joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400512d0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
mov r8, qword [rcx + 0x648]
xor esi, esi
mov rbx, rcx
test r8, r8
je 0x140051306
mov rdi, qword [rcx + 0x640]
jmp 0x14005130d
mov rdi, rsi
nop dword [rax]
test r8, r8
je 0x140051326
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
jmp 0x140051329
mov rcx, rsi
cmp rdi, rcx
je 0x140051562
mov rax, qword [rdi]
cmp qword [rax + 0x28], rdx
je 0x140051353
nop
add rdi, 0x542d934c
sub rdi, 0x542d9344
jmp 0x14005130d
test r8, r8
je 0x14005141a
cmp rdi, qword [rbx + 0x640]
jb 0x14005141a
mov rax, qword [rbx + 0x640]
lea rcx, [rax + r8*8]
cmp rdi, rcx
jae 0x14005141a
mov rdx, rdi
nop word [rax + rax]
mov rcx, qword [rbx + 0x648]
test rcx, rcx
je 0x1400513aa
mov rax, qword [rbx + 0x640]
lea rax, [rax + rcx*8]
jmp 0x1400513ad
mov rax, rsi
nop
add rax, 0xffffffffe266d67b
sub rax, 0xffffffffe266d683
cmp rdx, rax
jae 0x1400513d3
mov rax, qword [rdx + 8]
mov qword [rdx], rax
add rdx, 8
jmp 0x14005138a
test rcx, rcx
je 0x14005141a
lea rax, [rcx - 1]
mov qword [rbx + 0x648], rax
test rax, rax
jne 0x14005141a
mov rcx, qword [rbx + 0x640]
test rcx, rcx
je 0x14005140c
call fcn.1400920d0
mov qword [rbx + 0x640], rsi
mov qword [rbx + 0x650], rsi
mov qword [rbx + 0x648], rsi
mov rcx, qword [rdi]
test rcx, rcx
je 0x140051442
mov rax, qword [rcx]
mov edx, 0x4f433303
add edx, 0x19010654
sub edx, 0x447a69f8
sub edx, 0x23c9cf5e
call qword [rax]
cmp qword [rbx + 0x648], rsi
je 0x140051562
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400433b0
mov rcx, qword [rsp + 0x30]
mov r10d, 0x118f3a5b
add r10d, 0x3f3d4043
sub r10d, 0x50cc79fe
mov r8d, dword [rsp + 0x34]
mov eax, ecx
mov r9, qword [rbx + 0x648]
sub eax, r8d
cdq
idiv dword [rbx + 0x648]
cmp eax, r10d
cmovl r10d, eax
test r9, r9
je 0x14005151a
mov rdx, qword [rbx + 0x640]
lea r11, [rdx + r9*8]
cmp rdx, r11
je 0x14005151a
mov r9d, r10d
xor r9d, 0x3e4810c7
xor r8d, 0x3e4810c7
nop dword [rax]
mov rcx, qword [rdx]
mov eax, esi
xor eax, 0x3e4810c7
add esi, r10d
neg rdx
add rdx, 0xfffffffffffffff8
neg rdx
mov dword [rcx + 0x30], eax
mov dword [rcx + 0x34], 0x42c6505e
add dword [rcx + 0x34], 0x101aea97
sub dword [rcx + 0x34], 0x4dc22f19
xor dword [rcx + 0x34], 0x3b571b1b
mov dword [rcx + 0x38], r9d
mov dword [rcx + 0x3c], r8d
cmp rdx, r11
jne 0x1400514c9
mov rcx, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x34]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x14005155a
sub ecx, r8d
mov dword [rax + 0x14], 0xb0fd090
xor dword [rax + 0x14], 0x7c04188b
xor dword [rax + 0x14], 0x4943d8dc
xor ecx, 0x3e4810c7
xor r8d, 0x3e4810c7
mov dword [rax + 0x10], ecx
mov dword [rax + 0x18], r8d
mov dword [rax + 0x1c], r8d
mov rcx, rbx
call fcn.140042400
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
nop
add rsp, 0x694b05ca
sub rsp, 0x694b05aa
pop rdi
ret
Function at 0x140051580
Capabilities:
Encode data using xor

Disassembly:
push rbx
add rsp, 0xffffffffffffffe0
mov rax, qword [rcx]
mov rbx, rcx
call qword [rax + 0x78]
mov rdx, qword [rbx + 0x648]
mov rcx, rax
mov qword [rsp + 0x30], rax
call fcn.140042cb0
lea rcx, [rbx + 0x640]
lea rdx, [rsp + 0x30]
call fcn.140051190
mov rcx, rbx
nop
sub rsp, 0x6d950e1
add rsp, 0x6d95101
pop rbx
jmp 0x140051580
push rbx
nop
sub rsp, 0x120361ad
add rsp, 0x1203618d
cmp qword [rcx + 0x648], 0
mov rbx, rcx
je 0x1400516cb
lea rdx, [rsp + 0x30]
call fcn.1400433b0
mov r8, qword [rsp + 0x30]
mov r11d, 0x1f5c6f54
add r11d, 0x5aedf527
sub r11d, 0x5766d587
sub r11d, 0x22e38e54
mov r9d, dword [rsp + 0x34]
mov eax, r8d
sub eax, r9d
cdq
idiv dword [rbx + 0x648]
mov rdx, qword [rbx + 0x648]
cmp eax, r11d
cmovl r11d, eax
xor r10d, r10d
test rdx, rdx
je 0x14005167a
mov rax, qword [rbx + 0x640]
mov qword [rsp + 0x38], rdi
lea rdi, [rax + rdx*8]
cmp rax, rdi
je 0x140051675
mov r8d, r11d
xor r8d, 0x3e4810c7
xor r9d, 0x3e4810c7
nop word [rax + rax]
mov rdx, qword [rax]
mov ecx, r10d
xor ecx, 0x3e4810c7
add r10d, r11d
sub rax, 0xfffffffffffffff8
mov dword [rdx + 0x30], ecx
mov dword [rdx + 0x34], 0x31ae0e80
add dword [rdx + 0x34], 0x344ca8f6
xor dword [rdx + 0x34], 0x3c230384
sub dword [rdx + 0x34], 0x1b91a42b
mov dword [rdx + 0x38], r8d
mov dword [rdx + 0x3c], r9d
cmp rax, rdi
jne 0x140051628
mov r8, qword [rsp + 0x30]
mov r9d, dword [rsp + 0x34]
mov rdi, qword [rsp + 0x38]
mov rax, qword [rbx + 0x660]
test rax, rax
je 0x1400516c3
sub r8d, r9d
mov dword [rax + 0x14], 0x2536fc96
add dword [rax + 0x14], 0x3131ca7b
sub dword [rax + 0x14], 0x1ae4acae
add dword [rax + 0x14], 0x2c3f664
xor r8d, 0x3e4810c7
xor r9d, 0x3e4810c7
mov dword [rax + 0x10], r8d
mov dword [rax + 0x18], r9d
mov dword [rax + 0x1c], r9d
mov rcx, rbx
call fcn.140042400
neg rsp
add rsp, 0xffffffffffffffe0
neg rsp
pop rbx
ret

Function at 0x140059bb0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r12
mov qword [rsp + 8], r12
xchg rbx, r12
nop
sub rsp, 8
mov qword [rsp], rdi
nop
sub rsp, 0x60ab8d3d
add rsp, 0x60ab8d1d
xchg rdx, rbp
mov rbx, rbp
xchg rbp, rdx
xchg rdi, rcx
mov rcx, rdi
xchg rcx, rdi
nop
movabs rdx, 0xffffffff00d40296
add rdx, 0x579e9596
sub rdx, 0x433a8c3b
add rdx, 0x7fffffff
add rdx, 0x6ac7f40f
nop word [rax + rax]
inc rdx
cmp word [rbx + rdx*2], 0
xchg r11, r11
jne 0x140059c15
xchg r15, rdx
mov qword [rcx + 0x38], r15
xchg r15, rdx
call fcn.14001664c
xchg r13, r13
xor r8d, r8d
mov edx, 0x70b9c767
sub edx, 0x5d2cb43e
xor edx, 0x5fdeb938
xor edx, 0x7c11bf63
cmp qword [rdi + 0x38], r8
mov rbp, rbp
jbe 0x140059cb8
sub rbx, rax
mov r9d, 0x123d62bb
add r9d, 0x1eef9dda
sub r9d, 0x18c09dbf
add r9d, 0x549d8388
sub r9d, 0x6d09e55f
nop word [rax + rax]
movzx ecx, dx
xchg r15, r15
lea rax, [rax + 2]
and cx, r9w
ror edx, 1
ror edx, 6
ror edx, 1
xor cx, word [rbx + rax - 2]
inc r8
mov rdx, rdx
mov word [rax - 2], cx
cmp r8, qword [rdi + 0x38]
jb 0x140059c8a
mov rbx, qword [rsp + 0x30]
mov dword [rsp - 0x44], edx
xchg r13, rax
mov r13, rdi
xchg r13, rax
nop
sub rsp, 0x7050fbee
add rsp, 0x7050fc0e
pop rdi
ret
Function at 0x14005a680
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg rdi, rsi
mov qword [rsp + 0x10], rdi
xchg rdi, rsi
nop
mov qword [rsp - 8], rdi
sub rsp, 8
nop
sub rsp, 0x13a0ed3
add rsp, 0x13a0eb3
mov rsi, qword [rcx + 0x38]
xchg r11, r11
xchg r9, rbx
mov r9, rdx
xchg rbx, r9
xchg r8, r10
mov r10, qword [rdx + 0x38]
xchg r10, r8
xchg rdi, rcx
mov rcx, rdi
xchg rcx, rdi
add r8, rsi
xchg rsi, r8
mov rdx, r8
xchg rsi, r8
xchg r8, rdi
mov qword [rcx + 0x38], rdi
xchg rdi, r8
call fcn.14005b3a0
xchg r8, r9
mov r8, qword [rbx]
xchg r8, r9
mov ecx, esi
and ecx, 3
mov r8, r8
mov r8d, 0x4b5d842b
sub r8d, 0x28d3d5da
add r8d, 0x3631a5e4
xor r8d, 0x68f94147
shl ecx, 1
shl ecx, 2
mov edx, r8d
ror edx, cl
xchg rbp, rbp
mov r10, rax
xor ecx, ecx
cmp qword [rbx + 0x38], rcx
xchg r15, r15
jbe 0x14005a7a8
lea rax, [rsi + rsi]
mov r11d, 0x10db7dfe
add r11d, 0x46490b6f
xor r11d, 0x3e2fcaf4
add r11d, 0x15f2e17b
xor r11d, 0x7efe25eb
sub rax, r9
mov dword [rsp - 0x28], ebp
add r10, rax
nop dword [rax]
movzx eax, dx
mov dword [rsp - 0x3c], 0x57193459
lea r9, [r9 + 2]
xor ax, r8w
ror edx, 7
ror edx, 1
and ax, r11w
ror r8d, 7
ror r8d, 1
xor ax, word [r9 - 2]
inc rcx
mov dword [rsp - 0x1c], 0x43518ada
mov word [r10 + r9 - 2], ax
cmp rcx, qword [rbx + 0x38]
jb 0x14005a765
xchg rbx, r8
mov r8, qword [rsp + 0x30]
xchg r8, rbx
mov rax, rdi
mov dword [rsp - 0x3c], 0x65a391b3
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
ret

Function at 0x14005a7e0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rdx
mov qword [rsp + 8], rdx
xchg rbx, rdx
xchg rsi, r9
mov qword [rsp + 0x10], r9
xchg r9, rsi
mov qword [rsp + 0x18], rdi
push r14
mov r8, r8
sub rsp, 0x20
mov r14, qword [rcx + 0x38]
xchg rdi, rdx
mov rdx, rdi
xchg rdx, rdi
xchg rcx, rsi
mov rcx, rsi
xchg rcx, rsi
nop
movabs rbx, 0xffffffff2d029d2d
add rbx, 0x3f30ea00
sub rbx, 0x54343a76
xor rbx, 0x61dc9d8
add rbx, 0x7fffffff
xor rbx, 0x6e1d7a91
inc rbx
cmp word [rdx + rbx*2], 0
mov dword [rsp - 0x20], 0x5c6ad7e8
jne 0x14005a848
lea r8, [r14 + rbx]
xchg rdi, r14
mov rdx, rdi
xchg r14, rdi
xchg rdx, r8
mov qword [rcx + 0x38], rdx
xchg rdx, r8
call fcn.14005b3a0
mov ecx, r14d
mov dword [rsp - 0x3c], esp
mov edx, 0x13bfca00
sub edx, 0xca870eb
add edx, 0xef250dc
add edx, 0x1a386b81
and ecx, 3
xchg r15, r15
shl ecx, 2
shl ecx, 1
ror edx, cl
test rbx, rbx
mov r9, r9
je 0x14005a920
lea r8, [r14 + r14]
mov ecx, 0x2aefe163
sub ecx, 0x231a892c
add ecx, 0x1537491
add ecx, 0x3100a7ea
sub ecx, 0x3a2973b3
sub r8, rdi
add r8, rax
mov dword [rsp - 0x44], 0x6fc74cc1
nop dword [rax]
nop dword [rax + rax]
movzx eax, dx
xchg r10, r10
lea rdi, [rdi + 2]
and ax, cx
ror edx, 8
mov dword [rsp - 0x1c], 0x3eb5a84d
xor ax, word [rdi - 2]
mov word [r8 + rdi - 2], ax
sub rbx, 1
mov dword [rsp - 0xc], 0x316e2e3a
jne 0x14005a8ec
mov rbx, qword [rsp + 0x30]
xchg rsi, rbp
mov rax, rbp
xchg rsi, rbp
xchg r13, rsi
mov r13, qword [rsp + 0x38]
xchg rsi, r13
mov rdi, qword [rsp + 0x40]
nop
sub rsp, 0x2aba5da2
add rsp, 0x2aba5dc2
pop r14
mov r15, r15
ret
Function at 0x14005b136
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r13
mov qword [rsp + 0x10], r13
xchg r13, rbx
xchg rbp, rsi
mov qword [rsp + 0x18], rsi
xchg rsi, rbp
push rsi
push rdi
nop
sub rsp, 8
mov qword [rsp], r14
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
lea rsi, [rdx + 8]
xorps xmm0, xmm0
mov dword [rsp - 0x14], 0x1a310d11
mov qword [rdx], rsi
xor edi, edi
xchg rsi, rbp
movups xmmword [rbp], xmm0
xchg rsi, rbp
xchg r15, r14
mov r15, r9
xchg r14, r15
xchg r15, rbp
mov r15, r8
xchg r15, rbp
xchg rsi, r8
movups xmmword [r8 + 0x10], xmm0
xchg rsi, r8
xchg rbx, r10
mov r10, rdx
xchg rbx, r10
xchg rsi, rdi
movups xmmword [rdi + 0x20], xmm0
xchg rdi, rsi
mov qword [rdx + 0x38], rdi
mov rax, qword [rcx + 0x38]
cmp r8, rax
mov dword [rsp - 0x10], 0x665ebd5
jae 0x14005b31e
sub rax, r8
mov qword [rsp + 0x40], r15
mov dword [rsp - 0x40], 0x6cc56e4e
cmp rax, r9
cmovb r14, rax
xchg rbx, r14
mov qword [rdx + 0x38], rbx
xchg r14, rbx
mov rax, qword [rcx]
mov dword [rsp - 0x44], 0x4a988bfd
mov rcx, qword [rdx]
lea r15, [rax + r8*2]
cmp rcx, rsi
je 0x14005b1c7
mov dword [rsp - 0x34], ebx
call fcn.1400920d0
cmp r14, 0x18
jbe 0x14005b1fd
xchg rdi, rdi
lea rcx, [r14 + r14]
call fcn.140092370
mov qword [rbx], rax
xchg rsi, rsi
test rax, rax
jne 0x14005b207
xchg rsi, r9
mov qword [rbx], r9
xchg rsi, r9
mov r9, rdi
jmp 0x14005b22f
mov qword [rbx], rsi
xchg r15, rax
mov r15, rsi
xchg r15, rax
xorps xmm0, xmm0
mov dword [rsp - 0x40], esi
xchg rbx, rax
movups xmmword [rbx], xmm0
xchg rbx, rax
movups xmmword [rax + 0x10], xmm0
mov dword [rsp - 0x18], ebp
xchg r8, rax
movups xmmword [r8 + 0x20], xmm0
xchg r8, rax
xchg rsi, r9
mov rsi, qword [rbx]
xchg rsi, r9
and ebp, 3
mov r10, r10
mov r8d, 0x7a908106
sub r8d, 0x843ed78
xor r8d, 0x27433861
add r8d, 0x9b66bca
sub r8d, 0x2e840247
shl ebp, 3
mov edx, r8d
mov dword [rsp - 0x30], 0x4f8d2429
movzx ecx, bpl
ror edx, cl
cmp qword [rbx + 0x38], rdi
mov dword [rsp - 0x44], edx
jbe 0x14005b2de
sub r15, r9
mov ecx, 0x4223c9f7
xor ecx, 0x548de88d
xor ecx, 0x23e312eb
sub ecx, 0x354d3292
nop dword [rax]
nop word [rax + rax]
movzx eax, dx
mov rdx, rdx
lea r9, [r9 + 2]
xor ax, r8w
ror edx, 2
ror edx, 1
ror edx, 3
ror edx, 2
and ax, cx
ror r8d, 8
xor ax, word [r15 + r9 - 2]
xchg rsp, rsp
inc rdi
mov word [r9 - 2], ax
cmp rdi, qword [rbx + 0x38]
mov r10, r10
jb 0x14005b2a0
mov r15, qword [rsp + 0x40]
mov rax, rbx
xchg rbx, r15
mov r15, qword [rsp + 0x48]
xchg r15, rbx
xchg rsi, rbp
mov rsi, qword [rsp + 0x50]
xchg rbp, rsi
add rsp, 0x20
mov dword [rsp - 0x18], 0x216a5bd4
pop r14
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
mov rsi, qword [rsp]
add rsp, 8
ret
xchg rbx, rax
mov rbx, rax
xchg rbx, rax
jmp 0x14005b2e6
Function at 0x14005b9c0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e999
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x1400efe90]
cmp qword [0x1400eff78], 0
mov rbp, rbp
jne 0x14008e730
syscall
ret

Function at 0x14005b9e0
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x28]
mov byte [rsp + 0x28], al
jmp 0x14008eff6
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x1400eff28]
xchg rcx, rcx
cmp qword [0x1400eff78], 0
jne 0x14008e730
syscall
xchg r12, r12
ret

Function at 0x14005b9f0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e79e
mov r10, rcx
mov dword [rsp - 0x44], 0x5c9dce23
mov eax, dword [0x1400efe60]
cmp qword [0x1400eff78], 0
jne 0x14008e730
syscall
mov r10, r10
ret

Function at 0x14005ba00
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ebf9
mov r10, rcx
xchg rdx, rdx
mov eax, dword [0x1400efec8]
cmp qword [0x1400eff78], 0
jne 0x14008e730
syscall
mov dword [rsp - 0x34], esi
ret

Function at 0x14005ba10
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e7fb
mov r10, rcx
mov eax, dword [0x1400efe68]
mov rdx, rdx
cmp qword [0x1400eff78], 0
jne 0x14008e730
syscall
ret

Function at 0x14005ba20
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ee01
xchg r10, r13
mov r13, rcx
xchg r10, r13
mov eax, dword [0x1400efef8]
xchg rsi, rsi
cmp qword [0x1400eff78], 0
jne 0x14008e730
syscall
mov r12, r12
ret

Function at 0x14005ba30
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e9c2
xchg r10, r12
mov r12, rcx
xchg r10, r12
mov eax, dword [0x1400efe94]
xchg r15, r15
cmp qword [0x1400eff78], 0
jne 0x14008e730
syscall
mov rsi, rsi
ret

Function at 0x14005ba40
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ec9b
xchg r12, r10
mov r12, rcx
xchg r10, r12
mov eax, dword [0x1400efed8]
mov dword [rsp - 0x38], edi
cmp qword [0x1400eff78], 0
jne 0x14008e730
syscall
ret

Function at 0x14005ba50
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e7cd
xchg r14, rcx
mov r10, r14
xchg r14, rcx
mov eax, dword [0x1400efe64]
cmp qword [0x1400eff78], 0
mov dword [rsp - 0xc], esp
jne 0x14008e730
syscall
ret

Function at 0x14005ba60
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ed81
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x1400efeec]
mov dword [rsp - 0x38], 0x2e1e0ecb
cmp qword [0x1400eff78], 0
jne 0x14008e730
syscall
ret

Function at 0x14005ba70
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008eb9a
xchg rcx, r11
mov r10, r11
xchg rcx, r11
mov eax, dword [0x1400efec0]
mov dword [rsp - 0x34], 0x113a1fa6
cmp qword [0x1400eff78], 0
jne 0x14008e730
syscall
ret

Function at 0x14005ba80
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ebc8
xchg rcx, rsp
mov r10, rsp
xchg rsp, rcx
mov eax, dword [0x1400efec4]
mov dword [rsp - 0xc], 0x30deb4e5
cmp qword [0x1400eff78], 0
jne 0x14008e730
syscall
mov rbx, rbx
ret

Function at 0x14005ba90
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ea3e
xchg r10, r11
mov r11, rcx
xchg r10, r11
mov eax, dword [0x1400efea0]
mov dword [rsp - 0x20], ebp
cmp qword [0x1400eff78], 0
jne 0x14008e730
syscall
xchg rdx, rdx
ret
Function at 0x14005baa0
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x58]
mov r15, r15
mov byte [rsp + 0x58], al
movzx eax, byte [rsp + 0x48]
mov byte [rsp + 0x48], al
mov dword [rsp - 0x10], ebx
jmp 0x14008efcd
xchg rcx, r8
mov r10, r8
xchg rcx, r8
mov eax, dword [0x1400eff24]
cmp qword [0x1400eff78], 0
jne 0x14008e730
mov r12, r12
syscall
ret

Function at 0x14005bac0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e8ca
xchg rcx, r12
mov r10, r12
xchg r12, rcx
mov eax, dword [0x1400efe7c]
cmp qword [0x1400eff78], 0
jne 0x14008e730
mov dword [rsp - 0x28], 0x1bec0e26
syscall
ret

Function at 0x14005bad0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e8f8
mov r10, rcx
mov dword [rsp - 0x14], 0x3eb09d7d
mov eax, dword [0x1400efe80]
cmp qword [0x1400eff78], 0
jne 0x14008e730
syscall
xchg rsi, rsi
ret

Function at 0x14005bae0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e923
xchg r8, r10
mov r8, rcx
xchg r8, r10
mov eax, dword [0x1400efe84]
mov dword [rsp - 0xc], ebx
cmp qword [0x1400eff78], 0
jne 0x14008e730
syscall
ret

Function at 0x14005baf0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e94d
mov r10, rcx
mov eax, dword [0x1400efe88]
cmp qword [0x1400eff78], 0
mov rdx, rdx
jne 0x14008e730
syscall
ret

Function at 0x14005bb00
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e89c
xchg r10, rsi
mov rsi, rcx
xchg rsi, r10
mov eax, dword [0x1400efe78]
cmp qword [0x1400eff78], 0
jne 0x14008e730
mov dword [rsp - 0x20], 0x223aeb13
syscall
ret

Function at 0x14005bb10
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ee2d
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x1400efefc]
xchg r12, r12
cmp qword [0x1400eff78], 0
jne 0x14008e730
syscall
mov dword [rsp - 0x1c], 0x2412e95
ret

Function at 0x14005bb20
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e970
xchg r10, r14
mov r14, rcx
xchg r10, r14
mov eax, dword [0x1400efe8c]
cmp qword [0x1400eff78], 0
jne 0x14008e730
mov rsi, rsi
syscall
ret

Function at 0x14005bb30
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e81e
mov r10, rcx
mov eax, dword [0x1400efe6c]
cmp qword [0x1400eff78], 0
xchg r10, r10
jne 0x14008e730
syscall
ret

Function at 0x14005bb40
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e9ee
mov r10, rcx
mov eax, dword [0x1400efe98]
mov rbp, rbp
cmp qword [0x1400eff78], 0
jne 0x14008e730
syscall
mov dword [rsp - 0x28], edx
ret

Function at 0x14005bb50
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ec4a
mov r10, rcx
mov dword [rsp - 0x28], ecx
mov eax, dword [0x1400efed0]
cmp qword [0x1400eff78], 0
jne 0x14008e730
syscall
mov r15, r15
ret

Function at 0x14005bb60
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ecc5
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x1400efedc]
xchg r9, r9
cmp qword [0x1400eff78], 0
jne 0x14008e730
syscall
mov dword [rsp - 0x28], 0x1ca1e6ac
ret
Function at 0x14005bb70
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008f022
add rsp, 0xfffffffffffffee0
lea rcx, [0x14008e791]
xchg r13, r13
nop
sub rsp, 8
mov qword [rsp], rcx
push rbp
mov r12, r12
push rsi
nop
sub rsp, 8
mov qword [rsp], rdi
push qword [0x1400eff80]
lea rsi, [rsp + 0x170]
xchg rsi, rsi
lea rdi, [rsp + 0x28]
mov ecx, 0x5c0e4b97
add ecx, 0x22e2c14b
sub ecx, 0xcd7116
sub ecx, 0x7e239bbc
rep movsq qword [rdi], qword [rsi]
xchg rsp, rsp
jmp qword [0x1400eff78]
xchg rcx, rsi
mov r10, rsi
xchg rsi, rcx
mov eax, dword [0x1400eff2c]
cmp qword [0x1400eff78], 0
jne 0x14008e730
xchg r13, r13
syscall
ret

Function at 0x14005bb80
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e86f
xchg rcx, r13
mov r10, r13
xchg rcx, r13
mov eax, dword [0x1400efe74]
mov dword [rsp - 0x18], esp
cmp qword [0x1400eff78], 0
jne 0x14008e730
syscall
xchg r9, r9
ret

Function at 0x14005bb90
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008efa4
xchg r10, rdi
mov rdi, rcx
xchg rdi, r10
mov eax, dword [0x1400eff20]
cmp qword [0x1400eff78], 0
jne 0x14008e730
xchg r10, r10
syscall
ret

Function at 0x14005bba0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ef55
mov r10, rcx
mov eax, dword [0x1400eff18]
cmp qword [0x1400eff78], 0
mov dword [rsp - 0x2c], 0xbdd7a5
jne 0x14008e730
syscall
ret

Function at 0x14005bbb0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ef7d
mov r10, rcx
mov dword [rsp - 0x34], ecx
mov eax, dword [0x1400eff1c]
cmp qword [0x1400eff78], 0
jne 0x14008e730
syscall
mov rsi, rsi
ret

Function at 0x14005bbc0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008e841
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x1400efe70]
mov dword [rsp - 0x2c], 0x6e29f325
cmp qword [0x1400eff78], 0
jne 0x14008e730
syscall
ret

Function at 0x14005bbd0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008ea15
xchg rbx, rcx
mov r10, rbx
xchg rbx, rcx
mov eax, dword [0x1400efe9c]
cmp qword [0x1400eff78], 0
jne 0x14008e730
xchg rdx, rdx
syscall
ret
Function at 0x14006f93c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
xchg rsi, r10
mov qword [rsp + 0x18], r10
xchg r10, rsi
xchg rdi, rcx
mov qword [rsp + 0x20], rcx
xchg rdi, rcx
nop
push 0x60cfb8aa
mov qword [rsp], rbp
xchg rbp, r11
mov r11, rsp
xchg rbp, r11
add rsp, 0xffffffffffffffa0
movabs rbx, 0x68cc10c4238058d7
add rbx, 0x2787aec9
xor rbx, 0x2a1921c6
sub rbx, 0x1ec1a9a8
xchg rdi, rbx
mov rbx, rcx
xchg rbx, rdi
cmp qword [rcx + 0x30], rbx
xchg r12, r12
jne 0x14006fb4c
xor esi, esi
mov dword [rbp - 0x40], 0x74953fe4
sub dword [rbp - 0x40], 0x27b700f2
add dword [rbp - 0x40], 0x187af6f7
xor dword [rbp - 0x40], 0x26ee139c
sub dword [rbp - 0x40], 0x43462642
mov dword [rbp - 0x3c], 0x505bdf10
add dword [rbp - 0x3c], 0xe6d6fb4
add dword [rbp - 0x3c], 0x1fe377fe
sub dword [rbp - 0x3c], 0x3bc357d8
sub dword [rbp - 0x3c], 0x42986eb6
mov dword [rbp - 0x38], 0x32d621c5
add dword [rbp - 0x38], 0x3270cd11
sub dword [rbp - 0x38], 0x446877ab
xor dword [rbp - 0x38], 0x20a27729
mov dword [rbp - 0x34], 0x37d3d8db
xor dword [rbp - 0x34], 0x7746577c
sub dword [rbp - 0x34], 0x193b3eae
sub dword [rbp - 0x34], 0x27585088
mov dword [rbp - 0x30], 0x1e02b454
xor dword [rbp - 0x30], 0x5cf96f50
add dword [rbp - 0x30], 0x81d4bd8
add dword [rbp - 0x30], 0x249bfd9f
sub dword [rbp - 0x30], 0x6f44241f
mov dword [rbp - 0x2c], 0x5cb5c2fd
sub dword [rbp - 0x2c], 0x456f0945
add dword [rbp - 0x2c], 0x54f7ff23
xor dword [rbp - 0x2c], 0x6c62b8f5
mov qword [rbp + 0x10], rsi
xchg rdx, rdx
mov rax, qword [rbp + 0x10]
mov rcx, qword [rbp + 0x10]
xchg r11, rax
mov r11, qword [rbp + 0x10]
xchg r11, rax
and cl, 3
shl cl, 3
movzx edx, word [rbp + rax*2 - 0x40]
mov dword [rsp - 0x40], edx
mov eax, 0xa0e729f
add eax, 0x5591c16
xor eax, 0x1fcda230
add eax, 0x1f97e8ed
shr eax, cl
movzx ecx, al
mov dword [rsp - 0x34], 0x36775cc
mov rax, qword [rbp + 0x10]
xor cx, dx
mov word [rbp + rax*2 - 0x28], cx
mov rax, qword [rbp + 0x10]
xchg r10, r10
inc rax
mov qword [rbp + 0x10], rax
xchg r10, rax
mov r10, qword [rbp + 0x10]
xchg r10, rax
cmp rax, 0xc
mov r9, r9
jb 0x14006fa6d
xor edx, edx
mov word [rbp - 0x10], si
mov dword [rsp - 0x3c], ecx
lea rcx, [rbp - 0x28]
call fcn.140085750
xchg rdx, rax
mov rax, rdx
xchg rdx, rax
mov r8, rax
xor eax, eax
mov dword [rsp - 0x40], 0xc3360fa
xor rdx, rbx
xchg rdx, rsi
mov qword [rdi + 0x30], rsi
xchg rdx, rsi
lea rdi, [rbp - 0x28]
mov dword [rsp - 0x38], 0x77c475c1
lea ecx, [rax + 0xc]
rep stosb byte [rdi], al
cmp rdx, rbx
mov dword [rsp - 0x3c], esp
je 0x14006fb54
lea rdx, [0x1400ef2c0]
xchg rcx, r10
mov r10, r8
xchg r10, rcx
call fcn.140074354
mov r8, r8
test al, al
setne al
jmp 0x14006fb54
mov al, 0xb
add al, 0x4b
add al, 0x1a
xor al, 0x71
lea r11, [rsp + 0x60]
mov dword [rsp - 0xc], 0x7f09ed22
xchg r10, rbx
mov r10, qword [r11 + 0x18]
xchg r10, rbx
mov rsi, qword [r11 + 0x20]
mov dword [rsp - 0x44], 0xd819761
xchg rsi, rdi
mov rsi, qword [r11 + 0x28]
xchg rsi, rdi
xchg r13, rsp
mov r13, r11
xchg rsp, r13
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret