joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14004b980
Capabilities:
Execute syscall

Disassembly:
sahf
add al, 0
add byte [rax + rax + 0x44c7007e], al
and al, 0xe4
cwde
mov edi, 0x874d737b
in al, 0xc7
test dword [rdx - 0x24fffffc], esp
add byte [rsi], bl
push rdi
call rax
test rbx, rdx
movabs rbx, 0x3cbc34fffff6bde9
rcr r11d, 0x28
rcr r13d, 0x35
jge 0x14004bfd0
test edi, 0x98bc425e
cmp rdi, rdi
jmp 0x14004ba8f
ror byte [rbp + 0xa1d08b], 1
add byte [rcx + rax*2 + 0x1098f281], bl
pop rax
invalid
mov dword [rbp + 0x376], 0x1b00d1
mov dword [rbp + 0x37a], 0x7400cd
movabs rbx, 0x433ee30000051de9
jne 0x14004b791
jmp 0x14004bcb3
je 0x14004b791
call fcn.14004b7ac
add rsp, 0x6b
jmp 0x14004bcb1
mov dword [rbp + 0x372], 0x7900ca
mov r8, r8
mov dword [rsp - 0x2c], 0x5cc09b95
jne 0x14004b901
je 0x14004b901
or esi, 0x218f6e3a
rol r8d, 0x56
jns 0x14004b5d4
rol r9d, 0x22
pop r12
syscall
call rax
and esi, 0xbc6dffba
jl 0x14004b28f
jmp 0x14004c425
jmp 0x14004b636
mov dword [rbp + 0x33a], 0x6d00c0
mov dword [rbp + 0x33e], 0x4900d5
mov dword [rsp - 0x30], ebx
xchg r11, r11
mov dword [rbp + 0x342], 0x3a00c1
mov dword [rbp + 0x346], 0x7f00fd
mov dword [rbp + 0x34a], 0x790084
jmp 0x14004bb12
invalid
call 0x14004b980
add rsp, 0x6b
pop rcx
je 0x14004b99a
jne 0x14004b99a
cmp r8d, 0xad580cf1
pause
syscall
pop rdi
xor r12d, 0xe77cf9eb
call rcx
call rax
rol r14d, 0xea
movabs r13, 0x349ea200000538e9
pushfq
div r11
add edx, 0xac2bdf35
and edx, 0x6e295103
lea r10d, [rbx - 0xf504]
cmp r11d, 0x68310f2e
ret 0x20
jmp 0x14004bed7
ror dword [rdi], 1
add byte [rax], al
pushfq
cmp rsi, rdi
sub r10d, 0x20aa9a2e
cmp r15, rdx
lea r10d, [rdx + 0xfc31]
movabs r11, 0x12b908fffffc6ee9
jp 0x14004c1b7
rol r12d, 0x34
call rcx
sub r12d, 0xe5da280a
call fcn.14004c051
mov dword [rbp + 0x34e], 0x5500d5
mov dword [rsp - 0x3c], edx
mov r10, r10
push rcx
movabs rcx, 0x529858000003ade9
jne 0x14004bb26
jmp 0x14004bed8
je 0x14004bb26
je 0x14004bb46
jne 0x14004bb46
and ecx, 0xcdb5fe1e
je 0x14004b1fd
jmp rcx
jmp 0x14004b96f
pop rbx
ret
pop rbx
mov dword [rbp + 0x336], 0x4900d5
jmp 0x14004b913
mov r13, r13
mov dword [rbp + 0x36a], 0x6e00c1
mov dword [rbp + 0x36e], 0x540094
je 0x14004be64
jne 0x14004be64
jmp rcx
jmp 0x14004b8a7
ret
pop rcx
xchg rbp, rbp
mov dword [rbp + 0x352], 0x750084
jmp 0x14004beeb
mov dword [rbp + 0x356], 0x5700da
mov dword [rbp + 0x35a], 0x3a00dd
mov dword [rsp - 0x14], 0x467e90ed
nop
jle 0x14004bf4d
jmp 0x14004bfa9
mov dword [rsp - 0x1c], edi
mov dword [rsp - 0x30], 0x32720197
mov dword [rbp + 0x35e], 0x5e00d6
mov dword [rbp + 0x362], 0x680084
mov dword [rbp + 0x366], 0x4800d1
add byte [rax], cl
xchg r8, r8
je 0x14004bff1
jne 0x14004bff1
xor r9d, 0x840ff1c4
inc r13
call fcn.14004b957
cmp ebx, 0x7262c7d6
movabs r9, 0xc76fafffffe3ee9
cmp rdi, rbp
jmp 0x14004bfe0
test byte [rcx - 1], cl
invalid
jmp 0x14004be34
test edx, esp
add eax, dword [rax]
add byte [rax + rax - 0x7a38ff8c], al
out 3, al
add byte [rax], al
fild dword [rax]
add dil, r8b
test edx, ebp
add eax, dword [rax]
add byte [rax + rax - 0x7a38ff96], al
out dx, al
add eax, dword [rax]
add dh, al
add byte [rax + rax + 0x4d], dl
xchg ecx, ecx
invalid
Function at 0x14004bf04
Capabilities:
Execute syscall

Disassembly:
sahf
add al, 0
add byte [rax + rax + 0x44c7007e], al
and al, 0xe4
cwde
mov edi, 0x874d737b
in al, 0xc7
test dword [rdx - 0x24fffffc], esp
add byte [rsi], bl
push rdi
call rax
test rbx, rdx
movabs rbx, 0x3cbc34fffff6bde9
rcr r11d, 0x28
rcr r13d, 0x35
jge 0x14004bfd0
test edi, 0x98bc425e
cmp rdi, rdi
jmp 0x14004ba8f
ror byte [rbp + 0xa1d08b], 1
add byte [rcx + rax*2 + 0x1098f281], bl
pop rax
invalid
mov dword [rbp + 0x376], 0x1b00d1
mov dword [rbp + 0x37a], 0x7400cd
movabs rbx, 0x433ee30000051de9
jne 0x14004b791
jmp 0x14004bcb3
je 0x14004b791
call fcn.14004b7ac
add rsp, 0x6b
jmp 0x14004bcb1
mov dword [rbp + 0x372], 0x7900ca
mov r8, r8
mov dword [rsp - 0x2c], 0x5cc09b95
jne 0x14004b901
je 0x14004b901
or esi, 0x218f6e3a
rol r8d, 0x56
jns 0x14004b5d4
rol r9d, 0x22
pop r12
syscall
call rax
and esi, 0xbc6dffba
jl 0x14004b28f
jmp 0x14004c425
jmp 0x14004b636
mov dword [rbp + 0x33a], 0x6d00c0
mov dword [rbp + 0x33e], 0x4900d5
mov dword [rsp - 0x30], ebx
xchg r11, r11
mov dword [rbp + 0x342], 0x3a00c1
mov dword [rbp + 0x346], 0x7f00fd
mov dword [rbp + 0x34a], 0x790084
jmp 0x14004bb12
invalid
call 0x14004b980
add rsp, 0x6b
pop rcx
je 0x14004b99a
jne 0x14004b99a
cmp r8d, 0xad580cf1
pause
syscall
pop rdi
xor r12d, 0xe77cf9eb
call rcx
call rax
rol r14d, 0xea
movabs r13, 0x349ea200000538e9
pushfq
div r11
add edx, 0xac2bdf35
and edx, 0x6e295103
lea r10d, [rbx - 0xf504]
cmp r11d, 0x68310f2e
ret 0x20
jmp 0x14004bed7
ror dword [rdi], 1
add byte [rax], al
pushfq
cmp rsi, rdi
sub r10d, 0x20aa9a2e
cmp r15, rdx
lea r10d, [rdx + 0xfc31]
movabs r11, 0x12b908fffffc6ee9
jp 0x14004c1b7
rol r12d, 0x34
call rcx
sub r12d, 0xe5da280a
call fcn.14004c051
mov dword [rbp + 0x34e], 0x5500d5
mov dword [rsp - 0x3c], edx
mov r10, r10
push rcx
movabs rcx, 0x529858000003ade9
jne 0x14004bb26
jmp 0x14004bed8
je 0x14004bb26
je 0x14004bb46
jne 0x14004bb46
and ecx, 0xcdb5fe1e
je 0x14004b1fd
jmp rcx
jmp 0x14004b96f
pop rbx
ret
pop rbx
mov dword [rbp + 0x336], 0x4900d5
jmp 0x14004b913
mov r13, r13
mov dword [rbp + 0x36a], 0x6e00c1
mov dword [rbp + 0x36e], 0x540094
je 0x14004be64
jne 0x14004be64
jmp rcx
jmp 0x14004b8a7
ret
pop rcx
xchg rbp, rbp
mov dword [rbp + 0x352], 0x750084
jmp 0x14004beeb
mov dword [rbp + 0x356], 0x5700da
mov dword [rbp + 0x35a], 0x3a00dd
mov dword [rsp - 0x14], 0x467e90ed
nop
jle 0x14004bf4d
jmp 0x14004bfa9
mov dword [rsp - 0x1c], edi
mov dword [rsp - 0x30], 0x32720197
mov dword [rbp + 0x35e], 0x5e00d6
mov dword [rbp + 0x362], 0x680084
mov dword [rbp + 0x366], 0x4800d1
add byte [rax], cl
xchg r8, r8
je 0x14004bff1
jne 0x14004bff1
xor r9d, 0x840ff1c4
inc r13
call fcn.14004b957
cmp ebx, 0x7262c7d6
movabs r9, 0xc76fafffffe3ee9
cmp rdi, rbp
jmp 0x14004bfe0
test byte [rcx - 1], cl
invalid
jmp 0x14004be34
test edx, esp
add eax, dword [rax]
add byte [rax + rax - 0x7a38ff8c], al
out 3, al
add byte [rax], al
fild dword [rax]
add dil, r8b
test edx, ebp
add eax, dword [rax]
add byte [rax + rax - 0x7a38ff96], al
out dx, al
add eax, dword [rax]
add dh, al
add byte [rax + rax + 0x4d], dl
xchg ecx, ecx
invalid
Function at 0x14004e105
Capabilities:
Execute syscall

Disassembly:
push 0x41e0ff84
add eax, 0x7a7681d6
mov edx, 0xdd04f243
dec r12
jnp 0x14004ebeb
rcr ebx, 0x86
lea esi, [rdi - 0x2f3c]
lea ebx, [rdx - 0x2d61]
int3

Function at 0x140050ce6
Capabilities:
Execute syscall

Disassembly:
fld1
fidiv dword [rsi]
or eax, dword [rax]
xorps xmm0, xmm0
mov dword [rsp - 0x14], 0x4b27f072
xchg rsi, rsi
mov rsp, rsp
pop r12
test ecx, ecx
jmp 0x140050d58
mov r11, r11
mov dword [rsp - 0x40], esi
mov dword [rsp - 0x28], 0x2b3b8c72
mov rdx, rdx
mov dword [rsp - 0x30], esi
call qword [rax]
mov qword [rbx + 0x970], rsi
jmp 0x140050d22
cmp rcx, rdi
jne 0x140050d7c
xor eax, eax
mov dword [rsp - 0x40], 0x34eacae7
mov dword [rsp - 0x10], 0x42ede0ed
mov ecx, 0x30
rep stosb byte [rdi], al
jmp 0x140050d53
mov rcx, qword [rbx + 0x928]
mov r13, r13
mov dword [rsp - 0x24], 0xc8c1007
lea rdi, [rbx + 0x930]
jmp 0x140050cfb
jg 0x140050cef
mov rax, qword [rcx]
mov edx, 1
jmp 0x140050cd7
jmp 0x140050d81
mov dword [rsp - 0x2c], 0x7b1f2562
je 0x140050d22
dec dword [rcx + 8]
cmp dword [rcx + 8], esi
xchg rbx, rbx
mov dword [rsp - 0x28], 0x1700d96c
jmp 0x140050d40
call fcn.1400999a0
mov rcx, qword [rbx + 0x900]
mov dword [rsp - 0x38], 0x5d979356
mov dword [rsp - 0x3c], 0x58412e38
mov dword [rsp - 0x34], 0x1ec468e7
jmp 0x140050e09
push r10
movabs r10, 0x50a400000118e9
jne 0x140050da9
jmp 0x140050ec6
je 0x140050da9
call fcn.140050f9a
add rsp, 0x6c
pop r10
jmp 0x140050ec5
mov rax, qword [rdi + 0x78]
cmp rax, 0x78
jbe 0x140050ed2
mov rcx, qword [rdi]
mov dword [rsp - 0x20], 0x42af368
xchg r10, r10
mov dword [rsp - 0x28], esp
jmp 0x140050dea
xor edx, edx
mov rax, qword [rcx]
call qword [rax]
mov rcx, qword [rdi]
mov dword [rsp - 0x30], 0x635514b7
mov dword [rsp - 0x10], 0x5dc26636
jmp 0x140050da5
mov dword [rsp - 0x28], 0x4c8e0437
test rcx, rcx
je 0x140050eae
dec dword [rcx + 8]
cmp dword [rcx + 8], esi
jne 0x140050e52
je 0x140050e52
rol ebp, 0x5e
je 0x1400515a3
ja 0x14005199b
xor edi, 0x751a3e
call rax
pushf
jae 0x1400507da
pop rdi
jne 0x140051690
jno 0x140050cd0
movabs r13, 0x502832a5606727eb
push r9
inc rdi
call fcn.1400500f7
call rcx
cmp r12d, 0x7a3f572d
rcr ecx, 0x71
jle 0x14004ff08
jmp 0x140050e7b
syscall
ret 0x28
mov dword [rsp - 0x28], ebp
jg 0x140050ea7
mov rax, qword [rcx]
mov edx, 1
invalid
and al, 0xc4
repe cmpsb byte [rsi], byte [rdi]

Function at 0x140051ce1
Capabilities:
Execute syscall

Disassembly:
dec dword [rax - 9]
fild dword [rcx - 0x3311e903]
push rax
add byte [rax - 0x75], cl
add edi, eax
and al, 0xec
int 0xec
invalid
inc dword [rcx - 0x67d9a017]
cmpsd dword [rsi], dword [rdi]
ret
jne 0x140051e7b
je 0x140051e7b
call 0x140051d4b
add rsp, 0x20
pop r12
ret
ror dword [rax - 0x41], cl
jmp 0x140052000
fucomi st(1)
invalid
jmp 0x140051f1a
jne 0x140052015
mov dword [rsp - 0x20], 0x72f3d505
mov r13, r13
mov dword [rsp - 0x3c], 0x2aebe075
mov dword [rsp - 0x14], 0x1e80a7ea
je 0x140051d48
jne 0x140051d48
neg rdi
dec r12
call rcx
mov edx, 0xb4b43a2a
sub ebx, 0x3bdd13b9
jge 0x1400523c1
rol esi, 0xe9
rcr r13d, 0xb7
cpuid
call rax
lea esi, [rdx + 0x3d02]
rol r10d, 0x9d
test r14d, 0x315eab83
jg 0x1400518cb
movabs r11, 0x25ea0c00000127e9
invalid
jmp 0x140051e74
Function at 0x140053a71
Capabilities:
Encode data using xor

Disassembly:
or esi, 0x1379160a
call fcn.1400536ee
pop r11
ret
pop r11
jmp fcn.140053afb
je 0x140053da3
push r11
movabs r11, 0xe238eba35fba1eb
jne 0x140053c0e
jmp 0x140053bb1
je 0x140053c0e
call fcn.140053db5
add rsp, 0x78
jmp 0x140053bae
lea rdx, [rbp - 0x58]
xorps xmm0, xmm0
mov dword [rsp - 0x18], edi
jmp fcn.140053a94

Function at 0x140054b10
Capabilities:
Encode data using xor

Disassembly:
xchg r9, rbx
mov qword [rsp + 8], r9
xchg rbx, r9
nop
sub rsp, 8
mov qword [rsp], rdi
add rsp, 0xffffffffffffffe0
xchg rbx, r15
mov r15, rdx
xchg rbx, r15
xchg rcx, rdi
mov rcx, rdi
xchg rdi, rcx
nop
movabs rdx, 0xffffffff33592725
add rdx, 0x3ebf012
add rdx, 0x503f65e
add rdx, 0x7fffffff
xor rdx, 0x43b6f26b
nop word [rax + rax]
inc rdx
mov dword [rsp - 0x10], esp
cmp word [rbx + rdx*2], 0
jne 0x140054b6a
xchg rdx, r11
mov qword [rcx + 0x38], r11
xchg rdx, r11
call fcn.140017bbc
xor r8d, r8d
mov edx, 0x3bfbea95
sub edx, 0x23ac0bf8
add edx, 0x40a5098b
xor edx, 0x6340f28c
Function at 0x140054f60
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rdi
mov qword [rsp + 8], rdi
xchg rbx, rdi
mov qword [rsp + 0x10], rbp
mov dword [rsp - 0x44], 0x7d1f560d
xchg rsi, r12

Function at 0x1400552f0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdi, rsi
mov qword [rsp + 0x10], rdi
xchg rsi, rdi
nop
sub rsp, 8
mov qword [rsp], rdi
nop
sub rsp, 0x579305f3
add rsp, 0x579305d3
xchg rsp, rsi
mov rsp, qword [rcx + 0x38]
xchg rsp, rsi
xchg rdx, rbx
mov rdx, rbx
xchg rbx, rdx
xchg rsi, r8
mov rsi, qword [rdx + 0x38]
xchg rsi, r8
xchg rdx, rdi
mov rdx, rcx
xchg rdx, rdi
add r8, rsi
mov rdx, rsi
xchg r8, rsp
mov qword [rcx + 0x38], rsp
xchg rsp, r8
call fcn.140055fb0
xchg r9, r11
mov r11, qword [rbx]
xchg r9, r11
mov ecx, esi
and ecx, 3
mov dword [rsp - 0x3c], 0x3d8675f9
mov r8d, 0x4c9d7ae
add r8d, 0x59cfaf4
add r8d, 0x4373902e
sub r8d, 0x1c053f4d
xor r8d, 0xa613927
shl ecx, 2
shl ecx, 1
mov edx, r8d
mov dword [rsp - 0x20], 0x5095fcab
ror edx, cl
mov r10, rax
xor ecx, ecx
mov r12, r12
cmp qword [rbx + 0x38], rcx
jbe 0x140055438
lea rax, [rsi + rsi]
xchg r11, r11
mov r11d, 0x57c4ccff
sub r11d, 0x42882005
add r11d, 0x1f9473ba
sub r11d, 0x1a646ee1
sub r11d, 0x1a6cb0d4
sub rax, r9
xchg rcx, rcx
add r10, rax
nop dword [rax]
movzx eax, dx
lea r9, [r9 + 2]
mov dword [rsp - 0x30], 0x52ce118e
xor ax, r8w
ror edx, 5
ror edx, 1
ror edx, 1
ror edx, 1
and ax, r11w
ror r8d, 2
ror r8d, 1
ror r8d, 3
ror r8d, 1
ror r8d, 1
xor ax, word [r9 - 2]
mov dword [rsp - 0x24], 0x699de882
inc rcx
mov word [r10 + r9 - 2], ax
cmp rcx, qword [rbx + 0x38]
xchg rsi, rsi
jb 0x1400553e4
mov rbx, qword [rsp + 0x30]
xchg rdi, rdx
mov rax, rdx
xchg rdi, rdx
xchg rdi, rsi
mov rdi, qword [rsp + 0x38]
xchg rdi, rsi
neg rsp
add rsp, 0xffffffffffffffe0
neg rsp
pop rdi
ret

Function at 0x140055460
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r12
mov qword [rsp + 8], r12
xchg rbx, r12
xchg rsi, rcx
mov qword [rsp + 0x10], rcx
xchg rcx, rsi
Function at 0x140055d30
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
nop
mov qword [rsp - 8], rsi
sub rsp, 8
push rdi
mov rsi, rsi
nop
sub rsp, 8
mov qword [rsp], r14
nop
add rsp, 0x1c9875d4
sub rsp, 0x1c9875f4
lea rsi, [rdx + 8]
xorps xmm0, xmm0
xchg r14, r14
mov qword [rdx], rsi
xor edi, edi
movups xmmword [rsi], xmm0
mov rbx, rbx
mov r14, r9
xchg rbp, r8
mov r8, rbp
xchg rbp, r8
movups xmmword [rsi + 0x10], xmm0
xchg r9, rdx
mov rbx, r9
xchg r9, rdx
movups xmmword [rsi + 0x20], xmm0
xchg r14, rdi
mov qword [rdx + 0x38], r14
xchg rdi, r14
xchg r9, rax
mov r9, qword [rcx + 0x38]
xchg r9, rax
cmp r8, rax
jae 0x140055f50
sub rax, r8
mov dword [rsp - 0xc], 0x8ab208c
xchg r15, r11
mov qword [rsp + 0x40], r11
xchg r15, r11
cmp rax, r9
cmovb r14, rax
mov qword [rdx + 0x38], r14
mov rsp, rsp
mov rax, qword [rcx]
mov rcx, qword [rdx]
lea r15, [rax + r8*2]
xchg rdx, rdx
cmp rcx, rsi
je 0x140055dec
call fcn.1400999a0
cmp r14, 0x18
mov rsp, rsp
jbe 0x140055e34
lea rcx, [r14 + r14]
call fcn.140099bc0
mov dword [rsp - 0x44], 0x265a7bb5
xchg rdx, rax
mov qword [rbx], rdx
xchg rdx, rax
test rax, rax
jne 0x140055e41
mov r13, r13
xchg rsi, r14
mov qword [rbx], r14
xchg r14, rsi
xchg rdi, r9
mov rdi, r9
xchg rdi, r9
jmp 0x140055e59
mov qword [rbx], rsi
xchg r15, r15
xchg rsi, rax
mov rsi, rax
xchg rsi, rax
xorps xmm0, xmm0
mov dword [rsp - 0x2c], esi
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
xchg r10, r10
mov r9, qword [rbx]
and ebp, 3
mov r8d, 0x1ea0d5a4
sub r8d, 0xee7d2de
xor r8d, 0x37570ad6
xor r8d, 0x35a12b4
shl ebp, 1
shl ebp, 1
shl ebp, 1
mov edx, r8d
mov rsp, rsp
movzx ecx, bpl
ror edx, cl
cmp qword [rbx + 0x38], rdi
jbe 0x140055f0c
mov rdi, rdi
sub r15, r9
mov ecx, 0x14f74848
sub ecx, 0xf765ac6
add ecx, 0x25053579
add ecx, 0x47e84d80
sub ecx, 0x726e6f7c
nop dword [rax]
nop word [rax + rax]
xchg r9, r9
movzx eax, dx
lea r9, [r9 + 2]
xor ax, r8w
xchg rcx, rcx
ror edx, 4
ror edx, 1
ror edx, 1
ror edx, 2
and ax, cx
ror r8d, 2
ror r8d, 2
ror r8d, 4
xor ax, word [r15 + r9 - 2]
xchg r15, r15
inc rdi
mov word [r9 - 2], ax
cmp rdi, qword [rbx + 0x38]
mov dword [rsp - 0x38], esi
jb 0x140055ec6
mov r15, qword [rsp + 0x40]
xchg r13, rax
mov r13, rbx
xchg r13, rax
mov rbx, qword [rsp + 0x48]
mov r13, r13
mov rbp, qword [rsp + 0x50]
nop
add rsp, 0x3529a4f7
sub rsp, 0x3529a4d7
nop
mov r14, qword [rsp]
add rsp, 8
nop
mov rdi, qword [rsp]
add rsp, 8
nop
mov rsi, qword [rsp]
add rsp, 8
ret
xchg rcx, rax
mov rcx, rbx
xchg rcx, rax
jmp 0x140055f18

Function at 0x140056330
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e673
mov r10, rcx
mov eax, dword [0x140143f30]
mov r8, r8
cmp qword [0x140144018], 0
jne 0x14008e3f0
syscall
ret

Function at 0x140056350
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x28]
mov byte [rsp + 0x28], al
mov dword [rsp - 0x14], 0x60c886c6
jmp 0x14008ecc4
xchg r11, r10
mov r11, rcx
xchg r11, r10
mov eax, dword [0x140143fc8]
mov dword [rsp - 0xc], 0x7901f9b7
cmp qword [0x140144018], 0
jne 0x14008e3f0
syscall
mov rcx, rcx
ret
Function at 0x140056370
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e471
mov r10, rcx
mov dword [rsp - 0x3c], 0x39f00d12
mov eax, dword [0x140143f00]
cmp qword [0x140144018], 0
jne 0x14008e3f0
syscall
xchg r11, r11
ret

Function at 0x140056380
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ea0a
xchg rbx, r10
mov rbx, rcx
xchg r10, rbx
mov eax, dword [0x140143f88]
cmp qword [0x140144018], 0
xchg rdx, rdx
jne 0x14008e3f0
syscall
ret

Function at 0x140056390
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e8b8
xchg rcx, r13
mov r10, r13
xchg r13, rcx
mov eax, dword [0x140143f68]
mov dword [rsp - 0x44], edx
cmp qword [0x140144018], 0
jne 0x14008e3f0
syscall
ret

Function at 0x1400563a0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e4cf
xchg r12, r10
mov r12, rcx
xchg r10, r12
mov eax, dword [0x140143f08]
mov dword [rsp - 0x14], edx
cmp qword [0x140144018], 0
jne 0x14008e3f0
syscall
mov r11, r11
ret

Function at 0x1400563b0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008eb3e
xchg r8, rcx
mov r10, r8
xchg rcx, r8
mov eax, dword [0x140143fa4]
mov dword [rsp - 0xc], 0x1721b0cd
cmp qword [0x140144018], 0
jne 0x14008e3f0
syscall
xchg r8, r8
ret

Function at 0x1400563c0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008eb6f
xchg r13, r10
mov r13, rcx
xchg r13, r10
mov eax, dword [0x140143fa8]
mov dword [rsp - 0x24], 0x1212e8cf
cmp qword [0x140144018], 0
jne 0x14008e3f0
syscall
ret

Function at 0x1400563d0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ea8a
xchg r10, rsi
mov rsi, rcx
xchg rsi, r10
mov eax, dword [0x140143f94]
mov dword [rsp - 0x40], 0x339cf2df
cmp qword [0x140144018], 0
jne 0x14008e3f0
syscall
mov r8, r8
ret

Function at 0x1400563e0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008eabb
mov r10, rcx
mov eax, dword [0x140143f98]
mov dword [rsp - 0x44], 0x2a4a6e46
cmp qword [0x140144018], 0
jne 0x14008e3f0
syscall
ret

Function at 0x1400563f0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e696
xchg r9, rcx
mov r10, r9
xchg r9, rcx
mov eax, dword [0x140143f34]
cmp qword [0x140144018], 0
xchg rsi, rsi
jne 0x14008e3f0
syscall
ret

Function at 0x140056400
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e95c
xchg rcx, r12
mov r10, r12
xchg rcx, r12
mov eax, dword [0x140143f78]
xchg r12, r12
cmp qword [0x140144018], 0
jne 0x14008e3f0
syscall
mov dword [rsp - 0x3c], 0x498d3c88
ret

Function at 0x140056410
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e9b3
xchg r14, r10
mov r14, rcx
xchg r14, r10
mov eax, dword [0x140143f80]
cmp qword [0x140144018], 0
mov dword [rsp - 0x14], 0x64dc4289
jne 0x14008e3f0
syscall
ret

Function at 0x140056420
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e4a0
mov r10, rcx
xchg rsp, rsp
mov eax, dword [0x140143f04]
cmp qword [0x140144018], 0
jne 0x14008e3f0
mov dword [rsp - 0x28], 0x460506bf
syscall
ret

Function at 0x140056430
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ea33
xchg r10, rdi
mov rdi, rcx
xchg r10, rdi
mov eax, dword [0x140143f8c]
mov dword [rsp - 0x30], edi
cmp qword [0x140144018], 0
jne 0x14008e3f0
syscall
mov dword [rsp - 0x34], esi
ret
Function at 0x140056440
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e85e
xchg r13, r10
mov r13, rcx
xchg r10, r13
mov eax, dword [0x140143f60]
cmp qword [0x140144018], 0
jne 0x14008e3f0
mov rbp, rbp
syscall
ret

Function at 0x140056450
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e887
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140143f64]
mov dword [rsp - 0x28], 0x1881aace
cmp qword [0x140144018], 0
jne 0x14008e3f0
syscall
mov rsi, rsi
ret

Function at 0x140056460
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e714
mov r10, rcx
mov eax, dword [0x140143f40]
mov dword [rsp - 0x24], ebx
cmp qword [0x140144018], 0
jne 0x14008e3f0
syscall
xchg r8, r8
ret

Function at 0x140056470
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x58]
mov byte [rsp + 0x58], al
xchg rdi, rdi
movzx eax, byte [rsp + 0x48]
mov byte [rsp + 0x48], al
jmp 0x14008ec96
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140143fc4]
cmp qword [0x140144018], 0
mov dword [rsp - 0x18], 0x30956a8f
jne 0x14008e3f0
syscall
ret

Function at 0x140056490
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e5a3
mov r10, rcx
mov dword [rsp - 0x28], 0x24d3e310
mov eax, dword [0x140143f1c]
cmp qword [0x140144018], 0
jne 0x14008e3f0
syscall
mov dword [rsp - 0x34], esi
ret

Function at 0x1400564a0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e5cf
xchg rdx, rcx
mov r10, rdx
xchg rdx, rcx
mov eax, dword [0x140143f20]
xchg r14, r14
cmp qword [0x140144018], 0
jne 0x14008e3f0
syscall
ret

Function at 0x1400564b0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e5f8
mov r10, rcx
mov eax, dword [0x140143f24]
mov dword [rsp - 0x20], esi
cmp qword [0x140144018], 0
jne 0x14008e3f0
syscall
ret

Function at 0x1400564c0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e61c
xchg rdx, rcx
mov r10, rdx
xchg rdx, rcx
mov eax, dword [0x140143f28]
cmp qword [0x140144018], 0
jne 0x14008e3f0
mov dword [rsp - 0x10], 0x184584b7
syscall
ret

Function at 0x1400564d0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e577
xchg r9, r10
mov r9, rcx
xchg r10, r9
mov eax, dword [0x140143f18]
xchg r13, r13
cmp qword [0x140144018], 0
jne 0x14008e3f0
syscall
mov r8, r8
ret

Function at 0x1400564e0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008eae3
xchg rcx, r12
mov r10, r12
xchg r12, rcx
mov eax, dword [0x140143f9c]
mov dword [rsp - 0x2c], ebx
cmp qword [0x140144018], 0
jne 0x14008e3f0
syscall
mov dword [rsp - 0x1c], 0x1e5f7625
ret

Function at 0x1400564f0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e64a
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140143f2c]
cmp qword [0x140144018], 0
xchg r13, r13
jne 0x14008e3f0
syscall
ret

Function at 0x140056500
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e4fc
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140143f0c]
cmp qword [0x140144018], 0
mov rbp, rbp
jne 0x14008e3f0
syscall
ret

Function at 0x140056510
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e6bf
mov r10, rcx
mov eax, dword [0x140143f38]
mov dword [rsp - 0x2c], 0xd89c07
cmp qword [0x140144018], 0
jne 0x14008e3f0
syscall
mov dword [rsp - 0x2c], esi
ret
Function at 0x140056520
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e906
xchg r10, r8
mov r8, rcx
xchg r8, r10
mov eax, dword [0x140143f70]
cmp qword [0x140144018], 0
jne 0x14008e3f0
mov dword [rsp - 0x10], 0x71d55bd
syscall
ret

Function at 0x140056530
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e98d
mov r10, rcx
mov eax, dword [0x140143f7c]
xchg rdi, rdi
cmp qword [0x140144018], 0
jne 0x14008e3f0
syscall
mov r12, r12
ret

Function at 0x140056550
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e54f
mov r10, rcx
mov eax, dword [0x140143f14]
cmp qword [0x140144018], 0
mov dword [rsp - 0x10], 0x4a95bc9
jne 0x14008e3f0
syscall
ret

Function at 0x140056560
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ec6d
xchg r10, rbx
mov rbx, rcx
xchg rbx, r10
mov eax, dword [0x140143fc0]
cmp qword [0x140144018], 0
xchg rsi, rsi
jne 0x14008e3f0
syscall
ret

Function at 0x140056570
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008eb15
xchg r8, rcx
mov r10, r8
xchg r8, rcx
mov eax, dword [0x140143fa0]
mov rbp, rbp
cmp qword [0x140144018], 0
jne 0x14008e3f0
syscall
ret

Function at 0x140056580
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ec1a
xchg r8, rcx
mov r10, r8
xchg r8, rcx
mov eax, dword [0x140143fb8]
cmp qword [0x140144018], 0
mov dword [rsp - 0x40], edx
jne 0x14008e3f0
syscall
ret

Function at 0x140056590
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e9e1
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140143f84]
mov rsp, rsp
cmp qword [0x140144018], 0
jne 0x14008e3f0
syscall
ret

Function at 0x1400565a0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ec44
xchg rbp, rcx
mov r10, rbp
xchg rbp, rcx
mov eax, dword [0x140143fbc]
cmp qword [0x140144018], 0
mov r11, r11
jne 0x14008e3f0
syscall
ret

Function at 0x1400565b0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e525
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140143f10]
mov dword [rsp - 0x20], ebx
cmp qword [0x140144018], 0
jne 0x14008e3f0
syscall
ret

Function at 0x1400565c0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e6eb
xchg r10, r13
mov r13, rcx
xchg r10, r13
mov eax, dword [0x140143f3c]
cmp qword [0x140144018], 0
jne 0x14008e3f0
mov r15, r15
syscall
ret