joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400230c2
Capabilities:
Execute syscall

Disassembly:
adc byte [rax], al
add cl, al
frstor dword [rax]
lea r10d, [rbp - 0xde3d]
syscall
rol r13d, 0x43
movabs rdi, 0xeb7216f475e5ceb
div r15
inc r14
call rax
popfq
test ecx, 0x29dca3db
cmp ebp, 0x830e4ec6
cpuid
ret
Function at 0x14002bf36
Capabilities:
Execute syscall

Disassembly:
popf
div r11
rcl r8d, 0x21
jno 0x14002b526
and ecx, 0xa7e4794c
call rax
cmp ebp, 0x85d610de
cpuid
rol esi, 0xd5
syscall
cmp rdi, rbx
movabs r14, 0x77e99ea9291775eb
dec rdx
lea r13d, [rcx + 0xb68a]
ret 0x28

Function at 0x14002d7f1
Capabilities:
Execute syscall

Disassembly:
ror byte [rax - 0x75], 1
iretd
xorps xmm0, xmm0
mov qword [rbp - 0x48], rcx
movups xmmword [rbp - 0x40], xmm0
mov dword [rsp - 0x3c], ebp
mov dword [rsp - 0x3c], 0x25ad1a07
mov dword [rsp - 0x34], 0x34f790b0
mov r9, r9
jne 0x14002d5f5
je 0x14002d5f5
ror r11d, 0xaf
lea r13d, [rcx + 0x6e41]
jmp rcx
jmp 0x14002d6ac
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
test rax, rax
jmp 0x14002d7e4
cmp rcx, rdx
je 0x14002d930
call fcn.140097490
je 0x14002d701
jne 0x14002d701
rcr ecx, 0xb5
lea r11d, [rdi - 0x40e8]
movabs r8, 0x30452900000222e9
call rax
and edi, 0xf3afa9f2
call fcn.14002d6cd
jmp 0x14002d928
push rbp
movabs rbp, 0x3be30b000000a4e9
jne 0x14002d719
jmp 0x14002d7c2
je 0x14002d719
jne 0x14002d74b
je 0x14002d74b
pop rbx
lea r13d, [rdi + 0x8693]
rcr ecx, 0x90
push r15
ret
jmp 0x14002d7b7
mov byte [rbp + 0x28], 0x36
lea rcx, [rbp - 0x40]
mov dword [rsp - 0x38], 0x315a6fb0
xchg rdi, rdi
mov dword [rsp - 0x40], 0x615b37ec
mov eax, 1
je 0x14002d79c
jne 0x14002d79c
neg rdx
je 0x14002d12e
rol edi, 0x5b
jne 0x14002e347
ret
jmp 0x14002d958
call 0x14002d7f1
add rsp, 0x24
pop rbp
ret
pop rbp
jmp 0x14002d81a
mov dword [rsp - 0x18], edx
mov dword [rsp - 0x3c], 0x713672dd
mov rsp, rsp
mov dword [rsp - 0x28], 0x6ce2505f
jmp 0x14002d6e3
je 0x14002d61e
mov dword [rsp - 0x1c], 0x29f07883
mov dword [rsp - 0x20], 0x24c691fb
jne 0x14002d800
je 0x14002d800
movabs r14, 0x3a3155ffffff11e9
syscall
ror ebp, 0xcb
rcr edx, 8
and r15d, 0xcce0b401
ret 0x10
jmp 0x14002d716
nop dword [rax]
nop word [rax + rax]
mov dword [rsp - 0x34], 0x77ee4ff
mov dword [rsp - 0x14], 0x75d1efeb
mov dword [rsp - 0x38], 0x458a5c02
pop rsp
mov al, byte [rbp + 0x48]
mov dword [rbp - 0x10], eax
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
jmp 0x14002d7c8
mov rbp, rbp
xorps xmm0, xmm0
jmp 0x14002d763
mov rax, qword [rbp - 0x10]
mov dword [rsp - 0x40], esi
lea rcx, [rbp - 0x40]
jmp 0x14002d5aa
lea rdx, [rbp - 0x40]
mov qword [rbp - 0x48], rcx
xchg rcx, rcx
jmp 0x14002d832
mov byte [rcx + 0x3f], bh
fdivr dword [rax]
jp 0x14002e302
pop rsp
Function at 0x14002fea0
Capabilities:
Execute syscall

Disassembly:
sub rsp, 0x18
mov eax, 0x5f
mov dword [rsp - 0x20], 0x71826f51
mov dword [rsp - 0x14], 0x44ef67c
jmp 0x14003011a
jne 0x14003015d
je 0x14003015d
mov r8, rcx
mov dword [rsp + 8], 0x6b004b
add byte [rbx], ch
xor r9d, r9d
xchg r8, r8
xchg r14, r14
mov dword [rsp - 0x24], 0x5f54909d
mov dword [rsp - 0x2c], 0x77d3acfd
mov dword [rsp - 0x18], 0x3d87a7f9
mov dword [rsp + 4], 0x38006f
jne 0x1400300a5
je 0x1400300a5
rol r12d, 3
call rax
cmp r14, rbx
popfq
cmp ecx, 0xb8866777
add r10d, 0xd61be380
jmp rcx
jmp 0x14002ff42
pop r11
jmp 0x140030040
invalid
xchg r14, r14
mov dword [rsp - 0x10], 0x74a00c62
mov dword [rsp], 0x6b004b
jmp 0x140030154
mov word [rsp + 0xc], ax
push r11
movabs r11, 0x1cf623f852e189eb
je 0x140030179
jmp 0x1400300e8
jne 0x140030179
div r15
ror r8d, 8
div r13
syscall
call rcx
movabs r9, 0x764314fffffd92e9
ret
jmp 0x14002ff10

Function at 0x140030ee1
Capabilities:
Execute syscall

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rdx
mov dword [rsp - 0x34], 0x136e5d27
mov dword [rsp - 0xc], edx
mov qword [rax + 0x18], r8
mov qword [rax + 0x20], r9
push rbx
jmp 0x140030e73
pop rbp
ret
pop rbp
mov rdi, rdi
jmp 0x140030e35
push rbp
movabs rbp, 0x2a3d9e137d18f2eb
jne 0x140030e1b
jmp 0x140030e0f
je 0x140030e1b
call 0x140030ee1
add rsp, 0x30
jmp 0x140030e0d
pop rdi
pop rsi
pop rbx
ret
mov dword [rsp - 0x10], 0x77c286be
mov rdx, rdi
mov rcx, qword [rax]
jmp 0x140030f79
xchg rdi, rdi
mov dword [rsp - 0x34], 0x62cd1f44
mov dword [rsp - 0x28], edi
mov dword [rsp - 0x38], ebp
mov r9, rbx
and qword [rsp + 0x20], 0
mov r8d, 0x80
jmp 0x140030e39
push rsi
mov dword [rsp - 0x28], esp
mov dword [rsp - 0x20], 0x31c52b10
jmp 0x140030f15
lea rsi, [rax + 0x18]
mov rdi, rcx
call fcn.1400185b0
mov qword [rsp + 0x28], rsi
jmp 0x140030e4c
xchg rdx, rdx
xchg r13, r13
mov dword [rsp - 0x38], 0x7773a00c
test eax, eax
cmovs eax, ecx
add rsp, 0x30
mov dword [rsp - 0x30], 0x6b4b2b1b
jne 0x140030ed2
je 0x140030ed2
jp 0x140031d17
mov r8d, 0x63d01a41
lea ebx, [rbp + 0x2a65]
movabs r9, 0x131b0effffff41e9
and r13d, 0x14755f01
jmp 0x140031baf
jmp 0x140030e18
mov dword [rsp - 0xc], 0x67b42dc1
push r12
movabs r12, 0x11d700e9462f40eb
jne 0x140030efb
jmp 0x140030f3d
je 0x140030efb
call 0x140030e94
add rsp, 0x30
jmp 0x140030f3a
mov dword [rsp - 0x10], 0x6331021
mov dword [rsp - 0x14], 0x5e2f4c0c
push rdi
sub rsp, 0x30
mov rbx, rdx
mov dword [rsp - 0x44], 0xad79639
jmp 0x140030eef
pop r12
ret
pop r12
jne 0x140030f64
je 0x140030f64
jmp rcx
jmp 0x140030e85
call fcn.140097d00
or ecx, 0xffffffff
mov dword [rsp - 0x28], ebp
xchg r11, r11
mov dword [rsp - 0x14], 0x756af0dc
and al, 0xec
fdivr st(0), st(0)
push 0x75
jmp 0x140030e9b
invalid
add byte [rax], al
add byte [rax - 0x73], cl
push rdi
add dword [rax - 0x77], ecx
adc byte [r8 - 0x77], r9b
fcmovnb st(0), st(7)
and al, 0xcc
invalid
Function at 0x14005034b
Capabilities:
Encode data using xor

Disassembly:
mov ecx, ecx
dec rbp
and r11d, 0xafb324f6
inc r8
movabs r13, 0x317988ffffff38e9
neg r14
jnp 0x14004f5a1
jp 0x140050691
jmp 0x14004f653
movabs dword [0x81b91c848de781a5], eax
loop 0x1400506b3
xor dword ss:[rdi + 0x7d23ee81], 0xc3e976b0
invalid
invalid
Function at 0x140052fd0
Capabilities:
Encode data using xor

Disassembly:
xchg rsi, rbx
mov qword [rsp + 8], rsi
xchg rsi, rbx
mov qword [rsp + 0x10], rbp
xchg rbp, rsi
mov qword [rsp + 0x18], rbp
xchg rbp, rsi
nop
sub rsp, 8
mov qword [rsp], rdi
push r12
xchg rsp, rsp
nop
mov qword [rsp - 8], r13
sub rsp, 8
push r14
nop
sub rsp, 8
mov qword [rsp], r15
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
xchg r13, r11
mov r11, qword [r8 + 0x38]
xchg r13, r11
xchg rdi, rdx
mov r15, rdi
xchg rdi, rdx
add r13, qword [rdx + 0x38]
xchg rcx, rbx

Function at 0x1400532d0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rsi
mov qword [rsp + 8], rsi
xchg rbx, rsi
xchg rbp, rsi
mov qword [rsp + 0x10], rsi
xchg rbp, rsi
xchg rsi, rbp
mov qword [rsp + 0x20], rbp
xchg rsi, rbp
mov word [rsp + 0x18], r8w
push rdi
mov dword [rsp - 0x44], 0x288836d4
push r12
push r15
mov qword [rsp], r13
nop
sub rsp, 8
mov qword [rsp], r14
nop
mov qword [rsp - 8], r15
sub rsp, 8
neg rsp
sub rsp, 0xffffffffffffffa0
neg rsp
mov r12, qword [rdx + 0x38]
mov dword [rsp - 0x18], esi
xchg rdi, r15
mov r15, rdx
xchg rdi, r15
xchg rcx, r15
mov rcx, r15
xchg rcx, r15
nop
sub r12, 0x61028e7b
add r12, 0x61028e7d
mov eax, 0xf8953a6
add eax, 0x17171109
xor eax, 0x20453d38
sub eax, 0x6e55995
nop
movabs rsi, 0xffffffff34a4dc8a
add rsi, 0x34cb024
xor rsi, 0x1990a13a
add rsi, 0x7fffffff
add rsi, 0x519ed26c
mul r12
mov dword [rsp - 0x44], 0xc4b2547
cmovo rax, rsi
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
call fcn.1400972b0
xchg r13, rsp
mov rsp, qword [rdi + 0x38]
xchg r13, rsp
lea rcx, [rsp + 0x20]
mov dword [rsp - 0xc], 0x515597c4
mov rbp, qword [rdi]
xorps xmm0, xmm0
xchg r14, rbx
mov rbx, rax
xchg r14, rbx
lea rax, [rsp + 0x28]
mov qword [rsp + 0x20], rax
mov r13, r13
lea rdx, [r13 + 1]
xchg rsp, r13
movups xmmword [r13 + 0x28], xmm0
xchg r13, rsp
xchg r11, rsp
movups xmmword [r11 + 0x38], xmm0
xchg rsp, r11
movups xmmword [rsp + 0x48], xmm0
Function at 0x140053650
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rdx
mov qword [rsp + 8], rdx
xchg rbx, rdx
xchg rsi, rbx
mov qword [rsp + 0x10], rbx
xchg rsi, rbx
nop
sub rsp, 8
mov qword [rsp], rdi
add rsp, 0xffffffffffffffe0
mov dword [rsp - 0x2c], edi
xchg rsi, r14
mov r14, qword [rcx + 0x38]
xchg r14, rsi
mov rbx, rdx
mov rcx, rcx
xchg r8, rsp
mov rsp, qword [rdx + 0x38]
xchg r8, rsp
xchg rcx, rsi
mov rdi, rsi
xchg rsi, rcx
add r8, rsi
mov dword [rsp - 0xc], 0x7b0a2443
xchg rsp, rsi
mov rdx, rsp
xchg rsi, rsp
xchg rdx, r8
mov qword [rcx + 0x38], rdx
xchg rdx, r8
call fcn.140054300
mov dword [rsp - 0x24], 0xf9e0a75
xchg r9, r14
mov r14, qword [rbx]
xchg r14, r9
mov ecx, esi
mov rbx, rbx
and ecx, 3
mov r8d, 0x771f162d
xor r8d, 0x529afe18
sub r8d, 0x6d2ffaa
sub r8d, 0x65dd01d
shl ecx, 2
shl ecx, 1
mov edx, r8d
ror edx, cl
xchg r12, r12
mov r10, rax
xor ecx, ecx
cmp qword [rbx + 0x38], rcx
jbe 0x14005378c
xchg r15, r15
lea rax, [rsi + rsi]
mov r11d, 0x5ed69ea
xor r11d, 0x384d77ff
add r11d, 0x3f940261
sub r11d, 0x7d341f77
sub rax, r9
add r10, rax
mov dword [rsp - 0x40], esi
nop dword [rax]
movzx eax, dx
lea r9, [r9 + 2]
mov dword [rsp - 0x38], ebp
xor ax, r8w
ror edx, 5
ror edx, 1
ror edx, 1
ror edx, 1
and ax, r11w
xchg r11, r11
ror r8d, 4
ror r8d, 1
ror r8d, 2
ror r8d, 1
xor ax, word [r9 - 2]
mov dword [rsp - 0x10], 0x79794b8e
inc rcx
mov word [r10 + r9 - 2], ax
cmp rcx, qword [rbx + 0x38]
jb 0x14005373c
mov r10, r10
mov rbx, qword [rsp + 0x30]
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
xchg rdx, rsi
mov rdx, qword [rsp + 0x38]
xchg rsi, rdx
sub rsp, 0xffffffffffffffe0
nop
mov rdi, qword [rsp]
add rsp, 8
ret
Function at 0x1400537c0
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rcx
mov qword [rsp + 8], rcx
xchg rbx, rcx
xchg rsi, rcx
mov qword [rsp + 0x10], rcx
xchg rcx, rsi
xchg rdi, rsi
mov qword [rsp + 0x18], rsi
xchg rdi, rsi
nop
sub rsp, 8
mov qword [rsp], r14
nop
sub rsp, 0x6c2737e4
add rsp, 0x6c2737c4
xchg r10, r14
mov r10, qword [rcx + 0x38]
xchg r10, r14
xchg rdx, r11
mov rdi, r11
xchg rdx, r11
mov rsi, rcx
nop
movabs rbx, 0xffffffff061f7b75
xor rbx, 0x2a354abf
xor rbx, 0x12078a70
sub rbx, 0x484be96
add rbx, 0x7fffffff
add rbx, 0x465702dc
inc rbx
cmp word [rdx + rbx*2], 0
jne 0x14005383d
mov rsi, rsi
lea r8, [r14 + rbx]
xchg rdx, rsp
mov rsp, r14
xchg rdx, rsp
mov qword [rcx + 0x38], r8
mov dword [rsp - 0x18], ecx
call fcn.140054300
mov ecx, r14d
mov edx, 0x4cc3a9c3
sub edx, 0x1a4766e9
xor edx, 0x329a02d1
add edx, 0x54e1b75c
sub edx, 0x3d72def9
and ecx, 3
shl ecx, 2
shl ecx, 1
ror edx, cl
mov dword [rsp - 0xc], edx
test rbx, rbx
je 0x140053908
lea r8, [r14 + r14]
mov dword [rsp - 0x2c], edx
mov ecx, 0x289ced99
add ecx, 0x2834e4b0
sub ecx, 0x34dbc1
xor ecx, 0x11b3dae4
xor ecx, 0x412f2c93
sub r8, rdi
add r8, rax
mov r8, r8
nop dword [rax]
nop dword [rax + rax]
movzx eax, dx
lea rdi, [rdi + 2]
mov r14, r14
and ax, cx
ror edx, 1
ror edx, 4
ror edx, 2
ror edx, 1
xor ax, word [rdi - 2]
mov dword [rsp - 0x30], edx
mov word [r8 + rdi - 2], ax
sub rbx, 1
jne 0x1400538d9
xchg rdx, rbx
mov rdx, qword [rsp + 0x30]
xchg rbx, rdx
xchg rsi, rdx
mov rax, rdx
xchg rdx, rsi
xchg rsi, r14
mov r14, qword [rsp + 0x38]
xchg rsi, r14
xchg r8, rdi
mov r8, qword [rsp + 0x40]
xchg r8, rdi
add rsp, 0x20
pop r14
ret
Function at 0x140054171
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r9
mov qword [rsp + 0x10], r9
xchg r9, rbx
mov qword [rsp + 0x18], rbp
mov dword [rsp - 0x1c], 0x5e6233eb
push rsi
push rdi
nop
mov qword [rsp - 8], r14
sub rsp, 8
add rsp, 0xffffffffffffffe0
mov dword [rsp - 0x10], edi
lea rsi, [rdx + 8]
xorps xmm0, xmm0
mov qword [rdx], rsi
xor edi, edi
mov dword [rsp - 0x1c], edi
movups xmmword [rsi], xmm0
xchg r9, r12
mov r14, r12
xchg r12, r9
xchg r15, rbp
mov r15, r8
xchg r15, rbp
movups xmmword [rsi + 0x10], xmm0
mov dword [rsp - 0x30], edi
xchg rbx, r14
mov r14, rdx
xchg rbx, r14
movups xmmword [rsi + 0x20], xmm0
mov dword [rsp - 0x40], ebp
mov qword [rdx + 0x38], rdi
mov rax, qword [rcx + 0x38]
cmp r8, rax
mov dword [rsp - 0xc], esi
jae 0x14005428b
sub rax, r8
mov qword [rsp + 0x40], r15
mov r15, r15
cmp rax, r9
cmovb r14, rax
xchg r14, rbp
mov qword [rdx + 0x38], rbp
xchg r14, rbp
mov rax, qword [rcx]
xchg rsp, rsp
mov rcx, qword [rdx]
lea r15, [rax + r8*2]
cmp rcx, rsi
je 0x140054129
xchg r13, r13
call fcn.140097490
cmp r14, 0x18
jbe 0x14005415f
lea rcx, [r14 + r14]
mov rdx, rdx
call fcn.140097730
mov qword [rbx], rax
test rax, rax
xchg r14, r14
jne 0x14005416f
mov qword [rbx], rsi
xchg rdi, rbx
mov r9, rbx
xchg rbx, rdi
jmp 0x14005418b
xchg rsp, rsi
mov qword [rbx], rsp
xchg rsi, rsp
xchg rbx, rax
mov rbx, rsi
xchg rbx, rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov rsp, rsp
xchg rbp, rax
movups xmmword [rbp + 0x10], xmm0
xchg rbp, rax
movups xmmword [rax + 0x20], xmm0
mov dword [rsp - 0x10], edx
mov r9, qword [rbx]
and ebp, 3
mov r8d, 0x7f36d013
xor r8d, 0x1c3976e6
sub r8d, 0x1814a1e
sub r8d, 0x21e7c44f
xor r8d, 0x27f380e6
shl ebp, 3
mov r12, r12
mov edx, r8d
movzx ecx, bpl
ror edx, cl
cmp qword [rbx + 0x38], rdi
xchg rdi, rdi
jbe 0x140054244
sub r15, r9
mov ecx, 0x58978e58
sub ecx, 0x3ec42339
add ecx, 0x5d5ca37a
xor ecx, 0x308488ed
sub ecx, 0x47b48575
nop dword [rax]
nop word [rax + rax]
movzx eax, dx
mov dword [rsp - 0x20], esi
lea r9, [r9 + 2]
xor ax, r8w
ror edx, 6
ror edx, 1
ror edx, 1
and ax, cx
mov dword [rsp - 0x2c], 0x1fdc031b
ror r8d, 2
ror r8d, 4
ror r8d, 1
ror r8d, 1
xor ax, word [r15 + r9 - 2]
inc rdi
mov dword [rsp - 0x18], esi
mov word [r9 - 2], ax
cmp rdi, qword [rbx + 0x38]
jb 0x1400541f9
mov r15, qword [rsp + 0x40]
xchg rcx, rcx
xchg rbx, r8
mov rax, r8
xchg r8, rbx
mov rbx, qword [rsp + 0x48]
xchg rbp, r14
mov r14, qword [rsp + 0x50]
xchg r14, rbp
sub rsp, 0xffffffffffffffe0
mov dword [rsp - 0xc], 0x4ff33148
nop
add rsp, 8
mov r14, qword [rsp - 8]
pop rdi
mov dword [rsp - 0x14], edi
nop
add rsp, 8
mov rsi, qword [rsp - 8]
ret
xchg rbx, r9
mov rax, r9
xchg r9, rbx
jmp 0x140054255

Function at 0x140054680
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c336
mov r10, rcx
mov eax, dword [0x140140f70]
mov dword [rsp - 0x30], 0x5c0ef100
cmp qword [0x140141058], 0
jne 0x14008c0c0
syscall
xchg rdi, rdi
ret
Function at 0x1400546a0
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x28]
mov byte [rsp + 0x28], al
jmp 0x14008c978
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140141008]
mov dword [rsp - 0x1c], ebx
cmp qword [0x140141058], 0
jne 0x14008c0c0
syscall
ret

Function at 0x1400546b0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c12e
mov r10, rcx
mov eax, dword [0x140140f40]
mov dword [rsp - 0x28], 0x460f3b21
cmp qword [0x140141058], 0
jne 0x14008c0c0
syscall
mov dword [rsp - 0x34], esp
ret

Function at 0x1400546c0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c6c6
mov r10, rcx
mov eax, dword [0x140140fc8]
mov dword [rsp - 0x40], ebx
cmp qword [0x140141058], 0
jne 0x14008c0c0
syscall
ret

Function at 0x1400546d0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c590
mov r10, rcx
mov eax, dword [0x140140fa8]
mov rbp, rbp
cmp qword [0x140141058], 0
jne 0x14008c0c0
syscall
ret

Function at 0x1400546e0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c18c
xchg r13, r10
mov r13, rcx
xchg r10, r13
mov eax, dword [0x140140f48]
cmp qword [0x140141058], 0
mov dword [rsp - 0x10], 0xf430bee
jne 0x14008c0c0
syscall
ret

Function at 0x1400546f0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c7e4
xchg rcx, r8
mov r10, r8
xchg r8, rcx
mov eax, dword [0x140140fe4]
cmp qword [0x140141058], 0
mov dword [rsp - 0x18], 0x684453a2
jne 0x14008c0c0
syscall
ret

Function at 0x140054700
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c812
xchg rcx, r13
mov r10, r13
xchg r13, rcx
mov eax, dword [0x140140fe8]
cmp qword [0x140141058], 0
jne 0x14008c0c0
mov rbx, rbx
syscall
ret

Function at 0x140054710
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c73a
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140140fd4]
xchg rbp, rbp
cmp qword [0x140141058], 0
jne 0x14008c0c0
syscall
mov dword [rsp - 0xc], esi
ret

Function at 0x140054720
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c767
mov r10, rcx
mov eax, dword [0x140140fd8]
xchg r12, r12
cmp qword [0x140141058], 0
jne 0x14008c0c0
syscall
ret

Function at 0x140054730
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c361
xchg r8, rcx
mov r10, r8
xchg r8, rcx
mov eax, dword [0x140140f74]
cmp qword [0x140141058], 0
jne 0x14008c0c0
mov r13, r13
syscall
ret

Function at 0x140054740
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c629
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140140fb8]
xchg rsi, rsi
cmp qword [0x140141058], 0
jne 0x14008c0c0
syscall
mov dword [rsp - 0x3c], 0x4da7b738
ret

Function at 0x140054750
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c680
mov r10, rcx
mov eax, dword [0x140140fc0]
cmp qword [0x140141058], 0
mov r13, r13
jne 0x14008c0c0
syscall
ret

Function at 0x140054760
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c15e
xchg r10, rbx
mov rbx, rcx
xchg r10, rbx
mov eax, dword [0x140140f44]
cmp qword [0x140141058], 0
mov dword [rsp - 0x1c], ebx
jne 0x14008c0c0
syscall
ret
Function at 0x140054770
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c6ea
mov r10, rcx
mov eax, dword [0x140140fcc]
cmp qword [0x140141058], 0
mov dword [rsp - 0x20], ebx
jne 0x14008c0c0
syscall
ret

Function at 0x140054780
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c53e
xchg rcx, r15
mov r10, r15
xchg r15, rcx
mov eax, dword [0x140140fa0]
xchg rbx, rbx
cmp qword [0x140141058], 0
jne 0x14008c0c0
syscall
ret

Function at 0x140054790
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c567
xchg rdx, r10
mov rdx, rcx
xchg rdx, r10
mov eax, dword [0x140140fa4]
cmp qword [0x140141058], 0
xchg r14, r14
jne 0x14008c0c0
syscall
ret

Function at 0x1400547a0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c3dc
mov r10, rcx
mov eax, dword [0x140140f80]
cmp qword [0x140141058], 0
mov dword [rsp - 0x28], 0x70276517
jne 0x14008c0c0
syscall
ret

Function at 0x1400547b0
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x58]
mov dword [rsp - 0x2c], 0x64499b06
mov byte [rsp + 0x58], al
movzx eax, byte [rsp + 0x48]
mov byte [rsp + 0x48], al
mov dword [rsp - 0x14], 0x153b0bfc
jmp 0x14008c947
xchg r14, r10
mov r14, rcx
xchg r14, r10
mov eax, dword [0x140141004]
mov dword [rsp - 0x34], 0x436c435f
cmp qword [0x140141058], 0
jne 0x14008c0c0
syscall
xchg r11, r11
ret

Function at 0x1400547e0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c26b
xchg r10, rbp
mov rbp, rcx
xchg r10, rbp
mov eax, dword [0x140140f5c]
cmp qword [0x140141058], 0
mov dword [rsp - 0xc], ebp
jne 0x14008c0c0
syscall
ret

Function at 0x1400547f0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c295
xchg rbx, r10
mov rbx, rcx
xchg r10, rbx
mov eax, dword [0x140140f60]
cmp qword [0x140141058], 0
mov dword [rsp - 0x1c], ebx
jne 0x14008c0c0
syscall
ret

Function at 0x140054800
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c2bf
mov r10, rcx
mov eax, dword [0x140140f64]
cmp qword [0x140141058], 0
mov r14, r14
jne 0x14008c0c0
syscall
ret

Function at 0x140054810
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c2e2
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140140f68]
cmp qword [0x140141058], 0
mov dword [rsp - 0x14], ebp
jne 0x14008c0c0
syscall
ret

Function at 0x140054820
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c23a
xchg r10, r9
mov r9, rcx
xchg r9, r10
mov eax, dword [0x140140f58]
mov dword [rsp - 0x3c], 0x6c6502ca
cmp qword [0x140141058], 0
jne 0x14008c0c0
syscall
xchg rcx, rcx
ret

Function at 0x140054830
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c78a
xchg r10, r9
mov r9, rcx
xchg r9, r10
mov eax, dword [0x140140fdc]
mov dword [rsp - 0x30], 0x5625990e
cmp qword [0x140141058], 0
jne 0x14008c0c0
syscall
mov dword [rsp - 0x24], esi
ret

Function at 0x140054840
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c30c
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140140f6c]
cmp qword [0x140141058], 0
mov dword [rsp - 0x3c], ecx
jne 0x14008c0c0
syscall
ret
Function at 0x140054850
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c1ba
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140140f4c]
cmp qword [0x140141058], 0
mov r8, r8
jne 0x14008c0c0
syscall
ret

Function at 0x140054860
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c38a
xchg r15, rcx
mov r10, r15
xchg rcx, r15
mov eax, dword [0x140140f78]
mov r14, r14
cmp qword [0x140141058], 0
jne 0x14008c0c0
syscall
ret

Function at 0x140054870
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c5dc
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140140fb0]
cmp qword [0x140141058], 0
jne 0x14008c0c0
xchg r9, r9
syscall
ret

Function at 0x140054880
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c65a
mov r10, rcx
mov r8, r8
mov eax, dword [0x140140fbc]
cmp qword [0x140141058], 0
jne 0x14008c0c0
syscall
xchg r13, r13
ret

Function at 0x1400548a0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c211
xchg rcx, rdi
mov r10, rdi
xchg rdi, rcx
mov eax, dword [0x140140f54]
cmp qword [0x140141058], 0
jne 0x14008c0c0
xchg r15, r15
syscall
ret

Function at 0x1400548b0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c91d
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140141000]
cmp qword [0x140141058], 0
mov dword [rsp - 0x10], esi
jne 0x14008c0c0
syscall
ret

Function at 0x1400548c0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c7bc
mov r10, rcx
mov eax, dword [0x140140fe0]
cmp qword [0x140141058], 0
mov dword [rsp - 0x18], 0x3119aec
jne 0x14008c0c0
syscall
ret

Function at 0x1400548d0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c8ca
xchg rcx, r15
mov r10, r15
xchg rcx, r15
mov eax, dword [0x140140ff8]
cmp qword [0x140141058], 0
mov dword [rsp - 0x10], edx
jne 0x14008c0c0
syscall
ret

Function at 0x1400548e0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c6a3
mov r10, rcx
mov eax, dword [0x140140fc4]
xchg r13, r13
cmp qword [0x140141058], 0
jne 0x14008c0c0
syscall
ret

Function at 0x1400548f0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c8f4
xchg rdx, rcx
mov r10, rdx
xchg rdx, rcx
mov eax, dword [0x140140ffc]
mov rdi, rdi
cmp qword [0x140141058], 0
jne 0x14008c0c0
syscall
ret

Function at 0x140054900
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c1e3
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140140f50]
cmp qword [0x140141058], 0
mov dword [rsp - 0x10], 0x5f3c51f6
jne 0x14008c0c0
syscall
ret

Function at 0x140054910
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008c3b3
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140140f7c]
xchg r9, r9
cmp qword [0x140141058], 0
jne 0x14008c0c0
syscall
ret