joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140066c90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov dword [rsp + 0x20], r9d
mov byte [rsp + 0x18], r8b
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x78
mov rax, qword [0x140143098]
xor rax, rsp
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x38], 0x8ce
mov dword [rsp + 0x3c], 0xb8d
lea rdx, str.gbsehxpznysgftssqeiopjvubzhejcghyeutepidkojdhflcqqzxtd
lea rcx, [rsp + 0x48]
call fcn.1400aad30
mov byte [rsp + 0x21], 1
mov dword [rsp + 0x40], 0x88d
xor eax, eax
test eax, eax
je 0x140066d0a
mov dword [rsp + 0x24], 0x42
jmp 0x140066cff
mov eax, dword [rsp + 0x24]
dec eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0
jle 0x140066d0a
jmp 0x140066cf5
xor eax, eax
cmp eax, 1
je 0x140066d30
mov dword [rsp + 0x28], 0xa
jmp 0x140066d25
mov eax, dword [rsp + 0x28]
dec eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0
jle 0x140066d30
jmp 0x140066d1b
xor eax, eax
cmp eax, 1
je 0x140066d56
mov dword [rsp + 0x2c], 6
jmp 0x140066d4b
mov eax, dword [rsp + 0x2c]
dec eax
mov dword [rsp + 0x2c], eax
cmp dword [rsp + 0x2c], 0
jle 0x140066d56
jmp 0x140066d41
xor eax, eax
test eax, eax
je 0x140066d7b
mov dword [rsp + 0x30], 0x21
jmp 0x140066d70
mov eax, dword [rsp + 0x30]
dec eax
mov dword [rsp + 0x30], eax
cmp dword [rsp + 0x30], 0
jle 0x140066d7b
jmp 0x140066d66
xor eax, eax
cmp eax, 1
je 0x140066da1
mov dword [rsp + 0x34], 0x22
jmp 0x140066d96
mov eax, dword [rsp + 0x34]
dec eax
mov dword [rsp + 0x34], eax
cmp dword [rsp + 0x34], 0
jle 0x140066da1
jmp 0x140066d8c
mov byte [rsp + 0x20], 1
lea rcx, [rsp + 0x48]
call fcn.1400abec0
mov rcx, qword [rsp + 0x88]
call fcn.1400abec0
mov rcx, qword [rsp + 0xa8]
call fcn.1400abec0
mov rcx, qword [rsp + 0xb0]
call fcn.1400abec0
mov rcx, qword [rsp + 0xd0]
call fcn.1400abec0
movzx eax, byte [rsp + 0x20]
mov rcx, qword [rsp + 0x68]
xor rcx, rsp
call fcn.1400b5cf0
add rsp, 0x78
ret
Function at 0x140068040
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x98
mov rax, qword [0x140143098]
xor rax, rsp
mov qword [rsp + 0x88], rax
mov dword [rsp + 0x38], 0x459
mov dword [rsp + 0x3c], 0x169
lea rdx, [0x1400de114]
lea rcx, [rsp + 0x68]
call fcn.1400aad30
mov byte [rsp + 0x20], 0
movsd xmm0, qword [0x140124560]
movsd qword [rsp + 0x50], xmm0
movsd xmm0, qword [0x140127cc8]
movsd qword [rsp + 0x58], xmm0
movsd xmm0, qword [0x140123ed8]
movsd qword [rsp + 0x60], xmm0
mov dword [rsp + 0x40], 0x4b1
mov dword [rsp + 0x44], 0x81
mov dword [rsp + 0x48], 0xd50
xor eax, eax
cmp eax, 1
je 0x1400680f6
mov dword [rsp + 0x24], 8
jmp 0x1400680eb
mov eax, dword [rsp + 0x24]
dec eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0
jle 0x1400680f6
jmp 0x1400680e1
xor eax, eax
test eax, eax
je 0x14006811b
mov dword [rsp + 0x28], 0x31
jmp 0x140068110
mov eax, dword [rsp + 0x28]
dec eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0
jle 0x14006811b
jmp 0x140068106
xor eax, eax
cmp eax, 1
je 0x140068141
mov dword [rsp + 0x2c], 0x53
jmp 0x140068136
mov eax, dword [rsp + 0x2c]
dec eax
mov dword [rsp + 0x2c], eax
cmp dword [rsp + 0x2c], 0
jle 0x140068141
jmp 0x14006812c
xor eax, eax
cmp eax, 1
je 0x140068167
mov dword [rsp + 0x30], 0x50
jmp 0x14006815c
mov eax, dword [rsp + 0x30]
dec eax
mov dword [rsp + 0x30], eax
cmp dword [rsp + 0x30], 0
jle 0x140068167
jmp 0x140068152
mov dword [rsp + 0x34], 0x4e6e
lea rcx, [rsp + 0x68]
call fcn.1400abec0
mov rcx, qword [rsp + 0xa8]
call fcn.1400abec0
mov rcx, qword [rsp + 0xb0]
call fcn.1400abec0
mov eax, dword [rsp + 0x34]
mov rcx, qword [rsp + 0x88]
xor rcx, rsp
call fcn.1400b5cf0
add rsp, 0x98
ret
Function at 0x1400700f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
movsd qword [rsp + 0x20], xmm3
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
sub rsp, 0x58
mov dword [rsp + 0x38], 0x2cb
mov dword [rsp + 0x3c], 0x941
mov dword [rsp + 0x40], 0x15d7
mov dword [rsp + 0x44], 0x5a
xor eax, eax
cmp eax, 1
je 0x14007014e
mov dword [rsp + 0x24], 0x32
jmp 0x140070143
mov eax, dword [rsp + 0x24]
dec eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0
jle 0x14007014e
jmp 0x140070139
xor eax, eax
test eax, eax
je 0x140070173
mov dword [rsp + 0x28], 0x3d
jmp 0x140070168
mov eax, dword [rsp + 0x28]
dec eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0
jle 0x140070173
jmp 0x14007015e
xor eax, eax
cmp eax, 1
je 0x140070199
mov dword [rsp + 0x2c], 0x47
jmp 0x14007018e
mov eax, dword [rsp + 0x2c]
dec eax
mov dword [rsp + 0x2c], eax
cmp dword [rsp + 0x2c], 0
jle 0x140070199
jmp 0x140070184
xor eax, eax
cmp eax, 1
je 0x1400701bf
mov dword [rsp + 0x30], 0x2f
jmp 0x1400701b4
mov eax, dword [rsp + 0x30]
dec eax
mov dword [rsp + 0x30], eax
cmp dword [rsp + 0x30], 0
jle 0x1400701bf
jmp 0x1400701aa
xor eax, eax
test eax, eax
je 0x1400701e4
mov dword [rsp + 0x34], 0x2d
jmp 0x1400701d9
mov eax, dword [rsp + 0x34]
dec eax
mov dword [rsp + 0x34], eax
cmp dword [rsp + 0x34], 0
jle 0x1400701e4
jmp 0x1400701cf
mov byte [rsp + 0x20], 0
mov rcx, qword [rsp + 0x70]
call fcn.1400abec0
mov rcx, qword [rsp + 0x88]
call fcn.1400abec0
movzx eax, byte [rsp + 0x20]
add rsp, 0x58
ret
Function at 0x140070ec0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], r9
mov dword [rsp + 0x18], r8d
movsd qword [rsp + 0x10], xmm1
mov qword [rsp + 8], rcx
sub rsp, 0xf8
mov rax, qword [0x140143098]
xor rax, rsp
mov qword [rsp + 0xe8], rax
lea rdx, [0x140117ca0]
lea rcx, [rsp + 0xc8]
call fcn.1400aad30
mov byte [rsp + 0x22], 0
mov dword [rsp + 0x3c], 0x1462
lea rdx, str.zrwjibnlldumghmvnqvvemtuoqokmyaelcxgrasslewcwbyhqjvatwfvjdytncihpbfxxdpyaeiou
lea rcx, [rsp + 0xa8]
call fcn.1400aad30
movsd xmm0, qword [0x140128b68]
movsd qword [rsp + 0x50], xmm0
mov byte [rsp + 0x23], 0
movsd xmm0, qword [0x140128f48]
movsd qword [rsp + 0x58], xmm0
mov dword [rsp + 0x40], 0x12fb
movsd xmm0, qword [0x140124768]
movsd qword [rsp + 0x60], xmm0
mov byte [rsp + 0x24], 0
xor eax, eax
test eax, eax
je 0x140070f84
mov dword [rsp + 0x28], 0
jmp 0x140070f79
mov eax, dword [rsp + 0x28]
dec eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0
jle 0x140070f84
jmp 0x140070f6f
xor eax, eax
cmp eax, 1
je 0x140070faa
mov dword [rsp + 0x2c], 0xe
jmp 0x140070f9f
mov eax, dword [rsp + 0x2c]
dec eax
mov dword [rsp + 0x2c], eax
cmp dword [rsp + 0x2c], 0
jle 0x140070faa
jmp 0x140070f95
xor eax, eax
test eax, eax
je 0x140070fcf
mov dword [rsp + 0x30], 0x4d
jmp 0x140070fc4
mov eax, dword [rsp + 0x30]
dec eax
mov dword [rsp + 0x30], eax
cmp dword [rsp + 0x30], 0
jle 0x140070fcf
jmp 0x140070fba
xor eax, eax
cmp eax, 1
je 0x140070ff5
mov dword [rsp + 0x34], 0x25
jmp 0x140070fea
mov eax, dword [rsp + 0x34]
dec eax
mov dword [rsp + 0x34], eax
cmp dword [rsp + 0x34], 0
jle 0x140070ff5
jmp 0x140070fe0
lea rdx, [0x140117d50]
lea rcx, [rsp + 0x88]
call fcn.1400aad30
mov qword [rsp + 0x48], rax
lea rdx, str.lulkfkcqkydknnlhpgjhjcwuwhqnehoorigqzvuvgnxahmgcpjijelzwncocfbknpnw
lea rcx, [rsp + 0x68]
call fcn.1400aad30
mov rcx, qword [rsp + 0x48]
mov rdx, rcx
mov rcx, rax
call fcn.1400a84f0
mov byte [rsp + 0x20], al
lea rcx, [rsp + 0x68]
call fcn.1400abec0
lea rcx, [rsp + 0x88]
call fcn.1400abec0
movzx eax, byte [rsp + 0x20]
test eax, eax
je 0x140071072
mov dword [rsp + 0x38], 0x2e
jmp 0x140071067
mov eax, dword [rsp + 0x38]
dec eax
mov dword [rsp + 0x38], eax
cmp dword [rsp + 0x38], 0
jle 0x140071072
jmp 0x14007105d
mov byte [rsp + 0x21], 0
lea rcx, [rsp + 0xa8]
call fcn.1400abec0
lea rcx, [rsp + 0xc8]
call fcn.1400abec0
mov rcx, qword [rsp + 0x118]
call fcn.1400abec0
movzx eax, byte [rsp + 0x21]
mov rcx, qword [rsp + 0xe8]
xor rcx, rsp
call fcn.1400b5cf0
add rsp, 0xf8
ret
Function at 0x140072e00
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov dword [rsp + 0x20], r9d
mov dword [rsp + 0x18], r8d
mov byte [rsp + 0x10], dl
mov qword [rsp + 8], rcx
sub rsp, 0xb8
mov rax, qword [0x140143098]
xor rax, rsp
mov qword [rsp + 0xa8], rax
mov byte [rsp + 0x20], 1
lea rdx, str.jbpngmhvdbgfhmbyjcrdte
lea rcx, [rsp + 0x88]
call fcn.1400aad30
mov byte [rsp + 0x21], 1
mov dword [rsp + 0x34], 0xdbe
mov dword [rsp + 0x38], 0x232e
lea rdx, str.himxcqmknycasunotzeyvawufrduyasyyuiflnwfwmrikjegqgvqloxjttlgpr
lea rcx, [rsp + 0x68]
call fcn.1400aad30
mov byte [rsp + 0x22], 0
lea rdx, str.vxeplcneywmdkxkgbmiimugihrjotophgwvs
lea rcx, [rsp + 0x48]
call fcn.1400aad30
movsd xmm0, qword [0x14012a188]
movsd qword [rsp + 0x40], xmm0
mov dword [rsp + 0x3c], 0x185
xor eax, eax
cmp eax, 1
je 0x140072ebd
mov dword [rsp + 0x24], 0xd
jmp 0x140072eb2
mov eax, dword [rsp + 0x24]
dec eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0
jle 0x140072ebd
jmp 0x140072ea8
xor eax, eax
cmp eax, 1
je 0x140072ee3
mov dword [rsp + 0x28], 0x2f
jmp 0x140072ed8
mov eax, dword [rsp + 0x28]
dec eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0
jle 0x140072ee3
jmp 0x140072ece
xor eax, eax
test eax, eax
je 0x140072f08
mov dword [rsp + 0x2c], 0x4c
jmp 0x140072efd
mov eax, dword [rsp + 0x2c]
dec eax
mov dword [rsp + 0x2c], eax
cmp dword [rsp + 0x2c], 0
jle 0x140072f08
jmp 0x140072ef3
xor eax, eax
cmp eax, 1
je 0x140072f2e
mov dword [rsp + 0x30], 0x1d
jmp 0x140072f23
mov eax, dword [rsp + 0x30]
dec eax
mov dword [rsp + 0x30], eax
cmp dword [rsp + 0x30], 0
jle 0x140072f2e
jmp 0x140072f19
lea rcx, [rsp + 0x48]
call fcn.1400abec0
lea rcx, [rsp + 0x68]
call fcn.1400abec0
lea rcx, [rsp + 0x88]
call fcn.1400abec0
mov rcx, qword [rsp + 0xa8]
xor rcx, rsp
call fcn.1400b5cf0
add rsp, 0xb8
ret
Function at 0x1400738d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
movsd qword [rsp + 0x20], xmm3
mov byte [rsp + 0x18], r8b
movsd qword [rsp + 0x10], xmm1
mov qword [rsp + 8], rcx
sub rsp, 0x178
mov rax, qword [0x140143098]
xor rax, rsp
mov qword [rsp + 0x168], rax
lea rdx, [0x1400da290]
lea rcx, [rsp + 0x148]
call fcn.1400aad30
mov dword [rsp + 0x3c], 0x12ce
mov dword [rsp + 0x40], 0x16d0
mov dword [rsp + 0x44], 0xa50
lea rdx, str.yocuvuusbmjuhehlueoudkpbsofmzbedqtqohbcilj
lea rcx, [rsp + 0x128]
call fcn.1400aad30
lea rdx, str.wfwpogchpsbvvryzqstubpzcwbjreyybwnqrzxsklglgfiwtpiqzvnsfdbirsudhlapvprvv
lea rcx, [rsp + 0x108]
call fcn.1400aad30
movsd xmm0, qword [0x1401281d0]
movsd qword [rsp + 0x58], xmm0
lea rdx, [0x1400da418]
lea rcx, [rsp + 0xe8]
call fcn.1400aad30
movsd xmm0, qword [0x140123528]
movsd qword [rsp + 0x60], xmm0
lea rdx, [0x1400da4d8]
lea rcx, [rsp + 0x88]
call fcn.1400aad30
mov qword [rsp + 0x48], rax
lea rdx, str.jgpgrlxu
lea rcx, [rsp + 0x68]
call fcn.1400aad30
mov rcx, qword [rsp + 0x48]
mov rdx, rcx
mov rcx, rax
call fcn.1400a84f0
mov byte [rsp + 0x20], al
lea rcx, [rsp + 0x68]
call fcn.1400abec0
lea rcx, [rsp + 0x88]
call fcn.1400abec0
movzx eax, byte [rsp + 0x20]
test eax, eax
je 0x140073a00
mov dword [rsp + 0x24], 0x11
jmp 0x1400739f5
mov eax, dword [rsp + 0x24]
dec eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0
jle 0x140073a00
jmp 0x1400739eb
xor eax, eax
test eax, eax
je 0x140073a25
mov dword [rsp + 0x28], 9
jmp 0x140073a1a
mov eax, dword [rsp + 0x28]
dec eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0
jle 0x140073a25
jmp 0x140073a10
xor eax, eax
cmp eax, 1
je 0x140073a4b
mov dword [rsp + 0x2c], 0x45
jmp 0x140073a40
mov eax, dword [rsp + 0x2c]
dec eax
mov dword [rsp + 0x2c], eax
cmp dword [rsp + 0x2c], 0
jle 0x140073a4b
jmp 0x140073a36
lea rdx, [0x1400da670]
lea rcx, [rsp + 0xc8]
call fcn.1400aad30
mov qword [rsp + 0x50], rax
lea rdx, str.oastdjujvetupgshprypmsnfeyjoxcttseiemzmkkkllrslmypnukclfrbokkvbcpcbbhnqrcuxkcclpjmjyekthanhxnzsmsmap
lea rcx, [rsp + 0xa8]
call fcn.1400aad30
mov rcx, qword [rsp + 0x50]
mov rdx, rcx
mov rcx, rax
call fcn.1400a8490
mov byte [rsp + 0x21], al
lea rcx, [rsp + 0xa8]
call fcn.1400abec0
lea rcx, [rsp + 0xc8]
call fcn.1400abec0
movzx eax, byte [rsp + 0x21]
test eax, eax
je 0x140073ace
mov dword [rsp + 0x30], 0x62
jmp 0x140073ac3
mov eax, dword [rsp + 0x30]
dec eax
mov dword [rsp + 0x30], eax
cmp dword [rsp + 0x30], 0
jle 0x140073ace
jmp 0x140073ab9
xor eax, eax
cmp eax, 1
je 0x140073af4
mov dword [rsp + 0x34], 0x50
jmp 0x140073ae9
mov eax, dword [rsp + 0x34]
dec eax
mov dword [rsp + 0x34], eax
cmp dword [rsp + 0x34], 0
jle 0x140073af4
jmp 0x140073adf
mov dword [rsp + 0x38], 0x8881
lea rcx, [rsp + 0xe8]
call fcn.1400abec0
lea rcx, [rsp + 0x108]
call fcn.1400abec0
lea rcx, [rsp + 0x128]
call fcn.1400abec0
lea rcx, [rsp + 0x148]
call fcn.1400abec0
mov rcx, qword [rsp + 0x1c0]
call fcn.1400abec0
mov eax, dword [rsp + 0x38]
mov rcx, qword [rsp + 0x168]
xor rcx, rsp
call fcn.1400b5cf0
add rsp, 0x178
ret
Function at 0x14007f7b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
movsd qword [rsp + 0x20], xmm3
mov byte [rsp + 0x18], r8b
movsd qword [rsp + 0x10], xmm1
mov qword [rsp + 8], rcx
sub rsp, 0x198
mov rax, qword [0x140143098]
xor rax, rsp
mov qword [rsp + 0x188], rax
lea rdx, str.whhztludpytwroqlmtynrxqkdlbcpcperrxovkefinmdctjnrekfndtdy
lea rcx, [rsp + 0x168]
call fcn.1400aad30
lea rdx, [0x140101778]
lea rcx, [rsp + 0x148]
call fcn.1400aad30
mov dword [rsp + 0x3c], 0xcf8
lea rdx, str.bnfyvonsl
lea rcx, [rsp + 0x128]
call fcn.1400aad30
movsd xmm0, qword [0x1401237d8]
movsd qword [rsp + 0x50], xmm0
movsd xmm0, qword [0x140129ca0]
movsd qword [rsp + 0x58], xmm0
lea rdx, str.yanedyzlknxbnferblfhldfeuuvgoh
lea rcx, [rsp + 0x108]
call fcn.1400aad30
lea rdx, [0x140101bd0]
lea rcx, [rsp + 0xe8]
call fcn.1400aad30
mov byte [rsp + 0x22], 0
movsd xmm0, qword [0x140122ce8]
movsd qword [rsp + 0x60], xmm0
lea rdx, [0x140101c78]
lea rcx, [rsp + 0x88]
call fcn.1400aad30
mov qword [rsp + 0x40], rax
lea rdx, str.sncgktchcwqzeddzmwnvibovwazp
lea rcx, [rsp + 0x68]
call fcn.1400aad30
mov rcx, qword [rsp + 0x40]
mov rdx, rcx
mov rcx, rax
call fcn.1400a8490
mov byte [rsp + 0x20], al
lea rcx, [rsp + 0x68]
call fcn.1400abec0
lea rcx, [rsp + 0x88]
call fcn.1400abec0
movzx eax, byte [rsp + 0x20]
test eax, eax
je 0x14007f8f7
mov dword [rsp + 0x24], 0x42
jmp 0x14007f8ec
mov eax, dword [rsp + 0x24]
dec eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0
jle 0x14007f8f7
jmp 0x14007f8e2
xor eax, eax
test eax, eax
je 0x14007f91c
mov dword [rsp + 0x28], 0x54
jmp 0x14007f911
mov eax, dword [rsp + 0x28]
dec eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0
jle 0x14007f91c
jmp 0x14007f907
lea rdx, [0x140101c98]
lea rcx, [rsp + 0xc8]
call fcn.1400aad30
mov qword [rsp + 0x48], rax
lea rdx, str.gysfrnznteirqrquvthejkovxqubme
lea rcx, [rsp + 0xa8]
call fcn.1400aad30
mov rcx, qword [rsp + 0x48]
mov rdx, rcx
mov rcx, rax
call fcn.1400a8490
mov byte [rsp + 0x21], al
lea rcx, [rsp + 0xa8]
call fcn.1400abec0
lea rcx, [rsp + 0xc8]
call fcn.1400abec0
movzx eax, byte [rsp + 0x21]
test eax, eax
je 0x14007f99f
mov dword [rsp + 0x2c], 0x43
jmp 0x14007f994
mov eax, dword [rsp + 0x2c]
dec eax
mov dword [rsp + 0x2c], eax
cmp dword [rsp + 0x2c], 0
jle 0x14007f99f
jmp 0x14007f98a
xor eax, eax
cmp eax, 1
je 0x14007f9c5
mov dword [rsp + 0x30], 0xc
jmp 0x14007f9ba
mov eax, dword [rsp + 0x30]
dec eax
mov dword [rsp + 0x30], eax
cmp dword [rsp + 0x30], 0
jle 0x14007f9c5
jmp 0x14007f9b0
xor eax, eax
cmp eax, 1
je 0x14007f9eb
mov dword [rsp + 0x34], 0x51
jmp 0x14007f9e0
mov eax, dword [rsp + 0x34]
dec eax
mov dword [rsp + 0x34], eax
cmp dword [rsp + 0x34], 0
jle 0x14007f9eb
jmp 0x14007f9d6
mov dword [rsp + 0x38], 0xf1af
lea rcx, [rsp + 0xe8]
call fcn.1400abec0
lea rcx, [rsp + 0x108]
call fcn.1400abec0
lea rcx, [rsp + 0x128]
call fcn.1400abec0
lea rcx, [rsp + 0x148]
call fcn.1400abec0
lea rcx, [rsp + 0x168]
call fcn.1400abec0
mov eax, dword [rsp + 0x38]
mov rcx, qword [rsp + 0x188]
xor rcx, rsp
call fcn.1400b5cf0
add rsp, 0x198
ret
Function at 0x140089730
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov dword [rsp + 0x20], r9d
movsd qword [rsp + 0x18], xmm2
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x78
mov rax, qword [0x140143098]
xor rax, rsp
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x30], 0x109
lea rdx, str.eaiqbrdcbtgckaxfszfgsbgbvkqacvsiclolupidaqevsjfaqikowdfcc
lea rcx, [rsp + 0x48]
call fcn.1400aad30
mov dword [rsp + 0x34], 0x67b
mov dword [rsp + 0x38], 0x396
mov dword [rsp + 0x3c], 0x446
mov dword [rsp + 0x40], 0x150c
xor eax, eax
cmp eax, 1
je 0x1400897b7
mov dword [rsp + 0x24], 0x14
jmp 0x1400897ac
mov eax, dword [rsp + 0x24]
dec eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0
jle 0x1400897b7
jmp 0x1400897a2
xor eax, eax
cmp eax, 1
je 0x1400897dd
mov dword [rsp + 0x28], 0x3a
jmp 0x1400897d2
mov eax, dword [rsp + 0x28]
dec eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0
jle 0x1400897dd
jmp 0x1400897c8
xor eax, eax
cmp eax, 1
je 0x140089803
mov dword [rsp + 0x2c], 0x13
jmp 0x1400897f8
mov eax, dword [rsp + 0x2c]
dec eax
mov dword [rsp + 0x2c], eax
cmp dword [rsp + 0x2c], 0
jle 0x140089803
jmp 0x1400897ee
mov byte [rsp + 0x20], 1
lea rcx, [rsp + 0x48]
call fcn.1400abec0
mov rcx, qword [rsp + 0x88]
call fcn.1400abec0
movzx eax, byte [rsp + 0x20]
mov rcx, qword [rsp + 0x68]
xor rcx, rsp
call fcn.1400b5cf0
add rsp, 0x78
ret

Function at 0x14008d200
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov byte [rsp + 0x20], r9b
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0xb8
mov rax, qword [0x140143098]
xor rax, rsp
mov qword [rsp + 0xa8], rax
lea rdx, str.ginsyoigngrncizbowmhvcrjtwvxjifpiuietinlmsajwzod
lea rcx, [rsp + 0x88]
call fcn.1400aad30
mov dword [rsp + 0x30], 0x2d3
mov dword [rsp + 0x34], 0xea2
lea rdx, str.jaycnijdqorktlwsbjxwoftkkiastltzgbqhiwkjyzjgaxbtigkutduhyeyayooebd
lea rcx, [rsp + 0x68]
call fcn.1400aad30
mov dword [rsp + 0x38], 0x2143
mov dword [rsp + 0x3c], 0x40a
lea rdx, str.rvnyqullmwfhhtixlijhcbautbmyhsvghtcxthxtfhxrpggxskyddmdguiesjksafetbztczydlgshyzvxhcvzfooqxhjrx
lea rcx, [rsp + 0x48]
call fcn.1400aad30
mov byte [rsp + 0x20], 0
mov byte [rsp + 0x21], 1
movsd xmm0, qword [0x1401264b0]
movsd qword [rsp + 0x40], xmm0
xor eax, eax
test eax, eax
je 0x14008d2c0
mov dword [rsp + 0x24], 0x47
jmp 0x14008d2b5
mov eax, dword [rsp + 0x24]
dec eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0
jle 0x14008d2c0
jmp 0x14008d2ab
xor eax, eax
test eax, eax
je 0x14008d2e5
mov dword [rsp + 0x28], 0x38
jmp 0x14008d2da
mov eax, dword [rsp + 0x28]
dec eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0
jle 0x14008d2e5
jmp 0x14008d2d0
mov dword [rsp + 0x2c], 0x9eaa
lea rcx, [rsp + 0x48]
call fcn.1400abec0
lea rcx, [rsp + 0x68]
call fcn.1400abec0
lea rcx, [rsp + 0x88]
call fcn.1400abec0
mov rcx, qword [rsp + 0xc8]
call fcn.1400abec0
mov rcx, qword [rsp + 0xd0]
call fcn.1400abec0
mov eax, dword [rsp + 0x2c]
mov rcx, qword [rsp + 0xa8]
xor rcx, rsp
call fcn.1400b5cf0
add rsp, 0xb8
ret
Function at 0x14009e4d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x58
mov dword [rsp + 0x38], 0x200b
mov dword [rsp + 0x3c], 0xa05
mov byte [rsp + 0x20], 0
movsd xmm0, qword [0x140123450]
movsd qword [rsp + 0x40], xmm0
xor eax, eax
test eax, eax
je 0x14009e530
mov dword [rsp + 0x24], 0x57
jmp 0x14009e525
mov eax, dword [rsp + 0x24]
dec eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0
jle 0x14009e530
jmp 0x14009e51b
xor eax, eax
cmp eax, 1
je 0x14009e556
mov dword [rsp + 0x28], 0x57
jmp 0x14009e54b
mov eax, dword [rsp + 0x28]
dec eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0
jle 0x14009e556
jmp 0x14009e541
xor eax, eax
test eax, eax
je 0x14009e57b
mov dword [rsp + 0x2c], 7
jmp 0x14009e570
mov eax, dword [rsp + 0x2c]
dec eax
mov dword [rsp + 0x2c], eax
cmp dword [rsp + 0x2c], 0
jle 0x14009e57b
jmp 0x14009e566
xor eax, eax
test eax, eax
je 0x14009e5a0
mov dword [rsp + 0x30], 3
jmp 0x14009e595
mov eax, dword [rsp + 0x30]
dec eax
mov dword [rsp + 0x30], eax
cmp dword [rsp + 0x30], 0
jle 0x14009e5a0
jmp 0x14009e58b
xor eax, eax
cmp eax, 1
je 0x14009e5c6
mov dword [rsp + 0x34], 2
jmp 0x14009e5bb
mov eax, dword [rsp + 0x34]
dec eax
mov dword [rsp + 0x34], eax
cmp dword [rsp + 0x34], 0
jle 0x14009e5c6
jmp 0x14009e5b1
lea rdx, str.oeoujcqswworzci
mov rcx, qword [rsp + 0x68]
call fcn.1400aad30
mov rcx, qword [rsp + 0x70]
call fcn.1400abec0
mov rcx, qword [rsp + 0x88]
call fcn.1400abec0
mov rcx, qword [rsp + 0x90]
call fcn.1400abec0
mov rax, qword [rsp + 0x68]
add rsp, 0x58
ret
Function at 0x14009eb90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov dword [rsp + 0x20], r9d
mov dword [rsp + 0x18], r8d
mov byte [rsp + 0x10], dl
mov qword [rsp + 8], rcx
sub rsp, 0xd8
mov rax, qword [0x140143098]
xor rax, rsp
mov qword [rsp + 0xc8], rax
mov byte [rsp + 0x21], 0
lea rdx, [0x1400e78a0]
lea rcx, [rsp + 0xa8]
call fcn.1400aad30
movsd xmm0, qword [0x14012a720]
movsd qword [rsp + 0x50], xmm0
mov byte [rsp + 0x22], 0
movsd xmm0, qword [0x140124288]
movsd qword [rsp + 0x58], xmm0
movsd xmm0, qword [0x140128d10]
movsd qword [rsp + 0x60], xmm0
mov byte [rsp + 0x23], 0
mov byte [rsp + 0x24], 1
mov byte [rsp + 0x25], 0
mov dword [rsp + 0x40], 0x62c
xor eax, eax
test eax, eax
je 0x14009ec40
mov dword [rsp + 0x28], 0x57
jmp 0x14009ec35
mov eax, dword [rsp + 0x28]
dec eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0
jle 0x14009ec40
jmp 0x14009ec2b
lea rdx, [0x1400e7930]
lea rcx, [rsp + 0x88]
call fcn.1400aad30
mov qword [rsp + 0x48], rax
lea rdx, str.remaxculcwilvszeugdqsgeaxnezbdujifldvzsoeesucetoyfodcfmwspqtobxvxqpjy
lea rcx, [rsp + 0x68]
call fcn.1400aad30
mov rcx, qword [rsp + 0x48]
mov rdx, rcx
mov rcx, rax
call fcn.1400a84f0
mov byte [rsp + 0x20], al
lea rcx, [rsp + 0x68]
call fcn.1400abec0
lea rcx, [rsp + 0x88]
call fcn.1400abec0
movzx eax, byte [rsp + 0x20]
test eax, eax
je 0x14009ecbd
mov dword [rsp + 0x2c], 0x46
jmp 0x14009ecb2
mov eax, dword [rsp + 0x2c]
dec eax
mov dword [rsp + 0x2c], eax
cmp dword [rsp + 0x2c], 0
jle 0x14009ecbd
jmp 0x14009eca8
xor eax, eax
test eax, eax
je 0x14009ece2
mov dword [rsp + 0x30], 0x2f
jmp 0x14009ecd7
mov eax, dword [rsp + 0x30]
dec eax
mov dword [rsp + 0x30], eax
cmp dword [rsp + 0x30], 0
jle 0x14009ece2
jmp 0x14009eccd
xor eax, eax
cmp eax, 1
je 0x14009ed08
mov dword [rsp + 0x34], 0x53
jmp 0x14009ecfd
mov eax, dword [rsp + 0x34]
dec eax
mov dword [rsp + 0x34], eax
cmp dword [rsp + 0x34], 0
jle 0x14009ed08
jmp 0x14009ecf3
xor eax, eax
test eax, eax
je 0x14009ed2d
mov dword [rsp + 0x38], 0x54
jmp 0x14009ed22
mov eax, dword [rsp + 0x38]
dec eax
mov dword [rsp + 0x38], eax
cmp dword [rsp + 0x38], 0
jle 0x14009ed2d
jmp 0x14009ed18
mov dword [rsp + 0x3c], 0xda24
lea rcx, [rsp + 0xa8]
call fcn.1400abec0
mov rcx, qword [rsp + 0x100]
call fcn.1400abec0
mov rcx, qword [rsp + 0x128]
call fcn.1400abec0
mov eax, dword [rsp + 0x3c]
mov rcx, qword [rsp + 0xc8]
xor rcx, rsp
call fcn.1400b5cf0
add rsp, 0xd8
ret

Function at 0x1400a4c40
Capabilities:
Check if file exists

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x58
mov rax, qword [0x140143098]
xor rax, rsp
mov qword [rsp + 0x48], rax
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0x28]
call fcn.1400b3360
lea rcx, [rsp + 0x28]
call fcn.1400b0220
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1400a4c85
mov byte [rsp + 0x20], 1
jmp 0x1400a4c8a
mov byte [rsp + 0x20], 0
movzx eax, byte [rsp + 0x20]
mov byte [rsp + 0x21], al
lea rcx, [rsp + 0x28]
call fcn.1400abef0
mov rcx, qword [rsp + 0x60]
call fcn.1400abec0
movzx eax, byte [rsp + 0x21]
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.1400b5cf0
add rsp, 0x58
ret