joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140018b98
Capabilities:
Set environment variable

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xa0
xor r15d, r15d
mov r14, rdx
mov rsi, rcx
mov qword [rbp + 0x17], r15
xor edx, edx
mov qword [rbp + 0x1f], r15
lea rcx, [rbp - 0x39]
mov qword [rbp + 0x27], r15
mov qword [rbp + 0x2f], r15
mov edi, r15d
mov qword [rbp + 0x37], r15
mov byte [rbp + 0x3f], r15b
mov qword [rbp - 0x19], r15
mov qword [rbp - 0x11], r15
mov qword [rbp - 9], r15
mov qword [rbp - 1], r15
mov qword [rbp + 7], r15
mov byte [rbp + 0xf], r15b
call fcn.140011bd0
mov rax, qword [rbp - 0x31]
mov ebx, 0xfde9
cmp dword [rax + 0xc], ebx
jne 0x140018c22
cmp byte [rbp - 0x21], r15b
je 0x140018c1d
mov rax, qword [rbp - 0x39]
and dword [rax + 0x3a8], 0xfffffffd
mov r9d, ebx
jmp 0x140018c58
call fcn.140014058
test eax, eax
jne 0x140018c44
cmp byte [rbp - 0x21], r15b
je 0x140018c3c
mov rax, qword [rbp - 0x39]
and dword [rax + 0x3a8], 0xfffffffd
mov r9d, 1
jmp 0x140018c58
cmp byte [rbp - 0x21], r15b
je 0x140018c55
mov rax, qword [rbp - 0x39]
and dword [rax + 0x3a8], 0xfffffffd
mov r9d, r15d
lea r8, [rbp + 0x77]
mov rcx, rsi
lea rdx, [rbp + 0x17]
call fcn.140011a54
test eax, eax
jne 0x140018cf8
xor edx, edx
lea rcx, [rbp - 0x39]
call fcn.140011bd0
mov rax, qword [rbp - 0x31]
cmp dword [rax + 0xc], ebx
jne 0x140018c97
cmp byte [rbp - 0x21], r15b
je 0x140018ccc
mov rax, qword [rbp - 0x39]
and dword [rax + 0x3a8], 0xfffffffd
jmp 0x140018ccc
call fcn.140014058
test eax, eax
jne 0x140018cb8
cmp byte [rbp - 0x21], r15b
je 0x140018cb1
mov rax, qword [rbp - 0x39]
and dword [rax + 0x3a8], 0xfffffffd
mov ebx, 1
jmp 0x140018ccc
cmp byte [rbp - 0x21], r15b
je 0x140018cc9
mov rax, qword [rbp - 0x39]
and dword [rax + 0x3a8], 0xfffffffd
mov ebx, r15d
mov r9d, ebx
lea r8, [rbp + 0x77]
lea rdx, [rbp - 0x19]
mov rcx, r14
call fcn.140011a54
mov rdi, qword [rbp - 9]
test eax, eax
jne 0x140018cf8
mov rcx, qword [rbp + 0x27]
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov ebx, eax
jmp 0x140018cfb
mov ebx, r15d
cmp byte [rbp + 0xf], r15b
je 0x140018d09
mov rcx, rdi
call fcn.14000ec7c
cmp byte [rbp + 0x3f], r15b
je 0x140018d18
mov rcx, qword [rbp + 0x27]
call fcn.14000ec7c
lea r11, [rsp + 0xa0]
mov eax, ebx
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
Function at 0x14001c080
Capabilities:
Parse pe header

Disassembly:
mov eax, 0x5a4d
cmp word [rcx], ax
jne 0x14001c0a8
movsxd rdx, dword [rcx + 0x3c]
add rdx, rcx
cmp dword [rdx], 0x4550
jne 0x14001c0a8
xor eax, eax
mov ecx, 0x20b
cmp word [rdx + 0x18], cx
sete al
ret
xor eax, eax
ret

Function at 0x100403a20
Capabilities:
Encode data using xor

Disassembly:
xor al, 0x6c
xor al, 0x64
xor al, 0x67
xor al, 0x41
xor al, 0x3e
xor al, 0x7d
xor al, 0xa2
xor al, 0x9a
xor al, 0xa3
xor al, 0x88
xor al, 0x9d
xor al, 0xa4
xor al, 0x71
xor al, 0x74
xor al, 0x59
xor al, 0x87
xchg dword [rbp*4 - 0x57cb58cc], esi
xor al, 0x99
xor al, 0xa1
xor al, 0x86
xor al, 0xa3
xor al, 0xa3
movabs dword [0xa73490345934a834], eax
xor al, 0xad
xor al, 0xa7
xor al, 0xa8
xor al, 0x99
cdq
xor al, 0xa1
xor al, 0x67
xor al, 0x66
xor al, 0x90
xor al, 0xa7
xor al, 0x9c
xor al, 0x99
xor al, 0xa0
xor al, 0xa0
xor al, 0x67
xor al, 0x66
xor al, 0x62

Function at 0x14060b652
Capabilities:
Encode data using xor

Disassembly:
push 0xffffffffbf00f520
lea rsp, [rsp + 0x18]
jmp fcn.1405f6e5d
shld rdi, rax, cl
mov qword [r10], rdi
push 0x31bc1eb8
jmp 0x1406012f1
adc r10, 0xa
jmp 0x140605248
Function at 0x14000de40
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov rdx, qword [rcx + 0x10]
mov rdi, rcx
add rdx, 1
mov rbx, qword [rcx + 0x38]
xorps xmm0, xmm0
js 0x14000ded6
cvtsi2ss xmm0, rdx
divss xmm0, dword [rcx]
call sub.api_ms_win_crt_math_l1_1_0.dll_ceilf
movss xmm1, dword [0x140042380]
xor ecx, ecx
comiss xmm0, xmm1
jb 0x14000de91
subss xmm0, xmm1
comiss xmm0, xmm1
jae 0x14000de91
movabs rax, 0x8000000000000000
mov rcx, rax
cvttss2si rax, xmm0
add rax, rcx
mov ecx, 8
cmp rax, rcx
cmova rcx, rax
cmp rbx, rcx
jae 0x14000debc
cmp rbx, 0x200
jae 0x14000ded1
shl rbx, 3
cmp rbx, rcx
jb 0x14000ded1
mov rdx, rbx
mov rcx, rdi
mov rbx, rcx
jmp 0x14000debc
mov rax, rdx
and edx, 1
shr rax, 1
or rax, rdx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
jmp 0x14000de63
Function at 0x14000def0
Capabilities:
Hash data using fnv

Disassembly:
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp 0x14000def0
push rsi
push rdi
sub rsp, 0x28
movabs rax, 0xfffffffffffffff
mov rsi, rcx
bsr rcx, rax
mov edi, 1
mov eax, edi
shl rax, cl
cmp rdx, rax
ja 0x140022680
mov qword [rsp + 0x40], rbx
lea rax, [rdx - 1]
mov rbx, qword [rsi + 8]
or rax, rdi
bsr rcx, rax
mov qword [rsp + 0x48], rbp
mov r8, rbx
inc ecx
mov qword [rsp + 0x50], r14
shl rdi, cl
lea rcx, [rsi + 0x18]
mov qword [rsp + 0x20], r15
lea rdx, [rdi + rdi]
call fcn.14000e048
lea rax, [rdi - 1]
mov qword [rsi + 0x38], rdi
mov qword [rsi + 0x30], rax
movabs rbp, 0x100000001b3
mov rax, qword [rsi + 8]
movabs r15, 0xcbf29ce484222325
mov rax, qword [rax]
mov rcx, rax
nop dword [rax]
cmp rax, rbx
je 0x14000e02d
movzx edx, byte [rax + 0x11]
movzx r8d, byte [rax + 0x10]
mov r10, qword [rsi + 0x30]
xor r8, r15
mov rcx, qword [rcx]
imul r8, rbp
xor r8, rdx
movzx edx, byte [rax + 0x12]
imul r8, rbp
xor r8, rdx
movzx edx, byte [rax + 0x13]
imul r8, rbp
xor r8, rdx
imul r8, rbp
and r10, r8
mov r8, qword [rsi + 0x18]
add r10, r10
mov r9, qword [r8 + r10*8]
cmp r9, rbx
jne 0x14000dfde
mov qword [r8 + r10*8], rax
mov qword [r8 + r10*8 + 8], rax
mov rax, rcx
jmp 0x14000df80
mov rdx, qword [r8 + r10*8 + 8]
mov r11d, dword [rax + 0x10]
cmp r11d, dword [rdx + 0x10]
je 0x14002268e
lea rdi, [rdx + 8]
cmp r9, rdx
jne 0x14000e01f
mov r11, qword [rax + 8]
mov qword [r11], rcx
mov r9, qword [rcx + 8]
mov qword [r9], rdx
mov rdx, qword [rdi]
mov qword [rdx], rax
mov qword [rdi], r9
mov qword [rcx + 8], r11
mov qword [rax + 8], rdx
mov qword [r8 + r10*8], rax
jmp 0x14000dfd9
mov rdx, qword [rdi]
cmp r11d, dword [rdx + 0x10]
jne 0x14000dff1
jmp 0x1400226c1
mov r14, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x40]
mov r15, qword [rsp + 0x20]
add rsp, 0x28
pop rdi
pop rsi
ret
lea rcx, str.invalid_hash_bucket_count
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
int3
mov rdi, qword [rdx]
cmp rdi, rax
je 0x1400226b7
mov r11, qword [rax + 8]
mov qword [r11], rcx
mov r9, qword [rcx + 8]
mov qword [r9], rdi
mov rdx, qword [rdi + 8]
mov qword [rdx], rax
mov qword [rdi + 8], r9
mov qword [rcx + 8], r11
mov qword [rax + 8], rdx
mov qword [r8 + r10*8 + 8], rax
jmp 0x14000dfd9
mov r10, qword [rdx]
mov r9, qword [rax + 8]
mov qword [r9], rcx
mov r8, qword [rcx + 8]
mov qword [r8], r10
mov rdx, qword [r10 + 8]
mov qword [rdx], rax
mov qword [r10 + 8], r8
mov qword [rcx + 8], r9
mov qword [rax + 8], rdx
jmp 0x14000dfd9
Function at 0x140006120
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], r9
mov byte [rsp + 0x18], r8b
movsd qword [rsp + 0x10], xmm1
mov qword [rsp + 8], rcx
sub rsp, 0x68
movsd xmm0, qword [0x14012e4d8]
movsd qword [rsp + 0x50], xmm0
mov byte [rsp + 0x21], 1
mov dword [rsp + 0x38], 0x20d
mov dword [rsp + 0x3c], 0x50f
mov dword [rsp + 0x40], 0xee
movsd xmm0, qword [0x14012f8f8]
movsd qword [rsp + 0x58], xmm0
mov dword [rsp + 0x44], 0x17de
mov dword [rsp + 0x48], 0x930
mov dword [rsp + 0x4c], 0x11dc
xor eax, eax
cmp eax, 1
je 0x1400061b0
mov dword [rsp + 0x24], 0x4c
jmp 0x1400061a5
mov eax, dword [rsp + 0x24]
dec eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0
jle 0x1400061b0
jmp 0x14000619b
xor eax, eax
cmp eax, 1
je 0x1400061d6
mov dword [rsp + 0x28], 0x57
jmp 0x1400061cb
mov eax, dword [rsp + 0x28]
dec eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0
jle 0x1400061d6
jmp 0x1400061c1
xor eax, eax
test eax, eax
je 0x1400061fb
mov dword [rsp + 0x2c], 0x27
jmp 0x1400061f0
mov eax, dword [rsp + 0x2c]
dec eax
mov dword [rsp + 0x2c], eax
cmp dword [rsp + 0x2c], 0
jle 0x1400061fb
jmp 0x1400061e6
xor eax, eax
test eax, eax
je 0x140006220
mov dword [rsp + 0x30], 0x20
jmp 0x140006215
mov eax, dword [rsp + 0x30]
dec eax
mov dword [rsp + 0x30], eax
cmp dword [rsp + 0x30], 0
jle 0x140006220
jmp 0x14000620b
xor eax, eax
test eax, eax
je 0x140006245
mov dword [rsp + 0x34], 0x38
jmp 0x14000623a
mov eax, dword [rsp + 0x34]
dec eax
mov dword [rsp + 0x34], eax
cmp dword [rsp + 0x34], 0
jle 0x140006245
jmp 0x140006230
mov byte [rsp + 0x20], 1
mov rcx, qword [rsp + 0x88]
call fcn.1400af470
mov rcx, qword [rsp + 0x90]
call fcn.1400af470
movzx eax, byte [rsp + 0x20]
add rsp, 0x68
ret
Function at 0x1400156e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
movsd qword [rsp + 0x20], xmm3
mov byte [rsp + 0x18], r8b
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
sub rsp, 0x138
mov rax, qword [0x14014a098]
xor rax, rsp
mov qword [rsp + 0x128], rax
mov byte [rsp + 0x22], 0
lea rdx, [0x1400ef1c0]
lea rcx, [rsp + 0x108]
call fcn.1400ae2e0
mov dword [rsp + 0x3c], 0x735
mov dword [rsp + 0x40], 0x126e
lea rdx, [0x1400eeca8]
lea rcx, [rsp + 0xe8]
call fcn.1400ae2e0
movsd xmm0, qword [0x14012ece8]
movsd qword [rsp + 0x58], xmm0
movsd xmm0, qword [0x14012a140]
movsd qword [rsp + 0x60], xmm0
xor eax, eax
cmp eax, 1
je 0x14001578c
mov dword [rsp + 0x24], 0x46
jmp 0x140015781
mov eax, dword [rsp + 0x24]
dec eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0
jle 0x14001578c
jmp 0x140015777
lea rdx, [0x1400ef260]
lea rcx, [rsp + 0x88]
call fcn.1400ae2e0
mov qword [rsp + 0x48], rax
lea rdx, str.eagmijcllykehbutiuvdjjmjeclurmldvpbihlpmfcsectlgnnoyrtcfhqtgblhxb
lea rcx, [rsp + 0x68]
call fcn.1400ae2e0
mov rcx, qword [rsp + 0x48]
mov rdx, rcx
mov rcx, rax
call fcn.1400abaa0
mov byte [rsp + 0x20], al
lea rcx, [rsp + 0x68]
call fcn.1400af470
lea rcx, [rsp + 0x88]
call fcn.1400af470
movzx eax, byte [rsp + 0x20]
test eax, eax
je 0x140015809
mov dword [rsp + 0x28], 0x1d
jmp 0x1400157fe
mov eax, dword [rsp + 0x28]
dec eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0
jle 0x140015809
jmp 0x1400157f4
lea rdx, [0x1400eef58]
lea rcx, [rsp + 0xc8]
call fcn.1400ae2e0
mov qword [rsp + 0x50], rax
lea rdx, str.medmsbzwstixcjuductdofgxvwbuerqdqxomqouvjocbvddgyyse
lea rcx, [rsp + 0xa8]
call fcn.1400ae2e0
mov rcx, qword [rsp + 0x50]
mov rdx, rcx
mov rcx, rax
call fcn.1400aba40
mov byte [rsp + 0x21], al
lea rcx, [rsp + 0xa8]
call fcn.1400af470
lea rcx, [rsp + 0xc8]
call fcn.1400af470
movzx eax, byte [rsp + 0x21]
test eax, eax
je 0x14001588c
mov dword [rsp + 0x2c], 0xa
jmp 0x140015881
mov eax, dword [rsp + 0x2c]
dec eax
mov dword [rsp + 0x2c], eax
cmp dword [rsp + 0x2c], 0
jle 0x14001588c
jmp 0x140015877
xor eax, eax
cmp eax, 1
je 0x1400158b2
mov dword [rsp + 0x30], 0x13
jmp 0x1400158a7
mov eax, dword [rsp + 0x30]
dec eax
mov dword [rsp + 0x30], eax
cmp dword [rsp + 0x30], 0
jle 0x1400158b2
jmp 0x14001589d
xor eax, eax
cmp eax, 1
je 0x1400158d8
mov dword [rsp + 0x34], 0xe
jmp 0x1400158cd
mov eax, dword [rsp + 0x34]
dec eax
mov dword [rsp + 0x34], eax
cmp dword [rsp + 0x34], 0
jle 0x1400158d8
jmp 0x1400158c3
mov dword [rsp + 0x38], 0x3d44
lea rcx, [rsp + 0xe8]
call fcn.1400af470
lea rcx, [rsp + 0x108]
call fcn.1400af470
mov rcx, qword [rsp + 0x160]
call fcn.1400af470
mov eax, dword [rsp + 0x38]
mov rcx, qword [rsp + 0x128]
xor rcx, rsp
call fcn.1400b92a0
add rsp, 0x138
ret
Function at 0x14001c890
Capabilities:
Resolve function by parsing pe exports

Disassembly:
movsd qword [rsp + 0x20], xmm3
movsd qword [rsp + 0x18], xmm2
movsd qword [rsp + 0x10], xmm1
mov qword [rsp + 8], rcx
sub rsp, 0xf8
mov rax, qword [0x14014a098]
xor rax, rsp
mov qword [rsp + 0xe8], rax
mov dword [rsp + 0x34], 0x495
mov dword [rsp + 0x38], 0x1a3
lea rdx, [0x1401107b0]
lea rcx, [rsp + 0xc8]
call fcn.1400ae2e0
mov byte [rsp + 0x21], 0
mov dword [rsp + 0x3c], 0xcdc
movsd xmm0, qword [0x14012bc38]
movsd qword [rsp + 0x58], xmm0
lea rdx, str.xkxszvumpwbmkzvrpacdjcqoylgnzkommsrjiuscnmfgqrrqplcxtiejclqoaazvz
lea rcx, [rsp + 0xa8]
call fcn.1400ae2e0
mov byte [rsp + 0x22], 1
mov dword [rsp + 0x40], 0x11ec
movsd xmm0, qword [0x140129f00]
movsd qword [rsp + 0x60], xmm0
xor eax, eax
test eax, eax
je 0x14001c953
mov dword [rsp + 0x24], 0x35
jmp 0x14001c948
mov eax, dword [rsp + 0x24]
dec eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0
jle 0x14001c953
jmp 0x14001c93e
lea rdx, [0x1401108b0]
lea rcx, [rsp + 0x88]
call fcn.1400ae2e0
mov qword [rsp + 0x48], rax
lea rdx, str.mqzdzxlvhomsvhnxkcwpalgqxhhehfwejorogwgvjpsptgkopmyebzmsqjkqefhlglurkstluqgivxeouavaibuzhlibqjq
lea rcx, [rsp + 0x68]
call fcn.1400ae2e0
mov rcx, qword [rsp + 0x48]
mov rdx, rcx
mov rcx, rax
call fcn.1400aba40
mov byte [rsp + 0x20], al
lea rcx, [rsp + 0x68]
call fcn.1400af470
lea rcx, [rsp + 0x88]
call fcn.1400af470
movzx eax, byte [rsp + 0x20]
test eax, eax
je 0x14001c9d0
mov dword [rsp + 0x28], 0x56
jmp 0x14001c9c5
mov eax, dword [rsp + 0x28]
dec eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0
jle 0x14001c9d0
jmp 0x14001c9bb
xor eax, eax
cmp eax, 1
je 0x14001c9f6
mov dword [rsp + 0x2c], 9
jmp 0x14001c9eb
mov eax, dword [rsp + 0x2c]
dec eax
mov dword [rsp + 0x2c], eax
cmp dword [rsp + 0x2c], 0
jle 0x14001c9f6
jmp 0x14001c9e1
xor eax, eax
test eax, eax
je 0x14001ca1b
mov dword [rsp + 0x30], 0xa
jmp 0x14001ca10
mov eax, dword [rsp + 0x30]
dec eax
mov dword [rsp + 0x30], eax
cmp dword [rsp + 0x30], 0
jle 0x14001ca1b
jmp 0x14001ca06
movsd xmm0, qword [0x14012abe8]
movsd qword [rsp + 0x50], xmm0
lea rcx, [rsp + 0xa8]
call fcn.1400af470
lea rcx, [rsp + 0xc8]
call fcn.1400af470
mov rcx, qword [rsp + 0x128]
call fcn.1400af470
movsd xmm0, qword [rsp + 0x50]
mov rcx, qword [rsp + 0xe8]
xor rcx, rsp
call fcn.1400b92a0
add rsp, 0xf8
ret
Function at 0x140021210
Capabilities:
Resolve function by parsing pe exports

Disassembly:
movsd qword [rsp + 0x20], xmm3
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x78
mov dword [rsp + 0x38], 0x1891
movsd xmm0, qword [0x140128b08]
movsd qword [rsp + 0x50], xmm0
movsd xmm0, qword [0x1401299d0]
movsd qword [rsp + 0x58], xmm0
mov dword [rsp + 0x3c], 0xa39
mov byte [rsp + 0x20], 0
movsd xmm0, qword [0x14012fd68]
movsd qword [rsp + 0x60], xmm0
mov dword [rsp + 0x40], 0x639
mov byte [rsp + 0x21], 1
mov dword [rsp + 0x44], 0x3b4
mov dword [rsp + 0x48], 0x17e9
xor eax, eax
cmp eax, 1
je 0x1400212ab
mov dword [rsp + 0x24], 0x55
jmp 0x1400212a0
mov eax, dword [rsp + 0x24]
dec eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0
jle 0x1400212ab
jmp 0x140021296
xor eax, eax
test eax, eax
je 0x1400212d0
mov dword [rsp + 0x28], 0x50
jmp 0x1400212c5
mov eax, dword [rsp + 0x28]
dec eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0
jle 0x1400212d0
jmp 0x1400212bb
xor eax, eax
test eax, eax
je 0x1400212f5
mov dword [rsp + 0x2c], 0x14
jmp 0x1400212ea
mov eax, dword [rsp + 0x2c]
dec eax
mov dword [rsp + 0x2c], eax
cmp dword [rsp + 0x2c], 0
jle 0x1400212f5
jmp 0x1400212e0
xor eax, eax
cmp eax, 1
je 0x14002131b
mov dword [rsp + 0x30], 0x4b
jmp 0x140021310
mov eax, dword [rsp + 0x30]
dec eax
mov dword [rsp + 0x30], eax
cmp dword [rsp + 0x30], 0
jle 0x14002131b
jmp 0x140021306
xor eax, eax
cmp eax, 1
je 0x140021341
mov dword [rsp + 0x34], 6
jmp 0x140021336
mov eax, dword [rsp + 0x34]
dec eax
mov dword [rsp + 0x34], eax
cmp dword [rsp + 0x34], 0
jle 0x140021341
jmp 0x14002132c
lea rdx, str.bonnwosnztflqv
mov rcx, qword [rsp + 0x88]
call fcn.1400ae2e0
mov rcx, qword [rsp + 0x90]
call fcn.1400af470
mov rax, qword [rsp + 0x88]
add rsp, 0x78
ret
Function at 0x140021da0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov byte [rsp + 0x20], r9b
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x98
mov rax, qword [0x14014a098]
xor rax, rsp
mov qword [rsp + 0x88], rax
mov byte [rsp + 0x20], 0
lea rdx, str.lkgpwujcojkoardcrgwhmbuaaixlslxuwkpajrzlakdhxvoorzbpxphqsbzifaasdexqdlefnkdnoibn
lea rcx, [rsp + 0x68]
call fcn.1400ae2e0
movsd xmm0, qword [0x14012a360]
movsd qword [rsp + 0x40], xmm0
mov byte [rsp + 0x21], 0
mov byte [rsp + 0x22], 0
lea rdx, str.ruiwzqsxtyhpjrdohpgcswr
lea rcx, [rsp + 0x48]
call fcn.1400ae2e0
mov dword [rsp + 0x34], 0x369
mov dword [rsp + 0x38], 0xf97
mov dword [rsp + 0x3c], 0x63c
mov byte [rsp + 0x23], 0
xor eax, eax
test eax, eax
je 0x140021e4e
mov dword [rsp + 0x24], 0x33
jmp 0x140021e43
mov eax, dword [rsp + 0x24]
dec eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0
jle 0x140021e4e
jmp 0x140021e39
xor eax, eax
cmp eax, 1
je 0x140021e74
mov dword [rsp + 0x28], 0x4b
jmp 0x140021e69
mov eax, dword [rsp + 0x28]
dec eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0
jle 0x140021e74
jmp 0x140021e5f
xor eax, eax
test eax, eax
je 0x140021e99
mov dword [rsp + 0x2c], 0xe
jmp 0x140021e8e
mov eax, dword [rsp + 0x2c]
dec eax
mov dword [rsp + 0x2c], eax
cmp dword [rsp + 0x2c], 0
jle 0x140021e99
jmp 0x140021e84
xor eax, eax
test eax, eax
je 0x140021ebe
mov dword [rsp + 0x30], 0x12
jmp 0x140021eb3
mov eax, dword [rsp + 0x30]
dec eax
mov dword [rsp + 0x30], eax
cmp dword [rsp + 0x30], 0
jle 0x140021ebe
jmp 0x140021ea9
lea rdx, str.cffmuvskji
mov rcx, qword [rsp + 0xa8]
call fcn.1400ae2e0
lea rcx, [rsp + 0x48]
call fcn.1400af470
lea rcx, [rsp + 0x68]
call fcn.1400af470
mov rcx, qword [rsp + 0xb0]
call fcn.1400af470
mov rcx, qword [rsp + 0xe0]
call fcn.1400af470
mov rcx, qword [rsp + 0xf0]
call fcn.1400af470
mov rax, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0x88]
xor rcx, rsp
call fcn.1400b92a0
add rsp, 0x98
ret
Function at 0x1400256f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], r9
mov dword [rsp + 0x18], r8d
movsd qword [rsp + 0x10], xmm1
mov qword [rsp + 8], rcx
sub rsp, 0x58
mov dword [rsp + 0x3c], 0x433
movsd xmm0, qword [0x14012eef8]
movsd qword [rsp + 0x40], xmm0
mov byte [rsp + 0x20], 0
xor eax, eax
cmp eax, 1
je 0x14002574a
mov dword [rsp + 0x24], 0x3f
jmp 0x14002573f
mov eax, dword [rsp + 0x24]
dec eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0
jle 0x14002574a
jmp 0x140025735
xor eax, eax
test eax, eax
je 0x14002576f
mov dword [rsp + 0x28], 0x31
jmp 0x140025764
mov eax, dword [rsp + 0x28]
dec eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0
jle 0x14002576f
jmp 0x14002575a
xor eax, eax
cmp eax, 1
je 0x140025795
mov dword [rsp + 0x2c], 0x1b
jmp 0x14002578a
mov eax, dword [rsp + 0x2c]
dec eax
mov dword [rsp + 0x2c], eax
cmp dword [rsp + 0x2c], 0
jle 0x140025795
jmp 0x140025780
xor eax, eax
cmp eax, 1
je 0x1400257bb
mov dword [rsp + 0x30], 0x2a
jmp 0x1400257b0
mov eax, dword [rsp + 0x30]
dec eax
mov dword [rsp + 0x30], eax
cmp dword [rsp + 0x30], 0
jle 0x1400257bb
jmp 0x1400257a6
xor eax, eax
test eax, eax
je 0x1400257e0
mov dword [rsp + 0x34], 0x4d
jmp 0x1400257d5
mov eax, dword [rsp + 0x34]
dec eax
mov dword [rsp + 0x34], eax
cmp dword [rsp + 0x34], 0
jle 0x1400257e0
jmp 0x1400257cb
mov dword [rsp + 0x38], 0xd094
mov rcx, qword [rsp + 0x78]
call fcn.1400af470
mov rcx, qword [rsp + 0x80]
call fcn.1400af470
mov rcx, qword [rsp + 0x88]
call fcn.1400af470
mov eax, dword [rsp + 0x38]
add rsp, 0x58
ret
Function at 0x1400290f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov dword [rsp + 0x20], r9d
mov byte [rsp + 0x18], r8b
movsd qword [rsp + 0x10], xmm1
mov qword [rsp + 8], rcx
sub rsp, 0xf8
mov rax, qword [0x14014a098]
xor rax, rsp
mov qword [rsp + 0xe8], rax
mov dword [rsp + 0x38], 0xc92
lea rdx, [0x1400ddfc4]
lea rcx, [rsp + 0xc8]
call fcn.1400ae2e0
movsd xmm0, qword [0x14012ef90]
movsd qword [rsp + 0x58], xmm0
lea rdx, [0x1400f3730]
lea rcx, [rsp + 0xa8]
call fcn.1400ae2e0
movsd xmm0, qword [0x1401297e8]
movsd qword [rsp + 0x60], xmm0
mov dword [rsp + 0x3c], 0x7a1
mov dword [rsp + 0x40], 0x2d8
xor eax, eax
test eax, eax
je 0x14002919f
mov dword [rsp + 0x24], 0xf
jmp 0x140029194
mov eax, dword [rsp + 0x24]
dec eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0
jle 0x14002919f
jmp 0x14002918a
xor eax, eax
test eax, eax
je 0x1400291c4
mov dword [rsp + 0x28], 0xc
jmp 0x1400291b9
mov eax, dword [rsp + 0x28]
dec eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0
jle 0x1400291c4
jmp 0x1400291af
lea rdx, [0x1400f37d0]
lea rcx, [rsp + 0x88]
call fcn.1400ae2e0
mov qword [rsp + 0x48], rax
lea rdx, str.skaxayweltktbtcvsdaivakdtzsdpotwmkppsoyrxmunqabmenaoubyjyghqjhiesofsufqipmbpcyzljsoivciklot
lea rcx, [rsp + 0x68]
call fcn.1400ae2e0
mov rcx, qword [rsp + 0x48]
mov rdx, rcx
mov rcx, rax
call fcn.1400abaa0
mov byte [rsp + 0x20], al
lea rcx, [rsp + 0x68]
call fcn.1400af470
lea rcx, [rsp + 0x88]
call fcn.1400af470
movzx eax, byte [rsp + 0x20]
test eax, eax
je 0x140029241
mov dword [rsp + 0x2c], 0x5e
jmp 0x140029236
mov eax, dword [rsp + 0x2c]
dec eax
mov dword [rsp + 0x2c], eax
cmp dword [rsp + 0x2c], 0
jle 0x140029241
jmp 0x14002922c
xor eax, eax
test eax, eax
je 0x140029266
mov dword [rsp + 0x30], 0x19
jmp 0x14002925b
mov eax, dword [rsp + 0x30]
dec eax
mov dword [rsp + 0x30], eax
cmp dword [rsp + 0x30], 0
jle 0x140029266
jmp 0x140029251
xor eax, eax
test eax, eax
je 0x14002928b
mov dword [rsp + 0x34], 0x44
jmp 0x140029280
mov eax, dword [rsp + 0x34]
dec eax
mov dword [rsp + 0x34], eax
cmp dword [rsp + 0x34], 0
jle 0x14002928b
jmp 0x140029276
movsd xmm0, qword [0x14012b298]
movsd qword [rsp + 0x50], xmm0
lea rcx, [rsp + 0xa8]
call fcn.1400af470
lea rcx, [rsp + 0xc8]
call fcn.1400af470
mov rcx, qword [rsp + 0x138]
call fcn.1400af470
mov rcx, qword [rsp + 0x140]
call fcn.1400af470
movsd xmm0, qword [rsp + 0x50]
mov rcx, qword [rsp + 0xe8]
xor rcx, rsp
call fcn.1400b92a0
add rsp, 0xf8
ret
Function at 0x14002e070
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov byte [rsp + 0x20], r9b
mov byte [rsp + 0x18], r8b
movsd qword [rsp + 0x10], xmm1
mov qword [rsp + 8], rcx
sub rsp, 0xb8
mov rax, qword [0x14014a098]
xor rax, rsp
mov qword [rsp + 0xa8], rax
lea rdx, [0x1401029b0]
lea rcx, [rsp + 0x88]
call fcn.1400ae2e0
mov byte [rsp + 0x21], 0
mov dword [rsp + 0x30], 0x13da
mov dword [rsp + 0x34], 0x1db4
mov dword [rsp + 0x38], 0x18d1
mov dword [rsp + 0x3c], 0x3ee
mov byte [rsp + 0x22], 0
lea rdx, [0x140102ab0]
lea rcx, [rsp + 0x68]
call fcn.1400ae2e0
mov qword [rsp + 0x40], rax
lea rdx, str.cazphzmchdknsgbisrkpmltwguixsncamxuiozytbsyuvpzezrsahtsizfjvlrwgieqoooeqqisnsmnqitoslygvtocepoyo
lea rcx, [rsp + 0x48]
call fcn.1400ae2e0
mov rcx, qword [rsp + 0x40]
mov rdx, rcx
mov rcx, rax
call fcn.1400abaa0
mov byte [rsp + 0x20], al
lea rcx, [rsp + 0x48]
call fcn.1400af470
lea rcx, [rsp + 0x68]
call fcn.1400af470
movzx eax, byte [rsp + 0x20]
test eax, eax
je 0x14002e153
mov dword [rsp + 0x24], 0x17
jmp 0x14002e148
mov eax, dword [rsp + 0x24]
dec eax
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0
jle 0x14002e153
jmp 0x14002e13e
xor eax, eax
test eax, eax
je 0x14002e178
mov dword [rsp + 0x28], 0x4e
jmp 0x14002e16d
mov eax, dword [rsp + 0x28]
dec eax
mov dword [rsp + 0x28], eax
cmp dword [rsp + 0x28], 0
jle 0x14002e178
jmp 0x14002e163
mov dword [rsp + 0x2c], 0x12f4e
lea rcx, [rsp + 0x88]
call fcn.1400af470
mov rcx, qword [rsp + 0xe8]
call fcn.1400af470
mov eax, dword [rsp + 0x2c]
mov rcx, qword [rsp + 0xa8]
xor rcx, rsp
call fcn.1400b92a0
add rsp, 0xb8
ret