joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400347d0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
neg rsp
sub rsp, 0xffffffffffffffc0
neg rsp
mov eax, dword [rcx + 0x2e8]
mov r14, rdx
mov edi, dword [rcx + 0x2f4]
xor eax, 0x7c556718
movaps xmmword [rsp + 0x30], xmm6
mov rbp, rcx
movaps xmmword [rsp + 0x20], xmm7
xor ebx, ebx
xor edi, 0x7c556718
xor edx, edx
movd xmm6, eax
add edi, edi
mov eax, dword [rcx + 0x308]
mov esi, ebx
xor eax, 0x33b30109
mov rcx, r14
mov dword [rsp + 0x60], eax
movss xmm7, dword [rsp + 0x60]
cvtdq2ps xmm6, xmm6
call fcn.140054480
test ax, ax
je 0x140034894
nop word [rax + rax]
movzx ecx, ax
inc rsi
mov rax, qword [rbp + 0x300]
add rcx, rcx
mov rdx, rsi
movups xmm0, xmmword [rax + rcx*8]
xorps xmm0, xmmword [0x1404a4550]
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm6
addss xmm1, xmm7
cvttss2si ecx, xmm1
sub ecx, edi
add ebx, ecx
mov rcx, r14
call fcn.140054480
test ax, ax
jne 0x14003484a
mov rbp, qword [rsp + 0x70]
mov eax, ebx
mov rbx, qword [rsp + 0x68]
movaps xmm6, xmmword [rsp + 0x30]
movaps xmm7, xmmword [rsp + 0x20]
neg rsp
add rsp, 0xffffffffffffffc0
neg rsp
pop r14
pop rdi
pop rsi
ret

Function at 0x1400348c0
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [rcx + 0x2e8]
xor r8d, r8d
mov r9d, dword [rcx + 0x2f4]
xor eax, 0x7c556718
xor r9d, 0x7c556718
add r9d, r9d
movd xmm3, eax
mov eax, dword [rcx + 0x308]
xor eax, 0x33b30109
mov dword [rsp + 8], eax
movss xmm4, dword [rsp + 8]
movzx eax, word [rdx]
cvtdq2ps xmm3, xmm3
test ax, ax
je 0x140034950
mov r10, qword [rcx + 0x300]
movaps xmm2, xmmword [0x1404a4550]
movzx eax, ax
sub rdx, 0xfffffffffffffffe
add rax, rax
movups xmm0, xmmword [r10 + rax*8]
movzx eax, word [rdx]
xorps xmm0, xmm2
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
subss xmm1, xmm0
mulss xmm1, xmm3
addss xmm1, xmm4
cvttss2si ecx, xmm1
sub ecx, r9d
add r8d, ecx
test ax, ax
jne 0x140034915
mov eax, r8d
ret
Function at 0x1400349fb
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rdi
add rsp, 0xffffffffffffff60
xor ebx, ebx
mov rdi, rcx
mov qword [rax + 8], rbx
cmp qword [rcx + 0x2f8], rbx
je 0x140034a9d
mov edx, dword [rcx + 0x2ec]
mov qword [rax + 0x10], rsi
xor edx, 0x7c556718
mov eax, dword [rcx + 0x2e8]
nop
movabs rcx, 0xffffffff690977f7
sub rcx, 0x20186794
add rcx, 0xe14c5fa
add rcx, 0x7fffffff
add rcx, 0x28fa29a3
xor eax, 0x7c556718
imul edx, eax
mov eax, 0x269a5b7f
xor eax, 0x39ec64fe
xor eax, 0x4a5cdc72
sub eax, 0x552ae3ef
movsxd rsi, edx
mul rsi
cmovo rax, rcx
mov rcx, rax
call fcn.140099070
mov qword [rsp + 0xb0], rax
test rsi, rsi
jle 0x140034a2a
nop
mov rax, qword [rdi + 0x2f8]
mov ecx, dword [rax + rbx*4]
mov rax, qword [rsp + 0xb0]
xor ecx, 0x4c8b78f0
mov dword [rax + rbx*4], ecx
inc rbx
cmp rbx, rsi
jl 0x140034a03
mov rsi, qword [rsp + 0xb8]
mov rcx, qword [rdi + 0x318]
lea rax, [0x140001bb0]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x20]
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x98], 0xb925f49
add qword [rsp + 0x98], 0x3e65ba28
xor qword [rsp + 0x98], 0x49f81969
mov qword [rsp + 0x28], rdi
call fcn.140033990
mov rbx, qword [rsp + 0xc0]
add rsp, 0x8f9e80c
sub rsp, 0x8f9e76c
pop rdi
ret
lea rdx, [rsp + 0xb0]
call fcn.140034ad0
test al, al
jne 0x140034a32
mov rbx, qword [rsp + 0xc0]
neg rsp
add rsp, 0xffffffffffffff60
neg rsp
pop rdi
ret
Function at 0x140040180
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
nop
add rsp, 0x640fba3c
sub rsp, 0x640fba9c
mov rbp, qword [rcx + 0xaf8]
lea rax, [rsp + 0x28]
mov rbx, qword [rcx + 0xac0]
xorps xmm0, xmm0
mov r14, rdx
mov qword [rsp + 0x20], rax
mov rsi, rcx
lea rcx, [rsp + 0x20]
lea rdx, [rbp + 1]
movups xmmword [rsp + 0x28], xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
call fcn.14000ee10
mov edi, 0x47106aa5
xor edi, 0x5b100e97
sub edi, 0x150141b
mov r9, rax
mov ecx, edi
mov r15d, 0x24c70745
add r15d, 0x3fc757f8
xor r15d, 0x16fa5720
xor r15d, 0x727408e2
test rbp, rbp
je 0x140040251
mov rdx, rax
sub rbx, rax
mov r8, rbp
nop dword [rax]
nop dword [rax + rax]
movzx eax, cx
lea rdx, [rdx + 2]
and ax, r15w
ror ecx, 8
xor ax, word [rdx + rbx - 2]
mov word [rdx - 2], ax
sub r8, 1
jne 0x140040230
xor ebx, ebx
mov word [r9 + rbp*2], bx
cmp word [rsi + 0xb48], bx
je 0x14004029c
mov edx, ebx
cmp qword [rsi + 0xaf8], rbx
jbe 0x14004029c
nop dword [rax + rax]
mov rax, qword [rsp + 0x20]
movzx ecx, word [rsi + 0xb48]
mov word [rax + rdx*2], cx
inc rdx
cmp rdx, qword [rsi + 0xaf8]
jb 0x14004027c
mov rsi, qword [rsp + 0x20]
lea rax, [r14 + 8]
xorps xmm0, xmm0
mov qword [r14], rax
movups xmmword [rax], xmm0
nop
movabs rdx, 0xffffffff39c3141e
xor rdx, 0x5d01d0f
add rdx, 0x7fffffff
xor rdx, 0x43ecf6ef
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
nop dword [rax]
inc rdx
cmp word [rsi + rdx*2], bx
jne 0x1400402d9
mov rcx, r14
mov qword [r14 + 0x38], rdx
call fcn.14000ee10
cmp qword [r14 + 0x38], rbx
jbe 0x140040325
sub rsi, rax
nop
movzx ecx, di
lea rax, [rax + 2]
and cx, r15w
ror edi, 8
xor cx, word [rax + rsi - 2]
inc rbx
mov word [rax - 2], cx
cmp rbx, qword [r14 + 0x38]
jb 0x140040301
mov rcx, qword [rsp + 0x20]
lea rax, [rsp + 0x28]
cmp rcx, rax
jne 0x140040357
lea rdi, [rsp + 0x28]
xor eax, eax
mov ecx, 0xa0e374f
xor ecx, 0x5c9972dd
xor ecx, 0x569745a2
rep stosb byte [rdi], al
jmp 0x14004035c
call fcn.140099240
lea r11, [rsp + 0x60]
mov rax, r14
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
Function at 0x140048ec0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
nop
sub rsp, 0x385b1002
add rsp, 0x385b0fe2
mov r8, qword [rcx + 0x650]
xor esi, esi
mov rbx, rcx
test r8, r8
je 0x140048efb
mov rdi, qword [rcx + 0x648]
jmp 0x140048f02
mov rdi, rsi
nop dword [rax]
test r8, r8
je 0x140048f1b
mov rax, qword [rbx + 0x648]
lea rcx, [rax + r8*8]
jmp 0x140048f1e
mov rcx, rsi
cmp rdi, rcx
je 0x14004915c
mov rax, qword [rdi]
cmp qword [rax + 0x30], rdx
je 0x140048f48
nop
sub rdi, 0x23b98ff1
add rdi, 0x23b98ff9
jmp 0x140048f02
test r8, r8
je 0x140049015
cmp rdi, qword [rbx + 0x648]
jb 0x140049015
mov rax, qword [rbx + 0x648]
lea rcx, [rax + r8*8]
cmp rdi, rcx
jae 0x140049015
mov rdx, rdi
nop word [rax + rax]
mov rcx, qword [rbx + 0x650]
test rcx, rcx
je 0x140048f9f
mov rax, qword [rbx + 0x648]
lea rax, [rax + rcx*8]
jmp 0x140048fa2
mov rax, rsi
nop
add rax, 0xffffffffe4b566f6
sub rax, 0xffffffffe4b566fe
cmp rdx, rax
jae 0x140048fce
mov rax, qword [rdx + 8]
mov qword [rdx], rax
neg rdx
add rdx, 0xfffffffffffffff8
neg rdx
jmp 0x140048f7f
test rcx, rcx
je 0x140049015
lea rax, [rcx - 1]
mov qword [rbx + 0x650], rax
test rax, rax
jne 0x140049015
mov rcx, qword [rbx + 0x648]
test rcx, rcx
je 0x140049007
call fcn.140099240
mov qword [rbx + 0x648], rsi
mov qword [rbx + 0x658], rsi
mov qword [rbx + 0x650], rsi
mov rcx, qword [rdi]
test rcx, rcx
je 0x140049037
mov rax, qword [rcx]
mov edx, 0x1515eb6d
xor edx, 0x6a857616
xor edx, 0x7f909d7a
call qword [rax]
cmp qword [rbx + 0x650], rsi
je 0x14004915c
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.140039770
mov rcx, qword [rsp + 0x30]
mov r10d, 0x31e43e50
xor r10d, 0x3438c4ac
sub r10d, 0x5dcfa5c
mov r8d, dword [rsp + 0x34]
mov eax, ecx
mov r9, qword [rbx + 0x650]
sub eax, r8d
cdq
idiv dword [rbx + 0x650]
cmp eax, r10d
cmovl r10d, eax
test r9, r9
je 0x14004910d
mov rdx, qword [rbx + 0x648]
lea r11, [rdx + r9*8]
cmp rdx, r11
je 0x14004910d
mov r9d, r10d
xor r9d, 0x7c556718
xor r8d, 0x7c556718
nop dword [rax]
mov rcx, qword [rdx]
mov eax, esi
xor eax, 0x7c556718
add esi, r10d
nop
add rdx, 0x11214f53
sub rdx, 0x11214f4b
mov dword [rcx + 0x38], eax
mov dword [rcx + 0x3c], 0x1d89c679
xor dword [rcx + 0x3c], 0x5506ee14
add dword [rcx + 0x3c], 0x33c63eab
mov dword [rcx + 0x40], r9d
mov dword [rcx + 0x44], r8d
cmp rdx, r11
jne 0x1400490be
mov rcx, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x34]
mov rax, qword [rbx + 0x668]
test rax, rax
je 0x140049154
sub ecx, r8d
mov dword [rax + 0x1c], 0x486a4ab8
sub dword [rax + 0x1c], 0x43a8cb0e
xor dword [rax + 0x1c], 0x1c4df7ae
add dword [rax + 0x1c], 0x63c8df14
xor ecx, 0x7c556718
xor r8d, 0x7c556718
mov dword [rax + 0x18], ecx
mov dword [rax + 0x20], r8d
mov dword [rax + 0x24], r8d
mov rcx, rbx
call fcn.140038760
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
nop
add rsp, 0x76b6bba9
sub rsp, 0x76b6bb89
pop rdi
ret
Function at 0x140049180
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
add rsp, 0xffffffffffffffe0
mov rax, qword [rcx]
mov rdi, rcx
call qword [rax + 0x78]
mov rdx, qword [rdi + 0x650]
mov rcx, rax
mov rbx, rax
mov qword [rsp + 0x30], rax
call fcn.140039060
mov rcx, rdi
call fcn.1400386c0
mov rcx, qword [0x1404a3ba8]
mov rdx, qword [rax + 0x98]
call fcn.14002fea0
mov rcx, rax
call fcn.14003c6b0
lea rcx, [rdi + 0x648]
mov qword [rbx + 0x20], rax
lea rdx, [rsp + 0x30]
call fcn.14002d570
mov rcx, rdi
mov rbx, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp 0x140049180
push rbx
nop
add rsp, 0x22ec5c8
sub rsp, 0x22ec5e8
cmp qword [rcx + 0x650], 0
mov rbx, rcx
je 0x1400492bd
lea rdx, [rsp + 0x30]
call fcn.140039770
mov r8, qword [rsp + 0x30]
mov r11d, 0x2ca74657
add r11d, 0x2b8b6ff0
add r11d, 0x1eae1a2e
sub r11d, 0x76e0cfd5
mov r9d, dword [rsp + 0x34]
mov eax, r8d
sub eax, r9d
cdq
idiv dword [rbx + 0x650]
mov rdx, qword [rbx + 0x650]
cmp eax, r11d
cmovl r11d, eax
xor r10d, r10d
test rdx, rdx
je 0x140049273
mov rax, qword [rbx + 0x648]
mov qword [rsp + 0x38], rdi
lea rdi, [rax + rdx*8]
cmp rax, rdi
je 0x14004926e
mov r8d, r11d
xor r8d, 0x7c556718
xor r9d, 0x7c556718
nop word [rax + rax]
mov rdx, qword [rax]
mov ecx, r10d
xor ecx, 0x7c556718
add r10d, r11d
sub rax, 0xfffffffffffffff8
mov dword [rdx + 0x38], ecx
mov dword [rdx + 0x3c], 0x353ba953
xor dword [rdx + 0x3c], 0x789dbb96
add dword [rdx + 0x3c], 0x2eaf5453
mov dword [rdx + 0x40], r8d
mov dword [rdx + 0x44], r9d
cmp rax, rdi
jne 0x140049228
mov r8, qword [rsp + 0x30]
mov r9d, dword [rsp + 0x34]
mov rdi, qword [rsp + 0x38]
mov rax, qword [rbx + 0x668]
test rax, rax
je 0x1400492b5
sub r8d, r9d
mov dword [rax + 0x1c], 0x53eb832d
xor dword [rax + 0x1c], 0x571a13c4
add dword [rax + 0x1c], 0x7763d62f
xor r8d, 0x7c556718
xor r9d, 0x7c556718
mov dword [rax + 0x18], r8d
mov dword [rax + 0x20], r9d
mov dword [rax + 0x24], r9d
mov rcx, rbx
call fcn.140038760
add rsp, 0x20
pop rbx
ret

Function at 0x140052d50
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov dword [rsp - 0x30], esp
push rax
mov qword [rsp], rdi
sub rsp, 0x20
xchg rsp, rsp
xchg rbx, rdx
mov rdx, rbx
xchg rdx, rbx
mov rdi, rcx
xchg r13, r13
nop
movabs rdx, 0xffffffff7607ec69
sub rdx, 0x34862e0a
xor rdx, 0x8868444
add rdx, 0x7fffffff
xor rdx, 0x36f8c5e5
nop word [rax + rax]
inc rdx
cmp word [rbx + rdx*2], 0
xchg rbp, rbp
jne 0x140052da4
mov qword [rcx + 0x38], rdx
call fcn.14000ee10
xor r8d, r8d
xchg rcx, rcx
mov edx, 0x6c463b2a
xor edx, 0xe285266
sub edx, 0x2b5619db
sub edx, 0x1c67ff5a
cmp qword [rdi + 0x38], r8
xchg rcx, rcx
jbe 0x140052e52
sub rbx, rax
mov r9d, 0x27fcdf0f
add r9d, 0x15ddda13
add r9d, 0x303c404a
sub r9d, 0x6920e813
sub r9d, 0x4f6105a
nop word [rax + rax]
mov dword [rsp - 0x2c], 0x2513117c
movzx ecx, dx
lea rax, [rax + 2]
and cx, r9w
mov r10, r10
ror edx, 1
ror edx, 6
ror edx, 1
xor cx, word [rax + rbx - 2]
mov dword [rsp - 0x3c], 0x2e34a26d
inc r8
mov word [rax - 2], cx
cmp r8, qword [rdi + 0x38]
mov dword [rsp - 0x38], esp
jb 0x140052e1b
mov rbx, qword [rsp + 0x30]
mov rax, rdi
mov r9, r9
nop
add rsp, 0x7a3566a
sub rsp, 0x7a3564a
pop rdi
xchg r8, r8
ret
Function at 0x140053800
Capabilities:
Encode data using xor

Disassembly:
xchg rcx, rbx
mov qword [rsp + 8], rcx
xchg rcx, rbx
xchg rsi, r10
mov qword [rsp + 0x10], r10
xchg rsi, r10
push rdi
neg rsp
sub rsp, 0xffffffffffffffe0
neg rsp
mov rsi, qword [rcx + 0x38]
mov rbx, rdx
mov rbx, rbx
xchg rsp, r8
mov rsp, qword [rdx + 0x38]
xchg rsp, r8
xchg rdi, r8
mov r8, rcx
xchg rdi, r8
add r8, rsi
xchg rsi, r11
mov rdx, r11
xchg r11, rsi
mov qword [rcx + 0x38], r8
call fcn.1400544e0
mov dword [rsp - 0xc], esp
mov r9, qword [rbx]
mov ecx, esi
and ecx, 3
mov r8d, 0x270a9c34
add r8d, 0x491719ce
sub r8d, 0x6f93be35
xor r8d, 0x1a3da7da
shl ecx, 2
shl ecx, 1
mov edx, r8d
ror edx, cl
mov dword [rsp - 0x1c], 0x10f5fd49
xor ecx, ecx
cmp qword [rbx + 0x38], rcx
jbe 0x14005390a
mov dword [rsp - 0x3c], 0x43307c52
lea r10, [rsi + rsi]
mov r11d, 0x696c25b9
sub r11d, 0x59334174
xor r11d, 0x2b3e640e
sub r11d, 0x3b067f4c
sub r10, r9
add r10, rax
mov dword [rsp - 0x20], 0x2c00604f
nop word [rax + rax]
movzx eax, dx
lea r9, [r9 + 2]
xchg rbp, rbp
xor ax, r8w
ror edx, 8
and ax, r11w
xchg r12, r12
ror r8d, 8
xor ax, word [r9 - 2]
inc rcx
mov word [r9 + r10 - 2], ax
mov rcx, rcx
cmp rcx, qword [rbx + 0x38]
jb 0x1400538d3
xchg r14, rbx
mov r14, qword [rsp + 0x30]
xchg r14, rbx
xchg r10, rax
mov r10, rdi
xchg r10, rax
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
nop
mov rdi, qword [rsp]
add rsp, 8
ret

Function at 0x140053930
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, rdx
mov qword [rsp + 8], rdx
xchg rbx, rdx
mov qword [rsp + 0x10], rsi
xchg r12, rdi
mov qword [rsp + 0x18], r12
xchg r12, rdi
nop
sub rsp, 8
mov qword [rsp], r14
nop
add rsp, 0x3e4d1414
sub rsp, 0x3e4d1434
mov r14, qword [rcx + 0x38]
xchg rdi, r15
mov r15, rdx
xchg r15, rdi
xchg rcx, rsi
mov rcx, rsi
xchg rcx, rsi
nop
movabs rbx, 0xffffffff7137c588
xor rbx, 0x79bbeb96
add rbx, 0x204a52df
xor rbx, 0x32fa605b
add rbx, 0x7fffffff
add rbx, 0x65d31f5a
inc rbx
xchg r9, r9
cmp word [rdx + rbx*2], 0
jne 0x1400539a7
lea r8, [r14 + rbx]
mov dword [rsp - 0x44], 0x5088ef70
xchg r14, rsi
mov rdx, rsi
xchg r14, rsi
mov qword [rcx + 0x38], r8
mov dword [rsp - 0x10], 0x35353580
call fcn.1400544e0
mov ecx, r14d
mov edx, 0x4de47654
sub edx, 0x36ae4837
xor edx, 0xee29e44
add edx, 0x15520bb
sub edx, 0x7980fd
and ecx, 3
mov rsp, rsp
shl ecx, 3
ror edx, cl
test rbx, rbx
mov rdx, rdx
je 0x140053a7b
lea rcx, [r14 + r14]
mov r8d, 0x4e66614c
sub r8d, 0x39c3e6c4
xor r8d, 0x2fde0bd
xor r8d, 0x165f9aca
sub rcx, rdi
mov dword [rsp - 0x30], 0x6566ea06
add rcx, rax
nop word [rax + rax]
movzx eax, dx
lea rdi, [rdi + 2]
mov dword [rsp - 0x1c], 0x2ecdc340
and ax, r8w
ror edx, 7
ror edx, 1
xor ax, word [rdi - 2]
xchg rsp, rsp
mov word [rdi + rcx - 2], ax
sub rbx, 1
jne 0x140053a4d
xchg r14, rbx
mov r14, qword [rsp + 0x30]
xchg r14, rbx
mov rax, rsi
xchg rsp, rsp
mov rsi, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x40]
nop
sub rsp, 0x23f96bd7
add rsp, 0x23f96bf7
pop r14
mov dword [rsp - 0x14], ecx
ret
Function at 0x140054266
Capabilities:
Encode data using xor

Disassembly:
xchg rbx, r12
mov qword [rsp + 0x10], r12
xchg rbx, r12
xchg rbp, r14
mov qword [rsp + 0x18], r14
xchg r14, rbp
nop
mov qword [rsp - 8], rsi
sub rsp, 8
push rdi
mov dword [rsp - 0xc], ebx
push rcx
mov qword [rsp], r14
nop
sub rsp, 0x1ea012b8
add rsp, 0x1ea01298
lea rsi, [rdx + 8]
xorps xmm0, xmm0
mov qword [rdx], rsi
mov r12, r12
xor edi, edi
movups xmmword [rsi], xmm0
mov r14, r9
xchg rdx, rdx
xchg r8, rbx
mov rbp, rbx
xchg r8, rbx
xchg rbx, rsi
movups xmmword [rbx + 0x10], xmm0
xchg rsi, rbx
mov rbx, rdx
xchg rsi, r10
movups xmmword [r10 + 0x20], xmm0
xchg r10, rsi
xchg r14, rdi
mov qword [rdx + 0x38], r14
xchg rdi, r14
mov rax, qword [rcx + 0x38]
xchg r15, r15
cmp r8, rax
jae 0x14005446c
sub rax, r8
mov r15, r15
mov qword [rsp + 0x40], r15
cmp rax, r9
cmovb r14, rax
mov dword [rsp - 0x38], 0x16f557a6
mov qword [rdx + 0x38], r14
xchg rbx, rax
mov rbx, qword [rcx]
xchg rbx, rax
xchg rcx, rbx
mov rbx, qword [rdx]
xchg rcx, rbx
lea r15, [rax + r8*2]
cmp rcx, rsi
mov rbp, rbp
je 0x1400542ef
call fcn.140099240
cmp r14, 0x18
jbe 0x140054325
mov r10, r10
lea rcx, [r14 + r14]
call fcn.140099540
mov qword [rbx], rax
test rax, rax
mov rcx, rcx
jne 0x140054335
mov qword [rbx], rsi
xchg r9, rdx
mov rdx, rdi
xchg rdx, r9
jmp 0x140054359
xchg rsi, r9
mov qword [rbx], r9
xchg rsi, r9
xchg rbp, rax
mov rbp, rsi
xchg rbp, rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rsp - 0x3c], ebx
xchg r13, rax
movups xmmword [r13 + 0x10], xmm0
xchg r13, rax
xchg rdi, rax
movups xmmword [rdi + 0x20], xmm0
xchg rdi, rax
xchg r10, r9
mov r10, qword [rbx]
xchg r10, r9
and ebp, 3
mov r8d, 0x292c547d
add r8d, 0x19e371d2
add r8d, 0x292e5954
sub r8d, 0x518dcf8c
shl ebp, 1
shl ebp, 1
shl ebp, 1
mov edx, r8d
movzx ecx, bpl
mov dword [rsp - 0x14], edi
ror edx, cl
cmp qword [rbx + 0x38], rdi
jbe 0x14005441e
mov dword [rsp - 0x40], 0x4a22c91b
sub r15, r9
mov ecx, 0x12c52ccd
xor ecx, 0x694f9d64
xor ecx, 0x3e2bd78e
sub ecx, 0x418f23dd
sub ecx, 0x412414b
nop dword [rax]
nop word [rax + rax]
xchg r14, r14
movzx eax, dx
lea r9, [r9 + 2]
xor ax, r8w
ror edx, 4
ror edx, 2
ror edx, 1
ror edx, 1
and ax, cx
mov dword [rsp - 0x34], 0x7375df6e
ror r8d, 4
ror r8d, 2
ror r8d, 1
ror r8d, 1
xor ax, word [r9 + r15 - 2]
mov dword [rsp - 0x2c], esi
inc rdi
mov word [r9 - 2], ax
cmp rdi, qword [rbx + 0x38]
jb 0x1400543cc
mov dword [rsp - 0x2c], 0x5da03a50
xchg r9, r15
mov r9, qword [rsp + 0x40]
xchg r15, r9
mov rax, rbx
xchg rbx, r9
mov r9, qword [rsp + 0x48]
xchg rbx, r9
mov rbp, qword [rsp + 0x50]
mov r12, r12
nop
add rsp, 0x7a8c7341
sub rsp, 0x7a8c7321
nop
mov r14, qword [rsp]
add rsp, 8
nop
add rsp, 8
mov rdi, qword [rsp - 8]
nop
add rsp, 8
mov rsi, qword [rsp - 8]
ret
xchg r12, rax
mov r12, rbx
xchg r12, rax
jmp 0x14005442c
Function at 0x140054b00
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008983d
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x1404a3fc0]
cmp qword [0x1404a40a8], 0
jne 0x1400895d0
mov r14, r14
syscall
ret

Function at 0x140054b20
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x28]
xchg r8, r8
mov byte [rsp + 0x28], al
jmp 0x140089e70
xchg rcx, r12
mov r10, r12
xchg rcx, r12
mov eax, dword [0x1404a4058]
cmp qword [0x1404a40a8], 0
mov dword [rsp - 0x44], 0x1a727db4
jne 0x1400895d0
syscall
ret

Function at 0x140054b40
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008965c
xchg r10, rcx
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x1404a3f90]
mov rcx, rcx
cmp qword [0x1404a40a8], 0
jne 0x1400895d0
syscall
ret

Function at 0x140054b50
Capabilities:
Execute syscall

Disassembly:
jmp 0x140089a8b
xchg r12, rcx
mov r10, r12
xchg r12, rcx
mov eax, dword [0x1404a3ff8]
cmp qword [0x1404a40a8], 0
mov dword [rsp - 0x14], esi
jne 0x1400895d0
syscall
ret

Function at 0x140054b60
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400896b3
mov r10, rcx
mov eax, dword [0x1404a3f98]
cmp qword [0x1404a40a8], 0
mov dword [rsp - 0xc], esp
jne 0x1400895d0
syscall
ret

Function at 0x140054b70
Capabilities:
Execute syscall

Disassembly:
jmp 0x140089c76
xchg rcx, r8
mov r10, r8
xchg rcx, r8
mov eax, dword [0x1404a4028]
mov dword [rsp - 0x1c], 0x4d927fd
cmp qword [0x1404a40a8], 0
jne 0x1400895d0
syscall
ret

Function at 0x140054b80
Capabilities:
Execute syscall

Disassembly:
jmp 0x140089866
mov r10, rcx
mov eax, dword [0x1404a3fc4]
mov dword [rsp - 0x3c], esi
cmp qword [0x1404a40a8], 0
jne 0x1400895d0
syscall
ret

Function at 0x140054ba0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140089689
mov r10, rcx
mov eax, dword [0x1404a3f94]
mov r10, r10
cmp qword [0x1404a40a8], 0
jne 0x1400895d0
syscall
xchg rbp, rbp
ret

Function at 0x140054bb0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140089c01
mov r10, rcx
mov eax, dword [0x1404a401c]
cmp qword [0x1404a40a8], 0
mov rsp, rsp
jne 0x1400895d0
syscall
ret

Function at 0x140054bc0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140089a3c
mov r10, rcx
mov eax, dword [0x1404a3ff0]
cmp qword [0x1404a40a8], 0
xchg r8, r8
jne 0x1400895d0
syscall
ret

Function at 0x140054bd0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140089a5f
xchg r13, r10
mov r13, rcx
xchg r10, r13
mov eax, dword [0x1404a3ff4]
xchg r11, r11
cmp qword [0x1404a40a8], 0
jne 0x1400895d0
syscall
xchg r12, r12
ret

Function at 0x140054be0
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400898e1
xchg r12, rcx
mov r10, r12
xchg rcx, r12
mov eax, dword [0x1404a3fd0]
cmp qword [0x1404a40a8], 0
xchg r8, r8
jne 0x1400895d0
syscall
ret

Function at 0x140054bf0
Capabilities:
Execute syscall

Disassembly:
movzx eax, byte [rsp + 0x58]
mov rbx, rbx
mov byte [rsp + 0x58], al
movzx eax, byte [rsp + 0x48]
mov byte [rsp + 0x48], al
jmp 0x140089e4d
mov r10, rcx
mov eax, dword [0x1404a4054]
cmp qword [0x1404a40a8], 0
xchg rbx, rbx
jne 0x1400895d0
syscall
ret
Function at 0x140054c10
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008977b
mov r10, rcx
mov eax, dword [0x1404a3fac]
mov rsi, rsi
cmp qword [0x1404a40a8], 0
jne 0x1400895d0
syscall
ret

Function at 0x140054c20
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008979e
mov r10, rcx
mov eax, dword [0x1404a3fb0]
mov dword [rsp - 0x1c], esp
cmp qword [0x1404a40a8], 0
jne 0x1400895d0
syscall
ret

Function at 0x140054c30
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400897c2
xchg r10, rcx
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x1404a3fb4]
mov dword [rsp - 0x20], ebp
cmp qword [0x1404a40a8], 0
jne 0x1400895d0
syscall
mov r15, r15
ret

Function at 0x140054c40
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400897ef
mov r10, rcx
mov eax, dword [0x1404a3fb8]
cmp qword [0x1404a40a8], 0
mov dword [rsp - 0x24], ecx
jne 0x1400895d0
syscall
ret

Function at 0x140054c50
Capabilities:
Execute syscall

Disassembly:
jmp 0x140089752
xchg rcx, r10
mov rcx, r10
xchg r10, rcx
mov eax, dword [0x1404a3fa8]
mov rdx, rdx
cmp qword [0x1404a40a8], 0
jne 0x1400895d0
syscall
ret

Function at 0x140054c60
Capabilities:
Execute syscall

Disassembly:
jmp 0x140089ca4
xchg rcx, r10
mov rcx, r10
xchg rcx, r10
mov eax, dword [0x1404a402c]
mov rsi, rsi
cmp qword [0x1404a40a8], 0
jne 0x1400895d0
syscall
xchg r14, r14
ret

Function at 0x140054c70
Capabilities:
Execute syscall

Disassembly:
jmp 0x140089813
xchg r9, rcx
mov r10, r9
xchg r9, rcx
mov eax, dword [0x1404a3fbc]
cmp qword [0x1404a40a8], 0
jne 0x1400895d0
mov dword [rsp - 0x20], ecx
syscall
ret

Function at 0x140054c80
Capabilities:
Execute syscall

Disassembly:
jmp 0x1400896d7
xchg r11, rcx
mov r10, r11
xchg r11, rcx
mov eax, dword [0x1404a3f9c]
cmp qword [0x1404a40a8], 0
jne 0x1400895d0
mov r10, r10
syscall
ret

Function at 0x140054c90
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008988a
xchg rcx, rbx
mov r10, rbx
xchg rcx, rbx
mov eax, dword [0x1404a3fc8]
cmp qword [0x1404a40a8], 0
xchg r13, r13
jne 0x1400895d0
syscall
ret

Function at 0x140054cc0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140089e9e
sub rsp, 0x531a0e89
add rsp, 0x531a0d69
lea rcx, [0x14008964f]
nop
mov qword [rsp - 8], rcx
sub rsp, 8
nop
sub rsp, 8
mov qword [rsp], rbp
nop
sub rsp, 8
mov qword [rsp], rsi
nop
mov qword [rsp - 8], rdi
sub rsp, 8
push qword [0x1404a40b0]
lea rsi, [rsp + 0x170]
lea rdi, [rsp + 0x28]
xchg r15, r15
mov ecx, 0x37c346df
sub ecx, 0x1dd1a0ad
xor ecx, 0x1ac400d
sub ecx, 0x13a14064
sub ecx, 0x4bca5cb
rep movsq qword [rdi], qword [rsi]
mov dword [rsp - 0x40], 0x21b11a5d
jmp qword [0x1404a40a8]
xchg rcx, r13
mov r10, r13
xchg r13, rcx
mov eax, dword [0x1404a405c]
cmp qword [0x1404a40a8], 0
mov dword [rsp - 0x44], esp
jne 0x1400895d0
syscall
ret

Function at 0x140054cd0
Capabilities:
Execute syscall

Disassembly:
jmp 0x14008972e
mov r10, rcx
mov eax, dword [0x1404a3fa4]
mov dword [rsp - 0x18], esi
cmp qword [0x1404a40a8], 0
jne 0x1400895d0
syscall
ret

Function at 0x140054ce0
Capabilities:
Execute syscall

Disassembly:
jmp 0x140089e23
xchg r10, rdi
mov rdi, rcx
xchg r10, rdi
mov eax, dword [0x1404a4050]
mov dword [rsp - 0x1c], edi
cmp qword [0x1404a40a8], 0
jne 0x1400895d0
syscall
ret