, [rbx + rbx*2]
cmp rsi, rdi
ja 0x44de5d
test rdi, rdi
jne 0x44ddee
lea rcx, [rsp + 0x28]
call qword [sym.imp.kernel32.dll_GetSystemInfo]
mov edi, dword [rsp + 0x2c]
mov qword [0x01149028], rdi
cmp rbx, rdi
ja 0x44deb7
mov rax, rdi
or rax, rbx
shr rax, 0x20
je 0x44de0d
mov rax, rdi
xor edx, edx
div rbx
jmp 0x44de13
mov eax, edi
xor edx, edx
div ebx
bsr rcx, rax
shl rbx, cl
mov eax, dword [r14 + 0x10]
shl eax, cl
mov dword [r14 + 0x10], eax
shl rax, 3
lea rax, [rax + rax*2]
cmp rbx, rax
jne 0x44dedb
lea r15, [rbx + rbx]
test rdi, rdi
jne 0x44de54
lea rcx, [rsp + 0x28]
call qword [sym.imp.kernel32.dll_GetSystemInfo]
mov edi, dword [rsp + 0x2c]
mov qword [0x01149028], rdi
cmp r15, rdi
jbe 0x44defb
test rdi, rdi
jne 0x44de78
lea rcx, [rsp + 0x28]
call qword [sym.imp.kernel32.dll_GetSystemInfo]
mov edi, dword [rsp + 0x2c]
mov qword [0x01149028], rdi
mov rcx, rbx
mov rdx, rdi
call method.__sanitizer.RoundUpTo_unsigned_long_long__unsigned_long_long_
mov rdi, rax
xor ecx, ecx
mov rdx, rax
mov r8d, 0x3000
mov r9d, 4
call qword [sym.imp.kernel32.dll_VirtualAlloc]
test rax, rax
je 0x44df1b
mov qword [r14], rax
test ebp, ebp
setne al
add rsp, 0x58
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
ret
mov qword [rsp + 0x20], 0
lea rcx, str....._sanitizer_common_sanitizer_common.h
lea r8, str.__x_______0U__
mov edx, 0x19c
xor r9d, r9d
call method.__sanitizer.CheckFailed_char_const__int__char_const__unsigned_long_long__unsigned_long_long_
mov qword [rsp + 0x20], rax
lea rcx, str....._sanitizer_common_sanitizer_dense_map.h
lea r8, str.__Size______sizeof_BucketT___NumBuckets__
mov edx, 0x2af
mov r9, rbx
call method.__sanitizer.CheckFailed_char_const__int__char_const__unsigned_long_long__unsigned_long_long_
mov qword [rsp + 0x20], rdi
lea rcx, str....._sanitizer_common_sanitizer_dense_map.h
lea r8, str.__Size__2_______GetPageSizeCached____
mov edx, 0x2b0
mov r9, r15
call method.__sanitizer.CheckFailed_char_const__int__char_const__unsigned_long_long__unsigned_long_long_
call qword [sym.imp.kernel32.dll_GetLastError]
mov byte [rsp + 0x20], 0
lea rdx, str.DenseMap
lea r8, str.allocate
mov rcx, rdi
mov r9d, eax
call method.__sanitizer.ReportMmapFailureAndDie_unsigned_long_long__char_const__char_const__unsigned_int__bool_
int3