joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14003ccc0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
neg rsp
sub rsp, 0xffffffffffffffa0
neg rsp
mov rbp, qword [rcx + 0xaf0]
lea rax, [rsp + 0x28]
mov rbx, qword [rcx + 0xab8]
xorps xmm0, xmm0
mov r14, rdx
mov qword [rsp + 0x20], rax
mov rsi, rcx
lea rcx, [rsp + 0x20]
lea rdx, [rbp + 1]
movups xmmword [rsp + 0x28], xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
call fcn.1400166e8
mov edi, 0x6d2a8d38
sub edi, 0x3ec167c2
xor edi, 0x573634ad
sub edi, 0x2f35c2ff
mov r9, rax
mov ecx, edi
mov r15d, 0x43d5717
add r15d, 0x47bcf1ab
sub r15d, 0x1146aa35
sub r15d, 0x3ab39d8e
test rbp, rbp
je 0x14003cd92
mov rdx, rax
sub rbx, rax
mov r8, rbp
nop dword [rax]
nop dword [rax + rax]
movzx eax, cx
lea rdx, [rdx + 2]
and ax, r15w
ror ecx, 8
xor ax, word [rbx + rdx - 2]
mov word [rdx - 2], ax
sub r8, 1
jne 0x14003cd71
xor ebx, ebx
mov word [r9 + rbp*2], bx
cmp word [rsi + 0xb40], bx
je 0x14003cddd
mov edx, ebx
cmp qword [rsi + 0xaf0], rbx
jbe 0x14003cddd
nop dword [rax + rax]
mov rax, qword [rsp + 0x20]
movzx ecx, word [rsi + 0xb40]
mov word [rax + rdx*2], cx
inc rdx
cmp rdx, qword [rsi + 0xaf0]
jb 0x14003cdbd
mov rsi, qword [rsp + 0x20]
lea rax, [r14 + 8]
xorps xmm0, xmm0
mov qword [r14], rax
movups xmmword [rax], xmm0
nop
movabs rdx, 0xffffffff1069b30b
xor rdx, 0x181b66b8
add rdx, 0x392b8f9e
add rdx, 0x7fffffff
add rdx, 0x3e619aaf
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
nop dword [rax]
inc rdx
cmp word [rsi + rdx*2], bx
jne 0x14003ce21
mov rcx, r14
mov qword [r14 + 0x38], rdx
call fcn.1400166e8
cmp qword [r14 + 0x38], rbx
jbe 0x14003ce6d
sub rsi, rax
nop
movzx ecx, di
lea rax, [rax + 2]
and cx, r15w
ror edi, 8
xor cx, word [rsi + rax - 2]
inc rbx
mov word [rax - 2], cx
cmp rbx, qword [r14 + 0x38]
jb 0x14003ce49
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
cmp rcx, rax
jne 0x14003ce9f
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0x62e5a4d1
xor ecx, 0x485a20c4
sub ecx, 0x2abf83e5
rep stosb byte [rdi], al
jmp 0x14003cea4
call fcn.140083f00
lea r11, [rsp + 0x60]
mov rax, r14
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
Function at 0x1400440f0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
mov r8, qword [rcx + 0x648]
xor esi, esi
mov rbx, rcx
test r8, r8
je 0x140044126
mov rdi, qword [rcx + 0x640]
jmp 0x14004412d
mov rdi, rsi
nop dword [rax]
test r8, r8
je 0x140044146
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
jmp 0x140044149
mov rcx, rsi
cmp rdi, rcx
je 0x140044372
mov rax, qword [rdi]
cmp qword [rax + 0x28], rdx
je 0x140044173
nop
sub rdi, 0x3359fabd
add rdi, 0x3359fac5
jmp 0x14004412d
test r8, r8
je 0x140044237
cmp rdi, qword [rbx + 0x640]
jb 0x140044237
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
cmp rdi, rcx
jae 0x140044237
mov rdx, rdi
nop word [rax + rax]
mov rcx, qword [rbx + 0x648]
test rcx, rcx
je 0x1400441ca
mov rax, qword [rbx + 0x640]
lea rax, [rax + rcx*8]
jmp 0x1400441cd
mov rax, rsi
sub rax, 8
cmp rdx, rax
jae 0x1400441f0
mov rax, qword [rdx + 8]
mov qword [rdx], rax
neg rdx
add rdx, 0xfffffffffffffff8
neg rdx
jmp 0x1400441aa
test rcx, rcx
je 0x140044237
lea rax, [rcx - 1]
mov qword [rbx + 0x648], rax
test rax, rax
jne 0x140044237
mov rcx, qword [rbx + 0x640]
test rcx, rcx
je 0x140044229
call fcn.140083f00
mov qword [rbx + 0x640], rsi
mov qword [rbx + 0x650], rsi
mov qword [rbx + 0x648], rsi
mov rcx, qword [rdi]
test rcx, rcx
je 0x140044259
mov rax, qword [rcx]
mov edx, 0x4ff8c863
xor edx, 0x911d23d
xor edx, 0x46e91a5f
call qword [rax]
cmp qword [rbx + 0x648], rsi
je 0x140044372
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.14003a0f0
mov rcx, qword [rsp + 0x30]
mov r10d, 0x4cfc811a
add r10d, 0xf2cae40
xor r10d, 0x5c292ffa
mov r8d, dword [rsp + 0x34]
mov eax, ecx
mov r9, qword [rbx + 0x648]
sub eax, r8d
cdq
idiv dword [rbx + 0x648]
cmp eax, r10d
cmovl r10d, eax
test r9, r9
je 0x14004432a
mov rdx, qword [rbx + 0x640]
lea r11, [rdx + r9*8]
cmp rdx, r11
je 0x14004432a
mov r9d, r10d
xor r9d, 0xf831d59
xor r8d, 0xf831d59
nop dword [rax]
mov rcx, qword [rdx]
mov eax, esi
xor eax, 0xf831d59
add esi, r10d
neg rdx
add rdx, 0xfffffffffffffff8
neg rdx
mov dword [rcx + 0x30], eax
mov dword [rcx + 0x34], 0x3befb2bd
xor dword [rcx + 0x34], 0x3a8eba43
add dword [rcx + 0x34], 0xe22145b
mov dword [rcx + 0x38], r9d
mov dword [rcx + 0x3c], r8d
cmp rdx, r11
jne 0x1400442e0
mov rcx, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x34]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x14004436a
sub ecx, r8d
mov dword [rax + 0x14], 0x6c70e06a
sub dword [rax + 0x14], 0x544fb8c5
sub dword [rax + 0x14], 0x89e0a4c
xor ecx, 0xf831d59
xor r8d, 0xf831d59
mov dword [rax + 0x10], ecx
mov dword [rax + 0x18], r8d
mov dword [rax + 0x1c], r8d
mov rcx, rbx
call fcn.140039120
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
nop
sub rsp, 0x3b78c5db
add rsp, 0x3b78c5fb
pop rdi
ret
Function at 0x140044449
Capabilities:
Encode data using xor

Disassembly:
push rbx
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
mov rax, qword [rcx]
mov rbx, rcx
call qword [rax + 0x78]
mov rdx, qword [rbx + 0x648]
mov rcx, rax
mov qword [rsp + 0x30], rax
call fcn.140039a20
lea rcx, [rbx + 0x640]
lea rdx, [rsp + 0x30]
call fcn.140043fc0
mov rcx, rbx
neg rsp
add rsp, 0xffffffffffffffe0
neg rsp
pop rbx
jmp 0x140044390
push rbx
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
cmp qword [rcx + 0x648], 0
mov rbx, rcx
je 0x1400444cf
lea rdx, [rsp + 0x30]
call fcn.14003a0f0
mov r8, qword [rsp + 0x30]
mov r11d, 0x3d69d4b1
add r11d, 0xf503979
add r11d, 0x23c7c8c0
sub r11d, 0x7081d64a
mov r9d, dword [rsp + 0x34]
mov eax, r8d
sub eax, r9d
cdq
idiv dword [rbx + 0x648]
mov rdx, qword [rbx + 0x648]
cmp eax, r11d
cmovl r11d, eax
xor r10d, r10d
test rdx, rdx
je 0x14004447e
mov rax, qword [rbx + 0x640]
mov qword [rsp + 0x38], rdi
lea rdi, [rax + rdx*8]
cmp rax, rdi
je 0x140044479
mov r8d, r11d
xor r8d, 0xf831d59
xor r9d, 0xf831d59
nop word [rax + rax]
mov rdx, qword [rax]
mov ecx, r10d
xor ecx, 0xf831d59
add r10d, r11d
add rax, 8
mov dword [rdx + 0x30], ecx
mov dword [rdx + 0x34], 0x8da7511
add dword [rdx + 0x34], 0x4c0b6189
xor dword [rdx + 0x34], 0x5b66cbc3
mov dword [rdx + 0x38], r8d
mov dword [rdx + 0x3c], r9d
cmp rax, rdi
jne 0x140044433
mov r8, qword [rsp + 0x30]
mov r9d, dword [rsp + 0x34]
mov rdi, qword [rsp + 0x38]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x1400444c7
sub r8d, r9d
mov dword [rax + 0x14], 0x43d35520
sub dword [rax + 0x14], 0x15fb93b5
xor dword [rax + 0x14], 0x3f9db42a
sub dword [rax + 0x14], 0x2c757e8
xor r8d, 0xf831d59
xor r9d, 0xf831d59
mov dword [rax + 0x10], r8d
mov dword [rax + 0x18], r9d
mov dword [rax + 0x1c], r9d
mov rcx, rbx
call fcn.140039120
add rsp, 0x20
pop rbx
ret

Function at 0x14004ca00
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg r11, r11
push rdi
sub rsp, 0x20
xchg rdi, rbx
mov rdi, rdx
xchg rdi, rbx
mov rdi, rcx
mov dword [rsp - 0x34], 0x3de7104
nop
movabs rdx, 0xffffffff6d46ffdf
add rdx, 0x123913bf
sub rdx, 0x2f8ae90
add rdx, 0x7fffffff
add rdx, 0x3789af2
nop word [rax + rax]
mov r13, r13
inc rdx
cmp word [rbx + rdx*2], 0
jne 0x14004ca54
mov qword [rcx + 0x38], rdx
xchg rcx, rcx
call fcn.1400166e8
xor r8d, r8d
mov edx, 0x22481bdf
add edx, 0x30590c95
xor edx, 0x7c11ce7d
add edx, 0x1b7868d3
cmp qword [rdi + 0x38], r8
mov r12, r12
jbe 0x14004caf8
sub rbx, rax
mov r9d, 0x62d13ec7
sub r9d, 0x5a8a6a6f
sub r9d, 0x7b47fc5
xor r9d, 0x92546c
nop word [rax + rax]
movzx ecx, dx
mov r12, r12
lea rax, [rax + 2]
and cx, r9w
ror edx, 4
ror edx, 1
ror edx, 1
ror edx, 1
ror edx, 1
xor cx, word [rbx + rax - 2]
mov dword [rsp - 0x44], 0x778ce911
inc r8
mov word [rax - 2], cx
cmp r8, qword [rdi + 0x38]
mov dword [rsp - 0x34], 0x3654d260
jb 0x14004cab9
mov rbx, qword [rsp + 0x30]
mov rax, rdi
add rsp, 0x20
xchg rbp, rbp
pop rdi
ret
Function at 0x14004d4a0
Capabilities:
Encode data using xor

Disassembly:
xchg r14, rbx
mov qword [rsp + 8], r14
xchg r14, rbx
xchg r9, rsi
mov qword [rsp + 0x10], r9
xchg r9, rsi
nop
sub rsp, 8
mov qword [rsp], rdi
nop
add rsp, 0x6838a549
sub rsp, 0x6838a569
mov rsi, qword [rcx + 0x38]
xchg rdi, rdx
mov rbx, rdi
xchg rdi, rdx
mov r8, qword [rdx + 0x38]
mov rdi, rcx
mov r15, r15
add r8, rsi
xchg rdx, rsi
mov rsi, rdx
xchg rdx, rsi
xchg r8, rbp
mov qword [rcx + 0x38], rbp
xchg r8, rbp
call fcn.14004e100
xchg r9, rcx
mov rcx, qword [rbx]
xchg rcx, r9
mov ecx, esi
and ecx, 3
mov dword [rsp - 0x44], esp
mov r8d, 0x521f0403
xor r8d, 0x2f034aec
sub r8d, 0x4e4e9235
add r8d, 0x1b5b9222
shl ecx, 2
shl ecx, 1
mov edx, r8d
mov dword [rsp - 0x34], ecx
ror edx, cl
xchg r13, rax
mov r10, r13
xchg r13, rax
xor ecx, ecx
cmp qword [rbx + 0x38], rcx
jbe 0x14004d5c7
mov dword [rsp - 0x44], edi
lea rax, [rsi + rsi]
mov r11d, 0x4b397efd
sub r11d, 0x2e064cda
xor r11d, 0x2d8f1916
sub r11d, 0x30bc2a36
sub rax, r9
xchg r13, r13
add r10, rax
nop dword [rax]
movzx eax, dx
xchg r15, r15
lea r9, [r9 + 2]
xor ax, r8w
ror edx, 4
ror edx, 3
ror edx, 1
and ax, r11w
mov r12, r12
ror r8d, 3
ror r8d, 3
ror r8d, 1
ror r8d, 1
xor ax, word [r9 - 2]
mov r12, r12
inc rcx
mov word [r10 + r9 - 2], ax
cmp rcx, qword [rbx + 0x38]
mov dword [rsp - 0x38], esp
jb 0x14004d57d
mov rbx, qword [rsp + 0x30]
xchg r11, rax
mov r11, rdi
xchg r11, rax
xchg rbx, rsi
mov rbx, qword [rsp + 0x38]
xchg rsi, rbx
nop
sub rsp, 0x479212bb
add rsp, 0x479212db
nop
mov rdi, qword [rsp]
add rsp, 8
ret

Function at 0x14004d600
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov dword [rsp - 0x40], ecx
xchg r9, rdi
mov qword [rsp + 0x18], r9
xchg r9, rdi
nop
sub rsp, 8
mov qword [rsp], r14
add rsp, 0xffffffffffffffe0
xchg r14, rdi
mov rdi, qword [rcx + 0x38]
xchg rdi, r14
xchg rdi, r15
mov r15, rdx
xchg r15, rdi
xchg rbp, rcx
mov rsi, rbp
xchg rcx, rbp
nop
movabs rbx, 0xffffffff537fe1ce
xor rbx, 0x56c0834e
xor rbx, 0x3eed70e0
add rbx, 0x7fffffff
add rbx, 0x44adeda0
inc rbx
cmp word [rdx + rbx*2], 0
mov r14, r14
jne 0x14004d669
lea r8, [r14 + rbx]
xchg r14, r9
mov rdx, r9
xchg r9, r14
mov qword [rcx + 0x38], r8
call fcn.14004e100
xchg rcx, rcx
mov ecx, r14d
mov edx, 0x2d60c0a3
add edx, 0x515c5936
sub edx, 0x199958d
sub edx, 0x32209fa9
sub edx, 0xd995c7
and ecx, 3
shl ecx, 2
shl ecx, 1
ror edx, cl
mov rsp, rsp
test rbx, rbx
je 0x14004d738
lea r8, [r14 + r14]
mov dword [rsp - 0x1c], ecx
mov ecx, 0x1a537710
sub ecx, 0xb6f9b4a
add ecx, 0x6bcef378
xor ecx, 0x7ab2cfc1
sub r8, rdi
mov dword [rsp - 0x28], 0x6e98cca7
add r8, rax
nop dword [rax]
nop dword [rax + rax]
movzx eax, dx
mov dword [rsp - 0x20], 0x50c8c591
lea rdi, [rdi + 2]
and ax, cx
ror edx, 3
ror edx, 1
ror edx, 4
xor ax, word [rdi - 2]
mov word [r8 + rdi - 2], ax
mov dword [rsp - 0x28], 0x175b0db3
sub rbx, 1
jne 0x14004d702
mov rbx, qword [rsp + 0x30]
xchg rsi, r13
mov rax, r13
xchg r13, rsi
xchg rdi, rsi
mov rdi, qword [rsp + 0x38]
xchg rsi, rdi
xchg rbp, rdi
mov rbp, qword [rsp + 0x40]
xchg rdi, rbp
add rsp, 0x20
nop
add rsp, 8
mov r14, qword [rsp - 8]
ret
Function at 0x14004df61
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov r12, r12
nop
mov qword [rsp - 8], rsi
sub rsp, 8
nop
sub rsp, 8
mov qword [rsp], rdi
push r14
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
lea rsi, [rdx + 8]
xchg r11, r11
xorps xmm0, xmm0
mov qword [rdx], rsi
xor edi, edi
mov dword [rsp - 0xc], 0x67f46407
xchg rsi, rbp
movups xmmword [rbp], xmm0
xchg rbp, rsi
xchg rbx, r14
mov rbx, r9
xchg r14, rbx
mov rbp, r8
mov dword [rsp - 0x18], esi
xchg r11, rsi
movups xmmword [r11 + 0x10], xmm0
xchg rsi, r11
xchg rbx, rdx
mov rdx, rbx
xchg rbx, rdx
xchg rsi, rcx
movups xmmword [rcx + 0x20], xmm0
xchg rcx, rsi
xchg rdi, r10
mov qword [rdx + 0x38], r10
xchg rdi, r10
xchg r10, rax
mov r10, qword [rcx + 0x38]
xchg r10, rax
cmp r8, rax
jae 0x14004e09d
mov dword [rsp - 0x3c], edi
sub rax, r8
mov qword [rsp + 0x40], r15
cmp rax, r9
cmovb r14, rax
mov r15, r15
xchg rsi, r14
mov qword [rdx + 0x38], rsi
xchg rsi, r14
mov rax, qword [rcx]
mov rcx, qword [rdx]
lea r15, [rax + r8*2]
mov dword [rsp - 0x1c], 0x2bbf979d
cmp rcx, rsi
je 0x14004df39
call fcn.140083f00
xchg rdi, rdi
cmp r14, 0x18
jbe 0x14004df7b
lea rcx, [r14 + r14]
mov dword [rsp - 0x28], 0x637de2d
call fcn.140084200
xchg r11, rax
mov qword [rbx], r11
xchg r11, rax
test rax, rax
jne 0x14004df8b
xchg rsi, r13
mov qword [rbx], r13
xchg rsi, r13
xchg rdi, r8
mov rdi, r8
xchg r8, rdi
jmp 0x14004dfad
xchg rsi, rdi
mov qword [rbx], rdi
xchg rsi, rdi
xchg rsi, rax
mov rsi, rax
xchg rsi, rax
xorps xmm0, xmm0
mov dword [rsp - 0x30], ecx
xchg rsi, rax
movups xmmword [rsi], xmm0
xchg rsi, rax
xchg r14, rax
movups xmmword [r14 + 0x10], xmm0
xchg r14, rax
xchg rcx, rax
movups xmmword [rcx + 0x20], xmm0
xchg rcx, rax
mov r8, qword [rbx]
and ebp, 3
mov r9d, 0x1c48e24a
xor r9d, 0x4717df7d
add r9d, 0x19688374
sub r9d, 0x2a9e71cf
shl ebp, 2
shl ebp, 1
mov edx, r9d
movzx ecx, bpl
mov rdx, rdx
ror edx, cl
cmp qword [rbx + 0x38], rdi
jbe 0x14004e05d
xchg r11, r11
sub r15, r8
mov ecx, 0x258e5526
add ecx, 0x130bde6f
xor ecx, 0x30574b55
sub ecx, 0x8cd77c1
nop dword [rax]
nop word [rax + rax]
mov dword [rsp - 0x30], 0x686a6a77
movzx eax, dx
lea r8, [r8 + 2]
xor ax, r9w
ror edx, 1
ror edx, 1
ror edx, 5
ror edx, 1
and ax, cx
mov dword [rsp - 0x14], edx
ror r9d, 2
ror r9d, 5
ror r9d, 1
xor ax, word [r15 + r8 - 2]
mov dword [rsp - 0x30], esi
inc rdi
mov word [r8 - 2], ax
cmp rdi, qword [rbx + 0x38]
mov rbp, rbp
jb 0x14004e018
xchg r15, rbp
mov rbp, qword [rsp + 0x40]
xchg rbp, r15
mov rax, rbx
xchg r12, r12
mov rbx, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x50]
neg rsp
add rsp, 0xffffffffffffffe0
neg rsp
pop r14
mov dword [rsp - 0x3c], ecx
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
mov rsi, qword [rsp - 8]
ret
mov rax, rbx
jmp 0x14004e06e
Function at 0x14004e740
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008084a
xchg r10, rdi
mov rdi, rcx
xchg r10, rdi
mov eax, dword [0x1400db6d0]
cmp qword [0x1400db698], 0
mov rcx, rcx
jne 0x1400805d0
syscall
ret

Function at 0x14004e760
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x28]
xchg rsp, rsp
mov byte [rsp + 0x28], al
jmp 0x140080e8c
mov r10, rcx
mov rsp, rsp
mov eax, dword [0x1400db768]
cmp qword [0x1400db698], 0
jne 0x1400805d0
syscall
mov dword [rsp - 0x30], 0x1de1ac0d
ret

Function at 0x14004e780
Capabilities:
Execute syscall

Disassembly:
jmp 0x140080645
mov r10, rcx
mov eax, dword [0x1400db6a0]
cmp qword [0x1400db698], 0
xchg r13, r13
jne 0x1400805d0
syscall
ret

Function at 0x14004e790
Capabilities:
Execute syscall

Disassembly:
jmp 0x140080a84
mov r10, rcx
mov dword [rsp - 0x20], 0x1d0ead6d
mov eax, dword [0x1400db708]
cmp qword [0x1400db698], 0
jne 0x1400805d0
xchg r11, r11
syscall
ret

Function at 0x14004e7a0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140080699
xchg rcx, r15
mov r10, r15
xchg r15, rcx
mov eax, dword [0x1400db6a8]
xchg r15, r15
cmp qword [0x1400db698], 0
jne 0x1400805d0
syscall
xchg r12, r12
ret

Function at 0x14004e7b0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140080c86
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x1400db738]
mov dword [rsp - 0x2c], 0x3eb57d49
cmp qword [0x1400db698], 0
jne 0x1400805d0
syscall
mov rcx, rcx
ret

Function at 0x14004e7c0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140080873
mov r10, rcx
mov eax, dword [0x1400db6d4]
xchg r8, r8
cmp qword [0x1400db698], 0
jne 0x1400805d0
syscall
ret

Function at 0x14004e7d0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140080b32
xchg r10, rdi
mov rdi, rcx
xchg r10, rdi
mov eax, dword [0x1400db718]
mov dword [rsp - 0x10], ebx
cmp qword [0x1400db698], 0
jne 0x1400805d0
syscall
ret

Function at 0x14004e7e0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008066c
xchg rcx, r13
mov r10, r13
xchg rcx, r13
mov eax, dword [0x1400db6a4]
cmp qword [0x1400db698], 0
xchg r10, r10
jne 0x1400805d0
syscall
ret

Function at 0x14004e7f0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140080c07
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x1400db72c]
cmp qword [0x1400db698], 0
mov dword [rsp - 0x38], ecx
jne 0x1400805d0
syscall
ret

Function at 0x14004e800
Capabilities:
Execute syscall

Disassembly:
jmp 0x140080a34
mov r10, rcx
xchg r12, r12
mov eax, dword [0x1400db700]
cmp qword [0x1400db698], 0
jne 0x1400805d0
mov dword [rsp - 0x18], ebp
syscall
ret

Function at 0x14004e810
Capabilities:
Execute syscall

Disassembly:
jmp 0x140080a5b
xchg rcx, rbx
mov r10, rbx
xchg rcx, rbx
mov eax, dword [0x1400db704]
mov rsp, rsp
cmp qword [0x1400db698], 0
jne 0x1400805d0
syscall
ret

Function at 0x14004e820
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400808e8
xchg r10, rsp
mov rsp, rcx
xchg r10, rsp
mov eax, dword [0x1400db6e0]
cmp qword [0x1400db698], 0
jne 0x1400805d0
mov dword [rsp - 0x34], esp
syscall
ret
Function at 0x14004e830
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x58]
mov dword [rsp - 0x34], 0x1ffea8ac
mov byte [rsp + 0x58], al
movzx eax, byte [rsp + 0x48]
mov byte [rsp + 0x48], al
jmp 0x140080e62
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x1400db764]
cmp qword [0x1400db698], 0
mov dword [rsp - 0xc], edi
jne 0x1400805d0
syscall
ret

Function at 0x14004e850
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008076f
mov r10, rcx
mov r13, r13
mov eax, dword [0x1400db6bc]
cmp qword [0x1400db698], 0
jne 0x1400805d0
syscall
mov rsi, rsi
ret

Function at 0x14004e860
Capabilities:
Execute syscall

Disassembly:
jmp 0x140080795
xchg rcx, r8
mov r10, r8
xchg rcx, r8
mov eax, dword [0x1400db6c0]
mov dword [rsp - 0x14], esp
cmp qword [0x1400db698], 0
jne 0x1400805d0
syscall
mov dword [rsp - 0x40], esi
ret

Function at 0x14004e870
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400807c3
xchg r10, r13
mov r13, rcx
xchg r10, r13
mov eax, dword [0x1400db6c4]
mov rsi, rsi
cmp qword [0x1400db698], 0
jne 0x1400805d0
syscall
mov r8, r8
ret

Function at 0x14004e880
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400807ef
xchg rdi, rcx
mov r10, rdi
xchg rdi, rcx
mov eax, dword [0x1400db6c8]
xchg r10, r10
cmp qword [0x1400db698], 0
jne 0x1400805d0
syscall
mov dword [rsp - 0x34], 0x4ec2f1d4
ret

Function at 0x14004e890
Capabilities:
Execute syscall

Disassembly:
jmp 0x140080746
xchg r9, rcx
mov r10, r9
xchg rcx, r9
mov eax, dword [0x1400db6b8]
cmp qword [0x1400db698], 0
xchg rcx, rcx
jne 0x1400805d0
syscall
ret

Function at 0x14004e8a0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140080cb7
xchg rcx, rdx
mov r10, rdx
xchg rcx, rdx
mov eax, dword [0x1400db73c]
cmp qword [0x1400db698], 0
jne 0x1400805d0
xchg rbp, rbp
syscall
ret

Function at 0x14004e8b0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140080820
xchg rbp, r10
mov rbp, rcx
xchg r10, rbp
mov eax, dword [0x1400db6cc]
cmp qword [0x1400db698], 0
mov dword [rsp - 0x14], esp
jne 0x1400805d0
syscall
ret

Function at 0x14004e8c0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400806c5
xchg rbp, r10
mov rbp, rcx
xchg r10, rbp
mov eax, dword [0x1400db6ac]
mov dword [rsp - 0x38], 0x6f1cdee8
cmp qword [0x1400db698], 0
jne 0x1400805d0
syscall
mov r8, r8
ret

Function at 0x14004e8d0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140080896
xchg rbp, r10
mov rbp, rcx
xchg rbp, r10
mov eax, dword [0x1400db6d8]
cmp qword [0x1400db698], 0
xchg rbp, rbp
jne 0x1400805d0
syscall
ret

Function at 0x14004e8e0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140080ad8
xchg rdi, rcx
mov r10, rdi
xchg rcx, rdi
mov eax, dword [0x1400db710]
xchg rcx, rcx
cmp qword [0x1400db698], 0
jne 0x1400805d0
syscall
mov r9, r9
ret

Function at 0x14004e8f0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140080b5c
xchg r15, r10
mov r15, rcx
xchg r15, r10
mov eax, dword [0x1400db71c]
cmp qword [0x1400db698], 0
mov r11, r11
jne 0x1400805d0
syscall
ret
Function at 0x14004e900
Capabilities:
Execute syscall

Disassembly:
jmp 0x140080eb7
add rsp, 0xfffffffffffffee0
lea rcx, [0x140080638]
push rcx
xchg rbp, rbp
nop
mov qword [rsp - 8], rbp
sub rsp, 8
nop
mov qword [rsp - 8], rsi
sub rsp, 8
push rdi
mov dword [rsp - 0x28], 0x7e39dc08
push qword [0x1400db7b0]
lea rsi, [rsp + 0x170]
lea rdi, [rsp + 0x28]
mov ecx, 0x3a56d2dd
sub ecx, 0x299a5ff3
xor ecx, 0x1056be74
add ecx, 0x18fef8fc
sub ecx, 0x19e9c58a
rep movsq qword [rdi], qword [rsi]
jmp qword [0x1400db698]
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x1400db76c]
mov dword [rsp - 0x28], 0x3f1cb626
cmp qword [0x1400db698], 0
jne 0x1400805d0
syscall
ret

Function at 0x14004e910
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008071c
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x1400db6b4]
cmp qword [0x1400db698], 0
jne 0x1400805d0
mov dword [rsp - 0x38], esp
syscall
ret

Function at 0x14004e920
Capabilities:
Execute syscall

Disassembly:
jmp 0x140080e3c
mov r10, rcx
mov eax, dword [0x1400db760]
mov rbp, rbp
cmp qword [0x1400db698], 0
jne 0x1400805d0
syscall
xchg r10, r10
ret

Function at 0x14004e930
Capabilities:
Execute syscall

Disassembly:
jmp 0x140080de2
xchg rcx, rsp
mov r10, rsp
xchg rcx, rsp
mov eax, dword [0x1400db758]
cmp qword [0x1400db698], 0
mov rsp, rsp
jne 0x1400805d0
syscall
ret

Function at 0x14004e940
Capabilities:
Execute syscall

Disassembly:
jmp 0x140080e0b
xchg rsp, r10
mov rsp, rcx
xchg rsp, r10
mov eax, dword [0x1400db75c]
mov r9, r9
cmp qword [0x1400db698], 0
jne 0x1400805d0
syscall
mov dword [rsp - 0x38], 0x9ebed90
ret

Function at 0x14004e950
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400806f6
mov r10, rcx
mov eax, dword [0x1400db6b0]
xchg rsp, rsp
cmp qword [0x1400db698], 0
jne 0x1400805d0
syscall
mov r8, r8
ret

Function at 0x14004e960
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400808bf
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x1400db6dc]
cmp qword [0x1400db698], 0
xchg rbx, rbx
jne 0x1400805d0
syscall
ret

Function at 0x140057f68
Capabilities:
Hash data using murmur3

Disassembly:
push rax
mov qword [rsp], rbx
sub rsp, 0x20
mov dword [rsp - 0x1c], 0x2cd130c3
mov rbx, rdx
mov edx, 0x78fc10bf
xor edx, 0x7bc0f9c8
add edx, 0x2ffa6ce
add edx, 0xa3321049
call fcn.1400706c0
xchg rcx, r15
mov r15, rax
xchg rcx, r15
xor eax, eax
test rcx, rcx
je 0x140058055
mov dword [rsp - 0x44], 0x74e0d171
movabs rax, 0xf6d4e4c3390ec03a
sub rax, 0x215a9ab6
add rax, 0x12af03d1
sub rax, 0x16b9d14
add rax, 0x7fffffff
xor rax, 0x710ec42f
add rax, rcx
mov r15, r15
movabs rcx, 0x38d65da1114206a1
add rcx, 0xe90420
add rcx, 0x275d466e
sub rcx, 0x1d45563e
add rcx, 0x2aef987b
rol rax, 0xd
rol rax, 0x12
rol rax, 5
rol rax, 1
rol rax, 1
rol rax, 1
add rcx, rax
mov dword [rsp - 0x24], 0x75910090
mov al, 0x3e
sub al, 0x32
add al, 0x45
xor al, 0x1d
sub al, 0x4b
not rcx
mov dword [rsp - 0x28], edi
rol rcx, 0x13
rol rcx, 0xf
rol rcx, 2
rol rcx, 1
rol rcx, 1
mov qword [rbx + 0x228], rcx
mov r14, r14
add rsp, 0x20
nop
add rsp, 8
mov rbx, qword [rsp - 8]
ret