joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140153240
Capabilities:
Get geographical location

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x40
mov rbx, rdx
lea r8, [rsp + 0x60]
mov edi, ecx
mov edx, 0x20000001
lea rcx, str._x_sys_default_locale
mov r9d, 2
call qword [sym.imp.KERNEL32.dll_GetLocaleInfoEx]
test eax, eax
jne 0x14015327a
xor r9d, r9d
mov dword [rsp + 0x60], r9d
jmp 0x14015327f
mov r9d, dword [rsp + 0x60]
and qword [rsp + 0x30], 0
mov r8d, edi
and dword [rsp + 0x28], 0
xor edx, edx
mov ecx, 0x1300
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_FormatMessageA]
mov edx, eax
test eax, eax
je 0x1401532c8
mov r8, qword [rbx]
dec r8
add r8, rdx
movzx ecx, byte [r8]
lea rax, reloc.WS2_32.dll_accept
cmp byte [rcx + rax], 0
je 0x1401532c8
dec r8
sub rdx, 1
jne 0x1401532ae
mov rbx, qword [rsp + 0x50]
mov rax, rdx
add rsp, 0x40
pop rdi
ret

Function at 0x140153ac8
Capabilities:
Check if file exists
Get file attributes

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov rdi, rcx
mov rdx, rcx
mov ecx, 0x105
call fcn.140153358
mov ebx, eax
test eax, eax
jne 0x140153af8
and dword [rsp + 0x38], eax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x3c], eax
jmp 0x140153b5b
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x140153b52
test al, 0x10
je 0x140153b52
bt eax, 0xa
jae 0x140153b4b
mov r9d, 0x2000000
lea rcx, [rsp + 0x38]
mov r8d, 0x80
mov rdx, rdi
call fcn.140153b6c
mov rcx, qword [rsp + 0x38]
mov edi, eax
cmp rcx, 0xffffffffffffffff
je 0x140153b47
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x140153b47
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
test edi, edi
jne 0x140153b52
and dword [rsp + 0x3c], 0
jmp 0x140153b57
or dword [rsp + 0x3c], 0xffffffff
mov dword [rsp + 0x38], ebx
mov rax, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
Function at 0x180014540
Capabilities:
Hash data with md5

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov rax, qword [0x1800a3d18]
xor rax, rsp
mov qword [rsp + 0x38], rax
mov r14, qword [rsp + 0x98]
lea eax, [r8 - 0xa]
mov rsi, qword [rsp + 0xa0]
mov rbp, rcx
mov dword [rsp], eax
mov r15, r9
mov ecx, dword [rsp]
mov r10, rdx
mov qword [rsp + 8], rdx
cmp r8d, eax
jbe case.0x1800145d8.8
movsxd rbx, dword [rsp]
lea r13d, [r8 - 0xca]
mov r12d, dword [rsp]
lea r8, [0x180000000]
mov r11d, dword [rsp]
mov rdi, rbx
mov edx, eax
nop dword [rax + rax]
cmp r13d, 0xd
ja case.default.0x1800145d8
mov edx, dword [r8 + r13*4 + 0x147b4]
add rdx, r8
movsxd r9, r11d
jmp rdx
mov dword [r14], 0x67452301
mov dword [r14 + 4], 0xefcdab89
jmp case.0x1800145d8.4
xor r12d, r12d
jmp case.0x1800145d8.4
mov dword [r14 + 0x10], 0
jmp case.0x1800145d8.4
cmp qword [rsi], 0
jge 0x180014640
mov edx, 0xc5
nop
cmp edx, 0xc5
je 0x18001462b
cmp edx, 0x6ed0
jne 0x18001462e
mov rax, qword [rsi]
neg rax
mov qword [rsi], rax
jmp 0x18001462e
inc r12d
add edx, 0x6e0b
cmp edx, 0xdc16
jbe 0x180014610
nop dword [rax]
mov r10d, 0xa
mov eax, r10d
sub eax, 9
je 0x180014681
cmp eax, 1
jne 0x180014690
mov rax, qword [rsi]
inc r11d
movsxd r8, dword [rbp]
cqo
idiv r8
cmp edx, 0xa
jge 0x180014674
add dl, 0x30
mov byte [rsp + r9 + 0x10], dl
inc r9
jmp 0x180014690
add dl, 0x57
mov byte [rsp + r9 + 0x10], dl
inc r9
jmp 0x180014690
mov rax, qword [rsi]
movsxd r8, dword [rbp]
cqo
idiv r8
mov qword [rsi], rax
dec r10d
cmp r10d, 8
ja 0x180014646
cmp qword [rsi], 0
jg 0x180014640
mov r10, qword [rsp + 8]
lea r8, [0x180000000]
jmp case.0x1800145d8.4
mov dword [r14 + 0x14], 0
jmp case.0x1800145d8.4
mov dword [r14 + 8], 0x98badcfe
mov dword [r14 + 0xc], 0x10325476
jmp case.0x1800145d8.4
xor ebx, ebx
xor edi, edi
xor r11d, r11d
jmp case.0x1800145d8.4
sub r11d, 1
movsxd rdx, r11d
js 0x18001472c
mov eax, 0xffffffff
sub eax, edx
add r11d, eax
mov ecx, 0x74
cmp ecx, 0x74
je 0x18001470a
cmp ecx, 0x3a74
jne 0x180014718
inc ebx
inc rdi
jmp 0x180014718
cmp ebx, dword [r15]
jge 0x180014718
movzx eax, byte [rsp + rdx + 0x10]
mov byte [rdi + r14], al
add ecx, 0x3a00
cmp ecx, 0x7400
jbe 0x1800146f6
sub rdx, 1
jns 0x1800146f1
mov ecx, ebx
jmp case.0x1800145d8.4
cmp dword [r10], 0
je 0x18001475d
mov rax, qword [rsp + 0x90]
movsxd rax, dword [rax]
cmp r9, rax
jge 0x18001475d
cmp r9, 0x27
jge 0x18001475d
mov byte [rsp + r9 + 0x10], 0x30
inc r11d
inc r9
cmp r9, rax
jl 0x180014746
test r12d, r12d
je case.0x1800145d8.4
movsxd rax, r11d
inc r11d
mov byte [rsp + rax + 0x10], 0x2d
mov edx, dword [rsp]
dec r13d
lea eax, [r13 + 0xca]
cmp eax, edx
ja 0x1800145c0
mov eax, ecx
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.18008f350
mov rbx, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x80]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
Function at 0x180030880
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x3b0]
sub rsp, 0x4b0
mov rax, qword [0x1800a3d18]
xor rax, rsp
mov qword [rbp + 0x3a0], rax
imul r14d, r8d, 0xb4
mov esi, r8d
mov rdi, rdx
mov r15, rcx
mov ebx, r8d
cmp r8d, r14d
ja 0x180030ac9
mov qword [rsp + 0x4f0], r12
lea r12, [0x1800a4170]
cmp ebx, 0x17
je 0x180030967
cmp ebx, 0x30
je 0x180030932
cmp ebx, 0x422
je 0x1800308fe
cmp ebx, 0x8a0
je 0x180030a97
jmp 0x180030a89
mov eax, 0xfb
cmp eax, 0xfb
je 0x180030917
cmp eax, 0xa1c7
je 0x180030a97
jmp 0x180030926
movzx ecx, byte [rdi]
and ecx, 0x7f
movzx ecx, byte [rcx + r12]
mov byte [rsp + 0x20], cl
add eax, 0xa0cc
cmp eax, 0x14198
jbe 0x180030903
mov r9, rdi
mov qword [rsp + 0x20], 0x1f4
lea r8, [rbp - 0x50]
mov edx, 0xe0
lea rcx, [rsp + 0x20]
call fcn.180005b40
mov rdx, r15
lea rcx, [rbp - 0x50]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wstat64]
mov dword [rsp + 0x20], eax
jmp 0x180030a89
mov qword [rsp + 0x30], 0xffffffffffffffff
mov qword [rsp + 0x38], 0xffffffffffffffff
movaps xmm0, xmmword [rsp + 0x30]
movaps xmmword [0x1800a4170], xmm0
mov qword [rsp + 0x40], 0xffffffffffffffff
mov qword [rsp + 0x48], 0xffffffffffffffff
movaps xmm1, xmmword [rsp + 0x40]
movaps xmmword [0x1800a4180], xmm1
mov qword [rsp + 0x50], 0xffffffffffffffff
mov dword [rsp + 0x58], 0x3effffff
mov dword [rsp + 0x5c], 0x3fffffff
movaps xmm0, xmmword [rsp + 0x50]
movaps xmmword [0x1800a4190], xmm0
mov dword [rsp + 0x60], 0x37363534
mov dword [rsp + 0x64], 0x3b3a3938
mov dword [rsp + 0x68], 0xffff3d3c
mov dword [rsp + 0x6c], 0xffffc8ff
movaps xmm1, xmmword [rsp + 0x60]
movaps xmmword [0x1800a41a0], xmm1
mov dword [rsp + 0x70], 0x20100ff
mov dword [rsp + 0x74], 0x6050403
mov dword [rsp + 0x78], 0xa090807
mov dword [rsp + 0x7c], 0xe0d0c0b
movaps xmm0, xmmword [rsp + 0x70]
mov dword [rbp - 0x80], 0x1211100f
mov dword [rbp - 0x7c], 0x16151413
mov qword [rbp - 0x78], 0xffffffffff191817
movaps xmm1, xmmword [rbp - 0x80]
movaps xmmword [0x1800a41b0], xmm0
movaps xmmword [0x1800a41c0], xmm1
mov dword [rbp - 0x70], 0x1c1b1aff
mov dword [rbp - 0x6c], 0x201f1e1d
mov dword [rbp - 0x68], 0x24232221
mov dword [rbp - 0x64], 0x28272625
movaps xmm0, xmmword [rbp - 0x70]
mov dword [rbp - 0x60], 0x2c2b2a29
mov dword [rbp - 0x5c], 0x302f2e2d
mov qword [rbp - 0x58], 0xffffffffff333231
movaps xmm1, xmmword [rbp - 0x60]
movaps xmmword [0x1800a41d0], xmm0
movaps xmmword [0x1800a41e0], xmm1
imul eax, esi, 0x2d
add ebx, eax
cmp ebx, r14d
jbe 0x1800308d7
mov eax, dword [rsp + 0x20]
mov r12, qword [rsp + 0x4f0]
mov rcx, qword [rbp + 0x3a0]
xor rcx, rsp
call fcn.18008f350
mov rbx, qword [rsp + 0x4f8]
add rsp, 0x4b0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
mov eax, dword [rsp + 0x20]
jmp 0x180030aa3
Function at 0x17000cfc0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0
test byte [0x7ffe0308], 1
jne 0x17000cfd5
syscall
ret
jmp 0x17000cfd8
call qword [0x7ffe1000]
ret

Function at 0x17000cfe0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 1
test byte [0x7ffe0308], 1
jne 0x17000cff5
syscall
ret
jmp 0x17000cff8
call qword [0x7ffe1000]
ret

Function at 0x17000d000
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 2
test byte [0x7ffe0308], 1
jne 0x17000d015
syscall
ret
jmp 0x17000d018
call qword [0x7ffe1000]
ret

Function at 0x17000d020
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 3
test byte [0x7ffe0308], 1
jne 0x17000d035
syscall
ret
jmp 0x17000d038
call qword [0x7ffe1000]
ret

Function at 0x17000d040
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 4
test byte [0x7ffe0308], 1
jne 0x17000d055
syscall
ret
jmp 0x17000d058
call qword [0x7ffe1000]
ret

Function at 0x17000d060
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 5
test byte [0x7ffe0308], 1
jne 0x17000d075
syscall
ret
jmp 0x17000d078
call qword [0x7ffe1000]
ret

Function at 0x17000d080
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 6
test byte [0x7ffe0308], 1
jne 0x17000d095
syscall
ret
jmp 0x17000d098
call qword [0x7ffe1000]
ret

Function at 0x17000d0a0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 7
test byte [0x7ffe0308], 1
jne 0x17000d0b5
syscall
ret
jmp 0x17000d0b8
call qword [0x7ffe1000]
ret

Function at 0x17000d0c0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 8
test byte [0x7ffe0308], 1
jne 0x17000d0d5
syscall
ret
jmp 0x17000d0d8
call qword [0x7ffe1000]
ret

Function at 0x17000d0e0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 9
test byte [0x7ffe0308], 1
jne 0x17000d0f5
syscall
ret
jmp 0x17000d0f8
call qword [0x7ffe1000]
ret

Function at 0x17000d100
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0xa
test byte [0x7ffe0308], 1
jne 0x17000d115
syscall
ret
jmp 0x17000d118
call qword [0x7ffe1000]
ret

Function at 0x17000d120
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0xb
test byte [0x7ffe0308], 1
jne 0x17000d135
syscall
ret
jmp 0x17000d138
call qword [0x7ffe1000]
ret

Function at 0x17000d140
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0xc
test byte [0x7ffe0308], 1
jne 0x17000d155
syscall
ret
jmp 0x17000d158
call qword [0x7ffe1000]
ret

Function at 0x17000d160
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0xd
test byte [0x7ffe0308], 1
jne 0x17000d175
syscall
ret
jmp 0x17000d178
call qword [0x7ffe1000]
ret

Function at 0x17000d180
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0xe
test byte [0x7ffe0308], 1
jne 0x17000d195
syscall
ret
jmp 0x17000d198
call qword [0x7ffe1000]
ret

Function at 0x17000d1a0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0xf
test byte [0x7ffe0308], 1
jne 0x17000d1b5
syscall
ret
jmp 0x17000d1b8
call qword [0x7ffe1000]
ret
Function at 0x17000d1c0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x10
test byte [0x7ffe0308], 1
jne 0x17000d1d5
syscall
ret
jmp 0x17000d1d8
call qword [0x7ffe1000]
ret

Function at 0x17000d1e0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x11
test byte [0x7ffe0308], 1
jne 0x17000d1f5
syscall
ret
jmp 0x17000d1f8
call qword [0x7ffe1000]
ret

Function at 0x17000d200
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x12
test byte [0x7ffe0308], 1
jne 0x17000d215
syscall
ret
jmp 0x17000d218
call qword [0x7ffe1000]
ret

Function at 0x17000d220
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x13
test byte [0x7ffe0308], 1
jne 0x17000d235
syscall
ret
jmp 0x17000d238
call qword [0x7ffe1000]
ret

Function at 0x17000d240
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x14
test byte [0x7ffe0308], 1
jne 0x17000d255
syscall
ret
jmp 0x17000d258
call qword [0x7ffe1000]
ret

Function at 0x17000d260
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x15
test byte [0x7ffe0308], 1
jne 0x17000d275
syscall
ret
jmp 0x17000d278
call qword [0x7ffe1000]
ret

Function at 0x17000d280
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x16
test byte [0x7ffe0308], 1
jne 0x17000d295
syscall
ret
jmp 0x17000d298
call qword [0x7ffe1000]
ret

Function at 0x17000d2a0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x17
test byte [0x7ffe0308], 1
jne 0x17000d2b5
syscall
ret
jmp 0x17000d2b8
call qword [0x7ffe1000]
ret

Function at 0x17000d2c0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x18
test byte [0x7ffe0308], 1
jne 0x17000d2d5
syscall
ret
jmp 0x17000d2d8
call qword [0x7ffe1000]
ret

Function at 0x17000d2e0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x19
test byte [0x7ffe0308], 1
jne 0x17000d2f5
syscall
ret
jmp 0x17000d2f8
call qword [0x7ffe1000]
ret

Function at 0x17000d300
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1a
test byte [0x7ffe0308], 1
jne 0x17000d315
syscall
ret
jmp 0x17000d318
call qword [0x7ffe1000]
ret

Function at 0x17000d320
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1b
test byte [0x7ffe0308], 1
jne 0x17000d335
syscall
ret
jmp 0x17000d338
call qword [0x7ffe1000]
ret

Function at 0x17000d340
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1c
test byte [0x7ffe0308], 1
jne 0x17000d355
syscall
ret
jmp 0x17000d358
call qword [0x7ffe1000]
ret

Function at 0x17000d360
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1d
test byte [0x7ffe0308], 1
jne 0x17000d375
syscall
ret
jmp 0x17000d378
call qword [0x7ffe1000]
ret

Function at 0x17000d380
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1e
test byte [0x7ffe0308], 1
jne 0x17000d395
syscall
ret
jmp 0x17000d398
call qword [0x7ffe1000]
ret

Function at 0x17000d3a0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1f
test byte [0x7ffe0308], 1
jne 0x17000d3b5
syscall
ret
jmp 0x17000d3b8
call qword [0x7ffe1000]
ret
Function at 0x17000d3c0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x20
test byte [0x7ffe0308], 1
jne 0x17000d3d5
syscall
ret
jmp 0x17000d3d8
call qword [0x7ffe1000]
ret

Function at 0x17000d3e0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x21
test byte [0x7ffe0308], 1
jne 0x17000d3f5
syscall
ret
jmp 0x17000d3f8
call qword [0x7ffe1000]
ret

Function at 0x17000d400
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x22
test byte [0x7ffe0308], 1
jne 0x17000d415
syscall
ret
jmp 0x17000d418
call qword [0x7ffe1000]
ret

Function at 0x17000d420
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x23
test byte [0x7ffe0308], 1
jne 0x17000d435
syscall
ret
jmp 0x17000d438
call qword [0x7ffe1000]
ret

Function at 0x17000d440
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x24
test byte [0x7ffe0308], 1
jne 0x17000d455
syscall
ret
jmp 0x17000d458
call qword [0x7ffe1000]
ret

Function at 0x17000d460
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x25
test byte [0x7ffe0308], 1
jne 0x17000d475
syscall
ret
jmp 0x17000d478
call qword [0x7ffe1000]
ret

Function at 0x17000d480
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x26
test byte [0x7ffe0308], 1
jne 0x17000d495
syscall
ret
jmp 0x17000d498
call qword [0x7ffe1000]
ret

Function at 0x17000d4a0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x27
test byte [0x7ffe0308], 1
jne 0x17000d4b5
syscall
ret
jmp 0x17000d4b8
call qword [0x7ffe1000]
ret

Function at 0x17000d4c0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x28
test byte [0x7ffe0308], 1
jne 0x17000d4d5
syscall
ret
jmp 0x17000d4d8
call qword [0x7ffe1000]
ret

Function at 0x17000d4e0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x29
test byte [0x7ffe0308], 1
jne 0x17000d4f5
syscall
ret
jmp 0x17000d4f8
call qword [0x7ffe1000]
ret

Function at 0x17000d500
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x2a
test byte [0x7ffe0308], 1
jne 0x17000d515
syscall
ret
jmp 0x17000d518
call qword [0x7ffe1000]
ret

Function at 0x17000d520
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x2b
test byte [0x7ffe0308], 1
jne 0x17000d535
syscall
ret
jmp 0x17000d538
call qword [0x7ffe1000]
ret

Function at 0x17000d540
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x2c
test byte [0x7ffe0308], 1
jne 0x17000d555
syscall
ret
jmp 0x17000d558
call qword [0x7ffe1000]
ret

Function at 0x17000d560
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x2d
test byte [0x7ffe0308], 1
jne 0x17000d575
syscall
ret
jmp 0x17000d578
call qword [0x7ffe1000]
ret

Function at 0x17000d580
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x2e
test byte [0x7ffe0308], 1
jne 0x17000d595
syscall
ret
jmp 0x17000d598
call qword [0x7ffe1000]
ret

Function at 0x17000d5a0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x2f
test byte [0x7ffe0308], 1
jne 0x17000d5b5
syscall
ret
jmp 0x17000d5b8
call qword [0x7ffe1000]
ret
Function at 0x17000d5c0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x30
test byte [0x7ffe0308], 1
jne 0x17000d5d5
syscall
ret
jmp 0x17000d5d8
call qword [0x7ffe1000]
ret

Function at 0x17000d5e0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x31
test byte [0x7ffe0308], 1
jne 0x17000d5f5
syscall
ret
jmp 0x17000d5f8
call qword [0x7ffe1000]
ret

Function at 0x17000d600
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x32
test byte [0x7ffe0308], 1
jne 0x17000d615
syscall
ret
jmp 0x17000d618
call qword [0x7ffe1000]
ret

Function at 0x17000d620
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x33
test byte [0x7ffe0308], 1
jne 0x17000d635
syscall
ret
jmp 0x17000d638
call qword [0x7ffe1000]
ret

Function at 0x17000d640
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x34
test byte [0x7ffe0308], 1
jne 0x17000d655
syscall
ret
jmp 0x17000d658
call qword [0x7ffe1000]
ret

Function at 0x17000d660
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x35
test byte [0x7ffe0308], 1
jne 0x17000d675
syscall
ret
jmp 0x17000d678
call qword [0x7ffe1000]
ret

Function at 0x17000d680
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x36
test byte [0x7ffe0308], 1
jne 0x17000d695
syscall
ret
jmp 0x17000d698
call qword [0x7ffe1000]
ret

Function at 0x17000d6a0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x37
test byte [0x7ffe0308], 1
jne 0x17000d6b5
syscall
ret
jmp 0x17000d6b8
call qword [0x7ffe1000]
ret

Function at 0x17000d6c0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x38
test byte [0x7ffe0308], 1
jne 0x17000d6d5
syscall
ret
jmp 0x17000d6d8
call qword [0x7ffe1000]
ret

Function at 0x17000d6e0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x39
test byte [0x7ffe0308], 1
jne 0x17000d6f5
syscall
ret
jmp 0x17000d6f8
call qword [0x7ffe1000]
ret

Function at 0x17000d700
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x3a
test byte [0x7ffe0308], 1
jne 0x17000d715
syscall
ret
jmp 0x17000d718
call qword [0x7ffe1000]
ret

Function at 0x17000d720
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x3b
test byte [0x7ffe0308], 1
jne 0x17000d735
syscall
ret
jmp 0x17000d738
call qword [0x7ffe1000]
ret

Function at 0x17000d740
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x3c
test byte [0x7ffe0308], 1
jne 0x17000d755
syscall
ret
jmp 0x17000d758
call qword [0x7ffe1000]
ret

Function at 0x17000d760
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x3d
test byte [0x7ffe0308], 1
jne 0x17000d775
syscall
ret
jmp 0x17000d778
call qword [0x7ffe1000]
ret

Function at 0x17000d780
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x3e
test byte [0x7ffe0308], 1
jne 0x17000d795
syscall
ret
jmp 0x17000d798
call qword [0x7ffe1000]
ret

Function at 0x17000d7a0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x3f
test byte [0x7ffe0308], 1
jne 0x17000d7b5
syscall
ret
jmp 0x17000d7b8
call qword [0x7ffe1000]
ret
Function at 0x17000d7c0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x40
test byte [0x7ffe0308], 1
jne 0x17000d7d5
syscall
ret
jmp 0x17000d7d8
call qword [0x7ffe1000]
ret

Function at 0x17000d7e0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x41
test byte [0x7ffe0308], 1
jne 0x17000d7f5
syscall
ret
jmp 0x17000d7f8
call qword [0x7ffe1000]
ret

Function at 0x17000d800
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x42
test byte [0x7ffe0308], 1
jne 0x17000d815
syscall
ret
jmp 0x17000d818
call qword [0x7ffe1000]
ret

Function at 0x17000d820
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x43
test byte [0x7ffe0308], 1
jne 0x17000d835
syscall
ret
jmp 0x17000d838
call qword [0x7ffe1000]
ret

Function at 0x17000d840
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x44
test byte [0x7ffe0308], 1
jne 0x17000d855
syscall
ret
jmp 0x17000d858
call qword [0x7ffe1000]
ret

Function at 0x17000d860
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x45
test byte [0x7ffe0308], 1
jne 0x17000d875
syscall
ret
jmp 0x17000d878
call qword [0x7ffe1000]
ret

Function at 0x17000d880
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x46
test byte [0x7ffe0308], 1
jne 0x17000d895
syscall
ret
jmp 0x17000d898
call qword [0x7ffe1000]
ret

Function at 0x17000d8a0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x47
test byte [0x7ffe0308], 1
jne 0x17000d8b5
syscall
ret
jmp 0x17000d8b8
call qword [0x7ffe1000]
ret

Function at 0x17000d8c0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x48
test byte [0x7ffe0308], 1
jne 0x17000d8d5
syscall
ret
jmp 0x17000d8d8
call qword [0x7ffe1000]
ret

Function at 0x17000d8e0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x49
test byte [0x7ffe0308], 1
jne 0x17000d8f5
syscall
ret
jmp 0x17000d8f8
call qword [0x7ffe1000]
ret

Function at 0x17000d900
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x4a
test byte [0x7ffe0308], 1
jne 0x17000d915
syscall
ret
jmp 0x17000d918
call qword [0x7ffe1000]
ret

Function at 0x17000d920
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x4b
test byte [0x7ffe0308], 1
jne 0x17000d935
syscall
ret
jmp 0x17000d938
call qword [0x7ffe1000]
ret

Function at 0x17000d940
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x4c
test byte [0x7ffe0308], 1
jne 0x17000d955
syscall
ret
jmp 0x17000d958
call qword [0x7ffe1000]
ret

Function at 0x17000d960
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x4d
test byte [0x7ffe0308], 1
jne 0x17000d975
syscall
ret
jmp 0x17000d978
call qword [0x7ffe1000]
ret

Function at 0x17000d980
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x4e
test byte [0x7ffe0308], 1
jne 0x17000d995
syscall
ret
jmp 0x17000d998
call qword [0x7ffe1000]
ret

Function at 0x17000d9a0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x4f
test byte [0x7ffe0308], 1
jne 0x17000d9b5
syscall
ret
jmp 0x17000d9b8
call qword [0x7ffe1000]
ret