joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140054186
Capabilities:
Terminate process

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x50
mov rdi, rcx
call fcn.140001066
mov rsi, rax
movups xmm0, xmmword [rdi + 0x20]
lea rcx, [rsp + 0x30]
movaps xmmword [rcx], xmm0
call fcn.14001854b
test al, al
je 0x1400541c2
cmp byte [rsi], 0
jne 0x140054311
jmp 0x140054358
mov qword [rsp + 0x28], 0
mov rcx, qword [rdi + 0x28]
call qword [rdi + 0x20]
mov r12b, 1
cmp byte [rsi], 0
jne 0x1400542f7
mov rbx, rax
mov qword [rsp + 0x28], rax
test rax, rax
je 0x14005428e
lea rbp, [rdi + 0x20]
lea r14, [rsp + 0x28]
lea r15, [rsp + 0x30]
mov cl, byte [rbx + 0x20]
call fcn.14001296a
test al, al
je 0x140054251
mov rcx, qword [rdi + 0x28]
call qword [rdi + 0x20]
cmp byte [rsi], 0
jne 0x1400542f7
mov rcx, r14
mov rdx, rax
call fcn.1400106b1
cmp byte [rsi], 0
jne 0x1400542f7
movups xmm0, xmmword [rbp]
movaps xmmword [rsp + 0x30], xmm0
mov rcx, r15
call fcn.14001854b
mov rbx, qword [rsp + 0x28]
test al, al
jne 0x14005424c
test rbx, rbx
jne 0x1400541fd
test rbx, rbx
je 0x14005428e
lea r14, [rsp + 0x30]
mov edx, 0x10
mov rcx, r14
call fcn.1400018bc
lea rax, [fcn.140054186]
mov qword [r14], rax
mov qword [r14 + 8], rdi
mov rax, qword [r14]
mov rcx, qword [r14 + 8]
lea rdx, [rsp + 0x40]
mov qword [rdx], rax
mov qword [rdx + 8], rcx
mov rcx, rbx
call fcn.140013427
jmp 0x1400542f4
mov rax, qword [rdi + 0x18]
mov cl, byte [rax + 0x20]
call fcn.14001296a
test al, al
je 0x1400542a3
xor r12d, r12d
jmp 0x1400542f7
mov ecx, 0x40
call fcn.14000ed36
lea rcx, [0x1400a8228]
mov qword [rax], rcx
lea rdx, [0x1400a8260]
mov qword [rax + 0x10], rdx
movups xmm0, xmmword [0x1400958e0]
movups xmmword [rax + 0x18], xmm0
mov qword [rax + 8], 0
mov qword [rsp + 0x20], 0x2a
lea r8, [0x1400a8280]
lea r9, str.mVedrBkx34YrVf
mov rcx, rax
call fcn.14000ed74
mov r12b, byte [rsi]
mov byte [rsi], 0
mov rcx, qword [rsp + 0x28]
call fcn.1400106dc
cmp byte [rsi], 0
jne 0x140054311
mov byte [rsi], r12b
test r12b, r12b
je 0x140054358
mov byte [rsi], 0
mov rax, qword [rdi + 0x18]
mov cl, byte [rax + 0x20]
call fcn.14001296a
test al, al
je 0x140054337
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.140018558
call fcn.1400130f9
mov rbx, rax
mov rcx, qword [rdi + 0x18]
mov rdx, rax
call fcn.140011d4b
mov rcx, rbx
call fcn.14000ebe5
cmp byte [rsi], 0
je 0x140054367
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.140013124
Function at 0x140054732
Capabilities:
Terminate process

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x50
mov rdi, rcx
call fcn.140001066
mov rsi, rax
movups xmm0, xmmword [rdi + 0x20]
lea rcx, [rsp + 0x30]
movaps xmmword [rcx], xmm0
call fcn.14001854b
test al, al
je 0x14005476e
cmp byte [rsi], 0
jne 0x1400548bd
jmp 0x140054904
mov qword [rsp + 0x28], 0
mov rcx, qword [rdi + 0x28]
call qword [rdi + 0x20]
mov r12b, 1
cmp byte [rsi], 0
jne 0x1400548a3
mov rbx, rax
mov qword [rsp + 0x28], rax
test rax, rax
je 0x14005483a
lea rbp, [rdi + 0x20]
lea r14, [rsp + 0x28]
lea r15, [rsp + 0x30]
mov cl, byte [rbx + 0x20]
call fcn.14001296a
test al, al
je 0x1400547fd
mov rcx, qword [rdi + 0x28]
call qword [rdi + 0x20]
cmp byte [rsi], 0
jne 0x1400548a3
mov rcx, r14
mov rdx, rax
call fcn.1400106b1
cmp byte [rsi], 0
jne 0x1400548a3
movups xmm0, xmmword [rbp]
movaps xmmword [rsp + 0x30], xmm0
mov rcx, r15
call fcn.14001854b
mov rbx, qword [rsp + 0x28]
test al, al
jne 0x1400547f8
test rbx, rbx
jne 0x1400547a9
test rbx, rbx
je 0x14005483a
lea r14, [rsp + 0x30]
mov edx, 0x10
mov rcx, r14
call fcn.1400018bc
lea rax, [fcn.140054732]
mov qword [r14], rax
mov qword [r14 + 8], rdi
mov rax, qword [r14]
mov rcx, qword [r14 + 8]
lea rdx, [rsp + 0x40]
mov qword [rdx], rax
mov qword [rdx + 8], rcx
mov rcx, rbx
call fcn.140013427
jmp 0x1400548a0
mov rax, qword [rdi + 0x18]
mov cl, byte [rax + 0x20]
call fcn.14001296a
test al, al
je 0x14005484f
xor r12d, r12d
jmp 0x1400548a3
mov ecx, 0x40
call fcn.14000ed36
lea rcx, [0x1400a8228]
mov qword [rax], rcx
lea rdx, [0x1400a8260]
mov qword [rax + 0x10], rdx
movups xmm0, xmmword [0x140095150]
movups xmmword [rax + 0x18], xmm0
mov qword [rax + 8], 0
mov qword [rsp + 0x20], 0x2a
lea r8, [0x1400a8280]
lea r9, str.mVedrBkx34YrVf
mov rcx, rax
call fcn.14000ed74
mov r12b, byte [rsi]
mov byte [rsi], 0
mov rcx, qword [rsp + 0x28]
call fcn.1400106dc
cmp byte [rsi], 0
jne 0x1400548bd
mov byte [rsi], r12b
test r12b, r12b
je 0x140054904
mov byte [rsi], 0
mov rax, qword [rdi + 0x18]
mov cl, byte [rax + 0x20]
call fcn.14001296a
test al, al
je 0x1400548e3
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.140018558
call fcn.1400130f9
mov rbx, rax
mov rcx, qword [rdi + 0x18]
mov rdx, rax
call fcn.140011d4b
mov rcx, rbx
call fcn.14000ebe5
cmp byte [rsi], 0
je 0x140054913
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.140013124
Function at 0x140054c84
Capabilities:
Terminate process

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x50
mov rdi, rcx
call fcn.140001066
mov rsi, rax
movups xmm0, xmmword [rdi + 0x20]
lea rcx, [rsp + 0x30]
movaps xmmword [rcx], xmm0
call fcn.14001854b
test al, al
je 0x140054cc0
cmp byte [rsi], 0
jne 0x140054e0f
jmp 0x140054e56
mov qword [rsp + 0x28], 0
mov rcx, qword [rdi + 0x28]
call qword [rdi + 0x20]
mov r12b, 1
cmp byte [rsi], 0
jne 0x140054df5
mov rbx, rax
mov qword [rsp + 0x28], rax
test rax, rax
je 0x140054d8c
lea rbp, [rdi + 0x20]
lea r14, [rsp + 0x28]
lea r15, [rsp + 0x30]
mov cl, byte [rbx + 0x20]
call fcn.14001296a
test al, al
je 0x140054d4f
mov rcx, qword [rdi + 0x28]
call qword [rdi + 0x20]
cmp byte [rsi], 0
jne 0x140054df5
mov rcx, r14
mov rdx, rax
call fcn.1400106b1
cmp byte [rsi], 0
jne 0x140054df5
movups xmm0, xmmword [rbp]
movaps xmmword [rsp + 0x30], xmm0
mov rcx, r15
call fcn.14001854b
mov rbx, qword [rsp + 0x28]
test al, al
jne 0x140054d4a
test rbx, rbx
jne 0x140054cfb
test rbx, rbx
je 0x140054d8c
lea r14, [rsp + 0x30]
mov edx, 0x10
mov rcx, r14
call fcn.1400018bc
lea rax, [fcn.140054c84]
mov qword [r14], rax
mov qword [r14 + 8], rdi
mov rax, qword [r14]
mov rcx, qword [r14 + 8]
lea rdx, [rsp + 0x40]
mov qword [rdx], rax
mov qword [rdx + 8], rcx
mov rcx, rbx
call fcn.140013427
jmp 0x140054df2
mov rax, qword [rdi + 0x18]
mov cl, byte [rax + 0x20]
call fcn.14001296a
test al, al
je 0x140054da1
xor r12d, r12d
jmp 0x140054df5
mov ecx, 0x40
call fcn.14000ed36
lea rcx, [0x1400a8228]
mov qword [rax], rcx
lea rdx, [0x1400a8260]
mov qword [rax + 0x10], rdx
movups xmm0, xmmword [0x140094cb0]
movups xmmword [rax + 0x18], xmm0
mov qword [rax + 8], 0
mov qword [rsp + 0x20], 0x2a
lea r8, [0x1400a8280]
lea r9, str.mVedrBkx34YrVf
mov rcx, rax
call fcn.14000ed74
mov r12b, byte [rsi]
mov byte [rsi], 0
mov rcx, qword [rsp + 0x28]
call fcn.1400106dc
cmp byte [rsi], 0
jne 0x140054e0f
mov byte [rsi], r12b
test r12b, r12b
je 0x140054e56
mov byte [rsi], 0
mov rax, qword [rdi + 0x18]
mov cl, byte [rax + 0x20]
call fcn.14001296a
test al, al
je 0x140054e35
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.140018558
call fcn.1400130f9
mov rbx, rax
mov rcx, qword [rdi + 0x18]
mov rdx, rax
call fcn.140011d4b
mov rcx, rbx
call fcn.14000ebe5
cmp byte [rsi], 0
je 0x140054e65
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.140013124
Function at 0x1400550ad
Capabilities:
Terminate process

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x50
mov rdi, rcx
call fcn.140001066
mov rsi, rax
movups xmm0, xmmword [rdi + 0x20]
lea rcx, [rsp + 0x30]
movaps xmmword [rcx], xmm0
call fcn.14001854b
test al, al
je 0x1400550e9
cmp byte [rsi], 0
jne 0x140055238
jmp 0x14005527f
mov qword [rsp + 0x28], 0
mov rcx, qword [rdi + 0x28]
call qword [rdi + 0x20]
mov r12b, 1
cmp byte [rsi], 0
jne 0x14005521e
mov rbx, rax
mov qword [rsp + 0x28], rax
test rax, rax
je 0x1400551b5
lea rbp, [rdi + 0x20]
lea r14, [rsp + 0x28]
lea r15, [rsp + 0x30]
mov cl, byte [rbx + 0x20]
call fcn.14001296a
test al, al
je 0x140055178
mov rcx, qword [rdi + 0x28]
call qword [rdi + 0x20]
cmp byte [rsi], 0
jne 0x14005521e
mov rcx, r14
mov rdx, rax
call fcn.1400106b1
cmp byte [rsi], 0
jne 0x14005521e
movups xmm0, xmmword [rbp]
movaps xmmword [rsp + 0x30], xmm0
mov rcx, r15
call fcn.14001854b
mov rbx, qword [rsp + 0x28]
test al, al
jne 0x140055173
test rbx, rbx
jne 0x140055124
test rbx, rbx
je 0x1400551b5
lea r14, [rsp + 0x30]
mov edx, 0x10
mov rcx, r14
call fcn.1400018bc
lea rax, [fcn.1400550ad]
mov qword [r14], rax
mov qword [r14 + 8], rdi
mov rax, qword [r14]
mov rcx, qword [r14 + 8]
lea rdx, [rsp + 0x40]
mov qword [rdx], rax
mov qword [rdx + 8], rcx
mov rcx, rbx
call fcn.140013427
jmp 0x14005521b
mov rax, qword [rdi + 0x10]
mov cl, byte [rax + 0x20]
call fcn.14001296a
test al, al
je 0x1400551ca
xor r12d, r12d
jmp 0x14005521e
mov ecx, 0x40
call fcn.14000ed36
lea rcx, [0x1400a8228]
mov qword [rax], rcx
lea rdx, [0x1400a8260]
mov qword [rax + 0x10], rdx
movups xmm0, xmmword [0x140096ae0]
movups xmmword [rax + 0x18], xmm0
mov qword [rax + 8], 0
mov qword [rsp + 0x20], 0x2a
lea r8, [0x1400a8280]
lea r9, str.mVedrBkx34YrVf
mov rcx, rax
call fcn.14000ed74
mov r12b, byte [rsi]
mov byte [rsi], 0
mov rcx, qword [rsp + 0x28]
call fcn.1400106dc
cmp byte [rsi], 0
jne 0x140055238
mov byte [rsi], r12b
test r12b, r12b
je 0x14005527f
mov byte [rsi], 0
mov rax, qword [rdi + 0x10]
mov cl, byte [rax + 0x20]
call fcn.14001296a
test al, al
je 0x14005525e
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.140018558
call fcn.1400130f9
mov rbx, rax
mov rcx, qword [rdi + 0x10]
mov rdx, rax
call fcn.140011d4b
mov rcx, rbx
call fcn.14000ebe5
cmp byte [rsi], 0
je 0x14005528e
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.140013124
Function at 0x14005572b
Capabilities:
Terminate process

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x50
mov rdi, rcx
call fcn.140001066
mov rsi, rax
movups xmm0, xmmword [rdi + 0x20]
lea rcx, [rsp + 0x30]
movaps xmmword [rcx], xmm0
call fcn.14001854b
test al, al
je 0x140055767
cmp byte [rsi], 0
jne 0x1400558b6
jmp 0x1400558fd
mov qword [rsp + 0x28], 0
mov rcx, qword [rdi + 0x28]
call qword [rdi + 0x20]
mov r12b, 1
cmp byte [rsi], 0
jne 0x14005589c
mov rbx, rax
mov qword [rsp + 0x28], rax
test rax, rax
je 0x140055833
lea rbp, [rdi + 0x20]
lea r14, [rsp + 0x28]
lea r15, [rsp + 0x30]
mov cl, byte [rbx + 0x20]
call fcn.14001296a
test al, al
je 0x1400557f6
mov rcx, qword [rdi + 0x28]
call qword [rdi + 0x20]
cmp byte [rsi], 0
jne 0x14005589c
mov rcx, r14
mov rdx, rax
call fcn.1400106b1
cmp byte [rsi], 0
jne 0x14005589c
movups xmm0, xmmword [rbp]
movaps xmmword [rsp + 0x30], xmm0
mov rcx, r15
call fcn.14001854b
mov rbx, qword [rsp + 0x28]
test al, al
jne 0x1400557f1
test rbx, rbx
jne 0x1400557a2
test rbx, rbx
je 0x140055833
lea r14, [rsp + 0x30]
mov edx, 0x10
mov rcx, r14
call fcn.1400018bc
lea rax, [fcn.14005572b]
mov qword [r14], rax
mov qword [r14 + 8], rdi
mov rax, qword [r14]
mov rcx, qword [r14 + 8]
lea rdx, [rsp + 0x40]
mov qword [rdx], rax
mov qword [rdx + 8], rcx
mov rcx, rbx
call fcn.140013427
jmp 0x140055899
mov rax, qword [rdi + 0x18]
mov cl, byte [rax + 0x20]
call fcn.14001296a
test al, al
je 0x140055848
xor r12d, r12d
jmp 0x14005589c
mov ecx, 0x40
call fcn.14000ed36
lea rcx, [0x1400a8228]
mov qword [rax], rcx
lea rdx, [0x1400a8260]
mov qword [rax + 0x10], rdx
movups xmm0, xmmword [0x1400966f0]
movups xmmword [rax + 0x18], xmm0
mov qword [rax + 8], 0
mov qword [rsp + 0x20], 0x2a
lea r8, [0x1400a8280]
lea r9, str.mVedrBkx34YrVf
mov rcx, rax
call fcn.14000ed74
mov r12b, byte [rsi]
mov byte [rsi], 0
mov rcx, qword [rsp + 0x28]
call fcn.1400106dc
cmp byte [rsi], 0
jne 0x1400558b6
mov byte [rsi], r12b
test r12b, r12b
je 0x1400558fd
mov byte [rsi], 0
mov rax, qword [rdi + 0x18]
mov cl, byte [rax + 0x20]
call fcn.14001296a
test al, al
je 0x1400558dc
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.140018558
call fcn.1400130f9
mov rbx, rax
mov rcx, qword [rdi + 0x18]
mov rdx, rax
call fcn.140011d4b
mov rcx, rbx
call fcn.14000ebe5
cmp byte [rsi], 0
je 0x14005590c
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.140013124
Function at 0x140055b54
Capabilities:
Terminate process

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x50
mov rdi, rcx
call fcn.140001066
mov rsi, rax
movups xmm0, xmmword [rdi + 0x20]
lea rcx, [rsp + 0x30]
movaps xmmword [rcx], xmm0
call fcn.14001854b
test al, al
je 0x140055b90
cmp byte [rsi], 0
jne 0x140055cdf
jmp 0x140055d26
mov qword [rsp + 0x28], 0
mov rcx, qword [rdi + 0x28]
call qword [rdi + 0x20]
mov r12b, 1
cmp byte [rsi], 0
jne 0x140055cc5
mov rbx, rax
mov qword [rsp + 0x28], rax
test rax, rax
je 0x140055c5c
lea rbp, [rdi + 0x20]
lea r14, [rsp + 0x28]
lea r15, [rsp + 0x30]
mov cl, byte [rbx + 0x20]
call fcn.14001296a
test al, al
je 0x140055c1f
mov rcx, qword [rdi + 0x28]
call qword [rdi + 0x20]
cmp byte [rsi], 0
jne 0x140055cc5
mov rcx, r14
mov rdx, rax
call fcn.1400106b1
cmp byte [rsi], 0
jne 0x140055cc5
movups xmm0, xmmword [rbp]
movaps xmmword [rsp + 0x30], xmm0
mov rcx, r15
call fcn.14001854b
mov rbx, qword [rsp + 0x28]
test al, al
jne 0x140055c1a
test rbx, rbx
jne 0x140055bcb
test rbx, rbx
je 0x140055c5c
lea r14, [rsp + 0x30]
mov edx, 0x10
mov rcx, r14
call fcn.1400018bc
lea rax, [fcn.140055b54]
mov qword [r14], rax
mov qword [r14 + 8], rdi
mov rax, qword [r14]
mov rcx, qword [r14 + 8]
lea rdx, [rsp + 0x40]
mov qword [rdx], rax
mov qword [rdx + 8], rcx
mov rcx, rbx
call fcn.140013427
jmp 0x140055cc2
mov rax, qword [rdi + 0x10]
mov cl, byte [rax + 0x20]
call fcn.14001296a
test al, al
je 0x140055c71
xor r12d, r12d
jmp 0x140055cc5
mov ecx, 0x40
call fcn.14000ed36
lea rcx, [0x1400a8228]
mov qword [rax], rcx
lea rdx, [0x1400a8260]
mov qword [rax + 0x10], rdx
movups xmm0, xmmword [0x1400952c0]
movups xmmword [rax + 0x18], xmm0
mov qword [rax + 8], 0
mov qword [rsp + 0x20], 0x2a
lea r8, [0x1400a8280]
lea r9, str.mVedrBkx34YrVf
mov rcx, rax
call fcn.14000ed74
mov r12b, byte [rsi]
mov byte [rsi], 0
mov rcx, qword [rsp + 0x28]
call fcn.1400106dc
cmp byte [rsi], 0
jne 0x140055cdf
mov byte [rsi], r12b
test r12b, r12b
je 0x140055d26
mov byte [rsi], 0
mov rax, qword [rdi + 0x10]
mov cl, byte [rax + 0x20]
call fcn.14001296a
test al, al
je 0x140055d05
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.140018558
call fcn.1400130f9
mov rbx, rax
mov rcx, qword [rdi + 0x10]
mov rdx, rax
call fcn.140011d4b
mov rcx, rbx
call fcn.14000ebe5
cmp byte [rsi], 0
je 0x140055d35
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.140013124
Function at 0x1400561be
Capabilities:
Terminate process

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x50
mov rdi, rcx
call fcn.140001066
mov rsi, rax
movups xmm0, xmmword [rdi + 0x20]
lea rcx, [rsp + 0x30]
movaps xmmword [rcx], xmm0
call fcn.14001854b
test al, al
je 0x1400561fa
cmp byte [rsi], 0
jne 0x140056349
jmp 0x140056390
mov qword [rsp + 0x28], 0
mov rcx, qword [rdi + 0x28]
call qword [rdi + 0x20]
mov r12b, 1
cmp byte [rsi], 0
jne 0x14005632f
mov rbx, rax
mov qword [rsp + 0x28], rax
test rax, rax
je 0x1400562c6
lea rbp, [rdi + 0x20]
lea r14, [rsp + 0x28]
lea r15, [rsp + 0x30]
mov cl, byte [rbx + 0x20]
call fcn.14001296a
test al, al
je 0x140056289
mov rcx, qword [rdi + 0x28]
call qword [rdi + 0x20]
cmp byte [rsi], 0
jne 0x14005632f
mov rcx, r14
mov rdx, rax
call fcn.1400106b1
cmp byte [rsi], 0
jne 0x14005632f
movups xmm0, xmmword [rbp]
movaps xmmword [rsp + 0x30], xmm0
mov rcx, r15
call fcn.14001854b
mov rbx, qword [rsp + 0x28]
test al, al
jne 0x140056284
test rbx, rbx
jne 0x140056235
test rbx, rbx
je 0x1400562c6
lea r14, [rsp + 0x30]
mov edx, 0x10
mov rcx, r14
call fcn.1400018bc
lea rax, [fcn.1400561be]
mov qword [r14], rax
mov qword [r14 + 8], rdi
mov rax, qword [r14]
mov rcx, qword [r14 + 8]
lea rdx, [rsp + 0x40]
mov qword [rdx], rax
mov qword [rdx + 8], rcx
mov rcx, rbx
call fcn.140013427
jmp 0x14005632c
mov rax, qword [rdi + 0x18]
mov cl, byte [rax + 0x20]
call fcn.14001296a
test al, al
je 0x1400562db
xor r12d, r12d
jmp 0x14005632f
mov ecx, 0x40
call fcn.14000ed36
lea rcx, [0x1400a8228]
mov qword [rax], rcx
lea rdx, [0x1400a8260]
mov qword [rax + 0x10], rdx
movups xmm0, xmmword [0x140095830]
movups xmmword [rax + 0x18], xmm0
mov qword [rax + 8], 0
mov qword [rsp + 0x20], 0x2a
lea r8, [0x1400a8280]
lea r9, str.mVedrBkx34YrVf
mov rcx, rax
call fcn.14000ed74
mov r12b, byte [rsi]
mov byte [rsi], 0
mov rcx, qword [rsp + 0x28]
call fcn.1400106dc
cmp byte [rsi], 0
jne 0x140056349
mov byte [rsi], r12b
test r12b, r12b
je 0x140056390
mov byte [rsi], 0
mov rax, qword [rdi + 0x18]
mov cl, byte [rax + 0x20]
call fcn.14001296a
test al, al
je 0x14005636f
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.140018558
call fcn.1400130f9
mov rbx, rax
mov rcx, qword [rdi + 0x18]
mov rdx, rax
call fcn.140011d4b
mov rcx, rbx
call fcn.14000ebe5
cmp byte [rsi], 0
je 0x14005639f
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.140013124
Function at 0x14005693c
Capabilities:
Terminate process

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x50
mov rdi, rcx
call fcn.140001066
mov rsi, rax
movups xmm0, xmmword [rdi + 0x20]
lea rcx, [rsp + 0x30]
movaps xmmword [rcx], xmm0
call fcn.14001854b
test al, al
je 0x140056978
cmp byte [rsi], 0
jne 0x140056ac7
jmp 0x140056b0e
mov qword [rsp + 0x28], 0
mov rcx, qword [rdi + 0x28]
call qword [rdi + 0x20]
mov r12b, 1
cmp byte [rsi], 0
jne 0x140056aad
mov rbx, rax
mov qword [rsp + 0x28], rax
test rax, rax
je 0x140056a44
lea rbp, [rdi + 0x20]
lea r14, [rsp + 0x28]
lea r15, [rsp + 0x30]
mov cl, byte [rbx + 0x20]
call fcn.14001296a
test al, al
je 0x140056a07
mov rcx, qword [rdi + 0x28]
call qword [rdi + 0x20]
cmp byte [rsi], 0
jne 0x140056aad
mov rcx, r14
mov rdx, rax
call fcn.1400106b1
cmp byte [rsi], 0
jne 0x140056aad
movups xmm0, xmmword [rbp]
movaps xmmword [rsp + 0x30], xmm0
mov rcx, r15
call fcn.14001854b
mov rbx, qword [rsp + 0x28]
test al, al
jne 0x140056a02
test rbx, rbx
jne 0x1400569b3
test rbx, rbx
je 0x140056a44
lea r14, [rsp + 0x30]
mov edx, 0x10
mov rcx, r14
call fcn.1400018bc
lea rax, [fcn.14005693c]
mov qword [r14], rax
mov qword [r14 + 8], rdi
mov rax, qword [r14]
mov rcx, qword [r14 + 8]
lea rdx, [rsp + 0x40]
mov qword [rdx], rax
mov qword [rdx + 8], rcx
mov rcx, rbx
call fcn.140013427
jmp 0x140056aaa
mov rax, qword [rdi + 0x18]
mov cl, byte [rax + 0x20]
call fcn.14001296a
test al, al
je 0x140056a59
xor r12d, r12d
jmp 0x140056aad
mov ecx, 0x40
call fcn.14000ed36
lea rcx, [0x1400a8228]
mov qword [rax], rcx
lea rdx, [0x1400a8260]
mov qword [rax + 0x10], rdx
movups xmm0, xmmword [0x1400964a0]
movups xmmword [rax + 0x18], xmm0
mov qword [rax + 8], 0
mov qword [rsp + 0x20], 0x2a
lea r8, [0x1400a8280]
lea r9, str.mVedrBkx34YrVf
mov rcx, rax
call fcn.14000ed74
mov r12b, byte [rsi]
mov byte [rsi], 0
mov rcx, qword [rsp + 0x28]
call fcn.1400106dc
cmp byte [rsi], 0
jne 0x140056ac7
mov byte [rsi], r12b
test r12b, r12b
je 0x140056b0e
mov byte [rsi], 0
mov rax, qword [rdi + 0x18]
mov cl, byte [rax + 0x20]
call fcn.14001296a
test al, al
je 0x140056aed
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.140018558
call fcn.1400130f9
mov rbx, rax
mov rcx, qword [rdi + 0x18]
mov rdx, rax
call fcn.140011d4b
mov rcx, rbx
call fcn.14000ebe5
cmp byte [rsi], 0
je 0x140056b1d
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.140013124
Function at 0x140056d65
Capabilities:
Terminate process

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x50
mov rdi, rcx
call fcn.140001066
mov rsi, rax
movups xmm0, xmmword [rdi + 0x20]
lea rcx, [rsp + 0x30]
movaps xmmword [rcx], xmm0
call fcn.14001854b
test al, al
je 0x140056da1
cmp byte [rsi], 0
jne 0x140056ef0
jmp 0x140056f37
mov qword [rsp + 0x28], 0
mov rcx, qword [rdi + 0x28]
call qword [rdi + 0x20]
mov r12b, 1
cmp byte [rsi], 0
jne 0x140056ed6
mov rbx, rax
mov qword [rsp + 0x28], rax
test rax, rax
je 0x140056e6d
lea rbp, [rdi + 0x20]
lea r14, [rsp + 0x28]
lea r15, [rsp + 0x30]
mov cl, byte [rbx + 0x20]
call fcn.14001296a
test al, al
je 0x140056e30
mov rcx, qword [rdi + 0x28]
call qword [rdi + 0x20]
cmp byte [rsi], 0
jne 0x140056ed6
mov rcx, r14
mov rdx, rax
call fcn.1400106b1
cmp byte [rsi], 0
jne 0x140056ed6
movups xmm0, xmmword [rbp]
movaps xmmword [rsp + 0x30], xmm0
mov rcx, r15
call fcn.14001854b
mov rbx, qword [rsp + 0x28]
test al, al
jne 0x140056e2b
test rbx, rbx
jne 0x140056ddc
test rbx, rbx
je 0x140056e6d
lea r14, [rsp + 0x30]
mov edx, 0x10
mov rcx, r14
call fcn.1400018bc
lea rax, [fcn.140056d65]
mov qword [r14], rax
mov qword [r14 + 8], rdi
mov rax, qword [r14]
mov rcx, qword [r14 + 8]
lea rdx, [rsp + 0x40]
mov qword [rdx], rax
mov qword [rdx + 8], rcx
mov rcx, rbx
call fcn.140013427
jmp 0x140056ed3
mov rax, qword [rdi + 0x10]
mov cl, byte [rax + 0x20]
call fcn.14001296a
test al, al
je 0x140056e82
xor r12d, r12d
jmp 0x140056ed6
mov ecx, 0x40
call fcn.14000ed36
lea rcx, [0x1400a8228]
mov qword [rax], rcx
lea rdx, [0x1400a8260]
mov qword [rax + 0x10], rdx
movups xmm0, xmmword [0x140095380]
movups xmmword [rax + 0x18], xmm0
mov qword [rax + 8], 0
mov qword [rsp + 0x20], 0x2a
lea r8, [0x1400a8280]
lea r9, str.mVedrBkx34YrVf
mov rcx, rax
call fcn.14000ed74
mov r12b, byte [rsi]
mov byte [rsi], 0
mov rcx, qword [rsp + 0x28]
call fcn.1400106dc
cmp byte [rsi], 0
jne 0x140056ef0
mov byte [rsi], r12b
test r12b, r12b
je 0x140056f37
mov byte [rsi], 0
mov rax, qword [rdi + 0x10]
mov cl, byte [rax + 0x20]
call fcn.14001296a
test al, al
je 0x140056f16
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.140018558
call fcn.1400130f9
mov rbx, rax
mov rcx, qword [rdi + 0x10]
mov rdx, rax
call fcn.140011d4b
mov rcx, rbx
call fcn.14000ebe5
cmp byte [rsi], 0
je 0x140056f46
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.140013124