joyce8/EMBER2024-capa huggingface dataset:
Function at 0x180288b70
Capabilities:
Query environment variable

Disassembly:
sub rsp, 0xb8
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.180052720
lea rcx, [rsp + 0x40]
call fcn.180288b30
movzx eax, al
test eax, eax
jne 0x180288bb8
mov qword [rsp + 0x70], 0
lea rcx, [rsp + 0x40]
call fcn.180288a40
mov rax, qword [rsp + 0x70]
jmp 0x180288d89
lea rcx, [rsp + 0x40]
call fcn.180056330
mov qword [rsp + 0x60], rax
mov rcx, qword [rsp + 0x60]
call fcn.180288ae0
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x78]
sub rcx, rax
mov rax, rcx
sar rax, 1
mov qword [rsp + 0x68], rax
lea rcx, [rsp + 0x40]
call fcn.180056330
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9d, dword [rsp + 0x68]
mov r8, rax
xor edx, edx
xor ecx, ecx
call fcn.180288910
cdqe
mov qword [rsp + 0x58], rax
cmp qword [rsp + 0x58], 0
jne 0x180288c5e
mov qword [rsp + 0x80], 0
lea rcx, [rsp + 0x40]
call fcn.180288a40
mov rax, qword [rsp + 0x80]
jmp 0x180288d89
mov r9d, 0x66
lea r8, str.minkernelcrtsucrt_srcdesktopcrtenvget_environment_from_os.cpp
mov edx, 2
mov rcx, qword [rsp + 0x58]
call fcn.180267bf0
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.180052720
lea rcx, [rsp + 0x48]
call fcn.180229360
movzx eax, al
test eax, eax
jne 0x180288cc5
mov qword [rsp + 0x88], 0
lea rcx, [rsp + 0x48]
call fcn.180229340
lea rcx, [rsp + 0x40]
call fcn.180288a40
mov rax, qword [rsp + 0x88]
jmp 0x180288d89
lea rcx, [rsp + 0x48]
call fcn.180056330
mov qword [rsp + 0x90], rax
lea rcx, [rsp + 0x40]
call fcn.180056330
mov qword [rsp + 0x98], rax
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x68]
mov r8, qword [rsp + 0x98]
xor edx, edx
xor ecx, ecx
call fcn.180288910
mov dword [rsp + 0x50], eax
cmp dword [rsp + 0x50], 0
jne 0x180288d5b
mov qword [rsp + 0xa0], 0
lea rcx, [rsp + 0x48]
call fcn.180229340
lea rcx, [rsp + 0x40]
call fcn.180288a40
mov rax, qword [rsp + 0xa0]
jmp 0x180288d89
lea rcx, [rsp + 0x48]
call fcn.18022c390
mov qword [rsp + 0xa8], rax
lea rcx, [rsp + 0x48]
call fcn.180229340
lea rcx, [rsp + 0x40]
call fcn.180288a40
mov rax, qword [rsp + 0xa8]
add rsp, 0xb8
ret
Function at 0x180288da0
Capabilities:
Query environment variable

Disassembly:
sub rsp, 0x78
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov rdx, rax
lea rcx, [rsp + 0x20]
call fcn.180052720
lea rcx, [rsp + 0x20]
call fcn.180288a60
movzx eax, al
test eax, eax
jne 0x180288de5
mov qword [rsp + 0x40], 0
lea rcx, [rsp + 0x20]
call fcn.180288a40
mov rax, qword [rsp + 0x40]
jmp 0x180288edf
lea rcx, [rsp + 0x20]
call fcn.180056330
mov qword [rsp + 0x30], rax
mov rcx, qword [rsp + 0x30]
call fcn.180288ae0
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x48]
sub rcx, rax
mov rax, rcx
sar rax, 1
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
shl rax, 1
mov r9d, 0x40
lea r8, str.minkernelcrtsucrt_srcdesktopcrtenvget_environment_from_os.cpp
mov edx, 2
mov rcx, rax
call fcn.180267bf0
mov rdx, rax
lea rcx, [rsp + 0x28]
call fcn.180052720
lea rcx, [rsp + 0x28]
call fcn.180229360
movzx eax, al
test eax, eax
jne 0x180288e7f
mov qword [rsp + 0x50], 0
lea rcx, [rsp + 0x28]
call fcn.180229340
lea rcx, [rsp + 0x20]
call fcn.180288a40
mov rax, qword [rsp + 0x50]
jmp 0x180288edf
lea rcx, [rsp + 0x20]
call fcn.180056330
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x28]
call fcn.180056330
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x38]
shl rax, 1
mov r8, rax
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x60]
call fcn.18029e870
lea rcx, [rsp + 0x28]
call fcn.18022c390
mov qword [rsp + 0x68], rax
lea rcx, [rsp + 0x28]
call fcn.180229340
lea rcx, [rsp + 0x20]
call fcn.180288a40
mov rax, qword [rsp + 0x68]
add rsp, 0x78
ret

Function at 0x18028a610
Capabilities:
Set environment variable

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x28
mov rax, qword [rsp + 0x38]
mov rdx, qword [rax]
mov rax, qword [rsp + 0x30]
mov rcx, qword [rax]
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
add rsp, 0x28
ret
Function at 0x18029b8e0
Capabilities:
Set environment variable

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0xb8
lea rcx, [rsp + 0x78]
call fcn.18026b7a0
lea rcx, [rsp + 0x48]
call fcn.18026b7a0
call fcn.18027f5f0
mov r8d, eax
lea rdx, [rsp + 0x78]
mov rcx, qword [rsp + 0xc0]
call fcn.18026b690
mov dword [rsp + 0x20], eax
cmp dword [rsp + 0x20], 0
je 0x18029b94f
mov dword [rsp + 0x24], 0
lea rcx, [rsp + 0x48]
call fcn.18026b830
lea rcx, [rsp + 0x78]
call fcn.18026b830
mov eax, dword [rsp + 0x24]
jmp 0x18029b9e0
call fcn.18027f5f0
mov r8d, eax
lea rdx, [rsp + 0x48]
mov rcx, qword [rsp + 0xc8]
call fcn.18026b690
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0
je 0x18029b996
mov dword [rsp + 0x2c], 0
lea rcx, [rsp + 0x48]
call fcn.18026b830
lea rcx, [rsp + 0x78]
call fcn.18026b830
mov eax, dword [rsp + 0x2c]
jmp 0x18029b9e0
lea rcx, [rsp + 0x48]
call fcn.180080b40
mov qword [rsp + 0x38], rax
lea rcx, [rsp + 0x78]
call fcn.180080b40
mov qword [rsp + 0x40], rax
mov rdx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov dword [rsp + 0x30], eax
lea rcx, [rsp + 0x48]
call fcn.18026b830
lea rcx, [rsp + 0x78]
call fcn.18026b830
mov eax, dword [rsp + 0x30]
add rsp, 0xb8
ret
Function at 0x1400386f0
Capabilities:
Parse pe header

Disassembly:
mov eax, 0x5a4d
cmp word [rcx], ax
jne 0x140038718
movsxd rdx, dword [rcx + 0x3c]
add rdx, rcx
cmp dword [rdx], 0x4550
jne 0x140038718
xor eax, eax
mov ecx, 0x20b
cmp word [rdx + 0x18], cx
sete al
ret
xor eax, eax
ret
Function at 0x180003350
Capabilities:
Terminate process

Disassembly:
push rbx
mov eax, 0x20
call fcn.1800768a0
sub rsp, rax
or rax, 0xffffffffffffffff
mov rbx, rcx
test rcx, rcx
cmove rbx, rax
call fcn.180007640
lea rdx, [rsp + 0x30]
mov rcx, rax
mov r8, rbx
call fcn.1800073b0
test eax, eax
je 0x180003391
mov ecx, 0x7f
call sub.api_ms_win_crt_runtime_l1_1_0.dll_exit
int3
mov rax, qword [rsp + 0x30]
add rsp, 0x20
pop rbx
ret
Function at 0x180006ce0
Capabilities:
Hash data using fnv

Disassembly:
mov eax, 0x18
call fcn.1800768a0
sub rsp, rax
mov rax, qword [0x18009d5d8]
xor rax, rsp
mov qword [rsp + 8], rax
mov r10, r9
mov r11, rcx
mov r9d, edx
test edx, edx
jne 0x180006d1d
xor eax, eax
mov rcx, qword [rsp + 8]
xor rcx, rsp
call fcn.180076910
add rsp, 0x18
ret
mov rcx, qword [r8]
xor edx, edx
mov qword [rsp], rcx
movzx eax, byte [rsp + 1]
movzx r8d, cl
xor r8d, 0x811c9dc5
imul r8d, r8d, 0x1000193
xor r8d, eax
movzx eax, byte [rsp + 2]
imul r8d, r8d, 0x1000193
xor r8d, eax
movzx eax, byte [rsp + 3]
imul r8d, r8d, 0x1000193
xor r8d, eax
movzx eax, byte [rsp + 4]
imul r8d, r8d, 0x1000193
xor r8d, eax
movzx eax, byte [rsp + 5]
imul r8d, r8d, 0x1000193
xor r8d, eax
movzx eax, byte [rsp + 6]
imul r8d, r8d, 0x1000193
xor r8d, eax
movzx eax, byte [rsp + 7]
imul r8d, r8d, 0x1000193
xor r8d, eax
imul r8d, r8d, 0x1000193
mov eax, r8d
div r9d
mov rax, qword [r11 + rdx*8]
lea rdx, [r11 + rdx*8]
test rax, rax
je 0x180006dc5
cmp qword [rax + 8], rcx
je 0x180006dc5
mov rdx, rax
mov rax, qword [rax]
test rax, rax
jne 0x180006db4
test r10, r10
je 0x180006dcd
mov dword [r10], r8d
mov rax, rdx
mov rcx, qword [rsp + 8]
xor rcx, rsp
call fcn.180076910
add rsp, 0x18
ret
Function at 0x18000ae10
Capabilities:
Allocate thread local storage

Disassembly:
mov eax, 0x28
call fcn.1800768a0
sub rsp, rax
add rsp, 0x28
jmp qword [sym.imp.KERNEL32.dll_TlsAlloc]

Function at 0x18000ae50
Capabilities:
Get thread local storage value

Disassembly:
mov eax, 0x28
call fcn.1800768a0
sub rsp, rax
add rsp, 0x28
jmp qword [sym.imp.KERNEL32.dll_TlsGetValue]

Function at 0x18000ae70
Capabilities:
Set thread local storage value

Disassembly:
mov eax, 0x28
call fcn.1800768a0
sub rsp, rax
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
neg eax
sbb eax, eax
neg eax
dec eax
add rsp, 0x28
ret

Function at 0x18000ce80
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r12
mov eax, 0x20
call fcn.1800768a0
sub rsp, rax
xor ebx, ebx
mov rsi, rcx
mov ebp, ebx
test rcx, rcx
je 0x18000cf67
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
or rcx, 0xffffffffffffffff
mov rdi, rsi
mov r12d, eax
xor eax, eax
repne scasw ax, word [rdi]
not rcx
lea rdx, [rcx - 1]
lea ecx, [r12 + 1]
add rdx, rcx
lea ecx, [rbx + 0x40]
add rdx, rdx
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov rbp, rax
test rax, rax
je 0x18000cf6a
mov edx, r12d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
lea ecx, [rax - 1]
cmp word [rbp + rcx*2], 0x5c
je 0x18000cf14
mov ecx, eax
mov edx, 0x5c
inc eax
mov word [rbp + rcx*2], dx
or rcx, 0xffffffffffffffff
movsxd r8, eax
xor eax, eax
mov rdi, rsi
repne scasw ax, word [rdi]
not rcx
dec rcx
je 0x18000cf67
add r8, r8
mov rdx, rsi
sub r8, rsi
add r8, rbp
nop word [rax + rax]
movzx eax, word [rdx]
or rcx, 0xffffffffffffffff
inc ebx
mov word [r8 + rdx], ax
xor eax, eax
mov rdi, rsi
repne scasw ax, word [rdi]
mov eax, ebx
add rdx, 2
not rcx
dec rcx
cmp rax, rcx
jb 0x18000cf40
mov rax, rbp
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
add rsp, 0x20
pop r12
ret

Function at 0x18000d110
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 8], rbx
push rdi
mov eax, 0x20
call fcn.1800768a0
sub rsp, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov ecx, 0x40
mov edx, eax
mov edi, eax
add rdx, rdx
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov rbx, rax
test rax, rax
je 0x18000d17b
mov edx, edi
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
test eax, eax
je 0x18000d170
cmp edi, eax
jb 0x18000d170
mov rax, rbx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LocalFree]
xor eax, eax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x18000f610
Capabilities:
Check if file exists
Get file attributes

Disassembly:
mov qword [rsp + 0x20], rsi
push rdi
mov eax, 0x30
call fcn.1800768a0
sub rsp, rax
mov rdi, rcx
xor ecx, ecx
xor esi, esi
call qword [sym.imp.KERNEL32.dll_SetLastError]
test rdi, rdi
je 0x18000f812
mov rcx, rdi
call fcn.18000d040
test eax, eax
jne 0x18000f812
mov rcx, rdi
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rbp
call fcn.18000f390
mov rbp, rax
test rax, rax
je 0x18000f73d
mov qword [rsp + 0x50], r12
call fcn.18000d110
mov r12, rax
test rax, rax
je 0x18000f72a
mov rcx, rbp
call fcn.18000d040
test eax, eax
je 0x18000f713
lea rax, str.system32_
lea rbx, [rsp + 0x20]
mov qword [rsp + 0x20], rax
lea rax, str.SystemRoot_system32_
mov qword [rsp + 0x28], rax
nop word [rax + rax]
mov rdx, qword [rbx]
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdi, [rcx - 1]
mov rcx, rbp
call sub.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp
test eax, eax
je 0x18000f6e6
lea rax, [rsp + 0x30]
add rbx, 8
cmp rbx, rax
jb 0x18000f6b0
jmp 0x18000f6f6
lea rdx, [rbp + rdi*2]
mov rcx, r12
call fcn.18000f040
mov rsi, rax
lea rax, [rsp + 0x30]
cmp rbx, rax
jne 0x18000f721
mov rcx, rbp
call fcn.18000d0b0
test eax, eax
je 0x18000f721
mov rsi, rbp
xor ebp, ebp
jmp 0x18000f721
mov rdx, rbp
mov rcx, r12
call fcn.18000f040
mov rsi, rax
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov r12, qword [rsp + 0x50]
jmp 0x18000f7de
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7e
jne 0x18000f7e7
mov rcx, rdi
call fcn.18000e290
mov rbx, rax
test rax, rax
je 0x18000f7e7
mov ecx, 0x37e4
call fcn.18000de80
test eax, eax
je 0x18000f77c
lea rcx, [0x180084418]
call fcn.18000ed70
jmp 0x18000f781
call fcn.18000d110
mov rdi, rax
test rax, rax
je 0x18000f7d5
mov rdx, rbx
mov rcx, rax
call fcn.18000f040
mov rsi, rax
test rax, rax
je 0x18000f7cc
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x18000f7ae
test al, 0x50
je 0x18000f7cc
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
jne 0x18000f7c1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LocalFree]
xor esi, esi
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LocalFree]
test rsi, rsi
je 0x18000f7e7
xor ecx, ecx
jmp 0x18000f7f4
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x18000f7fa
lea ecx, [rax + 0x7e]
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rbp, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x40]
mov rax, rsi
mov rsi, qword [rsp + 0x58]
add rsp, 0x30
pop rdi
ret
mov ecx, 0xa0
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rsi, qword [rsp + 0x58]
xor eax, eax
add rsp, 0x30
pop rdi
ret
Function at 0x180010220
Capabilities:
Query environment variable

Disassembly:
sub rsp, 0x28
cmp dword [0x1800a2f74], 0
jne 0x180010272
lea rcx, str.HWLOC_HIDE_ERRORS
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x18001025d
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov dword [0x1800a2f70], eax
mov dword [0x1800a2f74], 1
add rsp, 0x28
ret
mov eax, dword [0x1800a2f70]
mov dword [0x1800a2f74], 1
add rsp, 0x28
ret
mov eax, dword [0x1800a2f70]
add rsp, 0x28
ret

Function at 0x180010280
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
cmp dword [0x1800a2f78], 0
mov ebx, edx
mov rdi, rcx
jne 0x180010412
cmp dword [0x1800a2f74], 0
jne 0x1800102d0
lea rcx, str.HWLOC_HIDE_ERRORS
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x1800102c6
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov dword [0x1800a2f70], eax
mov dword [0x1800a2f74], 1
cmp dword [0x1800a2f70], 0
jne 0x180010412
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._n
call fcn.1800100d0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea r8, str.2.0.2
lea rdx, str._hwloc__s_has_encountered_what_looks_like_an_error_from_the_operating_system._n
call fcn.1800100d0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, [0x18008adc0]
call fcn.1800100d0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rdi
lea rdx, str.__s_n
mov rcx, rax
call fcn.1800100d0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, ebx
lea rdx, str._Error_occurred_in_topology.c_line__d_n
mov rcx, rax
call fcn.1800100d0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, [0x18008adc0]
call fcn.1800100d0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._The_following_FAQ_entry_in_the_hwloc_documentation_may_help:_n
call fcn.1800100d0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.___What_should_I_do_when_hwloc_reports__operating_system__warnings__n
call fcn.1800100d0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._Otherwise_please_report_this_error_message_to_the_hwloc_users_mailing_list__n
call fcn.1800100d0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._along_with_any_relevant_topology_information_from_your_platform._n
call fcn.1800100d0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._n
call fcn.1800100d0
mov dword [0x1800a2f78], 1
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x180012b30
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
sub rsp, 0x20
cmp dword [rcx + 0xb0], 1
mov rsi, r8
mov rbp, rdx
mov rbx, rcx
jne 0x180012b6f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0x16
xor eax, eax
mov rbx, qword [rsp + 0x38]
mov rbp, qword [rsp + 0x40]
add rsp, 0x20
pop rsi
ret
cmp dword [rcx + 0xb8], 0
je 0x180012b51
or r8d, 0xffffffff
mov qword [rsp + 0x30], rdi
mov edx, 0x11
call sym.xmrstak_cuda_backend.dll_hwloc_alloc_setup_object
mov rdi, rax
test rsi, rsi
je 0x180012ba0
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__strdup]
mov qword [rdi + 0x18], rax
mov r8, rdi
mov rdx, rbp
mov rcx, rbx
call sym.xmrstak_cuda_backend.dll_hwloc_insert_object_by_parent
xor edx, edx
mov rcx, rbx
call sym.xmrstak_cuda_backend.dll_hwloc_topology_reconnect
lea rcx, str.HWLOC_DEBUG_CHECK
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov rbx, qword [rsp + 0x38]
mov rax, rdi
mov rdi, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x40]
add rsp, 0x20
pop rsi
ret
Function at 0x18001e2d0
Capabilities:
Terminate process

Disassembly:
sub rsp, 0x28
mov r8, qword [rcx + 0x28]
mov rax, qword [rdx + 0x28]
movzx r9d, word [r8]
movzx r10d, word [rax]
cmp r9w, r10w
jae 0x18001e2f1
xor eax, eax
add rsp, 0x28
ret
jbe 0x18001e2fd
mov eax, 1
add rsp, 0x28
ret
cmp dword [rcx], 0xe
jne 0x18001e31c
movzx ecx, byte [rax + 2]
cmp cl, byte [r8 + 0x1e]
jb 0x18001e31c
cmp cl, byte [r8 + 0x1f]
ja 0x18001e31c
mov eax, 3
add rsp, 0x28
ret
cmp dword [rdx], 0xe
jne 0x18001e33a
movzx ecx, byte [r8 + 2]
cmp cl, byte [rax + 0x1e]
jb 0x18001e33a
cmp cl, byte [rax + 0x1f]
ja 0x18001e33a
mov eax, 2
add rsp, 0x28
ret
movzx ecx, byte [r8 + 2]
movzx edx, byte [rax + 2]
cmp cl, dl
jb 0x18001e2ea
ja 0x18001e2f3
movzx ecx, byte [r8 + 3]
movzx edx, byte [rax + 3]
cmp cl, dl
jb 0x18001e2ea
ja 0x18001e2f3
movzx ecx, byte [r8 + 4]
movzx edx, byte [rax + 4]
cmp cl, dl
jb 0x18001e2ea
ja 0x18001e2f3
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9d, 0x104
lea r8, str.....hwlocpci_common.c
mov rcx, rax
lea rdx, str.Bad_assertion_in_hwloc__s:_d__aborting__n
call fcn.1800100d0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x18001e3a0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x20], rbp
push r14
sub rsp, 0x20
mov rbp, r8
mov r10, rdx
mov r11, rcx
xor r14d, r14d
nop word [rax + rax]
mov r9, qword [r10]
test r9, r9
je 0x18001e56b
mov rax, qword [r9 + 0x28]
mov rcx, qword [rbp + 0x28]
movzx r8d, word [rax]
movzx edx, word [rcx]
cmp dx, r8w
jae 0x18001e3e6
mov eax, r14d
jmp 0x18001e464
ja 0x18001e45f
cmp dword [rbp], 0xe
jne 0x18001e403
movzx edx, byte [rax + 2]
cmp dl, byte [rcx + 0x1e]
jb 0x18001e403
cmp dl, byte [rcx + 0x1f]
ja 0x18001e403
mov eax, 3
jmp 0x18001e464
cmp dword [r9], 0xe
jne 0x18001e41e
movzx edx, byte [rcx + 2]
cmp dl, byte [rax + 0x1e]
jb 0x18001e41e
cmp dl, byte [rax + 0x1f]
ja 0x18001e41e
mov eax, 2
jmp 0x18001e464
movzx edx, byte [rcx + 2]
movzx r8d, byte [rax + 2]
cmp dl, r8b
jae 0x18001e431
mov eax, r14d
jmp 0x18001e464
ja 0x18001e45f
movzx edx, byte [rcx + 3]
movzx r8d, byte [rax + 3]
cmp dl, r8b
jae 0x18001e446
mov eax, r14d
jmp 0x18001e464
ja 0x18001e45f
movzx edx, byte [rcx + 4]
movzx ecx, byte [rax + 4]
cmp dl, cl
jae 0x18001e459
mov eax, r14d
jmp 0x18001e464
jbe 0x18001e538
mov eax, 1
test eax, eax
je 0x18001e47b
sub eax, 1
je 0x18001e4e1
sub eax, 1
je 0x18001e4ea
cmp eax, 1
jne 0x18001e3c0
mov qword [rsp + 0x40], rdi
lea rdi, [rbp + 0x58]
mov qword [rdi], r9
mov qword [r10], rbp
cmp dword [rbp], 0xe
mov qword [rbp + 0x48], r11
jne 0x18001e527
mov qword [rsp + 0x38], rsi
lea rsi, [rbp + 0xa0]
cmp qword [rdi], r14
je 0x18001e522
mov qword [rsp + 0x30], rbx
nop
mov rbx, qword [rdi]
mov rcx, rbp
mov rdx, rbx
call fcn.18001e2d0
test eax, eax
jne 0x18001e4f9
mov rdx, qword [rbp + 0x28]
mov rcx, qword [rbx + 0x28]
movzx eax, word [rdx]
cmp word [rcx], ax
ja 0x18001e51d
movzx eax, byte [rdx + 0x1f]
cmp byte [rcx + 2], al
ja 0x18001e51d
lea rdi, [rbx + 0x58]
jmp 0x18001e518
lea r10, [r9 + 0x58]
jmp 0x18001e3c0
mov r11, r9
lea r10, [r9 + 0xa0]
jmp 0x18001e3c0
mov qword [rsi], rbx
mov rax, qword [rbx + 0x58]
mov qword [rdi], rax
mov rax, qword [rsi]
mov qword [rax + 0x48], rbp
mov rax, qword [rsi]
mov qword [rax + 0x58], r14
mov rsi, qword [rsi]
add rsi, 0x58
cmp qword [rdi], r14
jne 0x18001e4b0
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9d, 0x104
lea r8, str.....hwlocpci_common.c
mov rcx, rax
lea rdx, str.Bad_assertion_in_hwloc__s:_d__aborting__n
call fcn.1800100d0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rbp + 0x48], r11
mov qword [rbp + 0x58], r14
mov qword [r10], rbp
mov rbp, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret
mov r8, rdx
mov rdx, rcx
xor ecx, ecx
jmp 0x18001e3a0
Function at 0x18001e590
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x20], rbp
push r14
sub rsp, 0x20
mov rbp, r8
mov r10, rdx
mov r11, rcx
xor r14d, r14d
nop word [rax + rax]
mov r9, qword [r10]
test r9, r9
je 0x18001e56b
mov rax, qword [r9 + 0x28]
mov rcx, qword [rbp + 0x28]
movzx r8d, word [rax]
movzx edx, word [rcx]
cmp dx, r8w
jae 0x18001e3e6
mov eax, r14d
jmp 0x18001e464
ja 0x18001e45f
cmp dword [rbp], 0xe
jne 0x18001e403
movzx edx, byte [rax + 2]
cmp dl, byte [rcx + 0x1e]
jb 0x18001e403
cmp dl, byte [rcx + 0x1f]
ja 0x18001e403
mov eax, 3
jmp 0x18001e464
cmp dword [r9], 0xe
jne 0x18001e41e
movzx edx, byte [rcx + 2]
cmp dl, byte [rax + 0x1e]
jb 0x18001e41e
cmp dl, byte [rax + 0x1f]
ja 0x18001e41e
mov eax, 2
jmp 0x18001e464
movzx edx, byte [rcx + 2]
movzx r8d, byte [rax + 2]
cmp dl, r8b
jae 0x18001e431
mov eax, r14d
jmp 0x18001e464
ja 0x18001e45f
movzx edx, byte [rcx + 3]
movzx r8d, byte [rax + 3]
cmp dl, r8b
jae 0x18001e446
mov eax, r14d
jmp 0x18001e464
ja 0x18001e45f
movzx edx, byte [rcx + 4]
movzx ecx, byte [rax + 4]
cmp dl, cl
jae 0x18001e459
mov eax, r14d
jmp 0x18001e464
jbe 0x18001e538
mov eax, 1
test eax, eax
je 0x18001e47b
sub eax, 1
je 0x18001e4e1
sub eax, 1
je 0x18001e4ea
cmp eax, 1
jne 0x18001e3c0
mov qword [rsp + 0x40], rdi
lea rdi, [rbp + 0x58]
mov qword [rdi], r9
mov qword [r10], rbp
cmp dword [rbp], 0xe
mov qword [rbp + 0x48], r11
jne 0x18001e527
mov qword [rsp + 0x38], rsi
lea rsi, [rbp + 0xa0]
cmp qword [rdi], r14
je 0x18001e522
mov qword [rsp + 0x30], rbx
nop
mov rbx, qword [rdi]
mov rcx, rbp
mov rdx, rbx
call fcn.18001e2d0
test eax, eax
jne 0x18001e4f9
mov rdx, qword [rbp + 0x28]
mov rcx, qword [rbx + 0x28]
movzx eax, word [rdx]
cmp word [rcx], ax
ja 0x18001e51d
movzx eax, byte [rdx + 0x1f]
cmp byte [rcx + 2], al
ja 0x18001e51d
lea rdi, [rbx + 0x58]
jmp 0x18001e518
lea r10, [r9 + 0x58]
jmp 0x18001e3c0
mov r11, r9
lea r10, [r9 + 0xa0]
jmp 0x18001e3c0
mov qword [rsi], rbx
mov rax, qword [rbx + 0x58]
mov qword [rdi], rax
mov rax, qword [rsi]
mov qword [rax + 0x48], rbp
mov rax, qword [rsi]
mov qword [rax + 0x58], r14
mov rsi, qword [rsi]
add rsi, 0x58
cmp qword [rdi], r14
jne 0x18001e4b0
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9d, 0x104
lea r8, str.....hwlocpci_common.c
mov rcx, rax
lea rdx, str.Bad_assertion_in_hwloc__s:_d__aborting__n
call fcn.1800100d0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rbp + 0x48], r11
mov qword [rbp + 0x58], r14
mov qword [r10], rbp
mov rbp, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret
mov r8, rdx
mov rdx, rcx
xor ecx, ecx
jmp 0x18001e3a0