joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14006a206
Capabilities:
Terminate process

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x50
mov rdi, rcx
call fcn.140001066
mov rsi, rax
movups xmm0, xmmword [rdi + 0x18]
lea rcx, [rsp + 0x30]
movaps xmmword [rcx], xmm0
call fcn.14001854b
test al, al
je 0x14006a242
cmp byte [rsi], 0
jne 0x14006a391
jmp 0x14006a3d8
mov qword [rsp + 0x28], 0
mov rcx, qword [rdi + 0x20]
call qword [rdi + 0x18]
mov r12b, 1
cmp byte [rsi], 0
jne 0x14006a377
mov rbx, rax
mov qword [rsp + 0x28], rax
test rax, rax
je 0x14006a30e
lea rbp, [rdi + 0x18]
lea r14, [rsp + 0x28]
lea r15, [rsp + 0x30]
mov cl, byte [rbx + 0x20]
call fcn.14001296a
test al, al
je 0x14006a2d1
mov rcx, qword [rdi + 0x20]
call qword [rdi + 0x18]
cmp byte [rsi], 0
jne 0x14006a377
mov rcx, r14
mov rdx, rax
call fcn.1400106b1
cmp byte [rsi], 0
jne 0x14006a377
movups xmm0, xmmword [rbp]
movaps xmmword [rsp + 0x30], xmm0
mov rcx, r15
call fcn.14001854b
mov rbx, qword [rsp + 0x28]
test al, al
jne 0x14006a2cc
test rbx, rbx
jne 0x14006a27d
test rbx, rbx
je 0x14006a30e
lea r14, [rsp + 0x30]
mov edx, 0x10
mov rcx, r14
call fcn.1400018bc
lea rax, [fcn.14006a206]
mov qword [r14], rax
mov qword [r14 + 8], rdi
mov rax, qword [r14]
mov rcx, qword [r14 + 8]
lea rdx, [rsp + 0x40]
mov qword [rdx], rax
mov qword [rdx + 8], rcx
mov rcx, rbx
call fcn.140013427
jmp 0x14006a374
mov rax, qword [rdi + 0x10]
mov cl, byte [rax + 0x20]
call fcn.14001296a
test al, al
je 0x14006a323
xor r12d, r12d
jmp 0x14006a377
mov ecx, 0x40
call fcn.14000ed36
lea rcx, [0x1400a8228]
mov qword [rax], rcx
lea rdx, [0x1400a8260]
mov qword [rax + 0x10], rdx
movups xmm0, xmmword [0x140096970]
movups xmmword [rax + 0x18], xmm0
mov qword [rax + 8], 0
mov qword [rsp + 0x20], 0x2a
lea r8, [0x1400a8280]
lea r9, str.mVedrBkx34YrVf
mov rcx, rax
call fcn.14000ed74
mov r12b, byte [rsi]
mov byte [rsi], 0
mov rcx, qword [rsp + 0x28]
call fcn.1400106dc
cmp byte [rsi], 0
jne 0x14006a391
mov byte [rsi], r12b
test r12b, r12b
je 0x14006a3d8
mov byte [rsi], 0
mov rax, qword [rdi + 0x10]
mov cl, byte [rax + 0x20]
call fcn.14001296a
test al, al
je 0x14006a3b7
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.140018558
call fcn.1400130f9
mov rbx, rax
mov rcx, qword [rdi + 0x10]
mov rdx, rax
call fcn.140011d4b
mov rcx, rbx
call fcn.14000ebe5
cmp byte [rsi], 0
je 0x14006a3e7
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.140013124
Function at 0x14006abe5
Capabilities:
Terminate process

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x68
mov rbx, r8
mov rsi, rdx
mov r14, rcx
call fcn.140001066
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [r14], xmm0
movups xmm0, xmmword [0x1400965a0]
movaps xmmword [rsp + 0x20], xmm0
movups xmm0, xmmword [rsi]
lea rdx, [rsp + 0x50]
movaps xmmword [rdx], xmm0
movups xmm0, xmmword [rbx]
lea r8, [rsp + 0x40]
movaps xmmword [r8], xmm0
lea rcx, [rsp + 0x30]
call fcn.14006ad0a
cmp byte [rdi], 0
jne 0x14006ac5a
lea rdx, [rsp + 0x30]
mov rax, qword [rdx]
mov rcx, qword [rdx + 8]
mov qword [rdx], rax
mov qword [rdx + 8], rcx
lea rcx, [rsp + 0x20]
call fcn.1400102f9
cmp byte [rdi], 0
je 0x14006ac92
mov byte [rdi], 0
movups xmm0, xmmword [0x140096540]
lea rdx, [rsp + 0x30]
movaps xmmword [rdx], xmm0
lea rcx, [rsp + 0x20]
call fcn.1400102f9
call fcn.140013124
cmp byte [rdi], 0
je 0x14006ac92
mov rcx, qword [rsp + 0x28]
test rcx, rcx
je 0x14006acf2
test byte [rcx + 7], 0x40
jne 0x14006acf2
jmp 0x14006acfc
lea rsi, [rsp + 0x20]
movaps xmm0, xmmword [rsi]
movups xmmword [r14], xmm0
mov rcx, rsi
call fcn.14000ed6d
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14006acf2
mov rax, qword [rcx]
mov edx, eax
or edx, 0x52
movzx edx, dl
imul edx, edx
imul edx, edx, 0x72ef
lea ebx, [rdx + rax]
mov edi, edx
xor edi, eax
sub ebx, edi
and edx, eax
add edx, edx
xor edx, ebx
movabs rbx, 0xc000000000000000
or rbx, rdx
movabs rdx, 0x76651790f44982f3
imul rdx, rbx
test rax, rdx
je 0x14006acfc
add rsp, 0x68
pop rbx
pop rdi
pop rsi
pop r14
ret
add rsp, 0x68
pop rbx
pop rdi
pop rsi
pop r14
jmp fcn.1400011e0
Function at 0x14006b709
Capabilities:
Parse pe header

Disassembly:
push rsi
push rdi
sub rsp, 0x28
mov rdi, rcx
call fcn.140001066
test rdi, rdi
je 0x14006b743
mov rsi, rax
movzx eax, word [rdi]
cmp eax, 0x5a4d
jne 0x14006b743
movsxd rdx, dword [rdi + 0x3c]
cmp rdx, 0x400
jg 0x14006b743
mov rcx, rdi
call fcn.140036c45
cmp byte [rsi], 0
je 0x14006b74c
xor eax, eax
add rsp, 0x28
pop rdi
pop rsi
ret
mov rcx, rax
xor eax, eax
cmp dword [rcx], 0x4550
cmove rax, rcx
jmp 0x14006b745

Function at 0x140070737
Capabilities:
Terminate process

Disassembly:
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x80
movaps xmmword [rsp + 0x70], xmm6
mov rbx, rdx
mov r14, rcx
call fcn.140001066
mov r15, rax
xorps xmm0, xmm0
movups xmmword [r14], xmm0
movups xmm6, xmmword [0x140096820]
movaps xmmword [rsp + 0x30], xmm6
mov rax, qword [rbx]
mov ecx, eax
and ecx, 0x40400
mov rdx, rcx
xor rdx, 0xa061440
add rdx, rcx
add rdx, 0x1010107
xor rdx, 0xb071540
add rdx, rax
lea rsi, [rsp + 0x60]
mov rcx, rsi
call fcn.14001053f
movups xmm0, xmmword [0x1400967a0]
lea rdi, [rsp + 0x20]
movaps xmmword [rdi], xmm0
mov rcx, rsi
mov rdx, rdi
call fcn.1400102ba
movups xmm0, xmmword [rbx]
movaps xmmword [rdi], xmm0
lea rdx, [rsp + 0x20]
mov rcx, rsi
call fcn.1400102ba
mov rax, qword [rsi]
mov rbx, qword [rsi + 8]
lea rdx, [rsp + 0x50]
mov qword [rdx], rax
mov qword [rdx + 8], rbx
lea r8, [rsp + 0x40]
movaps xmmword [r8], xmm6
lea rcx, [rsp + 0x20]
mov r9b, 0x4e
call fcn.140026ac6
cmp byte [r15], 0
jne 0x14007081a
lea rdx, [rsp + 0x20]
mov rax, qword [rdx]
mov rcx, qword [rdx + 8]
mov qword [rdx], rax
mov qword [rdx + 8], rcx
lea rcx, [rsp + 0x30]
call fcn.1400102f9
test rbx, rbx
je 0x14007085f
mov rax, qword [rbx]
mov ecx, eax
not ecx
lea ecx, [rcx + rcx*2]
mov edx, 0xfffffffe
sub edx, eax
lea ecx, [rcx + rax*2]
inc ecx
xor ecx, edx
movabs rdx, 0xc000000000000000
or rdx, rcx
movabs rcx, 0xee82ad5bd07fb5bb
imul rcx, rdx
test rax, rcx
jne 0x14007085f
mov rcx, rbx
call fcn.1400011e0
cmp byte [r15], 0
je 0x1400708b5
mov byte [r15], 0
movups xmm0, xmmword [0x1400967b0]
lea rdx, [rsp + 0x20]
movaps xmmword [rdx], xmm0
lea rcx, [rsp + 0x30]
call fcn.1400102f9
call fcn.140013124
movzx eax, byte [r15]
test eax, eax
je 0x1400708b5
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1400708f0
mov edx, eax
xor edx, 0xfffffffe
add edx, eax
add edx, 2
add eax, eax
xor eax, edx
xor eax, 1
shl rax, 0x3e
test qword [rcx], rax
jne 0x1400708f0
jmp 0x1400708d8
lea rsi, [rsp + 0x30]
movaps xmm0, xmmword [rsi]
movups xmmword [r14], xmm0
mov rcx, rsi
call fcn.14000ed6d
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x1400708f0
test byte [rcx + 7], 0x40
jne 0x1400708f0
movaps xmm6, xmmword [rsp + 0x70]
add rsp, 0x80
pop rbx
pop rdi
pop rsi
pop r14
pop r15
jmp fcn.1400011e0
movaps xmm6, xmmword [rsp + 0x70]
add rsp, 0x80
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret
Function at 0x140074eee
Capabilities:
Terminate process

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x50
mov rdi, rcx
call fcn.140001066
mov rsi, rax
movups xmm0, xmmword [rdi + 0x20]
lea rcx, [rsp + 0x30]
movaps xmmword [rcx], xmm0
call fcn.14001854b
test al, al
je 0x140074f2a
cmp byte [rsi], 0
jne 0x140075079
jmp 0x1400750c0
mov qword [rsp + 0x28], 0
mov rcx, qword [rdi + 0x28]
call qword [rdi + 0x20]
mov r12b, 1
cmp byte [rsi], 0
jne 0x14007505f
mov rbx, rax
mov qword [rsp + 0x28], rax
test rax, rax
je 0x140074ff6
lea rbp, [rdi + 0x20]
lea r14, [rsp + 0x28]
lea r15, [rsp + 0x30]
mov cl, byte [rbx + 0x20]
call fcn.14001296a
test al, al
je 0x140074fb9
mov rcx, qword [rdi + 0x28]
call qword [rdi + 0x20]
cmp byte [rsi], 0
jne 0x14007505f
mov rcx, r14
mov rdx, rax
call fcn.1400106b1
cmp byte [rsi], 0
jne 0x14007505f
movups xmm0, xmmword [rbp]
movaps xmmword [rsp + 0x30], xmm0
mov rcx, r15
call fcn.14001854b
mov rbx, qword [rsp + 0x28]
test al, al
jne 0x140074fb4
test rbx, rbx
jne 0x140074f65
test rbx, rbx
je 0x140074ff6
lea r14, [rsp + 0x30]
mov edx, 0x10
mov rcx, r14
call fcn.1400018bc
lea rax, [fcn.140074eee]
mov qword [r14], rax
mov qword [r14 + 8], rdi
mov rax, qword [r14]
mov rcx, qword [r14 + 8]
lea rdx, [rsp + 0x40]
mov qword [rdx], rax
mov qword [rdx + 8], rcx
mov rcx, rbx
call fcn.140013427
jmp 0x14007505c
mov rax, qword [rdi + 0x18]
mov cl, byte [rax + 0x20]
call fcn.14001296a
test al, al
je 0x14007500b
xor r12d, r12d
jmp 0x14007505f
mov ecx, 0x40
call fcn.14000ed36
lea rcx, [0x1400a8228]
mov qword [rax], rcx
lea rdx, [0x1400a8260]
mov qword [rax + 0x10], rdx
movups xmm0, xmmword [0x140095b30]
movups xmmword [rax + 0x18], xmm0
mov qword [rax + 8], 0
mov qword [rsp + 0x20], 0x2a
lea r8, [0x1400a8280]
lea r9, str.mVedrBkx34YrVf
mov rcx, rax
call fcn.14000ed74
mov r12b, byte [rsi]
mov byte [rsi], 0
mov rcx, qword [rsp + 0x28]
call fcn.1400106dc
cmp byte [rsi], 0
jne 0x140075079
mov byte [rsi], r12b
test r12b, r12b
je 0x1400750c0
mov byte [rsi], 0
mov rax, qword [rdi + 0x18]
mov cl, byte [rax + 0x20]
call fcn.14001296a
test al, al
je 0x14007509f
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.140018558
call fcn.1400130f9
mov rbx, rax
mov rcx, qword [rdi + 0x18]
mov rdx, rax
call fcn.140011d4b
mov rcx, rbx
call fcn.14000ebe5
cmp byte [rsi], 0
je 0x1400750cf
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.140013124
Function at 0x1400753f3
Capabilities:
Terminate process

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x50
mov rdi, rcx
call fcn.140001066
mov rsi, rax
movups xmm0, xmmword [rdi + 0x20]
lea rcx, [rsp + 0x30]
movaps xmmword [rcx], xmm0
call fcn.14001854b
test al, al
je 0x14007542f
cmp byte [rsi], 0
jne 0x14007557e
jmp 0x1400755c5
mov qword [rsp + 0x28], 0
mov rcx, qword [rdi + 0x28]
call qword [rdi + 0x20]
mov r12b, 1
cmp byte [rsi], 0
jne 0x140075564
mov rbx, rax
mov qword [rsp + 0x28], rax
test rax, rax
je 0x1400754fb
lea rbp, [rdi + 0x20]
lea r14, [rsp + 0x28]
lea r15, [rsp + 0x30]
mov cl, byte [rbx + 0x20]
call fcn.14001296a
test al, al
je 0x1400754be
mov rcx, qword [rdi + 0x28]
call qword [rdi + 0x20]
cmp byte [rsi], 0
jne 0x140075564
mov rcx, r14
mov rdx, rax
call fcn.1400106b1
cmp byte [rsi], 0
jne 0x140075564
movups xmm0, xmmword [rbp]
movaps xmmword [rsp + 0x30], xmm0
mov rcx, r15
call fcn.14001854b
mov rbx, qword [rsp + 0x28]
test al, al
jne 0x1400754b9
test rbx, rbx
jne 0x14007546a
test rbx, rbx
je 0x1400754fb
lea r14, [rsp + 0x30]
mov edx, 0x10
mov rcx, r14
call fcn.1400018bc
lea rax, [fcn.1400753f3]
mov qword [r14], rax
mov qword [r14 + 8], rdi
mov rax, qword [r14]
mov rcx, qword [r14 + 8]
lea rdx, [rsp + 0x40]
mov qword [rdx], rax
mov qword [rdx + 8], rcx
mov rcx, rbx
call fcn.140013427
jmp 0x140075561
mov rax, qword [rdi + 0x18]
mov cl, byte [rax + 0x20]
call fcn.14001296a
test al, al
je 0x140075510
xor r12d, r12d
jmp 0x140075564
mov ecx, 0x40
call fcn.14000ed36
lea rcx, [0x1400a8228]
mov qword [rax], rcx
lea rdx, [0x1400a8260]
mov qword [rax + 0x10], rdx
movups xmm0, xmmword [0x140096780]
movups xmmword [rax + 0x18], xmm0
mov qword [rax + 8], 0
mov qword [rsp + 0x20], 0x2a
lea r8, [0x1400a8280]
lea r9, str.mVedrBkx34YrVf
mov rcx, rax
call fcn.14000ed74
mov r12b, byte [rsi]
mov byte [rsi], 0
mov rcx, qword [rsp + 0x28]
call fcn.1400106dc
cmp byte [rsi], 0
jne 0x14007557e
mov byte [rsi], r12b
test r12b, r12b
je 0x1400755c5
mov byte [rsi], 0
mov rax, qword [rdi + 0x18]
mov cl, byte [rax + 0x20]
call fcn.14001296a
test al, al
je 0x1400755a4
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.140018558
call fcn.1400130f9
mov rbx, rax
mov rcx, qword [rdi + 0x18]
mov rdx, rax
call fcn.140011d4b
mov rcx, rbx
call fcn.14000ebe5
cmp byte [rsi], 0
je 0x1400755d4
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.140013124
Function at 0x1400774f0
Capabilities:
Terminate process

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbx
sub rsp, 0x78
movaps xmmword [rsp + 0x60], xmm6
mov rbx, rdx
mov r15, rcx
call fcn.140001066
mov r12, rax
xorps xmm0, xmm0
movups xmmword [r15], xmm0
movups xmm6, xmmword [0x140094a20]
movaps xmmword [rsp + 0x20], xmm6
mov rcx, qword [rbx]
mov rdx, qword [rbx + 8]
lea r9, [0x1400a03a0]
mov r8d, 2
call fcn.1400299f1
movzx esi, byte [r12]
movzx edx, al
mov ecx, esi
not ecx
or ecx, edx
mov edi, edx
or edi, esi
xor edx, esi
sub edx, ecx
lea ecx, [rdi + rdx]
inc ecx
and ecx, 1
cmp ecx, esi
sete dl
test esi, esi
jne 0x1400776b7
xor al, dl
jne 0x1400776b7
movups xmm0, xmmword [rbx]
lea rcx, [rsp + 0x30]
movaps xmmword [rcx], xmm0
movups xmm0, xmmword [0x140094a10]
lea rdx, [rsp + 0x40]
movaps xmmword [rdx], xmm0
mov r8d, 2
call fcn.1400298cf
cmp byte [r12], 0
jne 0x1400776cd
dec rax
lea rsi, [rsp + 0x50]
mov rcx, rsi
mov rdx, rax
call fcn.14007777f
movups xmm0, xmmword [rbx]
lea rdx, [rsp + 0x40]
movaps xmmword [rdx], xmm0
mov r8, qword [rsi]
mov r9, qword [rsi + 8]
lea rcx, [rsp + 0x30]
call fcn.140027c3e
cmp byte [r12], 0
jne 0x1400776cd
lea rdx, [rsp + 0x30]
mov rax, qword [rdx]
mov rcx, qword [rdx + 8]
mov qword [rdx], rax
mov qword [rdx + 8], rcx
lea rsi, [rsp + 0x20]
mov rcx, rsi
call fcn.1400102f9
movaps xmm0, xmmword [rsi]
lea rdx, [rsp + 0x40]
movaps xmmword [rdx], xmm0
lea rcx, [rsp + 0x30]
call fcn.140029b55
cmp byte [r12], 0
jne 0x1400776cd
lea rdx, [rsp + 0x30]
mov rax, qword [rdx]
mov rcx, qword [rdx + 8]
mov qword [rdx], rax
mov qword [rdx + 8], rcx
lea rsi, [rsp + 0x20]
mov rcx, rsi
call fcn.1400102f9
mov rbx, qword [rsi]
mov r14, qword [rsi + 8]
lea r9, [0x1400a03e0]
mov r8d, 9
mov rcx, rbx
mov rdx, r14
call fcn.14001c052
test al, al
jne 0x140077694
lea r9, [0x1400a0400]
mov r8d, 9
mov rcx, rbx
mov rdx, r14
call fcn.14001c052
test al, al
jne 0x140077694
lea r9, [0x1400a0420]
mov r8d, 1
mov rcx, rbx
mov rdx, r14
call fcn.14001c052
test al, al
je 0x1400776ac
lea rdx, [rsp + 0x30]
movaps xmmword [rdx], xmm6
lea rsi, [rsp + 0x20]
mov rcx, rsi
call fcn.1400102f9
mov rbx, qword [rsi]
test rbx, rbx
jne 0x140077745
jmp 0x1400776bc
test sil, sil
jne 0x1400776cd
lea rcx, [rsp + 0x50]
call fcn.140023fff
cmp byte [r12], 0
je 0x140077728
mov rcx, qword [rsp + 0x28]
test rcx, rcx
je 0x140077715
mov rax, qword [rcx]
mov edx, eax
xor edx, 0xe1269ba6
add edx, eax
add edx, 0x1ed9645a
lea ebx, [rax + rax]
and ebx, 0x3db2c8b2
xor rdx, rbx
movabs rbx, 0xf0fd748fdbe809fd
xor rbx, rdx
movabs rdx, 0x4f028b702417f603
add rdx, rbx
test rax, rdx
je 0x140077768
movaps xmm6, xmmword [rsp + 0x60]
add rsp, 0x78
pop rbx
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
lea rdx, [rsp + 0x50]
mov rax, qword [rdx]
mov rcx, qword [rdx + 8]
mov qword [rdx], rax
mov qword [rdx + 8], rcx
lea rcx, [rsp + 0x20]
call fcn.1400102f9
lea rsi, [rsp + 0x20]
movaps xmm0, xmmword [rsi]
movups xmmword [r15], xmm0
mov rcx, rsi
call fcn.14000ed6d
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x140077715
test byte [rcx + 7], 0x40
jne 0x140077715
movaps xmm6, xmmword [rsp + 0x60]
add rsp, 0x78
pop rbx
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.1400011e0
Function at 0x140077997
Capabilities:
Terminate process

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x50
mov rdi, rcx
call fcn.140001066
mov rsi, rax
movups xmm0, xmmword [rdi + 0x20]
lea rcx, [rsp + 0x30]
movaps xmmword [rcx], xmm0
call fcn.14001854b
test al, al
je 0x1400779d3
cmp byte [rsi], 0
jne 0x140077b22
jmp 0x140077b69
mov qword [rsp + 0x28], 0
mov rcx, qword [rdi + 0x28]
call qword [rdi + 0x20]
mov r12b, 1
cmp byte [rsi], 0
jne 0x140077b08
mov rbx, rax
mov qword [rsp + 0x28], rax
test rax, rax
je 0x140077a9f
lea rbp, [rdi + 0x20]
lea r14, [rsp + 0x28]
lea r15, [rsp + 0x30]
mov cl, byte [rbx + 0x20]
call fcn.14001296a
test al, al
je 0x140077a62
mov rcx, qword [rdi + 0x28]
call qword [rdi + 0x20]
cmp byte [rsi], 0
jne 0x140077b08
mov rcx, r14
mov rdx, rax
call fcn.1400106b1
cmp byte [rsi], 0
jne 0x140077b08
movups xmm0, xmmword [rbp]
movaps xmmword [rsp + 0x30], xmm0
mov rcx, r15
call fcn.14001854b
mov rbx, qword [rsp + 0x28]
test al, al
jne 0x140077a5d
test rbx, rbx
jne 0x140077a0e
test rbx, rbx
je 0x140077a9f
lea r14, [rsp + 0x30]
mov edx, 0x10
mov rcx, r14
call fcn.1400018bc
lea rax, [fcn.140077997]
mov qword [r14], rax
mov qword [r14 + 8], rdi
mov rax, qword [r14]
mov rcx, qword [r14 + 8]
lea rdx, [rsp + 0x40]
mov qword [rdx], rax
mov qword [rdx + 8], rcx
mov rcx, rbx
call fcn.140013427
jmp 0x140077b05
mov rax, qword [rdi + 0x18]
mov cl, byte [rax + 0x20]
call fcn.14001296a
test al, al
je 0x140077ab4
xor r12d, r12d
jmp 0x140077b08
mov ecx, 0x40
call fcn.14000ed36
lea rcx, [0x1400a8228]
mov qword [rax], rcx
lea rdx, [0x1400a8260]
mov qword [rax + 0x10], rdx
movups xmm0, xmmword [0x140096ae0]
movups xmmword [rax + 0x18], xmm0
mov qword [rax + 8], 0
mov qword [rsp + 0x20], 0x2a
lea r8, [0x1400a8280]
lea r9, str.mVedrBkx34YrVf
mov rcx, rax
call fcn.14000ed74
mov r12b, byte [rsi]
mov byte [rsi], 0
mov rcx, qword [rsp + 0x28]
call fcn.1400106dc
cmp byte [rsi], 0
jne 0x140077b22
mov byte [rsi], r12b
test r12b, r12b
je 0x140077b69
mov byte [rsi], 0
mov rax, qword [rdi + 0x18]
mov cl, byte [rax + 0x20]
call fcn.14001296a
test al, al
je 0x140077b48
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.140018558
call fcn.1400130f9
mov rbx, rax
mov rcx, qword [rdi + 0x18]
mov rdx, rax
call fcn.140011d4b
mov rcx, rbx
call fcn.14000ebe5
cmp byte [rsi], 0
je 0x140077b78
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.140013124
Function at 0x1400783af
Capabilities:
Terminate process

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x50
mov rdi, rcx
call fcn.140001066
mov rsi, rax
movups xmm0, xmmword [rdi + 0x20]
lea rcx, [rsp + 0x30]
movaps xmmword [rcx], xmm0
call fcn.14001854b
test al, al
je 0x1400783eb
cmp byte [rsi], 0
jne 0x14007853a
jmp 0x140078581
mov qword [rsp + 0x28], 0
mov rcx, qword [rdi + 0x28]
call qword [rdi + 0x20]
mov r12b, 1
cmp byte [rsi], 0
jne 0x140078520
mov rbx, rax
mov qword [rsp + 0x28], rax
test rax, rax
je 0x1400784b7
lea rbp, [rdi + 0x20]
lea r14, [rsp + 0x28]
lea r15, [rsp + 0x30]
mov cl, byte [rbx + 0x20]
call fcn.14001296a
test al, al
je 0x14007847a
mov rcx, qword [rdi + 0x28]
call qword [rdi + 0x20]
cmp byte [rsi], 0
jne 0x140078520
mov rcx, r14
mov rdx, rax
call fcn.1400106b1
cmp byte [rsi], 0
jne 0x140078520
movups xmm0, xmmword [rbp]
movaps xmmword [rsp + 0x30], xmm0
mov rcx, r15
call fcn.14001854b
mov rbx, qword [rsp + 0x28]
test al, al
jne 0x140078475
test rbx, rbx
jne 0x140078426
test rbx, rbx
je 0x1400784b7
lea r14, [rsp + 0x30]
mov edx, 0x10
mov rcx, r14
call fcn.1400018bc
lea rax, [fcn.1400783af]
mov qword [r14], rax
mov qword [r14 + 8], rdi
mov rax, qword [r14]
mov rcx, qword [r14 + 8]
lea rdx, [rsp + 0x40]
mov qword [rdx], rax
mov qword [rdx + 8], rcx
mov rcx, rbx
call fcn.140013427
jmp 0x14007851d
mov rax, qword [rdi + 0x18]
mov cl, byte [rax + 0x20]
call fcn.14001296a
test al, al
je 0x1400784cc
xor r12d, r12d
jmp 0x140078520
mov ecx, 0x40
call fcn.14000ed36
lea rcx, [0x1400a8228]
mov qword [rax], rcx
lea rdx, [0x1400a8260]
mov qword [rax + 0x10], rdx
movups xmm0, xmmword [0x1400952c0]
movups xmmword [rax + 0x18], xmm0
mov qword [rax + 8], 0
mov qword [rsp + 0x20], 0x2a
lea r8, [0x1400a8280]
lea r9, str.mVedrBkx34YrVf
mov rcx, rax
call fcn.14000ed74
mov r12b, byte [rsi]
mov byte [rsi], 0
mov rcx, qword [rsp + 0x28]
call fcn.1400106dc
cmp byte [rsi], 0
jne 0x14007853a
mov byte [rsi], r12b
test r12b, r12b
je 0x140078581
mov byte [rsi], 0
mov rax, qword [rdi + 0x18]
mov cl, byte [rax + 0x20]
call fcn.14001296a
test al, al
je 0x140078560
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.140018558
call fcn.1400130f9
mov rbx, rax
mov rcx, qword [rdi + 0x18]
mov rdx, rax
call fcn.140011d4b
mov rcx, rbx
call fcn.14000ebe5
cmp byte [rsi], 0
je 0x140078590
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.140013124
Function at 0x14007b759
Capabilities:
Terminate process

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x50
mov rdi, rcx
call fcn.140001066
mov rsi, rax
movups xmm0, xmmword [rdi + 0x20]
lea rcx, [rsp + 0x30]
movaps xmmword [rcx], xmm0
call fcn.14001854b
test al, al
je 0x14007b795
cmp byte [rsi], 0
jne 0x14007b8e4
jmp 0x14007b92b
mov qword [rsp + 0x28], 0
mov rcx, qword [rdi + 0x28]
call qword [rdi + 0x20]
mov r12b, 1
cmp byte [rsi], 0
jne 0x14007b8ca
mov rbx, rax
mov qword [rsp + 0x28], rax
test rax, rax
je 0x14007b861
lea rbp, [rdi + 0x20]
lea r14, [rsp + 0x28]
lea r15, [rsp + 0x30]
mov cl, byte [rbx + 0x20]
call fcn.14001296a
test al, al
je 0x14007b824
mov rcx, qword [rdi + 0x28]
call qword [rdi + 0x20]
cmp byte [rsi], 0
jne 0x14007b8ca
mov rcx, r14
mov rdx, rax
call fcn.1400106b1
cmp byte [rsi], 0
jne 0x14007b8ca
movups xmm0, xmmword [rbp]
movaps xmmword [rsp + 0x30], xmm0
mov rcx, r15
call fcn.14001854b
mov rbx, qword [rsp + 0x28]
test al, al
jne 0x14007b81f
test rbx, rbx
jne 0x14007b7d0
test rbx, rbx
je 0x14007b861
lea r14, [rsp + 0x30]
mov edx, 0x10
mov rcx, r14
call fcn.1400018bc
lea rax, [fcn.14007b759]
mov qword [r14], rax
mov qword [r14 + 8], rdi
mov rax, qword [r14]
mov rcx, qword [r14 + 8]
lea rdx, [rsp + 0x40]
mov qword [rdx], rax
mov qword [rdx + 8], rcx
mov rcx, rbx
call fcn.140013427
jmp 0x14007b8c7
mov rax, qword [rdi + 0x18]
mov cl, byte [rax + 0x20]
call fcn.14001296a
test al, al
je 0x14007b876
xor r12d, r12d
jmp 0x14007b8ca
mov ecx, 0x40
call fcn.14000ed36
lea rcx, [0x1400a8228]
mov qword [rax], rcx
lea rdx, [0x1400a8260]
mov qword [rax + 0x10], rdx
movups xmm0, xmmword [0x140095380]
movups xmmword [rax + 0x18], xmm0
mov qword [rax + 8], 0
mov qword [rsp + 0x20], 0x2a
lea r8, [0x1400a8280]
lea r9, str.mVedrBkx34YrVf
mov rcx, rax
call fcn.14000ed74
mov r12b, byte [rsi]
mov byte [rsi], 0
mov rcx, qword [rsp + 0x28]
call fcn.1400106dc
cmp byte [rsi], 0
jne 0x14007b8e4
mov byte [rsi], r12b
test r12b, r12b
je 0x14007b92b
mov byte [rsi], 0
mov rax, qword [rdi + 0x18]
mov cl, byte [rax + 0x20]
call fcn.14001296a
test al, al
je 0x14007b90a
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.140018558
call fcn.1400130f9
mov rbx, rax
mov rcx, qword [rdi + 0x18]
mov rdx, rax
call fcn.140011d4b
mov rcx, rbx
call fcn.14000ebe5
cmp byte [rsi], 0
je 0x14007b93a
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
add rsp, 0x50
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.140013124