joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1401192f0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov rax, qword [rcx - 0xb8]
mov rsi, rcx
movsxd rdi, edx
movsxd rbx, r8d
movsxd r10, dword [rax + 4]
add r10, rcx
cmp edi, dword [r10 - 0xb0]
jge 0x140109d84
cmp ebx, dword [r10 - 0xac]
jge 0x140109d84
mov r9, qword [rcx - 0xb0]
lea r8, [rdi + rdi*2]
mov rax, qword [r10 - 0x88]
sub rax, qword [r10 - 0x90]
sar rax, 3
dec eax
cdqe
lea rdx, [rax + rax*8]
mov rax, qword [r10 - 0xa8]
shl rdx, 4
add rdx, r9
mov rax, qword [rax + r8*8]
movsxd rcx, dword [rax + rbx*4]
lea rcx, [rcx + rcx*8]
shl rcx, 4
add rcx, r9
call fcn.1400fc720
mov rcx, qword [rsi - 0xa8]
sub rcx, 0x18
call fcn.140043cf0
add qword [rsi - 0xa8], 0xffffffffffffff70
mov r8d, ebx
mov rax, qword [rsi - 0xb8]
mov edx, edi
movsxd rcx, dword [rax + 4]
add rcx, 0xffffffffffffff48
add rcx, rsi
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp fcn.140026400
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.matrix_out_of_memory1
call fcn.1400092d0
lea rdx, [0x1400094a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movsxd rax, dword [rcx - 4]
sub rcx, rax
jmp 0x140109cb0

Function at 0x140119308
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword [rcx - 0x30]
mov rbx, rcx
movsxd r10, r8d
movsxd r9, dword [rax + 4]
cmp edx, dword [r9 + rcx - 0x28]
jge 0x14010b358
cmp r10d, dword [r9 + rcx - 0x24]
jge 0x14010b358
movsxd rax, edx
lea r8, [rax + rax*2]
mov rax, qword [r9 + rcx - 0x20]
mov rax, qword [rax + r8*8]
cmp dword [rax + r10*4], 0
jge 0x14010b348
add rcx, 0xffffffffffffffd0
mov r8d, r10d
add rcx, r9
call fcn.1400261a0
mov rdx, qword [rbx - 0x20]
lea rcx, [rbx - 0x28]
lea r8, [rbx - 0x10]
cmp qword [rcx + 0x10], rdx
je 0x14010b34e
movsd xmm0, qword [r8]
movsd qword [rdx], xmm0
add qword [rcx + 8], 8
add rsp, 0x20
pop rbx
ret
add rsp, 0x20
pop rbx
jmp fcn.140113ac0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.matrix_out_of_memory1
call fcn.1400092d0
lea rdx, [0x1400094a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movsxd rax, dword [rcx - 4]
sub rcx, rax
jmp 0x14010b2e0
Function at 0x140119314
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword [rcx - 0x30]
mov rbx, rcx
movsxd r10, r8d
movsxd r9, dword [rax + 4]
cmp edx, dword [r9 + rcx - 0x28]
jge 0x140108088
cmp r10d, dword [r9 + rcx - 0x24]
jge 0x140108088
movsxd rax, edx
lea r8, [rax + rax*2]
mov rax, qword [r9 + rcx - 0x20]
mov rax, qword [rax + r8*8]
cmp dword [rax + r10*4], 0
jge 0x140108078
add rcx, 0xffffffffffffffd0
mov r8d, r10d
add rcx, r9
call fcn.1400261a0
mov rdx, qword [rbx - 0x20]
lea rcx, [rbx - 0x28]
lea r8, [rbx - 0x10]
cmp qword [rcx + 0x10], rdx
je 0x14010807e
mov rax, qword [r8]
mov qword [rdx], rax
lea rax, [rdx + 8]
mov qword [rcx + 8], rax
add rsp, 0x20
pop rbx
ret
add rsp, 0x20
pop rbx
jmp fcn.140114340
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.matrix_out_of_memory1
call fcn.1400092d0
lea rdx, [0x1400094a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movsxd rax, dword [rcx - 4]
sub rcx, rax
jmp 0x140108010

Function at 0x140119358
Capabilities:
Terminate process

Disassembly:
mov rax, qword [rcx - 0x30]
mov qword [rcx - 0x28], rax
mov rax, qword [rcx - 0x38]
add rcx, 0xffffffffffffffc8
movsxd rdx, dword [rax + 4]
add rcx, rdx
jmp method.bond_class.virtual_40
movsxd rax, dword [rcx - 4]
sub rcx, rax
jmp 0x140108830

Function at 0x140119370
Capabilities:
Terminate process

Disassembly:
sub rsp, 0x28
mov rax, qword [rcx - 0x68]
movsxd r11, r8d
movsxd r10, dword [rax + 4]
add r10, rcx
cmp edx, dword [r10 - 0x60]
jge 0x14010bc1c
cmp r11d, dword [r10 - 0x5c]
jge 0x14010bc1c
movsxd rax, edx
lea r8, [rax + rax*2]
mov rax, qword [r10 - 0x58]
mov rax, qword [rax + r8*8]
cmp dword [rax + r11*4], 0
jl 0x14010bc17
mov rax, qword [r10 - 0x68]
lea rcx, [r10 - 0x68]
mov r8d, r11d
add rsp, 0x28
jmp qword [rax + 0x58]
add rsp, 0x28
ret
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.matrix_out_of_memory1
call fcn.1400092d0
lea rdx, [0x1400094a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movsxd rax, dword [rcx - 4]
sub rcx, rax
jmp 0x14010bbd0
Function at 0x14011937c
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword [rcx - 0x48]
mov r9, rcx
movsxd r10, r8d
movsxd rbx, edx
movsxd rcx, dword [rax + 4]
mov r11, qword [r9 - 0x40]
mov rax, qword [rcx + r9 - 0x18]
sub rax, qword [rcx + r9 - 0x20]
sar rax, 3
movsxd r8, eax
shl r8, 5
cmp ebx, dword [rcx + r9 - 0x40]
jge 0x14010929b
cmp r10d, dword [rcx + r9 - 0x3c]
jge 0x14010929b
mov rax, qword [rcx + r9 - 0x38]
lea rdx, [rbx + rbx*2]
mov rax, qword [rax + rdx*8]
movsxd rdx, dword [rax + r10*4]
mov rax, qword [r8 + r11 - 0x20]
shl rdx, 5
add rdx, r11
mov qword [rdx], rax
mov rax, qword [r8 + r11 - 0x18]
mov qword [rdx + 8], rax
mov rax, qword [r8 + r11 - 0x10]
mov qword [rdx + 0x10], rax
mov eax, dword [r8 + r11 - 8]
mov r8d, r10d
mov dword [rdx + 0x18], eax
mov edx, ebx
add qword [r9 - 0x38], 0xffffffffffffffe0
mov rax, qword [r9 - 0x48]
add r9, 0xffffffffffffffb8
movsxd rcx, dword [rax + 4]
add rcx, r9
add rsp, 0x20
pop rbx
jmp fcn.140026400
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.matrix_out_of_memory1
call fcn.1400092d0
lea rdx, [0x1400094a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movsxd rax, dword [rcx - 4]
sub rcx, rax
jmp 0x140109200
Function at 0x1401193a0
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword [rcx - 0x48]
mov rbx, rcx
movsxd r10, r8d
movsxd r9, dword [rax + 4]
cmp edx, dword [r9 + rcx - 0x40]
jge 0x14010958c
cmp r10d, dword [r9 + rcx - 0x3c]
jge 0x14010958c
movsxd rax, edx
lea r8, [rax + rax*2]
mov rax, qword [r9 + rcx - 0x38]
mov rax, qword [rax + r8*8]
cmp dword [rax + r10*4], 0
jge 0x14010957c
add rcx, 0xffffffffffffffb8
mov r8d, r10d
add rcx, r9
call fcn.1400261a0
mov rdx, qword [rbx - 0x38]
lea rcx, [rbx - 0x40]
lea r8, [rbx - 0x28]
cmp qword [rcx + 0x10], rdx
je 0x140109582
mov rax, qword [r8]
mov qword [rdx], rax
mov rax, qword [r8 + 8]
mov qword [rdx + 8], rax
mov rax, qword [r8 + 0x10]
mov qword [rdx + 0x10], rax
mov eax, dword [r8 + 0x18]
mov dword [rdx + 0x18], eax
add qword [rcx + 8], 0x20
add rsp, 0x20
pop rbx
ret
add rsp, 0x20
pop rbx
jmp fcn.1401140f0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.matrix_out_of_memory1
call fcn.1400092d0
lea rdx, [0x1400094a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movsxd rax, dword [rcx - 4]
sub rcx, rax
jmp 0x140109500

Function at 0x1401193f4
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword [rcx - 0x38]
mov rbx, rcx
movsxd r10, r8d
movsxd r9, dword [rax + 4]
cmp edx, dword [r9 + rcx - 0x30]
jge 0x140108b06
cmp r10d, dword [r9 + rcx - 0x2c]
jge 0x140108b06
movsxd rax, edx
lea r8, [rax + rax*2]
mov rax, qword [r9 + rcx - 0x28]
mov rax, qword [rax + r8*8]
cmp dword [rax + r10*4], 0
jge 0x140108af6
add rcx, 0xffffffffffffffc8
mov r8d, r10d
add rcx, r9
call fcn.1400261a0
mov rdx, qword [rbx - 0x28]
lea rcx, [rbx - 0x30]
lea r8, [rbx - 0x18]
cmp qword [rcx + 0x10], rdx
je 0x140108afc
movups xmm0, xmmword [r8]
movups xmmword [rdx], xmm0
add qword [rcx + 8], 0x10
add rsp, 0x20
pop rbx
ret
add rsp, 0x20
pop rbx
jmp fcn.140113ca0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.matrix_out_of_memory1
call fcn.1400092d0
lea rdx, [0x1400094a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movsxd rax, dword [rcx - 4]
sub rcx, rax
jmp 0x140108a90
Function at 0x14011945c
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov rsi, qword [rcx - 0x58]
mov rdi, rcx
mov rbx, qword [rcx - 0x60]
cmp rbx, rsi
je 0x14010bba5
nop
mov rcx, rbx
call fcn.1400a7300
add rbx, 0x40
cmp rbx, rsi
jne 0x14010bb90
mov rbx, qword [rdi - 0x60]
mov qword [rdi - 0x58], rbx
mov rax, qword [rdi - 0x68]
add rdi, 0xffffffffffffff98
movsxd rcx, dword [rax + 4]
add rcx, rdi
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp method.bond_class.virtual_40
movsxd rax, dword [rcx - 4]
sub rcx, rax
jmp 0x14010bb70

Function at 0x1401194ec
Capabilities:
Terminate process

Disassembly:
sub rsp, 0x28
mov rax, qword [rcx - 0xb8]
movsxd r11, r8d
movsxd r10, dword [rax + 4]
add r10, rcx
cmp edx, dword [r10 - 0xb0]
jge 0x140109e9a
cmp r11d, dword [r10 - 0xac]
jge 0x140109e9a
movsxd rax, edx
lea r8, [rax + rax*2]
mov rax, qword [r10 - 0xa8]
mov rax, qword [rax + r8*8]
cmp dword [rax + r11*4], 0
jl 0x140109e95
lea rcx, [r10 - 0xb8]
mov r8d, r11d
mov rax, qword [rcx]
add rsp, 0x28
jmp qword [rax + 0x58]
add rsp, 0x28
ret
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.matrix_out_of_memory1
call fcn.1400092d0
lea rdx, [0x1400094a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movsxd rax, dword [rcx - 4]
sub rcx, rax
jmp 0x140109e40
Function at 0x140119528
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword [rcx - 0x38]
mov r11, rcx
mov rbx, qword [rcx - 0x30]
movsxd r10, edx
movsxd r9, dword [rax + 4]
mov rax, qword [r9 + rcx - 8]
sub rax, qword [r9 + rcx - 0x10]
sar rax, 3
cdqe
add rax, rax
movsd xmm0, qword [rbx + rax*8 - 0x10]
movsd xmm1, qword [rbx + rax*8 - 8]
cmp r10d, dword [r9 + rcx - 0x30]
jge 0x14010a958
cmp r8d, dword [r9 + rcx - 0x2c]
jge 0x14010a958
mov rax, qword [r9 + rcx - 0x28]
lea rdx, [r10 + r10*2]
movsxd rcx, r8d
mov rax, qword [rax + rdx*8]
movsxd rdx, dword [rax + rcx*4]
add rdx, rdx
movsd qword [rbx + rdx*8], xmm0
movsd qword [rbx + rdx*8 + 8], xmm1
mov edx, r10d
add qword [r11 - 0x28], 0xfffffffffffffff0
mov rax, qword [r11 - 0x38]
add r11, 0xffffffffffffffc8
movsxd rcx, dword [rax + 4]
add rcx, r11
add rsp, 0x20
pop rbx
jmp fcn.140026400
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.matrix_out_of_memory1
call fcn.1400092d0
lea rdx, [0x1400094a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movsxd rax, dword [rcx - 4]
sub rcx, rax
jmp 0x14010a8d0

Function at 0x140119534
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword [rcx - 0x38]
mov r11, rcx
mov rbx, qword [rcx - 0x30]
movsxd r10, edx
movsxd r9, dword [rax + 4]
mov rax, qword [r9 + rcx - 8]
sub rax, qword [r9 + rcx - 0x10]
sar rax, 3
cdqe
add rax, rax
movups xmm0, xmmword [rbx + rax*8 - 0x10]
cmp r10d, dword [r9 + rcx - 0x30]
jge 0x1401087fa
cmp r8d, dword [r9 + rcx - 0x2c]
jge 0x1401087fa
mov rax, qword [r9 + rcx - 0x28]
lea rdx, [r10 + r10*2]
movsxd rcx, r8d
mov rax, qword [rax + rdx*8]
movsxd rdx, dword [rax + rcx*4]
add rdx, rdx
movups xmmword [rbx + rdx*8], xmm0
add qword [r11 - 0x28], 0xfffffffffffffff0
mov edx, r10d
mov rax, qword [r11 - 0x38]
add r11, 0xffffffffffffffc8
movsxd rcx, dword [rax + 4]
add rcx, r11
add rsp, 0x20
pop rbx
jmp fcn.140026400
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.matrix_out_of_memory1
call fcn.1400092d0
lea rdx, [0x1400094a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movsxd rax, dword [rcx - 4]
sub rcx, rax
jmp 0x140108780
Function at 0x140119578
Capabilities:
Terminate process

Disassembly:
push rdi
sub rsp, 0x20
mov rax, qword [rcx - 0xb8]
mov rdi, rcx
movsxd r10, r8d
movsxd r9, dword [rax + 4]
cmp edx, dword [r9 + rcx - 0xb0]
jge 0x14010a1c5
cmp r10d, dword [r9 + rcx - 0xac]
jge 0x14010a1c5
movsxd rax, edx
lea r8, [rax + rax*2]
mov rax, qword [r9 + rcx - 0xa8]
mov rax, qword [rax + r8*8]
cmp dword [rax + r10*4], 0
jge 0x14010a1a6
add rcx, 0xffffffffffffff48
mov qword [rsp + 0x30], rbx
add rcx, r9
mov r8d, r10d
call fcn.1400261a0
mov rax, qword [rdi - 0xa8]
lea r8, [rdi - 0x98]
cmp qword [rdi - 0xa0], rax
je 0x14010a1ac
mov rdx, r8
mov rcx, rax
call fcn.14003b350
add qword [rdi - 0xa8], 0x90
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov rdx, rax
lea rcx, [rdi - 0xb0]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp fcn.140113e80
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.matrix_out_of_memory1
call fcn.1400092d0
lea rdx, [0x1400094a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movsxd rax, dword [rcx - 4]
sub rcx, rax
jmp 0x14010a110
Function at 0x14011959c
Capabilities:
Terminate process

Disassembly:
push rbx
push rbp
push rsi
push r14
push r15
sub rsp, 0x20
mov rax, qword [rcx - 0x68]
mov rbx, rcx
movsxd r15, edx
movsxd r14, r8d
movsxd rcx, dword [rax + 4]
mov rbp, qword [rbx - 0x60]
mov rax, qword [rcx + rbx - 0x38]
sub rax, qword [rcx + rbx - 0x40]
sar rax, 3
movsxd rsi, eax
shl rsi, 6
cmp r15d, dword [rcx + rbx - 0x60]
jge 0x14010bb3e
cmp r14d, dword [rcx + rbx - 0x5c]
jge 0x14010bb3e
mov rax, qword [rcx + rbx - 0x58]
lea rdx, [r15 + r15*2]
mov qword [rsp + 0x68], rdi
mov rax, qword [rax + rdx*8]
lea rdx, [rbp - 0x30]
add rdx, rsi
movsxd rdi, dword [rax + r14*4]
mov rax, qword [rsi + rbp - 0x40]
shl rdi, 6
add rdi, rbp
mov qword [rdi], rax
lea rcx, [rdi + 0x10]
mov rax, qword [rsi + rbp - 0x38]
mov qword [rdi + 8], rax
cmp rcx, rdx
je 0x14010bae6
mov r8, qword [rdx + 8]
mov rdx, qword [rdx]
call fcn.140024e60
lea rcx, [rdi + 0x28]
mov rdi, qword [rsp + 0x68]
lea rdx, [rbp - 0x18]
add rdx, rsi
cmp rcx, rdx
je 0x14010bb07
mov r8, qword [rdx + 8]
mov rdx, qword [rdx]
call fcn.140024e60
mov rcx, qword [rbx - 0x58]
sub rcx, 0x40
call fcn.1400a7300
add qword [rbx - 0x58], 0xffffffffffffffc0
mov r8d, r14d
mov rax, qword [rbx - 0x68]
mov edx, r15d
movsxd rcx, dword [rax + 4]
add rcx, 0xffffffffffffff98
add rcx, rbx
add rsp, 0x20
pop r15
pop r14
pop rsi
pop rbp
pop rbx
jmp fcn.140026400
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.matrix_out_of_memory1
call fcn.1400092d0
lea rdx, [0x1400094a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movsxd rax, dword [rcx - 4]
sub rcx, rax
jmp 0x14010ba50
Function at 0x1401377b0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov qword [rax - 0x30], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov r15, r9
movzx r12d, r8b
mov rsi, rdx
mov r13, qword [rcx]
mov r14, r13
mov rbx, qword [r13 + 8]
mov dil, 1
cmp byte [rbx + 0x19], 0
jne 0x14013783b
mov r14, rbx
test r12b, r12b
je 0x140137810
lea rcx, [rbx + 0x20]
mov rdx, r15
call fcn.140006e70
mov edi, eax
shr edi, 0x1f
xor dil, 1
jmp 0x140137822
lea rdx, [rbx + 0x20]
mov rcx, r15
call fcn.140006e70
shr eax, 0x1f
movzx edi, al
test dil, dil
je 0x14013782c
mov rbx, qword [rbx]
jmp 0x140137830
mov rbx, qword [rbx + 0x10]
cmp byte [rbx + 0x19], 0
je 0x1401377f1
mov rcx, qword [rsp + 0x70]
mov rbx, r14
mov qword [rsp + 0x30], rbx
test dil, dil
je 0x14013788d
cmp r14, qword [r13]
jne 0x14013787e
movzx eax, byte [rsp + 0x90]
mov byte [rsp + 0x28], al
mov qword [rsp + 0x20], r15
mov r9, r14
mov r8b, 1
lea rdx, [rsp + 0x70]
call fcn.1401370f0
mov rax, qword [rax]
mov qword [rsi], rax
mov byte [rsi + 8], 1
mov rax, rsi
jmp 0x1401378e0
lea rcx, [rsp + 0x30]
call fcn.14006ac10
mov rbx, qword [rsp + 0x30]
lea rcx, [rbx + 0x20]
mov rdx, r15
call fcn.140006e70
shr eax, 0x1f
test al, al
je 0x1401378d6
movzx eax, byte [rsp + 0x90]
mov byte [rsp + 0x28], al
mov qword [rsp + 0x20], r15
mov r9, r14
movzx r8d, dil
lea rdx, [rsp + 0x30]
mov rcx, qword [rsp + 0x70]
call fcn.1401370f0
mov rax, qword [rax]
mov qword [rsi], rax
mov byte [rsi + 8], 1
mov rax, rsi
jmp 0x1401378e0
mov qword [rsi], rbx
mov byte [rsi + 8], 0
mov rax, rsi
mov rbx, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x80]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
ret

Function at 0x140144b60
Capabilities:
Check if file exists
Get file attributes

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x40
cmp qword [rcx + 0x18], 8
mov rsi, rdx
mov rdi, rcx
jb 0x140144b7f
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov ebx, eax
cmp eax, 0xffffffff
jne 0x140144bae
mov r8, rsi
lea rcx, [rsp + 0x50]
mov rdx, rdi
call fcn.140144a40
mov eax, dword [rax]
mov rbx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
add rsp, 0x40
pop rdi
ret
test rsi, rsi
je 0x140144bd6
xor eax, eax
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rax
movups xmm0, xmmword [rsp + 0x20]
mov dword [rsp + 0x30], eax
movsd xmm1, qword [rsp + 0x30]
movups xmmword [rsi], xmm0
movsd qword [rsi + 0x10], xmm1
bt ebx, 0xa
jae 0x140144c1d
mov rcx, rdi
call fcn.1401447f0
test al, al
je 0x140144c08
test bl, 0x10
mov eax, 4
mov ecx, 0xb
cmovne eax, ecx
mov rbx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
add rsp, 0x40
pop rdi
ret
mov eax, 9
mov rbx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
add rsp, 0x40
pop rdi
ret
mov rsi, qword [rsp + 0x60]
and ebx, 0x10
or ebx, 0x20
shr ebx, 4
mov eax, ebx
mov rbx, qword [rsp + 0x58]
add rsp, 0x40
pop rdi
ret
Function at 0x140144c40
Capabilities:
Check if file exists
Delete directory
Delete file
Get file attributes

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x50
xor eax, eax
mov rsi, rdx
cmp qword [rcx + 0x18], 8
mov rdi, rcx
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x30], eax
jb 0x140144c6f
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov ebx, eax
cmp eax, 0xffffffff
jne 0x140144c95
lea r8, [rsp + 0x20]
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.140144a40
mov ebx, dword [rax]
jmp 0x140144d31
xor eax, eax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x48], eax
movsd xmm1, qword [rsp + 0x48]
movsd qword [rsp + 0x30], xmm1
movups xmm0, xmmword [rsp + 0x38]
movups xmmword [rsp + 0x20], xmm0
bt ebx, 0xa
jae 0x140144d28
mov rcx, rdi
call fcn.1401447f0
test al, al
je 0x140144cdf
test bl, 0x10
mov eax, 0xb
mov ebx, 4
cmovne ebx, eax
jmp 0x140144d31
mov ebx, 9
test rsi, rsi
je 0x140144d0c
xor eax, eax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rax
movups xmm0, xmmword [rsp + 0x38]
mov dword [rsp + 0x48], eax
movsd xmm1, qword [rsp + 0x48]
movups xmmword [rsi], xmm0
movsd qword [rsi + 0x10], xmm1
mov r8, rsi
mov edx, ebx
mov rcx, rdi
mov rbx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
add rsp, 0x50
pop rdi
jmp fcn.140145100
and ebx, 0x10
or ebx, 0x20
shr ebx, 4
test ebx, ebx
jne 0x140144ce4
cmp dword [rsp + 0x30], 1
je 0x140144d42
mov ecx, dword [rsp + 0x20]
jmp 0x140144d77
mov rcx, qword [rsp + 0x28]
movabs rax, 0x4800144005b3
mul rcx
sub rcx, rdx
shr rcx, 1
add rcx, rdx
shr rcx, 0x14
imul eax, ecx, 0x1ffff7
mov ecx, dword [rsp + 0x28]
sub ecx, eax
imul ecx, ecx, 0x3e8
add ecx, dword [rsp + 0x20]
test ecx, ecx
je 0x140144ce4
lea r9, str.boost::filesystem::remove
mov r8, rsi
mov rdx, rdi
call fcn.1401472d0
mov rbx, qword [rsp + 0x68]
xor al, al
mov rsi, qword [rsp + 0x70]
add rsp, 0x50
pop rdi
ret