joyce8/EMBER2024-capa huggingface dataset:
Function at 0x18009d540
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x15e
test byte [0x7ffe0308], 1
jne 0x18009d555
syscall
ret
int 0x2e
ret

Function at 0x18009d560
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x15f
test byte [0x7ffe0308], 1
jne 0x18009d575
syscall
ret
int 0x2e
ret

Function at 0x18009d580
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x160
test byte [0x7ffe0308], 1
jne 0x18009d595
syscall
ret
int 0x2e
ret

Function at 0x18009d5a0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x161
test byte [0x7ffe0308], 1
jne 0x18009d5b5
syscall
ret
int 0x2e
ret

Function at 0x18009d5c0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x162
test byte [0x7ffe0308], 1
jne 0x18009d5d5
syscall
ret
int 0x2e
ret

Function at 0x18009d5e0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x163
test byte [0x7ffe0308], 1
jne 0x18009d5f5
syscall
ret
int 0x2e
ret

Function at 0x18009d600
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x164
test byte [0x7ffe0308], 1
jne 0x18009d615
syscall
ret
int 0x2e
ret

Function at 0x18009d620
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x165
test byte [0x7ffe0308], 1
jne 0x18009d635
syscall
ret
int 0x2e
ret

Function at 0x18009d640
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x166
test byte [0x7ffe0308], 1
jne 0x18009d655
syscall
ret
int 0x2e
ret

Function at 0x18009d660
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x167
test byte [0x7ffe0308], 1
jne 0x18009d675
syscall
ret
int 0x2e
ret

Function at 0x18009d680
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x168
test byte [0x7ffe0308], 1
jne 0x18009d695
syscall
ret
int 0x2e
ret

Function at 0x18009d6c0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x16a
test byte [0x7ffe0308], 1
jne 0x18009d6d5
syscall
ret
int 0x2e
ret

Function at 0x18009d6e0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x16b
test byte [0x7ffe0308], 1
jne 0x18009d6f5
syscall
ret
int 0x2e
ret

Function at 0x18009d700
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x16c
test byte [0x7ffe0308], 1
jne 0x18009d715
syscall
ret
int 0x2e
ret

Function at 0x18009d720
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x16d
test byte [0x7ffe0308], 1
jne 0x18009d735
syscall
ret
int 0x2e
ret

Function at 0x18009d740
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x16e
test byte [0x7ffe0308], 1
jne 0x18009d755
syscall
ret
int 0x2e
ret

Function at 0x18009d760
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x16f
test byte [0x7ffe0308], 1
jne 0x18009d775
syscall
ret
int 0x2e
ret

Function at 0x18009d780
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x170
test byte [0x7ffe0308], 1
jne 0x18009d795
syscall
ret
int 0x2e
ret

Function at 0x18009d7a0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x171
test byte [0x7ffe0308], 1
jne 0x18009d7b5
syscall
ret
int 0x2e
ret
Function at 0x18009d7c0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x172
test byte [0x7ffe0308], 1
jne 0x18009d7d5
syscall
ret
int 0x2e
ret

Function at 0x18009d7e0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x173
test byte [0x7ffe0308], 1
jne 0x18009d7f5
syscall
ret
int 0x2e
ret

Function at 0x18009d800
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x174
test byte [0x7ffe0308], 1
jne 0x18009d815
syscall
ret
int 0x2e
ret

Function at 0x18009d820
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x175
test byte [0x7ffe0308], 1
jne 0x18009d835
syscall
ret
int 0x2e
ret

Function at 0x18009d840
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x176
test byte [0x7ffe0308], 1
jne 0x18009d855
syscall
ret
int 0x2e
ret

Function at 0x18009d860
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x177
test byte [0x7ffe0308], 1
jne 0x18009d875
syscall
ret
int 0x2e
ret

Function at 0x18009d880
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x178
test byte [0x7ffe0308], 1
jne 0x18009d895
syscall
ret
int 0x2e
ret

Function at 0x18009d8a0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x179
test byte [0x7ffe0308], 1
jne 0x18009d8b5
syscall
ret
int 0x2e
ret

Function at 0x18009d8c0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x17a
test byte [0x7ffe0308], 1
jne 0x18009d8d5
syscall
ret
int 0x2e
ret

Function at 0x18009d8e0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x17b
test byte [0x7ffe0308], 1
jne 0x18009d8f5
syscall
ret
int 0x2e
ret

Function at 0x18009d900
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x17c
test byte [0x7ffe0308], 1
jne 0x18009d915
syscall
ret
int 0x2e
ret

Function at 0x18009d920
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x17d
test byte [0x7ffe0308], 1
jne 0x18009d935
syscall
ret
int 0x2e
ret

Function at 0x18009d940
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x17e
test byte [0x7ffe0308], 1
jne 0x18009d955
syscall
ret
int 0x2e
ret

Function at 0x18009d960
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x17f
test byte [0x7ffe0308], 1
jne 0x18009d975
syscall
ret
int 0x2e
ret

Function at 0x18009d980
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x180
test byte [0x7ffe0308], 1
jne 0x18009d995
syscall
ret
int 0x2e
ret

Function at 0x18009d9a0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x181
test byte [0x7ffe0308], 1
jne 0x18009d9b5
syscall
ret
int 0x2e
ret

Function at 0x18009d9c0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x182
test byte [0x7ffe0308], 1
jne 0x18009d9d5
syscall
ret
int 0x2e
ret

Function at 0x18009d9e0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x183
test byte [0x7ffe0308], 1
jne 0x18009d9f5
syscall
ret
int 0x2e
ret

Function at 0x18009da20
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x185
test byte [0x7ffe0308], 1
jne 0x18009da35
syscall
ret
int 0x2e
ret
Function at 0x18009da40
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x186
test byte [0x7ffe0308], 1
jne 0x18009da55
syscall
ret
int 0x2e
ret

Function at 0x18009da60
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x187
test byte [0x7ffe0308], 1
jne 0x18009da75
syscall
ret
int 0x2e
ret

Function at 0x18009da80
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x188
test byte [0x7ffe0308], 1
jne 0x18009da95
syscall
ret
int 0x2e
ret

Function at 0x18009daa0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x189
test byte [0x7ffe0308], 1
jne 0x18009dab5
syscall
ret
int 0x2e
ret

Function at 0x18009dac0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x18a
test byte [0x7ffe0308], 1
jne 0x18009dad5
syscall
ret
int 0x2e
ret

Function at 0x18009dae0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x18b
test byte [0x7ffe0308], 1
jne 0x18009daf5
syscall
ret
int 0x2e
ret

Function at 0x18009db00
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x18c
test byte [0x7ffe0308], 1
jne 0x18009db15
syscall
ret
int 0x2e
ret

Function at 0x18009db20
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x18d
test byte [0x7ffe0308], 1
jne 0x18009db35
syscall
ret
int 0x2e
ret

Function at 0x18009db40
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x18e
test byte [0x7ffe0308], 1
jne 0x18009db55
syscall
ret
int 0x2e
ret

Function at 0x18009db60
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x18f
test byte [0x7ffe0308], 1
jne 0x18009db75
syscall
ret
int 0x2e
ret

Function at 0x18009db80
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x190
test byte [0x7ffe0308], 1
jne 0x18009db95
syscall
ret
int 0x2e
ret

Function at 0x18009dba0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x191
test byte [0x7ffe0308], 1
jne 0x18009dbb5
syscall
ret
int 0x2e
ret

Function at 0x18009dbc0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x192
test byte [0x7ffe0308], 1
jne 0x18009dbd5
syscall
ret
int 0x2e
ret

Function at 0x18009dbe0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x193
test byte [0x7ffe0308], 1
jne 0x18009dbf5
syscall
ret
int 0x2e
ret

Function at 0x18009dc00
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x194
test byte [0x7ffe0308], 1
jne 0x18009dc15
syscall
ret
int 0x2e
ret

Function at 0x18009dc20
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x195
test byte [0x7ffe0308], 1
jne 0x18009dc35
syscall
ret
int 0x2e
ret

Function at 0x18009dc40
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x196
test byte [0x7ffe0308], 1
jne 0x18009dc55
syscall
ret
int 0x2e
ret

Function at 0x18009dc60
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x197
test byte [0x7ffe0308], 1
jne 0x18009dc75
syscall
ret
int 0x2e
ret

Function at 0x18009dc80
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x198
test byte [0x7ffe0308], 1
jne 0x18009dc95
syscall
ret
int 0x2e
ret
Function at 0x18009dca0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x199
test byte [0x7ffe0308], 1
jne 0x18009dcb5
syscall
ret
int 0x2e
ret

Function at 0x18009dcc0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x19a
test byte [0x7ffe0308], 1
jne 0x18009dcd5
syscall
ret
int 0x2e
ret

Function at 0x18009dce0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x19b
test byte [0x7ffe0308], 1
jne 0x18009dcf5
syscall
ret
int 0x2e
ret

Function at 0x18009dd00
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x19c
test byte [0x7ffe0308], 1
jne 0x18009dd15
syscall
ret
int 0x2e
ret

Function at 0x18009dd20
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x19d
test byte [0x7ffe0308], 1
jne 0x18009dd35
syscall
ret
int 0x2e
ret

Function at 0x18009dd40
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x19e
test byte [0x7ffe0308], 1
jne 0x18009dd55
syscall
ret
int 0x2e
ret

Function at 0x18009dd60
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x19f
test byte [0x7ffe0308], 1
jne 0x18009dd75
syscall
ret
int 0x2e
ret

Function at 0x18009dd80
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1a0
test byte [0x7ffe0308], 1
jne 0x18009dd95
syscall
ret
int 0x2e
ret

Function at 0x18009dda0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1a1
test byte [0x7ffe0308], 1
jne 0x18009ddb5
syscall
ret
int 0x2e
ret

Function at 0x18009ddc0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1a2
test byte [0x7ffe0308], 1
jne 0x18009ddd5
syscall
ret
int 0x2e
ret

Function at 0x18009dde0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1a3
test byte [0x7ffe0308], 1
jne 0x18009ddf5
syscall
ret
int 0x2e
ret

Function at 0x18009de00
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1a4
test byte [0x7ffe0308], 1
jne 0x18009de15
syscall
ret
int 0x2e
ret

Function at 0x18009de20
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1a5
test byte [0x7ffe0308], 1
jne 0x18009de35
syscall
ret
int 0x2e
ret

Function at 0x18009de40
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1a6
test byte [0x7ffe0308], 1
jne 0x18009de55
syscall
ret
int 0x2e
ret

Function at 0x18009de60
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1a7
test byte [0x7ffe0308], 1
jne 0x18009de75
syscall
ret
int 0x2e
ret

Function at 0x18009de80
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1a8
test byte [0x7ffe0308], 1
jne 0x18009de95
syscall
ret
int 0x2e
ret

Function at 0x18009dea0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1a9
test byte [0x7ffe0308], 1
jne 0x18009deb5
syscall
ret
int 0x2e
ret

Function at 0x18009dec0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1aa
test byte [0x7ffe0308], 1
jne 0x18009ded5
syscall
ret
int 0x2e
ret

Function at 0x18009dee0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1ab
test byte [0x7ffe0308], 1
jne 0x18009def5
syscall
ret
int 0x2e
ret
Function at 0x18009df00
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1ac
test byte [0x7ffe0308], 1
jne 0x18009df15
syscall
ret
int 0x2e
ret

Function at 0x18009df20
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1ad
test byte [0x7ffe0308], 1
jne 0x18009df35
syscall
ret
int 0x2e
ret

Function at 0x18009df40
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1ae
test byte [0x7ffe0308], 1
jne 0x18009df55
syscall
ret
int 0x2e
ret

Function at 0x18009df60
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1af
test byte [0x7ffe0308], 1
jne 0x18009df75
syscall
ret
int 0x2e
ret

Function at 0x18009df80
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1b0
test byte [0x7ffe0308], 1
jne 0x18009df95
syscall
ret
int 0x2e
ret

Function at 0x18009dfa0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1b1
test byte [0x7ffe0308], 1
jne 0x18009dfb5
syscall
ret
int 0x2e
ret

Function at 0x18009dfc0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1b2
test byte [0x7ffe0308], 1
jne 0x18009dfd5
syscall
ret
int 0x2e
ret

Function at 0x18009dfe0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1b3
test byte [0x7ffe0308], 1
jne 0x18009dff5
syscall
ret
int 0x2e
ret

Function at 0x18009e000
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1b4
test byte [0x7ffe0308], 1
jne 0x18009e015
syscall
ret
int 0x2e
ret

Function at 0x18009e020
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1b5
test byte [0x7ffe0308], 1
jne 0x18009e035
syscall
ret
int 0x2e
ret

Function at 0x18009e040
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1b6
test byte [0x7ffe0308], 1
jne 0x18009e055
syscall
ret
int 0x2e
ret

Function at 0x18009e060
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1b7
test byte [0x7ffe0308], 1
jne 0x18009e075
syscall
ret
int 0x2e
ret

Function at 0x18009e080
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1b8
test byte [0x7ffe0308], 1
jne 0x18009e095
syscall
ret
int 0x2e
ret

Function at 0x18009e0a0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1b9
test byte [0x7ffe0308], 1
jne 0x18009e0b5
syscall
ret
int 0x2e
ret

Function at 0x18009e0c0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1ba
test byte [0x7ffe0308], 1
jne 0x18009e0d5
syscall
ret
int 0x2e
ret

Function at 0x18009e0e0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1bb
test byte [0x7ffe0308], 1
jne 0x18009e0f5
syscall
ret
int 0x2e
ret

Function at 0x18009e100
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1bc
test byte [0x7ffe0308], 1
jne 0x18009e115
syscall
ret
int 0x2e
ret

Function at 0x18009e120
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1bd
test byte [0x7ffe0308], 1
jne 0x18009e135
syscall
ret
int 0x2e
ret

Function at 0x18009e140
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1be
test byte [0x7ffe0308], 1
jne 0x18009e155
syscall
ret
int 0x2e
ret
Function at 0x18009e160
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1bf
test byte [0x7ffe0308], 1
jne 0x18009e175
syscall
ret
int 0x2e
ret

Function at 0x18009e180
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1c0
test byte [0x7ffe0308], 1
jne 0x18009e195
syscall
ret
int 0x2e
ret

Function at 0x18009e1a0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1c1
test byte [0x7ffe0308], 1
jne 0x18009e1b5
syscall
ret
int 0x2e
ret

Function at 0x18009e1c0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1c2
test byte [0x7ffe0308], 1
jne 0x18009e1d5
syscall
ret
int 0x2e
ret

Function at 0x18009e1e0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1c3
test byte [0x7ffe0308], 1
jne 0x18009e1f5
syscall
ret
int 0x2e
ret

Function at 0x18009e200
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1c4
test byte [0x7ffe0308], 1
jne 0x18009e215
syscall
ret
int 0x2e
ret

Function at 0x18009e220
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1c5
test byte [0x7ffe0308], 1
jne 0x18009e235
syscall
ret
int 0x2e
ret

Function at 0x18009e240
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1c6
test byte [0x7ffe0308], 1
jne 0x18009e255
syscall
ret
int 0x2e
ret

Function at 0x18009e260
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1c7
test byte [0x7ffe0308], 1
jne 0x18009e275
syscall
ret
int 0x2e
ret

Function at 0x18009e280
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1c8
test byte [0x7ffe0308], 1
jne 0x18009e295
syscall
ret
int 0x2e
ret

Function at 0x18009e2c0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1ca
test byte [0x7ffe0308], 1
jne 0x18009e2d5
syscall
ret
int 0x2e
ret

Function at 0x18009e2e0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1cb
test byte [0x7ffe0308], 1
jne 0x18009e2f5
syscall
ret
int 0x2e
ret

Function at 0x18009e300
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1cc
test byte [0x7ffe0308], 1
jne 0x18009e315
syscall
ret
int 0x2e
ret

Function at 0x18009e320
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1cd
test byte [0x7ffe0308], 1
jne 0x18009e335
syscall
ret
int 0x2e
ret

Function at 0x18009e340
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x1ce
test byte [0x7ffe0308], 1
jne 0x18009e355
syscall
ret
int 0x2e
ret

Function at 0x18009f140
Capabilities:
Execute syscall

Disassembly:
test byte [0x7ffe0294], 0xff
je 0x18009f152
rdtscp
xor eax, eax
mov al, cl
ret
mov eax, 0x53
lsl eax, eax
jne 0x18009f160
shr eax, 0xe
ret
jmp sym.ntdll.dll_NtGetCurrentProcessorNumber

Function at 0x18009f170
Capabilities:
Execute syscall

Disassembly:
test byte [0x7ffe0294], 0xff
je 0x18009f191
mov r8, rcx
rdtscp
xor edx, edx
mov dl, cl
shr ecx, 8
mov word [r8], cx
mov word [r8 + 2], dx
ret
mov eax, 0x53
lsl eax, eax
jne 0x18009f1ae
mov edx, eax
and edx, 0x3ff
mov word [rcx], dx
shr eax, 0xe
mov word [rcx + 2], ax
ret
and dword [rcx], 0
jmp sym.ntdll.dll_NtGetCurrentProcessorNumberEx
Function at 0x18009f5a0
Capabilities:
Access peb ldr_data

Disassembly:
sub rsp, 0x138
lea rax, [rsp + 0x100]
movaps xmmword [rsp + 0x30], xmm6
movaps xmmword [rsp + 0x40], xmm7
movaps xmmword [rsp + 0x50], xmm8
movaps xmmword [rsp + 0x60], xmm9
movaps xmmword [rsp + 0x70], xmm10
movaps xmmword [rax - 0x80], xmm11
movaps xmmword [rax - 0x70], xmm12
movaps xmmword [rax - 0x60], xmm13
movaps xmmword [rax - 0x50], xmm14
movaps xmmword [rax - 0x40], xmm15
mov qword [rax - 8], rbp
mov rbp, rsp
mov qword [rax], rbx
mov qword [rax + 8], rdi
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], r12
mov qword [rax + 0x20], r13
mov qword [rax + 0x28], r14
mov qword [rax + 0x30], r15
mov r10, qword gs:[0x14a0]
lea r10, [r10 + 0x10]
lea r11, [0x18009f643]
mov qword [r10 + 0xd0], rcx
mov qword [r10 + 0xa0], rbp
mov qword [r10 + 0x98], rsp
mov qword [r10 + 0xf8], r11
mov r12, 0
xor r13, r13
mov r14, rdx
mov rbx, qword gs:[0x14a0]
lea rbx, [rbx + 0x10]
mov rbx, qword [rbx + 0xd0]
mov rcx, rbx
call qword [sym.ntdll.dll_LdrStandardizeSystemPath]
mov rcx, r12
mov rdx, r13
mov r8, r14
call rbx
lea rcx, [rsp + 0x100]
movaps xmm6, xmmword [rsp + 0x30]
movaps xmm7, xmmword [rsp + 0x40]
movaps xmm8, xmmword [rsp + 0x50]
movaps xmm9, xmmword [rsp + 0x60]
movaps xmm10, xmmword [rsp + 0x70]
movaps xmm11, xmmword [rcx - 0x80]
movaps xmm12, xmmword [rcx - 0x70]
movaps xmm13, xmmword [rcx - 0x60]
movaps xmm14, xmmword [rcx - 0x50]
movaps xmm15, xmmword [rcx - 0x40]
mov rbx, qword [rcx]
mov rdi, qword [rcx + 8]
mov rsi, qword [rcx + 0x10]
mov r12, qword [rcx + 0x18]
mov r13, qword [rcx + 0x20]
mov r14, qword [rcx + 0x28]
mov r15, qword [rcx + 0x30]
mov rbp, qword [rcx - 8]
add rsp, 0x138
ret
Function at 0x1800c7f94
Capabilities:
Access peb ldr_data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x240
mov rax, qword [0x1801724e0]
xor rax, rsp
mov qword [rsp + 0x230], rax
mov rbp, qword gs:[0x60]
call sym.ntdll.dll_RtlGetNtSystemRoot
or rdi, 0xffffffffffffffff
mov rsi, rdi
xor r12d, r12d
inc rsi
cmp word [rax + rsi*2], r12w
jne 0x1800c7fdd
mov ebx, dword [rbp + 0x2c0]
add rsi, rsi
lea r15, [rsi + 0x12]
call sym.ntdll.dll_RtlGetCurrentServiceSessionId
lea rcx, [rsp + 0x30]
mov edx, 0x100
cmp ebx, eax
jne 0x1800c8015
lea r8, str.BaseNamedObjects
call sym.ntdll.dll_wcscpy_s
jmp 0x1800c802c
lea r9, str.Sessions
mov dword [rsp + 0x20], ebx
lea r8, str._ws_ldBaseNamedObjects
call sym.ntdll.dll_swprintf_s
lea rax, [rsp + 0x30]
mov r14, rdi
inc r14
cmp word [rax + r14*2], r12w
jne 0x1800c8034
mov rcx, qword [0x18015cb00]
lea r8, [r15 + 0xb7e]
add r14, r14
mov edx, 8
add r8, r14
add r8, rsi
call sym.ntdll.dll_RtlAllocateHeap
mov rdi, rax
test rax, rax
jne 0x1800c8071
mov ebx, 0xc0000017
jmp 0x1800c816c
lea r13, [rax + 0xb68]
mov qword [r13 + 8], rdi
lea rbx, [r13 + 0x10]
mov qword [rax + 8], rbx
mov word [rax], si
lea eax, [rsi + 2]
mov word [rdi + 2], ax
call sym.ntdll.dll_RtlGetNtSystemRoot
mov rdx, rax
mov r8, rsi
mov rcx, rbx
call sym.ntdll.dll_RtlCopyMemory
lea eax, [r15 + 2]
mov word [rdi + 0x10], r15w
add rbx, 2
mov word [rdi + 0x12], ax
add rbx, rsi
mov qword [rdi + 0x18], rbx
call sym.ntdll.dll_RtlGetNtSystemRoot
mov rdx, rax
mov r8, rsi
mov rcx, rbx
call sym.ntdll.dll_RtlCopyMemory
movups xmm0, xmmword [0x180124060]
lea rcx, [rbx + 2]
mov r8, r14
add rcx, r15
lea rdx, [rsp + 0x30]
movups xmmword [rbx + rsi], xmm0
mov eax, dword [0x180124070]
mov dword [rbx + rsi + 0x10], eax
lea eax, [r14 + 2]
mov word [rdi + 0x22], ax
mov qword [rdi + 0x28], rcx
mov word [rdi + 0x20], r14w
call sym.ntdll.dll_RtlCopyMemory
movups xmm0, xmmword [rdi + 0x20]
or dword [rdi + 0xb30], 0xffffffff
lea rdx, [rdi + 0x140]
xor r9d, r9d
mov qword [rdi + 0xb50], rdi
movdqu xmmword [rdi + 0xb40], xmm0
lea ecx, [r9 + 3]
lea r8d, [r9 + 0x30]
call sym.ntdll.dll_NtQuerySystemInformation
mov ebx, eax
test eax, eax
js 0x1800c815b
and rdi, 0xffffffffffff0000
mov qword [rbp + 0x98], r13
mov qword [rbp + 0x380], rdi
mov qword [rbp + 0x88], rdi
jmp 0x1800c816c
mov rcx, qword [0x18015cb00]
mov r8, rdi
xor edx, edx
call sym.ntdll.dll_RtlFreeHeap
mov eax, ebx
mov rcx, qword [rsp + 0x230]
xor rcx, rsp
call fcn.18008b0e0
lea r11, [rsp + 0x240]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret

Function at 0x1800c90e0
Capabilities:
Execute syscall

Disassembly:
mov rax, rcx
mov r8d, edx
mov rcx, qword gs:[0x30]
mov rdx, rax
mov rcx, qword [rcx + 0x16a8]
jmp sym.ntdll.dll_NtDebugContinue