joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14001a34e
Capabilities:
Encode data using xor

Disassembly:
pop r11
xor rax, rdx
lea rdx, [rbp + 0x868]
lea edi, [rbx - 0x21fa]
lea r8d, [rdx + 0xae2c]
call fcn.14001afaf
jne 0x14001add3
je 0x14001add3
call fcn.14001a325
jne 0x14001a382
je 0x14001a382
jno 0x14001a43c
mov ebx, 0xc83afc22
movabs rsi, 0x36f09f00000637e9
popf
pushf
push r13
cmp ebp, 0x79d575c3
mov ebp, 0xc0d6fefd
jmp fcn.1400197ac
jmp 0x14001a9be
add byte [rax], al
mov bh, 0
push 0
add rsp, 0x13
pop r11
ret
jmp 0x14001a1fe

Function at 0x1400204a0
Capabilities:
Encode data using xor

Disassembly:
push rbx
mov dword [rsp - 0x1c], 0x7a855dc6
xchg r11, r11
sub rsp, 0x20
mov rbx, rcx
call fcn.1400efe0c
jmp 0x140020670
je 0x1400206a3
call fcn.14002066e
add rsp, 0x20
pop r10
ret
pop r10
jmp 0x1400204d7
xchg rsi, rsi
mov qword [rbx + 0x28], rax
lea rax, [0x1400011a8]
jmp 0x1400204ea
mov qword [rbx + 0x560], rax
lea rax, [0x1400011c0]
mov dword [rsp - 0x20], ecx
mov dword [rsp - 0x10], esp
mov dword [rsp - 0x18], ecx
mov qword [rbx + 0x8f0], 0x10
jmp 0x14002063f
mov rdx, rdx
mov dword [rsp - 0x1c], 0x6d910e53
mov dword [rsp - 0x24], 0x3e4ca223
jmp 0x14002053d
pop r14
lea rax, [0x1400010d8]
xorps xmm0, xmm0
jmp 0x140020695
mov qword [rbx + 0x8f8], rax
mov rax, rbx
movups xmmword [rbx + 0x900], xmm0
mov dword [rsp - 0x3c], 0x593bbf02
mov dword [rsp - 0x14], edi
je 0x14002058b
jne 0x14002058b
lea esi, [rcx + 0x9d6f]
rcl edx, 0x88
neg rbx
test r9d, 0xa28677b8
ja 0x1400204f6
invalid
jmp rax
jmp 0x14002061a
call 0x1400206ee
add rsp, 0x20
pop r14
ret
mov byte [rbx + 0x910], 0
mov dword [rbx + 0x914], 0
mov byte [rbx + 0x918], 0
mov dword [rsp - 0x2c], 0x3fda872f
jmp fcn.14002065c
mov qword [rbx + 0x878], rax
movabs rax, 0x3f847ae147ae147b
mov qword [rbx + 0x880], rbx
jmp 0x140020514
mov dword [rsp - 0x24], edi
mov dword [rsp - 0x24], esi
mov dword [rsp - 0x3c], 0x6bfc777d
push r14
movabs r14, 0x2b1030fffffea3e9
jmp 0x14002052c
jne 0x140020684
je 0x140020684
jmp 0x140020609
mov qword [rbx], rax
lea rax, [0x140001148]
push r10
movabs r10, 0x490a7ffffffe28e9
jne 0x1400206a3
jmp 0x1400204d0
jne 0x1400206ed
je 0x1400206ed
ja 0x14001f7cd
rcr edi, 7
lea esi, [rdx - 0x54fe]
add r10d, 0xaaf4e7eb
call rax
call rcx
jmp rax
jmp 0x1400204be
Function at 0x14002dc30
Capabilities:
Execute syscall

Disassembly:
push rbx
sub rsp, 0x20
cmp qword [rcx], 0
jmp 0x14002dd20
mov rsp, rsp
xor edi, edi
cmp qword [rcx + 8], rdi
jbe 0x14002dc5e
mov dword [rsp - 0x28], ebx
mov dword [rsp - 0x44], ebx
jmp 0x14002ddc5
ret
pop r9
mov rcx, qword [rbx]
call fcn.140098be0
je 0x14002dca4
jne 0x14002dca4
inc r8
lea r11d, [rbx - 0x250e]
int3
jmp 0x14002dd9e
add rcx, rsi
call fcn.14002de90
inc rdi
add rsi, 0x2a0
mov dword [rsp - 0x1c], 0x35c7f223
jmp 0x14002ddf1
je 0x14002dcef
call fcn.14002de81
add rsp, 0x20
pop r9
jmp 0x14002dc5b
mov dword [rsp - 0x34], edi
push r9
movabs r9, 0x79e86cffffff68e9
jne 0x14002dcef
jmp 0x14002dc5c
je 0x14002dd17
jne 0x14002dd17
popfq
or r8d, 0x8fdecd5
jmp rax
jmp 0x14002dcd5
mov dword [rsp - 0x18], 0x2dd199ce
mov dword [rsp - 0x10], 0x7bfd1fca
mov rbx, rcx
je 0x14002ddba
mov qword [rsp + 0x38], rdi
jne 0x14002dd62
je 0x14002dd62
jmp rcx
jmp 0x14002de32
pop rcx
xchg rcx, rcx
xchg r15, r15
jmp 0x14002dc3f
xchg r13, r13
mov dword [rsp - 0x30], edx
mov dword [rsp - 0x38], ebp
jmp 0x14002dcb6
mov rdi, qword [rsp + 0x38]
mov qword [rbx], 0
mov dword [rsp - 0x2c], 0x2f871e3a
mov dword [rsp - 0x1c], 0x1099b04f
add rsp, 0x20
jmp 0x14002ddc3
pop rbx
ret
xchg r12, r12
mov qword [rsp + 0x30], rsi
xor esi, esi
nop dword [rax]
mov rdx, rdx
mov dword [rsp - 0x20], edx
mov dword [rsp - 0x38], esi
jne 0x14002dde4
je 0x14002dde4
movabs rbp, 0x3f47030e727c2feb
call rax
ret 0x10
jmp 0x14002de15
cmp rdi, qword [rbx + 8]
jb 0x14002de26
mov rsi, qword [rsp + 0x30]
mov dword [rsp - 0xc], 0x4ffcdf7c
mov dword [rsp - 0xc], 0x7519c925
jmp 0x14002dce7
mov dword [rsp - 0x30], 0x342e2819
nop word [rax + rax]
mov rcx, qword [rbx]
add rcx, 0x18
jmp 0x14002dd8e
push rcx
movabs rcx, 0x1fad2bffffff48e9
jne 0x14002de35
jmp 0x14002dd82
je 0x14002de35
call fcn.14002df69
jne 0x14002de5d
je 0x14002de5d
ja 0x14002dbaa
ror edi, 0x8c
jl 0x14002e98a
cpuid
movabs r8, 0x183cde2c105d18eb
rcr r12d, 0xbb
neg r13
jg 0x14002eb64
jmp 0x14002de77
syscall
ret 0x18
add rsp, 0x20
pop rcx
ret
out 0xe8, eax
and al, byte [rcx]
add byte [rax], al
test r8d, 0x8828bf6a
call rcx
jne 0x14002ece7
lea ebx, [rdi + 0xef6a]
jmp 0x14002e90b

Function at 0x14002e7f5
Capabilities:
Encrypt data using rc4 prga

Disassembly:
out 0xd9, eax
test dword [rdi + rdi*8], r8d
ror byte [rcx - 0x45], 1
Function at 0x14002ecb8
Capabilities:
Encode data using xor
Encrypt data using rc4 prga

Disassembly:
mov r11, r11
cmp rdi, rdx
cmova rbx, rax
test rbx, rbx
je 0x14002ee2d
jmp 0x14002ecbf
mov dword [rsp - 0x10], 0x547d0b0b
mov dword [rsp - 0x14], 0x585040be
mov dword [rsp - 0x20], 0x57fb5354
xor eax, eax
add rbx, 3
je 0x14002e7fe
jne 0x14002e7fe
rcr edx, 0xfa
lea ebx, [rbx - 0x9578]
jmp rcx
jmp 0x14002eca1
shr rbx, 2
mov dword [rsp - 0x20], ebp
mov rcx, rcx
mov dword [rsp - 0x44], 0x36f03c9b
jne 0x14002ea4c
je 0x14002ea4c
push r11
cmp r11, rcx
popf
jne 0x14002e3c7
cmp r9d, 0xaebc2061
xor edx, 0xff0f01f0
cmp r15, rbx
jp 0x14002f5f2
invalid
or eax, dword [rax]
invalid
call rax
xor ecx, 0x1f09476a
ror esi, 0x2e
popfq
neg r15
ror r9d, 0x46
movabs r11, 0x5b78cafffffc1ce9
cpuid
ret
jmp 0x14002e66d
push r10
movabs r10, 0x2a4b650000010ee9
jne 0x14002eca5
jmp 0x14002edb8
je 0x14002eca5
call fcn.14002ed13
add rsp, 0x20
and cl, ch
test byte [rax], 0
invalid
mov r12, r12
cmp rbx, 0x10
mov edi, eax
call fcn.1400990c0
lea rdx, [rbx + rdi]
jmp 0x14002e7c6
pop r10
ret
pop r10
mov rcx, rdi
jne 0x14002ee08
je 0x14002ee08
call rax
cmp r10d, 0x539a58a9
cpuid
jne 0x14002e042
lea r10d, [rbx + 0xa23d]
cmp r10d, 0x66088866
test r9, rdi
add r12d, 0x4d43a8a9
jmp rax
jmp 0x14002e9fd
cmp rcx, rdx
mov dword [rsp - 0x10], 0x733f2950
jae 0x14002e480
jmp fcn.14002e311
loope 0x14002f635
or esp, 0x56129907
rcr r10d, 0x59
test esi, 0xe74d2ef7
ret
add eax, 0xf67515a2

Function at 0x140038a93
Capabilities:
Execute syscall

Disassembly:
mov dword [rsp - 0x38], ebx
jmp loc.1400391d4

Function at 0x1400432c2
Capabilities:
Execute syscall

Disassembly:
mov al, 0xdb
mul rdi
pop rcx
lea ebx, [rcx + 0xa37d]
syscall
call rax
inc rdx
movabs r11, 0x1db30cfffffebfe9
call rax
cmp r9d, 0xc2c9afea
ret
Function at 0x140053b20
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov rbp, rbp
nop
sub rsp, 8
mov qword [rsp], rdi
add rsp, 0xffffffffffffffe0
mov rdx, rdx
xchg rdx, r13
mov rbx, r13
xchg r13, rdx
mov rdi, rcx
nop
movabs rdx, 0xffffffff74bd4cde
sub rdx, 0x2aa2a348
sub rdx, 0xb2adafd
xor rdx, 0xeae064f
add rdx, 0x7fffffff
add rdx, 0x4fbe372a
nop word [rax + rax]
inc rdx
mov r12, r12
cmp word [rbx + rdx*2], 0
jne 0x140053b7b
mov qword [rcx + 0x38], rdx
mov r13, r13
call fcn.1400177dc
xor r8d, r8d
mov edx, 0x682492f7
sub edx, 0x210e603b
xor edx, 0x2274be7f
xor edx, 0x7ca7d370
cmp qword [rdi + 0x38], r8
jbe 0x140053c18
sub rbx, rax
mov rbp, rbp
mov r9d, 0x2bcc50ee
sub r9d, 0x259ffbed
add r9d, 0xbbd41c6
add r9d, 0x12f97adc
sub r9d, 0x24e310a4
nop word [rax + rax]
movzx ecx, dx
mov r14, r14
lea rax, [rax + 2]
and cx, r9w
ror edx, 6
ror edx, 1
ror edx, 1
xor cx, word [rbx + rax - 2]
inc r8
mov word [rax - 2], cx
xchg r9, r9
cmp r8, qword [rdi + 0x38]
jb 0x140053bea
mov rbx, qword [rsp + 0x30]
mov dword [rsp - 0xc], esp
xchg r10, rdi
mov rax, r10
xchg r10, rdi
sub rsp, 0xffffffffffffffe0
pop rdi
ret
Function at 0x140053c30
Capabilities:
Encode data using xor

Disassembly:
xchg r9, rbx
mov qword [rsp + 8], r9
xchg rbx, r9
mov qword [rsp + 0x10], rbp
xchg rbp, rbp
xchg rsi, r9
mov qword [rsp + 0x18], r9
xchg rsi, r9
push rdi
mov dword [rsp - 0x40], edx
nop
mov qword [rsp - 8], r12
sub rsp, 8
push r13
mov rsi, rsi
push r14
push r15
nop
sub rsp, 0x41290b81
add rsp, 0x41290b61
mov r13, qword [r8 + 0x38]
mov r12, r12
xchg rcx, rdx
mov r15, rcx
xchg rcx, rdx
add r13, qword [rdx + 0x38]
xchg rcx, r14
mov rcx, r14
xchg rcx, r14
mov eax, 0x1542444f
add eax, 0x3539c8d0
add eax, 0x1ff98693
sub eax, 0x6a7593b0
nop
movabs rdi, 0xffffffff2e0476e9
add rdi, 0x2bd07517
sub rdi, 0x3758a0a5
add rdi, 0x2815324
add rdi, 0x7fffffff
xor rdi, 0x5b026181
xchg rsi, r12
mov rsi, r8
xchg rsi, r12
lea r9, [r13 + 1]
xchg rbx, rbx
mul r9
cmovo rax, rdi
xchg r12, rax
mov rcx, r12
xchg r12, rax
call fcn.140098a70
mov dword [rsp - 0x24], ebp
xor ebp, ebp
mov ebx, 0x7944f783
xor ebx, 0x35dca8c7
sub ebx, 0x1f222640
xor ebx, 0x34b366b7
mov rsi, rax
mov eax, ebx
xchg rbx, rbx
mov r8d, ebp
mov r10d, 0x46231c80
xor r10d, 0x290fe75b
sub r10d, 0x5c086752
xor r10d, 0x13249476
cmp qword [r15 + 0x38], rbp
jbe 0x140053d81
mov dword [rsp - 0x34], ebx
nop word [rax + rax]
mov rcx, qword [r15]
movzx edx, ax
mov r14, r14
and dx, r10w
ror eax, 2
ror eax, 3
ror eax, 3
xor dx, word [rcx + r8*2]
mov word [rsi + r8*2], dx
inc r8
mov rbx, rbx
cmp r8, qword [r15 + 0x38]
jb 0x140053d51
mov r8d, ebx
xchg r9, rbp
mov rbp, r9
xchg r9, rbp
cmp qword [r12 + 0x38], rbp
jbe 0x140053de6
mov rdx, rdx
nop dword [rax]
mov rax, qword [r12]
movzx edx, r8w
mov dword [rsp - 0x30], 0xae35ac0
xchg r12, rcx
mov r12, qword [r15 + 0x38]
xchg r12, rcx
and dx, r10w
mov r9, r9
add rcx, r9
ror r8d, 6
ror r8d, 1
ror r8d, 1
xor dx, word [rax + r9*2]
inc r9
mov rbp, rbp
mov word [rsi + rcx*2], dx
cmp r9, qword [r12 + 0x38]
jb 0x140053d9e
lea rax, [r14 + 8]
mov r9, r9
mov word [rsi + r13*2], bp
xorps xmm0, xmm0
xchg rsp, rax
mov qword [r14], rsp
xchg rsp, rax
xchg r10, rax
movups xmmword [r10], xmm0
xchg r10, rax
xchg rdx, rax
movups xmmword [rdx + 0x10], xmm0
xchg rdx, rax
Function at 0x1400542b0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
xchg r11, rsi
mov qword [rsp + 0x10], r11
xchg rsi, r11
nop
push 0x5f0fd3c7
mov qword [rsp], rdi
nop
add rsp, 0x5eb62ef8
sub rsp, 0x5eb62f18
xchg rsi, r9
mov r9, qword [rcx + 0x38]
xchg r9, rsi
mov rbx, rdx
mov dword [rsp - 0x14], 0x31607906
xchg r8, rbx
mov rbx, qword [rdx + 0x38]
xchg rbx, r8
xchg rcx, rbx
mov rdi, rbx
xchg rbx, rcx
add r8, rsi
xchg r8, r8
xchg rsi, rdx
mov rsi, rdx
xchg rsi, rdx
xchg r8, rsi
mov qword [rcx + 0x38], rsi
xchg r8, rsi
call fcn.140054f80
mov rbx, rbx
xchg rsp, r9
mov rsp, qword [rbx]
xchg rsp, r9
mov ecx, esi
and ecx, 3
mov r8d, 0x724a0da9
sub r8d, 0x6a5f1ef9
add r8d, 0xbd7c864
add r8d, 0x602a89f
shl ecx, 1
shl ecx, 2
mov edx, r8d
ror edx, cl
mov dword [rsp - 0x44], 0x30f70749
xchg r10, rax
mov rax, r10
xchg r10, rax
xor ecx, ecx
xchg rdi, rdi
cmp qword [rbx + 0x38], rcx
jbe 0x1400543ec
lea rax, [rsi + rsi]
mov dword [rsp - 0x3c], ebp
mov r11d, 0x45bfa50f
add r11d, 0x2b907c1d
sub r11d, 0x262416c7
xor r11d, 0x26a49045
sub r11d, 0x6d889921
sub rax, r9
add r10, rax
mov r13, r13
nop dword [rax]
movzx eax, dx
lea r9, [r9 + 2]
mov r13, r13
xor ax, r8w
ror edx, 1
ror edx, 4
ror edx, 3
and ax, r11w
ror r8d, 6
ror r8d, 1
ror r8d, 1
xor ax, word [r9 - 2]
mov dword [rsp - 0x44], esp
inc rcx
mov word [r10 + r9 - 2], ax
cmp rcx, qword [rbx + 0x38]
jb 0x1400543a9
mov r14, r14
mov rbx, qword [rsp + 0x30]
xchg rdi, rdx
mov rax, rdx
xchg rdi, rdx
mov rsi, qword [rsp + 0x38]
mov r10, r10
sub rsp, 0xffffffffffffffe0
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret

Function at 0x140054420
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov dword [rsp - 0x3c], 0x69b0de75
xchg rdi, r10
mov qword [rsp + 0x18], r10
xchg r10, rdi
push r14
nop
add rsp, 0x78100d78
sub rsp, 0x78100d98
mov r14, qword [rcx + 0x38]
mov rdi, rdx
mov dword [rsp - 0x20], 0x1a1f929a
xchg r8, rsi
mov r8, rcx
xchg rsi, r8
nop
movabs rbx, 0xffffffff6762d8a1
add rbx, 0x33225a2
xor rbx, 0x4c213361
add rbx, 0x7fffffff
add rbx, 0x594a32de
inc rbx
cmp word [rdx + rbx*2], 0
jne 0x14005448d
mov r8, r8
lea r8, [r14 + rbx]
xchg rdx, r14
mov r14, rdx
xchg rdx, r14
xchg rsi, r8
mov qword [rcx + 0x38], rsi
xchg r8, rsi
call fcn.140054f80
mov ecx, r14d
mov dword [rsp - 0x10], esp
mov edx, 0x1e4689c8
add edx, 0x1c78ce8
sub edx, 0xb26e24f
xor edx, 0xd226bd2
and ecx, 3
shl ecx, 3
mov dword [rsp - 0x18], 0x1c7d000
ror edx, cl
test rbx, rbx
je 0x140054555
lea r8, [r14 + r14]
mov rbp, rbp
mov ecx, 0x1ae83a1
add ecx, 0x50398710
sub ecx, 0x47ef8c04
sub ecx, 0x9f87dae
sub r8, rdi
add r8, rax
nop dword [rax]
xchg r15, r15
nop dword [rax + rax]
movzx eax, dx
lea rdi, [rdi + 2]
mov dword [rsp - 0x10], 0x530521be
and ax, cx
ror edx, 5
ror edx, 1
ror edx, 2
xor ax, word [rdi - 2]
mov word [r8 + rdi - 2], ax
xchg rdi, rdi
sub rbx, 1
jne 0x140054524
xchg rbx, r14
mov r14, qword [rsp + 0x30]
xchg r14, rbx
xchg rsi, rax
mov rsi, rax
xchg rsi, rax
mov rsi, qword [rsp + 0x38]
mov rsp, rsp
xchg rdi, r11
mov r11, qword [rsp + 0x40]
xchg r11, rdi
nop
add rsp, 0x35c331a9
sub rsp, 0x35c33189
nop
add rsp, 8
mov r14, qword [rsp - 8]
ret
Function at 0x140054de1
Capabilities:
Encode data using xor

Disassembly:
xchg r9, rbx
mov qword [rsp + 0x10], r9
xchg r9, rbx
mov qword [rsp + 0x18], rbp
push rsi
xchg r8, r8
push rdi
push r14
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
lea rsi, [rdx + 8]
xorps xmm0, xmm0
mov dword [rsp - 0x10], 0x55b67928
xchg rsp, rsi
mov qword [rdx], rsp
xchg rsi, rsp
xor edi, edi
xchg r13, rsi
movups xmmword [r13], xmm0
xchg r13, rsi
xchg r9, rsi
mov r14, rsi
xchg r9, rsi
xchg r8, r13
mov rbp, r13
xchg r13, r8
xchg r15, rsi
movups xmmword [r15 + 0x10], xmm0
xchg rsi, r15
mov rbx, rdx
xchg rdi, rdi
xchg rsi, rbx
movups xmmword [rbx + 0x20], xmm0
xchg rsi, rbx
xchg rdi, r8
mov qword [rdx + 0x38], r8
xchg r8, rdi
xchg rsi, rax
mov rsi, qword [rcx + 0x38]
xchg rsi, rax
cmp r8, rax
jae 0x140054f0c
sub rax, r8
mov r10, r10
mov qword [rsp + 0x40], r15
cmp rax, r9
cmovb r14, rax
mov qword [rdx + 0x38], r14
mov dword [rsp - 0xc], ebp
mov rax, qword [rcx]
xchg rcx, r15
mov r15, qword [rdx]
xchg rcx, r15
lea r15, [rax + r8*2]
cmp rcx, rsi
mov dword [rsp - 0x3c], edi
je 0x140054daa
call fcn.140098be0
cmp r14, 0x18
mov r13, r13
jbe 0x140054ddf
lea rcx, [r14 + r14]
call fcn.140098eb0
mov qword [rbx], rax
mov dword [rsp - 0x2c], edi
test rax, rax
jne 0x140054def
mov qword [rbx], rsi
mov dword [rsp - 0x38], edx
mov r9, rdi
jmp 0x140054e17
xchg rsi, rsp
mov qword [rbx], rsp
xchg rsp, rsi
xchg r11, rax
mov r11, rsi
xchg r11, rax
xorps xmm0, xmm0
xchg r14, rax
movups xmmword [r14], xmm0
xchg r14, rax
xchg r10, rax
movups xmmword [r10 + 0x10], xmm0
xchg r10, rax
xchg r11, rax
movups xmmword [r11 + 0x20], xmm0
xchg r11, rax
mov r9, qword [rbx]
mov dword [rsp - 0x18], 0x74587778
and ebp, 3
mov r8d, 0x17129bc1
add r8d, 0x2507983f
sub r8d, 0x13dc4c70
xor r8d, 0x31f8b823
shl ebp, 2
shl ebp, 1
mov edx, r8d
xchg r12, r12
movzx ecx, bpl
ror edx, cl
cmp qword [rbx + 0x38], rdi
jbe 0x140054ec9
mov dword [rsp - 0x44], esi
sub r15, r9
mov ecx, 0x13ec9e7e
xor ecx, 0x722a295d
xor ecx, 0x311825a0
add ecx, 0x1c2455fc
sub ecx, 0x6d02e780
nop dword [rax]
nop word [rax + rax]
movzx eax, dx
xchg r10, r10
lea r9, [r9 + 2]
xor ax, r8w
ror edx, 7
ror edx, 1
and ax, cx
mov dword [rsp - 0x10], ecx
ror r8d, 5
ror r8d, 2
ror r8d, 1
xor ax, word [r15 + r9 - 2]
mov rbx, rbx
inc rdi
mov word [r9 - 2], ax
cmp rdi, qword [rbx + 0x38]
mov dword [rsp - 0x38], 0x3e7948ef
jb 0x140054e81
xchg rdi, r15
mov rdi, qword [rsp + 0x40]
xchg r15, rdi
mov rax, rbx
xchg r15, rbx
mov r15, qword [rsp + 0x48]
xchg rbx, r15
mov rbp, qword [rsp + 0x50]
sub rsp, 0xffffffffffffffe0
mov dword [rsp - 0x2c], ebp
nop
mov r14, qword [rsp]
add rsp, 8
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
mov rsi, qword [rsp]
add rsp, 8
ret
xchg r13, rax
mov r13, rbx
xchg r13, rax
jmp 0x140054ed7

Function at 0x140055300
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d741
xchg rbp, r10
mov rbp, rcx
xchg rbp, r10
mov eax, dword [0x140142f30]
mov dword [rsp - 0x3c], esp
cmp qword [0x140143018], 0
jne 0x14008d4c0
syscall
ret
Function at 0x140055320
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x28]
mov byte [rsp + 0x28], al
jmp 0x14008dd78
xchg r10, r8
mov r8, rcx
xchg r8, r10
mov eax, dword [0x140142fc8]
cmp qword [0x140143018], 0
jne 0x14008d4c0
mov r15, r15
syscall
ret

Function at 0x140055330
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d535
xchg r13, r10
mov r13, rcx
xchg r10, r13
mov eax, dword [0x140142f00]
cmp qword [0x140143018], 0
mov r10, r10
jne 0x14008d4c0
syscall
ret

Function at 0x140055340
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dae0
mov r10, rcx
mov r15, r15
mov eax, dword [0x140142f88]
cmp qword [0x140143018], 0
jne 0x14008d4c0
syscall
mov rsp, rsp
ret

Function at 0x140055350
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d97b
xchg r10, rsp
mov rsp, rcx
xchg r10, rsp
mov eax, dword [0x140142f68]
mov dword [rsp - 0x14], edx
cmp qword [0x140143018], 0
jne 0x14008d4c0
syscall
mov dword [rsp - 0x24], esi
ret

Function at 0x140055360
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d594
xchg rsp, rcx
mov r10, rsp
xchg rcx, rsp
mov eax, dword [0x140142f08]
cmp qword [0x140143018], 0
jne 0x14008d4c0
mov dword [rsp - 0x44], edx
syscall
ret

Function at 0x140055370
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dbff
mov r10, rcx
mov dword [rsp - 0x28], 0x249d690
mov eax, dword [0x140142fa4]
cmp qword [0x140143018], 0
jne 0x14008d4c0
mov dword [rsp - 0x34], 0x56db041e
syscall
ret

Function at 0x140055380
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dc2f
mov r10, rcx
mov eax, dword [0x140142fa8]
cmp qword [0x140143018], 0
mov r8, r8
jne 0x14008d4c0
syscall
ret

Function at 0x140055390
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008db57
xchg r12, rcx
mov r10, r12
xchg rcx, r12
mov eax, dword [0x140142f94]
cmp qword [0x140143018], 0
jne 0x14008d4c0
mov dword [rsp - 0x30], edx
syscall
ret

Function at 0x1400553a0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008db81
mov r10, rcx
xchg r14, r14
mov eax, dword [0x140142f98]
cmp qword [0x140143018], 0
jne 0x14008d4c0
mov dword [rsp - 0x38], esi
syscall
ret

Function at 0x1400553b0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d76b
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x140142f34]
mov dword [rsp - 0x10], esi
cmp qword [0x140143018], 0
jne 0x14008d4c0
syscall
ret

Function at 0x1400553c0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008da37
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140142f78]
cmp qword [0x140143018], 0
xchg r15, r15
jne 0x14008d4c0
syscall
ret

Function at 0x1400553d0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008da89
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140142f80]
cmp qword [0x140143018], 0
mov rbx, rbx
jne 0x14008d4c0
syscall
ret

Function at 0x1400553e0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d562
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140142f04]
cmp qword [0x140143018], 0
jne 0x14008d4c0
mov dword [rsp - 0x34], 0x4f3dccab
syscall
ret
Function at 0x1400553f0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008db06
mov r10, rcx
mov dword [rsp - 0x28], ebp
mov eax, dword [0x140142f8c]
cmp qword [0x140143018], 0
jne 0x14008d4c0
xchg r14, r14
syscall
ret

Function at 0x140055400
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d929
mov r10, rcx
mov eax, dword [0x140142f60]
cmp qword [0x140143018], 0
mov dword [rsp - 0x3c], edi
jne 0x14008d4c0
syscall
ret

Function at 0x140055410
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d94d
xchg rcx, rsi
mov r10, rsi
xchg rcx, rsi
mov eax, dword [0x140142f64]
mov dword [rsp - 0x20], 0x5abf61dd
cmp qword [0x140143018], 0
jne 0x14008d4c0
syscall
ret

Function at 0x140055420
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d7e1
xchg r10, r13
mov r13, rcx
xchg r10, r13
mov eax, dword [0x140142f40]
cmp qword [0x140143018], 0
mov r8, r8
jne 0x14008d4c0
syscall
ret

Function at 0x140055430
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x58]
mov dword [rsp - 0x24], 0x37fd55fd
mov byte [rsp + 0x58], al
movzx eax, byte [rsp + 0x48]
mov byte [rsp + 0x48], al
mov rcx, rcx
jmp 0x14008dd4e
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x140142fc4]
cmp qword [0x140143018], 0
jne 0x14008d4c0
mov dword [rsp - 0x3c], esp
syscall
ret

Function at 0x140055460
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d66c
xchg r10, rdx
mov rdx, rcx
xchg rdx, r10
mov eax, dword [0x140142f1c]
xchg r8, r8
cmp qword [0x140143018], 0
jne 0x14008d4c0
syscall
mov rbp, rbp
ret

Function at 0x140055470
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d698
xchg r10, r15
mov r15, rcx
xchg r10, r15
mov eax, dword [0x140142f20]
cmp qword [0x140143018], 0
mov r10, r10
jne 0x14008d4c0
syscall
ret

Function at 0x140055480
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d6c1
xchg r11, rcx
mov r10, r11
xchg r11, rcx
mov eax, dword [0x140142f24]
mov dword [rsp - 0x30], esi
cmp qword [0x140143018], 0
jne 0x14008d4c0
syscall
mov dword [rsp - 0x20], ebx
ret

Function at 0x140055490
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d6ef
xchg r10, rdi
mov rdi, rcx
xchg rdi, r10
mov eax, dword [0x140142f28]
mov rbx, rbx
cmp qword [0x140143018], 0
jne 0x14008d4c0
syscall
ret

Function at 0x1400554a0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d63e
xchg r10, rdx
mov rdx, rcx
xchg r10, rdx
mov eax, dword [0x140142f18]
mov dword [rsp - 0x30], 0x5fffc66e
cmp qword [0x140143018], 0
jne 0x14008d4c0
syscall
ret

Function at 0x1400554b0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008dba8
xchg r15, rcx
mov r10, r15
xchg r15, rcx
mov eax, dword [0x140142f9c]
cmp qword [0x140143018], 0
mov dword [rsp - 0x40], 0x770ed9ca
jne 0x14008d4c0
syscall
ret

Function at 0x1400554c0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d718
xchg rbp, rcx
mov r10, rbp
xchg rcx, rbp
mov eax, dword [0x140142f2c]
cmp qword [0x140143018], 0
mov rdi, rdi
jne 0x14008d4c0
syscall
ret

Function at 0x1400554d0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008d5be
xchg r10, rbp
mov rbp, rcx
xchg rbp, r10
mov eax, dword [0x140142f0c]
cmp qword [0x140143018], 0
jne 0x14008d4c0
xchg rdi, rdi
syscall
ret