joyce8/EMBER2024-capa huggingface dataset:
Function at 0x45b160
Capabilities:
Get geographical location

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x45b3c6
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
test ebx, ebx
je 0x45b189
mov dword [rsp + 0x60], ebx
lea rcx, [0x009407a0]
jmp 0x45b1a0
xor eax, eax
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov rcx, qword [rcx + 0x210]
nop dword [rax]
test rcx, rcx
je 0x45b1d7
mov rdx, qword [rcx + 0x118]
cmp rax, rdx
jb 0x45b195
mov rsi, qword [rcx + 0x120]
cmp rax, rsi
jae 0x45b195
movsxd rcx, ebx
lea rax, [rdx + rcx]
cmp rsi, rax
jb 0x45b336
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov qword [rsp + 0x20], rax
nop
nop
nop
lea rax, [0x01145420]
call fcn.0040c5e0
mov rbx, qword [0x01145430]
lea rax, [0x00a16540]
mov ecx, dword [rsp + 0x60]
nop dword [rax]
call fcn.00411860
mov byte [rsp + 0x1f], bl
mov rcx, qword [rax]
mov qword [rsp + 0x38], rcx
nop
nop
nop
lea rax, [0x01145420]
nop dword [rax + rax]
call fcn.0040c800
movzx ecx, byte [rsp + 0x1f]
test cl, cl
jne 0x45b296
call fcn.004392e0
lea rax, [0x00ace576]
mov ebx, 0x11
nop
call fcn.00439be0
mov eax, dword [rsp + 0x60]
movsxd rax, eax
call fcn.00439a40
lea rax, [0x00ac81ff]
mov ebx, 6
nop dword [rax]
call fcn.00439be0
mov rax, qword [rsp + 0x20]
call fcn.00439a40
lea rax, [0x00accf38]
mov ebx, 0x10
nop dword [rax + rax]
call fcn.00439be0
call fcn.00439360
lea rax, [0x009407a0]
jmp 0x45b320
mov rax, qword [rsp + 0x38]
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov qword [rsp + 0x40], rax
mov rcx, qword [rax + 0x118]
mov qword [rsp + 0x30], rcx
mov rdx, qword [rax + 0x120]
mov qword [rsp + 0x28], rdx
call fcn.004392e0
lea rax, [0x00ac89d6]
mov ebx, 7
call fcn.00439be0
mov rax, qword [rsp + 0x30]
nop dword [rax]
call fcn.00439a40
lea rax, [0x00ac8be5]
mov ebx, 8
call fcn.00439be0
mov rax, qword [rsp + 0x28]
nop dword [rax + rax]
call fcn.00439a40
call fcn.00439540
call fcn.00439360
mov rax, qword [rsp + 0x40]
mov rax, qword [rax + 0x210]
nop dword [rax + rax]
test rax, rax
jne 0x45b2a5
lea rax, [0x00ae6258]
mov ebx, 0x2e
call fcn.00437b60
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rsi
call fcn.004392e0
lea rax, [0x00ace576]
mov ebx, 0x11
call fcn.00439be0
mov eax, dword [rsp + 0x60]
movsxd rax, eax
nop dword [rax]
call fcn.00439a40
lea rax, [0x00acbc7d]
mov ebx, 0xe
call fcn.00439be0
mov rax, qword [rsp + 0x30]
nop dword [rax + rax]
call fcn.00439a40
lea rax, [0x00ac7891]
mov ebx, 3
call fcn.00439be0
mov rax, qword [rsp + 0x28]
nop dword [rax + rax]
call fcn.00439a40
call fcn.00439540
call fcn.00439360
lea rax, [0x00adddc7]
mov ebx, 0x21
nop dword [rax + rax]
call fcn.00437b60
nop
mov qword [rsp + 8], rax
mov dword [rsp + 0x10], ebx
call fcn.00463480
mov rax, qword [rsp + 8]
mov ebx, dword [rsp + 0x10]
nop dword [rax]
jmp fcn.0045b160
Function at 0x45b400
Capabilities:
Get geographical location

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x45b68b
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
test ebx, ebx
je 0x45b42e
nop dword [rax]
cmp ebx, 0xffffffff
je 0x45b42e
lea rcx, [0x009407a0]
jmp 0x45b441
xor eax, eax
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov rcx, qword [rcx + 0x210]
test rcx, rcx
je 0x45b45a
cmp qword [rcx + 0x118], rax
ja 0x45b43a
cmp qword [rcx + 0x120], rax
jbe 0x45b43a
jmp 0x45b45c
xor ecx, ecx
mov dword [rsp + 0x60], ebx
test rcx, rcx
je 0x45b4c8
mov qword [rsp + 0x40], rcx
mov rdx, qword [rcx + 0x200]
lea rax, [0x00a16de0]
mov esi, ebx
mov rbx, rdx
mov ecx, esi
nop
call fcn.004116c0
mov rax, qword [rax]
test rax, rax
jne 0x45b4be
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rcx + 0x118]
mov ebx, dword [rsp + 0x60]
movsxd rsi, ebx
lea rax, [rdx + rsi]
mov rcx, qword [rcx + 0x120]
cmp rcx, rax
jb 0x45b605
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov qword [rsp + 0x18], rax
nop
nop
nop
lea rax, [0x01145420]
call fcn.0040c5e0
mov rbx, qword [0x01145430]
lea rax, [0x00a16540]
mov ecx, dword [rsp + 0x60]
call fcn.004116c0
mov rcx, qword [rax]
mov qword [rsp + 0x30], rcx
nop
nop
nop
lea rax, [0x01145420]
call fcn.0040c800
mov rax, qword [rsp + 0x30]
test rax, rax
jne 0x45b573
call fcn.004392e0
lea rax, [0x00ace5ba]
mov ebx, 0x11
call fcn.00439be0
mov eax, dword [rsp + 0x60]
movsxd rax, eax
call fcn.00439a40
lea rax, [0x00ac81ff]
mov ebx, 6
call fcn.00439be0
mov rax, qword [rsp + 0x18]
call fcn.00439a40
lea rax, [0x00accf38]
mov ebx, 0x10
nop dword [rax]
call fcn.00439be0
call fcn.00439360
lea rax, [0x009407a0]
jmp 0x45b5eb
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov qword [rsp + 0x38], rax
mov rcx, qword [rax + 0x118]
mov qword [rsp + 0x28], rcx
mov rdx, qword [rax + 0x120]
mov qword [rsp + 0x20], rdx
call fcn.004392e0
lea rax, [0x00ac89d6]
mov ebx, 7
call fcn.00439be0
mov rax, qword [rsp + 0x28]
call fcn.00439a40
lea rax, [0x00ac8be5]
mov ebx, 8
call fcn.00439be0
mov rax, qword [rsp + 0x20]
call fcn.00439a40
call fcn.00439540
call fcn.00439360
mov rax, qword [rsp + 0x38]
mov rax, qword [rax + 0x210]
test rax, rax
jne 0x45b57d
lea rax, [0x00ae62e2]
mov ebx, 0x2e
nop dword [rax]
call fcn.00437b60
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rcx
call fcn.004392e0
lea rax, [0x00ace5ba]
mov ebx, 0x11
call fcn.00439be0
mov eax, dword [rsp + 0x60]
movsxd rax, eax
call fcn.00439a40
lea rax, [0x00acbc7d]
mov ebx, 0xe
nop dword [rax]
call fcn.00439be0
mov rax, qword [rsp + 0x28]
call fcn.00439a40
lea rax, [0x00ac7891]
mov ebx, 3
nop dword [rax + rax]
call fcn.00439be0
mov rax, qword [rsp + 0x20]
call fcn.00439a40
call fcn.00439540
call fcn.00439360
lea rax, [0x00adde09]
mov ebx, 0x21
call fcn.00437b60
nop
mov qword [rsp + 8], rax
mov dword [rsp + 0x10], ebx
call fcn.00463480
mov rax, qword [rsp + 8]
mov ebx, dword [rsp + 0x10]
jmp fcn.0045b400
Function at 0x45b6c0
Capabilities:
Get geographical location

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x45b985
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
cmp ebx, 0xffffffff
je 0x45b6e6
lea rcx, [0x009407a0]
jmp 0x45b708
lea rcx, [0x00c569d0]
test byte [rcx], al
mov rax, qword [0x00c569d0]
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
nop
ret
mov rcx, qword [rcx + 0x210]
test rcx, rcx
je 0x45b722
cmp qword [rcx + 0x118], rax
ja 0x45b701
cmp qword [rcx + 0x120], rax
jbe 0x45b701
nop
jmp 0x45b724
xor ecx, ecx
mov dword [rsp + 0x58], ebx
test rcx, rcx
je 0x45b75c
mov rdx, qword [rcx + 0x128]
mov rsi, qword [rcx + 0x130]
nop dword [rax + rax]
cmp rsi, 1
jle 0x45b74d
xor eax, eax
jmp 0x45b948
movsxd rdx, ebx
add rdx, qword [rcx + 0xb0]
jmp 0x45b89b
mov qword [rsp + 0x18], rax
nop
nop
nop
lea rax, [0x01145420]
call fcn.0040c5e0
mov rbx, qword [0x01145430]
lea rax, [0x00a16540]
mov ecx, dword [rsp + 0x58]
call fcn.004116c0
mov rcx, qword [rax]
mov qword [rsp + 0x30], rcx
nop
nop
nop
lea rax, [0x01145420]
call fcn.0040c800
mov rax, qword [rsp + 0x30]
test rax, rax
jne 0x45b807
call fcn.004392e0
lea rax, [0x00ace5a9]
mov ebx, 0x11
call fcn.00439be0
mov eax, dword [rsp + 0x58]
movsxd rax, eax
call fcn.00439a40
lea rax, [0x00ac81ff]
mov ebx, 6
call fcn.00439be0
mov rax, qword [rsp + 0x18]
call fcn.00439a40
lea rax, [0x00accf38]
mov ebx, 0x10
call fcn.00439be0
call fcn.00439360
lea rax, [0x009407a0]
jmp 0x45b885
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov qword [rsp + 0x38], rax
mov rcx, qword [rax + 0x118]
mov qword [rsp + 0x28], rcx
mov rdx, qword [rax + 0x120]
mov qword [rsp + 0x20], rdx
call fcn.004392e0
lea rax, [0x00ac89d6]
mov ebx, 7
nop
call fcn.00439be0
mov rax, qword [rsp + 0x28]
call fcn.00439a40
lea rax, [0x00ac8be5]
mov ebx, 8
nop dword [rax + rax]
call fcn.00439be0
mov rax, qword [rsp + 0x20]
call fcn.00439a40
call fcn.00439540
call fcn.00439360
mov rax, qword [rsp + 0x38]
mov rax, qword [rax + 0x210]
test rax, rax
jne 0x45b811
lea rax, [0x00ae62b4]
mov ebx, 0x2e
call fcn.00437b60
mov rsi, qword [rcx + 0xb8]
cmp rdx, rsi
ja 0x45b8b4
mov rax, rdx
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov qword [rsp + 0x28], rsi
mov rax, qword [rcx + 0xb0]
mov qword [rsp + 0x20], rax
call fcn.004392e0
lea rax, [0x00ace5a9]
mov ebx, 0x11
call fcn.00439be0
mov eax, dword [rsp + 0x58]
movsxd rax, eax
call fcn.00439a40
lea rax, [0x00acbc7d]
mov ebx, 0xe
call fcn.00439be0
mov rax, qword [rsp + 0x20]
nop dword [rax]
call fcn.00439a40
lea rax, [0x00ac7891]
mov ebx, 3
call fcn.00439be0
mov rax, qword [rsp + 0x28]
nop dword [rax + rax]
call fcn.00439a40
call fcn.00439540
call fcn.00439360
lea rax, [0x00addde8]
mov ebx, 0x21
nop dword [rax + rax]
call fcn.00437b60
inc rax
cmp rax, rsi
jge 0x45b97d
lea rdi, [rax + rax*2]
mov r8, qword [rdx + rdi*8]
mov r9, qword [rdx + rdi*8 + 8]
movsxd r10, ebx
nop dword [rax]
cmp r8, r10
ja 0x45b945
add r9, r8
cmp r10, r9
jae 0x45b945
mov rdx, qword [rdx + rdi*8 + 0x10]
add rdx, r10
sub rdx, r8
jmp 0x45b89b
xor edx, edx
nop
jmp 0x45b89b
mov qword [rsp + 8], rax
mov dword [rsp + 0x10], ebx
call fcn.00463480
mov rax, qword [rsp + 8]
mov ebx, dword [rsp + 0x10]
nop dword [rax]
jmp fcn.0045b6c0
Function at 0x45df20
Capabilities:
Get geographical location

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x45df66
sub rsp, 0x18
mov qword [rsp + 0x10], rbp
lea rbp, [rsp + 0x10]
lea rax, [rsp + 0x20]
call fcn.00437b20
nop
test rax, rax
jne 0x45df4f
mov rbp, qword [rsp + 0x10]
add rsp, 0x18
ret
lea rax, [0x00adcd4e]
mov ebx, 0x20
nop dword [rax + rax]
call fcn.00437b60
nop
call fcn.00463480
jmp fcn.0045df20

Function at 0x45e840
Capabilities:
Get geographical location

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x45ea3b
sub rsp, 0x20
mov qword [rsp + 0x18], rbp
lea rbp, [rsp + 0x18]
mov rdx, qword [rax + 0x30]
cmp qword [rdx + 0x18], 0
je 0x45ea29
mov rsi, qword [rdx]
cmp rsi, 0x80
jbe 0x45e899
mov edi, dword [rax + 0x54]
bt edi, 0
nop word [rax + rax]
jae 0x45ea18
cmp byte [rax + 0x50], 8
jne 0x45ea18
cmp rsi, 0x80
ja 0x45e8b0
mov edi, dword [rax + 0x54]
bt edi, 0
jb 0x45ea18
cmp byte [rax + 0x50], sil
jne 0x45ea18
mov rdi, qword [rax + 0x38]
mov r8, qword [rdi]
nop word [rax + rax]
cmp r8, 0x80
jbe 0x45e8ef
mov r9d, dword [rax + 0x54]
bt r9d, 1
jae 0x45ea07
cmp byte [rax + 0x51], 8
nop dword [rax]
jne 0x45ea07
cmp r8, 0x80
ja 0x45e90a
mov r9d, dword [rax + 0x54]
bt r9d, 1
jb 0x45ea07
nop
cmp byte [rax + 0x51], r8b
jne 0x45ea07
movzx edx, byte [rdx + 0x15]
cmp dl, 8
ja 0x45e9f6
movzx edi, byte [rdi + 0x15]
nop dword [rax + rax]
cmp dil, 8
ja 0x45e9e5
test rdx, rdx
je 0x45e9e0
mov rcx, rax
mov rax, rsi
mov r9d, edx
xor edx, edx
div r9
test rdx, rdx
jne 0x45e9cc
test rdi, rdi
je 0x45e9c7
mov rax, r8
xor edx, edx
div rdi
test rdx, rdx
jne 0x45e9b6
mov eax, 8
xor edx, edx
div r9
test rdx, rdx
jne 0x45e9a5
mov eax, 8
xor edx, edx
div rdi
test rdx, rdx
jne 0x45e98f
mov rax, rcx
xor ecx, ecx
nop
call fcn.0040f240
mov rbp, qword [rsp + 0x18]
add rsp, 0x20
ret
lea rax, [0x00ada397]
mov ebx, 0x1d
nop dword [rax + rax]
call fcn.00437b60
lea rax, [0x00ad942d]
mov ebx, 0x1c
call fcn.00437b60
lea rax, [0x00ae1a44]
mov ebx, 0x26
call fcn.00437b60
call fcn.00435420
lea rax, [0x00ae05bd]
mov ebx, 0x24
call fcn.00437b60
nop dword [rax]
call fcn.00435420
lea rax, [0x00acef37]
mov ebx, 0x12
call fcn.00437b60
lea rax, [0x00ace3ef]
mov ebx, 0x11
call fcn.00437b60
lea rax, [0x00accca2]
mov ebx, 0xf
call fcn.00437b60
lea rax, [0x00acc337]
mov ebx, 0xe
call fcn.00437b60
lea rax, [0x00ae77e3]
mov ebx, 0x31
call fcn.00437b60
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.00463480
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.0045e840
Function at 0x465620
Capabilities:
Encrypt data using aes via x86 extensions

Disassembly:
mov rax, qword [rax]
movabs rcx, 0xe7037ed1a0b428db
xor rcx, rax
xor rax, rbx
xor rax, qword [0x0119bb20]
movabs rdx, 0xa0761d6478bd642f
xor rdx, rax
mov rax, rcx
mul rdx
xor rax, rdx
mov rcx, rax
movabs rax, 0x1d8e4e27c47d1247
mul rcx
nop
nop
xor rax, rdx
ret
cmp byte [0x0119b2b1], 0
je 0x465656
movq xmm0, rbx
pinsrq xmm0, qword [rax], 1
aesenc xmm0, xmmword [0x0119bde0]
aesenc xmm0, xmmword [0x0119bdf0]
aesenc xmm0, xmmword [0x0119be00]
movq rax, xmm0
ret
jmp 0x40ae60

Function at 0x467900
Capabilities:
Get geographical location

Disassembly:
sub rsp, 0x20
mov qword [rsp + 0x18], rbp
lea rbp, [rsp + 0x18]
mov rbx, qword [0x0097fb70]
mov rcx, qword [0x0097fb78]
mov eax, 2
call fcn.00432d00
mov rbp, qword [rsp + 0x18]
add rsp, 0x20
ret
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
jmp 0x43adc0
Function at 0x46d120
Capabilities:
Get geographical location

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46d233
sub rsp, 0x18
mov qword [rsp + 0x10], rbp
lea rbp, [rsp + 0x10]
movzx ecx, byte [rax + 0x17]
and ecx, 0x1f
nop
cmp rcx, 0x12
ja 0x46d1a0
cmp rcx, 0x11
jne 0x46d16f
mov rcx, qword [rax + 0x30]
test rcx, rcx
je 0x46d15e
lea rax, [0x00e11548]
jmp 0x46d162
xor eax, eax
xor ecx, ecx
mov rbx, rcx
mov rbp, qword [rsp + 0x10]
add rsp, 0x18
ret
cmp rcx, 0x12
jne 0x46d21f
mov rcx, qword [rax + 0x30]
nop dword [rax]
test rcx, rcx
je 0x46d18e
lea rax, [0x00e11548]
jmp 0x46d192
xor eax, eax
xor ecx, ecx
mov rbx, rcx
mov rbp, qword [rsp + 0x10]
add rsp, 0x18
ret
cmp rcx, 0x15
jne 0x46d1c9
mov rcx, qword [rax + 0x38]
test rcx, rcx
je 0x46d1b8
lea rax, [0x00e11548]
jmp 0x46d1bc
xor eax, eax
xor ecx, ecx
mov rbx, rcx
mov rbp, qword [rsp + 0x10]
add rsp, 0x18
ret
cmp rcx, 0x16
jne 0x46d1f3
mov rcx, qword [rax + 0x30]
test rcx, rcx
je 0x46d1e2
lea rax, [0x00e11548]
nop
jmp 0x46d1e6
xor eax, eax
xor ecx, ecx
mov rbx, rcx
mov rbp, qword [rsp + 0x10]
add rsp, 0x18
ret
cmp rcx, 0x17
jne 0x46d21f
mov rcx, qword [rax + 0x30]
nop dword [rax]
test rcx, rcx
je 0x46d20e
lea rax, [0x00e11548]
jmp 0x46d212
xor eax, eax
xor ecx, ecx
mov rbx, rcx
mov rbp, qword [rsp + 0x10]
add rsp, 0x18
ret
lea rax, [0x009ed380]
lea rbx, [0x00df45e0]
call fcn.004373c0
nop
mov qword [rsp + 8], rax
call fcn.00463480
mov rax, qword [rsp + 8]
jmp fcn.0046d120
Function at 0x470c80
Capabilities:
Get geographical location

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x470f0a
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
mov qword [rsp + 0x50], rax
mov edx, dword [rax]
xor ecx, ecx
xor ebx, ebx
xor esi, esi
xor edi, edi
jmp 0x470cac
mov rax, r8
mov qword [rsp + 0x30], rdi
mov byte [rsp + 0x1e], sil
mov byte [rsp + 0x1d], bl
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x20], edx
mov r8d, edx
and edx, 5
mov dword [rsp + 0x2c], edx
cmp edx, 1
je 0x470cd7
xor r9d, r9d
jmp 0x470d04
mov rax, rcx
call fcn.004600a0
mov rcx, qword [rsp + 0x38]
mov edx, dword [rsp + 0x2c]
movzx ebx, byte [rsp + 0x1d]
movzx esi, byte [rsp + 0x1e]
mov rdi, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x20]
mov r9d, eax
mov rax, qword [rsp + 0x50]
test r9b, r9b
jne 0x470e40
mov r9d, r8d
or r8d, 1
test r9d, 4
mov r10d, r9d
cmove r9d, r8d
lea r8d, [r9 + 8]
test edx, edx
cmovne r9d, r8d
test bl, bl
je 0x470d40
bt r10d, 0
jae 0x470d40
or r9d, 4
nop dword [rax + rax]
test sil, sil
je 0x470d90
bt r9d, 1
jb 0x470d8c
mov dword [rsp + 0x24], r9d
lea rax, [0x00adb503]
mov ebx, 0x1e
nop dword [rax]
call fcn.0045fd40
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x38]
mov edx, dword [rsp + 0x2c]
movzx ebx, byte [rsp + 0x1d]
movzx esi, byte [rsp + 0x1e]
mov rdi, qword [rsp + 0x30]
mov r9d, dword [rsp + 0x24]
mov r10d, dword [rsp + 0x20]
and r9d, 0xfffffffd
mov r8, rax
mov eax, r10d
lock cmpxchg dword [r8], r9d
sete r9b
nop
test r9b, r9b
jne 0x470dad
mov edx, dword [r8]
jmp 0x470ca9
test edx, edx
je 0x470f00
test rdi, rdi
jne 0x470dcf
call fcn.00460f40
mov rcx, qword [rsp + 0x30]
test rcx, rcx
mov r8, qword [rsp + 0x50]
mov rdi, rax
mov qword [rsp + 0x30], rdi
setne bl
lea rax, [r8 + 4]
mov ecx, 1
call fcn.004609a0
movzx edx, byte [rsp + 0x1d]
test dl, dl
je 0x470dfa
mov rcx, qword [rsp + 0x30]
mov eax, 1
jmp 0x470e10
call fcn.00460f40
mov rcx, qword [rsp + 0x30]
sub rax, rcx
cmp rax, 0xf4240
setg al
mov rdx, qword [rsp + 0x50]
mov esi, dword [rdx]
bt esi, 2
nop dword [rax + rax]
jb 0x470eac
mov r8, rdx
mov edx, esi
xor ecx, ecx
mov ebx, eax
mov esi, 1
mov rdi, qword [rsp + 0x30]
jmp 0x470ca9
test sil, sil
jne 0x470e7a
bt r8d, 1
jb 0x470e7a
mov edx, r8d
sar r8d, 3
test r8d, r8d
je 0x470e7a
mov r8d, edx
or edx, 2
mov r9, rax
mov eax, r8d
lock cmpxchg dword [r9], edx
sete dl
test dl, dl
je 0x470e77
mov esi, 1
jmp 0x470e7a
mov rax, r9
mov byte [rsp + 0x1e], sil
nop
call fcn.00460120
mov rax, qword [rsp + 0x38]
lea rcx, [rax + 1]
mov rax, qword [rsp + 0x50]
mov edx, dword [rax]
mov r8, rax
movzx ebx, byte [rsp + 0x1d]
movzx esi, byte [rsp + 0x1e]
mov rdi, qword [rsp + 0x30]
jmp 0x470ca9
mov byte [rsp + 0x1f], al
mov dword [rsp + 0x28], esi
test esi, 3
jne 0x470ec5
mov ecx, esi
sar esi, 3
test esi, esi
jne 0x470ee4
lea rax, [0x00adb503]
mov ebx, 0x1e
call fcn.0045fd40
movzx eax, byte [rsp + 0x1f]
mov ecx, dword [rsp + 0x28]
mov rdx, qword [rsp + 0x50]
test al, al
je 0x470ef7
sar ecx, 3
cmp ecx, 1
je 0x470ef7
mov eax, 0xfffffff9
jmp 0x470efc
mov eax, 0xfffffff5
lock xadd dword [rdx], eax
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov qword [rsp + 8], rax
call fcn.00463480
mov rax, qword [rsp + 8]
jmp fcn.00470c80
Function at 0x470f80
Capabilities:
Get geographical location

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x471042
sub rsp, 0x20
mov qword [rsp + 0x18], rbp
lea rbp, [rsp + 0x18]
lea edx, [rbx + 1]
bt edx, 0
nop
jb 0x470fc5
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x30], ebx
lea rax, [0x00adb521]
mov ebx, 0x1e
call fcn.0045fd40
mov rax, qword [rsp + 0x28]
mov ebx, dword [rsp + 0x30]
bt ebx, 2
jae 0x470ff4
test byte [rax], al
add rax, 4
mov ebx, 1
mov ecx, 1
nop dword [rax + rax]
call fcn.00460940
mov rbp, qword [rsp + 0x18]
add rsp, 0x20
ret
mov ebx, dword [rcx]
mov rax, rcx
mov edx, ebx
sar ebx, 3
test ebx, ebx
je 0x471038
nop dword [rax]
test edx, 7
jne 0x471038
lea esi, [rdx - 8]
or esi, 2
mov rcx, rax
mov eax, edx
lock cmpxchg dword [rcx], esi
sete dl
test dl, dl
je 0x470fef
lea rax, [rcx + 4]
xor ebx, ebx
mov ecx, 1
call fcn.00460940
mov rbp, qword [rsp + 0x18]
add rsp, 0x20
ret
mov rbp, qword [rsp + 0x18]
add rsp, 0x20
ret
mov qword [rsp + 8], rax
mov dword [rsp + 0x10], ebx
call fcn.00463480
mov rax, qword [rsp + 8]
mov ebx, dword [rsp + 0x10]
jmp fcn.00470f80

Function at 0x4725c0
Capabilities:
Get geographical location

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4726c6
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
test byte [rax], al
mov rdx, rax
nop dword [rax]
test rax, 7
jne 0x4725ee
lea rax, [rdx + 8]
jmp 0x4725fb
lea rax, [rdx + 4]
mov rcx, rdx
mov rdx, rax
mov rax, rcx
mov rsi, rbx
shl rbx, 0x20
mov rdi, rbx
lock xadd qword [rdx], rbx
add rdi, rbx
mov r8, rdi
shr rdi, 0x20
test edi, edi
jl 0x4726ad
nop dword [rax]
test r8d, r8d
je 0x472636
test rsi, rsi
jle 0x472632
cmp esi, edi
je 0x47269a
test edi, edi
jmp 0x472638
test edi, edi
jmp 0x472638
test edi, edi
jg 0x472653
test r8d, r8d
je 0x472653
nop
cmp qword [rdx], r8
jne 0x472687
mov qword [rsp + 0x20], rax
mov qword [rdx], 0
jmp 0x472678
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov dword [rsp + 0x1c], r8d
xor ebx, ebx
xor ecx, ecx
call fcn.00460940
mov edx, dword [rsp + 0x1c]
lea r8d, [rdx - 1]
mov rax, qword [rsp + 0x20]
test r8d, r8d
jne 0x47265d
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
lea rax, [0x009ed380]
lea rbx, [0x00df5220]
call fcn.004373c0
lea rax, [0x009ed380]
lea rbx, [0x00df5220]
call fcn.004373c0
lea rax, [0x009ed380]
lea rbx, [0x00df5210]
nop dword [rax + rax]
call fcn.004373c0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.00463480
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
nop
jmp fcn.004725c0
Function at 0x48d040
Capabilities:
Get geographical location

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48d175
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
movzx ecx, byte [rax + 0x17]
and ecx, 0x1f
nop
cmp rcx, 0x12
ja 0x48d0c0
cmp rcx, 0x11
jne 0x48d08f
mov rcx, qword [rax + 0x30]
test rcx, rcx
je 0x48d07e
lea rax, [0x00e15450]
jmp 0x48d082
xor eax, eax
xor ecx, ecx
mov rbx, rcx
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
cmp rcx, 0x12
jne 0x48d13f
mov rcx, qword [rax + 0x30]
nop dword [rax]
test rcx, rcx
je 0x48d0ae
lea rax, [0x00e15450]
jmp 0x48d0b2
xor eax, eax
xor ecx, ecx
mov rbx, rcx
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
cmp rcx, 0x15
jne 0x48d0e9
mov rcx, qword [rax + 0x38]
test rcx, rcx
je 0x48d0d8
lea rax, [0x00e15450]
jmp 0x48d0dc
xor eax, eax
xor ecx, ecx
mov rbx, rcx
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
cmp rcx, 0x16
jne 0x48d113
mov rcx, qword [rax + 0x30]
test rcx, rcx
je 0x48d102
lea rax, [0x00e15450]
nop
jmp 0x48d106
xor eax, eax
xor ecx, ecx
mov rbx, rcx
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
cmp rcx, 0x17
jne 0x48d13f
mov rcx, qword [rax + 0x30]
nop dword [rax]
test rcx, rcx
je 0x48d12e
lea rax, [0x00e15450]
jmp 0x48d132
xor eax, eax
xor ecx, ecx
mov rbx, rcx
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
nop
call fcn.0048c1e0
mov ecx, 0x1e
mov rdi, rax
mov rsi, rbx
xor eax, eax
lea rbx, [0x00adb37d]
call fcn.0044eae0
nop
call fcn.0040bc40
mov rbx, rax
lea rax, [0x009ed380]
call fcn.004373c0
nop
mov qword [rsp + 8], rax
call fcn.00463480
mov rax, qword [rsp + 8]
jmp fcn.0048d040

Function at 0x48d7e0
Capabilities:
Get geographical location

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48d8a9
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
movzx esi, byte [rax + 0x17]
and esi, 0x1f
nop
cmp rsi, 0x13
jne 0x48d876
movzx esi, byte [rax + 0x14]
test sil, 1
je 0x48d817
mov ecx, 0x48
jmp 0x48d81c
mov ecx, 0x38
movzx edx, word [rax + 0x30]
test dx, dx
jne 0x48d82b
xor edx, edx
xor esi, esi
jmp 0x48d838
lea rsi, [rax + rcx]
cmp rdx, 0x100000
ja 0x48d86c
cmp rbx, rdx
jae 0x48d861
mov rcx, qword [rsi + rbx*8]
test rcx, rcx
je 0x48d84f
lea rax, [0x00e15450]
jmp 0x48d853
xor eax, eax
xor ecx, ecx
mov rbx, rcx
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
nop
ret
mov rax, rbx
mov rcx, rdx
call fcn.00465ba0
mov ebx, 0x100000
call fcn.00465ca0
call fcn.0048c1e0
mov ecx, 0x1d
mov rdi, rax
mov rsi, rbx
xor eax, eax
lea rbx, [0x00ada4b9]
call fcn.0044eae0
call fcn.0040bc40
mov rbx, rax
lea rax, [0x009ed380]
call fcn.004373c0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.00463480
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.0048d7e0