joyce8/EMBER2024-capa huggingface dataset:
Function at 0x695c4540
Capabilities:
Query environment variable

Disassembly:
push r12
push rdi
push rsi
push rbx
sub rsp, 0x88
movups xmmword [rsp + 0x20], xmm6
movups xmmword [rsp + 0x30], xmm7
movups xmmword [rsp + 0x40], xmm8
movups xmmword [rsp + 0x50], xmm9
movups xmmword [rsp + 0x60], xmm10
movups xmmword [rsp + 0x70], xmm11
movss xmm9, dword [rsp + 0xd0]
mov ebx, dword [rsp + 0xd8]
mov r12, rcx
movups xmm7, xmm2
movups xmm8, xmm3
mov esi, edx
cmp edx, 2
jbe 0x695c4670
pxor xmm0, xmm0
comiss xmm0, xmm2
jae 0x695c4670
call fcn.695e5ce0
mov rcx, r12
pxor xmm11, xmm11
pxor xmm6, xmm6
mov edi, dword [rax]
pxor xmm10, xmm10
cvtss2sd xmm7, xmm7
cvtss2sd xmm9, xmm9
call fcn.695e5cf0
cmp bl, 1
cvtss2sd xmm8, xmm8
mov r12d, dword [rax]
sbb ecx, ecx
cvtsi2sd xmm10, edi
xor ebx, ebx
and ecx, 7
cvtsi2sd xmm11, r12d
add ecx, 2
call sub.OPENGL32.dll_glBegin
nop dword [rax + rax]
movupd xmm0, xmm10
movupd xmm1, xmm11
add ebx, 1
addsd xmm0, xmm7
addsd xmm1, xmm6
call sub.OPENGL32.dll_glVertex2d
movupd xmm2, xmm9
movupd xmm0, xmm7
movupd xmm1, xmm8
mulsd xmm2, xmm7
mulsd xmm1, xmm6
mulsd xmm0, xmm8
mulsd xmm6, xmm9
movupd xmm7, xmm2
subsd xmm7, xmm1
addsd xmm6, xmm0
cmp esi, ebx
ja 0x695c45f0
movups xmm6, xmmword [rsp + 0x20]
movups xmm7, xmmword [rsp + 0x30]
movups xmm8, xmmword [rsp + 0x40]
movups xmm9, xmmword [rsp + 0x50]
movups xmm10, xmmword [rsp + 0x60]
movups xmm11, xmmword [rsp + 0x70]
add rsp, 0x88
pop rbx
pop rsi
pop rdi
pop r12
jmp fcn.695814b8
movups xmm6, xmmword [rsp + 0x20]
movups xmm7, xmmword [rsp + 0x30]
mov r9d, 0x7f
lea r8, str._home_runner_work_trnr_plugins_trnr_plugins_lib_dpf_dgl_src_OpenGL.cpp
movups xmm8, xmmword [rsp + 0x40]
movups xmm9, xmmword [rsp + 0x50]
lea rdx, str.numSegments___3__size___0.0f
lea rcx, [0x69636b20]
movups xmm10, xmmword [rsp + 0x60]
movups xmm11, xmmword [rsp + 0x70]
add rsp, 0x88
pop rbx
pop rsi
pop rdi
pop r12
jmp fcn.69598970
Function at 0x695c46c0
Capabilities:
Query environment variable

Disassembly:
push r12
push rdi
push rsi
push rbx
sub rsp, 0x88
movups xmmword [rsp + 0x20], xmm6
movups xmmword [rsp + 0x30], xmm7
movups xmmword [rsp + 0x40], xmm8
movups xmmword [rsp + 0x50], xmm9
movups xmmword [rsp + 0x60], xmm10
movups xmmword [rsp + 0x70], xmm11
movss xmm9, dword [rsp + 0xd0]
mov edi, dword [rsp + 0xd8]
mov r12, rcx
movups xmm7, xmm2
movups xmm8, xmm3
mov esi, edx
cmp edx, 2
jbe 0x695c47f0
pxor xmm0, xmm0
comiss xmm0, xmm2
jae 0x695c47f0
call fcn.695e5d80
mov rcx, r12
pxor xmm11, xmm11
pxor xmm6, xmm6
mov ebx, dword [rax]
pxor xmm10, xmm10
cvtss2sd xmm7, xmm7
cvtss2sd xmm9, xmm9
call fcn.695e5d90
cmp dil, 1
cvtss2sd xmm8, xmm8
mov r12d, dword [rax]
sbb ecx, ecx
cvtsi2sd xmm10, rbx
xor ebx, ebx
and ecx, 7
cvtsi2sd xmm11, r12
add ecx, 2
call sub.OPENGL32.dll_glBegin
nop dword [rax]
movupd xmm0, xmm10
movupd xmm1, xmm11
add ebx, 1
addsd xmm0, xmm7
addsd xmm1, xmm6
call sub.OPENGL32.dll_glVertex2d
movupd xmm2, xmm9
movupd xmm0, xmm7
movupd xmm1, xmm8
mulsd xmm2, xmm7
mulsd xmm1, xmm6
mulsd xmm0, xmm8
mulsd xmm6, xmm9
movupd xmm7, xmm2
subsd xmm7, xmm1
addsd xmm6, xmm0
cmp esi, ebx
ja 0x695c4770
movups xmm6, xmmword [rsp + 0x20]
movups xmm7, xmmword [rsp + 0x30]
movups xmm8, xmmword [rsp + 0x40]
movups xmm9, xmmword [rsp + 0x50]
movups xmm10, xmmword [rsp + 0x60]
movups xmm11, xmmword [rsp + 0x70]
add rsp, 0x88
pop rbx
pop rsi
pop rdi
pop r12
jmp fcn.695814b8
movups xmm6, xmmword [rsp + 0x20]
movups xmm7, xmmword [rsp + 0x30]
mov r9d, 0x7f
lea r8, str._home_runner_work_trnr_plugins_trnr_plugins_lib_dpf_dgl_src_OpenGL.cpp
movups xmm8, xmmword [rsp + 0x40]
movups xmm9, xmmword [rsp + 0x50]
lea rdx, str.numSegments___3__size___0.0f
lea rcx, [0x69636b20]
movups xmm10, xmmword [rsp + 0x60]
movups xmm11, xmmword [rsp + 0x70]
add rsp, 0x88
pop rbx
pop rsi
pop rdi
pop r12
jmp fcn.69598970
Function at 0x695c4840
Capabilities:
Query environment variable

Disassembly:
push r12
push rdi
push rsi
push rbx
sub rsp, 0x88
movups xmmword [rsp + 0x20], xmm6
movups xmmword [rsp + 0x30], xmm7
movups xmmword [rsp + 0x40], xmm8
movups xmmword [rsp + 0x50], xmm9
movups xmmword [rsp + 0x60], xmm10
movups xmmword [rsp + 0x70], xmm11
movss xmm9, dword [rsp + 0xd0]
mov edi, dword [rsp + 0xd8]
mov r12, rcx
movups xmm7, xmm2
movups xmm8, xmm3
mov esi, edx
cmp edx, 2
jbe 0x695c4970
pxor xmm0, xmm0
comiss xmm0, xmm2
jae 0x695c4970
call fcn.695e5e20
mov rcx, r12
pxor xmm11, xmm11
pxor xmm6, xmm6
movsx ebx, word [rax]
pxor xmm10, xmm10
cvtss2sd xmm7, xmm7
cvtss2sd xmm9, xmm9
call fcn.695e5e30
cmp dil, 1
cvtss2sd xmm8, xmm8
movsx r12d, word [rax]
sbb ecx, ecx
cvtsi2sd xmm10, ebx
xor ebx, ebx
and ecx, 7
cvtsi2sd xmm11, r12d
add ecx, 2
call sub.OPENGL32.dll_glBegin
nop
movupd xmm0, xmm10
movupd xmm1, xmm11
add ebx, 1
addsd xmm0, xmm7
addsd xmm1, xmm6
call sub.OPENGL32.dll_glVertex2d
movupd xmm2, xmm9
movupd xmm0, xmm7
movupd xmm1, xmm8
mulsd xmm2, xmm7
mulsd xmm1, xmm6
mulsd xmm0, xmm8
mulsd xmm6, xmm9
movupd xmm7, xmm2
subsd xmm7, xmm1
addsd xmm6, xmm0
cmp esi, ebx
ja 0x695c48f0
movups xmm6, xmmword [rsp + 0x20]
movups xmm7, xmmword [rsp + 0x30]
movups xmm8, xmmword [rsp + 0x40]
movups xmm9, xmmword [rsp + 0x50]
movups xmm10, xmmword [rsp + 0x60]
movups xmm11, xmmword [rsp + 0x70]
add rsp, 0x88
pop rbx
pop rsi
pop rdi
pop r12
jmp fcn.695814b8
movups xmm6, xmmword [rsp + 0x20]
movups xmm7, xmmword [rsp + 0x30]
mov r9d, 0x7f
lea r8, str._home_runner_work_trnr_plugins_trnr_plugins_lib_dpf_dgl_src_OpenGL.cpp
movups xmm8, xmmword [rsp + 0x40]
movups xmm9, xmmword [rsp + 0x50]
lea rdx, str.numSegments___3__size___0.0f
lea rcx, [0x69636b20]
movups xmm10, xmmword [rsp + 0x60]
movups xmm11, xmmword [rsp + 0x70]
add rsp, 0x88
pop rbx
pop rsi
pop rdi
pop r12
jmp fcn.69598970
Function at 0x695c49c0
Capabilities:
Query environment variable

Disassembly:
push r12
push rdi
push rsi
push rbx
sub rsp, 0x88
movups xmmword [rsp + 0x20], xmm6
movups xmmword [rsp + 0x30], xmm7
movups xmmword [rsp + 0x40], xmm8
movups xmmword [rsp + 0x50], xmm9
movups xmmword [rsp + 0x60], xmm10
movups xmmword [rsp + 0x70], xmm11
movss xmm9, dword [rsp + 0xd0]
mov edi, dword [rsp + 0xd8]
mov r12, rcx
movups xmm7, xmm2
movups xmm8, xmm3
mov esi, edx
cmp edx, 2
jbe 0x695c4af0
pxor xmm0, xmm0
comiss xmm0, xmm2
jae 0x695c4af0
call fcn.695e5ec0
mov rcx, r12
pxor xmm11, xmm11
pxor xmm6, xmm6
movzx ebx, word [rax]
pxor xmm10, xmm10
cvtss2sd xmm7, xmm7
cvtss2sd xmm9, xmm9
call fcn.695e5ed0
cmp dil, 1
cvtss2sd xmm8, xmm8
movzx r12d, word [rax]
sbb ecx, ecx
cvtsi2sd xmm10, ebx
xor ebx, ebx
and ecx, 7
cvtsi2sd xmm11, r12d
add ecx, 2
call sub.OPENGL32.dll_glBegin
nop
movupd xmm0, xmm10
movupd xmm1, xmm11
add ebx, 1
addsd xmm0, xmm7
addsd xmm1, xmm6
call sub.OPENGL32.dll_glVertex2d
movupd xmm2, xmm7
movupd xmm0, xmm7
movupd xmm1, xmm6
mulsd xmm2, xmm9
mulsd xmm1, xmm8
mulsd xmm6, xmm9
mulsd xmm0, xmm8
movupd xmm7, xmm2
subsd xmm7, xmm1
addsd xmm6, xmm0
cmp esi, ebx
ja 0x695c4a70
movups xmm6, xmmword [rsp + 0x20]
movups xmm7, xmmword [rsp + 0x30]
movups xmm8, xmmword [rsp + 0x40]
movups xmm9, xmmword [rsp + 0x50]
movups xmm10, xmmword [rsp + 0x60]
movups xmm11, xmmword [rsp + 0x70]
add rsp, 0x88
pop rbx
pop rsi
pop rdi
pop r12
jmp fcn.695814b8
movups xmm6, xmmword [rsp + 0x20]
movups xmm7, xmmword [rsp + 0x30]
mov r9d, 0x7f
lea r8, str._home_runner_work_trnr_plugins_trnr_plugins_lib_dpf_dgl_src_OpenGL.cpp
movups xmm8, xmmword [rsp + 0x40]
movups xmm9, xmmword [rsp + 0x50]
lea rdx, str.numSegments___3__size___0.0f
lea rcx, [0x69636b20]
movups xmm10, xmmword [rsp + 0x60]
movups xmm11, xmmword [rsp + 0x70]
add rsp, 0x88
pop rbx
pop rsi
pop rdi
pop r12
jmp fcn.69598970

Function at 0x695c51c0
Capabilities:
Log keystrokes via polling

Disassembly:
push r12
push rbx
sub rsp, 0x28
mov rbx, qword [sym.imp.USER32.dll_GetKeyState]
mov ecx, 0x10
call rbx
mov ecx, 0x11
movsx r12d, ax
call rbx
shr r12d, 0x1f
mov ecx, 0x12
mov r8d, eax
mov eax, r12d
or eax, 2
test r8w, r8w
cmovs r12d, eax
call rbx
mov ecx, 0x5b
mov r8d, eax
mov eax, r12d
or eax, 4
test r8w, r8w
cmovs r12d, eax
call rbx
mov ecx, 0x5c
mov r8d, eax
mov eax, r12d
or eax, 8
test r8w, r8w
cmovs r12d, eax
call rbx
mov ecx, 0x90
mov r8d, eax
mov eax, r12d
or eax, 8
test r8w, r8w
cmovs r12d, eax
call rbx
mov ecx, 0x91
mov r8d, eax
mov eax, r12d
or eax, 0x10
and r8d, 1
cmovne r12d, eax
call rbx
mov ecx, 0x14
mov r8d, eax
mov eax, r12d
or eax, 0x20
and r8d, 1
cmovne r12d, eax
call rbx
mov r8d, eax
mov eax, r12d
or eax, 0x40
and r8d, 1
cmovne r12d, eax
mov eax, r12d
add rsp, 0x28
pop rbx
pop r12
ret
Function at 0x695c5ab0
Capabilities:
Query environment variable

Disassembly:
push r12
push rdi
push rsi
push rbx
sub rsp, 0x58
movups xmmword [rsp + 0x20], xmm6
movups xmmword [rsp + 0x30], xmm7
movups xmmword [rsp + 0x40], xmm8
mov r12, rcx
mov ebx, edx
call fcn.695e7d00
test al, al
je 0x695c5bd0
pxor xmm6, xmm6
pxor xmm8, xmm8
pxor xmm7, xmm7
cmp bl, 1
sbb ecx, ecx
and ecx, 5
add ecx, 2
call sub.OPENGL32.dll_glBegin
mov rcx, r12
call fcn.695e7ca0
mov rcx, r12
mov esi, dword [rax]
call fcn.695e7cb0
mov rcx, r12
mov ebx, dword [rax]
cvtsi2sd xmm8, esi
call fcn.695e7de0
mov rcx, r12
cvtsi2sd xmm6, ebx
mov edi, dword [rax]
call fcn.695e7e30
pxor xmm1, xmm1
movups xmm0, xmm1
add esi, edi
mov r12d, dword [rax]
call sub.OPENGL32.dll_glTexCoord2f
cvtsi2sd xmm7, esi
movupd xmm0, xmm8
movupd xmm1, xmm6
add ebx, r12d
call sub.OPENGL32.dll_glVertex2d
movss xmm0, dword [0x69636db4]
pxor xmm1, xmm1
call sub.OPENGL32.dll_glTexCoord2f
movupd xmm1, xmm6
pxor xmm6, xmm6
movupd xmm0, xmm7
call sub.OPENGL32.dll_glVertex2d
cvtsi2sd xmm6, ebx
movss xmm1, dword [0x69636db4]
movups xmm0, xmm1
call sub.OPENGL32.dll_glTexCoord2f
movupd xmm0, xmm7
movupd xmm1, xmm6
call sub.OPENGL32.dll_glVertex2d
movss xmm1, dword [0x69636db4]
pxor xmm0, xmm0
call sub.OPENGL32.dll_glTexCoord2f
movupd xmm1, xmm6
movupd xmm0, xmm8
call sub.OPENGL32.dll_glVertex2d
nop
movups xmm6, xmmword [rsp + 0x20]
movups xmm7, xmmword [rsp + 0x30]
movups xmm8, xmmword [rsp + 0x40]
add rsp, 0x58
pop rbx
pop rsi
pop rdi
pop r12
jmp fcn.695814b8
movups xmm6, xmmword [rsp + 0x20]
movups xmm7, xmmword [rsp + 0x30]
mov r9d, 0x119
lea r8, str._home_runner_work_trnr_plugins_trnr_plugins_lib_dpf_dgl_src_OpenGL.cpp
movups xmm8, xmmword [rsp + 0x40]
lea rdx, str.rect.isValid__
lea rcx, [0x69636b20]
add rsp, 0x58
pop rbx
pop rsi
pop rdi
pop r12
jmp fcn.69598970
Function at 0x695dcbd0
Capabilities:
Query environment variable

Disassembly:
mov r8, qword [rcx]
test r8, r8
je 0x695dcbf0
cmp byte [rcx + 0x10], 0
jne 0x695dcbe0
ret
mov rcx, r8
jmp sub.msvcrt.dll_free
mov r9d, 0xf2
lea r8, str._home_runner_work_trnr_plugins_trnr_plugins_lib_dpf_distrho_src_.._extra_String.hpp
lea rdx, [0x69634374]
lea rcx, [0x696340e8]
jmp fcn.695980d0

Function at 0x695e2490
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r12
sub rsp, 0x60
movups xmmword [rsp + 0x20], xmm6
movups xmmword [rsp + 0x30], xmm7
movups xmmword [rsp + 0x40], xmm8
movups xmmword [rsp + 0x50], xmm9
lea r12, [rcx + 0x18]
movups xmm6, xmm1
mov rcx, r12
call fcn.695bb990
mov rcx, r12
pxor xmm2, xmm2
movss xmm8, dword [0x69635b8c]
mulss xmm8, xmm6
movups xmm1, xmm8
call fcn.695baf80
movups xmm1, xmm8
mov rcx, r12
movss xmm9, dword [0x69635b7c]
mulss xmm9, xmm6
movups xmm2, xmm9
call fcn.695baf40
movss xmm1, dword [0x69635ba4]
movups xmm2, xmm9
mov rcx, r12
mulss xmm1, xmm6
call fcn.695baf40
movss xmm2, dword [0x69635ba8]
movups xmm1, xmm8
mov rcx, r12
mulss xmm2, xmm6
call fcn.695baf40
movss xmm7, dword [0x69635b70]
movups xmm1, xmm8
mov rcx, r12
mulss xmm7, xmm6
movups xmm2, xmm7
call fcn.695baf40
movss xmm1, dword [0x69635bac]
movups xmm2, xmm7
mov rcx, r12
mulss xmm1, xmm6
call fcn.695baf40
movss xmm1, dword [0x69635bb0]
movups xmm2, xmm9
mov rcx, r12
mulss xmm1, xmm6
call fcn.695baf40
movups xmm2, xmm9
mov rcx, r12
movss xmm8, dword [0x69635bb4]
mulss xmm8, xmm6
movups xmm1, xmm8
call fcn.695baf40
movups xmm2, xmm7
movups xmm1, xmm8
mov rcx, r12
call fcn.695baf40
movups xmm2, xmm7
mov rcx, r12
movss xmm9, dword [0x69635b88]
mulss xmm9, xmm6
movups xmm1, xmm9
call fcn.695baf40
movups xmm1, xmm9
mov rcx, r12
pxor xmm2, xmm2
call fcn.695baf40
movss xmm7, dword [0x69635bb8]
mov rcx, r12
pxor xmm2, xmm2
mulss xmm7, xmm6
movups xmm1, xmm7
call fcn.695baf40
movups xmm1, xmm7
mov rcx, r12
movss xmm9, dword [0x69635b78]
mulss xmm9, xmm6
movups xmm2, xmm9
call fcn.695baf40
movups xmm2, xmm9
movups xmm1, xmm8
mov rcx, r12
call fcn.695baf40
mulss xmm6, dword [0x69635b80]
movups xmm1, xmm8
mov rcx, r12
movups xmm2, xmm6
call fcn.695baf40
movups xmm2, xmm6
movups xmm1, xmm7
mov rcx, r12
call fcn.695baf40
movups xmm2, xmm9
movups xmm1, xmm7
mov rcx, r12
call fcn.695baf40
movups xmm1, xmm7
pxor xmm2, xmm2
mov rcx, r12
call fcn.695baf40
mov rcx, r12
lea rdx, [0x69633300]
call fcn.695bb9f0
nop
movups xmm6, xmmword [rsp + 0x20]
movups xmm7, xmmword [rsp + 0x30]
mov rcx, r12
movups xmm8, xmmword [rsp + 0x40]
movups xmm9, xmmword [rsp + 0x50]
add rsp, 0x60
pop r12
jmp fcn.695ba380
Function at 0x695e2690
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r12
sub rsp, 0x70
movups xmmword [rsp + 0x20], xmm6
movups xmmword [rsp + 0x30], xmm7
movups xmmword [rsp + 0x40], xmm8
movups xmmword [rsp + 0x50], xmm9
movups xmmword [rsp + 0x60], xmm10
lea r12, [rcx + 0x18]
movups xmm6, xmm1
mov rcx, r12
call fcn.695bb990
movss xmm7, dword [0x69635b8c]
mov rcx, r12
movss xmm9, dword [0x69635b88]
mulss xmm7, xmm6
mulss xmm9, xmm6
movups xmm1, xmm7
movups xmm2, xmm9
call fcn.695baf80
movups xmm1, xmm7
mov rcx, r12
movss xmm10, dword [0x69635bbc]
mulss xmm10, xmm6
movups xmm2, xmm10
call fcn.695baf40
movss xmm1, dword [0x69635ba4]
movups xmm2, xmm10
mov rcx, r12
mulss xmm1, xmm6
call fcn.695baf40
movups xmm1, xmm7
mov rcx, r12
movss xmm8, dword [0x69635bac]
mulss xmm8, xmm6
movups xmm2, xmm8
call fcn.695baf40
movups xmm2, xmm7
movups xmm1, xmm7
mov rcx, r12
call fcn.695baf40
movups xmm2, xmm7
movups xmm1, xmm8
mov rcx, r12
call fcn.695baf40
movss xmm1, dword [0x69635bb0]
movups xmm2, xmm10
mov rcx, r12
mulss xmm1, xmm6
call fcn.695baf40
movups xmm2, xmm10
mov rcx, r12
movss xmm8, dword [0x69635bb4]
mulss xmm8, xmm6
movups xmm1, xmm8
call fcn.695baf40
movups xmm2, xmm7
movups xmm1, xmm8
mov rcx, r12
call fcn.695baf40
movups xmm2, xmm7
movups xmm1, xmm9
mov rcx, r12
call fcn.695baf40
movups xmm2, xmm9
movups xmm1, xmm9
mov rcx, r12
call fcn.695baf40
movss xmm7, dword [0x69635bb8]
movups xmm2, xmm9
mov rcx, r12
mulss xmm7, xmm6
movups xmm1, xmm7
call fcn.695baf40
movups xmm2, xmm8
movups xmm1, xmm7
mov rcx, r12
call fcn.695baf40
movups xmm2, xmm8
movups xmm1, xmm8
mov rcx, r12
call fcn.695baf40
mulss xmm6, dword [0x69635bc0]
movups xmm1, xmm8
mov rcx, r12
movups xmm2, xmm6
call fcn.695baf40
movups xmm2, xmm6
movups xmm1, xmm7
mov rcx, r12
call fcn.695baf40
movups xmm2, xmm8
movups xmm1, xmm7
mov rcx, r12
call fcn.695baf40
movups xmm2, xmm9
movups xmm1, xmm7
mov rcx, r12
call fcn.695baf40
mov rcx, r12
lea rdx, [0x69633300]
call fcn.695bb9f0
nop
movups xmm6, xmmword [rsp + 0x20]
movups xmm7, xmmword [rsp + 0x30]
mov rcx, r12
movups xmm8, xmmword [rsp + 0x40]
movups xmm9, xmmword [rsp + 0x50]
movups xmm10, xmmword [rsp + 0x60]
add rsp, 0x70
pop r12
jmp fcn.695ba380
Function at 0x695e28f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r12
sub rsp, 0x70
movups xmmword [rsp + 0x20], xmm6
movups xmmword [rsp + 0x30], xmm7
movups xmmword [rsp + 0x40], xmm8
movups xmmword [rsp + 0x50], xmm9
movups xmmword [rsp + 0x60], xmm10
lea r12, [rcx + 0x18]
movups xmm6, xmm1
mov rcx, r12
call fcn.695bb990
movss xmm7, dword [0x69635b88]
mov rcx, r12
movss xmm9, dword [0x69635b70]
mulss xmm7, xmm6
mulss xmm9, xmm6
movups xmm2, xmm7
movups xmm1, xmm9
call fcn.695baf80
movups xmm1, xmm9
mov rcx, r12
movss xmm8, dword [0x69635b8c]
mulss xmm8, xmm6
movups xmm2, xmm8
call fcn.695baf40
movups xmm2, xmm8
mov rcx, r12
movss xmm9, dword [0x69635b90]
mulss xmm9, xmm6
movups xmm1, xmm9
call fcn.695baf40
movss xmm2, dword [0x69635b98]
mov rcx, r12
movss xmm10, dword [0x69635b94]
mulss xmm10, xmm6
mulss xmm2, xmm6
movups xmm1, xmm10
call fcn.695baf40
movups xmm2, xmm8
movups xmm1, xmm10
mov rcx, r12
call fcn.695baf40
movups xmm2, xmm8
mov rcx, r12
pxor xmm1, xmm1
call fcn.695baf40
movups xmm2, xmm7
mov rcx, r12
pxor xmm1, xmm1
call fcn.695baf40
movss xmm1, dword [0x69635b9c]
movups xmm2, xmm7
mov rcx, r12
mulss xmm1, xmm6
call fcn.695baf40
mulss xmm6, dword [0x69635ba0]
movups xmm1, xmm9
mov rcx, r12
movups xmm2, xmm6
call fcn.695baf40
movups xmm2, xmm7
movups xmm1, xmm9
mov rcx, r12
call fcn.695baf40
mov rcx, r12
lea rdx, [0x69633300]
call fcn.695bb9f0
nop
movups xmm6, xmmword [rsp + 0x20]
movups xmm7, xmmword [rsp + 0x30]
mov rcx, r12
movups xmm8, xmmword [rsp + 0x40]
movups xmm9, xmmword [rsp + 0x50]
movups xmm10, xmmword [rsp + 0x60]
add rsp, 0x70
pop r12
jmp fcn.695ba380

Function at 0x695e2a60
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r12
sub rsp, 0x60
movups xmmword [rsp + 0x20], xmm6
movups xmmword [rsp + 0x30], xmm7
movups xmmword [rsp + 0x40], xmm8
movups xmmword [rsp + 0x50], xmm9
lea r12, [rcx + 0x18]
movups xmm6, xmm1
mov rcx, r12
call fcn.695bb990
movss xmm7, dword [0x69635b70]
movss xmm2, dword [0x69635b74]
mov rcx, r12
mulss xmm7, xmm6
mulss xmm2, xmm6
movups xmm1, xmm7
call fcn.695baf80
mov rcx, r12
movss xmm8, dword [0x69635b78]
movss xmm9, dword [0x69635b7c]
mulss xmm8, xmm6
mulss xmm9, xmm6
movups xmm2, xmm8
movups xmm1, xmm9
call fcn.695baf40
movups xmm2, xmm7
movups xmm1, xmm9
mov rcx, r12
call fcn.695baf40
movss xmm1, dword [0x69635b80]
movups xmm2, xmm7
mov rcx, r12
mulss xmm1, xmm6
call fcn.695baf40
mulss xmm6, dword [0x69635b84]
movups xmm2, xmm8
mov rcx, r12
movups xmm1, xmm6
call fcn.695baf40
movups xmm2, xmm8
mov rcx, r12
pxor xmm1, xmm1
call fcn.695baf40
pxor xmm2, xmm2
mov rcx, r12
movups xmm1, xmm2
call fcn.695baf40
movups xmm1, xmm7
pxor xmm2, xmm2
mov rcx, r12
call fcn.695baf40
mov rcx, r12
lea rdx, [0x69633300]
call fcn.695bb9f0
nop
movups xmm6, xmmword [rsp + 0x20]
movups xmm7, xmmword [rsp + 0x30]
mov rcx, r12
movups xmm8, xmmword [rsp + 0x40]
movups xmm9, xmmword [rsp + 0x50]
add rsp, 0x60
pop r12
jmp fcn.695ba380
Function at 0x7ff621fc64e0
Capabilities:
Write file on windows

Disassembly:
push rbx
sub rsp, 0x60
mov rax, qword [0x7ff621ff6040]
xor rax, rsp
mov qword [rsp + 0x58], rax
cmp qword [rcx + 0x68], 0
mov rbx, rcx
je 0x7ff621fc65b3
cmp byte [rcx + 0x71], 0
je 0x7ff621fc65b3
mov rax, qword [rcx]
mov edx, 0xffffffff
mov qword [rsp + 0x78], rdi
call qword [rax + 0x18]
cmp eax, 0xffffffff
je 0x7ff621fc65af
mov rcx, qword [rbx + 0x68]
lea rax, [rsp + 0x30]
lea rdx, [rbx + 0x74]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x58]
lea r8, [rsp + 0x38]
call qword [sym.imp.msvcp140.dll_public:_int___cdecl_std::codecvt_char__char__struct__Mbstatet_::unshift_struct__Mbstatet____ptr64__char____ptr64__char____ptr64__char____ptr64____ptr64_const___ptr64]
test eax, eax
je 0x7ff621fc6574
sub eax, 1
je 0x7ff621fc6578
cmp eax, 2
jne 0x7ff621fc65af
mov byte [rbx + 0x71], 0
mov al, 1
mov rdi, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.7ff621fe29a0
add rsp, 0x60
pop rbx
ret
mov byte [rbx + 0x71], 0
mov rdi, qword [rsp + 0x30]
lea rax, [rsp + 0x38]
sub rdi, rax
je 0x7ff621fc65a6
mov r9, qword [rbx + 0x80]
lea rcx, [rsp + 0x38]
mov r8, rdi
mov edx, 1
call qword [sym.imp.ucrtbase.dll_fwrite]
cmp rdi, rax
jne 0x7ff621fc65af
cmp byte [rbx + 0x71], 0
sete al
jmp 0x7ff621fc655c
xor al, al
jmp 0x7ff621fc655c
mov al, 1
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.7ff621fe29a0
add rsp, 0x60
pop rbx
ret
Function at 0x7ff621fdecd0
Capabilities:
Validate payment card number using luhn algorithm

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov esi, edx
mov dword [rcx + 0x74], 0
mov rbx, rcx
mov edi, 0x7fffffff
movsx ecx, byte [rbx + 0x78]
lea eax, [rcx - 0x30]
cmp al, 9
ja 0x7ff621fded95
lea r8d, [rcx - 0x30]
cmp r8d, 0xffffffff
je 0x7ff621fded95
mov r9d, dword [rbx + 0x74]
mov ecx, 0x7fffffff
sub ecx, r8d
mov eax, 0x66666667
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp r9d, edx
jg 0x7ff621fdedae
lea eax, [r9 + r9*4]
dec edi
lea ecx, [r8 + rax*2]
mov rax, qword [rbx + 0x10]
mov dword [rbx + 0x74], ecx
mov rcx, qword [rbx]
cmp rcx, rax
je 0x7ff621fded85
cmp byte [rcx], 0x5c
jne 0x7ff621fded7e
lea rdx, [rcx + 1]
cmp rdx, rax
je 0x7ff621fded7e
mov r8d, dword [rbx + 0x80]
test r8b, 8
jne 0x7ff621fded6c
movzx eax, byte [rdx]
sub al, 0x28
cmp al, 1
jbe 0x7ff621fded7b
test r8b, 0x10
jne 0x7ff621fded7e
movzx eax, byte [rdx]
sub al, 0x7b
test al, 0xfd
jne 0x7ff621fded7e
mov rcx, rdx
lea rax, [rcx + 1]
mov qword [rbx], rax
mov rcx, rbx
call fcn.7ff621fd5b70
test edi, edi
jne 0x7ff621fdecf0
mov rbx, qword [rsp + 0x30]
cmp edi, 0x7fffffff
mov rsi, qword [rsp + 0x38]
setne al
add rsp, 0x20
pop rdi
ret
mov edx, esi
call fcn.7ff621fd5b60
int3
Function at 0x7ff621fe2464
Capabilities:
Get geographical location

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x40
mov rbx, rdx
lea r8, [rsp + 0x60]
mov edi, ecx
mov edx, 0x20000001
lea rcx, [0x7ff621fe7a40]
mov r9d, 2
call qword [sym.imp.kernel32.dll_GetLocaleInfoEx]
test eax, eax
jne 0x7ff621fe249e
xor r9d, r9d
mov dword [rsp + 0x60], r9d
jmp 0x7ff621fe24a3
mov r9d, dword [rsp + 0x60]
and qword [rsp + 0x30], 0
mov r8d, edi
and dword [rsp + 0x28], 0
xor edx, edx
mov ecx, 0x1300
mov qword [rsp + 0x20], rbx
call qword [sym.imp.kernel32.dll_FormatMessageA]
mov edx, eax
test eax, eax
je 0x7ff621fe24ec
mov r8, qword [rbx]
dec r8
add r8, rdx
movzx ecx, byte [r8]
lea rax, [0x7ff621fe7940]
cmp byte [rcx + rax], 0
je 0x7ff621fe24ec
dec r8
sub rdx, 1
jne 0x7ff621fe24d2
mov rbx, qword [rsp + 0x50]
mov rax, rdx
add rsp, 0x40
pop rdi
ret

Function at 0x7ff621fe3954
Capabilities:
Parse pe header

Disassembly:
sub rsp, 0x28
xor ecx, ecx
call qword [sym.imp.kernel32.dll_GetModuleHandleW]
test rax, rax
je 0x7ff621fe399e
mov ecx, 0x5a4d
cmp word [rax], cx
jne 0x7ff621fe399e
movsxd rcx, dword [rax + 0x3c]
add rcx, rax
cmp dword [rcx], 0x4550
jne 0x7ff621fe399e
mov eax, 0x20b
cmp word [rcx + 0x18], ax
jne 0x7ff621fe399e
cmp dword [rcx + 0x84], 0xe
jbe 0x7ff621fe399e
cmp dword [rcx + 0xf8], 0
setne al
jmp 0x7ff621fe39a0
xor al, al
add rsp, 0x28
ret
Function at 0x413240
Capabilities:
Access peb ldr_data

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4133cb
push rbp
mov rbp, rsp
sub rsp, 0x48
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
mov rcx, qword [sym.imp.kernel32.dll_VirtualFree]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], 0x4000
call sym.runtime.stdcall3.abi0
xorps xmm15, xmm15
mov r14, qword [0x00657eb0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x20], 0
jne 0x4132a5
mov rax, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x60]
jmp 0x4132b4
add rsp, 0x48
pop rbp
ret
sub rcx, rbx
add rax, rbx
mov rbx, rcx
test rbx, rbx
jbe 0x4132d3
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x40], rax
mov rcx, rbx
jmp 0x4132e3
cmp rbx, 0x1000
jae 0x4132ab
jmp 0x41334d
add rsp, 0x48
pop rbp
ret
shr rbx, 1
and rbx, 0xfffffffffffff000
mov qword [rsp + 0x38], rbx
cmp rbx, 0x1000
jae 0x4132f5
xor edx, edx
jmp 0x413344
mov rcx, qword [sym.imp.kernel32.dll_VirtualFree]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], 0x4000
call sym.runtime.stdcall3.abi0
xorps xmm15, xmm15
mov r14, qword [0x00657eb0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x20], 0
sete al
mov rcx, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x38]
mov edx, eax
mov rax, qword [rsp + 0x40]
test dl, dl
jne 0x4132d9
jmp 0x4132c8
call sym.runtime.getlasterror.abi0
xorps xmm15, xmm15
mov r14, qword [0x00657eb0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp]
mov qword [rsp + 0x30], rax
call sym.runtime.printlock
lea rax, [0x00521f1d]
mov ebx, 0x18
nop dword [rax]
call sym.runtime.printstring
mov rax, qword [rsp + 0x38]
call sym.runtime.printuint
lea rax, [0x00522444]
mov ebx, 0x19
nop dword [rax + rax]
call sym.runtime.printstring
mov rax, qword [rsp + 0x30]
call sym.runtime.printuint
call sym.runtime.printnl
call sym.runtime.printunlock
lea rax, [0x005248ed]
mov ebx, 0x21
call sym.runtime.throw
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp sym.runtime.sysUnusedOS