joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14006ce64
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov dword [rsp - 0x20], 0x6124ebe5
xchg r8, rdi
mov qword [rsp + 0x20], r8
xchg rdi, r8
nop
sub rsp, 8
mov qword [rsp], rbp
xchg rbp, r14
mov r14, rsp
xchg r14, rbp
sub rsp, 0x60
mov dword [rsp - 0x28], 0x23c0689f
movabs rbx, 0x338a17a7422ce15d
sub rbx, 0x3e98f9d8
add rbx, 0x954769d
xor rbx, 0x27061f33
xchg r9, rcx
mov rdi, r9
xchg rcx, r9
cmp qword [rcx + 0x30], rbx
xchg rcx, rcx
jne 0x14006d07c
xor esi, esi
mov dword [rbp - 0x40], 0x3f21f8f3
add dword [rbp - 0x40], 0x3facea7d
xor dword [rbp - 0x40], 0x46f90c1b
xor dword [rbp - 0x40], 0x382eef30
mov dword [rbp - 0x3c], 0x7473e890
sub dword [rbp - 0x3c], 0x3b75742e
sub dword [rbp - 0x3c], 0x3783f842
sub dword [rbp - 0x3c], 0x1187b4f
mov dword [rbp - 0x38], 0x19b5a421
add dword [rbp - 0x38], 0x23924c76
sub dword [rbp - 0x38], 0x3148d4cc
add dword [rbp - 0x38], 0x71132177
sub dword [rbp - 0x38], 0x7cfe3cd8
mov dword [rbp - 0x34], 0x61353ec0
xor dword [rbp - 0x34], 0x430ad35c
add dword [rbp - 0x34], 0x11a456b
sub dword [rbp - 0x34], 0x23293273
mov dword [rbp - 0x30], 0x7331869b
sub dword [rbp - 0x30], 0x25689493
add dword [rbp - 0x30], 0x1163fb61
add dword [rbp - 0x30], 0x1a2b5757
sub dword [rbp - 0x30], 0x793f448c
mov dword [rbp - 0x2c], 0x7caa8082
sub dword [rbp - 0x2c], 0x28e7a9d5
add dword [rbp - 0x2c], 0x42c4b2a
sub dword [rbp - 0x2c], 0x5780210c
xchg r12, rsi
mov qword [rbp + 0x10], r12
xchg rsi, r12
xchg r11, rax
mov r11, qword [rbp + 0x10]
xchg r11, rax
mov rcx, qword [rbp + 0x10]
xchg rdx, rax
mov rdx, qword [rbp + 0x10]
xchg rdx, rax
and cl, 3
shl cl, 1
shl cl, 1
shl cl, 1
movzx edx, word [rbp + rax*2 - 0x40]
xchg rdx, rdx
mov eax, 0x7609ecb9
sub eax, 0x55435d6f
xor eax, 0x11430d95
xor eax, 0x3222ffc5
shr eax, cl
mov rsp, rsp
movzx ecx, al
xchg r12, rax
mov r12, qword [rbp + 0x10]
xchg r12, rax
xor cx, dx
mov rdx, rdx
mov word [rbp + rax*2 - 0x28], cx
mov rax, qword [rbp + 0x10]
inc rax
mov qword [rbp + 0x10], rax
mov rbx, rbx
xchg r15, rax
mov r15, qword [rbp + 0x10]
xchg r15, rax
cmp rax, 0xc
mov dword [rsp - 0x18], ebx
jb 0x14006cf9e
xor edx, edx
mov word [rbp - 0x10], si
xchg r15, r15
lea rcx, [rbp - 0x28]
call fcn.1400a78d0
xchg rsi, rax
mov rdx, rsi
xchg rsi, rax
xchg r12, r8
mov r12, rax
xchg r12, r8
xor eax, eax
xor rdx, rbx
mov dword [rsp - 0x40], ecx
mov qword [rdi + 0x30], rdx
lea rdi, [rbp - 0x28]
lea ecx, [rax + 0xc]
rep stosb byte [rdi], al
xchg r15, r15
cmp rdx, rbx
je 0x14006d086
lea rdx, [0x1404d02e0]
mov dword [rsp - 0x30], 0xb5f4e3f
xchg r8, rdx
mov rcx, rdx
xchg rdx, r8
call fcn.14007194c
test al, al
xchg r11, r11
setne al
jmp 0x14006d086
mov al, 0x38
sub al, 8
xor al, 0x5c
xor al, 0x45
xor al, 0x28
lea r11, [rsp + 0x60]
mov dword [rsp - 0x44], esi
mov rbx, qword [r11 + 0x18]
xchg rsi, r13
mov r13, qword [r11 + 0x20]
xchg r13, rsi
xchg rdi, rcx
mov rcx, qword [r11 + 0x28]
xchg rdi, rcx
xchg rcx, r11
mov rsp, rcx
xchg r11, rcx
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret
Function at 0x14006d0bc
Capabilities:
Encode data using xor

Disassembly:
xchg r10, rbx
mov qword [rsp + 0x10], r10
xchg r10, rbx
mov qword [rsp + 0x18], rsi
xchg rdi, rsi
mov qword [rsp + 0x20], rsi
xchg rsi, rdi
nop
sub rsp, 8
mov qword [rsp], rbp
mov rbp, rsp
neg rsp
sub rsp, 0xffffffffffffffb0
neg rsp
movabs rbx, 0x338a17a741302412
sub rbx, 0x1f83a8d9
sub rbx, 0x2e5b803
add rbx, 0xd277ddb
mov rdi, rcx
cmp qword [rcx + 0x28], rbx
mov dword [rsp - 0x38], esi
jne 0x14006d2a6
mov eax, 0x6c6ef9ae
xor eax, 0x1a5d5a50
sub eax, 0x462583f
xor eax, 0x71d14bc9
mov dword [rbp - 0x30], 0x37b074d4
sub dword [rbp - 0x30], 0xd7eb9d4
sub dword [rbp - 0x30], 0x23f06ac1
xor dword [rbp - 0x30], 0x650506a
mov word [rbp - 0x20], ax
xor esi, esi
xchg r13, r13
mov dword [rbp - 0x2c], 0x2e44aa3f
sub dword [rbp - 0x2c], 0x1fa2b99
xor dword [rbp - 0x2c], 0x6c335ecc
sub dword [rbp - 0x2c], 0x40491fa8
mov dword [rbp - 0x28], 0x4bc5257
add dword [rbp - 0x28], 0xefc2e0a
xor dword [rbp - 0x28], 0x5f8a782f
sub dword [rbp - 0x28], 0x227f55c8
xor dword [rbp - 0x28], 0x29e0a2ae
mov dword [rbp - 0x24], 0xadecdaa
xor dword [rbp - 0x24], 0x702db756
sub dword [rbp - 0x24], 0x45f2cd61
sub dword [rbp - 0x24], 0x3491acd8
xchg r11, rsi
mov qword [rbp + 0x10], r11
xchg rsi, r11
mov rax, qword [rbp + 0x10]
mov dword [rsp - 0x18], ecx
xchg rcx, r11
mov r11, qword [rbp + 0x10]
xchg r11, rcx
mov rax, qword [rbp + 0x10]
mov dword [rsp - 0xc], 0x4c158080
and cl, 3
shl cl, 3
movzx edx, word [rbp + rax*2 - 0x30]
mov dword [rsp - 0x24], edi
mov eax, 0x607c214b
xor eax, 0x4236bae2
add eax, 0x1fd56c67
sub eax, 0x3e788af6
shr eax, cl
movzx ecx, al
mov rax, qword [rbp + 0x10]
mov dword [rsp - 0x3c], 0x54de5569
xor cx, dx
mov word [rbp + rax*2 - 0x1e], cx
mov rax, qword [rbp + 0x10]
inc rax
mov dword [rsp - 0x44], edi
xchg r10, rax
mov qword [rbp + 0x10], r10
xchg r10, rax
mov rax, qword [rbp + 0x10]
mov r12, r12
cmp rax, 9
jb 0x14006d1c3
xor edx, edx
mov dword [rsp - 0x44], edx
mov word [rbp - 0xc], si
lea rcx, [rbp - 0x1e]
call fcn.1400a78d0
xchg rdx, rax
mov rax, rdx
xchg rdx, rax
xchg r15, rax
mov r8, r15
xchg r15, rax
xor eax, eax
xchg rdx, rdx
xor rdx, rbx
xchg rsi, rdx
mov qword [rdi + 0x28], rsi
xchg rsi, rdx
lea rdi, [rbp - 0x1e]
mov r15, r15
lea ecx, [rax + 9]
rep stosb byte [rdi], al
cmp rdx, rbx
je 0x14006d2ae
mov r9, r9
lea rdx, [0x1404d0830]
xchg rcx, r8
mov r8, rcx
xchg r8, rcx
call fcn.140075c64
mov rsp, rsp
test al, al
setne al
jmp 0x14006d2ae
mov al, 0x48
xor al, 0x7f
sub al, 0x29
xor al, 0xf
xchg rbx, rdi
mov rdi, qword [rsp + 0x68]
xchg rdi, rbx
mov rsi, qword [rsp + 0x70]
mov rdx, rdx
mov rdi, qword [rsp + 0x78]
neg rsp
add rsp, 0xffffffffffffffb0
neg rsp
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret
Function at 0x14006d2dc
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r8
mov qword [rsp + 0x10], r8
xchg r8, rbx
mov qword [rsp + 0x18], rsi
xchg r12, rdi
mov qword [rsp + 0x20], r12
xchg rdi, r12
nop
mov qword [rsp - 8], rbp
sub rsp, 8
xchg r9, rsp
mov rbp, r9
xchg rsp, r9
neg rsp
sub rsp, 0xffffffffffffffb0
neg rsp
movabs rbx, 0x338a17a7104b2f0f
xor rbx, 0x515f9f5
xor rbx, 0x33e08a3e
add rbx, 0x52fe44d
mov rdi, rcx
cmp qword [rcx + 0x38], rbx
jne 0x14006d4d0
xchg rdx, rdx
xor esi, esi
mov dword [rbp - 0x30], 0x697c5800
xor dword [rbp - 0x30], 0x26f709c9
sub dword [rbp - 0x30], 0x133ca411
xor dword [rbp - 0x30], 0x169bdeb8
sub dword [rbp - 0x30], 0x2ac872b8
mov dword [rbp - 0x2c], 0x6b45c9a2
xor dword [rbp - 0x2c], 0x384f6a72
add dword [rbp - 0x2c], 0xbf6baac
sub dword [rbp - 0x2c], 0x5e905db8
mov dword [rbp - 0x28], 0xab50ba7
add dword [rbp - 0x28], 0x2e56e88c
sub dword [rbp - 0x28], 0x2708c4e8
xor dword [rbp - 0x28], 0x124a2f25
mov dword [rbp - 0x24], 0x6ccee513
xor dword [rbp - 0x24], 0x4801cc37
add dword [rbp - 0x24], 0x298ff9cb
sub dword [rbp - 0x24], 0x4df82266
mov dword [rbp - 0x20], 0x17b054f8
add dword [rbp - 0x20], 0x45ba065b
xor dword [rbp - 0x20], 0x7089a32f
xor dword [rbp - 0x20], 0x2df2f80a
xchg r10, rsi
mov qword [rbp + 0x10], r10
xchg r10, rsi
xchg r8, rax
mov r8, qword [rbp + 0x10]
xchg r8, rax
xchg rcx, r12
mov r12, qword [rbp + 0x10]
xchg r12, rcx
mov rax, qword [rbp + 0x10]
and cl, 3
mov r10, r10
shl cl, 2
shl cl, 1
movzx edx, word [rbp + rax*2 - 0x30]
mov eax, 0x12e3e2ca
add eax, 0x49ba1ca
xor eax, 0x4b09d484
sub eax, 0x58ced2f6
shr eax, cl
mov dword [rsp - 0x2c], 0x2e8cc161
movzx ecx, al
mov rax, qword [rbp + 0x10]
xor cx, dx
mov word [rbp + rax*2 - 0x1c], cx
mov dword [rsp - 0x2c], 0x7231595a
xchg rdi, rax
mov rdi, qword [rbp + 0x10]
xchg rdi, rax
inc rax
xchg r8, rax
mov qword [rbp + 0x10], r8
xchg r8, rax
xchg rbx, rax
mov rbx, qword [rbp + 0x10]
xchg rbx, rax
cmp rax, 0xa
jb 0x14006d3ea
xchg r15, r15
xor edx, edx
mov word [rbp - 8], si
lea rcx, [rbp - 0x1c]
mov rbx, rbx
call fcn.1400a78d0
xchg r10, rdx
mov r10, rax
xchg rdx, r10
mov r8, rax
xor eax, eax
xor rdx, rbx
mov dword [rsp - 0x20], 0xf6269eb
mov qword [rdi + 0x38], rdx
lea rdi, [rbp - 0x1c]
lea ecx, [rax + 0xa]
mov dword [rsp - 0x34], ebp
rep stosb byte [rdi], al
cmp rdx, rbx
je 0x14006d4da
mov r9, r9
lea rdx, section..data
xchg rcx, r8
mov r8, rcx
xchg r8, rcx
call fcn.14007605c
mov dword [rsp - 0x18], edi
test al, al
setne al
jmp 0x14006d4da
mov al, 0x32
add al, 0x29
sub al, 0x19
add al, 0x17
xor al, 0x58
xchg rbx, rbp
mov rbp, qword [rsp + 0x68]
xchg rbx, rbp
mov rsi, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x78]
mov dword [rsp - 0x24], 0x2168bdfb
neg rsp
add rsp, 0xffffffffffffffb0
neg rsp
nop
mov rbp, qword [rsp]
add rsp, 8
ret
Function at 0x14006d50c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
xchg rsi, r14
mov qword [rsp + 0x18], r14
xchg rsi, r14
xchg rbp, rdi
mov qword [rsp + 0x20], rbp
xchg rbp, rdi
nop
mov qword [rsp - 8], rbp
sub rsp, 8
xchg rsp, r9
mov rbp, r9
xchg rsp, r9
nop
sub rsp, 0x15823ee1
add rsp, 0x15823e91
movabs rbx, 0x338a17a7051a5867
xor rbx, 0x432b740c
add rbx, 0x11108fa
sub rbx, 0x1b53f454
xchg rbp, rdi
mov rbp, rcx
xchg rbp, rdi
cmp qword [rcx + 0x20], rbx
jne 0x14006d74e
mov dword [rsp - 0x10], 0x32eb4bbc
mov eax, 0x12c85a63
add eax, 0x5fcf8d12
xor eax, 0x7b8e8d9a
xor eax, 0x9196a24
mov dword [rbp - 0x30], 0x1f1a7f0e
xor dword [rbp - 0x30], 0xdb180f9
add dword [rbp - 0x30], 0x1843466
sub dword [rbp - 0x30], 0x141b3414
mov word [rbp - 0x1c], ax
xor esi, esi
xchg rdi, rdi
mov dword [rbp - 0x2c], 0x71a52dab
xor dword [rbp - 0x2c], 0x15edaf68
sub dword [rbp - 0x2c], 0x419cd8c4
add dword [rbp - 0x2c], 0x284d8a30
xor dword [rbp - 0x2c], 0x4a9634ed
mov dword [rbp - 0x28], 0x36a181b2
sub dword [rbp - 0x28], 0x2951b4f7
sub dword [rbp - 0x28], 0xaecfd06
xor dword [rbp - 0x28], 0x22ca1e10
xor dword [rbp - 0x28], 0x20e6d1d3
mov dword [rbp - 0x24], 0x3eec4018
add dword [rbp - 0x24], 0x3d5fdeaa
sub dword [rbp - 0x24], 0x54ea65a7
add dword [rbp - 0x24], 0x2bb23a2b
sub dword [rbp - 0x24], 0x52e6f2b1
mov dword [rbp - 0x20], 0x74f76618
sub dword [rbp - 0x20], 0x6223f1f0
xor dword [rbp - 0x20], 0x25a3b93c
sub dword [rbp - 0x20], 0xad57c0a
sub dword [rbp - 0x20], 0x2c8a508c
xchg r8, rsi
mov qword [rbp + 0x10], r8
xchg r8, rsi
xchg r10, rax
mov r10, qword [rbp + 0x10]
xchg r10, rax
xchg r11, rcx
mov r11, qword [rbp + 0x10]
xchg rcx, r11
xchg rdx, rax
mov rdx, qword [rbp + 0x10]
xchg rdx, rax
and cl, 3
mov dword [rsp - 0x34], 0x361898e8
shl cl, 1
shl cl, 1
shl cl, 1
movzx edx, word [rbp + rax*2 - 0x30]
mov eax, 0x5491749e
xor eax, 0x468b994b
xor eax, 0xbfbac99
sub eax, 0x240f22a
sub eax, 0x13f8d208
shr eax, cl
movzx ecx, al
xchg rsi, rax
mov rsi, qword [rbp + 0x10]
xchg rsi, rax
xor cx, dx
mov dword [rsp - 0x38], ebp
mov word [rbp + rax*2 - 0x1a], cx
mov rax, qword [rbp + 0x10]
inc rax
mov dword [rsp - 0x34], 0x3e4e77b
xchg rcx, rax
mov qword [rbp + 0x10], rcx
xchg rcx, rax
xchg r15, rax
mov r15, qword [rbp + 0x10]
xchg r15, rax
cmp rax, 0xb
xchg rbx, rbx
jb 0x14006d65a
xor edx, edx
mov word [rbp - 4], si
mov dword [rsp - 0x28], 0x4a587fad
lea rcx, [rbp - 0x1a]
call fcn.1400a78d0
xchg rdx, rcx
mov rcx, rax
xchg rdx, rcx
xchg r8, rax
mov rax, r8
xchg r8, rax
xor eax, eax
xor rdx, rbx
mov dword [rsp - 0x20], ecx
mov qword [rdi + 0x20], rdx
lea rdi, [rbp - 0x1a]
lea ecx, [rax + 0xb]
rep stosb byte [rdi], al
mov dword [rsp - 0x3c], 0x3ce1bb10
cmp rdx, rbx
je 0x14006d758
lea rdx, [0x1404d02b8]
mov dword [rsp - 0x1c], edi
mov rcx, r8
call fcn.1400763f4
test al, al
setne al
mov rcx, rcx
jmp 0x14006d758
mov al, 0x46
xor al, 7
add al, 7
sub al, 0x2f
xor al, 0x18
xchg rbx, r10
mov r10, qword [rsp + 0x68]
xchg rbx, r10
mov rsi, qword [rsp + 0x70]
xchg rbp, rdi
mov rbp, qword [rsp + 0x78]
xchg rbp, rdi
sub rsp, 0xffffffffffffffb0
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret
Function at 0x1400891d8
Capabilities:
Encode data using xor

Disassembly:
xchg r12, rbx
mov qword [rsp + 0x10], r12
xchg r12, rbx
mov qword [rsp + 0x18], rsi
xchg rdi, r12
mov qword [rsp + 0x20], r12
xchg r12, rdi
nop
sub rsp, 8
mov qword [rsp], rbp
xchg r14, rsp
mov rbp, r14
xchg r14, rsp
sub rsp, 0x80
xor esi, esi
xchg r10, r10
mov dword [rbp - 0x50], 0x55db8409
sub dword [rbp - 0x50], 0x318b1852
add dword [rbp - 0x50], 0x32fc3131
xor dword [rbp - 0x50], 0x57639ca2
mov dword [rbp - 0x4c], 0x20c33226
add dword [rbp - 0x4c], 0x55f7db08
sub dword [rbp - 0x4c], 0x45f154d4
sub dword [rbp - 0x4c], 0x2b2930d1
sub dword [rbp - 0x4c], 0x56086a1
mov dword [rbp - 0x48], 0x74920b00
sub dword [rbp - 0x48], 0x37d600a6
add dword [rbp - 0x48], 0x39f7ee0e
sub dword [rbp - 0x48], 0x21ff4ac3
xor dword [rbp - 0x48], 0x5491adfa
mov dword [rbp - 0x44], 0x4993d33a
xor dword [rbp - 0x44], 0x2febf7b2
xor dword [rbp - 0x44], 0xdefb5e1
sub dword [rbp - 0x44], 0x404b1581
sub dword [rbp - 0x44], 0x2afd7af1
mov qword [rbp + 0x10], rsi
mov rbx, rbx
lea ebx, [rsi + 1]
mov rax, qword [rbp + 0x10]
xchg rcx, rsp
mov rsp, qword [rbp + 0x10]
xchg rcx, rsp
mov rax, qword [rbp + 0x10]
and cl, 3
mov dword [rsp - 0x30], ebx
shl cl, 3
movzx edx, word [rbp + rax*2 - 0x50]
mov eax, 0x42c47965
add eax, 0x20a33cbd
sub eax, 0xf0b126f
xor eax, 0x57fbdea9
shr eax, cl
mov r14, r14
movzx ecx, al
xchg rcx, rax
mov rcx, qword [rbp + 0x10]
xchg rcx, rax
xor cx, dx
mov word [rbp + rax*2 - 0x20], cx
mov rax, qword [rbp + 0x10]
mov dword [rsp - 0xc], 0x27ffcf71
add rax, rbx
xchg rsp, rax
mov qword [rbp + 0x10], rsp
xchg rsp, rax
xchg r15, rax
mov r15, qword [rbp + 0x10]
xchg r15, rax
cmp rax, 8
jb 0x1400892a4
lea rax, [rbp - 0x20]
xchg r13, r13
mov word [rbp - 0x10], si
xorps xmm0, xmm0
xchg r12, rax
mov qword [rbp - 0x38], r12
xchg r12, rax
lea r9, [rbp - 0x30]
mov dword [rsp - 0x2c], edx
mov dword [rbp - 0x40], 0x2699386f
xor dword [rbp - 0x40], 0x52a934c
add dword [rbp - 0x40], 0x40aa1275
add dword [rbp - 0x40], 0xec55ce8
sub dword [rbp - 0x40], 0x73111a70
lea r8, [rbp - 0x40]
mov dword [rsp + 0x20], esi
mov dword [rsp - 0x34], 0x3f1070ea
xor edx, edx
xor ecx, ecx
movups xmmword [rbp - 0x30], xmm0
mov dword [rsp - 0x24], esi
call fcn.1400abfc0
xchg rdi, rax
mov rax, rdi
xchg rdi, rax
test rax, rax
mov dword [rsp - 0x10], 0x19b614cb
je 0x1400893d0
xchg r12, rcx
mov r12, rax
xchg rcx, r12
call fcn.14007f8d0
test al, al
je 0x1400893d0
mov dword [rsp - 0x18], 0x192ce314
lea rdx, [rbp - 0x40]
xchg rcx, rbp
mov rbp, rdi
xchg rcx, rbp
call fcn.14007e7cc
test al, al
mov dword [rsp - 0x3c], 0x6f52d2f
jne 0x1400893d3
mov bl, sil
xor eax, eax
mov r8, r8
lea r11, [rsp + 0x80]
mov rsi, qword [r11 + 0x20]
lea rdi, [rbp - 0x20]
lea ecx, [rax + 8]
mov r13, r13
rep stosb byte [rdi], al
xchg rsi, rdi
mov rsi, qword [r11 + 0x28]
xchg rdi, rsi
mov al, bl
xchg rbx, rbx
mov rbx, qword [r11 + 0x18]
xchg rsp, rcx
mov rcx, r11
xchg rsp, rcx
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret
Function at 0x140095280
Capabilities:
Encode data using xor
Hash data with crc32

Disassembly:
cmp dword [0x1404d10b4], 0
mov dword [rsp - 0x28], ebx
jne 0x14009538a
xor edx, edx
lea r8, [0x1404d10b0]
xchg rsi, rsi
nop word [rax + rax]
mov ecx, edx
lea r8, [r8 + 4]
and ecx, 1
mov r10, r10
mov eax, edx
shr eax, 1
neg ecx
xchg r15, r15
and ecx, 0xedb88320
inc edx
xor ecx, eax
mov eax, ecx
mov dword [rsp - 0x28], 0x292aa46b
shr ecx, 1
and eax, 1
neg eax
mov dword [rsp - 0x10], 0x47b03fe6
and eax, 0xedb88320
xor eax, ecx
mov ecx, eax
mov dword [rsp - 0x10], 0x4b82367c
shr eax, 1
and ecx, 1
neg ecx
and ecx, 0xedb88320
mov dword [rsp - 0x14], 0xa705558
xor ecx, eax
mov eax, ecx
shr ecx, 1
mov dword [rsp - 0x28], 0x40d5daf
and eax, 1
neg eax
and eax, 0xedb88320
mov r15, r15
xor eax, ecx
mov ecx, eax
shr eax, 1
mov rbx, rbx
and ecx, 1
neg ecx
and ecx, 0xedb88320
xor ecx, eax
mov rsp, rsp
mov eax, ecx
shr ecx, 1
and eax, 1
neg eax
mov r14, r14
and eax, 0xedb88320
xor eax, ecx
mov ecx, eax
shr eax, 1
mov dword [rsp - 0x14], esp
and ecx, 1
neg ecx
and ecx, 0xedb88320
xor ecx, eax
xchg rcx, rcx
mov eax, ecx
shr ecx, 1
and eax, 1
neg eax
xchg rsi, rsi
and eax, 0xedb88320
xor eax, ecx
mov dword [r8 - 4], eax
mov r9, r9
cmp edx, 0x100
jb 0x1400952a7
ret

Function at 0x140095390
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ad8ef
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x1404d0f60]
mov dword [rsp - 0x30], 0x2b52c35c
cmp qword [0x1404d1048], 0
jne 0x1400ad690
syscall
xchg rsp, rsp
ret

Function at 0x1400953b0
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x28]
mov byte [rsp + 0x28], al
xchg rcx, rcx
jmp 0x1400adf2e
xchg r10, r11
mov r11, rcx
xchg r10, r11
mov eax, dword [0x1404d0ff8]
mov dword [rsp - 0x30], esp
cmp qword [0x1404d1048], 0
jne 0x1400ad690
syscall
ret

Function at 0x1400953d0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ad6ff
xchg r11, rcx
mov r10, r11
xchg rcx, r11
mov eax, dword [0x1404d0f30]
cmp qword [0x1404d1048], 0
xchg r11, r11
jne 0x1400ad690
syscall
ret

Function at 0x1400953e0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400adcb2
xchg rdx, rcx
mov r10, rdx
xchg rcx, rdx
mov eax, dword [0x1404d0fb8]
cmp qword [0x1404d1048], 0
jne 0x1400ad690
mov dword [rsp - 0x28], esp
syscall
ret

Function at 0x1400953f0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400adb4f
xchg r14, r10
mov r14, rcx
xchg r14, r10
mov eax, dword [0x1404d0f98]
cmp qword [0x1404d1048], 0
mov r9, r9
jne 0x1400ad690
syscall
ret

Function at 0x140095400
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ad759
mov r10, rcx
mov eax, dword [0x1404d0f38]
mov dword [rsp - 0x44], edx
cmp qword [0x1404d1048], 0
jne 0x1400ad690
syscall
mov dword [rsp - 0x28], 0x31dd232c
ret

Function at 0x140095410
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400addcc
mov r10, rcx
mov eax, dword [0x1404d0fd4]
mov dword [rsp - 0x24], esp
cmp qword [0x1404d1048], 0
jne 0x1400ad690
syscall
mov dword [rsp - 0xc], 0x78229415
ret
Function at 0x140095420
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400addf8
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x1404d0fd8]
xchg r14, r14
cmp qword [0x1404d1048], 0
jne 0x1400ad690
syscall
ret

Function at 0x140095430
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400add26
xchg rcx, r15
mov r10, r15
xchg r15, rcx
mov eax, dword [0x1404d0fc4]
mov dword [rsp - 0x10], 0x540d7013
cmp qword [0x1404d1048], 0
jne 0x1400ad690
syscall
xchg r12, r12
ret

Function at 0x140095440
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400add57
mov r10, rcx
mov eax, dword [0x1404d0fc8]
xchg r15, r15
cmp qword [0x1404d1048], 0
jne 0x1400ad690
syscall
ret

Function at 0x140095450
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ad920
mov r10, rcx
mov eax, dword [0x1404d0f64]
cmp qword [0x1404d1048], 0
mov dword [rsp - 0x34], ebx
jne 0x1400ad690
syscall
ret

Function at 0x140095470
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400adc4e
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x1404d0fb0]
cmp qword [0x1404d1048], 0
mov dword [rsp - 0x24], 0x2a2df537
jne 0x1400ad690
syscall
ret

Function at 0x140095480
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ad72c
xchg rsi, rcx
mov r10, rsi
xchg rsi, rcx
mov eax, dword [0x1404d0f34]
xchg rdi, rdi
cmp qword [0x1404d1048], 0
jne 0x1400ad690
syscall
ret

Function at 0x140095490
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400adcdc
mov r10, rcx
mov eax, dword [0x1404d0fbc]
mov r15, r15
cmp qword [0x1404d1048], 0
jne 0x1400ad690
syscall
ret

Function at 0x1400954a0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400adaf9
mov r10, rcx
mov eax, dword [0x1404d0f90]
cmp qword [0x1404d1048], 0
mov dword [rsp - 0x24], ebx
jne 0x1400ad690
syscall
ret

Function at 0x1400954b0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400adb1d
xchg r14, r10
mov r14, rcx
xchg r14, r10
mov eax, dword [0x1404d0f94]
mov dword [rsp - 0x34], 0x2f856ce9
cmp qword [0x1404d1048], 0
jne 0x1400ad690
syscall
mov dword [rsp - 0x10], edx
ret

Function at 0x1400954c0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ad99b
xchg r10, r13
mov r13, rcx
xchg r10, r13
mov eax, dword [0x1404d0f70]
cmp qword [0x1404d1048], 0
mov dword [rsp - 0x30], 0x692b0c9e
jne 0x1400ad690
syscall
ret

Function at 0x1400954d0
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x58]
mov byte [rsp + 0x58], al
mov r9, r9
movzx eax, byte [rsp + 0x48]
mov byte [rsp + 0x48], al
jmp 0x1400adf04
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x1404d0ff4]
mov dword [rsp - 0x20], edx
cmp qword [0x1404d1048], 0
jne 0x1400ad690
syscall
ret

Function at 0x1400954f0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ad824
xchg rcx, rsi
mov r10, rsi
xchg rcx, rsi
mov eax, dword [0x1404d0f4c]
mov dword [rsp - 0x20], ebx
cmp qword [0x1404d1048], 0
jne 0x1400ad690
syscall
ret

Function at 0x140095500
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ad84e
mov r10, rcx
xchg rcx, rcx
mov eax, dword [0x1404d0f50]
cmp qword [0x1404d1048], 0
jne 0x1400ad690
mov r15, r15
syscall
ret
Function at 0x140095510
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ad874
xchg r10, r13
mov r13, rcx
xchg r13, r10
mov eax, dword [0x1404d0f54]
cmp qword [0x1404d1048], 0
xchg rbp, rbp
jne 0x1400ad690
syscall
ret

Function at 0x140095520
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ad89d
xchg r11, r10
mov r11, rcx
xchg r11, r10
mov eax, dword [0x1404d0f58]
mov rcx, rcx
cmp qword [0x1404d1048], 0
jne 0x1400ad690
syscall
ret

Function at 0x140095530
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ad7fb
xchg r13, r10
mov r13, rcx
xchg r10, r13
mov eax, dword [0x1404d0f48]
cmp qword [0x1404d1048], 0
jne 0x1400ad690
mov rdi, rdi
syscall
ret

Function at 0x140095540
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400add7a
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x1404d0fcc]
mov r12, r12
cmp qword [0x1404d1048], 0
jne 0x1400ad690
syscall
ret

Function at 0x140095550
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ad8c6
xchg rsi, r10
mov rsi, rcx
xchg r10, rsi
mov eax, dword [0x1404d0f5c]
cmp qword [0x1404d1048], 0
jne 0x1400ad690
mov r11, r11
syscall
ret

Function at 0x140095560
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ad785
xchg r10, r9
mov r9, rcx
xchg r9, r10
mov eax, dword [0x1404d0f3c]
cmp qword [0x1404d1048], 0
jne 0x1400ad690
mov r14, r14
syscall
ret

Function at 0x140095570
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ad944
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x1404d0f68]
cmp qword [0x1404d1048], 0
mov r9, r9
jne 0x1400ad690
syscall
ret

Function at 0x1400955a0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400adf58
add rsp, 0x335e8211
sub rsp, 0x335e8331
lea rcx, [0x1400ad6f2]
push rcx
push rbp
mov dword [rsp - 0x20], esi
push rsi
nop
sub rsp, 8
mov qword [rsp], rdi
push qword [0x1404d1050]
lea rsi, [rsp + 0x170]
mov dword [rsp - 0x38], esp
lea rdi, [rsp + 0x28]
mov ecx, 0x3cd127b4
xor ecx, 0x71d5426c
sub ecx, 0x28d88360
add ecx, 0x4babdde
sub ecx, 0x28e6a046
rep movsq qword [rdi], qword [rsi]
jmp qword [0x1404d1048]
xchg r10, rdx
mov rdx, rcx
xchg rdx, r10
mov eax, dword [0x1404d0ffc]
mov dword [rsp - 0x1c], edx
cmp qword [0x1404d1048], 0
jne 0x1400ad690
syscall
mov r12, r12
ret

Function at 0x1400955b0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ad7d7
mov r10, rcx
mov eax, dword [0x1404d0f44]
cmp qword [0x1404d1048], 0
mov dword [rsp - 0x38], ecx
jne 0x1400ad690
syscall
ret

Function at 0x1400955c0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400adee0
mov r10, rcx
mov eax, dword [0x1404d0ff0]
cmp qword [0x1404d1048], 0
mov dword [rsp - 0x1c], edi
jne 0x1400ad690
syscall
ret

Function at 0x1400955d0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400adda3
xchg rcx, r15
mov r10, r15
xchg rcx, r15
mov eax, dword [0x1404d0fd0]
cmp qword [0x1404d1048], 0
xchg rdi, rdi
jne 0x1400ad690
syscall
ret

Function at 0x1400955e0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400ade9a
mov r10, rcx
mov eax, dword [0x1404d0fe8]
cmp qword [0x1404d1048], 0
mov rdx, rdx
jne 0x1400ad690
syscall
ret