joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14005e4a0
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x40
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rax, str.queencreek
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x299e
xor ebx, ebx
mov qword [rsp + 0x20], rbx
lea r9d, [rbx + 4]
lea r8d, [rbx + 2]
lea rdx, str._nEnergy_Monitor_Service_:_esrv_svc_version__d._d._d._d___s___
call fcn.1400010a0
lea ecx, [rbx + 1]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rax, [0x1400e86a4]
mov qword [rsp + 0x28], rax
lea rax, [0x1400e8648]
mov qword [rsp + 0x20], rax
lea r9, [0x1400e8584]
lea r8, str.2011
lea rdx, str.using_PL_version__s._s._s___s__n
call fcn.1400010a0
lea rcx, [0x140113930]
call fcn.1400100a0
lea rdx, [0x140125448]
call fcn.1400a40a0
cmp dword [0x140199730], 1
jne 0x14005e55b
lea rcx, [0x140199738]
call fcn.140097fe0
mov qword [0x140130aa8], rbx
mov dword [0x140199730], ebx
mov rcx, qword [0x140133c88]
test rcx, rcx
je 0x14005e574
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133c88], rbx
mov rcx, qword [0x140133ca0]
test rcx, rcx
je 0x14005e58d
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133ca0], rbx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
add rsp, 0x40
pop rbx
ret

Function at 0x14005e5b0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x40
lea rax, str._nUninstall_the_energy_server_service._n
mov qword [rsp + 0x28], rax
lea rax, str._nUsage:__esrv_svc___uninstall_n
mov qword [rsp + 0x30], rax
xor esi, esi
mov edi, esi
mov dword [rsp + 0x20], esi
nop
cmp edi, 2
jge 0x14005e60f
movsxd rbx, edi
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
mov r8, qword [rsp + rbx*8 + 0x28]
lea rdx, [0x1400e8824]
call fcn.1400010a0
inc edi
mov dword [rsp + 0x20], edi
jmp 0x14005e5e0
lea rcx, [0x140113930]
call fcn.1400100a0
lea rdx, [0x140125448]
call fcn.1400a40a0
cmp dword [0x140199730], 1
jne 0x14005e649
lea rcx, [0x140199738]
call fcn.140097fe0
mov qword [0x140130aa8], rsi
mov dword [0x140199730], esi
mov rcx, qword [0x140133c88]
test rcx, rcx
je 0x14005e662
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133c88], rsi
mov rcx, qword [0x140133ca0]
test rcx, rcx
je 0x14005e67b
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133ca0], rsi
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
add rsp, 0x40
pop rdi
ret
Function at 0x14005e6a0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x40
lea rax, str._nInstall_the_energy_server_service._n
mov qword [rsp + 0x28], rax
lea rax, str._nUsage:__esrv_svc___install_n
mov qword [rsp + 0x30], rax
xor esi, esi
mov edi, esi
mov dword [rsp + 0x20], esi
nop
cmp edi, 2
jge 0x14005e6ff
movsxd rbx, edi
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
mov r8, qword [rsp + rbx*8 + 0x28]
lea rdx, [0x1400e8984]
call fcn.1400010a0
inc edi
mov dword [rsp + 0x20], edi
jmp 0x14005e6d0
lea rcx, [0x140113930]
call fcn.1400100a0
lea rdx, [0x140125448]
call fcn.1400a40a0
cmp dword [0x140199730], 1
jne 0x14005e739
lea rcx, [0x140199738]
call fcn.140097fe0
mov qword [0x140130aa8], rsi
mov dword [0x140199730], esi
mov rcx, qword [0x140133c88]
test rcx, rcx
je 0x14005e752
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133c88], rsi
mov rcx, qword [0x140133ca0]
test rcx, rcx
je 0x14005e76b
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133ca0], rsi
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
add rsp, 0x40
pop rdi
ret

Function at 0x14005e790
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x40
lea rax, str._nShutdown_the_energy_server_service._n
mov qword [rsp + 0x28], rax
lea rax, str._nUsage:__esrv_svc___shutdown_n
mov qword [rsp + 0x30], rax
xor esi, esi
mov edi, esi
mov dword [rsp + 0x20], esi
nop
cmp edi, 2
jge 0x14005e7ef
movsxd rbx, edi
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
mov r8, qword [rsp + rbx*8 + 0x28]
lea rdx, [0x1400e8a28]
call fcn.1400010a0
inc edi
mov dword [rsp + 0x20], edi
jmp 0x14005e7c0
lea rcx, [0x140113930]
call fcn.1400100a0
lea rdx, [0x140125448]
call fcn.1400a40a0
cmp dword [0x140199730], 1
jne 0x14005e829
lea rcx, [0x140199738]
call fcn.140097fe0
mov qword [0x140130aa8], rsi
mov dword [0x140199730], esi
mov rcx, qword [0x140133c88]
test rcx, rcx
je 0x14005e842
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133c88], rsi
mov rcx, qword [0x140133ca0]
test rcx, rcx
je 0x14005e85b
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133ca0], rsi
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
add rsp, 0x40
pop rdi
ret
Function at 0x14005e880
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x40
lea rax, [0x1400e8988]
mov qword [rsp + 0x28], rax
lea rax, [0x1400eaf38]
mov qword [rsp + 0x30], rax
xor esi, esi
mov edi, esi
mov dword [rsp + 0x20], esi
nop
cmp edi, 2
jge 0x14005e8df
movsxd rbx, edi
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
mov r8, qword [rsp + rbx*8 + 0x28]
lea rdx, [0x1400e8aa8]
call fcn.1400010a0
inc edi
mov dword [rsp + 0x20], edi
jmp 0x14005e8b0
lea rcx, [0x140113930]
call fcn.1400100a0
lea rdx, [0x140125448]
call fcn.1400a40a0
cmp dword [0x140199730], 1
jne 0x14005e919
lea rcx, [0x140199738]
call fcn.140097fe0
mov qword [0x140130aa8], rsi
mov dword [0x140199730], esi
mov rcx, qword [0x140133c88]
test rcx, rcx
je 0x14005e932
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133c88], rsi
mov rcx, qword [0x140133ca0]
test rcx, rcx
je 0x14005e94b
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133ca0], rsi
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
add rsp, 0x40
pop rdi
ret

Function at 0x14005e970
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x40
lea rax, str._nResume_the_energy_server_service._n
mov qword [rsp + 0x28], rax
lea rax, [0x1400eafe8]
mov qword [rsp + 0x30], rax
xor esi, esi
mov edi, esi
mov dword [rsp + 0x20], esi
nop
cmp edi, 2
jge 0x14005e9cf
movsxd rbx, edi
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
mov r8, qword [rsp + rbx*8 + 0x28]
lea rdx, [0x1400e8b04]
call fcn.1400010a0
inc edi
mov dword [rsp + 0x20], edi
jmp 0x14005e9a0
lea rcx, [0x140113930]
call fcn.1400100a0
lea rdx, [0x140125448]
call fcn.1400a40a0
cmp dword [0x140199730], 1
jne 0x14005ea09
lea rcx, [0x140199738]
call fcn.140097fe0
mov qword [0x140130aa8], rsi
mov dword [0x140199730], esi
mov rcx, qword [0x140133c88]
test rcx, rcx
je 0x14005ea22
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133c88], rsi
mov rcx, qword [0x140133ca0]
test rcx, rcx
je 0x14005ea3b
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133ca0], rsi
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
add rsp, 0x40
pop rdi
ret
Function at 0x14005ea60
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x40
lea rax, str._nRestart_the_energy_server_service._n
mov qword [rsp + 0x28], rax
lea rax, str._nUsage:__esrv_svc___restart_n
mov qword [rsp + 0x30], rax
xor esi, esi
mov edi, esi
mov dword [rsp + 0x20], esi
nop
cmp edi, 2
jge 0x14005eabf
movsxd rbx, edi
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
mov r8, qword [rsp + rbx*8 + 0x28]
lea rdx, [0x1400e8b84]
call fcn.1400010a0
inc edi
mov dword [rsp + 0x20], edi
jmp 0x14005ea90
lea rcx, [0x140113930]
call fcn.1400100a0
lea rdx, [0x140125448]
call fcn.1400a40a0
cmp dword [0x140199730], 1
jne 0x14005eaf9
lea rcx, [0x140199738]
call fcn.140097fe0
mov qword [0x140130aa8], rsi
mov dword [0x140199730], esi
mov rcx, qword [0x140133c88]
test rcx, rcx
je 0x14005eb12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133c88], rsi
mov rcx, qword [0x140133ca0]
test rcx, rcx
je 0x14005eb2b
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133ca0], rsi
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
add rsp, 0x40
pop rdi
ret

Function at 0x14005eb50
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x40
lea rax, str._nDisplay_the_energy_server_service_status._n
mov qword [rsp + 0x28], rax
lea rax, str._nUsage:__esrv_svc___status_n
mov qword [rsp + 0x30], rax
xor esi, esi
mov edi, esi
mov dword [rsp + 0x20], esi
nop
cmp edi, 2
jge 0x14005ebaf
movsxd rbx, edi
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
mov r8, qword [rsp + rbx*8 + 0x28]
lea rdx, [0x1400e8c28]
call fcn.1400010a0
inc edi
mov dword [rsp + 0x20], edi
jmp 0x14005eb80
lea rcx, [0x140113930]
call fcn.1400100a0
lea rdx, [0x140125448]
call fcn.1400a40a0
cmp dword [0x140199730], 1
jne 0x14005ebe9
lea rcx, [0x140199738]
call fcn.140097fe0
mov qword [0x140130aa8], rsi
mov dword [0x140199730], esi
mov rcx, qword [0x140133c88]
test rcx, rcx
je 0x14005ec02
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133c88], rsi
mov rcx, qword [0x140133ca0]
test rcx, rcx
je 0x14005ec1b
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133ca0], rsi
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
add rsp, 0x40
pop rdi
ret
Function at 0x14005ec40
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x40
lea rax, str._nSend_a_control_string_to_the_device._n
mov qword [rsp + 0x28], rax
lea rax, str._nUsage:__esrv_svc___device_control_guid_command._n
mov qword [rsp + 0x30], rax
xor esi, esi
mov edi, esi
mov dword [rsp + 0x20], esi
nop
cmp edi, 2
jge 0x14005ec9f
movsxd rbx, edi
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
mov r8, qword [rsp + rbx*8 + 0x28]
lea rdx, [0x1400e8ca4]
call fcn.1400010a0
inc edi
mov dword [rsp + 0x20], edi
jmp 0x14005ec70
lea rcx, [0x140113930]
call fcn.1400100a0
lea rdx, [0x140125448]
call fcn.1400a40a0
cmp dword [0x140199730], 1
jne 0x14005ecd9
lea rcx, [0x140199738]
call fcn.140097fe0
mov qword [0x140130aa8], rsi
mov dword [0x140199730], esi
mov rcx, qword [0x140133c88]
test rcx, rcx
je 0x14005ecf2
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133c88], rsi
mov rcx, qword [0x140133ca0]
test rcx, rcx
je 0x14005ed0b
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133ca0], rsi
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
add rsp, 0x40
pop rdi
ret
Function at 0x14005f640
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x40
lea rax, str._nPrint_esrv_svc_and_PL_version._n
mov qword [rsp + 0x28], rax
lea rax, str._nUsage:__esrv_svc___version_n
mov qword [rsp + 0x30], rax
xor esi, esi
mov edi, esi
mov dword [rsp + 0x20], esi
nop
cmp edi, 2
jge 0x14005f69f
movsxd rbx, edi
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
mov r8, qword [rsp + rbx*8 + 0x28]
lea rdx, [0x1400eae68]
call fcn.1400010a0
inc edi
mov dword [rsp + 0x20], edi
jmp 0x14005f670
lea rcx, [0x140113930]
call fcn.1400100a0
lea rdx, [0x140125448]
call fcn.1400a40a0
cmp dword [0x140199730], 1
jne 0x14005f6d9
lea rcx, [0x140199738]
call fcn.140097fe0
mov qword [0x140130aa8], rsi
mov dword [0x140199730], esi
mov rcx, qword [0x140133c88]
test rcx, rcx
je 0x14005f6f2
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133c88], rsi
mov rcx, qword [0x140133ca0]
test rcx, rcx
je 0x14005f70b
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133ca0], rsi
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
add rsp, 0x40
pop rdi
ret
Function at 0x14005f730
Capabilities:
Terminate process

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
push rdi
sub rsp, 0xc0
lea rax, str._nDisplay_this_message_on_supported_data_ranges._n
mov qword [rsp + 0x30], rax
lea rax, str._nUsage:__esrv_svc___ranges_n_n
mov qword [rsp + 0x38], rax
lea rax, str.___Max_Joules......................................184_467_440_737_095_000.00_n
mov qword [rsp + 0x40], rax
lea rax, str.___Max_kWh..................................................51_240_955_760.30_n
mov qword [r11 - 0x80], rax
lea rax, str.___Max_kWh_With_Overflows..........945_228_797_002_602_000_000_000_000_000.00_n
mov qword [r11 - 0x78], rax
lea rax, reloc.WS2_32.dll_ioctlsocket
mov qword [r11 - 0x70], rax
lea rax, str._________________Time_to_Overflow________________Rate_________________________n
mov qword [r11 - 0x68], rax
lea rax, str.______________________________________________________________________________n
mov qword [r11 - 0x60], rax
lea rax, str.___..............5_849_424_173.55_years__.......................1_W_n
mov qword [r11 - 0x58], rax
lea rax, str.___................584_942_417.36_years__......................10_W_n
mov qword [r11 - 0x50], rax
lea rax, str.___.................58_494_241.74_years__.....................100_W_n
mov qword [r11 - 0x48], rax
lea rax, str.___..................5_849_424.17_years__...................1_000_W......1_kW_n
mov qword [r11 - 0x40], rax
lea rax, str.___....................584_942.42_years__..................10_000_W.....10_kW_n
mov qword [r11 - 0x38], rax
lea rax, str.___.....................58_494.24_years__.................100_000_W....100_kW_n
mov qword [r11 - 0x30], rax
lea rax, str.___......................5_849.42_years__...............1_000_000_W......1_MW_n
mov qword [r11 - 0x28], rax
lea rax, str.___........................584.94_years__..............10_000_000_W.....10_MW_n
mov qword [r11 - 0x20], rax
lea rax, str.___.........................58.49_years__.............100_000_000_W....100_MW_n
mov qword [r11 - 0x18], rax
lea rax, str.___..........................5.85_years__...........1_000_000_000_W......1_GW_n
mov qword [r11 - 0x10], rax
xor esi, esi
mov edi, esi
mov dword [rsp + 0x20], esi
cmp edi, 0x12
jge 0x14005f843
movsxd rbx, edi
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
mov r8, qword [rsp + rbx*8 + 0x30]
lea rdx, [0x1400eaed8]
call fcn.1400010a0
inc edi
mov dword [rsp + 0x20], edi
jmp 0x14005f814
lea rcx, [0x140113930]
call fcn.1400100a0
lea rdx, [0x140125448]
call fcn.1400a40a0
cmp dword [0x140199730], 1
jne 0x14005f87d
lea rcx, [0x140199738]
call fcn.140097fe0
mov qword [0x140130aa8], rsi
mov dword [0x140199730], esi
mov rcx, qword [0x140133c88]
test rcx, rcx
je 0x14005f896
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133c88], rsi
mov rcx, qword [0x140133ca0]
test rcx, rcx
je 0x14005f8af
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133ca0], rsi
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rsp, r11
pop rdi
ret
Function at 0x14005f8e0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x40
lea rax, str._nFlush_the_energy_server._n
mov qword [rsp + 0x28], rax
lea rax, str._nUsage:__esrv_svc___flush_n
mov qword [rsp + 0x30], rax
xor esi, esi
mov edi, esi
mov dword [rsp + 0x20], esi
nop
cmp edi, 2
jge 0x14005f93f
movsxd rbx, edi
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
mov r8, qword [rsp + rbx*8 + 0x28]
lea rdx, [0x1400eaf88]
call fcn.1400010a0
inc edi
mov dword [rsp + 0x20], edi
jmp 0x14005f910
lea rcx, [0x140113930]
call fcn.1400100a0
lea rdx, [0x140125448]
call fcn.1400a40a0
cmp dword [0x140199730], 1
jne 0x14005f979
lea rcx, [0x140199738]
call fcn.140097fe0
mov qword [0x140130aa8], rsi
mov dword [0x140199730], esi
mov rcx, qword [0x140133c88]
test rcx, rcx
je 0x14005f992
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133c88], rsi
mov rcx, qword [0x140133ca0]
test rcx, rcx
je 0x14005f9ab
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133ca0], rsi
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
add rsp, 0x40
pop rdi
ret

Function at 0x14005f9d0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x40
lea rax, str._nSynchronize_the_energy_server._n
mov qword [rsp + 0x28], rax
lea rax, str._nUsage:__esrv_svc___synch_n
mov qword [rsp + 0x30], rax
xor esi, esi
mov edi, esi
mov dword [rsp + 0x20], esi
nop
cmp edi, 2
jge 0x14005fa2f
movsxd rbx, edi
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
mov r8, qword [rsp + rbx*8 + 0x28]
lea rdx, [0x1400eb0c8]
call fcn.1400010a0
inc edi
mov dword [rsp + 0x20], edi
jmp 0x14005fa00
lea rcx, [0x140113930]
call fcn.1400100a0
lea rdx, [0x140125448]
call fcn.1400a40a0
cmp dword [0x140199730], 1
jne 0x14005fa69
lea rcx, [0x140199738]
call fcn.140097fe0
mov qword [0x140130aa8], rsi
mov dword [0x140199730], esi
mov rcx, qword [0x140133c88]
test rcx, rcx
je 0x14005fa82
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133c88], rsi
mov rcx, qword [0x140133ca0]
test rcx, rcx
je 0x14005fa9b
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133ca0], rsi
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
add rsp, 0x40
pop rdi
ret
Function at 0x14005fac0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x40
lea rax, str._nReset_the_energy_server_services_energy_counters_to_zero._n
mov qword [rsp + 0x28], rax
lea rax, str._nUsage:__esrv_svc___reset_n
mov qword [rsp + 0x30], rax
xor esi, esi
mov edi, esi
mov dword [rsp + 0x20], esi
nop
cmp edi, 2
jge 0x14005fb1f
movsxd rbx, edi
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
mov r8, qword [rsp + rbx*8 + 0x28]
lea rdx, [0x1400eb128]
call fcn.1400010a0
inc edi
mov dword [rsp + 0x20], edi
jmp 0x14005faf0
lea rcx, [0x140113930]
call fcn.1400100a0
lea rdx, [0x140125448]
call fcn.1400a40a0
cmp dword [0x140199730], 1
jne 0x14005fb59
lea rcx, [0x140199738]
call fcn.140097fe0
mov qword [0x140130aa8], rsi
mov dword [0x140199730], esi
mov rcx, qword [0x140133c88]
test rcx, rcx
je 0x14005fb72
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133c88], rsi
mov rcx, qword [0x140133ca0]
test rcx, rcx
je 0x14005fb8b
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133ca0], rsi
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
add rsp, 0x40
pop rdi
ret

Function at 0x14005fbb0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x40
lea rax, str._nStop_the_energy_server_service._n
mov qword [rsp + 0x28], rax
lea rax, str._nUsage:__esrv_svc___stop_n
mov qword [rsp + 0x30], rax
xor esi, esi
mov edi, esi
mov dword [rsp + 0x20], esi
nop
cmp edi, 2
jge 0x14005fc0f
movsxd rbx, edi
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
mov r8, qword [rsp + rbx*8 + 0x28]
lea rdx, [0x1400eb214]
call fcn.1400010a0
inc edi
mov dword [rsp + 0x20], edi
jmp 0x14005fbe0
lea rcx, [0x140113930]
call fcn.1400100a0
lea rdx, [0x140125448]
call fcn.1400a40a0
cmp dword [0x140199730], 1
jne 0x14005fc49
lea rcx, [0x140199738]
call fcn.140097fe0
mov qword [0x140130aa8], rsi
mov dword [0x140199730], esi
mov rcx, qword [0x140133c88]
test rcx, rcx
je 0x14005fc62
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133c88], rsi
mov rcx, qword [0x140133ca0]
test rcx, rcx
je 0x14005fc7b
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133ca0], rsi
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
add rsp, 0x40
pop rdi
ret
Function at 0x140060040
Capabilities:
Terminate process

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
push rdi
sub rsp, 0x50
lea rax, str._nStart_and_control_the_energy_server_service._n
mov qword [r11 - 0x30], rax
lea rax, str._nUsage:__esrv_svc_____install____uninstall____start____restart____stop____pause____resume_
mov qword [r11 - 0x28], rax
lea rax, str._n_____________________shutdown____reset____synch____svc_status____help____ranges____version_
mov qword [r11 - 0x20], rax
lea rax, str._n_____________________flush____device_control___n
mov qword [r11 - 0x18], rax
lea rax, str._nContext_sensitive_help_is_available_for_each_command__i.e.___esrv_svc___start___help__n
mov qword [r11 - 0x10], rax
xor esi, esi
mov edi, esi
mov dword [rsp + 0x20], esi
nop
cmp edi, 5
jge 0x1400600bf
movsxd rbx, edi
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
mov r8, qword [rsp + rbx*8 + 0x28]
lea rdx, [0x1400eb348]
call fcn.1400010a0
inc edi
mov dword [rsp + 0x20], edi
jmp 0x140060090
lea rcx, [0x140113930]
call fcn.1400100a0
lea rdx, [0x140125448]
call fcn.1400a40a0
cmp dword [0x140199730], 1
jne 0x1400600f9
lea rcx, [0x140199738]
call fcn.140097fe0
mov qword [0x140130aa8], rsi
mov dword [0x140199730], esi
mov rcx, qword [0x140133c88]
test rcx, rcx
je 0x140060112
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133c88], rsi
mov rcx, qword [0x140133ca0]
test rcx, rcx
je 0x14006012b
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x140133ca0], rsi
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x50
pop rdi
ret

Function at 0x140060150
Capabilities:
Set socket configuration

Disassembly:
push rbx
sub rsp, 0x30
mov rax, qword [0x1400c1008]
xor rax, rsp
mov qword [rsp + 0x28], rax
mov rbx, rcx
mov dword [rsp + 0x20], 0
lea r8, [rsp + 0x20]
mov edx, 0x8004667e
mov rcx, qword [rcx + 0x73148]
call qword [sym.imp.WS2_32.dll_ioctlsocket]
test eax, eax
je 0x1400601a3
mov eax, 1
mov rcx, qword [rsp + 0x28]
xor rcx, rsp
call fcn.140001ea0
add rsp, 0x30
pop rbx
ret
mov dword [rbx + 0x730a4], 0
xor eax, eax
jmp 0x1400601b6
mov rcx, qword [rsp + 0x28]
xor rcx, rsp
call fcn.140001ea0
add rsp, 0x30
pop rbx
ret

Function at 0x1400601d0
Capabilities:
Set socket configuration

Disassembly:
push rbx
sub rsp, 0x30
mov rax, qword [0x1400c1008]
xor rax, rsp
mov qword [rsp + 0x28], rax
mov rbx, rcx
mov dword [rsp + 0x20], 1
lea r8, [rsp + 0x20]
mov edx, 0x8004667e
mov rcx, qword [rcx + 0x73148]
call qword [sym.imp.WS2_32.dll_ioctlsocket]
test eax, eax
je 0x140060223
mov eax, 1
mov rcx, qword [rsp + 0x28]
xor rcx, rsp
call fcn.140001ea0
add rsp, 0x30
pop rbx
ret
mov dword [rbx + 0x730a4], 1
xor eax, eax
jmp 0x140060236
mov rcx, qword [rsp + 0x28]
xor rcx, rsp
call fcn.140001ea0
add rsp, 0x30
pop rbx
ret