joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140028e9c
Capabilities:
Execute syscall

Disassembly:
push rdi
call qword [rax]
mov dword [rsp - 0x28], 0x3348f85f
mov dword [rsp - 0x2c], ecx
mov dword [rsp - 0x28], ebp
mov rsi, rsi
xchg r8, r8
mov rcx, qword [rbx]
jne 0x140028d88
je 0x140028d88
lea r9d, [rdi - 0x14da]
movabs r14, 0x39c73e0000011ce9
call int.14002978b
jmp 0x140028ea9
pop r13
mov rax, qword [rbx + 0x78]
xchg rdx, rdx
je 0x140028daf
jne 0x140028daf
jmp rax
jmp 0x140028f16
nop word [rax + rax]
push r13
movabs r13, 0x6d5910ffffff7ae9
jne 0x140028e16
jmp 0x140028d95
je 0x140028e16
call fcn.140028e9c
je 0x140028e57
jne 0x140028e57
and r9d, 0x646a7094
ror edx, 0x4f
and r9d, 0x3624b223
dec rbx
pop rdx
jae 0x140028719
test edx, 0xd53c0b1e
test r9d, 0x8c64c386
syscall
movabs rdx, 0x366b68e21efd5aeb
lea ebp, [rbp + 0x57b3]
lea r15d, [rbx + 0xa5d5]
lea r14d, [rdi + 0x8841]
test r14d, 0x1d19bcec
dec r10
ret
jmp 0x140028eb3
pop rbx
push rbx
jbe 0x140028f89
jmp 0x140028e09
call fcn.1400992c0
jmp 0x140028fc1
add rsp, 0x20
pop r13
ret
mov dword [rsp - 0x30], edi
xor edx, edx
mov rax, qword [rcx]
jmp 0x140028d60
xchg r13, r13
cmp rax, 0x78
jbe 0x140028f4c
mov rcx, qword [rbx]
mov dword [rsp - 0x30], 0x15db1e8c
xchg r15, r15
jne 0x140028f39
je 0x140028f39
pause
movabs r8, 0x7da22f2f691bcdeb
rcl ebp, 9
rol ebx, 0x5b
call fcn.14002829c
jmp 0x140028f08
test rax, rax
je 0x140028fc1
mov rax, qword [rbx]
mov dword [rsp - 0x20], esi
jmp 0x140028fa9
pop rdi
ret
inc rdi
sub rbx, 0xffffffffffffff80
cmp rdi, qword [rsi]
xchg rbx, rbx
mov rbp, rbp
xchg rcx, rcx
mov dword [rsp - 0x28], 0x21854296
jmp 0x140028f83
jb 0x140028d97
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov dword [rsp - 0x28], edi
mov dword [rsp - 0x2c], ecx
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
jmp 0x140028f61
mov dword [rsp - 0x1c], 0x3cc190d2
mov dword [rsp - 0x40], ebp
xor edx, edx
jmp 0x140028fbc
mov rcx, rbx
call qword [rax]
mov qword [rbx + 0x78], rbp
mov dword [rsp - 0x20], 0x69a1489a
xchg rsp, rsp
xchg rbp, rbp
mov dword [rsp - 0xc], 0x21ee3e9e
jne 0x140029017
je 0x140029017
jl 0x1400288d9
inc r8
int3
jmp 0x140028f63
Function at 0x14002e318
Capabilities:
Execute syscall

Disassembly:
pop rdi
inc rcx
rol esi, 0x83
call fcn.14002dc77

Function at 0x14002ee63
Capabilities:
Execute syscall

Disassembly:
mov dword [rsp - 0x30], 0x71a05b85
mov dword [rsp - 0x30], 0x301983b3
push r8
movabs r8, 0x201877000004fde9
jne 0x14002ee3a
jmp 0x14002f33c
je 0x14002ee3a
jne 0x14002ee81
je 0x14002ee81
lea ebp, [rbx - 0x9a85]
or r15d, 0x3ae8d8aa
jbe 0x14002f540
rol ebp, 0xbb
cmp r11, rbx
mov r14d, 0x483064ad
cpuid
div rdx
and r8d, 0x23a4a819
lea edi, [rdi - 0xd972]
syscall
call rcx
movabs r14, 0x2d2cec00000384e9
call fcn.14002f095
lea r13d, [rbx + 0x2ef5]
call rcx
mov edx, 0xdb992d0c
ret 0x10
jmp 0x14002f20a

Function at 0x140030a60
Capabilities:
Execute syscall

Disassembly:
xchg esp, eax
syscall
ret 0x20
push rbp
mov rbp, rsp
mov dword [rsp - 0x14], 0x4a2f56cf
xchg rcx, rcx
mov dword [rsp - 0xc], 0x22eb046c
jne 0x140030a83
je 0x140030a83
mul r10
pause
movabs rdx, 0x318ab3000001d0e9
or r9d, 0x5f7bcc52
jmp 0x140030689
jmp 0x140030c58
mov dword [rsp - 0x44], 0x24066a79
xchg rcx, rcx
mov dword [rsp - 0x24], 0x12a0dd7c
mov r11, r11
mov dword [rbp - 0x30], 0x5000cb
jmp 0x140030c79
xchg rdx, rdx
mov dword [rbp - 0x24], 0x6e00b1
mov dword [rbp - 0x20], 0x4a0087
jmp 0x140030b7c
mov dword [rbp - 0xc], 0x3400bb
mov qword [rbp + 0x10], r9
xchg rcx, rcx
mov rax, qword [rbp + 0x10]
mov dword [rbp - 0x1c], 0x7500ff
mov dword [rbp - 0x18], 0x47009e
mov dword [rsp - 0x40], ebp
mov dword [rsp - 0x10], 0x529b4fc3
jne 0x140030bc3
je 0x140030bc3
rol edi, 0x72
div rdx
neg r8
and r12d, 0xba48423
add r14d, 0x3ec135c
mul rdx
mul r8
test r13, rcx
cmp rbx, rdi
rcl r9d, 2
movabs r10, 0x32ad8d000001f4e9
jmp fcn.140030e64
jmp 0x140030dbc
add rsp, 0x50
pop r14
ret
pop r14
mov dword [rbp - 0x14], 0x7b00bb
mov dword [rbp - 0x10], 0x56009f
jmp 0x140030b5d
mov r8, rcx
mov dword [rbp - 0x48], 0x130098
mov dword [rbp - 0x44], 0x6800af
jmp 0x140030c92
sub rsp, 0x50
xor r9d, r9d
push r9
movabs r9, 0x7857ce000000e6e9
jne 0x140030c63
jmp 0x140030d4e
je 0x140030c63
call 0x140030c58
jmp 0x140030d9a
mov dword [rbp - 0x2c], 0x6800aa
mov dword [rbp - 0x28], 0x560099
mov r9, r9
xchg r15, r15
jmp 0x140030b24
mov r10, r10
mov dword [rbp - 0x40], 0x570084
mov dword [rbp - 0x3c], 0x7900aa
mov dword [rbp - 0x38], 0x13009f
jmp 0x140030cc5
mov dword [rbp - 0x34], 0x6900b6
mov dword [rsp - 0x3c], 0x1f6f74b2
mov dword [rsp - 0x40], 0x765e0e7c
jmp 0x140030ae5
pop r9
mov dword [rbp - 0x50], 0x6700e1
mov dword [rbp - 0x4c], 0x7300b7
mov r13, r13
mov dword [rsp - 0x14], esi
mov rsp, rsp
mov dword [rsp - 0x24], 0x5d200fe3
jmp 0x140030c42
add rsp, 0x50
pop r9
ret
push r14
invalid

Function at 0x140035102
Capabilities:
Execute syscall

Disassembly:
add ebp, dword [rax + rax - 0x167ebf00]
insb byte [rdi], dx
adc cl, byte [rdx]
invalid

Function at 0x14003b6b7
Capabilities:
Execute syscall

Disassembly:
lea eax, [rdi - 0x52c9]
test rdx, rdi
cpuid
jmp rax
shr al, 0
add byte [rcx + 0x55], al
movabs r10, 0x553610606dbec0eb
lea r9d, [rbp + 0xaee0]
mov r9d, 0x4539fde8
jp 0x14003b8ae
add r15d, 0x518aeb90
jo 0x14003aec3
jns 0x14003c2f3
call rcx
or ebx, 0x1f91124a
syscall
ret
mov ecx, 0xc7814172
invalid
and al, 0xc4
mov ah, 0x94
invalid
Function at 0x14005399a
Capabilities:
Execute syscall

Disassembly:
cmpsb byte [rsi], byte [rdi]
pop r8
syscall
ret

Function at 0x1400549e0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov dword [rsp - 0x44], edx
nop
mov qword [rsp - 8], rdi
sub rsp, 8
nop
add rsp, 0x9e60074
sub rsp, 0x9e60094
xchg rbx, rdx
mov rdx, rbx
xchg rbx, rdx
xchg r11, rcx
mov rdi, r11
xchg r11, rcx
nop
movabs rdx, 0xffffffff2bd87540
add rdx, 0x2665621a
add rdx, 0x209fd1e0
add rdx, 0x7fffffff
xor rdx, 0xd2256c6
nop word [rax + rax]
mov dword [rsp - 0x3c], ebx
inc rdx
cmp word [rbx + rdx*2], 0
jne 0x140054a48
mov qword [rcx + 0x38], rdx
mov r13, r13
call fcn.140017b4c
xor r8d, r8d
mov edx, 0xfcf6fa6
add edx, 0x1b3590df
add edx, 0x20c044f3
sub edx, 0x30e6118d

Function at 0x140054b00
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov dword [rsp - 0x20], ebx
xchg rbp, r8
mov qword [rsp + 0x10], r8
xchg rbp, r8
mov qword [rsp + 0x18], rsi
mov dword [rsp - 0x38], esp
nop
mov qword [rsp - 8], rdi
sub rsp, 8
nop
sub rsp, 8
mov qword [rsp], r12
Function at 0x140055180
Capabilities:
Encode data using xor

Disassembly:
xchg r14, rbx
mov qword [rsp + 8], r14
xchg rbx, r14
xchg rsi, r12
mov qword [rsp + 0x10], r12
xchg r12, rsi
push rdi
mov dword [rsp - 0x18], edx
nop
add rsp, 0x4da01a9f
sub rsp, 0x4da01abf
mov rsi, qword [rcx + 0x38]
xchg rcx, rdx
mov rbx, rcx
xchg rcx, rdx
xchg rsi, r8
mov rsi, qword [rdx + 0x38]
xchg rsi, r8
xchg r10, rdi
mov r10, rcx
xchg rdi, r10
add r8, rsi
mov dword [rsp - 0x18], 0x32f19a35
xchg rdx, r9
mov r9, rsi
xchg r9, rdx
xchg r15, r8
mov qword [rcx + 0x38], r15
xchg r8, r15
call fcn.140055e50
mov rdx, rdx
xchg r9, rcx
mov rcx, qword [rbx]
xchg rcx, r9
mov ecx, esi
mov r11, r11
and ecx, 3
mov r8d, 0x7ab41686
sub r8d, 0x14115bb9
sub r8d, 0x4d935762
xor r8d, 0x7d5f4ef7
sub r8d, 0x4970f9b1
shl ecx, 1
shl ecx, 1
shl ecx, 1
mov edx, r8d
mov r10, r10
ror edx, cl
mov r10, rax
xor ecx, ecx
cmp qword [rbx + 0x38], rcx
mov dword [rsp - 0x2c], 0x5f5788b7
jbe 0x1400552c0
lea rax, [rsi + rsi]
mov r11d, 0x6188ba22
sub r11d, 0x49701b82
xor r11d, 0x2636ecaf
xor r11d, 0x3e2e72f0
sub rax, r9
add r10, rax
mov dword [rsp - 0x10], 0x508b220f
nop dword [rax]
movzx eax, dx
lea r9, [r9 + 2]
mov rdi, rdi
xor ax, r8w
ror edx, 6
ror edx, 1
ror edx, 1
and ax, r11w
ror r8d, 2
ror r8d, 1
ror r8d, 3
ror r8d, 1
ror r8d, 1
xor ax, word [r9 - 2]
mov r11, r11
inc rcx
mov word [r10 + r9 - 2], ax
cmp rcx, qword [rbx + 0x38]
jb 0x140055278
xchg r10, r10
mov rbx, qword [rsp + 0x30]
mov rax, rdi
mov rsi, qword [rsp + 0x38]
mov r9, r9
nop
add rsp, 0x57f641e7
sub rsp, 0x57f641c7
pop rdi
xchg rsp, rsp
ret

Function at 0x1400552f0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov dword [rsp - 0x2c], 0x32b470ca
xchg rsi, rdi
mov qword [rsp + 0x18], rsi
xchg rsi, rdi
push r14
sub rsp, 0x20
xchg r8, r8
xchg r14, r12
mov r12, qword [rcx + 0x38]
xchg r12, r14
xchg rdx, rbp
mov rdi, rbp
xchg rdx, rbp
xchg rsi, rcx
mov rcx, rsi
xchg rcx, rsi
nop
movabs rbx, 0xffffffff2cedab9f
add rbx, 0x2423342
add rbx, 0x36a0c127
add rbx, 0x7fffffff
xor rbx, 0x1a2f5ff8
inc rbx
cmp word [rdx + rbx*2], 0
xchg r9, r9
jne 0x140055359
lea r8, [r14 + rbx]
xchg rdx, r14
mov r14, rdx
xchg r14, rdx
xchg r15, r8
mov qword [rcx + 0x38], r15
xchg r15, r8
call fcn.140055e50
mov ecx, r14d
xchg rdx, rdx
mov edx, 0x15809af0
add edx, 0x5cdf0c4e
sub edx, 0x34a4e07e
sub edx, 0x22db92d5
and ecx, 3
shl ecx, 3
ror edx, cl
mov rbp, rbp
test rbx, rbx
je 0x14005541f
lea r8, [r14 + r14]
mov r13, r13
mov ecx, 0x2fca36a1
xor ecx, 0x43ad512c
xor ecx, 0x48c68607
sub ecx, 0x229c8f64
sub ecx, 0x2055127
sub r8, rdi
add r8, rax
mov rcx, rcx
nop dword [rax]
nop dword [rax + rax]
movzx eax, dx
xchg r14, r14
lea rdi, [rdi + 2]
and ax, cx
ror edx, 3
ror edx, 5
xor ax, word [rdi - 2]
mov word [r8 + rdi - 2], ax
mov dword [rsp - 0x14], 0x6def657
sub rbx, 1
jne 0x1400553f0
mov rbx, qword [rsp + 0x30]
xchg rsi, rax
mov rsi, rax
xchg rsi, rax
mov rsi, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x40]
add rsp, 0x20
mov r11, r11
pop r14
ret
Function at 0x140055ba0
Capabilities:
Encode data using xor

Disassembly:
xchg r9, rbx
mov qword [rsp + 0x10], r9
xchg r9, rbx
mov qword [rsp + 0x18], rbp
nop
sub rsp, 8
mov qword [rsp], rsi
push rdi
nop
sub rsp, 8
mov qword [rsp], r14
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
lea rsi, [rdx + 8]
xorps xmm0, xmm0
mov dword [rsp - 0x20], 0x70849229
xchg rsi, r11
mov qword [rdx], r11
xchg r11, rsi
xor edi, edi
mov r8, r8
movups xmmword [rsi], xmm0
mov r14, r9
mov rbp, r8
mov r11, r11
xchg rsi, r8
movups xmmword [r8 + 0x10], xmm0
xchg rsi, r8
xchg rdx, rbx
mov rdx, rbx
xchg rdx, rbx
xchg r12, rsi
movups xmmword [r12 + 0x20], xmm0
xchg rsi, r12
xchg rdi, r11
mov qword [rdx + 0x38], r11
xchg r11, rdi
mov rax, qword [rcx + 0x38]
cmp r8, rax
jae 0x140055dc8
xchg r9, r9
sub rax, r8
mov qword [rsp + 0x40], r15
cmp rax, r9
cmovb r14, rax
mov rsi, rsi
mov qword [rdx + 0x38], r14
mov rax, qword [rcx]
mov rcx, qword [rdx]
mov rsp, rsp
lea r15, [rax + r8*2]
cmp rcx, rsi
je 0x140055c69
mov dword [rsp - 0x30], 0x7280f764
call fcn.1400992c0
cmp r14, 0x18
jbe 0x140055ca5
lea rcx, [r14 + r14]
mov dword [rsp - 0x2c], 0x342724df
call fcn.1400995f0
mov qword [rbx], rax
test rax, rax
mov dword [rsp - 0x3c], ebp
jne 0x140055caf
mov qword [rbx], rsi
xchg r9, rdi
mov rdi, r9
xchg rdi, r9
jmp 0x140055cd7
mov qword [rbx], rsi
xchg rsi, rax
mov rsi, rax
xchg rsi, rax
xorps xmm0, xmm0
mov dword [rsp - 0x2c], ebp
xchg r10, rax
movups xmmword [r10], xmm0
xchg r10, rax
movups xmmword [rax + 0x10], xmm0
mov dword [rsp - 0x28], ebp
xchg rsi, rax
movups xmmword [rsi + 0x20], xmm0
xchg rsi, rax
xchg rdi, r9
mov rdi, qword [rbx]
xchg r9, rdi
and ebp, 3
xchg r9, r9
mov r8d, 0x3575d104
xor r8d, 0x41ae877b
sub r8d, 0x533cf8a6
sub r8d, 0x6bf29ee
shl ebp, 2
shl ebp, 1
mov edx, r8d
movzx ecx, bpl
mov dword [rsp - 0x24], 0x1e31b485
ror edx, cl
cmp qword [rbx + 0x38], rdi
jbe 0x140055d8d
sub r15, r9
mov rsp, rsp
mov ecx, 0xdba7a34
add ecx, 0xeeace15
add ecx, 0x1442b202
xor ecx, 0x30e7fab4
nop dword [rax]
nop word [rax + rax]
mov rcx, rcx
movzx eax, dx
lea r9, [r9 + 2]
xor ax, r8w
mov dword [rsp - 0x20], 0x2c4ea711
ror edx, 2
ror edx, 1
ror edx, 3
ror edx, 1
ror edx, 1
and ax, cx
ror r8d, 6
ror r8d, 2
xor ax, word [r15 + r9 - 2]
inc rdi
xchg rcx, rcx
mov word [r9 - 2], ax
cmp rdi, qword [rbx + 0x38]
jb 0x140055d45
xchg r13, r13
xchg rbx, r15
mov rbx, qword [rsp + 0x40]
xchg r15, rbx
xchg r8, rax
mov r8, rbx
xchg r8, rax
mov rbx, qword [rsp + 0x48]
mov rcx, rcx
mov rbp, qword [rsp + 0x50]
nop
sub rsp, 0x5162c9ab
add rsp, 0x5162c9cb
pop r14
pop rdi
pop rsi
mov dword [rsp - 0x1c], 0x169d2509
ret
xchg rbx, rax
mov rbx, rax
xchg rbx, rax
jmp 0x140055d9f

Function at 0x1400561d0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dfa4
xchg r14, rcx
mov r10, r14
xchg rcx, r14
mov eax, dword [0x140141f30]
cmp qword [0x140142018], 0
mov rcx, rcx
jne 0x14008dd40
syscall
ret
Function at 0x1400561f0
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x28]
mov byte [rsp + 0x28], al
mov dword [rsp - 0x24], esi
jmp 0x14008e5bf
xchg rcx, r8
mov r10, r8
xchg rcx, r8
mov eax, dword [0x140141fc8]
mov dword [rsp - 0x44], ebp
cmp qword [0x140142018], 0
jne 0x14008dd40
syscall
mov rsi, rsi
ret

Function at 0x140056210
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dda8
mov r10, rcx
xchg r12, r12
mov eax, dword [0x140141f00]
cmp qword [0x140142018], 0
jne 0x14008dd40
syscall
mov dword [rsp - 0x18], ecx
ret

Function at 0x140056220
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e332
mov r10, rcx
mov eax, dword [0x140141f88]
cmp qword [0x140142018], 0
mov rdx, rdx
jne 0x14008dd40
syscall
ret

Function at 0x140056230
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e1e5
xchg r13, r10
mov r13, rcx
xchg r13, r10
mov eax, dword [0x140141f68]
cmp qword [0x140142018], 0
mov r8, r8
jne 0x14008dd40
syscall
ret

Function at 0x140056240
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008de00
mov r10, rcx
mov eax, dword [0x140141f08]
cmp qword [0x140142018], 0
xchg rsi, rsi
jne 0x14008dd40
syscall
ret

Function at 0x140056250
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e447
xchg rdx, rcx
mov r10, rdx
xchg rdx, rcx
mov eax, dword [0x140141fa4]
cmp qword [0x140142018], 0
mov dword [rsp - 0x28], esi
jne 0x14008dd40
syscall
ret

Function at 0x140056260
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e471
xchg r13, rcx
mov r10, r13
xchg r13, rcx
mov eax, dword [0x140141fa8]
mov dword [rsp - 0x3c], 0x7ffd532a
cmp qword [0x140142018], 0
jne 0x14008dd40
syscall
ret

Function at 0x140056270
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e3a8
mov r10, rcx
mov eax, dword [0x140141f94]
mov dword [rsp - 0x28], edi
cmp qword [0x140142018], 0
jne 0x14008dd40
syscall
ret

Function at 0x140056280
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e3cc
mov r10, rcx
mov eax, dword [0x140141f98]
mov r15, r15
cmp qword [0x140142018], 0
jne 0x14008dd40
syscall
ret

Function at 0x140056290
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dfcd
xchg r8, r10
mov r8, rcx
xchg r10, r8
mov eax, dword [0x140141f34]
mov r8, r8
cmp qword [0x140142018], 0
jne 0x14008dd40
syscall
mov r12, r12
ret

Function at 0x1400562a0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e284
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140141f78]
cmp qword [0x140142018], 0
mov dword [rsp - 0xc], edi
jne 0x14008dd40
syscall
ret

Function at 0x1400562b0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e2e0
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140141f80]
mov r11, r11
cmp qword [0x140142018], 0
jne 0x14008dd40
syscall
ret

Function at 0x1400562c0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ddd3
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140141f04]
cmp qword [0x140142018], 0
xchg r8, r8
jne 0x14008dd40
syscall
ret

Function at 0x1400562d0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e355
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140141f8c]
mov r12, r12
cmp qword [0x140142018], 0
jne 0x14008dd40
syscall
ret
Function at 0x1400562e0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e19b
mov r10, rcx
xchg r10, r10
mov eax, dword [0x140141f60]
cmp qword [0x140142018], 0
jne 0x14008dd40
syscall
mov dword [rsp - 0x14], ebp
ret

Function at 0x1400562f0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e1c2
mov r10, rcx
mov eax, dword [0x140141f64]
cmp qword [0x140142018], 0
xchg r13, r13
jne 0x14008dd40
syscall
ret

Function at 0x140056300
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e040
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140141f40]
mov dword [rsp - 0x2c], 0x588c6cbd
cmp qword [0x140142018], 0
jne 0x14008dd40
syscall
mov dword [rsp - 0x1c], 0x14080b4b
ret

Function at 0x140056310
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x58]
xchg r8, r8
mov byte [rsp + 0x58], al
movzx eax, byte [rsp + 0x48]
mov byte [rsp + 0x48], al
mov dword [rsp - 0x1c], edx
jmp 0x14008e596
xchg r10, r14
mov r14, rcx
xchg r14, r10
mov eax, dword [0x140141fc4]
cmp qword [0x140142018], 0
xchg r12, r12
jne 0x14008dd40
syscall
ret

Function at 0x140056330
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ded6
mov r10, rcx
mov eax, dword [0x140141f1c]
cmp qword [0x140142018], 0
mov dword [rsp - 0x38], 0x376be440
jne 0x14008dd40
syscall
ret

Function at 0x140056340
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008defe
mov r10, rcx
mov eax, dword [0x140141f20]
mov r9, r9
cmp qword [0x140142018], 0
jne 0x14008dd40
syscall
ret

Function at 0x140056350
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008df21
mov r10, rcx
mov eax, dword [0x140141f24]
cmp qword [0x140142018], 0
mov dword [rsp - 0x2c], 0x7e66d7b
jne 0x14008dd40
syscall
ret

Function at 0x140056360
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008df49
xchg rsp, rcx
mov r10, rsp
xchg rcx, rsp
mov eax, dword [0x140141f28]
cmp qword [0x140142018], 0
mov r13, r13
jne 0x14008dd40
syscall
ret

Function at 0x140056370
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dea5
xchg rcx, r15
mov r10, r15
xchg r15, rcx
mov eax, dword [0x140141f18]
mov rsp, rsp
cmp qword [0x140142018], 0
jne 0x14008dd40
syscall
mov dword [rsp - 0x3c], 0x64d44f66
ret

Function at 0x140056380
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e3ef
xchg rcx, rdi
mov r10, rdi
xchg rdi, rcx
mov eax, dword [0x140141f9c]
xchg r8, r8
cmp qword [0x140142018], 0
jne 0x14008dd40
syscall
mov dword [rsp - 0x44], ebx
ret

Function at 0x140056390
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008df72
xchg r11, r10
mov r11, rcx
xchg r11, r10
mov eax, dword [0x140141f2c]
mov dword [rsp - 0x20], ecx
cmp qword [0x140142018], 0
jne 0x14008dd40
syscall
mov dword [rsp - 0x28], 0x11c28948
ret

Function at 0x1400563a0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008de23
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140141f0c]
xchg r13, r13
cmp qword [0x140142018], 0
jne 0x14008dd40
syscall
mov dword [rsp - 0x20], ecx
ret

Function at 0x1400563b0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dff9
mov r10, rcx
mov eax, dword [0x140141f38]
mov dword [rsp - 0x2c], edx
cmp qword [0x140142018], 0
jne 0x14008dd40
syscall
ret
Function at 0x1400563c0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e237
xchg r10, r13
mov r13, rcx
xchg r10, r13
mov eax, dword [0x140141f70]
cmp qword [0x140142018], 0
mov dword [rsp - 0x14], esi
jne 0x14008dd40
syscall
ret

Function at 0x1400563d0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e2ae
xchg rdx, r10
mov rdx, rcx
xchg rdx, r10
mov eax, dword [0x140141f7c]
mov dword [rsp - 0x28], 0x664264bf
cmp qword [0x140142018], 0
jne 0x14008dd40
syscall
mov dword [rsp - 0x14], esp
ret

Function at 0x1400563f0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008de79
mov r10, rcx
mov eax, dword [0x140141f14]
mov dword [rsp - 0x30], 0x2706e74d
cmp qword [0x140142018], 0
jne 0x14008dd40
syscall
mov dword [rsp - 0x24], edx
ret

Function at 0x140056400
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e568
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140141fc0]
cmp qword [0x140142018], 0
mov dword [rsp - 0x20], 0x40b799c9
jne 0x14008dd40
syscall
ret

Function at 0x140056410
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e41c
mov r10, rcx
mov dword [rsp - 0x10], 0x2e471a9d
mov eax, dword [0x140141fa0]
cmp qword [0x140142018], 0
jne 0x14008dd40
syscall
mov r13, r13
ret

Function at 0x140056420
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e511
xchg rdi, r10
mov rdi, rcx
xchg rdi, r10
mov eax, dword [0x140141fb8]
cmp qword [0x140142018], 0
jne 0x14008dd40
xchg r15, r15
syscall
ret

Function at 0x140056430
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e309
xchg rsp, rcx
mov r10, rsp
xchg rcx, rsp
mov eax, dword [0x140141f84]
mov rsp, rsp
cmp qword [0x140142018], 0
jne 0x14008dd40
syscall
ret

Function at 0x140056440
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e53a
xchg rcx, r15
mov r10, r15
xchg r15, rcx
mov eax, dword [0x140141fbc]
cmp qword [0x140142018], 0
mov dword [rsp - 0x40], 0x247a8ac2
jne 0x14008dd40
syscall
ret

Function at 0x140056450
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008de50
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140141f10]
mov r12, r12
cmp qword [0x140142018], 0
jne 0x14008dd40
syscall
ret

Function at 0x140056460
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e01d
mov r10, rcx
mov eax, dword [0x140141f3c]
cmp qword [0x140142018], 0
mov rcx, rcx
jne 0x14008dd40
syscall
ret
Function at 0x140069744
Capabilities:
Hash data using murmur3

Disassembly:
push r12
mov qword [rsp], rbx
nop
add rsp, 0x594ac29
sub rsp, 0x594ac49
xchg rdx, r12
mov rbx, r12
xchg r12, rdx
mov edx, 0x55a88c6c
sub edx, 0xcb70dee
sub edx, 0x21767d8e
xor edx, 0x645bfa65
add edx, 0x88beeaca
call fcn.140083c50
mov rbp, rbp
xor ecx, ecx
test rax, rax
je 0x140069825
movabs rcx, 0x2f0938c2548fdb8c
xor rcx, 0x72b8f9c6
add rcx, 0x529dc4b9
xor rcx, 0x14dc7bd4
xor rax, rcx
movabs rcx, 0x7b049bd940e7c926
add rcx, 0x130fba3
xor rcx, 0x24845733
xor rcx, 0x120da910
sub rcx, 0x3746aca7
rol rax, 3
rol rax, 0xf
add rax, rcx
movabs rcx, 0x47eb0fc6503d785e
xor rcx, 0x2eecff0e
sub rcx, 0x32f6e0ad
xor rcx, 0x121ca060
xor rax, rcx
mov cl, 0x62
sub cl, 0xd
add cl, 1
sub cl, 0x55
rol rax, 7
rol rax, 0xd
rol rax, 1
xchg rdx, rax
mov qword [rbx + 0x78], rdx
xchg rdx, rax
mov al, cl
nop
sub rsp, 0x61175148
add rsp, 0x61175168
pop rbx
ret