joyce8/EMBER2024-capa huggingface dataset:
Function at 0x18006f6b0
Capabilities:
Get local ipv4 addresses
Get socket information

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
lea rbp, [rsp - 0x40]
sub rsp, 0x140
mov rax, qword [0x180106040]
xor rax, rsp
mov qword [rbp + 0x30], rax
mov edi, r8d
mov rsi, rdx
mov rbx, rcx
mov rax, qword [rcx]
call qword [rax + 8]
test al, al
je 0x18006f830
lea rax, [rsp + 0x40]
mov qword [rbp - 0x58], rax
xor r14d, r14d
mov r8d, r14d
mov qword [rsp + 0x78], r14
mov rcx, qword [rbx + 0x3d8]
test rcx, rcx
je 0x18006f71a
mov rax, qword [rcx]
lea rdx, [rsp + 0x40]
call qword [rax]
mov r8, rax
mov qword [rsp + 0x78], rax
lea rax, [rsp + 0x40]
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x18], r14
test r8, r8
je 0x18006f76d
lea rax, [rsp + 0x40]
cmp r8, rax
jne 0x18006f764
mov rax, qword [r8]
lea rdx, [rbp - 0x50]
mov rcx, r8
call qword [rax + 8]
mov qword [rbp - 0x18], rax
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x18006f76d
mov rax, qword [rcx]
lea rdx, [rsp + 0x40]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
jmp 0x18006f768
mov qword [rbp - 0x18], r8
mov qword [rsp + 0x78], r14
movzx eax, byte [rbx + 0x39c]
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x1800e8230]
movdqu xmmword [rbp - 0x70], xmm1
mov byte [rbp - 0x80], 0
lea rcx, [rbp - 0x50]
mov qword [rsp + 0x30], rcx
mov byte [rsp + 0x28], al
mov r9d, dword [rbx + 0x398]
mov r8d, edi
lea rdx, [rbp - 0x80]
mov rcx, rsi
call fcn.18007f740
mov rsi, rax
lea rcx, [rbp - 0x80]
call fcn.180041ed0
nop
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x18006f7dd
mov r8, qword [rcx]
lea rax, [rsp + 0x40]
cmp rcx, rax
setne dl
call qword [r8 + 0x20]
mov qword [rsp + 0x78], r14
xchg qword [rbx + 0x48], rsi
mov rax, qword [rbx + 0x48]
cmp rax, 0xffffffffffffffff
je 0x18006f830
test edi, edi
jne 0x18006f82c
mov dword [rbp - 0x58], 0x80
mov rcx, qword [rbx + 0x48]
lea r8, [rbp - 0x58]
lea rdx, [rbp - 0x50]
call qword [sym.imp.WS2_32.dll_getsockname]
cmp eax, 0xffffffff
je 0x18006f830
movzx eax, word [rbp - 0x50]
cmp ax, 2
je 0x18006f81d
cmp ax, 0x17
jne 0x18006f830
movzx ecx, word [rbp - 0x4e]
call qword [sym.imp.WS2_32.dll_ntohs]
movzx eax, ax
jmp 0x18006f835
mov eax, edi
jmp 0x18006f835
mov eax, 0xffffffff
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.1800caa50
add rsp, 0x140
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
Function at 0x1800788d0
Capabilities:
Encode data using xor
Generate random numbers using a mersenne twister

Disassembly:
sub rsp, 8
mov r9, rcx
mov r10d, 0x270
mov ecx, dword [rcx]
cmp ecx, r10d
jne 0x180078931
lea r8, [r9 + 8]
nop dword [rax + rax]
mov edx, dword [r8 - 4]
xor edx, dword [r8]
lea r8, [r8 + 4]
btr edx, 0x1f
xor edx, dword [r8 - 8]
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
shr edx, 1
and ecx, 0x9908b0df
xor ecx, dword [r8 + 0x62c]
xor ecx, edx
mov dword [r8 + 0x9b8], ecx
sub r10, 1
jne 0x1800788f0
mov ecx, dword [r9]
jmp 0x180078a1b
cmp ecx, 0x4e0
jb 0x180078a1b
lea r10, [r9 + 0x9c4]
mov qword [rsp], rbx
mov r11d, dword [r10]
mov ebx, 0xe3
mov eax, r11d
mov r8, r10
mov r11d, dword [r10 + 4]
add r10, 4
mov edx, r11d
xor edx, eax
btr edx, 0x1f
xor edx, eax
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
shr edx, 1
and ecx, 0x9908b0df
xor ecx, dword [r8 + 0x634]
xor ecx, edx
mov dword [r8 - 0x9c0], ecx
sub rbx, 1
jne 0x180078950
lea r10, [r9 + 0xd50]
mov ebx, 0x18c
mov r11d, dword [r10]
nop
mov eax, r11d
mov r8, r10
mov r11d, dword [r10 + 4]
mov edx, eax
xor edx, r11d
add r10, 4
btr edx, 0x1f
xor edx, eax
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
shr edx, 1
and ecx, 0x9908b0df
xor ecx, dword [r8 - 0xd4c]
xor ecx, edx
mov dword [r8 - 0x9c0], ecx
sub rbx, 1
jne 0x1800789a0
mov eax, dword [r9 + 0x1380]
mov edx, eax
xor edx, dword [r9 + 4]
mov rbx, qword [rsp]
btr edx, 0x1f
xor edx, eax
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
shr edx, 1
and ecx, 0x9908b0df
xor ecx, dword [r9 + 0x634]
xor ecx, edx
mov dword [r9 + 0x9c0], ecx
xor ecx, ecx
mov dword [r9], ecx
mov eax, ecx
mov edx, dword [r9 + rax*4 + 4]
lea eax, [rcx + 1]
mov dword [r9], eax
mov ecx, edx
mov eax, dword [r9 + 0x1384]
shr ecx, 0xb
and eax, ecx
xor edx, eax
mov eax, edx
and eax, 0xff3a58ad
shl eax, 7
xor edx, eax
mov eax, edx
and eax, 0xffffdf8c
shl eax, 0xf
xor edx, eax
mov eax, edx
shr eax, 0x12
xor eax, edx
add rsp, 8
ret
Function at 0x180079c20
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
movabs rax, 0xcbf29ce484222325
mov r9d, 0
sub r8, rdx
je 0x180079c54
movabs r10, 0x100000001b3
nop
movzx ecx, byte [rdx + r9]
inc r9
xor rax, rcx
imul rax, r10
cmp r9, r8
jb 0x180079c40
ret
Function at 0x180089190
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x40
mov rax, qword [0x180106040]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov rbx, r8
mov rdi, rdx
mov ecx, 8
call fcn.1800cb1c4
mov rcx, qword [rbx]
mov qword [rax], rcx
mov qword [rsp + 0x30], rax
lea rbx, [rdi + 8]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0
mov r9, rax
lea r8, [0x180091ae0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rdi], rax
test rax, rax
je 0x180089209
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.1800caa50
mov rbx, qword [rsp + 0x50]
add rsp, 0x40
pop rdi
ret
mov dword [rbx], 0
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
Function at 0x180089430
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
push rdi
sub rsp, 0x30
mov rdi, r8
mov rsi, rdx
sub rdi, rdx
mov rbp, rcx
sar rdi, 2
test rdi, rdi
je 0x18008960f
mov qword [rsp + 0x50], rbx
mov rbx, qword [rcx + 8]
sub rbx, qword [rcx]
mov qword [rsp + 0x60], r13
sar rbx, 2
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r15
cmp rdi, 0x26f
jb 0x180089480
mov eax, listen
jmp 0x1800894ae
cmp rdi, 0x44
jb 0x18008948d
mov eax, 7
jmp 0x1800894ae
cmp rdi, 0x27
jb 0x18008949a
mov eax, 5
jmp 0x1800894ae
cmp rdi, 7
jb 0x1800894a7
mov eax, 3
jmp 0x1800894ae
lea rax, [rdi - 1]
shr rax, 1
mov r14, rdi
lea r15, [rbx + 1]
sub r14, rax
shr r14, 1
lea r13, [r14 + rax]
cmp rdi, rbx
jbe 0x1800894c7
mov r15, rdi
mov r8, rdi
mov edx, 0x8b8b8b8b
shl r8, 2
mov rcx, rsi
call sub.VCRUNTIME140.dll_memset
xor ecx, ecx
test r15, r15
je 0x18008957f
mov qword [rsp + 0x58], r12
nop dword [rax + rax]
xor edx, edx
lea rax, [rcx + r14]
div rdi
mov r11d, dword [rsi + rdx*4]
lea r10, [rsi + rdx*4]
xor edx, edx
mov rax, rcx
div rdi
lea r12, [rsi + rdx*4]
mov r8d, r11d
mov r9, rdx
lea rax, [rcx - 1]
xor edx, edx
div rdi
xor r8d, dword [rsi + rdx*4]
xor r8d, dword [r12]
mov eax, r8d
shr eax, 0x1b
xor eax, r8d
imul edx, eax, 0x19660d
test rcx, rcx
jne 0x18008953d
mov rax, rbx
jmp 0x180089552
cmp rcx, rbx
ja 0x18008954f
mov rax, qword [rbp]
mov eax, dword [rax + rcx*4 - 4]
add rax, r9
jmp 0x180089552
mov rax, r9
lea r8d, [rax + rdx]
lea eax, [r11 + rdx]
xor edx, edx
mov dword [r10], eax
lea rax, [rcx + r13]
div rdi
inc rcx
add dword [rsi + rdx*4], r8d
mov dword [r12], r8d
cmp rcx, r15
jb 0x1800894f0
mov r12, qword [rsp + 0x58]
add r15, rdi
cmp rcx, r15
jae 0x1800895fb
inc r14
lea rbp, [rcx - 1]
inc r13
xor edx, edx
lea rax, [r14 + rbp]
div rdi
mov r10d, dword [rsi + rdx*4]
lea r11, [rsi + rdx*4]
xor edx, edx
lea rbx, [rbp + 1]
mov rax, rbx
div rdi
mov rax, rbp
mov r9, rdx
xor edx, edx
div rdi
mov ecx, dword [rsi + rdx*4]
xor edx, edx
add ecx, r10d
add ecx, dword [rsi + r9*4]
mov eax, ecx
shr eax, 0x1b
xor eax, ecx
imul ecx, eax, 0x5d588b65
mov rax, rbp
add rax, r13
mov rbp, rbx
div rdi
xor r10d, ecx
lea rax, [rbx + 1]
mov dword [r11], r10d
mov r8d, ecx
sub r8d, r9d
xor dword [rsi + rdx*4], r8d
mov dword [rsi + r9*4], r8d
cmp rax, r15
jb 0x180089591
mov r14, qword [rsp + 0x28]
mov r13, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x50]
mov r15, qword [rsp + 0x20]
add rsp, 0x30
pop rdi
pop rsi
pop rbp
ret
Function at 0x18008fbb0
Capabilities:
Validate payment card number using luhn algorithm

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov esi, edx
mov dword [rcx + 0x74], 0
mov rbx, rcx
mov edi, 0x7fffffff
movsx ecx, byte [rbx + 0x78]
lea eax, [rcx - 0x30]
cmp al, 9
ja 0x18008fc7c
lea r8d, [rcx - 0x30]
cmp r8d, 0xffffffff
je 0x18008fc7c
mov r9d, dword [rbx + 0x74]
mov ecx, 0x7fffffff
sub ecx, r8d
mov eax, 0x66666667
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp r9d, edx
jg 0x18008fc95
lea eax, [r9 + r9*4]
dec edi
lea ecx, [r8 + rax*2]
mov rax, qword [rbx]
mov dword [rbx + 0x74], ecx
mov rcx, qword [rbx + 0x10]
cmp rax, rcx
je 0x18008fc6c
cmp byte [rax], 0x5c
jne 0x18008fc66
lea rdx, [rax + 1]
cmp rdx, rcx
je 0x18008fc66
mov r8d, dword [rbx + 0x80]
test r8b, 8
jne 0x18008fc52
movzx ecx, byte [rdx]
sub cl, 0x28
cmp cl, 1
jbe 0x18008fc63
test r8b, 0x10
jne 0x18008fc66
movzx ecx, byte [rdx]
sub cl, 0x7b
test cl, 0xfd
jne 0x18008fc66
mov rax, rdx
inc rax
mov qword [rbx], rax
mov rcx, rbx
call fcn.180088b20
test edi, edi
jne 0x18008fbd0
mov rbx, qword [rsp + 0x30]
cmp edi, 0x7fffffff
mov rsi, qword [rsp + 0x38]
setne al
add rsp, 0x20
pop rdi
ret
mov edx, esi
call fcn.180088b10
int3
Function at 0x18009a290
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x180106040]
xor rax, rsp
mov qword [rbp - 8], rax
movzx eax, byte [0x1801d469c]
mov rbx, rcx
cmp al, 1
jne 0x18009a2c8
mov dword [0x180110c58], 0x3f800000
jmp 0x18009a2d6
test al, al
jne 0x18009a2d6
mov dword [0x180110c58], 0x3f000000
lea rdx, [rbp - 0x10]
mov dword [rbp - 0x10], 0x43a00000
lea rcx, str.AutoTool
mov dword [rbp - 0xc], 0x428c0000
call fcn.18000aa30
movss xmm1, dword [0x180110c58]
lea rax, [rbp - 0x30]
mov rcx, qword [0x1801d5200]
lea r9, [rbp - 0x10]
mov qword [rsp + 0x28], rax
lea r8, [rbp - 0x48]
lea rax, [rbp - 0x40]
movss dword [rbp - 0x40], xmm1
xorps xmm0, xmm0
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x50]
movss dword [rbp - 0x3c], xmm1
movss dword [rbp - 0x38], xmm1
movups xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x34], 0x42c80000
mov dword [rbp - 0x10], 0x3f800000
mov dword [rbp - 0xc], 0x3f800000
mov qword [rbp - 0x48], 0
mov dword [rbp - 0x50], 0x41a00000
mov dword [rbp - 0x4c], 0x41a00000
call fcn.180037be0
cmp qword [0x1801d5200], 0
je 0x18009a381
call fcn.18000a610
test al, al
je 0x18009a381
mov byte [0x1801d469c], 1
movss xmm1, dword [0x1800e818c]
xorps xmm0, xmm0
call fcn.180013080
mov rdx, qword [0x1801d4bd8]
lea rcx, str.Toggle_AutoTool
mov r8, rbx
call fcn.180038f60
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x18009a3bd
xor byte [0x1801d469c], 1
call fcn.18000ab70
cmp byte [0x1801d469c], 0
je 0x18009a4ae
movss xmm1, dword [0x1800e8034]
xorps xmm0, xmm0
call fcn.180013080
lea rcx, str.AutoTool2
mov dword [rbp - 0x50], 0x43a00000
lea rdx, [rbp - 0x50]
mov dword [rbp - 0x4c], 0x43d50000
call fcn.18000aa30
movaps xmm1, xmmword [0x1800e84b0]
lea rax, [rbp - 0x30]
mov rcx, qword [0x1801d51f8]
lea r9, [rbp - 0x50]
mov qword [rsp + 0x28], rax
lea r8, [rbp - 0x48]
lea rax, [rbp - 0x20]
mov dword [rbp - 0x10], 0
xorps xmm0, xmm0
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x40]
mov dword [rbp - 0x50], 0x3f800000
movups xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x4c], 0x3f800000
movups xmmword [rbp - 0x20], xmm1
mov qword [rbp - 0x48], 0
mov dword [rbp - 0x40], 0x41a00000
mov dword [rbp - 0x3c], 0x41a00000
call fcn.180037be0
cmp qword [0x1801d5200], 0
je 0x18009a47e
call fcn.18000a610
test al, al
je 0x18009a47e
mov byte [0x1801d469c], 0
movss xmm1, dword [0x1800e818c]
xorps xmm0, xmm0
call fcn.180013080
mov rdx, qword [0x1801d4b78]
lea rcx, str.Click_To_Bind
lea r8, [rbx + 0x40]
mov byte [rsp + 0x20], 1
lea r9, [rbp - 0x10]
call fcn.180039b10
call fcn.18000ab70
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.1800caa50
mov rbx, qword [rsp + 0x98]
add rsp, 0x80
pop rbp
ret
Function at 0x1800a19f0
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x180106040]
xor rax, rsp
mov qword [rbp - 8], rax
movzx eax, byte [0x1801d46a9]
mov rbx, rcx
cmp al, 1
jne 0x1800a1a28
mov dword [0x180110c58], 0x3f800000
jmp 0x1800a1a36
test al, al
jne 0x1800a1a36
mov dword [0x180110c58], 0x3f000000
lea rdx, [rbp - 0x10]
mov dword [rbp - 0x10], 0x43a00000
lea rcx, str.Antib
mov dword [rbp - 0xc], 0x428c0000
call fcn.18000aa30
movss xmm1, dword [0x180110c58]
lea rax, [rbp - 0x30]
mov rcx, qword [0x1801d5200]
lea r9, [rbp - 0x10]
mov qword [rsp + 0x28], rax
lea r8, [rbp - 0x48]
lea rax, [rbp - 0x40]
movss dword [rbp - 0x40], xmm1
xorps xmm0, xmm0
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x50]
movss dword [rbp - 0x3c], xmm1
movss dword [rbp - 0x38], xmm1
movups xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x34], 0x42c80000
mov dword [rbp - 0x10], 0x3f800000
mov dword [rbp - 0xc], 0x3f800000
mov qword [rbp - 0x48], 0
mov dword [rbp - 0x50], 0x41a00000
mov dword [rbp - 0x4c], 0x41a00000
call fcn.180037be0
cmp qword [0x1801d5200], 0
je 0x1800a1ae1
call fcn.18000a610
test al, al
je 0x1800a1ae1
mov byte [0x1801d46a9], 1
movss xmm1, dword [0x1800e818c]
xorps xmm0, xmm0
call fcn.180013080
mov rdx, qword [0x1801d4bd8]
lea rcx, str.Toggle_Antibot
mov r8, rbx
call fcn.180038f60
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1800a1b1d
xor byte [0x1801d46a9], 1
call fcn.18000ab70
cmp byte [0x1801d46a9], 0
je 0x1800a1c0e
movss xmm1, dword [0x1800e8034]
xorps xmm0, xmm0
call fcn.180013080
lea rcx, str.Antib2
mov dword [rbp - 0x50], 0x43a00000
lea rdx, [rbp - 0x50]
mov dword [rbp - 0x4c], 0x43d50000
call fcn.18000aa30
movaps xmm1, xmmword [0x1800e84b0]
lea rax, [rbp - 0x30]
mov rcx, qword [0x1801d51f8]
lea r9, [rbp - 0x50]
mov qword [rsp + 0x28], rax
lea r8, [rbp - 0x48]
lea rax, [rbp - 0x20]
mov dword [rbp - 0x10], 0
xorps xmm0, xmm0
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x40]
mov dword [rbp - 0x50], 0x3f800000
movups xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x4c], 0x3f800000
movups xmmword [rbp - 0x20], xmm1
mov qword [rbp - 0x48], 0
mov dword [rbp - 0x40], 0x41a00000
mov dword [rbp - 0x3c], 0x41a00000
call fcn.180037be0
cmp qword [0x1801d5200], 0
je 0x1800a1bde
call fcn.18000a610
test al, al
je 0x1800a1bde
mov byte [0x1801d46a9], 0
movss xmm1, dword [0x1800e818c]
xorps xmm0, xmm0
call fcn.180013080
mov rdx, qword [0x1801d4b78]
lea rcx, str.Click_To_Bind
lea r8, [rbx + 0x40]
mov byte [rsp + 0x20], 1
lea r9, [rbp - 0x10]
call fcn.180039b10
call fcn.18000ab70
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.1800caa50
mov rbx, qword [rsp + 0x98]
add rsp, 0x80
pop rbp
ret
Function at 0x1800a2810
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0x90
mov rax, qword [0x180106040]
xor rax, rsp
mov qword [rbp + 0x4f], rax
movzx eax, byte [0x1801d46aa]
mov rbx, rcx
cmp al, 1
jne 0x1800a284a
mov dword [0x180110c58], 0x3f800000
jmp 0x1800a2858
test al, al
jne 0x1800a2858
mov dword [0x180110c58], 0x3f000000
lea rdx, [rbp + 0x37]
mov dword [rbp + 0x37], 0x43a00000
lea rcx, str.reach
mov dword [rbp + 0x3b], 0x428c0000
call fcn.18000aa30
movss xmm1, dword [0x180110c58]
lea rax, [rbp + 0x17]
mov rcx, qword [0x1801d5200]
lea r9, [rbp + 0x37]
mov qword [rsp + 0x28], rax
lea r8, [rbp + 0x3f]
lea rax, [rbp + 7]
movss dword [rbp + 7], xmm1
xorps xmm0, xmm0
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x47]
movss dword [rbp + 0xb], xmm1
movss dword [rbp + 0xf], xmm1
movups xmmword [rbp + 0x17], xmm0
mov dword [rbp + 0x13], 0x42c80000
mov dword [rbp + 0x37], 0x3f800000
mov dword [rbp + 0x3b], 0x3f800000
mov qword [rbp + 0x3f], 0
mov dword [rbp + 0x47], 0x41a00000
mov dword [rbp + 0x4b], 0x41a00000
call fcn.180037be0
cmp qword [0x1801d5200], 0
je 0x1800a2903
call fcn.18000a610
test al, al
je 0x1800a2903
mov byte [0x1801d46aa], 1
movss xmm1, dword [0x1800e818c]
xorps xmm0, xmm0
call fcn.180013080
mov rdx, qword [0x1801d4bd8]
lea rcx, str.Toggle_Reach
mov r8, rbx
call fcn.180038f60
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1800a293f
xor byte [0x1801d46aa], 1
call fcn.18000ab70
cmp byte [0x1801d46aa], 0
je 0x1800a2a78
movss xmm1, dword [0x1800e8034]
xorps xmm0, xmm0
call fcn.180013080
lea rcx, str.reach2
mov dword [rbp + 0x37], 0x43a00000
lea rdx, [rbp + 0x37]
mov dword [rbp + 0x3b], 0x43d50000
call fcn.18000aa30
movaps xmm1, xmmword [0x1800e84b0]
lea rax, [rbp + 0x17]
mov rcx, qword [0x1801d51f8]
lea r9, [rbp + 0x37]
mov qword [rsp + 0x28], rax
lea r8, [rbp + 0x3f]
lea rax, [rbp + 0x27]
mov dword [rbp + 0x47], 0
xorps xmm0, xmm0
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 7]
mov dword [rbp + 0x37], 0x3f800000
movups xmmword [rbp + 0x17], xmm0
mov dword [rbp + 0x3b], 0x3f800000
movups xmmword [rbp + 0x27], xmm1
mov qword [rbp + 0x3f], 0
mov dword [rbp + 7], 0x41a00000
mov dword [rbp + 0xb], 0x41a00000
call fcn.180037be0
cmp qword [0x1801d5200], 0
je 0x1800a2a00
call fcn.18000a610
test al, al
je 0x1800a2a00
mov byte [0x1801d46aa], 0
movss xmm1, dword [0x1800e818c]
xorps xmm0, xmm0
call fcn.180013080
mov rdx, qword [0x1801d4b78]
lea rcx, str.Click_To_Bind
lea r8, [rbx + 0x40]
mov byte [rsp + 0x20], 1
lea r9, [rbp + 0x47]
call fcn.180039b10
mov r8, qword [rbx + 0x70]
lea rax, str._.3f
mov dword [rsp + 0x30], 0
lea r9, [rbp + 0x37]
mov qword [rsp + 0x28], rax
lea rcx, str.Reach_Distance
lea rax, [rbp + 0x3f]
mov dword [rbp + 0x3f], 0x40800000
add r8, 8
mov qword [rsp + 0x20], rax
mov edx, 8
mov dword [rbp + 0x37], 0
call fcn.18003d320
call fcn.18000ab70
mov rcx, qword [rbp + 0x4f]
xor rcx, rsp
call fcn.1800caa50
mov rbx, qword [rsp + 0xa8]
add rsp, 0x90
pop rbp
ret
Function at 0x1800a2cc0
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x180106040]
xor rax, rsp
mov qword [rbp - 8], rax
movzx eax, byte [0x1801d46ab]
mov rbx, rcx
cmp al, 1
jne 0x1800a2cf8
mov dword [0x180110c58], 0x3f800000
jmp 0x1800a2d06
test al, al
jne 0x1800a2d06
mov dword [0x180110c58], 0x3f000000
lea rdx, [rbp - 0x10]
mov dword [rbp - 0x10], 0x43a00000
lea rcx, str.Teams
mov dword [rbp - 0xc], 0x428c0000
call fcn.18000aa30
movss xmm1, dword [0x180110c58]
lea rax, [rbp - 0x30]
mov rcx, qword [0x1801d5200]
lea r9, [rbp - 0x10]
mov qword [rsp + 0x28], rax
lea r8, [rbp - 0x48]
lea rax, [rbp - 0x40]
movss dword [rbp - 0x40], xmm1
xorps xmm0, xmm0
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x50]
movss dword [rbp - 0x3c], xmm1
movss dword [rbp - 0x38], xmm1
movups xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x34], 0x42c80000
mov dword [rbp - 0x10], 0x3f800000
mov dword [rbp - 0xc], 0x3f800000
mov qword [rbp - 0x48], 0
mov dword [rbp - 0x50], 0x41a00000
mov dword [rbp - 0x4c], 0x41a00000
call fcn.180037be0
cmp qword [0x1801d5200], 0
je 0x1800a2db1
call fcn.18000a610
test al, al
je 0x1800a2db1
mov byte [0x1801d46ab], 1
movss xmm1, dword [0x1800e818c]
xorps xmm0, xmm0
call fcn.180013080
mov rdx, qword [0x1801d4bd8]
lea rcx, str.Toggle_Teams
mov r8, rbx
call fcn.180038f60
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1800a2ded
xor byte [0x1801d46ab], 1
call fcn.18000ab70
cmp byte [0x1801d46ab], 0
je 0x1800a2ede
movss xmm1, dword [0x1800e8034]
xorps xmm0, xmm0
call fcn.180013080
lea rcx, str.Teams2
mov dword [rbp - 0x50], 0x43a00000
lea rdx, [rbp - 0x50]
mov dword [rbp - 0x4c], 0x43d50000
call fcn.18000aa30
movaps xmm1, xmmword [0x1800e84b0]
lea rax, [rbp - 0x30]
mov rcx, qword [0x1801d51f8]
lea r9, [rbp - 0x50]
mov qword [rsp + 0x28], rax
lea r8, [rbp - 0x48]
lea rax, [rbp - 0x20]
mov dword [rbp - 0x10], 0
xorps xmm0, xmm0
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x40]
mov dword [rbp - 0x50], 0x3f800000
movups xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x4c], 0x3f800000
movups xmmword [rbp - 0x20], xmm1
mov qword [rbp - 0x48], 0
mov dword [rbp - 0x40], 0x41a00000
mov dword [rbp - 0x3c], 0x41a00000
call fcn.180037be0
cmp qword [0x1801d5200], 0
je 0x1800a2eae
call fcn.18000a610
test al, al
je 0x1800a2eae
mov byte [0x1801d46ab], 0
movss xmm1, dword [0x1800e818c]
xorps xmm0, xmm0
call fcn.180013080
mov rdx, qword [0x1801d4b78]
lea rcx, str.Click_To_Bind
lea r8, [rbx + 0x40]
mov byte [rsp + 0x20], 1
lea r9, [rbp - 0x10]
call fcn.180039b10
call fcn.18000ab70
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.1800caa50
mov rbx, qword [rsp + 0x98]
add rsp, 0x80
pop rbp
ret
Function at 0x1800aadf0
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x180106040]
xor rax, rsp
mov qword [rbp - 8], rax
movzx eax, byte [0x1801d46ae]
mov rbx, rcx
cmp al, 1
jne 0x1800aae28
mov dword [0x180110c58], 0x3f800000
jmp 0x1800aae36
test al, al
jne 0x1800aae36
mov dword [0x180110c58], 0x3f000000
lea rdx, [rbp - 0x10]
mov dword [rbp - 0x10], 0x43a00000
lea rcx, str.Fullbright
mov dword [rbp - 0xc], 0x428c0000
call fcn.18000aa30
movss xmm1, dword [0x180110c58]
lea rax, [rbp - 0x30]
mov rcx, qword [0x1801d5200]
lea r9, [rbp - 0x10]
mov qword [rsp + 0x28], rax
lea r8, [rbp - 0x48]
lea rax, [rbp - 0x40]
movss dword [rbp - 0x40], xmm1
xorps xmm0, xmm0
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x50]
movss dword [rbp - 0x3c], xmm1
movss dword [rbp - 0x38], xmm1
movups xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x34], 0x42c80000
mov dword [rbp - 0x10], 0x3f800000
mov dword [rbp - 0xc], 0x3f800000
mov qword [rbp - 0x48], 0
mov dword [rbp - 0x50], 0x41a00000
mov dword [rbp - 0x4c], 0x41a00000
call fcn.180037be0
cmp qword [0x1801d5200], 0
je 0x1800aaee1
call fcn.18000a610
test al, al
je 0x1800aaee1
mov byte [0x1801d46ae], 1
movss xmm1, dword [0x1800e818c]
xorps xmm0, xmm0
call fcn.180013080
mov rdx, qword [0x1801d4bd8]
lea rcx, str.Toggle_Fullbright
mov r8, rbx
call fcn.180038f60
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1800aaf1d
xor byte [0x1801d46ae], 1
call fcn.18000ab70
cmp byte [0x1801d46ae], 0
je 0x1800ab00e
movss xmm1, dword [0x1800e8034]
xorps xmm0, xmm0
call fcn.180013080
lea rcx, str.Fullbright2
mov dword [rbp - 0x50], 0x43a00000
lea rdx, [rbp - 0x50]
mov dword [rbp - 0x4c], 0x43d50000
call fcn.18000aa30
movaps xmm1, xmmword [0x1800e84b0]
lea rax, [rbp - 0x30]
mov rcx, qword [0x1801d51f8]
lea r9, [rbp - 0x50]
mov qword [rsp + 0x28], rax
lea r8, [rbp - 0x48]
lea rax, [rbp - 0x20]
mov dword [rbp - 0x10], 0
xorps xmm0, xmm0
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x40]
mov dword [rbp - 0x50], 0x3f800000
movups xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x4c], 0x3f800000
movups xmmword [rbp - 0x20], xmm1
mov qword [rbp - 0x48], 0
mov dword [rbp - 0x40], 0x41a00000
mov dword [rbp - 0x3c], 0x41a00000
call fcn.180037be0
cmp qword [0x1801d5200], 0
je 0x1800aafde
call fcn.18000a610
test al, al
je 0x1800aafde
mov byte [0x1801d46ae], 0
movss xmm1, dword [0x1800e818c]
xorps xmm0, xmm0
call fcn.180013080
mov rdx, qword [0x1801d4b78]
lea rcx, str.Click_To_Bind
lea r8, [rbx + 0x40]
mov byte [rsp + 0x20], 1
lea r9, [rbp - 0x10]
call fcn.180039b10
call fcn.18000ab70
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.1800caa50
mov rbx, qword [rsp + 0x98]
add rsp, 0x80
pop rbp
ret