joyce8/EMBER2024-capa huggingface dataset:
Function at 0x7feeff3fd73
Capabilities:
Terminate process

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rdi, rdx
mov rbx, rcx
mov rsi, qword [rcx]
test rdx, rdx
je 0x7feeff3fd90
mov rcx, rdi
call fcn.7feeff3fde2
mov qword [rbx], rdi
mov rcx, rsi
call fcn.7feeff31b93
test al, al
je 0x7feeff3fdae
mov rcx, rsi
add rsp, 0x20
pop rbx
pop rdi
pop rsi
jmp fcn.7feeff31be7
nop
add rsp, 0x20
pop rbx
pop rdi
pop rsi
ret

Function at 0x7feeff3fdb7
Capabilities:
Terminate process

Disassembly:
push rsi
sub rsp, 0x20
mov rsi, qword [rcx]
mov qword [rcx], rdx
mov rcx, rsi
call fcn.7feeff31b93
test al, al
je 0x7feeff3fddb
mov rcx, rsi
add rsp, 0x20
pop rsi
jmp fcn.7feeff31be7
nop
add rsp, 0x20
pop rsi
ret

Function at 0x7feeff41ab5
Capabilities:
Terminate process

Disassembly:
push rsi
sub rsp, 0x20
mov rsi, qword [rcx + 8]
mov qword [rcx + 8], r8
mov qword [rcx], rdx
mov rcx, rsi
call fcn.7feeff32cdd
test al, al
je 0x7feeff41ade
mov rcx, rsi
add rsp, 0x20
pop rsi
jmp fcn.7feeff31be7
nop
add rsp, 0x20
pop rsi
ret

Function at 0x7feeff41ae5
Capabilities:
Terminate process

Disassembly:
push rsi
sub rsp, 0x20
mov rsi, qword [rcx]
mov qword [rcx], rdx
mov rcx, rsi
call fcn.7feeff32cdd
test al, al
je 0x7feeff41b09
mov rcx, rsi
add rsp, 0x20
pop rsi
jmp fcn.7feeff31be7
nop
add rsp, 0x20
pop rsi
ret

Function at 0x7feeff41b10
Capabilities:
Terminate process

Disassembly:
push rsi
sub rsp, 0x20
mov rsi, rcx
call fcn.7feeff32cdd
test al, al
je 0x7feeff41b2e
mov rcx, rsi
add rsp, 0x20
pop rsi
jmp fcn.7feeff31be7
nop
add rsp, 0x20
pop rsi
ret

Function at 0x7feeff41e19
Capabilities:
Terminate process

Disassembly:
push rsi
sub rsp, 0x20
mov rsi, qword [rcx + 8]
mov qword [rcx + 8], r8
mov qword [rcx], rdx
mov rcx, rsi
call fcn.7feeff31b93
test al, al
je 0x7feeff41e42
mov rcx, rsi
add rsp, 0x20
pop rsi
jmp fcn.7feeff31be7
nop
add rsp, 0x20
pop rsi
ret

Function at 0x7feeff42008
Capabilities:
Terminate process

Disassembly:
push rsi
sub rsp, 0x20
mov rsi, rcx
mov rcx, qword [rcx + 8]
call fcn.7feeff31b93
test al, al
je 0x7feeff4202b
mov rcx, qword [rsi + 8]
add rsp, 0x20
pop rsi
jmp fcn.7feeff31be7
nop
add rsp, 0x20
pop rsi
ret

Function at 0x7feeff42144
Capabilities:
Terminate process

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rdi, rdx
mov rbx, rcx
mov rsi, qword [rcx]
test rdx, rdx
je 0x7feeff42161
mov rcx, rdi
call fcn.7feeff42188
mov qword [rbx], rdi
mov rcx, rsi
call fcn.7feeff32cdd
test al, al
je 0x7feeff4217f
mov rcx, rsi
add rsp, 0x20
pop rbx
pop rdi
pop rsi
jmp fcn.7feeff31be7
nop
add rsp, 0x20
pop rbx
pop rdi
pop rsi
ret

Function at 0x7feeff4228a
Capabilities:
Terminate process

Disassembly:
push rsi
sub rsp, 0x20
mov rsi, rcx
mov rcx, qword [rcx + 8]
call fcn.7feeff32cdd
test al, al
je 0x7feeff422ad
mov rcx, qword [rsi + 8]
add rsp, 0x20
pop rsi
jmp fcn.7feeff31be7
nop
add rsp, 0x20
pop rsi
ret
Function at 0x7feeff422b4
Capabilities:
Terminate process

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rbx, rdx
mov rdi, rcx
mov rsi, qword [rcx + 8]
mov rcx, qword [rdx + 8]
test rcx, rcx
je 0x7feeff422d9
call fcn.7feeff42188
mov rax, qword [rbx + 8]
jmp 0x7feeff422db
xor eax, eax
mov qword [rdi + 8], rax
mov rax, qword [rbx]
mov qword [rdi], rax
mov rcx, rsi
call fcn.7feeff32cdd
test al, al
je 0x7feeff42300
mov rcx, rsi
add rsp, 0x20
pop rbx
pop rdi
pop rsi
jmp fcn.7feeff31be7
nop
add rsp, 0x20
pop rbx
pop rdi
pop rsi
ret

Function at 0x7feeff42503
Capabilities:
Terminate process

Disassembly:
push rsi
sub rsp, 0x20
mov qword [rcx], rdx
mov rsi, qword [rcx + 8]
mov qword [rcx + 8], r8
mov rcx, rsi
call fcn.7feeff32cdd
test al, al
je 0x7feeff4252c
mov rcx, rsi
add rsp, 0x20
pop rsi
jmp fcn.7feeff31be7
nop
add rsp, 0x20
pop rsi
ret

Function at 0x7feeff4292a
Capabilities:
Terminate process

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x68
mov r13, rcx
call fcn.7feeff31066
mov r12, rax
xorps xmm0, xmm0
lea rbx, [rsp + 0x50]
movaps xmmword [rbx], xmm0
mov rdx, qword [r13]
add rdx, rdx
mov rcx, rbx
call fcn.7feeff425d2
mov rdi, qword [r13]
mov r14, qword [r13 + 8]
movaps xmm0, xmmword [rbx]
movups xmmword [r13], xmm0
mov qword [rbx], rdi
test rdi, rdi
jle 0x7feeff429ff
cmp byte [r12], 0
setne bpl
lea rsi, [r14 + 0x10]
lea r15, [rsp + 0x30]
mov rbx, qword [rsi - 8]
mov rcx, rbx
call fcn.7feeff42b4b
test bpl, 1
jne 0x7feeff429ee
test al, al
je 0x7feeff429ee
mov rdx, qword [rsi]
mov rax, qword [r13 + 0x10]
mov qword [rsp + 0x40], rax
movups xmm0, xmmword [r13]
movaps xmmword [rsp + 0x30], xmm0
mov rcx, r15
mov r8, rbx
call fcn.7feeff42a29
cmp byte [r12], 0
jne 0x7feeff42a17
not rax
mov r9, qword [rsi - 8]
mov r8, qword [rsi]
mov qword [rsp + 0x20], rax
mov rcx, r13
mov rdx, r13
call fcn.7feeff42ae2
cmp byte [r12], 0
je 0x7feeff429f4
jmp 0x7feeff42a17
test bpl, 1
jne 0x7feeff42a17
add rsi, 0x10
xor ebp, ebp
dec rdi
jne 0x7feeff4298d
mov rcx, r14
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp fcn.7feeff3118d
nop
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret

Function at 0x7feeff42bce
Capabilities:
Terminate process

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rdi, rcx
call fcn.7feeff31066
mov rbx, rax
call fcn.7feeff41bb5
cmp byte [rbx], 0
jne 0x7feeff42bfe
mov rsi, rax
lea rcx, [rax + 0x50]
mov rdx, rdi
call fcn.7feeff42c15
cmp byte [rbx], 0
je 0x7feeff42c06
add rsp, 0x20
pop rbx
pop rdi
pop rsi
ret
mov rcx, rsi
add rsp, 0x20
pop rbx
pop rdi
pop rsi
jmp fcn.7feeff41b10

Function at 0x7feeff42dc3
Capabilities:
Terminate process

Disassembly:
push rsi
sub rsp, 0x20
mov rsi, rcx
call fcn.7feeff42df5
test al, al
je 0x7feeff42dee
mov rcx, rsi
call fcn.7feeff32dd5
mov edx, 8
mov rcx, rsi
add rsp, 0x20
pop rsi
jmp fcn.7feeff31c2a
nop
add rsp, 0x20
pop rsi
ret
Function at 0x7feeff431e9
Capabilities:
Terminate process

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x38
mov rbx, rdx
mov rsi, rcx
call fcn.7feeff31066
cmp byte [rax], 0
je 0x7feeff4320c
add rsp, 0x38
pop rbx
pop rdi
pop rsi
pop r14
ret
mov byte [rsi + 0x20], 1
lea rcx, [rsi + 0x28]
mov rdx, rbx
call fcn.7feeff3fd73
lea rdi, [rsp + 0x28]
mov rcx, rdi
mov rdx, rbx
call fcn.7feeff43292
mov r14, qword [rdi + 8]
cmp qword [rdi], 0
je 0x7feeff43248
lea rdi, [rsp + 0x28]
mov rcx, rdi
mov rdx, rbx
call fcn.7feeff43292
jmp 0x7feeff43255
lea rdi, [rsp + 0x28]
mov rcx, rdi
call fcn.7feeff432b2
movups xmm0, xmmword [rdi]
lea rcx, [rsi + 0x30]
movups xmmword [rdi], xmm0
lea rdx, [rsp + 0x28]
call fcn.7feeff4172d
add rsi, 8
mov rcx, rsi
call fcn.7feeff432bd
test r14, r14
je 0x7feeff43202
test byte [r14 + 7], 0x40
jne 0x7feeff43202
mov rcx, r14
add rsp, 0x38
pop rbx
pop rdi
pop rsi
pop r14
jmp fcn.7feeff311e0

Function at 0x7feeff433a7
Capabilities:
Terminate process

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x28
mov rbx, rdx
mov rdi, rcx
call fcn.7feeff31066
mov r14, rax
mov rsi, qword [rdi + 8]
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x7feeff433d6
call fcn.7feeff42188
mov rax, qword [rbx + 8]
jmp 0x7feeff433d8
xor eax, eax
mov qword [rdi + 8], rax
mov rax, qword [rbx]
mov qword [rdi], rax
mov rcx, rsi
call fcn.7feeff32cdd
test al, al
je 0x7feeff433f6
mov rcx, rsi
call fcn.7feeff31be7
mov rsi, qword [rdi + 0x10]
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x7feeff4340e
call fcn.7feeff42188
mov rax, qword [rbx + 0x10]
jmp 0x7feeff43410
xor eax, eax
mov qword [rdi + 0x10], rax
mov rcx, rsi
call fcn.7feeff333cd
test al, al
je 0x7feeff4342e
mov rcx, rsi
call fcn.7feeff33370
cmp byte [r14], 0
je 0x7feeff43438
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
ret
mov edx, 8
mov rcx, rsi
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
jmp fcn.7feeff31c2a

Function at 0x7feeff434be
Capabilities:
Terminate process

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x28
mov rbx, rdx
mov rdi, rcx
call fcn.7feeff31066
mov r14, rax
mov rsi, qword [rdi]
mov qword [rdi], rbx
mov rcx, rsi
call fcn.7feeff333cd
test al, al
je 0x7feeff434f5
mov rcx, rsi
call fcn.7feeff33370
cmp byte [r14], 0
je 0x7feeff434ff
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
ret
mov edx, 8
mov rcx, rsi
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
jmp fcn.7feeff31c2a

Function at 0x7feeff43f39
Capabilities:
Terminate process

Disassembly:
push rsi
sub rsp, 0x20
mov rsi, rcx
call fcn.7feeff31066
lea rcx, [rsi + 8]
xor edx, edx
xor r8d, r8d
call fcn.7feeff41e19
add rsi, 0x18
mov rcx, rsi
xor edx, edx
add rsp, 0x20
pop rsi
jmp fcn.7feeff434be
Function at 0x7feeff43faf
Capabilities:
Terminate process

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x38
mov rdi, rdx
mov rbx, rcx
call fcn.7feeff31066
cmp qword [rbx], 0
je 0x7feeff44038
mov rsi, rax
call fcn.7feeff440de
mov r14, rax
movups xmm0, xmmword [rdi]
lea rdx, [rsp + 0x20]
movaps xmmword [rdx], xmm0
mov rcx, rax
call fcn.7feeff44089
lea rcx, [r14 + 0x10]
xor edx, edx
call fcn.7feeff434be
cmp byte [rsi], 0
jne 0x7feeff4404b
mov rdx, qword [rbx + 0x10]
test rdx, rdx
je 0x7feeff44056
lea rcx, [rsp + 0x20]
mov qword [rcx], 0
call fcn.7feeff44152
cmp byte [rsi], 0
jne 0x7feeff4404b
lea rdi, [rsp + 0x20]
mov rbx, qword [rsp + 0x20]
mov rdx, qword [rbx + 0x10]
test rdx, rdx
je 0x7feeff4406e
mov rcx, rdi
call fcn.7feeff44152
cmp byte [rsi], 0
je 0x7feeff4401b
jmp 0x7feeff4404b
movups xmm0, xmmword [rdi]
lea rdx, [rsp + 0x20]
movaps xmmword [rdx], xmm0
mov rcx, rbx
call fcn.7feeff44089
nop
add rsp, 0x38
pop rbx
pop rdi
pop rsi
pop r14
ret
add rbx, 0x10
mov rcx, rbx
mov rdx, r14
add rsp, 0x38
pop rbx
pop rdi
pop rsi
pop r14
jmp fcn.7feeff434be
lea rcx, [rbx + 0x10]
mov rdx, r14
call fcn.7feeff434be
cmp byte [rsi], 0
jne 0x7feeff4404b
mov rcx, rbx
call fcn.7feeff441b6
jmp 0x7feeff4404b

Function at 0x7feeff44089
Capabilities:
Terminate process

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rbx, rdx
mov rdi, rcx
mov rsi, qword [rcx + 8]
mov rcx, qword [rdx + 8]
test rcx, rcx
je 0x7feeff440ae
call fcn.7feeff3fde2
mov rax, qword [rbx + 8]
jmp 0x7feeff440b0
xor eax, eax
mov qword [rdi + 8], rax
mov rax, qword [rbx]
mov qword [rdi], rax
mov rcx, rsi
call fcn.7feeff31b93
test al, al
je 0x7feeff440d5
mov rcx, rsi
add rsp, 0x20
pop rbx
pop rdi
pop rsi
jmp fcn.7feeff31be7
nop
add rsp, 0x20
pop rbx
pop rdi
pop rsi
ret

Function at 0x7feeff44152
Capabilities:
Terminate process

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x28
mov rbx, rdx
mov rdi, rcx
call fcn.7feeff31066
mov r14, rax
mov rsi, qword [rdi]
test rbx, rbx
je 0x7feeff44179
mov rcx, rbx
call fcn.7feeff42188
mov qword [rdi], rbx
mov rcx, rsi
call fcn.7feeff333cd
test al, al
je 0x7feeff44196
mov rcx, rsi
call fcn.7feeff33370
cmp byte [r14], 0
je 0x7feeff441a0
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
ret
mov edx, 8
mov rcx, rsi
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
jmp fcn.7feeff31c2a

Function at 0x7feeff441b6
Capabilities:
Terminate process

Disassembly:
push rsi
push rdi
sub rsp, 0x28
mov rsi, rcx
call fcn.7feeff31066
mov rdi, rax
mov rcx, rsi
call fcn.7feeff333cd
test al, al
je 0x7feeff441e0
mov rcx, rsi
call fcn.7feeff33370
cmp byte [rdi], 0
je 0x7feeff441e7
add rsp, 0x28
pop rdi
pop rsi
ret
mov edx, 8
mov rcx, rsi
add rsp, 0x28
pop rdi
pop rsi
jmp fcn.7feeff31c2a

Function at 0x7feeff448f0
Capabilities:
Terminate process

Disassembly:
sub rsp, 0x28
xor ecx, ecx
call fcn.7feeff32cdd
test al, al
je 0x7feeff4490a
xor ecx, ecx
add rsp, 0x28
jmp fcn.7feeff31be7
nop
add rsp, 0x28
ret
Function at 0x7feeff44910
Capabilities:
Terminate process

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rsi, rcx
call fcn.7feeff31066
mov rdi, rax
mov rcx, rsi
call fcn.7feeff41450
cmp byte [rdi], 0
jne 0x7feeff4494d
call fcn.7feeff41bb5
cmp byte [rdi], 0
jne 0x7feeff4494d
mov rbx, rax
lea rcx, [rax + 0x50]
mov rdx, rsi
call fcn.7feeff42c15
cmp byte [rdi], 0
je 0x7feeff44955
add rsp, 0x20
pop rbx
pop rdi
pop rsi
ret
mov rcx, rbx
add rsp, 0x20
pop rbx
pop rdi
pop rsi
jmp fcn.7feeff41b10

Function at 0x7feeff45730
Capabilities:
Terminate process

Disassembly:
sub rsp, 0x28
call fcn.7feeff31208
mov rdx, qword [rax + 0x18]
lea rcx, [rax + 0x18]
mov rdx, qword [rdx + 0x38]
add rsp, 0x28
jmp fcn.7feeff3fd73

Function at 0x7feeff45bba
Capabilities:
Terminate process

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rdi, rcx
mov rax, qword [rdx]
mov qword [rcx], rax
mov rsi, qword [rcx + 8]
mov rcx, qword [rdx + 8]
test rcx, rcx
je 0x7feeff45be5
mov rbx, rdx
call fcn.7feeff42188
mov rax, qword [rbx + 8]
jmp 0x7feeff45be7
xor eax, eax
mov qword [rdi + 8], rax
mov rcx, rsi
call fcn.7feeff32cdd
test al, al
je 0x7feeff45c06
mov rcx, rsi
add rsp, 0x20
pop rbx
pop rdi
pop rsi
jmp fcn.7feeff31be7
nop
add rsp, 0x20
pop rbx
pop rdi
pop rsi
ret
Function at 0x7feeff46170
Capabilities:
Terminate process

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x48
mov rdi, rdx
mov rsi, rcx
call fcn.7feeff31066
mov r14, rax
lea rbx, [rsp + 0x38]
mov rcx, rbx
call fcn.7feeff461e4
mov rax, qword [rdi]
mov qword [rbx], rax
mov rax, qword [rdi + 8]
mov qword [rbx + 8], rax
mov rax, qword [rbx]
mov rcx, qword [rbx + 8]
lea rdx, [rsp + 0x20]
mov qword [rdx], rax
mov qword [rdx + 8], rcx
mov rcx, rsi
call fcn.7feeff461fe
cmp byte [r14], 0
je 0x7feeff461cd
add rsp, 0x48
pop rbx
pop rdi
pop rsi
pop r14
ret
mov rdx, qword [rsi]
dec rdx
mov rcx, rsi
add rsp, 0x48
pop rbx
pop rdi
pop rsi
pop r14
jmp 0x7feeff462d6
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x68
mov rsi, rdx
mov r13, rcx
call fcn.7feeff31066
mov rbx, rax
lea rcx, [rsp + 0x30]
call fcn.7feeff461e4
cmp byte [rbx], 0
jne 0x7feeff46329
mov rcx, qword [r13 + 8]
mov rdx, rsi
call fcn.7feeff46467
movups xmm0, xmmword [rax]
lea rdx, [rsp + 0x20]
movaps xmmword [rdx], xmm0
lea rcx, [rsp + 0x30]
call fcn.7feeff45bba
cmp byte [rbx], 0
je 0x7feeff4633a
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
test rsi, rsi
jle 0x7feeff46423
lea r14, [rsp + 0x20]
lea r15, [rsp + 0x40]
lea r12, [rsp + 0x50]
mov rcx, r14
call fcn.7feeff461e4
mov bpl, 1
cmp byte [rbx], 0
jne 0x7feeff463f8
lea rdi, [rsi - 1]
sar rdi, 1
mov rcx, qword [r13 + 8]
mov rdx, rdi
call fcn.7feeff46467
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
mov rcx, r14
mov rdx, r15
call fcn.7feeff45bba
cmp byte [rbx], 0
jne 0x7feeff463f8
movups xmm0, xmmword [rsp + 0x30]
movaps xmmword [rsp + 0x40], xmm0
movups xmm0, xmmword [rsp + 0x20]
movaps xmmword [rsp + 0x50], xmm0
mov rcx, r15
mov rdx, r12
call fcn.7feeff46474
mov cl, byte [rbx]
test cl, cl
jne 0x7feeff463f4
test al, al
je 0x7feeff463f4
mov rax, qword [r13 + 8]
mov rcx, rsi
shl rcx, 4
add rcx, rax
add rcx, 8
mov rdx, qword [rsp + 0x20]
mov r8, qword [rsp + 0x28]
call fcn.7feeff42503
cmp byte [rbx], 0
jne 0x7feeff463f8
mov rcx, r14
call fcn.7feeff3fc2a
mov bpl, byte [rbx]
test bpl, bpl
cmove rsi, rdi
jmp 0x7feeff463f8
test cl, cl
je 0x7feeff46452
mov byte [rbx], 0
mov rcx, r14
call fcn.7feeff4228a
cmp byte [rbx], 0
jne 0x7feeff46329
mov byte [rbx], bpl
test bpl, bpl
jne 0x7feeff46329
test rsi, rsi
jg 0x7feeff46352
xor esi, esi
mov rax, qword [r13 + 8]
shl rsi, 4
lea rcx, [rax + rsi]
add rcx, 8
mov rdx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x38]
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp fcn.7feeff42503
lea rcx, [rsp + 0x20]
call fcn.7feeff4228a
cmp byte [rbx], 0
jne 0x7feeff46329
jmp 0x7feeff46423
Function at 0x7feeff462d6
Capabilities:
Terminate process

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x48
mov rdi, rdx
mov rsi, rcx
call fcn.7feeff31066
mov r14, rax
lea rbx, [rsp + 0x38]
mov rcx, rbx
call fcn.7feeff461e4
mov rax, qword [rdi]
mov qword [rbx], rax
mov rax, qword [rdi + 8]
mov qword [rbx + 8], rax
mov rax, qword [rbx]
mov rcx, qword [rbx + 8]
lea rdx, [rsp + 0x20]
mov qword [rdx], rax
mov qword [rdx + 8], rcx
mov rcx, rsi
call fcn.7feeff461fe
cmp byte [r14], 0
je 0x7feeff461cd
add rsp, 0x48
pop rbx
pop rdi
pop rsi
pop r14
ret
mov rdx, qword [rsi]
dec rdx
mov rcx, rsi
add rsp, 0x48
pop rbx
pop rdi
pop rsi
pop r14
jmp 0x7feeff462d6
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x68
mov rsi, rdx
mov r13, rcx
call fcn.7feeff31066
mov rbx, rax
lea rcx, [rsp + 0x30]
call fcn.7feeff461e4
cmp byte [rbx], 0
jne 0x7feeff46329
mov rcx, qword [r13 + 8]
mov rdx, rsi
call fcn.7feeff46467
movups xmm0, xmmword [rax]
lea rdx, [rsp + 0x20]
movaps xmmword [rdx], xmm0
lea rcx, [rsp + 0x30]
call fcn.7feeff45bba
cmp byte [rbx], 0
je 0x7feeff4633a
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
test rsi, rsi
jle 0x7feeff46423
lea r14, [rsp + 0x20]
lea r15, [rsp + 0x40]
lea r12, [rsp + 0x50]
mov rcx, r14
call fcn.7feeff461e4
mov bpl, 1
cmp byte [rbx], 0
jne 0x7feeff463f8
lea rdi, [rsi - 1]
sar rdi, 1
mov rcx, qword [r13 + 8]
mov rdx, rdi
call fcn.7feeff46467
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
mov rcx, r14
mov rdx, r15
call fcn.7feeff45bba
cmp byte [rbx], 0
jne 0x7feeff463f8
movups xmm0, xmmword [rsp + 0x30]
movaps xmmword [rsp + 0x40], xmm0
movups xmm0, xmmword [rsp + 0x20]
movaps xmmword [rsp + 0x50], xmm0
mov rcx, r15
mov rdx, r12
call fcn.7feeff46474
mov cl, byte [rbx]
test cl, cl
jne 0x7feeff463f4
test al, al
je 0x7feeff463f4
mov rax, qword [r13 + 8]
mov rcx, rsi
shl rcx, 4
add rcx, rax
add rcx, 8
mov rdx, qword [rsp + 0x20]
mov r8, qword [rsp + 0x28]
call fcn.7feeff42503
cmp byte [rbx], 0
jne 0x7feeff463f8
mov rcx, r14
call fcn.7feeff3fc2a
mov bpl, byte [rbx]
test bpl, bpl
cmove rsi, rdi
jmp 0x7feeff463f8
test cl, cl
je 0x7feeff46452
mov byte [rbx], 0
mov rcx, r14
call fcn.7feeff4228a
cmp byte [rbx], 0
jne 0x7feeff46329
mov byte [rbx], bpl
test bpl, bpl
jne 0x7feeff46329
test rsi, rsi
jg 0x7feeff46352
xor esi, esi
mov rax, qword [r13 + 8]
shl rsi, 4
lea rcx, [rax + rsi]
add rcx, 8
mov rdx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x38]
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp fcn.7feeff42503
lea rcx, [rsp + 0x20]
call fcn.7feeff4228a
cmp byte [rbx], 0
jne 0x7feeff46329
jmp 0x7feeff46423
Function at 0x7feeff46b27
Capabilities:
Terminate process

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x48
mov rbx, rdx
mov rsi, rcx
call fcn.7feeff31066
mov r14, rax
mov rcx, rbx
call fcn.7feeff461e4
lea rdi, [rsp + 0x20]
mov rcx, rdi
call fcn.7feeff461e4
mov rcx, rsi
mov rdx, rdi
call fcn.7feeff46cec
cmp byte [r14], 0
je 0x7feeff46b6e
add rsp, 0x48
pop rbx
pop rdi
pop rsi
pop r14
ret
cmp qword [rsi], 0
jle 0x7feeff46bc6
mov rcx, qword [rsi + 8]
xor edx, edx
call fcn.7feeff46467
movups xmm0, xmmword [rax]
lea rdx, [rsp + 0x30]
movaps xmmword [rdx], xmm0
mov rcx, rbx
call fcn.7feeff45bba
cmp byte [r14], 0
jne 0x7feeff46b64
mov rcx, qword [rsi + 8]
add rcx, 8
mov rdx, qword [rsp + 0x20]
mov r8, qword [rsp + 0x28]
call fcn.7feeff42503
cmp byte [r14], 0
jne 0x7feeff46b64
mov rcx, rsi
add rsp, 0x48
pop rbx
pop rdi
pop rsi
pop r14
jmp 0x7feeff46d52
mov rax, qword [rsp + 0x20]
mov qword [rbx], rax
mov rax, qword [rsp + 0x28]
mov qword [rbx + 8], rax
jmp 0x7feeff46b64
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x58
mov r12, rcx
call fcn.7feeff31066
mov r13, rax
lea rcx, [rsp + 0x30]
call fcn.7feeff461e4
cmp byte [r13], 0
jne 0x7feeff46daa
mov r14, qword [r12]
mov rcx, qword [r12 + 8]
xor edx, edx
call fcn.7feeff46467
movups xmm0, xmmword [rax]
lea rdx, [rsp + 0x20]
movaps xmmword [rdx], xmm0
lea rcx, [rsp + 0x30]
call fcn.7feeff45bba
cmp byte [r13], 0
je 0x7feeff46dbb
add rsp, 0x58
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xor ebx, ebx
lea rdi, [rbx + rbx]
inc rdi
cmp rdi, r14
jge 0x7feeff46e6b
lea rsi, [rbx + rbx]
add rsi, 2
mov rbp, qword [r12 + 8]
mov rcx, rbp
mov rdx, rdi
call fcn.7feeff46467
mov r15, rax
cmp rsi, r14
jge 0x7feeff46e39
mov rcx, rbp
mov rdx, rsi
call fcn.7feeff46467
movups xmm0, xmmword [r15]
movaps xmmword [rsp + 0x20], xmm0
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x20]
lea rdx, [rsp + 0x40]
call fcn.7feeff46474
cmp byte [r13], 0
jne 0x7feeff46daa
test al, al
jne 0x7feeff46e26
mov rdi, rsi
mov rbp, qword [r12 + 8]
mov rcx, rbp
mov rdx, rdi
call fcn.7feeff46467
mov r15, rax
shl rbx, 4
lea rcx, [rbx + rbp]
add rcx, 8
movups xmm0, xmmword [r15]
movaps xmmword [rsp + 0x20], xmm0
lea rdx, [rsp + 0x20]
call fcn.7feeff45bba
cmp byte [r13], 0
mov rbx, rdi
je 0x7feeff46dbd
jmp 0x7feeff46daa
mov rax, qword [r12 + 8]
mov rcx, rbx
shl rcx, 4
add rcx, rax
add rcx, 8
mov rdx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x38]
call fcn.7feeff42503
cmp byte [r13], 0
jne 0x7feeff46daa
mov rcx, r12
mov rdx, rbx
add rsp, 0x58
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp 0x7feeff462d6
Function at 0x7feeff46d52
Capabilities:
Terminate process

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x48
mov rbx, rdx
mov rsi, rcx
call fcn.7feeff31066
mov r14, rax
mov rcx, rbx
call fcn.7feeff461e4
lea rdi, [rsp + 0x20]
mov rcx, rdi
call fcn.7feeff461e4
mov rcx, rsi
mov rdx, rdi
call fcn.7feeff46cec
cmp byte [r14], 0
je 0x7feeff46b6e
add rsp, 0x48
pop rbx
pop rdi
pop rsi
pop r14
ret
cmp qword [rsi], 0
jle 0x7feeff46bc6
mov rcx, qword [rsi + 8]
xor edx, edx
call fcn.7feeff46467
movups xmm0, xmmword [rax]
lea rdx, [rsp + 0x30]
movaps xmmword [rdx], xmm0
mov rcx, rbx
call fcn.7feeff45bba
cmp byte [r14], 0
jne 0x7feeff46b64
mov rcx, qword [rsi + 8]
add rcx, 8
mov rdx, qword [rsp + 0x20]
mov r8, qword [rsp + 0x28]
call fcn.7feeff42503
cmp byte [r14], 0
jne 0x7feeff46b64
mov rcx, rsi
add rsp, 0x48
pop rbx
pop rdi
pop rsi
pop r14
jmp 0x7feeff46d52
mov rax, qword [rsp + 0x20]
mov qword [rbx], rax
mov rax, qword [rsp + 0x28]
mov qword [rbx + 8], rax
jmp 0x7feeff46b64
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x58
mov r12, rcx
call fcn.7feeff31066
mov r13, rax
lea rcx, [rsp + 0x30]
call fcn.7feeff461e4
cmp byte [r13], 0
jne 0x7feeff46daa
mov r14, qword [r12]
mov rcx, qword [r12 + 8]
xor edx, edx
call fcn.7feeff46467
movups xmm0, xmmword [rax]
lea rdx, [rsp + 0x20]
movaps xmmword [rdx], xmm0
lea rcx, [rsp + 0x30]
call fcn.7feeff45bba
cmp byte [r13], 0
je 0x7feeff46dbb
add rsp, 0x58
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xor ebx, ebx
lea rdi, [rbx + rbx]
inc rdi
cmp rdi, r14
jge 0x7feeff46e6b
lea rsi, [rbx + rbx]
add rsi, 2
mov rbp, qword [r12 + 8]
mov rcx, rbp
mov rdx, rdi
call fcn.7feeff46467
mov r15, rax
cmp rsi, r14
jge 0x7feeff46e39
mov rcx, rbp
mov rdx, rsi
call fcn.7feeff46467
movups xmm0, xmmword [r15]
movaps xmmword [rsp + 0x20], xmm0
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x20]
lea rdx, [rsp + 0x40]
call fcn.7feeff46474
cmp byte [r13], 0
jne 0x7feeff46daa
test al, al
jne 0x7feeff46e26
mov rdi, rsi
mov rbp, qword [r12 + 8]
mov rcx, rbp
mov rdx, rdi
call fcn.7feeff46467
mov r15, rax
shl rbx, 4
lea rcx, [rbx + rbp]
add rcx, 8
movups xmm0, xmmword [r15]
movaps xmmword [rsp + 0x20], xmm0
lea rdx, [rsp + 0x20]
call fcn.7feeff45bba
cmp byte [r13], 0
mov rbx, rdi
je 0x7feeff46dbd
jmp 0x7feeff46daa
mov rax, qword [r12 + 8]
mov rcx, rbx
shl rcx, 4
add rcx, rax
add rcx, 8
mov rdx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x38]
call fcn.7feeff42503
cmp byte [r13], 0
jne 0x7feeff46daa
mov rcx, r12
mov rdx, rbx
add rsp, 0x58
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp 0x7feeff462d6

Function at 0x7feeff4840d
Capabilities:
Terminate process

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x28
mov rbx, rdx
mov rdi, rcx
call fcn.7feeff31066
mov r14, rax
mov rsi, qword [rdi]
mov qword [rdi], rbx
mov rcx, rsi
call fcn.7feeff3d96b
test al, al
je 0x7feeff48444
mov rcx, rsi
call fcn.7feeff3d9bc
cmp byte [r14], 0
je 0x7feeff4844e
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
ret
mov edx, 8
mov rcx, rsi
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
jmp fcn.7feeff31c2a