joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400c2b00
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
mov r12, r9
mov rbx, rdx
mov r15, rcx
mov rdx, qword [rcx]
mov rsi, rbx
sub rsi, rdx
mov rax, qword [rcx + 8]
sub rax, rdx
sar rax, 4
movabs r9, 0xfffffffffffffff
cmp rax, r9
je 0x1400c2d43
lea r8, [rax + 1]
mov qword [rsp + 0x40], r8
mov rcx, qword [rcx + 0x10]
sub rcx, rdx
sar rcx, 4
mov rdx, rcx
shr rdx, 1
mov rax, r9
sub rax, rdx
cmp rcx, rax
ja 0x1400c2d3d
lea rax, [rdx + rcx]
mov r14, r8
cmp rax, r8
cmovae r14, rax
cmp r14, r9
ja 0x1400c2d3d
mov rcx, r14
shl rcx, 4
mov qword [rsp + 0x30], r14
cmp rcx, 0x1000
jb 0x1400c2bcd
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400c2d3d
mov rcx, rax
call fcn.140108140
test rax, rax
je 0x1400c2bc6
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400c2bed
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x1400c2be6
call fcn.140108140
mov rdi, rax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r14
jmp 0x1400c2bf2
xor edi, edi
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], rdi
and rsi, 0xfffffffffffffff0
lea r13, [rsi + rdi]
lea rax, [r13 + 0x10]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0xa8], rax
mov ecx, 0x20
call fcn.140108140
mov r9, rax
test r9, r9
je 0x1400c2c51
mov rax, qword [rsp + 0xc8]
mov rcx, qword [rax]
mov qword [r9], rcx
mov rax, qword [rsp + 0xc0]
mov rcx, qword [rax]
mov qword [r9 + 8], rcx
mov rax, qword [r12]
mov qword [r9 + 0x10], rax
mov rax, qword [rsp + 0xb0]
mov rax, qword [rax]
mov qword [r9 + 0x18], rax
mov qword [rsp + 0x50], r9
lea r12, [r13 + 8]
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], 0
lea r8, [0x1400c3140]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [r13], rax
test rax, rax
je 0x1400c2d49
mov qword [rsp + 0xa8], r13
mov rdx, qword [r15 + 8]
mov rax, qword [r15]
mov rcx, rdi
cmp rbx, rdx
jne 0x1400c2ccb
cmp rax, rdx
je 0x1400c2d17
nop dword [rax]
nop word [rax + rax]
xorps xmm0, xmm0
movups xmm1, xmmword [rax]
movups xmmword [rax], xmm0
movups xmmword [rcx], xmm1
lea rcx, [rcx + 0x10]
add rax, 0x10
cmp rax, rdx
jne 0x1400c2cb0
jmp 0x1400c2d17
cmp rax, rbx
je 0x1400c2ce9
xorps xmm0, xmm0
movups xmm1, xmmword [rax]
movups xmmword [rax], xmm0
movups xmmword [rcx], xmm1
lea rcx, [rcx + 0x10]
add rax, 0x10
cmp rax, rbx
jne 0x1400c2cd0
mov qword [rsp + 0xa8], rdi
mov rax, qword [r15 + 8]
cmp rbx, rax
je 0x1400c2d17
sub rsi, rbx
add rsi, rdi
xorps xmm0, xmm0
movups xmm1, xmmword [rbx]
movups xmmword [rbx], xmm0
movups xmmword [rsi + rbx + 0x10], xmm1
add rbx, 0x10
cmp rbx, rax
jne 0x1400c2d00
mov r9, r14
mov r8, qword [rsp + 0x40]
mov rdx, rdi
mov rcx, r15
call fcn.1400c4ea0
mov rax, r13
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call fcn.14000df60
int3
call fcn.14000e090
nop
mov dword [r12], 0
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
int3
Function at 0x1400c2d60
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
mov r12, r9
mov rbx, rdx
mov r15, rcx
mov rdx, qword [rcx]
mov rsi, rbx
sub rsi, rdx
mov rax, qword [rcx + 8]
sub rax, rdx
sar rax, 4
movabs r9, 0xfffffffffffffff
cmp rax, r9
je 0x1400c2fa3
lea r8, [rax + 1]
mov qword [rsp + 0x40], r8
mov rcx, qword [rcx + 0x10]
sub rcx, rdx
sar rcx, 4
mov rdx, rcx
shr rdx, 1
mov rax, r9
sub rax, rdx
cmp rcx, rax
ja 0x1400c2f9d
lea rax, [rdx + rcx]
mov r14, r8
cmp rax, r8
cmovae r14, rax
cmp r14, r9
ja 0x1400c2f9d
mov rcx, r14
shl rcx, 4
mov qword [rsp + 0x30], r14
cmp rcx, 0x1000
jb 0x1400c2e2d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400c2f9d
mov rcx, rax
call fcn.140108140
test rax, rax
je 0x1400c2e26
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400c2e4d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x1400c2e46
call fcn.140108140
mov rdi, rax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r14
jmp 0x1400c2e52
xor edi, edi
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], rdi
and rsi, 0xfffffffffffffff0
lea r13, [rsi + rdi]
lea rax, [r13 + 0x10]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0xa8], rax
mov ecx, 0x20
call fcn.140108140
mov r9, rax
test r9, r9
je 0x1400c2eb1
mov rax, qword [rsp + 0xc8]
mov rcx, qword [rax]
mov qword [r9], rcx
mov rax, qword [rsp + 0xc0]
mov rcx, qword [rax]
mov qword [r9 + 8], rcx
mov rax, qword [r12]
mov qword [r9 + 0x10], rax
mov rax, qword [rsp + 0xb0]
mov rax, qword [rax]
mov qword [r9 + 0x18], rax
mov qword [rsp + 0x50], r9
lea r12, [r13 + 8]
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], 0
lea r8, [0x1400c31a0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [r13], rax
test rax, rax
je 0x1400c2fa9
mov qword [rsp + 0xa8], r13
mov rdx, qword [r15 + 8]
mov rax, qword [r15]
mov rcx, rdi
cmp rbx, rdx
jne 0x1400c2f2b
cmp rax, rdx
je 0x1400c2f77
nop dword [rax]
nop word [rax + rax]
xorps xmm0, xmm0
movups xmm1, xmmword [rax]
movups xmmword [rax], xmm0
movups xmmword [rcx], xmm1
lea rcx, [rcx + 0x10]
add rax, 0x10
cmp rax, rdx
jne 0x1400c2f10
jmp 0x1400c2f77
cmp rax, rbx
je 0x1400c2f49
xorps xmm0, xmm0
movups xmm1, xmmword [rax]
movups xmmword [rax], xmm0
movups xmmword [rcx], xmm1
lea rcx, [rcx + 0x10]
add rax, 0x10
cmp rax, rbx
jne 0x1400c2f30
mov qword [rsp + 0xa8], rdi
mov rax, qword [r15 + 8]
cmp rbx, rax
je 0x1400c2f77
sub rsi, rbx
add rsi, rdi
xorps xmm0, xmm0
movups xmm1, xmmword [rbx]
movups xmmword [rbx], xmm0
movups xmmword [rsi + rbx + 0x10], xmm1
add rbx, 0x10
cmp rbx, rax
jne 0x1400c2f60
mov r9, r14
mov r8, qword [rsp + 0x40]
mov rdx, rdi
mov rcx, r15
call fcn.1400c4ea0
mov rax, r13
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call fcn.14000df60
int3
call fcn.14000e090
nop
mov dword [r12], 0
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
int3
Function at 0x1400c8d00
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
mov r12, r9
mov rbx, rdx
mov r15, rcx
mov rdx, qword [rcx]
mov rsi, rbx
sub rsi, rdx
mov rax, qword [rcx + 8]
sub rax, rdx
sar rax, 4
movabs r9, 0xfffffffffffffff
cmp rax, r9
je 0x1400c8f33
lea r8, [rax + 1]
mov qword [rsp + 0x40], r8
mov rcx, qword [rcx + 0x10]
sub rcx, rdx
sar rcx, 4
mov rdx, rcx
shr rdx, 1
mov rax, r9
sub rax, rdx
cmp rcx, rax
ja 0x1400c8f2d
lea rax, [rdx + rcx]
mov r14, r8
cmp rax, r8
cmovae r14, rax
cmp r14, r9
ja 0x1400c8f2d
mov rcx, r14
shl rcx, 4
mov qword [rsp + 0x30], r14
cmp rcx, 0x1000
jb 0x1400c8dcd
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400c8f2d
mov rcx, rax
call fcn.140108140
test rax, rax
je 0x1400c8dc6
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400c8ded
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x1400c8de6
call fcn.140108140
mov rdi, rax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r14
jmp 0x1400c8df2
xor edi, edi
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], rdi
and rsi, 0xfffffffffffffff0
lea r13, [rsi + rdi]
lea rax, [r13 + 0x10]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0xa8], rax
mov ecx, 0x20
call fcn.140108140
mov r9, rax
test r9, r9
je 0x1400c8e50
mov rax, qword [rsp + 0xc8]
mov rcx, qword [rax]
mov qword [r9], rcx
mov rax, qword [rsp + 0xc0]
mov ecx, dword [rax]
mov dword [r9 + 8], ecx
mov eax, dword [r12]
mov dword [r9 + 0x10], eax
mov rax, qword [rsp + 0xb0]
mov rax, qword [rax]
mov qword [r9 + 0x18], rax
mov qword [rsp + 0x50], r9
lea r12, [r13 + 8]
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], 0
lea r8, [0x1400c91a0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [r13], rax
test rax, rax
je 0x1400c8f39
mov qword [rsp + 0xa8], r13
mov rdx, qword [r15 + 8]
mov rax, qword [r15]
mov rcx, rdi
cmp rbx, rdx
jne 0x1400c8ebb
cmp rax, rdx
je 0x1400c8f07
xorps xmm0, xmm0
movups xmm1, xmmword [rax]
movups xmmword [rax], xmm0
movups xmmword [rcx], xmm1
lea rcx, [rcx + 0x10]
add rax, 0x10
cmp rax, rdx
jne 0x1400c8ea0
jmp 0x1400c8f07
cmp rax, rbx
je 0x1400c8ed9
xorps xmm0, xmm0
movups xmm1, xmmword [rax]
movups xmmword [rax], xmm0
movups xmmword [rcx], xmm1
lea rcx, [rcx + 0x10]
add rax, 0x10
cmp rax, rbx
jne 0x1400c8ec0
mov qword [rsp + 0xa8], rdi
mov rax, qword [r15 + 8]
cmp rbx, rax
je 0x1400c8f07
sub rsi, rbx
add rsi, rdi
xorps xmm0, xmm0
movups xmm1, xmmword [rbx]
movups xmmword [rbx], xmm0
movups xmmword [rsi + rbx + 0x10], xmm1
add rbx, 0x10
cmp rbx, rax
jne 0x1400c8ef0
mov r9, r14
mov r8, qword [rsp + 0x40]
mov rdx, rdi
mov rcx, r15
call fcn.1400c4ea0
mov rax, r13
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call fcn.14000df60
int3
call fcn.14000e090
nop
mov dword [r12], 0
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
int3
Function at 0x1400c8f50
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
mov r12, r9
mov rbx, rdx
mov r15, rcx
mov rdx, qword [rcx]
mov rsi, rbx
sub rsi, rdx
mov rax, qword [rcx + 8]
sub rax, rdx
sar rax, 4
movabs r9, 0xfffffffffffffff
cmp rax, r9
je 0x1400c9183
lea r8, [rax + 1]
mov qword [rsp + 0x40], r8
mov rcx, qword [rcx + 0x10]
sub rcx, rdx
sar rcx, 4
mov rdx, rcx
shr rdx, 1
mov rax, r9
sub rax, rdx
cmp rcx, rax
ja 0x1400c917d
lea rax, [rdx + rcx]
mov r14, r8
cmp rax, r8
cmovae r14, rax
cmp r14, r9
ja 0x1400c917d
mov rcx, r14
shl rcx, 4
mov qword [rsp + 0x30], r14
cmp rcx, 0x1000
jb 0x1400c901d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400c917d
mov rcx, rax
call fcn.140108140
test rax, rax
je 0x1400c9016
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400c903d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x1400c9036
call fcn.140108140
mov rdi, rax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r14
jmp 0x1400c9042
xor edi, edi
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], rdi
and rsi, 0xfffffffffffffff0
lea r13, [rsi + rdi]
lea rax, [r13 + 0x10]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0xa8], rax
mov ecx, 0x20
call fcn.140108140
mov r9, rax
test r9, r9
je 0x1400c90a0
mov rax, qword [rsp + 0xc8]
mov rcx, qword [rax]
mov qword [r9], rcx
mov rax, qword [rsp + 0xc0]
mov ecx, dword [rax]
mov dword [r9 + 8], ecx
mov eax, dword [r12]
mov dword [r9 + 0x10], eax
mov rax, qword [rsp + 0xb0]
mov rax, qword [rax]
mov qword [r9 + 0x18], rax
mov qword [rsp + 0x50], r9
lea r12, [r13 + 8]
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], 0
lea r8, [0x1400c9200]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [r13], rax
test rax, rax
je 0x1400c9189
mov qword [rsp + 0xa8], r13
mov rdx, qword [r15 + 8]
mov rax, qword [r15]
mov rcx, rdi
cmp rbx, rdx
jne 0x1400c910b
cmp rax, rdx
je 0x1400c9157
xorps xmm0, xmm0
movups xmm1, xmmword [rax]
movups xmmword [rax], xmm0
movups xmmword [rcx], xmm1
lea rcx, [rcx + 0x10]
add rax, 0x10
cmp rax, rdx
jne 0x1400c90f0
jmp 0x1400c9157
cmp rax, rbx
je 0x1400c9129
xorps xmm0, xmm0
movups xmm1, xmmword [rax]
movups xmmword [rax], xmm0
movups xmmword [rcx], xmm1
lea rcx, [rcx + 0x10]
add rax, 0x10
cmp rax, rbx
jne 0x1400c9110
mov qword [rsp + 0xa8], rdi
mov rax, qword [r15 + 8]
cmp rbx, rax
je 0x1400c9157
sub rsi, rbx
add rsi, rdi
xorps xmm0, xmm0
movups xmm1, xmmword [rbx]
movups xmmword [rbx], xmm0
movups xmmword [rsi + rbx + 0x10], xmm1
add rbx, 0x10
cmp rbx, rax
jne 0x1400c9140
mov r9, r14
mov r8, qword [rsp + 0x40]
mov rdx, rdi
mov rcx, r15
call fcn.1400c4ea0
mov rax, r13
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call fcn.14000df60
int3
call fcn.14000e090
nop
mov dword [r12], 0
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
int3
Function at 0x1400d8070
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push r14
sub rsp, 0x20
mov rbx, qword [rdx + 8]
xor r10d, r10d
mov rsi, r9
mov r14, r8
mov rdi, rcx
cmp qword [rbx + 8], r10
jle 0x1400d811f
movsd xmm2, qword [0x1401112b0]
nop word [rax + rax]
mov rax, qword [r14]
mov rcx, qword [rbx + 0x20]
mov r9, qword [rbx + 0x28]
mov r11, qword [rbx + 0x30]
movsd xmm1, qword [rax + r10*8]
mov rax, qword [rbx + 0x18]
mulsd xmm1, qword [rsi]
movsxd rdx, dword [rax + r10*4]
test rcx, rcx
jne 0x1400d80dd
movsxd r8, dword [rax + r10*4 + 4]
jmp 0x1400d80e4
movsxd r8, dword [rcx + r10*4]
add r8, rdx
cmp rdx, r8
jge 0x1400d8116
nop dword [rax]
movsd xmm0, qword [r9 + rdx*8]
movsxd rcx, dword [r11 + rdx*4]
xorps xmm0, xmm2
mov rax, qword [rdi]
inc rdx
mulsd xmm0, xmm1
addsd xmm0, qword [rax + rcx*8]
movsd qword [rax + rcx*8], xmm0
cmp rdx, r8
jl 0x1400d80f0
inc r10
cmp r10, qword [rbx + 8]
jl 0x1400d80b0
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x40]
add rsp, 0x20
pop r14
ret
Function at 0x1400d82e0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
movaps xmmword [rax - 0x38], xmm6
mov r12, r9
mov rdi, r8
mov rsi, rcx
movups xmm6, xmmword [rdx]
movsd xmm0, qword [rdx + 0x10]
movsd qword [rax - 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rax - 0x58], xmm1
xor r15d, r15d
mov qword [rax - 0x48], r15
mov rax, qword [r8]
mov r8, qword [rax + 0x10]
mov rax, qword [rdi + 8]
mov r9, qword [rax + 0x10]
test r8, r8
jne 0x1400d841b
test r9, r9
je 0x1400d8358
mov rdx, r9
imul rdx, r8
lea rcx, [rsp + 0x20]
call fcn.140011100
mov r15, qword [rsp + 0x30]
mov rbx, qword [rdi + 8]
mov rdi, qword [rdi]
xorps xmm0, xmm0
movsd qword [rsp + 0x88], xmm0
mov rbp, qword [rsp + 0x28]
mov rdx, rbp
imul rdx, r15
lea r8, [rsp + 0x88]
mov r14, qword [rsp + 0x20]
mov rcx, r14
call fcn.140006810
movsd xmm0, qword [0x1401111f0]
movsd qword [rsp + 0x88], xmm0
lea r9, [rsp + 0x88]
lea r8, [rsp + 0x20]
mov rdx, rbx
mov rcx, rdi
call fcn.1400d9510
nop
xor ebx, ebx
test r15, r15
jle 0x1400d84a6
psrldq xmm6, 8
movq r11, xmm6
lea r13, [rbp*8]
movsd xmm2, qword [0x1401112b0]
nop dword [rax + rax]
xor r9d, r9d
cmp qword [r11 + 8], r9
jle 0x1400d8492
mov r10, r14
movsd xmm1, qword [r10]
mulsd xmm1, qword [r12]
mov rdi, qword [r11 + 0x28]
mov rbp, qword [r11 + 0x30]
mov rax, qword [r11 + 0x18]
movsxd rdx, dword [rax + r9*4]
mov rcx, qword [r11 + 0x20]
test rcx, rcx
jne 0x1400d8441
movsxd r8, dword [rax + r9*4 + 4]
jmp 0x1400d8448
test r9, r9
je 0x1400d8342
movabs rax, 0x7fffffffffffffff
cqo
idiv r9
cmp r8, rax
jg 0x1400d84d2
jmp 0x1400d8342
movsxd r8, dword [rcx + r9*4]
add r8, rdx
cmp rdx, r8
jge 0x1400d8481
nop dword [rax]
movsxd rcx, dword [rbp + rdx*4]
mov rax, rbx
imul rax, qword [rsi + 8]
add rcx, rax
mov rax, qword [rsi]
movsd xmm0, qword [rdi + rdx*8]
xorps xmm0, xmm2
mulsd xmm0, xmm1
addsd xmm0, qword [rax + rcx*8]
movsd qword [rax + rcx*8], xmm0
inc rdx
cmp rdx, r8
jl 0x1400d8450
inc r9
add r10, 8
cmp r9, qword [r11 + 8]
jl 0x1400d83f0
inc rbx
add r14, r13
cmp rbx, r15
jl 0x1400d83e0
mov r14, qword [rsp + 0x20]
mov rcx, r14
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
movaps xmm6, xmmword [rsp + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
jmp qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call fcn.140015820
nop
int3
Function at 0x1400dcbd0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
mov r12, r9
mov rbx, rdx
mov r15, rcx
mov rdx, qword [rcx]
mov rsi, rbx
sub rsi, rdx
mov rax, qword [rcx + 8]
sub rax, rdx
sar rax, 4
movabs r9, 0xfffffffffffffff
cmp rax, r9
je 0x1400dce13
lea r8, [rax + 1]
mov qword [rsp + 0x40], r8
mov rcx, qword [rcx + 0x10]
sub rcx, rdx
sar rcx, 4
mov rdx, rcx
shr rdx, 1
mov rax, r9
sub rax, rdx
cmp rcx, rax
ja 0x1400dce0d
lea rax, [rdx + rcx]
mov r14, r8
cmp rax, r8
cmovae r14, rax
cmp r14, r9
ja 0x1400dce0d
mov rcx, r14
shl rcx, 4
mov qword [rsp + 0x30], r14
cmp rcx, 0x1000
jb 0x1400dcc9d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400dce0d
mov rcx, rax
call fcn.140108140
test rax, rax
je 0x1400dcc96
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400dccbd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x1400dccb6
call fcn.140108140
mov rdi, rax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r14
jmp 0x1400dccc2
xor edi, edi
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], rdi
and rsi, 0xfffffffffffffff0
lea r13, [rsi + rdi]
lea rax, [r13 + 0x10]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0xa8], rax
mov ecx, 0x20
call fcn.140108140
mov r9, rax
test r9, r9
je 0x1400dcd21
mov rax, qword [rsp + 0xc8]
mov rcx, qword [rax]
mov qword [r9], rcx
mov rax, qword [rsp + 0xc0]
mov rcx, qword [rax]
mov qword [r9 + 8], rcx
mov rax, qword [r12]
mov qword [r9 + 0x10], rax
mov rax, qword [rsp + 0xb0]
mov rax, qword [rax]
mov qword [r9 + 0x18], rax
mov qword [rsp + 0x50], r9
lea r12, [r13 + 8]
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], 0
lea r8, [0x1400dce30]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [r13], rax
test rax, rax
je 0x1400dce19
mov qword [rsp + 0xa8], r13
mov rdx, qword [r15 + 8]
mov rax, qword [r15]
mov rcx, rdi
cmp rbx, rdx
jne 0x1400dcd9b
cmp rax, rdx
je 0x1400dcde7
nop dword [rax]
nop word [rax + rax]
xorps xmm0, xmm0
movups xmm1, xmmword [rax]
movups xmmword [rax], xmm0
movups xmmword [rcx], xmm1
lea rcx, [rcx + 0x10]
add rax, 0x10
cmp rax, rdx
jne 0x1400dcd80
jmp 0x1400dcde7
cmp rax, rbx
je 0x1400dcdb9
xorps xmm0, xmm0
movups xmm1, xmmword [rax]
movups xmmword [rax], xmm0
movups xmmword [rcx], xmm1
lea rcx, [rcx + 0x10]
add rax, 0x10
cmp rax, rbx
jne 0x1400dcda0
mov qword [rsp + 0xa8], rdi
mov rax, qword [r15 + 8]
cmp rbx, rax
je 0x1400dcde7
sub rsi, rbx
add rsi, rdi
xorps xmm0, xmm0
movups xmm1, xmmword [rbx]
movups xmmword [rbx], xmm0
movups xmmword [rsi + rbx + 0x10], xmm1
add rbx, 0x10
cmp rbx, rax
jne 0x1400dcdd0
mov r9, r14
mov r8, qword [rsp + 0x40]
mov rdx, rdi
mov rcx, r15
call fcn.1400c4ea0
mov rax, r13
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call fcn.14000df60
int3
call fcn.14000e090
nop
mov dword [r12], 0
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
int3
Function at 0x1400ddb90
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
mov r12, r9
mov rbx, rdx
mov r15, rcx
mov rdx, qword [rcx]
mov rsi, rbx
sub rsi, rdx
mov rax, qword [rcx + 8]
sub rax, rdx
sar rax, 4
movabs r9, 0xfffffffffffffff
cmp rax, r9
je 0x1400dddd3
lea r8, [rax + 1]
mov qword [rsp + 0x40], r8
mov rcx, qword [rcx + 0x10]
sub rcx, rdx
sar rcx, 4
mov rdx, rcx
shr rdx, 1
mov rax, r9
sub rax, rdx
cmp rcx, rax
ja 0x1400dddcd
lea rax, [rdx + rcx]
mov r14, r8
cmp rax, r8
cmovae r14, rax
cmp r14, r9
ja 0x1400dddcd
mov rcx, r14
shl rcx, 4
mov qword [rsp + 0x30], r14
cmp rcx, 0x1000
jb 0x1400ddc5d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400dddcd
mov rcx, rax
call fcn.140108140
test rax, rax
je 0x1400ddc56
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400ddc7d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x1400ddc76
call fcn.140108140
mov rdi, rax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r14
jmp 0x1400ddc82
xor edi, edi
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], rdi
and rsi, 0xfffffffffffffff0
lea r13, [rsi + rdi]
lea rax, [r13 + 0x10]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0xa8], rax
mov ecx, 0x20
call fcn.140108140
mov r9, rax
test r9, r9
je 0x1400ddce1
mov rax, qword [rsp + 0xc8]
mov rcx, qword [rax]
mov qword [r9], rcx
mov rax, qword [rsp + 0xc0]
mov rcx, qword [rax]
mov qword [r9 + 8], rcx
mov rax, qword [r12]
mov qword [r9 + 0x10], rax
mov rax, qword [rsp + 0xb0]
mov rax, qword [rax]
mov qword [r9 + 0x18], rax
mov qword [rsp + 0x50], r9
lea r12, [r13 + 8]
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], 0
lea r8, [0x1400dddf0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [r13], rax
test rax, rax
je 0x1400dddd9
mov qword [rsp + 0xa8], r13
mov rdx, qword [r15 + 8]
mov rax, qword [r15]
mov rcx, rdi
cmp rbx, rdx
jne 0x1400ddd5b
cmp rax, rdx
je 0x1400ddda7
nop dword [rax]
nop word [rax + rax]
xorps xmm0, xmm0
movups xmm1, xmmword [rax]
movups xmmword [rax], xmm0
movups xmmword [rcx], xmm1
lea rcx, [rcx + 0x10]
add rax, 0x10
cmp rax, rdx
jne 0x1400ddd40
jmp 0x1400ddda7
cmp rax, rbx
je 0x1400ddd79
xorps xmm0, xmm0
movups xmm1, xmmword [rax]
movups xmmword [rax], xmm0
movups xmmword [rcx], xmm1
lea rcx, [rcx + 0x10]
add rax, 0x10
cmp rax, rbx
jne 0x1400ddd60
mov qword [rsp + 0xa8], rdi
mov rax, qword [r15 + 8]
cmp rbx, rax
je 0x1400ddda7
sub rsi, rbx
add rsi, rdi
xorps xmm0, xmm0
movups xmm1, xmmword [rbx]
movups xmmword [rbx], xmm0
movups xmmword [rsi + rbx + 0x10], xmm1
add rbx, 0x10
cmp rbx, rax
jne 0x1400ddd90
mov r9, r14
mov r8, qword [rsp + 0x40]
mov rdx, rdi
mov rcx, r15
call fcn.1400c4ea0
mov rax, r13
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call fcn.14000df60
int3
call fcn.14000e090
nop
mov dword [r12], 0
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
int3
Function at 0x1400df100
Capabilities:
Query environment variable

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword gs:[0x58]
mov ebx, ecx
mov ecx, dword [0x14016f1d0]
mov edx, 4
mov rax, qword [rax + rcx*8]
mov eax, dword [rdx + rax]
cmp dword [0x14016f024], eax
jg 0x1400df155
mov eax, dword [0x14016f020]
add rsp, 0x20
pop rbx
ret
lea rcx, [0x14016f024]
mov dword [0x14016f020], ebx
call fcn.1401081b8
mov eax, dword [0x14016f020]
add rsp, 0x20
pop rbx
ret
lea rcx, [0x14016f024]
call fcn.140108224
cmp dword [0x14016f024], 0xffffffff
jne 0x1400df12b
mov dword [0x14016f020], 0
test ebx, ebx
jne 0x1400df137
lea rcx, str.IGL_NUM_THREADS
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x1400df199
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov ebx, eax
test eax, eax
jg 0x1400df137
call sub.MSVCP140.dll__Thrd_hardware_concurrency
test eax, eax
mov ebx, 8
cmovne ebx, eax
jmp 0x1400df137