joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140033c80
Capabilities:
Hash data using murmur3

Disassembly:
cmp rsp, qword [r14 + 0x18]
jbe 0x140033f06
push rbp
mov rbp, rsp
sub rsp, 0x38
test byte [rax], al
lea rsi, [rax + 0x1298]
mov rcx, qword [rax + 0x1288]
sub rcx, rsi
shr rcx, 3
cmp rcx, 0x200
ja 0x140033efa
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x30], rcx
mov qword [rax + 0x1288], 0
cmp byte [0x1407f2b95], 0
jne 0x140033cda
xor edx, edx
xor ebx, ebx
jmp 0x140033d20
xor edx, edx
jmp 0x140033d05
mov qword [rsp + 0x28], rdx
mov rcx, qword [rax + rdx*8 + 0x1298]
mov rax, rcx
call fcn.140022000
mov rdx, qword [rsp + 0x28]
inc rdx
mov rax, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x30]
cmp rdx, rcx
jl 0x140033cde
add rax, 0x1288
call fcn.140033c00
add rsp, 0x38
pop rbp
ret
inc rdx
nop
cmp rdx, rcx
jge 0x140033e94
mov rsi, qword [rax + rdx*8 + 0x1298]
cmp rsi, 0x1000
jb 0x140033d1b
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rbx
mov rax, rsi
xor ebx, ebx
mov rcx, rbx
call fcn.1400156c0
test rax, rax
jne 0x140033d6c
mov rax, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x20]
jmp 0x140033d1b
mov rsi, qword [rbx + 0x48]
test byte [rsi], al
mov r8, rcx
shr r8, 3
movzx r9d, byte [rsi + r8]
and ecx, 7
mov r10d, 1
shl r10d, cl
nop
add rsi, r8
test r10b, r9b
je 0x140033dac
mov rax, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x20]
jmp 0x140033d1b
nop
lock or byte [rsi], r10b
mov rcx, qword [rbx + 0x18]
movabs rsi, 0x800000000000
lea r8, [rsi + rcx]
mov r9, r8
shr r8, 0x2a
nop
nop
nop
cmp r8, 0x40
jae 0x140033eed
lea r10, [0x140784c98]
mov r8, qword [r10 + r8*8]
test byte [r8], al
mov r10, rcx
shr r10, 0x10
and r10d, 0x3f
shr rcx, 0xd
and ecx, 7
mov r11d, 1
shl r11d, cl
shr r9, 0x16
and r9d, 0xfffff
mov r8, qword [r8 + r9*8]
test byte [r8], al
movzx r9d, byte [r8 + r10 + 0x1040]
lea r8, [r8 + r10]
lea r8, [r8 + 0x1040]
test r11b, r9b
jne 0x140033e2f
lock or byte [r8], r11b
movzx r8d, byte [rbx + 0x62]
test r8b, 1
je 0x140033e65
mov rax, qword [rsp + 0x48]
mov r8, qword [rax + 0x1270]
add r8, qword [rbx + 0x68]
mov qword [rax + 0x1270], r8
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x20]
jmp 0x140033d1b
mov r8, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x30]
cmp r8, rcx
jae 0x140033ee5
mov rbx, qword [rsp + 0x48]
mov qword [rbx + r8*8 + 0x1298], rax
inc r8
mov rax, rbx
mov rdx, qword [rsp + 0x28]
mov rbx, r8
jmp 0x140033d1b
cmp rbx, 0x200
ja 0x140033ed4
lea rdx, [rax + 0x1298]
lea rsi, [rax + 0x1260]
mov rcx, rbx
mov edi, 0x200
mov rbx, rdx
mov rax, rsi
call fcn.140028ae0
mov rax, qword [rsp + 0x48]
add rax, 0x1288
call fcn.140033c00
add rsp, 0x38
pop rbp
ret
mov rcx, rbx
mov edx, 0x200
nop dword [rax]
call fcn.14006d240
mov rax, r8
call fcn.14006d1c0
mov rax, r8
mov ecx, 0x40
call fcn.14006d1e0
mov edx, 0x200
nop
call fcn.14006d220
nop
mov qword [rsp + 8], rax
call fcn.140071aa0
mov rax, qword [rsp + 8]
jmp fcn.140033c80
Function at 0x140038fc0
Capabilities:
Get geographical location

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400390a1
push rbp
mov rbp, rsp
sub rsp, 0x10
mov qword [rsp + 0x20], rax
mov rcx, qword [rax + 0x18]
nop dword [rax + rax]
test rcx, rcx
je 0x140039023
mov rax, rcx
call fcn.140038fc0
mov rcx, qword [rsp + 0x20]
mov rdx, qword [rcx + 0x18]
cmp byte [rdx + 0x61], 0
jne 0x140039020
nop dword [rax]
call fcn.14003b740
lea rax, [0x140522698]
mov ebx, 1
call fcn.14003bfc0
call fcn.14003b7a0
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp byte [rax + 0x61], 0
jne 0x14003909a
call fcn.14003b740
lea rax, [0x14048c692]
mov ebx, 7
call fcn.14003bfc0
nop
call fcn.14003b7a0
mov rax, qword [rsp + 0x20]
mov rcx, qword [rax + 8]
mov rbx, qword [rax + 0x10]
mov rax, rcx
call fcn.140009b80
mov rax, qword [rsp + 0x20]
cmp byte [rax + 0x60], 0
je 0x140039085
call fcn.14003b740
lea rax, [0x14048f7d1]
mov ebx, 0xc
call fcn.14003bfc0
nop dword [rax + rax]
call fcn.14003b7a0
call fcn.14003b740
call fcn.14003b980
call fcn.14003b7a0
add rsp, 0x10
pop rbp
ret
add rsp, 0x10
pop rbp
nop
ret
mov qword [rsp + 8], rax
call fcn.14006aec0
mov rax, qword [rsp + 8]
jmp fcn.140038fc0
Function at 0x1400395c0
Capabilities:
Get geographical location

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400397b0
push rbp
mov rbp, rsp
sub rsp, 0x20
mov qword [rsp + 0x10], r14
cmp byte [rax + 0x62], 0
jne 0x1400395f4
nop dword [rax]
cmp qword [r14 + 0x20], rax
jne 0x14003979e
cmp byte [rax + 0x60], 0
jne 0x140039781
mov rdx, qword [rax + 0x28]
cmp dword [0x1407f30b0], 0
nop
je 0x140039611
call fcn.14006ce20
mov qword [r11], rdx
mov rsi, qword [rax]
mov qword [r11 + 8], rsi
mov qword [rsp + 0x30], rax
mov qword [rax], rdx
mov rdx, qword [rsp + 0x10]
nop
jmp 0x14003962c
mov rdx, qword [rsp + 0x10]
mov rax, qword [rsp + 0x30]
mov rsi, qword [rax + 0x50]
test rsi, rsi
je 0x1400396c0
movzx edi, byte [rsi]
nop dword [rax]
test dil, dil
jne 0x140039672
cmp dword [0x1407f30b0], 0
je 0x14003965a
mov rcx, qword [rax + 0x50]
call fcn.14006ce00
mov qword [r11], rcx
mov qword [rax + 0x50], 0
jmp 0x1400396c0
call fcn.1400397e0
test al, al
jne 0x140039622
jmp 0x140039776
lea edx, [rdi + rdi]
lea edx, [rdx + 1]
bsr ecx, edx
lea rdx, [rcx - 1]
mov rbx, rcx
mov rcx, rdx
mov r8d, 1
shl r8d, cl
cmp rcx, 0x20
sbb edx, edx
and r8d, edx
not r8d
and r8d, edi
mov byte [rsi], r8b
mov rdx, qword [rax + 0x58]
mov rax, qword [rdx + rbx*8 - 8]
mov ebx, 1
add rsp, 0x20
pop rbp
ret
mov qword [rcx + 0x28], rax
mov rax, qword [rsp + 0x30]
mov rdx, rcx
mov rcx, qword [rdx + 0x28]
test rcx, rcx
je 0x140039664
mov rbx, qword [rax + 0x30]
cmp qword [rcx + 8], rbx
jne 0x140039664
cmp byte [rcx + 1], 0
je 0x14003970c
mov rax, rcx
nop dword [rax]
call fcn.140038740
cmp dword [0x1407f30b0], 0
jne 0x1400396f5
mov rcx, qword [rsp + 0x10]
jmp 0x1400396b4
call fcn.14006ce20
mov qword [r11], rax
mov rcx, qword [rsp + 0x10]
mov rdx, qword [rcx + 0x28]
mov qword [r11 + 8], rdx
jmp 0x1400396b4
mov rbx, qword [rcx + 0x18]
cmp dword [0x1407f30b0], 0
je 0x140039728
mov rsi, qword [rcx + 0x18]
nop dword [rax]
call fcn.14006ce00
mov qword [r11], rsi
mov qword [rsp + 0x18], rbx
mov qword [rcx + 0x18], 0
mov rsi, qword [rcx + 0x10]
mov qword [rax + 0x48], rsi
mov rsi, qword [rcx + 0x20]
cmp dword [0x1407f30b0], 0
je 0x14003975a
call fcn.14006ce20
mov qword [r11], rsi
mov rdi, qword [rdx + 0x28]
mov qword [r11 + 8], rdi
mov qword [rdx + 0x28], rsi
mov rax, rcx
call fcn.140038ac0
mov rax, qword [rsp + 0x18]
mov ebx, 1
add rsp, 0x20
pop rbp
ret
xor eax, eax
xor ebx, ebx
add rsp, 0x20
pop rbp
nop
ret
lea rax, [0x1404c7f70]
call fcn.14006ad20
lea rax, [0x140491883]
mov ebx, 0xf
call fcn.140039ca0
lea rax, [0x140491874]
mov ebx, 0xf
call fcn.140039ca0
nop
mov qword [rsp + 8], rax
call fcn.14006aec0
mov rax, qword [rsp + 8]
nop
jmp fcn.1400395c0
Function at 0x14003d740
Capabilities:
Get geographical location

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14003d7cf
push rbp
mov rbp, rsp
sub rsp, 0x18
mov rax, qword [0x14076f170]
sub rax, qword [0x14076f180]
mov ecx, dword [0x1407f2c0c]
sub eax, ecx
mov ecx, dword [0x1407f2c04]
sub eax, ecx
mov ecx, dword [0x14076f178]
cmp ecx, eax
jl 0x14003d781
add rsp, 0x18
pop rbp
nop
ret
mov dword [rsp + 0x14], ecx
call fcn.14003b740
lea rax, [0x140498ad5]
mov ebx, 0x19
call fcn.14003bfc0
mov eax, dword [rsp + 0x14]
movsxd rax, eax
call fcn.14003bde0
lea rax, [0x140490f57]
mov ebx, 0xe
call fcn.14003bfc0
call fcn.14003b7a0
lea rax, [0x140492d33]
mov ebx, 0x11
call fcn.140039ca0
nop
call fcn.14006aec0
jmp fcn.14003d740

Function at 0x140040e80
Capabilities:
Get geographical location

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x140040f88
push rbp
mov rbp, rsp
sub rsp, 0x20
mov rcx, qword [r14 + 0x30]
cmp dword [rcx + 0xd8], 0
nop dword [rax]
jne 0x140040f76
cmp qword [rcx + 0xa0], 0
jne 0x140040f65
cmp byte [rcx + 0xe4], 0
nop dword [rax + rax]
jne 0x140040f4f
mov qword [rsp + 0x18], r14
nop
nop
lea rax, [0x14076f158]
call fcn.14000cf80
mov rcx, qword [rsp + 0x18]
mov rax, qword [rcx + 0x30]
call fcn.140049ae0
nop
nop
lea rax, [0x14076f158]
call fcn.14000d1e0
mov qword [rsp + 0x10], r14
mov rax, qword [r14 + 0x30]
test byte [rax], al
add rax, 0x110
nop
call fcn.14000d360
mov rcx, qword [rsp + 0x10]
mov rcx, qword [rcx + 0x30]
mov qword [rcx + 0x110], 0
mov rcx, qword [rsp + 0x18]
mov rdx, qword [rcx + 0x30]
mov rax, qword [rdx + 0xa8]
call fcn.140047e20
mov rcx, qword [rsp + 0x18]
mov rcx, qword [rcx + 0x30]
mov qword [rcx + 0xa8], 0
add rsp, 0x20
pop rbp
ret
lea rax, [0x140490f65]
mov ebx, 0xe
nop dword [rax + rax]
call fcn.140039ca0
lea rax, [0x140491892]
mov ebx, 0xf
call fcn.140039ca0
lea rax, [0x1404944eb]
mov ebx, 0x13
call fcn.140039ca0
nop
call fcn.14006aec0
jmp fcn.140040e80
Function at 0x140044160
Capabilities:
Get geographical location

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14004440b
push rbp
mov rbp, rsp
sub rsp, 0x40
mov qword [rsp + 0x50], rax
mov byte [rsp + 0x58], bl
mov rdx, qword [0x1407f2b50]
test rdx, rdx
jne 0x14004418d
xor ecx, ecx
xor edx, edx
jmp 0x1400441a2
call fcn.14005b960
mov rcx, rbx
mov rdx, rax
mov rax, qword [rsp + 0x50]
movzx ebx, byte [rsp + 0x58]
nop
mov esi, dword [rax + 0x90]
and esi, 0xffffefff
cmp esi, 2
jne 0x1400442de
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x30], rdx
mov ebx, 2
mov ecx, 1
call fcn.14003e620
mov rbx, qword [rsp + 0x18]
test rbx, rbx
je 0x140044240
movzx edx, byte [rsp + 0x58]
test dl, dl
je 0x1400441f5
mov rax, qword [rsp + 0x30]
mov ecx, 2
call fcn.14005c5a0
jmp 0x140044205
nop
mov rax, qword [rsp + 0x30]
mov ecx, 1
call fcn.14005c5a0
nop
mov ecx, 1
mov rdx, qword [rsp + 0x30]
lock xadd qword [rdx + 0x398], rcx
mov ecx, dword [rdx + 0xd8]
lea ebx, [rcx - 1]
nop
mov dword [rdx + 0xd8], ebx
cmp ecx, 1
jne 0x140044240
cmp byte [r14 + 0xb1], 0
je 0x140044240
mov qword [r14 + 0x10], 0xfffffffffffffade
mov rcx, qword [r14 + 0x30]
mov rcx, qword [rcx + 0x90]
xor edx, edx
nop
nop
mov qword [rcx + 0x30], rdx
mov rcx, qword [r14 + 0x30]
xor edx, edx
nop
mov qword [rcx + 0x90], rdx
nop
nop
lea rax, [0x14076f158]
call fcn.14000cf80
nop
nop
mov rcx, qword [rsp + 0x50]
mov qword [rcx + 0xa0], 0
mov rdx, qword [0x14076f1b0]
test rdx, rdx
je 0x140044299
mov rbx, rcx
mov qword [rdx + 0xa0], rcx
jmp 0x1400442a7
mov rdx, rcx
nop
mov qword [0x14076f1a8], rcx
mov rbx, rdx
nop
mov qword [0x14076f1b0], rbx
inc dword [0x14076f1b8]
nop
nop
lea rax, [0x14076f158]
nop
call fcn.14000d1e0
cmp byte [0x1407f2b99], 0
je 0x1400442d3
call fcn.140041600
call fcn.140043aa0
add rsp, 0x40
pop rbp
ret
mov qword [rsp + 0x38], r14
nop
nop
mov ecx, dword [rax + 0x90]
mov ecx, ecx
mov qword [rsp + 0x28], rcx
mov rdx, qword [rax + 0x98]
mov qword [rsp + 0x20], rdx
nop
call fcn.14003b740
lea rax, [0x140493877]
mov ebx, 0x12
call fcn.14003bfc0
mov rax, qword [rsp + 0x50]
nop dword [rax + rax]
call fcn.14003bf40
lea rax, [0x14048c653]
mov ebx, 7
call fcn.14003bfc0
mov rax, qword [rsp + 0x20]
nop dword [rax + rax]
call fcn.14003bd00
lea rax, [0x140494382]
mov ebx, 0x13
call fcn.14003bfc0
mov rax, qword [rsp + 0x28]
nop dword [rax + rax]
call fcn.14003bd00
call fcn.14003b980
call fcn.14003b7a0
mov rax, qword [rsp + 0x38]
mov ecx, dword [rax + 0x90]
mov ecx, ecx
mov qword [rsp + 0x28], rcx
mov rdx, qword [rax + 0x98]
mov qword [rsp + 0x20], rdx
call fcn.14003b740
lea rax, [0x140493889]
mov ebx, 0x12
nop
call fcn.14003bfc0
mov rax, qword [rsp + 0x38]
call fcn.14003bf40
lea rax, [0x14048c653]
mov ebx, 7
nop dword [rax + rax]
call fcn.14003bfc0
mov rax, qword [rsp + 0x20]
call fcn.14003bd00
lea rax, [0x14049449f]
mov ebx, 0x13
nop dword [rax + rax]
call fcn.14003bfc0
mov rax, qword [rsp + 0x28]
call fcn.14003bd00
call fcn.14003b980
call fcn.14003b7a0
lea rax, [0x14048f7e9]
mov ebx, 0xc
call fcn.140039ca0
nop
mov qword [rsp + 8], rax
mov byte [rsp + 0x10], bl
call fcn.14006aec0
mov rax, qword [rsp + 8]
movzx ebx, byte [rsp + 0x10]
jmp fcn.140044160
Function at 0x140044560
Capabilities:
Get geographical location

Disassembly:
cmp rsp, qword [r14 + 0x18]
jbe 0x14004482b
push rbp
mov rbp, rsp
sub rsp, 0x58
mov qword [rsp + 0x68], rax
nop
mov edx, dword [rax + 0x90]
and edx, 0xffffefff
cmp edx, 2
jne 0x1400446ff
cmp byte [rax + 0xb4], 0
je 0x1400445c0
mov rcx, qword [rax + 0x40]
mov rax, rcx
nop dword [rax]
call fcn.140056840
test rax, rax
je 0x1400446ee
movzx edx, byte [rax + 0x29]
test dl, 2
jne 0x14004468b
mov rax, qword [rsp + 0x68]
mov ebx, 2
mov ecx, 0x1009
call fcn.14003eac0
mov rdx, qword [r14 + 0x30]
mov rdx, qword [rdx + 0x90]
xor esi, esi
nop
nop
mov qword [rdx + 0x30], rsi
mov rdx, qword [r14 + 0x30]
xor esi, esi
nop
mov qword [rdx + 0x90], rsi
mov rdx, qword [0x1407f2b50]
test rdx, rdx
jne 0x140044602
xor ebx, ebx
xor eax, eax
jmp 0x140044607
call fcn.14005b960
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x40], rax
test rbx, rbx
je 0x140044625
mov ecx, 0xb
xor edi, edi
nop dword [rax]
call fcn.14005c6e0
mov rax, qword [rsp + 0x68]
mov ebx, 0x1009
mov ecx, 9
call fcn.14003e180
mov rdx, qword [rsp + 0x28]
nop
test rdx, rdx
je 0x140044680
nop
mov eax, 1
mov rcx, qword [rsp + 0x40]
lock xadd qword [rcx + 0x398], rax
mov eax, dword [rcx + 0xd8]
lea edx, [rax - 1]
nop
mov dword [rcx + 0xd8], edx
cmp eax, 1
jne 0x140044680
cmp byte [r14 + 0xb1], 0
je 0x140044680
mov qword [r14 + 0x10], 0xfffffffffffffade
call fcn.140043aa0
add rsp, 0x58
pop rbp
ret
mov ecx, dword [rax + 4]
mov rax, rbx
mov ebx, ecx
call fcn.1400564c0
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x20], rbx
call fcn.14003b740
lea rax, [0x14049f94b]
mov ebx, 0x25
call fcn.14003bfc0
mov rax, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x20]
call fcn.14003bfc0
lea rax, [0x1404938ad]
mov ebx, 0x12
call fcn.14003bfc0
call fcn.14003b7a0
lea rax, [0x1404918b0]
mov ebx, 0xf
call fcn.140039ca0
lea rax, [0x140495db8]
mov ebx, 0x15
call fcn.140039ca0
mov qword [rsp + 0x50], r14
nop
nop
mov ecx, dword [rax + 0x90]
mov ecx, ecx
mov qword [rsp + 0x38], rcx
mov rdx, qword [rax + 0x98]
mov qword [rsp + 0x30], rdx
nop
call fcn.14003b740
lea rax, [0x140493877]
mov ebx, 0x12
call fcn.14003bfc0
mov rax, qword [rsp + 0x68]
nop dword [rax + rax]
call fcn.14003bf40
lea rax, [0x14048c653]
mov ebx, 7
call fcn.14003bfc0
mov rax, qword [rsp + 0x30]
nop dword [rax + rax]
call fcn.14003bd00
lea rax, [0x140494382]
mov ebx, 0x13
call fcn.14003bfc0
mov rax, qword [rsp + 0x38]
nop dword [rax + rax]
call fcn.14003bd00
call fcn.14003b980
call fcn.14003b7a0
mov rax, qword [rsp + 0x50]
mov ecx, dword [rax + 0x90]
mov ecx, ecx
mov qword [rsp + 0x38], rcx
mov rdx, qword [rax + 0x98]
mov qword [rsp + 0x30], rdx
call fcn.14003b740
lea rax, [0x140493889]
mov ebx, 0x12
nop
call fcn.14003bfc0
mov rax, qword [rsp + 0x50]
call fcn.14003bf40
lea rax, [0x14048c653]
mov ebx, 7
nop dword [rax + rax]
call fcn.14003bfc0
mov rax, qword [rsp + 0x30]
call fcn.14003bd00
lea rax, [0x14049449f]
mov ebx, 0x13
nop dword [rax + rax]
call fcn.14003bfc0
mov rax, qword [rsp + 0x38]
call fcn.14003bd00
call fcn.14003b980
call fcn.14003b7a0
lea rax, [0x14048f7e9]
mov ebx, 0xc
call fcn.140039ca0
nop
mov qword [rsp + 8], rax
call fcn.140071aa0
mov rax, qword [rsp + 8]
jmp fcn.140044560
Function at 0x140046e60
Capabilities:
Get geographical location

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x140046fca
push rbp
mov rbp, rsp
sub rsp, 0x10
mov dword [rsp + 0x28], ebx
mov dword [rax], ebx
mov dword [rax + 4], 3
mov qword [rax + 0x9b8], 0
mov qword [rax + 0x9c0], 0x80
lea rcx, [rax + 0x9c8]
lea rdx, [rax + 0x80]
cmp dword [0x1407f30b0], 0
je 0x140046ecb
call fcn.14006ce60
mov qword [r11], rcx
mov rsi, qword [rax + 0x9b0]
mov qword [r11 + 8], rsi
mov qword [r11 + 0x10], rdx
mov rsi, qword [rax + 0x68]
mov qword [r11 + 0x18], rsi
mov qword [rsp + 0x20], rax
mov qword [rax + 0x9b0], rcx
mov qword [rax + 0x70], 0
mov qword [rax + 0x78], 0x20
mov qword [rax + 0x68], rdx
lea rcx, [rax + 0x1288]
mov rax, rcx
call fcn.140033c00
mov rcx, qword [rsp + 0x20]
cmp qword [rcx + 0x40], 0
je 0x140046f0c
mov edx, dword [rsp + 0x28]
jmp 0x140046f41
mov edx, dword [rsp + 0x28]
test edx, edx
jne 0x140046f2f
mov rsi, qword [0x1407f2da0]
nop dword [rax + rax]
test rsi, rsi
je 0x140046fb8
mov qword [rcx + 0x40], rsi
jmp 0x140046f41
call fcn.1400170c0
mov rcx, qword [rsp + 0x20]
mov qword [rcx + 0x40], rax
mov edx, dword [rsp + 0x28]
mov ecx, edx
sar edx, 0x1f
shr edx, 0x1b
add edx, ecx
mov ebx, edx
and edx, 0xffffffe0
sub ecx, edx
test ecx, ecx
jl 0x140046fb3
mov rdx, qword [0x14076b238]
sar ebx, 5
mov esi, 1
shl esi, cl
movsxd rax, ebx
cmp ecx, 0x20
sbb ebx, ebx
and esi, ebx
cmp rdx, rax
jbe 0x140046fab
mov rdx, qword [0x14076b230]
lea rdx, [rdx + rax*4]
lock or dword [rdx], esi
mov rcx, qword [0x14076b218]
cmp rcx, rax
jbe 0x140046fa6
mov rcx, qword [0x14076b210]
lea rax, [rcx + rax*4]
not esi
lock and dword [rax], esi
add rsp, 0x10
pop rbp
ret
call fcn.14006d1c0
mov rcx, rdx
call fcn.14006d1c0
call fcn.140038520
lea rax, [0x1404918bf]
mov ebx, 0xf
call fcn.140039ca0
nop
mov qword [rsp + 8], rax
mov dword [rsp + 0x10], ebx
call fcn.14006aec0
mov rax, qword [rsp + 8]
mov ebx, dword [rsp + 0x10]
jmp fcn.140046e60
Function at 0x140048120
Capabilities:
Get geographical location

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14004823c
push rbp
mov rbp, rsp
sub rsp, 0x30
mov rcx, qword [r14 + 0x30]
mov rax, qword [rcx + 0xa0]
nop dword [rax]
test rax, rax
je 0x14004822a
mov qword [rsp + 0x28], rcx
mov rdx, qword [rax + 0x38]
mov qword [rsp + 0x10], rdx
nop
cmp rdx, rcx
jne 0x140048183
cmp dword [rax + 4], 1
jne 0x140048183
mov qword [rcx + 0xa0], 0
mov qword [rax + 0x38], 0
mov dword [rax + 4], 0
add rsp, 0x30
pop rbp
ret
mov qword [rsp + 0x20], rax
mov ecx, dword [rax + 4]
mov qword [rsp + 0x18], rcx
call fcn.14003b740
lea rax, [0x14048f819]
mov ebx, 0xc
call fcn.14003bfc0
mov rax, qword [rsp + 0x28]
call fcn.14003bf40
lea rax, [0x14048c007]
mov ebx, 6
nop dword [rax]
call fcn.14003bfc0
mov rax, qword [rsp + 0x20]
call fcn.14003bf40
lea rax, [0x14048c00d]
mov ebx, 6
nop dword [rax + rax]
call fcn.14003bfc0
mov rax, qword [rsp + 0x10]
call fcn.14003be40
lea rax, [0x14048ea13]
mov ebx, 0xb
nop dword [rax + rax]
call fcn.14003bfc0
mov rax, qword [rsp + 0x18]
call fcn.14003bd00
call fcn.14003b980
call fcn.14003b7a0
lea rax, [0x140498b20]
mov ebx, 0x19
call fcn.140039ca0
lea rax, [0x140495dcd]
mov ebx, 0x15
call fcn.140039ca0
nop
nop dword [rax]
call fcn.14006aec0
jmp fcn.140048120
Function at 0x140049d40
Capabilities:
Encode data using base64

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x140049ea7
push rbp
mov rbp, rsp
sub rsp, 0x18
mov ecx, dword [rax + 0x190]
mov edx, dword [rax + 0x194]
mov rsi, qword [rax + 0x998]
mov edi, dword [rax + 0x194]
cmp edi, edx
jne 0x140049d52
cmp edx, ecx
jne 0x140049e95
nop word [rax + rax]
test rsi, rsi
jne 0x140049e95
mov qword [rsp + 0x28], rax
test rbx, rbx
jne 0x140049db4
nop
call fcn.14006eae0
xorps xmm15, xmm15
mov r14, qword [0x1407f2f18]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rbx, qword [rsp]
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x10], rbx
call fcn.140049c60
mov rcx, qword [rsp + 0x28]
mov edx, dword [rcx]
mov ebx, edx
sar edx, 0x1f
shr edx, 0x1b
add edx, ebx
mov esi, edx
and edx, 0xffffffe0
sub ebx, edx
test ebx, ebx
jl 0x140049e90
mov rdx, qword [0x14076b218]
sar esi, 5
mov rax, rcx
mov ecx, ebx
mov edi, 1
shl edi, cl
movsxd rsi, esi
cmp ecx, 0x20
sbb r8d, r8d
and edi, r8d
cmp rdx, rsi
jbe 0x140049e85
mov rcx, qword [0x14076b210]
lea rcx, [rcx + rsi*4]
lock or dword [rcx], edi
mov rcx, qword [0x14076f190]
mov qword [rax + 8], rcx
mov rcx, rax
nop
mov qword [0x14076f190], rax
nop
mov edx, 1
lea rsi, [0x14076f198]
lock xadd dword [rsi], edx
mov rdx, qword [rcx + 0x1248]
shr rdx, 0x3d
test dl, dl
jne 0x140049e73
mov rax, qword [rsp + 0x10]
movabs rdx, 0x1fffffffffffffff
and rdx, rax
bts rdx, 0x3f
nop
nop
xchg qword [rcx + 0x1248], rdx
add rsp, 0x18
pop rbp
ret
lea rax, [0x1404a0e12]
mov ebx, 0x28
nop
call fcn.140039ca0
mov rax, rsi
mov rcx, rdx
call fcn.14006d1c0
call fcn.140038520
lea rax, [0x14049e9f6]
mov ebx, 0x23
call fcn.140039ca0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.14006aec0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.140049d40
Function at 0x14004ada0
Capabilities:
Get geographical location

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14004af26
push rbp
mov rbp, rsp
sub rsp, 0x48
nop
nop
lea rax, [0x1407f3ec0]
nop dword [rax + rax]
call fcn.14000cf80
cmp byte [0x1407f4018], 0
je 0x14004addf
lea rax, [0x140490f8f]
mov ebx, 0xe
call fcn.140039d80
mov rdx, qword [0x14076b170]
test rdx, rdx
je 0x14004adf9
mov rsi, qword [0x14076b178]
xor eax, eax
jmp 0x14004aea6
lea rax, [0x1407f3ec8]
mov ebx, 0x20
mov rcx, rbx
call fcn.140035c80
cmp rax, 0x20
je 0x14004ae2e
mov byte [0x1407f2b9c], 1
lea rax, [0x1407f3ec8]
mov ebx, 0x20
mov rcx, rbx
call fcn.14004af40
movups xmm0, xmmword [0x1407f3ec8]
movups xmmword [rsp + 0x28], xmm0
movups xmm0, xmmword [0x1407f3ed8]
movups xmmword [rsp + 0x38], xmm0
movups xmm0, xmmword [rsp + 0x28]
movups xmmword [rsp], xmm0
movups xmm0, xmmword [rsp + 0x38]
movups xmmword [rsp + 0x10], xmm0
lea rax, [0x1407f3ee8]
call fcn.140004280
movups xmmword [0x1407f3ec8], xmm15
movups xmmword [0x1407f3ed8], xmm15
mov byte [0x1407f4018], 1
nop
nop
lea rax, [0x1407f3ec0]
call fcn.14000d1e0
add rsp, 0x48
pop rbp
ret
lea r9, [0x1407f3ec8]
movzx r10d, byte [r8 + r9]
xor r10d, edi
mov byte [r9 + r8], r10b
inc rax
cmp rax, rsi
jge 0x14004aec8
mov rdi, rax
and rdi, 0xffffffffffffffe0
mov r8, rax
sub r8, rdi
movzx edi, byte [rax + rdx]
nop dword [rax]
cmp r8, 0x20
jb 0x14004ae90
jmp 0x14004af18
mov rbx, qword [0x14076b178]
test rbx, rbx
je 0x14004aee5
mov rax, qword [0x14076b170]
nop dword [rax + rax]
call fcn.14006d880
movups xmmword [0x14076b178], xmm15
cmp dword [0x1407f30b0], 0
je 0x14004af08
mov rcx, qword [0x14076b170]
nop dword [rax]
call fcn.14006ce00
mov qword [r11], rcx
mov qword [0x14076b170], 0
jmp 0x14004ae2e
mov rax, r8
mov ecx, 0x20
call fcn.14006d1c0
nop
call fcn.14006aec0
jmp fcn.14004ada0

Function at 0x14004b080
Capabilities:
Get geographical location

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14004b112
push rbp
mov rbp, rsp
sub rsp, 0x18
nop
nop
lea rax, [0x1407f3ec0]
nop dword [rax + rax]
call fcn.14000cf80
cmp byte [0x1407f4018], 0
jne 0x14004b0ce
lea rax, [0x1404918dd]
mov ebx, 0xf
call fcn.140039d80
nop
jmp 0x14004b0ce
lea rax, [0x1407f3ee8]
call fcn.140004320
mov ecx, dword [0x1407f4008]
nop
cmp dword [0x1407f400c], ecx
jbe 0x14004b0c2
lea edx, [rcx + 1]
mov dword [0x1407f4008], edx
and ecx, 0x1f
lea rdx, [0x1407f3ee8]
mov rcx, qword [rdx + rcx*8]
mov qword [rsp + 0x10], rcx
nop
nop
lea rax, [0x1407f3ec0]
call fcn.14000d1e0
mov rax, qword [rsp + 0x10]
add rsp, 0x18
pop rbp
ret
call fcn.14006aec0
jmp fcn.14004b080

Function at 0x14004b120
Capabilities:
Get geographical location

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14004b179
push rbp
mov rbp, rsp
sub rsp, 0x10
nop
nop
lea rax, [0x1407f3ec0]
call fcn.14000cf80
cmp byte [0x1407f4018], 0
jne 0x14004b156
lea rax, [0x1404918dd]
mov ebx, 0xf
call fcn.140039d80
lea rax, [0x1407f3ee8]
nop dword [rax]
call fcn.140004400
nop
nop
lea rax, [0x1407f3ec0]
call fcn.14000d1e0
add rsp, 0x10
pop rbp
ret
call fcn.14006aec0
nop
jmp fcn.14004b120