joyce8/EMBER2024-capa huggingface dataset:
Function at 0x450d9b
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov ecx, dword [ebp + 8]
push ebx
mov ebx, dword [ebp + 0xc]
push esi
push edi
xor edi, edi
cmp dword [ebp + 0x10], edi
mov dword [ebp - 8], ecx
mov dword [ebp - 4], ebx
je 0x450dd8
cmp dword [ebp + 0x14], edi
je 0x450dd8
cmp ecx, edi
jne 0x450ddf
call fcn.0042a98b
push edi
push edi
push edi
push edi
mov dword [eax], 0x16
push edi
call fcn.00429974
add esp, 0x14
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret
mov esi, dword [ebp + 0x18]
cmp esi, edi
je 0x450df3
or eax, 0xffffffff
xor edx, edx
div dword [ebp + 0x10]
cmp dword [ebp + 0x14], eax
jbe 0x450e14
cmp ebx, 0xffffffff
je 0x450e03
push ebx
push edi
push ecx
call fcn.00428c40
add esp, 0xc
cmp esi, edi
je 0x450dc0
or eax, 0xffffffff
xor edx, edx
div dword [ebp + 0x10]
cmp dword [ebp + 0x14], eax
ja 0x450dc0
mov edi, dword [ebp + 0x10]
imul edi, dword [ebp + 0x14]
test word [esi + 0xc], 0x10c
mov dword [ebp - 0x10], edi
mov ebx, edi
je 0x450e30
mov eax, dword [esi + 0x18]
mov dword [ebp - 0xc], eax
jmp 0x450e37
mov dword [ebp - 0xc], 0x1000
test edi, edi
je 0x450f28
test word [esi + 0xc], 0x10c
je 0x450e8b
mov eax, dword [esi + 4]
test eax, eax
je 0x450e8b
jl 0x450f89
cmp ebx, eax
mov edi, ebx
jb 0x450e5c
mov edi, eax
cmp edi, dword [ebp - 4]
ja 0x450f30
push edi
push dword [esi]
push dword [ebp - 4]
push dword [ebp - 8]
call fcn.00428b60
sub dword [esi + 4], edi
add dword [esi], edi
add dword [ebp - 8], edi
sub ebx, edi
add esp, 0x10
sub dword [ebp - 4], edi
mov edi, dword [ebp - 0x10]
jmp 0x450f20
cmp ebx, dword [ebp - 0xc]
jb 0x450ef8
cmp dword [ebp - 0xc], 0
je 0x450eb5
mov ecx, closesocket
xor edx, edx
cmp ebx, ecx
jbe 0x450eaa
mov eax, ecx
div dword [ebp - 0xc]
mov eax, ecx
jmp 0x450eb1
mov eax, ebx
div dword [ebp - 0xc]
mov eax, ebx
sub eax, edx
jmp 0x450ec0
mov eax, closesocket
cmp ebx, eax
ja 0x450ec0
mov eax, ebx
cmp eax, dword [ebp - 4]
ja 0x450f5c
push eax
push dword [ebp - 8]
push esi
call fcn.004326ea
pop ecx
push eax
call fcn.0045487d
add esp, 0xc
test eax, eax
je 0x450f9b
cmp eax, 0xffffffff
je 0x450f89
add dword [ebp - 8], eax
sub ebx, eax
sub dword [ebp - 4], eax
jmp 0x450f20
push esi
call fcn.0045419c
cmp eax, 0xffffffff
pop ecx
je 0x450f8d
cmp dword [ebp - 4], 0
je 0x450f5c
mov ecx, dword [ebp - 8]
inc dword [ebp - 8]
mov byte [ecx], al
mov eax, dword [esi + 0x18]
dec ebx
dec dword [ebp - 4]
mov dword [ebp - 0xc], eax
test ebx, ebx
jne 0x450e3f
mov eax, dword [ebp + 0x14]
jmp 0x450dda
xor esi, esi
cmp dword [ebp + 0xc], 0xffffffff
je 0x450f47
push dword [ebp + 0xc]
push esi
push dword [ebp + 8]
call fcn.00428c40
add esp, 0xc
call fcn.0042a98b
push esi
push esi
push esi
push esi
mov dword [eax], 0x22
push esi
jmp 0x450dd0
cmp dword [ebp + 0xc], 0xffffffff
je 0x450f72
push dword [ebp + 0xc]
push 0
push dword [ebp + 8]
call fcn.00428c40
add esp, 0xc
call fcn.0042a98b
mov dword [eax], 0x22
xor eax, eax
push eax
push eax
push eax
push eax
push eax
jmp 0x450dd0
or dword [esi + 0xc], 0x20
mov eax, edi
sub eax, ebx
xor edx, edx
div dword [ebp + 0x10]
jmp 0x450dda
or dword [esi + 0xc], 0x10
jmp 0x450f8d
Function at 0x41f993
Capabilities:
Parse pe header

Disassembly:
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
je 0x41f9d2
mov ecx, 0x5a4d
cmp word [eax], cx
jne 0x41f9d2
mov ecx, dword [eax + 0x3c]
add ecx, eax
cmp dword [ecx], 0x4550
jne 0x41f9d2
mov eax, 0x10b
cmp word [ecx + 0x18], ax
jne 0x41f9d2
cmp dword [ecx + 0x74], 0xe
jbe 0x41f9d2
cmp dword [ecx + 0xe8], 0
setne al
ret
xor al, al
ret

Function at 0x432150
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 8]
mov ecx, 0x5a4d
cmp word [eax], cx
jne 0x43217d
mov ecx, dword [eax + 0x3c]
add ecx, eax
cmp dword [ecx], 0x4550
jne 0x43217d
mov edx, 0x10b
xor eax, eax
cmp word [ecx + 0x18], dx
sete al
pop ebp
ret
xor eax, eax
pop ebp
ret

Function at 0xd04058
Capabilities:
Decompress data using aplib

Disassembly:
call 0xd041a8
push ebx
mov ebx, esp
push ebx
mov esi, dword [ebx + 8]
mov edi, dword [ebx + 0x10]
cld
mov dl, 0x80
mov al, byte [esi]
inc esi
mov byte [edi], al
inc edi
mov ebx, 2
add dl, dl
jne 0xd0407e
mov dl, byte [esi]
inc esi
adc dl, dl
jae 0xd0406a
add dl, dl
jne 0xd04089
mov dl, byte [esi]
inc esi
adc dl, dl
jae 0xd040dc
xor eax, eax
add dl, dl
jne 0xd04096
mov dl, byte [esi]
inc esi
adc dl, dl
jae 0xd0417d
add dl, dl
jne 0xd040a5
mov dl, byte [esi]
inc esi
adc dl, dl
adc eax, eax
add dl, dl
jne 0xd040b0
mov dl, byte [esi]
inc esi
adc dl, dl
adc eax, eax
add dl, dl
jne 0xd040bb
mov dl, byte [esi]
inc esi
adc dl, dl
adc eax, eax
add dl, dl
jne 0xd040c6
mov dl, byte [esi]
inc esi
adc dl, dl
adc eax, eax
je 0xd040d2
push edi
mov eax, eax
sub edi, eax
mov al, byte [edi]
pop edi
mov byte [edi], al
inc edi
mov ebx, 2
jmp 0xd04075
mov eax, 1
add dl, dl
jne 0xd040ea
mov dl, byte [esi]
inc esi
adc dl, dl
adc eax, eax
add dl, dl
jne 0xd040f5
mov dl, byte [esi]
inc esi
adc dl, dl
jb 0xd040e1
sub eax, ebx
mov ebx, 1
jne 0xd04128
mov ecx, 1
add dl, dl
jne 0xd0410e
mov dl, byte [esi]
inc esi
adc dl, dl
adc ecx, ecx
add dl, dl
jne 0xd04119
mov dl, byte [esi]
inc esi
adc dl, dl
jb 0xd04105
push esi
mov esi, edi
sub esi, ebp
rep movsb byte es:[edi], byte [esi]
pop esi
jmp 0xd04075
dec eax
shl eax, 8
mov al, byte [esi]
inc esi
mov ebp, eax
mov ecx, 1
add dl, dl
jne 0xd0413f
mov dl, byte [esi]
inc esi
adc dl, dl
adc ecx, ecx
add dl, dl
jne 0xd0414a
mov dl, byte [esi]
inc esi
adc dl, dl
jb 0xd04136
cmp eax, 0x7d00
jae 0xd0416d
cmp eax, 0x500
jb 0xd04168
inc ecx
push esi
mov esi, edi
sub esi, eax
rep movsb byte es:[edi], byte [esi]
pop esi
jmp 0xd04075
cmp eax, 0x7f
ja 0xd04170
add ecx, 2
push esi
mov esi, edi
sub esi, eax
rep movsb byte es:[edi], byte [esi]
pop esi
jmp 0xd04075
mov al, byte [esi]
inc esi
xor ecx, ecx
shr al, 1
je 0xd0419e
adc ecx, 2
mov ebp, eax
push esi
mov esi, edi
sub esi, eax
rep movsb byte es:[edi], byte [esi]
pop esi
mov ebx, 1
jmp 0xd04075
pop ebx
sub edi, dword [ebx + 0x10]
mov eax, edi
pop ebx
ret 0x10
Function at 0x403470
Capabilities:
Encrypt data using salsa20 or chacha
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0xa5aae0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x403640
mov eax, dword [esp + 8]
mov dword [eax], 0x61707865
mov dword [eax + 4], 0x61707865
mov dword [eax + 8], 0x61707865
mov dword [eax + 0xc], 0x61707865
mov dword [eax + 0x10], 0x3320646e
mov dword [eax + 0x14], 0x3320646e
mov dword [eax + 0x18], 0x3320646e
mov dword [eax + 0x1c], 0x3320646e
mov dword [eax + 0x20], 0x79622d32
mov dword [eax + 0x24], 0x79622d32
mov dword [eax + 0x28], 0x79622d32
mov dword [eax + 0x2c], 0x79622d32
mov dword [eax + 0x30], 0x6b206574
mov dword [eax + 0x34], 0x6b206574
mov dword [eax + 0x38], 0x6b206574
mov dword [eax + 0x3c], 0x6b206574
mov ecx, dword [esp + 4]
mov edx, dword [ecx]
mov dword [eax + 0x40], edx
mov dword [eax + 0x44], edx
mov dword [eax + 0x48], edx
mov dword [eax + 0x4c], edx
mov edx, dword [ecx + 4]
mov dword [eax + 0x50], edx
mov dword [eax + 0x54], edx
mov dword [eax + 0x58], edx
mov dword [eax + 0x5c], edx
mov edx, dword [ecx + 8]
mov dword [eax + 0x60], edx
mov dword [eax + 0x64], edx
mov dword [eax + 0x68], edx
mov dword [eax + 0x6c], edx
mov edx, dword [ecx + 0xc]
mov dword [eax + 0x70], edx
mov dword [eax + 0x74], edx
mov dword [eax + 0x78], edx
mov dword [eax + 0x7c], edx
mov edx, dword [ecx + 0x10]
mov dword [eax + 0x80], edx
mov dword [eax + 0x84], edx
mov dword [eax + 0x88], edx
mov dword [eax + 0x8c], edx
mov edx, dword [ecx + 0x14]
mov dword [eax + 0x90], edx
mov dword [eax + 0x94], edx
mov dword [eax + 0x98], edx
mov dword [eax + 0x9c], edx
mov edx, dword [ecx + 0x18]
mov dword [eax + 0xa0], edx
mov dword [eax + 0xa4], edx
mov dword [eax + 0xa8], edx
mov dword [eax + 0xac], edx
mov ecx, dword [ecx + 0x1c]
mov dword [eax + 0xb0], ecx
mov dword [eax + 0xb4], ecx
mov dword [eax + 0xb8], ecx
mov dword [eax + 0xbc], ecx
mov ecx, dword [esp + 0xc]
mov dword [eax + 0xc0], ecx
lea edx, [ecx + 1]
mov dword [eax + 0xc4], edx
lea edx, [ecx + 2]
mov dword [eax + 0xc8], edx
add ecx, 3
mov dword [eax + 0xcc], ecx
mov dword [eax + 0xd0], 0
mov dword [eax + 0xd4], 0
mov dword [eax + 0xd8], 0
mov dword [eax + 0xdc], 0
mov dword [eax + 0xe0], 0
mov dword [eax + 0xe4], 0
mov dword [eax + 0xe8], 0
mov dword [eax + 0xec], 0
mov dword [eax + 0xf0], 0
mov dword [eax + 0xf4], 0
mov dword [eax + 0xf8], 0
mov dword [eax + 0xfc], 0
ret
call sym.runtime.morestack_noctxt
jmp sym.internal_chacha8rand.setup
Function at 0x40c840
Capabilities:
Decompress data using quicklz

Disassembly:
mov ecx, dword [0xa5aae0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x40ca0b
sub esp, 0x38
mov eax, dword [esp + 0x3c]
cmp eax, 0x7000000
jle 0x40c869
mov eax, 0x7000000
jmp 0x40c871
test eax, eax
je 0x40c9e6
mov dword [esp + 0x34], eax
mov ecx, dword [0xa5aae0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x18]
mov edx, dword [ecx + 0x4a4]
mov ebx, dword [ecx + 0x4a8]
mov ebp, edx
shl edx, 0x11
xor edx, ebp
mov ebp, ebx
xor ebx, edx
shr edx, 7
xor edx, ebx
mov ebx, ebp
shr ebp, 0x10
xor ebp, edx
lea edx, [ebp + ebx]
shr edx, 6
inc edx
mov dword [ecx + 0x4a4], ebx
mov dword [ecx + 0x4a8], ebp
mov dword [esp], edx
call sym.runtime.uint32tofloat64
movsd xmm0, qword [esp + 4]
movsd qword [esp + 0x24], xmm0
mov eax, dword [esp + 0x28]
mov ecx, eax
shr ecx, 0x14
and ecx, 0x7ff
mov edx, eax
shr edx, 0xf
and edx, 0x1f
shl eax, 5
mov ebx, dword [esp + 0x24]
shr ebx, 0x1b
or ebx, eax
lea eax, [0x545d40]
movsd xmm0, qword [eax + edx*8]
mov ebp, ecx
add ecx, 0xfffffc01
add edx, 1
mov esi, 0
adc esi, 0
test esi, esi
jne 0x40c9fe
cmp edx, 0x21
jae 0x40c9f2
movsd qword [esp + 0x14], xmm0
add ebp, 0xfffffc01
mov ebp, 0xffffffff
adc ebp, 0
and ebx, 0xfffff
mov dword [esp + 0x10], ebx
movsd xmm0, qword [eax + edx*8]
movsd qword [esp + 0x1c], xmm0
mov dword [esp], ecx
mov dword [esp + 4], ebp
call sym.runtime.int64tofloat64
movsd xmm0, qword [esp + 8]
movsd qword [esp + 0x2c], xmm0
mov eax, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], 0
call sym.runtime.uint64tofloat64
movsd xmm0, qword [esp + 0x2c]
movsd xmm1, qword [esp + 0x14]
addsd xmm0, xmm1
movsd xmm2, qword [esp + 0x1c]
subsd xmm2, xmm1
movsd xmm1, qword [esp + 8]
mulsd xmm1, xmm2
movsd xmm2, qword [0x4d6880]
mulsd xmm2, xmm1
addsd xmm0, xmm2
movsd xmm1, qword [0x4d68e0]
subsd xmm0, xmm1
xorps xmm1, xmm1
ucomisd xmm0, xmm1
jbe 0x40c9c1
xorps xmm0, xmm0
mov eax, dword [esp + 0x34]
cvtsi2sd xmm1, eax
movsd xmm2, qword [0x4d6918]
mulsd xmm1, xmm2
mulsd xmm0, xmm1
cvttsd2si eax, xmm0
inc eax
mov dword [esp + 0x40], eax
add esp, 0x38
ret
mov dword [esp + 0x40], 0
add esp, 0x38
ret
mov eax, edx
mov ecx, 0x21
call sym.runtime.panicIndexU
mov eax, edx
mov ecx, 0x21
call sym.runtime.panicExtendIndexU
nop
call sym.runtime.morestack_noctxt
jmp sym.runtime.fastexprand
Function at 0x413ea0
Capabilities:
Check for software breakpoints

Disassembly:
mov ecx, dword [0xa5aae0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x41409e
sub esp, 0x18
mov eax, dword [0xa5aa10]
test eax, eax
jne 0x414087
nop
nop
lea eax, [0xa5aa00]
mov dword [esp], eax
call sym.runtime.lock2
mov eax, dword [0xa5aa04]
test eax, eax
je 0x413ee8
cmp dword [eax + 8], 0xcc
jne 0x413f5e
mov edx, dword [0xa5aa08]
test edx, edx
jne 0x413f40
mov dword [esp], 0x1000
mov dword [esp + 4], 0
lea eax, [0xa5d2d0]
mov dword [esp + 8], eax
call sym.runtime.persistentalloc
mov eax, dword [esp + 0xc]
mov dword [0xa5aa08], eax
mov ecx, dword [0xa5aa0c]
mov dword [eax], ecx
mov eax, dword [0xa5aa08]
mov dword [0xa5aa0c], eax
movzx eax, byte [0xa5ae40]
test al, al
jne 0x413f40
xor eax, eax
jmp 0x414058
mov edx, dword [0xa5aa08]
mov ebx, dword [edx + 4]
mov dword [0xa5aa08], ebx
mov ebx, dword [0xa5aa04]
mov dword [edx + 4], ebx
mov dword [0xa5aa04], edx
mov edx, dword [0xa5aa04]
mov eax, dword [edx + 8]
cmp eax, 0xcc
jae 0x414037
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], eax
lea eax, [edx + 8]
mov dword [esp], eax
mov dword [esp + 4], 1
call sym.runtime_internal_atomic.Xadd
mov eax, dword [0xa5ab90]
mov ecx, dword [esp + 0x10]
lea ecx, [ecx + ecx*4]
test eax, eax
jne 0x413fb0
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x28]
mov ebp, dword [esp + 0x2c]
jmp 0x413ff0
call sym.runtime.gcWriteBarrier8
mov eax, dword [esp + 0x20]
mov dword [edi], eax
mov edx, dword [esp + 0x14]
mov ebx, dword [edx + ecx*4 + 0x10]
mov dword [edi + 4], ebx
mov ebx, dword [esp + 0x28]
mov dword [edi + 8], ebx
mov ebp, dword [edx + ecx*4 + 0x1c]
mov dword [edi + 0xc], ebp
mov ebp, dword [esp + 0x2c]
mov dword [edi + 0x10], ebp
mov esi, dword [edx + ecx*4 + 0x20]
mov dword [edi + 0x14], esi
mov esi, dword [esp + 0x1c]
mov dword [edi + 0x18], esi
mov esi, dword [edx + ecx*4 + 0x14]
mov dword [edi + 0x1c], esi
mov dword [edx + ecx*4 + 0x10], eax
mov eax, dword [esp + 0x24]
mov dword [edx + ecx*4 + 0x18], eax
mov dword [edx + ecx*4 + 0x1c], ebx
mov dword [edx + ecx*4 + 0x20], ebp
mov eax, dword [esp + 0x1c]
mov dword [edx + ecx*4 + 0x14], eax
nop
nop
lea eax, [0xa5aa00]
mov dword [esp], eax
call sym.runtime.unlock2
nop
lea eax, [0xa5a9fc]
mov dword [esp], eax
mov dword [esp + 4], 8
call sym.runtime_internal_atomic.Or
add esp, 0x18
ret
mov ecx, 0xcc
call sym.runtime.panicIndexU
lea edx, [0x545258]
movzx ebx, byte [edx + eax]
lea ebp, [0xa5ae40]
mov byte [ebp + ecx], bl
lea eax, [ecx + 1]
cmp eax, 0x80
jge 0x413f40
mov ecx, eax
mov eax, 0xcccccccd
imul ecx
add edx, ecx
sar edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 5
jb 0x414041
mov ecx, 5
call sym.runtime.panicIndex
lea eax, [0x4b82d9]
mov dword [esp], eax
mov dword [esp + 4], 0x18
call sym.runtime.throw
nop
call sym.runtime.morestack_noctxt
jmp sym.runtime.queuefinalizer
Function at 0x427f10
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword [0xa5aae0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x428054
sub esp, 0x1c
mov eax, dword [esp + 0x20]
mov dword [esp], eax
call sym.runtime.spanOfHeap
mov eax, dword [esp + 4]
test eax, eax
je 0x42803d
mov dword [esp + 0xc], eax
lea ecx, [eax + 0x4c]
mov dword [esp + 0x18], ecx
mov edx, dword [0xa5aae0]
mov edx, dword fs:[edx]
mov edx, dword [edx]
mov ebx, dword [edx + 0x18]
nop
inc dword [ebx + 0x7c]
mov edx, dword [edx + 0x18]
mov dword [esp + 0x14], edx
mov dword [esp], eax
call sym.runtime._mspan_.ensureSwept
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0xc]
sub eax, dword [ecx + 0xc]
mov dword [esp + 0x10], eax
mov edx, dword [esp + 0x24]
movzx ebx, byte [edx + 6]
mov byte [esp + 0xa], bl
nop
mov ebp, dword [esp + 0x18]
mov dword [esp], ebp
call sym.runtime.lock2
mov eax, dword [esp + 0xc]
lea ecx, [eax + 0x50]
mov edx, dword [esp + 0x10]
movzx ebx, byte [esp + 0xa]
jmp 0x427fa7
mov ecx, ebp
mov ebp, dword [ecx]
test ebp, ebp
je 0x427fd2
movzx esi, word [ebp + 4]
cmp esi, edx
jne 0x427fbc
cmp byte [ebp + 6], bl
je 0x427fc7
cmp esi, edx
ja 0x427fce
jne 0x427fa5
cmp byte [ebp + 6], bl
jbe 0x427fa5
jmp 0x427fce
mov ebx, 1
jmp 0x427fd4
xor ebx, ebx
jmp 0x427fd4
xor ebx, ebx
mov byte [esp + 0xb], bl
test bl, bl
jne 0x427ff2
mov ebx, dword [esp + 0x24]
mov word [ebx + 4], dx
mov edx, dword [ecx]
mov dword [ebx], edx
mov dword [ecx], ebx
mov dword [esp], eax
call sym.runtime.spanHasSpecials
nop
nop
mov eax, dword [esp + 0x18]
mov dword [esp], eax
call sym.runtime.unlock2
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x7c]
lea edx, [ecx - 1]
nop
mov ebx, dword [0xa5aae0]
mov ebx, dword fs:[ebx]
mov ebx, dword [ebx]
mov dword [eax + 0x7c], edx
cmp ecx, 1
jne 0x42802d
movzx eax, byte [ebx + 0x65]
test al, al
je 0x42802d
mov dword [ebx + 8], 0xfffffade
movzx eax, byte [esp + 0xb]
xor eax, 1
mov byte [esp + 0x28], al
add esp, 0x1c
ret
lea eax, [0x4b9806]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call sym.runtime.throw
nop
call sym.runtime.morestack_noctxt
jmp sym.runtime.addspecial
Function at 0x4284d0
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword [0xa5aae0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x428640
sub esp, 0x14
mov eax, dword [esp + 0x18]
movzx ecx, byte [eax + 6]
cmp cl, 2
ja 0x4285d0
cmp cl, 1
je 0x428562
cmp cl, 2
jne 0x428629
mov ecx, dword [eax + 8]
mov dword [esp], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 4], ecx
call sym.runtime.mProf_Free
nop
nop
lea eax, [0xa26e60]
mov dword [esp], eax
call sym.runtime.lock2
mov eax, dword [0xa26e04]
sub eax, dword [0xa26de8]
nop
mov dword [0xa26e04], eax
mov eax, dword [0xa26df4]
mov ecx, dword [esp + 0x18]
mov dword [ecx], eax
mov dword [0xa26df4], ecx
nop
lea eax, [0xa26e60]
mov dword [esp], eax
call sym.runtime.unlock2
jmp 0x428625
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov ebx, dword [eax + 0x10]
mov ebp, dword [eax + 0x14]
mov esi, dword [esp + 0x1c]
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
call sym.runtime.queuefinalizer
nop
nop
lea eax, [0xa26e60]
mov dword [esp], eax
call sym.runtime.lock2
mov eax, dword [0xa26ddc]
sub eax, dword [0xa26dc0]
nop
mov dword [0xa26ddc], eax
mov eax, dword [0xa26dcc]
mov ecx, dword [esp + 0x18]
mov dword [ecx], eax
mov dword [0xa26dcc], ecx
nop
lea eax, [0xa26e60]
mov dword [esp], eax
call sym.runtime.unlock2
jmp 0x428625
cmp cl, 3
jne 0x4285db
mov byte [eax + 8], 1
jmp 0x428625
cmp cl, 4
jne 0x428629
nop
nop
lea eax, [0xa26e60]
mov dword [esp], eax
call sym.runtime.lock2
mov eax, dword [0xa26e54]
sub eax, dword [0xa26e38]
nop
mov dword [0xa26e54], eax
mov eax, dword [0xa26e44]
mov ecx, dword [esp + 0x18]
mov dword [ecx], eax
mov dword [0xa26e44], ecx
nop
nop
lea eax, [0xa26e60]
mov dword [esp], eax
call sym.runtime.unlock2
add esp, 0x14
ret
lea eax, [0x4b5dee]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call sym.runtime.throw
nop
call sym.runtime.morestack_noctxt
jmp sym.runtime.freeSpecial
Function at 0x42e260
Capabilities:
Access peb ldr_data

Disassembly:
mov ecx, dword [0xa5aae0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x42e346
sub esp, 0x2c
mov eax, dword [esp + 0x30]
mov dword [eax + 0x88], 0
lea ecx, [0xa5adf0]
mov dword [esp], ecx
call sym.runtime_internal_atomic.Loadint32
mov eax, dword [esp + 4]
test eax, eax
je 0x42e322
mov dword [esp + 8], 0
mov ecx, dword [0xa5aae0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
mov dword [esp + 0xc], ecx
lea edx, [esp + 0x30]
lea edi, [esp + 0x10]
xor eax, eax
call fcn.00462959
lea ecx, [sym.runtime._mLockProfile_.captureStack.func1]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1c], ecx
lea ecx, [esp + 8]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], 3
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x28], ecx
lea edx, [esp + 0x10]
mov dword [esp], edx
call sym.runtime.systemstack
mov eax, dword [esp + 8]
cmp eax, 0x20
jge 0x42e31e
jae 0x42e33b
mov ecx, dword [esp + 0x30]
mov dword [ecx + eax*4 + 8], 0
add esp, 0x2c
ret
lea eax, [sym.runtime._LostContendedRuntimeLock]
inc eax
mov ecx, dword [esp + 0x30]
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], 0
add esp, 0x2c
ret
mov ecx, 0x20
call sym.runtime.panicIndex
nop
call sym.runtime.morestack_noctxt
jmp sym.runtime._mLockProfile_.captureStack
Function at 0x440560
Capabilities:
Access peb ldr_data

Disassembly:
sub esp, 0x2c
call sym.runtime.traceAcquire
mov eax, dword [0xa5aae0]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov dword [esp + 0x10], eax
mov ecx, dword [eax + 0x18]
mov edx, dword [esp]
mov dword [esp + 0x14], edx
mov ebx, dword [esp + 4]
mov dword [esp + 0xc], ebx
inc dword [ecx + 0x7c]
mov dword [eax + 8], 0xfffffade
mov byte [eax + 0x6b], 1
mov ecx, dword [esp + 0x30]
mov dword [esp], ecx
mov ebp, dword [esp + 0x34]
mov dword [esp + 4], ebp
call sym.runtime.save
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x10]
mov dword [ecx + 0x38], eax
mov edx, dword [esp + 0x30]
mov dword [ecx + 0x3c], edx
mov dword [esp], ecx
mov dword [esp + 4], 2
mov dword [esp + 8], 3
call sym.runtime.casgstatus
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0x38]
cmp dword [eax], ecx
ja 0x4405e5
cmp dword [eax + 4], ecx
jae 0x440613
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
lea ecx, [sym.runtime.reentersyscall.func1]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], eax
lea ecx, [esp + 0x24]
mov dword [esp], ecx
call sym.runtime.systemstack
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
test ecx, ecx
je 0x440669
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0
lea eax, [sym.runtime.reentersyscall.func2]
mov dword [esp + 0x18], eax
mov dword [esp + 0x20], ecx
mov eax, dword [esp + 0x14]
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x18]
mov dword [esp], eax
call sym.runtime.systemstack
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov ecx, dword [esp + 0x34]
mov dword [esp + 4], ecx
call sym.runtime.save
lea eax, [0xa1cf80]
mov dword [esp], eax
call sym.runtime_internal_atomic.Load8
movzx eax, byte [esp + 4]
test al, al
je 0x4406a2
lea eax, [0x4be1f4]
mov dword [esp], eax
call sym.runtime.systemstack
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov ecx, dword [esp + 0x34]
mov dword [esp + 4], ecx
call sym.runtime.save
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0x18]
mov ecx, dword [ecx + 0x58]
test byte [ecx], al
mov ecx, dword [ecx + 0x11a0]
test ecx, ecx
je 0x4406de
lea eax, [0x4be2b4]
mov dword [esp], eax
call sym.runtime.systemstack
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov ecx, dword [esp + 0x34]
mov dword [esp + 4], ecx
call sym.runtime.save
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0x18]
mov edx, dword [ecx + 0x58]
mov edx, dword [edx + 0x10]
mov dword [ecx + 0x1f8], edx
mov ecx, dword [eax + 0x18]
mov ecx, dword [ecx + 0x58]
lea edx, [ecx + 4]
mov dword [ecx + 0x2c], 0
mov ebx, dword [eax + 0x18]
mov dword [ebx + 0x60], ecx
mov ecx, dword [eax + 0x18]
mov dword [ecx + 0x58], 0
mov dword [esp], edx
mov dword [esp + 4], 2
call sym.runtime_internal_atomic.Store
lea eax, [0xa1cf74]
mov dword [esp], eax
call sym.runtime_internal_atomic.Load8
movzx eax, byte [esp + 4]
test al, al
je 0x440756
lea eax, [0x4be1f0]
mov dword [esp], eax
call sym.runtime.systemstack
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
call sym.runtime.save
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 0x18]
dec dword [eax + 0x7c]
add esp, 0x2c
ret