joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14000a1b0
Capabilities:
Encode data using xor

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rbp
mov qword [r11 + 0x18], rsi
push rdi
sub rsp, 0x90
mov rax, qword [0x14003a040]
xor rax, rsp
mov qword [rsp + 0x68], rax
movups xmm0, xmmword [0x1400305e0]
movzx eax, byte [0x140030600]
xor r9d, r9d
cmp dword [0x14003a0a0], 2
mov ecx, r9d
movups xmm1, xmmword [str.________55rrut__X]
mov rsi, qword [0x14003b480]
movups xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x60], al
movups xmmword [rsp + 0x50], xmm1
jl 0x14000a35b
movdqa xmm0, xmmword [0x140030c90]
lea rdx, [r11 - 0x58]
movdqa xmm5, xmmword [0x140030c40]
movdqa xmm4, xmmword [0x140030ca0]
movaps xmmword [r11 - 0x18], xmm6
movdqa xmm6, xmmword [0x140030c60]
movdqa xmmword [rsp + 0x30], xmm0
mov r8d, dword [rsp + 0x30]
movaps xmmword [rsp + 0x70], xmm7
movdqa xmm7, xmmword [0x140030c70]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, ecx
lea eax, [rcx + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
paddd xmm3, xmm5
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
add ecx, 8
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
pmulld xmm0, xmm6
psubd xmm2, xmm0
movd xmm0, r8d
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rdx - 8], xmm2
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
movd xmm0, r8d
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movd xmm0, dword [rdx - 4]
xorps xmm3, xmm0
movd dword [rdx - 4], xmm3
cmp ecx, 0x20
jl 0x14000a260
movaps xmm7, xmmword [rsp + 0x70]
movaps xmm6, xmmword [rsp + 0x80]
cmp ecx, 0x21
jge 0x14000a39f
movsxd rax, ecx
lea r8, [rsp + 0x40]
add r8, rax
nop word [rax + rax]
mov eax, 0x8fb823ef
lea r8, [r8 + 1]
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x39
movzx eax, cl
inc ecx
sub al, dl
add al, 0x38
xor byte [r8 - 1], al
cmp ecx, 0x21
jl 0x14000a370
mov dword [rsp + 0x28], r9d
lea r8, [rsp + 0x40]
mov qword [rsp + 0x20], r9
mov rbp, 0xffffffffffffffff
mov r9d, ebp
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
mov eax, 2
mul rbx
cmovb rax, rbp
mov rcx, rax
call fcn.14002869c
mov r9d, ebp
mov dword [rsp + 0x28], ebx
lea r8, [rsp + 0x40]
mov qword [rsp + 0x20], rax
xor edx, edx
xor ecx, ecx
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov r9, rdi
xor r8d, r8d
mov edx, 0xc2
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rdi
call fcn.140028340
mov al, 1
mov rcx, qword [rsp + 0x68]
xor rcx, rsp
call fcn.140028320
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x140016890
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xa0
mov rax, qword [0x14003a040]
xor rax, rsp
mov qword [rbp + 0x47], rax
mov rsi, qword [0x14003b480]
mov ecx, 0x28
call fcn.140028348
mov rdi, rax
mov qword [rbp + 0x17], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, vtable.std::_Ref_count_obj2_class_std::promise_bool__.0
mov qword [rdi], rax
lea rbx, [rdi + 0x10]
mov rcx, rbx
call fcn.140026fc0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x37], xmm0
mov qword [rbp + 0x37], rbx
mov qword [rbp + 0x3f], rdi
movups xmmword [rbp + 0x27], xmm0
mov rax, qword [rbx]
test rax, rax
je 0x140016a99
cmp byte [rbx + 8], 0
je 0x14001692f
cmp byte [rax + 0xb8], 0
jne 0x140016a99
cmp byte [rbx + 0x10], 0
jne 0x140016a8e
mov byte [rbx + 0x10], 1
mov qword [rbp + 0x27], rax
mov byte [rbp + 0x2f], 1
lock inc dword [rax + 8]
mov qword [rbp - 9], rsi
lock inc dword [rdi + 8]
mov rbx, qword [rbp + 0x37]
mov qword [rbp - 1], rbx
mov qword [rbp + 7], rdi
mov ecx, 0x18
call fcn.140028348
mov qword [rax], rsi
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
xorps xmm0, xmm0
movdqu xmmword [rbp - 1], xmm0
mov qword [rbp + 0x17], rax
lea rcx, [rbp - 0x11]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0
mov r9, rax
lea r8, [0x140026c00]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x19], rax
test rax, rax
je 0x140016a7b
cmp dword [rbp - 0x11], 0
je 0x140016a6f
movaps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rbp + 0x17], xmm0
lea rcx, [rbp + 0x17]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140016a6f
xorps xmm0, xmm0
movaps xmmword [rbp + 0x37], xmm0
movdqa xmmword [rbp - 0x19], xmm0
mov ebx, 0xffffffff
mov rcx, qword [rbp + 0x27]
test rcx, rcx
je 0x140016a23
mov eax, ebx
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140016a23
mov rcx, qword [rbp + 0x27]
mov r8, qword [rcx + 0xc8]
test r8, r8
je 0x140016a18
mov rax, qword [r8]
mov rdx, rcx
mov rcx, r8
call qword [rax]
jmp 0x140016a23
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
nop
mov eax, ebx
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x140016a4a
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
lock xadd dword [rdi + 0xc], ebx
cmp ebx, 1
jne 0x140016a4a
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + VariantCopy]
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.140028320
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x11], 0
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 2
call fcn.1400157a0
int3
mov ecx, 4
call fcn.1400157a0
int3
Function at 0x140016b00
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xa0
mov rax, qword [0x14003a040]
xor rax, rsp
mov qword [rbp + 0x47], rax
mov rsi, qword [0x14003b480]
mov ecx, 0x28
call fcn.140028348
mov rdi, rax
mov qword [rbp + 0x17], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, vtable.std::_Ref_count_obj2_class_std::promise_bool__.0
mov qword [rdi], rax
lea rbx, [rdi + 0x10]
mov rcx, rbx
call fcn.140026fc0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x37], xmm0
mov qword [rbp + 0x37], rbx
mov qword [rbp + 0x3f], rdi
movups xmmword [rbp + 0x27], xmm0
mov rax, qword [rbx]
test rax, rax
je 0x140016d09
cmp byte [rbx + 8], 0
je 0x140016b9f
cmp byte [rax + 0xb8], 0
jne 0x140016d09
cmp byte [rbx + 0x10], 0
jne 0x140016cfe
mov byte [rbx + 0x10], 1
mov qword [rbp + 0x27], rax
mov byte [rbp + 0x2f], 1
lock inc dword [rax + 8]
mov qword [rbp - 9], rsi
lock inc dword [rdi + 8]
mov rbx, qword [rbp + 0x37]
mov qword [rbp - 1], rbx
mov qword [rbp + 7], rdi
mov ecx, 0x18
call fcn.140028348
mov qword [rax], rsi
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
xorps xmm0, xmm0
movdqu xmmword [rbp - 1], xmm0
mov qword [rbp + 0x17], rax
lea rcx, [rbp - 0x11]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0
mov r9, rax
lea r8, [0x140026c80]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x19], rax
test rax, rax
je 0x140016ceb
cmp dword [rbp - 0x11], 0
je 0x140016cdf
movaps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rbp + 0x17], xmm0
lea rcx, [rbp + 0x17]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140016cdf
xorps xmm0, xmm0
movaps xmmword [rbp + 0x37], xmm0
movdqa xmmword [rbp - 0x19], xmm0
mov ebx, 0xffffffff
mov rcx, qword [rbp + 0x27]
test rcx, rcx
je 0x140016c93
mov eax, ebx
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140016c93
mov rcx, qword [rbp + 0x27]
mov r8, qword [rcx + 0xc8]
test r8, r8
je 0x140016c88
mov rax, qword [r8]
mov rdx, rcx
mov rcx, r8
call qword [rax]
jmp 0x140016c93
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
nop
mov eax, ebx
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x140016cba
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
lock xadd dword [rdi + 0xc], ebx
cmp ebx, 1
jne 0x140016cba
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + VariantCopy]
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.140028320
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x11], 0
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 2
call fcn.1400157a0
int3
mov ecx, 4
call fcn.1400157a0
int3
Function at 0x140016d70
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xa0
mov rax, qword [0x14003a040]
xor rax, rsp
mov qword [rbp + 0x47], rax
mov rsi, qword [0x14003b480]
mov ecx, 0x28
call fcn.140028348
mov rdi, rax
mov qword [rbp + 0x17], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, vtable.std::_Ref_count_obj2_class_std::promise_bool__.0
mov qword [rdi], rax
lea rbx, [rdi + 0x10]
mov rcx, rbx
call fcn.140026fc0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x37], xmm0
mov qword [rbp + 0x37], rbx
mov qword [rbp + 0x3f], rdi
movups xmmword [rbp + 0x27], xmm0
mov rax, qword [rbx]
test rax, rax
je 0x140016f79
cmp byte [rbx + 8], 0
je 0x140016e0f
cmp byte [rax + 0xb8], 0
jne 0x140016f79
cmp byte [rbx + 0x10], 0
jne 0x140016f6e
mov byte [rbx + 0x10], 1
mov qword [rbp + 0x27], rax
mov byte [rbp + 0x2f], 1
lock inc dword [rax + 8]
mov qword [rbp - 9], rsi
lock inc dword [rdi + 8]
mov rbx, qword [rbp + 0x37]
mov qword [rbp - 1], rbx
mov qword [rbp + 7], rdi
mov ecx, 0x18
call fcn.140028348
mov qword [rax], rsi
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
xorps xmm0, xmm0
movdqu xmmword [rbp - 1], xmm0
mov qword [rbp + 0x17], rax
lea rcx, [rbp - 0x11]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0
mov r9, rax
lea r8, [0x140026d00]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x19], rax
test rax, rax
je 0x140016f5b
cmp dword [rbp - 0x11], 0
je 0x140016f4f
movaps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rbp + 0x17], xmm0
lea rcx, [rbp + 0x17]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140016f4f
xorps xmm0, xmm0
movaps xmmword [rbp + 0x37], xmm0
movdqa xmmword [rbp - 0x19], xmm0
mov ebx, 0xffffffff
mov rcx, qword [rbp + 0x27]
test rcx, rcx
je 0x140016f03
mov eax, ebx
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140016f03
mov rcx, qword [rbp + 0x27]
mov r8, qword [rcx + 0xc8]
test r8, r8
je 0x140016ef8
mov rax, qword [r8]
mov rdx, rcx
mov rcx, r8
call qword [rax]
jmp 0x140016f03
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
nop
mov eax, ebx
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x140016f2a
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
lock xadd dword [rdi + 0xc], ebx
cmp ebx, 1
jne 0x140016f2a
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + VariantCopy]
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.140028320
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x11], 0
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 2
call fcn.1400157a0
int3
mov ecx, 4
call fcn.1400157a0
int3
Function at 0x140016fe0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xa0
mov rax, qword [0x14003a040]
xor rax, rsp
mov qword [rbp + 0x47], rax
mov rsi, qword [0x14003b370]
mov r14, qword [0x14003b480]
mov ecx, 0x28
call fcn.140028348
mov rdi, rax
mov qword [rbp + 0x17], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, vtable.std::_Ref_count_obj2_class_std::promise_bool__.0
mov qword [rdi], rax
lea rbx, [rdi + 0x10]
mov rcx, rbx
call fcn.140026fc0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x37], xmm0
mov qword [rbp + 0x37], rbx
mov qword [rbp + 0x3f], rdi
movups xmmword [rbp + 0x27], xmm0
mov rax, qword [rbx]
test rax, rax
je 0x140017201
cmp byte [rbx + 8], 0
je 0x14001708b
cmp byte [rax + 0xb8], 0
jne 0x140017201
cmp byte [rbx + 0x10], 0
jne 0x1400171f6
mov byte [rbx + 0x10], 1
mov qword [rbp + 0x27], rax
mov byte [rbp + 0x2f], 1
lock inc dword [rax + 8]
mov qword [rbp - 9], r14
mov qword [rbp - 1], rsi
lock inc dword [rdi + 8]
mov rbx, qword [rbp + 0x37]
mov qword [rbp + 7], rbx
mov qword [rbp + 0xf], rdi
mov ecx, 0x20
call fcn.140028348
mov qword [rax], r14
mov qword [rax + 8], rsi
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rdi
xorps xmm0, xmm0
movdqu xmmword [rbp + 7], xmm0
mov qword [rbp + 0x17], rax
lea rcx, [rbp - 0x11]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0
mov r9, rax
lea r8, [0x140026d80]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x19], rax
test rax, rax
je 0x1400171e3
cmp dword [rbp - 0x11], 0
je 0x1400171d7
movaps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rbp + 0x17], xmm0
lea rcx, [rbp + 0x17]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400171d7
xorps xmm0, xmm0
movaps xmmword [rbp + 0x37], xmm0
movdqa xmmword [rbp - 0x19], xmm0
mov ebx, 0xffffffff
mov rcx, qword [rbp + 0x27]
test rcx, rcx
je 0x140017187
mov eax, ebx
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140017187
mov rcx, qword [rbp + 0x27]
mov r8, qword [rcx + 0xc8]
test r8, r8
je 0x14001717c
mov rax, qword [r8]
mov rdx, rcx
mov rcx, r8
call qword [rax]
jmp 0x140017187
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
nop
mov eax, ebx
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x1400171ae
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
lock xadd dword [rdi + 0xc], ebx
cmp ebx, 1
jne 0x1400171ae
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + VariantCopy]
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.140028320
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x11], 0
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 2
call fcn.1400157a0
int3
mov ecx, 4
call fcn.1400157a0
int3
Function at 0x1400172b0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xa0
mov rax, qword [0x14003a040]
xor rax, rsp
mov qword [rbp + 0x47], rax
mov rsi, qword [0x14003b370]
mov r14, qword [0x14003b480]
mov ecx, 0x28
call fcn.140028348
mov rdi, rax
mov qword [rbp + 0x17], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, vtable.std::_Ref_count_obj2_class_std::promise_bool__.0
mov qword [rdi], rax
lea rbx, [rdi + 0x10]
mov rcx, rbx
call fcn.140026fc0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x37], xmm0
mov qword [rbp + 0x37], rbx
mov qword [rbp + 0x3f], rdi
movups xmmword [rbp + 0x27], xmm0
mov rax, qword [rbx]
test rax, rax
je 0x1400174d1
cmp byte [rbx + 8], 0
je 0x14001735b
cmp byte [rax + 0xb8], 0
jne 0x1400174d1
cmp byte [rbx + 0x10], 0
jne 0x1400174c6
mov byte [rbx + 0x10], 1
mov qword [rbp + 0x27], rax
mov byte [rbp + 0x2f], 1
lock inc dword [rax + 8]
mov qword [rbp - 9], r14
mov qword [rbp - 1], rsi
lock inc dword [rdi + 8]
mov rbx, qword [rbp + 0x37]
mov qword [rbp + 7], rbx
mov qword [rbp + 0xf], rdi
mov ecx, 0x20
call fcn.140028348
mov qword [rax], r14
mov qword [rax + 8], rsi
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rdi
xorps xmm0, xmm0
movdqu xmmword [rbp + 7], xmm0
mov qword [rbp + 0x17], rax
lea rcx, [rbp - 0x11]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0
mov r9, rax
lea r8, [0x140026e00]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x19], rax
test rax, rax
je 0x1400174b3
cmp dword [rbp - 0x11], 0
je 0x1400174a7
movaps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rbp + 0x17], xmm0
lea rcx, [rbp + 0x17]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400174a7
xorps xmm0, xmm0
movaps xmmword [rbp + 0x37], xmm0
movdqa xmmword [rbp - 0x19], xmm0
mov ebx, 0xffffffff
mov rcx, qword [rbp + 0x27]
test rcx, rcx
je 0x140017457
mov eax, ebx
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140017457
mov rcx, qword [rbp + 0x27]
mov r8, qword [rcx + 0xc8]
test r8, r8
je 0x14001744c
mov rax, qword [r8]
mov rdx, rcx
mov rcx, r8
call qword [rax]
jmp 0x140017457
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
nop
mov eax, ebx
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x14001747e
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
lock xadd dword [rdi + 0xc], ebx
cmp ebx, 1
jne 0x14001747e
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + VariantCopy]
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.140028320
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x11], 0
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 2
call fcn.1400157a0
int3
mov ecx, 4
call fcn.1400157a0
int3
Function at 0x140017530
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xa0
mov rax, qword [0x14003a040]
xor rax, rsp
mov qword [rbp + 0x47], rax
mov rsi, qword [0x14003b480]
mov ecx, 0x28
call fcn.140028348
mov rdi, rax
mov qword [rbp + 0x17], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, vtable.std::_Ref_count_obj2_class_std::promise_bool__.0
mov qword [rdi], rax
lea rbx, [rdi + 0x10]
mov rcx, rbx
call fcn.140026fc0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x37], xmm0
mov qword [rbp + 0x37], rbx
mov qword [rbp + 0x3f], rdi
movups xmmword [rbp + 0x27], xmm0
mov rax, qword [rbx]
test rax, rax
je 0x140017739
cmp byte [rbx + 8], 0
je 0x1400175cf
cmp byte [rax + 0xb8], 0
jne 0x140017739
cmp byte [rbx + 0x10], 0
jne 0x14001772e
mov byte [rbx + 0x10], 1
mov qword [rbp + 0x27], rax
mov byte [rbp + 0x2f], 1
lock inc dword [rax + 8]
mov qword [rbp - 9], rsi
lock inc dword [rdi + 8]
mov rbx, qword [rbp + 0x37]
mov qword [rbp - 1], rbx
mov qword [rbp + 7], rdi
mov ecx, 0x18
call fcn.140028348
mov qword [rax], rsi
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
xorps xmm0, xmm0
movdqu xmmword [rbp - 1], xmm0
mov qword [rbp + 0x17], rax
lea rcx, [rbp - 0x11]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0
mov r9, rax
lea r8, [0x140026e80]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x19], rax
test rax, rax
je 0x14001771b
cmp dword [rbp - 0x11], 0
je 0x14001770f
movaps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rbp + 0x17], xmm0
lea rcx, [rbp + 0x17]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14001770f
xorps xmm0, xmm0
movaps xmmword [rbp + 0x37], xmm0
movdqa xmmword [rbp - 0x19], xmm0
mov ebx, 0xffffffff
mov rcx, qword [rbp + 0x27]
test rcx, rcx
je 0x1400176c3
mov eax, ebx
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400176c3
mov rcx, qword [rbp + 0x27]
mov r8, qword [rcx + 0xc8]
test r8, r8
je 0x1400176b8
mov rax, qword [r8]
mov rdx, rcx
mov rcx, r8
call qword [rax]
jmp 0x1400176c3
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
nop
mov eax, ebx
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x1400176ea
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
lock xadd dword [rdi + 0xc], ebx
cmp ebx, 1
jne 0x1400176ea
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + VariantCopy]
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.140028320
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x11], 0
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 2
call fcn.1400157a0
int3
mov ecx, 4
call fcn.1400157a0
int3
Function at 0x1400177a0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xa0
mov rax, qword [0x14003a040]
xor rax, rsp
mov qword [rbp + 0x47], rax
mov rsi, qword [0x14003b480]
mov ecx, 0x28
call fcn.140028348
mov rdi, rax
mov qword [rbp + 0x17], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, vtable.std::_Ref_count_obj2_class_std::promise_bool__.0
mov qword [rdi], rax
lea rbx, [rdi + 0x10]
mov rcx, rbx
call fcn.140026fc0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x37], xmm0
mov qword [rbp + 0x37], rbx
mov qword [rbp + 0x3f], rdi
movups xmmword [rbp + 0x27], xmm0
mov rax, qword [rbx]
test rax, rax
je 0x1400179a9
cmp byte [rbx + 8], 0
je 0x14001783f
cmp byte [rax + 0xb8], 0
jne 0x1400179a9
cmp byte [rbx + 0x10], 0
jne 0x14001799e
mov byte [rbx + 0x10], 1
mov qword [rbp + 0x27], rax
mov byte [rbp + 0x2f], 1
lock inc dword [rax + 8]
mov qword [rbp - 9], rsi
lock inc dword [rdi + 8]
mov rbx, qword [rbp + 0x37]
mov qword [rbp - 1], rbx
mov qword [rbp + 7], rdi
mov ecx, 0x18
call fcn.140028348
mov qword [rax], rsi
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
xorps xmm0, xmm0
movdqu xmmword [rbp - 1], xmm0
mov qword [rbp + 0x17], rax
lea rcx, [rbp - 0x11]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0
mov r9, rax
lea r8, [0x140026f00]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x19], rax
test rax, rax
je 0x14001798b
cmp dword [rbp - 0x11], 0
je 0x14001797f
movaps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rbp + 0x17], xmm0
lea rcx, [rbp + 0x17]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14001797f
xorps xmm0, xmm0
movaps xmmword [rbp + 0x37], xmm0
movdqa xmmword [rbp - 0x19], xmm0
mov ebx, 0xffffffff
mov rcx, qword [rbp + 0x27]
test rcx, rcx
je 0x140017933
mov eax, ebx
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140017933
mov rcx, qword [rbp + 0x27]
mov r8, qword [rcx + 0xc8]
test r8, r8
je 0x140017928
mov rax, qword [r8]
mov rdx, rcx
mov rcx, r8
call qword [rax]
jmp 0x140017933
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
nop
mov eax, ebx
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x14001795a
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
lock xadd dword [rdi + 0xc], ebx
cmp ebx, 1
jne 0x14001795a
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + VariantCopy]
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.140028320
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x11], 0
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 2
call fcn.1400157a0
int3
mov ecx, 4
call fcn.1400157a0
int3