joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14004ab95
Capabilities:
Encode data using xor

Disassembly:
mov dword [rbp + 0x16c], 0x1b0094
mov dword [rsp - 0x34], 0x1ed7ee1a
mov dword [rsp - 0x38], 0x5cd0eb57
mov dword [rsp - 0x10], esp
mov dword [rbp + 0x170], 0x40006c
jmp 0x14004a4d5
add rax, rsi
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
cmp rax, 0x20
mov dword [rsp - 0x28], 0x74fd8a09
mov r13, r13
mov dword [rsp - 0x18], 0x69d95119
jmp 0x14004a26e
mov dword [rsp - 0x30], 0x706f3d95
mov dword [rsp - 0x30], 0x2e17c25e
mov dword [rsp - 0x1c], 0x2577f148
jb 0x14004a4df
rcr byte [rsi - 0x3e], 1
invalid
jmp 0x14004ab85
mov rax, qword [rsp + 0x40]
push r12
movabs r12, 0x654b380000074fe9
jne 0x14004a29a
jmp 0x14004a9ee
jne 0x14004a2d4
je 0x14004a2d4
call rax
pop r10
jmp 0x1400498fc
jmp 0x14004aac7
mov dword [rbp + 0x332], 0x2100c6
push r11
movabs r11, 0x1f671900000587e9
jne 0x14004a390
jmp 0x14004a91c
je 0x14004a390
call fcn.14004a341
add rsp, 0x2f
jmp 0x14004a919
outsd dx, dword [rsi]
invalid
add byte [rax], al
mov dword [rsp - 0x24], 0x6e267547
mov eax, r12d
shr eax, cl
movzx ecx, al
mov rax, qword [rsp + 0x40]
mov rbp, rbp
je 0x14004a41f
jne 0x14004a41f
sub r10d, 0x88b166d0
call rax
ror ebp, 0xed
jmp rcx
jmp 0x14004a811
add rsp, 0x2f
pop r11
ret
pop r11
mov dword [rbp + 0x32e], 0x400076
xchg r13, r13
jmp 0x14004a9d3
shl cl, 3
movzx edx, word [rbp + rax*2 + 0x134]
mov dword [rsp - 0x44], 0x254bc1dc
mov dword [rsp - 0x10], esi
jmp 0x14004a3c6
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x40]
mov dword [rsp - 0x34], 0x1cad2bda
mov r9, r9
mov dword [rsp - 0x28], 0x6adde96
jne 0x14004a50a
je 0x14004a50a
lea r12d, [rbp - 0xd86a]
jmp 0x14004a291
mov rax, qword [rsp + 0x40]
mov dword [rsp - 0x38], esi
xchg rbx, rbx
jmp 0x14004a1ae
mov dword [rsp - 0x10], 0x760ae1ee
mov dword [rsp - 0x20], 0x1de6f450
xor cx, dx
mov word [rbp + rax*2 + 0xb22], cx
je 0x14004a86d
jne 0x14004a86d
test edx, 0x7c18db90
js 0x14004a279
jbe 0x140049c55
inc rbx
jmp rax
jmp 0x14004a58d
mov dword [rsp - 0xc], 0x2e2df1cb
mov dword [rbp + 0x160], 0x410066
mov dword [rbp + 0x164], 0x1d0083
mov dword [rbp + 0x168], 0x770023
jmp 0x14004a10f
pop r11
ret
pop r11
mov dword [rbp + 0x336], 0x400062
jmp 0x14004aadb
mov dword [rsp - 0x20], 0x6ad58c8e
mov dword [rsp - 0x24], 0x5231a9de
xchg r13, r13
jmp 0x14004a382
pop r12
ret
pop r12
and cl, r15b
jmp 0x14004a48a
mov dword [rbp + 0x346], 0x76004a
je 0x14004a29a
call fcn.14004ac7b
add rsp, 0x2f
jmp 0x14004a9eb
mov dword [rbp + 0x33a], 0x1e0082
mov dword [rsp - 0x10], 0x662c43b1
mov dword [rsp - 0x24], 0x4c98d845
mov dword [rsp - 0x44], 0x19f77248
mov dword [rsp - 0x44], 0x532ebee7
and al, 0xbc
out 0xbe, eax
push rbx
mov dword [rbp + 0x33e], 0x400062
mov dword [rbp + 0x342], 0x490083
jmp 0x14004aa13
mov word [rbp + 0xb62], bx
mov dword [rbp + 0x32a], 0x600bf
push r11
movabs r11, 0x30c775fffff8d7e9
jne 0x14004ab9a
jmp 0x14004a476
je 0x14004ab9a
call 0x14004ab95
jmp 0x14004a46f
Function at 0x14004ea9b
Capabilities:
Execute syscall

Disassembly:
xchg rbp, rbp
mov dword [rsp - 0x44], 0x30040f71
mov dword [rsp - 0x18], 0x55e71775
jmp 0x14004eafd
add byte [rax], al
invalid
add byte [rax], al
add byte [rax - 0x73], cl
test dword [rax + 7], ebx
add byte [rax], al
cmp rcx, rax
jne 0x14004eaf8
lea rdi, [rbp + 0x758]
mov dword [rsp - 0xc], 0x13f93684
jmp 0x14004eac2
mov dword [rsp - 0x18], 0x1d6a7f53
mov dword [rsp - 0x10], 0x422335c3
xor eax, eax
mov rcx, r12
rep stosb byte [rdi], al
jne 0x14004eae1
je 0x14004eae1
syscall
movabs r11, 0x33348ee02850a3eb
inc r10
and r11d, 0xeb5edcea
jmp fcn.14004eba0
jmp 0x14004ea86
call fcn.140098600
lea rcx, [rbp + 0x980]
call fcn.1400559a0
xchg rcx, rcx
mov dword [rsp - 0x28], 0xe2fb6a9
mov dword [rsp - 0x2c], 0x4320810c
mov dword [rsp - 0xc], edx
jne 0x14004eb59
je 0x14004eb59
push r12
cmp r10d, 0xf9a60b2d
jb 0x14004f1eb
jnp 0x14004efe4
jmp rax
jmp fcn.14004ebbc
jg 0x14004f05b
imul cl
jo 0x14004efea
add byte [rax], al
add byte [rdi], cl
test byte [rbx - 1], bh
invalid
and byte [0x1202936b8], dl
movsb byte [rdi], byte [rsi]
xor dword [rdi - 0x976b2c6], 0x74
cmp byte [rbp + 0x36], dh
Function at 0x14004ebf0
Capabilities:
Encode data using xor

Disassembly:
push rbx
mov dword [rsp - 0x40], 0x5e81791
xchg rdx, rdx
jmp 0x14004ed7c
mov qword [rbx + 0xcd8], rax
mov rax, rbx
mov dword [rbx + 0xcd0], 0x6bfd7897
mov dword [rbx + 0xcd4], 0x691078b1
mov dword [rsp - 0x24], 0x1d9c1be4
mov dword [rsp - 0x1c], 0x76543f91
jne 0x14004ec6a
je 0x14004ec6a
mov r11d, 0x6d236592
mov r9d, 0x908180e4
int3
jmp 0x14004ef54
ret
mov dword [rsp - 0x40], 0x69dceb38
push r10
movabs r10, 0x33db60000022be9
jne 0x14004ed16
jmp 0x14004ef46
jmp 0x14004ef0c
call fcn.140101d40
xchg r8, r8
mov dword [rsp - 0x18], 0x342d9813
xchg rbx, rbx
push r15
movabs r15, 0x22c3d0000012ce9
jne 0x14004ed3c
jmp 0x14004ee6d
jmp 0x14004ef2f
mov dword [rsp - 0x1c], 0x209e7906
mov dword [rsp - 0x28], ebp
mov dword [rsp - 0x3c], 0x6c9855ec
mov r8, r8
mov dword [rbx + 0xcf0], 0x9610a7b1
push rbp
movabs rbp, 0x44a94cc120c389eb
jmp 0x14004edd5
jmp 0x14004ecfa
mov dword [rsp - 0x38], 0x3f5ff77c
mov r14, r14
sub rsp, 0x20
push r11
movabs r11, 0x51a30200000191e9
jne 0x14004ed8f
jmp 0x14004ef25
jne 0x14004edb3
je 0x14004edb3
jg 0x14004e040
ror r14d, 0x9e
popfq
int3
jmp 0x14004ee58
jne 0x14004ed6f
je 0x14004ed6f
call 0x14004ed78
add rsp, 0x20
pop rbp
jne 0x14004ee10
je 0x14004ee10
lea esi, [rbp + 0x8329]
add r15d, 0xa5046c6
pop r9
jmp 0x14004ecf9
mov qword [rbx], rax
lea rax, [rbx + 0xc98]
mov dword [rsp - 0x14], 0x72b22705
mov r15, r15
mov qword [rbx + 0xc90], rax
mov dword [rbx + 0xc88], 0x691058b1
jmp 0x14004eea9
je 0x14004ed8f
call fcn.14004efb5
add rsp, 0x20
jmp 0x14004ef22
ret
pop r15
xorps xmm0, xmm0
lea rax, [0x1400016e8]
jmp 0x14004ee2d
mov dword [rbx + 0xce4], 0x9610a7b1
mov dword [rbx + 0xce8], 0x9610a7b1
mov dword [rbx + 0xcec], 0x9610a7b1
mov dword [rsp - 0x1c], 0x752b8761
jmp 0x14004ed4b
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
xchg rdx, rdx
mov r9, r9
jmp 0x14004ed0a
je 0x14004ed16
call fcn.14004f0c8
add rsp, 0x20
pop r10
jmp 0x14004ef45
pop r11
ret
pop r11
mov rbx, rcx
jmp 0x14004ed25
je 0x14004ed3c
call 0x14004ee31
add rsp, 0x20
pop r15
jmp 0x14004ee6c
ret
pop r10
mov rsi, rsi
movups xmmword [rax + 0x20], xmm0
jmp 0x14004ef73
mov dword [rsp - 0x18], 0x21ed96a4
mov dword [rsp - 0x30], 0x5b37df1d
mov dword [rbx + 0xce0], 0x9610a7b1
jmp 0x14004ee7e
xor eax, eax
mov qword [rbx + 0xcc8], rax
mov dword [rsp - 0x14], 0x651446ee
mov dword [rsp - 0x44], 0x47c0ece
jmp 0x14004ec02
Function at 0x140053e90
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rcx
mov qword [rsp], rdi
add rsp, 0xffffffffffffffe0
xchg rbx, rdx
mov rdx, rbx
xchg rdx, rbx
xchg rcx, rsp
mov rdi, rsp
xchg rcx, rsp
nop
movabs rdx, 0xffffffff17ded62f
xor rdx, 0x3a419ccb
add rdx, 0x37208db8
add rdx, 0x149b665c
add rdx, 0x7fffffff
add rdx, 0x6a4c108
nop word [rax + rax]
inc rdx
mov dword [rsp - 0x24], ebp
cmp word [rbx + rdx*2], 0
jne 0x140053ee7
mov qword [rcx + 0x38], rdx
call fcn.140017bbc
xchg rdx, rdx
xor r8d, r8d
mov edx, 0x229ce8ef
xor edx, 0xa27f61d
sub edx, 0x1a2c6572
add edx, 0x189fe001
xor edx, 0x152df067
cmp qword [rdi + 0x38], r8
mov dword [rsp - 0x30], edx
jbe 0x140053f8d
sub rbx, rax
mov r9d, 0x4eb0e36d
sub r9d, 0x2fd204a7
xor r9d, 0x87dd06c
add r9d, 0x28fdcf3e
sub r9d, 0x3fa0dce9
nop word [rax + rax]

Function at 0x140053fb0
Capabilities:
Encode data using xor

Disassembly:
xchg r15, rbx
mov qword [rsp + 8], r15
xchg rbx, r15
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
nop
sub rsp, 8
mov qword [rsp], rdi
nop
sub rsp, 8
mov qword [rsp], r12
nop
push 0x35cc4652
mov qword [rsp], r13
push r14

Function at 0x1400545d0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov dword [rsp - 0x1c], 0x129c725f
xchg r13, rsi
mov qword [rsp + 0x10], r13
xchg rsi, r13
push rdi
xchg r8, r8
nop
add rsp, 0x31c73f5c
sub rsp, 0x31c73f7c
xchg rsi, rsp
mov rsp, qword [rcx + 0x38]
xchg rsi, rsp
mov rbx, rdx
xchg rsp, rsp
mov r8, qword [rdx + 0x38]
xchg rdi, r12
mov r12, rcx
xchg rdi, r12
add r8, rsi
xchg r14, rsi
mov rdx, r14
xchg rsi, r14
mov qword [rcx + 0x38], r8
xchg r8, r8
call fcn.140055270
mov r9, qword [rbx]
mov ecx, esi
and ecx, 3
mov r14, r14
mov r8d, 0x332353d1
add r8d, 0x3a5fd889
xor r8d, 0x49a814a9
add r8d, 0xdd830f3
shl ecx, 3
mov edx, r8d
mov r12, r12
ror edx, cl
xchg r10, rcx
mov rcx, rax
xchg r10, rcx
xor ecx, ecx
mov rdx, rdx
cmp qword [rbx + 0x38], rcx
jbe 0x1400546e5
lea rax, [rsi + rsi]
mov r11d, 0x43e656be
add r11d, 0x2dc999b0
sub r11d, 0x387a9d4
xor r11d, 0x6e284665
sub rax, r9
add r10, rax
mov dword [rsp - 0x38], ecx
nop dword [rax]
movzx eax, dx
lea r9, [r9 + 2]
mov dword [rsp - 0x28], 0x478921c4
xor ax, r8w
ror edx, 8
and ax, r11w
ror r8d, 6
ror r8d, 1
ror r8d, 1
xor ax, word [r9 - 2]
inc rcx
mov dword [rsp - 0x2c], ecx
mov word [r10 + r9 - 2], ax
cmp rcx, qword [rbx + 0x38]
jb 0x1400546a5
xchg rbx, r14
mov r14, qword [rsp + 0x30]
xchg r14, rbx
xchg rdx, rax
mov rdx, rdi
xchg rdx, rax
xchg rbx, rsi
mov rbx, qword [rsp + 0x38]
xchg rbx, rsi
neg rsp
add rsp, 0xffffffffffffffe0
neg rsp
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
Function at 0x140054720
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r15
mov qword [rsp + 8], r15
xchg r15, rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov dword [rsp - 0x20], esp
nop
push 0x49f29c1c
mov qword [rsp], r14
nop
add rsp, 0x7007c178
sub rsp, 0x7007c198
mov r14, qword [rcx + 0x38]
mov rbx, rbx
xchg r12, rdi
mov r12, rdx
xchg r12, rdi
mov rsi, rcx
mov r9, r9
nop
movabs rbx, 0xffffffff04fe84db
add rbx, 0x4469172e
xor rbx, 0x43d1d386
add rbx, 0x7fffffff
xor rbx, 0x7549b071
inc rbx
cmp word [rdx + rbx*2], 0
xchg rdi, rdi
jne 0x14005478f
lea r8, [r14 + rbx]
xchg r14, r8
mov rdx, r8
xchg r14, r8
mov qword [rcx + 0x38], r8
call fcn.140055270
mov dword [rsp - 0x24], 0x6523c6bd
mov ecx, r14d
mov edx, 0x6997ab9f
xor edx, 0x3c170215
xor edx, 0x58c2c915
xor edx, 0x3f410979
and ecx, 3
mov r13, r13
shl ecx, 3
ror edx, cl
test rbx, rbx
je 0x140054855
mov r8, r8
lea r8, [r14 + r14]
mov ecx, 0x6d4cfb62
sub ecx, 0x8059be5
sub ecx, 0x366c8cfd
xor ecx, 0x1d1b8305
xor ecx, 0x33c1517a
sub r8, rdi
mov dword [rsp - 0x40], esi
add r8, rax
nop dword [rax]
nop dword [rax + rax]
mov rbx, rbx
movzx eax, dx
lea rdi, [rdi + 2]
and ax, cx
ror edx, 3
ror edx, 3
ror edx, 1
ror edx, 1
xor ax, word [rdi - 2]
mov dword [rsp - 0x28], esp
mov word [r8 + rdi - 2], ax
sub rbx, 1
jne 0x140054829
mov rbx, qword [rsp + 0x30]
mov dword [rsp - 0x18], edi
xchg r12, rax
mov r12, rsi
xchg r12, rax
xchg rsi, r11
mov r11, qword [rsp + 0x38]
xchg rsi, r11
xchg rdi, r13
mov r13, qword [rsp + 0x40]
xchg r13, rdi
nop
add rsp, 0x8f1e75c
sub rsp, 0x8f1e73c
pop r14
ret
Function at 0x140054fd6
Capabilities:
Encode data using xor

Disassembly:
xchg r11, rbx
mov qword [rsp + 0x10], r11
xchg rbx, r11
mov qword [rsp + 0x18], rbp
mov rsi, rsi
push rsi
nop
mov qword [rsp - 8], rdi
sub rsp, 8
nop
mov qword [rsp - 8], r14
sub rsp, 8
nop
add rsp, 0x6510187f
sub rsp, 0x6510189f
lea rsi, [rdx + 8]
xorps xmm0, xmm0
mov qword [rdx], rsi
mov rdx, rdx
xor edi, edi
xchg rsi, r10
movups xmmword [r10], xmm0
xchg rsi, r10
xchg rbp, r14
mov rbp, r9
xchg r14, rbp
xchg r15, r8
mov rbp, r15
xchg r15, r8
xchg r13, rsi
movups xmmword [r13 + 0x10], xmm0
xchg rsi, r13
xchg rsi, rdx
mov rbx, rsi
xchg rsi, rdx
xchg r12, rsi
movups xmmword [r12 + 0x20], xmm0
xchg r12, rsi
mov qword [rdx + 0x38], rdi
mov dword [rsp - 0x20], edx
xchg rsp, rax
mov rsp, qword [rcx + 0x38]
xchg rsp, rax
cmp r8, rax
xchg r10, r10
jae 0x140055203
sub rax, r8
mov qword [rsp + 0x40], r15
cmp rax, r9
mov dword [rsp - 0x44], 0x6d2600be
cmovb r14, rax
xchg r14, rcx
mov qword [rdx + 0x38], rcx
xchg r14, rcx
xchg r11, rax
mov r11, qword [rcx]
xchg r11, rax
xchg rdi, rcx
mov rdi, qword [rdx]
xchg rdi, rcx
lea r15, [rax + r8*2]
mov r12, r12
cmp rcx, rsi
je 0x140055078
call fcn.140098600
mov dword [rsp - 0x3c], edx
cmp r14, 0x18
jbe 0x1400550b8
lea rcx, [r14 + r14]
mov dword [rsp - 0x18], 0x541f72b9
call fcn.1400988d0
xchg r12, rax
mov qword [rbx], r12
xchg r12, rax
test rax, rax
jne 0x1400550c8
mov dword [rsp - 0x30], ebx
mov qword [rbx], rsi
xchg r9, rdi
mov rdi, r9
xchg r9, rdi
jmp 0x1400550ef
xchg r12, rsi
mov qword [rbx], r12
xchg rsi, r12
xchg rdx, rax
mov rdx, rsi
xchg rdx, rax
xorps xmm0, xmm0
mov rcx, rcx
xchg rbx, rax
movups xmmword [rbx], xmm0
xchg rbx, rax
xchg rsi, rax
movups xmmword [rsi + 0x10], xmm0
xchg rsi, rax
xchg rsp, rax
movups xmmword [rsp + 0x20], xmm0
xchg rsp, rax
xchg r12, r9
mov r12, qword [rbx]
xchg r9, r12
and ebp, 3
mov r10, r10
mov r8d, 0x2fcea762
add r8d, 0x2776f4bf
xor r8d, 0x135d1261
add r8d, 0x10277e9
xor r8d, 0x77186fcf
shl ebp, 1
shl ebp, 1
shl ebp, 1
mov edx, r8d
xchg r10, r10
movzx ecx, bpl
ror edx, cl
cmp qword [rbx + 0x38], rdi
jbe 0x1400551b6
mov r10, r10
sub r15, r9
mov ecx, 0x34209421
sub ecx, 0x44f0260
xor ecx, 0x2fdb27cd
add ecx, 0xea34204
xor ecx, 0xeadf8ef
nop dword [rax]
mov dword [rsp - 0x2c], 0x23378602
nop word [rax + rax]
movzx eax, dx
lea r9, [r9 + 2]
mov dword [rsp - 0xc], ecx
xor ax, r8w
ror edx, 5
ror edx, 2
ror edx, 1
and ax, cx
ror r8d, 3
ror r8d, 1
ror r8d, 2
ror r8d, 1
ror r8d, 1
xor ax, word [r15 + r9 - 2]
inc rdi
mov word [r9 - 2], ax
mov dword [rsp - 0x30], 0x224fbcbf
cmp rdi, qword [rbx + 0x38]
jb 0x14005516b
xchg r15, r11
mov r11, qword [rsp + 0x40]
xchg r11, r15
xchg rbx, rax
mov rbx, rax
xchg rbx, rax
xchg r14, rbx
mov r14, qword [rsp + 0x48]
xchg rbx, r14
xchg rsi, rbp
mov rsi, qword [rsp + 0x50]
xchg rbp, rsi
nop
sub rsp, 0x8a5f03f
add rsp, 0x8a5f05f
pop r14
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
mov rsi, qword [rsp - 8]
ret
mov rax, rbx
jmp 0x1400551c8

Function at 0x1400555e0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d581
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142ad0]
xchg r15, r15
cmp qword [0x140142bb8], 0
jne 0x14008d310
syscall
ret
Function at 0x140055600
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x28]
mov byte [rsp + 0x28], al
mov dword [rsp - 0x10], 0x12af2b89
jmp 0x14008dbe1
xchg rcx, r9
mov r10, r9
xchg r9, rcx
mov eax, dword [0x140142b68]
cmp qword [0x140142bb8], 0
mov dword [rsp - 0x28], 0x7859f48b
jne 0x14008d310
syscall
ret

Function at 0x140055620
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d387
xchg rdx, r10
mov rdx, rcx
xchg r10, rdx
mov eax, dword [0x140142aa0]
cmp qword [0x140142bb8], 0
jne 0x14008d310
mov dword [rsp - 0xc], 0x67195350
syscall
ret

Function at 0x140055630
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d937
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142b28]
mov dword [rsp - 0x2c], 0x5bd0559
cmp qword [0x140142bb8], 0
jne 0x14008d310
syscall
ret

Function at 0x140055640
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d7e5
xchg rdi, r10
mov rdi, rcx
xchg rdi, r10
mov eax, dword [0x140142b08]
cmp qword [0x140142bb8], 0
mov rbp, rbp
jne 0x14008d310
syscall
ret

Function at 0x140055650
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d3e1
xchg rsi, r10
mov rsi, rcx
xchg rsi, r10
mov eax, dword [0x140142aa8]
mov dword [rsp - 0x14], 0x58f3d238
cmp qword [0x140142bb8], 0
jne 0x14008d310
syscall
mov dword [rsp - 0x2c], esp
ret

Function at 0x140055660
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008da6c
mov r10, rcx
mov eax, dword [0x140142b44]
cmp qword [0x140142bb8], 0
mov r15, r15
jne 0x14008d310
syscall
ret

Function at 0x140055670
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008da8f
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142b48]
mov rbp, rbp
cmp qword [0x140142bb8], 0
jne 0x14008d310
syscall
ret

Function at 0x140055680
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d9bc
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140142b34]
xchg rsi, rsi
cmp qword [0x140142bb8], 0
jne 0x14008d310
syscall
ret

Function at 0x140055690
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d9e5
xchg r14, r10
mov r14, rcx
xchg r14, r10
mov eax, dword [0x140142b38]
mov dword [rsp - 0x3c], ebx
cmp qword [0x140142bb8], 0
jne 0x14008d310
syscall
mov dword [rsp - 0x18], 0xede2f46
ret

Function at 0x1400556a0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d5aa
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140142ad4]
cmp qword [0x140142bb8], 0
mov dword [rsp - 0x3c], ebp
jne 0x14008d310
syscall
ret

Function at 0x1400556b0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d896
xchg r10, r8
mov r8, rcx
xchg r8, r10
mov eax, dword [0x140142b18]
xchg r12, r12
cmp qword [0x140142bb8], 0
jne 0x14008d310
syscall
mov rbp, rbp
ret

Function at 0x1400556c0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d8e6
mov r10, rcx
mov dword [rsp - 0xc], esp
mov eax, dword [0x140142b20]
cmp qword [0x140142bb8], 0
jne 0x14008d310
syscall
xchg rcx, rcx
ret

Function at 0x1400556d0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d3b9
mov r10, rcx
mov eax, dword [0x140142aa4]
cmp qword [0x140142bb8], 0
mov dword [rsp - 0x1c], ecx
jne 0x14008d310
syscall
ret
Function at 0x1400556e0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d965
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142b2c]
cmp qword [0x140142bb8], 0
mov rbx, rbx
jne 0x14008d310
syscall
ret

Function at 0x1400556f0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d78e
xchg r15, rcx
mov r10, r15
xchg r15, rcx
mov eax, dword [0x140142b00]
mov r15, r15
cmp qword [0x140142bb8], 0
jne 0x14008d310
syscall
ret

Function at 0x140055700
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d7b7
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140142b04]
cmp qword [0x140142bb8], 0
jne 0x14008d310
mov dword [rsp - 0x3c], 0x5ab9c88e
syscall
ret

Function at 0x140055710
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d62f
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140142ae0]
cmp qword [0x140142bb8], 0
xchg r13, r13
jne 0x14008d310
syscall
ret

Function at 0x140055720
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x58]
mov byte [rsp + 0x58], al
xchg rbx, rbx
movzx eax, byte [rsp + 0x48]
mov byte [rsp + 0x48], al
jmp 0x14008dbb5
xchg rbx, rcx
mov r10, rbx
xchg rbx, rcx
mov eax, dword [0x140142b64]
xchg r12, r12
cmp qword [0x140142bb8], 0
jne 0x14008d310
syscall
mov rdx, rdx
ret

Function at 0x140055740
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d4bb
xchg r13, r10
mov r13, rcx
xchg r10, r13
mov eax, dword [0x140142abc]
cmp qword [0x140142bb8], 0
mov dword [rsp - 0x3c], edi
jne 0x14008d310
syscall
ret

Function at 0x140055750
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d4e5
mov r10, rcx
mov rcx, rcx
mov eax, dword [0x140142ac0]
cmp qword [0x140142bb8], 0
jne 0x14008d310
syscall
mov dword [rsp - 0x24], ebx
ret

Function at 0x140055760
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d50c
mov r10, rcx
mov eax, dword [0x140142ac4]
cmp qword [0x140142bb8], 0
xchg r11, r11
jne 0x14008d310
syscall
ret

Function at 0x140055770
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d52f
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142ac8]
cmp qword [0x140142bb8], 0
xchg r10, r10
jne 0x14008d310
syscall
ret

Function at 0x140055780
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d48d
xchg r15, rcx
mov r10, r15
xchg rcx, r15
mov eax, dword [0x140142ab8]
mov dword [rsp - 0x30], edi
cmp qword [0x140142bb8], 0
jne 0x14008d310
syscall
mov dword [rsp - 0x10], edx
ret

Function at 0x140055790
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008da17
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142b3c]
cmp qword [0x140142bb8], 0
mov r11, r11
jne 0x14008d310
syscall
ret

Function at 0x1400557a0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d558
xchg rsp, r10
mov rsp, rcx
xchg r10, rsp
mov eax, dword [0x140142acc]
cmp qword [0x140142bb8], 0
xchg r8, r8
jne 0x14008d310
syscall
ret

Function at 0x1400557b0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d413
xchg rcx, rsp
mov r10, rsp
xchg rsp, rcx
mov eax, dword [0x140142aac]
cmp qword [0x140142bb8], 0
mov dword [rsp - 0x18], edx
jne 0x14008d310
syscall
ret
Function at 0x1400557c0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d5d4
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140142ad8]
cmp qword [0x140142bb8], 0
mov dword [rsp - 0x14], edi
jne 0x14008d310
syscall
ret

Function at 0x1400557d0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d83c
xchg r10, rsp
mov rsp, rcx
xchg rsp, r10
mov eax, dword [0x140142b10]
cmp qword [0x140142bb8], 0
jne 0x14008d310
mov dword [rsp - 0xc], 0x638a53af
syscall
ret

Function at 0x1400557e0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d8c2
mov r10, rcx
mov eax, dword [0x140142b1c]
mov dword [rsp - 0x24], ebp
cmp qword [0x140142bb8], 0
jne 0x14008d310
syscall
ret

Function at 0x140055800
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d467
mov r10, rcx
mov eax, dword [0x140142ab4]
xchg r9, r9
cmp qword [0x140142bb8], 0
jne 0x14008d310
syscall
mov r8, r8
ret

Function at 0x140055810
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008db87
xchg rcx, r13
mov r10, r13
xchg rcx, r13
mov eax, dword [0x140142b60]
cmp qword [0x140142bb8], 0
jne 0x14008d310
mov dword [rsp - 0x1c], 0x408bc6
syscall
ret

Function at 0x140055820
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008da40
xchg rsp, rcx
mov r10, rsp
xchg rcx, rsp
mov eax, dword [0x140142b40]
mov r9, r9
cmp qword [0x140142bb8], 0
jne 0x14008d310
syscall
mov rcx, rcx
ret

Function at 0x140055830
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008db39
mov r10, rcx
mov r12, r12
mov eax, dword [0x140142b58]
cmp qword [0x140142bb8], 0
jne 0x14008d310
xchg r14, r14
syscall
ret

Function at 0x140055840
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d90d
xchg r10, rsp
mov rsp, rcx
xchg r10, rsp
mov eax, dword [0x140142b24]
mov dword [rsp - 0x34], esp
cmp qword [0x140142bb8], 0
jne 0x14008d310
syscall
ret

Function at 0x140055850
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008db5f
mov r10, rcx
mov eax, dword [0x140142b5c]
mov dword [rsp - 0x2c], ebp
cmp qword [0x140142bb8], 0
jne 0x14008d310
syscall
mov dword [rsp - 0x28], edx
ret

Function at 0x140055860
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d43d
xchg r9, rcx
mov r10, r9
xchg rcx, r9
mov eax, dword [0x140142ab0]
cmp qword [0x140142bb8], 0
mov dword [rsp - 0x24], ecx
jne 0x14008d310
syscall
ret

Function at 0x140055870
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d5fe
xchg r10, r9
mov r9, rcx
xchg r10, r9
mov eax, dword [0x140142adc]
xchg r10, r10
cmp qword [0x140142bb8], 0
jne 0x14008d310
syscall
mov dword [rsp - 0x1c], 0x43eb805
ret
Function at 0x14005ed94
Capabilities:
Hash data using murmur3

Disassembly:
push rbx
add rsp, 0xffffffffffffffe0
xchg r10, rdx
mov rbx, r10
xchg rdx, r10
mov edx, 0x2480793c
xor edx, 0x7ce9219a
sub edx, 0x2ebe5afd
xor edx, 0x2636f730
sub edx, 0x76adbc7
call fcn.140083220
xor ecx, ecx
mov dword [rsp - 0x10], 0x7f758c53
test rax, rax
je 0x14005ee63
ror rax, 0x33
ror rax, 5
ror rax, 1
ror rax, 2
ror rax, 1
movabs rcx, 0x141e397f05683b4b
add rcx, 0x156377bf
sub rcx, 0x513090a
sub rcx, 0x13a91758
add rcx, 0x7fffffff
xor rcx, 0xc198037
not rax
xchg rdx, rdx
add rax, rcx
mov cl, 0x79
sub cl, 0x29
sub cl, 0x28
xor cl, 0x29
rol rax, 4
rol rax, 0xf
rol rax, 0xd
rol rax, 1
rol rax, 1
not rax
mov rbp, rbp
rol rax, 0x1b
rol rax, 6
rol rax, 0xa
rol rax, 3
rol rax, 1
rol rax, 1
not rax
mov qword [rbx + 0x1b0], rax
mov al, cl
mov r12, r12
nop
sub rsp, 0x2ecdd56
add rsp, 0x2ecdd76
nop
add rsp, 8
mov rbx, qword [rsp - 8]
ret