joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140102040
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
sub rsp, 0x20
mov rdx, qword [rcx - 0x18]
mov rbp, rcx
xor esi, esi
movsxd rcx, dword [rdx + 0xc]
movsxd rax, dword [rdx + 8]
add rcx, rbp
mov rbx, qword [rcx - 8]
cmp byte [rax + rbp + 0xa0], sil
jne 0x1401020c5
mov rdi, qword [rcx]
sub rdi, rbx
add rdi, 7
shr rdi, 3
cmp rbx, qword [rcx]
cmova rdi, rsi
test rdi, rdi
je 0x140102164
nop dword [rax]
mov rdx, qword [rbx]
test rdx, rdx
je 0x1401020b4
mov rax, qword [rdx + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rdx
mov edx, 1
mov rax, qword [rcx]
call qword [rax]
inc dword [rbp - 0x10]
add rbx, 8
inc rsi
cmp rsi, rdi
jne 0x140102090
jmp 0x140102164
movsxd rdi, dword [rdx + 4]
mov qword [rsp + 0x48], r14
mov r14, qword [rcx]
sub r14, rbx
mov rdi, qword [rdi + rbp + 0x10]
add r14, 7
shr r14, 3
cmp rbx, qword [rcx]
cmova r14, rsi
test r14, r14
je 0x14010215f
nop dword [rax]
mov rax, qword [rbp - 0x18]
movsxd rcx, dword [rax + 8]
movsxd rax, dword [rcx + rbp + 0xa4]
test eax, eax
js 0x14010214f
mov r8d, dword [rdi + 4]
imul rdx, rax, 0x78
add rdx, qword [rcx + rbp + 0x70]
mov rax, qword [rdx + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rdx
mov edx, dword [rdi]
call fcn.140027690
test al, al
je 0x14010214f
mov rdx, qword [rbx]
test rdx, rdx
je 0x14010214f
mov rax, qword [rdx + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rdx
mov edx, 1
mov rax, qword [rcx]
call qword [rax]
inc dword [rbp - 0x10]
add rdi, 8
add rbx, 8
inc rsi
cmp rsi, r14
jne 0x1401020f0
mov r14, qword [rsp + 0x48]
mov rax, qword [rbp - 0x18]
add rbp, 0x20
movsxd rcx, dword [rax + 0x10]
add rcx, rbp
mov rbx, qword [rsp + 0x50]
add rsp, 0x20
pop rdi
pop rsi
pop rbp
jmp 0x140042160
movsxd rax, dword [rcx - 4]
sub rcx, rax
jmp 0x140102040

Function at 0x140102190
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x20
mov rax, qword [rcx - 0x128]
mov rbx, rcx
add rcx, 0xfffffffffffffed8
mov r14, r9
mov esi, r8d
mov ebp, edx
movsxd r10, dword [rax + 0xc]
add rcx, r10
call fcn.14002ace0
mov rdi, qword [rax]
cmp qword [r14], rdi
je 0x14010223f
mov rax, qword [rbx - 0x128]
movsxd rcx, dword [rax + 8]
cmp byte [rcx + rbx - 0x70], 0
je 0x14010221b
movsxd rax, dword [rcx + rbx - 0x6c]
test eax, eax
js 0x14010223f
imul rdx, rax, 0x78
mov r8d, esi
add rdx, qword [rcx + rbx - 0xa0]
mov rax, qword [rdx + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rdx
mov edx, ebp
call fcn.140027690
test al, al
je 0x14010223f
test rdi, rdi
je 0x14010223f
mov rax, qword [rdi + 8]
mov edx, 1
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rdi
mov rax, qword [rcx]
call qword [rax]
inc dword [rbx - 0x120]
mov rax, qword [rbx - 0x128]
mov r9, r14
add rbx, 0x20
mov r8d, esi
mov edx, ebp
movsxd rcx, dword [rax + 0x10]
add rcx, rbx
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
add rsp, 0x20
pop r14
jmp 0x140042590
movsxd rax, dword [rcx - 4]
sub rcx, rax
jmp 0x140102190
Function at 0x140102390
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov rbx, rcx
mov edi, r8d
mov rcx, qword [rcx - 0x18]
mov esi, edx
movsxd r9, dword [rcx + 8]
cmp byte [r9 + rbx + 0xa0], 0
je 0x140101e6d
movsxd rax, dword [r9 + rbx + 0xa4]
test eax, eax
js 0x140101ea6
imul rdx, rax, 0x78
add rdx, qword [r9 + rbx + 0x70]
mov rax, qword [rdx + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rdx
mov edx, esi
call fcn.140027690
test al, al
je 0x140101ea6
mov rcx, qword [rbx - 0x18]
movsxd rax, dword [rcx + 0xc]
mov r8d, edi
lea rcx, [rbx - 0x18]
mov edx, esi
add rcx, rax
call fcn.14002ace0
mov rdx, qword [rax]
test rdx, rdx
je 0x140101ea6
mov rax, qword [rdx + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rdx
mov edx, 1
mov rax, qword [rcx]
call qword [rax]
inc dword [rbx - 0x10]
mov rax, qword [rbx - 0x18]
mov r8d, edi
add rbx, 0x20
mov edx, esi
movsxd rcx, dword [rax + 0x10]
add rcx, rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp 0x140102390
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push r14
sub rsp, 0x20
mov rax, qword [rcx - 0x30]
mov ebp, r8d
mov r14d, edx
mov rsi, rcx
movsxd r9, dword [rax + 8]
cmp byte [r9 + rcx + 0x88], 0
je 0x14010242b
movsxd rax, dword [r9 + rcx + 0x8c]
test eax, eax
js 0x1401023f1
imul rdx, rax, 0x78
add rdx, qword [r9 + rcx + 0x58]
mov rax, qword [rdx + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rdx
mov edx, r14d
call fcn.140027690
test al, al
jne 0x14010242b
mov rax, qword [rsi - 0x38]
lea rcx, [rsi - 0x30]
mov r8d, ebp
mov qword [rsp + 0x30], rdi
mov rbx, qword [rax]
mov rax, qword [rsi - 0x30]
movsxd rdx, dword [rax + 0xc]
add rcx, rdx
mov edx, r14d
call fcn.14002ace0
mov r9, rax
lea rcx, [rsi - 0x38]
mov r8d, ebp
mov edx, r14d
call rbx
mov rdi, qword [rsp + 0x30]
mov rax, qword [rsi - 0x30]
mov r8d, ebp
mov edx, r14d
movsxd rbx, dword [rax + 0xc]
add rbx, rsi
lea rcx, [rbx - 0x30]
call fcn.140107820
mov rax, qword [rbx - 0x28]
mov r8d, ebp
add rbx, 0xffffffffffffffd8
mov edx, r14d
movsxd rcx, dword [rax + 4]
add rcx, rbx
mov rbx, qword [rsp + 0x38]
mov rbp, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop r14
jmp fcn.140026400
movsxd rax, dword [rcx - 4]
sub rcx, rax
jmp 0x140101e10

Function at 0x140102590
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov rbx, rcx
mov edi, r8d
add rcx, 0xffffffffffffffc8
mov esi, edx
call fcn.140107820
mov rax, qword [rbx - 0x30]
lea rcx, [rbx - 0x30]
mov r8d, edi
mov edx, esi
movsxd r9, dword [rax + 4]
add rcx, r9
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp fcn.140026400
movsxd rax, dword [rcx - 4]
sub rcx, rax
jmp 0x140102590
Function at 0x140102670
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov rax, qword [rcx + 8]
mov rbx, rcx
add rcx, 0x18
mov esi, edx
mov edi, r8d
movsxd r10, dword [rax + 0xc]
add rcx, r10
mov rdx, qword [rcx + 8]
cmp qword [rcx + 0x10], rdx
je 0x1401026ad
mov rax, qword [r9]
mov qword [rdx], rax
add qword [rcx + 8], 8
jmp 0x1401026b5
mov r8, r9
call fcn.140019f70
mov rax, qword [rbx + 8]
mov r8d, edi
sub rbx, 0xffffffffffffff80
mov edx, esi
movsxd rcx, dword [rax + 8]
add rcx, rbx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp fcn.140026660

Function at 0x1401026e0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov rax, qword [rcx - 0x10]
mov rbx, rcx
add rcx, 0xfffffffffffffff0
mov edi, r8d
mov esi, edx
movsxd r9, dword [rax + 0xc]
add rcx, r9
call fcn.140107820
mov rax, qword [rbx - 0x10]
lea rcx, [rbx + 0x68]
mov r8d, edi
mov edx, esi
movsxd r9, dword [rax + 8]
add rcx, r9
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp 0x140026ce0
movsxd rax, dword [rcx - 4]
sub rcx, rax
jmp 0x1401026e0

Function at 0x1401027c0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov rdi, qword [rcx - 0x10]
mov rbx, rcx
movsxd r11, r8d
movsxd r9, dword [rdi + 4]
cmp edx, dword [r9 + rcx - 8]
jge 0x140102820
cmp r11d, dword [r9 + rcx - 4]
jge 0x140102820
movsxd rax, edx
lea r8, [rax + rax*2]
mov rax, qword [r9 + rcx]
mov rax, qword [rax + r8*8]
cmp dword [rax + r11*4], 0
jge 0x140102815
movsxd rax, dword [rdi + 0xc]
lea r9, [rbx + 0x18]
mov r10, qword [rcx - 0x18]
add rcx, 0xffffffffffffffe8
add r9, rax
mov r8d, r11d
call qword [r10]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.matrix_out_of_memory1
call fcn.1400092d0
lea rdx, [0x1400094a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
Function at 0x140102850
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov rdi, qword [rcx - 0xc8]
mov rbx, r9
movsxd r11, edx
movsxd r10, dword [rdi + 4]
cmp r11d, dword [r10 + rcx - 0xc0]
jge 0x1401028d6
cmp r8d, dword [r10 + rcx - 0xbc]
jge 0x1401028d6
mov rax, qword [r10 + rcx - 0xb8]
lea r9, [r11 + r11*2]
movsxd rdx, r8d
mov rax, qword [rax + r9*8]
movsxd r9, dword [rax + rdx*4]
test r9d, r9d
js 0x1401028b9
movsxd rax, dword [rdi + 0xc]
mov rcx, qword [rax + rcx - 0xb8]
mov rax, qword [rbx]
mov qword [rcx + r9*8], rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
add rcx, 0xffffffffffffff30
mov r9, rbx
mov edx, r11d
mov rax, qword [rcx]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp qword [rax]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.matrix_out_of_memory1
call fcn.1400092d0
lea rdx, [0x1400094a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rsp + 0x20], rbp
push rsi
push r14
push r15
sub rsp, 0x20
mov rsi, rcx
mov r14d, edx
mov rdx, qword [rcx - 0xc8]
mov r15, r9
mov ebp, r8d
movsxd rcx, dword [rdx + 0x14]
cmp byte [rcx + rsi - 0x10], 0
jne 0x140102c74
mov eax, dword [rdx + 0x10]
jmp 0x140102d54
movsxd rax, dword [rcx + rsi - 0xc]
test eax, eax
js 0x140102ca5
imul rdx, rax, 0x78
add rdx, qword [rcx + rsi - 0x40]
mov rax, qword [rdx + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rdx
mov edx, r14d
call fcn.140027690
test al, al
jne 0x140102d4a
mov rax, qword [rsi - 0xc8]
mov r8d, ebp
mov edx, r14d
movsxd rcx, dword [rax + 4]
add rcx, 0xffffffffffffff38
add rcx, rsi
call fcn.140027690
mov rcx, qword [rsi - 0xc8]
mov r8d, ebp
test al, al
jne 0x140102cfc
movsxd rdx, dword [rcx + 0x14]
lea r9, [rsp + 0x40]
movsxd rax, dword [rdx + rsi - 0xc]
imul rcx, rax, 0x78
add rcx, qword [rdx + rsi - 0x40]
mov edx, r14d
mov rax, qword [rcx]
mov dword [rsp + 0x40], 0xffffffff
call qword [rax]
jmp 0x140102d4a
mov qword [rsp + 0x48], rbx
mov edx, r14d
mov qword [rsp + 0x50], rdi
movsxd rdi, dword [rcx + 0x1c]
mov rax, qword [rdi + rsi - 0xc8]
mov rbx, qword [rax]
movsxd rax, dword [rcx + 0xc]
lea rcx, [rsi - 0xc8]
add rcx, rax
call fcn.14002ace0
lea rcx, [rsi - 0xc8]
mov r9, rax
add rcx, rdi
mov r8d, ebp
mov edx, r14d
call rbx
mov rdi, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x48]
mov rax, qword [rsi - 0xc8]
mov eax, dword [rax + 0x10]
cdqe
lea rcx, [rsi + 8]
add rcx, rax
mov r9, r15
mov r8d, ebp
mov edx, r14d
mov rbp, qword [rsp + 0x58]
add rsp, 0x20
pop r15
pop r14
pop rsi
jmp 0x140102850
movsxd rax, dword [rcx - 4]
sub rcx, rax
jmp 0x140102c40
Function at 0x140102910
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push r14
sub rsp, 0x20
mov rax, qword [rcx - 0x10]
mov ebp, r8d
mov r14d, edx
mov rsi, rcx
movsxd r9, dword [rax + 0x14]
cmp byte [r9 + rcx + 0xa8], 0
je 0x1401029b3
movsxd rax, dword [r9 + rcx + 0xac]
test eax, eax
js 0x140102971
imul rdx, rax, 0x78
add rdx, qword [r9 + rcx + 0x78]
mov rax, qword [rdx + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rdx
mov edx, r14d
call fcn.140027690
test al, al
jne 0x1401029b3
mov rdx, qword [rsi - 0x10]
lea rcx, [rsi - 0x10]
mov qword [rsp + 0x30], rdi
mov r8d, ebp
movsxd rdi, dword [rdx + 0x1c]
mov rax, qword [rdi + rsi - 0x10]
mov rbx, qword [rax]
movsxd rax, dword [rdx + 0xc]
mov edx, r14d
add rcx, rax
call fcn.14002ace0
lea rcx, [rsi - 0x10]
mov r9, rax
add rcx, rdi
mov r8d, ebp
mov edx, r14d
call rbx
mov rdi, qword [rsp + 0x30]
mov rax, qword [rsi - 0x10]
lea rbx, [rsi + 8]
mov r8d, ebp
mov edx, r14d
movsxd rcx, dword [rax + 0x10]
add rbx, rcx
mov rax, qword [rbx - 0x10]
movsxd rcx, dword [rax + 0xc]
add rcx, 0xfffffffffffffff0
add rcx, rbx
call fcn.140107820
mov rax, qword [rbx - 0x10]
mov r8d, ebp
add rbx, 0x68
mov edx, r14d
movsxd rcx, dword [rax + 8]
add rcx, rbx
mov rbx, qword [rsp + 0x38]
mov rbp, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop r14
jmp 0x140026ce0
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
mov rbx, rcx
mov edi, r8d
mov rcx, qword [rcx - 0x10]
mov esi, edx
movsxd r9, dword [rcx + 0x14]
cmp byte [r9 + rbx + 0xa8], 0
je 0x140102e9d
movsxd rax, dword [r9 + rbx + 0xac]
test eax, eax
js 0x140102ee5
imul rdx, rax, 0x78
add rdx, qword [r9 + rbx + 0x78]
mov rax, qword [rdx + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rdx
mov edx, esi
call fcn.140027690
test al, al
je 0x140102ee5
mov rcx, qword [rbx - 0x10]
movsxd rax, dword [rcx + 0xc]
mov r8d, edi
mov qword [rsp + 0x30], rbp
mov edx, esi
movsxd rbp, dword [rcx + 0x24]
lea rcx, [rbx - 0x10]
add rcx, rax
call fcn.14002ace0
mov rdx, qword [rax]
test rdx, rdx
je 0x140102ee0
mov rax, qword [rdx + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rdx
mov edx, 1
mov rax, qword [rcx]
call qword [rax]
inc dword [rbp + rbx - 8]
mov rbp, qword [rsp + 0x30]
mov rax, qword [rbx - 0x10]
mov r8d, edi
mov edx, esi
movsxd rcx, dword [rax + 0x20]
add rcx, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
jmp 0x140102910
movsxd rax, dword [rcx - 4]
sub rcx, rax
jmp 0x140102e40
Function at 0x140102b20
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
mov rbx, rcx
movsxd rdi, r8d
mov r8, qword [rcx - 0x10]
movsxd rsi, edx
movsxd rcx, dword [r8 + 4]
cmp esi, dword [rcx + rbx - 8]
jge 0x140102c03
cmp edi, dword [rcx + rbx - 4]
jge 0x140102c03
mov rax, qword [rcx + rbx]
lea rdx, [rsi + rsi*2]
mov rax, qword [rax + rdx*8]
cmp dword [rax + rdi*4], 0
jge 0x140102bf3
movsxd rcx, dword [r8 + 0x14]
cmp byte [rcx + rbx + 0xa8], 0
je 0x140102bda
movsxd rax, dword [rcx + rbx + 0xac]
test eax, eax
js 0x140102baa
imul rdx, rax, 0x78
mov r8d, edi
add rdx, qword [rcx + rbx + 0x78]
mov rax, qword [rdx + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rdx
mov edx, esi
call fcn.140027690
test al, al
jne 0x140102bda
mov rax, qword [rbx - 0x10]
lea r9, [rsp + 0x38]
mov r8d, edi
movsxd rdx, dword [rax + 0x14]
movsxd rax, dword [rdx + rbx + 0xac]
imul rcx, rax, 0x78
add rcx, qword [rdx + rbx + 0x78]
mov edx, esi
mov rax, qword [rcx]
mov dword [rsp + 0x38], 0xffffffff
call qword [rax]
mov rax, qword [rbx - 0x10]
mov r8d, edi
mov edx, esi
movsxd rcx, dword [rax + 0x10]
add rcx, 8
add rcx, rbx
call fcn.1401027c0
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.matrix_out_of_memory1
call fcn.1400092d0
lea rdx, [0x1400094a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movsxd rax, dword [rcx - 4]
sub rcx, rax
mov rax, qword [rcx - 0x10]
movsxd rax, dword [rax + 0x20]
add rcx, rax
jmp 0x140102b20
Function at 0x140102c40
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov rdi, qword [rcx - 0xc8]
mov rbx, r9
movsxd r11, edx
movsxd r10, dword [rdi + 4]
cmp r11d, dword [r10 + rcx - 0xc0]
jge 0x1401028d6
cmp r8d, dword [r10 + rcx - 0xbc]
jge 0x1401028d6
mov rax, qword [r10 + rcx - 0xb8]
lea r9, [r11 + r11*2]
movsxd rdx, r8d
mov rax, qword [rax + r9*8]
movsxd r9, dword [rax + rdx*4]
test r9d, r9d
js 0x1401028b9
movsxd rax, dword [rdi + 0xc]
mov rcx, qword [rax + rcx - 0xb8]
mov rax, qword [rbx]
mov qword [rcx + r9*8], rax
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
add rcx, 0xffffffffffffff30
mov r9, rbx
mov edx, r11d
mov rax, qword [rcx]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp qword [rax]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.matrix_out_of_memory1
call fcn.1400092d0
lea rdx, [0x1400094a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rsp + 0x20], rbp
push rsi
push r14
push r15
sub rsp, 0x20
mov rsi, rcx
mov r14d, edx
mov rdx, qword [rcx - 0xc8]
mov r15, r9
mov ebp, r8d
movsxd rcx, dword [rdx + 0x14]
cmp byte [rcx + rsi - 0x10], 0
jne 0x140102c74
mov eax, dword [rdx + 0x10]
jmp 0x140102d54
movsxd rax, dword [rcx + rsi - 0xc]
test eax, eax
js 0x140102ca5
imul rdx, rax, 0x78
add rdx, qword [rcx + rsi - 0x40]
mov rax, qword [rdx + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rdx
mov edx, r14d
call fcn.140027690
test al, al
jne 0x140102d4a
mov rax, qword [rsi - 0xc8]
mov r8d, ebp
mov edx, r14d
movsxd rcx, dword [rax + 4]
add rcx, 0xffffffffffffff38
add rcx, rsi
call fcn.140027690
mov rcx, qword [rsi - 0xc8]
mov r8d, ebp
test al, al
jne 0x140102cfc
movsxd rdx, dword [rcx + 0x14]
lea r9, [rsp + 0x40]
movsxd rax, dword [rdx + rsi - 0xc]
imul rcx, rax, 0x78
add rcx, qword [rdx + rsi - 0x40]
mov edx, r14d
mov rax, qword [rcx]
mov dword [rsp + 0x40], 0xffffffff
call qword [rax]
jmp 0x140102d4a
mov qword [rsp + 0x48], rbx
mov edx, r14d
mov qword [rsp + 0x50], rdi
movsxd rdi, dword [rcx + 0x1c]
mov rax, qword [rdi + rsi - 0xc8]
mov rbx, qword [rax]
movsxd rax, dword [rcx + 0xc]
lea rcx, [rsi - 0xc8]
add rcx, rax
call fcn.14002ace0
lea rcx, [rsi - 0xc8]
mov r9, rax
add rcx, rdi
mov r8d, ebp
mov edx, r14d
call rbx
mov rdi, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x48]
mov rax, qword [rsi - 0xc8]
mov eax, dword [rax + 0x10]
cdqe
lea rcx, [rsi + 8]
add rcx, rax
mov r9, r15
mov r8d, ebp
mov edx, r14d
mov rbp, qword [rsp + 0x58]
add rsp, 0x20
pop r15
pop r14
pop rsi
jmp 0x140102850
movsxd rax, dword [rcx - 4]
sub rcx, rax
jmp 0x140102c40
Function at 0x140102e40
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push r14
sub rsp, 0x20
mov rax, qword [rcx - 0x10]
mov ebp, r8d
mov r14d, edx
mov rsi, rcx
movsxd r9, dword [rax + 0x14]
cmp byte [r9 + rcx + 0xa8], 0
je 0x1401029b3
movsxd rax, dword [r9 + rcx + 0xac]
test eax, eax
js 0x140102971
imul rdx, rax, 0x78
add rdx, qword [r9 + rcx + 0x78]
mov rax, qword [rdx + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rdx
mov edx, r14d
call fcn.140027690
test al, al
jne 0x1401029b3
mov rdx, qword [rsi - 0x10]
lea rcx, [rsi - 0x10]
mov qword [rsp + 0x30], rdi
mov r8d, ebp
movsxd rdi, dword [rdx + 0x1c]
mov rax, qword [rdi + rsi - 0x10]
mov rbx, qword [rax]
movsxd rax, dword [rdx + 0xc]
mov edx, r14d
add rcx, rax
call fcn.14002ace0
lea rcx, [rsi - 0x10]
mov r9, rax
add rcx, rdi
mov r8d, ebp
mov edx, r14d
call rbx
mov rdi, qword [rsp + 0x30]
mov rax, qword [rsi - 0x10]
lea rbx, [rsi + 8]
mov r8d, ebp
mov edx, r14d
movsxd rcx, dword [rax + 0x10]
add rbx, rcx
mov rax, qword [rbx - 0x10]
movsxd rcx, dword [rax + 0xc]
add rcx, 0xfffffffffffffff0
add rcx, rbx
call fcn.140107820
mov rax, qword [rbx - 0x10]
mov r8d, ebp
add rbx, 0x68
mov edx, r14d
movsxd rcx, dword [rax + 8]
add rcx, rbx
mov rbx, qword [rsp + 0x38]
mov rbp, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop r14
jmp 0x140026ce0
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
mov rbx, rcx
mov edi, r8d
mov rcx, qword [rcx - 0x10]
mov esi, edx
movsxd r9, dword [rcx + 0x14]
cmp byte [r9 + rbx + 0xa8], 0
je 0x140102e9d
movsxd rax, dword [r9 + rbx + 0xac]
test eax, eax
js 0x140102ee5
imul rdx, rax, 0x78
add rdx, qword [r9 + rbx + 0x78]
mov rax, qword [rdx + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rdx
mov edx, esi
call fcn.140027690
test al, al
je 0x140102ee5
mov rcx, qword [rbx - 0x10]
movsxd rax, dword [rcx + 0xc]
mov r8d, edi
mov qword [rsp + 0x30], rbp
mov edx, esi
movsxd rbp, dword [rcx + 0x24]
lea rcx, [rbx - 0x10]
add rcx, rax
call fcn.14002ace0
mov rdx, qword [rax]
test rdx, rdx
je 0x140102ee0
mov rax, qword [rdx + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rdx
mov edx, 1
mov rax, qword [rcx]
call qword [rax]
inc dword [rbp + rbx - 8]
mov rbp, qword [rsp + 0x30]
mov rax, qword [rbx - 0x10]
mov r8d, edi
mov edx, esi
movsxd rcx, dword [rax + 0x20]
add rcx, rbx
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
jmp 0x140102910
movsxd rax, dword [rcx - 4]
sub rcx, rax
jmp 0x140102e40
Function at 0x140103080
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rdi
push r14
push r15
sub rsp, 0x20
mov rax, qword [rcx - 0xc8]
mov rbx, rcx
add rcx, 0xffffffffffffff38
mov r15, r9
mov ebp, r8d
mov r14d, edx
movsxd r10, dword [rax + 0xc]
add rcx, r10
call fcn.14002ace0
mov rdi, qword [rax]
cmp qword [r15], rdi
je 0x14010313e
mov rcx, qword [rbx - 0xc8]
movsxd r8, dword [rcx + 0x14]
cmp byte [r8 + rbx - 0x10], 0
je 0x14010310b
movsxd rax, dword [r8 + rbx - 0xc]
test eax, eax
js 0x14010313e
imul rdx, rax, 0x78
add rdx, qword [r8 + rbx - 0x40]
mov r8d, ebp
mov rax, qword [rdx + 8]
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rdx
mov edx, r14d
call fcn.140027690
test al, al
je 0x14010313e
mov rcx, qword [rbx - 0xc8]
mov qword [rsp + 0x40], rsi
movsxd rsi, dword [rcx + 0x24]
test rdi, rdi
je 0x140103139
mov rax, qword [rdi + 8]
mov edx, 1
movsxd rcx, dword [rax + 4]
add rcx, 8
add rcx, rdi
mov rax, qword [rcx]
call qword [rax]
inc dword [rsi + rbx - 0xc0]
mov rsi, qword [rsp + 0x40]
mov rax, qword [rbx - 0xc8]
mov r9, r15
mov r8d, ebp
mov edx, r14d
movsxd rcx, dword [rax + 0x20]
add rcx, rbx
mov rbx, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x50]
add rsp, 0x20
pop r15
pop r14
pop rdi
jmp 0x140102c40
movsxd rax, dword [rcx - 4]
sub rcx, rax
jmp 0x140103080

Function at 0x140107820
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword [rcx + 8]
movsxd rbx, r8d
movsxd r10, dword [rax + 4]
add r10, rcx
cmp edx, dword [r10 + 0x10]
jge 0x14010787a
cmp ebx, dword [r10 + 0x14]
jge 0x14010787a
mov rax, qword [r10 + 0x38]
sub rax, qword [r10 + 0x30]
mov r9, qword [rcx + 0x10]
sar rax, 3
movsxd r8, eax
movsxd rax, edx
lea rdx, [rax + rax*2]
mov rax, qword [r10 + 0x18]
mov rax, qword [rax + rdx*8]
movsxd rdx, dword [rax + rbx*4]
mov rax, qword [r9 + r8*8 - 8]
mov qword [r9 + rdx*8], rax
add qword [rcx + 0x18], 0xfffffffffffffff8
add rsp, 0x20
pop rbx
ret
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.matrix_out_of_memory1
call fcn.1400092d0
lea rdx, [0x1400094a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3