joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14001ac54
Capabilities:
Execute syscall

Disassembly:
syscall
rcl r8d, 0x99
popf
ret 8

Function at 0x14001af32
Capabilities:
Execute syscall

Disassembly:
stosd dword [rdi], eax
cwde
and bh, bh
inc dword [rcx - 0x42]
invalid
xchg rbx, rbx
mov dword [rsp - 0x30], esp
mov dword [rsp - 0x1c], esi
mov rcx, qword [rbp + 0xb58]
mov rax, qword [rbp + 0xb58]
and cl, 3
jne 0x14001a435
je 0x14001a435
jmp 0x14001b2bc
mov dword [rbp + 0xa4], 0x2a0012
mov dword [rsp - 0x40], 0x25436491
mov dword [rsp - 0x14], 0x4551ac3e
mov dword [rsp - 0x28], 0xf1f302b
jmp 0x14001a956
mov r13, r13
mov dword [rbp + 0xa8], 0x450037
mov dword [rbp + 0xac], 0x2d000e
mov dword [rbp + 0xb0], 0x4b0073
mov dword [rbp + 0xb4], 0x3c000f
mov rdx, rdx
je 0x14001a99a
jne 0x14001a99a
add ebp, 0xc0f23110
lea edi, [rcx - 0xa56b]
popfq
test r13, rdi
movabs r8, 0x6c07fe0000058de9
jl 0x14001ad89
jmp 0x14001af2c
lea esi, [rbx - 0xcee]
popfq
rol r12d, 0x71
jmp rcx
pop rcx
sti
invalid
mov dword [rsp - 0xc], 0x42d822cf
mov dword [rbp + 0xb8], 0x40073
mov qword [rbp + 0xb58], r15
mov rax, qword [rbp + 0xb58]
mov dword [rsp - 0x34], edi
je 0x14001af8c
jne 0x14001af8c
pushfq
jnp 0x14001a118
test rcx, rcx
neg r14
pop r15
test r15d, 0xd4f9de7d
lea r14d, [rcx - 0xd0e6]
lea r12d, [rcx + 0x5c9f]
jp 0x14001bdc3
jmp 0x14001a3e3
Function at 0x140028bf0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov dword [rsp - 0x18], 0x60248187
mov dword [rsp - 0x24], ecx
jmp 0x140028c90
mov qword [rsp + 0x18], rdi
push r14
sub rsp, 0x20
mov dword [rsp - 0x14], ecx
mov dword [rsp - 0x14], 0x565055ba

Function at 0x14002d220
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rdx
mov rdi, rdi
jmp 0x14002d2ef
mov dword [rsp - 0x24], 0x1c3ac14e
push r9
movabs r9, 0x436b9679344fb7eb
jne 0x14002d2fb
jmp 0x14002d2b4
je 0x14002d2fb
jmp 0x14002d24b

Function at 0x140030928
Capabilities:
Execute syscall

Disassembly:
push rcx
or r15d, 0xa32b467e
push r11
syscall
movabs rbx, 0x556c44ffffff4ce9
lea r11d, [rbp - 0x11a8]
ret

Function at 0x1400312a6
Capabilities:
Execute syscall

Disassembly:
call fcn.140098010
or ecx, 0xffffffff
test eax, eax
cmovs eax, ecx
mov dword [rsp - 0x24], 0x19ade045
jmp 0x1400312ed
pop rbx
ret
ret
pop r12
mov rdx, rdi
jmp 0x1400312c3
jne 0x1400312b6
je 0x1400312b6
call fcn.1400312a6
add rsp, 0x30
pop r12
je 0x140031218
jne 0x140031218
rcr esi, 0xad
div r9
lea edi, [rbp + 0xca3d]
syscall
movabs r15, 0x24805aa17136b1eb
syscall
lea edx, [rbx + 0xb4b2]
pause
ret
jmp 0x1400311cb
mov r11, r11
xchg r10, r10
mov r8d, 0x80
push r12
movabs r12, 0x73d3faffffff11e9
jmp 0x1400311ed
jmp 0x1400311cc
mov rcx, qword [rax]
mov rsi, rsi
mov dword [rsp - 0x44], 0x6adf7fc6
jmp 0x14003118f
add rsp, 0x30
pop rdi
pop rsi
mov dword [rsp - 0x44], 0x2bd4ab9c
jmp 0x1400311a9

Function at 0x1400359ea
Capabilities:
Encode data using xor

Disassembly:
je 0x140035acb
call fcn.14003592f
add rsp, 0x14
pop r10
ret
pop r10
mov rcx, qword [rax]
jmp fcn.14003629d
insb byte [rdi], dx
add bh, al
and al, 0xbc
loop 0x140035a4e
invalid
jbe 0x140035a6e
add byte [rdx], bh
add bh, al
and al, 0x7a
invalid
test esi, ebx
test r8d, 0x1d634314
lea r13d, [rbp + 0xec8c]
cmp r15, rdx
ror r11d, 0xf5
call rcx
add r12d, 0xa19aaf9d
call rax
movabs rbp, 0x26522cfffffed5e9
call rax
neg r11
jae 0x140035ccb
rcr ecx, 0x8d
rcl edx, 0x61
je 0x14003512c
xor edi, 0x4c3d77e6
call fcn.14003688d
mov rdx, rdx
mov dword [rsp - 0x30], 0x5d14abb9
push r10
movabs r10, 0xc70acfffffde8e9
jne 0x140035acb
jmp 0x1400358b8
jmp 0x1400358a6
and al, 0xe8
cmp rax, 0x50
jb 0x140035bf1
mov rax, qword [rbp + 0x1090]
mov word [rbp + 0xd1a], bx
mov dword [rsp - 0x44], ecx
jne 0x140035d11
je 0x140035d11
add edx, 0xb8efa13d
jne 0x1400360f7
cpuid
pop r9
lea r8d, [rbx + 0x856c]
xor ebp, 0xc53ae436
inc rsi
call rax
movabs rcx, 0x174d57fffffda6e9
call fcn.1400353b7
lea edx, [rdi - 0xb006]
ret
jmp 0x140035abc
add byte [rbp - 0x79], cl
in al, 0x4d
mov esp, esp
Function at 0x1400485a4
Capabilities:
Execute syscall

Disassembly:
add eax, 0x650000
add byte [r13 + r8*2 + 0x75], sil
xor r13d, 0xbca59204
push r13
movabs r13, 0x6664ca00000395e9
mov ebp, 0x395e9
add dl, cl
jne 0x140048e77
jmp 0x140049211
je 0x140048e77
call fcn.140048f1b
je 0x140048e98
jne 0x140048e98
js 0x14004859c
ror r15d, 0x8e
movabs r8, 0x64c2280000036de9
ret
jmp 0x14004920a
pop rdx
xchg r11, r11
xchg r8, r8
movabs rcx, 0x5652487aa80bdff2
mov word [rbp + 0xdbc], bx
jmp 0x1400495c4
add rsp, 0x67
pop r13
ret
pop r13
not rax
call rax
jmp 0x14004966c
mov dword [rsp - 0x30], 0x15ae208b
push rbx
movabs rbx, 0x2d2dc400000133e9
jne 0x1400493e4
jmp 0x14004951c
je 0x1400493e4
call fcn.14004937d
jmp 0x140049516
add rsp, 0x67
pop rbx
ret
pop rbx
jmp 0x140049c0f
sub rax, rcx
mov rdi, rdi
mov dword [rsp - 0x28], 0x3aec3f1d
mov dword [rsp - 0x18], 0x27a25766
mov r9d, 0x10
rol rax, 0x2c
xor ecx, ecx
jmp 0x140049781
xor eax, eax
mov rbp, rbp
lea rdi, [rbp + 0xd4c]
lea ecx, [rax + 0x38]
rep stosb byte [rdi], al
lea rdi, [rbp + 0xae0]
mov rbp, rbp
jmp 0x1400493d9
mov dword [rsp - 0x24], 0x356ff67b
mov dword [rsp - 0x3c], 0x43e3aa5e
mov dword [rsp - 0x40], 0x33cd3bd9
jmp 0x140048e73
mov ecx, 0x20
jmp fcn.140046c72

Function at 0x14004c72d
Capabilities:
Execute syscall

Disassembly:
movabs eax, dword [0x10c2401c6be2bf33]
add byte [rax - 0x42], cl

Function at 0x140052ed0
Capabilities:
Encode data using xor

Disassembly:
xchg r15, rbx
mov qword [rsp + 8], r15
xchg rbx, r15
nop
mov qword [rsp - 8], rdi
sub rsp, 8
nop
add rsp, 0x2b8fe569
sub rsp, 0x2b8fe589
xchg rdx, rbx
mov rdx, rbx
xchg rdx, rbx
mov rdi, rcx
nop
movabs rdx, 0xffffffff450f11bc
xor rdx, 0x285fa71d
add rdx, 0x7849191
add rdx, 0x7fffffff
add rdx, 0xb2ab7ce
nop word [rax + rax]
mov dword [rsp - 0x14], esi
inc rdx
cmp word [rbx + rdx*2], 0
jne 0x140052f34
xchg rdx, r13
mov qword [rcx + 0x38], r13
xchg r13, rdx
call fcn.140017b44
mov dword [rsp - 0x44], 0x2ddbb212
xor r8d, r8d
mov edx, 0x4a226fc1
add edx, 0x27085edd
add edx, 0x58adfdb
sub edx, 0x4c9e54fe
cmp qword [rdi + 0x38], r8
mov dword [rsp - 0x34], esp
jbe 0x140052fd5
sub rbx, rax
mov r9d, 0x77e4205f
sub r9d, 0x216c8fdc
sub r9d, 0x38042100
sub r9d, 0x1e736e84
nop word [rax + rax]
movzx ecx, dx
lea rax, [rax + 2]
mov dword [rsp - 0xc], ebp
and cx, r9w
ror edx, 8
xor cx, word [rbx + rax - 2]
inc r8
mov dword [rsp - 0x44], 0x7e5fa389
mov word [rax - 2], cx
cmp r8, qword [rdi + 0x38]
jb 0x140052fa5
mov rbx, qword [rsp + 0x30]
xchg rcx, rcx
xchg r13, rax
mov r13, rdi
xchg r13, rax
nop
sub rsp, 0x4d89dd0b
add rsp, 0x4d89dd2b
Function at 0x140053300
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
xchg rsi, r8
mov qword [rsp + 0x20], r8
xchg r8, rsi
mov word [rsp + 0x18], r8w
mov dword [rsp - 0x3c], ecx
push rdi
nop
mov qword [rsp - 8], r12
sub rsp, 8
nop
mov qword [rsp - 8], r13
sub rsp, 8
nop
push 0x6a85ec97
mov qword [rsp], r14
nop
mov qword [rsp - 8], r15
sub rsp, 8
sub rsp, 0x60
mov r10, r10
xchg r12, rsi
mov rsi, qword [rdx + 0x38]
xchg rsi, r12
xchg rbp, rdx
mov rdi, rbp
xchg rdx, rbp
xchg rcx, r11
mov r15, r11
xchg rcx, r11
add r12, 2
mov dword [rsp - 0x44], ecx
mov eax, 0x3d5905cb
add eax, 0x142b18c1
sub eax, 0x2febd1d
sub eax, 0x4e85616d
nop
movabs rsi, 0xffffffff66291fca
sub rsi, 0x1be2e14d
xor rsi, 0x7e3c2386
add rsi, 0x252983a5
add rsi, 0x7fffffff
add rsi, 0x265c5e60
mul r12
cmovo rax, rsi
xchg rbp, rbp
mov rcx, rax
call fcn.140097620
xchg r11, r13
mov r11, qword [rdi + 0x38]
xchg r13, r11
lea rcx, [rsp + 0x20]
mov dword [rsp - 0x14], edx
xchg r9, rbp
mov r9, qword [rdi]
xchg rbp, r9
xorps xmm0, xmm0
mov rbx, rbx
mov r14, rax
lea rax, [rsp + 0x28]
xchg r10, rax
mov qword [rsp + 0x20], r10
xchg r10, rax
lea rdx, [r13 + 1]
xchg rsp, rdx
movups xmmword [rdx + 0x28], xmm0
xchg rsp, rdx
xchg rsp, r9
movups xmmword [r9 + 0x38], xmm0
xchg r9, rsp
xchg rsp, r8
movups xmmword [r8 + 0x48], xmm0
xchg rsp, r8
call fcn.140017b44
mov ebx, 0x1cc5c39a
xor ebx, 0x3dcf36cf
xor ebx, 0x65c7d122
xor ebx, 0x628e524b
add ebx, 0x3d3e33f
xchg r8, rax
mov rax, r8
xchg r8, rax
mov ecx, ebx
mov r15, r15
mov r9d, 0x2fc3e630
sub r9d, 0x1b77e93a
add r9d, 0x5911a2a1
xor r9d, 0x6d5d9f68
test r13, r13
xchg r11, r11
je 0x1400534bf
xchg rbp, rax
mov rdx, rbp
xchg rbp, rax
sub rbp, rax
xchg r14, rdi
mov r14, r13
xchg rdi, r14
nop dword [rax]
mov dword [rsp - 0xc], 0x5df077da
movzx eax, cx
lea rdx, [rdx + 2]
and ax, r9w
mov dword [rsp - 0x10], 0x247bcefe
ror ecx, 7
ror ecx, 1
xor ax, word [rdx + rbp - 2]
mov word [rdx - 2], ax
mov r8, r8
sub rdi, 1
jne 0x140053491
xor ebp, ebp
xchg r9, r12
mov rdx, r9
xchg r9, r12
mov word [r8 + r13*2], bp
mov rdi, rdi
xchg rbp, r14
mov rcx, rbp
xchg r14, rbp
mov r8, qword [rsp + 0x20]
mov r11, r11
call fcn.1400987a0
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
cmp rcx, rax
mov rdi, rdi
jne 0x140053526
lea rdi, [rsp + 0x28]
call fcn.140097780
Function at 0x140053660
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
xchg rsp, rsp
nop
mov qword [rsp - 8], rdi
sub rsp, 8
nop
add rsp, 0x65839a82
sub rsp, 0x65839aa2
xchg r10, rsi
mov r10, qword [rcx + 0x38]
xchg r10, rsi
xchg rdx, rbx
mov rdx, rbx
xchg rdx, rbx
mov r8, qword [rdx + 0x38]
xchg rdi, rcx
mov rcx, rdi
xchg rcx, rdi
add r8, rsi
mov dword [rsp - 0x38], ecx
xchg r8, rsi
mov rdx, r8
xchg r8, rsi
mov qword [rcx + 0x38], r8
call fcn.140054330
mov r9, qword [rbx]
xchg r9, r9
mov ecx, esi
and ecx, 3
mov r8d, 0xddbf96d
add r8d, 0x46a498a1
add r8d, 0xa84599b
sub r8d, 0x34ed922e
shl ecx, 3
mov edx, r8d
ror edx, cl
xchg rbx, rbx
xchg r10, rax
mov rax, r10
xchg r10, rax
xor ecx, ecx
mov dword [rsp - 0x20], esi
cmp qword [rbx + 0x38], rcx
jbe 0x140053795
lea rax, [rsi + rsi]
mov r11d, 0x407ad6dd
xor r11d, 0x6692cd69
sub r11d, 0x1d6d373c
xor r11d, 0x69cb11b6
sub r11d, 0x60b1f4cf
sub rax, r9
add r10, rax
mov dword [rsp - 0xc], 0x5c50258e
nop dword [rax]
movzx eax, dx
lea r9, [r9 + 2]
mov dword [rsp - 0x1c], 0xec14577
xor ax, r8w
ror edx, 7
ror edx, 1
and ax, r11w
ror r8d, 1
ror r8d, 3
ror r8d, 1
ror r8d, 1
ror r8d, 1
ror r8d, 1
xor ax, word [r9 - 2]
mov dword [rsp - 0x30], 0x2d91416e
inc rcx
mov word [r10 + r9 - 2], ax
cmp rcx, qword [rbx + 0x38]
mov dword [rsp - 0x40], 0x65957fe4
jb 0x14005373e
xchg rsi, rbx
mov rsi, qword [rsp + 0x30]
xchg rbx, rsi
xchg rdi, r11
mov rax, r11
xchg rdi, r11
xchg r10, rsi
mov r10, qword [rsp + 0x38]
xchg rsi, r10
nop
sub rsp, 0x2fe93a44
add rsp, 0x2fe93a64
nop
mov rdi, qword [rsp]
add rsp, 8
ret
Function at 0x1400537d0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r13
mov qword [rsp + 8], r13
xchg r13, rbx
mov qword [rsp + 0x10], rsi
mov dword [rsp - 0x44], edi
mov qword [rsp + 0x18], rdi
push r14
sub rsp, 0x20
xchg r14, rsp
mov rsp, qword [rcx + 0x38]
xchg rsp, r14
xchg rdx, rdi
mov rdx, rdi
xchg rdi, rdx
xchg rsi, r13
mov r13, rcx
xchg r13, rsi
nop
movabs rbx, 0xffffffff3262f998
add rbx, 0x7edb307
xor rbx, 0x13c77353
add rbx, 0xe17a900
add rbx, 0x7fffffff
add rbx, 0x48507734
inc rbx
cmp word [rdx + rbx*2], 0
xchg rdx, rdx
jne 0x140053839
lea r8, [r14 + rbx]
xchg r14, rdx
mov r14, rdx
xchg rdx, r14
mov qword [rcx + 0x38], r8
call fcn.140054330
mov dword [rsp - 0x34], 0x2af5600
mov ecx, r14d
mov edx, 0x44c41c37
xor edx, 0x3d82d702
sub edx, 0x38a2d422
sub edx, 0x168c9d98
and ecx, 3
mov dword [rsp - 0x3c], 0x19416c75
shl ecx, 2
shl ecx, 1
ror edx, cl
mov rdi, rdi
test rbx, rbx
je 0x14005390d
lea r8, [r14 + r14]
mov dword [rsp - 0xc], 0x2fae8d5e
mov ecx, 0x6cdb2
add ecx, 0x85ab772
add ecx, 0x4f87ca5
add ecx, 0x4b1004bc
sub ecx, 0x586a0586
sub r8, rdi
add r8, rax
mov rdi, rdi
nop dword [rax]
nop dword [rax + rax]
movzx eax, dx
lea rdi, [rdi + 2]
mov dword [rsp - 0x44], esp
and ax, cx
ror edx, 5
ror edx, 1
ror edx, 1
ror edx, 1
xor ax, word [rdi - 2]
mov word [r8 + rdi - 2], ax
sub rbx, 1
mov dword [rsp - 0x44], edi
jne 0x1400538de
mov rbx, qword [rsp + 0x30]
xchg rsi, r11
mov rax, r11
xchg rsi, r11
xchg rsi, rdi
mov rdi, qword [rsp + 0x38]
xchg rdi, rsi
mov rdi, qword [rsp + 0x40]
nop
sub rsp, 0x5b9e030
add rsp, 0x5b9e050
pop r14
mov dword [rsp - 0x1c], 0x4a834daa
ret
Function at 0x140054080
Capabilities:
Encode data using xor

Disassembly:
xchg rsi, rbx
mov qword [rsp + 0x10], rsi
xchg rbx, rsi
xchg r11, rbp
mov qword [rsp + 0x18], r11
xchg rbp, r11
push rsi
xchg rbx, rbx
push rdi
push r14
nop
sub rsp, 0x5bcd6489
add rsp, 0x5bcd6469
lea rsi, [rdx + 8]
xchg rcx, rcx
xorps xmm0, xmm0
xchg rsi, rsp
mov qword [rdx], rsp
xchg rsi, rsp
xor edi, edi
mov dword [rsp - 0x10], edx
xchg r11, rsi
movups xmmword [r11], xmm0
xchg rsi, r11
mov r14, r9
xchg rbx, rbx
xchg r8, r11
mov rbp, r11
xchg r11, r8
xchg r11, rsi
movups xmmword [r11 + 0x10], xmm0
xchg r11, rsi
mov rbx, rdx
movups xmmword [rsi + 0x20], xmm0
xchg rdi, rdi
mov qword [rdx + 0x38], rdi
xchg r10, rax
mov r10, qword [rcx + 0x38]
xchg r10, rax
cmp r8, rax
jae 0x1400542ab
sub rax, r8
mov rsp, rsp
xchg r14, r15
mov qword [rsp + 0x40], r14
xchg r15, r14
cmp rax, r9
mov dword [rsp - 0x40], 0xec292d2
cmovb r14, rax
mov qword [rdx + 0x38], r14
mov rax, qword [rcx]
mov rcx, qword [rdx]
mov dword [rsp - 0x2c], ebx
lea r15, [rax + r8*2]
cmp rcx, rsi
je 0x14005414b
xchg r15, r15
call fcn.140097780
cmp r14, 0x18
jbe 0x14005418b
mov dword [rsp - 0x14], 0x422bbc98
lea rcx, [r14 + r14]
call fcn.1400979c0
xchg r8, rax
mov qword [rbx], r8
xchg r8, rax
test rax, rax
mov dword [rsp - 0x14], edx
jne 0x140054191
mov qword [rbx], rsi
xchg r9, r13
mov r13, rdi
xchg r13, r9
jmp 0x1400541b8
mov qword [rbx], rsi
mov rax, rsi
xorps xmm0, xmm0
xchg r13, r13
xchg rcx, rax
movups xmmword [rcx], xmm0
xchg rcx, rax
xchg r13, rax
movups xmmword [r13 + 0x10], xmm0
xchg r13, rax
xchg rbx, rax
movups xmmword [rbx + 0x20], xmm0
xchg rbx, rax
xchg r15, r9
mov r15, qword [rbx]
xchg r9, r15
and ebp, 3
mov r8d, 0x75e20b32
sub r8d, 0x2356177c
sub r8d, 0xf9659ed
sub r8d, 0x18de404e
shl ebp, 1
shl ebp, 1
shl ebp, 1
mov edx, r8d
movzx ecx, bpl
ror edx, cl
mov r9, r9
cmp qword [rbx + 0x38], rdi
jbe 0x140054261
sub r15, r9
xchg r13, r13
mov ecx, 0x76788a54
xor ecx, 0x76e44158
add ecx, 0x3a11291b
xor ecx, 0x3e9aee8f
xor ecx, 0x4371a57
nop dword [rax]
mov rcx, rcx
nop word [rax + rax]
movzx eax, dx
lea r9, [r9 + 2]
xor ax, r8w
xchg r13, r13
ror edx, 6
ror edx, 1
ror edx, 1
and ax, cx
ror r8d, 4
ror r8d, 4
xor ax, word [r15 + r9 - 2]
inc rdi
mov dword [rsp - 0x38], edx
mov word [r9 - 2], ax
cmp rdi, qword [rbx + 0x38]
jb 0x140054225
xchg r8, r15
mov r8, qword [rsp + 0x40]
xchg r8, r15
xchg rsi, rax
mov rsi, rbx
xchg rsi, rax
mov rbx, qword [rsp + 0x48]
mov r10, r10
xchg r15, rbp
mov r15, qword [rsp + 0x50]
xchg rbp, r15
add rsp, 0x20
mov dword [rsp - 0xc], esp
nop
add rsp, 8
mov r14, qword [rsp - 8]
nop
mov rdi, qword [rsp]
add rsp, 8
nop
mov rsi, qword [rsp]
add rsp, 8
ret
mov rax, rbx
jmp 0x140054273

Function at 0x1400546b0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c75c
mov r10, rcx
mov eax, dword [0x140140ad0]
cmp qword [0x140140bb8], 0
mov dword [rsp - 0x44], 0x1151ea09
jne 0x14008c4e0
syscall
ret
Function at 0x1400546d0
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x28]
mov dword [rsp - 0xc], edx
mov byte [rsp + 0x28], al
jmp 0x14008cd9f
xchg rcx, rsp
mov r10, rsp
xchg rcx, rsp
mov eax, dword [0x140140b68]
xchg rbp, rbp
cmp qword [0x140140bb8], 0
jne 0x14008c4e0
syscall
xchg r10, r10
ret

Function at 0x1400546f0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c556
mov r10, rcx
mov dword [rsp - 0x34], 0x499b0849
mov eax, dword [0x140140aa0]
cmp qword [0x140140bb8], 0
jne 0x14008c4e0
mov dword [rsp - 0x2c], edx
syscall
ret

Function at 0x140054700
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008caf8
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140140b28]
cmp qword [0x140140bb8], 0
mov dword [rsp - 0x30], 0x45f88635
jne 0x14008c4e0
syscall
ret

Function at 0x140054710
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c99c
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140140b08]
mov dword [rsp - 0x10], 0x6a565945
cmp qword [0x140140bb8], 0
jne 0x14008c4e0
syscall
mov dword [rsp - 0x38], 0x1e0b70ab
ret

Function at 0x140054720
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c5b8
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140140aa8]
mov dword [rsp - 0x34], 0x14dd0cc3
cmp qword [0x140140bb8], 0
jne 0x14008c4e0
syscall
ret

Function at 0x140054730
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008cc20
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140140b44]
mov rsi, rsi
cmp qword [0x140140bb8], 0
jne 0x14008c4e0
syscall
ret

Function at 0x140054740
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008cc49
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140140b48]
xchg rsp, rsp
cmp qword [0x140140bb8], 0
jne 0x14008c4e0
syscall
mov dword [rsp - 0x3c], 0x4441ef95
ret

Function at 0x140054750
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008cb77
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140140b34]
mov dword [rsp - 0x24], 0x5294c63b
cmp qword [0x140140bb8], 0
jne 0x14008c4e0
syscall
ret

Function at 0x140054760
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008cba5
xchg r10, rdx
mov rdx, rcx
xchg r10, rdx
mov eax, dword [0x140140b38]
cmp qword [0x140140bb8], 0
mov dword [rsp - 0x30], esi
jne 0x14008c4e0
syscall
ret

Function at 0x140054770
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c784
xchg r11, rcx
mov r10, r11
xchg r11, rcx
mov eax, dword [0x140140ad4]
mov dword [rsp - 0xc], 0x587006b2
cmp qword [0x140140bb8], 0
jne 0x14008c4e0
syscall
ret

Function at 0x140054780
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ca4a
mov r10, rcx
xchg r10, r10
mov eax, dword [0x140140b18]
cmp qword [0x140140bb8], 0
jne 0x14008c4e0
syscall
mov dword [rsp - 0x18], 0x61658de
ret

Function at 0x140054790
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008caa1
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140140b20]
cmp qword [0x140140bb8], 0
mov dword [rsp - 0x14], 0x5a75bb95
jne 0x14008c4e0
syscall
ret
Function at 0x1400547a0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c586
xchg rsp, rcx
mov r10, rsp
xchg rsp, rcx
mov eax, dword [0x140140aa4]
cmp qword [0x140140bb8], 0
mov dword [rsp - 0x24], 0x700e0b46
jne 0x14008c4e0
syscall
ret

Function at 0x1400547b0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008cb26
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140140b2c]
cmp qword [0x140140bb8], 0
xchg r10, r10
jne 0x14008c4e0
syscall
ret

Function at 0x1400547c0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c94e
mov r10, rcx
mov eax, dword [0x140140b00]
cmp qword [0x140140bb8], 0
mov dword [rsp - 0x28], 0x7d680cf2
jne 0x14008c4e0
syscall
ret

Function at 0x1400547d0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c976
mov r10, rcx
mov rdx, rdx
mov eax, dword [0x140140b04]
cmp qword [0x140140bb8], 0
jne 0x14008c4e0
syscall
mov rdi, rdi
ret

Function at 0x1400547e0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c805
xchg rsi, r10
mov rsi, rcx
xchg rsi, r10
mov eax, dword [0x140140ae0]
mov rcx, rcx
cmp qword [0x140140bb8], 0
jne 0x14008c4e0
syscall
mov dword [rsp - 0x24], ecx
ret

Function at 0x1400547f0
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x58]
mov byte [rsp + 0x58], al
mov dword [rsp - 0x2c], edx
movzx eax, byte [rsp + 0x48]
mov byte [rsp + 0x48], al
jmp 0x14008cd7c
mov r10, rcx
mov eax, dword [0x140140b64]
cmp qword [0x140140bb8], 0
mov rbx, rbx
jne 0x14008c4e0
syscall
ret

Function at 0x140054810
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c690
xchg r9, r10
mov r9, rcx
xchg r10, r9
mov eax, dword [0x140140abc]
xchg r10, r10
cmp qword [0x140140bb8], 0
jne 0x14008c4e0
syscall
mov dword [rsp - 0x10], esp
ret

Function at 0x140054820
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c6bd
mov r10, rcx
mov eax, dword [0x140140ac0]
cmp qword [0x140140bb8], 0
mov r14, r14
jne 0x14008c4e0
syscall
ret

Function at 0x140054830
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c6e0
xchg r11, r10
mov r11, rcx
xchg r11, r10
mov eax, dword [0x140140ac4]
cmp qword [0x140140bb8], 0
mov dword [rsp - 0x30], edx
jne 0x14008c4e0
syscall
ret

Function at 0x140054840
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c70a
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140140ac8]
cmp qword [0x140140bb8], 0
jne 0x14008c4e0
mov r12, r12
syscall
ret

Function at 0x140054850
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c666
xchg r10, r9
mov r9, rcx
xchg r10, r9
mov eax, dword [0x140140ab8]
cmp qword [0x140140bb8], 0
jne 0x14008c4e0
mov dword [rsp - 0x10], ebp
syscall
ret

Function at 0x140054860
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008cbcf
xchg r12, r10
mov r12, rcx
xchg r12, r10
mov eax, dword [0x140140b3c]
cmp qword [0x140140bb8], 0
mov rsp, rsp
jne 0x14008c4e0
syscall
ret

Function at 0x140054870
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c733
xchg rcx, rsi
mov r10, rsi
xchg rsi, rcx
mov eax, dword [0x140140acc]
xchg rdi, rdi
cmp qword [0x140140bb8], 0
jne 0x14008c4e0
syscall
ret
Function at 0x140054880
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c5e6
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140140aac]
mov rdx, rdx
cmp qword [0x140140bb8], 0
jne 0x14008c4e0
syscall
ret

Function at 0x140054890
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c7b2
xchg rcx, r15
mov r10, r15
xchg r15, rcx
mov eax, dword [0x140140ad8]
cmp qword [0x140140bb8], 0
jne 0x14008c4e0
mov r8, r8
syscall
ret

Function at 0x1400548a0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ca00
mov r10, rcx
xchg r14, r14
mov eax, dword [0x140140b10]
cmp qword [0x140140bb8], 0
jne 0x14008c4e0
syscall
mov dword [rsp - 0x38], edx
ret

Function at 0x1400548b0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ca75
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140140b1c]
xchg r11, r11
cmp qword [0x140140bb8], 0
jne 0x14008c4e0
syscall
xchg rbp, rbp
ret

Function at 0x1400548d0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c638
xchg rdx, rcx
mov r10, rdx
xchg rcx, rdx
mov eax, dword [0x140140ab4]
cmp qword [0x140140bb8], 0
mov dword [rsp - 0x2c], 0x381b3a4f
jne 0x14008c4e0
syscall
ret

Function at 0x1400548e0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008cd52
xchg rdx, rcx
mov r10, rdx
xchg rdx, rcx
mov eax, dword [0x140140b60]
mov dword [rsp - 0x18], ecx
cmp qword [0x140140bb8], 0
jne 0x14008c4e0
syscall
ret

Function at 0x1400548f0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008cbf8
mov r10, rcx
mov eax, dword [0x140140b40]
cmp qword [0x140140bb8], 0
mov dword [rsp - 0x2c], 0x1f5fd2af
jne 0x14008c4e0
syscall
ret

Function at 0x140054900
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ccff
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140140b58]
cmp qword [0x140140bb8], 0
mov dword [rsp - 0x28], esp
jne 0x14008c4e0
syscall
ret

Function at 0x140054910
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008cacf
xchg r10, rdi
mov rdi, rcx
xchg rdi, r10
mov eax, dword [0x140140b24]
cmp qword [0x140140bb8], 0
mov rsi, rsi
jne 0x14008c4e0
syscall
ret

Function at 0x140054920
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008cd29
xchg r10, rsi
mov rsi, rcx
xchg rsi, r10
mov eax, dword [0x140140b5c]
cmp qword [0x140140bb8], 0
jne 0x14008c4e0
mov rsp, rsp
syscall
ret

Function at 0x140054930
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c60f
xchg rcx, rdi
mov r10, rdi
xchg rdi, rcx
mov eax, dword [0x140140ab0]
cmp qword [0x140140bb8], 0
jne 0x14008c4e0
mov r8, r8
syscall
ret

Function at 0x140054940
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c7db
xchg rsi, rcx
mov r10, rsi
xchg rsi, rcx
mov eax, dword [0x140140adc]
mov dword [rsp - 0xc], esi
cmp qword [0x140140bb8], 0
jne 0x14008c4e0
syscall
ret