joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140005da0
Capabilities:
Terminate process

Disassembly:
sub rsp, 0x28
mov r9, rdx
and r9, 0xfffffffffffff000
mov r8, qword [r9 + 8]
mov rax, qword [r9 + 0x10]
cmp r8, 0xfb0
jle 0x140005df0
lea rdx, [rax + 0x2098]
lea r10, [r9 + 0x18]
cmp rcx, rax
je 0x140005e70
mov rax, qword [rdx]
mov qword [r10], rax
mov rax, qword [r10]
lock cmpxchg qword [rdx], r9
jne 0x140005e60
add rsp, 0x28
ret
cmp rcx, rax
je 0x140005e10
lea rcx, [r9 + 0x40]
mov rax, qword [rcx]
mov qword [rdx], rax
mov rax, qword [rdx]
lock cmpxchg qword [rcx], rdx
je 0x140005de3
mov qword [rdx], rax
jmp 0x140005df9
sub qword [rax + 0x2088], r8
mov rcx, qword [r9 + 0x28]
mov qword [rdx], rcx
mov qword [r9 + 0x28], rdx
mov rdx, qword [r9 + 0x30]
cmp rdx, r8
jge 0x140005e90
test r8, r8
lea rdx, [r8 + 0xf]
cmovns rdx, r8
sar rdx, 4
mov rcx, qword [rax + rdx*8]
mov qword [r9 + 0x18], rcx
test rcx, rcx
je 0x140005e4b
mov qword [rcx + 0x20], r9
mov qword [rax + rdx*8], r9
add qword [r9 + 0x30], r8
add rsp, 0x28
ret
mov qword [r10], rax
jmp 0x140005dd3
sub qword [rcx + 0x2088], r8
mov r8, qword [r9 + 8]
cmp r8, 0x3f000000
jg 0x140005f00
mov rdx, r9
add rsp, 0x28
jmp sym.freeBigChunk__system_u6557
add rdx, r8
mov qword [r9 + 0x30], rdx
cmp rdx, 0xfb0
jne 0x140005de3
test r8, r8
lea rdx, [r8 + 0xf]
mov rcx, qword [r9 + 0x18]
cmovns rdx, r8
sar rdx, 4
cmp r9, qword [rax + rdx*8]
je 0x140005fb0
mov rdx, qword [r9 + 0x20]
mov qword [rdx + 0x18], rcx
test rcx, rcx
je 0x140005ed6
mov rdx, qword [r9 + 0x20]
mov qword [rcx + 0x20], rdx
pxor xmm0, xmm0
mov rdx, r9
mov rcx, rax
mov qword [r9 + 8], 0x1000
movups xmmword [r9 + 0x18], xmm0
add rsp, 0x28
jmp sym.freeBigChunk__system_u6557
mov rcx, r9
sar rcx, 0x15
movzx edx, cl
mov rdx, qword [rax + rdx*8 + 0x20a0]
test rdx, rdx
jne 0x140005f28
jmp 0x140005f53
mov rdx, qword [rdx]
test rdx, rdx
je 0x140005f53
cmp rcx, qword [rdx + 8]
jne 0x140005f20
mov rcx, r9
mov r10d, 1
sar rcx, 0xc
and ecx, 0x1ff
mov r11, rcx
shl r10, cl
sar r11, 6
not r10
and qword [rdx + r11*8 + 0x10], r10
mov rdx, qword [rax + 0x2070]
mov rcx, qword [rax + 0x2078]
cmp rcx, rdx
cmovl rcx, rdx
sub rdx, r8
mov r8d, 0x8000
mov qword [rax + 0x2070], rdx
xor edx, edx
mov qword [rax + 0x2078], rcx
mov rcx, r9
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
jne 0x140005de3
lea rcx, str.virtualFree_failing_
call sym.printf.constprop.0
mov ecx, 1
call sym.exit
nop dword [rax + rax]
mov qword [rax + rdx*8], rcx
test rcx, rcx
je 0x140005ed6
mov qword [rcx + 0x20], 0
jmp 0x140005ed6
Function at 0x140005fd0
Capabilities:
Terminate process

Disassembly:
sub rsp, 0x28
mov r9, rdx
and r9, 0xfffffffffffff000
mov r8, qword [r9 + 8]
mov rax, qword [r9 + 0x10]
cmp r8, 0xfb0
jle 0x140006020
lea rdx, [rax + 0x2098]
lea r10, [r9 + 0x18]
cmp rcx, rax
je 0x1400060a0
mov rax, qword [rdx]
mov qword [r10], rax
mov rax, qword [r10]
lock cmpxchg qword [rdx], r9
jne 0x140006090
add rsp, 0x28
ret
cmp rcx, rax
je 0x140006040
lea rcx, [r9 + 0x40]
mov rax, qword [rcx]
mov qword [rdx], rax
mov rax, qword [rdx]
lock cmpxchg qword [rcx], rdx
je 0x140006013
mov qword [rdx], rax
jmp 0x140006029
sub qword [rax + 0x2088], r8
mov rcx, qword [r9 + 0x28]
mov qword [rdx], rcx
mov qword [r9 + 0x28], rdx
mov rdx, qword [r9 + 0x30]
cmp r8, rdx
jle 0x1400060c0
test r8, r8
lea rdx, [r8 + 0xf]
cmovns rdx, r8
sar rdx, 4
mov rcx, qword [rax + rdx*8]
mov qword [r9 + 0x18], rcx
test rcx, rcx
je 0x14000607b
mov qword [rcx + 0x20], r9
mov qword [rax + rdx*8], r9
add qword [r9 + 0x30], r8
add rsp, 0x28
ret
mov qword [r10], rax
jmp 0x140006003
sub qword [rcx + 0x2088], r8
mov r8, qword [r9 + 8]
cmp r8, 0x3f000000
jg 0x140006130
mov rdx, r9
add rsp, 0x28
jmp sym.freeBigChunk__system_u6557
add rdx, r8
mov qword [r9 + 0x30], rdx
cmp rdx, 0xfb0
jne 0x140006013
test r8, r8
lea rdx, [r8 + 0xf]
mov rcx, qword [r9 + 0x18]
cmovns rdx, r8
sar rdx, 4
cmp r9, qword [rax + rdx*8]
je 0x1400061e0
mov rdx, qword [r9 + 0x20]
mov qword [rdx + 0x18], rcx
test rcx, rcx
je 0x140006106
mov rdx, qword [r9 + 0x20]
mov qword [rcx + 0x20], rdx
pxor xmm0, xmm0
mov rdx, r9
mov rcx, rax
mov qword [r9 + 8], 0x1000
movups xmmword [r9 + 0x18], xmm0
add rsp, 0x28
jmp sym.freeBigChunk__system_u6557
mov rcx, r9
sar rcx, 0x15
movzx edx, cl
mov rdx, qword [rax + rdx*8 + 0x20a0]
test rdx, rdx
jne 0x140006158
jmp 0x140006183
mov rdx, qword [rdx]
test rdx, rdx
je 0x140006183
cmp rcx, qword [rdx + 8]
jne 0x140006150
mov rcx, r9
mov r10d, 1
sar rcx, 0xc
and ecx, 0x1ff
mov r11, rcx
shl r10, cl
sar r11, 6
not r10
and qword [rdx + r11*8 + 0x10], r10
mov rdx, qword [rax + 0x2070]
mov rcx, qword [rax + 0x2078]
cmp rcx, rdx
cmovl rcx, rdx
sub rdx, r8
mov r8d, 0x8000
mov qword [rax + 0x2070], rdx
xor edx, edx
mov qword [rax + 0x2078], rcx
mov rcx, r9
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
jne 0x140006013
lea rcx, str.virtualFree_failing_
call sym.printf.constprop.0
mov ecx, 1
call sym.exit
nop dword [rax + rax]
mov qword [rax + rdx*8], rcx
test rcx, rcx
je 0x140006106
mov qword [rcx + 0x20], 0
jmp 0x140006106
Function at 0x140006580
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
lea rcx, [0x14001c2a0]
call sym.__emutls_get_address
mov r9, rbx
and r9, 0xfffffffffffff000
mov rdx, qword [r9 + 8]
mov r8, qword [r9 + 0x10]
cmp rdx, 0xfb0
jle 0x1400065e0
lea rcx, [r8 + 0x2098]
lea r10, [r9 + 0x18]
cmp rax, r8
je 0x140006660
mov rax, qword [rcx]
mov qword [r10], rax
mov rax, qword [r10]
lock cmpxchg qword [rcx], r9
jne 0x140006650
add rsp, 0x20
pop rbx
ret
cmp rax, r8
je 0x140006600
lea rdx, [r9 + 0x40]
mov rax, qword [rdx]
mov qword [rbx], rax
mov rax, qword [rbx]
lock cmpxchg qword [rdx], rbx
je 0x1400065d3
mov qword [rbx], rax
jmp 0x1400065e9
sub qword [r8 + 0x2088], rdx
mov rax, qword [r9 + 0x28]
mov qword [rbx], rax
mov rax, qword [r9 + 0x30]
mov qword [r9 + 0x28], rbx
cmp rdx, rax
jle 0x140006688
test rdx, rdx
lea rax, [rdx + 0xf]
cmovns rax, rdx
sar rax, 4
mov rcx, qword [r8 + rax*8]
mov qword [r9 + 0x18], rcx
test rcx, rcx
je 0x14000663b
mov qword [rcx + 0x20], r9
mov qword [r8 + rax*8], r9
add qword [r9 + 0x30], rdx
add rsp, 0x20
pop rbx
ret
mov qword [r10], rax
jmp 0x1400065c3
sub qword [rax + 0x2088], rdx
mov r10, qword [r9 + 8]
mov rdx, r9
cmp r10, 0x3f000000
jg 0x1400066f0
mov rcx, rax
add rsp, 0x20
pop rbx
jmp sym.freeBigChunk__system_u6557
add rax, rdx
mov qword [r9 + 0x30], rax
cmp rax, 0xfb0
jne 0x1400065d3
test rdx, rdx
lea rax, [rdx + 0xf]
cmovns rax, rdx
mov rdx, qword [r9 + 0x18]
sar rax, 4
cmp r9, qword [r8 + rax*8]
je 0x1400067a0
mov rax, qword [r9 + 0x20]
mov qword [rax + 0x18], rdx
test rdx, rdx
je 0x1400066cd
mov rax, qword [r9 + 0x20]
mov qword [rdx + 0x20], rax
pxor xmm0, xmm0
mov rdx, r9
mov rcx, r8
mov qword [r9 + 8], 0x1000
movups xmmword [r9 + 0x18], xmm0
add rsp, 0x20
pop rbx
jmp sym.freeBigChunk__system_u6557
sar rdx, 0x15
movzx eax, dl
mov rax, qword [r8 + rax*8 + 0x20a0]
test rax, rax
jne 0x140006718
jmp 0x140006742
mov rax, qword [rax]
test rax, rax
je 0x140006742
cmp rdx, qword [rax + 8]
jne 0x140006710
mov rcx, r9
mov edx, 1
sar rcx, 0xc
and ecx, 0x1ff
mov r11, rcx
shl rdx, cl
sar r11, 6
not rdx
and qword [rax + r11*8 + 0x10], rdx
mov rax, qword [r8 + 0x2070]
mov rdx, qword [r8 + 0x2078]
mov rcx, r9
cmp rdx, rax
cmovl rdx, rax
sub rax, r10
mov qword [r8 + 0x2070], rax
mov qword [r8 + 0x2078], rdx
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
jne 0x1400065d3
lea rcx, str.virtualFree_failing_
call sym.printf.constprop.0
mov ecx, 1
call sym.exit
nop word [rax + rax]
mov qword [r8 + rax*8], rdx
test rdx, rdx
je 0x1400066cd
mov qword [rdx + 0x20], 0
jmp 0x1400066cd
Function at 0x1400067c0
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
lea rcx, [0x14001c2a0]
call sym.__emutls_get_address
mov r9, rbx
and r9, 0xfffffffffffff000
mov rdx, qword [r9 + 8]
mov r8, qword [r9 + 0x10]
cmp rdx, 0xfb0
jle 0x140006820
lea rcx, [r8 + 0x2098]
lea r10, [r9 + 0x18]
cmp rax, r8
je 0x1400068a0
mov rax, qword [rcx]
mov qword [r10], rax
mov rax, qword [r10]
lock cmpxchg qword [rcx], r9
jne 0x140006890
add rsp, 0x20
pop rbx
ret
cmp rax, r8
je 0x140006840
lea rdx, [r9 + 0x40]
mov rax, qword [rdx]
mov qword [rbx], rax
mov rax, qword [rbx]
lock cmpxchg qword [rdx], rbx
je 0x140006813
mov qword [rbx], rax
jmp 0x140006829
sub qword [r8 + 0x2088], rdx
mov rax, qword [r9 + 0x28]
mov qword [rbx], rax
mov rax, qword [r9 + 0x30]
mov qword [r9 + 0x28], rbx
cmp rdx, rax
jle 0x1400068c8
test rdx, rdx
lea rax, [rdx + 0xf]
cmovns rax, rdx
sar rax, 4
mov rcx, qword [r8 + rax*8]
mov qword [r9 + 0x18], rcx
test rcx, rcx
je 0x14000687b
mov qword [rcx + 0x20], r9
mov qword [r8 + rax*8], r9
add qword [r9 + 0x30], rdx
add rsp, 0x20
pop rbx
ret
mov qword [r10], rax
jmp 0x140006803
sub qword [rax + 0x2088], rdx
mov r10, qword [r9 + 8]
mov rdx, r9
cmp r10, 0x3f000000
jg 0x140006930
mov rcx, rax
add rsp, 0x20
pop rbx
jmp sym.freeBigChunk__system_u6557
add rax, rdx
mov qword [r9 + 0x30], rax
cmp rax, 0xfb0
jne 0x140006813
test rdx, rdx
lea rax, [rdx + 0xf]
cmovns rax, rdx
mov rdx, qword [r9 + 0x18]
sar rax, 4
cmp r9, qword [r8 + rax*8]
je 0x1400069e0
mov rax, qword [r9 + 0x20]
mov qword [rax + 0x18], rdx
test rdx, rdx
je 0x14000690d
mov rax, qword [r9 + 0x20]
mov qword [rdx + 0x20], rax
pxor xmm0, xmm0
mov rdx, r9
mov rcx, r8
mov qword [r9 + 8], 0x1000
movups xmmword [r9 + 0x18], xmm0
add rsp, 0x20
pop rbx
jmp sym.freeBigChunk__system_u6557
sar rdx, 0x15
movzx eax, dl
mov rax, qword [r8 + rax*8 + 0x20a0]
test rax, rax
jne 0x140006958
jmp 0x140006982
mov rax, qword [rax]
test rax, rax
je 0x140006982
cmp rdx, qword [rax + 8]
jne 0x140006950
mov rcx, r9
mov edx, 1
sar rcx, 0xc
and ecx, 0x1ff
mov r11, rcx
shl rdx, cl
sar r11, 6
not rdx
and qword [rax + r11*8 + 0x10], rdx
mov rax, qword [r8 + 0x2070]
mov rdx, qword [r8 + 0x2078]
mov rcx, r9
cmp rdx, rax
cmovl rdx, rax
sub rax, r10
mov qword [r8 + 0x2070], rax
mov qword [r8 + 0x2078], rdx
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
jne 0x140006813
lea rcx, str.virtualFree_failing_
call sym.printf.constprop.0
mov ecx, 1
call sym.exit
nop word [rax + rax]
mov qword [r8 + rax*8], rdx
test rdx, rdx
je 0x14000690d
mov qword [rdx + 0x20], 0
jmp 0x14000690d
Function at 0x140006a00
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
lea rcx, [0x14001c2a0]
call sym.__emutls_get_address
mov r9, rbx
and r9, 0xfffffffffffff000
mov rdx, qword [r9 + 8]
mov r8, qword [r9 + 0x10]
cmp rdx, 0xfb0
jle 0x140006a60
lea rcx, [r8 + 0x2098]
lea r10, [r9 + 0x18]
cmp rax, r8
je 0x140006ae0
mov rax, qword [rcx]
mov qword [r10], rax
mov rax, qword [r10]
lock cmpxchg qword [rcx], r9
jne 0x140006ad0
add rsp, 0x20
pop rbx
ret
cmp rax, r8
je 0x140006a80
lea rdx, [r9 + 0x40]
mov rax, qword [rdx]
mov qword [rbx], rax
mov rax, qword [rbx]
lock cmpxchg qword [rdx], rbx
je 0x140006a53
mov qword [rbx], rax
jmp 0x140006a69
sub qword [r8 + 0x2088], rdx
mov rax, qword [r9 + 0x28]
mov qword [rbx], rax
mov rax, qword [r9 + 0x30]
mov qword [r9 + 0x28], rbx
cmp rdx, rax
jle 0x140006b08
test rdx, rdx
lea rax, [rdx + 0xf]
cmovns rax, rdx
sar rax, 4
mov rcx, qword [r8 + rax*8]
mov qword [r9 + 0x18], rcx
test rcx, rcx
je 0x140006abb
mov qword [rcx + 0x20], r9
mov qword [r8 + rax*8], r9
add qword [r9 + 0x30], rdx
add rsp, 0x20
pop rbx
ret
mov qword [r10], rax
jmp 0x140006a43
sub qword [rax + 0x2088], rdx
mov r10, qword [r9 + 8]
mov rdx, r9
cmp r10, 0x3f000000
jg 0x140006b70
mov rcx, rax
add rsp, 0x20
pop rbx
jmp sym.freeBigChunk__system_u6557
add rax, rdx
mov qword [r9 + 0x30], rax
cmp rax, 0xfb0
jne 0x140006a53
test rdx, rdx
lea rax, [rdx + 0xf]
cmovns rax, rdx
mov rdx, qword [r9 + 0x18]
sar rax, 4
cmp r9, qword [r8 + rax*8]
je 0x140006c20
mov rax, qword [r9 + 0x20]
mov qword [rax + 0x18], rdx
test rdx, rdx
je 0x140006b4d
mov rax, qword [r9 + 0x20]
mov qword [rdx + 0x20], rax
pxor xmm0, xmm0
mov rdx, r9
mov rcx, r8
mov qword [r9 + 8], 0x1000
movups xmmword [r9 + 0x18], xmm0
add rsp, 0x20
pop rbx
jmp sym.freeBigChunk__system_u6557
sar rdx, 0x15
movzx eax, dl
mov rax, qword [r8 + rax*8 + 0x20a0]
test rax, rax
jne 0x140006b98
jmp 0x140006bc2
mov rax, qword [rax]
test rax, rax
je 0x140006bc2
cmp rdx, qword [rax + 8]
jne 0x140006b90
mov rcx, r9
mov edx, 1
sar rcx, 0xc
and ecx, 0x1ff
mov r11, rcx
shl rdx, cl
sar r11, 6
not rdx
and qword [rax + r11*8 + 0x10], rdx
mov rax, qword [r8 + 0x2070]
mov rdx, qword [r8 + 0x2078]
mov rcx, r9
cmp rdx, rax
cmovl rdx, rax
sub rax, r10
mov qword [r8 + 0x2070], rax
mov qword [r8 + 0x2078], rdx
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
jne 0x140006a53
lea rcx, str.virtualFree_failing_
call sym.printf.constprop.0
mov ecx, 1
call sym.exit
nop word [rax + rax]
mov qword [r8 + rax*8], rdx
test rdx, rdx
je 0x140006b4d
mov qword [rdx + 0x20], 0
jmp 0x140006b4d

Function at 0x140006c40
Capabilities:
Terminate process

Disassembly:
push rsi
push rbx
sub rsp, 0x28
mov rbx, rcx
lea rcx, [0x14001c2a0]
mov rsi, rdx
call sym.__emutls_get_address
mov rcx, rax
cmp rsi, 0x10
jle 0x140006c68
movzx eax, word [rbx - 2]
sub rbx, rax
mov rdx, rbx
add rsp, 0x28
pop rbx
pop rsi
jmp sym.rawDealloc__system_u6968
Function at 0x140006c80
Capabilities:
Terminate process

Disassembly:
push rsi
push rbx
sub rsp, 0x28
mov rsi, qword [rcx + 0x10]
mov rbx, rcx
test rsi, rsi
je 0x140006ce9
lea rcx, [0x14001c2a0]
call sym.__emutls_get_address
mov r9, rsi
and r9, 0xfffffffffffff000
mov rdx, qword [r9 + 8]
mov r8, qword [r9 + 0x10]
cmp rdx, 0xfb0
jle 0x140006d00
lea rcx, [r8 + 0x2098]
lea r10, [r9 + 0x18]
cmp rax, r8
je 0x140006db0
mov rax, qword [rcx]
mov qword [r10], rax
mov rax, qword [r10]
lock cmpxchg qword [rcx], r9
jne 0x140006da8
mov qword [rbx + 0x10], 0
pxor xmm0, xmm0
movups xmmword [rbx], xmm0
add rsp, 0x28
pop rbx
pop rsi
ret
cmp rax, r8
je 0x140006d20
lea rdx, [r9 + 0x40]
mov rax, qword [rdx]
mov qword [rsi], rax
mov rax, qword [rsi]
lock cmpxchg qword [rdx], rsi
je 0x140006ce1
mov qword [rsi], rax
jmp 0x140006d09
sub qword [r8 + 0x2088], rdx
mov rax, qword [r9 + 0x28]
mov qword [rsi], rax
mov rax, qword [r9 + 0x30]
mov qword [r9 + 0x28], rsi
cmp rdx, rax
jg 0x140006dd8
add rax, rdx
mov qword [r9 + 0x30], rax
cmp rax, 0xfb0
jne 0x140006ce1
test rdx, rdx
lea rax, [rdx + 0xf]
cmovns rax, rdx
mov rdx, qword [r9 + 0x18]
sar rax, 4
cmp r9, qword [r8 + rax*8]
je 0x140006eb0
mov rax, qword [r9 + 0x20]
mov qword [rax + 0x18], rdx
test rdx, rdx
je 0x140006d80
mov rax, qword [r9 + 0x20]
mov qword [rdx + 0x20], rax
mov qword [r9 + 8], 0x1000
pxor xmm0, xmm0
mov rdx, r9
mov rcx, r8
movups xmmword [r9 + 0x18], xmm0
call sym.freeBigChunk__system_u6557
jmp 0x140006ce1
mov qword [r10], rax
jmp 0x140006ccd
sub qword [rax + 0x2088], rdx
mov r10, qword [r9 + 8]
mov rdx, r9
cmp r10, 0x3f000000
jg 0x140006e08
mov rcx, rax
call sym.freeBigChunk__system_u6557
jmp 0x140006ce1
test rdx, rdx
lea rax, [rdx + 0xf]
cmovns rax, rdx
sar rax, 4
mov rcx, qword [r8 + rax*8]
mov qword [r9 + 0x18], rcx
test rcx, rcx
je 0x140006df8
mov qword [rcx + 0x20], r9
mov qword [r8 + rax*8], r9
add qword [r9 + 0x30], rdx
jmp 0x140006ce1
sar rdx, 0x15
movzx eax, dl
mov rax, qword [r8 + rax*8 + 0x20a0]
test rax, rax
jne 0x140006e80
nop dword [rax]
mov rax, qword [r8 + 0x2070]
mov rdx, qword [r8 + 0x2078]
mov rcx, r9
cmp rdx, rax
cmovl rdx, rax
sub rax, r10
mov qword [r8 + 0x2070], rax
mov qword [r8 + 0x2078], rdx
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
jne 0x140006ce1
lea rcx, str.virtualFree_failing_
call sym.printf.constprop.0
mov ecx, 1
call sym.exit
nop dword [rax]
mov rax, qword [rax]
test rax, rax
je 0x140006e20
cmp rdx, qword [rax + 8]
jne 0x140006e78
mov rcx, r9
mov edx, 1
sar rcx, 0xc
and ecx, 0x1ff
mov r11, rcx
shl rdx, cl
sar r11, 6
not rdx
and qword [rax + r11*8 + 0x10], rdx
jmp 0x140006e20
mov qword [r8 + rax*8], rdx
test rdx, rdx
je 0x140006d80
mov qword [rdx + 0x20], 0
jmp 0x140006d80
Function at 0x140006ed0
Capabilities:
Terminate process

Disassembly:
push rsi
push rbx
sub rsp, 0x28
mov rsi, qword [rcx + 0x10]
mov rbx, rcx
test rsi, rsi
je 0x140006f39
lea rcx, [0x14001c2a0]
call sym.__emutls_get_address
mov r9, rsi
and r9, 0xfffffffffffff000
mov rdx, qword [r9 + 8]
mov r8, qword [r9 + 0x10]
cmp rdx, 0xfb0
jle 0x140006f50
lea rcx, [r8 + 0x2098]
lea r10, [r9 + 0x18]
cmp rax, r8
je 0x140007000
mov rax, qword [rcx]
mov qword [r10], rax
mov rax, qword [r10]
lock cmpxchg qword [rcx], r9
jne 0x140006ff8
mov qword [rbx + 0x10], 0
pxor xmm0, xmm0
movups xmmword [rbx], xmm0
add rsp, 0x28
pop rbx
pop rsi
ret
cmp rax, r8
je 0x140006f70
lea rdx, [r9 + 0x40]
mov rax, qword [rdx]
mov qword [rsi], rax
mov rax, qword [rsi]
lock cmpxchg qword [rdx], rsi
je 0x140006f31
mov qword [rsi], rax
jmp 0x140006f59
sub qword [r8 + 0x2088], rdx
mov rax, qword [r9 + 0x28]
mov qword [rsi], rax
mov rax, qword [r9 + 0x30]
mov qword [r9 + 0x28], rsi
cmp rdx, rax
jg 0x140007028
add rax, rdx
mov qword [r9 + 0x30], rax
cmp rax, 0xfb0
jne 0x140006f31
test rdx, rdx
lea rax, [rdx + 0xf]
cmovns rax, rdx
mov rdx, qword [r9 + 0x18]
sar rax, 4
cmp r9, qword [r8 + rax*8]
je 0x140007100
mov rax, qword [r9 + 0x20]
mov qword [rax + 0x18], rdx
test rdx, rdx
je 0x140006fd0
mov rax, qword [r9 + 0x20]
mov qword [rdx + 0x20], rax
mov qword [r9 + 8], 0x1000
pxor xmm0, xmm0
mov rdx, r9
mov rcx, r8
movups xmmword [r9 + 0x18], xmm0
call sym.freeBigChunk__system_u6557
jmp 0x140006f31
mov qword [r10], rax
jmp 0x140006f1d
sub qword [rax + 0x2088], rdx
mov r10, qword [r9 + 8]
mov rdx, r9
cmp r10, 0x3f000000
jg 0x140007058
mov rcx, rax
call sym.freeBigChunk__system_u6557
jmp 0x140006f31
test rdx, rdx
lea rax, [rdx + 0xf]
cmovns rax, rdx
sar rax, 4
mov rcx, qword [r8 + rax*8]
mov qword [r9 + 0x18], rcx
test rcx, rcx
je 0x140007048
mov qword [rcx + 0x20], r9
mov qword [r8 + rax*8], r9
add qword [r9 + 0x30], rdx
jmp 0x140006f31
sar rdx, 0x15
movzx eax, dl
mov rax, qword [r8 + rax*8 + 0x20a0]
test rax, rax
jne 0x1400070d0
nop dword [rax]
mov rax, qword [r8 + 0x2070]
mov rdx, qword [r8 + 0x2078]
mov rcx, r9
cmp rdx, rax
cmovl rdx, rax
sub rax, r10
mov qword [r8 + 0x2070], rax
mov qword [r8 + 0x2078], rdx
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
jne 0x140006f31
lea rcx, str.virtualFree_failing_
call sym.printf.constprop.0
mov ecx, 1
call sym.exit
nop dword [rax]
mov rax, qword [rax]
test rax, rax
je 0x140007070
cmp rdx, qword [rax + 8]
jne 0x1400070c8
mov rcx, r9
mov edx, 1
sar rcx, 0xc
and ecx, 0x1ff
mov r11, rcx
shl rdx, cl
sar r11, 6
not rdx
and qword [rax + r11*8 + 0x10], rdx
jmp 0x140007070
mov qword [r8 + rax*8], rdx
test rdx, rdx
je 0x140006fd0
mov qword [rdx + 0x20], 0
jmp 0x140006fd0

Function at 0x140007120
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, qword [rcx + 8]
test rbx, rbx
je 0x140007134
test byte [rbx + 7], 0x40
je 0x140007140
add rsp, 0x20
pop rbx
ret
lea rcx, [0x14001c2a0]
call sym.__emutls_get_address
mov rdx, rbx
mov rcx, rax
add rsp, 0x20
pop rbx
jmp sym.rawDealloc__system_u6968
Function at 0x140007520
Capabilities:
Terminate process

Disassembly:
push rdi
push rsi
push rbx
sub rsp, 0x20
mov rbx, rcx
mov rsi, rdx
test rdx, rdx
jne 0x140007560
sub rbx, 0x10
lea rdi, [0x14001c2a0]
mov rcx, rdi
call sym.__emutls_get_address
mov rdx, rbx
mov rcx, rax
add rsp, 0x20
pop rbx
pop rsi
pop rdi
jmp sym.rawDealloc__system_u6968
mov rax, rdx
sub rax, 1
jo 0x1400075a9
mov rdx, rax
add rdx, 0x10
jo 0x1400075a9
not rax
and rax, rdx
lea rdi, [0x14001c2a0]
sub rbx, rax
mov rcx, rdi
call sym.__emutls_get_address
mov rcx, rax
cmp rsi, 0x10
jle 0x14000753d
movzx eax, word [rbx - 2]
sub rbx, rax
mov rdx, rbx
add rsp, 0x20
pop rbx
pop rsi
pop rdi
jmp sym.rawDealloc__system_u6968
call sym.raiseOverflow
xor eax, eax
jmp 0x140007578

Function at 0x140007770
Capabilities:
Terminate process

Disassembly:
push rdi
push rsi
push rbx
sub rsp, 0x20
mov rax, qword [rcx]
mov rdx, qword [rax]
mov rbx, rcx
test rdx, rdx
je 0x14000779b
call rdx
lea rcx, [0x14001c280]
call sym.__emutls_get_address
cmp byte [rax], 0
jne 0x140007810
mov rax, qword [rbx]
movsx rsi, word [rax + 0x10]
test rsi, rsi
jne 0x1400077d0
sub rbx, 0x10
lea rdi, [0x14001c2a0]
mov rcx, rdi
call sym.__emutls_get_address
mov rdx, rbx
mov rcx, rax
add rsp, 0x20
pop rbx
pop rsi
pop rdi
jmp sym.rawDealloc__system_u6968
mov rax, rsi
lea rdx, [rsi + 0xf]
lea rdi, [0x14001c2a0]
neg rax
mov rcx, rdi
and rax, rdx
sub rbx, rax
call sym.__emutls_get_address
mov rcx, rax
cmp rsi, 0x10
jle 0x1400077b0
movzx eax, word [rbx - 2]
mov rdx, rbx
sub rdx, rax
add rsp, 0x20
pop rbx
pop rsi
pop rdi
jmp sym.rawDealloc__system_u6968
add rsp, 0x20
pop rbx
pop rsi
pop rdi
ret
Function at 0x140007d90
Capabilities:
Terminate process

Disassembly:
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x20
imul rdx, qword [rcx + 8], 3
mov rsi, rcx
jo 0x140007e3b
mov rax, rdx
shr rax, 0x3f
add rax, rdx
sar rax, 1
imul rbx, rax, 0x10
mov qword [rcx + 8], rax
jo 0x140007e3b
test rbx, rbx
js 0x140007e68
mov r12, qword [rcx + 0x10]
lea rcx, [0x14001c2a0]
call sym.__emutls_get_address
mov rdi, rax
test rbx, rbx
je 0x140007e50
mov rdx, rbx
mov rcx, rax
call sym.rawAlloc__system_u6816
mov rbp, rax
test r12, r12
je 0x140007e2c
mov rax, r12
mov rdx, r12
mov rcx, rbp
and rax, 0xfffffffffffff000
mov r8, qword [rax + 8]
lea rax, [r8 - 0x30]
cmp r8, 0xfb0
cmovg r8, rax
cmp rbx, r8
cmovle r8, rbx
call sym.memcpy
mov rdx, r12
mov rcx, rdi
call sym.rawDealloc__system_u6968
mov qword [rsi + 0x10], rbp
add rsp, 0x20
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret
add rsp, 0x20
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
jmp sym.raiseOverflow
test r12, r12
je 0x140007e60
mov rdx, r12
mov rcx, rax
call sym.rawDealloc__system_u6968
xor ebp, ebp
jmp 0x140007e2c
movabs r8, 0x7fffffffffffffff
xor edx, edx
mov rcx, rbx
add rsp, 0x20
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
jmp sym.raiseRangeErrorI

Function at 0x140007e90
Capabilities:
Terminate process

Disassembly:
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x20
imul rdx, qword [rcx + 8], 3
mov rsi, rcx
jo 0x140007f3b
mov rax, rdx
shr rax, 0x3f
add rax, rdx
sar rax, 1
imul rbx, rax, 0x10
mov qword [rcx + 8], rax
jo 0x140007f3b
test rbx, rbx
js 0x140007f68
mov r12, qword [rcx + 0x10]
lea rcx, [0x14001c2a0]
call sym.__emutls_get_address
mov rdi, rax
test rbx, rbx
je 0x140007f50
mov rdx, rbx
mov rcx, rax
call sym.rawAlloc__system_u6816
mov rbp, rax
test r12, r12
je 0x140007f2c
mov rax, r12
mov rdx, r12
mov rcx, rbp
and rax, 0xfffffffffffff000
mov r8, qword [rax + 8]
lea rax, [r8 - 0x30]
cmp r8, 0xfb0
cmovg r8, rax
cmp rbx, r8
cmovle r8, rbx
call sym.memcpy
mov rdx, r12
mov rcx, rdi
call sym.rawDealloc__system_u6968
mov qword [rsi + 0x10], rbp
add rsp, 0x20
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret
add rsp, 0x20
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
jmp sym.raiseOverflow
test r12, r12
je 0x140007f60
mov rdx, r12
mov rcx, rax
call sym.rawDealloc__system_u6968
xor ebp, ebp
jmp 0x140007f2c
movabs r8, 0x7fffffffffffffff
xor edx, edx
mov rcx, rbx
add rsp, 0x20
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
jmp sym.raiseRangeErrorI