joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140006550
Capabilities:
Terminate process

Disassembly:
push rdi
push rsi
push rbx
sub rsp, 0x40
mov rdi, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
xor ecx, ecx
call rdi
mov rsi, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__fileno]
mov rcx, rax
call rsi
mov edx, 0x8000
mov rbx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__setmode]
mov ecx, eax
call rbx
mov ecx, 1
call rdi
mov rcx, rax
call rsi
mov edx, 0x8000
mov ecx, eax
call rbx
mov ecx, 2
call rdi
mov rcx, rax
call rsi
mov edx, 0x8000
mov ecx, eax
call rbx
call qword [0x1400340c0]
mov dword [0x1400340c8], eax
call qword [0x1400340b0]
cmp dword [0x1400340c8], 0xfde9
mov dword [0x1400340b8], eax
je 0x14000661b
mov ecx, 0xfde9
call qword [0x1400340a8]
lea rax, [sym.restoreConsoleOutputCP__stdZsyncio_u656]
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], rax
movdqa xmm0, xmmword [rsp + 0x30]
lea rcx, [rsp + 0x20]
movaps xmmword [rsp + 0x20], xmm0
call sym.addExitProc__stdZexitprocs_u184
mov rcx, qword [0x14002f050]
call dbg.__emutls_get_address
mov rdx, rax
mov eax, dword [0x1400340b8]
cmp byte [rdx], 0
jne 0x140006658
cmp eax, 0xfde9
je 0x140006658
mov ecx, 0xfde9
call qword [0x1400340a0]
lea rax, [sym.restoreConsoleCP__stdZsyncio_u657]
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], rax
movdqa xmm1, xmmword [rsp + 0x30]
lea rcx, [rsp + 0x20]
movaps xmmword [rsp + 0x20], xmm1
call sym.addExitProc__stdZexitprocs_u184
nop
add rsp, 0x40
pop rbx
pop rsi
pop rdi
jmp sym.nimTestErrorFlag

Function at 0x1400067a0
Capabilities:
Write file on windows

Disassembly:
push rsi
push rbx
sub rsp, 0x28
mov rbx, rcx
mov rcx, rdx
mov rsi, rdx
call sym.strlen
mov rcx, rsi
mov r9, rbx
mov edx, 1
mov r8, rax
call sym.fwrite
mov rcx, rbx
add rsp, 0x28
pop rbx
pop rsi
jmp sym.fflush

Function at 0x140006870
Capabilities:
Terminate process

Disassembly:
push rdi
push rsi
push rbx
sub rsp, 0x20
mov rsi, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rdi, qword [rcx]
mov rbx, qword [rcx + 8]
mov ecx, 2
call rsi
lea rdx, str.could_not_load:
mov rcx, rax
call sym.rawWrite
lea rax, [0x14002b455]
mov ecx, 2
add rbx, 8
test rdi, rdi
cmove rbx, rax
call rsi
mov rcx, rax
mov rdx, rbx
call sym.rawWrite
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xc1
je 0x1400068ec
mov ecx, 2
call rsi
lea rdx, [0x14002b499]
mov rcx, rax
call sym.rawWrite
mov ecx, 1
call sym.exit
mov ecx, 2
call rsi
lea rdx, str._n_bad_format__library_may_be_wrong_architecture_
mov rcx, rax
call sym.rawWrite
jmp 0x1400068cc

Function at 0x140006910
Capabilities:
Terminate process

Disassembly:
push rsi
push rbx
sub rsp, 0x28
mov rbx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rsi, rcx
mov ecx, 2
call rbx
lea rdx, str.could_not_import:
mov rcx, rax
call sym.rawWrite
mov ecx, 2
call rbx
mov rdx, rsi
mov rcx, rax
call sym.rawWrite
mov ecx, 2
call rbx
lea rdx, [0x14002b499]
mov rcx, rax
call sym.rawWrite
mov ecx, 1
call sym.exit
nop
nop dword [rax]
Function at 0x140006a90
Capabilities:
Terminate process

Disassembly:
sub rsp, 0x28
mov rax, qword [0x140034120]
test rax, rax
je 0x140006aa2
call rax
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rdx, str.out_of_memory_n
mov rcx, rax
call sym.rawWrite
mov ecx, 1
call sym.exit
nop
nop word [rax + rax]

Function at 0x140007860
Capabilities:
Terminate process

Disassembly:
sub rsp, 0x28
mov r10, qword [rdx + 8]
mov r9, rdx
sar rdx, 0x15
mov r8, rcx
movzx eax, dl
mov rax, qword [rcx + rax*8 + 0x28a0]
test rax, rax
jne 0x140007890
jmp 0x1400078ba
mov rax, qword [rax]
test rax, rax
je 0x1400078ba
cmp rdx, qword [rax + 8]
jne 0x140007888
mov rcx, r9
mov edx, 1
sar rcx, 0xc
and ecx, 0x1ff
mov r11, rcx
shl rdx, cl
sar r11, 6
not rdx
and qword [rax + r11*8 + 0x10], rdx
mov rax, qword [r8 + 0x2870]
mov rdx, qword [r8 + 0x2878]
mov rcx, rax
sub rcx, r10
cmp rax, rdx
cmovl rax, rdx
movq xmm0, rcx
xor edx, edx
mov rcx, r9
movq xmm1, rax
punpcklqdq xmm0, xmm1
movups xmmword [r8 + 0x2870], xmm0
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
je 0x140007905
add rsp, 0x28
ret
lea rcx, str.virtualFree_failing_
call sym.printf.constprop.0
mov ecx, 1
call sym.exit
nop
nop dword [rax]

Function at 0x140007c90
Capabilities:
Terminate process

Disassembly:
sub rsp, 0x28
mov rax, qword [rdx + 8]
sub qword [rcx + 0x2888], rax
mov r10, qword [rdx + 8]
mov r8, rcx
mov r9, rdx
cmp r10, 0x3f000000
jg 0x140007cc0
add rsp, 0x28
jmp sym.freeBigChunk__system_u6620
sar rdx, 0x15
movzx eax, dl
mov rax, qword [rcx + rax*8 + 0x28a0]
test rax, rax
jne 0x140007d30
nop dword [rax]
mov rax, qword [r8 + 0x2870]
mov rdx, qword [r8 + 0x2878]
mov rcx, rax
sub rcx, r10
cmp rax, rdx
cmovl rax, rdx
movq xmm0, rcx
xor edx, edx
mov rcx, r9
movq xmm1, rax
punpcklqdq xmm0, xmm1
movups xmmword [r8 + 0x2870], xmm0
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
je 0x140007d5f
add rsp, 0x28
ret
mov rax, qword [rax]
test rax, rax
je 0x140007cd8
cmp rdx, qword [rax + 8]
jne 0x140007d28
mov rcx, r9
mov edx, 1
sar rcx, 0xc
and ecx, 0x1ff
mov r11, rcx
shl rdx, cl
sar r11, 6
not rdx
and qword [rax + r11*8 + 0x10], rdx
jmp 0x140007cd8
lea rcx, str.virtualFree_failing_
call sym.printf.constprop.0
mov ecx, 1
call sym.exit
nop
nop word cs:[rax + rax]
Function at 0x140007d80
Capabilities:
Terminate process

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x28
mov rbp, qword [sym.imp.KERNEL32.dll_VirtualFree]
mov edi, 0x15
mov r12d, 1
mov rbx, rcx
mov rsi, rdx
jmp 0x140007dcb
mov rcx, rbx
call sym.freeBigChunk__system_u6620
sub rdi, 1
je 0x140007ea8
test r13, r13
je 0x140007ec8
lea rax, [rsi + 0x18]
mov r13, qword [rsi + 0x18]
mov r9, rsi
mov qword [rax], 0
mov rdx, r9
mov rax, qword [r9 + 8]
sub qword [rbx + 0x2888], rax
mov rsi, r13
mov r8, qword [r9 + 8]
cmp r8, 0x3f000000
jle 0x140007db0
sar rdx, 0x15
movzx eax, dl
mov rax, qword [rbx + rax*8 + 0x28a0]
test rax, rax
jne 0x140007e20
jmp 0x140007e48
mov rax, qword [rax]
test rax, rax
je 0x140007e48
cmp rdx, qword [rax + 8]
jne 0x140007e18
mov rcx, r9
mov rdx, r12
sar rcx, 0xc
and ecx, 0x1ff
mov r10, rcx
shl rdx, cl
sar r10, 6
not rdx
and qword [rax + r10*8 + 0x10], rdx
mov rax, qword [rbx + 0x2870]
mov rdx, qword [rbx + 0x2878]
mov rcx, rax
sub rcx, r8
cmp rax, rdx
mov r8d, 0x8000
cmovl rax, rdx
movq xmm0, rcx
xor edx, edx
mov rcx, r9
movq xmm1, rax
punpcklqdq xmm0, xmm1
movups xmmword [rbx + 0x2870], xmm0
call rbp
test eax, eax
jne 0x140007db8
lea rcx, str.virtualFree_failing_
call sym.printf.constprop.0
mov ecx, 1
call sym.exit
nop dword [rax + rax]
test r13, r13
je 0x140007ec8
lea rdx, [rbx + 0x2898]
lea rcx, [r13 + 0x18]
mov rax, qword [rdx]
mov qword [rcx], rax
mov rax, qword [rcx]
lock cmpxchg qword [rdx], r13
jne 0x140007ed5
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
mov qword [rcx], rax
jmp 0x140007eb8
Function at 0x140008da0
Capabilities:
Terminate process

Disassembly:
mov r8, rdx
and rdx, 0xfffffffffffff000
mov rax, qword [rdx + 8]
mov r10, qword [rdx + 0x10]
cmp rax, 0xfc0
jle 0x140008de0
lea r8, [r10 + 0x2898]
cmp rcx, r10
lea r9, [rdx + 0x18]
je 0x140008e60
mov rax, qword [r8]
mov qword [r9], rax
mov rax, qword [r9]
lock cmpxchg qword [r8], rdx
jne 0x140008e50
ret
lea r9, [rax + 0xf]
test rax, rax
cmovns r9, rax
sar r9, 4
cmp rcx, r10
je 0x140008e20
lea rcx, [r9*8 + 0x800]
mov rax, qword [r10 + rcx]
mov qword [r8], rax
mov r9, qword [rdx + 0x10]
mov rax, qword [r8]
lock cmpxchg qword [r9 + rcx], r8
je 0x140008dde
mov qword [r8], rax
mov r10, qword [rdx + 0x10]
jmp 0x140008dfc
sub qword [rcx + 0x2888], rax
lea r9, [rcx + r9*8]
mov rcx, qword [r9]
test rcx, rcx
je 0x140008e68
cmp rcx, rdx
je 0x140008e68
mov rdx, qword [rcx + 0x28]
mov qword [r8], rdx
add dword [rcx + 0x30], eax
mov qword [rcx + 0x28], r8
add qword [rcx + 0x38], 1
ret
mov qword [r9], rax
jmp 0x140008dce
jmp sym.deallocBigChunk__system_u6690
mov rcx, qword [rdx + 0x28]
mov qword [r8], rcx
mov qword [rdx + 0x28], r8
movsxd r8, dword [rdx + 0x30]
cmp r8, rax
mov rcx, r8
jl 0x140008ed8
add ecx, eax
cmp ecx, 0xfc0
mov dword [rdx + 0x30], ecx
jne 0x140008dde
cmp qword [rdx + 0x38], 0
jne 0x140008dde
cmp rdx, qword [r9]
mov rax, qword [rdx + 0x18]
je 0x140008ef0
mov rcx, qword [rdx + 0x20]
test rax, rax
mov qword [rcx + 0x18], rax
je 0x140008eb9
mov rcx, qword [rdx + 0x20]
mov qword [rax + 0x20], rcx
mov rcx, r10
pxor xmm0, xmm0
mov qword [rdx + 8], 0x1000
movups xmmword [rdx + 0x18], xmm0
jmp sym.freeBigChunk__system_u6620
mov rcx, qword [r9]
test rcx, rcx
mov qword [rdx + 0x18], rcx
je 0x140008ee8
mov qword [rcx + 0x20], rdx
mov qword [r9], rdx
add dword [rdx + 0x30], eax
ret
test rax, rax
mov qword [r9], rax
je 0x140008eb9
mov qword [rax + 0x20], 0
jmp 0x140008eb9
Function at 0x140008f10
Capabilities:
Terminate process

Disassembly:
mov r8, rdx
and rdx, 0xfffffffffffff000
mov rax, qword [rdx + 8]
mov r10, qword [rdx + 0x10]
cmp rax, 0xfc0
jle 0x140008f50
lea r8, [r10 + 0x2898]
cmp rcx, r10
lea r9, [rdx + 0x18]
je 0x140008fd0
mov rax, qword [r8]
mov qword [r9], rax
mov rax, qword [r9]
lock cmpxchg qword [r8], rdx
jne 0x140008fc0
ret
lea r9, [rax + 0xf]
test rax, rax
cmovns r9, rax
sar r9, 4
cmp rcx, r10
je 0x140008f90
lea rcx, [r9*8 + 0x800]
mov rax, qword [r10 + rcx]
mov qword [r8], rax
mov r9, qword [rdx + 0x10]
mov rax, qword [r8]
lock cmpxchg qword [r9 + rcx], r8
je 0x140008f4e
mov qword [r8], rax
mov r10, qword [rdx + 0x10]
jmp 0x140008f6c
sub qword [rcx + 0x2888], rax
lea r9, [rcx + r9*8]
mov rcx, qword [r9]
test rcx, rcx
je 0x140008fd8
cmp rdx, rcx
je 0x140008fd8
mov rdx, qword [rcx + 0x28]
mov qword [r8], rdx
add dword [rcx + 0x30], eax
mov qword [rcx + 0x28], r8
add qword [rcx + 0x38], 1
ret
mov qword [r9], rax
jmp 0x140008f3e
jmp sym.deallocBigChunk__system_u6690
mov rcx, qword [rdx + 0x28]
mov qword [r8], rcx
mov qword [rdx + 0x28], r8
movsxd r8, dword [rdx + 0x30]
cmp rax, r8
mov rcx, r8
jg 0x140009048
add ecx, eax
cmp ecx, 0xfc0
mov dword [rdx + 0x30], ecx
jne 0x140008f4e
cmp qword [rdx + 0x38], 0
jne 0x140008f4e
cmp rdx, qword [r9]
mov rax, qword [rdx + 0x18]
je 0x140009060
mov rcx, qword [rdx + 0x20]
test rax, rax
mov qword [rcx + 0x18], rax
je 0x140009029
mov rcx, qword [rdx + 0x20]
mov qword [rax + 0x20], rcx
mov rcx, r10
pxor xmm0, xmm0
mov qword [rdx + 8], 0x1000
movups xmmword [rdx + 0x18], xmm0
jmp sym.freeBigChunk__system_u6620
mov rcx, qword [r9]
test rcx, rcx
mov qword [rdx + 0x18], rcx
je 0x140009058
mov qword [rcx + 0x20], rdx
mov qword [r9], rdx
add dword [rdx + 0x30], eax
ret
test rax, rax
mov qword [r9], rax
je 0x140009029
mov qword [rax + 0x20], 0
jmp 0x140009029
Function at 0x140009250
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
lea rcx, [0x14002a380]
call dbg.__emutls_get_address
mov rdx, rbx
and rdx, 0xfffffffffffff000
mov rcx, rax
mov rax, qword [rdx + 8]
mov r9, qword [rdx + 0x10]
cmp rax, 0xfc0
jle 0x1400092b0
lea r8, [r9 + 0x2898]
cmp rcx, r9
lea r10, [rdx + 0x18]
je 0x140009330
mov rax, qword [r8]
mov qword [r10], rax
mov rax, qword [r10]
lock cmpxchg qword [r8], rdx
jne 0x140009328
add rsp, 0x20
pop rbx
ret
lea r8, [rax + 0xf]
test rax, rax
cmovns r8, rax
sar r8, 4
cmp rcx, r9
je 0x1400092f0
lea rcx, [r8*8 + 0x800]
mov rax, qword [r9 + rcx]
mov qword [rbx], rax
mov r8, qword [rdx + 0x10]
mov rax, qword [rbx]
lock cmpxchg qword [r8 + rcx], rbx
je 0x1400092a9
mov qword [rbx], rax
mov r9, qword [rdx + 0x10]
jmp 0x1400092cc
sub qword [rcx + 0x2888], rax
lea r8, [rcx + r8*8]
mov rcx, qword [r8]
test rcx, rcx
je 0x140009340
cmp rdx, rcx
je 0x140009340
mov rdx, qword [rcx + 0x28]
mov qword [rbx], rdx
add dword [rcx + 0x30], eax
mov qword [rcx + 0x28], rbx
add qword [rcx + 0x38], 1
add rsp, 0x20
pop rbx
ret
mov qword [r10], rax
jmp 0x140009295
add rsp, 0x20
pop rbx
jmp sym.deallocBigChunk__system_u6690
mov rcx, qword [rdx + 0x28]
mov qword [rbx], rcx
movsxd r10, dword [rdx + 0x30]
mov qword [rdx + 0x28], rbx
cmp rax, r10
mov rcx, r10
jg 0x1400093b0
add ecx, eax
cmp ecx, 0xfc0
mov dword [rdx + 0x30], ecx
jne 0x1400092a9
cmp qword [rdx + 0x38], 0
jne 0x1400092a9
cmp rdx, qword [r8]
mov rax, qword [rdx + 0x18]
je 0x1400093d0
mov rcx, qword [rdx + 0x20]
test rax, rax
mov qword [rcx + 0x18], rax
je 0x140009391
mov rcx, qword [rdx + 0x20]
mov qword [rax + 0x20], rcx
mov rcx, r9
pxor xmm0, xmm0
mov qword [rdx + 8], 0x1000
movups xmmword [rdx + 0x18], xmm0
add rsp, 0x20
pop rbx
jmp sym.freeBigChunk__system_u6620
mov rcx, qword [r8]
test rcx, rcx
mov qword [rdx + 0x18], rcx
je 0x1400093c0
mov qword [rcx + 0x20], rdx
mov qword [r8], rdx
add dword [rdx + 0x30], eax
jmp 0x1400092a9
test rax, rax
mov qword [r8], rax
je 0x140009391
mov qword [rax + 0x20], 0
jmp 0x140009391
Function at 0x1400093f0
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
lea rcx, [0x14002a380]
call dbg.__emutls_get_address
mov rdx, rbx
and rdx, 0xfffffffffffff000
mov rcx, rax
mov rax, qword [rdx + 8]
mov r9, qword [rdx + 0x10]
cmp rax, 0xfc0
jle 0x140009450
lea r8, [r9 + 0x2898]
cmp rcx, r9
lea r10, [rdx + 0x18]
je 0x1400094d0
mov rax, qword [r8]
mov qword [r10], rax
mov rax, qword [r10]
lock cmpxchg qword [r8], rdx
jne 0x1400094c8
add rsp, 0x20
pop rbx
ret
lea r8, [rax + 0xf]
test rax, rax
cmovns r8, rax
sar r8, 4
cmp rcx, r9
je 0x140009490
lea rcx, [r8*8 + 0x800]
mov rax, qword [r9 + rcx]
mov qword [rbx], rax
mov r8, qword [rdx + 0x10]
mov rax, qword [rbx]
lock cmpxchg qword [r8 + rcx], rbx
je 0x140009449
mov qword [rbx], rax
mov r9, qword [rdx + 0x10]
jmp 0x14000946c
sub qword [rcx + 0x2888], rax
lea r8, [rcx + r8*8]
mov rcx, qword [r8]
test rcx, rcx
je 0x1400094e0
cmp rdx, rcx
je 0x1400094e0
mov rdx, qword [rcx + 0x28]
mov qword [rbx], rdx
add dword [rcx + 0x30], eax
mov qword [rcx + 0x28], rbx
add qword [rcx + 0x38], 1
add rsp, 0x20
pop rbx
ret
mov qword [r10], rax
jmp 0x140009435
add rsp, 0x20
pop rbx
jmp sym.deallocBigChunk__system_u6690
mov rcx, qword [rdx + 0x28]
mov qword [rbx], rcx
movsxd r10, dword [rdx + 0x30]
mov qword [rdx + 0x28], rbx
cmp rax, r10
mov rcx, r10
jg 0x140009550
add ecx, eax
cmp ecx, 0xfc0
mov dword [rdx + 0x30], ecx
jne 0x140009449
cmp qword [rdx + 0x38], 0
jne 0x140009449
cmp rdx, qword [r8]
mov rax, qword [rdx + 0x18]
je 0x140009570
mov rcx, qword [rdx + 0x20]
test rax, rax
mov qword [rcx + 0x18], rax
je 0x140009531
mov rcx, qword [rdx + 0x20]
mov qword [rax + 0x20], rcx
mov rcx, r9
pxor xmm0, xmm0
mov qword [rdx + 8], 0x1000
movups xmmword [rdx + 0x18], xmm0
add rsp, 0x20
pop rbx
jmp sym.freeBigChunk__system_u6620
mov rcx, qword [r8]
test rcx, rcx
mov qword [rdx + 0x18], rcx
je 0x140009560
mov qword [rcx + 0x20], rdx
mov qword [r8], rdx
add dword [rdx + 0x30], eax
jmp 0x140009449
test rax, rax
mov qword [r8], rax
je 0x140009531
mov qword [rax + 0x20], 0
jmp 0x140009531
Function at 0x140009590
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
lea rcx, [0x14002a380]
call dbg.__emutls_get_address
mov rdx, rbx
and rdx, 0xfffffffffffff000
mov rcx, rax
mov rax, qword [rdx + 8]
mov r9, qword [rdx + 0x10]
cmp rax, 0xfc0
jle 0x1400095f0
lea r8, [r9 + 0x2898]
cmp rcx, r9
lea r10, [rdx + 0x18]
je 0x140009670
mov rax, qword [r8]
mov qword [r10], rax
mov rax, qword [r10]
lock cmpxchg qword [r8], rdx
jne 0x140009668
add rsp, 0x20
pop rbx
ret
lea r8, [rax + 0xf]
test rax, rax
cmovns r8, rax
sar r8, 4
cmp rcx, r9
je 0x140009630
lea rcx, [r8*8 + 0x800]
mov rax, qword [r9 + rcx]
mov qword [rbx], rax
mov r8, qword [rdx + 0x10]
mov rax, qword [rbx]
lock cmpxchg qword [r8 + rcx], rbx
je 0x1400095e9
mov qword [rbx], rax
mov r9, qword [rdx + 0x10]
jmp 0x14000960c
sub qword [rcx + 0x2888], rax
lea r8, [rcx + r8*8]
mov rcx, qword [r8]
test rcx, rcx
je 0x140009680
cmp rdx, rcx
je 0x140009680
mov rdx, qword [rcx + 0x28]
mov qword [rbx], rdx
add dword [rcx + 0x30], eax
mov qword [rcx + 0x28], rbx
add qword [rcx + 0x38], 1
add rsp, 0x20
pop rbx
ret
mov qword [r10], rax
jmp 0x1400095d5
add rsp, 0x20
pop rbx
jmp sym.deallocBigChunk__system_u6690
mov rcx, qword [rdx + 0x28]
mov qword [rbx], rcx
movsxd r10, dword [rdx + 0x30]
mov qword [rdx + 0x28], rbx
cmp rax, r10
mov rcx, r10
jg 0x1400096f0
add ecx, eax
cmp ecx, 0xfc0
mov dword [rdx + 0x30], ecx
jne 0x1400095e9
cmp qword [rdx + 0x38], 0
jne 0x1400095e9
cmp rdx, qword [r8]
mov rax, qword [rdx + 0x18]
je 0x140009710
mov rcx, qword [rdx + 0x20]
test rax, rax
mov qword [rcx + 0x18], rax
je 0x1400096d1
mov rcx, qword [rdx + 0x20]
mov qword [rax + 0x20], rcx
mov rcx, r9
pxor xmm0, xmm0
mov qword [rdx + 8], 0x1000
movups xmmword [rdx + 0x18], xmm0
add rsp, 0x20
pop rbx
jmp sym.freeBigChunk__system_u6620
mov rcx, qword [r8]
test rcx, rcx
mov qword [rdx + 0x18], rcx
je 0x140009700
mov qword [rcx + 0x20], rdx
mov qword [r8], rdx
add dword [rdx + 0x30], eax
jmp 0x1400095e9
test rax, rax
mov qword [r8], rax
je 0x1400096d1
mov qword [rax + 0x20], 0
jmp 0x1400096d1

Function at 0x140009730
Capabilities:
Terminate process

Disassembly:
push rsi
push rbx
sub rsp, 0x28
mov rsi, rdx
mov rbx, rcx
lea rcx, [0x14002a380]
call dbg.__emutls_get_address
cmp rsi, 0x10
mov rcx, rax
jle 0x140009758
movzx eax, word [rbx - 2]
sub rbx, rax
mov rdx, rbx
add rsp, 0x28
pop rbx
pop rsi
jmp sym.rawDealloc__system_u7009

Function at 0x140009af0
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, qword [rcx + 8]
test rbx, rbx
je 0x140009b04
test byte [rbx + 7], 0x40
je 0x140009b10
add rsp, 0x20
pop rbx
ret
lea rcx, [0x14002a380]
call dbg.__emutls_get_address
mov rdx, rbx
mov rcx, rax
add rsp, 0x20
pop rbx
jmp sym.rawDealloc__system_u7009
Function at 0x14000a1b0
Capabilities:
Terminate process

Disassembly:
push rdi
push rsi
push rbx
sub rsp, 0x20
test rdx, rdx
mov rbx, rcx
mov rsi, rdx
jne 0x14000a1f0
lea rdi, [0x14002a380]
sub rbx, 0x10
mov rcx, rdi
call dbg.__emutls_get_address
mov rdx, rbx
mov rcx, rax
add rsp, 0x20
pop rbx
pop rsi
pop rdi
jmp sym.rawDealloc__system_u7009
mov rax, rdx
sub rax, 1
jo 0x14000a23c
mov rdx, rax
add rdx, 0x10
jo 0x14000a23c
not rax
and rax, rdx
mov rdi, rax
sub rbx, rdi
lea rdi, [0x14002a380]
mov rcx, rdi
call dbg.__emutls_get_address
cmp rsi, 0x10
mov rcx, rax
jle 0x14000a1cd
movzx eax, word [rbx - 2]
sub rbx, rax
mov rdx, rbx
add rsp, 0x20
pop rbx
pop rsi
pop rdi
jmp sym.rawDealloc__system_u7009
call sym.raiseOverflow
jmp 0x14000a20b

Function at 0x14000a250
Capabilities:
Terminate process

Disassembly:
push rsi
push rbx
sub rsp, 0x28
mov rax, qword [rcx]
mov rdx, qword [rax]
mov rbx, rcx
test rdx, rdx
je 0x14000a27a
call rdx
lea rcx, [0x14002a360]
call dbg.__emutls_get_address
cmp byte [rax], 0
jne 0x14000a2c8
mov rax, qword [rbx]
movsx rsi, word [rax + 0x10]
lea rcx, [0x14002a380]
call dbg.__emutls_get_address
lea rdx, [rbx - 0x10]
mov rcx, rax
test rsi, rsi
je 0x14000a2b7
lea rdx, [rsi + 0xf]
mov rax, rsi
neg rax
and rax, rdx
sub rbx, rax
cmp rsi, 0x10
jle 0x14000a2b4
movzx eax, word [rbx - 2]
sub rbx, rax
mov rdx, rbx
add rsp, 0x28
pop rbx
pop rsi
jmp sym.rawDealloc__system_u7009
add rsp, 0x28
pop rbx
pop rsi
ret
Function at 0x14000a850
Capabilities:
Terminate process

Disassembly:
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x20
imul rdx, qword [rcx + 8], 3
mov rsi, rcx
jo 0x14000a8fb
mov rax, rdx
shr rax, 0x3f
add rax, rdx
sar rax, 1
imul rbx, rax, 0x10
mov qword [rcx + 8], rax
jo 0x14000a8fb
test rbx, rbx
js 0x14000a928
mov r12, qword [rcx + 0x10]
lea rcx, [0x14002a380]
call dbg.__emutls_get_address
test rbx, rbx
mov rdi, rax
je 0x14000a910
mov rdx, rbx
mov rcx, rax
call sym.rawAlloc__system_u6833
test r12, r12
mov rbp, rax
je 0x14000a8ec
mov rax, r12
mov rdx, r12
mov rcx, rbp
and rax, 0xfffffffffffff000
mov r8, qword [rax + 8]
lea rax, [r8 - 0x30]
cmp r8, 0xfc0
cmovg r8, rax
cmp rbx, r8
cmovle r8, rbx
call sym.memcpy
mov rdx, r12
mov rcx, rdi
call sym.rawDealloc__system_u7009
mov qword [rsi + 0x10], rbp
add rsp, 0x20
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret
add rsp, 0x20
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
jmp sym.raiseOverflow
test r12, r12
je 0x14000a920
mov rdx, r12
mov rcx, rax
call sym.rawDealloc__system_u7009
xor ebp, ebp
jmp 0x14000a8ec
movabs r8, 0x7fffffffffffffff
xor edx, edx
mov rcx, rbx
add rsp, 0x20
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
jmp sym.raiseRangeErrorI

Function at 0x14000a950
Capabilities:
Terminate process

Disassembly:
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x20
imul rdx, qword [rcx + 8], 3
mov rsi, rcx
jo 0x14000a9fb
mov rax, rdx
shr rax, 0x3f
add rax, rdx
sar rax, 1
imul rbx, rax, 0x10
mov qword [rcx + 8], rax
jo 0x14000a9fb
test rbx, rbx
js 0x14000aa28
mov r12, qword [rcx + 0x10]
lea rcx, [0x14002a380]
call dbg.__emutls_get_address
test rbx, rbx
mov rdi, rax
je 0x14000aa10
mov rdx, rbx
mov rcx, rax
call sym.rawAlloc__system_u6833
test r12, r12
mov rbp, rax
je 0x14000a9ec
mov rax, r12
mov rdx, r12
mov rcx, rbp
and rax, 0xfffffffffffff000
mov r8, qword [rax + 8]
lea rax, [r8 - 0x30]
cmp r8, 0xfc0
cmovg r8, rax
cmp rbx, r8
cmovle r8, rbx
call sym.memcpy
mov rdx, r12
mov rcx, rdi
call sym.rawDealloc__system_u7009
mov qword [rsi + 0x10], rbp
add rsp, 0x20
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret
add rsp, 0x20
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
jmp sym.raiseOverflow
test r12, r12
je 0x14000aa20
mov rdx, r12
mov rcx, rax
call sym.rawDealloc__system_u7009
xor ebp, ebp
jmp 0x14000a9ec
movabs r8, 0x7fffffffffffffff
xor edx, edx
mov rcx, rbx
add rsp, 0x20
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
jmp sym.raiseRangeErrorI
Function at 0x14000abf0
Capabilities:
Terminate process

Disassembly:
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x20
mov rbx, rdx
add rbx, qword [rcx]
mov rsi, rcx
jo 0x14000acc9
mov rbp, qword [rcx + 8]
test rbp, rbp
je 0x14000ac25
mov rax, qword [rbp]
bt rax, 0x3e
jae 0x14000acb0
mov rax, rbx
add rax, 1
jo 0x14000acc9
add rax, 8
mov rdi, rax
jo 0x14000acc9
test rax, rax
js 0x14000adc8
lea rcx, [0x14002a380]
call dbg.__emutls_get_address
mov rdx, rdi
mov rcx, rax
call sym.rawAlloc__system_u6833
mov qword [rsi + 8], rax
mov qword [rax], rbx
mov rcx, qword [rsi]
test rcx, rcx
jle 0x14000adf0
cmp rbx, rcx
cmovle rcx, rbx
test rcx, rcx
js 0x14000ae10
mov rax, qword [rsi + 8]
lea rdx, [rbp + 8]
mov r8, rcx
add rax, 8
mov rcx, rax
add rsp, 0x20
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
jmp sym.memcpy
btr rax, 0x3e
cmp rbx, rax
jg 0x14000ace0
add rsp, 0x20
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
add rsp, 0x20
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
jmp sym.raiseOverflow
test rax, rax
mov edi, 4
jle 0x14000acfa
cmp rax, 0x7fff
jg 0x14000ae20
lea rdi, [rax + rax]
cmp rbx, rdi
cmovge rdi, rbx
mov rax, rdi
add rax, 1
jo 0x14000acc9
add rax, 8
mov rbp, rax
jo 0x14000acc9
test rax, rax
js 0x14000ae40
lea rcx, [0x14002a380]
mov r14, qword [rsi + 8]
call dbg.__emutls_get_address
test rbp, rbp
mov r12, rax
je sym.prepareAdd.cold
mov rdx, rbp
mov rcx, rax
call sym.rawAlloc__system_u6833
test r14, r14
mov r13, rax
je 0x14000ad84
mov rax, r14
mov rdx, r14
mov rcx, r13
and rax, 0xfffffffffffff000
mov r8, qword [rax + 8]
lea rax, [r8 - 0x30]
cmp r8, 0xfc0
cmovg r8, rax
cmp rbp, r8
cmovle r8, rbp
call sym.memcpy
mov rdx, r14
mov rcx, r12
call sym.rawDealloc__system_u7009
cmp rbx, rdi
mov qword [rsi + 8], r13
mov qword [r13], rdi
jge 0x14000acba
sub rdi, rbx
jo 0x14000acc9
test rdi, rdi
js 0x14000adc8
mov rax, qword [rsi + 8]
mov r8, rdi
xor edx, edx
lea rcx, [rax + rbx + 9]
add rsp, 0x20
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
jmp sym.memset
movabs r8, 0x7fffffffffffffff
xor edx, edx
mov rcx, rdi
add rsp, 0x20
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
jmp sym.raiseRangeErrorI
test rbp, rbp
jne 0x14000acba
mov rax, qword [rsi + 8]
mov byte [rax + 8], 0
jmp 0x14000acba
movabs r8, 0x7fffffffffffffff
xor edx, edx
jmp 0x14000add7
imul rax, rax, 3
jo 0x14000ae51
mov rdi, rax
shr rdi, 0x3f
add rdi, rax
sar rdi, 1
jmp 0x14000acfa
movabs r8, 0x7fffffffffffffff
xor edx, edx
mov rcx, rax
jmp 0x14000add7
call sym.raiseOverflow
jmp 0x14000acfa