joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140004be0
Capabilities:
Receive data
Receive data on socket

Disassembly:
push rbx
sub rsp, 0x70
mov rax, qword [0x1400b89e8]
xor rax, rsp
mov qword [rsp + 0x48], rax
movzx eax, byte [rcx + 0x170]
mov rbx, rcx
test al, al
je 0x140004c18
xor eax, eax
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.14008ccd0
add rsp, 0x70
pop rbx
ret
mov eax, dword [rcx + 0x18c]
and eax, 4
test al, al
jne 0x140004c3d
call fcn.140004890
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.14008ccd0
add rsp, 0x70
pop rbx
ret
mov rcx, qword [rcx + 0x150]
xor eax, eax
mov qword [rsp + 0x88], rbp
mov ebp, 0xffffffff
mov qword [rsp + 0x90], rsi
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x60], r12
lea edi, [rax + 1]
mov qword [rsp + 0x58], r14
mov r12d, 0x300
mov qword [rsp + 0x50], r15
mov r14d, ebp
xor r15d, r15d
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], rax
mov esi, r15d
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rax
cmp rcx, 0xffffffffffffffff
je 0x140004cb5
movzx eax, byte [rbx + 0x171]
test al, al
jne 0x140004cb5
mov qword [rsp + 0x28], rcx
mov r14d, r15d
mov dword [rsp + 0x30], r12d
mov esi, edi
mov rcx, qword [rbx + 0x160]
cmp rcx, 0xffffffffffffffff
je 0x140004cd5
mov eax, esi
mov ebp, esi
add rax, rax
inc esi
mov qword [rsp + rax*8 + 0x28], rcx
mov dword [rsp + rax*8 + 0x30], r12d
test dword [rbx + 0x18c], 0x2000
je 0x140004ce9
mov rcx, rbx
call fcn.140003790
test esi, esi
je 0x140004d9c
mov r8d, 0xffffffff
lea rcx, [rsp + 0x28]
mov edx, esi
call qword [sym.imp.WS2_32.dll_WSAPoll]
test eax, eax
jns 0x140004d37
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x2714
je 0x140004d9c
mov ecx, eax
call fcn.14000f270
mov r8, rax
lea rdx, [0x1400b9ef8]
mov rcx, rbx
call fcn.14000fca0
mov edi, r15d
jmp 0x140004d9c
cmp ebp, 0xffffffff
je 0x140004d6e
movsxd rax, ebp
add rax, rax
movzx ecx, word [rsp + rax*8 + 0x32]
and cx, r12w
cmp r15w, cx
je 0x140004d6e
mov rcx, qword [rbx + 0x160]
lea rdx, [rsp + 0x20]
xor r9d, r9d
lea r8d, [r9 + 4]
call qword [sym.imp.WS2_32.dll_recv]
test eax, eax
jg 0x140004d51
movzx eax, byte [rbx + 0x170]
test al, al
jne 0x140004d32
cmp r14d, 0xffffffff
je 0x140004d9c
movsxd rcx, r14d
add rcx, rcx
movzx edx, word [rsp + rcx*8 + 0x32]
and dx, r12w
cmp r15w, dx
je 0x140004d9c
mov rcx, rbx
call fcn.140003a20
mov r15, qword [rsp + 0x50]
mov eax, edi
mov rdi, qword [rsp + 0x68]
mov r14, qword [rsp + 0x58]
mov r12, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x90]
mov rbp, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.14008ccd0
add rsp, 0x70
pop rbx
ret
Function at 0x140006980
Capabilities:
Set socket configuration

Disassembly:
sub rsp, 0x38
mov dword [rsp + 0x40], 1
test rcx, rcx
jne 0x140006998
xor eax, eax
add rsp, 0x38
ret
mov rcx, qword [rcx + 0x110]
lea r9, [rsp + 0x40]
mov edx, 6
mov dword [rsp + 0x20], 4
lea r8d, [rdx - 5]
call qword [sym.imp.WS2_32.dll_setsockopt]
xor ecx, ecx
test eax, eax
sete cl
mov eax, ecx
add rsp, 0x38
ret

Function at 0x1400069d0
Capabilities:
Set socket configuration

Disassembly:
push rbx
sub rsp, 0x30
xor ebx, ebx
mov dword [rsp + 0x40], ebx
test rcx, rcx
jne 0x1400069e9
xor eax, eax
add rsp, 0x30
pop rbx
ret
mov rcx, qword [rcx + 0x110]
lea r9, [rsp + 0x40]
mov edx, 6
mov dword [rsp + 0x20], 4
lea r8d, [rdx - 5]
call qword [sym.imp.WS2_32.dll_setsockopt]
test eax, eax
sete bl
mov eax, ebx
add rsp, 0x30
pop rbx
ret
Function at 0x14000a200
Capabilities:
Send data
Send data on socket

Disassembly:
mov qword [rsp + 0x18], rbx
push rdi
sub rsp, 0x20
cmp byte [rcx + 0x11c], 0
mov rbx, rcx
mov rdi, qword [rcx + 0x20]
jne 0x14000a3dc
mov qword [rsp + 0x30], rbp
xor ebp, ebp
mov byte [rcx + 0x11c], 1
mov rcx, qword [rcx + 0x38]
mov qword [rsp + 0x38], rsi
test rcx, rcx
je 0x14000a243
call fcn.14000b110
mov qword [rbx + 0x38], rbp
lea rcx, [rdi + 0x128]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp byte [rbx + 0x170], bpl
je 0x14000a29a
mov rcx, qword [rbx + 8]
mov rax, qword [rbx]
test rcx, rcx
jne 0x14000a26b
mov qword [rdi + 0x20], rax
jmp 0x14000a26e
mov qword [rcx], rax
mov rcx, qword [rbx]
mov rax, qword [rbx + 8]
test rcx, rcx
jne 0x14000a28a
mov qword [rdi + 0x28], rax
mov byte [rbx + 0x170], bpl
jmp 0x14000a33a
mov qword [rcx + 8], rax
mov byte [rbx + 0x170], bpl
jmp 0x14000a33a
mov eax, dword [rdi + 0x18c]
and eax, 4
test al, al
jne 0x14000a30f
mov rax, qword [rdi + 0x180]
mov rcx, qword [rbx + 0x18]
mov rdx, qword [rbx + 0x10]
cmp qword [rbx + 0x100], rax
jne 0x14000a2e1
test rcx, rcx
jne 0x14000a2ca
mov qword [rdi + 0x40], rdx
jmp 0x14000a2ce
mov qword [rcx + 0x10], rdx
mov rcx, qword [rbx + 0x10]
mov rax, qword [rbx + 0x18]
test rcx, rcx
jne 0x14000a303
mov qword [rdi + 0x48], rax
jmp 0x14000a307
test rcx, rcx
jne 0x14000a2ec
mov qword [rdi + 0x50], rdx
jmp 0x14000a2f0
mov qword [rcx + 0x10], rdx
mov rcx, qword [rbx + 0x10]
mov rax, qword [rbx + 0x18]
test rcx, rcx
jne 0x14000a303
mov qword [rdi + 0x58], rax
jmp 0x14000a307
mov qword [rcx + 0x18], rax
mov qword [rbx + 0x10], rbp
mov qword [rbx + 0x18], rbp
mov rcx, qword [rbx + 8]
mov rax, qword [rbx]
test rcx, rcx
jne 0x14000a321
mov qword [rdi + 0x10], rax
jmp 0x14000a324
mov qword [rcx], rax
mov rcx, qword [rbx]
mov rax, qword [rbx + 8]
test rcx, rcx
jne 0x14000a336
mov qword [rdi + 0x18], rax
jmp 0x14000a33a
mov qword [rcx + 8], rax
mov qword [rbx], rbp
mov qword [rbx + 8], rbp
mov rax, qword [rdi + 0x30]
mov qword [rbx + 8], rbp
mov rbp, qword [rsp + 0x30]
mov qword [rbx], rax
cmp qword [rdi + 0x38], 0
jne 0x14000a35e
mov qword [rdi + 0x38], rbx
jmp 0x14000a366
mov rax, qword [rdi + 0x30]
mov qword [rax + 8], rbx
mov qword [rdi + 0x30], rbx
lea rcx, [rdi + 0x128]
mov byte [rbx + 0x178], 0
mov byte [rbx + 0x11b], 0
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [rdi + 0x18c]
mov rsi, qword [rsp + 0x38]
and eax, 4
test al, al
je 0x14000a3dc
cmp qword [rdi + 0x160], 0xffffffffffffffff
je 0x14000a3dc
mov rcx, qword [rdi + 0x168]
lea rdx, [0x1400ba084]
xor r9d, r9d
lea r8d, [r9 + 1]
call qword [sym.imp.WS2_32.dll_send]
test eax, eax
jg 0x14000a3dc
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x2733
je 0x14000a3dc
lea rdx, str.Failed_to_signal_end_of_connection_via_inter_thread_communication_channel
mov rcx, rdi
call fcn.14000fca0
mov rbx, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret
Function at 0x14000cc80
Capabilities:
Encode data using xor
Encrypt data using rc4 prga

Disassembly:
push rbx
push rbp
push r15
sub rsp, 0x20
mov r10d, dword [r8 + 0x1d8]
mov r15, r8
mov rbp, rdx
mov rbx, rcx
test r10d, r10d
jne 0x14000cca9
xor eax, eax
add rsp, 0x20
pop r15
pop rbp
pop rbx
ret
movzx eax, byte [rcx]
mov r9, rbx
mov qword [rsp + 0x40], rsi
xor esi, esi
mov qword [rsp + 0x48], rdi
mov r8d, esi
mov qword [rsp + 0x50], r14
test al, al
je 0x14000ccf4
nop word [rax + rax]
mov edx, r8d
movsx eax, al
mov ecx, r8d
shr edx, 0x18
xor edx, eax
shl ecx, 8
movzx eax, byte [r9 + 1]
lea r9, [r9 + 1]
mov r8d, edx
or r8d, ecx
test al, al
jne 0x14000ccd0
xor edx, edx
mov eax, r8d
div r10d
mov ecx, edx
imul rdi, rcx, 0x98
lea rcx, [r15 + 0x1a8]
add rdi, qword [r15 + 0x1a0]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
test rbp, rbp
jne 0x14000cd48
mov rdx, rdi
sub rdx, rbx
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rbx]
mov byte [rdx + rbx + 0x10], al
lea rbx, [rbx + 1]
test al, al
jne 0x14000cd30
mov qword [rdi], rsi
mov qword [rdi + 8], rsi
jmp 0x14000cdbf
mov r8, qword [rdi]
cmp rbp, r8
jae 0x14000cd85
lea rax, [rbp + 0x40]
cmp rax, rbp
jbe 0x14000cd82
cmp rax, r8
jb 0x14000cd82
mov rcx, qword [rdi + 8]
mov rax, r8
sub rax, rbp
dec rax
bt rcx, rax
jb 0x14000cd82
cmp rax, 1
seta sil
or rsi, rcx
mov qword [rdi + 8], rsi
jmp 0x14000cdbf
cmp rbp, r8
jbe 0x14000cdd3
lea rax, [rdi + 0x10]
sub rbx, rax
nop
movzx edx, byte [rax]
movzx ecx, byte [rax + rbx]
sub edx, ecx
jne 0x14000cda2
inc rax
test ecx, ecx
jne 0x14000cd90
test edx, edx
jne 0x14000cdd3
mov rcx, rbp
sub rcx, r8
cmp rcx, 0x40
jae 0x14000cdb8
shl qword [rdi + 8], cl
jmp 0x14000cdbc
mov qword [rdi + 8], rsi
mov qword [rdi], rbp
lea rcx, [r15 + 0x1a8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, 1
jmp 0x14000cdf1
lea rcx, [r15 + 0x1a8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea rdx, str.Stale_nonce_received.__If_this_happens_a_lot__you_should_probably_increase_the_size_of_the_nonce_array._n
mov rcx, r15
call fcn.14000fca0
xor eax, eax
mov rdi, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x40]
mov r14, qword [rsp + 0x50]
add rsp, 0x20
pop r15
pop rbp
pop rbx
ret
Function at 0x140010020
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x30
mov r14, rcx
mov rsi, r9
mov ecx, 0x18
mov rdi, r8
mov rbp, rdx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
test rax, rax
je 0x1400100bd
mov qword [rax], rsi
mov rax, qword [rsp + 0x60]
mov qword [rbx + 8], rax
mov eax, 0xffffffff
mov qword [rbx + 0x10], rbp
cmp rdi, rax
jbe 0x14001008c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov rcx, rbx
mov dword [rax], reloc.WS2_32.dll_shutdown
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor eax, eax
jmp 0x1400100c6
xor eax, eax
lea r8, [0x14000ffc0]
mov qword [rsp + 0x28], rax
mov r9, rbx
mov edx, edi
mov dword [rsp + 0x20], eax
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [r14], rax
cmp rax, 0xffffffffffffffff
jne 0x1400100c1
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor eax, eax
jmp 0x1400100c6
mov eax, 1
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x58]
add rsp, 0x30
pop r14
ret

Function at 0x140010d70
Capabilities:
Query environment variable

Disassembly:
sub rsp, 0x28
cmp dword [0x1400c2440], 0
jne 0x140010dc2
lea rcx, str.HWLOC_HIDE_ERRORS
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x140010dad
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov dword [0x1400c2444], eax
mov dword [0x1400c2440], 1
add rsp, 0x28
ret
mov eax, dword [0x1400c2444]
mov dword [0x1400c2440], 1
add rsp, 0x28
ret
mov eax, dword [0x1400c2444]
add rsp, 0x28
ret
Function at 0x140010dd0
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
cmp dword [0x1400c242c], 0
mov ebx, edx
mov rdi, rcx
jne 0x140010f62
cmp dword [0x1400c2440], 0
jne 0x140010e20
lea rcx, str.HWLOC_HIDE_ERRORS
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x140010e16
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov dword [0x1400c2444], eax
mov dword [0x1400c2440], 1
cmp dword [0x1400c2444], 0
jne 0x140010f62
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._n
call fcn.140001fc0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea r8, str.2.0.2
lea rdx, str._hwloc__s_has_encountered_what_looks_like_an_error_from_the_operating_system._n
call fcn.140001fc0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, [0x1400a0db0]
call fcn.140001fc0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rdi
lea rdx, str.__s_n
mov rcx, rax
call fcn.140001fc0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, ebx
lea rdx, str._Error_occurred_in_topology.c_line__d_n
mov rcx, rax
call fcn.140001fc0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, [0x1400a0db0]
call fcn.140001fc0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._The_following_FAQ_entry_in_the_hwloc_documentation_may_help:_n
call fcn.140001fc0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.___What_should_I_do_when_hwloc_reports__operating_system__warnings__n
call fcn.140001fc0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._Otherwise_please_report_this_error_message_to_the_hwloc_users_mailing_list__n
call fcn.140001fc0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._along_with_any_relevant_topology_information_from_your_platform._n
call fcn.140001fc0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str._n
call fcn.140001fc0
mov dword [0x1400c242c], 1
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x140013900
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
sub rsp, 0x20
cmp dword [rcx + 0xb0], 1
mov rsi, r8
mov rbp, rdx
mov rbx, rcx
jne 0x14001393f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], reloc.WS2_32.dll_shutdown
xor eax, eax
mov rbx, qword [rsp + 0x38]
mov rbp, qword [rsp + 0x40]
add rsp, 0x20
pop rsi
ret
cmp dword [rcx + 0xb8], 0
je 0x140013921
mov edx, setsockopt
mov qword [rsp + 0x30], rdi
mov r8d, 0xffffffff
call sym.cornelius.exe_hwloc_alloc_setup_object
mov rdi, rax
test rsi, rsi
je 0x140013972
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__strdup]
mov qword [rdi + 0x18], rax
mov r8, rdi
mov rdx, rbp
mov rcx, rbx
call sym.cornelius.exe_hwloc_insert_object_by_parent
xor edx, edx
mov rcx, rbx
call sym.cornelius.exe_hwloc_topology_reconnect
lea rcx, str.HWLOC_DEBUG_CHECK
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov rbx, qword [rsp + 0x38]
mov rax, rdi
mov rdi, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x40]
add rsp, 0x20
pop rsi
ret
Function at 0x14001f7a0
Capabilities:
Terminate process

Disassembly:
sub rsp, 0x28
mov r8, qword [rcx + 0x28]
mov rax, qword [rdx + 0x28]
movzx r9d, word [r8]
movzx r10d, word [rax]
cmp r9w, r10w
jb 0x14001f86b
ja 0x14001f861
cmp dword [rcx], 0xe
jne 0x14001f7e3
movzx ecx, byte [rax + 2]
cmp cl, byte [r8 + 0x1e]
jb 0x14001f7e3
cmp cl, byte [r8 + 0x1f]
ja 0x14001f7e3
mov eax, 3
add rsp, 0x28
ret
cmp dword [rdx], 0xe
jne 0x14001f801
movzx ecx, byte [r8 + 2]
cmp cl, byte [rax + 0x1e]
jb 0x14001f801
cmp cl, byte [rax + 0x1f]
ja 0x14001f801
mov eax, 2
add rsp, 0x28
ret
movzx ecx, byte [r8 + 2]
movzx edx, byte [rax + 2]
cmp cl, dl
jb 0x14001f86b
ja 0x14001f861
movzx ecx, byte [r8 + 3]
movzx edx, byte [rax + 3]
cmp cl, dl
jb 0x14001f86b
ja 0x14001f861
movzx ecx, byte [r8 + 4]
movzx edx, byte [rax + 4]
cmp cl, dl
jb 0x14001f86b
ja 0x14001f861
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9d, 0x104
lea r8, str.....hwlocpci_common.c
mov rcx, rax
lea rdx, str.Bad_assertion_in_hwloc__s:_d__aborting__n
call fcn.140001fc0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov eax, 1
add rsp, 0x28
ret
xor eax, eax
add rsp, 0x28
ret
Function at 0x14001f880
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x20], rbp
push r14
sub rsp, 0x20
mov rbp, r8
mov r10, rdx
mov r11, rcx
xor r14d, r14d
nop word [rax + rax]
mov r9, qword [r10]
test r9, r9
je 0x14001fa4c
mov rax, qword [r9 + 0x28]
mov rcx, qword [rbp + 0x28]
movzx r8d, word [rax]
movzx edx, word [rcx]
cmp dx, r8w
jae 0x14001f8c6
mov eax, r14d
jmp 0x14001f944
ja 0x14001f93f
cmp dword [rbp], 0xe
jne 0x14001f8e3
movzx edx, byte [rax + 2]
cmp dl, byte [rcx + 0x1e]
jb 0x14001f8e3
cmp dl, byte [rcx + 0x1f]
ja 0x14001f8e3
mov eax, 3
jmp 0x14001f944
cmp dword [r9], 0xe
jne 0x14001f8fe
movzx edx, byte [rcx + 2]
cmp dl, byte [rax + 0x1e]
jb 0x14001f8fe
cmp dl, byte [rax + 0x1f]
ja 0x14001f8fe
mov eax, 2
jmp 0x14001f944
movzx edx, byte [rcx + 2]
movzx r8d, byte [rax + 2]
cmp dl, r8b
jae 0x14001f911
mov eax, r14d
jmp 0x14001f944
ja 0x14001f93f
movzx edx, byte [rcx + 3]
movzx r8d, byte [rax + 3]
cmp dl, r8b
jae 0x14001f926
mov eax, r14d
jmp 0x14001f944
ja 0x14001f93f
movzx edx, byte [rcx + 4]
movzx ecx, byte [rax + 4]
cmp dl, cl
jae 0x14001f939
mov eax, r14d
jmp 0x14001f944
jbe 0x14001fa19
mov eax, 1
test eax, eax
je 0x14001f95b
sub eax, 1
je 0x14001f9bf
sub eax, 1
je 0x14001f9c8
cmp eax, 1
jne 0x14001f8a3
mov qword [rsp + 0x38], rsi
lea rsi, [rbp + 0x58]
mov qword [rsi], r9
mov qword [r10], rbp
cmp dword [rbp], 0xe
mov qword [rbp + 0x48], r11
jne 0x14001fa08
mov qword [rsp + 0x30], rbx
mov rbx, qword [rsi]
mov qword [rsp + 0x40], rdi
lea rdi, [rbp + 0xa0]
test rbx, rbx
je 0x14001f9fe
mov rdx, rbx
mov rcx, rbp
call fcn.14001f7a0
test eax, eax
jne 0x14001f9d7
mov rdx, qword [rbp + 0x28]
mov rcx, qword [rbx + 0x28]
movzx eax, word [rdx]
cmp word [rcx], ax
ja 0x14001f9fe
movzx eax, byte [rdx + 0x1f]
cmp byte [rcx + 2], al
ja 0x14001f9fe
lea rsi, [rbx + 0x58]
jmp 0x14001f9f6
lea r10, [r9 + 0x58]
jmp 0x14001f8a0
lea r10, [r9 + 0xa0]
mov r11, r9
jmp 0x14001f8a0
mov qword [rdi], rbx
mov rax, qword [rbx + 0x58]
mov qword [rsi], rax
mov rax, qword [rdi]
mov qword [rax + 0x48], rbp
mov rax, qword [rdi]
mov qword [rax + 0x58], r14
mov rdi, qword [rdi]
add rdi, 0x58
mov rbx, qword [rsi]
test rbx, rbx
jne 0x14001f991
mov rbx, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x38]
mov rbp, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9d, 0x104
lea r8, str.....hwlocpci_common.c
mov rcx, rax
lea rdx, str.Bad_assertion_in_hwloc__s:_d__aborting__n
call fcn.140001fc0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rbp + 0x48], r11
mov qword [rbp + 0x58], r14
mov qword [r10], rbp
mov rbp, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret
mov r8, rdx
mov rdx, rcx
xor ecx, ecx
jmp 0x14001f880
Function at 0x14001fa70
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x20], rbp
push r14
sub rsp, 0x20
mov rbp, r8
mov r10, rdx
mov r11, rcx
xor r14d, r14d
nop word [rax + rax]
mov r9, qword [r10]
test r9, r9
je 0x14001fa4c
mov rax, qword [r9 + 0x28]
mov rcx, qword [rbp + 0x28]
movzx r8d, word [rax]
movzx edx, word [rcx]
cmp dx, r8w
jae 0x14001f8c6
mov eax, r14d
jmp 0x14001f944
ja 0x14001f93f
cmp dword [rbp], 0xe
jne 0x14001f8e3
movzx edx, byte [rax + 2]
cmp dl, byte [rcx + 0x1e]
jb 0x14001f8e3
cmp dl, byte [rcx + 0x1f]
ja 0x14001f8e3
mov eax, 3
jmp 0x14001f944
cmp dword [r9], 0xe
jne 0x14001f8fe
movzx edx, byte [rcx + 2]
cmp dl, byte [rax + 0x1e]
jb 0x14001f8fe
cmp dl, byte [rax + 0x1f]
ja 0x14001f8fe
mov eax, 2
jmp 0x14001f944
movzx edx, byte [rcx + 2]
movzx r8d, byte [rax + 2]
cmp dl, r8b
jae 0x14001f911
mov eax, r14d
jmp 0x14001f944
ja 0x14001f93f
movzx edx, byte [rcx + 3]
movzx r8d, byte [rax + 3]
cmp dl, r8b
jae 0x14001f926
mov eax, r14d
jmp 0x14001f944
ja 0x14001f93f
movzx edx, byte [rcx + 4]
movzx ecx, byte [rax + 4]
cmp dl, cl
jae 0x14001f939
mov eax, r14d
jmp 0x14001f944
jbe 0x14001fa19
mov eax, 1
test eax, eax
je 0x14001f95b
sub eax, 1
je 0x14001f9bf
sub eax, 1
je 0x14001f9c8
cmp eax, 1
jne 0x14001f8a3
mov qword [rsp + 0x38], rsi
lea rsi, [rbp + 0x58]
mov qword [rsi], r9
mov qword [r10], rbp
cmp dword [rbp], 0xe
mov qword [rbp + 0x48], r11
jne 0x14001fa08
mov qword [rsp + 0x30], rbx
mov rbx, qword [rsi]
mov qword [rsp + 0x40], rdi
lea rdi, [rbp + 0xa0]
test rbx, rbx
je 0x14001f9fe
mov rdx, rbx
mov rcx, rbp
call fcn.14001f7a0
test eax, eax
jne 0x14001f9d7
mov rdx, qword [rbp + 0x28]
mov rcx, qword [rbx + 0x28]
movzx eax, word [rdx]
cmp word [rcx], ax
ja 0x14001f9fe
movzx eax, byte [rdx + 0x1f]
cmp byte [rcx + 2], al
ja 0x14001f9fe
lea rsi, [rbx + 0x58]
jmp 0x14001f9f6
lea r10, [r9 + 0x58]
jmp 0x14001f8a0
lea r10, [r9 + 0xa0]
mov r11, r9
jmp 0x14001f8a0
mov qword [rdi], rbx
mov rax, qword [rbx + 0x58]
mov qword [rsi], rax
mov rax, qword [rdi]
mov qword [rax + 0x48], rbp
mov rax, qword [rdi]
mov qword [rax + 0x58], r14
mov rdi, qword [rdi]
add rdi, 0x58
mov rbx, qword [rsi]
test rbx, rbx
jne 0x14001f991
mov rbx, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x38]
mov rbp, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9d, 0x104
lea r8, str.....hwlocpci_common.c
mov rcx, rax
lea rdx, str.Bad_assertion_in_hwloc__s:_d__aborting__n
call fcn.140001fc0
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rbp + 0x48], r11
mov qword [rbp + 0x58], r14
mov qword [r10], rbp
mov rbp, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret
mov r8, rdx
mov rdx, rcx
xor ecx, ecx
jmp 0x14001f880
Function at 0x140020dd0
Capabilities:
Query environment variable

Disassembly:
push rbx
sub rsp, 0x20
mov ebx, 1
xor eax, eax
lock cmpxchg dword [0x1400c246c], ebx
je 0x140020df9
call qword [sym.imp.KERNEL32.dll_SwitchToThread]
xor eax, eax
lock cmpxchg dword [0x1400c246c], ebx
jne 0x140020de7
mov eax, dword [0x1400c2454]
mov ecx, eax
inc eax
mov qword [rsp + 0x38], rsi
mov dword [0x1400c2454], eax
test ecx, ecx
jne 0x140020fc1
mov qword [rsp + 0x30], rbp
lea rcx, str.HWLOC_COMPONENTS_VERBOSE
mov qword [rsp + 0x48], r14
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
xor esi, esi
test rax, rax
je 0x140020e3f
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
jmp 0x140020e41
mov eax, esi
mov rcx, qword [str.p_f_n_]
lea r14, str.p_f_n_
mov dword [0x1400c2468], eax
mov edx, esi
mov qword [0x1400c2460], rsi
mov dword [0x1400c2450], esi
test rcx, rcx
je 0x140020eb1
nop dword [rax]
mov r8d, dword [0x1400c2450]
lea edx, [rdx + 1]
inc r8d
mov dword [0x1400c2450], r8d
cmp qword [r14 + rdx*8], rsi
jne 0x140020e70
test r8d, r8d
je 0x140020eb1
mov ecx, r8d
mov edx, 8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov rcx, qword [str.p_f_n_]
mov qword [0x1400c2460], rax
mov dword [0x1400c2450], esi
mov ebp, esi
test rcx, rcx
je 0x140020fa6
mov qword [rsp + 0x40], rdi
mov rbx, r14
mov edi, dword [rcx + 0x1c]
test edi, edi
je 0x140020eed
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8d, edi
lea rdx, str.Ignoring_static_component_with_invalid_flags__lx_n
mov rcx, rax
call fcn.140001fc0
jmp 0x140020f8e
mov rax, qword [rcx + 8]
test rax, rax
je 0x140020f26
xor ecx, ecx
call rax
test eax, eax
jns 0x140020f26
cmp dword [0x1400c2468], esi
je 0x140020f8e
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Ignoring_static_component__failed_to_initialize_n
call fcn.140001fc0
jmp 0x140020f8e
mov rax, qword [rbx]
mov rdx, qword [rax + 0x10]
test rdx, rdx
je 0x140020f4c
mov ecx, dword [0x1400c2450]
mov rax, qword [0x1400c2460]
mov qword [rax + rcx*8], rdx
inc dword [0x1400c2450]
mov rax, qword [rbx]
mov ecx, dword [rax + 0x18]
test ecx, ecx
jne 0x140020f5e
mov rcx, qword [rax + 0x20]
call fcn.140020b20
jmp 0x140020f8e
cmp ecx, 1
jne 0x140020f8e
cmp qword [0x1400c2508], rsi
mov rcx, qword [rax + 0x20]
jne 0x140020f7a
mov rax, qword [rcx]
mov qword [0x1400c2508], rax
cmp qword [0x1400c24f8], rsi
jne 0x140020f8e
mov rax, qword [rcx + 8]
mov qword [0x1400c24f8], rax
inc ebp
mov rcx, qword [r14 + rbp*8]
lea rbx, [r14 + rbp*8]
test rcx, rcx
jne 0x140020ec4
mov rdi, qword [rsp + 0x40]
mov r14, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x30]
mov dword [0x1400c246c], esi
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rbx
ret
xor esi, esi
mov dword [0x1400c246c], esi
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rbx
ret