joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1401a2270
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push rsi
push rdi
sub rsp, 0x168
mov rsi, rcx
mov rax, qword [0x14024f038]
xor rax, rsp
mov qword [rsp + 0x160], rax
cmp byte [rcx + 0x17], 0
jns 0x1401a2297
mov rcx, qword [rsi]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1401a22c7
test eax, 0x410
sete sil
mov rcx, qword [rsp + 0x160]
xor rcx, rsp
call fcn.1400fd9d0
mov eax, esi
add rsp, 0x168
pop rdi
pop rsi
ret
mov ecx, 2
call fcn.1400dc0e0
test al, al
je 0x1401a2328
call sub.KERNEL32.dll_GetLastError
mov dword [rsp + 0x20], eax
lea rdx, str....._third_partycrashpadcrashpadutil_file_filesystem_win.cc
lea rdi, [rsp + 0x28]
mov rcx, rdi
mov r8d, 0x73
mov r9d, 2
call fcn.14016b430
lea rcx, [rsp + 0x38]
lea rdx, str.GetFileAttributes
mov r8d, 0x12
call fcn.1400be440
mov rcx, rax
mov rdx, rsi
call fcn.14016c220
mov rcx, rdi
call fcn.14016b4a0
xor esi, esi
jmp 0x1401a22ab

Function at 0x1401a31c0
Capabilities:
Enumerate processes

Disassembly:
push rsi
push rdi
sub rsp, 0x28
mov rdi, rcx
lea rsi, [rcx + 0x18]
mov r8d, 0x238
mov rcx, rsi
xor edx, edx
call fcn.1400ffb20
mov dword [rdi + 0x18], 0x238
cmp byte [rdi + 0x10], 0
jne 0x1401a31fc
mov byte [rdi + 0x10], 1
mov rcx, qword [rdi + 8]
mov rdx, rsi
call sub.KERNEL32.dll_Process32FirstW
jmp 0x1401a3208
mov rcx, qword [rdi + 8]
mov rdx, rsi
call sub.KERNEL32.dll_Process32NextW
test eax, eax
setne al
add rsp, 0x28
pop rdi
pop rsi
ret

Function at 0x1401af6e0
Capabilities:
Encode data using xor
Hash data with crc32

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rsi, rdx
mov rdi, rcx
mov eax, dword [0x14026a514]
mov ecx, dword [0x14025e4e8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1401af742
cmp rdi, rsi
je 0x1401af73e
mov eax, 0xffffffff
lea rcx, [0x14026a114]
mov dl, byte [rdi]
xor dl, al
movzx edx, dl
shr eax, 8
xor eax, dword [rcx + rdx*4]
inc rdi
cmp rdi, rsi
jne 0x1401af71f
not eax
add rsp, 0x20
pop rbx
pop rdi
pop rsi
ret
xor eax, eax
jmp 0x1401af736
lea rcx, [0x14026a514]
call fcn.1400fc420
cmp dword [0x14026a514], 0xffffffff
jne 0x1401af70e
lea rbx, [0x14026a114]
mov r8d, 0x400
mov rcx, rbx
mov dl, 0xaa
call fcn.1400ffb20
xor eax, eax
mov ecx, 0xedb88320
mov r8d, eax
shr r8d, 1
mov edx, eax
and edx, 1
neg edx
and edx, ecx
xor edx, r8d
mov r9d, edx
shr r9d, 1
mov r8d, eax
shl r8d, 0x1e
sar r8d, 0x1f
and r8d, ecx
xor r8d, r9d
mov r9d, r8d
shr r9d, 6
mov r10d, eax
shl r10d, 0x1d
sar r10d, 0x1f
and r10d, 0x76dc419
mov r11d, eax
shl r11d, 0x1c
sar r11d, 0x1f
and r11d, 0xedb8832
xor r11d, r10d
mov r10d, eax
shl r10d, 0x1b
sar r10d, 0x1f
and r10d, 0x1db71064
xor r10d, r11d
mov r11d, eax
shl r11d, 0x1a
sar r11d, 0x1f
and r11d, 0x3b6e20c8
xor r11d, r10d
xor r11d, r9d
shl edx, 0x1a
sar edx, 0x1f
and edx, 0x76dc4190
xor edx, r11d
shl r8d, 0x1a
sar r8d, 0x1f
and r8d, ecx
xor r8d, edx
mov dword [rbx], r8d
inc rax
add rbx, 4
cmp rax, 0x100
jne 0x1401af775
lea rcx, [0x14026a514]
call fcn.1400fc4b8
jmp 0x1401af70e
Function at 0x1401d8a40
Capabilities:
Write file on windows

Disassembly:
push rsi
push rdi
sub rsp, 0x28
test rdx, rdx
je 0x1401d8a53
cmp dword [0x14026a598], ecx
jle 0x1401d8a5a
add rsp, 0x28
pop rdi
pop rsi
ret
mov rsi, rdx
mov rcx, rdx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
movsxd rdi, eax
mov rcx, rsi
mov rdx, rdi
call fcn.1401d8aa0
test edi, edi
je 0x1401d8a53
cmp byte [rsi + rdi - 1], 0xa
je 0x1401d8a53
lea rcx, [0x14021254f]
mov edx, 1
add rsp, 0x28
pop rdi
pop rsi
jmp fcn.1401d8aa0

Function at 0x1401d8aa0
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x40
mov rsi, rdx
mov rdi, rcx
mov rax, qword [0x14024f038]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov ecx, 0xfffffff4
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rbx, rax
add rsi, rdi
lea r14, [rsp + 0x34]
mov r15, qword [sym.imp.KERNEL32.dll_WriteFile]
cmp rdi, rsi
jae 0x1401d8b17
mov dword [rsp + 0x34], 0
mov r8d, esi
sub r8d, edi
mov qword [rsp + 0x20], 0
mov rcx, rbx
mov rdx, rdi
mov r9, r14
call r15
mov ecx, dword [rsp + 0x34]
test eax, eax
cmovne eax, ecx
je 0x1401d8b17
add rdi, rax
test ecx, ecx
jne 0x1401d8add
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.1400fd9d0
nop
add rsp, 0x40
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret
Function at 0x1401dc850
Capabilities:
Query or enumerate registry value

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x50
mov rsi, r8
mov rax, qword [0x14024f038]
xor rax, rsp
mov qword [rsp + 0x48], rax
mov eax, 0xaaaaaaaa
lea rdi, [rsp + 0x44]
mov dword [rdi], eax
lea r8, [rsp + 0x40]
mov dword [r8], eax
lea rax, [rsp + 0x3c]
mov dword [rax], 4
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r8
xor r8d, r8d
mov r9, rdi
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ecx, dword [rdi]
xor ecx, 4
or ecx, eax
sete bl
jne 0x1401dc8b0
mov eax, dword [rsp + 0x40]
mov dword [rsi], eax
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.1400fd9d0
mov eax, ebx
add rsp, 0x50
pop rbx
pop rdi
pop rsi
ret
Function at 0x1401f6200
Capabilities:
Parse pe header

Disassembly:
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x1a0
mov rdi, r8
mov rbx, rdx
mov rsi, rcx
mov rax, qword [0x14024f038]
xor rax, rsp
mov qword [rsp + 0x198], rax
movaps xmm0, xmmword [0x1402103c0]
lea r15, [rsp + 0x150]
movaps xmmword [r15 + 0x30], xmm0
movaps xmmword [r15 + 0x20], xmm0
movaps xmmword [r15 + 0x10], xmm0
movaps xmmword [r15], xmm0
lea r14, [rcx + 0x18]
mov rcx, r14
call fcn.140136450
mov r8d, 0x40
mov rcx, rsi
mov rdx, rax
mov r9, r15
call fcn.1401fbd40
test al, al
je 0x1401f6317
movzx eax, word [rsp + 0x150]
cmp eax, 0x5a4d
jne 0x1401f62d1
mov rcx, r14
call fcn.140136450
movsxd r14, dword [rsp + 0x18c]
add r14, rax
mov r8d, 0x108
mov rcx, rsi
mov rdx, r14
mov r9, rbx
call fcn.1401fbd40
test al, al
je 0x1401f63a3
cmp dword [rbx], 0x4550
jne 0x1401f63e2
mov sil, 1
test rdi, rdi
je 0x1401f6382
mov qword [rdi], r14
jmp 0x1401f6382
mov ecx, 1
call fcn.1400dc0e0
test al, al
je 0x1401f6380
lea rdx, str....._third_partycrashpadcrashpad_snapshotwinpe_image_reader.cc
lea rdi, [rsp + 0x20]
mov rcx, rdi
mov r8d, 0x15a
mov r9d, 1
call fcn.140067850
lea rcx, [rsp + 0x30]
lea rdx, str.invalid_e_magic_in_dos_header_of
mov r8d, 0x21
jmp 0x1401f6357
mov ecx, 1
call fcn.1400dc0e0
test al, al
je 0x1401f6380
lea rdx, str....._third_partycrashpadcrashpad_snapshotwinpe_image_reader.cc
lea rdi, [rsp + 0x20]
mov rcx, rdi
mov r8d, 0x154
mov r9d, 1
call fcn.140067850
lea rcx, [rsp + 0x30]
lea rdx, str.could_not_read_dos_header_from
mov r8d, 0x1f
call fcn.1400be440
movsx r8, byte [rsi + 0x17]
test r8, r8
jns 0x1401f636d
mov r8, qword [rsi + 8]
mov rsi, qword [rsi]
mov rcx, rax
mov rdx, rsi
call fcn.1400be440
mov rcx, rdi
call fcn.140067e60
xor esi, esi
mov rcx, qword [rsp + 0x198]
xor rcx, rsp
call fcn.1400fd9d0
mov eax, esi
add rsp, 0x1a0
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret
mov ecx, 1
call fcn.1400dc0e0
test al, al
je 0x1401f6380
lea rdx, str....._third_partycrashpadcrashpad_snapshotwinpe_image_reader.cc
lea rdi, [rsp + 0x20]
mov rcx, rdi
mov r8d, 0x162
mov r9d, 1
call fcn.140067850
lea rcx, [rsp + 0x30]
lea rdx, str.could_not_read_nt_headers_from
jmp 0x1401f6351
mov ecx, 1
call fcn.1400dc0e0
test al, al
je 0x1401f6380
lea rdx, str....._third_partycrashpadcrashpad_snapshotwinpe_image_reader.cc
lea rdi, [rsp + 0x20]
mov rcx, rdi
mov r8d, 0x168
mov r9d, 1
call fcn.140067850
lea rcx, [rsp + 0x30]
lea rdx, str.invalid_signature_in_nt_headers_of
mov r8d, 0x23
jmp 0x1401f6357
Function at 0x1401f6430
Capabilities:
Parse pe header

Disassembly:
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x1a0
mov rdi, r8
mov rbx, rdx
mov rsi, rcx
mov rax, qword [0x14024f038]
xor rax, rsp
mov qword [rsp + 0x198], rax
movaps xmm0, xmmword [0x1402103c0]
lea r15, [rsp + 0x150]
movaps xmmword [r15 + 0x30], xmm0
movaps xmmword [r15 + 0x20], xmm0
movaps xmmword [r15 + 0x10], xmm0
movaps xmmword [r15], xmm0
lea r14, [rcx + 0x18]
mov rcx, r14
call fcn.140136450
mov r8d, 0x40
mov rcx, rsi
mov rdx, rax
mov r9, r15
call fcn.1401fbd40
test al, al
je 0x1401f6547
movzx eax, word [rsp + 0x150]
cmp eax, 0x5a4d
jne 0x1401f6501
mov rcx, r14
call fcn.140136450
movsxd r14, dword [rsp + 0x18c]
add r14, rax
mov r8d, 0xf8
mov rcx, rsi
mov rdx, r14
mov r9, rbx
call fcn.1401fbd40
test al, al
je 0x1401f65d3
cmp dword [rbx], 0x4550
jne 0x1401f6612
mov sil, 1
test rdi, rdi
je 0x1401f65b2
mov qword [rdi], r14
jmp 0x1401f65b2
mov ecx, 1
call fcn.1400dc0e0
test al, al
je 0x1401f65b0
lea rdx, str....._third_partycrashpadcrashpad_snapshotwinpe_image_reader.cc
lea rdi, [rsp + 0x20]
mov rcx, rdi
mov r8d, 0x15a
mov r9d, 1
call fcn.140067850
lea rcx, [rsp + 0x30]
lea rdx, str.invalid_e_magic_in_dos_header_of
mov r8d, 0x21
jmp 0x1401f6587
mov ecx, 1
call fcn.1400dc0e0
test al, al
je 0x1401f65b0
lea rdx, str....._third_partycrashpadcrashpad_snapshotwinpe_image_reader.cc
lea rdi, [rsp + 0x20]
mov rcx, rdi
mov r8d, 0x154
mov r9d, 1
call fcn.140067850
lea rcx, [rsp + 0x30]
lea rdx, str.could_not_read_dos_header_from
mov r8d, 0x1f
call fcn.1400be440
movsx r8, byte [rsi + 0x17]
test r8, r8
jns 0x1401f659d
mov r8, qword [rsi + 8]
mov rsi, qword [rsi]
mov rcx, rax
mov rdx, rsi
call fcn.1400be440
mov rcx, rdi
call fcn.140067e60
xor esi, esi
mov rcx, qword [rsp + 0x198]
xor rcx, rsp
call fcn.1400fd9d0
mov eax, esi
add rsp, 0x1a0
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret
mov ecx, 1
call fcn.1400dc0e0
test al, al
je 0x1401f65b0
lea rdx, str....._third_partycrashpadcrashpad_snapshotwinpe_image_reader.cc
lea rdi, [rsp + 0x20]
mov rcx, rdi
mov r8d, 0x162
mov r9d, 1
call fcn.140067850
lea rcx, [rsp + 0x30]
lea rdx, str.could_not_read_nt_headers_from
jmp 0x1401f6581
mov ecx, 1
call fcn.1400dc0e0
test al, al
je 0x1401f65b0
lea rdx, str....._third_partycrashpadcrashpad_snapshotwinpe_image_reader.cc
lea rdi, [rsp + 0x20]
mov rcx, rdi
mov r8d, 0x168
mov r9d, 1
call fcn.140067850
lea rcx, [rsp + 0x30]
lea rdx, str.invalid_signature_in_nt_headers_of
mov r8d, 0x23
jmp 0x1401f6587
Function at 0x180001120
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
mov edi, r8d
mov rsi, rdx
mov rbp, rcx
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
jne 0x180001153
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret
mov rcx, rax
mov qword [rsp + 0x30], rbx
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rbx, rax
test rax, rax
je 0x180001197
mov rdx, rsi
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov r11d, eax
add r11, rbx
and edi, 0xf
jbe 0x180001192
cmp rbx, r11
jae 0x180001197
add edi, 0xffffffff
movzx eax, word [rbx]
lea rbx, [rbx + rax*2 + 2]
jne 0x180001180
cmp rbx, r11
jb 0x18000119b
xor eax, eax
jmp 0x1800011a7
xor eax, eax
cmp word [rbx], ax
cmove rbx, rax
mov rax, rbx
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret

Function at 0x180003100
Capabilities:
Check if file exists
Get file attributes

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
push rbx
push rbp
push rsi
push rdi
push r12
sub rsp, 0x50
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov rbp, r8
mov rsi, rdx
xor edi, edi
mov dword [rax + 0x20], edi
lea rcx, [rax - 0x50]
call fcn.180013d44
nop
call fcn.1800133dc
mov rcx, rax
test rax, rax
setne dil
test edi, edi
jne 0x180003151
mov ecx, 0x80004005
call fcn.1800016d0
int3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsi], rax
mov dword [rsp + 0x98], 1
mov rcx, qword [rbp]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x180003225
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rbp]
lea rcx, [rsp + 0x28]
call fcn.1800144c4
lea rcx, [rsp + 0x28]
call fcn.180013be0
mov rbx, rax
lea ecx, [rax + 1]
movsxd rdi, ecx
mov rcx, rdi
call fcn.180026134
mov r12, rax
mov r8, rdi
xor edx, edx
mov rcx, rax
call fcn.180027ca0
test r12, r12
jne 0x1800031e1
xor r9d, r9d
lea r8, [0x180047660]
lea rdx, [0x180047670]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call fcn.180026534
int3
mov r8d, ebx
mov rdx, r12
lea rcx, [rsp + 0x28]
call fcn.180013978
lea rcx, [rsp + 0x28]
call fcn.180013cbc
xor eax, eax
or rbx, 0xffffffffffffffff
mov rcx, rbx
mov rdi, r12
repne scasb al, byte [rdi]
not rcx
lea r8d, [rcx - 1]
mov rdx, r12
mov rcx, rsi
call fcn.180001370
mov rcx, r12
call fcn.1800265e0
jmp 0x18000324e
xor eax, eax
or rbx, 0xffffffffffffffff
mov rcx, rbx
lea rdi, [0x180047618]
repne scasb al, byte [rdi]
not rcx
lea r8d, [rcx - 1]
lea rdx, [0x180047618]
mov rcx, rsi
call fcn.180001370
nop
lea rcx, [rsp + 0x28]
call fcn.180013f8c
nop
mov rdx, qword [rbp]
sub rdx, 0x18
lock xadd dword [rdx + 0x10], ebx
dec ebx
test ebx, ebx
jg 0x180003275
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, rsi
add rsp, 0x50
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x180007e40
Capabilities:
Hash data with md5

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
sub rsp, 0xd0
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rsp + 0x100], rbx
mov rax, qword [0x1800572b0]
xor rax, rsp
mov qword [rsp + 0xc0], rax
mov rbp, r8
mov rsi, rdx
mov r12, rcx
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x38], r8
xor edi, edi
mov dword [rsp + 0x20], edi
call fcn.1800133dc
mov rcx, rax
mov eax, edi
test rcx, rcx
setne al
test eax, eax
jne 0x180007eaa
mov ecx, 0x80004005
call fcn.1800016d0
int3
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsi], rax
mov ebx, 1
mov dword [rsp + 0x20], ebx
call fcn.1800133dc
mov rcx, rax
mov eax, edi
test rcx, rcx
setne al
test eax, eax
jne 0x180007edf
mov ecx, 0x80004005
call fcn.1800016d0
int3
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x28], rax
mov byte [rsp + 0xb0], 0
xor eax, eax
mov qword [rsp + 0xb1], rax
mov dword [rsp + 0xb9], eax
mov word [rsp + 0xbd], ax
mov byte [rsp + 0xbf], al
mov dword [rsp + 0x50], edi
mov dword [rsp + 0x54], edi
mov dword [rsp + 0x58], 0x67452301
mov dword [rsp + 0x5c], 0xefcdab89
mov dword [rsp + 0x60], 0x98badcfe
mov dword [rsp + 0x64], 0x10325476
mov rax, qword [rbp]
mov r13d, dword [rax - 0x10]
sub ebx, dword [rax - 8]
mov eax, dword [rax - 0xc]
or eax, ebx
jge 0x180007f5a
xor edx, edx
mov rcx, rbp
call fcn.180001670
mov r9d, r13d
mov r8, qword [rbp]
lea rdx, [rsp + 0x50]
mov rcx, r12
call fcn.180008030
lea r8, [rsp + 0xb0]
lea rdx, [rsp + 0x50]
mov rcx, r12
call fcn.180008120
nop word [rax + rax]
movzx r8d, byte [rsp + rdi + 0xb0]
lea rdx, str._02x
lea rcx, [rsp + 0x28]
call fcn.180005970
mov rbx, qword [rsp + 0x28]
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
mov rcx, rsi
call fcn.1800057c0
inc rdi
cmp rdi, 0x10
jl 0x180007f90
lea rdx, [rbx - 0x18]
or ebx, 0xffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180007fe5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp]
sub rdx, 0x18
lock xadd dword [rdx + 0x10], ebx
dec ebx
test ebx, ebx
jg 0x180008002
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
mov rax, rsi
mov rcx, qword [rsp + 0xc0]
xor rcx, rsp
call fcn.180025cd0
mov rbx, qword [rsp + 0x100]
add rsp, 0xd0
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret

Function at 0x180011da0
Capabilities:
Print debug messages

Disassembly:
sub rsp, 0x28
lea rcx, str.This_module_subscribed_to_event_CHttpModule::OnBeginRequest_but_did_not_override_the_method_in_its_CHttpModule_implementation.__Please_check_the_method_signature_to_make_sure_it_matches_the_corresponding_method._n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
call qword [sym.imp.KERNEL32.dll_DebugBreak]
xor eax, eax
add rsp, 0x28
ret
Function at 0x180011dc0
Capabilities:
Print debug messages

Disassembly:
sub rsp, 0x28
lea rcx, str.This_module_subscribed_to_event_CHttpModule::OnPostBeginRequest_but_did_not_override_the_method_in_its_CHttpModule_implementation.__Please_check_the_method_signature_to_make_sure_it_matches_the_corresponding_method._n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
call qword [sym.imp.KERNEL32.dll_DebugBreak]
xor eax, eax
add rsp, 0x28
ret

Function at 0x180011de0
Capabilities:
Print debug messages

Disassembly:
sub rsp, 0x28
lea rcx, str.This_module_subscribed_to_event_CHttpModule::OnAuthenticateRequest_but_did_not_override_the_method_in_its_CHttpModule_implementation.__Please_check_the_method_signature_to_make_sure_it_matches_the_corresponding_method._n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
call qword [sym.imp.KERNEL32.dll_DebugBreak]
xor eax, eax
add rsp, 0x28
ret

Function at 0x180011e00
Capabilities:
Print debug messages

Disassembly:
sub rsp, 0x28
lea rcx, str.This_module_subscribed_to_event_CHttpModule::OnPostAuthenticateRequest_but_did_not_override_the_method_in_its_CHttpModule_implementation.__Please_check_the_method_signature_to_make_sure_it_matches_the_corresponding_method._n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
call qword [sym.imp.KERNEL32.dll_DebugBreak]
xor eax, eax
add rsp, 0x28
ret

Function at 0x180011e20
Capabilities:
Print debug messages

Disassembly:
sub rsp, 0x28
lea rcx, str.This_module_subscribed_to_event_CHttpModule::OnAuthorizeRequest_but_did_not_override_the_method_in_its_CHttpModule_implementation.__Please_check_the_method_signature_to_make_sure_it_matches_the_corresponding_method._n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
call qword [sym.imp.KERNEL32.dll_DebugBreak]
xor eax, eax
add rsp, 0x28
ret

Function at 0x180011e40
Capabilities:
Print debug messages

Disassembly:
sub rsp, 0x28
lea rcx, str.This_module_subscribed_to_event_CHttpModule::OnPostAuthorizeRequest_but_did_not_override_the_method_in_its_CHttpModule_implementation.__Please_check_the_method_signature_to_make_sure_it_matches_the_corresponding_method._n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
call qword [sym.imp.KERNEL32.dll_DebugBreak]
xor eax, eax
add rsp, 0x28
ret

Function at 0x180011e60
Capabilities:
Print debug messages

Disassembly:
sub rsp, 0x28
lea rcx, str.This_module_subscribed_to_event_CHttpModule::OnResolveRequestCache_but_did_not_override_the_method_in_its_CHttpModule_implementation.__Please_check_the_method_signature_to_make_sure_it_matches_the_corresponding_method._n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
call qword [sym.imp.KERNEL32.dll_DebugBreak]
xor eax, eax
add rsp, 0x28
ret

Function at 0x180011e80
Capabilities:
Print debug messages

Disassembly:
sub rsp, 0x28
lea rcx, str.This_module_subscribed_to_event_CHttpModule::OnPostResolveRequestCache_but_did_not_override_the_method_in_its_CHttpModule_implementation.__Please_check_the_method_signature_to_make_sure_it_matches_the_corresponding_method._n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
call qword [sym.imp.KERNEL32.dll_DebugBreak]
xor eax, eax
add rsp, 0x28
ret
Function at 0x180011ea0
Capabilities:
Print debug messages

Disassembly:
sub rsp, 0x28
lea rcx, str.This_module_subscribed_to_event_CHttpModule::OnMapRequestHandler_but_did_not_override_the_method_in_its_CHttpModule_implementation.__Please_check_the_method_signature_to_make_sure_it_matches_the_corresponding_method._n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
call qword [sym.imp.KERNEL32.dll_DebugBreak]
xor eax, eax
add rsp, 0x28
ret

Function at 0x180011ec0
Capabilities:
Print debug messages

Disassembly:
sub rsp, 0x28
lea rcx, str.This_module_subscribed_to_event_CHttpModule::OnPostMapRequestHandler_but_did_not_override_the_method_in_its_CHttpModule_implementation.__Please_check_the_method_signature_to_make_sure_it_matches_the_corresponding_method._n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
call qword [sym.imp.KERNEL32.dll_DebugBreak]
xor eax, eax
add rsp, 0x28
ret

Function at 0x180011ee0
Capabilities:
Print debug messages

Disassembly:
sub rsp, 0x28
lea rcx, str.This_module_subscribed_to_event_CHttpModule::OnAcquireRequestState_but_did_not_override_the_method_in_its_CHttpModule_implementation.__Please_check_the_method_signature_to_make_sure_it_matches_the_corresponding_method._n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
call qword [sym.imp.KERNEL32.dll_DebugBreak]
xor eax, eax
add rsp, 0x28
ret

Function at 0x180011f00
Capabilities:
Print debug messages

Disassembly:
sub rsp, 0x28
lea rcx, str.This_module_subscribed_to_event_CHttpModule::OnPostAcquireRequestState_but_did_not_override_the_method_in_its_CHttpModule_implementation.__Please_check_the_method_signature_to_make_sure_it_matches_the_corresponding_method._n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
call qword [sym.imp.KERNEL32.dll_DebugBreak]
xor eax, eax
add rsp, 0x28
ret

Function at 0x180011f20
Capabilities:
Print debug messages

Disassembly:
sub rsp, 0x28
lea rcx, str.This_module_subscribed_to_event_CHttpModule::OnPreExecuteRequestHandler_but_did_not_override_the_method_in_its_CHttpModule_implementation.__Please_check_the_method_signature_to_make_sure_it_matches_the_corresponding_method._n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
call qword [sym.imp.KERNEL32.dll_DebugBreak]
xor eax, eax
add rsp, 0x28
ret

Function at 0x180011f40
Capabilities:
Print debug messages

Disassembly:
sub rsp, 0x28
lea rcx, str.This_module_subscribed_to_event_CHttpModule::OnPostPreExecuteRequestHandler_but_did_not_override_the_method_in_its_CHttpModule_implementation.__Please_check_the_method_signature_to_make_sure_it_matches_the_corresponding_method._n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
call qword [sym.imp.KERNEL32.dll_DebugBreak]
xor eax, eax
add rsp, 0x28
ret

Function at 0x180011f60
Capabilities:
Print debug messages

Disassembly:
sub rsp, 0x28
lea rcx, str.This_module_subscribed_to_event_CHttpModule::OnExecuteRequestHandler_but_did_not_override_the_method_in_its_CHttpModule_implementation.__Please_check_the_method_signature_to_make_sure_it_matches_the_corresponding_method._n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
call qword [sym.imp.KERNEL32.dll_DebugBreak]
xor eax, eax
add rsp, 0x28
ret